Probable security leak in v.10. called "Aurora".

[http://plus.google.com/u/0/photos/116651664550077808951/albums/5684898762064588369/5684898760770226818 See screenshot]
Then one logged in to Google sites account, and then opens http://genuslupae.co.nr/ which is third-party framed re-director to my own Google site, Aurora mixes http top frame with https child frame with private Google logged user data, at least e-mail address.
security.warn_viewing_mixed is set to true.
MSIE 8 do not warns me also, but it shows HTTP, not HTTPS, as properly asked by my top frame:
<frameset rows="100%,*" frameborder="NO" border="0" framespacing="0">
<frame name="conr_main_frame" src="http://sites.google.com/site/repertiziani/">
</frameset>

NO WAY!
While one (top frame owner) tries to access they "own" frames collection via javaScript located in the header section or in the event call string, it will be stopped just after window.frames[0]!
[20:29:53.186] Error: Permission denied to access property 'document'
love Aurora

Similar Messages

HT201303 I for got the answers to my security questions and my rescue address is misspelled is there anyway to fix my rescue address so i can reset my security question answers? I called support and they said it was nothing they could do!

I for got the answers to my security questions and my rescue address is misspelled is there anyway to fix my rescue address so i can reset my security question answers? I called support and they said it was nothing they could do! Can somebody please help!?

Did you not call the Account Security Team? It's pretty new.
Check the AppleCare number for your country here:
http://support.apple.com/kb/HE57
Call them up, and let them know you would like to be transferred to the Account Security Team.

Is there anyway I can reset my security questions without having to call Apple support?

Is there anyway I can reset my security questions without having to call Apple support?

The Three Best Alternatives for Security Questions and Rescue Mail
     1. Send Apple an email request at: Apple - Support - iTunes Store - Contact Us.
     2. Call Apple Support in your country: Customer Service: Contact Apple support.
     3. Rescue email address and how to reset Apple ID security questions.
A substitute for using the security questions is to use 2-step verification:
Two-step verification FAQ Get answers to frequently asked questions about two-step verification for Apple ID.

Caution: Apple Store POS system has a privacy and security leak

I made a small purchase in the Burlingame, CA Apple store the other day, receiving my receipt by email. No problem. 10 minutes later, I received another receipt. This time for someone else's transaction. The name, address, etc. of that customer included. There is a leak of information from one transaction to others, and no guarantee how much or how little information leaks.
I went back to the store and asked how this could occur. I was told that what happened is impossible. But it's not. I completed the customer satisfaction survey associated with the transaction. Normally, if you indicate dissatisfaction, the store manager gives a prompt phone call. No phone call. I sent email to the store. No response.
The software used in the point of sale system is not secure. You should avoid making purchases in store. Make them on-line to be picked up or shipped to you, but if you make a purchase at one of the roaming sales people, your privacy is at risk.

I have an email receipt which has name format of
emailreceipt_yyyymmddR<TransactionId>.pdf
The Transaction ID is the bar code printed on the receipt in case it needs to be scanned for returns, etc.
For the case where the email address was not yours, can you check that the name of the file and the transaction id on the receipt match?
The email comes from <storename>@apple.com.

Security exception when trying to call a DLL from an applet

Hi all,
I really hope someone out there can help me. I'm trying to call a windows DLL from an applet but always get some error when the call to the DLL comes. If I run it on the command line (calling a dummy main function that only calls the dll) I don't get any error. However, with the -Djava.security.manager, I get an ExceptionInitialiserError. When running it in a browser, I seem to get any of three errors, the above, securityAccessControlException (as I was expecting) and even NoClassDefFoundError.
I realise of course that this has to do with the permissions in effect but nothing seems to happen when I change the policy file, so I have to feeling that I'm chaning the wrong file. The one I'm using is the one the JRE entry in the registry is pointing to, Java Runtime Environment->CurrentVersion...
I even tried giving everything in the applet's directory AllPermission.
So what I'm wondering is this. Is there any way to check if your policies are actually working and when you update the files, what do you need to do to make the changes take effect?
Best regards,
G�sli

I have the same problem. Have you solved your problem, if so please let me know what the solution is.
Einar �rn

Memory leak in JCO when calling an ABAP-function that returns larg tables

Hello everybody,
I think discovered a memory leak in JCO when the calling functionions that have exporting tables with large datasets. For example the ABAP-function RFC_READ_TABLE, which in this example I use to retrieve data from a table called "RSZELTTXT", which contains ~ 120000 datasets. RFC_READ_TABLE exports the data as table "DATA".
Here a simple JUnit test:
http://pastebin.ca/1420451
When running it with Sun Java 1.6 with standard heap size of 64mb I get a heapsize OutOfMemory error:
http://pastebin.ca/1420472
Looking at the heap dump (which I unfortunately cannot post here, because of it' size), I can see that I've 65000 char[512] array objects in my heap, which don't get cleaned up. I think, each char[512] array stands for one dataset in the exporting table "DATA", since the table contains 120000 datasets, the heap is full after the first 65000 datasets are parsed. Apparently, JCO tries to read all datasets in memory instead of justing reading the dataset to which the pointer (JCoTable.setRow(i)) currently points to and releasing it from memory after the pointer moves forward ...
Did anybody else experience this?
Is SAP going to remove to issue in upcoming versions of JCO?
regards Samir

Hi,
Check Below links
1) How To Analyze Performance Problems JCO
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/3fbea790-0201-0010-6481-8370ebc3c17d
2) How to Avoid Memory Leaks
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/c3e598fe-0601-0010-e990-b8622840c8c2
Salil...
Edited by: salil chavan on Jun 2, 2009 5:21 AM

How can you get your apple security questions with out a call, How can you get your apple security questions with out a call

please help

1. See my User Tip for some help: Some Solutions for Resetting
    Forgotten Security Questions: Apple Support Communities.
2. Here are two different but direct methods:
    a. Send Apple an email request at: Apple - Support - iTunes Store - Contact Us.
    b. Call Apple Support in your country: Customer Service: Contacting Apple for
        support and service.
3. For other queries about Apple ID see Frequently asked questions about Apple ID.
4. Rescue email address and how to reset Apple ID security questions
5. For online assistance use Apple - Support - Express Lane

Forgot my security questions, but I cant call anyone. Help me!

So I made the security questions a few years ago, and I just downloaded the app for my PC a few hours ago. I cannot call anyone because I broke my phone, and I have no home phone. I can't seem to find my Rescue E-Mail, because I'm pretty sure I never even made one. Even if I did, I don't know it so that's ANOTHER problem. I just want to buy some songs. Won't work on my iPod, so my laptop is my last resort. PLEASE HELP ME!!!

The Three Best Alternatives for Security Questions and Rescue Mail
    1. Use Apple's Express Lane.
          Go to https://expresslane.apple.com ; click 'See all products and services' at the
          bottom of the page. In the next page click 'More Products and Services, then
          'Apple ID'. In the next page select 'Other Apple ID Topics' then 'Forgotten Apple
          ID security questions' and click 'Continue'. Please be patient waiting for the return
          phone call. It will come in time depending on how heavily the servers are being hit.
     2. Call Apple Support in your country: Customer Service: Contacting Apple for support or
          Apple ID- Contacting Apple for help with Apple ID account security. Ask to speak to
          Account Security.
     3. Rescue email address and how to reset Apple ID security questions.
How to Manage your Apple ID: Manage My Apple ID

Adding WS Security in SOAP header for calling soap services from PI

When i am calling a wss enabled webservice from soapui with the header parameters
Username , Password and Password Type - PasswordText , it is able to get results. The soapui tool automatically adds the following in the soap header -
     <wsse:Security soapenv:mustUnderstand="1" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">
         <wsse:UsernameToken wsu:Id="UsernameToken-9368150" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd">
            <wsse:Username>xxxxx</wsse:Username>
            <wsse:Password Type="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-username-token-profile-1.0#PasswordText">xxxxx</wsse:Password>
            <wsse:Nonce>aOA1P6t2hJPRyuraQ/IliQ==</wsse:Nonce>
            <wsu:Created>2009-07-10T14:58:33.781Z</wsu:Created>
         </wsse:UsernameToken>
      </wsse:Security>
However , in PI when the following configurations are made -
Web Services Security option selected in soap receiver adapter
In Receiver Agrrement -
Security Standard - http://docs.oasis ....
Security Procedure (Request) - None
Security Procedure (response) - None
the user tokens don't seem to generated and it is giving an authentication error . Is there any process of generating this in the outgoing soap header from PI.
SOAP Axis framework is not installed at present and working on PI 7.1 SP6.
Looking forward for your replies

same issue for me too.
Try using WS adapter on receiver side .
If you are able to attach SOAP header with WSSE fields using SOAP adapter at reciever channel let me know how you did it.

How can I debug leaks caused by ODBC calls in app linked with libtt.so?

Hi,
we are using TimesTen Release 7.0.5.0.0 on Solaris 10.
and we are using libtt.so to link our application and connect using ODBC calls.
The problem is that we have made some serious changes to our large code base and now we see a leak.
Here is what I know:
1) Although it is easy to reproduce it doesn't seem to follow a clear pattern. ie. the amount leaked isn't a direct function of the number of request or time spent.
2) When our application is linked with libttclient.so there is no leak at all.
3) prstat shows increments of 4 MBytes each time it leaks.
So I suspect it is because the memory isn't freed but how can I tell which ODBC calls are causing it?
Is there a debug option I could turn on to help with this?
Perhaps something in ttTraceMon?
Thanks

Hello Serge,
Just a note that we often times get this type of alarm about memory leaks in TimesTen when using the libtt.so library when using tools such as top or prstat to gage memory consumption. The reality is that these commands are not a good way to look for memory leaks / memory utilization when using TimesTen in direct connect mode. The TimesTen database resides in shared memory and so the fact that prstat shows big or increasing numbers should not be alarming.
The only reliable way to check for memory leaks is to use a tool designed exactly for that such as Purify, which the TimesTen development team uses extensively and so it's unlikely that you'll find memory leaks in TimesTen.
Have you found that memory is being exhausted after a period of application runtime and transaction iterations?
You could use ttTraceMon and work with TimesTen support/engineering to extrapolate and answer from the trace it gaves, but unfortunately, there's rarely an easy way to answer queries on what is going on in either the Permament or Temporary partition.
I'd first make sure that there is indeed a problem but running your application workload for some time. My suspicion is that the prstat command results are being misleading once more.
Regards,
Henri

Why do u get a security pop up message to call a number

when i am on a web site other pages pop up and i some times get a message saying to call a number i dont know how to stop it.

1. Download the free AdwareMedic by clicking “Download ” from here
     http://www.adwaremedic.com/index.php
   Install , open, and run it by clicking “Scan for Adware” button   to remove adware.
   Once adware is removed, quit the app by clicking AdwareMedic in the menubar
    and selecting “Quit AdwareMedic”.
Safari
2. Safari > Preferences > Extensions
    Turn those off one by one and relaunch Safari again to test.
3. Safari > Preferences >Security > Web content:
    Uncheck the box beside "Enable Javascript".
    Launch Safari.
    Recheck the box beside "Enable Javascript".

How to reset the security questions without the phone call ?

Hi
i want to reset my security question ( and make the rescue mail ) in order to puchase apps from app store.
I can not make the call since i am coming for a business tripo abroad .
How can i do it online ?

If you are not currently in the country where your account is based then you won't be able to download any content until you return to it - you need to be in a country to use its store.
If you don't already have a rescue email address on your account then you will need to contact Support in your account's country to get the questions reset, which is likely to be by phone as they need to confirm your id and that it's your account - you won't be able to add a rescue email address until you can answer your questions.
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset you can then use the steps half-way down this page to add a rescue email address for potential future use : http://support.apple.com/kb/HT5312

HT5312 How do i reset my security questions without having to call some one?

im trying to buy an album on iTunes store for the first time and it's saying i need to put in my security questions and answers, but i cannot remember them. is there any way i can reset these answers without having to go on the phone to support??

Alternatives for Help Resetting Security Questions and Rescue Mail
     1. Apple ID- All about Apple ID security questions.
     2. Rescue email address and how to reset Apple ID security questions
     3. Apple ID- Contacting Apple for help with Apple ID account security.
     4. Fill out and submit this form. Select the topic, Account Security.
     5. Call Apple Customer Service: Contacting Apple for support in your
          country and ask to speak to Account Security.
How to Manage your Apple ID: Manage My Apple ID

Forgotten security question! and nobody call me!

I want to purchase app in iTunes Store, but unfortunately I forgotten the security password. I try to scheduled a call from apple, but nobody been calling me.
What I got is this email reply-
We're trying to call you at the phone number below, but there's no answer. We'll try to call again soon.
- But I confirm that nobody is calling me! -

Ask iTunes Support and ask them if they can remove the balance from your account so that you can put your correct address on your account (you have to be in the US to use the US store) : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page.
When you have your Malaysian address on your account you can contact Malaysian support : http://support.apple.com/en-us/HT5699#M

How can I change my security questions without having to call apple?

I have a stutter and I can't talk on the phone. It says I have to call Apple Support to sort out the problem with my security questions. Is there any other way I can sort it out without having to call?

Click here, fill out the form, and see what Apple says.
(108459)

Probable security leak in v.10. called "Aurora".

Similar Messages

Maybe you are looking for