Securing Content

I am trying to write the code of out website, a fine art site
and I need to secure the images, ie, prevent viewers from printing
images of the dieplayed content. I have seen sites that will not
allow the viewer to "Right Click" and select print. and expample is
http://www.judyleonardphotography.com/
and select online proofing. this links to photobiz.com
This site uses CFM. I also sell photos and I need to be able
to secure those images. this site will not respond to Print Screen
or any of the normal methods of saving images from the web.
How could I do the same thing?

Tks for the replys. Most of ht einfo her I have already
considered. There is an old addage that applys here as well.
"Locks are only good for keeping honest people out." and for
the most part, nost customers are in fact honest. I re-size all my
images to a resolution of 70-100DPI and a sixz of 640x480. This
size is fine for viewing images but causes tiling of prints above
2.5x3.5". Fortunately, most internet users are not aware of the
workaround mentioned in the replys.
Knowing that nothing in this world is sacred, the idea is to
provide the best "Lock" I can. The idea is to frustrate the average
user to the point of doing what they need to do to begin with.
I am not familiar with "Flash" programing and implementation.
I would appreciate any information that would help me in this
endevour.
Unfortunately, my CF skills are somewhat rusty (truth be
know, I think the Nut is seized to the bolt!). I developed a couple
of Apps but have not done anything for almost 3 years.

Similar Messages

Is there any addon (or somthing else) to SIMULATE ie9s "display only secure content"

i tried https everywhere and forcing with no script fruitlessly
since firefox does not display a detailed message, here is a screen shot from chrome: http://image.bayimg.com/baadpaaee.jpg
here the OFFICIAL answer from m$: "This message is telling you that there may be both secure and non-secure content on the page. Secure and non-secure content, or mixed content, means that a webpage is trying to display elements using BOTH secure (HTTPS/SSL) and non-secure (HTTP) web server connections. This OFTEN happens with online stores or financial sites that display IMAGES, banners, or scripts that are coming from a server that is not secured. The risk of displaying mixed content is that a non-secure webpage or script might be able to access information from the secure content."
certain thumbnails of close friend notifications and app requests NULLIFY the encryption and firefox doesnt padlock unlike chrome
so how to FILTER unencrypted info FROM the encrypted :)
"An attacker can replace any unprotected, unsecure HTTP content on an otherwise secure, HTTPS page with a “poisoned” version. For example, when you visit https://www.youtube.com with different browsers and a man-in-the-middle attacker present, you’ll see different results. Most other browsers just show the unprotected content automatically, allowing a spoofing or information disclosure attack"
this pees me out :D

Hmm, well, many hours later, I have a Greasemonkey userscript that clears many insecure elements, but it doesn't work on scripts. By the time I edit or delete the script tag, Firefox has already requested the script. So I think it will take a real add-on.

Accessing secured content area view from JPDK

Is it possible to access the secured content are views from JPDK?
For example if I am logged on as user USER1 in Portal, is it then possible to access WWSBR_ALL_ITEMS as USER1?

hi,
You can access Content Area APIs from any user using JDBC calls. But, you may have to grant 'EXECUTE' privileges on those procedures (& SELECT privilege if its a DB object like Table, VIEW).
If you are using PL/SQL procedures in your application, you can directly access them through PL/SQL calls, otherwise you have to use JDBC.
--Sriram

Crawling iplanet portal server secured content.

Hi, All,
I am new on the iplanet portal server. Try to come up a solution to crawling
the secured content with a valid user name and password. What this the
authentication mechanism of iplanet portal server keep the user's session?
is iPlanet Portal server using cookie to store the session id or pass it
back and forth as a parameter? Where can I find more information about this?
Any response is appreciated!
Hao Huang

currently there is no testing tool available as a part of the product.

Only Secure Content is diplayed message in IE 9

Hi,
We are using windows 2008 R2 servers and Windows 7 Sp1 Enterprise clients.
The Windows 7 clients are using IE 9.0.25 256 bit.
On one of our external trusted websites we get "Only secure content is displayed" message. When we click on "Show all content", it then displays another message saying the "web browser needs to resend the information you've
previously submitted". It then has two boxes cancel or retry. If we select retry, it kicks us out of the website. So basically, I want to disable this message for the trusted sites zone, so that it displays mixed content by default.
I have followed the info from this previous post, although it is for ie 8:
http://social.technet.microsoft.com/forums/windowsserver/en-US/cbdd4449-58b3-4154-9c8a-d4c72d0a89da/https-error-in-ie8
Which says to amend the following group policy: Computer Configuration\Administrative Templates\Windows Components\Internet Explorer\Internet Control Panel\Security Page\Internet Zone\Display mixed content\Enabled\Options\Enable
I have done this and confirmed it has taken the setting by looking at the IE trusted zone custom settings and also the web page is in the trusted sites zone , but I still get the message. Is there any other group policy that I can alter?
Is there a difference between ie8 and ie9 for this setting?
I have even tried adding this for the user config as well, but it still displays the message and it won't let us go any further into the purchasing system.
Thanks
Jaz

Hi Jaz,
This problem in IE9 may be due to Date and Time Settings.
Checkout the below thread on similar discussion,
http://social.technet.microsoft.com/Forums/ie/en-US/3305deb3-2276-4faf-a647-2461799da9d9/how-do-i-stop-ie-9-from-blocking-websites-from-displaying-content-with-security-certificate-errors
Regards,
Gopi
www.jijitechnologies.com

Bypass login screen while accessing web viewable URL of secure content

As a Anonymous user, when i click any secure content web viewable URL, UCM is
prompting for credentails. Please help me How can we avoid login for anonymous
while accessing web URL's.
This is for UCM 10gr3 with Apache http server
Thanks in advance

In a Java filter (AlterUserCredentials), we are giving UCM_LOCAL_ROLE (UCM role) to the anonymous user based on cookie value. LOCAL_ROLE has read access to LOCAL security group content. If a user is accessing URL with in corporate network, cookie value is Local else cookie value is external. This is working perfect for GET_SEARCH_RESULTS and DOC_INFO.
Whereas when we access LOCAL security group content web viewable URL’s as anonymous user, UCM is prompting for credentials (log in screen). Before reaching the filter code, UCM is prompting for credentials.
Please let us know, how to bypass this login screen for secure content web url access as a anonymous user.

HT5228 security content ??

hello,
regarding this:
About the security content of Java for OS X Lion 2012-002 and Java for Mac OS X 10.6 Update 7
why don't i get these updates when i check for updates in software preferences?

If you're on 10.6 or 10.7 and  > Software Update doesn't show the update, you're good.
This update isn't displayed if Java is not installed.
And if you don't have Java installed - and that's the default on 10.7 - then you don't have the vulnerability. If you really, really want the patch installed, then you'll have to load Java first. But if you're not using Java, I wouldn't recommend installing it.
If you do trigger the Java download (as has happened to a few folks that were confused by this and then inadvertently triggered the Java installation), you'll get a dialog box asking you about installing Java, and you'll either confirm the installation (to install it) or click the Not Now button (to avoid installing Java).

HT5228 security content of Java update for 10.4...?

Will there be a security content of Java update for older versions of OS X versions such as 10.4.11?

1Gladious wrote:
Side note: Never had a problem with security on the eight year old bangger G5, but had repeated problems with internet connectivity, and once with an email account since mid October 2011. I suspected that my computer IP(?) was being used by a spammer at thier pleasure. This fits the timeline published in the BBC article. I wonder if it has been determined what percentage of the Macs compromised were using OS systems from antiquity? Do you think I should get a specific security software, or just a new machine with a top OS?
It was problably something else. Few malware authors ever bothered to write PowerPC code. Having intel chips makes things a bit easier because the malware can be cross-platform a low-level. The only thing they have to worry about are operating system differences, not chip differences.
I suggest asking your question in a forum dedicated to that model machine. There are still plenty of people using those machines and have experience with such problems. It is likely just hardware incompatibilities. Older hardware sometimes doesn't want to talk with newer hardware.

HT6011 SUPPORT TOPIC: About the security content of OS X Mavericks v10.9

SUPPORT TOPIC: About the security content of OS X Mavericks v10.9
This is a lot of technical information about security.
1. How does it translate to the average user?
2. Have the issues been resolved and included in the latest UPDATE?
Many thanks.
beebee08

1. How does it translate to the average user?
It doesn't.
2. Have the issues been resolved and included in the latest UPDATE?
That list is what known vulnerabilities have been fixed.

HT5704 About the security content of iOS 6.1.3

About the security content of iOS 6.1.3

You can comment to Apple on your issues here:
http://www.apple.com/feedback/iphone.html
assuming that Apple Support has not been able to help you fix any problems.
As to when any further updates will be released, none of us here will know. We'll just have to wait and see.
Regards.

Gaming/secure content

When playing facebook games (farmville), the following message comes up - "Only secure content is displayed. What is the risk? Show all content." If you happen to not see the message or don't click to allow this, you cannot "share" gifts/messages in the game. How can you set the PC to always "show all content"?
This question was solved.
View Solution.

Hi,
Close any open IE windows.
Open windows Control Panel, open Internet Options, click the Security tab and click Custom Level. About half way down, under the heading Miscellaneous, there is an entry for 'Display Mixed Content' - click Enable and then Ok, then click Apply and Ok in the previous window.
Regards,
DP-K
****Click the White thumb to say thanks****
****Please mark Accept As Solution if it solves your problem****
****I don't work for HP****
Microsoft MVP - Windows Experience

How do I stop the notification pop-up that 'Only secure content is displayed' that comes up nearly every time when I move to a new web page?

This notification pop-up appears almost every time I navigate to a new page which is really annoying when I am trying to study my university subjects online.

Firefox used to have a warning somewhat like that, but now a mix of secure and insecure content is indicated by a "globe" icon instead of a padlock icon next to the URL. The insecure content is not actually blocked.
''Edit: Apparently now you can block the insecure content by making a change in about:config. See cor-el's reply below.''
It is possible you have an extension that blocks insecure content and displays that message? You could check the following tab, and use the Options button to see whether you can change the behavior:
orange Firefox button (or Tools menu) > Add-ons > Extensions category

UCM 11g - how to accessing secured content using open WCM service

Hi All,
Does any one has an idea on how to access the contents that are checked in with security groups as "Secured". If the contents are checked in as "Public" then, we can easily access the same with the following open WCM servervice:l
http://<ucm_server>:16200/cs/idcplg??IdcService=WCM_PLACEHOLDER&dataFileDocName=<data_file_name>&templateDocName=<region_template_name>
Regards,
Sanjay

Hi Donato,
Did you ever get an answer for this issue? I'm trying to get a similar case working and would be curious on how you ended up doing this...
For what I know so far, this may help you:
1) The trigger-EBSProfile requires you to pass th afGuid value, this value, is created automatically by the IPM process, basically, when you click the MA button in EBS, the SOA call to IPM does 2 things:
First, it creates a row in the AFGRANTS table in the WCContent DB, this basically overwrites UCM security and give the user access to the documents, this table has the information of the EBS record (Business Object, and Primary Key) as well as the auto generated afGuid
Second it sends back the URL to WCContent, mainly "/cs/idcplg/_p/min/af/trigger-EBSProfile?IdcService=GET_SEARCH_RESULTS_FORCELOGIN" and passes the afGuid created in the first step, which identifies the EBS record.
So if you need to make direct calls to UCM under the trigger-EBSProfile you will need to manually (custom) add the afGuid and details of the EBS record to the table, the entries in this table get removed automatically based on the dexpirationdate value
2) While the IPM SOA call overwrites the UCM security, if you have implemented your own security structure (assign a different security group to the documents and give the users access to it) you could make calls directly to UCM bypassing the "trigger-EBSProfile"..
for example, in the call you were trying to make originally to DOC_INFO, if you know the dDocName of the document, you can simply call the service as "/cs/idcplg?IdcService=DOC_INFO_BY_NAME&dDocName=POC2001" (I use DOC_INFO_BY_NAME because you need to know the dDocId for DOC_INFO)
You can do the same with other services like checkin/checkout etc, (for checking you will need to pass the additional parameters dfBusinessObejct, dAFBusinessObject and dfApplication to link the document to the EBS record)
Regards,
Juan Becerra

How can I secure content on my website?

I'm almost finished my Dreamweaver MX website. I've added some widgets and YouTube videos. The problem is that sometimes the videos are removed or names changed on YouTube, OR in the case of the widgets, they are unstable, i.e. fully functional one day then a blank space where it used to be the next. Is there any way of securing these or automatically updating them?? It's a shame I can't just nail them to my site so that nobody else can touch them externally :0)

If you want to control the content, then you need to create your own content. It sounds like you just have a fancy RSS feed aggregator that relies too heavily on external content.

How to publish a file as secure content, i.e https: ??

https: ??

Hey there,
Animate doesn't publish to HTTPS, but this is something you can control on your own when uploading to a secure server. Also be aware that the Animate runtime is served over HTTP so you'll have to upload this component to serve from your server as well.
Sarah

Securing Content

Similar Messages

Maybe you are looking for