Over the weekend, the Common Ground Foundation celebrated Oscar winner, activist, and musician Common at Perillo Rolls Royce in Chicago.The star studded gala and fundraiser featured a special performance from Common and John Legend of the Oscar-winning original song ” Glory” from Selma, along with a celebrity appearance from Matt Forte of the Chicago Bears. Funds raised at the gala supported Common’s organization The Common Ground Foundation.“I started the Common Ground Foundation because I wanted to help,” said Common. “Most of all help people to help themselves. I always believed that if we started with the youth then we would be planting the seeds for our future to blossom. Give the children a sense of hope, self-esteem, and love that will better the world… I think making a difference in the lives of others is life’s greatest purpose. I walk this path with faith knowing that the Common Ground Foundation will Change the World.”The Common Ground Foundation serves youth ages 13-17 from Chicago’s South and West Side communities. The organization focuses on character development, creative expression, nutrition, and money management. The organization helps youth find their voice and make positive contributions to society.Visit The Common Ground Foundation website to learn more.Copyright ©2015Look to the Stars
Common Ground Foundation Celebrates An Evening Of Glory
October 16, 2019
RABAT – Hundreds of protesters gathered Thursday to demand change on the anniversary of Morocco’s pro-reform movement, born out of Arab Spring unrest three years ago, but weaker than it once was.Members of the February 20 movement were joined in Rabat by unemployed school leavers and Berber activists as they waved banners and chanted slogans denouncing corruption, injustice and despotism outside parliament, an AFP journalist reported.A separate demonstration was planned in Casablanca. But the numbers — about 300 hundred protesters in Rabat — were far smaller than in 2011, when tens of thousands took to the streets to call for wholesale democratic reform.“Nothing has changed. Corruption remains. The government that came to power has not been able to respond to the demands of the people,” veteran human rights activist Khadija Ryadi told AFP.In response to the protests in 2011, the Moroccan king introduced a new constitution designed to curb his near-absolute powers and held snap polls in November that year that saw the moderate Islamist Party of Justice and Development elected for the first time.The PJD, which had campaigned in particular to battle corruption, brought real hope of change, and many activists remain disillusioned by the little that the Islamists have achieved since and that few of the constitution’s provisions have been implemented.“There is disappointment that very little has changed, but change will not happen in a few months,” said Qods, 23, attending Thursday’s protest.“The movement has been weakened, but no one can deny that it gave us a new constitution and an election that brought a new government to power.”“Its other great achievement is that there is no more fear to demand change, whether social or economic, even if the regime responds to those demands with repression,” the student added.Analysts say the turmoil in other North African countries where the 2011 uprisings toppled decades-old dictatorships, notably Libya and Egypt, was a key factor behind the decline in support for the February 20 movement.The election of the Islamist party and the sometimes harsh repression of protests also played their part.Scores of protesters have been arrested since the movement began, and activists say more than 30 of its members remain in prison.
Updated at 14.54MAN UNITED BEAT Crystal Palace 2-0 this afternoon, however their first goal came in controversial circumstances.Ashley Young earned a penalty after what appeared a clear foul by Kagisho Dikgacoi, with the defensive midfielder subsequently receiving a red card for being the last man.However, replays revealed that the infringement seemed to take place outside the box.Ironically, Young had previously been booked for attempting to win a penalty with a clear dive (see below).And Wayne Rooney subsequently curled a free-kick into the net to double United’s advantage and secure their win.YouTube credit: Melbourne ArsenalYouTube credit: Goals Arena HDYouTube credit: SuperSportHD2YouTube credit: Harold CanerAs it happened: Manchester United v Crystal Palace, Premier League>41 mistakes Giovanni Trapattoni made as Ireland manager>
La nouvelle boutique iPad d’AmazonAfin de se conformer aux règles d’Apple sur l’achat in-app, Amazon a complètement revu son magasin en ligne pour iPad.Contraint de retirer tout lien vers sa boutique de son application Kindle pour iPad l’été dernier, Amazon a profondément revu celle-ci. Baptisée iPad Kindle Store, elle s’avère plus agréable à utiliser que la boutique Kindle traditionnelle. Igeneration explique qu’elle se présente sous la forme d’un bande horizontale d’ouvrages recommandés, la partie inférieure comprenant divers classement. À lire aussiMars, Huawei, Amazon, les 4 actus sciences que vous devez connaître ce 25 maiLe moteur de recherche est assez facile d’utilisation et les fiches des œuvres présentées sont complètes et claires. Pour obtenir un aperçu ou l’ouvrage complet, Amazon utilise toujours la technologie Whispersync, qui consiste à ne pas télécharger de fichier à proprement parler dans le navigateur, mais l’application Kindle, connectée au compte Amazon de l’acheteur. Une fois cette opération réalisée, elle se met à jour automatiquement et récupère les derniers achats. Le 14 janvier 2012 à 18:00 • Maxime Lambert
Sexy Robots Help Cure Erectile DysfunctionApple, Samsung Join FDA’s Digital Health Software Program When we cover medical and health stuff here on Geek.com, we’ve always got an eye towards the future. That’s where we’re going to spend the rest of our lives, after all. But to truly understand where we’re going, you have to look at the past as well. And ancient history has some pretty surprising stuff in it. Case in point: I ate way too much meat lover’s pizza a few weeks ago because I am a true lover of meat, and it gave me heartburn.Like millions of Americans, I reached for an antacid to handle it. Whether you’re enjoying the chalky fruit flavor of a Tums or the classic plop plop fizz fizz of an Alka-Seltzer, Americans spend over $10 billion on antacids every year. So they must work, right?They do, but how humanity discovered that fact is a pretty fascinating journey. Let’s hop into the Wayback Machine and take a deep dive through history to explore how we made bubblegut a thing of the past.via geonice.comThe Cradle Of CivilizationWhat we know about ancient medicine is patchy at best, but oddly enough we have a pretty clear picture of the invention of antacids thanks to some clay tablets from ancient Sumer that have managed to weather 3,500 years of history. They were found on the Tablet of Nippur, which is also the earliest description of the biblical Great Flood known to man. On the tablet, there is a description of a curative given to those suffering from stomach pains consisting of a mixture of milk, peppermint and sodium carbonate.That last ingredient is the magic one here. Sodium carbonate is a salt that was extracted from the ash of certain plants. When diluted in water, it dissolves into carbonic acid, a weak acid, and sodium hydroxide, a strong alkaline. The Sumerians experimented with that ash and found that it provided relief for tummy pains. But why?Most digestive pain can be traced back to a single cause: too much acid in your stomach. Obviously, you need that potent hydrochloric acid to break down your foodstuffs into energy, but the body isn’t awesome at regulating it. All sorts of things can cause you to make too much stomach acid, from greasy food to stress and bacterial infections. That acid is then expelled upwards to the esophagus, causing the painful chest sensation of heartburn, or down through the system. Either way, it’s not good.So the alkaline in sodium hydroxide neutralizes the acid in the stomach, creating water and a little salt residue. The Sumerians had no idea as to the chemical basis of their antacid treatment. They just knew that it worked, and carbonate salts would continue to be used for centuries. In fact, the active ingredient in Alka-Seltzer is bicarbonate of soda.via glassbottlemarks.comAmerican InnovationThat wasn’t the only milestone in the history of stomach pain, though. Carbonate antacids were used for centuries, but doctors monkeyed around with other substances in the meantime. One of the most promising was magnesium hydroxide, a compound that originates as the mineral brucite and offers a similar low pH value, allowing it to neutralize stomach acids in a gentler way than calcium carbonate. Pioneering Irish physician James Murray used a solution of it in 1829 to cure the digestive ails of the Marquis of Anglesey, a feat for which he was knighted.The word of that accomplishment spread around the world, and it kickstarted a new era in antacid experimentation. In 1872, an English pharmacist named John Henry Phillips patented Milk of Magnesia, a stable solution of magnesium hydroxide in water that he sold at retail. It quickly became a massive success, offering a growing America a way to handle the ailments caused by the New World’s food.via istockphoto.comHitting The SourceThe common quality of both of those antacid methods is that they handle excess stomach acid after it happens and you’re already feeling the burn. This isn’t ideal, so in the 20th century the pharmaceutical industry decided to reverse-engineer the problem and see if they could stop excess stomach acid before it happened.There were other reasons for this research, too – the discovery of “milk-alkali syndrome,” a medical condition that started to show up in the 1920s as people treated peptic ulcers with calcium carbonate. The intake of too much calcium caused excess alkalinity and could lead to death, so it wasn’t something that could just go ignored.Scientists at the Smith, Kline and French Laboratories used the knowledge that histamines spurred acid secretion to develop an antagonist for the histamine receptors in the stomach, blocking them from receiving the signals to make more fluid. After a few false starts, including some that were successful but too toxic for human use, they came upon cimetidine.First sold under the brand name Tagamet, Cimetidine was first sold to the public in 1977 and inspired numerous other drugs along the same principles. Not only do they last significantly longer than previous chemical antacids, but they can also be taken in advance of a meal to prevent any reflux from happening. This clearer picture of the stomach’s operation gave doctors new leverage in treating heartburn and gastric distress.via baltgames.lvThe Future Of Your StomachThe basic principles of antacids haven’t changed much in the last few thousand years, but that doesn’t mean doctors aren’t always trying to find new ways of making our lives more comfortable. Interestingly enough, scientists are now finding that some of these antacids could have a new life as cancer-fighting drugs. Cimetidine not only blocks histamine receptors in the stomach, but might actually do the same for cancer cells, preventing them from replicating.That’s the funny thing about medical science. You start out working on one problem and end up solving others by accident. The ancient Sumerians probably stumbled across calcium carbonate in plant ash by accident, but were on the ball enough to recognize that it helped them out. Call it a “gut feeling,” if you will.So what’s next for the health of your stomach? Probiotics and diet have been undergoing a pretty big upswing in American culture, with more people aware that the complex ecosystem of gut bacteria has deep effects on just about every part of our daily life. Cultivating a healthier environment down there can do more than just about anything else to stem the tide of painful acid, but are people really willing to change the way they eat? We’d bet on seeing a procedure that measures and stabilizes the population artificially, but we’re sort of in the weeds with this one. Whatever happens, make sure to drop a bicarb and soothe away the stomach pain. We’ve been doing it for long enough.Let us know what you like about Geek by taking our survey. Stay on target
Stay on target Fantastic Beasts And Where To Find Them1/11When we talk cultural longevity, few recent franchises have the gas that Harry Potter’s shown. Books, movies, video games, theme parks – it shows no signs of slowing down soon. And with Fantastic Beasts And Where To Find Them coming out soon, a perfect tie-in already exists. The Potter bestiary is diverse and fascinating, and the storyline is written for you – a bunch of magical critters escape from an enchanted briefcase and you have to get them back all over your town. Throw in waving your phone like a wand and we’re done.<><> Battle Team Rocket in New ‘Pokemon Go’ Update‘Pokemon Sleep’ Puts Pocket Monsters in Your Dreams 
I maintain that all of the recent Pokemon popularity we’ve seen this year, even more so compared to the high baseline popularity has maintained for over two decades, is in reaction to the astronomic success of Pokemon Go. Earlier this month we reviewed Pokemon Let’s Go Pikachu and Eevee which merge Pokemon Go’s mobile connectivity and casual catching mechanic with the structure of a traditional Pokemon RPG. And if that’s too much gameplay for you, you can also watch the captivating trailer for the live-action Pokemon: Detective Pikachu feature film in real movie theaters next year.But all this time Pokemon Go itself has also been steadily humming along, adding new monsters from new generations as well as layering on new mechanics like gyms and trading and raid battles. While Pokemon Let’s Go tried to turn a real Pokemon game into Go, Go has been turning into a real Pokemon game. And its next evolution is coming soon with the addition of PvP trainer battles.Get prepared… Trainer Battles are coming soon to Pokémon GO #GOBattle pic.twitter.com/AUWyhNGlT7— Pokémon GO (@PokemonGoApp) November 30, 2018Battling other trainers is a core tenet of Pokemon. The whole point is to capture creatures, train them, and prove they are better than the ones your scrub friends got. But so far Pokemon Go has been limited to PvE (player vs environment) encounters like catching wild Pokemon or battling Pokemon someone had previously left behind in a gym.Niantic had been teasing trainer battles for nearly a year. But this tweet, while not confirming a date, finally lets us know that the feature is for sure coming soon. There are still a lot of details to learn though, like how players trigger these battles and what the battle system looks like exactly. How much competitive training strategy from “real” Pokemon games will carry over? With trainer battles, what meaningful differences will there be left between Pokemon Go and “real” Pokemon games?For more on Pokemon watch us talk about why Pokemon Red and Blue are games to play before you die and check out our Super Smash Bros. Ultimate guides on Pokemon fighters like Pikachu, Jigglypuff, and Mewtwo.Other Games That Should Rip-Off Pokemon Go
min read November 3, 2012 Free Webinar | Sept 5: Tips and Tools for Making Progress Toward Important Goals Attend this free webinar and learn how you can maximize efficiency while getting the most critical things done right. When people think of the most innovative companies, they think of ones that are coming out with new and amazing technology. The push for self-driving cars or augmented reality glasses can be a more compelling story than, say, a smaller iPad.But one thing highlighted in the Booz & Co. Innovation 1000 study and our conversation with co-author Barry Jaruzelski is that pushing technological boundaries is just one of the three successful paths to innovation. Each is as difficult to execute, requires as much innovation in the research and development (R&D) process, and has as much potential as the next.Here’s how Jaruzelski describes them: 
1. Need seekers (think Apple)”…these are companies who’s innovation strategy is essentially around knowing customers better than themselves, identifying unarticulated needs, and then being the first to market with a product that addresses those needs. It’s very heavily reliant on direct customer observation rather than market research. It is people telling you what they want, watching customers, seeing how they interact with the product or competitors’ products, and observing opportunities in the problems that they’re having.”Apple didn’t invent the touch screen. But it’s made vastly more money than anyone else on it by focusing on how people use it, and being better than anyone else at delivering that experience.Related: Most Companies Think They’re Horrible At Bringing Ideas To Market2. Market readers (think Samsung)”…a market reader is sort of the classic fast follower, it doesn’t mean they ignore their customers, but they’re very attuned to what competitors are doing and what other people are bringing to market first and observing what seems to be gaining traction, then very rapidly coming up with their own version of that innovation. You can think about the companies set up as almost a massive coiled spring to basically pop out and copy an idea, not reverse engineer it necessarily, but, looking at innovation and coming up with their own version very rapidly to get their share. It’s very much rooted in competitive intelligence, classic market research kinds of activities in terms of the front end.”Samsung wouldn’t have jumped five spots in three years on the ranking of the world’s most innovative companies delivering bad copies of an iPhone. It creates compelling new versions of products, times them well, and adds to them. Pulling that off is an innovative and difficult strategy in its own right. Related: Why It’s A Miracle That Any Medicine Gets Approved3. Tech drivers (think Google)”The third category is what we call technology drivers. This is much more the traditional technology push kind of model, where the pendulum hasn’t swung completely away from customers and markets, but it’s much more oriented towards leveraging the technology base, seeing what you can push out, seeing where there might be applications for the technology.”This is the model that’s traditionally defined innovation, but being the first to come up with something and the best at making money off of it are very different.Every company listed here is successful and approaches R&D in a completely different way. The narrative that calls only the last group innovative may be appealing, but it’s not what investors or R&D executives care about.Related: The 20 Biggest Corporate R&D Spenders In The World This story originally appeared on Business Insider Register Now »
4 min read Free Webinar | Sept. 9: The Entrepreneur’s Playbook for Going Global When starting a business, almost every entrepreneur asks themselves whether their idea is patentable. Patents provide a way to secure your idea, but navigating through the patent process is a world of its own.To start understanding the invention world, it’s crucial to know there are two main kinds of patents: Utility and Design. Utility patents are foundational in nature, involving a system, method, process or underlying technology. They have a lifespan of up to twenty years. Design patents, on the other hand, focus on protecting ornamental features of a product. They typically have a lifespan of fifteen years.Though patents could be crucial to your business, there are several Fortune 500 companies that have kept their core formula a trade secret. Instead of publishing their formulas, brands like Coca-Cola and Heinz opted to go straight to market and keep their formulas for developing soda and ketchup a secret. Their trade secrets are now worth billions.Related: 5 Steps for Turning Your Invention Ideas Into a ProductSince most patents can be very expensive, most bootstrapped entrepreneurs will start with a provisional patent. A provisional patent can be filed for both types of patents and will secure your invention for a twelve-month period, after which you would need to file a formal non-provisional patent. Regardless of which patent approach you take, the absolute first step in the patent process is a novelty search. A novelty search will help you understand what patents exist in your idea’s realm and how your idea is unique compared to other patents that exist.To get started with a novelty search, take one of the three approaches below:1. Hire an attorney.Patent attorneys will be happy to perform a novelty lookup, yet this will typically run you $1,500-$50,000. The cost all depends on the scope of the search. The cheaper it is the less time the attorney spent in discovery. It’s typical that attorneys cover only 40% to 70% of what is really out there.Related: How Can I Legally Improve a Product I Didn’t Create?Pro tip: One aspect of patents to touch upon before you begin your search is the whitespace between patents. This refers to the area that your idea could cover, between other patents that exist.2. Utilize Google. One of the most overlooked Google tools is its database of patents. It’s free and is only limited by the time you have to search through it. Be aware, though, when conducting a novelty search for your own invention, that you’ll often be blind of other uses or applications in a patent. Google also leaves out the understanding of whitespace between patents. On the plus side, Google allows for research in publications, products and patents, whereas the attorneys usually limit their search to patents only.3. Try Loci.A new technology that has inventors and the IP industry buzzing, Loci is a Washington D.C.-based startup that offers an easy-to-use novelty lookup tool. The technology pulls from patent databases, publications and product databases to offer a comprehensive search. Unlike other platforms, it offers suggested keywords in context and showcases categories that allow the users to recognize disparate applications. This tool also helps inventors recognize whitespace immediately. If the inventor does determine their invention exists, it’s easy to see where it doesn’t or recognize a reasonable pivot.Related: How to Protect Your Business Idea Without a PatentWhatever path you take, understand there are people out there to help. Though you may be scared of someone stealing your idea, there are far fewer people out there like that than you’d imagine. Plus, it’s not hard to protect yourself from theft. As John Wise, CEO of Loci, advises his clients, “Before you do anything else, write your idea down and send it via certified mail to yourself. Even better, sell one of your prototypes to a friend for as little as $1. Make sure you document the process. It’s substantially more difficult to steal an idea after this. Most people will be turned off from trying to steal your idea if you tell them that it’s published or documented.”With the patent process seemingly always leading to confusion for entrepreneurs, it’s crucial to start by conducting a novelty search to see if your idea is even patentable. Now that you know the best ways to conduct a search, it’s time for you to start! Register Now » February 15, 2017 Growing a business sometimes requires thinking outside the box. Opinions expressed by Entrepreneur contributors are their own.
News | October 24, 2011 vRad Announces Clinical Trials Partnership with Icon Medical Imaging Image courtesy of Imago Systems October 24, 2011 – Virtual Radiologic (vRad), a technology-enabled national radiology practice, has announced a premier radiology partnership with Icon Medical Imaging, the medical imaging division of Icon.Icon Medical Imaging provides medical imaging-based product development services to the pharmaceutical, biotechnology and medical device industries. The partnership with vRad will enable Icon Medical Imaging to access the breadth and depth of vRad’s subspecialty expertise and to obtain high-quality interpretations provided by vRad’s fellowship-trained radiologists.The first clinical trial involving vRad launched in September, with more expected to rapidly follow. This partnership will provide a great opportunity for vRad radiologists to make an impact on advancing healthcare. The use of imaging in clinical trials has been recognized by the pharmaceutical industry to assist in measuring early results, thereby helping to shorten the timeline for bringing effective drugs to market, and saving costs and lives in the process. For more information: www.vrad.com FacebookTwitterLinkedInPrint分享 Images of regions of interest (colored lines) in the white matter skeleton representation. Data from left and right anterior thalamic radiation (ATR) were averaged. Image courtesy of C. Bouziane et al. A nurse examines a patient in the Emergency Department of Cincinnati Children’s, where researchers successfully tested artificial intelligence-based technology to improve patient recruitment for clinical trials. Researchers report test results in the journal JMIR Medical Informatics. Image courtesy of Cincinnati Children’s. News | Pediatric Imaging | August 14, 2019 Ultrasound Guidance Improves First-attempt Success in IV Access in Children August 14, 2019 – Children’s veins read more News | Mammography | August 14, 2019 Imago Systems Announces Collaboration With Mayo Clinic for Breast Imaging Image visualization company Imago Systems announced it has signed a know-how license with Mayo Clinic. The multi-year… read more News | Artificial Intelligence | August 13, 2019 Artificial Intelligence Could Yield More Accurate Breast Cancer Diagnoses University of California Los Angeles (UCLA) researchers have developed an artificial intelligence (AI) system that… read more News | Cardiovascular Ultrasound | August 07, 2019 Contrast Use in First Transthoracic Echocardiogram for Heart Failure Reduces Repeat Testing Heart failure is the fourth most common cause for all admission to U.S. hospitals, and it is the most common reason for… read more 
News | Radiation Therapy | August 15, 2019 First Patient Enrolled in World’s Largest Brain Cancer Clinical Trial Henry Ford Cancer Institute is first-in-the-world to enroll a glioblastoma patient in the GBM AGILE Trial (Adaptive… read more News | Neuro Imaging | August 16, 2019 ADHD Medication May Affect Brain Development in Children A drug used to treat attention-deficit/hyperactivity disorder (ADHD) appears to affect development of the brain’s… read more News | Brachytherapy Systems | August 14, 2019 Efficacy of Isoray’s Cesium Blu Showcased in Recent Studies August 14, 2019 — Isoray announced a trio of studies recently reported at scientific meetings and published in medica read more News | Colonoscopy Systems | August 06, 2019 Rise in Early Onset Colorectal Cancer Not Aligned With Screening Trends A new study finds that trends in colonoscopy rates did not fully align with the increase in colorectal cancer (CRC) in… read more Related Content News | CT Angiography (CTA) | August 06, 2019 Artificial Intelligence Improves Heart Attack Risk Assessment When used with a common heart scan, machine learning, a type of artificial intelligence (AI), does better than… read more News | Artificial Intelligence | July 31, 2019 Artificial Intelligence Solution Improves Clinical Trial Recruitment Clinical trials are a critical tool for getting new treatments to people who need them, but research shows that… read more
As the web has evolved, its security needs have changed too. Today, as web applications become more lightweight, composed of loosely coupled services, with a mesh of different dependencies, the onus is on web developers to build websites and applications that have not only better user experience but also better user security. There are many techniques that can be used to do this. And at this year’s JavaScript fwdays, Twilio frontend developer Stefan Judis demonstrated how we can use HTTP headers to add another layer of security and optimization to our applications and websites. Why do web developers need to think seriously about security? The browser has in recent years become a popular site for attacks. Back in 2017, Equifax, a massive credit rating agency, announced that criminals exploited a vulnerability in their website to get access to personal information of 143 million American consumers. Last year, more than 4,000 websites in the US and UK were found serving the CoinHive crypto miner, a JavaScript script designed to mine cryptocurrency at the expense of users’ CPU power, to its users because of a “cryptojacking” attack. Today, when there are so many open-source packages available on package managers like npm, nobody really codes everything from scratch while developing any application. Last year in November, we saw the case of malicious code in the npm event-stream package. The attacker used social engineering tactics to become the maintainer of the event-stream package and then exploited their position to add a malicious package as a direct dependency. Looking at these cases developers have become more aware of the different means and ways of securing their work like using a web application firewall, using web vulnerability scanners, securing the web server, and more. And, a good place to start is ensuring security through HTTP security headers and that’s what Judis explained in his talk. What are HTTP headers? HTTP, which stands for Hypertext transfer protocol, allows the client and server to communicate over a secure connection. HTTP headers are the key-value pairs that are used to exchange additional information. When a client makes a request for a resource, along with the request a request header is sent to the server, which includes particulars such as the browser version, client’s operating system, and so on. The server answers back with the resource along with a response header containing information like type, date, and size of the file sent. Some different examples of HTTP headers Below are some of the HTTP headers Judis demonstrated: HSTS (HTTP Strict Transport Security) HTTPS, which is a secure version of HTTP, ensures that we are communicating over a secure channel with the help of Transport Layer Security (TLS) protocol or its predecessor Secure Sockets Layer (SSL) for encryption. Not only just security, but it is often a requirement for many new browser features, especially those required for progressive web apps. Though browser vendors do mark non-HTTPS unsafe, we cannot really guarantee safety all the time. “Unfortunately, we’re not browsing safe all the time. When someone wants to open a website they are not entering the protocol into the address bar (and why should they?). This action leads to an unencrypted HTTP request. Securely running sites then redirect to HTTPS. But what if someone intercepts the first unsecured request?,” wrote Judis in a blog post. To address such cases you can use HSTS response headers, that allow declaring that your web server only takes HTTPS requests. You can implement it this way: Strict-Transport-Security: max-age=1000; includeSubDomains; preload Before you implement, do read this helpful advice shared by a web developer on Hacker News: “Be sure that you understand the concept of HSTS! Simply copy/pasting the example from this article will completely break subdomains that are not HTTPS enabled and preloading will break it permanently. I wish the authors made that more clear. Don’t use includesubdomains and preload unless you know what you are doing.” CSP (Content Security Policy) The security model for the web is based on the same-origin policy. This means that a web browser will only allow a script in the preceding web page to access data from the following page if both pages have the same origin. This policy is bypassed by attacks like cross-site scripting (XSS), in which malicious scripts are injected into trusted websites. You can use CSP, which will help in significantly minimizing the risk and impact of XSS attacks. You can define CSP using the following meta element in your server HTML or via HTTP headers: Content-Security-Policy: upgrade-insecure-requests This directive (upgrade-insecure-requests) upgrades all the HTTP requests to HTTPS requests. CSP offers a wide variety of policy directives that give you the control of defining the source from where a page is allowed to load a resource. The ‘script-src’ directive can prove to be very helpful in case of XSS attack, which controls a set of script-related privileges for a specific page. Other examples include ‘img-src’, ‘media-src’, ‘object-src’, and more. Before you implement CSP, take into account the following advice from a Hacker News user: “CSP can be really hard to set up. For instance: if you include google analytics, you need to set a script-src and a img-src. The article does a good job of explaining you should use CSP monitoring (I recommend sentry), but it doesn’t explain how deceptive it can be. You’ll get tons of reports of CSP exceptions caused by browsers plugins that attempt to inject CSS or JS. You must learn to distinguish which errors you can fix, and which are out of your control. Modern popular frontend frameworks will be broken by CSP as they rely heavily on injecting CSS (a concept known as JSS or ‘styled components’). As these techniques are often adopted by less experienced devs, you’ll see many ‘solutions’ on StackOverflow and Github that you should set unsafe-inline in your CSP. This is bad advise as it will basically disable CSP! I have attempted to raise awareness in the past but I always got the ‘you’re holding it wrong’ reply (even on HN). The real solution is that your build system should separate the CSS from JS during build time. Not many popular build systems (such as create-react-app) support this.” Despite these advantages, Judis in his talk highlighted that not many websites have put it to work and merely 6% are using it. He wrote in a post, “To see how many sites serve content with CSP I ran a query on HTTP Archive and found out that only 6% of the crawled sites use CSP. I think we can do better to make the web a safer place and to avoid our users mining cryptocurrency without knowing it.” Cache-Control Judis believes that it is a web developers’ responsibility to ensure that their website or web app is not eating up a user’s data to keep the “web affordable for everybody”. One way to do that is by using the Cache-Control header, which allows you to define response caching policies. This header controls for how long a browser can cache an individual response. Here is how you can define it: Cache-Control: max-age=30, public These were some of the headers that Judis highlighted in his post. The article further explains the use of other headers like Accept-Encoding, Feature-Policy, and more. Go ahead and give it a read! Read Next All about Browser Fingerprinting, the privacy nightmare that keeps web developers awake at night How to build a real-time data pipeline for web developers – Part 2 [Tutorial] How to build a real-time data pipeline for web developers – Part 1 [Tutorial]
After weeks of speculation, American Airlines and US Airways have confirmed the two carriers will merge to form the world’s biggest airline.Subject to regulatory and US Airways shareholder approval, the $11 billion merger is expected to be completed by the third quarter 2013 and will see US Airways rebrand into American Airlines to offer 6,700 daily flights and an annual revenue of up to US$40 billion.Flying to 336 destinations in 56 countries, the combined airline will provide the most services across the East Coast and Central regions of the US, 21 destinations in Europe and the Middle East as well as enhanced connectivity through American’s oneworld membership.The airline will also maintain all American Airlines and US Airways hubs and take delivery of up to 600 new aircraft, including 517 narrowbody aircraft and 90 widebody international planes.On the management side, American Airlines current chief executive Thomas Horton will step into the role of chairman while US Airways chief executive Doug Parker will serve as chief executive and a member of the board of directors. Mr Horton said the agreement will unify ‘two highly complementary networks’ to form a ‘global premier carrier’, with a ‘strong platform’ for travellers.“As part of this process, after months of exhaustive analysis and a thorough review of all alternatives, we concluded that this merger is the best outcome for our company, delivering not only the greatest value for our financial stakeholders, but also positioning us well for sustainable success over the long term,” he said.Excited for the new extended carrier? Leave a comment below and let us know what you think of the American Airlines and US Airways union. Airlines merge to form the world’s largest airline. Source = e-Travel Blackboard: N.J