Protecting encrypted cookies from compression side-channel attacks

Compression is desirable for network applications as it saves bandwidth; however, when data is compressed before being encrypted, the amount of compression leaks information about the amount of redundancy in the plaintext. This side channel has led to successful CRIME and BREACH attacks on web traffic protected by the Transport Layer Security (TLS) protocol. The general guidance in light of these attacks has been to disable compression, preserving confidentiality but sacrificing bandwidth. In this paper, we examine two techniques - heuristic separation of secrets and fixed-dictionary compression|for enabling compression while protecting high-value secrets, such as cookies, from attack. We model the security offered by these techniques and report on the amount of compressibility that they can achieve.

Surveillance snapshot of Clostridium difficile infection in hospitals across Queensland detects binary toxin producing ribotype UK 244

In North America and Europe, the binary toxin positive Clostridium difficile strains of the ribotypes 027 and 078 have been associated with death, toxic megacolon and other adverse outcomes. Following an increase in C. difficile infections (CDIs) in Queensland, a prevalence study involving 175 hospitals was undertaken in early 2012, identifying 168 cases of CDI over a 2 month period. Patient demographics and clinical characteristics were recorded, and C. difficile isolates were ribotyped and tested for the presence of binary toxin genes. Most patients (106/168, 63.1%) were aged over 60 years. Overall, 98 (58.3%) developed symptoms after hospitalisation; 89 cases (53.0%) developed symptoms more than 48 hours after admission. Furthermore, 27 of the 62 (67.7%) patients who developed symptoms in the community ad been hospitalised within the last 3 months. Thirteen of the 168 (7.7%) cases identified had severe disease, resulting in admission to the Intensive Care Unit or death within 30 days of the onset of symptoms. The 3 most common ribotypes isolated were UK 002 (22.9%), UK 014 (13.3%) and the binary toxin-positive ribotype UK 244 (8.4%). The only other binary toxin positive ribotype isolated was UK 078 (n = 1). Of concern was the detection of the binary toxin positive ribotype UK 244, which has recently been described in other parts of Australia and New Zealand. No isolates were of the international epidemic clone of ribotype UK 027, although ribotype UK 244 is genetically related to this clone. Further studies are required to track the epidemiology of ribotype UK 244 in Australia and New Zealand. Commun Dis Intell 2014;38(4):E279–E284.

Cathodic corrosion of Cu substrates as a route to nanostructured Cu/M (M = Ag, Au, Pd) surfaces

The electrochemical formation of nanostructured materials is generally achieved by reduction of a metal salt onto a substrate that does not influence the composition of the deposit. In this work we report that Ag, Au and Pd electrodeposited onto Cu under conditions where galvanic replacement is not viable and hydrogen gas is evolved results in the formation of nanostructured surfaces that unexpectedly incorporate a high concentration of Cu in the final material. Under cathodic polarization conditions the electrodissolution/corrosion of Cu occurs which provides a source of ionic copper that is reduced at the surface-electrolyte interface. The nanostructured Cu/M (M = Ag, Au and Pd) surfaces are investigated for their catalytic activity for the reduction of 4 nitrophenol by NaBH4 where Cu/Ag was found to be extremely active. This work indicates that a substrate electrode can be utilized in an interesting manner t make bimetallic nanostructures with enhanced catalytic activity.

Profiled steel roof claddings under high wind forces

Profiled steel roof claddings in Australia and its neighbouring countries are commonly made of very thin high tensile steel and are crest-fixed intermittently with screw fasteners. The failure of the roof cladding systems was due to a local failure (dimpling of crests I pull-through) at the fasteners under wind uplift Cyclic wind uplift during cyclones causes fatigue cracking to occur at the fastener holes which leads to pull-through failures at lower load levels. At present the design of these claddings is entirely based on testing. In order to improve the understanding of the behaviour and the design and test methods of these claddings under wind uplift loading during storms and cyclones, a detailed investigation consisting of finite element analyses, static and fatigue experiments and cyclonic wind modelling was carried out on two-span roofing assemblies of three common roofing profiles. This paper presents the details of this investigation and its important results.

Security Analysis of Randomize-Hash-then-Sign Digital Signatures

At CRYPTO 2006, Halevi and Krawczyk proposed two randomized hash function modes and analyzed the security of digital signature algorithms based on these constructions. They showed that the security of signature schemes based on the two randomized hash function modes relies on properties similar to the second preimage resistance rather than on the collision resistance property of the hash functions. One of the randomized hash function modes was named the RMX hash function mode and was recommended for practical purposes. The National Institute of Standards and Technology (NIST), USA standardized a variant of the RMX hash function mode and published this standard in the Special Publication (SP) 800-106. In this article, we first discuss a generic online birthday existential forgery attack of Dang and Perlner on the RMX-hash-then-sign schemes. We show that a variant of this attack can be applied to forge the other randomize-hash-then-sign schemes. We point out practical limitations of the generic forgery attack on the RMX-hash-then-sign schemes. We then show that these limitations can be overcome for the RMX-hash-then-sign schemes if it is easy to find fixed points for the underlying compression functions, such as for the Davies-Meyer construction used in the popular hash functions such as MD5 designed by Rivest and the SHA family of hash functions designed by the National Security Agency (NSA), USA and published by NIST in the Federal Information Processing Standards (FIPS). We show an online birthday forgery attack on this class of signatures by using a variant of Dean’s method of finding fixed point expandable messages for hash functions based on the Davies-Meyer construction. This forgery attack is also applicable to signature schemes based on the variant of RMX standardized by NIST in SP 800-106. We discuss some important applications of our attacks and discuss their applicability on signature schemes based on hash functions with ‘built-in’ randomization. Finally, we compare our attacks on randomize-hash-then-sign schemes with the generic forgery attacks on the standard hash-based message authentication code (HMAC).

On Randomizing Hash Functions to Strengthen the Security of Digital Signatures

Halevi and Krawczyk proposed a message randomization algorithm called RMX as a front-end tool to the hash-then-sign digital signature schemes such as DSS and RSA in order to free their reliance on the collision resistance property of the hash functions. They have shown that to forge a RMX-hash-then-sign signature scheme, one has to solve a cryptanalytical task which is related to finding second preimages for the hash function. In this article, we will show how to use Dean’s method of finding expandable messages for finding a second preimage in the Merkle-Damgård hash function to existentially forge a signature scheme based on a t-bit RMX-hash function which uses the Davies-Meyer compression functions (e.g., MD4, MD5, SHA family) in 2 t/2 chosen messages plus 2 t/2 + 1 off-line operations of the compression function and similar amount of memory. This forgery attack also works on the signature schemes that use Davies-Meyer schemes and a variant of RMX published by NIST in its Draft Special Publication (SP) 800-106. We discuss some important applications of our attack.

Innovate triple constraints model for better construction projects results

The continuous changing impacts appeared in all solution understanding approaches in the projects management field (especially in the construction field of work) by adopting dynamic solution paths. The paper will define what argue to be a better relational model for project management constraints (time, cost, and scope). This new model will increase the success factors of any complex program / project. This is a qualitative research adopting a new avenue of investigation by following different approach of attributing project activities with social phenomena, and supporting phenomenon with field of observations rather than mathematical method by emerging solution from human, and ants' colonies successful practices. The results will show the correct approach of relation between the triple constraints considering the relation as multi agents system having specified communication channels based on agents locations. Information will be transferred between agents, and action would be taken based on constraint agents locations in the project structure allowing immediate changes abilities in order to overcome issues of over budget, behind schedule, and additional scope impact. This is complex adaptive system having self organizes technique, and cybernetic control. Resulted model can be used for improving existing project management methodologies.

Exercise barriers self-efficacy : development and validation of a subcale for individuals with cancer-related lymphedema

Background No tool exists to measure self-efficacy for overcoming lymphedema-related exercise barriers in individuals with cancer-related lymphedema. However, an existing scale measures confidence to overcome general exercise barriers in cancer survivors. Therefore, the purpose of this study was to develop, validate and assess the reliability of a subscale, to be used in conjunction with the general barriers scale, for determining exercise barriers self-efficacy in individuals facing lymphedema-related exercise barriers. Methods A lymphedema-specific exercise barriers self-efficacy subscale was developed and validated using a cohort of 106 cancer survivors with cancer-related lymphedema, from Brisbane, Australia. An initial ten-item lymphedema-specific barrier subscale was developed and tested, with participant feedback and principal components analysis results used to guide development of the final version. Validity and test-retest reliability analyses were conducted on the final subscale. Results The final lymphedema-specific subscale contained five items. Principal components analysis revealed these items loaded highly (> 0.75) on a separate factor when tested with a well-established nine-item general barriers scale. The final five-item subscale demonstrated good construct and criterion validity, high internal consistency (Cronbach’s alpha=0.93) and test-retest reliability (ICC=0.67, p< 0.01). Conclusions A valid and reliable lymphedema-specific subscale has been developed to assess exercise barriers self-efficacy in individuals with cancer-related lymphedema. This scale can be used in conjunction with an existing general exercise barriers scale to enhance exercise adherence in this understudied patient group.

Valé Bunny Watson? Law librarians, law libraries, and legal research in the post-internet era

Katharine Hepburn’s entertaining portrayal of reference librarian Bunny Watson in Desk Set (1957) moves her character from apprehension about new technology to an understanding that it is simply another tool. This article outlines the impact of technology on academic legal research. It examines the nature of legal research and the doctrinal method, the importance of law libraries (and librarians) in legal research, and the roles and implications of the Internet and web search engines on legal research methods and education.

Application of organo-beidellites for the adsorption of atrazine

The surfaces of natural beidellite were modified with cationic surfactant octadecyl trimethylammonium bromide at different concentrations. The organo-beidellite adsorbent materials were then used for the removal of atrazine with the goal of investigating the mechanism for the adsorption of organic triazine herbicide from contaminated water. Changes on the surfaces and structure of beidellite were characterised by X-ray diffraction (XRD), thermogravimetric analysis (TGA), Fourier transform infrared (FTIR) spectroscopy, scanning electron microscopy (SEM) and BET surface analysis. Kinetics of the adsorption studies were also carried out which show that the adsorption capacity of the organoclays increases with increasing surfactant concentration up until 1.0 CEC surfactant loading, after which the adsorption capacity greatly decreases. TG analysis reveals that although the 2.0 CEC sample has the greatest percentage of surfactant by mass, most of it is present on external sites. The 0.5 CEC sample has the highest proportion of surfactant exchanged into the internal active sites and the 1.0 CEC sample accounts for the highest adsorption capacity. The goodness of fit of the pseudo-second order kinetic confirms that chemical adsorption, rather than physical adsorption, controls the adsorption rate of atrazine.

Personal values and political activism: A cross-national study

Using data from 28 countries in four continents, the present research addresses the question of how basic values may account for political activism. Study 1 (N = 35,116) analyses data from representative samples in 20 countries that responded to the 21-item version of the Portrait Values Questionnaire (PVQ-21) in the European Social Survey. Study 2 (N = 7,773) analyses data from adult samples in six of the same countries (Finland, Germany, Greece, Israel, Poland, and United Kingdom) and eight other countries (Australia, Brazil, Chile, Italy, Slovakia, Turkey, Ukraine, and United States) that completed the full 40-item PVQ. Across both studies, political activism relates positively to self-transcendence and openness to change values, especially to universalism and autonomy of thought, a subtype of self-direction. Political activism relates negatively to conservation values, especially to conformity and personal security. National differences in the strength of the associations between individual values and political activism are linked to level of democratization.

Hand, foot and mouth disease in China: Evaluating an automated system for the detection of outbreaks

Objective To evaluate the performance of China’s infectious disease automated alert and response system in the detection of outbreaks of hand, foot and mouth (HFM) disease. Methods We estimated size, duration and delay in reporting HFM disease outbreaks from cases notified between 1 May 2008 and 30 April 2010 and between 1 May 2010 and 30 April 2012, before and after automatic alert and response included HFM disease. Sensitivity, specificity and timeliness of detection of aberrations in the incidence of HFM disease outbreaks were estimated by comparing automated detections to observations of public health staff. Findings The alert and response system recorded 106 005 aberrations in the incidence of HFM disease between 1 May 2010 and 30 April 2012 – a mean of 5.6 aberrations per 100 days in each county that reported HFM disease. The response system had a sensitivity of 92.7% and a specificity of 95.0%. The mean delay between the reporting of the first case of an outbreak and detection of that outbreak by the response system was 2.1 days. Between the first and second study periods, the mean size of an HFM disease outbreak decreased from 19.4 to 15.8 cases and the mean interval between the onset and initial reporting of such an outbreak to the public health emergency reporting system decreased from 10.0 to 9.1 days. Conclusion The automated alert and response system shows good sensitivity in the detection of HFM disease outbreaks and appears to be relatively rapid. Continued use of this system should allow more effective prevention and limitation of such outbreaks in China.

Émile Durkheim and Thomas Luckmann: Religion, spirituality and mental health

This chapter examines connections between religion, spirituality and mental health. Religion and spirituality influence the way people conceive themselves, others and the world around them, as well as how they behave – and are strongly associated with numerous mental health outcomes. Religion and spirituality therefore demand the attention of those who seek a comprehensive understanding of the factors that affect mental health. Mental health professionals are increasingly being asked to consider their clients’ religious and/or spiritual beliefs when devising their treatment plans, making the study of religion and spirituality an essential area of learning for those working in the mental health field. Initial discussion in this chapter will focus on the different approaches taken by sociologists in studying mental health. Emile Durkheim, one of the founders of sociology, proposed that religion was fundamental to societal wellbeing and was the first to demonstrate a link between religion and mental health at a population level in the late 19th century. Durkheim’s classic theory of religion, together with the work of Thomas Luckmann and other contemporary social theorists who have sought to explain widespread religious change in Western countries since World War II will be examined. Two key changes during this period are the shift away from mainstream Christian religions and the widespread embracing of ‘spirituality’ as an alternative form of religious expression. In combination, the theories of Durkheim, Luckmann and other sociologists provide a platform from which to consider reasons for variations in rates of mental health problems observed in contemporary Western societies according to people’s religious/spiritual orientation. This analysis demonstrates the relevance of both classic and contemporary sociological theories to issues confronting societies in the present day.

A vibrational spectroscopic study of the arsenate minerals cobaltkoritnigite and koritnigite

Raman spectra of two well-defined types of cobaltkoritnigite and koritnigite crystals were recorded and interpreted. Significant differences in the Raman spectra of cobaltkoritnigite and koritnigite were observed. Observed Raman bands were attributed to the (AsO3OH)2− stretching and bending vibrations, stretching and bending vibrations of water molecules and hydroxyl ions. Both Raman and infrared spectra of cobaltkoritnigite identify bands which are attributable to phosphate and hydrogen phosphate anions proving some substitution of phosphate for arsenate in the structure of cobaltkoritnigite. The OH⋯O hydrogen bond lengths in the crystal structure of koritnigite were inferred from the Raman spectra and compared with those derived from the X-ray single crystal refinement. The presence of (AsO3OH)2− units in the crystal structure of cobaltkoritnigite and koritnigite was proved from the Raman spectra which supports the conclusions of the X-ray structure analysis.

Cold water immersion: Practices, trends and avenues of effect

Cold water immersion and ice baths are popular methods of recovery used by athletes. From the simple wheelie bin with water and ice, to the inflatable baths with complex water cooling units to recovery sessions in the ocean, the practice of cold water immersion is wide and varied. Research into cold water immersion was conducted as early as 1963 when Clarke1 examined the influence of cold water on performance recovery after a sustained handgrip exercise. Research has been conducted to understand how cold water immersion might affect the body’s physiological systems and how factors such as water temperature and the duration of immersion might enhance recovery after training and/or competition. Despite this research activity, how are we to know if research is being put into practice? In more serious situations, where guidelines and policies need to be standardised for the safe use of a product, one would expect that there is a straight forward follow-on from research into practice. Although cold water immersion may not need the rigor of testing compared to drug treatments, for example, the decision on whether to use cold water immersion in specific situations (e.g. after training or competition) may rest with one or two of the staff associated with the athlete/team. Therefore, it would be expected that these staff are well-informed on the current literature regarding cold water immersion.