Category Archives: Uncategorized

Verizon PermaCookies Cannot Penetrate ssRwd™ HSTS Security

Verizon PermaCookies Cannot Penetrate ssRwd™ HSTS Security

Some say the deadly Ebola virus is unstoppable and the privacy-killing UID your ISP may be injecting into your web traffic is unblockable but a Miami web development firm just verified its antidote for one of them.

South Florida-based HTML5/CSS3 mobile web app, secure eCommerce/WordPress website design and jQuery/PHP web development firm WebFL.US recently validated and today announced that business website owners interested in protecting their site visitors from privacy invasion and their customer information exchanges and transactions from unauthorized snooping, personal/financial information collection and smartphone/online activity tracking can rely on their trademarked speedy secure responsive web design methodology ssRwd™ to permanently prevent the permacookies and undo the unoptoutability of the unique identifiers that might be injected into their HTTP headers by Verizon, ATT/AT&T and other Internet service providers large and small.

Earlier this week disclosed that “Verizon Wireless has been subtly altering the web traffic of its wireless customers for the past two years, inserting a string of about 50 letters, numbers, and characters into data flowing between these customers and the websites they visit.” Soon after revealed that ATT/AT&T and other ISPs are engaging in similar activities, quoting security consultant Kenn White as saying: “In AT&T’s case, the code has four parts; only one part changes… It’s like if you were identified by a birth month, a birth year, a birth day, and a zip code, and they remove one of those things… You’d still be able to reasonably track that person with the other three.”

Using those Unique Identifier Headers (UIDHs), ISPs are able to track and collect detailed information on the mobile, tablet, notebook and desktop online activities of their customers which they can sell to advertisers – or possibly serve up without warrant to government agencies. And with these UIDH “permacookies” Verizon, ATT/AT&T and others can accomplish that even if their Internet access subscribers set their web browsers to block all cookies, even if they opt for private browser sessions, even if they opt-in for “Do Not Track”, and even after they log into their accounts and opt-out of all so-called “relevant advertising” programs. To find out if your ISP is using universal identifiers (UIDs) to track you right now, for example, you can click or tap here:

Is your ISP tracking you?

Like most web pages – and websites pasted into native app wrappers so they can be called “mobile apps” – this test page is being served up unencrypted using standard Hypertext Transfer Protocol (HTTP|RFC 2616). And because the transmission is unencrypted, it is vulnerable to ISP UID(H) injections – as well as a host of other potential privacy invasions, malware insertions and hacker attacks. If instead it had been encrypted and transmitted via Hypertext Transfer Protocol Secure (HTTPS|RFC 2818), the ISP header injection scheme would be defeated because UID permacookies cannot pass through the HTTPS transport layer security envelope.

The ssRwd speedy secure responsive web design and web development methodology offered by WebFL.US delivers transfer protocol security in its most impregnable form which is HTTPS Strict Transport Security or HSTS. HSTS not only shields website visitors and mobile app users from unwanted ISP injections, unappreciated malware insertions, unwarranted government surveillance and unrelenting hacker attacks but also enables SPDY, an open network protocol built on HTTPS which can significantly speed up page content delivery and thereby measurably reduce session as well as shopping cart abandonment. Along with speed and security, ssRwd serves up web pages in a fluid, flexible, mobile-friendly responsive web design format that assures proper presentation and optimal user experience cross-browser and multi-platform from the smallest smartphone screen to the largest desktop monitor.

Every visitor to a website designed and developed with ssRwd by WebFL.US is vaccinated against UID permacookie injections for the length of their session. That’s because on delivery every web page on a WebFL.US ssRwd website passes 15 objective tests of speedy secure responsive web design. How does your website measure up? To find out, you can click or tap here:

Do you have a speedy secure responsive web design?

Secure Web Design Miami: Website Showcases Autoclaves That Kill Ebola

Secure Web Design Miami: Website Showcases Autoclaves That Kill Ebola

Secure Web Design Miami: There is no cure for the deadly Ebola virus that is spreading across Africa and many fear headed for Europe, Asia and America. But through, Bondtech offers treatment technology to take it out.

The UK Independent calls Ebola virus disease (EVD) – also referred to as Ebola hemorrhagic fever (EHF) – “a biological doomsday device that conspires with the human body to bring death in the most gruesome fashion.” There is no known vaccine or cure for the horrific disease, which is fatal for 66.4% (2 out of 3) of those who contract it. The killer virus can itself be killed, however, by decontamination processes employing the steam autoclave sterilization systems Bondtech Corporation offers to hospitals and commercial medical waste autoclaves removal and treatment companies around the globe through its recently-launched, fully-responsive, mobile-friendly and secure website

According to Bondtech President & CEO Elsa Brown, “The W.H.O. says the death toll from the latest Ebola outbreak is 932 and climbing. It’s a highly contagious virus but it’s not airborne, so you can’t just breathe it in. To contract the disease you must have contact with an infected person’s blood or bodily fluids. High-vacuum, high-pressure, high-temperature steam autoclave sterilization of biologically contaminated materials such as these eliminates all forms of infectious biohazardous microorganisms – viral, bacterial and fungal – including the Ebola virus. That is the primary function of the medical waste sterilizers and hospital waste autoclaves we feature on our new state-of-the-art website”

Custom hand-coded in PHP/MySQL server-side and jQuery/JavaScript client-side, is what its designer and developer WebFL.US calls a speedy secure responsive web design. To qualify as “ssRwd” every page on the website passes 15 tests of mobile friendliness, responsive design, HSTS transport security, SPDY speed optimization, metadata semantics and W3C HTML5/CSS3 standards compliance. Consequently site visitors can expect fast, flexible and secure access to extensive information about Bondtech biomedical waste autoclave products, accessories, supplies and other infectious waste treatment solutions plus a consistently smooth user experience regardless of what desktop, notebook, tablet or smartphone browser they use to access it.

“Over the past three decades Bondtech Corporation has grown from startup business enterprise to leading global provider of autoclave sterilization solutions – with installations in North America, South America, Europe and Asia,” attested Bondtech Vice President Angel Aguiar, P.E. “Much of that success we attribute to our ability to be extremely flexible in how we design, engineer, fabricate, install and maintain autoclave waste sterilization solutions for a broad and diverse customer base while at the same time maintaining strict adherence to all applicable best practices, industry standards and regulatory requirements. In short, Bondtech offers quality in development and flexibility in delivery, and I believe our new website mirrors that commitment.”

About Bondtech Corporation | | 606-677-2616

Bondtech Corporation has manufactured high-vacuum high-pressure autoclave sterilization systems with high-volume processing capacities for the commercial medical waste treatment industry for more than 30 years. It is also the world’s leading supplier of durable and reliable on-site hospital waste autoclave sterilizers. Bondtech Treatment Technology (BTT) systems currently provide the majority of the waste treatment capacity in North America for medical waste and USDA/APHIS/foreign origin wastes.

SS rwd or #ssRwd, It’s All About Performance

SS rwd or #ssRwd, It's All About Performance

The 2014 Chevy SS with rear-wheel drive is all about performance. So is speedy secure responsive web design.

The “Web” and “Mobile Web” are now one and the same. Web pages that cannot accommodate smartphone/tablet as well as notebook/desktop browsers are obsolete. So are mobile website redirects and websites in app wrappers. Especially for small to medium sized businesses, mobile-friendly responsive web design (“RWD”) is now a strategic web development requirement and mandatory for minimizing web applications and maintenance costs, optimizing search visibility and user experience, and maximizing web marketing traffic and conversion ROI.

RWD leverages device-aware and device-agnostic web development technologies to eliminate the need for redundant “full” and “mobile” websites by using flexible grids and fluid formats to optimize content presentation for the screen size and capabilities of the requesting device – regardless of whether it be a desktop PC or Mac, iPad or iPhone, Android smartphone or Windows touch screen tablet. This results in a better user experience for which search engines like Góógle, Bíng, Yáhoo and tracking-free DuckDuckGo reward the web page with better placement.

Page speed (how long it takes a web page to download) is another user experience factor now heavily weighted in major search engine ranking algorithms – and for good reason: On the Web as elsewhere, time is money and knowing when to trade one for the other is how you win. According to GlobalDots research, Shopzilla reduced average page load time by 4.8 seconds and increased sales by 12%; Amazon pockets a 1% revenue increase for every 100ms of page load improvement; and Mozilla got 60 million more Firefox downloads per year after making their pages 2.2 seconds faster.

Today’s web surfers are busy people with short attention spans – and that goes double for our ever-growing base of on-the-go mobile users. Fast-loading pages and streamlined transactions complete favorable search experiences while staring at “Loading…” spinners often ends with the reverse. Consequently, slower sites suffer higher page visit and shopping cart abandonment rates while SPEEDY sites enjoy higher search rankings and more eCommerce/mCommerce sales conversions.

Faster page loads also mean faster searches … which means users have time to run more searches … which means Góógle can run more ads and make more money. This is perhaps the primary reason that Dont’t be Evil Góógle loves speedy websites – so much so that they came up with SPDY. SPDY (pronounced “speedy”) is an open networking protocol that can significantly accelerate website performance by reducing latency. It requires SSL/TLS encryption to avoid incompatibility when communicating across a proxy so to leverage SPDY a website must also be SECURE.

Websites with SSL/TLS enjoy significant operating and marketing advantages – especially if they fully implement HTTPS Strict Transport Security. HSTS not only enables SPDY but also helps protect you and your website visitors from malicious hackers, ISP and other third-party snoopers, and unwarranted government surveillance (#HelloNSA). Concerns over Internet privacy and the confidentiality of personal information are at an all-time high. And with Baby Boomers especially, websites that are proactive about Internet security will be their preferred product vendors and service providers.

SS rwd or #ssRwd, it’s all about PERFORMANCE.

Speedy secure responsive web design is where you need to be. Hop in and let WebFL.US take you there!