text:
How do I remove or change activities from social networks?
Perhaps your brother sat on his cell phone and inadvertently posted nonsense on your wall. Maybe after a long talk with your mom you now feel sorry for posting those unflattering photos of your ex-best friend. Regardless of the reason, follow the instructions below to remove or change activities from social networks.
Start by logging into your Facebook account.
- Post: To remove or edit a post or comment that you created, click here for instructions. To remove or hide a post from your timeline, click here for instructions
- Photo: To remove a photo that you posted, click here for instructions. You also have options in case you are tagged in a photo that you do not like
- Private messages: While you can't go back in time and un-send a private message, you can delete the conversation from your own Facebook account by following the instructions here
Start by logging into your Twitter account.
- Tweet: To delete a tweet, follow the instructions here
Start by logging into your Google+ account.
Рассматриваемые продукты
- Avira Free Antivirus [Windows]
- Avira Antivirus Pro [Windows]
- Avira Internet Security Suite [Windows]
- Avira Ultimate Protection Suite [Windows]
- Avira Social Network Protection [Windows]
- Создано : пятница, 12 октября 2012 г.
- Последнее изменение: четверг, 13 февраля 2014 г.


text:
Fairchild vying for new tankers
SPOKANE, Wash. - Fairchild Air Force Base has been selected as one of four finalists to operate the new refueling tanker fleet.
"The KC-135 is the work horse of our nation, what the KC-46A does is much more capacity for us to be able to fuel the fight, to fuel freedom," Col. Brian Newberry, Commander of the 92nd Air Refueling Wing said.
"It has a larger capacity for us to give more fuel to fighters and bombers and other aircraft," he added.Fairchild vying for new tankers
On Thursday, the U.S. Department of Defense announced Fairchild Air Force Base is one step closer to operating the first active duty base for the KC-46A.
Over the next year, the Air Force will be visiting four bases across the country trying to decide where the new tanker will be most effective.
"They'll be looking at how the tanker and the mission work well together, they'll be looking at cost, cost is always a factor for basing it here in the Inland Northwest," Newberry said.
"They'll be looking at the environmental factors as well," he added.
"So it's great capabilities across the board for us in air mobility command, continuing fueling the fight, delivering hope and saving lives," Newberry added.
The Air Force plans to roll out 179 KC-46A aircraft in the next 15 years. Eventually, the new tankers will be stationed at 10 different bases across the country.
Col. Newberry said the list of finalists will be narrowed down later this year, with a final decision expected in 2014.
Forward Fairchild, a committee developed to help bring the new tanker to Spokane, said it could add more than five thousand jobs to our local economy.
"We're incredibly happy that Fairchild made the first cut," Greg Bever said.
Bever is Chair of Forward Fairchild, a committee with Greater Spokane Incorporated.
Altus AFB in Oklahoma, Grand Forks AFB in North Dakota and McConnell AFB in Kansas are also vying to operate the KC-46A.
- Thousands of pennies to help nonprofit school
- Hundreds 'March for Science' in Spokane
- Pink Ribbon Run will raise funds for local breast cancer patients
- STA one step closer to Central City Line
- Providence Health Care to break ground on new behavioral health hospital

subset: commoncrawl


text:
Coloring Templates
Posted 24 August 2012 - 09:16 AM
Thanks for any ideas!
Posted 24 August 2012 - 09:55 AM
Hope this helps!
Scrapper | Wife | Mother | Friend | Soprano | Traveler
Rotarian | CEO, Auction Systems | Recovering Perfectionist
Posted 24 August 2012 - 10:14 AM
You can also get the basics of recoloring ScrapSimple products in the free Scrap Girls Scrapsimple Instructions Handbook
Posted 24 August 2012 - 11:16 AM
Posted 24 August 2012 - 11:18 AM
Posted 24 August 2012 - 11:58 AM
Select and Fill Techniques for ScrapSimple Digital Scrapbooking Templates in Paint Shop Pro
Recoloring and Enhancing Images Using Paint Shop Pro
If you are interested, there are more PSP tutorials in the University here: Digital Scrapbooking with Corel Paint Shop Pro (PSP)
Posted 24 August 2012 - 03:29 PM
Posted 25 August 2012 - 12:07 AM
Waving "Hi!" back April! When I read your first post I thought "gee I haven't seen April in a while!". So now I know why. Come back soon!
I've been home, just not on the forums as much because I had those pesky stitches in my hand. It is way easier to type with them out!
I really meant that I am just a few hours up I-5 from Barb who is in Eugene.
Posted 25 August 2012 - 10:00 PM
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users


text:
I think the game is quite well balanced, there are a few things that seem annoying, such as Molotov cocktail's pretty much make MG42s useless as a simple charge would take them out before you could suppress, Russians don't even have to flank.
The Russian light tanks come too early, you can't get the ammunition to equip PGs with panzerschrecks, and the light tanks are so accurate and mobile that Grenadiers get creamed. Paks can't counter as they are expensive and die to a single Molotov, additionally, unless you get an engine crit the firing arc is so narrow that the light tank just runs a ring around them till they are dead. The Russian heavy mortars with good MG protection are also really hard to overcome, Russians can get them early and sit them in the centre of the map with MG cover, your grenadiers can't flank them due to the MGs and they stop you from capturing most points, but the game changer for me has been the Russian snipers in APCs. Russians get them early, you can't close on them fast enough with grenadiers to destroy the APCs which forces you to buy a SdKfz which delays you getting a Panzer IV which costs you the game as you either lose too much ground or end up with a Panzer against a heavy.
Finally of course is the fact that the grenadiers rifle grenades are slow to set up making them often less effective than Molotov's and it takes 3 or 4 grenades to kill 6 conscripts in a building, (while it takes 1 Molotov to kill a grenadier team in the same building). All of this can be overcome, but it involves a whole heap of very fast micro management key spamming, jumping rapidly between your units. It also takes a degree of luck, there is nothing like getting hit with a light Russian tank, seconds after you spent the ammo your grenadiers needed to destroy the tank on a MG upgrade.
I love CoH, I love how you can balance your offensive, play your strengths, CoH 2 at the moment seems a little too fast paced, you need to micro manage your troops to win, but your always fighting at 2 or 3 points at the same time. If your not there to move as soon at that exact second the conscript reaches for the Molotov you lose 2 Grenadiers and the engagement. If your not there to move the second you hear the heavy mortar sound when capturing a point, you lose your whole unit and if your not set up once you hear the tank sound with at least 40 ammo and 2 units of Grenadiers to flank that light tank, you lose the lot.
So my argument is that there is balance, but its balanced for uber players who know all the hot keys and can give 20 commands to 5 units in 10 seconds. For us plain mortal players, Russians get better stuff, often earlier, for less cost.
Advertising Info
Privacy Policy
Where to Watch LSU
Contact Us
© 2017 TigerDroppings.com. All Rights Reserved


text:
There is a video floating around the Internet that is about a man named Randy Pausch that is dieing of cancer. He is a professor at Carnegie Mellon University and specializes in Virtual Reality, a real interesting fellow. Some versions of the video are about 70 minutes long this one is kind of a readers digest version; http://video.stumbleupon.com/#p=ithct48cqw.
The reason I am sharing this with you is I watched the 76 minutes lecture he gave to his students and faculty at Carnegie Mellon called "Really Achieving your Childhood dreams". This lecture is said to be his "Last Lecture", a tradition in which they ask a professor, "if you were dieing what you would you say at your last lecture".
Dr. Pausch says a lot in 76:26, but his take home thoughts are those about living right. His main point is that we should all have a vision and carry that vision out. This ties so well into our NYLT, where we talk about developing vision and setting goals, then seeing those goals to reality. Dr. Pausch had a vision of what he wanted his life to look like, and now he is at the end of his life, can clearly see how his "Movie is going to end" and he has taken the time to reflect and share some things that made him successful. Interestingly, he said he wrote his "Last lecture" not for his students or faculty, nor the 400 people that attended the lecture, or the millions that have downloaded it on You tube. He wrote it for three people. His children.
You can watch it on your own and learn from it. I just want to share one of his thoughts that really struck me as poignant. He talked about three keys to living well. They are:
1. Tell the Truth.
2. Apologize (Properly)
3. Wait, People will show you their good side (Be Patient)
I want to elaborate on number two. Like he says, there are many bad apologies out there today. We see it all the time in our politicians and sports figures. It seems they are always on the tube telling us they are sorry for this or that. But notice it says Apologize (PROPERLY).
What we see from our sports figures and politicians are by (his) definition, and I tend to agree, bad apologies.
If you are going to say you are sorry… do it right, be sincere. There are three elements to a good apology. 1. I am Sorry. 2. It was my Fault. 3. How do I make it right.
It is the third part that most people leave out. It is not enough to say you are sorry. What are you going to do to make it right. Children most usually get it right, at least in principle. You always hear little kids say, "I am sorry, I'll give you this…" Now its not about give and take, but the principle of making it right shows sincerity. Without it you have not apologized correctly.
As I watched Dr. Pausch for 76 minutes I did not see a man about to die. I saw a man that was living his life to the very end. A man that understood what it took to have a good life and how to share that life with others. He did not apologize for being happy with his life, even though he could see the part of the movie where the credits start to role.
Take some time, 76 minutes if you have it, or 11 for the shorter version, and watch the video. Take some notes, because this guy understands life and how it should be lived.
Happy Scouting!


text:
Forgot Password? | Not a User? Sign up
Your browser does not support iframes.
Taylor County Emergency Management, in conjunction with Campbellsville-Taylor County Fire Department, will host an advanced spotters class at the Campbellsville-Taylor County Fire Department's third floor meeting room Tuesday, April 8 at 7 p.m.
The certified training will be taught by National Weather Service staff and will last about two hours. Emergency service personnel, school officials, industrial safety officials, those responsible for public safety and the general public are invited to attend.
The official World Health Day 2008 celebration is Monday, April 7, but you can help make the world a healthier place all month long by donating blood.
This year's World Health Day theme is "Protecting health from climate change." Extreme weather-related disasters are just one concern related to climate change.
The Campbellsville-Taylor County Fourth of July Celebration Committee recently announced that the theme for the 2008 celebration will be "Celebrating the Life of Lincoln."
The theme is a natural tie-in with the national 200th Anniversary Commemoration of the birth of Abraham Lincoln now under way.
If you need blood work, health screenings or a wealth of health related information, then the Taylor Regional Hospital "Healing with Heart" Health Fair is for you.
The fair will be from 8 a.m. to noon Saturday, April 19 at the Taylor County High School gymnasium.
"This year we are proud to offer over 40 booths with health information and screenings," said Jane Wheatley, CEO of Taylor Regional Hospital.
National spokespersons Dr. Richard Land and Holly Hollman will be at Campbellsville University on Tuesday, April 1.
Land is president of the Southern Baptist Convention's Ethics & Religious Liberty Commission, and Hollman is general counsel of the Baptist Joint Committee for Religious Liberty in Washington, D.C.
Their address, titled "Church and State and Religious Liberty Issues," is sponsored by CU's Kentucky Heartland Institute on Public Policy.
The event, which is free and open to the public, is scheduled for 5 p.m. in the Little Auditorium.
Dr. Thomas G. Barnes will be presenting a program in Campbellsville University's Little Auditorium on Friday, April 4 at 2 p.m.
Barnes is a Kentucky state extension wildlife specialist and associate extension professor of forestry at the University of Kentucky.
He will speak on "Rare Plant Conservation and Kentucky's Last Great Places" during the presentation, which is free and open to the public.
Immediately following Barnes' address, there will be a book signing for his two books: "Kentucky's Last Great Places" and "Wildflowers and Ferns of Kentucky."
Opportunities for individuals to become "community patriots" will be the topic of an upcoming talk at Lindsey Wilson College.
Kentucky League of Cities Executive Director Sylvia Lovely will speak about her book, "The Little Red Book of Everyday Heroes: How Ordinary People Can Become Community Patriots," at 5 p.m. ET Tuesday, March 25 in the Thomas D. Clark Reading Room of the Holloway Building.
Lovely's talk - which is part of the Lindsey Wilson Lecture Series on Civic Engagement - is free and open to the public.
Volunteers will be out in full force next week to spring clean Kentucky's roadsides. The Transportation Cabinet announced recently that the Adopt-a-Highway Spring Clean Week will be March 23-29.
"The Kentucky Transportation Cabinet appreciates the effort put forth by all Adopt-a-Highway groups in keeping our highways and communities beautiful and litter-free," Transportation Secretary Joe Prather said.
Children need proper nutrients to grow strong and healthy, but treats and serving sizes also need to be limited so that children will not develop weight and health problems.
Taylor Regional Hospital will offer a free class, "Fun Foods for Kids," from 5:30 to 7 p.m. on Thursday, March 20 at the TRH Learning & Resource Center at 125B Kingswood Drive in Campbellsville.
The class was originally scheduled for Feb. 21 but was rescheduled due to severe winter weather.
If you are 50 years old or older, it's time to be screened for colon cancer.
That's the message the Kentucky Department for Public Health is sending Kentuckians in March as part of National Colorectal Cancer Awareness Month. Anyone who falls into this age group, or has a family history of the disease, should talk to a health care provider about colon cancer screening.
Copyright © 2017
The Central Kentucky News-Journal is your source for local news, sports, events, and information in Campbellsville, KY and the surrounding area.


text:
If you forgot your password, enter your e-mail and we will send you a message with the instructions to reset your password.
Whether it´s a day at the office or a night on the town, a Long Sleeve Shirt is your best option. This versatile piece of clothing can be dressed up with a blazer or worn casual with chinos. The choice is yours.


text:
Maple Glazed Pork Chops RecipeRead Reviews Be the first to add a review
- 1/2 cup all-purpose flour
- Salt and pepper to taste
- 4 bone-in pork loin chops (7 ounces each)
- 2 tablespoons butter
- 1/4 cup cider vinegar
- 1/3 cup maple syrup
- 1 tablespoon cornstarch
- 3 tablespoons water
- 2/3 cup packed brown sugar
- In a large resealable plastic bag, combine the flour, salt and pepper. Add pork chops and shake to coat. In a large skillet, cook chops in butter over medium heat for 4-5 minutes on each side or until a thermometer reads 145°. Remove and keep warm.
- Meanwhile, in the same skillet, bring the vinegar to a boil. Reduce heat; add maple syrup. Cover and cook for 10 minutes. Combine cornstarch and water until smooth; gradually add to maple mixture. Bring to a boil; cook and stir for 2 minutes or until thickened.
- Place chops on a broiler pan; sprinkle with brown sugar. Broil 4 in. from the heat for 1-2 minutes or until sugar is melted. Drizzle with maple glaze. Yield: 4 servings.
Medium-Bodied White Wine
Enjoy this recipe with a medium-bodied white wine such as Riesling or Gewürtztraminer
Reviews for Maple Glazed Pork Chops
"Ohhh these are WONDERFUL!!! I love anything maple so jump at recipes with maple...made exactly as written...YUM!!!"
"My man loved this and so did I. Will make again.Made as is and served it with baked sweet potatoes and green beans with onions and mushrooms.SOOOOO Good!"
"These were really yummy and appreciated by everyone at the table!! I made a couple of changes to the recipe however.......I used Mrs. Butterworths Lite pancanke syrup to cut the sugar and calories down some and I only used a sprinkling of the brown sugar on the pork chops (maybe an 1/8 cup sprinkled over 4 med. sized chops). I couldn't even imagine using the suggested 2/3 cup of brown sugar. You'd never get through the crust. I will definitely be making these again."
"Didn't look like it should've but boy did it taste good"
"Very easy to make and we loved it!"
"This had a wonderful flavor, but the thick layer of brown sugar made such a hard crust that it was difficult to eat. Next time I'll try cutting down on the amount of brown sugar, making a thinner sugar "crust". Also, if you don't want a nightmare clean up job, grease the pan!"
"This was a wonderful recipe and would work fine with boneless pork chops as well. The mix of the sweet and tart was just right. I broiled them right in the baking pan and that worked fine."


text:
BUDCLICKS EARPHONE Panda
"Budclicks Earphone" is the best earphone which comes with Budclicks. Budclicks is new style accessary with the ability to click charms to earbuds. They allow kids, tweens, and adults to style up those bland white earbuds. The Budclick mount works on iPod and iPhone style white earbuds created by Apple. With over 150 million of these earbuds on the market Budclicks have appeal to just...
Philips SHE3590WT/10 In-Ear Headphones (White)
The Philips SHE3590 In-Ear Headphones are offered in distinctive colors to match for all occasions. The ultra small in-ear design conforms to ear shape for best fit, and the earphones come with soft caps for comfort and compact fit. With small efficient speakers for dynamic bass and clear sound, these in-ear headphones are ideal for your listening enjoyment.


text:
Muay Thai Weekly Recap: March 10
- Written by Rian Scalia
Quick Results
Monday, March 4
Phetsinean Payaksupan def. Lomtalay Sitzorueng by decision.
Design Rajanont def. Fonpet Chuwattana by decision.
Yardfah K.R.S. Gym def. Aiktawan Mor. Krongthepthonburi by decision.
Chotchasarn Wiwatananont def. Sakmongkon 96Penang by TKO in Round 2.
Tuesday, March 5
Rung-Ubon Zakami def. Prakaipet J.S.P. by decision.
Prakaiphet Zakami def. Yothin Sakaetongresort by decision.
Rungkiat Kiatprapat def. Jaisoo Thor. Thepsuthin by decision.
Wednesday, March 6
Nontakit Tor. Morsri def. Neungtrakarn Excidicalgym by decision.
Thursday, March 7
Phet-Utong Or. Kwanmuang def. Petmorakot Wor. Sungprapai by decision.
Trakoonphet Sor. Sommai def. Hongtonglek Chor. Fahpiansi by decision.
Denkiri Sor. Sommai def. Kongsiam Tor. Pithakchai by TKO in Round 2.
Addam Teded99 def. Lom-Esarn Sitzorueng by decision.
Pitchichai Or. Bor. Tor. Khampi def. Saknarin Sitzorueng by TKO in Round 4.
Friday, March 8
Singdam Kiatmoo9 def. Sagetdao Phetphayathai by decision.
Pongrit Chor. Chernkamon def. Lamnampong Noomjeantawana by decision.
Yokpet Sompongmataput def. Wanchalong Sitzornong by decision.
Mondam Sor. Weraphon def. Chokprecha Kor. Sakooncher by TKO in Round 3.
Rittidet Wor. Wanthavee def. Newwangjan Pagornponsurin by TKO in Round 2.
Thongchai Sitthongsak def. Damien Alamos by TKO in Round 2.
Choknamchai Sitjakong def. Superlek Wor. Sungprapai by decision.
Palangpon Por. Thairungruangkamai def. Katapet Sor. Suradej by decision.
Chamuakphet Jitmuangnont def. Khunphan Kiatjaroenchai by decision.
This week was action packed, culminating in the huge show on Friday. Not only did the show on Friday live up to its expectations and more, it was one of the best shows top to bottom that I've seen. Featuring a who's who of Muay Thai, there wasn't a bad fight on Friday.
Singdam defeated Sagetdao in the main event in a great strategical battle, with Sagetdao trying to close distance and clinch while Singdam did what he does and fired off hard right round kick after hard right round kick. Sagetdao was out of gas later on when Singdam fully took over.
For me, my favorite fight was Mondam vs. Chokprecha. Chokprecha came out guns blazing and managed to land some big shots on Mondam, with elbows, punches and low kicks. Mondam hung with him the whole time and a recurring theme in the fight was his right cross. In the third round Mondam landed a picture perfect right cross to seal the deal.
A few other stoppages happened on the card, so we'll start with Thongchai vs. Damien Alamos. Thongchai came out from the opening bell and seemed to have the mindset that Alamos had nothing for him. Thongchai destroyed Alamos and eventually got him in the corner, dropped him with an elbow and then pounded Alamos with elbows until he referee was forced to stop the bout. It was a very impressive performance from Thongchai coming up in weight.
Rittidet's stoppage of Newwangjan came via form of low kicks, and it didn't even take that many. Rittidet also came out fast, throwing a lot of punches. He managed to sneak in a few really hard low kicks so by the second round one vicious low kick put Newwangjan down and out.
Like all Wanchalong fights, Wanchalong vs. Yokpet was action packed and back and forth. Superlek and Choknamchai were also involved in a great fight, with Superlek being dropped in the fourth only to hurt Choknamchai with an elbow moments later.


text:
Where is the purples bears cudas with the huggers oranges when I needs a GTO on the 4 on theo floors??
Where is the purples bears cudas with the huggers oranges when I needs a GTO on the 4 on theo floors??
Good for you for trying. Derbies are fun and I encourage more people to try them.
It's funny that some say that "marks can't be that hard, after all there is a guy in a white coat standing near it." Many times it's the guy in the white coat that is close that prevents the dog from ever seeing the guy in the white coat that is far.
John Lash
"If you run Field Trials, you learn to swallow your disappointment quickly."
"Field trials are not a game for good dogs. They're for great dogs with great training." E. Graham
My unique experience with a flyer. It was a AKC ht, senior level with Hudson. It was a double, flyer was go bird. Watched memory bird down, then flyer was shot. Sent Hudson. He gets about 3/4 the way to the shot flyer. He makes an abrupt turn to the gun station and is circling aroung the gun station like crazy.
I'm in a blind panic. He comes back with the bird. I send for memory bird and he returns with it. The judges and I am in the dark as to what went on. They thought maybe an extra duck had got out of the crate.
One of the judges walks out to the gun station to find out what went on.
The gunners explained: they only barely cripped the duck. They were afraid to sluice it as the dog was in the field. The duck ran back to the gun station and was trying to get back in the crate, I guess.
We passed. But I don't want to go through that again.
Wayne Nutt
Go Nutts with dog training
HRCH Patton's Parker Co. Shadow "Shadow"
HRCH Clineline Hijacker "Jack"
HRCH Marks a Lot Midnight Hudson, SH "Hudson" RIP (5/26/01-6/18/15)
Castile Creeks Rawhide, MH "Rowdy"
Now you know. Make your own flier station in training and practice looking past it to a much less obvious gun station at a big distance. It would be good to get the dog in the habit of looking past multiple short guns and to a long gun in training. It's the little things like that that add up quick.
This is the progression of how it has work for me. Go to a test or trial, find out what you need to work on.(more to the affect of getting your a*s handed to me) Can't get upset, learn from it and go back home and try your best to train the way you trial. Evently you will be prepared for what ever they throw at you.
I entered a young dog in a junor a few years ago, he does a nice job on the flyer. I too lined for memory bird, I thought we had it. He breaks down,heads back to flyes station. He ran to the bird crate and started barking at the ducks in the crate, I had to walk out to get him, he was not going to leave that bird crate.
Good for you for running. Look at any field trial call backs posted on the events page and many many very good dogs don't make it past the 1st series. It won't be the last time but of course train as if your going to win each weekend.
Have Hubby stand a short station holding live duck hen by the feet. (not going to shoot it, you can keep it alive for months if you want). You concentrate on getting dog to watch a long mark, throw and retrieve it. All the while hubby is moving arm and duck up & down getting duck to flap its wings and hopefully quack up a storm (reason to use a hen). Dats dat.
The least of your worries is which side dogs was on. While helpful if you train for it, it didn't matter much I'm afraid.
"Darla" AFC Candlewoods Lil Smokin Tequila (2002-2013)
"Smoke" Smokin Auggies Menace, QAA (2003- 2016)
"Simba" Humewood Simba (1999-2014)
Per favore, non mi rompere i coglioni.
Jen, it's the whole package. The flyer station... The excitement... The fresh shot duck... The trucks... The gallery... The judges... The marshal yelling the numbers... The chairs... The mat... The holding blinds... All of it was a whole new experience. You are not the first and won't be the last to say "she never did that before"!
Live shot flyers at a trial are WAY more exciting to a dog than duck hunting... They feel the pressure. In hunting the pressure is off for the most part.
You did better than my first derby attempt. My dog nearly caught the bird as it bounced on the ground! I was too dumbfounded to yell sit when he took off because "he had never done that before"!!
Last edited by huntinman; 03-23-2013 at 06:12 PM.
Bill Davis


text:
Hurry - Order by May 11 for Mother's Day delivery
$ 325.00
Unfortunately this product is currently not available.
Eye-catching and colorful, Minnie strikes a playful and dynamic pose. She shines in Black Diamond crystal with a clear crystal face and gloves. Her eyes and nose gleam in Jet crystal and she wears a cute Aquamarine crystal dress and Rose crystal shoes. A must-have for Disney collectors! Decoration object. Not a toy. Not suitable for children under 15.


text: Use of a vest has nothing to do with proper coat, it has to do with keeping you dog comfortable in a harsh conditions, doesn't really have to do with water temp either. More like a wet dog is more comfortable sitting around in freezing temps. with wind-chill etc. for hours on end, with a vest keeping their body heat trapped to their body. A wet dog, even a dog with the best longest thickest coat whatever; will get cold if he has to sit unmoving for hours on end in freezing temps. Now if I had my dog out retrieving birds, and then moving around generating heat, she probably would die of heat stroke in a vest. But most duck dogs just sit after a cold weather retrieve, waiting for the next. They don't move around and generate heat, and they start to lose core temp. lose too much core temp. and you get hypothermia. It's not the coat, water or retrieving, it's the Sitting that will Kill Yah.


text:
Unlike the pitiful Paramount barebones releases of the Friday the 13th series, the New Line DVD releases of the last two Ft13 movies are fully loaded. They will be released on October 8th. And JGtH will also contain the unrated edition. Hopefully they sell well, and maybe Paramount will re-issue Ft13 1-8 in S.E. versions. Here are the specs, from horrordvd.com:
Jason X: Platinum Series DVD, October 8, 2002, $26.98 MSRP
The Platinum Series DVD features a widescreen version of the film, 5.1 Dolby Digital Surround Sound, DTS Surround Sound, Stereo Surround Sound, the theatrical trailer and animated menus. The DVD also includes filmmaker commentary with Director Jim Isaac, Writer Todd Farmer and Producer Noel Cunningham and two original documentaries: The Many Lives of Jason Voorhees, a documentary on the history of Jason and By Any Means Necessary: The Making of Jason X, a making of/production documentary. "Jump to a Death" feature with Random Kill and Kill All buttons including a menu selection of death scenes from the movie along with 5.1 surround sound trailers from other selected horror titles available from New Line Home Entertainment. The DVD-ROM content includes the "Script-to-Screen" screenplay feature as well as the original website.
Jason Goes to Hell: DVD, October 8, 2002, $19.98 MSRP
The DVD will feature widescreen and fullscreen versions of both the rated and unrated versions the film, along with Dolby Digital 5.1 Surround Sound and Stereo Surround Sound. The DVD will include audio commentary with Director Adam Marcus and screenwriter Dean Lorey, the "Jump to a Death" feature with R-Rated and Unrated options, animated menus, English subtitles, closed captions and the original theatrical trailer.
Excellent work, New Line! Jason X in DTS - too sweet!
MTFBWY and HH!!
Jar Jar Binks


text:
Yesterday I pushed a review of "Apache Desktop Reference" out the door via e-mail. Received a acknowledgement back and note not to worry about getting a cover image. Both nice.
Today I pushed a bit of documentation out. It required pushing myself. I promised I'd finish this. I just want to be finished with that project. I figure I have a couple of days before I will get enough responses back that I have to do the rest of it. There should be a day or two to work on some of the fun pieces.
I hooked up the new 17" LCD flat panel display. I shifted from 1024x768 to 1280x1024 resolution. Now I have to get all the fonts resized in all the apps to something I can read all day long without going blind.
The flat panel display sat on the floor overnight. SuSE 7.1 has been sitting on the floor for almost a week, waiting for some time to install it, and fiddle with it, and rebuild or download the things it breaks, and time to play with the new features, and built a firewall with IPtables, and try out XFree86 4.0, and try the 2.4 kernel, and then put it all back together so I can get some paying work done. Wish I had money, space, time, and air conditioning for a work machine and a play machine to try some cutting edge stuff, and another play machine for games.
To quote the sage Pogo: "We are faced with insurmountable opportunities."


text:
Is it meant to have that pixel column effect on each 8x8 matrix as it scrolls?
Other than that it looks good.
Just uploaded it.....no difference in this compared to the video I posted....
PIN R/C Your Picture01 = R5 r502 = R7 r703 = C2 c704 = C3 c605 = R8 r806 = C5 c407 = R6 r608 = R3 r309 = R1 r110 = C4 c511 = C6 c312 = R4 r413 = C1 c814 = R2 r215 = C7 c216 = C8 c1
Please enter a valid email to subscribe
We need to confirm your email address.
To complete the subscription, please click the link in the
email we just sent you.
Thank you for subscribing!
via Egeo 16
Torino, 10131


text:
N3 polarized lenses block 100% of all UV rays
Venting System enhances airflow to eliminate fog
Mastoid Temple Grip for a secure, comfortable fit
Lightweight yet ultra-tough Rhyno-Tuff Air Frames
Best Fits a Medium to Large Profile
Regardless of what type of tackle you use, make the most of your day and equip yourself with the best polarized sunglasses available from Native Eyewear.
N3 Polarized Lenses - The most innovative and advanced polarized lens available, N3 Lenses pass Z87.1 testing and feature up to 40% IR reduction, UV protection up to 400nm, and state-of-the-art blue light filtering. These optical-quality, impact-resistant lenses block 100% of the harmful UV light and eliminate glare for sharp, clear vision with increased contrast and depth perception.
Polarized Crystal Carbonate (P.C.C.) Lenses provide outstanding vision and protection in all lighting conditions.
Co-Injected Molding - Native frames now seamless incorporate their grippy, comfortable molding right into the plastic.
Venting System - Exhaust vents incorporated into the design framework enhance airflow, virtually eliminating fog and condensation. This unique design feature is the only system available that allows maximum ventilation while blocking extraneous incoming light.
Mastoid Temple Grip - This design features ensures that the temple ends hug the mastoid bone (behind your ears), allowing for a secure and comfortable fit.
Anti-Ocular Intrusion System - Designed to prevent your lenses from dangerously shooting toward your eyes in the event of an impact.
Rhyno-Tuff Air Frames - A proprietary, high-performance thermoplastic material which is extremely lightweight yet durable enough to withstand high-velocity collisions and temperature extremes.
Cushionol Nose Pads ensure a soft feel and a custom fit, regardless of the shape or size of your nose.
Cushionol Temple Boots create a nonslip grip that keeps your sunglasses in place during athletic activity.
Cam-Action Hinges - This patented features allows the temples to quickly lock into position, getting you ready for action.
Folding Plate Technology uses complex contoured ribs in a section of the frame to control the flex of the temples. This maximizes the strength-to-weight ratio of the frame.
Single Snap-Back Interchangeable Lens System - Designed to quickly and efficiently utilize all of Native's lens options, so you can adjust to all light conditions.
Best Fits a Medium to Large Profile


text:
By Parrish Alford/NEMS Daily Journal
OXFORD – Cody Core knows the score.
The rising sophomore feels himself developing and getting better. He also sees the talent that will be joining the Ole Miss wide receivers in August.
"There's going to be a lot of competition, and when camp starts, everything is open. There's no first string, second string … none of that," Core said. "They're going to come in and work just like we're going to come in and work."
LaQuon Treadwell, the No. 1 wide receiver prospect, is among five receivers who will join the team this summer.
The Rebels conclude spring football with the Grove Bowl today at 1 at Vaught-Hemingway Stadium.
Admission is free.
With most starters returning on both sides of the ball, spring has been about developing depth.
That's been especially true at receiver, where Core has been one of few scholarship backups able to get in meaningful work the last few weeks.
"I'm better than I was last year. I can say that, just from watching film, getting in the weight room and getting the little things right, knowing where the defensive backs will be on certain routes, how they will cheat and how to get around that," he said.
Core played in 13 games, mostly on special teams. He caught one pass.
At the outset of spring Freeze talked about the possibility of moving Core to safety, another position where he's trying to build depth.
But Core didn't sign off on the move.
"They talked to me about it," he said. "I was like, 'Let's see how spring goes.'"
Spring has gone just OK for the receivers.
Donte Moncrief, the team's leading receiver, has missed most of spring with ankle injury. Others have also missed time, as has starting quarterback Bo Wallace while recovering from shoulder surgery. He is expected to be ready in August. Spring reps have been divided mostly between Barry Brunetti and Maikhail Miller.
Many of the players fans will see catching passes today won't be in the top group in the regular season.
"We don't have any depth. None," Freeze said. "We're just beat up there."
youngsters coming
When Freeze talks about his heralded signing class, he doesn't mention redshirts often.
He singles out Treadwell and Quincy Adeboyjo among his incoming receivers and says it's possible all four freshman offensive linemen could play.
Even though he'll return Wallace and an experienced backup in Brunetti, it's not certain that either of his four-star quarterback signees, Ryan Buchanan or Devante Kincade, will redshirt.


text: So......we all love the POTJ line, it gets better and better. Right? Well I was thinking, "What could be done better about the figs?" Besides the obvious, of course (better articulation((which they are working on)), more accessories, more detail, etc.) I think they need a new pack-in. I was thinking maybe like a control console, we can never have too many of those, because we only have a few. Or maybe a cool bigger accessory. Something! Those Force Files are not bad, but not good either, so we need to do something about it? What do you think needs change?


text:
The most important thing for her now would be to get used to competing again. I expect her to be rusty after 20 months of not competing. She looked quite rusty at the World Figure Skating Championships in 2011 when she competed after a year of break, even when she said that she was 100% physically. This time the interval has been longer. Also, she said in an interview yesterday that she is only about 80-90% physically this time, so I think she might be even rustier this time. She still has much time to prepare before more important competition,s so I think she just needs to focus on getting back her "competitive legs" for now.
She might not score as high as she used to before (probably about high 170s or low 180s or so), but then by March or April next year, her score will probably go up to high 180s or 190s (or even 200 by next season, I hope). But then, scores are not as important as the actual performance, so I won't worry about it.
Last edited by bluesky85; 12-05-2012 at 01:44 PM.
Official NRW Trophy You-tube channel
"NRW Trophy 2012
Senior Ladies/ Short Program
Starting Order
31(=Group 6, 1st) Yu-na kim (KOR)"
(some fan uploaded the livestream version. You can see her in warmup plus her SP)
She did 3lz/3t, 3f & 2a
omggg I'm dying for that new dress!
However, I feel like person who uploaded swapped the music or something because I couldn't hear people cheering after her jumps, and when she was warming up, there were definitely cheers....... butttt at least I saw her jumps!
Oh, my. She's back!! That 3Ltz/3toe--amazing!
I think the pressure on Mao, Ashley & Akiko just went up about 20 notches.
BTW - Yuna received Level 3 on all her spins & step, but still managed to get 72.27. Once she starts working on her spins & step, this SP is going to be impossible to beat.
Protocol for those of you interested in such matters http://www.lev-nrw.org/lev2008/docs/..._SP_Scores.pdf
I just have to laugh and chuckle after all this talk of Yuna watering down her content and playing it safe. Since when has she ever done that? Just because it's trendy for the ladies these days doesn't mean she'll go that route...
She definitely didn't need that jump layout to get the minimum qualifying points.
Great program and great scores. Her lowest PCS is Transitions, and I agree with that. She is terrific in every other aspect, but I'd like to see her do more transitions at the beginning of her program.


text:
[<tag> ]<mode> <object> <stage> <file>
git-ls-files - Show information about files in the index and the working tree
This merges the file listing in the directory cache index with the actual working directory list, and shows different combinations of the two.
One or more of the options below may be used to determine the files shown:
Show cached files in the output (default)
Show deleted files in the output
Show modified files in the output
Show other files in the output
Show ignored files in the output. Note that this also reverses any exclude list present.
Show stage files in the output
If a whole directory is classified as "other", show just its name (with a trailing slash) and not its whole contents.
Do not list empty directories. Has no effect without --directory.
Show unmerged files in the output (forces --stage)
Show files on the filesystem that need to be removed due to file/directory conflicts for checkout-index to succeed.
\0 line termination on output.
Skips files matching pattern. Note that pattern is a shell wildcard pattern.
exclude patterns are read from <file>; 1 per line.
read additional exclude patterns that apply only to the directory and its subdirectories in <file>.
If any <file> does not appear in the index, treat this as an error (return 1).
When using --error-unmatch to expand the user supplied <file> (i.e. path pattern) arguments to paths, pretend that paths which were removed in the index since the named <tree-ish> are still present. Using this option with -s or -u options does not make any sense.
Identify the file status with the following tags (followed by a space) at the start of each line:
to be killed
Similar to -t, but use lowercase letters for files that are marked as always matching index.
When run from a subdirectory, the command usually outputs paths relative to the current directory. This option forces paths to be output relative to the project top directory.
Instead of showing the full 40-byte hexadecimal object lines, show only handful hexdigits prefix. Non default number of digits can be specified with --abbrev=<n>.
Do not interpret any more arguments as options.
Files to show. If no files are given all files which match the other specified criteria are shown.
show files just outputs the filename unless --stage is specified in which case it outputs:
[<tag> ]<mode> <object> <stage> <file>
"git-ls-files --unmerged" and "git-ls-files --stage" can be used to examine detailed information on unmerged paths.
For an unmerged path, instead of recording a single mode/SHA1 pair, the index records up to three such pairs; one from tree O in stage 1, A in stage 2, and B in stage 3. This information can be used by the user (or the porcelain) to see what should eventually be recorded at the path. (see git-read-tree for more information on state)
When -z option is not used, TAB, LF, and backslash characters in pathnames are represented as \t, \n, and \\, respectively.
git-ls-files can use a list of "exclude patterns" when traversing the directory tree and finding files to show when the flags --others or --ignored are specified. gitlink:gitignore[5] specifies the format of exclude patterns.
These exclude patterns come from these places, in order:
The command line flag --exclude=<pattern> specifies a single pattern. Patterns are ordered in the same order they appear in the command line.
The command line flag --exclude-from=<file> specifies a file containing a list of patterns. Patterns are ordered in the same order they appear in the file.
command line flag --exclude-per-directory=<name> specifies a name of the file in each directory git-ls-files examines, normally .gitignore. Files in deeper directories take precedence. Patterns are ordered in the same order they appear in the files.
A pattern specified on the command line with --exclude or read from the file specified with --exclude-from is relative to the top of the directory tree. A pattern read from a file specified by --exclude-per-directory is relative to the directory that the pattern file appears in.
gitlink:git-read-tree[1], gitlink:gitignore[5]
Written by Linus Torvalds <email@example.com>
Documentation by David Greaves, Junio C Hamano, Josh Triplett, and the git-list <firstname.lastname@example.com>.
Part of the gitlink:git[7] suite


text:
|index by Group
|index by Distribution
|index by Vendor
|index by creation date
|index by Name
|Name: libgnutls-openssl27
|Distribution: openSUSE 13.1
|Version: 3.2.4
|Vendor: openSUSE
|Release: 2.5.1
|Build date: Tue Nov 5 17:07:43 2013
|Group: Productivity/Networking/Security
|Build host: build65
|Size: 42676
|Source RPM: gnutls-3.2.4-2.5.1.src.rpm
|Packager: http://bugs.opensuse.org
|Url: http://www.gnutls.org/
|Summary: The GNU Transport Layer Security Library
The GnuTLS project aims to develop a library that provides a secure layer over a reliable transport layer. Currently the GnuTLS library implements the proposed standards of the IETF's TLS working group.
* Tue Nov 05 2013 firstname.lastname@example.com - Fix bug[ bnc#848510], CVE-2013-4487( off-by-one security fix in libdane) Add patch file: CVE-2013-4487.patch * Fri Oct 25 2013 firstname.lastname@example.com - Fix bug[ bnc#847484], CVE-2013-4466 ( DoS in libdane) Add patch file: CVE-2013-4466.patch * Mon Sep 02 2013 firstname.lastname@example.com - Don't run install-info on images * Mon Sep 02 2013 email@example.com - Update to 3.2.4 * * libgnutls: Fixes when session tickets and session DB are used. Report and initial patch by Stefan Buehler. * * libgnutls: Added the RSA-PSK key exchange. Patch by by Frank Morgner, based on previous patch by Bardenheuer GmbH and Bundesdruckerei GmbH. * * libgnutls: Added ciphersuites that use ARCFOUR with ECDHE. Patch by Stefan Buehler. * * libgnutls: Added the PFS priority string option. * * libgnutls: Gnulib included files are strictly LGPLv2. * * libgnutls: Corrected gnutls_certificate_server_set_request(). Reported by Petr Pisar. * * API and ABI modifications: gnutls_record_set_timeout: Exported Add files:gnutls-3.2.4.tar.xz.sig, gnutls-3.2.4.tar.xz, gnutls-3.2.4-noecc.patch Delete file: gnutls-3.2.3-noecc.patch * Thu Aug 29 2013 email@example.com - buildrequire valgrind on the same arch list that valgrind builds * Thu Aug 01 2013 email@example.com - Updated to 3.2.3 * * libgnutls: Fixes in parsing of priority strings. Patch by Stefan Buehler. * * libgnutls: Solve issue with received TLS packets that exceed 2^14. (this fixes a bug that was accidentally introduced in 3.2.2) * * libgnutls: Removed gnulib modules under LGPLv3 that could possibly be used by the library. * * libgnutls: Fixes in gnutls_record_send_range(). Report and initial fix by Alfredo Pironti. - Updated to 3.2.2 * * libgnutls: Several optimizations in the related to packet processing subsystems. * * libgnutls: DTLS replay detection can now be disabled (to be used in certain transport layers like SCTP). * * libgnutls: Fixes in SRTP extension generation when MKI is being used. * * libgnutls: Added ability to set hooks before or after sending or receiving any handshake message with gnutls_handshake_set_hook_function(). - gnutls-3.2.3-noecc.patch: updated to disable ECC. - automake-1.12.patch: upstream, dropped - gnutls-32bit.patch: upstream, dropped - gnutls-3.2.1-pkcs11.diff: upstream, dropped * Fri Jul 26 2013 email@example.com - revert to using certificate directory again until gnutls understands the trust bits in pkcs11. Otherwise it would use blacklisted certificates. * Mon Jul 08 2013 firstname.lastname@example.com - Override broken configure checks * Thu Jul 04 2013 email@example.com - use pkcs11 interface to fetch the system's CA certificates (fate#314991). Add patch gnutls-3.2.1-pkcs11.diff to fix doing that, obsoletes gnutls-implement-trust-store-dir.diff. * Thu Jun 27 2013 firstname.lastname@example.com - Disable all ECC algorithms. - gnutls-32bit.patch: upstream patch to make test work with 32bit time_t. - gnutls-implement-trust-store-dir.diff currently not yet forward ported. - Updated to GnuTLS 3.2.1 * * libgnutls: Allow ECC when in SSL 3.0 to work-around a bug in certain openssl versions. * * libgnutls: Fixes in interrupted function resumption. Report and patch by Tim Kosse. * * libgnutls: Corrected issue when receiving client hello verify requests in DTLS. * * libgnutls: Fixes in DTLS record overhead size calculations. * * libgnutls: gnutls_handshake_get_last_in() was fixed. Reported by Mann Ern Kang. - Updated to GnuTLS 3.2.0 * * libgnutls: Use nettle's elliptic curve implementation. * * libgnutls: Added Salsa20 cipher * * libgnutls: Added UMAC-96 and UMAC-128 * * libgnutls: Added ciphersuites involving Salsa20 and UMAC-96. As they are not standardized they are defined using private ciphersuite numbers. * * libgnutls: Added support for DTLS 1.2. * * libgnutls: Added support for the Application Layer Protocol Negotiation (ALPN) extension. * * libgnutls: Removed support for the RSA-EXPORT ciphersuites. * * libgnutls: Avoid linking to librt (that also avoids unnecessary linking to pthreads if p11-kit isn't used). - Updated to GnuTLS 3.1.10 (released 2013-03-22) * * certtool: When generating PKCS #12 files use by default the ARCFOUR (RC4) cipher to be compatible with devices that don't support AES with PKCS #12. * * libgnutls: Load CA certificates in android 4.x systems. * * libgnutls: Optimized CA certificate loading. * * libgnutls: Private keys are overwritten on deinitialization. * * libgnutls: PKCS #11 slots are scanned only when needed, not on initialization. This speeds up gnutls initialization when smart cards are present. * * libgnutls: Corrected issue in the (deprecated) external key signing interface, when used with TLS 1.2. Reported by Bjorn H. Christensen. * * libgnutls: Fixes in openpgp handshake with fingerprints. Reported by Joke de Buhr. * * libgnutls-dane: Updated DANE verification options. * * configure: Trust store file must be explicitly set or unset when cross compiling. - Updated to GnuTLS 3.1.9 (released 2013-02-27) * * certtool: Option --to-p12 will now ask for a password to generate a PKCS #12 file from an encrypted key file. Reported by Yan Fiz. * * libgnutls: Corrected issue in gnutls_pubkey_verify_data(). * * libgnutls: Corrected parsing issue in XMPP within a subject alternative name. Reported by James Cloos. * * libgnutls: gnutls_pkcs11_reinit() will reinitialize all PKCS #11 modules, and not only the ones loaded via p11-kit. * * libgnutls: Added function to check whether the private key is still available (inserted). * * libgnutls: Try to detect fork even during nonce generation. - Updated to GnuTLS 3.1.8 (released 2013-02-10) * * libgnutls: Fixed issue in gnutls_x509_privkey_import2() which didn't return GNUTLS_E_DECRYPTION_FAILED in all cases, and affect certtool operation with encrypted keys. Reported by Yan Fiz. * * libgnutls: The minimum DH bits accepted by priorities NORMAL and PERFORMANCE was set to previous defaults 727 bits. Reported by Diego Elio Petteno. * * libgnutls: Corrected issue which prevented gnutls_pubkey_verify_hash() to operate with long keys. Reported by Erik A Jensen. - Updated to GnuTLS 3.1.7 (released 2013-02-04) * * certtool: Added option "dn" which allows to directly set the DN in a template from an RFC4514 string. * * danetool: Added options: --dlv and --insecure. Suggested by Paul Wouters. * * libgnutls-xssl: Added a new library to simplify GnuTLS usage. * * libgnutls-dane: Added function to specify a DLV file. * * libgnutls: Heartbeat code was made optional. * * libgnutls: Fixes in server side of DTLS-0.9. * * libgnutls: DN variable 'T' was expanded to 'title'. * * libgnutls: Fixes in record padding parsing to prevent a timing attack. Issue reported by Kenny Paterson and Nadhem Alfardan. * * libgnutls: Added functions to directly set the DN in a certificate or request from an RFC4514 string. * * libgnutls: Optimizations in the random generator. The re-seeding of it is now explicitly done on every session deinit. * * libgnutls: Simplified the DTLS sliding window implementation. * * libgnutls: The minimum DH bits accepted by a client are now set by the specified priority string. The current values correspond to the previous defaults (727 bits), except for the SECURE128 and SECURE192 strings which increase the minimum to 1248 and 1776 respectively. * * libgnutls: Added the gnutls_record_cork() and uncork API to enable buffering in sending application data. * * libgnutls: Removed default random padding, and added a length-hiding interface instead. Both the server and the client must support this extension. Whether length-hiding can be used on a given session can be checked using gnutls_record_can_use_length_hiding(). Contributed by Alfredo Pironti. * * libgnutls: Added the experimental %NEW_PADDING priority string. It enables a new padding mechanism in TLS allowing arbitrary padding in TLS records in all ciphersuites, which makes length-hiding more efficient and solves the issues with timing attacks on CBC ciphersuites. * * libgnutls: Corrected gnutls_cipher_decrypt2() when used with AEAD ciphers (i.e., AES-GCM). Reported by William McGovern. - Updated to GnuTLS 3.1.6 (released 2013-01-02) * * libgnutls: Fixed record padding parsing issue. Reported by Kenny Patterson and Nadhem Alfardan. * * libgnutls: Several updates in the ASN.1 string handling subsystem. * * libgnutls: gnutls_x509_crt_get_policy() allows for a list of zero policy qualifiers. * * libgnutls: Ignore heartbeat messages when received out-of-order, instead of issuing an error. * * libgnutls: Stricter RSA PKCS #1 1.5 encoding and decoding. Reported by Kikuchi Masashi. * * libgnutls: TPM support is disabled by default because GPL programs cannot link with it. Use --with-tpm to enable it. * * libgnutls-guile: Fixed parallel compilation issue. * * gnutls-cli: It will try to connect to all possible returned addresses before failing. - Updated to GnuTLS 3.1.5 (released 2012-11-24) * * libgnutls: Added functions to parse the certificates policies extension. * * libgnutls: Handle BMPString (UCS-2) encoding in the Distinguished Name by translating it to UTF-8 (works on windows or systems with iconv). * * libgnutls: Added PKCS #11 key generation function that returns the public key on generation. * * libgnutls: Corrected bug in priority string parsing, that mostly affected combined levels. Patch by Tim Kosse. * * certtool: The --pubkey-info option can be combined with the - -load-privkey or --load-request to print the corresponding public keys. * * certtool: It is able to set certificate policies via a template. * * certtool: Added --hex-numbers option which prints big numbers in an easier to parse format. * * p11tool: After key generation, outputs the public key (useful in tokens that do not store the public key). * * danetool: It is being built even without libgnutls-dane (the - -check functionality is disabled though). - Updated to GnuTLS 3.1.4 (released 2012-11-10) * * libgnutls: gnutls_certificate_verify_peers2() will set flags depending on the available revocation data validity. * * libgnutls: Added gnutls_certificate_verification_status_print(), a function to print the verification status code in human readable text. * * libgnutls: Added priority string %VERIFY_DISABLE_CRL_CHECKS. * * libgnutls: Simplified certificate verification by adding gnutls_certificate_verify_peers3(). * * libgnutls: Added support for extension to establish keys for SRTP. Contributed by Martin Storsjo. * * libgnutls: The X.509 verification functions check the key usage bits and pathlen constraints and on failure output GNUTLS_CERT_SIGNER_CONSTRAINTS_FAILURE. * * libgnutls: gnutls_x509_crl_verify() includes the time checks. * * libgnutls: Added verification flag GNUTLS_VERIFY_DO_NOT_ALLOW_UNSORTED_CHAIN and made GNUTLS_VERIFY_ALLOW_UNSORTED_CHAIN the default. * * libgnutls: Always tolerate key usage violation errors from the side of the peer, but also notify via an audit message. * * gnutls-cli: Added --local-dns option. * * danetool: Corrected bug that prevented loading PEM files. * * danetool: Added --check option to allow querying and verifying a site's DANE data. * * libgnutls-dane: Added pkg-config file for the library. - Updated to GnuTLS 3.1.3 (released 2012-10-12) * * libgnutls: Added support for the OCSP Certificate Status extension. * * libgnutls: gnutls_certificate_verify_peers2() will use the OCSP certificate status extension in verification. * * libgnutls: Bug fixes in gnutls_x509_privkey_import_openssl(). * * libgnutls: Increased maximum password length in the PKCS #12 functions. * * libgnutls: Fixed the receipt of session tickets during session resumption. Reported by danblack at http://savannah.gnu.org/support/?108146 * * libgnutls: Added functions to export structures in an allocated buffer. * * libgnutls: Added gnutls_ocsp_resp_check_crt() to check whether the OCSP response corresponds to the given certificate. * * libgnutls: In client side gnutls_init() enables the session ticket and OCSP certificate status request extensions by default. The flag GNUTLS_NO_EXTENSIONS can be used to prevent that. * * libgnutls: Several updates in the OpenPGP code. The generating code is fully RFC6091 compliant and RFC5081 support is only supported in client mode. * * libgnutls-dane: Added. It is a library to provide DANE with DNSSEC certificate verification. * * gnutls-cli: Added --dane option to enable DANE certificate verification. * * danetool: Added tool to generate DANE TLSA Resource Records (RR). - Updated to GnuTLS 3.1.2 (released 2012-09-26) * * libgnutls: Fixed bug in gnutls_x509_trust_list_add_system_trust() and gnutls_x509_trust_list_add_trust_mem() that prevented the loading of certificates in the windows platform. * * libgnutls: Corrected bug in OpenPGP subpacket encoding. * * libgnutls: Added support for DTLS/TLS heartbeats by Olga Smolenchuk. (the work was done during Google Summer of Code). * * libgnutls: Added X.509 certificate verification flag GNUTLS_VERIFY_ALLOW_UNSORTED_CHAIN. This flag allows the verification of unsorted certificate chains and is enabled by default for TLS certificate verification (if gnutls_certificate_set_verify_flags() does not override it). * * libgnutls: Prints warning on certificates that contain keys of an insecure level. If the %COMPAT priority flag is not specified the TLS connection fails. * * libgnutls: Correctly restore gnutls_record_recv() in DTLS mode if interrupted during the retrasmition of handshake data. * * libgnutls: Better mingw32 support (patch by LRN). * * libgnutls: The %COMPAT keyword, if specified, will tolerate key usage violation errors (they are far too common to ignore). * * libgnutls: Added GNUTLS_STATELESS_COMPRESSION flag to gnutls_init(), which provides a tool to counter compression-related attacks where parts of the data are controlled by the attacker _and_ are placed in separate records (use with care - do not use compression if not sure). * * libgnutls: Depends on libtasn1 2.14 or later. * * certtool: Prints the number of bits of the public key algorithm parameter in a private key. - Updated to GnuTLS 3.1.1 (released 2012-09-02) * * gnutls-serv: Listens on IPv6. Patch by Bernhard R. Link. * * certtool: Changes in password handling of certtool. Ask password when required and only if the '--password' option is not given. If the '--password' option is given during key generation then assume the PKCS #8 file format, instead of ignoring the password. * * tpmtool: No longer asks for key password in registered keys. * * libgnutls: Elliptic curve code was optimized by Ilya Tumaykin. wmNAF is now used for point multiplication and other optimizations. (the major part of the work was done during Google Summer of Code). * * libgnutls: The default pull_timeout_function only uses select instead of a combination of select() and recv() to prevent issues when used in stream sockets in some systems. * * libgnutls: Be tolerant in ECDSA signature violations (e.g. using SHA256 with a SECP384 curve instead of SHA-384), to interoperate with openssl. * * libgnutls: Fixed DSA and ECDSA signature generation in smart cards. Thanks to Andreas Schwier from cardcontact.de for providing me with ECDSA capable smart cards. - Updated to GnuTLS 3.1.0 (released 2012-08-15) * * libgnutls: Added direct support for TPM as a cryptographic module in gnutls/tpm.h. TPM keys can be used in functions accepting files using URLs of the following types: tpmkey:file=/path/to/file tpmkey:uuid=7f468c16-cb7f-11e1-824d-b3a4f4b20343;storage=user * * libgnutls: Priority string level keywords can be combined. For example the string "SECURE256:+SUITEB128" is now allowed. * * libgnutls: requires libnettle 2.5. * * libgnutls: Use the PKCS #1 1.5 encoding provided by nettle (2.5) for encryption and signatures. * * libgnutls: Added GNUTLS_CERT_SIGNATURE_FAILURE to differentiate between generic errors and signature verification errors in the verification functions. * * libgnutls: Added gnutls_pkcs12_simple_parse() as a helper function to simplify parsing in most PKCS #12 use cases. * * libgnutls: gnutls_certificate_set_x509_simple_pkcs12_file() adds the whole certificate chain (if any) to the credentials structure, instead of only the end-user certificate. * * libgnutls: Key import functions such as gnutls_pkcs12_simple_parse() and gnutls_x509_privkey_import_pkcs8(), return consistently GNUTLS_E_DECRYPTION_FAILED if the input structure is encrypted but no password was provided. * * libgnutls: Added gnutls_handshake_set_timeout() a function that allows to set the maximum time spent in a handshake. * * libgnutlsxx: Added session::set_transport_vec_push_function. Patch by Alexandre Bique. * * tpmtool: Added. It is a tool to generate private keys in the TPM. * * gnutls-cli: --benchmark-tls was split to --benchmark-tls-kx and --benchmark-tls-ciphers * * certtool: generated PKCS #12 structures may hold more than one private key. Patch by Lucas Fisher. * * certtool: Added option --null-password to generate/decrypt keys that use a NULL password (in schemas that distinguish between NULL an empty passwords). * * minitasn1: Upgraded to libtasn1 version 2.13. - Library is now LGPL-2.1+, extras and tools are still GPL-3.0 * Fri Apr 26 2013 firstname.lastname@example.com - Added makeinfo BuildRequire to fix build with new automake * Tue Feb 05 2013 email@example.com - Updated to GnuTLS 3.0.28 - libgnutls: Fixes in server side of DTLS-0.9. - libgnutls: Corrected gnutls_cipher_decrypt2() when used with AEAD ciphers (i.e., AES-GCM). - libgnutls: Fixes in record padding parsing to prevent a timing attack. Issue reported by Kenny Patterson and Nadhem Alfardan. bnc#802184 - libgnutls: DN variable 'T' was expanded to 'title'. * Thu Jan 24 2013 email@example.com - Updated to GnuTLS 3.0.27 - libgnutls: Fixed record padding parsing issue. - libgnutls: Stricter RSA PKCS #1 1.5 encoding. - libgnutls-guile: Fixed parallel compilation issue. - API and ABI modifications: No changes since last version. * Tue Nov 27 2012 email@example.com - Test suite breaks on qemu-arm some calls not implemented. * Sun Nov 25 2012 firstname.lastname@example.com - include LGPL-3.0+ text in COPYING.LESSER - run regression tests, but move "make check" to %check section - add gnutls-3.0.26-skip-test-fwrite.patch to skip a failing test - no longer manipulate doc/examples tree in %install section, the deletion of Makefiles breaks "make check" in %check - install documentation, reference and examples in %install section to fetch them for the package without unneccessary files * Fri Nov 16 2012 firstname.lastname@example.com - updated to GnuTLS 3.0.26: - libgnutls: Always tolerate key usage violation errors from the side of the peer, but also notify via an audit message. - libgnutls: gnutls_x509_crl_verify() includes time checks. - libgnutls: Increased maximum password length in the PKCS #12 functions. - API and ABI modifications: GNUTLS_CERT_REVOCATION_DATA_TOO_OLD: Added GNUTLS_CERT_REVOCATION_DATA_ISSUED_IN_FUTURE: Added - includes changes from 3.0.25: - libgnutls: Fixed the receipt of session tickets during session resumption. - libgnutls: Added gnutls_ocsp_resp_check_crt() to check whether the OCSP response corresponds to the given certificate. - libgnutls: Several updates in the OpenPGP code. The generating code is fully RFC6091 compliant and RFC5081 support is only supported in client mode. - API and ABI modifications: gnutls_ocsp_resp_check_crt: Added - includes changes form version 3.0.24: - libgnutls: The %COMPAT keyword, if specified, will tolerate key usage violation errors (they are far too common to ignore). - libgnutls: Corrected bug in OpenPGP subpacket encoding. - libgnutls: Added X.509 certificate verification flag - GNUTLS_VERIFY_ALLOW_UNSORTED_CHAIN. This flag allows the verification of unsorted certificate chains and is enabled by default for TLS certificate verification (if gnutls_certificate_set_verify_flags() does not override it). - libgnutls: Correctly restore gnutls_record_recv() in DTLS mode if interrupted during the retrasmition of handshake data. - libgnutls: Added GNUTLS_STATELESS_COMPRESSION flag to gnutls_init(), which provides a tool to counter compression-related attacks where parts of the data are controlled by the attacker _and_ are placed in separate records (use with care - do not use compression if not sure). - libgnutls: Depends on libtasn1 2.14 or later. - includes changes from version 3.0.23: - gnutls-serv: Listens on IPv6 - libgnutls: Be tolerant in ECDSA signature violations (e.g. using SHA256 with a SECP384 curve instead of SHA-384), to interoperate with openssl. - libgnutls: Fixed DSA and ECDSA signature generation in smart cards. - includes changes from version 3.0.22 - libgnutls: When verifying a certificate chain make sure it is chain. If the chain is wronly interrupted at some point then truncate it, and only try to verify the correct part. Patch by David Woodhouse - libgnutls: Restored the behavior of gnutls_x509_privkey_import_pkcs8() which now may (again) accept a NULL password. - certtool: Allow the user to choose the hash algorithm when signing certificate request or certificate revocation list. - Refresh gnutls-implement-trust-store-dir.diff, some parts are in upstream sources * Mon Jul 16 2012 email@example.com - update to latest stable version 3.0.21: libgnutls: fixed bug in gnutls_x509_privkey_import() that prevented the loading of EC private keys when DER encoded. Reported by David Woodhouse. libgnutls: In DTLS larger to mtu records result to GNUTLS_E_LARGE_PACKET instead of being truncated. libgnutls: gnutls_dtls_get_data_mtu() is more precise. Based on patch by David Woodhouse. libgnutls: Fixed memory leak in PKCS #8 key import. libgnutls: Added support for an old version of the DTLS protocol used by openconnect vpn client for compatibility with Cisco's AnyConnect SSL VPN. It is marked as GNUTLS_DTLS0_9. Do not use it for newer protocols as it has issues. libgnutls: Corrected bug that prevented resolving PKCS #11 URLs if only the label is specified. Patch by David Woodhouse. libgnutls: When EMSGSIZE errno is seen then GNUTLS_E_LARGE_PACKET is returned. API and ABI modifications: gnutls_dtls_set_data_mtu: Added gnutls_session_set_premaster: Added * Sun Jul 01 2012 firstname.lastname@example.com - merge am-1.12 patches into 1 * Sat Jun 30 2012 email@example.com - fix 12.2 builds. * replace depreciated am_prog_mkdir_p with ac_prog_mkdir_p. * Thu Jun 21 2012 firstname.lastname@example.com - Updated to version 3.0.20: libgnutls: Corrected bug which prevented the parsing of handshake packets spanning multiple records. libgnutls: Check key identifiers when checking for an issuer. libgnutls: Added gnutls_pubkey_verify_hash2() libgnutls: Added gnutls_certificate_set_x509_system_trust() that loads the trusted CA certificates from system locations (e.g. trusted storage in windows and CA bundle files in other systems). certtool: Added support for the URI subject alternative name type in certtool. certtool: Increase to 128 the maximum number of distinct options (e.g. dns_names) allowed. gnutls-cli: If --print-cert is given, print the certificate, even on verification failure. * * API and ABI modifications: gnutls_pk_to_sign: Added gnutls_pubkey_verify_hash2: Added gnutls_certificate_set_x509_system_trust: Added * Tue May 29 2012 firstname.lastname@example.com - fix build with automake-1.12 - add: automake-1.12.patch * Thu May 24 2012 email@example.com - backport gnutls_certificate_set_x509_system_trust() from git and add support for trust store directories (bnc#761634) * Mon May 21 2012 firstname.lastname@example.com - add version and release to gnutls-devel provides * Mon May 21 2012 firstname.lastname@example.com - let libgnutls-devel also provide gnutls-devel * Sun May 13 2012 email@example.com - Update to version 3.0.19: + libgnutls: - When decoding a PKCS #11 URL the pin-source field is assumed to be a file that stores the pin. Based on patch by David Smith. - gnutls_record_check_pending() no longer returns unprocessed data, and thus ensure the non-blocking of the next call to gnutls_record_recv(). - Added strict tests in Diffie-Hellman and SRP key exchange public keys. - in ECDSA and DSA TLS 1.2 authentication be less strict in hash selection, and allow a stronger hash to be used than the appropriate, to improve interoperability with openssl. + tests: - Disabled floating point test, and corrections in pkcs12 decoding tests. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.18: + certtool: - Avoid a Y2K38 bug when generating certificates. Patch by Robert Millan. + libgnutls: - Make sure that GNUTLS_E_PREMATURE_TERMINATION - is returned on premature termination (and added unit test). - Fixes for W64 API. Patch by B. Scott Michel. - Corrected VIA padlock detection for old VIA processors. Reported by Kris Karas. - Updated assembler files. - Time in generated certificates is stored as GeneralizedTime instead of UTCTime (which only stores 2 digits of a year). + minitasn1: - Upgraded to libtasn1 version 2.13 (pre-release). + API and ABI modifications: - gnutls_x509_crt_set_private_key_usage_period: Added - gnutls_x509_crt_get_private_key_usage_period: Added - gnutls_x509_crq_set_private_key_usage_period: Added - gnutls_x509_crq_get_private_key_usage_period: Added - gnutls_session_get_random: Added - Changes from version 3.0.17: + command line apps: - Always link with local libopts. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.16: + minitasn1: - Upgraded to libtasn1 version 2.12 (pre-release). + libgnutls: - Corrected SRP-RSA ciphersuites when used under TLS 1.2. - included assembler files for MacOSX. + p11tool: - Small fixes in handling of the --private command line option. + certtool: - The template option allows for setting the domain component (DC) option of the distinguished name, and the ocsp_uri as well as the ca_issuers_uri options. + API and ABI modifications: - gnutls_x509_crt_set_authority_info_access: Added - Changes from version 3.0.15: + test suite: - Only run under valgrind in the development system (the full git repository) + command line apps: - Link with local libopts if the installed is an old one. + libgnutls: - Eliminate double free during SRP authentication. Reported by Peter Penzov. - Corrections in record packet parsing. Reported by Matthew Hall. - Cryptodev updates and fixes. - Corrected issue with select() that affected FreeBSD. This prevented establishing DTLS sessions. Reported by Andreas Metzler. - Corrected rehandshake and resumption operations in DTLS. Reported by Sean Buckheister. - PKCS #11 objects that do not have ID no longer crash listing. Reported by Sven Geggus. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.14: + command line apps: - Included libopts doesn't get installed by default. + libgnutls: - Eliminate double free on wrongly formatted certificate list. Reported by Remi Gacogne. - cryptodev code corrected, updated to account for hashes and GCM mode. Eliminated memory leak in PCKS #11 initialization. Report and fix by Sam Varshavchik. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.13: + gnutls-cli: - added the --ocsp option which will verify the peer's certificate with OCSP. - added the --tofu and if specified, gnutls-cli will use an ssh-style authentication method. - if no --x509cafile is provided a default is assumed (/etc/ssl/certs/ca-certificates.crt), if it exists. + ocsptool: - Added --ask parameter, to verify a certificate's status from an ocsp server. + command line apps: - Use gnu autogen (libopts) to parse command line arguments and template files. + tests: - Added stress test for DTLS packet losses and out-of-order receival. Contributed by Sean Buckheister. + libgnutls: - Several updates and corrections in the DTLS DTLS lost packet handling and retransmission timeouts. Report and patches by Sean Buckheister. - Added new functions to easily allow the usage of a trust on first use (SSH-style) authentication. - SUITEB128 and SUITEB192 priority strings account for the RFC6460 requirements. - Added new security parameter GNUTLS_SEC_PARAM_LEGACY to account for security level of 96-bits. - In client side if server does not advertise any known CAs and only a single certificate is set in the credentials, sent that one. - Added functions to parse authority key identifiers when stored as a 'general name' and serial combo. - Added function to force explicit reinitialization of PKCS #11 modules. This is required on the child process after a fork (if PKCS #11 functionality is desirable). - Depend on p11-kit 0.11. + API and ABI modifications: - gnutls_dtls_get_timeout: Added - gnutls_verify_stored_pubkey: Added - gnutls_store_pubkey: Added - gnutls_store_commitment: Added - gnutls_x509_crt_get_authority_key_gn_serial: Added - gnutls_x509_crl_get_authority_key_gn_serial: Added - gnutls_pkcs11_reinit: Added - gnutls_ecc_curve_list: Added - gnutls_priority_certificate_type_list: Added - gnutls_priority_sign_list: Added - gnutls_priority_protocol_list: Added - gnutls_priority_compression_list: Added - gnutls_priority_ecc_curve_list: Added - gnutls_tdb_init: Added - gnutls_tdb_set_store_func: Added - gnutls_tdb_set_store_commitment_func: Added - gnutls_tdb_set_verify_func: Added - gnutls_tdb_deinit: Added - Changes from version 3.0.12: + libgnutls: - Added OCSP support. There is a new header file gnutls/ocsp.h and a set of new functions under the gnutls_ocsp namespace. Currently the functionality provided is to parse and extract information from OCSP requests/responses, to generate OCSP requests and to verify OCSP responses. See the manual for more information. Run ./configure with --disable-ocsp to build GnuTLS without OCSP support. This work was sponsored by Smoothwall <http://smoothwall.net/>. + ocsptool: - Added new command line tool. The tool can parse OCSP request/responses, generate OCSP requests and verify OCSP responses. See the manual for more information. + certtool: - --outder option now works for private and public keys as well. + libgnutls: - Added error code GNUTLS_E_NO_PRIORITIES_WERE_SET to warn when no or insufficient priorities were set. - Corrected an alignment issue in ECDH key generation which prevented some keys from being correctly aligned in rare circumstances. - Corrected memory leaks in DH parameter generation and ecc_projective_check_point(). - Added gnutls_x509_dn_oid_name() to return a descriptive name of a DN OID. + API and ABI modifications: - gnutls_pubkey_encrypt_data: Added - gnutls_x509_dn_oid_name: Added - gnutls_session_resumption_requested: Added - gnutls/ocsp.h: Added new header file. - gnutls_ocsp_print_formats_t: Added new type. - gnutls_ocsp_resp_status_t: Added new type. - gnutls_ocsp_cert_status_t: Added new type. - gnutls_x509_crl_reason_t: Added new type. - gnutls_ocsp_req_add_cert: Added. - gnutls_ocsp_req_add_cert_id: Added. - gnutls_ocsp_req_deinit: Added. - gnutls_ocsp_req_export: Added. - gnutls_ocsp_req_get_cert_id: Added. - gnutls_ocsp_req_get_extension: Added. - gnutls_ocsp_req_get_nonce: Added. - gnutls_ocsp_req_get_version: Added. - gnutls_ocsp_req_import: Added. - gnutls_ocsp_req_init: Added. - gnutls_ocsp_req_print: Added. - gnutls_ocsp_req_randomize_nonce: Added. - gnutls_ocsp_req_set_extension: Added. - gnutls_ocsp_req_set_nonce: Added. - gnutls_ocsp_resp_deinit: Added. - gnutls_ocsp_resp_export: Added. - gnutls_ocsp_resp_get_certs: Added. - gnutls_ocsp_resp_get_extension: Added. - gnutls_ocsp_resp_get_nonce: Added. - gnutls_ocsp_resp_get_produced: Added. - gnutls_ocsp_resp_get_responder: Added. - gnutls_ocsp_resp_get_response: Added. - gnutls_ocsp_resp_get_signature: Added. - gnutls_ocsp_resp_get_signature_algorithm: Added. - gnutls_ocsp_resp_get_single: Added. - gnutls_ocsp_resp_get_status: Added. - gnutls_ocsp_resp_get_version: Added. - gnutls_ocsp_resp_import: Added. - gnutls_ocsp_resp_init: Added. - gnutls_ocsp_resp_print: Added. - gnutls_ocsp_resp_verify: Added. - Changes from version 3.0.11: + libgnutls: - Corrected functionality of gnutls_record_get_direction(). Reported by Philip Allison. - Provide less timing information when decoding TLS/DTLS record packets. Patch by Nadhem Alfardan. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.10: + gnutls-cli/serv: - Set don't fragment bit in DTLS sessions in Linux as well as in BSD. + gnutls-cli: - Fixed reading from windows terminals. + libgnutls: - When GNUTLS_OPENPGP_FMT_BASE64 is specified the stream is assumed to be base64 encoded (previously the encoding was auto-detected). This avoids a decoding issue in windows systems. - Corrected ciphersuite GNUTLS_ECDHE_PSK_AES_256_CBC_SHA384 - Added ciphersuites: GNUTLS_PSK_WITH_AES_256_GCM_SHA384 and GNUTLS_DHE_PSK_WITH_AES_256_GCM_SHA384. - Added function gnutls_random_art() to convert fingerprints to images (currently ascii-art). - Corrected bug in DSA private key parsing, which prevented the verification of the key. + API and ABI modifications: - gnutls_random_art: Added - Changes from version 3.0.09: + certtool: - Added new parameter --dh-info. - -l option was overloaded so if combined with --priority it will only list the ciphersuites that are enabled by the given priority string. + libgnutls: - Added new priority string %SERVER_PRECEDENCE, which changes the ciphersuite selection procedure. If specified the server priorities will be used for selection instead of the client's. - Optimizations in Diffie-Hellman parameters generation and key exchange. - When session tickets are negotiated and used in a session, a server will not store that session data into its cache. - Added the SECP192R1 curve. - Added gnutls_priority_get_cipher_suite_index() to allow listing the ciphersuites enabled in a priority structure. It outputs an index to be used in gnutls_get_cipher_suite_info(). - Optimizations in the elliptic curve code --timing attacks resistant code is only used in ECDSA private key operations. + doc: - man pages for API functions generation was fixed and are now added again in the distribution. + API and ABI modifications: - GNUTLS_ECC_CURVE_SECP192R1: New curve definition - gnutls_priority_get_cipher_suite_index: Added - Changes from version 3.0.08: + certtool: - Certtool -e returns error code on verification failure. - Verifies parameters of generated keys. + libgnutls: - Corrected ECC key generation (introduced in 3.0.6) - Provide less timing information when decoding TLS/DTLS record packets. + doc: - man pages for API functions were removed. The reason was that the code that auto-generated the man pages missed many APIs and we couldn't fix it (volunteers welcome). See the info manual or the GTK-DOC manual instead. + API and ABI modifications: - gnutls_x509_privkey_verify_params: Added - Changes from version 3.0.07: + libgnutls: - Corrected fix in gnutls_session_get_data() to report the actual session size when the provided buffer is not enough. - Fixed ciphersuite GNUTLS_ECDHE_RSA_AES_128_CBC_SHA256, which was using a wrong MAC algorithm. Reported by Fabrice Gautier. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.06: + gnutls-guile: - Compilation fixes. + libgnutls: - Fixed possible buffer overflow in gnutls_session_get_data(). Reported and fix by Alban Crequy. - Bug fixes in the ciphersuites with NULL cipher. Reported by Fabrice Gautier. - Bug fixes in ECC code for 64-bit MIPS systems. Thanks to Joseph Graham for providing access to such a system. - Correctly report ECC private key parsing errors. Reported by Fabrice Gautier. - In ECDHE verify that the received point lies on the selected curve. The ECDHE ciphersuites now take precendence to plain DHE. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.05: + libgnutls-extra: - is no more + libgnutls: - Corrections in order to compile with mingw32. - Corrections in VIA padlock code for VIA C5 processor and new detection of PHE with support for partial hashing. - Corrected bug in gnutls_x509_data2hex. Report and fix by Vincent Untz. + minitasn1: - Upgraded to libtasn1 version 2.10. + API and ABI modifications: - No changes since last version. - Changes from version 3.0.04: + gnutls-cli-debug: - Added more tests including AES-GCM, SHA256 and elliptic curves. + gnutls-cli: - Added --benchmark-soft-ciphers to benchmark the software version of the ciphers instead of hw accelerated (where available) + libgnutls: - Public key ID calculation is consistent among all structures. It uses a SHA-1 hash of the subjectPublicKeyInfo. - gnutls_privkey_t allows setting external callback to perform signing or decryption. Can be set using gnutls_privkey_import_ext() - A certificate credentials structure can be used with a gnutls_privkey_t and a gnutls_pcert_st structure using gnutls_certificate_set_key(). - Fixes to enable external signing callback to operate with TLS 1.2. - Fixed crash when printing ECDSA certificate key ID. Reported by Erik Jensen. - Corrected VIA padlock code for C3. In C3 benchmarks show a 2x increase in AES speed and a 14x increase in VIA nano. Added support for hashes and HMACs. - Compilation fixed when p11-kit is not detected. - Fixed the deflate compression code. - Added gnutls_x509_crt_get_authority_info_access. Used to get the PKIX Authority Information Access (AIA) field. - gnutls_x509_crt_print supports printing AIA fields. - Added ability to gnutls_privkey_t to operate with signing callback function. + API and ABI modifications: - gnutls_x509_crt_get_authority_info_access (x509.h): Added function. - gnutls_privkey_import_ext: Added function. - gnutls_certificate_set_key: Added function. - gnutls_info_access_what_t (x509.h): Added enum. - GNUTLS_OID_AIA (x509.h): Added symbol. - GNUTLS_OID_AD_OCSP (x509.h): Added symbol. - GNUTLS_OID_AD_CAISSUERS (x509.h): Added symbol. - Drop CVE-2011-4128.patch, CVE-2012-0390.patch, CVE-2012-1569.patch, CVE-2012-1573.patch, gnutls-fix-compression.patch, gnutls-fix-crash-on-strcat.patch: all fixed upstream. * Thu Apr 12 2012 firstname.lastname@example.com - fix bug[bnc#753301] - VUL-0: gnutls/libtasn1 "asn1_get_length_der()" DER decoding issue CVE-2012-1569 and bug[bnc#754223] - GenericBlockCipher heap corruption DoS CVE-2012-1573 * Mon Feb 13 2012 firstname.lastname@example.com - fix Bug[bnc#739898] - VUL-1: CVE-2012-0390: GnuTLS DTLS plaintext recovery attack. * Wed Nov 30 2011 email@example.com - Fix licenses (bnc#733661): the applications as well as gnutls-extra and gnutls-openssl libraries are under GPL-3.0+ while the library is LGPL-3.0+. * Wed Nov 30 2011 email@example.com - add automake as buildrequire to avoid implicit dependency * Mon Nov 14 2011 firstname.lastname@example.com - fix #Bug 729486 - gnutls: buffer overflow CVE-2011-4128 * Mon Oct 17 2011 firstname.lastname@example.com - Add gnutls-fix-crash-on-strcat.patch: make sure a string is nul-terminated before using strcat on it. Fix bnc#724421. * Fri Sep 30 2011 email@example.com - cross-build fix: configure with sysroot * Sat Sep 24 2011 firstname.lastname@example.com - Add gnutls-fix-compression.patch: fix some decompression/compression issues that caused connection failures to some XMPP servers. Patch taken from git. * Fri Sep 23 2011 firstname.lastname@example.com - added libgnutls-devel to baselibs.conf for 32bit Wine on 64bit build * Tue Sep 20 2011 email@example.com - Update to version 3.0.3: + libgnutls: - Added gnutls_record_get_discarded() to return the number of discarded records in a DTLS session. - All functions related to RSA-EXPORT were deprecated. - Memory leak fixes in credentials private key deinitialization. - Memory leak fixes in ECC ciphersuites. - Do not send an empty extension structure in server hello. This affected old implementations that do not support extensions. - Allow CA importing of 0 certificates to succeed. - Added support for VIA padlock AES optimizations. (disabled by default) - Added support for elliptic curves in PKCS #11. - Added gnutls_pkcs11_privkey_generate() to allow generating a key in a token. - gnutls_transport_set_lowat dummy macro was removed. + p11tool: Added generate-rsa, generate-dsa and generate-ecc options to allow generating private keys in the token. - Changes from version 3.0.2: + libgnutls: - OpenPGP certificate type is not enabled by default. - Added %NO_EXTENSIONS priority string. - Corrected issue in gnutls_record_recv() triggered on encryption or compression error. - Compatibility fixes in CPU ID detection for i386 and old GCC. - Corrected parsing of XMPP subject alternative names. - Allow for out-of-order ChangeCipherSpec message in DTLS. - gnutls_certificate_set_x509_key() and gnutls_certificate_set_openpgp_key() operate as in 2.10.x and allow the release of the private key during the lifetime of the certificate structure. + gnutls-cli: Benchmark applications were incorporated with it. - Changes from version 3.0.1: + libgnutls: - gnutls_certificate_set_x509_key_file() and friends support server name indication. If multiple certificates are set using these functions the proper one will be selected during a handshake. - Added AES-256-GCM which was left out from the previous release. - When asking for a PKCS# 11 PIN multiple times, the flags in the callback were not being updated to reflect for PIN low count or final try. - Do not allow second instances of PKCS #11 modules. - Fixed alignment issue in AES-NI code. - The config file at gnutls_pkcs11_init() is being read if provided. - Ensure that a certificate list specified using gnutls_certificate_set_x509_key() and friends, is sorted according to TLS specification (from subject to issuer). - Added GNUTLS_X509_CRT_LIST_FAIL_IF_UNSORTED flag for gnutls_x509_crt_list_import. It checks whether the list to be imported is properly sorted. + crywrap: Added to the distribution. It is an application that proxies TLS session to a port using a plaintext service. + Many GTK-DOC improvements. + Updated translations. - Drop 0001-Included-appro-s-updates-to-AES-NI.patch, 0002-Added-note.GNU-stack-to-prevent-marking-the-library-.patch, 0003-Force-alignment-for-AES-NI-to-the-runtime-rather-tha.patch, 0006-Added-AES-256-GCM.-Reported-by-Benjamin-Hof.patch: all fixed upstream. - Drop call to autoreconf: it was only needed for the patches. - Add libidn-devel BuildRequires for the new crywrap tool. * Mon Aug 29 2011 email@example.com - update baselibs.conf * Wed Aug 17 2011 firstname.lastname@example.com - Update to version 3.0.0. many fixes see NEWS for details This changelog only describes important package changes or features. * Main reason for update is to support Intel AES-NI CPU extensions. * Bump sonames in the library package accordingly * C++ apps must now buildrequire libgnutls++-devel * Software using the openssl emulation must buildrequire libgnutls-openssl-devel or better use openssl directly. * Upstream no longer uses libgcrypt but libnettle. * Upstream now requires the use of p11-kit * Add post-release upstream patches critical for improving AES-NI support. * Thu Jun 23 2011 email@example.com - update to stable version 2.10.5 * * libgnutls: Corrected verification of finished messages. * * libgnutls: Corrected signature generation and verification in the Certificate Verify message when in TLS 1.2. Reported by Todd A. Ouska. * * pkg-config gnutls.pc improvements. The file uses 'Requires.private' for libtasn1 and libz when needed, instead of Libs.private. From Andreas Metzler. * * gnutls-serv: Corrected a buffer overflow. Reported and patch by Tomas Mraz. * * libgnutls: Use ASN1_NULL when writing parameters for RSA signatures. This makes us comply with RFC3279. Reported by Michael Rommel. * * libgnutls: Reverted default behavior for verification and introduced GNUTLS_VERIFY_DO_NOT_ALLOW_X509_V1_CA_CRT. Thus by default V1 trusted CAs are allowed, unless the new flag is specified. * * minitasn1: Updated to Libtasn1 2.9. * * bgnutls: Correctly add leading zero to PKCS #8 encoded DSA key. Reported by Jeffrey Walton. * * libgnutls: Corrected memory leak in extension data calculation. Reported by Mike Blumenkrantz. * * libgnutls: Remove trailing comma in enums in gnutls.h and x509.h. * * API and ABI modifications: No changes since last version. * Mon Oct 11 2010 firstname.lastname@example.com - update to latest stable version 2.10.2 * tons of changes, see NEWS * Sat Apr 24 2010 email@example.com - buildrequire pkg-config to fix provides * Thu Apr 15 2010 firstname.lastname@example.com - updated to stable 2.8.6 * * libgnutls: For CSRs, don't null pad integers for RSA/DSA value. VeriSign rejected CSRs with this padding. Note: As a side effect of this change, the "public key identifier" value computed for a certificate using this version of GnuTLS will be different from values computed using earlier versions of GnuTLS. * * libgnutls: For CSRs on DSA keys, don't add DSA parameters to the optional SignatureAlgorithm parameter field. VeriSign rejected these CSRs. They are stricly speaking not needed since you need the signer's certificate to verify the certificate signature anyway. * * libgnutls: When checking openpgp self signature also check the signatures of all subkeys. Ilari Liusvaara noticed and reported the issue and provided test vectors as well. * * libgnutls: Cleanups and several bug fixes. Found by Steve Grubb and Tomas Mraz. * * Link libgcrypt explicitly to certtool, gnutls-cli, gnutls-serv. * * Fix --disable-valgrind-tests. * * examples: Use the new APIs for printing X.509 certificate information. * * i18n: Updated Czech, Dutch, French, Polish, Swedish and Vietnamese translations. Added Simplified Chinese translation. * Tue Apr 06 2010 email@example.com - use system libtasn1 instead of the bundled copy * Thu Feb 04 2010 email@example.com - some build fixes. * Thu Feb 04 2010 firstname.lastname@example.com - updated to stable 2.8.5 * Fri Dec 25 2009 firstname.lastname@example.com - add baselibs.conf as a source - enable parallel building * Wed Sep 02 2009 firstname.lastname@example.com - update to lastest stable version 2.8.3 [bnc#532750] * Fri Mar 13 2009 firstname.lastname@example.com - fix security bug [bnc#457938] new CVE-2008-4989
/usr/lib/libgnutls-openssl.so.27 /usr/lib/libgnutls-openssl.so.27.0.2
Generated by rpm2html 1.8.1
Fabrice Bellet, Mon Apr 10 05:38:41 2017


text:
Journey Battambang - Nakhon Nayok
Trip Start Aug 01, 2010
161Trip End Ongoing
Map your own trip!
Loading Map
Loading Map
Map Options
Show trip route
Hide lines
But we realise that it is not so much of a problem. Locals know that and there is a service of shared taxi organised from Battambang to the border that cost US$8 per person (we end up being only 3 people sharing the taxi). The drive is around 90 kilometres long and it is done in two hours. On the way, we notice a lot of traffic police and speed check cameras between Battambang and Sisophon. After Sisophon, the road is fairly empty as it only leads to Thailand. Suddenly, the driver totally ignores the speed limits and starts beeping every time he takes over a car just like in Vietnam. On the road, we notice a lot of people travelling on trailers dragged by tractors.
The taxi drops us where the road stops. But then it is not very clear where the actual Cambodian border is. There are a lot of people and we can see lots of trade going on here. The border officer desk is kind of in the middle of a street and we don't really see it until we are told by some random guy where to go. Nobody is queuing but there is quite a few people here waiting for – we don't know what!?!
Once our passports have been stamped ok, we enter the 'no man's land' in between the two borders. There are actually quite a lot of people for a 'no man's land', we can even see a casino in that area and children begging on the street!?! There are many people crossing the border with trolleys pilled up with sacks of things that explain the trading business going on earlier. One surprising thing that we cannot really explain is that children coming back from a school are crossing the border together with us but they do not seem to go through the border office though!?! They sing or play happily and we can see that they are used to this crossing.
Once we arrive on the Thailand's side, we are unexpectedly invited to walk on the left side instead of the right
We are now in Thailand and the next town with a train station is a few kilometres away from the border. Taxi and tuc-tuc drivers are obviously waving at us but as usual we try to ignore them and decide to walk away from the border and get one on the way. However, we don't have the local currency and only a US$20 note that is difficult to be accepted. It is very hot, and quickly our bags are becoming heavy but we are ready to walk till the town. Luckily, after 15mins walk, a tuc-tuc driver with a local person in it is stopping for us. After explaining the money problem, he is happy to take us to a bank in the town.
There is not much to see in Aranyaprathet, so we walk to the train station where we enjoy our first Pad Thai in Thailand for 50 pence!! We already notice that some men and women are chubbier than what we have seen in Cambodia, Vietnam and China.
After a couple of hours waiting for our train, we finally enter our last transportation mode to reach our destination. The train is old, running on one track line and there are oscillating fans on the ceiling of the carriages. The journey is two and half hours long to Prachin Buri and the ticket costs 50 pence. Prachin Buri is in the central east of Thailand and is the closest train station from where Natta lives. Many of you must wonder who is Natta? It will all be explained in the next entry…


text:
You are not currently logged on: Log On
Lawyers: Don't remember your Bar Number/PIN? Look it up.
Are you a member of the public and new to the site? Please create a new account.
You've arrived at The Missouri Bar's online marketplace where it is convenient for Missouri lawyers to register for CLE programs, purchase CLE products and access
member service resources. Members of the public can also create a new account to access the marketplace for products and resources.
FastCase access:
Comments? Suggestions? Click here to contact us
Paid for by The Missouri Bar Sebrina Barrett, Executive Director PO Box 119 Jefferson City, MO 65102