text:
Virtual server backup tips
Virtualized servers yield many benefits, but they can also add complexity to backup operations. There are three main ways to back up a virtual server. Here's how to determine which method is best for your virtualized server environment and storage requirements.
Continue Reading This Article
Enjoy this article as well as all of our content, including E-Guides, news, tips and more.
| There are three main ways to back up virtual servers. Here's how to determine which method is best for your storage requirement.
SERVER VIRTUALIZATION IS supposed to simplify IT, and it does, except for one little caveat: It currently complicates backup and recovery. Companies quickly discover they can back up their virtual servers the same way they do their physical servers, but they may not get the same results.
"It's simple to back up virtual servers if you treat them like physical servers," says Scott Polly, director of technical publications at Vizioncore Inc., Buffalo Grove, IL. The firm provides vRanger Pro, a GUI-based application that automates much of the command line scripting typically involved in VMware backup. Simple, but "you don't get the benefits of server virtualization," adds Polly.
The benefits Vizioncore's Polly refers to revolve around efficient management. If you treat virtualized servers like physical servers, you have to manage each individually, which undercuts any improvements in management efficiency. You also have to buy and install a backup agent on each virtual server as if it were a physical server, which will certainly require more work and may entail additional license fees depending on your backup product. In short, storage admins face more than the usual backup complications because there are more virtual servers and they have to run multiple concurrent backups.
In addition, the immaturity of server virtualization makes the backup challenge more difficult. VMware is still feeling its way when it comes to backup and recovery. "It's hard to get clear documentation," reports John Dolan, principal consultant at Viant Solutions in Suwanee, GA. Dolan had been trying to pin down the backup of 24 virtualized servers spread across three hosts at Perimeter Church, a mega-church based in Duluth, GA, but getting accurate information was frustrating. Early on, he feared he might need to write some software to make the church's version of Symantec Corp.'s Backup Exec (Version 10d) work with VMware ESX 3.0.2.
The solution turned out to be simple once he had the correct information. "Backup Exec [Version 10d] simply isn't supported by ESX 3.0.2," says Dolan. He finally discovered that after digging through VMware's latest compatibility guide. "We needed to be running Backup Exec 11d or later," he says. That meant Perimeter Church had to upgrade to the next release, which entailed an added cost. "But we'll only need one server license plus the Exchange and SQL license for our virtual servers," he adds.
The VMware backup picture is changing almost weekly as VMware pushes out new documentation and products, as more vendors scramble to certify their backup tools with VMware and as consultants begin to identify some best practices (see "Virtual backup best practices," below). VMware insists that backup isn't difficult: "It's not hard, but different," says Jon Bock, VMware's senior product marketing manager, adding that "it will change what you're probably doing now."
Backup agents
Except that backing up one server is different than backing up five, 10 or 15 virtual machines (VMs). The problem is resource contention. "Backup imposes overhead on the [physical] server," says David Dale, chair of the SNIA Canada IP Storage Forum, a member of the SNIA board of directors and a NetApp executive.
Regardless of how many virtual servers are backed up, they're guests of a single physical server and must share the CPU and network resources. One possible solution, suggests Dale, is to "delegate the backup overhead to the array."
VMware's solution is different: VMware Consolidated Backup (VCB). "VCB is a Windows-based proxy host," says Scott Miller, president at Server Centric Consulting in St. Louis. Instead of installing individual backup agents on each VM, you do the backup on VCB, which offloads the backup process overhead to the physical proxy host, which is a dedicated server.
Some observers think the resource contention issue is a red herring. "In theory, it's possible that you could overload the physical machine by doing multiple backups, but we haven't hit that particular pain [point] in the real world," notes Ashley D'Costa, enterprise solutions architect at Mainland Information Systems, Calgary, Alberta, a Canadian systems integration and consulting firm. The virtualization backup problems he encounters have more to do with performance and data consistency.
W.R. Berkley Corp., based in Greenwich, CT, backs up almost 100 VMs running as LPARs on its IBM Corp. pSeries servers with Symantec's Veritas NetBackup agent installed on each VM. "We haven't hit any resource contention yet. I guess we could, but the boxes have a ton of ports," says Tom Whelans, VP of operations at the property and casualty insurer. The backup software is licensed by physical server so it doesn't incur additional licensing charges.
Backup challenges
Also challenging are the different types of recovery: backing up and recovering the entire VM as a file, or backing up and recovering single files. To back up and recover the entire VM, you "copy it block by block, disk to disk and capture the VM in a specific state," says Oglesby. "Here, you have to restore the entire VM as a whole."
To back up and recover individual files you "do a file-level backup within the VM using a normal agent or VCB, like a traditional backup. In this case, you can restore a single file easily but can't bring the entire VM server back online easily," he continues. You have to recover the VM piece by piece.
Virtualization is essentially file-oriented; the VM consists of one or two encapsulated files. Restoring individual files remains a challenge. It's easy to back up and restore the entire VM. Restoring individual files isn't straightforward and, depending on the backup tools involved, may be quite cumbersome and involve restoring the entire VMware Disk file (VMDK).
"Everybody wants to rapidly back up at both the granular [file] and virtual machine level," says Mainland Information Systems' D'Costa. With VMware as it's configured today, that's not possible. "Right now you have to choose one or the other," he says. Granular backup means you can recover individual files without restoring and mounting the entire virtual server. With machine-level backup, you recover the entire virtual server as a single VMware encapsulated file; VMDK is fast and easy if you need to recover the whole thing.
VM backup strategies
D'Costa identifies three main approaches to backing up virtualized servers: conventional server backup with the use of individual backup agents on each VM; use of the backup management tools provided by the virtualization vendor; and the use of a standalone backup proxy server, such as VCB, or appliances from third-party vendors.
A storage manager might be tempted to simply back up the VMs on the physical host like regular files. In this case, the organization would back up each VM's VMDK, a large disk file containing the VM configuration and data. Nice idea, but it might not work well. Unless the VM is shut down, you might back up data in use, which is likely to result in inconsistent data.
The use of an individual backup agent on each VM can avoid data inconsistency by quiescing the app during backup. However, this approach can result in high backup software licensing fees if the organization must purchase an instance of the license for each VM. It also creates a potential for resource contention unless the organization staggers its virtual backups. Still, the advantages of putting a backup agent on each VM are simplicity and familiarity. The backup procedure runs no differently and admins can do all of the usual things, such as file-level recovery, and full or incremental backups.
However, the backup application, unaware of the encapsulated nature of the VMDK files, can't do things it otherwise might do to speed backup, notes Mainland Information Systems' D'Costa. This approach also undermines some of the efficiencies organizations hoped for from server virtualization in the first place as each agent must be managed individually.
D'Costa's second approach runs the backup software in the virtualization server itself, such as VMware ESX. This will likely be a Linux backup agent capable of backing up all of the VMs. However, this results in image-level backups that, although fast, don't allow for the easy recovery of individual files. It also requires scripting to automate the shutdown, snapshot and restart of the VMs.
The proxy server (particularly VCB), D'Costa's third approach, may become the most popular. The proxy server moves the backup from agents on the VMs or from the virtualization server to a dedicated server. In the case of VMware, "you put the backup agent on VCB and back up all the VMs," says Server Centric Consulting's Miller.
The proxy server is typically a Windows server connected to the same SAN volumes as VMware's ESX server. "With VCB you can now back up multiple VMs on the same physical host and VCB organizes the backups to keep them from overusing the resources," adds Miller. VMware provides a load balancer called Distributed Resource Scheduler (DRS).
But VCB is far from a backup panacea. D'Costa points out that it requires a number of pieces to work right: a sync driver on the ESX server to flush the file systems and create a snapshot, a vLUN driver on the proxy server to present VMDKs to the proxy, and command line utilities to assist with scripting automation through the command line interface (CLI). It also will require an integration module provided by VMware or the backup application vendor.
Storage managers often mix different approaches. For example, Rockledge, FL-based Health First is a three-hospital healthcare provider network serving Brevard County. It uses VCB through a third-party tool, Vizioncore's vRanger Pro, to back up 1.5TB of data from approximately 220 VMs every night. The data is backed up to disk. However, the hospital also uses IBM Tivoli Storage Manager (TSM) and installs a TSM backup agent on some of the VMs. The TSM backups go to disk and then to tape, which is shipped offsite.
VCB and vRanger Pro let the team "deal with the growth of VM sprawl," says Joel Otero, network engineer at Health First. Some days "we're building 10 to 15 VMs. Tivoli couldn't keep up with that. It's far too much to script," he explains.
W.R. Berkley combines VCB with Veritas NetBackup and FalconStor Software Inc.'s Network Storage Server for backup and recovery of its virtualized Windows and pSeries servers. The FalconStor product takes snapshots a few times a day and replicates them to a second data center. "So we risk, at worst, losing a couple of hours of data," says W.R. Berkley's Whelans. Using VCB, the company can restore individual files. FalconStor also spins off the snapshots to tape every night.
Virtualization backup tools
VMware recently introduced Site Recovery Manager to automate disaster recovery management.
Site Recovery Manager works with VMware's Virtual- Center management console and with replication software from various storage partners, including 3PAR Inc., Dell Inc., EMC Corp., FalconStor, Hewlett-Packard Co., Hitachi Data Systems, IBM, LeftHand Networks Inc. and NetApp.
Navicure Inc., a Duluth, GA, provider of revenue-cycle management systems for physicians, relied on extensive manual scripting to back up as many as two dozen virtual servers using the replication capabilities built into its EqualLogic SAN (now owned by Dell). "The scripting was taking us hours," says Donald Wilkins, Navicure's IT director. "We wanted to streamline the process." Just trying to recover a VM and promote it to production involved a cumbersome process of mounting files and changing IP addresses.
"Site Recovery Manager automated all this for us, all the scripting and changing of IP addresses. It also lets us test our DR plan non-intrusively," says Wilkins.
To validate this approach, Wilkins undertook the two-hour challenge--to bring up 10 VMs in two hours. "We started at 7pm on a Friday night and began cloning VMs with EqualLogic. We changed IP addresses, replicated them and defined protection groups in less than two hours. We pressed a button and had all 10 VMs up and running 10 minutes later," he says. By 9pm the team was heading home.
UGL Unicco, Newton, MA, turned to STORServer Inc.'s STORServer Appliance for VMware Consolidated Backup. With approximately 100 VMs running on five VMware ESX servers and TSM as its primary backup tool, UGL Unicco uses the STORServer Appliance to interface with Tivoli, VMware and VCB. For most of its VMs, it puts a TSM agent on the server and backs up in the conventional way to STORServer disk, which spins it off to LTO-4 tape. It uses VCB with approximately 30 critical VMs to allow for file-level recovery.
"We're an IBM shop and we liked what Tivoli does, but it's very complex, highly scripted and uses a CLI, so we went with STORServer as a GUI front end," says Darrell Stymiest, UGL Unicco's network services manager. VMware backup was similarly challenging, requiring extensive scripting through another CLI. With the STORServer Appliance for VMware Consolidated Backup "we can take the VCB snapshot and write it to disk on STORServer and then send it to tape," says Stymiest. Recovering files with VCB remains a cumbersome multistep process, but it's much improved over previous VMware backups. "We want to use VCB with 90% of our VMs eventually," he adds.
"Backing up virtual servers isn't simple and the tools aren't perfect," says Mainland Information Systems' D'Costa. But the virtualization backup process is still immature. "Backup tool vendors and array vendors are still trying to conform with VMware," which is still evolving its tools and APIs, adds D'Costa. Until the virtualization industry matures in a few more years, backing up VMs will remain a challenge.


text: Hello I have a hosting account on a VPS. I am allowed to host as many domains as I want on it. I would like to try out LiteSpeed free (standard) edition but I'm confused what '5 virtual hosts' means. Does this means I can only have 5 domains on my VPS if I run LiteSpeed standard, or does it mean something else? It also says performance is "good" but not "optimized". Does this mean still better than Apache? Thankyou

subset: commoncrawl


text:
Hello, I'm trying to play Cabal. I really like this game, the skill animations are amazing, PvP is nice etc. but one thing doesn't let me play this game normally. The problem is that when I play Cabal it runs good, good FPS, no lag, but after about 20-30 minutes of playing one of those things happen:
1. Everything freezes suddenly, can't even move the mouse pointer. When I restart computer it says NO HARD DRIVE DETECTED. I have to "bash" the computer a little bit then it "fixes".. But occours next time I play too. This is the problem which occours most often
2. Everything freezes and suddenly all you can see is one colour all over the screen (colour depends on place, for example if you are in Desert Scream the screen turns brown). You cannot do anything like minimizing the game, turning on task manager or simply moving mouse cursor (which disappears actually)
It must be my hardware, but why doesn't the same happen on other games? I tried many other games, none of them is having such a problem.
Some info:
*Computer passes the recommended system requirements as the game runs very smoothly and has high FPS
*I have DirectX11
*I'm using Windows 7
*Using Ati Radeon HD3850AGP video card
I'd really appreciate the help, as I really want to play Cabal it's just such an amazing game. Maybe this is a common problem, I don't know. Maybe it's something my DirectX version is too new? Or maybe there's a simple fix for that? I really hope that you can help me.
Thanks and hopefully see you in game
PS. I don't think it's a problem of Windows 7 as I was having the same problem (even bigger) using XP


text:
Weekly Reflection
As part of my work as Manager, Campus Ministry for the University of Notre Dame Australia I write a weekly refection on the coming Sunday's Gospel and email it to all staff and students of the Fremantle Campus.
This then is the weekly blog of those reflections, based on the Gospel readings for Sundays, as per the lectionary of the Roman Missal of Paul VI.
Should these reflections find any readership whatsoever, I hope that it is edifying.
The title of my blog is taken from the English translation of Cardinal John Henry Newman's memorial epitaph, which was inscribed on his memorial plaque at the Birmingham Oratory.
Ex umbris et imaginibus in veritatem
- Through Shadows and Images to Truth
No posts.
Show all posts
No posts.
Show all posts
Subscribe to:
Posts (Atom)


text:
The League of Volunteers, a Newark-based nonprofit, has scheduled a free concert Jan. 6 featuring a performer singing Western songs and telling folksy stories in the tradition of Will Rogers.
The event will feature Sourdough Slim, who will perform a one-man vaudeville-style cowboy show that combines old-fashioned country songs, yodeling and comedic sketches.
The cowboy character, depicted by actor Rick Crowder, also will play the accordion, guitar and harmonica. The League of Volunteers and the Newark Arts Council are copresenting the performance.
The concert will be held at the MacGregor/Bridgepoint School Auditorium, at 35753 Cedar Blvd. in Newark. Doors open at 1 p.m., and the performances will start at 2 p.m.
For more information, call 510-793-5683 or go online at www.lov.org.


text:
Featured at Aish.com:
Give Tzedakah! Help Aish.com create inspiring
articles, videos and blogs featuring timeless Jewish wisdom.
Visitor Comments: 15
(15) Tiferet, August 22, 2007 7:52 AM
There's no place like home.
(14) David, August 12, 2007 11:53 PM
Homeland Security to Covertly Scan Behavior
It is not just security cameras we will be contending with- a new kind of social control will be here soon. Is this really the type of society in which you want to live?
"Scientists and engineers have been asked to devise ways of analyzing people's behavior and physiology from afar, in the hope they may reveal clues about their mental state and even their future intentions, reports the London Guardian.
A program named Project Hostile Intent (PHI) is aiming by 2010 to develop technology that can scan the bodily functions of citizens without them knowing and uncover any possible hostile intent or deception.
The technology will be covertly placed in public and will operate just like CCTV, with DHS officials able to remotely access it and apply its use to anyone in the area.
The Guardian reports that the DHS has revealed to New Scientist that technology to be used for PHI includes lasers, cameras, eye trackers, microphones and heart rate and breathing sensors. The DHS has also stated that it wishes to develop a lie detector-type test that can be used remotely which is described as an advantage because it would not interfere with the flow of a crowd and it could be used without the target's knowledge.
The report also states that the Project represents an enhancement of technology already in use to scan faces in crowds.
It is not beyond reason to expect this technology to be implemented without debate. Can anyone remember a real meaningful debate occurring concerning surveillance cameras before four million of them went up in London?
With the Bush administration's new ability to implement any surveillance programs it now wishes without oversight, and rabid neocon lapdogs calling for the heads of anyone who questions them, a Pandora's box has been opened that threatens to turn America into a big brother panopticon state."
Full article may be found on Infowars
(13) jacqueline, August 8, 2007 1:03 PM
(12) mike, August 8, 2007 10:13 AM
ever here of 1984?
Rabbi you seem to be forgetting that, it won't be rabbanim behind those cameras but crooked goy politicians and cops.
You might feel secure in America but hasn't history taught us that even the biggest and most 'civilized' nations turned and became murderers and oppressors...especially towards the jewish people. Do we really need that kind of Ayin roah upon us?
(11) Debora, August 8, 2007 3:44 AM


text:
Harry Potter Covers This Week's Issue of Entertainment Weekly's Summer Movie Preview
Apr 14, 2011
DH Film
Entertainment Weekly's annual Summer Movie Preview is hitting newsstands tomorrow, and featured on the cover is Harry Potter himself.
"Deathly Hallows: Part 2″ is one of the many summer films highlighted in this issue with an on-set report including quotes from Daniel Radcliffe (Harry Potter) and Emma Watson (Hermione Granger). There are also some minor spoilers about changes that have been made for the final battle.
Here's a short preview from EW's website (SPOILER ALERT!):
In this week's cover story, we visit the stars and filmmakers on the set
and learn secrets of the final, climactic installment, which hits
theaters July 15. Such as? Well, for one thing, the final showdown
between Harry and evil Lord Voldemort (Ralph Fiennes) in a wand duel at
Hogwarts will be a little different from what author J.K. Rowling
described in her 2007 novel. This time, the chase leads through Hogwarts
and culminates in a very physical brawl as the two foes "apparate"
(i.e., teleport) toward and away from each other.
Entertainment Weekly goes on sale tomorrow, Friday, April 15th. We will post the scans from the feature once they are made available!


text: Senator Robert Kennedy thanks Dr. King for a previous correspondence and expresses his aligned views regarding nonviolent reconciliation. Senator Kennedy believes in the preservation of dignity and freedom internationally without imposing "incessant military conflict" upon those with unaligned views. He references Dr. King's statement regarding the precedence of progress in America to that of other countries. He also wishes to hear Dr. King's reaction to a series of his speeches on "A Program for the Urban Crisis" that he has attached.


text:
Haugh Performing Arts Center
Citrus College
1000 W. Foothill Blvd.
Glendora, CA 91740
Posted by: School of Music
BATTLE OF THE BIG BANDS: Round 10
This season marks the 10th round of this annual "battle," and APU's Jazz Ensemble and Citrus College's Blue Note Orchestra are neck-and-neck to the finish line, for those of you who like mixing metaphors. So far, the only clear winner is the audience! Actually, bandleaders David Beatty and Robert Slack are good friends, and their passion to inspire and present musical excellence has resulted in national prominence for the on-stage student competitors. There's no way to lose at this battle between champions!
Tickets: $18, Senior $16, Student $10.
Parking $5
For Tickets, call the Citrus College Box Office at (626) 963-9411 or visit them at www.haughpac.com
Haugh Performing Arts Center
Citrus College
1000 W. Foothill Blvd.
Glendora, CA 91740


text:
The Secretariat of the United Nations Educational Scientific and Cultural Organization (UNESCO) and the World Heritage Centre do not represent or endorse the accuracy or reliability of any advice, opinion, statement or other information or documentation provided by the States Parties to the World Heritage Convention to the Secretariat of UNESCO or to the World Heritage Centre.
The publication of any such advice, opinion, statement or other information documentation on the World Heritage Centre's website and/or on working documents also does not imply the expression of any opinion whatsoever on the part of the Secretariat of UNESCO or of the World Heritage Centre concerning the legal status of any country, territory, city or area or of its boundaries.
Property names are listed in the language in which they have been submitted by the State Party
The area south of Upington was home to communities of the !Xam, a clan of the San (or Bushmen) who inhabited southwestern Africa for thousands of years until displaced by later settlement. Here some survivors became laborers on farms but their language and culture has disappeared. However, in the 1870's Dr Wilhelm Bleek and Miss Lucy Lloyd began recording the language, folktales and spiritual beliefs of a number of !Xam brought to prison in Cape Town. These individuals were amongst the last repositories of the language and belief system of the !Xam and Bleek and Lloyd's work links many beliefs to known features in the landscape, providing a window of understanding into the blending of folklore and geography by the !Xam. The information has enabled archaeologists to interpret the rich rock art legacy left by these and other San. The !Xam area in a unique way links the memory of a vanished people, their language and culture, spiritual connection to their environment and contribution to the meaning of Southern African rock art. It is a unique memorial to lost pre-colonial cultures in Africa. By comparison the area in the north of Upington is home to the $Khomani who until recently were thought to have disappeared, in this instance due to their removal from ancestral lands in the mid¬20th Century. In 1996 several elderly speakers of their language and carriers of the culture were identified. In 1999, activism by younger descendents led to restitution of land to the south of the Kgalagadi Trans-frontier Park, the original home of the community, and restoration of certain land use rights within the Park. Young members of the community have since worked with elders on cultural mapping of these lands and 'reconstruction' of a cultural landscape, not dissimilar to that of the !Xam. There is a strong revival of traditional practices and use of this landscape in a manner that enhances conservation thereof. The $Khomani are the last surviving indigenous San community in South Africa and their living cultural landscape is an important aspect of national culture, one that contrasts well with the !Xam area to the south. The two areas are the only San cultural landscapes that have enjoyed this level of attention and concerning which there is hence a fair depth of knowledge. Although covering extremely large areas the two components are in relative close proximity and are considered as a single nomination illustrating the heritage of a unique group of African cultures most of which have disappeared without record of the knowledge and practices they embodied


text:
I missed the Co Op Open House!
Argh!! I am so mad at myself! I had been looking forward to it for weeks! It was on the calendar, I had gotten an email reminder from my google calendar the night before, and an email reminder from the co op yesterday morning. We went to the library and I said out loud "Oh, I am going to the open house tonight, you guys can hang out with dad." I KNEW when it was! And then I forgot until 10 minutes ago.
So I missed the info about the co op class the kids are doing, I missed getting to browse curriculum and talk with experienced hs'ers, and I missed the goody bag! Darnit. I am so disappointed! I emailed the lady just a minute ago, just asking fro any tips or anything about the co op class that I should know. I am seriously so mad. I was really looking forward to it. I don't understand how I completely forgot about it when I really knew about it!
Sorry just needed to vent...
I'm feeling less disappointed in myself now, lol. I guess my day was too busy to sulk about it ;)
She did email me some info, and a syllabus for the co op class they are taking. She was not helpful when she said "we had a really great turn out with lots of great information, too bad you missed it." lol, I know it's too bad!! Don't remind me!


text:
Another top official at Florida's economic development agency has left, continuing an exodus of executives from the Department of Economic Opportunity, created by Gov. Rick Scott 18 months ago.
Tom Beck, who was the Director of Community Development at the Department, has left DEO for the Department of Environmental Protection, DEO confirmed Thursday. He will be replaced by William Killingsworth, a former planning official with the City of Jacksonville.
Killingsworth will face a full plate when he lands at the agency later this month.
The Division of Community Development helps run the Black Business Loan Program, which is tied up in litigation after DEO refused to renew the certification for a Central Florida organization. Several officials at DEO are being called in to testify under oath.
DEO has had five different directors—two interim, three permanent—since it launched in late 2011.
Many of the top officials who helped launched DEO in 2011 are no longer with the young agency as it tries to establish itself. Here's a non-exhaustive list of some of the top officials who have resigned their jobs at the state's job-creation agency in the last year or so:
Doug Darling, first director
Hunting Deutsch, second director
Cynthia Lorenzo, director of Agency for Workforce Innovation, and interim director
Darrick McGhee, director of legislative affairs and interim director
Nancy Blum , director of communications
Carolyn Gosselin, second director of communications
Debby Kearney, General Counsel
Michael Ayers, Chief of Staff
James Mathews, Inspector General
Dear DEO Team:
I have some exciting news to share. Tom Beck, who for twenty-three years has made a tremendous contribution to DEO and DCA, has decided to lend his talents to the Department of Environmental Protection as its new Director of the Office of Water Policy. This is a loss for DEO, but a gain for the people of Florida, as water policy is a critical area to which Tom will bring wisdom and experience. Please join me in wishing Tom every success at DEP and in thanking him for his many years of faithful service to DEO and DCA. Tom's last day at DEO will be February 15, so if you see him in the halls between now and then, please be sure to congratulate him.
I am also pleased to announce the appointment of William "Bill" Killingsworth to the position of Director of the Division of Community Development. Bill comes to us from the City of Jacksonville, where he has worked for more than twenty years. In his past experience he has served as the Director of the Planning and Development Department, the Chief of Community Planning, as a Principal Planner, GIS Manager, Senior Planner, Planner, and Assistant Planner. Bill is a University of Florida graduate who is certified as an Economic Development Finance Professional and is a member of the American Institute of Certified Planners. Bill will start at DEO on February 25. Please join me in welcoming Bill to the DEO team!


text:
The Estes Park Internet Computer Users Group (EPICUG) will sponsor a tech swap on Thursday, Feb. 28 at the Estes Valley Public Library. All are welcomed to attend. If you have outgrown the need for a piece of technology in your life, bring it to the swap. If you need a piece of technology, come look for it - if you do not find it, you will definitely find something irresistible.
Set up starts at 7 p.m. in the Hondius Room. Tables will be provided along with some extension cords and power strips, or bring your own. Please do not show up early. Suitable items include: computers, displays, laptops, printers, scanners, other accessories, electronic games, cameras and accessories, telephones, iPods, other mobile devices, cables, tech-related books, not-installed-software, manuals, etc. Only bring items that you are willing to part with.
Round-the-circle at 7:15 p.m. will give traders an opportunity to describe their offerings. Items may only be offered for free - no exchange of money. If you hear about an item you want, speak up right there and then.
Arbitration happens if more than one person wants a specific item, they have to describe what they want to do with it, and the group votes.
Socialize at 8 p.m. after everyone's chance to show their stuff, roam around, ask questions, enjoy some light snacks, goggle over the Atari, pick up that power adapter you hedged on earlier.
Cleanup and recycle is at 8:40 p.m. reuse is the intent of this event, but if there's leftover gear nobody wants, Access Recycling of Loveland has offered to take it all free of charge, even batteries. The only exception is cathode-ray-tubes. If you'd like to recycle a CRT, please contribute $8.
For more information visit the EPICUG website at epicug.org.


text:
Loading product details ...
Reviews (0)
Need Help?
Product Description:
Women's Prana Alana Dress :: The versatile Alana has the stretch and internal shelf bra support to hike in comfort and style. A hood provides a quick and convenient wind break when you reach the overlook. Organic cotton and Fair Trade Certification ensure the communities who made the Alana are not neglected.
Features & Benefits:
Your Help Is Here
Shop with confidence knowing your team of Fit Experts is waiting to answer all your questions. You can always find your perfect product and your perfect fit. Your Road Runner Sports Fit Experts will make sure you get exactly what you want and have tons of fun in the process! Give us a call, chat, or email!
Call 800-743-3206 to
You May Also Like


text:
ROCHESTER — Since a permit was granted to the new owner of the former Thompson Center Arms property on North Main Street in early January, demolition has begun though the city has yet to receive construction plans for the future.
ROCHESTER — Since a permit was granted to the new owner of the former Thompson Center Arms property on North Main Street in early January, demolition has begun though the city has yet to receive construction plans for the future.
The former gun manufacturing facility officially sold on Dec. 19 by Smith & Wesson to a purchaser listed as 400 North Main St. LLC for $1,150,000. The buyer listed on paperwork of the 13.1 acre site is Anthony Dilorenzo, of Key Auto Center of Somersworth, who declined to comment on the demolition's progress Tuesday afternoon.
E. Molly Stark, a hydrogeologist and project manager at the state Department of Environmental Services (DES), previously confirmed Dilorenzo intends to open a car dealership on the site and Rochester Deputy City Manager and Director of Community Development Karen Pollard said there may also be plans to utilize the additional space for retail businesses.
The site, with 12 standing structures, requires some environmental cleanup before it can be redeveloped and Rochester's Department of Building Safety Director Jim Grant confirmed DES has been on-site throughout the demolition to oversee every step of the process. According to Grant, several hazardous materials, including lead dust in the site's two firing range areas, as well as chlorinated solvents and oil in the groundwater, are among problems that need to be addressed. There is also asbestos in some of the building walls but Grant said the previous contamination is fairly minimal.
"Surprisingly, this site has very little contamination, considering the history of this site," he said.
Pollard said Whitcher Builders is serving as contractor for the project and has indicated the buyer will look to bring in other businesses, though nothing has formally been submitted to the city Planning Board.
"They will have some additional space beyond the car dealership so they are in the process of looking for tenants that would co-locate in that space," she said, noting all plans are in the early stages.
She noted the site currently stands in an industrial zone and will need to be rezoned to a commercial use district. Once preliminary plans are received and reviewed from the buyer, the Planning Board will hold hearings on layout and consider the site's impact on the surrounding area including its effects on traffic patterns. Pollard said she expects to receive an application before the end of the year, noting the buyer was interested in getting a permit as soon as possible to launch demolition. Grant said a demolition request was received on Jan. 7 and granted on Jan. 8.
"They were so eager to get started on demolition and the site plan but we've only talked in very general terms and we've also discussed the rezoning of the area since that of course would make a difference to the future development," Pollard said.
She said Rochester City Council will likely review a package of recommendations from the Planning Board in February to alter some existing zoning, which will include a recommendation to change the area near North Main Street and the former Thompson Center Arms site.
"That's a very busy corridor and it's ideal for commercial development," she said. "It's very attractive for that so that is part of the recommendation now, to change the zoning from industrial to commercial in that area."


text:
American Forces Press Service
Jan. 9, 2007 – At least three insurgents were killed, an al Qaeda cell leader was captured, and other suspected terrorists were detained through several recent operations in Iraq, military officials reported.
-- Soldiers from the 1st Brigade, 6th Iraqi Army Division, with support from coalition forces, are conducting raids today in Baghdad. Three insurgents have been arrested so far in the ongoing operation.
-- Soldiers from Company A, 2nd Battalion, 8th Cavalry Regiment, 1st Brigade Combat Team, 1st Cavalry Division, detained seven suspects and discovered a weapons cache yesterday in northern Baghdad.
-- Soldiers from 1st Battalion, 3rd Brigade, 6th Iraqi Army, yesterday discovered five rocket-propelled grenade launchers, seven AK-47 rifles, one sniper rifle, ammunition, and six mortar fuses west of Ghazaliya.
-- Iraqi police provided medical screenings yesterday for children at a southern Ramadi school. Police forces visited classrooms, talked with students and handed out backpacks, Iraqi flags, soccer balls and jerseys, stickers, toys and candy.
-- 5th Iraqi Army troops and Task Force Lightning soldiers killed three insurgents, detained several suspected terrorists and discovered multiple caches Jan. 7 during operations in Tahrir village.
-- 6th Iraqi Army Division forces with coalition advisors captured the cell leader of an illegal armed group Jan. 7 during an operation in the Salaam district of northern Baghdad. The cell leader is responsible for kidnapping and murdering Iraqi civilians and security forces.
-- Following a firefight with terrorists Jan. 7 in Tameem, Iraqi police captured insurgents, confiscated a mortar tube and uncovered a weapons cache.
-- Iraqi army and coalition forces killed several insurgents, detained several suspected terrorists, and discovered several large weapons caches over the past five days during operations near Turki village. The caches contained hundreds of rockets, improvised explosive device-making materials, small-arms munitions and dozens of anti-tank weapons.
-- Iraqi troops working with 1st Battalion, 501st Parachute Infantry Regiment, 4th Brigade Combat Team (Airborne), 25th Infantry Division, soldiers discovered an improvised explosive device Jan. 7 while patrolling the fish farm area west of Iskandariyah.
Article sponsored by criminal justice leaders; and military and police personnel who have written books.
Tuesday, January 09, 2007
Terrorists Killed, Detained in Iraq; Weapons Discovered
Posted by Raymond Foster at 8:02 PM
No comments:
Subscribe to: Post Comments (Atom)


text:
Marlene F. Liening, 72
Marlene F. Liening, 72, of 12570 State Route 362, died at 3 p.m. Wednesday, Jan. 25, 2012, at Joint Township District Memorial Hospital in St. Marys.
She was born on June 28, 1939, in Minster, to Herman and Philomena (Ruhenkamp) Oldiges, and they preceded her in death.
On June 23, 1962, in Minster, she married Thomas Liening, and he preceded her in death on Sept. 1, 1979.
She is survived by her children, Gayle and Craig Burns of Mason, Steve and Mary Liening of Minster, Sue and Luke Albers of Minster, Patrick W. Liening of Minster and Jonas and Marlena Liening of Lexington, Ky.; eight grandchildren; a brother; a sister-in-law.
She was preceded in death by a brother.
A Mass of Christian Burial will be held at 10 a.m. Monday at St. Augustine Church, with the Rev. Rick Nieberding officiating. Burial will follow in St. Augustine Cemetery.
Friends may call from 2 p.m. to 6 p.m. Sunday and from 9 a.m. to 9:30 a.m. at the Hogenkamp Funeral Home in Minster.
Condolences may be left at Hogenkampfh.com.


text:
Audiobus: Looping Sunrizer with Loopy HD
November 5, 2012 · Posted in Uncategorized
iOS developer Audiobus has now released a proper teaser video demonstrating the workflow of its potentially revolutionary inter-app audio routing device. Audiobus is an app designed to allow audio to be streamed between multiple iOS music making apps. No release date has been announced yet, but the app has been approved by Apple. For more info on the app, check out the Audiobus official site.


text:
Gear Guide
Company: Dr Jelly
Product Name: Revolve Silicone Polymer for iPhone 3G
Website: Dr Jelly
List Price: USD14.99
Revolve Silicone Polymer for iPhone 3G
By dr-jelly
Contributing Editor
Published: Monday, August 4, 2008
Category: Cases - iPhone, iPhone 3G / 3GS,
Consist of a full set of 10-color family, the Dr Jelly Revolve Silicone Case is made of oder-free pure silicone and dust proof pre-coating. It also complete safe with U.S. 21 F.D.A Regulation Part 177.2600 standard.
Dr Jelly Revolve for 2G and 3G are perfectly fit on all Apple iPhone models, fully access to all controls, proximity sensor, camera lens and touch-sensitive screen. The engraved circle pattern given a signature touching and nice looking for the Revolve.
Dr Jelly Revolve 2G and 3G is selling USD11.99 and USD14.99 respectively. Free air-mail worldwide today.
Editors' Note: iLounge only reviews products in "final" form, but many companies now change their offerings - sometimes several times - after our reviews have been published. This iLounge article provides more information on this practice, known as revving.


text:
reading lindys pro football magazine.I was checking out other teams first three picks compared to the jets first three picks.in my estimation I would rate the jets picks in the top five. coples was a stroke of luck in falling to the jets.hill to me has all the essentials to be a future all pro.davis is a sleeper pick,being that he has played for a small school.but I guess that the jets saw his potential to be a winner..does anyone agree with me?
... with limited "real" looks at them as a Pro yet there is always an element of "hopefullness" for fans of any team at this time of year ...
... all that being said ... this is the best i've felt about a draft in a long time ...
... QC and Hill both have home run potential ... whether either or both pan(s) out will have to be seen ... but i'm excited ...
... davis seems to have the vocal leadership skills to replace scott after this season ...
... let a TC cut RT fall into our lap and pass me the jergens! ...
don't know if you can rate any draft pick until after a few games, at least. however the jets certainly addressed some needs with the first three and they apparently drafted guys who were at least rated as highly as their draft level. i don't know if you can expect much more than a jag player 3rd round and below. first round should be near hof and 2nd round very good.
Coples and Hill could and should be homeruns. Davis, a pick that took me by surprise has quickly grown into a fascinating selection. Something about him smells ripe. Playmaker on the horizon.
It's certainly above average
Hill is going to be the best draft pick we've made in years, just have this feeling about him. I dont see him putting up huge receiving stats this season but he's going to be a beast blocker, draw coverage away from Santonio, and catch some deep passes for us.
Last edited by NY2FLDWC85; 07-16-2012 at 08:32 PM.
I definitely have high hopes for Coples, the man has the body to be a monster. But I remember when we first picked him up hearing reports about him being lazy.I'm sure he'll prove himself but till then it's all up in the air.
Hill though that was definitely our best pick we got lucky. The man will be a star. You'll all see.
Davis I like him I think he has a lot of heart and is a hard worker. All in due time.
Our 3 picks have the talent and can be great let's hope Rex can get these boys up to par.
I think the general consensus is that our first two picks "fell" to us (as they could have gone much higher) but that both have question marks that had people warry.
DeMario Davis was a bit of a reach but seems to have the physical tools to be a freak.
I was not a fan of the Coples pick at the time (after the Gholston debacle low effort, non-passionate players will always make me wary) but his potential has grown on me. I really hope he's a beast.
I think Hill is going to be a stud, and is just what the doctor ordered in regards to giving our offense a shot in the arm -- a big, fast, physical WR that can stretch the field and block.
Best post-Mangini draft by far. Would have liked to have gotten an OL but I am very pleased with our top 3 picks. I think they will all be contributors from day 1 and you can't ask for much more than that. And down the road I can see all 3 being long-term Jets.
The fact that Hill fell to where he did was almost a miracle and I think will be the best pick this team has made since Revis. He's got all the skills to become a dominant Top 10 NFL WR. It's going to be fun watching him develop.
Coples and Hill were serendipity. Davis looks like a baller - high effort, high value guy. This year's draft may suprise a lot of people who were sleeping on the Jets.


text:
Text Size Large SizeMedium SizeSmall Size Color Scheme Black SchemeWhite SchemeGrey SchemePaper Scheme
What Next?
What if Reneesme didn't love Jacob Black?... takes places IN THE FUTURE... so I had to be creative.... Please read.
This story is my first and might just be my last on twilightarchives if NO ONE REVIEWS! Review and I'll read one of your stories, art or poems-- and review either one! Just email me at email@example.com to let me know... or in your review. I will respond to every review... unless you don't want me to respond. But why would you want that? Hehe :) Anywho, I won't keep you hear long! READ!!PS. If I deside not to post anymore stories on this site, visit www.twilighters219.piczo.com --even if I do post more here... still visit my twilight fan club! THANK-YOU
1. 1. Love
Rating 4.5/5 Word Count 875 Review this Chapter
Renesmee's POV
It was my seventeenth Christmas-- it's not like I was seventeen...I stopped growing after a while-- now I was immortal. It was just my seventeenth year alive.
Seventeen is a big number for my mother-- the reason, I have no idea. I never asked.
Since it was Christmas, she told me there would be more than just our family, Jake, Seth and Quil with Claire. They arrived early. My father told me that I had seen them-- but when it was only my first year alive. Nahuel and Zafrina had come. Apparently Nahuel's mother was human-- like my mom was when she gave birth to me.
Nahuel walked into the room-- he was beautiful. I know I shouldn't be overwhelmed by his beauty-- everyone here was beautiful (I mean the mythical creatures-- I mean suppose to be mythical).
But he was very beautiful-- like I needed to see his face everyone second of the rest of my eternity. Make him smile... forever. After all, we did have forever.
I stared at him while he followed Zafrina to the seat next to me. She sat in between us though. I don't think it would of been healthy for me to sit next to him. Even though I wanted to so bad.
I guess seventeen would be a good year for me as well. Jake saw me staring so I shifted my gaze to smile at him. But my gaze just couldn't leave him for too long. My eyes always returned.
Jacob shifted in his seat. He probably felt very-- strange. Watching the—freak-of-nature he had imprinted on stare at another freak-of-nature. But how could I ever possibly call him a freak? He was much too beautiful. And I know Jake never thought of me as a freak.
It was silent for a while, then I realized why. Everyone was staring at me. Except for Nahuel who was confused as I was before. They were silent because I was starring at Nahuel. Jacob looked horrified and drowned in pain—as well my mother. My father looked happy-- in his eyes, he was probably putting on this façade for mom. Zafrina realized their change of mood and wondered why that was. Rosalie and Emmet were smiling widely; my dad would have the same expression if it wasn't for his façade. Alice's face was blank like how it normally is when she's seeing the future, and Jasper had mixed emotions-- happy because of Emmet and Rosalie, sad because of Jake and my mother-- I wonder what my dad's emotion inside was. Probably a mix-- he felt pain for my mother feeling pain for the pain Jacob was feeling but happy because of-- well, I honestly didn't know... but that's what his eyes said.
Alice's vision finished, and my father's façade disappeared, my mother saw the confusion on my face, and looked at my father. Suddenly his façade reappeared and I looked at Alice for a sign or something. All she did was smile at me and I made a confused expression at her. Then she spoke, "Hey! Nessie, can I talk to you?"
Then suddenly everyones whose eyes weren't already one me looked at me as well as everyone who was already reading my expression.
"Yeah, sure, Alice."
She grabbed my arm and pulled me through the back door. We ran through the forest until all the others couldn't hear me. I could almost see my father's frown when he couldn't read my mind, in my mind. He would want to know my thoughts no doubt when Alice told me what she had seen. Of course he had already known what it was, which was obviously why his façade disappeared for that short moment.
"Reneesme, do you want to know something that could possibly change you whole entire LIFE?!"
"But FIRST... do you want Nahuel?"
"I haven't even spoken to him yet!"
"Yes, but you were staring at him!"
"Alice, I don't even know what falling in love feels like!"
She hugged me and I cried into her shoulder. "You mean you don't love Jacob?"
"Only like... like a brother."
She was silent for a while. She stepped back, "Oh-no. Why didn't you tell him?"
"Would you ever want to hurt your brother?"
"Guess not... I mean Edward reads minds."
"What about Emett?"
"Well I guess not. But I didn't know him when he didn't have Rosalie. 'kinda hard to imagine myself in her position, I mean, I love Jasper!"
"I never knew Jake before I was born!" That came out to loud.
"Don't yell, Nessie. They can hear you if you do that, I didn't want to go too far."
"Can dad hear my thoughts?"
"Well, it's very likely. We're only about five miles away."
"Let's go further." So we ran ten more miles to be sure they weren't anywhere near to hear, mom probably wanted to know what was happening... so dad read it out for her-- I'd bet anyone who would doubt me. Bet them my life. Bet them forever. "What was your vision?"
"Wait... so you like Jacob only like a friend right?"
"A brother-- friendships break."
"But he's not your brother. He won't stick around if you don't love him."
- Author
- crazypeez
- Rating
1 2 3 4 5
- Reviews
- 7
- Words
- 2655
- Views
- 1
- Published
- 05 Nov 08
- Updated
- 29 Nov 08
- Status
- In Progress


text:
If coming in on a weekend isn't asking too much, where do you draw the line?
Major releases of business-related (not e-business) software are usually done on weekends, and (in my experience) the coders as well as the admins are there to iron out the kinks. It makes for a solid rollout. It's part of being an IT professional, and I've been there a number of times. Would you like some cheese to go with your whine about missing the Saturday morning cartoons?
A good sys admin -- properly appreciated by management $$$ -- would or at a minimum lock the systems down so that this isn't an issue.
Waiting until Monday ensures that IT guys get a rest too.
Our sysadmins usually schedule upgrades, patches, etc., for the weekends so as not to disrupt normal business. Then, they get to take a day off during the week. What's wrong with your company?
However, the question is what if a vulnerability is made public on a day the admins have off?
If it was critical, some or all of our admins, being the professionals they are, would come in (or do the work from home) and take time off another day.
Also, many managers don't like giving admins time off during business days in case business is disrupted.
It sounds like you work for a pretty short-sighted company. They won't get the best results that way. It makes me happier about the place I work at. I ho
Someone who can't decided on whether to be a black hat or a white hat. Kinda like Michael Jackson
I believe the color you are looking for there is a nice shade of ass for that hat.
It's a big cone shaped hat you have to put on before you sit in the corner.
Okay, can we get the PC police over here? That is no longer allowed because it might damage the self-esteem of people who have no reason to have any. Take the poster away, and book him.
What exactly can a Grey Hat do that is illegal? Is disclosing a vulnerability without getting the consent of some big corp "illegal"?
In the computer security community, a "Gray hat" is a skilled hacker who sometimes acts legally and in good will and sometimes not. They are a hybrid between white and black hat hackers. They hack for no personal gain, and do not have malicious intentions, but commit crimes. For example, attacking corporate businesses with unethical practices could be regarded as highly ethical and yet would normally be tagged with the title of Blackhat activity. However, to a Gray hat
MS will just overlook any 'exploit" they cant fix in a timely fashion and say that those exploits/bugs were never reported to them "correctly".
Give me a
Very subtle. Admit that M$ junk is full of holes. Admit that M$ will never be able to fix them and that this announcement is just another PR stunt from the kings of marketing BS. Then, slip - o - change - o, spout that other M$ company line, "no software is better than ours."
Not all bugs are created eq
Exactly. Hasn't MS in the past tried to get people to sign NDAs re: bugs that a person has discovered? If they can succeed in keeping the knowledge out of the public eye, then by this policy they could bottle it up, avoid announcing it, and still claim they're being proactive.
"Perhaps I am the only one that thinks that Microsoft is evil."
Not by a long shot.
Yes, for people that don't read the article that publishes the problem. Granted, news of the problem will be spread all over the net very rapidly, but Microsoft admitting that it is a flaw and not a feature carries a little more weight than joe hacker posting on some blog.
Perhaps I am the only one that thinks that Microsoft is evil.
You've got to be kidding. New poll topic:
Microsoft is:
For a vulnerability to be "public" it needn't be all that public - most admins don't read bugtraq and FD on a daily basis, so they don't find out about the vulnerabilities when they become "public". They hear
The impression I had was that they were found guilty, but ninjas came in the night and removed the spines of the entire Justice Department....so MS was never properly punished.
Advisories will be issued within one business day of a publicly reported security hole along with guidance and mitigation.
So, Microsoft only will do something if inaction stands to bring them negative attention. What I would like to see from Microsoft (and other commercial and/or closed source vendors) is a commitment to treat the security holes their own developers discover in the same way.
I just don't think it is right to withhold the information, espcially if admins can use it so secure their sites, until the threat of public disclosure by a third party is imminent or past.
Can you give an example? I can't think of one OSS project that handles security issues like Microsoft -- either in the past or if there is any meat to this new proposal.
Forty two.


text:
"Don's Winter Wish/Festival of Lights"
Mon., Dec. 5 @ 9:30am
(repeats: Wed., Dec. 14 & Fri., Dec. 23)
On a return trip to the North Pole, the Pteranadon family is caught in a snow storm — but did Don's wish for snow make the storm happen? Then, while at the North Pole, the family stops by a Northern Troodon Festival of Lights to view the Aurora Borealis and join in an ice skating and singing spectacular.
"Musical Celebrations"
Saturday, Dec. 10th, @ 9:30 am; Saturday, Dec. 31st, at 9:30 am
Hanukkah (Chanukah,) Kwanzaa, Hispanic tradition, birthdays and other holidays and celebrations are explored after Tiny Scarecrow accidentally releases all the holiday melodies from Melody Garden. This song filled special shows how a "holiday" can be a good time to learn about other cultures and traditions and a great time to share your culture and traditions with others.
"Merry Musical Christmas"
Saturday, Dec. 24th, @ 9:30 am
The whole family will sing and laugh along with this heart-felt musical nod to traditional Christmas specials of the past. Join the Biscuit Brothers and company on Christmas Eve as they use music to celebrate on the magical, musical farm and try to cheer up Tiny Scarecrow who sits high atop Symphony Barn waiting for snow.
"A World Without WordGirl"
Fri., Dec, 16 @ 3:30pm
(repeats: Thu., Dec. 22 & Mon., Jan. 2)
Blowing out her birthday candles after one too many superhero interruptions, Becky wishes for a world without WordGirl. She realizes her wish has come true and Chuck has become a king who has imposed strange rules. Will Becky find the last piece of enchanted birthday cake so that she can wish for the return of WordGirl and make things go back to how they were before?
Mon. Dec. 19 @ 11am
(repeats: Fri., Dec. 23 @ 11am)
"The Cookie Crumbles" – When Mrs. Z presents the kids with candy canes, they decide to make cookies to thank her. But as their cookie list grows and their standards rise, they become fed up with frosting and each other. With Clifford's help, they remember that Christmas is about celebrating being together.
Tue., Dec. 20 @ 11am
"The Big, Big Present" – The kittens accidentally break the Menorah. Their "sticky" attempts to fix it result in a special, if unusual, Menorah that becomes part of their annual celebration. Hanukah Plunder Blunder: Zo can't resist sneaking in and opening all eight of his presents on the first night of Hanukah. He soon realizes that he's spoiled his own fun by taking the surprise out of each night. Flo comes to the rescue by allowing him to share in her new gifts.
"Hooray for Hair/Ice is Nice"
Mon., Dec. 19 @ 8:30am
(repeats: Thu., Dec. 29; Sat., Dec. 3 @ 8:30am & Sun., Jan. 1 @ 6:30am)
"Hooray for Hair" – Sally and Nick are getting their hair cut today; maybe they should try new hairstyles! A trip to meet three of Cat's friends (and some styling help from the Wig-o-lator) will help them decide! Should they have yak hair? No, too hot! How about hair like a fur seal? Not quite, too short. A porcupine? No way! How will they ever get a hug from their moms with hair that spiky? They decide that the hair they have is what's perfect for them!
"Ice is Nice" – Nick and Sally want some nice cold lemonade, but there's no more ice cubes in Sally's fridge! A trip to Freeze-your-knees Snowland will fix that! They meet Cat's friend Polly the polar bear who introduces Sally and Nick to all the different kinds of ice that make up her home. After trying many types of ice, they find the kind that will be perfect for their lemonade!
Mon., Dec. 19 @ noon; Tue., Dec. 20 @ 6:30am; Thu., Dec. 22 @ 6:30am & noon
Moishe Oofnik is selling 2,000 year old sufganiyot (jelly doughnuts traditionally eaten on Chanukah), and Anneliese is bringing her family's menorah to light at Shoshana's in celebration of the first night of Chanukah. Grover the waiter is serving levivot (potato pancakes or latkes), when he and Anneliese are both startled by Brosh and a chicken. Anneliese's menorah (a nine-branched candelabrum) goes flying. Anneliese can't find her menorah anywhere, so everyone helps her look. The pressure is on to find it before sunset, and everyone sings a song about the search. Finally, Avigail finds it and everyone heads inside to light the candles. In the end, the Sumsum crew lights the menorah together and sings a song.


text:
Bandys eliminated by Pisgah in Greensboro
A pack of hungry, fast-paced Black Bears put an end to Bandys' girls basketball season on Wednesday.
Pisgah (25-6) led nearly the entire game against the Lady Trojans, winning 57-45 at UNC-Greensboro to advance to Saturday's 2A West Region championship game.
Bandys, who was making its fourth-straight appearance at the 2A West Regions, finish its season with a 27-3 record.
To read more of this story, pick up the Thursday edition of Catawba County's community newspaper, The Observer News Enterprise, at newsstands throughout the county.


text:
Scheduled for release to major retail outlets nationwide this holiday season, Fugitive Hunter: War on Terror is expected to retail for approximately $30.
Said Michael Bell, Encore's CEO, "In today's world, we have to deal with the daily threat of global and domestic terrorism. For most people, there is no real way to release some of the frustration and anger they feel toward the direct source of this terror. Fugitive Hunter: War on Terror allows them to take out some of this frustration and feel a sense of satisfaction by bringing fugitives to justice."
Added John Botti, president and CEO of Black Ops, "Encore is the perfect publishing partner for Black Ops, not only because of their ability to take on a potential blockbuster title like Fugitive Hunter, but also because of their enthusiasm for this game that we have spent years developing. Fugitive Hunter combines my personal experiences of living in a crime-ridden ghetto with actual research data from the FBI, the U.S. Marine Corps, and the Santa Monica Police Department."
Game Takes Aim at Osama bin Laden
In Fugitive Hunter: War on Terror, players assume the role of Jake Seaver, a former Navy Seal and current Fugitive Recovery Agent. The story begins during a covert mission on the Afghanistan-Pakistan border in 1999. Seaver's helicopter is shot down and his team is lost in the crash. Barely escaping with his life, Seaver returns to Miami, the headquarters for the Criminal Interdiction and Fugitive Recovery (CIFR). He must now focus on his next mission, although he never forgets the failed mission and the deaths of his teammates.
Seaver throws himself back into his work, taking on new assignments, gathering information, and tracking down fugitives around the globe. Traveling from Miami, Utah and Paris to the Caribbean, Seaver finds a common thread between his various missions and the fugitives he hunts, ultimately coming full circle to where it all started -- Afghanistan.
Fugitive Hunter's key features include:
- Players track and capture 11 terrorists, drug cartel leaders, militia leaders and bank robbers, with Osama bin Laden -- America's most wanted terrorist -- as one of the key targets
- The game combines FPS and fighting genres with players moving seamlessly from FPS to hand-to-hand fighting modes
- 19 different missions of combat, covert operations and fact finding
- Key members of the Matrix stunt team were used for realistic fight action, including Keanu Reaves' stunt double
- Players have access to 10 deadly weapons with multiple modifications and ammo types
- Will Lyman, the voice of PBS' Nova and Frontline and currently starring in ABC's Threat Matrix, introduces each mission
- Multiple locations include Afghanistan, Miami, Utah, Paris and the jungles of the Caribbean as players roam the world in search of America's most wanted
- Fugitives are modeled on America's most wanted criminals


text: Big and small, bright and neutral, chunky necklaces or delicate necklaces, Anthropologie has all the necklaces you need. Necklaces are always an important part of an outfit, whether they accent the items you're already rocking or they act as the main, statement focus. Tassel, metallic, beaded, feather, wooden, glass, or even rope, our necklaces go above and beyond with material. We like to think of our necklaces as more than just an accessory, but instead as a focal point that makes an outfit.


text:
COPPER MOUNTAIN, CO (Jan. 9) – Over 100 athletes from 37 countries took to Copper Mountain's Main Vein Superpipe today at the Visa U.S. Freeskiing Grand Prix. Under Colorado blue skies men and women's halfpipe qualifiers went off without a hitch to kick off the first domestic FIS World Cup of the year. Every U.S. Freeskiing halfpipe team athlete who competed made it into finals, this included rookie stars Aaron Blunck (Crested Butte, CO), Alex Ferreira (Aspen, CO), and Annalisa Drew (Andover, MA). The weekend will be televised on both NBC and the NBC Sports Network, plus live coverage of halfpipe finals on the USSA Network.
RESULTSOfficial Results
VISA U.S. FREESKIING GRAND PRIX SCHEDULEWed. Jan. 9 – Halfpipe skiing qualifiers, 8:30 a.m. – 3:00 p.m. MTThur. Jan. 10 – Slopestyle skiing qualifiers, 8:30 a.m. – 3:00 p.m. MTFri. Jan. 11 – Visa U.S. Freeskiing Grand Prix, halfpipe skiing finals, 9:30 a.m. – 11:30 a.m. MTFri. Jan. 11 – The North Face Junior Jam, 5:00 p.m. – 6:00 p.m. MTSat. Jan. 12 – Visa U.S. Freeskiing Grand Prix slopestyle skiing finals, 1:00 p.m. – 3:00 p.m. MT
Full Event Schedulehttp://ussnowboarding.com/sites/default/files/documents/events/2012-13/documents/Copper%202013_GP%20Schedule_12-10-12.pdf
BROADCAST SCHEDULE (times ET)Sat. Jan. 11 11:20 a.m. -1:00 p.m. – Visa U.S. Freeskiing Grand Prix live stream, halfpipe, USSA NetworkSat. Jan. 12 4:00-5:00 p.m. – Visa U.S. Freeskiing Grand Prix, halfpipe, NBCSat. Jan. 12 1:00-2:00 p.m. – Visa U.S. Freeskiing Grand Prix, halfpipe, NBC Sports NetworkSat. Jan. 19 2:00-3:00 p.m. –Visa U.S. Freeskiing Grand Prix, slopestyle, NBC Sports Network
Get social with us on Twitter and Facebook


text:
Contemporary Works from Israel's Leading Arts Institute to Be Featured
The Maltz Museum of Jewish Heritage will introduce visitors to the beauty and diversity of contemporary works emerging from Israel with Israeli Arts and Culture, a season-long offering of programs and events (October 23 – January 13). The highlight is Bezalel on Tour, an exhibition that celebrates the 106th anniversary of Bezalel Academy of Arts and Design, Israel's oldest institute of higher education and a leading international academy of art, design and architecture. Programs at the Museum include live music, films, and an artist talk. Several other events will occur throughout Cleveland's Jewish and artistic communities.
Curated by the head of the Ceramics and Glass Design Department, Muli Ben Sasson, Bezalel on Tour includes the best of the contemporary works of Bezalel graduates from the last five years from all of Bezalel's Academic Departments: Fine Arts, Architecture, Photography, Ceramic and Glass Design, Industrial Design, Jewelry and Fashion, Visual Communication and Screen-Based Arts, as well as works from its graduate programs: Master of Design and Master in Fine Arts. The exhibition, which had stops in Baltimore and Chicago earlier this year, will travel throughout North America over the next year, including to the Corcoran Museum in Washington in the spring of 2013 followed by the Perry and Marty Granoff Center for the Creative Arts and Brown University/RISD Hillel in Providence, Rhode Island.
When Boris Schatz founded the Bezalel School of Arts and Crafts in 1906, it expressed an effort to carve out a distinctive style of Jewish art for a new nation to be built in the ancient Jewish homeland. More than 100 years later, Bezalel continues to deliver its message of contemporary Israeli art as innovative and groundbreaking, fueled by local materials and creating a powerful international presence. In recent years, the Academy has exhibited in Orangerie du Sénat, Luxembourg Gardens in Paris, Universität der Künste Berlin, Milan Design Week and Sotheby's in London, among other prestigious venues.
"We are so pleased to bring this exceptional retrospective showing an Israel on the cutting edge of contemporary art and culture to Northeast Ohio. It's an experience not to be missed." said Museum Executive Director Lynda A. Bender.
"We, at Bezalel, are excited to display a selection of some of our best graduate work in the past few years," said Bezalel President Professor Eva Illouz. "It is a real privilege to be able to work closely with the Maltz Museum of Jewish Heritage, and the local Cleveland community on this exhibition, and we hope that Bezalel on Tour will give visitors a sample of some of the fresh and daring contemporary art coming out of Israel today."
Programs at the Maltz Museum include:
Local component – student work from Cleveland Institute of Art (Oct 23 – Jan 13)
Film screening – A Century of Israeli Art, Parts I & II (Oct. 24/Nov. 7)
Artist talk – Reut Shahar, Israeli artist and Bezalel graduate (Nov. 1)
Community day – Israeli arts and culture-themed programs all afternoon (Nov. 11)
Film screening – Thou Shalt Not Dance (Nov. 28)
Live music – No Exit Music Ensemble (Dec. 12)
Sponsored by Cleveland Israel Arts Connection/Jewish Federation of Cleveland
Signature Sponsors: BNY Mellon Wealth Management and The John P. Murphy Foundation.
Benefactor Sponsor: David and Inez Myers Foundation, Cleveland, Ohio
Patron Sponsors: The Consulate General of Israel to the Mid-Atlantic Region, Joan Horvitz, Robert A. Immerman, Israel Bonds, and The Nathan and Fannye Shafran Foundation of the Jewish Federation of Cleveland
The Ohio Arts Council helped fund this program/organization with state tax dollars to encourage economic growth, educational excellence and cultural enrichment for all Ohioans.
Additional funding by Friends of Bezalel, Ministry of Foreign Affairs of the State of Israel, and The David Berg Foundation.


text:
tisement much?
TFA is nothing but name dropping and unsupportable claims.
So in 2001, C was a disaster, C++ was a disaster, Java was getting better,
.NET was getting even better.
Yeah. Right. Check your dates. If you were using
You can write secure code in almost any language. It is up to the skill of the coder. Look at the various *BSD's out there.
Yeah. Right. Check your dates. If you were using
I personally started programming
You can write secure code in almost any language.
Perhaps you want to believe that claim.
And yet, the ongoing real world persistence of privately reported array out-of-bounds errors [microsoft.com] in critical security-dependent code continues to show that apparently, even the best programmers objectively can't write secure code even if their professional reputations depended on it.
At least, they may be occasionally capable of writing secure code, but they're not capable of never writing any insecure code, or even testing for the existence of insecure code in the code they have released. Third parties have that priviledge. We don't know how many of the third parties who find these bugs are black hats, because we only hear from the white hats. But a 50/50 split between white and black security researchers seems like a good wild-ass guess. So figure one zero-day for every reported monthly security bug. Are you scared yet? You should be.
Is this ongoing security massacre the fault of the language programmers are using? Absolutely yes. The point of security is that 99% correct isn't good enough when that 1% of errors your toolchain didn't automatically detect can get your entire customer base simultaneously rooted. And array out-of-bounds errors have been a solved problem in some languages since 1970 [wikipedia.org].
In 2011, insisting on using a language, or any other tool, which doesn't solve a forty-one year old already solved problem is simply an error.
My only question is, why would you assume a 50/50 split for white hat vs. black hat. Certainly in the general population there are not 50/50 good vs. evil. If that was the case, people would be a whole lot worse off than they are now. I would say that a much larger percentage of hackers are white hat. That being said, even a small number of black hat hackers can do a serious amount of damage.
It's not 50% bad 50% the rest of the world. It's 50% black hat, 50% white hat. But there is still 99% of the population not in either categories.
Rose colored glasses much? The general population is 0.01% white hat and 99.99% black hat. The cool thing about humans...they use ingenious psychological tricks on themselves so that they can ignore reality and logic when it's needed. One of the places humans need to toss objectivity and logic is when evaluating Self, close family, and close friends. Once logic and objectivity are out of the picture it's perfectly possible to believe that you, your family, and your friends are all good people; it's those
And yet, the ongoing real world persistence of privately reported array out-of-bounds errors [microsoft.com] in critical security-dependent code continues to show that apparently, even the best programmers objectively can't write secure code even if their professional reputations depended on it.
If they persistently write such buggy code then I wouldn't consider them the "best" programmers. And that's not even consider that we're talking about Microsoft to begin with.
Let's ask a nobody, as compared to say a full fledged AV engineer who has been in the field since day 1....nothing like getting your information from the source....
oh wait, I get it now, this was just blatant publicity for this upcoming software security firm that needs to make a name for themselves....remind me next time I need to become someone, I should get someone to post on
Dont look for a sig, I aint got one...
Of course even if we RTFA , we would have to take their word that whatever is in it is 100% fact and truth...... ^_^
"AV engineer"?! You clearly have no idea what the article is talking about do you? Software security and end point security are barely distant cousins.
Multiple published books (useful ones) aren't credentials?
Anyway, an AV engineer wouldn't necessarily be the person to listen to about SDLC.
Yes he has many published books on the subject of code security and java security and the like. He has also been on the board of directors for IEEE.
He is a great guy.
Software Security
http://www.amazon.com/Software-Security-Building-Gary-McGraw/dp/0321356705/ref=sr_1_1?ie=UTF8&qid=1314456538&sr=8-1 [amazon.com]
Fits well, nice and snug.....can't really complain about not being published....or was that my initial post at all?
It's been so nice watching those weekly SANS vulnerability emails get shorter and shorter over the past decade.
Well, most of them are so short that they don't even bother to send them out.
I guess banner ads are not enough.
Claiming that C and C++ are disasters from the standpoint of security is like saying that the IP protocol is a disaster from the standpoint of reliable transmission of data streams, or that HTTP is a disaster from the standpoint of security. Arguably so, but only if you don't supplement them with any other layers or tools.
C and C++ ARE disasters. gets() and >> can NOT be used safely. Period. Tons of functions in the standard libraries have been rewritten with secure variants, to try to make it vaguely possible for developers to keep track of buffer lengths. Still, some APIs screw it up and it's nearly impossible for an intelligent human to get it right every time without static analysis tools to back him up.
HTTP is not a disaster but it clearly was not envisioned with security in mind. All attacker provided data is strings, input data comes from a variety of sources; there are way more HTTP verbs than strictly necessary. The authentication provided with the spec is "encrypted" with Base64. Actually, if this protocol were designed today to its original form, it would be laughed out of its security architecture review.
C and C++ ARE disasters. gets() and >> can NOT be used safely. Period. Tons of functions in the standard libraries have been rewritten with secure variants, to try to make it vaguely possible for developers to keep track of buffer lengths. Still, some APIs screw it up and it's nearly impossible for an intelligent human to get it right every time without static analysis tools to back him up.
So don't use gets() and >> as you said there are a number of alternatives. You can stuff up the API in any language if you aren't careful and everyone has access to static analysis tools. Yes the record is poor but there are no other alternatives to compare it against. Once you build the checking into the language no one will want to use the slower executables it produces.
Open and other BSDs prove you can make a reasonably secure OS in C. People relying on C/C++ to be intrinsically secure is the disaster.
"Once you build the checking into the language no one will want to use the slower executables it produces."
Except they do. Languages such as Ada, and really any language that allows compilers to understand what is happening in the code, can optimise out many of the bounds checking. The cost of bounds checking isn't as great as you may think it is, and if it eliminates -all- buffer overflows wouldn't you choose it?
Except they do. Languages such as Ada, and really any language that allows compilers to understand what is happening in the code, can optimise out many of the bounds checking.
Excuse my ignorance but where are these benchmarks. All the ones I see have Ada as marginally slower (but i guess not statistically significantly) and everything else not even close. Coding in C you can manually put the bounds checking back in at your digression and if the coder does not know where its needed then the program can hardly be trusted to be secure.
http://shootout.alioth.debian.org/u64/benchmark.php?test=all&lang=gnat&lang2=gcc [debian.org]
If you want to quote me a better/more relevant benchmark feel
Hmm....I'm aware of the problems of gets(), but haven't heard of possible issues with >> before. Can you give an example or link to an article that explains the issues, so I know what patterns to avoid in the future?
Hmm, this operator is super difficult to Google for, that's for sure. The >> operator is unsafe to use when reading into a character buffer because it does not perform bounds checking on the size of its input. An attacker can easily send arbitrarily-sized input to the >> operator and overflow the destination buffer.
Yeah, if anyone knows a way I can search the Google index for sequences like ">>" please let me know!
I know I have seen this topic treated in books, but cannot find anything. I did find the following two links, however:
http://stackoverflow.com/questions/2711780/question-about-char-input [stackoverflow.com]
http://www.physicsforums.com/archive/index.php/t-8093.html [physicsforums.com]
Um, OK, that would cause a problem, but why on earth would you read into a character buffer? You're using C++. Why not read into a std::string?
Yes, you have to read into character buffers in C, because that's all you have. Character buffers, or arrays, are just as insecure in C++ as in C. Which is why you shouldn't use them. Use vectors, lists, or - for characters, strings. C++ has safe abstractions. Use them FFS!
The vast majority of commentors I've seen on both
Yes, we realize that you are an amazing h4X0r capable of creating code devoid of buffer overflows, race-conditions, (all sorts of) injection attacks, etc. Perhaps you've forgotten there is a spectrum of programmers and like it or not, you are probably an AVERAGE coder. (They don't call it average because everyone thinks they a
Solution: don't let "average coders" write software. If standards were that low in medicine, people would drop dead right and left thanks to "average doctors" not being able to tell flu from the hole in the ground. Fortunately, "average doctors" like those are simply not allowed to practice, and only competent ones are actually treat sick people.
Software development has exactly the same problem -- decades ago all software had lax requirements, so programmers with abilities of an average shaman from a primit
There is exactly one possible situation where security is a non-issue: When the person who wrote the code is also the one running the code with no other code running on the hardware used. In other words, the only application I could now think of anymore is some kind of IC firmware with no connection to any kind of network or other form of communication.
As soon as code has to interact either with unknown other programs or unknown users, or worse, other, possibly unknown machines, security becomes a topic. I
the disasters of beginning of this century include XML. In everything. "Agile" development. IE6 and ActiveX controls. IBM Lotus Notes. "Visual" programming, especially mixed with UML and RUP. Passing parameters from URLs directly to database layers as input without sanitation. Not checking data structure boundaries and sizes. Using root for everything, this one is especially nice when combined with a password, that is used for everything in a corporation. Especially when password is some variation of "adminpass1". Buying more and more BEA/Oracle licenses to set up more and more nodes where the real speed problem could be solved with very little code on a single machine, but obviously that's not sexy and doesn't buy perks. Having no testing cycles, never having enough testing, doing irrelevant testing (this even includes automated testing, which can be huge, but still irrelevant).
Producing huge meaningless documents that end up copied in email to everybody, but eventually don't get read by anybody who they should address, having template "Architecture", where past documents are copied, whatever names are replaced, no thought is given to the project and all the details are left over to the team for the time of implementation. This, especially when combined with time lines that give 80% time to meetings/architecture, 12% time to all of the development combined and then whatever remains is running around like chickens with heads cut off, from users to testers to admins, trying to get any of it working.
All of the above and more, much more are disasters.
But the real disaster here is that pathetic article that this story refers to.
"Having no testing cycles, never having enough testing, doing irrelevant testing"
Not properly testing is the worst flaw. We barely test if a package works, as designed, and under the planned circumstances. Testing for security just does not happen.
The cost of testing properly is likely no where near as large as the potential loss. The compromise against great and secure code in exchange for profit is made. There is no business sense in making the existing code faster or more efficient either, as the leased hardware will be swapped out for faster stuff in the next couple of years.
I keep watch on "security" threads like this one, hoping to find sanity in at least one answer prior to mine.... and keep getting disappointed.
You're all wrong, so far.
Why? It's simple, it's not an application programming issue, it's an Operating System design issue.
The default permit environment present in everything except IBM's VM is the root cause of 99% of our problems.
Instead of giving each PROCESS a list of resources and permissions, Linux, OS-X, Windows, and pretty much everything else, does it at the USER level. (Yes, I know about app-armor, but that's a special case)
This means that all of the defenses are pointed in the wrong direction. (Imagine building a fort with 10 foot thick perimeter wall as its sole defense in the age of paratroopers and helicopters to get an idea of the scale of the problem).
It doesn't matter how careful or professionally trained the application programmers are, nor how safe the programming language used to write the application is, when the OS isn't even designed to limit what they can do. All programs have bugs, you shouldn't have to trust them not to have them.
Now, those skills and language enhancements are useful for building the operating system, especially when constructing the micro-kernel to run everything, so it's not wasted effort.
I predict we'll see stories like this for at least 10 more years, regardless of the effort or money put in, because we haven't changed our approach yet. It's going to take a few more years until the cognitive dissonance gets loud enough in peoples heads to prompt them to find a better OS, and a few more years to actually have something reasonably solid available. Until then, buckle up... it's going to be a VERY bumpy ride.
SELinux addresses that. I like the idea of capabilities-based OSes, but worry that there may be a reason that projects like CapROS haven't caught on in the market.
The reason things like CapROS haven't caught on is inertia... it's a huge pain in the ass to move things to a different desktop, let alone a completely different operating system, where you have to rewrite things, and adjust to a whole new set of annoyances.
The IBM VM model of things is a pure capability model, you give RAM, DISK, and I/O to a virtual machine, and it can't exceed it's authority. Of course the granularity is a bit rough when you have to do it in terms of disk systems instead of specific files, folders, etc. The need to have a system admin set things up, which isn't very user friendly either, so it's clearly not the exact way things will end up when capabilities go mainstream.
I see the easiest way as looking just like Windows, Linux, etc... except the shortcut to an application also includes a list of files, resources, quotas, etc... this would allow things like Accounting Applications which can't access the internet (unless you change their settings), etc.
Eventually, people will figure it out, but it's going to be a LONG wait. In the meanwhile, the insecurity of everything will get used to sell a lot of software, firewalls, etc... and the worst part is it offers the perfect excuse for filtering and censoring the internet.
I'm glad to see you here... now there are at least 2 of us.
SELinux doesn't address the problem. I agree with grandparent, although I think the focus should be more about on the UI side. The really low level implementation could perhaps be addressed with SELinux, but it's not a practical solution for any GUI app currently. For example how would you prevent Open Office from deleting everything in your home dir with SELinux, while still allowing it to read and write arbitrary documents? Yeah, you can't unless you manually go changing the labels every time you want to
I read (part of) your paper. This seems overly naive to me. If a program is hidden from the taskbar, it is effectively running in the background and can do any kind of access. If this program has a security flaw, it is a gateway to malware just as much as current operating systems are. Granted, the malware will run in userspace. But if your program is an FTP server (for example) it will have RW access to all your drives. Hence, the malware will feel right at home.
Now, what you propose is likely to reduce ma
I wasn't planning on fixing all of security problems, but the typical case of clicking open random email attachments or running random programs from internet should and could be made safe, while still keeping the user interface user friendly. Those are the reasons for most of today's security problems.
Thanks for giving me a different viewpoint to consider... you've covered a lot of ground in that write-up.
I like the idea of giving access to write to an email address as a privilege supplied to a program, instead of letting it just spam the world.
I'd to the same thing when it came to reading from a website, perhaps filtering to the domain *.slashdot.org, for example. If the user wanted to follow a link outside the domain, they would have to drag/drop the link into something outside the browser's contro
Very interesting point. But a bit of a one trick pony.
You really don't think cross site scripting or sql injection are a big deal?
Cross-site data leakage IS a problem, of course...
One of the good design ideas that comes up when describing or building capability based security is the idea of moving file dialogs OUTSIDE of the control of the application. If done properly, the user might not even notice the difference, which is a very good thing.
If we move the selection of web sites outside the control of the browser in the same fashion, you could then add facilities to filter, log, proxy, etc... without the need to do anything differen
I completely agree that, as far as operating system security goes, you are spot on.
It's helpful for people to realise that this isn't because OS designers of the past were stupid; they were just building protection for a completely different environment and threat model.
A world where many users shared one computer, had almost no network connectivity, and only the Sys admin ever installed software. Things are different now...
Probably the best book on security for builders to read is "Security Engineering" by Ross Anderson,
I happen to think that "Software Security" is good too. Then again, I wrote it.
http://www.amazon.com/Software-Security-Building-Gary-McGraw/dp/0321356705/ref=sr_1_1?ie=UTF8&qid=1314456538&sr=8-1 [amazon.com]
Buffer overflows, formal techniques, specialist languages were all created decades ago, Bill gates wrote the trustworthy computing memo because of the bad press that MS was getting, it was pure marketing. Systems from other vendors have evolved to provide smaller attack targets upon install that they did a decade ago. This is system design not software techniques.
This guy is a knob blowing his own trumpet.
The author clearly does not understand programming languages if he says that, or else he's one of those kinds of programmers that just needs to stay away from languages that let you do whatever you want.
C and its somewhat object oriented cousin C++ are just tools to let programmers do whatever it is they want to do. If you know the languages and how they work, you can make whatever you like. You can make insecure programs. Or you can make secure programs. Your choice. What C and C++ suffer from is the stain of blood splatters from programmers that simply do not know what they are doing. Too many programs were written insecurely, not because the language forced them to, but because these programmers didn't know how to write different code into the programs that would make them secure.
I do admit that C has a few flaws, like certain functions that fail to properly test for string overflow conditions. One example is sprintf. Use snprintf in its place so the size of the target is known and checked in the function's own logic. But these are things good C programmers already know about.
I have my doubts about any other language. If a language is flexible enough to develop a major application with, then that language is also flexible enough to let an idiot write an insecure program. However, other programming languages might be useful to C and C++ to draw away the bad programmers. Let those other languages suffer from them for a while. Java certainly has in more recent years.
You may snicker, but I am a scheme programmer at heart.
"I shall expect a chemical cure for psychopathic behavior by 10 A.M. tomorrow, or I'll have your guts for spaghetti." -- a comic panel by Cotham


text:
Woman, 20, Killed in Northeast South Dakota Crash
A woman from Florence, SD died Monday morning in a two-vehicle crash in Codington County.
The Highway Patrol says Ashley Leeonna Lane, 20, was westbound on State Highway 20, three miles west of Watertown around 10:45am, when her SUV crossed the center line and collided with an eastbound semi-tractor driven by 20-year-old Bradley Scott Marbarger of Pocahontas, Arkansas.
Lane died at the scene, while Marbarger was not injured.
Troopers say both were wearing seat belts and the crash is still under investigation.


text:
There is no question this is about as big a game as you can have for just game three of the season. Toronto stops home for the second half of a back to back tonight at the ACC. When you consider what lies ahead with another back to back in Oklahoma City on U.S Election Night and Wednesday in Dallas it makes today's result all the more vital.
Luckily the Raptors have a great history against Minnesota in which they have dominated them for the better part of a decade. Also add in the fact they will not have to deal with Kevin Love or Ricky Rubio and this becomes an almost must win situation.
Minnesota played their only game of the NBA Season thus far defeating the Kings at home 92-80. This game featured the return to the NBA of two former stars. Andre Kirilenko who spent last season in Europe and Brandon Roy who was amnestied from Portland and many thought his career was over with his knee troubles that have plagued him. Kirilenko had 10 points and Roy 9 in the win. It was the former Maverick J.J Barea that did most of damage off the bench. He scored 21 points and had 5 assists to lead the charge.
Minnesota shot just 36.8% in the win but was able to get 17 offensive rebounds to compensate for that.
The Raptors meantime came out like a house on fire in Brooklyn but looked lethargic in the second and despite a better second half performance in end could not find a way to beat the Nets. Despite Kyle Lowry personally trying to will them to do so. DeRozan also had a bounce back game with 25 points. Landry Fields still is missing in action with just 2 points and Jonas after a double-double debut only had 2 points as well with 3 rebounds and 2 blocks.
Game time is 6pm at the ACC. If you forgot to set your clocks back it will be a 7pm. Should be a good one and I will be down their covering it live. Just a note with the Sunday game TWIR on Monday will be up later in the day as both Josh and I will be covering the game and not be able to pre-record the shows on Sunday night as per-usual. Look for it later in the day tomorrow.
Raptors Need A Win Over the T-Wolves
Posted by James Borbath at 11:59 AM
Subscribe to: Post Comments (Atom)