text:
Designing Strategies for Security Management
- Designing Security for Network Management
- Designing a Security Update Infrastructure
- Exam Prep Questions
Terms you'll need to understand:
- Remote desktop administration
- Telnet
- Emergency Management Services
- Software Update Services (SUS)
- Systems Management Server (SMS)
- Disaster recovery plan (DRP)
Techniques you'll need to master:
- Designing security for network management
- Designing a security update infrastructure
Your network has enough enemies, including viruses, well-intentioned users, and not so well-intentioned attackers. You must ensure that you don't become your own worst enemy! You need to understand the risks associated with managing your network and mitigate those risks with whatever tools you have available. In addition, you need to keep your network up to date with the latest security patches. This process needs to be as automatic as possible in your situation.
In this chapter, we discuss the tools that you can use to manage the risk of managing the network. These include simple tools such as the Run as command as well as more complex tools used to monitor and manage servers and services. We also discuss the new tools in Windows Server 2003 that aid you in assessing the current patch level of computers in your network and in keeping computers up to date with security patches from the Microsoft Web site.
Designing Security for Network Management
You need to understand the power of the Administrator account as well as other accounts that provide rights on the network. In the right hands, these are tools you use to manage a network. In the wrong hands, they are weapons that attackers can use against you. As you manage your network, take care that these accounts do not fall into the wrong hands. In addition, you need to understand the tools and services available to enhance and monitor the security of your network. Designing security for network management includes the following components:
- Managing the risk of managing networks
- Designing the administration of servers
- Designing security for Emergency Management Services
Managing the Risk of Managing Networks
Windows Server 2003 controls access to Active Directory and the ability to manage it using security groups. Some groups are designed to give a person rights to manage an aspect of the network, solely because they are associated with that group. These groups include Administrators, Server Operators, Account Operators, Backup Operators, and many others. Administrators who are members of these groups must understand the power that the group membership gives them and use it wisely.
We now discuss the tools that Windows Server 2003 provides to assist an administrator in the safe management of the network. These tools include the following:
- The Run as command
- Restricted groups
- Security auditing
The Run as Command
Even if you are an administrator, you need to log on every morning with the same type of user account that everyone else uses. You don't need an administrative account to check your email and browse the Web. You should only use an administrative account if you are doing something on the network that requires the use of an administrative account. This practice protects the network because the less you use an administrative logon, the less chance there is for a Trojan horse virus or some type of worm to pick it up and send it to an attacker. Also, if you walk away from a computer that you are logged on to with an administrative account, another person could use the computer and "play Administrator" for a while!
Although your users should only have one account, you and your other administrators need to have at least two accounts. You should use a normal user account until it is necessary to use the administrative account and, at that time, you can use the Run as command to perform a secondary logon.
You can use the Run as command either through the GUI or at the command line. To use the Run as command with a GUI tool, simply right-click the tool, click Run as, and then log on with the account that you want to use to run that tool. You might need to hold down the Shift key while you right-click, depending on the tool that you choose. Figure 3.1 shows the Run as command on the Start menu. Figure 3.2 shows the secondary logon screen for the Run as command. When the tool is closed, the system reverts back to the primary logon account.
Figure 3.1 You can right-click the tool to use the Run as command.
Figure 3.2 The Run as command provides a secondary logon for that tool only.
To use the Run as command from a command prompt, type the following syntax:
Runas /user:domain\account name mmc %windir%\system32\tool.msc
where domain is the name of your domain, account name is the name of the account with which you want to run the tool, and tool is the name of the tool that you want to run.
For example, Runas /user:bfe.vtc.com\administrator "mmc%windir%\system32\dsa.msc" will run Active Directory Users and Computers in the bfe.com domain by the account name of Administrator.
After you enter this syntax correctly, you are then asked the password of the account with which you want to run the program. Figure 3.3 shows the command line with the entered command and the system's response. After you enter the correct password, the system opens the tool. When the tool is closed, the system reverts back to your primary logon account.
Figure 3.3 You can use the Run as command from a command-line interface.TIP
You can check the %windir%\system32 folder on your servers for files with .msc extensions. All files with .msc extensions can be used with the Run as menu option. You can even create shortcuts on the desktop or in your administrative tools using the same command.
We are only using the default name "Administrator" for the administrative account for this training example. You should always change the default names of administrative accounts.
Restricted Groups
Membership in a security group can give someone permissions and rights that she would not have if she was not in that security group, especially if that group is a member of another group that has more rights. This is the way the system is supposed to work. But, what if someone is a member of a group that gives her administrative access and you are not aware that she is a member? In this case, your own system is working against you.
You might be thinking, "But I can just check all of the groups and make certain that I know who the members are." Well, that's true, but there might be more groups to keep track of than you think. You have to consider that every workstation and member server has its own local groups as well! Wouldn't it be nice to just lock those groups down with some type of template? Well, now you can!
Restricted Groups is a computer security policy that should be used primarily with workstations and member servers. In other words, it is rarely used on domain controllers. It allows you to define who can be a member in a particular security group on a computer and what other groups that group can be a member of as well. After you define who can be a member of that group, anybody else who currently is a member is removed from membership as soon as the security policy is refreshed. This way, it's impossible for you to miss anybody. You can also copy the template that you create and use it on subsequent workstations and member servers.
You can create the template and apply the settings for Restricted Groups on a member server running Windows 2000 Server or Windows Server 2003 in two ways. You can either create the template in the local security settings for each of the computers that you choose or you can create a Group Policy and roll it out to all of the computers in an organizational unit (OU) or hierarchy of OUs. For Windows 2000 Professional and Windows XP Professional clients, you can use Group Policy to enforce Restricted Groups.
As we mentioned previously, you should refrain from using Restricted Groups at the domain level; however, it is possible to use this tool to provide a "reality check" if you suspect that someone has obtained fraudulent access to administrative rights through membership in a security group.
To configure Restricted Groups on one member server, perform the following steps:
- Open the Local Security Policy through Administrative Tools.
- Expand the Security Settings option.
- Right-click Restricted Groups.
- Click Add Group.
- Type the name of the group that you need to manage.
- Add the members that you want to be in the group and the groups of which that group can be a member.
- Click OK or Apply.
When you click OK or Apply, only the members that you have designated are still members of the groups for which you have set Restricted Groups. Any other members are removed from group membership. This takes effect the next time they log on to the server locally.
To configure Restricted Groups with Group Policy, perform the following steps:
- Open the Group Policy Management Console and Group Policy Object Editor tools to create and configure a new Group Policy or edit an existing one.
- Expand Computer Configuration.
- Right-click Restricted Groups.
- Click Add Group.
- Type the name of the group that you need to manage.
- Add the members that you want to be in the group and the groups of which that group can be a member.
- Click OK or Apply.
When the Group Policy is linked to a container, the Restricted Groups settings become effective for all computers in that container. You can force the policy to apply as soon as you link it, using the gpupdate command, or you can simply wait until the policy is refreshed automatically by the system.
When a Group Policy is linked to a container, you must ensure that no other policies that could change the results of the Group Policy are linked to the same container. Remember, the last one to "flip those switches" wins!
Security Auditing
A wise person once said "You don't get what you expect, you get what you inspect." You need to have a system in place that aids you in monitoring the security of your network. This includes an audit policy that determines what is to be audited and a person or persons responsible for regularly checking the security log to look for anything that doesn't seem to fit.
Windows Server 2003 provides the tools for auditing logons, resource access, account management, and more. Your audit policy determines what is written to the security log. The security log can then be read, archived, and printed with Event Viewer. Figure 3.4 shows the settings for Audit Policy in the Microsoft Management Console (MMC) named Default Domain Security Settings. Table 3.1 defines each of the settings that you could use in your audit policy. You can audit each of these settings for success, failure, or success and failure. Figure 3.5 shows an example of a security log in Event Viewer.
Figure 3.4 The settings in your audit policy determine what is written to the security log.Table 3.1 Audit Policy Settings
Policy |
Definition |
Audit Account Logon Events |
Is set on a domain controller. Audits domain controller's authentication of a logon from another computer. |
Audit Account Management |
Audits activity that is generally associated with administrators, such as creating or renaming users or groups, or changing passwords. |
Audit Directory Service Access |
Audits objects in Active Directory that have their system access control list (SACL) set for auditing. |
Audit Logon Events |
Audits the local logon to a computer regardless of the role of the computer. |
Audit Object Access |
Audits the access of resource objects, such as a file, folder, printer, Registry key, and so on that have the system access control list (SACL) set for auditing. |
Audit Policy Change |
Audits changes to user rights assignment policies, audit policies, or trust policies. |
Audit Privilege Use |
Audits each instance of a user exercising a user right. |
Audit Process Tracking |
Audits events usually associated with applications, rather than users, such as program activation and handle duplication. |
Audit System Events |
Audits a user's restarting or shutting down of the system or any event that affects system security or the security log. |
Figure 3.5 You can view the results of a security audit in Event Viewer.
Designing the Administration of Servers
Managing an enterprise can be a cumbersome task, but Windows Server 2003 provides many tools to assist you in the efficient and safe management of your network, no matter how large it is. The tools with which you need to be familiar are as follows:
- Microsoft Management Consoles (MMCs)
- Remote Desktop Administration
- Telnet
- Remote Assistance
Microsoft Management Consoles
Using Microsoft Management Consoles (MMCs), you can create your own custom "toolboxes" that keep the tools you use most frequently all in one place. You can then share these toolboxes with other administrators whom you trust, or you can create another toolbox that has only the tools that they need. You can simply share the completed MMC in a folder to which the other administrator has access, and he can then use the MMC as well. Share it with Read permission so that the administrator who receives the MMC cannot change the file without also changing the name and the ownership of the file. To use the MMC tools, you must register the proper dynamic link libraries (DLLs). You can easily register most DLLs by entering adminpak.msi at a command prompt and following the Windows Server 2003 Administrative Tools Installation Wizard.
An MMC itself has no administration capability; it's only a toolbox that contains the real tools called snap-ins. These snap-ins are produced by Microsoft and many other vendors. They include most of the tools that you need to configure, manage, and monitor your network. Many of these tools can be used on the local computer or on a remote computer connected to the management console. Figure 3.6 shows an MMC that has been customized to hold tools for two different computers.
Figure 3.6 You can build MMCs that hold tools for multiple computers.Remote Desktop Administration
Remote Desktop Connection replaces the Remote Administration Mode for Terminal Services used in Windows 2000 Server. It provides a new interface that allows you to safely manage any computer that is configured to allow users to connect remotely. You can access Remote Desktop Connection by clicking Start, All Programs, Accessories, Communications, Remote Desktop Connection. You can then connect to the computer by entering the computer name and the password for that computer.
You must also be a member of the Remote Desktop Users security group to use Remote Desktop Connection. The administrator is a member of this group by default and can add other members.
You can control the resolution and other aspects of the "user experience" on the Remote Desktop Connection settings. Figure 3.7 shows the Remote Desktop Connection dialog box. These options allow you to configure your remote session based on the allowed bandwidth and other restrictions. Figure 3.8 shows the custom settings that you can configure on the Experience tab. You should use Remote Desktop Connection when you are making a connection to only one other computer or server.
Figure 3.7 You can configure options for Remote Desktop Connection.
To make multiple simultaneous connections, use the Remote Desktops snap-in. This tool enables you to manage many servers as if you were sitting in front of each one of them. You can control each of the connections and encrypt the connection over the Remote Desktop Protocol (RDP). You can quickly switch between several remote desktops. Figure 3.9 shows an MMC with the Remote Desktops snap-in installed.
Figure 3.8 You can configure custom settings on the Experience tab.
Figure 3.9 You can control multiple remote connections from one interface with the Remote Desktops snap-in.
In general, you use Remote Desktop Connection or the Remote Desktops snap-in to connect with any computers that are running Microsoft operating systems. This provides the most secure method of remote administration.
For other servers and network devices on your network, you can use Telnet. The Telnet application is part of the TCP/IP suite, and any network that is using TCP/IP can use it. The Telnet client is built in to Windows Server 2003 and provides a command-line interface to another server and limited functionality to configure the server (see Figure 3.10). Telnet does not provide securityall passwords and data are transmitted in clear text. If you use Telnet, you need to ensure that no sensitive information is being transmitted.
Figure 3.10 You can configure servers and network devices on a command-line interface with Telnet.
Telnet is not recommended for remote administration of Microsoft computers because all data and commands are transmitted in clear text.
To access a computer or network device with Telnet, perform the following steps:
- Click Start.
- Click Run.
- Type telnet.
- Type open.
- Type the name of the host with which you want a connection.
- Type ? for help with further commands.
The list of commands that are available are based on the type of host to which you have connected. All commands are alphanumeric. In other words, you can't use your mouse or any type of GUI with Telnet. Table 3.2 lists some Telnet commands and the actions that they perform.
Table 3.2 Telnet Commands
Telnet Command |
Action Performed |
Open hostname |
Establishes session with host |
Close |
Closes connection |
Display |
Shows current settings for client |
Send |
Gives additional commands as defined by the type of host |
Set |
Allows you to configure options when used with additional arguments, depending on the client |
Unset |
Turns off options that were previously set |
Status |
Determines connection status |
? |
Shows Help menu based on host |
Quit |
Closes Telnet client |
Remote Assistance
Clients can request your assistance using the Remote Assistance tools, provided by Windows XP Professional, and you can respond to their requests and assist them through your Window Server 2003 network. After you are connected, you can view the client's computer and chat online. You can even take control of their mouse and keyboard with their permission. You can also upload files to them or download their files to your computer or central server. Remote Assistance communication can be based on Windows Messenger or Microsoft Outlook. Figure 3.11 shows the Remote Assistance console on a Windows XP Professional client.
Figure 3.11 Clients can request your assistance using the Remote Assistance console.
Designing Security for Emergency Management Services
At this level, it almost goes without saying that you need to maintain redundant drives, power supplies, and server components. You also need to create backups of all data and configurations and keep copies offsite. This type of management activity is the day-to-day operations that help to keep the network operating smoothly, but what if something goes wrong?
Unfortunately, disasters, such as fires, floods, hurricanes, tornados, and earthquakes, do happen from time to time. Your Emergency Management Services design needs to include a disaster recovery plan (DRP) that takes these into account. Your DRP should focus on the disasters that are most common for your area. For example, you probably won't be concerned about earthquakes if you are located in Florida, and you wouldn't worry much about hurricanes in South Dakota.
In the event of a disaster of this magnitude, the main goal is to get the computers back up to the point that your company can do business before you go out of business permanently! Your DRP should address a plan to rebuild the network to a functioning state as quickly as possible, even if your whole building is destroyed. The details of this plan will, of course, vary, depending on the size and complexity of the company, but the main thing you need is a place to work. The types of alternative sites that you should consider in your DRP are as follows:
- Hot site
- Warm site
- Cold site
Hot Sites
A hot site is a location that is up and running 24/7 with everything that you need to function. Its main advantage is that, in the event of a disaster, you can move into the hot site and resume normal business operations in a matter of hours. Another advantage is that it is possible to do a "dry run" and test the hot site.
The hot site should be close enough to be practical for employees, yet far enough away so as not to be taken down by the same disaster that took down your main site. You can maintain the hot site, or you can pay another company to provide the service. The main disadvantage of a hot site is the large cost associated with it. Typically, the potential loss of money is not enough to justify the cost of a hot site, so they are only used in organizations in which people's lives are at stake, such as highly sensitive governmental institutions or hospital networks.
Warm Sites
A warm site is a location that provides the space, electrical outlets, and communications lines that will be needed in the event of a disaster. It is not customized for one organization and might be used by many organizations in the event of a natural disaster. Typically, no computers are in place because it is assumed that the company will provide the computers when, and if, the time comes to use the site. The main advantage of this type of site is that it costs considerably less to maintain than a hot site. The main disadvantage of this type of site is that it is much more difficult to test your DRP from time to time.
Cold Sites
A cold site is a location that basically has four walls, a ceiling, and a bathroom! Typically, it's a prearranged agreement with another party to use their space if a disaster happens. There is very little planning involved in a cold site. The main advantage is that it costs very little. Two parties in different areas might even agree to let each other use a part of their building in the event of a disaster, so there is no cost to either party. The main disadvantage of a cold site is that it does not fully provide a quick transition back to normal business operations.

subset: commoncrawl


text:
Create Digital Music on "Max for Live Gems"
As Create Digital Music blogger Peter Kirn notes, Max for Live "has played host to a growing wave of brilliant custom tools – enough so that it can be hard to keep track." In a new post, Peter singles out three particular devices - Clip Automation, Mapulator, and The Protoclidean - and takes a closer look.
Read the full post at CDM. And check out a promo video for The Protoclidean, a new sequencer from Ableton Certified Trainer Julien Bayle:


text:
The page you are looking for cannot be found.
The link you clicked, or the URL you typed into your browser, did not work for some reason.
Here are some possible reasons why:
- We have a "bad" link that has been moved or removed.
- You may have typed the address incorrectly.
Here is what you can try:
- Return to the home page.
- Contact our support team on publication.email.address


text:
Fender Hot Rod Deluxe 3 Guitar Amplifier
Fender Hot Rod Deluxe III Guitar Amplifier
The world's most popular tube amps just got better! Fender Hot Rod series amplifiers are found on every stage in the world, large and small, and are used by guitarists from all walks of life. Hot Rod amps deliver unmistakable Fender tone and are the perfect platform for musicians to craft their own signature sound. These no-frills amps are affordable, reliable and loud, and they pair extremely well with stomp boxes. The Hot Rod Deluxe III is a 40-watt single 12" combo – the standard for gigging guitarists worldwide. Famous for the low-end headroom characteristic of 6L6 tubes and a versatile all-12AX7 tube preamp, it also boasts luscious Fender spring reverb, an effects loop and more. Players wanting to add a little more output, fullness and stage coverage can even add a matching 112 extension enclosure (P/N 223-1010-000). Additional Hot Rod Deluxe III upgrades include an easier-to-read black control panel with front-reading text, new badge, streamlined footswitch, graduated volume and treble pot tapers, "tighter" overdrive and a Celestion G12P-80 speaker.


text:
gotgenes said...
Very cool. So does this mean there's now a separation of a user's password from the user's decryption password? This was an issue brought up in your previous post--oftentimes we want our encrypted data passphrase to be significantly longer than our user passphrase.
Yes. And we provided that same separation in Intrepid as well. Let me explain in better detail how this feature works...
When you login, the pam_ecryptfs module takes your login passphrase (which is usually pretty short, and easy to remember), and symmetrically decrypts the file ~/.ecryptfs/wrapped-passphrase, which will yield your mount passphrase.Your mount passphrase is a randomly generated 128-bit key. This is very hard to remember, and rather hard to guess. 2^128 is a big number!
unique passphrases
This mount passphrase is salted, hashed 65536 times using sha512 (i.e. key strengthened), and loaded into your kernel keyring. In eCryptfs terms, the salted, hashed passphrase is your "file encryption key, encryption key", or fekek.
New for Jaunty (and the upstream 2.6.29 kernel), we have encrypted filenames too. In this case, the mount passphrase is salted with a different value, hashed 65536 times using sha512, and also loaded into your kernel keyring. This second key is your "filename encryption key", or fnek.
Now, every time the kernel encounters an encrypted filename in your encrypted home directory, it is decrypted using your fnek and presented to you in plaintext.
To read/write encrypted data from/to a file, your fekek is used to decrypt the "file encryption key", or fek, which is embedded in the header of the file. This embedded fek is unique per file! This means that two files, with the exact same contents, will produce two completely different encrypted files, which helps thwart known-plaintext attacks.
Does that explanation help?


text:
Updated October 11, 2022 at 6:17 PM ET
NASA says its mission to knock an asteroid off course — a test of planetary defense — succeeded beyond its expectations.
The Double Asteroid Redirection Test (DART) slammed a spacecraft into one asteroid to see if it could change its orbit around another asteroid.
It did.
About 7 million miles away from Earth, the asteroid Dimorphos is in orbit around a larger asteroid called Didymos. It usually takes 11 hours 55 minutes for Dimorphos to make a complete orbit.
After the DART spacecraft made impact two weeks ago, that orbit has shortened to 11 hours, 23 minutes: a 32-minute change.
"This is a watershed moment for defense," NASA Administrator Bill Nelson said on Tuesday. "This mission shows that NASA is trying to be ready for whatever the universe throws at us."
The two asteroids pose no threat to Earth, but the test is proof of concept that if another asteroid does appear headed in Earth's direction, scientists have a way of pushing it off course.
A push for planetary defense
"For the first time ever, humanity has changed the orbit of a planetary body," said Lori Glaze, director of the Planetary Science Division at NASA.
The time was shortened by pushing Dimorphos, which has a diameter of about 525 feet, into a slightly closer orbit around Didymos. What pushed it closer was a combination of the kinetic force of the impact as well as the ejecta — dust and rock — that was blown off the asteroid's surface when the spacecraft hit.
Observers measured the time of the orbit by looking through telescopes in Chile and South Africa at the timing of when one asteroid eclipsed the other.
Visibility from Earth isn't great, so they were essentially looking at how often they saw "dips in brightness" from the area, according to Nancy Chabot, the DART coordination lead at the Johns Hopkins Applied Physics Laboratory.
Planetary radar facilities in California and West Virginia were also used to measure orbit times.
NASA initially predicted the orbit would be shortened by somewhere around 10 minutes, but estimates ranged from only a few minutes to "several tens of minutes," Glaze said, putting the 32-minute change in the upper range. The orbit time is accurate to within plus or minus two minutes, she said.
Now that the test has proved successful, if an asteroid one day threatens Earth, scientists should get to work years ahead of time, according to Glaze.
"We are capable of deflecting an asteroid," she said.
But the mission only caused a 4% change in orbit time, so "the more time we have for that little nudge ... the better off we are," Glaze added.
NASA expects to continue monitoring the asteroids through early next year. A European spacecraft is scheduled to arrive at the Didymos system in 2027 to investigate the asteroids in more detail.
Copyright 2022 NPR. To see more, visit https://www.npr.org.


text:
Open ports act as security wormholes into mobile devices
Researchers have for the first time characterized a widespread vulnerability in the software that runs on mobile devices.
Computer science and engineering researchers at the University of Michigan have for the first time characterized a widespread vulnerability in the software that runs on mobile devices which could allow attackers to steal contact information, security credentials, photos, and other sensitive data, and also to install malware and to perform malicious code execution which could be used in large-scale attacks. The researchers' findings will be presented at the 2nd IEEE European Symposium on Security and Privacy, which takes place from April 26-28, 2017 in Paris, France.
According to the research team of Yunhan Jack Jia, Qi Alfred Chen, Yikai Lin, Chao Kong, and Prof. Z. Morley Mao, the unguarded use of open Internet ports in application software, which are intended to provide the functionality for computer programs to accept packets from the Internet, can be exploited to create security "wormholes" in mobile devices. Although open ports are routinely used and secured for communications purposes in traditional computing systems, the unique network architecture and usage of mobile systems has led to these vulnerabilities.
The first instance of this type of vulnerability was discovered in November 2015 and was caused by the vulnerable Baidu SDK (software development kit). At least 100 million Android devices were affected.
The researchers' paper, "Open Doors for Bob and Mallory: Open Port Usage in Android Apps and Security Implications," describes their work in performing the first systematic study of open port usage, points to the scale of the vulnerability, and itemizes resultant security implications.
To perform their analysis, the researchers first designed and implemented a tool called OPAnalyzer, which can effectively identify and characterize vulnerable open port usage in Android apps.
Using OPAnalyzer, they performed extensive usage and vulnerability analyses on a dataset with over 100,000 Android applications. OPAnalyzer successfully classified 99% of the mobile usage of open ports into five distinct families, and from the output, the researchers were able to identify several mobile-specific usage scenarios, such as data sharing in physical proximity.
In their subsequent vulnerability analysis, the researchers found that the vulnerable Baidu SDK was only the tip of the iceberg. Nearly half of the usage in the apps studied is unprotected and can be directly exploited remotely. From the identified vulnerable usage, they identified 410 vulnerable applications with 956 potential exploits in total. They manually confirmed the vulnerabilities for 57 applications, including popular mobile apps with 10 to 50 million downloads from official app marketplaces, and also an app that is pre-installed on a series of devices from one manufacturer.
The vulnerabilities in these apps are generally inherited from the various usage of the open port, which exposes the unprotected sensitive functionalities of the apps to anyone from anywhere that can reach the open port. Significantly differing from many previous threats that require malware to be installed on a user's device to launch attacks, in this threat model an attacker can sit in the LAN, or Internet to send packets, or simply by tricking the user to click an URL on his/her phone.
The paper also investigates the fundamental causes behind this general vulnerability, to see whether it is exposed by popular use cases of open port in the smartphone ecosystem, or just by poor implementation practices. Surprisingly, the researchers found that some usage popular usage scenarios, such as proxy and data sharing within physical proximity are inherently vulnerable to attacks. The authors also categorize the vulnerable open port usages based on their intended usage, and propose mitigation solutions respectively for each category.
The researchers have reported these vulnerabilities to the affected application developers. The Mobile Open Port Security website includes videos of threat model demos, defense demos, and app manufacturer responses.
In one example on the Mobile Open Port Security website, demo [2] shows how a simple click on the URL in a phishing email will trigger the victim's phone that has one of the vulnerable apps to send a premium-rate SMS.


text:
USBB2K-API - Summary
This group is not part of the GNU Project.
The program consist of an API (daemon) to handle a VOIP box of the type
which allows to plug a classical telephone on an USB port (skypebox,
wangobox, yealink...) in order to integrate this with any type of
program of the type VOIP under GNU/LINUX.
The functionalities are the following:
1. Switching to mode USB/PTSN
2. Detecting Pick up/ Hang up signal from the telephone
3. Generating Pick up tune
4. Generating Ring tone.
5. Handling telephone dial.
Registration Date: Tue 10 May 2005 01:16:55 PM UTC
License: GNU General Public License v2 or later
Development Status: 4 - Beta
posted by hve, Tue 21 Feb 2006 10:37:03 AM UTC - 5 replies
Based on Steves reverse engineering there's now experimental support for the P4K phone.
The module has an additional parameter "default_model" that will pre configure the phone to either a P1K or a P4K.
insmod yealink.ko default_model=P1K
posted by yasha_vo, Mon 31 Oct 2005 04:36:37 PM UTC
- bug fix in usbb2k-api
- new ring tone for ubb2k-api
posted by hve, Wed 13 Jul 2005 10:56:47 AM UTC
The CVS version now contains some experimental ringtone support.
For example:
echo -n RING > /sys/..../show_icon
sleep 10
echo -n RING > /sys/..../hide_icon
You should be able to customise the ringtone via: /sys/.../ringtone
by writing a binary initialisation string. (see yealink.h defalt_ringtone for format)
posted by hve, Wed 22 Jun 2005 08:00:14 PM UTC
This project is now also home of a kernel module for the USB-P1K
export CVS_RSH="ssh"
cvs -z3 -d:ext:firstname.lastname@example.com:/cvsroot/usbb2k-api co yealink-module
- Browse open items
Submit a new item
- Browse open items
Submit a new item
Powered by Savane 3.13-b921.
Corresponding source code


text:
NEW YORK (AP) -- A week ago, markets were soaring on hopes that a fix for Europe's debt crisis was near. On Monday, stocks had their worst drop in two weeks after German leaders cast doubt on how fast that process would be.
Expectations that a resolution to the crisis could be reached at a European summit in Brussels Oct. 23 helped lift the S&P 500 index to its biggest gain in two years last week. Germany's finance chief Wolfgang Schaeuble said Monday that those expectations were too optimistic.
It was the worst day for U.S. stock indexes since Oct. 3, when each hit a low for the year. The Dow Jones industrial average dropped 247.49 points, or 2.1 percent, to close at 11,397. Alcoa Inc. led the Dow lower with a 6.6 percent decline.
"It's completely a reaction to Germany," said Jason Pride, the director of investment strategy at Glenmede, a wealth management firm in Philadelphia. "The reality is everybody is hanging on to what Europe's doing."
The Standard & Poor's 500 index lost 23.72, or 1.9 percent, to 1,200.86. All 10 industry groups in the S&P 500 were lower. Banks fell the most, 3.3 percent.
A batch of weak corporate earnings reports also pulled stocks lower. Gannett Co. Inc. plunged 8 percent, the most of any stock in the Standard & Poor's 500 index, after the newspaper publisher reported a drop in advertising. Wells Fargo sank 8.4 percent after posting results that fell short of analysts' expectations.
The Nasdaq composite index fell 52.93, or 2 percent, to 2,614.92.
Stock markets around the world rallied last week after the leaders of France and Germany pledged to come up with a far-reaching solution to the region's debt crisis by the end of October. That pledge appeared to be pushed back by German officials Monday. Schaeuble said he expects European leaders to adopt a general framework to tackle the crisis on Sunday. Separately, a spokesman for German Chancellor Angela Merkel said discussions on how to solve Europe's debt problems will likely last into the new year.
Concerns about a messy default by the Greek government have been the main cause behind many of the stock market's big swings lately. The fear is that a default would cause deep losses for European banks that hold Greek bonds. That could lead to a freeze in lending between banks and escalate into another financial crisis similar to the one that occurred in 2008 after the collapse of Lehman Brothers.
Pride said there are other issues to worry about, such as a global economic slowdown and squabbles over U.S. government debt. But Pride believes the European debt debacle is the only one that has the power to undermine the global financial system.
News on the U.S. economy was mixed. A measure of U.S. industrial production rose for a third month, but a gauge of New York area manufacturing fell more than Wall Street expected.
The yield on the 10-year Treasury note fell to 2.16 percent from 2.25 percent late Friday. Yields on bonds fall when demand for them increases and investors become more willing to accept lower returns in exchange for holding assets they consider safe.
In corporate news, Kinder Morgan said late Sunday that it would buy El Paso Corp. for $20.7 billion. The deal would create America's largest natural gas pipeline operator. El Paso jumped 24.8 percent. Kinder Morgan Inc., gained 4.8 percent.
Citigroup Inc. fell 1.6 percent, less than the overall market, after the bank said a decline in loan losses helped it beat Wall Street's profit forecasts. The parent of American Airlines, AMR Corp., sank 6.1 percent on news the company and its pilots failed to reach agreement on a new contract over the weekend.


text:
Give me the donor vehicle. Model: large Cherokee iii (wh) (6.05-6.10). Transmission: 5 speeds automatic transmission. Any questions about the article?
This article is used and has been tested! This is an original piece, replica or accessory item! We would like to point out that the list of vehicle use displayed is not always significant. This spare part can also enter your vehicle if the number of keys is different. Please compare the original numbers of the parts you are looking for with the information contained in the table above.
We collect the old engine at your expense by reference. For pick-up, the engine must be packed and attracts to one of our pallets. All liquids must be drained to prealable!In case of non-return, we charge an additional fee of 500 euros. Our engines are supplied without attachments or fluids! The following means of payment are available for payment of this article. Advance payment / bank transfer. Cash or eurocard payment at the time of collection.
Shipments of packages in france are shipped via the dhl service provider. Delivery with dhl express is also possible. Large products such as motors, transmissions and body parts are delivered with hellmann spedition. If the payment is received before 1 p.
, the same day will be sent. Only original pieces, no folds good walking. More than 90,000 satisfied customers. 1-2 working days, usually 24 hours. Free delivery in Germany (only parcels).
Location of the item from-19243 wittenburg Germany. Monday - Friday: 08:00-17:00 uhr. Saturday: 09:00-11:00 uhr. This item is in the category "auto, motorcycle - parts, accessories\auto: spare parts\transmission systems\axles". The seller is "gebrauchtteile24" and is located in this country: de.
This item can be shipped to the following country: whole world.


text:
hammer strength
Plate-Loaded Leg Press
The Plate-Loaded Leg Press machine design encourages proper exercise performance with initiation by pushing down through the hips. Seat pads and footplates are angled and structured to reduce undesirable stress and tension.
Standard Weight Horns | 6 |
Starting Resistance | 21 lbs (9.5 kg) |
Frame Description | 11-gauge steel frame ensures maximum structural integrity; Each frame receives an electrostatic powder coat finish to ensure maximum adhesion and durability |
Dimensions (L x W x H) | 72 in x 62 in x 56 in (183 cm x 157 cm x 142 cm) |
Weight | 535 lb (242.7 kg) |
Product Code | PL-LP |
Related Products
Signature Series Plate Loaded Front Pulldown
Signature Series Plate-Loaded Incline Press
Signature Series Plate-Loaded Shoulder Press
Signature Series Plate Loaded Dip
Signature Series Plate-Loaded Row
Signature Series Plate Loaded Calf Raise
Signature Series Plate Loaded Decline Chest Press
Signature Series Plate Loaded High Row
Signature Series Plate Loaded Biceps Curl
Signature Series Plate Loaded Linear Leg Press
Signature Series Plate Loaded Kneeling Leg Curl
Signature Series Plate Loaded Leg Extension
Ground Base Jammer
Plate-Loaded Combo Twist
Ground Base Combo Incline
Plate-Loaded Twist Right
Plate-Loaded Combo Decline
Plate-Loaded Squat Lunge
Ground Base Twist Left
Plate-Loaded Squat High Pull
Plate-Loaded Iso-Lateral Bench Press
Plate-Loaded Iso-Lateral Horizontal Bench Press
Plate-Loaded Iso-Lateral Incline Press
Plate-Loaded Iso-Lateral Super Incline Press
Plate-Loaded Iso-Lateral Wide Chest
Plate-Loaded Iso-Lateral Decline Chest Press
Plate-Loaded Iso-Lateral Shoulder Press
Plate-Loaded Iso-Lateral Chest/Back
Plate-Loaded Iso-Lateral Front Lat Pulldown
Plate-Loaded Iso-Lateral Wide Pulldown
Plate-Loaded Iso-Lateral High Row
Plate-Loaded Iso-Lateral Row
Plate-Loaded Iso-Lateral D.Y. Row
Plate-Loaded Iso-Lateral Low Row
Plate-Loaded Seated/Standing Shrug
Plate-Loaded Seated Dip
Plate-Loaded Lateral Raise
Plate-Loaded Seated Biceps
Plate-Loaded Pullover
4-Way Neck
Plate-Loaded Gripper
Plate-Loaded Linear Leg Press
Plate-Loaded Leg Press
Plate-Loaded Iso-Lateral Leg Press
Plate-Loaded V-Squat
Plate-Loaded Seated Calf Raise
Plate-Loaded Super Horizontal Calf
Plate-Loaded Hack Squat
Plate-Loaded Leg Extension
Plate-Loaded Iso-Lateral Leg Extension
Plate-Loaded Seated Leg Curl
Plate-Loaded Iso-Lateral Kneeling Leg Curl
Plate-Loaded Iso-Lateral Leg Curl
Plate-Loaded Tibia Dorsi Flexion
Plate-Loaded Abdominal Oblique Crunch
Hammer Strength Plate-Loaded T-Bar Row
Plate-Loaded Belt Squat
Plate-Loaded Glute Drive
Plate-Loaded Vertical Smith Machine
Assisted Nordic Ham
Glute Ham Reverse Hyper Combo
Cutting Edge Education
Exceptional standardized fitness education products including live, web-based and on-demand learning.
Facility Transformations
Discover how Life Fitness transforms facilities to create memorable experiences for your exercisers.


text:
Tony Singleton with a nice Thornie caught off Rhyl on a 1 Up 1 Down rig with size 1/0 Sakuma hooks!
You can vote for this picture to win on Facebook by selecting it in our March 2015 FOTM gallery HERE and hitting the 'Like' button! Don't forget to share all your favourite entries to help them win too!
If you would like to enter our FOTM competition and have the chance to win £100 to spend at GAC, simply send us a photograph of you and your catch, when and where you caught your fish, and what tackle and method you used through this page of our website. You can also enter instore - just ask any member of staff for assistance. The best entries will be featured on both our Blog and Facebook page!


text:
Winter in Town by Molly Lamb Bobak
Molly Bobak
Winter in Town
colour serigraph
16 x 24 ins ( 40.6 x 61 cms )
Auction Estimate: $200.00 - $300.00
Price Realized $295.00
Sale date: October 17th 2018
Private Collection, Toronto
Share this item with your friends
Molly Lamb Bobak
It could be said that Molly Lamb Bobak was destined to be an artist. She was born on Lulu Island, near Vancouver, British Columbia, on February 25, 1920. She grew up in a bohemian enclave. Her father, Harold Mortimer Lamb, was a photographer and art critic. In 1926, her father opened a commercial art gallery in Vancouver, exhibiting painters, sculptors, and photographers.
In 1938, Bobak attended art school at the Vancouver School of Art and studied under Jack Shadbolt, where she learned to improve her drawing and composition skills. While working at the Yellow Point Lodge during the summer of 1940, Lamb kept a diary filled with text and caricatures and drew everyone that she encountered. Bobak joined the Canadian Women's Army Corps in 1942. While serving, she found endless material to paint and included these paintings in her personal journal, which was later published and titled "W110278: The Personal War Records of Private Lamb, M", which included 147 folios and fifty single sheet sketches. After being stationed in Alberta and Quebec, the military recognized her artistic abilities and invited her to attend a drafting course in Toronto. After finishing the course, Lamb tried to become an official war artist. In 1942, Lamb was sent to Ottawa where she drew at the Trades Training offices where she designed posters and Christmas cards. Three of Bobak's drawings were purchased by the Art Gallery of Ontario in the same year.
In 1944, "Meal Parade, Hamilton Trades School" (n.d) tied for second prize at the National Gallery's Canadian Army Art Show, which helped her receive the appointment as a war artist––the only woman who earned this designation. As women were not allowed on the active war front, Bobak was transferred to London, England, six weeks after Victory Day to document the aftermath of the war.
After leaving the military, Bobak settled with her husband Bruno, in Vancouver. After the move, Bobak had little time to paint as she was teaching night courses at the Vancouver School of Art and tending to her children. After earning a French scholarship in 1950, Bobak, her husband, and their two children traveled to Paris where she experienced the works of modernist painters like Cézanne and Matisse. Cézanne's work in particular influenced Bobak's art, which can be seen in the geometric organization of "A Bakership, Saint-Léonard" (1951) and "The Saint Ives Train" (1951). Throughout the late 1950s, the Bobaks spent much of their time in Europe after receiving funding from the Canada Council for the Arts.
"In 1961, issue 71 of Canadian Art, a survey of 24 Canadian artists appeared, which included her photo, works, and comments written by Robert Fulford. Joan Lowndes in 1963 noted fewer flower pieces and more bustling cityscapes, outdoor activities and scenes with crowds of people in her work and linked her in this way to Pegi Nicol MacLeod. Making particular reference to her paintings of pubs she described this work in the following words 'Only the figures in the foreground are silhouetted, in a heavier, more emphatic line and in new, high-keyed red orange. They recede into mere ovals, then into a haze of off-white and pink, which we readily translate into cigarette smoke, chatter, joviality . . . Molly Bobak powerfully projects an atmosphere'. This is perhaps the most essential quality of her work."
After returning to Canada in 1961, Bobak was included in the second and third Canadian Biennales. Bobak exhibited frequently at the Beaverbrook Art Gallery, the University Art Centre in Fredericton, and throughout other public locations in the Maritimes. In 1973, Bobak was elected into the Royal Canadian Academy of Arts, and in 1995 she was chosen to receive the Order of Canada. In 1993, the MacKenzie Art Gallery in Regina, Saskatchewan presented a major exhibition of Bobak's work that toured to Ottawa, St. John's, and Fredericton.
"Though she favoured watercolours, Bobak also worked in oils, conte and charcoal, working in an impressionistic style more concerned with capturing the essence of the scene rather than the details of her subject matter. Molly Lamb Bobak stopped painting at the age of 84 when her eyesight began to deteriorate and she passed away in 2014. Bobak's work can be found in the collections of the National Gallery of Canada, the Canadian War Museum, the Art Gallery of Greater Victoria, the Glenbow Museum, the Beaverbrook Art Gallery, the Military Museums of Alberta, and the Art Gallery of Alberta."
Literature Sources:
"A Dictionary of Canadian Artists, Volume I: A-F", compiled by Colin S. MacDonald, Canadian Paperbacks Publishing Ltd, Ottawa, 1977
Gewurtz, Michelle. Molly Lamb Bobak: Life and Work. Toronto: Art Institute of Canada, 2018 (https://aci-iac.ca/art-books/molly-lamb-bobak)
We extend our thanks to Danie Klein, York University graduate student in art history, for writing and contributing this artist biography (with passages quoted from "A Dictionary of Canadian Artists).


text: Flea Beetle Phyllotreta and Psylliodes species Flea beetle Flea beetle Flea beetle [Credit: David Short ] Flea beetle [Credit: David Short ] Host Plants: In the garden: Stocks, wallflowers and other ornamental brassicasOn Crops: Most brassica plants (vegetable and ornamentals) Where Found: Wherever host crops are grown Description: Tiny dark brown to black beetles, 2-3mm long, which can often be seen on leaves if you approach quietly. When disturbed, flea beetles jump away with the help of their powerful rear legs. Damage: Flea beetles chew tiny round holes in the top sides of leaves, with damage to leafy greens being most severe in spring. New leaves are usually damaged first, giving them a lacy appearance. Preventing Problems: Always rotate crops, and use row covers (garden fleece) to protect susceptible crops. Winter-grown brassicas are less affected as flea beetles are much less numerous. Because mustard is so attractive to flea beetles in spring, you can try planting it along the edge of your garden as a trap crop. Flea beetles moving into the garden will stop to colonize the mustard rather than moving into the garden. Managing Outbreaks: Make white sticky traps to capture flea beetles as they jump. Tips: Delay planting of susceptible crops. Grow plenty of flowers to attract beneficial insects, which prey on flea beetles. Use row covers as your primary defence against this pest. < Back


text:
Reliable and Efficient Cab Service. Cab arrangements made available at short notice period. Very punctual and safe drive I had from Junagadh to Ahmedabad during night time. I highly recommend One Sided Cabs.
Abhishek Singh
top anand to bopal cab service | taxi service
OnesidedCab Service is Just a Call Away.
95 74 997 997
Request a Callback
Main Menu
Book Now
Why book one-way trip with us?
Only one-side fare for your doorstep pickup & drop to destination
No hidden charges - Pay nothing extra than what's mentioned
Experienced & polite drivers with clean & comfortable cabs
| Anand To Bopal Cab
| Anand To Bopal Cab
AC Hatchback
WagonR OR Similar
4 passengers
Sanitise cab
Assured Cab ( Confirmed Cab Arrival )
Verified Driver
Hygiene & Clean Cabs
Fixed Fare - No KMs Limitations
Includes One Pick Up & One Drop Within City at Your Doorstep
24*7 Customer Support On Call
Parking Charges Will Be Extra
Free cancellation
Select Cab
AC Sedan
Swift Dzire OR Similar
4 passengers
Sanitise cab
Assured Cab ( Confirmed Cab Arrival )
Verified Driver
Hygiene & Clean Cabs
Fixed Fare - No KMs Limitations
Includes One Pick Up & One Drop Within City at Your Doorstep
24*7 Customer Support On Call
Parking Charges Will Be Extra
Free cancellation
Select Cab
AC SUV Ertiga
OR Similar
6 passengers
Sanitise cab
Assured Cab ( Confirmed Cab Arrival )
Verified Driver
Hygiene & Clean Cabs
Fixed Fare - No KMs Limitations
Includes One Pick Up & One Drop Within City at Your Doorstep
24*7 Customer Support On Call
Parking Charges Will Be Extra
Free cancellation
Select Cab
Book Your Ride : anand to bopal cab service Lowest Rate @ Rs. 1551
Customer satisfaction is our priority. We at onesidedcabs pride ourselves in providing top anand to bopal cab service across India. Our easy online booking platform allows you to make an instant booking with just a few clicks. When you book a one way taxi with us, you can rest assured that the driver will be courteous and trained and are committed to dropping you on-time in the most secure manner. With onesidedcabs, you only have to pay for the distance travelled and nothing else! We have a fleet of clean and well-maintained fleet of air-conditioner cabs to suit your preferences. All you need to do is simply give us a call at
95 74 997 997
to make a booking. Alternatively, you can also logon to
, fill up your details, book one way cab and reserve your cab. There are no additional expenses to book online.
One Sided Cabs offers one-way car rentals from anand to bopal , which include pickup and drop-off at bopal City and any location on anand, including the anand. We offer 24-hour booking flexibility along with immediate confirmation.
The most convenient alternative for those who wish to go from anand to bopal just once is to take a one way taxi service. You might easily be picked up and dropped off anywhere in bopal at your selected place by a cab or taxi. This taxi is not shared. It will be your exclusive cab.
Planning a trip from the serene anand to bopal taxi service? Consider a hassle-free one sided cabs service for a comfortable and efficient journey.
How about a relaxing anand to bopal one way cab ride
Perfect for one-way travel:
No need to pay for a return trip you won't be using. One-way taxis cater to your specific travel needs.
Door-to-door service:
Enjoy a relaxed ride with pickup from anywhere in anand and a drop-off at your preferred location in bopal .
Variety of options:
Choose from a range of car types to suit your budget and group size, from comfortable sedans to spacious SUVs.
Convenience at your fingertips:
Many services offer online booking with instant confirmation, allowing you to book your taxi 24/7 from the comfort of your home.
Hiring an anand to bopal one way cab is the ideal way to obtain the greatest cab service and enjoy a stress-free trip. For all routes throughout India, One Sided Cabs provides a large selection of AC taxi services. You can select from a variety of taxi categories for your anand to bopal travel, including AC hatchback, AC sedan, AC SUV, and AC Assured Innova Comfort. Wagon R, Maruti Ritz, Tata Indica, Toyota Etios, Swift Dzire, Mahindra Xylo, Maruti Ertiga, Toyota Innova (6 and 7 seaters), Innova Crysta, and other automobile models are also available for selection. For your private taxi travel from anand to bopal , you can select any model among these automobiles. One Sided Cabs also offers out-of-town taxi services for transfers from anand to the bopal.
At our anand to bopal cab service, transparency is key. We believe in providing upfront pricing with no hidden fees, so you always know exactly what to expect before you step into the cab. Our fare structure is competitive and affordable, offering excellent value for the quality of service you receive. Additionally, we offer various payment options to accommodate your preferences, whether you prefer to pay in cash, credit card, or through our convenient mobile payment platform.
Sit back, relax, and enjoy the scenic countryside views as you travel from the tranquil anand to the vibrant city of bopal. With a One sided cabs service, you can make your journey convenient, comfortable and budget-friendly.
FAQ on Book Your Cab : anand to bopal cab service
1. Are you looking to hire a one way cab from anand to bopal?
If you are searching for a cab from anand to bopal, several options are available to suit your possibilities and price range. Numerous reputable cab offerings function on this route, offering numerous vehicle kinds starting from least expensive to luxury. Before reserving, consider factors including travel duration, comfort, and pricing. Online platforms provide a clean right of entry to evaluate fees, read opinions, and make reservations conveniently. Book in advance, especially during top training seasons, to steady the acceptable offers and guarantee availability. Proper planning makes your adventure from anand to bopal easy and enjoyable in a comfortable cab.
2. If you are searching for anand to bopal taxi Service?
When in need of an anand to bopal taxi carrier, numerous alternatives cater for your journey desires. Several professional cab carriers perform along this path, providing many automobiles from standard to luxury, ensuring you discover one that fits your options and finances. It's beneficial to book in advance, especially for high travel instances, to ensure stable availability and doubtlessly gain from early booking reductions. Utilize online platforms to compare costs, read reviews, and make reservations effortlessly. With careful planning and reservation, your journey from anand to bopal may be comfy, convenient, and hassle-free with a reliable taxi service.
3. How can I locate the greatest rates on one way cab from anand to bopal?
Flexibility with pickup and drop-off locations can result in lower fees, as a few condominium businesses provide offers for precise routes or locations. Booking in advance and preserving an eye out for promotions and discounts can also result in big financial savings. Additionally, remember becoming a member of loyalty applications or signing up for condominium business enterprise newsletters to get the right of entry to different deals. Lastly, be sure to study the terms and situations carefully, along with any additional prices or regulations, to ensure you're getting the pleasant general fee.
You can book anand to bopal one way taxi service from Onesidedcabs at affordable rates and we will provide you with the best services.
Enter Your mobile Number
* Request call back is not available on DND number.


text:
Made to order modern wood wall art. We offer you a unique and intriguing round shape decor for your wall. This unique round wood wall art is made of different species of tree to show a diversity of wood grain. All slices are smoothly sanded for clear exposition of rings drawing. For hours you can contemplate the variety of patterns and colors.
The slices of wood are stuck to the black painted plywood with strong glue giving the wall hanging an aesthetic outlook. The slices are treated with organic oil,
The diameter of the piece from the cover picture is 87 cm (34'' )
This tree slices wall art and wall decor is a sample piece. We will make similar ones for CUSTOM ORDER. Each piece will be absolutely unique and never exactly the same as shown on pictures. holzwand kunst
The vision that accompanies the process of designing and making our furniture is to exhibit solid wood elements in the frames of modern, durable materials The soul of each piece is wood. The frame, unless is an essential part of the design, is subtle and hardly visible. Wood and components of metal and glass complement each other to result in an unique synergy. Nature itself creates true works of art. The shapes and patterns of wood are indeed outstanding. All we want to do is dress wood in a modern frame and take care of its functionality. Such a combination of austerity and modernity perfectly fits into the interior design of apartments and commercial premises.
Caring for the environment and your comfort, we impregnate our furniture and protect each piece against dust and dirt using organic oils and waxes only. The composition of these is either 100 % organic or contains trace amounts of solvents. Organic oils and waxes enhance the beauty of wood and protect it very well. They don't cover the timber with a chemical skin so the wood doesn't lose any of its natural freshness.
To learn more about our vision, design, organic approach, features of solid wood and ways of taking care of our pieces, please go to the shop additional information and FAQs section: https://www.etsy.com/shop/FreeTreeStudio/policy?ref=shopinfo_policies_leftnav
Payment methods: Pay Pal, Bank Transfer, Credit / debit card
Most of the items are built to order. The waiting time depends on the item, to build a furniture we need from 2 to 6 weeks. The time of completion depends on current work list and availability of the dried wood. We recommend to email us before making an order to learn about currently estimated time. When you decided to buy one of our products we ask you to pay 20% deposit fee to secure a spot on our wait list. Balance has to be paid before any item is shipped out. Because the items are made to order, the cancellation is not possible.
The prices do not include international customs – we ship from the European Union region. Custom duty may be required when the item is shipped beyond the EU.
We ship worldwide via UPS, FedEx, DPD, Raben, DHL and GLS. . Shipping method and price depend on the item ordered and the destination.
For UE destinations we release items to a carrier that will require proof of delivery and signature. Parcels below 20 kg (44 ibs) shipped to Northen America are also released to a carrier that will require proof of delivery.
You should inspect the piece(s) upon delivery. If the product comes to you damaged, you should refuse the item at delivery !!! If the item appears to be damaged once it's unpacked you have to notify us immediately !!!
Please notify us within 3 days of receipt if any piece(s) do not comply with the order or the order is incomplete. You will be deemed to have accepted the piece(s) unless you notify us in email of any damaged or incomplete of piece(s) during the Inspection Period of 3 days from the delivery.
Just contact me within: 14 days of delivery
Ship items back to me within: 21 days of delivery
Please contact me if you have any problems with your order.
Buyers residing EU countries , USA and Canada have the right to return an item within 14 days of receiving it. This right does not extend to custom-made products. The buyer is always responsible for paying return shipping costs.
If you wish to return a product please complete this
cancellation form: https://extfiles.etsy.com/cancellation-forms/EUCancellationFormEN.pdf and email it to us: firstname.lastname@example.com
Custom orders - since an item is made to order we accept no returns unless the item arrives broken or damage - please see Shipping Policy.
All damage items may be replaced or refounded depanding on customer's will. We insure the dispatched goods to the value of the items.
As each piece of wood is absolutely unique the pieces of furniture we build are never exactly the same as shown on pictures.
Please note that the wood has natural features such as cracks, blemishes, knots which provide each finished piece of furniture with a distinct and unique look. They are not considered as wood imperfections and are not a subject of claims of compensation or refunds. Please read about features of solid wood in additional information section.
Free Tree Studio warrants the repair or replacement of any furniture which is defective in material or craftsmanship for a period of 12 months from the date of purchase. The warranty applies to furniture used for its intended use. To make a claim your original sales receipt will be required.
The warranty does not cover normal wear and tear, water marks, or any natural changes that occurs on the pieces of wood .
We will not repair or replace products treated with chemical detergents or other aggressive cleaning liquids .
The warranty does not refer to differences from piece to piece nor from pictures of furniture shown on the website.
If a refund or a repair is deemed necessary by the seller the buyer must pay for return shipping for a refund. The refund will be issued once the item(s) is returned in suitable packaging to prevent damage during shipment and all items are accounted for.
The pieces of wood dry off for a long time. It is a natural process of an organic matter. It effects in checks and cracks which are elements of the design of each piece. The ongoing process of drying off may increase existing cracks on the sides or ends of pieces or generate new ones. These variations are part of the beauty of the wood and have been planned in the design of each piece. The wood can slightly change its color over time, the intensity of this change depends on exposure to sunlight and heat. The warranty does not cover these changes. To learn more about drying off and color change of solid wood go to additional information and FAQs section: https://www.etsy.com/shop/FreeTreeStudio/policy?ref=shopinfo_policies_leftnav
Wood is a hygroscopic matter which means it tends to maintain the same amount of moisture as the surrounding air. Each tree accumulates a large amount of juices, whose main ingredient is water. The pieces of wood we use are dried before built to furniture. During the air and kiln drying most of the wood vapour. The tempo of drying depend on the mass of the piece, in general a more massive piece needs more time to vapour the moisture. At this time the log or other piece of wood shrinks which almost always results in cracking on the sides or ends of a pieces. The pieces of wood may still crack even when assembled into frame. Each piece will continue to loose moisture when it arrives to its final destination as it needs to acclimatize itself to the lower humidity of its new environment. The existing cracks can deepen and new ones may appear. This is a natural result of a further shrinking. Such is the beauty of the natural wood , which works all the time astonishing us with new cracks that spontaneously arise in the block. They highlight the natural character of the wood and can't be deemed as ''defects" of the furniture. Cracking doesn't affect the piece's functionality or structural strength and will not result in a refund or compensation.
To keep your organic, solid wood furniture in an excellent condition you need to remember of proper cleaning and care. The key rules are:
• avoid placing hot cups or vessels directly neither or on the wooden elements nor tampered glass table tops.
• keep your furniture away from the radiator
• to remove the dust use a vacuum cleaner with a soft brush attachment
• wipe away surface marks using a clean, damp cloth.
• avoid strong, aggressive – acid containing commercial cleaners and polishes. We can supply you we proper detergents at your purchase.
• make sure a proper air circulation between the wood and the floor is always maintained. Don't remove leg levellers / casters attached to a piece as the piece may releases humidity which can stain the carpets if it's placed on directly .
1. Personal information I collect
To fulfil your order, you must provide me with certain information (which you authorized Etsy to provide to me), such as your name, email address, postal address, payment information, and the details of the product that you're ordering. You may also choose to provide me with additional personal information (for a custom order, for example), if you contact me directly
2. The legal bases I rely on to collect, use, and share personal information
I rely on a number of legal bases to collect, use, and share your information, including:
•as needed to provide my services, such as when I use your information to fulfil your order, to settle disputes, or to provide customer support;
•when you have provided your affirmative consent, which you may revoke at any time, such as by signing up for my mailing list;
•if necessary to comply with a legal obligation or court order or in connection with a legal claim, such as retaining information about your purchases if required by tax law; and
•as necessary for the purpose of my legitimate interests, if those legitimate interests are not overridden by your rights or interests, such as 1) providing and improving my services. I use your information to provide the services you requested and in my legitimate interest toimprove my services; and 2) Compliance with the Etsy Seller Policy and Terms of Use. I use your information as necessary to comply with my obligations under the Etsy Seller Policy and Terms of Use.
3. The third parties with whom I share personal information.
I share your personal information for very limited reasons and in limited circumstances, as follows:
•Etsy. I share information with Etsy as necessary to provide you my services and comply with my obligations under both the Etsy Seller Policy and Etsy Terms of Use.
•Service providers. I engage certain trusted third parties to perform functions and provide services to my shop, such as delivery companies and custom agencies. I will share your personal information with these third parties, but only to the extent necessary to perform these services.
•Business transfers. If I sell or merge my business, I may disclose your information as part of that transaction, only to the extent permitted by law.
•Compliance with laws. I may collect, use, retain, and share your information if I have a good faith belief that it is reasonably necessary to: (a) respond to legal process or to government requests; (b) enforce my agreements, terms and policies; (c) prevent, investigate, and address fraud and other illegal activity, security, or technical issues; or (d) protect the rights, property, and safety of my customers, or others.
4. The length of time he keeps personal information
I retain your personal information only for as long as necessary to provide you with my services and as described in my Privacy Policy. However, I may also be required to retain this information to comply with my legal and regulatory obligations, to resolve disputes, and to enforce my agreements. I generally keep your data for the following time period: 5 years.
5. Transfers of Personal Information Outside the EU
I may store and process your information through third-party hosting services in the US and other jurisdictions. As a result, I may transfer your personal information to a jurisdiction with different data protection and government surveillance laws than your jurisdiction. If I am deemed to transfer information about you outside of the EU, I rely on Privacy Shield as the legal basis for the transfer, as Google Cloud is Privacy Shield certified.
6. Buyers' rights regarding my use of their personal information and my contact details
If you reside in certain territories, including the EU, you have a number of rights in relation to your personal information. While some of these rights apply generally, certain rights apply only in certain limited cases. I describe these rights below:
•Access. You may have the right to access and receive a copy of the personal information I hold about you by contacting me using the contact information below.
•Change, restrict, delete. You may also have rights to change, restrict my use of, or delete your personal information. Absent exceptional circumstances (like where I am required to store data for legal reasons) I will generally delete your personal information upon request.
•Object. You can object to (i) my processing of some of your information based on my legitimate interests and (ii) receiving marketing messages from me after providing your express consent to receive them. In such cases, I will delete your personal information unless I have compelling and legitimate grounds to continue using that information or if it is needed for legal reasons.
•Complain. If you reside in the EU and wish to raise a concern about my use of your information (and without prejudice to any other rights you may have), you have the right to do so with your local data protection authority.
How to Contact Me
For purposes of EU data protection law, I, Adam Sicinski, am the data controller of your personal information. If you have any questions or concerns, you may contact me at freetreestudio [!at] gmail.com
Oct 6, 2022
I received this beautiful work today and it is exactly what I was hoping for. It looks just like the picture and arrived undamaged. Communication with the artist was excellent. I couldn't be more happy with this purchase!
Nov 22, 2017
I'm absolutely happy with my purchase. I love it, its so unique. Excellent workmanship, thank you so much!
Jan 2, 2017
Many thanks for this fantastic piece of art - we are delighted with it! Shipping prompt and communication good throughout.
Jun 18, 2016
We are so pleased with our wood slice piece. The different hues and rings in each slice make it very interesting and unique. Adam was a pleasure to work with and answered all my questions promptly.
Mar 27, 2016
We searched for something interesting for our chimney breast and finally found this (4 years later!!). It's lovely to look at and gets lots of comments. Adam was easy to deal with and was happy to make a slightly bespoke version of the artwork. Delivery was seamless. Very happy with our purchase.


text:
Each year since 2007, Memorial Sloan Kettering's postdoctoral researchers have had the opportunity to showcase their research accomplishments at the annual Postdoctoral Research Symposium. The symposium helps foster scientific and social interaction among postdoctoral researchers and other members of the research community.
This year, 83 poster presentations were displayed during the course of the October 29 daylong event. "It's been a great day of science," said Sloan Kettering Institute Director Thomas J. Kelly. "This symposium illustrates yet again how important our postdoctoral researchers are to the progress of science here at the Sloan Kettering Institute and also around the country. It has also been wonderful to see the high level of participation by both postdocs and faculty."
"First and foremost, the symposium provides an important forum for postdocs to disseminate their findings and receive feedback from people in diverse areas of research," added Daniel Ciznadija, a poster presenter, a member of the symposium planning committee, and a postdoctoral researcher in the laboratory of Andrew Koff. "It's an especially useful mechanism for encouraging cross-pollination of ideas between not only postdocs but also the broader scientific community at Memorial Sloan Kettering and our neighboring institutions."
Dr. Kandel, an eminent researcher in the area of learning and memory, delivered a lecture titled On the Perpetuation of Long-Term Memory in which he described his work in the molecular mechanisms involved in the development of short-term and long-term memories.
After Dr. Kandel's address, three postdoctoral researchers each received awards of $500 for presenting the best posters. The posters were judged by a committee of postdoctoral researchers and a panel of faculty members. Prizes were awarded based on visual and oral presentation, content, and scientific merit. Louisa Bokacheva from Jason Koutcher's laboratory won for her poster describing her work with quantitative diffusion-weighted MRI in prostate cancer. Diffusion-weighted MRI measures the rate of random motion of water molecules, which is usually lower in cancer than in normal tissues. Accurate measurements of the diffusion rate are useful for the detection and characterization of cancer. David Schaer from the laboratory of Jedd Wolchok and Alan Houghton received an award for his poster elucidating the mechanism of antibody-based immunotherapy of melanoma, a necessary step to move this therapy into clinical trials. Kai Xu from Dimitar Nikolov's laboratory won for his poster describing a structural study of the interaction between a viral protein and its receptors on the host cell membrane, the first step in understanding the infection process of several emerging viruses that are transmitted from animals to humans and for which there are no available antiviral therapies.


text:
2010 Scholar-Chessplayer Award Recipients Announced
April 20, 2010
The 2010 Scholar-Chessplayer Award Recipients are:
- Rohan Agarwal, CA
- Richard Herbst, CO
- Abby Marshall, VA
- Jake Miller, NY
- Victor Shen, NJ
Congratulations to the winners for their outstanding achievement!
These annual scholarships awarded by the U.S. Chess Trust, the National Scholastic Chess Foundation, and the USCF, are "intended to recognize and encourage high school junior or senior students who promote a positive image of chess."
High School students who have shown outstanding merits in academics, sportsmanship and chess were eligible to apply to these scholarships. Five awards of $1,500.00 each (total of $7,500) in scholarship money are awarded.
Thanks to the generosity of it's long-time supporters, the U.S. Chess Trust continues to fund many wonderful programs including the Scholar-Chessplayer Awards.
Please spread the word to potential donors to "Say Yes to Chess!" Donations to the U.S. Chess Trust are tax-deductible.
Special thanks to the National Scholastic Chess Foundation for their contribution to this program.
The U.S. Chess Trust is an independent 501(c)(3), non-profit organization.
Created in 1967, the Trust was organized to promote, stimulate and encourage the study and play of the game of chess as a means of intellectual development. The Trust uses its resources for charitable purposes, including social, educational, scientific, historical endeavors. The U.S. Chess Trust takes an active role in supporting chess education programs across the nation. Our Trustees act without compensation, and are dedicated to the U.S. Chess Trust's mission.
For more information about the U.S. Chess Trust see: www.uschesstrust.org.
The United States Chess Federation (USCF), founded in 1939, serves as the governing body for chess in the United States and is now headquartered in Crossville, Tennessee. USCF is devoted to extending the role of chess in American society. It promotes the study and knowledge of the game of chess, for its own sake as an art and enjoyment, and as a means for the improvement of society. The USCF is a not-for-profit membership organization with over 80,000 members.
For additional information on the USCF see: http://www.uschess.org.
The National Scholastic Chess Foundation (NSCF) is a non-profit foundation organized for educational purposes under section 501(c)(3) of the Internal Revenue Code. The NSCF was created in 1991 as a merger between the Westchester Chess Foundation (founded in 1985) and the Fairfield County Chess Foundation. The Executive Director of the NSCF is FIDE Master Sunil Weeramantry.
For additional information on the NSCF see: www.nscfchess.org.


text:
Product Description
Motorrad Street X helmet has been designed to take on any road, be it motorway, city street or country lane. This is a helmet that effortlessly combines comfort and safety with a stylish modern design. The sun visor can be adjusted freely, giving you full control to quickly adapt the helmet to various light conditions. The Street X has been wind-tunnel tested to ensure optimum aerodynamics and aeroacoustics. Superb ventilation makes sure you keep a cool head and the double-layered visor ensures you keep everything in sight. And in spite of this wide range of functions, the Street X remains incredibly lightweight.
- Full-face helmet with integrated sun visor
- Inner layer made of multi-segmented expanded polystyrene
- Double-glazed visor: condensation-resistant inner visor; outer visor with scratch-resistant coating
- Excellent head and visor ventilation
- Optimum aerodynamics
- Integrated sun visor, adjustable via a slider bar on the top of the helmet
- Chin strap with double-D fastener
- Removable, washable interior
- Safety standard: ECE 22-05
- Weight: approx. 1,450 grams (small helmet)
- Tinted silver reflective or blue reflective visor optionally available
- 53/54 – 61/62


text:
5 Days Lake Nakuru, lake Naivasha and Masai mara Birding safari
5 Days Birding Safari offers a totally unique birding experience in lake Nakuru, Lake Naivasha and Maasai Mara National Reserve. the 5 days birding safari #itinerary. #1 Lake Naivasha, #2 lake Nakuru, #3, 4, 8 Maasai Mara
Full Safari Itineraryfor 5 days Lake Nakuru Lake Naivasha and Maasai Mara Birding safari
Day 1: Lake Naivasha
After breakfast we depart from our Nairobi hotel for a scenic drive through the Great North road to Lake Naivasha. Stop en-route at the view points of the Great Rift Valley for stunning views,,and arrive at Lake Naivasha by mid-morning for bird walk before time for lunch at Lake Naivasha Lodge.
Lake Naivasha being close to Lake Nakuru and 65 miles from Nairobi, is freshwater Lake. It was declared a bird sanctuary in 1967 and also supports pastoral industries of wine and flowers.
During our full day field trip to Lake Naivasha, we study the birds of the region such as herons, fish eagles, ospreys, black crakes, and lily-trotters. Dominated by the shadow of Mt. Longonot, few lakes in the world have a more commanding or spectacular setting than Naivasha.
We also have an excursion to the Elsa mere Center. Activities include reliving the experience of Joy Adamson and Elsa while viewing "Born Free.†Lake Naivasha being on the Rift floor is home to an incredible variety of species. Over 450 species have been recorded here. Dinner and overnight stay at Lake Naivasha Lodge.
Day 2: Lake Naivasha – Lake Nakuru
This morning we leave Naivasha and head for Lake Nakuru Park, regarded by avid birders' as the greatest World ornithological spectacle on the Earth. The park is famous for its millions of pink flamingoes lining on the lake shore, arriving by mid morning at Lake Nakuru for a game drive en route before checking-in at Lake Nakuru Lodge for Lunch. Afternoon game drive followed by a walk along the shores which will also allow us to see the many wild animals in the park and especially the park is the Sanctuary to the Black Rhino, White Rhino and the Rothschild Giraffe. Here we'll have the chance to look out at some of the common species like the Lesser and Greater Flamingoes, African fish Eagle, Tawny Eagle, Green Wood Hoopoes, Cliff Chat, Great White and Pink Backed Pelicans plus other intra- African Migrants. Dinner and Overnight stay today will be at Lake Nakuru Lodge.
Day 3: Lake Nakuru – Masai Mara
Soon after breakfast, drive across the floor of the Great Rift Valley the longest rift in the crust of the Earth to Masai Mara Game Reserve the unspoiled Savannah. Masai Mara is actually the northern portion of the Great Plains ecosystem in the neighboring Tanzania called Serengeti. It is a home to the "big five†lion, buffalo, rhino, leopard and elephant as well cheetah, zebra, giraffe and vast herds of plain antelope and numerous and other wildlife. Our accommodation for the nights will be at one of the excellent lodge Mara Sopa Lodge. Sopa is a Masai word meaning welcome and indeed this is a tradition which has be well adopted by the lodge to all guest. Set in the Oloolaimutia valley the lodge blends in the perfectly with its surrounding hillside landscape. After lunch and some time to relax and perhaps take a dip in the pool, you will depart with your driver guide for an afternoon game drive in search of the big five. As sun starts to edge dip into the horizon, it will be perfect time to photograph the beautiful Mara rolling plains. Don't forget this is the right time to spot the shy leopard. Dinner & overnight at Mara Sopa Lodge (BLD).
Day 4: Masai Mara
A full day in the Mara, the extensive grasslands are a strong hold to the threatened, migratory Corncrake and the near threatened Jackson's widowbird. The bush and woodlands around the reserve also hold some unique bird species, more than 450 bird species have been recorded in the Mara, including 12 species of cisticola and birds of prey. Large numbers of palaerctic migrants winter in the area including Caspian plovers and white storks. Other local and unusual birds in the Mara include Rock Cisticola, Rufous Bellied Heron, Denham's Bustard, Black Coucal, Red Tailed chat, Pale Wren Warbler, Tabora Cisticola, Yellow Bellied Hyliota, Green-capped Eremomela and Magpie Shrike. All meals, dinner and Overnight stay will be at Sarova Mara Camp.
Day 5: Masai Mara – Nairobi
Morning game drive, after breakfast, you drive back to Nairobi.


text:
This week's TIME cover story is an exclusive, detailed feature by Peter Bergen about the final days of Osama bin Laden, who was killed by Navy SEALs in a raid nearly one year ago. In the following excerpt, Bergen, who spent much of his career covering bin Laden and his network of terrorists, provides previously unpublished details about the compound where bin Laden had been living in seclusion on a third floor that wasn't supposed to exist at all.
The Floor That Didn't Exist
The compound was a perfect place for a discreet yet comfortable retirement.
It was to the placid environs of Abbottabad that bin Laden, half a decade after his great victory on 9/11, decided to escape. By the spring of 2011, the terrorist mastermind was in his sixth year of hiding out in the city's Bilal Town neighborhood (see the timeline of bin Laden's post-Sept. 11 movements below). With its porticoed white villas interspersed with small shops selling fruits and vegetables, it is certainly a pleasant place to live. Sometime in 2005, bin Laden's compound began rising from what had once been open fields. During construction, a third floor was added to the main building. No planning permission was sought for this addition (see the original compound blueprints), a common enough dodge in a part of the world where paying property taxes is regarded as a sucker's game.
But there was a more compelling reason to keep this alteration as secret as possible: the unauthorized floor was for the exclusive use of bin Laden and Amal, the spirited Yemeni who was his newest and youngest wife (one of three living at the compound, along with a dozen of his children and grandchildren). The third floor was a little different from the others. It had windows on only one of its four sides, and they were opaque. Four of the five windows were just slits well above eye level. A small terrace leading off the floor was shielded from prying eyes by a 7-ft.-high wall designed to conceal even someone as tall as the 6-ft. 4-in. bin Laden. Habitually dressed in light-colored flowing robes, a dark vest and a prayer cap, bin Laden rarely left the second and third floors of the house during the more than five years he lived there. When he did, it was only to take a brief walk in the compound's kitchen garden. A makeshift tarpaulin over a section of the garden was designed to keep even those walks a secret from the all-seeing U.S. satellites that traversed the skies overhead.
(MORE: Osama Bin Laden's Widow Details Life on the Run)
Inside its walls the compound was bare of paint, and in keeping with bin Laden's orthodox beliefs, there were no pictures. It had no air-conditioning and only a few rudimentary gas heaters–in an area where summers can top 100F and winters mean snow. As a result, the electricity and gas bills were relatively minuscule, averaging $50 a month. Beds for the various family members were made from simple planks of plywood. It was as if the compound's inhabitants were living at a makeshift but long-term campsite.
In his top-floor sanctuary, bin Laden whiled away the days with his wife Amal. The bedroom ceiling was low for a man as tall as bin Laden. A tiny bathroom off to the side had green tile on the walls but not on the floor, a rudimentary toilet that was no more than a hole in the ground, over which they had to squat, and a cheap plastic shower. In this bathroom, bin Laden regularly applied Just for Men dye to his hair and beard to try to maintain a youthful appearance now that he was midway through his sixth decade. Next to the bedroom was a kitchen the size of a large closet. Across the hall was bin Laden's study, where he kept his books on crude wooden shelves and spent much of his time tapping away on his computer, composing lengthy missives that would be delivered by courier to key lieutenants…read the full story from this week's issue of TIME.