text:
Security Blog
The latest news and insights from Google on security and safety on the Internet
Helping webmasters with hacked sites
December 12, 2012
Posted by
Oliver Barrett
, Search Quality Team
(Cross-posted from the
Webmaster Central Blog
Having your website hacked can be a frustrating experience and we want to do everything we can to help webmasters get their sites cleaned up and prevent compromises from happening again. With this post we wanted to outline two common types of attacks as well as provide clean-up steps and additional resources that webmasters may find helpful.
To best serve our users it's important that the pages that we link to in our search results are safe to visit. Unfortunately, malicious third-parties may take advantage of legitimate webmasters by hacking their sites to manipulate search engine results or distribute malicious content and spam. We will alert users and webmasters alike by labeling sites we've detected as hacked by displaying a "This site may be compromised" warning in our search results:
We want to give webmasters the necessary information to help them clean up their sites as quickly as possible. If you've verified your site in Webmaster Tools we'll also send you a message when we've identified your site has been hacked, and when possible give you example URLs.
Occasionally, your site may become compromised to facilitate the distribution of malware. When we recognize that, we'll identify the site in our search results with a label of "This site may harm your computer" and browsers such as Chrome may display a warning when users attempt to visit. In some cases, we may share more specific information in the Malware section of Webmaster Tools. We also have
specific tips for preventing and removing malware from your site
in our Help Center.
Two common ways malicious third-parties may compromise your site are the following:
Injected Content
Hackers may attempt to influence search engines by injecting links leading to sites they own. These links are often hidden to make it difficult for a webmaster to detect this has occurred. The site may also be compromised in such a way that the content is only displayed when the site is visited by search engine crawlers.
Example of injected pharmaceutical content
If we're able to detect this, we'll send a message to your Webmaster Tools account with useful details. If you suspect your site has been compromised in this way, you can check the content your site returns to Google by using the
Fetch as Google
tool. A few good places to look for the source of such behavior of such a compromise are .php files, template files and CMS plugins.
Redirecting Users
Hackers might also try to redirect users to spammy or malicious sites. They may do it to all users or target specific users, such as those coming from search engines or those on mobile devices. If you're able to access your site when visiting it directly but you experience unexpected redirects when coming from a search engine, it's very likely your site has been compromised in this manner.
One of the ways hackers accomplish this is by modifying server configuration files (such as Apache's .htaccess) to serve different content to different users, so it's a good idea to check your server configuration files for any such modifications.
This malicious behavior can also be accomplished by injecting JavaScript into the source code of your site. The JavaScript may be designed to hide its purpose so it may help to look for terms like "eval", "decode", and "escape".
Cleanup and Prevention
If your site has been compromised, it's important to not only clean up the changes made to your site but to also address the vulnerability that allowed the compromise to occur. We have instructions for
cleaning your site
preventing compromises
while your hosting provider and our
Malware and Hacked sites
forum are great resources if you need more specific advice.
Once you've cleaned up your site you should submit a
reconsideration request
that if successful will remove the warning label in our search results.
As always, if you have any questions or feedback, please tell us in the
Webmaster Help Forum
Adding OAuth 2.0 support for IMAP/SMTP and XMPP to enhance auth security
September 17, 2012
Posted by Ryan Troll, Application Security Team
(Cross-posted from the
Google Developers Blog
Our users and developers take password security seriously and so do we. Passwords alone have weaknesses we all know about, so we're working over the long term to support additional mechanisms to help protect user information. Over a year ago,
we announced
a recommendation that
OAuth 2.0
become the standard authentication mechanism for our APIs so you can make the safest apps using Google platforms. You can use OAuth 2.0 to build clients and websites that securely access account data and work with our advanced security features, such as
2-step verification
. But our commitment to OAuth 2.0 is not limited to web APIs. Today we're going a step further by adding OAuth 2.0 support for
. Developers using these protocols can now move to OAuth 2.0, and users will experience the benefits of more secure OAuth 2.0 clients.
When clients use OAuth 2.0, they never ask users for passwords. Users have tighter control over what data clients have access to, and clients never see a user's password, making it much harder for a password to be stolen. If a user has their laptop stolen, or has any reason to believe that a client has been compromised, they can revoke the client's access without impacting anything else that has access to their data.
We are also announcing the deprecation of older authentication mechanisms. If you're using these you should move to the new OAuth 2.0 APIs.
We are deprecating
XOAUTH for IMAP/SMTP
, as it uses
OAuth 1.0a, which was previously deprecated
. Gmail will continue to support XOAUTH until OAuth 1.0a is shut down, at which time support will be discontinued.
We are also deprecating X-GOOGLE-TOKEN and
for XMPP, as they either accept passwords or rely on
the previously deprecated ClientLogin
. These mechanisms will continue to be supported until ClientLogin is shut down, at which time support for both will be discontinued.
Our team has been working hard since we announced our support of OAuth in 2008 to make it easy for you to create applications that use more secure mechanisms than passwords to protect user information. Check out the
Google Developers Blog
for examples, including the
OAuth 2.0 Playground
Service Accounts
, or see
Using OAuth 2.0 to Access Google APIs
Content hosting for the modern web
August 29, 2012
Posted by Michal Zalewski, Security Team
Our applications host a variety of web content on behalf of our users, and over the years we learned that even something as simple as serving a profile image can be surprisingly fraught with pitfalls. Today, we wanted to share some of our findings about content hosting, along with the approaches we developed to mitigate the risks.
Historically, all browsers and browser plugins were designed simply to excel at displaying several common types of web content, and to be tolerant of any mistakes made by website owners. In the days of static HTML and simple web applications, giving the owner of the domain authoritative control over how the content is displayed wasn't of any importance.
It wasn't until the mid-2000s that we started to notice a problem: a clever attacker could manipulate the browser into interpreting seemingly harmless images or text documents as HTML, Java, or Flash—thus gaining the ability to execute malicious scripts in the
security context
of the application displaying these documents (essentially, a
cross-site scripting flaw
). For all the increasingly sensitive web applications, this was very bad news.
During the past few years, modern browsers began to improve. For example, the browser vendors limited the amount of second-guessing performed on text documents, certain types of images, and unknown MIME types. However, there are many standards-enshrined design decisions—such as ignoring MIME information on any content loaded through
, or
—that are much more difficult to fix; these practices may lead to vulnerabilities similar to the
GIFAR bug
Google's security team played an active role in investigating and remediating many content sniffing vulnerabilities during this period. In fact, many of the enforcement proposals were first prototyped in Chrome. Even still, the overall progress is slow; for every resolved problem, researchers discover a previously unknown flaw in another browser mechanism. Two recent examples are the Byte Order Mark (BOM) vulnerability reported to us by Masato Kinugawa, or the
MHTML attacks
that we have seen happening in the wild.
For a while, we focused on content sanitization as a possible workaround - but in many cases, we found it to be insufficient. For example, Aleksandr Dobkin managed to construct a purely alphanumeric Flash applet, and in our internal work the Google security team created images that can be forced to include a particular plaintext string in their body, after being scrubbed and recoded in a deterministic way.
In the end, we reacted to this raft of content hosting problems by placing some of the high-risk content in separate, isolated
web origins
—most commonly
. There, the "sandboxed" files pose virtually no threat to the applications themselves, or to google.com authentication cookies. For public content, that's all we need: we may use random or user-specific subdomains, depending on the degree of isolation required between unrelated documents, but otherwise the solution just works.
The situation gets more interesting for non-public documents, however. Copying users' normal authentication cookies to the "sandbox" domain would defeat the purpose. The natural alternative is to move the secret token used to confer access rights from the
header to a value embedded in the URL, and make the token unique to every document instead of keeping it global.
While this solution eliminates many of the
significant design flaws
associated with HTTP cookies, it trades one imperfect authentication mechanism for another. In particular, it's important to note there are more ways to accidentally leak a capability-bearing URL than there are to accidentally leak cookies; the most notable risk is disclosure through the
header for any document format capable of including external subresources or of linking to external sites.
In our applications, we take a risk-based approach. Generally speaking, we tend to use three strategies:
In higher risk situations (e.g. documents with elevated risk of URL disclosure), we may couple the URL token scheme with short-lived, document-specific cookies issued for specific subdomains of
. This mechanism, known within Google as
, relies on a range of attack mitigation strategies that are too disruptive for Google applications at large, but work well in this highly constrained use case.
In cases where the risk of leaks is limited but responsive access controls are preferable (e.g., embedded images), we may issue URLs bound to a specific user, or ones that expire quickly.
In low-risk scenarios, where usability requirements necessitate a more balanced approach, we may opt for globally valid, longer-lived URLs.
Of course, the research into the security of web browsers continues, and the landscape of web applications is evolving rapidly. We are constantly tweaking our solutions to protect Google users even better, and even the solutions described here may change. Our commitment to making the Internet a safer place, however, will never waver.
Safe Browsing - Protecting Web Users for 5 Years and Counting
June 19, 2012
Posted by Niels Provos, Security Team
It's been five years since we officially announced
malware and phishing protection
via our Safe Browsing effort. The goal of Safe Browsing is still the same today as it was five years ago: to protect people from malicious content on the Internet. Today, this protection extends not only to Google's search results and ads, but also to popular web browsers such as Chrome, Firefox and Safari.
To achieve comprehensive and timely detection of new threats, the Safe Browsing team at Google has labored continuously to adapt to rising challenges and to build an infrastructure that automatically detects harmful content around the globe.
For a quick sense of the scale of our effort:
We protect 600 million users through built-in protection for Chrome, Firefox, and Safari, where we show several million warnings every day to Internet users.
You may have seen our telltale red warnings pop up — when you do, please don't go to sites we've flagged for malware or phishing. Our free and public
Safe Browsing API
allows other organizations to keep their users safe by using the data we've compiled.
We find about 9,500 new malicious websites every day.
These are either innocent websites that have been compromised by malware authors, or others that are built specifically for malware distribution or phishing. While we flag many sites daily, we strive for high quality and have had only a handful of false positives.
Approximately 12-14 million Google Search queries per day show our warning
to caution users from going to sites that are currently compromised. Once a site has been cleaned up, the warning is lifted.
We provide malware warnings for about 300 thousand downloads per day
through our
download protection service
for Chrome.
We send thousands of notifications daily to webmasters.
Signing up with
Webmaster Tools
helps us communicate directly with webmasters when we find something on their site, and our ongoing partnership with
helps webmasters who can't sign up or need additional help.
We also send thousands of notifications daily to Internet Service Providers (ISPs) &
to help them keep their networks clean.
Network administrators can sign up
to receive frequent alerts.
By protecting Internet users, webmasters, ISPs, and Google over the years, we've built up a steadily more sophisticated understanding of web-based malware and phishing. These aren't completely solvable problems because threats continue to evolve, but our technologies and processes do, too.
From here we'll try to hit a few highlights from our journey.
Many phishers go right for the money, and that pattern is reflected in the continued heavy targeting of online commerce sites like eBay & PayPal. Even though we're still seeing some of the same techniques we first saw 5+ years ago, since they unfortunately still catch victims, phishing attacks are also getting more creative and sophisticated. As they evolve, we improve our system to catch more and newer attacks (Chart 1). Modern attacks are:
- Many phishing webpages (URLs) remain online for less than an hour in an attempt to avoid detection.
More diverse
- Targeted "spear phishing" attacks have become increasingly common. Additionally, phishing attacks are now targeting companies, banks, and merchants globally (Chart 2).
Used to distribute malware
- Phishing sites commonly use the look and feel of popular sites and social networks to trick users into installing malware. For example, these rogue sites may ask to install a binary or browser extension to enable certain fake content.
(Chart 1)
(Chart 2)
Safe Browsing identifies two main categories of websites that may harm visitors:
Legitimate websites that are compromised in large numbers so they can deliver or redirect to malware (Chart 3).
Attack websites that are specifically built to distribute malware are used in increasing numbers (Chart 4).
When a legitimate website is compromised, it's usually modified to include content from an attack site or to redirect to an attack site. These attack sites will often deliver "
Drive by downloads
" to visitors. A drive by download exploits a vulnerability in the browser to execute a malicious program on a user's computer without their knowledge.
Drive by downloads install and run a variety of malicious programs, such as:
Spyware to gather information like your banking credentials.
Malware that uses your computer to send spam.
(Chart 3)
Attack sites are purposely built for distributing malware and try to avoid detection by services such as Safe Browsing. To do so, they adopt several techniques, such as rapidly changing their location through free web hosting, dynamic DNS records, and automated generation of new domain names (Chart 4).
(Chart 4)
As companies have designed browsers and plugins to be more secure over time, malware purveyors have also employed social engineering, where the malware author tries to deceive the user into installing malicious software without the need for any software vulnerabilities. A good example is a "Fake Anti-Virus" alert that masquerades as a legitimate security warning, but it actually infects computers with malware.
While we see socially engineered attacks still trailing behind drive by downloads in frequency, this is a fast-growing category likely due to improved browser security.
How can you help prevent malware and phishing?
Our system is designed to protect users at high volumes (Chart 5), yet here are a few things that you can do to help:
Don't ignore our warnings.
Legitimate sites are commonly modified to contain malware or phishing threats until the webmaster has cleaned their site. Malware is often designed to not be seen, so you won't know if your computer becomes infected. It's best to wait for the warning to be removed before potentially exposing your machine to a harmful infection.
Help us find bad sites.
Chrome users can select the check box on the red warning page. The data sent to us helps us find bad sites more quickly and helps protect other users.
Register your website
Google Webmaster Tools
. Doing so helps us inform you quickly if we find suspicious code on your website at any point.
(Chart 5)
Looking Forward
The threat landscape changes rapidly. Our adversaries are highly motivated by making money from unsuspecting victims, and at great cost to everyone involved.
Our tangible impact in making the web more secure and our ability to directly protect users from harm has been a great source of motivation for everyone on the Safe Browsing team. We are also happy that our free data feed has become the de facto base of comparison for academic research in this space.
As we look forward, Google continues to invest heavily in the Safe Browsing team, enabling us to counter newer forms of abuse. In particular, our team supplied the technology underpinning these recent efforts:
phishing detection and download protection
within the Chrome browser
Chrome extension malware scanning
Android application protection
For their strong efforts over the years, I thank Panayiotis Mavrommatis, Brian Ryner, Lucas Ballard, Moheeb Abu Rajab, Fabrice Jaubert, Nav Jagpal, Ian Fette, along with the whole Safe Browsing Team.
Microsoft XML vulnerability under active exploitation
June 12, 2012
Posted by Andrew Lyons, Security Engineer
Today Microsoft issued a
Security Advisory
describing a vulnerability in the Microsoft XML component. We discovered this vulnerability—which is leveraged via an uninitialized variable—being actively exploited in the wild for targeted attacks, and we reported it to Microsoft on May 30th. Over the past two weeks, Microsoft has been responsive to the issue and has been working with us. These attacks are being distributed both via malicious web pages intended for Internet Explorer users and through Office documents. Users running Windows XP up to and including Windows 7 are known to be vulnerable.
As part of the advisory, Microsoft suggests installing a
Fix it solution
that will prevent the exploitation of this vulnerability. We strongly recommend Internet Explorer and Microsoft Office users immediately install the Fix it while Microsoft develops and publishes a final fix as part of a future advisory.
Security warnings for suspected state-sponsored attacks
June 5, 2012
Posted by Eric Grosse, VP Security Engineering
We are constantly on the lookout for malicious activity on our systems, in particular attempts by third parties to log into users' accounts unauthorized. When we have specific intelligence—either directly from users or from our own monitoring efforts—we show clear warning signs and put in place extra roadblocks to thwart these bad actors.
Today, we're taking that a step further for a subset of our users, who we believe may be the target of state-sponsored attacks. You can see what this new warning looks like here:
If you see this warning it does not necessarily mean that your account has been hijacked. It just means that we believe you may be a target, of phishing or malware for example, and that you should take immediate steps to secure your account. Here are some things you should do immediately: create a unique password that has a good mix of capital and lowercase letters, as well punctuation marks and numbers; enable 2-step verification as additional security; and update your browser, operating system, plugins, and document editors. Attackers often send links to fake sign-in pages to try to steal your password, so be careful about where you sign in to Google and look for
in your browser bar. These warnings are not being shown because Google's internal systems have been compromised or because of a particular attack.
You might ask how we know this activity is state-sponsored. We can't go into the details without giving away information that would be helpful to these bad actors, but our detailed analysis—as well as victim reports—strongly suggest the involvement of states or groups that are state-sponsored.
We believe it is our duty to be proactive in notifying users about attacks or potential attacks so that they can take action to protect their information. And we will continue to update these notifications based on the latest information.
Notifying users affected by the DNSChanger malware
May 22, 2012
Posted by Damian Menscher, Security Engineer
Starting today we're undertaking an effort to notify roughly half a million people whose computers or home routers are infected with a well-publicized form of malware known as DNSChanger. After successfully alerting a million users
last summer
to a different type of malware, we've replicated this method and have started showing warnings via a special message that will appear at the top of the Google search results page for users with affected devices.
Domain Name System
(DNS) translates familiar web address names like google.com into a numerical address that computers use to send traffic to the right place. The DNSChanger malware modifies DNS settings to use malicious servers that point users to fake sites and other harmful locations. DNSChanger attempts to modify the settings on home routers as well, meaning other computers and mobile devices may also be affected.
Since the FBI and Estonian law enforcement arrested a group of people and transferred control of the rogue DNS servers to the Internet Systems Consortium in November 2011, various ISPs and other groups have attempted to alert victims. However, many of these campaigns have had limited success because they could not target the affected users, or did not appear in the user's preferred language (only half the affected users speak English as their primary language). At the current disinfection rate hundreds of thousands of devices will still be infected when the court order expires on July 9th and the replacement DNS servers are shut down. At that time, any remaining infected machines may experience slowdowns or completely lose Internet access.
Our goal with this notification is to raise awareness of DNSChanger among affected users. We believe directly messaging affected users on a trusted site and in their preferred language will produce the best possible results. While we expect to notify over 500,000 users within a week, we realize we won't reach every affected user. Some ISPs have been taking their own actions, a few of which will prevent our warning from being displayed on affected devices. We also can't guarantee that our recommendations will always clean infected devices completely, so some users may need to seek additional help. These conditions aside, if more devices are cleaned and steps are taken to better secure the machines against further abuse, the notification effort will be well worth it.
Spurring more vulnerability research through increased rewards
April 23, 2012
Posted by Adam Mein and Michal Zalewski, Security Team
recently marked
the anniversary of our
Vulnerability Reward Program
, possibly the first permanent program of its kind for web properties. This collaboration with the security research community has far surpassed our expectations: we have received over 780 qualifying vulnerability reports that span across the hundreds of Google-developed services, as well as the software written by fifty or so companies that we have acquired. In just over a year, the program paid out around $460,000 to roughly 200 individuals. We're confident beyond any doubt the program has made Google users safer.
Today, to celebrate the success of this effort and to underscore our commitment to security, we are rolling out
updated rules
for our program — including new reward amounts for critical bugs:
for qualifying vulnerabilities that the reward panel determines will allow code execution on our production systems.
for SQL injection and equivalent vulnerabilities; and for certain types of information disclosure, authentication, and authorization bypass bugs.
Up to
for many types of XSS, XSRF, and other high-impact flaws in highly sensitive applications.
To help focus the research on bringing the greatest benefit to our users, the new rules offer reduced rewards for vulnerabilities discovered in non-integrated acquisitions and for lower risk issues. For example, while every flaw deserves appropriate attention, we are likely to issue a higher reward for a cross-site scripting vulnerability in
Google Wallet
than one in
Google Art Project
, where the potential risk to user data is significantly smaller.
Happy hunting - and if you find a security problem, please
let us know
An improved Google Authenticator app to celebrate millions of 2-step verification users
March 30, 2012
Posted by Sara "Scout" Sinclair, Associate Product Manager, Google Security Team
Since we first made 2-step verification available to
all Google users
in February of 2011, millions of people around the world have chosen to use this extra layer of security to protect their Google Accounts. Thousands more are signing up every day. And recently, we updated the feature's companion smartphone app,
Google Authenticator
, for Android users.
2-step verification works by requiring users to enter a verification code when signing in using a computer they haven't previously marked as "
." Many users choose to receive their codes via SMS or voice call, but smartphone users also have the option to generate codes on their phone by
installing the Google Authenticator app
— an option that is particularly useful while traveling, or where cellular coverage is unreliable. You can use Google Authenticator to generate a valid code even when your phone isn't connected to a cellular or data network.
We want 2-step verification to be simple to use, and therefore we are working continually to make it easier for users to sign up, manage their settings, and maintain easy access to their verification codes at any time and from anywhere. Our updated Google Authenticator app has an improved look-and-feel, as well as fundamental upgrades to the back-end security and infrastructure that necessitated the migration to a new app. Future improvements, however, will use the familiar Android update procedure.
Current Google Authenticator users will be prompted to upgrade to the new version when they launch the app. We've worked hard to make the upgrade process as smooth as possible, but if you have questions please refer to the
Help Center article
for more information. And, if you aren't already a 2-step verification user, we encourage you to
give it a try
Celebrating one year of web vulnerability research
February 9, 2012
Posted by Adam Mein, Technical Program Manager, Google Security Team
In November 2010, we
a different kind of vulnerability reward program that encourages people to find and report security bugs in Google's web applications. By all available measures, the program has been a big success. Before we embark further, we wanted to pause and share a few things that we've learned from the experience.
"Bug bounty" programs open up vulnerability research to wider participation.
On the morning of our announcement of the program last November, several of us guessed how many valid reports we might see during the first week. Thanks to an already successful
Chromium reward program
and a healthy stream of regular contributions to our
general security submissions
queue, most estimates settled around 10 or so. At the end of the first week, we ended up with 43 bug reports. Over the course of the program, we've seen more than 1100 legitimate issues (ranging from low severity to higher)
reported by over 200 individuals
, with 730 of those bugs qualifying for a reward. Roughly half of the bugs that received a reward were discovered in software written by approximately 50 companies that Google acquired; the rest were distributed across applications developed by Google (several hundred new ones each year). Significantly, the vast majority of our initial bug reporters had never filed bugs with us before we started offering monetary rewards.
Developing quality bug reports pays off... for everyone.
A well-run vulnerability reward program attracts high quality reports, and we've seen a whole lot of them. To date we've paid out over $410,000 for web app vulnerabilities to directly support researchers and their efforts. Thanks to the generosity of these bug reporters, we have also donated $19,000 to charities of their choice. It's not all about money, though. Google has gotten better and stronger as a result of this work. We get more bug reports, which means we get more bug fixes, which means a safer experience for our users.
Bug bounties — the more, the merrier!
We benefited from looking at
of other types of vulnerability reward programs when designing our own. Similarly, in the months following our reward program kick-off, we saw
developing reward programs and starting to
focus more on web properties
. Over time, these programs can help companies build better relationships with the security research community. As the model replicates, the opportunity to improve the overall security of the web broadens.
And with that, we turn toward the year ahead. We're looking forward to new reports and ongoing relationships with the researchers who are helping make Google products more secure.
Android and Security
February 2, 2012
Posted by Adrian Ludwig, Android Security Engineer
We frequently get asked about how we defend Android users from malware and other threats. As the Android platform continues its tremendous growth, people wonder how we can maintain a trustworthy experience with Android Market while preserving the openness that remains a hallmark of our overall approach. We've been working on lots of defenses, and they have already made a real and measurable difference for our users' security. Read more about how we defend against malware in Android Market on the Google Mobile Blog
Landing another blow against email phishing
January 30, 2012
(Cross-posted from the
Gmail Blog
Posted by Adam Dawes, Product Manager
Email phishing, in which someone tries to trick you into revealing personal information by sending fake emails that look legitimate, remains one of the biggest online threats. One of the most popular methods that scammers employ is something called
domain spoofing
. With this technique, someone sends a message that seems legitimate when you look at the "From" line even though it's actually a fake. Email phishing is costing regular people and companies millions of dollars each year, if not more, and in response, Google and other companies have been talking about how we can move beyond the solutions we've developed individually over the years to make a real difference for the whole email industry.
Industry groups come and go, and it's not always easy to tell at the beginning which ones are actually going to generate good solutions. When the right contributors come together to solve real problems, though, real things happen. That's why we're particularly optimistic about
today's announcement
of DMARC.org, a passionate collection of companies focused on significantly cutting down on email phishing and other malicious mail.
Building upon the work of previous mail authentication standards like
, DMARC is responding to domain spoofing and other phishing methods by creating a standard protocol by which we'll be able to measure and enforce the authenticity of emails. With DMARC, large email senders can ensure that the email they send is being recognized by mail providers like Gmail as legitimate, as well as set policies so that mail providers can reject messages that try to spoof the senders' addresses.
We've been active in the leadership of the DMARC group for almost two years, and now that Gmail and several other large mail senders and providers — namely Facebook, LinkedIn, and PayPal — are actively using the DMARC specification, the road is paved for more members of the email ecosystem to start getting a handle on phishing. Our recent data indicates that roughly 15% of non-spam messages in Gmail are already coming from domains protected by DMARC, which means Gmail users like you don't need to worry about spoofed messages from these senders. The phishing potential plummets when the system just works, and that's what DMARC provides.
If you're a large email sender and you want to try out the DMARC specification, you can learn more at the
DMARC website
. Even if you're not ready to take on the challenge of authenticating all your outbound mail just yet, there's no reason to not sign up to start receiving reports of mail that fraudulently claims to originate from your address. With further adoption of DMARC, we can all look forward to a more trustworthy overall experience with email.
Tech tips that are Good to Know
January 17, 2012
Posted by Alma Whitten, Director of Privacy, Product and Engineering
(Cross-posted from the
Official Google Blog
Does this person sound familiar? He can't be bothered to type a password into his phone every time he wants to play a game of Angry Birds. When he does need a password, maybe for his email or bank website, he chooses one that's easy to remember like his sister's name—and he uses the same one for each website he visits. For him, cookies come from the bakery, IP addresses are the locations of Intellectual Property and a correct Google search result is basically magic.
Most of us know someone like this. Technology can be confusing, and the industry often fails to explain clearly enough why digital literacy matters. So today in the U.S. we're kicking off
Good to Know
, our biggest-ever consumer education campaign focused on making the web a safer, more comfortable place. Our ad campaign, which we introduced in the U.K. and Germany last fall, offers privacy and security tips: Use
2-step verification
! Remember to lock your computer when you step away! Make sure your connection to a website is
! It also
some of the building blocks of the web like cookies and IP addresses. Keep an eye out for the ads in newspapers and magazines, online and in New York and Washington, D.C. subway stations.
The campaign and
Good to Know website
build on our commitment to keeping people safe online. We've created resources like
privacy videos
, the
Google Security Center
, the
Family Safety Center
Teach Parents Tech
to help you develop strong privacy and security habits. We design for privacy, building tools like
Google Dashboard
Me on the Web
, the
Ads Preferences Manager
Google+ Circles
—with more on the way.
We encourage you to take a few minutes to check out the
Good to Know site
, watch
, and be on the lookout for ads in your favorite newspaper or website. We hope you'll learn something new about how to protect yourself online—tips that are always good to know!
: Updated to include more background on Good to Know.
#supplychain #security #opensource
android security
android tr
app security
big data
chrome enterprise
chrome security
connected devices
federated learning
google play
google play protect
iot security
linux kernel
memory safety
Open Source
pha family highlights
private compute core
security rewards program
supply chain
targeted spyware
Titan M2
Follow @google
Give us feedback in our
Product Forums


text: Abby's Custom Bridal, Wedding Inspiration Mardi Gras Inspiration June 17, 2015 No Comments XoXo Abby Loves Previous Post Next Post Abby Loves Abby Shepard's a narrative fashion & lifestyle illustrator who works from a studio-nook in Jamaica Plain. She creates custom illustrations, products and designs which include custom wedding services. You may also like October 5, 2012 Post Wedding Bliss, Garnick + Moore Photography December 8, 2012 It's a'boot time brides wore boots – ReBLOG June 7, 2016 Art Deco & Gatsby Bliss! Leave a Reply Cancel replyYour email address will not be published. Required fields are marked *Comment * Name * Email * Website Save my name, email, and website in this browser for the next time I comment. Δ

subset: commoncrawl


text:
On October 10th 2015, Dr. Phillip W. Serna was interviewed on WWFM Classical's current-events program A Tempo with Rachel Katz discussing his outreach program 'Viols in Our Schools.' During the program, Dr. Serna also discussed New Comma Baroque, the Spirit of Gambo – a Chicago Consort of Viols, Adlai E. Stevenston High School's Baroque Ensemble & Viol Consort, as well as endeavors to expand access to viols at Naperville North High School thanks to the VdGSA's consort loan program.
From WWFM Classical's A Tempo with Rachel Katz:
Guests: Phillip W. Serna, Founder, Viols in our Schools; Jason Tramm, Artistic Director, Mid-Atlantic Opera."
To download the interview, click here. For more information about A Tempo with Rachel Katz, visit http://www.wwfm.org/webcasts_katz.shtml. For Viols in Our Schools, please visit http://www.violsinourschools.org/.
The photo above was taken by photographer Alex Belisle.


text:
We've been teaching our oldest son Peter that he's a big brother to our younger son Jeremy. When Peter learned that Joseph Smith also had a big brother, he fell in love with the concept. Now whenever we go somewhere church-related, he asks, "Will there be a picture of Joseph and Hyrum?"
By Robert Gibbons
This picture is part of our ongoing series highlighting Mormon images. Comments to the post are welcome; all comments should be respectful. In addition we invite you to submit your own images to the Mormon Image series. Other images in the series can be found here. Rules and instructions, including submissions guidelines, can be found here.


text:
It would not be a proper Geek Week without a day focusing on gaming, and that's what today is at YouTube Geek Week, Gaming Thursday. To introduce today's festivities, please welcome to the stage Machinima Senior Director of Original Programming Jeremy Azevedo:
The classic interpretation of the âgamerâ in mainstream media has for too long been unfairly and erroneously depicted as an overweight, energy-drink guzzling, cheeto-stained, pasty dork creeping around their parentâs basement, gleefully unleashing vitriolic hatred on the greater Internet community.
At Machinima, we were one of the first to offer a genuine counter-argument to that stereotype, and to instead highlight the incredible passion, the raw talent and the sheer unbridled creativity of the gaming community.
To us, the word âgamerâ almost holds no meaning⦠itâs the equivalent to calling someone a âmusic listenerâ or a âmovie watcherâ. Everyone does it! Thatâs why itâs so great to see the recent mainstream acceptance of gaming in popular culture, and to be a part of the Geek Week celebration that is âGaming Dayâ.
After years of bringing you the best industry news with Inside Gaming and ETC, the best fan films and animation with Machinima and Happy Hour, the best gameplay with Respawn and Realm, and even mainstream online live action digital series like Mortal Kombat: Legacy and Halo: Forward Unto Dawn, we are proud to continue our legacy of sharing with the world our vision of gaming as a the preeminent pop cultural touch-point of a generation.
For âGaming Dayâ, weâve pulled together the best of the best gaming themed videos for your viewing pleasure. Make sure to check out the hand full of playlists today on YouTube!
And just when you think it couldnât get any better, weâve created a brand new original video specially made for âGaming Dayâ, starring all your favorite YouTube gaming stars including Seannaners, Syndicate, iJustine, Eric Pumphrey (The Online Gamer) and many other surprise guests, with original music by top EDM rising star and self-proclaimed Machinima fan Cole Plante.
Check out Let's Play IRL: Battle of the YouTube Gamers here:
Nothing we do, however, is worthwhile without you; the viewers, the creators, the commenters, the filmmakers, the fans, the haters, even the imitators. You are who we do this for, and itâs an honor to be a part of it with you.
And fellow Ambassador for the day Polaris has this video in which some of their personalities tell how they got into gaming and how it's brought them closer to other people, animated in an particularly appropriate manner:
Hey, since it's Gaming Thursday, let's watch the opening episode of Season 2 of Freddie Wong's Video Game High School again, OK? Here:
From Cartoon Network's Regular Show, Mordecai and Rigby team up to win the Maximum Glove. Are they ready to be MAXIMIZED? Oh, yes:
In a pretty epic video, Corridor Digital shows us the origin of the Gravity Gun:
Go on an epic journey with the Yogscast crew in the kickoff to the journey of a lifetime, Yogsquest:
IGN is back, with Colin Moriarty and Ryan McCaffrey talking about where we stand with PS4 and Xbox One:
Nerd Alert interviews Ivan Van Norman in a new segment called Player 2:
Cracked's Today's Topic explains why violent video games don't cause violence themselves… or… well, how real do you want your games to be?:
And any resemblance between this video from Brental Floss and Schoolhouse Rock are purely….:
The Nerdist Channel's contributions include the first two episodes of COPS: Skyrim, Season 3 and, coming shortly, a new episode of Effinfunny's Game Off. And there's more YouTube Geek Week to come, so stick around….


text: AF awards contract for next Air Force One Published Jan. 29, 2016 By Secretary of the Air Force Public Affairs WASHINGTON (AFNS) -- The Boeing Company was awarded a contract Jan. 29 for risk reduction activities for the Presidential Aircraft Recapitalization program, which will field the next Air Force One. This is the first contract the Air Force has awarded for this program. Additional modifications will be made to this contract in the future to purchase the commercial 747-8 aircraft, as well as to design, modify and test those aircraft to meet the presidential mission. These efforts are the first step in a deliberate process to control program risks and life cycle costs. These activities will include the definition of detailed requirements and design trade-offs required to support informed decisions that will lead to a lower risk Engineering and Manufacturing Development program and lower life cycle costs. "This is the start of our contractual relationship with Boeing. It will allow Boeing to begin working on what will be the next Air Force One," said Col. Amy McCain, the Presidential Aircraft Recapitalization program manager. "This initial effort is about reducing risk, really understanding where the tough work will be, finding affordability opportunities, and getting the best value for the taxpayer, while continuing to meet the needs of our commander in chief." The secretary of the Air Force has made it clear that affordability will be a key element of the Presidential Aircraft Recapitalization program. "We will continue to insist upon program affordability through cost conscious procurement practices," said Secretary of the Air Force Deborah Lee James. "The presidential aircraft is one of the most visible symbols of the United States of America at home and abroad," James said. "We will ensure the next Air Force One meets the necessary capabilities established to execute the presidential support mission, while reflecting the office of the president of the United States of America consistent with the national public interest." The Air Force wants to own enough of the technical baseline to permit competition for modifications and sustainment throughout the aircraft's planned 30-year life cycle. Competition can keep costs down, spur innovation and provide technical options. "We are focused on ensuring this program is affordable," McCain said. "This contract gets us started on determining how to modify a 747-8 to become the next Air Force One, and finding opportunities for cost reduction through detailed requirements choices, competition of subsystems, and in the sustainment of the aircraft after it has been fielded." "The current fleet of VC-25A presidential aircraft has performed exceptionally well, a testament to the Airmen who support, maintain and fly the aircraft," James said. "Yet, it is time to replace them. Parts obsolescence, diminishing manufacturing sources and increased down times for maintenance are existing challenges that will increase until a new aircraft is fielded."


text:
Search will open in a new window.
Gol Ski Resort Transfers
Transfer Times to Gol from various Airports
Time | |
Oslo Airport (OSL) transfers to Gol | 2 hr 50 mins |
Fagernes Airport (VDB) transfers to Gol | 1 hr |
Note:- Resort transfer times to and from Gol are approximate dry road timings and subject to weather and traffic conditions. A hire car on a clear, dry road may be slightly quicker; a transfer bus in a queue on a snowy road may take significantly longer. Allow plenty of time to make sure you catch your flight!


text:
'Jurassic Park' and 'The Shining' Added to the National Film Registry
It's time for the annual additions to the National Film Registry. Every year, the Library of Congress adds 25 American titles to its collection for their "cultural, social or aesthetic significance," in order to preserve these important films for eternity. I don't see Aquaman on this year's list for some reason. Maybe it was released too late in the year? 2019 for sure!
In any event, 2018's collection is still a stellar batch of films. The two most famous titles are Jurassic Park, widely regarded as the finest blockbuster of the 1990s, and The Shining, Stanley Kubrick's endlessly examined horror classic. Other greats joining the National Film Registry today include Ang Lee's unforgettable Western romance Brokeback Mountain, Orson Welles' moody thriller The Lady From Shanghai, the brilliant Sam Fuller film noir Pickup on South Street, James L. Brooks' beloved rom-com Broadcast News, and Disney's timeless Cinderella.
Here's the full list of 2018 titles:
- Bad Day at Black Rock (1955)
- Broadcast News (1987)
- Brokeback Mountain (2005)
- Cinderella (1950)
- Days of Wine and Roses (1962)
- Dixon-Wanamaker Expedition to Crow Agency (1908)
- Eve's Bayou (1997)
- The Girl Without a Soul (1917)
- Hair Piece: A Film for Nappy-Headed People (1984)
- Hearts and Minds (1974)
- Hud (1963)
- The Informer (1935)
- Jurassic Park (1993)
- The Lady From Shanghai (1947)
- Leave Her to Heaven (1945)
- Monterey Pop (1968)
- My Fair Lady (1964)
- The Navigator (1924)
- On the Town (1949)
- One-Eyed Jacks (1961)
- Pickup on South Street (1953)
- Rebecca (1940)
- The Shining (1980)
- Smoke Signals (1998)
You can read more about these titles at the Film Registry's official site. Meanwhile, the Library of Congress can start clearing shelf space right now for the DCP of Aquaman that will be joining these esteemed canonical selections in 12 months. YEAYUHH!


text:
Vent valve instead of vent hole: With this particular option, the model PG43SA-S hygienic diaphragm pressure gauge is even ideal for pharmaceutical cleaning from the outside with particularly aggressive agents. The closed valve seals the inside of the pressure gauge relative to IP68 ingress protection. In this way, it prevents the penetration of cleaning media.
In the pharmaceutical industry, protecting substances and medicines from contamination is a priority. Therefore, thorough cleaning of the equipment after each batch is indispensable. However, its effectiveness depends critically on the concentration of the substances used and the amount of the temperatures.
Hygienic diaphragm pressure gauges such as the WIKA model PG43SA-S are ideal for monitoring the pressure of mobile tanks in the pharmaceutical industry.
Cleaning: Caustic soda and nitric acid
In various cases, the gear not merely undergoes cleaning on the process side (CIP, SIP), but also cleaning from the outside. This also pertains to a pharmaceutical company that uses the WIKA model PG43SA-S for pressure monitoring in mobile tanks. Here, the cleaning process is completed from the exterior at high temperatures sufficient reason for chemicals that have a significantly higher concentration. The media include, for instance, 30 percent30 % caustic soda and 60 percent60 % nitric acid ? both in diluted form. With one of these substances, the measuring instrument is cleaned from all sides in a cleaning system using nozzles.
During this operation, chemicals can enter the case of the pressure gauge through the vent hole. The materials of the measuring instrument can withstand the normal soap concentrations and temperatures. However, extremely aggressive substances, as in the application described, and/or high temperatures attack the inside of the pressure gauge as time passes. The consequence: The measuring instrument should be replaced.
WIKA diaphragm pressure gauge model PG43SA-S in the new version with vent valve: The sectional view shows the valve in open position. The safety ring is marked in red.
Pressure measurement with open valve
WIKA therefore addressed the question: How do the service life of the PG43SA-S be extended, even though cleaned from the exterior under extreme conditions? The solution: with a version with a vent valve. The closed valve (IP68) seals off the within of the instrument from cleaning substances. However, during its actual function, pressure monitoring, it must be open. Otherwise, correct measurement of the gauge pressure is impossible. This is due to internal pressure builds up in a closed case, which leads to a falsified measurement result.
Easy operability
The new vent valve is actually visible and mounted on top of the case for quick access. It might be opened or closed without tools with a wing nut. The direction of rotation, together with open and closed positions, are clearly marked on the case. The nut and the valve seal come in hygienic design. A safety ring prevents the valve from being unscrewed.
Sterilisation within an autoclave
Before every external cleaning, the vent valve is closed. The pressure gauge then comes with an ingress protection of IP68. If the cleaning process is followed by sterilisation within an autoclave, the valve must be opened again. As a result of the saturated steam conditions that occur there, internal pressure would otherwise also build up ? with negative consequences for the measuring instrument.
The model PG43SA-S diaphragm pressure gauge has been specifically made for a wide variety of sanitary applications. The brand new variant with vent valve and IP68 ingress protection has further extended the range of applications for the pressure gauge.
Further information on the model PG43SA-S hygienic pressure gauge along with other models of the PG43SA series can be found on the WIKA website. Would you like to buy hygienic pressure gauges? In our WIKA online-shop you will discover some o our standard designs. For those who have any questions on pressure gauge s with the IP68 ingress protection option, your contact will gladly help you.
See also our post
Pressure gauges for pharmaceutical processes: Flush-mounted ?dry measurement?


text:
Speedpress 8T Riveting Tool
Automatic air powered riveter designed to perform common riveting tasks in modern bodyshops on all aluminum, steel and combination/Hybrid body vehicles.
Click here to check out some of our new products!
Established in 1969, Wurth USA is a leading supplier of top-quality automotive chemicals, fasteners, hand tools & electrical supplies.


text:
The K240 MKII professional over-ear, semi-open headphones are a long-time standard in studios, in orchestras and on stages around the world. Its advanced Varimotion 30 mm XXL transducers deliver solid low end, accurate mids and crystal-clear highs. The semi-open design provides the airiness of open headphones with the powerful bass response of closed designs.
For more than three decades, professional engineers and musicians have made the K240 the most widely used headphones in studios and at live consoles around the world.


text:
In July of 2010, The Wall Street Journal coined The San Francisco Marathon® "The Race Even Marathoners Fear". Approximately 25,000 runners will flood the streets of San Francisco to take the ultimate challenge in the San Francisco Marathon, Half Marathon, and 5K events. Join the fun with your neighbors, companies, clubs, schools, teams, churches, or groups and celebrate with us!
Click here for more information!


text:
Highly concurrent networking library
Project description
Eventlet is a concurrent networking library for Python that allows you to change how you run your code, not how you write it.
It uses epoll or libevent for highly scalable non-blocking I/O. Coroutines ensure that the developer uses a blocking style of programming that is similar to threading, but provide the benefits of non-blocking I/O. The event dispatch is implicit, which means you can easily use Eventlet from the Python interpreter, or as a small part of a larger application.
It's easy to get started using Eventlet, and easy to convert existing applications to use it. Start off by looking at the examples, common design patterns, and the list of basic API primitives.
Quick Example
Here's something you can try right on the command line:
% python >>> import eventlet >>> from eventlet.green import urllib2 >>> gt = eventlet.spawn(urllib2.urlopen, 'http://eventlet.net') >>> gt2 = eventlet.spawn(urllib2.urlopen, 'http://secondlife.com') >>> gt2.wait() >>> gt.wait()
Getting Eventlet
The easiest way to get Eventlet is to use pip:
pip install eventlet
The development tip is available as well:
pip install 'eventlet==dev'
Building the Docs Locally
To build a complete set of HTML documentation, you must have Sphinx, which can be found at http://sphinx.pocoo.org/ (or installed with pip install Sphinx):
cd doc make html
The built html files can be found in doc/_build/html afterward.
Eventlet had Twisted hub in the past, but community interest to this integration has dropped over time, now it is not supported, so with apologies for any inconvenience we discontinue Twisted integration.
If you have a project that uses Eventlet with Twisted, your options are:
use last working release eventlet==0.14
start a new project with only Twisted hub code, identify and fix problems. As of eventlet 0.13, EVENTLET_HUB environment variable can point to external modules.
fork Eventlet, revert Twisted removal, identify and fix problems. This work may be merged back into main project.
Apologies for any inconvenience.
Project details
Release history Release notifications | RSS feed
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Hashes for eventlet-0.17.4-py2.py3-none-any.whl
Algorithm | Hash digest | |
SHA256 | f647ab6faeaa44df5d18caecdf424524f949ff8ba9cdee56096742f8acc15246 |
MD5 | e8baa04995f84c42842f44867e4573f5 |
BLAKE2b-256 | 3a4d28e823ad34bcdb16e9e036f73416c304067980b111df50f353c42835e797 |


text:
By Jenny Rankin
Boston Globe - Boston, Massachusetts, May 24, 2010
IN ROME this week, on a speck of an island in the Tiber River, Italians pause to celebrate an American they see as a heroine. In 1849, Margaret Fuller ran a hospital on that island where she ministered to Garibaldi's forces fighting the French.
There is even more reason over here to remember Fuller, who was born in Cambridge 200 years ago yesterday. Fuller is now seen as America's first female public intellectual. Fuller said women were constrained and diminished by a society that failed to see their true powers. She urged women to be all they could be. "Let them be sea captains" was her public cry - and a private credo. "Very early," she said, "I knew that the only object in life was to grow."
As a thinker and writer, Fuller is on a par with Ralph Waldo Emerson, Henry David Thoreau, and Bronson Alcott. Some called her arrogant and self-involved, while others said in Fuller's company they felt more truly "themselves" than ever before. Fuller drew out their deepest confidences.
She put her imprint on that distinctively American school of thought, transcendentalism. But, like so many women in history, she is overlooked and misunderstood to this day.
The oldest of nine children, Fuller was educated at home. She studied Latin at 6. By 12, she was winning prizes at Dr. Park's elite school for girls on Mt. Vernon Street, a tendency to compete that did not always make her popular with her peers. She inhaled books with a voracity rivaling that of her peer, Unitarian minister and abolitionist Theodore Parker. Unlike Parker, however, Fuller could not attend Harvard College. Nor could she become a Unitarian minister. As a bright and sometimes awkward teenager (a friend called her "bumptious"), she took her education into her own hands and drove herself hard. Determined to translate Goethe for an American audience, Fuller stayed up nights to learn German. Emerson praised her work, calling it "a beneficent action for which America will long thank you."
Fuller's father died when she was 25. She stepped in as head of the household and needed to earn money. She went to Concord to visit Emerson - the first of 14 visits over nine years. Alcott invited her to teach at his progressive school. Quickly, Fuller moved to the center of that circle of women and men, the transcendentalists, whose spiritual and intellectual energy was lighting the New England sky.
Years later, Emerson remembered vividly his first meeting with her. She had an unfortunate trick, he said, of rapidly opening and closing her eyes, but still, he told his brother, to be with someone so intelligent was "a great refreshment." "It is like being set in a large place. You stretch your limbs and dilate to your utmost size."
Fuller left New England, first for New York, working for Horace Greeley's New York Herald Tribune and publishing "Woman in the Nineteenth Century." While there, she had a brief but tortured relationship with New York businessman James Nathan. Fortunately, it didn't last. London and Paris were next.
Fuller, the first female foreign correspondent, sent home dispatches from prisons and factories, told of new trends in art and literature. In Rome, she found "the home of my soul" and also met Giovanni Ossoli when she got lost outside St. Peter's at twilight. They fell in love, and Fuller became pregnant and retreated to a hill town, Rieti, to give birth. Scholars surmise that she and Ossoli married at some point, but Fuller kept the baby a secret from all for more than a year.
As the Italian rebellion gained force in 1849, foreigners fled Rome. Not Fuller. She stayed to care for wounded patriots in her island hospital. During the siege, Fuller had left her infant son, Angelino, back in Rieti with a nurse.
This spring, I saw the holes made by French cannonballs in the old stone walls of Rome. I saw Fuller's hospital, and I stood on the ramparts that Garibaldi's men, including Ossoli, defended.
No trans-Atlantic ticket is required, however, to see evidence of Fuller's life in Massachusetts. Go to her Cherry Street birthplace in Cambridgeport, or to the Emerson house, in Concord, where, as they sipped tea, Fuller and friends talked out ideas that would change America.
Fuller's life was cut short when, sailing home from Italy, her ship - loaded with Carrera marble - hit a sandbar off Fire Island and went down. She, Ossoli and their 2-year-old son drowned. Emerson sent Thoreau the next day to look for her manuscript on the Italian Revolution. It was never found. All Thoreau brought back to Concord was a button from Ossoli's greatcoat.
Fuller was as human as any of us. She faced obstacles and had struggles. She knew how the limitations society put on women could be soul-killing. Yet she was a person of spiritual courage and an inspiration to American women who refused to be made smaller than they really were.
Jenny Rankin is minister at First Parish in Concord, Unitarian Universalist.
Reproduced with permission of the author.


text:
Stephen Petrina, Sandra Mathison & E. Wayne Ross
The convergence of the casualization, fragmentation, intensification, segmentation, shifting and creep of academic work with the post-9/11 gentrificaton of criticism and dissent is arguably one of the greatest threats to academic freedom since the Nazi elimination of the Jewish professoriate and critique in 1933, Bantu Education Act's reinforcement of apartheid in South Africa in 1952, and McCarthyism in Canada and the US in the 1950s and 1960s. In the history of education, this would be quite the claim yet the evidence seems to speak for itself. Academic work has been fragmented into piecemeal modes and intensified as academics absorbed, through amalgamation, traditional clerical staff and counseling work. The balance of the academic workforce has been reduced and casualized or segmented to an "at whim," insecure, unsalaried part-time labor pool, the 8-hour workday and 40-hour academic workweek collapsed to 60-80 hours, and the primary locus of academic work shifted off-campus as the workplace crept into the home and its communal establishments. Academic stress— manifested as burnout through amalgamation and creep of work, and as distress through bullying, mobbing and victimization— underwrites increases in leaves of absence. Non-tenure track faculty are hit particularly hard, indicating "contingency or the precariousness of their position" as relentless stressors.
Nowadays, it's whimsical to reminisce about work-life balance and promises that the academic workforce will be renewed as boomers retire with baited expectations, or that the workweek and workplace for salaried full-timers could be contained within the seduction of flextime and telecommuting. In many ways, the flexible workplace is the plan for boomers by boomers with both nest eggs and limits on retirement age breaking. As currency values, retirement portfolios, and savings spiral downward while dependent children and grandchildren and inflation spiral upward, incentives to retire erode. Precariously unemployed, underemployed and part-time academics aside, boomers still in the academic system are trended to face the biggest losses. As economic incentives to retire decrease, incentives for intellectual immortality and legacy management flourish with the boomers' political leanings moving toward the center. One can hardly blame them.
Enthusiasts of anything "flexible" (learning, space, time, work, etc.) and everything "tele" (commuting, conference, learning, phone, work, etc.), academics readily workshift with additional liability but no additional remuneration— instead is an unquestioned acceptance of the "overtime exemption"— while the employer saves about $6,500 per year per worker in the tradeoff as worksite or workspace shifts from campus to home. The academic workweek is now conservatively 60 hours with many PT and FT reporting persistent 70-80 hour weeks. Perhaps academic women can finally have it all after putting in the 120 hour workweek. One reason institutions now cope with many fewer FT hires is that academics are all too willing to do the work of two. As Gina Anderson found a decade ago, "with apparently unconscious irony, many academics reported that they particularly valued the flexibility of their working week, in terms of both time and space… in the same breath as reporting working weeks in the order of 60 hours." For most academic workers, the cost of flexibility is effectively a salary cut as overheads of electricity, heat, water, communication and consumables are shifted to the home. Carbon footprint reductions are a net benefit and for a minority, the savings of commuting and parking offset the costs of this homework or housework. What is the nature or implications of this increasing domestication of academic work and displacement of the academic workplace? For academic couples with or without children, the dynamics of housecohabitry, househusbandry or housewifery necessarily change as the academic workplace shifts and labor creeps into the home. With temptations to procrastinate on deluges of academic deadlines, academic homes have never been cleaner and more organized. Nevermind the technocreep of remote monitoring. Over the long run, although some administrators cling to the digital punch card and time stamp with Hivedesk, Worksnaps or MySammy, "smashing the clock" in the name of flextime and telework is about the best thing that ever happened to academic capitalism.
This is not exactly a SWOT analysis, where Strengths, Weaknesses, Opportunities and Threats are given due treatment. Rather, the focus is on this threat convergence as it resolves through historic displacements of the academic workplace and work. To what degree are the new policies for academic speech inscribed in academic work, regardless of where it's done? As the academic workplace is increasingly displaced and distributed, are academic policies displaced and distributed as well? Observed at work, monitored at home and tracked in between—these are not so much choices as the cold reality of 21st century academic work.
Read More: Threat Convergence


text:
Singer-Songwriter and music producer Shreya Jain's single Khoobi is out now!
October 18: We have seen an array of musical artists who have proved their prowess in the music industry. There's no doubt that the internet has discovered many potential names that are here to stay. Shreya Jain is one of the promising names in the music industry. She is a singer-songwriter and a music producer with roots in Nagpur.
The versatile singer made her singing debut in Bollywood with John Abraham, Jacqueline Fernandez and Rakul Preet's film 'Attack'. Shreya is now gearing up for the release of her forthcoming song 'Khoobi' which released on October 15, 2022. Giving a vibe of pop and electronic music with 'Khoobi', the song is written from a girl's perspective that falls for a guy's charm. It seems that the song will be an unusual love tale with modern music.
When asked if the song has any unique concept, Shreya stated that the story revolves around two lovers. Infusing upbeat tunes with a love angle, it would be interesting to see the song once it is out. Moreover, the music producer is excited about the song's release. "I have put in my best effort, and I cannot wait for everyone to witness the musical", she said.
Besides this, Shreya's love for music blossomed at the tender age of 5. Her father Shyam Jain is an acclaimed Hindustani Classical Vocalist. Taking cues from him, Shreya wants to establish her name as one of the leading singers in the global music industry. While she is qualified as an Interior Designer, Jain pursued a career as a full-time singer after completing her graduation. As Shreya made her foray into the music industry, she moved to Mumbai to fulfil her dreams.
Over the years, she has built a loyal fanbase of more than 1.6 million followers across social media. Not just this, but the supremely talented artist has performed in more than 500 countries in India and overseas. Her recent international performance was at Wembley Stadium in London. With 'Khoobi', the singer aims to inspire all the women wanting to make a successful career in music. Intending to make a place in everyone's hearts with pop music, Shreya Jain is working on several other projects which she will announce soon.
If you have any objection to this press release content, kindly contact pr.error.rectification[at]gmail.com to notify us. We will respond and rectify the situation in the next 24 hours


text:
TroyBoi - Christchurch
Sales for this event are closed.
- Reece C
- Tyler R
- Jess M
- Jack R
- Jb K
- Ella S
- Sean S
Audiology, Emprise and V Energy presents..
The most requested artist in Christchurch..
Wednesday December 14th
9pm - late
One of South East London's most closely guarded secrets has recently emerged from the shadows and is set to take the music
industry by storm. Known only as TroyBoi, this multi-talented musician specialises in extraordinarily unique, versatile, and highly musical tracks that fuses various textures from multiple genres and brands it as 'My Style'. TroyBoi is without a doubt one of the top up-and-coming producers in the game right now and it's quite clear from his composition that his influences are vast indeed. He has already produced tracks with some very high profile artists and his collaboration with Flosstradamus 'Soundclash' is arguably one of the biggest anthems in the scene today. His style is undeniably his own, infectious to the ears and beyond stimulating to the mind. He is also one half of the Producer/DJ duo SoundSnobz with one of his
best friends, icekream and together they craft the most creative and daring audio paintings you'll ever listen to. Buckle up and get ready to be taken into the world of TroyBoi because once you are in, you will NEVER want to get out.
Thanks to:
V Energy
The Ticket Fairy
Liam Neeson
- Reece C
- Tyler R
- Jess M
- Jack R
- Jb K
- Ella S
- Sean S


text:
Hi all, I'm glad to inform you about new quarterly OpenOpt/FuncDesigner release (0.32):
OpenOpt: * New class: LCP (and related solver) * New QP solver: qlcp * New NLP solver: sqlcp * New large-scale NSP (nonsmooth) solver gsubg. Currently it still requires lots of improvements (especially for constraints - their handling is very premature yet and often fails), but since the solver sometimes already works better than ipopt, algencan and other competitors it was tried with, I decided to include the one into the release. * Now SOCP can handle Ax <= b constraints (and bugfix for handling lb <= x <= ub has been committed) * Some other fixes and improvements > FuncDesigner: * Add new function removeAttachedConstraints * Add new oofuns min and max (their capabilities are quite restricted yet) * Systems of nonlinear equations: possibility to assign personal tolerance for an equation * Some fixes and improvements > > For more details see our forum entry > http://forum.openopt.org/viewtopic.php?id=325 > > Regards, D. >
_______________________________________________ NumPy-Discussion mailing list email@example.com http://mail.scipy.org/mailman/listinfo/numpy-discussion


text:
National Archives Inaugurates New On-Line Ordering Service
Press Release · Monday, June 7, 2004
Washington, DC
Press Release
June 7, 2004
National Archives Inaugurates new On-Line Ordering Service
Washington, DC. . . On June 7, ordering records at the National Archives and Records Administration became easier with a new online service. Family historians can now order copies of selected records from the National Archives online. Electronic versions of the forms used to order Federal pension application files, Census schedules, and Federal land entry files are now available through the new Order Online! system, on the National Archives website at http://www.archives.gov/research/orderonline.html.
Three of the most genealogically rich records, pension application files of soldiers who fought for the United States beginning in the Revolutionary War (1774) through the Spanish American War (1898), bounty land application files, and homestead application files, are part of the Order Online! system. These files often provide information not available elsewhere. Digital copies of samples of the different files are available by clicking on a type of order. Once visitors select a type of file to request, the new Order Online! system walks them through the entire process of filling in the required information. Help screens and drop down lists also assist in completing the requests.
Order Online! requires researchers to register as a user and pay by credit card. The system sends immediate receipt confirmation emails and follows up with a second email letting you know your tracking master number. Order Online! also features order tracking which permits you to check on the status of an order at anytime. If researchers do not want to register online, or if they prefer to pay by check or money order, the National Archives will continue to offer the options of ordering reproductions by mail using one of our National Archives Trust Fund forms. Send an email to email@example.com and specify the type of form needed. The Customer Service Center may be reached by calling 1-86 NARA NARA (1-866-272-6272 ) or by writing Customer Service Center, National Archives and Records Administration, 8601 Adelphi Road, College Park, MD 20740-6001. The fee covers the cost of the copies. There is no fee for the search.
The National Archives offers copies of the most frequently requested records for family history research through Order Online!. The most popular of these are pension application files. These records date from a time before States collected copies of birth certificates and death certificates. In some cases they are only source for valuable family history information.
The National Archives offers copies of pension application files for all of the wars until the Spanish American War through Order Online! Researchers interested in pension files can choose from two products. They may order either the full pension file or a packet of documents selected from the pension file.
The packet, which costs $14.75, includes copies of the following, if they are found in the file:
- the original declaration for a pension (the application);
- declaration for a widow's pension;
- a statement of service usually provided by the Adjutant General's Office;
- questionnaires completed by the applicants (numbered forms);
- "pension dropped" card (usually proof of death);
- marriage certificates;
- death certificates; and
- discharge certificates.
Researchers may also request the complete file through Order Online! This version provides a copy of everything in the file including the papers found in a document packet. The application files often contain medical information about ailments resulting from combat wounds or diseases contracted during service. Widow's applications list the names and birthdates of all of the children under the age of 16. If a widow did not have documentation of the wedding or proof of the children's birth, the file can contain depositions from neighbors attesting that the woman was married to the soldier and that the soldier was the father of her children. The full file costs $37.
Bounty Land application files are the third type of file that can be requested. Similar to pension applications, the bounty land applications typically provide a statement of the soldier's service and may include family information if the widow applied. These files tend to be smaller and the cost for each complete file is $17.25.
Federal land entry files, are also available through Order Online! Some land files, such as homestead applications, contain significant genealogical information. The case files include the name of the applicant, the location of the land, the date the land was acquired, the postal address of the applicant, age or date of birth, place of birth, marital status, and if married, the name of the spouse and the size of the family. Supporting documents can show the immigrants country of birth and sometimes the date and place of arrival in the US. Land entry case files are $17.75 each. The paper version of this form is, Order for Copies of Land Entry Files, the NATF Form 84.
The final offering at Order Online! is single pages from
the Federal Census schedules.
Additional records will be available at Order Online! as they
become available Soon researchers will be able to order copies of specific pages
from a census, a homestead case file, or a bounty land application.
* * *
For press information, contact the National Archives Public Affairs staff at 301-837-1700.
This page was last reviewed on February 13, 2019.
Contact us with questions or comments.


text:
At Austin Moonwalks and Party Rentals, we offer the highest quality Moonwalks, Bouncer Combos, Water Slides, Slip N Slides, and Concession Machines at competitive rates. It is important for you to know that we are fully licensed and insured as required by Texas state law..
For over 25 years, Austin Moonwalks has been providing quality party rental service to the greater Austin Texas area, with delivery to
Austin | Jollyville | Anderson Mill | Pflugerville | Lakeway | Cedar Park | Round Rock | Kyle | Leander | Georgetown | Lockhart | Taylor | Elgen | Giddings | Temple | Burnet | Bastrop | San Marcos | Canyon Lake | Marble Falls | Liberty Hill | Waco | New Braunfels | College Station & Seguin, Texas.
We also travel to Waco | Temple | Bryan | Laredo | Beaumont | Port Arthur | Victoria | Odessa | Midland | Corpus Christi | Abilene | Sweetwater | Tyler | Longview | Lufkin | Nacogdoches | Fort Worth, Texas
We know you have a choice, with Austin Moonwalks safety, cleanliness, and on-time deliveries are of paramount importance to us.
Austin Moonwalks has been providing high quality, professional events services in Austin for over 20 years. With that comes the experience and resources to make your event planning experience easy and your event a big success.
Get Details NowWe love talking about what we do, but when you want the straight scoop, our customers can speak for us! One of your neighbors may have already used our services and posted comments on their experience with AustinMoonwalks.com
Get Details NowAustin Moonwalks is a leader in the safe operation of inflatable rental amusement rides
Austin Moonwalks has the best selection available when it comes to bounce house and moonwalk rentals. It's in our name and it's in our hearts, bright colorful rental units that are cleaned and sanitized after every use. Great Fun!
Read MoreCombo Bouncers get their name from being a combination of the popular bounce house with additional features like integrated slides, popup obstacles, even basketball hoops. Imagine the cool jump shots you'll make in one of these guys!
Read MoreWe have bright colorful water slide rentals that are cleaned and sanitized after every use. "Big & Bold", you'll find all kinds of colors, shapes and designs of water slides, that will be a perfect fit for your next celebration or event.
Read MoreGet your group together for fun! Obstacle courses are a great choice for large events, school & church groups, and company picnics as a team building activity. These exciting multi-use inflatables will have you climbing, crawling and smiling!
Read MoreInflatable games from Austin Moonwalks will provide a fun atmosphere at your event. Some of the action games are almost as fun to watch as they are to play. Adding inflatable game rentals are an exciting solution for expanding event activities.
Read MoreWhen planning your event activities, good old-fashioned carnival games are always a great choice. These simple skill games are the great equalizer where all ages can play. Rent one or rent them all and create your own carnival midway!
Read MoreAustin Moonwalks has been delivering the fun to Austin parties and events for years, and with that comes the experience to know what makes a great event. Check out our complete party packages where you save big and get all you need.
Read MoreWhat's a party or event without the classic "Fun Foods"? Fresh popcorn, cotton candy, and sno-cones just like at the state fair or circus. Concession machine rentals can make the difference and all our rentals are easy to operate.
Read MoreOne of our most exciting attractions, the Euro Bungee Trampoline will take your breath away as you take flight and soar through the air. It's great for all ages and has four jump stations, so this unit has a high throughput for large events.
Read MoreWow! - these guys saved the day when another local company didn't show up and didn't return calls after we had paid in full for an inflatable for my daughters bday!
Best Business to work with. Their prices are lower compared to others in the business. They are friendly and helpful. The setup in my backyard was completed in under 15 minutes as was the tear down.
I am a teacher and each year our school works with Austin moonwalk to provide inflatables for our carnival. They are incredibly competitive with their prices. Yesterday Austin moonwalks came out to set up for our Fourth Annual Dragon Carnival, and it was wonderful.
We have used Austin Moonwalks for several years now for our company Christmas party. They are always on time and professional, and the equipment is in good shape.
Great Experience! Austin Moonwalks was great for my daughter's birthday. We would definitely rent a water slide from them again! Highly recommended!
© Austin Moonwalks. All rights reserved.
Powered by EventRentalSystems


text:
In the face of contradictory messages coming from members of his own party, members of the U.S. intelligence community and even a member of his own family, President Trump continues his months-long campaign against efforts to expand voting by mail amid the coronavirus pandemic.
"The fraud and abuse will be an embarrassment to our Country," Trump tweeted Wednesday.
On Monday, he claimed without evidence that mail ballots may purposely be manipulated to be sent to Democratic areas and not Republican areas. And on Sunday, he decried a system of ballot return that the federal government calls "secure and convenient" in official documents.
The president has questioned the legitimacy of U.S. elections for years, although the reasons for his skepticism shift almost weekly. After the 2016 election, when he lost the popular vote but won the Electoral College, Trump baselessly claimed "millions and millions" of people voted illegally in person.
Since the pandemic took hold in the U.S. this spring, states across the country have expanded voting by mail in an effort to limit the number of people who crowd into polling places on Election Day. A Washington Post analysis estimates that at least 83% of Americans are eligible to vote by mail this fall.
Trump quickly started criticizing those efforts, although his reasons for opposing it continue to change.
In April, Trump said any expansion of mail ballots would lead to widespread fraud. In June, Attorney General William Barr argued people should need an excuse to vote by mail. Earlier this month, Trump said no-excuse absentee voting is fine but claimed the Postal Service couldn't handle the increase in election mail. As of this week, Trump seems to have backtracked on that claim, too, saying that the USPS can handle the increase in mail ballots but that elections offices can't.
"It's not the post office," Trump said, in an interview this week with The Washington Examiner. "No, it's the elections office. The post office — look, this is a con job. It's like the Russian hoax. The post office has run the way it's been run forever."
Whatever the reason, it's clear Trump is increasingly isolated in the fight against the mail, with many in his party moving past his position.
Mail-in ballots will 'work out just fine'
Many Republicans fear that Trump's language on voting by mail could harm their chances this fall. Initial data shows Democratic voters far outpacing Republicans when it comes to requesting an absentee ballot, including in battleground states.
In Florida, Democrats lead Republicans by more than 660,000 requests, according to data compiled by University of Florida political science professor Michael McDonald. In Pennsylvania, twice as many Democrats have requested ballots as Republicans. In North Carolina, triple the number of Democrats have asked for ballots.
Polling data tells a similar story: A Pew Research Centerpoll released this week found less than 20% of Trump supporters plan on voting by mail this fall, compared with almost 60% of voters who support former Vice President Joe Biden.
In Wisconsin, a recent Marquette Law School poll found that just 14% of voters planning to vote by absentee are Trump supporters.
All that puts local Republicans in a bind, considering in-person voting could be a dangerous proposition in some areas depending on the state of the pandemic, and mail-in voting has traditionally been a reliable turnout booster for Republicans in many states.
"We are hurting ourselves and putting ourselves at a disadvantage," said Rohn Bishop, a GOP county chairman in Fond du Lac, Wis. "Not a big disadvantage, but a disadvantage, and that's one of the reasons I push back against it because it is a legitimate way to vote."
Bishop called questions about ballot security when it comes to mail-in voting "conspiratorial hype."
"The system's pretty solid," Bishop said. "You have to sign the ballot, you need a witness, you can track your ballot."
Some of Trump's closest allies have recently endorsed voting by mail.
Trump's son Donald Trump Jr. urged voters to request an absentee or mail ballot in robocalls this week.
"Voting absentee is a safe and secure way to guarantee your voice is heard," Trump Jr. says in the call, which was first reported by Politico.
And Sen. Tim Scott, R-S.C., who delivered a keynote speech during the Republican convention, said in an interview with The Today Show that he was "very confident that we will have fair elections throughout this country."
"I'll tell you how I feel about it, and what I think most Americans believe, that this process of mail-in ballots will prove to work out just fine," Scott said. "I'm going to have confidence that all the moving pieces will actually fit together and we'll have a very strong, integrity-driven, character-driven election."
Law enforcement sees no fraud evidence
During an election security briefing Wednesday, FBI officials made what should have been an unremarkable statement: They've seen no evidence of any foreign plot to counterfeit or forge mail ballots.
Election officials scoffed at the concept when Attorney General William Barr mentioned it for the first time earlier this summer, but both the attorney general and Trump continued to repeat it as a potential reason not to expand mail voting over the past few months.
"MILLIONS OF MAIL-IN BALLOTS WILL BE PRINTED BY FOREIGN COUNTRIES, AND OTHERS," tweeted Trump in June. "IT WILL BE THE SCANDAL OF OUR TIMES!"
The FBI, which is formally part of the Justice Department, said Wednesday that it has "no information about any nation state" engaging in any effort to undermine any aspect of mail voting and also noted how difficult any coordinated fraud scheme involving mail ballots would be to pull off because of the decentralized nature of U.S. elections and the numerous safeguards that are in place.
Regardless, election officials and experts worry that Trump's insistence on conspiracy theorizing about mail ballots and voting in general will affect the public's confidence in whatever result occurs in November.
"Any of these issues, when they get used for partisan political purposes, it's not good," said New Mexico Secretary of State Maggie Toulouse Oliver, a Democrat. "The inherent side effect is that it fosters distrust and it fosters a perception of unfairness."
Miles Taylor, a former Department of Homeland Security chief of staff during the Trump administration, told The Washington Post this week that Trump's language has effectively been an "open door" for foreign adversaries hoping to meddle in the race this fall.
In a recent op-ed in The New York Times, political scientist Rick Hasen argued that delegitimizing the results may actually be Trump's intention, with an eye toward contesting or casting doubt on a potential victory by his Democratic rival, Joe Biden.
"We cannot count on Mr. Trump to speak responsibly about the fairness of the 2020 vote count," Hasen wrote. "Indeed, he is one of the biggest threats to the integrity of the election."
Copyright 2021 NPR. To see more, visit https://www.npr.org.


text:
Class 1 - The Change Ethic!
December 11, 2018
10:15 am - 1:15 pm -
Class 2 - How can I be Ethical When You're Driving Me Crazy!? Surviving the Emotional Hazards of the Workplace
December 11, 2018
2:00 pm - 5:00 pm
The Ethics and Workplace Survival Seminar!
6 Category I Ethics CEUs
December 11, 2018
Please Note NEW DC Location
Town Hall Education Arts Recreation Campus (THEARC)
1901 Mississippi Avenue SE
Washington, DC 20020
(Accessible by Metro and Bus –See Venue Details Below. Some Free Parking Available as Well)
This One Day Seminar includes two excellent classes, a total of 6 category I Ethics CEUs. Refreshments (healthy and not-so healthy) are served throughout the day. The Cost of the full seminar is $99. One class class costs $59.
Class 1 (3 Category I Ethics CEUs)
The Change Ethic
Why does change seem so hard? What can we learn about change from alligators, elephants, and a Code of Ethics?
One of the most basic ethical principles of the helping professions is that clinicians need to assist clients in realizing their capacity to change. While this ethical principle goes to the very core of practice, practitioners often find themselves at a loss when working with "resistant" clients. This interactive training will examine the obligation to help clients change and teach effective methods to achieving this ethical obligation. (Trainer Jeffrey Davidson LCSW-C, LICSW)
2:00pm – 5:00pm
Class 2 (3 Category I Ethics CEUs)
How can I be Ethical When You're Driving Me Crazy!? Surviving the Emotional Hazards of the Workplace
The work place throws together people who did not choose each other, but were hired to work towards a common goal. Workplace dynamics create challenges for professionals as they struggle to achieve their own goals while meeting the objectives and expectations of the organization. But what are our Ethical obligations to colleagues? What does the Code of Ethics have to say about this topic?
Working with difficult people actually affords clinicians an opportunity to hone their clinical skills while learning to work out unique challenges.
This interactive training will help you understand effective methods for working with difficult people and gain a personal serenity that will allow them to thrive while working through the emotional ups and downs of the workplace. (Trainer Jeffrey Davidson LCSW-C, LICSW)
Venue: DC - THEARC - Town Hall Education Arts Recreation Campus
Situated on well-manicured grounds in Southeast Washington, DC, the Town Hall Education Arts Recreation Campus (THEARC) offers free parking on well-lit grounds. There is additional street parking as well.
Traveling by bus, take the W2 or W3 and be dropped off right in front of THEARC. Bus 94 will let riders off at Savannah and 19th Street for a short walk down the hill to THEARC. Bus 32 will drop riders off on Southern Avenue, just 0.35 miles from THEARC.
Metro riders travel to the Southern Avenue Station on the Green Line and walk 0.35 miles to THEARC.
Refreshments (healthy and not-so healthy) served at all trainings.