text:
|Terms and Conditions of Service Rules which you must agree to abide by to use our forums.
|Thread Tools
|Display Modes
Terms and Conditions of Service
These additional Term of Service goes into effect immediately, and is made part of the rest of the terms of service that you agreed to when joining The Friends of the Professional Car Society website. If you do not agree with these additional terms of service, then please notify the Webmaster to cancel your membership.
By using this site, you signify your agreement to these Terms and Conditions. The Friends of the Professional Car Society website may modify these Terms of Service and Conditions at anytime without notice. It is the users obligation to periodically check the Terms of Service and Conditions for updates.
The Friends of the Professional Car Society has created this website to engage the public in an informative conversation and dialogue about our efforts associated with the preservation and restoration of Professional Vehicles. We want our website to be an appropriate forum for everyone. The conversations should be constructive, respectful, and contain language that is appropriate for all groups and ages. Views and opinions expressed in posts on this website are those of the author. They do not necessarily reflect official policies of "The Friends of the Professional Car Society", or the "Professional Car Society, Inc.".
Were a community with quality standards and expect our members to make a sincere effort to contribute their thoughts on interesting subjects in a meaningful and respectful manner. Posting messages and otherwise interacting on this board is completely optional; many members often prefer to just read what others have to say.
If you do choose to post, we expect you to adhere to the polite standards of behavior that would be acceptable in any public group or place, and to respect the time of others by posting meaningfully.
Stated simply, it WONT be tolerated. If in doubt about a post, DONT. As a community with a diverse variety of members and readers of all ages and backgrounds and beliefs, we ask members to post without using crude or vulgar language or images- PERIOD. In addition, the "masking" of vulgarity by inserting ** or another keystroke in place of one or more letters in a vulgar term is unacceptable in most cases. This applies to all content submitted by users including post text, images, PMs, album pics, profile pics, avatars and signatures.
This is a public forum viewable by people of all ages, genders, and demographic groups. We expect you to conduct yourself in a mature, courteous manner. Treat others as you wish to be treated. Inflammatory, libelous, slanderous, lewd, obscene, bigoted, indecent, and threatening posts will not be tolerated. We are a diverse community of professional car enthusiasts, from many different backgrounds and with different perspectives on our hobby and life in general.
The mission of this forum is to provide a place for friendly, informative discussion of the commercial chassis vehicles throughout time. Opinions and viewpoints will vary. You agree to respect the other members of this forum, and to allow them the right to have and retain their own opinions and viewpoints. You have the option in your User CP to 'Ignore' those posters you find disagreeable.
Harassment occurs when a member insults, attacks, and denigrates another member at any time. We have zero tolerance for taking an argument about any topic to a personal level. For instance, the use of terms such as "idiot, moron, "stupid", and other derogatory terms constitutes harassment. Repeated critical and sharply negative posts toward a forum member can also constitute harassment. This applies to all content submitted by users including posts, avatars and signatures. Offenders may be warned, given a "time out" from the forum or an outright ban depending on the severity of the harassment. Criticizing others spelling or sentance structure is a form of harassment.
When you register to become a Friends of the Professional Car Society website member, all information about you must be truthful, and you may not use any aliases or other means to mask your true identity. You are responsible for maintaining the confidentiality of your member identification and password information, and for restricting access to your computer. You agree to accept responsibility for all activities that occur under your member identification name and password.
Each individual may open only one membership/user account using their real name and location. Members are not to share their account with others. When multiple accounts are discovered, the member may be warned, or any and/or all accounts may be permanently banned at the sole discretion of management. In households with more than one member in residence, each should have their own account. We do not delete user accounts because it can harm the database. If you choose to leave, simply leave your account will be dormant. Banned members who register again will be banned again and their IP may be blocked.
FREEDOM of SPEECH
We hear a lot about "MY Freedom of Speech can't be restricted!"
You are wrong! These forums are a privately owned property that is made available for free public use within our Rules, Terms of Service (TOS), conditions and guidelines. Everyone who registers here has agreed to be bound by all of these.
The 1st Amendment protects the right to freedom of expression from government interference. However, you are currently posting on www.professionalcarsociety.org, a private web property and your comments are bound by our site's policies. We have a zero-tolerance policy for comments containing violence, threats (direct or indirect), threatening acts, racism of any form, crassness or profanity (any word or phrase considered by courteous society to be profane), all caps (a violation of Internet etiquette), discourteous behavior (calling names, rude or insulting statements directed at another user or post) or violations similar in nature to any of these offenses. Posts violating our policies of posting are subject to removal and the user may face suspension or banning. Thank you for joining with us to maintain a courteous and useful public environment where we can engage in reasonable discussion about Professional Cars, and other topics.
This means we have the right to forbid, limit, or restrict certain topics, crude language as defined by us, and types of behavior. You have the right not to post here if you disagree with those Rules, TOS, or guidelines. You have the right to go elsewhere.
A troll is a person who posts something which is bound to stir people up and then sits back and watches as dozens of people jump in and start arguing. Sometimes trolls get their friends to join in or post under different names. Generally they will do anything it takes to get attention. If you see a message like this, please refrain from replying to it, and REPORT it!
Trolls are sometimes deceitful and may be very subtle in insulting, intimidating, or inciting a person or persons for their own sadistic pleasure. They often pick their words very carefully and are therefore able to defend their masked attempts at creating unrest, often redirecting the blame onto the forum community and its failure to understand them properly.
Also considered to be Trolling:
Running a topic into the ground incessantly, as in beating a dead horse, and or dragging up an argument long after the original discussion has been put to rest.
Power-posting is when forum members post 'empty' messages on the forum, in order to simply increase their number of posts more quickly. Power posting is generally frowned upon. Examples of power-posting are replying to a message with only '+1', 'LOL' , 'Thanks for the heads up' or 'I agree', but failing to contribute anything further to the discussion. If you reply to a message, make sure you have something to say. Power posting clutters up the forums, clutters up the 'new posts' function, and uses extra bandwidth and server space. We don't mind people using bandwidth to chat usefully on the forums. If you're not sure if you're power-posting, take a moment and think it over before you post. If all your post contains is an emoticon, it's a power-post. If it adds something to the discussion, it isn't.
Cross-posting is posting the same question or statement to multiple forums. This is not permitted. Any cross-posted topic will deleted.
Try to place your posts in the correct forum for the topic. Our forums have been carefully categorized so that most Professional Car discussion fits into one of the specific forums. Any post that is deemed by the staff to be in the wrong forum will be moved to the correct location without warning, or may be deleted. There is usually a redirect link to the moved post that lasts for a few hours, however, this is not a guarantee of a redirect. Some of our forums have restricted posting privileges. If you don't have the proper class of membership (i.e. PCS Membership or Site Supporter) to post in a restricted post forum, then please contact a moderator or administrator for guidance.
|Thread Tools
|Display Modes
Threaded Mode
|Similar Threads
|Thread Starter
|Last Post
|Additional Terms of Service Added.
|Website Administration Committee
|General Discussion Forum
|definition of terms
|Paul Newman
|General Discussion Forum


text:
2 killed, 1 injured when vehicle plows into Amish buggy
PITTSBURGH >> Authorities say a vehicle crashed into a horse-drawn Amish buggy in western Pennsylvania, killing two people in the buggy and injuring a third.
Lawrence County emergency dispatchers say the accident occurred around 5:30 p.m. Saturday on a Mercer County road, about 60 miles northwest of Pittsburgh. Lawrence County rescuers were called to assist.
Officials said the injured person in the buggy suffered serious injuries and was flown to St. Elizabeth Health Center in Youngstown, Ohio. A hospital spokeswoman said the man's condition was still being evaluated Saturday night and she did not have an update.
Pennsylvania State Police were investigating. They didn't release any further details.

subset: commoncrawl


text:
I went to DoTank:Brooklyn's DIY Urban Agriculture Skillshare at the Change You Want To See Gallery in Williamsburg, Brooklyn. Carina Molnar of the CUNY Institute for Sustainable Cities taught us how to compost with worms in a plastic bin, Aurash Khawarzad of PPS.org showed us how to make seed bombs, and Ted Ullrich demonstrated how to assemble a Windowfarm.
Above: Ted Ullrich introduces DoTank
Continue reading DIY Urban Agriculture Skillshare


text:
Colorado State University Bets on a Stadium to Fill Its Coffers
Faced With Declining State Funding, School Believes Football Project Will Score
Colorado State University has seen the future of higher education, and it has goal posts and end zones.
Faced with declining state funding, CSU is raising money to build a $246 million, 40,000-seat football stadium on its Fort Collins campus. University President Tony Frank says the new facility will help build a winning football team while advancing one of the school's highest priorities: attracting more out-of-state students paying higher tuition.
To Read the Full Story


text:
CHICO — Packed inside a library room of history buffs, authors Richard Hurley and TJ Meekins led a powerpoint presentation Sunday afternoon, exploring the Civil War in California to the public and members of the Butte County Historical Society.
The event, located at the Chico Branch of the Butte County Library, had a large turnout and brought recognition to "Queen of the Northern Mines," a novel about the Civil War in California by both Hurley and Meekins.
"Dale Wangberg, who is our Vice President, had heard them speaking up in Nevada City he thought that they were a pretty great program about a topic that most people don't hear about," said Nancy Brower, President of Butte County Historical Society.
"Queen of the Northern Mines" was voted as a finalist for the 2012 Ben Franklin Award for Historical fiction, which is presented by the Independent Book Publishers Association.
Though the main characters — Ida Hatfield and Will Strafford — are invented, they reflect the society they live in. The authors built backstory to each character starting around 1860, said Meekins.
The presentation ran for about 45 minutes and covered the settlement of California, the Gold Rush, North and South tensions, the Dred Scott decision and many other historical events.
Throughout the presentation the authors gave anecdotal details to each image shown in their slides, often lacing it with humor and giving insight to historical events surrounding each image.
While showing revolution illustrations, the authors showcased an oil painting, "Liberty Leading the People," painted by Eugene Delacroix in which the main character, Liberty, is baring her breasts accidentally while leading people forward over dead bodies.
Hurley gave background and described Liberty as "this woman with the wardrobe malfunction," garnering giggles throughout the crowd.
After the presentation, Hurley and Meekins stayed after for a question-and-answer segment with the crowd.
They also sold their novel to audience members and had visitors sign their guestbook.
During the discussion, audience members presented their various historical gatherings to others and encouraged trips to various California landmarks.
"Ultimately it's California who's the real protagonist of the novel," said Meekins. "A land populated almost overnight by many races and nationalities, allowing it to be reborn."
Staff Writer Christina Rafael can be reached at 896-7761 or firstname.lastname@example.com. You can also follow her on twitter @christinarafa1.


text:
USA: Quizno's signs distribution contract with Multifoods Distribution Group
The Quizno's® Corporation (Nasdaq:QUIZ) and Multifoods Distribution Group (MDG), a subsidiary of International Multifoods Corp. (NYSE:IMC), yesterday announced that MDG will become the exclusive distributor of food and paper products to the Quizno's restaurant chain in the United States. The three-year contract is effective Jan. 22, 2001.
Get full access to all content, just $1 for 30 days
just-food gives you the widest food market coverage.
But only paid just-food members have full, unlimited access to all our exclusive content - including 20 years of archives.
Try just-food for 30 days and get the research report; 'Is sugar the next tobacco' for free!
Dean Best, editor of just-food
Do you get our newsletters? If yes, log in to your account to access your FREE READS. Don't know your password? That's cool - you can reset it here.
Most Popular
- Local brands prosper as China soup market heats up
- Big Food's VC-style funds: the investments so far
- Exploiting the shift to at-home eating in US
- How sustainable is non-plastic packaging?
- Bonduelle speaks FY results, outlook
- Is Ferrero eyeing bid for biscuits business?
- Unilever shareholders vote on UK HQ move
- Pladis gives update on future of Jacob's brand
- Tesco makes plant-based food commitment
- Wellness Natural acquires US snack brand
Market research
- Sustainability - The Most Important Theme for 2020 - Thematic research
- Targeting Consumers at Home - Coronavirus (COVID-19) Case Study
- United States Confectionery - Market Assessment and Forecasts to 2024
- COVID-19 Cross-Sector Impact - Thematic Research (September 2020)
- Azerbaijan In-depth PEST Insights
Oops! This article is copy protected.
Why can't I copy the text on this page?
The ability to copy articles is specially reserved for people who are part of a group membership.
How do I become a group member?
To find out how you and your team can copy and share articles and save money as part of a group membership call Sean Clinton on
+44 (0)1527 573 736 or complete this form..


text:
Camshaft Design Science - Matters Of Control
Understanding the science behind performance camshaft design can help you find speed
For some of us, camshafts are a lot like marriage-we understand the concept but cannot fathom exactly how to make it work. For example, why is duration always measured in crankshaft degrees? And why do you not begin measuring duration until 0.050 inch of lift? Or why do camshaft manufacturers grind a cam advanced? What does the lobe separation angle have to do with performance? And why does advancing the camshaft seem to help low-end torque?
The science behind camshaft design is as advanced as anything in a race car, so most of us-including experienced engine builders-depend on the manufacturer to help spec the right cam for a particular engine package. Still, there is a science that controls every part of the design of your camshaft, and understanding why different parts of the cam are designed a particular way can help you determine what works best for your needs.
Of all the different parts of the cam, most are relatively straightforward (e.g., the journals and distributor gear). The cam lobes, one for each valve, contain all the variables. The cam lobes control not only total lift and when the valves open and close, but also valve speed, acceleration, overlap, and even how much cylinder pressure is developed at speed. There are a few parts of the lobe design critical to achieving this.
Base Circle is the term for the backside of the lobe. When the lifter is on the base circle of the lobe, the valve should be closed. It is also commonly called the heel of the lobe. The size of the base circle is important in relationship to the cam's lift. A smaller base circle allows more lobe lift, but it can also allow the camshaft to flex and throw off the timing events.
Ramps are the parts of the lobe where the lifter is either moved up or allowed to drop. Every lobe has two ramps-an opening ramp and a closing ramp. In performance camshafts, the curve of the ramps changes several times, which is a tool the cam designer uses to fine-tune the speed and acceleration of the lifter.
An asymmetrical lobe refers to opening and closing ramps that are not identical. In order to maximize both valve speed and control, the lifter must be raised in a different manner from which it is lowered. For example, in performance applications the valve is generally opened as quickly as possible, but the speed of the valve slows significantly as it nears maximum lift to keep it from lofting. But on the closing side, the valve must be seated relatively gently to keep it from bouncing. An asymmetrical lobe design allows this.
The nose of the lobe marks the area where the valve is fully opened. The highest point of lift is the lobe's centerline. The intake centerline is measured as crankshaft degrees after top dead center (TDC). The exhaust centerline is expressed as the number of degrees of the crankshaft's position before TDC. Incidentally, a cam's position is always measured relative to the crankshaft's position because that tells you where the piston is and which stroke it is on (intake, compression, power, or exhaust).
Lobe lift is the amount the cam lobe raises the lifter. It isn't the same as valve lift because the rocker arm is a lever that multiplies the amount of lobe lift to get the final valve lift. The lobe lift is equal to the diameter of the lobe at the centerline minus the diameter of the base circle.
Obviously, the primary job of the camshaft is to control the timing of the intake and exhaust valve events. This is done with separate intake and exhaust lobes. The relationship of these lobes to each other is called lobe separation. Lobe separation is measured in degrees between the peak of the exhaust lobe (maximum valve lift) and the peak of the intake lobe. Essentially, it is half the angle in crankshaft degrees of rotation between peak exhaust valve lift and peak intake valve lift. If the duration remains the same, increasing the lobe separation angle decreases overlap, while decreasing it does the opposite.
"Typically, if all other factors are kept constant, widening the lobe separation produces a wider, flatter torque curve that holds better at higher rpm but can sometimes cause a lazy throttle response," explains Billy Godbold, a camshaft designer at Comp Cams. "Tightening the separation generally produces the opposite effect-more mid-range torque and a faster revving engine, but with a tighter power range."
There are other reasons to change lobe separation to influence engine performance. For example, if you are running a long rod package and keep the stroke the same, you will dwell the piston near TDC longer. To maintain similar overlap characteristics, you may need to open up the lobe separation and shorten the duration.
Overlap is the point in crank rotation when both the intake and exhaust valves are open simultaneously. This happens at the end of the exhaust stroke when the exhaust valve is closing and the intake is opening. During the period of overlap, the intake and exhaust ports can communicate with each other. Ideally, you want the scavenge effect from the exhaust port to pull the air/fuel mixture from the intake port into the combustion chamber to achieve more efficient cylinder filling. A poorly designed cam and port combination, however, can cause reversion, where exhaust gases push their way past the intake valve and into the intake tract.
Several factors influence how much overlap is ideal for your engine. Small combustion chambers typically require minimal overlap, as do engines designed to maximize low-rpm torque. Most current stock car racing engines depend on high rpm to take advantage of better gear ratios, so more overlap is normally helpful. When the revolutions per minute increase, the intake valve is open for a shorter period of time. The same amount of air and fuel must be pulled into the combustion chamber in less time, and the engine can use all the help it can get to fill the chamber. Increasing the overlap can help here.
Long rod/stroke packages, which are becoming increasingly popular in circle track racing, also have an effect here just as with the lobe separation. Because the piston dwells near TDC longer, it makes the combustion chamber appear smaller to the incoming air/fuel charge. Because of this, less overlap is needed to properly fill the chamber. Along with reduced vacuum and potential reversion problems, running too much overlap in your race engine sends unburned fuel out of the exhaust pipes, reducing fuel efficiency. For most short track racers, this isn't a problem. But if you run into a fuel-mileage situation to cut out pit stops, it can be helpful.
Duration is the amount of time, measured in degrees of crankshaft rotation, that the valve-either intake or exhaust-is open. Most camshaft manufacturers list both an advertised duration and duration at 0.050 inch. We'll discuss this in more detail later.
As engine rpm increases, the engine eventually reaches a point at which it has trouble effectively filling the cylinders with the air/fuel charge in the short amount of time the intake valve is open. The same thing holds true with the spent exhaust gases. The simple answer here is to increase the amount of time the valve is open, which is referred to as increasing its duration. For example, to maximize flow during the exhaust stroke, many extreme performance cam designs begin opening the exhaust valve near the midpoint of the power stroke. This may seem harmful to power production, but the idea is to have the exhaust valve fully open when the exhaust stroke begins. During the power stroke, the burning fuel has used about 80 percent of its available force on the piston by the time the crank has turned 90 degrees. The bottom half of the power stroke actually provides very little in terms of engine power, and it can be better used to help exhaust the combustion chamber so that there is more efficient cylinder filling on the intake stroke.
Here's a statement that you already know: The valve is most efficient at allowing air (either intake or exhaust) to flow past it when it is fully open. Not to insult your intelligence, but we needed to get that out of the way. What that statement tells us is that in terms of achieving maximum engine performance, the amount of time the camshaft is either raising or lowering the valve is effectively wasted. In a perfect world, the valve would be completely seated to seal the chamber, then it would fully open instantly at the appropriate time to allow maximum flow.
To get as close to this as possible, maximum race cams use extreme lobe profiles that open and close the valve ridiculously quickly. This requires stronger valvesprings and lightweight valvetrain components to maintain valve control, and engine builders and cam designers alike are still researching ways to open the valves even faster.
A more aggressive cam with high lift velocities allows you to shorten the duration in certain situations, which can help power. "Aggressive ramps allow the valve to reach maximum velocity sooner, allowing more area for a given duration," says Godbold. "Engines with significant airflow or compression restrictions [often seen in Street Stock classes or other classes with small carburetors] seem to love aggressive profiles. This is likely due to the increased signal to get more of the charge through the restriction. The decreased seat timing also results in earlier intake closing and more cylinder pressure."
Currently, one of the greatest limiting factors when it comes to aggressive camshaft profiles is the requirement many tracks and sanctioning bodies have mandating flat-tappet lifters. A flat tappet limits how quickly you can raise the lifter because the lobe angle can only be raised a specific amount before the edge of the lifter begins digging into the side of the lobe. Increasing the diameter of the lifter allows the lifter to slide over the face of the lobe again, so if your rules allow, try running a larger lifter combination. Godbold provided us with a few interesting numbers concerning maximum velocities for lifters. For example, with a stock Chevy 0.842 diameter lifter, the maximum velocity is 0.00700 inch per degree. If you use a Ford 0.875 lifter, that increases the maximum lift to 0.00735 inch per degree of rotation. That may not sound like much to you and me, but it's enough to make a cam designer drool. Of course, those numbers pale in comparison to a roller lifter, which doesn't have the same limits and is definitely the way to go in a racing application if the rules allow it. The maximum velocity for a performance roller lifter is typically around 0.009 per degree. Now we are talking about a really big difference.
One thing that confuses many new racers is that cam companies typically list both an advertised duration and a duration measured when the lifter is 0.050 inch off of the seat. The problem is that different manufacturers use different points to determine duration. There are different reasons for this, but few of them concern anyone other than the cam designers and their respective marketing departments. That's why lift at 0.050 has become an industry standard.
Usually, a valve doesn't begin flowing a significant amount of air until it has been raised several thousandths off of the seat. Also, differences in lash make it difficult to determine the exact moment a valve leaves the seat. Finally, duration at 0.050 inch of lobe lift is easier to measure and makes life easier for anyone setting the cam timing with a degree wheel. " . . . it's easier to measure the 0.050 duration than the advertised duration because the tappet velocity is much higher after it has had some time to accelerate," Godbold explains. "When using a cam degree wheel and a dial indicator, there is far less uncertainty about where the degree wheel is oriented when the dial indicator reads exactly 0.050 inch of lift than with lifts in the 0.004 to 0.020 range."
By using special timing sets, you can change the angle of the cam relative to the crankshaft. Spinning the cam forward so that the valve opening events happen sooner is called advancing the cam. Retarding the cam is just the opposite. Most camshaft manufacturers grind in around 4 degrees of advance into their cams so that it is automatic when you install your cam with the zero marks on the timing set. This is very common with street cams but varies with different race cams. Make sure you know what you have.
"Typically, engines respond better with a few degrees advance," Godbold explains. "This is likely due to the importance of the intake closing point on performance. Earlier intake closing leads to increased cylinder pressure and better responsiveness." As a general rule of thumb, advancing the cam will help low-end torque, but if your engine is dying by the flag stand, retarding the cam a few degrees should help extend high-rpm power a bit.
The information we've provided is a lot to digest, but don't worry. Most cam manufacturers have helpful tech departments to work you through the rough spots. To make things just a little easier, here's a cheat sheet for cam changes and the typical result. Remember, all engine packages are different, and your results may vary. These are only general guidelines.
|Cam Change:
|Typical effect
|More Lobe Separation:
|Wider powerband, more peak power, smoother idle
|Less Lobe Separation:
|Increased mid-range torque, faster acceleration, narrower powerband
|More Duration:
|Powerband moved higher in rpm range
|Less Duration:
|More low-end torque
|More Overlap:
|Improved signal to carburetor, lower fuel efficiency, potential for reversion
|Less Overlap:
|Improved low-rpm responsiveness, better fuel efficiency, engine may run hotter


text:
7520 Royal St 414
$3,450,000, 3 Beds 4 Baths 2,192 Sqft
About This Property
This exciting real estate opportunity located on the last remaining parcel in Silver Lake Village will be the first of its kind in over a decade. World-renowned architect Tom Kundig has designed a modern interpretation of a mountain ski lodge complemented with sophisticated interiors by Todd-Avery Lenahan. Located in the heart of Deer Valley Resort, Silver Lake's pedestrian village offers a ski beach & direct ski-in ski-out access, along with fine dining & shopping. Connecting 40 new Residences to the iconic Goldner Hirsch Inn is a Bridge Plaza that provides a wonderful outdoor gathering space. Additional amenities feature a front check-in lobby, library lounge, valet parking, concierge, bellman, courtyard patio, fire pits, conference center, spa treatment rooms, ski prep room, snow ski storage, apres-ski lounge, game room, konditorei, & a stunning rooftop deck with a pool and hot tub. This furnished studio is conveniently located on the same level as the amenities & bridge plaza.
Courtesy of: Summit Sotheby's - Park Ave.
Essential Information
Community Information
Elevator, Fire Sprinklers, Fitness Room, Hot Tub, Onsite Management, Pets Allowed w/Restrictions, Pool, Ski Storage
Cable Available, Electricity Connected, High Speed Internet Available, Natural Gas Connected, Phone Available
Assigned, Guest Parking, Underground
Interior Features
Fire Sprinklers, Furnished - Fully, Lock-Out, Main Level Master Bedroom, Storage - Interior, Washer Hookup
Dishwasher, Disposal, Electric Range, Microwave, Oven, Refrigerator, Washer/Dryer Stacked
Forced Air, Natural Gas, Radiant Floor, Zoned
Exterior Features
Balcony, Deck(s), Landscaped - Fully, Lawn Sprinkler - Full
School Information
Additional Information
Listing Details
The information provided is for consumers' personal, non-commercial use and may not be used for any purpose other than to identify prospective properties consumers may be interested in purchasing. All properties are subject to prior sale or withdrawal. All information provided is deemed reliable but is not guaranteed accurate, and should be independently verified.
The multiple listing information is provided by Park City Board of Realtors® from a copyrighted compilation of listings. The compilation of listings and each individual listing are © 2020 Park City Board of Realtors®, All Rights Reserved. Access to the multiple listing information through this website is made available by Summit Sotheby's International Realty as a member of the Park City Board of Realtors® multiple listing service. No other entity, including a brokerage firm or any franchisor, may be listed in place of the specific Listing Broker on the foregoing notice. Terms of Use
Listing information last updated on September 25th, 2020 at 1:13am MDT.


text:
|There's more than one way to do things
Re^2: Speeding up point-in-polygon -- take twoby roboticus (Chancellor)
|on Aug 28, 2006 at 14:39 UTC ( #569987=note: print w/replies, xml )
|Need Help??
Another thought--
If the aforementioned suggestion helps, then it may be possible to improve performance a bit more by adding even more polygons: You might break your polygons into rectangles, left triangles and right triangles, where a rectangle is 'definitely inside' a polygon, and the triangles are pasted to the left and right side of your set of rectangles to build the polygons you desire.
With the rectangles, you can avoid the subroutine call altogether. If your select statement returns one, you have the answer "Yep, it's in polygon A". If it's a triangle, then you only have one edge to check. (For a left triangle, your point is inside the polygon of $x is to the right of the edge; and for a right triangle, your point is inside if $x is to the left of the edge.)
By chewing on the problem, I'm certain you'll come up with a few other things to try...
In Section Seekers of Perl Wisdom


text:
Currency Displayed in
Hover over image to zoom
Brand new 30x40 inch UK Quad movie poster of The Hours featuring Nicole Kidman and Meryl Streep and Julianne Moore
Copyright 2020 Moviestore Inc.. All Rights Reserved. Sitemap |
Bigcommerce Premium Themes by PSDCenter
All prices are in USD.
Compare Now
Click the button below to add the THE HOURS 788528 UK QUAD UK QUAD POSTER to your wish list.


text:
How to Accept your Federal Work-Study
If you were awarded Federal Work-Study, please complete the three items below prior to beginning your work on campus.
- Student Employment Acceptance Form is the form that the Financial Aid Office uses to assign you to a position on campus. It is important that you be thorough and accurate when completing this form. Jobs are assigned on a first-come, first-served basis according to the date your Student Employment Acceptance Form is received by the Financial Aid Office.
- W-4 Form is required of all students working on campus. Be sure to print your name as it appears on your Social Security Card and use your permanent home address. It is advised (and easiest) to complete this form at the same time as your I-9 Form.
- You will also be required to complete an I-9 Form before you will be allowed to begin working on campus. This form must be completed in person and requires that you provide official documentation proving your identity and your eligibility to work in the United States. View a list of acceptable documentation. We will view this documentation and have you complete an I-9 Form in person when you arrive on campus.
The Office of Financial Aid will work with you to place you in a federal work-study job on campus. You will be asked to rank your top choices. The following links will help you become familiar with the positions available.
Additional helpful links for your review:
- Student Employment Program Guidelines
- Student Pay Periods and Time Sheet Due Dates
- We pay by Direct Deposit (my.augie.edu)


text:
Poll: NY's Cuomo, Bloomberg did Well After Sandy
New Yorkers give high marks to Gov. Andrew Cuomo and Mayor Michael Bloomberg for their reaction to Superstorm Sandy, but are far less happy with the Long Island Power Authority.
A Siena College poll released Monday finds 67 percent of the voters surveyed thought Cuomo did an excellent or good job dealing with the storm and its aftermath. Bloomberg was rated excellent or good by 55 percent of those polled.
That compares to 20 percent who thought LIPA was did a good or excellent job. The power provider has been under fire by critics who say it took too long to restore power to thousands of customers.
The statewide telephone poll of 822 registered voters was conducted Nov. 26-29. It has a margin of error of 3.4 percentage points.


text:
Wednesday, November 30, 2005
Why Duplicate Packets May Appear on SPAN Ports
"We have a range of switches being used within our network for port monitoring, and a couple have had to be set up in such a way that you can end up seeing each packet TWICE on the snort interface. I've been told by our network engineers that this has to be the case in order for the IDS to see the networks it needs to on one card."
I think I know why this is happening. I cover this issue in day one of my Network Security Operations course.
Essentially, the admin who sets up the SPAN port has to decide if he or she wants to copy traffic in to the SPAN port, out of the SPAN port, or in and out of the SPAN port. If the decision is made to copy in and out of the SPAN port, duplicate packets will appear when intra-switch traffic is carried.
Tuesday, November 29, 2005
Two New Pre-Reviews
Next is Running IPv6 by Iljitsch van Beijnum, published by Apress. I liked his book BGP. I already read and reviewed IPv6 Network Administration from O'Reilly, which appears similar to this new book. I'll let you know how the two books differ after I read the latest title.
Monday, November 28, 2005
Bejtlich Teaching Next Week at USENIX LISA
Update: I just learned the book signing will take place in the Golden Ballroom from 5:30 to 6:30 p.m., Wednesday, 7 December.
SANS Replaces Several Threat References in Top 20
Update: It's becoming clear where the confusion regarding "threat" vs "vulnerability" originates for the SANS Top 20. One of you pointed me towards the article Mac OS X Under Scrutiny. See how many misuses of the term threat you can find. Here's a freebie:
"SANS's Dhamankar stressed that the intent was not to call the Mac OS X operating system a threat, but to give Mac users a wake up call."
Saturday, November 26, 2005
Three Great Session Data Articles
- Monitoring Network Traffic with Netflow
- Visualizing Network Traffic with Netflow and FlowScan
- Building Detailed Network Reports with Netflow
Michael introduces several techniques and tools not mentioned in my books, like softflowd, Cflow.pm, flowscan, CUFlow, and others. Nice work! (Incidentally, I am the USENIX instructor Michael references in his last article.) :)
Friday, November 25, 2005
NISCC Director Understands Real Threats
"Cummings said the most significant element in the malicious marketplace is foreign states, whose target is information. Next are criminals who are trying to compromise the CNI in order to sell information. Hackers motivated by kudos or money have 'a variable capability' when it comes to attacks... However, these pose a more serious threat than terrorists, who currently have a low capability."
The article continues:
"NISCC is working with its equivalents in the countries concerned to try to shut the attacks down, Cummings said. The agency cannot name the countries concerned as this may 'ruin diplomatic efforts to halt the attacks,' he added."
Imagine that -- he didn't say "holes in Internet Explorer," or "Windows RPC services." The director named parties with the capability and intentions to exploit vulnerabilities in assets.
A visit to the NISCC site shows separate threats and vulnerabilities pages. The threats page begins with these words:
"NISCC's key role is to minimise the risk of electronic attack to the CNI. This involves assessing 'threats' from a variety of sources including criminals, foreign intelligence services, terrorists or virus writers."
The vulnerabilities page begins with these words:
"NISCC undertakes research into computer vulnerabilities or 'weaknesses' and augments this with extensive intelligence to determine the extent of threats to the Critical National Infrastructure from hostile and malevolent elements.
Working with a number of partners, NISCC has had considerable success in identifying problems, and getting vendors to provide software 'patches', through a policy of 'responsible disclosure'."
So, here is another organization that understands the difference between threats and vulnerabilities.
Tenable and Nessus News
Tuesday, November 22, 2005
The Good and the Bad About the New SANS Top 20
You will remember that a threat is a party with the capabilities and intentions to exploit a vulnerability in an asset. A vulnerability is a weakness in an asset that could lead to exploitation. An intruder (the threat) exploits a hole (the vulnerability) in Microsoft IIS to gain remote control of a Web server. In other words, threats exploit vulnerabilities.
Today, version 6 of the Top 20 was released. I'll start with "the good." I believe the majority of the 2005 content is much better than the 2004 edition. The 2004 list, and previous lists, displayed 10 Windows vulnerabilities and 10 (often dubious) Unix vulnerabilities. The 2005 list, in contrast, displays the following vulnerabilities:
Top Vulnerabilities in Windows Systems
* W1. Windows Services
* W2. Internet Explorer
* W3. Windows Libraries
* W4. Microsoft Office and Outlook Express
* W5. Windows Configuration Weaknesses
Top Vulnerabilities in Cross-Platform Applications
* C1. Backup Software
* C2. Anti-virus Software
* C3. PHP-based Applications
* C4. Database Software
* C5. File Sharing Applications
* C6. DNS Software
* C7. Media Players
* C8. Instant Messaging Applications
* C9. Mozilla and Firefox Browsers
* C10. Other Cross-platform Applications
Top Vulnerabilities in UNIX Systems
* U1. UNIX Configuration Weaknesses
* U2. Mac OS X
Top Vulnerabilities in Networking Products
* N1. Cisco IOS and non-IOS Products
* N2. Juniper, CheckPoint and Symantec Products
* N3. Cisco Devices Configuration Weaknesses
Bravo. I think that is a significant step towards realizing the scope of the problem at hand. To be fair to Microsoft, I believe there could have been "Unix services" and "Unix libraries" sections. I applaud the addition of network products and other applications. Content-wise, this is a great resource.
Now, "the bad." The top of the page has this link: -----Jump To Index of Top 20 Threats -----. For Pete's sake, the title of the document is "The Twenty Most Critical Internet Security Vulnerabilities." These are not threats.
Let's see other terms in use:
In the introduction we see:
"In addition to Windows and UNIX categories, we have also included Cross-Platform Applications and Networking Products. The change reflects the dynamic nature of the evolving threat landscape."
I can accept this use of the term threat, if the intent is to refer to parties who exploit vulnerabilities.
"We will update the list and the instructions as more critical threats and more current or convenient methods of protection are identified, and we welcome your input along the way."
Here, threats should be "vulnerabilities".
Section C2:
"Compromising a gateway could potentially cause a much larger impact since the gateway is the outer layer of protection and the only protection for some threats in many small organizations."
This should either replace "threats" with "vulnerabilities", or "for some" with "from some".
Section C5:
"The main threats arising from P2P software are:"
I think threats should be "risks" here, although the list is a muddle of different issues.
Later in that section:
"The number of threats using P2P, IM, IRC, and CIFS within Symantec's top 50 malicious code reports has increased by 39% over the previous six-month period."
Here, I can accept the use of the term as long as the intent is to describe parties abusing P2P, IM, etc.
Section C8:
"These applications provide an increasing security threat to an organization. The major threats are the following:"
Here's a simple rule of thumb: applications can never be "threats." Again, I suggest replacing the second "threats" here with "risks".
One final note: I am not a lone voice speaking on this subject. The Financial Times, of all people, is linked from the SANS page with a story Hackers pose new threat to desktop software. That's the proper use of the term threat, since a hacker is a "party."
Security will not be taken seriously as a "profession" until its "thought leaders" use basic terms properly.
Monday, November 21, 2005
Demand for a BSD Associate Certification Guide
the BSD Certification Group (BSDCG). I started out as a Group member, but moved to the Advisory Board when TaoSecurity business occupied too much of my time.
Last month the BSDCG published its BSD Associate Exam Objectives (.pdf) The document outlines all the skills a candidate for the BSD Associate cert is expected to have. However, no specifics are given. For example:
3.2.12 Change the encryption algorithm used to encrypt the password database.
Given a screenshot of a password database, the BSDA candidate should be
able to recognize the encryption algorithm in use and how to select
another algorithm. The candidate should also have a basic understanding
of when to use DES, MD5 and Blowfish.
login.conf(5); auth.conf(5); passwd.conf(5); adduser.conf(5) and adduser(8)
I am considering writing a BSD Associate Certification Guide. The guide will cover all of the 7 domains on the cert:
1. Installing and Upgrading the OS and Software
2. Securing the OS
3. Files, Filesystems, and Disks
4. Users and Accounts Management
5. Basic System Administration
6. Network Administration
7. Basic Unix Skills
Half of the work is already done. I know everything that needs to be covered. What I need to do now is provide answers to the questions.
What do you think? Would you like a book that addresses all of the seven domains for all of the BSD OS' covered by the cert (FreeBSD, NetBSD, OpenBSD, DragonFly BSD)?
Extrusion Detection Shipping
If you have any suggested changes, please let me know within the next 10 days. I owe corrections to my publisher for the second printing on 2 December. Thank you!
Tethereal Ring Buffer Syntax Changes Again
Today when trying Tethereal 0.10.13, I discovered the syntax has changed again. First, the relevant man page excerpt:
-a Specify a criterion that specifies when Tethereal is to stop writ-
ing to a capture file. The criterion is of the form test:value,
where test is one of:
duration:value Stop writing to a capture file after value seconds
have elapsed.
filesize:value Stop writing to a capture file after it reaches a
size of value kilobytes (where a kilobyte is 1024 bytes). If this
option is used together with the -b option, Ethereal will stop
writing to the current capture file and switch to the next one if
filesize is reached.
files:value Stop writing to capture files after value number of
files were written.
-b Cause Tethereal to run in "multiple files" mode. In "multiple
files" mode, Tethereal will write to several capture files. When
the first capture file fills up, Tethereal will switch writing to
the next file and so on.
The created filenames are based on the filename given with the -w
flag, the number of the file and on the creation date and time,
e.g. savefile_00001_20050604120117.pcap, save-
file_00001_20050604120523.pcap, ...
With the files option it's also possible to form a "ring buffer".
This will fill up new files until the number of files specified, at
which point Tethereal will discard the data in the first file and
start writing to that file and so on. If the files option is not
set, new files filled up until one of the capture stop conditions
match (or until the disk if full).
The criterion is of the form key:value, where key is one of:
duration:value switch to the next file after value seconds have
elapsed, even if the current file is not completely filled up.
filesize:value switch to the next file after it reaches a size of
value kilobytes (where a kilobyte is 1024 bytes).
files:value begin again with the first file after value number of
files were written (form a ring buffer).
Ok, so how do I use this? I create the following simple shell script:
# Capture file size in KB; here is 1 GB
# Here is 100 MB
# Number of files to capture
# Interface to watch
/usr/X11R6/bin/tethereal -n -i $INTERFACE -s 1515 -q -a filesize:$FILESIZE -b files:$FILENUMBER
-w /nsm1/lpc/fullcontent.lpc
The preceding script tells Tethereal to collect five 100,000 KB files. When the fifth one reaches the 100 MB limit, Tethereal begins overwriting the first one. Check out these directory listings as time progresses. First, the initial capture file. Notice the naming convention Tethereal uses. (Note: 100,000 KB != 100 MB, but it's close enough for our purposes.)
sensor01:/nsm1/lpc# ls -alh
total 35780
drwxr-xr-x 2 root wheel 512B Nov 22 15:23 .
drwxr-xr-x 5 root wheel 512B Nov 22 15:00 ..
-rw------- 1 root wheel 35M Nov 22 15:24 fullcontent_00001_20051122152344.lpc
After a while, we have five files:
sensor01:/nsm1/lpc# ls -alh
total 483300
drwxr-xr-x 2 root wheel 512B Nov 22 15:24 .
drwxr-xr-x 5 root wheel 512B Nov 22 15:00 ..
-rw------- 1 root wheel 98M Nov 22 15:24 fullcontent_00001_20051122152344.lpc
-rw------- 1 root wheel 98M Nov 22 15:24 fullcontent_00002_20051122152407.lpc
-rw------- 1 root wheel 98M Nov 22 15:24 fullcontent_00003_20051122152419.lpc
-rw------- 1 root wheel 98M Nov 22 15:24 fullcontent_00004_20051122152430.lpc
-rw------- 1 root wheel 81M Nov 22 15:24 fullcontent_00005_20051122152441.lpc
When the fifth file is completed, the first is overwritten:
sensor01:/nsm1/lpc# ls -alh
total 409316
drwxr-xr-x 2 root wheel 512B Nov 22 15:24 .
drwxr-xr-x 5 root wheel 512B Nov 22 15:00 ..
-rw------- 1 root wheel 98M Nov 22 15:24 fullcontent_00002_20051122152407.lpc
-rw------- 1 root wheel 98M Nov 22 15:24 fullcontent_00003_20051122152419.lpc
-rw------- 1 root wheel 98M Nov 22 15:24 fullcontent_00004_20051122152430.lpc
-rw------- 1 root wheel 98M Nov 22 15:24 fullcontent_00005_20051122152441.lpc
-rw------- 1 root wheel 8.7M Nov 22 15:24 fullcontent_00006_20051122152453.lpc
This processes continues until Tethereal is killed. It is a great full content data collection system.
Friday, November 18, 2005
Security Awareness Training: A Waste of Time?
"[M]y company [Red Cliff Consulting] has conducted numerous social engineering exercises for Fortune 500 companies whose success relies heavily on the protection of intellectual property.
These exercises involved scripted telephone calls to the organizations' customer service departments and mass phishing emails targeting a randomly selected set of employees. The objective was to collect sensitive data, the results were astounding.
627 of the 1000 people targeted by 'spear phishing' emails (aimed at pilfering the employees' corporate VPN credentials) succumbed to the attack and only 4 of the 373 that did not respond reported the issue to information security staff.
It's not so much those statistics that made the results astounding; but the fact that all these organizations had recently conducted user awareness workshops that addressed the threats posed by social engineers."
Wow. Maybe their Human Firewall was down?
I crack myself up. Anyway, Rohyt mostly blames the staff who offer security awareness training:
"[T]he information security staff must assume the onus of taking the initiative of developing innovative user awareness programs that pique the employees' interest. The majority of the security awareness sessions I attended were unstimulating affairs couching the do's and don'ts of security."
I think it is time to face the fact that security awareness training is generally a waste of time. Trainers can stand on their heads and juggle flaming swords, and some attendees will take a nap. People who handle the most sensitive classified data in the world will happily click on the dancing donkey that appears in their inbox. All it takes to suffer an internal compromise is for one of Rohyt's 1000 respondents to provide their corporate VPN credentials.
In the remainder of Rohyt's article, he does provide good guidelines for improving the quality of security awareness training. However, there is no way to achieve 100% compliance with security policies and sound practices.
So what is my answer? The people with the best capability to address the problem must be given the authority and resources to do so. Those people are the information security staff. They should have the power to remove administrative accounts from normal desktop users. The should have the resources to deploy a proxy to filter and block malicious inbound and outbound traffic. Their concerns should not be sidelined in order to meet "business requirements."
Disagree with me? Well, there are many aspects of business that individual employees should care about. The quality of their work environment is important. I have worked in numerous buildings with asbestos and water problems (thanks .mil). Was it my job to become an environmental engineer? Corporate financial health is another important aspect of a business. Should employees receive accounting training?
Speaking of business concerns: am I the only person who is sick of hearing media pundits tell technical people we need to spend more time and effort understanding "the business?" There are only so many hours in the day. Who is supposed to understand the technical issues facing an organization if we are also tasked with making business decisions?
Why don't I read about business managers being advised to understand TCP/IP?
This is called division of labor, and it's what enables companies to scale to their present size. I am forced to perform business and technical functions by virtue of the size of my small company. As a person who enjoys technical issues, I am not pursuing business issues by choice!
What do you think?
Thursday, November 17, 2005
FCW Reports DoD to Hold Security Stand-Down
FCW says "some DOD officials are concerned about the amount of hardware and software manufactured overseas and whether they might incorporate malicious code. [Croom] said one way to fight the problem is to require companies to assure DOD that their products are safe and for the military to monitor them closely." (emphasis added)
I like the fact Lt Gen Croom understands the importance of monitoring.
A separate article conveys this story, indicating Lt Gen Croom is a fair guy:
"The first time Croom showed up for a meeting at DISA, someone announced his presence and everyone in the room snapped to attention, as they did with previous DISA commanders, a headquarters employee said.
Croom told everyone at the meeting that that was the first and last time anyone was to announce him and have everyone stand at attention."
That's amazing. I have seen commanders institute similar policies on operations floors, but generally you're expected to stand when the commander enters a meeting room.
The FCW article did not say much about what constitutes a network "stand-down," other than "changing passwords" and "conduct[ing] certain activities to strengthen and become more aware of network security." Can anyone elaborate on this? A department-wide password change sounds like an immense incident response action. I believe we instituted a similar action once when I was still in uniform.
Typically stand-downs are held in the flying community when an aircraft crashes due to a mechanical problem. The rest of the community wants to verify that their aircraft are not also afflicted. I believe the Titan Rain intrusions may be the "crash" that prompted this stand-down. FCW reports "Croom said DOD networks are being intruded on. 'The enemy is among us,' he said."
Wednesday, November 16, 2005
Thoughts on CMP Acquisition of Black Hat
I did not realize until now that CMP also owns the Computer Security Insitutute, who runs their own security conferences. The CSI conference is a strange beast. I wouldn't consider William Safire to be a "security expert," but there he is appearing as a keynote CSI speaker. Perhaps Black Hat is supposed to pull in another sort of demographic, one without as much gray hair?
BSD Certification Group Solicits Donations
Tuesday, November 15, 2005
Using Cache Snooping to Estimate Code Spread
However, today I learned of a Wired story that incorporates new Dan Kaminski research. Dan has provided a conservative estimate of the number of systems on which the Sony DRM software is installed, based on Luis Grangeia's cache snooping methodology.
Essentially Dan used his Deluvian Scanning Platform -- DoxPara Infrastructure Validation Project (DIVP) to ask name servers if they had cached results for the hosts associated with Sony's DRM. For example, in the following I query a name server to see if it knows how to resolve www.bejtlich.net. The key is to tell the name server not to perform recursion; if the name server can't answer my request on its own, it has to report the authoritative name servers for .net:
orr:/home/richard$ dig @kis.visi.com www.bejtlich.net A +norecurse
; <<>> DiG 9.3.1 <<>> @kis.visi.com www.bejtlich.net A +norecurse
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29658
;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 13, ADDITIONAL: 14
;www.bejtlich.net. IN A
net. 44802 IN NS k.gtld-servers.net.
net. 44802 IN NS l.gtld-servers.net.
net. 44802 IN NS m.gtld-servers.net.
net. 44802 IN NS a.gtld-servers.net.
net. 44802 IN NS c.gtld-servers.net.
net. 44802 IN NS d.gtld-servers.net.
net. 44802 IN NS e.gtld-servers.net.
net. 44802 IN NS f.gtld-servers.net.
net. 44802 IN NS g.gtld-servers.net.
net. 44802 IN NS h.gtld-servers.net.
net. 44802 IN NS i.gtld-servers.net.
net. 44802 IN NS j.gtld-servers.net.
a.gtld-servers.net. 155541 IN A 18.104.22.168
a.gtld-servers.net. 159964 IN AAAA 2001:503:a83e::2:30
b.gtld-servers.net. 156332 IN A 18.104.22.168
b.gtld-servers.net. 159476 IN AAAA 2001:503:231d::2:30
c.gtld-servers.net. 156283 IN A 126.96.36.199
d.gtld-servers.net. 156283 IN A 184.108.40.206
e.gtld-servers.net. 156283 IN A 188.8.131.52
f.gtld-servers.net. 156283 IN A 220.127.116.11
g.gtld-servers.net. 156283 IN A 18.104.22.168
h.gtld-servers.net. 156283 IN A 126.96.36.199
i.gtld-servers.net. 156299 IN A 22.214.171.124
j.gtld-servers.net. 156299 IN A 22.214.171.124
k.gtld-servers.net. 156299 IN A 220.127.116.11
l.gtld-servers.net. 156299 IN A 18.104.22.168
;; Query time: 49 msec
;; WHEN: Tue Nov 15 16:12:49 2005
;; MSG SIZE rcvd: 503
As you can see, kis.visi.com did not know how to resolve www.bejtlich.net, so it gave the .net generic top level domain server list.
Next I ask kis.visi.com to resolve www.bejtlich.net, but I just use the host command and I allow kis.visi.com to ask a name server that knows how to resolve www.bejtlich.net:
orr:/home/richard$ host www.bejtlich.net kis.visi.com
Using domain server:
Name: kis.visi.com
Address: 126.96.36.199#53
www.bejtlich.net has address 188.8.131.52
Using domain server:
Name: kis.visi.com
Address: 126.96.36.199#53
Using domain server:
Name: kis.visi.com
Address: 220.127.116.11#53
I get a response -- www.bejtlich.net is 18.104.22.168. Now when I use dig again and specify no recursion, kis.visi.com responds with the IP -- it has been cached.
orr:/home/richard$ dig @kis.visi.com www.bejtlich.net A +norecurse
; <<>> DiG 9.3.1 <<>> @kis.visi.com www.bejtlich.net A +norecurse
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42310
;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;www.bejtlich.net. IN A
www.bejtlich.net. 7194 IN A 22.214.171.124
bejtlich.net. 7194 IN NS ns18.zoneedit.com.
bejtlich.net. 7194 IN NS ns8.zoneedit.com.
ns8.zoneedit.com. 704 IN A 188.8.131.52
ns18.zoneedit.com. 384 IN A 220.127.116.11
;; Query time: 49 msec
;; WHEN: Tue Nov 15 16:13:20 2005
;; MSG SIZE rcvd: 131
Dan used this technique to ask as many name servers as possible to resolve connected.sonymusic.com, updates.xcp-aurora.com and license.suncom2.com. When I asked the kis.visi.com name server about connected.sonymusic.com, I got these results:
orr:/home/richard$ dig @kis.visi.com connected.sonymusic.com A +norecurse
; <<>> DiG 9.3.1 <<>> @kis.visi.com connected.sonymusic.com A +norecurse
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10447
;; flags: qr ra; QUERY: 1, ANSWER: 0, AUTHORITY: 2, ADDITIONAL: 2
;connected.sonymusic.com. IN A
sonymusic.com. 1255 IN NS udns2.ultradns.net.
sonymusic.com. 1255 IN NS udns1.ultradns.net.
udns1.ultradns.net. 155728 IN A 126.96.36.199
udns2.ultradns.net. 155944 IN A 18.104.22.168
;; Query time: 53 msec
;; WHEN: Tue Nov 15 16:29:38 2005
;; MSG SIZE rcvd: 125
This means some system has asked kis.visi.com to resolve an unspecified sonymusic.com host before I did. There is no result for connected.sonymusic.com, however. Compare that result with the following for www.sonymusic.com:
orr:/home/richard$ dig @kis.visi.com www.sonymusic.com A +norecurse
; <<>> DiG 9.3.1 <<>> @kis.visi.com www.sonymusic.com A +norecurse
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37716
;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;www.sonymusic.com. IN A
www.sonymusic.com. 211 IN A 188.8.131.52
sonymusic.com. 211 IN NS udns2.ultradns.net.
sonymusic.com. 211 IN NS udns1.ultradns.net.
udns1.ultradns.net. 147104 IN A 126.96.36.199
udns2.ultradns.net. 147320 IN A 126.96.36.199
;; Query time: 53 msec
;; WHEN: Tue Nov 15 18:53:23 2005
;; MSG SIZE rcvd: 135
Notice the answer?
Next I try querying for connected.sonymusic.com, and we check the dig results again:
orr:/home/richard$ host connected.sonymusic.com kis.visi.com
Using domain server:
Name: kis.visi.com
Address: 188.8.131.52#53
connected.sonymusic.com has address 22.214.171.124
Using domain server:
Name: kis.visi.com
Address: 188.8.131.52#53
Using domain server:
Name: kis.visi.com
Address: 18.104.22.168#53
orr:/home/richard$ dig @kis.visi.com connected.sonymusic.com A +norecurse
; <<>> DiG 9.3.1 <<>> @kis.visi.com connected.sonymusic.com A +norecurse
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 284
;; flags: qr ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;connected.sonymusic.com. IN A
connected.sonymusic.com. 3592 IN A 18.104.22.168
sonymusic.com. 87 IN NS udns1.ultradns.net.
sonymusic.com. 87 IN NS udns2.ultradns.net.
udns1.ultradns.net. 146980 IN A 18.104.22.168
udns2.ultradns.net. 147196 IN A 126.96.36.199
;; Query time: 53 msec
;; WHEN: Tue Nov 15 18:55:26 2005
;; MSG SIZE rcvd: 141
The other two domains returned the gtld name servers. That means no one else asked kis.visi.com about those domains or hostnames recently.
Nice work Dan -- cool stuff.
Monday, November 14, 2005
Extrusion Detection Shipping at Barnes and Noble
Alternatively, you might be able to win a copy in the monthly raffle held at my local ISSA NoVA chapter meeting. Last time I provided a copy of Real Digital Forensics and a Network Security Operations T-shirt. Tuesday (tomorrow) is the last day to RSVP for the Thursday meeting. Steve Crocker will talk about securing DNS at the Oracle building in Reston.
Sunday, November 13, 2005
Problems with FreeBSD 6.0 as VMware Workstation Guest
After reading this post, I tried changing this sysctl:
gruden:/root# sysctl -a kern.timecounter.hardware
kern.timecounter.hardware: ACPI-fast
gruden:/root# sysctl kern.timecounter.hardware=TSC
kern.timecounter.hardware: ACPI-fast -> TSC
That had no effect. This is my freebsd.vmx file:
config.version = "8"
virtualHW.version = "4"
scsi0.present = "TRUE"
scsi0.virtualDev = "lsilogic"
memsize = "128"
ide0:0.present = "TRUE"
ide0:0.fileName = "FreeBSD-000003.vmdk"
ide1:0.present = "TRUE"
ide1:0.fileName = "auto detect"
ide1:0.deviceType = "cdrom-raw"
floppy0.fileName = "A:"
ethernet0.present = "TRUE"
usb.present = "FALSE"
sound.present = "FALSE"
sound.virtualDev = "es1371"
displayName = "freebsd6-0_a"
guestOS = "freebsd"
nvram = "freebsd.nvram"
sound.startConnected = "FALSE"
usb.generic.autoconnect = "FALSE"
floppy0.startConnected = "FALSE"
ide0:0.redo = ""
ethernet0.addressType = "generated"
uuid.location = "56 4d 1e 0b c0 77 f6 f2-55 f3 38 5f 3a 47 3e b3"
uuid.bios = "56 4d 1e 0b c0 77 f6 f2-55 f3 38 5f 3a 47 3e b3"
tools.remindInstall = "FALSE"
ethernet0.generatedAddress = "00:0c:29:47:3e:b3"
ethernet0.generatedAddressOffset = "0"
ide1:0.startConnected = "FALSE"
tools.syncTime = "TRUE"
Originally the file had the last variable appear thus:
tools.syncTime = "FALSE"
Either setting had no effect. The host OS is Windows Server 2003 Enterprise x64 Edition SP1. The weird part of this is that a FreeBSD 5.4 VM running within exactly the same parameters has no problem on this system. This does not appear to be an isolated problem.
Is anyone successfully running FreeBSD 6.0 within VMware Workstation?
Update: I just copied a complete clone of this VM to my Windows 2000 Professional laptop running the same version of VMware Workstation. (Yes, I have two licenses!) :) It made no difference. The 5.5 RC2, VMware Workstation 5.5.0 build-18007, was no better with FreeBSD 6.0 as far as time goes. However, the excessive beeping that I saw with FreeBSD 6.0 on VMware WS 5.0 was shortened considerable on WS 5.5.
I just posted this story as a question to the VMTN forums. I also posted to freebsd-emulation.
Saturday, November 12, 2005
Presentations on OpenBSD Ports and More
I do agree with some of Marc's critique, however. It would be nice to have package update tools built into the base system. Perhaps they could be written in Perl to avoid adding Ruby? We are starting to see new ports tools developed outside of the base now being added to the base, with Colin Percival's portsnap now in FreeBSD 6.0. I expect to see this trend continue because Colin is a member of the FreeBSD project now. (He's the security officer.)
The second presentation is OpenBSD Networking Update by Henning Brauer. OpenBSD is doing some cool work with OpenBGPD and I see now that OpenOSPFD is planned as well.
Thursday, November 10, 2005
Sample Extrusion Detection Chapter Posted
"MJR: I've noticed you're a fan of Bruce Lee! It's interesting to me how a lot of us security guys find parallels between computer/network security and the martial arts/art of war. Remember Lee's great "It's like a finger pointing away to the moon" speech? What do you think would be the equivalent for a student of computer security? What do you think Bruce would tell us?
RB: I am indeed a fan of Bruce Lee, and I've practiced several martial arts... I advise that intruders should be viewed as smart (sometimes smarter than you) and unpredictable, and able to beat your defenses. Bruce would probably agree. He would train to be ready for whatever his opponent would deliver, and he would have techniques in place to deal with the consequences of not blocking an initial punch or kick. Rather than failing catastrophically when an opponent lands a blow, Bruce would take advantage of the attacker's proximity to initiate a different sort of counterattack or improved defense."
The chapters are as follows:
- Network Security Monitoring Revisited
- Defensible Network Architecture
- Extrusion Detection Illustrated
- Enterprise Network Instrumentation
- Layer 3 Network Access Control
- Traffic Threat Assessment
- Network Incident Response
- Network Forensics
- Traffic Threat Assessment Case Study
- Malicious Bots
- Epilogue
- Appendix A: Collecting Session Data in an Emergency
- Appendix B: Minimal Snort Installation Guide
- Appendix C: Survey of Enumeraiton Methods
- Appendix D: Open Source Host Enumeration
The book should begin shipping tomorrow. If you have any suggestions for errata, please send them to me via richard at taosecurity dot com. Thank you!
Deleting Hard Drives
I found DBAN very easy to use. It boasts some impressive features too.
When you boot from the floppy image or CD-ROM .iso you see this screen.
The About screen offers warnings and caveats.
I like the ability to boot using one of the available deletion methods.
I simply hit [enter], which started DBAN in interactive mode. Here you can set parameters for wiping the drive.
In the future I plan to carry a DBAN floppy with me to wipe hard drives prior to installing my own NSM software.
Tuesday, November 08, 2005
Powerful Laptop Recommendations?
- Intel® Pentium® M Processor 760 [2.00GHz, 2MB L2 cache, 533MHz FSB]
- NVIDIA GeForce video, to take advantage of their FreeBSD drivers and avoid ATI
- Gigabit NIC
- 802.11b/g is nice, especially if disabled via external switch
- Bluetooth -- not sure if I need it?
- Under 7 lbs -- my current laptop is more like a ThinkBrick
- At least a 14.1" screen; I don't care about widescreens
I like the features of the Toshiba Tecra M3, but the reviews are terrible. I really like the durability and keyboard of my Thinkpad and I worry what other vendors are going to provide. I appreciate your help.
Update: Thank you for all of your comments. I've decided to wait for the arrival of Windows Vista in Q306. By that time I expect to see Intel Virtualization Technology in 64 bit mobile CPUs like the Intel Merom, which will be very helpful for my classroom setup. There's an outside chance I would get a Mac running on Intel as well, if VMware was supported.
Congratulations to Feds
This is exactly the sort of work that needs to be done. Security professionals cannot win against intruders if only the "vulnerability" variable of the risk equation is addressed. We need law enforcement to reduce the "threat" variable as well. The suspect in this case is a 20-year-old living in California. This is the sort of perpetrator who can be deterred, unlike a foreign intelligence agent or member of organized crime. The more bot net operators who are put in jail, the fewer lower-end threats we will need to stop.
Monday, November 07, 2005
New SearchSecurity.com Tip Posted
"Network-based IDSes are deployed to identify compromised targets, while network-based IPSes are deployed in an effort to prevent compromise. Both systems must be able to recognize malicious traffic to issue warnings or block offending packets.
IDSes, however, have the upper hand in identifying intrusions, because they have the luxury of generating an alert based on traffic from the attacker to the victim or from the victim to the client. In other words, an IDS can alert on either the inbound attack traffic or the outbound victim response.
But to prevent an intrusion, an IPS must deny incoming attack traffic. An IPS that only inspects outbound traffic allows a target to be compromised. An IPS that makes a block decision based on responses from the victim is an 'intrusion containment system,' not an IPS."
I've contacted the site editor to see if they can fix the corrupted Windows command prompt output.
Websense ToorCon Presentation
Friday, November 04, 2005
Latest Book Arrives Soon
I looked at the Best Book Buys Top 100 List this evening and saw these results:
I don't understand these book rankings, which are listed "as of 28-Oct-2005". Here are the top 5 books:
- Wild at Heart: Discovering the Secret of a Man's Soul by John Eldredge
- The Complete Calvin and Hobbes by Bill Watterson
- Financial Accounting by Robert Libby
- The Game: Undercover In The Secret Society Of Pick-up Artists by Neil Strauss
- The World Is Flat: A Brief History Of The Twenty-first Century by Thomas L. Friedman
I could not imagine a more ecclectic groups of books! I guess having my three books in the rankings is better than not seeing them there. Incidentally, the list includes two other books to which I contributed; number 11 is Incident Response & Computer Forensics, 2nd Ed by Chris Prosise, Kevin Mandia, and number 18 is Hacking Exposed: Network Security Secrets and Solutions, 4th Ed by Stuart McClure, Joel Scambray, and George Kurtz.
I have ideas for another book which I plan to reveal soon. If anyone has feedback on any of my books or ideas for future work, please feel free to leave a comment or send me email. Thank you.
Sguil 0.6.0-RC2 Available
- MySQL's MERGE storage engine is used. The MERGE storage engine, also known as the MRG_MyISAM engine, is a collection of identical MyISAM tables that can be used as one. All Snort alerts and SANCP session data is now stored in MERGE tables, resulting in better scalability and performance. Sguil author Bamm Visscher reports "I went from being able to keep ~6 million rows to >300 million rows."
- All sensor communication is performed through sensor_agent.tcl. This allows Sguil to be seemingly one of the few programs that respects the new licensing of MySQL under the GPL.
- Support for Snort's sfPortscan function has been added. Users no longer need to patch and use the portscan preprocessor.
- Increased use of tabs for window management provides better access to new information like sensor status.
Barring unforeseen issues, Sguil 0.6.0-RC2 will be released soon as 0.6.0. If you'd like to test the RC2, please download it.
I plan to create a VM image using FreeBSD 6.0 RELEASE and Sguil 0.6.0, suitable for use in VMware Player.
FreeBSD 6.0 RELEASE Announced
I should have a new article in the February 2006 issue of SysAdmin Magazine explaining the simplest way to keep the FreeBSD OS and applications up-to-date.
Network Forensics? Please.
When I mention "network forensics," I define it as the art of collecting, protecting,
analyzing, and presenting network traffic to support remediation or prosecution. This is in line with the definition of forensics:
"1. The art or study of formal debate; argumentation.
2. The use of science and technology to investigate and establish facts in criminal or civil courts of law."
It turns out PMG's use of the term "Network Forensics" has nothing to do with any recognized application of the term. They say:
"Network Forensics is the study of the micro transactions of inter-network components, platforms and the applications that process on and across them.
By taking a forensic measurement of a micro transaction, quantifying the repeated dependency on the micro to that of the macro we can quantify the improvement for an end user that specific IT optimizations might provide. On the business process side, quantification of the cost of the macro transaction time spent by an end user can be quantified in annual cost or lost productivity associated with slow applications. Knowing optimization improvements and their associated costs allows a long term ROI to be considered. The result? Best bang for the buck optimization!
Come join PMG NetAnalyst in a day of cross technology, vendor independent network training with a twist: PMG will take you on a journey down several complex multi-vendor network environments where troubles abound. You will be taught how to use a well rounded 'bag of tools' to analyze and troubleshoot the issues as well as how applying best practices could have avoided these issues. Forensics Day will show you how to save money as well as improve performance and reliability by using 'brain cells' instead of budget to solve and even prevent problems."
Please. This is not "network forensics" by any stretch of the imagination. This is an attempt to add a sexy name to the otherwise boring ideas of network troubleshooting. The latest iteration and expansion of the concept uses the term Business Service Management, which I learned about recently though the 1 September 2005 Network Computing magazine.
I understand there are similar uses of the term "forensics" outside of the legal realm. However, "network forensics" has had a security association for years. I would like to see it stay that way to avoid further cluttering our professional landscape.
Network Computing Misses the Mark
First, the 27 October 2005 issues includes an article called Open-Source Security Technology Joins Endangered List. Here are excerpts:
"For many users and vendors, network security is dependent on a collection of open-source programs that provide key capabilities, sometimes as standalone tools and sometimes as the basis for commercial products. Last month, however, the open-source status of two of those key technologies--Snort and Nessus--became threatened....
The moral is that heavy reliance on open source carries risk, and that the greatest insurance policy for open-source technology is participation by a large number of users and developers. If you're thinking of using open source, keep a close eye on what happens to both Snort and Nessus."
I would argue that open source carries much less "risk" when compared to closed applications. The fact that the code is open is the "greatest insurance policy," not "participation by a large number of users and developers." If an open source program is no longer maintained, it can be assumed by another developer. Assuming the license is truly open, that new developer can resume the project, fork it, or rebuild from scratch using the original as inspiration.
For example, Linux guru Tim Lawless started the Saint Jude project to protect the integrity of the Linux kernel, but had to abandon coding it in 2002. Last week Rodrigo Rubira Branco took over maintainership and released a new version. BASE, the replacement for the Web-based alert browser ACID, is a second example. The new version of SPADE hosted by Bleeding Snort is a third example. None of this would be possible with so-called less "risky" closed programs.
The second example of Network Computing missing the mark appeared in the following letter and response:
"I have a question concerning an application one of my consultancy clients needs that's targeted for Microsoft Data Center Server 2003, a product used to manage DPM, on Unisys 3S7000. The systems integrator is saying that 'for performance reasons,' it plans to 'modify the operating system' for the application.
It's been a long time since I've heard of any vendor advocating modification of a native OS to boost performance or achieve goals not supported by the OS. I've been all over Microsoft's OEM partner site and haven't read anything about using Data Center Server as an OEM product. Not even its predecessor, Data Center Server 2000, was ever available as a shrinkwrapped product; you had to have Microsoft services to implement it.
Have you ever heard of any vendor wanting to tweak the Windows kernel in order to support its application? Sounds risky...
Don MacVittie replies: Larry, your instincts are dead-on. Even in the Linux world, tweaking the OS for the application layer is generally considered taboo. There's just too much that can go wrong.
Are you sure the vendor is talking about making code changes to the kernel? Maybe what it has in mind is custom drivers, which are more acceptable, or a custom build, which is relatively common for OEMs.
If the vendor really does want to modify the kernel, you should tell your client to run away from it as fast as it can. There are enough good products out there to handle high-volume backups and replication without having to resort to such a drastic measure."
Good grief. "Even in the Linux world, tweaking the OS for the application layer is generally considered taboo. There's just too much that can go wrong." Like what, better performance? I do not know if it is possible for end users to make any modifications to the Windows kernel, perhaps via a sysctl mechanism as found in BSD. I do not fault the NWC writer for advising users to stay away from Windows kernel tweaks.
Linux and BSD are completely different beasts. I find the power to alter the kernel to be an advantage, not voodoo. In production I make few kernel customizations on BSD not because I am scared and need to "run away." I only make the customizations with which I am familiar, like adding support for IPSec or NAT. If I encountered a problem that could be addressed by customizing the kernel, I would take full advantage of the control that an open source OS provides.
What are your thoughts on these issues?
Tuesday, November 01, 2005
Dealing with FreeBSD Port Options
orr:/usr/ports/ftp/gftp# make
...menu appears, hit 'OK'...
===> WARNING: Vulnerability database out of date, checking anyway
===> Found saved configuration for gftp-2.0.18
===> Extracting for gftp-2.0.18
=> Checksum mismatch for gftp-2.0.18.tar.gz.
===> Refetch for 1 more times files: gftp-2.0.18.tar.gz
orr:/usr/ports/ftp/gftp# make
===> WARNING: Vulnerability database out of date, checking anyway
===> Found saved configuration for gftp-2.0.18
===> Extracting for gftp-2.0.18
=> Checksum mismatch for gftp-2.0.18.tar.gz.
===> Refetch for 1 more times files: gftp-2.0.18.tar.gz
===> WARNING: Vulnerability database out of date, checking anyway
===> Found saved configuration for gftp-2.0.18
What is happening? Where is the menu?
It turns out the menu process creates a file called 'options' in the /var/db/ports/PORTNAME directory. For example:
orr:/var/db/ports/gftp$ ls -al
total 6
drwxr-xr-x 2 root wheel 512 Nov 1 15:00 .
drwxr-xr-x 3 root wheel 512 Nov 1 14:44 ..
-rw-r--r-- 1 root wheel 167 Nov 1 14:59 options
orr:/var/db/ports/gftp$ cat options
# This file is auto-generated by 'make config'.
# No user-servicable parts inside!
# Options for gftp-2.0.18
If you want to eliminate the menu on a subsequent run of 'make', just delete the options file.
New FreeBSD Logo Announced
BSD Certification Group Publishes Usage Survey Results
- 77% report using FreeBSD
- 33% report using OpenBSD
- 16% report using NetBSD
- 3% report using DragonFly BSD
- 7% report "other"
On a related note, I have resigned my seat on the Certification Group and joined the Advisory Board due to time constraints caused by running TaoSecurity.


text:
Hey there Private Eyes!
Got your duct tape, piece of gum, random wire, and other odd misc items handy? Time is tick tick ticking. Quahog Heat Phase 2 is now live in our silly games. Just what all is in store for us with the new content? Let's Dive on in.
EVENT ENDS MONDAY MARCH 20th 2017 @ 3PM PACIFIC
For all the Event info, go HERE!
First up, the Basics
- Players will need to be on the App Market Version 1.39.0 or higher in order to see the event.
- Players will need to have completed The Color of Dirty Money Pt. 8
- Players will need to have at LEAST District 3 Unlocked and Al's complete.
- Players will only see this on the Mobile App Version (iOS, Google, Amazon, Facebook). NOT Windows Stand Alone
- PLAY THE GAME! Items unlock in stages and as you progress, so if you do not see an item it is most likely you have not progressed far enough in the Main Questline to unlock it. Check details below for more specifics on unlock points
- Don't have a TON of Tasks open in your Task Menu. If you have too many open, no new ones can arrive. (Keep it under 10). If you do not see new Tasks popping up, clear out some incomplete Tasks already on your List to make room for more.
Fish Delivery Van: 225 Clams, $45 & 30xp every 8hrs, Always Drops 5 Fish Bones
Bodacious Beer Sign: 75 Box of Donuts
Speed Boat (Water): 50 Box of Donuts
80s Palm Tree: 25 Box of Donuts
Party Palm: 10 Box of Donuts
Baby Party Palm Tree: 10 Box of Donuts
Roll of Police Tape (6): 84 Clams
Box of Police Tape (12): 150 Clams
Crate of Police Tape (20): 238 Clams
Erik Estrada: ***TIMED*** You will be directed to place him at Pt. 4 of the main Questline The Color of Dirty Money. Once you have done this you only have 7 days to unlock Erik Estrada.
3 Motorcycle Boots (Always):
Defeating Bertram Defeating Consuela in Phase 2
11 Bike Gloves (Uncommon): Get from Joe Investigate Counterfeit Goods OR Make Herbert Wear Arthritis Gloves OR Beverley Hills Art Gallery
8 Handcuffs (Extra Rare): Investigate
Teller Windows Casino Floor in Phase 2 OR Neon Tower (Premium)
6 Fanmail (Rare): Get from Po Po a Go Go Bar
Task: Make Miami Cop Peter Confiscate Evidence (6hrs)
MacGyver: 270 Clams, helps Investigate Casino Rooms & fight Consuela
Lifeguard Lois: Outfit to be finished in Al's
4 Sunscreen (Rare): Party Pier
15 Mousse (Common): Bonnie Tease Her Hair OR Megahit VHS Rental
21 Beach Balls (Uncommon): Herbert Watch Junior Volleyball OR Lifeguard Tower OR 80s Miami Founding Father
18 Seashells (Common): Investigate Blackjack Parlor OR Hot Pursuit Mystery Box OR Investigate Casino Floor
Moustache P.I. Joe: You will find him in the Hot Pursuit Mystery Box (see below for more details)
Aerobics Bonnie: You will find her outfit in the Luxury Wheels & Deals (see below for more details)
Similar to Phase 1, you will be Investigating Casino Rooms in Phase 2 in order to unlock the Boss (Consuela), release Card Sharks, and gain additional Materials you will need to continue moving forward.
Room 1: Blackjack Parlor
Time: 1hr 30min
Police Tape: 2
Characters: Erik Estrada & MacGyver
Chance Payout: 2 Card Sharks, Kingpin Consuela, 3 Boxes of Donuts
Room 2: Lounge
Time: 1hr 30min
Police Tape: 5
Characters: Miami Cop Peter & Aerobics Bonnie
Chance Payout: 6 Robbers, Kingpin Consuela. 3 Boxes of Donuts
Room 3: Casino Floor
Time: 1hr 30min
Police Tape: 3
Characters: Miami Cop Peter & Lifeguard Lois
Chance Payout: 2 Card Sharks, Kingpin Consuela, 6 Robbers, 3 Boxes of Donuts
Police Tape (Rare): Mort Repurpose Crime Tape OR Chris Investigate Scary Woods OR Jerome Empty The Lost & Found OR Erik Estrada Snack On Chips OR Discount Detective Agency OR Clam Buy Options in Shopping Cart
This is the new Bad Guy that will release by chance from the Casino Rooms and help you collect Materials.
Card Shark: Requires Video Poker Machine to clear
Video Poker Machine (Common): Seamus Host Offshore Betting OR Jerome Play Penny Slots
Chance Payout:
+4 Fish Bones
+1 Seashell
Kingpin Consuela will now take the place of the "Boss Battle" in the chopper pad area where you battled Bertram in Phase 1
Similar to Phase 1, you will need to Investisgate the Casino Rooms to first find and release Kingpin Consuela. Once released, you can then send Characters to battle her down to Zero Heart Points to get payouts to help you move forward in the Event.
TIMER: You will have 24hrs to take the Heart Points down to Zero and completely defeat the Boss
BATTLE TIME: 2hrs
Miami Cop Peter: 1 Damage
Chopper Cop Quagmire: 2 Damage
MacGyver: 2 Damage
Moustache P.I. Joe: 3 Damage
2HP Consuela: 12 Fish Bones
9HP Consuela: 30 Fish Bones
RANDOM PAYOUTS: (This is payout just for completing the 2hr fights)
+2 Fish Bones
+1 Box of Donuts
You will find this in the Event Area. Here is where you can exchange Materials for detective badges to purchases prizes in the Luxury Wheels and Deals. For Phase 2, you will be using Fish Bones to help with the Exchanges.
This is what is the exchanges I've seen in my game so far:
5 Fish Bones & 6 Medical Samples = 6 Detective Badges
8 Fish Bones & 15 Medical Samples = 6 Detective Badges
9 Fish Bones & 19 Medical Samples = 6 Detective Badges
15 Fish Bones & 22 Medical Samples = 6 Detective Badges
20 Fish Bones & 28 Medical Samples = 6 Detective Badges
8 Fish Bones = 4 Detective Badges
10 Fish Bones = 4 Detective Badges
12 Fish Bones = 4 Detective Badges
13 Fish Bones = 4 Detective Badges
15 Fish Bones = 4 Detective Badges
16 Fish Bones = 4 Detective Badges
18 Fish Bones = 4 Detective Badges
Fish Bones (Rare): Clear Card Sharks OR Fight Consuela OR Hot Pursuit Mystery Box OR Fish Delivery Van
Here is your usual location where you can exchange the Police Badges you collect during the Event for other Items.
Lifeguard Tower: $45 & 30xp every 8hrs, Chance Drop x2 Beach Balls
4 Detective Badges
Windsurfer (Water Deco):
3 Detective Badges
Party Pier (Water Building): $30 & 20xp every 4hrs, Chance Drop x2 Sunscreen
8 Detective Badges
Megahit VHS Rental: $40 & 25xp every 6hrs, Chance Drop x2 Mousse
5 Detective Badges
80s Miami Founding Father (Building Facade): $45 & 30xp every 8hrs, Chance Drop x2 Beach Balls
6 Detective Badges
Hold The Phone Store:$55 & 35xp every 10hrs
7 Detective Badges
Woogie Nights Discotheque: $40 & 25xp every 6hrs
5 Detective Badges
Aerobic Bonnie:
20 Detective Badges
Medical Supplies: (Always) Clearing Robbers OR Fighting Bertram OR Stolen Sample Getaway Van
Police Badges: Get from trading in medical supplies at the Hot Police Station
Police Tape (Rare): Mort Repurpose Crime Tape OR Chris Investigate Scary Woods OR Jerome Empty The Lost & Found OR Discount Detective Agency OR Clam Buy Option from Shopping Cart
Donuts: (Always) Investigating Bank Rooms OR Fighting Bertram OR Competing Questline Parts
We now have a Mystery Box in our games to tempt us with some tastey treats for the cost of 150 Clams a try. Remember, Mystery Boxes are completely optional and up to you to decide if it is worth it to you to give it a go with your precious Clams.
Moustache P.I. Joe (Costume)
Detective Scrotes (Character)
Stripper Jerome (Costume)
Foxy Boxing Car (Building): Always drops Seashells
175 Clams
25 Medical Samples
30 Fish Bones
3 Detective Badges
There you have the overall basics of Phase 2 of the Quahog Heat Event.
What do you think of it so far? Any tips for fellow Players? Any items you are most excited for? Any items you immediately purchased? Let us know.


text:
Fri May 4, 2012
This summer, Earls Court in London will be the venue for Olympic volleyball, but last night Samsung hired this vast space to launch a single product -- its new flagship phone, the Galaxy S III. (We really liked it incidentally, check out our hands-on preview here).
- Jenkins: Samsung's strategy different to its main rival, Apple
- The South Korean company has a phone to suit pretty much every potential customer
- But Samsung's scale could turn out to be a weakness as well as a strength, says Jenkins
- "In some respects, Samsung reminds me of Sony in the years before it all went wrong"
Hiring such a large space and filling it full of tech heads from all over the world was a sign of extreme confidence from the Korean electronics giant, and you only have to take a look at its last set of figures to see where the bravado is coming from. Net profit for the quarter was 5.05tn won, up 81%, and the main driver for this success was Samsung's Galaxy range of phones.
The Galaxy range has certainly been selling like hot cakes. This week, trend-watchers IDC put the company ahead of the competition in its latest state of the market analysis.
What's interesting to me is how different Samsung's strategy is to its other major smartphone competitor, Apple. There is only one iPhone released every year, and design-wise, each one has been broadly the same as the previous model, with the same size screen.
|Samsung Galaxy S III primed for release
Read more: Samsung unveils Galaxy S III smartphone with face, voice recognition
In contrast, Samsung has a bewildering number of different models that, viewed together, make almost no sense at all to the casual observer. This might seem like a recipe for confusion, but it also means that that Samsung has a phone to suit pretty much every potential customer. Want something pocketable that's cheap? There's a Samsung Galaxy for that. Need lots of power, a massive screen and a stylus to draw pictures with? Samsung Galaxy can help. And on it goes.
Apple is fantastic at making a product that's very aspirational, and it makes an enormous amount of money on every iPhone, but in terms of simply shifting a lot of phones and achieving huge scale, it's Samsung that has the winning strategy.
Both Apple and Samsung are so successful in fact, the battle for the top smartphone slot is starting to look like a two-horse race.
But it won't necessarily always be this way. HTC was the darling of the mobile industry a while back until Samsung arrived to eat its lunch. The transformation in the company's fortunes was rapid, and there's every possibility that Samsung could see an equally rapid turnaround at some point in the future -- in mobiles, you're only as good as your last hit product.
There's also a chance that Samsung's scale could turn out to be a weakness as well as a strength. In some respects, Samsung reminds me of Sony in the years before it all went wrong. There are lots of divisions that don't appear to communicate with each other very well, making a vast number of different products, most of which are decent, but not outstanding.
Read more: New Samsung 'not for everyone'
There's a desire to be the number one player in every category Samsung is in, which is laudable, but probably unachievable. Does Samsung really need to be the number one maker of cameras in the world? Or MP3 players? Probably not. I can't help but wonder whether its smartphone profits are covering up some deeper organizational problems. Then again, it seems to be working for now, so it may all turn out fine.
If a company was to snatch the smartphone crown from Samsung, which would it be? One answer might be Nokia, which may seem like a crazy thing to say following its latest set of disastrous financial results. But there is still a chance that it might not be game over.
Nokia's flagship mobile running Microsoft's Windows Phone, the Lumia 900, has recently appeared in America to decent critical acclaim. In the U.S., Android doesn't have quite the same grip on the market that it does in the UK in particular, so there's an outside chance Nokia could sell enough handsets to convince developers deal with the platform's biggest problem -- a lack of apps.
If that happens, the launch of Windows Phone 8 could open the whole field up again.


text:
EHRIG, Donald R. 1924-2014
Posted By: Tammy (email)
Date: 3/18/2015 at 13:04:01
Donald Ralph Ehrig, 89, of Reinbeck, passed away into the arms of Jesus on Sunday, March 23, 2014 at the Grundy County Memorial Hospital in Grundy Center. A funeral service will be held on Friday, March 28th at 10:30 A.M. at the Amity United Presbyterian Church in rural Reinbeck. Visitation will be held on Thursday, March 27th from 5 to 7 P.M. at the French-Hand Funeral Home in Reinbeck. Burial will follow the funeral service at the Grant Township Cemetery with military rites conducted by the Reinbeck American Legion Action Post #242. Memorials may be directed to the family.
Don was born on May 31, 1924, the eldest son of Ernest & Emma (Raum) Ehrig. Peter Byrnes later became his step-father. He graduated from Dinsdale High School and served as a radio operator in the United States Navy. He worked for many years at Moeller and Walter at the Dinsdale Elevator, later purchasing the business. On March 14, 1948, he was united in marriage to Jeanette Selma Thorsbakken of Story City. They became the parents of three children. Jeanette passed away in 1989. Betty Wrage then became his wife.
Don was a lifelong member of the Amity United Presbyterian Church and was a member of the Reinbeck American Legion Action Post #242. He was also a lifelong Cubs fan.
He is survived by his wife Betty; children Jon Ehrig of Marshalltown, IA Janice (Craig) Carpenter of Newton, IA and Lou Ann Ehrig of Grundy Center; grandsons Paul (Rhonda) Carpenter and Mike & Brian (Heather) Ehrig; 3 great-granddaughters Taylor Carpenter and Brenna & Kenzie Lanser; step-children Wayne (Doris) Wrage, Kathy (Ronn) Ross, Tim (Janice) Wrage & Valorie (Mark) Kruse; 2 brothers Jerry & Paul Ehrig.
Don was preceded in death by his parents; step-father Peter Byrnes; wife Jeanette; 2 sisters Dorothy Gunovich & Neva Petersen; step-sister Loretta Hanus. He deeply mourned the loss of his grandson Peter Carpenter, granddaughter Heather Wrage-Mitchell & great-grandson Gabe Ehrig.
--Abels Funeral Homes (www.abelsfuneralhomes.com)
Grundy Obituaries maintained by Tammy D. Mount.
WebBBS 4.33 Genealogy Modification Package by WebJourneymen


text:
|Total price is per:
|selling unit:
|€15,90 / m² incl. tax. One Pack is 1,08 m²
Etna Blanco glazed is a very easy to maintain tile.
Application: bathroom, wall cladding, kitchen
Flooring: 25x40 cm and the desired formats on request!
Origin: Spain
Gesteinart: Ceramic
Delivery: Ex stock
- Delivery throughout Europe possible
- Sale Reserved
- No minimum order fee


text:
Product Description
Oval dish with filled scratch decoration by Sabine Nemet
Dimensions: Width with lugs:19 cm, Width at narrow point: 14.5 cm
Clay College is a not-for-profit organisation so all the proceeds from our online sales help to support the work we do.
Shipping Information: COVID19 update- please note that as the Clay College gallery is currently closed, orders are being shipped directly from the potters. We will do all we can to ensure that orders are processed quickly although, there is likely to be a slight delay. At this time we, unfortunately, cannot ship international orders.
Please send any queries to email@example.com
Ref: SB1