text:
Discharges from Quarries in the John Graves Scenic Riverway, Am I Regulated?
General Permit TXG500000
If you operate a quarry in the John Graves Scenic Riverway you may be regulated under 30 TAC Chapter 311, Subchapter H
If you operate a quarry that is located more than one mile from a water body within a water quality protection area in the John Graves Scenic Riverway, you may qualify for coverage under TPDES General Permit, TXG500000 , which was issued on April 7, 2014. (Help with PDF)
Before discharging from a quarry meeting these criteria, you must have authorization under TXG500000:
To obtain authorization under TXG50000:
1. Acquire and Read general permit TXG500000 to make sure it applies to your quarry.
- If the general permit does not apply, you may need to obtain an individual permit.
- If the general permit does apply, continue with Step 2.
2. Review your facility's compliance history ranking (HTML):
- If your facility is new or has a ranking of "high" or "satisfactory," continue to Step 3.
- If the compliance history ranking is "unsatisfactory," then your facility is not eligible for coverage under a general permit. You must apply for an individual permit instead. To apply for an individual permit go to: http://www.tceq.texas.gov/permitting/wastewater/industrial/TPDES_industrial_wastewater_steps.html
3. Submit an application package, which includes the following information:
- Completed Notice of Intent (NOI) as required in Part III Section A of general permit
- Restoration Plan as described in Part IV of the general permit
- Proof of Financial Assurance for Restoration as required in Part V of the general permit
- Pollution Prevention Plan (P3) as described in Part VI of the general permit
- Application Fee ($1,215.00) submitted to:
Financial Administrative Division, Revenue Section (MC-214)
Texas Commission on Environmental Quality
P.O. Box 13088
Austin, Texas 78711-3088
or by ePay at: https://www3.tceq.texas.gov/epay/
- If you are discharging to a Municipal Separate Storm sewer (MS4) you must submit a copy of the NOI and the notification package to the operator of that system at the same time submittal is made to the TCEQ.
Following review of the NOI, Restoration Plan, financial assurance for restoration, and P3, the executive director may determine that:
- the submission is complete and confirm coverage by providing a notification and an authorization number;
- the NOI, Restoration Plan, financial assurance for restoration, and/or P3 are incomplete and send a notice of deficiency requesting additional information or coverage is denied.
After obtaining authorization under this general permit you must:
- Maintain a copy of General Permit TXG500000 and adhere to the requirements of the permit.
- Utilize and update as needed your Pollution Prevention Plan (P3)
- Provide monitoring results at the intervals specified in the permit on an approved DMR (EPA Form 3320-1) that is signed and certified as required by Part X.G. 10. Copies of the approved DMR (EPA Form 3320-1) can be requested by emailing the request to: firstname.lastname@example.com
- Unless otherwise specified, the self-report form (EPA Form 3320-1) must be submitted on a monthly basis to the TCEQ as noted below
Texas Commission on Environmental Quality
Dallas/Fort Worth Regional Office
2309 Gravel Dr.
Fort Worth, Texas 76118-6951
Texas Commission on Environmental Quality
Enforcement Division (MC-224)
Austin, Texas 78711-3087
- Pay the annual water quality fee of $800.00 per year will accrue on September 1st of each year that the permit is active. The permit coverage continues to be active until a letter of termination is submitted and approval to terminate has been granted by TCEQ.
Additional Information about TXG500000
The following additional information is available:
- Fact Sheet ,
- Executive Director's Response to Comments , and
- Commission Resolution Issuing the General Permit .
Authorization to Discharge
For quarries located within one mile or greater than one mile of a water body within a water quality protection area in the John Graves Scenic Riverway that do not qualify for coverage under TXG500000, you may obtain authorization to discharge into or adjacent to water in the state by applying for an individual permit . Even if the general permit described above applies to your situation, you may request coverage under an individual permit.
Contact us if you have questions.
Archived 2008 TPDES General Permit TXG500000
TPDES General Permit TXG500000 This document provides the requirements from the expired 2008 TPDES TXG500000.
2008 Executive Director's Response to Comments : This document provides the Executive Director's Response to Comments on the expired 2008 TPDES TXG500000.
2008 Fact Sheet : This document provides additional guidance on the expired 2008 TPDES TXG500000.


text:
- Status Completed
- Budget N/A
- Total Bids 70
Project Description
Project Description: I require a highly professional Search Engine optimization expert in on-page or onsite optimization for my website.
The ideal candidate should have good track records and high feedback with proven results.
Our target is to get to a first page ranking on Google and Yahoo in the UK AND IRELAND for our website [url removed, login to view] with 6 keywords.
In addition you must analyze our website for proper SEO optimization to assist in achieving these results.
You will suggest and agree with us the 6 keywords.
You must guarantee the top 3 of Google UK and Ireland on 1st page at least for three of six keywords.
Please indicate what methods you will use, the timeline for delivery including verifiable reports that you will send me.
Google guidelines must be followed and no way should be compromised
Only white hat, experienced, highly ranked on [url removed, login to view] SEO experts should bid
Quality back links must relate to site topic on high quality relevant sites
No spam method(s) can be used
No black hat, gray hat or unethical SEO methods are to be used
No junk profile building techniques are to be used
No use of automated software or bots
No links from under construction pages
No java links, jump scripts, framed pages, redirects, cloaking, CSS redirects, 301 redirects, dynamic links, flash sites/pages, hidden links, no string parameters, etc.
No link farms, traffic exchanges, link exchange programs or web rings
No paid traffic sites
No banned sites, porn, gambling, violent, illegal sites, etc.
No methods or techniques that will get the site banned, de-indexed or sandbox
Expert understanding of Google & Panda Updates and how to work with them
Must be very experienced, have high rating on [url removed, login to view], explain exactly what methods you will use for this project & be able to communicate clearly in English.
Provide detailed SEO techniques you will use & verifiable examples of completed projects you have done - I may contact customer to verify results (so include contact info).
A payment schedule will be agreed before the project is awarded.
Reports need to be provided on a regular basis.
One report per week is the minimum requirement.
You need to send us weekly reports of directory submission, article submission, bookmark submission and other things that you will do to achieve the goal.
Payment will only be sent if required results are achieved within a six weeks time frame.
If you are able to achieve the desired results set forth above within the six weeks time frame we will pay a bonus of an additional 15% of the agreed upon job price.
We do not want any service offerings other than what is detailed in the requirement.Get free quotes for a project like this
Completed by:
Skills Required
Looking to make some money?
- Set your budget and the timeframe
- Outline your proposal
- Get paid for your work
Hire Freelancers who also bid on this project
Looking for work?
Work on projects like this and make money from home!Sign Up Now
- Forbes
- The New York Times
- Time
- Wall Street Journal
- Times Online

subset: commoncrawl


text:
This week's walk down memory lane takes us past an epic night for Earl Weaver, the Mick's funeral and some dude bringing a friggin' piano to Ebbets Field, all in the name of union-busting.
History is the best.
This week's walk down memory lane takes us past an epic night for Earl Weaver, the Mick's funeral and some dude bringing a friggin' piano to Ebbets Field, all in the name of union-busting.
History is the best.
Not a surprise, but a news item on a slow news day is a news item on a slow news day: Diamondbacks manager Torey Lovullo has named Zack Greinke as the club's Opening Day starter.
Greinke's first season with the Diamondbacks is not exactly what the club hoped for when he signed a six-year, $206.5 million deal in December of 2015. He dealt with oblique and shoulder issues while struggling to a 4.37 ERA over 26 starts. Greinke hasn't pitched yet this spring, but will make his spring debut on Friday. He and the club are obviously hoping for a quiet March and a strong beginning to the season.
Either for its own sake or to increase the trade value of a player who was acquired by the previous front office regime.
A new website has launched. It's called "La Vida Baseball," and it's all about celebrating the past, present and future of Latino baseball from a Latino perspective.
The site, produced in partnership with the Hall of Fame, has four general areas of focus:
As the site has just launched there aren't yet a ton of stories up there, but there is one about Roberto Clemente, another about Felix Hernandez and some other stuff.
The site is much-needed. Baseball reporters for American outlets are overwhelmingly white, non-Spanish speakers. Reporters, who, generally, gravitate to the players who are the most like they are. Which is understandable on some level. When you're writing stories about people you need to be able to communicate with them and relate to them on more than a mere perfunctory level. As such, no matter how good the intentions of baseball media, we tend to see the clubhouse and the culture of baseball from a distinctly American perspective. And we tend to paint Latino players with a broad, broad brush.
La Vida Baseball will, hopefully, remedy all of that and will, hopefully, give us a fresh and insightful depiction Latino players and their culture.


text:
Midland Weather Alert Digital Emergency
Catalog #: 2000687
Sold out online
Find a store near you
FREE shipping & returns
- Midland Emergency Crank Tri-Power radio with Flashlight, NOAA weather alert, and AM/FM Radio.
- Multiple sustainable power options, Solar Panel, Hand Crank, and 2000MaH rechargeable battery built in. UBS output can charge various devices.


text:
When Leslie McDonald tore his ACL in July, the collective hoops world shrugged. Sure, the North Carolina guard was a nice player, but UNC's season -- one that promised a run at the national title from the moment Harrison Barnes, Tyler Zeller and John Henson eschewed the previous month's NBA draft -- would hardly ride on his presence or lack thereof.
When fellow Tar Heel guard Dexter Strickland tore the ACL in his right knee Jan. 19 at Virginia Tech, there was greater cause for concern, but no full-on freak out. Strickland's absence would weaken Carolina's perimeter defense, no question, but as long as Marshall was around, flinging his trademark pinpoint passes to that loaded frontcourt, Roy Williams' team would still have much to say about the race for the 2012 national title.
On Sunday night, when Marshall crossed to his right hand and drove against Creighton forward Ethan Wragge, he took a hard body foul and landed awkwardly, but nothing seemed amiss. The point guard immediately bounced to his feet. He didn't wince or groan or gingerly rub his right wrist. He walked stonefaced to the free-throw line and he played for most of the rest of UNC's blowout of Creighton, showing no obvious signs that the collision with Wragge had indeed gone seriously, invisibly wrong.
This is the anatomy of a season-changing mid-tournament injury. Months-old personnel losses suddenly loom large. Innocuous falls eventually reveal themselves as dire. And a team with year-old designs on a 2012 national title -- one that remained among the top two or three contenders just 24 hours ago -- can abruptly see their fortunes halted.
Such is the effect of the broken scaphoid bone Marshall suffered in Sunday's 87-73 win over Creighton. The question now is straightforward enough:
Where does UNC go from here if Marshall is unable to play?
First, a caveat: We're not sure Marshall can't play the rest of the way, or that he won't. Maybe the UNC doctors will work wonders. He's having surgery Monday, so maybe he'll battle through the pain and give it a go. Even if he's not at 100 percent, Marshall could still be somewhat effective with the injury.
But on Sunday night, Marshall told reporters that he felt the most pain "any time I tried to dribble with my right hand." Needless to say, that doesn't sound promising.
So if he is out or severely limited -- with an emphasis on if -- how would that affect UNC's chances to win the national title?
To put it simply: It would be a disaster.
It requires no exaggeration to say Marshall is one of the best passers the college game has seen in years. His 351 assists this season were easily the most in a single season in ACC history. (The previous record, set by Craig Neal of Georgia Tech in the 1987-88 season, was 303). Marshall has created an assist on 44.5 percent of his possessions, the third-highest mark in the country.
Much of these assists came on UNC's patented fast break, and rarely has a player so perfectly matched a coach and his system. The point guard's passing is intuitive and frequently brilliant. When he catches the ball on the break, and Henson, Zeller and Barnes are streaking toward the rim, you could rest assured the Tar Heels -- whose 73-possessions-per-game pace make them one of the fastest teams in the country -- are about to get exactly what Williams wants, what he always wants: an easy transition basket.
Marshall has essentially been this good since Williams inserted him into UNC's starting lineup midway through the 2010-11 season. Before the then-freshman took over, Williams was still stubbornly standing by inefficient point guard (and soon-to-be transfer) Larry Drew II, and these Heels were a frustrating, disjointed offensive group. The disappointing losses, including a 20-point loss at Georgia Tech, piled up. Harrison Barnes, the No. 1 recruit and putative savior, had been written off as a bust. Carolina fans -- fearful of a repeat of 2010's disastrous 20-17 finish -- were on the verge of revolt.
After the switch, everything changed, and North Carolina caught fire and won the ACC regular-season title.
The Tar Heels as we now know them -- a high-flying, fluid, uptempo offensive team straight out of Roy Williams central casting -- were born. This was not a coincidence.
Of late, as teams scouted UNC and coaches decided their best bet was to play off Marshall and force him to shoot, the point guard expanded his game further. Marshall scored in double figures in six straight games after pulling that off in just four of the first 30 games of the season.
In short: Few players in the country are as important to their team as Kendall Marshall is to North Carolina.
There are more talented players in college basketball. There are more talented players in UNC's lineup. But what player in the nation melds one specific skill -- in Marshall's case, brilliant all-court passing -- with his team's needs so thoroughly? In the past two seasons, what player has changed his program's fortunes so sweepingly?
It's important to remember, of course, that even if Marshall is out or limited, North Carolina is still very talented. Zeller, Henson, Barnes, James Michael McAdoo and Reggie Bullock still form a formidable front line. The Tar Heels' Sweet 16 matchup -- which just so happens to be the No. 13-seeded Ohio Bobcats -- might afford them the rare opportunity to play without their point guard and still advance to the Elite Eight. (Plus, the injury's defensive impact is less dire: Marshall's perimeter defense [or lack thereof] has been his most consistent and glaring flaw, and there's a chance UNC might even improve with different combinations of guards at the point of defensive attack.)
Relative to the rest of the Midwest Region, the Tar Heels may still end up in the Final Four. There's no question it could happen.
Relative to the rest of the tournament field, though? Relative to Syracuse or Kansas? To Michigan State or Ohio State? Or -- and let's just get down to brass tacks here -- Kentucky? If Marshall is unable to play, or is at far less than 100 percent -- and we can't emphasize enough that nothing is yet official -- the Heels will not only be adjusting to a major psychic loss, they'll be losing their most invaluable player, the one who not only laces point-perfect passes but controls the tempo, initiates the offense and facilitates just about everything the Tar Heels do.
Can Justin Watts fill in? Can Stillman White? In the short term, maybe. In the context of this team's ultimate, almost expected goal, the answer is almost certainly no.
But there's no way of short-selling this, no contrarian position to take: If Marshall is out or limited, North Carolina's chances of winning the program's seventh national title in history -- the long-term trajectory of this team since Barnes, Zeller and Henson made the decision to stay in school -- become drastically slimmed.
Injuries don't get much more important or poorly timed than this.


text:
IP HD 3MP Bullet Security Camera (QCN8033B)
Protect What Matters
Complete your QCN system and go beyond 1080p with this 3-megapixel IP camera from Q-See. With 50% more pixels than 1080p, you'll see more clearly than ever before. The 3-axis mount allows for easy positioning to view your area of interest, and it protects the cables from tampering. An IP66-rating protects against dust and water, and night vision delivers up to 100 feet of visibility at night. Whether you're protecting an industrial lot or the back yard, this camera is built to help you see more of what matters.
- (1) 3MP Bullet Camera
- 100ft Cat5e Camera Cable
- Camera User's Manual
- Q-See Limited 2-Year Warranty
- Lifetime Technical Support
Enjoy superior image quality courtesy of the 3-megapixel sensor, delivering 50% more pixels than 1080p for enhanced clarity. Wide Dynamic Range enriches video quality with deeper blacks, contrasted whites, and vivid colors so images appear true to life. Infrared LEDs give you up to 100 feet of night vision, allowing you to see whats going on, day or night.
Need to monitor multiple properties or offices? Not a problem. Just plug this IP camera into a QCN NVR, or into a power-over-ethernet port on an onsite router, and its instantly powered and ready to be viewed remotely as a standalone unit or as a part of your QCN system. A durable, metal body and IP66-rated weatherproof construction make this camera ideal for indoor or outdoor use.
- 3-Megapixel Resolution (2304 x 1296)
- Up to 100 ft Night Vision
- 65° to 70° Wide Field of View
- IP66 Dust and Waterproof Rating
- Durable Metal Housing
- -22° to 140°F Operating Tempurature
- Power over Ethernet
- Only works with QCN solutions or as a standalone unit


text:
Bleacher Report: Team Stream
. ☆ The fastest notifications of any sports app, the instant something important happens ☆ Open a stream anytime
Free • 116.7K
All Android applications categories
All Android games categories
. ☆ The fastest notifications of any sports app, the instant something important happens ☆ Open a stream anytime
Free • 116.7K
Hubi is the ultimate Android solution for streaming and downloading your favourite videos from
Free • 36.4K
and switching Video-on-demand Onscreen controls Adaptive Network Bandwidth support High Quality streams
Free • 3.1K
Sports Network and original Fantasy & News shows ★ Listen to live streaming radio, including Jim Rome
Free • 82.4K
streaming TV, TVOne, ANTV, online Indonesian TV, live soccer, live sports, breaking news, and other
Free • 29.2K
***FREE*** LIVE VIDEO Streaming PTV Sports is an Android app that provides LIVE streaming of PTV
Free • 25.4K
affiliates across the country. ScoreStream is the largest fan-driven, sports sharing platform
Free • 2.4K
The Star Sports App is the official free live video streaming app with live match coverage spanning
Free • 153.2K
beIN SPORTS is the 24-hour global network dedicated to live coverage of the world's biggest
Free • 7.4K
Download This App to watch BeIN Sports Channels on your android device for free and don't miss
Free • 4K
Get breaking news, weather, sports and more for Minneapolis, St. Paul, and across Minnesota. Stay
Free • 1.2K
Your SuperSport second-screen experience takes the game-day experience to a whole new level
Free • 37.7K
Apps available in other platforms:
Last review
Spelleasy - A Spelling game: "Do You Know How To Spell Chocolate?"
by Ana Gracia
THE VERDICT Welcome to Spelleasy - A Spelling Game, a wonderful educational game for kids that will help children improve their spelling skills thanks to the starter packages. If you decide to purchase additional packages, there are some more t…
Explore our channels


text:
This renewal application is for a T32 training grant which provides support for five predoctoral and three postdoctoral trainees in basic alcohol research at Wake Forest School of Medicine. The objectives of the training program are to 1) provide multi-disciplinary training in the neurobiology of alcohol abuse and addiction and 2) produce independent, productive scientists for the alcohol research community. Our rationale for the proposed training arises from our diverse training faculty - a group of well-funded alcohol investigators with solid expertise in basic, clinical, and human-population research - who have been successful for almost twenty years in training young scientists. Our environment is highly collaborative and multidisciplinary such that our trainees gather the necessary skills to become independent investigators and to operate within interdisciplinary teams that will increasingly characterize the future of biomedical research. The alcohol research that characterizes our training environment is also highly translational. First, virtually all of our training labs employand publish in alcohol self-administration;and this has characterized the training program from its inception. The training program also spans experimental model systems from mice and rats, through monkeys and individual humans, to human populations. And many of our training faculty employ overlapping experimental approaches, examine some of the same end points, and/or employ the some of the same behavioral models across multiple species. Our training design therefore consists of both rigorous didactic instruction as well as intensive laboratory-based research. It is augmented by a robust curriculum in career development, including teaching and grant- and manuscript-writing courses, and ethics. There are multiple opportunities for students and postdoctoral fellows to hone presentation skills including journal clubs, data clubs, and required research seminar presentations at least twice or more each year. As a condition for reappointment to the training program, we require our all trainees apply for individual NRSAs (or independent private support) during their training and to publish in peer-reviewed journals. This requirement helps sharpen grant writing skills that are critical in today's research environment. We also attempt to limit predoctoral trainees to less than three years of support on the training grant. This time-limit ensures that the training grant provides support to the best, brightest, and most productive students and fellows at Wake Forest School of Medicine. Our program also benefits from distinct school resources that include a Translational Science Institute which offers courses in translational research, a nationally-recognized primate center with several different populations of monkeys including a fully pedigreed and genotyped vervet colony, and state-of-the-art imaging facilities that can accommodate humans, non-human primates, and rodents. Finally, we partner with resident psychiatrists and psychologists to give our students clinical exposure to current and long-abstinent patients. This enhances their understanding of alcohol abuse disorders and grounds their research in the real world.
The incidence of alcohol abuse and alcoholism remain high in the United States. This training program will supply the United States with highly trained alcohol researchers who are poised to address the serious problems presented by alcohol abuse disorders.
|Calipari, Erin S; Siciliano, Cody A; Zimmer, Benjamin A et al. (2015) Brief intermittent cocaine self-administration and abstinence sensitizes cocaine effects on the dopamine transporter and increases drug seeking. Neuropsychopharmacology 40:728-35
|McCool, Brian A; Christian, Daniel T; Fetzer, Jonathan A et al. (2014) Lateral/basolateral amygdala serotonin type-2 receptors modulate operant self-administration of a sweetened ethanol solution via inhibition of principal neuron activity. Front Integr Neurosci 8:5
|Daigle, Tanya L; Ferris, Mark J; Gainetdinov, Raul R et al. (2014) Selective deletion of GRK2 alters psychostimulant-induced behaviors and dopamine neurotransmission. Neuropsychopharmacology 39:2450-62
|Aston, Elizabeth R; Shannon, Erin E; Liguori, Anthony (2014) Anxiety, sedation, and simulated driving in binge drinkers. Psychol Addict Behav 28:359-66
|Siciliano, Cody A; Calipari, Erin S; Ferris, Mark J et al. (2014) Biphasic mechanisms of amphetamine action at the dopamine terminal. J Neurosci 34:5575-82
|Riegle, Melissa A; Masicampo, Melissa L; Caulder, Erin H et al. (2014) Ethosuximide reduces electrographical and behavioral correlates of alcohol withdrawal seizure in DBA/2J mice. Alcohol 48:445-53
|Siciliano, Cody A; Calipari, Erin S; Jones, Sara R (2014) Amphetamine potency varies with dopamine uptake rate across striatal subregions. J Neurochem 131:348-55
|Caulder, Erin H; Riegle, Melissa A; Godwin, Dwayne W (2014) Activation of group 2 metabotropic glutamate receptors reduces behavioral and electrographic correlates of pilocarpine induced status epilepticus. Epilepsy Res 108:171-81
|Moussa, Malaak Nasser; Wesley, Michael J; Porrino, Linda J et al. (2014) Age-related differences in advantageous decision making are associated with distinct differences in functional community structure. Brain Connect 4:193-202
|Gill, Kathryn E; Chappell, Ann M; Beveridge, Thomas J R et al. (2014) Chronic methylphenidate treatment during early life is associated with greater ethanol intake in socially isolated rats. Alcohol Clin Exp Res 38:2260-8
Showing the most recent 10 out of 68 publications


text:
Some of the
services we provide
Social Media Management
Our team provide you with engaging daily social media content scheduled in advance so you can see exactly what we are posting and when.
Responsive Design
We build and development clean, modern, mobile friendly websites to ensure your website meets Google's mobile-friendly standards.
Social Media Dashboard
Use our powerful social media dashboard to manage your online presence. You can easily schedule posts, create image posts and find relevant content to share across your social media platforms with the click of a button.
Graphic Design
Our creative graphic design team can bring your ideas to life. We design logos, business cards, letterheads, flyers, detailed custom infographics and much more.
FREE forever, no strings Premium £9.99 monthly
Introducing our social media management dashboard...
So what can it do for me?
Find relevant content including videos, news, trending content all of which can be posted with the click of a button.
Create incredible image posts without any photo editing experience.
Save time by having all social media in one place with the ability to schedule posts across multiple platforms.
Measure all campaign performance to help you get more traffic and generate new leads.


text:
- Sale
- New Arrivals
- Statues
- Home
- Zen Garden
- Jewelry
- Apparel
- Meditation
- Rituals
- Books & Gifts
Sorry but this item is currently unavailable.
Please check back at a later stage.
This artistic Ganesh bracelet symbolizes physical and mental strength, luck and prosperity. Wear it in a spirit of bliss, trusting in Ganesh's ability to remove all earthly obstacles. Measures 6.5 inches with 2-inch extension.
Handmade in the USA: no two items are exactly alike and some minor variation in finish or color may be evident. Orange leather cord may vary slightly in color between bracelets. Not waterproof.


text:
Do You Think Of Me?
Do you think of me?
As I lie here,
And dream of you,
I dream of the past,
Of how happy I once was,
I think of you ever day,
And I wonder if we lived closer,
If you would then wont me back,
All I can think about is you,
Your always on my mind,
I think that I love you,
But I know you don't love me,
So I need to just get over it right?
Because we could never be together,
And that's when I remember,
You told me that you loved me to death,
And that you could really see us getting back together,
I wont to tell you that I still like you,
But the words just wont come out,
Oh how bad I wont to tell you,
I wonder what you would say,
Would you like or love me back
Would you just leave me standing lost in the rain,
I wish I knew,
But then yet I feel as if I have to hide what I feel,
Because you hurt me once,
And I don't wont to go through it anymore,
Yea I dated after you,
But it was not the same,
None of them even cared about me,
And yea you also know I made a mistake,
But to tell you the truth I was really not in my right mind,
You broke my heart,
And because of you I feel as if I should never date again,
Because that would save me from the pain,
I think about you every day,
And I just wonder if I ever pass your mind as something more than a friend!!!
© Copyright 2017 aprilmelton33. All rights reserved.
Status: Finished
Genre: Romance
Poem / Romance
Poem / Romance
Poem / Romance
Paste the link to picture in the entry below:
Paste the link to Youtube video in the following entry:
Cannot annotate a non-flat selection. Make sure your selection starts and ends within the same node.
An annotation cannot contain another annotation.
There was an error uploading your file.


text:
Created attachment 458836 [details]
ZDI-CAN-866: Mozilla Firefox normalizeDocument Remote Code Execution Vulnerability
10, (AV:N/AC:L/Au:N/C:C/I:C/A:C)
TippingPoint has identified a vulnerability affecting the following
Mozilla Firefox 3.6.x
This vulnerability allows remote attackers to execute arbitrary code on
vulnerable installations of Mozilla Firefox. User interaction is
required to exploit this vulnerability in that the target must visit a
malicious page or open a malicious file.
The flaw exists within the normalizeDocument function defined within
nsDocument.cpp. When handling children nodes the code does not account
for a varying number of children during normalization. An attacker can
abuse this problem along with the fact that the code does not validate
the child index is within bounds to access an invalid object and execute
arbitrary code under the context of the browser.
From content/base/src/nsDocument.cpp:
PRInt32 count = mChildren.ChildCount();
for (PRInt32 i = 0; i < count; ++i) {
nsCOMPtr<nsIDOMNode> node(do_QueryInterface(mChildren.ChildAt(i)));
if (node) {
return NS_OK;
There are two problems in the code above:
1. Number of root's children can change during normalization. Thus
mChildren.ChildCount() at the very beginning is incorrect.
2. mChildren.ChildAt() is not a fail-safe method, i.e. it does not check
if index argument is within children array bounds.
Attacker can create HTML document with some additional nodes after HTML
body and then remove them during initial steps of normalization process.
This directly leads to arbitrary code execution.
This vulnerability was discovered by:
* regenrecht
Mozilla/5.0 (X11; Linux i686; rv:2.0b2pre) Gecko/20100720 Minefield/4.0b2pre
Created attachment 458839 [details] [diff] [review]
And "node" in that patch doesn't necessarily need to be an nsCOMPtr, but I think it's safer to leave it be a strong reference in case code down the call chain can trigger destruction of the node or what not.
Comment on attachment 458839 [details] [diff] [review]
stupid mutation events
Please add a comment so we don't try to "optimize" this later and reintroduce the bug.
Comment on attachment 458839 [details] [diff] [review]
This applies cleanly to 1.9.1 and 1.9.2.
(In reply to comment #5)
> Please add a comment so we don't try to "optimize" this later and reintroduce
> the bug.
Poke. A comment did not get added on commit...
Duh, totally missed that here. Jesse, do you want me to add a comment now and make it more obvious what we're fixing, or wait until we've released 3.6 etc with this and add a comment to trunk then?
Add a comment when you add the test, I guess.
Btw, the algorithm is probably still "incorrect" in that it can skip children if earlier children are removed in mutation event handlers. Switching from array indexing to following next-sibling pointers would help, and might improve performance.
How would that help?
The only sane algorithm that can work for a case like this is to build a list of nodes to normalize up front, then normalize them all. Chasing pointers, for example, can trivially go into an infinite loop if scripts that fire on normalize rearrange the DOM right.
Yes, one could argue that the algorithm is "incorrect" but I'm arguing that it's not worth making it "correct" here. There's nothing unsafe about the fixed version of this code that I can see, and if script in a document mutates the document during normalization then, well, it won't be normalized, and I say that's ok.
Comment on attachment 458839 [details] [diff] [review]
Approved for 184.108.40.206 and 220.127.116.11, a=dveditz for release-drivers
Verified for 188.8.131.52 with PoC and Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:188.8.131.52pre) Gecko/20100809 Namoroka/3.6.9pre ( .NET CLR 3.5.30729). PoC crashes 22.214.171.124.
Verified for 22.214.171.124 with PoC and Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:126.96.36.199pre) Gecko/20100809 Shiretoko/3.5.12pre ( .NET CLR 3.5.30729). Crashes 188.8.131.52.


text:
Only fools grant the enemy control over their weapons.
You need to be registered and logged in to use 'Rebel Chat'. After login, a 'chat toolbar' will appear on the bottom of this window. The status label on the right side of that toolbar will be 'Offline' at first. You need to click on it in order to change it from 'Offline' to 'Chat now' and communicate with others. Then refresh the page and click on the 'Chat Now' tab to display a list of users on the main window. For further instructions please watcb the demo video below. Mobile device users should use the free 'CometChat' app instead of the browser application.
Each month, I spend over US$1,000 and hundreds of unpaid hours to provide this site and its sister sites The Rebel, Der Rebell, Sonnenrad TV, and Ziopedia to hundreds of thousand unique readers from around the world, tens of thousand per day. If you see any value in what I am doing, please contribute generously by sending your one-off or monthly credit card, debit card, direct debit or PayPal donation via this link.


text:
News RSS Mobile Application
- Status Closed
- Budget N/A
- Total Bids 42
Project Description
This application will be a multilingual RSS news aggregation displayer, with a have a nice elegant look. The application will be for the public and the main purpose of it is to link to a Website news section and get the latest news based on certain categories. We will provide RSS links from which we need to display the news items. We anticipate a simple scenario as the following to make it easy to visualize the app:
• First, a logo for clientl will appear while loading the application itself.
• Two buttons for language selection will appear for the user to choose from.
• A main attraction of the main news.
• By tapping on one of the buttons the language of the application will be activated through all the application content.
• Through scrolling down the user can view the top stories.
• By taping on the news itself or its picture a new page will be open with the news details.
• Through scrolling right the user will be able to move to view the next news.
• Through scrolling left the user will be able to move back to the pervious story.
• A home button in the upper left for getting back to the main viewing venue of news.
• A favorite button by tapping on it the news will be located in the user's favorite list.
• All social networking icons are embedded within the articles themselves. To ease sharing of news through them.
• Save icon would give the user a chance to save the news article as a favorite.
• Two icons for adjusting the font size will have a huge impact on the App usability.
The latest iphone and ipad versions.
Top app requirements:
To show the news in a categorized way.
To select the dates and display the news of that date.
To share the news articles on social media
To save articles as favorites.
To have a local search function for the news
Development of graphic design and UI elements:
I need them built as part of this project. I will provide all basic design elements, but need someone to spice them up.
Additional comments:
We would be looking for long terms engagement as we have a number of immediate mobile applications in the works.Get free quotes for a project like this
Skills Required
Looking to make some money?
- Set your budget and the timeframe
- Outline your proposal
- Get paid for your work
Hire Freelancers who also bid on this project
Looking for work?
Work on projects like this and make money from home!Sign Up Now
- Forbes
- The New York Times
- Time
- Wall Street Journal
- Times Online


text:
Great Home Health Position In Sunny California - Physical Therapist - 119253
Delta CompaniesLos Angeles, California 90002
Updated this week
Save time and take some hassle out of your job hunt.
Use filters and keywords to sort and save your popular/favorite searches.
Express interest by telling us where you want to work.


text:
build ID: 2003032108 on Linux and Win2k.
works fine with Mozilla 1.3 (release) on Linux & Win2k.
Steps to reproduce:
1. Load URL http://www.airfrance.fr/
2. Fill in the form on the left frame with mozilla / moz1lla
3. Click on "Accès mon Air France" just below form,
4. Notice the right main frame not being refreshed
Mozilla 1.3 will load content on the main frame after having displayed the new
menu on the left frame where the form was displayed.
I noticed this on trunk (1.4a) 2 or 3 weeks ago, I cannot reduced the regression
window as builds are no more available (I'd need some late February builds, if
someone can test...)
Couldn't come with a reduced testcase, it involves frames.
This is not bug 113224, but a real regression. I don't think this is bug 192312
either as the steps above work on 1.3 branch.
*** Bug 198480 has been marked as a duplicate of this bug. ***
This broke between 2003-03-06-08 and 2003-03-07-08.
could it be a regression from bug 196130 ?
I see no particularly relevant checkins on that day, but the site is trying to
access the location of a frame loaded from double6.airfrance.fr. The full URL is:
With a minimal document as follows:
<FRAME NAME='content'
If I run javascript:alert(top.content.location) from the URL bar I get the
following error:
Error: uncaught exception: [Exception... "Could not convert JavaScript argument
arg 0 [nsIDOMWindowInternal.alert]" nsresult: "0x80570009
(NS_ERROR_XPC_BAD_CONVERT_JS)" location: "JS frame ::
javascript:alert(top.content.location) :: <TOP_LEVEL> :: line 1" data: no]
the typeof(top.content.location) is "object" and when I try to get its href I get:
Error: uncaught exception: Permission denied to get property Function.href
If I just load that URL directly instead of through a frame, I can access
window.location with no problems.
confirming the error in console when logging in using CVS 20030323 on Linux with
JavaScript error:
line 0: uncaught exception: Permission denied to get property Function.href
Is this invalid ?
The Same Origin Policy
The same origin policy prevents document or script loaded from one
origin from getting or setting properties of a document from a different
Yes, but why is it firing in this case? This is why I cced mitch... More to
the point, why was it not firing before?
This is coming up a lot... does anyone know what's up?
I don't know what the deal really is here, it really does look like a same
origin problem to me too. We fail to access top.content.location here since
top.content comes from http://bv.airfrance.fr/cgi-bin/FR/frameset.jsp and top
(where the javascript: URL is executed) comes from
So different domains. There are no calls to set document.domain, so I don't know
how that site ever worked if it relies on communicating between frames (I didn't
have time to look at what the site does yet).
OK, this was caused by the checkin for bug 92773 (tested by backing out that
patch locally). Looking at all three pages (this one and the two in the blocked
bugs) they have frames loaded from one server trying to access frames loaded
from another server -- typically to set their location. So it looks like we are
smacking them with same-origin policies of some sort....
Is .location being treated as a "user-set function" for some reason? That would
explain the errors in the JS console, and would make sense in light of the
checkin comments for the bug 92773 patch.
In any case, there are two issues to be resolved here:
1) Should we be blocking these accesses?
2) If so, we need a useful error message -- the one we give right now is
anything but.
Over to Mitch to make a call on #1.
Oh, and one more thing. In bug 201337 we have two frames both in domain foo.com
and the frameset in domain bar.com and the frames are trying to communicate with
each other and getting security exceptions.... (and again, it's fixed if I
locally back out bug 92773).
*** Bug 201927 has been marked as a duplicate of this bug. ***
mitch, what's the right thing to do here and can we make this any better than it
is for 1.4?
Brendan, any ideas on how to fix this regression from the fix for bug 92773?
As I understand it, this regression in 1.4 alpha (which blocks access to 3
identified sites - cfr bugs blocked by this one - among which the first French
airline company) is known to be caused by a fix.
I guess the reason to not back out this fix is that it involves a security issue
(hence the fact that I can't access 92773)
The problem is that keeping access to this bug in restricted mode only allows
very few developers to fix this.
Are we going to ship 1.4 beta with a regression that's known for more than one
month ? Shouldn't this block 1.4 beta ?
vdeconinck, patches are welcome.
brendan asked me to assign this to him.
> vdeconinck, patches are welcome.
Patches are impossible to produce without knowing what problem bug 92773 was
trying to address and why the code is done the way it is. The fact that changes
nor relevant to the security fix were rolled in does not help -- perhaps the bug
describes which parts of the change are relevant to the security fix, but it's
not accessible.
Boris, why do you write "The fact that changes no[t] relevant to the security
fix were rolled in does not help"? Do you have any evidence for that "fact"?
It just so happens to be false.
mstoltz, how about opening bug 92773, or at least cc'ing bz on it.
Security fixes have unintended consequences -- news at 11. I'm working on this,
it'll be fixed for 1.4final.
*** Bug 201337 has been marked as a duplicate of this bug. ***
The "Function" in "Function.href" is a stupid bug in the fix for bug 92773.
That's easy to fix. Working on the harder fix: maintain security but let native
getters and setters be called (they're responsible for doing their own security
Created attachment 122795 [details] [diff] [review]
fix attempt
The jsinterp.c change is ugly, but I don't see a better way. JS relies on
native callbacks (functions, getters and setters) to do their own security
checking, and calls a checkAccess (object-class-specific) or checkObjectAccess
(runtime-wide) callback only for cases not covered by existing native
In fixing bug 92773, I used too broad a check for the getter/setter case. We
want to allow native setters (such as the one for location.href) to be called
across origins, and we even let window.location's getter succeed across
origins. Only scripted getters and setters need protection to close 92773.
Comment on attachment 122795 [details] [diff] [review]
fix attempt
Testing help here, and regression-proofing for bug 92773, craved.
Comment on attachment 122795 [details] [diff] [review]
fix attempt
Comment on attachment 122795 [details] [diff] [review]
fix attempt
Looks good, r=mstoltz.
Comment on attachment 122795 [details] [diff] [review]
fix attempt
This should go in ASAP.
I ran the patch to jsinterp.c against the JS testsuite
on WinNT, and it caused no test regressions.
cc'ing Jesse from bug 92773 -
Comment on attachment 122795 [details] [diff] [review]
fix attempt
a=asa (on behalf of drivers) for checkin to 1.4.
Fixed, thanks for the reviews. Optimizing for the case where this tests well by
closing the bug -- reopen it if anyone finds something amiss.
I comfirmed that 2003050908-trunk/Win-Me resolved IBM Japan's same problem as
bug 198480 (dupe of this bug, Parent window<->Child window case).
this caused a regression.
oops, maybe this wasn't the cause. sorry for the false alarm.
*** Bug 206261 has been marked as a duplicate of this bug. ***


text:
The primary objective of the Pathology Core for this P01 is to facilitate the discovery and validation of novel targets and therapies for melanoma. To test the therapeutic efficacy of targeted therapies, it is essential to conduct well-planned research using state-of-the art preclinical models;these include patient-derived xenografts (PDXs), transgenic Tyr:creERT2, BRAF[CA/+], [ca/+], PTEN[lox/lox] melanoma mice, and syngeneic models using melanoma cell lines from the mice. As over 1000 patients with melanoma are seen and treated at University of Pennsylvania Health system per year, the Pathology Core is well equipped to provide fresh melanoma tissues to the Cell Biology Core to generate PDXs. Standardized procedures for procurement, processing, storage, quality control, histopathologic evaluation and distribution of samples will ensure optimal utilization and distribution of limited tissue samples to P01 projects. In addition to human samples, the pathology core will serve as a central repository for all mouse tissue generated by this P. The Pathology Core will provide technical support for developing and performing tissue-based assays and the core pathologist will provide expert pathological assistance in the interpretation of histological and immunostaining data. Centralized tissue repository, tissue processing, result acquisition and data interpretation will enable more collaboration across projects and allow new paths of research to emerge. The Core is led by a senior dermatopathologist with extensive experience in translational and laboratory investigation. The Pathology Core will interact with other P01 Cores and other core facilities at Penn and Wistar to support P01 projects. This coordination will allow the P01 investigators to most efficiently perform tissue-based research to find new therapeutic targets as well as to evaluate new combination therapies. In addition to tailoring services to the needs of each project, the central coordination and analysis of tissue will be time- and cost-effective.
Melanoma is the most aggressive form of skin cancer and the incidence of melanoma continues to rise worldwide. Current melanoma therapies are either ineffective or they elicit short-lived responses due to the rapid development of treatment resistance. The Pathology Core will allow the P01 investigators to most efficiently perform tissue-based research to find new therapeutic targets as well as to evaluate new combination therapies.
|Webster, Marie R; Xu, Mai; Kinzler, Kathryn A et al. (2015) Wnt5A promotes an adaptive, senescent-like stress response, while continuing to drive invasion in melanoma cells. Pigment Cell Melanoma Res 28:184-95
|Leu, Julia I-Ju; Zhang, Pingfeng; Murphy, Maureen E et al. (2014) Structural basis for the inhibition of HSP70 and DnaK chaperones by small-molecule targeting of a C-terminal allosteric pocket. ACS Chem Biol 9:2508-16
|Vultur, A; Villanueva, J; Krepler, C et al. (2014) MEK inhibition affects STAT3 signaling and invasion in human melanoma cell lines. Oncogene 33:1850-61
|Streib, Manuel; Kraling, Katja; Richter, Kristin et al. (2014) An organometallic inhibitor for the human repair enzyme 7,8-dihydro-8-oxoguanosine triphosphatase. Angew Chem Int Ed Engl 53:305-9
|Ma, Xiao-Hong; Piao, Sheng-Fu; Dey, Souvik et al. (2014) Targeting ER stress-induced autophagy overcomes BRAF inhibitor resistance in melanoma. J Clin Invest 124:1406-17
|Zhang, Pingfeng; Leu, Julia I-Ju; Murphy, Maureen E et al. (2014) Crystal structure of the stress-inducible human heat shock protein 70 substrate-binding domain in complex with peptide substrate. PLoS One 9:e103518
|Wang, Tao; Ge, Yingbin; Xiao, Min et al. (2014) SECTM1 produced by tumor cells attracts human monocytes via CD7-mediated activation of the PI3K pathway. J Invest Dermatol 134:1108-18
|Malecka, Kimberly A; Fera, Daniela; Schultz, David C et al. (2014) Identification and characterization of small molecule human papillomavirus E6 inhibitors. ACS Chem Biol 9:1603-12
|Licciulli, Silvia; Maksimoska, Jasna; Zhou, Chun et al. (2013) FRAX597, a small molecule inhibitor of the p21-activated kinases, inhibits tumorigenesis of neurofibromatosis type 2 (NF2)-associated Schwannomas. J Biol Chem 288:29105-14
|Kastl, Anja; Dieckmann, Sandra; Wahler, Kathrin et al. (2013) Rhenium complexes with visible-light-induced anticancer activity. ChemMedChem 8:924-7
Showing the most recent 10 out of 33 publications


text:
|DOTmed Home
|Molecular Imaging
|Health IT
|Business Affairs
|News Home
|Parts & Service
|Operating Room
|Women's Health
|Proton Therapy
|Mobile Imaging
ECR Product Showcase This year's ECR Product Showcase
Health IT Showcase Check out some of the latest health IT products
Done carefully, non-chest MR deemed safe with standard cardiac implants Could be big news for 6 million patients with cardiac implants
Will PET and SPECT become 'go-to' imaging methods for the brain? Applications abound, but lack of training stands in the way
MR breast screening benefits women at average risk It isn't just for those at high risk, finds new study
Lantheus and GE plan to continue development of flurpiridaz F 18 PET tracer may improve CAD detection with less dose exposure than SPECT
Four tips for removing your HIPAA blind spots In the name of the patient, all data must be secure
The promise and challenge of analytics in health care: HIMSS17 Crossing hurdles toward the future of care delivery
Boston Scientific recalls all Lotus Valve heart devices Company shares dropped 7.3 percent in morning trading
Konica Minolta jumps into secure enterprise imaging at HIMSS with Exa Zero footprint universal viewer designed with physician workflow in mind
Accelerate your ROI with our Black Diamond Certified refurbished systems. One year warranty - ISO 13485 Certified - FDA registered - Over 65k parts in inventory
|Pages: 1 - 2
You Must Be Logged In To Post A Comment
Registration is Free and Easy.
Enjoy the benefits of The World's Leading New & Used Medical Equipment Marketplace.Register Now!


text:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.9.1b3) Gecko/20090305 Firefox/3.1b3
Build Identifier: Mozilla/5.0 (X11; U; Linux i686; en-GB; rv:1.9.1b3) Gecko/20090305 Firefox/3.1b3
Previously user could select optio to allow Preferences to automatically clear Recent History/Private Data (RH/PD)or to have a dialog pop up to ask if you wanted to clear RH/PD. This has been removed from FF3.1b3.
There are times wher one may want to generally clear RH/PD on exit, but due to browser issue or other reason, to NOT want to clear the RH/PD for that session, and to have it re-appear upon next browser reload.
Please reinstate the option to ask the user if they want to clear their RH/PD.
Reproducible: Always
Steps to Reproduce:
1. If "Always clear my private data" is checked.
2. Close Browser
3. No option is offered to save or delete RH/PD for this session as in prior versions.
Actual Results:
See above for explanation.
Expected Results:
See above for explanation.
Also I see some confusion to the terminology (RH/PD) - do get that resolved. :)
"Say I am debugging a video issue that crashes browser and I am in the process of filing a bug report on this. when browser closes I now have to go log in again and find my bug, because this one time I did NOT want things cleared."
This was done in bug 469158. Based on the rationale in that bug, I think this is WONTFIX.
The plan for privacy prefpane UI is to allow users to clear their private data on close (as a separate option in addition to the option of being in always on private browsing mode) since this data can be useful during the browsing session, like purple hyperlinks and form auto-complete being valuable to the user. However, we are planning on removing the dialog that asks the user every time before clearing private data, in an effort to eventually remove all open and close dialogs in Firefox.
>"Say I am debugging a video issue that crashes browser and I am in the process
>of filing a bug report on this. when browser closes I now have to go log in
>again and find my bug, because this one time I did NOT want things cleared."
The problem with this type of boundary case design is that it makes the interface more complicated for the 99.9999% of users who don't hit that specific type of boundary case (privacy conscious user debugging a browser crash). The more you play "what if" the more bloated the interface gets. But to address the specific question, developers often rely on the profile manger (creating a new fresh profile) for these types of tasks.
(In reply to comment #3)
> However, we are planning on removing the dialog that asks the user every
> time before clearing private data, in an effort to eventually remove all open
> and close dialogs in Firefox.
Are you dumbing FF down for the masses? Where's the choices, the options, the "do you really want to do this" type things - make them optionnal, but don't ELIMINATE them! I think the user community should have a say such a globally encompassing choice of interface change. At a time where Microsoft is starting to listen to its customers , the last thing you want to do is alienate them!
> ...makes the interface more complicated for the 99.9999% of users ...
I am almost hearing a condescending tone here, but suffice to say, allowing choice; maybe even an "expert" mode that ALLOWS choices is preferable to a dummy mode where "Ya gets waht youse has AN dat's dat..."
I'll see what they say over at Mozillazine...
>Are you dumbing FF down for the masses?
>I am almost hearing a condescending tone here
my apologies, I didn't mean to sound condescending but rather wanted to explain that with several hundred million users creating a simple product ultimately makes some people upset. I believe the "listen to your customers" perspective (while based on good intentions) can easily lead to an incredibly bloated interface.
Two mechanisms that we have for dealing with the disconnect between creating a simple product and attempting to make everyone happy simultaneously are about:config, and extensions.
Mozillazine post:
Oh well, I tried.
(In reply to comment #5)
> (...)
> Two mechanisms that we have for dealing with the disconnect between creating a
> simple product and attempting to make everyone happy simultaneously are
> about:config, and extensions.
The problem is that you (Mozilla) consider Firefox with even one pref changed as "modified version" and forbids redistribution of such version. It definitely not makes me happy.
That's entirely orthogonal to this bug. Please keep trademark policy politics out of design discussions.
It isn't about "dumbing down" or "lowest common denominator" design. Alex is, I think, feeding the troll here. We are not trying to design a product that is all things to all people. That's a recipe for an unsuccessful product (See also: Netscape 7). Of course, that particular case? If you blindly hit Enter on that dialog 99% of the time, the basic cognitive reality is that you won't react differently in most cases.
The idea behind getting rid of startup/shutdown dialogs is that interrupting starting or quitting the browser is getting in the users' way. It isn't just "never have them, ever" it's "find other ways to achieve the goals of the UI that requires modal dialogs and use that instead."
Now, as for this bug, designing for the exceptional case, rather than the general case, is wrong. My comment above about the habitual nature of dialogs is generally held as true, and I don't believe that the "ask me" option is really that useful. I'm going to WONTFIX this, as it was intended, and no one's given a really compelling argument for why this particular modal dialog is good UI or truly desirable from a user perspective.
Of course, I think that the crash situation should tie to session restore, if you restore the session, we shouldn't clear the history data. That's trickier, UI-wise, because session restore is non-modal, but we should think about it.
*** Bug 483541 has been marked as a duplicate of this bug. ***
*** Bug 502219 has been marked as a duplicate of this bug. ***
OK it's WONTFIX, but others at least agree in point that this was a bad choice; to eliminate a feature.
How hard would it be to re-add ONE little feature - maybe in about:config?
Rant warning:
This condescending, elitist tone here ("users probably don't read that dialog") really is unprofessional - OK I am a "user" and have yes, become emotional over this, but YOU are the [albeit unpaid] professionals, and as such need to respect us, not "dis" us.
We need fewer hidden, little-used codepaths in Firefox, not more. I'm sure an extension could do this as well, without adding code to maintain/test.
It's not a matter of being elitist. Users generally don't read dialogs, especially dialogs that are expected as a result of an action. This isn't condescending, it's more based on cognitive psychology and the tendency to learn patterns until they become unconscious reflex. You can pretend people think differently than they do, but that doesn't make good UI. I'm as bad as anyone at clicking the Whatever button, FWIW. :)
*** Bug 499286 has been marked as a duplicate of this bug. ***
>"The idea behind getting rid of startup/shutdown dialogs is that interrupting
starting or quitting the browser is getting in the users' way."
Excuse me, but this argument rings a bit hollow. The behavior in question (the pop-up at close asking if the user would like to clear private data) was disabled by default in previous versions. Ergo, only those users that specifically activated this feature ever had to worry about it, and they of course DIDN'T worry about it seeing as how they were the ones that had activated it in the first place. I mean seriously, is it really that hard to put the button back that says "Ask me before clearing private data" and have it unchecked by default? What could possibly be less work than leaving something intact from a previous version?
Taking away the option to decide on a per-session basis if one wanted to clear PD or not effectively removes the option to automatically clear PD for every single user who had in previous versions asked FF to query them as to whether they wanted PD cleared or not. The whole reason that we opted to have FF ask us every time was that there were enough times that we DIDN'T want PD cleared to make it worth our while. Now we can't take the chance that some automatic process will nuke our history, so we simply cannot use the "Never remember history" option or even the "Use custom settings" option which, given the lack of a prompt at close, amount to the same thing.
There IS such a thing as addition by subtraction--this is not that thing.
This is definitely WONTFIX so removing whiteboard label. Sounds like a perfect case for a Jetpack or add-on, though!
Wow, resurrected - Yea, nothing like removing something useful and adding other "pretty things" that do nothing for productivity and security.
However some kind and aware person wrote an add on.
"AskForSanitize": https://addons.mozilla.org/en-US/firefox/addon/13015


text:
Description: From Sprints Creative Products, Group, LLC, this cotton print fabric is perfect for quilting, apparel and home decor accents. Colors include golden yellow and white.
go to product
Description: From Michael Miller, this cotton fabric features Swiss dots, or "clip" dots. Perfect for heirloom projects or adding texture to quilting, apparel such as dresses and blouses, and home decor accents such as very lightweight curtains, bed skirts, or ruffle ...
Description: Licensed by Carnival Film & Television Ltd. to Andover Fabrics, this cotton print fabric is inspired by the TV series, "Downton Abbey." It is perfect for quilting, apparel, crafts, and home decor items. Colors include navy and black.
Explore Fabric.com
We're here to help
Discover Fabric.com
Sewing Center


text:
My Favorite DJ… Huh?
On the way to work recently, I indulged in a little college-era nostalgia: Give The People What They Want by The Kinks.
Aside from this being a fantasic slab 'o power pop, there's one almost shocking (depressing maybe, you be the judge)
musical fossil burried in the song Around The Dial:
Well, you were my favorite D.J.,
Since I can't remember when.
You always played the best records,
You never followed any trend.
My Favorite D.J.: if we're talkin' about radio in the year 2002 then this is a real head-scratcher. A meaningless concept. Does anybody really have a favorite D.J. anymore? Does anybody even listen to the radio? Back in the 70's and 80's (and to a lesser extent, the 90's) it was possible to find a lot of cool stuff out there. This was back when D.J.'s were actually allowed to make their own decisions instead of being shackled to the corporate playlist. Now that the monolith that is ClearChannel has succeed in sucking the life out of most radio markets (college and community radio excluded) it has become nearly mpossible to think of radio as a form of musical entertainment. I can't remember the last time I heard something new on the radio. Something that made me:
wait to hear the title/artist announcement…to later run out and buy a CD.
So when I hear idiots like Hilary Rosen (ok, maybe she should, just this once, be given a break…the recording industry has indeed complained about the whole pay-for play issue) spout off the patented line about how CD sales are down because of all that evil Mp3 downloading….well…it makes me want to scream. Just how the hell are people going to find out about music if only a tiny fraction of it is exposed to the airwaves? Am I supposed to base my buying decisions on the little snippets of video shown on TRL?? Fuck that.
Maybe we'll all get lucky. Maybe some morning in the not-too-distant future we'll wake to the news of the bankrupcy of one (or all!) of the major labels.
They deserve that fate.Powered by Sidelines


text:
The Reef Rover Low is the easy, versatile shoe for the coastal lifestyle from surf check at the local break to the coffeehouse, to far off travel and exploration, for both the journey and the destination. The foundation of the Coastal Cruisers Collection, they are a premium canvas upper with micro-suede detailing. Features Reef signature SWELLULAR TECHNOLOGY with their rubber outsole tread pattern that mimics the lines of the ocean. These men's shoes have a compression molded triple density construction for instant comfort, support and traction.
freeshipping99 during checkout.
Valid for for
helmets &
apparel only. Motorcycle boots, luggage, hard parts, body parts, oils, tires, batteries and
oversized items do not apply. We will pay for shipping back to us for all exchanges, and then back to you.
So you never have to worry about shipping charges! Free freight does not apply to Returns or returns for refunds
(only for exchanges). Free freight only applies to ground shipping. Expedited shipping is not allowed.
Shipping only applies to M-F. Shipping freight must be properly packed and shipped insurance pre-paid.
Items lost in shipment or damaged in shipment is the responsibility of the customer. All original tags, paperwork,
stickers and accessories must be included. All original manufacturer boxes must be in new condition. You have 7 days to
request an exchange. Exchanged merchandise must be in New and Resaleable condition. All used helmets will be rejected.
Any scratches or signs of use will void your exchange. Any washed merchandise is void of exchange.
All returns must be accompanied by an order number, all original packaging materials and paperwork.
All Hot Sale items cannot be returned for exchange or refund. This item sale is final because it's a limited sale item.
Free Shipping Exchange does not cover Boots (Street, Offroad and Cruiser). Free exchange policy applies to ONE time use only.
Customer agrees to pay for all returns and shipments thereafter. Check our Returns and Exchanges page for additional information.


text:
View This Report »
Get Industry Insights. Simply.
Talk to Veronica
+1 718 514 2762
Complete report $34,500.DataPack (test volumes, sales forecasts, supplier shares) $15,900. Summary This comprehensive seven-country report contains 700 pages, 250 tables, and is designed to help current ...
The 'Global and Chinese Hematology Analyzer Industry, 2012-2022 Market Research Report' is a professional and in-depth study on the current state of the global Hematology Analyzer industry with a focus ...
2016 Global Photoelectric Hematology Analyzer Industry Report is a professional and in-depth research report on the world's major regional market conditions of the Photoelectric Hematology Analyzer industry, ...
Infectious Dise...
Molecular Diagn...
United States
United States
Cell Therapy
United States
Reportlinker.com © Copyright 2017. All rights reserved.


text:
Connecting Families to Senior Living
Talk to a local advisor for FREE
We value your privacy. By clicking you agree to the terms and conditions of our privacy policy. You also consent that we can reach out to you using a phone system that can auto-dial numbers (we miss rotary telephones, too!). Your consent is not required to use our service.
You know your family, A Place For Mom knows Independent Living. Our dedicated local Walkersville, MD advisors have helped 55 families make the right choice for their needs. Get full details, pricing and read 108 reviews of our hand-picked communities. Typically prices range from $1500.00 to $9542.00 per month.
Walkersville in MD has many independent living, senior apartments and retirement communities. Our Senior Living Advisors have helped families in the Walkersville MD area find housing options that meet their unique needs and budget. Request information to talk to a local expert who can offer you an insider's view and time-saving advice.
Try it before you buy it at Victoria Park at Walkersville! Come and stay with us for a complimentary overnight visit to experience life in our vibrant community! Call to schedule your visit today! Victoria Park at Walkersville is an attractive new affordable apartment community for seniors 62+* in...
.54 miles from Walkersville, MD
Provides: Independent Living in Walkersville, MD
Spring Ridge Senior Apartments offers 144 lovely one and two bedroom apartments for seniors 62+ in one, state-of-the-art, three story building. Located in a beautiful natural setting, our wide array of services completes the package, offering everything you need for carefree, comfortable living. Our...
6 miles from Walkersville, MD
Provides: Independent Living in Frederick, MD
Experience a lifestyle where you can share great times with friends, participate in exercise and wellness programs and benefit from educational events. All this and more awaits you at Creekside at Tasker's Chance, an affordable apartment community for Frederick seniors 62 years and older....
Since 1989, Edenton has been a unique residential rental community for older adults who want to remain as independent as possible, as well as those who may require some help with daily living. Our warm and friendly atmosphere is one that residents enjoy and their families appreciate, knowing that...
8 miles from Walkersville, MD
Located just a short walk from historic downtown Sykesville, Carroll County, Maryland is the Village House Apartments for those age 62 years and over. It offers not only a location in close proximity to a variety of downtown activities and services, but with units containing individually controlled...
22 miles from Walkersville, MD
Provides: Independent Living in Sykesville, MD
The moment you walk through our door, you'll feel at home. From our warm, inviting fireplace to our cozy, family-like atmosphere, Sunrise at Montgomery Village is a step above the typical senior residence. For the past fifteen years, our caring and experienced staff has been helping seniors live...
23 miles from Walkersville, MD
Provides: Independent Living in Gaithersburg, MD
2017 Best of Senior Living in Germantown, MD by SeniorAdvisor.com Willow Manor at Clopper's Mill is a senior community located in Germantown, Maryland. Germantown is a beautiful community in Montgomery County that is known for its rich history, vibrant culture and easy access to the sights and...
24 miles from Walkersville, MD
Provides: Independent Living in Germantown, MD
Location, location, location! Conveniently located near revitalized Olde Towne Gaithersburg, The Oaks at Olde Towne offers the latest in affordable senior living to adults 62+. Attractive, new one and two-bedroom apartments feature a kitchen with the newest appliances and roomy closets. Residents...
25 miles from Walkersville, MD
Welcome home to Kentlands Manor, an apartment community designed especially for the active lifestyle of individuals aged 62 years and better. Situated in the heart of the Kentlands neighborhood, this suburban community offers all the benefits of small town living with the excitement of the city life...
26 miles from Walkersville, MD
Ingleside at King Farm is a not-for-profit, continuing care retirement community central to the award-winning intergenerational King Farm development. We offer small town living just a short ride from the nation's capitol. Inside our walls, you will find a stress free lifestyle with a variety of...
27 miles from Walkersville, MD
Provides: Independent Living in Rockville, MD
Offering 1 and 2 Bedroom Senior Apartments for Rent! Ideally situated in a residential area, Willow Manor at Fair Hill Farm offers affordable apartment living for seniors and is conveniently located close to shopping, entertainment, restaurants and medical services as well as major thoroughfares and...
Provides: Independent Living in Olney, MD
28 miles from Walkersville, MD
Provides: Independent Living in Reisterstown, MD
29 miles from Walkersville, MD
Provides: Independent Living in Randallstown, MD
30 miles from Walkersville, MD
Provides: Independent Living in Silver Spring, MD
19 miles from Walkersville, MD
Provides: Independent Living in Westminster, MD
20 miles from Walkersville, MD
Provides: Independent Living in Hagerstown, MD
Get the latest tips, news, and advice on aging and caregiving.
A Place for Mom is the largest assisted living referral service. We are paid by our participating communities, therefore our service is offered at no charge to families.
Copyright ©2017 A Place for Mom, Inc. All rights reserved.


text:
Please find the latest version of the LSPP/RBACPP status report attached. If you see any updates that need to be made, I would appreciate your letting me know. -- George Wilson <ltcgcw us ibm com> IBM Linux Technology Center
01 Audit record augmentation Description: Augment audit records with additional LSPP & RBACPP attributes: subj and obj labels; roles, host identity, event type, and access types where available. Implementation: Add additional SELinux fields to audit records. Status: Need to get upstream. Upstream: Red Hat, lkml %: 90 Owner: Kirkland, Dustin Org: IBM 02 Audit of additional events Description: Add additional instrumentation to kernel and userspace, particularly for user data import/export; catchall for issues not covered elsewhere. May include new audit record types for: rlimit violations, sub, obj, anomalies, responses. Implementation: Additional events have been added where necessary. Status: Need to identify remaining gaps. Upstream: Red Hat, lkml %: 90 Owner: Grubb, Steve Org: Red Hat 03 Audit of network events Description: Add hooks to IPsec implicit packet labeling. Needs to include audit by network address. Implementation: Should mostly be covered by existing AVC audit records. May need to document that network configuration changes require reboot (per @sec). DHCP should be disallowed. Status: Agreed that this is covered at SELinux Summit. Upstream: netdev, lkml %: 100 Owner: Kirkland, Dustin Org: IBM 04 Audit of print events Description: Instrument CUPS. Implementation: HP completed a new CUPS patch and discussed extensively on this list. Status: Patch needs to go upstream to CUPS list; depends on print patch. Upstream: CUPS mailing list %: 95 Owner: Anderson, Matt Org: HP 05 Audit of other import/export events Description: Audit of device allocation + audit of devices not covered by dev allocator hooks or existing AVC audit records. Implementation: Add audit hooks for device allocator and other relevant device-related events. Status: There may be nothing to do here that is not covered in separate items. Device allocator needs to be analyzed for audit; remaining gaps need to be identified. Upstream: Device allocator project; Individual dev mailing lists %: 50 Owner: Velarde, Debora Org: IBM 06 Audit of user and role modifications Description: Must audit tools that modify users and roles in flat file implementation. Includes passwd. Utilities upon which this depends covered in separate task. Implementation: Red Hat will be writing the user and role tools. Ensure that audit records are generated. Status: Needs test. Upstream: mlsutils package %: 100 Owner: Walsh, Dan Org: Red Hat 07 Audit instrumentation of trusted programs, including SELinux tools Description: Analyze userspace and identify those programs that require audit hooks and trusted program modification. At the moment, looks like only init and newrole need to be instrumented--others are audited by kernel. Implementation: Instrument newrole for audit, make it suid, and drop capabilities other than audit append. Status: No new trusted programs identified lately; identify any remaining gaps. Upstream: SELinux list, kernel community %: 85 Owner: Grubb, Steve Org: Red Hat 08 Audit-fs completion Description: Completion of auditfs patch. Implementation: Implementation in progress by HP. Status: Consists of 5 separate patches. 3 of 5 are to be incorporated into development kernel. inotify client and server are the major outstanding pieces. Upstream: fsdevel, lkml %: 85 Owner: Griffis, Amy Org: HP 09 Audit filtering in kernel or daemon with additional LSPP & RBACPP attributes--Selective Audit Description: Add kernel or daemon audit filtering to CAPP audit. Solution must filter/suppress records based on all available LSPP & RBACPP attributes: obj and subj labels, object identity, role, hostname, event type, and access type. Implementation: Red Hat, IBM, and HP have posted patches that allow filtering on various criteria. Status: Most all filtering should be in place. Upstream: lkml %: 95 Owner: Grubb, Steve Org: Red Hat 10 Audit browse, sort, search (ausearch) with additional LSPP & RBACPP attributes--Audit Selection Description: Create command line browse utility. Must include all available LSPP & RBACPP attributes: obj and subj labels, object identity, role, hostname, event type, and access type. Note there is no X-window System in certified configuration. Implementation: An ASCII version exists Status: ASCII ausearch w/sub and obj labels implemented; API proposed on list; binary record format being discussed. Upstream: Red Hat %: 95 Owner: Grubb, Steve Org: Red Hat 11 DAC policy and function Description: Existing DAC mechanisms should cover; ensure all objects are covered and ensure owner, perm bits, ACLs are appropriate. Implementation: Should already be covered. Status: Needs to be analyzed to ensure complete coverage. This is really an assurance issue. Upstream: What, if anything, is specific to the certification RPM? %: 95 Owner: Wilson, George Org: IBM 12 MLS policy and function Description: SELinux MLS function and base MLS policy provide foundation; ensure the MLS policy correctly deals with trusted processes, overrides, restrictions on import/export, VFS polyinstantiation; requires extensive testing. Implementation: NSA, TCS, Tresys, Red Hat, and others have posted patches. Status: Red Hat has incorporated MLS policy into Rawhide and ported it to reference policy. There are still kinks to work out. Upstream: SELinux mailing list, Red Hat MLS policy RPM %: 90 Owner: Walsh, Dan Org: Red Hat 13 IPsec labeled packets: Base patch Description: Indirect packet labeling based on mapping IPsec SAs to SELinux security contexts; AH-only with physical network security reduces/eliminates FIPS crypto cert requirements. Implementation: Trent Jaeger / IBM posted patch to netdev. They plan to continue working this item. Status: Requires documentation, and additional stress and interoperability testing. Upstream: netdev, lkml %: 99 Owner: Jaeger, Trent Org: PSU 14 Labeled print Description: MLS labels required on banner pages, headers, and footers. Implementation: There have been a couple of iterations on this. Current thinking is to use untrusted CUPS server to feed a trusted CUPS server as scaled image. Status: New patch posted by Matt generating comments. Upstream: CUPS mailing list %: 75 Owner: Anderson, Matt Org: HP 15 VFS polyinstantiation Description: Namespaces unshare() syscall patch and PAM exploitation of it. Implementation: NSA posted polyinstantiation patch. Red Hat been working on namespaces extensively. IBM has posted unshare syscall patch and PAM integration patches. Status: unshare() in 2.6.16; requires additional test. Upstream: lkml, pam-list %: 99 Owner: Desai, Janak Org: IBM 16 Device allocation Description: Device allocation patch posted by TCS + enhancements, and/or forced relabeling upon device insertion; requires testing. Functions: authorization, synchronization, device node context assignment, eject/close. Implementation: TCS posted framework patch. HP posted policy for it. Status: Does not do mounting--this may be a problem. IBM is also currently testing. Needs packaging. Needs audit (see item 5). Upstream: Device allocator SF project %: 85 Owner: Hanson, Chad Org: TCS 17 Test and possibly restrict file archivers Description: star already maintains xattrs; zip/unzip patched to support xattrs. Need to restrict to the admin. Enhancements to other archivers exceed LSPP reqs. Implementation: IBM has added xattr support to zip/unzip which will not make the cutof date . Status: Ensure archivers are tested and correctly restricted via policy. zip/unzip mods will not make RHEL5 cutoff. Need to test star and ensure policy is correct. Upstream: archiver maintainers for modifications; selinux list for policy %: 90 Owner: Velarde, Debora Org: IBM 18 Disable udev & hotplug after boot (was Device labeling via udev) Description: Current thinking is to disable udev & hotplug after boot. (L/FDP_ETC, FDP_ITC) See also item 37--Disable DBUS after boot. Implementation: Disable hotplug after boot for the evaluated config. This involves investigation and modifications to init scripts for evaluated configuration. Status: Debora volunteered to try this. Need to document the results, and modify init scripts for certification RPM. Upstream: Red Hat Certification RPM %: 70 Owner: Velarde, Debora Org: IBM 19 Label translation Description: Translation of sensitivity labels into human-readable form. Implementation: libsetrans incorporated into SELinux. Status: libsetrans is upstream; requires test. Upstream: SELinux list %: 100 Owner: Walsh, Dan Org: Red Hat 20 Mail Description: User mail required for admin mail only, probably only cron. Possible solutions: multi-level MTA, admin-only MTA, direct procmail invocation; direct delivery by cron into poly'd directories. Complete solution may be interesting but is not a requirement. Implementation: Modify cron to accept new mailer; use modified mailer to deliver cron output. Status: Cron has been modified to pass in a mailer; cannot use mailx as is; need to determine delivery mechanism (wrappered mailx or procmail). Upstream: No central cron maintainer; Red Hat will carry cron patch; need cron configuration for certification RPM. %: 25 Owner: Desai, Janak Org: IBM 21 Multilevel xinetd Description: Patch xinetd to obtain label from inbound connections and spawn child daemons with correct context. Will have to be documented as trusted program. Implementation: TCS has posted a patch. Trent also has a student working on an implementation. Status: Simple patch exists; have not seen student implementation; some debate over range bracketing. Upstream: Steve Grubb, xinetd list %: 40 Owner: Hanson, Chad Org: TCS 22 Multilevel sshd Description: Patch sshd to spawn child processes with correct context. Implementation: This may be possible by simply patching PAM module. Status: Looks like we will not need this with xinetd approach. Composition with multilevel xinetd requires test. Will privilege separation cause problems? Upstream: openssh-unix-dev %: 0 Owner: Latten, Joy Org: IBM 23 Multilevel cron Description: TCS posted polyinstantiation-aware Vixie cron; TCS approach useful, but useful only for MLS labels and dependent on TCS polyinstantiation mechanism. Comments on redhat-lspp suggest extending cron/crontab protocol to support security context. Implementation: TCS posted the patch; IBM is working to integrate with namespaces-based polyinstantiation. Status: Janak has posted an updated patch that changes the cron protocol per his writeup; needs test. Upstream: No central cron maintainer; Red Hat will carry patch for evaluated configuration. %: 85 Owner: Desai, Janak Org: IBM 24 Multilevel at Description: Base at work on multilevel cron. Implementation: Open; IBM and TCS are likely interested in this as they have been working on cron. Status: Red Hat has stated that at and anacron will both be folded into cron. So, we may get this with little of nor work. Requires investigation. Upstream: Red Hat will carry patch for evaluated configuration. %: 0 Owner: Desai, Janak Org: IBM 25 Multilevel tmpwatch Description: Patch tmpwatch to handle polyinstantiation. Implementation: Open Status: Requires investigation to determine if needed. Upstream: Likely that Red Hat will carry patch for evaluated configuration. %: 0 Owner: Desai, Janak Org: IBM 26 Multilevel slocate Description: Slocate needs to be removed from evaluated configuration. Implementation: Ensure removal from evaluated configuration package list. Status: Consensus at last discussion is to remove from package list. Upstream: Remove in Red Hat Certification RPM. %: 99 Owner: Grubb, Steve Org: Red Hat 27 Revocation of user and object attributes Description: Killall with user and context matching and wrapper script to lock account and kill all user processes. Similar approach can be taken with fuser. Implementation: IBM has psmisc patch to be posted. Needs to use loginuid and document regex caveats as well. Status: IBM has loginuid killall and revocation script which needs to be posted on selinux list and redhat-lspp. Upstream: psmisc sf project, Red Hat certification RPM %: 75 Owner: Wilson, George Org: IBM 28 Useful role definitions Description: Define a useful set of roles in the MLS policy. The admin roles should be separated. Consider including a crypto admin role. Ensure each override is accessible through at least one role. Implementation: Red Hat added role separation to MLS policy with input from TCS. However, because the policy must be static in the evaluated config, the user admin tool will be used to assign roles to users. Status: Role separation already done in the existing MLS policy. Need to provide role assignment tool and document procedure. Need types/roles to adopt orphaned overrides. Upstream: selinux list %: 80 Owner: Wilson, George Org: IBM 29 Management of users and roles in flat file Description: Create command line tools to manage and audit users and roles in flat file separated from base MLS policy. Actions need to be audited, which is covered in a separate task. Implementation: Red Hat has been working on flat file user and roles implementation. Status: Red Hat posted user and roles in flat files documentation. Tools need to be created and instrumented with audit hooks. Upstream: Red Hat mlsutils package %: 100 Owner: Walsh, Dan Org: Red Hat 30 Self tests Description: Define a simple set of tests that can be run periodically by an administrator or cron job that demonstrates correct operation DAC and MAC policies, and verifies integrity of configuration files, including SELinux policy. Tests shall produce audit records. Implementation: Permission and label checks via script, binary integrity validation via rpm -V, check enforcing. Status: George is writing a script check SELinux state, rpm -V, and check integrity of critical configuration files. Policy integrity verification and versioning are nice to have, but outside the scope of this work. Upstream: Red Hat Certification RPM or self-test RPM %: 20 Owner: Wilson, George Org: IBM 31 I&A Description: All these requirements are similar to CAPP. Augment tests to account for sensitivity labels. Implementation: Needs to be tested for certification. Status: This is assurance work to verify that I&A functionality. Upstream: LTP? %: 99 Owner: Desai, Janak Org: IBM 32 Unit and Functional Tests (was Test) Description: Create tests that demonstrate correct function of new code. Implementation: Respective task owners should create unit and functional tests. Status: Please write more tests. Upstream: redhat-lspp, respective mailing lists %: 10 Owner: Wilson, Kris Org: IBM 33 Documentation Description: Create documentation for each task. Implementation: Respective task owners should create low-level design documentation, manpages, and structured comments. Status: Ongoing. Please use structured comments in all new code. Upstream: Respective upstream maintainers %: 5 Owner: Wilson, George Org: IBM 34 Ensure all named objects are covered by DAC & MAC Description: Objects shall include: files, named pipes (fifo), sockets, devices, shared memory, message queue, semaphores. New object: kernel keys - would need man pages, structured comments, & test cases. Implementation: Needs complete coverage for certification. Status: Assurance work; ensure coverage in ST. Upstream: Red Hat Certification RPM %: 95 Owner: Wilson, George Org: IBM 35 Provide minimal number of MAC levels and categories Description: There shall at least 16 levels of hierarchical labels and 64 compartments (L/FDP_IFF.2.7). However, we should have 256 compartments per customer requirement. Implementation: Need to meet minimum specified in LSPP. However, customers may require more. Status: Was marked complete. However, customer input a SELinux Symposium indicated a greater number of categories is necessary; ensure coverage in ST. Upstream: SELinux mailing list %: 95 Owner: Walsh, Dan Org: Red Hat 36 Audit record unique session/terminal ID Description: Events shall contain unique session identifier and/or terminal. Implementation: Could be and ID a la loginuid; don't want to add a new one; only required when available; incomplete coverage; add to audit records where available. Status: This work should be complete; ensure complete coverage. Upstream: lkml, linux-audit %: 99 Owner: Grubb, Steve Org: Red Hat 37 Disable DBUS after boot (was Analyze removing DBUS) Description: DBUS must be either documented and tested, restricted, or removed. Ideally it will be removed from the ST. See also item 18--Disable udev & hotplug after boot. Implementation: Remove dbus and see what breaks; discuss with Russell. Status: Debora volunteered to try this. Need to document the results, and modify init scripts for certification RPM. Upstream: Red Hat Certification RPM %: 65 Owner: Velarde, Debora Org: IBM 39 Restrict kernel keyring access Description: There needs to be a way to restrict the use of the kernel keyring to the authorized administrator. Implementation: The restrictions should be defined in the MLS policy, and DAC, too, if possible. Status: Ensure restriction in SELinux policy. Upstream: Red Hat Certification RPM %: 90 Owner: Walsh, Dan Org: Red Hat 40 Standard LSPP configuration Description: Create standard LSPP configuration and rules to be shared among contributors. This may be incorporated into Configuration Guide. Implementation: Write scripts and documentation for LSPP & RBACPP configuration. Status: All should update Fedora wiki. Configuration of MLS policy now standard. Upstream: Red Hat Certification RPM, README for selinux-list, Configuration Guide %: 75 Owner: Coker, Russell Org: Red Hat 41 Audit of SELinux booleans Description: Changing policy booleans is auditable event. Implementation: SELinux needs to generate audit records when policy booleans are changed. Status: Needs test. Upstream: SELinux list %: 99 Owner: Grubb, Steve Org: Red Hat 42 Audit of service discontinuity and fs relabeling (was Audit of service discontinuity) Description: Service discontinuity and fs relabeling are auditable events. Implementation: Ensure service discontinuities an fs relabels are audited--bootup, shutdown, SELinux enable, SELinux disable. Status: Discontinuity should already be covered; need fs relabel record. Upstream: SELinux list, linux-audit %: 85 Owner: Grubb, Steve Org: Red Hat 43 Audit record subject labels for userspace records Description: When user space message is relayed, add a subject message to same event. Implementation: The kernel needs to add the subject label for audit records generated in userspace because the caller cannot be trusted. Status: Tim produced an updated patch; needs minor rework to use Darrel's i/f; needs to get in test kernel, then upstream. Upstream: SELinux list, linux-audit %: 75 Owner: Chavez, Timothy Org: IBM 44 Fail to secure state Description: When role data base is offline, corrupt, or inaccessible, the system shall preserve a secure state. Implementation: SELinux denies everything by default. So, if the SS, DB, or policy is unavailable, the system should come to a stop. Status: Should already be covered by SELinux; ensure that it is. May need audit and configuration. Upstream: SELinux list %: 90 Owner: Walsh, Dan Org: Red Hat 45 Maintenance mode for secure recovery Description: RBACPP stipulates that after a failure or service discontinuity, the machine shall enter a maintenance mode whereby the machine can be restored to a secure state. Maybe config param for rc.sysinit. Implementation: Need to boot into single user mode for maintenance after SELinux or audit failure. Status: Init already panics when policy load fails. A configurable option to drop into single user mode would be nice. Also want something similar for audit. Upstream: Red Hat certification RPM %: 50 Owner: Walsh, Dan Org: Red Hat 47 Utility to list SELinux roles? Description: User shall have the ability to see list of authorized Roles. This does not appear to be a strict requirement looking at RBACPP FIA_ATD.1. Implementation: This is not required by would be nice to have. Is there already a way to do this? If not, need a utility for a user to list roles that he/she can take on. Status: Nice to have. Determine if this should be removed from requirements list. Upstream: SELinux list, Red Hat certification RPM %: 100 Owner: Walsh, Dan Org: Red Hat 49 MLS enablement of userspace Description: All utilities that display contexts shall be updated to display levels and categories. They shall display the translated name. Implementation: Ensure all userspace utilities display levels and categories correctly. This should already be done. Unclear that they should always display xlated names. Status: Should already be covered requires test. Upstream: SELinux list, Red Hat certification RPM %: 95 Owner: Walsh, Dan Org: Red Hat 50 Utility to compute closure of sub access to objs? Description: Given a file, the Admin shall be able to determine who can access it. Request from military customers. Implementation: apol does this graphically for SELinux, but relies on library to do work. Write command-line utility. Requires analysis of DAC permissions and SELinux policy. Status: This item needs an owner. Nice to have. But there is customer demand. Upstream: Red Hat certification RPM %: 0 Owner: Grubb, Steve Org: Red Hat 51 IPsec labeled packets: Userspace ipsec-tools patch Description: This is the userspace ipsec-tools patch that accompanies the kernel base patch. Also want Venkat's MLS changes to racoon. Implementation: Joy Latten and Trent Jaeger modified ipsec-tools to handle syntax modifications required by kernel base patch. Status: Joy has forward ported and posted the patch. Maintainer is presently swamped. Still requires incorporation of Venkat's MLS enhancements. Upstream: ipsec-tools %: 90 Owner: Latten, Joy Org: IBM 52 IPsec labeled packets: Packet context getsockopt() patch Description: Patch that adds a socket-level getsockopt() to obtain packets' SELinux contexts. Implementation: Patch exists to get TCP connection peer security context. This is insufficient for UDP. Patch rework will be required to add a peek option. Status: Needs test and exploitation by xined and network audit. Upstream: netdev, lkml %: 99 Owner: Zhang, Catherine Org: IBM 53 IPsec labeled packets: Analyzers Description: Tcpdump and ethereal need to understand IPsec labels. This is not an LSPP/RBACPP requirement. Implementation: Augment tcpdump and ethereal for filtering on labels. Status: This item needs an owner. Nice to have. Upstream: Tcpdump and ethereal maintainers %: 0 Owner: Grubb, Steve Org: Red Hat 54 Audit of auditd signals Description: Collect loginuid and context info for senders of signals to auditd. SIGUSER1, SIGHUP, and SIGTERM are only ones used. Implementation: TBD Status: Needs analysis. USER1 has no coverage, HUP & TERM need context info. Upstream: linux-audit %: 0 Owner: Grubb, Steve Org: Red Hat 55 Shell prompt security decorations Description: Add new configuration options for the bash prompt so that level or other security attributes can be seen on the prompt. Not strictly required by LSPP. However, this helps the user keep the terminals straight as to what level each one runs. Implementation: TBD Status: Needs analysis. Upstream: GNU bash maintainer %: 0 Owner: Grubb, Steve Org: Red Hat 56 LTP Tests (was Test) Description: Write new LTP tests or incorporate existing unit and functional tests. Implementation: Ideally, respective task owners would contribute unit and functional tests as complete LTP testcases. Share as much as possible. Status: Please write more LTP tests. Upstream: LTP %: 10 Owner: Wilson, Kris Org: IBM 57 PF_KEY SPD query reliability Description: The PF_KEY protocol does not return all the entries from SPD queries when the number of entries is large. Implementation: TCS is working on a solution wherein netlink is used to query the SPD, and PF_KEY to perform all other SPD management tasks. Status: Red Hat bugzilla 181617 tracks this issue. TCS is working with netdev & ipsec-tools communities to come to consensus on a design to remedy the problem. Upstream: netdev %: 15 Owner: Hanson, Chad Org: TCS 58 Audit data API Description: An API is required to provide a way for audit consumers to access audit records. Implementation: Should be a simple API that is easily wrappered by python. Status: Design complete if no further comments; needs to be implemented. Upstream: linux-audit %: 50 Owner: Grubb, Steve Org: Red Hat 59 Audit of child processes Description: Need to audit child processes so that autrace can produce output useful to polgen and other audit data consumers. Implementation: Create audit records for child processes. Status: Steve Grubb is implementing this feature. Upstream: linux-audit %: 5 Owner: Grubb, Steve Org: Red Hat 60 Label translation daemon Description: Need a daemon intermediary for label translation because applying BLP rules to prevent reading the translation file will make it unavailable to most users. Implementation: A label translation daemon has already been written by TCS. Status: Needs to be open sourced and packaged. Upstream: libsetrans patch %: 50 Owner: Hanson, Chad Org: TCS 61 Audit failure action inquiry Description: Require a way for applications, such as CUPS, to determine whether to continue running or die when audit is unavailable. Implementation: Configuration option in auditd.conf and inquiry function in libaudit. Status: This item needs an owner. Upstream: linux-audit %: 0 Owner: Walsh, Dan Org: Red Hat 58 rows in setTitle: phpMyAdmin
Description: PostScript document


text:
The Roidmude Beating, Milk Candy Eating, Strap in Tight, Put Your Foot on the Gas, cuz we're revving up to kick some evil ass, People's Rider!
Oh, you're one of those awesome people who already has an account on Player.me? Cool, you can just log in below!
Discover a lot in Player.me and start growing your gaming network.
By signing up, you are agreeing to our terms and you have read our privacy policy.
This account is protected by a one-time password. Please enter the code below in order to continue.