text:
Is there a problem with the vending machine that you purchased from us? We understand that a broken vending machine is frustrating and you lose money when your machine isn't working. Please know that we care about you and your vending machine. We want to help you get your issue resolved as quickly as possible […]
- Healthy Vending Machines
- Combo Vending Machines
- Snack Machines
- Soda/Drink Vending Machines
- Bulk Candy Vending Machines


text:
Belfast: Man, 33, held after woman threatened with knife
- 27 July 2014
- From the section Northern Ireland
A 33-year-old man has been arrested in connection with a hijacking in west Belfast.
A woman was approached by a man with a knife at New Barnsley Park at about 21:00 BST on Friday.
He damaged the front window of the car, forced her out of it and then drove off. The car was later found abandoned at La Salle Drive.
The woman was not hurt, but was left shocked.
Police said the man was arrested in south Belfast on Saturday evening. He is being questioned about hijacking, kidnapping, false imprisonment and aggravated vehicle taking.

subset: commoncrawl


text:
Matt Grant teaches writing workshops to students in Harlem. He has a B.A. in film production and occasionally writes DVD and film reviews for PopMatters. He lives with his wife in Brooklyn.
Go Home, Walter: The Case for Gustavo Fring as the Greatest Villain in Television History | 21 Aug 2013 // 5:14 PM
Gus Fring has earned his spot in the all-time Villain Hall of Fame. It his unexcitable demeanor when enraged that makes him unpredictable and highly volatile to be around, and that's exactly what you want in a good antagonist: never knowing what he is going to do next.
To Be Young Again: Maturity and Adolescence in Wes Anderson's 'Moonrise Kingdom' | 17 Jul 2012 // 5:15 PM
Was love purer for us when we were 13? Probably not, but it sure is nice to remember it that way.
Growing Up Is Hard to Do: A 'Wonder Years' Retrospective | 10 Nov 2014 // 8:30 PM
Executive producer Bob Brush and actor Dan Lauria ruminate on The Wonder Years timeless nostalgia.
'Marvel's Agents of S.H.I.E.L.D.' Is a Small Part of a Growing Live-Action Comic Book | 30 Sep 2014 // 1:00 AM
Marvel is making their own live-action comic series, and while you don't necessarily need to collect all the pieces to enjoy the story, there's a much bigger payoff if you do.
'I Love Lucy: Ultimate Season One' Is Really Smokin' | 8 May 2014 // 1:00 AM
I Love Lucy has been treasured for years, but this is the first time that it has been presented in a manner so thoroughly studied and examined within its historical context.
'Rises' Is More Like 'Begins' Than 'Knight', and That's a Good Thing | 1 Aug 2012 // 11:00 PM
The final installment in Nolan's saga brings the focus back where it belongs: on the man behind the mask.
'Battleship': What Did You Expect? | 28 May 2012 // 5:00 AM
The film is a huge missed opportunity, not because of its action potential but because of its subtext.


text:
Dates 14 -17 & 20 – 24 August 2012, Time 6 – 7pm, Venue 127 St John's, Princes Street
Tickets are £6 to cover venue costs. And check out our website www.scottishsix.com
Dates 14 -17 & 20 – 24 August 2012, Time 6 – 7pm, Venue 127 St John's, Princes Street
Tickets are £6 to cover venue costs. And check out our website www.scottishsix.com
Dear Andy
the best of luck with your gig in Edinburgh. I'll drop along if I can. The reason you won't find many or any productions at the Edinburgh Festival about the financial meltdown, climate change or the feral elite who are robbing us blind is because 99% of the performers at the Festivl are part of the same dialectic, or anti-dialectic, of "me me me" which is the credo of Thatcher's childrens children. There is no sense of cultural or artistic solidarity with each other or the society from which they come - because they do not recognise "society" as a word let alone related to consciousness - and as a result their art is flat, a medium for their ambition only and that ambition is to succeed. The management of the arts reflects this. What ever you say, say nothing. In Scotland we need a subjective revolution in our artistic expression and an objective revolution to clear away all the deadwood of cultural "management" which is control, which is censorship. The Festival is a symptom of the machine that eats itself. As far as Edinburgh and Scotland is concerned the Festival could hppen on a moon of Saturn
In solidarity,all the best. GG
Certinly sounds like a good idea and I'm sure it will be attended, I'll be unable to make it along but I'm assuming Lesley will post it on her blog? Maybe you can consider taking it on the road, there are of course core issues to tackle, but each part of Scotland has its own unique problems as well.
On another point I joined the SIC and have heard nothing, how active is it?
Alison Balharry
You will hear soon, I promise. Gearing up for autumn / winter events.
Great article, with which I agree! However, I think you mean to write "wreaked havoc", not "wrecked havoc".


text:
The difference between cost and value will never be more thoroughly tested on the racecourse than it will be this summer after the demolition in Florida of the world auction record price for a thoroughbred.
The horn-locking between the Coolmore and Godolphin camps reached a new level when Demi O'Byrne, acting for Coolmore principal John Magnier, outbid Sheikh Mohammed's representative John Ferguson at a cool $16m (£9.14m) for an unraced bay two-year-old by Forestry at a sale in Miami.
The fall of the hammer in the sales arena at Calder racecourse late on Tuesday night consigned one of the longest-standing statistics in the business. It had been 21 years since two of the Coolmore first guard, the late Robert Sangster and his trainer Vincent O'Brien, bought the yearling colt subsequently known as Seattle Dancer for $13.1m.
In global business terms, $16m is perhaps not such a big deal as an investment. And unlike an unbroken yearling, this colt, Lot 153 in the Fasig-Tipton catalogue, may be less of a gamble, for he has at least already proved he has something of an engine. He was offered at a 'breeze-up' sale, the format of which requires a workout under saddle at the gallop before going through the ring. And the white-blazed bay, a son of promising young sire Forestry, proved on fire in his spin on the racetrack, clocking an unprecedented 9.8 seconds through a furlong. If he could keep that up for five, he'd take 10 seconds off the Ascot track record.
"He'd better be good," said O'Byrne afterwards. "And only time will tell. But he breezed awfully well, and he's a good-looking horse with a good pedigree." Taking a chance, however expensive, on well-bred colts was Sangster's brainchild and is what still drives those at the sharp end of the bloodstock industry. Sometimes it works, sometimes it does not.
The ringside battles between Mohammed and Magnier seem to be as much about ego as business and the Irish team drew first blood of this year after losing out to the Dubai men for last season's yearling plum, a Storm Cat colt who took third place on the all-time leader board for his age at $9.7m. The Forestry colt has already changed some lives. Florida-based Randy Hartley and Dean deRenzo took some chance when they speculated $425,000 on the youngster last year with the intention of re-selling. But when the two highest rollers in the world eyeballed their colt and then each other, the lottery jackpot was theirs.Reuse content


text:
YouTube - Diigo V3: Highlight & Share the Web! Social Bookmarking 2.0
Buzz Marketing for Technology
Social Bookmarking 2.0. Text Comments: 12. Sign in to post a Comment. Text Comments (12). Show: all comments. Change this to see only comments above a certain value. Change the value of a comment by clicking on a thumb. Diigo: By far the best social bookmarking tool out there! View all 12 comments. Would you like to comment? Comments: 12. social. bookmarking. Social Bookmarking in Plain English. Social Bookmarking Tutorial: Using Del.icio.us and Diigo. Close.
10 Dreadful Mistakes that Kill Your Comments
PageRank 5, Alexa rank about 15K and constantly dropping (in case you are not familiar with how Alexa rank works, the lower the number, the better), a wealth of comments on every post. Let's face it: most commentators on any blog appreciate a high-quality backlink or two – after all, link building is still the cornerstone of top Google rankings. Want some of that? Result?
How PR and Social Media Can Work Together
Webbiquity SMM
Social media and PR would seem to be natural allies. So why do corporate PR and social media efforts so often appear disconnected and out of sync? To be sure, some agencies and companies get it, and do an effective job integrating social media and PR efforts. For SEO and traffic purposes, the press release and social media release link back to the company's website/blog.
Pinterest Review: What is So Pinteresting About Pinterest?
Bill Hartzer
You may or may not have heard, but there is a new social media site called Pinterest. Unlike other social media sites where the main focus is to build a profile, with Pinterest, the emphasis is on "pinning" pictures that interest you to your various pin boards (hence the name Pinterest). From there, you can vote up pinned pictures, or make comments.
Nine Notable Uses for Social Bookmarking
Buzz Marketing for Technology
Webupon > Social Bookmarking. Nine Notable Uses for Social Bookmarking. Bookmarking doesnt need to be limited to tracking websites for yourself. Social bookmarking sites excel at maintaining an online grouping of websites for many purposes (e.g. You can use tags and comments to help classify and retrieve websites when needed. Electronic bookmarking functions have been used by academics and other professionals for years as a means of sharing information and collaborating on projects. Use bookmarks as your own â??peopleâ??
Social Media & Learning: Pt 1 Social bookmarking, networking and file sharing
SOCIAL MEDIA & LEARNING. SOCIAL LEARNING. Social Media and Learning. Part 1: Social bookmarking, social file-sharing and social networking. Jane Hart is a Social. understand how new social media tools can be used for learning and. Here she looks at how new social media tools can. phase of the Web (aka Web 2.0) is defined by social media tools, which. support social interactions and connections with people, as well as. Learning 2.0 or E-Learning 2.0 as well as Social Learning. Social bookmarking.
How I Use Delicious | Justin Levy
Justin Levy
Justin Levy Marketing and Social Media Home About Archives Contact Disclosures Newsletter Speaking How I Use Delicious Written on July 28, 2009 by Justin Levy in delicious , social bookmarking , social media 9 Comments - Leave a comment! If youre new here or just an old friend, Id love it if you subscribed via RSS feed. Want information on Facebook?
7 Steps to Successful Content Marketing [Infographic]
Ultimately they reward you by purchasing your products, recommending them to friends via social media channels and word-of-mouth, and acting as brand ambassadors. strategic, well-researched content marketing strategy will help you create content that resonates with your target market while increasing engagement, social shares, and the size of your audience. The result? Research.
How to Make Social Media Less of a Time Suck
Spin Sucks
Because of the fast pace of social media, we are constantly bombarded with distractions from one social network or another. You have to participate and engage consistently, Facebook seems to change something on a weekly basis, Google has all of these animal-named announcements, new social networks pop up all the time…it's exhausting to keep up with everything! Social Mention.
#FollowFriday: For Bloggers, By Bloggers
Spin Sucks
Keep hearing about using social bookmarks , but have no idea what they are or how to use them? Already have a blog, but don't get any comments on it? FollowFriday Social Media aaron lee blog tips Blogging Danny Brown for bloggers by bloggers Frank Dickinson Joey Strawn judy dunnCome on, guys! Don't you know this is all about me?! Want to start a blog ?
How to Promote Blog Posts: 200+ Ideas from Eight Experts
Webbiquity SMM
But creating and maintaining a successful blog takes more than just producing helpful and original content; as social media expert Heidi Cohen recently wrote , "The most epic content will FAIL without content distribution. How I promote my new blog posts by The Social Media Hat. Company blogs have become virtually essential, and very powerful, component of digital marketing.
Feature Friday: How to Increase Web Traffic
Ari Herzog
You can start by leaving quality comments on those blogs and with time you can extend your efforts to guest posting. I've been guest posting almost right after I launched my reviews and coupons blog. Use social media and bookmarking sites. Social media and social bookmarking sites, such as StumbleUpon , are other online space where you can meet with great number of people.
Mass Engagement: How to Get Hundreds of Tweets & Comments On Your.
Viper Chill
Even though I do such little promotion, many posts get hundreds of retweets and comments. Comments help you to show a form of social proof that you can't fake without a lot of time and they allow you to see if people are really interested in the type of content you're putting out there. Anyone can retweet, comment, or link to you once. Home What the F ?
Maximize Your Online Visibility: The Web Presence Optimization (WPO) Framework
Webbiquity SMM
It also requires an active presence and network of relationships in social media, coverage in industry press, and carefully targeted online advertising to be where your prospective buyers are looking, when they are looking. But it may also be sent to specific journalists and bloggers, who need to be followed up with, shared socially, and have any questions or comments responded to.
The Pinterest Debate Between Two Friends
Spin Sucks
It won't be a surprise to you that I commented. make no secret of the fact I'm a sceptic when it comes to new social platforms (I've been told I have a 'healthy cynicism', although I prefer to think I'm pragmatic). As a social bookmarking site it's far more interesting than the likes of Delicious or Diigo , and its visual nature gives it a point of difference.
How To Launch and Maintain Successful Link Building
What's better, an in-content link or a comment link? Compliment this with social bookmarking submissions (again, available through LinkVana) and press release distribution via various press release hubs, and you have a link building strategy. However, this "advice" typically falls a bit short. Let's Start With Two Simple Points. 1. Link Building isn't About PageRank.
BrainDump: 101+ Things You MUST Know About Social Media For Business
SocMed Sean
I've been meaning to do this braindump for a while now. I get a lot of questions via Facebook , Twitter and my email contact form and many of the items listed below come straight from those questions, my experience in social media strategy, years of researching platforms and best practices and…well…tinkering with social media. Social media takes time and energy.
How Social Media Can Be Magic For Your Blog
Peg Fitzpatrick
Social media can be the magic that helps people find your blog articles. A few years ago, blogging and social media were separate. Social media was short-form, personal, and spontaneous. Some people predicted that social media would replace blogging because of declining attention spans. Blogging and social media not only amicably co-exist, they complement each other.
Eight Tools for Social Media Listening
Spin Sucks
There are five steps in social media we always recommend to new clients who are just beginning to branch out online. Social media is no different. To be a master at social media communication you must have a strong foundation of listening. Social Bookmarking. Right now, go to Web site grader and bookmark the page. The Art and Science of Listening.
When to Post on Social Media Networks
Bill Hartzer
As you probably know, I am very active on just about all of the social media networks. Probably more active than 90 percent of my social media and search engine optimization colleagues. In fact, it's been at least 10 years that I've been sharing, commenting, and posting on social media and social bookmarking sites. have been for years.
Some Social Tools You Should Know About
Direct Marketing Observations
Thanks to the folks at imediaconnection , I give you 15 social tools you should know about. NutshellMail users social network updates so they don't have to login and check. MemoLane is a "virtual scrapbook" generated by a user's social media history. It also allows users to search their social history across multiple networks. PinBoard is a really smart, user-centric, privacy-focused social bookmarking platform. Inside View gives users an aggregate view of the social presence and activity of a company. SEO/SEM
6 Reasons Why I Like Google+
After using Google+ for a few weeks, I decided to share some of the reasons I like it so much, and hope that it will be an attempt at social networking by Google that will stick around for the long haul. 1. And if you're just getting started, don't miss my how to get started with Google+ guide on Social Media Examiner! Reasons to Use Delicious for Social Bookmarking.
12 (of the) Best WordPress Guides and Plugin Reviews of 2011
Webbiquity SMM
These add-ons make it easy to add an incredible variety of functionality to the platform, from contact forms and photo galleries to social sharing and ecommerce capabilities. " This brilliant article delves into the technological, economic, cultural and environmental factors behind the success of WordPress, and inspired more than 70 comments. WordPress Guides and Commentary.
Social Media Complainers – your new BFF's
Akamai Marketing
My favorite tidbit of info: 68% of consumers who posted a complaint or negative review on a social networking or ratings/reviews site got a response. Of those, 18% turned into loyal customers and bought more. The quicker the response, the happier the complainer and the more impressed the social media listeners are. What's your social currency? They WANT a resolution.
How to Get More Blog Traffic – Real World Data
Webbiquity SMM
The key is a balanced strategy of search engine optimization (SEO), social media, syndication and guest posting. But it makes sense: the more often your blog is "seen on other sites, the more people will bookmark it, subscribe to your RSS feed, and type in the URL directly. Social media is important. Every blogger wants more traffic. How to get it?
How Brands Use Pinterest
Tweet Pinterest, the social bookmarking tool for images and videos launched in 2010, has become a new favorite platform for many of us – myself included. Like Twitter, it's an open social platform where you can follow whichever user you would like to. They can further like, comment or re-pin it to their boards. million in September. What is Pinterest? Ideeli.
9 Criteria for Selecting a Social Media Monitoring Tool
Webbiquity SMM
Social media monitoring tools are increasing essential for companies of all sizes as the explosion of social media content renders manual monitoring efforts hopeless. With almost 200 social monitoring tools (and new entrants still coming to market), available at a range of price levels from free to if-you-have-to-ask-you-can't-afford-it, how does an organization select the right social monitoring tool for its needs? News can travel extremely fast through social media. And in social media, the whole world can see how fast (or not) your response time is.
Spam Links – What Me? Never!
Small Business Mavericks
Social bookmarking – if you have a long list of poor quality social bookmarking sites that you send every post to – stop. Social bookmarking really only counts if the site is a quality bookmarking site, and if it's your visitors who are doing the bookmarking. Blog comments – quality, content related, and preferably interactive – that should be your aim when it comes to blog commenting. Write a good comment on a blog post that relates to your niche and you won't have a problem.
Book Review Wednesday: Wikibrands: Reinventing your company in.
Akamai Marketing
There are so many layers to this topic that entire (worthy) books have been written on social media philosophy, content creation or audience engagement. With all the dynamics elements to creating a successful social media presence, its sometimes hard to know where to start or even what books are worth the time investment. What's your social currency? All Rights Reserved
A Pinteresting Story
Twist Image
With rumors swirling of Facebook 's pending IPO (and the billions at play that go along with it), it does seem like the most opportune time for the online social networking behemoth to go public. In fact, if Facebook's growth and interest continues to propagate, we can expect that more and more platforms will simply offer social networking solutions that can live and play alongside and within Facebook (much like Twitter does). Think about software that was developed for the Windows platform, and this will be a similar strategy for many of the newer social media startups.
What's your social currency?
Akamai Marketing
By taracoomans – April 4, 2011 Posted in: Content , Featured , social media Photo credit: BaronBrian 97 Million people use Twitter. Yet, according to HubSpot, brands who connect via the social sphere see a direct impact on sales. So – better get ahead of it and start developing your social media currency now. Your currency is your social media VALUE. Wrong.
Some Perspectives on Pinterest
Social Media Marketing
Simply stated, the site is a visual bookmarking tool. There are a number of sites and platforms that serve as social bookmarking tools: Delicious is probably the best known one; StumbleUpon, Reddit and Digg are variations on the concept of the merging of discovery, serendipity and search, with tagging as the common thread that runs through each. Drop a comment in below.
31+ of the Coolest Social Media, Search and Web Tools of 2010
Webbiquity SMM
Supplement your email list with your contacts' social network info? Find out if the username or vanity URL you want is still available across dozens of social sites? Display a feed of brand-related comments from a variety of social networks on your website? Search for a brand name or keyword across all of the most popular social networks at once? Flowtown.
Successful Blogging for Small and Medium Businesses
Akamai Marketing
Blogs for business are an outstanding tool for business, they can build community, be the backbone of your social media program, and drive traffic to your website, just for starters. Be disciplined: develop an editorial calendar, leave room for newsy items that your company should be commenting on. What's your social currency? But where do you start? Define your goal.
Tool Tuesday: SocialOomph
Akamai Marketing
This is a discussion in social media circles today, and everyone has their opinion. The ability to AutoFollow is perhaps my favorite feature of Social Oomph. I'm pretty much on #teamfollow, which means if you follow me, I follow you. What's your social currency? For those services, I use and suggest SocialOomph. So why do it at all? All Rights Reserved
A Thousand Little Cuts of Social Media – A Kaizen Approach
Akamai Marketing
THEN, I'm going to tell you why its relevant to social media. How does Kaizen relate to social media? have when beginning a social media program. If we're honest with ourselves, the only reason businesses today don't employ social media already is because they are afraid. Start by asking your employees simple questions about social media.
The State of Link Building 2016: What I Learned Manually Analysing 1,000 Search Results
Viper Chill
The types of links here include things like irrelevant blog comments, forum profile pages, social bookmarking links and very often from non-English Blogspot blogs. Social Shares. The average number of social shares for all results was 3,823. Comments on news articles (via actual news websites) with relevant stories. Social MediaThe Results. Natural.
Top 10 Ways to Use del.icio.us - lifehack.org
Buzz Marketing for Technology
It also adds a "Tag this button to the top of your browser, which allows you to bookmark websites while you're browsing the Web. website each time you want to access your bookmarks can be a time-consuming process. Why not plug your bookmarks into your desktop for easy access. To view bookmarks tagged with a specific keyword, type in: [link]. Comments.
Find Out How to Increase Traffic, Engagement, and Social Shares Today
Or the comments that are never submitted. To teach bloggers and freelance writers how to promote your content so you can get the traffic, engagement, and social shares that you deserve. The rules were simple: to win, you had to write a great blog post and get the most comments, likes, tweets, and social shares. When you wait for the traffic that never comes.
3 Growth Hacking Strategies for Bloggers to Quadruple Their Blog Traffic without SEO
You need to write content that attracts more links, shares and comments from others. One of the simplest ways to get more backlinks, shares and comments on your blog posts is to making your content a "one-stop source". When you enter a keyword on Buzzsumo, it shows you who linked to the top content including the social sharers. This is a guest contribution from Anil Agarwal.


text: Having a bad day Uploaded 01/29/2008 Having a bad day Share Video REPLAY VIDEO Having a bad day NEXT VIDEO Skate Run RELATED MEDIA If You're Having a Bad Day, Just Imagine This Guy A Bad Day Mad Reporter Having a Bad Day? Garbage Day Angry Goat Terrorizes Town Having a Bad Day at the Office? Bad Day Guy Films A Cop Having A Really Bad Day Chimp and Baby Encounter Ambulance Needs An Ambulance Customer Service Meltdown This Bicyclist Is Having A Bad Day Dumb Inmate's Day Goes From Bad To Worse Pornstars Describe Their Worst Day at Work RV Bloopers Brazilian Footballers Thrown From Truck Having a Bad Day? The Garbage Man Is Having A Bad Day Bad Santa In Real Life Autoplay On Next Video Share Tweet Stumble Email Pin It Embed: Use old embed code Use new embed code Tags: day arts animation having bad NEXT VIDEO Skate Run 0 Comments Login to Comment


text:
Thanks to the efforts of Johann Strauss and his family, the Danube has always been associated with Vienna. Strange, this, since there the river is little more than a broad, murky stream trickling through an outer suburb. Yet in Budapest it defines and divides the city, linking this geographical centre of Europe with east and west.
Unlike the other great Habsburg cities of Vienna and Prague, Budapest is not a place where there is any real need for serious sightseeing; much of the considerable charm of the city is in its atmosphere. You can see most of the main buildings from the river, and this is the best way to get acquainted with the layout of the city.
Boats leave regularly from Vigado square, on the Pest side of the river between the Chain and Elizabeth bridges. Although a timetable of sorts exists, they seem to operate on a shuttle basis: when a boat is full it sets off, and another one appears to take the remaining passengers. Sightseeing trips, which go up the river and back again, never leaving the city limits, take about an hour and a half, but if you have the time, a far more rewarding trip - and better value for money - is to go north as far as Szentendre or Visegrad.
As the boat heads through the city, you can see the main landmarks on the skyline: on the Pest side, the Parliament building, a Westminsteresque monument to the grandest days of the Austro-Hungarian empire. On the opposite bank, perched on top of Castle Hill, is the more austere Royal Palace, now housing the National Library, and several of Hungary's national museums. Next along, the Mattias Church, with its distinctive tiled roof, named after a Hungarian king from the 15th century, and scene of various royal events over the centuries. The Liberation Monument is farther along, on top of Gellert Hill. A kind of dual-purpose memorial, this was intended originally as a homage to Hungary's wartime dictator; but subsequent events caused it to be altered during the construction process to become a memorial to the Red Army.
Slightly lower down the same hill is the Gellert memorial, a statue of the 10th-century priest who was created a bishop by the first Hungarian king, Stephen. After the death of the king, there was a rebellion against Gellert, and he was pushed over the hilltop; perhaps, if he had chosen to live on the flatter side of the river, history might have turned out differently. Nevertheless his statue still stands overlooking the city, holding a cross to protect the citizens of Budapest from further ill fortune.
Built into the hill itself is a chapel where ancient and modern meet. A labyrinth of small chapels known as the Cave Church was originally home to Hungary's only monastic order. At midnight on Easter Monday, 1951, it was stormed by the secret police; many of the worshippers were imprisoned, and the priest was murdered. It reopened in 1989.
The city's many bathhouses continued to function through the communist era. They are fed by some of the 100-odd thermal springs in Buda. The most famous - and certainly the most interesting architecturally - are those at the Art Nouveau Gellert Hotel, on the Buda side of Liberty Bridge. The baths are a legacy of the Ottoman occupation in the 16th and 17th centuries, when the Moslems had to obey strict rules of cleanliness before going to prayers.
Taking a bath here today is a complicated matter, and the ritual is confusing since there are no instructions to help you - not even in Hungarian. Meanwhile, the staff lack the charm of their surroundings. If you are lucky you may be allocated a locker, and you will be given a sort of minuscule apron to wear; this is, apparently, intended to preserve your modesty, but it would hardly cover the most sylph-like of bathers - which, it has to be said, most of the locals are not. Its main practical purpose seems to be to stop your buttocks getting scorched on the searingly hot wooden benches of the three, ever-hotter saunas.
When you can stand the discomfort no more you head for the shower to have a thorough wash (bring your own soap) before soaking for a while in the warm mineral pools.
The next torture is the steam room, where you stay until the thought of plunging into an icy pool seems like a relief. At the end of all this you may feel like a massage, although persuading any of the surly staff to give you one could seem like too much of a challenge. The best time to go to the baths is early in the morning (they open at 6am), when most tourists are still in bed, but the citizens of Budapest are out in force.
There is nothing like sweating off a few calories to build up an appetite. As in the rest of central Europe, the cuisine tends to be heavy. And though there is a mouthwatering collection of fruit and vegetables on display in the central market every day, few of these seem to find their way on to restaurant tables.
The cakes, on the other hand, are spectacular. To get an idea of the range you only have to look at the menu at the well-known Gerbeaud cafe in Vorosmati Square. It doesn't just have a list of cakes - there are simply whole sections devoted to tarts, cream puddings, chestnut cakes, mixed pastries - the choice is endless.
While the Gerbeaud looks like a relic of another age, the street scenes you see from its terrace present a view of unromantic, modern life. By day the square below, and the pedestrian streets radiating from it, are full of people going to work, going shopping, meeting friends. But as it gets dark you start to see groups of girls in low-cut dresses and short skirts, parading up and down looking for business.
When you can tear yourself away from watching the world go by, it is worth meandering around Budapest to admire the architecture. Although there are some hideous examples of post-war buildings, these are relatively few, and on the whole there's a nostalgic air of glamour, with long avenues of grand, 19th-century facades, updated with touches of Art Nouveau in the windows and balconies. Best of all, wander into the grand Parisi Udvar, a covered shopping arcade, where the barrel-shaped glass dome and tiled floor now have neon highlights. It's a very Budapest detail, reminding you that, after all, this is a living city, not a museum.
Bound for Budapest
Getting there
British Airways (0345 222111) and Malev (0171-439 0577) each operates two daily flights between London Heathrow and Budapest. The lowest fare, including tax, on Malev is pounds 209.20, and pounds 20 more on British Airways.
Cathy Packe paid pounds 180 for a three-night package at the Gellert Hotel (00 36 1 185 2200), including breakfasts and one dinner.
Getting around
The Budapest Card offers unlimited public transport, free admission to 55 museums and reductions for the airport minibus and thermal baths. It costs around pounds 8 for two days, pounds 10 for three. The best tram journey is route two, which rattles along from the market, alongside the Danube, to the parliament building.
More information
Call the Hungarian National Tourist Office in the UK (0891 171200), if you don't mind paying 50p per minute. Or wait until you get to Budapest; there is a useful information bureau at the Western railway station.Reuse content


text:
|Message view
|« Date » · « Thread »
|« Date » · « Thread »
|"Michael McCandless (JIRA)" <j...@apache.org>
|[jira] Commented: (LUCENE-1500) Highlighter throws StringIndexOutOfBoundsException
|Wed, 29 Apr 2009 09:22:30 GMT
[ https://issues.apache.org/jira/browse/LUCENE-1500?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12704047#action_12704047 ] Michael McCandless commented on LUCENE-1500: -------------------------------------------- bq. Should it not solve the issue? The change to highlighter (which is committed, on trunk) is simply to throw a more meaningful, checked exception (InvalidTokenOffsetsException) when the Token has out-of-bounds offsets. On upgrading to this, this is an exception your code needs to handle. But this issue doesn't fix the root causes that actually produce Tokens with incorrect offsets -- that's very app specific. EG, the particular case that led to this issue was SOLR-925 (which is now fixed). Are you actually hitting this exception at runtime, or noting that you need to handle it at compilation time? > Highlighter throws StringIndexOutOfBoundsException > -------------------------------------------------- > > Key: LUCENE-1500 > URL: https://issues.apache.org/jira/browse/LUCENE-1500 > Project: Lucene - Java > Issue Type: Bug > Components: contrib/highlighter > Affects Versions: 2.4 > Environment: Found this running the example code in Solr (latest version). > Reporter: David Bowen > Assignee: Mark Harwood > Fix For: 2.9 > > Attachments: Lucene-1500-NewException.patch, Lucene-1500-NewException.patch, LUCENE-1500.patch, patch.txt > > > Using the canonical Solr example (ant run-example) I added this document (using exampledocs/post.sh): > <add><doc> > <field name="id">Test for Highlighting StringIndexOutOfBoundsExcdption</field> > <field name="name">Some Name</field> > <field name="manu">Acme, Inc.</field> > <field name="features">Description of the features, mentioning various things</field> > <field name="features">Features also is multivalued</field> > <field name="popularity">6</field> > <field name="inStock">true</field> > </doc></add> > and then the URL http://localhost:8983/solr/select/?q=features&hl=true&hl.fl=features caused the exception. > I have a patch. I don't know if it is completely correct, but it avoids this exception. -- This message is automatically generated by JIRA. - You can reply to this email to add a comment to the issue online. --------------------------------------------------------------------- To unsubscribe, e-mail: firstname.lastname@example.com For additional commands, e-mail: firstname.lastname@example.com
|View raw message


text:
Cyclists in New York (and pretty much every other state) are used to struggling for the attention of lawmakers. Not so in Minnesota, a state that's actively courting cyclists—most recently, through Pedal Minnesota, a new campaign aimed at making it easier for locals and tourists to get around by bike.
Minnesota has a reputation for being a particularly easy place to ride a bike, full of famously hardy winter commuters. The state generates over $1 billion in bike-related revenue, more than hunting and snowmobiling combined, says Eric Husband, creative director at Colle+McVoy, the Minneapolis ad agency behind Pedal Minnesota.
A coalition of eight public partners (including the Minnesota DOT, DOH, and several tourism boards) approached the agency about designing an identity and web platform for the alliance last year. Husband describes the design process as miraculously smooth. "You'd think with so many partners, it would be hard to reach consensus," he says over email. "But a shared passion for biking led the way." Aww. The logo reflects the good vibes—a heart-shaped frame, sandwiched between two wheels. A warm color palette, and a slogan that gives a nod to Minnesota's famed hospitality ("The Bike Friendly State"), rounds out the design. "Black might work in New York, but it's not the first thing you think of in the Land of 10,000 Lakes."
Colle+McVoy took pains to design a mobile-friendly website, which includes smartphone accessible maps of the state's routes. "By using responsive design, the site can be completely utilized by bikers on the go," explains Husband. A website of neatly organized resources, like advice on commuting with kids and a searchable calendar of events and group rides, completes the web presence.
One of the coolest things about the project is the "tune-up shelters" now popping up around the state. By retrofitting existing bus stops with multi-tools, maps, and pumps, the team found a way to offer universal access to necessities at a fairly low cost. Plus, the tools are all bought from local bike shops. "Of course, the tune-up shelters were a hit," says Husband. "We've also have had a ton of inquiries on wearables—people are asking our partners where they can get T-shirts. Bicyclists love their schwag."
With over $1 billion in annual revenue in Minnesota and swarms of merch-hungry cyclists, bike culture is becoming an economic force to be reckoned with. So why don't more local governments support it, again? Husband thinks the tide is slowly turning. "As we all start to recognize the economic impact of bicycling, we'll undoubtedly see more effort," he says. "Certainly from a tourism perspective. But also to promote health, sustainable transportation and, here's a biggie, fun."


text:
Just Checking: Have You Saved Up For Your One Direction Concert Tickets?We have a few things that might help you on Thursday, One Directioners.
PHOTOS SYCO Music/Ivory Music & Video
We hope you haven't forgotten that the tickets for One Direction's March 22, 2015 concert will go on sale on July 3—this Thursday! Have you saved enough money for your tickets yet?
via Music Management International
Because we always have your back, we have a few articles in the site that might help you in preparation for Thursday. In case you haven't read them yet, we've listed them down for you. Take notes, okay?
- Here are three tips to help you save money until tomorrow.
- In case you're desperate already, we've also rounded up seven ways you can pay for your tickets.
- Ready to line up? Lucky you! Here's what you can expect on Thursday to help you come up with a good game plan with your parents and friends to secure tix.
Oh, and before we forget, don't forget the rules set by MMI about purchasing tix.
May the odds be ever in your favor, Candy Girls! We hope you can have those much-needed concert tickets to see the boys live next year.
Get the latest updates from candy!subscribe to our newsletter!
latest on CandyMag.com
Let the good vibes of the summer sun bring some positivity into your love life.
The 5 things you missed today, February 27, 2017.


text:
Objectives: To develop a security infrastructure to support controlled and secure access to data and analytical resources in a biomedical research Grid environment, while facilitating resource sharing among collaborators.
Design: A Grid security infrastructure, called Grid Authentication and Authorization with Reliably Distributed Services (GAARDS), is developed as a key architecture component of the NCI-funded cancer Biomedical Informatics Grid (caBIG™). The GAARDS is designed to support in a distributed environment 1) efficient provisioning and federation of user identities and credentials; 2) group-based access control support with which resource providers can enforce policies based on community accepted groups and local groups; and 3) management of a trust fabric so that policies can be enforced based on required levels of assurance.
Measurements: GAARDS is implemented as a suite of Grid services and administrative tools. It provides three core services: Dorian for management and federation of user identities, Grid Trust Service for maintaining and provisioning a federated trust fabric within the Grid environment, and Grid Grouper for enforcing authorization policies based on both local and Grid-level groups.
Results: The GAARDS infrastructure is available as a stand-alone system and as a component of the caGrid infrastructure. More information about GAARDS can be accessed at http://www.cagrid.org.
Conclusions: GAARDS provides a comprehensive system to address the security challenges associated with environments in which resources may be located at different sites, requests to access the resources may cross institutional boundaries, and user credentials are created, managed, revoked dynamically in a de-centralized manner.
The informatics requirements of multi-institutional translational research projects are characterized by the need to securely share and access data and analytical resources hosted at different sites. In a multi-institutional project, sites participating in the collaborative effort can be viewed as being part of a virtual organization. One of the major obstacles to forming virtual organizations in biomedical research has been the lack of interoperability among disparate data and analytical resources. Another major problem has been the limited availability of infrastructure to provide secure and efficient access to these resources. Without mechanisms that can enable service providers to enforce access control policies to protect sensitive and proprietary information, data and analytical resources cannot be shared effectively. Traditionally, collaborative projects have created virtual organizations by employing a centralized system to host the databases and analysis tools at one of the institutions participating in the project. This approach, while alleviating some of the security and interoperability issues, is not scalable when the number of collaborating sites is large. It also is not efficient when it is desirable to rapidly and dynamically create, manage, and change virtual organizations.
A relatively recent effort, the cancer Biomedical Informatics Grid (caBIG™) programa of the National Cancer Institute (NCI), is targeting the informatics issues that arise in multi-institutional studies in biomedical research. This effort is developing informatics standards, a suite of common tools and applications, common data and analytical resources, and a Grid infrastructure, called caGrid,1 to dynamically link applications, clients, and community provided resources. Security is of paramount importance in the caBIG™ program to ensure that any sensitive information such as patient demographics as well as the intellectual properties of researchers can be protected while promoting and facilitating collaborative projects.
Supporting authentication (i.e., determining whether or not a given user is who she/he claims to be) and authorization (i.e., controlling access to the functionality of a resource, once the user has been authenticated successfully) in the caBIG™ environment is difficult. User identities and credentials should be managed in a decentralized manner for scalability and manageability reasons, while allowing institutions to set up and enforce their access control policies locally. If there are many participants from different organizations, credentials should be managed in a federated environment. Tools are needed for system administrators to efficiently provision the credentials of users in their institutions in this federated environment. Another issue that becomes critically important in a dynamic and large-scale federated environment such as caBIG™ is the management of a trust fabric. Because institutions will have autonomous control over policies for granting, managing, changing, and revoking user credentials for their users, it can be expected that an institution will have different levels of trust for clients from different institutions when they want to access its resources. Moreover, there is a need to be able to efficiently propagate dynamic changes in policies and trust relationships and any security breaches (e.g., a user's credentials are revoked, because they have been compromised) to other entities in the environment. Tools are needed to create trust fabrics in the environment and manage them.
We have developed a software suite, called the Grid Authentication and Authorization with Reliably Distributed Services (GAARDS) infrastructure, to address these and other security requirements of caBIG™. In this paper, we report on the architecture of GAARDS and its main components. This paper significantly extends an earlier report on this project, which appeared in the proceedings of the AMIA 2007 Annual Symposium.2 The current report presents a discussion on the requirements and challenges of supporting security in a large scale Grid environment and a more detailed description of the architecture of GAARDS and its components. It also illustrates the use of GAARDS in an application scenario involving review of images in a multi-institutional environment.
The salient features of the GAARDS infrastructure can be summarized as follows: 1) It provides services to support: a) integration of institutional identity provider and authentication systems with the Grid environment, b) efficient management and federation of user credentials, and c) easy deployment of a Grid-enabled identity provider system; 2) It implements support for group (role) based access control such that a service provider can use both community accepted roles and local roles to implement and enforce access control policies; and 3) It provides a service infrastructure for management of a trust fabric in the Grid environment, where institutions use different policies for provisioning of credentials for their local researchers and where credentials can be created, revoked, and reinstated dynamically. While the requirements for GAARDS have been motivated mainly by use cases from the caBIG™ program, the design and implementation of the infrastructure is generic and can be applied in other domains. The GAARDS infrastructure is available as both a stand-alone system and a component of the caGrid infrastructure,1, 3 which is the Grid architecture of caBIG™. More information about GAARDS can be accessed at http://www.cagrid.org.
Security Challenges in a Large Biomedical Research Grid
The GAARDS infrastructure is designed to support three main components of security in a federated environment: authentication, authorization, and trust fabric. This section presents the issues that have motivated the design and implementation of support for these components in GAARDS. We describe the issues in the context of the caBIG™ environment, which is envisioned to span hundreds of institutions and thousands of researchers.
The objective of the caBIG™ program is to help accelerate research towards curing cancer by implementing the enabling informatics technologies for researchers to more efficiently find, share, retrieve, integrate, and process clinical and research data from disparate sources. The caBIG community consists of participants from cancer centers, research institutions, government organizations, and the informatics industry. Efforts underway in the caBIG™ program include the development and deployment of 1) informatics standards, 2) guidelines and tools to improve semantic and syntactic interoperability among data and analytical resources, 3) open-source, common applications for data management and analysis, 4) guidelines and processes for data and tool sharing, and 5) an open-source, standards based Grid infrastructure that is designed to federate distributed resources. While the spirit of caBIG™ is to promote and facilitate sharing of information and applications, not all information and tools can be made publicly available to everyone in the caBIG environment. Clinical information and the intellectual properties of researchers must be protected, and such information should be accessible only by those with appropriate privileges.
The caBIG™ project is implemented as a federated environment where individuals, groups, and institutions maintain their resources locally. Resources are exposed to the environment and shared among institutions and researchers using the caGrid infrastructure.1, 3 Briefly, caGrid is the Grid architecture of caBIG™. It provides a core suite of tools and services and a runtime environment to enable secure federation of resources in the caBIG environment. Each data and analytical resource in caGrid is implemented as a Grid Service conforming to the Web Services Resource Framework standards.4, 5 Interactions between caGrid services and clients are carried out using standard Grid Service protocols. The GAARDS infrastructure is designed to support security requirements in a caGrid like service oriented environment. We now discuss these requirements.
Users wishing to access caBIG resources are required to authenticate with caGrid services that expose those resources. To authenticate with a service, users must prove their identity to the service. For this purpose, users are issued grid credentials. In order for individuals to authenticate to services across organizational boundaries, it is necessary that a common type of credentials be adopted and those credentials be issued by a trusted set of credential issuers (also known as Certificate Authorities). The GAARDS infrastructure uses X509 Identity Certificates for identifying a user. An X509 Certificate with its corresponding private key forms a unique credential, or the so-called grid credential within the Grid. Although this approach is very effective and secure, it is difficult to manage in a multi-institutional environment. Using existing tools, the provisioning of grid credentials is a manual process, which is error-prone and very complex for most users and system administrators. The overall process is further complicated if a user wishes to authenticate from multiple locations, because a copy of his/her private key and certificate has to be present at every location. Not only is this process complex, securely distributing private keys is error prone and poses a security risk. Additionally, there are scalability and efficiency problems with vetting user identities. Organizations invest a significant amount of resources into their existing identity management systems and already have processes in place for issuing and managing user identities. In such settings, it would be more efficient to leverage existing identity management systems to provision Grid user accounts. Users would be able to use their existing credentials to "log on" to obtain Grid credentials and access Grid services. This scenario requires a mechanism to allow users to obtain Grid credentials using their existing organization-provided credentials. The mechanism should also remove the complications of using and managing Grid credentials. A discussion of how this issue is addressed in GAARDS follows.
Authorization is a challenging issue as well. It is desirable that access control policy be maintained and enforced locally, giving data providers the ability to determine who has access to their data. At the same time, it is important for scalability that access control policies be based on Grid-level information. Since most systems base their access control policies on membership to groups, a mechanism for organizing and managing groups spanning organizational boundaries is needed. The GAARDS approach to meeting these requirements is presented below.
Institutions participating in caBIG™ can have their own certificate authorities to issue credentials to their researchers. In such a setting, it is important to be able to verify and validate identities and privileges with a level of confidence. Because institutions will have different policies as to how they issue, control, audit, and revoke these credentials, it can be expected that a service provider will not have the same level of trust (in terms of authentication and authorization) for all users wishing to access the service. In addition, while institutions will want to collaborate, they will have services with different levels of security policy enforcement requirements. Services need to maintain a list of certificate authorities they trust. The main challenge is that there may be hundreds of certificate authorities, each issuing certificates for thousands of users. This problem is compounded by the fact that certificates will be issued and revoked continuously and certificate authorities may be added to or deleted from the environment dynamically. A Grid-wide mechanism is needed to create and manage a trust fabric so that services and users can make authentication and authorization decisions based on the most up-to-date security information. The support provided by GAARDS for management of trust fabric in a Grid environment is described below.
GAARDS Infrastructure
The GAARDS infrastructure has been developed as a suite of services and administrative tools on top of the Globus Toolkit6,7 and its Grid Security Infrastructure (GSI) component.b The infrastructure consists of the following core services: Dorian8 for management and federation of user identities, Grid Trust Service9 for maintaining and provisioning a federated trust fabric within the Grid environment, and Grid Grouper for enforcing authorization policies based on both local and Grid-level groups. In the following sections, we present each of these components in greater detail.
Grid Account Management
Managing users and provisioning accounts in the Grid is complex and error-prone if done manually. A practical solution to this problem, from the point of view of both the users and their institutions, is to allow those users to authenticate with the Grid through the same mechanism by which they authenticate with their institution. Dorian8 is a grid user management service that 1) hides the complexities of creating and managing grid credentials, and 2) provides a mechanism for users to authenticate using their institution's authentication mechanism, assuming a trust agreement is in place between Dorian and the institution—that is, Dorian is set up to trust the institution as an identity provider. Dorian's grid service interface provides mechanisms for adding, deleting, and managing trusted Identity Providers (IdPs). In a typical setup of Dorian, to obtain grid credentials (or a grid proxy), a user authenticates with his/her institution using the institution's conventional security mechanism. Upon successfully authenticating the user, the institution's security mechanism issues a digitally signed SAML assertion,c vouching that the user has authenticated locally. The user then sends this SAML assertion to Dorian in exchange for a grid proxy. If the user's SAML assertion is obtained from an Identity Provider trusted by Dorian, Dorian will issue the grid credentials to the user, which can be used to authenticate the user to services in the Grid.
Figure 1 illustrates an example usage scenario for Dorian. A Georgetown University user wishes to invoke a grid service that requires grid credentials. To do this, the user first supplies the application with his/her Georgetown username and password. The application client authenticates the user with the Georgetown Authentication Service, receives a signed SAML assertion, which it subsequently passes to Dorian in exchange for a grid proxy. These credentials can then be used to invoke the grid services. This illustrates how Dorian can leverage an institution's existing authentication mechanism and bring its users to the Grid.
To facilitate smaller groups or institutions without an existing IdP, Dorian has its own internal IdP. This allows users to authenticate to Dorian directly, thereby enabling them to access the Grid. It provides administrators with facilities for approving and managing users. All of the functionality provided by the Dorian IdP is made available through Dorian's grid service interface. Figure 1 illustrates a scenario of a client using the Dorian IdP to authenticate to the Grid. In this scenario, the unaffiliated user wishes to invoke a Grid service. The user first needs to register and obtain an account, which is a one-time process. To obtain an account, the user may request an account on a Dorian instance maintained by an authority such as the NCI Center for Bioinformatics: the user can submit an account request through Dorian; her request is reviewed by the system administrators, and a decision is made on whether to grant an account to the user or not. Assume that the user has registered and been approved for an account, the user is able to authenticate with the Dorian IdP by supplying his/her username and password. Upon successfully authenticating the user, the Dorian IdP issues a SAML assertion just like institutional IdPs, which can be presented to Dorian in exchange for a grid proxy. The credentials can be used to invoke the Grid service.
In a production environment it is envisioned that multiple Dorian instances would be deployed and run in the Grid. One reason for this is that each Dorian operates a single certificate authority. Service providers in the Grid maintain a list of certificate authorities that they trust. Service providers often base their decision on whether or not to trust a given certificate authority based on the policies the certificate authority operates under. Since Dorian issues certificates to users based on assertions from organizations participating in the federation, the trust that a service provider puts in Dorian's certificate authority is closely tied to the account policies enforced at each organization. Grouping organizations with similar account policies together and associating each group with an instance of Dorian allows service providers to trust the instance(s) of Dorian whose organizations meet their required policies. Another reason for running multiple instances of Dorian in a Grid is for scalability reasons.
The GAARDS infrastructure implements a group-based mechanism for authorization and provides a service called Grid Grouper in order to facilitate group management. Under the Grid Grouper approach, Grid services and applications can enforce authorization policy based on membership to Grid-level groups. Each service or application that delegates authorization decisions to Grid Grouper refers to one or more Grid Grouper service instances. In general, each service/application that uses grid grouper for authorization points to one Grid Grouper instance. Thus, the institution deploying the application to the grid determines which grid grouper instance they will use, typically also deployed by the same institution. There is no typical deployment scenario for Grid Grouper. In some Grids a single instance of Grid Grouper is employed in other Grids multiple Grid Grouper's are deployed. In determining a deployment plan for Grid Grouper, architects should consider scalability and organization factors.
Services can determine whether a caller is authorized by simply asking Grid Grouper, if the caller is in a given group. In addition, using the Grid Grouper service, an existing access control system can base its access control policies based on groups managed by the Grid Grouper as well as the local groups it manages. For example, the Common Security Module (CSM)10 is a repository that can be deployed locally at a site to provide support for defining, managing, and enforcing access control policies—CSM has been adopted in the GAARDS infrastructure as its native access control system that can be employed by service providers that do not have an access control system in place. In such a setting, when a client invokes a Grid service, the Grid service can ask CSM whether the user can perform a given operation on a specified resource. Based on the access control policy maintained in CSM, CSM decides whether or not a user is authorized. Part of the CSM's access control policy can be based on Grid Grouper groups, allowing CSM to provide centralized access control based on these groups, the memberships of which can cross organizational boundaries.
Grid Grouper is built on top of Grouperd, which is an Internet2e initiative focused on providing tools for group management. It provides a service interface to the underlying Grouper object model—the object model can be used to enforce access control policies in applications; for example, the object model can be used for determining membership to a group in an application that allows access to a specific area of the application, if the user is a member of a specified group. With Grid Grouper, groups become available to applications and other services in the Grid. Applications and services can use the Grid Grouper object model much like they would use the Grouper object model to access and manage groups and enforce a group membership authorization policy. Grid Grouper provides support for basic group management by distributed authorities; subgroups; composite groups (whose membership is determined by the union, intersection, or relative complement of two other groups); custom group types and custom attributes; trace back of indirect membership; and delegation. The Grid Grouper object model provides an API for applications and services to access groups managed by Grid Grouper.
The architecture of Grid Grouper is illustrated in Figure 2. Grid Grouper groups are organized into namespaces or stems. Each stem can have a set of child stems and set of child groups with exception to the root stem which cannot have any child groups. Groups are compromised of a set of metadata describing the group, a set of members in the groups, and a set of privileges assigned to users for protecting access to the group. Grid Grouper provides three mechanisms for adding members to a group: 1) Directly adding a member 2) Adding a subgroup to a group 3) Making a group a composite of other groups. The Stem hierarchy in Grid Grouper is publicly visible to anyone accessing the Grid Grouper service; however, the ability to view a group within a stem publicly depends on the privileges for the group. To protect access to groups in Grid Grouper, users can be assigned the following privileges on a group: View, Read, Update, Admin, Opt-in, and Opt-out. Users with the View privilege can see that the group exists. Users with the Read privilege can read basic information about the group. Users with the Update Privilege can manage memberships to the group as well as administer View, Read, and Update privileges. Users with the Admin privilege can modify/administer anything on the group: metadata, privileges, and memberships. Users with the Opt-in privilege can add themselves as a member to a group, similarly users with the Opt-out privilege can remove themselves from a group. By default Grid Grouper grants Read and View privileges to all users on each group.
Grid Trust Fabric
In a Grid environment, there will be multiple certificate authorities each of which may be trusted by clients and services with different levels of assurance. Moreover, in a dynamic multi-institutional environment, the status of identities may be updated frequently. Identities and credentials can be revoked, suspended, and reinstated, or new identities can be created. In addition, the list of trusted certificate authorities (CAs) may change. In such settings, certificate authorities will frequently publish Certificate Revocation Lists (CRLs), which specify "blacklisted" certificates that the authority once issued but no longer accredits. For the security and integrity of the Grid, it is critical to both authenticate and validate a given grid credential against an accurate list of trusted certificate authorities and their corresponding CRLs.
The Grid Trust Service (GTS) is a federated infrastructure enabling the provisioning and management of a Grid trust fabric.9 In implementing a trust fabric in a Grid environment, we envision that the trust fabric will consist of Grid users and administrators, Grid services, multiple CAs, and multiple GTS instances. GTS provides a complete Grid-enabled federated solution for registering and managing CRLs and the certificates of certificate authorities. It supports definition and management of levels of assurance, such that certificate authorities may be grouped and discovered by the level of assurance that is acceptable to the consumer. As a simple example, a CA that grants certificates automatically will have a lower level of assurance than a CA that reviews certificate requests. Due to its federated nature and its ability to create and manage arbitrary arrangements of authorities by level of assurance, GTS facilitates the curation of numerous independent trust overlays across the same physical Grid. It enables client validation, allowing a client to submit a certificate and trust requirements in exchange for a certificate verification and validation decision. The GTS infrastructure can also be used as a distribution mechanism of the CRLs from CAs.
In order to model different levels of trust in the trust fabric, the GTS provides a mechanism for its administrators to define and manage trust levels. When certificate authorities are registered into the trust fabric they are assigned one or more trust levels. Clients can specify the level of trust that they require when discovering trusted CAs or when requesting validation. Trust levels in the GTS each consist of a unique name (value) and description. The unique name is used to implicitly bind a certificate authority to a trust level. The description is used as a human readable method of understanding what a specific trust level represents. While GTS facilitates the management of certificate authority lists, the trust establishment with a CA and setting its trust level is a manual process. That is, the administrator of a GTS instance is expected to exchange correspondence with the owner of the CA to be added to the list of CAs managed by the GTS instance. Once a trust level, or set of trust levels, has been established, the CA can be added to the list of CAs so that it can be discovered by users and services.
The flexibility of GTS allows many possible deployment scenarios. For instance, an institution may set up a local CA and GTS instance. Alternately, a group of organizations may all share a common CA for certificates and a GTS to maintain the list of trusted external CAs. In any deployment, each Grid user will be given a certificate, signed by a CA that can be used by services to authenticate the user. Similarly, each Grid service will be given a certificate, also signed by a CA, so that a client application, user, or other service can check the integrity of the service. As deployments leveraging the GTS to maintain the trust fabric are effectively delegating this responsibility to the GTS, it is imperative the GTS instance(s) can be trusted. There are multiple possible deployment options for assigning certificates to GTS instances. A possible way is that each GTS instance has a self-signed certificate (i.e., serving as its own CA). In such a deployment, clients and services are manually configured to trust the self-signed certificates of the GTS instances they intent to interact with. Alternatively, there can be one (or a few) trusted root-CA, which will be used to assign the certificates to each GTS instance. Installations in the Grid are then bootstrapped to trust this authority or small set of authorities.
In a large Grid environment, it is desirable to have a federated trust fabric for redundancy and scalability, and for the integration of multiple trust overlays. A possible way of federating GTS instances is to create a hierarchical structure, in which there are authority GTS instances and subordinate GTS instances. The authority GTS instances maintain lists of trusted CAs and CRLs and synchronize with CAs for updates. The subordinate GTS instances can be designed to synchronize with one or more authority GTS instances. In this way, when the state of the trust fabric changes (e.g., because of publishing a new CRL), the updates need not be broadcast to all GTS instances individually.
Putting GAARDS to Work
We now describe how GAARDS can be employed in a Grid environment using an example application scenario. The application scenario draws from a multi-institutional clinical trial that involves collection and analysis of images obtained from patients. It is based on common use cases identified by the In-vivo Imaging Workspace of caBIG™. We should note that while the example scenario focuses on imaging studies, the security requirements can easily be generalized to other types of data and applications, in which one or more datasets are generated at multiple locations and accessed by remote clients.
Our description of how GAARDS is employed is a simplified version of the security mechanism implemented in the caGrid-enabled in-vivo imaging middleware (IVIM),11–13 which is designed to provide secure, federated access to image databases, image analytical resources, and existing DICOM-based data repositories in the Grid and to facilitate development of Grid-enabled in vivo imaging applications. The IVIM is developed by our group and is motivated by biomedical image review and analysis use cases like the example scenario as well as other use cases from the caBIG In-vivo Imaging Workspace.
Example Application Scenario
The application scenario is a large clinical trial, in which Radiology images obtained from patients are analyzed along with other laboratory results to assess the effectiveness of a specific drug therapy. Large clinical trials often involve multiple-institutions and cooperative oncology groups that are supported by multiple data repositories. In these studies, patients may be recruited to the clinical trial at multiple institutions and reviews of images are performed remotely by experts from different institutions. Recruited patients are registered by the study coordinator into a cancer clinical participant database. This database contains patient name, demographic information, medical history number, initial set of laboratory values, and clinical observations. PET/CT images obtained at periodic intervals from each patient are stored in image databases at respective institutions. Since these images are linked to patient-related information, a mechanism is needed to protect patient privacy, and intellectual property of the researchers. Figure 3 illustrates the application scenario in a Grid environment.
The images collected in the study are reviewed by expert Radiologists. When a Radiologist is ready to interpret an image, she uses a review workstation to access the image databases, implemented as secure data services. The Radiologist browses and annotates the images of interest based on her analysis and diagnosis. The review and analysis results (e.g., nodule location, shape, and texture data) in the form of annotations on the images are inserted to a results/annotation database, which also is implemented as a secure data service. In this application example, remote clients with the "Reviewer" role are authorized to access only the images in the clinical trial and are restricted from the other images in the databases. The study manager, who is assigned a "Trial Manager" role, is authorized to accrue subjects and review existing patient records, but not to access the image data.
In order for the reviewers and the study coordinator in the application scenario to communicate with secure data and analysis services, each of them needs a Grid credential, i.e., a Grid-wide identity that can be authenticated. Dorian provides two methods to register for a Grid user account. The user can register 1) directly with Dorian, or 2) indirectly via his/her existing user account provided by his/her institution. To illustrate these two methods, we assume that the study coordinator wants to use his/her existing institutional account and that one of the reviewers is affiliated with an institution without a local IdP system.
The identity provider system of the study coordinator's institution is registered with Dorian as a trusted identity provider. When the study coordinator logs on to his/her client workstation with his/her username and password, the client program authenticates the user with his/her institution's local identity provider system. After successfully authenticating the user, the system issues a digitally signed SAML assertion, vouching that the user has authenticated. The review workstation program then sends this SAML assertion to Dorian in exchange for Grid credentials using the Dorian client APIs. These credentials can then be used to invoke the services in the environment. In the case of the reviewer, the reviewer should first request an account with Dorian. After the reviewer has obtained an account, she can log on to the environment using an imaging client application which supports Dorian-based authentication. Dorian will issue Grid credentials in the form of a proxy certificate for the reviewer that can be used for authentication.
After a user (the reviewer or the study coordinator) has obtained Grid credentials from Dorian, she may submit a request to an image data service to retrieve a set of images or to an analytical service to process images. The request will carry her Grid credentials and present them to the service. The service then authenticates the reviewer by validating the credentials. Part of the verification process is checking that the supplied Grid credentials were issued by a trusted Grid credential provider (i.e., Dorian or other certificate authorities). To perform this verification, the service checks with the Grid Trust Service (GTS) to ensure that the credentials provided were issued by a trusted credential provider that meets the service's level of assurance requirements.
Access Control and Authorization
In our example application, when a reviewer wants to examine a specific patient's images stored at a remote service, the primary decision points for data authorization reside on the service side. The authorization mechanism must enforce a policy that will deny all users from accessing the data by default, only authorizing specific users for each unit of data, which may correspond to a single image. In our implementation, this is achieved with a two-level authorization scheme. The first level is the service level authorization. At this level, an authorization decision is made on whether a user can access the functionality provided by the service or not. The decision is made based on the authorization group the user belongs to. The second level of authorization is the data level authorization. Once a user is authorized to access the service, he/she can submit requests to retrieve data from the service. At this stage, the data-level authorization is used to control access to individual data objects (e.g., images and metadata on images) and/or sets of data objects. For example, a reviewer may have access rights only to a patient's images obtained in studies that were performed at the hospital for which the reviewer works. The data-level authorization facilitates a finer grain access control on data.
Implementation of service- and data-level authorization requires several components: data group and membership definition based on authorization policy, authorization decision implementation, and data and user group management via a standard interface. These components are described next.
Group Definitions Using Grid Grouper
The service-level authorization requires that a group administrator first defines user groups in Grid Grouper and adds users to the groups. Group definitions may be based on virtual and real organizations (e.g., "Institution A," "Institution B"), or may be based on functional roles (e.g., "Reviewer" or "Study Coordinator"). A service administrator can then configure the service and operation authorization by adding one or more users. For instance, if a service allows access to only the "Study Coordinator" group and a reviewer belongs to the User Group "Reviewer," the reviewer will not be able to invoke any of the service's methods.
Data-level authorization policies can be formulated as rules such as "User A in User Group B has access to Data Instance C and D." The rules can be represented as group membership statements: "User Group B is a member of Data Group C (or D) which correspond to Data Instance C (or D)," and authorization policy statements: "if User A in User Group B is in Data Group C (or D) then grant User A access to Data Instance C (or D)." Members of a child group are by definition members of the parent group as well. This approach transforms the original authorization policy from a user centric view to a data centric view by representing each data instance with a data group and authorization policy as group memberships. Management of the authorization policy is done through the management of the group membership. This approach also simplifies the evaluation of the authorization policy by transforming it into a group membership determination. The data-level authorization policies can be defined as data groups in Grid Grouper. Authorization exceptions, such as "User A can access Patient 1 and all of its studies and series, except for Study 1A", are handled via Boolean operations on the groups including AND, OR, and Complement operations.
Example data group definitions in Grid Grouper are shown in Figure 4. Each visit generates a "Study," which may contain one or more exams whose output is represented by "Series." Each series contains one or more images. Each study also maintains patient information that is typically used as an implicit hierarchy level in review workstations for the purpose of organization.
Authorization Decision Implementation
The typical use case for data authorization is that a user may be granted access to a particular data set or a subset of it (see Figure 5). A user may be given access to a Patient, in which case she would also gain access to all its children studies and series, unless an explicit exception is made for the children data instance. Since images within a series are parts of the same dataset, authorization is only managed at the series level at its deepest traversal.
User Group Management
To ensure correct, consistent and efficient creation of the groups and their members based on the described membership rules, a configuration step creates the groups and sets up the memberships according to the rules described in the previous section. Once the data groups have been created in Grid Grouper, user groups can be added to these data groups to allow authorization. The user groups are managed using the client interface provided by GAARDS.
Related Work
A number of toolkits and service architectures have been developed to address issues in Grid security. Butler et al.14 discuss the creation and deployment of an authentication and authorization infrastructure for the Grid. Humphrey et al.15 discuss the challenges that must be faced in securing grid environments by grouping required activities under four categories as naming and authentication; secure communication; trust, policy, and authorization; and enforcement of access control. Sinnott et al.16 describe a federated security model for virtual organizations in the grid. In this model, each organization manages its security, delegating to trusted local or remote entities as necessary. Dwoskin et al.17 focus specifically on the security issues in interactive applications running on the grid. They show how the grid security infrastructure can be extended to set up secure, interactive sessions at the remote host. The main differences of the GAARDS infrastructure from the previous work is that it provides mechanisms for federation of existing institutional security infrastructure and local user accounts, for access control based on Grid-wide and local groups, and for the management of trust fabric in a Grid environment.
Few middleware systems have been developed to facilitate the creation, management, and federation of user credentials in the Grid. One such system is the MyProxy Credential Management Service.18 It enables users to supply a password to securely create grid proxies based on their private key and certificate stored in the MyProxy repository. When the predecessor of Dorian was developed, MyProxy did not have a built in certificate authority and it required its users to upload their private keys and certificates. This was one of the factors in the decision to develop Dorian, because a built-in certificate authority greatly reduces the complexity of creating grid user credentials. Since that time, MyProxy (MyProxy 3.0) has added the ability to act as a Certificate Authority. The main difference between MyProxy and the GAARDS Dorian is the support for Web Service interfaces in Dorian and the ability of Dorian to federate existing users in institutions to the Grid. The Portal-based User Registration System (PURSe)f provides a friendly interface for users of web applications to register for and obtain access to their grid credentials. PURSe uses SimpleCAg and MyProxy for the creation and management of grid credentials. PURSe differs from GAARDS as it is purely web-based and is a toolkit used for simplifying the development of web applications, whereas the Dorian service of GAARDS is a free-standing grid service focused on solving the identity management and federation problem. The GAMA infrastructure19 is based on Globus GSI.h, 6, 7 It consists of a backend server for creating and managing X.509 credentials for users and portal interfaces for users and administrators to access its functions. The Dorian component of GAARDS provides a Grid service infrastructure, based on the use of public key certificates and SAML assertions, for managing and federating user identities in the Grid. It makes use of SAML and Grid certificates to authenticate users to the Grid environment through their institution's authentication mechanism.
The GAARDS infrastructure provides a suite of core services and tools to support security requirements in a Grid environment. These tools and services leverage community accepted mechanisms, e.g., the Grouper model from the Internet2 initiative, X.509 certificates, SAML for local authentication assertions. There are also efforts in the healthcare information technology developing standards for security. Recently the Healthcare Information Technology Standards Panel (HITSP; http://www.hitsp.org) has identified and defined such security components as entity identity assertion, access control transaction package. These components make use of standards such as SAML, SOAP, and the IHE (Integrating the Healthcare Enterprise; http://www.ihe.net) Cross-Enterprise User Assertion Profilei. Some of these standards (e.g., SOAP, SAML) are already leveraged in GAARDS. As new standards develop, we plan to review them to determine how they may be employed by GAARDS.
Group- and role-based access control is a common methodology employed in security infrastructures.20–22 Earlier work in this area focused on mechanisms to enforce access control at a single institution. More recent works have developed systems to support authorization in distributed environments.23, 24 The Grid Grouper component of GAARDS is similar to these systems in that it provides group-based authorization in a distributed environment. It implements a WSRF compliant solution using the Grouperj system from the Internet2 initiativek.
Management of trust is recognized as an important component of security in distributed environments. Manchala25 describes trust models and metrics in e-commerce applications and discusses how risk can be analyzed under different models. Azzedin and Maheswaran26 present a trust model for a Grid environment. Their approach models trust based on behavior and reputation of entities that interact with others. They describe techniques for computing this type of behavior trust, how it evolves in an environment, and how it can be managed in a Grid setting. GridAdmin, proposed by Quillinan et al.27 is a system that provides support for automatic handling of requests for administrative actions and resource allocations. The system incorporates trust metrics in responding to and ranking such requests. Weaver et al.28 discuss trust-sharing agreements and an IT infrastructure for federated security in distributed healthcare applications. Grandison and Sloman29 present a toolkit that provides support for specifying and monitoring trust relationships for Internet applications. Ahsant et al.30 discuss how business trust relationships can be propagated to the Grid environment and how these relationships can be federated dynamically. Basney et al. describe extensions to the basic Grid security architecture in order to support negotiation and dynamic establishment trust relationships between entities in the Grid. Our work complements the previous work on trust management in that earlier work focused on specification of trust and establishment and management of trust between entities. The GAARDS GTS, on the other hand, enables Grid-wide management of trusted Certificate Authorities with different trust levels.
Comprehensive security infrastructures are critical to the success of large-scale, multi-institutional biomedical research efforts. GAARDS is designed to address challenging issues such as federation and provisioning of user credentials, group-based access control, and management of trust fabric in federated environments. The GAARDS infrastructure is in use in the production Grid in the caBIG program, which is a national-scale informatics effort to facilitate sharing of data and tools among biomedical researchers. We believe that security systems like GAARDS will be increasingly important as research in biomedicine becomes more collaborative.


text: Now That Louie Is Over, Discuss Louis C.K.'s Comedic EvolutionDylan Gadino for Netflix6/20/14 1:00pmFiled to: netflixdocumentarytalk to uslouielive at the beacon theatre492EditPromoteShare to KinjaGo to permalink So you probably want to talk about Louie. To process, as it were. We'll get to that, but in the meantime a prescription for dealing with your loss of the show: Live at the Beacon Theater. Louis C.K. has been a comedy game-changer this season, but sometimes it's important to look back as we look forward. Advertisement When C.K. released his Emmy-winning comedy specialindependently in 2011, he solidified his position as a revolutionary for comedy fans, and for the entertainment industry as a whole. At the same time, he was preparing the second season of his low-budget, critically acclaimed FX series, which had its season finale on June 16, and needless to say broke new ground in comedy on many levels. There's a lot to unpack within the show alone, but to understand where he's gone, it's important to understand where he's been, and Live at the Beacon is the comedian at his best. The hype surrounding C.K. for the last five years is well-deserved. On Live at the Beacon, he's effortlessly funny and excruciatingly honest about the way he sees the world and, to a much larger extent, himself. The special brought his signature intellect to the forefront, giving his die-hard fans exactly what they've come to expect and pulling in hoards of new fans as well. He hasn't slowed down, either. C.K. continues to change the game with Louie, and the TV format allows him more outlets — through both expert filmmaking and writing. Advertisement Tell us what you thought of Live at the Beacon Theater, and how you think C.K. has evolved — both in his stand-up and with Louie — in the comments below. Yes, you can also take this opportunity to celebrate, air grievances about, and otherwise discuss Louie. Documentary Club is a recurring feature in which we watch and discuss the finest documentaries and comedy specials available to stream on Netflix — together, as a family. Join us, won't you? For more Netflix, head to netflix.kinja.com.Dylan Gadino is the founder and editor of Laughspin.com, which covers all things comedy. He hopes the Shire is real.This post is a sponsored collaboration between Netflix and email@example.com repliesLeave a reply


text:
Nice rebloomer seedling blooming today. a little windy when the picture was taken....some bug damage but that comes with the season. (Connie Sue x Mother Earth) X Bolder Boulder 9 buds.
Interesting growth on new seedlings this year, broke our personal record of increase on first year plantings. 18 increases on a TB planted in March of this year and 32 increases on an SDB planted in March. Entire seedling bed looks similar! Many, many 6 month old plants have 10 to 15 increases on them! never seen anything like it. We already had an SDB bloom in this section and there are many more stalks on the way including TBs. anybody else experiencing this kind of seedling growth this year?
Mike Sutton
Porterville, CA USA
USDA zone 8b/9a
Visit your group "iris-photos <http://groups.yahoo.com/group/iris-photos> " on the web.
To unsubscribe from this group, send an email to:
firstname.lastname@example.com <mailto:email@example.com?subject=Unsubscribe>
Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service <http://docs.yahoo.com/info/terms/> .


text:
I had the trial version of Parallels Desktop 8, running on my Macbook Pro OSX 10.8.3. I am running Ubuntu 12.04.
When the trial ran out, I converted my VM to VMware Fusion. It is running great with one exception; whenever I start it, I get an error message stating "An error occurred while trying to mount /media/psf". I can skip past this error and everything works fine. But it's annoying, and I am unable to run the VM in nogui mode.
I understand that /media/psf is something to do with Parallel Tools. How do I remove them? Or at least prevent Ubuntu trying to mount them at startup?
Many thanks,


text:
Jim Cramer says investors might be getting a bang for the buck after retail helped lead a recent rally.
"Light touch regulation" should be the FCC's standard when it comes to regulating the internet, Ajit Pai tells CNBC.
U.S. stocks scored new highs Tuesday, but Art Cashin says "we're significantly overbought now."
In his first televised interview as CEO of Tyson Foods, Tom Hayes told "Squawk on the Street" that the price-fixing lawsuits were unfounded.
The bull rally may be strong, but the long-term outlook appears weak, Vanguard founder Jack Bogle tells CNBC.
Jim Cramer is host of CNBC's "Mad Money" and co-anchor of the 9 a.m. ET hour of CNBC's "Squawk on the Street."
Carl Quintanilla is an Emmy-winning reporter and co-anchor of CNBC's "Squawk on the Street," broadcast live from the NYSE.
Sara Eisen is a correspondent for CNBC, focusing on currencies and the global consumer.
"Squawk on the Street" Co-Anchor
Rick Santelli joined CNBC Business News as an on-air editor in 1999, reporting live from the floor of the Chicago Board of Trade.
"Squawk on the Street" is headquartered live on the floor of the New York Stock Exchange. We are there when the opening bell rings every day, taking viewers right to the posts where the biggest companies trade.
"Squawk on the Street" is headquartered live on the floor of the New York Stock Exchange. We are there when the all-important opening bell rings every day. With our exclusive "Eye on the Floor" wireless cameras at the NYSE we take the viewer onto the floor of the exchange, right to the posts where the biggest companies in the world trade. In addition, our exclusive "Tick by Tick" charts track the action of every trade of every stock. Our live market coverage doesn't stop on the corner of Wall and Broad Streets in lower Manhattan. We also have exclusive coverage from the floor of the CME Group in Chicago giving our viewers the treasury, currency and commodity action in real time. In addition, "Squawk on the Street" is also on the air when the closing bells ring throughout Europe. That final hour of European trading starting at 10:30am eastern has proven to be very volatile and has a major impact on all U.S. based markets.


text:
Sumando Manos Foundation: News Letter June 2011 (see attachment)
Summarizes the activities performed by our foundation during May and June 2011.
The objective of this report is to provide a better understanding about how our foundation works and provides reports (at least bi-monthly basis) to all our donors.
Project Reports on GlobalGiving are posted directly to globalgiving.org by Project Leaders as they are completed, generally every 3-4 months. To protect the integrity of these documents, GlobalGiving does not alter them; therefore you may find some language or formatting issues.
If you donate to this project or have donated to this project, you will get an e-mail when this project posts a report. You can also subscribe for reports via e-mail without donating.
We'll only email you new reports and updates about this project.
Help raise money for this important cause by creating a personalized fundraising page for this project.Start a Fundraiser


text:
The Dimond Branch Library will temporarily close for remodeling from Friday, December 23 to May 2017. For more information see the announcement.
Children's Clothing Swap
Come swap out your kids' gently-used duds for some new-to-you clothing and shoes! Please bring only items that are children's sized, clean, and in good condition.
For families with all ages of kids.


text:
Enrolling at Rangi Ruru
Our enrolment programme is well underway for the year. To learn more about Rangi Ruru you can arrange a time to visit our school, take a tour and meet some of our staff. Once an application for enrolment is received you may also like to take part in Experience Rangi which is an opportunity to be a 'Rangi girl' for half a day.
The Enrolment Process
In the year prior to beginning at Rangi Ruru, all pre-enrolled applicants are invited to meet with the Principal, Dr Sandra Hastie, or a member of the Senior Management Team. The purpose of these meetings is for us to:
- understand more about your daughter's, and your, interests and expectations
- discuss what your daughter wishes to gain from the school and contribute to it
- answer any questions you may have about Rangi Ruru
It is very important to us that your daughter will enjoy attending Rangi Ruru and benefit from and be able to make the most of the opportunities offered here. It is on the basis of this interview that an offer for enrolment is made.
Interviews for places in Years 7, 8 and 9 are held from April with the first offer of places made at the end of June. Further interviews are held throughout the year. Interviews for any places available in Years 10, 11, 12 and 13 are held after August.
Visit the International Students page for specific enrolment information.
- Enrolling for 2016 – Years 7, 8 and 9
Applications for 2016 entry have now been finalised. There are limited places available in Years 7, 8 and 9. If you are interested in a place for your daughter please complete an Application Form and return, along with a copy of your daughter's birth certificate/passport and a copy of her most recent school report.
- Enrolling for 2016 – Years 10, 11, 12 and 13
On occasion we have vacancies in the Years 10, 11, 12 and 13. To discuss the possibility of a place in these senior levels please contact Amelia Davis before returning your application.
- Enrolling for 2017 onwards
If you are interested in pre-enrolling your daughter for entry in 2017 or onwards please complete an Application Form and return, along with a copy of your daughter's birth certificate/passport and a copy of her most recent school report. If you have any questions about pre-enrolment please contact Amelia Davis on +64 3 983 3744 or email firstname.lastname@example.com.
Enrolment Events
- Open Day
The 2016 Open Day will be held on Friday 6 May. This is an opportunity to visit the school and speak with our students and staff. Full details will be available in Term 1.
For further information contact:
Amelia Davis, Community Relations Coordinator
Phone +64 3 983 3744
- Experience Rangi
Experience Rangi is an opportunity during term time for girls looking at enrolment for the following year to spend a half or full day with us.
Click here for more details
To make a time contact:
Amelia Davis, Community Relations Coordinator
Phone +64 3 983 3744
- School and Boarding House Tours
Personal tours of our school and/or Boarding House are available for all girls and their families. To make a date to visit, contact:
Amelia Davis, Community Relations Coordinator
Phone +64 3 983 3744
firstname.lastname@example.com or Click here to book online


text:
Alternative Title: Marion Shepilov Barry, Jr.
Marion Barry, in full Marion Shepilov Barry, Jr. (born March 6, 1936, Itta Bena, Mississippi, U.S.—died November 23, 2014, Washington, D.C.), American civil rights activist and politician who served four terms as mayor of Washington, D.C. Barry received a bachelor's degree from LeMoyne College (1958) and a master's degree from Fisk University (1960). He was a founding member of the Student Nonviolent Coordinating Committee and was selected as its first national chairman. In 1971 Barry was elected to the Washington, D.C., city school board and in 1974 won a seat on the city council. He was elected mayor in 1978 and ... (100 of 213 words)


text:
Category:Hans-Peter Klie
|Hans-Peter Klie
German painter, photographer, conceptual artist and installation artist
|Date of birth
|Location of birth
|Work location
|Berlin (1976-1982)
|Authority control
Pages in category "Hans-Peter Klie"
This category contains only the following page.
Media in category "Hans-Peter Klie"
The following 10 files are in this category, out of 10 total.
- Hans-Peter Klie.JPG 1.71 MB