text:
*For a better user experience, click onto a photo then click onto the magnifying glass icon.
Kieren Perrow Wins The Pipe Masters; John John Takes Home The Vans Triple Crown
The third and final day of the 2011 Billabong Pipe Masters In Memory Of Andy Irons lacked the third reef clean up sets that we'd been seeing here the previous two days but packed more drama and excitement than anyone could have imagined.
Stiff trade winds made for blustery conditions and despite a drop in the swell, Pipe and Backdoor were as ferocious as ever. The day kicked off with Jamie O'Brien matched up against Joel Parkinson. Despite the fact that those are two of the best in the business out there, it was a slow heat with Parko taking the win over JOB. The highlight of that he would have to be Jamie inviting the entire world via the webcast to a party at his house on the sand at Pipe.
Up next was a matchup for the ages—John John versus Kelly Slater. John John started off with a good Pipe wave and backed it up with a couple long barrels at Backdoor but made a crucial mistake when he took off on an average wave at Backdoor, thus giving up priority with just a few minutes left. At that point John John had the 11-Time World Champion combed. But this is Kelly the dream killer and as time wound down he managed to snag two foamy barrels at Backdoor that got him past the crowd favorite. John John's Pipe Masters run was over just like that.
Moving into the semifinals I snagged a front row seat on the porch at the Quiksilver house as Parko and Slater paddled out. Right when the heat started Quiksilver CEO sat down next to me and began rooting for his star team rider. That's when the debate started. "Who do you think won that exchange?" he asked me after Parko and Kelly both has back-to-back rides. "Parko for sure, he got way deeper." McKnight scoffed at my words but admitted that he's biased as all hell. "God damn it!" were his words as Slater went down to Parko. I left with a 'told you so' smirk. Kelly was slapping the water and pissed as he felt he was underscored, but that wasn't the case and Parko moved into the final along with blue collar Aussie workhorse Kieren Perrow who dispatched Michel Bourez from Tahiti.
Just as the final paddled out, a rainsquall belted the lineup and beach, making the surf messier and the crowd on the beach scrambling for cover. KP nailed a couple good ones at Backdoor right off the bat and Parko was never able to catch up. For Kieren it marked his first WCT victory in a career that has spanned nearly 20 years. It couldn't have happened to a more respected and hard charging surfer—the guy is a gladiator!
As for the Triple Crown, it was up in the air and between John John and Michel Bourez until Kieren beat the Tahitian and the second most sought after title in surfing went to John John Florence. Congrats to both KP and John John, those two smashed themselves off the reef, took out a few of the best ever, and most importantly, probably had Andy Irons cheering for them both from heaven above.—Justin Coté
ASP Press Release: BANZAI PIPELINE, Oahu/Hawaii (Saturday, December 10, 2011) – Kieren Perrow (AUS), 34, has won his inaugural ASP World Tour event, taking out the Billabong Pipe Masters in Memory of Andy Irons over fellow countrymen Joel Parkinson (AUS), 30, in four-to-six foot waves. John John Florence (HAW), 19, also found his way to the podium as the overall winner of the 2011 Vans Triple Crown.
Perrow, who finished runner-up to Jeremy Flores (FRA), 23, in last year's Billabong Pipe Masters, returned to form again this year and charged the massive Pipeline conditions on the opening two days of competition to solidify his position on the 2012 ASP World Tour. The Australian was equally deadly in the smaller conditions on the final day and commanded the Final against Parkinson in a backdoor shootout to secure his maiden ASP World Tour victory.
"It took me up until now to get over getting second to Jeremy last year" Perrow said. "It's so good to get back here. I just felt so comfortable the whole time. I've had such a great event anyway and coming in to today, it was just amazing. The waves have been phenomenal. I haven't surfed Pipe like that in my entire career. This is pretty much the pinnacle for me."
Parkinson, a multiple Vans Triple Crown Winner, came close to clinching his first Billabong Pipe Masters Title, but was unable to find a rhythm in the Final against Perrow. "It's a hard one to lose because you've only got one guy to beat and you've beaten so many, but it's the hardest one to win," Parkinson said. "I couldn't think of anyone more deserving than Kieren (Perrow). He's a true Pipe Master and one of the best guys out there and I'm so glad he won."
Parkinson battled his way into the Final with a hard fought victory over Kelly Slater (USA), 39, in their Semifinals clash. After a series of exciting exchanges, the Australian was in need of an 8.21 with just minutes remaining and Parkinson drove through a barrel on his backhand to secure an 8.60 and his Final berth. "I knew my work was cut out for me," Parkinson said. "Surfing against Kelly (Slater) is the biggest thing you can do. After he got that 9, I thought, 'here we go.' I thought he peaked against John John and he was just at it again. That wave just came to me. It was one of those situations where you forget about everything else, am I in the right position, am I doing anything right. Conditions are not perfect at all, but there are some really good waves."
Kelly Slater took an amazing come from behind heat win in his Quarterfinals matchup against lethal Pipeline local John John Florence (HAW), 19. The Floridian was in need of a combination of 16.70 to overtake Florence with just three minutes remaining on the clock, and maintained his composure, threading the needle on two back-to-back backdoor barrels for a 9.70 and a 7.83 to surpass the young Hawaiian en route to the Semifinals.
"I was just going to try and have some fun because I didn't want to run and I thought we'd find another day," Slater said. "I figured I'd try and get in that head space and I'd ride a short board and I actually got a really good left and my board was wrong for it. I thought it was going to cost me the heat. It just came to me in last three-or-four minutes. I'm just trying to hold John John (Florence)at bay because he's going to rule Pipe for the next 20 years. I just want to get a couple before I'm done. He's been the man to beat out here. He's had two 10s and a couple of high 9's." Slater put on another strong effort in his Semifinals clash against Parkinson, but was unable to surpass the Gold Coast native and finished equal 3rd overall.
"Joel controlled it from the beginning with a 7 to start," Slater said. "He was holding position from there. I got the 5 and we were in the cycle where he had priority besides that one that I got that 9 on. I'm super surprised that he got both of his good scores on the lefts because we're usually looking at the right on days like today. He was just in sync with it and there's not much you can do about that."
Michel Bourez (PYF), 25, who was rated 3rd on the Vans Triple Crown ratings entering the Billabong Pipe Masters, needed to advance to the Final to surpass Florence on the ratings, but finished painfully close when he lost to Perrow in the Semifinals. Despite falling short of the Vans Triple Crown Title, the equal 3rd place finish marks the Tahitian's best result of the year. "It was a painful way to lose, especially when there weren't many waves out there," Bourez said. "I wish I won the Triple Crown, but it happens sometimes. It's good for the confidence and a good result for the end of the year. It's good to make the Semifinals, but I just wanted one good barrel out there and it never happened."
John John Florence put on an amazing show at this year's Billabong Pipe Masters, taking the event's only two perfect 10-point rides, but fell to Slater in the Quarterfinals. Florence's overall effort including a win at the Vans World Cup of Surfing at Sunset Beach and a 5th place at the Reef Hawaiian Pro secured his first Vans Triple Crown win, making him the youngest competitor in history to win the prestigious series.
"I'm so stoked to be here, I've been surfing these waves my entire life and watching everyone over the years," Florence said. "I'm so happy that I won this and to have my name with everyone else who has won over the years. I just want to say thanks to my Mom and Pancho Sullivan and John Pyzel and all my sponsors. Thanks to everyone." For highlights of the 2011 Billabong Pipe Masters in Memory of Andy Irons log on to billabongpipemasters2011
Billabong Pipe Masters Final Result:
1 – Kieren Perrow (AUS) 13.17
2 – Joel Parkinson (AUS) 7.00
Billabong Pipe Masters Semifinals Results:
SF 1: Joel Parkinson (AUS) 17.23 def. Kelly Slater (USA) 16.83
SF 2: Kieren Perrow (AUS) 12.00 def. Michel Bourez (PYF) 4.07
Billabong Pipe Masters Quarterfinals Results:
QF 1: Joel Parkinson (AUS) 12.00 def. Jamie O'Brien (HAW) 9.43
QF 2: Kelly Slater (USA) 17.53 def. John John Florence (HAW) 16.70
QF 3: Michel Bourez (PYF) 7.70 def. Evan Valiere (HAW) 3.66
QF 4: Kieren Perrow (AUS) 17.23 def. Gabriel Medina (BRA) 9.26


text:
Johnny Manziel needs to stop using age as crutch
HOOVER, Ala. – Johnny Manziel would like to remind you he is 20 years old. His fans would like to remind you he is 20 years old. People who hate the media's prosecution of Manziel would like to remind you he is 20 years old.
Know who else is 20 years old?
The South Carolina pass rusher is actually younger than the Texas A&M quarterback by two months.Clowney showed up here at SEC Media Days on Tuesday and was extremely impressive. He said he knows how to stay out of trouble, how to stay off the Internet and how to use the offseason to get better. He said he hangs out with the same small group of people, and his routine is "eat, come home, play games." He said he does not drink. Clowney had the best highlight of the bowl season, crushing Michigan's Vincent Smith in Tampa on New Year's Day, and he came back faster and leaner.
He's 20 years old.
Manziel? He left the Manning Academy over the weekend and explained he was "tired, just exhausted." He insisted he overslept, wasn't hung over and the "mutual decision" to leave had "nothing to do with the activities of the night before." He said he had "a really busy schedule" and "wanted to get back to College Station and relax."
There is no crime in leaving the camp. Peyton Manning didn't care, and so no one else should. What's far more concerning, and relevant, is whether Manziel is improving on and off the field as rapidly as not only Clowney, but other quarterbacks in the SEC like A.J. McCarron, Zach Mettenberger, Aaron Murray and Jeff Driskel. The Florida quarterback showed up here Tuesday and sounded like he was fully prepared for the season. He did not look "exhausted." He looked ready to play. Driskel has been obsessing about his team's loss to Louisville in the Sugar Bowl for months. Murray has surely been obsessing about his team's loss to Alabama in the SEC title game.
What has Manziel been obsessing about?
He has had tremendous chances to get better over the past few months. He spent time with LeBron James andPeyton Manning. Tim Tebow called him up last week. Those athletes are experts in dealing with scrutiny. All of them have been swarmed by "haters." James was considered a choker and a traitor. Manning was ripped for not beating the Gators, not winning the Heisman and not winning in the NFL playoffs. Tebow has had more scrutiny than perhaps any other athlete in recent sports history. Someone asked him in front of a room full of reporters if he's ever had sex.
Those guys can all help Manziel handle attention. Those guys have been embarrassed on national TV and have conquered obstacles on the field. Those guys can all help Manziel become the best athlete he can be. Will he listen?
And will he listen to Kevin Sumlin? The Aggies' head coach had some wise words on Wednesday, telling the media he has challenged Manziel to evolve "from an athlete who's a quarterback to a quarterback who's an athlete." That's profound advice. An athlete who is a quarterback relies on instincts and innate talent. A quarterback who's an athlete knows when to think, when to judge, when to evaluate. That advice applies off the field as well. Manziel has to learn when to take a step back and look further down the field. That's been a lesson learned by other 20-year-olds in the past. Lots of them.

subset: commoncrawl


text:
OK, Runt fans, save your pennies and break out your old vinyl.
Todd Rundgren who just recently performed with his rock band in Cleveland will be returning to N.E. Ohio in September to perform, right here in Akron at The Civic Theatre.
What will he do?
Singer Randy Crawford scheduled to appear with pianist Joe Sample on Saturday May 2 at The Allen Theatre will not appear due to an unspecified illness.
Sample and the evening's headliner Saxophonist Dave Kos will still appear at the scheduled date.
Wednesday night, The University of Akron's E.J. Thomas Hall will play host to a couple of up and coming bands for whom the adjective "emo" is probably not an insult.
Singer/songwriter Secondhand Serenade aka John Vesely will perform along with The Red Jumpsuit Apparatus.
Vesely is touring behind his sophomore album A Twist In My Story, a collection of umm..emotional songs featuring the kind of high keening vocals, emotional, vulnerable lyrics and big, hooky choruses that made Dashboard Confessional so darn popular a few years ago.To read more or comment...
Hello, Spuds. Give the new Devo single "Don't Shoot (I'm a Man)," from the band's upcoming and unnamed album, a listen:
To read more or comment...
"DON'T SHOOT" - DEVO from DEVO Channel on Vimeo.
Apparently, indie rock bands don't die, they just break up/shed members and do their own thing until the inevitable reunion show/tour where they can make more money in a few months of nostalgia fueled touring than in their initial incarnation (see, Pixies).
The original Dinosaur Jr. lineup didn't break up, they just shed original bassist Lou Barlow who did alright for himself in Sebadoh and wrote one of the one of the best kiss-off songs ever in The Freed Pig .
Wednesday night at Musica, the reconstituted trio of indie rock graybeards took a pleasant and highly amplified trip through their back catalog and songs from their 2007 reunion album Beyond.To read more or comment...
Flea is inducting Metallica and he said the F-Word which as far as I have heard is one of the few naughty words of the evening.
Usually, there are a lot more.
Flea has green hair.
How many other jobs on this planet can a 40+ year old man with green hair wearing a Metallica t-shirt and a blazer be taken seriously.
Hell Yeah!
Flea just referenced Anasthesia (Pulling Teeth) and he is giving the late bassist Cliff Burton a lot of deserved love and James Hetfield looks a little misty.
It's Jeff Beck's turn and unsurpsiringly, they started with the old clip of him saying a freindly "F-Em" to his former Yardbird members because "they fired me, they did! So F-Em"
I'll bet something he says tonight will end up in future montages.
Hey look! It's Max Weinberg at Gary Tallent!To read more or comment...
OK, So Rosanne Cash came back to talk to us about Wanda Jackson and her upcoming album (to be fair she was asked about the album) and now that the auditorium audio is back on, I have no idea what the hell Paul Shaffer is talking about, but here comes SPOONER OLDHAM onstage so I guess it's his turn.
Spooner got in and out pretty quickly, did Paul Shaffer and the band play one of his songs?
Oh Well, here comes Bobby Womack. His opening montage features several time warp clips of him on Soul Train (you can tell what era is by the length of Don Cornelius's afro) including one of him saying "I'm from Cleveland, Ohio,""
It seems like the producers are doing their best to show Cleveland some on-air love.
Hi, Little Anthony and the Imperials just finished their performance.
Tears on my Pillow and two other songs I can't name because I was looking for an outlet for my laptop (cuz I know you care)
A couple of early observation:To read more or comment...
The April 11 concert featuring Akron born R&B/soul singers James Ingram and Howard Hewett to be held at the Akron Civic Theatre has been canceled due slow ticket sales.
The Easter themed concert was timed to coincide with Ingram's latest CD a gospel collection called Stand (In The Light) and was going to be a combination homecoming for the pair of soul men and an opportunity a local church choir to sing with the artist.To read more or comment...


text:
Panini America Inc. reserves the right to send email alerts concerning account changes or account service updates.
Yes, I would like to receive newsletters and valuable offers from Panini America Inc..
Yes, on occasion I would like to receive surveys concerning Panini America Inc. products and services.
Yes, on occasion I would like to receive valuable offers from Panini America Inc. partners.
By clicking on "I Accept. Create User Account >>", you are agreeing to the PaniniAmerica.net Terms of Service and Privacy Policy. An e-mail notification will be sent to you. Please save and always refer to this e-mail.
Home | News | Products | Checklists | Claim Rewards | Customer Support | Authentication | Redeem a Redemption Missing Stickers (USA) | Missing Stickers (English Canada) | Missing Stickers (French Canada) General Conformity Certificates Dealer Application | Privacy Statement | Careers | Contact Us | Site Map
All Rights Reserved. Copyright 2017. Panini America, Inc.


text:
Sat, 14 Jul 2012 /
1 Attending
The UK drum & bass producer talks Zappa, MF Doom and jump-up.
RA catches up with the owner of D-Edge, one of Brazil's finest clubs.
The Raster-Noton artist has caught the techno bug of late, releasing some of the most physical music of his career. RA's Todd L. Burns investigates.
RA sits down with the electronic music pioneer and one of his pupils, Hideki Matsutake of Yellow Magic Orchestra, to talk about the synthesizer they made their own in the 1970s.
RA's Jono Buchanan helps you to squeeze the most out of the staple studio effect.


text:
Germany Captures Fourth World Cup
(Rio de Janeiro, Brazil) -- Germany has won the World Cup for the fourth time, beating Argentina 1-0 in extra time. Mario Götze got the lone goal of the match with under ten minutes left in extra time. The Germans are now tied with Italy for the second-most World Cup titles, one shy of Brazil's record five.
PHOTO: Getty Images


text:
Ubuntu Oneiric Networking
Only one network manager and GUI interface can be enabled. Network-Manager is installed by default, but many users prefer Wicd Network Manager.
Network Manager
Network Manager is the network manager installed by default in (K)Ubuntu. It has a tray applet that allows you to switch between Internet connections (such as wireless APs or wired connection).
Wicd Network Manager
Wicd Network Manager is a GTK-dependent networking manager written in Python that can be used in all variants of (K)Ubuntu. Many users (including me) report it to be faster and more stable than Network Manager. To avoid networking conflicts, Wicd requires the removal of Network Manager prior to installation (replace network-manager-kde with network-manager if using Ubuntu instead of Kubuntu).
sudo apt-get remove network-manager-kde sudo reboot sudo apt-get install wicd
Set a static IP address
I have never been able to get Network Manager to accept my static IP address settings. If you only use only a wired interface, you do not need a network manager and it can be removed.
- Remove Network Manager (replace network-manager-kde with network-manager if using Ubuntu instead of Kubuntu):
sudo apt-get remove network-manager-kde sudo reboot
- Edit the /etc/network/interfaces file (use the gedit text editor instead of kate if using Ubuntu instead of Kubuntu):
sudo kate /etc/network/interfaces
- and replace the line (ok if line is missing)
iface eth0 inet dhcp
- with the following lines (using your own LAN settings, of course):
auto eth0 iface eth0 inet static address 192.168.0.35 netmask 255.255.255.0 network 192.168.0.0 broadcast 192.168.0.255 gateway 192.168.0.1
- Then restart networking:
sudo /etc/init.d/networking restart
- Check to see if your settings are now correct:
- If you need a static IP address and have a wireless connection, Wicd Network Manager works:
- Uninstall Network Manager and install Wicd instead (replace network-manager-kde with network-manager if using Ubuntu instead of Kubuntu):
sudo apt-get remove network-manager-kde sudo reboot sudo apt-get install wicd
Manual configuration from the command-line
3 steps for WEP:
sudo iwconfig eth[N] essid [SSID] sudo iwconfig eth[N] key restricted s:[PASSWORD] sudo dhclient
WPA is more complicated:
sudo mkdir /etc/wpa_supplicant cd /etc/wpa_supplicant sudo echo network = { > wpa_supplicant.conf sudo echo ssid="SSID" >> wpa_supplicant.conf sudo echo key_mgmt=WPA-PSK >> wpa_supplicant.conf sudo echo psk="PRESHAREDKEY" >> wpa_supplicant.conf sudo echo } >> wpa_supplicant.conf cd /etc/network sudo gedit interfaces
Now add after "auto eth[N] ..." & "iface eth[N] .." :
wpa-driver wext # or whatever driver your network card needs wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf
Save the file and restart your system.
Internet connection sharing (DHCP server)
In most LANs, an inexpensive router is used to provide DHCP functions (internet connection sharing).
However, DHCP services can also be provided by a single host computer on your LAN if it is directly connected to the Internet. (This is useful, for instance, if you have a 3G or other wireless EVDO connection to your computer which you want to share with the other computers on your LAN). Other client computers on your LAN would then connect to the Internet through your host computer's Internet connection. The host computer now essentially performs the DHCP functions of a router.
All "client" computers on the LAN ought to be connected to a central LAN switch or router. (If using a router, it should have its own DHCP functions disabled -- you shouldn't have 2 DHCP servers on a LAN unless you know how to nest LANs). They should all be set up to obtain DHCP-assigned dynamic IP addresses and use the same LAN subnet settings (which in the example below is LAN IP range 10.0.0.1 - 10.0.0.250 with netmask 255.255.255.0 and gateway 10.0.0.1). The host computer to be used as the gateway/DHCP server is then connected (through its own ethernet port) either to one to the ports of the switch (if used), or to a LAN port of a router (don't use the WAN port). The host computer then connects directly to the Internet (WAN) through a second port (which in the example below will be a wireless (wifi) port (wlan0)).
(Note: This setup is easiest if you connect all computers on the LAN with Ethernet cables to the central switch or router. But also see using a nested wireless LAN router below.)
(Note: If you want your LAN to use the same subnet as your WAN, see network interface bridging.)
- Install the DHCP server and firewall programs:
sudo apt-get install dhcp3-server firestarter
- Rename the startup command (through a symbolic link) for the DHCP server. This is required or Firestarter will not know where to find it:
sudo ln -sf /etc/init.d/dhcp3-server /etc/init.d/dhcpd
- Edit the DHCP server configuration file:
sudo nano -w /etc/default/dhcp3-server
- Change the line
- to
- Restart the DHCP server:
sudo dhcpd restart
- Right click on Network-Manager -> Edit Connections... -> Wired -> Add
- -> Connection name: Shared internet connection
- -> IPv4 Settings -> Method: Manual -> Add
- -> Address: 10.0.0.1 -> Netmask: 255.255.255.0 -> Gateway: 0.0.0.0
- -> Available to all users: [x]
- Attach the ethernet cable to (eth0).
- Network-Manager -> Wired Networks -> Shared internet connection
- Adjust your firewall to allow the internet connection sharing. Start Firestarter:
sudo firestarter
- Tell the firewall which port is your direct Internet Connection:
Firestarter -> Preferences -> Firewall -> Network Settings -> Internet connected network device: (wlan0)
- -> IP address is assigned by DHCP: [x]
- Tell the firewall which port is for the LAN, and specify the details for the LAN:
Firestarter -> Preferences -> Firewall -> Network Settings -> Local network connected device: (eth0)
- -> Enable internet connection sharing: [x]
- -> Enable DHCP for the local network: [x]
- -> DHCP server details -> Create new DHCP configuration -> Lowest IP address to assign: 10.0.0.2
- -> Highest IP address to assign: 10.0.0.250 -> Name server: <dynamic>
- Note: Use your own desired LAN settings (internal DHCP-assigned dynamic IP address range), of course. In this example I don't use the full IP range 10.0.0.2 - 10.0.0.255 for dynamic IP addresses because I want to reserve some LAN addresses (10.0.0.251 - 10.0.0.255) to be used as static IP addresses).
- Notes:
- If you wish to use this setup all the time, make the "Shared internet connection" profile your default connection profile in Network Manager.
Using a nested wireless LAN router
Many users will already have an established LAN that uses an existing wireless router and has client computers that are setup to connect wirelessly to the router. Here's how to maintain this setup and still use the internet connection sharing method of a single host computer as described above. This method is known as nested LANs. The wireless router will serve as a nested LAN for its wireless clients (only), but in turn will appear as a single device to the main LAN. The two LANs must have different IP ranges. For example, the main LAN may have an IP range 10.0.0.1 - 10.0.0.255 (with netmask 255.255.255.0), as in the above example. The router's nested wireless LAN must then use a different IP range (for example 192.168.0.1 - 192.168.0.255 with netmask 255.255.255.0).
- Do not use your wireless router's WAN (Internet) port.
- Connect the host computer (to be used as your main LAN gateway/router) to a LAN port (not the WAN/Internet port) of the wireless LAN router.
- Configure your wireless router's LAN so that it appears to be a single device to the main LAN:
- Setup your wireless router so that the Internet Connection type is "Static IP" (often in the "Internet Setup" section). Configure the settings so that its "Internet IP address" is within the static IP address range of your main LAN (e.g. 10.0.0.254), and make sure the subnet mask matches the one you chose for your main LAN (e.g. 255.255.255.0). The gateway setting should be set to match the IP address of your host computer of the main LAN (e.g. 10.0.0.1 in the example of the preceding section). Now the wireless router will appear to the host computer as just another device on the main LAN.
- If your wireless LAN is already functioning, you probably don't have to change any settings, but double-check to make sure the schema are compatible. Configure the wireless router's settings for the nested wireless LAN. This is done by enabling the router's DHCP server functions (in "Network Setup" or some similar configuration section of the router). The router ought to have as its own wireless LAN gateway address a "local IP address" (or "LAN IP address") of 192.168.0.1 (for the IP address range used in this example), and a "starting IP address" (for the DHCP-assigned dynamic IP address range to be used for the wireless clients) to be 192.168.0.2 or greater. (Some routers ask you to specify the entire range (such as 192.168.0.2 - 192.168.0.255.)
- Make sure all your wireless client computers are set to obtain their DHCP-assigned dynamic IP addresses from the wireless router (gateway IP 192.168.0.1) instead of from the main LAN gateway.
- Now all communications from the wireless client computers will be routed to the wireless LAN router first, which will then in turn route them to the host computer (which is acting as the main LAN gateway/router), which will then in turn route them to the Internet (WAN).
- Note: The host computer for the main LAN must have a static IP address (e.g. 10.0.0.1 as in the example of the preceding section) and it must match the gateway IP address configured in the wireless LAN router settings.
Network Interfaces Bridging
- Install bridge-utils to be able to create network bridges:
sudo apt-get install bridge-utils
- Edit /etc/network/interfaces:
sudo nano /etc/network/interfaces
The interfaces file should look like this after editing it:
auto eth0 iface eth0 inet manual # auto br0 iface br0 inet dhcp # bridge_ports eth0 wlan0 # # The loopback network interface auto lo iface lo inet loopback
- Restart networking with:
sudo /etc/init.d/networking restart
Using Dynamic IP addresses for a webserver
Normally, domain name servers (DNS) that are used publicly on the Internet match a web server's URL name with the IP address of the server's host computer. If your computer has a static IP address, then you can publish your own web server's URL as belonging to the static, unchanging IP address of your computer.
However, if your IP address is dynamic (always changing) because you use an ISP (Internet Service Provider) that constantly changes your IP address (using DHCP), then you will need a Dynamic DNS service to constantly keep track of your dynamically changing IP address and match it to of your web server's URL. Fortunately, there are a few Dynamic DNS services that will do this for you, either for a small fee or even for free. For more info, see this Ubuntu Community help article.
For specific tips on setting up Dynamic DNS, see this article.
NFS is the default networking protocol for network file sharing in *nix systems (including (K)Ubuntu Linux). Here are some tips for setting up NFS from the Little Girl's Mostly Linux Blog.
Samba File Sharing
Samba client
Samba is a networking protocol that allows compatibility with Windows-based networks. The Samba client is installed by default in Ubuntu and should work seamlessly (unless you have have a firewall blocking the ports).
Samba server
Samba provides file/print services for the SMB/CIFS protocol used in Windows-based networks. See the official Ubuntu documentation for more information about providing services in a Windows network. A Samba server can be installed using the tasksel option during installation of the Ubuntu server from the LiveCD, or at any time using:
sudo tasksel install samba-server
- An alternative method of installation is:
sudo apt-get install samba samba-tools system-config-samba smbfs
- Note: samba-tools, system-config-samba, and smbfs are optional.
- Modify Samba settings.
- Method 1:
- Menu -> System -> Administration -> Samba
- (Note: this is available only if you installed system-config-samba.)
It is recommended that your user be a member of the sambashare group, as well.
- Method 2:
- Enable File Sharing Server With User Login (Very Reliable Method)
- Do the following on the machine that has the files to be shared:
- Add current user to Samba:
sudo smbpasswd -a username
- (replacing username with your login username)
- Open the samba config file:
sudo nano /etc/samba/smb.conf
- Add the directories to be added (right at the end) in the following format:
[Pictures] path = /home/username/<folder_to_be_shared>
- (Replace username with your username and <folder_to_be_shared> with the folder you want to share)
- Press CTRL+X and then Y to save.
- Restart Samba:
sudo service smbd restart sudo service nmbd restart
- Note: Prior versions used:
sudo /etc/init.d/samba restart
- On Windows access the folder in the following format in Windows Explorer:
- (replace 192.168.x.x with the actual IP address of your server which is serving the folder)
- On Linux type the following in Konqueror or Nautilus:
- (replace 192.168.x.x with the actual IP address of your server serving the folder)
Note: If you use Sharing in KDE's System Settings panel, be aware that there is a small bug, reported here. In brief, you need to comment out/delete any instances of these two lines in /etc/smb.conf :
case sensitive msdfs proxy
Change your Workgroup
To change your Samba (Windows network) workgroup:
sudo nano /etc/samba/smb.conf
Look for the line:
workgroup = WORKGROUUP
and change the setting to whatever your LAN workgroup is.
Recognizing Windows 98 machines
Microsoft networking is extremely quirky. To enable recognition of PCs with Windows 98, edit your Samba configuration file:
sudo nano /etc/samba/smb.conf
Then add the following lines to the file:
[global] # THE LANMAN FIX client lanman auth = yes client ntlmv2 auth = no
Integrating into Mac OS X Network
See this guide for information on integrating Ubuntu into an existing Mac OS X Appletalk network.
FTP Server
An FTP server allows the easy transfer of files between systems over the network. Clients such as Filezilla can be used to interact with an FTP server. Also see these FTP tips.
vsftpd is an FTP server available in (K)Ubuntu. For configuration information, see the official Ubuntu documentation. Install:
sudo apt-get install vsftpd
Proftpd is an FTP server available in (K)Ubuntu that can be used with either the MySQL or PostgreSQL database. Also see the Ubuntu Community documentation. Install:
sudo apt-get install proftpd-basic
WebDAV is a method for allowing remote access to local folders via an HTTP-based web browser or file manager. This can be combined with user authentication (using LDAP or other password mechanism).
- See this page for instructions.
Local Area Network
Modems / Dial-up
Network Manager does not accept modem connections. See Ubuntu help for information on identifying and connecting with a modem. These instructions require gnome-network-admin (install while connected to a wired ethernet connection):
sudo apt-get install gnome-network-admin
Gnome PPP and wvdial
Gnome PPP is a discontinued GUI frontend for the wvdial PPP modem dialer. It is still available as a package. Install:
sudo apt-get install gnome-ppp wvdial
See this forum thread for tweaks required to make Gnome PPP and wvdial operational in Lucid.
GPPP was the default modem dialing application in previous versions of Ubuntu.
- Menu -> Applications -> Internet -> GPPP Internet Dial-up
Remote Access
There are several methods of remote access. VNC sharing allows you to view and control a remote computer's desktop. (Windows users use a similar proprietary protocol called remote desktop protocol (RDP)). XDMCP allows a complete remote X-windows based login. Remote connections are hazardous unless proper security precautions are taken to prevent unauthorized logins and to ensure encryption of transmitted data.
Secure Shell or SSH is a network protocol that allows data to be exchanged over a secure channel (or "tunnel") between two computers. Encryption provides confidentiality and integrity of data. The OpenSSH client is installed by default in Ubuntu so you can connect to another computer that is running an SSH server.
Connect to a remote SSH server
From the command-line terminal
Install the OpenSSH client (if not already installed):
sudo apt-get install openssh-client
From the command-line Terminal type:
ssh -C <username>@<computer name or IP address>
- Note: The -C option indicates compression, which speeds up transmission through the tunnel.
For example:
ssh -C firstname.lastname@example.com
- or:
ssh -C firstname.lastname@example.com
- or
ssh -C 192.168.1.1 -l mike
- Note: -l specifies the login id.
If the SSH server is listening on a port other than port 22 (the default), you can specify that in your connection (with the -p option). For example, if the SSH server is listening on port 11022, connect:
ssh -C email@example.com:11022
- or
ssh -C remote.computer.xyz -p 11022 -l joe.friday
If you have made a public/private key using ssh-keygen, the private key must be stored in /home/user/.ssh. The key should be accessible only to user
sudo chmod 600 /home/user/.ssh/identity
- or
sudo chmod 600 /home/user/.ssh/id_rsa
To login with the key:
ssh -C remote.computer.xyz -p 11022 -l joe.friday
Note: You can run the command as a menu item, but the command must be "run in terminal."
Port forwarding through SSH
- See Using SSH to Port Forward for full details.
- In brief, use
ssh -C <remote ip> -p <SSH tunnel port> -L <local port>:<remote computer>:<remote port> -l <user>
This specifies that any communications from your computer (localhost) going out through <local port> will be transmitted securely through the the SSH tunnel port. To use VNC through the tunnel, you would use an application like Krdc or Vinagre:
krdc vnc://localhost:<local port>
Note: localhost is equivalent to (and interchangeable with) 127.0.0.1. Either can be used.
Note that for VNC, the default <local port> is 5900. In general, a remote VNC server (such as X11VNC) is also listening on the default <remote port> 5900 as well. The default <SSH tunnel port> is 22, as discussed above. All these can be changed, however, if you desire greater security.
For me, I noticed that I had to set <remote computer> to be the internal LAN IP address of the remote computer (such as 192.168.1.155) instead of the remote router's IP address, which is specified in <remote IP>. (If the remote computer has a static IP address (i.e. is directly connected to the Internet without an intervening router), then <remote computer> and <remote ip> would be the same.)
Example: For extra security, my SSH Server uses <SSH tunnel port>=11022. I want to VNC to a remote computer on a remote LAN with a router whose IP address is <remote ip> = 244.205.123.123. The remote computer to which I want to connect has a static IP address within the remote LAN of <remote computer> = 192.168.1.155. I have set up an X11VNC server on this computer that is listening on <remote port> = 6912 (instead of the default 5900). I setup port forwarding on the router of this remote LAN to forward port 6912 to this server computer. I want to VNC to this remote computer from my laptop, through the Internet. My laptop VNC client (Krdc) will use the default <local port> = 5900. My name is <user> = joe.friday. This is my story.
ssh -C 244.205.123.123 -p 11022 -L 5900:192.168.1.155:6912 -l joe.friday krdc vnc://localhost:5900
If you have set up a private/ public key pair with a passphrase, or if your SSH server requires a passphrase, of course, you will be prompted for the passphrase after issuing the SSH command.
Note: Port forwarding assumes that the ports are also forwarded through the router(s) and through any firewalls. See the documentation for your router(s) and firewall to learn how to do this. The advantage of SSH tunneling is that only the <SSH tunnel port> needs to be open and forwarded by a router. All encrypted communications will go through your router using this single port. This is what makes the communications secure.
PuTTY is a GTK-based GUI client-interface for SSH connections and eases the setup for port forwarding, SSH public key authentication, and automated login. A user would run Putty to create the SSH tunnel (instead of the ssh command) and then run a program such as Krdc or Vinagre. PuTTY is available for both Linux and Windows (but for routine Linux usage OpenSSH is generally recommended instead).
sudo apt-get install putty putty-tools
- To create a 2048-bit RSA key pair compatible with OpenSSH, it is possible to use Puttygen (part of Putty-tools). (For me the Linux version of Puttygen is occasionally buggy, however, so I recommend OpenSSH keygen for routine usage instead):
puttygen -t rsa -b 2048 -O private -o putty_rsa.ppk puttygen putty_rsa.ppk -O public-openssh -o id_rsa.pub puttygen putty_rsa.ppk -O private-openssh -o id_rsa
- Move the OpenSSH-compatible keys to the ~/.ssh (i.e. the /home/user/.ssh) folder
mv id_rsa* ~/.ssh
- Copy the public key ( /home/user/.ssh/id_rsa.pub ) to the server that is hosting the OpenSSH server, into the /home/serveruser/.ssh (for whichever user is the administrative user for the server -- generally the user that installed the server initially). If the SSH tunnel is (still) set at default port 22, you can copy the key using the utility:
ssh-copy-id firstname.lastname@example.com
- Connect a VNC client (such as Krdc) through SSH using the command-line:
putty -ssh -i ~/.ssh/id_rsa -l serveruser -L 5900:127.0.0.1:5900 remoteserver.computer.xyz -P 22 krdc vnc://127.0.0.1:5900
- or as a single command:
putty -ssh -i ~/.ssh/id_rsa -l serveruser -L 5900:127.0.0.1:5900 remoteserver.computer.xyz -P 22 sleep 5; krdc vnc://127.0.0.1::5900
- Alternatively, the PuTTY SSH Client GUI can be run (from Menu -> Internet -> PuTTY SSH Client) and options configured from there.
Using keys created by Puttygen in OpenSSH
The public security key generated by Puttygen in Windows is generally not compatible with OpenSSH security keys unless it is edited. For example, the default OpenSSH key is 2048-bit RSA (SSH-2). When a 2048-bit RSA (SSH-2) PuTTY public/private key pair is generated (by Puttygen) in Windows (see this tutorial), the public key looks like:
---- BEGIN SSH2 PUBLIC KEY ---- Comment: "rsa-key-20100302" AAAAB3NzaC1yc2EAAAABJQAAAQEAjdp567qxsGkhELlMQup2mXHdsveCWq/maU6k unPpbkwEuhkasuOrhkAWgv5v3d8S857zdHcfnXWi2FkEaJuFxqpJ2IkFuvqRdqYD ZCcASj2S0LoXdWpC4uon6VH8oBT31r+wkDfmI2a+K74jgXjtm1BWWxwOpKaWQHi9 YItbY/06renRex34n3ejO20JRqD/BxnFU7ND41Szo3ZMKoa0yzhevU2ntt74BCvC bYFHdSoRbi3AH8qGInzFfhXPdrG8qA382ZKEh5Bmy8Qxb9Uen/+jjP51YxN/ykee RwSrdSCZekB6jN6uuTLNDEXJSJizqlPU8tROqf3pYv1kxzD9bw== ---- END SSH2 PUBLIC KEY ----
- To be used by OpenSSH, the saved public key must be edited.
- Delete the first two lines (with the BEGIN and Comment: in them) and the last line.
- Join the remaining lines into a single line.
- Place ssh-rsa at the beginning.
- It should end up looking like:
ssh-rsa AAAAB3NzaC1yc2EAAAABJQAAAQEAjdp567qxsGkhELlMQup2mXHdsveCWq/maU6kunPpbkwEuhkasuOrhkAWgv5v3d8S857zdHcfnXWi2FkEaJuFxqpJ2IkFuvqRdqYDZCcASj2S0LoXdWpC4uon6VH8oBT31r+wkDfmI2a+K74jgXjtm1BWWxwOpKaWQHi9YItbY/06renRex34n3ejO20JRqD/BxnFU7ND41Szo3ZMKoa0yzhevU2ntt74BCvCbYFHdSoRbi3AH8qGInzFfhXPdrG8qA382ZKEh5Bmy8Qxb9Uen/+jjP51YxN/ykeeRwSrdSCZekB6jN6uuTLNDEXJSJizqlPU8tROqf3pYv1kxzD9bw==
- Once the PuTTY public key is in this format, it can be appended to the ~/.ssh/authorized_keys file on the OpenSSH server. (The private key stays on the client computer, of course). PuTTY can then connect (from Windows or Linux) to an OpenSSH server using the public/private key method.
Connect using SSH Agent
With SSH Agent you can automate the use of public key authentication and open an XDM or VNC session using a script. See this tutorial.
Also see this alternative simple approach: Connect with SSH and start an application with a single command.
Setup an SSH server
Install the OpenSSH server:
sudo apt-get install openssh-server
- or
sudo apt-get install tasksel sudo tasksel install openssh-server
Note: The OpenSSH server can also be installed when doing a server installation as an option from the LiveCD.
Note: An OpenSSH server can also be set up on a Windows server using Cygwin. See these instructions.
- Don't forget to forward the port on which your OpenSSH server is listening. The default SSH port is 22; if the default is used, the router should therefore forward port 22 to the computer on the LAN that is hosting the OpenSSH server. The OpenSSH listening port can be changed; in fact, each computer on the LAN can listen on its own unique SSH port, if desired. The router must forward each specified listening port to the correct computer. Therefore, if computer 1 has its OpenSSH server set to listen on port 22221, then the router should forward port 22221 to computer 1's LAN IP address. If computer 2 has its OpenSSH listening port set to 22222, then obviously the router must forward port 22222 to computer 2's LAN IP address. To change the listening port of the OpenSSH server, edit the /etc/ssh/sshd_config file (use the gedit text editor instead of kate if using Ubuntu instead of Kubuntu):
sudo kate /etc/ssh/sshd_config
and change the listening port from 22 to your desired listening port:
Port 22221
then restart the OpenSSH server:
sudo /etc/init.d/ssh restart
- For greater port security (and to minimize brute-force attacks), consider using Knockd.
Limit authorized SSH users
OpenSSH Public Key Authentication
See this OpenSSH Public Key Authentication Tutorial.
In brief, it is necessary to generate a public / private key pair. On your client machine, generate the pair:
A prompt asks for a passphrase. If you wish to use OpenSSH without a password from a secure client (to which no one but you has access), leave the passphrase blank. If you enter a passphrase, you will be asked for this passphrase each time you use the SSH client. By default, a 2048-bit RSA SSH-2 key pair is generated and stored in the /home/user/.ssh folder. The private key is named id_rsa and is meant to stay in that folder. (The public key is id_rsa.pub and is meant to be copied to the OpenSSH server.)
- The private key must only be accessible (and should be read-only) to user, the owner of the file:
chmod 600 /home/user/.ssh/id_rsa
- You could also make the entire .ssh folder accessible only to user:
chmod 700 /home/user/.ssh
- Copy the public key ( /home/user/.ssh/id_rsa.pub ) to the server that is hosting the OpenSSH server, into the /home/serveruser/.ssh (for whichever user is the administrative user for the server -- generally the user that installed the server initially). If the SSH tunnel is (still) set at default port 22, you can copy the key using the utility:
ssh-copy-id firstname.lastname@example.com
- The ssh-copy-id utility only works over port 22. An alternative if you have changed your SSH port is to copy the /home/user/.ssh/id_rsa.pub key to the server manually. On the server make sure the directory /home/serveruser/.ssh exists and that there is a file authorized_keys (with write privileges) in that folder. If not, create such a file while logged into the server as serveruser (the touch command creates an empty file):
mkdir ~/.ssh cd ~/.ssh touch authorized_keys
Then concatenate the id_rsa.pub key you have copied to the ~/.ssh folder. (Make sure the owner of id_rsa.pub, after copying, is serveruser.):
cd ~/.ssh chown serveruser id_rsa.pub cat authorized_keys id_rsa.pub >> authorized_keys
- Make sure the OpenSSH server knows to look for the key file. On the remote server, edit the OpenSSH configuration file:
sudo nano /etc/ssh/sshd_config
- Uncomment the line (i.e. remove the # at the beginning of the line):
#AuthorizedKeysFile %h/.ssh/authorized_keys
- Remove the ability to login to the OpenSSH server using password authentication:
sudo nano /etc/ssh/sshd_config
- Change the line
#PasswordAuthentication yes
- to
PasswordAuthentication no
- Restart the OpenSSH server:
sudo /etc/init.d/ssh restart
- Now you can connect securely with an SSH tunnel without requiring a password, logging in as serveruser.
ssh -l serveruser -L 5900:127.0.0.1:5900 remoteserver.computer.xyz -p 22
Connect with SSH and start an application with a single command
- If you have created an OpenSSH key pair (without a password), you can start both the SSH tunnel and a VNC program (such as Krdc or Vinagre) to run through the SSH tunnel with a single command:
ssh -f -l serveruser -L 5900:127.0.0.1:5900 remoteserver.computer.xyz -p 22 sleep 5; krdc vnc://127.0.0.1::5900
- Alternatively (and probably preferably) you can create a Menu Item / Shortcut with the above command.
Note: This command is a command-line mini-script. The SSH option -f option tells the SSH client to fork into the background after starting. (This option is not available in the PuTTY client.) This allows the command line to continue to proceed to the next command(s) listed on the command line mini-script. The 5 second wait ("sleep") timeout allows time for the SSH tunnel to be created before proceeding to the next command. (This can be lengthened if necessary.) After the wait period, the program (Krdc VNC in this example) is started.
- Of course, any program could be started (to be run through the SSH tunnel) in this fashion, not just a VNC program.
Automate SSH connections that require a password
This method is strongly advised against. Transmitting an unencrypted password through the Internet (in order to establish an SSH connection) invites password sniffing. Use the OpenSSH key pair methods described above, instead. This method is listed here for reference.
- Terminal interactions (such as the SSH password challenge) can be automated using the expect utility. Install:
sudo apt-get install expect
- If, for example, your SSH client ID is clientuserID, yourpassword is not#1sostrong, and the remote SSH server is remoteserver.computer.xyz (using the default SSH port of 22), then use this command to start the SSH tunnel:
expect -c 'spawn ssh -l clientuserID -L 5900:127.0.0.1:5901 remoteserver.computer.xyz -p 22; expect assword ; send "not#1sostrong\n" ; interact'
There are other parameters in this example. 5900 and 5901 are the ports to be used on either side of the tunnel (port 5900 is used for VNC, for example). See Port forwarding through SSH for more details.
You can use the entire command as a menu item (must be "Run in terminal" in the Advanced menu options).
Virtual Network Computing (VNC) mirrors the desktop of a remote ("server") computer on your local ("client") computer (it is not a separate remote login, as is XDMCP). A user on the remote desktop must be logged in and running a VNC server (such as X11VNC, Vino, or Krfb). Keyboard and mouse events are transmitted between the two computers. VNC is platform-independent —- a VNC viewer on one operating system can usually connect to a VNC server on any other operating system. (Windows users can use one of several clients such as UltraVNC Viewer.)
Vino Remote Desktop VNC server
Vino-server (the Gnome VNC server) is included by default in Ubuntu. Start:
- Menu -> System -> Preferences -> Remote Desktop
- You can accept uninvited connections in the Security section. You can require a password for these connections.
- This implementation of Vino does not allow changing the default listening ports (which start at 5900). If you wish to customize your VNC connection, use X11VNC instead.
- A user can connect using Vinagre, the Terminal Server Client, or any other VNC client.
How to securely use VNC with SSH tunneling
It is less secure to leave the VNC listening port open to the Internet, even with a password. (This can expose you to password cracking attempts.)
It is more secure to use SSH to tunnel your VNC connection. Under SSH port forwarding, the VNC listening port is the <remote port>. To increase security, this listening port can be changed from the default 5900. Only the VNC server and the SSH client need to specify the <remote port> in a secure connection.
X11VNC Server
While Vino is easy to use, X11VNC allows far more customization and therefore can be used more in situations where greater security is needed.
- Install an X11VNC server to share your desktop with other computer:
sudo apt-get install x11vnc
- Run X11VNC without a password:
x11vnc -forever -rfbport 5900
- Note: -rfbport 5900 specifies the port to listen on. The port number can be changed. This option is not required if the default port 5900 will be used. Don't forget to open/forward this port in your firewall/router. By default X11VNC server exits after the first client disconnects. To keep it running (and allow future connections), use the -forever option. See here for more command line options.
- Create a password to use with X11VNC:
mkdir ~/.vnc x11vnc -storepasswd YOUR_PASSWORD ~/.vnc/x11vnc.pass
- X11VNC can then be started with a password:
x11vnc -forever -rfbport 5900 -rfbauth ~/.vnc/x11vnc.pass -o ~/.vnc/x11vnc.log -loopbg -display :0
- You can create a startup script so that X11VNC is automatically loaded at startup (with password settings):
echo "/usr/bin/x11vnc -forever -rfbport 5900 -rfbauth ~/.vnc/x11vnc.pass -o ~/.vnc/x11vnc.log -loopbg -display :0" > ~/.config/autostart/x11vnc.sh chmod +x ~/.config/autostart/x11vnc.sh
- You can test the startup script:
Using VNC with SSH
See Port forwarding through SSH for additional information.
Vinagre VNC client
Vinagre is the default Gnome-based VNC client used in Ubuntu.
- Menu -> Applications -> Internet -> Remote Desktop Viewer
Terminal Server Client
The Terminal Server Client is an Ubuntu/Gnome frontend for rdesktop (for RDP connections to Windows computers) and one of several vncviewer clients (for VNC connections). In can be used instead of Vinagre.
- Menu -> Applications -> Internet -> Terminal Server Client
- To use it with VNC, one of the VNC clients must be installed first. For example, install the TightVNC client:
sudo apt-get install xtightvncviewer
- Note that the TightVNC client can be used from the command line (or as a menu item) directly:
vncviewer 192.168.0.12::5900
- where 192.168.0.12 is an example host location that is running a VNC server on port 5900. For more command-line options, use
man vncviewer
Krdc VNC client
Krdc is the default VNC client in Kubuntu/KDE but can be used in GNOME. It can be used for both VNC and RDP connections. Installing it will also install the Qt platform and many KDE utilities (a large download).
sudo apt-get install krdc
- Run:
- Menu -> Applications -> Internet -> Krdc
- The command-line connection (for use as a menu-item, for example) is:
krdc vnc://<remote IP>
- If the remote (Krfp) VNC server is using a <remote port> other than the default 5900 port, use
krdc vnc://<remote IP>:<remote port>
- Krdc can also connect to a Windows server using RDP (Remote Desktop Protocol).
krdc rdp://<remote IP>:<remote port>
Using a VNC client with SSH
See this howto for an automated setup using a script (it did not work for me, but it might for you).
In brief, you would initiate an SSH tunnel with port forwarding using Putty or the command line:
ssh -C <remote ip> -p <SSH tunnel port> -L <local port>:<remote computer>:<remote port> -l <user>
- then you would start a VNC client such as Krdc:
krdc vnc://localhost:<local port>
<local port> will usually be the default 5900, in which case you could simply use
krdc vnc://localhost
XVNC4Viewer VNC Client
XVNC4Viewer is an alternative to Vinagre or the Terminal Server Client (vncviewer). Install:
sudo apt-get install xvnc4viewer
Automatic user login (for use with VNC)
VNC only works if a user is logged in. When a computer (hosting one or more servers) is intended to start up unattended and VNC (with or without SSH tunneling) is to be used, the computer ought to start with the primary user logged in. To accomplish this:
- Menu -> System -> System Settings -> Login Manager -> Convenience -> Enable Auto-Login (ticked) -> Lock session (ticked)
- -> Pre-select user: Specified: Choose primary user (i.e. the user hosting the SSH tunnel, if any, and the VNC server)
- -> Automatically log in again after X server crash (ticked)
- Also make sure the VNC server is set to Autostart at bootup.
FreeNX is a remote desktop display server/client solution that natively incorporates SSH tunneling (unlike VNC). It is therefore more secure than VNC (unless VNC is coupled with SSH tunneling).
FreeNX Server
The Free server .deb package can be downloaded from No Machine free server downloads.
- Alternatively, add the following repositories:
sudo add-apt-repository ppa:freenx-team
- Install the package:
sudo apt-get update sudo apt-get install freenx
FreeNX Client
Download the self-installing .deb file from No Machine Client downloads.
XDMCP allows a separate remote login by an authorized user. This login is separate from the local user.
- XDMCP is not secure over the Internet and should only be used within a LAN. It cannot be tunnelled through SSH. It is turned off by default in Ubuntu. To enable it, edit the configuration file:
gedit /etc/gdm/custom.conf
- Find and change (or add) the line from false to true so that it reads:
[Xdmcp] Enable=true
SSH is, basically, secure Telnet.
VPN clients
A VPN (Virtual Private Network) allows a secure encrypted connection ("tunnelling") over the Internet between a client (either standalone or on a separate LAN) and a home or corporate LAN server.
VPN through Network Manager
- The default Network Manager in Ubuntu/Kubuntu has a VPN client available. This includes support for IPSec and Cisco-compliant VPN connections. Install:
sudo apt-get install network-manager-vpnc
- To connect to a VPN network using OpenVPN (SSL), install the plugin:
sudo apt-get install network-manager-openvpn
- To connect to a VPN network using PPTP (MS Windows servers), install the plugin:
sudo apt-get install network-manager-pptp
- Configure:
- Network Manager icon (in system tray) -> VPN Connections -> Configure VPN
vpnautoconnect (VPN daemon)
vpnautoconnect is a daemon to allow automatic VPN connections through Network Manager. Download and install the .deb package for your OS version.
Other VPN clients
Standalone VPN clients based on protocol are available (but not necessary if using Network Manager):
- vpnc, grml-vpn -- for Cisco-compliant (IPSec) VPN networks
- openswan -- for IPSec (OpenSwan) VPN networks
- pptp-linux -- for PPTP (MS Windows-compliant) VPN networks
- openvpn, gadmin-openvpn-client -- for OpenSSL (OpenVPN) VPN networks
VPN servers
OpenVPN is a free, GPL-licensed open-source cross-platform VPN solution based on OpenSSL (not IPSec). Install the server (then see the website for further installation instructions):
sudo apt-get install openvpn bridge-utils
A GUI configuration utility (GTK-based) is available:
sudo apt-get install gadmin-openvpn-server
Also see these installation tips.
Poptop (PPTP Server)
Poptop is a free open-source PPTP-based VPN server compatible with MS-windows PPTP clients. Install:
sudo apt-get install pptpd
OpenSwan is the open source implementation of IPSec-based VPN connections for Linux (and is a successor to FreeSwan). Install:
sudo apt-get install openswan linux-patch-openswan
Ubuntu by default is a fairly safe system. However, if you intend to use Ubuntu as a server, or for critical applications in which loss of data (by accident or by malicious intrusion) would be disastrous, you should learn how to make Ubuntu more secure. A good introduction to Ubuntu Security Best Practices is available. Recommended reading includes the book Cyber War by Richard Clark and this interview with Joe Weiss (IT advisor for the energy-sector smart grid).
Network communications go through "channels" called ports. You can restrict which ports are available ("open") for network communications, creating a barricade to unwanted network intrusion. Firewalls do this job for you. But I guarantee that if you install one before you know how to use it that one or more networking programs on your system will stop working. Read every bit of documentation about a firewall before installing it -- you won't regret the time invested. All of these packages modify iptables, which is the set of rules that controls network access in and out of your computer. (You can modify iptables manually from the command line, as well, but if you are that much of an expert, you probably don't need this guide.) Also see the official Ubuntu documentation.
Firestarter is an intuitive firewall manager used to set the iptables values which provide firewall capabilities in Linux (including Ubuntu). It has a very easy-to-use GUI.
sudo apt-get install firestarter
Firestarter fails to open system log
This is a problem in Oneiric. See the solution here.
Guarddog is a GUI firewall configuration utility that has been used for KDE. It has a complex array of configuration, and is difficult to use for some beginners.
sudo apt-get install guarddog
Uncomplicated Firewall
Uncomplicated Firewall is installed in Ubuntu by default, but all ports are open initially. It is configurable through the command-line interface. See this forum thread, or this usage tutorial, or Ubuntu community help for tips on how to set up and use it. If not installed, it can be installed:
apt-get install ufw
Gufw is a graphical user interface for Uncomplicated Firewall. Install:
sudo apt-get install gufw
- If you are running a file server, interface frequently with Windows drives or share files with Windows users, or use virtualization, you will want a virus checker for your Windows files.
- Despite extensive minsinformation, Linux is not immune from malware (witness the explosion of malware being created for the Linux-based Google Android systems). The malware is not usually spread within the OS itself (as long as the OS is a well-respected distribution obtained through official channels), but in trojan programs downloaded and installed by users outside of the normal software distribution channels (i.e. repositories) of the OS. There is always a danger to using programs downloaded from the Internet from sources other than respected repositories -- it is the primary reason that Debian and (K)Ubuntu retain tight control over their software repositories.
- Any file can have malware embedded in it (which is trivial to achieve by concatenation, for example: cat originalfile.avi malware.exe > originalfileplusmalware.avi). The question is whether a user will try to open a file with a program (such as a media player) that has been compromised in a way that allows it to execute the code found in the infected media (e.g. .avi) file. This can occur not only for Windows users but for any OS (including Mac OS X and Linux) with a compromised program (e.g. media player).
- Routine scanning of any file downloaded from the Internet, any file imported from another user's computer (even a trusted source, since their attention to virus prevention may not be as compulsive as yours), or any attachment received in an email (even from a trusted sender) should be done with an anti-virus program.
ClamAV is the open source virus tool for Linux. To install ClamAV:
sudo apt-get install clamav
- If an error is returned: "The database directory must be writable for UID 1000 or GID 1000" in order for the virus database to be updated, then change the ownership of the installation directory (/var/lib/clamav):
sudo chown 1000 /var/lib/clamav
ClamTk (ClamAV GUI)
ClamTk is a GTK-based GUI frontend for ClamAV. Install:
sudo apt-get install clamtk
AVG offers a free virus scanner for Linux in a .deb package. Download and install from the website.
Avast offers a Linux edition (for home users only) in a .deb package. Download and install from the website.
Spam Assasin
SpamAssasin is written in perl, and is mostly for use with a server (such as a groupware server or Apache). Install:
sudo apt-get spamassassin
Rootkit checkers
Rootkits are malicious trojan-like programs to allow an intruder to become a root user and therefore have complete administrative control over the system. There aren't many rootkits in the wild for Linux. Still, this is a growing security problem (especially in other operating systems) and it is a matter of time before more rootkits appear in Linux. Checking for rootkits isn't always successful from a system that is already infected. Your rootkit checker should therefore be run from another system, or a USB pendrive with an Ubuntu LiveCD installation. See the rootkit checker manuals for instructions how to do this. If you are infected with a rootkit, you must backup all your files and re-install your system. (Thank goodness this is easy with Ubuntu, unlike with other operating systems).
Chkrootkit checks locally for signs of a rootkit. See the chkrootkit manual for usage instructions.
- Install:
sudo apt-get install chkrootkit
- Run:
sudo chkrootkit
Rootkit Hunter
Rootkit Hunter is compatible with (K)Ubuntu systems. See the usage instructions.
- Install:
sudo apt-get install rkhunter
- Run:
sudo rkhunter
Malicious commands to avoid
There are many malicious commands to be avoided in Linux (as in all operating systems). It is worthwhile to be aware of these dangerous commands so that they are not executed by accident or by malicious advice.
USB drives
USB drives are a major source of security risk and means of data theft.
- An administrator password should be set for the computer BIOS and booting from a USB drive or CD/DVD should be disabled. (Otherwise, any passerby can boot their own OS and then use it to steal data from the hard drive.)
- See this article for methods of restricting USB usage to authorized users.
Prevent unauthorized boots and system access
Many computers are kept in places where casual passersby may have an opportunity to access the computer, unobserved for short periods. In addition to physical precautions to prevent or slow computer theft (such as locked cases, alarms, and security cables similar to those used to slow bicycle theft), precautions should be taken to prevent an unauthorized operating system from being booted using an external device (such as USB drive). Once such as external OS is booted, it can be used to access most hard drive(s) on the computer and the contents copied to a second external device (to be examined or unencrypted later). This is a common means of data theft that is fast and easy to accomplish, and means to deter it should be taken on any public or semi-public computer.
- Set BIOS to restrict bootup to the hard drive only.
- Set a Supervisor/Administrator password for your computer's BIOS. (I recommend writing it down and taping it to the inside cover of the computer case prior to locking the computer case.) Disable booting from all devices except the hard drive. Setting the hard drive as the first priority boot device is not enough, as most current BIOS menus allow manual selection of any enabled boot devices. Only the hard drive should be left enabled.
- Enable Hard Drive locking, if your computer's BIOS allows it. Most hard drives allow a password to be set by the BIOS and stored in a chip on the hard drive controller which can only be reset by disassembling the hard drive. (Some manufacturers provide a backdoor security key, however.) BIOS versions found on newer computers/laptops allow this password to be set in the BIOS, so that only a BIOS containing the correct password can unlock the hard drive. (If the hard drive is then removed from the computer, it cannot be accessed by any BIOS that does not have the correct password or backdoor security key.) Note, however, that this precaution does not protect against booting from external devices if the BIOS is still set to allow that.
- There is a risk to this security measure. If you forget the password and the BIOS passwords somehow get reset, the hard drive would become inaccessible. The BIOS and Hard Drive password(s) should always be stored in a safe location.
- Password protect the Grub bootloader. Without password protection, Grub can be used to circumvent BIOS restrictions. See this section for Grub Legacy and this section for Grub2.
- Make sure all user accounts are protected by a password, and always require passwords for login. Never create an "administrator" user account (hidden or not) and leave it unprotected by a password. Never enable automatic login without a password to any user account.
- It is possible to enable automatic login to a preferred password-protected user account while simultaneously enabling a password-protected screensaver (the password for which must still be entered even before initial user access). This is a reasonable solution that offers protection while still allowing automatic login.
- Make sure a password-protected screensaver is always enabled (that will engage after a reasonably short period of inactivity).


text:
Man banned from impregnating women
An Ohio appeals court has upheld a lower court decree banning Asim Taylor, a father of four, from further procreating until he coughs up about $100,000 in child support or serves five years of probation — whichever comes first.
Lorain County probate judge James Walther issued the highly unusual sentence in January 2013 after Taylor, who is in his mid-30s, pleaded guilty to four counts of failing to pay child support, reports WJW, Cleveland's FOX affiliate.
"The defendant is ordered to make all reasonable efforts to avoid impregnating a woman during the community-controlled period or until such time the defendant can prove to this court that he is able to provide for his children that he already has," Walther ruled at the time.
On appeal, Doug Merrill, Taylor's attorney, argued that the sentence is an infringement on Taylor's fundamental rights.


text:
PAWS Pet of the Week: Meet Renji & Rukia
Renji ("Rehn-gee") and Rukia ("Roo-kee-ah") are the most beautiful black 5-month old babies. Renji is the boy; Rukia is his sister. Renji is a such a sweet little boy. He wants nothing more than to cuddle with you on the couch and under the covers in bed.To read more or comment...
SOS Adoptable of the Day: Madison!
Breed: Tabby - white (mix)
Gender: Female
Altered: Yes
Ref. no.: 110719K1
PAWS Pet of the Week: Meet Mandu & Alazar
Silly Sibs Seek Someone Special
Mandu and Alazar are about one year old, and such sweet, silly little boys. Gorgeous gray tabby brothers, Mandu has silky medium length fur with white tummy and boots. His brother Alazar has a soft, striped gray tabby coat. These brothers absolutely love each other and love human companionship. They walk between you and your computer to get attention. They play together, share toys and food, and are funny little comedians. Fully vetted and ready to find their Forever Home - Mandu and Alazar would love to go together.To read more or comment...
LOST: Help SOS Find Our Lost Adoptable!!!
NEAR 303 & 252 - Myrtle Hill Rd in Valley City- LOST SOS MOMMA DOG!!!! This fearful girl was rescued by us last week and has been scared from the time she was rescued. She is about 33 lbs- mostly Black with long hound ears and long nose-white & black speckled legs. VERY pregnant! She has 11 babies in her belly but has been skittish from the start so she will most likely HIDE. PLEASE, if you see ANY dog like this, call us ASAP at 330-635-5785 or 330-635-5787 if you last spotted her! Myrtle Hill Rd in Valley City. Thank you!To read more or comment...
SOS Adoptable of the Day: Travis!
Breed: Maine Coon - Domestic Long Hair (mix)
Gender: Male
Altered: Yes
Ref. no.: 050814R.
PAWS Pet of the Week: Meet Mariah!
Mariah and several other siblings (since adopted) were all dumped at the fairgrounds. When PAWS found them, they weighed less than one pound each! Mariah is a beautiful tortie girl. A darling kitten, she is a fun loving, wonderful baby full of personality and energy. Mariah loves to play, run, climb and cuddle with other kitties, as well as people. She loves her foster brother, Mickey. Please consider adding this lovable little kitten to your life!To read more or comment...
- 2014 (21)
- 2013 (135)
- 2012 (353)
- 2011 (380)
- 2010 (415)
- 2009 (776)
- 2008 (2)


text: No other site reviews and critiques news images as well as publishes original photography — all in the name of helping you become a sharper "visual consumer." Are you bombarded by powerful images from the world of news, culture and social media? Sign up for our "Week in Re-View" and let us help unpack them for you. Other sites read the words. We read the pictures.


text:
Al Sharpton: Verdict an 'Atrocity'
Al Sharpton called George Zimmerman's acquittal in the killing of Trayvon Martin an "atrocity."
Zimmerman was found not guilty on Saturday night. Sharpton, who served as both pundit and as an ally of Martin's family throughout the case, condemned the verdict.
"I think that this is an atrocity," he said. "It is probably one of the worst situations that I have seen."
He continued: "What this jury has done is establish a precedent that when you are young and fit a certain profile, you can be committing no crime ... and be killed and someone can claim self-defense ... we had to march to even get a trial and even at trial, when he's exposed over and over again as a liar, he is acquitted."
Sharpton also called it "a sad day in the country" and "a slap in the face to those that believe in justice in this country."


text:
Report: Freed Taliban commander vows to return to war against US
The deepest concerns of critics of President Obama's decision to release five Taliban commanders from Guantanamo Bay, Cuba in exchange for Army Sgt. Bowe Bergdahl may be coming to fruition.
One of the commanders, Noorullah Noori, has plans to return to Afghanistan to resume fighting against the U.S., according to NBC News which spoke to another Taliban commander.
"After arriving in Qatar, Noorullah Noori kept insisting he would go to Afghanistan and fight American forces there," the commander told NBC News.
Last Saturday, Obama announced the release of Mohammad Fazl, Mohammed Nabi, Khairullah Khairkhwa, Abdul Haq Wasiq and Noori in exchange for Bergdahl, who was captured by the Taliban in eastern Afghanistan after he disappeared from his Army platoon on June 30, 2009.
Some members of Congress blasted the deal, saying they feared that the five Taliban would take up where they left off in their fight against the U.S. Others think that the exchange was a bad deal for the U.S. given reports that Bergdahl deserted his unit.
Florida U.S. Sen. Marco Rubio called the exchange "very troubling," and said that the deal "may endanger American lives." Other lawmakers expressed similar reservations over the risk for future violence as well as Obama's failure to notify them of the planned exchange.


text:
'That '70s Show' star Lisa Robin Kelly dead at 43
(TMZ) - Lisa Robin Kelly - who played Eric Forman's older sister on "That '70s Show" - has died, TMZ has learned.
The 43-year-old actress passed away in her sleep Wednesday night at a rehab facility in California.
TMZ spoke with Kelly's agent who say the actress had just voluntarily checked herself in for treatment this past week ... and was determined to clean herself up.
The agent tells TMZ, "She had been fighting demons for a while and finally lost her battle."
Kelly had been in a downward spiral for the past couple of years - she was arrested at least 4 times in the past 3 years for DUI, spousal abuse and assault.
Lisa had filed for divorce from her husband Robert Gilliam back in July - seeking to end a marriage that was littered with allegations of spousal abuse, by both parties.
Besides "That '70s Show," Kelly had appeared in several movies and TV shows.
© Carsey-Werner / Courtesy: Everett Collection


text:
Ferguson Police Allege Michael Brown Robbed Store Before He Was Fatally Shot
Listen to The News Junkie on iHeartRadio
Officer Darren Wilson was named as the officer who fatally shot Michael Brown in Ferguson, MO leading to a week of violence and protests. Up until Friday, the local police had not released any information about the shooting, or the officer involved and what led to it.
While the circumstances around the shooting are still being debated, the police did offer some insight into what led to the fatal confrontation.
Officer Wilson was responding to a 911 call about a strong-arm robbery at a nearby convenience store. Police released surveillance footage from the store, which appears to show Michael Brown and another man, Dorian Johnson, taking a box of cigars and threatening the store clerk before leaving.
Stills from camera pic.twitter.com/FEcmKc3oGr
— Ryan J. Reilly (@ryanjreilly) August 15, 2014
Police Chief Thomas Jackson did not name Brown as a suspect during the short press conference, but he was named numerous times as the suspect in the police report from the robbery.
Here are some pages from the police report:
Page from police report pic.twitter.com/xcz6nUKqY2
— Ryan J. Reilly (@ryanjreilly) August 15, 2014
More from report pic.twitter.com/7OyD2fgrI2
— Ryan J. Reilly (@ryanjreilly) August 15, 2014
There is no word on whether the police have recovered the stolen cigars, or spoken to Johnson about his involvement in the robbery. Dorian Johnson was interviewed by the police as a witness to the shooting.
Jackson admitted that Michael Brown was not stopped because he was a robbery suspect. He was stopped by Officer Wilson because he was walking in the middle of the street.


text:
This product has [More Options]
Uglies V2 Back
America's #1 practice suit for over a decade, Dolfin Uglies are truly one of a kind!
- Many have tried, but no other brands can compare to the excellent fit, supreme durability and on-trend prints of the Uglies
- Featuring Dolfin's signature candy stripe straps and brightly colored liners, these suits are the ultimate training suit for swimmers of all ages and levels!
- We all know practice makes perfect...and Uglies make perfect practice!
- Fully lined
91% Polyester, 9% Spandex


text:
3M uses cookies on this site Detailed information on cookies and their use can be found in our Privacy Policy. You can customize the cookie-related settings at any time by clicking on Cookie Preferences in the footer of this page.
By clicking "Accept and Proceed" you acknowledge that you agree to the use of cookies on your computer
Accept and Proceed
Europe >
Products & Services >
PPE Safety Solutions >
PPE Safety Solutions
We are sorry the web page you are looking for did not load. Innovation is core to who we are at 3M but when youinnovate, you sometimes fail! We strive to make our products and Websites better but this time something wentwrong on our end.
What may have happened?
© 3M 2017. All Rights Reserved.


text:
Cop: Dad Sexted With Teen as Son Baked in Car
(NEWSER) – Justin Ross Harris exchanged sexually explicit messages and nude photos with six women as his 22-month-old son baked to death in a hot car—including one 17-year-old, police detective Phil Stoddard testified today, as Harris appeared in court for a probable cause hearing. Harris' lawyer objected repeatedly during the testimony, but prosecutors argued that it helped establish Harris' state of mind, and the judge allowed it, CNN reports. Harris was leading something of a double life, Stoddard said, because he and his wife were having "intimacy problems." In addition to his searches regarding hot car deaths, the detective revealed that Harris had visited websites that advocated child-free living, reports the Atlanta Journal-Constitution.
Read the full story on Newser.com


text:
Sheryl Crow, Florida Georgia Line announce CMA nominees on 'GMA'
Taylor Swift will be representing the ladies once again among the nominees for this year's Entertainer of the Year at the 47th Country Music Association Awards. Swift, who has enjoyed tremendous success over the past year with her pop-friendly crossover album Red, is the sole female artist up for the big honor alongside
Jason Aldean, recent album chart-topper Luke Bryan, Blake Shelton and "The King of Country" George Strait.
She's also nominated for Female Vocalist of The Year with Carrie Underwood, Miranda Lambert, Kacey Musgraves and Kelly Clarkson. Aldean, Bryan and Shelton are also nominated for CMA Male Vocalist of the Year with Keith Urban and Eric Church.
Sheryl Crow and Florida Georgia Line helped announce some of the nominees Tuesday morning during a segment on ABC's "Good Morning America." Brad Paisley and Carrie Underwood will co-host the 47th CMA Awards on November 6th. ABC will air the ceremony live, starting at 8:00pm Eastern.
Here is a partial list of nominees for the 47th CMA Awards:
Entertainer of the Year
Jason Aldean
Luke Bryan
Blake Shelton
George Strait
Taylor Swift
New Artist of the Year
Lee Brice
Brett Eldridge
Florida Georgia Line
Kp Moore
Kasey Musgraves
Male Vocalist of the Year
Jason Aldean
Luke Bryan
Eric Church
Blake Shelton
Keith Urban
Female Vocalist of the Year
Kelly Clarkson
Miranda Lambert
Kasey Musgraves
Taylor Swift
Carrie Underwood
Vocal Duo of the Year
Big and Rich
Florida Georgia Line
Love and Theft
The Civil Wars
Thompson Square
Vocal Group of the Year
Eli Young Band
Lady Antebellum
Little Big Town
The Band Perry
Zac Brown Band
Single of the Year (Award to Artist)
"Cruise" - Florida Georgia Line
"Highway Don't Care" - Tim McGraw with Taylor Swift and Keith Urban
"Mama's Broken Heart" - Miranda Lambert
"Merry Go Round" - Kacey Musgraves
"Wagon Wheel" - Darius Rucker
Song of the Year (Award to Writer)
"I Drive Your Truck" - performed by Lee Brice
"Mama's Broken Heart" - performed by Miranda Lambert
"Merry Go Round" - performed by Kacey Musgraves
"Pontoon" - performed by Little Big Town
"Wagon Wheel" - performed by Darius Rucker
Album of the Year
Based on a True Story - Blake Shelton
Blown Away - Carrie Underwood
Red - Taylor Swift
Same Trailer, Different Park - Kacey Musgraves
Tornado - Little Big Town
Video of the Year
"Blown Away" - Carrie Underwood
"Boys 'Round Here" - Blake Shelton with Pistol Annies
"Downtown" - Lady Antebellum
"Highway Don't Care" - Tim McGraw with Taylor Swift and Keith Urban
"Mama's Broken Heart" - Miranda Lambert
"Tornado" - Little Big Town
Musical Event of the Year
"Boys 'Round Here" - Blake Shelton with the Pistol Annies
"Cruise" - Florida Georgia Line with Nelly
"Don't Rush" - Kelly Clarkson with Vince Gill
"Highway Don't Care" - Tim McGraw with Taylor Swift and Keith Urban
"The Only Way I Know" - Jason Aldean, Luke Bryan and Eric Church


text:
US drone strike takes out Somali militant commander
(NEWSER) – A missile fired from an American drone killed a militant commander in Somalia, a military official tellsReuters. Another militant commander confirmed to the APthat the strike in a southern village had killed Sahal Iskudhuq—who is believed to be close to al-Shabab's top leader—as well as his driver. American officials say they are still "assessing the effectiveness of the strike," which Somali officials say killed a "dangerous" militant.


text:
George Michael remains hospitalized Following car accident
Listen to George Michael on iHeartRadio
(Yahoo!) - Singer George Michael has been having a rough time of it lately. The former Wham! frontman remains hospitalized five days after he was involved in a car accident on Thursday, where he reportedly he fell out of the Range Rover he was riding in on the M1 highway in London.
A spokesperson for the "Careless Whisper" singer said in a statement Tuesday that Michael's condition is improving and he's making progress.
"I can confirm that George remains in hospital but purely as a standard precaution for observation because he suffered some bumps and cuts to his head," the spokeswoman said. "But he's making good progress, he's fine, and he's really looking forward to getting home," reports the New York Daily News.
Michael's car was reportedly the only vehicle involved in the accident, and a driver on the highway who witnessed the accident told British tabloid The Sun that the singer fell out of the vehicle in front of her and she skidded to a halt to avoid hitting him. Katherine Fox said she then used her car to shield him from other vehicles, and that Michael had "nasty cuts" on his head and there was a lot of blood. "He was lucky he didn't die," she said.
Although the 49-year-old British singer has sold an estimated 100 million records throughout his successful musical career, it's his personal life and erratic behavior that have been grabbing headlines the past few years.
Photo Credit Getty Images


text: To get from Boscoreale a Aci Catena by train you can catch one of the 1 trains that everyday travel between Napoli Centrale and Reggio di Calabria Centrale, the closest station to the city. The first train to Reggio di Calabria Centrale leaves from Napoli Centrale at 23:53 and the last train departs at 23:53. If you choose a local train the trip lasts on average 06:07 hours. On Wanderio you can compare all schedules, fares and railway companies to Reggio di Calabria Centrale and book the best itinerary starting from Napoli Centrale.


text:
Store nearest you:
Your cart is empty.
continue shopping
Not only did we invent the recliner, we're reinventing it every single day.
View all Recliners
Make no mistake, our chairs will make you sit down and take notice.
View all Chairs
The sofa is the center of your living room, the hub of movie night and the preferred location for a Saturday nap. Choose wisely.
View all Sofas
Smart Solutions For Small Spaces And Large Ones, Sectionals Let You Maximize The Seating Area In Any Room.
View all Sectionals
These stunning multipurpose pieces are perfect for resting your feet, acting as a table and providing extra storage.
View all Ottomans
With so many styles, leathers and fabrics, you'll find there's a whole lot to love.
View all Loveseats
Both functional and beautiful, these carefully crafted works of art make a statement in any space.
View all Tables
Perfectly proportioned for today's modern living spaces.
View all Urban Attitudes
11515 Carolina Place Parkway Adjacent to Carolina Place MallPineville, NC 28134704-341-8393
Store Hours
Pineville's La-Z-Boy furniture store provides an array of home furniture for you to choose from. Stop by or make an appointment with one of our design professionals today!
At La-Z-Boy Furniture Galleries, our design professionals will come to your home and help make your dreams a reality.
When you enter a La-Z-Boy Furniture Galleries store, you enter a world of comfort, service, and selection.
Imagine: every piece we show you fits your style, your budget. Give us the details. We'll do the rest.
Select here to find out more about incredible savings on genuine La-Z-Boy comfort at your local Furniture Galleries!
Welcome! Want to know where we are and when we're open? Get all the facts right here.
We make house calls! Even better, a design consultation in your home is free.
From charitable activities to environmental responsibilities, we're committed to our local communities.
Stay connected with La-Z-Boy on Facebook, Twitter, YouTube and email.
Apply for financing through your local La-Z-Boy Furniture Galleries.
*Subject to credit approval


text:
WATCH: Adorable dancing girl interrupts local news report
The "cubicle guy" at Anthony Weiner's press conference wasn't the only scene stealer to appear during a live news broadcast Tuesday.
A young girl in Chicago decided to show off some sweet dance moves in the background of a report by NBC 5's Mary Ann Ahern during the 5 p.m. newscast.
The unidentified girl was spotted by a Vine user, who promptly uploaded the footage to the social video sharing application. The website Gawker then turned the adorable "videobomb" into a handy GIF to help America get through the workweek. And the pintsize performer delivered.
"This dancing little girl who videobombed an @nbcchicago remote shot is my new spirit animal," Chicago Sun-Times digital editor Marcus Gilmer wrote on Twitter.


text:
Ships by Truck
Premium Work Table, 42" W x 120" L-R, 1-7/8" turn down on 4 sides, 4 steel box channels, 14/304 s/s top, adjustable legs & undershelf, white metal feet, "Aero Safety Edge", fully welded gussets, sound deadened, shipped KD, NSF
- Aero's work tables and other stainless steel products are commonly used in industries including restaurants & food service, hospitals, and fabrication. There are also many useful applications for Aero equipment in the home or garage.
Are you familiar with this product? Be the first to review this item!


text:
Search 321,000 hotels worldwide.
Get the price guarantee available for your trip.
No Expedia cancellation fee to change or cancel almost any hotel reservation.
What a stunning resort! The pool is enormous and the resort itself is huge. Loved the spa room overlooking the pool. Short stroll to the beach through lovely greenery. Buffet breakfast has such a large variety - so impressed. Lovely, helpful staff. Thoroughly recommended.
When it comes to relaxation, there's nothing like Craiglie spa hotels. Unwind with a rejuvenating facial. Treat yourself to a Swedish massage. Melt stress away in the steamy sauna, or settle in for a sampling of the most high-tech treatments. Whether you're looking for a quiet retreat or prefer to indulge in the most cutting-edge spa hotel near Craiglie, the choices here are unbelievably tranquil.
It all starts with the personal check-in service, continues with the soothing rooms and gets even better with the dazzling array of made-for-you amenities. What's more, many of the 143 spa hotels are situated near the best experiences and attractions, so you can uncover the area's can't-miss sights after a day of body scrubs, pedicures and facial masks.
Browse Expedia's selection to find options that are close to your personal style, and then get ready to spend a long weekend — or an entire week — getting massaged, manicured and pampered beyond compare.


text:
52 Rescued From Stranded Antarctic Ship
(NEWSER) – Help has finally arrived for 52 tourists and scientists who have been trapped on a ship stranded in Antarctic ice since Christmas Eve. A Chinese helicopter has ferried the adventurers in batches to the Aurora Australis ship that will bring them out out of Antarctic waters and to Tasmania by mid-January, reports the AP. The MV Akademik Shokalskiy's 22 crew members are expected to stay on board the icebound vessel, the BBC notes.


text:
Katy Perry performs new music, shares stories at her iHeartRadio Album Release Party
Listen to Katy Perry on iHeartRadio
Watch The iHeartRadio Album Release Party with Katy Perry on The CW Network on October 25 at 9/8c
PHOTO: Chris Polk/Getty for iHeartRadio
Katy Perry celebrated the release of her brand new album, PRISM, with over 400 of her closest friends, Katycats and Mario Lopez at her iHeartRadio Album Release Party Tuesday night at the iHeartRadio Theater Los Angeles' official grand opening.
[PHOTOS: The iHeartRadio Album Release Party with Katy Perry]
Katy kicked off her album release day with a beam of light:
IT'S A PRISMATIC DAY!!!!💫⚡🎉🎶🌈— Katy Perry (@katyperry) October 22, 2013
Buy Katy Perry's Limited 'Zinepack' Deluxe PRISM Edition from Wal-Mart!
Mario Lopez introduced Katy Perry to kick off the night, and she started things off with a 'Roar,' quite literally, performing the #1 smash to a room full of fans who knew all the words.
She told the audience that as an adult, "Your biggest bully becomes yourself... Sometimes you gotta find that inner strength and stand up for yourself. That's why I wrote it, to find my own voice."
PHOTO: Chris Polk/Getty for iHeartRadio
After her roaring entrance, Katy joked with Mario Lopez, telling the crowd that she can't help but put her finger in Mario's dimples when she sees him. (We don't blame you Katy, how could you resist!?)
PHOTO: Chris Polk/Getty for iHeartRadio
In addition to calling the album her 'most personal' and 'most relatable' yet, Katy gave her fans some quirky tidbits about the album. "There is maybe one typo on my whole record," she told the crowd, adding, "If you find it you get a cookie!" Another fun fact: The special edition of PRISM available at Wal-Mart includes a sample of her fragrance Killer Queen and a PRISM logo that, when planted, grows wildflowers! Nice touch.
PHOTO: Joseph Llanes for iHeartRadio
Throughout the night, Katy performed three more new songs from the record: "Dark Horse," "By The Grace Of God," "This Moment" and "Unconditionally."
She sang a stripped-down version of the trappy, edgy "Dark Horse" - which usually features Juicy J. - which she says is about 'Witchy Love' and inspired by 90's cult classic The Craft.
PHOTO: Joseph Llanes for iHeartRadio
She also performed emotional ballad "By The Grace Of God," which Katy says was the first song she wrote for the record and probably her 'most vulnerable.' Although the song starts off sad, Katy says, "You hear me find my strength through the song."
Katy also sang "This Moment" live for the very first time, a song she says was inspired by a book she recently read, The Power Of Now: A Guide To Spiritual Enlightenment by Eckhart Tolle.
PHOTO: Chris Polk/Getty for iHeartRadio
Mario Lopez quizzed Katy with rapid fire questions. Her favorite song to sing in the car? Whitney Houston's "I Wanna Dance With Somebody." The most famous person in her cell phone? "Miley Cyrus. She's the most famous person in the world right now!" The three must-have items in her purse? "Sometimes I carry around an empty purse." All in the name of fashion!
Wait, that's not the whole story. Speaking of an empty purse... Katy revealed to the crowd that the first time she attended the Grammy Awards, she shared a dressing room with Miley Cyrus and Taylor Swift. "I asked them for a lock of their hair, and I put little bows in it." She then put the famous strands into her otherwise empty purse for the remainder of the night, declaring, "I'm a freak!"
PHOTO: Chris Polk/Getty for iHeartRadio
Katy Perry closed out the night with the second single, "Unconditionally," which Katy calls "the crown jewel off the record."
"It's about this universal love that we all search for. Love is the highest emotion that we live our lives for." Today, Katy, everyone is loving you!
PRISM, projected to be one of th year's biggest album, is the follow-up to 2010's incrfedibly successful Teenage Dream, which tied Michael Jackson's record for the most #1 singles from a single record with five.
Watch The iHeartRadio Album Release Party with Katy Perry on The CW Network on October 25 (Katy's birthday!) at 9/8c..
Check out the lyric video for "Unconditionally' below.


text:
WATCH: Tracy Morgan Walks To Car, Says 'I'm OK' After Accident
Tracy Morgan thanked the paparazzi for their support — in a new video — as he left his home in New Jersey on Monday.
This marks his first public appearances since the June 7 car crash that left him in critical condition.
Morgan looked cheerful as he walked with the assistance of walker to a parked vehicle.
The star flashed a peace sign to the paparazzi as he got into the car and later thanked them for their support.
"I'm OK. I feel strong," said Morgan. "I love you very much. Thank you. I appreciate it."
The comedian's rep announced on Saturday that Morgan had been released from a rehabilitation center and would continue his recovery at home.
Last week, Morgan sued Wal-Mart for negligence, stemming from the company's driver, Kevin Roper, allegedly falling asleep at the wheel before colliding with his vehicle.
Check out Morgan's amazing recovery so far in the video below!


text:
The following 11 shops in Lake Spring are not yet RepairPal Certified - Learn More
Mitsubishi is a Japanese automaker. Mitsubishi was created in 1870 originally as a shipping firm. The name translates to "three water chestnuts," explaining its three-part, diamond shaped logo. Mitsubishi manufactured the main naval fighter plane for Japan during World War II. This was the same plane used in the well-known kamikaze attacks.
Mitsubishi's most reported problem on RepairPal is associated with stuck knobs on some Mitsubishi Lancer models.