text:
Security Assertion Markup Language (SAML) was the topic of Chapter 6, "Portable Identity, Authentication, and Authorization." WS-Security was presented in Chapter 7, "Building Security into SOAP." Then WS-Policy was the focus of Chapter 8, "Communicating Security Policy." They are the three pillars of WS-Security.
Several other important standards are derived from and complementary to WS-Security; they relate to such fundamental security topics as trust, access control, and rights. In this chapter, we review the family of WS-Security–related technologies. An important additional topic is the XML Key Management Specification (XKMS) for managing keys used in signatures, encryption, and SAML. We also cover two other WS-Security security related specifications not already covered: eXtensible Access Control Markup Language (XACML) and eXtensible Rights Markup Language (XrML). Let's begin with the WS-Security family.The WS-* Family of Security Specifications
In April 2002, IBM and Microsoft published a joint whitepaper called "Security in a Web Services World: A Proposed Architecture and Roadmap."1 This whitepaper describes a far-reaching, comprehensive vision of a set of security standards and technologies meant to create a unifying approach for dealing with security in a Web services world. The proposed architecture attempts to bring together for Web services what, to date, had been disparate worlds in security. Just as WS-Security allows security mechanisms such as Public Key Infrastructure (PKI) and Security Assertion Markup Language (SAML) to participate in Web Services Security, the Web Services Architecture Roadmap generalizes many of the security functions that previously existed in other domains and proposes a framework for meeting the security requirements of the Web services domain. It provides an evolutionary strategy for putting the different pieces of the security puzzle in place. The proponents of this framework, and the standards bodies they are working through, are accomplishing this by first rolling out foundational specifications such as WS-Security (which, in turn, was built on XML Signature, XML Encryption, SAML, and various other security token standards) and then following with other standards that rely on these foundational standards. Figure 9.1 repeats the diagram shown previously in Chapter 7; in this figure, you can see the related WS-Security standards as well as the dependencies.
Figure 9.1 The WS-Security family of standards built on SOAP.
As a quick review, WS-Security describes SOAP extensions for securing messages. It is a general-purpose mechanism for associating security tokens with SOAP messages. WS-Security builds on and is fully compatible with established, mature security technologies such as SSL, IPsec, XML Signature, and XML Encryption. It is designed to address message integrity, message confidentiality, message authentication, and the encoding of security tokens that must travel with the messages they are securing.
WS-Security provides the foundations for the set of composable security building blocks in Figure 9.1 built on top of WS-Security. By composable, we mean that various building block standards can be combined to provide new and different security standards to solve specific security challenges. For example, WS-Privacy is composed from WS-Security plus WS-Trust and WS-Policy. These composable standards provide a "use only what you need" approach to securing Web services. The composable specifications still under development together with WS-Security are built on a core foundation of technologies such as SOAP, WSDL, XML Signature, XML Encryption, and SSL.
This chapter is from Securing Web Services Security with WS-Security, by Jothy Rosenberg and David Remy (Sams, 2004, ISBN: 0672326515). Check it out at your favorite bookstore today.
{mospagebreak title=Building Blocks}
What is amazing is that, with this model, for the first time users have an approach that allows integration of Kerberos, X.509/PKI, and other security models. Building up from WS-Security are the following composable building blocks:
WS-Policy—Defines how to express capabilities and constraints of security policy. (This topic was covered in Chapter 8 but is summarized here.)
WS-Trust—Describes the model for establishing both direct and brokered trust relationships, including intermediaries.
WS-Privacy—Enables users to state privacy preferences and Web services to state and implement privacy practices.
WS-SecureConversation—Describes how to manage and authenticate message exchanges between parties, including exchanging security contexts and establishing and deriving session keys.
WS-Federation—Describes how to manage and broker the trust relationships in a heterogeneous federated environment, including support for federated identities.
WS-Authorization—Defines how Web services manage authorization data and policies.
Note – The purpose of describing all these "standards" here, even when some of them are as yet unpublished, is two-fold. First, we hope our introduction to these evolving specifications will help you avoid re-inventing the wheel on an area you need for your Web services to be successful. Second, our goal is to let you know that significant work is being done on these standards, and progress is rapid. Consequently, if these standards are important to you, you will be able to find some useful guidance by scouring the Web and the standards bodies' repositories.
WS-Security and the layers above it support what could be called the triangle of distributed message-based security that is composed of trust, interoperability, and integration. The triangle of WS-Security specifications is shown in Figure 9.2.
Figure 9.2 The WS-* Security triangle of trust,
integration, and interoperability.
The first point of the security triangle is trust. Trust, of course, is fundamental to security. No trust, no security. In a Web services world, trust is very complex. Trust is represented in relationships; it can be explicitly established, or it may be presumed. Assertions are used to represent trust and trust relationships. WS-Trust is the WS-* security standard building block focused on trust relationships. The other trust-related standard in this point of the security triangle is WS-Privacy. WS-Privacy specifies the rules that must be followed when an entity trusts a service with its self-descriptive (that is, personally identifiable) data.
The second point of the security triangle is interoperability. You can think of interoperability in terms of communication standards that allow distinct systems to cooperate. This capability is especially important when those communications are secured. Secure communications adhere to several different protocols, so interoperable secure communications must be able to map one protocol to another. Besides WS-Security itself, the two other WS-* security family standards that relate to interoperability are WS-Policy and WS-SecureConversation.
The third point of the security triangle is integration. Web services' primary raison d'etre is for application and organizational integration. Integration involves one system that previously did not communicate with another extending its architecture to be able to do so. It means that existing services are reused for new purposes. This necessarily means that identities and the trust model under which they operate need to interoperate and do so across heterogeneous environments. An important issue this raises is federation. Federation is the agreement among a group of entities that they will share identities as well as the attributes of those identities with other members of their group. Two of the WS-* family of standards relate to integration: WS-Federation and WS-Authorization.
This chapter is from Securing Web Services Security with WS-Security, by Jothy Rosenberg and David Remy (Sams, 2004, ISBN: 0672326515). Check it out at your favorite bookstore today.
The following sections address the two specifications for trust relationships. First, we cover WS-Trust and then WS-Privacy.WS-Trust
Throughout this book, we have described the technical issues around securing Web services. Although these issues can be complex, they are still only technical issues. By far, the most difficult issues arise around the more subtle business and personal issues of trust. Think about your own definition of trust and how you determine whom to trust. Do you trust someone who has been referred by someone else you trust? Do you trust in some people in relatively low-risk situations but not in a high-risk situation? How you determine trust might be called your personal trust model. A lot of work and thought has gone into defining, describing, and implementing trust models, and much of the complexity in Public Key Infrastructure technology derives from the complexity of modeling trust.
A major Web services trust problem arises when credentials are issued in one trust domain and then presented in another. Say your employer, ABC Supply, is a supplier to XYZ Truck Company, and XYZ Truck Company has decided to expose its critical business systems to its suppliers. One strategy could be for XYZ Truck Company to directly issue credentials to each individual within every supplier and take on the management of these credentials. This would mean that, even if you do not work for XYZ, you would receive a credential from the company to present to its Web service when using its Bid for Order Web service. But how would XYZ Truck Company know if you were to be fired from ABC Supply or change positions? It would be very difficult, if not impossible, for XYZ Truck Company to manage the credentials given to those privileged few employees of ABC Supply allowed to directly order at XYZ.
Another approach that XYZ could choose is to blindly trust ABC Supply (and all its employees). From a technical perspective, this strategy might mean that X.509 certificates issued by ABC Supply (probably with certain attributes) could be presented to XYZ Truck Company for access to its Web services. You can probably see the trust issues here immediately. Perhaps these are highly sensitive capabilities that XYZ Truck Company is allowing access to, so much so that even its own employees must show up in person to be granted a credential. Suppose XYZ Truck Company has tight procedures for periodically refreshing credentials and revoking them when they are lost or the employee changes responsibilities. If ABC Supply Company does not have similar rigorous procedures, XYZ Company has seriously degraded its security by opening up the company to ABC's much lower standards. This level of trust becomes the arena of contracts and law because that is the way that companies express their trust, or lack thereof, and the way violations of that trust become enforceable.
This chapter is from Securing Web Services Security with WS-Security, by Jothy Rosenberg and David Remy (Sams, 2004, ISBN: 0672326515). Check it out at your favorite bookstore today.
{mospagebreak title=Prior to Having Secure Communications…}
Prior to having secure communications, each party needs to determine whether it can "trust" the asserted credentials of the other party. WS-Trust defines extensions to WS-Security that provide
Methods for issuing and exchanging security tokens
Ways to establish and access the presence of trust relationships
Similar to SAML, WS-Trust defines a request/response mechanism for obtaining security tokens.
The most important attributes of WS-Trust to understand are
The relationships between Web service requestor, Web service provider, and the Security Token Service (STS), as shown in Figure 9.3
These two methods: <RequestSecurityToken> and <RequestSecurityTokenResponse>
Security Token Services form the basis of trust by issuing security tokens that can be used to broker trust relationships between different trust domains. As Figure 9.3 shows, a Security Token Service is a trust broker ready and willing to provide a Web service with a way to determine whether it will trust an incoming request from a different (possibly unknown) trust domain. A policy statement at the Web service provider notifies the Web service requestor that a security token is required for use of this service. The requestor provides such a token, either having obtained it previously or by the requestor now sending a <RequestSecurityToken> to the Security Token Service. The so-obtained WS-Security–compatible security token is then provided when requesting service from the Web service provider. WS-Trust also provides for a challenge-response protocol for the Web service provider to strongly validate the efficacy and timeliness of the requestor's security token.
Figure 9.3 The WS-Trust model for providing a Security
Token Service trust broker in support of WS-Security.
The Web service security model defined in WS-Trust is based on a process in which a Web service can require that an incoming message prove a set of claims (for example, name, key, permission, capability, and so forth). If a message arrives without having the required proof of claims, the service ignores or rejects the message outright. A service can indicate its required claims and related information in its policy as described by the WS-Policy and WS-PolicyAttachment specifications described in detail in Chapter 8.
A requestor can send messages that demonstrate its ability to prove a required set of claims by associating security tokens with the messages and including message signatures that demonstrate proof of possession of (the contents of) the tokens.
If the requestor does not have the necessary token or tokens to prove the claim, it contacts a Security Token Service and obtains the tokens. These "authorities" may, in turn, require their own set of claims.
The WS-Trust model illustrated in Figure 9.3 shows that any requestor may also be a service and that the Security Token Service is itself a Web service, including expressing policy and requiring security tokens.
This general messaging model—claims, policies, and security tokens—subsumes and supports several more specific models, such as identity-based security, access control lists, and capabilities-based security. It allows use of existing technologies such as X.509 public key certificates, XML-based tokens, Kerberos shared-secret tickets, and even passwords. The general model, in combination with the WS-Security and WS-Policy primitives, is sufficient to construct higher-level key exchange, authentication, policy-based access decisions, auditing, and complex trust relationships.
A quick overview of the WS-Trust model is that a Web service has a policy applied to it, receives a message from a requestor that possibly includes security tokens, and may have some protection applied to it using WS-Security mechanisms. The following steps are performed by the trust engine of a Web service:
Verify that the claims in the requestor's security token are sufficient to comply with the provider's policy and that the message conforms to this policy.
Verify that the attributes of the claimant are proven by the signatures. In brokered trust models, the signature may not verify the identity of the claimant; it may verify the identity of the intermediary, who may simply assert the identity of the claimant. The claims are either proven or not based on policy.
Verify that the issuers of the security tokens (including all related and ancestral security tokens) are trusted to issue the claims they have made. The trust engine may need to send tokens to a Security Token Service to exchange them for other security tokens that it can use directly in its evaluation.
If these conditions are met, and the requestor is authorized to perform the operation, the service can process the service request within the specified trust model just described.
This chapter is from Securing Web Services Security with WS-Security, by Jothy Rosenberg and David Remy (Sams, 2004, ISBN: 0672326515). Check it out at your favorite bookstore today.
{mospagebreak title=RequestSecurityToken}
Now that you know how the model is supposed to work and you understand the key relationships between Web service provider, requestor, and Security Token Service, it's time to look at the two key WS-Trust elements needed to perform its prescribed functions: <RequestSecurityToken> and <RequestSecurityTokenResponse>.
Listing 9.1 shows a request to have a security token issued.
Listing 9.1 The <RequestSecurityToken> Element
Now let's explore each element that makes up a <RequestSecurityToken> element.
<TokenType> The optional <TokenType> element describes the type of security token requested, specified as a QName (see the following section). That is, it describes the type of token that will be returned in the <RequestSecurityTokenResponse> message.
<RequestType> The <RequestType> element is used to indicate, using a QName, the action that is being requested. The following QNames are predefined:
Issue security token
Validate security token
Exchange security token
<Base> The optional <Base> element has the same type as the <SecurityTokenReference> element and references the base (primary) tokens that are used to validate the authenticity of a request. In general, this element isn't used because signatures provided on the request prove the right to make the request.
<Supporting> The optional <Supporting> element has the same type as the <SecurityTokenReference> element and references the supporting tokens that are used to authorize this request. Typically, this element is used to identify tokens in a certificate authority. It is not required to specify any or all supporting tokens; it is simply a hint or aid to the recipient service.
The example in Listing 9.2 shows an X.509 security token being requested based on the security token located in the <Security> header with the ID "myToken". This token specifies a username, and a signature is placed over the request using a key derived from the password (or password equivalent), nonce, and time stamp.
Listing 9.2 – Requesting an X.509 Security Token Based on a Key Derived from a Password
<S:Envelope xmlns:S="…" xmlns="…/secext" xmlns:wsu="…/utility>
<UsernameToken wsu:Id="myToken">
<wsu:Created>2001-10-13T09:00:00Z </wsu:Created>
<ds:Signature xmlns:ds="…">
<S:Body wsu:Id="req">
<Reference URI="#myToken"/>
This chapter is from Securing Web Services Security with WS-Security, by Jothy Rosenberg and David Remy (Sams, 2004, ISBN: 0672326515). Check it out at your favorite bookstore today.
{mospagebreak title=RequestSecurity TokenResponse}
The other half of <RequestSecurityToken> is <RequestSecurityTokenResponse>. The syntax for this element is shown in Listing 9.3.
Listing 9.3 The <RequestSecurityTokenResponse> Element
Let's look at each element in <RequestSecurityTokenResponse> in turn.
<TokenType> The optional <TokenType> element specifies the type of security token returned. Either this element or the optional <AppliesTo> element should be specified. <TokenType> must be provided if a token type other than the requested type is returned.
<KeyType> The optional <KeyType> element specifies the type of key used in the token.
<KeySize> The optional <KeySize> element specifies the size of the key returned.
<wsp:AppliesTo> The optional <wsp:AppliesTo> element specifies the scope to which this security token applies. The WS-PolicyAttachment specification deals with this scope in detail.
<RequestedSecurityToken> The optional <RequestedSecurityToken> element is used to return the requested security token. Normally, this element contains the requested security token, but a security token reference may be used instead. For example, if the requested security token is used in securing the message, the security token is placed into the <Security> header, and a <SecurityTokenReference> element is placed inside the <RequestedSecurityToken> element to reference the token in the <Security> header. Although this element is optional, at least one of <RequestedSecurityToken> or <RequestedProofToken> will be returned unless an error occurs.
<RequestedProofToken> The optional <RequestedProofToken> element is used to return the proof-of-possession token associated with the requested security token. Proof of possession is needed when the client does not provide the public key to use and signs (authenticates) this using the corresponding private key, thereby proving possession. Normally, this element contains the proof-of-possession token, but a security token reference may be used instead. The token (or reference) is specified as the content of this element. For example, if the proof token is used in securing the message, it is placed in the <Security> header, and a <SecurityTokenReference> element is used inside the <RequestedProofToken> element to reference the token in the <Security> header.
Listing 9.4 is a sample response to a request for a security token. In this example, a pre-existing X.509v3 digital certificate, looked up in a directory and encoded into a security token, is returned. As is typical, this example does not return an explicit proof of possession because the client implicitly provided proof of possession by providing the public key to use (and authenticated it using the corresponding private key).
Listing 9.4 <RequestSecurityTokenResponse> Returning a Pre-existing X.509v3 Certificate
<BinarySecurityToken ValueType="wsse:X509v3″
WS-Privacy is a not-yet-published proposed standard that will use a combination of WS-Policy, WS-Security, and WS-Trust to communicate privacy policies. It is designed to be used by organizations that deploy Web services and require that incoming SOAP requests contain claims that the sender conforms to the service provider's privacy policies. WS-Security encapsulates these claims into security tokens that are verified before accepting any incoming SOAP request.
WS-Privacy will be a standard that allows Web service providers and requestors to state their privacy preferences and organizational privacy practice statements. As of this writing, no public draft of WS-Privacy is available, but from the information that has been published, it will likely be similar to the W3C's Platform for Project Privacy Preferences (P3P).2 P3P was primarily designed for the Web application world (versus the Web services world). It allows an organization to specify its privacy policy in a structured manner and post it on the Web server that is being accessed. Then a P3P-enabled browser can read this policy and compare it to the browser user's privacy preferences. Thus, a user can express her privacy preferences and be notified when she surfs to a site that has privacy practices that conflict with her stated preferences. In a similar manner, WS-Privacy will allow this type of privacy policy exchange and agreement for Web services.
As an example, an individual would state a set of "privacy preferences" that describe what the individual does or does not want to allow applications acting on his behalf to do with his personal information. A calendaring application, working on the individual's behalf, can now access a calendaring service that uses a set of "privacy practice rules" to make statements and decisions about use and disclosure of personal information. The calendar service makes the decision by combining the privacy practice rules with the privacy preferences to determine whether a proposed use or disclosure is permissible.
This chapter is from Securing Web Services Security with WS-Security, by Jothy Rosenberg and David Remy (Sams, 2004, ISBN: 0672326515). Check it out at your favorite bookstore today.
The following sections address the two WS-* security specifications for interoperability. First, we briefly review WS-Policy and then cover WS-SecureConversation.WS-Policy
WS-Policy was the subject of Chapter 8; we include a brief review of it here for its context within the WS-* family of specifications.
WS-Policy is a family of three specifications. Version 1.1 of the WS-Policy documents include Web Services Policy Framework (WS-Policy), Web Services Policy Assertions Language (WS-PolicyAssertions), and Web Services Policy Attachment (WS-PolicyAttachment).
The top level of these specifications is WS-Policy. It forms the framework by providing a general-purpose model and corresponding syntax to describe and communicate the policies of a Web service. WS-Policy defines a base set of constructs that can be used and extended by other Web services specifications to describe a broad range of service requirements, preferences, and capabilities.
WS-PolicyAssertions specifies a set of common message policy assertions that can be specified within a policy.
WS-PolicyAttachment specifies three specific attachment mechanisms for using policy expressions with existing XML Web service technologies. Specifically, it defines how to associate policy expressions with WSDL-type definitions and UDDI entities. It also defines how to associate implementation-specific policy with all or part of a WSDL portType when exposed from a specific implementation.
Overall, the WS-Policy family describes a language for expressing requirements of Web services senders, receivers, and endpoints. One type of policy requirement that will be placed on senders, receivers, and endpoints is the security of the extended conversation implemented in a Web service. Sounds like a requirement for a "secure conversation," doesn't it? As you will see, WS-SecureConversation does indeed sit on top of WS-Policy, reinforcing the statement that WS-Policy is a framework for richer Web Services Security constructs.WS-SecureConversation
WS-SecureConversation, developed by IBM, Microsoft, RSA, and VeriSign, is in initial public draft form last published in December 2002. What SSL does at the transport layer in point-to-point communication, WS-SecureConversation does at the SOAP layer. It makes efficient what would otherwise be individual SOAP messages carrying authentication information in tokens that would have to be evaluated and checked against security policy. In contrast, WS-SecureConversation establishes a mutually authenticated security context in which a series of messages are exchanged. Despite being at the top of the stack and therefore initially considered one of the later specifications to be published, a draft of WS-SecureConversation3 was published fairly early on.
WS-Security secures SOAP and thereby has a message-level security focus. But many Web service conversations span multiple messages and need an efficient way to secure those conversations. Furthermore, WS-Security is subject to certain kinds of attacks that can be thoroughly addressed only by authenticating a series of messages, not just one message at a time. WS-Security focuses on a single message authentication model in which the message itself must contain everything necessary to authenticate itself. This model can be inefficient considering that, if the exact same message comes in again and again, each time it would go through the same authentication/verification process, which is computationally expensive. WS-Security is well suited for coarse-grained messaging in which a single message at a time (or few in number) from the same requestor are received. When multiple messages are to be exchanged, establishing a security context can greatly improve efficiency. This security context, which contains a shared secret used by both parties to encrypt and/or sign, is shared among the communicating parties until the session expires.
Like SSL, WS-SecureConversation uses public key (asymmetric) encryption to establish a shared secret key and from then on uses shared key (symmetric) encryption for efficiency. The same shared key is used to encrypt a series of SOAP messages.
This chapter is from Securing Web Services Security with WS-Security, by Jothy Rosenberg and David Remy (Sams, 2004, ISBN: 0672326515). Check it out at your favorite bookstore today.
{mospagebreak title=SecurityContextToken}<SecurityContextToken>
The structure of a WS-SecureConversation is based on the <SecurityContextToken> element. This element is a security token that describes a security context. This is the context that will apply to one or more messages to follow. The structure of <SecurityContextToken> is shown in Listing 9.5.
Listing 9.5 The <SecurityContextToken> Element
<wsse:SecurityContextToken wsu:Id="…">
<xenc:EncryptedKey Id=" ">…</xenc:EncryptedKey>
The elements and attributes used in a <wsse:SecurityContextToken> element are described in the following sections.
<wsu:Identifier> The required <wsu:Identifier> element identifies the security context using a URI. This security context URI must be globally unique to both the sender and recipient.
<wsu:Created> The optional <wsu:Created> element indicates the creation time of the security context. It is typically specified only on the first use of the token.
<wsu:Expires> The optional <wsu:Expires> element indicates the expiration time of the security context according to the requestor's clock. It is typically specified only on the first use of the token.
<Keys> The optional <Keys> element holds the shared secrets of the security context. It is typically specified only on the first use of the token. If no <Keys> element is specified, the shared secret is assumed to be already known and associated with the security context identified by the URI specified in the <Identifier> element.
<xenc:EncryptedKey> The optional <xenc:EncryptedKey> element holds the shared secret of the security context.
<xenc:EncryptedKey/@Id> The optional <xenc:EncryptedKey/@Id> attribute specifies an "ID" for the key. Note that this does not use the wsu:Id attribute because the schema doesn't allow for attribute extensibility.
<SecurityTokenReference> The optional <SecurityTokenReference> element references the shared secret of the security context.Establishing a Security Context
There are three ways to establish a security context:
The security context token can be created by an independent third-party token service.
The security context token can be created by one of the communicating parties and propagated with a message.
The security context token can be created through negotiation.
Security Context Token Created by a Security Token Service The initiator can ask a Security Token Service to create a new security context token. The newly created security context token is distributed to the parties through the protocols defined by WS-SecureConversation and WS-Trust. For this scenario, the initiating party sends a <RequestSecurityToken> request to the token service, and a <RequestSecurityTokenResponse> is returned. The response contains a <SecurityTokenReference> pointing to the new security context token and a <ProofTokenReference> pointing to the "secret" for the returned context.
Security Context Token Created by One of the Communicating Parties and Propagated with a Message The initiator can create a security context token and send it to the other parties on a message using the mechanisms described here and in WS-Security. This model works when the sender is trusted to always create a new security context token. For this scenario, the initiating party creates a security context token and issues a signed unsolicited <RequestSecurityTokenResponse> to the other party. The message contains a <SecurityTokenReference> pointing to the new security context token and a <ProofTokenReference> pointing to the "secret" for the security context token. The recipient can then choose whether to accept the security context token.
Security Context Token Created Through Negotiation When participants need to negotiate about the contents of the security context token, such as a shared secret, WS-SecureConversation allows the parties to exchange data to establish the security context. For this scenario, the initiating party sends a <RequestSecurityToken> request to the other party, and a <RequestSecurityTokenResponse> is returned. It is likely that the negotiation (challenge/response) semantics described in WS-Trust will be used. Ultimately (if successful), a final response contains a <SecurityTokenReference> pointing to the new security context and a <ProofTokenReference> pointing to the "secret" for the context.
After the shared secret security context token is established for both parties, it is used within WS-Security to secure each message sent as part of a WS-SecureConversation. This scenario is shown in Listing 9.6.
Listing 9.6 Use of a Shared Secret Security Context in WS-Security as Part of WS-SecureConversation
<?xml version="1.0″ encoding="utf-8″?>
<S:Envelope xmlns:S="…" xmlns:ds="…" xmlns:wsse="…">
<wsse:SecurityContextToken wsu:Id="MyID"
<wsse:Reference URI="#MyID"/>
<S:Body wsu:Id="MsgBody">
<tru:StockSymbol xmlns:tru="http://fabrikam123.com/payloads">
Listing 9.6 is a standard SOAP message, so it begins with a SOAP message header followed by the SOAP body. The SOAP header contains the WS-Security <Security> header block, which contains the security-related information for the message. Inside the WS-Security block is a security token associated with the message inside a <SecurityContextToken> element. A URI within this element specifies the unique ID of the context. The digital signature uses the security context just established—in this case, based on the secret key associated with the context. The contents of the XML Digital signature here are represented with ellipses (…) but would reference the body of the message. The <ds:KeyInfo> element holds the key used for the signature. Not surprisingly, it will be the security context token included in the message and therefore will just refer to the URI that is the unique ID of the context specified earlier.
The body of the message comes next and is shown here with another ellipsis.
Much, if not all, of what is described here will be handled for you by the application server platforms and the development tools that support them. It is important to know what they are doing and why, but the details are hidden behind your development tools.
This chapter is from Securing Web Services Security with WS-Security, by Jothy Rosenberg and David Remy (Sams, 2004, ISBN: 0672326515). Check it out at your favorite bookstore today.
Integration, in the context of Web Services Security, is the federation of identities and uniform authorization policies. Federation is the integration of trust domains across organizational boundaries and is addressed by WS-Federation. Authorization is the unification of access control policies across organizational boundaries and is addressed by WS-Authorization.WS-Federation
WS-Federation enables the establishment of federated trust using WS-Security, WS-Policy, WS-Trust, and WS-SecureConversation as composable building blocks. Federation in this context means that a group of organizations that will have communicating Web services agrees on a uniform set of standards and policies about identification and authentication of entities for the purpose of translating one entity's security tokens into another type of security token. For example, WS-Federation solves the problem of one organization using Kerberos and the other with which it wants to communicate using X.509. WS-Policy and WS-Trust are used to determine which tokens are consumed and how to apply for tokens from an external service.
Figure 9.4 illustrates one way the WS-Trust model may be applied to simple federation scenarios. Here, security tokens (1) from the requestor's trust realm are used to acquire security tokens from the resource's trust realm (2) to access the resource/service (3). That is, a token from one Security Token Service (STS) is exchanged for another at a second STS (or possibly stamped or cross-certified by a second STS).
Next, Figure 9.5 shows the detailed sequence of steps used to exchange security tokens between a requestor Web service and the Web service provider resource.
Figure 9.4 Simple federation scenario allowing requestor in one trust domain to interact with a resource in a different trust domain using different security models.
Figure 9.5 Eight-step process used in WS-Federation to cross different trust domains with a security token.
This process is as follows:
Acquire policy.
If the requestor doesn't already have the policy for the service, it can obtain the policy using the mechanisms defined in WS-MetadataExchange. WS-MetadataExchange allows a service to directly obtain information using WSDL, or it may choose to use a UDDI service that aggregates this information for multiple target services.
Return policy.
The requested policy is returned using the mechanisms defined in WS-MetadataExchange.
Request security token.
The requestor requests a security token from its IP/STS (assuming short-lived security tokens) using the mechanisms defined in WS-Trust: <RequestSecurityToken>.
Issue security token.
The IP/STS returns a security token (and optional proof-of-possession information) using the mechanisms defined in WS-Trust: <RequestSecurityTokenResponse> and <RequestedProofToken>.
Request security token.
The requestor requests a security token from the Web services IP/STS for the target Web service using the mechanisms defined in WS-Trust: <RequestSecurityToken>. Note that this is determined via policy or some out-of-band mechanism.
Return security token.
The Web service's IP/STS returns a token (and optionally proof-of-possession information) using the mechanisms defined in WS-Trust: <RequestSecurityTokenResponse>.
Send secured request.
The requestor sends the request to the service attaching and securing the message using the issued tokens as described in WS-Security.
Return result.
The service issues a secured reply using its security token.
WS-Federation, SAML, Liberty, and Passport – WS-Federation deals with identity in a federated Web services context. As of this writing, no specification has been published for WS-Federation, and it is not without controversy due to the Microsoft name on the specification and the questions around the Sun-sponsored Liberty Alliance project and the Microsoft-owned Passport technology.
WS-Federation is working toward compatibility with SAML as SAML tokens become one of the types of federated tokens accepted, along with X.509, Kerberos, and XrML.
That being said, it seems valuable to have a standard approach for federated trust scenarios specific to Web services that is independent of the Liberty Alliance and Passport and generalized enough to fit into both models of identity federation.
At the very least, WS-Federation addresses a really difficult unsolved problem: how to get a Web service based in a domain using Kerberos to work effectively in a trusted fashion with a Web service based in an X.509 domain.
WS-Authorization deals with authorization decisions in the context of Web services. It describes how access policies for a Web service will be specified and managed. As of this writing, no specification has been published for WS-Authorization. Its objectives are similar to the eXtensible Access Control Markup Language (XACML) and will undoubtedly be heavily influenced by it.
This chapter is from Securing Web Services Security with WS-Security, by Jothy Rosenberg and David Remy (Sams, 2004, ISBN: 0672326515). Check it out at your favorite bookstore today.


text:
"Hello friends. Are you tired, run-down, listless? Do you poop out at parties? Why don't you join the thousands of happy peppy people…" at the 2012 ASHA Convention. If this famous I Love Lucy script makes you think your convention experience thus far, then you are not alone. Between walking from the Exhibit Hall to visit the vendors to checking out the NSSLHA Lounge and Poster Presentations, just navigating the convention can wear a person out.
Despite the many weary feet, the excitement from day 1 has been tangible. Waiting in line for coffee, finding the room number for sessions, or collecting your third Super Duper bag, you can always find someone to share a conversation with. How often do you know everyone around you is an SLP or AUD, and feel comfortable discussing a therapy technique or a new iPad application while waiting in line? The convention provides professionals from across the country opportunities to reconnect with colleagues and friends, refine intervention strategies and techniques, and renew the excitement and zeal for being "rainbows in the clouds" of our clients.
As a student, not only is attending sessions part of the allure of attending the convention, but meeting and networking with professionals who have knowledge and experience to share has been invaluable. Everyone I have met and shared a conversation with has been more than willing to relay tips for my SLP-CF job search or strategies for interviewing and negotiating a contract. I still get nervous before speaking with SLPs or AUDs, but I hope those I speak with remember what it felt like to be a student: Excited, nervous, stressed, overwhelmed, and just itching to finish our clinical internships. The convention is a chance for everyone to "nerd out" with other SLP students, professionals, professors, and researchers from across the world; it is like Christmas morning for me.
What was my favorite part of the 2012 ASHA Convention?
One of the highlights for me was meeting the SLPs, AUDs, and other student SLPs that I have met through Twitter over the past year. Many people are still apprehensive or unaware of the professional learning opportunities that wait by using Twitter with the #SLPeeps. Heidi Kay over at Pediastaff recruited some of the best SLPs who use social media as professional tools to create a Free Guidebook to help people get started. If you want to see how to use these tools, please check out the easy to follow electronic book and start growing professionally with the #SLPeeps.
Another one of the highlights from the convention was hearing Dr. Maya Angelou speak at the opening session. Her powerful storytelling inspired me professionally and personally. She compared SLPs and AUDs to rainbows in the clouds. A rainbow speaks of promise and hope; I would like to think I can be that for my clients. Her personal tale of selective mutism after a childhood trauma empowered me to always consider the perspective of my clients before jumping to conclusions. She always had a story to tell; as Speech-Language Pathologists and Audiologists, accepting and establishing trust can impact how much of their story a client decides to share.
(Katie is one of the official ASHA Convention bloggers. These three bloggers were selected to blog about the ASHA Convention in exchange for complimentary registration. Stay tuned for more insights from her and the other bloggers before, during and after convention.)
Katie Millican, B.S. Ed., is a second year graduate student in Speech-Language Pathology program at the University of West Georgia (UWG). Katie is the current UWG local NSSLHA chapter President. She is active with the #slpeeps and #slp2b on Twitter (@SLP_Echo) and on Pinterest, and she writes her own blog SLP_Echo: Just another SLP in the Making. Katie has a passion for using technology and sharing evidence-based ideas.

subset: commoncrawl


text:
The University Interscholastic League (UIL) announced new districts and classifications for Texas high school athletics programs Thursday morning. UIL realigns districts every two years.
In football, which has the most elaborate playoffs system, Lake Ridge High School and Summit High School will join Mansfield High School in Conference 6A. Their District 7 opponents are Cedar Hill, DeSoto, Grand Prairie, South Grand Prairie and Waxahachie.
Legacy High School and Timberview High School will remain in Conference 5A. Their Division I District 6 play will include Bryan Adams, Highland Park, Samuell, Sunset, Woodrow Wilson and Lancaster.
The realignments will take effect in the 2018-19 and 2019-20 seasons.
The Conference 6A cutoff for 2018-20 was set at a student enrollment of 2,190 or more. Conference 5A's cutoff was set at an enrollment of 1,150 to 2,189 students.
View realignment information for all sports here.
Send Your News Tips
605 East Broad Street • Mansfield, Texas 76063 • (817) 299-6300 Terms of Service | Accessibility | Site Map | Contact Us©


text:
LOOSE half-drilled cultured akoya pearl in nature white color, ROUND SHAPE, AA grade,Fine luster, Light blemishes in the surface. measuring approx 4mm-4.5mm in diameter; can use for pendant and earrings;
This list price for one piece AA Grade loose akoya pearls.
Minimum quantity: 10pcs Different qualites for you select: AAA Grade: Good Luster, Thick Nacre and Unblemished Blemished in the suface; AA Grade: Fine Luster, Medium Nacre and Light Blemished in the suface; A Grade: Normal Luster, Thin Nacre and Noticeable Blemishes in the suface;
you also can orde Gold mountings& fittings or sterling mounting & fittings to fit them together made to earrings or pendant!


text: Greetings all, I have read the "HowTo" here and I am interested in trying this for a new production network: http://www.howtoforge.com/how-to-use-pfsense-to-load-balance-your-web-servers I noticed the author writes "if this is your edge firewall I would recommend a physical machine" Is this so that PFsense will have dedicated CPU resources to handle the load balancing? Are there other considerations? I had been considering putting everything onto VMWare ESXi hosts including a PFSense cluster, based on the 2 tutorials here http://doc.pfsense.org/index.php/Tutorials 1) Installing pfSense in VMware & 2) "Building a fully redundant Cluster with 2 pfSense-systems between WAN/LAN with CARP & pfsync / pfSense CARP & pfsync failover-simulation" But maybe I'll need to run separate hardware for the PFSense cluster? Will be trying some experiments over the next week or 2 to see if I can figure this out... appreciate any advice, TVMIA


text:
Home Insurance Quotes
Water damage: Seven home insurance scenarios
Water damage is one of the most common reasons people make claims on their home insurance. Burst pipes, leaky appliances and flooded basements often lead people to discover the details of their home insurance policies.
Although insurance companies may pay to replace a carpet damaged by your dishwasher leak, you'll probably have to replace or repair the damaged hose at your own cost. If a sudden, unforeseen problem such as a frozen pipe leads to water damage, your home insurance covers repairs to both the broken pipe and your home and furnishings.
Here are common water-damage scenarios and their insurance consequences.
Scenario No. 1: The temperature drops to 10 below zero, causing your water pipes to freeze and burst. Your floor is now covered in 6 inches of water.
Are you covered? Yes, you're covered for water damage from burst pipes, but most policies won't cover you if you've left the house unoccupied and without heat. If that's the case, your claim could be denied because you've failed to perform the necessary upkeep that would prevent the accident.
Scenario No. 2: Water leaks from your backyard pool, ruining your manicured lawn and flooding your basement
Are you covered? The damage to your basement and your personal property are covered, but not the damage to your lawn. According to a sample policy, "We do not cover land, including land on which the dwelling is located." However, your lawn is covered if it's damaged by certain "named perils." These include fire, explosion, riot, aircraft, vehicles not owned by you and vandalism. The amount of coverage for lawns and plants is small — usually only up to $500. Swimming-pool leaks are not a named peril. But if your leak was caused by a tree falling on the pool, it would be covered.
Scenario No. 3: Your washing machine overflows, flooding the basement.
Are you covered? Yes. But it depends on your home insurance company's view of the problem: Did you fail to maintain the washer properly or did sudden, accidental damage cause the flood? Usually, water from a broken appliance will be covered.
Scenario No. 4: A sewer backs up, flooding your basement.
Are you covered? No. Standard home insurance policies don't cover sewer backups, and many specifically exclude damage from sewer back-ups. Special endorsements are available, at added cost, for sewers and drains.
|Don't shoot yourself in the foot by reporting damage to your home insurance company that's not covered by your policy. Your damage report may still go on your insurance record and look like a claim when you shop for new insurance in the future. Read how one five-minute call to your insurance company can dog you for seven years.
Scenario No. 5: Water seeps from the ground into your basement, damaging your foundation and interior.
Are you covered? No. Seepage is considered a maintenance problem, not "sudden and accidental" damage, and is excluded from home insurance coverage.
Scenario No. 6: During a heavy rainstorm, water leaks through your roof. The roof is damaged, as is furniture.
Are you covered? Somewhat. You're unlikely to be reimbursed for roof repairs because that's a house-maintenance issue. But the water damage to your home is covered. Damage to your furniture is also likely covered if you have a standard H0-3 home insurance policy, but not if you have a generic HO-1 policy (which many insurers don't even sell anymore).
If your neighbor's tree falls on your roof, the damage to your roof, home and belongings is covered. Your policy also reimburses you up to a certain amount, usually around $500, for the cost of removing the tree.
Scenario No. 7: A nearby lake or river overflows its banks, causing a flash flood in your living room.
Are you covered? No. Flood damage is not covered by home insurance. You must purchase flood insurance for that. You can purchase flood insurance as long as your community participates in the National Flood Insurance Program.
It's a good idea to talk with your home insurance agent to fully understand what your home insurance covers. If you're in the market for a new home owners policy or it's time to comparison shop, check out Insure.com's Best Home Insurance Companies.
Ready to get a quote?
Get quick and easy home insurance quotes
No Comments


text:
Economic Development Plan Survives Split Attempt
PIERRE - A comprehensive bipartisan economic development fund plan aimed at helping to recruit projects to South Dakota has survived an attempt by a Republican lawmaker to split the bill in five parts.
Rep. Stace Nelson of Fulton argued that the measure is full of pork and covers too many unrelated topics such as housing and workforce education. But lawmakers shot down his attempt to divide and then approved the bill 56-13.
Republicans and Democrats worked for the past two months to find a compromise to help level the playing field with other states that do a better job recruiting large projects.
House Republican Leader David Lust of Rapid City says the bill is one framework that addresses economic development, and the issues are intertwined, intermingled and interdependent.
Copyright 2013 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.


text:
The Home of Fashion Film and Live Fashion Broadcasting
Snow White at Herve Leger: #nyfw #NYTFashion http://t.co/2YeRSmf3
Obsessed with pony skin black jackets with fox fur hoods at Herve Leger. Need.
Lots of neon printed herve dresses adorning the celebs front row at herve leger #nyfw
Well-heeled backstage at @herveleger #nyfw http://t.co/Nq4U4d0T


text:
Here are the latest pieces I commissioned from Joe. First up is Raven, a costumed vigilante similar to Batman.
Next up is the electrically powered villain Overload.
And last is the flame welding African American villain Blaze.
Joe Singleton's Art
We have a lot of talented artists who frequent these forums. This is the place for them to show off their stuff.
Re: Joe Singleton's Art
"There is no such thing as a dangerous weapon, only dangerous men."
"Death is certain, life is not."
"Death is certain, life is not."


text:
Not Possible. period.
I've an old desktop that runs on an AMD Athlon XP2500+ and recently found I couldn't install new software because the CPU is not SSE 2 compliant. Barring changing the processor is there anyway of getting around the problem, perhaps with software? Chip Die 2
It is entirely possible to create an interrupt handler to intercept the op code exception, simulate the instruction, and return control.
However, the reason for using the instruction is performance, and the simulation will be significantly slower. In addition, there are no socket A CPUs that support SSE 2 (you will need at least a socket 754 processor).
You should consider upgrading your machine if this is an important consideration for you.
NOT POSSIBLE - the simple reason that even if you COULD "emulate it in software via a handler", you still couldn't fool the SSE2 detection of the program, which checks for it probably by the CPU ID string, rather than trying to execute SSE2 instructions and see if they work.
And frankly, if you have hardware that is that old, the original poster is DUE an upgrade anyway, and it is probably FAR cheaper to put in a new mobo and processor than try to write an interrupt handler that won't work anyway.
OP: get a mobo, get a CPU, and transfer the rest of your system. MIght need new memory depending upon the mobo you choose. It's easy, and their are websites and books that point the way, use Google (which works without any SSE2 instructions!).
Custom interrupt handler is perfectly possible if the only way to run a piece of software is with SSE2 available and that software must be run on that CPU. In reality though, unless you fancy the challenge yourself or are prepared to pay someone to write it, you're looking at a much more sensible option of replacing the hardware or using other software.
There are some (not many though) companies / software that officially / unofficially offer a 'no SSE2' compile version. I don't know what software you want to install but Google is your friend, see if there is a replacement DLL or a patch or something that you can download.
Otherwise - upgrade the hardware. People are starting to throw away older P4 systems where I am, they have SSE2. Shame I know, but AthlonXPs are getting old.


text:
Gabriel Gomez
Republican U.S. Senate nominee Gabriel Gomez, right, takes questions from reporters following a campaign event in a park in Boston, Tuesday, May 7, 2013. Gomez, who defeated former U.S. Attorney Michael Sullivan in the GOP primary received Sullivan's endorsement during the event. Gomez is running against longtime Democratic U.S. Rep. Edward Markey in the June 25 special election. (AP Photo/Steven Senne)
(The Associated Press)
By STEVE PEOPLES, Associated Press
BOSTON (AP) — Republican Senate candidate Gabriel Gomez is on his own — at least for now.
National Republican allies, conservative activists and major GOP donors outside Democratic-leaning Massachusetts are skeptical of Gomez's chances in the state's June 25 special election to replace former Sen. John Kerry.
While local Republicans are excited about the former Navy SEAL-turned-businessman, the early skepticism is blocking the larger flow of money and manpower that helped Republican Scott Brown score an unlikely special election victory here three years ago to replace the late Democratic Sen. Ted Kennedy.
Several top Republican donors say they know virtually nothing about Gomez, whose previous political experience is limited to an unsuccessful run for town selectman. The Senate GOP's national campaign committee has yet to decide whether to invest significant resources, and likely won't until it's convinced that the race is winnable. And the tea party movement's national network of small-dollar donors has shied away from the socially moderate Gomez, who acknowledged giving money to President Barack Obama in 2008.
"We are not looking at that Senate race at all," Tea Party Express chairman Amy Kremer said recently. "We cannot get behind someone that donated to Obama."
Gomez, 47, emerged from relative obscurity to win last week's low-turnout three-way Republican primary. In many ways, he fits the profile of a new brand of politician that national Republican leaders described in a March report calling for better minority outreach and more inclusive tones on immigration and social issues.
The son of Colombian immigrants who speaks fluent Spanish, Gomez supports gay marriage and personally opposes abortion, but hasn't advocated overturning Roe v. Wade, the 1973 Supreme Court decision that established a nationwide right to abortion.
In the general election, Gomez is competing against Democratic Rep. Ed Markey, 66, who was first elected in 1976 and is dean of the state's all-Democrat congressional delegation.
In Congress for more than three decades, Markey has been repeatedly painted as an out-of-touch Washington insider by opponents in both parties. The congressman has also faced difficult questions about whether he maintains a home in his Massachusetts district at all.
But while Markey has weaknesses, the political realities of Massachusetts politics make it difficult for Republicans to win here.
Only around 11 percent of state voters are registered Republicans. All of Massachusetts' members of Congress — nine representatives and two senators — and its statewide officers are Democrats.
"In Massachusetts, the numbers are mathematically daunting," said Washington-based Republican strategist Phil Musser, who has worked in the state. "But it can be done."
Indeed, Brown stunned the political world in 2010 by winning the special election for the seat left vacant with Kennedy's death. But the victory was fueled by a flood of tea party volunteers and out-of-state money that allowed the little-known state senator to blanket the television airwaves and generate a sophisticated statewide get-out-the vote operation, taking Democrats by surprise.
Undaunted by the lack of national GOP attention, Gomez spokesman Will Ritter said Monday that the campaign has raised more than $200,000 online and already signed up more than 4,000 volunteers in the days since last week's GOP primary victory. But with Election Day seven weeks away, the donations represent a fraction of the support Brown attracted in 2010.
Brown ultimately raised and spent more than $10 million on his winning bid, though two years later he was defeated by Democrat Elizabeth Warren.
The tea party donors who lined up behind Brown worked against Gomez in the days immediately before last week's primary.
"He's pledged his support for Obama's policies on immigration reform (amnesty) and gun control," says a fundraising appeal for Gomez's primary opponent, Michael Sullivan, released by the Campaign to Defeat Barack Obama, a tea party-backed political action committee. "We must defeat Obama supporter, Gabriel Gomez."
Gomez has one advantage that Brown did not: the ability to tap super political action committees, which emerged in full force after Brown's 2010 race.
He has so far resisted taking the so-called "People's Pledge" that helped prevent outside groups from spending money in the state's last high-profile Senate contest. Without such a pledge, Gomez could be the beneficiary of super PACs that can raise and spend unlimited sums of money on his behalf.
Markey is trying to make Gomez's refusal to sign the pledge a campaign issue.
"I'm going to keep pressuring him," Markey said at a Monday press conference. "Obviously he doesn't want to sign it because the Koch brothers" — a reference to conservative political supporters David and Charles Koch — "Karl Rove, would be able to come into this state."
Eric Fehrnstrom, previously a top aide to former presidential candidate Mitt Romney, already is working on advertising to help Gomez through the super PAC known as the Committee for a Better Massachusetts, which raised at least $50,000 in the weeks before the primary election, relying upon just three donors.
But in a race that's expected to cost millions, it's unclear how many donors will bet big on Gomez.
Some of the party's most prominent donors in recent days said they knew very little about Gomez, and that it was simply too early to know whether he could make the race competitive. And none planned to donate until that question was answered.
Many are waiting to take their cues from the National Republican Senatorial Committee, the GOP's formal campaign arm, and to see whether it would devote major resources on the race. So far, the committee has set up websites and low-cost online videos attacking Markey, but it hasn't yet decided whether to make more significant investments in television advertising — pricey because of the expensive Boston TV market — until conducting its own polling.
The Republican super ally, American Crossroads, is in a similar position, having yet to determine whether the race is winnable.
Even so, donors publicly suggest that Gomez could have a bright future.
"It's an exciting race," said Charlie Spies, a Washington-based lawyer who led fundraising efforts for the super PAC that worked on Romney's behalf. "Gomez is exactly the sort of candidate that Republicans need to be recruiting. And has the potential to turn into a rock star fresh face for the party."
Associated Press writer Bob Salsberg in Boston contributed to this report.


text:
|Other Keywords
|KEK Digital Accelerator and Recent Beam Commissioning Result
|injection, acceleration, ion, induction
The digital accelerator (DA), which is a small-scale induction synchrotron "*" requiring no high-energy injector and capable of providing various ions, was constructed at KEK"**". Beam commissioning has been carried out. The KEK-DA consists of a 200 kV high voltage terminal, in which a permanent mag. x-band ECRIS is embedded, 15 m long LEBT, ES injection kicker, and a 10 Hz rapid cycle synchrotron equipped with the induction acceleration system. An ion pulse chopped in 5 micro-sec by the newly developed Marx generator driven Einzel lens chopper"***" was guided through the LEBT and injected by the kicker in one turn. 3 micro-sec ion pulse was successfully captured with a pair of barrier voltage-pulses of 2 kV and accelerated up to 12 MeV with another flat induction-acceleration voltage-pulse through an acceleration period of 50 msec. Beam commissioning started with a He1+ ion beam of 100 microA. Details of fully digital-controlled barrier bucket trapping and induction acceleration are described, although the acceleration/extraction is still at a preliminary stage. Some of unique applications, such as laboratory space science using virtual cosmic rays, will be introduced.
* K.Takayama and R.J.Briggs (Eds), "Induction Accelerators", (Springer, 2010).
** T. Iwashita et al., Phys. Rev. ST-AB 14, 071301 (2011).
*** T.Adachi et al., Rev. Inst. Meth. 82, 083305 (2011).
|Slides TUC02 [2.126 MB]


text:
This is Joseph Belac Instagram Profile (@jables215). Here you can discover all stories, photos, videos posted by Joseph Belac on Instagram Profile.
You can see all stories, posts, likes, followers, followings, comments, and so on identified with Joseph Belac Instagram Profile from here.
Altogether Joseph Belac has 131 followers and follows 224 on Instagram. Since joining Instagram Joseph Belac has posted around 92 photos and videos there altogether.
As of now Joseph Belac is not verified profile on Instagram.
On the off chance that you need take after more updates or need to get general cautions at whatever point Joseph Belac posts anything on instagram click here and follow the user.
Joseph Belac (jables215)'s Instagram User Id is : 5658991799
Joseph Belac's Photos shared recently. Find all instagram photos and videos of jables215 Instagram account...
Our website is made possible by displaying online advertisements to our visitors.
Please support us by deactivating the AD blocker so our services can continue.


text:
Your Career >> Browse Articles >> Career Advancement
Your Career >> Browse Articles >> Career Changers
Your Career >> Browse Articles >> Find Your First Job
10 Questions to Ask When Negotiating Salary
Negotiating skills don't come naturally to everyone
By Dona DeZube | Monster Finance Careers Expert
What you ask for during a salary negotiation doesn't just influence how much you earn — it also tells your future employer whether you're good at negotiating, which is a skill you can put to work for the employer once you're hired.
Negotiating salary doesn't come naturally to many Americans, says Matthew DeLuca, author of Perfect Phrases for Negotiating Salary and Job Offers: Hundreds of Ready-to-Use Phrases to Help You Get the Best Possible Salary, Perks, or Promotion. "Most people in our country are not used to bargaining," he says, "But if you don't bargain, you're not going to get all you should."
Perfect Phrases explains how to negotiate salary, but DeLuca's tips also apply to contract and project-based pay negotiations. In both cases, the people on the other side of the salary negotiations are trying to get you for the most cost-effective price.
To win your best salary, continue talking until you get everything you want, whether that's a higher base, an early salary review or company-paid childcare, DeLuca says.
"There's always a risk involved with any questions you raise when the offer is made, but it's better to ask questions then, because if [the company is] uncompromising, that's not a healthy situation," he says. "If they have no tolerance for questions, you need to know that up front."
Think of a salary negotiation as your chance to shine. "The person on the other side of the desk is evaluating you," DeLuca says. "This is going to show you're astute in dealing with the outside world. When you get the offer, don't let your guard down — you're still on the firing line. Feel confident, because they've come to you with an offer."
To make sure you get all you deserve, DeLuca recommends asking these 10 questions:
1. "Thanks — is this a firm job offer?"
Demonstrate that you're professional, polished and polite by saying thank you, and immediately follow to make sure that you really have just been offered a job.
2. "Is this negotiable?"
Once the salary offer is revealed, it never hurts to ask if they'll put more money on the table. If they say no, you can move on to negotiate other items.
3. "Is this base only?"
Asking if the figure you're offered is total compensation or base compensation lets the interviewer know you're interested in the details of bonuses and stock options, and it opens up other questions about bonus opportunities.


text:
Slate's mistakes.
In a March 30 "Slatest" post, Ankita Rao misspelled Nicolas Sarkozy's first name. Agence France Presse was also misspelled.
In a March 29 "Bull-e," Emily Bazelon mistakenly suggested that two depictions of suicide in the documentary Bully were factually questionable. She intended to say that the depiction of Tyler Long's suicide is factually questionable.
In a March 29 "Faith-Based," Max Perry Mueller originally misspelled Arun Gandhi's last name. He also misstated the year of Thomas Jefferson's first presidential campaign. It was 1800, not 1802.
In a March 28 "Slatest" post, Abby Ohlheiser misspelled Las Vegas.
In a March 28 "Technology," Farhad Manjoo originally and incorrectly stated that Google's acquisition of AdMob was investigated by the Department of Justice. The Federal Trade Commission conducted the investigation. The article also originally misspelled the last name of AdMob founder Omar Hamoui.
In the March 27 "Supreme Court Dispatches," Dahlia Lithwick misspelled Michele Bachmann's last name.
In a March 26 "Breakingviews" blog post, Jeffrey Goldfarb stated that Lions Gate planned to release three sequels based on Suzanne Collins' Hunger Games trilogy. The studio plans to release two sequels to the initial feature film.
In the March 23 "Explainer," Brian Palmer misidentified the Kirksville College of Osteopathic Medicine as the Kirkman College of Osteopathic Medicine.
In a March 23 "Sports Nut," Will Oremus mistakenly referred to "New Hampshire catamounts" in a section about the Vermont Catamounts.
In the March 21 "Politics," John Dickerson stated that the distance a home run must travel from home plate to centerfield was 400 yards. The distance in most baseball stadiums is roughly 400 feet.
In a Feb. 29 "Technology" column, Farhad Manjoo incorrectly identified Stacey Anderson-Redick as Article One Partners' top earner. Anderson-Redick is among the company's top earners; she was highlighted by Article One because her latest winnings put the firm over $2 million in contributions to researchers.
Slate strives to correct all errors of fact. If you've seen an error in our pages, let us know at firstname.lastname@example.com. General comments should be posted in our comments sections at the bottom of each article.


text:
A little blog about life, family, food, and living in the beautiful Pacific Northwest
Wednesday, July 8, 2009
Summer Stuffed Zucchini (it's gluten free, too!)
Any-who, movin' on ... I'm getting a jump-start on the plethora of zucchini soon to be making it's annual summertime appearance. I love zucchini. My favorites are the baby or small sized green goodies; however, I'm not picky at all when it come to the preparation method. I'll eat it sauteed with garlic and cheese; I'll eat it au gratin if you please. I would eat it in my house, I would eat it with my spouse. I would eat it with green eggs and ham; I would eat it with Sam I Am! Uh, I'm hoping you are all familiar with Dr. Seuss ... you know ... green eggs ... ham ... Sam.Just look at that golden crisp top! I bet every Dr. Seuss character would love love this. This recipe is a keeper for sure. Its origins are Northern Italian, and I got it out of a cookbook by Biba Caggiano years ago. You may recall that I'm Southern Italian. There is a big difference between those two regions; however, I love all Italian food and this recipe is no exception.
I've tweaked the original recipe to be gluten free. It's easy. It uses regular ingredients. And it's very filling. You will love it. Love. It. This baby is *company-serving-worthy*, too. Your guests will love it, and will love you for making it! Love. You. Yep, lots of love in this recipe. This recipe is easily doubled, tripled, quadrupled, etc.
Let's begin!
2 small zucchini
Alfredo sauce – see below
1 tablespoon chopped parsley
½ cup cooked ham, chopped (don't use a sweet ham)
½ cup rice or corn Chex, crushed fine (corn Chex are now gluten free, too!)
NOTE: You can substitute fresh breadcrumbs for the Chex.
Seasoned Salt
Ground Pepper
Grated Parmesan cheese
Alfredo Sauce (Makes more than you need)
1 stick butter
1 garlic clove, minced
1 cup 2% milk
1 cup cream
¼ teaspoon white pepper
½ cup parmesan cheese
¾ cup Mozzerella cheese, freshly shredded
Make the sauce first. In a heavy saucepan, melt the butter over medium heat. Add the minced garlic, and swirl around in the butter for about 20 seconds. Add the milk, cream, and white pepper all at once, stir, and bring to a low simmer. Add the parm cheese. Stir. When it is incorporated, add the Mozz cheese. Turn heat to low and simmer for about 7-8 minutes or until thickened. It will thicken even more as it sits.
Preheat oven to 350. Butter a baking dish. Prepare zucchini by washing it. Fill a large pan 2/3rds full with salted water and bring it to a boil. Add zucchini. Cook for about 5 minutes for really small zucchini, or a couple minutes longer if your zucc's are medium sized. The zucchini should be barely tender. Rinse under cold water, then pat dry. Trim ends off zucchini and slice zucchini in half lengthwise.Scoop out the pulp using a melon baller or small spoon, and place the zucchini cut side down on paper towels to drain. Place the pulp in a mixing bowl, and roughly mash the pulp with a fork or two knives. Stir in the chopped ham.How are your chopping skills? I give myself a B+. I'm pretty good with this particular knife, but I'm not going to enter a chopping competition. Now, if we were talking about shredding or peeling ... I'm your girl. I can peel carrots and potatoes at the speed of light, and dispense pounds of shredded cheese in mere minutes. Um, sorry ... let's get back to the recipe. After you add your ham, add the parsley, Chex, seasoned salt, and pepper. Fold in about ¼ cup of sauce.Filling should be the consistency of a bread stuffing. Taste and adjust seasoning. My youngest loved the filling right out of the bowl. Fill the zucchini shells with the mixture – really mound it high. Sprinkle with parmesan cheese. Put the stuffed zucc's in a buttered baking dish.Bake 20 minutes, crank up the broiler and broil for about 5 minutes or until the top is golden brown.Mmm, mmm, good! These are deceptively filling, and are the main dish – definitely not a side dish. It pairs perfectly with a summer green salad tossed with a light vinaigrette. Just look at how great these are!The ham is so delicate in the filling, but definitely is an important component of the overall dish. The alfredo sauce made with just one garlic clove is the perfect binder for the filling. The Chex perform outstandingly as they provide great body in the filling.So, when your garden is overflowing with zucch's, give this recipe a try. What's your favorite way to prepare this green goody?
PS: Follow the link to Mediterranean Kiwi's blog titled Organically Cooked -- she's posted a great zucchini recipe (dated 07/08/09) served with veal! YUM!
27 comments:
- Mediterranean kiwi said...
you know my garden is full of this stuff - i have to try this
- July 9, 2009 at 4:01 AM
- gemma said...
This looks so delicious I want to make it right now. I will later for sure.
- July 9, 2009 at 4:08 AM
- Aggie said...
Wow!! These look fantastic, I want some for lunch (as I'm eating my breakfast...lol). Great recipe!
- July 9, 2009 at 5:53 AM
- Manggy said...
My parents (and I) loved this simple recipe from Jamie Oliver that involved sauteeing the slices in olive oil, lemon, and chili flakes :) But whether we're overflowing with zucch or not (... likely not, hehe), I would love to give these bad boys a shot!
7 ate 9... Oboy! :P
- July 9, 2009 at 5:58 AM
- Grace said...
aside from the obvious awesomeness of that sauce, i think the whole idea in general is fantastic. i'm fully expecting a glut of zucchini from my friends and neighbors since i'm garden-less, and this is a magnificent use for them!
- July 9, 2009 at 7:23 AM
- Cathy said...
Stuffed zucchini is one of my favorite. Love the filling and the Alfredo sauce. A terrific recipe Paula. I put zucchini on my market shopping list.
- July 9, 2009 at 7:23 AM
I looks tasty!!! What sort of chopping knife are you partial too??
- July 9, 2009 at 8:26 AM
- noble pig said...
Yeah and the other day was 7-5-9 another event that happens only ever so often.
This would make a great lunch!
- July 9, 2009 at 9:06 AM
- Gloria said...
I love stuffed zuchinni and these look delicious! xxGloria
nice recipe!
- July 9, 2009 at 9:11 AM
- Pam said...
Oh Paula - it looks so delicious! I can't believe I've never thought to stuff zucchini. Can't wait to try it.
- July 9, 2009 at 9:36 AM
- Marjie said...
I loved 7/8/9, too. My kids think I'm just plain weird, but my dearly beloved has learned to just nod and smile. And my kids have trotted out "7 ate 9" plenty of times, too.
I love zucchini. I eat it raw with dressing, or I saute it in butter and pepper. Lots of nice black pepper. I would try this stuffed, but I wouldn't take lots of time to put it on the pretty bed of lettuce for a picture, because you know the hungry horde wouldn't afford me the luxury of time.
- July 9, 2009 at 10:23 AM
- Paula said...
Zucchini greetings everyone!
Med Kiwi: I'd love to have some of your bounty. I just have flowers on my zucch plants right now!
Gemma: It was yummy! Thanks for visiting!
Aggie: They would be perfect for a luncheon! Mmm, mmm, good!
Manggy: That Jamie Oliver recipe is more along the lines of my Southern Italian recipes! I like making bad boy recipes! hehe
Grace: It's fun to figure out what to do with all the summer zucch's! Mmm, I wonder what cinnamon laced recipes are out there? :-)
Cathy: The zucchs works so amazingly well stuffed. I want to find more stuffed recipes to try!
Prairierunner: My chopping weapon of choice is the one in the photo; it's a SMALL chef's knife by Analon. The super sharp blade is only about 7 inches, and I use it for everything!
Noble Pig: How's Oregon life going for you? I'm slow on the uptake -- What's the story of 7-5-9?
Gloria: Thanks! It was a yummy dish!
Pam: Thanks! It was so great; I'm going to make it again and again. I want to figure out how to prepare it on the grill next time! :-)
- July 9, 2009 at 10:29 AM
- Paula said...
Marjie: Your comment came in while I was typing! Glad that I'm not the only one that likes number anomaly jokes! Come on over, and I'll make this for you and put in on a bed of lettuce, too! Truth be told, the vinaigrette on the salad balanced out the richness of the stuffing! I like raw zucchini, too, and last year, I sauteed the zucch's in butter based on your suggestion and loved it (I usually use olive oil). Let's face it, I'll eat zucchini just about any way! :-)
- July 9, 2009 at 10:34 AM
- Lo said...
Oh, dear me.
Zucchini and alfredo. I'm so VERY THERE. Thanks for tempting me, once again, with food that will cling (albeit deliciously) to my hips.
- July 9, 2009 at 12:42 PM
- DayPhoto said...
Thank you for this. I will have this in about two weeks, my squash should be ready then.
- July 9, 2009 at 12:57 PM
- Cheryl said...
OMG I have never heard of this, what a great light dinner, I can't wait to make it!
- July 9, 2009 at 4:23 PM
- Lynda said...
I haven't made stuffed zucchini in a long time- I kinda forgot about it.Yours looks awsome with all of that melted cheese!Yum!
- July 9, 2009 at 6:08 PM
- OurCrazyFarm said...
Yum! This looks sooo good! My zucchini is just about ready to pick, and it's a perfect time to try a new recipe!
- July 9, 2009 at 9:41 PM
- Robynn's Ravings said...
Good thing I'm wolfing a tuna sandwich right now or I'd be dying! I'm starving. I forgot to eat dinner! That's a new one! These look amazingly delicious. :)
- July 10, 2009 at 12:38 AM
- Mickle in NZ said...
How sad to make more Alfredo sauce than needed. You just have to - eat it with something else!
I love zucchini - and so do the dodgy innards. Your recipe is sooo adaptable to suit all sorts of "innards issues".
Roll on Summer, and Mediterrnean Kiwi - would love to eat from your garden.
Paula - at least 2 kiwis commenting? - yep, and Med Kiwi and Mickle went to the same high school (Wellington Girls' College). Med Kiwi (hello dear M) was a year behind me!
Care and huggles, while I go to sleep dreaming of Zucchs,
- July 10, 2009 at 4:22 AM
- The Blonde Duck said...
I want to live in your garden like a little food-stealing gnome. I'd be so fat.
At the bbq place, I would have gotten brisket or ribs. Slurp. Beef ribs, not pork.
- July 10, 2009 at 10:13 AM
- Pam said...
Well of course it's good, it's good a stick of butter, cream and lots of cheese, that makes anything (even zucchini) good!
- July 10, 2009 at 5:53 PM
- Jan said...
Oooh now they look seriously delish!
- July 10, 2009 at 9:53 PM
- Jan said...
This looks absolutely yumptious, Paula. Although we eat zucchini, we have never grown it - but we will next year - Mick has had his orders. :-)
- July 12, 2009 at 4:37 PM
- Peter M said...
Paula, us Greeks stuff zucchini but never this way...I adore this - YUM!
- July 13, 2009 at 7:19 AM
- Ashley said...
This looks delicious! My husband would love it!
- August 1, 2009 at 3:28 AM
- Spryte said...
YUM!! That looks amazing!!
- August 16, 2009 at 3:49 PM


text:
25 March 2010
Data Modeler Overview and Demo: Webcast Recording
Back to the Data Modeler demo and webcast - I reran the webcast this time recording the sound too. We now have a webcasts web site and the first recording is available for download. It might look a little lonely there now, because it is the first in the series, but this should grow.
This webcast introduces the SQL Developer Data Modeler and then I go into a high level demonstration and feature review.
2 comments:
Hello Sue,
I think that these webcasts are an excelent idea, and I'll definately will keep an eye out for new episodes.
Few things:
1)Would it be possible to add RSS feeds to the "official" oracle site that holds the webcasts?
2)Could you also give indepth demo on on using all unit testing features of SQL Developer?
Specifically I'm interested on what you cannot do with it (yet)
3) Also, I'm very interested on your plans regarding unit testing+refactoring in the future versions of SQL developer.
Thanks for a great product
- Fri Mar 26, 08:05:00 am GMT
- Sue said...
Thanks for that feedback. I'm getting useful feedback from these initial webcasts and hope to provide an easier way to keep you informed and make the webcasts available to all.(RSS is a good suggestion) Currently these are only available for users on Windows. Our next talk is planned as a SQL Developer Overview, but perhaps we need to bring the Unit Testing talk in sooner. I'll look into that.
- Fri Mar 26, 08:59:00 am GMT


text:
Posts Tagged 'American Idol'
Posh Spices up Idol
what's news today? victoria beckham will be a guest judge on american idol! good idea! the only problem is i like to keep track of victoria's (1) shoes (OMG her shoes!) and (2) her knees — they have an interesting set of wrinkles that seem to wax and wane and which everyone freaks out over but i think are fascinating (google search "victoria beckham's knees" if you don't believe me) and i won't be able to see either her shoes or her knees if they're tucked under the idol judges desk. maybe she'll stand on the desk, or take to the stage. just hope she doesn't wear the crazy boots with no heel, they freak me out!


text:
Hello ,
Can anyone tell me where I can find the level of detail that is seen in the Black Sails opening. The model details are amazing and want to see if such model are available.
Sorry I couldn't upload the images but here is the you tube version.
Thanks in advance


text:
Summer Band Evening Rehearsal 08/20/2012 - College Station HS Band & Guard Photos
College Station HS Band & Guard Photos
Featuring pictures of the College Station High School Band and Guard in College Station, TX.
Summer Band Evening Rehearsal 08/20/2012
August 20, 2012
Photos by Cody LeBlanc
Read More
Buy Photos
Disclaimer: Any unauthorized use of this website or images therein is not the responsibility of the College Station Independent School District, College Station HS Band & Guard, or the Webmaster. All images in the College Station Band & Guard Photos website are the property of the Cody LeBlanc, Webmaster. No digital copy may be downloaded or distributed without the written permission of the Webmaster. Print copies may be ordered through this website, but may not be re-sold without permission of the Webmaster.
This Photo
Photos from This Gallery
Buy Photo Package
Buy Gallery Download
Build a Book


text:
Buprenorphine Doctors
Treatment Centers
Suboxone Doctors
Suboxone Doctors in Missouri
Suboxone Doctors in Saint Louis, MO
Evan Schwarz
(314) 367-4362
660 South Euclid
Campus Box 8072
Saint Louis
Comprehensive Guide to Addiction Treatment Medications
How to Talk to a Loved One About Their Addiction
Can I Get Suboxone Treatment While Working Full Time?
Top 12 Questions to Ask A Suboxone Clinic Near Me
What Are the Side Effects of Suboxone?
How Long Does Suboxone Stay in Your System?
Confidentiality In Addiction Treatment
What is an Opioid?
Opioid Dependence
What is Buprenorphine?
What is Suboxone®?
What is Methadone?
Methadone vs Suboxone
Generic Suboxone
Benefits of Medication Assisted Treatment
More Articles
Survey Data
Resources for Doctors
Get Listed
Edit Listing
Marketing Tips
Doctor's Note – What is Being on Suboxone Like?
Written by: Dr. Justin Nepa
Suboxone is popularly known as a compound brand-named FDA approved prescription medication used to treat people addicted to opioids. It is a combination of two major component ingredients which are buprenorphine and naloxone. Buprenorphine acts an opioid antagonist, that partly inhibits the opiate receptors and curbs the addict's cravings while naloxone acts to discourage misusage, decrease diversion, and possible misuse. The combination of both agents helps...
Read More
Doctor's Note - Being Treated With Buprenorphine is not a Life's Sentence
Written by: Dr. Thomas Locke
You can get off of buprenorphine when the time is right without having to experience withdrawal. We began developing a tapering protocol five years ago that we have now perfected. I have made it available to all stable patients desirous of discontinuing buprenorphine. Understand that a percentage of people who are addicted to opiates will be better served with long term maintenance with medication assisted therapy. However, after adequate counseling and implementation of appropriate lifestyle c...
Read More
Doctor's Note - Choosing the Right Addiction Treatment for You
Written by: Dr. David Kushner
Opioids are frequently used for pain management but can be highly addictive. For some, opioids produce a sense of euphoria that is so intoxicating they find it hard to quit. The addiction can stem from other underlying issues like the environment, upbringing, and trauma. Intense anxiety. Persistent vomiting. Profuse Sweating. Insomnia. These are just a few of the symptoms people recovering from opioid addiction experience as they go through withdrawal. It shouldn't come as a surprise that 40 - 6...
Read More
What is Buprenorphine?
is an FDA approved opioid addiction treatment. Currently
® &
® are the only Buprenorphine medications approved by the FDA. Buprenorphine itself is opioid itself, but the maximal effects are less than other more dangerous opioid agonist like methadone and herion. By producing enough agonist, individuals taking Buprenophine that have become addicted to other opioids are able to discontinue abuse with minimized withdrawl side-effects. In 1965, K.W. Bentley discovered the class of compounds synthesized from an alkaloid of thebaine, the opium poppy plant, known as Papaver somniferum. Among these semi-synthetic compounds is Buprenorphine - the first in a series of opioid agonists. Many were more than 1000 times more effective than the analgesic, morphine. In the 1980s, Reckitt & Colman, today known as Reckitt Benckiser, introduced Buprenorphine hydrochloride for sale. Buprenorphine, an analgesic, was first made in sublingual tablets of 0.2 mg (Temgesic). It was also made as an injectable of 0.3 mg/ml (Buprenex).
Read More...
What is Suboxone®?
Suboxone® is the first narcotic drug available for prescription from a doctor's office for use in the treatment of
opioid dependence
under the Drug Addiction Treatment Act of 2000 or
. The primary active ingredient in
, which itself is a partial opioid agonist. This means the the opioid effects and withdrawal symptoms from Buprenorphine are less than other full opioid agonists such as heroin,
, morphine, oxycodone, hydrocodone, codeine, and others. Suboxone, taken as sublingual tablets or "under the tongue", has been shown to help in suppressing opioid withdrawal symptoms, decrease illicit opioid cravings and use, and under the correct supervision can help with overcoming an opioid dependence. Suboxone comes in 2mg and 8mg sizes of sublingual tablet form. Suboxone contains naloxone, which blocks the effects of medicines and drugs like methadone, morphine, and heroin. This is added to prevent people from injecting Suboxone and improper use of the medication. Injecting naloxone can cause withdrawal symptoms. Suboxone is the most commonly prescribed medication and given to patients during the maintenance phase of treatment.
is typically given during the first couple of treatment. Because Suboxone has a lower potential for overdose and abuse, unlike methadone, Certified Doctors are able to prescribe take home supplies of Suboxone in certain circumstances.
Read More...
The Benefits of Medication Assisted Treatment for Opioid Addiction
Since 1949, the 12-step program developed by Alcoholics Anonymous has been the dominant way we think about facing and fighting addiction. Many people have successfully used this community- and willpower-based approach to escaping addiction. However, countless others have tried it, and relapsed. With the powerful hold that opioid addiction has on so many people in America, it's time to face addiction with an equally powerful—and proven—method: medication-assisted treatment (or MAT). MAT is the practice of using drugs like suboxone and subutex to help people dependent on painkillers gradually ease themselves off their addiction. While these treatments have been available for many years, there is a stigma to relying on these medications to help fight addiction rather than the traditional willpower and community approach of a 12-step program. Here are five benefits to using an MAT approach to ending opioid dependency:
1. MAT is proven to have better results than conventional programs alone.
2. MAT stops withdrawal symptoms so patients can live a normal life.
3. MAT is flexible, allowing medication to be taken at home or in a clinic
4. MAT offers multiple drugs (like suboxone and buprenorphine) to find what works for you
5. It's easy to find an MAT/suboxone provider near you
Read More...


text:
This week the GeneaBloggers Radio show on Blog Talk Radio will be featuring a a "Back to School" theme and focusing on educational opportunities for genealogists. Join host Thomas MacEntee tonight, Friday, August 26, 2011 starting at 10pm Eastern, 9pm Central, 8pm Mountain and 7pm Pacific. Thomas will be talking to Louise St. Denis of the National Institute of Genealogical Studies; Angela McGhie (yours truly) of the ProGen Study Group; and Pat Stamm of the National Genealogical Society Home Study Course.
See Geneabloggers Radio to read about this episode or to tune in tonight. If you miss it, you can listen to the program or download it later on iTunes (search for Geneabloggers under Podcasts). Tune in to the radio show every Friday night for interviews with genealogists on a variety of topics.


text:
Fibre Channel Hard Drive
The Cheetah 10K.6 is Seagate's sixth-generation 10K RPM high performance, high capacity disc drive. We have two available for $75 each.
Contact Information2600 K Ave. Ste. 250 Texas City, Texas 75074
Contact Name: Sobhi Almusa
Phone: 469-441-4678
Fax: 214-260-6016
E-mail: send an e-mail
The Cheetah 10K.6 is Seagate's sixth-generation 10K RPM high performance, high capacity disc drive. With the fastest interfaces, the highest reliability and the most mature product design, the Cheetah 10K.6 enables the lowest ownership cost. In data intensive environments, increasing the capacity per disc drive lowers ownership costs by deploying fewer systems that use less cubic feet of space requiring less infrastructure such as cabinets, HBAs and less wattage of power. spacer Features Low Ownership Cost Large capacities enables greater storage per cubic foot meaning that fewer systems are deployed, less space is utilized and operating costs are lowered. The Fastest 10K Cheetah ever! 25% improved Data Transfer Rate and nearly a 10% improvement in Seek Times over the prior generation Cheetah 73LP. Several Millennia of Engineering & Manufacturing Experience Seagate is a dependable, consistent partner offering the best technology manufactured in a highly automated factory assuring unmatched reliability. Highest Reliability Most Mature Product Design Data integrity assured 10,000 RPM spindle speed Fast access to a variety of storage applications The Most Advanced Interfaces Ultra320 SCSI & 2Gbit/sec Fibre Channel interfaces allow the fast operation of more drives than ever at the highest speeds possible. Distinctions * The Highest Reliability Rating in the Disc Drive Industry * Consistently High Investment in Research & Development Creates the Highest Technology Products * Unmatched Design and Manufacturing Experience * The Seagate Exclusive Design Service Center (DSC) Can Lower the Cost of Deploying Storage Systems * The Lowest Cost of Ownership 10K Storage Solution * The Cheetah Brand of Disc Drives are the Preferred Disc Drive for Storage Area Networks (SAN)


text: Green Frog Art was founded on the principal that wall art is one of the most important parts of a child's room decor. Art should be of high quality and inspire creativity, imagination, dreams and have visual appeal for parents and child alike. Your choice in art should reflect your personality and your child's and an art purchase should be considered something to grow with and pass along to future generations. The artists represented are highly collectible professionals and the materials utilized in printing and framing are of the highest quality for ultimate archivability and years of enjoyment.


text:
Wayne Law student awarded federal court's scholarship
DETROIT – Samuel Kokoszka, who will start his second year at Wayne State University Law School this fall, has been awarded the Mark A. Miller Memorial Fund Scholarship.
The award is given each year by the U.S. District Court for the Eastern District of Michigan to a summer intern of a judicial officer at the court. The scholarship honors the memory of Mark A. Miller, who was a law clerk to U.S. District Judge George Caram Steeh. Miller, a Milford resident, died in 2010 at age 53 following serious health issues.
"Evident in Mark's daily life was his respect for others, his sense of humor, courtesy and professionalism," states a description of the scholarship provided by the court. "As much as possible, we seek recipients who share Mark's values and passion."
The award is a $1,500 stipend to offset out-of-pocket expenses during the intern's tenure with the court.
Kokoszka, who lives in Detroit, said he loves the city and chose Wayne Law because of its urban location and because of the school's extensive and involved alumni network.
"I'm not sure what I want to do when I graduate, but I think I want to work in a large Detroit firm, and I'm pretty sure I want to litigate," the student said.
He earned his bachelor's degree cum laude in political science from Central Michigan University with a minor in economics.
This summer, he's an intern for U.S. District Judge Nancy Edmunds, a Wayne law alumna. He spent the summer before law school working for NOVA Environmental in Ann Arbor as a project manager. Kokoszka volunteers as a mentor for incoming students at Wayne Law and also served as a mentor to high school students from Detroit's Cody Academy of Public Leadership for the "Why the D? Detroit Youth Offer Solutions" symposium in May at the law school.


text:
Connecticut police released a trove of documents and files Friday from the investigation into last year's Sandy Hook Elementary School shooting in Newtown that left 20 children, six adults and the gunman dead.
The release of thousands of pages of documents could shed some new light on a case that has already been explored exhaustively, but it also effectively closes the book on one of the worst school shootings in American history. A report published last month at the conclusion of the investigation said authorities could not answer the painful question of why 20-year Adam Lanza killed his mother and then 20 children and six adults at the school in Newtown before turning the gun on himself. But the investigation report provided a detailed lens into Lanza's life and into the tragic events last December. Recordings of 911 calls from that day were also recently released.
The files released online Friday include thousands of pages of documents, photos, videos and recordings of 911 calls obtained over the course of the investigation, some of which was described in or released alongside last month's report.
Investigators, who gathered evidence from Lanza's home and interviewed his family, teachers, and others around him, found that Lanza had mental health problems as well as a fascination with mass shootings, though he displayed no "threatening tendencies," according to last month's report.
"The investigation of this incident is unparalleled in the one hundred and ten year history of the Connecticut State Police," Reuben Bradford, commissioner of the state Department of Emergency Services and Public Protection, wrote in a letter accompanying the documents released Friday.
"I hope that the release of this report, though painful, will allow those who have been affected by it to continue in their personal process foe haling, and will provide helpful information that can be put to use to prevent such tragedies in the future," Bradford wrote.
Bradford said in the letter that the investigation is closed and would be reopened "in the unlikely event" that substantive new information arises.
Some information, including names of children and witnesses and images depicted the deceased, has been redacted from the public documents according to law.
The documents can be seen here.
(MORE: What We Learned From The Investigation On The Sandy Hook Shooting)


text:
The Affective Domain in the Classroom
Resources for learning more about the affective domain
- What is the affective domain? Includes background information, definitions and relevance of the affective domain in teaching.
- A framework for applying the affective domain in science education, including a summary of some research on the topic and relevant questions to consider.
- Literature review of affective domain books and journal articles, including teaching methods, measuring affective outcomes, and examples in the geosciences.
- Learn how to recognize and overcome affective challenges for teaching controversial topics including teaching evolution and teaching environmental issues.
- Read anecdotal stories from faculty about affective domain dilemmas and real-life challenges in the classroom. Solutions to the dilemmas have been submitted by other faculty.
- See examples of assessment methods useful for evaluating the affective domain.
- Materials from the 2007 workshop, Student Motivations and Attitudes: The Role of the Affective Domain in Geoscience Learning
- The workshop program contains links to presentations, summaries of the discussions and more.
- Posters from the workshop, describing relevant teaching or research experience with the affective domain.
- Essays about the affective domain by workshop participants.
Share your knowledge and experienceWe are gathering references, classroom materials and assessment methods that are useful for learning about the affective domain. Please help us in our efforts to distribute quality teaching materials by sharing activities that you have created or references that you use.
Join the Discussion
The Affective Domain email list - Read the email list discussion, join the email list or unsubscribe.