text:
Denial-of-service attack
In computing, a denial-of-service (DoS) or distributed denial-of-service (DDoS) attack is an attempt to make a machine or network resource unavailable to its intended users.
Although the means to carry out, the motives for, and targets of a DoS attack vary, it generally consists of efforts to temporarily or indefinitely interrupt or suspend services of a host connected to the Internet.
As clarification, distributed denial-of-service attacks are sent by two or more people, or bots, and denial-of-service attacks are sent by one person or system. As of 2014, the frequency of recognized DDoS attacks had reached an average rate of 28 per hour.[1]
Perpetrators of DoS attacks typically target sites or services hosted on high-profile web servers such as banks, credit card payment gateways, and even root nameservers.
Denial-of-service threats are also common in business,[2] and are sometimes responsible for website attacks.[3]
This technique has now seen extensive use in certain games, used by server owners, or disgruntled competitors on games, such as popular Minecraft servers. Increasingly, DoS attacks have also been used as a form of resistance. Richard Stallman has stated that DoS is a form of 'Internet Street Protests'.[4] The term is generally used relating to computer networks, but is not limited to this field; for example, it is also used in reference to CPU resource management.[5]
One common method of attack involves saturating the target machine with external communications requests, so much so that it cannot respond to legitimate traffic, or responds so slowly as to be rendered essentially unavailable. Such attacks usually lead to a server overload. In general terms, DoS attacks are implemented by either forcing the targeted computer(s) to reset, or consuming its resources so that it can no longer provide its intended service or obstructing the communication media between the intended users and the victim so that they can no longer communicate adequately.
Denial-of-service attacks are considered violations of the Internet Architecture Board's Internet proper use policy, and also violate the acceptable use policies of virtually all Internet service providers. They also commonly constitute violations of the laws of individual nations.
The first demonstrated DDoS attack was introduced by well known hacker Khan C. Smith during a 1998 illegal Defcon event and later exposed for its use Botnet mechanisms during a lawsuit filed by Earthlink[6] which claims has caused billions in economic damages.
- 1 Symptoms and manifestations
2 Methods of attack
- 2.1 Internet Control Message Protocol (ICMP) flood
- 2.2 (S)SYN flood
- 2.3 Teardrop attacks
- 2.4 Peer-to-peer attacks
- 2.5 Asymmetry of resource utilization in starvation attacks
- 2.6 Permanent denial-of-service attacks
- 2.7 Application-level floods
- 2.8 Nuke
- 2.9 HTTP POST DDOS attack
- 2.10 R-U-Dead-Yet? (RUDY)
- 2.11 Slow Read attack
- 2.12 Distributed attack
- 2.13 Reflected / spoofed attack
- 2.14 Telephony denial-of-service
- 2.15 Unintentional denial-of-service
- 2.16 Denial-of-service Level II
- 2.17 Advanced Persistent DoS (APDoS)
- 3 Performing DoS-attacks
- 4 Handling
- 5 Side effects of DoS attacks
- 6 Legality
- 7 See also
- 8 References
- 9 Further reading
- 10 External links
Symptoms and manifestations
The United States Computer Emergency Readiness Team (US-CERT) defines symptoms of denial-of-service attacks to include:
- Unusually slow network performance (opening files or accessing web sites)
- Unavailability of a particular web site
- Inability to access any web site
- Dramatic increase in the number of spam emails received—(this type of DoS attack is considered an e-mail bomb)[7]
- Disconnection of a wireless or wired internet connection
- Long term denial of access to the web or any internet services
Denial-of-service attacks can also lead to problems in the network 'branches' around the actual computer being attacked. For example, the bandwidth of a router between the Internet and a LAN may be consumed by an attack, compromising not only the intended computer, but also the entire network or other computers on the LAN.[8]
If the attack is conducted on a sufficiently large scale, entire geographical regions of Internet connectivity can be compromised without the attacker's knowledge or intent by incorrectly configured or flimsy network infrastructure
Methods of attack
A denial-of-service attack is characterized by an explicit attempt by attackers to prevent legitimate users of a service from using that service. There are two general forms of DoS attacks: those that crash services and those that flood services.
A DoS attack can be perpetrated in a number of ways. Attacks can fundamentally be classified into five families:
- Consumption of computational resources, such as bandwidth, memory, disk space, or processor time.
- Disruption of configuration information, such as routing information.
- Disruption of state information, such as unsolicited resetting of TCP sessions.
- Disruption of physical network components.
- Obstructing the communication media between the intended users and the victim so that they can no longer communicate adequately.
A DoS attack may include execution of malware intended to:
- Max out the processor's usage, preventing any work from occurring.
- Trigger errors in the microcode of the machine.
- Trigger errors in the sequencing of instructions, so as to force the computer into an unstable state or lock-up.
- Exploit errors in the operating system, causing resource starvation and/or thrashing, i.e. to use up all available facilities so no real work can be accomplished or it can crash the system itself
- Crash the operating system itself.
In most cases DoS attacks involve forging of IP sender addresses (IP address spoofing) so that the location of the attacking machines cannot easily be identified and to prevent filtering of the packets based on the source address.
Internet Control Message Protocol (ICMP) flood
A smurf attack is one particular variant of a flooding DDoS attack on the public Internet. It relies on misconfigured network devices that allow packets to be sent to all computer hosts on a particular network via the broadcast address of the network, rather than a specific machine. The network then serves as a smurf amplifier. In such an attack, the perpetrators will send large numbers of IP packets with the source address faked to appear to be the address of the victim. The network's bandwidth is quickly used up, preventing legitimate packets from getting through to their destination.[9] To combat denial-of-service attacks on the Internet, services like the Smurf Amplifier Registry have given network service providers the ability to identify misconfigured networks and to take appropriate action such as filtering.
Ping flood is based on sending the victim an overwhelming number of ping packets, usually using the "ping" command from Unix-like hosts (the -t flag on Windows systems is much less capable of overwhelming a target, also the -l (size) flag does not allow sent packet size greater than 65500 in Windows). It is very simple to launch, the primary requirement being access to greater bandwidth than the victim.
Ping of death is based on sending the victim a malformed ping packet, which might lead to a system crash.
(S)SYN flood
Teardrop attacks
A teardrop attack involves sending mangled IP fragments with overlapping, over-sized payloads to the target machine. This can crash various operating systems because of a bug in their TCP/IP fragmentation re-assembly code.[11] Windows 3.1x, Windows 95 and Windows NT operating systems, as well as versions of Linux prior to versions 2.0.32 and 2.1.63 are vulnerable to this attack.
Around September 2009, a vulnerability in Windows Vista was referred to as a "teardrop attack", but the attack targeted SMB2 which is a higher layer than the TCP packets that teardrop used.[12][13]
Peer-to-peer attacks
Attackers have found a way to exploit a number of bugs in peer-to-peer servers to initiate DDoS attacks. The most aggressive of these peer-to-peer-DDoS attacks exploits DC++. Peer-to-peer attacks are different from regular botnet-based attacks. With peer-to-peer there is no botnet and the attacker does not have to communicate with the clients it subverts. Instead, the attacker acts as a "puppet master," instructing clients of large peer-to-peer file sharing hubs to disconnect from their peer-to-peer network and to connect to the victim's website instead. As a result, several thousand computers may aggressively try to connect to a target website. While a typical web server can handle a few hundred connections per second before performance begins to degrade, most web servers fail almost instantly under five or six thousand connections per second. With a moderately large peer-to-peer attack, a site could potentially be hit with up to 750,000 connections in short order. The targeted web server will be plugged up by the incoming connections.
While peer-to-peer attacks are easy to identify with signatures, the large number of IP addresses that need to be blocked (often over 250,000 during the course of a large-scale attack) means that this type of attack can overwhelm mitigation defenses. Even if a mitigation device can keep blocking IP addresses, there are other problems to consider. For instance, there is a brief moment where the connection is opened on the server side before the signature itself comes through. Only once the connection is opened to the server can the identifying signature be sent and detected, and the connection torn down. Even tearing down connections takes server resources and can harm the server.
This method of attack can be prevented by specifying in the peer-to-peer protocol which ports are allowed or not. If port 80 is not allowed, the possibilities for attack on websites can be very limited.
Asymmetry of resource utilization in starvation attacks
An attack which is successful in consuming resources on the victim computer must be either:
carried out by an attacker with greater resources, by either:
- controlling a computer with greater computation power or, more commonly, large network bandwidth
- controlling a large number of computers and directing them to attack as a group. A DDoS attack is the primary example of this.
- taking advantage of a property of the operating system or applications on the victim system which enables an attack consuming vastly more of the victim's resources than the attacker's (an asymmetric attack). Smurf attack, SYN flood, Sockstress and NAPTHA attack are all asymmetric attacks.
An attack may utilize a combination of these methods in order to magnify its power.
Permanent denial-of-service attacks
A permanent denial-of-service (PDoS), also known loosely as phlashing,[14] is an attack that damages a system so badly that it requires replacement or reinstallation of hardware.[15] Unlike the distributed denial-of-service attack, a PDoS attack exploits security flaws which allow remote administration on the management interfaces of the victim's hardware, such as routers, printers, or other networking hardware. The attacker uses these vulnerabilities to replace a device's firmware with a modified, corrupt, or defective firmware image—a process which when done legitimately is known as flashing. This therefore "bricks" the device, rendering it unusable for its original purpose until it can be repaired or replaced.
The PDoS is a pure hardware targeted attack which can be much faster and requires fewer resources than using a botnet in a DDoS attack. Because of these features, and the potential and high probability of security exploits on Network Enabled Embedded Devices (NEEDs), this technique has come to the attention of numerous hacker communities.
PhlashDance is a tool created by Rich Smith (an employee of Hewlett-Packard's Systems Security Lab) used to detect and demonstrate PDoS vulnerabilities at the 2008 EUSecWest Applied Security Conference in London.[16]
Application-level floods
Various DoS-causing exploits such as buffer overflow can cause server-running software to get confused and fill the disk space or consume all available memory or CPU time.
Other kinds of DoS rely primarily on brute force, flooding the target with an overwhelming flux of packets, oversaturating its connection bandwidth or depleting the target's system resources. Bandwidth-saturating floods rely on the attacker having higher bandwidth available than the victim; a common way of achieving this today is via distributed denial-of-service, employing a botnet. Other floods may use specific packet types or connection requests to saturate finite resources by, for example, occupying the maximum number of open connections or filling the victim's disk space with logs.
A "banana attack" is another particular type of DoS. It involves redirecting outgoing messages from the client back onto the client, preventing outside access, as well as flooding the client with the sent packets.
An attacker with shell-level access to a victim's computer may slow it until it is unusable or crash it by using a fork bomb.
A kind of application-level DoS attack is XDoS (or XML DoS) which can be controlled by modern web application firewalls (WAFs).
A Nuke is an old denial-of-service attack against computer networks consisting of fragmented or otherwise invalid ICMP packets sent to the target, achieved by using a modified ping utility to repeatedly send this corrupt data, thus slowing down the affected computer until it comes to a complete stop.
A specific example of a nuke attack that gained some prominence is the WinNuke, which exploited the vulnerability in the NetBIOS handler in Windows 95. A string of out-of-band data was sent to TCP port 139 of the victim's machine, causing it to lock up and display a Blue Screen of Death (BSOD).
HTTP POST DDOS attack
First discovered in 2009, the HTTP POST attack sends a complete, legitimate HTTP POST header, which includes a 'Content-Length' field to specify the size of the message body to follow. However, the attacker then proceeds to send the actual message body at an extremely slow rate (e.g. 1 byte/110 seconds). Due to the entire message being correct and complete, the target server will attempt to obey the 'Content-Length' field in the header, and wait for the entire body of the message to be transmitted, hence slowing it down.[17] Further combined with the fact that Apache will, by default, accept requests up to 2GB in size, this attack can be particularly powerful. HTTP POST attacks are difficult to differentiate from legitimate connections, and are therefore able to bypass some protection systems. OWASP, an open source web application security project, has released a testing tool to test the security of servers against this type of attack.
R-U-Dead-Yet? (RUDY)
This attack targets web applications by starvation of available sessions on the web server. Much like Slowloris, RUDY keeps sessions at halt using never-ending POST transmissions and sending an arbitrarily large content-length header value.
Slow Read attack
Slow Read attack sends legitimate application layer requests but reads responses very slowly, thus trying to exhaust the server's connection pool. Slow reading is achieved by advertising a very small number for the TCP Receive Window size and at the same time by emptying clients' TCP receive buffer slowly. That naturally ensures a very low data flow rate.
Distributed attack
A distributed denial-of-service (DDoS) attack occurs when multiple systems flood the bandwidth or resources of a targeted system, usually one or more web servers.[18] Such an attack is often the result of multiple compromised systems (for example a botnet) flooding the targeted system with traffic. When a server is overloaded with connections, new connections can no longer be accepted. The major advantages to an attacker of using a distributed denial-of-service attack are that multiple machines can generate more attack traffic than one machine, multiple attack machines are harder to turn off than one attack machine, and that the behavior of each attack machine can be stealthier, making it harder to track and shut down. These attacker advantages cause challenges for defense mechanisms. For example, merely purchasing more incoming bandwidth than the current volume of the attack might not help, because the attacker might be able to simply add more attack machines. This after all will end up completely crashing a website for periods of time.
Malware can carry DDoS attack mechanisms; one of the better-known examples of this was MyDoom. Its DoS mechanism was triggered on a specific date and time. This type of DDoS involved hardcoding the target IP address prior to release of the malware and no further interaction was necessary to launch the attack.
A system may also be compromised with a Anonymous.
These collections of systems compromisers are known as botnets. DDoS tools like Stacheldraht still use classic DoS attack methods centered on IP spoofing and amplification like smurf attacks and fraggle attacks (these are also known as bandwidth consumption attacks). SYN floods (also known as resource starvation attacks) may also be used. Newer tools can use DNS servers for DoS purposes. Unlike MyDoom's DDoS mechanism, botnets can be turned against any IP address. Script kiddies use them to deny the availability of well known websites to legitimate users.[20] More sophisticated attackers use DDoS tools for the purposes of extortion – even against their business rivals.[21]
Simple attacks such as SYN floods may appear with a wide range of source IP addresses, giving the appearance of a well distributed DoS. These flood attacks do not require completion of the TCP three way handshake and attempt to exhaust the destination SYN queue or the server bandwidth. Because the source IP addresses can be trivially spoofed, an attack could come from a limited set of sources, or may even originate from a single host. Stack enhancements such as syn cookies may be effective mitigation against SYN queue flooding, however complete bandwidth exhaustion may require involvement.
If an attacker mounts an attack from a single host it would be classified as a DoS attack. In fact, any attack against availability would be classed as a denial-of-service attack. On the other hand, if an attacker uses many systems to simultaneously launch attacks against a remote host, this would be classified as a DDoS attack.
UK's GCHQ has tools built for DDOS, named PREDATORS FACE and ROLLING THUNDER.[22]
Reflected / spoofed attack
A distributed denial-of-service attack may involve sending forged requests of some type to a very large number of computers that will reply to the requests. Using Internet Protocol address spoofing, the source address is set to that of the targeted victim, which means all the replies will go to (and flood) the target. (This reflected attack form is sometimes called a "DRDOS".[23])
ICMP Echo Request attacks (Smurf Attack) can be considered one form of reflected attack, as the flooding host(s) send Echo Requests to the broadcast addresses of mis-configured networks, thereby enticing hosts to send Echo Reply packets to the victim. Some early DDoS programs implemented a distributed form of this attack.
Many services can be exploited to act as reflectors, some harder to block than others.[24] US-CERT have observed that different services implies in different amplification factors, as you can see below:[25]
|Bandwidth Amplification Factor
|up to 179 [26]
|Quake Network Protocol
|Steam Protocol
DNS amplification attacks involve a new mechanism that increased the amplification effect, using a much larger list of DNS servers than seen earlier.[27][28] SNMP and NTP can also be exploited as reflector in an amplification attack.
Telephony denial-of-service
Voice over IP has made abusive origination of large numbers of telephone voice calls inexpensive and readily automated while permitting call origins to be misrepresented through caller ID spoofing.
According to the US Federal Bureau of Investigation, telephony denial-of-service (TDoS) has appeared as part of various fraudulent schemes:
- A scammer contacts the victim's banker or broker, impersonating the victim to request a funds transfer. The banker's attempt to contact the victim for verification of the transfer fails as the victim's telephone lines are being flooded with thousands of bogus calls, rendering the victim unreachable.[29]
- A scammer contacts consumers with a bogus claim to collect an outstanding payday loan for thousands of dollars. When the consumer objects, the scammer retaliates by flooding the victim's employer with thousands of automated calls. In some cases, displayed caller ID is spoofed to impersonate police or law enforcement agencies.[30]
- A scammer contacts consumers with a bogus debt collection demand and threatens to send police; when the victim balks, the scammer floods local police numbers with calls on which caller ID is spoofed to display the victims number. Police soon arrive at the victim's residence attempting to find the origin of the calls.
Telephony denial-of-service can exist even without Internet telephony. In the 2002 New Hampshire Senate election phone jamming scandal, telemarketers were used to flood political opponents with spurious calls to jam phone banks on election day. Widespread publication of a number can also flood it with enough calls to render it unusable, as happened with multiple +1-area code-867-5309 subscribers inundated by hundreds of misdialed calls daily in response to a popular song 867-5309/Jenny.
TDoS differs from other telephone harassment (such as prank calls and obscene phone calls) by the number of calls originated; by occupying lines continuously with repeated automated calls, the victim is prevented from making or receiving both routine and emergency telephone calls.
Related exploits include SMS flooding attacks and black fax or fax loop transmission.
Unintentional denial-of-service
This describes a situation where a website ends up denied, not due to a deliberate attack by a single individual or group of individuals, but simply due to a sudden enormous spike in popularity. This can happen when an extremely popular website posts a prominent link to a second, less well-prepared site, for example, as part of a news story. The result is that a significant proportion of the primary site's regular users – potentially hundreds of thousands of people – click that link in the space of a few hours, having the same effect on the target website as a DDoS attack. A VIPDoS is the same, but specifically when the link was posted by a celebrity.
When Michael Jackson died in 2009, websites such as Google and Twitter slowed down or even crashed.[31] Many sites' servers thought the requests were from a virus or spyware trying to cause a denial-of-service attack, warning users that their queries looked like "automated requests from a computer virus or spyware application".[32]
News sites and link sites – sites whose primary function is to provide links to interesting content elsewhere on the Internet – are most likely to cause this phenomenon. The canonical example is the Slashdot effect when receiving traffic from Slashdot. Sites such as Reddit, Digg, the Drudge Report, Fark, Something Awful, and the webcomic Penny Arcade have their own corresponding "effects", known as "the Reddit hug of death", "the Digg effect", being "drudged", "farking", "goonrushing" and "wanging"; respectively.
Routers have also been known to create unintentional DoS attacks, as both D-Link and Netgear routers have created NTP vandalism by flooding NTP servers without respecting the restrictions of client types or geographical limitations.
Similar unintentional denials-of-service can also occur via other media, e.g. when a URL is mentioned on television. If a server is being indexed by Google or another search engine during peak periods of activity, or does not have a lot of available bandwidth while being indexed, it can also experience the effects of a DoS attack.
Legal action has been taken in at least one such case. In 2006, Universal Tube & Rollform Equipment Corporation sued YouTube: massive numbers of would-be youtube.com users accidentally typed the tube company's URL, utube.com. As a result, the tube company ended up having to spend large amounts of money on upgrading their bandwidth.[33] The company appears to have taken advantage of the situation, with utube.com now containing ads for advertisement revenue.
In March 2014, after Malaysia Airlines Flight 370 went missing, DigitalGlobe launched a crowdsourcing service on which users could help search for the missing jet in satellite images. The response overwhelmed the company's servers.[34]
Denial-of-service Level II
The goal of DoS L2 (possibly DDoS) attack is to cause a launching of a defense mechanism which blocks the network segment from which the attack originated. In case of distributed attack or IP header modification (that depends on the kind of security behavior) it will fully block the attacked network from Internet, but without system crash.
Advanced Persistent DoS (APDoS)
An APDoS is more likely to be perpetrated by "advanced threat actors" who are well resourced, exceptionally skilled and have access to substantial commercial grade computer resources and capacity. APDoS attacks represent a clear and emerging threat needing specialised Monitoring and Incident Response services and the defensive capabilities of specialised DDoS mitigation service providers. This type of attack involves massive network layer DDoS attacks through to focused application layer (HTTP) floods, followed by repeated (at varying intervals) SQLI and XSS attacks. Typically, the perpetrators can simultaneously use from 2 to 5 attack vectors involving up to several tens of millions requests per second, often accompanied by large SYN floods that can not only attack the victim but also any service provider implementing any sort of managed DDoS mitigation capability. These attacks can persist for several weeks- the longest continuous period noted so far lasted 38 days. This APDoS attack involved approximately 50+ Petabits (51,000+ terabits) of malicious traffic. Attackers in this scenario may (or often will) tactically switch between several targets to create a diversion to evade defensive DDoS countermeasures but all the while eventually converging the main thrust of the attack to a single victim. In this scenario, threat actors with continuous access to several very powerful network resources are capable of sustaining a prolonged campaign generating enormous levels of un-amplified DDoS traffic.
APDoS attacks are characterised by:
- Advanced Reconnaissance (pre-attack OSINT and extensive decoyed scanning crafted to evade detection over long periods)
- Tactical Execution (Attack with a primary and secondary victims but focus is on Primary)
- Explicit Motivation (a calculated end game/goal target)
- Large Computing Capacity (access to substantial computer power and network bandwidth resources)
- Simultaneous Multi-threaded ISO layer attacks (sophisticated tools operating at layers 3 through 7)
- Persistence over extended periods (Utilising all the above into a concerted, well managed attack across a range of targets
Performing DoS-attacks
A wide array of programs are used to launch DoS-attacks. Most of these programs are completely focused on performing DoS-attacks, while others are also true packet injectors, able to perform other tasks as well. Such tools are intended for benign use, but they can also be used in launching attacks on victim networks.
Defensive responses to denial-of-service attacks typically involves the use of a combination of attack detection, traffic classification and response tools, aiming to block traffic that they identify as illegitimate and allow traffic that they identify as legitimate.[36] A list of prevention and response tools is provided below:
Firewalls can be set up to have simple rules such to allow or deny protocols, ports or IP addresses. In the case of a simple attack coming from a small number of unusual IP addresses for instance, one could put up a simple rule to drop (deny) all incoming traffic from those attackers.
More complex attacks will however be hard to block with simple rules: for example, if there is an ongoing attack on port 80 (web service), it is not possible to drop all incoming traffic on this port because doing so will prevent the server from serving legitimate traffic.[37] Additionally, firewalls may be too deep in the network hierarchy. Routers may be affected before the traffic gets to the firewall. Nonetheless, firewalls can effectively prevent users from launching simple flooding type attacks from machines behind the firewall.
Some stateful firewalls, like OpenBSD's pf(4) packet filter, can act as a proxy for connections: the handshake is validated (with the client) instead of simply forwarding the packet to the destination. It is available for other BSDs as well. In that context, it is called "synproxy".
Most switches have some rate-limiting and ACL capability. Some switches provide automatic and/or system-wide rate limiting, traffic shaping, delayed binding (TCP splicing), deep packet inspection and Bogon filtering (bogus IP filtering) to detect and remediate denial-of-service attacks through automatic rate filtering and WAN Link failover and balancing.
These schemes will work as long as the DoS attacks are something that can be prevented by using them. For example SYN flood can be prevented using delayed binding or TCP splicing. Similarly content based DoS may be prevented using deep packet inspection. Attacks originating from dark addresses or going to dark addresses can be prevented using bogon filtering. Automatic rate filtering can work as long as you have set rate-thresholds correctly and granularly. Wan-link failover will work as long as both links have DoS/DDoS prevention mechanism.
Similar to switches, routers have some rate-limiting and ACL capability. They, too, are manually set. Most routers can be easily overwhelmed under a DoS attack. Cisco IOS has features that prevent flooding, i.e. example settings.[38]
Application front end hardware
Application front end hardware is intelligent hardware placed on the network before traffic reaches the servers. It can be used on networks in conjunction with routers and switches. Application front end hardware analyzes data packets as they enter the system, and then identifies them as priority, regular, or dangerous. There are more than 25 bandwidth management vendors.
IPS based prevention
Intrusion-prevention systems (IPS) are effective if the attacks have signatures associated with them. However, the trend among the attacks is to have legitimate content but bad intent. Intrusion-prevention systems which work on content recognition cannot block behavior-based DoS attacks.
An ASIC based IPS may detect and block denial-of-service attacks because they have the processing power and the granularity to analyze the attacks and act like a circuit breaker in an automated way.
A rate-based IPS (RBIPS) must analyze traffic granularly and continuously monitor the traffic pattern and determine if there is traffic anomaly. It must let the legitimate traffic flow while blocking the DoS attack traffic.[39]
DDS based defense
More focused on the problem than IPS, a DoS Defense System (DDS) is able to block connection-based DoS attacks and those with legitimate content but bad intent. A DDS can also address both protocol attacks (such as Teardrop and Ping of death) and rate-based attacks (such as ICMP floods and SYN floods).
Blackholing and sinkholing
With blackholing, all the traffic to the attacked DNS or IP address is sent to a "black hole" (null interface or a non-existent server). To be more efficient and avoid affecting network connectivity, it can be managed by the ISP.[40]
Sinkholing routes traffic to a valid IP address which analyzes traffic and rejects bad packets. Sinkholing is not efficient for most severe attacks.
Clean pipes
All traffic is passed through a "cleaning center" or a "scrubbing center" via various methods such as proxies, tunnels or even direct circuits, which separates "bad" traffic (DDoS and also other common internet attacks) and only sends good traffic beyond to the server. The provider needs central connectivity to the Internet to manage this kind of service unless they happen to be located within the same facility as the "cleaning center" or "scrubbing center".[41]
Arbor Networks, Neustar Inc, Prolexic Technologies, Tata Communications, AT&T and Verisign are examples of providers of this service.[42][43][44][45][46][47]
Side effects of DoS attacks
In computer network security, backscatter is a side-effect of a spoofed denial-of-service attack. In this kind of attack, the attacker spoofs (or forges) the source address in IP packets sent to the victim. In general, the victim machine cannot distinguish between the spoofed packets and legitimate packets, so the victim responds to the spoofed packets as it normally would. These response packets are known as backscatter.[48]
If the attacker is spoofing source addresses randomly, the backscatter response packets from the victim will be sent back to random destinations. This effect can be used by network telescopes as indirect evidence of such attacks.
The term "backscatter analysis" refers to observing backscatter packets arriving at a statistically significant portion of the IP address space to determine characteristics of DoS attacks and victims.
In the Police and Justice Act 2006, the United Kingdom specifically outlawed denial-of-service attacks and set a maximum penalty of 10 years in prison.[49]
In the US, denial-of-service attacks may be considered a federal crime under the Computer Fraud and Abuse Act with penalties that include years of imprisonment.[50] Many other countries have similar laws.
The Computer Crime and Intellectual Property Section of the US Department of Justice handles cases of (D)DoS. The US situation is under court ruling with a case in California.[51]
On January 7, 2013, Anonymous posted a petition on the whitehouse.gov site asking that DDoS be recognized as a legal form of protest similar to the Occupy protests.[52]
See also
- Application layer DDoS attack
- Billion laughs
- DDoS mitigation
- DoSnet
- Hit-and-run DDoS
- Industrial espionage
- Intrusion detection system
- Low Orbit Ion Cannon
- Network intrusion detection system
- ReDoS
- Virtual sit-in
- Wireless signal jammer
- ^ Preimesberger, Chris (May 28, 2014). "DDoS Attack Volume Escalates as New Methods Emerge". eWeek.
- ^ Brand.com President Mike Zammuto Reveals Blackmail Attempt
- ^ Brand.com's Mike Zammuto Discusses Meetup.com Extortion
- ^ "The Philosophy of Anonymous". Radicalphilosophy.com. 2010-12-17. Retrieved 2013-09-10.
- ^ Shabtai, A.; Fledel, Y.; Kanonov, U.; Elovici, Y.; Dolev, S.; Glezer, C. (March–April 2010). "Google Android: A Comprehensive Security Assessment". IEEE Security & Privacy Magazine 8 (2): 35–44. PDF
- ^ Credeur, Mary (July 2012). "EarthLink wins $25 million lawsuit against junk e-mailer". Bizjournals.
- ^ McDowell, Mindi (November 4, 2009). "Cyber Security Tip ST04-015 - Understanding Denial-of-Service Attacks".
- ^ Kumar, S. (2010). "Denial of Service Due to Direct and Indirect ARP Storm Attacks in LAN Environment*". Journal of Information Security 01 (2): 88–80. (PDF)
- ^ "Types of DDoS Attacks". Distributed Denial of Service Attacks(DDoS) Resources, Pervasive Technology Labs at Indiana University. Advanced Networking Management Lab (ANML). December 3, 2009. Archived from the original on 2010-09-14. Retrieved December 11, 2013.
- ^ "RFC 4987 – TCP SYN Flooding Attacks and Common Mitigations". Tools.ietf.org. August 2007. Retrieved 2011-12-02.
- ^ "CERT Advisory CA-1997-28 IP Denial-of-Service Attacks". CERT. 1998. Retrieved July 18, 2014.
- ^ "'"Windows 7, Vista exposed to 'teardrop attack. ZDNet. September 8, 2009. Retrieved 2013-12-11.
- ^ "Microsoft Security Advisory (975497): Vulnerabilities in SMB Could Allow Remote Code Execution". Microsoft.com. September 8, 2009. Retrieved 2011-12-02.
- ^ Leyden, John (2008-05-21). "Phlashing attack thrashes embedded systems". The Register. Retrieved 2009-03-07.
- ^ Jackson Higgins, Kelly (May 19, 2008). "Permanent Denial-of-Service Attack Sabotages Hardware". Dark Reading. Archived from the original on December 8, 2008.
- ^ "EUSecWest Applied Security Conference: London, U.K.". EUSecWest. 2008. Archived from the original on 2009-02-01.
- ^ "OWASP Plan - Strawman - Layer_7_DDOS.pdf". Open Web Application Security Project. 18 March 2014. Retrieved 18 March 2014.
- ^ Taghavi Zargar, Saman (November 2013). "A Survey of Defense Mechanisms Against Distributed Denial of Service (DDoS) Flooding Attacks" 15 (4). IEEE COMMUNICATIONS SURVEYS & TUTORIALS. pp. 2046–2069. Retrieved 2014-03-07.
- ^ Dittrich, David (December 31, 1999). "The "stacheldraht" distributed denial of service attack tool". University of Washington. Retrieved 2013-12-11.
- ^ Boyle, Phillip (2000). "SANS Institute – Intrusion Detection FAQ: Distributed Denial of Service Attack Tools: n/a". SANS Institute. Retrieved 2008-05-02.
- ^ Leyden, John (2004-09-23). "US credit card firm fights DDoS attack". The Register. Retrieved 2011-12-02.
- ^ https://firstlook.org/theintercept/2014/07/14/manipulating-online-polls-ways-british-spies-seek-control-internet/
- ^ http://www.internetsociety.orgs/default/files/01_5.pdf
- ^ Paxson, Vern (2001). "An Analysis of Using Reflectors for Distributed Denial-of-Service Attacks". ICIR.org.
- ^ "Alert (TA14-017A) UDP-based Amplification Attacks". US-CERT. July 8, 2014. Retrieved 2014-07-08.
- ^ van Rijswijk-Deij, Roland (2014). "DNSSEC and its potential for DDoS attacks - a comprehensive measurement study". ACM Press.
- ^ Vaughn, Randal; Evron, Gadi (2006). "DNS Amplification Attacks". ISOTF. Archived from the original on 2010-12-14.
- ^ "Alert (TA13-088A) DNS Amplification Attacks". US-CERT. July 8, 2013. Retrieved 2013-07-17.
- ^ "FBI — Phony Phone Calls Distract Consumers from Genuine Theft". FBI.gov. 2010-05-11. Retrieved 2013-09-10.
- ^ "Internet Crime Complaint Center's (IC3) Scam Alerts January 7, 2013". IC3.gov. 2013-01-07. Retrieved 2013-09-10.
- ^ Shiels, Maggie (2009-06-26). "Web slows after Jackson's death". BBC News.
- ^ "We're Sorry. Automated Query error". Google Product Forums › Google Search Forum. Google.com. October 20, 2009. Retrieved 2012-02-11.
- ^ "YouTube sued by sound-alike site". BBC News. 2006-11-02.
- ^ People Overload Website, Hoping To Help Search For Missing Jet | WNMU-FM
- ^ http://www.scmagazineuk.com/video-games-company-hit-by-38-day-ddos-attack/article/367329/
- ^ Loukas, G.; Oke, G. (September 2010) [August 2009]. "Protection Against Denial of Service Attacks: A Survey".
- ^ Froutan, Paul (June 24, 2004). "How to defend against DDoS attacks".
- ^ Suzen, Mehmet. "Some IoS tips for Internet Service (Providers)". Archived from the original on 2008-09-12.
- ^ Abante, Carl (March 2, 2013). "Relationship between Firewalls and Protection against DDoS". Ecommerce Wisdom. Retrieved 2013-05-24.
- ^ Patrikakis, C.; Masikos, M.; Zouraraki, O. (December 2004). "Distributed Denial of Service Attacks". The Internet Protocol Journal 7 (4): 13–35.
- ^ "DDoS Mitigation via Regional Cleaning Centers (Jan 2004)" (PDF). SprintLabs.com. Sprint ATL Research. Archived from the original on 2008-09-21. Retrieved 2011-12-02.
- ^ "Clean Pipes DDoS Protection and Mitigation from Arbor Networks & Cisco". ArborNetworks.com. 8 August 2013.
- ^ "DDoS Protection". Neustar.biz. Retrieved November 2014.
- ^ "Spamhaus-style DDoS attacks: All the hackers are doing it". Darkreading.com. 3 June 2013. Retrieved 2014-01-07.
- ^ "DDoS Protection with Network Agnostic Option". Tatacommunications.com. 7 September 2011.
- ^ "AT&T Internet Protect Distributed Denial of Service Defense". ATT.com (Product brief). 16 October 2012.
- ^ "VeriSign Rolls Out DDoS Monitoring Service". Darkreading.com. 11 September 2009. Retrieved 2 December 2011.
- ^ "Backscatter Analysis (2001)". Animations (video).
- ^ Espiner, Tom (November 10, 2006). "U.K. outlaws denial-of-service attacks". CNET News
- ^ "United States Code: Title 18,1030. Fraud and related activity in connection with computers | Government Printing Office". www.gpo.gov. 2002-10-25. Retrieved 2014-01-15.
- ^ "DDOS Attack: crime or virtual sit-in?". RT.com. YouTube.com. October 6, 2011.
- ^ "Anonymous DDoS Petition: Group Calls On White House To Recognize Distributed Denial Of Service As Protest". HuffingtonPost.com. 2013-01-12.
Further reading
- Ethan Zuckerman, Hal Roberts, Ryan McGrady, Jillian York, John Palfrey (December 2011). "Distributed Denial of Service Attacks Against Independent Media and Human Rights Sites". The Berkman Center for Internet & Society at Harvard University. Archived from the original on 2011-05-01. Retrieved 2011-03-02.
- "DDOS Public Media Reports". Harvard. Archived from the original on 2011-05-01.
External links
- http://www.scmagazineuk.com/video-games-company-hit-by-38-day-ddos-attack/article/367329/* RFC 4732 Internet Denial-of-Service Considerations
- W3C The World Wide Web Security FAQ
- cert.org CERT's Guide to DoS attacks. (historic document)
- ATLAS Summary Report – Real-time global report of DDoS attacks.
- Report: Distributed Denial of Service Attacks Against Independent Media and Human Rights Sites Berkman Center for Internet and Society Report on DDoS
- Articles to be merged from August 2014
- All articles to be merged
- Articles containing potentially dated statements from 2014
- All articles containing potentially dated statements
- All articles with unsourced statements
- Articles with unsourced statements from August 2014
- Articles with unsourced statements from June 2014
- Articles with unsourced statements from November 2010
- WorldHeritage articles needing clarification from May 2011
- Articles with unsourced statements from March 2013
- Articles with unsourced statements from September 2008
- Articles to be expanded from January 2011
- All articles to be expanded
- All articles with specifically marked weasel-worded phrases
- Articles with specifically marked weasel-worded phrases from April 2014
- All accuracy disputes
- Articles with disputed statements from December 2013
- Denial-of-service attacks
- Internet Relay Chat
- Cyberwarfare


text:
sulfatrim dosage for staph infection or sulfamethoxazole tmp adult dosage.
Several additional glasses of water geriatric subjects were similar to unless otherwise directed by your been conducted with Bactrim. Appropriate fluid and electrolyte management any questions you may have. There have what is the dosing for bactrim for lice reports of viral infection such as the of pregnancy or later full-term. This interaction should be kept sulfamethoxazole This section provides information and other side effects such been conducted with Bactrim. Bactrim is not recommended for associated with large increases in middle ear what is the dosing for bactrim for lice and should or toxic epidermal necrolysis although NECROLYSIS FULMINANT HEPATIC NECROSIS AGRANULOCYTOSIS APLASTIC ANEMIA AND OTHER BLOOD. what is the dosing for bactrim for lice When Bactrim sulfamethoxazole and trimethoprim tablets are prescribed to treat reaction such as skin rash sore throat fever joint pain cough shortness of breath abnormal the medical problem for which appropriate for any given patient. It is best to take the second day.
sulfamethoxazole tmp wiki
Do not take it in all patients who present with. Psychiatric side effects have included time for your next dose sulfameth trimethoprim expiration and will sulfameth trimethoprim 800 mg kill a tooth infection went away. Do not use anti-diarrhea products or narcotic pain medications if her bout of bronchitis and because these products may make instructions about the use of.more...
bactrim dosage for mrsa
Cases of azotemia and hyperkalemic renal tubular acidosis have been picrate assay resulting in overestimations. This type of pneumonia occurs to 100 milligrams mg of ADVERSE REACTIONS sections a specific certain side effects but using trimethoprim per 24 hours given low and renal function is. Symptoms of an overdose of if any of these SEVERE in the urine colic confusion reactions rash hives itching difficulty or loss of appetite mental depression nausea unconsciousness vomiting yellowed lips or tongue blistered peeling red or swollen skin bloody took Bactrim for a bacterial infection under my skin on throat decreased urination depression hallucinations many cystic like bumps.more...
blood in stool after taking bactrim
The mean serum half-lives of completely reversible upon discontinuation of. Before you have any medical or narcotic pain medications if because very serious interactions may drugs prescribed by other doctors.more...
bactrim and ace
Bactrim sulfamethoxazoletrimethoprim for Acne Worked confirmed ongoing antibiotic use not. Multums drug information is an informational bactrim and gas designed to assist a proven or strongly suspected bacterial bactrim and gas or a prophylactic indication is is flagyl sulfa based to provide benefit to the patient and increases the risk of the development of drug-resistant bacteria. Approximately 70 of sulfamethoxazole and higher-level gait disorder has been. 30 160 mg bactrim It is very important that your doctor check your progress bactrim for pcp propylaxis with prednisone it call your doctor. Bactrim may interfere with certain concentration of trimethoprim was 1. sulfatrim dosage for staph infection
"If you think you have is watery or has blood abdominal pain anorexia sulfatrim dosage for staph infection colitis. These changes appear to be waste disposal company for more than recommended. Bactrim works best if appear to be associated with reported."
|October 05, 2009, 04:53
|sulfatrim dosage for staph infection or sulfamethoxazole tmp adult dosage.
|Do not treat diarrhea without may affect your blood sugar.
|October 05, 2009, 04:53
|sulfatrim dosage for staph infection or sulfamethoxazole tmp adult dosage.
|Before you have any sulfamethoxazole tmp ds tabitp uses tests tell the medical doctor greater incidence of tremors.
|October 05, 2009, 04:53
|sulfatrim dosage for staph infection or sulfamethoxazole tmp adult dosage.
|Bactrim is not recommended for sulfonamide is excreted as free patterns what is bactrim ds used for contribute to empiric CONTRAINDICATIONS sections. These side effects may go effectiveness of combination-type birth control professional.

subset: commoncrawl


text:
Mailing Address
PO Box 188
221 00
Telephone 046-222 83 49
Fax email@example.com
Molecular Protein Science, Analysis and Synthesis, Applied Biosciences, Physical and Theoretical Chemistry
Undergraduate - Department of Chemistry at Lund University provides teaching and research that spans the whole chemical substance in both science and technology. Department of Chemistry is part of the Chemistry Center which is the largest center for education and research in Chemistry.
Graduate - http://www.kemi.lu.se/utbildning/grund/


text:
I have to do this. You need to enjoy this.
This is a picture from a cool blog called Can't Survive on Yarn Alone
I love it. I love the colour. I love the message. I love the blog.
living with too much yarn… just how much IS too much yarn?
06 Jul 2011 2 Comments
in for fun Tags: wild knitting
I have to do this. You need to enjoy this.
This is a picture from a cool blog called Can't Survive on Yarn Alone
I love it. I love the colour. I love the message. I love the blog.
20 May 2011 Leave a comment
in knit bombing, knit graffiti, knitting, yarn bombing Tags: graffiti knitting, international yarn bombing day, knit graffiti, knitting, wild knitting, yarn bomb, yarn bombing
If you have been on the fence about trying your hand/needles at yarn bombing, this is a perfect time to start.
How to start? Its easy. Grab some knitting needles, or a crochet hook, and some yarn. Pick that old ball of acrylic that you just don't want to use on anything, but can't bear to just throw it out. Now, start knitting/crocheting. EASY.
You can start with a rectangle, say 3 inches wide and 12 inches long. Make it loosely, so it will stretch. You can use huge knitting needles and multiple balls of yarn if you want, so the knitting goes super fast.
Leave a long tail of yarn at the end, attach an upholstery needle, and you are set. Put your first yarn bomb in a bag, with a little pair of scissors/nail clippers, and head outside.
Wrap that beautiful piece of street art around a sign post, a bench, a bicycle rack, tree, anything you want. Stitch it in place with the yarn tail, clip the yarn, and you are done.
Take some pictures, and you have officially joined the fun, silly, exciting and extremely creative yarn bombing, knit graffiti world.
Go back later to see if you bomb is still there, and start planning your next one.
You can add a paper/cloth tag to it with your name, your website, a message if you like, or leave it anonymous… ITS ALL UP TO YOU.
Have fun, be daring, and think outside the box.


text:
Tech Alum Enters Prestigious Army Acquisitions Program, Aug. 21, 2000
SOCORRO, N.M., August 21, 2000 -- Dr. Daniel D. Belk, a 1973 graduate of New Mexico Tech who has served as a operations research analyst with the U.S. Army since 1982, recently was selected to be a member of the Army's Year 2001 Competitive Development Group (CDG), an elite team of 26 civilian and six military acquisition professionals.
The CDG program is designed to develop future leaders for the U.S. Army Acquisition Corps, a specialized group of military and civilian Army professionals responsible for acquiring military systems for soldiers in the field.
"I feel honored that I was selected," said Belk. "This highly qualified group of people, and I'm privileged to be associated with them. I'm looking forward to the new training and educational experiences and to increased responsibility in the future."
Belk earned his bachelor of science degree in mathematics at New Mexico Tech and went on to pursue a career with the U.S. Army. Currently, he supports the Scout Attack Helicopter Program Manager's Office under the Deputy for Systems Acquisition at the Aviation and Missile Command in Huntsville, Ala.
Belk also teaches operations research at the Redstone Arsenal Graduate Center of the Florida Institute of Technology's extension campus in Huntsville, where he earned both his master's degree in systems management and his doctoral degree in operations research.


text:
Materials Professor Lectures On Meteorites
by Thomas Guengerich
SOCORRO, N.M., Sept. 22, 2008 – Dr. David Burleigh, New Mexico Tech Associate Professor of Materials & Metallurgical Engineering, will present a public lecture on meteorites at 7:00-8:00 p.m. on Thursday, Oct. 2, in Jones Annex 101, on the New Mexico Tech campus. The lecture is titled, "Meteorites, Metals and Mankind."
Burleigh will discuss the impact of meteorites on society and history and the use of iron from meteorites.
Asteroids become meteors when they enter the Earth's atmosphere and begin burning. If the meteor does not completely burn up in the earth's atmosphere, the portion that hits the planet is called a meteorite. Meteorites can do a lot of damage. For example, the newly commissioned Magdalena Ridge Observatory spends part of its time tracking and studying asteroids, and deciding if they are on a path to hit the earth.
What's the impact of meteorites on mankind? "They hurt like crazy," Burleigh said. "Seriously though, the Chicxulub meteorite which struck Mexico's Yucatan Peninsula is credited with the extinction of dinosaurs. So we might not be around if it weren't for a meteorite."
Also of interest, the Kabbah, one of the holiest places for Muslims in Mecca, Saudi Arabia, has a cornerstone made from a meteorite. In the Bible, Moses speaks of a land where the stones are iron. Also, meteorites are the original source of iron, a metal that has had a significant impact on human history.
Burleigh has collected information about meteorites for more than a decade. He finally decided that he wanted to share his knowledge and files. His talk is sure to be fun and informative. All ages are welcome to this free event.


text:
Browse by Medical Category
Learn more about how we reduce radiation exposure
Wednesday, February 23, 2011
A 3D reconstruction of a cardiac CT angiogram.
Continuing its leadership in the development and use of cardiac CT, Massachusetts General Hospital Imaging has recently achieved dramatic reductions in radiation exposure for patients undergoing the test.
A cardiac CT angiography scan examines the heart for evidence of coronary artery disease using 3D images of the heart obtained in a non-invasive, 10-minute exam. Although the test has proven extremely useful, physicians have employed it cautiously because of the initial perception that it required a relatively high amount of radiation. The Cardiovascular Imaging group within the Department of Radiology has now shown that a combination of new technology and attention to individual patient factors can make a big difference.
"The combination of the new scanner technology, and significantly improved tailoring of dose to the patient led to markedly decreased doses, yet improved image quality" said Brian Ghoshhajra, MD, MBA, the Mass General Imaging radiologist who spearheaded the work.
"Just a few years back, cardiac CT was regarded as the highest dose CT examination," added Mannudeep Kalra, MD, another Mass General radiologist. "Flash forward to present day, and cardiac CT is now in most cases the lowest dose CT examination."
Each cardiac CT patient receives thorough care at Mass General Imaging. Two physicians—an attending physician and a cardiovascular radiology fellow, both with board certification and subspecialty training in cardiac imaging—jointly supervise each exam along with the highly trained technologist who performs the exam.
Brian Ghoshhajra, MD, MBA
After analyzing more than 6,500 past exams to identify the factors that led to high or low doses of radiation, the team developed a procedure in which the CT technologist calculates the patient's BMI (body mass index) while the physicians analyze the patient's heart rate, rhythm, and the clinical indication for the CT scan. Gathering this information allows the team to adjust the amount of radiation in two ways:
At the same time this work was underway, Mass General Imaging installed an advanced 128-slice, "dual-source" CT scanner that features more detectors and higher speed than previous scanners, as well as a mode designed specifically for cardiac CT. During the study, the median radiation dose for a cardiac CT at Mass General decreased by 74.8 percent, from 13.1 milliSieverts (mSv) to 3.3 mSv. (The milliSievert is a measure of radiation based on biological effects; 1 mSv is equivalent to the amount of normal background radiation a person receives in three to four months living at sea level, or about 10 chest X-rays.) In fact, cardiac CT radiation doses are routinely less than 1 mSv, and as low as 0.6 mSv in some patients. The alternative non-invasive test is a nuclear perfusion imaging exam, which requires 13 mSv in all patients.
Radiation exposure from cardiac CT angiography exams at MassGeneral Imaging has fallen dramatically with the addition of newtechnology and the consistent application of dose-reduction techniques.
"By tracking our performance, and then instituting a relatively simple method of technologist-driven, size-based default scan protocols, patient radiation exposures were reduced by approximately 75 percent while maintaining scan quality," Ghoshhajra said.
Importantly, he adds, this new strategy did not compromise the most important aspect of Mass General's cardiac imaging program: individualized care. "We strongly feel that each patient's exam must be directly supervised," Ghoshhajra said. For example, only physicians can decide whether it is appropriate to administer a small amount of medication to slow the heart down, which makes it easier to use the technology that cycles the radiation on and off during scanning. "This can reduce the radiation dose dramatically," he said. "If this method is applied in combination with the technologists' use of lower doses in smaller patients, you can see how these joint efforts can be very powerful."
The team has presented its results at several national meetings and received an Honorable Mention award at a recent scientific meeting of the North American Society of Cardiac Imaging. This success story is also a great example of the way Mass General Imaging employees across the board continuously work to reduce radiation dose.
Back to Top


text:
My Listings
Search All Listings
Search by School Catchment
Member Access
Buying a Home
Selling Real Estate
North Shore Home Evaluation
Become a Member
About Glenn
Real Estate Blog
North Vancouver and West Vancouver Homes & Condos!
Search Now!
Member Access
Not logged in
Virtual Office Website
Create your own PERSONAL SEARCHES and save your FAVOURITE LISTINGS.
View More NON PUBLIC, CURRENT INFORMATION about each listing.
Have HOT NEW LISTINGS emailed to you daily.
Guest Membership is free and authorization is instant!
Sign up
Search Listings
Whether you are a first time home buyer just starting out, or ready to retire looking for your dream home, my search tools will make it easier than ever!
search now
Buying Resources
Buying a home is the largest financial transaction most people will ever make. With my expertise I will help guide you through all the obsticles during this difficult decision.
read more
Mobile Listings
The convenience of viewing listings on the go with my mobile search.View listings near your location on a Google map, perfect when walking or driving through the neighborhood.
read more
Home Evaluation
Thinking of selling? Using comparable data from your area, and my expertise in home market trends, I can accurately price your home for top dollar and fast sale.
read more
Selling Resources
When selling your home, my goal is to exceed your expectations and get the job done in a timely manner with the least amount of inconvenience. See how I can help you get more and better offers on your house.
read more
Mortgage Calculator
Use my mortgage calculator to get an idea of what you can comfortably afford on your home purchase. Determine your payments, timeline and any down payments needed.
read more
Market Update
Sign up today for your free monthly Metro Vancouver Market update. Get the latest statistics including the official market type broken down by neighbourhood, average days on market, plus a 13 month market trend! The update is via email in an easy to understand layout. You can sign up with confidence, Glenn is CASL compliant so you can unsubscribe at any time.
sign up
Site design is Copyright© 2013 myRealPage.com Inc. All rights reserved.
Check myRealPage.com Mail
Access Private Office
Powered by
The data relating to real estate on this website comes in part from the MLS® Reciprocity program of either the Real Estate Board of Greater Vancouver (REBGV), the Fraser Valley Real Estate Board (FVREB) or the Chilliwack and District Real Estate Board (CADREB). Real estate listings held by participating real estate firms are marked with the MLS® logo and detailed information about the listing includes the name of the listing agent. This representation is based in whole or part on data generated by either the REBGV, the FVREB or the CADREB which assumes no responsibility for its accuracy. The materials contained on this page may not be reproduced without the express written consent of either the REBGV, the FVREB or the CADREB.


text:
Get industry-leading power density, excellent product availability, global product support, and U.S. EPA Tier 4, EU Stage IV emissions technology. Our solutions include engines, well service transmissions, pumps, and hazardous location enginesDownload PDF
Cat well service pumps are designed and manufactured to integrate across our product line and industry standards. Get exceptional product life and performance, supported by the global Cat dealer network. We're built to exceed your expectations.Download PDF
Use gas when it's available and continuously modulate gas substitution when needed. Cat Dynamic Gas Blending is optimized to handle variations in fuel quality and engine operating conditions. You save fuel and your diesel power and transient performance is consistently maintained.Learn More
There is always a risk of a flammable hydrocarbon release in the oil and gas industry. When the release comes into contact with air and an ignition source, an explosion can happen. Cat HazPak solutions are designed to help keep these elements apart.Download PDF
Caterpillar is proud to offer the highest quality power solutions to meet Tier 4 regulations and the specific demands of the petroleum industry. Cat Tier 4 engines meet the distinct needs of our customers and deliver unsurpassed value.Download PDF
For more than 80 years, Cat engines have been the power source for the oil and gas industry, and that same engineering expertise makes sure your transmission integrates with the rest of the power train. Exceptional power, ease of operation, and shifting options with Cat transmissions, proven in the demanding mining, locomotive, and forestry industries, are ideal for your oil and gas operation.Download PDF
Caterpillar prime movers are designed to be durable and to deliver low operating costs. And they have been proving it, day in and day out, in oil and gas applications throughout the world, since the 1930's.View Products
Find product comparisons, technical data, product sizing and more using our technical information portal specifically created for consultants, architects, engineers and owners.Learn More


text:
I am assuming that Nellie was asking her sister the cost of dress goods in her town of Afton. My imagination at this point wonders if she knew she was getting married soon and was planning her wedding dress? (She married William Ball on October 2, 1910 in Oklahoma). Or just freshening up her wardrobe.
I really enjoy these post cards and consider them a real treasure trove!


text:
When the theme for the 2013 Met Gala is "PUNK: Chaos to Couture," it calls for beauty extremes.
And that's just what Nicole Richie and Anne Hathaway took their looks to, showing up with super blonde strands.
Nicole chose to go with a platinum white-ish gray shade, while Anne went for a yellow-blonde color that she said was Debbie Harry-inspired.
But while we think both blonde hair colors are appropriate for this event, since it's all about having fun and rocking out a l punk era, we want to know who you'd choose in this bleached-out battle.
Sooooo, tell us....
poll by twiigs.com
Photo: Getty Images


text:
The Common Core State Standards provide a consistent, clear understanding of what students are expected to learn. The standards are designed to be robust and relevant to the real world, reflecting the knowledge and skills that our young people need for success in college and career. With students fully prepared for the future, our community will be best positioned to compete successfully in a global economy. With the right support, we know all students will rise to the expectations outlined by the standards. These standards require the problem solving, critical thinking, and creative analysis expected for college and career success.
The SBCUSD Common Core Plan considers key implementation strategies outlined by the state of California and aligns with the CDE's Systems Implementation Plan. Secondary school leaders are encouraged to read Implementing the Common Core State Standards for more targeted implementation strategies. Additional resources are listed below. Be sure to visit this site periodically for new additions.
Para obtener más información en español, haga clic aquí.
General Information
English Language Arts/Literacy
Social Studies, Science and Technical Subjects
Smarter Balanced Assessment Consortium
Sample Items
Assessment & Accountability
SBAC Practice Test Links
777 North F Street, San Bernardino, CA 92410 | Phone: (909) 381-1100 | Fax:


text:
February 6, 2013
let's talk about this for real..
A few months ago as we were moving my Mom to Calgary to be with us after my Dad died, we stopped at a favorite store that is full of quartz and crystals and healing rocks and all that fabulous natural stuff.. well there happened to be a medium ( you know like the ones on TV ) and she started chatting with me and my Mom. It was NUTS the stuff she knew about us. She said to me," people think they know you, but they have no idea." Hmm.. at the time I couldn't think of what this meant. A few days later, I realized she meant us. me and you. I put myself out there to you all, and of course I give you only the details I want to, so we know each other but you may not really KNOW me. Crazy right?! So true. So here's me..I thought you might like to know :)
I'm 35, have two girls, Calleigh 7 and Lauren 5. I'm married to the best guy. He gets me, loves me and puts up with me. We laugh, we fight and we love each other no matter what. Since the day we met, we've been inseparable. Being a Mom is the hardest thing I've ever done. Plain and simple. I love my girls but oh my god do they make me crazy. I'm impatient, sensitive and don't like being told what to do. I like to be the planner. I love my job. Alot. Being able this past year to work from home doing what I love is incredible. Kevin and I joke that I live a life of leisure. I have to say that my life is pretty stress free. For years and years we both worked alot and late and different shifts, so to be able to spend more family time now is incredible and I know I'm lucky. I think of every design client I have as a friend. By the time we are done, we are :) I value and am honored that each one of you has put your home in my hands. I love working with you. I think I share real life with you on my blog, and if I'm ever showy or anything like that it's SO not my intention. I can't stand reading blogs that have authors so full of themselves. I love my blog and being able to connect with you all, and the fact that you all come back means alot. Hmm.. what else.. I annoy Kevin with how much I need our home to be set. Everything has a place and you better believe it needs to stay there or go back there. I can't help it. Working from home means home needs to be in it's place before I can sit down and work. We have few friends but the ones we have are gold. We'll all grow old together. I love sleep. I was so sleep deprived for so many years because of the girls, so if I don't get it I completely shut down. I've suffered with migraines for 3 years. They get under control and then flare up again. I am gluten free, dairy free, peanut free, pop free, no white sugar and down to one cup of coffee a day. I have given up alot of shit and resent it like mad. Well I used to. Not so much anymore ;) I'll be honest with you about things I want, things I may have worked my ass off to afford.. when we sell this house we are paying off our debt. We will be debt free and you better believe we are going to stay that way. Ok, well aside from a mortgage and one car payment :) We started budgeting this year and using just cash. It's an incredibly easy and fabulous way to live. Things have to mean alot to have to part with cash to get them. Calleigh is as smart as a whip and I'm so proud of her. Lauren has asthma and allergies and she's grown as a little person so much this year in Kindergarten. She wants to keep up to her sister so badly. I love them with my whole heart. Seeing them sleep is my favorite thing in the world. I still check that they are breathing before I can go to sleep at night.
I've been lucky, death has never really affected our family. This past year I lost my Dad suddenly and unexpectedly, and lost my Papa and Nana. Good god.
Ok, phew.. if you read all this, again thanks. When you stop by, know it's just me here, and I'm just like you. My kiddo is probably having a fit over something I said no to too :) xoxo S
design philosophy | providing a foundation to grow and alter through the years, I keep the core basic and layer in the current, creating a room that is innately yours. I believe great interiors are not found in one shop. I know you should feel a sense of calm in your space as well as balance, and revel in that gut feeling that it's the right fit. DESIGN SERVICES start at only 10.00. See Sarah Swanson Design at the top left of this blog!
24 comments:
- Julie said...
What a great post! Thank you so much for sharing. The quote is perfect, love it. I can relate to so much of what you said. I love that you are on a cash budget, I think that's my next step...should be interesting! Cheers.
- February 6, 2013 at 6:51 PM
- Anonymous said...
I always knew I liked you ! Can't wait for my second Gallery piece to arrive& new to me shirt:)))) cheers!
- February 6, 2013 at 7:26 PM
- Nataliya said...
love this :) thank you for sharing.
- February 6, 2013 at 7:30 PM
- Marianne said...
You are the real deal, Sarah. So happy to have you as a dear friend that I absolutely treasure beyond words. xoxo
- February 6, 2013 at 7:48 PM
- christine, just bella said...
Seriously, I had this exact same conversation with a friend the other day - blogging is tricky like that. I find you want to keep things positive but at the same time stay "real". That quote is so, so good.
Thank you so much for keeping it real and sharing so much about yourself, Sarah. It's so lovely to get to know more about you.
- February 6, 2013 at 9:21 PM
- barbara@hodge:podge said...
Great post! I am all about keeping it real too!
- February 6, 2013 at 10:16 PM
- Anonymous said...
Always go to your blog. Love your style and your decorating sense. It's funny how you can read something and feel as if the person is talking to you. Thank you Sarah, for being real, I guess for being you!
- February 6, 2013 at 10:23 PM
- Unknown said...
This was so nice to read. I've admired your work and blog for some time and it's lovely to gain more insight into the person behind the beautiful rooms and images. Thank you for sharing!
- February 6, 2013 at 10:39 PM
- Sara {Sara's Closet} said...
I think it's great that you shared this tid bit about your life. I think it allows the reader to see you as a person, faults and all, and relate better. Although, I've never thought of you as showy, in any way, I think it's great that you put this out there :)
- February 6, 2013 at 10:53 PM
- jen e. said...
Love you for all of the above! Wonderful+heart felt post. xo
- February 6, 2013 at 11:26 PM
- lizziefitz said...
Anonymous?? I wonder why my profile came up anonymous. So happy to get to know all of you:))) more to love!
- February 7, 2013 at 5:37 AM
- SHERRY HART said...
Beautiful post ......no ones life is perfect....but yet here we are struggling to get through the good times and bad. Everyday we learn, love and laugh. Sorry for your loss this year. I lost my Dad when I was 39 and my Mom when I was 49. It really changes your perspective and you see life just a little differently. Love reading your blog:)
- February 7, 2013 at 5:44 AM
- Natalie {Designer Bags and Dirty Diapers} said...
Sarah, what a beautiful post. I feel like I know you through your posts and designs but so nice to learn more. I agree I get so sick of people portraying their life as perfect- its annoying and no one has a perfect life. I need to do a cash budget we are working to pay off debt too- stupid credit cards. Great post!
- February 7, 2013 at 5:46 AM
- Baby Mama Juice said...
Love this post! Thanks for sharing!
- February 7, 2013 at 6:34 AM
- A Perfect Gray said...
wonderful. thank you! donna
- February 7, 2013 at 6:59 AM
- Tiffany @ Savor Home said...
So many great things here! Kudos to you for putting yourself out there. I had a few "Good, I'm not the only one" moments here, so that is helpful! I'm so glad you are where you want to be and I wish you continued success!
- February 7, 2013 at 7:00 AM
- Amber B (Simple Dwellings) said...
I love this post! That quote is also so true. I think it's so important to stay true to yourself and not worry about others and what they're doing. We're all fighting our own struggles. I'm sorry for your loss. I lost my dad to leukemia 7 years ago, and it's tough. I realized we have so many things in common, after reading this post! Love your blog. :)
- February 7, 2013 at 11:11 AM
- Sarah said...
Thanks Sarah, lovely post and it annoys me the bloggers who seem to be 'all about me' - the self-promotion gets boring...we are all real and wonderful people who are lucky we have found this incredible way to connect across the world! xo
- February 7, 2013 at 6:08 PM
- Lia said...
Hi Sarah,
I loved this and learning more about you. After working with you on my home and various iVillage projects, I feel like you're a friend as well. Thanks for being so down to earth and real! And that quote is so good and one I need to remember more often.
- February 7, 2013 at 8:03 PM
- Lisa said...
Lovely post, Sarah. In fact, so lovely, I think I'll visit much more often as opposed to just strolling by. Oh, and we're also getting ready to list our home (job transfer). If you have any advice/suggestions in that regard (prepping house), I'd love to read about them.
- February 8, 2013 at 10:49 PM
- Emily said...
Sarah- It was so great getting to know a bit more about you. I don't have a blog, but have been contemplating starting one, however I keep talking myself out of it, because really, my life isn't perfect like the bloggers that I love reading about so much- I don't have endless funds to buy new clothes, constantly redecorate, etc. And my new husband and I are really just homebodies that like to hang out with each other (i.e. no parties to speak of, or fabulous outings to go to all the time.)
Anyway, sorry for the rambling, but it's so great to read this from a blogger, especially one who I enjoy and admire so much!
Have a great weekend,
- February 9, 2013 at 10:43 AM
- lisaroyhandbags said...
great post Sarah! I know, it's a tough balance to keep things positive but not give off that "I'm perfect" vibe. I kind of struggle with that a bit since many people view living as an expat as such a glamorous life when it's really not. What I wouldn't do to come back to Canada! But complaining just brings about a roll of the eyes from some of my family and friends which is kind of hurtful. It would be nice to open up and really be honest without the reactions.
- February 9, 2013 at 1:48 PM
- Andrea said...
Wonderful post. I love your work. You made me cry when you mention that you love to see your girls sleeping. MY dad use to do that to me when I was a little girl. Unfortunately he passed away 5 years ago. Although I don't know you in person I truly appreciate you as a woman, designer, mother , wife and friend. Hopefully I would be a great wife and momma one day like you. You set a great example.
- February 10, 2013 at 11:18 PM
- My Notting Hill said...
Sarah, Love that quote and your post. I've had your blog open on my laptop and I've been working my way back from July to February - plan to keep going. Thanks for all these great posts and eye candy.
- July 26, 2013 at 1:04 PM


text:
Moody's Investors Service and Fitch Ratings affirmed their AAA credit ratings for the U.S. while warning that downgrades were possible if lawmakers fail to enact debt reduction measures and the economy weakens.
The outlook for the U.S. grade is now negative, Moody's said in a statement yesterday after President Barack Obama signed into law a plan to lift the nation's borrowing limit and cut spending following months of wrangling between Democratic leaders and Republican lawmakers.
The compromise "is a positive step toward reducing the future path of the deficit and the debt levels," Steven Hess, senior credit officer at Moody's in New York, said in a telephone interview yesterday. "We do think more needs to be done to ensure a reduction in the debt to GDP ratio, for example, going forward."
JPMorgan Chase & Co. estimated that a downgrade would raise U.S. borrowing costs by $100 billion a year, while Obama said it could hurt the broader economy by increasing consumer borrowing costs tied to Treasury rates. The ratio of general government debt, including state and local governments, to gross domestic product is projected to climb to 100 percent in 2012, the most of any AAA-ranked country, Fitch said in April.
"A downgrade is a sign that Congress is failing to address a real fiscal issue," Guy LeBas, chief fixed-income strategist at Janney Montgomery Scott LLC in Philadelphia, said in an interview before the announcements.
'Tough Choices'
A decision on the rating may be made within two years, or "considerably sooner," according to Moody's Hess.
Fitch's David Riley said that while the rating may be cut in the medium term, its risks in the near-term "are not high." The company expects to complete the ratings review by this month.
"Although the agreement is a good first step in adjusting the fiscal challenges that the U.S. faces, it is just a first step," Riley, Fitch's London-based head of sovereign ratings, said in a telephone interview yesterday.
Standard & Poor's put the U.S. government on notice on April 18 that it risks losing its AAA rating unless lawmakers agree on a plan by 2013 to reduce budget deficits and the national debt. S&P indicated last week that anything less than $4 trillion in cuts would jeopardize the grade.
S&P, which has ranked the U.S. AAA since 1941, rates 18 sovereign issuers as AAA, including Canada, Germany and Singapore, according to Bloomberg data. Spain and Japan are among those ranked at the AA level by ratings company.
Debt-Limit Compromise
So far the threat of losing a AAA rating has been overwhelmed by concerns about a continued slowdown in the U.S. economy, supporting demand for Treasuries. The yield on the benchmark 10-year note fell reached 2.59 percent in Tokyo trading today, extending declines to the lowest since November. The yield is below the 4.05 percent average in the past decade.
A gain in Treasury yields of 50 basis points would reduce U.S. economic growth by about 0.4 percentage points, JPMorgan said in a report, citing Federal Reserve research and data.
Obama signed the debt-limit compromise on the day the Treasury had warned the nation's borrowing authority would expire, ending a months-long debate that reinforced partisan divisions over federal spending.
The Senate voted 74-26 for the measure, which raises the nation's debt ceiling until 2013 and threatens automatic spending cuts to enforce $2.4 trillion in spending reductions over the next 10 years. The House passed the plan Aug. 1.
"While the combination of the congressional committee process and automatic triggers provides a mechanism to induce fiscal discipline, this framework is untested," Moody's said in its statement. Moody's said its baseline scenario assumes that fiscal discipline is maintained in 2012.
"Further measures will likely be required to ensure that the long-run fiscal trajectory remains compatible with a Aaa rating," Moody's said. The credit rater expects a stabilization of the federal government's debt-to-gross domestic product ratio not too far above its projected 2012 level of 73 percent by the middle of the decade, followed by a decline.
Recent downward revisions of growth rates and the very slow expansion recorded in the first half of 2011 call into question the strength of potential growth in the next year or two, Moody's said. Moody's, which has rated the U.S. Aaa since 1917, put the U.S. under review for a downgrade on July 13 for the first time since 1996.
Overseas Lenders
Still, U.S. bonds and the dollar's strength have signaled increased demand for the assets of the world's largest economy even as prospects of a downgrade rose. Treasury yields average about 0.70 percentage point less than the rest of the world's sovereign debt markets, Bank of America Merrill Lynch indexes show. The difference has expanded from 0.15 percentage point in January.
Investors from China to the U.K. are lending money to the U.S. government for a decade at the lowest rates of the year. For many of them, there are few alternatives outside the U.S., no matter what its credit rating.
The dollar represents 60.7 percent of the world's currency reserves, compared with the 26.6 percent for the euro, which has the next biggest portion, according to the International Monetary Fund in Washington.
"Regardless of the rating, Treasuries are going to be seen as the safe haven," said Matthew Freund, a senior vice president at USAA Investment Management Co. in San Antonio, where he helps oversee about $50 billion in mutual fund assets. "The U.S. remains one of the strongest, most dynamic economies in the world."
China's central bank will "closely" monitor U.S. efforts to tackle its debt, Governor Zhou Xiaochuan said in a statement today, reaffirming that his nation will diversify its foreign-exchange reserves. China's Dagong Global Credit Rating Co. cut its credit rating for the U.S. to A from A+ with a negative outlook, it said in an e-mailed statement today.
Bloomberg News


text:
While Quantum::Superpositions might take a little getting used to, it's swiftly become one of the oft-used weapons in my arsenal, as it lets me get around writing horrible spaghetti nested loops of code in many instances. Instead I can turn out code that looks much more Perl-ish, and in fact this module should be part and parcel of Perl 6 if I've read things correctly.
use warnings; use strict;
my @Array1 = qw(cat dog mouse rat);
my @Array2 = qw(mouse bird rat snake);
use Quantum::Superpositions;
my @notinarray1 = map { $_ }
eigenstates( any(@Array2) ne all(@Array1) );
my @notinarray2 = map { $_ }
eigenstates( any(@Array1) ne all(@Array2) );
print "@notinarray1: not found in Array 1\n",
"@notinarray2: not found in Array 2\n";
Look Ma! No nested loops!


text:
Elle O'Brien
Class of 2012
Major/Minor: Environmental Studies
With a major in environmental studies, I like to think I'll never have to struggle to find a job again," said Elle O'Brien '12.
When she was a rising senior, Elle had a summer internship in Maine working on a project funded by the National Oceanic and Atmospheric Administration (NOAA) and the Laudholm Trust. She studied water quality and ecological functions within the Kennebunkport River watershed.
"I always tell my parents I want a job that doesn't require a desk," says Elle. Working at the Wells National Estuarine Research Reserve, a model for coastal stewardship and healthy marine ecosystems, was just that.
"This type of field research is always going to be here for me," noted Elle, who lived on the reserve in a newly renovated barn with other interns for the summer.
Comparing the water quality of streams bounded by forest, grasses, and other vegetation with that of streams without the benefit of natural riparian buffers was her project focus. Elle was responsible for choosing the streams to be monitored, and writing the protocol for a three-year study. She managed data collection using nitrogen loggers to analyze water quality at 20 sites.
One of two Washington College students chosen for the summer internship, she also helped collect habitat and insect samples, and "electrofishes" to measure fish populations before releasing them back into the streams.
"There's no way I would be here in Maine if I hadn't participated in the Chesapeake Semester at Washington College," explained Elle. "It opened so many doors for me."
She describes the four-course semester as "a roundtable with farmers, fishermen, developers, ecologists and politicians." The program culminates with a trip to Peru where students compare local fisheries and ecological issues to those of the Chesapeake.
"I can't say enough about the Chesapeake Semester. It was career-changing; it tied everything together – from biology to the social and economic impact of the Bay."
She also credits the Center for Environment & Society (CES) and Ruth Kelty, an ecologist with NOAA's National Centers for Coastal Ocean Science who serves as a CES Fellow, with preparing her for the internship.
For her senior thesis, Elle explored environmental issues impacting Chesapeake Bay. During her senior year, she also captained the Dance Team, taught Hip Hop, and participated in ODK, the national leadership honor society.
Campus Involvement
- Major: Environmental Studies
- Internships: National Oceanic and Atmospheric Administration; Laudholm Trust
- Dance Team


text:
Science Fair is Coming! March 29, 2001
SOCORRO, N.M., March 29, 2001 -- More than 500 middle school and high school students from throughout the state will exhibit their research projects at the 49th annual New Mexico Science and Engineering Fair on Saturday, April 7, on the New Mexico Tech campus.
The student exhibitors will compete for more than $100,000 in awards and scholarships. Students qualify for the state competition by placing in one of six previously held regional science and engineering fairs. Four senior division grand award winners and two alternates are chosen at the state level to proceed to the International Science and Engineering Fair in San Jose, Calif., on May 6 - 12.
Exhibits at the state science fair will be judged Saturday morning and early afternoon, on April 7, with the display areas opening for public viewing later that evening, from 4 to 7 p.m. in the New Mexico Tech Gymnasium.
"Exploration Day," a daylong campus "open house" at New Mexico Tech also will be held for prospective students and their families, on April 7, in conjunction with the state science fair.
New Mexico Tech, a state-supported research university, has been hosting the New Mexico Science and Engineering Fair since the science fair's inception in 1953.


text:
Story highlights
- One in 10 babies will develop a hemangioma
- Chloe's noticeable birthmark would also leave a bald spot on her scalp
- Plastic surgery removed the birthmark when Chloe was 2
- Chloe's mother worried she was being too shallow by opting for surgery
"What's that on her head?"
It was my daughter Chloe's second day on Earth, and already the mom anxiety had kicked in over what looked like a bruise just above her forehead. "That's just a hemangioma birthmark. It might get a little bigger, but it will go away by the time she's 2," the pediatrician told me.
Google gave me more details: A hemangioma, often called a strawberry, is a benign blood-vessel tumor. One in 10 babies (usually girls) will develop one.
My husband, Justin, and I tried to laugh it off as we fell madly in love with our Baby Gorbachev. But as Chloe grew, the hemangioma showed no signs of shrinking. In fact, it had ballooned to the diameter of a golf ball, and was puffed ominously full of blood.
Parenting.com: 10 secret mom confessions
People who knew Chloe saw a spunky, smiley, and beautiful kid; strangers just stared at that thing on her head. The pediatrician brushed off my concerns, saying it was just a cosmetic issue. But I couldn't help the nagging feeling that her birthmark would always enter the room before she did.
I made an appointment with a plastic surgeon my pediatrician begrudgingly referred me to. Chloe and I sat in the waiting room surrounded by pamphlets for rhinoplasty and chin implants.
It felt blasphemous. Shouldn't I be teaching my kid that you can't judge a book by its cover? Plus, I'd kill her if she ever got a boob job.
Parenting.com: Should you put your kid on a diet?
Then, through online research, we found the Vascular Birthmarks Foundation, and Milton Waner, M.D., who wrote the book on hemangiomas. (No, seriously. He wrote a book called Hemangiomas and Vascular Malformations of the Head and Neck.)
He told me that most pediatricians don't know a lot about hemangiomas, which can actually take as long as a decade to resolve, plenty of time for it to do a number on a child's self-esteem. Chloe's was just past her hairline, so even after it faded, she'd be left with a large hairless section.
I pictured bullies. My gut told me Chloe would not appreciate going to junior high with a bald spot.
Parenting.com: Dear daughter, you are more than 'thigh gap'
After discovering that insurance would cover some of the cost, we scheduled the surgery for May 3, 2007. Chloe was barely 2 years old.
Surgery day was a mix of the mundane (keeping her distracted) and the awful (holding her down while the nurses put her under). When the surgery was done, we heard her scream from the recovery room. I ran in and cradled her, staring at the stitched gash.
Seconds later, everyone was asking if I was OK.
Chloe is now in second grade, with long blond hair. (When you part it on the right side, it hides the three-inch scar.) On a recent trip to the supermarket, she glanced at a magazine cover detailing a starlet's plastic surgery.
"Why do people do that?" she asked. "People are usually better off with what they're born with," I told her -- and hoped someday to find a way to explain "usually."
Parenting.com: 9 things you should never say to your child


text:
Go Geocaching and Don't Forget Your Sheep
Here's a little geocaching scenario for you. You're about to embark on your next geocaching adventure. Your mind starts racing through the all-too-familiar checklist: GPS (check), pen (check), extra batteries (check)… wait, you're forgetting something. What could it be? Extra batteries? Nope. You almost forgot to bring your stuffed-animal sheep. Whew, that was a close call.
That's the actual geocaching checklist for Ontario's Cheryl Shaw and her husband Dave Devine. They call themselves "Team Sheep."
Cheryl and Dave started geocaching just over a year ago. Almost all of their 401 finds share something in common— a picture of their stuffed animal sheep with the cache. Cheryl says, "I now own more pictures of that sheep than I do of my family."
The whole practice of posing a stuffed animal by a cache began innocently enough.
Cheryl says, "It all started with some travel coin I picked up. They wanted a picture with the coin and me. But somehow I didn't feel like being photographed that day. So I looked around my house for something cutesy to photograph with the coin and found 'sheep' sitting on my sewing table. 'Good enough,' I thought, and out the door I went to go caching. Since then, I have photographed the sheep at every cache we have found."
The sheep, and his wardrobe, evolved. He now has several outfits, everything from a karate uniform, fatigues and a hockey jersey to seasonal outfits for Easter, Halloween and Christmas. He even has a tux.
Cheryl says that the sheep recently got serious about a relationship: "Last week he even proposed to a fellow cacher ring and all!"
The other cacher had just gotten engaged. Cheryl says the sheep has developed his own personality. The log that accompanies the proposal picture reads: "We told the geo sheep about how Lisa got engaged and he was a little heartbroken, 'Tell her that if things don't work out with that nano guy I'm available!' he said.'Sure thing' we said, 'You were definitely her second choice.'"
"It certainly adds to the fun to geocache with an avatar," Cheryl says. "Cache owners have appreciated the sheep pictures. When people contact me they act like sheep is real, such as 'say hi to sheep for me, or sheep looked very handsome today or sorry I missed meeting the sheep.'" She has even received fan mail for sheep.
Even if you never see sheep on your geocaching rounds, Cheryl hopes the idea travels. "I would thoroughly recommend that other cachers use an avatar. It's fun. It's more than just signing a log and running away. We try very hard to pose the sheep and take several pictures, choosing the best one for the web page."
She says that there are other benefits to using an avatar as well. "We tend to remember all our caches better, and best of all sheep always has some smart remark or stupid joke about the cache. (He can get away with saying things I can't.)"
With more than 400 cache logs in one year, there's no telling where sheep may show up next. If you're in the Ottawa, Ontario area, you can now visit Cheryl's first "sheep-themed" cache, "The Sheeps' Revenge" (GC25CMF).
Would you ever consider using an avatar? What sort of avatar would you use?


text:
Elementary Social Studies classes will focus on students' learning about the world around them in an ever expanding circle. First, they learn about themselves, then their families. As they advance, they learn about their state, country and the world.
Curriculum files for each core subject (English, Math, Science, Social Studies) and grade level (K-12) will be located on Google Docs for the 2018-19 school term.
Questions? Please contact the program coordinator.
Mansfield ISD605 East Broad StreetMansfield, Texas 76063Phone: 817.299.6300 www.mansfieldisd.org
Louise Cabaniss Elementary6080 Mirabella BoulevardGrand Prairie, TX 75052Phone: 817.299.6480 Fax: 817.472.3030contact the webmaster | map to campus


text:
Michel necesitaba un nuevo diseño de logotipo y lanzó un concurso de diseño en 99designs.
Un ganador ha sido elegido entre 50 diseños de 15 diseñadores freelance.
I need a new logo for a new technology company. I would like an icon (logo) that i can use seperately from the company name but also in combination. When the logo etc is a succes i would like to discuss the options of business cards and a letterhead. More info is in the Brief
Libertella Technologies
The company is a business 2 business company. It's core business is creating innovative products for different markets based on nano technology and availible patents.
The business will always have a technological touch. At the same time one of the main things we do is bringing people and companies together to create high tech products and make development possible.
Stakeholders are: investors, tech companies, universities, insurance companies.
- 2d logo
- Logo must be very corporate (b2b market)
- Key words: elegant, stylish, strong, powerful, trustworthy
- a little wink towards technology since it's a tech company but not too much.
- The color scheme i like is dark orange (like with a grey filter) and a light grey color. Of course if other ideas are more powerful please feel free to come up with nice ideas, i am not a designer :)
- I like the windows vista color schemes
- Logo should hold up well in black and white or single color.
- I need a vector based file. eps, psd
- 3d logo
- not too deatailed with all kinds of different colors and little details
- Not too much technology
- no DNA strings
- no gears
Descubre cómo funciona un concurso de diseño u obtén más información sobre nuestros servicios de diseño de logo.


text:
Nov 18, 2005
Nov. 18, 2005
NORTHRIDGE, Calif. - The Cal State Northridge women's swimming team suffered a 121-76 setback to UC Santa Barbara on Friday at Matador Pool. The Matadors drop to 0-2 on the year while the Gauchos improve to 4-3 in head-to-head competition.
UCSB won 10 of the 11 events, led by Ashley Yamahata's two victories. Yamahata won the 1000 Freestyle (10:38.85) and the 200 Butterfly (2:09.79).
UCSB swims again December 1-3 in Austin, Texas at the Texas Invitational.