text:
I have been struggling in the mornings. And the effort put into packed lunches these days shows as much.
I was worried going into this school year that adding Paige into the getting-ready-in-the-morning routine was going to be stressful. I was going from 2 kids needing to be dressed and fed (breakfast) and packed a lunch to three kids needing those things. And it was more stressful, but not too bad.
But a few weeks ago something unexpected happened. Our littlest kiddo started school.
His school bus comes just minutes after the big kids' bus pulls away. Having a 4th child to dress and feed in the morning has pushed me to my breaking point. While Tyler doesn't need to have a packed lunch (his school is only 3 hours long and he's home by noon), the morning hustle and bustle has done me in.
|Tyler's 1st day riding the school bus. My baby! Sob!
Speaking of cameras, all last week my good camera had a dead battery and I couldn't find the battery charger. So the following lunches were all shot with my cell phone. I apologize in advance for the poor picture quality!
Packed in an EasyLunchboxes:
- a leftover pizza roll from a yummy pizza place
- Pirate Booty
- cucumber slices
- overpriced raspberries
Seeing Stars in a PlanetBox:
- peanut butter and jelly sandwich on multigrain
- fruit leather, cut with a mini star cookie cutter
- cheese! cheddar cheese stars and a BabyBell cheese w/ star cutout from the wax
- granola bar
- Goldfish crackers holiday mix
Another EasyLunchboxes lunch:
- half sandwich of turkey and cheese on multigrain bred
- fruit leather flowers
- cucumber slices
- turkey stick (husband buys these at the deli at Kroger)
Supplies used to pack these lunches:


text:
Movies - 2012 Oscars postsSunday March 03, 2013
In Defense of Seth MacFarlane's 'We Saw Your Boobs'
I was wrong on Oscar night. Not so much in our Oscar pool—although I lost to my nephew, Jordy, 11—but in my contention that Seth MacFarlane's musical number "We Saw Your Boobs" was the best thing to happen to Oscar in years. I thought it was funny, aimed at dudes (the untapped demographic), and got out in front of the usual Monday-morning Oscar-hosting carping.
A lot of those attacking MacFarlane's Oscar hosting in general, and "We Saw Your Boobs" in particular, began by admitting they were fans of MacFarlane's work, so let me begin by saying I'm not. I've watched maybe 20 minutes of "Family Guy," which is weak tea compared to "The Simpsons," and I panned "Ted," the blockbuster comedy from 2012. I admitted it was often funny but it made me feel unclean afterwards. It was too racist and sexist, too inured of crappy '80 culture.
I didn't feel that way with "We Saw Your Boobs." I just laughed. It's the funniest thing I've seen Seth MacFarlane do.
Why is it funny? E.B. White once said you can dissect humor as you can dissect a frog, but afterwards you simply have a dead frog. Well, here's my dead frog.
I think the framing device actually sets up the joke. Others don't. Amy Davidson, one of the harshest critics (her New Yorker post is called "Seth MacFarlane and the Oscars' Hostile, Ugly, Sexist Night"), writes:
The song was part of a larger skit whose premise was that William Shatner, as Captain Kirk, sends MacFarlane a message from the future about the dumb things he might do while hosting the Oscars. But that premise is not an excuse.
Maybe not an excuse but definitely a set-up. Because one immediately wonders, "What could this guy do that would be so awful that Capt. Kirk would need to come back from the future to correct it?" And then we see him singing.
The joke, in other words, is on Seth MacFarlane, or "Seth MacFarlane," the Oscar host too stupid to realize that gleefully reducing our greatest film actresses to their body parts is not something you do at an event meant to honor those very actresses.
The joke is also on men in general, who are rarely above this tendency. Seven years ago, I wrote a piece for MSNBC on famous movie kisses, which included the following:
Did Leo kiss Kate on the prow of the boat or was that just in the poster? More memorable for me are the two of them steaming up the car windows, and Leo drawing a topless Kate. It's like what my friend Seth admitted when I asked him for kissing scenes: "I only remember the boob shots," he said. He was only half-joking.
Seth later told me, "Half joking? I wasn't joking at all."
But to take this juvenile attitude … into the Academy Awards show … in a rousing song-and-dance number … well, only a moron would do it. And there's our moron.
MacFarlane's critics don't see it that way. They think the joke is on the actresses. Davidson again:
The women were not showing their bodies to amuse Seth MacFarlane but, rather, to do their job. Or did they just think they were doing serious work? You girls think you're making art, the Academy, through MacFarlane, seemed to say, but all we—and the "we" was resolutely male—really see is that we got you to undress. The joke's on you.
This implies that MacFarlane, and not "MacFarlane," actually meant it. Haw haw on Meryl Streep, Halle Berry and Kate Winslet. We saw your titties. Which leaves the joke exactly where? Nowhere. It wouldn't be funny. No wonder Davidson and others aren't laughing.
But to me that's an incorrect reading. Davidson, again, with footnotes:
Getting Charlize Theron and Naomi Watts to pre-record looks of mortification didn't help, either.1 (It was hard to tell watching at home, unless you were keeping track of what each woman was wearing, that these weren't live shots. 2) It just seemed like a way for MacFarlane to make fun of viewers for being prudish and not "getting it." 3 (See, the cool girls think that it's funny!) We got it. 4
My footnotes:
- The reaction shots made it funnier for me.
- Not hard to tell. I assumed Theron, etc., were in on the joke, since the joke was on MacFarlane.
- Wait, MacFarlane's making fun of viewers now? Including me? Even though I got the joke?
- What does "We got it" refer to? Is Davidson implying that most viewers didn't get the simple joke of the reaction shots but they "got" the complex joke that MacFarlane included these reaction shots to make viewers feel prudish afterwards? Does that make any sense?
Parodies have already cropped up—"We Saw Your Balls," "We Saw Your Junk"—but none are funny. MacFarlane's joke is on "MacFarlane" and men in general. These others are like the haw haw interpretation above: vindictive. More, "boobs" is the way men (and Hollywood) reduce women. That's hardly news. Is "balls" or "junk" the way women reduce men? Even if it's true, that reduction is not prevalent in our culture, and certainly not in the movies, which is still a male-dominated industry. The joke only works the way MacFarlane played it.
But there's a greater criticism of the number. Margaret Lyons on Vulture wrote, "As a fun game, count how many actresses he mentions in this song who are portraying rape victims." Salon did—and came up with four.
These are the actresses and movies he sang about, with Salon's highlighted:
- Meryl Streep, "Silkwood"
- Naomi Watts, "Mulholland Drive"
- Angelina Jolie, "Gia"
- Anne Hathaway, "Brokeback Mountain."
- Halle Berry, "Monster's Ball"
- Nicole Kidman, "Eyes Wide Shut"
- Marisa Tomei in "The Wrestler"
- Kristen Stewart, "On the Road"
- Charlize Theron, "Monster"
- Helen Hunt, "The Sessions"
- Scarlett Johansson, our phones
- Jessica Chastain, "Lawless"
- Jodie Foster, "The Accused"
- Hilary Swank, "Boys Don't Cry"
- Penelope Cruz, "Vanilla Sky"
- Kate Winslet, "Heavenly Creatures" and "Hamlet" and "Titanic" and "Iris" and "The Reader"
The Foster and Swank references probably should've been excised but it's obvious why MacFarlane chose these actresses. With the exception of the kids—Stewart and Johansson—each is Oscar-nominated. Most have won a statuette or two. To do this properly, you need to do it with Oscar-winning actresses rather than, say, Denise Richards.
Again, I don't particulary like Seth MacFarlane's brand of humor. But I like even less all these Monday-morning misreadings of the funniest thing I've seen him do.
He's the boob. That's the joke.
Posted at 08:53 AM on Mar 03, 2013 in category Movies - 2012 Oscars | Permalink
Deadblogging the Oscars - 2013
My nephew, Jordy, 11, won our Oscar pool from way over in Minneapolis. I came in second. The torch has been passed. Or the Archie McPhee's Oscar statuette anyway.
I'm not much of a fan of the morning-after overanalysis of the Oscar show: who wore what, who said what, OMG. The Oscar show isn't meant to be watched and analyzed as if it were a movie up for an Oscar. It's an excuse to throw a party, drink a little too much, talk back at your TV. If I was sitting on the couch taking notes, I might've been as disappointed as Nikki Finke. Although hopefully less self-important.
As it was, I thought Seth MacFarlane was fine. Richard Brody on The New Yorker site accuses him of being a parody of a host, a kind of SNL version of what a controversial host might be, but I liked the sensibility he brought. Brody makes some salient points but he's wrong in one regard. He says MacFarlane never conveyed "authentic joie de shtick." Again, I don't watch, or much like, MacFarlane's shows. Way too many misses among the hits. But you can't watch five minutes of them without realizing their creator is a huge movie fan. What was that "Sound of Music" takeoff if not the authentic joy of a movie lover being able to act out a scene from a favorite movie in front of the moviemakers themselves? Plus the "We Saw Your Boobs" number has way more subtext than Brody, or anyone, seems willing to admit. It's saying outright what's merely alluded to.
Brody sniffs at it:
The gross miscalculation of the "boobs" number set the tone for the evening—the wrong one. It seemed as if MacFarlane wanted to announce his hiring of Mr. Skin as a musical consultant. I've long thought that the nudity of women in movies has often been used by producers as a sort of ugly rite of passage, a public refraction of the casting couch—but, rather than lampooning the industry potentates who pay for it and market it or, for that matter, the male voyeurism that they serve or the societal sexism that underlies the practice, MacFarlane seemed to be mocking and embarrassing the actresses themselves (as Charlize Theron's ice-cold gaze, caught on camera during the number, made clear).
First, I'm pretty sure the reaction shots of the actresses involved were pre-taped and part of the bit. Weren't they wearing different clothes, for example? Second, anyone who doesn't own up to the power there, to the power of sex and beauty, and to the culpability from all involved, including the women who dress up and dress down, is mistaking completely what Hollywood is about. Brody's chivalry might be better practiced elsewhere.
This E! writer is worse. He condemns MacFarlane for the sexism in the boobs number then drools over an imagined shirtless-as-Oscar Channing Tatum a paragraph later. Dude, your double-standard is showing.
As for the awards themselves? "Argo" wasn't bad, "Pi" wasn't bad, "Les Miz" wasn't bad. The evening was a celebration of the not-bad. Which is what the Oscars are.
But Daniel Day-Lewis is genius. So we got that.
The Archie: After a year with Mr. B, it's back with me. Unless I ship it to Jordy in Minneapolis.
Posted at 08:38 AM on Feb 25, 2013 in category Movies - 2012 Oscars | Permalink
Comfort vs. Questions: Taking the Kubrick Test with This Year's Best Picture Nominees
My friend Vinny alerted me to this short clip of Terry Gilliam talking about Steven Spielberg and Stanley Kubrick, and why the latter is superior to the former:
The dynamic Gilliam is talking about, the massive success of Spielberg versus the "what the hell?" response to Kubrick, is our fault, of course. We want what we don't have: comfort and answers. We don't even want clever answers. We don't want to work. That's the point of the movies for most of us. We go to the movies after work so we don't have to work. Critics, for the most part, are atwork. Watching and writing about movies is their job, and everyone wants their job to have a little meaning. So that's what they search for.
Spielberg's "Lincoln," as good as it is, gives us comfort and answers. The dilemma the president goes through is a tough one—freedom or peace?—but it's really not presented as much of a dilemma. We sense the right path, and we follow the film's protagonists onto that path, which is a path to victory. If you're in the mood, questions can be raised—chiefly: should Lincoln have just let the South go?—but you have to do the heavy lifting yourself. The movie doesn't help you in this regard.
The rest of the best picture nominees? Should we see how they do with the Kubrick test?
- AMOUR: Opens in Seattle today. I assume it provides little comfort. It's Michael Haneke, for fuck's sake.
- ARGO: Initially raises questions about U.S. and CIA involvement in Iran, but quickly becomes a thriller. The point is for the hero to get the scared people away from the scary people.
- BEASTS OF THE SOUTHERN WILD: Questions are raised, chiefly "Is this post-Katrina? Global warming? What the hell is going on? And who would want to live here anyway?" But the ending is an answer: "Ah, that's what Wink was up to." Preparing Hushpuppy for that. It's a great final image--Hushpuppy not being meat--but it's NPR wish-fulfillment fantasy.
- DJANGO UNCHAINED: No questions raised. QT is here to entertain us motherfuckers with guns guns guns.
- LES MISERABLES: How hard do you have to work to make a movie about poverty and fomenting revolution and still provide comfort? You work this hard. Look down, look down.
- LIFE OF PI: This is a movie that leaves us with a kind of O Henry question: Gérard Depardieu or the tiger? Which story do you prefer? Do you want the one where human beings are horrible, cannibalistic and isolated? Or do you want the story with the tiger? We want the story with the tiger, of course, which is the one we get. But even as it gives us this answer, this comfort, it reminds us that the whole of human history, certainly the entirety of religious history, is receiving just this comfort. We're part of the problem.
- LINCOLN: Slavery is ended. Lincoln is martyred. His words ring on and on and on.
- SILVER LININGS PLAYBOOK: Smothered in comfort. As comfortable as watching a Sunday afternoon football game in sweats.
- ZERO DARK THIRTY: It ends with a kind of question: What price, victory? Or: Who are we now, now that we've done this? But it could've raised the most important question of all and didn't. It suggests no one within the CIA questioned our enhanced interrogation program when many did. It dramatized the efficacy of that program when that's completely in dispute. It drank some bitter CIA Kool-Aid and spun it as heroics. This movie will never be nothing but a vast shame to me. Obviously it's a shameful period in our history, but it's also shameful for what this movie, created by very talented people, could have been. But it's not that. It's merely a murky Hollywood genre picture with a somber end.
So none of these movies ("Amour" pending) really pass the Kubrick test. You know a 2012 movie that does? "End of Watch." But few bothered with it. Maybe for that reason.
Thanks for the clip, Vinny.
Do any of these movies pass the Kubrick test?
Posted at 08:19 AM on Jan 25, 2013 in category Movies - 2012 Oscars | Permalink
The 2012 Best Picture Nominees Ranked by IMDb, Rotten Tomatoes Scores
Here are the best picture nominees as ranked by their Rotten Tomatoes scores:
|BP Nominee
|R. Tomatoes
|Top Crits
|Zero Dark Thirty
|Silver Linings Playbook
|Life of Pi
|Django Unchained
|Beasts of the Southern Wild
|Les Miserables
I've included Top Critics rankings and the difference between the two. Top Crits obviously less enamored of "Les Miserables" and "Django Unchained." The love "Amour." They revere "Lincoln." "Beasts" is interesting. I would've thought that would be a top-critic darling.
Now here are the best picture nominees as ranked by IMDb readers:
|BP Nominee
|Django Unchained
|Life of Pi
|Silver Linings Playbook
|Les Miserables
|Zero Dark Thirty
|Beasts of the Southern Wild
I did this last year when "The Artist" was on top and "Extremely Loud and Incredibly Close" was at the bottom, but that's not necessarily good news for "Django." I can't conceive of a "Django" victory. I can't conceived of a "Life of Pi" victory unless the other films cancel each other out. Jeff Wells is still imagining his "Silver Linings" victory. Maybe. "Crash" won once, too. You can never tell. I still assume "Lincoln" but I'm waiting for the DGAs.
Finally, here's where each film ranks on each list:
|BP Nominee
|R. Tomatoes
|RT's Top Critics
|Zero Dark Thirty
|Silver Linings Playbook
|Life of Pi
|Django Unchained
|Beasts of the Southern Wild
|Les Miserables
The biggest difference between critics (as represented by Rotten Tomatoes) and moviegoers (as represented by IMDb score) is "Django": near the bottom for the critics, particularly top critics, and at the top for moviegoers. IMDb's readers love themselves some QT. "Pulp Fiction" is at 9.0 (the fourth greatest movie of all time), "Reservoir Dogs" is at 8.4, "Inglourious Basterds" at 8.3, etc., etc. No QT-directed feature film is below 7.0. His lowest is "Death Proof" at 7.1. "Django" will drop, but probably not much. IMDb is his core audience at the moment.
There's also some vast discrepancies between "Life of Pi" (6, 6, 2) and "Zero Dark Thirty" (2, 5, 8). Everyone seems to agree on where to place "Silver Linings": 3, 4, 3. Everyone except me. My rankings, without having seen "Amour" yet, would probably put "Lincoln" first, "Argo" second ...
|BP Nominee
|R. Tomatoes
|Top Critics
|Zero Dark Thirty
|Silver Linings Playbook
|Life of Pi
|Django Unchained
|Beasts of the Southern Wild
|Les Miserables
But overall I don't have much enthusiasm for this year's picks. I'd put three of last year's best picture nominees ("The Tree of Life," "Moneyball" and "The Descendants") ahead of this year's favorite.
You have a favorite? Feb. 24 is closer than you think.
Posted at 09:45 AM on Jan 21, 2013 in category Movies - 2012 Oscars | Permalink
Jeff Wells: Alone Against an Army of Haters!
"I was expecting to feel really badly this morning. Now not so much. The nominations are what matter & what sells so hooray for David O. Russell's Best Director and Best Adapted Screenplay nominations for Silver Linings Playbook, and also Bradley Cooper, Jennifer Lawrence, Robert De Niro and Jackie Weaver's noms — four for effing four. Eight nominations in all. That's industry emotion. I knew. And I stood alone, all alone, against an army of haters who are now silent and seething. Bitches!"
--Jeff Wells on his "Hollywood Elsewhere" site after the annoucement of the 2012 Oscar nominees.
Wells is often interesting to read but he's also a pompadoured chest-beater who seems to imagine himself the hero of his own action movie--even as he disparages most of the action movies coming out of Hollywood. "I stood alone! All alone! Against an army of haters!" Every person contains a paradox, a contradiction, which they live with everyday, but most people's paradoxes and contradictions aren't so immediately apparent. Jeff Wells' is right out there.
As for "Silver Linings Playbook"? Liked the beginning, got worried in the middle, hated the end. "Let's ignore everything thus far for a bet and a dance competition. And two attractive people, the stars of the movie, coming together in the end. To watch football." For the Academy this meant eight nominations. Add it to the list of things they get wrong.
"I know you're bi-polar, I know I'm nuts, I know your dad is OCD: But if we just have your Dad bet double-or-nothing on both the Eagles game and you and I in this dance competition, I bet we can win his money back and fall in love! Just in time for the ending!"
Posted at 07:56 AM on Jan 10, 2013 in category Movies - 2012 Oscars | Permalink
Twitter: @ErikLundegaardTweets by @ErikLundegaard
Things I Learned on Vacation in Belgium and France
2019 Reviews
What She Said: The Art of Pauline Kael
The Fall of the American Empire
Robin Hood of El Dorado (1936)
The Whole Town's Talking (1935)
Oil for the Lamps of China (1935)
The Phantom of the Opera (1925)
Adventures of Captain Marvel (1941)
Something to Sing About (1937)

subset: commoncrawl


text:
Folarin, go
They say never say never, but forever is so far away
Penny with a hole in it the bubble on my Hardaways
Is one away, all the way, always go for dolo
I'm goin' bloody insubordinate up in the polo
Jordan prolly bored doe, music got me more dough
Si papi, each of my crew gets gluteus as gordo
Maximus, Maxima, Acura to vroom - fuck it
Got them got you open bars like open [?]
Hoppin' out the new [?], 11 like whoever can get it
I'm goin' in, you eatin' Checkers for dinner
I soak it in as a moment, I'm on it, temporary forever
Twitter bitches livin' for me, they be carpe diem-ing
I'm a writer, but arsonist really
I get dollars where humble niggas with positive energy
I'm the voice of the city, Rozay, Stalley, and Milly
She know I'm mongoose, she start ridin' my willy
No really, used to whip the Bentley 450
Go up Bowie, and tell professors they better get me
G-get me doe, somebody get me doe
Ice cold frigid flow, iceberg history doe
Never, never, never could they fuck with me
Never, never, never could they fuck with me
Never, never, never could they fuck with me
Never, never, never could they fuck with me
Never, never, never could they fuck with me
It's like I'm in the clouds and they fearin' heights to some degree
Got a bunch of sneaks, a nigga be flossin' too much
Never keep broads for too long, women be talkin' too much
And to be honest niggas get smarter when I be drivin' what's up
Nigga we're talkin' stupid moolah 'til the Gallardo pull up
I'm out my mind and I know it, bad joant got some roll-up
Every joant that I'm shown in built up like Mrs.Bozak
And that's a Martin reference, you don't get it carry on
I'm a drop it real on you lil niggas, Tommy Strong
I just be flowin' a little when I be on the strong
And occupy a couple coroners after the song
You can't compete with me, I won't compete with y'all
My queen from out a magazine, your joant from out the mall


text:
Intro: Your friends might think you are a comedian and I'm sure you've cracked a few jokes in your time but why not show people without saying a word? Roadkill t-shirts are very humorous and will get people to not just laugh with you but at you.
Quality: Our shirts may be humorous but our standards of quality are not. Our shirts are preshrunk 100%* cotton so you don't get have to worry about what size your shirt will end up after you wash it. Gildan Heavy Duty is our standard that sits on your body like a fitted glove. What more could you ask for? Our professional screened silk images and text will get your joke across loud and clear. No fading here!
Selection:We have thousands of hilarious t-shirts to choose from not just for yourself but for your friends too so you don't have to think about showing up in the same shirt on the same night. Seriously thousands of shirts… with new designs available every week. br>
Policies: We want you to be completely satisfied with your t-shirts so we offer exchanges and refunds. We don't just go above and beyond to get the best designs out to you every week but we also go the extra mile for customer satisfaction.
Outro: Making humorous t-shirts is what we do. We don't just make t-shirts for you, we crack up ourselves at the genius that is Roadkill t-shirts. Don't miss out on great deals and be sure to check for new designs weekly. We are looking for your order form right now. Did you send it?


text:
I have a txt file where ive split up the text using a delimiter and printed the results. I been trying to make it so the java will read the file and where a delimiter is missing it wil output the result separtely as invalid. any help/pointers in the right direction greatly appreciated. heres my code:
import java.io.*;
import java.util.Scanner;
import java.io.IOException;
public class Generator {
private File file;
public static void main(String args[]) throws FileNotFoundException {
Generator String = new Generator("results.txt"); //line to input the text file
String.processLineByLine(); //line by line reading from the text
public Generator(String txt) {
file = new File(txt); //open a new text file for scan after
public void processLineByLine() throws FileNotFoundException {
Scanner scan1 = new Scanner(file);
try { //
//Scanner to get each line
while ( scan1.hasNextLine() ){ //continue to the next line
processLine( scan1.nextLine() );
finally {
scan1.close(); //no next line = scanner close
public void processLine(String aLine){
//use a second Scanner to string the content of each line
Scanner scanner = new Scanner(aLine);
while ( scanner.hasNext() ){
String event = scanner.next(); // name the columns
String co1 = scanner.next();
String co2 = scanner.next();
String co3 = scanner.next();
String competitor1 = scanner.next();
String competitor2 = scanner.next();
String competitor3 = scanner.next();
System.out.println( event + ": (Gold) " + competitor1 + co1 + ", (Sliver) " + competitor2 + co2 + ", (Bronze) " + competitor3 + co3);
} //print out the result
scanner.close(); // close the scanner


text:
VCA Blossom Hill Animal Hospital
- Where
- 955 Blossom Hill Road, San Jose , CA
- Call
- (408) 462-7123
- Tags
- Pets, Veterinarians
|Claim this listing
We're more than an animal hospital! We're the place where pet parents know they can bring their pets for superb veterinary care that sets new standards for quality and kindness. For pets and pet parents alike, a trip to our clinic is an opportunity to see how our neighborly, welcoming staff cares for your pet as if it were their own, and treats you with the friendliness and respect you'd expect from an industry leader.
We are an AAHA accredited hospital offering radiology, discounted vaccines, and more. We accept Veterinary Pet Insurance. We have been serving the community for more than 20 years, and we look forward to serving you!


text:
December 19th 2018: Preparing for site redesign... Following the recent unwelcome hacker attack, I'm making good progress with a full site redesign which I'm hoping to launch shortly. In the interim, though, I'll still be continuing my monthly multitrack uploads and gradually adding new video content to the Mixing Secrets For The Small Studio resource pages in support of the newly released second edition. If you'd like to assist my ongoing development of this site, please consider joining the Cambridge-MT Patrons. Thanks for your understanding. Mike S.
Mixing Secrets For The Small Studio
Arise: 'Run Run Run'
Sign up for the monthly Small-studio Secrets News mail to get info on my latest free recording and mixing resources!
Spotted a broken link? Need more audio examples or other resources? Get in touch!
|The Cambridge-MT site is hosted by Indigo Technologies & BigScoots


text:
MTU Friedrichshafen, as a manufacturer of drive systems for applications in shipping, heavy vehicles, power supply and railways, enjoys world-wide recognition for reliability, technology and extensive customer care. We invite you as innovative suppliers to take up this challenge together with us.
Learn here about our procurement programme and our requirements.
Do you have an innovative product or a pioneering idea, which you would like to present us? Then please contact us under the following email:


text:
|Authored By: from The Light Body transformational cooking guide.
|Quinoa will give this tabouleh a texture you are sure to love.
|Diet Types: Dairy Free, Vegan, Vegetarian
|Serves: 6
|Cooking Time: Under 30 minutes
|Rinse Quinoa in fine mesh sieve. Bring water to boil in medium saucepan. Add broth powder and stir. Reduce heat, simmer until liquid is absorbed (about 15 min). Fluff with fork and allow to cool. Combine all remaining ingredients with Quinoa, tossing to blend. Cover; chill several hours or overnight. Allow to warm slightly before serving to liquify the olive oil.
|Printable Version
|E-mail a Friend


text:
Today's security challenges require open, collaborative approaches to detect threats, reduce risk, and ensure compliance. The McAfee Security Innovation Alliance (SIA) provides customers with integrated security solutions that allow them to resolve more threats faster with fewer resources.
Through the SIA program, we help accelerate the development of interoperable security products, simplify the integration of these products with complex customer environments, and provide a truly integrated, connected security ecosystem to maximize the value of existing customer security investments.
Learn more about how our open partner ecosystem strengthens cybersecurity.
Driving Technology Leadership
McAfee SIA partners are screened for innovation, strategic value, and market leadership in their respective market segments that complement the McAfee solution portfolio. Central to our relationship with each partner is at least one customer use case. Built around innovative integration ideas, use cases improve threat visibility and create powerful new security behaviors and workflows. Only after the partner completes extensive McAfee engineering testing will the integrated product receive the McAfee Compatible designation.
For a brief profile of partners and joint solutions that complement McAfee solutions, visit the SIA Partner Directory.
Partnership Levels & Requirements
We work with innovative security software vendors who have products that can enhance, augment, strengthen, and broaden the core functionality of our advanced, diverse product portfolio. To help you achieve success, McAfee provides expert technical support, tools to facilitate integration development, McAfee product access for joint solution development, comprehensive product training, and global go-to-market activities. Benefits accumulate as you strengthen your commitment to the partnership.
Associate Partners
Receive access to our engineering resources to make products compatible with McAfee solutions.
Technology Partners
Receive the designation and use of "McAfee Compatible" and eligibility for several joint marketing opportunities.
Sales Teaming Partners
Increase market presence, market share, and revenue by leveraging our extensive sales force of more than 3,000 sales professionals.
|Associate Partners
|Technology Partners
|Program Agreement
|Assigned Alliance Manager and Marketing Contact
|Two Assigned Development Contacts
|Annual Program Fee
|Based on integration track
|Based on integration track
|Compatibility Testing Fee
|Based on integration track
|Based on integration track
|Compatibility Testing with Each Major Release
|Enablement Benefits
|Welcome Kit
|Access to SIA Technical Lead
|Online Technical Product Training
|Technical Newsletters
|Technology Benefits
|Not-for-Resale Copy of Relevant McAfee Products
|McAfee Product Roadmap Reviews
|By invitation
|By invitation
|Access to McAfee SDK and Developer Support (ePO integration track)
|Two contacts
|Two contacts
|Access to Technical Support KnowledgeBase (ePO integration track)
|SIA Developer Conference (ePO integration track)
|Sales & Marketing Benefits
|SIA Partner Directory
|McAfee Event Exhibition and Sponsorship
|By invitation
|By invitation
|"McAfee Compatible" Logo
|Product Compatibility Announcement in McAfee Newsletters
|PowerPoint Deck for McAfee and Partner Sales Teams
|Co-Branded Solution Brief
|By invitation
|McAfee Sales Engineering Training on Joint Solution
|By invitation
|Press Release
|By invitation
|Yes, announcing promotion to Technology Partner
|Joint Webinar
|By invitation
|Partner Advisory Council
|By invitation
|Market Development Funds (MDF)
|By invitation
Next Steps
Become a Partner
Join the McAfee Security Innovation Alliance.Apply Now
Email Us
Contact us if you have questions about becoming a partner.
Find a Partner
Search our partners by integration and find partners with verified McAfee Compatible solutions.Partner Directory


text: Many, many people have worked on this project in the past. This includes Stoneford, Wulf, and Neonnq. As always the Build Calculator is a Kaw community project, therefore I would like to extend my gratitude to everyone who have made this possible. Huge shoutout to Choccy for the stats page. This Calculator is not maintained by ATA, and any errors are my own. Having said that, if you see an error, tell me so I can fix it ASAP. Simply put the number of buildings you have or want to have in the yellow column, filled with 0s, to get an idea of your build, or your dream build. Without further ado, here is the spreadsheet.Make a copy and then edit it for yourself. Link: KAW BUILD V9.2 Spreadsheet For on the go, ie, without Internet connection/download Excel file


text:
There {{ ctrl.areIs }} {{ ctrl.collectionCount }} map{{ ctrl.pluralize }} stored on this computer.
Sign in to save {{ ctrl.itThem }} to your account.
Not yours? Don't want them?
Delete them forever.
Just want to search for an address?
You want to Find Places!
Want to print your directions?
Print Here!
Ready for detailed directions?
You want to View Route Directions!
And here!
Thank you for being a loyal MapQuest user. For a better experience, we have migrated to the new MapQuest and have more to offer than ever before.
With faster loading, sleeker and easier to read maps, along with less intrusive advertising, we know you'll love it. If you don't, just let us know. We're constantly making updates to improve the experience.
AOL and our partners use cookies for a variety of purposes, including collecting information about site usage, content management,
providing customized content and ads, and traffic measurement and analysis. By continuing to use this site, or by clicking
I Agree, you agree to the use of cookies. Please
review our cookie policy for more information or to opt-out from the use of cookies.


text:
Chapter 8: Evolving a Custom Solution
On This Page
Introduction and Goals
Determining Your Next Steps
Expanding Active Directory Kerberos and LDAP Functionality
Introduction and Goals
Now that you have deployed your custom solution for establishing interoperability between computers running the UNIX or Linux and Microsoft® Windows® operating systems, you might want to explore expanding your solution. You can take advantage of the services provided by the Active Directory® directory service beyond authenticated logon and authorization. You might also want to extend the solution to include additional operating systems or versions.
The solution that is now in place in your organization is one of several possible custom solutions for implementing interoperability between Windows Active Directory and UNIX or Linux clients. Each of these solutions is described in detail in Volume 2: Chapter 4, "Developing a Custom Solution" of this guide.
Depending on which solution your organization deploys, interoperability between UNIX hosts and an Active Directory domain is established as follows:
Authentication only. An End State 1 solution, as defined in this guide, enables UNIX or Linux clients to use Kerberos to authenticate to Active Directory. If your solution is an End State 1 solution, UNIX or Linux clients continue to use the existing UNIX-based authorization method.
Authentication and authorization. An End State 2 solution, as defined in this guide, uses both Active Directory–based Kerberos authentication and Active Directory–based lightweight directory access protocol (LDAP) authorization to support UNIX or Linux clients.
Some custom End State 1 or End State 2 solutions described in this volume use native operating system (native OS) components available by default in UNIX or Linux; others add the use of open source components and free software downloads to the native OS components. Both native OS and open source custom solutions described in this guide include solutions designed for Red Hat 9 Linux and for Solaris 9 UNIX.
CAUTION We do not recommend deploying the native OS Red Hat 9 solution in your production environment because of the security risks inherent in this solution. For more information, see the discussion in the section "Use Red Hat 9 with Native OS Components for End States 1 and 2" in Volume 2: Chapter 4, "Developing a Custom Solution."
This chapter provides a number of approaches to evolving your interoperability solution beyond the End State 1 or End State 2 solution your organization chooses to deploy in your production environment. In addition to the approaches suggested here, you might identify other approaches appropriate for your organization.
Intended Audience
The audience for this chapter includes:
Any business decision maker or technical decision maker who is investigating whether to develop and deploy one of the custom solutions included in this volume or, alternatively, whether to buy one of the commercial solutions. Some of the limitations or challenges for evolving an End State 2 solution described in this chapter for the custom solutions are addressed in one or both of the commercial solutions:
Volume 2: Chapter 2, "Using Quest Software VAS to Develop, Stabilize, Deploy, Operate, and Evolve End State 2."
Volume 2: Chapter 3, "Using Centrify DirectControl to Develop, Stabilize, Deploy, Operate, and Evolve End State 2."
All teams who are investigating or who have already participated in developing, testing, releasing, or operating any of the custom solutions described in this volume.
This chapter is especially appropriate for developers of a custom solution who want to take advantage of Kerberos authentication and Lightweight Directory Access Protocol (LDAP) directory capabilities in their applications.
Determining Your Next Steps
Review your deployment to identify additional areas of your environment that can be considered for integration with Active Directory. You can then evaluate the areas that you identify for potential ways to extend the capabilities of your new solution, whether that solution currently includes only authentication or includes both authentication and authorization.
Review Your Deployment
You can start by asking the following questions:
Did we achieve our desired goals?
Are we realizing the expected benefits?
Are there secondary objectives or nice-to-haves that we did not achieve?
What areas did we exclude from the scope of the previous project that might be included in the scope in the future?
If we were unable to retire some of the existing infrastructure components in the previous project, what do we need to do to retire them in the next project?
Did we encounter any significant problems in using our new system, such as problems in usability, performance, features, or stability?
Identify Areas for Evolving the Solution
A further set of questions can complement your review process and help identify the next steps for evolving your UNIX-to-Windows interoperability solution. These include:
What other operating systems or versions can be incorporated into the Active Directory–based solution?
What other applications can use Active Directory for authentication, authorization, or directory services?
What other authentication, authorization, or directory services can be integrated with Active Directory?
What other major systems in the enterprise can be integrated with Active Directory? For example, provisioning, identity management, or enterprise system management systems might be candidates for integration.
When you evaluate other systems to integrate into your Active Directory–based environment, examine closely their authentication, authorization, and directory service mechanisms to determine which of them are good candidates for integration with your new solution.
Extend the Capabilities of Your Solution
Many options are potentially available for extending the capabilities of your interoperability solution for UNIX and Windows. The following subsections describe some of these options.
Extending from End State 1 to End State 2
If the solution you deployed is an End State 1 solution, that is, if it provides Active Directory–based authentication for UNIX clients but continues to use UNIX-based authorization, you can extend the solution to End State 2 by enabling UNIX clients to retrieve authorization information from the Active Directory LDAP store.
Factors to consider when you prepare to migrate authorization data to Active Directory might include migrating user authorization data from multiple authorization stores and planning migration of user authorization data and computers.
For more information about these factors, see "End State 1 or End State 2" in the overview of Volume 2: Chapter 4, "Developing a Custom Solution" in this guide.
Extending the Solution to Other Systems
You might want to extend Active Directory–based Kerberos authentication to other systems that already exist in your environment. You might also want to add commercial Kerberized (Kerberos-enabled) products to your environment. For a list of companies that provide Kerberized products, see "Commercial Kerberized Applications" later in this chapter.
You can modify existing custom applications to support Kerberos capabilities only or to support both Kerberos and LDAP capabilities. You can also require that new custom applications support Kerberos and LDAP. For commercial applications that you already use or are considering acquiring, contact the vendor to see what support their applications offer for Kerberos and LDAP.
Extending Certificate Services
The native OS Solaris End State 2 solution described in Volume 2: Chapter 4, "Developing a Custom Solution" uses public key certificates to implement Secure Sockets Layer (SSL). If your deployment currently uses certificates purchased from an outside provider, you might consider using Microsoft Windows Server™ 2003 Certificate Services to deploy your own public key infrastructure (PKI) in order to generate the certificates required by this solution.
Extending the Solution to Additional Operating Systems and Versions
You can extend your interoperability solution to other operating systems and operating system versions. Ideal first candidates for a native OS solution include Solaris 10, Fedora, Red Hat Enterprise, or HP-UX 11i. Most versions of native IBM AIX (versions 5.2 and earlier) do not interoperate well with Active Directory and are, therefore, not appropriate candidates for extending a native OS solution.
You can expand open source solutions to support older operating system versions (such as Solaris 8 or HP-UX 11.0) or operating systems such as most versions of IBM AIX that do not support the solution natively.
For a detailed description of native OS solutions and open source solutions that use Red Hat 9 or Solaris 9 to implement either End State 1 or End State 2, see Volume 2: Chapter 4, "Developing a Custom Solution."
Implementing Stronger Encryption Types for Kerberos Authentication
Kerberos authentication supports a number of authentication types. The authentication types supported depend on the particular implementation. The custom solutions described in this volume support DES-CRC, DES-MD5, and, for open source solutions only, RC4-HMAC. These three encryption types are among the most commonly used. The best practice is to use the strongest and, therefore, most secure encryption type supported by the solution that you select.
The following encryption types are listed in increasing order of strength:
DES-CRC. This encryption type, also known as des-cbc-crc, is the weakest encryption type supported. However, it is supported by almost all implementations, including the native OS solutions described in this volume because it was one of the original encryption types defined.
Note Microsoft does not recommend the use DES-CRC because it provides weaker security than DES-MD5 or RC4-HMAC. Use DES-CRC only if no other option is available.
DES-MD5. This encryption type, also known as des-cbc-md5, is somewhat stronger than DES-CRC. Because this encryption type is one of the earliest encryption types defined, it is supported by almost all implementations, including the native OS solutions described in this volume.
RC4-HMAC. This encryption type was developed by Microsoft and is stronger than both DES-CRC and DES-MD5. RC4-HMAC is relatively new and is therefore not supported by all implementations. The open source solutions described in this volume do support RC4-HMAC, but the native OS solutions do not.
If you extend a native OS solution to support newer operating system versions, you might be able to implement stronger encryption types supported by these later versions. Similarly, if you have implemented an open source solution with the weaker DES encryption types to support legacy Kerberos applications, you might be able to implement stronger encryption as these applications are modified or retired.
For information about Windows Server 2003 support for these encryption types, see "How the Kerberos Version 5 Authentication Protocol Works" at http://technet2.microsoft.com/WindowsServer/en/Library/4a1daa3e-b45c-44ea-a0b6-fe8910f92f281033.mspx.
For more information about Kerberos encryption types in general, see RFC 3961, "Encryption and Checksum Specifications for Kerberos 5," at http://tools.ietf.org/wg/krb-wg/draft-ietf-krb-wg-crypto/rfc3961.txt.
Integrating Other Services into Active Directory
If you extend your interoperability solution by integrating other operating systems or other operating system versions into an enterprise-wide authentication system based on Active Directory, you might find that additional services can benefit from integration with Active Directory. You can take advantage of Kerberos features—such as strong authentication, single sign-on (sometimes referred to as SSO), delegation, and encryption—for a variety of services, including the following:
Services that distribute software or data to computers
Services that automate tasks
Printing services
File sharing services
Authentication services for Web applications and Web services
Services that perform backups and consolidate backups
Services that automate distribution and renewal of X500 certificates (or other entities)
Patch management services
System or health management services
Identity management services
Migrating NSS Services to Active Directory LDAP
If you implemented one of the End State 2 solutions described in this volume, you have already migrated the UNIX passwd and group Name Service Switch (NSS) services to the Active Directory LDAP server. NSS is a service that Solaris and Red Hat clients can use to obtain identity and authorization information about users, groups, or computers from a variety of sources, including an LDAP directory such as Active Directory. As you evolve your solution, you might want to migrate additional NSS services to Active Directory.
NSS services are configured in the UNIX /etc/nsswitch.conf file to obtain information for their services from one or more sources, including:
Local files (such as /etc/hosts or /etc/passwd)
Network Information Service (NIS)
Network Information Service Plus (NIS+ or NISPLUS)
Domain Name System (DNS)
Because NSS evolved alongside NIS, these data sources are often generically referred to as NIS maps although a NIS map is technically the data source for NIS only.
NSS services that you might choose to migrate include hosts, ethers, networks, rpc, services, protocols, netgroup, bootparams, aliases, publickey, netid, netmasks, and automount.
For more information about NIS, see http://docs.sun.com/app/docs/doc/817-4843/6mkbebda4?a=view.
For more information about NSS and NIS, see http://docs.sun.com/app/docs/doc/816-4857/6mb1qus34?a=view.
Redirecting Authentication and Authorization of Kerberos and LDAP-enabled Applications to Active Directory
You can configure existing commercial applications in your environment that use Kerberos for authentication or LDAP for authentication or authorization—either against private data stores (such as are provided in applications such as Oracle and Sybase) or against existing shared data stores (such as UNIX Kerberos key distribution centers, NIS, the Sun Microsystems iPlanet Directory Server, or IBM Tivoli Directory Server)—to direct authentication and authorization requests to Active Directory. For Kerberized applications, this can provide for single sign-on for your UNIX users. Kerberos single sign-on makes multiple applications and services available to the user over the network without the user having to provide credentials (typically, user name and password) more than once.
Applications in your environment that are good candidates for replacing their current authentication and authorization methods with Active Directory Kerberos and LDAP include:
Commercial database products, such as Sybase and Oracle.
Commercial and open source Web servers (such as Microsoft Internet Information Services [IIS], and Apache), browsers, and applications.
Commercial and open source remote-access tools, such as Secure Shell (SSH) and Hummingbird Exceed.
You might also have custom applications in your environment that you want to modify so that they direct authentication and authorization requests to Active Directory. These applications might already use Kerberos, or might use both Kerberos and LDAP, which you could retire and use Active Directory instead. Alternatively, you could introduce Kerberos and LDAP capabilities to these applications by enabling them to use Active Directory.
Note For information about adding or modifying applications that do not already support Kerberos and LDAP, see "Expanding Active Directory Kerberos and LDAP Functionality" later in this chapter.
Replacing Standard Tools Such as Telnet and FTP with Kerberized Versions
You can significantly increase security for remote access by implementing standard Kerberized versions of applications such as telnet, ftp, rlogin, rsh, and rcp. Kerberized versions of these tools are more secure than non-Kerberized versions, all of which transmit data over the network in clear text.
When you use a standard, non-Kerberized version of one of these tools in combination with one of the custom solutions in this volume that uses Kerberos with pluggable authentication modules (PAM) (which enables UNIX-based computers to authenticate against Active Directory), you are using Kerberos for authentication. However, with this method, you use the standard tool to open a non-Kerberized channel from the local client computer to the UNIX client computer (the destination computer) and then initiate the Kerberos session on the UNIX client computer. In this scenario, when a user logs on to a UNIX client computer remotely using one of these tools, the user's user name and password are sent from the user's initiating computer (that is, the local computer, which might be a Windows computer) to the UNIX client computer, and then the UNIX client computer uses this user name and password to make a request (via PAM) to the Kerberos Key Distribution Center (KDC) on the Active Directory server to request a Kerberos ticket-granting ticket (TGT) from the KDC.
If the user name and password are correct, a TGT is returned to the UNIX client and stored in the credentials cache on the UNIX client. Establishing this connection is transparent to the user.
Because the Kerberos authentication attempt is not initiated until the request reaches the UNIX client computer, the user name and password, and any data, might be sent in clear text from the initiating computer to the UNIX client computer.
For this reason, we recommend using SSH (which provides an encrypted channel for communication with or without the use of Kerberos) or using Kerberized versions of these tools in a production environment. By replacing the standard tools with Kerberized versions, you prevent the user's password from being sent over the network and you allow for encryption of the data channel using Kerberos.
For more information about Kerberized versions of remote access tools, see:
"Kerberized Tools" later in this chapter.
The descriptions of non-Kerberized versus Kerberized tools in "Use Non-Kerberized UNIX Tools for Base Functionality Testing" and "Switching to Kerberized Remote Access Tools for Extended Testing" in Volume 2: Chapter 5, "Stabilizing a Custom Solution."
Implementing DNS for Kerberos KDC Lookups
The instructions provided for developing the custom solutions described in this volume do not cover implementing Domain Name System (DNS) lookups for Kerberos. Instead, Active Directory servers that handle authentication are specified in the Kerberos configuration file, krb5.conf, that is used to configure Kerberos client functionality on a UNIX client. You can provide for automatic Kerberos load balancing similar to that used by Windows by implementing DNS lookups. This will eliminate the need to specify KDCs in the krb5.conf file.
Note It is not currently possible to configure DNS lookups for LDAP. Therefore, the custom End State 2 solutions will continue to require that you manually provide for load balancing by specifying individual Active Directory servers in the LDAP configuration files.
Adding or Modifying Password Change Tools
Users can use the standard UNIX Kerberos password change tool, kpasswd, to change their passwords. In a large enterprise, managing password changes through the use of this tool individually on each UNIX-based computer can be difficult. If you have an existing enterprise password management tool, consider integrating password changes for UNIX users into it or redirecting it to Active Directory.
If you do not have an enterprise password management tool or the existing tool is not appropriate for your UNIX-to-Windows interoperability solution, implementation options include:
Commercial password management or identity management solutions that support Active Directory.
A custom application that uses the MIT Kerberos libraries for password change against Active Directory.
A custom tool or script that uses kpasswd for Active Directory password changes. Such a tool could be designed to also use the native passwd tool for local password changes as well. This would allow both local and Active Directory users to change their passwords using the same tool.
Adding or Modifying User-Provisioning Tools
The solutions described in this volume use the Active Directory Users and Computers snap-in tool to manage UNIX user data. For End State 2, the solutions use a tool such as Active Directory Service Interfaces Edit (ADSI Edit) to manage UNIX group membership. In an enterprise environment, use of these tools—especially ADSI Edit—does not scale well. You will probably find it necessary to modify an existing user-provisioning tool or implement a new one to support management of UNIX users and, for End State 2, UNIX user attribute data in Active Directory.
If you do not have an enterprise user-provisioning tool or the existing tool is not appropriate for your UNIX-to-Windows interoperability solution, implementation options include:
Commercial user provisioning solutions that support Active Directory. You might need to customize some of these solutions to include the UNIX attributes.
A custom application that uses the MIT Kerberos libraries for password management and LDAP libraries for user attribute management (for both End States 1 and 2).
Expanding Active Directory Kerberos and LDAP Functionality
Implementing one of the custom UNIX-to-Windows interoperability solutions described in this volume opens the door to extending the strong security and simplified and centralized directory storage offered by Kerberos and LDAP throughout your enterprise. For example:
Kerberos. Kerberos includes a number of technical capabilities that enable you to use your solution in new ways. One important example is single sign-on—the capability that lets a user log on once and then access network resources without being repeatedly prompted for user name and password.
LDAP. An LDAP directory store contains a very large number of discrete items of information about users, groups, computers, and other network entities. Using the Active Directory LDAP store to store this information lets you use Active Directory to support a wide variety of applications.
The following subsections describe some of the ways that you can extend your solution to include Kerberos single sign-on and to expand your use of the Active Directory LDAP store.
Implement or Expand Kerberos Single Sign-on Functionality
Single sign-on and credential delegation (also known as credential or ticket forwarding) allow you to access Kerberized applications not only on the computer on which a user acquires the Kerberos credentials by logging on but also on other computers in the enterprise or through multitiered applications. When an authenticated user attempts to access a network resource (and if the user is authorized to access that resource), the user can connect to the network resource without being prompted again for user name and password.
Credential delegation can be helpful, for instance, with database applications. For example, in recent years the need for sophisticated auditing has increased as a result of regulations such as those in the Sarbanes-Oxley (SOX) Act in the United States or the EU Data Protection Directive in the European Union. One way to achieve such a sophisticated level of auditing with a database application is to use Kerberos to authenticate users to the database. By using Kerberos credential delegation, the user can authenticate to a Web application, which then delegates the user's authentication to the back-end database.
Using Kerberized Tools
Using Kerberized versions of standard remote access tools, such as telnet, ftp, rlogin, rsh, rcp, and ssh, greatly increases security for remote access in your environment and allows you to use single sign-on for this access.
Examples of Kerberized versions of these tools include:
PuTTY. The extensions to the PuTTY SSH product by Certified Security Solutions (CSS) allow for the use of Kerberized ssh from a Windows desktop to a UNIX-based computer. For more information, see the Certified Security Solutions page at http://www.css-security.com, click Downloads, and then click PuTTY with GSSAPI and Kerberos v0.56b2.
OpenSSH. The open source Open SSH package is included in many Linux distributions or can be installed separately on most UNIX platforms. For more information, see http://www.openssh.org.
OpenSSH is also available with the cygwin tools that let you port UNIX applications to Windows without extensive changes to the source code. In addition to enabling porting, the cygwin environment and tools are useful without porting any software or compiling any code. For more information, see http://cygwin.com.
OpenSSH tools are available for Windows Services for UNIX from Interop Systems. For more information, see the Interop Systems page "UNIX Tools for Windows" at http://www.interopsystems.com. Interop Systems also offers a commercial secure shell product for Windows.
FileZilla. The ftp tool FileZilla supports Kerberos. For more information, see http://sourceforge.net/projects/filezilla.
Native telnet , ftp , and r'utils. Almost all UNIX and Linux platforms have native versions of telnet, ftp, and the remote tools rlogin, rsh, and rcp. These tools are collectively known as the r'utils. In most cases, the UNIX and Linux platforms also include versions of the r'utils that support Kerberos. Many of these tools will interoperate successfully with Active Directory using Kerberos. For more information, see the man (manual) pages of the UNIX or Linux platform.
Older versions of these platforms might not offer such tools or the tools might not be fully compatible with Active Directory.
Open source telnet , ftp , and r'utils. Open source MIT Kerberos includes Kerberized versions of telnet, ftp, and r'utils. Information about MIT Kerberos is available at http://web.mit.edu/Kerberos.
Open source telnet , ftp , and r'utils for Windows. Open source MIT Kerberos for Windows (a separate package from the standard MIT Kerberos package) includes Kerberized versions of telnet, ftp, and r'utils. Information about MIT Kerberos for Windows is available at http://web.mit.edu/kerberos/kfw-3.0/kfw-3.0/relnotes.html.
Note The preceding list is not exhaustive. Some of the products and services listed previously might not work with Active Directory or they might not work in your particular environment. For a brief description of Kerberized tools versus non-Kerberized tools, see "Use Non-Kerberized UNIX Tools for Base Functionality Testing" and "Switching to Kerberized Remote Access Tools for Extended Testing" in Volume 2: Chapter 5, "Stabilizing a Custom Solution."
Using Commercial Kerberized Applications
Commercial Kerberized applications support Kerberos authentication and thus allow single sign-on to those applications. Commercial Kerberized applications are available from many companies, including:
Apple. Macintosh OS X, including the base operating system and some applications, supports Kerberos authentication. Information about Windows-to-Macintosh Kerberos interoperability is available at http://www.apple.com/macosx/features/windows.
Sybase. Sybase provides a database that supports Kerberos authentication. Information is available at http://www.sybase.com.
SAP. SAP offers a scalable platform that supports Kerberos authentication. Information is available at http://www.sap.com/usa/index.epx.
Oracle. Oracle supports Kerberos authentication to their database. Information is available at http://www.oracle.com/index.html.
PeopleSoft. PeopleSoft is a human resource–based application package that supports Kerberos authentication. It was acquired by Oracle Corporation in 2005. PeopleSoft information is available at http://www.peoplesoft.com/corp/en/public_index.jsp.
Hummingbird. Hummingbird offers several Kerberized applications, including Hummingbird Connectivity. Information is available at http://www.hummingbird.com.
Cisco Systems. The Cisco Internetworking Operating System (IOS) supports Kerberos authentication. Information is available at http://www.cisco.com.
WRQ. WRQ, which has merged with Attachmate to form AttachmateWRQ, offers several Kerberized tools, including Reflection Secure and Reflection Signature. Information is available at http://www.wrq.com.
Eudora. Eudora is an e-mail application, available in free and paid versions, that supports Kerberos authentication. Information is available at http://www.eudora.com.
IBM. The WebSphere platform supports Kerberos authentication. Information is available at http://www-306.ibm.com/software/websphere.
Computer Associates. SiteMinder is a Web access management product suite that supports Kerberos authentication. Information is available at http://www.ca.com.
Microsoft. Microsoft products that support Kerberos authentication and Kerberos single sign-on include the following:
Microsoft SQL Server. Microsoft SQL Server™ is the Microsoft implementation of a Structured Query Language (SQL), which is used for creating and managing data in a relational database. Information is available at http://www.microsoft.com/sql/default.mspx.
Active Directory LDAP. LDAP, the directory service protocol used by Active Directory, is an open network protocol standard for querying and retrieving information about network objects from a distributed directory. Because you can use Kerberos authentication to the Active Directory LDAP directory, Active Directory LDAP can be considered a Kerberized application. Information about LDAP is available at http://www.microsoft.com/windows2000/techinfo/howitworks/activedirectory/ldap.asp.
CIFS/SMB remote file access. Common Internet File System (CIFS), based on the earlier Server Message Block (SMB), is a protocol that enables a client system to request file and print services from server systems over a network regardless of the underlying operating system platforms of the respective systems. Information is available at http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cifs/protocol/cifs.asp and http://msdn.microsoft.com/library/default.asp?url=/downloads/list/windevwin.asp.
Secure dynamic update for DNS. A dynamic update permits DNS clients to dynamically register and update their resource records in DNS zones. Unsecured dynamic update allows any computer to modify any record, which means that an attacker can modify DNS zone data and then impersonate an existing server. To prevent server impersonation, you can use Active Directory–integrated DNS zones and configure them for secure dynamic update. When you use secure dynamic update, only computers and users explicitly specified in an access control list (ACL) can modify objects within a DNS zone. Information is available at http://technet2.microsoft.com/WindowsServer/f/?en/Library/c4291308-ab72-49bb-88f6-4aa56fa216611033.mspx.
Distributed File System. The Windows Distributed File System (DFS) service allows system administrators to organize distributed network shares into a logical namespace, enabling users to access files without specifying their physical location and providing load sharing across network shares. Information is available at http://technet2.microsoft.com/WindowsServer/en/Library/20ffb860-f802-455c-9ca2-5194f79a9eb41033.mspx and http://www.microsoft.com/windowsserver2003/technologies/storage/dfs/default.mspx.
Certificate Services. A public key infrastructure (PKI), implemented using Windows Certificate Services, allows a client to use Kerberos authentication when requesting a certificate from a certification authority (CA). Information is available at http://technet2.microsoft.com/WindowsServer/f/?en/Library/4ee4fe7e-136f-43fd-8bd3-f3d9766d82c91033.mspx.
DCOM RPC security provider. The Microsoft Distributed Component Object Model (DCOM), which extends the Component Object Model (COM), is platform independent and supports communication among objects on different computers on a local area network (LAN), wide area network (WAN), or across the Internet. DCOM allows an application to be distributed across multiple locations. Information is available at http://msdn.microsoft.com/library/en-us/dnanchor/html/dcom.asp?frame=true.
Open Source Kerberized Applications
Open source applications that support Kerberos authentication and Kerberos single sign-on include:
PHPBB. PHPBB is an open source bulletin board package based on the PHP server language. Information is available at http://www.phpbb.com.
Kermit. Kermit is a Columbia University project that offers file transfer and Internet security services. Information about the Kermit Project* *is available at http://www.columbia.edu/kermit.
The Microsoft Windows version of Kermit requires licensing fees. Information is available at http://msdn.microsoft.com/library/default.asp?url=/library/en-us/randz/protocol/hyperterminal_kermit_file_transfer.asp.
Samba. SAMBA provides file and print services for a variety of operating systems, including Windows. Information is available at http://us4.samba.org/samba.
OpenAFS. OpenAFS is a distributed file system developed at Carnegie Mellon University. Information is available at http://www.openafs.org.
KDE Kmail. Kmail is a mail client that works with the K Desktop Environment (KDE). Information is available at http://kmail.kde.org.
Mozilla Thunderbird. Thunderbird is an e-mail application. Information is available at http://www.mozilla.com/thunderbird.
Novell. Information about Novell's Evolution e-mail client for Linux is available at http://www.novell.com.
Web Applications
Several browsers, Web servers, and Web-based applications provide support for single sign-on using Kerberos. In most cases, this is accomplished through the use of the HTTP Negotiate Protocol. The HTTP Negotiate Protocol uses Simple and Protected Negotiate (SPNEGO) to negotiate the security protocol to use for the connection.
In Microsoft Internet Information Services (IIS), when you enable Integrated Windows Authentication, you are enabling the HTTP Negotiate Protocol. With Integrated Windows Authentication, the browser tries to use the current user's credentials from a domain logon, and, if the user is logged on to the local computer as a domain user, the user does not have to authenticate again when the user accesses a network computer in that domain. You must use Microsoft Internet Explorer 2.0 or later as your Web browser if you are using Integrated Windows Authentication.
Note For more information about using the Negotiate Protocol and SPNEGO to provide Web-based integrated authentication, see HTTP-Based Cross-Platform Authentication via the Negotiate Protocol, available at http://msdn.microsoft.com/library/en-us/dnsecure/html/http-sso-1.asp.
Browsers, Web servers, and Web-based applications that support single sign-on include the following:
Mozilla. Starting with version 1.7.5, the Mozilla browser supports single sign-on to Web-based applications. Mozilla is available at http://www.mozilla.org.
Firefox. Firefox is the next generation of the Mozilla browser. Information is available at http://www.mozilla.com/.
Apache Web Server. Apache is a Web server product available from the Apache Software Foundation. General information is available at http://www.apache.org.
Add-on modules for Apache provide integrated authentication to the Apache Web server. Information is available at http://modauthkerb.sourceforge.net.
Microsoft Internet Explorer (IE). Information about Windows Internet Explorer is available at http://www.microsoft.com/windows/ie/default.mspx.
Microsoft Internet Information Service (IIS) Web Server. IIS is a component of the Microsoft Windows Server products. Information is available at http://www.microsoft.com/windowsserver2003/iis/tryiis/default.mspx.
Microsoft SharePoint. Microsoft SharePoint® is an example of an application that can take advantage of Integrated Windows Authentication to provide single sign-on in an intranet environment. Information is available at http://www.microsoft.com/office/sharepoint/prodinfo/default.mspx.
Operating Systems
Most recent versions of UNIX and Linux operating systems, as well as recent versions of Windows and Macintosh operating systems, contain some native support for Kerberos. Examples of operating systems that include Kerberos support include:
Sun Microsystems Solaris 8 or later.
Linux (most, if not all, current Linux distributions include support for Kerberos).
Hewlett-Packard HP-UX 11.0 or later.
IBM AIX 5.1 or later.
CAUTION Not all operating systems that support Kerberos are fully interoperable with Active Directory. Check with the operating system vendor to determine if Active Directory interoperability is supported.
Kerberizing Your Applications
An application is considered Kerberized when it implements Kerberos for authentication. Kerberizing custom applications can offer a number of significant benefits, including:
Strong authentication. Applications that incorporate strong authentication allow the identities of networked users, clients, and servers to be verified without transmitting passwords over the network.
Mutual authentication. Mutual authentication is an optional feature in a Kerberos application and adds increased security to a Kerberos transaction by requiring both that the client (typically a user) prove its identity to the server and that the server prove its identity to the client.
Single sign-on. True single sign-on occurs when the user authenticates once and is then able to access all systems and applications on the network that the user is authorized to access. In a corporate setting, the user typically logs on to the computer once and is not prompted for authentication again when accessing any application.
Integrity and privacy. Kerberizing an application can allow it to use Kerberos credentials to implement protection of the data communications of that application. The protection is normally implemented using the Generic Security Services Application Programming Interface (GSSAPI) to provide data integrity and encryption (confidentiality).
Depending on the application, incorporating Kerberos authentication can be a relatively straightforward or a somewhat complex process**.** Kerberos can be incorporated into an application either at the library level or, more commonly, through the GSSAPI. On Windows, the GSSAPI is implemented as part of the Security Support Provider Interface (SSPI). GSSAPI toolkits are available in many UNIX operating system distributions and in open source as part of the MIT Kerberos project.
For more information, see:
SSPI/Kerberos Interoperability with GSSAPI , * *available at http://msdn.microsoft.com/library/en-us/secauthn/security/sspi_kerberos_interoperability_with_gssapi.asp.
Solaris 9: GSS-API Programming Guide, available at http://docs.sun.com/app/docs/doc/816-1331.
The Sun Microsystems Java implementation includes a GSSAPI, available at http://java.sun.com.
MIT Kerberos, available at http://web.mit.edu/kerberos.
Accessing Authorization Data Embedded in Kerberos Tickets
In some cases, you might also want to access the authorization data that is embedded in some Kerberos tickets obtained from Active Directory. Unlike most other Kerberos implementations, Active Directory includes authorization data in the Kerberos authorization field in a structure known as the Windows Privilege Attribute Certificate (PAC). Most UNIX applications do not understand the PAC data included in Kerberos credentials obtained from Active Directory. When you Kerberize your own application, you have the option to make use of this data.
For more information, see:
- "Utilizing the Windows 2000 Authorization Data in Kerberos Tickets for Access Control to Resources*," *available at http://msdn.microsoft.com/library/en-us/dnkerb/html/MSDN_PAC.asp.
Using SPNEGO with Kerberos
Many applications that implement GSSAPI also implement the SPNEGO protocol to negotiate the use of Kerberos. This is very common with Web applications and Web services. You might find it useful to integrate SPNEGO support into your application.
For more information, see:
"HTTP-Based Cross-Platform Authentication via the Negotiate Protocol*,"* available at http://msdn.microsoft.com/library/en-us/dnsecure/html/http-sso-1.asp.
Java™ 6 Security Enhancements, available at http://java.sun.com/javase/6/docs/guide/security/enhancements15.html.
Expand LDAP Directory Store Usage
LDAP is the standard protocol that clients use to retrieve information from directory servers. If you have deployed an End State 2 solution that enables Active Directory LDAP to support UNIX clients, possible approaches to extending your use of Active Directory LDAP include expanding the use of directory-enabled applications and migrating application information into Active Directory.
You can now store in Active Directory information about employees, computers, printers, conference rooms, customers, or anything else typically stored in a directory. This information can now be centrally managed, and it might be possible to eliminate redundant data stores. After implementing one of the End State 2 solutions described in this volume, both your Windows-based and UNIX-based computers can securely connect to the Active Directory LDAP server and can access any information stored there to which you grant them access.
Three approaches for expanding the use of Active Directory as an enterprise LDAP directory are:
Expanding the use of directory-enabled applications.
Migrating applications from another directory to Active Directory LDAP.
Migrating applications from stand-alone storage to Active Directory LDAP.
Although centralizing your authorization and directory information in a central store is typically advantageous, this might not be the best approach in all cases. Some applications might require extensive schema changes to the LDAP directory, and you might not want to do extensive schema changes. In other cases, adding a large amount of application-specific information to your central directory might also be viewed as undesirable.
Expanding the Use of Directory-enabled Applications
As you deploy new applications or expand the use of your existing applications, you might investigate applications that can use LDAP as a data store. By using Active Directory LDAP as the central data store, you might be able to greatly simplify the management of data storage as well as user provisioning.
A small selection of the large number of applications that support Active Directory LDAP (as well as other forms of LDAP), include:
SAS. Information is available at http://www.sas.com.
IBM Workplace Services Express. For information about this application, see the document titled "Introducing IBM Workplace Services Express," available at http://www-128.ibm.com/developerworks/lotus/library/wse-overview.
IBM WebSphere. Information is available at http://www-306.ibm.com/software/websphere.
Migrating Applications from Another Directory to Active Directory LDAP
You might have applications that are already using a directory service other than Active Directory. In this case, you can investigate migrating the directory information into Active Directory and having the application use Active Directory as its LDAP server. This might allow you to retire the existing directory server.
Migrating Applications from Stand-alone Storage to Active Directory LDAP
This approach applies differently to applications that are developed in-house than it does to commercial applications. With applications developed in-house, you have the option of adding the capability of using an LDAP directory. Many commercial applications can be configured to either use a stand-alone data store or to use an LDAP data store.
In both instances, you can determine the feasibility of this approach by evaluating the migration effort required, potential benefits, and Active Directory compatibility.
Other Considerations
When you investigate deploying or expanding one of the End State 1 or End State 2 solutions described in this volume, you might find it useful to consider using one or more of the Microsoft products described in the following subsections.
Using MOM for Management
You might consider using Microsoft Operations Manager (MOM) to monitor and manage your systems. MOM includes an Active Directory management pack. Alternatively, you can custom-develop your own management packs. You might be able to use management packs that already exist for your other systems, including your UNIX-based computers.
Information is available at:
For the latest MOM documentation, including the MOM 2005 software development kit (SDK), see the TechNet Web site at http://go.microsoft.com/fwlink/?linkid=33977.
For the latest information about MOM, see the MOM Web site at http://go.microsoft.com/fwlink/?linkid=6727.
To access the MOM core product documentation on the Web, see the Technical Resources section of the MOM Web site at http://go.microsoft.com/fwlink/?LinkId=8943.
Using MIIS for Synchronization
If you cannot consolidate all of your authentication systems, authorization systems, and directories into Active Directory, the best approach might be to synchronize the information with other systems by using Microsoft Identity Integration Server (MIIS).
Information is available at the Microsoft Identity Integration Server Web site at http://go.microsoft.com/fwlink/?LinkId=17568.
Using ADFS for Federation
In cases where you are unable or unwilling to consolidate or synchronize your authentication and authorization information in Active Directory but want to enable users to interoperate with your infrastructure, you can investigate using federation. Active Directory Federation Service (ADFS), which is available in Windows Server 2003 Release 2 (R2), enables the simplified, secure sharing of digital identities across security boundaries. ADFS implements the WS-Federation standard specification that enables environments that do not use the Windows identity model to federate with Windows environments, including allowing users from separate infrastructures to authenticate to applications.
Information is available in the white paper "Active Directory Federation Services: A Path to Federated Identity and Access Management" at http://download.microsoft.com/download/3/a/f/3af89d13-4ef4-42bb-aaa3-95e06721b062/ADFS.doc.
Potential Issues
Some or all of the options for evolving your UNIX-to-Windows interoperability solution described in this chapter might not be compatible with the solution that you deploy. In some cases, it might be possible to work around incompatibilities, or you might choose to accept a reduced level of service in exchange for the added benefits of the solution.
Problems that you might encounter while trying to extend the solution in your environment include:
Unsupported encryption types. Kerberized applications might support a different set of encryption types than the set of encryption types supported by Active Directory. Active Directory supports DES-CRC, DES-MD5, and RC4-HMAC. Of these, RC4-HMAC is the most secure and DES-CRC is the least secure. If the application does not include a supported encryption type, or if the application does not allow you to specify the encryption type to use, you might not be able to use Active Directory Kerberos for the application. Many applications support DES-MD5 and DES-CRC but not RC4-HMAC. If this is the case, to be able to use the application, you will need to accept the lower level of security provided by the older DES encryption types.
Note Microsoft does not recommend the use DES-CRC because it provides weaker security than DES-MD5 or RC4-HMAC. Use DES-CRC only if no other option is available.
LDAP versions. Applications might be implemented with an LDAP version that is not compatible with Active Directory. Active Directory implements LDAP version 3 (LDAP v3). To use the application, it might be necessary to acquire a new version that supports the new LDAP version or to modify the application to add support for LDAP v3.
LDAP referrals. LDAP referrals are used in a multidomain environment to redirect LDAP queries for data to alternative servers if the data is not found on the first server contacted. Use of referrals can lead to slow response times, which can lead to performance degradation. Information about LDAP referrals in Active Directory is available at http://msdn.microsoft.com/library/default.asp?url=/library/en-us/ad/ad/referrals.asp.
Attribute handling. Some implementations of LDAP, especially native implementations on older versions of UNIX operating systems, might include attribute types or attribute handling methods that are incompatible with the Active Directory implementation. In some cases, it might be possible to introduce a translation layer between the older LDAP implementation and Active Directory to work around this issue by using open source LDAP tools.
Incompatible PAM modules. Some implementations of Kerberos for PAM might include pam_krb5 libraries that are not compatible with Active Directory. For example, this might occur if the library was built with a version of Kerberos that does not interoperate with Active Directory or if the library uses encryption types that are not compatible with Active Directory.
Incompatible PAM implementations. The concept of PAM is a fairly new one and not all implementations of the model conform fully to the standard. For example, AIX operating system versions prior to 5.3 implemented this concept in their proprietary loadable authentication modules (LAM), which were used to make calls to PAM modules. This solution is not fully compatible with Active Directory, making native AIX interoperability with Active Directory for authentication and authorization unworkable with these older versions of AIX.
Kerberos versions. Active Directory uses Kerberos version 5. This is the current standard and is supported by many Kerberized applications. However, some older Kerberized applications might support only Kerberos version 4, making them incompatible with Active Directory Kerberos.
Get the Windows Security and Directory Services for UNIX Guide
Update Notifications
Sign up to learn about updates and new releases


text:
Ghost Recon: Future Soldier's box art seems to think so, or at least the version uploaded to (and then removed from) Xbox.com today, touting Kinect support for the oft-delayed Tom Clancy game on Xbox 360.
Could the delay of Future Soldier to sometime between March 2011 and April 2012 have something to do with Kinect support coming to the high-tech tactical shooter? Given the "better with Kinect sensor" branding on the game's box art, it sounds like this is optional or complementary, Kinect-based gameplay or a hint of a Kinect-only mode.
Ghost Recon: Future Soldier doesn't have a firm date, but it's looking like Kinect support is a real possibility. Perhaps we'll see it demoed onstage at either Microsoft or Ubisoft's E3 2011 press conferences...
Ghost Recon: Future Soldier [Xbox.com via CVG]


text:
Member? Sign in. Not a member? Register for free.
JotNot Scanner App Pro
iOS Universal Business
JotNot is the quickest and easiest way to save a digital version of your paper documents. With JotNot's advanced image processing algorithms, your scans come out crisp, clear, and suitable for printing every time.
JotNot is the original document scanner app, trusted by millions of people in over 150 countries. It is recommended by The New York Times, TechCrunch, and MacWorld UK.
With a PDF scanner in your pocket, there is no need to ever keep receipts in your wallet, tax records in your filing cabinet, or notes scattered across your desk. Scan and archive digital copies, and simplify your life.
* Digitize contracts, receipts, expense forms, or business cards
* Save notes, recipes, or photos in cloud storage
* Scan and export sheet music to a music app like ForScore, or sketches to a drawing app
* Scan whiteboards or presentations to take notes in class or during meetings
* Email your scans as PDFs
* Upload to iCloud, Evernote, Dropbox, Google Drive with OCR, Box, OneNote, and more
* Fax reliably to 50 countries
* Share documents with a computer via WiFi
* JotNot automatically detects edges and processes images to remove shadows, correct contrast, and adjust white balance
* Scan in full color, black-and-white, and a variety of other modes
* Convert scans to PDF or JPEG
* Efficiently scan multi-page documents
* Password-protect sensitive files
* Lock the app with a password, Touch ID, or Face ID (if supported by your device)
* Tag documents and search by tag or name
* Sort by name or date
* Rename or delete files to stay organized
JotNot Pro is a one-time purchase. Faxing requires credits, which you can buy via an in-app purchase. There are no automatically recurring charges or subscriptions.
We aim to provide the best possible user experience and service. Please contact us at firstname.lastname@example.com for personal help from the developers to resolve any issue.
JotNot is made in the USA.
What's New
Latest updates:
+ links with the latest JotNot Fax app, which provides the ability to fax multiple documents at once
+ bugfixes and stability improvements
Thank you for using JotNot! Show your support by leaving us a review in the App Store.


text:
Fall Felt Wreath + 75 Fall Harvest Ideas Round Up!
Hey all! How on earth is it already the middle of October!? I mean, wasn't it just June? And wasn't yesterday just 1989? Oh wait, that was just all the 80s fashion that is back. Thank you so much to all of you for your well wishes on my health. I was sick for 3 weeks and was barely able to function. I am happy to report that I am 95% better. I just a tiny bit of a lingering cough, but I am feeling so much better. It's a pleasure to be able to breath out of my nose again and to yawn without coughing up a lung. Don't take it for granted, people.
Anywho, I'm teaming up with 75 of my bloggy besties to share TONS of fall decorating, crafts, and food ideas. That is all down below. But first, check out my awesome new fall felt wreath! I was really wanting to go with something untraditional and full of fun pops of color so this is what I came up with! I know, I know… my name is Talitha and I'm a wreath-aholic. I believe this is my 10th wreath I've shared on LPH. Its a sickness really. I think I need to start selling them to neighbors. Or better yet! Just start attaching them to peoples' doors! If you live in the southern Denver, Colorado area and randomly find a wreath attached to your door… it is just me making room for my next batch of wreaths.


text:
During a physical exam for a skin problem,
your doctor will examine the skin over your whole body, looking for suspicious
growths, moles, or lesions. The exam is done using a bright light and
sometimes a magnifying lens. The scalp is examined by parting the
A skin exam is done if you
Early signs of skin cancer are a change in
the skin, such as a growth, an irritation or a sore that does not heal, or a
change in a wart or a mole.
ABCDE rule of detection means watching for:
Other signs of melanoma in a mole include changes
Signs of skin cancer include:
Photographs may be used to
document and detect changes in the skin, especially atypical moles. Some
medical centers use computers to compare photographs taken at an earlier exam
with new photographs of suspicious moles and lesions. This technique may more
accurately determine whether a mole or lesion is changing.
don't have to do a biopsy to see if a lesion is benign (noncancerous). They
may use a dermatoscope to see spots on the skin. This tool's special magnifying
lens and light source help the doctor see the skin more clearly. Also, with a
method called confocal laser scanning microscopy (CLSM), doctors can look even
more closely at changes in the cells and tissue of the skin.
Some experts think it's a
good idea to check your own skin every month and have your doctor check
periodically. People who are at risk for skin cancer or those who are over 40
years old may want to have their doctor check their skin every year. If you
have already had skin cancer, your doctor will recommend more frequent
Complete the medical test information form (PDF)(What is a PDF document?) to help you prepare for this test.
Last Revised:
October 12, 2012
Healthwise Staff
Medical Review:
Kathleen Romito, MD - Family Medicine & Amy McMichael, MD - Dermatology
This information does not replace the advice of a doctor. Healthwise, Incorporated disclaims any warranty or liability for your use of this information. Your use of this information means that you agree to the Terms of Use. How this information was developed to help you make better health decisions.
To learn more visit Healthwise.org
© 1995-2012 Healthwise, Incorporated. Healthwise, Healthwise for every health decision, and the Healthwise logo are trademarks of Healthwise, Incorporated.


text:
On "Back to the Future" Day, Michael J. Fox imagines a future without Parkinson's disease.
The White House posted a letter from Fox on the state of research into Parkinson's, which the star of the movie was diagnosed with in 1991.
Fox says in the letter that his foundation, The Michael J. Fox Foundation for Parkinson's Research, is helping to speed toward a future in which doctors can treat, cure and even prevent brain diseases like Parkinson's.
"Call me an optimist, but I believe that by 2045 we'll find the cures we seek — especially because of all the smart, passionate people working to make it happen," he wrote.
The White House is hosting conversations with innovators throughout the day, he notes.
Here is the "Back to the Future" Day page in full.


text:
Massachusetts Structural Engineering Expert Witnesses
Massachusetts Accident Reconstruction & Safety Expert Witness Listings
You may limit your search for Structural Engineering expert witnesses to a specific area by selecting a state from the drop down box.
Expert Witnesses
List Your Qualifications by Clicking Here
Featured Experts
Mark conducts forensic investigations nationwide. He is licensed as a Professional Engineer in more than ten states and is also licensed as a Special (Threshold) Instructor in the State of Florida. Mark investigates matters related to structural engineering,... Learn More ›
Expert consultant/witness in over 70 cases with testimony/trial experience. Dr. Barzegar is a licensed professional engineer providing a broad range of services in civil/structural engineering and construction forensics to insurance companies and law... Learn More ›
Victor Soukamneuth is a Senior Engineer with more than 25 years of experience in structural design and construction defects, as well as practical design and analysis experience of residential, commercial, industrial, institutional and marine type structures. His... Learn More ›
Thirty years experience in the design analysis, inspection and auditing of piping, pipe supports, pressure vessels, tanks and other mechanical products. Extensive experience in performing design reviews, failure analysis,Industrial Asbestos, field inspections... Learn More ›
Since 2010, the President and Managing Member of CLM Engineering Associates, LLC, which concentrates its focus on forensic engineering/expert witness work for the insurance industry and legal community. In addition, we offer construction management,... Learn More ›
Scott Wilton, P.E. (The Falcon Group)
Location: Multiple Locations
Areas of Expertise: Mr. Wilton is a Senior Engineer for the Firm, specializing in the evaluation and design of building and site improvements for residential and commercial properties; and owner representation with respect...
Sinisa Kolar (The Falcon Group)
Location: Multiple Locations
Areas of Expertise: Mr. Sinisa Kolar is the Vice President / Department Head of Engineering and Restoration, based out of the Miami, FL office. He has more than a decade of both international and domestic experience in all...
Orlando Ballate (The Falcon Group)
Location: Multiple Locations
Areas of Expertise: Mr. Ballate is the Executive Vice President for the firm's forensic investigation and litigation support division. Included in his responsibilities are analysis, design, inspections and development of...
ForensisGroup, Inc. (The Expert of Experts)
Location: Multiple Locations
Areas of Expertise: For over 20 years, ForensisGroup has provided the nation's top law firms, insurance agencies, government entities and many other industries with highly qualified expert witnesses and consultants. Experts...
William J. Pyznar, P.E. (The Falcon Group)
Location: Multiple Locations
Areas of Expertise: Mr. Pyznar is the managing principal for Engineering Design and Project Management for the firm's building-related work, in addition to overseeing the daily operations of the firm. Included in his responsibilities...
J. David Gardner, P.E. (Robson Forensic)
Location: Multiple Locations
Areas of Expertise: Dave Gardner is a licensed Professional Engineer with more than 25 years of professional experience. He applies his expertise to construction claims and injury investigations involving residential, commercial,...
Edward J. Zemeck, P.E. (Robson Forensic Inc.)
Location: Multiple Locations
Areas of Expertise: With more than 38 years of hands on experience in the design, construction and maintenance of buildings, bridges, highways, utilities and cell towers, Ed is an expert in Construction Safety, Management...
Consolidated Consultants
Location: Multiple Locations
Areas of Expertise: Consolidated Consultants (CCc) continues to deliver high quality expert witness and medical expert witness referrals nationwide since 1995. CCc is the only referral service where you can view the full,...
Timothy N. Tresierras, Ph.D., P.E., CXLT (ARCCA, Inc.)
Location: Multiple Locations
Areas of Expertise: Dr. Timothy Tresierras is a Senior Engineer, and his areas of expertise include mechanical engineering, electro-mechanical systems, materials science, vibrational and acoustic analysis (e.g., measuring...
Robert J. O'Connor, P.E. (Robson Forensic, Inc.)
Location: Multiple Locations
Areas of Expertise: . Robert is an expert in civil, structural, and construction engineering. He provides technical investigations, analysis, reports, and testimony toward the resolution of personal injury litigation, construction...
Gregory H. Pestine, P.E. (Robson Forensic, Inc.)
Location: Multiple Locations
Areas of Expertise: Gregory H. Pestine, PE Quality Control / Assurance, Construction, Construction Safety, and Civil Engineering Expert Greg has nearly 30 years of experience in various roles in many types of construction...
Philip J. O'Keefe, PE (EngineeringExpert.net, LLC)
Location: Multiple Locations
Areas of Expertise: Services nationwide. Philip J. O'Keefe is President of Engineering Expert.net, LLC. He's a licensed Professional Engineer (PE) and certified Model Law Engineer (MLE). He has more than 30 years' experience...
Gary E Kilpatrick (The Kilpatrick Group, PA)
Location: Multiple Locations
Areas of Expertise: Who is The Kilpatrick Group? The Kilpatrick Group is a forensic engineering and consulting firm. We provide forensic engineering services in three main practice areas Division I: Motor Vehicle...
Stephen E. Fournier, P.E., NCEES (Robson Forensic, Inc.)
Location: Multiple Locations
Areas of Expertise: STEPHEN E. FOURNIER, P.E., NCEES Construction Injury, Construction Equipment, Workplace Safety, Ladder Expert Steve has over 35 years in the construction field and has performed more than 1,000 forensic...
Structural Engineering Expert Witnesses by State
All States, Alaska, Alabama, Arkansas, Arizona, California, Colorado, Connecticut, District of Columbia, Delaware, Florida, Georgia, Hawaii, Iowa, Idaho, Illinois, Indiana, Kansas, Kentucky, Louisiana, Massachusetts, Maryland, Maine, Michigan, Minnesota, Missouri, Mississippi, Montana, North Carolina, North Dakota, Nebraska, New Hampshire, New Jersey, New Mexico, Nevada, New York, Ohio, Oklahoma, Oregon, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Utah, Virginia, Vermont, Washington, Wisconsin, West Virginia, Wyoming