text:
VCAD instructor Glen Kennedy introduces fundamental drawing techniques to encourage young artists to develop and hone their drawing skills. In this 6 part drawing series, viewers can follow along with Glen to learn how to sketch different hand positions. Glen has worked for several large studios throughout his career such as Disney, Universal Studios and Marvel Productions.
- no lectures added
The full course is available online.
Paper, eraser, various pencils and markers.
No additional experience is required.
Nominated for a Prime Time Emmy Award for Director, The Looney Beginnings Warner Brothers / Steven Spielberg
Storyboard Artist DHX Media PPX Digital Shorts, Rainmaker Princess Charm School and Princess and the Pop Star.
Storyboard Artist Hugglemonsters, Doc McStuffins Disney Junior . Animatic Storyboards Pac Man 3D Series 2012.
Storyboard Artist Speed Racer TV Series Playing on Nick Toons. Storyboard Artist Stormhawks Episode 23, YTV.
Storyboard Artist, Ned's Newt TV Series Corus Entertainment. Animation Director Tex Avery Series D.I.C. Entertianment.
Animation Director Fantastic Four Series and Title. Marvel Productions, Animation Director Hulk vs Doctor Doom, Universal Studios.
Animation Director Aladdin, Bonkers, Darkwing Duck, Goof Troop, Disney TV. Animation Director Tiny Toons Adventures.Warner Brothers.
Animation Director The Zula Patrol 3D Maya Series NBC. Animation Director Hozehounds Seasons 2,3,4,5, The Family Channel / Disney
Animator Tales of Worm Paranoia, Cartoon Network. Animation Director Werner 3 Movie. Animation Director Hanna Barbera Productions.
Yogi Bear's Treasure Hunt, Smurfs, Pup Named Scooby Doo, Scooby Doo, Flinstone Kids, Jetsons Movie, Snorks, Foofur, Johnny Quest,
Flinstones Meet the Jetsons, Hagar the Horrible. Animation Director Mixed Nutz Series PBS TV. Animation Director Chucklewood Critters.
Animator The Real Ghostbusters. Animator He-Man and Shera ,Fat Albert and the Cosby Kids,Filmation Studios. Animator, The Prodigal Son Movie.
Animator Chipmunks, The Big Adventure Movie. Animator Curious George TV Series. Animator Frosty the Snowman Movie, Racoons,Care Bears.


text:
Loading some great jobs for you...
Registered Nurse Opportunity RN
One of the nations largest and most respected hospital companies, Universal Health Services, Inc. (UHS) has built an impressive record of achievement and performance. Steadily growing from a startup to an esteemed Fortune 500 corporation, UHS today has annual revenue nearing $10 billion. In 2017, UHS was recognized as one of the Worlds Most Admired Companies by Fortune; ranked #276 on the Fortune 500, and listed #275 in Forbes inaugural ranking of Americas Top 500 Public Companies.
Our operating philosophy is as effective today as it was 40 years ago: Build or acquire high quality hospitals in rapidly growing markets, invest in the people and equipment needed to allow each facility to thrive, and become the leading healthcare provider in each community we serve.
Headquartered in King of Prussia, PA, UHS has more than 81,000 employees and through its subsidiaries operates more than 320 acute care hospitals, behavioral health facilities and ambulatory centers in the United States, Puerto Rico, the U.S. Virgin Islands and the United Kingdom.
Mission Statement:
To provide superior quality healthcare services that: PATIENTS recommend to family and friends, PHYSICIANS prefer for their patients, PURCHASERS select for their clients, EMPLOYEES are proud of, and INVESTORS seek for long-term returns.
The Hughes Center, located in Danville, VA, is a provider of residential treatment services for boys and girls ages 10-22 diagnosed with an intellectual disability or autism spectrum disorder. The Hughes Educational Center is a community-based day school and residential education program for students in kindergarten through 12th grade. Flexible schedule, rewarding work environment, and competitive compensation are a few of the benefits of being a Registered Nurse (RN) at The Hughes Center.
The Registered Nurse (RN) provides timely, safe, and effective nursing care in the assigned area(s) in a manner consistent with the philosophy and objectives of the Hospital and within the framework of established policies and procedures from the Department of Nursing Services.
What do our current nurses value at UHS?
An environment that puts patient care first. One of the most rewarding aspects of working as a Registered Nurse (RN) is providing excellent care, comfort, and security to the patients and families you treat, at their most vulnerable times. Having the opportunity to grow, learn, and advance in your career. There are very robust continuing education options and opportunities for leadership development as a Registered Nurse (RN) with UHS. Supportive and responsive leadership. Competitive salary and comprehensive benefits package.
Benefit Highlights:
Challenging and rewarding work environment
Career development opportunities within UHS and its Subsidiaries
Competitive Compensation
Excellent Medical, Dental, Vision and Prescription Drug Plan
401(K) with company match and discounted stock plan
Generous Paid Time Off
If you would like to learn more before applying for a Registered Nurse (RN) position, please contact Sunny Hill, Nurse Recruiter at [Click Here to Email Your Resum] and by phone at (267)###-####.
*UHS is a registered trademark of UHS of Delaware, Inc., the management company for Universal Health Services, Inc. and a wholly-owned subsidiary of Universal Health Services, Inc. Universal Health Services, Inc. is a holding company and operates through its subsidiaries including its management company, UHS of Delaware, Inc. All healthcare and management operations are conducted by subsidiaries of Universal Health Services, Inc. To the extent any reference to \"UHS or UHS facilities\" on this website including any statements, articles or other publications contained herein relates to our healthcare or management operations it is referring to Universal Health Services' subsidiaries including UHS of Delaware. Further, the terms \"we,\" \"us,\" \"our\" or \"the company\" in such context similarly refer to the operations of Universal Health Services' subsidiaries including UHS of Delaware. Any employment referenced in this website is not with Universal Health Services, Inc. but solely with one of its subsidiaries including but not limited to UHS of Delaware, Inc.
UHS is not accepting unsolicited assistance from search firms for this employment opportunity. Please, no phone calls or emails. All resumes submitted by search firms to any employee at UHS via-email, the Internet or in any form and/or method without a valid written search agreement in place for this position will be deemed the sole property of UHS. No fee will be paid in the event the candidate is hired by UHS as a result of the referral or through other means.
Job Requirements:
The following are job requirements for the Registered Nurse position: 1.Responsible for nursing care based on the nursing process and in compliance w

subset: commoncrawl


text:
Coming off of another year in which they led the nation in attendance, the Gauchos will return with a new energy, community focus and schedule that may break more attendance records during the 2013 season.
The Gauchos will welcome 12 teams to Meredith Field at Harder Stadium highlighted by a key match-up with the Stanford Cardinal of the Pac-12 Conference on Friday, September 27 and traditional rival Cal Poly on November 9. The Stanford match is slated for the first week of fall classes at UCSB. Previous matches during this weekend have led to the Gauchos topping the record for largest on campus crowd in NCAA history when 15,898 witnessed a 2-0 win vs. UCLA on a perfect Santa Barbara night in 2010.
The best family and entertainment value in Santa Barbara will cost less than $6 per game and only $3 per game with the popular Family Plan.
• Individual Season Ticket - $68
• Family Plan - $180 (2 Adults/3 Youth including GKids tees. GKids is the official kids club of the Gauchos)
• UCSB faculty and staff (current or retired) season tickets are just $52
New this year is the introduction of the "Loyalty Scarf" the first of its kind in college soccer. The first 500 season ticket purchasers will receive the distinctive scarf, which, when worn on game-days, will allow the wearer to receive special deals on food, merchandise and other great offers by business sponsors in Isla Vista, the local community and at the game. The Loyalty Scarf will have a unique design with the words "Gaucho Futbol" included as the Gauchos build on their reputation for leading the NCAA in attendance and having the best atmosphere in the nation.
Throughout the summer, men's soccer student-athletes and staff will engage fans and outreach with a series of promotions, youth nights, camps and clinics to enhance the special bond established between the fans, students and a program that has played in the NCAA playoffs ten times since 1999. To have the Gauchos visit your church, youth group or school for a free clinic please call (805) 893-UCSB (8272) today.
Seating for men's soccer is divided into Blue and Gold sections with the ticket price the same for each. Gold sections are priority seating for donors supporting student-athletes with a tax-deductible gift to the Gaucho Fund. Regardless of the program supported, donors with Gold seats may also be eligible for complimentary parking and hospitality as well. A breakdown of seating and donation requirements can be found in the chart below:
Single game tickets, $12 per game and $13 for Stanford and Cal Poly matches, will go on sale on August 19 in advance of the first home match on Aug. 24 against Westmont.
To order tickets for the 2013 Gaucho men's soccer season contact the UCSB Athletics Ticket Office at 805-893-UCSB (8272), or to order online click here. The first 25 season tickets purchased will also receive a free UCSB soccer sweatshirt. For more information on supporting student-athletes and donor benefits for the 2013 season, CLICK HERE.


text:
Please note that this website has a UK government access keys system.
The Children's National Service Framework sets standards for children's health and social services, and explains the relationship between those services and children's education
The Healthy Child Programme is a high quality early intervention, clinical and prevention public health programme, which begins in pregnancy and extends through childhood into the end of the teenage years. The Healthy Child Programme now contains three core documents:
Women who are breastfeeding should continue while receiving antiviral treatment or prophylaxis as they are not contraindicated in breastfeeding.
This guidance is a revised version of the existing guidance, Promoting the Health of Looked After Children, which was published by the Department of Health in 2002. The revised guidance will be statutory on PCTs and on Strategic Health Authorities as well as local authorities.
On Wednesday 6th May, the Government released a detailed response to Lord Laming's report, The protection of children in England: A progress report. The response sets out the specific actions that the Government will take, in partnership with local agencies and key stakeholders, to address each of Lord Laming's recommendations
The Every Child Matters website has downloadable booklets for parents on how to prevent accidents in the home.
The Government's child health strategy was produced jointly by the Department of Health and Department for Children, Schools and Families.
Joint statement by the Department of Health, the Royal College of Paediatrics and Child Health, and Skills for Health on the measures necessary to put into practice the European Working Time Directive.
A joint statement from the Royal College of Obstetricians and Gynaecologists and the Royal College of Midwives


text:
Many people seem a bit confused by persimmons. Do you cook them or eat them raw? Are they bitter or sweet? How do you eat them? It seems that whenever I buy some, either the person next to me in line or the cashier quizzically looks over and asks what I'll do with them. Everyone seems to have heard a story about some brave soul who tried one and was rewarded with a mouthful of astringent yuckiness.
Contrary to popular belief, only one type of persimmon is astringent when unripe — the Hachiya persimmon. I won't discuss the Hachiya today, other than to say that it is sugary and bursting with flavor when ripe and is the perfect base for puddings and fruit butters. Rather, I want to focus on the Fuyu, which is non-astringent, has a sweet and gentle flavor, and is often grown locally. It also happens to be delicious.
Fuyus are shaped like tomatoes and can range in color from light to deep orange. And, unlike Hachiyas, they can be firm when ripe (like an apple). You can cook with them or eat them raw. They're great all by themselves as a fruit snack, can be cooked into stews or pies, or included raw in salads. Although you can wait until Fuyus get soft before you eat them, I think they are best when firm and crisp. They are also quite pretty when sliced as their seed holes make a natural star pattern. Just make sure they're not too light in color (and definitely not greenish) as they're only sweet when ripe.
Persimmons are available all over the Bay Area this time of year. In addition to finding them at farmer's markets and in grocery stores, you may also see them hanging from neighbors' trees on walks around your block as they are a popular yard tree. (Not that I am advocating stealing your neighbors' fruit. Just knock on their door and ask if you can have a few if they have an abundant crop. Chances are they aren't eating the fruit anyway.)
Here are a few Fuyu persimmon recipes my family and I have been enjoying this Fall. The tart is one of my new favorites, with a sweet and delicate texture and flavor that is perfect for a cold evening. The couscous is fast to make and a great accompaniment to chicken, pork, or a vegetable stew. And, if you're looking for something fresh, crisp and seasonal, try the salad, which is perfect as part of a family meal and pretty enough to serve to guests.
If you've never tried this fantastic seasonal fruit, I hope you give one of these a chance.
Fuyu Persimmon, Pear and Walnut Rolled Tart
Makes: 10 – 12 servings
1 puff pastry or pie crust
2 Fuyu persimmons
1 pear
1/2 cup currants
1 Tbsp orange zest
1/4 cup sugar
1/2 cup walnuts
1 tsp flour
1 egg scrambled
1 Tbsp white sugar
1. Preheat oven to 325 degrees.
2. Oil or butter a cookie sheet and set aside.
3. Chop persimmons and pears into 1/2-inch cubes.
4. Place persimmons and pear in a bowl and mix in the currants, zest, sugar, walnuts and flour.
5. Roll out your pie crust or puff pastry.
6. Lay out your pastry crust on the cookie sheet and then spoon the fruit filling in a long and full line in the center.
7. Fold the outer edges over the center, overlapping the ends.
8. Fold under the ends and crimp so you have a full seal.
9. If desired, brush on the egg wash and sprinkle the remaining tablespoon of sugar onto the top of the pastry dough.
10. Bake for 40 – 45 minutes or until fully baked.
11. If the top crust starts to brown too much, simply cover it with foil and continue to bake until finished.
Persimmon, Fennel and Almond Couscous
Makes: 4 – 6 servings
1 Tbsp olive oil
1/4 cup chopped onion
1/4 cup chopped fennel
1 whole Fuyu persimmon peeled and chopped into cubes
1/2 cup chopped unsalted raw or roasted almonds
1 tsp dried thyme
1 cup couscous
1 cup hot water, chicken broth or vegetable broth
1 Tbsp chopped flat-leaf parsley
Salt to taste
1. Chop onions, fennel and persimmons and set aside.
2. Heat olive oil in a medium sauce pan and add onion and fennel.
3. Cook vegetables for about 5 minutes on medium heat, or until fennel and onions are translucent.
4. Add persimmons, salt, almonds, and thyme and cook for another 2 minutes.
5. Stir in couscous and then add hot water or broth along with a little salt to taste.
6. Turn off heat, cover, and let sit for five minutes.
7. Add in parsley, fluff the couscous with a fork and then serve.
Fuyu Persimmon, Pear and Pine Nut Salad
Serves: 4 – 6 people
1 bunch of cleaned raw spinach, arugula, or other leafy salad green
1 Fuyu persimmon chopped into cubes
1 pear chopped into cubes
1/2 cup pine nuts
1 Tbsp sugar
Your favorite dressing (I like to use an oil and white balsamic vinegar blend seasoned with Dijon mustard and lemon zest)
1. In a pan, heat pine nuts on medium heat, toasting gently.
2. Sprinkle on the sugar and quickly incorporate it into the nuts so they become lightly coated.
3. Once the sugar starts to meld to the nuts, immediately turn off the heat so you don't burn the sugar.
4. Place greens, persimmon, pear, and nuts in a salad bowl and mix with your favorite salad dressing.
Related Posts
Fuyu Persimmon Upside-Down Cake
Hachiya Persimmons


text:
Each year, thousands of individuals embark on the journey to a career as an educator. Seeking to make a difference in the lives of young people, aspiring educators diligently and passionately craft their own methods and techniques for reaching out to students as their own learning process continues on a daily basis.
As science and technology continue to evolve, educators must learn to adapt to these conditions. Dedicated junior high school science instructor Ryan Bonicky of Pittsburgh, PA proves to be an excellent example of an educator that continues to learn new techniques in an effort to incorporate technology into curriculum.
In addition to utilizing technology as an educational tool, Bonicky, also a parent, believes that educators need to be passionate about educating young people and emphasizes that his "chief goal as an educator is to promote student achievement." He provides this insight and other additional perspective in the following interview.
Where did you go to college and what was your major? Did you anticipate becoming an educator?
I attended the Community College of Allegheny County and fulfilled my general studies requirements. After that, I transferred to La Roche College, where I obtained my B.A. in Elementary Education. After I had my Bachelor's Degree, I decided to get my Master's Degree. I attended Duquesne University and obtained a M.S. in Instructional Technology.
I definitely anticipated that I was going to become a teacher prior to attending college. In contrast, I truly didn't think about my post high school years until my daughter Alayna was born. Her birth truly made me recognize what I wanted to do with my life.
Where and how did your career start?
During my college career, I had several practicum experiences at Saint Bonaventure School. I was impressed with the learning environment and the entire faculty was quite welcoming. I decided to apply for a teaching position immediately after graduating. I was offered a fulltime Jr. High teaching position (science) and accepted the job two months after I graduated.
My first preference was to teach in the public school system because of the higher salary that was offered, but I was only offered a substitute position. I wanted to acquire experience and I took the position at St. Bonaventure. I love what I do at the school. Since that time, I have become heavily involved with SBS over the years that have passed and I know that I am making a difference in the lives of my students.
What do you most enjoy about being an educator?
I honestly enjoy every moment of teaching and I strongly feel it is one of the most vital professions in our society. First and foremost, I enjoy the fact that I am making a positive difference in our society. Second, I get to have fun at the same time.
I have an outstanding rapport with my students and it's very easy for me to instruct them because of this reason… I literally look forward to seeing and instructing my students each day. I established my rapport with my students by simply being myself. My chief goal as an educator is to promote student achievement, but I believe my age, personality and humor contribute to my relationship. I'm extremely devoted to the profession and my students are aware & appreciative of this.
It's difficult to give tips to a fellow teacher, because everyone has their own technique and comfort level. However, I recommend being yourself and enjoying what you do. Teachers can take care of business and have fun at the same time.
Do you feel that is important for someone to be passionate about being an educator in order to be successful?
Absolutely! I believe anyone that is passionate about their job will succeed more, especially in education. Students are intuitive; they can sense an instructor that isn't sincere. For this reason, it is vital that they have a passionate educator. It helps promote a love for learning and can mold the students into life-long learners.
What exactly do you do? What are your key responsibilities?
As far as my "key" responsibilities go, I teach physical and life sciences, creative writing, 7th grade English, Pittsburgh History, health, and since we're a private institution, religion.
Aside from teaching I'm the faculty advisor of the Student Council, and I participate with intramurals. Other tasks include bullying prevention, the yearbook team, and All School Projects.
In addition to these items, I'm a member of the SAP (student assistance program) team. As a member, my role is to be a source of intervention for teachers who are dealing with children that have academic or behavioral troubles. In other words, I supply advice and strategies to teachers.
Is it important to collaborate with your colleagues? How have professional collaborations benefited your career?
It is very crucial to be able to collaborate with colleagues, although it can be challenging at times. At the same time, it can also make one's job easier. Collaborating with fellow teachers requires both parties to be open-minded; flexible and receptive to new ideas & techniques.
At my school, I collaborate with the other Jr. High teachers to create various lesson plans together. I also "team teach" a localized cultural course that we developed, Pittsburgh History, with the vice principal. Doing this really sets a standard and rings true to the saying, "two heads are better than one"!
What is the most stressful aspect of your career? The most rewarding?
The most stressful aspect of my career: When students don't live up to my expectations a.k.a. do as well as they could. I try to be as positive as possible and constantly serve as a motivator. I employ other strategies as well including conferring with the student, their parent(s) and the principal.
The most rewarding aspect of my career: When a student that struggles comprehends something instructed to them and as a result, it boosts their self-esteem. For example, science and math go hand in hand and often, some of my students get frustrated when I incorporate math. They will literally convince themselves that they can't do it.
On several occasions, I stressed how easy the matter was, and showed the students step by step the procedure for deciphering problems. Initially, they didn't do so well, but I worked with them one-on-one until they were able to understand the concept and their phobia of math in science diminished.
How is the job market now in the industry? How do you think it will be in 5 years?
It's difficult to obtain a teaching position in Pennsylvania because schools in the state pay a significantly higher salary in comparison to other states. In addition, there are a wealth of schools that offer education as a major.
Education is something that will always be needed. As time goes on, technologies and theories change. Science advances and stumbles upon new things everyday. I don't see any less of a demand for educators in the future.
What are the hottest specialties in education currently, and what do you think will be next?
Special education and instructional technology are the future. There is a wealth of information on the Internet...ways that technology can be infused in a classroom to promote student achievement. The multi-media aspects of technology help obtain the students interest because it makes them active participants of the lessons. This is called the multi-modal approach.
As well, students can participate in activities that they typically couldn't. For example, I had my students do an interactive frog dissection using a computer program. I also had my students discover info about the heart on the web and they actually participated in an interactive heart surgery. The educational possibilities are limitless.
Is there anything else you can tell us about yourself, your career, or education that would be interesting or helpful to others aspiring to enter and succeed in education?
Start networking! I feel that in almost any profession, it's about being at the right place at the right time or the old saying "it's not who you are, it's who you know". More often than not, you can obtain an interview just by being referred by someone.
School districts receive thousands of applications each year. They need some type of way of narrowing down the applicants. First they post the job "in-house" and then they post it to the public. You have a better chance of being interviewed if you know other educators.


text:
Thank you for visiting the Amanda McPherson Foundation web site. The foundation was founded in memory of a little girl cherished by so many. Her life has touched so many that knew her and through the foundation, so many others.
Look for the latest updates to the web site!
Amanda was the strongest, toughest, sweetest, most special person we knew and she shared her love and hugs with everyone.
"Doing Good Things In Amanda's Name"
The foundation's goal is to "Do Good Things In Amanda's Name". A heartfelt thank you to all the wonderful people who support the foundation and help us continue to do all these "Good Things". The foundation is committed to supporting the activities that brought joy and hope to Amanda's life. The foundation is committed to:
- Provide resources and support for special education students in the public schools in Ventura County (Amanda's Corners)
- Provide support for youth athletic programs in Ventura County
- Provide funding for research in the field of Viral Myocarditis, sudden cardiac death
- Provide funding for research and education in the field of Velo-Cardio-Facial Syndrome, a genetic birth defect
Recent and Upcoming Fundraisers
Thousand Oaks Girls Softball Fundraiser – Saturday Oct 11th
The foundation is proud to support TOGSA and their efforts to improve their softball facility. Please plan on coming out for the Zombie Walk and support this wonderful organization.
Austim Awareness Fundraiser – Friday Oct 17th
The foundation is dedicated to supporting the needs of special needs students in our community. Please join us for a fun night of fundraising including auction, raffle and boutique.
Amanda's RainbowOn December 11, 2003, Amanda was home sick from school. In the afternoon, she wanted to paint, so we got out the dot painters and painted a few coloring book pages together – Rugrats and Spongebob. When Krista came home from school, she wanted to paint as well and painted a rainbow. Amanda, always wanting to do just like her big sister, painted a rainbow as well and added our family. Phil had his usual 4 or 5 pieces of hair even though he was bald. We are all holding hands and Amanda is holding Daisy's leash. This picture has come to symbolize what is most important – family. The foundation has duplicated the painting and presented copies to individuals and organizations that go above and beyond to support Amanda's foundation.
An Amanda Connection
We are adding a new feature on the website where supporters can share their stories about making an "Amanda Connection" – our first story is from Peggi Garcia:
On Friday Sept 27th, I was at a gas station putting gas in my car and as I finished a man approached and asked me about the Amanda sticker on my car. I told him the story and what the foundation does and all the good things in Amanda's name. I explained to him how the foundation came to be with a lump in my throat! He told me that he was from Newbury Park and one of his kids left a baseball hat at home when he went to college. The hat has Amanda's logo and he did not know where his kid got it, but he keeps it and likes to wear it because it belongs to his kid. After hearing the story, he said that now that he knows the story and what the logo means to Simi Valley, he will treasure it even more.
Thank you for sharing Peggi and we hope others will share their stories as well!


text:
4.5 MySQL User Account Management
This section describes how to set up accounts for clients of your MySQL server. It discusses the following topics:
The meaning of account names and passwords as used in MySQL and how that compares to names and passwords used by your operating system
How to set up new accounts and remove existing accounts
How to change passwords
Guidelines for using passwords securely
How to use secure connections with SSL
4.5.1 MySQL Usernames and Passwords
A MySQL account is defined in terms of a username and the client host or hosts from which the user can connect to the server. The account also has a password. There are several distinctions between the way usernames and passwords are used by MySQL and the way they are used by your operating system:
Usernames, as used by MySQL for authentication purposes, have nothing to do with usernames (login names) as used by Windows or Unix. On Unix, most MySQL clients by default try to log in using the current Unix username as the MySQL username, but that is for convenience only. The default can be overridden easily, because client programs allow any username to be specified with a -u or --user option. Because this means that anyone can attempt to connect to the server using any username, you can't make a database secure in any way unless all MySQL accounts have passwords. Anyone who specifies a username for an account that has no password will be able to connect successfully to the server.
MySQL usernames can be up to 16 characters long. Operating system usernames might have a different maximum length. For example, Unix usernames typically are limited to eight characters.
MySQL passwords have nothing to do with passwords for logging in to your operating system. There is no necessary connection between the password you use to log in to a Windows or Unix machine and the password you use to access the MySQL server on that machine.
MySQL encrypts passwords using its own algorithm. This encryption is different from that used during the Unix login process. MySQL password encryption is the same as that implemented by the PASSWORD() SQL function. Unix password encryption is the same as that implemented by the ENCRYPT() SQL function. From version 4.1 on, MySQL employs a stronger authentication method that has better password protection during the connection process than in earlier versions. It is secure even if TCP/IP packets are sniffed or the mysql database is captured. (In earlier versions, even though passwords are stored in encrypted form in the user table, knowledge of the encrypted password value could be used to connect to the MySQL server.)
When you install MySQL, the grant tables are populated with an initial set of accounts. These accounts have names and access privileges that are described in Section 2.4.5, "Securing the Initial MySQL Accounts," which also discusses how to assign passwords to them. Thereafter, you normally set up, modify, and remove MySQL accounts using the GRANT and REVOKE statements.
When you connect to a MySQL server with a command-line client, you should specify the username and password for the account that you want to use:
shell> mysql --user=monty --password=guess db_name
If you prefer short options, the command looks like this:
shell> mysql -u monty -pguess db_name
There must be no space between the -p option and the following password value. See Section 4.4.4, "Connecting to the MySQL Server."
The preceding commands include the password value on the command line, which can be a security risk. See Section 4.5.6, "Keeping Your Password Secure." To avoid this, specify the --password or -p option without any following password value:
shell> mysql --user=monty --password db_name shell> mysql -u monty -p db_name
Then the client program will print a prompt and wait for you to enter the password. (In these examples, db_name is not interpreted as a password, because it is separated from the preceding password option by a space.)
On some systems, the library call that MySQL uses to prompt for a password automatically limits the password to eight characters. That is a problem with the system library, not with MySQL. Internally, MySQL doesn't have any limit for the length of the password. To work around the problem, change your MySQL password to a value that is eight or fewer characters long, or put your password in an option file.
{mospagebreak title=4.5.2 Adding New User Accounts to MySQL}
You can create MySQL accounts in two ways:
By using GRANT statements
By manipulating the MySQL grant tables directly
The preferred method is to use GRANT statements, because they are more concise and less error-prone. GRANT is available as of MySQL 3.22.11; its syntax is described in the MySQL Language Reference.
Another option for creating accounts is to use one of several available third-party programs that offer capabilities for MySQL account administration. phpMyAdmin is one such program.
The following examples show how to use the mysql client program to set up new users. These examples assume that privileges are set up according to the defaults described in Section 2.4.5, "Securing the Initial MySQL Accounts." This means that to make changes, you must connect to the MySQL server as the MySQL root user, and the root account must have the INSERT privilege for the mysql database and the RELOAD administrative privilege.
First, use the mysql program to connect to the server as the MySQL root user:
shell> mysql --user=root mysql
If you have assigned a password to the root account, you'll also need to supply a --password or -p option for this mysql command and also for those later in this section.
After connecting to the server as root, you can add new accounts. The following statements use GRANT to set up four new accounts:
mysql> GRANT ALL PRIVILEGES ON *.* TO
-> IDENTIFIED BY 'some_pass' WITH GRANT OPTION; mysql> GRANT ALL PRIVILEGES ON *.* TO 'monty'@'%'
-> IDENTIFIED BY 'some_pass' WITH GRANT OPTION; mysql> GRANT RELOAD,PROCESS ON *.* TO
'admin'@'localhost'; mysql> GRANT USAGE ON *.* TO 'dummy'@'localhost';
The accounts created by these GRANT statements have the following properties:
Two of the accounts have a username of monty and a password of some_pass. Both accounts are superuser accounts with full privileges to do anything. One account ('monty'@'localhost') can be used only when connecting from the local host. The other ('monty'@'%') can be used to connect from any other host. Note that it is necessary to have both accounts for monty to be able to connect from anywhere as monty. Without the localhost account, the anonymous-user account for localhost that is created by mysql_install_db would take precedence when monty connects from the local host. As a result, monty would be treated as an anonymous user. The reason for this is that the anonymous-user account has a more specific Host column value than the 'monty'@'%' account and thus comes earlier in the user table sort order. (user table sorting is discussed in Section 4.4.5, "Access Control, Stage 1: Connection Verification.")
One account has a username of admin and no password. This account can be used only by connecting from the local host. It is granted the RELOAD and PROCESS administrative privileges. These privileges allow the admin user to execute the mysqladmin reload, mysqladmin refresh, and mysqladmin flush-xxx commands, as well as mysqladmin processlist. No privileges are granted for accessing any databases. You could add such privileges later by issuing additional GRANT statements.
One account has a username of dummy and no password. This account can be used only by connecting from the local host. No privileges are granted. The USAGE privilege in the GRANT statement allows you to create an account without giving it any privileges. It has the effect of setting all the global privileges to 'N'. It is assumed that you will grant specific privileges to the account later.
As an alternative to GRANT, you can create the same accounts directly by issuing INSERT statements and then telling the server to reload the grant tables:
shell> mysql --user=root mysql mysql> INSERT INTO user
-> VALUES('localhost','monty',PASSWORD
'Y','Y','Y','Y'); mysql> INSERT INTO user
-> VALUES('%','monty',PASSWORD('some_pass'),
'Y','Y','Y','Y'); mysql> INSERT INTO user SET
-> Reload_priv='Y', Process_priv='Y'; mysql> INSERT INTO user (Host,User,Password)
-> VALUES('localhost','dummy',''); mysql> FLUSH PRIVILEGES;
The reason for using FLUSH PRIVILEGES when you create accounts with INSERT is to tell the server to re-read the grant tables. Otherwise, the changes will go unnoticed until you restart the server. With GRANT, FLUSH PRIVILEGES is unnecessary.
The reason for using the PASSWORD() function with INSERT is to encrypt the password. The GRANT statement encrypts the password for you, so PASSWORD() is unnecessary.
The 'Y' values enable privileges for the accounts. Depending on your MySQL version, you may have to use a different number of 'Y' values in the first two INSERT statements. (Versions prior to 3.22.11 have fewer privilege columns, and versions from 4.0.2 on have more.) For the admin account, the more readable extended INSERT syntax using SET that is available starting with MySQL 3.22.11 is used.
In the INSERT statement for the dummy account, only the Host, User, and Password columns in the user table record are assigned values. None of the privilege columns are set explicitly, so MySQL assigns them all the default value of 'N'. This is equivalent to what GRANT USAGE does.
Note that to set up a superuser account, it is necessary only to create a user table entry with the privilege columns set to 'Y'. user table privileges are global, so no entries in any of the other grant tables are needed.
The next examples create three accounts and give them access to specific databases. Each of them has a username of custom and password of obscure.
To create the accounts with GRANT, use the following statements:
shell> mysql --user=root mysql mysql> GRANT
-> ON bankaccount.*
-> TO 'custom'@'localhost'
-> IDENTIFIED BY 'obscure'; mysql> GRANT
-> ON expenses.*
-> TO 'custom'@'whitehouse.gov'
-> IDENTIFIED BY 'obscure'; mysql> GRANT
-> ON customer.*
-> TO 'custom'@'server.domain'
-> IDENTIFIED BY 'obscure';
The three accounts can be used as follows:
The first account can access the bankaccount database, but only from the local host.
The second account can access the expenses database, but only from the host whitehouse.gov.
The third account can access the customer database, but only from the host server.domain.
To set up the custom accounts without GRANT, use INSERT statements as follows to modify the grant tables directly:
shell> mysql --user=root mysql mysql> INSERT INTO user (Host,User,Password)
-> VALUES('localhost','custom',PASSWORD
('obscure')); mysql> INSERT INTO user (Host,User,Password)
-> VALUES('whitehouse.gov','custom',PASSWORD
('obscure')); mysql> INSERT INTO user (Host,User,Password)
-> VALUES('server.domain','custom',PASSWORD
('obscure')); mysql> INSERT INTO db
-> (Host,Db,User,Select_priv,Insert_priv,
-> Update_priv,Delete_priv,Create_priv,
-> VALUES('localhost','bankaccount','custom',
-> 'Y','Y','Y','Y','Y','Y'); mysql> INSERT INTO db
-> (Host,Db,User,Select_priv,Insert_priv,
-> Update_priv,Delete_priv,Create_priv,
-> VALUES('whitehouse.gov','expenses','custom',
-> 'Y','Y','Y','Y','Y','Y'); mysql> INSERT INTO db
-> (Host,Db,User,Select_priv,Insert_priv,
-> Update_priv,Delete_priv,Create_priv,
-> VALUES('server.domain','customer','custom',
-> 'Y','Y','Y','Y','Y','Y'); mysql> FLUSH PRIVILEGES;
The first three INSERT statements add user table entries that allow the user custom to connect from the various hosts with the given password, but grant no global privileges (all privileges are set to the default value of 'N'). The next three INSERT statements add db table entries that grant privileges to custom for the bankaccount, expenses, and customer databases, but only when accessed from the proper hosts. As usual when you modify the grant tables directly, you tell the server to reload them with FLUSH PRIVILEGES so that the privilege changes take effect.
If you want to give a specific user access from all machines in a given domain (for example, mydomain.com), you can issue a GRANT statement that uses the '%' wildcard character in the host part of the account name:
mysql> GRANT ...
-> TO 'myname'@'%.mydomain.com'
-> IDENTIFIED BY 'mypass';
To do the same thing by modifying the grant tables directly, do this:
mysql> INSERT INTO user (Host,User,Password,...)
-> VALUES('%.mydomain.com','myname',PASSWORD
('mypass'),...); mysql> FLUSH PRIVILEGES;
{mospagebreak title=4.5.3 Removing User Accounts from MySQL}
To remove an account, use the DROP USER statement, which was added in MySQL 4.1.1. For older versions of MySQL, use DELETE instead.
To remove a MySQL user account, you should use the following procedure, performing the steps in the order shown:
Use SHOW GRANTS to determine what privileges the account has.
Use REVOKE to revoke the privileges displayed by SHOW GRANTS. This removes records for the account from all the grant tables except the user table, and revokes any global privileges listed in the user table.
Delete the account by using DROP USER to remove the user table record.
The DROP USER statement was added in MySQL 4.1.1. Before 4.1.1, you should first revoke the account privileges as just described. Then delete the user table record and flush the grant tables like this:
mysql> DELETE FROM mysql.user
-> WHERE User='user_name' and Host='host_name'; mysql> FLUSH PRIVILEGES;
4.5.4 Limiting Account Resources
Before MySQL 4.0.2, the only available method for limiting use of MySQL server resources is to set the max_user_connections system variable to a non-zero value. But that method is strictly global. It does not allow for management of individual accounts. Also, it limits only the number of simultaneous connections made using a single account, not what a client can do once connected. Both types of control are of interest to many MySQL administrators, particularly those for Internet Service Providers.
Starting from MySQL 4.0.2, you can limit the following server resources for individual accounts:
The number of queries that an account can issue per hour
The number of updates that an account can issue per hour
The number of times an account can connect to the server per hour
Any statement that a client can issue counts against the query limit. Only statements that modify databases or tables count against the update limit.
An account in this context is a single record in the user table. Each account is uniquely identified by its User and Host column values.
As a prerequisite for using this feature, the user table in the mysql database must contain the resource-related columns. Resource limits are stored in the max_questions, max_updates, and max_connections columns. If your user table doesn't have these columns, it must be upgraded; see Section 2.5.8, "Upgrading the Grant Tables."
To set resource limits with a GRANT statement, use a WITH clause that names each resource to be limited and a per-hour count indicating the limit value. For example, to create a new account that can access the customer database, but only in a limited fashion, issue this statement:
mysql> GRANT ALL ON customer.* TO
-> IDENTIFIED BY 'frank'
The limit types need not all be named in the WITH clause, but those named can be present in any order. The value for each limit should be an integer representing a count per hour. If the GRANT statement has no WITH clause, the limits are each set to the default value of zero (that is, no limit).
To set or change limits for an existing account, use a GRANT USAGE statement at the global level (ON *.*). The following statement changes the query limit for francis to 100:
mysql> GRANT USAGE ON *.* TO 'francis'@'localhost'
This statement leaves the account's existing privileges unchanged and modifies only the limit values specified.
To remove an existing limit, set its value to zero. For example, to remove the limit on how many times per hour francis can connect, use this statement:
mysql> GRANT USAGE ON *.* TO 'francis'@'localhost'
Resource-use counting takes place when any account has a non-zero limit placed on its use of any of the resources.
As the server runs, it counts the number of times each account uses resources. If an account reaches its limit on number of connections within the last hour, further connections for the account are rejected until that hour is up. Similarly, if the account reaches its limit on the number of queries or updates, further queries or updates are rejected until the hour is up. In all such cases, an appropriate error message is issued.
Resource counting is done per account, not per client. For example, if your account has a query limit of 50, you cannot increase your limit to 100 by making two simultaneous client connections to the server. Queries issued on both connections are counted together.
The current resource-use counts can be reset globally for all accounts, or individually for a given count:
To reset the current counts to zero for all accounts, issue a FLUSH USER_RESOURCES statement. The counts also can be reset by reloading the grant tables (for example, with a FLUSH PRIVILEGES statement or a mysqladmin reload command).
The counts for an individual account can be set to zero by re-granting it any of its limits. To do this, use GRANT USAGE as described earlier and specify a limit value equal to the value that the account already has.
{mospagebreak title=4.5.5 Assigning Account Passwords}
Passwords may be assigned from the command line by using the mysqladmin command:
shell> mysqladmin -u user_name -h host_name
password "newpwd"
The account for which this command resets the password is the one with a user table record that matches user_name in the User column and the client host from which you connect in the Host column.
Another way to assign a password to an account is to issue a SET PASSWORD statement:
mysql> SET PASSWORD FOR 'jeffrey'@'%' =
Only users such as root with update access to the mysql database can change the password for other users. If you are not connected as an anonymous user, you can change your own password by omitting the FOR clause:
mysql> SET PASSWORD = PASSWORD('biscuit');
You can also use a GRANT USAGE statement at the global level (ON *.*) to assign a password to an account without affecting the account's current privileges:
mysql> GRANT USAGE ON *.* TO 'jeffrey'@'%'
IDENTIFIED BY 'biscuit';
Although it is generally preferable to assign passwords using one of the preceding methods, you can also do so by modifying the user table directly:
To establish a password when creating a new account, provide a value for the Password column:
shell> mysql -u root mysql mysql> INSERT INTO user (Host,User,Password)
-> VALUES('%','jeffrey',PASSWORD
('biscuit')); mysql> FLUSH PRIVILEGES;
To change the password for an existing account, use UPDATE to set the Password column value:
shell> mysql -u root mysql mysql> UPDATE user SET Password =
-> WHERE Host = '%' AND User = 'francis'; mysql> FLUSH PRIVILEGES;
When you assign an account a password using SET PASSWORD, INSERT, or UPDATE, you must use the PASSWORD() function to encrypt it. (The only exception is that you need not use PASSWORD() if the password is empty.) PASSWORD() is necessary because the user table stores passwords in encrypted form, not as plaintext. If you forget that fact, you are likely to set passwords like this:
shell> mysql -u root mysql mysql> INSERT INTO user (Host,User,Password)
-> VALUES('%','jeffrey','biscuit'); mysql> FLUSH PRIVILEGES;
The result is that the literal value 'biscuit' is stored as the password in the user table, not the encrypted value. When jeffrey attempts to connect to the server using this password, the value is encrypted and compared to the value stored in the user table. However, the stored value is the literal string 'biscuit', so the comparison fails and the server rejects the connection:
shell> mysql -u jeffrey -pbiscuit test Access denied
If you set passwords using the GRANT ... IDENTIFIED BY statement or the mysqladmin password command, they both take care of encrypting the password for you. The PASSWORD() function is unnecessary.
Note: PASSWORD() encryption is different from Unix password encryption. See Section 4.5.1, "MySQL Usernames and Passwords."
{mospagebreak title=4.5.6 Keeping Your Password Secure}
On an administrative level, you should never grant access to the mysql.user table to any non-administrative accounts. Passwords in the user table are stored in encrypted form, but in versions of MySQL earlier than 4.1, knowing the encrypted password for an account makes it possible to connect to the server using that account.
When you run a client program to connect to the MySQL server, it is inadvisable to specify your password in a way that exposes it to discovery by other users. The methods you can use to specify your password when you run client programs are listed here, along with an assessment of the risks of each method:
Use a -pyour_pass or --password=your_pass option on the command line. For example:
shell> mysql -u francis -pfrank db_name
This is convenient but insecure, because your password becomes visible to system status programs such as ps that may be invoked by other users to display command lines. MySQL clients typically overwrite the command-line password argument with zeros during their initialization sequence, but there is still a brief interval during which the value is visible.
Use a -p or --password option with no password value specified. In this case, the client program solicits the password from the terminal:
shell> mysql -u francis -p db_name Enter password: ********
The '*' characters indicate where you enter your password. The password is not displayed as you enter it.
It is more secure to enter your password this way than to specify it on the command line because it is not visible to other users. However, this method of entering a password is suitable only for programs that you run interactively. If you want to invoke a client from a script that runs non-interactively, there is no opportunity to enter the password from the terminal. On some systems, you may even find that the first line of your script is read and interpreted (incorrectly) as your password!
Store your password in an option file. For example, on Unix you can list your password in the [client] section of the .my.cnf file in your home directory:
[client] password=your_pass
If you store your password in .my.cnf, the file should not be accessible to anyone but yourself. To ensure this, set the file access mode to 400 or 600. For example:
shell> chmod 600 .my.cnf
Section 3.3.2, "Using Option Files," discusses option files in more detail.
Store your password in the MYSQL_PWD environment variable. This method of specifying your MySQL password must be considered extremely insecure and should not be used. Some versions of ps include an option to display the environment of running processes. If you set MYSQL_PWD, your password will be exposed to any other user who runs ps. Even on systems without such a version of ps, it is unwise to assume that there are no other methods by which users can examine process environments. See Appendix B, "Environment Variables."
All in all, the safest methods are to have the client program prompt for the password or to specify the password in a properly protected option file.
4.5.7 Using Secure Connections
Beginning with version 4.0.0, MySQL has support for secure (encrypted) connections between MySQL clients and the server using the Secure Sockets Layer (SSL) protocol. This section discusses how to use SSL connections. It also describes a way to set up SSH on Windows.
The standard configuration of MySQL is intended to be as fast as possible, so encrypted connections are not used by default. Doing so would make the client/server protocol much slower. Encrypting data is a CPU-intensive operation that requires the computer to do additional work and can delay other MySQL tasks. For applications that require the security provided by encrypted connections, the extra computation is warranted.
MySQL allows encryption to be enabled on a per-connection basis. You can choose a normal unencrypted connection or a secure encrypted SSL connection according to the requirements of individual applications.
220.127.116.11 Basic SSL Concepts
To understand how MySQL uses SSL, it's necessary to explain some basic SSL and X509 concepts. People who are already familiar with them can skip this part.
By default, MySQL uses unencrypted connections between the client and the server. This means that someone with access to the network could watch all your traffic and look at the data being sent or received. They could even change the data while it is in transit between client and server. To improve security a little, you can compress client/server traffic by using the --compress option when invoking client programs. However, this will not foil a determined attacker.
When you need to move information over a network in a secure fashion, an unencrypted connection is unacceptable. Encryption is the way to make any kind of data unreadable. In fact, today's practice requires many additional security elements from encryption algorithms. They should resist many kinds of known attacks such as changing the order of encrypted messages or replaying data twice.
SSL is a protocol that uses different encryption algorithms to ensure that data received over a public network can be trusted. It has mechanisms to detect any data change, loss, or replay. SSL also incorporates algorithms that provide identity verification using the X509 standard.
X509 makes it possible to identify someone on the Internet. It is most commonly used in e-commerce applications. In basic terms, there should be some company called a "Certificate Authority" (or CA) that assigns electronic certificates to anyone who needs them. Certificates rely on asymmetric encryption algorithms that have two encryption keys (a public key and a secret key). A certificate owner can show the certificate to another party as proof of identity. A certificate consists of its owner's public key. Any data encrypted with this public key can be decrypted only using the corresponding secret key, which is held by the owner of the certificate.
If you need more information about SSL, X509, or encryption, use your favorite Internet search engine to search for keywords in which you are interested.
126.96.36.199 Requirements
To use SSL connections between the MySQL server and client programs, your system must be able to support OpenSSL and your version of MySQL must be 4.0.0 or newer.
To get secure connections to work with MySQL, you must do the following:
Install the OpenSSL library. We have tested MySQL with OpenSSL 0.9.6. If you need OpenSSL, visit http://www.openssl.org.
When you configure MySQL, run the configure script with the --with-vio and --with-openssl options.
Make sure that you have upgraded your grant tables to include the SSL-related columns in the mysql.user table. This is necessary if your grant tables date from a version prior to MySQL 4.0.0. The upgrade procedure is described in Section 2.5.8, "Upgrading the Grant Tables."
To check whether a running mysqld server supports OpenSSL, examine the value of the have_openssl system variable:
mysql> SHOW VARIABLES LIKE 'have_openssl'; +---------------+-------+ | Variable_name | Value | +---------------+-------+ | have_openssl | YES | +---------------+-------+
If the value is YES, the server supports OpenSSL connections.
{mospagebreak title=188.8.131.52 Setting Up SSL Certificates for MySQL}
Here is an example for setting up SSL certificates for MySQL:
DIR=´pwd´/openssl PRIV=$DIR/private mkdir $DIR $PRIV $DIR/newcerts cp /usr/share/ssl/openssl.cnf $DIR replace ./demoCA $DIR -- $DIR/openssl.cnf # Create necessary files: $database, $serial
and $new_certs_dir # directory (optional) touch $DIR/index.txt echo "01" > $DIR/serial # # Generation of Certificate Authority(CA) # openssl req -new -x509 -keyout
$PRIV/cakey.pem -out $DIR/cacert.pem -config $DIR/openssl.cnf # Sample output: # Using configuration from
/home/monty/openssl/openssl.cnf # Generating a 1024 bit RSA private key # ................++++++ # .........++++++ # writing new private key to
'/home/monty/openssl/private/cakey.pem' # Enter PEM pass phrase: # Verifying password - Enter PEM pass phrase: # ----- # You are about to be asked to enter
information that will be # incorporated into your certificate request. # What you are about to enter is what is
called a Distinguished Name # or a DN. # There are quite a few fields but you can
leave some blank # For some fields there will be a default
value, # If you enter '.', the field will be left
blank. # ----- # Country Name (2 letter code) [AU]:FI # State or Province Name (full name)
[Some-State]:. # Locality Name (eg, city) []: # Organization Name (eg, company) [Internet
Widgits Pty Ltd]:MySQL AB # Organizational Unit Name (eg, section) []: # Common Name (eg, YOUR name) []:MySQL admin # Email Address []: # # Create server request and key # openssl req -new -keyout $DIR/server-key.pem
-out $DIR/server-req.pem -days 3600 -config
$DIR/openssl.cnf # Sample output: # Using configuration from
/home/monty/openssl/openssl.cnf # Generating a 1024 bit RSA private key # ..++++++ # .......... ++++++ # writing new private key to
'/home/monty/openssl/server-key.pem' # Enter PEM pass phrase: # Verifying password - Enter PEM pass phrase: # ----- # You are about to be asked to enter
information that will be # incorporated into your certificate request. # What you are about to enter is what is
called a Distinguished Name # or a DN. # There are quite a few fields but you can
leave some blank # For some fields there will be a default
value, # If you enter '.', the field will be left
blank. # ----- # Country Name (2 letter code) [AU]:FI # State or Province Name (full name)
[Some-State]:. # Locality Name (eg, city) []: # Organization Name (eg, company) [Internet
Widgits Pty Ltd]:MySQL AB # Organizational Unit Name (eg, section) []: # Common Name (eg, YOUR name) []:MySQL server # Email Address []: # # Please enter the following 'extra'
attributes # to be sent with your certificate request # A challenge password []: # An optional company name []: # # Remove the passphrase from the key
(optional) # openssl rsa -in $DIR/server-key.pem -out
$DIR/server-key.pem # # Sign server cert # openssl ca -policy policy_anything -out
$DIR/server-cert.pem -config $DIR/openssl.cnf -infiles
$DIR/server-req.pem # Sample output: # Using configuration from
/home/monty/openssl/openssl.cnf # Enter PEM pass phrase: # Check that the request matches the
signature # Signature ok # The Subjects Distinguished Name is as
follows # countryName :PRINTABLE:'FI' # organizationName :PRINTABLE:'MySQL AB' # commonName :PRINTABLE:'MySQL admin' # Certificate is to be certified until Sep 13
14:22:46 2003 GMT # (365 days) # Sign the certificate? [y/n]:y # # # 1 out of 1 certificate requests certified,
commit? [y/n]y # Write out database with 1 new entries # Data Base Updated # # Create client request and key # openssl req -new -keyout
$DIR/client-key.pem -out $DIR/client-req.pem -days 3600 -config
$DIR/openssl.cnf # Sample output: # Using configuration from
/home/monty/openssl/openssl.cnf # Generating a 1024 bit RSA private key # .....................................++++++ # ...........................................
..++++++ # writing new private key to
'/home/monty/openssl/client-key.pem' # Enter PEM pass phrase: # Verifying password - Enter PEM pass phrase: # ----- # You are about to be asked to enter
information that will be # incorporated into your certificate request. # What you are about to enter is what is
called a Distinguished Name # or a DN. # There are quite a few fields but you can
leave some blank # For some fields there will be a default
value, # If you enter '.', the field will be left
blank. # ----- # Country Name (2 letter code) [AU]:FI # State or Province Name (full name)
[Some-State]:. # Locality Name (eg, city) []: # Organization Name (eg, company) [Internet
Widgits Pty Ltd]:MySQL AB # Organizational Unit Name (eg, section) []: # Common Name (eg, YOUR name) []:MySQL user # Email Address []: # # Please enter the following 'extra'
attributes # to be sent with your certificate request # A challenge password []: # An optional company name []: # # Remove a passphrase from the key (optional) # openssl rsa -in $DIR/client-key.pem -out
$DIR/client-key.pem # # Sign client cert # openssl ca -policy policy_anything -out
$DIR/client-cert.pem -config $DIR/openssl.cnf -infiles
$DIR/client-req.pem # Sample output: # Using configuration from
/home/monty/openssl/openssl.cnf # Enter PEM pass phrase: # Check that the request matches the
signature # Signature ok # The Subjects Distinguished Name is as
follows # countryName :PRINTABLE:'FI' # organizationName :PRINTABLE:'MySQL AB' # commonName :PRINTABLE:'MySQL user' # Certificate is to be certified until Sep 13
16:45:17 2003 GMT # (365 days) # Sign the certificate? [y/n]:y # # # 1 out of 1 certificate requests certified,
commit? [y/n]y # Write out database with 1 new entries # Data Base Updated # # Create a my.cnf file that you can use to
test the certificates # cnf="" cnf="$cnf [client]" cnf="$cnf ssl-ca=$DIR/cacert.pem" cnf="$cnf ssl-cert=$DIR/client-cert.pem" cnf="$cnf ssl-key=$DIR/client-key.pem" cnf="$cnf [mysqld]" cnf="$cnf ssl-ca=$DIR/cacert.pem" cnf="$cnf ssl-cert=$DIR/server-cert.pem" cnf="$cnf ssl-key=$DIR/server-key.pem" echo $cnf | replace " " ' ' > $DIR/my.cnf
To test SSL connections, start the server as follows, where $DIR is the pathname to the directory where the sample my.cnf option file is located:
shell> mysqld --defaults-file=$DIR/my.cnf &
Then invoke a client program using the same option file:
shell> mysql --defaults-file=$DIR/my.cnf
If you have a MySQL source distribution, you can also test your setup by modifying the preceding my.cnf file to refer to the demonstration certificate and key files in the SSL directory of the distribution.
{mospagebreak title=126.96.36.199 SSL GRANT Options}
MySQL can check X509 certificate attributes in addition to the usual authentication that is based on the username and password. To specify SSL-related options for a MySQL account, use the REQUIRE clause of the GRANT statement, as described in the MySQL Language Reference.
126.96.36.199 SSL Command-Line Options
The following list describes options that are used for specifying the use of SSL, certificate files, and key files. These options are available beginning with MySQL 4.0. They may be given on the command line or in an option file.
For the server, this option specifies that the server allows SSL connections. For a client program, it allows the client to connect to the server using SSL. This option is not sufficient in itself to cause an SSL connection to be used. You must also specify the --ssl-ca, --ssl-cert, and --ssl-key options.
This option is more often used in its opposite form to indicate that SSL should not be used. To do this, specify the option as --skip-ssl or --ssl=0.
Note that use of --ssl doesn't require an SSL connection. For example, if the server or client is compiled without SSL support, a normal unencrypted connection will be used.
The secure way to ensure that an SSL connection will be used is to create an account on the server that includes a REQUIRE SSL clause in the GRANT statement. Then use this account to connect to the server, with both a server and client that have SSL support enabled.
The path to a file with a list of trusted SSL CAs.
The path to a directory that contains trusted SSL CA certificates in pem format.
The name of the SSL certificate file to use for establishing a secure connection.
A list of allowable ciphers to use for SSL encryption. cipher_list has the same format as the openssl ciphers command.
Example: --ssl-cipher=ALL:-AES:-EXP
The name of the SSL key file to use for establishing a secure connection.
22.214.171.124 Connecting to MySQL Remotely from Windows with SSH
Here is a note about how to connect to get a secure connection to remote MySQL server with SSH (by David Carlson firstname.lastname@example.com):
Install an SSH client on your Windows machine. As a user, the best non-free one I've found is from SecureCRT from http://www.vandyke.com/. Another option is f-secure from http://www.f-secure.com/. You can also find some free ones on Google at http://directory.google.com/Top/
Tools/Cryptography/SSH/Clients/ Windows/.
Start your Windows SSH client. Set Host_Name = yourmysqlserver_URL_or_IP. Set userid=your_userid to log in to your server. This userid value may not be the same as the username of your MySQL account.
Set up port forwarding. Either do a remote forward (Set local_port: 3306, remote_host: yourmysqlservername_or_ip, remote_port: 3306 ) or a local forward (Set port: 3306, host: localhost, remote port: 3306).
Save everything, otherwise you'll have to redo it the next time.
Log in to your server with the SSH session you just created.
On your Windows machine, start some ODBC application (such as Access).
Create a new file in Windows and link to MySQL using the ODBC driver the same way you normally do, except type in localhost for the MySQL host server, not yourmysqlservername.
You should now have an ODBC connection to MySQL, encrypted using SSH.
Please check back next week for the continuation of this article.


text:
Finding your D-Link router security settings You can return to your D-Link router configuration settings to ensure that you enter the correct information when adding other computers to your home network. You will need your network's SSID and WEP key information when configuring the network adapters on the additional computers.
Looking for Residential?
Looking for Wireless?


text:
- Guaranteed for 2 full months
- Pay by PayPal or Credit Card
- Instant Digital Download
Also in new DSLR news this week is an announcement from Canon – the Canon EOS 50D.
The Canon EOS 50D builds upon the success of the great 40D and takes it up a level with a 15.1 megapixel sensor, ISO range of 100-6400 (extendable up to a whopping 12800), 3.0 inch LCD (920,000 pixels) with Live View for framing images in the LCD, a shutter speed of 30-1/8000 second, Digic IV processor, integrated cleaning system and continuous shooting at 6.3 frames per second.
The Canon 50D is already available for ordering at Amazon in three configurations – check out the different combinations and price points below:
Learn more about the Canon EOS 50D and a new 18-200mm lens in the following news release from Canon announcing this new DSLR.
Canon's New DIGIC 4 Image Processor Fuels the 15.1 Megapixel Resolution, Expanded ISO Range and Enhanced Noise Reduction of the New EOS 50D Digital SLR
LAKE SUCCESS, N.Y., August 26, 2008 — With the demand for digital SLR cameras reaching unprecedented levels, Canon U.S.A., Inc., a leader in digital imaging, is answering the call with the announcement of the next evolution in advanced amateur digital SLR photography, the EOS 50D Digital SLR Camera with 15.1 megapixel resolution and Canon's new DIGIC 4 image processor. Designed to offer extraordinary quality and image control for the advanced photographer with a passion for the art, the Canon EOS 50D Digital SLR camera includes an expanded ISO range, improved noise reduction, and in-camera photo editing features. Canon has loaded the EOS 50D camera with a number of enhancements and some trickle-down technology from Canon's professional Digital SLR cameras, as well as a new Creative Auto Mode (CA) that gives users more creative flexibility to make image setting adjustments conveniently without the need to be a photo expert.
Canon has built upon the success of the popular EOS 40D model — which will remain in Canon's line — with the EOS 50D Digital SLR camera. Expected to be the camera body of choice for advanced amateur photographers this holiday season, the Canon EOS 50D Digital SLR camera carries over the EOS 40D's 14-bit Analog-to-Digital conversion process for smooth tones, and also includes enhanced noise reduction, especially at higher ISO ranges which will help bring those romantic nighttime shots into greater focus and clarity. Capable of shooting 6.3 frames per second (fps), the EOS 50D Digital SLR camera is ideal for shooting everything from beautiful night landscapes to fast-action sports.
"Advanced amateur photographers blur the line between the hobbyist and the professional, looking for professional features and capabilities in their equipment that will allow them to capture that awe-inspiring image. Canon is constantly striving to provide these shooters with the most advanced imaging technology, like the new EOS 50D Digital SLR camera, to fuel their passion for photography, and help them achieve their creative potential," stated Yuichi Ishizuka, senior vice president and general manager, Consumer Imaging Group, Canon U.S.A.
The EOS 50D Digital SLR camera's 15.1-megapixel CMOS APS-C size image sensor has been improved thanks to the use of newly designed gapless microlenses over each pixel to reduce noise and expand sensitivity up to ISO 12800. The faster processing speed of the camera's DIGIC 4 image processor contributes to the fast 6.3 frame-per-second (fps) continuous shooting capability (for bursts of up to 90 Large/Fine JPEGs or 16 RAW images on a UDMA CF card), to give shooters the tools they need to capture that perfect moment in perfect clarity.
The Canon EOS 50D camera provides ISO speeds from ISO 100 up to ISO 3200 in 1/3-stop increments, along with two high-speed settings — H1 and H2 — of ISO 6400 and ISO 12800, respectively. Along with a wide ISO range, Canon gives shooters more tools to help maximize clarity and color. The EOS 50D Digital SLR camera offers multiple levels of noise reduction during high-speed shooting. Users can choose from one of four settings — Standard/Weak/Strong/None — to help reduce digital noise that can result from poor lighting conditions.
As part of the camera's internal image processing, the Canon EOS 50D Digital SLR camera conducts peripheral illumination correction, which automatically evens brightness across the image field, making an image of a blue sky even toned throughout, a function previously accomplished through post-processing software on a personal computer. Thanks largely to the DIGIC 4 processor, this automatic adjustment can be made in-camera during shooting with JPEG images or corrected in post-photoshoot processing with RAW images through Canon's Digital Photo Professional (DPP) software, which is supplied at no extra charge.
Helping to ensure each picture's subject is clearly visible, Canon's enhanced Auto Lighting Optimizer analyzes the brightness of subjects and automatically adjusts dark images so that they appear brighter, perfect for subjects in shade or in backlit situations. The Auto Lighting Optimizer on the EOS 50D Digital SLR camera has been updated not only to optimize images while they are being taken, but can also optimize images post-capture, during playback, to help ensure the subject of each image does not appear too dark. This is especially helpful when an amateur photographer uses the camera, because post-capture enhancement can help maximize image quality without the need of a computer.
A significant upgrade to the Canon EOS 50D camera is its large, clear 3.0-inch Clear View LCD screen which features 920,000 dot/VGA resolution, four times the pixel count of the EOS 40D camera's screen, for better clarity and color. To help show off those fantastic shots, the EOS 50D camera includes an HDMI (High-Definition Multimedia Interface) output to display crisp, clear images on a High-Definition TV. The EOS 50D recognizes the needs of today's photographers, and the faster processing speed of the DIGIC 4 processor helps support UDMA cards for faster writing of image files.
The camera is also equipped with a high-performance viewfinder featuring 0.95x magnification and the same high-performance Autofocus (AF) system as the EOS 40D camera with nine cross-type sensors for accurate target subject acquisition with lenses possessing maximum apertures of f/5.6 or faster and a high-precision diagonal center cross-type AF point that's effective with f/2.8 and faster lenses, helping photographers ensure better focus of their targets. The AF Microadjustment feature, originally introduced last year with the Canon EOS-1D Mark III professional digital SLR camera, has also been added to the EOS 50D for maximum control over focusing precision.
Canon is taking steps to give advanced amateurs more flexibility with a new "CA" Creative Full Auto setting on the EOS 50D Digital SLR camera's mode dial. This new setting goes a step beyond Full Auto, by allowing users to make adjustments before shooting while still in an Automatic mode, without needing to know the meaning of technical terms such as aperture, shutter speed, etc. In this mode, the camera menu on the back screen spells out options in common language for average photo enthusiasts, allowing them to "blur the background" or "lighten or darken the image." These easy-to-comprehend image options will help amateur photographers improve the shots they are capable of taking, while helping them learn new techniques. When in the new CA mode, users will be able to adjust flash settings, brighten or darken images, blur the background, set the camera's drive mode, and select a picture style directly on the camera's LCD screen.
For photographers who prefer to frame their shots using the camera's 3.0-inch Clear View LCD screen, Canon has improved the Live View function of the EOS 50D Digital SLR camera to include "Quick Mode AF," "Live Mode AF," and "Face Detection Live Mode AF" that detects up to 35 individual forward-looking faces for better focus and clarity when taking group or portrait shots. The camera's Quick Mode AF setting flips the mirror down and carries out regular phase-detection autofocus, while the Live Mode AF and Face Detection Live Mode AF use the camera's CMOS image sensor for contrast detection autofocus. Two detailed grid displays have also been added to Live View shooting as optional settings for easier composition.
In addition to the RAW and JPEG image capture modes that photographers are accustomed to, the EOS 50D Digital SLR camera now offers more manageable resolution settings and file sizes with two sRAW recording formats, sRAW1 and sRAW2. At the sRAW1 setting, resolution is 7.1 megapixels with a file size that is approximately 25 percent smaller than a standard 15.1 megapixel RAW image. With the sRAW2 setting, resolution is 3.8 megapixels at less than half the file size of a standard RAW image, retaining all of the flexibility and creative possibilities associated with full-size, conventional RAW images. The EOS 50D is the first Canon Digital SLR that allows the use of RAW and sRAW settings in Basic Zone as well as Creative Zone shooting modes, even further improving the camera's flexibility.
The Self-Cleaning Sensor Unit for the Canon EOS 50D has also been upgraded and now includes a fluorine coating on the low-pass filter for better dust resistance. The Self-Cleaning Sensor Unit uses ultrasonic vibrations to shake dust particles off of the low-pass filter in front of the sensor each time the camera is powered up or shut down. The second part of the system includes a software component where sensor spots are mapped and saved as Dust Delete Data that is attached to the image file for removal during post processing using Canon's DPP software.
The EOS 50D is compatible with the full lineup of Canon EF lenses as well as the Company's ever-growing line of affordable EF-S lenses created specifically for Canon Digital SLRs with APS-C size image sensors. The Canon EOS 50D Digital SLR camera is scheduled for October delivery and will be sold in a body-only configuration at an estimated selling price of $1,399.00*. It will additionally be offered in a kit version with Canon's EF 28-135mm f/3.5-5.6 IS USM zoom lens at an estimated selling price of $1,599.00*.
Canon has answered the call from advanced amateur photographers looking for a solid all-around lens with the introduction of the new EF-S 18-200mm f/3.5-5.6 IS zoom lens. With an incredible focal length range equivalent to 29-320mm in the 35mm format, the new EF-S 18-200mm lens will make an excellent addition to any camera bag, and it gives shooters a great lens to capture both standard as well as telephoto images. The new lens features Canon's built in Optical Image Stabilization system which gives the equivalent effect of a shutter speed roughly 4 steps faster, for better image clarity, even in shaky shooting conditions. With a minimum focusing distance of 0.45m/1.5 ft. at all zoom settings, this new lens should prove to be ideal for those situations where swapping lenses isn't an option. An ideal complement to the EOS 50D SLR camera and all other EF-S compatible EOS SLR cameras, the EF-S 18-200mm f/3.5-5.6 IS lens is scheduled to be in stores this October at an estimated selling price of $699.00*.
This review the Canon EOS 50D very good. I think you take everything of this case.
I just bought my 30D in January. I won't be upgrading anytime soon. I still think this is an exciting set of features.
Wow!! No sooner than I set my eyes on the 50D they come out with that new 5D. Have you guys seen the stats on this thing? This camera 5D is sick with all kinds of goody's. 21MP they say it's close to medium format image and the damn thing shoots HD 1080p video. What the Hell??? Around $3500.00 camera and lenses $2600.00 body only. Not bad if you can drop that kind of change.
I tried out the new Canon 50D at the showroom here in Osaka last Friday and it feels the same as the 40D in handling, size and weight. The new lens is good and it has a lock button to prevent it from sliding when the camera is dangling around your neck. The LCD screen is very clear as well. I own a 20D and 30D - never was interested in upgrading to 40D - but now with the new Digic 4 image processor, higher ISO and noise reduction, I'll put the 50D on my Christmas wish list,
I like the fact that it has sRAW, I don't think I would need 15mp all the time.
My mouth is watering...although I have a Canon 40D, I am seriously considering trading it in and buying this 50D...the only concern I have is that Adobe may not be fast to produce a Camera Raw upgrade to include the 50D...alsoo other RAW processing softwares will not be quickly updated to include the 50D so I will wait...
It is an awesome camera if you think back to just a couple of years ago. Amazing.
I am still waiting for the new 5D mkII to be announced.
damn just bought 40D
So do I upgrade my 40D or wait for the 5D replacement?? Hmmm... I think I'll wait for the full-frame one.
50D sounds awesome, but like the step from 20D to 30D, or from 30D to 40D, it's not such a big step up... Except for +50% megapixels!
Of course.. right after I buy a 40D this gets announced.... ohwell.. I really like my new camera !
The 15.1 megapixel sensor certainly was unexpected. But I think Canon anticipated the large size issue, and probably introduced the 2 new RAW formats as a consequence.
I still think this is an exciting set of features. The reduced noise/higher ISO is welcome. As well as all the other features introduced in the 40D (I still have a 30D!)
Great camera with great specs... but Mike's point, is it going to make me a better photographer by replacing my 30D with this new gear? I still have the impression that I'm using less than 50% of my 30D capabilities, so no need to upgrade (although tempting...). I would rather invest in better lenses (would love to get the 50mm 1.4 or the 200mm 2.8). My next body upgrade will be in a 5D or its replacement.
This only my humble, personal view...
Unless you own the entry level DSLRs, XTi and all, your next upgrade should be to a full frame.. unless price is a real factor. But at the same time, to each his own. My policy, if someone made brilliant images with my camera [30D] years ago, I can too.. so why upgrade really?
At the same time, a brilliant camera, great specs.
@Peter Phun
You may want to check out this from Addonics: http://www.addonics.com/products/flash_memory_reader/adsacf.asp
There are some caveots it lists as having some trouble with certain controllers (an Intel is listed), and that your SATA controller needs to support hot-swap, but might be what the doctor ordered?
I'm fine with the 12.3mp of the Nikon D90. I'm using my Nikon D50 now at 6MP and printing 20x30 so I'm not sure if I need 12MP or more. Seems like they want you to buy a new 1TB external to go with it to store all these images. You do get more area to trim away with more MP but I'd just be more selective with the lens I was using.
I'm not really excited about the 15mp that the 50D has to offer. However, I'm totally looking forward to seeing how the noise reduction in higher ISOs (3200-12800) perform. If it performs well, in my opinion, it is worth an upgrade. I've also heard that the 50D has the AutoFocus Micro adjust as well, which is helpful for correcting the front/back focus issue.
Won't our computers be terribly clogged up with 15mp? I like the sound of the new lens. I just bought my 30D in January. I won't be upgrading anytime soon. Maybe the 40D will come down in price in a few years. I would prefer that to a 15mp. How about any of you?
Yeah Rosh,
I'm with you waiting, for the 5D replacement. I'm pretty sure the Nikon D3 has Canon wondering where they're going to draw the line between prosumer and professional. Funny how we used to have to wait years for a new body in the film days. Just like computers, DSLRs are replaced annually. Thanks Darren for the news. Anyone know of faster card readers? The fastest I've seen are Firewire 800
The 50D looks like a good continuation of an excellent series of a cameras produced by Canon. For $1400 you really get an excellent value and a solid camera. I still use my 10D as back up and for family pictures.
I'm still waiting for the 5D replacement. Mine is getting warn.
Thanks for the news Darren,
I am putting this on my wish list for the Christmas ;-)
It's time to replace my 30D.
Any news about 5D .... Mark II ???
Even though I'm use Canon, I don't feel this is a significant improvement, sort of like 20D and 30D. Anxiously waiting to see what the replacement for the 5D, Canon's full frame sensor body is going to do.
Hard drives and card readers are going to seem small. Time to upgrade to Firewire 800 card readers. Anyone know if there are SATA card readers out there?


text:
"Karsokas" Surname
Frequency of "Karsokas" Surname in the US
2000 US Census
The surname "Karsokas" is not included in the US Census Bureau's ranking of surnames with 100 or more people. Since fewer than 100 people with this surname were included in the 2000 Census, it is relatively uncommon.
Source: "Frequently Occurring Surnames from the Census 2000", US Census Bureau.
"Karsokas" Graves on Histopolis
Histopolis currently has 2 grave(s) with the surname "Karsokas".
Search the Histopols Grave Index for the surname "Karsokas".
Resource Links for "Karsokas"
Sorry, there are currently no resource links for the surname "Karsokas".
Do you know of a web page containing information about this surname that would be useful to genealogy or history researchers? Please add it now! (Free registration required)
Surnames that Sound Like "Karsokas"
The surname "Karsokas" has a Soundex code of K622. The following 330 surname(s) may sound similar to "Karsokas" since they share the same Soundex code.
Unconfirmed Surname
Histopolis has an entry for this surname but it might be the result of an error in the source information, since:
- It was not listed in the US Census Bureau list of most frequent surnames for either 1990 or 2000,
- Histopolis currently has few entries (2) for this surname in the Histopolis Grave Index, and
- There are no currently no links to other sites with this surname.
To confirm this surname, add a link (above) to a page with information about this surname or that references individuals with this surname.


text:
Mobile Storage Self Storage
Mobile Self Storage in the GTA
*Ask About Our One Month of Free Storage*
We are Ontario's first (1998) and most popular mobile storage provider. Mobile Storage with All Canadian Self Storage is economical, convenient and secure. Your belongings are stored in a heated, clean and secured public storage warehouse. The storage containers (5ft x 8ft x 7ft high) are designed to accommodate the contents of an average room. Five containers can be delivered per trip. The portable storage door opening is user friendly at 4ft wide and 7ft high. Mobile self storage containers can be delivered to any residence or business in the GTA including the downtown core condos and The Beach. Clients can load their belongings into the storage unit, then secure the door with their lock.
All Canadian Self Storage can provide packers and loaders upon request. Loaded portable storage containers will then be picked up and stored. Storage is in our clean, secure, heated warehouse. Access is available to your storage unit upon request at no charge. Return/re-delivery of the storage containers will be scheduled as per your request and to your designated location (may be different from the original pick-up location). Portable storage clients may order, with container delivery, wrapping and covers for furniture, packing supplies, moving boxes and storage locks.
Note: Because All Canadian Self Storage containers are custom constructed of wood (not metal), there is no condensation damage to stored goods.
How Mobile Storage Works
- No more renting trucks, no more hiring movers and no more making multiple trips to a storage location. Pack once. Unpack once.
- We can bring a storage container(s) to your residence, place of business or any place you need. All Canadian Self Storage is the easy, convenient solution to your storage needs.


text:
Jerry Myers
Jerry Dean Myers, 75, of Hillsboro died Sunday at Newton Medical Center. He was born April 6, 1939, to Edwin and Delores (Spunaugle) Myers in El Dorado.
He is survived by his son, Michael Myers of Marion; two daughters, Michele Carlson of Wichita and Melissa Kruse of Marion; two brothers, Gary Myers of Pratt and Michael Myers of McPherson; and five grandchildren.
He was preceded in death by his wife, Frances Myers, in 1997.
A celebration of life service is scheduled for 10 a.m. Friday at Jost Funeral Home in Hillsboro. Visitation with family will be from 9 a.m. until the service time Friday.
A memorial fund has been established with the American Heart Association.


text:
You are here
9 Exercises for Strong, Sculpted Arms
Work your biceps, triceps, and shoulders with these sculpting exercises.
Alex Palombo
How This Workout Works
Hot Arms Made Simple
"You don't need fancy equipment to get strong, sculpted arms and shoulders," says trainer Todd Durkin, who created this 360-degree arm-toning routine exclusively for FITNESS. "You just need the right moves." And here they are, using only a set of 5- to 12-pound dumbbells, a handled resistance tube, and a sturdy bench or chair. His rules for speedier results: (1) Opt for heavier weights, not the three-pounders. (2) Do two rear-delt moves for every front-delt exercise; we've labeled these specific targets so you can shuffle the moves.
Do these exercises three times a week every other day, along with your usual cardio. Perform one or two sets per move in the first two weeks and add weight every two weeks. Starting with week three, do two or three sets of the biceps and triceps moves. Bye-bye, arm jiggle!
Alex Palombo
Three-Point Row
Targets back, medial deltoid, and rear deltoid
- Stand with feet staggered, right in front of left, holding an 8- to 12-pound dumbbell in left hand.
- Bend forward from hips and place right hand on a bench. Extend left arm down, palm facing right.
- Draw left hand up to rib cage. Lower arm, then bring elbow out 45 degrees from side.
- Lower arm again, then draw elbow out perpendicular to ribs, turning palm to face left. Lower arm and repeat entire series 5 to 10 times. Switch sides; repeat.
Alex Palombo
Targets back, anterior deltoid, medial deltoid, and rear deltoid
- Loop the center of a handled resistance tube around a sturdy object at waist level, hold a handle in each hand, and turn so that left hip is facing anchor.
- Bring both arms by left hip so right arm is across body, palm turned away from you, thumb down.
- Keeping torso and left arm still, draw right arm across body and over to right so that thumb is pointing up (keep right arm straight, not locked).
- Return to start. Do 10 to 15 reps. Switch sides; repeat.
Alex Palombo
Goalpost Rotation
Targets medial deltoid, rear deltoid, and rotator cuff
- Anchor the center of a resistance tube around a sturdy object at waist level and stand facing it, holding a handle in each hand.
- Bend elbows 90 degrees and raise arms to shoulder height so that arms are parallel to floor, palms facing down.
- Keeping torso still, rotate arms up so that forearms are perpendicular to floor and palms face forward. Lower and repeat. Do 10 to 15 reps.
Alex Palombo
Triangle Push-Up
Targets shoulders, chest, triceps, and core
- Kneel and place hands on floor under chest.
- Turn hands in so that index fingers and thumbs form a triangle (they don't have to touch).
- Straighten arms and step feet back so that body is straight from head to heels. MAKE IT EASIER: Place palms on a counter, a bench or the seat of a sturdy chair.
- Bend elbows about 45 degrees out to sides as you lower chest toward floor. Press up and repeat.
- Do 10 to 15 reps.
Alex Palombo
Bench Dip
Targets chest and triceps
- Sit on front edge of a sturdy bench or chair, palms on either side of hips. Straighten arms and shift hips forward just in front of seat.
- Bend knees so that they're aligned over ankles. MAKE IT HARDER: Extend legs, heels on floor. Lift right leg parallel to floor. (Beginners: feet on floor.)
- Bend elbows 90 degrees behind you, lowering hips toward floor. Straighten arms; repeat.
- Do 10 to 15 reps. (Switch legs for next set.)
Alex Palombo
Triceps Extension
Targets triceps, butt, and legs
- Hold a 5- to 8-pound dumbbell in right hand and stand with feet staggered, left in front of right.
- Lower into a lunge, knees bent 90 degrees and left knee aligned over ankle.
- Maintaining lunge, lean forward and place left forearm on thigh. Draw right elbow toward rib cage, palm facing left and elbow bent 90 degrees.
- Extend right arm behind you. Lower to 90 degrees again; repeat. Do 10 to 15 reps. Switch sides; repeat.
Alex Palombo
Stork Stance Curl
Targets biceps, abs, and butt
- Loop the center of a resistance tube around instep of right foot once or twice; hold a handle in each hand.
- Balance on left leg and raise right leg as high as you can while still feeling stable. Extend arms forward, palms facing up. MAKE IT EASIER: Keep both feet on floor.
- Draw hands toward head, maintaining balance and keeping upper arms still. Extend arms again and repeat. Do 10 reps, then switch legs and repeat.
Alex Palombo
Targets biceps, brachialis, and brachioradialis
- Hold an 8- to 12-pound dumbbell in each hand at sides, palms facing forward. Bend right elbow 90 degrees, palm up, and keep it there.
- Curl left hand to shoulder for 10 reps.
- Switch arms (left stays bent, right arm curls); do 10 reps. Finally, do 10 complete curls with both arms.
- For second set, change grip so that palms face each other. For third set, start with palms facing down.
Alex Palombo
Targets back and biceps
- Stand with feet staggered, right in front of left, and hold one handle of a resistance tube in left hand. Wrap about half the tube tightly around other handle, then hold wrapped handle in right hand.
- Extend both arms forward at shoulder height and pull left arm back slightly, as if you're holding a bow and arrow. (Choke up on the tubing if you need to.)
With right arm straight, pull left hand toward chest.
- Release; repeat. Do 10 to 15 reps. Switch sides; repeat.
Video: Your Workout for Strong Arms
Ready to tone and strengthen those guns? Follow along with Nike master trainer Traci Copeland for the full workout. (Want more from Traci? Next up, try her video on the 9 best moves to strengthen your core.)


text:
Home > News & Events > Wayland Press Release Archives > 2006 News Releases > January 2006 > Students Revive Old Organization, Hold MLK Celebration
Students Revive Old Organization, Hold MLK Celebration
PLAINVIEW – Joining hands around the room, students exchanged smiles and nods while listening to Wayland Baptist University senior Daniel Coutinho read Martin Luther King Jr.'s famous "I Have a Dream" speech. Afterward, students of all nationalities mingled and visited food tables for seconds from the smorgasbord of goodies held in celebration of the late civil rights leader.
For Miki Mays, the scene could not have been more perfect. A sophomore from Fort Worth, Mays is president of Harambe (pronounced huh-rom-bay), a student organization that promotes unity among the cultures. She started the organization in the fall after visiting with her pastor, Richard Miller, of Happy Union Baptist Church.
"I had expressed a desire to have all the various cultures at Wayland united, and he started telling me about Harambe, a group they had when he was a student here in the 1980s," Mays explained, adding that the older group sounded exactly like what she was looking for.
"Back then, we wanted a group that was about diversity, and we did a lot of things together for students where they didn't have many requirements to join, just coming together under Christ," Miller said of the original group. "When Miki first came to the church, she just had a fire about her and wanted to do something for Jesus, so I suggested she start the group back up."
This summer, the group purchased t-shirts bearing their name, began selling them for a fundraiser and spreading the word about their purpose. Their key Bible verse, Ephesians 4:13, helps bear that out: "till we all come to the unity of the faith and of the knowledge of the Son of God, to a perfect man, to the measure of the stature of the fullness of Christ."
"The purpose of Harambe is just to get the different ethnic cultures together and hang out under the name of Christ," she said. "We have cultural food nights and Bible studies, and the whole point is to get people mingling with other people they might not know."
Since August, the group has met monthly for fellowship. The Martin Luther King, Jr. celebration held Monday was the first for the group and one Mays hopes to see become an annual event. About 35 students turned out for the occasion, along with supporters from various churches in Plainview.
A member of the Flying Queens basketball squad, Mays enlisted some friends with similar interests to form a core group, including fellow teammate Anastasia Okolo of Houston, Caroline Oladipo of Richmond, Va., Kim Gilder of Colmesneil, Jeree Green of Glenn Heights, Michal Polanowski of Konin, Poland, and Maureen and Daniel Coutinho, siblings from Comoros, Africa. Staff member Priscilla Edwards of Barbados joined in as well, and associate professor of sociology Debra Lavender-Bratcher has gotten involved recently.
Mays credits her pastor and others at Happy Union with great support, in prayer and financially. She also notes that Helen Brooks of Outcast Ministries has been supportive of the venture as well.
While the group is still young, Mays feels Harambe is already achieving its goals and will continue to grow. She's working on continuing to get the word out and make sure students understand the group is for all people, regardless of race or nationality.
"I do feel we've accomplished the mission God's given me to unify the cultures, but it can only get bigger as we go," she said.