text:
Anonymous Tactics (from the attacks reported on by Imperva)
I am also the editor of the Neohapsis Labs blog. The following is reprinted with permission from
by J. Schumacher
Security professionals have been following the collective of Internet users calling themselves Anonymous for a few years now as they cause cyber mayhem to understand their tactics. There were two well written publications in recent weeks that caught my eye, The New York Times "In Attack on Vatican Web Site, a Glimpse of Hackers' Tactics" and Imperva's "Hacker Intelligence Summary Report, the Anatomy of an Anonymous Attack". These articles shed light on how Anonymous takes a call to arms, recruits members, and searches for action. After reading these articles I kept thinking about current state of the Internet and wondering about the future of Anonymous' with the cyber pandemonium it creates.
Taking the Imperva report as factual, the collective group of Anonymous has an approximate 10:1 ratio of laypeople to skilled hackers, which I believe limits the sophistication of attacks. I say "collective", as targets for attacks are not often given from above, but must be approved or agreed upon by the masses before being launched. One very interesting note in Imperva's report was that the attacks Imperva monitored in 2011 were not utilizing bots, malware or phishing techniques for exploit, but end users actively running tools or visiting special web sites to aid in the attack. There was a high level of public recruitment through social media of Twitter and Facebook, which can also act to inform the victim before the attack hits properly.
The New York Times article mentions that the attack on the Vatican took 18 days to gain enough recruitment and automated scanning tools were used for reconnaissance on the Vatican virtual front during this time. In this attack Anonymous was seeking to interrupt the International Youth Day by a certain date, but when that failed Anonymous changed tactics to widespread distribution of software for Distributed Denial of Service (DDoS) so they could to hit the Vatican with a thousand person attack. There were mixed statements from Anonymous and Imperva (who was a contractor for Internet security monitoring) regarding whether any sites across the globe were truly taken offline for any amount of time.
I think that Rob Rachwald, Imperva's director of security, was quoted best by The New York Times article as saying "who is Anonymous? Anyone can use the Anonymous umbrella to hack anyone at anytime". However, I believe Anonymous has currently reached their collective peak and will never be the same as in its early 4chan or even the 2008 days. However, by no means has the world heard the last of Anonymous, as people will be claiming affiliation to the collective "group" for a very long to come, and I believe it will also continue to evolve over time. How this change takes place is going to be exciting to see as Anonymous claims an "ideas without leaders" mentality and relies on general public for consensus of missions.
Recently, an interesting report from Symantec also came out about how Anonymous affiliates were tricked into installing the Zeus Trojan by a Pastebin tutorial covering how to install and use one of the attack tools, the Low Orbit Ion Cannon (LOIC), to support in DDoS attacks. Established Twitter handles for Anonymous contributors (YourAnonNews, AnonymousIRC, AnonOps) have tweeted that this was not done by Anonymous. But, with no leadership accountable (due to the collective nature of Anonymous), there is nothing to say whether this is a true, whether another entity is sabotaging Anonymous public fanfare, or if it was simply someone taking advantage of free publicity to trick users into installing malware. Since what many call the start of Anonymous in 2008 (Scientology attacks), there have not been any other large scale compromises of the those supporting attacks through infected tools, but this new activity could hurt the future of Anonymous recruitment and public support.
Depending on whether this recent instance of infected tools was a fluke, I see the future of Anonymous involving with skilled hackers increasing through a Wild West collaborative of honing their talents, while keeping the true base of Anonymous as largely unskilled hackers. The skilled will, at times, directly and indirectly work for entities (such as large scale crime syndicates as well as private entities) to whom they are lured by big pay for work that will never be reported in any news paper. The skilled hackers will still participate in Anonymous causes, and they will also enable other Anonymous members (through writing attack tools, scripts or apps), while also keeping knowledge of their well paid exploits limited to a smaller private offshoot group. These offshoots will put dedication into advanced exploits that require some financial backing to set up (such as servers for social engineering, injection data repository, proxies and bots) but these exploits will most likely never be communicated to the larger Anonymous collective or used for social causes of the masses but rather private gains.
At the same time though, the unskilled hackers, making up the majority of the group, are essential to Anonymous at large for bringing attention and support to causes, identifying weaknesses in networks, performing DDoS attacks and being a overall distraction and crowd to hide in. It seems bots will be unnecessary and replaced by humans where it is simpler. A large army that is not connected (outside of the odd one-off message to a public forums or social media) provides for a large pool that the authorities must sift through in finding the dedicated Anon. The collective group of Anonymous has showed support for many social causes, like the occupy movement and free speech outcries from proposed Internet legislation. At the same time Anonymous seems to have very publicly promoted every hack and breach that has been reported since 2010 whether the data exposed was government, private industry or public citizens.
I like to think of myself as a practical, but at times wishful, person. As I see it, the core ideology of the Anonymous' movement is not going away, as their cause is not so much new as is the platform for their disobedience. There are some basic controls that organizations can implement to protect themselves from a virtual protest, whether the risk is from DDoS attacks or exploits of un-patched public devices. In the near term, I do not see a high probability of Anonymous becoming a super group of hackers that perform sophisticated attacks in the likes of Stuxnet. Nor do I see the possibility of a large scale take down of critical infrastructure. There will always be a risk and sometimes possible threats to critical infrastructure through technology but this risk can be largely mitigated through proper assessment and mitigating controls.
Side note –
If the recent instance of infected tools will continue on other causes then I believe we have seen the end of wide support for Anonymous. Distrust has always been a concern to involved members with very recent arrests across the globe for LulzSec. Anonymous will need to do internal damage control to prevent the collapse of the collective group and a public distrust in support for causes brought up by the Anons. Even if hacking group Anonymous goes in a different direct the damage has been done and Internet society can never reverse the damage physiologically from the last 5 years.
As writing this post there was news coming out that a prominent member of Anonymous, Sabu, along with 5 others have been arrested by the FBI. We will have more details once the dust settles a bit and all news sources can be processed, stay tuned.
Getting your head around the "Mobile" discussion
The last time business managers were worked into a tizzy about "Mobile," we called it Mobile Computing or Mobility and we talked about remote workers, laptop computers and USB memory sticks (thumb drives). Organizations routinely provisioned employees with both, and employees routinely wanted to use their personal laptops and USB sticks for business use. Therefore, companies had to deal with a mix of business and personal mobile computing devices. In those days Neohapsis recommended that its clients create strong "personal use" policies, promote awareness of the risks, and deploy technology measures to mitigate some those risks. Today's mobile discussion is similar in theme but quite different in details.
Mobile no longer merely means mobile computing or mobile workforce. Its common use now includes social networking, mobile websites, mobile apps, new messaging and communication platforms, photos, crowd sourcing, and videos used for personal and business reasons on a vast range of technologies including home PCs, corporate workstations, laptops, smartphones and tablets on the business network, the home Internet connection and in the Cloud.
The technology eco-system of Mobile is vast. Phones, cameras, PDAs (like the iPod Touch©), portable storage devices (external storage, iPods, memory sticks) and tablets are all included, but so are computers, servers and entire data centers. The glue that connects all of these systems in the Mobile conversation is simply one thing: the Internet. Mobile touches nearly every aspect of your IT environment.
So what does a business manager need to know in order to approach Mobile with reasonable security? That is the subject of Neohapsis Labs' newest paper: The Secure Mobile Enterprise. Download it here.
Set and Don't Forget
I am also the editor of the Neohapsis Labs blog. The following is reprinted with permission from
By Patrick Harbauer, Neohapsis Senior Security Consultant and PCI Technical Lead
There are several PCI DSS requirements that are related to tasks that must be performed on a regular basis. The frequency of these tasks varies from daily to annual. There are also a few requirements that make it important to have PCI DSS compliant data retention policies and procedures in place. An example of a requirement that calls for a task to be performed periodically is requirement 11.2.2: Perform quarterly external vulnerability scans via an Approved Scanning Vendor (ASV). An example of a requirement the calls for compliant data retention policies and procedures is requirement 9.4: Use a visitor log to maintain a physical audit trail of visitor activity. Retain this log for a minimum of three months, unless otherwise restricted by law. If processes or checklists are not in place to track your compliance with these reoccurring tasks, you may be in for an unpleasant surprise during your next annual ROC assessment.
Are You Certifiable?
11.2.2 is one of the classic requirements where we see this happen all too often. When we ask a customer if we can review the certified, passing ASV scans from the last four quarters and we get a response such as, "Oops, Susie was responsible for that and she was reassigned to a different department…" we stick our fingers in our ears and say "la la la la" but that hasn't ever made the problem go away. Unfortunately, when this happens, instead of a 10 minute conversation reviewing 4 certified and passing ASV scans, we have to buy a few pizza's, cross our fingers and review several external vulnerability scan reports in hopes that the customer can demonstrate they are scanning and remediating to meet the spirit and intent of requirement 11.2.2.
A Ruleset Only a Mother Could Love
We have seen some very ugly firewall rule sets. We do understand that the business must be able to function and exists to make as large a profit as possible – not to sing the praises of PCI. But as QSA's, we do need to see six month firewall and router rule set reviews and evidence that the rule sets are being maintained with good hygiene. Maintaining clean and healthy firewall rule sets is similar to a good exercise regimen. If your doctor gives you a daily exercise program to maintain your health and you follow it in a haphazard fashion, your doctor is not going to be able to give you a good health report upon your next doctor's visit. Similarly, you need a solid program in place to make sure that your firewall rule sets remain healthy and only allow the outbound and inbound network traffic that is actually needed and authorized. And let's face it, automation is needed for most organizations to manage their firewall and router rule sets effectively. Fortunately there are several excellent solutions available on the market that give you the ability to manage your firewall and router rule sets. For example, these solutions can analyze your rule sets to find overlapping and redundant rules, rules that have not been used over that last X days or rules that allow "any" access – a big PCI no-no. They can also provide the change control mechanisms needed to make sure that changes to firewall rule sets are reviewed and approved by authorized individuals and are properly documented so that rule sets are closely and properly managed.
"The Matrix"
To assist you with making sure that your security program is giving proper attention to specific PCI requirements, we are providing the following two lists. These can be used to create a matrix, review your security operations and to correct any gaps that you may uncover. List 1 covers the frequency with which tasks must be performed related to specific PCI DSS requirements. List 2 shows data retention periods tied to specific requirements. With a little planning, you can keep your PCI compliance on track at all times and avoid unpleasant surprises when your friendly QSA shows up for your next ROC assessment!
List 1 – Recurring PCI Compliance Tasks
1.1.6 – Review firewall and router rule sets (Every 6 Months)
3.1.1 – Automatic or manual process for identifying and securely deleting stored cardholder data (Quarterly)
6.1 – All system components and software are protected from known vulnerabilities (Monthly)
6.6 – Address new threats and vulnerabilities for public-facing web applications (At least annually and after any changes)
8.5.5 – Remove/disable inactive user accounts (Quarterly)
9.5 – Review security of backup media storage location (Annually)
9.9.1 – Properly maintain inventory logs of all media and conduct media inventories (Annually)
10.6 – Review logs for all system components (Daily)
11.1 – Test for the presence of wireless access points and detect unauthorized wireless access points (Quarterly)
11.2.1 – Perform internal vulnerability scans (Quarterly)
11.2.2 – Perform external vulnerability scans via an Approved Scanning Vendor (Quarterly)
11.2.3 – Perform internal and external scans (After any significant change)
11.3 – Perform external and internal penetration testing (At least once a year and after any significant infrastructure or application upgrade or modification)
11.5 – Deploy file-integrity monitoring tools and perform critical file comparisons (Weekly)
12.1.2 – Perform and document a formal risk assessment (Annually)
12.1.3 – Review security policy and update when the environment changes (Annually)
12.2 – Develop daily operational security procedures (Daily)
12.6.1 – Educate personnel (Upon hire and at least annually)
12.6.2 – Require personnel to acknowledge that they have read and understand the security policy and procedures (Annually)
12.8.4 – Maintain a program to monitor service providers' PCI DSS compliance status (Annually)
List 2 – Data Retention Periods
9.1.1 – Store video camera and/or controls mechanism log (3 months)
9.4 – Retain visitor logs (3 months)
10.7 – Retain audit trail history (1 year)
Pass the iOS Privacy Salt – Hashing Does NOT Guarantee Privacy.
I am also the editor of the Neohapsis Labs blog. The following is reprinted with permission from
By Michael Pearce, Neohapsis & Neolabs
There has been a lot of concern and online chatter about iPhone/mobile applications and the private data that some send to various parties. Starting with the discovery of Path sending your entire address book to their servers, it has since also been revealed that other applications do the same thing. The other offenders include Facebook, Twitter, Instagram, Foursquare, Foodspotting, Yelp, and Gowalla. This corresponds nicely with some research I have been doing into device ID leakage on mobile devices, where I have seen the same leakages, excuses, and techniques applied and abused as those discussed around the address book leakages.
I have observed a few posts discussing the issues proposing solutions. These solutions range from requiring iOS to request permission for address book access (as it does for location) and advising developers to hash sensitive data that they send through and compare hashes server side.
The first idea is a very good one, I see few reasons a device geolocation is less sensitive than its address book. The second one as given by is only partial advice however, and if taken as it is given in Martin May's post, or Matt Gemmel's arguments; it will not solve the privacy problems on its own. This is because 1. anonymised data isn't anonymous, and 2. no matter what hashing algorithm you use, if the input material is sufficiently constrained you can compute, or precompute all possible values.
Martin May's two characteristics of a hash [link] :
- Identical inputs will yield the same hash
- It is virtually impossible to deduce the original input from a hash if a strong hashing algorithm is used.
This is because, of these two characteristics of a hash the privacy implications of first are not fully discussed, and the second is incorrect as stated.
Hashing will not solve the privacy concerns because:
- Hashing Data does not Guarantee Privacy (When the same data is input)
- Hashing Data does not Guarantee Secrecy (When the input values are constrained)
The reasons not discussed for this are centered on the fact that real world input is constrained, not infinite. Telephone numbers are an extreme case of this, as I will discuss later.
A quick primer on hashing
Hashing is a destructive, theoretically one-way process where some data is taken and put through an algorithm to produce some output that is a shadow of the input. Like a shadow, the same output is always produced by the same input, but not the other way around. (Same car, same shadow).
A very simple example of a hashing function is the modulus (or remainder). For instance the output from 3 mod 2 is the remainder when 3 is divided by 2, or 1. The percent sign is commonly used in programming languages to denote this operation, so similarly
1 % 3 is 1, 2 % 3 is 2 3 % 3 is 0 4 % 3 is 1 5 % 3 is 2 etc
If you take some input, you get the same output every time from the same hashing function. The reason the hashing process is one way is because it intentionally discards some data about the original. This results in what are called collisions, and we can see some in our earlier example using mod 3, 1 and 4 give the same hash, as do 2 and 5. The example given will cause collisions approximately one time in 1, however modern strong hashing functions are a great deal more complex than modulo 3. Even the "very broken" MD5 has collisions occur only one time in every 2^24 or 1 in ~17 000 000.
A key point is that, with a hashing algorithm for any output there are theoretically an infinite number of inputs that can give it and thus it is a one-way, irreversible, process.
A second key point is that any input gives the same output every time. So, by checking if the hashes of two items are the same you can be pretty sure they are from the same source material.
Cooking Some Phone Number Hash(es)
(All calculations are approximate, if I'm not out by two orders of magnitude then…)
Phone numbers conform to a rather well known format, or set of formats. A modern GPU can run about 20 million hashes per second (2*10^7), or 1.7 trillion (1.7 *10 11) per day. So, how does this fit with possible phone numbers?
A pretty standard phone number is made up of 1-3 digits for a country code, 3 local code, and 7 numbers, with perhaps 4 for the extension.
So, we have the following range of numbers:
0000000000000-0000 to 9999999999999-0000
Or, 10^13 possible numbers… About 60 days work to compute all possible values (and a LOT of storage space…)
If we now represent it in a few other forms that may occur to programmers…
We have maybe 10-20 times that, or several year's calculations…
But, real world phone numbers don't fill all possible values. For instance, take a US phone number. It is also made up of the country code, 3 for the local code , and 7 numbers, with perhaps 4 for the extension. But:
- The country code is known:
- The area code is only about 35% used since only 350 values are in use
- The 7 digit codes are not completely full (let's guess 80%)
- Most numbers do not use extensions (let's say 5% use them
Now, we only have 350 * (10 000 000 *.8) * 1.05 or 2.94 billion combinations (2.94*10^9). That is only a little over two minutes on a modern GPU. Even allowing for different representations of numbers you could store that in a few of gigabytes of RAM for instant lookup, or recalculate every time and take longer. This is what is called a time space tradeoff, the space of the memory or the time to recalculate.
Anyway, the two takeaways for our discussion here regarding privacy are:
1. Every unique output value probably corresponds to a unique input value, so this hashing anonymisation still has privacy concerns.
Since possible phone numbers are significantly fewer than the collision chance of even a broken hashing algorithm there is probably little chance of collisions.
2. Phone numbers can be reverse computed from raw hashes alone
Because of the known constraints of input values It is possible to either brute force reverse values, or to build a reasonable sized rainbow table on a modern system.
Hashing Does NOT Guarantee Privacy
Anonymising data by removing specific user identifying information but leaving in unique identifiers does not work to assuage privacy concerns. This is because often clues are in the data, or in linkages between the data. AOL learned this the hard way when they released "anonymised" search data.
Furthermore, the network effect can reveal a lot about you, how many people you connect to, and how many they connect to can be a powerful identifier of you. Not to mention predict a lot of things like your career area and salary point (since more connections tends to mean richer).
For a good discussion of some of the privacy issues related to hashes see Matt Gemmell's post, Hashing for Privacy in social apps.
Mobile apps also often send the device hardware identifier (which cannot be changed or removed) to servers and advertising networks. And I have also observed the hash of this (or the WiFi MAC address) sent through. This hardly helps accomplish anything, as anyone who knows the device ID can hash it and look for that, and anyone who knows the hash can look for it, just as with the phone numbers. This hash is equally unique to my device, and unable to be changed.
Hashing Does not equal Secrecy
As discussed under "cooking some hash(es)" it is possible to work back from a hash to the input since we know some of the constraints operating upon phone numbers. Furthermore, even if we are not sure exactly how you are hashing data then we can simply put test data in and look for known hashes of it. If I know what 123456789 hashes to and I see it in the output, then I know how your app is hashing phone numbers.
The Full Solution to Privacy and Secrecy: Salt
Both of these issues can be greatly helped by increasing the complexity of the input into the hash function. This can both remove the tendency for anonymised data to carry identical identifiers across instances, and also reduce the chance of it becoming feasible to reverse-calculate all possible values. Unfortunately there is no perfect solution to this if user-matching functionality comes first.
The correct solution as it should be used to store passwords, entry specific salting (for example with bcrypt), is not feasible for a matching algorithm as it will only work for comparing hashed input to stored hashes, and it will not work for comparing stored hashes to stored hashes.
However, if you as a developer are determined to make a server side matching service for your users, then you need to apply a hybrid approach. This is not good practice for highly sensitive information, but it should retain the functionality needed for server side matching.
Your first privacy step is to make sure your hashes do not match those collected or used by anyone else, do this by adding some constant secret to them, a process called salting.
e.g., adding 9835476579080945368095468905486 to the start of every number before you hash
This will make all of your hashes different to those used by any other developer, but will still compare them properly. The same input will give the same output.
However, there is still a problem – If your secret salt is leaked or disclosed the reversing attacks outlined earlier become possible. To avoid this, increase the complexity of input by hashing more complex data. So, rather than just hashing the phone number, hash the name, email, and phone number together. This does introduce the problem of causing hashes to disagree if any part of the input differs by misspelling, typo's etc…
The best way to protect your user's data from disclosure, and your reputation from damage due to a privacy breach:
- Don't collect or send sensitive user data or hashes in the first place – using the security principle of least privilege.
- Ask for access in a very obvious and unambiguous way – informed consent.
Hit me/us up on twitter ( @neohapsis or @secvalve) if you have any comments or discussion. (Especially if I made an error!)
[Update] Added author byline and clarified some wording.
Who owns and regulates MY Facebook data?
I am also the editor of the Neohapsis Labs blog. The following is reprinted with permission from
My previous post briefly described the data that makes up a user's Facebook data and this post will try to shed light on who owns and regulates this data.
I am probably not going out on a limb here to say that the majority of Facebook's registered users have not read the privacy statement. I was like the majority of users myself, in that I did not fully read Facebook's privacy statement upon signing up for the service. Facebook created a social media network online, and there were few requirements previously defined for such types of business in America or the world. A lack of rules, combined with users constantly uploading more data, has allowed Facebook to maximize the use of your data and create a behemoth of a social media networking business.
Over time, Facebook has added features to allow users to self regulate their data by limiting others (whether Facebook users or general Internet public) from viewing certain data that one might want to share with only family or specific friends. This provided a user with the sense of ownership and privacy as the creator of the data could block or restrict friends and search providers from viewing their data. Zuckerberg is even quoted by WSJ as saying "The power here is that people have information they don't want to share with everyone. If you give people very tight control over what information they are sharing or who they are sharing with they will actually share more. One example is that one third of our users share their cell phone number on the site".
In addition to privacy controls, Facebook gave users more insight into their data through a feature that allowed a user to download 'all' their data through a button in the account settings. I placed 'all' in quotes because, while you could download your Facebook profile data, this did not include data including wall comments, links, information tagged by other Facebook users or any other data that you created during your Facebook experience. Combined, privacy controls and data export are the main forms of control that Facebook gives to their users for ownership of profile, pictures, notes, links, tags and comment data since Facebook went live in 2004.
So now you might be thinking problem solved; restricting your privacy settings on the viewing of information and downloading 'all' your information fixes everything for you. Well, I wish that was the case with Facebook business operations. An open letter by 10 Security professionals to the US Congress highlighted that this was not simply the way things worked with Facebook and third party Facebook developer's operations. Facebook has reserved the right to change their privacy statement at any time with no notice to the user and Facebook has done this a few times, to an uproar from their user base. As Facebook has grown in popularity and company footprint, security professionals along with media outlets have started publishing security studies painting Facebook in a darker light.
As highlighted by US Congress in December 2011, Facebook was not respecting user's privacy when sharing information to advertisers or when automatically enabling contradicting privacy settings on new services to their users. Facebook settled with the US Congress on seven charges of deceiving the user by telling them they could keep their data private. From my perspective it appears that Facebook is willing to contradict their user's privacy to suit their best interest for shareholders and business revenue.
In additional privacy mishaps, Facebook was found by an Austrian student to be storing user details even after a user deactivates the service. This started an EU versus Facebook initiative over the Internet that put heat on Facebook to give more details on length of time data was being retained for current and deactivated users. Holding on to user data is lucrative for Facebook as this allows them to claim more users in selling to advertising subscribers as well as promoting the total user base for private investor bottom lines.
So the next step one might ask is "who regulates my data held by social media companies?" Summed up quickly today, no one outside Facebook is regulating your data and little insight is given to users on this process. The governments of the US, along with the European Union, are looking at means of regulating Facebook's operations using things such as data privacy regulations and the US/EU Safe Harbor Act. With Facebook announcing their initial public offering of five billion USD there is soon to be more regulations, at least financially, to hit Facebook in the future.
As an outcome of the December 2011 investigation by the United States Congress, Facebook has agreed to independent audits by third parties, presumably of their choosing. I have not been able to identify details regarding the subject of these audits or ramifications for findings from an audit. Facebook has also updated the public statement and communication to developers and now states that deactivated users will have accounts deleted after 30 days. I have yet to see a change in Facebook's operations for respecting their user's privacy settings when pertaining to third parties and other outside entities – in fairness they insist data is not directly shared for advertising; although some British folks may disagree with Facebook claims of advertising privacy.
From an information security perspective, my 'free' advice to businesses, developers and end users, do not accesses or give more data than necessary for your user experience as this only brings trouble in the long run. While I would like to give Facebook the benefit of the doubt in their operations, I personally only give data that I am comfortable sharing with the world even though it is limited to friends. In global business data privacy regulations vary significantly between countries, with regulations come requirements and everyone knows that failing requirements results to fines so business need to think about only access appropriate information and accordingly restricting access. For the end user, or Facebook's product, remember that Facebook can change their privacy statement at their leisure and Facebook is ultimately a business with stakeholders that are eager to see quarter after quarter growth.
I hope this post has been insightful to you; please check back soon for my future post on how your Facebook data is being used and the different entities that want to access your data.
Anonymous Releases FBI and UK Conference Call Recording
I am also the editor of the Neohapsis Labs blog. The following is reprinted with permission from
This past Friday (February 3, 2012) Anonymous released a call recording regarding an assumed confidential conference call between two FBI field offices and a official UK investigation office regarding status on Anonymous, AntiSec, Lulzsec and other splinter cyber groups. It was released on ThePirateBay, YouTube and Pastebin, and from the Pastebin posts, the conference call appears to have been related to a meeting invite for a call on January 17, 2012 that was sent on January 13, 2012 to nearly 50 people from France, UK, Netherlands, Ireland, Germany, Sweden and hosted by US to coordinate internationally. The posts were made by anonymous as part of their #FFF (F@$K FBI Friday) releases which has been going on almost regularly for over a year now.
It is unclear through YouTube audio if the call was from January 20, or a more recent conference call between the governments. I think that this was probably only released because the hacking groups found no more use in that bridge number. In listening to the call, one can gain insight into the global workings of the fight against cyber crime, as two current cases were lightly discussed. Insight was also sought regarding other persons of interest concerning breaches reported to government authorities. I found the lack of care around people joining the call interesting as I could hear the extra beep that was missed by the call parties and I assume it was 'Anonymous' recording the call.
Few facts can be gathered around how anonymous gained the electronic invitation for the meeting. After the Pastebin post with conference bridge call number and password, it does not seem that the conference system or software was hacked to gain access for the call. One might assume that an email account or system on the distribution list could have been compromised to gain the conference details or some form of social engineering was used in the attack. Either way, anonymous has again provided a reason for government and private industry to rethink their communication processes for distributing sensitive call meetings. In future calls, I would think that every time the system beeps for a new attendee on the call there will be a stop to ask who had just joined the conference, especially when discussing active investigations or sensitive information.
While there is a need to share passwords for conference calls it is important to mitigate any risk in the process to overcome the shared password. Typically this is done on conference calls by paying a very close attention to people joining the call and stopping conversation when the system makes a beep for a new participant joining the call. If the conference call is of sensitive or classified information then the call should be halted or stopped if all parties are not able to be identified on the conference system.
Also, all parties need to read The New York Times article about board rooms being open up to hackers through weak implementation security as it has some relevance here.
Groundhog Day in the Application Security World
I am also the editor of the Neohapsis Labs blog. The following is reprinted with permission from
By Michael Pearce, a Security Consultant and Researcher at Neohapsis
Throughout the US on Groundhog Day, an inordinate amount of media attention will be given to small furry creatures and whether or not they emerge into bright sunlight or cloudy skies. In a tradition that may seem rather topsy-turvy to those not familiar with it, the story says that if the groundhog sees his shadow (indicating the sun is shining), he returns to his hole to sleep for six more weeks and avoid the winter weather that is to come.
Similarly, when a company comes into the world of security and begins to endure the glare of security testing, the shadow of what they find can be enough to send them back into hiding. However, with the right preparation and mindset, businesses can not only withstand the sight of insecurity, they can begin to make meaningful and incremental improvements to ensure that the next time they face the sun the shadow is far less intimidating.
Hundreds or thousands of issues – Why?
It is not uncommon for a Neohapsis consultant to find hundreds of potential issues to sort through when assessing a legacy application or website for the first time. This can be due to a number of reasons, but the most prominent are:
- Security tools that are paranoid/badly tuned/misunderstood
- Lack of developer security awareness
- Threats and technologies have evolved since the application was designed/deployed/developed
Security Tools that are Paranoid/Badly Tuned/Misunderstood
Security testing and auditing tools, by their nature, have to be flexible and able to work in most environments and at various levels of paranoia. Because of this, if they are not configured and interpreted with the specifics of your application in mind they will often find a large number of issues, of which the majority are noise that should be ignored until the more important issues are fixed. If you have a serious, unauthenticated, SQL injection that exposes plain-text credit card and payment details, you probably shouldn't a moment's thought stressing about whether your website allows 4 or 5 failed logins before locking an account.
Lack of Developer Security Awareness
Developers are human (at least in my experience!), and have all the usual foibles of humanity. They are affected by business pressures to release first and fix bugs later, with the result that security bugs may be de-prioritized down as "no-one will find that" and so "later" never comes. Developers also are often taught about security as an addition rather than a core concept. For instance, when I was learning programming, I was first taught to construct SQL strings and verbatim webpage output and only much later to use parameterized queries and HTML encoding. As a result, even though I know better, I sometimes find myself falling into bad practices that could introduce SQL injection or cross-site scripting, as the practices that introduce these threats come more naturally to me than the secure equivalents.
Threats and Technologies have Evolved Since the Application was Designed/Deployed/Developed
To make it even harder to manage security, many legacy applications are developed in old technologies which are either unaware of security issues, have no way of dealing with them, or both. For instance, while SQL injection has been known about for around 15 years, and cross-site scripting a little less than that, some are far more recent, such as clickjacking and CSS history stealing.
When an application was developed without awareness of a threat, it is often more vulnerable to it, and when it was built on a technology that was less mature in approaching the threat remediating the issues can be far more difficult. For instance, try remediating SQL injection in a legacy ASP application by changing queries from string concatenation to parameterized queries (ADODB objects aren't exactly elegant to use!).
Dealing with issues
Once you have found issues, then comes the daunting task of prioritizing, managing, and preventing their reoccurrence. This is the part that can bring the shock, and the part that can require the most care, as this is a task in managing complexity.
The response to issues requires not only looking at what you have found previously, but also what you have to do, and where you want to go. Breaking this down:
- Understand the Past – Deal with existing issues
- Manage the Present – Remedy old issues, prevent introduction of new issues where possible
- Prepare for the Future – Expect new threats to arise
Understand the Past – Deal with Existing Issues
When dealing with security reports, it is important to always be psychologically and organizationally prepared for what you find. As already discussed, this is often unpleasant and the first reactions can lead to dangerous behaviors such as overreaction ("fire the person responsible") or disillusionment ("we couldn't possibly fix all that!"). The initial results may be frightening, but flight is not an option, so you need to fight.
To understand what you have in front of you, and to react appropriately, it is imperative that the person interpreting the results understands the tools used to develop the application; the threats surrounding the application; and the security tool and its results. If your organization is not confident in this ability, consider getting outside help or consultants (such as Neohapsis) in to explain the background and context of your findings.
Manage the present – Remedy old issues, prevent introduction of new issues where possible
Much like any software bug or defect, once you have an idea of what your overall results mean you should start making sense of them. This can be greatly aided through the use of a system (such as Neohapsis Security Manager) which can take vulnerability data from a large number of sources and track issues across time in a similar way to a bug tracker.
Issues found should then be dealt with in order of the threat they present to your application and organization. We have often observed a tendency to go for the vulnerabilities labeled as "critical" by a tool, irrespective of their meaning in the context of your business and application. A SQL injection bug in your administration interface that is only accessible by trusted users is probably a lot less serious than a logic flaw that allows users to order items and modify the price communicated and charged to zero.
Also, if required, your organization should rapidly institute training and awareness programs so that no more avoidable issues are introduced. This can be aided by integrating security testing into your QA and pre-production testing.
Prepare for the future – Expect new threats to arise
Nevertheless, even if you do everything right, and even if your developers do not introduce any avoidable vulnerabilities, new issues will probably be found as the threats evolve. To detect these, you need to regularly have security tests performed (both human and automated), keep up with the security state of the technologies in use, and have plans in place to deal with any new issues that are found.
It is not unusual to find a frightening degree of insecurity when you first bring your applications into the world of security testing, but diving back to hide is not prudent. Utilizing the right experience and tools can turn being afraid of your own shadow into being prepared for the changes to come. After all, if the cloud isn't on the horizon for your company then you are probably already immersed in it.


text:
City (11)
Neighborhood (11)
Reviewed (2)
Lunch (10)
Dinner (11)
Late Dinner (5)
Take-Out (10)
Delivery (1)
Outdoor Dining (7)
Catering (5)
Banquet Rooms (3)
Romantic (2)
Wheelchair Access (10)
American Express (10)
MasterCard (11)
Visa (11)
Carte Blanche (2)
Discover (5)
TransMedia (3)
(Restaurant, Barbeque, Mexican)
Where the taste of Texas meets the fun of Mexico! Sizzling fajitas!
(Barbeque, Mexican, Steak, Salads, Soup, Burgers)
Chiquitas is in a 100-year old house on Milford Rd. Lunches from $3.95/Dinners from $5.95. We serve...
After a long run as an upscale eatery, Brian Polcyn has reinvented the Milford space as a Mexican re...
"Southwestern, Tex-Mex cuisine and a casual, fun atmosphere with great service! Kitchen is open unti...
Tex-Mex restaurant in Greektown featuring homestyle cooking, salsa music and tequila mixes.
(American, Italian, Mexican, Seafood, Steak, Salads, Soup, Burgers)
Maples features casual and comfortable dining, open to the public. Great food, with great service, a...
The Tijuana cousins of the Mr. B's family have many of the parent company's signatures: young, frien...
Authentic Tex-Mex restaurant with views of Walled Lake from every window. Provides a lively bar and...
"One bite and you're south of the border. Enjoy outstanding dishes like Poncho's pollo compli...
"Authentic Mexican cuisine served fresh and in large portions. Weekly specials include 79-cent marga...
(American, Mexican, Pizza, Tavern Fare)
More than 30 large TVs, stadium-style tiered seating, a variety of burgers, nachos and the like.

subset: commoncrawl


text:
HOUSTON – The warm weather will continue Sunday with a slight chance of rain this afternoon, KHOU 11 News Meteorologist Mario Gomez said.
The temperature will be in the 70s most of the day with 20 percent chance of rain for some parts of the Houston area after lunchtime.
While the weather has been pleasant this weekend, it looks more and more like Houston will have a rainy Christmas holiday as front makes its way through the area late Sunday night.
Download our free HOU Weather app on your iPhone or Android featuring 12-hour forecasts, radars, conditions, coastal weather, satellite imagery and web cams. Also, look for our WeatherCaster iPad app in the App Store


text:
Robbie Stewart is in his fourth year as the head athletic trainer for football at Middle Tennessee. Stewart made his way to Murfreesboro following seven years at Clemson University.
A Titleist Performance Institute Certified Golf fitness instructor, Stewart also works with the Middle Tennessee men's and women's golf teams.
Stewart, a native of Seneca, S.C., joined the Clemson athletic program in 2001 where he assisted with football and was the primary athletic trainer for men's golf. Along with assisting the director with the daily operation of the sports medicine area, Stewart oversaw all graduate assistants while also handling the recruitment and supervision of the student athletic trainers. For two years at Clemson, Stewart also taught kinesiology to undergraduate students with a variety of majors.
Prior to his arrival at Clemson, Stewart served as the head athletic trainer at Gaffney High School in Gaffney, S.C. Stewart held that position for one year. During his brief tenure at GHS, Stewart was responsible for the prevention, evaluation, treatment, and rehabilitation of all interscholastic sports. Along with managing the training room, Stewart recruited, educated, and supervised all student athletic trainers.
Before taking the job at GHS, Stewart was an interim athletic trainer during the Tampa Bay Buccaneers mini-camp in 2001.
Stewart, who earned his master's degree from Middle Tennessee in 2000, worked as a graduate assistant in the Blue Raider sports medicine program for two years (1998 to 2000). At Middle Tennessee, Stewart worked with the women's basketball and women's soccer programs.
Certified by the National Athletic Trainers Association, Stewart earned his bachelor's degree in secondary education from Clemson in 1998. Stewart is also certified by the American Red Cross.
Stewart is married to the former Lindsay Henderson of Covington, La., and they have two sons, Griffin and Dalton.


text:
»International Service Learning
»Lilly Sustaining Fellows
»Lilly Teaching Fellows
»Lilly Vocational Scholars
About the Lilly Grant Program
»Identity and Mission at St. Olaf College
»What is Vocation?
»Lilly Program Committee
Leaders for Social Change
The Leaders for Social Change program is an opportunity for students to put their ideals into action and to develop leadership skills through internships in community organizations. Click here to download the program description.
Lilly Vocational Intern
1 year position; grant funded, recruited annually.
Application deadline: March 9, 2009
Position Summary: Lilly Vocational Intern position will provide a concrete, coordinated opportunity for a graduating senior/recent graduate (2008) to remain/return to St. Olaf for one year to hone his/her skills by working closely with the full array of vocational discernment programs with the Lilly Grant Program. The models for this position are the Americorps and Lutheran Volunteer Corps programs that engage students in a year of service as they explore their career options. In addition to contributing to the work of the Lilly Grant Program, the intern will learn by doing, gaining insights and expertise that will contribute to his/her ability to respond to a calling to serve in the non-profit sector.
For more information regarding this position and how to apply visit: https://jobs.stolaf.edu
Summer Vocational Community Internships
The Civic Engagement program and Office of Church Relations have developed a Lilly Grant program for St. Olaf students to live at Luther Seminary in St. Paul and serve at area churches or service organizations over the summer.
To read essays and reflections from summer 2007 interns click here »
Summer 2009 Application Deadline: March 19, 2009
Download application for summer 2009 »
2008 Summer Vocational Internship Recipients
Erin L. E. Anderson
Laura Nicole Glasebrook
Hannah B. Griese
David Hlebain
Tyler C. Zencka
2007 Summer Vocational Internship Recipients
To read reflections and essays from summer 2007 recipients click here »
Summer 2008 Application »
Bible Camp Stipend Recipients
2008 Recipients
Anna Coffey, Holden Village
Chris Cremons
Rainbow Trail Lutheran
Michael Crosson
Flathead Lutheran Bible Camp
Lucas Dueffert, Christikon
Cameron Field
YMCA Camp Menogyn
Briana Griffin
Camp Mennoscah
Emma Harness
Wilderness Canoe Base
Sarah Jacobson
Camp Wapogasset
Hannah Langholz, Camp Onomia
Martina Link
Rainbow Trail Lutheran
Nathan Mantey
Camp Lutherwood
Jenna Moon, Camp Onomia
Jacob Nelson
Shores of St. Andrew
Stephanie Olson
Camp Metigoshe
Mary Ellen Olson
Timber-Lee Christian Center
Elizabeth Reynolds
Sugar Creek Bible Camp
Bryan Runck, Camp Grace
Sarah Schmidt, Camp Cherith
Kathryn Thompson
Sugar Creek Bible Camp
Whitney Wallace, Camp Cherith
Micaela Wegener
Ponderosa Lodge
To read reflections and essays from summer 2008 recipients click here »
To read reflections and essays from summer 2007 recipients click here »


text:
Hours: 10am-9pm *
Get Directions
*Restaurant hours may vary
For Cyndi Lauper, blue eye shadow never went out of style. But the rest of us Read More »
This week at the movies: murder, sexcapades, and blazing fires. In other Read More »
Is the top of your coffee table bleak instead of chic? Sydne Summer from Read More »


text:
Eleanor M. RossFebruary 04,2013Eleanor M. Ross
Eleanor M. Ross, 91, of Rutland, died Feb. 2, 2013, at Rutland Regional Medical Center.
She was born in Chittenden, April 24, 1921, the daughter of Louis and Bertha (Brown) Mayo.
She graduated from Rutland High School and Rutland Business College.
Mrs. Ross was employed by Montgomery Ward Co. as a mail order clerk.
She was a member of United Methodist Church.
Survivors include four children, Nicholas of Castleton, Barry of Stratford, Conn., Thomas, Sally Goodrich, both of Rutland; a sister, Patricia Kellogg of Rutland; and two grandchildren.
She was predeceased by her husband, Francis R. Ross, in 1963 and by six siblings.
The funeral service will be held at 1 p.m. Wednesday, Feb. 6, at United Methodist Church Chapel.
There are no public calling hours.
Burial will be at a later date in Evergreen Cemetery.
Memorial contributions may be made to Foley Cancer Center, in care of Rutland Regional Medical Center, Allen Street, Rutland, VT 05701.
Arrangements are under the direction of the Clifford Funeral Home.MORE IN Obituaries0731 RH Obits Maynard paid photo flag Full Story0731 RH Obits D'Avignon paid photo no flag Full Story0731 RH Obits Wiederhold edited no photo no flag Full Story
- Most Popular
- Most Emailed
- TODAY'S WEATHER MINUTE: Rutland Herald content editor Rich Alcott shares local weather information and easily digestible news tidbits: Teddy Roosevelt makes Americans believe the poor, peace-loving, misunderstood piranha is a vicious, dangerous animal.
- RICHARD'S POOR ALMANACK: Teamsters leader Jimmy Hoffa disappears on this day in 1975, on this day in 2003, the last Volkswagen Type I, the Beetle, rolls off the assembly line in Mexico, Ambrose Bierce on the classifications of homicide.
- TODAY'S WEATHER MINUTE: Seals have figured out fish they like to eat gather in schools around turbines in offshore wind farms. But the environment is not without hazards, maintenance vessels and noise pollution.
- TOMORROW'S HEADLINES TODAY: Vermont Yankee announces final day of nuclear power generation in Vermont, storm brings floods back to Chester, Castleton town manager to resign office, chronic offender sentenced to 25 years for sexual assault.
- TODAY'S WEATHER MINUTE: Rutland Herald content editor Rich Alcott shares local weather information and easily digestible news tidbits: Archaeologists find a leather shoe in a cave in Armenia that predates the Pyramids by more than a thousand years.
- RICHARD'S POOR ALMANACK: On this day in 1932, President Hoover orders the Army to evict bonus marchers from Anacostia Flats; author Malcolm Lowry born this day, as is Jackie Kennedy and Mike Bloomfield; Stephen Crane on consuming one's own heart.


text:
Submit a file
Our awards
Link to us
RSS Feeds
Popular search phrases
:: lan
short descriptions
full descriptions
Computer Monitoring Software 11.03
Now, you can see for yourself what your employees do on their desktops during office hours and that too without being physically present in front of them. Yes, it is possible with the help of computer monitoring software. It facilitates the administrator to restrict the misuse of organization?s resources by employees, unnecessary chatting, internet surfing, access to social networking sites during working hours. Administrator comes to know about the possible security breaches if any, while invisibly monitoring varied computers at the same time. Also, this advanced utility enables the user to execute commands like Shut down, Restart, Lock, remove wallpaper, start screensaver, etc. on the monitored computers. Also, administrator can schedule online as well as offline recording of the monitored computers. Offline recording of the software is helpful when admin or manager is not available on desk. This recording is saved in AVI format and can be checked later or saved for future references as a proof. For calcula ...
Download now
Venus 3D Screensaver 1.01.5
This screensaver takes you on a journey to the beautiful Venus, the brightest natural planet object in the sky, which reaches its maximum brightness shortly before the sunrise or shortly after sunset. It often called the Morning Star or the Evening Star. Transfer yourself to the orbit of the Venus planet. Observe and explore this amazing cosmic object. Detailed space scenes in full 3D complete with relaxing music will definitely impress you.
Download now
Cubalist 3.7
Sort of a planar version of Rubik's Cube. Manipulate the lines and columns in the game field to collect colors in five groups. These groups are square zones consisting of 9 elements.
Download now
SoftAmbulance Excel Recovery 1.37
Excel Recovery is a new generation recovery tool, which has been designed to restore deleted XLS or XLSX files, created in any version of Microsoft Excel with unprecedented efficiency even if your file system is damaged and your hard drive is almost dead. Using a list of signatures associated with MS Excel format, in scans disk surface, detecting the beginnings and endings of every XLS file, resurrecting file contents and other necessary data.
Download now
Sujiva 1.0
Welcome to the world of steampunk, a vast world of steam engines, fantasy creatures, and, of course, magic. The main character is a girl named Hoshi, a member of the Order of Astral Hunters sent to the southern region of a mysterious country, "Sujiva" in search of the legendary Mighty Sujivsk. According to legend, Mighty Sujivsk can help the Order to establish its authority throughout the astral plane. Sujiva is a dangerous place where eternal n
Download now
JSKing 1.0
Download now
SoftAmbulance EFS Recovery 1.87
EFS Recovery will automatically restore EFS encrypted files and folders on any PC running any Windows version. Supports AES, 3DES, DESX encryption types. Powerful search technology detects data even when it's not represented in the file system. The only thing you have to know to get access is your original Windows account password. Preview function lets you see the exact files to be recovered, including the content of compressed archives.
Download now
Sports and Fitness Manager 2.8
An easy-to-use database and scheduler. It's perfect for coaches, fitness instructors, aerobics instructors, group exercise instructors, fitness coordinators and trainers to plan working hours so that the practice or lessons do not overlap with someone else and keep track of scheduled appointments. It'll store the information about clients and comments. The program gives you a customizable Date Navigator and comprehensive reminder.
Download now
Love2Photo - compress pictures to share 1.99
Save time,money and effort sharing your live photo.Take advantage of the BEST photo compression method on the planet. Unite your photos into highly-compressed,easy to post or e-mail,albums and rich slideshows.Feel the love from your friends when they receive these fast-loading albums 2 times faster,view and print it directly from the Web or local media with just 1 mouse click on any computer. Let people focus on your photo not the way to open it.
Download now
Falco Halotea Free 2.8
Mirolit Halotea is a unique application for sound atmosphere creation and relaxation. It was created for people who have a stressful and intense job, small children, want inner balance and want to sleep peacefully. It's well known that sounds can either stimulate a person's nervous system or calm it down. Just pick a suitable sound theme, turn on the volume, and enjoy pleasant and relaxing sounds of nature.
Download now
Battle For Survival 3 1.3
You are a U.S. Army pilot. During regular military exercises enemies suddenly appeared and attacked your plane. Thanks to your piloting skills, you managed an emergency landing and survived. Once you come to, you realize that you are on a strange, uncharted island. Suddenly zombies begin to appear around you, which not plunges you into a shock that is overcome only thanks to years of combat experience. Well, now all you can do is fend off these m
Download now
Ultra Boy 2.3
In a galaxy far, far away, on a small, friendly planet known as Verivell, life went on as usual as ominous clouds gathered. A hostile race of invaders, eager to destroy and wreak chaos gathered an army under the leadership of Dr. Crash. At any moment enemy ships will attack Verivell... Civilians are in panic, a city is in flames. Who will save this world from destruction?
Download now
Za Rulem 2.7
Soviet desktop computer simulator racing game "at the wheel." This game is very close to the original, with precisely replicated game mechanics and sound design. As a new player you get a taste of the era of the first machine. The game has been played by generations. Now you can experience this landmark game "at the wheel."
Download now
Ulgra 2.0
ULGRA! They shouted, trampling flower meadows and turning green meadows to mud. No one expected the goblins to come back so soon! Fortunately for this beautiful place on Earth, the brave hero in a red striped cloak has come to defend their land! Now we know the goblins are up to no good, we must be ruthless and crush them by all means possible! - 12 challenging, fascinating levels - Test your reflexes and wit - Nice graphics and music
Download now
Last Battle 1.5
It's nearing the end of World War III. Federation defeat seems inevitable since the Commander ship was ambushed. But we still have a chance, a small chance ... The Commander ship is not just a simple flying saucer, and we maintain nothing but the newest mobile plant for the production of military equipment. And you are the captain of this ship. Our pilots are the best in the whole federation, and they take us out of the encirclement in the safest
Download now
X Reaction Lite 1.1
XReaction Lite is an incredibly colorful and fun platformer-shooter. The game is set in the distant future, when advanced technology comes into conflict with humanity. People surrendered on space stations, and the land remained the military front. There remains a distinct advantage for artificial intelligence, with its much more powerful steel flesh. The only hope for humanity is Technology X-Reaction, the latest development of military engineeri
Download now
Russian Cosmo Fly 2.1
Fly a Russian spacecraft through the depths of a boundless universe filled with cubic structures. Your task is to crush ALL that stands in your way! Your arsenal includes the best gear: gun, rockets, lasers and super weapons with "Russian power." Fire! Slow down time! Score points! Enjoy the brilliant explosions, laser cutting, and the storm of emotions from the avalanche of machine-gun fire accompanied by great music!
Download now
Gravitation 1.7
If you ever wanted to walk on walls and ceilings, breaking the laws of gravity, now's the time. Our new game Gravitation beats sitting around smoking dope. In this game you have to work with our new hero, Gravity, which as you might have deduced has full control of gravity. The action takes place on a lifeless Planet R. Use simple methods to look for signs of life on this planet, and then complete the challenging puzzles to advance. To help you a
Download now
A-PDF Page Master 4.8.5
A-PDF Page Master is a simple, lightning-fast desktop utility program that lets you organize your PDF document Pages. Includes: 1. Page Editing: including cutting/pasting, cloning, deleting, inserting blank pages, rotating, resizing. 2. Page Arranging: including changing page order, reversing, assembling, etc..3. Page merging and extracting: including combining PDF page, extracting PDF page etc.
Download now
Tipard Mac iPhone SMS Transfer 7.0.22
Tipard Mac iPhone SMS Transfer can export all your iPhone SMS, MMS(multimedia message) and Contacts to Mac for file security. Also, you can backup all SMS, MMS and Contacts as database file on Mac, and delete unwanted messages in the backup file. Plus, it can support the newest iOS 7, iTunes 11, and English/French/German/Japanese four interface languages. Besides, it now support iPhone 5s/iPhone 5c, iPhone 5, iPad mini 2, iPad Air, iPad 4, iPad mini, iPod touch 5 and iPod nano 7, etc. key functions 1.Copy iPhone SMS files to local disk Backup iPhone SMS/MMS/Contacts information to local Mac and check out in the program anytime without connecting to the device. 2.Backup current SMS on Mac You can backup all the SMS/MMS/Contacts on Mac as database file for further use. 3.Delete the SMS from the backup files You are free to delete any SMS/MMS/Contacts information which you do not need from the backup files. 4.Transfer all your Contacts to Mac You are allowed to freely transfer your iPhone ...
Download now
Music Editor Free 2014 9.5.7
This powerful free tool allows you edit your music files like editing text files! It allows you to: Display a waveform window of an music file and apply zooming; Record new audio file from a microphone, VCR, cassette player or another input device; Visually edit an music file (cut, copy, delete silence, paste from file, mix); Apply different effects (Amplify, Delay, Equalizer, Fade, Flanger, Invert, Normalize, Breath reduce, Reverse).
Download now
Equipment Rental Tracker Plus 3.1.1
Equipment Rental Tracker Plus is easy-to-use inventory or equipment rental management software with which you can: * Keep track of how much inventory you have on hand, when items were rented, purchased or sold and print reports for printing or exporting to a spreadsheet program. * Track remaining inventory, reorder points and create Purchase Orders. * Easily create Invoices, packing slips, shipping labels and inventory reports. * Track all of your income and expenses. * Create account registers for any number of accounts. * Prints checks on your current blank checks. * Organize all your invoices, tasks, contacts, and even appointments with this inventory accounting software suite. * Perfect for durable medical equipment rentals, small manufacturing firms, etc. ***** Equipment Rental Tracker Plus includes: * Inventory Tracker - Records rentals, purchases and sales and generates detailed reports including a Rental Status Report. * Invoice Creator - Create Invoices from products in Inventory Tracker and cu ...
Download now
Power Spy Software 2014 11.38
Power Spy software secrectly logs Facebook use, keystrokes, website visits, emails, chats and IMs: Skype, Yahoo Messenger and more. Takes screen snapshots at every X seconds like a surveillance camera. Displays exact activities, like Facebook, PC games, online searches & shopping, file transfers and webmails. You can receive reports remotely via emails or ftp. Perfect for monitoring kids, spouse and employees.
Download now
SpyKing PC Spy 2014 5.25
SpyKing PC Spy secretly logs all Facebook use, keystrokes, chats & IMs, emails, web sites, user names, passwords, web cam images, apps, microphone, clipboard and more. It supports Skype, Yahoo Messenger and others. It also takes screenshots like a surveillance camera. You can receive reports remotely via email or ftp as often as you wish. Open these reports on another PC or on your cell phone browser.
Download now
WPS Office 2014 Beta 2 126.96.36.19946
Free office suite provided by WPS Office(formerly Kingsoft Office) is a practical alternative to expensive office software. WPS Office lets you view, create and share office documents that are fully compatible with MS Office. The newly released WPS Office 2014 marks a major milestone for the WPS Office project. Along with the new name and new logo, WPS Office brings you better product. WPS Office 2014 adopts a new installation wizard, new flash screens and many other new features. It now supports Chinese, English and French language packs (more languages will be added in later updates) and spell check for multiple languages. Its unique UI switch feature brings you better interface experience, while its specialized paragraph tool, drag-and-drop table tool and tabbed feature make your document editing easier.Its new file roaming feature allows you view and edit your documents on any devices with continuous editing experience. WPS Office Highlights: 1.Supports language switch between Chinese, English and French ...
Download now
MP3 & Audio
Home & Desktop
Multimedia & Design
Software Developer
Web Developer
Another tags
Page 1 of 10
Legal disclaimer
Privacy policy
© 2004-2014 IT Shareware


text:
APEX — About 108 acres of rural land off Green Level West Road will become a high-priced housing development, despite protests from neighbors.
The Apex Town Council agreed to rezone the property Tuesday.
Some residents of nearby Castleberry Road said they worried about increased density, loss of wildlife and potential effects on Castlebury Lake and Jordan Lake. About 25 people who opposed the project showed up to Tuesdays public hearing in green shirts with the words Castleberry Rural Resident across the front.
This part of extreme western Wake County has about one home per acre. The new zoning for the high-end development will allow multiple homes per acre.
Its not consistent with our neighborhood, said Tom Kendig. We have a rural community. Yet they want to bring intensive development.
But residents concerns didnt dissuade the council, which voted unanimously to rezone the property from rural residential to low-density conditional.
Developer Standard Pacific of the Carolinas agreed to conditions that address density and infrastructure. The minimum lot size will be 10,000 square feet. The developer will: help pay for a regional sewage pump station; install sewer lines and a smaller pump station in the Castleberry area; and pay for repairs and a study of the Castlebury Lake dam.
Standard Pacific will put in about $2 million to $3 million in infrastructure, said Tom Beebe, director of land acquisition for the company.
Of the 108 acres on the Wake County side of the development seven are in Chatham County only about 75 acres is developable, Beebe said. About 25 to 30 acres will be set aside for wetlands, buffers, roads and open space.
The subdivision will have about 135 homes with an average price of about $530,000, he said. Home sizes will range from 3,100 square feet to 5,000 square feet.
Its going to have lots of space, beautiful homes, and were going to protect that lake, Beebe said.
Longtime Castleberry Road resident Patti Gamin is among those selling her property to Standard Pacific. She said the housing development is better than the sewage treatment plant that was once proposed for the area.
Im as big a tree hugger as they are, Gamin said of her neighbors opposing the project. But, you have to be realistic. With N.C. 540 and with (Research Triangle Park). that whole area is hot.
The development will help meet a housing need in Apex, said Councilman Gene Schulze.
He said he has talked to people who have moved out of Apex because they couldnt find larger homes to meet the needs of their growing families.
You are not going to have no impact, Schulze said. But its going to have a reasonable impact.
Even with the lot size restrictions, Kendig still doesnt think the development is a good fit for his neighborhood, which includes a vineyard.
He wishes Apex would stick to its land-use plan, which calls for keeping the area rural.
We count on the land-use plan, Kendig said. Its what we looked at when we decided to buy our homes.
Ramos: 919-460-2609


text:
Jeffers® Bone Keyring Clips
Anodized aluminum, bone-shaped, carabiner-style keyring clips.
Bone "opens" in like a spring carabiner.*
Small has 1-800-JEFFERS stamped on one side.
Large has phone # stamped on one side and web address on the other.
Approx. Sizes: 3" or 3¼"
Colors may vary.
Made in China
* Light Duty Clips not made for climbing or securing.
Customers Ratings and Reviews
|Overall Rating :
Write an online review and share your thoughts with other customers
Sort Reviews :
Newest |
Oldest |
Highest Rating |
Lowest Rating
|Read More Reviews


text:
At Golden Gardens Park, you've got the sun and your fun -- all wrapped up in your smart phone.
Sunbathers like Katie will run out of battery power long before the sun goes down.
To make sure Katie keeps her music playing -- there's the Goal Zero portable solar panel.
The company claims the product will charge your phone if the panels are facing direct sunlight.
I hooked up Katie's iPhone 4 and we got a charge.
The solar panel may be cool. But this three-wheel car is awesome.
This is Kurt Schmidt's baby. But his iPhone 4 is in need of fill up.
The charge goes about one percent per minute.
Finally we find Steve Borgford, an American who's waiting to have a picnic with his Russian friends who also sport the red, white and blue.
But when it comes to charging his phone on the beach it's nothing but nyet.
With the Goal Zero -- you can use a USB connector -- a 12 volt connector, but you must supply the cord to your specific device.
The magical sound of it getting a charge is the sound of freedom.


text:
'The Office' Finale: A Footnote
The NBC comedy capitalized on its "mockumentary" style, one last time.
Per comedic convention, "The Office" ended with a wedding.
Angela and Dwight's wedding was as delightfully bizarre as one would expect – from the "traditional" kidnapping of the bride for the bachelor party, to the vows said in the couples' graves "as a reminder that this is the only escape from what they are about to do."
[WATCH: The New Network Shows of Fall 2013]
The wedding motif also allowed "The Office" to twist one of its greatest tropes: after years of tormenting Dwight, as his "best mensch" (a role he would ultimately give to Michael Scott, who makes a surprise appearance) Jim uses his ingenuity to celebrate Dwight and his union with Angela, rather than torture him.
Wedding shenanigans aside, "The Office" finale also benefited from one of its most influential legacies: the "mockumentary." Inspired by the dryer, sharper British series, The Office will be remembered for popularizing the fake documentary format, a framing device now being replicated on shows like "Parks and Recreation" and "Modern Family."
For nine seasons, cameras captured not only the amusing banality (an oxymoron, I know) of life at Dunder Mifflin, but also allowed each character to comment on the situational antics from his or her point of view. It's a device that enriched both the construction of each episode and the development of its characters.
"The Office" succumbed to a mid-series slump, particularly after the departure of Michael Scott and its efforts to grow storylines outside the Dunder Mifflin offices. But it injected fresh life into its final stretch by further twisting the mockumentary concept. After years of its characters subtly acknowledging their fictional filmmakers with a head nod or a smirk, "The Office" tore through the fourth wall completely, particularly with the cast's realization just how much of their lives had been taped and Pam's flirtation with one of the cameramen.
[PHOTOS: The 2013 Summer Blockbuster Movie Guide]
(As an aside, the storyline of Jim and Pam's marriage troubles also made later episodes more compelling than "The Office" had been in seasons. Nothing raises the stakes on a show like putting its emotional core in jeopardy.)
It's fitting than that "The Office" capitalized on this in its last episode. Finales always present a challenge for comedies: how do you honor a show's history without sinking into outright nostalgia. They tend to be clumsy, like the final "Seinfeld" trial sequence, or outright chaotic, like the conclusion of "30 Rock."
"The Office" handled its finale as well as it could have, shaping it around a reunion being filmed for the "documentary's" DVD special (which Jim and Pam conveniently convinced the producers to host the weekend of the wedding). Taking us a year into the future, it showed some of the characters have already moved on – some (like Stan, living the good retirement life in Florida) better than others (like Toby, who suffers from full on depression). This, at least partially, addressed an existential anxiety within any TV show's conclusion: what will the characters do without an audience? Some will change and some will stay exactly the same.
The "reunion special" (such a staple of reality TV now that Bravo often gives them multiple episodes) also allowed a forum for the characters to resolve some of their concerns: old (Erin finally finds her birth parents) and relatively new (Pam and Jim discuss staying in Scranton at the cost of Jim's sports agent career – a decision reversed by episode's end, anyway).
[PHOTOS: The 66th Cannes Film Festival]
Finally, it gave the characters a chance to wax on about what having their lives taped meant. Their conclusions were sentimental to the point of cheesiness, but in an era of reality television, far more cynical than the fake "The Office" could ever be, their earnestness was nevertheless endearing.
It was also an appropriately meta-way for the real show to stake out its own contributions to Thursday nights.
At least some viewers will agree with its characters' guesses at what "The Office" – really or fake – ultimately meant.


text:
Quote:Here is a pic of the pretty Sphinx. It is the siren song that I fell for when I was looking for my first AP mount. One day this will have a Celestron controller, but it will not be used for any AP until then.
Quote:funny thing is i know someone with an SXP (starbook ten) and he thinks the declination jumps are still there!


text:
Sign up to receive information about new books, author events, and special offers.
A thin, sour rain is falling on the orchard outside my window, but I thank God for it. In these lean times, it is enough to warrant a fire in my chamber, a small blaze to warm my bones as I scratch out these lines in the gray light of a chill November day. My daughter-in-law Marie, who governs this household, is mean with firewood. The manor is mine, and there would be a decent, if not lavish living to be had for us on these lands if there were a young man or two to work them. But since my son Rob died last year of the bloody flux, a kind of weariness has settled upon me, robbing
Read the full excerpt
"This book makes everyone's favorite outlaw a lot more interesting; Outlaw is as fast-paced as a charging war-horse. Superb!" –Nelson Demille "An old-fashioned romp… true to the Hood tradition." –The Times (UK) "Angus Donald tells the story through the words of young Alan Dale, but this is a darker, more complex Robin then we tend to remember...A lively and enjoyable book." –The Daily Mail (UK) "Donald's debut...aims to avoid the sentimentality of previos version of the Robin Hood legend...an exciting and credible historical thriller." –Morning Star (UK) "A near perfect book. Gory, exciting, and an insightful interpretation of the Robin Hood mythology. Highly recommended." –The Bookbag (UK)
Angus Donald was born in China in 1965 and educated at Marlborough College and Edinburgh University. He has worked as a fruit-picker in Greece, a waiter in New York and as an anthropologist studying magic and witchcraft in Indonesia. For the past 15 years, he has been a journalist in Hong Kong, India, Afghanistan and London.
Angus Donald


text:
Lisa Trigg
The Tribune-Star
Two Terre Haute hospitals have been ranked for patient safety by an independent organization that assesses safety, quality and affordability of healthcare for Americans.
Terre Haute Regional Hospital was recognized with an "A" Hospital Safety Score by The Leapfrog Group. The score was awarded based on information reported for July 2009 through December 2011.
Union Hospital received a "C" Hospital Safety Score for the same time period, scoring better than average or among the best performing hospitals on 12 of 26 national measures of safety.
The Hospital Safety Scores are based on preventable medical errors, injuries, accidents and infections reported by the hospitals.
Regional Hospital has also received an "A" grade on two prior Hospital Safety Scores.
"It gives us a pulse check on how we're doing as an organization," said Sonya Rebeck, a registered nurse and Regional's manager of quality and medical staff services, referring to the score. "Transparency is the name of the game in healthcare, so anything we can do to promote patient safety is the way we want to go."
The "average" score received by Union Hospital, however, does not seem appropriate to Union's chief medical officer Dr. John Bolinger, who notes that the data used is more than a year old.
"When I look at Union Hospital, I don't consider us average. I see us above average," Dr. Bolinger said. "If we look at real time data, I'm really proud of where we are."
The score measures outcomes such as foreign objects retained after surgery, or air bubbes trapped in a blood vessel. Both hospitals reported zero incidents in those two areas.
However, both hospitals scored low in the areas of computerized physician order entry. But both have significantly upgraded their technology since the self-reported data was analyzed by the Leapfrog panel of medical experts.
Regional Hospital now has computerized order entry in the emergency room, Rebeck said, and it will be evolving with the remainder of the hospital physicians. It is important for legibility and to reduce errors, she said, but it does take training on the system.
"It's going to be a journey, not something we can do overnight," Rebeck said.
At Union Hospital, a computerized order entry system goes live in mid July. Training for physicians and staff begins June 1, Dr. Bolinger said.
Union is an innovator in using technology in patient care and assessment, he said, pointing out that the DaVinci surgery system is cutting-edge non-invasive technology while other distance technology allows a patients at associated clinics that are dozens of miles away from the hospital to be assessed for treatment by a Union specialist faster than if the patient had to travel to the hospital.
Both also scored low in the measure of intensive care unit physician staffing.
"Staffing intensivists in an intensive care unit, that's a very, very large expense for any hospital," said Dr. Bolinger, "and most hospitals our size can't afford to do it."
Rebeck said Regional Hospital is also working on its staffing of critical care physicians.
The grading system is intended to give healthcare consumers the opportunity to compare facilities, and also measures the management structures and procedures that a hospital has in place to protect its patients. Those measures include evaluation of hand hygiene, receiving antibiotics within an hour prior to surgery, and receiving the correct antibiotic. Both Union and Regional ranked among the best performing hospitals in those areas.
Dr. Bolinger said that the Leapfrog ranking is one of multiple ways of comparing hospitals using a variety of parameters and scoring systems. For instance, Consumer Reports magazine ranked Union Hospital as second best hospital in the state for patient safety last year.
"To me, the gold standard for comparing hospitals is what your local physician feels about the hospital and its safety and staff," Dr. Bolinger said. "We don't get hung up on grades and scores. We continue to immerse ourselves in innovation and safety."
To see the scores of both hospitals, as well as other hospitals around the state, go online to www.HospitalSafetyScore.org.
Reporter Lisa Trigg can be reached at 812-231-4254 or email@example.com. Follow her on Twitter @TribStarLisa.


text:
Divorce decrees
Ryan David Pratt vs. Melissa Lynn Pratt, incompatibility.
Jolynn Durrett vs. Stacey Durrett, incompatibility.
Civil suits
Bank of America vs. Guy Q. Legrand, et al., foreclosure.
Kenneth Haislip, et al. vs. Stason Blane, petition for judgment, excess of $10,000.
Midland Funding vs. Tamara Sicher, petition for judgment, $6,206.28.
Small claims
Tisher Rentals vs. Charlene Jones, $577.50, Jan. 23.
Initial appearance
TYLER, Garrett Blake. Kidnapping; domestic abuse-assault and battery. Sounding docket Jan. 25. Bond $1,000.
DUI arrest
BROWN, Christy Renee. Driving under the influence; resisting an officer; leaving the scene of accident. City arrest.
Muskogee police report
602 Hamilton St., Sunday-Monday, property removed from vehicle.
952 S. 32nd St., Monday, property removed from residence.
3903 Border Ave., Monday-Tuesday, property removed from vehicle.
Unspecified address, May 1-Sept. 1, juvenile.
Unspecified address, Saturday-Monday, juvenile.
1639 Avondale St., Jan. 3-Monday, property removed from residence.
3000 N. 32nd St., Sunday, credit card used by someone other than account holder.
2300 E. Shawnee Bypass, Monday, wallet.
3706 County Club Road, September 1-30, identity.
2410 Chandler Road, Tuesday, credit card used by someone other than account holder.
Drug Warehouse, 3202 W. Okmulgee Ave., Tuesday, prescription later determined to be altered.
Riverside Autoplex, 1711 W. Shawnee Bypass, Nov. 30, bogus check.


text:
By BRAD KELLAR
Herald-Banner Staff
The Greenville City Council is scheduled Tuesday to consider permitting one of the city's largest automobile dealerships to move to a new home.
Britain Chevrolet is seeking a zoning change and a conditional use permit, to allow the company to open at the intersection of the Interstate 30 service road and the still under construction Monty Stratton Parkway.
Public hearings are scheduled prior to the Council taking votes on the measures during the regular session agenda, starting at 6 p.m. Tuesday in the Municipal Building, 2821 Washington Street. A work session is set for 5 p.m. Tuesday.
The Planning and Zoning Commission voted earlier this month to recommend the changes to the Council.
Hillary Vonahsen, representing Britain Chevrolet, is seeking a change in zoning from agriculture and commercial to highway retail for the tract at the southeast corner of Monty Stratton Parkway and Interstate 30, as well as a conditional use permit in order to be able to operate a new automobile sales facility.
Britain Chevrolet currently operates a dealership at 4715 Wesley Street.
In a memo to the Council, Chief Building Official Steve Methven said this is just the first step in the process of developing the site.
"During the platting phase, the applicant will subdivide off an approximately seven acre piece of property in order to accommodate the proposed development," Methven said. "During the platting phase, the applicant will work with City staff to provide a master concept plan of the larger tract, as required by the City's Subdivision Regulations."
One major hurdle which needs to be addressed is the lack of water and sewer access to the property, as the nearest connections are almost 2,000 feet away.
Last month, the Council agreed to allocate funds to pay for designs for water line improvements and a lift station along the parkway, which is being built between Interstate 30 and Paris Junior College.
Director of Public Works Massoud Ebrahim said there is a need for approximately 6,300 linear feet of 12-inch water distribution main line, to provide water to any development which may intend to locate in the region, as well as a 1 million gallon per day regional sanitary sewer lift station.
In 1998, Greenville annexed thousands of acres of land north and south of the interstate corridor and around Monty Stratton.


text:
Ashley Judd and IndyCar driver Dario Franchitti are calling it quits after more than a 11 years of marriage.
The decision was mutual, the couple said in an exclusive statement to People magazine late Tuesday. "We'll always be family and continue to cherish our relationship based on the special love, integrity, and respect we have always enjoyed," they said.


text: 86 Months of the Year Stickers - Current Catalog Shopping Cart: 0 items Sign up for exclusive email promotions Checks Address Labels Greeting Cards Holidays and Events Gift Ideas Personalized Gifts For Your Home Stationery Personalized Stationery Calendars Home Office Wrapping Paper Photo Gift Center Dollar Deals Sale Hot Deals Deals Under $5 Holiday Sale Greeting Cards Sale For Your Home Sale Home Office Sale Wrapping Paper Sale Gifts Sale Christmas Sale Home > Sale > Deals Under $5 86 Months of the Year Stickers Sale! Save 60% The name of each month is crafted in delightful hand-drawn letters and includes smaller seasonal stickers that correspond with each monthValentine's Day stickers with February, back-to-school stickers with September, and so on. The largest sticker in this fun, fanciful set is about 1 1/2" x 5". Printed in the USA on acid-/lignin-free stockperfect for scrapbooking!. Set of 86 CHOKING HAZARD Small parts.Keep out of reach of children under 3 years. Product Code Product Description Qty Price 608423 86 Months of the Year Stickers Was: $3.99Now: $1.59You saved: $2.40 NOTE: To avoid errors, please do not refresh this page or hit the back button while we process your order. Halloween CountrySticker Value Pack Was: $3.99Now: $2.99 Year-RoundSticker Value Pack Was: $9.99Now: $4.99 Year-Round HolidaysSticker Value Pack Was: $7.99Now: $4.99 58 Birds, Butterflies,and Flowers Stickers $2.98 Home|Featured Merchants|Tips|Contact Us|Privacy & Security|Site Map|1-800-848-2848|Request Free Catalog © 1998, 2014 Current USA, Inc.


text:
|rule of thumb
|a. a rough and practical approach, based on experience, rather than a scientific or precise one based on theory
|b. (as modifier): a rule-of-thumb decision
A practical principle that comes from the wisdom of experience and is usually but not always valid: "When playing baseball, a good rule of thumb is to put your best hitter fourth in the batting order."
rule of thumb
A rough and useful principle or method, based on experience rather than precisely accurate measures. For example, His work with the youth group is largely by rule of thumb. This expression alludes to making rough estimates of measurements by using one's thumb. [Second half of 1600s]


text:
A fallen tree branch blocks Herengracht canal in Amsterdam, Monday, Oct. 28, 2013. A major storm with hurricane-force gusts lashed southern Britain, the Netherlands and parts of France on Monday, knocking down trees, flooding low areas and causing travel chaos. Dutch citizens were warned against riding their bicycles because of the high winds. Amsterdam police said a woman was killed when a tree fell on her in the city and advised people to stay indoors.
Margriet Faber / AP


text:
Eagle+ digital subscriptions | E-Eagle | Manage Delivery
Complete Forecast
Amazing displays such as this diorama of an Indy Frontenac Ford about to have its engine pulled in a fully equipped garage help bring automotive history back to life vividly in the Smith Collection Museum of Speed in Lincoln, Nebr.
Link to image
| Buy this photo
Mike Berry / The Wichita Eagle
The big blue bus that hauled 56 gearheads to Lincoln, Nebr., and back home in one long, but entertaining road trip.
Looking true-to-form, this massive machine is a tribute to the French-built 1931 Buciali automobile, but is powered by a modern turbocharged Chevy 350 V-8 engine. It served as part of the backdrop for the tour group's luncheon.
Billed as `Edsel Ford's First Hot Rod,' this rare boat-tailed speedster reportedly was built as an engineering experiment in 1912. The car was fitted with a rare 6-cylinder engine despite Henry Ford's hatred of that engine design.
With David Pearson at the wheel of the Wood Brothers' potent Mercury stock car, the #21 machine racked up an impressive series of victories in NASCAR competition from 1976-'79.
Not every artifact was automotive related. This diesel-powered straight-8 Packard flathead was installed in a plane that set the world record for unrefueled endurance flight, staying aloft for 84 hours and 33 minutes.
The third floor of the museum features a wide area of restored pedal cars and tin toys. Here, a carousel has been designed to show off miniature racing pedal cars.
A massive 1930 Model J Duesenberg could boast of a top speed of 116 mph, thanks to its twin-carb inline 8-cylinder engine. It was among the most expensive luxury cars produced in the United States during its heyday.
Here's the tour group shortly after arriving at the museum, enjoying a lunch provided by the Speedway Museum, surrounded by vintage automobiles.
A landmark vehicle if there ever was one: this is the five millionth Model T Ford to roll off the assembly line. The car, built on May 28, 1921, was thought to be lost forever, but was found in 1992 and, following some minor repairs, was polished up and eventually put on display.
Some of the racers memorialized didn't rely on actual engines, but gravity, for their motive power. This trio of Soap Box Derby cars demonstrates how creative their designers were. Note the board track.
Hot Rodder Rocky Burris loved all the old car movie posters on exhibit, especially the one above him, since `Hot Rod Gang' premiered in Wichita. He found a series of black and white photos documenting the gala event online and wasted no time buying them for his memorabilia collection.
Duane Saum, expert Wichita engine builder, ponders a massive Miller 16 Indy car 16-cylinder engine in one of the richly detailed racing displays at the Speedway Motors Museum.
Robin Spurrier, left, and Dick Price check out the extensive collection of vintage automobile hood emblems and Motor Meters.
Three generations of round-track racers are displayed on the bricks of a garage paddock inside the main floor of the museum.
Joyce Smith, `Speedy Bill's' late wife, was fascinated with taxi cabs. This little Metropolitan taxi would have been perfect for a big city ride, but probably couldn't have handled more than a single fare at a time.
Tucked in the drag racing display of the Museum of American Speed is Tony Nancy's radical rear-engined, streamlined dragster. Powered by a supercharged Plymouth engine, the sleek car featured a rear wing that helped provide downforce over the huge, enclosed rear slicks.
Inscribed over the entry of the Smith Collection Museum of American Speed is its basic mission, to honor those who `lived, loved and had the passion for speed.'
At the opposite end of the pedal car spectrum is this diorama of `barn find' specimens in their natural habitat. The attention to detail in these scenes is just breathtaking.
Another bit of Kansas racing history enshrined in the museum is the #48 jalopy campaigned by Salina's Jack Petty, back in the days when racers did battle on fairgrounds dirt tracks all across the state. Jack still lives in Salina and enjoys both vintage and racing cars.
Another ultra-rare power plant: Chevrolet's first V-8 engine. And no, it was not produced in 1955, it was built way back in 1918.
There are pedal cars and then there is the `Cadillac of pedal cars,' seen here in a specially built wooden case, complete with an ornate lighted chandalier.
Larry Wolfe checks out the `Sweet Sixteen' powerplant in an area devoted to exotic engines. This particular configuration was achieved by welding two small block Chevy V-8's together, nose-to-tail. It must have produced a wild exhaust note.
Cadillac's entry in the world of endurance racing earned a spot of honor on a banked section of track at the museum. The car competed in the 24 hours of Le Mans, at the 12 hours of Sebring and the Grand Prix of Mosport.
The engine room of the museum is devoted to rare automobile power plants, both stock and racing, such as the classic Chrysler Hemi in the foreground. These engines are awaiting rebuilding and are sometimes referred to by staff as the `ladies in waiting.'
Ever hear of a Studebaker Indy car engine? Neither had most of those on the tour of the Smith Collection, but here was irrefutable proof: a double-overhead cam V-8 racing engine in exploded view, complete with Studebaker emblems on the cam covers.
Joyce Wilson also collected hundreds of vintage lunch boxes during her lifetime; one stairwell of the museum provides the perfect spot to display them to visitors.
Wichita hot rodder/artist Michael Behrendt scans a wall display filled with tin toys and model cars at the museum. The collection not only contains almost every item a hobbyist could hope to see, but they are all in incredible condition and beautifully displayed.
Wichitan Gary LeFever donated his hand-built twin-engine Model T racer to the museum and was proud to drive the tandem-motored machine into the building himself.
One of the stranger power plants waiting in the museum's engine room was this tiny steam-powered V-4 engine sponsored by Howard Hughes. The Speedway Museum has one of the largest collections of automobile engines in the world.
Visitors to the Smith Collection are greeted by one of Arie Luyendyk's Indy 500 race cars mounted overhead, just inside the entrance to the 150,000 square foot, three-story museum.
A section of board track fitted with metal rails illustrates how early gas-powered model cars were raced competitively, with each car fitted with a set of rollers that fit over the rails. Note the chicken wire safety fence.
John Belford snaps a reference photo of an unusual aluminum trike in the toy display on the third floor of the museum. He had bought an identical three-wheeler just a few weeks before and plans to restore it for his collection.
Related story: A road trip to remember


text:
Decorative Hardware
Satin Nickel Dog Bone Pull
Product Details:
|Available Sizes:
|96 mm (3 25/32") center
|Order Code:
Larger view
Larger views
Larger views
Dog Bone Collection
Satin Nickel Dog Bone Pull (3024)
You can find KraftMaid at many retailers, but our offering is a bit different at each one. Please select your shopping preference from one of the options below so that we can present you with the options that are most relevant to you. Don't worry, you can always switch options later.
|Available Sizes:
|96 mm (3 25/32") center
|Order Code: