text:
Bruce Schneier | ||||||||||||
Schneier on SecurityA blog covering security and security technology. « Using Security Arguments to Further Agenda | Main | Oracle's Password Hashing » November 3, 2005 The Security of RFID PassportsMy fifth column for Wired: The State Department has done a great job addressing specific security and privacy concerns, but its lack of technical skills is hurting it. The collision-avoidance ID is just one example of where, apparently, the State Department didn't have enough of the expertise it needed to do this right. My previous entries on RFID passports are here, here, and here. Posted on November 3, 2005 at 8:30 AM • 73 Comments To receive these entries once a month by e-mail, sign up for the Crypto-Gram Newsletter. CommentsRoy • November 3, 2005 9:37 AM Bruce, you're going soft on us! At the risk of sounding paranoid (or maybe "paranoid enough"), I have to believe that the reason for the cleartext GUID is exactly what you suspected in your first 'here'. It's not a mistake, but a deliberate design decision. Recall that the public commentary ran 98% against RFID deployment, yet the State Department presses on. These guys know exactly what they're doing, and what they're doing is tracker-tagging Americans. josh • November 3, 2005 10:47 AM Bruce, a comment somebody left on your Wired article raises an important point. If the passport has to be optically scanned to get a key needed to decrypt data on the RFID chip, why not just store the data in a bar code? What function does the RFID chip serve, other than obscurity? Guillaume • November 3, 2005 10:48 AM Simple question: as there is already the need of optical reading, why not scrap RFID altogether and just use optical reading ? bill • November 3, 2005 11:01 AM What happens when I locate the RFID chip in my passport and hit it a few times with a hammer? Will I be denied reentry to the US? Will I be subject to increased scutiny? Or will they just wave me through based on the printed content of my passport? (PS Should I ask less questions?) Michael Ash • November 3, 2005 12:12 PM @josh The purpose of the RFID chip over a simple barcode is probably to be able to store more data. I seem to recall that there are plans to store a bunch of biometric stuff in the RFID chip, including a complete digital version of the ID photo. A barcode large enough to hold the data they want, even a 2D barcode, would probably be impractically large. John Beale • November 3, 2005 12:34 PM Hmmm....so what exactly happens when you get your passport stolen? What information is on these tags? Obviously a needed upgrade but if these things can be replicated I don't want 50 of me running around the world... ggrrr • November 3, 2005 1:37 PM > Simple question: as there is already the need of optical reading, why not scrap RFID altogether Because then people can't read the info on your passport from a distance without you knowing it. greg • November 3, 2005 1:58 PM The news this morning said that NZ (i live in NZ) is now going to issue passports with RFID chips, in order to "comply" with the US and other contries passport standards. There has been little mention of whats stored or of any privacy messures taken. I think i'm gunna get a nice metal wallet for my passport. Then i know that only airport staff/computers are getting the info. But I'm shifting to the EU soon and its common pratice to take a passport for ID at many hotels... How much info are they getting, is this info being up on the chip? Unfortunatly i can't see that there is much i can do about it. Other than realize that someone somewhere can probably get lots of info on me if they wanted too. But i can't imagian many ppl want to. Ralph Broom • November 3, 2005 2:18 PM @Michael Ash, If barcode size is an issue, why not a full page of machine-readable code? The reverse of the human-readable photo-page sounds like a nice candidate. There should be substantial cost-savings of a sheet of paper over an RFID. Adam • November 3, 2005 3:06 PM It seems to me that the only plausible reason for RFID chips, given the security measures in place (optical scanning) must be tracking. If they're willing to optically scan the passport but still want the RFID chips, what other reason could they POSSIBLY have? George Wade • November 3, 2005 3:06 PM Many good points, especially that about the State Dept working on the design behind closed doors. The article helped me see what is going The point about 'Behind closed doors' may be as much about who gets what contracts, as anything. In open discussion a better design can be hammered out independently of lobbying or political favourites. Any design needs to be made flexible for the future, rather than locked in for the benefit of contractor and friends. I do some nutrition and mind training: as in USANA nutritionals and Mind Mapping. Whenever I come across doctors; dentists; education authorities working in secret: the harm done can equal any good. In the case of mercury toxicity from dental fillings; some But Governor Swartzenegger is taking useful steps with DAN! to turn the tide in California. (Defeat Autism Now!) Only the tide is much wider and deeper than autism alone. Ref: CDC surveys of mental health... We need to break down many doors and listen responsibly: then insist that the public does have a viewpoint that must not be ignored. Well, enjoy the weather; enjoy the day. George Wade Ignoring for a moment the RFID GUID issues, I have two questions: Don't Faraday cages only work when connected to a ground? If it's in your pocket or purse, where's the ground? Am I off-base here? If the barcode is optically scanned by a reader, can't it be optically re-created and scanned from security cameras at the various places you have to show your passport? Just honestly asking--I don't know. Seems to me a magnetic stripe could do all of this with a whole lot less hassle. _Arthur • November 3, 2005 3:57 PM As most other, I fail to see the use of a RFID+Optical reader You can even fool optical readers by gluing a photocopy of the other passport bar code over the first passport; don't forget to remove the glu-sticked piece of paper before handing the passport to the nice custom officer, who is watching his screen, anyways. Roy Owens • November 3, 2005 4:11 PM Maybe the idea is to con Congress into sticking the taxpayers with the bill for an infrastructure to serve the burgeoning espionage-for-hire industry. The users need only to supply their own interrogators and they can track people very cheaply without having spent a cent on the infrastructure themselves. Reader • November 3, 2005 4:11 PM The "radio shield" better work. Imagine what could be done simply by knowing how many U.S. passport holders pass by a certain spot (airports, etc.) on any given day in any location abroad. Regardless of whether you can read the personal info, isn't there real risk to remote (69ft+) monitoring of who is congregating or passing by a particular place? Cyphrpunk • November 3, 2005 4:19 PM I don't understand this supposed threat that is discussed in the Wired article. The chip is still blocked while the cover is closed, right? So the problem is, if you open your passport, an unauthorized reader could find some kind of chip number. This wouldn't reveal any information about you, your name, your identity, just a chip number. Then if you opened your passport somewhere else, someone there could see the same chip number. BFD! That is such a minor issue that it is hardly worth mentioning. I can't conceive of a way that this represents an actual threat to a passport holder. Mr. Tari • November 3, 2005 4:43 PM I believe that in the end you are correct to raise these issues, however, do your self a favor and check a few sources prior to printing your opinions. First, In checking out the article on DefCon , you stated that a tag was read at 69 feet. While this may be true (I believe it), in passports the U.S. government will NOT use Active tags. Here is a good place to insert "one size does not fit all." Each type of tags (and yes there are many protocols and frequencies) have different strengths. An active tag should have the range of several hunderd feet (i've seen some that go "miles"). A the forefront of technology, passive tags max out at a range of 20 to 30 feet in pratical application. Yes, Technology Will Get Better with Time. And, yes some vendors claim to read tags at 100m now. but read the fine print. that 100m is in free space. We don't live in free space (At least I'm here on the ground!). goe • November 3, 2005 4:57 PM To ac: A faraday cage need not be earthed to work properly. An electric/electromagnetic field (but not static/low frequency magnetic field) is shielded by the cage due to field physics. The problem with RFID is that powering the circuitry in the RFID chips is done using relative low frequency (electro-)magnetic fields (about 150-300kHz), the so called magnetic near field H-component. This allows scan distances of up to 25-30 meters with a relative small field power of ca. 10 watts (at the senders location). Mfg. Goe Bruce Schneier • November 3, 2005 5:22 PM "Bruce, you're going soft on us! At the risk of sounding paranoid (or maybe "paranoid enough"), I have to believe that the reason for the cleartext GUID is exactly what you suspected in your first 'here'. It's not a mistake, but a deliberate design decision. Recall that the public commentary ran 98% against RFID deployment, yet the State Department presses on. These guys know exactly what they're doing, and what they're doing is tracker-tagging Americans." I've given that a lot of thought. I actually believe that, in this case, they're just incompetent and not actually malicious. Bruce Schneier • November 3, 2005 5:23 PM "Bruce, a comment somebody left on your Wired article raises an important point. If the passport has to be optically scanned to get a key needed to decrypt data on the RFID chip, why not just store the data in a bar code?" Right now there's no reason, as the chip will only contain the information written on the inside cover. But eventually, the plan is for the chip to contain more information: maybe a digitized picture, maybe visas, etc. There is no doubt that a chip is required. What is in doubt is contact vs. contactless chip. Bruce Schneier • November 3, 2005 5:23 PM "What happens when I locate the RFID chip in my passport and hit it a few times with a hammer? Will I be denied reentry to the US? Will I be subject to increased scutiny? Or will they just wave me through based on the printed content of my passport?" A passport with a non-functioning chip will be considered invalid. Xellos • November 3, 2005 5:24 PM Mr. Tari, You might want to consider checking a few sources before expressing your opinon as well. If you check the referenced articles, the 69 feet is quite specifically from a passive RFID. Bruce Schneier • November 3, 2005 5:24 PM "Hmmm....so what exactly happens when you get your passport stolen? What information is on these tags? Obviously a needed upgrade but if these things can be replicated I don't want 50 of me running around the world..." One of the benefits of a digital passport is that the information can be cryptographically signed. piglet • November 3, 2005 5:57 PM "There is no doubt that a chip is required." Excuse me, but there is some doubt. I would say, there is a lot of doubt. There should be some very good reasons for saying that a chip is required, given all the impliciations (technological, security, privacy, cost...). Up to now, I haven't seen any. "I actually believe that, in this case, they're just incompetent and not actually malicious." I gather that every informed person independent of the state department agrees that there is no legitimate reason for using RFID in passports. (Should I have missed somebody who disagrees, please step forward and explain.) So why on earth do they insist in such a flawed technological design? Maybe they are just incompetent, although this isn't the kind of incompetence usually exhibited by this kind of institution (usually they are well aware of how to use technology in order to better control citizens). *In any case, they don't deserve the benefit of the doubt.* Bruce Schneier • November 3, 2005 6:28 PM "I gather that every informed person independent of the state department agrees that there is no legitimate reason for using RFID in passports." I don't think that's true at all. There are a bunch of arguments for RFID passports. And there are some very good arguments against. I want to see some kind of analysis out of them. Roger • November 3, 2005 6:43 PM @Bruce: I have also considered another possibility. The RFID industry is currently promoting itself fervently, but are still far short of the production volumes that will enable costs to reach the magical 10c barrier and start Walmart putting them in every damn thing. They need a large scale application to be mandated by the government, which will bring the costs down, close the Walmart deal, then they'll be rolling in the green stuff. Additionally, as we already know from the EPCglobal fracas, some elements of the industry are highly, umm, unethical. I'd like to see the Auditor-General investigating this program for, erm, conflicts of interest. Gerald • November 3, 2005 6:43 PM In Germany we now (since 2005-11-01) have RFID passports including the photo on the chip. One main aspect to switch to RFID was that it would be required to travel to the US. Roger • November 3, 2005 7:23 PM @Michael Ash, Bruce: In short, it is easily feasible to represent public key encrypted personal information plus a digitally signed photograph of adequate quality on a 2D barcode which fits on a standard passport page, using existing commercial off-the-shelf technology with robust error handling. If we are allowed to use two (presumably facing) pages, and/or newer barcode technologies, we can do all that but also increase the photograph quality from "adequate" to "high". These technologies are very reliable -- probably more so than RFID -- and certainly much cheaper too. Thus, I do not believe data size creates a technical requirement for using a chip, be it RFID or contact based. One additional issue might be recording of visa information, which means the system needs to be writeable. However, visas are only issued by various central offices, so it is no great obstacle to have them print a barcode on a sticky label to be pressed into the facing page. The information in a visa barcode (say version number, country code, reason code, office reference number, date of issue, date of expiry, and passport number) would all fit entirely inside a signature, so the data size is just 2 bytes (country + version) plus signature, say ~258 bytes for RSA, so each visa code would be about 18 x 18 mm; you could fit 24 to the page, enough for a lifetime for most people who don't travel for business. If you trusted smaller signatures (say ECDSA) you could more than quadruple that, in fact being limited by making the stamps manageable. Roger • November 3, 2005 7:29 PM @ac: "If the barcode is optically scanned by a reader, can't it be optically re-created and scanned from security cameras at the various places you have to show your passport?" Yes, but so what? You're already showing your passport to those people. By making it optical, you can ensure that the digital data can only be read by people who are already reading the same data in analogue form (but it's more secure, because now it can be signed). You might not be happy about them reading that, but you've got no choice; it's the law that certain government officials get to see your passport, or else you can't enter their country. This contrasts with the RFID solution, where the data can be read by any random stranger you pass on the street. If it's encrypted, and they haven't seen the barcode with the key, they might not be able to read (all) the fields, but it will still act as a unique serial number. "Seems to me a magnetic stripe could do all of this with a whole lot less hassle." The problem there is reliability. Not of the passport, but of the reader. These readers will probably each be processing more than a million passports per year, so unless they are extremely reliable they are going to cause a lot of foul ups at airports. Non-contact technologies such as RFID and barcodes are inherently more reliable. Roger • November 3, 2005 7:36 PM @_Arthur: Additionally, the fact that the passport number will be instantly available in machine-readable form, and also unalterable, means that stolen passports are much more likely to be flagged as such. In fact even if the whole thing is implemented pretty badly and stolen card lists are on the blink half the time, the probability of being arrested for using a stolen passport will still become so high that demand for stolen passports will plummet, and people will probably stop stealing them. Instead, crooks will mainly rely on corrupt officials issuing genuine passports in false names. Roger • November 3, 2005 8:00 PM CONCERNING "TINFOIL WALLETS". Aluminium foil is not the best choice for protecting them. For one thing, most common grades of foil are so thin that a surprisingly proportion of the signal still gets through, especially if they use the lowest frequency RFID standard. It will still stop most of the signal, and reduce the read distance to a few millimetres, but you don't get quite get the guarantee you want because a reader pressed against your (closed) packet might still be able to read it. More importantly, foil is not very sturdy, and even fairly small rips, or imperfect folding down of the edges, can let a lot of signal leak through. Plus wrapping your passport in alfoil looks bad. If people don't know why you're doing it, it will just look tacky. If they do know, many of them will think you're a either a fruit loop or a drug smuggler. At any rate, neither business travellers nor the teeming masses of holiday makers will do it, so only a very few people will be protected. Thus, I envisage something more like an old-fashioned cigarette case: a nicely crafted, engraved metal box with chamfered corners and a lid so well made it closes airtight. Basically, take existing cigarette case designs and rescale them to passport sized (nearly every country in the world uses the same size), and maybe make them from mu-metal instead of brass. It would be stylish and elegant, and it will protect the passport from damp, sweat, physical abuse, gnawing insects, and RFID-damaging stray fields. Have a small pocket to keep your credit cards in too, and (if made from mu-metal) it will protect them from stray magnetic fields damaging the magnetic stripes. Most importantly, while it was closed the passport would be totally unreadable, even at contact distance. It might be nice to have some kind of simple locking mechanism to thwart casual snoops, and also a small metal eye to attach to your key retainer, to foil pickpockets. I would certainly buy one if somebody made them. If you marketted it right, millions of people would buy one. Hint, hint. bill • November 3, 2005 9:47 PM Bruce: "A passport with a non-functioning chip will be considered invalid." That's going to make coming back into this country a pain in the ass. Have you seen any durability testing results on these passports? Lots of things can happen to a passport in ten years time. Clive Robinson • November 4, 2005 5:59 AM @josh "why not just store the data in a bar code?" In one of Bruces earlier blogs I gave the answer to this. Basically if you consider the amount of abuse the average pasport gets in terms of folding, moisture, dirt etc then there is only a certain amount of resolution you can use for a bar code. I worked out that at best you would get maybe 2K bits in a 2-D bar code in an area the size of a credit card (which is how small they want to make pasports, so that they become a national ID card by default). They (being various Governments) want to store a very large amount of (unknown to you) data. Possibly including all your financial and medical records and possibly any social/political associations you might have that they have on record (ie Police Colators files etc). They just cannot get this amount of data into a bar code. Why do they want to store all this info, well as has been pointed out it will always be possible to "bribe" a single employee to issue a fake pasport with your real DNA / Finger Print / Face Print / Gait Print, but you would have to be very very clever to make a suportable back history that will tie in with all the other Government etc DBs that you would need to appear in or be able to bride a whole lot of individuals. This leaves only ID theaft of an existing individuals records, again it is unlikley you would be able to find enough information to be able to pass even basic questioning, and even if you could would you be able to remeber enough of it to not cause suspicion on questioning. Finally, why store it on the passport, well it's a simple online data issue. If you as a Police officer or Imigration official in another country need to get at the data to ask the questions. You come up against three basic issues, 1, Are you going to be able to connect to the DB from where you are? 2, Is the DB going to be secure if it has external access? 3, Can you trust the data you are getting down the wire? As it will be difficult to resolve these issues for various reasons (the most important being human nature of "It's a pain why bother checking" and people shouting about Human Rights/privecy issues) it's a bit pointless having it online. Clive Robinson • November 4, 2005 6:10 AM @AC Farady cages do not need to be grounded, they just need to enclose the object. THe problem then is how well do they need to enclose and that is the problem. As any EMC consultant will tell you a Farady cage is an antenuator of only modest value. Even well made cages find it dificult to get >80dB if access is required to the object inside. Basically any practical In-Pocket Faraday cage is not going to give you more than 20dB or so reduction across a sufficiently wide spectrum. If you want to know the technical ins and outs it would take quite a few pages to discuss, but as this question comes up on a regular basis maybe somebody should do it @Bruce how about it on another part of your web site ? Clive Robinson • November 4, 2005 6:19 AM @Roy Owens Think of it a different way, I as a politician need votes to get/keep me in office. To get votes I need money, first directly for my campaign fund, secondly in taxes to give the sort of policies that buys votes. All this "Security for your Protection" nonsense give me both... First of there is the largess (sorry campaign contributions) that having the power to award govenment contract buys me... Second if everebody is taged by an RFID (or many) then I can track everybodies spending etc that makes personal tax avoidance almost impossible for the masses... So far a Win - Win for me, as a politician. Kees Huyser • November 4, 2005 7:43 AM @Bruce: "A passport with a non-functioning chip will be considered invalid." So if my passport after a flight to the US at 30.000 ft for X hours is hit by a high energy cosmic particle which flips a bit (or bits) on the RFID entry is refused? I'll then be put on a return flight, but won't be allowed back into my own country since the passport is still invalid... Bruce Schneier • November 4, 2005 7:53 AM "So if my passport after a flight to the US at 30.000 ft for X hours is hit by a high energy cosmic particle which flips a bit (or bits) on the RFID entry is refused? I'll then be put on a return flight, but won't be allowed back into my own country since the passport is still invalid..." I'm sure there's a procedure for showing up at customs with an invalid passport -- expired, torn up, whatever -- already, and that you will be allowed back into the country. It might take several hours, though. Mitch • November 4, 2005 7:58 AM Possibly a naive question. Since we are hearing that Faraday cage is not perfect, would it be possible to build a personal RFID jammer (responds to RFID query with powerful noise instead of useful data), and keep it in the same pocket as the passport or even inside the Faraday cage? So people would be able to see you possess something which responds to RFID, but not retrieve any useful data? How big would it have to be? And if I stood near passport control in an airport with one, could I use it deny service, and cause the passport queue to get even longer than it already is? Clive Robinson • November 4, 2005 9:21 AM @Mitch Not naive at all :) The size depends more on battery life than anything else, and if you want it to transmit continuously or only when interegated, aditionaly the range you want it to jam at (which would not be greate for a pocket sized device). A practical system could be built into a mobile phone sized case (Nokia 310 etc), idealy it would send out junk data when interegated, and also vibrate to let the owner know they are being scaned. In fact making it look like a mobile phone might be a good idea ;) It has the potential to be a usefull security product, however in most countries it would be regarded as an "illegal transmission" and as such could get you into trouble. IF I was designing one I would make it radiate about ten times the signal level the RFID would radiate, that way it would prevent casual scanning by nerdowells (be they Government or otherwise ;) when it was next to my passport. At this low level of power you would then also have a reasonable excuse for carrying it (to prevent identity theaft etc). If however you made it radiate enough power to act as a DoS system at an airport or else where I suspect you would sooner rather than later get your "collar felt by the long arm of the law". Edward Hasbrouck • November 4, 2005 9:38 AM There is a provision in 22 CFR 53.2(h) for the USA State Dept. to authorize entry of a USA citizen to the USA without a valid passport, but the State Dept. administrative fees (which can include hourly costs for researching and verifying the would-be entrant's citizenship) far exceed the cost of a new passport. For those of the commenters who don't understand the threat scenario of the static gloablly unique collision avoidance ID number in the chip, I have details in my blog. Paul O • November 4, 2005 9:49 AM "There is no doubt that a chip is required. What is in doubt is contact vs. contactless chip." Has there been any public statement why a contact chip would not be the preferred approach? Alignment issues could presumably be worked out by "printing" large contact pads to aid tolerance. Reader lifespan issues could be addressed by design, only moving the reader's contacts into contact after the passport is in position. Also, has there been discussion on where the chip would be physically embedded? (Where is it in the foreign passports which are already using RFID?) Is it in the cover, or in an interior page? If the latter, then, of course, any attempts at shielding the chip could potentially also be held between the cover(s) and you wouldn't need to have your passport "wrapped in tinfoil". Pat Cahalan • November 4, 2005 11:36 AM @ Roger I think you may have hit the nail on the head, there. > I'd like to see the Auditor-General investigating this program for, erm, conflicts of interest. This is an excellent idea. When a government agency pushes ahead with an agenda that isn't getting public support or critical acclaim, it pretty much has to be because either (a) they're incompetent or stupid, (b) someone is getting pressure from congresspeople who get donations from the industry in question, (c) someone with decision making power has stock in the industry in question or plays golf with a CEO from the industry in question, or (d) a completely human problem -> somewhere some fairly high ranking bureaucrat has made this decision and is going through with it come hell or high water. (c) and (d) are often related to (a). piglet • November 4, 2005 3:49 PM Katherine Albrecht and Liz McIntyre: "Spychips - How Major Corporations and Government Plan to Track Your Every Move with RFID". piglet • November 4, 2005 4:08 PM "There are a bunch of arguments for RFID passports." Really? Which ones? And whose interest do they take into account? piglet • November 4, 2005 4:39 PM "There are a bunch of arguments for RFID passports." I agree that there are arguments, e.g. commercial arguments from the point of view of RFID vendors, what I mean is whether there are arguments that justify RFID from the citizen's point of view. Guillaume • November 4, 2005 9:46 PM Now an extra question: as the RFID chip can be accessed in read/write mode, how easy would it be for a guy standing near me to zap the chip and pollute it with random bits all over ? or even worse, add a couple of entries like visa for 'terrorist countries' ? Stephanie_B • November 5, 2005 4:38 AM Will this help eliminate the paper forms we have to fill out in the plane before we enter the country? If not this just seams like another episode of Big Government's Big Spending. Edward Hasbrouck • November 5, 2005 6:47 PM "Will this help eliminate the paper forms we have to fill out in the plane before we enter the country?" No, although airlines operating international flights ot or form the USA are now required to obtain (either directly or thorugh travel agents or other intermediaries) so-called "Advance Passenger Information" (API) and deliver it to the USA government in standardized electronic format when the plane takes off. Even the govt. estimates the cots of this at a billion US dollars: Clive Robinson • November 6, 2005 6:57 AM @Paul O "Has there been any public statement why a contact chip would not be the preferred approach?" I have given info on this in past blog pages, Basically all mechanical contacts are subject to wear and therefore intermitant behaviour and ultimatly compleate failier. Then there is the contamination problem, The cost of making the electrical contacts on 5 Billion passports very reliable is certainly going to be several orders of magnitude greater than the cost of low tech RFIDs, especially when you have ramped up production to make the required number of RFIDs. The big problem with pasports are thet they naturally hold both moisture and some quite corosive chemicals that they get from their holders (yes folks sweat is more offensive to electronics than to us mobile bio masses :) Also there is the places the passports get taken to, for the average person this is likley to be on their holiday abroad to the Beach / Jungle / Mountin / Other extream environment place we get entertainment from. It does not take much imagination to realise just how much muck would get on the passport contacts, and for infrequent travelers this might have had the better part of a year to work in good an proper, and become as hard as good quality building materials ;) Finally there is the issue of the readers how are they going to make contact reliably with a million or so passports every year for each machine... To make it work well for mucky contacts is going to certainly damage clean contacts... People often talk about Bank Smart cards reliability, well they frequently forget to mention that the number of people who have to take their card to more than one Auto-teller, or to a real teller is actually quite high. Although acceptable to the avarage punter, imagin what fun this would be at a large airport imigration hall? If the number of complaints about the Finger Print readers having to be frequently cleaned is something to go by then expect ques four to five times the length. Basically it is a problem which is not going to be easy to resolve for a contact based system so RFIDs are an apparent easy solution. Unfortunatly nobody has considered how unreliable the RFIDs are going to be, as most of the figures are based on Retail type experiments where the merchandise is not subject (for obvious reasons) to any kind of stress. However it would appear that there is something like a 5% failier in the "Pet Passport" system where your pet gets an embeded RFID. I actually know of somebody whos dog has four chips in and only two work... When your dog gets a RFID chip injected the vet usually picks a point where it is not going to get damaged easily. How many of you have put your passport in your back pocket and then sat down on a hard seat or railing or some other surface that is going to crush the RFID? It will be interesting to see what the reliability is going to turn out to be. Roger • November 6, 2005 9:45 PM @Clive: " ... in an area the size of a credit card (which is how small they want to make pasports, ..." Where did you get that information? The published final ruling specifically states they have rejected a card format and will continue with the booklet format currently mandated by international treaties. "They (being various Governments) want to store a very large amount of (unknown to you) data. Possibly including all your financial and medical records and possibly any social/political associations you might have that they have on record (ie Police Colators files etc)." The published ruling lists all the data fields that will be included, and it is nothing like the above. It will only include the information currently in the passport data page (long mandated by international treaties), plus administrative information about the passport itself, and security coding. Specifically: "name, nationality, sex, date of birth, place of birth, and digitized photograph of the passport holder. The chip will also contain ... the passport number, issue date, expiration date, and type of passport. Finally, the chip will contain ... a high strength digital signature." Indeed much of the information you list as being included is actually prohibited: "The chip will not contain home addresses, social security numbers, or other information that might facilitate identity theft." They leave open the possibility that they may eventually include other information (notably fingerprints or iris codes) but require that this be subject to a complete new rule-making process open to public comment. Further, the total it will ever have (unless they scrap all the new passports and issue a totally revamped system again) cannot exceed the total chip capacity, which is 64 kB. That will hardly fit all your financial and medical recrods (unless you're a hermit.) Don't get me wrong, I think that much of this process is wrong-headed and am opposed to it too. But a lot of information one finds circulating in the blogosphere is uninformed speculation promoted to wild rumour by oft retelling. "I worked out that at best you would get maybe 2K bits in a 2-D bar code in an area the size of a credit card..." A credit card is 85 mm x 54 mm. The best current mainstream, commercially available 2D bar codes encode 78 bytes per square cm. (Some newer ones, not yet widely supported, can get much more.) That means you can get 3.5 kB on a credit card. Except the photograph and signature, all the data listed above could be represented in about 90 bytes. Signature is about 256 bytes for RSA, or 32 bytes for EC-DSA if you trust the latter. A JPEG compressed passport sized portrait in high quality grey-scale, or full colour but just a little choppy, comes to 3 kB. Total, 3.3 kB. Clive Robinson • November 7, 2005 4:28 AM @Roger First off I am from the UK and therefore have a slightly different outlook to other parts of the world The credit card sized pasport has been touted around Europe in one way or another for the past twenty or thirty years. More specifically in the UK the propossels for the National ID card started life as a "Benifits entitelment card" then got more features added (medical card driving licence etc) all of which where proposed as credit card sized. Only latterly has the Passport aspect been included, but the documentation still talks about the ID card being credit card sized. With regards to the extra data, there are various "Anti Terorist" asspects to the UK National ID /Passport propossels which is why the latest LSE report estimates the total cost as being around 500GBP (900USD) per person (as reported in the UK press over the past couple of days). With regards my estimate for the amount of data for a 2D code, I used a similar scaling as is used for the ABA mag stripe in that the card is assumed to get damaged edges and therefore the data is started a reasonable way in from the edge (they also have an alowance for Mag Head bounce as well). I also made an assumption about there being a high degree of redundancy for error checking as well as space left for a smart card set of contacts (in Europe these are very common used for banking and E-payments etc). Clive Robinson • November 7, 2005 12:17 PM @Roger, Sorry I forgot to say that yes in the current limited International Pasport proposalls you are quite correct. Unfortunatly the current UK administration wants to have the "best in the world" combined everything card, that just happens as an asside to also include a passport. What is not clear is if there will be two chips in it or just the one (it probably has not been decided yet). It is unfortunatly a very stupid idea but a number of the card / RFID manufactures have be sponsoring meetings at various political party conferances and they are pushing all kinds of "wonderfull" things and the politicos appear to be picking it up like it was free money :( At least one of the companies has made a compleat botch of a voter system in South America but nobody appears to be woried about the companies ability to produce a system several orders of magnitude more complicated. I will try and dig out a URL for the latest LSE report and post it here. piglet • November 7, 2005 3:14 PM Here's offical information on the German e-passport (only available in German): It's sad they have gone ahead with this, despite lots of criticism (http://www.ccc.de/epass/?language=en). All new passports will include an RFID chip with the picture in jpeg (about 15 kB). Finger prints will be added in 2007. They claim that the RFID can only be read from 15 cm distance, more is "unrealistic due to the laws of physics". There are no sources given for that claim. The biometric data will NOT be stored in a central database, it seems that this would is explicitly excluded in the law. According to this information, the passport will NOT become invalid if the chip doesn't work. ToddC • November 9, 2005 4:50 PM Perhaps I'm confused, but I have been unable to determine how relevant the '69 foot' passive RFID reading is to the discussion of ePassports. The proposed ICAO ePassport RFID is 13.56MHz, which uses inductive coupling. If you read the Flexilis presentation at http://www.blackhat.com/presentations/bh-usa-05/... , and listen to their podcast, http://downloads.oreilly.com/make/... , it seems to me that the 69 foot (21 meter) read was on a UHF (capacitive coupling) tag. They also claim (smarter people than I would need to confirm this) the theoretical limit on the 13.56MHz inductively coupled tag is 3.5m (11.5 feet) - based on lambda/2pi for near field, further degraded by the sine of the angle of incidence to the tag. The far field effects were NOT discussed, though keep in mind that's relevant for eavesdropping, not (as far as I can determine with what I understand of E&M) inductive coupling. Given that the latest rule is that the passports WILL have shielding, and based on @Clive's claim that 20dB is the best they could achieve (since they use load modulation, 20dB is what we care about, not 40dB, right?), and you want to read them with arbitrary orientation, we're talking remarkably strong fields, sensitive readers, and technology that (today) has some physical limitations. (the laws of physics do not yield to enthusiasm...) Obligatory disclaimer: I do not intend to imply the problem of reading ePassports at farther than 10cm distance is nonexistent. I'm merely trying to reduce some of the exaggerations and misconceptions. I believe this is an important point to make, since if you are trying to make a point with authorities, the special interest groups will discredit your arguments by focusing on minutia. I would be thrilled to read a Faraday FAQ (particularly one that includes discussion of near field effects), as @Clive recommended. As far as I am aware, the original ID issue raised by @Bruce remains valid. Is there further discussion on that? As always, I appreciate the thoughtful discussion you Wise Ones have provided above. Avishai Wool • November 9, 2005 5:23 PM Dear Bruce, "RFID" is not one technology. There are quite a few variants, You are correct that "nominal" is not "theoretical maximum" - but the I suspect you could do better, inside an insulated room, with I totally agree with the the privacy concerns regarding e-passports, E-passports have not been, are not, and can not be, read at 69 feet Yours, Avishai Wool, Ari Heikkinen • November 11, 2005 3:48 PM I haven't yet seen any good analysis or reasoning why RF is needed in the first place. When your personal data is transmitted around, be it encrypted or not, it makes no sense to do it if there isn't any good reason to do so. 画册设计 • November 11, 2005 10:19 PM "RFID" is not one technology. There are quite a few variants, Daniel • November 15, 2005 6:54 PM More on NZ Passports: Government FAQ: Graphic of what the passport will look like and what data it will contain: Cryptographic challenge issued by the NZ Minister of Internal Affairs: David Benoit • November 15, 2005 7:00 PM I've been following this topic for a long time now, especially since the Canadian Government was thinking of putting bio-metric information into passports. It doesn't belong there... _maybe_ somewhere else. I'll explain. I think there is a fundamental flaw in putting the "same information" on the RFID chip that is printed on the page. That serves no purpose; certainly it would foil the more naive person who wishes to produce a fake passport, but certainly anyone with any amount of intelligence is going to produce a fake with fake information on the RFID as well as in print. It is folly to believe otherwise. Any kind of biometric information would be the same... If I'm going to create a fake and the validation of the passport is to compare what's on the passport to the person standing there, I'm going to put my own biometric information on the RFID as well. You really need a method of authenticating that the passport is REAL and VALID. This brings me to my point. If the US State Department is now requiring that the passport be placed into a reader to get the encryption key that will decrypt the information in the RFID chip that will most certainly be identical to that which is printed on the page, doesn't that defeat the whole idea of the RFID in the first place? Wasn't it the intent to have a reader system that didn't have to come in contact with the passport? Doesn't this requirement make that impossible? And, since that is impossible, why not try to implement a system that actually works? A system that will take into account that passports can be revoked, and that fakes are going to be really good. Wouldn't it be better to have a system that read some sort of serial number off the passport (this already exists) and queries a US State Department database of passports (which already exists)... then the information that the US State Department has on file as being associated with that passport number would then pop up on the screen of the customs official (or whomever else with proper access) and the information can be verified by looking at it. An automated system could do things like make sure all the text is correct... and the official could look at the two pictures, and look at the person, and see if they match... they could even... if they wanted... send an "update" to the picture and you could have not only a copy of the photo that is on the passport, but you could watch someone grow a beard in extreme slow motion :) Why is this better? It means that only people with authenticated access to the US State Department system can get information about you from your passport automatically... everyone else would be limited to the information that is printed on the page. That's not that good for anyone. The only thing that might happen is that someone could create a copy of your passport and they try to make themselves look like you... they wouldn't be able to change the picture as that is validated in real-time with what is on file. I think in this case the RFID is a bit of technology that is being applied where it shouldn't. It doesn't belong here... there are other ways that are less prone to problems that could solve the problem. Merc • November 16, 2005 12:47 PM I'm a software engineer working at a RFID reader company that designs UHF frequency RFID devices. I'm not an RF engineer, nor do I have much experience with HF tags (like ISO 14443 devices) but it sounds like you're really spreading some misinformation. Passive RFID tags are powered by the reader, and HF tags are powered by induction, this severely limits their range. I don't know what was seen at 69 feet, but I sincerely doubt that it was a reader powering a tag at that distance. The ISO 14443 standard uses a 13.56 MHz signal, with a wavelength of about 22m. ISO tags are powered by inductive coupling in the reactive near field, where power drops off with 1/d^3. This means that since the standard read range is 0.1m (10cm), to increase that distance to 1m, you would need to supply 1000x more power. Since the power supplied to an antenna is normally limited by FCC rules to 1 Watt, this would mean you'd require 1 KW to power them at 1m, or 1MW at 10m. You may be able to eavesdrop on the signal at a long distance, but unless I completely misunderstand this stuff, you won't be powering it at that distance. Technology gets better, but physics just doesn't change. As for the "secrecy" of the protocol... I simply went to the ISO site and searched for 14443, voila, documents. Sure, you have to pay for them, which I find to be a real pain for standards, but right there in the search results, "Part 3: Initialization and anticollision" I think you're right that RFID tags in passports are a bad idea. You're also right that they need to do more to make it difficult for people to read the tags, and decrypt the data they contain. On the other hand, we shouldn't be completely paranoid. People routinely give out their passport numbers in insecure online forms to book hotels, etc. Really, on its own, the number isn't too helpful. It's not *good* to just give it out, but it isn't the end of the world either. If it's easier to pick someone's pocket to get their passport than it is to read it from a distance then the security of RFID-based tags is probably good enough. David Benoit • November 17, 2005 9:42 AM After reading some more of this, I think there is a fundamental misunderstanding of passports that is missing. Passports were brougt into being, partially, because up until quite recently we didn't have any sort of infrastructure to do real-time authentication of a person at the border. We can do that; we have the technology. The idea of putting my picture, biometric ID, visas, revocations, and a list of previously visited countries on or in my passport is very unsettling. This information shouldn't be anywhere in my control. We have the techology to build the infrastructure that will allow us to do better than a system designed wholly on the fact that "fakes" are hard to make. They aren't hard to make any more, and any system that relies only on information presented by the authenticatee will be much more open to intrusion. I'm not saying that such a system is easy to make. Certainly not. However, it is a better direction. Steve Shafer • November 18, 2005 11:58 AM I would encourage people to look directly at the RFID passport specs, at http://www.icao.int/mrtd/Home/Index.cfm, particularly the "Annex I" document that includes the rationale for RFID. There is a "machine readable zone" (MRZ), which requires insertion into an optical reader. It doesn't have as much data capacity as an RFID tag, hence the desire to use RFID. Nations may optionally use part of the MRZ to contain an encryption key for the RFID data, some nations are choosing to do this and some are not. My understanding is that the US is not choosing to do this, I won't comment on the rationale presented by the US. The US position also explains why they did not favor the use of a contact technology with, for example, wire leads on the passport connecting to a reader device. I would also like to support the previous posts about "reading passive tags at 69 feet". There are literally dozens, probably hundreds of varieties of RFID, including passive varieties that have a design range of about 1 inch (e.g. Omron V700). It makes sense to say that a very determined snooper can read a tag 10x farther away than the design range. But it doesn't make sense to say that all passive tags are subject to the same read range. I support the analysis of the responders above on this issue. It was very misleading in the GAO report to see blanket read ranges for passive and active tags, implying that all tags (of each kind) have the same read range. It is misleading yet again to see that error repeated on this widely read blog and in articles, authored by a respected scientist, and I hope Bruce will take an opportunity to clear the air on this issue very soon. piglet • November 18, 2005 5:42 PM Thanks to some posters for clarifying the issues surrounding ISO 14443. The article to which Bruce refers actually points out that the 69 ft refers to passive RFID tags which are not the ones used in passports (they may be used by Walmart etc.). I agree that exaggerating the privacy threat isn't a good strategy. @David Benoit: "Wouldn't it be better to have a system that read some sort of serial number off the passport (this already exists) and queries a US State Department database of passports (which already exists)... then the information that the US State Department has on file as being associated with that passport number would then pop up on the screen of the customs official (or whomever else with proper access) and the information can be verified by looking at it." You mean the information (including biometrics) should be stored in a central database instead of on the passports? This would be very dangerous. The privacy/big brother threat from having a central database is much worse than the information directly stored on the passport. Moreover, the passport must work as identification independent of a central database, otherwise, everybody who might have to check a passport (banks, hotels, foreign authorities) must have online access, in other words, the data won't be secret (not mentioning here the problem of technical failure). "The idea of putting my picture, biometric ID, visas, revocations, and a list of previously visited countries on or in my passport is very unsettling." Less unsettling than the idea of putting them in a central database! Gary Silva • November 19, 2005 8:22 PM RF Tags and Encryption. David Benoit • November 22, 2005 3:37 PM @piglet: Every piece of information that is on your passport is already stored in a centralized database. The government isn't going to issue passports and then forget about all the data! As for hotels, etc. you would still have the information that is present today printed on the page, but nothing else. I'm not suggesting that my suggestion is the be-all and end-all of personal identification and authentication, but I do know that having a biometric on an RFID that is easily read is MUCH less of a concern than "big brother" having it in a database that they're already going to have. If biometrics are going to be used, they should never be stored _anywhere_ other than the authority. Then you have an audit trail on the data, you have one place to go to if there is a problem, and you don't have people that shouldn't have access to the information just reading it off your passport. David Benoit • November 22, 2005 6:51 PM (I meant that having a biometric on an RFID is much MORE of a concern) Clive Robinson • November 23, 2005 7:55 AM @Avishai Wool First things first, reading out of the data from an RFID is a two stage process, 1, The reader exicites the RFID. What is of interest is not the power or adjacency of the exciter just that it does the job (ie at the imigration desk or in a door frame etc). Merc - the energy required for excitation is directly proportional to field strength, in a closed loop the field can easily be made to be effectivly uniform with little difficulty (think about the inside of your microwave oven for a very very lose analagy) What is of interest is how far the resulting signal from the RFID can and will travel after it has been excited. This is all that is required to passivly listen at a distance to an RFID at any frequency. Avishai - You forgot to put a limit on your statment by talking about "Free Space Radiation" only, and at the fundemental frequency of the RFID. Even at the fundemental frequency of the ISO RFIDs of 13.5MHz, it will travel a very very long way if coupled into a suitable carrying medium such as a surface mounted electrical cable or metal hand rail or any other suitable conductor that gets coupled in the near field (which at 13.5MHz is quite large). These problems have been known about for years (TEMPEST and EMC again ;) and in various forms reports of these effects have made it into various national press reports, usually at some famous persons expense. The most usuall being the old cordless phones that transmitted the "line signal" at 1.8MHz and could sometimes be heard (and recorded) as much as 20KM (12.5Miles) away. Bearing in mind that these systems where only supposed to have a maximum range of 0.2KM (650ft) on free space calculations. At 100 times "over range" on the cordless phone this sugests that under favourable conditions the RFID could be picked up 10m (32.5ft) away at least purely by accident.... If however you specifically designed a suitable transmission line (coaxial, waveguide or G-Line) then your RX range boils down to coupling loss and line loss only... As a solid example have a look at the design of an EMC Stripline, TEM or Crawford cell transmission lines (see IEC 801 part 3 and EN 55 020 for more details). The Stripline variaty is a form of physically open transmission line into which you put test objects like personal sereo systems etc). In essence it is a two plate transmission line with widly spaced plates and matching networks into a charecteristic impedence (usually 50 ohms). The stripline is fairly easy to calibrate in that the field between the plates is directly proportional to the voltage at the feed point divided by the distance between the plates, E = V/h volts per meter You will see from this that the field is proportional to distance not distance squared or distance qubed... This tends to hold good up to distances approaching a half wavelength which is around 11meters at 13.5MHz so the stripline can easily be the size of a small house or large vestabule in a public building and still work effectivly. So the question boils down to who wants to build a more moderatly sized test system just to see how well it works? For those not familier with Dr. Gaubau's G-Line open wire transmission line take a look at http://coldwar-c4i.net/G-Line/EE0860/p638.html Which is a copy of a artical from the Aug 1960 Electrical Engineering Magazine. piglet • November 23, 2005 2:48 PM David Benoit, actually this is not the case, at least not necessarily. In Germany, there is not going to be a central database holding the biometrics of all the country's citizens, unless they change the law. The purpose of the biometrics (as publicly stated) is to match the passport holder to the person who applied for it and submitted the biometrics. No more than that. For that purpose, no central database is necessary. Perhaps I should give you some additional background. Germany and several other European countries have a registration obligation for all residents. This registration makes identity verification much more reliable and in fact, identity theft is much less common. But those highly sensitive data are *not concentrated in a giant national database*, as is planned for example in Britain. The registers are administered by the municipality. The police cannot, for example, make a lookup to find out the address of "David Benoit" anywhere in Germany. On the other hand, it is relatively easy to verify if somebody has given a fake adress, e.g. when applying for a credit card, or indeed a passport. piglet • November 23, 2005 2:54 PM "I meant that having a biometric on an RFID is much MORE of a concern." I disagree because you have a better chance to protect what is directly on your passport than what is in some database with online access to a lot of people. I agree that there is concern about RFID, maybe less than I used to think as the range is apparently short. However my main concern is with the biometrics in principle. The technology is not reliable for large scale application. Dealing with thousands of false negatives will absorb much energy that could be better spent on reasonable security. john a gardner • December 4, 2005 4:28 PM I liked your article "Security of RFID Passports, but I must make a couple of comments about the use of the term 'RFID', and your interpretation of the security implications of the collision avoidance function. 1. RFID is a term widely associated with very simple, very low cost tags that store just a product ID code and maybe a product serial number, designed to be read automatically, typically in supply chain applications - e.g. on a packet of razor blades. Security is of little concern in these applications - on the contrary the aim is to facilitate reading the product code. However, I am sure that the chip being proposed for use in passports is much more sophisticated than this, having much greater memory capacity (say 1-4 kilobytes), fairly complex read and write password access control, and chip to reader mutual authentication, such as the Philips Mifare S40 and S70 chip family (there are other manufacturers of this technology, but I am most familiar with the Philips implementation). I am disappointed not to have seen any reference in the literature (including apparently in your excellent Crypto-Gram) to the (relatively) advanced security features that such a chip has compared to the basic RFID chip used in the 'razor blade' example above. 2. The chip ID number on the Philips chip is not 'buried deep within the chip' - on the contrary it is the only part of the memory that can be read without using secret key protected access access control. 3. There should be no linkage between the chip serial number and the identity of the passport holder. If I were designing a passport application I would certainly NOT use the chip ID for any purpose other than collision avoidance (and preferably would disable the function if I could, as procedures can generally be designed to avoid the need for it). 4. On the Philips chip passport information would be written to one or more of the protected sectors of the chip memory, and would be accessible only after the chip and reader had successfully participated in a 3 way authentication process requiring the exchange of 48 bit keys. Properly implemented, such security should avoid the need to encrypt the passport data itself. Therefore, unlike supermarket RFID tags, where any reader is capable of reading any tag, the Philips chip is designed to be read only by readers programmed to read the correct sectors, using the correct keys. Whilst key compromise is always a risk, to suggest, as its many detractors do, that passports using this technology can be easily read by a bystander is either simply misleading, or indicates gross technical ignorance. 5. Whilst I agree that the potential read distances are likely to be significantly higher than the published 4 inches or so, whilst this could allow a perp to read the chip ID, it is unlikely to garner any other information unless the perpetrator knows both the correct sector/s and the secret 48 bit key. If a single key is used for every passport globally, then the key will eventually be exposed and will fail to provide protection against this type of attack. However another feature of the Philips technology allows for each chip to be allocated a different key (derived keys), which would strengthen the key system. 6. The decision by US Customs (?) to print the decryption key in human(?) readable form on the passport may help, but will only be effective if the algorithm that allows the key to decrypt the information is itself kept secret. Otherwise the perpetrator can simply arrange to capture an image of the decryption key (say by means of a covert mobile phone camera), and program this into the covert reader. Maybe the decryption key is only readable by means of say ultra-violet light? Cheers, and keep up the good work! Pat Cahalan • July 14, 2006 12:58 PM CNN reports on the insecurity worries of RFID passports (w/quote from Bruce) Simphiwe Hlatshwayo • July 11, 2007 7:54 AM I found that the information that was given too me was too long to read Subscribe to comments on this entry Leave a comment
Powered by Movable Type. Photo at top by Per Ervland.
Schneier.com is a personal website. Opinions expressed are not necessarily those of Co3 Systems, Inc.. |


text:
By Oliver Gettell
As "Fast & Furious 6" tore into theaters over Memorial Day weekend to the tune of $120 million, it was no doubt propelled by brand recognition and sterling reviews. But "Fast 6" got an extra jolt at the box office from Latino moviegoers, who accounted for nearly a third of the film's weekend audience.
That's a disproportionately high share and an indication of a very lucrative market. According to a Nielsen report this year, Latinos represent 18% of the moviegoing population in the U.S., yet they account for 25% of all tickets sold.
Fabian Castro, vice president of multicultural marketing at Universal Pictures (home of the "Fast" franchise), said it's now standard practice for the studio to develop marketing campaigns tailored to Latinos.
"Out of our average 15 releases, we're probably promoting 12 or 13" to the Latino market, Castro said in a phone interview.
He added the "Fast & Furious" franchise, which has long drawn heavy interest from Latinos, benefits from an ethnically diverse cast, including Vin Diesel, Michelle Rodriguez, Dwayne Johnson, Tyrese Gibson and Sung Kang, and "is representative of the changing face of America."
Castro noted Diesel and Rodriguez participated in the film's Latino marketing, appearing at the Latin Billboard Awards, which took place in Miami on April 25 and were broadcast on Telemundo, and on the season finale of the Univision reality competition "Nuestra Belleza Latina" on May 19.
Jeffrey Kirschenbaum, co-president of production at Universal, said part of the reason the "Fast" films seem to resonate with Latino audiences is they have stayed true to their original ethos.
"The roots of this franchise are East Los Angeles," said Kirschenbaum, who added he was raised in Boyle Heights and Montebello.
"There's an authenticity to the cast members — who we cast in this movie, and where this movie's from, and where our characters hang out and live," he said. "You don't see, in our movies, Beverly Hills or Sunset Boulevard or Hollywood.… As this franchise has continued to grow, we've remained true to our roots, and I think audiences are going to come and say, 'Hey, I see myself represented in this movie.' And I think that's a big part of the attraction."
Over its opening weekend, "Fast & Furious 6" appealed to males and females in almost equal measure and skewed to a slightly older crowd, with 57% of its audience older than 25. According to those who have seen pre-release audience surveys, the film is likely to take in $45 million this weekend in North America.
Roberto Orci, chairman of the Assn. of Hispanic Advertising Agencies, said big action movies such as "Fast & Furious 6" tend to perform well with Latino audiences.
"The top category [for Latino moviegoers] happens to be action-adventure, and that makes sense because an action-adventure has something for everybody in the family," Orci said. "It doesn't rely heavily on dialogue, so [whether a viewer is] more acculturated, less acculturated, everybody can enjoy it." (One of Orci's sons, who is also named Roberto, is a writer and producer who has worked on the "Star Trek" and "Transformers" franchises, both of which have done well with Latinos.)
Orci and Castro noted moviegoing is often a family event for Latino households.
"There are dynamics within Hispanic culture in terms of togetherness with family that transcend into moviegoing," Castro said. ("Fast & Furious 6" is rated PG-13, as are the other films in the series.)
Castro added Universal's family-oriented animated films such as "Despicable Me" and "The Lorax" have been popular with Latinos, and Orci similarly cited Pixar's "Cars" and "Brave."
Another genre popular with Latinos (though less family-friendly) is horror movies. Castro said Universal's "Mama," which touted producer Guillermo Del Toro in its advertising, attracted an audience that was 46% Latino.
And last fall, the Times' John Horn reported Paramount Pictures' wildly popular "Paranormal Activity" franchise had been buoyed by Latino audiences, prompting a spinoff specifically targeting that demographic.
These days, Orci said, "You can't underestimate the importance of targeting marketing and advertising and the outreach" to Latinos.
He added, "It makes a big difference, because it tells the audience that they're invited to this show. We don't go anywhere we're not invited."
Source: Los Angeles Times

subset: commoncrawl


text:
Electric Underfloor Heating Mats
Our award-winning range of heating mats are simple and trouble-free to install. They offer a fast acting system for everything from a small bathroom or a large conservatory and are perfect for use beneath tile or stone floors.
Call us on 01444 247020 to see how we can help
Electric Underfloor Heating Cables
Our undertile heating cable provides you with the flexibility to install electric underfloor heating whatever your room shape or size. Our system offers a fast warm up time, and in-screed heating cables are also available for larger projects.
Call us on 01444 247020 to see how we can help
Underlaminate Floor Heating Systems
Heat Mat's Underlaminate System is made in the UK and is the perfect fast-to-fit solution for use beneath floating laminate and engineered wood floors. It features a fully earthed conductor wire for safety, an aluminium heat dissipation layer to ensure an evenly heated floor and there is no need to install a vapour barrier required by most other systems.
Call us on 01444 247020 to see how we can help
Heat Mat Accessories
We supply a large range of accessories to complement our range of under floor heating products. We offer levelling compounds and tilebacker boards designed for use with underfloor heating, and our Mirror Heat system ensures your bathroom mirrors remain condensation free after bathing or showering.
Call us on 01444 247020 to see how we can help
Electric Underfloor Heating
Thermal Insulation Board
Our UK Made Thermal Insulation Boards are ideal for insulating your floor and boosting the warm up time and efficency of your heating system. They are perfect for use beneath tiled floors and are especially suitable for use in cold rooms such as conservatories.
Call us on 01444 247020 to see how we can help
Stylish underfloor heating thermostats to suit every wall
The thermostat is the only part of your under floor heating system that you are going to see once the new floor has gone down. Only Heat Mat's thermostats are available in such a wide range of colours.
Don't let winter leave you cold
Protect your home or business from winter damage caused by sustained or severe cold-snaps.
- Prevent cracked pipes and frozen condensate pipes
- Free driveways from ice and snow, preventing accidents
- Stop gutters and roofs being damaged by ice or snow build-up
Underfloor Heating Specialists
No matter what kind of flooring you have there is almost certainly a Heat Mat underfloor heating system fit for your purpose. Regardless of whether you are a DIY fanatic or an advocate of the "get-someone-in" approach, it is remarkably easy to achieve a beautiful warm floor whatever your floor covering.
Heat Mat
Lifetime Warranty
Heat Mat's Lifetime Warranty covers your heating mats, cables or underlaminate systems
Winter solutions...
Ice and Snow Systems
Ice and Snow melting systems
for a wide range of applications.
Protect your…
Easy to install
Installing a Heat Mat underfloor heating system is simple and we are here to help every step of the way.
Easy on the environment
Underfloor heating can be very energy efficient and environmentally friendly.


text:
Rosie Jones Puts Her Funbags On Display – Drunken Stepfather | |
Marisa Miller Can Barely Contain Herself – Hollywood Tuna | |
Sienna Miller Just Gets Better With Age – Lainey Gossip | |
Shakira and Rihanna Have A Slumber Party – Lainey Gossip | |
Jennifer Lopez Gets Kinky In Leather – Popoholic | |
Lindsay Lohan Takes The Sexiest Selfies – DrunkenStepfather |
Nice pants leo-tard, you dress like my 46 year old uncle. I don't see how dicrappio, orlando blew-m, & john meyer bang all the young hollywood "actresses". Those famous girls must be really desperate & have some Mr. Magoo eyesight!


text:
The Leading eBooks Store Online
for Kindle Fire, Apple, Android, Nook, Kobo, PC, Mac, Sony Reader ...
The Complete Guide to High-End Audio
- iPhone / iPad
- Android phones & tablets
- Kindle Fire
- e-readers with Adobe Digital Editions installed
- Mac
This ebook is available for the following devices:
- iPhone
- iPad
- Android
- Kindle Fire
- Windows
- Mac
- Sony Reader
- Cool-er Reader
- Nook
- Kobo Reader
- iRiver Story
You can also read this ebook online in eb20 format without having to download anything.
Read Aloud
In this newly updated directory, the latest in cutting-edge audio equipment is provided, including how to choose the best audio equipment on a budget, how to get the best sound for the money, and how to set up a system for maximum performance. Revised and expanded to include all the latest audio technologies, this book is packed with expert advice how to make speakers sound up to 50 percent better at no cost, avoid the most common system set-up mistakes, and how to choose the one speaker in 50 worth owning. Among the new topics covered are computer-based music servers, wireless streaming of audio, high-resolution digital audio, internet downloads, HD radio, Blu-ray Disc, and the new high-resolution surround-sound formats. A short course on listening-room acoustics is presented and additional information on audio for home theater, multichannel audio, system set-up secrets, and what each component's specifications and measurements mean is also provided.
532 pages; ISBN 9780978649326
Read online, or download in EPUB or secure PDF format


text:
God bless you all. Love know no age, has no boundaries. Love is Love
I do. Same problems for me. Any time I eat wheat, I can't breath. I have to stay away from it. Last time I went out to eat something not expected had wheat in it. I was unable to breath easily for days.
Wonderful! I'll bet you are one proud grandma!
I love your covers. Can you tell me where you found the pattern or did you make it up yoursself?
Oh my, I knock on wood, so far this has not happened to me. I call our van "the tank" for that very reason.
Love the pot holders Rhonda do you have instruction for a couple of them?
I always park where most people don't park, I like the extra walking. I drive a 1/2 ton pick up and not about to give up my big truck, in fact we just bought a new one.
I used to drive a Subaru Legacy and it was so short! When I would park at work, one of my co-workers would park right next to me in her Ford Excursion! Since I would come and go as part of my work, I finally asked her if she would park next to someone else. Once I explained why she was very nice and never parked next to me again. I know this won't work in a crowded parking lot, but I agree with qultingcrazy - parking further out where there are fewer cars worked for me. My husband says things to me that he would never say to anyone else and I agree that it must be because we love each other and he is "safe" behaving that way with me. Sometimes, though, I am not sure just how "safe" he really is - lol I have been married for almost 31 years and I just let him vent and not take it personally - works for me.
I drove the same type of van and had about the same thing happen to me. From that time on I parked far away from other cars (got more exercise too) and always put my 4-way flashers on when I backed out. This seemed to help as it never happened again, but once is enough!!! My husband yells only at me, I just think it is because he know I love him and he can take his stress out on me (better for his heart) and I will do the same for him!!!Ha Ha
Thanks Lesley he was really good during the incident with the car but later on the tension had him snapping at me over other things that didnt' amount to anything. I asked him why he was so grumpy and his usual reply is because of YOU. Zach sweet soul he is looked me in the eyes and earnestly said "There is NOTHING wrong with you Grandma Rhonda!" So sweet and went right to my heart! I had also told DH he should be nice to me and not nasty. Zach said Hear that Papa? You should be nice and not nasty! How do you ignore that?? LOL
Oh my, Rhonda! It is hard to see with a large vehicle next to you -- it does happen, as the other driver said. Isn't it just amazing how much time that kind of thing can absorb?! But, all was well in the end -- granddaughter got delivered and Zach was happy and you did not have to cook! Sounds like you have a very understanding hubby, as well -- you are a lucky lady! Leslie
I will be praying for all. This has surly been a hard ordel for the whole family may you all find peace and comfort from god/
Rhonda, My thoughts and prayers are with you and the family. Take care
My thoughts are with you and your extended family, Rhonda. You will get through this together, because you have such a solid foundation. Give the g'kids extra kisses -- it will help all of you!
Originally Posted by Jeanine These potholders are great! Recently I was making something and reduced the size to half. The pieces became extremely small. Your cut down method work very well. Thank you! You're welcome I'm glad you like the process!
Originally Posted by sassey Love your potholders I need to learn your cut down method But I have to tell you your gs is the cutiest thanks Sassy! We think he is cute too! If you need any help with the cut down method just let me know!
These potholders are great! Recently I was making something and reduced the size to half. The pieces became extremely small. Your cut down method work very well. Thank you!
Love your potholders I need to learn your cut down method But I have to tell you your gs is the cutiest
Originally Posted by LeslieFrost Sounds like you're going to need a nap, Rhonda! How great for those kids to have such a loving, lively G'ma! LOL The first thing I did after they left was lay down for awhile! I'm not as young as I used to be!! I used to run a day care and I love kids but the running after them is not as easy as it once was! LOL
Sounds like you're going to need a nap, Rhonda! How great for those kids to have such a loving, lively G'ma!


text:
Home » Get into teaching » Which subjects and age groups would you like to teach? » What age groups would you like to teach? » Teaching secondary » How can I boost my subject knowledge? »
These programmes are aimed at those who have already been offered a place on a postgraduate initial teacher training (ITT) course, subject to completion of an SKE programme. ITT providers and schools make the final decision on relevant subject knowledge. If your school or provider feels that you have the right qualities to become a teacher but you need to up your subject knowledge before you start training, they will talk you through the range of SKE programmes that are available.
If you feel that a subject knowledge enhancement programme would be beneficial to your application or your training, you should speak to your chosen provider or school at the earliest opportunity.
There are currently programmes available for the following secondary-phase subjects:
As a minimum, SKE programmes comprise the equivalent of eight weeks' study, but some may be longer depending on whether you need a quick top-up or some in-depth knowledge. Depending on the individual programme, you can take this all in one go as a full-time programme, or spread over a longer period part-time, possibly through evening drop in sessions or weekend programmes.
SKE programmes are available all over England. Your provider or school will help you find a programme to suit your needs. SKE can be delivered by a wide range of suppliers, including:
A range of available SKE programmes can be viewed in the SKE directory
You should first apply to an ITT course. If the course provider or school considers you to have the attributes to make a good teacher, they may offer you a conditional ITT place and refer you to the SKE programmes in your region.
You can indicate on your ITT application form that you are interested in doing an SKE programme.
Upon your successful completion of one of these programmes, you are expected to go straight into an ITT course leading to qualified teacher status (QTS).
Post-ITT SKE courses are designed to increase the mathematics, chemistry, physics or modern languages knowledge of in-service and returning teachers.
Find out more about post-ITT SKE courses
Speak to a Teaching Line adviser live, between 8am and 8pm.
Receive tailored advice and information about teaching and find out about our new Premier Plus service.
Find information on the School Direct Training Programme – train while working in a school.
Apply online now for your chosen teacher training course.
Call the Teaching Line.
Find the answers to your questions about getting into teaching.
Follow our social media sites online.


text:
View FREE webinars from ArchitecturalRecord.com In this section you'll find presentations on business issues, strategies, trends and technologies that can help you succeed. Webinars may be viewed live on the date(s) below or on-demand following the live broadcast.
To attend an upcoming or on-demand webinar, simply click on the registration link below and complete the registration form. You will receive an email confirmation shortly after registering.
Building Codes Go Green |
Innovative Material Use in Residential Design |
Code Green |
Sponsored Webinars |
How Will Architects Influence the Future of Sustainability To truly optimize the performance of a building, energy analysis should happen early and often. Architects can have a lasting impact on the built environment by integrating performance-based analysis from the earliest stages of design.
Join our panel of architects and sustainability experts for this discussion and our live Q&A to address your questions |
Best Green Projects: Case Studies in Sustainable Design Success |
BIM for Small & Medium-Size Firms |
Schools of the 21st Century: Creating Green Models that Engage Students & the Community |
House of the Month: Case Studies |
Combining BIM with Alternative
Project Delivery |
BIM & Single-Family Residential: Using Technology to Lower Costs, Speed Construction, and Improve Performance |
Recently Posted Reader Photos
----- Advertising ----- |
Most Commented | Most Recommended |


text:
Join Listal to create lists, share images, get recommendations and much more
Kris Kristofferson
StatsBirth Name: Kristoffer Kristian Kristofferson Age: 77, born 22 June 1936 Born and residing in: United States Height: 5' 11" Relationship Status: Married Partner: Lisa Meyers Lists44 votes
Sex symbol of every decade(male)
(31 items)list by Natalia Published 3 years, 3 months ago 12 comments
23 votes
Directed by Tim Burton
(198 items)list by diabolical dr voodoo Published 3 years, 10 months ago 2 comments
15 votes
Directed by Martin Scorsese
(209 items)list by diabolical dr voodoo Published 3 years, 8 months ago 2 comments
View all Kris Kristofferson lists
Kris Kristofferson's father was an Air Force general who pushed his son to a military career. Kris was a Golden Gloves boxer and went to Pomona College in California. From there, he earned a Rhodes scholarship to study literature at Oxford. He ultimately joined the army and achieved the rank of captain. He became a helicopter pilot, which served him well later. In 1965 he resigned his commission to pursue songwriting. He had just been assigned to become a teacher at West Point. He got a job swee
... (more)
View all Kris Kristofferson movies (74 more)
View all Kris Kristofferson TV (36 more)
View all Kris Kristofferson music (15 more)
BooksUpdate feed |


text:
Si Robertson
Howard Books
The brother of Duck Dynasty patriarch Phil Robertson, Uncle Si, tells stories from his childhood, his Vietnam days and his duck-hunting exploits. He also talks about his wife and two children, who are rarely mentioned on the A&E reality TV show that often includes overtly Christian messages.
Contribute to this story
- Comment
Charisma News
on your phone.
Click here.


text:
Lions Club provides a great service at Pendleton County Health Fair |
The combined efforts of the Butler and Falmouth Lions Clubs made it possible for participants to receive free eye examinations during the recent Pendleton County Health Fair held at Phillip Sharp Middle School on Saturday, March 28. The Lions Club was able to borrow the two eye testing machines from the Florence Lions Club which enabled them to do a large number of exams. During the three hour screening period they were able to complete 67 exams and found that 15 of those participants needed follow up. |


text:
Big 12 notebook: Baylor's Lache Seastrunk sticks to Heisman prediction
Baylor's glittering new stadium, which opens in 2014, was a popular topic with coach Art Briles Tuesday.
But before the stadium even came up, the Bears' new metallic-gold helmet created plenty of buzz.
The new lid could be viewed as a meaningless piece of equipment. But in the day and age of wild college football uniforms, Briles is pleased his team remains on the cutting edge.
"I've seen people up here hurt their neck looking back and wondering what was coming at them," he said. "That's huge. And thank goodness we have people bold enough in our administration and our board of regents that they're not saying, 'Coach, I don't know…'
"We don't have people walking on glass and wondering if it's gonna break or not. We've got people who are visionaries … that are proactive about being trendsetters. Nobody's gonna follow somebody that did it 15 years ago, not a 16-year-old. But they'll jump on board today if they like what's happening."
Of course, the shiny stadium and shiny helmets come at a perfect time. Baylor is coming off three straight bowl seasons, including 10-3 and 8-5 records the last two years, and now the Bears are picked fifth in the Big 12. They received the first two first-place votes in the Baylor's Big 12 history.
"I don't know how many people vote, I guess 25," Briles said (actually 43). "I was wondering why those other 23 didn't believe in us. It just shows, I think, that we're gaining some respect. We're certainly not where we need to be or want to be or going to be, but we got one foot out of the water and on the land. We're gaining ground.
"That's what we'll continue to keep doing by recruiting good kids, coaching them hard, and letting them play hard on Saturdays."
Iowa State has a funky schedule to open the season. Until Oct. 12-19, the Cyclones have no back-to-back Saturday games.
But ISU coach Paul Rhoads isn't complaining too loudly. He knows what a game on a non-Saturday can do for a program's profile. His 2011 Cyclones upset second-ranked OSU 37-31 in double overtime on a November Friday night that still is paying dividends for Iowa State.
"It was a national stage that recruits, that fans of the game, that fans of Iowa State got to see in all parts of the country," Rhoads said. "What that really did for us is gave us instant national recognition.
"I don't think some folks in some parts probably recognized Iowa State football as being capable of playing on the national stage, and then I would say, without a doubt, it's the biggest victory in the history of our program.
"So now to walk in as a recruiter or just an ambassador of the university has been magnified several times fold with that victory."
This season, Iowa State hosts Texas on a Thursday night, Oct. 3.
"The national exposure without a doubt is fantastic for our university, for recruiting efforts, and so forth," Rhoads said. "Here in 2013, it's what it is. There's some trade in there, and you've got to trade the good for the bad, so to speak, but it is going to create challenges."
Texas has switched to an up-tempo spread offense, with Brown highlighting Ash's experience allowing the Longhorns to run that style of system.
But Brown actually thinks the change will most benefit his defense.
"Last year I saw, during the season in our league, defenses having trouble getting defensive calls in the game because nobody was substituting and the ball was being snapped so quickly," Brown said. "I also saw that players were getting very tired across our league on defense, big guys were having trouble rushing the passer, they were having trouble getting out of the game because people weren't substituting.
"We felt like it was a real disadvantage to our defense that they didn't get to see tempo at any time during practice. They handled it much better this spring because they saw it every day.
Iowa State senior defensive back Jacques Washington has transformed his body since the end of last season.
"I've cut my body fat down," Washington, the senior from Owasso, said. "I've lost a lot of weight, taking care of my body better, stretching and just really trying to stay healthy."
Washington started all 13 games last season, finishing with 90 tackles and three interceptions.
Washington was one of two former Rams standouts at media days, joining Oklahoma's Aaron Colvin.
"It shows what type of team we had," Washington said. "Owasso is becoming a powerhouse in Oklahoma. Hopefully they'll turn the corner and win a state championship."
Trending Now
- 30049Michael Behenna released from U.S. Disciplinary Barracks
- 19213Car salesman wants to build fortress-like home in Edmond
- 13299Oklahoma City woman killed while helping dog in street
- 11197Prep Hoops Live: Class 2A-6A State Tournament
- 11084Oklahoma defensive coordinator Mike Stoops on Thursday's practice: 'We looked like we wanted to go on spring break'
- 7005John Daly shoots highest round of career, including a 12 on a par-4
- 6545OU football notebook: Blake Bell doesn't miss blue jersey


text:
Excellent service from start to finish
Review by confirmed purchaser
Having received a small pension pot quite unexpectedly I googled pension advice and pushed the button for my pension expert not really knowing what to expect. I was contacted by Peter Keenan of My Pension Expert fairly quickly after making the initial contact and discussed the various options. Peter organised quotes for a annual pension and obviously small pot small pension. On further discussion with Peter he suggested an alternative solution which made far more sense and as a result I went along with this option. The whole process has been managed by Peter and the admin team with great professionalism and expertise. On the whole it has been a painless and quick exercise and I would recommend them to anyone.
Many thanks to one and all, I am just off to spend my lump sum!!!!
Many thanks to one and all, I am just off to spend my lump sum!!!!


text:
You must log in to access this feature. Sign in with Twellow or Facebook to get started.
By signing in to Twellow, you indicate your agreement to our terms of service.
or, connect with Facebook.
Privacy Policy | Terms of Service
Click the button above and you'll be taken to your Twellow profile editor.
Simply connect with Facebook and kiss those password blues away, or go here to reset your password.
Marketing Consultant & owner of #GlobalRhythmz underground/indie artists get at us! G-Radio, GR Management, GR Festival...Istanbul Spring 2012 BBM: 314CBAF3


text:
Loading feed
50 members
506 members
655 members
598 members
638 members
Added by Adrian Petersen
Added by Adrian Petersen
Hello, Adrian! I LOVE your blog. The header with the photos that open up is wonderful. Now I want to change my header. Can't wait to read more!
Phil Done
Posted on April 26, 2009 at 10:48am — 1 Comment
... learn more
© 2014 Created by TBEX Admin.


text:
Costco Gets In On The Two Day Samsung Sale Fun T-Mobile's not the only one getting in on the Samsung Two-Day sale as Costco launches their "4G Samsung Smartphone Sale." Running for two days only, today November 16th and tomorrow, November 17th, Costco's special offer is on the Galaxy S II and Galaxy S III devices. The deal requires a new two-year agreement (new lines and qualifying upgrades )on any Classic Unlimited Talk and Text plan along with qualifying Unlimited Nationwide 4G … [read full article]
T-Mobile's Two-Day Samsung Sale Kicks Off This Morning Todays the big day as T-Mobile's two-day Samsung sale kicks off this morning with a host of special pricing on the company's Samsung lineup. New and existing eligible customers can take advantage of this sale and it does work for both Classic and Value Plan customers. When signing up with a two-year agreement and any qualifying plan, customers will receive a mail-in rebate for the total out-of-pocket cost on Classic plans and … [read full article]


text:
Top Apps
- Audio & Video
- Business & Enterprise
- Communications
- Development
- Home & Education
- Games
- Graphics
- Science & Engineering
- Security & Utilities
- System Administration
Showing page 1 of 7.
phpMyAdmin Bringing MySQL to the Web
62,504 weekly downloads -
Adminer Database management in single PHP file
7,531 weekly downloads -
Vtiger CRM Vtiger CRM enables sales, support, and marketing teams to organize and collaborate to measurably improve customer experiences and business outcomes. Vtiger CRM also includes email, inventory, project management, and other tools, providing a complete the business management suite. Download Vtiger CRM here or sign up for a free 15-day free trial of the cloud-based application with free updates and support at https://www.vtiger.com/
7,968 weekly downloads -
Vertrigo Complete web server environment (WAMP) for Windows.
3,342 weekly downloads -
TestLink Test & requirements management
2,114 weekly downloads -
Gammu Cellular manager for mobile phones/modems
1,792 weekly downloads -
Tiki Wiki CMS Groupware The Free and Open Source Web App with the most built-in features
1,103 weekly downloads -
webERP Accounting & Business Management Accounting & Best Practice Business Administration System
1,036 weekly downloads -
CKEditor FCKeditor (retired)
914 weekly downloads -
XOOPS Web Application Platform XOOPS is one of world's leading open source CMS and portal systems, written in PHP for the MySQL database. Its object orientation makes it an ideal tool for developing small or large community websites, intra company and corporate portals, weblogs and much more. Founded in 2001 by group of international software developers, XOOPS quickly become one of world's leading Open Source Content Management Systems (CMS). Known and loved for its ease of use and countless powerful modules, XOOPS received numerous International Awards and Recognitions, including being the Top 5 finalist of the 2008, 2009, and 2010 CMS Awards by Packt Publishing. In January 2009 it received the 2008 China Open Source Software Contest Award and in October 2010 the "Best Technology Award" from Northeast Asia OSS Forum.
894 weekly downloads -
Dev-PHP IDE Dev-PHP is a well-featured IDE for PHP. Fast and powerful, it is easy to use and has a lot of cool features : class browser, scripts preview, integration with PHP parsers, PHP-GTK library, and Xdebug of course. Dev-PHP-usb slips even into your pocket.
678 weekly downloads -
Claroline Claroline is collaborative learning environment based on PHP/mySQL. It allows teachers or education institutions to create and administer courses through the web. The software provides group management, forums, document repositories, calendar, SCORM,...
668 weekly downloads -
EPESI - web CRM/ERP & PHP/AJAX framework Web CRM application to store, organize and manage business records
607 weekly downloads -
AJAX Chat - Open Source Web Chat Fully customizable web chat created using AJAX.
456 weekly downloads -
PHP Address Book Simple, web-based address & phone book
446 weekly downloads -
CARE2X - Integrated Hospital Info System Integrated Hospital Information System. PHP,mySQL,PostgreSQL. Surgery, Nursing,Outpatient,Wards,Labs, Pharmacy, Security,Admission,Schedulers, Repair, Communication & more. Multilanguage, WYSIWYG forms, userconfig, embedded workbots. Modular & scalab
416 weekly downloads -
todoyu Features: web2.0 project- & task-management, timetracking, team organizing, resource management, calendar, interface for your clients and lots more! Content: see license.txt (file section).
336 weekly downloads -
WebIssues Issue tracking and team collaboration system
363 weekly downloads -
phpMyBackupPro phpMyBackupPro is the MySql backup tool - especially without ssh!
332 weekly downloads -
Simple Groupware Simple Groupware is a complete open source enterprise application offering email, calendaring, contacts, tasks, document management with WebDAV, synchronization with cell phones and Outlook over SyncML, full-text search and many more.
312 weekly downloads -
phpSysInfo phpSysInfo is a customizable PHP Script that parses /proc, and formats information nicely. It will display information about system facts like Uptime, CPU, Memory, PCI devices, SCSI devices, IDE devices, Network adapters, Disk usage, and more.
226 weekly downloads -
phpMyChat phpMyChat is an easy-to-install, easy-to-use multi-room PHP/DB chat. It is currently available for MySQL, PostgreSQL, and ODBC, and the work on Oracle is in progress. It supports IRC-like commands, moderators, and is available with 37 languages.
218 weekly downloads -
AutoIndex PHP Script (Directory Indexer) AutoIndex is a PHP script that makes a table that lists the files in a directory, and lets users access the files and subdirectories. It includes searching, icons for each file type, an admin panel, uploads, access logging, file descriptions, and more.
288 weekly downloads -
152 weekly downloads -
Nucleus CMS Nucleus allows you to easily maintain your own weblog(s) on your own server. It offers a system that is easy to install, but still offers maximum flexibility. (PHP5/MySQL)
132 weekly downloads


text:
Almost in all sappy novels, there is a supportive, slightly crazy, mostly violent,understanding, over protective, avenging, bitchy character as the protagonist's bestfriend/sister. She is always there for her friends, swears to mutate the dog that dares to break her friends' heart, ready with an ice-cream tub and effctive punches. She is always up for a laugh and is often unintentionally, a source of humor due to her possible craziness. Well, meet me, I am that kind of girl. Feminist at heart and a possible ADHD. My mind is always in the gutter, so do complete sentences when talking to me. I write to vent out my feelings, so I mostly write non-fiction or poems. I have anger issues, I do not lie, mostly. I won´t lie to be nice. I am quite violent. (I bite!) I have got best friends (@aditigupta6 ) that I can trust my life with and they don´t mind when I swear at them. (And I swear a lot) I am allergic to jerks, they make me raise my hand up and let it meet with their face. When I joke about something, I am usually serious about it and when I am serious about something, I must be joking! ~~~~"I can't write a romance to save my life!"-Percikingdawn P.S. Some of the covers below are drawn by me. ^_^ My stalkees and stalkers! @Prisim My ultimate stalkee who manages to stalk back. @PjMalone She thinks she is a better stalker. Dream on girl/guy. @dreamingthought Mary/Jessica an ex-awesome stalker /stalkee @_Padfoot_ fellow Indian and engineer in training. @parogar awesome author and friend. (cave-in) @musiq4lyf troll friend @avenger_i_am companion of all times ~~~~~~~~~~~~~~~~~Whats hot but sucks is here: http://www.wattpad.com/story/1566167-i-fell-in-love-with-a-mary-sue with a new title.
Five |
Procrastination for dummies (completed)CAUTION: Dummies without strong hearts are requested to go back to their responsibilities and duties. Enter the world of procrastination and learn through the master. Procrastinating since 1995. |
Candace And Candies (Completed)He lunged for the girl, unwary of the danger he was putting himself in. The girl´s eyes dilated in fear which gave a twisted shock of pleasure to him, one si... read more |
An eye for an eyeAakriti just wanted to get a good college and when there were obstacles in her path, she decided to go blind and just ram her way through them or fall face-first? |
Twilight (Kanpuriya ishtyle) |
Moksha (Attys)"I am so happy cause today I found my friends, they are in my head."-Kurt Cobain |
Stalker GamesTwo are forced to enter. Only the winner gets to feed their friends. In the ruins of a place once known as Wattpad lies the nation of Wacooty. This year, the districts are ... read more |
The wonders of Google Translate and Bollywood. |
Acerbity Of A Forlorn Soul (poetry)Why should we strive, with cynic frown, to knock their fairy castles down? -Eliza Cook |
Limericks |
No more messages.


text:
Select () or exclude () categories to narrow your recipe search.
As you select categories, the number of matching recipes will update.
Find exactly what you're looking for with the web's most powerful recipe filtering tool.
Prep Time:
Cook Time:
5 mins
35 mins
This is an extremely easy recipe for the cooks-on-the-go. I got this recipe from the back of the cans of Del Monte Cut Green Beans. I can easily fix this recipe in a hurry and on a budget and my DH LOVES it. You cannot go wrong with this one... Cheese might even help - you know I add cheese to everything - that is why I am "CheesyGal."
Save this recipe in your online cookbook to access when you need it.
Add this recipe to a weekly meal plan.
Add this recipe's ingredients to your weekly shopping list.
Note pairing ideas, substitutions and more - only you can see it!
Spot a typo or missing ingredient? Submit your correction for review.
Get answers about this recipe in our Cooking Q&A forum.
Units: US | Metric
Serving Size: 1 (218 g)
Servings Per Recipe: 6
The following items or measurements are not included:
French-fried onions