text:
Anyone Else Feel Bad for Remmick?
View Single Post
June 11 2013, 01:37 AM
Fleet Captain
Location: The Captain's Table
Re: Anyone Else Feel Bad for Remmick?
Timo wrote:
The cute and somewhat Roddenberrian thing about "Coming of Age" is that when Remmick drops the Internal Affairs act and says that he'd consider it a privilege to serve on the
, it very much looks as if our heroes would actually welcome him there. Sure, Picard at first gives the stereotypical icy silence combined with The Look (TM), but he gets over it, and in the very next sentence says he's not holding the events against Remmick.
I'm sure Picard also appreciated that Remmick performed his duties well. Internal Affairs is antagonistic by nature, and if Remmick made people uncomfortable by conducting his investigation, he was doing his job exactly as he was supposed to, something that wouldn't be lost on Picard.
"Many things seem clever to an imbecile."
--Captain Thelin th'Valrass,
USS Enterprise
-- "The Chimes at Midnight"
View Public Profile
Send a private message to Sran
Find More Posts by Sran


text:
Log In | Register
November/December 2014 | Michael Strahan
Magazine Subscription/Gift
Digital Subscription
Customer Care
Find a Retailer
Subscribe to Cigar Aficionado and receive the digital edition of our Premier issue FREE!
[ Added Sep 24th, 2012 by Susan Vogel ]
Coleen Herrick smoking like a Lady!!
While enjoying The Cigar festival in Ybor City, Tampa Fl
- or - Zip:
Introducing a FREE newsletter from the editors of Cigar Aficionado!Sign Up Today
Copyright © 2013 Cigar Aficionado Online

subset: commoncrawl


text:
Top Naturalistas on Instagram You Must Know view
Pompadours and Milkmaid Braids Take Over The Harlem Fashion Row Runway view
Get The Look: David Tlale NYFW '15 view
Slick down your edges with this Edge Holding Gel before securing your cornrows. Add a...
Slick down your edges with this Edge Holding Gel before securing your cornrows. Add a bit more right before you bust a sweat and tie a scarf around your hair to prevent frizz. $5.50, available at DrMiracles.com
Customer Service | E-mail Newsletter Sign-up | Subscribe to Essence | Give a Gift of Essence | Change Your Address | Renew Your Subscription | Pay Your Bill | Questions & Comments
Bios | Contact Us | Essence Crosswords | Job Opportunities | Internships | Media Kit | Our Company | Site Map | Writer's Guidelines | Magazine Tablet Edition
© 2014 Essence Communications Inc. All Rights Reserved | Privacy Policy | Your California Privacy Rights | Terms of Use | Essence.com Advertising Terms | AD CHOICES


text:
Finance :: Saving
India to Foreign CEOs: 'We're Waiting for You'
India's finance minister is urging foreign investors to help plug enormous gaps in the country's infrastructure blamed for holding back growth. "We are waiting for you," Arun Jaitley told a roomful of international and Indian CEOs.
US Stocks Slide as Oil's Slump Hits Energy Stocks
Stocks were mostly lower on Tuesday, led by a drop in energy stocks as the price of oil continued to fall. Investors were also disappointed by earnings outlooks from companies including Priceline and Michael Kors.
Small Business Divided Over Minimum Wage Votes
Some small business owners say raising the minimum wage will pressure their companies, forcing them to cut employees' hours or jobs. Others say it's the right thing to do for workers and the economy.
Apple CEO Tim Cook Says Apple Pay a Success
Apple CEO Tim Cook said Apple's new mobile payment system had over 1 million activations in the first three days after it became available, and is now more widely used than any competing payment system.
Apple Pay Q&A: What You Need to Know
Apple's mobile payment system, Apple Pay, made its debut Monday. Now you can flash your new iPhone in the checkout line to pay for food, clothing and other goods. There's no need to pull out your credit card.
IBM 3Q Disappoints as it Sheds 'Empty Calories'
IBM disappointed investors, reporting weak revenue growth again and a big charge to shed its costly chipmaking division as the tech giant tries to steer its business toward cloud computing and social-mobile services. Shares fell more than 7 percent.
US Retail Sales Fell in September on Autos and Gas
U.S. retail sales retreated in September as purchases of autos, gasoline, furniture and clothing slowed, a sign that recent job gains have yet to significantly boost consumer spending.
Consumer Borrowing up $13.5 Billion in August
U.S. consumers increased their borrowing in August in the category that covers auto loans and student loans but cut back on their credit card borrowing.
US Predicts Lower Heating Bills this Winter
It probably won't cost as much to stay warm this winter because a repeat of the deep freeze that kept much of the nation shivering last winter is so unlikely.
GM Looks to New Vehicles, China to Boost Profit
General Motors CEO Mary Barra told investors that GM plans a raft of new models and a big push to sell more cars in China to drive profits in coming years, trying to shift the spotlight from a mishandled recall of older small cars.


text:
There's a reason Sony Pictures Classics is moving up the release date of "The Invisible Woman" to Christmas Day. They think they may have the goods to make a go at an awards season play. This Ralph Fiennes-directed movie is world premiering at the Toronto International Film Festival, one of many pic...Read More »
The producers of "Doctor Who" announced their choice of Peter Capaldi Sunday on a live TV special on BBC One and BBC America -- the 12th actor to portray the Time Lord with two hearts in the world's longest-running scripted television series. But London's bookies already knew.Read More »
The Starz network has announced the USA television premiere of the musical drama Dancing on the Edge, an original miniseries from writer/director Stephen Poliakoff, which stars Chiwetel Ejiofor (an actor who's set to have a really good second half of 2013 with 3 films he stars in debuting).Read More »
An excerpt from a chat with the producers of the film adaptation of Half Of A Yellow Sun that I thought worth sharing.Read More »
As reported earlier, Biyi Bandele's Half Of A Yellow Sun - a film adaptation of celebrated author Chimamanda Ngozi Adichie's Orange Prize-winning novel of the same name - will make its World Premiere at the Toronto International Film Festival.The long-awaited, much-anticipated film adaptation, Bande...Read More »
There's going to be a lot of Chiwetel Ejiofor coming your way by the end of the year. Next month he'll star in the drama "Savannah" opposite Jim Caviezel which opens in limited release, and of course he's the lead in the Oscar touted "12 Years A Slave" which is headed to TIFF. But the actor has anot...Read More »
DreamWorks' World premiere of Bill Condon's "The Fifth Estate" will open the 38th Toronto International Film Festival announced that the world premiere of Festival on September 5; the fest will close on September 15 with the world premiere of Daniel Schechter's "Life of Crime."Read More »
I was able to confirm directly with the festival programmer/curator Keith Shiri, that long-awaited, much-anticipated film adaptation of celebrated author Chimamanda Ngozi Adichie's Orange Prize-winning novel, Half Of A Yellow Sun, will be the opening night film at the Africa International Film Fes...Read More »
On the heels of Tambay's Book-To-Film report yesterday, I had an opportunity to read a 2011 draft of the adapted screenplay for Steve McQueen's 12 Years A Slave, a film we've been eagerly anticipating and debating about for many months now. We know Chiwetel Ejiofor is slated to play Solomon Nor...Read More »
NOTE: If you don't like spoilers, I strongly suggest that you skip this entire post. I don't give everything away, and we don't even really know with certainty how different the film will be from the novel. But just a precaution.Read More »


text:
I died.
Bravo, Alexander Wang, for capitalizing on people's desperation.
There was a time in my life when I used to carry (and check-in) designer luggage — back in the days when traveling was a luxury, you know, the odd once or twice a year vacation somewhere far-flung. Wind the clocks forward and traveling is no longer a luxury but an essential and necessary part of my work. I could be in Marrakech one week, Bali the next, and Sydney the other. There are days when I'd wake up in a hotel room and have no idea what time or what day of the week it was. A few friends of mine often joke how I travel more than a pilot.
When you log miles like crazy, it's practical to ditch your pricey luggage in favor of something sturdy but cheap and disposable. I never understood all these people who are shocked, especially on twitter and instagram, why I use relatively inexpensive bags. For years, I used this unnamed black trolley/roller bag from Chinatown, bought for no more than $30 many years ago, and had traveled to more cities than James Bond. I dubbed the bag my 'tranny case' because it kept everything and EVERYTHING I needed, life essentials and all that. It was sturdy as fuck, have been with me through thick and thin, desert (Salt Flats, Utah) and through four feet of snow (Stockholm, Sweden). You should've seen how distraught I was when my modest trolley bag died earlier this year. I dropped it on an empty escalator at Zurich airport and the handles broke, rendering the poor case useless.
For two months, I couldn't decide whether I should buy another inexpensive case or to go for an upgrade. I finally bit the bullet when I visited Bologna last week and bought myself a Louis Vuitton Keepall 45 and Pegasse 55 in the classic monogram canvas. They keyword here is CLASSIC. I could've opted for Goyard or something a little discreet such as Epi or Taiga leather at Vuitton but no. No, no, no, no, no no no. And NO to Damier canvas. I often think of the phrase 'false humility' whenever I see people carry Damier canvas because in their minds, they WANT something that screams "LOUIS VUITTON" but without the monograms so it's kind of like counterproductive. Talk about a whole new level of cray. If you're gonna go for Vuitton, go for the kill. More is more, pile on the logos, pile on the monograms. It doesn't hurt to be obnoxious from time to time.
Here are a few snippets from John Galliano's first television interview (on Charlie Rose) following his ousting at Christian Dior.
Click HERE to watch the full interview.
I popped over to the Calvin Klein Collection showroom earlier this afternoon to see the Resort 2014 collection by Francisco Costa. I couldn't stop myself from touching the oh-so-chic ultrasuede pieces; love the green coat on the rack, the short, boxy white jacket and the long-sleeved blue top with the zip on the back. It was refreshing to see Francisco use denim. I also love the colourful collaboration with the artist Ellsworth Kelly. Not shown on the runway was this amazing, graphic, black and white printed jacket and trousers; had my name all over it. Want. Love. Need.
Click click click for more photos of the collection, including accessories!
Coming this fall — Isabel Marant for H&M! I know a million girls who would queue for this collaboration.
Naomi, Linda, Kristen and Cindy! This video of Naomi Campbell hanging out with her fellow supermodel mates in a hotel room is pure gold. Watch!
Special congratulations to the lovely Rebecca Minkoff for winning the 2013 American Apparel Footwear Association (AAFA) American Image Awards Designer of the Year!
On me: Jacket, trousers by DSquared2, shoes by Louis Leeman, bag by Rebecca Minkoff
Oh Francisco! I had a lovely time catching up with Calvin Klein Collection's Womenswear Creative Director Francisco Costa in Savannah. Francisco is this year's recipient of the Andre Leon Talley Lifetime Achievement Award by the Savannah College of Art and Design.
Bryanboy: A lot of young people go into fashion design with the dream of one day pursuing their own label. Considering your path, would it be ideal to contribute to the work of existing designers or focus on developing themselves as a brand?
Francisco Costa: They have to focus on developing their own personality and then everything will fall into place. When I ended up at Calvin Klein, I felt like this is an ideal situation because it is a brand with so much strength and I really try to bring what I like in combination with what Calvin did. I feel very blessed to have such a structure under me, but I'm also very nurturing to young students.
For instance, I had somebody that I hired temporarily who was an architecture major and had no idea what fashion was. So I said, "come work for us and see how you like it." He showed interest. After awhile, I hooked him up with this one organization which held an international contest. Next thing you know, he was one of the participants and he ended up becoming very successful with it. Then he came to me after winning the contest and asked me what he should do next. I said, I don't know, go open your own business because I felt like it's the right time. This is a guy who has a lot of talent. But then again, maybe he is young enough and he could explore. Every experience is individual, right?
I've been working for a long time. Andre Leon-Talley came to me a long time ago, when I used to work for Gucci. I was in London and he asked me, "why don't you open your own business?" I said, "Andre, I am truly happy." I made a conscious decision not to. I could have done something, I could have played, I could have. But in retrospect, I am extremely happy.
Bryan: Speaking of Gucci… Tom Ford is known for his va-va-voom, high-octane, glamazon aesthetic whereas Calvin Klein Collection is the polar opposite — pure, luxurious, modern American sportswear. How did you refine your aesthetic considering the differences between the two brands?
Francisco: Interestingly enough, what Tom Ford did was really based on Calvin's aesthetic. All the advertisements, the imagery, the sexiness — they were all very, very strong and very Calvin in many ways. So I don't think that was a challenge so much because, you know, we are talking about the same thing.
The primary challenge for me was, as the business grew bigger and bigger, after it was sold it went from $700 million to $8 billion, the company exploded into so many different areas. The challenge for me is to keep that flame of the collection genuine and really protect it. So whatever it is that we are doing has to have a true essence and not just an essence, but a personality that wouldn't be mixed up with all the other products in other categories.
Bryan: That's another question for me — how do you bridge Calvin Klein Collection, your collection, which is very architectural, pure, modern and very technical whereas whereas the general public's perception of Calvin Klein the brand? You have sexy, you have provocative, you have underwear, you have fragrance… how do you bridge the two?
Francisco: It's all about securing that high-level position. A brand can actually exist both in high-end and low-end categories. It's seamless. It's totally seamless. If you think of the Calvin Klein lifestyle, you get it. A woman is able to explore both ends of the spectrum. One can have extraordinary clothes, very fine clothes while at the same time, have a lifestyle that's cool. The juxtaposition is very modern. A cool woman goes shopping and mixes it all up today. I think that's the most exciting part because it reflects independence.
Bryan: You're one of the very few designers who actually push new fabrics, new, modern techniques in fabrics. What's your relationship with fabric?
Francisco: I love fabrics! That's the most organic part of designing because its tactile and you have to be part of the development. For example, for Fall/Winter 2013, it took me three years to get certain mills to agree to develop the same kind of fabric. Because you buy cashmere from one mill, you buy suiting fabric from another, you buy this from another, so you have to make them agree to make the same thing at the same time. It's very costly for these people to change their techniques and what have you. A lot of fabrics for fall, for instance, those are actually woven and not cut-out.
I could have achieved that by cutting and boiling but I didn't. It thrills me to be experimental — this is how you learn about the essence of fabric. Experimentation triggers fabric mills to create other things and further their development. It's the same experimentation that would be seen two, even three seasons later. It's all a great exercise.
Bryan: Do you start your design process with fabric itself or do you conceptualize shapes and silhouettes before deciding which fabric to choose?
Francisco: It goes both ways. A collection starts with an idea and could take up to years to materialize. And then all of sudden, you saw something on the street that inspires you and feels really relevant and it's just this is the way to go. The design process comes in very different forms but ultimately, fabric is really the catalyst for a collection to work or not.
Bryan: If your next ten years of work could be described into one word, what would it be?
Francisco: In one word?
Bryan: Go on…
Francisco: I think it's… I could give you three words (both laugh)
Bryan: Three is good!
Francisco: I think what I do is, you know, essentially provocative, strong and current and strong in many ways. If it had to be described in one word, I would have to say having a pulse. Pulse, pulse.
I'm deeply in love with this chic, gold-plated bracelet from Saint Laurent. I don't know what it is but I'm currently obsessed with touches of gold lately. Just a teeny, weeny, slight Midas touch. I think it has something to do with a recent trip to Home Depot to find the right shade of gold to paint certain things in my apartment.
Click HERE to buy or for more information.
Don't forget — tune in at 8PM Eastern Time to watch the prestigious SCAD (Savannah College of Art and Design) Fashion show.


text:
2014-2015 Human Rights Scholars Announced
Rapoport Center Press Release
October 16, 2014
Three UT law students have been selected as Rapoport Center Human Rights Scholars.
Fall 2014 Undergraduate Interns Selected
Rapoport Center Press Release
October 16, 2014
Three UT undergraduate students will intern with the Rapoport Center during the fall semester.
Summer Heat Kills Inmates in Prisons, and That Needs to Change
University of Texas KNOW
June 26, 2014
Every summer, the TDCJ subjects its prisoners to deadly temperature and humidity levels, and violates prisoners' human and constitutional rights and their rights to health, life and dignity.
Rapoport Center Administrator Billy Chandler Wins President's Outstanding Staff Award
Rapoport Center Press Release
May 7, 2014
The Outstanding Staff Awards Program recognizes UT Austin employees who have made outstanding contributions to the continuing success of the university.
Rapoport Center Announces its Summer & Fall Fellows for 2014
Rapoport Center Press Release
May 5, 2014
Eleven UT law students have been selected as Rapoport Center Fellows for this summer and fall.
Faculty affiliate Barbara Hines awarded the 2014 Tower Award for Outstanding Service-Learning Professor
April 29, 2014
Prisoners Dying from Human Rights Abuses in Texas Prisons
April 22, 2014
The Human Rights Clinic has released a report, Deadly Heat in Texas Prisons, that claims that conditions in TDCJ prisons violate the human rights of its inmates.
Faculty affiliate Denise Gilman wins major FOIA battle related to construction of Texas-Mexico border wall
The Daily Texan
March 25, 2014
Six years after her initial request for public records regarding federally built fences along the Texas-Mexico border, UT law professor Denise Gilman has passed a significant barrier in receiving the documents.


text:
* Serviced Offices Finchley Road, NW3 - Office Space to Rent Finchley Road
OFFICE SPACE in Finchley Road , NW3 London. Call on 08000 77 3780 or 02036429748 with all booking and general enquiries or for more information on this location. We are proud to announce the launch of brand new modern luxurious serviced furnished
- Date available: 30 Sep 2014
- Agency


text:
Darren Wilson Has a 'Clean Conscience'
In his first interview, he says Michael Brown's death doesn't haunt him.Margaret Hartmann
In his first interview, he says Michael Brown's death doesn't haunt him.Margaret Hartmann
Amid more violence in Ferguson, thousands blocked NYC streets and bridges.Margaret Hartmann
Leveling the playing field.Annie Lowrey
Why many were dissatisfied with the president's remarks last night.Jonathan Chait
The rapper, producer, painter and collector shows the scope of his ambition in Miami.Matthew Giles
Eye-catching gold nail-polish, butt-sculpting classes, peach-clementine-scented soaps, and much more.
This week's advice.Heather Havrilesky
"He's getting nothing," said a network spokesman.
After fatal NYPD shooting earlier this week.Vulture
And more on Harrison Ford's role.
That's what he just told George Stephanopoulos about the day he killed Mike Brown.The Cut
NYC could get anywhere from four inches to a foot.
"There is no good time."
"It's like there's no value for black life at all."
There is only one true long-term threat to the legendary bookstore, and it comes from within.
What gives the storytellers the right to parse through the very private details of other people's lives?


text:
Home » Opinion » Columns
Jonah Goldberg: GOP comes to mean Grand Old Potshots
Conservatives with long memories had to laugh at the recent New York Times front-page headline: "Fiscal Crisis Sounds the Charge in GOP's 'Civil War.'"
That diagnosis largely hangs on the judgment of 1970s New Right direct-mail impresario Richard Viguerie, whose ears have been ringing with the thunder of Fort Sumter for a quarter-century.
Within a week of Ronald Reagan's 1981 inauguration, Viguerie was denouncing the Gipper as a traitor to the cause. The Associated Press ran a story headlined "Conservatives Angry With Reagan." Viguerie was the centerpiece: "Almost every conservative I have talked to in the last two months has been disappointed in the initial appointments to the Reagan Cabinet."
By July of that year, the Washington Post ran a news story, "For Reagan and the New Right, the Honeymoon Is Over," which included many anti-Reagan barbs. After the 1990 midterms, Viguerie told USA Today, "You just heard the opening shots of a civil war within the Republican Party."
Then again, just because Viguerie is predicting something doesn't mean he's wrong. I've always loved the story of the British intelligence officer whose career spanned the first half of the 20th century: "Year after year the worriers and fretters would come to me with awful predictions of the outbreak of war. I denied it each time. I was only wrong twice."
In 1984, Viguerie wrote a book, "The Establishment vs. the People," that could probably be republished today with only a few edits. Viguerie touted "conservative populism," while the vogue today is "libertarian populism." Ideologically, the key difference is that conservative populists believed the left was the true enemy, while libertarian populism takes dead aim at big government, whether run by Democrats or Republicans.
But the more important distinctions aren't philosophical. Whereas the old game of attacking even very conservative Republicans as sellouts was something of a direct-mail fundraising racket, the new cause is more like a real movement.
And that's why this time the infighting might lead to real war. For starters, the populists are much better funded and organized. Despite liberal doomsaying that Citizens United would give corporations a stranglehold over politics, we've seen the influence of big business decline in the GOP as new populist PACs have declared war on what they believe is the K Street wing of the party.
Also, public sentiment is much more on their side than you might guess from media coverage of the Tea Party. As political scientist Larry Bartels recently observed, the public is "more conservative than at any time since 1952." That new progressive era liberals promised in 2008? It never happened. The public has grown more conservative during the Obama presidency. The catch: It's grown less Republican too.
In "The Roots of Modern Conservatism," historian Michael Bowen argues that the familiar creation story of the modern right that focuses on Barry Goldwater's failed 1964 presidential bid skips the all-important chapters of the 1940s and 1950s. This was when the original "Me Too" Republican, Thomas Dewey, battled the legendary "Mr. Republican," Robert Taft. ("Me Too" GOPers claimed they liked the New Deal, it was just run poorly.)
According to Bowen, the fight between Dewey and Taft had less to do with ideology and more with internal GOP politics. Desperate to gain control of the party, the two factions invoked — and often invented — ideological differences to justify their claims and grievances. Eventually, the ideological arguments became self-justifying, in the same way the Sunni-Shiite Muslim split started as a fight over the prophet Muhammad's successor and was only retroactively imbued with profound theological significance.
A similar dynamic is at work on the right today. Six months ago, most Tea Party leaders were eager to get rid of the medical device tax under Obamacare. But, in the recent budget battle, getting rid of it was suddenly an ideological betrayal and a sop to big business.
A culture war is definitely raging on the right, and a civil war may follow, though I hope not. I'd hate to see the GOP establishment create an ideological rationale for being anti-Tea Party. It's better for conservatism if the GOP establishment is pulled toward the Tea Party, rather than repelled from it. Likewise, it's better if the Tea Party sees the GOP as a vehicle for its agenda rather than an obstruction.
If forced, I'd root for the Tea Partiers. And once they're in power, I'd chuckle as the Richard Vigueries denounced them as sellouts too.
Jonah Goldberg is a fellow at the American Enterprise Institute and editor-at-large of National Review Online. You can write to him by e-mail at email@example.com, or via Twitter @JonahNRO.
- Credit union donates to Honor Flight - 0
- Veterans Briefs: Post 2 events - 0
- Pinkerton freshmen say thanks in cards to veterans - 0
- NH Veterans Briefs: Weare American Legion plans annual turkey raffle - 0
- Author says Dover's Veterans Day ceremony inspired her book - 0
- Veteran challenges today's youths to greatness - 0
- Whitefield marks Veterans Day by giving thanks for tank - 0
- Grateful for their service, Nashua salutes its veterans - 0
- Fallen Marine, family honored at Peterborough Veterans Day ceremony - 0
Veterans help build Nashua Habitat homeREADER COMMENTS: 0
- Dave D'Onofrio's Patriots Notebook: It took a while, but now they're on Wright track - 0
- Newmarket blacksmith has forged a career shaping the elementsof steel - 0
- Kathy Sullivan: We need to rethink some of our county government positions - 0
- Pipes and plans: A chance to show up Mass. - 0
- H.S. Football Power Poll: No doubt - Astros finish on top - 0
- College Hockey: Wildcats home to RPI on Tuesday night - 0
- Manchester school board OK's contract for driver's ed program - 0
- Unrest erupts after grand jury decides against charges in Ferguson, Mo., shooting - 0
- Malkin, Crosby foil Bruins in overtime - 0
Monarchs Scouting Report: Nick ShoreREADER COMMENTS: 0
Clinton has 'historic' lead in poll
Sources say former White House Chief of Staff Andy Card to be tapped as Franklin Pierce president
Randy Johnson, Pedro, Smoltz lead HOF ballot
Tough task for NH budget writers
Pipes and plans: A chance to show up Mass.
Teacher 'thrilled' at being reinstated
Paul, Christie share lead in primary poll


text:
Pirates of the Burning Sea completes transition to free-to-play
Flying Lab Software's piratical MMO Pirates of the Burning Sea has officially made the transition to free-to-play -- you can now download, install and play the client with nothing more than a free Station account. Revenue is generated via an in-game store that sells extra inventory slots, ship insu...
Casual MMOs are next frontier for Pirates of Burning Sea dev
Pirates of the Burning Sea developer Flying Lab has hoisted the sails on a casual games division. GameDaily reports that Flying Lab Casual is working on making leisure MMO games, with the first project being a "family friendly" title in partnership with Upper Deck trading card company. An official...
Steam gets mo' MMOs from Sony Online Entertainment
Though we've always had to fight an urge to call them MOMs (massively online multiplayer-ers), MMOs have become an internet-bound force to be reckoned with. It's no surprise, then, that Valve's Steam service serendipitously bumped into Sony Online's mob of mmohs at a recent meeting of internet-boun...
Hoist the sails! Pirates of the Burning Sea is live
After a brief hiccup earlier this morning, pirate-themed MMO Pirates of the Burning Sea hoisted its sails and left port for the wide open sea where, SOE hopes, it will be greeted by thousands upon thousands of patiently waiting pirates who've got treasure aplenty to spend in their virtual Caribbea...
Featured Stories
WWE 2K15 review: Disqualification match
Posted on Nov 26th 2014 2:00PM
Tales from the Borderlands Episode One review: Busy earnin'
Posted on Nov 26th 2014 9:00AM
Assassin's Creed Rogue review: Avast ye, clone!
Posted on Nov 25th 2014 9:01AM


text:
Copyright © 1998-2014 Statto Organisation Limited. All rights reserved.
Powered by Statto Server v2.0
Brighton & Hove Albion reportedly rejected interest in Craig Mackail-Smith from Championship clubs prior to his return to Peterborough United . read more27 Nov » tribalfootball.com
Aston Villa's Paul Lambert has defended his decision to send Darren Bent on loan to Brighton & Hove Albion. read more27 Nov » tribalfootball.com
PAUL LAMBERT has defended his decision to send striker Darren Bent out on loan despite Aston Villa's toothless attack leaving them as the Premier League's lowest scorers.27 Nov » Daily Express
Brighton have now confirmed the loan deal for Craig Mackail-Smith and also revealed that Chris O'Grady has also departed for a spell.27 Nov » Vital Football
Sheffield United have completed the loan signing of striker Chris O'Grady from Brighton.27 Nov » SkySports.com
League One Sheffield United sign Brighton striker Chris O'Grady on loan until the end of January.27 Nov » BBC Sport
Sky Sports understands Brighton rejected interest from several Championship clubs for Craig Mackail-Smith before letting him return to Peterborough.27 Nov » SkySports.com
Former Peterborough striker Craig Mackail-Smith has returned to the club on loan from Brighton.27 Nov » SkySports.com
Brighton's Scotland international striker Craig Mackail-Smith returns to former club Peterborough United on loan.27 Nov » BBC Sport


text:
Warriors Are Only NBA Team With Two Players On U.S. Basketball Team Roster
Sharpshooting Golden State Warrior guards Klay Thompson and Steph Curry will be among 19 NBA stars competing to represent the United States for the 2014 Basketball World Cup, making 'the Dubs' the lone team to land two players on the roster.
Stephen Curry Scores 43 Points In San Francisco Summer League Game
The next NBA season may be three months away, but that didn't stop Golden State Warriors star Stephen Curry from putting on a show on the basketball court Wednesday night.
Warriors Reportedly Reach 3-Year Deal With Shaun Livingston
Golden State made a move to fill an important role behind point guard Stephen Curry on the first day teams were allowed to speak with free agents.
2014 NBA Draft Predictions
Two weeks have now passed since we last saw the San Antonio Spurs dismantle the Miami Heat to win their fifth championship. On Thursday, it will be time for the winners to put the champagne down as the 2014 NBA Draft commences
Warriors Exec Rick Welts, Actor George Takei Honored By California Legislature For LGBT Pride Month
Former "Star Trek" actor George Takei is being recognized by the California Legislature as part of its celebration of LGBT Pride Month.
6 Of The Most Devastating Team USA Losses In History
You win some and you lose some, but these losses hurt and they hurt bad. And let's be honest, Sunday's match against Portugal felt like a defeat …
8 Things You Need For an Epic Summer
Gear up for an epic summer with these must-have essentials, brought to you by CBS Local's Eat. See. Play.
Former Microsoft CEO Reportedly Set To Buy L.A. Clippers For A Record $2 Billion
Shelly Sterling reached an agreement Thursday night to sell the Los Angeles Clippers to former Microsoft CEO Steve Ballmer for $2 billion in what would be a record deal if approved by the NBA, according to an individual with knowledge of the negotiations.
Saint Mary's Announces All-Star Game Featuring Basketball Program's Best
Fans of the Saint Mary's basketball are in for a treat this summer as some of the biggest names in the school's athletic history return for a the Gales Basketball All-Star Classic, a matchup of the programs brightest stars.
Arsenio Hall Launches Fundraiser To Buy The Clippers
Talk show host has thrown himself into the ring to purchase the team, but needs to raise some money first…


text:
St. Patrick's Day Feast | Recipes from Our Best Cook
Valencia Menard, known to many as "Aunt Val," welcomes visitors into her kitchen–green tablecloth, shamrocks on the fridge... Read More »
St. Patrick's Day Leprechaun Hat Brownie Bites
St. Patrick's Day has a bit of a reputation for being a day of inebriated merriment with the... Read More »
St. Patrick's Day Recipes
New England boasts one of the largest populations of Irish-American heritages in the United States. As a result,... Read More »
Steve Corry, 555
"We [the kitchen staff] poke around at the farmers' markets and snag what inspires us, what looks good;... Read More »
Stone Fruit Recipes | Into the Summer Orchard
My father introduced me to the art of cherry picking. Every year, anticipating peak ripeness, he watched the... Read More »
Strawberries: The First Fruit of Summer
The sweetest harbingers of early summer will soon be on display: signs for strawberry socials on church lawns... Read More »
Strawberry Desserts
Each June we look forward to strawberry season in New England and then take advantage of early summer's... Read More »
Strawberry Muffin Recipe
June in New England is all about strawberries. With dozens of orchards offering pick-your-own and towns from Connecticut... Read More »
Strawberry Varieties | A Bounty of Strawberries
Like apples, grapes, and all other fruits, there are hundreds of strawberry varieties, each with its own unique... Read More »
Stretching Exercises for Your Lobster Dinner
Don't be intimidated by the high cost of owning your own lobster. With the following recipes, one good-sized... Read More »
Summer Kebabs
Give your guests and your tastebuds a little bit of kebab heaven with these four recipes from the... Read More »
Summer Picnic Recipes | A Moveable Feast
Take advantage of the warm weather and cook up a menu of our favorite al fresco foods for... Read More »
Super Bowl Party Ideas
I love a good Super Bowl party, but truth be told I am not a big football fan.... Read More »
Sweet Orchard Recipes
Between the berries and the apples, it's time for orchard fruits! Make the most of seasonal cherries, plums,... Read More »
Switchel | Haymaker's Punch — A Simple Ginger Beer
From Yankee July 1975 Haymaker's Punch, also called switchel, came along before the introduction of Gatorade or any... Read More »
Tailgate Recipes: Sausage and Sauerkraut
As teams take to the field in a battle for victory, fans head into "Tailgateville," firing up the... Read More »
Thanksgiving Leftover Turnovers
We often use the word "feast" to describe Thanksgiving, and if your holiday table groans under the weight... Read More »
Thanksgiving Leftovers Recipes
VIDEO: Annie Cooks Egg Nests At our house, we do a pretty traditional Thanksgiving: turkey and all the... Read More »
Thanksgiving Side Dishes | The Heart of the Feast
Celebrate the best part of the meal with a fresh take on familiar Thanksgiving side dishes. Let's be... Read More »
Thanksgiving Timeline
Consider this Thanksgiving timeline, so that you can have a day to be thankful for, too. See the... Read More »
The Yankee Magazine Archives Holiday Advice: How to Wrap a Present
For Men Only: Instructions to Wrap a Gift. (1942) Must I mention that your first requirement is something... Read More »
The Beautiful Harvest
The New England landscape is so often portrayed as an austere place, the chilly backdrop to Pilgrim hardship,... Read More »
The Best 5 Local Breweries
New England's beer culture is as rich and robust as a dark, toasty stout. Our region boasts more... Read More »
The Cheese Whizzes of Shelburne Farms
In contrast to the grassroots operation of Orb Weaver Farm, Shelburne Farms in Vermont's Champlain Valley annually produces... Read More »
The Day of the Pomodorata
Slide Show: Day of the Pomodorata When Leon de Magistris speaks, the accent of his Italian homeland cleaves... Read More »
The Difference between Cake Flour, Bread Flour, and Pastry Flour | Yankee Kitchen
What is the difference between cake flour, bread flour, and pastry flour? Is it okay to substitute... Read More »
The Difference Between Light Brown Sugar and Dark Brown Sugar | Yankee Kitchen
Many recipes call for "brown sugar" without specifying light or dark. Is there a difference between light... Read More »


text:
Cave Aged
Quick View
Haystack Mountain
Haystack PeakThe most delicious foothill we've seen, tucked beneath the shadows of the Rockies in Longmont, Colorado, Haystack Peak bursts with aromas of wet stone and flavors of sautéed mushrooms and cultured butter. Read More
Cave Aged
Quick View
Champlain Valley Creamery
Champlain Valley Triple CreamCarleton Yoder makes this lovely little triple creme by hand from a neighbor's organic milk. The fluffy, buttery wonder is luxurious, satisfying and cheaper than a trip to the spa. Read More
Quick View
Prairie Fruits Farm
Angel FoodAmidst the sprawling soybeans and copious cornfields of central Illinois, if you listen closely you can hear an occasional bleat or baa and can sometimes catch the scent of just-formed curd on a warm breeze. Here you'll find Prairie Fruits Farm, owned by soil scientists Wes Jarrel and Leslie Cooperband, just a few miles away from the University of Illinois at Urbana-Champaign, where people take farming so seriously that they built their library below ground so as not to block the on-campus corn plots from sunlight. Read More


text:
The Epitome of Mean Looking Muscle. Originally produced on February 17 of 1970, this TX9 'Black Velvet' Cuda is a Full Numbers Matching Example.... More
1971 Plymouth Cuda 440 - Real deal V code 440-6 Pack Cuda, professional rotisserie restoration. The car comes with a Dave Wise 13 page... More
1970 PLYMOUTH CUDA 426 REAL DEAL HEMI CUDA ,# 2 show quality ground up restoration, on nice texas body, that runs and drives like... More
ARE YOU LOOKING FOR ONE OF THE RAREST AND MOST DOCUMENTED MOPARS IN THE WORLD!?!?! We are very proud to be offering one the the... More
1969 PLYMOUTH GTX ORIGINAL DRIVTRIAN ALL ORIGINAL BODY PANEL ORIGINAL INTERIOR Conceived to offer dominating performance in a stylish wrapping, the Plymouth... More
BEAUTIFUL 5 WINDOW COUPE! Why drive a "cookie cutter" Ford or Chevy--why not drive something different and attention getting? Car has 7000 miles since... More


text:
I really don't know what you people are complaining about. Our night at Ambassador was only $99 US dollars from Agoda (what a bargain for Waikiki). The check in area was busy and the Manager kept apologising for the hold up, which impressed me right of the bat. We checked in and got given 2 free water bottles for the... More
- Reservation Options:
- TripAdvisor is proud to partner with Expedia, Booking.com, Travelocity, Hotels.com, Orbitz, Cheap Tickets, Despegar.com, Otel, Odigeo, Agoda and Tingo so you can book your Ambassador Hotel Waikiki reservations with confidence. We help millions of travelers each month to find the perfect hotel for both vacation and business trips, always with the best discounts and special offers.
- Also Known As:
- Ambassador Hotel Honolulu
- Ambassador Hotel Waikiki Hawaii/Honolulu


text:
Top Posts
Latest Posts
Report: Klay Thompson would have entered 2010 NBA draft with a Lakers first-round promise
Nov 17, 2014, 4:30 PM EST
What if…
PBT's NBA Power Rankings: Rockets, Grizzlies move to the top of the charts
Nov 17, 2014, 3:45 PM EST
Spurs climbed up fast after beating the Clippers and Warriors last week.
Derrick Rose out Monday vs. Clippers, says after knee injuries must be cautious with hamstring
Nov 17, 2014, 3:12 PM EST
He also says he got a lot of support from players around the league after his comments last week.
Report: Dwight Howard admits to using corporal punishment on son, doctor finds 'excessive force'
Nov 17, 2014, 2:16 PM EST
Rockets center reportedly cleared of child abuse after investigation
Joe Harris, as role grows, makes compelling case to start for Cavaliers
Nov 17, 2014, 1:19 PM EST
LeBron James, Kevin Love, Kyrie Irving, Joe Harris. One of thse is not like the others
James Harden on Reggie Jackson: 'He has to get the money that he's earned'
Nov 17, 2014, 12:22 PM EST
Harden respects Jackson for declining Thunder's extension offer
LeBron James misses shootaround with cold
Nov 17, 2014, 11:44 AM EST
Cavaliers star expected to play against Nuggets, anyway
Kevin Durant reportedly tells Dwight Howard: 'You're a p—-'
Nov 17, 2014, 11:06 AM EST
Injured Thunder star confronts Howard during Patrick Beverley-Scott Brooks incident
NBA will hear Kings' protest of loss to Grizzlies on Courtney Lee buzzer-beater
Nov 17, 2014, 10:20 AM EST
NBA says it will give decision by Dec. 2
Quote of the Day: Kobe Bryant on shot selection and crime prevention
Nov 17, 2014, 9:30 AM EST
Lakers star sure has a way with words
Metta World Peace: I confronted J.R. Smith in locker room last season
Nov 17, 2014, 9:00 AM EST
World Peace also says he was lone Knicks player to tell James Dolan why the team was struggling
Kobe and Shaq shake hands, hug before Lakers-Warriors game (video)
Nov 17, 2014, 8:30 AM EST
Might their newfound friendliness last for good this time?
Byron Scott is frustrated with Lakers' defense, threatens changes. To what?
Nov 17, 2014, 8:00 AM EST
Byron Scott may be sick of the way his team defends, but he doesn't have other cards to play.
PBT's Sunday NBA Winners/Losers: Kobe Bryant keeps scoring, Lakers keep losing
Nov 17, 2014, 1:36 AM EST
Kobe good. Lakers defense bad. Very bad.
Patrick Beverley jaws at referee, Scott Brooks jumped into argument (VIDEO)
Nov 17, 2014, 12:38 AM EST
Great restraint from the referee not to T-up Beverley or Brooks here.
Russell Westbrook shakes off Lakers' fan's recruiting efforts
Nov 16, 2014, 10:59 PM EST
Westbrook isn't a free agent until 2017, but that doesn't stop Lakers' fans.
Clippers' Chris Douglas-Roberts out several weeks with a strained Achilles
Nov 16, 2014, 9:45 PM EST
The Clippers could use the depth on the wing.
Kings filed protest after controversial loss to Grizzlies
Nov 16, 2014, 8:15 PM EST
NBA last granted a protest back in 2008.
Report: Cavaliers, Rockets both in talks to trade for Corey Brewer of Timberwolves
Nov 16, 2014, 6:46 PM EST
Cleveland wants to get LeBron some rest, but Brewer doesn't work well in slowed down offenses and he's a defensive gambler.
Lance Stephenson slaps self in face during legendary flop (VINE)
Nov 16, 2014, 6:00 PM EST
He was fouled on the play (moving screen) but nobody sells it like Born Ready.
More Top Posts
- Report: Kevin Durant, Russell Westbrook could return to Thunder lineup next week 11
- Kobe Bryant says he took large enough discount for Lakers to contend 55
- Report: Jeff Taylor won't appeal 24-game suspension 2
- Timberwolves' Kevin Martin out indefinitely after scoring 31 points with fractured wrist 8
- Andrei Kirilenko leaves Nets for road trip, Lionel Hollins unsure if he'll return 15
Featured video
Most Commented
- Gary Payton on Dwight Howard: 'I think he's disliked by a lot of players' (108)
- Report: Dwight Howard admits to using corporal punishment on son, doctor finds 'excessive force' (78)
- Kevin Durant reportedly tells Dwight Howard: 'You're a p—-' (61)
- Police re-open investigation of Dwight Howard allegedly abusing his child (56)
- Kobe Bryant says he took large enough discount for Lakers to contend (55)
- D. Rose (7794)
- D. Wade (7140)
- K. Durant (6484)
- P. Gasol (5691)
- R. Westbrook (5420)


text:
I've lived in Alaska since 1969. I love this wild land. The extremes of the far north shape and affect every living thing. Extremes of weather, elevation, daylight hours, isolation, flora and fauna, nothing in Nature is insignificant.I have a Davis Vantage Pro weather station, uploading to Wunderground, (Turks on the Tundra) the National Weather Service, the Citizen Weather Observation Program and MADIS (Meteorological Assimilation Data Ingest System). "May you have warmth in your igloo, oil in your lamp, and peace in your heart." ~ Indigenous Arctic Proverb
WunderPhotos Upload
Jueves Enero 1, 1970
Caption:No caption given.
This image does not contain EXIF data.
February 24, 2012 Photo Series
Viewer Comments
Post Your Comments
You must be signed in to leave comments.
Members can leave comments, upload and share photos in our Wunder Photos section and participate on the WunderBlogs.
Recent Comments for
Undulating Waves
(3 hours ago)view 5 comments »
Night Travelers
(3 hours ago)view 15 comments »
Icy Structures in Miniature
(3 hours ago)view 1 comment »
Ice Diamonds
(3 hours ago)view 7 comments »
Ice Diamonds
(10 hours ago)view 3 comments »
Tiny Winter Wonderland
(11 hours ago)view 3 comments »
Ice Diamonds
(11 hours ago)view 4 comments »
(12 hours ago)view 3 comments »
Night Visitor
(13 hours ago)view 2 comments »
Capped Columns among the Hoarfrost
(14 hours ago)view 20 comments »


text:
20 Jewelry Pieces to Wear Poolside This Summer
Jewelry may not top your list of poolside must-haves, but this season we've rounded up the bracelets, necklaces, and earrings that will top off your swimsuit looks. From the luxe to tribal styles, you won't want to take a dip without these accoutrements.
By Lauren Valenti
The Ear Cuff
Arden B. Ear Cuff, $19, at Arden B..
Courtey of Arden B.


text:
Thu 5am-12am PST Sat-Sun 5am-10pm PSTLive Chat
Thu 5am-12am PST Sat-Sun 5am-10pm PST
until Black Friday. Shop Early Deals Now! Free Shipping @ Any Price
Close X
Rusticware 8603 Wenmoor Robe Hook
Product Description
This Rusticware Robe Hook comes in a satin nickel finish.
Wenmoor Robe Hook
The Rusticware Wenmoor Collection features European styling combined with old world finishes to create a truly unique look for your bath area.
The Rusticware Wenmoor Collection features European styling combined with old world finishes to create a truly unique look for your bath area.
- Backplate Height: 3.5"
- Backplate Width: 2.5"
|Die-Cast Zinc
|2 - 3 Pounds
Would you like to update product info, give feedback on images, or tell us about a lower price?
Frequently Bought Together
Customers who bought this item also bought
Items in this collection
From $38.25
You Save Up To $7.20
From $37.40
You Save Up To $7.05
More items in this collection
From $29.75
You Save Up To $5.62
$19.55Your total:
Add to Cart
People Who Viewed This Also Viewed
Questions & Answers
Didn't get the answer you needed?
We'll respond to your question in three days or less
There are no questions from the community yet
Customer Reviews
This product has no customer reviews yet
Write an online review and be the first to share your thoughts with other customers
Write an online review and be the first to share your thoughts with other customers
Product Support History
How often do people return this item?
How often does this arrive damaged?
Tag This Product
A tag is a keyword assigned to a product which helps describe the item and allows it to be found by other customers
Add a new tag:
Separate multiple tags with commasWhat's this?
Additional Details
|Mfr Part #
|Group #
|Hooks - 498
|Traditional - 143
|Sales Rank
Similar items
Bronze Hooks
Nickel Hooks
Pewter Hooks
Your Recently Viewed Items
You have no recently viewed items. After viewing product detail pages or search results, look here to find an easy way to navigate back to products you are interested in.
Your Recommended Items
You currently have no recommended items. Browse a few more items to give us an idea of what you like.
©1999 - 2014 ATGStores.com.Copyright notice | Site Map | By using this site you agree to our Terms & Conditions of Use and Privacy Statement
Server: WWW115 DBServer: EASTDB02 Created On: 11/27/2014 4:33:57 PM


text:
A method and apparatus for fine-grained, trust-based rate limiting of network requests distinguishes trusted network traffic from untrusted network traffic at the granularity of an individual user/machine combination, so that network traffic policing measures are readily implemented against untrusted and potentially hostile traffic without compromising service to trusted users. A server establishes a user/client pair as trusted by issuing a trust token to the client when successfully authenticating to the server for the first time. Subsequently, the client provides the trust token at login. At the server, rate policies apportion bandwidth according to type of traffic: network requests that include a valid trust token are granted highest priority. Rate policies further specify bandwidth restrictions imposed for untrusted network traffic. This scheme enables the server to throttle untrusted password-guessing requests from crackers without penalizing most friendly logins and only slightly penalizing the relatively few untrusted friendly logins.
1. A method of limiting unauthorized network requests, comprising the steps of:
identifying entities legitimately entitled to service, wherein an entity comprises a user id-client pair, said user id-client pair comprising an individual user-machine combination;
establishing said identified entities as trusted entities by, during a first session, issuing a trust token for each entity successfully authenticating to said network service, said trust token comprising a data object that includes a client identifier, said client identifier comprising at least one client-originated item of data that uniquely identifies the client machine, wherein said user ID-client pair represents a unique entity;
storing said issued trust token on said client machine;
in sessions subsequent to said first session, transmitting with a network request from a trusted entity said stored issued trust token along with said user ID, authentication credentials, and client identifier from said client machine to said network service;
processing said request from said trusted entity according to a first policy; and
responsive to a determination that a request is from an untrusted entity, said untrusted entity comprising an entity lacking a valid trust token;
processing said request from said untrusted entity according to at least a second policy;
wherein processing a request according to at least a second policy comprises adding a specified amount of incremental response latency when processing requests from untrusted entities.
2. The method of
3. The method of
4. The method of
5. The method of
6. The method of
7. The method of
8. The method of
9. The method of
10. The method of
11. The method of
12. The method of
13. The method of
14. The method of
15. The method of
16. The method of
17. The method of
18. The method of
19. The method of
20. The method of
validating said trust token; and
processing request without adding incremental response latency.
21. The method of
verifying that the user ID and a client identifier in the trust token match those presented by the client on the request.
22. The method of
verifying that a time stamp of a first authentication by the entity recorded in the trust token is no earlier than a specified earliest acceptable first-authentication time stamp; and
verifying that a time stamp of a last authentication by the entity recorded in the trust token is no earlier than a specified earliest acceptable last-authentication time stamp.
23. The method of
24. The method of
25. The method of
26. The method of
27. The method of
28. The method of
29. A computer program product comprising computer readable code means embodied on a tangible medium, said computer readable code means comprising code for performing a method of limiting unauthorized network requests, said method comprising the steps of:
identifying entities legitimately entitled to service, wherein an entity comprises a user id-client pair, said user id-client pair comprising an individual user-machine combination;
establishing said identified entities as trusted entities by, during a first session, issuing a trust token for each entity successfully authenticating to said network service, said trust token comprising a data object that includes a client identifier, said client identifier comprising at least one client-originated item of data that uniquely identifies the client machine, wherein said user ID-client pair represents a unique entity;
storing said issued trust token on said client machine;
in sessions subsequent to said first session, transmitting with a network request from a trusted entity said stored issued trust token along with said user ID, authentication credentials, and client identifier from said client machine to said network service;
processing said request from said trusted entity according to a first policy; and
responsive to a determination that a request is from an untrusted entity, said untrusted entity comprising an entity lacking a valid trust token;
processing said request from said untrusted entity according to at least a second policy;
wherein processing a request according to at least a second policy comprises adding a specified amount of incremental response latency when processing requests from untrusted entities.
30. The method of
31. The method of
32. The method of
33. The method of
34. The method of
35. The method of
36. The method of
37. The method of
38. The method of
39. The method of
40. The method of
41. The method of
42. The method of
43. The method of
44. The method of
45. The method of
46. The method of
47. The method of
48. The method of
49. The method of
50. The method of
51. The method of
52. The method of
53. The method of
54. The method of
55. The method of
56. The method of
This application claims benefit of U.S. Provisional Patent Application Ser. No. 60/523,427, filed Nov. 18, 2003.
1. Field of the Invention
The invention relates generally to network security. More particularly, the invention relates to a method and system for trust-based, fine-grained rate limiting of network requests.
2. Description of Related Technology
A fundamental feature of current network technologies is the provision of network services to individual users by furnishing each user an account. Users then request services through their accounts by logging into a server using a client. In current usage, the term 'client' may refer either to the software application by which a user accesses the network resources provided from the server, or the machine that is running the client software. To guarantee that the party attempting to gain access to an account is actually the rightful accountholder, access is controlled through an authentication process, in which the account holder is required to provide one or more pieces of information, known only to the account holder, before he is granted access to network services. Typically, authentication requires provision of a user ID and a password. User accounts are seen in most network environments, e.g. local area networks limited to a small company, as well as in ISP's (Internet service provider) having tens of millions of subscribers. Unfortunately, individuals wishing to make unauthorized use of another's user account are common, and thus password theft has become widespread.
Password theft is a serious problem, frustrating users' expectations of trust, safety, security, and privacy, and interfering with the efforts of ISP's to meet those expectations. While password theft is often involved in particularly serious crimes, such as computer vandalism or identity theft, one of the main motives for password theft is to co-opt user accounts for the sending of 'spam,' i.e. unsolicited e-messages that are sent to many recipients at one time, usually to promote a product or service. Most users find spam annoying and intrusive, but it can also be highly offensive, as when one receives spam that advertises web sites that distribute pornography. Furthermore, large volumes of spam severely burden network infrastructures. Thus, control of password theft constitutes an important measure in reducing the volume of spam. A large ISP may have to reset thousands of accounts per week because of stolen passwords, at a cost of several million dollars per year.
Passwords can be compromised in a number of ways. Users often keep their passwords written on easily found POST-IT NOTES (3M Corporation, St. Paul Minn.) or scraps of paper, instead of committing them to memory; or they may disclose their passwords to friends and co-workers. Often, users are enticed into revealing their user names and passwords via email, instant messaging or by visiting spurious web sites. Additionally, users may be tricked into downloading and installing Trojan horse programs, i.e. keystroke monitoring software that sniffs for typed passwords and subsequently sends them to a hacker. Finally, cracking, guessing a user's password through repeated login attempts, is very common. Generally, cracking is done by means of a software program that iteratively tries one alphanumeric combination after another, until it guesses a user's password.
Crackers generally launch either brute force or dictionary attacks. During a brute force attack, in which the attacker has no previous knowledge of what a password is likely to be, the cracker iteratively tries all possible alphanumeric combinations, starting with one character, and then proceeding to combinations of two characters and so on. A brute force attack typically requires large amounts of computing power. For example, if an attacker were going to attempt cracking all possible six-character passwords composed of the upper-case letters, the lower-case letters and the digits 0-9, there would be about 56,800,000,000 possibilities. Even a powerful computer would require at least several weeks of continuous operation to complete the task. For this reason, brute force attacks are relatively uncommon.
Much more efficient, and more common, are dictionary attacks, in which only words from the dictionary, for example, are tested as passwords. While the total number of words in the English language numbers a few million, there are no more than two hundred thousand words in common use. Thus, a computer capable of trying five thousand passwords per second could try the entire two hundred thousand words in less than a minute. Similarly, the cracker could make guesses based on names, slang, science fiction shows and books, technical jargon and so forth. It is much easier to take a limited set of words and try combinations based on the known set than it is to crack by brute force.
Most efficient is a rule-based attack, in which the attacker has some knowledge of one or more rules used to generated passwords. For example, a password may consist of a word followed by a one or two digit number, e.g. user1, mind67. The cracker then generates passwords according to the rule.
In actuality, most crackers seek to crack the password for a large set of user ID's, for example the passwords of any of the millions of AOL (TIME-WARNER, INCORPORATED) user IDs, rather than try to crack a particular user ID's password. Because many users use one of several simple, common passwords, "abc" or "password," for example, the usual cracking technique is to select such a common password and then iterate through a list of known or generated user IDs, trying each user ID against the common password until a user ID is found that uses the common password. Thus, it is more typical for crackers to guess a user ID matching a chosen password than to guess the password matching a chosen user ID.
For the cracker to target a given service, such as AOL's login servers, the targeted service must offer a higher return, in terms of number of cracked accounts times the value of each cracked account to the cracker, than another service would. This is because a cracker's resources are limited. By reducing the rate at which a cracker is able to crack user accounts, a service can reduce the cracker's return. Any reduction in cracked accounts provides a number of benefits to the service operator, among them reducing the cost of recovering compromised accounts and the cost of handling spam emails sent from them. Additionally, if the service operator can sufficiently reduce the rate at which accounts are cracked, it should be possible to get the cracker to shift his cracking resources to other, easier targets, and thereby achieve a savings in number of cracked accounts far beyond that achievable through rate limiting alone.
The cracker typically needs to guess possible user ID/password pairs at a very high rate to crack enough accounts to support his spamming or other account-abusing activities. On the other hand, server technology has evolved to help meet threats of this type. Servers and routers have the ability to monitor inbound and outbound traffic flows. A server monitors inbound traffic, for example, by tracking the number of packets per second or bytes per second received, perhaps at a selected port, or from a selected network address. As the number of packets or bits per second in a stream increases, the stream consumes more of the server's bandwidth. To apportion bandwidth appropriately, servers and routers have traffic management capabilities, commonly called rate limiting, which include traffic policing measures. Using rate limiting measures, a server manages inbound and outbound traffic according to preconfigured rate policies that enforce bandwidth limits. Rate policies can be configured for various interfaces such as individual ports or trunk groups. Additionally, rate policies can be configured for various types of traffic, for example a specific MAC (media access control) address, or specific TCP (transmission control protocol), or UDP (user datagram protocol) ports.
At its finest granularity, rate limiting is applied to specific source IP (internet protocol) addresses. In this way, a server can detect traffic coming from a particular IP address that exceeds the bandwidth allocated by the rate policy. Thus, servers recognize atypical traffic and apply rate limiting countermeasures immediately. For example, a cracker may mount an attack from behind a particular IP address, perhaps behind a proxy server or a firewall, directing requests to the server at a rate that exceeds the allocated bandwidth. The server then limits the rate at which requests are processed from the particular IP address by limiting the bandwidth to that allocated by the rate policy. Additionally, if the traffic exceeds a certain pre-configured rate, the server may drop the traffic entirely. Thus, by imposing rate limiting countermeasures, a server can fend off, or at least, badly frustrate attacks by crackers.
However, a fundamental limitation of IP-address based rate limiting is that a peer IP address is a very weak proxy for a particular user using a particular PC, and hence IP-address based rate limiting is a very blunt and imprecise tool. A counter measure applied to a suspicious IP address can be a draconian measure. Even though each client machine has it's own local IP address, in many cases the internet traffic from these client machines is routed through an intermediary device, such as a firewall or a web proxy server, and it is the IP address of this intermediary device, rather than that of the individual client machine, that is seen as the requesting IP address by the destination network server. Thus, rate limiting traffic from the IP address of the intermediary device effectively denies or limits service to all users whose requests originate from the suspicious IP address, even though the actual target may be a single cracker among them. Thus, by using the peer (requestor's) IP address alone, the network server has no ability to discern which particular client machine made a given request when it is routed through a shared intermediary device. Further, a given user's peer IP address may change from session to session or even from network request to network request. In this case, applying rate limiting to a peer IP address may have no effect on the targeted user.
It would be a great advance in the art to provide a method of fine-grained rate limiting, in which individual user ID/machine combinations could be distinguished and separately rate-limited even when sharing the same peer IP address.
K. Shin, K. Kobayashi, T. Aratani, Device and method for authenticating access rights to resources, U.S. Pat. No. 5,987,134 (Nov. 16, 1999) provides an approach that requires several different components including challenging data, user identifying information, and an access ticket. Shin, et al. are primarily concerned with authenticating a user, rather than establishing a particular piece of hardware as trusted.
M. Ensor, T. Kowalski, A. Primatic, User-transparent Security method and apparatus for authenticating user terminal access to a network, U.S. Pat. No. 5,721,780 (Feb. 24, 1998) describe a method and apparatus for implementing security in data and telecommunications networks that is independent of and transparent to users. When a user terminal connects to a network control center, the network control center generates an encrypted password based on the user terminal's network coupling identifier. The password is downloaded to the terminal and simultaneously saved by the network control center. Subsequently, when a user attempts to access the network, the network control center retrieves the password from the terminal and compares it with the stored copy. If there is a match, network access is granted. With each logon from the terminal, a new password is generated and downloaded to the user terminal. The exchange of passwords described by Ensor, et al. allows a user terminal to be established as trusted on a session-by-session basis. However, the trust is only machine-specific; it is not specific to the user as well. Furthermore, Ensor, et al. fail to contemplate fine-grained rate limiting based on designating a machine as trusted by issuing a trust token.
K. Seamons, W. Winsborough, Trust negotiation in a client/server data processing network using automatic incremental credential disclosure, U.S. Pat. No. 6,349,338 (Feb. 19, 2002) describe a system in which trust is negotiated between two unfamiliar data processing apparatus by incrementally exchanging credentials. Providing multiple opportunities for exchange of credentials makes it possible to negotiate a higher level of trust between two machines previously unfamiliar with each other than a single exchange of credentials. The approach provided by Seamons, et al. involves the iterative exchange of credentials and credential access policies, wherein the credentials are primarily issued by various third parties and describe the holder of the credential.
Siebel 7 Integration with Baltimore SelectAccess 5.0: Technical information brief describes the use of a trust token to provide SSO (single sign-on) functionality across several applications in different domains. Similarly, R. Zuccherato, Authentication token (Nov. 6, 2002) describes an authentication token that is issued by an authentication server for later use in authenticating to a different application server. There is no teaching in either source of the use of a trust token to designate a particular machine/user combination as trusted, or differentially applying rate limiting countermeasures based on the presence or absence of a trust token.
It would be highly advantageous to be able to distinguish friendly network traffic from hostile network traffic at the granularity of a single user ID/machine combination. It would be further advantageous to reduce the rate at which legitimate users are denied service from a server while thwarting attackers operating from behind the same IP address as legitimate users. It would be a still further advantage to improve server defenses and reduce the volume of spam sent and received by network subscribers by implementing a method of fine-grained, trust-based rate limiting.
The invention provides a method and apparatus for fine-grained, trust-based rate limiting of network requests. Legitimate network traffic is distinguished from untrusted, and potentially hostile, network traffic at the granularity of an individual user/machine combination. Thus, network traffic policing measures such as rate limiting are readily implemented against the hostile or untrusted traffic without compromising service to trusted user/machines legitimately requesting network services ("friendlies").
In one embodiment of the invention, a client successfully authenticating to a server for the first time is issued a trust token by the server. The trust token is typically a cryptographically secure object, such as a certificate, that is both user and machine-specific. Issuance of the trust token, which is stored by the client, establishes the particular user ID/machine pair as trusted. In subsequent logins, the trust token is provided by the client along with the customary authentication information, such as user ID and password. At the server, a rate limiting component applies traffic policing measures, such as adding response latency, according to rate policies that give highest priority to network requests that are designated trusted, based on the availability of a valid trust token. Thus trusted requests are promptly granted. Rate policies may further specify bandwidth restrictions to be imposed for untrusted network traffic, such as adding a configurable degree of response latency to untrusted traffic. Furthermore, the rate policy can be configured to drop untrusted traffic entirely.
An additional embodiment of the invention is described, wherein trust tokens are stored in a server side database, rather than being stored by the client, allowing the invention to be implemented with clients that lack the capability of storing a trust token. In a further embodiment, a single database provides service to a number of different servers. In a still further embodiment, a single rate limiting component polices traffic for a plurality of servers, while each of the servers manages trust tokens independently of each other.
As shown in
One assumes that the majority of users behind the proxy/firewall 103 are "friendlies," users having legitimate user accounts on the server 102 and having benign intentions. It is also possible, however, that hostile traffic can originate from behind the proxy/firewall 103, for example an attacker trying to crack passwords to user accounts on the server 102. As previously described, an attack by a cracker can consume enough of the server's bandwidth so that the attack is readily detected, and the server can implement countermeasures to defend against the attack, such as rate limiting.
Rate limiting is a traffic management tool that allows a server or router to control the amount of bandwidth specific traffic uses on specific interfaces. While the specific implementation of rate limiting varies according to the manufacturer of the server or router, some general principles of rate limiting are described herein below.
Many network devices implement rate limiting using a token bucket model, in which arriving packets are admitted to a port by removing admission tokens from a bucket. It will be appreciated that larger packets or a greater number of packets per second require more tokens. Tokens are added to the bucket at a rate set by the configured rate limit. As long as the bucket is full, no additional tokens can be added. Traffic arriving at the port can only be accepted if there are sufficient tokens in the bucket. Thus, a rapid burst of traffic causes rapid depletion of the bucket. If the bucket is emptied, traffic cannot be granted ingress to the server. In some cases, incoming traffic is simply dropped until the bucket is replenished. In other cases, incoming traffic is queued until the bucket contains sufficient tokens to admit a portion of the queued traffic. It will be appreciated that queuing incoming traffic and replenishing the bucket with tokens at a configured rate has the effect of imposing latency on the rate at which the incoming traffic is processed. Thus, the latency is configurable by configuring the rate at which the bucket is replenished.
The above scheme for implementing rate limiting is provided for the sake of description only. Other methods of rate limiting are commonly known by those having an ordinary level of skill in the art and are consistent with the spirit and scope of the invention.
Network devices such as servers generally have capabilities for both fixed and adaptive rate limiting. Fixed rate limiting enforces a strict bandwidth limit. The device forwards traffic that remains within the limit, but either queues or drops all traffic that exceeds the limit. Adaptive rate limiting enforces a flexible bandwidth limit that allows for bursts above the limit.
Fixed Rate Limiting
Fixed rate limiting allows one to specify the maximum number of bytes a given port on a network device, such as a server, can send or receive. The port drops or queues bytes that exceed the amount specified. Additionally, rate limiting can be configured for both inbound and outbound traffic. A rate limit is usually expressed in bits per second. The fixed rate limiting policy generally applies to one-second intervals and allows the port to send or receive the number of bytes specified by the rate policy.
Fixed rate limiting counts the number of bytes that a port either sends or receives within the configured time interval. If the number of bytes exceeds the maximum number specified, the port drops all further packets for the rate-limited direction for the duration of the specified interval. At the end of the interval, the port clears the counter and re-enables traffic.
Generally, rate policies are configured on a port-by-port basis. Each port is configured by means of an editable configuration file. Rate policies are typically configured by entering scripted commands in the port's configuration file that specify the direction of traffic flow and the maximum number of bits per second.
Adaptive Rate Limiting
Adaptive rate limiting rate allows configuration of the amount of traffic of a given type a specific port can send or receive. It also allows changing the IP precedence of traffic before forwarding it. Rate policies can be configured for specific types of traffic, for example: layer 3 IP traffic, specific source or destination IP addresses or networks, specific source or destination TDP or UDP ports, specific MAC (media access control) addresses, specific IP precedence values, or Diffserv (differentiated service) control points.
Configuration of adaptive rate limiting policies is similar to that for fixed rate limiting, except that rate policies are specified for each type of traffic. In the event that a rate policy is not specified for a particular traffic type, that type of traffic is sent and received without rate limiting.
Rate limiting should ideally be applied at as fine a granularity as possible, so that those actually doing the cracking are strongly limited without limiting, i.e. inflicting "collateral damage" upon, friendlies in the virtual neighborhood. Unfortunately, this is the biggest limitation of IP address-based rate limiting schemes, because IP addresses are not fine-grained when it comes to network login requests, as previously described.
In practice, this means that it is necessary to identify proxy/firewall IP addresses. This is accomplished by monitoring logs and user feedback for selected network services, and attempting to tune their rate limits such that they are loose enough to account for an average number of users behind such a proxy IP address, yet tight enough to still have some effect on crackers from behind those IP addresses. This is a challenging, ongoing, error-prone exercise that results in too many friendlies being denied service and too many crackers not being adequately rate limited. This scheme also provides an opportunity for malicious hackers to effect a denial of service (DOS) attack on users behind the same proxy IP address.
Differentiating Bad from Good Traffic
IP-address-based rate limiting entails identifying the "bad" IP addresses and then enacting rate limiting countermeasures upon them. Crackers know about this and thus use various means, for example, rotating among proxies or using many different IP addresses, to avoid sending network requests from "bad" IP addresses. Fundamentally, identifying and tagging the "bad" is much more challenging than identifying and tagging the "good," because the bad can and do apply their resourcefulness to escape the tagging. Conversely, in an alternative approach where only the "known good" users are tagged in a cryptographically secure way and are rewarded for being good, there is nothing that the bad users can do, because there is no bad tag to avoid.
IP addresses typically cannot adequately represent the entities to which it would be ideal to apply trust-based rate limiting to: specific users on specific computers. Many users are assigned different IP addresses each time they start new sessions, for example dialup users; or each time they restart their computers, for example consumer broadband users. Other users randomly come from 1 of n IP addresses corresponding to the machines in the proxy or firewall farm through which their requests originate. Thus, IP address-based countermeasures are only good for as long as the IP/user binding persists. After that, an attacker gets a fresh start and suffers no penalty for past transgressions.
A New Approach
The invention recognizes the following:
Cracker login attempts are distinguishable from typical friendly login attempts:
Incremental login response latency is very harmful to crackers, but minimally harmful to friendlies:
As shown in
Preferably, incremental latency is added to both successful and unsuccessful login attempts from untrusted clients. If it is only added to unsuccessful ones, the crackers quickly realize that if a response is not received within a successful response time, the response can be assumed to be unsuccessful. Thus, the cracker need not continue waiting the extra time for the actual response. In one embodiment of the invention, latency is added only to a configurable percentage of successful logins. Thus, attempting not to miss an opportunity for a correct guess, a cracker is forced to wait for responses for wrong guesses, while latency is attached only to some percentage of friendlies that login successfully. In an alternate embodiment, latency is added only to requests from IP addresses that have exceed a configurable, "add-latency" login rate, as described below.
Referring now to
By way of a client 101, a sever requests access or services from a network device, such as a server 102. The request takes the form of a login request 103. In an exemplary embodiment, the login request includes a user ID, a password, and a client ID. A client may include a desktop or notebook computer, a handheld device such as a palmtop computer or a personal organizer, or a wireless telephone. For purposes of the invention, a client is taken to mean any device or software application through which a user requests services from the network device 102. A network device, in addition to being a server, could also include a router or a switch. The client ID constitutes one or more items of data that can be used to uniquely or semi-uniquely identify the client. Thus, a user ID/client pair represents a unique or nearly unique entity. The request is received at the network device 1-2 at time T1. Successfully logging in to the network device 102 identifies the particular user ID/client pair as being entitled legitimate access to the network device 102. Instead of the client providing a password as part of the login credentials, a derivative of the password may be supplied, such as a cryptographic hash of the password.
Following the successful login, the network device issues a user-specific, machine-specific trust token 104. At time T2, the trust token 104 is stored on the client, thus establishing the particular user ID/client pair as trusted.
Referring now to
Referring now to
The foregoing description of the trust token is intended only to be descriptive. Other types of data could be included in the trust token and are well within the spirit and scope of the invention.
The trust assessor 601 attempts to obtain the requesting entity's trust token, if any, from either the request or from the server's database (if stored server-side). If it finds a trust token, it proceeds to validate the token's cryptographic integrity and authenticity; for example, by attempting to decrypt it with the secret key with which it was encrypted. If cryptographic validation succeeds, the trust assessor 604 then proceeds to perform other validation checks defined by the server, such as checking that the client ID contained in the token matches that provided on the request, and checking that the token's first-used and last-used timestamps are no earlier than the server's configured minimum timestamps.
The rate limiter 602 prioritizes authentication requests to be processed by the authenticator 603, based on the client ID, the presence and assessed validity of the associated trust token, and any defined rate limiting policies, to determine if and how to rate-limit the requests. A request accompanied by a valid token is passed immediately to the authenticator 603, with little or no rate limiting being imposed. A request lacking a valid token is given a lower priority. As denoted by the arrow 703, the rate limiter may completely reject a request, as determined by the rate policies configured for the server.
The authenticator 603 is responsible for verifying authenticity of the login credentials, typically user ID and password, presented by the client. The authentication element 503 consults either an internal or external data store containing the authorized user ID and password and determines whether the credentials supplied match those stored in the data store. If the login credentials are invalid, the request is rejected, as denoted by the arrow 702
The trust grantor 604 generates a fresh trust token for the authenticated entity. The trust grantor 604 initially collects the contents of the token supplied by the authenticated entity during authentication, including any of user ID, client ID, first-used timestamp from the old trust token and the current time, i.e. the last-used time to put into the token, and then optionally encrypts the contents using a cryptographically secure encryption algorithm and encryption key. Preferably, the generated trust token includes both the above mentioned encrypted data as well as unencrypted plain-text that denotes at least the identifier of the encryption key used. Additionally, the token issuer generates trust tokens for successful, but previously untrusted logins. In either case, the generated trust token is either transmitted to the client, as denoted by the arrows 701 and 704, or stored in the server-side database, indexed as previously described.
There follow herein below descriptions of a number of embodiments of the invention involving different server architectures and different client types.
Token-Capable Client
A token-capable client, as shown in
Anonymous Client
In the case of logins from clients that provide no uniquely or semi-uniquely identifying client data, and which are not capable of storing and replaying server-generated trust tokens, the following IP-based trust scheme is provided:
Following each successful authentication, the network service adds or updates a database record containing the following information:
A record is added if it's the first time user has successfully authenticated from the client IP address. Otherwise, the record having matching user ID and client IP address is updated.
Each new authentication request contains the user ID and the client IP address. The network service extends trust to a new request according to one of the following alternate schemes:
The process flow for establishing an anonymous client as trusted is analogous to that shown in
Below a configurable login threshold 'A,' no latency is applied. Traffic below the first threshold is assumed to be trusted, based on the low request rate per unit of time. The assumption tends to be valid because user ID/client pairs legitimately entitled to request service would successfully be able to login on the first attempt. Thus, the traffic volume tends to be low.
Above a second configurable threshold 'B,' traffic is dropped altogether, on the assumption that the traffic is hostile. The assumption tends to be valid because the rate specified by threshold 'B' is one achievable only by automatically generated network traffic, such as would result during an attack by a cracker or during a denial of service attack.
Above threshold 'A' and below threshold 'B,' latency is applied to untrusted login requests. Network traffic within this range is not of a high-enough volume to justify the extreme measure of completely blocking it, but is high enough to justify in increased index of suspicion. As previously described, imposing login latency frustrates a cracker's efforts sufficiently to give them a strong incentive to seek out weaker targets.
Identifiable Client
While the previous embodiments of the invention are applicable to the majority of clients, a third embodiment shown in
In the case of semi-uniquely identifying data, different items of data can be concatenated to form an identifier. For example, the client build number, the PC RAM (random access memory) and the phone number dialed are concatenated to produce a unique or semi-unique identifier. As shown, the client 101 directs a login request 103 to the network device 102. As previously described, the network device issues a trust token. However, as indicated by the arrow 802, the trust token is stored in a server side database. In this case, the login server uses the user id plus client data as a key into a database 601 of trust tokens stored server-side, instead of the token being stored on the client. During subsequent logins, as indicated by the arrow 803, the trust token is retrieved from the database 601 and evaluated. Following validation, the trust token is updated as previously indicated, and access is granted to the client 101. As shown in
While the incremental latency penalty is the currently preferred embodiment of the invention due to its ease of implementation and its user-friendliness, it should also be appreciated that it is possible to impose other penalties upon an untrusted login attempt. One such penalty is a requirement that the client successfully complete a Turing test. A Turing test typically constitutes a question or a task that can be readily solved by a live human, but that could be solved only imperfectly, if at all, by a machine. Thus, by requiring successful completion of a Turing test prior to login, one is readily able to distinguish a human user that is more likely to be entitled access to the server from a cracker launching an attack using cracking software. For example, a Turing test might be to correctly recognize characters embedded in an image containing distorted text characters to obtain permission to attempt a login.
Enhancements and Extensions
It will be appreciated that transmission of sensitive data such as authentication credentials most appropriately occurs over a secure network connection. Thus, all embodiments of the invention rely on protocol that ensures security and privacy in network communications. The invention preferably employs the SSL (secure sockets layer) protocol.
An embodiment constitutes a computer program product comprising a tangible medium having computer-readable instructions embodied thereon for performing the various steps described herein above.
Although the invention has been described herein with reference to certain preferred embodiments, one skilled in the art will readily appreciate that other applications may be substituted for those set forth herein without departing from the spirit and scope of the present invention. Accordingly, the invention should only be limited by the Claims included below.
Patent Citations
Non-Patent Citations
Referenced by
Legal Events
Original Image


text:
Jody Smith loves knitting. Again. She thought her days of knitting and purling were long over but ... she's back ...
Discuss the article on the Forums.
101 Good Reasons : Why it is wrong to provide CBT and GET to ME Patients. Part 1
Discussion in 'General ME/CFS News' started by shrewsbury, Mar 2, 2010.


text:
Cute - smaller than I expected but so cute! I am using it for a bedroom chair -- just redecorated in industrial/cozy! Just what my room needed.
It is a little hard to tell from the image the actual color of the chair, but in person it is a great linen texture fabric in a light grey color (a hint of brown undertone). The pickeled oak feet are really pretty, very sutle off white color. I was a little concerned the nailheads would be too shiny, but they are a nice rubbed bronze color (not a shiny brass). The chair is very comfortable and as a good fit to the seat. I used this in my bedroom with some cream / grey bedding and it looks great. You can jazz it up with a colorful pillow but it is a great neutral that will work in many places. Very pleased with this chair
As other reviewers have shared, this chair is small. It works in our living room, but I'm not sure it's generous enough spacewise to be comfy for long hours. The fabric is a thick, heavy texture which I like (think dropcloth/linenlike blend) the nailhead details are pretty. The chair arrived in one box, screwed in the legs and I was all set. The color in this photo appears lighter to me than it does in person. I would buy it again and I recommend it, the details really up the game.
This chair is listed as light grey and it is actually dark grey. The color of the chair was not well represented in the picture.
I should have listened to the other reviewers - the chair looks almost child sized and I had to return it. Very nice fabric and wood though.
We are using these chairs in the bedroom at the end of our king size bed. Very nice addition to the bedroom and a comfortable place to watch tv. These were easy to unpack and no installation necessary. I would recommend thses in your bedroom, living room or another room where they aren't used for anything except an occasional chair.
good value but the chair is very small and very firm in the seat.
Usually leaves our warehouse in 1-2 business days. *
Items must be returned in new or unused condition and contain all original materials included with the shipment. More details
FINAL SALE EXCLUSION: Items marked as FINAL SALE are not returnable unless the problem you experience is the result of our error.
This item cannot be shipped to Alaska or Hawaii.
More details
Our standard shipping method is ground shipping. We also offer expedited shipping for most items. Your final shipping cost and estimated delivery timeframe will be available at checkout.
Standard shipping details
Expedited shipping details
* For your safety, some orders go through our loss prevention department. If we select your order for this process, we will immediately notify you that there may be up to a 3-day delay on your order.
** Most Oversize orders are delivered within 1-4 weeks. Some orders may take 6 weeks to be delivered.


text:
Latest From Rail
- Network
Freight achieves new highs in punctuality
In the three-month period to the end of September 2014 (Q2 2014/15), 81.1% of freight trains arrived within ten minutes of the scheduled time.
- New Trains
A valuable window into the railway's future
InnoTrans might have been full of shiny new trains, but not much of what was on show was relevant to the UK, right? Wrong, argues TONY STREETER
- Network
Consultation on proposed Crossrail 2 route
London authorities, businesses and residents along the proposed Crossrail 2 route can have their say on plans to protect the route from conflicting development
- Fleet
Green launches cosmetic restoration of 1950s EMU
The man behind the launch of Network SouthEast has launched an appeal to return a Southern Region 2HAP unit to its late 1980s external condition
- Network
East Anglia to Oxford and beyond in ten years?
The long campaigned-for East West Rail project looks on course for completion in under ten years' time.
- Current Trains
Railway renaissance
In the final part of his All-Line Rover trip around the UK's railways, PAUL BIGLAND focuses on the North, before a final trip back down to King's Cross
- Network
First's revenue falls, but profits continue to grow
FirstGroup report profits rose by 70% to £33.3 million in the six months to September 30. But revenue falls 10.9%
- Network
Independent Transport Commission launches high-speed rail report
Report draws on high-speed best practice in Europe to inform UK policy
- Network
Chiltern charter showcases Cowley branch plans
Chiltern Railways operates charter over branch line it hopes to re-open
- Performance
A very special workforce
The railway's response to the sea wall collapse at Dawlish was recognised with a special presentation at RAIL's National Rail Awards. RICHARD CLINNICK reports.
- Network
Network Rail performance criticised by regulator
NR forecast to overspend by £112m, and fails to make expected progress on projects. ORR concerned about future schemes
- Network
GB Railfreight seeks aggregates assessment
GB Railfreight tells Mayor of London consultation that further evaluation of aggregates markets across capital is needed
Top Stories
Hitachi unveils Intercity Express Programme pre-series in Japan
RAIL attends launch of the first IEP train in Kasado, Japan.
Ghost Stations - Inside Aldwych
Into the depths of Aldwych, a disused London Underground station, and a look at some other closed Tube stations.
Launched in 2003, the RAIL100 Breakfast Club is a business networking and social club for the industry's senior managers. It helps members keep abreast of current topics within the industry and gives them the ability to discuss these with their peers.


text:
The Top 10 In Action Sports
01From Cycling The World To Rowing The Arctic... We Talk Adventure With Mark Beaumont
02Four Mini Adventures That Are Closer Than You Know
03This Odyssey Vancouver Edit Will Give You The BMX Fix You Desperately Need
04This Stunning Footage Will Make You Want To See The Northern Lights
05Did Dan Atherton And Red Bull Just Create The Toughest Downhill Track Ever?
065 Action Sports You Should Try On Your Gap Year
07The Drone Footage Of This Abandoned City Will Leave You Absolutely Stunned
08Want To Be A Better Skater? These Scientific Secrets Will Help You On Your Way
09This Hollywood Stuntman Just Dropped An Air Bag Edit That's Flippin' Mad
10This Ken Block Gymkhana Parody Is The Best Thing We've Seen In Weeks
A Other video by freebordswitzerland - 975 views
Once upon a time, some riders on wheels were looking for the perfect road to shred.
After have travel wild lands and cross so many mountain, they found it.
This video is a short edit for the Freebord Best submitted Video 2012.
Recorded on a European Freebord Meeting in Verbier ( Valais, ch ) with some of the best riders on earth.
Edited : JAM Sébastien
Additionnal Footage : Arnaud Blin, Freebord Suisse, Waspview
Thanks, Merci, Danke, Gracias !
What Do You Think?
Get the best in action sports straight to your inbox