text:
• Domain 1: Access Control 2010 CISSP Study Group Domain 1: Access Control Presented By: Jeff McEwen, CISSP. Security Architect, AAA NCNU Insurance Exchange Domain Objective • Domain 1: Access Control • The objective of this domain is to understand: – Access control concepts and techniques – Access control methodologies and implementation within centralized and decentralized environments – Detective and corrective access controls – Mechanisms for controlling system use – Potential risks, vulnerabilities, and exposures 2 Domain Summary • Domain 1: Access Control The information for this domain represents approximately 16% of the CISSP exam content. 3 Access Control Defined • Domain 1: Access Control • Access control is the heart of security – The ability to allow only authorized users, programs or processes system or resource access – The granting or denying, according to a particular security model, of certain permissions to access a resource – An entire set of procedures performed by hardware, software and administrators, to monitor access, identify users requesting access, record access attempts, and grant or deny access based on pre-established rules. – The collection of mechanisms for limiting, controlling, and monitoring system access to certain items of information, or to certain features based on a user's identity and their membership in various predefined groups. 4 Key Access Control Terms • Domain 1: Access Control • Identification – assert user is the user; process through which one ascertains the identity of another person or entity; provides accountability to users & traceability of their activities • Authentication – verifies user is who user claims; process through which one proves and verifies certain information. • Authorization – actions the user is allowed to perform • Accountability – tracks user actions and when they were done • Approval – Authorizations were appropriately granted by the data owner 5 Access Control Concepts • Domain 1: Access Control • Security Policy - a high-level overall plan embracing general goals and acceptable actions for each system • Accountability - systems that process sensitive information must assure individual accountability • Assurance - systems must guarantee correct and accurate interpretation of security policy 6 • Domain 1: Access Control Access Control Systems & Methodology Why Control Access Access Control Purposes • Domain 1: Access Control • Confidentiality - information is not disclosed to unauthorized individuals or processes – protects against hackers, unprotected communications, unauthorized users • Integrity - information retains its original level of accuracy – protects against unauthorized data modifications, system changes, or program changes • Availability - reliable access to data – protects against denial of service, ping attacks, e-mail flaming 8 What does AC hope to protect? • Domain 1: Access Control • Data - Unauthorized viewing, modification or copying • System - Unauthorized use, modification or denial of service • It should be noted that nearly every network operating system (NT, Unix, Vines, NetWare) is based on a secure physical infrastructure 9 Information Value • Domain 1: Access Control • Information is assumed to have a value that can be measured by quantity or quality • The major reason to value information is the cost to develop and the value to its owners • Valuation techniques - Use of policy or regulation, checklist, questionnaire, consensus, accounting data, statistical analysis 10 File and Data Ownership • Domain 1: Access Control • A prerequisite to development of effective access controls is the establishment of Data Ownership. The Data Owner is required to: – Identify sensitivity of information – Determine security requirements – Ensure security requirements meet goals – Authorize access – Develop contingency plans 11 • Domain 1: Access Control Access Control Systems & Methodology How do we control access? Control Types • Domain 1: Access Control • Preventative - deter problems before they occur • Detective - investigate an act that has occurred • Corrective - remedy acts that have occurred • Deterrent - discourage an act from occurring • Recovery - restore a resource from an act that has occurred 13 Lines of Defenses • Domain 1: Access Control Security mechanisms for limiting and controlling access to resources by layering protection • Categories - usually 3 lines with action priorities based on increased control with each succeeding layer – First Line - policies, firewalls, passwords, separation of duties, training, quality assurance, fault tolerance, etc. – Second Line - audit trails, monitoring, penetration testing – Third Line - insurance, bonding, backups, contingency plans 14 Access Control Types • Domain 1: Access Control • Management - policies, procedures, and accountability designed to control system use • Technical - hardware and software controls used to automate protection of the system • Operational - personnel procedures used to protect the system 15 Proactive access control • Domain 1: Access Control • Awareness training • Background checks • Separation of duties • Split knowledge • Policies • Data classification • Effective user registration • Termination procedures • Change control procedures 16 Physical access control • Domain 1: Access Control • Guards • Locks • Mantraps • ID badges • CCTV, sensors, alarms • Biometrics • Fences - the higher the voltage the better • Card-key and tokens • Guard dogs 17 How can AC be implemented? • Domain 1: Access Control • Hardware • Software – Application – Protocol (Kerberos, IPSec) • Physical • Logical (policies) 18 Access Control & privacy issues • Domain 1: Access Control • Expectation of privacy • Policies • Monitoring activity, Internet usage, e- mail • Login banners should detail expectations of privacy and state levels of monitoring 19 • Domain 1: Access Control Access Control Systems & Methodology User Authentication Identification • Domain 1: Access Control • Types of ID – User IDs – Names – Pins – (also used for authentication) – Badges – Biometrics – (also used for authentication) 21 User Authentication • Domain 1: Access Control • User Identification - provides identity to system – authentication data verifies individual – activities traced to an individual – responsible for actions – use of a label to ID user • User Label Characteristics – unique – non-descriptive of function, area, or company 22 User Authentication • Domain 1: Access Control • System Implementation – Administration - create, distribute, and store authentication data (passwords) – Maintaining authentication - log out user or lock system during inactivity – Single log-in - a group of systems on one OS platform that allow the user to authenticate once • Host-to-host authentication - host passes on logon data • Authentication servers - user logs on to a special network server • User-to-host authentication - user logs on and receives token for logons to other systems 23 Authentication • Domain 1: Access Control 3 types of authentication: Something you know - Password, PIN, mother's maiden name, passcode, fraternity chant Something you have - ATM card, smart card, token, key, ID Badge, driver license, passport Something you are - Fingerprint, voice scan, iris scan, retina scan, body odor, DNA 24 Password • Domain 1: Access Control • Most common type of authentication in use • something a user knows • a string of characters that IDs a user • Types – One-time passwords - system generated and changed after every use – Passphrase – a sequence of characters that is longer than a regular password and is transformed into a virtual password 25 Password Issues • Domain 1: Access Control • Selection – Source – can be assigned or user selected, system generated, token generated, or a system default – Composition – can be words, characters, or a phrase – Types – can be system or resource specific • Management – Transport paths that user uses to update password • owner authentication – generated by owner • system owner authentication – generated by system • system administration to owner & system – generated by system administrator 26 Password Issues • Domain 1: Access Control • Management (continued) – Initial passwords • New users • One-time passwords • Force user change – User notification on successful login – date & time of last logon and location – Suspend ID after number of unsuccessful logon attempts – Audit trail of logons – successful login, unsuccessful attempts, along with date/time/ID/origin – Control maximum logon attempt rate 27 Password Issues • Domain 1: Access Control • Control – Password lifetime – length of time the password can be secure – Users change own password – Audit trail of password changes – Risk if compromised • Distribution risk • Probability of guessing • Electronic monitoring • Vulnerable to cracking 28 Password Issues • Domain 1: Access Control • Control (continued) – Password security • Number of characters • Minimum length • Number of invalid attempts – Compromises – severity of measures vs. user acceptance – Forgotten passwords – issue expired passwords, user changes immediately – User ID by phone – validate user identity, call back user at office phone with new password 29 Problems with passwords (what a person knows) • Domain 1: Access Control • Insecure – Given the choice, people will choose easily remembered and hence easily guessed passwords such as names of relatives, pets, phone numbers, birthdays, hobbies, etc. • Easily broken – Programs such as crack, SmartPass, PWDUMP, NTCrack & l0phtcrack can easily decrypt Unix, NetWare & NT passwords. – Dictionary attacks are only feasible because users choose easily guessed passwords! • Inconvenient – In an attempt to improve security, organizations often issue users with computer-generated passwords that are difficult, if not impossible to remember 30 Classic password rules (what a person knows) • Domain 1: Access Control • The best passwords – Easy to remember – Hard to crack using a dictionary attack. – The best way to create passwords that fulfill both criteria is to use two small unrelated words or phonemes, ideally with a special character or number. Good examples would be hex7goop or -typetin • Don't use: – common names, DOB, spouse, phone #, etc. – word found in dictionaries – password as a password – systems defaults 31 Password management (what a person knows) • Domain 1: Access Control • Configure system to use string passwords • Set password time and lengths limits • Limit unsuccessful logins • Limit concurrent connections • Enabled auditing • How policies for password resets and changes • Use last login dates in banners 32 Access Control Techniques • Domain 1: Access Control • Tokens - access information stored in a portable device – Memory token - store but do not process data – Smart token - store and process data – Limitations - lost or stolen with PIN allows for masquerading, battery failure or device malfunction – Benefits • not vulnerable to regular cracks • 2 factor authentication - challenge response – Examples - SecurID, PIN pad, ATM card 33 Tokens (what a person has) • Domain 1: Access Control • Used to facilitate one-time Passwords • Asynchronous Token Device • SecurID -- synchronous Token Device • Physical card • S/Key • Smart card – Contact & Contactless • Access token 34 Access Control Techniques • Domain 1: Access Control • Biometrics - something a person is – The one attribute that cannot be readily compromised in 3 factors of personal identity • knows - i.e. password • has - i.e. access card • about - i.e. fingerprint – Examples - fingerprint, hand geometry, voice verification – Constraints – cost of equipment, access time, false readings 35 Biometrics (what a person is) • Domain 1: Access Control • Authenticating a user via human characteristics – Accuracy • False Reject Rate – (type I error) • False Accept Rate – (type II error) • Cross-Over Error Rate (CER) • Behavioral – keystroke, signature pattern, signature dynamics • Physical characteristics of a person to prove their identification – Fingerprint, Iris, retina, voice, face 36 Advantages of biometrics (what a person is) • Domain 1: Access Control • Can't be loaned like a physical key or token and can't be forgotten like a password • Good compromise between ease of use, template size, cost and accuracy • Fingerprint contains enough inherent variability to enable unique identification even in very large (millions of records) databases • Makes network login & authentication effortless 37 Biometric Disadvantages (what a person is) • Domain 1: Access Control Processing speed issues - Still relatively expensive per user Accuracy – Subject to environmental changes User acceptability -- Some hesitancy for user acceptance 38 Biometric privacy issues (what a person is) • Domain 1: Access Control Tracking and surveillance - Ultimately, the ability to track a person's movement from hour to hour Anonymity - Biometric links to databases could dissolve much of our anonymity when we travel and access services Profiling - Compilation of transaction data about a particular person that creates a picture of that person's travels, preferences, affiliations or beliefs 39 Multi-factor authentication • Domain 1: Access Control 2-factor authentication. To increase the level of security, many systems will require a user to provide 2 of the 3 types of authentication. ATM card + PIN Credit card + signature PIN + fingerprint 3-factor authentication -- For highest security Password + SecurID token + Fingerprint 40 Single Sign-on • Domain 1: Access Control User authenticates only once to a network system to be allowed on all systems in an enterprise • Benefits – More efficient user logon process – Stronger passwords are required – Inactivity thresholds applied uniformly – Effective for disabling terminated accounts 41 Single sign-on (Reduced Sign-on) • Domain 1: Access Control • User has one password for all enterprise systems and applications - that way, one strong password can be remembered and used • All of a users accounts can be quickly created on hire, deleted on dismissal • Hard to implement and get working • Kerberos, SPNEGO, x.509, SESAME – Secure European System for Applications in a Multi-vendor Environment, SAML, WS-Federation • CA-eTrust, RSA Access Manager, IBM Tivoli Access Manager 42 Single Sign-on • Domain 1: Access Control • Methodologies – Network session managers • Provides multiple sessions limited to one computing platform • Synchronization problems – Security server • SESAME – Secure European System for Applications in a Multivendor Environment – Provides distributed access control using symmetric and asymmetric cryptography – Project of ECMA – Provides global access identity – targets end system and provides mapping to local access 43 Single Sign-on • Domain 1: Access Control – Security server (Cont'd) • Kerberos – MIT project Athena – User authentication, encryption, and uses ticket – Authenticator contains same verification information – Tickets – database of clients and private keys – Windows/Active Directory uses Kerberos today – Credential caching • Scripting – Macro language – Replay user keystrokes – Scans for message strings – ID Federation • Liberty Alliance, SAML • WS Federation 44 • Domain 1: Access Control Access Control Systems & Methodology Authorization Access Control Structure • Domain 1: Access Control • Subject - an active user or process that requests access to a resource • Object - a resource that contains information • Domain - a set of objects that the subject can access • Groups - subjects and objects grouped together based on shared characteristics 46 Access Control Criteria • Domain 1: Access Control • Identity - a unique way to identify an individual or program in a system • Roles - computer related functions performed by a user that uses a exclusive set of privileges • Location - physical or logical place of user • Time - day/time parameters used to control resource use • Transaction - program checks that can be performed to protect information 47 Access Control Techniques • Domain 1: Access Control • Content dependent - access based on content of record – provides more access control granularity – access request is in form of question – arbiter program controls access • Temporal isolation - access based on user work schedule – used for multilevel security – each time slot a different access level – used for rotating shifts, weekend operations, etc. • Least privilege rule (need-to-know) - all data access is restricted unless granted 48 Principles of Access Control • Domain 1: Access Control Rule of least privilege • One of the most fundamental principles of infosec • States that: Any object (user, administrator, program, system) should have only the least privileges the object needs to perform its assigned task, and no more. • An AC system that grants users only those rights necessary for them to perform their work • Limits exposure to attacks and the damage an attack can cause • Physical security example: car valet key vs. regular key Separation of Duties – Limits users access based on duty position – Split responsibility requires collusion to create harm 49 Implementing least privilege • Domain 1: Access Control • Ensure that only a minimal set of users have root/administrator/sysadmin access • There are commercial tools available to support shared root access without shared root password • Ensure that software deployed doesn't demand greater access than really needed. • Implement via explicit group membership, not nested or via shared passwords. 50 • Domain 1: Access Control Access Control Systems & Methodology Formal Models Varied types of Access Control • Domain 1: Access Control • Discretionary (DAC) vs Mandatory (MAC) • Centralized vs Decentralized • Formal models (detail in Sec Arch module): – Biba (Integrity) – Take/Grant – Clark/Wilson – Bell/LaPadula (confidentiality) 52 Access Control Models • Domain 1: Access Control • Discretionary - resource owner determines access and privileges user should have ( 107.2) – Identity-based - access based on user and resource identity – User-directed – user (owner) grants access based on restrictions – Hybrid - access based on identity-based and user-directed controls • Mandatory – System determines access based on label ( 107.3) – Object label contains object's classification – Subject label contains subject's clearance – Rule-based - access granted based on resource rules – Administratively directed - access granted by administrator 53 Access Control Models • Domain 1: Access Control • Non-Discretionary - resource access is granted based on policies and control objectives – Role-based - access is based on user's responsibilities. – Task-based - access is based on user's job duties – Lattice-based • Complex decisions with multiple objects and subjects. • Mathematical structure that defines greatest lower-bound and least upper- bound values for a pair of elements 54 Competing definition • Domain 1: Access Control • Wiki defines these three types: – DAC (Discretionary Access Control) – MAC (Mandantory Access Control) • Rule based or Lattice based • Controls read and write permissions based on a user's clearance level and object confidentiality labels – RBAC (Role Based Access Control) • Controls collections of permissions that may include complex operations such as an e- commerce transaction • MAC and RBAC are both defined as Non- Discretionary 55 Discretionary Access Control • Domain 1: Access Control • Access is restricted based on the authorization granted to the user • Orange book C-level • Prime use to separate and protect users from unauthorized data • Used by Unix, NT, NetWare, Linux, Vines, etc. • Relies on the object owner to control access 56 Mandatory Access Control • Domain 1: Access Control • Assigns sensitivity levels, AKA labels • Every object is given a sensitivity label & is accessible only to users who are cleared up to that particular level. • Only the administrators, not object owners, make change the object level • Generally more secure than DAC • Orange book B-level • Used in systems where security is critical, i.e., military • Hard to program for and configure & implement 57 Mandatory Access Control (Continued) • Domain 1: Access Control • Downgrade in performance • Relies on the system to control access • Example: If a file is classified as confidential, MAC will prevent anyone from writing secret or top secret information into that file. • All output, i.e., print jobs, floppies, other magnetic media must have be labeled as to the sensitivity level 58 Problems with formal models • Domain 1: Access Control • Based on a static infrastructure • Defined and succinct policies • These do not work in corporate systems which are extremely dynamic and constantly changing • None of the previous models deals with: – Viruses / active content – Trojan horses – firewalls • Limited documentation on how to build these systems 59 Access Control Models • Domain 1: Access Control • Centralized - one location is responsible for access control – advantage - strict control and uniformity of access – disadvantage - central administration can be overloaded – examples: • RADIUS (Remote Authentication Dial-in User Service) - • TACACS (Terminal Access Controller Access Control System) • Active Directory 60 Access Control Models • Domain 1: Access Control • Decentralized - resource owners are responsible for access control – examples: • domain - set of authorized accesses permitted within a resource area • trusted computer system - a system that has hardware and software controls that ensure data integrity 61 Access Control Models • Domain 1: Access Control Decentralized (continued) Domains – the access control parameters that protect an address space in which a program is operating • a set of objects a subject can access • principle of separation protects resources where resources are encapsulated in distinct address spaces • common subset of subjects – hierarchical domain relationship – subjects can access objects in equal or lower domains – domains of higher privilege are protected from lower 62 Access Control Models • Domain 1: Access Control • Decentralized (continued) – Trusted Computer System – a trusted computer system is one that provides at least one active function essential to the protection of information • Control is based on policy - rules to enforce • Mechanism - enforce policy • Assurance - confidence in control to provide function • Hybrid - a combination of centralized and decentralized administration 63 • Domain 1: Access Control Access Control Systems & Methodology DOD Influence Orange Book • Domain 1: Access Control • DoD Trusted Computer System Evaluation Criteria, DoD 5200.28-STD, 1983 • Provides the information needed to classify systems (A,B,C,D), defining the degree of trust that may be placed in them • For stand-alone systems only • Windows NT has a C2 utility, it does many things, including disabling networking 65 Orange book levels • Domain 1: Access Control • A - Verified protection – A1 - Boeing SNS, Honeywell SCOMP • B - MAC – B1/B2/B3 -MVS w/ s, ACF2 or TopSecret, Trusted IRIX • C - DAC – C1/C2 -DEC VMS, NT, NetWare, Trusted Solaris • D - Minimal security. Systems that have been evaluated, but failed - PalmOS, MS-DOS, OS/2, NT 66 Problems with the Orange Book • Domain 1: Access Control • Based on an old model, Bell-LaPadula • Stand alone, no way to network systems • Systems take a long time (1-2 years) to certify – Any changes (hot fixes, service packs, patches) break the certification • Has not adapted to changes in client- server and corporate computing • Certification is expensive • Mostly not used outside of the government sector 67 Red Book • Domain 1: Access Control • Used to extend the Orange Book to networks • Actually two works: – Trusted Network Interpretation of the TCSEC (NCSC-TG-005) – Trusted Network Interpretation Environments Guideline: Guidance for Applying the Trusted Network Interpretation (NCSC-TG-011) 68 • Domain 1: Access Control Access Control Systems & Methodology Techniques Access Control Techniques • Domain 1: Access Control • Access Control Lists - a list containing users permitted to resources or vice versa – Elementary List - a short list of predefined access rights – Advanced List - access rights based within a registry that permits user-defined controls – Different operating systems have different ACL terms – Types of access (Capabilities): • Read/Write/Create/Execute/Modify/Delete/Rename 70 ACL Types • Domain 1: Access Control • Menus and shells • Database views • Physically constrained user interfaces - restrict access by blocking direct access to function • Capability tables - access to protected resources granted if accessor possesses authentication ticket 71 Mainframe ACL – Sample 1 • Domain 1: Access Control 72 Mainframe Sample - 2 • Domain 1: Access Control INFORMATION FOR DATASET ABCD.EFGHIJ.** (G) ...… ID ACCESS -------- ------- USER1 READ USER2 UPDATE GROUPB EXECUTE ID ACCESS CLASS ENTITY NAME -------- ------- -------- ------------------------- NO ENTRIES IN CONDITIONAL ACCESS LIST 73 Mainframe Sample # 3 • Domain 1: Access Control ACCESSORID = XXXXXX NAME = SAMPLE USER XA DATASET = OPSG OWNER(DSN) ACCESS = ALL XA DATASET = AABB. OWNER(DSN) ACCESS = READ PRIVPGM = SAMPPROG XA DATASET = CCDD.FFFF.YYYY OWNER(SYS) ACCESS = NONE XA DATASET = EEE.GGGG OWNER(SYS) ACCESS = ALL ACTION = AUDIT 74 Standard UNIX file permissions • Domain 1: Access Control Permissions Allowed action, Allowed action, if if object is a file object is a directory R (read) Read contents of the List directory contents file X (execute) Execute the file, Search the directory if a program W (write) Change file contents Add, rename, create files & sub-directories 75 UNIX Sample • Domain 1: Access Control -rw-rw-r-- 1 user1 group1 852 Jul 17 2003 samplefile.txt drwxrwxr-x 2 user1 group1 512 Apr 18 09:14 testdir 76 UNIX - recommendation • Domain 1: Access Control • UNIX - Don't make a program run setuid to root if not needed. Rather, make file group-writable to some group and make the program run setgid to that group, rather than setuid to root • Don't run insecure programs on the firewall or other trusted host 77 Windows Sample • Domain 1: Access Control 78 • Domain 1: Access Control Access Control Systems & Methodology Administration, Auditing & Monitoring Access Control Administration • Domain 1: Access Control • Centralized - one location is responsible for access control – Advantages – • Strict control and uniformity of access • Composite access view easier – Disadvantages – • central administration can be overloaded • More difficult to associate entitlements with approvers 80 Access Control Administration • Domain 1: Access Control • Decentralized - resource owners are responsible for access control – Advantage • Access is granted by person accountable (Approver) – Disadvantages • Access combination conflicts, • Composite view of user access unavailable • Lack of access consistency • More difficult to respond to external regulators 81 Auditing and Monitoring • Domain 1: Access Control Organizations use two basic methods to maintain operational assurance: System audit - is a periodic event to evaluate security Monitoring - is an ongoing activity that checks user and systems 82 Auditing • Domain 1: Access Control Periodic access reviews – Data owners review and certify users who have access Automated tools - program reviews system and reports vulnerabilities Internal controls audit - auditor reviews and analyzes controls Security checklists - security plan used as a system checklist Penetration testing - attempt to break-in to check controls 83 Periodic Access Reviews • Domain 1: Access Control • Regular review of network and application user accounts against active employee termination lists to ensure that only active personnel have active accounts. • Regular review of user entitlements by user managers and data/application owners to ensure that users only have access necessary to do their job 84 Monitoring • Domain 1: Access Control • IDS • Logs • Audit trails • Network tools – Tivoli – Spectrum – OpenView 85 Monitoring • Domain 1: Access Control Intrusion Detection (IDS) – Techniques which attempt to detect computer and network intrusion by logs or audit trail – Automated intrusion detection examines logs and compares with expected user profile activity – Statistical intrusion detection – monitors behavior and maintains profiles, then compares logs mathematically – Rule based intrusion detection – rules characterize intrusions (i.e. generic or operating system specific), then compares logs against rule database 86 Audit Trails • Domain 1: Access Control An audit trail is a series of records on computer events occurring within a system or application Keystroke monitoring - a record of keystroke information entered by a system user Event-oriented - contains records on system, application, or user Benefits - individual accountability, reconstruction of events, intrusion detection, and problem analysis Issues - protection, periodic review, analysis of data 87 Monitoring • Domain 1: Access Control • Review of system logs - periodic review to detect problems • Automated tools - virus scanners, performance monitor, password crackers, etc. • Configuration management - system changes are reviewed • Electronic news - incident response and alert e- mail notices 88 Intrusion Detection Systems • Domain 1: Access Control • IDS monitors system or network for attacks • IDS engine has a library and set of signatures that identify an attack • Adds defense in depth • NIDS / HIDS • Should be used in conjunction with a system scanner (CyberCop, ISS S3) for maximum security 89 Monitoring • Domain 1: Access Control • Adaptive real-time anomaly detection – inductively generated sequential patterns – sequential rules describe behavior – time-based inductive learning approach – time-based induction machine (TIM) • TIM – observes temporal process – identifies patterns – set of hypotheses – input episodes – user profile 90 Penetration Testing • Domain 1: Access Control • Identifies weaknesses in Internet, Intranet, Extranet, and RAS technologies – Discovery and footprint analysis – Exploitation – Physical Security Assessment – Social Engineering • Attempt to ID vulnerabilities and gain access to critical systems within organization • ID and recommends corrective action for the systemic problems • Assessments allow client to demonstrate the need for additional security resources 91 • Domain 1: Access Control Information System Controls Access Control Systems & Methodology Banners • Domain 1: Access Control • Banners display at login or connection stating that the system is for the exclusive use of authorized users and that their activity may be monitored • Not foolproof, but a good start, especially from a legal perspective • Make sure that the banner does not reveal system information, i.e., OS, version, hardware, etc. 93 Access Control Software • Domain 1: Access Control • Software that automates information security functions on host computers – Features: • use password protection • log accesses • user access controls • data access controls • flexible administration – Examples: RACF, ACF2, TOP SECRET, Tivoli Access Manager, RSA Access Manager, Windows GINA/Active Directory 94 RAS access control • Domain 1: Access Control • RADIUS (Remote Authentication Dial-In User Service) – • TACACS/TACACS+ (Terminal Access Controller Access Control System) – Both defined in greater detail in Telecom and Network Security Module. 95 Kerberos • Domain 1: Access Control • Part of MIT's Project Athena Currently in ver 5 • Kerberos is an authentication protocol used for network wide authentication • All software must be kerberized • Tickets, authenticators, key distribution center (KDC) • Divided into realms • Kerberos is the three-headed dog that guards the entrance to Hades (this won't be on the test) 96 Kerberos roles • Domain 1: Access Control • KDC divided into Authentication Server & Ticket Granting Server (TGS) • Authentication Server - authenticates the identities of entities on the network • TGS - Generates unique session keys between two parties. Parties then use these session keys for message encryption 97 Kerberos authentication • Domain 1: Access Control • User must have an account on the KDC • KDC must be a trusted server in a secured location • Shares a DES key with each user • When a user want to access a host or application, they request a ticket from the KDC • User provides ticket and authenticator to the application, which processes them for validity and will then grant access. • Requires synchronized time clocks • Relies on UDP which is often blocked by many firewalls 98 • Domain 1: Access Control Access Control Systems & Methodology Vulnerabilities & Attacks Risk • Domain 1: Access Control • Threat - an activity with the potential for causing harm to an information system • Vulnerability - a flaw or weakness that may allow harm to an information system • Impact - the harm that would be caused by an incident • Risk - is a combination of chance that threat will occur and the severity of its impact • Exposure - a specific instance of weakness to losses from a threat event 100 Vulnerabilities • Domain 1: Access Control • Physical • Natural – Floods, earthquakes, terrorists, power outage, lightning • Hardware/Software • Media – Corrupt electronic media, stolen disk drives • Emanation • Communications • Human – Social engineering, disgruntled staff 101 Attacks • Domain 1: Access Control • Passive attack - Monitor network traffic and then use data obtained or perform a replay attack. – Hard to detect • Active attack - Attacker is actively trying to break-in. – Exploit system vulnerabilities – Spoofing – Crypto attacks • Denial of service (DoS) - Not so much an attempt to gain access, rather to prevent system operation – Smurf, SYN Flood, Ping of death – Mail bombs 102 Methods of Attack • Domain 1: Access Control • Methods to bypass access controls and gain unauthorized access to information – Brute force - persistent series of attacks, trying multiple approaches, in an attempt to break into a computer system – Denial of service - overloading a system through an online connection to force it to shutdown – Social Engineering - deception of system personnel in order to gain access – Spoofing - masquerading an ID or data to gain access to data or a system 103 Password Attacks • Domain 1: Access Control • Brute force – l0phtcrack • Dictionary – Crack – John the Ripper • Trojan horse login program 104 • Domain 1: Access Control Access Control Systems & Methodology Protection Object reuse • Domain 1: Access Control • Must ensure that magnetic media must not have any remnance of previous data • Also applies to buffers, cache and other memory allocation • Required at TCSEC B2/B3/A1 level • Secure Deletion of Data from Magnetic and Solid- State Memory, Peter Gutmann – http://www.fish.com/security/secure_del.html • Documents recently declassified as to how 10-pass writes were recovered • Objects must be declassified • Magnetic media must be degaussed or have secure overwrites 106 TEMPEST • Domain 1: Access Control • Electromagnetic emanations from keyboards, cables, printers, modems, monitors and all electronic equipment. With appropriate and sophisticated enough equipment, data can be readable at a few hundred yards. • TEMPEST certified equipment, which encases the hardware into a tight, metal construct, shields the electromagnetic emanations 107 TEMPEST • Domain 1: Access Control • Rooms & buildings can be TEMPEST-certified • TEMPEST hardware is extremely expensive and can only be serviced by certified technicians • TEMPEST standards NACSEM 5100A NACSI 5004 are classified documents 108
Pages to are hidden for
"ISSA CISSP Prepation"Please download to view full document


text:
Weighing Living Cells
An ultrasensitive method for weighing cells could lead to a cheap and easy-to-use diagnostic device.
Color Editing for Dummies
A new Xerox prototype aims to let people use simple natural-language commands to tweak photos and documents, avoiding complex color-editing tools.
Faster-Healing Artificial Skin
In work that has implications for those with severe burns, researchers have demonstrated in mice a new way to encourage skin regeneration.
Gambling and Parkinson's Disease
Scientists are searching for clues into why some Parkinson's drugs trigger compulsive behavior.
Self-Cleaning, Fog-Free Windshields
A new adaptive polymer coating combines unusual chemical properties to help maintain a clear view.
White House Budget to Cut Energy Research
In President Bush's proposed 2008 budget, weapons development wins big while overall funding for research suffers.
Good Day Sunshine
One of the largest solar energy plants in the world went on line in Portugal this winter.

subset: commoncrawl


text:
There are lots of ways to find a good book. Mouse over the "?" button for more information.
Books Like The Crossover
- The CruisersWalter Dean Myers
- Planet Middle SchoolNikki Grimes
- Sasquatch in the PaintK. Abdul-Jabbar
- Athlete Vs. MathleteM.C. Mark
- Down to the Last OutWalter Dean Myers
- Upside Down in the Middle of NowhereJ. Lamana


text:
Claudia Schiffer25 August 1970, Rheinberg, Germany
44 years
David Copperfield, Peter Gabriel, Tim Jeffries, Matthew Vaughn
Claudia Schiffer is a German supermodel who was most famous during the 90's. She is Karl Lagerfelds favorit model. Claudia is 180 cm tall.
RSS feed with Claudia Schiffer
Claudia Schiffer is a True London Fashionista!
Wednesday 5:02 PM, 08/06/2011
Ex Super Model Claudia Schiffer never seizes to impress us with her style. We frequently see her drop off her kids at their London private school, and she's always dressed to the nines. Just yesterday we spotted her exiting her kids' school wearing a classic beige trench coat, modern flared jeans and a hippie-chic brown shoulder bag and sunglasses. Everything from the color scheme to her choice of clothing pieces was just perfect. Now that's a true London fashionista for you!
Tags: Claudia Schiffer / Street Style
Street Style! Real Celeb Looks Straight Off the Street!
Thursday 5:03 PM, 02/06/2011
We caught some of favorite celebs (A list, B list, and D list) out on the street this week. Some were dressed to the nines and others went for a comfy, every day look. And of course, there were a few celebs who looked completely ridiculous (ahem, Tara Reid and Mel C) and all we can do is just shake our heads in embarrassment. Check it out!
Tags: Street Style
This Week's Best Dressed Celebs!
Tuesday 8:56 PM, 31/05/2011
We had a lot of fun, fresh looks on the red carpet and on the street this week! We love how celebs are using bright colors, crisp whites, and fun details (like lace) in their wardrobes. Summer is here and our favorite fashionistas shine! What do you guys think, do these celebs deserve the title of Best Dressed?
Tags: Best dressed celebrities
Claudia Schiffer's Breezy Style!
Sunday 4:29 PM, 29/05/2011
We love this look on Claudia Schiffer! Classic with a bohemian twist!
Tags: Claudia Schiffer / Hollywood celebrity
Claudia Schiffer Works a Denim Skirt!
Saturday 3:25 PM, 28/05/2011
Claudia Schiffer pulls off a denim skirt with a simple shirt tucked in! Easy, effortless style!
Tags: Claudia Schiffer / Hollywood celebrity
Claudia Frankenstein?
Sunday 6:11 PM, 22/05/2011
What in the world has happened to Claudia Schiffer? When we spotted her attend the red carpets of the Cannes Film Festival earlier this week, we hardly even recognized her. She looked super scary and we don't know whether to pin it down as bad make up, bad botox or bad aging? Perhaps it's just a mix of all three...
Tags: Claudia Schiffer / Red Carpet / Cannes Film Festival


text:
Login | Join
News Featured Content
All News Articles
Interviews Featured Content
All Interviews Articles
Lessons RSS
Lessons Featured Content
All Lessons Articles
Gear RSS
Gear Featured Content
All Gear Articles
Girls Featured Content
All Girls Articles
Acoustic Nation RSS
Acoustic Nation Featured Content
All Acoustic Nation Articles
Taylor Guitars introduces its inspired new 600 Series; with photo gallery and video.
Playing live might be the best way to hone your performance skills, but when it comes to technique, you need practice, practice, practice. If you play an electric guitar, your woodshedding sessions demand an amp that not only reveals the details and nuance of your playing but also sounds great—so great that it makes you want to practice more and become the best guitarist you can.
In the humorous clip, which you can check out below, Hoekstra demos the EVH Striped Series Guitar, which also was reviewed in 2014 by Guitar World's Paul Riario. You can check out his review video, with text by Chris Gill, right here.
It's our first SBMM 'Chameleon' finish, and was selected by JP himself earlier this year between DT tours. Needless to say, it's probably our most requested finish since day one, and we searched high and low for something that could be our counterpart to EBMM's Mystic Dream finish. John personally selected this out of several samples we sent him.
The Wave is a versatile stand-alone, tube-driven analog spring reverb unit kit. It can be used in front of your guitar amp or as a line-level analog reverb effect for the recording studio.
In the new video below, the Commander-in-Chief discusses Xvive pedals and demos the company's XV5 delay pedal through PreSonus' Studio One.
In the brand-new video below, several guitarists, including Guitar World's Paul Riario, demo the new Ibanez RGKP6 Kaoss Guitar.
Below, check out a new demo video of Charvel's Guthrie Govan signature model guitar. The video was created and posted by the gang at Matt's Music Center in Weymouth, Massachusetts. I discovered Matt's Music because they're selling—via eBay—my next guitar.
In the video below, Dave Nassie demos an EVH Wolfgang Special model with an arched top basswood body. From the company: The EVH Wolfgang Special was crafted in EVH's Mexico facility with a re-imagined design that delivers more guitar at greater value than ever.
Jackson is pleased to announce the latest addition to its popular Pro Series, the Phil Demmel Demmelition Pro guitar. Jackson's Demmelition Pro model puts Machine Head guitarist Phil Demmel's devastating style and double-cut King V specs right in your hands.
One of the most frustrating aspects of making music today is toiling for hours in the studio to make a pristine recording and craft a perfect mix, only to end up selling your music to an audience that mostly listens to compressed audio files through tinny-sounding ear buds.
Buy it now!
Now on the iPad
Copyright 2015 © NewBay Media, LLC. 28 East 28th Street, 12th floor, New York, NY 10016 T (212) 378-0400 F (917) 281-4704


text:
Light Aged Destroy
¥ 1,298
Medium Aged
¥ 1,098
¥ 1,498
Light Aged
¥ 998
Swedish Blue
Imperial Blue
Raw Grey
Dark Aged
¥ 1,198
Lead Gt#864
Rank Blue
Mazarine Blue
Vintage Aged
Your bag will be emptied when you change your country settings.
We currently only provide our site in English for your country. Do you want to translate it to Danish with Google Translate?
G-Star has the broadest range of jeans worldwide. Wear it ti ...
More than 70 years after their initial creation, a selection ...
We use cookies.
Cookies are blocked or not supported by your browser. You must enable cookies to use this website.


text:
I've got a few illustrations in the current issue of MAD Magazine. Here's an unused sketch from the gig. You have to buy the issue to see the good stuff!
Archive for the 'News' Category
MAD # 530Sunday, November 2nd, 2014
That Time I Was The Only Thing On CNN NewsThursday, September 25th, 2014
While I was still in college I was lucky enough to work for The Associated Press. I drew a daily feature about weather trivia as well as various spot illustrations. This one, about overweight umpires, ended up on a CNN sports report. In case you can't tell from the George Bell/Dave Winfield trade talk or the anchor's hair and tie, this aired in 1988!
MAXIMUM Minimum Wage Pin-UpWednesday, September 10th, 2014
I was flattered to be asked by my friend and fellow cartoonist, Bob Fingerman, to contribute a pin-up for his massive must-have Maximum Minimum Wage Collection. It's a beauty of a book, filled with great, funny writing and beautiful art. I hoped to give Bob a smile with my page by giving his MW cast the zombie apocalypse treatment. He loves zombies, I think.
Here's a peek at my pin up:
(Click on the image to see a detail of the original unexpurgated version!)
Queens, NYCFriday, March 21st, 2014
Cringe-Worthy!Wednesday, March 19th, 2014
Here's another thing I done did. It's the cover art for an anthology of comics published by Birdcage Bottom Books! It should be out in time for SPX, whenever that is! Soon, I'll bet!
Last Weeks in Next Week in NYC!Friday, February 28th, 2014
Here is the last handful NWinNYC! comics. I'll be putting the strip on hiatus for a while to focus on bigger problems. I mean projects, of course, but more on that later. I enjoyed doing these strips for The NY Observer and hope to do some more in the future. But these are the last of them for now so read 'em slow. And if you find yourself jonesing for some Big Apple humor, you can always score a copy of If New York City Was The World. It's a collection of strips about the city that never sweeps, and a sort of precursor to NWinNYC! that ran in a Manhattan neighborhood paper back way back when those kinda things still existed. But the humor contained with in is as fresh as a NYC breeze. It's way out of print but you can actually get a signed copy from me through Amazon. In the meantime, enjoy!
Next Week in NYC! Comic Strip Catch-Up!Monday, May 6th, 2013
I missed re-posting a whole slew of past week Next Week in NYC! strips from The Observer lately. What? You hadn't noticed? Well no worries! Here's a batch from April for you, still as fresh today as the day they were first slapped onto bristol. New strips appear each week in the paper and at The Observer online every Tuesday or Wednesday or so.
April 9/Week #008
April 17/Week #009
April 25/Week #010
I've Gone MAD!Monday, April 29th, 2013
I'm pleased to officially join the ranks of the Usual Gang of Idiots, I guess, if one appearance is all it takes and I'm pretending it does. (All the work I'd previous done was for MAD was, in fact, for MAD KIDS magazine, which is not apparently the same thing.) Anyway, I drew some pictures for the front end of this sucker. They are funny pictures. Please check it out!
Next Week in NYC! #06Monday, April 15th, 2013
Here is the strip from the April, 1 2013-ish issue of The Observer. New strips magically appear there every Wednesday!
STOP THE PRESSES!Sunday, February 24th, 2013
Wow! Suddenly, I'm front page news! Not really, but that is my name right up there next to Sam Henderson's Hysterical Hipster Hulk. That's because starting this past week I have an all-new, weekly comic strip featured in The New York Observer. It's called, NEXT WEEK in NYC! Any fans of my old NYC comic strip collection, If New York City Was The World will certainly want to check it out. Last week's NEXT WEEK in NYC! strip can be seen here. New strips appear every wednesday in both the print and online versions of The Observer. It's a work in progress and I'm still ironing out all the details but it's a real treat to be contributing a weekly feature to The Observer and I'm looking forward to trying and make New Yorkers both laugh and scratch their head in wonder for as many weeks to come as possible. It's a dream job but it's tough crowd, so wish me luck. Details to come…


text:
Truck North - Rock N' Rolla
Artist: Truck North
Producer: Dame The Great & Schooley V
Album: Our American Cousin EP
Avg Rating: 2.4 ( 8 votes )
Don't be so quick to label Truck North as a rapper. On his first Booth appearance since February, North wants us to know that, in addition to being an emcee, he is also a certified Rock N' Rolla. The Philadelphia native, who is a close friend of The Roots, relies on his powerful delivery to move the track along. Despite the demonstrative, guitar based beat, composed by Dame The Great and Schooley V, Truck doesn't get drowned out, delivering several memorable lines with a gritty flow, perfectly blending the rock and roll foundation with a distinct hip-hop flavor. Rock N' Rolla is the third single off his forthcoming Our American Cousin EP, coming soon.
Truck North IndieStreet Banger
Written by Lucas G. on 12/2/12
Submit your Rating
Black Ink/Rawlife
First DJ Booth Appearance:
"Criminal ft. Saigon & Truck North" (2008)
You Might Like...
Commentsblog comments powered by Disqus
DJBooth TV
Discover the best new songs, videos, and albums added to the Booth.


text:
My Favorite Things
To play the media you will need to update yourFlash plugin.
My Favorite Things composed by Oscar Hammerstein and Richard Rodgers. Arranged by Paul Murtha. For Jazz Ensemble (Score & Parts). Easy Jazz Ensemble Series. Grade 2. Score and parts. Published by Williamson Music (HL.7011700).
Treated here as a jazz waltz, this popular tune from The Sound of Music features a relaxed and easy-flowing swing style. The melody is passed from section to section, and there are short solos for trumpet and tenor.


text:
L'Oreal® Paris Feria Absolute Platinum Advanced Lightening System with Anti-Brass Conditioner
$8.39 - $8.99 online
Offer available online only. Offer applies to purchases of $25 or more. Some exclusions apply. Handling fees may still apply to bulky items. $25 purchase is based on merchandise subtotal. Gift wrap, tax and handling charges will not be included in determining merchandise subtotal. Offer valid for orders shipping within the 48 contiguous states, as well as APO/FPO and for Standard and To the Door shipping methods only.
Taking cues from latest runway trends, Feria introduces Absolute Platinum to achieve the ultimate platinum blonde color. The innovative ammonia-free formula lifts hair up to 7 levels for absolute lightening and uncompromised clarity. The exclusive Anti-Brass Conditioner provides cool tones to help prevent brassiness while leaving hair conditioned.
Pure, shimmering color with 3X highlights
Gentle, deep conditioning formula
Won't wreck or ravage your hair
We regret that this item cannot be shipped to PO Boxes.
refund/exchange policy
Most unopened items in new condition returned within 90 days will receive a refund or exchange. Some items have a modified return policy that is less than 90 days. Those items will either show a "return by" date or "return within" day range under the item on your receipt or packing slip and in the "Item details, shipping" tab if purchased on Target.com. Items that are opened or damaged or do not have a packing slip or receipt may be denied a refund or exchange. All bundled items must be returned with all components for a full refund. Bundle components may not all have the same return policy; please check your packing slip for details. Some items, such as gift cards, digital items are never returnable.
See the Target return policy for complete information.


text:
regarding the use of ramping. You may want to use it. If you turn the controller on without ramping, you end up hammering the Controller with a huge error in the beginning. Depending on the response of the system, you could end up with Integral windup. This can cause large overshoots as the system tries to come into control
Derivative can also be used to minimize overshoot. It may take a while to get the gains set for your system, so a couple run throughs with water will help. I didn't read the manual but most controllers have auto tune these days and can help minimize the screwing around generating the right gains.
#1 - 5 Gallons Harp Clone All Grain with Wyeast 2007 Lager (~5.5% ABV)
#1 - 6 Gallons Dry Irish Stout Partial (~4.0 ABV)
#2 - 6 Gallons Brown Sugar Ale All Grain with Nottingham Yeast (~5.0% to 5.2%)
6 Gallons Honey Ale AG
6 Gallons Brown Sugar Lager
A suggestion would be to move the proportional valve to the coolant circuit instead of the wort circuit as it would not catch hop and cold break particles which would be a sanitation "oops" later. As to auto tune, it may or may not work, it depends on the response time to coolant flow change and time to transit heat exchanger to see response at temperature sensor. It is going to be interesting to see how this works as it can not be simulated and tuned before operation.
Well, thanks everyone for the advice. I will wait until I get all the parts and then give it a whirl. I have 2 brew days coming up this week, but I won't be ready yet to use the setup. It will probably be a month or more before I get the chance again, and I will update as things happen.
Again, thanks everyone!


text:
Cd4 Immunoassay
Here's a taste of what TheBody.com has to offer on this topic:
Ask the Experts
chemiluminometric immunoassay????Dr. Bob,I really need your help. I am donating $50.00 on Friday when I get paid. I had a very high risk exposure in Feb of this year. I got tested at 5 weeks via the eia 1/2 it was negative I got tested again via the clearview or something at 3...
Response from Robert J. Frascino, M.D.
The Robert James Frascino AIDS Foundation...adding to your protein shakes lately??? The brief answer to your somewhat bizarre question is no.As for a "chemiluminometric immunoassay," this is a very legitimate way of testing for anti-HIV antibodies. It's a diagnostic test for qualitative... Read more »
electrochemiluminescence immunoassay+HIVHello,I had protected sex in Spet 2006. While opting for an insurance, I did ELISA which came... Read more »
is qualitative immunoassay test accurate for detecting hiv?hi dr. bob,I've been writing to you almost everyday 3months ago but I haven't received any response... Read more »
Dried Blood CD4+ T-Cell Test May be Cheaper, More Convenient Alternative in Developing Countries, Study Says...Researchers have replicated the CD4+ T cell count test, which is normally conducted on an expensive flow cytometer machine using fresh blood, using dried blood and Read more »
Understanding CD4 Cells and CD4 Cell Tests... The Basics CD4 Count and HIV CD4 Count and HIV Treatment CD4 Cell Test The Bottom Line The Basics Your immune system protects Read more »
CD4 Cell Tests... What Are CD4 Cells? Why Are CD4 Cells Important in HIV? What Is a CD4 Test? What Factors Influence a CD4 Cell Count? How Are the Test Read more »
Novel Immunoassay Suitable for Blood Donor Screening...detection modules with relatively poor sensitivity and produce a higher rate of false-positive results than third-generation enzyme immunoassays (EIAs)." Bernard Weber and colleagues at Reunis Kutter-Lieners-Hastert Laboratories in Junglinster,... Read more »
Connect With Others
4th Generation HIV Test
Posted by Trophy...the S/LS test strategy may be the detection of individuals with long-standing infection (0.4%) and late-stage AIDS (2%). Thus, CD4 cell counts and clinical information may be required to support results obtained by the S/LS test algorithm for... Read more »
how could it be
Posted by skiter, 5 Replies... I tested positive on 05/06/2006 reactive ELISA twice and positive Western Blot then PCR RNA 9000cps. CD4 of 1680 and have seen Dr for last two years never had any symptoms at all just one time bad flu like illness and oral thrush. Read more »
group N difficult to be identified!
Posted by Anonymous, 1 Reply...between 1999 and 2002, were screened for HIV-1 group N and SIVcpz infections using a serological screening algorithm based on immunoassays with antigens derived from HIV-1 group M, N, and O, and SIVcpz strains. Specimens with reactivity to group... Read more »
ARS Patient cases
Posted by Anonymous...the patient was at the emergency room, a patient blood sample was examined for HIV by ELISA. The HIV serology was positive. CD4 cell counts and viral load were not obtained. The patient was seen at a clinic 3 months after being discharged from... Read more »
Resource Centers
Guides for People With HIV


text:
Shop now and get Free Value Shipping on most orders over $49 to the contiguous 48 states, DC and to all U.S. Military APO/FPO/DPO addresses.
We want to ensure that making a return is as easy and hassle-free as possible! If for any reason you decide that your purchase just isn't for you, simply return the item within 30 days of receipt and we'll cover the cost of return shipping. Learn more about our Return Policy.
Be sure that your materials are prepared when you need them by organizing them in the Waterloo 56in Industrial Series 12drawe 5011165561. Supplying a ton of storage space and the best spot for tiny, easily lost nuts and bolts, the Waterloo 56in Industrial Series 12drawe 5011165561 saves you time and eliminates tension by placing all you need to finish your project in the same location. These Tool Boxes / Storage Boxes from the industry experts at Waterloo are built with the most long lasting materials available, great for the frequent handyman or fisherman who carries his toolkit into all weather conditions. A respected expert in the tool box industry, Waterloo provides dependable robustness and responds precisely to your requirements to make certain that your equipment remains preserved and in outstanding condition. Here at OpticsPlanet, our goal is to deliver the ideal way to suit all of your storage needs, and the Waterloo 56in Industrial Series 12drawe 5011165561 is just one of numerous high quality storage cases that we are thrilled to present our customers. For transporting and guarding your chosen tools on the go, reach for the Waterloo 56in Industrial Series 12drawe 5011165561.
The Waterloo 56in Industrial Series 12drawe 5011165561 is a quality addition to the Waterloo lineup. For more great deals on Tool Boxes / Storage Boxes by Waterloo, please browse our Waterloo Tools page.
Connect with OpticsPlanet
Become our fan, follow us, & subscribe for the latest updates and deals
Subscribe to our email list
Sign up and receive $5 Off and get exclusive access to promotions, sales
events, pre-order sales & more!
Contact Information
Toll-Free: 800-504-5897
Intl.: 847-513-6201
Fax: 847-919-3003
Email: firstname.lastname@example.com
Hours of Operation
7AM-8PM CST Mon-Fri9AM-5PM CST Sat-Sun
Our Guarantees


text:
Publisher's Description+
The Apple menu is the single most missed feature of the Classic Mac OS that was never fully implemented in Mac OS X. It is true that the dock does most of it, but many functions such as folder browsing can be painfully slow. Mr 9 menu is a tiny and completely harmless application that places an icon in the dock. Clicking the icon bring up the Classic Menu bar for instant access to the old Apple menu. The application comes with no bells or whistles as it was designed to run on a minimum of space and memory. Not even code for registration or demo limitations were included so this "pay-if-you-want-ware" comes unlimited and fully functional.
What's new in this version:
Three choices for access are available. "Hidden", which means that you activate the Classic menu by clicking the dock icon. "Access box", which displays a tiny clickable icon just beneath the Blue Apple. "Needle", the ultimate in minimalism. No icons that take up screen space. Just point the mouse pointer to the left side of the screen. An strip 100 pixels high just below the Blue apple is designated as a "hot area".


text:
Is your resume in need of a little disruption?
Startups are all about
making things work better.
Our resume writing service is all about doing that for your CV.
StartUpHire is the place to find Test-Manager jobs in and near . Review the list below of Test-Manager jobs. These Test-Manager jobs represent some of the most rewarding careers available. You can refine your job search for Test-Manager jobs in by adding a job title, company name, or keyword to the search box above … or click the "Advanced Search" link for more options. Don't see the employment opportunity you're looking for? Check back soon for more Test-Manager jobs in , or sign up for an email alert (link in upper left) to receive periodic updates on new Test-Manager jobs in , .
Sales & Business Development San Francisco, United States Transform the way companies do business and help them achieve their goals Manager, Online Acquisition Are you interested in joining one of the fastest-growing SaaS companies in the Bay Area? Are you highly motivated,3/23/2015 San Francisco, CA Save This Job
About Gilt Gilt.com is an innovative online shopping destination offering its members special access to the most inspiring merchandise and experiences every day at insider prices. Gilt continually searches the world for the most coveted brands and products, including fashion for3/10/2015 New York, NY Save This Job
Location: New YorkDepartment: Prod DevelopmentType: Full TimeMin. Experience: Mid Level Summary: The Junior Data Product Manager, Lab Solutions will be the business owner of products for Pathology Labs (both internal products and client-facing products) through the entire3/4/2015 New York, NY Save This Job
Location:CA-Pleasanton Job Code:741 Description Ellie Mae (NYSE:ELLI) is a leading provider of enterprise on-demand solutions, including an online network, software and services for the residential mortgage industry. Ellie Mae is leading the mortgage industry into the future,2/23/2015 Pleasanton, CA Save This Job
Data Manager Redwood City, CA Product Job Description About Yummly: Yummly is a Silicon Valley based startup focused on building the digital kitchen platform and mapping the food genome...making life better/easier/more fun for everyone who cooks. We have an incredible mix of2/21/2015 Redwood City, CA Save This Job
Are you one of those technically proficient and creative individuals who wish they?d had an opportunity to contribute to a major institution in its infancy? If you are, then we can?t wait to meet you! At Cardlytics, you?ll face new challenges every day that will demand new and2/16/2015 Atlanta, GA Save This Job
The Switchfly Strategic Account Manager (SAM) will be based in San Francisco, CA and charged with ownership of operational excellence and financial success of Switchfly?s most important clients. With an insatiable appetite for service excellence and an ability to juggle competing2/7/2015 San Francisco, CA Save This Job
If you have a deep interest in software and its ability to impact global democracy, citizen engagement, and increased government transparency, we are interested in talking to you. As the leader in government technology, we?ve chosen to create a home in the heart of downtown2/1/2015 Denver, CO Save This Job
Skills: Minimum 8 years of experience in Web application testing. Minimum 5 years of experience in banking industry. Understanding of Java/J2EE, Unix and SQL environments. Description: Senior Software QA Lead / Manager Job Profile: Verient is looking for a QA Lead/ Manager to2/1/2015 San Jose, CA Save This Job
Overview: The project manager is responsible for delivering projects to schedule, budget and quality. The role requires mastery of the technical knowledge of project management inter-related process stages i.e. initiate, plan, execute, monitor and control and close, and the1/27/2015 Pittsburgh, PA Save This Job
Cogency Software is the leading solution to ensure accurate books and records for multi-manager investors. Located in New York City and the San Francisco Bay Area, Cogency provides best in class portfolio and accounting software, implementation services, subject matter expertise1/27/2015 CA Save This Job
Tracking Code 95-093 Job Description We are seeking a talented and highly motivated individual to join our team as a Senior Scientist/Project Manager - Microbiology. Summary: This position will work as part of our Microbiology team in developing and optimizing methods for3/31/2015 Lexington, MA Save This Job
Enterprise Account Manager in St. Louis Missouri United States Danaher Company Description Arbor Networks is a leading provider of network security and monitoring solutions for global networks. Its customers include over 70 percent of the world?s ISPs and many large enterprises.3/23/2015 St. Louis, MO Save This Job
Enterprise Account Manager in St. Paul Minnesota United StatesDanaher Company Description Arbor Networks is a leading provider of network security and monitoring solutions for global networks. Its customers include over 70 percent of the world?s ISPs and many large enterprises.3/23/2015 St. Paul, MN Save This Job
Job Description The Software Development Manager is accountable for managing resources and processes to deliver software releases on schedule and meeting their business requirements. That must be accomplished while ensuring that the Software Development Team has a conducive3/18/2015 Overland Park, KS Save This Job
Tracking Code 232-788 Job Description Manager Software Development, Sales Center applications will be responsible for maintaining existing Allconnect?s sales call center web application and new development to optimize it for the Allconnect growth. Success will be measured3/17/2015 Atlanta, GA Save This Job
Description iRise is seeking a hands-on Marketing Manager to plan, execute and measure marketing campaigns to enterprise customers that generate qualified sales opportunities and completed sales. RESPONSIBILITIES Plan and execute compelling demand generation programs to3/10/2015 Los Angeles, CA Save This Job
San Francisco We are seeking a Senior Manager, Website Optimization & Analytics. This individual is an experienced analytical leader in website optimization. The person in this role works closely with the Product Management team. The qualified candidate sets up tests, measures3/2/2015 San Francisco, CA Save This Job
Job Description This is a hands-on technical development and management role. You will be expected to: Provide technological leadership to the Web Applications group and provide guidance on architectural design, implementation and testing of mobile responsive WebMountain View, CA Save This Job
McCabe Software is looking for a Pre-sales lead/manager to manage the technical resources and operational procedures of the pre-sales group. We seek high achievers with demonstrated success in technical sales and customer service. Must possess strong managerial, interpersonal,3/1/2015 Cranston, RI Save This Job


text:
Doug Roath jumps from the roof of his house after assessing damage caused by Sunday's storm which sent heavy boulders, mud, rushing water and mountain debris into the yard and slammed against the home off Highway 38 in Forest Falls.
PHOTOGRAPH BY: Gina Ferazzi / Los Angeles TimesLink
Volunteers from the Church of Jesus Christ Latter Day Saints help to dig out vehicles in front of the house of resident Michelle Olson that was inundated with rocks and debris.
PHOTOGRAPH BY: Al Seib / Los Angeles TimesLink
A man and child rest in the rubble of their home in the Shejaiya area of Gaza, which has seen some of the worst destruction. Many have no home to return to.
PHOTOGRAPH BY: Carolyn Cole / Los Angeles TimesLink
USC fans watch practice at the Trojan campus Monday. It's the first time in four years that fans were allowed to watch practice.
PHOTOGRAPH BY: Wally Skalij / Los Angeles TimesLink
The sun begins to peek out from below a layer of smoke blowing north from fires in southern Oregon and Northern California as it sets on the Willamette Valley near Eugene, Ore.
PHOTOGRAPH BY: Chris Pietsch / The Register-GuardLink
A woman with an umbrella crosses a street in Hanover, Germany, as seen through the rain-wet window of a car.
PHOTOGRAPH BY: OLE SPATA / DPALink
Filipino children wade in floodwater in the town of Hermosa, Philippines. Heavy rainfall caused wide spread flooding in Bataan, Zambales and Pangasinan provinces.
PHOTOGRAPH BY: FRANCIS R. MALASIG / EPALink
A rainbow forms over the Atlantic Ocean as storm clouds approach a small farm in Cape Town, South Africa.
PHOTOGRAPH BY: NIC BOTHMA / EPALink
Dancers are surrounded by onlookers as they perform the traditional Basque dance "Aurresku" during the "Fiestas de la Virgen Blanca" (White Virgin Feast) in Vitoria, Spain.
PHOTOGRAPH BY: ADRIAN RUIZ DE HIERRO / EFELink
More galleries on Frameworkreturn to gallery
Kobe Bryant visits China, and the crowd goes wild
Lakers star Kobe Bryant is visiting China, holding basketball clinics and doing promotional work for products he endorses, according to news reports. While there, he made some... View Post»
Documenting stories of Lima, Peru, in photographs
Michael Robinson Chavez, Los Angeles Times Peru is the reason... View Post»
Pictures in the News | Dec. 8, 2010
Wednesday's Pictures in the News begin in South America, where Christians from Paraguay and neighboring countries attended a Mass in Caacupé to pray for jobs and good health in... View Post»
The Week in Pictures | Oct. 25-31, 2010
Each week we bring you the best images from around the world in our Week in Pictures photo gallery. Take a look back at the week with the humorous (dancing humans as... View Post»


text:
Quick Indoor Meals for Summer Video
Learn how to cook meals indoors - quickly! - during the summer
What Do You Think?
Can You Guess Which Recipe Your State Googles the Most?
Chicken: It's (probably) what's for dinner.
The Cooking Trick That Slashes the Calories in Rice by Half
You just need a smidge of oil — and a lot of time.
Possible Food Babies of the Heinz and Kraft Merger
When two massive companies team up, how weird could things get?
9 Cupcakes Inspired by Starbucks Drinks
We're celebrating the latest Frappuccino announcement in a way that just feels right.
More From Food & Recipes


text:
AUSTIN, Texas—The winning numbers in Tuesday evening's drawing of the Texas Lottery's "Pick 3 Night" game were:
8-5-0, Sum It Up: 13
(eight, five, zero; Sum It Up: thirteen)
(Russ Rowland/AP)
Bill Clinton's 'flaws' the subject of off-Broadway musical
NEW YORK (AP) — Bill and Hillary Clinton are going back to the White House this spring — onstage, that is. Full Story
Belligerent birds chase people at central Florida park
MELBOURNE, Fla. (AP) — Officials say some out-of-control birds are chasing people and tying up traffic at a central Florida park. Full Story
Zayn Malik quits One Direction; band to continue with four
Fame apparently became too much for Zayn Malik, who announced he is leaving the band after five years.


text: Thomas M. Quinn & Sons Funeral Home | Queens Gazette Qgazette Queens, L.I., New York Thomas M. Quinn & Sons, Inc. has been supporting the families of Astoria in their moments of greatest need. And while nothing can make the grieving process less difficult, the ability to talk at any time, day or night, to a licensed grief therapist can help in the healing process. That's why, we are proud to offer the Dignity Memorial® Compassion Helpline® to ensure that even after the funeral, you're not alone. For more information, contact our staff at 718.721.9200. Your grief doesn't stop with the funeral. Neither do we. ® Owned by a subsidiary of Service Corporation International, 1929 Allen Parkway,Houston, TX 77019, (713) 522-5141. New York state law mandates that all contracts for prearranged funeral agreements executed by applicants for or recipients of supplemental social security income or medical assistance be irrevocable. 35-20 Broadway, Long Island City, NY 11106 718-721-9200 TMQuinn.com Thomas M. Quinn & Sons Funeral Home Astoria's Landmark Funeral Home since 1896 30:0.501240075:0.96713382:0.97399801:0.504078269


text:
Local News
Local Sports
Submit a photo
Seneca Valley
Cardinal Wuerl North Catholic
Post an event
New director takes post at youth home
Cranberry Eagle
Written by:
Paula Grubbs
December 24, 2012
ADAMS TWP — A new leader with 25 years of experience in human services will take the helm at MHY Family Services.
Lisa M. Schiller will begin her position as executive director on Jan. 28. She replaces Martin Harris, who was executive director at MHY Family Services for five years before accepting a position at an organization in California.
Schiller's career has been spent providing services for youths. Most recently, Schiller was vice president of operations at Lutheran Services in America's operation in Baltimore.
"What inspired me about this role was the deep commitment of the staff, the board of directors and the board of trustees, as well as the rich history of the organization," Shiller said.
Formerly known as the Mars Home for Youth, MHY Family Services serves youth who are at risk of abuse or neglect, have been abused or neglected, who have serious emotional, mental or behavioral disturbances, and who may be involved in the juvenile justice system.


text:
Oshkosh plays host to annual fly-in
OSHKOSH -- Hundreds of thousands of airplane enthusiasts will descend on Oshkosh this week for the Experimental Aircraft Association's annual fly-in.
Big attractions this year include rare vintage warplanes and some of the newest technology that may help return humans to the moon.
The skies above Oshkosh will be swarming with planes this week and little Wittman Regional Airport will temporarily take the mantle of "worlds busiest" from O'Hare in Chicago.


text:
Press Releases
Interfaith Alliance Calls For Inclusive Day of Prayer In Letter to All Fifty Governors, President Obama
- Details
Apr 29 2014
Washignton, DC - In advance of the National Day of Prayer, celebrated this year on Thursday May 1, Rev. Dr. C. Welton Gaddy, the president Interfaith Alliance, sent the following letter to President Obama and the governors of every state. In this letter, Rev. Gaddy called on each of the governors and the President to respect Americans of all faiths, and those of no faith tradition, in their National Day of Prayer celebrations. Interfaith Alliance also cautioned against partnering with the so-called National Day of Prayer Task Force whose events systematically exclude Jews, Muslims, Catholics, Buddhists, Hindus and even some mainline Protestant Christians.
President Barack Obama
The White House
1600 Pennsylvania Avenue NW
Washington, DC 20500
April 24, 2014
Dear President Obama,
On behalf of the Interfaith Alliance, an organization committed to defending religious freedom whose members represent more than 75 faith traditions, I am writing to request that you ensure that your observance of the National Day of Prayer is welcoming to clergy and believers of all religions, as well as to those who profess no religion. This celebration, mandated by an act of Congress, has too often been dominated by religious extremists who define religion by exclusion. In a nation already deeply divided, we should work together to make this year's National Day of Prayer, held on May 1, a reflection of both our nation's diversity of religious belief and its commitment to religious freedom. This day presents a great opportunity for us to demonstrate that religion can be a healing and reconciling force in our nation, but I fear that opportunity will be lost if the message of the day is defined by leaders from the religious right working for a Christian Nation. I commend you for the intentional and inclusive way that you have marked this day in the past, and I urge you to do the same this year.
I am compelled to make this request because, several years ago, the National Day of Prayer was taken over by a group of religious exclusivists led by Shirley Dobson of Focus on the Family. Dobson's group calls itself the "official" National Day of Prayer Task Force yet it has no official relationship with the government and it systematically excludes Jews, Muslims, Catholics, Buddhists, Hindus and even some mainline Protestant Christians from National Prayer Day events it conducts around the United States.
Moreover, The National Day of Prayer Task Force requires volunteer coordinators to sign a statement of faith which includes the following language: " I believe that the Holy Bible is the inspired, only, infallible, authoritative Word of The Living God. That there is one God, eternally existent in three persons: Father, Son and Holy Spirit... That for salvation of lost and sinful men and women, regeneration by the Holy Spirit is absolutely essential." Government sanction of the Task Force's work clearly aligns a government-sponsored event with a particular Christian denomination, in violation of the basic provisions of the First Amendment to the Constitution, establishing the separation of church and state.
I respectfully ask that you decline to participate in events sponsored by, or issue a separate proclamation to, the National Day of Prayer Task Force. This group has a record of using proclamations from and the participation of elected officials to raise the status of events in which they discriminate against and exclude clergy who represent faith traditions other than fundamentalist evangelical Christianity.
Indeed, I implore you to use your power of proclamation on this National Day of Prayer to restore it to what President Harry Truman intended when he signed it into law in 1952. Use your proclamation to bring together Americans of every religion and no religion, to express their faith in whatever way is appropriate for them. I urge you to issue a single proclamation for the day that calls for an inclusive National Day of Prayer that reflects our nation's rich tradition of religious pluralism by explicitly inviting clergy from diverse faith traditions to participate equally and fully -- especially in events held on government property.
Sincerely Yours,
Rev. Dr. C. Welton Gaddy
Interfaith Alliance
Interfaith Alliance denounces the tragic shooting in Overland Park, Kansas
- Details
Apr 14 2014
Washington, DC – Interfaith Alliance president Rev. Dr. C. Welton Gaddy issued the following statement today after the tragic shootings at the Jewish Community Center of Greater Kansas City and the Village Shalom assisted living community.
"Murder has no place on the American landscape. However, murders perpetrated on a religious community preparing for a celebration of deliverance and life is especially repulsive. With the details of the shooting Sunday at a Jewish Community Center and assisted living community in Overland Park, Kansas are starting to become tragically clear, we know immediately that such shootings cannot continue at regular intervals in the neighborhoods on our land. Schools, movie theaters, public gathering places, houses of worship, and now two local Jewish community institutions – these should be safe havens where people can gather without fear, and certainly without fear of being shot. Tragically, we also know that this is just the latest of what will be thousands of gun deaths that take place in the United States this year. I borrow words and emotions from the Hebrew prophet who cried, 'How long?' How long, America, will we let such killings happen? The insensitive, careless, and cowardly failure of Congress to deal with this issue cannot continue."
"Evidence points to the sad likelihood that the murders that occurred yesterday in Kansas may have been an act of anti-Semitism, reminding us once more that despite the progress we made passing anti-hate crime legislation, there is still much work to be done to eliminate the culture of hate that is far to often at the root of such tragedy."
Interfaith Alliance Deeply Concerned By Mississippi Religious Freedom Bill
- Details
Apr 04 2014
WASHINGTON, D.C. – Following Mississippi Governor Phil Bryant's decision to sign the Mississippi Religious Freedom Restoration Act, Interfaith Alliance president Rev. Dr. C. Welton Gaddy released the following statement:
Governor Phil Bryant's decision to sign the so-called Mississippi Religious Freedom Restoration Act is extremely troubling and dangerous for religious communities and religious freedom in the United States. While I commend his desire to take decisive action to protect the First Amendment rights of Mississippians, this bill – a gross distortion of the American promise of religious freedom – will do far more to hurt that cause in the long run.
Sadly, I fear that the Mississippi Religious Freedom Restoration Act is an attempt to codify discrimination. Even with the improvements made to the bill during the debate in the state legislature, it remains a dangerous conflation of legitimate religious liberty concerns with a radical attempt to legitimize discrimination against lesbian, gay, bisexual and transgender Mississippians and many others. This law will do more to separate and isolate Mississippi's religious communities than it will to bring all Mississippians together. I hope that the people of Mississippi quickly realize the error their leaders have made and work swiftly to repeal this law.
Yet another state's decision reminds us of the lack of comprehensive understanding of religious freedom as defined by the Constitution. Religious freedom and equality for the LGBT community need not jeopardize each other, and religious freedom claims should never negate the Constitution's guarantee of civil rights. Not only Mississippi, but clearly our entire nation, needs a new education of the constitutional meaning of this first freedom.
Interfaith Alliance Calls on Supreme Court to Uphold Contraception Mandate and Traditional View of Religious Freedom
- Details
Mar 25 2014
WASHINGTON – In response to today's Supreme Court arguments in Hobby Lobby and Conestoga Woods cases, Interfaith Alliance president, Rev. Dr. C. Welton Gaddy, expressed hope for a court ruling for what he considers "the more traditional" view of religious liberty, saying:
"Unfortunately, some people in the faith community have taken a shortsighted approach to religious freedom over the last few years in an attempt to turn the first amendment into a free pass to opt-out from any public policy with which they do not agree. This misguided approach has been used as a battering ram against marriage equality, tax law and – in this case – the Affordable Care Act's contraception mandate."
"Hopefully, the Court will rule for what I consider the more traditional, and dare I say more conservative, view of religious liberty. That decision could prompt a return to a saner debate on these issues. The First Amendment should be understood as it always has been: a guaranteed protection for the rights of religious minorities and unshakable assurance that one's religion does not define one's relationship to the government. Gone, I pray, would be attempts to use religion to create a private right to discriminate or the ability to opt out of laws that one finds unsavory. The age of so-called 'conscience clauses' and the over-broad religious exemption would finally begin to wane."


text:
|Boxing Champions | Boxing Schedule | Boxing Video | Boxing History | Pound For Pound | Lounge | The Wire | Audio | Arcade
Undisputed Champion
Join Date: Jul 2007
Location: Pittsburgh, PA
Posts: 6,192
Rep Power: 21
Points: 2,002,020,460.60
Bank: 16,610,259,432.66
Total Points: 18,612,279,893.26
I don't think Broner would beat Rios
I think Broner looked great last Saturday and hes world class, but i think Rios has the perfect style to beat him. I have yet to see Broner get on his toes and box (effectively). He seems like hes best at stalking his opponent (De Leon, Demarco, Escobedo, Litzau ect) and i think Rios would be more than happy to make it an in close exchange. Rios doesn't have the long arms of Demarco, he has short arms made for compact hooks and in fighting and hes already naturally stronger than Broner and IMO hits harder. Since people like comparing him to Mayweather, i wanna bring up the first Castillio fight. Floyd tried early to bang a little with Jose to prove that he can stay inside with him when he needed to , but when it didn't work, he was forced to fight on his heels for the remaining portion of the fight. This is the biggest difference between Broner and Floyd. Floyd had the ability to fight on his back foot because that was natural to him, he had the skill and ring IQ from a technical standpoint to do so. Broner hasn't showed me yet that he can box/counter while on his toes. If he did, he would have did that to De Leon. Broner would not, and i repeat not, get the better of Rios in an up close dog fight. It simply wouldn't happen.
Join Date: Apr 2011
Location: Los Angeles
Posts: 22,960
Rep Power: 0
Points: 8,165,000,061,498.94
Bank: 12,550,937,315,598,052.00
Total Points: 12,559,102,315,659,550.00
Me neither.....
Join Date: Nov 2012
Posts: 198
Rep Power: 0
Points: 16,542.30
Bank: 0.00
Total Points: 16,542.30
On the boxing talk show Burner and Horus, two huge Broner fans said that Rios would be the man to bring out the fighter in Broner, and that Rios has a very good chance. I think I agree.
Rios has to get down and dirty though, then we can see how Broner handle's that type of pressure.
And before people bring up the Abril fight, Broner fights nothing like Abril.
bo jungle
Join Date: Jul 2009
Location: Hudson, Fl
Posts: 38,352
Rep Power: 137
Points: 2,277,000,386,564.12
Bank: 8,967,777,890,630.28
Total Points: 11,244,778,277,194.40
I would love to see it. See what both guys are made of. Assuming Rios is still relevant when Broner moves up.
Hype Beast
Join Date: Dec 2006
Location: Caribbean
Posts: 24,286
Rep Power: 112
Points: 192,065.98
Bank: 105,540,920,043,968.64
Total Points: 105,540,920,236,034.62
Keep feeding him these guys that use their face as defense and care more about looking tough for the crowd than actually winning. He'll keep looking the same every time out.
I Also Cook
Join Date: Oct 2012
Posts: 6,831
Rep Power: 30
Points: 3,017,000,185,710.56
Bank: 0.00
Total Points: 3,017,000,185,710.56
With a guy like Broner you always want to see how he handles an aggressive banger walking him down. It's a classic match-up.
Undisputed Champion
Join Date: Sep 2011
Location: Washington, DC
Age: 27
Posts: 5,084
Rep Power: 23
Points: 6,000,086,283.04
Bank: 9,071,575,490,290.49
Total Points: 9,077,575,576,573.53
It would be nice if we could actually find out......
Hype Beast
Join Date: Dec 2006
Location: Caribbean
Posts: 24,286
Rep Power: 112
Points: 192,065.98
Bank: 105,540,920,043,968.64
Total Points: 105,540,920,236,034.62
Garcia, Matthysse, Peterson, all sound like more interesting opponents than Brandon The Punching Bag Rios. I even rather see how long Khan lasts with Broner until he gets knocked out.
Join Date: Nov 2012
Posts: 198
Rep Power: 0
Points: 16,542.30
Bank: 0.00
Total Points: 16,542.30
Dude so slick!
|beat, broner, don't, rios
|Thread Tools
Privacy Policy - Submit
News - Feedback
- Site Map - Advertise
with Us
Copyright © 2003-2014 BoxingScene LLC All rights reserved.
Copyright © 2003-2014 BoxingScene LLC All rights reserved.


text:
Top Definition
Gentle, rhythmic back and forth massage of a man's penis, along a woman's labia. The woman is on top of the man and using her juices to spread over the length of his shaft. This is particularly helpful in foreplay to ensure a hard, throbbing penis.
My man was starting to lose his erection so I immediately gave him a taco massage to resuscitate him.
by Snugglie February 24, 2008


text:
"Amazing read"
I am fascinated by the mental conditioning I under went in the Marines, and this explains in great detail, why we train the way we train.
A bit of a New York accent
Vietnam veterans treatment by Americans.
Everyone should read this book.
I am a retired RN who has a interest in many different ideas, places, people, aand times. I do like books with some kind of action in them.
"A must read to understand our killing society"
I can't read because of my eyes. So audio is the way I go.
It doesn't have characters. It traces the history of how our armed services are prepared for war from our Civil War on. It explains why our armed forces and our society has the problems is has whether it be with depression, PTSD or children killing children in schools.
Again there are no characters. There are very tangible reasons why "we" are the way "we" are.
It made me very alarmed and conflicted. I know we need people to fight our wars. We need to do more to help them when they come back....and their families. We need to rethink violent video games. I would outlaw them myself if I could.
I would suggest every parent, every service spouse, all the politicians and all the game makers read this. Then act as your conscience demands.
"A Must Read for All Parents, Politicians, Media"
This book was intriguing, fascinating, convicting, and sobering. I was expecting a book tht was glorify heroic battles, but it wasn't why I got. Instead I received a fascinating journey through the killing process and how modern military training makes today's armies of infantry much more deadly than their predecessors.
It also is a cautionary tale for parents, politicians, and media types who cause their positions to protect our children from violence towards their fellow man, and urges us as a nation to re-sensitize ourselves and our children.
I highly, highly recommend and encourage you to listen to this book read by the author himself.
"Putting a Human Face on The Killers"
We rarely get a glimpse into the perspective of killers, but they too are human and more like the rest of us than I would have guessed.
"I appreciated this work"
The author's discussion is well done and informative, his narrative style is easy to listen to. This is one of those books, that when you have finished, you say to yourself "I'm glad I read that, I learned a lot"
"Really great book!"
insightful, compelling, and disturbing
when the canadian nato officer brakes into the church where the nun was being raped it was shocking to hear of such barbarism in humanity but also it gave me hope seeing how the young nun still was not broken from the traumatic experience
he kept you in the book i always enjoy the author to be the narrator because it is as if he is describing his beliefe structure to you as if in a conversation more then just flipping threw the pages of a book
not sure he did pretty well
great book hope to read or listen to more from this author
"Way too much repeated material"
This essentially is a series of stories about how people learn to kill other human beings. The conclusion is truly relevant on how media violence and video game killing simulators are the practice fields for young murders and terrorists. One would think an Army Special Forces officer would have better organizational skills. Way too many parts, or sections, and way too many chapters, with way too many repeated stories, or whatever! The only way to sort it out would be buy the book, but then with the third or fourth repeat you would shelve the book and never understand the bigger important story. Listen to the audio, and deal with the organization, it might save your life or someone you know and love.
"Every LEO or Military Servicemember should read!"
There is nothing I can say about Lt Col Grossman that hasn't been said - he is amazing, knowledgeable, and insightful. He gets the Warrior mind like few ever have or will. He is a mentor and a hero. This book, as with his others, is enlightening and helpful in understanding the effects of killing on the human psyche. Everyone who wears a badge, a flag patch on their shoulder, or is married to someone who does, should read this book. I cannot recommend it enough and will probably listen again (which I NEVER do).
"Great book"
Very high up. The author does a fantastic job of touching on a very personal topic without letting his own human bias creep in. I'm sure it's there, but it's a very balanced view. Highly recommended for anyone interested in psychology in general.
I grew up in a very "pro war" family. After hearing this book, it gave me a whole new insight into what war and killing actually is and how... wrong... it really is. The book in no way pulls a moral stance one way or the other but once you're more educated on the subject it becomes a lot harder to justify such a stance. Only a psychopath can kill another human being without truly altering their own life forever.
The author has a unique accent that wouldn't be a problem in real life but at times can be distracting. He's the man who actually WROTE the book so he puts emphasis on proper points and does a great job, I just have to give performance a 4 star because his accent at times makes him sound less intelligent than he really is. You know, when someone talks in a British accent they automatically sound smarter, this guy's accent automatically swings him the other way. Great book though.
"On Killing"
I am both a veteran and 30 year law enforcement professional. LTC Grossman's book is a must read for military and law enforcement personnel, and is especially important for professional leaders and those who treat or deal with soldiers and law enforcement officers that have been involved in violent encounters or shootings. It describes the human responses and cultural issues involving the taking of lives in uniform. Understanding how the body and brain responds to deadly encounters will help all involved deal better with line of duty killings.


text:
Natural Remedies Vaginal Discharge Odor
Here's a taste of what TheBody.com has to offer on this topic:
Get the Facts
Gonorrhea...have no symptoms. Even when a woman has symptoms, they can be so non-specific as to be mistaken for a bladder or vaginal infection. The initial symptoms and signs in women include a painful or burning sensation when urinating, increased vaginal discharge, or vaginal bleeding between periods. Women with gonorrhea are at risk of developing serious complications from the infection, regardless of the presence or severity of symptoms. Symptoms of...
Ask the Experts
can you get hiv from vaginal discharge left on toilet seatI have ocd about hiv,etc. my mom is staying at my house and wipes from back to front. if she left some discharge hanging from my toilet seat and i got it on my toilet paper, can i get hiv. i was told hiv dies as soon as it gets oxygen, but what...
Response from Robert J. Frascino, M.D.
The Robert James Frascino AIDS Foundation...that your mom "wipes from back to front."So even though you never saw any "discharge," you've worried whether your mother's vaginal discharge hanging from your toilet seat could infect you with HIV? Is your mom HIV infected?Sweetie, not only do... Read more »
Confused about the swiss studyI discussed with my doctor about the swiss study which claims that in a monogamous serodiscordant and straight relationship with the infected partner on treatment and with an undetectable viral load the use of a condom is no more imperative. He...
Response from Robert J. Frascino, M.D.
The Robert James Frascino AIDS FoundationHi,I totally disagree with your doctor. I have discussed the "Swiss Study" repeatedly in this forum. My assessment has not changed. Unprotected sex between magnetic couples remains a risk for HIV transmission, even when the HIV plasma viral load has... Read more »
VAGINAL DISCHARGE etc....Hi Doc, Thanks a lot for answering all of my questions, it realy helps me lot....Doc, my wife got lots of white vaginal discharge till today, before she was pregnant she never had this kind of discharges, i know that discharging do occurs during...
Response from Robert J. Frascino, M.D.
The Robert James Frascino AIDS Foundation...Hello Dee,If your wife has a persistent vaginal discharge, she should see her gynecologist and/or HIV doctor. Being HIV positive can increase the likelihood that she could have a vaginal Read more »
natural remedies?Does anyone know of some natural remedies/herbs etc... which helps in HIV treatment?
Response from Joseph McGowan, M.D., F.A.C.P.
North Shore University Hospital...matter before combination HAART became available) we could do very little to stop the unremitting growth of the virus. We need natural remedies as complementary treatments with HAART, to help lessen side effects and maintain health. But the... Read more »
Gynecological Problems...Symptoms include itching, burning, and pain around your vagina, labia, or anal area. You may also have a thick, cottage cheese-like vaginal discharge. HIV-positive women often have recurring yeast infections that are difficult to treat. You are... Read more »
Systemic CandidiasisTable of Contents Cause Diagnosis Treatment Antifungal Drugs and Pregnancy Side Effects The Problem of Antifungal Resistance Drug Interactions Preventing Fungal Infections Naturally Chart for Treating Candidiasis Candidiasis... Read more »
Fungal Infections...being screened for HIV Symptoms include itching, burning, and pain around the vagina, labia, or anal area and thick, curd-like vaginal discharge HIV-positive women often have recurring yeast infections that are difficult to treat ... Read more »
Candidiasis (Thrush)What Is Thrush? Can It Be Prevented? How Is It Treated? Natural Therapies The Bottom Line What Is Thrush? Candidiasis is a common opportunistic infection in people with HIV. It is an infection caused by a common type of yeast (or... Read more »
Connect With Others
What foolish and senseless behavior. Please Help!
Posted by brainshom, 1 ReplyAbout 2 months ago, I did something that was completely out of my character and now I am scared as hell. I was new in the neighborhood and had a one night stand with a girl whom I later found out was/is a prostitute. Had I known she was a sex... Read more »
Can i get HIV if i lick a vaginal fluid on-----
Posted by von, 1 ReplyHi can i get hiv if i lick a fresh vaginal fluid on her underwear Read more »
Natural remedies? Not on meds yet....
Posted by cassiusp, 8 RepliesNot yet on meds, still have a decent T cell count. Started taking Korean Ginseng. NAC, ST Johns Wort and Lysine (collagen, I am a little paranoid about wrinkles :) ) and a good multivit. Oh and plan to start breathing meditations with my BF (he... Read more »
vaginal discharge
Posted by Anonymous, 1 ReplyI was diagnosed with gonorrhea about a month ago. I was treated and retested. The retest came back as undetected. I have also gone in for a full STD testing. I won't know the results until next week. I don't really have any syptoms of anything,... Read more »
Resource Centers
Guides for People With HIV