text:
DNS hijacking
DNS hijacking or DNS redirection is the practice of subverting the resolution of Domain Name System (DNS) queries. This can be achieved by malware that overrides a computer's TCP/IP configuration to point at a rogue DNS server under the control of an attacker, or through modifying the behaviour of a trusted DNS server so that it does not comply with internet standards.
These modifications may be made for malicious purposes such as phishing, or for self-serving purposes by Internet service providers (ISPs) and public/router-based online DNS server providers to direct users' web traffic to the ISP's own web servers where advertisements can be served, statistics collected, or other purposes of the ISP; and by DNS service providers to block access to selected domains as a form of censorship.
Technical background[edit]
One of the functions of a DNS server is to translate a domain name into an IP address that applications need to connect to an Internet resource such as a website. This functionality is defined in various formal internet standards that define the protocol in considerable detail. DNS servers are implicitly trusted by internet-facing computers and users to correctly resolve names to the actual addresses that are registered by the owners of an internet domain.
Rogue DNS server[edit]
A rogue DNS server translates domain names of desirable websites (search engines, banks, brokers, etc.) into IP addresses of sites with unintended content, even malicious websites. Most users depend on DNS servers automatically assigned by their ISPs. Zombie computers use DNS-changing trojans to invisibly switch the automatic DNS server assignment by the ISP to manual DNS server assignment from rogue DNS servers.[citation needed] A router's assigned DNS servers can also be altered through the remote exploitation of a vulnerability within the router's firmware.[1] When users try to visit websites, they are instead sent to a bogus website. This attack is termed pharming. If the site they are redirected to is a malicious website, masquerading as a legitimate website, in order to fraudulently obtain sensitive information, it is termed phishing.[2]
Manipulation by ISPs[edit]
A number of consumer ISPs such as Cablevision's Optimum Online,[3] Comcast,[4] Time Warner, Cox Communications, RCN,[5] Rogers,[6] Charter Communications, Verizon,[7] Sprint,[8] Virgin Media,[9][10] Frontier Communications, Bell Sympatico,[11] UPC,[12] T-Online,[13] Optus,[14] Mediacom,[15] ONO,[16] TalkTalk,[17] Bigpond (Telstra),[18][19][20][21] and TTNET use DNS hijacking for their own purposes, such as displaying advertisements[22] or collecting statistics. This practice violates the RFC standard for DNS (NXDOMAIN) responses,[23] and can potentially open users to cross-site scripting attacks.[22]
The concern with DNS hijacking involves this hijacking of the NXDOMAIN response. Internet and intranet applications rely on the NXDOMAIN response to describe the condition where the DNS has no entry for the specified host. If one were to query the invalid domain name (fakeexample.com), one should get an NXDOMAIN response - informing the application that the name is invalid and taking the appropriate action (for example, displaying an error or not attempting to connect to the server). However, if the domain name is queried on one of these non-compliant ISPs, one would always receive a fake IP address belonging to the ISP. In a web browser, this behavior can be annoying or offensive as connections to this IP address display the ISP redirect page of the provider, sometimes with advertising, instead of a proper error message. However, other applications that rely on the NXDOMAIN error will instead attempt to initiate connections to this spoofed IP address, potentially exposing sensitive information.
Examples of functionality that breaks when an ISP hijacks DNS:
- Roaming laptops that are members of a Windows Server domain will falsely be led to believe that they are back on a corporate network because resources such as domain controllers, email servers and other infrastructure will appear to be available. Applications will therefore attempt to initiate connections to these corporate servers, but fail, resulting in degraded performance, unnecessary traffic on the internet connection and timeouts.
- Many small office and home networks do not have their own DNS server, relying instead on broadcast name resolution. Many versions of Microsoft Windows default to prioritizing DNS name resolution above NetBIOS name resolution broadcasts; therefore, when an ISP DNS server returns a (technically valid) IP address for the name of the desired computer on the LAN, the connecting computer uses this incorrect IP address and inevitably fails to connect to the desired computer on the LAN. Workarounds include using the correct IP address instead of the computer name, or changing the DhcpNodeType registry value to change name resolution service ordering.[24]
- Browsers such as Firefox no longer have their 'Browse By Name' functionality (Where keywords typed in the address bar take users to the closest matching site.).[25]
- The local DNS client built into modern operating systems will cache results of DNS searches for performance reasons. If a client switches between a home network and a VPN, false entries may remain cached, thereby creating a service outage on the VPN connection.
- DNSBL anti-spam solutions rely on DNS; false DNS results therefore interfere with their operation.
- Confidential user data might be leaked by applications that are tricked by the ISP into believing that the servers they wish to connect to are available.
- User choice over which search engine to consult in the event of a URL being mistyped in a browser is removed as the ISP determines what search results are displayed to the user; functionality of applications like the Google Toolbar do not work correctly.
- Computers configured to use a split tunnel with a VPN connection will stop working because intranet names that should not be resolved outside the tunnel over the public Internet will start resolving to fictitious addresses, instead of resolving correctly over the VPN tunnel on a private DNS server when an NXDOMAIN response is received from the Internet. For example, a mail client attempting to resolve the DNS A record for an internal mail server may receive a false DNS response that directed it to a paid-results web server, with messages queued for delivery for days while retransmission was attempted in vain.[26]
- It breaks Web Proxy Autodiscovery Protocol (WPAD) by leading web browsers to believe incorrectly that the ISP has a proxy server configured.
- It breaks monitoring software. For example, if we periodically contact a server to determine its health, a monitor will never see a failure unless the monitor tries to verify the server's cryptographic key.
In some cases, the ISPs provide subscriber-configurable settings to disable hijacking of NXDOMAIN responses. Correctly implemented, such a setting reverts DNS to standard behavior. Other ISPs, however, instead use a web browser cookie to store the preference. In this case, the underlying behavior is not resolved: DNS queries continue to be redirected, while the ISP redirect page is replaced with a counterfeit dns error page. Applications other than web-browsers cannot be opted out of the scheme using cookies as the opt-out targets only the HTTP protocol, when the scheme is actually implemented in the protocol-neutral DNS system.
Manipulation by registrars[edit]
Some domain name registrars, notably Name.com,[27] perform a DNS hijacking on failed domain name lookups despite objection to this practice by ICANN[28] and their consumers.
In the UK, the Information Commissioner's Office have acknowledged that the practice of involuntary DNS hijacking contravenes PECR, and EC Directive 95/46 on Data Protection which require explicit consent for processing of communication traffic. However they have refused to intervene, claiming that it would not be sensible to enforce the law, because it would not cause significant (or indeed any) demonstrable detriment to individuals.[9][10]
ICANN, the international body responsible for administering top-level domain names, has published a memorandum highlighting its concerns, and affirming:[26]
ICANN strongly discourages the use of DNS redirection, wildcards, synthesized responses and any other form of NXDOMAIN substitution in existing gTLDs, ccTLDs and any other level in the DNS tree for registry-class domain names.
This section does not cite any references or sources. (August 2013) |
End users, dissatisfied with poor "opt-out" options like cookies, have responded to the controversy by finding ways to avoid spoofed NXDOMAIN responses. DNS software such as BIND and Dnsmasq offer options to filter results, and can be run from a gateway or router to protect an entire network. Google, among others, run open DNS servers that currently do not return spoofed results. So a user could use Google Public DNS instead of their ISP's DNS servers if they are willing to accept the associated loss of privacy associated with their online behavior being tracked. One limitation of this approach is that some providers block or rewrite outside DNS requests.
There are also application level work-arounds, such as the NoRedirect Firefox extension add-on that mitigate some of the behavior. An approach like that only fixes one application (in this example, Firefox) and will not address any other issues caused. Website owners may be able to fool some hijackers by using certain DNS settings. For example, setting a TXT record of "unused" on their wildcard address (e.g. *.example.com). Alternatively, they can try setting the CNAME of the wildcard to "example.invalid", making use of the fact that '.invalid' is guaranteed not to exist per the RFC. The limitation of that approach is that it only prevents hijacking on those particular domains, but it may address some VPN security issues caused by DNS hijacking.
See also[edit]
- Captive portal
- DNS cache poisoning
- Domain hijacking
- Dynamic Host Configuration Protocol
- Pharming
- Point-to-Point Protocol
- TCP reset attack
- ^ "DNS hijacking flaw affects D-Link DSL router, possibly other devices".
- ^ "Rogue Domain Name System Servers". Trend Micro. Retrieved 2007-12-15.
- ^ "Optimum Online DNS Assistance".
- ^ "Comcast trials
Domain Helper serviceDNS hijacker". The Register. Retrieved 2009-10-07. - ^ "Who Stole My Web Browser?".
- ^ "Rogers Uses Deep Packet Inspection for DNS Redirection". dslreports.com. 2008-06-20. Retrieved 2010-06-15.
- ^ "Opting out of DNS Assistance".
- ^ http://www.reddit.com/r/Sprint/comments/2fl6pk/are_sprint_3g_and_4g_towers_hijacking_nxdomain/
- ^ a b "ICO: We won't stop Advanced Network Error Search".
- ^ a b "Case Reference Number ENQ0265706" (PDF).
I am not convinced that there is any likelihood of detriment or harm to subscribers or users that would justify taking formal action in this case.
- ^ "Bell Starts Hijacking NS Domain Queries".
- ^ "UPC FAQ about the "navigation service"".
- ^ T-Home-Team (2009-04-09). "Neues Leistungsmerkmal 'Navigationshilfe'" [New 'Navigation Help' Feature] (in German). Retrieved 2009-12-02.
Ist die Navigationshilfe aktiviert, werden DNS-Server zugewiesen, die dieses Leistungsmerkmal unterstützen; ist sie deaktiviert, werden herkömmliche DNS-Server zugewiesen.
- ^ Optus' "About the Search Results Page"
- ^ "Want a real world example of why we need network neutrality? I have one here.".
- ^ XSS Reflected dnssearch.Ono.es NXD redirect « iniqua
- ^ TalkTalk | About This Page
- ^ BigPond redirects typos to 'unethical' branded search page - CRN Australia
- ^ "Charter Corrupting DNS protocol ie hijacking hosts".
- ^ "road runner dns hijack causing slow web-pages".
- ^ "Rogers violates net neutrality by hijacking failed DNS lookups".
- ^ a b Singel, Ryan (19 April 2008). "ISPs Error Page Ads Let Hackers Hijack Entire Web, Researcher Discloses". Wired.
- ^ "Negative Caching of DNS Queries".
- ^ http://www.howtonetworking.com/netbios&wins.htm#How%20to%20modify%20Node%20Type
- ^ "Using Firefox + NoRedirect Extension to Avoid DNS Hijacking".
- ^ a b "Harms Caused by NXDOMAIN Substitution in Toplevel and Other Registry-class Domain Names" (PDF). ICANN. 2009-11-24. Retrieved 2010-09-23.
- ^ "Hacker News".
- ^ "Harms and Concerns Posed by NXDOMAIN Substitution (DNS Wildcard and Similar Technologies) at Registry Level". ICANN.


text:
The Library
Critical theory in international relations and security studies
Brincat, Shannon and Lima, Laura and Nunes, João, eds. (2011) Critical theory in international relations and security studies. Abingdon, Oxon ; New York: Routledge. ISBN 9780415601580
Full text not available from this repository.
Official URL: http://www.routledge.com/books/details/97804156015...
This book provides an assessment of the legacy, challenges and future directions of Critical Theory in the fields of International Relations and Security Studies.
This book provides 'first-hand' interviews with some of the pioneers of Critical Theory in the fields of International Relations Theory and Security Studies. The interviews are combined innovatively with reflective essays to create an engaging and accessible discussion of the legacy and challenges of critical thinking. A unique forum that combines first-person discussion and secondary commentary on a variety of theoretical positions, the book explores in detail the interaction between different theories and approaches, including postcolonialism, feminism, and poststructuralism. Scholars from a variety of theoretical backgrounds reflect on the strengths and problems of critical theory, recasting the theoretical discussion about critical theory in the study of world politics and examining the future of the discipline.
Item Type: | Book |
Divisions: | Faculty of Social Sciences > Politics and International Studies |
Publisher: | Routledge |
Place of Publication: | Abingdon, Oxon ; New York |
Editor: | Brincat, Shannon and Lima, Laura and Nunes, João |
Official Date: | 20 December 2011 |
Number of Pages: | 230 |
Status: | Peer Reviewed |
Publication Status: | Published |
Access rights to Published version: | Restricted or Subscription Access |
URI: | http://wrap.warwick.ac.uk/id/eprint/49277 |
Request changes or add full text files to a record
Actions (login required)
View Item |

subset: commoncrawl


text:
The Clangers originated in a series of children's books which originated from another Smallfilms production, Noggin the Nog. Publishers Kay and Ward created a series of books from each of the Noggin the Nog episodes, which were then extended into the series called Noggin First Reader, a series aimed at aiding initial reading skills.[1]
In the 1967 published story Noggin and the Moonmouse, a new horse-trough was put up in the middle of the town in the North-Lands. A spacecraft hurtled down and splashed into it. The top unscrewed, and out came a largish, mouse-like character in a duffel coat, who wanted fuel for his spacecraft. He showed Nooka and the children that what he needed was vinegar and soap-flakes. So, they filled up the various tanks in this little spherical ship, which then "took off in a dreadful cloud smelling of vinegar and soap-flakes, covering the town with bubbles".[1]
In 1969, the BBC asked Smallfilms to produce a new series for colour television, but did not specify any particular storyline. Postgate concluded that because space exploration was particularly topical, the new series should be set in space. He adapted the Moonmouse from the earlier story, removing its tail "because it kept getting into the soup".[1] The Clangers looked similar to mice, anteaters and, from their pink colour, pigs. They wore clothes reminiscent of Roman armour, "against the space debris that kept falling onto the planet[,] lost from other places, like television sets and bits of an Iron Chicken",[1] and they spoke in whistles.


text:
Boxing Champions | Boxing Schedule | Boxing Video | Boxing History | Pound For Pound | Lounge | The Wire | Audio | Arcade |
Advertisements | ||
Burning Fire!
Join Date: May 2011
Location: Slovenia
Age: 34
Posts: 5,910
Rep Power: 16
floyd will fight from the outside. if manny comes too close then hold/clinch. gonna be a lot like the hatton fight imo. effective but ugly to watch.
that's the best way to negate the main manny weapon - his close range flurries. imo if you want to beat the 2011 version of mp you need to frustrate and outbox him from the outside.marquez showed how to fight pac and floyd (prime) can do much better. |
Undisputed Champion
Join Date: May 2011
Posts: 1,971
Rep Power: 0
soo what is your game plan?? try to KO floyd? how? |
Share This With Friends |
Tags |
game , mayweather , pacquiao: , plan... |
Thread Tools | |
Privacy Policy - Submit
News - Feedback
- Site Map - Advertise
with Us
Copyright © 2003-2014 BoxingScene LLC All rights reserved.


text:
see more
More like this
Community College of the Air Force
130 W Maxwell Blvd Montgomery, AL 36112
(334) 953-2223
| www.au.af.mil/au/ccaf/
Community College of the Air Force is a university in the midsized city of Montgomery, AL.
The school is on the semester calendar system.
There are 324,573 undergraduate students at Community College of the Air Force.
The school has its own library.
Community College of the Air Force's Commandant is Timothy W. Albrecht.
Community College of the Air Force's Commandant is Timothy W. Albrecht.
Fields of study offered at Community College of the Air Force
- Biological and Biomedical Sciences (2 majors)
- Business, Management, Marketing, and Support Services (7 majors)
- Communication, Journalism and Public Relations (2 majors)
- Communications Technologies (1 major)
- Computer and Information Sciences and Support Services (2 majors)
- Criminal Justice and Security Services (3 majors)
- Education (2 majors)
- Engineering (0 major)
- Engineering Technologies and Technicians (8 majors)
- Fitness and Recreation Studies (2 majors)
- Health Professions and Clinical Sciences (19 majors)
- History (2 majors)
- Legal Professions and Studies (1 major)
- Mechanic and Repair Technologies and Technicians (4 majors)
- Military Technologies (8 majors)
- Physical Sciences (1 major)
- Public Administration and Social Work (1 major)
- Science Technologies (1 major)
- Transportation and Logistics (4 majors)
- Visual and Performing Arts (2 majors)


text:
US 7813343 B2 Abstract A quality of service (QoS) signaling packet for arranging QoS connections upon handoff between a mobile node (MN) and a correspondent node (CN) using Internet Protocol (IP), the signaling packet includes one or more QoS flow requirements, one or more classifier parameters, QoS session identification information composed of a previous QoS session ID, a new QoS session ID, and a sequence number. The QoS session IDs are used for establishing a new data path and for added security against spoofing, can be composed of a key-based signature combination of a mobile node's new care of address (CoA) and the sequence number. The packet may also include a previous node address and a cookie, both of which are inserted by a previous node. The previous router address is used for backtracking communications and establishing/updating flow tables while the cookie is used for authentication of node-to-node messages.
Claims(19) 1. A method of authenticating a QoS message, the method comprising:
receiving the message at a node;
extracting a cookie included in the message by a previous node that formerly processed the message;
comparing a value of the extracted cookie with a cookie value stored in an existing flow state container, wherein the existing flow state container includes information for a QoS flow presently supported by the node including a current QoS session ID of the QoS flow and an associated QoS flow public key; and
authenticating the message if the extracted cookie value matches the stored cookie value.
2. The method of
3. The method of
4. The method of
5. The method of
6. The method of
7. The method of
8. The method of
9. The method of
10. The method of
11. A method of authenticating whether a QoS signaling packet was generated by a mobile node in a mobile IP network, the signaling packet including a QoS session ID, a new care of address and a sequence number, the method comprising:
receiving the signaling packet at an intermediate node;
determining whether the QoS session ID in the signaling packet is a private key signature of a combination of the mobile node's new care of address and the sequence number by performing a cryptographic verification using a mobile node public key; and
authenticating the signaling packet if the QoS session ID is the combination;
else not authenticating the signaling packet.
12. The method of
13. The method of
14. The method of
15. The method of
16. The method of
17. The method of
18. The method of
19. The method of
Description This application is a divisional of U.S. patent application Ser. No. 10/465,792, filed Jun. 20, 2003, the disclosure of which is incorporated herein by reference in its entirety. U.S. patent application Ser. No. 10/465,792 claims the benefit of U.S. Provisional Patent Application Ser. No. 60/389,897, filed Jun. 20, 2002, the disclosure of which is incorporated herein by reference in its entirety. The present invention relates to Quality of Service (QoS) Signaling and mobile communication networks. More particularly, but not exclusively, the present invention defines methods, protocols and systems for QoS signaling over a mobile network using Internet Protocol (IP). Quality of Service (QoS) is the measure of service quality provided to a subscriber. In contrast to traditional data traffic, multimedia streams such as those used in IP telephony or video conferencing may be extremely bandwidth and delay sensitive, imposing unique QoS demands on the underlying networks that carry them. Unfortunately, Internet Protocol (IP), with a connectionless, �best-effort� delivery model, does not guarantee delivery of data packets in order, in a timely manner, or at all. Consequently, as the Internet evolves from a �best-effort� network to one supporting multimedia communication, it becomes important to be able to signal QoS requirements of applications to the Internet. A number of different scenarios and requirements for QoS signaling are suggested by the Internet Engineering Task Force (IETF) NSIS working group. These scenarios cover a broad scope including, among others: Terminal Mobility: The QoS signaling must cope with handoff of end terminal, possibly between network domains with heterogeneous QoS technologies. Cellular Networks: The QoS signaling must be able to integrate with cellular access technologies such as, for example, a Universal Mobile Telecommunications System (UMTS) network. Qos Reservation from Access to Core Network: The signaling should allow for aggregate QoS provision and negotiation between access and core networks. Administrative Boundaries: It should be possible to signal QoS over the administrative boundaries. Due to the conflicting requirements imposed by these different usage environments (for instance, there is a possible conflict between a lightweight signaling mechanism required over the wireless link and a reliable and robust mechanism required to provision QoS for aggregate traffic in the core network), it is unlikely that the same QoS signaling protocol can be used in all environments. Consequently, it is desirable to have a �QoS signaling toolkit�, wherein each tool is optimized for a particular situation such as the following: Edge QoS Signaling: This signaling covers signaling between a mobile node (MN) and its access router (AR) as well as horizontal signaling between ARs. The wireless link to the MN induces the requirement of bandwidth economy on the signaling between the MN and the AR. Signaling between ARs imposes requirements similar to those of a context transfer framework. Data Path QoS Signaling: This signaling covers the signaling along the data path to establish, tear down or modify QoS. The desire for a seamless handoff in a mobile environment induces the requirement of speed on the signaling used to re-establish or maintain QoS upon handoff Further, since there may likely be frequent handoffs in future mobile networks, it would be advantageous to keep the overhead of handoff-induced QoS signaling at a minimal level. Generic QoS Signaling: This signaling uses a set of rules for increased reliability, robustness or redundancy when there are less bandwidth constraints or time constraints. The present invention relates primarily to the Data Path QoS Signaling. Referring to The QoS signaling follows the data path from mobile node MN 105 to correspondent node CN 120 through a set of QoS Controllers (QCs) 115, 116, 117, 118 (depending on the path needed). The QCs could be all the routers on the path, or a subset of routers that effectively control the QoS over the whole path. Among others, QCs 115, 116, 117, 118 perform functions such as multi-field packet classification, admission control, etc. This is similar to the architecture considered in IETF RFC 2998�Y. Bernet, et al., �A Framework for Integrated Services Operation over DiffServ Networks,� November 2000. As used herein, the terms QC (or controller) and router may be used interchangeably. However, every router on a path is not necessarily a QC. The existing IETF protocol to implement QoS signaling is Resource Reservation Protocol (RSVP). RSVP is an IETF standard designed to support resource (for example, bandwidth) reservations through networks of varying topologies and media. Through RSVP, a user's QoS requests are propagated to all routers along the data path, allowing the network to reconfigure itself (at all network levels) to meet the desired level of service. The RSVP protocol engages network resources by establishing flows throughout the network. A flow is a network path associated with one or more senders, one or more receivers, and a certain QoS. For example, a sending host wishing to send data that requires a certain QoS will transmit, via an RSVP-enabled Winsock Service Provider, a �path� message toward the intended recipients. These path messages, which describe the bandwidth requirements and relevant parameters of the data to be sent, are propagated to all intermediate routers along the path. A receiving host, interested in this particular data, will confirm the flow (and network path) by sending �reserve� messages through the network, describing the bandwidth characteristics of data it wishes to receive from the sender. As these reserve messages propagate back toward the sender, intermediate routers, based on the bandwidth capacity, decide whether or not to accept the proposed reservation and commit resources. If an affirmative decision is made, the resources are committed and reserve messages are propagated to the next hop on the path from the source to destination. However, RSVP has serious performance drawbacks in mobile IP environments where handoffs happen in the middle of an ongoing session, for example, when the end-to-end path of packets changes or when the care-of address changes after handoff. The OPWA (One Pass with Advertisement) model used in RSVP causes a latency (or delay) of the time for about one round trip between the MN and the CN before the QoS can be established along the new data path. This is because for OPWA, the packets using the new care-of address may get default QoS treatment until they have completed the round trip between the MN and CN. Additionally, RSVP does not have any security mechanisms for protecting against fraudulent QoS set up and tear down in the mobile IP environment. Furthermore, it is would be beneficial to have QoS signaling that is secure and can be authenticated in order to reduce the susceptibility of QoS to spoofing attacks. A spoofing attack is a message with a header containing a source address that does not reflect the legitimate source of the message. Spoofing attacks may compromise the integrity of establishing and maintaining QoS in mobile IP and should be eliminated if possible. Consequently, it would be desirable to provide improved methods, systems and protocol for QoS signaling in mobile IP handoffs The QoS signaling protocols, methods and systems of the present invention overcome one or more of the drawbacks associated with QoS in mobile IP environments. Certain aspects and features of the present invention include a quality of service (QoS) signaling packet for arranging QoS connections upon handoff between a mobile node (MN) and a correspondent node (CN) in a network using Internet Protocol (IP). The signaling packet in one embodiment of the invention contains information including one or more QoS flow requirements, one or more classifier parameters, QoS session identification information composed of a previous QoS session ID, a new QoS session ID, and a sequence number. The signaling packet further includes one or more mutable parameters for carrying node addresses and/or security information in the form of a cookie. Further advantages are obtained from a method of establishing QoS for handoffs in a mobile IP network. The network has at least one mobile node, at least two access nodes, a plurality of QoS controllers and a correspondent node. The method includes receiving a QoS signaling packet at one of the plurality of QoS controllers when the mobile node is attempting to handoff between the at least two access nodes. The signaling packet includes one or more classifier parameters, a previous QoS session ID, a new QoS session ID, and a sequence number. The method further includes determining whether the previous QoS session ID in the signaling packet matches any QoS session ID stored in one of the controller's existing flow states and if so, updating the corresponding existing flow state of the controller with the classifier parameters, new QoS session ID and sequence number from the signaling packet. Yet additional aspects and features of the present invention are included in a method of authenticating a QoS message having mutable parameters. According to one embodiment of the invention, the method includes receiving the message at a node, extracting a cookie included in the message by a previous node, comparing a value of the extracted cookie with a cookie value stored in an existing flow state; and authenticating the message if the extracted cookie value matches the stored cookie value; else not authenticating the message. The QoS message authenticated may be a signaling packet, a TEAR DOWN message and/or a CONFIRM message. Further aspects, features and advantages of the present invention will become apparent from the following description of the invention in reference to the appended drawing in which like numerals denote like elements and in which: The present invention provides a framework for QoS signaling that is optimized for mobile IP handoffs and is particularly suitable for vertical signaling along the packet data path triggered by a handoff of a mobile node (MN). According to certain aspects of the present invention, methods, systems and protocols are disclosed to improve the efficiency of wireless bandwidth and facilitate fast QoS establishment along the new data path after handoff. According to other aspects of the present invention QoS is established and torn down using one or more secure protocol operations. Vertical signaling is needed to establish the QoS along the new data path when a handoff is made (e.g., a change in a portion of the data path between MN 105 and CN 120 due to the change of the MN's connection to AR 110 at point A to AR 112 at point B in There are several unique aspects involved with the QoS signaling in mobile IP handoff including: (1) The asymmetric nature of the handoff (e.g., MN 105 changes point of attachment (A to B), but the CN 120 does not) implies different treatments for the uplink QoS (e.g., from MN 105 to CN 120) and the downlink QoS (e.g., from CN 120 to MN 105). Also, both uplink and downlink packet paths may get affected even if only one of the end nodes using IP undergoes a handoff. (2) In a number of cases, a handoff changes only a small segment of end-to-end packet paths near one of the network extremities (e.g., between QC 116 and AR 110 and AR 112 in (3) Security aspects need to be accounted for so as to prevent a malicious node from spoofing the handoff-induced QoS establishment or tear down. As an MN moves from one AR to another, the paths traversed by MN's packet streams with its correspondent nodes may change (see, e.g., Subsequent to handover, the new end-to-end path between the CN(s) and the MN may span a number of networks (access and core) employing a variety of QoS schemes (e.g., IntServ in access networks and MPLS and DiffServ in core networks). Thus one feature for QoS signaling in the mobile IP environment requires QoS forwarding information for MN's packet streams to relevant routers in different networks in the end-to end path as described by H. Chaskar, in �Requirements of a QoS Solution for Mobile IP�, February 2002. The QoS signaling for mobile IP of the present invention, specific non-limiting examples for which are described below, address the above-noted aspects of QoS establishment in response to mobile IP handoff. Uplink QoS The uplink QoS refers to the packet data path from the MN 105 to the CN 120. Reciprocally, the downlink QoS refers to the path in the other direction, from the CN 120 to the MN 105. In IP packets, these paths do not coincide necessarily. (1) Launching a QoS Signaling Packet: In this embodiment of the invention, uplink QoS signaling for a handoff is preferably initiated by the new AR (e.g., AR 112 at position B in The QoS signaling packet(s) of the present invention are preferably formatted so that every node that may need to examine the flow-specific QoS information has an opportunity to process this signaling packet. In one embodiment of the invention, this is achieved by including the QoS information to be carried in the signaling packet as an IPv6hop-by-hop option header. In another embodiment of the invention, a protocol number is assigned for the signaling packet in the IPv6 main header and the signaling packet includes the QoS related information as the packet payload. Alternatives configurations are also possible and the present invention is not limited to the various manners for implementing the QoS signaling packet format. Referring to
In preferred embodiments of the invention, pieces of the foregoing information may either be placed in dedicated fields in the payload or can be inferred from the parameter values in certain header fields. For example, the CoA of the CN can be obtained from the destination IP address in the packet header. QoS flow requirements 205 specify the requirements of the desired QoS and are similar to those used in conventional QoS requests and may be composed of any data or information to accomplish this end such as bandwidth and delay parameters, scheduling priority, etc. Classifier parameters 210 allow intermediate nodes to identify the packets of the flow in order to offer a specific forwarding treatment. As discussed by J. Rajahalme, et. al., in �IPv6 Flow Label Specification�, March 2002, the classifier parameters may include the IPv6 flow label, the new care of address (CoA) for the MN, and the CN CoA, however, classifier parameters 210 may be any data or information suitable for this purpose. QoS session identification information 215 is used to identify a flow despite the changes in the CoA of the MN. QoS session identification information 215 also enables secure QoS setup and tear down. For example, a method (described below) of generating QoS session IDs at the MN may be used as a security measure against the spoofing attacks. The QoS session identification information in one embodiment of the invention includes: (i) the QoS session ID prior to handoff (called �previous QoS session ID�), (ii) the QoS session ID after handoff (called �new QoS session ID�), (iii) the QoS flow public key, and (iv) the sequence number. The QoS session ID may be generated as the signature of the combination of the CoA of the MN and a sequence number value at the MN using the MN's private key. The sequence number at the MN is preferably incremented for every QoS signaling packet launched. The MN may need to provide the new QoS session ID to the new AR so that the latter can include it in the QoS signaling packet. (2) Updating/Creating Flow States in Intermediate Nodes: A method 300 for updating flow states in an intermediate node will now be described in reference to Every router on the path (that needs to examine the flow-specific QoS information) checks 305 whether the previous QoS session ID (from 215; If there is no match 310, the router creates 315 a new flow state and stores in it the new QoS session ID (e.g., from QoS session identification information 215; On the other hand, if there is a match, the router updates 320 the existing flow state with the new classifier parameters (for example, parameters 210 indicated in QoS signaling packet 200; When the flow states are created 315/updated 320, 325, in one embodiment of the invention, the router extracts 330 the IP address of the previous router that processed the QoS signaling packet and a cookie generated and stored by this previous router (available in the specified mutable fields 225 of signaling packet 200) and stores them along with the flow state. As used herein, a �cookie� is not the same as a traditional �HTML cookie� but rather it is a numeric or alphanumeric character, series of characters, word or other identifier, such as random number, which is inserted by a routing device and read by routers for authenticating communications between routers and preserve data path integrity. The previous router's IP address may be later used to retrace the packet path for tearing down or confirming the QoS as applicable, while the cookie may be used to authenticate future TEAR DOWN or CONFIRM messages as described in greater detail hereafter. The router then forwards 350 the QoS signaling packet to the next router after inserting 335 its own IP address and a new cookie in the previously mentioned mutable fields (e.g., 225; (3) Tearing Down Qos Along the Path Segment No Longer Required after Handoff: A router identifies itself as a �crossover router� if it is the first router along the QoS signaling path that has an existing flow state with a QoS session ID the same as the previous QoS session ID that is contained in the QoS signaling packet. There are two general categories of security authentication for the methods and systems of the present invention including: (i) public/private key-based authentication (referred to herein as �signature authentication� or �key-based authentication�); and (ii) cookie-based authentication. Generally, only the crossover router uses key-based authentication to authenticate the QoS Session ID which, in one embodiment of the invention, is a signature of a combination of the MN's CoA and the sequence number. This is done to ensure that TEAR DOWN and CONFIRM messages (which are both generated at the crossover router) are not erroneously generated, for example, in response to a spoofed QoS signaling packet. Another type of key-based authentication on the QoS signaling packet may be performed if the QoS signaling packet includes the optional signature for the immutable parameters (e.g., 220; On the other hand, cookie-based authentication is generally used by all respective QoS nodes to preserve the integrity of communications between nodes. Referring to Preferably the crossover router authenticates the QoS signaling packet based on a signature verification of the QoS session ID as described in greater detail below in reference to The previous (QoS) hop router ensures that this cookie is the same as that inserted by it earlier in the QoS signaling packet. Thus, the cookies are used to authenticate the TEAR DOWN messages and other messages on successive (QoS) hops. This mechanism safeguards against malicious nodes sending TEAR DOWN messages to routers for disrupting the existing QoS of the MN. On the other hand, if key-based authentication of the QoS signaling packet fails at the crossover router, the crossover router sends a TEAR DOWN message as described above to tear down the QoS established along the segment of the packet path which were just established (i.e., the segment between the new AR and the crossover router). Again, the cookies may be used to authenticate the TEAR DOWN message if desired. (4) Confirming the QoS Establishment Along the New Segment of Path: Upon successful key-based authentication, the crossover router may also send a CONFIRM message back toward the new AR to corroborate the flow states along the new segment of the packet path (that is, the QoS path between the crossover router and the new AR). The IP addresses of the previous routers (that processed the QoS signaling packet) stored along with the flow states in the routers are used to retrace this packet path from the crossover router back to the new AR. The cookie-based scheme described above may also be used to authenticate the CONFIRM messages. (5) Forwarding the QoS Signaling Packet Beyond the Crossover Router: Upon successful key-based authentication, the crossover router forwards the QoS request to the CN, so that subsequent nodes on the path (which have not changed for the handoff) can update the QoS session ID, sequence numbers, classifier parameters and/or cookies associated with their flow state. The crossover router includes an indicator to inform the next nodes that key-based authentication has been performed and thus the next nodes do not have to perform this authentication of the QoS signaling packet, which requires additional processing, unless desired. Along with such indicator, each router on the path from the crossover router to the CN including the crossover router, also includes the cookie that it sent out before (during QoS setup) to the next hop router. This cookie is used to safeguard against spoofing attacks wherein malicious nodes send QoS modification message with such indicator turned on thereby evading authentication check by routers. (6) Authenticating the QoS Signaling Packet: The authentication mechanism described here for the QoS signaling packet (and the cookie-based authentication mechanism described in Sections 3 and 4 above for the TEAR DOWN and CONFIRM messages) are proposed based on the following threat analysis: First, consider an ideal situation wherein during QoS establishment, the initial AR creates a QoS session ID (say, simply as a random number) and this is used in future to identify the flow irrespective of the changes in the CoA for the MN. For every handoff, context transfer (horizontal signaling) executes successfully and the new AR launches the QoS signaling packet toward the CN. In this case, the QoS session ID never appears on the wireless link (between the MN and the ARs), and hence, a malicious node cannot eavesdrop on it. Further, the malicious node cannot disrupt the QoS of the MN without knowing the QoS session ID. In such an ideal situation, spoofing attacks are practically impossible. However, in practice there might be a handoff instance when the context transfer fails, and hence, the MN has to launch the QoS signaling packet instead of the new AR. In this case, the QoS session ID would appear on the wireless link thus potentially allowing malicious nodes to eavesdrop on it. To prevent this eavesdropping, the MN could send the QoS signaling packet to the AR in a secure tunnel making spoofing attacks extremely difficult. However, if one insists that the handoff QoS signaling from the MN be secure without requiring the secure tunnel and in the light of possibility of the malicious node eavesdropping, a security mechanism may be implemented based on the QoS session ID generated as the hash of the MN's CoA and sequence number using the MN's private key. (The cookie-based mechanism described previously achieves the same purpose for TEAR DOWN and CONFIRM messages). (7) Authentication at the Crossover Router: The crossover router may perform key-based authentication of the QoS signaling packet to ensure that malicious nodes do not spoof the QoS signaling packet and disrupt the existing QoS for the MN. For example, a malicious node could launch such a spoofing attack if the node eavesdrops on the previous signaling from the MN to determine the current QoS session ID. The node could then launch a fraudulent QoS signaling packet with this value as the previous QoS session ID, either from a different CoA or with a reduced QoS requirement. Such an attack can be prevented, referring to A router receives 505 a QoS signaling packet and identifies itself as the crossover router (discussed previously in Section 3). The crossover router uses the QoS flow public key stored in the existing flow state and evaluates 510 whether the new QoS session ID in the received QoS signaling packet is the signature of the combination of the MN's CoA and the sequence number. If so, this means that the MN at this CoA does possess the private key, and thus it is the correct MN and the signature authentication is confirmed 515. Otherwise, the authentication is deemed to have failed 520. The inclusion of the sequence number in calculating the QoS session ID prevents against a replay attack in which a malicious node eavesdrops on one of the QoS session IDs generated by the MN (say on the same link), and later replays it (possibly from the same CoA that the MN held before) after the MN departs from the link. Such an attack is foiled by requiring the crossover router to reject (and thereby declare authentication failure) a QoS signaling packet with a sequence number not greater than that associated with the existing flow state. Using this requirement, in order for a spoofed signaling packet to be accepted by the crossover router, the malicious node would have to increment the sequence number. However, the signature of the MN's CoA and sequence number combination would change and the malicious node could not calculate the correct signature without also having the MN's private key. In one aspect of the present invention, the QoS session ID is used for two purposes: (i) to identify the flow despite a change in the CoA of the MN, and (ii) as a hash value for key-based authentication of the QoS signaling packet. Alternatively, it is possible to use a separate ID (for example, based on the home address (HoA)) for the flow identification. Even with these measures, one more spoofing attack possibility still exists. This attack works as follows. Suppose that the malicious node and the MN are on the same link such as 802.11 WLAN, and the MN has to launch the QoS signaling packet from itself (as opposed to it being launched by the AR when the context transfer is executed successfully) without using a secure tunnel between itself and the AR. The malicious node eavesdrops on the QoS session ID and then spoofs the MN's CoA and launches another QoS signaling packet containing a reduced QoS request. If the QoS signaling packet launched by malicious node overtakes the packet launched by the MN, it may cause QoS disruption. To foil such attack, in one embodiment of the invention, the system includes the signature (e.g., 220; A malicious node can also launch a spoofing attack with an arbitrary value for the previous QoS session ID, thereby creating false flow states in the intermediate routers. However, such a QoS signaling packet can be determined to be a spoofed packet as either one or both of the following tests would fail: (i) the CN would not have a binding update for this CoA since the spoofing attack has been launched from a CoA different from the MN's true CoA, and (ii) the AR to which CN is attached would not have a matching QoS session ID (note: an AR to which CN is attached needs to have a matching QoS session ID). Accordingly, A TEAR DOWN message would then be sent to tear down these fake flow states. Negotiation In the above discussion, we assumed that the routers along the new packet path agree to provide the requested QoS to the MN. However, in practice, some of the routers may not agree to provide the specified QoS requested in the QoS signaling packet, but may instead offer a reduced QoS. To cope with this situation, a two bit flag may be in the QoS signaling packet. If the first bit (�negotiation flag�) is turned off, it implies that the QoS request is non-negotiable. In other words, if some router cannot offer the requested QoS, it rejects the QoS request and sends a TEAR DOWN message to tear down QoS along the uplink packet path from the MN to this router in a similar way as described in Section 3 above. The denying router may also send a TEAR DOWN message towards CN. This TEAR DOWN message serves the purpose of tearing down the QoS along the path from crossover router to CN. This TEAR DOWN message should contain sufficient information from the QoS signaling packet (e.g., new CoA, new sequence number and new QoS session ID) to enable the crossover router to authenticate the TEAR DOWN message (similar to that described in Section 3 above). The crossover router also sends the TEAR DOWN message to tear down QoS along the old segment of the uplink packet path. The crossover router also forwards the original TEAR DOWN message toward the CN to tear down the QoS along the path from itself to the CN. A cookie-based authentication, as described in Section 5, may be used for this TEAR DOWN message. If the negotiation flag in the QoS signaling packet is turned on, it implies that the request is negotiable. In this case, the router may respond with an offer a reduced level of QoS. The second bit in the flag (�notification flag�) may be used to indicate whether the MN wants to be notified about the reduced QoS offering at intermediate nodes. When the notification flag is turned on (and of course, the negotiation flag is also turned on), if some intermediate node on the new segment of the uplink packet path cannot offer the QoS requested in the QoS signaling packet, the node can offer a reduced QoS and include a description of the offered QoS in the mutable fields of QoS signaling packet. When the crossover router receives this QoS signaling packet and notices that the offered QoS is less than the requested QoS at one of the intermediate routers (and that notification flag is tamed on), the crossover router sends a copy of QoS signaling packet back to the MN. The MN (or the AR acting on its behalf) can thus examine the description of the reduced QoS and may decide whether to accept the reduced QoS or reject it. If the MN decides to reject the reduced QoS, a TEAR DOWN message is sent by the MN (or the AR acting on its behalf) toward the CN. The TEAR DOWN message preferably includes the MN's CoA, sequence number, a new QoS session ID generated as a hash of first two, and the previous QoS session ID. The first router (that maintains the flow state) closest to MN authenticates the TEAR DOWN message as described in Section 6 for the crossover router. The authentication from this router to the CN may be cookie-based. Downlink QoS The downlink procedure may be similar to the previously described uplink with the following differences. If applicable (i.e., if the flow has bi-directional QoS requirements), the QoS signaling packet is sent by the AR of the CN toward the new CoA of the MN as soon as the CN is ready to send packets to the new CoA of the MN (for example, immediately after confirming the new CoA of MN). The QoS session IDs for the downlink direction may be generated using the CN's private key. In one aspect of the invention, in the downlink direction, a router identifies itself as a �crossover router� as follows: When a router (that needs to examine flow specific information) receives and examines the QoS signaling packet notices that it does not have an existing flow state for this flow (after comparing previous QoS session ID in the signaling packet with the QoS session IDs associated with the existing flows at the router), it informs the previous router whose address is found in the previous router field of the QoS signaling packet that this previous router was a crossover router. The router makes a note in the QoS signaling packet (for example, by setting a specified flag bit) that the crossover router has already been located to prevent subsequent routers (which also do not have the existing flow state for this flow) from erroneously inferring that the previous router was the cross over router. In an alternate embodiment in the downlink direction, a router identifies itself as a crossover router if (i) it has an existing flow state with the same QoS session ID as a previous QoS session ID contained in the QoS signaling packet; and (ii) an old next router address (to which the QoS signaling packet was forwarded before) is different from the new next router address (to which the QoS signaling packet is currently forwarded to). To enable this, the IP address of the next router to which QoS signaling packet is forwarded must be stored along with the flow state. The crossover router may send a TEAR DOWN message toward the old CoA of the MN. The routers along the new packet path from the crossover router to the new AR of the MN may or may not provide the requested QoS. If so, the new AR may send a CONFIRM message to update the flow states along the new packet path. If hot, theses routers may offer a reduced QoS (for example, if the �negotiation flag� is on) and include a description of the reduced QoS in the mutable fields of the QoS signaling packet. The MN (or new AR acting on its behalf examines this reduced QoS offering an sends either a CONFIRM or TEAR DOWN message toward the CN, depending on whether it accepts or rejects the reduced QoS. The previous router IP addresses stored in the flow states may be used to forward CONFIRM and TEAR DOWN messages as previously discussed. The TEAR DOWN message may be propagated up to the CN. The CONFIRM message may be intercepted at the crossover router, but may also be propagated up to the CN. TEAR DOWN and CONFIRM messages may be authenticated using the cookie-based mechanism described earlier. In the downlink direction, key-based authentication of the QoS signaling packet (similar to that described in Section 6) may be performed. The key-based authentication is typically performed by the first router (that maintains the flow state) near the CN such as the AR of the CN. In one implementation of the present invention, once the AR (or other router) authenticates the QoS signaling packet, a flag is set in the signaling packet to inform subsequent routers that the public/private key-based authentication has already been performed. After that the QoS signaling packet on subsequent QoS hops up to the cross over router may be cookie-based as previously discussed. Unless contrary to physical possibility, the inventors contemplate the methods, protocols and systems described herein: (i) may be performed in any sequence and/or combination; and (ii) the components of respective embodiments combined in any manner. Although there have been described preferred embodiments of this novel invention, many variations and modifications are possible and the invention is not limited to the specific embodiments described above, but rather should be limited only by the scope of the appended claims and their legal equivalents. Patent Citations
Non-Patent Citations
Referenced by
Legal Events
Rotate |


text:
In each issue of Cottage Life you'll find answers to your cottage questions, delicious recipes, design ideas, and stories of other interesting cottagers and some wildlife too
We've Got IssuesLots of them. A special feature commemorating our 100th edition.
Skip to the LooWhether you're fixing up or starting fresh, make your indoor biffy a bathing beauty.
Natural HabitatEnvironmental passion is the foundation of this Manitoba family's retreat.
25 Ultimate UpgradesHigh-performance solutions to get your cottage in top working order.
The Feminine RustiqueHattie was a hurricane in trousers. Now, three generations carry on her Salerno Lake legacy.
Return of the RaptorsA spring skywatcher's guide to our magnificent birds of prey.
Here's Cookin' for you, KidEasy, fun recipes to satisfy young appetites.
High SocietyDo your kids want to live it up? Here's how to get your treehouse project off the ground. Click here to check out the treehouse tower addition.
Are We Having Fun Yet?Insurance is killing lake activities – and their associations.
Task MasterInstalling a second phone jack
Real ToolsThe duct seal solution
Job JarHow to smooth out sticky drawers
RevivalMaking tin can patio lanterns
SolutionsRot detection in the crawl space
Great InventionsCanoe as dock lift; boat whips
Also in this issue
On the WaterfrontMOST POPULAR


text:
Developer Insomniac Games said on a Game Informer interview that it plans to use the Xbox One cloud technology to consistently update its upcoming shooter Sunset Overdrive.
The company's CEO Ted Price also stated that the game's campaign will be playable offline. A month ago on a Twitch.tv video Q&A, Price said that the connectivity of next generation consoles would allow for a "two-way conversation" between the company and gamers by constantly doing content updates and tweaks based on player behavior and feedback.
Price also added that the console's online cloud structure and horsepower would allow more "hardcore data collection, correlation and translation" that would be tough on current generation consoles. "We are going to be relying on heavy back-end services to churn through the data we get from players to understand what they're telling us and what they're doing in the game."
Insomniac Games revealed its upcoming shooter Sunset Overdrive at E3 2013 last month. The game is exclusive for the Xbox One; no release date has been announced yet.


text:
Home of The Getting Naked Movement and the book that started it all. A 24/7 community to help the world find happiness in love, and life.
Sort by:
Discussions | Replies | Latest Activity |
Overcoming NervousnessHi Everyone, I'm really hoping to change my life around by participating in this experiment. I'm having a really hard time overcoming my ne… Started by Caitlin Tomaszewski |
2 |
Jan 19, 2013 Reply by Harlan Cohen |
NAKED ROLL CALL: Who are you?Welcome to the Naked Dating forums! Please take a moment and answer the following questions below: Who are you? Why are you here? What exc… Started by Harlan Cohen |
23 |
Nov 3, 2012 Reply by Todd Yarbrough |
How to start a relationship when sex came firstI met this guy who I had been crushing on and casually got to know him through greek life activities. We would always flirt but one night w… Started by Samantha Sojka |
1 |
Oct 17, 2012 Reply by Harlan Cohen |
He's Just Not That Into YouYes I'm asking this for myself and others I know, but how do you know when a guy is just not that into you anymore? There are some really n… Started by Blair Elizabeth |
2 |
Aug 28, 2012 Reply by Blair Elizabeth |
I'm going somewhere alone...Tomorrow I'm going to the Dark Knight Trilogy event at my theater alone. I don't really know many people or females that are into Batman (o… Started by Gerald Perlas |
5 |
Jul 23, 2012 Reply by Gerald Perlas |
© 2015 Created by Harlan Cohen.


text:
Custom Search
The rekenrek, or arithmetic rack, was designed by Adrian Treffers, a
mathematics curriculum researcher at the Freudenthal Institute in
Holland, to support the natural development of number sense in children.
Smaller versions consist of two rows of 10 beads. Larger versions with ten
rows of ten beads are also available. Each row is made of five red beads
and five white beads. This allows students to make mental images of
numbers. Using 5 and 10 as anchors for counting, adding and subtracting
is obviously more efficient than one-by-one counting. This tool provides
learners with the visual models they need to discover number
relationships and develop a variety of addition and subtraction
strategies, including doubles plus or minus one, making tens, and
compensation, thereby leading to automaticity of basic facts.
Possible Activities
This rekenrek, (advertised as an abacus) with 10 rows of 10 beads in color-coded groups of five, can lie flat on student desks. |
See the following links for prompt cards to use during mental math sessions. Print on cardstock and place on a ring for teacher reference or place in a math center for children to use when working with a partner. |
Possible Math Journal Activities:
The above two work samples were completed by a Kindergarten
student. This student represented her work very clearly
on the blank pages in her Math Journal using pictures, numbers and
words. To begin with some Kindergarten students may find it difficult to
represent their work on the Rekenrek on paper. Having recording paper
available for children who choose to use it is one way to scaffold early
attempts. You may also like to leave a supply of this paper in
your Math Center to prompt children's recording during Math Center
Interested in using Rekenreks in your class but don't have the budget to buy a class set? See our instructions on how to make a class set for just a fraction of the price of store bought models.


text:
Looking Back
'Pinoy Scandal'
Young people who see the term "Pinoy Scandal" presume it is short for Pinoy (Sex) Scandal and expect graphic porn. If the couple is famous, that leads to more hits on the Net. Sex always sells, thus the concubinage case filed by Susie Madrigal Bayot-Ortigas against her husband Paqui Ortigas wouldn't have raised eyebrows except for the juicy details. Then there is the legal tug-of-war between the late Rep. Iggy Arroyo's legal wife (with whom he was long separated) and the woman who was with him in his last moments, the woman who now has physical custody of his corpse. One day a historian will look back on these scandals and write a more sober report because all the materials are in, and the passion and fashion have subsided.
Last Wednesday I wrote about Juan Luna who, in a fit of jealousy, murdered his wife, Paz Pardo de Tavera, and his mother-in-law Juliana Gorricho in front of his son Andres. Our history books do not carry this engaging story, the emphasis being on Luna as a great Filipino painter and patriot. If the murder is mentioned at all, it is swept under the rug either as an "accidental" shooting. Worse, Luna the murderer is painted as the victim—his wife was unfaithful, his in-laws meddlesome. Beyond the newspaper accounts, the police report and the court decision that set him free after paying one French franc (FF) and court costs amounting to 1,651.83FF plus 25FF for postage (or documentary stamps?), the documents that have been left to the historians point to something more basic: how to divide the cash and property left by the wealthy Juliana Gorricho. Luna may have been a great artist but he could not support his family on the sale of his paintings. Documents show that rent and other expenses of the "Luna household" were shouldered by the mother-in-law.
Then there is the issue of Juliana Gorricho's estate. Since she died intestate—that is, without leaving a written, notarized will—the partition of her estate was complicated. When Luna shot Juliana in the head, killing her instantly, her estate automatically passed on to her three children: Trinidad H. Pardo de Tavera, Felix Pardo de Tavera and Paz Luna. When Luna shot Paz in the head, she fell on the bathroom floor and died almost two weeks later without regaining consciousness, thus her one-third share in Juliana Gorricho's estate passed on to her son Andres who was a minor and thus his share in the estate could be controlled by his father Juan Luna. As a matter of fact, the site of the old Philippine National Bank on Escolta is where the pre-war Crystal Arcade once stood. This beautiful building, our first shopping mall, was designed by Andres Luna. Near the PNB building is a small alley, an esquinita called Pasaje de Paz that was reputedly named after Andres' ill-fated mother.
Luna's brothers-in-law filed a petition to overturn his acquittal by the French court but they lost. Then there were other legal tangles in Manila and they had nothing to do with the murders but seemed to be attempts at keeping Luna's hand away from the honey pot. There are documents naming the legal heirs of Juliana Gorricho, as follows: Trinidad H. Pardo de Tavera (son); Felix Pardo de Tavera (son) who lived in Buenos Aires, Argentina, represented in Manila by his elder brother Trinidad; Paz Luna (daughter/deceased), whose share was divided as there were two claimants: Andres Luna (grandson of Juliana) who was a minor and represented by his paternal grandmother Laureana Novicio; and Juan Luna (son-in-law of Juliana, husband of Paz) represented by his brother Jose Luna. I have to complete my research by finding out how big the estate was and how it was finally divided.
Another money matter not in our textbooks concerns Josephine Bracken who was immortalized in Jose Rizal's "Ultimo Adios" as follows: "Adios dulce extranjera, mi amiga mi alegria" (Farewell, sweet foreigner, my darling, my delight). We all have romantic ideas of their life in Dapitan, and depending on the book you are reading, she is described as a common-law wife, or a wife who married Rizal shortly before his execution. In 1902 Josephine Bracken sued Teodora Alonso, Rizal's mother, and claimed that Rizal left a will that stated she was to receive: all of the paintings done by Juan Luna, 1,000 pesos and Rizal's library in Hong Kong under the care of Jose Ma. Basa.
As early as November 1897 Josephine wrote Ferdinand Blumentritt: "I let you know by these few lines that my late husband Dr. J. Rizal left all his books to you. There are three bookcases I mean libry (sic) in care of Mr. Jose Maria Basa's house. I opened the Will last month and found that the bookcases were for you, he very often told me that those books cost him 3000$. I asked Mr. Basa for the books and he denied them, I think it is better for you to write over and ask him for the things that my husband left for you—The (Filipinos) out here now they are not Gentlemen, they deceived me a great deal their (sic) were 1000$ given to Rizal by the Freemason Lodge so it was to be given to me, but they took it and spent it all—they are not what I thought them to be like my husband, but I see that I am deceived."
Did Rizal really have a will? How was his estate divided? These are the practical matters that we often forget when we think of love and sex in Philippine history.
* * *
Comments are welcome in my Facebook Fan Page.
Get Inquirer updates while on the go, add us on these apps:
Disclaimer: The comments uploaded on this site do not necessarily represent or reflect the views of management and owner of INQUIRER.net. We reserve the right to exclude comments that we deem to be inconsistent with our editorial standards.
To subscribe to the Philippine Daily Inquirer newspaper in the Philippines, call +63 2 896-6000 for Metro Manila and Metro Cebu or email your subscription request here.
Factual errors? Contact the Philippine Daily Inquirer's day desk. Believe this article violates journalistic ethics? Contact the Inquirer's Reader's Advocate. Or write The Readers' Advocate:
c/o Philippine Daily Inquirer Chino Roces Avenue corner Yague and Mascardo Streets, Makati City,Metro Manila, Philippines Or fax nos. +63 2 8974793 to 94


text:
this wiki
This article or section is a quest stub. You can help expand it by editing it.
Back So Soon? | |
Start | High-Oracle Soo-say |
End | Mistcaller Soo-gan |
Level | 77 |
Category | Sholazar Basin |
Experience | 10,700 XP or 6420 at Level 90 |
Reputation | The Oracles +250 |
Rewards | 3 30 |
Previous | Making Peace |
Next | The Lost Mistwhisper Treasure Forced Hand |
[show]Objectives Edit
Travel to Mistwhisper Refuge and speak to Mistcaller Soo-gan.
If you lose [Jaloot's Favorite Crystal], speak to High-Oracle Soo-say in Rainspeaker Canopy.
Description Edit
<High-Oracle Soo-say stares at your forehead for a while before speaking.>
Soo-gan ask for help. We think they might have been attacked by puppy-men again.
We sending you and Jaloot to help... follow west river up to Mistwhisper Refuge. Do what Soo-gan says... hit the puppy-men on the nose if they being mean, they don't like that.
<High-Oracle Soo-say goes back to staring at your forehead as you leave.>
Rewards Edit
Completion Edit
We think we seen you before. You visit Mistwhisper village sometime already?
Soo-say said you good. Soo-say smart, so we trust you too.
<Mistcaller Soo-gan offers an awkwardly large smile.>
Quest progression Edit
- [76] The Part-time Hunter (optional)
- [77] Playing Along
- Complete both to continue:
- Complete both to continue:
- [77] Flown the Coop!
- Complete both to continue:
- [77] The Underground Menace
- [77] Mischief in the Making
- [77] A Rough Ride
- Complete both to continue:
- [77] Hoofing It
- [77] Just Following Orders
- [77] Fortunate Misunderstandings
- Complete both to continue:
- [77] Making Peace
- [77] Back So Soon?
- Complete both to continue:
- [77] The Lost Mistwhisper Treasure
- [77] Forced Hand
- [77] Home Time!
- [77] The Angry Gorloc
- Complete both to continue:
- [77G3] A Hero's Burden
- Choose then ONE of these quests to become aligned with any of the factions:


text:
Permanent URL to this publication: http://dx.doi.org/10.5167/uzh-52129
Hagedorn, Marcus; Kaul, Ashok; Mennel, Tim (2005). An Adverse Selection Model of Optimal Unemployment. Working paper series / Institute for Empirical Research in Economics No. 237, University of Zurich.
775kB |
We ask whether offering a menu of unemployment insurance contracts is welfare improving in a heterogeneous population. We adopt a repeated moral-hazard framework as in Shavell/Weiss (1979) supplemented by unobservednheterogeneity about agents' job opportunities. Our main theoretical contribution is an analytical characterizationnof the sets of jointly feasible entitlements that renders annefficient computation of these sets feasible. Our main economicnresult is that optimal contracts for "bad" searchers tend to be upward-sloping due to an adverse-selection effect.nThis is in contrast to the well-known optimal decreasingntime-profile of benefits in pure moral hazard environmentsnthat continue to be optimal for "good" searchers in our model.
Downloads |
Additional indexing
Item Type: | Working Paper |
Communities & Collections: | 03 Faculty of Economics > Department of Economics
Working Paper Series > Institute for Empirical Research in Economics (former) |
Dewey Decimal Classification: | 330 Economics |
Language: | English |
Date: | March 2005 |
Deposited On: | 29 Nov 2011 22:32 |
Last Modified: | 09 Jul 2012 05:02 |
Series Name: | Working paper series / Institute for Empirical Research in Economics |
Official URL: | http://www.econ.uzh.ch/wp.html |
Users (please log in): suggest update or correction for this item
Repository Staff Only: item control page


text:
Marcia Call has not received any gifts yet
Posted on February 20, 2013 at 5:46pm 0 Comments 0 Likes
Recently, I played a vigorous game of charades with a group of friends. The players' acting abilities were worthy of an Oscar -- ridiculously creative, intuitive, and skillful . . . with the exception of one of us who told us in advance that he did not want to play because he was terrible at the game. I…
ContinuePosted on January 24, 2013 at 8:30pm 0 Comments 2 Likes
In today's fragile economy, some of you may be working diligently on getting yourselves hired. If you are, you are probably talking with a corporate recruiter/human resources manager like me whose job it is to help organizations determine who is the best fit for their vacant positions. We all know that…
ContinuePosted on January 22, 2013 at 2:20pm 0 Comments 0 Likes
After two months of running around metropolitan DC in my beloved gas-guzzling Chevy Suburban, I decided it was time for a change. With my miles-per-gallon topping 17 on a good day – a drive to Gainesville and back, I wanted one thing – relief at the pump. I was determined to settle for nothing less than 28 miles to the gallon, which was double what I was getting on basic stop-and-go days. Sounds pretty easy, right? Technically, it was, but that's where this post begins.
I performed a…
ContinueAdded by Stirling Cox on April 22, 2015
Added by Maura McElhone on April 21, 2015
© 2015 Created by RecruitingBlogs. Powered by
RecruitingDaily.com LLC
61 Montero Drive,
Stratford, CT 06614
Email us: firstname.lastname@example.com
With over 65K strong in our community, RecruitingBlogs.com is part of the RecruitingDaily LLC. family of Recruiting and HR community.
Our goal is to provide information to the recruiting community that is meaningful. Without compromise, our community comes first.


text:
Effect of 48 Hours of Treatment With the Natural Peptide-Hormone GLP-1 in Patients With Chronic Heart Failure
- Full Text View
- Tabular View
- No Study Results Posted
- Disclaimer
- How to Read a Study Record
The purpose of this study is to determine whether 48 hours of glucagon-like-peptide-1 (GLP-1) infusion can improve heart function and alter substrate metabolism in non-diabetic patients with heart failure.
Condition | Intervention |
Heart Failure, Congestive |
Drug: GLP-1 Drug: placebo |
Study Type: | Interventional |
Study Design: | Allocation: Randomized Endpoint Classification: Efficacy Study Intervention Model: Crossover Assignment Masking: Double Blind (Subject, Caregiver, Investigator, Outcomes Assessor) Primary Purpose: Treatment |
Official Title: | The Effect of 48 Hours GLP-1 Infusion on Left Ventricular Function, Exercise Capacity, Insulin Sensitivity and Substrate Metabolism in Patients With Chronic Heart Failure |
- Effect on global left ventricular function [ Time Frame: at baseline and after 48 hours of intervention ]
- Effect on regional left ventricular function [ Time Frame: at baseline and after 48 hours of intervention ]
- Effect on exercise capacity [ Time Frame: at baseline and after 48 hours of intervention ]
- Effect on 6 minute walk test [ Time Frame: at baseline and after 48 hours of intervention ]
- Effect on insulin sensitivity [ Time Frame: after 48 hours of intervention ]
- Effect on substrate metabolism at whole-body level and in the fore-arm [ Time Frame: after 48 hours of intervention ]
Enrollment: | 20 |
Study Start Date: | December 2005 |
Study Completion Date: | December 2007 |
Arms | Assigned Interventions |
Active Comparator: 1 |
Drug: GLP-1
iv. by weight (1.0 pmol/kg/min )
Placebo Comparator: 2 |
Drug: placebo
same rate of infusion as GLP-1
Detailed Description:
Heart failure is a major complication in patients with ischemic heart disease. It has been shown that many of these patients have areas of viable myocardium that are not effectively contributing to heart function.
Further, chronic congestive heart failure is associated with some degree of insulin resistance in both skeletal and cardiac muscle.
GLP-1 is a naturally occurring peptide hormone that acts as an incretin and has been intensively studied by many groups in association with type II diabetes and it has clearly shown its glucose lowering potential with very little risk of hypoglycemia in several trials.
Recently GLP-1 has been shown to improve cardiac function in dogs with pace-induced cardiomyopathy, and in an open-labeled study it did improve cardiac function in patients with acute myocardial infarctions.
Comparison: 48 hours of treatment with intravenous GLP-1 compared to placebo. Effect on global and regional left ventricular function, exercise capacity, insulin sensitivity and substrate metabolism.
Ages Eligible for Study: | 18 Years and older |
Genders Eligible for Study: | Both |
Accepts Healthy Volunteers: | No |
Inclusion Criteria:
- Chronic congestive heart failure
- Ischemic heart disease
Exclusion Criteria:
- Diabetes
- Exercise limiting disease other than heart failure
- Congenital heart disease
- Arterio-venous shunts
- Renal failure
- Valvular heart disease
Please refer to this study by its ClinicalTrials.gov identifier: NCT00264199
Denmark | |
Afdeling B, Skejby Hospital | |
Aarhus, Denmark, 8200 |
Principal Investigator: | Hans Erik Bøtker, MD | Afdeling B, Skejby Hospital |
No publications provided
Responsible Party: | Mads Halbirk, Aarhus University Hospital, Skejby |
ClinicalTrials.gov Identifier: | NCT00264199 History of Changes |
Other Study ID Numbers: | 20050048 |
Study First Received: | December 9, 2005 |
Last Updated: | December 18, 2007 |
Health Authority: | Denmark: The Danish National Committee on Biomedical Research Ethics |
Keywords provided by Aarhus University Hospital Skejby:
Chronic Congestive heart failure Ischemic heart disease insulin resistance |
Additional relevant MeSH terms:
Heart Failure Cardiovascular Diseases Heart Diseases |
ClinicalTrials.gov processed this record on April 23, 2015


text:
What Does DogFriendly.com Offer? Select From Our Pull-Down Menu Dog-Friendly Hotels & Lodging Dog-Friendly City Guides ...Attractions, Restaurants & More Dog-Friendly Ski Resorts Dog-Friendly Camping/RV Parks Dog-Friendly Beach Guide Dog-Friendly Outdoor Dining Dog-Friendly Attraction Guide Dog-Friendly Park Guide Off-Leash Dog Parks Public Transportation & Dogs Dog Camps Dog-Friendly Events Dog Photo Gallery Dog & Pet Store Dog Travel Guide Books Top 10 Dog-Friendly Cities Top 10 Dog-Friendly Resorts DogFriendly.com's Newsletter Book Reseller Information Advertise with DogFriendly.com Online Press Kit About Us/Contact Us
U.S. Dog Travel Guides
Dog City Guides
Outdoor Dining
Dog Parks
Dog & Pet Store
Campgrounds & RV Parks
Dog Travel Books
Mobile Apps
Dog Photos
Quality Inn Executive Center
Quality Inn Executive CenterDog-Friendly Hotels540 North Pleasantburg DriveGreenville,South Carolina 29607Call 866-676-3077 To Book This Hotel Get Map or Directions Famous free hot southern breakfast with fresh waffles, eggs cooked-to-order, fruit, muffins and more. Numerous restaurants closeby. Easy access to shopping. Great for both business and leisure guests. Hotel has a business center with high speed inernet and a laser printer. Lots of amenities. Close to Palmetto Center, Bi-Lo Center, Donaldson Center, Bob Jones University, Furman University, Greenville Tech, BMW, and Michelin. Free passes to the nearby local fitness center for duration of stay. Pet accommodation: 20.00/stay. Limit: 2 pets/room.Walking distance to Palmetto Expo Center. Close to Bilo Center, Bob Jones University, and Greenville Tech. Dogs of all sizes are allowed. Dogs are allowed for a pet fee of $20.00 per pet per stay. Two dogs are allowed per room.
=indicates DogFriendly.com's dog-friendly advertisers!
Air Travel
Highway Guides
Books and Ebooks
List Your Property
About Us
Press Kit
Contact Us
Recommend Places


text:
This section contains 691 words (approx. 3 pages at 300 words per page) |
Critical Essay by Robert Scholes
"The Bell Jar" is a novel about the events of Sylvia Plath's 20th year: about how she tried to die, and how they stuck her together with glue. It is a fine novel, as bitter and remorseless as her last poems—the kind of book [J. D.] Salinger's Franny might have written about herself 10 years later, if she had spent those 10 years in Hell….
"The Bell Jar" is about the way this country was in the nineteen-fifties and about the way it is to lose one's grip on sanity and recover it again….
To Esther madness is the descent of a stifling bell jar over her head….
The world in which the events of this novel take place is a world bounded by the cold war on one side and the sexual war on the other...
This section contains 691 words (approx. 3 pages at 300 words per page) |


text:
Event Name
- OR - Select an option belowNestled in the shadows of the A-B Brewery on the south end of Soulard, Big Daddy's offers a little bit of everything for the south city barfly. The downstairs bar features dj's spinning the latest jams every weekend and ice cold beers and tasty appetizers make it a great place to kick back a watch the game. But an inviting outdoor patio and second upstairs bar give the venue range and seasonal charm.


text:
Now Playing
WFP Logistics
Delivering food by land, sea and air, WFP Logistics is the essential link in feeding 90 million people worldwide every year. Our corporate video shows WFP Logistics in action.
Date | 20 March 2011 |
Topics | Hunger TV |
Countries | Chad, Afghanistan, Haiti, Philippines, Somalia |
Latest Videos/Galleries
15 November 2012
Afghan Women Learn To Sew To Feed Their Families
25 September 2012
Hiking For Peace In Central Afghanistan
10 September 2012
The Trouble With Naan
10 September 2012
Making More Nutritious Foods For Afghans


text:
Terms & Conditions of Use
Color Charts Color Chart Request Color Comparisons
PRODUCTS Common Thread Products Special Effects Thread Products
Designer Kit Retail Store Program
Care Instructions Design Support Embroidery Technical Information
Commercial Distributors Retail Distributors Stores in Your Area
Note: When emailing us, please include your company name, address, and phone number in your email. Also, if you are requesting a color chart, please indicate the desired chart:
Commercial: Call: (877) 200-7070; (704) 827-4311 Fax: (800) 261-8498 International Contacts
For more contact information, especially for American & Efird, see A&E Sales & Service or the email page for the A&E web site.
Terms & Conditions of Use Copyright © 2000-2007 American & Efird® LLC (Text and Graphics. All International Rights Reserved.) Robison-Anton® and the "RA" logo are registered trademarks of American & Efird Enterprises, Inc.


text:
Pressurized Tube4
After a long period of testing and developing, Pressurized is proud to introduce the new tube 4 tracksuit. The Team have a lot of fun with this suit who is easy to fly and have a great performance. For this video we were filming in Italy and Austria. Pilots: Peter Salzmann Peter Moser Andreas Podlipnik Edit: artisual http://www.artisual.at/ Aerial filming: airv8 http://www.airv8.com/
What Do You Think?
Get the best in action sports straight to your inbox


text:
Welcome to Smogon! Check out the Smogon Info Hub for everything you need to know about starting out in the community. Don't forget to introduce yourself in the Introduction Thread, too!
Welcome to Smogon Forums! Please take a minute to read the rules.
DPP Ubers Rising From the Storms - An Uber Stall Team
Discussion in 'RMT Archive' started by Jibaku, Jul 3, 2009.


text:
Tetra Tech
Contact Us
Legal Notices
About TtEC
Doing Business with TtEC
About TtEC
Objective & Vision
Operating Philosophies
TtEC in the Community
Contact Us
In The News
Tetra Tech Wins $35 million Sediment Remediation Contract
Tetra Tech Announces Planned Dates for Second Quarter 2015 Results and Conference Call
Tetra Tech Wins $1 Billion USAID Water and Development Contract
Welcome to Tetra Tech EC, Inc.
Tetra Tech EC, Inc.
(TtEC) is a leading provider of consulting, engineering, remediation, and construction services worldwide. We provide our clients with a full range of traditional and innovative services — delivering the best solutions to meet our clients' needs. TtEC distinguishes itself to our clients by proactively incorporating the following principles through our work processes, operating procedures, and execution methods:
Client Service Quality
Do It Right
Shared Vision
Zero Incident Performance
TtEC is a wholly owned subsidiary of Tetra Tech Inc., a publicly traded company with annual revenues of more than $2.7 billion and more than 14,000 employees in 350 offices throughout the world.
TtEC's services and experience are as diverse as the industries and clients we serve throughout the world. From a wind farm in Alaska to environmental restoration in Florida, from remediation in Italy to the construction of military facilities throughout the world, wherever and whatever your project needs, TtEC has the expertise, knowledge, and depth of resources to achieve your strategic and operational goals.
Our corporate headquarters is located in Morris Plains, New Jersey.
Other Tetra Tech companies providing construction services include:
Tetra Tech Construction (Gloversville, New York)
Tetra Tech Tesoro, Inc. (Virginia Beach, Virginia)
Tetra Tech Construction Services, Inc. (Littleton, Colorado)
Western Utility Contractors, Inc. (University Park, Illinois)
We welcome the opportunity to serve you.
Commitment to Our Clients
Full Life Cycle Services
Fully Integrated Services
Safe and Responsible
Tried and True Processes
Long-Term Expertise
Stability and Strength
The Most Challenging Projects … Anytime, Anywhere


text:
Cedeira, a Coastal Town in Galicia
1 8 Share TweetWhile I was thinking of doing my first article, I thought, 'you better do one on a location where you have been going on vacation for 22 years!'. Now that I'm immersed in this world of Lomography, the best way I can express and teach you all about our family's favorite vacation spot is still through pictures!
Our family's tradition of vacationing in Cedeira began about 50 years ago with my parents. Since then, our whole family has made it a habit to spend a few days vacationing here during the summer.
As a coastal town, the best time to come here is between June and September. Here you will find charming landscapes that are full of vitality; the beauty of nature is all around, fog, and even Europe's highest cliff, a beach of more than 1km long, recreational areas, and two ports as it is a fishing village. But now you can also see yachts and sailboats of some people who come to spend a few days in this town.
It is the perfect place to be with family and spend a few relaxing days enjoying the scenery with a clean beach and fine sand. The village is also a place where you cannot miss out on those typical Galician restaurants and taverns where the food is simply exquisite and is served in generous quantities (only suitable for people who eat too much! hahaha).
Remember, something not to be missed in the Galician coast is the province of A Coruña which is only 50 minutes away from the capital. Sun, beach, good food, family, and some amazing sunsets, what more could you want?
written by javihacefotos on 2011-01-18 in #world #locations #travel-destination #spain #summer #redscale #beach #galicia #sun #nature #family


text:
Category:Operation Prime Chance
From Wikimedia Commons, the free media repository
English: Operation Prime Chance (August 1987-June 1989) was a United States Special Operations Command operation intended to protect U.S.-flagged oil tankers from Iranian attack during the Iran-Iraq War. The operation took place roughly at the same time as Operation Earnest Will (July 1987-December 1988), the largely Navy effort to escort the tankers through the Persian Gulf.
Media in category "Operation Prime Chance"
The following 9 files are in this category, out of 9 total.


text:
1 Result
HBR's 10 Must Reads Boxed Set
125.00You want the most important ideas on management all in one place. Now you can have them--in a set of HBR's 10 Must Reads, available as a 6 volume paperback...
Case Study
Take Advantage of Your Diaspora Network
Innovation & Entrepreneurship Case Study8.95Diaspora networks (DNs) are an important resource for global entrepreneurs. Discusses several features of DNs, combining both academic and practitioner...


text:
Adam James Lingner
Position: C
Height: 6-4 Weight: 268 lbs.
Born: November 2, 1960 in Indianapolis, IN
High School: Alleman
College: Illinois (school history)
Drafted by the Kansas City Chiefs in the 9th round (231st overall) of the 1983 NFL Draft.
Weighted Career AV (100-95-...): 10 (6998th overall since 1950)
Let people know you like this site. Sponsor this page for $5. Your message will replace this ad.


text:
Hotel Style Klassisch Traditionell, rustikal Zeitgenössisch, Design Kurart, Ferienort Fusion Hotel Category Exclusiver luxus Informeller Luxus Schick, mit Charme |
Glendorn, Pennsylvania |
1000 Glendorn Drive, 16701, Bradford, Pennsylvania, VEREINIGTE STAATEN. |
Beschreibung: GlendornYour step back in time begins along the mile and half private drive to the central compound of this 1,280 acre family estate enveloped by dense woodlands, pristine trout streams and several small lakes.Built in 1929, Glendorn offers accommodations, dining, and activities in the style of the great family camps. Each accommodation is unique. You may prefer to stay in the Big House, constructed in 1929, in the suites or spacious rooms. Or you might enjoy more solitude in one of the cabins. Glendorn has a total of 41 wood burning fireplaces and each suite or cabin has at least one. Beschreibung der Zimmer: Glendorn2 suites2 double rooms available in the big house 15 cabins and houses situated around the grounds of the estate Zusätzliche Information: GlendornAll accommodations feature Aveda bath amenities and fine linens and towels. Additional features include iron/boards and cd-players. Twice daily housekeeping service as well as fresh fruit and bottled mineral water and Glendorn signature cookie jars re-filled daily.
On site activities include: tennis on two rubico clay courts, racquets are also available, fishing in lakes and streams (a limited amount of tackle is available), canoes on Bondieu lake, mountain and street bicycles, miles of hiking trails, 60-foot outdoor swimming pool, gymnasium with treadmill, nordic track, free weights and half-court basketball, cross-country skiing (skis are complimentary), snowshoeing, game room with billiards, pool and challenging Par puzzles. Available on-site at an additional charge: Body therapy, skeet and trap shooting including guns, clay pigeons and Glendorn instructor, guided fishing, steelhead fishing. Available off-site at an additional charge: Golf, downhill skiing, guided fishing. Children: Well-behaved children are welcome at Glendorn cabins. Depending on the age of the children, the Chef can prepare an appropiate meal for them. Baby sitting service can be arranged with prior notice. Private dining areas are available as to not to distract other guests. Well-behaved dogs are welcome at Glendorn in selected cabins listed on the hotel website, please see the pet policy displayed there. |
Anzahl Zimmer: 19
Ofizielle Kategorie: 4 diamonds.
Baudatum oder Datum der letzten Renovation: 1929.
Schliessungszeit Hotel: Open all year.
Sprachen: English, French.
Bedingungen für Raucher: Non-smoking policy in the dining room. Smoking is permitted in bedrooms.Kredikarten akzeptiert: American Express, Diners, Mastercard, Visa. GPS Koordinaten: 41° 55' 6.42'' N 78° 44' 10.29'' W Nächster Flughafen: Bradford - 20 mn.
Ausgewähltes Hotel Weitere Hotels in der Nähe
Diese Karte zeigt die genaue Lage von GlendornÜber Uns | | | Ihre Meinung | | | Mitteilungsbulletin | | | Machen Sie Bei Uns Mit | Empfehlen Sie diese Seite | | | Rechtshinweis | | | Site Map | |||||||||||||||||
A unique guide of boutique hotels of the world, design and charming hotels for discerning travellers. © Copyright 2003 - 2015 World Travellers On Line S.L. |


text:
By John Fossen
DATE: Will be calculated from "Release Start Date" field.
WAYNE, Mich. – Robert O'Leary, a team leader in the Michigan Assembly Plant (MAP) Body Department, seems to have a knack for recognizing and eliminating waste.
When Robert and his team were struggling to meet budget because of the cost of protective decklid sponges, he worked with the Plant Vehicle Team and Quality to run a controlled trial without the padding to determine their effectiveness.
The test revealed that the sponges, which cost $1.50 each, were not needed. The protective padding was eliminated, saving Michigan Assembly thousands of dollars without compromising quality.
"Placement and removal of the decklid sponges added work for people on the line, cost the company money and didn't need to be used. So, it made sense to eliminate them," O'Leary explained.
It's not the first time O'Leary saw an opportunity to attack waste. He was also instrumental in eliminating a liftgate sponge as well as a rubber door strip. Both proved to be unnecessary protection.
"Robert is a great example of an employee who goes further and is fully engaged in our business," said Corey Williams, area manager, MAP Body Department. He wants to build a world-class product for our customers, yet also understands the negative impact of waste."
"Whatever it takes to help out, "O'Leary said."


text:
Our luxurious studio offers a full range of amenities to meet your comfort and convenience needs.
– 2 Yoga Rooms
– Non-Porous Antibacterial Floor
– Spacious Change Rooms
– Shower Facilities
– Locker Facilities (Bring your own lock)
– Infrared Sauna
– Mat & Towel Services
– Retail selection of high quality yoga products including Onzie, Mika Yoga Wear, Halfmoon Yoga Products, Zenzation Athletics and more!
We share our space with FUEL Supplements, Vitamins and Nutrition. Be sure to check out their great line of products and specialty items!
Kimberley Myrchak is a certified Shiatsu massage therapist at our studio. Yoga members get 30% off. Appointments are made in advance. Contact (604) 761-3224


text:
Programs for Adults
WORKSHOP: Preserving Your Family Photos
When: Thursday, March 26, 2015; 5-7pm
Where: UA Museum of the North Creativity Lab
Cost: $25 non-members, $20 members
Course designed for adults. Open to 15 years and up.
Pre-registration is required. Online registration now closed. Phone to see if space available (474-5360).
The Science of Museum Collections
Enjoy a museum sampler! Discover collections and the science behind them. Explore a new subject each week. Curators and collections managers will share interesting facts about specimens they are charged with collecting, cataloging, conserving, and researching. Featured this session will be mammals, insects, fishes, genomic resources (DNA and frozen tissues), and earth sciences (fossils and dinosaurs). Included will be tours of the UA Museum of the North collections and laboratory spaces plus hands-on activities presented by museum education. Enrollment limited to 16.
Instructors: Aren Gunderson, UAMN Mammals Collections Manager (Mar.4); Derek Sikes, UAMN Curator of Insects (Mar.11); Kyndall Hildebrandt, UAMN Genomic Resources Collections Manager (Mar.18); Andrés Lopez, UAMN Curator of Fishes (Mar.25); Patrick Druckenmiller, UAMN Curator of Earth Sciences (Apr.1); Jennifer Arseneau, UAMN Manager of Education & Public Programs
When: Session I + add-on: March 4-April 1, Wednesdays 3-4:30pm
Where: UA Museum of the North Creativity Lab
Preserving Your Photos and Films
Learn about the museum's film collection and then delve into strategies for preserving and restoring your own slides, prints, videos, and film. Protect and preserve your irreplaceable visual memories for yourself and future generations to enjoy. Bring samples of your prints, negatives, or films for evaluation. Enrollment limited to 15.
Instructor Leonard Kamerling, UAMN Curator of Film and UAF Professor of English, is an award winning documentary filmmaker and specialist in film preservation.
When: Session II: April 16 & 23, Thursdays 3-4:30pm -OR- April 30 & May 7, Thursdays 3-4:30pm
Where: UA Museum of the North Creativity Lab
Cost: OLLI is a non-credited educational program for adults age 50+ and their companions. Membership is $35 per person, valid for the calendar year, and classe registration fees are $15 per class or $150 for unlimited classes for the calendar year.
Register through OLLI: online registration opens in February 2015, www.uaf.edu/olli. For more information, call (907) 474-6607 or email the OLLI office at firstname.lastname@example.com .
Don your snowshoes and join Sonja Hinrichsen to create large scale art using snow as the canvas. Hinrichsen is a 2015 artist-in-residence at Denali National Park and Preserve. She has created snow art with community partners all over the world. See her website at: http://www.sonja-hinrichsen.com/
When: Saturday, March 14, 2015; 10:30am
Where: Fairbanks Experiment Farm on West Tanana Drive on the UAF campus
Cost: Free
Best for older teens and adults.
This event has passed. Thanks for your interest! View the artwork at the UAF Farm for yourself from the museum's windows or see pictures online.
Presented by the National Park Service in partnership with the UA Museum of the North and the UAF Agriculture and Forestry Experiment Station.
Be sure to check our events calendar for other opportunities like movies and presentations.


text:
Login | Join
News Featured Content
All News Articles
Interviews Featured Content
All Interviews Articles
Lessons RSS
Lessons Featured Content
All Lessons Articles
Gear RSS
Gear Featured Content
All Gear Articles
Blogs Featured Content
All Blogs Articles
Girls Featured Content
All Girls Articles
Acoustic Nation RSS
Acoustic Nation Featured Content
All Acoustic Nation Articles
For Tool, music and imagery are inextricably united—which is why the group is reissuing its 1992 debut EP, Opiate, in an extremely limited edition with new artwork and collectibles. Adam Jones explains.
Guitarist Adam Jones will art direct this bonus-filled package, which commemorates the 21st anniversary of the six-song release.
Whether or not there will be a new Tool album this year remains to be seen, but one thing we do know for sure is that frontman Maynard James Keenan will be taking his solo act, Puscifer, on the road this summer.
Concrete answers are a hard commodity to come by in the world of Tool, although their enigmatic existence in the musical realm is probably why so many love them.
Let's go back a decade and reexamine the albums that made up 2001. Check out the poll below and vote for your favorite. Or let us know if we missed one. As usual, the results will be posted next week.
So as most of you know by now, all the hype around Tool being in the recording studio was just that, and the recording sessions referred to in Tool's November newsletter were for drummer Danny Carey's side project, Volto.
Speaking to The Pulse Of Radio, Tool frontman Maynard James Keenan confirmed that tool were indeed writing a new album, but that no recording had begun just yet, making it hard to pin down a release time frame.
Metal Injection has posted a clip of Tool guitarist Adam Jones performing the national anthem, aka "The Star-Spangled Banner," live last night at WWE Summerslam in Los Angeles, California.
The Tool guitarist collaborates on the X-Files/30 Days of Night comic series.
3-day festival to once again take place in New Jersey this summer
Buy it now! Now on the iPad