text:
Love, Hate and a torn sleeve
In 1980, Neil Diamond starred in a movie called "The Jazz Singer." Sir Laurence Olivier, in what can only be described as his most regrettable role, plays Neil's father, a deeply religious cantor (someone who leads a Jewish congregation in prayer and song, among other things).
Neil is married to his childhood sweetheart, is a cantor himself and, as is often the way with young cantors in movies, dreams of becoming a pop star. He moves out to California to pursue the career, where, ...
Read full story
You must be signed in to post a comment
Fantasy Football Week 17
Aaron Rodgers will likely finish as the top scorer in fantasy for 2011, but how much will he play in Week 17?
Fantasy Football Tools• Backfield Chart | Week 17 Projections
• Scoring Leaders | Points Against
• Most Added/Dropped (Past 7 days)
• Week 17 fantasy inactives | Full inactives list
Week 17 Rankings
Weekly Features
• Harris: The Hard Count
• Berry: Love/Hate for Week 17
• IDP Rankings for Week 17
• Cockcroft: Consistency ratings
• Carpenter: Gridiron Challenge preview
• Harris: Top Week 17 free agents
Bell Injury Blog
• Thursday: Romo, Brady, Big Ben updates
• Tuesday: Peterson tears ACL
• Football Outsiders: Top matchups
• Top 100 flex (RB/WR/TE) rankings
• Ranks reax: Tate on the rise
• Pass Plays: Toby Gerhart
• Four Downs: Cam Newton's rise
Fantasy Focus Video
• Friday: Berry's Love/Hate
• Thursday: Bell's injury report
• Wednesday: Harris' free-agent picks
• Monday: Karabell's waiver picks
Fantasy Focus Podcast
• Friday: Week 17 previews, injuries
• Thursday: Rankings; More from The League
• Wednesday: Lineup talk; Daniel Radcliffe
• Tuesday: Week 16 recap; injury news
Chat Schedule/Wraps
• Monday 11 a.m. ET: AJ Mass
• Tuesday 3 p.m. ET: Stephania Bell (injuries)
• Wednesday, 11 a.m. ET: Tristan H. Cockcroft
• Wednesday, 3 p.m. ET: Eric Karabell
• Thursday, 11 a.m. ET: Christopher Harris
• Friday, 11 a.m. ET: Stephania Bell (Injuries)
• Friday, 12 p.m. ET: Matthew Berry
• Friday, 3 p.m. ET: KC Joyner


text:
Member? Sign in. Not a member? Register for free.
Tiffany & Co. Engagement Ring Finder
iOS Universal Lifestyle
Find your perfect engagement ring with Tiffany & Co.'s Engagement Ring Finder.
Browse styles, view actual carat weights, determine your ring size and learn why a Tiffany engagement ring is the best there is.
What's New
Performance improvements and bug fixes.

subset: commoncrawl


text:
In the previous post I described the continuous end-to-end system
that we've set up for some of the MirageOS projects — automatically going from
git push all the way to live deployment, with everything under
Everything I described previously already exists and you can set up the workflow for yourself, the same way many others have done with the Travis CI scripts for testing/build. However, there are a range of exciting possibilities to consider if we're willing to extrapolate just a little from the tools we have right now. The rest of this post explores these ideas and considers how we might extend our system.
Previously, we had finished the backbone of the workflow and I discussed a few ideas about how we should flesh it out — namely more testing and some form of logging/reporting. There's substantially more we could do when we consider how lean and nimble unikernels are, especially if we speculate about the systems we could create as our toolstack matures. A couple of things immediately come to mind.
The first is the ability to boot a unikernel only when it is required, which opens up the possibility of highly-elastic infrastructure. The second is the ease with which we can push, pull or otherwise distribute unikernels throughout a system, allowing new forms of deployment to both cloud and embedded systems. We'll consider these in turn and see where they take us, comparing with the current 'mirage-decks' deployment I described in Part 1.
The way cloud services are currently provisioned means that you may have services operating and consuming resources (CPU, memory, etc), even when there is no demand for them. It would be significantly more efficient if we could just activate a service when required and then shut it down again when the demand has passed. In our case, this would mean that when a unikernel is 'deployed to production', it doesn't actually have to be live — it merely needs to be ready to boot when demand arises. With tools like Jitsu (Just-In-Time Summoning of Unikernels), we can work towards this kind of architecture.
Jitsu allows us to have unikernels sitting in storage then 'summon' them into existence. This can occur in response to an incoming request and with no discernible latency for the requester. While unikernels are inactive, they consume only the actual physical storage required and thus do not take up any CPU cycles, nor RAM, etc. This means that more can be achieved with fewer resources and it would significantly improve things like utilization rates of hardware and power efficiency.
In the case of the decks.openmirage.org unikernel that I discussed last time, it would mean that the site would only come online if someone had requested it and would shut down again afterwards.
In fact, we've already been working on this kind of system and Jitsu will be presented at NSDI in Oakland, California this May. In the spirit of looking ahead, there's more we could do.
At the moment, Jitsu lets you set up a system where unikernels will boot in response to incoming requests. This is already pretty cool but we could take this a step further. If we can boot unikernels on demand, then we could use that to build a system which can automate the scale-out of those services to match demand. We could even have that system work across multiple machines, not just one host. So how would all this look in practice for 'mirage-decks'?
Our previous toolchain automatically boots the new unikernel as soon as it is pulled from the git repo. Using Jitsu, our deployment machine would pull the unikernel but leave it in the repo — it would only be activated when someone requests access to it. Most of the time, it may receive no traffic and therefore would remain 'turned off' (let's ignore webcrawlers for now). When someone requests to see a slide deck, the unikernel would be booted and respond to the request. In time it can be turned off again, thus freeing resources. So far, so good.
Now let's say that a certain slide deck becomes really popular (e.g. posted to HackerNews or Reddit). Suddenly, there are many incoming requests and we want to be able to serve them all. We can use the one unikernel, on one machine, until it is unable to handle the load efficiently. At this point, the system can create new copies of that unikernel and automatically balance across them. These unikernels don't need to be on the same host and we should be able to spin them up on different machines.
To stretch this further, we can imagine coordinating the creation of those new unikernels nearer the source of that demand, for example starting off on a European cloud, then spinning up on the East coast US and finally over to the West coast of the US. All this could happen seamlessly and the process can continue until the demand passes or we reach a predefined limit — after all, given that we pay for the machines, we don't really want to turn a Denial of Service into a Denial of Credit.
After the peak, the system can automatically scale back down to being largely dormant — ready to react when the next wave of interest occurs.
If you think this is somewhat fanciful, that's perfectly understandable — as I mentioned previously, this post is very much about extrapolating from where the tools are right now. However, unikernels actually make it very easy to run quick experiments which indicate that we could iterate towards what I've described.
A recent and somewhat extreme experiment ran a unikernel VM for each URL. Every URL on a small static site was served from its own, self-contained unikernel, complete with it's own web server (even the 'rss.png' icon was served separately). You can read the post to see how this was done and it also led to an interesting discussion on the mailing list (e.g. if you're only serving a single item, why use a web server at all?). Of course, this was just an experiment but it demonstrates what is possible now and how we can iterate, uncover new problems, and move forward. One such question is how to automatically handle networking during a scale-out, and this is an area were tools like Signpost can be of use.
Overall, the model I've described is quite different to the way we currently use the cloud, where the overhead of a classic OS is constantly consuming resources. Although it's tempting to stick with the same frame of reference we have today we should recognise that the current model is inextricably intertwined with the traditional software stacks themselves. Unikernels allow completely new ways of creating, distributing and managing software and it takes some thought in order to fully exploit their benefits.
For example, having a demand-driven system means we can deliver more services from just the one set of physical hardware — because not all those services would be consuming resources at the same time. There would also be a dramatic impact on the economics, as billing cycles are currently measured in hours, whereas unikernels may only be active for seconds at a time. In addition to these benefits, there are interesting possibilities in how such scale-outs can be coordinated across different devices.
As we move to a world with more connected devices, the software and services we create will have to operate across both the cloud and embedded systems. There have been many names for this kind of distributed system, ranging from ubiquitous computing to dust clouds and the 'Internet of Things' but they all share the same idea of running software at the edges of the network (rather than just cloud deployments).
When we consider the toolchain we already have, it's not much of a stretch to imagine that we could also build and store a unikernel for ARM-based deployments. Those unikernels can be deployed onto embedded devices and currently we target the Cubieboard2.
We could make such a system smarter. Instead of having the edge devices constantly polling for updates, our deployment process could directly push the new unikernels out to them. Since these devices are likely to be behind NATs and firewalls, tools like Signpost could deal with the issue of secure connectivity. In this way, the centralized deployment process remains as a coordination point, whereas most of the workload is dealt with by the devices the unikernels are running on. If a central machine happens to be unavailable for any reason, the edge-devices would continue to function as normal. This kind of arrangement would be ideal for Internet-of-Things style deployments, where it could reduce the burden on centralised infrastructure while still enabling continuous deployment.
In this scenario, we could serve the traffic for 'mirage-decks' from a unikernel on a Cubieboard2, which could further minimise the cost of running such infrastructure. It could be configured such that if demand begins to peak, then an automated scale-out can occur from the Cubieboard2 directly out onto the public cloud and/or other Cubieboards. Thus, we can still make use of third-party resources but only when needed and of the kind we desire. Of course, running a highly distributed system leads to other needs.
When running services at scale it becomes important to track the activity and understand what is taking place in the system. In practice, this means logging the activity of the unikernels, such as when and where they were created and how they perform. This becomes even more complex for a distributed system.
If we also consider the logging needs of a highly-elastic system, then another problem emerges. Although scaling up a system is straightforward to conceptualise, scaling it back down again presents new challenges. Consider all the additional logs and data that have been created during a scale-out — all of that history needs to be merged back together as the system contracts. To do that properly, we need tools designed to manage distributed data structures, with a consistent notion of merges.
Irmin addresses these kinds of needs and it enables a style of programming very similar to the Git workflow, where distributed nodes fork, fetch, merge and push data between each other. Building an end-to-end logging system with Irmin would enable data to be managed and merged across different nodes and keep track of activity, especially in the case of a scale down. The ability to capture such information also means the opportunity to provide analytics to the creators of those unikernels around performance and usage characteristics.
The use of Irmin wouldn't be limited to logging as the unikernels themselves could use it for managing data in lieu of other file systems. I'll refrain from extrapolating too far about this particular tool as it's still under rapid development and we'll write more as it matures.
You may have noticed that one of the benefits of the unikernel approach arises because the artefacts themselves are not altered once they're created. This is in line with the recent resurgence of ideas around 'immutable infrastructure'. Although there isn't a precise definition of this, the approach is that machines are treated as replaceable and can be regularly re provisioned with a known state. Various tools help the existing systems to achieve this but in the case of unikernels, everything is already under version control, which makes managing a deployment much easier.
As our approach is already compatible with such ideas, we can take it a step further. Immutable infrastructure essentially means the artefact produced doesn't matter. It's disposable because we have the means to easily recreate it. In our current example, we still ship the unikernel around. In order to make this 'fully immutable', we'd have to know the state of all the packages and code used when building the unikernel. That would give us a complete manifest of which package versions were pulled in and from which sources. Complete information like this would allow us to recreate any given unikernel in a highly systematic way. If we can achieve this, then it's the manifest which generates everything else that follows.
In this world-view, the unikernel itself becomes something akin to caching. You use it because you don't want to rebuild it from source — even though unikernels are quicker to build than a whole OS/App stack. For more security critical applications, you may want to be assured of the code that is pulled in, so you examine the manifest file before rebuilding for yourself. This also allows you to pin to specific versions of libraries so that you can explicitly adjust the dependencies as you wish. So how do we encode the manifest? This is another area where Irmin can help as it can keep track of the state of package history and can recreate the environment that existed for any given build run. That build run can then be recreated elsewhere without having to manually specify package versions.
There's a lot more to consider here as this kind of approach opens up new avenues to explore. For the time being, we can recognise that the unikernel approach lends itself to the achieving immutable infrastructure.
As I mentioned at the beginning of this post, most of what I've described is speculative. I've deliberately extrapolated from where the tools are now so as to provoke more thoughts and discussion about how this new model can be used in the wild. Some of the things we're already working towards but there are many other uses that may surprise us — we won't know until we get there and experimenting is half the fun.
We'll keep marching on with more libraries, better tooling and improving quality. What happens with unikernels in the rest of 2015 is largely up to the wider ecosystem.
That means you.
Thanks to Thomas Gazagnaire and Richard Mortier for comments on an earlier draft.Share / Comment
In my Jekyll to Unikernel post, I described an automated workflow that would take your static website, turn it into a MirageOS unikernel, and then store that unikernel in a git repo for later deployment. Although it was written from the perspective of a static website, the process was applicable to any MirageOS project. This post covers how things have progressed since then and the kind of automated, end-to-end deployments that we can achieve with unikernels.
If you're already familiar with the above-linked post then it should be clear that this will involve writing a few more scripts and ensuring they're in the right place. The rest of this post will go through a real world example of such an automated system, which we've set up for building and deploying the unikernel that serves our slide decks — mirage-decks. Once you've gone though this post, you should be able to recreate such a workflow for your own needs. In Part 2 of this series I'll build on this post and consider what the possibilities could be if we extended the system using some of our other tools — thus arriving at something very much like our own Heroku for Unikernels.
Almost all of our OCaml projects now use Travis CI for build and testing (and deployment). In fact, there are so many libraries now that we recently put together an OCaml Travis Skeleton, which means we don't have to manually keep the scripts in sync across all our repos — and fewer copy/paste/edits means fewer mistakes.
If you're familiar with the build scripts from last time, then
you can browse the new scripts and you'll see that they're broadly similar.
In many cases you may well be able to depend on one or other of the scripts
directly and for a handful of scenarios, you can fork and patch them to
suit you (i.e. for MirageOS unikernels). We can do this because we've made it
quick to set up an OCaml environment using an Ubuntu PPA. The rest
of the work is done by the
mirage tool itself so once that's installed, the
build process becomes fairly straightforward. The complexity around secure
keys was also covered last time, which allowed us to commit the
final unikernel to a deployment repo. That means the remaining step is
to automate the deployment itself.
Committing the unikernel to a deployment repo is where the previous post ended
and a number of people forged ahead and wrote about their
experiences deploying onto AWS and Linode. Many of these deployments
(understandably) involve a number of quite manual steps. It would be
particularly useful to construct a set of scripts that can be fully automated,
such that a
git push to a repo will automatically run through the cycle of
building, testing, storing and activating a new unikernel. We've done
exactly this with some of our repos and this post will talk through those
MirageOS unikernels can currently be built for Xen and Unix backends. This is a straightforward step and typically the build matrix is already set up to test that both of them build as expected. For this post, I've only considered the Xen backend as that's our chosen deployment method but it would be equally feasible to deploy the unix-based unikernels onto a *nix machine in much the same way. In this sense, you get to choose whether you want to deploy the unikernels onto a Hypervisor (for isolation and security) or whether running them as unix-processes better suits your needs. The unikernel approach means that both options are open to you, with little more than a command-line flag between them.
In terms of the deployment machines there are several options to consider. The most obvious is to set up a dedicated host, where you have full access to the machine and can install Xen. Another is to have a machine running on EC2 and create scripts to deal with unikernels. You could also build and deploy onto Xen on the Cubieboard2. If you'd rather test out the complete system first, you could set up an appropriate machine in Virtualbox to work with.
For our workflow, we use Xen unikernels which we deploy to a dedicated host. For the sake of brevity, I won't go into the details of how to set up the machine but you can follow the instructions linked above.
Decks is the source repo that holds many of our slides, which we've presented at conferences and events over the years (I admit that I have yet to add mine). The repo compiles to a unikernel that can then serve those slides, as you see at decks.openmirage.org. For maximum fun-factor, we usually run that unikernel from a Cubieboard2 when giving talks.
The toolchain for this unikernel includes build, store and deploy. We'll recap the first two steps before going through the final one.
Build — In the root of the decks source repo, you'll notice the
.travis.yml file, which fetches the standard build script mentioned earlier.
Building the unikernel proceeds according to the options in the build matrix.
language: c
install: wget https://raw.githubusercontent.com/ocaml/ocaml-travisci-skeleton/master/.travis-mirage.sh
script: bash -ex .travis-mirage.sh
- OCAML_VERSION=4.02 MIRAGE_BACKEND=unix MIRAGE_NET=socket
- OCAML_VERSION=4.02 MIRAGE_BACKEND=unix MIRAGE_NET=direct
- OCAML_VERSION=4.02 MIRAGE_BACKEND=xen
- secure: ".... encrypted data ...."
- secure: ".... encrypted data ...."
- secure: ".... encrypted data ...."
In this case, two builds occur for Unix and one for Xen with different parameters being used for each. If you look at the actual travis file, you'll notice there are 26 lines of encrypted data. This is how we pass the deployment key to Travis CI, so that it has push access to the separate mirage-decks-deployment repo. You can read the section in the previous post to see how we send Travis a private key.
Store — One of the combinations in the build matrix (configured for Xen), is intended for deployment. When that unikernel is completed, an additional part of the script is triggered that pushes it into the deployment repo.
After the 'build' and 'store' steps above, we have a
deployment repository with a collection of Xen unikernels. For
this stage, we have a new set of scripts that live in this repo alongside those
unikernels. Specifically, you'll notice a folder called
scripts that
contains four files.
├── Makefile
├── README.md
├── scripts
│ ├── crontab
│ ├── deploy.sh
│ ├── install-hooks.sh
│ └── post-merge.hook
A quick summary of the setup is that we clone the repo onto our deployment
machine and install some hooks there. Then a simple cronjob will perform
git pull at regular intervals. If a merge event occurs, then it means the
repo has been updated and another script is triggered. That script removes the
currently running unikernel and boots the latest version from the repo. It's
fairly straightforward and I'll explain what each of the files does below.
Makefile - After cloning the repo, run
make install. This will trigger
install-hooks.sh to set things up appropriately. It's worth remembering that
from this point on, the git repo on the deployment machine will not be
identical to the deployment repo on GitHub.
install-hooks.sh — The first two lines ensure that the commands
will be run from the root of the git repo. The third line symlinks the
post-merge.hook file into the appropriate place within the
.git directory.
This is the folder where customized git hooks need to be placed in
order to work. The final line adds the file
scripts/crontab to the
deployment machine's list of cron jobs.
ROOT=$(git rev-parse --show-toplevel) # obtain path to root of repo
cd $ROOT
# symlink the post-merge.sh file into the .git/hooks folder
ln -sf $ROOT/scripts/post-merge.hook $ROOT/.git/hooks/post-merge
crontab scripts/crontab # add to list of cron jobs
crontab — This file is a cronjob that sets up the deployment machine to
perform a
git pull on the deployment repo at regular intervals. Changing the
file in the repo will ultimately cause it to be updated on the deployment
machine (cf.
deploy.sh). At the moment, it's set to run every 11 minutes.
*/11 * * * * cd $HOME/mirage-decks-deployment && git pull
post-merge.hook — Since we've already run the Makefile, this file is
symlinked from the appropriate place on the deployment machine's copy of the
repo. When a
git pull results in new commits being downloaded and merged,
then this script is triggered immediately afterwards. In this case, it just
executes the
deploy.sh script.
ROOT=$(git rev-parse --show-toplevel) # obtain path to root of repo
exec $ROOT/scripts/deploy.sh # execute the deploy script
deploy.sh — This is where the work actually happens and you'll notice that there really isn't much to do! I've commented in the code below to explain what's going on.
ROOT=$(git rev-parse --show-toplevel)
cd $ROOT
crontab scripts/crontab # Update cron scripts
# Identify the latest build in the repo and then use
# the generic Xen config script to construct a
# specific file for this unikernel. Essentially,
# 'sed' just does a find/replace on two elements and
# the result is written to a new file.
KERNEL=$ROOT/xen/`cat xen/latest`
sed -e "s,@VM@,$VM,g; s,@KERNEL@,$KERNEL/$VM.xen,g" \
< $XM.conf.in \
>| $KERNEL/$XM.conf
# Move into the folder with the latest unikernel.
# Remove any uncompressed Xen images found there
# (since we may be starting a rebuilt unikernel).
# Unzip the compressed unikernel.
cd $KERNEL
rm -f $VM.xen
bunzip2 -k $VM.xen.bz2
# Instruct Xen to remove the currently running
# unikernel and then start up the new one we
# just unzipped.
sudo $XM destroy $VM || true
sudo $XM create $XM.conf
At this point, we now have a complete system! Of course, this arrangement isn't perfect and there are number of things we could improve. For example, it depends on a cron job, which means it may take a while before a new unikernel is live. Replacing this with something triggered on a webhook could be an improvement, but it does mean exposing an end-point to the internet. The scripts will also redeploy the current unikernel, even if the only change is to the crontab schedule. Some extra work in the deploy script, using some git tools, might work around this.
Despite these minor issues, we do have a completely end-to-end workflow that takes us all the way from pushing some new changes to deploying a new unikernel! An additional feature is that everything is checked into version control. Right from the scripts to completed artefacts (including a method of transmitting secure keys/data, over public systems).
There is minimal work done outside the code you've already seen, though there is obviously some effort involved in setting up the deployment machine. However, as mentioned earlier, you could either use the unix-based unikernels or experiment with Virtualbox VM with Xen just to test out this entire toolchain.
Overall, we've only added around 20 lines of code to the initial 50 or so that
we use for the Travis CI build. So for less than 100 lines of code, we have
a complete end-to-end system that can take a MirageOS project from a
git push, all the way through to a live deployment.
In our current system, if the unikernel builds appropriately then we just assume it's ok to deploy to production. Fire and forget! What could possibly go wrong! Of course, this is a somewhat naive approach and for any critical system it would be better to hook in some additional things.
One obvious improvement would be to introduce a more thorough testing regimen, which would include running unit tests as part of the build. Indeed, various libraries in the MirageOS project are already moving towards this model (e.g see the notes for links).
It's even possible to go beyond unit tests and introduce more functional/systems/stress testing on the complete unikernel before permitting deployment. This would help to surface any wider issues as services interact and we could even simulate network conditions — achieving something like 'staging on steroids'.
The scenario we have above also assumes that things work smoothly and nobody needs to know anything. It would be useful to hook in some form of logging and reporting, such that when a new unikernel is deployed a notification can be sent/stored somewhere. In the short term, there are likely existing tools and ways of doing this so it would be a matter of putting them together.
Overall, with the above model, we can easily set up a system where we go from writing code, to testing it via CI, to deploying it to a staging server for functional tests, and finally pushing it out into live deployment. All of this can be done with a few additional scripts and minimal interaction from the developer. We can achieve this because we don't have to concern ourselves with large blobs of code, multiple different systems and keeping environments in sync. Once we've built the unikernel, the rest almost becomes trivial.
This is close enough for me to declare it as a 'Heroku for unikernels' but obviously, there's much more we can (and should) do with such a system. If we extrapolate just a little from where we are now, there are a range of exciting possibilities to consider in terms of automation, scalability and distributed systems. Especially if we incorporate other aspects of the toolstack we're working towards.
Part 2 of this series is where I'll consider these possibilities, which will be more speculative and less constrained. It will cover the kinds of systems we can create once the tools are more mature and will touch on ideas around hyper-elastic clouds, embedded systems and what this means for the concept of immutable infrastructure.
Since we already have the 'backbone' of the toolchain in place, it's easier to see where it can be extended and how.
Edit: The second part of this series is now up - "Self Scaling Systems"
Thanks to Anil Madhavapeddy and Thomas Leonard for comments on an earlier draft and Richard Mortier for his work on the deployment toolchain.Share / Comment
Last summer we announced the beta release of a clean-slate implementation of TLS in pure OCaml, alongside a series of blog posts that described the libraries and the thinking behind them. It took two hackers six months — starting on the beach — to get the stack to that point and their demo server is still going strong. Since then, the team has continued working and recently presented at the 31st Chaos Communication Congress.
The latest example goes quite a bit further than a server that just displays the handshake. This time, the team have constructed a Xen unikernel that's holding a private key to a bitcoin address and are asking people to try and break in. Hence, they've called it the Bitcoin Piñata!*
The Piñata unikernel will transmit its private bitcoin key if you can successfully set up a TLS connection but it's rigged so that it will only create that connection if you can present the certificate it's expecting to see — which has been signed appropriately. Of course, you're not being given the secret key with which to do that signing and that means there should be no way for anyone to form a TLS connection with the Piñata. In order to get the private key to the bitcoin address, you'll have to smash your way in.
Helpfully (perhaps), things are set up so that you can make the Piñata talk to itself, allowing you to eavesdrop on a successful connection and see the encrypted traffic. In addition, all the code and libraries are open-source so you can look through any of the codebase. There isn't anything that anyone will have to reverse engineer, which should make this a little more enjoyable.
This contest is set to run until mid-March or whenever the coins are taken. If someone does manage to get in, please do let us know how!
Of course there are many other ways to get at the private key and as many people like to comment, the human element is sometimes the weakest link — after all, a safe is only as secure as the person with the combination.
In this case, there is obviously a secret key or certificate somewhere that could be presented so it may be tempting to go hunting for that. Perhaps phishing attempts on the authors may yield a way forward, or maybe just straight-forward Rubber-hose cryptanalysis! Sure, these options might provide a result† but this is meant to be fun. The authors haven't specified any rules but please be nice and focus on the technical things around the Piñata‡. Don't be this guy.
Even though the Bitcoin Piñata is clearly a contest, nobody is deluding themselves into thinking that if the coins are still there in March, that somehow the stack can be declared 'undefeated' — while pleasing, that result wouldn't necessarily prove anything. Contests have their place but as Bruce Schneier already pointed out, they are not useful mechanisms to judge security.
However, it does give us the chance to engage in some shameless self-promotion and try to draw vast amounts of attention to the work. That, and the chance to stress-test the stack in the wild. Ultimately, we want to use this code in production but must take a lot of care to get there and want to be sure that it can bear up. This is just one more way of learning what happens when putting something 'real' out there.
If the Bitcoins do end up being taken, then there's definitely something valuable that the team can learn from that. Regardless of the Piñata, if we have more people exploring the TLS codebase or trying it out for themselves, it will undoubtedly be A Good Thing.
For clarity and to avoid any doubt, please be aware that the TLS codebase is missing external code audits and is not yet intended for use in any security critical applications. All development is done in the open, including the tracking of security-related issues, so please do consider auditing the code, testing it in your services and reporting issues.
* If you've never come across a piñata before, hopefully the gif in the post gives you an idea. If not, the wiki page will surely help, where I learned that the origin may be Chinese rather than Spanish!
† Of course, I'm not suggesting that anyone would actually go this far. I'm simply acknowledging that there is a human factor and asking that we put it aside.
‡ Edit to add: After seeing Andrea's tweet I should point out that any part of MirageOS, including the networking stack, OCaml runtime etc is a legitimate vector. It's why there's a manifest of the libraries that have been used to build the Piñata!Share / Comment
Last weekend was spent at one of the world's biggest open source conferences, FOSDEM. You can check out last year's review to get an idea of the scale of the event. Since there's no registration process, it's difficult to estimate how many people attend but given how many rooms there are, and how full they are, it's easily several thousand. I was impressed last year at how smoothly things went and the same was true this year.
The main reason to attend this time was to run a demo of MirageOS from an ARM board — one of the main advances since the previous conference. I looked over all the things we'd achieved since last year and put together a demo that showcases some of the capabilities as well as being fun.
The demo was to serve the 2048 game from a Unikernel running on a Cubieboard2 with its own access point. When people join the wifi network, they get served a static page and can begin playing the game immediately.
The components I needed for the demo were:
Code for making a static website — Since the game is completely self-contained (one html file and one js file). I only need to convert a static website into a unikernel. That's trivial and many people have done it before.
A Cubieboard with a wifi access point — There are pre-built images on the MirageOS website, which make part of this easy. However, getting the wifi access point up involves a few more steps.
The first two pieces should be straightforward and indeed, I had a working unikernel serving the 2048 game within minutes (unix version on my laptop). The additional factors around the ARM deployment is where things were a little more involved. Although this was technically straightforward to set up, it still took a while to get all the pieces together. A more detailed description of the steps is in my fosdemo repository and in essence, it revolves around configuring the wifi access point and setting up a bridge (thanks to Mindy, Magnus and David for getting this working).
Once this was all up and running, it was a simple matter to configure the board to boot the unikernel on startup, so that no manual intervention would be required to set things up at the booth.
I gave the demo at the Xen booth and it went very well. There was a small crowd throughout my time at the booth I'm convinced that the draw of a board with glowing LEDs should not be underestimated. Many people we're happy to connect to the access point and download the game to their browser but there were two main things I learnt.
Firstly, demos involving games will work if people actually know the game. This is obvious, but I'd assumed that most people had already played 2048 — especially the crowd I'd expect to meet at FOSDEM. It turned out that around a third of people had no idea what to do when the game loaded onto their browser. They stared blankly at it and then blankly at me. Of course, it was trivial to get them started and they were soon absorbed by it — but it still felt like some of the 'cool-factor' had been lost.
The second thing was that I tried to explain too much to people in much too short a time. This particular demo involved Xen unikernels, js_of_ocaml and a Cubieboard2 with a wifi access point. There's a surprisingly large amount of technology there, which is difficult explain to a complete newcomer within one or two minutes. When it was obvious someone hadn't heard of unikernels, I focused on the approach of library operating systems and the benefits that Mirage brings. If a visitor was already familiar with the concept of unikernels, I could describe the rest of the demo in more detail.
Everything else did go well and next time I'd like to have a demo like this running with Jitsu. That way, I could configure it so that a unikernel would spin up, serve the static page and then spin down again. If we can figure out the timing, then providing stats in the page about the lifetime of that unikernel would also be great, but that's for another time.
One of the things we're keen to work towards is the idea of personal clouds. It's not a stretch to imagine that a Cubieboard2, running the appropriate software, could act as one particular node in a network of your own devices. In this instance it's just hosting a fun and simple game but more complex applications are also possible.
Of course, there was lots more going on than just my demo and I had a great time attending the talks. Some in particular that stood out to me were those in the open source design room, which was a new addition this year. It was great to learn that there are design people out there who would like to contribute to open source (get in touch, if that's you!). I also had a chance to meet (and thank!) Mike McQuaid in his Homebrew talk. FOSDEM is one of those great events where you can meet in person all those folks you've only interacted with online.
Overall, it was a great trip and I thoroughly recommend it if you've never been before!Share / Comment
The mission of Nymote is to enable the creation of resilient decentralised systems that incorporate privacy from the ground up, so that users retain control of their networks and data. To achieve this, we reconsider all the old assumptions about how software is created in light of the problems of the modern, networked environment. Problems that will become even more pronounced as more devices and sensors find their way into our lives.
We want to make it simple for anyone to be able to run a piece of the cloud for their own purposes and the first three applications Nymote targets are Mail, Contacts and Calendars, but to get there, we first have to create solid foundations.
In order to create applications that work for the user, we first have to create a robust and reliable software stack that takes care of fundamental problems for us. In other words, to be able to assemble the applications we desire, we must first construct the correct building blocks.
We've taken a clean-slate approach so that we can build long-lasting solutions with all the benefits of hindsight but none of the baggage. As mentioned in earlier posts, there are three main components of the stack, which are: Mirage (OS for the Cloud/IoT), Irmin (distributed datastore) and Signpost (identity and connectivity) - all built using the OCaml programming language.
As you've already noticed, there's a useful acronym for the above tools — MISO. Each of the projects mentioned is a serious undertaking in its own right and each is likely to be impactful as a stand-alone concept. However, when used together we have the opportunity to create applications and services with high levels of security, scalability and stability, which are not easy to achieve using other means.
In other words, MISO is the toolstack that we're using to build Nymote — Nymote is the decentralised system that works for its users.
Each of the projects is at a different phase but they have all have made great strides over the last year.
Mirage — a library operating system that constructs unikernels — is the most mature part of the stack. I previously wrote about the Mirage 1.0 release and only six months later we had an impressive 2.0 release, with continuing advances throughout the year. We achieved major milestones such as the ability to deploy unikernels to ARM-based devices, as well as a clean-slate implementation of the transport layer security (TLS) protocol.
In addition to the development efforts, there have also been many presentations to audiences, ranging from small groups of startups all the way to prestigious keynotes with 1000+ attendees. Ever since we've had ARM support, the talks themselves have been delivered from unikernels running on Cubieboards and you can see the growing collection of slides at decks.openmirage.org.
All of these activities have led to a tremendous increase in public awareness of unikernels and the value they can bring to developing robust, modern software as well as the promise of immutable infrastructure. As more people look to get involved and contribute to the codebase, we've also begun curating a set of Pioneer Projects, which are suitable for a range of skill-levels.
You can find much more information on all the activities of 2014 in the comprehensive Mirage review post. As it's the most mature component of the MISO stack, anyone interested in the development of code towards Nymote should join the Mirage mailing list.
Irmin — a library to persist and synchronize distributed data structures — made significant progress last year. It's based on the principles of Git, the distributed version control system, and allows developers to choose the appropriate combination of consistency, availability and partition tolerance for their needs.
Early last year Irmin was released as an alpha with the ability to speak 'fluent Git' and by the summer, it was supporting user-defined merge operations and fast in-memory views. A couple of summer projects improved the merge strategies and synchronisation strategies, while an external project — Xenstore — used Irmin to add fault-tolerance.
More recent work has involved a big clean-up in the user-facing API (with nice developer documentation) and a cleaner high-level REST API. Upcoming work includes proper documentation of the REST API, which means Irmin can more easily be used in non-OCaml projects, and full integration with Mirage projects.
Irmin is already being used to create a version controlled IMAP server and a version controlled distributed log system. It's no surprise that the first major release is coming very soon!
Signpost will be a collection of libraries that aims to provide identity and connectivity between devices. Forming efficient connections between end-points is becoming ever more important as the number of devices we own increases. These devices need to be able to recognise and reach each-other, regardless of their location on the network or the obstacles in between.
This is very much a nascent project and it involves a lot of work on underlying libraries to ensure that security aspects are properly considered. As such, we must take great care in how we implement things and be clear about any trade-offs we make. Our thoughts are beginning to converge on a design we think will work and that we would entrust with our own data, but we're treating this as a case of 'Here Be Dragons'. This is a critical piece of the stack and we'll share what we learn as we chart our way towards it.
Even though we're at the design stage of Signpost, we did substantial work last year to create the libraries we might use for implementation. A particularly exciting one is Jitsu — which stands for Just In Time Summoning of Unikernels. This is a DNS server that spawns unikernels in response to DNS requests and boots them in real-time with no perceptible lag to the end user. In other words, it makes much more efficient use of resources and significantly reduces latency of services for end-users — services are only run when they need to be, in the places they need to be.
There's also been lots of efforts on other libraries that will help us iterate towards a complete solution. Initially, we will use pre-existing implementations but in time we can take what we've learned and create more robust alternatives. Some of the libraries are listed below (but note the friendly disclaimers!).
OCaml is a mature, powerful and highly pragmatic language. It's proven ideal for creating robust systems applications and many others also recognise this. We're using it to create all the tools you've read about so far and we're also helping to improve the ecosystem around it.
One of the major things we've been involved with is the coordination of the OCaml Platform, which combines the OCaml compiler with a coherent set of tools and workflows to be more productive in the language and speed up development time. We presented the first major release of these efforts at OCaml 2014 and you can read the abstract or watch the video.
There's more to come, as we continue to improve the tooling and also support the community in other ways.
Building blocks are important but we also need to push towards working applications. There are different approaches we've taken to this, which include building prototypes, wireframing use-cases and implementing features with other toolstacks. Some of this work is also part of a larger EU funded project* and below are brief summaries of the things we've done so far. We'll expand on them as we do more over time.
Mail - As mentioned above, a prototype IMAP server exists (IMAPlet) which uses Irmin to store data. This is already able to connect to a client to serve mail. The important feature is that it's an IMAP server which is version controlled in the backend and can expose a REST API from the mailstore quite easily.
Contacts - We first made wireframe mockups of the features we might like in a contacts app (to follow in later post) and then built a draft implementation. To get here, code was first written in OCaml and then put through the js_of_ocaml compiler. This is valuable as it takes us closer to a point where we can build networks using our address books and have the system take care of sharing details in a privacy-conscious manner and with minimal maintenance. The summary post has more detail.
Calendar - This use-case was approached in a completely different way as part of a hackathon last year. A rough but functional prototype was built over one weekend, with a team formed at the event. It was centralised but it tested the idea that a service which integrates intimately with your life (to the point of being very invasive) can provide disproportionate benefits. The experience report describes the weekend and our app — Clarity — won first place. This was great validation that the features are desirable so we need to work towards a decentralised, privacy-conscious version.
The coming year represents the best time to be working on the MISO stack and using it to make Nymote a reality. All source code is publicly available and the projects are varied enough that there is something for everyone. Browse through issues, consider the projects or simply write online and share with us the things you'd like to see. This promises to be an exciting year!
Sign up to the Nymote mailing list to keep up to date!
* The research leading to these results has received funding from the European Union's Seventh Framework Programme FP7/2007-2013 under the UCN project, grant agreement no 611001.Share / Comment


text:
I have to go
Views: 23
Tags: agnostic, aleppo, appointed, art, atheist, More…autumn, babies, beauty, bloom, bouquet, boys, cloud, computer, damascus, day, earth, effects, explore, family, flower, free, fun, garden, girls, grass, green, hamid, hdr, imaging, long, lz10, moon, nature, night, photos, photoshop, sky, sleeping, spring, stars, summer, sun, sunset, syria, treatment, trees, wallpeper, wellies, winter
Albums: my flickr
Location: (Show Map)
Join Think Atheist
Welcome toThink Atheist
Get Started Nowor Sign In
Or sign in with:
Started by umar in Announcements. Last reply by jeffrey j hogue 7 minutes ago.
39 Replies
Started by Ed in Small Talk. Last reply by SteveInCO 58 minutes ago.
9 Replies
Started by Dale Headley in Small Talk. Last reply by Beth yesterday.
5 Replies
1 Like
Started by ỮŊĐÜムņĮØńệ尺 in Physics, Astronomy, Cosmology. Last reply by Pope Beanie 16 hours ago.
5 Replies
Started by ỮŊĐÜムņĮØńệ尺 in Physics, Astronomy, Cosmology. Last reply by Pope Beanie 12 hours ago.
11 Replies
1 Like
Sunday School July 5th 2015
Sunday School June 28th 2015
Sunday School June 21th 2015
Posted by Michelle Varni on July 5, 2015 at 7:18pm
2 Comments
1 Like
Posted by innerspaceboy on July 2, 2015 at 6:30pm
4 Comments
1 Like
Advertise with ThinkAtheist.com
© 2015 Created by umar.
Badges |
Report an Issue |
Terms of Service
Please check your browser settings or contact your system administrator.


text:
- Food
- Family
- Style
- Series and Features
- Love & Sex
- Work/Life
- Health
- Entertainment
- News
- Blogging
Mushroom Risotto Cakes for Day of the Mushroom
By The $120 Food Challenge on April 16, 2011
BlogHer Spotlight
On her blog, The $120 Food Challenge, Sandra Reynolds develops recipes that fit a tight food budget. Reynolds, who hails from Australia, feeds a family of four for under AUS$10 (approximately US$10.60 based on recent exchange rates) a day in high style with her mushroom risotto cakes. Her vegetarian recipe sounds satisfying and decadent, while remaining affordable and accessible. It's the perfect way to celebrate The Day of the Mushroom, which is celebrated on April 16 every year!
Image courtesy Sandra Reynolds
Read more from Mushroom Risotto Cakes for Day of the Mushroom at The $120 Food Challenge
Trending Now
More Like This
Most Popular on BlogHer
By Lori Luna
Follow BlogHer
Love Your Summer with Sparkling ICE
Sparkling ICE is a bold flavored sparkling water that truly delivers on taste and contains just the right amount of fizz. Read our bloggers' posts and get more details on how you can enter the Flavor Face Off plus find out more about the delicious flavors that Sparkling ICE has to offer. Read more


text:
Please login to add/view friends online.
Male, Female, 8 weeks old and up. Starting at $500. They have shots, papers and a free health plan. Please call or email. Shipping is not available.
Location:Sunnyside, NY
Breed:Shih Tzu
WEST HIGHLAND WHITE TERRIER PUPPIES FOR SALE IN CALIFORNIABoston Terrier Stud ServiceAvailable fullbreed english bulldog pups
TerrificPets.com helps you find puppies for sale from great dog breeders! Please support our breeders when looking for puppies for sale.


text:
From Meta, a Wikimedia project coordination wiki
|User language
|Users by language
Welcome!! Today, Tuesday 7 July 2015, Meta has 48,815 articles.
I am...
Young biotechnology student, 26 years old, from Italia, near Monza.
First contribution to Meta: 23th July 2006.
firstname.lastname@example.com - email@example.com - me@commons - Contribution Stats...
"A strong spirit and a tender heart" (Sophie Scholl)


text:
Blueberry Lemon Swirl
|Unflavored gelatin
|3 Ounce (1 package)
|Cold water
|1⁄4 Cup (4 tbs)
|Frozen unsweetened blueberries
|1 Pound (1 bag)
|1 1⁄4 Cup (20 tbs)
|Cinnamon stick
|1⁄2 Teaspoon
|Egg yolks
|Lemon juice
|1⁄4 Cup (4 tbs)
|1⁄4 Cup (4 tbs)
|Grated lemon rind
|2 Teaspoon
|Egg whites
1) Take the cold water in a cup and sprinkle gelatin into it. Allow it to stand for 2 minutes to make the gelatin soft.
2) Take a saucepan and mix the blueberries, 1/4 cup sugar and cinnamon stick into it. Boil the mixture over medium heat.
6) Strain the blueberries mixture and drain the liquid completely from the blueberries.
7) Pour the blueberries juice into the saucepan and add half of the softened gelatin. Heat the mixture over low heat for few minutes.
8) Add the vanilla and keep the mixture aside.
9) Take a saucepan and mix the egg yolks, 1/2 cup sugar, lemon juice, lemon rind and sugar.
10) Cook them on medium heat.
11) Remove from the heat when the mixture starts boiling.
12) Pour the remaining gelatin.
13) Pour the lemon mixture into another bowl.
14) Keep both the bowl into the refrigerator for 45 minutes.
15) Take a bowl and beat the egg whites. Add the 1/2 cup of sugar and continue beating the mixture.
16) Divide the beaten egg whites into half.
17) Mix 1/2 cup of beaten whites and one half of the blueberry mixture.
18) Fold in the remaining part of the half.
19) Mix 1/2 cup of beaten whites from the second half into the lemon mixture. Gradually add the remaining egg whites.
20) Put the blueberry mixture into a bowl and pour the lemon mixture on top of the blueberry mixture.
21) To make the swirls, you can either fold or stir with a rubber spatula. Make sure to do this only 2 times.
22) Pour the mixture into soufflé dish or bowl and keep in the refrigerator for at least 8 hours.
23) Garnish the dish with blueberries or lemon wedges and serve it.


text:
Vincent Genovesi, S.J.
Richard J. George, Ph.D.
Professor Emeritus
Waqar Ghani, Ph.D
Associate Professor
Owen W. Gilman, Jr., Ph.D.
Richard N. Gioioso, Ph.D.
Assistant Professor
Paola Giuli, Ph.D.
Associate Professor
Joseph J. Godfrey, S.J., Ph.D.
Professor; Hogan Chair in Philosophy
Melissa A. Goldthwaite, Ph.D.
Virginia Goulding Johnson, Ph.D.
Assistant Professor, Director of The Faith-Justice Institute
Peter M. Graham, Ph.D.
Daniel Green
Jazz Band Director
Ann E. Green, Ph.D.
Earl Greenia, Ph.D.
Adjunct Professor
Adam Gregerman, Ph.D.
Assistant Professor and Assistant Director of Institute for Jewish-Catholic Relations
George J. Grevera, Ph.D.
Associate Professor (Sabbatical, Spring 2015)
Patricia Griffin, M.A.
Kristen Grimes, Ph.D.
Christopher E. Grodecki, S.J.
Visiting Assistant Professor
Jeanne Brady, Ph.D.
Pope Francis and Catholic Philadelphia
06/01/2015 Video
Saint Joseph's University Elects Mark C. Reed as First Lay President
Philadelphia Jews and Catholics to Celebrate 50th Anniversary of Nostra Aetate at SJU


text:
- //Home
- //Music
- //Ready Fire Aim
This one is a grower. I didn't care a great deal for the debut collaboration between poet and political activist Sage Rider and established producer Shaun "Stakka" Morrison the first time I heard it, but each listen reveals something a little deeper to hold on to. The instrumentals hit a similar electro-pop vein as Depeche Mode and Human League, only with a little more casual grit so as to grip your mind but still make you dance. "Wannabe Your" is one of the more straight-ahead numbers, with glitchy bass supporting pure rock guitar, pounding drums, and one of the most memorable choruses of the year. Angsty testosterone oozes from that one. The line "I will survive my will to be entertained" from "Better You Than Me" sticks with me, sympathetically supported by a downtempo beat, elegant piano, and a slight static. Sage's delivery is a little emo at times, but his lyrics are as sharp and precise as a Ginsu. Stakka has a production credit list a mile long, including some ace drum and bass made with Skynet, so his credentials are never in question. Your enjoyment falls on your feelings towards their British '80s synth-pop influences, tolerance of politically aware poetry, and demonstrating a little patience.
- "So Fine" MP3
- Multiple songs MySpace
- Multiple songs Last.FM
Colette Carr "Static" (video) (Premiere) // Music
House of Blondes "First of July" (audio) (premiere) // Music
Digisaurus 'No More Room For Love' (EP stream) // Music
Fave Five: Alpine
// Sound Affects
"Australian sextet Alpine's newest album is a fantastic expansion of their joyous pop sound, but two members give us five records apiece that helped define their unique musical identities.READ the article


text:
The professional staff at GAR Foundation is dedicated to meeting the needs of the community through charitable giving.
Christine Amer Mayer
Twitter: @christinemayer4
Kirstin S. Toth
Senior Vice President
Twitter: @Toth4GAR
Candace Campbell Jackson
Consulting Program Officer
Twitter: @candaceakron
Candace Campbell Jackson has worked with GAR Foundation since 1998. In recent years, she has served as a Consulting Program Officer for GAR, dedicating the majority of her professional time to her role as Vice President and Chief of Staff at The University of Akron. Currently, Jackson serves as the Vice President of Student Success and Vice Provost for Academic Studies at The University of Akron. Formerly, Jackson was in the public law and corporate departments of law firm Buckingham, Doolittle & Burroughs LLP. She holds a Bachelor's degree in Journalism from Howard University in Washington D.C. and a law degree from The University of Akron. She and her husband, Mark, have four children.
Julie A. Watson
Grants Manager, Program Assistant
Julie Watson joined GAR Foundation in 1998. Previously, she served in several roles with the former Roadway Services Inc. for 20 years, including as administrative assistant to the vice president of corporate planning. Watson earned a Bachelor of Science degree in Business Administration from Bowling Green State University. She and her partner Dave reside in Cuyahoga Falls with their Shi-Poo, Finnegan.
Lucille Esposito joined GAR Foundation in 2013 and manages the Educator Initiative Grants (EIG) program. As a career educator, Esposito most recently hails from the Hubbard Exempted Village School District as assistant superintendent and special assistant to the superintendent, where she led and managed curriculum and instruction for instructors and students throughout the district. She has taken an active role in supporting teachers' adoption of new learning standards, assessments and innovative teaching platforms. A lifelong Summit County resident, she has also taught throughout the region, including many years at St. Vincent-St. Mary High School and is adjunct instructor for Ashland University.
Esposito earned a bachelor's in English and History from The University of Akron, and a Masters of Curriculum and Instruction from Ashland University.
LOIs are reviewed on a weekly basis, so you may submit one at any time. Please visit our Letter of Inquiry page for detailed deadline information.
January 5, 2015
April 6, 2015
June 29, 2015
October 5, 2015
February 1, 2015
May 1, 2015
August 1, 2015
November 1, 2015
April 17, 2015 Capital requests only
GAR Foundation invests in Greater Akron to promote quality of life, education, and economic opportunities for its people, in a culturally vibrant community.
277 East Mill Street
Akron, OH 44308
Phone: 330.576.2926
Fax: 330.294.5315
Copyright ©
Web Design + Development by TRIAD


text:
- Division of Environmental Analysis
- SER Home
- Purpose of the SER
- How To Use The SER - Printing Problems? Site Organization; Trouble with Acrobat Reader
- Topics Matrices
- Env Handbooks
- Other Guidance
- Forms & Templates
- Policy Memos
- MOUs/MOAs
- Scoping Tools
- Training On Demand
- Acronyms and Abbreviations List
- Glossary
- Contact SER Staff
- Questions about the SER?
- Caltrans staff - contact the Environmental Coodinator for your district.
- Local agency staff - contact the Caltrans
Local Assistance Engineer for your district.
- Suggestions or problems with this site, email the website coordinator or use the suggestion form.
Adobe Acrobat Reader is required to view and print PDF files. Adobe Acrobat is required to edit online forms and save them to your computer.
Last Updated: Tuesday, May 5, 2015 8:14 AM
SER - What's New
Postings on this page will be highlighted for 90 days.
Postings are in chronological order with the most recent listed first. Updates may also be viewed under specific SER volumes and sections. Postings older than 90 days can be accessed on the Posting History page.
Sign up for the Standard Environmental Reference (SER) Subscription List to receive an automatic notice when updates have been made to the SER.
- Provide more consistency with the 2011 Traffic Noise Analysis Protocol.
- Provide more consistency with the 2013 Technical Noise Supplement to the Traffic Noise Analysis Protocol.
- Provide additional information on noise analysis under CEQA.
- Provide updated links to additional guidance and information.
- Improve formatting.
View updates by SER sections
Click the links below to view recent updates made to specific sections of the SER.
- Volume 1: General
- Volume 2: Cultural
- Volume 3: Biological
- Volume 4: Community
- Other Guidance
- Forms & Templates
- Policy Memos
- MOUs/MOAs
- Scoping Tools
- Training on Demand
Volume 1 - General
- 12-15-2014: SER Chapters 30 and 38 have been updated to be consistent with the new CE Checklist.
- 12-03-2014: The Environmental Management Office has updated Chapter 23 (Farmlands) in Volume 1 of the SER. It includes updated farmland definitions, an updated flow chart, more information on completing NRCS Forms CPA-106 and Form AD-1006, and additional information on Williamson Act coordination with the California Department of Conservation. Additionally, both the CPA-106 and the Form AD-1006 have been added to the SER Forms and Templates page.
Volume 2 - Cultural
- 1-02-2015: Volume 2 of the SER had been updated to reflect the new Memorandum of Understanding Between the California Department of Transportation and the California State Historic Preservation Officer Regarding Compliance with Public Resources Code 5024 and Governor's Executive Order W-26-92 (PRC 5024 MOU) that went into effect January 1, 2015.
Volume 3 - Biological Resources
No updates at this time.
Volume 4 - Community Impact Assessment
No updates at this time.
No updates at this time.
Emergency Projects Environmental Process and Requirements
- 11-05-2014: The Emergency Projects Environmental Process and Requirements Guidance has been updated to repair broken hyperlinks and to re-format the document.
Other Guidance
- 10-30-2014: The Division of Environmental Analysis (DEA) has developed the "Fact Sheet for New Categorical Exclusions under 23 CFR 771.117(c), CEs moved FROM the "d list" tO the "c list" and Programmatic Agreements for CEs." These CEs are effective November 5, 2014.
Forms & Templates
- 12-03-2014:The Environmental Management Office has updated the Air Quality Conformity Findings Checklist to include a hyperlink that provides additional information on applicable PM control measures and to clarify the conformity documentation required for the project file.
- 11-14-2014: The Natural Environment Study (Minimal Impacts) (NESMI)) has been revised by the Biological Consultancy Group (BCG). Effective December 1, 2014, the revised outline is to be used to develop all new NESMI reports for Caltrans, Local Assistance, and Oversight projects. If you have any questions, please contact Jennifer Gillies at (916) 653-6976.
- 11-05-2014: The CE Checklist has been updated to include four new Categorical Exclusions under 23 CFR 771.117(c), three CEs that have been moved FROM the d list TO the c list, and one new Categorical Exclusion under 23 CFR 771.117(d). These CEs are effective 11-05-2014.
No updates at this time.
Scoping Tools
No updates at this time.
Training on Demand
No updates at this time
No updates at this time
No updates at this time
Contact SER Staff
No updates at this time
Posting History


text:
GET OUR e NEWSLETTER to learn more about buying and selling businesses.
The Authority on Selling Businesses in South Africa & Globally?
- Successfully conducting the sale of businesses while maintaining confidentially and integrity.
- The fastest growing business brokerage in the world.
- Three times as many screened and qualified buyers as other business brokerages.
- LINK will automatically market your business across multiple forms of media.
LINK South Africa is registered with the Estate Agency Affairs Board.
Eastern Cape (EC)R2,700,000 (excl. Vat and Stock)
Eastern Cape (EC)R1,500,000 (excluding Stock and VAT)
Western Cape (WC - Cape Town Region)R 8,500,000
KwaZulu Natal South Coast (KZN)R11,000,000
Eastern Cape (EC)R1,100,000 (Excl. Vat and Stock)
Gauteng (GP)R 350,000.00
Western Cape (WC - Garden Route)R95,000
Western Cape (WC - Cape Town Region)R13,700,000
Western Cape (WC - Garden Route)R285,000
Gauteng (GP)R550,000
KwaZulu - Natal (KZN)R1,300,000
Western Cape (WC - Garden Route)R1,950,000
Western Cape (WC - Cape Town Region)R3,116,000.00
Eastern Cape (EC)R660,000
Find Out In 2 Minutes With Our Simple, No Strings Business Appraisal Tool
Access the Largest Market of Serious Business Buyers in South Africa
We have more registered, pre-qualified buyers than any other business brokerage in South Africa. LINK makes selling a business a swift, stress-free process, putting you in touch with the best buyers with the right budgets. We ensure that all buyers that show interest in your business listing are only given further information when they are deemed to be serious buyers.
Work With a Broker in Your Area of Business
To maximise the return for your business, you need a broker with specific expertise in your field of business. Choosing LINK grants you access to such industry specific knowledge from South Africa's leading business brokers. Our brokers guide you through each step of the sales process. This includes ensuring all your prospective buyers are qualified, and that your business is accurately valued and marketed both online and offline.
Much More Than Just a Business Listing
As the leading business brokerage in the South Africa, we make a commitment to making your business sell. While most traditional brokerages work only to service the needs of the seller, we have found that providing equal and exceptional service to the buyer and the seller results in better business outcomes. Buyers take comfort in the fact that the sales process is safe and secure for both parties, while sellers can rely on 15 years brokering experience and specialised guidance.
So whether you are looking to get the most out of the sale of your business, or are simply here to browse for your future business endeavour, you are in good hands with LINK.


text:
Prom is tonight, so if you're in the prom state of mind, click here for some books you can check out at the Library. And who can name the source of this blog post's title? Hint: If she met Edward in a dark alley, she would totally slay him!
End of high school, rite of passage thingy.
Comments are closed.


text:
UDLC Partners with Forest & Main to Support Community Cupboard
On February 21st, Upper Dublin Lutheran Church partnered with Forest & Main Brewing Company to host the first ever "Brewing for the Greater Good" event, a beer tasting to benefit the Mattie Dixon Community Cupboard in Ambler. There were one-hundred people in attendance and we raised over $3000 for the food cupboard. Dan Endicott, co-owner of Forest & Main led the beer tasting. Ron Maltin, president of the Mattie Dixon board, and his spouse Heather brought greetings and thanks from the Cupboard. This partnership developed out of our monthly God on Tap gatherings at Forest & Main.
UDLC Designated a Zone of Peace
On January 25, 2015 Upper Dublin has been designated a Zone of Peace by the Religious Leaders Council of Greater Philadelphia for our numerous outreach ministries, which help to make our community and our world a more peaceable place. UDLC been deemed to be exemplary in addressing one or more of the root causes of violence, such as prejudice and hatred; poverty, homelessness and hunger; drug use; gun violence; and unequal opportunities for educational and cultural development.
Pastor Lawlor's Sabbatical Project: The Danger of a Single Story
From May 4 to August 9, 2015 Pastor Dyan Lawlor will be on sabbatical—a time for rest, renewal, and reflection on the theme The Danger of a Single Story. The theme is inspired by the TED talk of the same name by Nigerian novelist Chimamanda Ngozi Adichie.
Pastors' Welcome
We are eager to welcome and invite you to journey with us "on the road of discipleship" at Upper Dublin Lutheran! Our congregation is a dynamic, down-to-earth, spirit-led group of believers and seekers that, we, pastors, see as our equals and partners ! Our role is to coach, inspire and challenge our community into a deeper , transforming relationship with Jesus Christ. If follows, then, we have an open, entrepreneurial climate, where members are encouraged to develop new ministries and use their gifts, in harmony with our vision and mission. Come and experience our many community and global ministries, before or after you visit our worship services, and feel the warm welcome and joy at UDLC!
Upper Dublin Christian Nursery School
Now accepting registration for September 2014!
We are a ministry of Upper Dublin Lutheran Church. We welcome children of any denomination. We enjoy diversity and look forward to incorporating other traditions in to our program. The mission of Upper Dublin Christian Nursery School is to help children experience the joy in knowing Jesus and learning and in sharing God's love. We encourage you to visit our school at any time. Please call for information. 215-646-7812.
Holy Humor Sunday, A UDLC Tradition
Holy Humor Sunday is an annual tradition at UDLC. On the Sunday after Easter, the pastors and staff sing, dance, and don constume in side splitting comedic ressurection tales with lots of laughter and music.
Serving the Philadelphia Area
Upper Dublin Lutheran Church is committed to be a blessing to our community. The blessing happens when people find ways to care for others. We support active ministries that utilize the gifts we are given by God to serve others.
Sunday Morning Worship at 7:45, 9:00, and 10:30am
We worship at 7:45, 9:00, and 10:30 on Sunday morning. All of our worship services offer opportunities to experience the leadership of many Christians. Time for sharing by worshipers of where God has been active in their lives or prayer concerns. Time to gather after the service for refreshment. Worship resources that are easy to follow. A nursery staffed by a qualified adult for children up to age 3, which you are welcome to use, but children are very welcome in worship.
Our Partnerships with Cathedral Church, Lushoto, Tanzania and SEKUCo
In 2005, we began an amazing relationship with our Lutheran brothers and sisters in Tanzania's Northeastern Diocese. This summer we will make our fourth trip to visit their evangelism outposts in the mountains of Lushoto, and developed a scholarship program for high school students. Tanzanian hospitality, generosity and contagious Christian music draws us back and feeds our faith!
Church Ministries and Activities Directory (2015)
The UDLC Directory of Ministries and Activities is a comprehensive guide to all the ways you can become involved at UDLC. From worship to service, from adults to kids, its all here along with contact information for the ministry leaders. Scroll through the directory here or download it by clicking "Download" at the bottom of the document frame.


text:
Orange for Animal Cruelty Awareness wants to
STOP the cruelty of Greyhound Racing
Greyhound Racing kills!
Greyhound Racing kills!
Fear for Australian animals following a decision by Federal Government to renege in leading animal welfare improvements.
Unleashing the truth about online puppy sales.. A new report by the International Fund for Animal Welfare (IFAW), How
Facebook is a household name for millions of people around the world who use it to make friends, share pictures, and
On 8 August 2014, the WHO declared the epidemic to be an international public health emergency.
Clara the Pitbull was stabbed at an adoption event. We want the man who did it charged with animal cruelty!


text:
Simple Math Games to Reinforce National Math Standards
Oct 14, 2010 - Posted by Connie McCarthy in Parent Involvement, Kids Math, Kids Learning, Fun Learning Activities, Connie McCarthy
Recent Blog Posts
Pick a Blog Topic
Tags >> Kids Learning
Join our bloggers as they share their experiences on the challenges and joys of helping children succeed in school.
Did you know that simple household items could be the "keys" to help your child "unlock" math skills? If you have a pair of dice, paper muffin cups, and pennies or paper clips at your house, you can practice number skill... Read more
My last blog (about skills versus intelligence) mentioned that some parents and teachers think children are not trying when in reality they are working very hard. It is a concern that I have for struggling students, because j... Read more
"School is more demanding for my kids than it was when I went to school." How many times have you said this or heard this said? Kids need to be at their best in order to do well and enjoy school. It seems that nev... Read more
Many students who struggle in school are called "lazy and dumb" by their peers and at some times even by a teacher or parent! This is extremely hurtful and unnecessary. First of all, you cannot always tell whethe... Read more
"How can I help my child become more independent?" This was one of many great questions parents asked at our recent "Meet the Teacher" night at my school. Here are five simple tips to help ... Read more
The first year we had a girl's softball team at the school where I teach, one of the girls on the team was very athletic. She could throw and hit the ball well, and she could run very fast. In the first game of the se... Read more
Parents want to give their Kindergarten or First Grade child a "jump start" for reading and math success, but are often overwhelmed on how to do it! Experience has taught me that there are three main skills to master. This s... Read more
When a child struggles in school, their parents experience a range of emotions -- frustration, anger, hopelessness, and guilt. In the beginning, we feel the problems in school have to be because the child is not trying. We fu... Read more
One of my all-time favorite quotes that I have passed along to my kids is: "I haven't failed. I've just found 10,000 ways that won't work." ~Thomas Edison I think it's important for our kids to know that in school... Read more
When a child is struggling in school, we have three choices for ways to help. We can remediate, accommodate, or teach the child to compensate. If at all possible, we should fix the problem. The best example of this is a chi... Read more
SchoolFamily.com Shortcuts
Popular Topics
Popular Printables


text:
Toronto Film Review: 'The Cobbler'
It deserves to be stated upfront: Of the many things that go horribly wrong with "The Cobbler," none are even remotely Adam Sandler's fault.
It deserves to be stated upfront: Of the many things that go horribly wrong with "The Cobbler," none are even remotely Adam Sandler's fault.
An almost bizarrely limp, emotionless, blank greeting card of a movie.
Paul Dano and John Cusack bring the Beach Boys' Brian Wilson to life in Bill Pohlad's vibrant cure for the common musical biopic.
It wasn't exactly Lana Turner at the soda fountain, but the manner in which filmmaker brothers Benny and Joshua Safdie happened upon Arielle Holmes, the lead actress and muse for "Heaven Knows What,"…
A music-industry romance that alternates freely between wisdom and mawkishness, caustic entertainment-biz critique and naive wish fulfillment, heartfelt flourishes and soap-opera shenanigans.
Mia Hansen-Love's "Eden" would make for a wonderfully eye-opening anchor on a double bill with the Coen brothers' "Inside Llewyn Davis."
Though they'd never co-starred in a film before, Morgan Freeman and Diane Keaton make for a thoroughly warm, whimsical, watchable onscreen couple.
While his ambitions frequently exceed his reach — sometimes by a substantial distance — James Franco gets an undeserved amount of grief for his various auteurist projects.
Parental failures, lingering filial resentments and obscure French real-estate laws are placed under the microscope in veteran playwright Israel Horovitz's debut feature, "My Old Lady."
As Art of Elysium founder Jennifer Howell admits, the central mission of the org she founded is sometimes hard for people to wrap their heads around. Created in 1997, the org offers artistic outreach…
"If you build it, they will come" has always been a fairly safe operating principle in Las Vegas, at least as far as the gambling, partying masses are concerned. Whether it's a safe bet for…


text:
Quest Melbourne Airport serviced apartments offers guests a relaxed and comfortable accommodation experience.
Stay at Quest Melbourne Airport – brand new serviced apartment accommodation in Melbourne, conveniently located in the Melbourne Airport Business Park.
Business travellers or holidaymakers looking for Melbourne Airport accommodation will enjoy 5 levels of superbly furnished, fully equipped serviced apartment accommodation, just minutes from the Melbourne Airport terminals and Tullamarine business precincts.
Choose from 96 studio, one, two and three bedroom serviced apartment accommodation.
This purpose-built property is a great alternative to a traditional hotel, featuring fully equipped kitchen facilities (kitchenettes in studios), laundry facilities, separate living/dining area, LED Smart TV, WiFi, Foxtel, car parking, alfresco dining area, gymnasium and conference room facilities.
Quest Melbourne Airport provides a limited shuttle bus service to and from the airport for $10 per person. Please contact reception to book your spot.
Parking on site is complimentary for all nights booked. Speak to us to discuss short and long term parking options at the property for just $10 per day.
We look forward to welcoming you at the brand new Quest Melbourne Airport.
Quest's properties are owned and operated by franchisees just like us. In many cases
we'll be the person who checks you in or recommends the best places to eat around
We take great pride in offering you a personalised service, quality accommodation
and making sure you have everything you need for a comfortable stay.
Great location, fantastic service and clean, modern and comfortable rooms. We stayed on the ground floor, and didn't hear any noise whatsoever. I would definitely stay here again!
Samantha-Jane Miranda
A great stay. Fast and professional check in, clean well appointed rooms.
Great for my interstate guests.
Brianna Armstrong
20 Annandale Road, Melbourne AirportMelbourne Suburbs 3045 AustraliaLocation map
Type the code from the image


text:
to explore
sign up (free!)
Also on these boards
Related Pins
Pink Grapefruit Margaritas #NationalMargaritaDay
When you're having fun in the sun, you gotta cool off and what better way than a cold summer drink. Here are 13 delicious summer cocktails with recipes created by some of my favorite food bloggers.
Pink Grapefruit Margaritas (add pink grapefruit juice to fresh lime juice, triple sec & silver tequila)
Pink Grapefruit Margaritas From Barefoot Contessa: 1 cup ruby red grapefruit juice, 1/2 cup fresh squeezed lime juice (about 4 limes), 1 cup triple sec orange liqueur, 3 cups ice, 1 cup silver tequila, 1 lime cut in wedges, optional Kosher salt.
Weekend Cocktail~ Pink Grapefruit Margaritas These Margaritas will certainly liven up your weekend, both refreshing and delicious. They are super simple to make, the only catch being, you need fresh limes, it really makes a difference. Make these at your next party, they are sure to be a hit.


text:
TWO FACES: The Shootout Film Premiere & Wrap Party!
- Film, Media & Entertainment
- 189 2nd Ave, Theater 1, New York, NY, 10003
I Would Die 4 U: A Prince Dance Party with Touré and Ali Shaheed Muhammad
Housing Works
Friday, March 22, 2013 from 7:00 PM to 10:00 PM (EDT)
Housing Works is a healing community of people living with and affected by HIV/AIDS. Our mission is to end the dual crises of homelessness and AIDS through relentless advocacy, the provision of lifesaving services, and entrepreneurial businesses that sustain our efforts.
In order to purchase these tickets in installments, you'll need an Eventbrite account. Log in or sign up for a free account to continue.


text:
Dateline: 2 a.m.
It's not about the ring.
It's not about the trophy.
It's about the nights.
And the demons within.
Winning isn't about winning.
Winning is about losing.
Winning is the day.
Losing is the night.
Winning is today.
Losing is forever.
Winning is a crowd.
Losing is alone.
Alone in the night.
Dreams of a win.
Nightmares of a loss.
Trophies come with salad and rolls.
And banquet chicken.
Round tables with too many forks.
Friends, colleagues, and shirt collars that won't button.
Combed hair, shined shoes, limos with champagne.
At some point, between coffee and cleanup, the lights go down, and someone stands up.
The banquet room gets quiet.
Your table goes silent.
And your brain starts to scream.
"Will it be me?"
"Was it better than good?"
"Was it great?"
And then the person with the light shining on them says something you don't hear.
Words about "deserving" and "everybody."
None of it is true. Just polite.
No one deserves to win.
To win you have to take it, fight for it, scream, claw, kick, bite, sweat, cry, lose sleep, lose time, push, push, push.
If not, you deserve to lose.
And then the person with the light shining on them asks for the envelope.
And your life.
I know, I've sat at round tables. With too many forks.
And the remains of banquet chicken.
And me.
I never look at the person with the light shining on them. I stare at my cup of black coffee, and the tiny circles of waves, that is me.
I hear the fumbling with the envelope.
I hear the room breathing as the person with the light shining on them sees the name.
I watch the rings of the coffee waves.
I hear the person with the light shining on them adjust the microphone, and their throat.
I watch the coffee waves.
And I hear someone else's name.
Not mine.
I clap. For them, not me.
And drink the coffee waves.
While trying to smile.
While trying to say something.
While trying to breathe.
In the spotlight, the winner.
In the dark, me.
Winning helps you sleep.
Losing keeps you awake.
I have a fireplace mantle full of wins.
I have a darkened bedroom ceiling full of loses.
I am driven to not lose, as much, if not more, than driven to win.
I never, never, get over the losses. I've come in second. It sucks.
Losses drive me to wins.
Those competing in the Bassmaster Classic know this feeling.
Fifty-one dreaming of a win.
In the end, one will sleep.
Fifty will not.
— db
Don Barone is an award-winning outdoors writer and a member of the New England Outdoor Writers Association and the Outdoor Writers Guild of the U.K. You can reach db at www.donbaroneoutdoors.com.


text:
DefinitionTelangiectasias are small blood vessels just below the surface of the skin. The blood vessels are very visible through the skin. They may appear as a single vessel or as many vessels in clusters.They may also be seen in the mouth or whites of the eyes. The may also be in other locations, such as the brain and the back of the eyes.
CausesTelangiectasias are caused by small blood vessels that are stuck in a wide open position. There is no clear reason for why this happens in many cases.Some telangiectasias are due to conditions like:
- Rosacea
- Chronic sun and/or cold exposure
- Basal cell carcinoma
- Dermatomyositis
- Lupus
- Scleroderma
- Cushing's syndrome
- Cirrhosis
- Ataxia-telangiectasia
- Hereditary hemorrhagic telangiectasia
- Injury from surgery or radiation
- Too much estrogen—can be caused by oral contraceptives or pregnancy
|Telangiectasia may be related to rosacea.
|Copyright © Nucleus Medical Media, Inc.
Risk FactorsFactors that increase your risk for telangiectasias are based on the underlying condition.
SymptomsSymptoms may include:
- Red patches of skin that have a lacy pattern
- Patches of red skin that turn white when pressure is applied, then red again after pressure is removed
- Bleeding
More from Beliefnet
Current Research From Top Journals
Chewing Gum After Surgery May Improve Digestive Tract Recovery
Early Peanut Consumption Associated with Lower Risk of Peanut Allergy in High Risk Children
Breastfeeding May Decrease the Risk of Childhood Obesity
Tonsillectomy May Reduce Number of Sore Throat Days in Children
April 2015
A systematic review found that participants given chewing gum after abdominal surgery may have a faster return to normal for their digestive system. Unfortunately, the quality of trials is low and more research will need to be done before this simple solution is confirmed.
previous editions
Early Peanut Consumption Associated with Lower Risk of Peanut Allergy in High Risk Children
March 2015
Breastfeeding May Decrease the Risk of Childhood Obesity
February 2015
Tonsillectomy May Reduce Number of Sore Throat Days in Children
February 2015


text:
Trust and Investments
Managing your assets can sometimes be scary. There are lots of legal terms and lots of rules. CornerBank can't take the complexity out of trust services, conservatorships, estate planning and other asset management tools, but we can explain these tools to you in common sense terms that help you make the best decisions for your situation.
Here's how we can help.
- Investment Advisory Accounts
- Financial Planning Services
- Retirement Plans for Individuals and Companies
- College Savings Accounts
- Discount Brokerage Accounts
- Revocable Living Trust
- Irrevocable Trust
- Testamentary Trust
- Special Needs Trust
- Charitable Trust
- Investment Advisory Services
- Estate Planning
- Estate Settlement
- Unique Asset Management
- Real Estate Management
- Farm/Oil & Gas Management
- Conservatorships & Special Needs
- Custody and Safe Keeping
Securities and insurance productsare offered through Cetera Investment Services LLC (doing insurance business in CA as CFGIS Insurance Agency), member FINRA/SIPC. Advisory services are offered through Cetera Investment Advisers LLC. Neither firm is affiliated with the financial institution where investment services are offered. Investments are: *Not FDIC/NCUSIF insured *May lose value *Not financial institution guaranteed *Not a deposit *Not insured by any federal government agency. Advisory services may only be offered by investment adviser representatives.
|Cetera Privacy Policy
|Cetera Other Important Disclosures
|Cetera Business Continuity
The Information in this website is for U.S. residents only. The information on the website does not constitute an offer to sell. Or a solicitation of an offer to purchase brokerage services to persons outside the United States.
Want more details? Visit our Trust and Investment section.


text:
Survival Analysis: A Self-Learning Text, Third Edition
English | ISBN: 1441966455 | 2011 | 715 pages | PDF | 4 MB
This greatly expanded third edition of Survival Analysis- A Self-learning Text provides a highly readable description of state-of-the-art methods of analysis of survival/event-history data. This text is suitable for researchers and statisticians working in the medical and other life sciences as well as statisticians in academia who teach introductory and second-level courses on survival analysis. The third edition continues to use the unique "lecture-book" format of the first two editions with one new chapter, additional sections and clarifications to several chapters, and a revised computer appendix. The Computer Appendix, with step-by-step instructions for using the computer packages STATA, SAS, and SPSS, is expanded to include the software package R. David Kleinbaum is Professor of Epidemiology at the Rollins School of Public Health at Emory University, Atlanta, Georgia. Dr. Kleinbaum is internationally known for innovative textbooks and teaching on epidemiological methods, multiple linear regression, logistic regression, and survival analysis. He has provided extensive worldwide short-course training in over 150 short courses on statistical and epidemiological methods. He is also the author of ActivEpi (2002), an interactive computer-based instructional text on fundamentals of epidemiology, which has been used in a variety of educational environments including distance learning. Mitchel Klein is Research Assistant Professor with a joint appointment in the Department of Environmental and Occupational Health (EOH) and the Department of Epidemiology, also at the Rollins School of Public Health at Emory University. Dr. Klein is also co-author with Dr. Kleinbaum of the second edition of Logistic Regression- A Self-Learning Text (2002). He has regularly taught epidemiologic methods courses at Emory to graduate students in public health and in clinical medicine. He is responsible for the epidemiologic methods training of physicians enrolled in EmoryˇŻs Master of Science in Clinical Research Program, and has collaborated with Dr. Kleinbaum both nationally and internationally in teaching several short courses on various topics in epidemiologic methods
[Fast Download] Survival Analysis: A Self-Learning Text, Third Edition
Testosterone: Sex, Power, and the Will to Win
Self-Build Housing - The Complete Works
The Project Manager's Guide to Mastering Agile: Principles and Practices for an Adaptive Approach
Get Paid For Your Pad: How to Maximize Profit From Your Airbnb Listing
The Baker's Four Seasons
Easy Quilt Patterns: 11 Applique Quilt Patterns + Quick Quilts
Mihaly Csikszentmihalyi - Creativity: Flow and the Psychology of Discovery and Invention
Shingon: Japanese Esoteric Buddhism
Choosing Sides: From Holidays to Every Day, 130 Delicious Recipes to Make the Meal
Bhante Henepola Gunaratana - Mindfulness in Plain English: Revised and Expanded Edition
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.
Kora Ritter - Explosion der Lust Sex Gesch(8229)
101 Things to Do with a Vibrator(7037)
The Extraordinary Projects Bible: Duct Tap(5933)
Nico Stark - Spielfeld der Lust: Erotische(5836)
How to Draw Awesome Figures(5226)
The Art of Landscape Photography(4969)
Klaus Becker - Heiss und Feucht - Sex Stor(4672)
Square Foot Gardening: How To Grow Healthy(4603)
Maxim Jakubowski - The Mammoth Book of Bes(4419)
Newman, Frank - Sonne, Sex und Meer(4407)
History Year by Year(4307)
Life Hacks: The King of Random's Tips and (4068)
101 Top Techniques for Artists: Step-by-st(3295)
DIY Projects: 25 Exceptional DIY Projects (3269)
Ritter, Kora - Atemlose Begierde(3154)


text:
|Reviews for Ribbon of Royalty
| CharlieBoneFan chapter 11 . 10/14/2014
Good story.
| LovelyLily13 chapter 11 . 7/12/2014
I know this was years ago, but I'm just now noticing that you called me LovelyLily12! Oi, how embarrassing. Oh well,I know who you were talking about! I'm gonna add this to my community, tht's what I was gonna tell you! *peace sign*
| AmbertheCat chapter 11 . 12/10/2013
I absolutely loved this story! I had a hard time remembering who was who with the names, but still! It was awesome and cute! Thanks for sharing!
| stella chapter 11 . 11/2/2013
THIS IS AWESOME amazing story beautiful romance perfect ending :)
| CookiesNCreamNess chapter 11 . 10/8/2013
Awesome story! Loved the ending!
| m.afumafu chapter 11 . 9/9/2013
Hilarious story i loved it :-)
| tedthelionhead chapter 11 . 8/2/2013
Amazing chapter! I really enjoyed it and -I'm not going to lie- I can not stop smiling right now! The ending was so cute _ I really liked the way you ended it, it was simple and sweet and quite humorous xD Awesome fanifc, defiantly one of my favourites now!
| tedthelionhead chapter 9 . 8/2/2013
Oh my goodness! I'm not going to lie, Ashita Kuru Hi is one of my favourite songs and I have it on my ipod. This was an awesome chapter and I can't wait to read the finale! Shinji is so cute when he says 'don't leave' but Hikari doesn't her him, just adorable! Sorry, I'm just having a minor fan girl attack, ha-ha _' Great chapter again! _
| tedthelionhead chapter 7 . 8/2/2013
Awe, cute! I bet Shinji was a little sad when Hikari said they were Giri Choco instead of Honmei Choco _ He was probably secretly thinking, "Please let them be Honmei, please let them be Honmei" Lol xD Awesome chapter and the way Shuu proposed to Haruka was really adorable, cliché, but adorable _ Awesome chapter!
| tedthelionhead chapter 5 . 8/2/2013
The Tobari Shinobi: Shinou Scandal sounds very interesting and I will try reading it along with the others that you have listed. This was another awesome chapter and I look forward to reading the rest, so with that, I'm off to read the next chapter! _
| tedthelionhead chapter 1 . 8/2/2013
Awesome chapter! And I love the ending note as well, I didn't realise there was a more masculine and less masculine word for 'I'. It's nice to know, being as I watch a lot of anime in subbed version. Anyways, awesome chapter and I have added this story to my favourites because it is just that awesome _
| bunny2512 chapter 8 . 11/5/2012
| Princess Peachella chapter 11 . 11/2/2012
this is so pretty and perfect and beautiful and it's just really nice! i really love this! great job!
| XMidnightprincesSX chapter 7 . 7/30/2012
1) This chapter was soo Kawii!
2) i was thinking that sooner or later he was going to ask her his she would be his girlfriend XD
3) Nah,
6) Hmm small but not to small
7) dunno?
| XMidnightprincesSX chapter 5 . 7/30/2012
AWW i love your story its so KAwwi!


text:
The President caught heat for comments he made last April about California attorney general Kamala Harris — he called her "by far the best-looking" AG in the country — from groups who felt he was putting her looks over her credentials. The President apologized for the "distraction" his comments caused and reiterated that he and Harris were "old friends" and no offense was intended.
(Photos from left: Jerod Harris/Getty Images for TheWrap, John Gurzinski/Getty Images)
Out and About: Kanye Mobbed in Los Angeles07/02/2015
Cinemania: Must-See Movies in July07/02/2015
Celebrity Birthdays: Missy Elliott Celebrates!07/01/2015
You Gotta Have It: What to Hear, See and Cop This Month06/30/2015
Where Are They Now? The Cast of Coming to America06/29/2015
Quotes: Obama Speaks on Historic Marriage Equality Ruling06/26/2015
Out and About: Rihanna Lets It All Hang Out in LA06/26/2015
Great Moments in Black LGBT History06/25/2015
Celebrity Birthdays: Solange Knowles-Ferguson Celebrates!06/24/2015
Where Are They Now? The Cast of White Chicks06/23/2015
So Fab: Drag Queens as Celebrities06/22/2015
Celebrities Celebrate Father's Day 201506/21/2015
Out and About: Chanel Iman Is Beyond Sexy in NYC06/19/2015
Celeb Quotes: Pres. Obama Slams the Politics of Gun Control06/19/2015
Father Knows Best: Celebrity Dads Talk Fatherhood06/18/2015
Celebrity Birthdays: Kendrick Lamar Celebrates!06/17/2015
Out and Proud: Famous LGBT Couples06/16/2015
Rachel Dolezal Ain't the Only One: 'Transracial' Celebs06/15/2015
Out and About: Gorgeous Gabby in the Big Apple06/12/2015
Celeb Quotes: Drake Throws Shade to Music Streaming Sites06/12/2015
Party Rockers: Wildest Bashes for Celebrity Kids06/11/2015
You Gotta Have It: Things to See, Hear and Cop This Month06/10/2015
Where Are They Now?: Cast of What's Love Got to Do With It06/09/2015
Learn and Love: Ten Things to Know About Transgender People06/08/2015
Celebrity Birthdays: Kanye West Celebrates!06/08/2015
Out and About: Nicki Minaj Got You All in Check at X Games06/06/2015
Cinemania: Must-See Movies in June06/05/2015
Celebrity Quotes of the Week: Nicki Minaj Demands Orgasms06/05/2015
Celebrity Birthdays: EJ Johnson Celebrates!06/04/2015
Keep It Cute: Celebrity Babies Who Steal the Show06/03/2015
Where Are They Now? The Cast of Big Momma's House06/02/2015
Forever Kimye: Kim and Kanye's Love Story06/01/2015
Out and About: North West Is Tutu Cute Leaving Dance Class05/31/2015
Waiting for Tonight: Celebrity Kids at Prom05/31/2015
Quotes: Kenya Moore Is Single Because Too Many Men Are Gay05/29/2015
Celebrity Birthdays: André 3000 Celebrates!05/27/2015


text:
Israeli initiative to partake in do-good causes is now celebrated around the world.
- No categories
IsraAID helps rebuild tornado ravaged homes in Coal City
Eight-member IsraAID team gut and fix some of the 375 homes in need of repair in Illinois community.
Syrian father asks Israeli doctors to save his son
Six-year-old boy with severe intracranial pressure nursed back to life at Rambam Health Care Campus.
Israeli selfie-app CamMe wins mobile award
Wibbitz video tech platform and PointGrab's CamMe pocket top honors at the Global Mobile Awards.
Israeli EyeMusic helps blind 'hear' colors and shapes
Hebrew University scientists use sensory substitution devices to convey senses to the brain noninvasively.
Take your focus off the reading glasses
Israeli study shows the problem of 'visual crowding' can be helped by training a little-known area of the retina.
An Israeli touch at the Oscars
Soundman Niv Adiri, producer Arnon Milchan and Caesarstone win at the Academy Awards.
Statue of Liberty upgrades with Israeli digital video surveillance
US National Monument uses 'dream team' of nine top technology providers to improve safety, security.
Israeli researchers use nanotechnology to target drug-resistant ovarian tumors
'We wanted to create a safe drug-delivery system, which wouldn't harm the body's immune system or organs.'
Israel hopes to be next 'it' location for movie productions
Tourism Ministry launches campaign to charm Universal Studios and Paramount Studios to the Holy Land.
40,000 run in Tel Aviv Marathon
Kenyan Ezekiel Koech crosses finish line in 2:14:40 hours; record 100,000 people participated in overall event.


text:
|SUMMARY: Last May, B-to-B publishing association American Business Press changed its name to American Business Media. We contacted CEO Gordon Hughes to learn how his 215 members who between them produce 1,200 magazines and various ancillary products for 181 industries, are moving into the online publishing age.
Get the latest research on email, lead gen, and social media along with MarketingSherpa updates and promotions.
Email Marketing: How the Kentucky Derby engages customers with relevant email
Read More »
Enter to Win »
Marketing Analytics by Mike Grigsby