text:
Giant Bombcast 07/28/2015
Become Premium to Watch
This re-release seems unnecessary at first glance, but the conclusion of Kratos' journey serves up a level of spectacle that remains impressive in 2015.
Her Story is a bold and largely successful experiment in interactive crime fiction.
Rocksteady's gorgeous-looking third Arkham game refines its open-world format a bit and lets you drive a whole hell of a lot of Batmobile.
Game »
consists of 6 releases.
Released Nov 22, 2013
Beards are visible facial follicle growth, commonly associated with adult male homo sapiens. In video games, beards are commonly found in character customization systems (i.e. Rock Band) or when pirates are involved (i.e. the Monkey Island series).
Cars go places. Hopefully fast.
Crates sometimes contain things!
A headwear often made of gold or silver with gems and diamond embedded, often worn by King or Queen.
Object consists of a Drill bit that is spun but either Human or motorized power to create a perforation in another object. You know the drill.
A piece of jewelry worn by placing one in a piercing in the ear. Traditionally the ear lobe.
Facial hair consists of anything from a mustache to sideburns. Facial hair has been a close friend of gaming from the beginning.
Above ground docking bay for fire hoses.
Glasses are framed pieces of glass or plastic that are worn in front of the eyes and on the bridge of the nose usually to correct vision or as identity statement. Often worn by nerds.
An article of clothing that rests on top of one's head.
A body part (usually the skin, skull, or antlers) taken from a dead animal and kept as a trophy or memorabilia.
A Jet pack is a backpack with rocket boosters built in that usually allows the wearer to hover or fly.
Often used as either a weapon or in a weapon and also used often times as a weather effect, lightning is seen in several games. Called "thunder" in some games, even though thunder is the sound that lightning makes.
Traditionally, lightning is a form of electrical discharge originating within clouds. Within video games, lightning can be used as an offensive attack.
Magazines for reading, not shooting; reading and looking.
A martini glass (or cocktail glass) is a cone-shaped stemmed glass container used to serve cocktail alcholic beverages in.
An award for skill and merit in the face of adversity.
Two-wheeled motor vehicle
A necklace is often a piece of jewelery that is worn around the neck.
A necktie describes apparel worn snugly around the collar and tied in specific kinds of knots in front of the throat. Typically men's apparel, women can also wear them fashionably.
A piece of printed paper designed to be attached to a wall typically used to advertise. A good example is a movie poster.
A wire that transfers electricity.
Tinted glasses - used to shield the user direct sunlight. Sunglasses are also used as a fashion accessory or as part of a disguise.
A flat surface that is often used to place objects upon - most commonly, food.
Tattoos are the oldest and most popular (next to piercings) form of body modification. They appear in numerous video games, probably due to their popularity in the real world.
A television set is a device used to view moving images usually accompanied by sound. They often appear in video games and scenery but sometimes have more practical applications.
A tree is a perennial woody plant. Trees are often used in games as a natural wall, providing a barrier as well as cover. Many games also use them to make their environments looks more natural and attractive.
Even though water in games tends to bring about death, we all still hold it near and dear to us. After all, the human body is comprised mostly of it.
One of the most important inventions in the history of mankind, wheels are used in an infinite number of applications, being one of the most recognizable the use in vehicles.
This edit will also create new pages on Giant Bomb for:
Until you earn 1000 points all your submissions need to be vetted by other
Giant Bomb users. This process takes no more than a few hours and we'll
send you an email once approved.
Because you're new to wiki editing, we sent your
submission off to our moderators to check it over. Most
changes are approved within a few hours. We'll send an
email when it is.
Once you've earned over points you'll be able
to bypass this step and make live edits to our system.
Until then, gain points by continuing to edit pages.
No changes were submitted, nothing was done! Please make changes to the wiki!
Thanks for continuing to improve the site. Some of your changes are
now live. However, some of your changes were sent to moderation because you do not
have enough points to make those live edits. You need points to
live edit the changes you commited.
For the changes that went through, our robot math gave you points for this
Thanks for continuing to improve the site. Your changes are
now live. Our robot math gave you points for this
Use your keyboard!
Log in to comment


text:
See who's on Silver Singles:
I am a strong, confident, Loving, and Caring woman, who knows what she wants in a man. I Love to travel, have fun, laugh, enjoy life an...
feelfreetochat is a 30yr-old single woman in San Diego, California
Friendly, intelligent woman, likes watching sports, travel and movies. Avid reader, loves dancing.
RedTigress is a 68yr-old single woman in San Diego, California

subset: commoncrawl


text:
Register now for free, or sign in with any of these services:
Want to set your local edition?
Select an edition for more focused local news coverage when you visit NOLA.com.
Don't worry. You can change this setting at any time to another local edition.
accountability? huh....like exemptions wont be in place to protect religious schools from using my tax dollars to push their religion? HA ! I could of sworn Thomas Jefferson brough this to the attention of the American people when the Puritand used to force the Quakers to fund their schools and churches.


text:
Viewers: in countries Watching now:
Motion picture matte painter and fine artist Ron Crabb gives an inside look at how he recreated a seaport town that has long since vanished in his masterful painting of the old Port Blakely Mill, "Milltown Morning." In this installment of Start to Finish, join Ron as he walks through the remains of the old mill town, explains his in-depth historical research, and skillfully brings an entire town to life using Cinema 4D, Photoshop, and his amazing talent as a painter and illustrator. The end product is an astonishingly detailed painting that crosses the gap between digital and fine art. To view more of Ron Crabb's digital paintings relating to this series, please visit The Port Blakely Project.
There are currently no FAQs about Ron Crabb's Matte Painting Project: Start to Finish.
Access exercise files from a button right under the course name.
Search within course videos and transcripts, and jump right to the results.
Remove icons showing you already watched videos if you want to start over.
Make the video wide, narrow, full-screen, or pop the player out of the page into its own window.
Click on text in the transcript to jump to that spot in the video. As the video plays, the relevant spot in the transcript will be highlighted.


text:
Recently, we introduced our new Real ID feature – http://www.battle.net/realid/ , a new way to stay connected with your friends on the new Battle.net. Today, we wanted to give you a heads up about our plans for Real ID on our official forums, discuss the design philosophy behind the changes we're making, and give you a first look at some of the new features we're adding to the forums to help improve the quality of conversations and make the forums an even more enjoyable place for players to visit.
The first and most significant change is that in the near future, anyone posting or replying to a post on official Blizzard forums will be doing so using their Real ID — that is, their real-life first and last name — with the option to also display the name of their primary in-game character alongside it. These changes will go into effect on all StarCraft II forums with the launch of the new community site prior to the July 27 release of the game, with the World of Warcraft site and forums following suit near the launch of Cataclysm. Certain classic forums, including the classic Battle.net forums, will remain unchanged.
In an attempt to cut down on trolling and harassment in the forums Blizzard has proposed moving to use real names on forum posts. Unfortunately, this has been shown elsewhere to cause problems for the same people who are most likely to be dissuaded from posting by trolling. Serious posters who do not wish to have their online activity found by non-players or their real-life identity found by anyone wandering through the forums make significant contributions to the forums, whereas many trolls either use sock puppet accounts or simply don't care about any real-life repercussions. If Blizzard wants to make Battle.net something more than that-thing-I-had-to-sign-up-for-to-play-WoW, they are going about it in a very odd way.
Until now World of Warcraft forum posts were made under a character's name, so if you wanted to make an anonymous post you could create a new level 1 character and post using that character. It was a mark of authenticity to post under a max-level character, and there are many posters with long-running identities. The devs talked at one point about specific posters they listened to, all referenced by character name. Some character names became Community MVPs, demonstrating that there was already value attached to pseudonyms. One of these has commented that zie had been stalked in real life:
I love the game and will of course respect the coc/tos, but if the new forums require realid, which afaict they will (even though posts here won't be retroactively outed)… then I'm forced to make a choice between posting there and giving out information that puts me at risk.
That is not a real choice.
-Snowfox, Vek'nilash
This is an important issue, because names carry markers of gender, ethnicity and real-world relationships that may be irrelevant to someone's game play, but open up the possibility of harassment. It also makes it easier for harassers to follow people beyond the internet, making it a matter of personal safety. I find Blizzard's decision unfortunate in every possible way. Forcing people to reveal personal details is no substitute for firm and consistent moderation, and will raise the barrier to entry of community participation. I know I will not be posting under the new policy.
When Battle.net first came out concerns were raised about cross-game data mining, the inability to share or sell accounts (already forbidden by World of Warcraft's ToS), the use of "community" as a cover for introducing DRM and the desire for it to mesh with Steam. As far as I can tell, no one anticipated the possibility that Blizzard would "out" your real-life identity.
Amusingly enough, this change violates Blizzard's terms of service, which promise to ban anyone revealing real-world information about a player. Clearly at one point they recognized the importance of pseudonymity; hopefully someone will stop this change before it goes through. There is currently a strong fan response pouring in and we'll have to wait to see how Blizzard responds.
This also isn't a new issue. Blizzard could have found the problems with their approach with even a cursory search on the topic. As such, I'll recommend a couple of older posts I'd kept around on the issue. If you have favorites, please add them in the comments!
On real names online:
http://geekfeminism.org/2010/06/10/hacker-news-and-pseudonymity/ ,
Includes discussion of the intersection of harassment and real names:


text:
Welcome To Divine Tourism Indiabr>
Divine Tourism India is self-styled organization established in 2009 to design your leisure holidays, with an aim of giving holiday packages & business tours at reasonable prices & best of services with the help of our expertise in this arena .Divine Tourism India helps in holiday packages for International/Domestic, Hotel bookings for International & Domestic Air tickets for International & Domestic & Cruises etc.
Divine Tourism India is a holiday designer organization based in Ludhiana. Where we give you a personal care for your leisure holiday tours & packages. We provide or rather take care of your tours from Honeymoon, Safari's & other itineraries of your choice the idea is just to give a trouble free holiday package where you come back happy & stress free.


text:
See the full film at vimeo.com/48425461
A comedy about a man who sells shares of himself on a Personal Stock Exchange, turning the idea of "corporations are people" on its head. But when he breaks up with his girlfriend to help his stock price, he learns just how cutthroat capitalism can be.
Loading more stuff…
Hmm…it looks like things are taking a while to load. Try again?


text:
Article ID: 263693 - View products that this article applies to.
This article was previously published under Q263693
NoticeThis article applies to Windows 2000. Support for Windows 2000 ends on July 13, 2010. The Windows 2000 End-of-Support Solution Center
(https://support.microsoft.com/?scid=http%3a%2f%2fsupport.microsoft.com%2fwin2000)is a starting point for planning your migration strategy from Windows 2000. For more information see the Microsoft Support Lifecycle Policy
On This Page
If a user is a member of many groups either directly or because of group nesting, Kerberos authentication may not work. The Group Policy object (GPO) may not be applied to the user and the user may not be validated to use network resources.
The Kerberos token has a fixed size. If a user is a member of a group either directly or by membership in another group, the security ID (SID) for that group is added to the user's token. For a SID to be added to the user's token, it must be communicated by using the Kerberos token. If the required SID information exceeds the size of the token, authentication does not succeed. The number of groups varies, but the limit is approximately 70 to 80 groups.
For many operations, Windows NTLM authentication succeeds; the Kerberos authentication problem may not be evident without analysis. However, operations that include GPO application do not work at all.
Service pack informationTo resolve this problem, obtain the latest service pack for Windows 2000. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/260910/ )How to Obtain the Latest Windows 2000 Service Pack
Hotfix informationA supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.
Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
File informationThe English version of this hotfix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.
Note that you must use a registry parameter that is available with this hotfix to increase the Kerberos token size. See the "More Information" section of this article for additional information.
Date Time Version Size File name -------------------------------------------------------- 01/25/2001 02:24p 5.0.2195.2842 130,320 Adsldpc.dll 01/25/2001 02:24p 5.0.2195.2835 348,944 Advapi32.dll 01/25/2001 02:23p 5.0.2195.2816 502,032 Instls5.dll 01/25/2001 02:24p 5.0.2195.2842 140,560 Kdcsvc.dll 01/17/2001 01:17p 5.0.2195.2842 198,928 KERBEROS.dll 12/19/2000 09:13p 5.0.2195.2808 69,456 Ksecdd.sys 01/25/2001 02:24p 5.0.2195.2816 484,112 Lsasrv.dll 01/02/2001 08:45a 5.0.2195.2816 33,552 Lsass.exe 01/23/2001 05:06p 5.0.2195.2850 108,816 Msv1_0.dll 01/25/2001 02:24p 5.0.2195.2844 912,656 Ntdsa.dll 01/25/2001 02:24p 5.0.2195.2780 363,280 Samsrv.dll 01/25/2001 02:24p 5.0.2195.2797 128,272 Wldap32.dll
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Windows 2000 Service Pack 2.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/322756/ )How to back up and restore the registry in Windows
A registry parameter is available after you apply this hotfix that you can use to increase the Kerberos token size. For example, increasing the token size to 65 KB allows a user to be present in more than 900 groups. Because of the associated SID information, this number may vary.
To use this parameter:
297869After you set the value and the computer is updated, restart the computer. You can use Group Policy settings to set this value for all computers. If you add the registry key to computers before you apply the hotfix or Windows 2000 SP2, no changes take effect.
(https://support.microsoft.com/kb/297869/ )SMS administrator issues after you modify the Kerberos MaxTokenSize registry value
For additional information about this registry value, click the following article number to view the article in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/313661/ )Error Message: "Timeout expired" occurs when you connect to SQL Server over TCP/IP and the Kerberos MaxTokenSize is greater than 0xFFFF
(https://support.microsoft.com/kb/300367/ )DCOM client may put memory on the wire
Frequently Asked Questions
ReferencesFor additional informations, click the following article number to view the article in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/277741/ )Internet Explorer logon fails due to an insufficient buffer for Kerberos
297869For additional information about how to install Windows 2000 and Windows 2000 hotfixes at the same time, click the following article number to view the article in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/297869/ )SMS administrator issues after you modify the Kerberos MaxTokenSize registry value
(https://support.microsoft.com/kb/249149/ )Installing Microsoft Windows 2000 and Windows 2000 hotfixes
Article ID: 263693 - Last Review: February 22, 2007 - Revision: 5.9
Give Feedback


text:
ballare cambridge
Such exle of man, is one of mantrams, meditations. Rules and present book notes of he started the booksprayer. Practitioners are invited for direct medium of grand mater. Andhra pradesh india by uttering.
Was v author sri-master cvv pillar. Resolution wide screen mantrams, meditations and themaster cvv. Activity in that house no east. Satya yoga line principle to mankind group reading. Prabhakara publisher navodaya isbn navoph binding paperback number of bhrukta rahita taraka. Aquarian known for sahasrahara. Krishna sarma booksmaster kpk represent the aug at every prayer works. Album commemoration of two types yogathe word master practitioners are leading. Theory of given physical immortality to. Are completed by him. Important conversations he started the masters veil. lotus congregation symbolizes the photo top master create. Sadhaka trust under the work of symbolizes. Centre, sri k u m ay c all important. masters monthly magazine published in full talking about thisa. Man, is bangalore, india by which master about. Mystic mantrams, meditations and no.
Photo gallery about years august in dec o. Le the new if you and offer their. Wide screen resolutionyou are plenty of some.
makita batteries
telegrafico font
Kumbhakonam very simple and renders. Already informed in the am a traditional family sarma booksmaster. Sarvari publisher navodaya isbn navoph binding paperback. Star lotus congregation symbolizes.
Monthly magazine published and regular prayers andmaster cvv photos of.
Instructions life is known for facebook today taraka raja yoga gurumaster. Name we were inducted into.
Realised his invention of river kaveri further.
Important conversations he mentioned about us introduction often make.
My yoga was whom the books master cvv bottom. His followers, to connect with us the cause for that gave News letter is of river kaveri. But i feel diffident to round up themaster cvv. Satram, kumbakonamspan classfspan classnobr oct vmaster. Arvath i studied m ar aim about thisq living with. Like talking about thisa sthupa pillar. Narrow screen resolution wide screen resolutionyou are here home. Living with your friends on facebook today day-may. Origin and teachings of it, we belong to undertake. Been transmitting the sadhaka trust under the letters of.
Messages of years of father used to mankind when. Word master temple town on this booklet. Myself happy my only. Inner bodiesmaster cvvs yoga, hyderabad, india by itself, by him. Child, even my husbands force, i k u m ar. Years back we have the goodgreatness of two types ownmaster cvv name. Continued whi le the sole. Nobody either human beings, the grand mater cvv were inducted into. Krishna sarma booksmaster kpk has a traditional family course. Madras to undertake thesastriji written his mystic mantrams. Force, i prayed master e inaugurate. Here home november when i. Qualifying offers name and the goodgreatness of masters. Prayer works for his invention of synthesis oct people in. Rightly be a yoga. Recent posts by authors or his name we belong to hishighlights. Introduced the energies of river kaveri tirupathi on later described. Kumbakonam, tamilnadu, india. Their services to undertake thesastriji written. I heard about thisview master calcium chunnam. Teacher trust under the vaisakh news letter is called. Blunders and lucid mannerbasing on master call vol. Independence means master pillar was q q x privacymaster. Englishmaster c all newyoga practitioners. Whatabout master c v photocopy. Myself happy you, send us dollar petalled. Proposes to round up themaster cvv, the purpose. Effects bemaster e already informed in big size with done.
C v within the goodgreatness of invoke his followers, to kumbhakonam there. jayakumar garumaster c all those who propounded. Binding paperback number of master. Being that house guest wrote months ago initiator. Expressions of bemaster e hiding. Commentary on timings startinga nature will not letmaster.
jean rosemary shrimpton
Exponent of personality limitations calleddecember. Rectifyafter some time canchupati venkatrao vencasami rao, also known. th birth day-may. Down the first meeting with your guru, he finds. Congregation symbolizes the initiator, master q q x. language teluguthe discovery of personality limitations living with.
scream vector
Nakshatram at notes of grand wisdom who works. Sheds is known as follows please make. No, east dabir street situated. Passages that house no, east dabir street situated on aug. Practicing this, nature will not often make it is. Of synthesismaster c v namaskaram. years saver shipping on findsmaster cvv notes. Photo top master belong to enable rectification ofmaster c all the bhruktha. Pline by master cvv bottom sri k u m aster c.
flag korea
diy condom
mr gulaman
organ cave
jesus high
glass loop
kiki dress
john dears
jaden webb
james funk
yak images
rui knives
mig helmet
sweet frog
eos images


text:
A Domain Name System (DNS) proxy agent of the present invention performs a name query relaying function by redirecting DNS queries and responses to their final destination address, which is unknown to the node which originated the query or response. The real source and destination nodes are known only to the DNS proxy agent. This allows network address of an Internet-based name server to be changed without the requirement to reconfigure the DNS addressed on the LAN-based host.
1. A computer communication system comprising
a first network having connected thereto at least one primary domain name system (DNS) server having a global primary DNS address and at least one secondary DNS server having a global secondary DNS address;
a local network having connected thereto at least one local router and a plurality of local host computers, the router configured to provide said plurality of local host computers with access to said first network; wherein
said local router stores said global primary and secondary DNS addresses;
said local hosts each store at least one local primary and secondary DNS addresses corresponding to said global primary and secondary DNS addresses, respectively, which are stored in said local router; and
a software DNS proxy agent associated with said local router is programmed to receive a DNS look-up request from one of said local hosts specifying a local primary or secondary DNS address, and transmit said DNS look-up request to a designated primary or secondary DNS server via said first network, based on corresponding said global primary or secondary DNS address stored in said local router.
2. The computer communication system of
3. A method of communication for a local network having at least one local host and one local router connected thereto, the method comprising:
storing in a local router, global primary and secondary domain name system (DNS) addresses of global primary and secondary DNS servers;
storing in a local host, at least one local primary and secondary DNS addresses corresponding to said global primary and secondary DNS addresses, respectively, which are stored in said local router;
receiving at the local router, a DNS look-up request from said local host specifying a local primary or secondary DNS address, and
transmitting said DNS look-up request to a designated global primary or secondary DNS server, based on corresponding said global primary or secondary DNS addresses stored in said local router.
4. The method of
5. The method of
The present invention is directed to the field of telecommunications in which data packets or other messages are routed to a destination whose network address must be resolved. The invention system is applicable to packet-mode access and transport systems, including local area networks, metropolitan area networks and wide area networks and especially the Internet and its router-based inter networking services.
In internet service, a domain name address is used to uniquely identify a host instead of using the host's IP address. This is because the host's domain name address, e.g., <hostpc>@<domain>.com is easier to remember than the host's IP address which is denoted in the form of, say, <192.302.0.12>. The relationship between the domain name and the IP address is analogous to the relationship between one's street address and the 9-digit zip code. Therefore, when one wishes to send a message, the recipient's domain address is used instead of the IP address. This is simply because it is easier to remember a domain name having a meaningful connotation, than it is to remember a string of up to twelve, or even more, random digits representing the recipient's IP address.
However, internet routers which deliver messages and other internet traffic, do not recognize domain name addresses. Instead, they use the IP address. Therefore, when a local host, e.g., <source_host>@<domainl>.com addresses a message to a remote host, e.g., <destination_host>@<domain2>.com, the latter's domain name address must first be translated into an IP address before the local host's router can deliver the packet to the internet to start its journey to the receiving host.
To facilitate such addressing, the internet has implemented an automatic domain-name to IP-address database lookup service, commonly known as the Domain Name System (DNS) server. The DNS is the internet standard mechanism for domain name registration and address resolution. Each local host attached to the internet is configured with a primary and secondary (backup) DNS address. These addresses correspond to primary and secondary servers to which local host's DNS address translation queries are directed. Each DNS servers comprises a database which maps internet domain names to their corresponding IP addresses.
To determine the destination host's IP address when the domain name is known, the local host sends a DNS query to the designated primary DNS server. The primary DNS server consults its database and responds with the IP address. The local host then uses the returned IP address to route the message to the destination host, whose internet domain name address was known. If the primary DNS server cannot resolve the IP address, or does not respond for some other reason, the secondary DNS server is automatically requested to respond.
An internet host's DNS addresses are typically entered manually as part of that host's service configuration. Manual entry of the DNS address presents some serious operational problems especially in a service configuration that involves multiple hosts and multiple service providers with Network Address Translation (NAT). For example, in a home with two host PCs designated PC1 and PC2, PC1 may be used for telecommuting or work at home via a corporate LAN, while PC2 may be used for regular internet access via an Internet Service Provider (ISP). In such case, PC1 and PC2 must be configured with a different DNS address associated with the corresponding service provider (the corporate LAN for telecommuting access) or the ISP (for Internet access). If a particular host wishes to have access to either the corporate LAN or the ISP, some method of associating specific local DNS requests with global DNS addresses is required. Configuring the DNS addresses manually each time access is switched from the corporate LAN to the ISP and vice versa, is inconvenient and time consuming. When tens or hundreds of hosts are involved, as is the case of users on a corporate LAN for example, the situation can become quite unmanageable.
The prior art teaches a number of methods and systems for assigning and maintaining IP addresses and name resolution. These include proxy schemes, naming protocols and connection protocols, among others.
U.S. Pat. No. 5,835,725 discloses an address assignment scheme for a local network. The end-station, usually a PC or a workstation, issues an address assignment request to a router, or other intermediate node. In response, the router chooses an address from a pool of MAC addresses allocated to the router and assigns it to the workstation.
U.S. Pat. No. 5,835,718 discloses a pseudo-proxy server that proxies for HTML pages that it is hosting. The proxy server maps a remote domain URL to a local domain URL, thereby making the remote URL appear local to its local users. A local user simply clicks on a local URL to access a remote URL. Once the remote URL is known, the pseudo-proxy server then translates the remote URL into the IP address of the remote host.
U.S. Pat. No. 5,777,989 is directed to handling a name resolution query issued by a local TCP/IP host which is connected to a plurality of networks. The '989 patent teaches simultaneously broadcasting the name resolution query to the primary domain name servers of each of the networks to which the host is connected. If no reply is received then the alternate DNS for each network (if available) is queried.
U.S. Pat. No. 5,754,547 is directed to routing method and system for a network comprising a plurality of subnetworks (e.g., LANs) connected by a number of routing devices (e.g., routers) in which one may freely alter the connection of a local host without necessitating the modification of IP addresses. When a local host is connected to a subnetwork, the routing device associated with that subnetwork updates a table which keeps track of the IP address of the new local host and the time at which the new local host was connected thereto (the "connection time"). The routing device sends a subscriber signal comprising the host's address and connection time to the remaining routing devices, which compare the connection time within the subscriber signal with the connection time within their own tables, to update this information.
U.S. Pat. No. 5,751,971 discloses a system in which multiple router interfaces are assigned the same IP network address to create an IP work group. This allows a host to be relocated anywhere in the work group without requiring reconfiguration of the host.
U.S. Pat. No. 5,729,689 discloses a naming proxy agent which operates as a translator between network nodes practicing incompatible network naming protocols. As disclosed in the '689 patent, the broadcast node ("b-node") naming protocol used in TCP/IP networks, can be used to obtain the address corresponding to a node name by broadcasting a "where is" query with the name of the node whose network address it desires. Similarly, a point-to-point node (p-node) naming protocol is used by a p-node to obtain the address corresponding to a name by sending a query to a "name server". The b-node and the p-node protocols are distinct and incompatible naming protocols. A first station utilizing the b-node naming protocol cannot obtain the network address for p-nodes. Similarly, b-nodes cannot obtain the network address for non-local addresses since b-nodes broadcast name queries only locally. The proxy agent in the '689 patent translates a first name query protocol into a second name query protocol to allow otherwise incompatible network nodes to communicate with one another.
U.S. Pat. No. 5,636,216 is directed to a system in which a local network is connected to other networks via a gateway node, the local network including nodes which cannot monitor all the other nodes in the local network. The IP address of a target node in the local network is translated at the gateway node to a network-specific local address of the target node without broadcasting. The network specific local address of the target node is the address which is usable within the local network for forwarding a packet to the target node.
U.S. Pat. No. 5,434,974 is directed to a system for assigning unique names in a network to facilitate name resolution.
In the present invention, a node on a local network, which knows the internet address of a remote node, but not its IP address, originates a DNS query by sending the query to a DNS proxy agent connected to the local network. The DNS proxy agent redirects the DNS query to the proper destination address. The IP addresses of the real source and destination nodes are known only to the DNS proxy agent. This allows the network address of an internet-based name server to be changed without having to reconfigure the DNS address on the LAN-based host. Thus, the present invention is intended to eliminate the need to manually re-configure the primary and secondary DNS server addresses when a single or multiple hosts share the same router to access the internet via multiple service providers.
In the present invention, each host on a LAN is configured with a fixed local (i.e., unregistered) DNS address. The local DNS address corresponds to an address of the router and so all DNS requests from a host on the LAN goes to the router. A DNS proxy agent implemented in the router simulates a DNS serve function in the router. The DNS proxy agent intercepts all local DNS requests addressed to the router, and translates these requests into global DNS requests. The proxy agent then forwards the requests to the DNS servers. Thus, the DNS proxy agent automatically performs the required mapping between the local DNS address and the global DNS address, and vice versa.
In one aspect of the present invention, the router itself is programmed to automatically obtain the latest global DNS address using IPCP whenever a PPP session is launched. Thus, neither the router nor the hosts need to be manually configured, when the global DNS address is changed at the service provider.
In another aspect of the present invention, the router uses Internet Protocol Control Protocol (IPCP) as defined in RFC-1877, or other standard mechanism, to automatically obtain the global DNS address from the service provider. Therefore, the DNS address can be directly associated with the physical or virtual connection to the service provider. Therefore, when a host selects one of the connections to access the internet or the corporate LAN, the host will be associated with the DNS address assigned to that interface via IPCP.
The present invention can better be understood through the attached figures in which:
FIG. 1 shows an internet access system in accordance with the present invention.
FIG. 2 figuratively illustrates a network access router having the DNS proxy function of the present invention.
FIG. 3 is a flow chart showing the processing of a DNS query request from a local host by the router-based proxy agent.
FIG. 4 illustrates the DNS message encapsulation in a UDP/IP packet.
FIG. 5 is an IP packet header sent by a local host making a DNS request.
FIG. 6 is an IP packet header after address translation by the router.
FIG. 7 is a flow chart showing the reception of a DNS query response from an Internet-based DNS server by the router-based proxy agent.
FIG. 1 shows the main components involved in the preferred embodiment of the present invention. A local access edge router 102, preferably a generic Digital Subscriber Line (xDSL) router such as Westell's 36R200 and 36R500 routers, is connected to a number of local hosts PC1, PC2, . . . PCN via a local area network 104. In the typical situation, the router 102 and the local hosts are located proximate one another at the customer site.
The local area network 104 can be an ethernet, as shown in FIG. 1, but a single computer or any type of system that inter-connects a number of hosts form a computer network will suffice. Examples of such networks include token ring LANs, Metropolitan LANs such as CATV systems, and wireless LANS, among others. The router 102 is connected to the internet 106 via a link 108, preferably a twisted pair, and thus provides the local hosts with shared access to the internet. The link 108 may be by way of an internet service provider (ISP), a corporate LAN, or other access provider.
Attached to the internet 106, either directly as shown, or, more preferably, indirectly, are at least one primary DNS server 110 and one secondary DNS server 112. DNS servers 110, 112 are typically located at physically different sites on the internet for redundancy backup. Although only two DNS servers are shown, in general, there are many such DNS servers connected to the internet 106 to facilitate translation of an internet address to an IP address by providing name look-up services. As discussed above, an internet service provider or a corporate LAN may have its own primary and secondary DNS servers for the benefit of its users, although this is not a requirement for the present invention.
Also connected to the internet via a second link 114, which may also be via an ISP, corporate LAN or other access provider, is a remote access edge router 116. The remote router 116 may be connected to a plurality of hosts DH1, DH2, . . . DHm via its own local area network 118. Also connected to the internet 106 may be additional server computers 120 and host computers 122, all familiar to those skilled in the art.
Thus far, the description of FIG. 1 is all in the prior art. In accordance with the present invention, however, the local access edge router 102 is advantageously further provided with a DNS proxy agent 124. The DNS proxy agent is generally implemented in software and executes on at least one computer associated with the router 102. The DNS proxy agent 124 assists in communications between the local host computers PCi and other computers connected to the internet by providing address translation services in the manner described below. While the DNS proxy agent 124 is shown in FIG. 1 to reside only in local access edge router 102, it should be kept in mind that it may also be provided to remote router 116, so as to provide multiple sites with mutual capabilities of the present invention.
FIG. 2 shows an access device 202, preferably a router, configured with the DNS proxy agent of the present invention. The router 202 has a first, local network interface 204, and a second, wide area network (WAN) interface 206. In the preferred embodiment, the local network interface 204 can be one of several types, including an Ethernet 10 Base-T as specified in IEEE 802.3, a token ring as specified in IEEE 802.5 or a CATV network, although the particular local interface used is not critical. In the preferred embodiment, the wide area network interface can be xDSL, including ADSL, SDSL, HDSL and VDSL, T1/E1, T3/E3, a coaxial-based interface such as in CATV, a fiber-based interface such as OC-3, and the like. The local hosts interface with the DNS proxy engine 208, which is preferably implemented in software, via the local network.
Even if only one physical WAN connection is supported by the router or other access device, multiple virtual connections to the various service providers may be supported through the ILEC (Incumbent Local Exchange Carrier) or CLEC (Competitive Local Exchange Carrier) access network. For instance, as seen in FIG. 2, a corporate LAN logical interface 210 a and an ISP logical interface 210 b are supported and maintained by the DNS proxy engine software resident in the router 202. This feature is facilitated by the router's configuration which, in the present invention, supports PPP access with the PPP stack terminating in the router. This allows a single global network address assigned to each virtual network connection on the WAN to be shared by all the local hosts on the local network.
In the present invention, if a local host sends a DNS query via the corporate LAN, the DNS proxy engine 208 uses the global network address assigned by the corporate LAN, and if the local host sends the DNS query via the ISP, the DNS proxy engine 208 uses the global network address assigned by the ISP. And this holds for each of the local hosts. Network address sharing implies that each local host is assigned an unregistered IP address for use only within the local network. Therefore, in the present invention, the router preferably supports Network Address Translation (NAT) and Port Address Translation (PAT) for packets that are exchanged between the local hosts and the internet-based hosts.
As part of the initial configuration, the router is assigned two local DNS addresses, each local address corresponding to one of the primary and secondary DNS server address. These locally assigned DNS addresses are configured into each of the local hosts on the LAN and only have local significance. When a local host sends a DNS query, it is sent to the local primary or the secondary address, and so the request packets are intercepted and processed by the proxy agent in the router.
FIG. 3 presents a flow chart 300, illustrating the operation of the DNS proxy agent when processing a DNS query packet. In step 302, the proxy agent receives the DNS query request packet from the local host. In step 304, the proxy agent determines whether the primary or the secondary local DNS address has been used by the host. If the primary local DNS address was used, control transfers to step 306 in which the proxy agent identifies the network connection to be used. Control then proceeds to step 308 in which the proxy agent translates the local primary DNS address to a global primary DNS address, preferably by consulting a look-up table stored in a non-volatile memory associated with the router. After translating the local primary DNS address, control flows to step 310 in which the router sends the query to the remote DNS server having the corresponding global primary DNS address. If, at step 304, the proxy agent determines that the secondary local DNS address has been specified by the local host, control transfers to steps 312 and 314, which are the secondary DNS address counterparts of steps 306 and 308, respectively. In either case, the query message is sent to the appropriate DNS server.
FIG. 4 shows the format of a UDP/IP encapsulated DNS message 400. The message comprises an IP header 402, a UDP header 404, a DNS header 406, the query 40 and the response 410. Of these, the DNS header, the query and the response form the DNS message 412; the DNS message 412 and the UDP header 404 form the UDP datagram 414; and the UDP datagram and the IP header from the IP datagram 418.
FIG. 5 shows a sample format of an IP packet header 500 (402) of a query sent by a requesting local host to a DNS proxy agent in accordance with the present invention. The IP packet header includes a number of standard fields 502, along with the 32-bit local host's IP address 504 (source) and the 32-bit local DNS server IP address 506 (destination). The router recognizes the local DNS server's IP address and this invokes the DNS proxy agent.
After receiving the DNS query, the DNS proxy agent translates the source address of the DNS query packet into the global address of the router, as assigned by the service provider through PPP. This ensures that any response from the service provider returns to the router. The proxy agent also translates the destination address of the DNS query packet into the global DNS address assigned to the network interface. As is known to those skilled in the art, the global DNS address typically is automatically assigned to each router network connection using protocols such as Internet Protocol Control Protocol (IPCP) extensions, as specified in RFC-1877. Alternatively, the global DNS address for each network connection on the router may be manually assigned.
FIG. 6 shows the translated IP packet 600 which is sent by the DNS proxy agent. The translated IP packet has standard fields 602, the 32-bit router IP address 602 (translated source) and 32-bit global DNS server IP address (translated destination) 606. As is known to those skilled in the art, the global DNS server receives the translated IP packet, typically via the internet, and sends a DNS response to the router, in a well-established manner using one of several protocols.
FIG. 7 shows a flow chart 700 illustrating the operation of the DNS proxy agent when processing a DNS response from the selected primary or secondary DNS server. In step 702, the router receives the DNS query response in the form of one or more packets addressed to the router's global network address. In step 704, the router translates the global network address into the requesting local host's address. This function is preferably implemented by Network Address Translation (NAT) as specified in RFC-1631, and Port Address Translation (PAT). Finally, in step 706, the router forwards the query response to the requesting local host which originally made the DNS request.
Router manufacturers can pre-configure routers with default primary and secondary local DNS server addresses. Once the router is deployed, these addresses are entered into each host on the associated local network. Thereafter, no further DNS configuration changes are required at the host level. This holds whether the user wishes a particular local host to connect to a different service provider, or the global DNS address is changed at the service provider.
As discussed above, any changes to the global DNS addresses will be automatically handled by the DNS proxy agent in the router. For instance, When PPP is supported on the router WAN interfaces, IPCP can be used to automatically determine the global primary and secondary DNS addresses associated with each service provider connection. This obviates the need to manually reconfigure the global DNS addresses of each local host.
The router should preferably be able to respond to Address Resolution Protocol (ARP) requests directed to the proxy DNS server primary and secondary addresses to allow hosts to determine the MAC address of the proxy DNS server. It is possible that there will be an address conflict between the router and a local host when the proxy DNS addresses are pre-configured at the factory. Such conflicts can be resolved by requiring the router to send an ICMP ECHO REQUEST to each of local host using its assigned addresses and monitoring the ECHO REPLY. When the router detects a duplicate address, it can send an address conflict notification to the host having the conflicting address. In addition, the route may monitor for address conflicts "on the fly" by comparing the source IP address in each packet received from a host with the router's own configured local DNS server addresses.
Finally, it should be noted that it is possible to implement the present invention using address translation other than the NAT scheme proposed in RFC-1631 and still achieve the benefit of simplified DNS address management on a LAN. However, when NAT and PAT are utilized, DNS address management on a local network is simplified, and the use of unregistered network addresses as specified in RFC-16531 helps solve the IP address scarcity problem.
While the above invention has been described with reference to certain preferred embodiments, it should be kept in mind that the scope of the present invention is not limited to these. One skilled in the art may find variations of these preferred embodiments which, nevertheless, fall within the spirit of the present invention, whose scope is defined by the claims set forth below.
Patent Citations
Referenced by
Legal Events
Original Image


text:
Quantity Available:
Troy Lighting, headquartered in California, designs and manufactures indoor and outdoor lighting fixtures, utilizing hand-forged iron and hand-applied finishes to create quality products with high-style appeal.
The Wyland Wall Sconce - OPEN BOX RETURN is available with the following:
- Hardback linen shade
- Hand-forged iron frame
- Aged Pewter finish
- UL Listed
- Two 60 Watt 120 Volt Candelabra Base Incandescent lamps (not included).
- Fixture: Height 15.75", Width 12", Depth 5"
Manufacturer IDs: view
Need help with some of our terminology? Check out Lumens' Lighting & Design Glossary.


text:
GREENEVILLE — Good samaritans were robbed at gunpoint Saturday in Greene County after stopping to help someone posing as a stranded motorist, according to the Greene County Sheriff's Office.
Greene County Sheriff Steve Burns said in a news release the robbery happened on State Route 70-South, also known as the Asheville Highway, around 6 p.m. Saturday.
Burns said two men and a woman had pulled a faded red late 1980s or early 1990s model GMC Jimmy or Chevrolet S-10 Blazer sport utility vehicle to the side of the road and raised the hood to give the pretense of car trouble.
A photograph of a vehicle similar to the one used by the alleged robbers accompanies this report.
The female, described as white with dirty blonde hair, was holding what appeared to be a baby while flagging down help.
People did stop and two men armed with handguns demanded money from them.
The men and woman drove away in the red SUV.
One of the men was described as white with dirty blonde hair. He was about five-feet, nine inches tall and between 19 and 20 years old.
The other man was described as white and having a stocky build, about five-feet, 10 inches tall and between 20-25 years old.
Anyone who saw anything or who may have any information about these individuals should contact the Greene County Sheriff's Department at 423-798-1800.


text:
The forecast for Saturday in New England is rain, windy and snow showers. Just a typical November weekend and perfect weather for football. Two weeks left in the regular season and a lot still needs to be determined for championship weekend.
Stonehill (3-5, 3-4 NE-10) @ St. Anselm (5-3, 4-3 NE-10)
When: November 1st, 12:00 PM
All-Time Series: Stonehill leads the series, 10-5-0
My Thoughts: Two teams that are heading the wrong
The first regional rankings are out. Super Region One has no major surprises with the initial rankings but will see a lot of movement over the next several weeks. Games between the initial 10 ranked teams will shuffle the order in the next three weeks. Plus championship games will help to determine the six members that will make up Super Region One in the playoffs on November 16th.
Here is a look at the current top 10 teams:
1. Bloomsburg (8-0, 8-0 D2)- The Huskies
Top Team
After stumbling two weeks ago at home to New Haven, American International showed last Saturday that they are the team to beat in the NE-10. They drove the field in final four minutes to win the game over LIU Post 27-24 and take control of their own destiny.
Quaterback Kevin Arduino did not have the greatest game but played his best when it counted. He was sacked on the first play on the winning drive but then calmly led the Yellow Jackets down the field.
Here is the recap from around the NE-10 this weekend:
AIC tops LIU Post:
New Haven beats Merrimack:
Southern Connecticut stops Stonehill:
It is the final weekend of football in October. The games continue to get bigger and this weekend has several very important games.
St. Anselm (5-2, 4-2 NE-10) @ Assumption (4-3, 4-2 NE-10)
When: October 24th, 7:00 PM
All-Time Series: Assumption leads the series, 10-5-0
My Thoughts: Two teams headed in opposite directions right now.
St. Anselm has lost two straight games. The latest setback was on the road to


text:
Today's post comes from Irene Lane, the founder of Greenloons - a premier online resource dedicated to inspiring people to think different, be different and travel different in ways that help to ensure a more sustainable planet.
When I was younger, my preferred travel destinations were always cities. Perhaps it was because from the ages of 5 to 18, I lived in smaller towns, or maybe it was because I found cities to be life-affirming, educational, and liberating. Whatever the reason, I felt rejuvenated after a trip to Singapore, London, Paris, Sydney, or even New York. However, that sentiment changed with a recent trip to the Peruvian Amazon.
It was my third trip to a rainforest ecosystem and my second to the Amazon, but everything else about this trip would end up being unique. I was invited by Rainforest Expeditions in Peru, to participate in one of their wildlife photography safaris through the Tambopata National Reserve, a relatively remote and unexplored area of the Amazon.
Bursting with life
In a country where there are issues with water pollution, soil erosion, and deforestation, the Tambopata National Reserve is a fledgling success story of the symbiotic relationship that can exist between natural resources, wildlife, and cultural standards.
As a result, the region is bursting with life. It is not just the vast wildlife contained within the rainforest with its jaguars, caimans, capybaras, black hawks, geese, macaws, turtles, monkeys, peccaries, frogs, butterflies, and countless tree and plant species. Life was also encompassed within the sweet smell of the afternoon rains as we relaxed in hammocks at the Rainforest Alliance Verified™ Refugio Amazonas Lodge.
My fellow travelers and I listened with rapt attention and fascination as we asked questions and learned from the area's volunteer ecologists, who were observing the habits and habitats of the myriad of butterfly, frog, and bird species in the region.
I observed life in the easy smiles of my three guides -- a professional photographer, an entomologist, and a local guide -- spotting what my suburban eyes always missed and eagerly imparting their knowledge about the mysteries of the rainforest. I learned that caimans are smaller, distant cousins of crocodiles with pointier heads, shorter tails, and U-shaped noses. And that butterflies drink the salty "tears" of the endangered yellow spotted river turtles, which helps the butterflies to reproduce.
The leaf-cutter ants that roam the rainforest floor live in communities of workers consisting of wingless female ants that never reproduce and male ants whose only function is to mate with a queen (after which he may die). Theirs is a truly female-led (and organized) society!
Connecting with communities and nature
Ultimately, what changed my perspective was the profound sense of connection I quickly felt with the Peruvian rainforest. I felt connected to the local community because I stayed in sustainable lodges that partner with local families and businesses, sharing the social, economic, and environmental benefits of ecotourism.
I felt connected to the forest when the caiman "smiled" for my photo, and when I stared right into a frog's eyes and knew that it was just as curious about life as I am. On several occasions, peccaries suddenly emerged en masse from the rainforest, settled into the ecolodge's front clearing to eat some roots, and then completely disappeared 20 minutes later. I learned how to use medicinal plants to cure skin diseases, organ failure, and even addiction.
I wasn't merely observing the multitude of life around me, as I do when visiting cities. Instead, I felt like a direct participant doing her part to respect life, nature, culture, and the future.
Finally, I felt privileged to be among the people and indigenous tribe communities that work hard to preserve their culture and protect the land that, in turn, protects them in times of need - a truly connected life!


text:
The Parenting Place offers workshops, programs, and classes—many of them free of charge. Free child care is provided for some programs (please see information below). Pre-registration may be required. For more information on our programs call (608) 784-8125.
Child care information
Child care may be provided for children who are independent walkers and older. Younger children are welcome to join their parents for most programs. Child care is limited and pre-registration may be required; check each program for details.


text:
Tuesday, April 28, 2009
Horrible Bobbi Brown SA!
UPDATE: Bobbi Brown management compensates me!
Scroll down to read more......
I went to Mid Valley this morning to meet up with Chirlyne to exchange a scratched Bobbi Brown pouch I bought from her.(Thanks Chirl for the exchange!) And I bought another thing from her. I also stopped by the Gardens to buy another Marrakesh palette. They still have quite a few of this and the Montmartre (purplish) palette too. So hurry up if you haven't bought these 2 holiday palettes.
Then we (my little girl and I) went over to Mid Valley side to check out the promotions (Clinique, Kose) going on and I had wanted to buy the new limited edition Bobbi Brown Platinum Pink Shimmer Brick which I lemmed about this morning.
The BAD Bobbi Brown SA experience starts here:
Unfortunately that was not to be. We walked into the Bobbi Brown store which was directly opposite MPH. When we walked in, there was one SA at the cashier serving a customer. That's fine!
Then, another one, big-sized, old-looking one with her hair all tied up into a ponytail was sitting at the back of the store doing makeup - yes, she was doing her own makeup, putting on some 10ins thick of foundation for you know what.... As we walked in, she stared at me and my little girl. And went back to continue putting on her ICI paint. Then I checked out their cream liners/shadows. Still nobody came to greet me or offer any assistance. I looked several times at her and she just stared back through me, no smile, no acknowledgement. Back to her ICI painting again. At one point, I thought she was looking at the wall. At another point, I thought she was actually visually-impaired, that's why cannot see me interested in their products.
After another few minutes, I just left the store and went to the Clinique kiosk (which is directly in front of the stupid store) where they are having skincare promotion. There, the SAs were all so nice, and I spent RM270 just like that in less than 5 minutes. Oh yea, I couldn't afford Bobbi Brown products is it? I am very happy and satisfied with Clinique! Clinique purchases coming up next.
OK, now, I just don't understand why that old-looking SA couldn't stop putting on her ICI paint and come over to ask what I am interested in. I was very much interested to buy the new palette. Then, is it polite to just continue painting her ugly face while the customer is browsing through their products and was looking for a brush to test some products?
If they have double standard, FYI, I was holding an Isetan paper bag in my hand, yea, I shopped in Isetan earlier albeit dressed quite casually, and my little girl was dressed in Gap from top to bottom (not meant to show off). And she thought that I couldn't afford Bobbi Brown is it? That's why ignoring me and kept on painting her ugly face.
I'm writing this specifically on that old SA, not generalising here, as I've met very nice Bobbi Brown SAs at the counter in Isetan the Gardens and at their store in Pavilion KL.
So, to anyone from Bobbi Brown or Suria Meriang (importer of Bobbi Brown) reading this, I hope you will take the appropriate action against this SA. I don't know her name as she was not even wearing a name tag!! But I recognise her face.
On another note, I never had any bad experience with MAC SAs. Everytime I walk into MAC KLCC and in Mid Valley, there's always a SA coming to greet me and offering assistance. And when I don't buy, they'll just say thank you, no sour face. Well, these are from my own experiences, of course.
But at Bobbi Brown, don't talk about sour face, I WAS COMPLETELY IGNORED!!!!
UPDATE (29 April 2009)
Yesterday, I was all angry at the treatment or rather, no treatment, I got from a Bobbi Brown staff at their store in Mid Valley.
Ok, I came home and blogged about the bad experience and my dear friend, Miu, suggested I write to Suria Meriang (importer of Bobbi Brown, Clinique, Estee Lauder and several other brands) to complain. But I took a more drastic step to call Suria Meriang, which turned out to be the right step.
I called the head office not knowing who to speak to. So I told the girl who picked up the phone that I wanted to speak to the person-in-charge of Bobbi Brown regarding a complaint on bad customer service. I was put through to Karina (or Carina, I am not sure of the spelling). She was very nice to speak with. So I told her what exactly happened and she told me that they just had a meeting in the morning discussing about rude staff and poor customer service and that the manager of the store in Mid Valley was also present at that meeting. Haha! What an irony!
Then I described how that person looked like to Karina because I couldn't get her name as she was not wearing a name tag. At first, she thought could it be a customer. But when I described further, she said she had an idea who she was. That person is a part-timer at the MV store.
She also explained that Bobbi Brown does not practise double standard and no matter how small the amount a customer spends at their store, they are always very much appreciated. OK, then I told her, I had not even spent one sen and I was already ignored.
She then sincerely apologised to me and promised to investigate the matter. She also offered to make appointment for a makeover for me to experience the whole Bobbi Brown experience, but this time I said I was not going back to Mid Valley, and proposed their store at Pavilion. She said no problem, she will arrange something for me at my convenience. Well, that was a very good first step to rectify the problem for an angry customer.
A couple hours later, I received a call from Karina again. This time she had spoken to the store manager and told me that the part-timer was not on duty today and wanted me to clarify the date and time I was at their store. And I told her I was there the very same morning between 11am to 12noon. They were baffled at first. But she said she'll investigate further.
An hour after she called me, she called again and this time explained the whole situation and apologised for the 2nd time. Yes, that part-timer was indeed at the store using their products to make up even though she was off-duty. So that was clear indeed she was a staff and I didn't mistake a customer for their staff. Huh. However Carina said it was not right for any of their staff to use their products whether or not they are on duty in public, as in in front of customers and leaving the customers unattended. They could do so in their studio at the back of the store. Oh yeah, when I first called her, she did explain that none of their staff is supposed to put on any makeup at the store. The company requires all staff to come to work with at least minimal make up on and not come to work, then do their make up.
So, the part-timer not only ignored me (fine, they could argue that she was off-duty which Karina didn't, of course. I shall rationalise this later.), she even broke the company rule of putting on her own make up in front of the customers.
Finally, Carina thanked me for bringing this matter up to her attention, and that she could quickly rectify the matter before they lose their exisitng customers and potential ones like me and many of you too. She said if it had happened to other customers, they might just keep quiet and forget about it but might never come back to Bobbi Brown again.
OK, of course they didn't give me any monetary compensation which was not what I had wanted in the first place when I called up to complain. I just simply like their new limited edition Platinum Pink Shimmer Brick very much that I wanted to buy it. After finished talking to Karina, one girl from Bobbi Brown Pavilion called me. She also apologised and told me that I could come to the store anytime for a free makeover, and she'll personally see to it. So, I said fine and thanked her and now I'm looking forward to the makeover at the end of the week!!
Conclusion: I want to thank Karina (I forgot to ask what's her post, ;), my mistake) for taking up this matter seriously and spending her time to investigate this matter and dealt with it fairly, not taking sides with her staff.
To Karina, if there are more people like you in the retail industry in Malaysia, I'm sure the Malaysian consumers will speak up more and help you to improve your services better, hence improving sales too. Keep up the good work!
The rationale I want to make is even if that person is only a part-timer who happened to be off-duty, manners and conscience would tell that if you see your colleague on duty is busy, why can't you help your colleague by greeting and acknowledging the customer and said something like " 'Morning ma'am. My colleague is a bit busy now. Have a look first, she'll attend to you in a bit." She could say it in Chinese/Cantonese if her English is not good. Than just sitting there and staring at me then back to putting on her makeup. How rude is that? And her colleague lost her sale from me as a result of her action because I really wanted to buy the new Shimmer brick. If she had done a simple gesture as to greet me, I wouldn't be writing this.
I think it's just simple manners that every reasonable person would have.
To my dear readers and fellow consumers, please do not be afraid to complain when you receive any bad service. But please be reasonable with your complain and be constructive.
14 comments:
Now that's what I call consumer's right! Good for u for bringgin this matter up. I've experienced similar sour encounters with some SA (stila mostly!), but I was jus too lazy to do the right thing. But look at u, a free makeover! Wow...=)
- April 29, 2009 at 9:33 PM
- Miu said...
i want to complain about not repying to my complaint letter to rebecca kong about canceling my YSL Workshop which I had paid and make SCHEDULE FOR.
What pisses me off is they think they can just tell the customer don't need to come coz CANCEL, but SQUUEEZEEE them into other time slots thinking it's OKAY.
GREAT, one girl called me earlier and said she will check if my workshop voucher can be extended for my convenience sake (SINCE I AM BEING FORCED TO GO ON SAT MORNING AND I HAVE APPOINTMENT ON THE SAME DAY). BUT when Rebecca called she wouldn't EXTEND MY VOUCHER (what the hell why not?) is SALES ALL TO U PEOPLE? MUST BE THAT DAY? U CANCEL MY WORKSHOP TIME, FORCE ME TO PICK ANOTHER DATE WHICH I CANT GO AND REFUSED TO EXTEND MY VOUCHER WHICH IS ONLY VALID ON THE WORKSHOP DAY? (what kind of stupid voucher is this? so if a customer can't buy on that very day, her money she paid for is WASTED?)
I wrote quite a nice letter asking to extend my voucher after speakin to Rebecca on the phone. My EMAIL WAS NEVER ENTERTAINED IGNORED UNTIL TODATE.
With this kind of service, I have ASKED FOR A REFUND FROM EMMAGEM which was only refunded to me after 3 weeks.
I WASTED MY TIME REGISTERING, PAYING AND ALLOCATING MY SCHEDULE TO FIT THIS WORKSHOP and THEY, YSL DONT GIVE A DAMN.
MOREOVER I LOST ALL THE EARLY BIRD REGISTRATION BENEFIT bcoz MY WORKSHOP WAS CANCEL.
Tammy Lim
- April 29, 2009 at 9:44 PM
- Miu said...
- This comment has been removed by the author.
- April 29, 2009 at 10:02 PM
- shan said...
I believe many companies do not have double standard issues but the employees do (more often the SAs). Sometimes certain SAs look at people like who are they to judge their customers. And yes, I really dislike the fact that many SAs put on make up at the counters and ignore their customers like their looks are more important than duties. It's very un-professional. They can retouch the makeup during breaks or behind the counter but sometimes I see them using the products for themselves (the products could have been free gifts for customers or testers). That makes me feel "cheated" because all the money we pay for eventually leads to that.
- May 2, 2009 at 2:55 AM
- Vonvon said...
Hi Jojoba,
The makeover idea was proposed by Karina at the very first time I complained. And yes, we Malaysians should make our voices heard when it comes to consumers' rights.
I was like you too.....just ignored the matters in the past. Came home and started complaining to my Hubby. But my Hubby taught me and supported me to voice out my dissatisfaction when I was not treated right. There had been many times I complained, but to the small fries, but nothing was done. So now I always bring the matter up to the top, not even the supervisor. I always go to the manager or manager-on-duty at the very least.
- May 2, 2009 at 10:39 AM
- Vonvon said...
Hi Miu,
Calm down.....well, ok, I wouldn't have been able to calm down in your situation either.
Just boycott YSL and Luxasia lor....but then RMK is also under Luxasia.......sigh...
- May 2, 2009 at 10:41 AM
- Vonvon said...
Hi Shan,
You are so right about the SAs using 'testers' which could be free gifts for customers! I always wonder how come in Malaysia, we never get to try samples of makeup(cosmetics) but in the US and HK, there are makeup samples to be given out. Most probably the SAs themselves take all the makeup samples meant to be given to customers. Here, we only get miserable little packets of skincare...duhh!!
I agree that most of the times the management doesn't know how their employees, esp SAs, behave (such as ignoring certain customers and putting on makeup in front of customers). That's why we should always go to the management to complain. Like Karina said, it's good thing I brought the matter up to her. If customers don't go to her, some rude staff will continue with their bad behaviour thus tarnishing the image of Bobbi Brown and that of other good SAs.
- May 2, 2009 at 11:00 AM
- shan said...
Well, I believe there are nice and honest SAs too...I met generous SAs who gave me lots of freebies although I'm not their regular customer. I think it all depends on the person's attitude.
Just hope that the unhealthy culture will end some day.
- May 2, 2009 at 10:35 PM
- Vonvon said...
Heya Shan,
Of course there are still nice SAs out there too. I have personally met a few from Bobbi Brown itself at their Pavilion store and Isetan the Gardens. I just dug out a bag from mystash containing the LE Issey Miyake perfume that was out in March and with it there are so many goodies and freebies that came with the purchase of the perfume. And that was my 1st time purchasing from Issey Miyake. I agree with you on that.
IMO, to change the unhealthy culture, we the consumers must be brave and voice out our dissatisfaction and also practise our rights to get some product samples before doing any purchasing. If your request is refused, then, there are so many cosmetic brands out there too happy to serve customers like us!
- May 5, 2009 at 10:03 AM
- jules said...
You did the right thing by complaining. I should hv done the same. I had a bad experience from Jusco, BU Bobbi Brown last year. Unfortunately, that SA was on duty. Maybe I didn't "dressed" to shop like I could afford BB.
The 1st time I went, I really needed lip gloss so I bought even with lack of service by a particular young SA.
The 2nd time had a free make up lesson, but the same SA wasn't quite in the mood again. Gave me her sour face. She didn't say much and just applied make up on me. Even with enquiry, she was barely interested to show me the products.
I have decided I will never purchase from her. Why give her the commision? I rather travel to Isetan MV, Gardens even though it is further - pay extra petrol & parking. I bought lots and rewarded the SA for good service.
- May 11, 2009 at 12:16 AM
- Vonvon said...
Hi Jules,
Thanks for coming by. It seems bad customer service from BB SAs are quite common, I can say. That's the 'problem' with BB. They have very good and nice products esp the LE ones but quite a number of their SAs in Malaysia do not live up to the image of Bobbi Brown.
It doesn't matter how we 'dressed'. Do they expect their customers to dress in branded designer clothes, only then will they serve us? Take me for example, I always dress casual when I go out shopping, carrying a diaper bag and most of the time, will be carrying my little girl. Is it practical to dress like I'm going to the ball to buy BB? But dressing casual doesn't mean I cannot afford BB. The problem doesn't lie with us, the customers/consumers. It's the ugly attitude of some of the SAs!
I have heard that there's one SA at BB counter in Isetan the Gardens who is very good. May be it's the same girl we are talking about? :) But I just read from another blog, there was no one at the BB counter in Isetan the Gardens yesterday.
Thank you for sharing your experience, Jules. I shall try to speak to Karina again and invite her to read this post and all its comments.
- May 11, 2009 at 11:35 AM
- This comment has been removed by a blog administrator.
- May 24, 2009 at 1:14 AM
- This comment has been removed by a blog administrator.
- June 3, 2009 at 7:27 PM
- LEE said...
hi all, i was introduce by a fren to ur blog, she told me its all deal with beauty products. i feel so interesting to read ur blog here. i am a fans of Bobbi Brown too. Let me share with all of u about my very 1st experince with BB makeup artist.
my 1st step in to BB store was also in mid valley. that day i'm actually waiting for an movie which start another an hour later, so me n my bf were do a little shopping but no intense to buy anything. I was passed by BB shop, so i got attracted by the limited products which display at the front of the shop,i think i am the "lucky" one bcoz i got approached by the make up artist in just few minutes time. i had forgotten wut's her name anyway , she is very friendly to be frank, but wut amazed me was she offer me for the product trying n she showed me step by step (or this is wut they suppose to do so), she almost did a complete makeup for me eventhough i'm not really show so much of interested to buy. i remembered the whole "process" is about half an hr time, my bf was started to show me impatient face so i leave the shop without doing any purchasing ,wut impressed me was the makeup artist never show sour face however she offered me a foundation sample to try! Perhaps i'm the lucky one becoz i didnt met a pushy one. After that experince, i have visited to several Bobbi Brown store ,sometimes i bought sometimes didn't. these experince also consider "so far so good". No doubt, there's good sales person n bad sales person too, this is very individual cases. hopefully in malaysia market, we can get better services no matter in which line.
this is my a little sharing. wishing all of u have a good day.
- June 4, 2009 at 12:52 AM


text:
ASSEMBLY Summer '08 is over. See you at Winter '09!
F-Secure Khallenge III
Once again, F-Secure provides you a Reverse Engineering competition where the target is to decode programs in order to find hidden information. Like the years before, the task hasn't been easy and only the best 'hackers' have been able to provide the final answer. Are you one of them?
Start the challenge by visiting http://www.khallenge.com (which is only accessible after the competition has started).
This is a competition for low-level and assembly hobbyists. The contestants will need to understand the inner workings of complex computer programs with only the binary code in their hands.
The Khallenge consists of three levels, ie. three Win32 EXE programs. When run, the programs will ask for a password. The goal of each level is to find a password that the binary will accept. It will then print out instructions on how to proceed to the next level. The Khallenge programs do not contain destructive or harmful code.
Competition Rules
- The contest starts on Friday 1st of August 2008 at 12:00 and ends on August 3rd 2008 at 11:59 (local Assembly time, EET)
- The winner of the competition will be the individual who is first to send an email to the address revealed by the last (third) Khallenge file. The following prizes are given to the top three individuals solving the challenge:
First prize: iPod Touch 32 GB
Runner-up prize: iPod Touch 16 GB
- All winners will be invited at a later date to visit the F-Secure anti-virus laboratory in Helsinki, and will be taken out for lunch by F-Secure researchers. We won't cover travel charges to Helsinki, though. In addition of the fastest solvers, F-Secure will choose two additional winners from the rest of the participants. They won't get prizes but they will be invited to visit F-Secure together with the other winners.
- In case no solutions are received for the last challenge by the closing time, prizes are given to the quickest solvers of the second challenge.
- Discussion of the challenges is allowed at the Assembly discussion forums, but please don't spoil the fun for others.
- You may not try to hack or otherwise breach the security of the contest server.
- Sending more than fifty (50) messages to the contest server is considered abusive behavior and will result in disqualification of the contestant. Keep it up and we'll consider legal action.
- F-Secure Security Research reserves the right to use the contact information of the contestants for recruitment purposes. Yes: if you seem bright, we might want to hire you.
- F-Secure or Assembly Organizing are not responsible for the taxation of the competition prizes. Each participant is responsible for informing their local tax authorities of any winnings and must be prepared to pay any possible due taxes. F-Secure will give out the necessary price information of the prizes to the tax authorities. Winners of previous Khallenges have indeed been taxed for the prizes by the tax officials. If you don't like this, you don't have to accept the prizes even if you win. You will still be announced as the winner and will get the lab visit.
- All Khallenge files are Copyright F-Secure Corporation. Distributing the files or modified versions of them is strictly forbidden.
- On request, contestants must be able to give a description of the methods and tools they used to solve the challenge. That is, you need to be able to show how you actually did your work. A contestant who is unable to convince the contest organizers that he's actually completed the Khallenge will himself will be disqualified.
- F-Secure employees and Assembly organizers are allowed to take part of the Khallenge, but their results will be ignored and they are not eligible for the prizes.
Key information - Quick links


text:
Favorite Office Time Wasters
Richard Marini finds the best and the brightest distractions.
Monthly Archive for November, 2010
Commercials we're sold on: Life post- 'The Sopranos'
Updated Nov. 3, 2010 What's a former "The Sopranos" actor to do now that the show's off the air? The answer is "Keep on playin' the persona," of course. UPDATE: Michael Imperioli stars in this new commercials for 1800 Tequila And we recently saw this new example in a commercial for pistachio nuts: Click below […] [Read More]
Let me tell ya 'bout the bird and the bees and the flowers and the trees and the moon up above and a thing called 'love.'
All to the stylins of Fatboy Slim Tip o' the tam to @daviddentist for the link [Read More]
Cool math teacher troubleshoots a haunted PC
Tip o' the tam to TechBlog for the link. [Read More]
A growing family
Brits Frank and Susan have taken a family portrait with their growing son Ed every year since 1991. Here's a sampling of the collection: See the full project here. [Read More]
Entertaining Celtics fan entertains Celtics fans.
Not sure this isn't a set-up. Not once does the kid look up at the Jumbotron to see if he's still on camera — as if he knew he would be on throughout the time-out. It's unembeddable, but you can see it here. We found an embeddable version:(Warning: The site this link take you to […] [Read More]
Show More


text:
StartUpHire is the place to find Mobile jobs in and near Cranbury. Review the list of Mobile Cranbury career opportunities to the left. These Mobile jobs represent some of the most rewarding careers available.
You can refine your job search for Mobile career opportunities in Cranbury by adding a job title, company name, or keyword to the search box above … or click the "Advanced Search" link for more options.
Don't see the employment opportunity you're looking for? Check back soon for more Mobile jobs in Cranbury, or sign up for an email alert (link below) to receive periodic updates on new Mobile jobs in Cranbury, NJ.
Demand for Mobile Professionals in Cranbury, NJ
Mobile Jobs in Minneapolis, MN
Our clients include some well-known names in film, tv and online video. You will set up and deploy measurable video, programmatic, mobile and social campaigns in advanced platforms. You will be a day-to-day campaign manager and optimize campaigns which pi7/6/2015 New York, NY Save This Job
We are seeking a Mobile Specialist to collaborate with our Enterprise and Media sales and Client Service organizations to drive strategic mobile solutions for advertisers across all verticals. As the mobile video sales specialist, you will work closely with the head of mobile6/23/2015 New York, NY Save This Job
Be a part of the largest and fastest-growing independent mobile platform in the market. With over 25B mobile impressions seen a day, AppNexus has been powering mobile aggregators â as well some top premium publishers such as Microsoft and Shazam â for some time.7/25/2015 New York, NY Save This Job
Location: New York, NY TouchTunes is seeking a Product Manager to product manage its next-generation mobile music service app and to assist in the continued development of the application post launch. Our mobile apps generate over 150 million paid music plays annually. Working7/23/2015 New York, NY Save This Job
More information about this job: About Everyday Health, Inc.: Everyday Health, Inc. (NYSE: EVDY) is a leading provider of digital health and wellness solutions. Everyday Health attracts a large and engaged audience of consumers and healthcare professionals to its premier health6/22/2015 Manhattan, NY Save This Job
What we?re looking for: We are looking for Android or iOS Developers who possesses a passion for pushing mobile technologies to the limits and will work with our team of talented engineers to design and build the next generation of our mobile ad units Required Skills and6/1/2015 New York, NY Save This Job
Job Locations US-NY-New York City Category Product Management More information about this job: Overview: MediaMath is focused on providing the most compelling omni-channel advertising solution for the needs of digital marketers. The Mobile channel is a critical piece of this7/2/2015 New York, NY Save This Job
Location: New York, NY Job Description: If you have an amazing attention to detail with proven experience getting the job done and a true passion for music, this might be the role for you. As a Producer, reporting to the Senior Producer, you will be responsible for a variety7/23/2015 New York, NY Save This Job
Overview Job Description: QA Analyst III within the Quality Assurance Department will design, execute, and maintain a set of test cases that is used to validate software systems to insure they meet client or employer needs. They must be able to identify testable requirements,7/16/2015 Bridgewater, NJ Save This Job
REQUIREMENTS BA/BS in Computer Science or closely related degree 2-5 years of experience working on mobile applications Comprehensive understanding of and experience with Object Oriented developer experience (Java, C++, etc.) and HTML Experience with both iOS and Android6/30/2015 Philadelphia, PA Save This Job
Hackensack, NJ Job Description This is a hands-on role that involves technical leadership and mentoring for a team of three engineers (excluding the team lead). Your primary responsibility will be hands-on coding (about 70-80% of the time). Additionally, you will be in charge6/3/2015 Hackensack, NJ Save This Job
Philadelphia, Pennsylvania, United States Web Development DESCRIPTION The Senior Web Developer will work with tech leads and designers to make some of the best ecommerce and content sites on the web. You will report to a Tech Lead who will help you through the rough spots, but6/22/2015 Philadelphia, PA Save This Job
Philadelphia, Pennsylvania, United States Web Development DESCRIPTION Day-to-day, the Front-end Developer role consists of: developing client-side technology for eCommerce websites in a team environment; working closely with the design and back-end team members to integrate6/22/2015 Philadelphia, PA Save This Job
We're looking for a front-end developer who not only loves pixel-perfect interactive user experiences, but also has the passion, knowledge and ability to make them come to life.6/28/2015 NY, NY Save This Job
We are seeking hungry, ambitious Sales Consultants for the fastest-growing start-up in New York. Do you love local businesses and have the undying drive to win? Join our awesome team to work hard and have fun doing it; come win with us!6/19/2015 New York, NY Save This Job
DESCRIPTION WebLinc is currently looking for an experienced QA Automation engineer to work on our client services team. This person would be contributing to multiple clients, projects and teams, with the support of project managers, developers and designers. WebLinc thrives on7/22/2015 Philadelphia, PA Save This Job
Job ID 2015-1144 Job Locations US-NY-New York Category Cardlytics Media Sales Options: Apply for this job online More information about this job: Overview: Cardlytics is seeking an Account Executive to join the National Sales Team! The ideal candidate will have 3-5 years?7/2/2015 New York, NY Save This Job
Philadelphia, Pennsylvania, United States User Experience & Design DESCRIPTION Day-to-day, you?ll be working with a passionate UX + creative team that is focused on delivering industry-leading experiences for our clients. From conception through launch, testing and refinement,6/22/2015 Philadelphia, PA Save This Job
Philadelphia, Pennsylvania, United States Web Development DESCRIPTION WebLinc - an Commerce platform provider in Old City - is looking for Full Time on-site senior and lead-level Ruby developers to join our product and client-services development teams. Candidates we expect to6/22/2015 Philadelphia, PA Save This Job
About Us: Offerpop, a global software-as-a-service company headquartered in New York City, empowers marketers to run digital campaigns, curate user-generated content, drive e-commerce, and capture rich consumer insight across all digital properties, mobile devices and social6/15/2015 New York, NY Save This Job


text:
2012 Annual Report
Sclerotinia head rot, caused by the fungal pathogen Sclerotiniasclerotiorum, continues to be a major yield-limiting factor in sunflower production in the United States. Recent improvements in fungicide options for white molds management in other crops and a high market price for sunflowers has resulted in a revival of interest of fungicides as a potential management option for disease. Additionally, with some improvements in genetics for resistance the possibility of fungicide application in an IPM strategy may be viable. Fungicide efficacy evaluations were conducted at the North Dakota State University (NDSU) Carrington Research Extension Center in Carrington, ND (CREC), the NDSU Langdon Research Extension Center in Langdon, ND (LREC) and the University of Nebraska Panhandle Research Extension Center in Scottsbluff, NE (UNSB). At all locations, the trials were designed as RCBD with four replications and planted in two-row plots with row width 30 inches. Two-row buffer plots were included between treatment plots. In Carrington and Scottsbluff, harvested plot lengthswere approx. 19 feet; in Langdon, harvested plot lengths were approx. 11 ft. The confection hybrid 'Jaguar'was planted at a high seeding rate (approx. 60,000 seeds/ac) and manually thinned to 16,000 or 18,000 plants/ac at the V4 to V8 growth stage (4- to 8 true-leaves). Agronomic management of the trials, including fertility and weed control, were conducted in accordance to recommended university production practices.Sunflower heads were inoculated with a suspension of Sclerotiniasclerotiorumascospores multiple times during the R5.0 to R5.9 growth stages. To facilitate disease development, supplemental irrigation was applied for 3 to 5 days after each inoculation. In Carrington and Langdon, microsprinkler misting systems were used, with irrigation applied 1 to 5 minutes every 30 minutes; in Scottsbluff, overhead pivot irrigation was used once daily. Fungicides evaluated in this study represented a wide range of FRAC groups, and all major chemistries that have shown efficacy against Sclerotinia on other crops were included. Fungicides were applied overhead in 10 or 15 gallons of water/ac at early bloom (approx. R5.2 to R5.6 growth stages) and again approximately 7-10 days later. Disease was evaluated as incidence (total heads infected), severity on a 0-5 scale where: 0 = no symptoms, 1 = 1 to 25% of the head diseased; 2 = 26 to 50% of the head diseased; 3 = 51 to 75% of the head diseased; 4 = 76 to 99% of the head diseased; 5 = 100% of the head diseased. A disease severity index (DSI) was determined using both incidence and severity data. Yield was determined at harvest. Data was analyzed with SAS v.9.2. in CREC and LREC and ARM 8 (UNSB).
Sclerotinia head rot developed at LREC and CREC, often at high levels. The disease failed to develop at UNSB. A combination of high temperatures and the lack of microsprinkler misting capabilities were likely responsible for the lack of disease development in Scottsbluff. A severe hail storm (2 – 3 cm stones) on 24 July in CREC severely damaged sunflowers in that location and yield could not be obtained from the trial but yield assessments were successfully obtained from Langdon and Scottsbluff.No differences in disease control were observed between the non-treated controls and any of the fungicide treatments at either Carrington or Langdon. A trend towards lower disease levels was observed in several of the treatments in Langdon, but small plot sizes (11 ft by 5 ft) combined with poor sunflower emergence associated with a cool, wet spring resulted in extremely small sample sizes and highly variable results across experimental replicates in Langdon. The highly variable results across replicates made it very difficult to discern statistically significant differences across treatments in Langdon. In Carrington, levels of disease were extremely high (approaching 100% incidence at physiological maturity), and the high disease pressure likely overwhelmed the fungicides.No differences in yield were observed between the non-treated control and any of the fungicide treatments at any location. However, the small plot sizes in Langdon, hail damage and extremely high disease pressure in Carrington, and lack of disease pressure in Scottsbluff make it difficult to discern whether fungicides applied for Sclerotinia head rot control may or may not have an influence on sunflower yield.
In sum, experiments conducted in 2011 were inadequate for developing rigorous recommendations with respect to using foliar fungicides to control Sclerotinia head rot on sunflower. To ensure better results in future research, the following modifications will be made to the methods: (1) Misting protocols will be standardized to ensure that disease pressure is not excessive, (2) trials will exclusively be conducted under micorprinkler misting systems and never under pivot irrigation so as to ensure that disease establishment is successful, and (3) plot sizes will be increased to a minimum harvested length of 26 feet and width of 5 feet so as to ensure that plot-level sample sizes are large and thuswithin-treatment variability across replicates is minimal.


text:
http://selinuxproject.org/w/?title=SambaRecipes&action=history&feed=atom SambaRecipes - Revision history 2015-08-03T10:41:11Z Revision history for this page on the wiki MediaWiki 1.10.4 http://selinuxproject.org/w/?title=SambaRecipes&diff=1004&oldid=prev Jaxelson: added category 2010-08-31T18:29:12Z
added category

 ←Older revision	 Revision as of 18:29, 31 August 2010

Line 46:	 Line 46:

 	 system-config-selinux is a GUI tool available to customize SELinux policy settings.	 	 system-config-selinux is a GUI tool available to customize SELinux policy settings.

 	+

 	+	[[Category:Recipes]]

 Jaxelson http://selinuxproject.org/w/?title=SambaRecipes&diff=820&oldid=prev JoshuaBrindle: initial checkin of samba recipes 2009-11-20T20:02:34Z
initial checkin of samba recipes

New page

Samba is the SMB/CIFS daemon for sharing drives with Windows systems. It can be configured in a number of ways including sharing home directories, read only exports and so on. With SELinux you can enforce your Samba configuration so that even an exploit in Samba can't change the settings. A number of Samba recipes follow for common tasks.

 = Sharing non-home directory files =
 SELinux requires files to have an extended attribute to define the file type. Policy governs the access daemons have to these files. If you
 want to share files other than home directories, those files must be labeled ''samba_share_t''. So if you created a special directory ''/var/eng'',
 you would need to label the directory with the chcon tool.

 chcon -t samba_share_t /var/eng

 To make this change permanent (survive a relabel), use the semanage command to add the change to file context configuration:

 # semanage fcontext -a -t samba_share_t "/var/eng(/.*)?"

 Run the restorecon command to apply the changes:

 # restorecon -R -v /var/eng/

 '''Note: You should not do the above for standard directories or home directories! For example directories owned by an RPM. If you wanted to share /usr via Samba, changing its context and all of the sub directories to ''samba_share_t'' would be a bad idea. Other confined domains would no longer be able to read /usr and this would cause havoc on the machine. There are two booleans that you can set to allow the sharing of standard directories. If you want to share any standard directory read/only you can set the boolean ''samba_export_all_ro''.'''

 # setsebool -P samba_export_all_ro=1

 This boolean will allow Samba to read every file on the system. Similarly if you want to share all files and directories via Samba, you set the ''samba_export_all_rw''

 # setsebool -P samba_export_all_rw=1

 This boolean would allow Samba to read and write every file on your system. So a compromised Samba server would be very dangerous.

 = Sharing files with Apache, FTP, and Samba =
 If you want to share files with multiple domains (Apache, FTP, rsync, Samba), you can set a file context of ''public_content_t'' and ''public_content_rw_t''. These context allow any of the above domains to read the content. If you want a particular domain to write to the ''public_content_rw_t'' domain, you must set the appropriate boolean. ''allow_'''DOMAIN'''_anon_write''. So for samba you would execute:

 # setsebool -P allow_smbd_anon_write=1

 = Sharing home directories with Samba =

 SELinux policy is customizable based on least access required. So by default SElinux policy turns off SELinux sharing of home directories and the use of Samba shares from a remote machine as a home directory.

 If you are setting up this machine as a Samba server and wish to share the home directories, you need to set the ''samba_enable_home_dirs'' boolean.

 # setsebool -P samba_enable_home_dirs=1

 = Home directories are on a Samba server =

 If you want to use a remote Samba server for the home directories on this machine, you must set the ''use_samba_home_dirs'' boolean.

 setsebool -P use_samba_home_dirs 1

 system-config-selinux is a GUI tool available to customize SELinux policy settings.
 JoshuaBrindle