text:
On Tuesday evening, the West Texas High Comanches improved to 10-5 overall and 3-1 in District 6-1A by defeating the Booker Kiowas 16-6 in six innings up in Booker.
The Comanches jumped out earlym scoring four runs in the top of the first inning, then posted five runs in both the fourth and sixth innings while taking advantage of nine Kiowa errors throughout the game.
Senior Logan Hoff got the win on the pitching mound going five innings, giving up six hits and two earned runs. Hoff also had a homerun and two RBI's at the plate.
Wednesday evening the Sanford-Fritch Lady Eagles got into the District 1-2A win column by defeating the Bushland Lady Falcons 8-7 in Fritch.
The Lady Eagles will next host Childress on Saturday starting at noon
The Child Welfare Board is commemorating Child Abuse Prevention Month with a first-time event on April 23.
The board will be holding the first annual "No Excuse For Abuse!!" 5k fun run/walk for Child Abuse Prevention Month starting at 8 a.m. April 23, 2011, on Main Street in Borger.
The event is sponsored by Road ID. The race will start at from the park beside the museum on Main Street.
Registration for the event is only $25 for ages 10 and up.
Children under 10 can participate for free, but will need a registered parent with them in the race.
The Borger Fire Department had a busy day Wednesday. After fighting a fire on Chaparral Street early in the day, firefighters were in the alley of Pinehurst Street conducting prescribed burns as a way to keep those homes in that area protected from potential wildfires.
PAMPA-After a rough outing in Perryton on Saturday, there was plenty of curiosity in wondering how the Borger Bulldogs would respond when they took the field in Pampa on Tuesday to take on the District 1-3A leading Harvesters.
Fortunately it looks as if Saturday's loss lit a fire under the Bulldogs. The team put together a game that included good pitching, solid defense and hot bats to leave Harvester Field with a 13-5 win to end the first round of district play with a 2-1 record and going to 11-10-1 overall for the season.
Tomorrow the District 1-3A Tennis Tournament will get underway here in Borger with the JV matches expected to start at around 9 a.m. followed by the varsity matches getting underway around 10 a.m.
The finals are expected to start around 3-5 p.m., according to Borger Head Tennis Coach Jeff Pinkerton.
The Borger tennis team goes into the district tournament with plenty of momentum after performing well in their last three tournaments, as well as posting wins against the top players from Perryton so far this school year.
The West Texas Lady Comanches started district play with a loss to the Booker Lady Kiowas in Booker.
Yesterday afternoon in Stinnett, the Lady Comanches trailed the entire game. They were losing 8-3 after four innings, but they slowly crept back into the game.
Trailing 8-7 in the bottom of the seventh, Abby Summers hit a sacrifice to center field to knock in the tying run of Lanie Hazel who was on base with a walk.
Then, Sarah Kelly belted a base hit to center field to score Chay Sargent and give WT the win 9-8.
On Tuesday afternoon, the Pampa Lady Harvesters jumped out to a 3-0 lead in the first inning on their way to defeating the Borger Lady Bulldogs 8-1 in District 1-3A action. The loss takes Borger to 1-3 in district play and the team will next travel to Dalhart on Saturday to take on the Lady Wolves at 1:00 p.m.
C. Ruell Lowe passed away on Saturday, April 2, 2011 at his home in Ponca City, OK at the age of 72.Â
He was born on March 27, 1939 in Butler, Okla., to his parents Herman and Mable Lowe. He taught industrial arts at Borger High School for 14 years and worked at Conoco-Phillips as a piping designer for 17 years.
He was preceded in death by his parents, Herman and Mable Lowe, and his sisters, Jonnie Johnson and Margy Douglas.
Early this morning a house on Chaparral burst into flames.
The fire started around 7:50am, caused by a still burning stove that caught the attention of the occupant. Borger Fire Marshal Jerry Langwell stated that there were no injuries to the occupants, although a family pet was killed.
The mother and her small child escaped the blaze and called the fire department. He also stated that there were about 14 fire Fighters on the scene with two engine trucks, one ladder truck, and two chief vehicles. The fire was contained in about 15 minutes and completely extinguished with in 30 minutes.


text:
A summarised guide to the Affirmative
Action (Employment) Act (Act 29 of 1998)
published and distributed by
Namibia Institute for Democracy
Updated 3rd Edition
© April 2000
All rights reserved
Contents by Dr.J.W.F. van Rooyen
Namibia Institute for Democracy
53 Independence Avenue
P.O. Box 11956,
Windhoek, Namibia
Tel: (061) 229117/8
Fax: (061) 229119
E-mail: email@example.com
The writers of the Namibian Constitution perceived a need for affirmative action as a necessary condition for bringing about change in a previously discriminatory society. Therefore Article 23(2) addresses the issue of affirmative action by stating that nothing contained in Article 10 of the Constitution shall prevent Parliament from enacting legislation providing directly or indirectly for the advancement of persons within Namibia who have been socially, economically or educationally disadvantaged by past discriminatory laws and practices. It similarly provides for the implementation of policies and programmes aimed at redressing imbalances in the Namibian society arising out of this unfortunate historic situation.
The Government of Namibia has, since then, frequently expressed its concern about the high rate of unemployment of previously disadvantaged communities, skewed income distribution and other human resources related shortcomings. The implementation of the Labour Act (Act 6 of 1992), was an important attempt to remedy the situation. A further major step forward has been the promulgation of the Affirmative Action (Employment) Act (Act 29 of 1998) which outlines measures that relevant employers are required to adhere to in order to ensure that persons in designated groups enjoy equal opportunities and are fairly represented in the various positions of employment.
In order to ensure the successful implementation of these measures it is of the...

subset: commoncrawl


text:
MHT Technology Ltd offer fully comprehensive training and demonstration days either on site or at our premises near Melsonby, Richmond, North Yorkshire. These days can be fully tailored to meet your needs. In addition to face-to-face training, MHT can now offer VTW Beginners and VTW Intermediate eLearning packages for their Tank Gauging Software. These can be accessed from anywhere in the world.
If you have any specific requirements for training please do not hesitate in getting in touch.


text:
For Immediate Release: March 13, 2012
Contact: Kim Keating, 603-646-2733
Today the Tuck School of Business at Dartmouth placed #9 in the annual U.S. News & World Report ranking of top graduate business programs. This ranking is based on a combination of surveys of deans and recruiters along with statistical indicators that measure placement success of graduates and student selectivity.
In the specialty rankings, Tuck was highlighted as a top school in the management category. This portion of the ranking is based on ratings by educators at peer schools. Business school deans and program heads were asked to nominate programs for excellence in each of the specialty categories.
Tuck's performance in the qualities being measured by this ranking is indicative of the strength of its program. Also noteworthy is that Tuck had the 3rd highest average combination of starting salary and signing bonus among the business schools ranked.
For more information on this ranking and the methodology used, visit the U.S. News & World Report website at www.usnews.com.


text:
Winning the Peace: Army builds wellness farms-A A +A
A Walk in the Park
Thursday, April 24, 2014
A WELLNESS farm to fight insurgency.
This is one of the many nontraditional innovations of the military, particularly the 303rd Infantry Brigade, to winning the peace in Negros Occidental.
A 2.5-hectare farm, called the NEGROS FIRST-Army Wellness Farm, is productively located inside the compound of the 303rd Infantry Brigade (IB) in Brgy. Minoyan Murcia town.
Col. Jon Aying, commander of the 303rd IB, says the wellness farm, which adopts an integrated organic farming system, produces organic vegetables and raises poultry and livestock.
It is designed to cater to former rebels (FRs) who want to return to the mainstream society, he adds.
"We want to capacitate former rebels by teaching them organic farming and other means of livelihood, to ensure their sustainable sources of income when they re-integrate to the community," Aying explains.
The wellness farm at the military compound is being cultivated by a labor force composed of regular soldiers, members of the Civilian Armed Forces Geographical Unit (CAFGUs) and FRs.
Aying says satellite wellness farms are being established in the 1st, 5th and 6th districts of the province. "These farms will serve as learning and livelihood centers, especially designed to cater former rebels," he further explains.
In general, the wellness farms help ensure food security, basic income and sustainable livelihood for FRs, threatened witnesses, CAFGU Active Auxiliary (CAA) members, and individuals and communities highly affected by armed conflict.
The program recognizes economic capacity-building of the beneficiaries to become self-reliant and less vulnerable, with a projection towards their permanent settlement and production areas assured of protection from lawlessness and natural disasters, Aying adds.
The military said that despite the high economic state of Negros Occidental, the latest survey by the National Economic Development Authority (NEDA) revealed that it still belongs to the category of provinces with the lowest average family income in the rural areas, causing high poverty incidence in this side of the island.
The low income in rural areas results to low literacy among children as many of them are being pulled out of school to work in sugar plantations, the survey found.
This problem has resulted to inter-generational poverty and illiteracy. Accordingly, food insecurity is inextricably linked with poverty as one of the major root causes of violence that result to lawlessness and armed conflict, Aying says.
Negros Occidental remains as one of the top provinces experiencing the longest-running communist insurgency in the country, the military says.
Subsequently, some families joined the armed struggle and this has become an intergenerational practice, a source of food and income, and a way of life in a culture of violence, it adds.
As a response to this social predicament, the 303rd IB adopted a "Wellness Program" for FRs, threatened witnesses, CAFGU Active Auxiliary (CAA) members, and Army personnel.
It is based on an integrated framework consistent with the peace and development concept of the Provincial Peace, Integration and Development Unit (Pro-PIDU).
The Pro-PIDU, of which the 303rd IB is a member, is spearheading the campaign to address the root causes of insurgency in the province.
It adopts a systems approach towards sustainable peace-building through the transformation of communities along the different dimensions of conflict – personal, relational, structural, and cultural.
As such, all projects and activities are consistent with the NEGROS FIRST Agenda of Gov. Alfredo Maranon Jr., the social integration program of the National Government, and the Millennium Development Goals.
Under the Wellness Program, the Wellness Farming System has become Pro-PIDU's flagship project for the socio-economic enhancement of vulnerable communities through crop, livestock and poultry production to increase their income and promote diversity along with environmental sustainability.
The Wellness Farming System operates through a network of farms and gardens, designed for productivity and benefits of the focus-targeted beneficiaries.
Since the implementation of the project, a generated income of P300,000 gross sales was earned from vegetable farming, livestock and poultry raising for nine months.
The provincial government gave P1.5 million for the program in the preparation of land and development of facilities.
Aying acknowledged the help of various civil society organizations including the Kasanag and Alter Trade Foundation Inc, and various offices under the provincial government of Negros Occidental, for the sustainability of the program.
The NEGROS FIRST-Army Wellness Farm was awarded Outstanding Animal Raiser for Peace Advocate Partners, during the recently concluded 21st Panaad sa Negros Festival.
Published in the Sun.Star Bacolod newspaper on April 24, 2014.
Country News
Cagayan de Oro
Forum rules: Do not use obscenity. Some words have been banned. Stick to the topic. Do not veer away from the discussion. Be coherent and respectful. Do not shout or use CAPITAL LETTERS!


text:
Stuart reviews restrictions on parking in residential yards
STUART — The city of Stuart moved closer to finalizing amendments that define where and what type of vehicles can be parked on one's property.
Changes would allow for RVs and boats to be parked overnight in a driveway or a side yard without the requirement of an opaque gate to block the vehicle from public view. Single axle trailers and any commercial vehicle weighing less than 14,000 pounds also would be allowed. The proposals were announced at a city of Stuart commission meeting Monday night.
In the spring of 2008, the city approved a new property maintenance code that banned commercial vehicles, and forced residents to keep RVs and boats behind a gate on the side of the house or in a garage. Residents complained that the code was too stringent, and meetings with the City over the last few years led to alterations to the code. Some adjustments were approved in August 2011, and the latest changes could be added to the books by May.
"By and large, it's a bit more forgiving than it used to be," said City Development Director Terry O'Neil "But [it] still maintains requirements for keeping properties up, which keeps property values up."
The code still bans parking vehicles on grass. However, a variance procedure for hardships has been added to assist those who might not be able to afford an up-to-standards driveway. In situations where cars are parked in front of a home on a "historical area of the driveway" — even if the "driveway" is not made of concrete — the vehicles likely will not be considered in violation of the code. The parking or storing of inoperable vehicles remains prohibited.
Some residents who spoke at the meeting voiced concern that irregularly shaped lots, for example a property shaped like a triangle instead of a rectangle, could be cited for violating the code. Another worried that restrictions on boats and RVs would keep increasing. Commissioners also wondered how to define the word "inoperable."
O'Neil emphasized that the ordinance was not designed to nitpick, but instead to go after egregious violators that "really let go" on maintenance of their property.
One city commissioner noted the ordinance does not want to mirror the restrictions seen in Sewall's Point, the Treasure Coast town that's faced several contentious debates about property codes.
To park a boat or RV in the side yard, a hedge or some sort of opaque screen would need to divide the property from the neighbor's yard. The vehicle also would need to rest on approved material such as asphalt, concrete or pavers. Mulch would not be permitted.
The commission will have two more meetings about the ordinance before trying to approve them in a couple months. O'Neil said his group would take another look at the concerns voiced in the meeting, including how to handle irregular lots. But the city development director feels after two years of discussing the latest rules, they are about ready for approval.
"There may be some components we end up tweaking again," O'Neil said. "But this is probably it."
Subscribe to TCPalm.com and our Treasure Coast Newspapers
Need Help? Call us at 1-877-710-6180.
Monday-Friday: 6am-3pm / Saturday: 6:30am-10:30am / Sunday: 7am-11am


text:
Amanda Jone's father encouraged her to vote. That wasn't always an easy feat in Texas, but she did her best, paying poll taxes to vote for FDR and others. Now the 109-year-old daughter of a former slave has voted for the man who could become the first black president and she says, "I feel good about [it]."
Austin American-Statesman:
Jones' father herded sheep as a slave until he was 12, according to the family, and once he was freed, he was a farmer who raised cows, hogs and turkeys on land he owned. Her mother was born right after the Emancipation Proclamation was signed, [her daughter] Joyce Jones said. The family owned more than 100 acres of land in Cedar Creek at one point, she said.
Amanda Jones' father urged her to exercise her right to vote, despite discriminatory practices at the polls and poll taxes meant to keep black and poor people from voting. Those practices were outlawed for federal elections with the 24th Amendment in 1964, but not for state and local races in Texas until 1966.
Amanda Jones says she cast her first presidential vote for Franklin Roosevelt, but she doesn't recall which of his four terms that was. When she did vote, she paid a poll tax, her daughter said. That she is able, for the first time, to vote for a black presidential nominee for free fills her with joy, Jones said.


text: [ Man Drinks Bottle of Southern Comfort on YouTube – Has Becoming an 'Internet Sensation' Gone Way Overboard? [VIDEO] By Dennis and Judi August 5, 2013 You wonder what goes through people's minds when they sit down in front of the computer and make the decision to try and make a viral video. Great example is the man in this video who solicits people to send him in bottles of alcohol and he'll drink it in record time. Read More|Comment Category: Dennis & Judi, Polls, Popular Posts, Talking About . . . Tags: internet videos Send to a friend! Share on Facebook Share on Twitter Pin it! Reddit This! Share on Tumblr!


text:
McClelland's Acadian Ribbon in a MM spool.
McClelland's Acadian Ribbon in a MM spool.
Enjoyed a couple of smokes over the last few days- one of the 5 Vegas Classic torpedoes I mentioned earlier; medium, good, but not a standout. A Cusano 18 which burned nearly perfectly and was a very nice medium bodied smooth smoke; and a little splurge- bought a little Graycliff lonsdale while out and about Saturday....a little pricey, but a nice treat.
I finished the last stick of my box of A. Fuente Hemingway Signature Prefectos on the front porch after the sun set with a pour of JB Devils Cut. I really like these and have another box due to be delivered on the 13th.
I envy you guys with smoke shops in your towns as I have to order all my smokes.
Southeast New Mexico
I got in an online order today and ended up breaking out and Indian Tabac Tomahawk Maduro. It was ok. Not much smoke volume, not much flavor. I didn't hate it but I won't be buying more.
I'm gonna head to the shop this week and see if I can find any J Fuego products. I want to try those Origen Originals.
~Robert BTOTY #2 2009
GBS Member - 2011 Indoctrination
Last summer, 3 old friends and myself went 1/4s on a Pappy 20. Beginning Nov '10 and ending tomorrow, we all turn 40. 4 pours over 4 birthdays. So tonight we are celebrating my 40th, and the bittersweet ending of a wonderful bottle of bourbon. I will be enjoying a Fuente God of Fire with the last of the Pappy.
I just came in from the deck where I burned another one of "my little Cuban friends" that followed me home from Ramadi, enjoyed a little Thomas H Handy with it.........man am I feeling mellow right now!!
The big 4 0 . I had a smallish pour of ORVW 10/90 last night to get going. Then we each had our last pour from the Pappy 20. Magnificent, I swear it got better from its opening in Nov '10. I had a Fuente God of Fire specifically for the occasion, but things were running later than planned and it was rather large. A good friend had brought me a more manageably sized Fuente Opus X as a present. Lit midway through the Pappy and lasted through the few 10/90s that followed.
Tonight much more low keyed. Karen and myself on the front porch. I had a Cuban torpedo given to me awhile back from a well-traveled friend. It went nicely with the PHC10 that I had purchased for myself for this day.
I have certainly been spoiled the past few days with the selection of Bourbon and cigars, but you have to celebrate the big ones.
Samuel Gawith's Full Viginia Flake in a Peterson 312 pre-Republic
Due to the kindness of a fellow SB'er I found a care package in my mailbox. In it was a sample of Reid & Emerald #2 Willett 133.2 pf. Also there were three Habana cigars.
I sampled a Romeo Y Julieta Desde 1875 on my porch with a pour of Wild Turkey 101. The draw was tight but it was wonderful. It's been a long time since I was surrounded by the fragrant blue white smoke of a Habana cigar.
I am saving the Willett for this weekend. I have nosed it and it is intriguing. Can anybody give me some background on it.
Southeast New Mexico
Tonight after the sun set from another 104 degree day I enjoyed a pour of Beam Devil's Cut accompanied by a La Flor Dominicana Double Legero. That hit the spot but I am so ready for winter. It's been over 100 degrees for so long with no rain I've quit counting.
Southeast New Mexico


text:
Posts Tagged "education endowment foundation"
What should be the next government's top priority for education?
by Stephen Tall on April 17, 2015
'What should be the next government's top priority for education?' That was the question I was asked by the Association of Charitable Foundations for their April 2015 magazine, Trust and Foundation News, wearing my day-job hat as development director of (…)
How do we make education evidence-led?
by Stephen Tall on March 10, 2014
That was the topic up for debate on Saturday at the Lib Dem conference fringe meeting organised by CentreForum and the Social Liberal Forum. I was one of the four panellists – speaking with my day-job hat on – alongside (…)
The social divide of access to higher education: my take on what universities need to get better at. (Hint: EVIDENCE)
by Stephen Tall on January 24, 2014
I took part in the first 'Directors Debate' yesterday – on the real value and true price of scholarships in higher education – organised by the Council for Advancement and Support of Education at Senate House in London yesterday. We had 5 (…)
'What Works'? Here's what I wrote for the Guardian Public live-chat about putting evidence to use in schools
by Stephen Tall on December 4, 2013
I've written a fair amount about evidence-based policy over the past couple of years – check-out my posts here – partly linked to my day-job fund-raising for the Education Endowment Foundation, a charity which aims to increase the attainment of (…)
The Daily Mail, that Ofsted report, and setting for pupils: what does the evidence say?
by Stephen Tall on June 13, 2013
It's my own fault, I know, for looking at the Daily Mail: Put pupils in sets at 11 to help brightest, says Ofsted: Call for pupils to be separated to make sure top students don't slip back academically Pretty definitive, (…)
Evidence-based policy is now official government policy. So will they actually follow the evidence?
by Stephen Tall on March 4, 2013
As of today, I officially work for a 'What Works' organisation – the Education Endowment Foundation (EEF) – part of the 'What Works Network' Danny Alexander and Oliver Letwin are launching today. Here's the Financial Times report: A drive to (…)
A little bit about my job. A whole lot more about the importance of evidence-based policy and RCTs.
by Stephen Tall on November 23, 2012
A rare work-focused post follows… It's been almost a year since I started a new job, working at the Education Endowment Foundation. It's a new grant-making charity, a rare combination of a start-up with money (you can normally be one (…)
More on the 446 state schools where poorer children perform better than average (and where they're located)
by Stephen Tall on May 14, 2012
At the weekend I blogged the graph first published in the TES magazine highlighting research from the charity I work for, the Education Endowment Foundation, showing The 446 state schools where poorer children perform better than average. Well, we now (…)
The 446 state schools where poorer children perform better than average
by Stephen Tall on May 12, 2012
One of the biggest questions in education is the extent to which schools can make a difference to the lives of the children they teach. Put more fatalistically, if you're born poor does that mean you will perform poorly at (…)


text:
Narrow your search
Technically Incorrect: The Republican presidential candidate would even prefer an Apple Watch over apple pie. Can America cope with such heresy?
"Steve Jobs" sees Michael Fassbender take to the stage as the Apple co-founder.
Astronaut Samantha Cristoforetti pays tribute to a "Star Trek" icon with a cosplay photo in zero gravity.
The first poster for the new James Bond movie "Spectre" feels like a blast from the past as Daniel Craig boldly rocks a turtleneck.
The new James Bond film trailer picks up right where "Skyfall" left off, but this time it looks like the film will delve into the hidden darkness of Bond's past.
After weeks of back-and-forth argument, the judge in the now-settled iPod antitrust suit says never-before-seen footage of the late Apple CEO won't be made available to the public.
Six months before he died, Apple's co-founder and CEO gave a video deposition for a lawsuit over the iPod. The plaintiffs' lawyers refuse to release the video, even though it was shown at the trial on Friday.
Facebook CEO Mark Zuckerberg spent an hour answering questions from users of his popular social network.
We're big fans of cross-platform gadgets, which is why we're so interested in Microsoft's choice to make their new wearable compatible with Windows Phone, Android, and iOS. Could the experience sway users into switching to Windows Phone?
A fresh batch of Amazon Studios' pilot episodes have been put on Lovefilm, and await your judgement.


text:
Newgate Clocks KNI226AW Knightsbridge Wall Clock
Regular Price: £57.00
Special Price: £55.00
Newgate Clocks MILKBOT17 Milk Bottle Wall Clock
Regular Price: £35.00
Special Price: £32.00
Out of stock
Newgate Clocks The Putney Wall Clock
Regular Price: £95.00
Special Price: £92.00
Newgate Clocks FAPSETCH World Time Clock Set of 3 Chrome
Regular Price: £100.00
Special Price: £99.00
Out of stock
Newgate Clocks ICELOL18 Ice Lolly Wall Clock
Regular Price: £60.00
Special Price: £35.00
Newgate Clocks Quad Wall Clock
Regular Price: £110.00
Special Price: £105.00
Newgate Clocks ICECON50 Ice Cream Advertising Wall Clock
Regular Price: £80.00
Special Price: £70.00
Newgate Clocks BRIX392CH Brixton Wall Clock Chrome
Regular Price: £85.00
Special Price: £80.00
Out of stock
Newgate Clocks Ice Cream Factory Wall Clock
Regular Price: £57.00
Special Price: £52.00
Out of stock
Newgate Clocks COFCON50 Coffee Advertising Wall Clock
Regular Price: £80.00
Special Price: £65.00
Wall Clocks
We supply a wide variety of wall clocks suitable to hang anywhere in the home. If you're looking for a stylish new kitchen clock, our quirky Newgate wooden clocks are the perfect choice.
Add a retro, classy feel to your kitchen with the 'Juice Bar' wall clock from Newgate. The vintage styled design was inspired by the promotional clocks often found in bars and cafes during the 1950s. Metal hands curve with the profile of the clock for a beautiful finish.
Wooden Clocks
Our wooden clocks look elegant in all kitchen, dining, lounge and office areas. Choose from a wide range of sizes and designs, including traditional Roman clocks, which feature Roman numerals for a classical look. Many of our Roman clocks come with a wooden case and glass lens to protect the hands from any dirt or damage. Just one AA battery will keep this stylish wooden clock ticking for weeks on end.
If Roman isn't your style, then why not take a look at our selection of Arabic clocks? The Newgate electric Arabic wall clock has an iconic 1940s – 1950s design that almost looks like an old school clock. Bold, easy to read numbers and a glossy brown frame make this wall clock an ideal gift or kitchen treat.
Alarm Clocks
Our Newgate Convent Garden alarm clocks come in a number of colours and sit beautifully on any bedside table. The traditional bell hammer alarm clock is perfect for helping you rise and shine. Add a touch of glamour to your bedroom with our timeless, vintage alarm clocks.
Newgate Clocks
Newgate are a British company specialising in creating iconic clock designs. Many of their clocks are influenced by classic, vintage styles, and combine retro and modern features. This makes each design perfect for both traditional and contemporary styled homes.


text:
Posted on 07 August, 2012 | No Comments
News from HispanicBusiness.com:
Add this to the list of awkward questions you reserve for potential dates and mates:
So, how about those student loans?
About 37 million Americans are weighed down by college debt, according to a recent report from the Federal Reserve Bank of New York. Twenty-seven percent of those students and ex-students also have past-due balances.
The loans, whether they are his, hers or collectively his-and-hers, can be toxic for budding romances or new marriages.
When Allison Marek, 26, finishes the graduate school of social work at the University of Houston next spring, she will be roughly $ 60,000 in debt.
"I was brought up believing that you have to have your own stuff together — you have to be stable financially and emotionally — before you can engage in a serious relationship and get married," says Marek, who is single. "Student loans are one reason women are so focused on their careers today. They have to be to pay off their debt."
Timothy Hanna, 25, owes $ 24,000 in student loan debt, and he expects to pay it down at a rate of $ 400 a month for the next five years.
Today Hanna works for a valve-distributing company and lives……………. continues on HispanicBusiness.com
Related News:


text:
Top Definition
a girl who likes to stir shit up, just for the purpose of causing drama.
1) ''she's such a whisk, all she does is stir shit up''
2) ''did you see all the facebook fights the whisk started? shit-stirrer much?''
2) ''did you see all the facebook fights the whisk started? shit-stirrer much?''
viết bởi ogogtripleog 26 Tháng sáu, 2011
a shorter term for the word "whisker" meaning a cigarette or to smoke a cigarette.
"Wanna go to Mando's house and whisk?"
"Hey Kamil can i get a whisk?"
"Who's got the whisks?"
"Dude Amir, I'm dyin' for a quick whisk."
"Lets get a pack of whisks."
"Hey Kamil can i get a whisk?"
"Who's got the whisks?"
"Dude Amir, I'm dyin' for a quick whisk."
"Lets get a pack of whisks."
viết bởi whiskerking 08 Tháng bảy, 2009
to shave the pubic hair off of your vagina, or cutting trees down.
Boy: What took you so long?
Girl: OMG SORRY, I had to go whisk in the bathroom.
Girl: OMG SORRY, I had to go whisk in the bathroom.
viết bởi Jintzo 30 Tháng tám, 2012
Household appliance, also seeming to be very insulting if mentioned to males.
"How's that whisk going for you?"
viết bởi sakubambu 19 Tháng chín, 2007
See: Whiskey Tango. A shortened term which is less conspicuous when used in earshot of the offending whiskey tango.
Pete: "Dude look at all the whisks standing by the trailer!"
Rob: "Sooo whisk... that one has no teeth!"
Rob: "Sooo whisk... that one has no teeth!"
viết bởi JPWobbles 03 Tháng bảy, 2010
A extremely annoying person with ratty hair. Usually living in New Mexico. Most of the time seems as to be innocent and nice but beware!!! A whisk can attack at any moment and usually lurk and prey on their victims via Facebook. Warning: If you are added on facebook by a Whisk not only are you at risk, but so are your friends. A whisk usually prowls lonesome or with her only friend, if you see one spray with pepper spray, women should lock up their men, and you should make sure you warn all of your friends. Whisks usually have a extremely annoying face, and may lure you by wearing lots of make up, but when it comes off you will be surprised by the ugliness to be portrayed. They usually have a square ass, fat body, and fake hair.
That nasty bitch has got to be a WHISK
viết bởi WhiskHater101 05 Tháng năm, 2011
A broken down old fucker who thinks hes gods gift to the world, its more like a curse on this world, was married to a fat whale of a woman also known as WW. Now resides in his crappy little channel with no friends. Hangs out with BND (see def)
haha look its that old loser whisks! lets put a cap in his head! :D
viết bởi Jimbo Jones 16 Tháng tư, 2005


text:
The language of the presidential oath is specified in Article II, Section I, of the U.S. Constitution:
"I do solemnly swear (or affirm) that I will faithfully execute the Office of the President of the United States, and will to the best of my ability, preserve, protect and defend the Constitution of the United States."
The president-elect traditionally takes the oath with his hand on a Bible. However, this is not a requirement — Theodore Roosevelt took the oath in 1901 without swearing on a Bible.
The vice president-elect takes the same oath as other federal employees:
"I do solemnly swear that I will support and defend the Constitution of the United States against all enemies, foreign and domestic, that I will bear true faith and allegiance to the same, that I take this obligation freely, without any mental reservation or purpose of evasion, and I will well and faithfully discharge the duties of the office on which I am about to enter. So help me God."


text:
Rentseekers are undeterred, though, as they seek "wet steel."
Follow us on Twitter @JunkScienceMy Tweets
Rentseekers are undeterred, though, as they seek "wet steel."
Basically, the article is just a complaint that the government hasn't wasted even more of our tax dollars on wind energy. The article completely ignores the needs or wants of people and, if you read between the lines, the author wants the government to ban fossil fuels and require wind power to be our sole source of energy.
Sharks will be disappointed that the expected bird chum won't be available.
I caught a glimpse of a headline: Scotland's "green" goals would be undermined by a vote for independence. One more reason!
If it can't be done without massive federal subsidies, then perhaps it isn't really viable.


text:
Let's Talk Food: Chicken is the kitchen star with its flavor and food efficiency
In 1925 a group of Czech immigrants settled the town of Masaryktown in central Florida. They established orange groves, which were destroyed in the hard frost of 1926. The enterprising immigrants then turned to the growing of chickens, and that proved to be a successful venture. Not only did the chickens bring them fortune, but eventually brought fame to the small settlement.
The town was chosen by the Guinness Book of World Records as home of the fastest chicken-pluckers in the universe. Each year the town of nearby Spring Hill played host to the world's championship plucking contest.
Alas, as the years flew by the descendents of those original settlers eschewed poultry raising and moved on to other opportunities and Masaryktown faded into obscurity.
If only they had waited for Colonel Sanders and yes, even former president Herbert Hoover, who promised "a chicken in every pot."
The chicken has contributed mightily to the culinary world. It has been around for centuries and piqued the interest of Charles Darwin, who studied their beginnings. He theorized that all modern breeds of chickens were offspring of a common ancestor. Modern chickens' ancestors go back to a jungle fowl, Gaullus bankiva, still found in the rainforest of Burma (Myanmar), Northern India, Thailand and Sumatra. The first domesticated chickens were raised in India sometime around 3200 B.C. and were originally bred for the sport of cockfighting.
In 1607, the settlers of the Jamestown colony introduced poultry raising and breeding. Those original chicks came from Mother England and the colonists began cross-breeding and selling the chickens throughout the surrounding countryside. Other chickens were imported from Asia, and these also remain the foundation for the modern day species.
Many of those early chickens escaped from the colonists' farms and ventured into what is now the Delmarva Peninsula in Delaware. These chickens were the ancestors of Purdue chickens and several other breeds. The peninsula is now the largest producer of chickens in the country.
The chicken is not a fortunate member of the animal kingdom. Billions are slaughtered every year, for they not only produce eggs and delicious meat, they also are the world's most efficient producer of meat protein. It only requires less than 2 pounds of feed to yield 1 pound of food. Chicken is an international culinary tradition and is a major food source in almost every nation on earth.
A serving of chicken provides more than half a day's protein requirement while a 3-ounce serving of roasted chicken has fewer than 150 calories. Chicken is probably the most versatile meat available for human consumption.
Chicken is a healthful and inexpensive food, so it is not surprising that it ranks as the most popular meat prepared in home kitchens. It takes ingenuity and creativeness to come up with new ways to serve chicken.
Culinary experts maintain that if one can successfully roast a chicken they are considered a master chef. So here goes:
Perfect roast chicken
½ teaspoon salt or to taste
5 pound roasting chicken
½ teaspoon sage
½ teaspoon thyme
½ teaspoon rosemary
1 bay leaf
1 cup chopped onion
1 cup chopped celery, including leaves
1 cup chopped carrot
Generous sprig fresh parsley
1 clove garlic, minced
¼ cup hot water or chicken stock
■ Rub salt into cavity of chicken, Add thyme, sage, rosemary and bay leaf to cavity. Combine onion, celery, carrot and parsley. Spread over bottom of large roasting pan. Place chicken breast side down on vegetables. Bake in preheated 450-degree oven for 30 minutes.
■ Turn chicken breast side up. Sprinkle garlic over breast and legs. Reduce heat to 400 degrees. Bake 1 hour.
■ Transfer chicken to serving platter and remove fat the bay leaf from roasting pan. Add the hot water of stock to vegetables in pan. Heat until drippings and vegetables are loosened from pan.
■ Transfer to food processor and puree, adding additional liquid for proper gravy consistency. After allowing the chicken to sit for about 15 minutes, carve, pass the gravy and enjoy the accolades.
Note: The real secret is to select the very best chicken you can buy. The chicken should have a meaty feeling, free of any blemishes and have a full and moist breast.
Ask Doris
Q: Some friends are bringing their boat to Naples shortly and have invited us to go cruising with them. I have been asked to fix a salad and would like a recipe for a salad that is suitable to be served aboard.
— Candace Lutringer, Marco Island
A: This salad originated in Switzerland and is almost a complete meal in itself. It's ideal for summer outings.
Gypsy salad (Zigeunersalat)
½ pound smoked salami, cut into ½-inch cubes
½ cup thinly sliced dill pickle
¼ cup pearl onion, parboiled for 5 minutes, drained and thinly sliced*
1 large ripe tomato, diced
¼ pound Gruyere cheese, cut into ½-inch cubes
2 hard-boiled eggs, thinly sliced
2 tightly packed cups of salad green, torn into bit-sized pieces
¼ cup fresh peas, parboiled for 2 minutes, drained or if frozen, thawed
2 anchovy fillets, minced
¼ cup extra virgin olive oil
2 tablespoons red wine, sherry or cider vinegar
1½ teaspoons prepared mustard
Pinch of paprika
2 teaspoons minced fresh dill
Salt and pepper to taste
■ Toss the salami, pickles, onions, tomato, cheese, eggs, greens, peas and anchovies in a salad bowl.
■ Place the vinegar, mustard, paprika, dill, salt and pepper in a jar with a tight lid and shake well. Pour over the salad and toss well.
■ Refrigerate, covered for 2 to 24 hours. Toss again before serving. Serves 4 to 6.
*Fresh pearl onions may be replaced by either frozen or canned ones.
Doris Reynolds is the author of "When Peacocks Were Roasted and Mullet Was Fried" and "Let's Talk Food." They are available for sale in the lobby of the Naples Daily News. Also available is a 4-part DVD. "A Walk Down Memory Lane with Doris Reynolds." For comments and information regarding today's column, e-mail Doris Reynolds: firstname.lastname@example.com.
Subscribe to the Naples Daily News
Need Help? Call us at 1-888-878-6842.
Monday-Friday: 6am-6pm / Saturday: 7am-3pm / Sunday: 7am-2pm


text:
Thousands Share Stories of Transformation at Historic Passover Meal
|Two Chabad-Lubavitch rabbinical students in Kathmandu, Nepal, to coordinate Passover Seders in the 1990s chat up Israeli backpackers travelling the country.
A local joke notes that every year, something happens just before the famous Passover Seder in Kathmandu.
There was the Nepalese coup one year that ended almost to the day that the largest Seder in the world got underway. And then there was the customs fiasco in 2008 that almost prevented Chabad-Lubavitch Rabbi Chezky and Chanie Lifshitz from having enough food for the thousands who feasted at the Seders that year.
As Israelis celebrate the 25th anniversary of tourism between their country and the Himalayan state, those who have taken part in Passover festivities there note that in the 22 years since the nation's first Passover Seder, every celebration has been special.
- Passover(824)
Back in 1989, then- Ambassador Shmuel Moyal wanted to have a Passover Seder for Israeli backpackers at the Israeli Embassy in Kathmandu. He hung up a sign-in sheet at a popular restaurant, expecting that 30 or 40 Israelis would RSVP. But when close to 90 people signed up just three weeks before Passover, he turned to the Rebbe, Rabbi Menachem M. Schneerson, of righteous memory, for help.
"I sent a telegram to Rabbi Schneerson, who I knew from when I was a consul in New York," said Moyal, who now lives in Tel Aviv.
"He said not to worry, that he'll send three rabbinical students to help," said Moyal. "And three came: one from Australia, one from New York and one from Canada."
Along with the young men, the Rebbe sent a shipment of a quarter ton of special handmade matzah, wine and kosher meat. Everything arrived just in time for the holiday.
Rabbi Mendel Lipskier, a native of Australia who today teaches at the Yeshiva Centre in Melbourne, said that his parents were concerned about his traveling to Nepal.
"At that time, South Asia was hardly visited by anyone," he explained. "But they were very supportive."
On the way there, Lipskier and his two friends – who had been studying in at a yeshiva in Sydney, met people who thought the Seder was a great idea.
"They were so excited," said the rabbi. "They couldn't believe we were coming for them."
Rabbi Mendy Kastel, one of the other students who travelled to Nepal that year, had heard of Nepal before.
"When I was a boy of 13 or 14 years old, my father came home from [synagogue] on a Friday night and told us at the dinner table about a note he saw from two backpackers in Nepal," recalled Kastel, who today serves as a Chabad-Lubavitch emissary in New South Wales "They asked the Rebbe if he could send emissaries to Nepal for Passover.
"A few years later when I was studying in Sydney, I remembered the story and I asked my father if I could go to Nepal," he added. "He told me to put together a plan."
Kastel contacted the Israeli Embassy in Kathmandu and the Nepalese Consulate in Australia, and presented his plan to Rabbi Chaim Hodakov, then chief of staff of the Rebbe's secretariat in Brooklyn, N.Y.
The young men were optimistic, hoping to get more than the 90 people who had already signed up for the Seder.
Soon, hundreds of names were filling up a notepad attached to posters throughout the city.
"Word spread like wildfire," said Kastel.
Although the provisions were meant to feed 100 people, 500 backpackers showed up for the city's first-ever Seder.
"There wasn't any time to get more food shipped," said Kastel, "so we had to work with the food we had.
"I'm a Brooklyn boy and I never understood what it meant to be in a Third World country," he continued.
On top of navigating a local economy to get more supplies, a gas embargo from India forced the rabbinical students to build log ovens to cook the food.
In the end, the embassy building wouldn't hold everyone.
"The Nepalese Army covered the area with a huge tent," recalled Moyal, "and the American Embassy lent us tables."
Year After Year
The following year, Rabbi Asi Spiegel and two other rabbinical students came to once again lead a Seder for any Jews that found themselves in the region. On the flight over, the young men realized that none of them knew how to cook, let alone for hundreds of people. But the Seder lived on.
For Spiegel, the fact that so many people gathered in Kathmandu so many years ago – and continue to do so today – boggles the mind. And the Seders don't take place just in the Nepalese capital any more. Now, teams of rabbinical students coached by Rabbi Moshe Kotlarsky, vice chairman of Merkos L'Inyonei Chinuch, the educational arm of Chabad-Lubavitch, travel to the country to assist the Lifshitzes at several locations.
"Back [in the '90s], Israelis would be traveling for a few months and would be out of touch," said Spiegel, who helped lead eight of the Seders throughout the 1990s. "They didn't follow the news; they didn't really call home."
When a young Shachar Shoshani saw the bearded students, the Israeli was shocked.
"I thought it was strange to see Orthodox Jews there," said Shoshani.
He and his friend Avraham chatted with the three young men and decided to help.
They went shopping in the market and helped prepare the food, all while a coup took place in the background. Avraham, who happened to serve as a chef in the Israel Defense Force, "ran the kitchen."
Soon after the Seder, Shoshani was traveling in India when a bomb exploded at the Loomis Restaurant at the Vivek Hotel in New Delhi, killing thirteen foreign tourists and injuring two Indian waiters. Now a father of nine, Shoshani called the fact that he and his friends escaped a revealed miracle.
Shoshani, who now works in the Colel Chabad soup kitchen in Safed, called the Kathmandu Seder the trigger that led him down the road toward reconnecting with Judaism.
Spiegel and the other rabbinical students "were so friendly," said Shoshani. "We really felt we could talk with them."
Yossi and Ilana Jablonski, who traveled around the Far East for a few years in the 1990s making and selling jewelry, attended a Seder in Nepal, as well in Thailand, Japan and India. The couple started reading and learning about Judaism and became very close to Rabbi Yosef Chaim and Nechama Dina Kantor, who were sent to Bangkok as Chabad-Lubavitch emissaries in 1993. But it was at the Seder in Nepal when Yossi Jablonski first read out loud from the Haggadah.
"The experience will stay with me for the rest of my life," said Jablonski, who now lives with his wife and four children in Melbourne, where he designs and makes fine jewelry.
Rabbi Chaim Baruch Alevsky, who was a 19-year-old rabbinical student when he helped run a Nepal Seder one year, told the story of another person whose spiritual awakening occurred in Kathmandu.
Just before Passover, the man and his companion left the city.
"They wanted matzah because they were going on a long bus ride and wouldn't be back in time for Passover," recalled Alevsky, now director of Chabad of the West Side in New York City. "Hours later, we realized the matzah we gave them was not kosher for Passover. It was matzah we had brought to eat before the holiday. We started freaking out!"
They tracked down the bus.
"We got a rickshaw and zoomed over," said Alevsky. "We found them, and they were so happy when we gave them the new matzah."
A few years later, Spiegel met the man again. He had taken on a Torah-observant lifestyle, and told Spiegel that the rushed delivery of matzah through the streets of Nepal inspired him to change his life.
During Moyal's 40-year career in Israel's Foreign Service, he also served as ambassador to Australia, the Islands of the South Pacific, Azerbaijan and Oman. But that first Seder in Nepal left quite an impression.
"It was such a long time ago," said Moyal, now 75. "An experience like this is something amazing."
toronto canada
BC, Canada
Philadelphia, PA, USA
- Deconstructing Detroit: Tackling Urban Issues From a Jewish Perspective
- In Jerusalem, Historic Synagogue Prepares for Sukkot
- New Year, New Fixture: First Kosher Shop in Australia's Capital
- A Fine Day for the Arts in Philadelphia: Student Gallery Exhibits New Space
- Only Surviving Boy Born in Auschwitz, Now 70, Puts on Tefillin for the First Time
- A Cancer Survivor's Yom Kippur
- International Hakhel Event Connects Jews of All Ages and Places
- 'There's No Road Home to Donetsk' as Jewish Community Prepares for Yom Kippur in Kiev
- 70 Years Later: A Bar Mitzvah Right After Rosh Hashanah
- London Sunday Cruise Combines Hakhel Year Gathering and Annual Tashlich
- View All »
The Seder Plate Champion (3:28)
- What Is Your Freedom? (1:15)
- "This is the Bread of Our Affliction" (40:44)
- The Passover Seder (5:53)
- Refined Speech (1:03:24)
- Passover and the Paschal Lamb (29:54)
- The Faith Pill (5:41)
- Passover In 3D (30:17)
- Passover: The Spiritual Significance of 'Splitting of the Sea' (29:36)
- Passover: The Spiritual Significance of 'Matzah' (29:33)
- Passover: The Spiritual Significance of 'Chometz' (29:53)
- Passover: If Good is Good, Isn't Better - Better (29:48)
- Passover: The Time that G-d 'Passes' Over (29:45)
- Passover (824)


text:
SUBJECT: Todd Howard, Game Director at Bethesda
ITEM FOR PROMOTION: The Elder Scrolls V: Skyrim – Dawnguard
Pop Cultural Biography:
All time favorite band: "Bruce Springsteen." And the E Street Band? "Yes, and the E Street Band."
All time favorite movie: Raiders of the Lost Ark.
All time favorite TV show: "Currently Sherlock (on the BBC). It's my current favorite" I'll second this, if only for the name of the show's lead actor, Benedict Cumberbatch.
All time favorite video game you haven't worked on: Ultima VII.
Y-axis: inverted or not: Not.
Genesis or SNES: Genesis.
DC or Marvel: "Marvel. No. Both. Tie. Tie. I like Batman so much, but I like the Marvel Universe better. It's a tie. I can't decide."
Wii U: Yay or nay: "My jury's out on that one."
One thing you want people to remember about Dawnguard's presence at E3: "We're really thankful for all the support we've gotten and we just look forward to supporting them as long as they're gonna play Skyrim. Paid content. Free content. All of it."


text:
Put them in street clothes, though, and I'm lost.
"It's scary," I said to Mom. "What am I going to be like when I'm 80? I don't recognize anybody!"
Actually that wasn't quite true. I knew their faces and their names, but I just couldn't affiliate two together correctly unless it was Alain Cote or Stephane Richer.
In fairness, I remember seeing them play years ago, although I had no real use for Cote as he spent most of his career in a Nordiques uniform and if you don't know how I feel about the Nordiques by now I have to wonder why you even read this blog.
|Me and Alain Cote, making nice. Sergio Momesso on the right.
It was after the NHL Legends had trounced my home team of the Port-aux-Basques Mariners. Having sold only 8 of 100 Tier 2 VIP tickets meant Mom and I would have a lot of quality time with the Legends, particularly as only 5 of us had bothered to attend the schmooze-fest.
For reasons I cannot even begin to explain, I was sporting a Tomas Plekanec sweater when as far as I could ascertain he was currently playing in Europe and was highly unlikely to be at this party. Since I was wearing a Habs sweater and Mom was wearing a Canadiens t-shirt and vintage sweater we stood out like sore thumbs.
Everyone else at the game wearing a team sweater had been playing on the ice, unless you count the lone Boston fan wearing his jersey and it's not like I'm going to do that because he disappeared after the first intermission and anyway it's just Boston for crissakes.
On the plus side, this meant Mom and I got hauled upstairs to watch the third period from the booth, which had the best view in the rink.
|View of the Legends bench from the booth.
As it turns out, not much.
We cheered for everyone, got razzed by John Horrigan, and ducked when Mike Krushelnyski tried twice to lob his stick into the booth at us.
During the third period a Mike Cammalleri type deal went down, and Richer, Dupont, I-forget-who-else got their asses traded to the Mariners. It didn't help though as the Mariners fourth and final goal was scored by a local anyway.
"I need a drink," I said, because I always say this and particularly at hockey games when I've worked up a vicious thirst by hollering at the players who wisely ignore me unless they are Mike Krushelnyski at which point they try to high-stick me in an elevated booth.
"You almost hit me," I scolded him, having been treated by then to a drink courtesy of Stephane Richer who made certain that the "Habs women" got their rum and cokes.
Krushelnyski said it didn't count since he actually didn't hit us and if you've never met the man let me tell you he is unfairly charming and really what are ya gonna do? I shrugged and gave him a bag of Newfie Screech laced coffee.
|Try to find Stephane Richer in this photo if you can.
He was personable and kind enough to make sure to spend time with all the fans in turn, but left early to get some shut eye as the boys were playing 5 games in 5 nights and if you've never been to Newfoundland that means a lot of damned driving back and forth across the island so it was perfectly understandable.
I probably spent the most time with Gary Leeman and Mike Krushelnyski, discussing Newfoundland's charms and their love of doing this sort of charity gig for the fans. Leeman was most kind about loving the East Coast of Canada and its friendly nature, and Krushelnyski missed his calling as a stand-up comedian / smartass.
I spoke with Roy Nolan and Glenn Anderson at length about the current lockout, and we all agreed on one thing: it sucks, there's unlikely to be any NHL hockey this year, and thank God for the AHL teams.
|Mom, Ian Lafratte, Me, Roy Nolan, Rick Middleton
Despite my initial reservations Alain Cote, like every other player there, turned out to be a sweetheart of a guy and while I will never like the Nordiques I've decided that even a rotten barrel of apples probably has a good core or two and hopefully my fellow Habs fans will forgive me for liking the guy. I also liked Rick Middleton a lot and he was a Bruins and I kind of overlooked that too just as he ignored my Habs sweater and even signed it.
|Glenn Anderson, Moi, Gary Leeman, and Andre DuPont
I'm posting pictures just to torment you and to prove I'm not making all this shit up. I can't give you names, numbers or any other info other than this - if you get the chance to go to one of these games and the meet and greets, take advantage. It's worth every penny.


text:
For immediate release: May 10, 2013
Contact: Dan Weiller (518) 471-5300
Residents kept informed by noise, vibration and air quality monitors
as first pile driving begins on a temporary work platform
As work begins on a temporary Westchester work platform for the New NY Bridge, residents will be kept informed by a first-of-its kind environmental monitoring system with results publicly posted on the internet.
"We are empowering people with information and keeping them up to date on what's happening with this vital project," said Thruway Authority Executive Director Thomas Madison. "We are taking unprecedented measures to mitigate noise, vibration and air quality issues and the monitoring system that is now on our website is a major part of that effort."
As soon as Friday, May 10, Tappan Zee Constructors, LLC (TZC) will begin daytime pile driving work to install the temporary foundation needed to support a trestle in the Hudson River on Thruway Authority property just north of the current bridge in Tarrytown. The trestle is a work platform that will support a crane for the construction of the easternmost 1000 feet of the new bridge. The 1000-foot long platform, which will be dismantled when the bridge is complete, helps reduce the amount of dredging required in the Hudson and allows the crews to work from the water and not from the Westchester shoreline.
TZC has installed highly sophisticated monitoring devices at locations near the project site in Westchester. These devices will record the level of sound, vibration and air quality and the data will be available to the public online at www.newnybridge.com as part of the New York State Thruway Authority's commitment to openness and transparency.
Environmental requirements limit pile driving and other loud construction activities to a maximum of 7 a.m. to 7 p.m. Monday through Friday. There will be no pile driving done on the weekends.
Because the soil under the river is so soft, the pilings will be installed using the vibration technique for the most part. Vibratory pile driving is much quieter than impact pile driving and will be less intrusive for nearby residents. Short duration impact pile driving will be used to set the piles into bedrock. TZC will also use sound mitigating shrouds and other techniques to reduce the noise levels involved.
The EPCs are intended to monitor, minimize and mitigate potential adverse effects related to construction noise, vibration and air quality associated with the project. In addition to the monitoring systems and specialized pile driving techniques, the Thruway Authority is requiring many other mitigation measures including state-of-the-art controls to limit dust and emissions and receiving deliveries of equipment and supplies mostly by barge, rather than truck.
Construction of the temporary Westchester trestle is expected to last several months. Construction of a similar work platform on Thruway property near the Rockland County shoreline is expected to begin in July.
For a direct link to the data from the monitors go to: http://newnybridgegallery.com/noise/
Andrew M. Cuomo
New York State
Thruway Authority
New York State
Department of
Federal Highway


text:
Opportunity Knocks..... A Great Career Awaits
At Bandana's we offer more than just a friendly environment and fun atmosphere, we offer great career opportunities. As a growing company opportunities exist for hourly team members to advance into our management training program and from management into supervisory or corporate positions. For experienced managers we offer the opportunity to advance your career as we continue to expand. Our culture emphasizes that all people are treated with the proper dignity and respect due everyone and advancement is based on performance.
We have employment opportunities to match your needs whether it is just part-time or full-time career development. We have an assortment of competitive benefits for all of our eligible team members and would enjoy talking to you about our programs.
We are always looking for great team members who want to "Treat Every Guest as if they were a guest in your own home". For hourly team members please apply in person at the Bandana's location of your choice. If you are interested in a management or a corporate position please download the Management Application and send it to us.
Bandana's is an equal opportunity employer and each applicant will be given employment consideration based on individual merit.
Please download an hourly application for the position you are interested in from the links below. Complete the application and return it to us by mail, fax or e-mail.
Hourly Applications (Fillable PDFs)Download Hourly Application Form Download Hourly Application Form (Only for Illinois)
16141 Swingley Ridge Road
Suite 205
Chesterfield, MO 63017
Fax #


text:
Free Newsletters - Space News - Defense Alert - Environment Report - Energy Monitor
LockMart Completes R&D Testing of Helicopter Self-Defense System
A multi-disciplinary team has successfully completed developmental testing of the Integrated Self-Defense (ISD) system on the MH-60R helicopter being built for the U.S. Navy.
The testing, conducted from mid January through early February at Eglin Air Force Base in Florida, demonstrated the successful integration of the ISD suite of warnings and countermeasures designed to protect the aircraft against missile attacks.
The ISD suite will be included on what ultimately will be a fleet of 254 MH-60R helicopters, designed for anti-surface warfare, undersea warfare, and local area peace-keeping operations.
"The ISD performed very successfully through an intensive testing sequence," said Lieutenant Commander Mark Johnson, Navy ISD Test Team Project Officer. "All components worked as expected, and the system proved effective in tests against multiple infrared (IR) and multiple radio frequency (RF) missile systems."
The testing involved 14 flights totaling 40 hours. Participants included the Lockheed Martin MH-60R test team; representatives from airframe manufacturer Sikorsky Aircraft Corp.; engineers, maintenance crew and test pilots from the HX-21 developmental test squadron at Patuxent River; engineers and scientists from the Naval Surface Warfare Center in Crane, IN; engineers from the 46th Test Wing at Eglin Air Force Base; engineers from Tekla Research Inc.; and personnel from BAE Systems.
The team evaluated the entire ISD suite, which includes missile warning systems, decoy flares and chaff, and IR and RF countermeasures. Naval personnel will now conduct operational testing of the system.
Lockheed Martin is the systems integrator for the MH-60R and provides the cockpit, which is common to all MH-60S and MH-60R helicopters. Sikorsky Aircraft Corporation designs and manufactures the MH-60S and MH-60R aircraft and is responsible for the mechanical and electrical modifications on the airframe.
Related Links
Lockheed Martin
Search SpaceDaily
Subscribe To SpaceDaily Express
Lockmart Raytheon JV Gets Billon Dollar Non Line-of-Sight Contract
Dallas - Mar 23, 2004
NetFires LLC, a limited liability company established by Lockheed Martin and Raytheon Company, has received a $1.1 billion contract for System Design and Development (SDD) for the Non Line-of-Sight -- Launch System (NLOS-LS), previously known as NetFires.


text:
Movies (Yet To Be Classified Rated)
Hacksaw Ridge
The true story of Desmond Doss, a Seventh Day Adventist who served with distinction in the US military during World War 2 without ever firing a gun.
A girl with few real prospects joins a gang, reinventing herself and gaining a sense of self confidence in the process.
An extremely wealthy man dying from cancer undergoes a radical medical procedure that transfers his consciousness into another man's body.
When terrifying apparitions attack a family and hold its youngest daughter captive, they must come together to rescue her before she disappears forever.
A celebrated military contractor returns to the site of his greatest career triumphs and re-connects with a long-ago love while unexpectedly falling for the hard-charging Air Force watchdog assigned...
The Ridiculous 6 (aka Ridiculous Six)
Adam Sandler's comedy, made for Netflix, about a Natrive American tribe in teh days of the old west.
A boxer fights his way to the top, only to find his life falling apart around him.
Jurassic World
After 10 years of operation and with visitor rates declining, Jurassic World introduces a new attraction, a genetically modified T-Rex, which backfires horribly.
Avengers: Age of Ultron
When Tony Stark tries to jump-start a dormant peacekeeping program, things go awry and it is up to the Avengers to stop the villainous Ultron from enacting his terrible plans.
Armed with a super-suit with the astonishing ability to shrink in scale but increase in strength, con-man Scott Lang must embrace his inner hero and help his mentor, Dr.
The Gunman
A mercenary sniper kills the minister of mines of the Congo and then goes into hiding. Returning to the Congo years later, he becomes the target of a hit squad himself.
A cryptic message from James Bond's past sends him on a trail to uncover a sinister organization known as SPECTRE.
Elaine Stritch: Shoot Me
Uncompromising Tony and Emmy Award-winner Elaine Stritch is showcased both on and off stage in this intimate documentary.
San Andreas
In the aftermath of a massive earthquake in California, a rescue-chopper pilot makes a dangerous journey across the state in order to rescue his estranged daughter.
Pirates of the Caribbean: Dead Men Tell No Tales
Captain Jack Sparrow searches for the trident of Poseidon in the fifth film in the franchise.
A Little Chaos
A female landscape-gardener is awarded the esteemed assignment to construct the grand gardens at Versailles.
Gangnam Blues
In the 1970s, the Seoul district of Gangnam is starting to be transformed against a backdrop of social and political turmoil.
When a police droid is stolen and given new programming, he becomes the first robot with the ability to think and feel for himself.
Manny Lewis
Successful Australian comic Manny Lewis finds himself at the height of his popularity, and at the depths of his loneliness.
National Gallery
A documentary that goes inside one of the great museums of the world: The National Gallery in London.


text:
Security is important on the Web. Whether sharing financial, business, or personal information, people want to know with whom they are communicating (authentication), they want to ensure that what is sent is what is received (integrity), and they want to prevent others from intercepting what they are communicating (privacy). The Secure Sockets Layer protocol [13] provides one means for achieving these goals and is the subject of this article. We introduce SSL by reviewing cryptographic techniques and by discussing certificates. We then describe SSL and packages for implementing SSL. We conclude with examples of how to use SSLeay, the free implementation of SSL by Eric Young. We use the SSLeay toolkit to create a Certificate Authority, as well as server and client certificates.
There are two categories of cryptographic algorithms: conventional and public key.
A summary such as this is called a message digest, or one-way hash. Message digests are used to create short, fixed-length representations of longer, variable-length messages. Digest algorithms are designed to produce unique digests for different messages. Message digests are designed to make it too difficult to determine the message from the digest, and also impossible to find two different messages which create the same digest -- thus eliminating the possibility of substituting one message for another while maintaining the same digest.
Another challenge that Alice faces is finding a way to send the digest to the bank securely; when this is achieved, the integrity of the associated message is assured. One way to to this is to include the digest in a digital signature.
Digital signatures are created by encrypting a digest of the message, and other information (such as a sequence number) with the sender's private key. Though anyone may decrypt the signature using the public key, only the signer knows the private key. This means that only they may have signed it. Including the digest in the signature means the signature is only good for that message; it also ensures the integrity of the message since no one can change the digest and still sign it. To guard against interception and reuse of the signature by an intruder at a later date, the signature contains a unique sequence number. This protects the bank from a fraudulent claim from Alice that she did not send the message -- only she could have signed it (non-repudiation).
A distinguished name is used to provide an identity in a specific context -- for instance, an individual might have a personal certificate as well as one for their identity as an employee. Distinguished names are defined by the X.509 standard [2], which defines the fields, field names, and abbreviations used to refer to the fields (Table 2).
A Certificate Authority may define a policy specifying which distinguished field names are optional, and which are required. It may also place requirements upon the field contents, as may users of certificates. As an example, a Netscape browser requires that the Common Name for a certificate representing a server have a name which matches a regular expression for the domain name of that server, such as *.opengroup.org.
The binary format of a certificate is defined using the ASN.1 notation [ 1], [4]. This notation defines how to specify the contents, and encoding rules define how this information is translated into binary form. The binary encoding of the certificate is defined using Distinguished Encoding Rules (DER), which are based on the more general Basic Encoding Rules (BER). For those transmissions which cannot handle binary, the binary form may be translated into an ASCII form by using base64 encoding. This encoded version is called PEM encoded, when placed between the following lines:
A number of companies, such as VeriSign [11] have established themselves as certificate authorities. These companies provide the following services:
It is also possible to create your own Certificate Authority. Although risky in the Internet environment, it may be useful within an Intranet where the organization can easily verify the identities of individuals and servers.
The protocol is designed to support a range of choices for specific algorithms used for cryptography, digests, and signatures. This allows algorithm selection for specific servers to be made based on legal, export or other concerns, and also enables the protocol to take advantage of new algorithms. Choices are negotiated between client and server at the start of establishing a protocol session.
There are a number of versions of the SSL protocol, as shown in Table 3.
|Browser Support
|published by Netscape [12]
|Original protocol
|Netscape 3.0, Internet Explorer 3.0
|Expired Internet Draft [13]
|Revisions to prevent specific security attacks, add ciphers, and support certificate chains
|Netscape 3.0, Internet Explorer 3.0
|IETF Draft [15]
|Revision of SSL 3.0
As noted in Table 3, one of the benefits in SSL 3.0 is that it adds support of certificate chain loading. This feature allows a server to pass a server certificate along with issuer certificates to the browser. Chain loading also permits the browser to validate the server certificate, even if Certificate Authority certificates are not installed for the intermediate issuers, since they are included in the certificate chain. SSL 3.0 is the basis for the Transaction Layer Security [TLS] protocol standard, currently in development by the Internet Engineering Task Force (IETF).
The elements of the handshake sequence, as used by the client and server, are listed below:
The first step, Cipher Suite Negotiation, allows the client and server to choose a Cipher Suite supportable by both of them. The SSL3.0 protocol specification defines 31 Cipher Suites. A Cipher Suite is defined by the following components:
One variable in the choice of key exchange methods is digital signatures -- whether or not to use them, and if so, what kind of signatures to use. Signing with a private key provides assurance against a man-in-the-middle-attack during the information exchange used in generating the shared key [8, p516].
The message digest is used to create a Message Authentication Code (MAC) which is encrypted with the message to provide integrity and to prevent against replay attacks.
The encapsulation of SSL control protocols by the record protocol means that if an active session is renegotiated the control protocols will be transmitted securely. If there were no session before, then the NULL cipher suite is used, which means there is no encryption and messages have no integrity digests until the session has been established.
There are two prominent RSA public key packages available:
The RSA Reference implementation, an unsupported source code toolkit from RSA, may be used for freeware and noncommercial applications. Consensus Development Corp used to market a license for commercial use but will no longer do so [17].
Commercial implementation of RSARef[16].
Sample SSL 3.0 implementation from Netscape Communications Corporation [19].
Commercial source code toolkit available from Consensus Development Corp, an enhancement of SSLRef3.0. It requires BSAFE3.0 (from RSA) for use [20].
SSL3.0 compliant toolkit written in Java from Phaos Technology [18].
SSLeay-0.8.1 [21] is a free noncommercial implementation of SSL 2.0 and 3.0. It includes a public key implementation which may be used outside the United States. In the United States, RSARef or BSAFE3.0 must be used due to patent requirements. SSLeay offers an inexpensive way to get started with SSL, and is the subject of the next section.
Install the self-signed certificate in a browser so the browser will recognize server certificates signed by the Certificate Authority. Installing a CA certificate in a browser is somewhat dangerous, unless you trust that certificate and the security of the Certificate Authority. Once installed, the browser accepts any certificate signed by that authority.
To install the CA certificate, load it using HTTP Content-Type application/x-x509-ca-cert. To do this in a manner which does not depend on the server, use the cgi-script (Example 6 in the Appendix), or save the certificate in a file with a cacert suffix and define this suffix in the server configuration file to correspond to the application/x-x509-ca-cert MIME type. For the Apache server, for example, add the line AddType application/x-x509-ca-cert cacert to srm.conf. The certificate and key files must also remain available to SSLeay for the server to be able to use the public key, and the certificate authority to use the private key.
cp newcert.pem $certdir/sitecert.pem cp newkey.pem $certdir/sitekey.pem
CD $certdir ln -s sitecert.pem `$SSLDIR/bin/x509 -noout -hash < sitecert.pem`.0
$SSLDIR/bin/x509 -in CAcert.pem -out CAcert.der -outform DER
Once these steps have been completed, an SSL connection may be established if the server does not require client certificates.
Different clients such as Netscape Navigator 3.01 Gold and Microsoft Internet Explorer 3.02 support different mechanisms for creating client certificates. In this section, we demonstrate a technique for creating and installing a client certificate for each, using SSLeay certificate routines to sign certificate requests (Back up the Windows NT registry before creating client certificates with Internet Explorer).
The procedure for creating a client certificate involves HTML forms; these forms include client specific features such as special tags or JavaScript programs, and Perl CGI scripts that call SSLeay certificate handling applications. The procedures do not rely on special server features, other than the ability to run Perl CGI scripts. The examples completely automate the process, causing a client certificate to be installed once the request form is submitted. (In a production environment the Certificate Authority would need to perform validation instead of automatically issuing the certificate.)
The general steps for creating a client certificate are as follows:
The HTML form includes fields (containing defaults) for the different distinguished name attributes which are to be used in the client certificate, information allowing the browser to generate a key-pair, and a hidden field used to return this information to the CGI script. This hidden information is browser dependent.
In Netscape Navigator, the form contains an additional FORM tag, the <KEYGEN> tag. This tag creates a key pair, and causes the public key to be returned as a form value when the form is submitted (see Example 12 in the Appendix for source of a sample form). The <KEYGEN> tag causes the browser to display a choice of security grades, depending on the version of Navigator. All of the form information is used by the CGI script to create a certificate request, and this request is used to create a client certificate (See Figure 4).
Both Netscape Navigator and Microsoft Internet Explorer present a sequence of dialogs as part of the key-pair creation. If this sequence is successfully completed then the form will cause the server CGI script to be called with the data from the form. Examples 13 and 15 in the Appendix present two CGI scripts, one for each browser, since the processing is different.
The CGI script for Netscape Navigator (Example 14 in the Appendix) creates a file containing the distinguished name values returned by the form, and a special SPKAC value for the "Signed Public Key And Challenge" generated by Navigator The "ca" command is called with this file as an argument to generate a client certificate. If successful this is returned by the CGI script as an application/x-x509-user-cert HTTP Content-Type. Navigator recognizes this type, and prompts the user for the remainder of the steps required to install the user certificate in the browser. (See Example 13 for the sample CGI script for Netscape Navigator).
The CGI script for processing the Internet Explorer request (Example 16 in the Appendix) is more complicated. It takes the certificate request returned by the form and reformats it to conform to lines of length 72, and then uses the SSLeay ca command to create a signed user certificate based on this request. It then takes the client certificate and combines it with the SSLeay certificate revocation list (CRL) to create a PKCS#7 certificate using the SSLeay crl2pkcs7 utility. The CGI Perl script then dynamically creates an HTML page which includes a JavaScript program to call the AcceptCredentials method of the certenr3 ActiveX control to install the PKCS#7 certificate. This page is designed to take advantage of the JavaScript onLoad method to automatically call the JavaScript program when the page is loaded, so that the certificate is immediately installed without user interaction. (In a production system such automatic installation may not be desired.)
Once the HTML forms and CGI scripts have been written, and the ActiveX control installed, the process of creating client certificates using SSLeay is simple for users.
# Set SSLVerifyClient to: # 0 if no certificate is required # 1 if the client may present a valid certificate # 2 if the client must present a valid certificate # 3 if the client may present a valid certificate but it is not required to # have a valid CA SSLVerifyClient 0
The following examples assume you are working in the SSLeay-0.8.1 directory. Change to this directory and build SSLeay following the directions in the INSTALL file. The examples assume that the results of building SSLeay are installed in $SSLDIR (e.g. /opt/dev/ssl).
SSLeay uses a configuration file (ssleay.cnf) which supports named sections, so one configuration file may be used for several purposes. We have modified this file, and show some of these modifications in the examples that follow. Subsequent descriptions in this document show various relevant sections of the log file.
Note that the addition of SSL to the server requires rebuilding the server to include the SSL toolkit and public key sources, and modifying the server configuration to support SSL.
mkdir ${SSLDIR}/certs mkdir ${SSLDIR}/crl mkdir ${SSLDIR}/newcerts mkdir ${SSLDIR}/private echo "01" > ${SSLDIR}/serial touch ${SSLDIR}/index.txt
#################################################################### [ ca ] default_ca = CA_default # The default ca section #################################################################### [ CA_default ] dir = /opt/dev/ssl # Where everything is kept certs = $dir/certs # Where the issued certs are kept crl_dir = $dir/crl # Where the issued crl are kept database = $dir/index.txt # database index file. new_certs_dir = $dir/newcerts # default place for new certs. certificate = $dir/private/CAcert.pem # The CA certificate serial = $dir/serial # The current serial number crl = $dir/clr/crl.pem # The current CRL private_key = $dir/private/CAkey.pem # The private key RANDFILE = $dir/private/.rand # private random number file x509_extensions = x509v3_extensions # The extentions to add to the cert default_days = 365 # how long to certify for default_crl_days= 30 # how long before next CRL default_md = md5 # which md to use. preserve = no # keep passed DN ordering # A few difference way of specifying how similar the request should look # For type CA, the listed attributes must be the same, and the optional # and supplied fields are just that :-) policy = policy_match
The "req" section of the configuration file is used when creating certificate requests, and supplies defaults and length limits for the various distinguished name fields. In our examples it has the configuration as shown in Example 3.
[ req ] default_bits = 512 default_keyfile = privkey.pem distinguished_name = req_distinguished_name attributes = req_attributes [ req_distinguished_name ] countryName = Country Name (2 letter code) countryName_default = US countryName_min = 2 countryName_max = 2 stateOrProvinceName = State or Province Name (full name) stateOrProvinceName_default = MA localityName = Locality Name (eg, city) localityName_default = Cambridge organizationName = Organization Name (eg, company) organizationName_default = The Open Group organizationalUnitName = Organizational Unit Name (eg, section) organizationalUnitName_default = Research Institute commonName = Common Name (eg, YOUR name) commonName_default = example.osf.org commonName_max = 64 emailAddress = Email Address emailAddress_max = 40 [ req_attributes ] challengePassword = A challenge password challengePassword_min = 4 challengePassword_max = 20
The policy section of the configuration file is used to define different certificate request signing policies. The examples here include the most lenient policy (policy_anything) and a stricter policy (policy_match) which restricts the values of certificate fields. The purpose of a policy is to guide processing of a certificate request.
In Example 4, match means that the value of the field in the request must match the value in the CA certificate, or the request will not be signed. optional means the the field need not be present, while supplied means that it must be present in the certificate request.
# For the CA policy [ policy_match ] countryName = match stateOrProvinceName = match organizationName = match organizationalUnitName = match commonName = supplied emailAddress = optional # For the 'anything' policy # At this point in time, you must list all acceptable 'object' # types. [ policy_anything ] countryName = optional stateOrProvinceName = optional localityName = optional organizationName = optional organizationalUnitName = optional commonName = supplied emailAddress = optional
$SSLDIR/bin/ssleay req -new -x509 -keyout ${SSLDIR}/private/CAkey.pem \ -out ${SSLDIR}/private/CAcert.pem -config /opt/www/lib/ssleay.cnf Using configuration from /opt/www/lib/ssleay.cnf Generating a 512 bit private key writing new private key to '../private/CAkey.pem' Enter PEM pass phrase: Verifying password - Enter PEM pass phrase: ----- You are about to be asked to enter information that will be incorperated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [US]: State or Province Name (full name) [MA]: Locality Name (eg, city) [Cambridge]: Organization Name (eg, company) [The Open Group]: Organizational Unit Name (eg, section) [Research Institute]: Common Name (eg, YOUR name) [example.osf.org]:Example CA Email Address []:firstname.lastname@example.com
The SSLeay configuration file specifies the location of the CA certificate and key files using the following directives in the ca section:
# The CA certificate certificate = $dir/private/CAcert.pem # The private key private_key = $dir/private/CAkey.pem
The Apache-SSL server httpd.conf file specifies the CA certificate and key files as follows:
# Set the CA certificate verification path (must be PEM encoded). SSLCACertificatePath /opt/dev/ssl/private # Set the CA certificate verification file (must be PEM encoded). SSLCACertificateFile /opt/dev/ssl/private/CAcert.pem
<TITLE>Load CA Certificate</TITLE>
Load Certificate Authority Certificate
 <FORM ACTION="http://example.osf.org/cgi-bin/loadCAcert.pl" METHOD=post>

 Netscape Browser (PEM Format):	 <INPUT TYPE="RADIO" NAME="FORMAT" VALUE="PEM" CHECKED>

Microsoft Browser (DER Format):	 <INPUT TYPE="RADIO" NAME="FORMAT" VALUE="DER">

 <INPUT TYPE="SUBMIT" VALUE="Load Certificate"> </FORM>
Example 7 shows the loadCAcert.pl script.
#!/usr/local/bin/perl -T require 5.003; use strict; use CGI; my $cert_dir = "/opt/www/lib/certs"; my $cert_file = "CAcert.pem"; my $query = new CGI; my $kind = $query->param('FORMAT'); if($kind eq 'DER') { $cert_file = "CAcert.der"; } my $cert_path = "$cert_dir/$cert_file"; open(CERT, "<$cert_path"); my $data = join '',
Install the Certificate Authority certificate in the server certificate database as well as the browser, so that the server is able to locate the public key and validate certificate signatures signed by the certificate authority.
cd $SSLDIR/bin ./ssleay req -new -keyout newkey.pem -out newreq.pem -days 360\ -config /opt/www/lib/ssleay.cnf Using configuration from /opt/www/lib/ssleay.cnf Generating a 512 bit private key writing new private key to 'newkey.pem' Enter PEM pass phrase: Verifying password - Enter PEM pass phrase: ----- You are about to be asked to enter information that will be incorperated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [US]: State or Province Name (full name) [MA]: Locality Name (eg, city) [Cambridge]: Organization Name (eg, company) [The Open Group]: Organizational Unit Name (eg, section) [Research Institute]: Common Name (eg, YOUR name) [example.osf.org]: Email Address []:firstname.lastname@example.com Please enter the following 'extra' attributes to be sent with your certificate request A challenge password []: An optional company name []:
Example 9 shows the results in a certificate request being created in newreq.pem (in this paper certificates and keys are truncated).
-----BEGIN CERTIFICATE REQUEST----- MIIBXTCCAQcCAQAwgaMxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJNQTESMBAGA1UE ... Aty7AlcmN9XNwxUk1w0H3hk= -----END CERTIFICATE REQUEST-----
Example 10 shows a private key for the certificate being created in newkey.pem.
-----BEGIN RSA PRIVATE KEY----- Proc-Type: 4,ENCRYPTED DEK-Info: DES-EDE3-CBC,21F13B37A796482C XIY0c7gnv0BpVKkOqXIiqpyONx8xqW67wghzDlKyoOZt9NDcl9wF9jnddODwv9ZU ... QxS2zwfKG1u+YqS1c2v5ecBgqW78DQLvxMkpYU8+xge7vDeoYKE14w== -----END RSA PRIVATE KEY-----
When this command is executed, it prompts for the certificate authority password, as shown in Example 11.
cat newreq.pem newkey.pem > new.pem ./ssleay ca -policy policy_anything -out newcert.pem \ -config /opt/www/lib/ssleay.cnf -infiles new.pem Using configuration from /opt/www/lib/ssleay.cnf Enter PEM pass phrase: Check that the request matches the signature Signature ok The Subjects Distinguished Name is as follows countryName :PRINTABLE:'US' stateOrProvinceName :PRINTABLE:'MA' localityName :PRINTABLE:'Cambridge' organizationName :PRINTABLE:'The Open Group' organizationalUnitName:PRINTABLE:'Research Institute' commonName :PRINTABLE:'example.osf.org' emailAddress :IA5STRING:'email@example.com' Certificate is to be certified until May 12 15:39:33 1998 GMT (365 days) Sign the certificate? [y/n]:y 1 out of 1 certificate requests certified, commit? [y/n]y Write out database with 1 new entries Data Base Updated
The server certificate is created in the file newcert.pem as shown in Example 12 (line-breaks added for issuer and subject).
issuer :/C=US/SP=MA/L=Cambridge/O=The Open Group/OU=Research Institute/ CN=Example firstname.lastname@example.com subject:/C=US/SP=MA/L=Cambridge/O=The Open Group/OU=Research Institute/ email@example.com serial :01 Certificate: Data: Version: 0 (0x0) Serial Number: 1 (0x1) Signature Algorithm: md5withRSAEncryption Issuer: C=US, SP=MA, L=Cambridge, O=The Open Group, OU=Research Institute, CN=Example firstname.lastname@example.com Validity Not Before: May 12 15:39:33 1997 GMT Not After : May 12 15:39:33 1998 GMT Subject: C=US, SP=MA, L=Cambridge, O=The Open Group, OU=Research Institute, firstname.lastname@example.com Subject Public Key Info: Public Key Algorithm: rsaEncryption Modulus: 00:a1:41:0b:0c:15:53:a5:a5:c4:37:a8:48:f5:79: 39:9f:18:2d:f4:bf:43:34:36:21:23:03:48:a5:65: cb:e2:f8:97:af:9c:7d:df:1e:9b:54:e2:ad:21:e3: 41:3e:54:9a:ce:dc:66:4d:61:59:fb:83:11:36:BF: 9c:3b:47:20:fb Exponent: 65537 (0x10001) Signature Algorithm: md5withRSAEncryption 63:77:e7:f8:aa:0b:90:5e:13:9e:4b:57:f1:0f:22:f9:4c:e3: 7a:AA:ff:a7:8a:2e:3c:1c:a2:92:07:bc:9f:22:3f:2f:13:3f: 60:62:57:a7:74:12:35:28:82:b1:00:2a:36:54:de:67:CD:a2: 9e:24:3e:98:be:14:4e:35:b7:7f -----BEGIN CERTIFICATE----- MIICLTCCAdcCAQEwDQYJKoZIhvcNAQEEBQAwgZ4xCzAJBgNVBAYTAlVTMQswCQYD ... Ij8vEz9gYlendBI1KIKxACo2VN5nzaKeJD6YvhRONbd/ -----END CERTIFICATE-----
The Apache-SSL httpd.conf file must be modified to specify the server certificate and key files as follows:
# Point SSLCertificateFile at a PEM encoded certificate. SSLCertificateFile /opt/www/lib/certs/sitecert.pem # If the key is not combined with the certificate, use this directive to # point at the key file. If this starts with a '/' it specifies an absolute # path, otherwise it is relative to the default certificate area. That is, # it means "/private/". SSLCertificateKeyFile /opt/www/lib/certs/sitekey.pem
<TITLE>Create Client Certificate</TITLE>
Create Client Certificate
 <FORM NAME="GenerateForm" ACTION="http://example.osf.org/cgi-bin/ns_key.pl">

Common Name:	 <INPUT TYPE="TEXT" NAME="commonName" VALUE="Client Certificate" SIZE=64>

email:	 <INPUT TYPE="TEXT" NAME="emailAddress" VALUE="firstname.lastname@example.com" SIZE=40>

Organization:	 <INPUT TYPE="TEXT" NAME="organizationName" VALUE="The Open Group">

Organizational Unit:	 <INPUT TYPE="TEXT" NAME="organizationalUnitName" VALUE="Research Institute">

Locality (City):	 <INPUT TYPE="TEXT" NAME="localityName" VALUE="Cambridge">

State:	 <INPUT TYPE="TEXT" NAME="stateOrProvinceName" VALUE="MA">

Country:	 <INPUT TYPE="TEXT" NAME="countryName" VALUE="US" SIZE="2">

  <KEYGEN NAME="SPKAC" CHALLENGE="challengePassword"> <INPUT TYPE="SUBMIT" NAME="SUBMIT"> </FORM>

#!/usr/local/bin/perl require 5.003; use strict; use CGI; use File::CounterFile; # module to maintain certificate request counter my $doc_dir = $ENV{'DOCUMENT_ROOT'}; # apache specific location for storage unless($doc_dir) { print "<TITLE>Failure</TITLE>"; print "DOCUMENT_ROOT not defined"; exit(0); } my $base_dir = $doc_dir; $base_dir =~ s/\/htdocs//; my $SSLDIR = '/opt/dev/ssl'; # define where SSLeay files are located my $CA = "$SSLDIR/bin/ca"; my $CONFIG = "/opt/www/lib/ssleay.cnf"; my $CAPASS = "caKEY"; my $query = new CGI; # get a handle on the form data my $key = $query->param('SPKAC'); # this will fail if not Netscape browser unless($key) { fail("No Key provided $key. Netscape required"); } my $counter = new File::CounterFile("$base_dir/.counter", 1); unless($counter) { fail("Could not create counter: $!"); } my $count = $counter->inc(); my $certs_dir = "$base_dir/certs"; my $req_file = "$certs_dir/cert$count.req"; # certificate request filename my $result_file = "$certs_dir/cert$count.result"; # certificate filename # Explicitly list form fields we must have for certificate creation to work. my @req_names = ('commonName', 'emailAddress', 'organizationName', 'organizationalUnitName', 'localityName', 'stateOrProvinceName', 'countryName', 'SPKAC'); # build the request file open(REQ, ">$req_file") or fail("Could not create request $req_file: $!"); my $name; foreach $name (@req_names) { my $value = $query->param("$name"); $value =~ tr/\n//d; print REQ "$name = $value\n"; } close(REQ); # make sure we actually created a request file unless(-f $req_file) { fail("request missing: $req_file"); } unless(-e $CA) { fail("command missing"); } # ensure that ca command will run # command for processing certificate request, without password my $cmd = "$CA -config $CONFIG -spkac $req_file -out $result_file -days 360"; my $rc = system("$cmd -key $CAPASS 2>errs"); if($rc != 0) { fail("$cmd
rc = $rc", "errs"); } open(CERT, "<$result_file") or fail("Could not open $result_file
$!"); # send the client certificate to the browser print "Content-Type: application/x-x509-user-cert\n"; my $result = join '', <CERT>; close CERT; my $len = length($result); print "Content-Length: $Len\n\n"; print $result; exit(0); sub fail { my($msg, $errs) = @_; print $query->header; print $query->start_html(-title => "Certificate Request Failure"); print "
Certificate request failed
$MSG
"; if($errs) { if(open(ERR, "<errs")) { while(<ERR>) { print "$_
"; } close ERR; } } print $query->dump(); print $query->end_html(); exit(0); } 1;
The CGI script for Netscape Navigator creates a file containing the distinguished name values returned by the form, and a special SPKAC value for the "Signed Public Key And Challenge (SPKAC)" generated by Navigator. This file contains the information which would be in a certificate request, and is used to generate the certificate.
The SSLeay ca command is called with this file as an argument to generate a client certificate, as follows (Also see ns-ca.doc from the SSLeay documentation) :
$SSLDIR/bin/ca -spkac $req_file -out $result_file -days 360 -key $CAPASS \ -config /opt/www/lib/ssleay.cnf 2>errs
This example shows the command after some of the Perl processing to create the command has been performed. The $req_file variable contains the name of a unique file in the certs directory used to contain the certificate request information obtained from the CGI form data. The $result_file variable contains the name of a unique file in the certs directory used to contain the certificate. The $CAPASS Perl variable contains the CA key.
If the ca command is successful, then the certificate is returned by the CGI script as an application/x-x509-user-cert HTTP Content-Type. Navigator recognizes this type, and prompts the user for the remainder of the steps required to install the user certificate in the browser.
<TITLE>Client Certificate Request</TITLE>  <OBJECT CLASSID="clsid:33BEC9E0-F78F-11cf-B782-00C04FD7BF43" CODEBASE=certenr3.dll ID=certHelper> </OBJECT>
Generate key pair and client certificate request
 <FORM METHOD=POST ACTION="http://example.osf.org/cgi-bin/ms_key.pl" NAME="GenReqForm" onSubmit="GenReq()">

Common Name:	 <INPUT TYPE=TEXT NAME="commonName" VALUE="Client Certificate" SIZE=64>

Country:	 <INPUT TYPE=TEXT NAME="countryName" VALUE="US" SIZE=2>

State or Province:	 <INPUT TYPE=TEXT NAME="stateOrProvinceName" VALUE="MA">

City:	 <INPUT TYPE=TEXT NAME="localityName" VALUE="Cambridge">

Organization:	 <INPUT TYPE=TEXT NAME="organizationName" VALUE="The Open Group">

Organizational Unit:	 <INPUT TYPE=TEXT NAME="organizationalUnitName" VALUE="Research Institute">

 <INPUT TYPE=HIDDEN NAME="sessionId"> <INPUT TYPE=HIDDEN NAME="reqEntry"> <INPUT TYPE="SUBMIT" name="SUBMIT"> </FORM>
It is more complicated than the Netscape Navigator CGI script because it must create an HTML page containing JavaScript which calls an ActiveX control in order to install the client certificate. The CGI script does the following:
The script takes the certificate request generated by Internet Explorer from a hidden form field, and reformats it so that each line in the request is 72 characters long. It then passes this certificate request to the SSLeay ca command to generate a certificate, as follows:
$SSLDIR/bin/ca -in $req_file -out $result_file -days 360 -policy policy_match \ -config /opt/www/lib/ssleay.cnf -key $CAPASS 2>errs
Once the certificate has been successfully generated, the SSLeay crl2pkcs7 utility is used to combine the certificate with the SSLeay certificate revocation list (CRL) to create a PKCS#7 certificate. This is done using the crl2pkcs7 command as follows:
$SSLDIR/bin/crl2pkcs7 -certfile $result_file -in $CRL -out $pkcs7_file 2>errsThis example shows the command after some of the Perl processing to create the command has been performed. The $result_file variable contains the name of a unique file in the certs directory used to contain the certificate. The $pkcs7_file Perl variable contains the name of a unique file in the certs directory used to contain the result PKCS#7 certificate. The $CRL Perl variable contains $SSLDIR/crl/crl.pem, the file containing the Certificate Authority certificate revocation list.
A certificate revocation list may be created using SSLeay as follows:
$SSLDIR/bin/ca -gencrl -config /opt/www/lib/ssleay.cnf -out $SSLDIR/crl/crl.pem
Thanks to Rick Cormier, Ed Frankenberry, Scott Meeks, Tom Titchner, David Weisman and Mary Ellen Zurko for reviewing this article and providing many useful suggestions and insights. Thanks to Doug McEachern for reviewing the Perl code.
Frederick J. Hirsch
The Open Group Research Institute
11 Cambridge Center, Room 418
Cambridge, MA 02142
Frederick J. Hirsch is a Principal Research Engineer at The Open Group Research Institute.
His interests include human-computer interaction, artificial intelligence and marketing. He is currently working on software to add functionality and ease of use to the Web by extending browsers, filtering HTTP streams, and implementing server plugins.
Before joining the Open Group Research Institute he wrote software for security trading at the MacGregor group and for network analysis at Bolt, Beranek and Newman (BBN). Prior to that, he worked on the Datakit local network at AT&T Bell Laboratories. He has an MBA from Boston University, a Master's in Computer Engineering from Stanford University, and a Bachelor of Science in Computer Science and Electrical Engineering from MIT.