text:
Posts Tagged 'Night Dragon'
Wednesday, September 3, 2014 @ 05:09 PM gHale
By Gregory Hale
It wasn't too long ago when industrial control systems (ICS) and supervisory control and data acquisition (SCADA) systems were in the scope of the bad guys. These systems, sometimes close to 30 years old and considered easy pickings, were suffering hacks, or threatened hacks, on a fairly regular basis.
The thing is, they still are.
Science Fiction Becomes Reality
Getting to the Core of Security
Practical SCADA Security
Science Fiction Becomes Reality
When you looked at the headlines a year or two ago, they talked about Stuxnet, Night Dragon, Shamoon, Saudi Aramco, RasGas, ExxonMobil, Shell, just to name a few. Now the news still talks about hack attacks, but they are of a different kind. This time the retail sector is in the crosshairs. Just look at Target, Neiman Marcus, and most recently Home Depot.
Home Depot is the latest retailer to suffer a major credit card data breach that may have started in late April or early May.
The Atlanta-based home improvement retailer is now working with banks and law enforcement to investigate "unusual activity" that would point to a hack.
It is easy to say this is just the retail sector and it doesn't affect manufacturing, but that is not true. Just how should the manufacturing industry react to the point of sale (PoS) attacks going on in the retail sector?
The main thing is, security professionals in the industry should remain vigilant and keep their mind in the game and know an attack is just a click away.
"I have been watching the PoS issues, including several notifications from the NCCIC (National Cybersecurity and Communications Integration Center)," said Joel Langill, ICS cyber security consultant and founder of SCADAhacker.com. "I believe that this is 'the retail industry's Stuxnet.' The recent Target and Neiman Marcus breach put these systems on the front page of the mainstream media, so all of those researchers shifted focus and are now having fun finding problems throughout these systems."
Researchers, however are finding similarities between retail systems and ICS/SCADA systems.
"I think there is a lot of comparisons between the attacks hitting the PoS terminals and the manufacturing world," said Graham Speake, vice president and chief product architect at NexDefense, Inc. "While the attackers are obviously after credit card information in these attacks, it does show the sophistication of the attackers. Like an industrial control system, the PoS network is normally a separate network with links to the main business network. The lack of attention to the PoS network in terms of what communications are occurring and egress monitoring, a fairly static network with real time devices on it and devices that are not updated/upgraded frequently are also characteristics of industrial control networks."
In the dynamic and evolving security environment, bad guys continue to find new ways to get into systems, but these attackers are not moving from industry to industry like a bunch of 7-year-olds chasing a ball while playing a soccer game. In most cases, these are professional attackers on a very specific mission going after their target.
"I don't believe that it is the same set of threat actors, so manufacturing should not lower their guard thinking that the bad guys have shifted targets — it is a new set of bad guys with the same ones still targeting manufacturing," Langill said. "Havex (Dragonfly, Energetic Bear, Crouching Yeti) should have shown this, and should have opened everyone's eyes to the new tactics of exploiting 'trusted relationships.'"
"Owners of PoS networks had put in defenses to protect that data, even regulated with PCI standards, but the lack of visibility allowed multiple breaches (even after the Target warnings)," Speake said. "Attackers could turn their attention to ICS networks and, using similar attack tools and methods, gain access to these networks, not for credit card scraping but for extortion or disruption."
Wednesday, November 6, 2013 @ 05:11 AM gHale
By Gregory Hale
It is very easy to take a fatalistic approach to security because it seems attackers have the upper hand, but it doesn't have to be that way.
"The bottom line is the bad guys are winning and we must take action," Jeff Zindel, cyber security business leader at Honeywell Process Solutions said Wednesday during his keynote address at the 2013 Honeywell User Group (HUG) EMEA conference in Nice, France. "We must take a proactive approach to cyber security."
HUG: Safety, Security are One
HUG: Take Security Seriously
HUG: Security, Safety Tech Talk
HUG: Security, Safety Front and Center
With all the successful attacks and intrusions that have covered all or parts of the industry over the past three years or so, it could be easy to get lost in the hype and hysteria.
The big name attacks were Stuxnet, Shamoon, Flame, Duqu, Night Dragon, Operation Aurora, Red October and Gauss to name a few.
Industrial control systems (ICS) attacks have had a compounded annual growth rate of 54 percent, Zindel said.
Some of the drivers behind attacks are technology costs have decreased; network connections are multiplying, information sharing has grown and people are learning they can make money with attacks. While the better known cyber bad guys — like nation states, hacktivists, and cyber spies – make up a strong list of perpetrators, there is also the inside threat that provides a twist on the attack scenario.
"Inside threats represent a tremendous threat," Zindel said. "I call them the Snowden affect. They are very hard to catch and detect." In addition, Zindel talked about the insider risks, where trusted resources suffered a compromise where malware may have landed in a home computer and these people download that virus and unwittingly introduce it into the workplace.
With threats coming from the inside and from the outside, manufacturers have to build a solid security program.
"Building a fortress is not enough," Zindel said. "A hard shell is not enough; air gapped islands are not enough. We need to protect from the inside out as well as from the outside in."
"We have a path to fight the problems, a dedicated services program, a program to run just as you would run your safety program. Cyber security must be treated as a dedicated continuous program, not an event."
There needs to be more than just one aspect of security. "Embedded security is good, but it is not enough," Zindel said. There has to be more with ongoing solutions, systems, tools and services. No solution fits everyone's needs, so an integrator and end user need to work together to find the right answers, he said.
Whether getting started with a security program or after you have one installed, there are some questions you need to ask to ensure you have the right focus:
• Do you know your current security risk?
• Have you identified your high value targets in systems and operations?
• What measures are you taking to protect those targets?
• Assume you have been attacked and are you aware?
"The final question you have to ask is are you ready because the attackers are coming," Zindel said.
Tuesday, October 15, 2013 @ 06:10 PM gHale
By Gregory Hale
Levels of cyber security awareness just keep increasing throughout the industry.
"From 2006 when I first started at Invensys people were talking about firewalls and how that made them secure," Doug Clifton said Tuesday during the Invensys Software Conference and Tech Support Symposium in Dallas, TX. "From 2006 to today you can just see the increase in awareness. The thought process is changing to thinking about installing applications."
Invensys Deals for HMI Provider
Invensys: Compliance and Security
Invensys: Safety Pays
Invensys: Information in Context
Invensys: Foxboro Evo Integrates Safety
With all the big attacks in the news like Stuxnet, Night Dragon and Shamoon, security awareness obviously has grown with security professionals, but the good news is it has also risen with the rank and file workers on the plant floor.
"You are hearing about security more than just at work," said Clifton, director of Invensys Operations Management's Critical Infrastructure Security Practice. "Just yesterday, my kids' school sent home a note about cyber security. So, it is all around us. Awareness is there."
"When I started, security was all about being an insurance policy. Today we can also make the network performance much better. The goal is to protect the network from various things – even themselves."
There are companies that talk about security compliance and some that talk about tactical solutions, but Clifton said they should be somewhere in between where they are compliant to best practices and standards.
As the awareness increases, some people will talk about doing a penetration test to attack a system to find weaknesses. But Clifton talks about doing a vulnerability assessment.
"We want to get the basics introduced," he said. "After a while we may get to the point of doing a penetration test, but we are not there yet. We want to bring in best practices. We don't want to focus on the big monster of NIST standards. We want to deal with the basics on how you can protect yourself without breaking the bank. We find we have clients that are not sure what they have that needs protecting."
He talked about one case where he went into a manufacturer and they told him they were not sure why they needed security at all. They were a small company that was producing a simple product. As it turned out they were making a good bit of revenue off a new type of coating that would ensure their customers would only have to apply it once a year instead of the usual twice a year. That, they said, would save their customers time and money. Clifton then told them, wouldn't you want to ensure your intellectual property – in this case an industry leading product – would stay in your possession and not fall into the hands of a competitor. That is when they understood why then needed a security program.
"Securing intellectual property is pretty fundamental along with safety of personnel. Not enough people give credence to security intellectual property."
Yes awareness is on the increase, but often times Clifton and his team have to go into a user and just sit down and have a conversation on their objectives.
Security will mean there will be changes, and it will not be business as usual. The main goal is to not add in levels of complexity. We want to take it and make it more robust and create an environment that is not impactful to their work.
"Going from zero to secure is a pretty big step," he said. "There are intermittent goals along the way. It is a journey. The further along they are in the journey, the better the questions they ask."
Thursday, March 14, 2013 @ 05:03 AM gHale
By Gregory Hale
Patching is often ineffective in providing protection from the multitude of vulnerability disclosures and malware targeting critical infrastructure systems today, new research shows.
While patching such systems is important as part of an overall defense in depth strategy, the difficulties of patching for industrial systems mean that compensating controls are often a better method of providing immediate protection, according to research from Tofino Security.
Downtime: Utility Suffers Virus
Antivirus Not Catching New Viruses
Symantec Antivirus Bug
Sophos Fixes Critical Security Hole
Since the discovery of the Stuxnet malware in 2010, industrial infrastructure has become a key target for security researchers, hackers, and government agents. Designed years ago with a focus on reliability and safety, rather than security, Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS) are often easy to exploit.
As a result, there has been exponential growth in government security alerts for these systems in the past two years. In addition, they have attracted some of the most sophisticated (Stuxnet, Night Dragon, Flame) and damaging (Shamoon) cyber attacks on record.
The report, conducted by Eric Byres, CTO and vice president of engineering at Tofino Security, found:
• The number of vulnerabilities existing in SCADA/ICS applications is high, with as many as 1,805 vulnerabilities not yet found existing on some control system computers. After analyzing the amount of software on the average control PC in a refinery and then using a metric called Defect Density to calculate the number of expected vulnerabilities, the research showed this one refinery had 1,805 possible vulnerabilities for the average PC.
• The frequency of patching needed to address future SCADA/ICS vulnerabilities in controllers and computers likely exceeds the tolerance of most SCADA/ICS operators for system shutdowns. Unlike IT systems, most industrial processes operate 24×7 and demand high uptime. Weekly shutdowns for patching are unacceptable.
• Even when a user can install patches, they can be a problem. There is a 1 in 12 chance any patch will affect the safety or reliability of a control system, and there is a 60 percent failure rate in patches fixing the reported vulnerability in control system products. In addition, patches often require staff with special skills. In many cases, such experts often do not have proper certification for access to safety regulated industrial sites.
• Patches are available for less than 50 percent of publicly disclosed vulnerabilities.
• Critical infrastructure operators are reluctant to patch as it may degrade service and increase downtime.
When patching is not possible, or while waiting for a semi-annual or annual shutdown to install patches, an alternative is to deploy a workaround, also known as a "compensating control." Compensating controls do not correct the underlying vulnerability; instead, they help block known attack vectors. Examples of compensating controls include product reconfigurations, applying suggested firewall rules, or installing signatures that recognize and block malware.
Another compensating control is rule and protocol definitions that address newly disclosed vulnerabilities. They provide a way for automation system vendors to create and securely distribute malware protection. Operators benefit from a package of tailored rules they can install without impacting operations. The result is critical industrial infrastructure facilities can quickly and effectively defend themselves against new threats.
"My research highlights the multiple challenges with patching for SCADA and ICS systems," Byres said. "To secure facilities, critical infrastructure operators should pursue a defense in depth strategy that includes patching when possible, and use compensating controls for protection when patching is not possible."
Click here for more information on ICS and SCADA patching from Eric Byres.
Wednesday, August 29, 2012 @ 08:08 PM gHale
By Richard Sale
One year after U.S. cyber investigators uncovered a five-year-old Chinese hacking venture called Shady RAT that looted "trillions of dollars worth of intellectual and corporate data from U.S. companies," the response of the corporations to the threat is still loosely coordinated and ineffective, former U.S. intelligence officials said.
"Companies think first of their shareholders or shielding their name, not safety," one official said. "They have a phobia about publicity."
Saudi Aramco Back Up after Attack
Finding a RAT behind Cyber Attacks
'Night Dragon' Follow: Six Oil Firms Hacked
Sites Change Tactics after Attack
One Attack Starts at Web Site
"This is a very sensitive matter which companies find it hard to talk about or address," another official said. "They feel that the government should be protecting them when, in fact, they should be protecting themselves."
Whether this means companies are ignoring the attacks or they are quietly hiking their security posture remains unclear, the result is in most cases, it has been ineffective, sources said, and yet more companies, like oil giant Saudi Aramco, are suffering from major targeted attacks.
Even the U.S. patent offices "are a very attractive target for espionage," said James Lewis, a cyber expert at CSIA in Washington. "For hackers, its one-stop shopping. Why waste time when you can you can go to the source and get the finished product."
Shady Rat is no different than other attempts by China to evade security and loot the property of U.S. corporations and federal agencies. They have been looting U.S. banks of hundreds of millions of dollars a year, said Lewis. Only one bank, Citi group went public with their losses.
In a 14-page report issued last year, the security firm, McAfee listed "72 companies in 14 countries it claimed have been the victim for more than five years of cyber attacks siphoning intellectual property – including government data, business dealings and corporate research."
Victims included government bodies in the United States, Taiwan, South Korea, Vietnam and Canada, said Dmitri Alperovitch, vice president of threat research at McAfee. Fifty of the victims included "corporations government agencies (particularly defense contractors) and nonprofits based in the United States. Other sites infiltrated included the United Nations and Associated Press."
U.S. patent offices "are a very attractive target for espionage. For hackers, its one-stop shopping. Why waste time when you can you can go to the source and get the finished product."
– James Lewis, CSIA cyber expert
One U.S. intelligence official said that malware has been removed from most sites, but said the case is still "on-going." The weapon used by attackers was the common email.
In the case of the United Nations, the hackers broke into the computer system of its secretariat in Geneva in 2008, hid there for nearly two years, and combed through reams of secret data, McAfee said.
"Even we were surprised by the enormous diversity of the victim organizations and were taken aback by the audacity of the perpetrators," Alperovitch said in the report.
"What is happening to all this data … is still largely an open question. However, if even a fraction of it is used to build better competing products or beat a competitor at a key negotiation (due to having stolen the other team's playbook), the loss represents a massive economic threat."
McAfee learned of the extent of the hacking campaign in March 2011, when researchers discovered logs of the attacks while reviewing the contents of a "command and control" server they discovered in 2009 as part of an investigation into security breaches at defense companies.
It called the attacks "Operation Shady RAT" and said the earliest breaches date back to mid-2006, though there might have been other intrusions. (RAT stands for "remote access tool," a type of software that hackers and security experts use to access computer networks from afar).
Some of the attacks lasted just a month, but the longest — on the Olympic Committee of an unidentified Asian nation — went on and off for 28 months, McAfee said.
In February 2011, McAfee warned hackers working in China broke into the computer systems of multinational oil and natural gas companies to steal bidding plans and other critical proprietary information. Exxon Mobil, Royal Dutch Shell, BP, Marathon Oil, ConocoPhillips and Baker Hughes were the six companies targeted in the attack.
"Night Dragon" attacks relied on a combination of spear-phishing, social engineering, Windows bugs and RATs to guarantee success. The catch is none of the tactics were particularly sophisticated, said McAfee, which uncovered the assault emanating from China and consisting of covert attacks targeting oil, energy and petrochemical companies as far back as November 2009.
"(The attacks) were very successful," Alperovitch said. The information the hackers obtained had huge value to competitors.
That information included financial documents related to oil and gas field exploration and bid negotiations, as well as operational details on oil and gas field production supervisory control and data acquisition (SCADA) systems. That attack showed security needs to be strong from the field all the way through the enterprise. You never know where the attack could occur.
Friday, July 13, 2012 @ 09:07 AM gHale
By Nicholas Sheble
"APTs (advanced persistent threats) are not a 'what,' but a 'who,'" said Daniel Teal the chief technology officer at CoreTrace. It's particular people who are after you, your products, or what you know, your information."
"They have resources, expertise, and the time to get you." APTs have delivered the famous cyber attacks that are familiar in the mainstream like Stuxnet, Aurora, Night Dragon, and others.
APT: Attackers get What They Want
Focused Effort: Securing Against APTs
Securing SCADA Systems from APTs
Stuxnet Warfare: The Gloves are Off
Breaking Down Flame's Roots
An advanced persistent threat (APT) is a cyber threat or cyber attack where the hacker has the ability to evade detection and the capability to gain and maintain access to well-protected networks and the sensitive information in them.
The hacker is adaptive and well resourced. The persistent nature of the threat makes it difficult to prevent access to one's computer network and, once the threat actor has successfully gained access to one's network, very difficult to remove.
The hacker has not only the intent but also the capability to gain access to sensitive information stored electronically. ISSSource has reported before on APTs and the website contains an informative white paper on them.
Beyond discussing the objectives of APTs, Teal spoke Thursday during a company webinar entitled "Combating Advanced Persistent Threats: The Case for Application Whitelisting-based Solutions," about potential targets, what the primary weapons include (like memory attacks), and the best solutions to stave off such attacks.
One of those methods includes a compelling case for application whitelisting-based advanced threat protection platforms.
Application whitelisting is a concept whereby only authorized applications can run on the network and its nodes. So rather than searching out malware using antivirus software, the system blocks everything — except those functions that the user designates to run.
The anti-malware applications of this technique suppose that malware never gets on the whitelist. As long as the whitelist remains malware-free then malware cannot run. Teal said whitelisting can stop all APTs.
Nicholas Sheble (email@example.com) is an engineering writer and technical editor in Raleigh, NC.
Securing Real-Time Drilling Data
By Gregory Hale
There is no better term around today that sums up the requirements for oil and gas
Read More.
Tuesday, June 19, 2012 @ 06:06 PM gHale
Editor's Note: This is Part I of an excerpt from Eric Byres' Practical SCADA Security blog at Tofino Security.
By Eric Byres
A very complex worm called Flame has been discovered attacking companies in the Middle East, and it is an excellent example of what security experts call an Advanced Persistent Threat (APT). Figuring out how to defend against APTs is a major focus in the IT security world.
Now while Flame was busy attacking the Middle East, I was in Abu Dhabi at the International Cyber Security Forum for Energy and Utilities, listening to a talk by Paul Dorey called "Advanced Persistent Threats – A Real Problem with Real Solutions." Paul's talk focused on security for the IT industry, but there were important lessons on managing attacks in the ICS/SCADA world.
Stuxnet Warfare: The Gloves are Off
Breaking Down Flame's Roots
Fake Certificates Spread Flame
How to Check for Flame
Flame and SCADA Security
First, a little background. APTs are carefully crafted attacks against a focused target designed to be effective over an extended period of time. Ricard Bejtlich in his TaoSecurity Blog says it well:
• Advanced means the adversary can operate in the full spectrum of computer intrusion. They can use the most pedestrian publicly available exploit against a well-known vulnerability, or they can elevate their game to research new vulnerabilities and develop custom exploits, depending on the target's posture.
• Persistent means the adversary is formally tasked to accomplish a mission. They are not opportunistic intruders. Like an intelligence unit they receive directives and work to satisfy their masters. Persistent does not necessarily mean they need to constantly execute malicious code on victim computers. Rather, they maintain the level of interaction needed to execute their objectives.
• Threat means the adversary is not a piece of mindless code. This point is crucial. Some people throw around the term "threat" with reference to malware. If malware had no human attached to it (someone to control the victim, read the stolen data, etc.), then most malware would be of little worry (as long as it didn't degrade or deny data).
Rather, the adversary here is a threat because it is organized and funded and motivated. Some people speak of multiple "groups" consisting of dedicated "crews" with various missions.
Now some people claim that APTs are just marketing hype, but Paul offered some chilling case studies showing that APTs are very real threats. Flame is also good example of an APT, but so are Stuxnet, Nitro, Night Dragon and Duqu. These are all attacks discussed in previous papers and blogs. Trying to wish away APTs as hype is a clear case of sticking one's head in the sand.
Paul went on to discuss the seven advanced approaches that the best companies are using to deal with APTs. This column will discuss the first approach.
Advanced Approach #1 is to focus your protection efforts on your most important assets. It would be ideal to protect everything perfectly and do it all the time. Unfortunately modern systems, whether they are IT systems or control systems, have become too complex to achieve perfect and uniform security.
So the smart IT teams are focusing their scarce security resources on securing those assets that really matter to the survival of the company. They do not rely solely on a perimeter firewall to keep all the bad stuff out of the company (a technique known as a Bastion Model, which bases a security design on hiding behind a single monolithic solution which could result in the possibility of a single point of failure). Instead, they install additional layered defenses directly protecting key assets such as servers containing sensitive financial or intellectual property information.
There are good reasons for using this approach. The obvious one is that it allows a defense in depth strategy, rather than a bastion strategy. It also allows the company to focus additional money, effort and diligence on a few core assets. For example, it is a lot easier to carefully review the audit logs for two servers every day, rather than two hundred servers. Tasks that are highly focused are more likely to be carried out by over worked security staff.
The third reason is that these assets are the same ones the bad guys will focus on. Sure hackers and worms will go after any undefended computer, but in most cases these victims are just a stepping stone to the real target. Focusing your defensive efforts on the same things that your adversary is focusing on makes good security sense.
The strategy of focusing your defenses also works for ICS and SCADA security. Every control system has a few assets that would seriously impact production, safety or the environment if successfully attacked. These might be the safety integrated system (SIS) in a refinery, the PLC controlling chlorine levels in a water filtration plant, or the RTU in an electrical substation. Every control engineer knows what really matters to his or her particular operation. Aggressively protect this asset and the chance of a truly serious cyber incident is massively reduced.
Consider Stuxnet. Symantec reports the worm infected over 100,000 computers, 60% of these in Iran. But its ultimate target had to be the PLCs and drive controllers running the enrichment centrifuges. It wouldn't have mattered if Stuxnet had infected one billion computers; if it could not get to the PLCs, it would have failed in its mission. Had Iran's defense focused on protecting those PLCs, their enrichment process likely would never had been impacted. Clearly, they focused more on a bastion security model which ultimately failed them, allowing Stuxnet to impact at least 1000 centrifuges.
Don't get me wrong, neither Paul nor myself are advocating to give up on defending less critical assets or the network in general. This makes no more sense than a knight giving up the field and hiding in his castle.
What is needed (and is missing) is a balanced approach to system security. As an industry, we focus on trying to defend the entire field and forget about the castle containing the royal family. As long as the battle remains in the open, we think we are doing well. But when Ninja assassins (with names like Nitro, Duqu and Flame) start to sneak in, defending every laptop and desktop won't seem all that important once the grid is down or the plant is leaking toxic chemicals.
So install those firewalls and Intrusion Detection Systems between IT and ICS networks. Build yourself what NERC-CIP calls an Electronic Security Perimeter (ESP). There is nothing wrong with that as part of a security strategy. Just remember to balance it with a focused defense, protecting what really matters to your process or company. Forget to focus and we will win the battle, but lose the war.
Eric Byres is chief technology officer at Tofino Security. Click here to read the full version of the Practical SCADA Security blog.
Wednesday, June 6, 2012 @ 05:06 PM gHale
By Gregory Hale
Critical infrastructure organizations should be on alert because they will be the target of a cyber attack before long.
Over exaggerated hyperbole from folks watching the cyber security environment? Hardly. Just cold hard facts.
If Flame taught the industry anything, it is professional hackers can get in and find out details and nuances of any system they want to. It seems Flame did just that, as Duqu did before that. What they are looking for and what they have in store for potential victims remains to be seen. But for now, operators of critical infrastructure should be on alert. Not only because of the possibility of being collateral damage in a cyber war incident, but also because, as Night Dragon showed, there are organizations, companies, and countries trying to get in and steal vital information.
Stuxnet Warfare: The Gloves are Off
Flame: '20 Times Larger than Stuxnet'
New Stuxnet Waiting for Green Light
Stuxnet Loaded by Iran Double Agents
Cyber Warning: Duqu's Back
In the Night Dragon case, the attackers compromised perimeter security through SQL injection attacks on extranet web servers; targeted spear-phishing attacks aimed at mobile workers' laptops, and took control of corporate VPN accounts. They were able to get in and find out financial documents related to oil and gas field exploration and bid negotiations, as well as operational details on oil and gas field production supervisory control and data acquisition (SCADA) systems.
Companies today need to protect against any possible attack vector from any source globally. Just take a look at Stuxnet.
As ISSSource reported last September, we know Stuxnet was the creation of a joint U.S., Israel project. What continues to astound is the thought other operators of critical energy sources, like electric, water, oil, coal, and nuclear among others are not moving faster to create a solid defense in depth posture to keep out the bad code that can lead to the destruction of a facility.
The idea originally espoused once we learned about the originators of the Stuxnet worm and the targeted victims was: "It was the good guys against the bad so we are not a target." That mindset seems to be winning out throughout the manufacturing automation industry. Unfortunately, that is a very misguided thought process. Protection is paramount.
Stuxnet is a sophisticated piece of computer malware designed to sabotage industrial processes controlled by Siemens SIMATIC WinCC and PCS 7 control systems. The code, which is currently out on the Internet, used known and previously unknown vulnerabilities to install, infect and propagate, and was powerful enough to evade state-of-the-art security technologies and procedures.
The worm used at least four zero-day exploits and had Microsoft Windows driver modules signed using genuine cryptographic certificates stolen from respectable companies, contained about 4,000 functions, and utilized advanced anti-analysis techniques to render reverse engineering difficult.
As ISSSource's Richard Sale reported back in October, Stuxnet had its true origin in the waning moments of George W. Bush's presidency in 2009, said former senior intelligence officials, one of whom worked for the National Intelligence office.
At the time, President Bush wanted to sabotage the electrical and computer systems at Natanz, which is a fuel enrichment plant in Iran. After Bush left office, President Barack Obama accelerated the program, these sources said.
The groundwork for the plan began much earlier though. In 2007, Idaho National Laboratory (INL) inked a development contract with Siemens the purpose of which was to help Siemens study its own computer weaknesses, the sources said. Quite a few suppliers have these types of pacts with INL to test platforms to find and resolve weaknesses.
In 2008, shortly after Siemens brought in the system for analysis, the Department of Homeland Security got wind of it and teamed with INL to study Siemens PCS 7 or Step 7 platform which runs all sorts of sensors and machines in the process control system, the sources said.
As it turned out the system they were testing was also the same system running the nuclear enrichment plant in Natanz.
While the technical plan of creating the Stuxnet virus was ongoing, Israel was training operatives, or as it turned out double agents, to plant the worm using a corrupt "memory stick.32," said former and serving U.S. intelligence officials.
These sources, who requested anonymity because of their close proximity to investigations, said a saboteur at the Natanz nuclear facility, probably a member of an Iranian dissident group, used a memory stick to infect the machines there. They said using a person on the ground would greatly increase the probability of computer infection, as opposed to passively waiting for the software to spread through the computer facility.
"Iranian double agents would have helped to target the most vulnerable spots in the system," one source said. In October 2010, Iran's intelligence minister, Heydar Moslehi said an unspecified number of "nuclear spies" were arrested in connection with Stuxnet.33 virus.
These acts against Iran will not go unpunished. It only makes sense Iran will find a way to fight back in this new era of cyber warfare. But put that thought aside for a moment, code is out there that has proven it can get into systems and take them over. Stuxnet code is on the Net and there for the picking. A modified version or just a copy cat can end up sitting on a system of choice just lurking and waiting for a moment to pounce.
Stuxnet is scary code. The cold hard fact is more manufacturers need to focus on creating a defense in depth plan.
Gregory Hale is the founder and editor of ISSSource.com.


text:
It was a place to sleep.
I had chosen a non-smoking room, but the bed sheets had cigarette burn holes in them. There was live wires hanging out of the wall with no socket right next to the bed. Room 705.
If you get the view facing the harbor, that's a huge plus. Otherwise, you view apartments (with laundry all over the balcony) and garbage dumpsters and such. The lobby is beautiful.
The view out my room required keeping the windows shut. It's pretty over priced. No free Wi-Fi. But how could you at---- It's probably not economically feasible to offer such an amenity given the technology limitations of 2014. Bed is too firm.
Here's why:
We're not the seller
At KAYAK we don't set prices, so it's not possible for us to guarantee what other companies are selling.
We aggregate tons of data for you
Our service lets you quickly and easily compare results from hundreds of travel sites at once. In this sense, KAYAK is a search engine and we don't guarantee prices we find.
Why aren't prices accurate 100% of the time?
Prices on airline seats, hotel rooms and car rentals can change frequently. Several people may also be trying to buy the same travel option simultaneously. As a result, you may find on occasion that certain prices are no longer available.
More questions or if you have a bad price to report to us
Please send us an
and someone from our team will get back to you promptly.
KAYAK is part of The Priceline Group, the world leader in online travel & related services.

subset: commoncrawl


text:
Chewy bully sticks that really last
Man's best friend for a reason
Bully sticks are the reason your dog is man's best friend. We'll help you keep it that way with our ValueBull 100 all natural 6 inch thick bully sticks.
- Compare ValueBull 6 inch thick bully sticks with 12 inch sticks to see what works best with your dog's mouth.
- The pencils in the photo are for comparision only so you can see how thick the bully sticks are
- Consider combining purchases with family and friends to buy in bulk vs individually to save even more
Bully sticks are available in many varieties, lengths, flavors, and thicknesses. Make sure to take the time to notice the length and thickness of the bully sticks you're buying so they fit your dog well. These shorter 6 inch bully sticks are a little more manageable for smaller dogs than the longer bully sticks. Buy several different lengths to test which bully sticks are best for your dog. We're proud of these particular bully sticks because we make them ourselves in house. Our ValueBull brand bully sticks are all hand checked for quality, thickness, and consistency. We won't sell you a bully stick we wouldn't give to our own dogs. Check out the details below.
Features & Benefits:
- No additives, preservatives, or chemicals
- Meat is all from grass-fed, free-range beef and buffalo
- Nutritious, fully digestible, low fat, high protein bully stick
- Hand-measured to ensure consistent thickness
- Promotes good oral hygiene, teeth, and gums
Ingredients: Beef and Buffalo Pizzle (Supplied in a resealable bag to maintain freshness). Please allow for natural variation in each chew treat
Origin: Produced by ValuePetSupplies, a family owned and operated online pet supply store since 2004. Meat is sourced in South America, India and Mexico.
Feeding Guidelines:
- Supervision is recommended when giving your dog any treat to prevent accidental choking or other injury
- Recommend no more than one natural treat chew per day
- Always provide plenty of fresh water to wash down those tasty bits
- Wash your hands after handling any natural treats
- Store ValueBull bully sticks in a dry place at room temperature
ValueBull Bully Stick Product Guide
(Click on links below)
Ideal for...
Smaller Puppies & Dogs
Medium Dedicated Chewers
Larger Dogs
Small to Medium Dogs
Medium to Large Dogs
Larger Dogs
Small to Medium Dogs
Small to Medium Dogs


text:
RENO, Nev. (AP) - A coalition of multi-faith religious leaders is asking Reno Mayor Bob Cashell to resume the practice of opening city council meetings with a prayer, which has been replaced in recent years with a moment of silence.
Universal Society of Hinduism President Rajan Zed and a dozen other leaders of different faiths told Cashell at city hall on Tuesday that invocations are standard practice at many councils across Nevada, including Las Vegas, Sparks and Carson City.
They say by offering prayers that don't speak to a specific religion, they can satisfy the constitutional separation of church and state. Cashell says he has an open mind about the matter and will ask the council to put it on an upcoming agenda.
Opponents say freedom of religion also means freedom from religion.
Copyright 2015 Associated Press. All rights reserved. This material may not be published, broadcast, rewritten, or redistributed.


text:
NonStop extends deal with Sandrew Metronome
Swedish distribution company NonStop Entertainment has extended its long-term distribution agreement for theatrical releases and video in Sweden, Denmark, Norway and Finland with leading pan-Scandinavian distributor Sandrew Metronome International. The agreement is set for another three years from January 1st 2003.
Continue reading – simply subscribe below
It takes just two minutes and you'll immediately gain full access to ScreenDaily.com, PLUS Screen International magazine delivered to your door.
Screen International Subscribers:
If you are a Screen International subscriber please sign in with your email address and click submit:
Not a Screen International subscriber?
Sign up today for immediate and complete access to ScreenDaily.com and Screen International magazine for as little as £19.95 a month!
Find out more about all the benefits of a subscription to Screen International.


text:
How To Cut Square Layers
Nic Davis From Simplicity Remastered gives a brief demonstration on creating a square layer hair style.
Hi, my name is Nic Davis from Simplicity Remastered and I'm here to show you five basic cutting techniques. To create a square layer, if you picture a box, you would lift the hair straight up and cut straight line. You would then lift hair straight out to the side cut the straight line again.
So when you lift the hair up on the side you will have a perfect corner.


text:
NOTE: MeLCat services have been temporarily suspended until December 11 due to technical reasons. Thank you for your patience. Learn more...
Log in
Libraries are usually more about words than numbers, although we do have the Dewey Decimal system!
I recently came across some statistics that claim to represent the global scope of library activity. I suspect that is hard to prove, but the numbers are interesting and fun to ponder nevertheless:
KPL statistics might not sound quite as impressive, but they reflect a strong increase over this time last year:
Come visit soon and we'll add the books you check out and your computer use to our statistics. We might be on course for a record breaking year.
Posted by Ann Rohrbaugh at 03/01/2010 08:25:10 AM |


text:
Technically, This Is a Recipe FAIL
A 4th of July Banana-Coconut Cream Pie was the goal, but after baking and whipping through mound after mound of bananas I found myself out of ingredients! So yeah, I won't pretend these dainty little morsels are exactly Plan A, but they do seem to be disappearing rather quickly around here.
Oh, And Don't Let Their Prim Appearance Fool You
They're best enjoyed a tad melty. In fact, if by the time you polish off the last bite your fingers aren't covered in tiny pink rivulets . . . well, you ate them wrong. Better go whip up another batch and start again.
Monday I'll be sharing one of my fave holiday treats, but for now I want to know:
What's YOUR favorite summer holiday treat???
Strawberry & Coconut Ice Cream Bars
Equipment Needed
- Food processor
- 8×12 pan
To Make The Crust:
You'll Need:
- 1 cup macadamia nuts
- 1 cup pecans
- date paste (6 large pitted dates blended in a food processor)
- 1/2 tsp vanilla extract
- 1/8 tsp unrefined sea salt (where to buy sea salt)
- 1 tsp coconut oil (where to buy coconut oil)
How To:
- Blend dates in food processor until they form a thick paste
- Add remaining ingredients (except coconut oil) and blend until they form a ball
- Lightly oil pan and press crust down evenly
To Make The Strawberry Coconut Ice Cream
You'll Need:
- 1½ cups full fat coconut milk
- 2 cups coarsely chopped strawberries
- ¼ cup honey
- ¼ cup coconut oil
- ½ cup shredded coconut
How To:
- Blend all ingredients except shredded coconut in food processor until smooth
- Pour over crust and place in freezer for 4 hours
- Remove from freezer and allow to thaw for 15-30 minutes.
- Cut into bars and roll in shredded coconut.
- Serve immediately or place back in freezer and allow to thaw 5-10 minutes before serving
- Come back and let me know how you liked them
» Recipes » Strawberry & Coconut Ice Cream Bars...
17 Responses to Strawberry & Coconut Ice Cream Bars {GAPS Friendly}
They definitely look delicious! I love coconut!
Those look yummy!
What I do for Banana Cream Pie:
*This custard made with coconut milk: http://nourishedkitchen.com/strawberry-rhubarb-compote-with-honey-custard/
*Add bananas (mixed in or on top)
*Pour in this crust (made with honey & CO): http://www.elanaspantry.com/chocolate-cream-pie/
*Top with coconut whipped cream (opt)
oh that sounds good!
dan found a ice cream recipe that uses coconut milk & it works perfect in our ice cream maker & is less expensive than purchasing so delicious
wow…..these do sound amazing!!! I will have to whip some up too!!!
Just made these and they are wonderful!!! I had to make a couple changes for the crust to make it form a ball– doubled the dates (maybe mine were small?) and added 2T water. Didn't add salt bc the macadamias I bought were already sea-salted. I realized right before freezing why it was all so shallow in the pan- I used a 9×13. But they turned out great! I actually scraped the pan clean with my fingers and savored away before actually eating the first one… Sold! The nutty crust really rounds out the strawberry flavor! I can't believe this is dairy-and-grain free… If you keep posting recipes this delicious I just might be a gaps convert after one bite riley said, "now you're gonna try to convince me you made these!" way to go heather, you've done it again!
These look and sound awesome! I'll be bookmarking these and thus making soon. Thanks!
These are AMAZING! I made my crust out of ground almonds, honey, CO, vanilla and salt because that was what I had and it turned out great but I can't wait to try it with the proper ingredients – sounds fabulous! Also, I've been making coconut milk every week thanks to your awesome tutorial :). Thanks Heather!
I just made these last night, and they are delicious! My 18-month old relished having a few little pieces to munch on, saying "Brr!" each time I passed her one. Stumbled onto your blog a few weeks ago, and it's inspired me so much… thank you!!!
[…] Strawberry Coconut Ice Cream Bars @ Mommypotamus […]
Leave a Reply
« Two Little Instruments Crispy Sour Cream & Onion Chips {GAPS-Style} »


text:
- Aggregates Manager - http://www.aggman.com -
Cat participating in Jeffries Global Industrial and A&D Conference, Webcast
Posted By Tina Grady Barbaccia On August 10, 2011 @ 9:56 pm In Manufacturers News,People News | No Comments
Caterpillar Inc. Director of Investor Relations Mike DeWalt will be speaking at the Jefferies Global Industrial and A&D Conference on Thursday, Aug. 11, 2011.
He is scheduled to speak at 11 a.m. Eastern Time. The presentation materials will be available Wednesday, Aug. 10, 2011, on http://www.caterpillar.com/eventscalendar [1]. In addition, DeWalt's presentation will be webcast in real-time and available to the public at http://wsw.com/webcast/jeff57/cat/ [2].
Listeners should go to the website at least 30 minutes before the live event to register for the event and to download and install any necessary audio software. The webcast will be available for replay for 90 days; no transcripts from the presentation will be made available.
Article printed from Aggregates Manager: http://www.aggman.com
URL to article: http://www.aggman.com/cat-participating-in-jeffries-global-industrial-and-ad-conference-webcast/
URLs in this post:
[1] http://www.caterpillar.com/eventscalendar: http://www.caterpillar.com/eventscalendar
[2] http://wsw.com/webcast/jeff57/cat/: http://wsw.com/webcast/jeff57/cat/
Click here to print.
Copyright © 2009 Aggregates Manager. All rights reserved.


text:
First step.
She looks up at the young girl entreating her with glassy, tear soaked eyes, beseeching forgiveness. The young girl looks allot like her daughter; long coils of lustrous red hair, gaping green eyes, freckled, honey bronzed skin and a slight, delicate frame. Her body is trembling. She closes her eyes, draining her final tears as the older woman takes another step up the three stone built stairs.
Second step.
The young girl's legs buckle underneath her body and she cripples to the ground. A gasp echoes from the crowd, intently contemplating the scene. The young girl sobs into her blistered hands, her knees tucked into her chest. "Please." She begs, her damp lashes closed tightly against her cheeks. Her hoarse voice is muffled by the sheet of lashing rain.
Last step.
The older woman reaches the stand, patiently waiting for the girl to rise. She looks up at the older woman. "You don't understand." She informs.
"Please rise." The older woman commands with a soft, almost grieving voice. She lends her hand to the young girl. She hesitates but allows her fragile fingers to latch onto the woman's hand. She gets to her feet. The older woman shakes her hand and nods approvingly.
"Please step here, Miss." The older woman guides. The girl does so and faces the crowd. The army of hissing women snarl in her direction, spitting at the stand she stands on. "Traitor!" One growls. The young girl lowers her eyes to her own bare feet.
"Head up please." The older woman directs, fixing the broad rope around the young girl's frail neck. She chokes back a final sob, allowing one last tear to shed her eyes.
"Do it." She commands.
The latch is pulled. The trap door parts. The young girl hangs.
© Copyright 2015phoebe thomas All rights reserved. phoebe thomas has granted theNextBigWriter, LLC non-exclusive rights to display this work on Booksie.com.


text:
Sheer indifference
Astragal had the pleasure of attending a seminar on tall buildings last week, which saw Uruguay's favourite architectural son, Rafael Viñoly, give the audience the inside track on his latest 'masterpiece': the Walkie Talkie tower. As time began to run out, Viñoly was given the two minute signal, prompting him to skip through his work. 'Boring', he said, as slide after slide flicked up of his proposals for 20 Fenchurch Street. 'Boring... boring', he continued, until finally he reached his last slide, when he thanked his audience for listening. Boring, Rafael? Well, Astragal can certainly think of a few other words to describe that particular building.
Have your say
You must sign in to make a comment.


text:
Oct. 18
Franklin County Chamber of Commerce Mixer, 5:30-7:00 p.m., St. Albans Historical Museum, 9 Church St. Sponsored by Jay Peak Resort. Keynote speaker: Bill Stenger, president and co-owner of Jay Peak Resort. $5 for chamber members; $8 for non-members. RSVP to the chamber office at email@example.com, or call 524-2444.
Oct. 21
First-Ever Local Motion Annual Party: 3-6 p.m., Intervale Center Farm Barn. Celebrate 13 years of Local Motion with wood-fired flatbread, sled dog rides, kids games and more. Free for members. $5 introductory membership special for others. Please RSVP: www.localmotion.org/party.
Oct. 22
Burlington Rotary Club, 12:10 p.m., Hilton Hotel, $17 for lunch. Program: Kevin Sneddon, University of Vermont hockey coach.
Oct. 23
Home Energy Audits: Presenter: Efficiency Vermont, 5:30-7 p.m., New England Federal Credit Union, 141 Harvest Lane, Williston. Free, seating is limited, 879-8790 or sign up at nefcu.com.
Oct. 24
Achieving a Sustainable Health Care Future: Delivering Value to Vermonters: Panel discussions with leading health care executives on the future of health care in Vermont. 7:30-11:30 a.m., Sheraton Conference Center, South Burlington.
Oct. 25
Vermont Venture Network: 8 a.m., networking event. Hilton Hotel, 60 Battery St., Burlington. Contact Linda Dissinger at 658-7830 or www.vermont venturenetwork.org.
Nov. 10
16th Annual Vermont Womens Economic Opportunity Conference. Vermont Technical College, Randolph Center. Presented by Sen. Patrick Leahy, D- Vt. Day-long conference offers a variety of workshops design to help women network and build their careers. Keynote speaker: Janette Bombardier, IBM Vermonts director of site operations. The conference, lunch and pre-registered child care are provided free of charge. For more information, or to register, visit Sen. Leahys website at www.leahy.senate.gov. Registration deadline is Nov. 1.
Nov. 13
GroundWork: A Series on Cultivating a Sustainable Future through Education, Applied Research and Innovation: Vermont Technical Colleges Randolph campus. First conference focuses on entrepreneurship on the farm. Subsequent conferences on Dec. 4, Jan. 15 and March 12 will focus on reducing food processing waste, connecting education with employers and aligning educational needs and resources. $25 per conference, or $75 for all four. Advanced registration: www.vtc.edu/groundwork. More information: firstname.lastname@example.com, or call 728-1339.
Nov. 15
Vermont Venture Network: 8 a.m., networking event. Hilton Hotel, 60 Battery St., Burlington. Contact Linda Dissinger, Vermont Venture Network administrator, 658-7830 or www.vermontventure network.org.


text:
After years of evaluations and public input, the state Department of Environmental Conservation has put forward a comprehensive plan to safely develop natural gas resources in the Marcellus Shale region.
The Steuben County Landowners Coalition, representing more than 200,000 acres of land in the Southern Tier region, supports this plan. We are original, frontline environmentalists — property owners who care about their land — and we believe the plan offers the most effective means to protect our land and water while boosting our economy.
In the years since the financial collapse of 2008, many homeowners in the region have struggled to make ends meet. Shale development could alleviate this burden.
Just across the border in Pennsylvania, we see the benefits natural gas can bring. Workers who were struggling to make ends meet just a few years ago now hold down well-paying jobs in natural gas production, construction and associated industries. While many of us in New York are struggling to simply hold onto our homes and property due to mounting debts, our neighbors in Pennsylvania are enjoying new prosperity.
Benefits of our neighbors' development have even rippled out. Heating bills have declined significantly, in some cases as much as 70 percent lower. This is because of the abundance of cheap, safe and environmentally friendly natural gas from the Marcellus Shale. All of this explains why landowners are determined to see natural gas development come to New York. But we're determined that it's done right. We want safe natural gas development overseen by state regulators to ensure our land remains protected.
New York has spent the past four years developing a comprehensive proposal to address the concerns residents have expressed while also preempting problems that have been seen with natural gas development in other states. In this regard, the DEC's proposed plan includes special protections for drinking water, requiring extra layers of cement casings in the wells that will extend 75 feet below even the deepest drinking water tables in our state.
The proposal includes thousands of pages of safety regulations to protect land and property that go beyond those employed in other states. These regulations are based on experience, science and facts. Combining the experience of others with the environmental concerns unique to New York results in multiple fail-safes that provide landowners the security they expect and deserve.
Gov. Andrew Cuomo and the DEC have laid out a sensible plan for natural gas development. We believe it is time to move forward with the plan so that our communities can enjoy the considerable benefits enjoyed by our neighbors in Pennsylvania.
Knowles is the president of Steuben County Landowners Coalition. He is a farmer who lives in Woodhull.


text:
Latest blog posts
- Urgent notice: Teach Too Oldham Conference scheduled for 03-12-15 26/11/15
- Teach Too/Two Way Street National Dissemination Conference 03-12-15 11/11/15
- Come to the Teach Too workshop at the AoC Conference! 03/11/15
- Latest Teach Too news, and additions to the website 06/10/15
- Teach Too and Apprenticeships: effective employer-provider collaboration 06/10/15
The Teach Too programme
The Institute of Education (IOE), in partnership with the Association of Employment and Learning Providers (AELP) is developing the Teach Too programme, commissioned and funded by the Education and Training Foundation.Teach Too aims to improve vocational learning by supporting occupational experts to become involved in teaching their expertise. The project comprises two distinct phases:
Teach Too phase 1 (February – September 2014)
Teach Too phase 2 (March 2015 – present)
Find out more
Please see the About section for more information on Teach Too, or send questions and messages via Contact Us. Please register with us to receive updates and information by email, as well as information about national and regional events. Or just tell us your ideas about Teach Too directly, by posting comments on the posts in our blog. You can also send questions and messages to us via the Contact emails. We look forward to hearing from you.


text:
Volume 11 - April 2012
Non-traditional is flying high
Counting the Spring 2 enrollment figures we're about 100 students over goal for online, extended and graduate enrollments – a huge benefit to our budget. The growth is the result of many folks' efforts and every one of us at the College, no matter our role, no matter our campus, owes them our thanks. This robust extension of our mission benefits every one of us.
Speaking of budget…
The completed FY13 budget has been approved by the Board of Trustees' Audit and Finance Committee, and is on its way to the whole Board for approval next month. We've come up with a conservative yet competitive financial blueprint for next year, providing a solid 4 percent bottom line on a $72 million budget.
Peruse it. Use it.
The tunnels and Benedictine Commons are open for use. Check out the impressive heritage panels highlighting the contributions of Sisters who have taught science over the decades. The new classrooms and laboratories are still works in progress, so they'll probably remain off limits for the rest of the academic year. The coffee shop on second floor facing Somers will open over the summer, as will the new greenhouse on the roof. The old greenhouse will be torn down to make way for new permanent parking, while the temporary parking lot in front of Science will be removed this summer.
On the academic horizon
We have a couple of potential new academic programs in the pipeline, one further along than the other. SBT has proposed an M.S. in Project Management, which just received final faculty approval this week and goes to the Board of Trustees for approval in May. Nursing has submitted a prospectus to create a certified registered nurse anesthetist with a Doctor of Nursing Practice degree. It has been judged to fit with our mission and financial goals, so the nursing department is now developing a more full proposal including market analysis.
On the Woodland front
We're continuing discussions with the developer of the Woodland school site, which may one day be a Graduate Health Sciences campus housing the physical therapy, occupational therapy and physician assistant programs. No letter of intent has been signed.
The security breach
You may recall that last month a group of hackers breached our computer system. They were organized, systematically going through our accounts trying to answer the security questions of our automatic password reset tool. They were successful with 30 accounts. Thirteen people – 10 students, two staff members and one faculty member – experienced fraudulent activity on their bank, credit card and e-commerce accounts. The College has been as supportive as possible to the victims, but this situation makes clearer than ever that each of us needs to use secure passwords and be diligent in monitoring our identity and online accounts. For more information on identity theft
go here
The cardboard box epidemic
It's great that we're green. Really. Environmental awareness is a virtue, and that includes recycling cardboard boxes. But please give a thought to what the hallway outside your office looks like to a family visiting campus with a prospective student. The situation is most noticeable in Tower. Rather than leave that box outside your door for Facilities staff to pick up, why not take it to the loading dock area? The exercise is, of course, a very green habit. And speaking of campus visits, do you have any thoughts on how to make your corner of campus a bit more attractive to visitors? Conversely, do you see any problems?
Let Eric Berg know
The Last Word
President's Staff starts every meeting with a prayer or spiritual reflection. Our favorite in recent weeks came from Lori Collard. This is from the collection "Blessed Are the Peacemakers (10 Steps to Peace)"
by Mary E. Latela.
There are two golden days in the week, upon which, and about which, I never worry – two carefree days, kept sacredly free from fear and apprehension. * One of these days is Yesterday; yesterday, with its cares and frets, all its pains and aches, all its faults, its mistakes and blunders, has passed forever beyond my recall. ... It was mine! It is God's. * The other day that I do not worry about is Tomorrow; tomorrow, with all its possible adversities, its burdens, its perils, its large promise and poor performance, its failures and mistakes, is as far beyond my mastery as … Yesterday. … Tomorrow is God's day! It will be mine! * There is left for myself, then, but one day in the week – Today. Any man can fight the battles of Today! Any woman can carry the burdens of just one day! Any man can resist the temptations of today! ... it is when we willfully add the burdens of those two awful eternities – Yesterday and Tomorrow – that we break down. It isn't the experience of Today that drives (us) mad. It is the remorse for something that happened Yesterday; the dread of what Tomorrow may disclose. * These are God's days! Leave them with Him!
Mrs. Charles Cowan
In the spirit of hospitality, we invite your comments and questions.
Click here
What's Ahead
The city wants to make Duluth a more bike- and hike-friendly town. They're proposing a trail along the northern edge of campus to connect the Boulder Ridge area with UMD. Stay tuned…
The annual Faculty and Staff Appreciation Luncheon will be held at 11:30 a.m. Wednesday, May 9. All staff, regular faculty and adjunct faculty are welcome.


text:
Osmonds prep for brothers' final UK tour
After decades on the road, the Osmond brothers are getting ready for their last concert tour in the United Kingdom.
"My older brothers have been working together for 54 years and that's a very long time, never having stopped, doing at least 100 shows a year since the beginning," Jimmy Osmond, youngest of the singing Utah siblings, told the British newspaper The Star. "Merrill, who is the lead singer, is going a different direction so we looked at each other and said 'Let's do another tour but let's make this one the last and make it different'."
The Osmonds' 50-date "Up Close and Personal Tour," their last in the UK, runs March 9 to May 6.
Jimmy Osmond has become quite a star in Britain, appearing in West End revivals of "Grease" and "Chicago," touring "panto" plays (it's a British thing - there's no way to explain it), and appearing on British reality TV shows.


text:
European Commission
The EU in your Country
Accessibility tools
Service tools
Language selector
Navigation path
There are Irish people working throughout every level of the European Union, in addition to those working in the Irish Representations of the Commission and the Parliament.
Back to list page.
Originally from Belfast.
About your job: We collect and publish all sorts of information on the subsidies that each country gives to companies. Generally-speaking, subsidies are not permitted if they favour one company over another. The best thing about the job is working with people from so many different countries and cultures... which is also the greatest challenge!
Why the EU? Didnt have too many other job offers at the time! Good working conditions.
How do you think Ireland has benefited most from the EU? Improvement in the infrastructure
Based: Brussels
Languages: French at school and universityGerman at schoolItalian with girlfriendJust started a Polish course for something completely different
Books/Music: I like reading Jeremy Paxman (the English, Royalty, Political Animal). All sorts of music - never listen to an entire album
The EU and the Economy
The EU-US Transatlantic Trade and Investment Partnership
Ireland and the CAP
Research and Innovation
Top tips for holidaying in the EU
Travelling in Europe
Doing Business in Europe
Working in Europe
Shopping in Europe
Living in Europe
Studying in Europe
Public consultations


text:
Browse Art
Prints Shop
DA muro
Find More Art
Daily Deviations
Random Deviant
Random Deviation
Random Group
Deviant Art
Buy Art
Buy adCast
Buy Core Membership
Random Deviant
Random Deviation
Random Group
Help & FAQ
Username or Email
Stay logged in
Join DeviantArt for FREE
Take the Tour
Forgot Password or Username?
View Badges!
Send a Note
More Pages
Daily Deviations
Gallery Stats
What would you prefer? (Please be honest
333 deviants said
Work hard and save up, while living a happy life in the future.
62 deviants said
Enjoy your life now, but live a harsher life later.
Devious Comments
Load All Images
Featured By Owner
Jan 25, 2013
Life sucks and then you die. Yes, you should take measures so that you can have a good life in the future, but if it keeps you from enjoying yourself today, that's no good.
Featured By Owner
Jan 24, 2013
Hobbyist General Artist
My life is the second option
Featured By Owner
Jan 24, 2013
Second one, though that's how I see every day XD Work hard during the morning, rest and enjoy the night~
Featured By Owner
Jan 24, 2013
Hobbyist Digital Artist
I'm in the middle of the second option |D so~
Featured By Owner
Jan 24, 2013
Student Traditional Artist
I prefer just having a balance my whole life, to be honest! :3 With a career in art I feel like there's an appropriate balance of struggle and enjoyment!!
Featured By Owner
Jan 23, 2013
Hobbyist Writer
Woopee. I'm one of the probably 46 honest people. I'm slacking off now and enjoying youth. I can work hard later in life. I can find work, more than likely. lol.
Featured By Owner
Jan 23, 2013
Hobbyist Digital Artist
A balance, somewhat leaning towards the first choice because... you never know if you'll die unexpectedly! Pluuuus, it's best to enjoy food while you're young and at the peak of your metabolism.
Featured By Owner
Jan 23, 2013
General Artist
Um, something in the middle like
work kinda hard now, and live better later
Featured By Owner
Jan 23, 2013
I prefer to be ""sustainable""" trying to have fun now while still trying to assure I'll be able to have fun later |3
Featured By Owner
Jan 23, 2013
I think that if one works on something one loves to do, then, it can enjoy their whole life
Featured By Owner
Jan 23, 2013
Professional Writer
I think I'm somewhere in the middle or perhaps I'm just completely lost now.
Featured By Owner
Jan 23, 2013
None of the above. ; )
It's possible to work hard and still have fun while doing so! It's all about the attitude! School and student loans feel a bit daunting at times but if you work hard and smile through it, it's a great feeling when you finally finish!
Featured By Owner
Jan 23, 2013
Student General Artist
I just live day by day. If you think that the world cares if it follows your plain, you are just setting your self up. I not know if I am going to be around in 50 years, 30, 10, 5 or the next day. We have one life. So not try to control it because the world is like a 1000 pound loin. It don't give a shit if you had plains for the week, he would just eat you up.
Featured By Owner
Jan 23, 2013
The second one sounds more ideal, but I still wouldn't do it. I'll probably spend my whole life in debt because I'll slack off all the time
Featured By Owner
Jan 23, 2013
Digital Artist
The second, even though I keep doing the first...
Add a Comment:
Submit Comment
Poll History
Jun 15, 2015
It's finale week for my FireRed Randomizer Nuzlocke! Please help me decide on what to play next~
Mar 1, 2015
Do you guys prefer that I stream games, or record games on Youtube?
Jan 16, 2015
What would you like to see more of in a Pokemon story?
Oct 12, 2014
Are you interested in crafted Pokemon Gym Badges?
Sep 6, 2014
Do you prefer your toilet paper mount to go over or under?
Sep 3, 2014
Bulbagarden will be at OzComicCon! (6-7 Sept 2014)
Aug 28, 2014
Do you prefer reading webcomics or physical comic books?
Aug 10, 2014
What's your favourite spread on a slice of bread?
Jul 12, 2014
Who is your favourite Mario Princess/Queen?
Jun 25, 2014
Would you eat insects? http://youtu.be/iM8s1ch5TRw
Jun 3, 2014
Do you enjoy summer or winter more?
May 28, 2014
Do you think the music industry is improving or deteriorating?
May 20, 2014
Michael Jackson holograph, yay or nay, or may?
May 13, 2014
Have you ever wondered why there are little to no cases of animal ghosts before, but just human ghosts?
May 2, 2014
Should a popular public figure (eg stars, singers and even famous artists on dA) be judged by other parties or the society?
Apr 30, 2014
Do you like the idea of a zoo?
Apr 23, 2014
When you shower, which part of your body do you wash first?
Apr 15, 2014
Where do you clip your nails?
Apr 5, 2014
How many languages can you speak fluently?
Mar 25, 2014
Are you for or against euthanasia?
Mar 20, 2014
How are you?
Mar 18, 2014
Do you enjoy watching Let's Plays or actually playing the games more?
Mar 17, 2014
Do you think as generations get passed on, they get better or worse?
Mar 6, 2014
Someone dear to you is dying and you can't afford the medicine. Would you steal it to save their lives?
Mar 6, 2014
Do you finish your meal with a clean plate?
Mar 1, 2014
What do you think is the main quality that sets human apart from other animals?
Feb 27, 2014
Do you like how your parents named you? Does it have a certain meaning behind it?
Feb 26, 2014
Do you know how to swim?
Feb 25, 2014
Do you sing in the shower?
Feb 25, 2014
How do you eat your spaghetti?
Feb 22, 2014
Anarchy vs Democracy
Feb 22, 2014
Do you wear your slippers / flops at home?
Feb 20, 2014
Would you rather have a meal with an insect leg or a strand of another person's hair in it?
Feb 18, 2014
What do you think about the high advocacy for the LGBT community recently?
Feb 11, 2014
Should smoking be looked down upon?
Feb 10, 2014
Do you think plants have souls and feelings just like animals?
Feb 10, 2014
Do you believe that in the lifespan of human race, we will be able to meet another extraterrestrial, intelligent race?
Feb 8, 2014
If you have to kill an innocent person in order to go to "heaven", would you?
Feb 7, 2014
Do you believe that human can achieve true equality?
Feb 5, 2014
Would you be for or against something like the Trueman Show (1998)? (google it if you don't know that movie~)
Jan 31, 2014
Do you brush your teeth before or after breakfast?
Jan 29, 2014
Do you wanna build a snowman?
Jan 29, 2014
Would you rather be super sensitive or super numb?
Jan 27, 2014
If someone has wronged/insulted you, would you return with...
Jan 10, 2014
Which of these pests do you hate more?
Jan 8, 2014
If there's something in another person's teeth, would you tell them so?
Jan 3, 2014
What age group are you in? Would you want to be older or younger?
Dec 29, 2013
Do you have a catchphrase or weird pronunciation for some words?
Dec 25, 2013
Do you celebrate Christmas?
Dec 24, 2013
"Television will soon be replaced by other electronic devices." Do you agree?
Dec 22, 2013
If you can only shout or only whisper, which one would you prefer?
Dec 19, 2013
Red pill or Blue pill?
Dec 15, 2013
Do you think technology will bring more harm than benefits to humanity?
Dec 14, 2013
Sometimes, I think Haychel is crazy...
Dec 13, 2013
"I tend to choose the option closest to the middle whenever I was given a multiple-choice question."
Dec 9, 2013
Do you generally like it when people have makeups on?
Dec 5, 2013
If a patient's suffering from an incurable disease and it's up to you to decide, would you rather...
Nov 29, 2013
How do you pronounce "Nutella"?
Nov 28, 2013
When you walk pass a stranger, do you...
Nov 28, 2013
Which of these Pokemon characters do you wish to see the most in SSB4?
Nov 23, 2013
Mario or Luigi?
Nov 19, 2013
People always say: If you're an adult, you can do whatever you want. True or False?
Nov 15, 2013
Which generation's starters from Pokemon would you like to see Megas most next? (grammar???)
Nov 10, 2013
Which continent are you from? You can also tell me about your country~
Nov 10, 2013
Do you or your family have any superstitions?
Nov 9, 2013
Thor or Loki?
Oct 19, 2013
We always advocate "Do whatever you love", but in your opinion, to what extent would it be deemed unacceptable?
Oct 17, 2013
Apparently it was national chocolate week in UK! What is your favorite type of chocolate? What do you like to part them with?
Oct 17, 2013
Given equality over all genders, should females be allowed to go topless (half naked) in public like males?
Oct 15, 2013
Do you like horror movies?
Oct 12, 2013
Now that Pokemon X and Y are launched worldwide, what starter did/would you choose?
Oct 7, 2013
Which flavor of Neapolitan icecream do you like the most?
Oct 5, 2013
If you can choose, would you rather be a boy or a girl?
Oct 4, 2013
Cat or Dog?
Oct 3, 2013
How many times do you clean your teeth per day?
Oct 2, 2013
Mega Charizard X or Y?
Sep 30, 2013
What is your most preferred sleeping position?
Sep 29, 2013
What do you think about bodily hair on males?
Sep 25, 2013
What does the fox say?
Sep 24, 2013
When you eat chicken winglets (It's the most common, middle part of a full chicken wing~), do you break it apart into two or eat it just like that?
Sep 22, 2013
Would you rather travel a decade to the past or to the future? Why?
Sep 22, 2013
Batman or Superman?
Sep 19, 2013
Have you ever slept in class when you were not supposed to?
Sep 19, 2013
In general, do you prefer watching movies in 2D or in 3D?
Sep 18, 2013
Have you ever done anything online anonymously (even without a username)? (Bonus: Do you enjoy it?)
Sep 14, 2013
Are you a boy or a girl? (Bonus: Do you expect either more boys or more girls to follow me? Are you surprised when you see the results and why?)
Sep 12, 2013
Thrift shops or brand name boutiques?
Sep 5, 2013
Which of the 7 sins describes you the most?
Sep 4, 2013
Do you make noises when you eat or drink?
Aug 29, 2013
Which Pokemon champion is your favorite and which Pokemon do you think is their signature Pokemon?
Aug 28, 2013
Should N be considered a Pokemon champion (Or ex-champion) given he defeated Alder?
Jul 30, 2013
In a post-apocalypse world, if your loved one has been infected by the deadly virus and they will spread the virus even more, will you kill them? (Given no cures)
Jul 26, 2013
What are you most scared of?
Jul 25, 2013
Will you hold the door open for others?
Jul 20, 2013
If you receive a call from an extraterrestrial being and you are certain you will be talking to an "alien", would you...
Jul 19, 2013
Fries or wedges? And why?
Jul 15, 2013
What kind of meat do you enjoy eating the most?
Jul 10, 2013
Would you rather be clever but unhappy, or stupid but happy?
Jul 6, 2013
In a scale of 1 to 5, how happy are you?
Jul 4, 2013
How do you usually eat your fries?
Jun 30, 2013
How do you pronounce "Riolu"?
Jun 27, 2013
Should I increase my commission price? Routhly how much more do you think it should be worthed? (ignore whether you have the money or not, this is based on your perceived quality of my work~)
Jun 14, 2013
If you are in a crashing plane high in the sky with all these people, but there is only one parachute pack and only one person could use it, who will you give this pack to and why?
Jun 11, 2013
If you have to give up one of the five main senses, which one will you forfeit and why?
Jun 8, 2013
Who's your favorite hero from the Avengers?
May 26, 2013
Technology or Nature?
Apr 21, 2013
In the Super Smash Bros. Universe, which boss would you say is the most iconic?
Apr 15, 2013
What do you do when you have a spark of inspiration?
Mar 30, 2013
How did you learn about Haychel?
Mar 28, 2013
What do you put onto your fried eggs?
Mar 21, 2013
Is Yoshi a male or a female?
Mar 20, 2013
Pirates or Ninjas?
Feb 27, 2013
Do you believe in extra-terrestrial beings?
Feb 18, 2013
What does the name "Haychel" sound to you?
Feb 14, 2013
What do you think Sylveon's type is?
Jan 22, 2013
What would you prefer? (Please be honest
Jan 13, 2013
If a friend has a high probability of betraying you due to money, popularity or other ambitions, will you still be friends with him/her?
Jan 9, 2013
Starter for Gen VI?
Jan 6, 2013
Do you think you're an interesting person? Why and why not?
Dec 28, 2012
More money = more power?
Dec 21, 2012
Is Haychel dead or not?
Dec 10, 2012
Beautiful lie or painful truth?
Dec 8, 2012
Some video games involve killing other people. (shooting games in particular) Do you think they make people more violent?
Nov 19, 2012
Lucario: fur, or pants?
Nov 16, 2012
Do you wear glasses?
Nov 14, 2012
Do you pull your eyebrow hair to make yourself look better? (Not all of it you silly peeps! :U Just to trim any excess hair)
Oct 30, 2012
Non-handheld consoles: Wii, PS3, Xbow 360, or PC?
Oct 25, 2012
Do you like your family? Why?
Oct 20, 2012
Team Ho-oh or Team Lugia?
Oct 17, 2012
How frequently do you expect me to upload new artworks?
Oct 14, 2012
What do you usually have for breakfast?
Oct 7, 2012
What is the first thing you do when you wake up in the morning?
Oct 5, 2012
What is a llama badge?
Oct 4, 2012
DA's premium membership, is it worth it?
Sep 30, 2012
Do you think you live a healthy lifestyle?
Sep 26, 2012
Should I conitnue with my M7 for PMDe before I take my break?
Sep 21, 2012
What topic would you want me to make a guide for the most?
Sep 8, 2012
What kind of products attract you the most when you attend a convention?
Aug 30, 2012
Do you buy things when you attend a con (of any sort)?
Aug 22, 2012
What do you do to get yourself out of an art block (of any sort)?
Aug 17, 2012
What is your fav Pokemon generation? Name 3 fav 'mons from said generation.
Aug 14, 2012
What is your main motivation for making [any form of] art?
Aug 11, 2012
How approachable do you think Haychel is?
Aug 8, 2012
Do you think I'm too giving sometimes?
Click here to continue to DeviantArt
Deviant Art
Sta.sh Writer
DeviantArt muro
Hide Media
Submit Comment
Add Media
Change skin
Upload Files


text:
Rollover image for closeup
All About TrumpetItem #: HL.00311384
Our Price:
Unrated ( Be the first to review this item )
by Hal Leonard
Written by Jonathan Harnum.
A Fun and Simple Guide to Playing Trumpet. trumpet instruction. With Softcover with CD. 8.5x11 inches. 184 pages. Published by Hal Leonard. (HL.00311384)
Free Shipping on this item in orders above $199
Temporarily Out of Stock -- Notify Me when Back in Stock
Found in: General Trumpet Lessons
If you wish there were a fun and engaging way to motivate you in your trumpet-playing quest, then you've found it - All About Trumpet is for you! Whether you want to learn about reading music, playing in a band, finding the right instrument, or all of the above, this enjoyable guide will help you finally start playing your favorite songs in many different styles. Includes interesting tidbits on trumpet gear, care and maintenance, and other fun stuff about the trumpet. The CD contains song demos and practice exercises. Features hits from the Beatles; Blood, Sweat & Tears; Miles Davis; Tito Puente; Coldplay; J.S. Bach; and more!
Songs Include:


text:
Salvacion Dematera
- Filed Under
Police are asking for help in locating a homeless woman who has been missing since December.
A township resident reported Salvacion Dematera missing on Dec. 20, Detective Sgt. Eileen Dodd said.
Before that, Dematera, 45, had been living in her car at the Freehold Raceway Mall in Freehold Township, where she had worked in the Forever 21 store, Dodd said. She quit her job there sometime after Thanksgiving and has since disappeared, Dodd said. ...