text:
Did anyone really enjoy their first few weeks/ months with twins?
Me (34) + DH (41) =
Mo/Di twins Clever & Smiley (Feb. 2013, 38 weeks, 6 lbs 6 ozs; 8 lbs) & Easy Going(June 2014, 40+5 weeks, 10 lbs 10 ozs)
My twins were my first so as a PP said, I was not an expert nurser so the first few weeks were very stressful, with trying to get a latch with 2 poor latchers, trying to pump with 2 needy babies, being sleep deprived, feeling like I didn't know what I was doing, etc. Hopefully since you have BTDT you will find it easier than I did, even with 2 :) We did end up going to FF which took a lot of the stress off me and allowed DH to help more. Now I can't imagine having just one baby.
Boy/Girl twins born August 2013
I had one woman say "Don't worry, it's not that bad." But she failed to mention that she had a nanny, a night nurse, and two parents who moved in for a month. I found that out when my twins were about 6 months, and felt so much better about myself. There were many nights where I wondered what was wrong with me that I couldn't easily handle it like her.
I also think it can be a lot easier if you have a DH willing to do 50% of the work.
Twin boys! October 2010
These are #3 & 4. It's not all rainbows and butterflies but I love it! I'm a SAHM, my older girls are 2.5 & 4.5, I am EBF as I did my older girls, and use many of the other parenting styles you mentioned and I have no help...at all. In fact my DH left for a business trip for 3 days when these guys were 3 weeks old and I was alone. My babies were born at 38 weeks, now 7 weeks and so far no issues and are great nursers. One's a little needy but overall I've been lucky. Chaotic yes...all doom and gloom...no way. I'm sure my time will come though when they're mobile!
I don't remember them....
All I remember is feeding, changing, crying (me and babies), lack of sleep, rinse and repeat.
Overtime mom, old member reincarnated
Everyone has their opinions....mine just happen to be right.
If my posts don't make sense, blame my fibro fog.
Yes - I am pretty cheerful about things and tell people that it's not too bad, but my husband gets up with baby boy and I get up with baby girl so it's the same as having a singleton at night. That makes all the difference I think.


text:
AdBlock blows! Please disable the add-on to ensure you get the most out of Tube8's features and functionality. Read about why you shouldn't use AdBlock. Close
Add to Favorite List:
Create a new folder:
Next »
Hairy Desi Amateur Gets a Creampie!
Recognize a pornstar in this video?
Help make pornstars easier to find on Tube8 by telling us who is in this video.
Thanks! The pornstar names will be added to this video when enough users submit the same names.
You must enter a pornstar name that already exists in our database.
- Category: Indian
- Views: 54,627
- Added: 2 years ago
- Description: This gorgeous indian girl is so excited at the sight of a nice white cock and she just can't wait to get it up in her
- Tags: indian, desi, interracial, amateur, amature, interacial, blowjob, hairy, creampie, chubby
- Pornstars: Add Pornstar
- Favorite by: 26
- Report This Video
Video Comments
All Video Comments (0)

subset: commoncrawl


text:
About This Activity
A 5K & Kids Fun Run supporting early childhood development at the Brooklet United Methodist Church Preschool. Fun Run immediately following the 5K!
We will be having our annual Spring Fling immediately after the race from 10am-1pm. There will be lots of children's activities, bounce houses, food and fun for all! Restrooms and a place to change & freshen up will be available. Please plan on staying and enjoying the day with us!


text:
Contact Us | Need Help Logging In? | Join Now |
Cart (0)
Mark B. Felber
Nicole K. Wilson
Cuyahoga County Domestic Relations Court
Thompson Hine LLP
For more information on the UPL Committee, please contact:
Heather Zirke, Bar Counsel
Site Map | Search | Calendar | Contact Us | Privacy Statement
© Cleveland Metropolitan Bar Association - 1375 East 9th Street, Floor 2 - Cleveland, OH 44114-1785 - (216) 696-3525 - Fax: (216) 696-2413
Email addresses and contact information made available through our site are strictly for the convenience of our members and potential members. Use of this information for solicitations or non-CMBA invitations is strictly prohibited and violates our privacy policy.
Powered by NimbleUser


text:
Digital Life
Guitarist Behind 'Canon' Video Revealed
See the Videos
In the past eight months, a video of a young guitarist playing a modern version of Johann Pachelbel's Canon in D Major has become a sensation on the Internet. The video has been viewed on YouTube.com more than 7.6 million times — but nobody knew the identity of the guitarist.
Recently, Virginia Heffernan of The New York Times identified the guitarist as Jeong-Hyun Lim. NPR's Melissa Block talks with musician G.E. Smith — the guitarist who led the Saturday Night Live house band for 10 years — about what makes the rendition so impressive.
Related NPR Stories
You must be signed in to leave a comment. Sign In / Register
Please keep your community civil. All comments must follow the NPR.org Community rules and terms of use, and will be moderated prior to posting. NPR reserves the right to use the comments we receive, in whole or in part, and to use the commenter's name and location, in any medium. See also the Terms of Use, Privacy Policy and Community FAQ.


text:
More Fireball February! We're infusing fruit with the cinnamon liquor this week for a yummy – dare I say healthy – alcoholic snack.
Fireball Infused Fruit
Fireball Whisky
Mason Jar/Container
Start by cutting your apples into thin slices so the whisky can infuse the heck out of them. Fill either a mason jar or container with the apple slices and Fireball. The mason jar will hold one apple so if you want more you'll need more containers. Let sit in the fridge for about six hours and enjoy!
Okay so maybe calling it healthy is a stretch, but healthy or not this concoction is off the charts good. This incognito way to get some alcohol is perfect to take the park for an outside date, bring as a gift to a party, or just keep for yourself.
Enjoy y'all!


text:
Posted November 14, 2000 and updated on April 6, 2009
Running Free
|MPAA Rating
|Theatrical Release
|To Be Announced
|2000 Columbia Pictures
Full Review
Why did we give Running Free an overall grade of B-? Read our full movie review for parents.
Content Details
Our apologies, but we do not have specific content details for Running Free. We are always updating our database, so please check back soon.
Latest News
Unfortunately we have no news to report on this title at this time.
Looking for discussion ideas to talk to your kids about Running Free? We got 'em!
Home Video
Looking for something else? We've got some other home video titles related to Running Free.
Trailers & Clips
At this time we don't have any clips or trailers for Running Free.


text:
alternate headline: man does job
- Member for
- 6 years 34 weeks
- Blog
- View recent blog entries
Recent Comments
|3 days 20 hours ago
|I think he was only stating
I think he was only stating that it's all about perspective. If you're against them (SEC), it looks like whining. If you're for them, they're speaking up and defending themselves. I don't think Cuban is an SEC fan...I wouldn't know for sure...but he did go to Indiana, for what it's worth.
|3 days 20 hours ago
|Awesome - thanks for the
Awesome - thanks for the post. Is there an option for shorts/pants? And when you say cheap knockoffs...are you referring to the ones for sale in the MDen, currently? I specifically avoided them because they felt low quality but was curious if those were different than this kit.
EDIT: Went through the signups and saw the order options. Still curious about how these differ in quality from the MDen ones, though, if anyone can speak to it!
|1 week 2 days ago
|Haha! Thanks for the laugh
Haha! Thanks for the laugh
|1 week 6 days ago
|6'1" 210 for an athlete QB?
6'1" 210 for an athlete QB? I'd say that Peter Bush is about the right size. Hopefully he doesn't slack on training and gain bad weight before the season. Peter bush will need some trimming.
|2 weeks 3 days ago
|You can't tell me what to do. You're not my real dad.
You can't tell me what to do. You're not my real dad.
|3 weeks 1 day ago
|Pretty good shape =/= a Harvard degree
Pretty good shape =/= a Harvard degree
|3 weeks 5 days ago
|In the end, there was really
In the end, there was really nothing of substance other than a flame war of whether the board is devolving.
|3 weeks 5 days ago
|Here's the summary:Frito
Here's the summary:
|3 weeks 5 days ago
|Why are you posting these
Why are you posting these threads? I'm asking in earnest.
|3 weeks 5 days ago
|I wonder, if someone rested
I wonder, if someone rested this exact same thread calling some other frequent poster Spider-Man, how long that thread would last. And if we created another one after that calling some other poster superman...
|3 weeks 5 days ago
|Cronyism, man.
Cronyism, man.
|3 weeks 5 days ago
|That's exactly what you'd say
That's exactly what you'd say if you didn't want anyone to uncover your secret.
|3 weeks 5 days ago
|Context: Frito Bandito is WD
Context: Frito Bandito is WD
|4 weeks 1 day ago
|Probably put on sweat bands
Probably put on sweat bands and receiver gloves and flip through his binder, I'd imagine.
|4 weeks 1 day ago
|The best part by far, IMO. Second best was the grimace at 1:55.
The best part by far, IMO. Second best was the grimace at 1:55.
|4 weeks 1 day ago
|No offense taken. That said,
No offense taken. That said, my logic (right or wrong) was that the only coaches getting real looks to work in the collegiate ranks are the higher profile High School coaches that already have the higher salaries (relative to their HS peers). That's why I was focused mainly on the often televised FL/TX/CA schools that have Nike contracts and more.
I would doubt that a regular mid tier, local high school head coach that doubles as the gym teacher is getting serious looks from the Michigans of the world. Perhaps I'm wrong, though, that's why I asked...
|4 weeks 2 days ago
|4 weeks 4 days ago
|Well they were whining about
Well they were whining about satellite camps long before Michigan beat an average Florida team. Complaining to get every competitive advantage is one thing but you're making a ridiculous fan-boy leap to suggest the entire conference is threatened by a UM Citrus Bowl win? Really? Hell, 90% of the SEC may not play Michigan in the next 5 years. Yet the SEC is threatened and scared? It's just a ridiculous premise.
|4 weeks 4 days ago
|Agreed. But the SEC has won 8
Agreed. But the SEC has won 8 of the last 10, not Alabama. As in...what I said.
|4 weeks 4 days ago
|You think the SEC, after
You think the SEC, after winning their 8th title in 10 years, and going 8-2 in bowl season, is feeling the heat because a crap Florida team from the weak side of the conference lost a game? Give me a break...
|5 weeks 3 hours ago
|You can be a US citizen and live in other countries...
You can be a US citizen and live in other countries...
|5 weeks 1 day ago
|What is a typical salary for
What is a typical salary for a recruiting coordinator at a major D1 school? I'm sure it is above a high school coach but how high can that really be while not being on the official coaching staff?
|5 weeks 5 days ago
|Impressive. They've had some
Impressive. They've had some great athletes come out of their men's program and go to the NBA. I'm admittedly uninformed about their women's program, though.
|6 weeks 1 day ago
|And Wale called him a "trill ass coach" yesterday, too.
And Wale called him a "trill ass coach" yesterday, too.
|6 weeks 3 days ago
|Just go to a free indoor church; it'll save you money on both.
Just go to a free indoor church; it'll save you money on both.
|6 weeks 3 days ago
|And I got sidetracked and
And I got sidetracked and meant to put the image up by the ribs. Time to shut 'er down.
|6 weeks 3 days ago
|Asshat indeed. Could anyone
Asshat indeed. Could anyone possibly think he could've already made peace with the fact he isn't going to the NFL so he might as well get a degree from a world class institution?
|6 weeks 5 days ago
|There was a rumor about him
There was a rumor about him punching a glass window. Don't know if that's true or not but if so, I'm pretty sure you're wrong about being pretty sure he didn't do it on purpose.
|6 weeks 6 days ago
|Ha! That didn't register as I was typing it.
Ha! That didn't register as I was typing it.
|7 weeks 22 min ago
|You could donate it to less fortunate children like Kenny Allen
You could donate it to less fortunate children like Kenny Allen


text:
Get notified about updates to this publication
Page 1
Two Experiences Designing for Effective Security Rogério de Paula, Xianghua Ding, Paul Dourish, Kari Nies, Ben Pillet, David Redmiles, Jie Ren, Jennifer Rode and Roberto Silva Filho Institute for Software Research University of California, Irvine Irvine, CA 92697-3425 {depaula, dingx, jpd, kari, bpillet, redmiles, jie, jen, email@example.com ABSTRACTIn our research, we have been concerned with the question of how to make relevant features of security situations visible to users in order to allow them to make informed decisions regarding potential privacy and security problems, as well as regarding potential implications of their actions. To this end, we have designed technical infrastructures that make visible the configurations, activities, and implications of available security mechanisms. This thus allows users to make informed choices and take coordinated and appropriate actions when necessary. This work differs from the more traditional security usability work in that our focus is not only on the usability of security mechanism (e.g., the ease-of-use of an access control interface), but how security can manifest itself as part of people's interactions with and through information systems (i.e., how people experience and interpret privacy and security situations, and are enabled or constrained by existing technological mechanisms to act appropriately). In this paper, we report our experiences designing, developing, and testing two technical infrastructures for supporting this approach for usable security. KeywordsPrivacy practices, effective security, theoretical security, usable security, visualization, event-based architecture, peer-to-peer file-sharing application, YANCEES, Vavoom, Impromptu. 1. INTRODUCTION Networked computer systems have become critical not only for conventional commercial and financial transactions, but for ad-hoc informal, social interactions. These two uses of network infrastructures represent the two ends of a range of possible ways in which these infrastructures are being appropriated and utilized as sites of organizational practices as well as people's work and everyday accomplishments. By the same token, they demonstrate the range of challenges in designing and implementing usable private and secure systems. On the one hand, institutions are concerned with the protection of their sensitive information, and consequently are shaping the creation of new technologies, and policies (internal and otherwise) as well, to guarantee high levels of secure transactions. On the other hand, individuals, often workers of these institutions, are primarily concerned with getting the work done, which often involves collaborating with other individuals, disclosing information, and exchanging documents in effectively safe manners. This poses a tension in the implementation of usable, secure systems – the need for systems that are more secure and those that are more useful and trustable. One major challenge in designing private and secure system rests on the dualism between protection and disclosure (Palen and Dourish, 2003). Sensitive information is regarded as assets that should be protected in order to ensure institutions' business advantages, but at the same time commercial and financial transactions involve collaboration and consequently the disclosure of this information, which might unintentionally expose valuable assets to other parties. For the most part, this problem of making private information secure has been tackled through the development of "stronger" and more reliable encryption, access control, and intrusion detection mechanisms – the user interface thus becomes the way through which users configure these mechanisms. Dourish et al. (2004) conducted an empirical investigation of people's attitudes and practices around security and observed that they display considerable concerns about security as well. These concerns manifested in various ways – concern over disclosure of sensitive information, concern about viruses, concerns about hackers, marketers, and other threats – but at the same time they demonstrated frustration at the difficult of managing information and the ways that clumsy security interfaces prioritize computer and information protection at the cost of interfering with their work. We have argued that the critical problem of usable security is not simply about designing more secure systems and infrastructures, but designing useful and trustworthy system that are effectively secure, rather than theoretically secure (Dourish and Redmiles, 2002). The levels of effective security are almost always lower than those of theoretical security because effective security represents the levels that can practically be achieved in everyday settings, rather than those that are technologically feasible. This Copyright is held by the authors. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee. Symposium On Usable Privacy and Security (SOUPS) 2005, July 6-8, 2005, Pittsburgh, PA, USA.
Page 2
distinction is the cornerstone to a clearer understanding of the theoretical and design approaches introduced and discussed in this paper – in particular our argument that usable security is not only about the "usability" of security mechanisms, but a broader concern with the ways in which users experience privacy and security (of and through a technology) in everyday life (Dourish and Anderson, 2005). Hence, we are concerned with the question of how to make relevant features of a security situation visible to users so as to allow them to make informed decisions about potential privacy and security problems, and about their actions and potential implications of these actions. That is, we are interested in how to improve privacy and security by creating conditions for users to recognize and understand privacy and security situations, make informed decisions, and act accordingly. This has led to the design of technical infrastructures that make visible the configurations, activities, and implications of available security mechanisms to allow users to make informed choices and take coordinated and appropriate actions when necessary. The main contribution of this paper is thus to report on our experience in putting these theoretical concerns into practice. Toward this goal, we focused on two design explorations that combine three major design principles – visualization mechanisms, multi-source event-monitoring architecture, and the integration of action and configuration. The first is an event monitoring application, based on visualization and event-based architectures. It uses a fairly simple network monitor to allow users see network activities when they connect to a web site. The second is a graphical interface for ad-hoc face-to-face collaborative activities. It is a peer-to-peer file-sharing application based on the principles of visualization and integration of action and configuration. It allows users to directly visualize everyone connected to the local network (the same subnet), the files being shared and their degree of sharing, and the operations being performed on these files, as well as to easily control the degree of sharing of their files. These are the first steps toward better understanding privacy and security as practical concerns, and the implications to the design of usable security. This paper thus offers a detailed description of those two software applications designed to address the major goal of improving privacy and security by making security and privacy features "apparent" rather than "transparent." The overall experience has helped us attain a deeper understanding of the challenges in designing usable private and secure infrastructures as well as the challenges of conducting privacy and security studies – both will be further discussed in the paper. 2. THEORETICAL APPROACH Our theoretical approach draws empirical investigation into everyday security practices (Dourish et al., 2004), which looked at how people manage security as a practical, day-to-day concern, and exploring the context in which security decisions are made. It looked at a wide range of computer users, with different needs and working in different settings. A number of common issues arose in our interviews – a broad summary would be that "security," both as a need and a practice, extends beyond the domain of the computer system itself. This empirical work thus provided a foundation for our reconsideration of the problems of security to a large degree as an interactional and situated problem – privacy and security concerns are created and interpreted, for example, by the interplay among one's sharing needs and goals, the technology at hand (and one's understanding of it), and the physical and social settings. 2.1 Security in the Wild In everyday settings, we can assess and control security more easily and more flexibly. Participation in everyday social life inevitably involves disclosing information. When we walk down the street, we disclose our presence to others; when we talk in public, we run the risk that others will overhear us. However, we can choose which path to follow, and modulate our speech so that we are not overheard. We have ways to understand how our information is being disclosed, and to whom, and ways of managing or controlling that disclosure. In particular, security management in the everyday world displays the following properties: •Everyday access management is continuous. That is, rather than being restricted to discrete choices for information management, in the everyday environment people can manage their degree of information disclosure or withdrawal along a continuum. •Everyday access management is continual. That is, rather than being restricted to particular moments in time, it is being constantly monitored, controlled, and adjusted to the circumstances in which we find ourselves. The content of a conversation with a colleague may change our ideas of what is appropriate to disclose. •Everyday access management is co-extensive. That is, the mechanisms by which information is shared are the same as those by which information is withheld, and the process of controlling disclosure is unobtrusively part of the work that people are already engaged in. There is no separation between providing information to others and describing information to be kept private. •Everyday access management is coherent. Although we may be carrying out many tasks, and available through many channels (visual, auditory, etc), we can achieve a coherent effect. In contrast, even though our electronic identity is frequently distributed across many devices (e.g. laptop, handheld, cellphone), technological solutions treat each device or network component individually. •Everyday access management is contingent. The actual requirements on disclosing and withholding information depend on the circumstances in which people find themselves, the settings in which they are working, and even the context of the conversation that takes place amongst them. While we can specify some of this in advance, the actual details are negotiated in the moment. •Everyday access management is comprehensible. The structure of the world and our place within it is available at-a-glance. Technological solutions in general lack these properties. The difficult of balancing sharing with privacy has two consequences to the design of collaborative systems. First, it limits participation – Sheehan (2002) documents non-participation in electronic interaction because of privacy concerns. Second, it may undermine participation because of inadvertent information disclosure – Good and Krekelberg (2003) detail the high degree of accidental information sharing in peer-to-peer file-sharing applications.
Page 3
This discrepancy between the everyday face-to-face interactions and those mediated by technology can be attributed to two features of conventional design approaches – the temporal, spatial, and functional separations between security configuration and information sharing interfaces, and the separation between underlying architecture and the interface (the hiding approach for dealing with complex interactions and systems). 2.2 Usability, Security, and Something Else Interface design is as critical as anything else in making the complexity of security work. Whitten and Tygar (1999) present a usability analysis of PGP 5.0, demonstrating the difficulties that users have in completing experimental tasks. The problems that they uncovered were largely problems of interface design, and in particular the poor matching between user needs and the structure of the encryption technology provided to meet these needs. Zurko and Simon (1996) explore similar concerns in their focus on "user-centered security". They inscrutability of conventional security mechanisms makes it less likely that users will employ them effectively. The approach they outline focuses on graphical interfaces and query mechanisms to MAP, an authorization engine. are concerned that the Our concern is not, however, simply with the usability of security mechanisms, but more broadly on how security can manifest itself as part of people's interactions with and through information systems. Usability researchers have long argued that "usability" cannot be an afterthought in information system design. Security researchers have made the same argument about the design of secure systems; insecure systems cannot be turned into secure ones merely by the addition of a layer of encryption. Both of these argue, then, that security and usability need to be understood as a holistic design problem. A holist design approach includes considerations of technical nature as well as those of social, institutional, and political ones. For example, one important related topic has been control over the degree of security available. One of our criticisms of traditional security systems has been their "all or nothing" approach. However, there has been some work that attempts to characterize degrees of security provision, as embodied by the idea of "quality of security service" (Irvine and Levin, 2001; Spyropoulou et al., 2000). This builds on earlier work establishing a taxonomy of security service levels (Irvine and Levin, 1999). The fundamental insight is that organizations and applications need to trade-off different factors against each other, including security of various forms and degrees, in order to make effective use of available resources (Thomsen and Denz, 1997; Henning, 1999). While this work is directed towards resource management rather than user control, it begins to unpack the "security" black box and characterize degrees and qualities of security. In a work on privacy and security issues in a highlight institutionalized institution, de Paula (de Paula, 2004) showed that privacy and security concerns may arise from users' perception of risks in using a technology that was shaped by existing tensions between different social groups, organizational norms, and privacy policies. In all these respects, we have postulated that studies on usable security should not be limited to a focus on improving the usability of security mechanism, but should also explore new design approaches in which security and privacy is understood and performed by users when carrying out their everyday practices. In this respect, issues of privacy and security are contingent not only on security mechanisms embedded on a technology, but also on users' needs and goals, and the sociotechnical context in which their activities take place. In addition, we focus on privacy and security issues as experienced by users in everyday, ad-hoc face-to-face interactions with and through technology, rather than as experienced and defined by network administrators (which in itself is an important and complex issue to be further studied). 2.3 Usable Security Design and a Motivating Problem Addressing privacy and security as a holist design encouraged us to think more broadly about existing problems users face nowadays as new networked, mobile systems start to permeate the various aspects of our everyday life. For example, we have been interested in the problem of sharing documents in collaborative, often ad-hoc practices. We see it not only relevant to distributed collaborative practices but also to everyday ad-hoc face-to-face encounters. For example, with the widespread deployment of wireless networking infrastructures, and the ubiquitous use of mobile and handheld devices, people increasingly exchange documents, multimedia files, and personal information through peer-to-peer (P2P) file-sharing applications. Studies show major problems in these systems – users find them difficult to understand, configure, and use, which often leads to the high degree of accidental document sharing and inadvertent disclosure of private information (Good and Krekelberg 2003; Sheehan 2002). Traditionally, the goal of interface design and usability practices for security mechanism has been to make the architectural complexity invisible and control and configuration interfaces easier to use. These practices play critical roles in isolating the system complexity from users, and creating interfaces for them to effectively and efficiently interact the system, which for the most part attempts to take all necessary actions itself to protect those users. Such approaches that attempt to make the provision of system security "automatic" or "transparent" essentially remove security from the domain of the end-user. However, in situations where only the end user can determine the appropriate use of information or the necessary levels of security, then this explicit disempowerment becomes problematic. We believe that these approaches are insufficient or inadequate to deal with privacy and security problems. The more the architecture disappears into the background, the harder it is for users to understand the implications of their actions and the extent to which these actions may cause privacy and security problems. As a consequence, when unexpected events occur (e.g., an unexpected user joins the network and accesses shared private information), users are often unable to make prompt and informed decisions and take appropriate actions. In addition, these approaches create unnecessary and ineffective disconnections (temporal, spatial, and functional) between security configuration (e.g., setting file permissions) and sharing interfaces, which induce users to make premature, uninformed decisions, or to inadvertently disclose private information in a sharing situation. For example, users are often required to define critical privacy and security parameters of a P2P application, for example, such as sharing directories and control access, at the installation of the application; or they are configuration/preference dialog-box to specify certain privacy or required to shift to a
Page 4
security policies, when they are not required to turn to the operating system for doing so. Our approach is concerned with the extent to which networking systems, such as P2P file-sharing applications, can more effectively support users' privacy and security by exposing certain features of the architecture to allow users to observe and understand certain events on the network, take appropriate actions, and better perceive the implications of their actions. We believe that the extent to which people understand the privacy and security issues and the implications of their decisions and actions depends on the situation at hand as well as their technological frames (Orlikowski, 1994) – privacy and security concerns, from our perspective, is not a manner of actual levels of technological protection, but a judgment of risks and payoffs based on people's needs and goals, and their understanding of the available sociotechnical infrastructure available to support them. In this respect, we have reconsidered the problem of security and privacy in large as an interactional and situated problem (de Paula et al., 2005). 3. DESIGN EXPLORATIONS To further understand the implications of our theoretical approach, we have explored three design principles: visualization mechanisms, integration of configuration and action, and event-based architecture. The goal of these initial design explorations was to help us further understand how to support informed decision-making regarding privacy and security – i.e., helping users better understand the consequence of their actions by making visible different aspects of network operations, such as exchanging file or simply viewing a web site. The underlying goal of using visualization mechanisms is to allow users to see and assess the outcomes of their actions. By providing dynamic feedback on relevant but hidden aspects of system activities, such as network traffic and configurations, people are more likely to understand the relationship between their actions and the technology configuration through which they are performed. It is noteworthy that this visualization does not take the form of network monitoring that might be employed by system administrators or network managers. Clearly, end users neither understand nor care to understand the details of network operation, and so we cannot assume this level of technical expertise. Nonetheless, we find that people can understand and appreciate the temporal and structural correlations between their activities and the system's behavior. The major challenge we face is to achieve the appropriate level of expression and description. These initial test-beds have helped start explore some of the trade-offs and challenges in designing visualization mechanisms for usable security that offer enough information for users' everyday decision-makings without overwhelming them with unnecessary technical details. The goal is then not to represent users' intent, or depict particular interpretation of privacy or security events or concerns, but to account for particular privacy and security events and help users construct valid interpretations that reflect their current privacy and security needs (i.e., the effective security). As has been pointed out, we are primarily concerned with the ways in which people express and demonstrate security needs through everyday actions (Dourish and Anderson, 2005). The integration of configuration and action principle reflects this goal by unifying onto a single UI two interrelated activities, namely the act of sharing and controlling. Conventional interfaces separate configuration and action in both space and time, although in everyday practice they are one and the same activity. This separation manifests itself, in current operating system designs, for example, in a separation between a control panel where preferences are set, and some separate window or windows within which the activity of the system is performed. This separation is doubly problematic. Not only does it separate two coextensive forms of activity (the act of "sharing" being distributed across the preference window and the system window), but it also separates the expression of preferences from the occasion or situation in which those preferences are to be invoked. These principles have thus informed the design of the two applications that we will present next. Our initial experiment, largely as a proof of concept, was based on two technical platforms – Vavoom and YANCEES. The goal was to understand the extent to which the use of visualization, event-based architecture, and consequently the exposing of the underlying network events and infrastructures. The second experiment focused on the design and implementation of a prototype to explore the concept of integrating action and configuration in face-to-face file-sharing activities as a way of helping users better understand system configurations and their consequence to user actions. 3.1 Events and Visualization The first approach we took for helping users assess the situation at hand, and consequently make informed decisions rests on the visualization of events on the network that are often hidden from the end-users. As opposed to creating "agents" or "critiques" that monitor the network, attempt to detect "abnormal" events, and inform users, we decided to expose underlying activities so that users can better perceive the underlying mechanisms and activities on the network and consequently better understand the implications of their actions. To this end, we implemented a visualization engine, Vavoom, which was coupled with an event-based architecture, YANCEES, which provides a high-level notification channel. That created a test-bed for demonstrating our assumption concerning the use of visualization as usable security. 3.1.1 Vavoom Vavoom is a visualization engine for the Java virtual machine (Dourish and Byttner, 2002). The first version of Vavoom was an extension of an open source Java virtual machine implementation, augmented to report various statistics and events about the execution of Java class files to a separate process, responsible for demultiplexing the events and feeding them to a range of components capable of visualizing aspects of the run-time behavior of the class files (e.g. their memory usage patterns, inter-class call patterns, method invocation, instance allocation, etc.) The key feature of this system was that it could visualize the behavior of arbitrary unmodified class files, including Java system components for which source was not available. Vavoom was originally developed as a pedagogical tool, but its ability to produce dynamic, real-time visualizations of Java software operation clearly made it appropriate to this application. However, the initial version of Vavoom had a number of problems, primarily performance and compatability. These problems both stemmed from a single design problem, which was that Vavoom was tied to a particular JVM implementation. Relying on the instruction stream, it was based on the interpreted version of this JVM, which was no longer being actively maintained, as well as having obvious performance issues itself. For this project, we adopted a different implementation strategy
Page 5
for Vavoom, creating a new custom classloader, which would dynamically rewrite Java byteloaders at load-time, instrumenting the class files with calls to our visualization engine. This largely preserved the features of the original Vavoom system, including the ability to work with arbitrary Java class files, even in the absence of source. More to the point, though, it made the system independent of JVM implementation, and now able to work with high-performance JVMs such as HotSpot. One problem that this new approach introduced was that the visualizer would operate only over application class files, not on the system's internal classes, which had been loaded before our classloader could be installed. This is relevant to our security concerns, but was a relatively minor consideration in the initial implementation. 3.1.2 YANCEES The second component of our system was YANCEES. YANCEES (Silva Filho et al., 2003) is an open infrastructure for event-based publish/subscribe distributed architectures. Event-based infrastructures provide an effective mechanism for flexible, loosely-coupled distributed systems integration. Note that by event-based systems here, we refer to a particular style of distributed software architecture in which "events" are data structures that flow through a collective software bus to coordinate the activity of multiple components; this is not the event detection associated with, for instance, intrusion detection systems (Denning, 1987; Lunt and Jagannathan, 1988). YANCEES is the latest in a line of event-based architectures developed by our research group; it is a versatile infrastructure designed for flexibility in extensibility and configurability of its functionality. It also interoperates with a range of other event-based infrastructures such as CASSIUS (Kantor and Redmiles, 2001), Siena (Carzaniga et al., 2001) and Elvin (Segall and Arnold, 1997), and provides a pluggable architecture which can support additional services such as event persistence, event sequence detection, and other features that may be needed by different applications. Event architectures are particularly appropriate for our approach to usable security (Dourish and Redmiles, 2002). They provide an integration platform for sharing and visualizing "end-to-end" security-related information. Moreover, through event correlation and analysis, they can be used to detect high-level patterns arising out of sequences of low-level events. For system developers, the YANCEES connector provides a high-level event notification channel. This connector delivers relevant events to interested subscribers. The subscription model defines a subscription language and its commands – event sequence detection and content-based filtering. The notification model expresses how these events are delivered to the subscribers, for example, using push or pull notification of events. The resource model defines where the event filtering is performed, whether in the client-side or in the server side. The event model expresses how events are represented, for example, as plain text, as objects, as attribute/value pairs or data structures; and the protocol model defines different interaction mechanisms with the server, for example, roaming protocols, federation of servers and others. YANCEES allows programmers to implement their own subscription languages and event representations using the extensibility provided by XML (Extensible Markup Language). These languages are implemented by plug-ins installed in the Figure 1: Vavoom and YANCEES - Event visualization of Department of Justice website
Page 6
publish/subscribe service. Once installed, the plug-ins are automatically loaded by YANCEES in order to service the queries posted by the clients, based on the subscriptions they post to the service. YANCEES also provides access to the main components of a publish/subscribe system (the routing engine, the publication and subscription stubs), allowing the modification and replacement of those strategic points. In other words, it provides an open implementation that allows developers to define their own extensions to the publish/subscribe model. 3.1.3 Vavoom and YANCEES Test-bed YANCEES was used to handle all communication between system components, including between the Vavoom JVM itself and the visualization displays. In addition to the visualization displays designed as part of the initial Vavoom implementation, we created specialized displays customized to security needs, particularly focused on web browsing as our initial scenario. The focus of the proof-of-concept was the question: can we visualize network activity as part of Web browsing, so that users could become aware of the ways in which aspects of their activity might be tracked while visiting web sites? By tracking the bytecode patterns, this prototype monitored network activity, maintaining a view of active connections and indicating when they were read or written, opened or closed. Figure 1 shows the visualizations of various connections that were established when members of our group connected to the Department of Justice (DoJ) website. When the users visited the website, they expected that the target site would be the only site to which they would be connecting. However, as shown in the highlighted bar, the DoJ site also established a connection to the site of Department of Homeland Security. This connection is not evident to the users during a normal visit to the targeted site, but our visualization showed such "hidden" connections to the users. This visualization would help them to further assess risks and security associated with her browsing behavior. This particular prototype was used only for demonstrations and internal activities; its function was not to be the basis of user trials, but rather to demonstrate the fundamental principle, and provide a test-bed for experimenting with implementation ideas. Although this was a very preliminary demonstration, the application was able to show its potential to uncover aspects of network activity otherwise hidden, such as the use of off-site images and "web bugs" to maintain records of web site visitor activity. By making visible the pattern of network activity that leads to a particular page rendering, this system could begin to help people understand the consequences of their actions. More than the specific application or the particular design of the visual tools, this was the initial goal. Although this application implemented a very elementary awareness mechanism, it served the purpose of helping us "visualize" aspects as well as patterns of the network activities that are usually hidden and unexplored. It has then guided us our future development effort toward designing more elaborate and effective visualization mechanisms. For example, we are currently working on a series of visualization mechanisms for representing patterns of network activities around the concept of "normality." By normality, we mean that we are exploring activity patterns and representations that help users build over time a "sense" of normal network activities. For example, we intend to study: what is a "usual" pattern of network connections? What is a "normal" number of connections? Or what is a "normal" connection to a specific host when accessing a particular web site, as the DoJ example showed. 3.2 Integration of Action and Configuration Impromptu was the first prototype designed and implemented to help us evaluate the concept of integrating action and configuration within the same GUI. It is an ad-hoc file sharing application. Each Impromptu user can share files and decide how the shared files can be accessed by other users. A file can be "see-only", which means other users will only know its existence but cannot access its content. A file can be "read-only", where other users will be able to read its content but not modify it. A file can also be "read-write", allowing other uses to read and modify its content. Finally, a file can be "persistent", which means that it will still exist for read/write access even after the original owner has left the ad-hoc sharing group. 3.2.1 Interface Design Impromptu's interface is based on the principles of visualization and direct manipulation to give users a clear representation of "who is around," what files are shared and in what degree, and what actions by other users are being taken at a given moment. In addition, the interface allows users to easily configure the sharing levels of their files by directly moving them in and out from the Pie GUI. In so doing, the interface integrates visualization of events (e.g., new user joining the sharing workspace, files being accessed, and files being make more or less available) and configuration (e.g., user moving files to a persistent repository before leaving the sharing workspace) –clearly implementing the concept of the integration of action and configuration. Figure 2 depicts what a user will see when Impromptu launches. The "pie" designates the entire ad-hoc file-sharing group in which each slice corresponds to a single participant's shared area of the workspace. A participant's own slice is represented by the darker shaded slice. The organization and orientation of this circular region are consistent for all users, so that informal references (e.g. to "left", "right," or "top corner") can be oriented towards by all (Tatar et al., 1991). Files, represented by labeled dots, are placed in and around the circular region. Each area is tagged with a unique color for each user; this color is also associated with that user's files, and with indicators of that user's activity. The interface is separated into multiple concentric regions; the metaphor corresponds to the idea that the closer the files are to the center, the "more shared" they are. Various degrees of sharing might be implemented. The particular mappings we have been using are that files outside the circle are not shared at all, but available to the local user; files in the outer region are visible but not readable or writable to others; files in the next region are readable but not writable; in the next, readable and writable; and in the center, readable, writable, and available persistently. Persistent access means that, even when someone leaves the session, his or her files remain accessible to others in the group; by default, files are non-persistent, meaning that when the user leaves the session, their files will disappear from others' interfaces. The provision of persistence serves two functions here, one pragmatic and one research-oriented. The pragmatic motivation is that persistence is a necessary feature of many of our usage scenarios (e.g. information sharing in group meetings); the research motivation is that we wanted to be sure that our different "sharing degrees" did not simply correspond to conventional file access rights. File access is managed by moving
Page 7
the files between the levels. People can only control the accessibility of their own files. The dots that represent files do more than simply convey the position of an object in the Pie; they also represent activities over those files. Remote file accesses to local files cause a ring around the icons for the files to blink in colors that indicate the identity of the user accessing them. This dynamic visual display draws attention to current activity and allows for a quick overview of access patterns. In so doing, it implements the concept of integration of action and configuration and of dynamic visualization of activity. 3.2.2 System Implementation Internally, the Impromptu application consists of the following components: the graphical user interface, the Jetty web server, the Impromptu WebDAV proxy, and the Slide WebDAV repository. The secure WebDAV connector and the YANCEES event notification connector connect these components together. The architecture is depicted in Figure 3. Jetty and Slide are external open source software components. The user interface component, the proxy component, the secure WebDAV connector, and the YANCEES connector (see above) are developed by us. Jetty serves as a dynamic application server that allows an add-on component to decide what a response will be when Jetty receives a request. Slide is such an add-on component that provides WebDAV repository support. WebDAV (Goland et al., 1999) is an HTTP extension that provides Internet-scale resource storage, retrieval, and modification capability. It is an open standard, easily available in different platforms, and is thus chosen as the foundation storage for the ad-hoc file sharing application. Each participant stores his/her files in his/her own Slide server. However, this local storage is not directly seen by the participant. A participant only interacts with the Impromptu proxy server, using the Pie GUI depicted in Figure 2. The proxy provides an illusion of a unified, shared file storage workspace. When an Impromptu proxy receives a file operation request, it determines whether the request is directed at a local file or a remote file belonging to another participant. In the former case, it retrieves the file from the local Slide server, using a standard WebDAV request. In the latter case, it performs the operation against the remote Impromptu proxy, which will accomplish the operation using its own local Slide server. The implementation of the GUI is based on SVG (Scalable Vector Graphics), a W3C recommendation, which defines an XML grammar for rich 2D graphics including features such as transparency, arbitrary geometry, filter effects (shadows, lighting effects, etc.), script and etc. Since the graphics are vector-based, they will not lose any quality if they are zoomed or resized, which is desirable for Impromptu to run on different devices with a variety of screen sizes. The Batik toolkit we used in our implementation enables us to generate, parse, view or convert SVG contents using Java technology. Impromptu uses then YANCEES, configured for a peer-to-peer setting, to maintain the client Pie views in sync by informing each client of events taking place on the others. Figure 2: Impromptu interface - Six person file-sharing collaboration
Page 8
We designed this application for a relatively-security-friendly, ad-hoc file-sharing environment. The participants are not malicious, and the major risk in such an environment is unintentional disclosure of information. In traditional file sharing applications, when a user operates on files, it is not always clear to the user what files are shared, how they might be accessed and changed, and who is currently reading and changing files. However, we want to avoid requiring users to use a rather complex configuration operation to express such intentions. Such complexity might be overwhelming to the user, and thus affect usability. In summary, the security goals for the Impromptu file sharing application are 1) make security visible; 2) ease security configuration. 3.2.3 Impromptu Test-bed We conducted a series of cognitive walkthrough activities within our research group in order to flag some initial interface problems. CW offered important information concerned the "usability" of Impromptu, but provided limited insights with respect to our primary concern with how users' privacy and security could be demonstrated through and supported by the application. We then conducted a series of informal pilot studies where we observed pairs of individuals (drawn from our department) collaborating. Each pair was working on a self-selected task. Thus, they were highly motivated to complete tasks given their realism, and tasks varied in structure and type of collaboration required. Sessions lasted one hour each. Our observations underline the necessity of integrating action and configuration, as well as the usefulness of providing a real time visualization of activity. Four particular issues stand out from these initial usage experiences. First, we noted that each group that tried Impromptu used it in a different way. Some groups adopted highly integrated working style, while others used Impromptu more as a means to coordinate separate activities. Some shared information to the highest degree, while others used the sharing levels more selectively. Second, the integration of action and configuration creates a strong sense of embodiment and sharing. People respond to the shared space of the Impromptu interface as a shared and active space, and the objects within it as truly shared and seamlessly available Third, we were pleased to see that the interface provides people with a strong sense of the presence of others. During some of our trials, we unexpectedly joined a session in progress, so that suddenly a new user would appear in the interface. This arrival was clearly visible in the interface, and was apparent to people glancing at the Impromptu window. Further, people's responses indicated that they were, first, clearly aware of the consequences for their own activities, and, second, able to take action in response by, for example, taking shared files and moving them to a read-only space to prevent the new arrival from gaining full access to the content of their work. Fourth, we can see that it is important to understand aspects of the context in which the system may be put to use. There are two relevant contexts – a physical context and a working context. The physical context of use is face to face collaboration; Impromptu was not designed to support distance or distributed collaboration (although it does not preclude it), but rather as an adjunct to face to face work, permitting people to share information more easily than they might do using other physically co-present mechanisms (e.g. flash drives.) People talked to each other a great deal while using Impromptu, commenting on their actions, describing their plans, and of course talking about the work that they were doing. The use of Impromptu as a support, rather than a replacement, for face-to-face interaction is clearly important in the design. The working context is slightly more problematic. File sharing is rarely an end in itself; it is a means to support other working Figure 3: Impromptu Architecture
Page 9
activities. Impromptu, then, is expected to be used alongside other applications. In our early trials, we noted that these other applications would sometimes obscure the Impromptu interface, making it harder to notice changes and updates. We are looking, therefore, at a range of ways of conveying information about shared activities to people, not only through a dedicated interface but also through ancillary displays that can augment other interfaces. 4. DISCUSSION AND FUTURE DIRECTIONS Although this is an ongoing research, it is still useful to reflect on some of the experiences we gained designing, developing, and having others as well as ourselves using the applications. We have obtained promising results from these experiences that point to future design and development directions and activities. We were also able to observe some challenges in the performance of evaluative research in the areas of privacy and security in the context of everyday uses of technologies. We have so far developed and explored the two approaches for usable security separately – visualization of network events and the integration of action and configuration – but our goal is to integrate them. For example, our informal study with Impromptu has shown that because of the seamlessness of the interface, users got drawn into their activities and were unable to perceive activities on the network, such as new users joining the workspace, when the application was hidden behind another application. So, we are now exploring new forms of awareness visualization that will allow users to perceive activities on the network. A well-discussed problem with awareness mechanisms is the tension between notification of important events and disruption. We do not intend to create yet another notification system, but to take advantage of the convergence of new wireless hand-held devices. For example, we are exploring the use of a PDA or a cell phone running Impromptu in support of activities taking place on one's notebook – while users carry out their collaborative tasks on their computer, they will be able to change sharing levels of their files through the PDA as well as monitor who else might be "around." By the same token, we are exploring the use of the environment as a situated and continuous awareness mechanism. The goal is to create mechanisms that increasingly match our everyday physical interactions with privacy and security (as described in Section 2). The integration of the two applications will require extending and improving existing technological infrastructures. YANCEES is currently underutilized by Impromptu. The use of YANCEES as a configurable and extensible service allows the infrastructure to be customized to different requirements incorporation of future extensions that is necessary for our approach for usable security as well as the integration of various sources of awareness mechanisms. For example, YANCEES can be configured with fewer resources in order to fit in a Palm-size computer. It can also incorporate new commands in the subscription language, such as sequence detection, abstraction and other event processing features, allowing a better manipulation of events, which may be necessary for more sophisticated clients. and permits the Impromptu at the moment implements a single security model – the visualization of user presence on the interface and the ability to directly control the sharing levels of files on the workspace. There may be a need in the future for implementing other models of privacy and security that will allow us to study other forms of privacy and security practices. We plan to implement different security policies and privacy models by extending YANCEES security models. This will allow us not only to further study the issues of designing effective private applications but also to evaluate the underlying technical infrastructure developed in this research project. The ability of implementing and exposing different privacy and security configurations and policies will also allow us to further understand the implications of exposing different aspects of the underlying technical infrastructure. We intend then to further explore the ways in which users construct trust with each other as well as with the system itself. The design and implementation of the Impromptu evaluation has also offered relevant insights about the limitations of existing standard usability evaluation methodologies and challenges in conducting studies on privacy and security practices that are mediated by networked applications. In particular, one major challenge that became clearly evident was the well-known tension between studying users in naturalistic settings and more controlled settings. This tension nevertheless assumes a more critical dimension in settings of privacy and security as we have conceptualized in this paper – an interactional and situated problem. For example, we were concerned with the extent that users were able to attune to the fact that outsiders inadvertently joined the workspace. This use of deception is more applicable in more controlled situations, such as in lab-experiments, rather than ad-hoc spontaneous interactions. Our challenge nevertheless lies in our understanding that privacy and security problems only reveal themselves in the situation in which they unfold. 5. CONCLUSION Although technical infrastructures, such as wireless ad-hoc networks over 802.11b or Bluetooth, are becoming stable, common component of everyday interactions, their current implementations and more important the integration of these various components are still awkward, hard to use, and difficult to understand. This has serious implication to the privacy and security of these systems. Usability research and practices play a critical role in addressing this problem, as well as new ways of thinking about the problem itself and new approaches for the design of these systems. In this paper, we offered an alternative theoretical and design approach for usable security. We started with a question: to what extent will making relevant features of security situations apparent to users allow them to make more informed decisions about potential privacy and security problems, and about their actions and potential implications of these actions? To address that, we designed and implemented two applications that make visible the configurations, activities, and implications of available security mechanisms. The goal was to allow users to make informed choices and take coordinated and appropriate actions when necessary. This work differs from the more traditional security usability work in that our focus is not simply on the usability of security mechanism, but how security can manifest itself as part of people's interactions with and through information systems. Our experiences designing, developing, and testing these two technical infrastructures have offered promising directions for future design, implementations, and research on usable security. In so doing, we hope to improve privacy and security, not
Page 10
necessarily by hiding complexity but by creating conditions for users act appropriately. 6. ACKNOWLEDGEMENTS This work was supported in part by the National Science Foundation under awards 0133749, 0205724 and 0326105, and by a grant from Intel Corporation. 7. REFERENCES Carzaniga, A., Rosenblum, D. S., and Wolf, A. L. 2001. Design and Evaluation of a Wide-Area Event Notification Service. ACM Transactions on Computer Systems, August, Vol. 19 Issue 3, pp. 332-383. Denning, D. 1987. An Intrusion-Detection Model. IEEE Trans. Software Engineering, 13(2), 222-232. de Paula, R. (2004). The construction of usefulness: How users and context create meaning with a social networking system.Unpublished Unpublished Ph.D. Dissertation, University of Colorado at Boulder, Boulder, CO. de Paula, R., Ding, X., Dourish, P., Nies, K., Pillet, B., Redmiles, D., et al. (2005). In the eye of the beholder: A visualization-base approach to information system security. International Journal of Human-Computer Studies (to appear). Dourish, P., & Anderson, K. (2005). Privacy, security… and risk and danger and secrecy and trust and identity and morality and power: Understanding collective information practices: Irvine, CA: Institute for Software Research. Technical Report UCI-ISR-05-1. Dourish, P. and Byttner, J. (2002). A Visual Virtual Machine for Java Programs: Exploration and Early Experiences. Proceedings of the ICDMS Workshop on Visual Computing (Redwood City, CA). Dourish, P., Grinter, R., Delgado de la Flor, J., and Joseph, M. (2004). Security in the Wild: User Strategies for Managing Security as an Everyday, Practical Problem. Personal and Ubiquitous Computing, 8(6), 391-401. Dourish, P. and Redmiles, D. (2002). An Approach to Usable Security Based on Event Monitoring and Visualization. Proceedings of the New Security Paradigms Workshop 2002 (Virginia Beach, VA). New York: ACM. Goland, Y., Whitehead, E., Faizi, A., Carter, S. and Jensen, D., 1999. HTTP Extensions for Distributed Authoring - WEBDAV. Internet Engineering Task Force, Internet Proposed Standard Request for Comments 2518, February. Good, N., and Krekelberg, A. 2003. Usability and Privacy: A study of Kazaa P2P file-sharing. Proc. ACM Conf. Human Factors in Computing Systems CHI 2003 (Ft Lauderdale, FL). New York: ACM. Henning, R. 1999. Security Service Level Agreements: Quantifiable Security for the Enterprise? New Security Paradigm Workshop (Ontario, Canada), 54-60. IEEE. Irvine, C. and Levin, T. 1999. Towards a Taxonomy and Costing Method for Security Services. Proc. 15th Annual Computer Security Applications Conference. IEEE. Irvine, C. and Levin, T. 2001. Quality of Security Service. Proc. ACM New Security Paradigms Workshop, 91-99. Kantor, M., Redmiles, D. 2001. Creating an Infrastructure for Ubiquitous Awareness, Eight IFIP TC 13 Conference on Human-Computer Interaction (INTERACT 2001?Tokyo, Japan), 431-438. Lunt, T. and Jagannathan. 1988. A Prototype Real-Time Intrusion-Detection Export System. Proc. IEEE Symposium on Security and Privacy, 59-66. New York: IEEE. Orlikowski, W. J., & Gash, D. C. (1994). Technological frames: Making sense of information technology in organizations. ACM Transactions on Information Systems (TOIS), 12(2), 174-207. Palen, L. and P. Dourish (2003). Unpacking "privacy" for a networked world. Proceedings of the SIGCHI conference on Human factors in computing systems, Ft. Lauderdale, Florida, USA, ACM Press. Segall, B. and Arnold, D. (1997). Elvin has left the building: A publish/subscribe notification Proceedings AUUG97 (Brisbane, Australia). service with quenching Sheehan, K. 2002. Towards a Typology of Internet Users and Online Privacy Concerns. The Information Society, 18, 21-23. Silva Filho R. S., De Souza C. R. B., and Redmiles D. F.(2003). The Design of a Configurable, Extensible and Dynamic Notification Service. Proc. Second International Workshop on Distributed Event-Based Systems (DEBS'03), Spyropoulou, E., Levin, T., and Irvine, C. 2000. Calculating Costs for Quality of Security Service. Proc. 16th Computer Security Applications Conference. IEEE. Tatar, D., Foster, G., and Bobrow, D. (1991). Designing for Conversation: Lessons from Cognoter. International Journal of Man-Machine Studies, 34, 185-209. Thomsen, D. and Denz, M. 1997. Incremental Assurance for Multilevel Applications. Proc. 13th Annual Computer Security Applications Conference. IEEE. Whitten, A. and Tygar, J.D. 1999. Why Johnny Can't Encrypt: A Usability Evaluation of PGP 5.0. Proc. Ninth USENIX Security Symposium. Zurko, M.E. and Simon, R. 1996. User-Centered Security. Proc. New Security Paradigms Workshop. ACM.


text:
Edmondson Pike Branch is closed for renovation. Get details.
Lost Library Card
Need help with PIN
Cannot Renew items
Not receiving email notices
I lost/damaged a book/cd/video
Returned item still listed on My Account
Cannot place hold
Your library PIN allows you to place holds, use library databases, and other online library services. It provides additional security for your account and prevents others from using your library card or accessing your account.
You may elect to change your PIN number at any time by accessing your account and selecting Modify PIN. You must use your original PIN to gain access to the change function.
If you receive the error message: Sorry, the information you submitted was invalid. Please try again.
Site search (will not locate items in catalog):


text:
1 Result Found that Includes 1 Product
How can we improve the Search Experience?
Product availability based on selecting either shipping or pick up and a location. Dismiss
Ship or Pickup Enter Location
- Nuisance Removal Dust Mask, PK50 Nuisance Removal Dust Mask,PK50
- Item # 2KFY4
- Mfr. Model # 2KFY4
Nuisance Dust Mask, Size Universal, White, Headstrap Type Elastic, Nose Clip Metal, Package Quantity 50
Price $9.54 / pkg. of 50
Catalog Page # 2168
Note: Product availability is real-time basis and adjusted continuously. The product will be reserved for you when you complete your order. More


text:
Have You Heard About Our New Mobile App? Search NSCCU In Your App Store . See Your Balance, Deposit Checks, & Transfer Money All From Your Phone!
We offer mortgage loans and will help you through the process step by step.
Whether it be Machinery/Livestock, Farm Operating or Breeding Stock, contact our Agriculture Loan Officers today!
North Star Community Credit Union has received a 5-Star Rating from Bauer Financial! To see more about how Bauer analyzes banks and credit unions go to bauerfinancial.com
News and Happenings
Membership Info


text:
Results 1 to 15 of 91
Thread: Team Chow II: Team Baguette
August 3rd, 2009 #1
Team Chow II: Team Baguette
so the Baguette brothers are back in effect! although 2 men down. Power playas DanielC and D@niel are busy bodys so theyll be sitting this one out. My main man Vorace and my humble self will be handling this bad/good boy chow!
let the games begin!
Hide this ad by registering as a memberAugust 3rd, 2009 #2
So to set up our beginnings: Were shooting for 4 portraits (full body? per the prompt example?)
Race: Human and Elf
Setting: European old forest
Running Aesthetic base: Warhammer
Last edited by smokenmirrors; August 3rd, 2009 at 02:07 PM.
August 3rd, 2009 #3
warming up with some elf sketchery.....*fart*
August 3rd, 2009 #4
Glad to see that Baguette is back. Even if you are only half a loaf this time. Get cookin! Can't wait to see what you've got in the oven. Take a bite out of the cliche genre! Rise to the challenge!
August 4th, 2009 #5
Hehe interesting ideas Smokken!
I worked on one of your face. I tought it might be cool to have a mohawk/brutal amerindian look and feel for the elf?
I did also a sketch for the human. I had in mind some kind of ranger with medium armor. I was a bit inspired by Robin hood, especially for the hat .
i think we could give them a grim and dirty look even for the ''good'' version.
For the workflow, i suggest to throw some ideas for the characters for some days, and then we could each work on a different character and different side, and when we are done we complete the portrait of the other. Also it would be cool to do real collabs, painting over each other stuff and not just giving crit !
Some idea for the evil version :
-same characters after the black death (the plague)
-same characters but undead version
-demonic versions (possessed)
-Classic evil overlord look
for the style :
warhammer style = lot of small details, belts, trincklets, talismans, runes, skulls everywhere even for the good guys , somewhat realistic proportions and look for the anatomy for big armor, not to flashy, but really brutal and powerfull. blood and dirt
Last edited by Vorace; August 4th, 2009 at 01:29 PM.
August 4th, 2009 #6
yessssssssssss! freshness! love the details on the human! I gots some blue sky (free sketch) sessions to add in a bit. But I suppose we have to eventually start narrowing down our scope of characters ie: story/personality.
I love the "possesed" idea to get the "evil" versions of our good characters and likewise I whole heartily agree with the pushing the degree of collab as far as we can.
just some ideas for story/characters:
Warrior priest: heavy tomes, strung with battle relics and vials of holy powders/liquids/ungents.
Evil version seems pretty cake: loses faith and immerses her/himself in the dark powers.
Elvin Ranger: archaic armor, somewhat organic but with sharp edges. Ranged weaponry, arm mounted crossbows... has pet crow/wolf/falcon (i suppose we should try to steer away from any drizzit (r.a.salvatore) action) earth tones, coppery armor, dull sheen. Work in some feathered costume elements, animal pelts and some antlers.........
Evil version: NOW isnt an "evil" elf an ork or goblin???? well I think we can go any number of routes with a "dark" elf look. Possessed to boot!
also it would be fun to push the "opposites" ie: good versions appear healthy and robust... while the evil are wasting away and sickly (plague) but no less commanding.....
so some more open sketch sessions plus source examples before we pick the characters to begin illustrating, and I say we go for the "good" examples first.... then demonize each others concepts!!
sketches coming
August 5th, 2009 #7
Hello guys
I'd like to join your team if you don't mind taking a beginner under your wings
August 5th, 2009 #8
great ideas Smokken!!
hey Ronald, i'll answer you as soon as I got the answer from Smokken!
some ref based on our description for the elf (didnt find any ref for a very ''organic'' armor )
I think we should also define something to hold them togueter (style-wise). They are all living and fighting in the forest, but maybe something more than that. Maybe they are each based/inspired by an animal for their look and feel... or maybe they they all have some similar details etc or just really push foward the forest influence ?
also it would be fun to push the "opposites" ie: good versions appear healthy and robust... while the evil are wasting away and sickly (plague) but no less commanding.....
August 5th, 2009 #9
animal refs. I like the idea of infusing animal qualities/features into the character.... and likewise really bringing out the animal in the demon versions... hmm...
in any case Im down with the pumas, ravens, lions, tigers and some baboon action........be fun to come up with faces based off these animals. likewise I included some random elf/ foresty characters.... some j.sweet, v. kovacs and some warhammer action... i think c.kopinski and maybe p.daiton...
now to keep these characters togther... are we imagining them on some type of quest togther... ie: lotr.... or just different characters coexisiting in the forest?
... for the elf to try to steer away from the "fair ones" stereotype, and because im def. down with your mohawk suggestion seems like a "punk" elf is on order. Easy to do with the warhammer aesthetic also given the amount of trinkets and belted items we can string on him.... I think the difficult part is being able to give him just enough edge to look fresh but no so much hell be confused as evil. Obviously juxt opposed to our demon version it will be clear as day, but I think we also have to make sure that when seen alone he can still be a "good" guy.
August 5th, 2009 #10
heres an idea... what about "elven punk!?" maybe elven warrior punk.... elven thief punk... and on and on.
just seems like that would be a unique aesthetic and ripe full of fresh imagery: ref. japanese eccentric punk style....
also to weave in a bit more story/connection to our human character... maybe hes a bounty hunter.... or enforcer (police) thats tracking down our elven troublemaker....
lil elven teen angst and fighting the man... although he/shes 3 times the age of the human... still a kid by elven standards.
just an idea...
August 6th, 2009 #11
August 6th, 2009 #12
drew these a few days ago, but didnt scan them in, partly cause my pencils feel like theyve a little too much weak sauce on the page.... which is only to say that my mind is now racing towards the afore mentioned ideas and really tweaking them into that direction. in any case, today is crank time for some high elven punk action.
August 6th, 2009 #13
hai guys moar sketchezzz
I like the brutality idea. I remember studying Beowulf in grade 8 and what one learns from the tale is that "there's good in evil and evil in good". Blurring the line between the good and the evil archetypes could be a good way to break the stereotypes. But I think it's also important to find some way to make the distinction between the two evident, through perhaps the use of colors and symbolism (blue vs red, vile green vs noble purple, skulls vs holy stuff, straight line vs crooked line, etc?).
let's make some epic stuff
August 6th, 2009 #14
welcome to the team brotha! and excellent tribal action going on!
heres some punk source... even if we dont go that route, i just had to get it out of my system.
The Following User Says Thank You to smokenmirrors For This Useful Post:
August 6th, 2009 #15
wo let's try to integrate that jap punk style into a high fantasy setting
Similar Threads
Team Chow III - Baguette crispyBy DanielC in forum Team ChowReplies: 23Last Post: February 1st, 2010, 04:12 AM
TEAM CHOW: Team Night Stalker!- Grandmassa Mr. Spect- KonnA and JailHouseRock2!By JailHouseRock2 in forum Team ChowReplies: 83Last Post: July 29th, 2009, 12:25 AM
SketchBook: TEAM CHOW: Team Night Stalker!- Grandmassa Mr. Spect- KonnA and JailHouseRock2!By JailHouseRock2 in forum SketchbooksReplies: 82Last Post: May 5th, 2009, 07:11 AM
SketchBook: Team CHOW: AriA, Kisou, Pezzle [Team Random?] Group Sketchbook!By Pezz in forum SketchbooksReplies: 17Last Post: April 15th, 2009, 03:43 AM
Team ChOW - Team InsertNameHere - Sekino, vibhas_virwani, Bendragon and YoitisiBy yoitisi in forum Team ChowReplies: 22Last Post: April 13th, 2009, 09:34 PM
Members who have read this thread: 0There are no members to list at the moment.


text:
Translation of florist in Spanish:
- (person) is there a florist's near here?¿hay una floristería or (Latin America tb) florería cerca de aquí?Example sentences
- We enjoy selling to florists because florists love flowers as much as we do.
- Never eat flowers sold by nurseries or florists; they are not grown for consumption.
- The area's obsession with flowers means local florists are burning the midnight oil just to keep up with demand.
Definition of florist in:
- British & World English dictionary
- US English dictionary
What do you find interesting about this word or phrase?
Comments that don't adhere to our Community Guidelines may be moderated or removed.
Grammar and usage help for Spanish:
Subscribe to remove ads and access premium resources
= trending


text:
See definition in Oxford Advanced Learner's DictionarySyllabification: waste·bas·ket
Pronunciation: /ˈwās(t)ˌbaskət/
Definition of wastebasket in English:
nounNorth American
A receptacle for small quantities of rubbish.
Example sentences
- Drifts of paper - treaty drafts, industry talking points, environmentalist press releases - overflowed every wastebasket.
- Hey, if you need, that wastebasket makes for a handy bucket, you know.
- The final section of the show featured a miniature artist's office, with file cabinet, worktable, chair and wastebasket all set out on a funky full-sized work table.
Definition of wastebasket in:
- British & World English dictionary
What do you find interesting about this word or phrase?
Comments that don't adhere to our Community Guidelines may be moderated or removed.
Subscribe to remove ads and access premium resources
= trending


text:
The Roiail Progenei of our Most Sacred King James
7 of 25 portraits of Henry Stuart, Lord Darnley
© National Portrait Gallery, London
The Roiail Progenei of our Most Sacred King James
by Benjamin Wright, after Unknown artist
line engraving, published 1619
15 1/2 in. x 11 3/4 in. (394 mm x 299 mm) paper size
Reference Collection
Click on the links below to find out more:
Artistsback to top
- Unknown artist. Artist associated with 6320 portraits.
- Benjamin Wright (1575-1613), Artist and cartographer. Artist associated with 1 portrait.
Sittersback to top
- Archibald Douglas, 6th Earl of Angus (1489?-1557), Second husband of Margaret Tudor, Queen of James IV of Scotland. Sitter in 2 portraits.
- Anne of Denmark (1574-1619), Queen of James I. Sitter associated with 44 portraits.
- Henry Stuart, Lord Darnley (1545-1567), Second Consort of Mary, Queen of Scots. Sitter associated with 25 portraits.
- Elizabeth of York (1466-1503), Queen of Henry VII. Sitter associated with 23 portraits.
- François II (Francis II), King of France (1544-1560), King of France 1559-1560; Consort of Scots 1558-1560; first husband of Mary Queen of Scots. Sitter in 7 portraits.
- King Henry VII (1457-1509), Reigned 1485-1509. Sitter associated with 64 portraits.
- King James I of England and VI of Scotland (1566-1625), Reigned Scotland 1567-1625 and England 1603-25. Sitter associated with 197 portraits.
- James IV of Scotland (1473-1513), Reigned Scotland 1488-1513. Sitter associated with 14 portraits.
- James V of Scotland (1512-1542), Father of Mary Queen of Scots; reigned Scotland 1513-42. Sitter associated with 13 portraits.
- Matthew Stewart, 13th or 4th Earl of Lennox (1516-1571), Magnate and Regent of Scotland. Sitter in 4 portraits.
- Margaret Douglas, Countess of Lennox (1515-1578), Mother of Lord Darnley. Sitter associated with 10 portraits.
- Margaret Tudor (1489-1541), Queen of Scotland. Sitter associated with 8 portraits.
- Mary of Guise (1515-1560), Queen of James V of Scotland. Sitter in 2 portraits.
- Mary, Queen of Scots (1542-1587), Reigned 1542-67. Sitter associated with 148 portraits.
This portraitback to top
The accession of James I in 1603 established a new dynasty on the throne of England, following over a century of Tudor rule. This print was produced as a visual family tree to demonstrate James I's rightful claim to the throne via his great grandmother, Margaret Tudor, sister to Henry VIIII. It was first published by John Woutneel, a London printmaker in 1603.
Subjects & Themesback to top
Tell us moreback to top
Can you tell us more about this portrait? Spotted an error, information that is missing (a sitter's life dates, occupation or family relationships, or a date of portrait for example) or do you know anything that we don't know? If you have information to share please complete the form below.
If you require information from us, please use our Archive enquiry service. If you wish to license this image, please use our Rights and Images service.
Please note that we cannot provide valuations.
We digitise over 8,000 portraits a year and we cannot guarantee being able to digitise images that are not already scheduled.
Exhibitions and displays
- The Tudors Reimagined: George Perfect Harding
Until 14 February
Related pages
- My Favourite Portrait by Sonia Boyce
- Picturing History: A portrait set of early English kings and queens
- My Favourite Portrait by David Cobley
- Gunpowder, Treason and Plot
- Hidden: Unseen Paintings Beneath Tudor Portraits
- Mary, Queen of Scots: Fact and Fiction
- Mary, Queen of Scots
- Mary, Queen of Scots
- Return to Life: A New Look at the Portrait Bust
- Bank of America Merrill Lynch, Art Conservation Project
Events programme
- Portrait of the Day: King Richard III
28 February, 12:30
Related shop items
- Monarchs Ruler
- Magnetic Monarchs
- Henry VII Cushion
- Henry VII A5 Sketchpad
- A Guide to Tudor & Jacobean Portraits (paperback)
- A Guide to the National Portrait Gallery (paperback)
- National Portrait Gallery Kings & Queens (paperback)
- The Real Tudors: Kings and Queens Rediscovered
- National Portrait Gallery: A Portrait of Britain
- Moustaches,Whiskers & Beards
- Pets in Portraits
- A Portrait of Fashion: Six Centuries of Dress at the National Portrait Gallery
- The Kings and Queens of England Poster
- King James I greetings card
- Kings and Queens of England Mug
- King Henry VII by Unknown Netherlandish artist Postcards