text:
- Support Die Mannschaft!
- Currently Unavailable
Marco Reus has it all. He possesses world-class close control with either foot, exquisite technique and the ability to work on either flank or through the middle. No matter where he is deployed, Reus poses problems for defenders with his speed, ability to read the game and unleash stinging, dipping and curling strikes. As if the talents he was afforded and perfected weren't enough to make other players jealous, Reus is able to put them on full display for his boyhood club, Borussia Dortmund, and while wearing the famous crest of his country, Germany, in international play.
Cheer for Germany in this official home jersey from adidas.
Germany's national team is a strong source of national pride, a passion that is captured in this jersey's design. Inspired by the brilliance and efficiency of German engineering, this classic jersey is sure to be in fans' closets for years to come.
V-neck ClimaCool jersey features adidas' logo embroidered on the front, with Germany's federation crest and three championship stars applied on the front.
Unsere Nationalmannschaft, "our national team', is printed under the back collar.
Transparent tape on the sides further subtracts from the jersey's weight. Subtle pinstripes on the torso add to this jersey's elegant and classic design.
Each of adidas' 2014 federation jerseys has an iconic band across the shoulders to signify unity. These revolutionary kits are the lightest that adidas has ever designed.
100% polyester.
NOTE: Due to national team selection process, we cannot guarantee that this player is going to wear this number, or that he will play in Brazil until the 2014 FIFA World Cup Brazil™ squads are confirmed later this year.
Lamentamos que todavia no hay descripción en español para este producto.


text:
Once, the new Broadway musical based on the Oscar winning Irish film of the same name, opened on this weekend to standing ovations and critical raves. CAHIR O'DOHERTY reviews the new show, which he says surpasses the original film, for The Irish Voice.
There's a reason that audiences are flocking to see Broadway shows in record numbers, even though they could probably fly to Dublin for the price of a premium seat nowadays.
That reason is theatrical magic. When it works it surpasses any drug on the market. That magic happens when you're sitting in a darkened theater with 300 other people and an actor on the stage is breaking your heart into a million tiny shards.
I defy anyone to attend Once, the deeply affecting new musical based on the Irish film of the same name, and not be swept away by the sincerity of the performances and the music.
When these actors let loose onstage (and let me tell you they really let loose), any lingering moaning about outrageous ticket prices will be balanced by the timeless beauty of the human voice raised in song. That's a trade-off that's actually worth making here.
Based on the 2006 Irish film that quietly conquered all before it on its way to the Oscars (ending up with an Oscar for Best Original Song), the plot of Once could be written on a napkin -- a broken hearted boy meets a broken hearted girl who wants to help him out of a dead end. They succeed. Then they face unexpected consequences.
There's more to it than that, of course. This is an Irish story, reconfigured by Irish playwright Enda Walsh, so it's a script filled with jet black humor and something I have never seen in a Broadway show before, a profound and completely inconsolable sadness.
It's not the I-loved-her-but-she-done-me-wrong sadness that we associate with musicals. It's something far deeper and harder to bush off. We watch two characters experience the kind of wrenching disappointment that can unmoor a life and send a soul spinning.
Irish dramatists have never been afraid to look life's disappointments directly in the face, but I've never seen another Broadway musical that refused to soften the blows the way that Once does.
That gives the show's emotional center a degree of rawness and romantic yearning that I'm warning you about right now. Once you pay the money and take your seat in the theater you'll be on your own.
Longtime fans should note that the musical only uses the original film to supply an outline. What the actors, playwright and director have come up with -- and I don't say this lightly -- is a much finer show.
You'll get the first intimations of what's ahead of you when Steve Kazee, who plays Guy, performs a song called "Leave" on a Dublin street that is overheard by the passing Girl (Cristin Milioti).
Kazee, who looks like he was factory farmed in a facility that specializes in creating leading men, begins quietly and builds, finishing the song with howls of pain and anger that seems to erupt from deep within him. It's a staggering performance that should cement the career of the young Broadway veteran.
Guy's been left behind, forlorn and broken-hearted, in Dublin by a girl who's set off for a new life in New York City, which may or may not eventually include him.
On his own, and dying of it, he haunts the scenes of his former happiness until he's confronted by Girl, a Czech immigrant who secretly sees more than a little of herself in him.
"I can't wait forever is all that you said," Kazee sings. "And you won't disappoint me -- I can do that myself. But I'm glad that you've come now if you don't mind, leave…" You can hear what it costs him to be left behind by the love of his life in every line he sings.
Kazee then does something I would have thought impossible. He makes the Swell Season song his own in an onstage act of reclamation that Glen Hansard and Marketa Irgolva, the stars and Oscar winning songwriters of the Once film, have admitted they were amazed by.
They're not the only ones. Both Broadway audiences and veteran critics have been floored by the completely jarring Irish aspects of the show, which contrast strongly with typical fare.
Irish musicians simply don't write musicals, it's not a form they're versed in or that they ever pursue. So the creative team behind this show had to take the mountain to Mohamed, bringing Broadway to Dublin, rather than the other way around, which could have turned Once into this year's version of that spectacular multimillion dollar flop The Pirate Queen. It turns out that going there is better formula for a Broadway hit.
Another masterstroke was casting Milioti as the young Czech immigrant who's simply known as Girl. With her enormous doe eyes and her tiny frame she's a whirlwind of determination and charm, and she owns the stage from the moment she appears.

subset: commoncrawl


text:
About the Book
"An author who delivers only the best."
—Romantic Times
"Put Jeaniene Frost on your must-read list!"
—Lara Adrian, New York Times bestselling author
Spinning off from her wildly successful, New York Times bestselling Night Huntress novels featuring vampire soulmates Cat and Bones, Jeaniene Frost kicks off the thrilling new Night Prince series with Once Burned. Vlad Tepesh, the ruthless master vampire and inspiration for Bram Stoker's dark legend (but don't dare call him Dracula) encounters a mortal woman with unimaginable power…including the ability to enflame his cold heart. Paranormal romance and urban fantasy fans who hunger for the novels of Kim Harrison, Christine Feehan, and Charlaine Harris are going to love The Night Prince and this dark and steamy tale of supernatural attraction.
She's a mortal cursed with dark power...
After a tragic accident scarred her body and destroyed her dreams, Leila never imagined that the worst was still to come: a terrifying ability to channel electricity and to see a person's darkest secrets through a single touch. Leila is doomed to a life of solitude...until creatures of the night kidnap her, forcing her to reach out with a telepathic distress call to the world's most infamous vampire...
He's the Prince of Night...
Vlad Tepesh inspired the greatest vampire legend of all—but whatever you do, don't call him Dracula. Vlad's ability to control fire makes him one of the most feared vampires in existence, but his enemies have found a new weapon against him—a beautiful mortal with powers to match his own. When Vlad and Leila meet, however, passion ignites, threatening to consume them. It will take everything they have to stop an enemy intent on bringing them down in flames.
Educator and Librarian Resources
Audio Excerpt
To view this page ensure that Adobe Flash Player version 10.0.0 or greater is installed.
Product Details
- Imprint: HarperAudio
- On Sale: 06/26/2012
- List Price: 21.99 USD
- BISAC1: FICTION / Romance / Paranormal / General


text:
Girls' Preschool Skechers Twinkle Toes Casual Shoes
Buy Online & Pick Up In-Store
The Skechers Twinkle Toes Shuffles Preschool Shoes really know how to bring the bling. With every step the rainbow toe lights up with awesome sparkling brights, plus you can't miss the sparkly laces. Super cool, huh?
These shoes feature a traditional lace-up front for a personalized, snug fit. That, and the design details go on for miles.The soft fabric upper features fun mini-sequins and a leopard print design for a sparkly look she'll love.
The Skechers Twinkle Toes Shuffles Preschool Shoes really do have it all when it comes to frisky design. Plus, their solid rubber outsole has a traction pattern so your girly girl will stay grounded when she's running around in these awesomely fashionable kicks.
- UPPER: Soft fabric
- MIDSOLE: Cushioned insole
- OUTSOLE: Vulcanized rubber


text:
Quick Tour
<< Back
Quick Tour
Next >>
Setting up your webcam page
Click here for the Quick Guide
The first time you start up the MyCam Page Designer you
will be prompted to enter a unique URL or address. This address may be shared
with friends and family so they may visit your page.
You may choose from two options to stream your image to your custom webpage.
Transmit LIVE streaming video to your MyCam Page.
Preview your video before you go live.
User friendly interface - have your webcam live in seconds!
On the Webcam Setup page, we provide you with a few options to enhance your webcam's page:
Depending on the layout you choose, this weather applet
will be displayed in different locations on your page.
There's a time display inside the webcam player
in the bottom left-hand corner. To switch to your local weather, click on the arrow.
EarthCam - Where The World Watches The World ®


text:
A riveting and revealing look at the shows that helped cable television drama emerge as the signature art form of the 21st century
In the late 1990s and early 2000s, the landscape of television began an unprecedented transformation. While the networks continued to chase the lowest common denominator, a wave of new shows, first on premium-cable channels like HBO and then basic-cable networks like FX and AMC, dramatically stretched television's narrative inventiveness, emotional resonance, and artistic ambition. No longer necessarily concerned with creating always-likable characters, plots that wrapped up neatly every episode, or subjects that were deemed safe and appropriate, shows such as The Wire, The Sopranos, Mad Men, Deadwood, The Shield, and more tackled issues of life and death, love and sexuality, addiction, race, violence, and existential boredom. Just as the big novel had in the 1960s and the subversive films of New Hollywood had in 1970s,television shows became the place to go to see stories of the triumph and betrayals of the American Dream at the beginning of the 21st century.
This revolution happened at the hands of a new breed of auteur: the all-powerful writer-showrunner. These were men nearly as complicated, idiosyncratic, and "difficult" as the conflicted protagonists that defined the genre. Given the chance to make art in a maligned medium, they fell upon the opportunity with unchecked ambition.
Combining deep reportage with cultural analysis and historical context, Brett Martin recounts the rise and inner workings of a genre that represents not only a new golden age for television but also a cultural watershed. Difficult Menfeatures extensive interviews with all the major players, including David Chase(The Sopranos), David Simon and Ed Burns (The Wire), Matthew Weiner and Jon Hamm (Mad Men), David Milch (NYPD Blue, Deadwood), and Alan Ball (SixFeet Under), in addition to dozens of other writers, directors, studio executives, actors, production assistants, makeup artists, script supervisors ,and so on. Martin takes us behind the scenes of our favorite shows, delivering never-before-heard story after story and revealing how cable television has distinguished itself dramatically from the networks, emerging from the shadow of film to become a truly significant and influential part of our culture.
©2013 Brett Martin (P)2013 Blackstone Audio
"Unfocused but fascinating. Very good narration."
Seemed a little unfocused, but great anecdotes for those who are interested in the industry.
Learn, understand, then decide whether you accept or reject.
"Fascinating look at our TV entertainment"
This is a behind the scenes look at the people handling the creative process of some of the best shows of the first decade of the 21st century. Basically what you'd love to see in bonus content if you get those shows on DVD.
"Praise TV's third golden age!"
Who knew the land of quality television could be so intriguing? I've dabbled with books discussing the evolution of TV into a medium capable of showcasing intelligent and quality work. Everything Bad Is Good For You by Steven Johnson discussed the development of the multi-story arc, describing the complicated story lines once reserved for soap operas which began to drift into primetime dramas with Hill Street Blues.
Difficult Men: Behind the Scenes of a Creative Revolution: From The Sopranos and The Wire to Mad Men and Breaking Bad by Brett Martin (I'm not kidding, there are really two subtitles there) takes this concept further, covering what he calls TV's "third golden age": the era that began with The Sopranos, continued with The Wire and Mad Men, and finally crescendoed with Breaking Bad. The title stems from not only protagonists of the third golden age, like Tony Soprano and Walter White; but also from the intense and exacting personalities behind these characters, like David Chase, David Simon, and David Milch (yes, the number of Davids discussed gets confusing).
I love stories of the persistence required to reach success, as it reminds me that great things don't just seem great to everyone and blossom easily, and a lot of the tales behind the most popular TV shows today are full of rejection and stumbling blocks. Breaking Bad was passed over by several networks and almost didn't get aired after the pilot was filmed, but AMC gave the show a chance after everyone else said no. Matthew Weiner stewed over the pilot of Mad Men for eight years, at times literally carrying it around with him wherever he went.
I was mainly drawn to this book because of The Wire. I thought it was so audacious and smart, and it illustrated how systems can just not work in a way only illustrated by books and movies in the past. The poignance of the one-liners, and the level to which the writers let things play out (legalizing drugs?) seemed more akin to the complicated plot development of novel than the forgettable actions taken on traditional TV shows. The Wire's creator David Simon has had an incredible life: he seemingly forced his way into journalism first in college and then at the Baltimore Sun, and then embedded with Baltimore police for a year and wrote books about his experience in the city. The first book, Homicide: A Year on the Killing Streets inspired the boundary-pushing TV show Homicide: Life on the Street; the second book, The Corner: A Year in the Life of an Inner-City Neighborhood inspired The Wire. I hadn't realized the level of research Simon had done before creating The Wire, and now I realize it shows in the work.
Difficult Men manages to examine the success of these shows from many levels. Martin discusses the history of the cable business with the same ease as he analyzes our fascination with Tony Soprano. This book shows that at the core of most TV, there are writers yearning to create stories of a certain quality. These guys are studying Chekhov and hoping to create art in the truest sense of the word. As movies keep devolving into blockbuster action flicks and series based on teen novels, it is easy to see why TV has been forced to step up to the plate as an outlet for intelligent and complicated work. This was a timely read for me, as Breaking Bad was ending shortly before I read this and it seemed like everyone was talking about the show everywhere I went, to a level I'd never experienced before. TV seems to be the most evolving genre of our time, with companies like Netflix and Amazon now financing their own shows. It will be interesting to see what sort of masterpiece the brilliant and difficult writers of the TV world come up with next.
"Behind the scenes of my two favorite TV shows"
Unlike some of the other reviewers, I didn't mind at all that this title wasn't a treatise on the recent history of the revolution in television. I thoroughly enjoyed the gossipy insider info on my two very favorite TV shows--The Sopranos and The Wire. I also liked the focus/priority given these two shows, as opposed to the afterthought discussion of Mad Men and Breaking Bad, both of which I am watching, but neither of which--IMHO--measures up to the other two. In fact, I would have preferred it if the author hadn't been so generous with his own opinions about how The Wire fell short, given how off-the-mark they were and also how many TV critics there are out there who can offer much better-informed insights on the issue.
As for the narration, I found it satisfactory overall. Mr. Szarabajka does a credible impression of Tony Soprano, but I wish he hadn't abused it by applying it to David Chase or Tony Sirico.
"Admit it: you watch television..."
As a tv writer since 1975, I found this examination of the excellent television aired on cable recently, and the personalities behind the creativity on those shows fascinating. It's always a miracle when that magic happens....more often than not, the collaboration produces a camel when they intended to create a Triple Crown winner.
An insider's look at the personalities who supported my favorite shows, I admit to envy that I left the game before it became worth playing.
It's definitely a FIVE STAR rating for anyone interested in the development and execution of the included shows---if you admit to owning a tv that only receives PBS and C-Span...download another book.
Follow me on Goodreads too!
"Behind the Scenes"
Unlike "The Butler" where I did not realize it was a "behind the scenes" book and therefore didn't like it because I felt duped, I knew what this book was all about in advance so I only have myself to blame if I didn't like it. I suspected that his might be the case just based on the title; however I decide to give it a shot anyway.
My attention was up and down throughout. As predicted, I was very captivated when the subject covered a show I'd seen (Sopranos and Mad Men), I loved the tidbits and factoids, and whole TVography was interesting…. great fun! But when it came to shows I hadn't seen, I tuned out – I really was not interested.
Not surprisingly therefore I'd recommend it to people who have watched all the shows featured – it's way more fun that way!
I was hoping for a comparison between the latest "golden age of TV" and its cultural and political causes and ramification as compared to the previous "golden ages", whose ramifications are in the history books.... alas, I was disappointed. This book quickly degenerated into Hollywood gossip and became a tell-all about the writers/show-runners who, it seems, are the same old narcissistic, ego maniacs of yesteryear, albeit with new names. Apparently some things, i.e., Hollywood, never change.
If you're looking for a behind the camera tell-all, you will love this book.
"Well done"
I was a huge fan of the Sopranos and HBO, and this was a perfect behind the scenes look not only of that show, but also the other shows that made the third golden age of TV. Narrator was great too. I've listened to four other books narrated by Keith Szarabajka and he's the best in the business.
Do you read the book before you dislike my reviews?
"Idiot Box"
As much I like reading, I really enjoy watching tv. There is always some kind of comfort from my childhood at coming home from school and sitting in front of the television and just watching shows after shows until my parents found out that my grades were slipping and the tv got unplugged from the wall. Even today, I cannot wait to get home to see what has been recorded on the DVR and have a relationship with the remote for a few hours. I know its sad, but I like the idiot box.
"Difficult Men" by Brett Martin was a rerun from all of my favorite shows in the past. Such as Carnivale, Deadwood, Breaking Bad, Nip/Tuck, and so many other shows that I can vividly remember.
In the past we had awesome scripted shows that entertained us and made us think at the same time. Now, the boob tube has really become the idiot box with cheap reality tv shows that wants to shock us at every camera angle. If there is no shock factor, the viewer will change the channel.
Gone are the days where the television was an appliance that you got to watch after supper and the family would gather around to watch the weekly episode.
The Wire is the best show ever, but Brett Martin focus his book too much on the Sopranos. Sure, that was a great show, but if I really wanted to watch the seasons over, they are always on VOD. The Wire was the best part of the book. There are a few snippets of Breaking Bad, but its nothing to drool over.
The title of this book is also misleading. It really doesn't go in depth with the actors that plays the main characters in each show. Majority of the book is about Gandolfini and HBO.
"Don't get this for Vince Gilligan/Breaking Bad"
The author has good writing, and the narrator is pleasant to listen to. He (the narrator) has a blue-collar no-nonsense type of narration that applies well to the subject matter.
What I did not like was the misleading description and cover, you see a photo of Walter White and of Tony Soprano, leading you to assume that the book would cover both characters in-depth.
While fans of Tony Soprano will get a lot of insight into his character development and the mindset of The Sopranos creator David Chase, you don't get anywhere the same amount of detail in Breaking Bad and Vince Gilligan.
The book spends almost half its length discussing David Chase and The Sopranos, the other half on David Simon and The Wire. In comparison, Breaking Bad and Vince Gilligan receive only ~30 minutes of coverage total.
Report Inappropriate Content
If you find this review inappropriate and think it should be removed from our site, let us know. This report will be reviewed by Audible and we will take appropriate action.


text:
FoodFacts.com is a big believer in finding every possible way to consume your five a day! Fruits and vegetables are such an important source of nutrients for us. They really do help us to maintain our health, and have been associated with lowered risk and even prevention of various chronic health conditions and diseases. Today we found yet another reason to find even more healthful and delicious preparations for fruits and vegetables.
A new European study analyzes the relationship between fruit and vegetable consumption and the risk of mortality and concludes that fruit and vegetable consumption reduces all-cause mortality, and especially cardiovascular disease mortality.
The benefits of fruit and vegetable consumption are not a new discovery. However, new research confirms their role in reducing mortality. This reduction is more significant in the case of deaths from cardiovascular disease.
The analysis, recently published in the 'American Journal of Epidemiology', was directed by researchers from ten countries, including Spain, as part of the European Prospective Investigation into Cancer and Nutrition (EPIC).
The sample analyzed includes 25,682 deaths (10,438 due to cancer and 5,125 due to cardiovascular disease) among the 451,151 participants studied over more than 13 years.
"This study is the most significant epidemiological study that this association has examined to date," María José Sánchez Pérez, director of the Andalusian School of Public Health's (EASP) Granada Cancer Registry and one of the authors of the research, explains to SINC.
According to the results, a combined fruit and vegetable consumption of more than 569 grams per day reduces the risk of mortality by 10% and delays the risk of mortality by 1.12 years compared to a consumption of less than 249 grams per day.
Furthermore, for every 200 gram increase in daily fruit and vegetable consumption, the risk falls by 6%. The proportion of deaths that could be prevented if everyone eating too few fruit and vegetables increased their consumption by 100-200 grams per day — thus reaching the recommended 400-500 grams per day — is 2.9%.
Previous studies already noted that fruit and vegetable consumption, in accordance with the recommended daily allowance, prevents the development of chronic diseases, and reduces the risk of mortality by 10-25%.
"There is now sufficient evidence of the beneficial effect of fruit and vegetable consumption in the prevention of cancer and other chronic diseases," Sánchez states, "for this reason, one of the most effective preventative measures is promoting their consumption in the population."
A diet rich in fruit and vegetables reduces the risk of cardiovascular disease mortality by 15%. Furthermore, more than 4% of deaths due to cardiovascular disease could be prevented by consuming more than 400 grams of fruit and vegetables a day.
The mortality risk reduction due to fruit and vegetable consumption was greater in those participants who consumed alcohol (around 30-40% risk reduction), who were obese (20%), and "possibly" also in those who smoked.
The authors add that this positive effect is probably due to their high antioxidant content, which mitigates the oxidative stress caused by alcohol, tobacco and obesity.
"As such, these population groups in particular could benefit from the positive effects of fruit and vegetables in preventing chronic diseases and their associated mortality risk," Sánchez concludes.
All these benefits just from increasing fruit and vegetable consumption! FoodFacts.com couldn't be more pleased! And with so many flavorful, colorful choices to pick from, we can keep our diets tasty, interesting and healthy and enjoy a longer, healthier life!


text:
Coming off their first loss of the season last week, the Brookfield Bulldogs went to the ground game and beat South Shelby 30-20.
The Bulldogs rushed for four touchdowns, three by Reed McBroom and one by JJ Abongo, allowing Brookfield to get back on the winning track. The Bulldogs led the whole way, never allowing South Shelby to pull even or take the lead.
The victory improved the Bulldogs to 5-1, while the Cardinals fell to 3-3.
Location, ST | website.com


text:
Thursday, September 29, 2011
Where I'm At
I'm in one of those phases in my life where I have so much going on that it is almost impossible for me to divide it into neat, beautiful blog posts. I really do not want this blog to turn into some angsty vent-fest, but...man. Things are sometimes overwhelming for me. It's not even the bad things that overwhelm me, even a lot of positive changes kinda make me freeze in my tracks and wanna hide under a rock.
So allow me to clear the air and tell you what's really going on. Otherwise, I'll just hide under a rock and not post for like two weeks. Which, I don't want...hopefully you wouldn't either.
We're moving soon. This is a 100% positive change which I have been so excited to share. We're moving to a house, with a yard and the freedom to paint and change things as we wish. I love the neighborhood and the fact that it's an old house with character. We'll be in the new place by December 1st. I am so excited about this. Like crazy-obsessed-excited. You can expect lots of home decor posts in the near future. Eeek!
The Mr. and I have been going through a hard time lately. I feel free to share this because overall, we are so strong. We have been together for eight years and I truly love him more everyday. But, as our lives grow and we become busier, there are more demands placed on both of us.We are so busy, and our dreams keep getting bigger and bigger. Marriage is an ebb and flow. Times have been hard, but we have had to get real and lay it all out. It has been painful at times, but I am honestly so grateful for the hard-earned growth that is taking place. And honestly, I look at my husband and I have never appreciated him more. It is such a gift to share a life with another human being. There is no way I would be the woman I am without him by my side.
I'm not loving school right now. I'm just not. Every class and assignment seems like so much work. I have been doing really, really well in all of my classes except Biology. Mark is like the star student out of 90 people...I'm somewhere in the middle. I feel like such a doof next to him.
I am so intimidated by the art world and even the other artists in my classes. I am growing as an artist and sometimes I can't believe that I produced something that I did, but usually, I just feel like an imposter. Sigh.
I went to Target today and almost lost my shiz because they had tons of Missoni stuff that would have fit Maggie. And then I almost really lost it when I spied a pair of size 9 rain boots that would have perfect for me. And then I realized the nine was a six upside down. *Insert expletive here*
There's more to talk about but I'm tired and have to get up for school in about six hours. I'll share more soon.
6 comments:
How exciting about the move! I can't wait to see pictures of the new place & see what colors you're picking out.ReplyDelete
I can totally relate to the school & marriage thing, too. It's been tough in my marriage recently, too. But, we're working on things. Life has a way of disconnecting you from people you really SHOULD be connected to and that seems to be the issue we're currently dealing with.
Soooo excited about the move!! Can't wait to see pics! We can compare and share tips!ReplyDelete
Let's talk soon, it always refreshes me when we chat and hopefully does the same for you : ) I miss you!!
Just wanted to send you some hugs, It's hard juggling so much on your plate and then add relationship issues. But like you said it 's an ebb and flow. Good one day difficult the next, it's how you handle those times that strengthens the relationship.ReplyDelete
I also understand the imposter comment. I keep saying fake it till you make it, but I've been faking it for years. I create because I enjoy it but I want to do more with it but I don't feel like my work is good enough. When people comment on it I think they are just being nice. I had an art date with my friend who is an artist (and has taken art classes) and I am in awe of her work and she told me that we may have different styles but she is in awe of my mixed media work. She said that she couldn't do that, she doesn't know how to layer and get texture like I do when she tries she thinks it look ridiculous. Sometimes we are our own worst critics. I love the work you do and am in awe of it when you post. Keep it up you do a great job.
I love this post. I seriously enjoy reading that I'm not the only one out there who doesn't have it all together all the time (not that I like reading others having troubles, but it's nice to not be alone, ya know?). Congrats on the house! I can relate to your desires for your home (to have a yard and have it be your own). That's not in my cards just yet, but I can relate to what you're excited for! :DReplyDelete


text:
Great first set playing Fish is introduced as the Yo-Yo Ma of vaccuum cleaner playing in IDK. Page finally stretches out his solo in Maze! If there is a weak spot here it's the Bouncing. Very cool Catapult in Bowie.
Great second set. Lots of big songs YEM through Tweezer. Solid!
And we only have 2 minutes left! Says Fish for the encore.
Great show.


text:
Naples Road reopens after wreck
Published: Wednesday, February 27, 2013 at 11:20 a.m.
Last Modified: Wednesday, February 27, 2013 at 11:20 a.m.
Naples Road near Park Ridge Health is now open to traffic after a dump truck flipped onto its side around 10:45 a.m. Police reopened the road at 12:15 p.m.
The N.C Highway Patrol is investigating the single-vehicle crash.
Please visit BlueRidgeNow.com for updates to this developing story.
Reader comments posted to this article may be published in our print edition. All rights reserved. This copyrighted material may not be re-published without permission. Links are encouraged.


text:
Hottest ticket: Mill Billy Blues
Published: Thursday, February 21, 2013 at 4:46 p.m.
Last Modified: Thursday, February 21, 2013 at 4:46 p.m.
David Reid Theatre, Chapman Cultural Center, 200 E. St John St., Spartanburg
864-542-2787 or www.chapmanculturalcenter.org
On sale: Now
Tickets: adults $11; students $6; group rates available
Show date: 8 p.m. April 6
Reader comments posted to this article may be published in our print edition. All rights reserved. This copyrighted material may not be re-published without permission. Links are encouraged.


text:
5 Ways to Get the Baby Weight to Melt Off
Eager to lose those extra pounds that haven't budged since your little bundle arrived? These tips will help
And it sucks.
So, we're not about to bully you into slimming down by your bambino's six-week checkup. But once the post-partum dust has settled and you're ready to start working out again, there are some relatively simple secrets to help pave the way.
Remember, your target doesn't have to be as punishing as "fit into my pre-pregnancy jeans." In fact, it can be as simple as "get moving three times a week for 30 minutes" or "eat less sugar." Let these mommy-tested tips help you.
SEE NEXT PAGE: Nurse your baby, not your beer
Older comments
Whenever I work out my little one jumps on me. lol
by Monique3 Wednesday, February 20, 2013 at 07:47AM Report as inappropriate
Will share this information with my friend who just had twins
by EricaF123 Sunday, January 6, 2013 at 07:05AM Report as inappropriate
can't imagine a smoothie with banana and spinach tastes good
by sportimonki13 Sunday, December 30, 2012 at 11:53PM Report as inappropriate
2 years later and I'm still waiting for that weight to come off!! haha, :(
by morgan_ledford Wednesday, December 26, 2012 at 02:13PM Report as inappropriate
I need to be drinking more water and making time to work out. Thanks for the tips!
by kimihavens Wednesday, December 26, 2012 at 09:39AM Report as inappropriate
i will have to remember this down the road
by LittleBunny Friday, December 21, 2012 at 11:14AM Report as inappropriate
Good article just need to apply them so I can lose my extra 55 lbs I put on with my first pregnancy
by kfloyd01 Friday, November 23, 2012 at 10:24PM Report as inappropriate
Great story! Very helpful tips for post baby! Water is my best friend already so I think I have that part down pat.
by Lamexicana1 Thursday, November 8, 2012 at 04:22PM Report as inappropriate
to top


text:
Supported by
The King of the Universe takes on His greatest challenge: Broadway. In this new comedy, God takes the form of Emmy winner and Tony nominee Sean Hayes as the Almighty and His devoted angels answer some of the deepest questions that have plagued mankind since Creation. He's finally arrived to set the record straight...and He's not holding back.
By Charles Isherwood


text:
The Manhattan-based Harry Walker Agency says on its website that Clinton has joined it exclusively for her future speaking engagements.
The agency represents high-profile figures who give paid speeches to organizations, conferences and companies. Its roster includes Clinton's husband and the former president, Bill Clinton; former Secretary-General of the United Nations Kofi Annan; and Bono of the band U2.
It is not uncommon for prominent former public figures to join the lucrative speech circuit after leaving office. According to Senate disclosure forms Hillary Clinton filed in 2008, Bill Clinton has been paid as much as $290,000 per speech.
Representatives for the Harry Walker Agency and Clinton did not immediately return messages seeking comment.


text:
Kids' adidas ClimaCool X 2-Pack No Show Socks Size Medium
The adidas ClimaCool X 2 Pack No Show Socks can help kids to power through any workout with superior cushioning and advanced cooling to ensure feet stay comfortable. Made with advanced ClimaCool technology, these socks offer 360-degree cooling, as well as lightweight moisture control. Heat and sweat are a thing of the past in these no-show performance socks.
We recommend wearing these adidas socks with a shoe that has ventilated construction.
- FABRIC: Polyester/cotton/spandex/nylon/natural latex ClimaCool
- QUANTITY: 2 Pairs
- CARE: Machine Wash


text:
Top 10 travel spots for New Englanders
Watch a slideshow
For the third year in a row, Florida comes in at the top of AAA Southern New England Travel's top 10 travel destinations for New Englanders.
Many families will soon swap the cold for warm-weather vacations and AAA Travel has helped thousands of people book travel to their dream destinations. More than 100 of the top AAA agents across Southern New England gathered for the official travel summit to develop their expert tips for the top vacation spots — facts you won't get from the guidebook.
These 10 sites represent the most popular vacation destination for AAA Southern New England Travel vacation bookings.
It may not be the first thing to come to mind when you think west coast, but make plans to eat Chinese - many say it rivals New York's.
Take a trip on the Denali Tundra Wilderness Tour. You'll go up to 60 miles deep into the heart of Denali National Park and see the Great One - Mt. McKinley - up close.
Golfers, pre-book your tee times! The best dates to visit are March-April or September-October, and sun lovers, don't worry - all Hawaiian beaches are public, year-round.
Want to do as the locals do? Negotiate cab fees prior to getting in and avoid standing out by wearing dark clothes and avoiding American styling.
Las Vegas
If you want to ring in the evening in style, the best sunset in all of Vegas can be seen atop the Rio or Stratosphere hotels.
Cancun/Rivera Maya, Mexico
Safety alert! Avoid drinking tap water, stay on-site for dinner and book land excursions through a travel agent or concierge.
Dine at excellent restaurants, work it off with a day of snorkeling at a local shipwreck and travel smoothly to and from with JetBlue's direct flights.
Punta Cana, Dominican Republic
You'll stay busy with the high-end resorts' offerings, including family-focused, adult-only and all-inclusive experiences, but be sure to bring dollar bills for tipping!
Forget about renting a car - Bermuda is all about mopeds, busses and ferries.
Easily AAA Southern New England's #1 travel destination, representing 44 percent of bookings. That's a lot of trips to Disney WorldR and The Wizarding World of Harry PotterTM, so take advantage of AAA's Disney exclusive offerings and expert certifications.
For more information, visit AAA Southern New England's travel portal at www.southernnewengland.aaa.com/sne/travel.
Follow Us
Post a reader commentWe encourage your feedback and dialog.
Please be civil and respectful.
If you're witty, to the point and quotable, your reader comments may also be included on the Around the Towns page of The Sunday Republican.
Readers must be registered and logged in to post comments on the site. Registration is free. Click Here to register.
A Subscription is not required to post comments only a Registration.
Log In
|Register / Forgotten Password?
- Doc and company go 'resto' on Harley project
- The making of a president
- Holiday travel with pets is worth hassle
- Top 10 travel spots for New Englanders
- 5 free things: Hanoi is full of life and charm
- Of rocks and rappelling
- Beware: Columnist has gift ideas
- Plan yourself a merry little summer vacation
- Miami exhibit tells story of guayabera shirt


text:
Women's Nike Air Max 1 Hyperfuse Premium Shoes
Buy Online & Pick Up In-Store
The Nike Air Max 1 Hyperfuse Premium Shoes have the same great retro look, including the thicker heel, visible Air Max unit hole, and Nike branding. These loved characteristics still remain as popular today since they first came out in the late 1980s, but this time they have all the updated technology and features needed to keep you comfortable, which has changed in the last 30 years.
The latest has a breathable, composite seamless upper, which is known as the Hyperfuse upper, and this technology results in a smoother feel and a stride that is less stuffy. However, the soft-framed cushioning is stall intact and just dependable today for superior comfort in today's age as it was back then. Look great and feel great, while celebrating the shoe that started the Air Max revolution.
- UPPER: Hyperfuse
- MIDSOLE: Phylon with Air Max unit
- OUTSOLE: Rubber


text:
How to rescue a baby elephant? Rope, Land Rover
Published: Friday, October 19, 2012 at 8:42 a.m.
Last Modified: Friday, October 19, 2012 at 8:42 a.m.
NAIROBI, Kenya (AP) — How do you pull a baby elephant out of a deep, muddy hole? A rope and a Land Rover. Then the payoff: A frantic baby elephant sprint to mom.
A heartwarming video of the rescue of a baby elephant in a Kenyan national park that lies in the shadow of Mount Kilimanjaro gained a mass of viewers on Thursday. The video shows the rescuers' potentially dangerous faceoff with the mother elephant and their struggle to get her calf out of a 5-foot (1.5-meter) hole.
Vicki Fishlock of the Amboseli Trust for Elephants faced down the mother with her Land Rover, and made a high-pitched aye-aye-aye call to help drive the mother off. Thirty muddy minutes later, after two men struggle to get a rope around the 8-month-old calf, Fishlock put her SUV in reverse and pulled the animal out.
"Relief! Rescues where family members are around are stressful, and I'm always happy when everyone is safely back in the cars. And I have to admit that the reunions always bring a tear to my eye. The intensity of their affection for each other is one of the things that makes elephants so special," Fishlock said.
The hole was a man-made well with a foot (.3 meter) of water in it was dug by the Masai tribesmen who live around Amboseli National Park, and the trapped elephant underscores the increasing problem of human-animal conflict. The baby elephant was too small to crawl out on its own and would have died without the help of rescuers. If the elephant dies, it ruins the well, angering the Masai who live nearby.
The rescue took place on Oct. 8. The very next day, another elephant calf fell in the same well. That baby's family was driven off by the Masai, so when the Amboseli Trust for Elephants rescued the second calf, it sent the baby to an elephant orphanage in Nairobi, The David Sheldrick Wildlife Trust. The video of the rescue was posted on YouTube last week but on the website LiveLeak on Thursday.
Elephants across Africa are fighting for survival as expanding human settlements increase the number of human-animal conflicts. Worse, elephants are being slaughtered by the thousands for their ivory tusks, which are shipped to Asia, particularly China, to satisfy a demand for ivory trinkets.
The Amboseli Trust for Elephants has been studying elephant families since 1972, and Fishlock immediately recognized the mother in the Oct. 8 well incident — Zombe — from a mark near her ear. Zombe appeared to almost sit on Fishlock's Land Rover as the vehicles tried to push the mother away from her trapped baby.
The uplifting conclusion to the rescue video shows the baby sprinting to the tune of Coldplay's Paradise, a song whose video opens with scenes of the African savannah, and then tells a story of a human dressed as an elephant fleeing a zoo to reunite with its family.
Despite the confrontation at the beginning, Fishlock thinks Zombe understood in the end that humans were only trying to help.
"After the video we cut the engines. She didn't charge us, she didn't run away. Eventually after five minutes they just walked out. I think she did understand," Fishlock said. "I certainly felt like she had forgiven us for our very impolite behavior."
Reader comments posted to this article may be published in our print edition. All rights reserved. This copyrighted material may not be re-published without permission. Links are encouraged.


text:
Did you know?
The word's smallest tortoise, the speckled padloper (padloper means 'path walker'), is found in Namaqualand.
When you go to the Namaqua National Park in spring, you may feel as if you've tumbled into a child's dream.
In the Skilpad Wildflower Reserve section, it's a world full of orange daisies – great drifts of them. From horizon to horizon, you'll see nothing but spring flowers nodding at you and the sun.
Your ears will be filled with people's laughter and the buzzing of eager pollinators. If you're new to the spring flowers of the succulent Karoo, you could ask for no better place to experience their magic.
Some people try to capture it all with cameras. Some sit in the shade and just stare. A few lie full length, making daisy angels.
Namaqualand, also called the succulent Karoo, is a low-rainfall desert.
Every year the timing of the flowers and their quantities vary somewhat. But somewhere between August and the beginning of October, this dusty stretch of land springs to flowering life for a few intense weeks.
Photographer Freeman Patterson describes this upwelling of colour perfectly: 'A sense of luxuriant abandon emanates from the land and fills the human spirit with delight.'
And it's not only the daisies that flower. Namaqualand is rich in bulb flora, and over 1 000 of the estimated 3 500 plant species that occur here are found nowhere else in the world.
To experience the heart of the succulent Karoo, there is the Caracal 4x4 Eco-route, over 180km long, that will take you deep into the park's newest lands.
It ends right at the coast, in secret coves between the Groen and Spoeg rivers, where the estuaries are rich with birds, and where you may see the rare Heaviside's dolphin. Here you'll find that in spring even the beaches are edged with flowers.
Travel tips & Planning info
Who to contact
South African National Parks reservations
Tel: +27 (0)12 428 9111
Email: firstname.lastname@example.com
Namaqua National Park
Tel: +27 (0)27 672 1948
Kamieskroon Hotel photographic workshops or tours
Tel: +27 (0)27 672 1614
Email: email@example.com
How to get here
From Cape Town, drive north on the N7 towards the Namibian border. You'll find Kamieskroon along this road, about 500km (six hours' drive) from Cape Town, and 67km south of the larger Namaqualand town of Springbok. The park is close by, and well signposted from Kamieskroon.
Best time to visit
Undoubtedly spring. Depending on the timing and duration of winter rainfalls, the flowering usually happens between the beginning of August and the end of September.
Tours to do
The Kamieskroon Hotel runs excellent photographic tours and workshops. Book well in advance.
What will it cost
A day visit to the park costs about R50 per person.
Length of stay
A morning or a full day, unless you're planning to take the Caracal Eco-route or stay overnight.
Where to stay
There are a few easily accessible self-catering cottages in the park, as well as a guesthouse that can only be reached with 4x4 vehicles. There are also several spectacular but rustic campsites on the coast equipped only with eco loos. Most of these are only accessible by 4x4 and you have to bring your own water. In spring, you can also check into the Flowers Beach mobile safari camp at Koringkorrelbaai on the coast.


text:
Your browser does not seem to support CSS. If images appear below, please disregard them.
Site Search
Information Listing
Information Index
Knowledge Base
Ask Us
Page Listing
Page Index
Your Account
You are not logged in. [
Log In
UGN Security
UGN Security: Knowledge Base
Operating Systems
Windows & Windows Security
» shatter attacks - how to break windows
User List
Active Topics
Forum Help
Topic Options
Rate This Topic
shatter attacks - how to break windows
Mar 2002
Posts: 815
Mar 2002
Posts: 815
Ann Arbor
Thought this was an interesting article that UGN would enjoy. Tell me what you think. (original can be found at
Exploiting design flaws in the Win32 API for privilege escalation.
Shatter Attacks - How to break Windows.
By Foon -
[email protected]
Now available - translation into Russian, with thanks to Rivenoak
Also available as an Acrobat document with thanks to Doug Johnson
This paper presents a new generation of attacks against Microsoft Windows, and possibly other message-based windowing systems. The flaws presented in this paper are, at the time of writing, unfixable. The only reliable solution to these attacks requires functionality that is not present in Windows, as well as efforts on the part of every single Windows software vendor. Microsoft has known about these flaws for some time; when I alerted them to this attack, their response was that they do not class it as a flaw - the email can be found here. This research was sparked by comments made by Microsoft VP Jim Allchin who stated, under oath, that there were flaws in Windows so great that they would threaten national security if the Windows source code were to be disclosed. He mentioned Message Queueing, and immediately regretted it. However, given the quantity of research currently taking place around the world after Mr Allchin's comments, it is about time the white hat community saw what is actually possible.
This paper is a step-by-step walkthrough of how to exploit one example of this class of flaw. Several other attack methods are discussed, although examples are not given. There are many ways to exploit these flaws, and many variations on each of the stages presented. This is just one example.
Background - the Win32 messaging system
Applications within Windows are entirely controlled through the use of messages. When a key is pressed, a message is sent to the current active window which states that a key was pressed. When Windows decides that an application needs to redraw its client area, it send a message to the application. In fact, when any event takes place that an application needs to know about, it is sent a message. These messages are placed into a queue, and are processed in order by the application.
This is a very reliable mechanism for controlling applications. However, on Win32 the mechanism for controlling these messages is flawed. Any application on a given desktop can send a message to any window on the same desktop, regardless of whether or not that window is owned by the sending application, and regardless of whether the target application wants to receive those messages. There is no mechanism for authenticating the source of a message; a message sent from a malicious application is indistinguishable from a message sent by the Windows kernel. It is this lack of authentication that we will be exploiting, taking into consideration that these messages can be used to manipulate windows and the processes that own them.
In this example, I will be exploiting Network Associates VirusScan v4.5.1, running on Windows 2000 Professional. Since the VirusScan Console runs on my desktop as LocalSystem and I am logged on as a guest user, the objective is to trick VirusScan into running my code to elevate my privileges. This is accomplished in several easy stages.
1. Locate a suitable window within VirusScan (an edit box is perfect), and obtain a window handle to it.
2. Remove any length restrictions that may be present on that edit box, so that I can type in an arbitrary quantity of data.
3. Paste in some binary executable code.
4. Force VirusScan to execute my code (as LocalSystem)
This is actually very easy to do. Windows conveniently provides all of the functionality that we will be needing. I have written a small application called Shatter which implements this functionality. You'll also need a hex editor that is capable of copying binary data to the clipboard (I use UltraEdit), and a debugger (I use WinDbg).
PLEASE NOTE: Some virus scanners are alerting people to the presence of a "Win32/Beavuh" virus within the sploit.bin file in the Shatter zipfile. This is not a virus. The scanner is correct in flagging it - the code in this file is designed to open a command shell and bind it to a network socket. This is a bad thing to do in general, so the scanner is correct in generating an alert. This code is designed to be malicious in terms of its functionality, but the scanner is incorrect when labelling it as a virus.
Windows messages consist of three parts, a message identifier and two parameters. The parameters are used differently depending on what message is sent. This makes our life simpler, since we only have to worry about four things; a window handle to receive the message, the message, and two parameters. Let's find out how easy this is...
Stage 1: Locating a window
We need to locate an edit control of some kind - something that we can type stuff into. Don't worry if it's restricted, we can cure that. Fire up the VirusScan console, and hit the first button - "New Task". Conveniently, at the top of the dialog, there's an edit box. That will do perfectly. Now, we need a handle to that control so that we can interact with it. Windows is more than happy to give us a handle to any window we like - we just have to ask it. Fire up Shatter, and position it so that you can still see the VirusScan edit control underneath it. Click on "Get cursor window" - Shatter should add an item in the list box beneath like "102f2 - Get cursor window". This is because we've asked Windows to give us a handle to the window directly underneath the cursor. Move the cursor over the VirusScan edit control and hit Space to trigger Shatter again. Shatter should clear the list box, and tell you the handle for the target window - in my case it's 30270. So, we can now interact programmatically with a window that is running with higher privileges than we are. Let's paste in some shellcode.
Stage 2: Removing Restrictions
Now that we have a window handle, we can send any messages we like to that control and it will blindly execute them. First things first - let's make sure we have enough space for our shellcode.
Within Shatter, type your window handle into the "Handle" box. The message to set the maximum text length of an edit box is EM_SETLIMITTEXT. The first parameter is the new maximum text length, and the second parameter is ignored. Type 4 into the WPARAM box, and 0 into the third. Click on EM_SETLIMITTEXT to send the message, and try to type something into the VirusScan edit box. You shouldn't be able to type more than 4 characters. Change the 4 to FFFFFFFF and send the message again. Now try typing into the VirusScan edit box; you now have over 4Gb (theoretically) of space within that edit control. Should be enough for even the most wasteful shellcode.
Stage 3: Injecting Shellcode
Next up, let's try pasting something into the box. Yes, OK, you could just right-click and choose Paste, but for the sake of argument let's work as if we couldn't do that. Clear the VirusScan edit box, and fire up Notepad. Type some text into Notepad, and copy it. Back in Shatter, we want to send VirusScan a "Paste clipboard contents" message, which is WM_PASTE. Both parameters for this message should be zero, so set the WPARAM and LPARAM to zero, leaving the handle the same. Click WM_PASTE, and watch your text appear in the VirusScan edit box. Click it again, and it should now be there twice. Fun, huh?
OK, that's enough playing. Clear the VirusScan edit box again, and fire up your hex editor. Load up sploit.bin, included in the Shatter zipfile. This is the shellcode taken from Jill (Hey, Dark Spyrit!) which fires a remote command shell back to you. It's hard-coded to send a command shell to the loopback adress on port 123, so now's probably a good time to fire up a Netcat listener before you forget. Fire up a cmd, hit "nc -lp 123" and forget it. Back to our hex edit. Copy the shellcode to the clipboard, making sure you get all of it (including the FOON at the beginning - we'll need that in a sec). Back to Shatter, and hit the WM_PASTE button again. You should now see a whole load of nasty-looking characters in the VirusScan edit box; that's our shellcode, nicely pasted in.
Stage 4: Executing the code
This is the only part of the process that requires any skill. Fire up your debugger, and attach it to the avconsol.exe process (Using WinDbg, that's F6 to attach, and just choose the process). Next, do a search through memory for the FOON string. The WinDbg command is s -a 00000001 10000000 "FOON" but you might use a different debugger. Note down the memory location that the string appears at; it'll probably appear a couple of times, don't ask me why. Any of them will do. On my system, the shellcode appears at 0x00148c28, it shouldn't be far off if you're using the same version. Now, kill the debugger, log on as a guest user, and prepare to receive localsystem privs. Follow stages 1 through 3 again, noting that everything still works as a guest user. Don't forget the Netcat listener to receive the shell.
At this point, you might be thinking that attaching a debugger is a privileged operation. It is. However, much the same as when writing a buffer overflow exploit, you can do that part on any system; all you need is the load address which should then work on any system running the same version of the software. In actual fact, you needn't actually do this at all. Most applications have their own exception handlers (VirusScan certainly does), so if they generate an access violation, they just deal with it and move on rather than crashing. So, there's nothing to stop you pasting in a few hundred kilobytes of NOPs and then just iterating through memory until you finally hit the right address and your shellode executes. Not particularly elegant, but it'll work.
The final message that we're going to make use of is WM_TIMER. This is a slightly odd and very dangerous message, since it can contain (as the second parameter) the address of a timer callback function. If this second parameter is non-zero, execution will jump to the location it specifies. Yes, you read that right; you can send any window a WM_TIMER message with a non-zero second parameter (the first is a timer ID) and execution jumps to that address. As far as I know, the message doesn't even go into the message queue, so the application doesn't even have the chance to ignore it. Silly, silly, silly...
So, within Shatter, the handle should be set to the VirusScan edit control containing our shellcode. The first parameter can be anything you like, and the second parameter should be 512 bytes or so above the address we picked out of the debugger earlier (we have 1K of NOP's in front of the shellcode, so we should land slap bang in the middle of them); on my system that's 0x148c28 + 0x200 = 0x148e28. Hit WM_TIMER, and your netcat listener should come alive with a command prompt. A quick WHOAMI will reveal that you have indeed gone from guest to local system. Enjoy.
Alternative techniques
There's a few other ways of doing what we just managed, utilising the same basic mechanisms but maybe adding a bit more complexity. The EM_GETLINE message tells an edit control to copy its contents to a location specified within the message. How would you like to write arbitrary quantities of data to arbitrary locations in memory? How easy a sploit do you want? We've seen how the restrictions can be removed from the length of an edit control; what happens when an application depends on these restrictions? When an application expects 16 bytes of data from a limited-to-16-byte edit box, we can type in a few gigs. Everyone, on three; 1....2....3....Buffer Overflow! Probably stack-based too, since 16 bytes of data is unlikely to come from the heap. Also, when we send WM_TIMER, the parameter we specify as a timer ID gets pushed onto the stack along with a whole load of other crap. It's not inconceivable that we could find a function which makes use of the 3rd function parameter and none of the others, allowing us to jump directly to a sploit with a single message.
Talking of the heap, that's another great thing about these exploits. Generally, applications will create dialog boxes on the heap well in advance of any major memory operations taking place; our shellcode address is going to remain pretty static. In my experience it rarely moves more than 20 bytes between instances. Static jump addresses shouldn't be a problem, but who cares? Send the app an EM_GETLINE message so it writes your shellcode to a location you specify (Hell, overwrite the heap. Who's gonna care?) and then specify the same address in your WM_TIMER message. A completely NOP-free sploit! What fun!
Fixing the problem
Okay, so this is pretty easy to exploit. How is everyone gonna fix this? I can see two quick and dirty methods which will break a whole lotta functionality, and one very long-winded solution which is never going to be a total solution. Let me explain.
1. Don't allow people to enumerate windows Nasty. Multiple breakages. Theoretically possible, but I'd hate to see people trying to work around not knowing what windows are on the desktop when they need to.
2. Don't allow messages to pass between applications with different privileges Means that you couldn't interact with any window on your desktop that's not running as you; means that VirusScan at the very least (probably most personal firewalls, too) would need a whole lotta redesigning.
3. Add source info to messages, and depend on applications to decide whether or not to process the messages Would need an extension to the Win32 API, and a whole lotta work for people to use it. Big job, and people would still get it wrong. Look at buffer overflows - they've been around for years, and they're still fairly common.
Basically, there is no simple solution, which is why Microsoft have been keeping this under their hat. Problem is, if I can find this, I can guarantee that other people have as well. They might not tell anyone about it, and the next time they get into your system as a low-priv user, you wouldn't have a clue how they got LocalSystem out of it. After all, you're all up to date on patches, aren't you?
Addendum: Why is this a problem?
When Microsoft saw a copy of this paper, they sent me a response stating clearly that they are aware of these attacks, and they do not class them as vulnerabilities. I believe that this point of view is incorrect. The two reasons that Microsoft stated are that a) They require unrestricted physical access to your computer, or b) they require you to run some kind of malicious code on your machine. I agree completely that in both of these scenarios, 0wning the machine is pretty easy. However, they've missed the point. These are techniques that an attacker can use to escalate their privileges. If they can get guest-level access to a machine, these attacks allow you to get localsystem privileges from any user account. Anyone ever heard of a little tool called hk.exe? How about ERunAsX (AKA DebPloit)? How about iishack.dll? All of these tools exploit some flaw that allows you to escalate your privileges AFTER you've gained access to the machine. All of these have been recognised as security holes by Microsoft, and patched.
If you have a corporate desktop machine, most commonly those machines will be quite tightly locked down. The user on that machine cannot do very much that they have not been explicitly granted permission to do. If that machine is vulnerable to a shatter attack, that user can gain localsystem privileges and do what they like. Even worse is the case of Terminal Services (or Citrix). Imagine a company providing terminal service functionality to their clients, for whatever purpose. That company is NOT going to give their users any real privileges. Shatter attacks will allow those users to completely take over that server; localsystem privileges are higher than the Administrator, and on a shared server that's a problem. Oh, and it doesn't require console access either - I've successfully executed these attacks against a Terminal Server a hundred miles away.
The simple fact is that Microsoft KNOWS that they cannot fix these flaws. The mechanism used is the Win32 API, which has been fairly static since Windows NT 3.5 was released in July 1993. Microsoft cannot change it. The only way they could stop these attacks is to prevent applications from running on the desktop with privileges higher than those of the user logged on. Microsoft believe that the desktop is a security boundary, and that any window on it should be classed as untrusted. This is true, but only for Windows, and because of these flaws. Either way, Microsoft break their own rules; there's numerous windows on a standard desktop that run as localsystem. Use my shatter tool to verify this - there's a whole load of unnamed windows which might be running as Localsystem, and a few invisible windows (like the DDE server) that definitely are. Security boundary my arse.
Is this just a Win32 problem?
Probably, yes. The biggest mainstream competitor to Windows in terms of windowing systems is X windows. X is based on a similar underlying technique, that of queueing messages that are passed between windows. X, however, has two major differences. Firstly, a window in X is just a window - it's a blank page on which the application can do what it likes. Unlike Win32 where each control is a window in its own right, a control in X is just a picture. When you click that control, you're actually clicking the window surrounding it, and the application is responsible for figuring out whether or not there's actually a control underneath your mouse and responding accordingly. Secondly, and more importantly, X messages are just notifications, not control messages. You can't tell an X window to do something just by sending it a message. You can't tell it to paste text. You can't tell it to change the input limits on a control. You certainly can't tell it to jump to a location in memory and start executing it. The best you can do is send it the mouse clicks or keyboard strokes that correspond to a paste command - you certainly can't tell a control to paste in the contents of the clipboard. As such, it's still theoretically possible for some of these attacks to work against X but in practice it's highly unlikely. You could flood an application with fake messages and see how it responds; you could send it corrupt messages and see how it responds. Chances are, it would cope just fine, since it'll choose what to do with the messages and process the flood one at a time.
Anyway kids, have fun, play nicely, be good. And remember - if it ain't broke, hit it again.
Sponsored Links
Re: shatter attacks - how to break windows
Jul 2002
Posts: 9
Junior Member
Junior Member
Jul 2002
Posts: 9
I saw a post by SilentRage about this on the other thread we were talking about ways to exploit Win2k.
I hope to god people don't start calling this way of exploiting Windows "shatter attacks"
This is not "new" as Chris states in his paper.
I'm not being critical of the paper,it was interesting to read.
But Chris makes out that he has discovered this,and that no one else knows about it,or they do and haven't mentioned it or discussed it yet.
Its like he is now claiming credit to the design flaw..and remember folks,thats what it is essentially,a design falw,by Microsoft.
You only have to look at old bugtraq posts to know that people have been aware of this problem for a long time.
Back in March/April this year,I was myself playing with Window messaging API's.
Manipulating window procedures,how they looked,enabling disabled parts of the window for more functionality..etc
I admit I didn't think at the time of using an EDIT control box to store shell code,and then execute it using the WM_TIMER message.
But I did use the WM_TIMER message to execute procedures already inside the program i didn't have access to from normal control.
The main reason no one has mentioned these little things in such a long time,is because its not "new"
Papers described exploiting Windows in this way as far back as 1996.
I read a paper on Razzia's site.
Benny/29a also talked about how you could terminate applications easily in relation to virus scanners.
I think the title and comments in Chris's paper are conceited.
You could exploit many service applications out there for NT using Window API's..just about every single one of them.
But why report about somthing like that?
If his paper had have discussed exploiting registered windows in ALL Win2k operating systems,and not just application specific.
Then it would be critical,indeed,and somthing would surely have to be done.
This is not the case.
So,I'm just saying that although it is interesting,its not "new", its a little misleading,but no doubt,we'll see an upsurge in exploits for NT now that peoples minds have been refreshed on the issue.
I just hope they aren't called "shatter attacks"
It is a good article,just don't think these type of attacks should be labeled "shatter" or be considered "new"
Re: shatter attacks - how to break windows
Mar 2002
Posts: 1,273
DollarDNS Owner
DollarDNS Owner
Mar 2002
Posts: 1,273
yeah, I agree with James whole heartedly. I have not done as much as he concerning windows messaging other programs, but I have at least enabled disabled buttons for various purposes.
I've also conceived of a program which will make it easy to send any kind of message to any window. Just one of the many ideas that I haven't yet (or ever?) put into the works. The only thing new - as James said - is that they came up with the innovative idea to store shell code in a edit box for execution. Pretty damn smart.
Now for some new stuff. James, you said this was an application specific exploit. Well, I want to explore that little theory with ya. I was thinking to myself that it is NOT application specific. You don't need an edit control, or to even store the data in the window at all. All you have to do is execute the shellcode stored anywhere in memory from a window with system permissions.
Now, there are many system services running with the default install of Win2k. Sureldly at least one of them has a window - any kind of window that would handle a WM_TIMER message. With this knowledge, you can incorporate this technique into a program to gain system privilages on ANY Win2k system.
Domain Registration, Hosting, Management
Re: shatter attacks - how to break windows
Jul 2002
Posts: 9
Junior Member
Junior Member
Jul 2002
Posts: 9
Yeah SR, good idea.
It would take a little research first I suppose.
I'm not sure if you can specify an address outside of the process that recieves the WM_TIMER message.
I haven't tried it yet so I don't know for sure if it would work or not.
Worth a try,i'll be trying myself later.
Most of the memory within a Win2k default SYSTEM process seems to be READONLY,which would be a problem using EM_GETLINE.
I think that EM_GETLINE is interesting,writing to the heap,then executing it as Chris mentioned.
He also said an arbitrary address..dunno if this is possible,again,worth a look.
I don't know if the heap allocated for the EDIT control boxes would be executable or not,if not,it could be modified I guess.
I think you could probably modify the attributes of the EDIT box just in the same way you can using EM_SETLIMITTEXT.
So who knows?
On Win2k,as a GUEST group user,accessing Users and Passwords in the control panel throws up a box prompting for ADMINISTRATOR password.
I don't know if this runs as SYSTEM yet though.
If it does,it could be possible to do somthing with it to get SYSTEM privileges.
Another thing to look into might be the Management Console,it seems to communicate with a window when running,and I think it runs with SYSTEM privilege.
I started reading about making shellcode lastnight for Win32 systems,as i know very little about it,and couldn't understand the binary file that came with shatter,it was encrypted using a simple xor,but i couldn't be bothered deciphering it
I did,but I still couldn't understand it.
It was xor'd because of null bytes..somthing like that anyway.
I think this weekend,I'll make some code to do various things.
simple things like starting CMD.EXE,adding user to system with ADMINISTRATOR privilege using NET.EXE..etc
Nothing like spawning remote shells,I plan on getting around to this though eventually.
The addresses are hardcoded for now,because I think if the code has to find the base address of the kernel,then the GetProcAddress API aswell as the other API's needed,it would be too big in the end.
that means it'l be system specific,but if could be easily modified to work on others i suppose.
You could write a program that assumed a starting address of 00400000h but when it ran inside a process which had an address different to the original,it probably wouldn't work.
If you look at some virus source code,you can see how they first find the address they are at in memory,and then use it throughout the program to work without crashing.
I'm still learning about all this stuff,but its interesting.
Re: shatter attacks - how to break windows
Mar 2002
Posts: 1,273
DollarDNS Owner
DollarDNS Owner
Mar 2002
Posts: 1,273
absolutely. Concerning ShellCode... I have absolutely no previous knowledge of what it is, but this is what I've GUESSED from reading the article. And why executing shellcode works.
All binary code begins with the "MAIN function", which is really the pointer to the beginning of the code. That's the function that needs to be executed from WM_TIMER. The MAIN function begins where the executable header ends. In the case of .COM files - the entire binary is shellcode. So if you wanna learn how to write shellcode - learn how to write .COM files.
The reason I made that guess is cause the article said to copy the contents of a executeable and paste it into the control. Then to put an address with an offset of 54 into the WM_TIMER. I think this is so that you skip past the 54 byte header and go straight to the MAIN function pointer.
Think I'm right in my assumptions?
Concerning having a workable address to your shellcode... The program that automates this technique knows where it inserts the shellcode into memory (the article does suggest after all that it can be placed anywhere), so you have your address. Otherwise, if you use some sort of dynamic method of inserting the shellcode into memory (like placing the shellcode in the extra memory area that all windows have) - you can scan the memory to find the location of your shellcode and use that address. Remember, if you overwrite something with your shellcode - too bad, so sad. As long as it doesn't crash the system, you are in business.
lol, doing all this stuff is waaaaaaaaaay outside of my coding capabilities. I hope they're within yours.
Domain Registration, Hosting, Management
Previous Topic
Next Topic
Hop To
UGN Security: Underground ------
Newbie Questions
Recommended Systems
Security Whitepapers
Open News
Site News
Review Requests
Hardware and Electronics
Movies and Music
Video Games
Off Topic
Debates & Rants
UGN Security: Knowledge Base ------
Graphics & Multimedia
The Studio
Online Swapmeet
Web Design, Protocols & Other Languages
Operating Systems
Windows & Windows Security
*nix & *nix Security
UGN Security: UGN ------
UGN Suggestions
UGN Store
UGN Bugs
Open News
Tech News
Print Topic
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
View homepage
Add to your Watched Users
View posts
View profile
Send a PM
Add to your Watched Users
View posts
View profile
Send a PM
View homepage
Add to your Watched Users
View posts
Member Spotlight
Portland, OR; USA
Joined: February 2002
Show All Member Profiles
Sponsored Links
Forum Statistics
Most Online
Apr 25th, 2010
Latest Postings
Top Posters
(All Time)
UGN Security
Privacy Policy
Board Rules
Mark All Topics Read
Contact Us
UGN Security
Unless otherwise noted,
VNC Web Services
Powered by UBB.threads™ PHP Forum Software 7.6.0


text:
Women's roundup: USC earns fifth straight victory
Published: Sunday, February 3, 2013 at 10:23 p.m.
Last Modified: Sunday, February 3, 2013 at 10:23 p.m.
COLUMBIA — Reserve Khadijah Sessions had a career-high 19 points and No. 15 South Carolina won its fifth straight game with a 59-51 victory over Auburn on Sunday.
Sessions was 5 of 9 from the field and 8 of 9 at the foul line for the Gamecocks (19-3, 7-2 Southeastern Conference). Tiffany Mitchell and Aleighsa Welch each added 10 points.
Reigning SEC Player of the Week Ieasia Walker pitched in eight points on just 2-of-7 shooting for South Carolina, though she did dish out five assists and record four steals.
Auburn's Hasina Muhammad entered having scored in double figures in 23 straight games, but managed just seven points for the Tigers (13-9, 2-7), who have lost six straight.
NO. 20 FLORIDA STATE 83, CLEMSON 61: In Tallahassee, Fla., Natasha Howard had 19 points and 11 rebounds, and every Florida State starter reached double figures in a win over Clemson.
The Seminoles (18-4, 8-3 Atlantic Coast Conference) have won six of seven, with the lone loss coming against No. 11 North Carolina on Jan. 31.
Howard became the 28th FSU player to surpass 1,000 points for her career. Chelsea Davis also had 19 points, Leonor Rodriguez and Alexa Deluzio added 16, and Morgan Toles 10 for the Seminoles.
Quinyotta Pettaway turned in 22 points and 10 rebounds for the Tigers (6-15, 2-8), who have lost three of their past four, with all the losses coming to ranked ACC opponents.
Reader comments posted to this article may be published in our print edition. All rights reserved. This copyrighted material may not be re-published without permission. Links are encouraged.


text:
Glass Beads Spacer 4mm Matsuno Red Trans 25g
Our Price: $1.99
Retail Price: $4.99
You save 60%
Item SKU: 1167k
Ask a question about this product
Why you'll LOVE this item:400+ glass spacer beads. 4mm each. Holes 1-1.5mm. 6/0 larger seed beads. (approx. 6 per inch). 25 grams. By request, the perfect glass spacer bead is here! Superb quality Japanese Matsuno glass beads. Very close in size to the popular 'E' bead, but with higher quality and accurate, consistent sizes and colors for your best jewelry work. Sold by weight, bead count is approximate. Combine with others, save BIG on shipping!


text:
Book your room at Fairmont Pacific Rim
Get an overview of this hotelLuxury hotel on Vancouver waterfront
Canada Place
Coal Harbour and the North Shore Mountains are among the waterfront views offered by the Fairmont Pacific Rim, which adjoins the convention center and Canada Place.
Spacious rooms
Guests will enjoy marble bathrooms and skyline, water and mountain views in these guestrooms and suites which feature a wealth of amenities.
Pool and spa
Relaxation comes in the form of a rooftop pool and hot tub in addition to the Willow Stream Spa.Would you like to give us feedback? Share it! Opens in a new window
Fairmont Pacific Rim1038 Canada Place Vancouver BC V6C0B9
Hotel Amenities
Hotel Amenities
Opened in January 2010, this luxury hotel offers a prime downtown Vancouver location at the edge of Coal Harbour in the business/port district. The Vancouver Convention and Exhibition Centre, part of the ship-shaped Canada Place complex, is adjacent.
Dining and refreshment options include giovane cafe + eatery, an Italian café and wine bar; the hotel's main dining room, Oru, a Pan-Asian bistro serving Pacific Northwest cuisine that features an open kitchen, wine-tasting area, and an expansive sake cellar; and The Lobby Lounge with a patio, fireplace, and Fazioli piano from Italy. In-room dining is available 24 hours a day.
Overlooking the city, the Fairmont Pacific Rim's Willow Stream Spa offers 9 treatment areas, including a couples' room with deep Japanese Zen tub, a nail spa, 3 lounges (2 with fireplaces), and a 24-hour fitness centre.
Wireless and wired Internet access are available throughout the hotel (surcharge), which also offers business center amenities through the concierge. The hotel also has an ATM/banking services.
- 24-hour business center
- 24-hour fitness facilities
- 24-hour front desk
- ATM/banking
- Bar/lounge
- Pool umbrellas
- Coffee shop or café
- Free newspapers in lobby
- Concierge services
- Conference space
- Conference space size (feet) - 15,000
- Conference space size (meters) - 1
- Dry cleaning/laundry service
- Elevator/lift
- Express check-in
- Express check-out
- Fireplace in lobby
- Full-service spa
- Gift shops or newsstand
- Limo or Town Car service available
- Luggage storage
- Multilingual staff
- Number of buildings/towers - 1
- Number of floors - 22
- Number of meeting rooms - 10
- Number of restaurants - 2
- One meeting room
- Outdoor pool
- Pool cabanas (surcharge)
- Pool sun loungers
- Porter/bellhop
- Rooftop terrace
- Safe-deposit box at front desk
- Sauna
- Self parking (surcharge)
- Smoke-free property
- Spa treatment room(s)
- Spa tub
- Steam room
- Total number of rooms - 367
- Tours/ticket assistance
- Valet parking (surcharge)
- Wedding services
- Wired (high-speed) Internet access - surcharge
- WiFi (surcharge)
- Year Built 2010
Family Friendly Amenities
- Cribs/infant beds (complimentary)
- Microwave (on request)
- Outdoor pool
- Refrigerator (on request)
Available in some public areas: Wireless internet access ( CAD 15.62 per night ), Wired high-speed internet ( CAD 15.62 per night )
Self parking (surcharge), Valet parking (surcharge)
Room Amenities
- Air conditioning
- Bathrobes
- Blackout drapes/curtains
- In-room climate control (air conditioning)
- Free newspaper
- Free toiletries
- Free cribs/infant beds
- Daily housekeeping
- Designer toiletries
- Desk
- Digital TV service
- Down comforter
- Espresso maker
- Hair dryer
- Hypo-allergenic bedding available
- In-room safe (laptop compatible)
- iPod docking station
- Iron/ironing board
- Microwave (on request)
- Minibar
- Pay movies
- Phone
- Pillowtop mattress
- Premium bedding
- Premium TV channels
- Private bathroom
- Rainfall showerhead
- Refrigerator (on request)
- Room service (24 hours)
- Separate bathtub and shower
Where to Eat
Oru - Cuisine from the Pacific Northwest and tastes of the Pacific Rim are on the menu in this restaurant, which can provide a dining experience for a group celebration or a dinner for 2. Open for breakfast, brunch, lunch, and dinner.
giovane café + eatery + market - Breakfast, sugar buns, cakes, fresh pastries, pizzas and specialty coffees are served in this café, which turns into a wine bar in the evening. More than 50 Italian wines are featured.
Lobby Lounge and Terrace - A cozy ambiance makes the Lobby Lounge a comfortable place for guests to relax. A chilled seafood tower, oysters and sashimi are featured in the popular raw bar. Live entertainment is offered 6 nights a week.
Room service is available 24 hours a day.
Nearby Things to Do
The recreational activities listed below are available either on site or nearby; fees may apply.
- Golfing nearby
- Downhill skiing nearby
- Cross-country skiing nearby
- Snowboarding nearby
- Snowshoeing nearby
- Kayaking nearby
- Scooter/moped rentals nearby
- Hiking/biking trails nearby
- Golf lessons available nearby
- Bicycle rentals on site
- Yoga classes/instruction on site
- Boat tours nearby
Spa Services
With its focus on pure and natural, the Willow Stream Spa in Vancouver is a perfect fit with the Fairmont Pacific Rim. Located on the hotel's 5th floor, the Willow Stream Spa is surrounded by views. Guests can select from 9 treatment areas, including a couples' room with deep Japanese Zen tub, a nail spa, 3 lounges (2 with fireplaces), and a well-equipped 24-hour fitness centre.
Treatments are a full hour or 90 minutes, but guests can linger longer with complimentary access to the 2,500-square-foot patio with meditation pods, hot tubs, cabanas, and outdoor swimming pool. Ideal for groups or pampering parties, spa-goers can also enjoy lifestyle cuisine while they relax.
- Hot stone massage
- Couples treatment rooms
- Manicures and pedicures
- Body wraps
- Aromatherapy treatments
- Ayurvedic treatments
- Body treatments
- Facial treatments
To make requests for specific accessibility needs, complete the "Special or Accessibility Requests" section of "Trip Preferences" when you book your hotel.
- Accessible bathroom
- In-room accessibility
- Roll-in shower
Hotel Policies
Minimum check-in age is 19
Check-out time is noon
Payment types
- Pets stay free
- Dogs and cats only
You need to know
Extra-person charges may apply and vary depending on hotel policy.
Government-issued photo identification and a credit card or cash deposit are required at check-in for incidental charges.
Special requests are subject to availability upon check-in and may incur additional charges. Special requests cannot be guaranteed.
No rollaway/extra beds available
Pets allowed (no fees)
24-hour check-in
Optional extras
- Fee for in-room wireless Internet: CAD 15.62 per stay (rates may vary)
- Fee for in-room high-speed Internet (wired): CAD 15.62 per stay (rates may vary)
- Fee for wireless Internet in public areas: CAD 15.62 per night (rates may vary)
- Fee for high-speed Internet (wired) in public areas: CAD 15.62 per night (rates may vary)
- Self parking fee: CAD 49.00 per night
- Valet parking fee: CAD 49.00 per night
Hotel Name
- Fairmont Pacific
- Fairmont Pacific Rim
- Fairmont Pacific Rim Hotel
- Fairmont Pacific Rim Hotel Vancouver
- Fairmont Pacific Rim Vancouver
- Fairmont Rim
- Pacific Fairmont
- Pacific Rim Fairmont
We should mention
Children 18 years old and younger stay free when occupying the parent or guardian's room, using existing bedding.
Awards & Affiliations
- Fairmont Pacific Rim is listed in the 2013 Condé Nast Traveler Gold List of the world's best places to stay.


text:
Vampire history yields to 'Romance'
Seven Angels opens Mainstage season
By Kellie Lambert McGuire | Republican-American
Not a subscriber? You can purchase a single-day subscription for only $0.75 to read this and access all of our content and our E-Edition. CLICK HERE purchase a single day subscription.
Become an electronic subscriber to the Republican-American for only $8 a month. CLICK HERE.


text:
Processing Time - Orders typically ship in 2-5 business days. Transit via UPS Ground can take up to 6 business days. Braided and custom-made products may take 2 to 3 weeks for delivery.
Free Shipping to Contiguous United States - We do not ship to Alaska, Hawaii or the Caribbean Islands at this time.
Oversized items - Orders that ship freight may take up to 2 weeks from shipment date to be delivered. You will be contacted by the trucking company to schedule a delivery appointment.
Shipping to Canada - Orders shipping to Canada will be subject to a 15% shipping surcharge fee. The shipping surcharge does not cover duties, customs, taxes or brokerage fees which may be charged to you by the shipping courier at time of delivery. At this time we are not shipping to Yukon and the Northwest Territories in Canada.
- Style Number: 101PAR45202
- Collection: Paradise
- Brand: Safavieh
- Material: 100% Viscose
- Weave: Power Loomed
- Styles: Traditional Rugs, Transitional
- Origin: Belgium
- Returns: Returns Accepted Within 14 Days of Delivery.
Update your home with a rug from the Safavieh Paradise Collection. Rich and textural, these rugs feel both soft and luxurious underfoot, making them the perfect centerpiece for your den or living room. These rugs are made of luscious viscose pile, creating the soft, lustrous patterns.
Returns Accepted Within 14 Days of Delivery. For our full return policy and details click here
Please Note: The images we display have the most accurate color possible. Due to differences in computer monitors, we cannot be responsible for variations in color between the actual product and your screen. Please be advised that in some cases patterns and colors may vary according to size. Lengths and widths may vary from the published dimensions. We do our best to provide you with an accurate measurement, but please be advised that some variation exists and this is not a manufacturing defect.
Fill out the information below.


text:
January 9, 2013
Dear Whomever,
Thank you for cozy blankets blocking out sounds;
And trains and tracks going round and round.
Thank you technology helping me cope;
Allowing me to always have hope.
Thank you teachers who reach down deep;
Helping me learn the knowledge I'll keep.
Thank you to water ?owing for me;
Your forever existence allows me to be free.
Thank you popping corn between me and mom;
This simple act has created a bond.
Thank you camping world of travel;
This form sent me way beyond gravel.
Thank you to family and loving ties;
Your persistence encourages me to ?y.
Thank you for thank you's I'm able to say;
Verbally with volume, I'm hoping someday.
Thank you for patience I'm willing to own;
To reach the goals no longer on loan.
All of these thank you's are pointless indeed;
Unless the one whose responsible is given heed.
I would have nothing but empty heartache;
If not for this loving, God given faithI
Yours forever


text:
Idaho Rules of Civil Procedure Rule 33(a). Interrogatories to Parties - Availability - Procedures For Use.
(1) Use of Interrogatories. Any party may serve upon any other party written interrogatories to be answered by the party served or, if the party served is a public or private corporation or a partnership or association or governmental agency, by any officer or agent, who shall furnish such information as is available to the party. Interrogatories may, without leave of court, be served upon the plaintiff after commencement of the action and upon any other party with or after service of the summons and complaint upon that party.
(2) Answers to Interrogatories. Each interrogatory shall be answered separately and fully in writing under oath, unless it is objected to, in which event the reasons for objection shall be stated in lieu of an answer. The answers are to be signed by the party to whom they are directed, and the objections may be signed by the attorney making them. The party upon whom the interrogatories have been served shall serve the original of the answers, and objections if any, within 30 days after the service of the interrogatories. The court may allow a shorter or longer time. The answers shall first set forth each interrogatory asked, followed by the answer or response of the party. The party submitting the interrogatories may move for an order under Rule 37(a) with respect to any objection to or other failure to answer any interrogatory.
(Amended March 17, 2006, effective July 1, 2006; amended April 2, 2014; effective July 1, 2014.)
(3) Number of Interrogatories. No party shall serve upon any other single party to an action more than forty (40) interrogatories, in which sub-parts of interrogatories shall count as separate interrogatories, without first obtaining a stipulation of such party to additional interrogatories or obtaining an order of the court upon a showing of good cause granting leave to serve a specific number of additional interrogatories.
(4) Not Filed with Court. The interrogatories and the response thereto shall not be filed with the court. The propounding party shall retain both the original of the interrogatories and theoriginal of the answers with the original proof of service affixed thereto, and the original of the sworn response until one (1) year after final disposition of the action. At that time, both originals may be destroyed, unless the court on motion of any party and for good cause shown orders that the originals be preserved for a longer period.
(5) Notice of Serving. The party serving either an interrogatory or a response thereto, shall file with the court a notice of when the interrogatory or response was served and upon whom.
(Amended December 27, 1979, effective July 1, 1980; amended March 30, 1988, effective July 1, 1988; amended February 26, 1997, effective July 1, 1997.)
Chief Justice Jim Jones
Justice Daniel T. Eismann
Justice Roger S. Burdick
Justice Warren E. Jones
Justice Joel D. Horton
Chief Judge John M. Melanson
Judge Sergio A. Gutierrez
Judge David W. Gratton
Judge Molly J. Huskey
Promoting Openness In The Courts
Do you have suggestions about how we can better serve you?


text:
Do not underestimate the skill, resolve or toughness of a professional skateboarder.
Those who watched skating legend Tony Hawk and his Birdhouse team riders perform at Woodward Tahoe on Wednesday know that well.
As part of their Birdhouse Left Coast Tour, Hawk and 10 other pro skaters entertained a crowd of about 300 spectators on the Eastern Front Mini-Ramp at the base of Boreal Mountain Resort, where the recently opened Woodward Tahoe action sports training center is located.
"The show was awesome," said 17-year-old Ryan Kale, who made the trip up from Colfax to watch the free skating demo. "It was great seeing Tony out there and all the other pros. This is actually the first demo I've been to."
The one-hour, afternoon demo was not short on action.
Highlighted by the performances of Hawk and teammates Aaron "Jaws" Homoki, Shawn Hale, David Loy, Shaun Gregoire and Michael Davis, to name a few, the Birdhouse team members drew cheers of recognition for every technical trick they stuck and "oohs" and "aahs" with every spill.
That's where the toughness and resolve complemented skill — like when Loy launched over the head of Hawk in a coordinated maneuver, only to crash straight onto his shoulder with a resounding thump. Being the tough-natured skateboarder that he is, Loy pulled himself to his feet after a few moments in a heap and was back on his board within a minute's time, attempting once again to stomp the crowd-pleasing trick. Which he did.
Even Hawk himself, who's been skating professionally for some three decades, spinning the first-ever 900 in competition at the 1999 X Games, is not immune to such wipeouts. After one of his stylish handplants, his board rolled out from under his feet on the landing, sending the surprisingly tall icon — he's every bit of 6 foot 3 — crashing to his back in the flat of the ramp.
As Hawk leaned his head against a railing, allowing a moment for the pain in his back to subside, a young fan made his way over — quite possibly a Woodward Tahoe camper.
"Tony, Tony," he said.
"Yeah," replied Hawk without lifting his head.
"That was awesome," the kid said.
Hawk smiled, took another moment to recover, then scurried up the ramp and dropped in again.
"It's been fun," Hawk said afterward of the eight-stop Birdhouse Left Coast Tour, which began this past Saturday in Santa Clarita, Calif., and concludes July 28 in Vancouver, B.C., with stops in between at San Jose, Sacramento, Grants Pass (Ore.), Spokane (Wash.) and Seattle.
"We actually have been here once before (for the Woodward Tahoe opening last month), so it was nice to come to a place we're familiar with. Most places we go we've never been before, so I was happy that we knew what to expect and kind of had our stuff already planned out here."
As far as the Woodward Tahoe venue, Hawk said the mini-ramp shrouded in lodgepole pine atop Donner Summit is not typical of what the athletes normally skate.
"No, not really. Usually we're at a cement park in the middle of a city. But I like it. It's great scenery. Tahoe's beautiful. So we're real excited to come," he said.
Other Birdhouse team members included Kevin Staab, Willy Santos, Clint Walker, Clive Dixon and Elliot Sloan.


text:
Before I updated to 1.70.1 I was able to copy files to my PS3 from my PC without changing the file (transcoding, muxing, etc.). After the update, this isn't happening. The file is huge or of low quality. It also has Mencoder attached to the file name. I realize it's the settings, but I don't know which ones turn this off. The file I'm copying over is exactly how it needs to be. It doesn't need to be encoded or transcoded etc.
Please help me get back to just moving the file over to the PS3 unchanged. What settings do I enable or disable? I've looked in the help files but didn't see my answer.