text:
Download presentation
Presentation is loading. Please wait.
Published byYolanda Lucks Modified over 2 years ago
and Security Testing Approved for Public Release: 12-3411. Distribution Unlimited Shawn Valle shawnvalle at gmail dot com September 2012
Introductions Approved for Public Release 2 15 years in IT and security (CISSP, MCP, LCP) Course developer / trainer at IBMs Catapult Software Training & independently JavaScript, HTML, web app development, content management, identity management, Lotus Domino Began working with mobile computing in 2006 (PalmOS app/ROM development) Joined MITRE in 2008 working in network and app security Co-established MITREs Mobile Security Practice in 2010, leading engineering and coordination in several mobile computing projects Android Forensics
Learning Objectives By the end of this course, you will be able to: 1. Extract and analyze data from an Android device 2. Manipulate Android file systems and directory structures 3. Understand techniques to bypass passcodes NEW! 4. Utilize logical and physical data extraction techniques 5. Reverse engineer Android applications 6. Analyze acquired data Approved for Public Release 3 Android Forensics
Books Hoog, Andrew (2011). Android Forensics, Syngress. Dwivedi, Himanshu, Clark, Theil (2010). Mobile Application Security, McGraw-Hill. Approved for Public Release 4 Android Forensics
Agenda DAY 1 Forensic Introduction Course Setup – Linux, OS X, and Windows Android Overview SDK and AVD Android Security Model ADB and shell Introduction BREAK File System and Data Structures LUNCH Device Handling Circumvent passcode Gain Root Access Recovery Mode Boot Loaders BREAK Logical Forensic Techniques Open Source Tools Commercial Tools Approved for Public Release 5 Android Forensics
Agenda DAY 2 Physical Forensic Techniques & Tools BREAK Forensic Analysis LUNCH Application Penetration Testing Setup Reverse Apps BREAK …more Reversing Document Findings Approved for Public Release 6 Android Forensics
Prerequisites Introduction to Android Development and / or Introduction to Linux Approved for Public Release 7 Android Forensics
Legalities Possibility of Android devices being involved in crimes Easily cross geographical boundaries; multi- jurisdictional issues Forensic investigator should be well aware of regional laws Data may be altered during collection, causing legal challenges Fully document justification for data modification http://www.forensicfocus.com/downloads/windows-mobile-forensic-process-model.pdf 8 Android Forensics
http://www.intellisec.com/ 9
Terms and Definitions Mobile Forensics is defined as the science of recovering digital evidence from a mobile phone under forensically sound conditions using accepted methods. (NIST) A penetration test, occasionally pentest, is a method of evaluating the security of a computer system or network by simulating an attack from malicious outsiders (who do not have an authorized means of accessing the organization's systems) and malicious insiders (who have some level of authorized access). (Wikipedia)securitycomputer systemnetwork A vulnerability assessment is the process of identifying, quantifying, and prioritizing (or ranking) the vulnerabilities in a system.vulnerabilities Approved for Public Release 10 Android Forensics
What is Mobile Forensics & Why Should I Care? The acquisition and analysis of data from devices, Internal corporate investigations, civil litigation, criminal investigations, intelligence gathering, and matters involving national security. Arguably the fastest growing and evolving digital forensic discipline, offers significant opportunities as well as many challenges. Approved for Public Release 11 Android Forensics
Forensic Overview General to forensics, not just Android. Potential scenarios: Evidence gathering for legal proceedings Corporate investigations Intellectual property or data theft Inappropriate use of company resources Attempted or successful attack against computer systems Employment-related investigations including discrimination, sexual harassment Security audit Family matters Divorce Child custody Estate disputes Government security and operation Cyber Threats, Advanced Persistent Threat Stopping cyber attacks Investigating successful attacks Intelligence / Counter-intelligence gathering Source: Andrew Hoog, Android Forensics, Elselvier 2010Approved for Public Release 12 Android Forensics
Forensic Considerations Important items to consider during investigation: Chain of custody Detailed notes and complete report Validation of investigation results, using tools or other investigators Source: Andrew Hoog, Android Forensics, Elselvier 2010Approved for Public Release 13 Android Forensics
…in five minutes Approved for Public Release 14
Android Overview & History Google Mobile SVP Andy Rubin reported that over 850,000 Android devices were being activated each day as of February 2012 500,000 increase per day over just one year ago Approved for Public Release 15 Android Forensics
Android Overview & History Operating System 3Q11 Market Share (%) 3Q10 Market Share (%) Android52.525.3 Symbian16.926.3 iOS1516.6 RIM1115.4 Worldwide Smartphone Sales to End Users Source: http://www.gartner.com/it/page.jsp?id=1848514 Market Share: Mobile Communication Devices by Region and Country, 3Q11 Approved for Public Release 16 Android Forensics
Android Overview & History DateEvent July 1, 2005Google acquires Android, Inc. November 12, 2007Android launched September 23, 2008Android 1.0 platform released February 13, 2009Android Market: USA takes paid apps April 15, 2009Android 1.5 (Cupcake) platform released September 16, 2009Android 1.6 (Donut) platform released October 5, 2009Android 2.0/2.1 (Eclair) platform released May 20, 2010Android 2.2 (Froyo) platform released December 6, 2010Android 2.3 (Gingerbread) platform released February 2, 2011Android 3.0 (Honeycomb) preview released November 14, 2011Android 4.0 (Ice Cream Sandwich), 3.0 source released July 9, 2012Android 4.1 (Jelly Bean) platform released 17
Android Overview & History Android Feature Introduction More details come later 1st Primary feature, always connected: GSM, CDMA, LTE, WiMax, WiFi 2 nd Market / Play: rich source for forensic analysts 3rd Data Storage: Big part of the course Flash (or NAND) memory External SD card Internal SD card Approved for Public Release 18 Android Forensics
Android Overview & History Cellular Networks and Hardware Global System for Mobile Communications – GSM Subscriber identity module (SIM) or universal subscriber identity module (USIM) to identify the user to the cellular network AT&T, T-Mobile Code Division Multiple Access – CDMA Sprint, Verizon Integrated Digital Enhanced Network – iDEN Sprint Worldwide Interop for Microwave Access – WiMax Sprint Long Term Evolution – LTE AT&T, Sprint, T-Mobile, Verizon Approved for Public Release 19 Android Forensics
Android Overview & History Apps As of January 2012, over 400,000 Android apps have been developed. Doubled since January 2011. Apple maintains tight control over their App Store, requiring developers to submit to a sometimes lengthy review process and providing Apple with the nal approval for an app. Apps can be denied based on a number of criteria, most notably if they contain any content Apple feels is objectionable. Google, on the other hand, requires very little review to publish an app in the Android Market. While Google has the ability to ban a developer, remove an app from the Android Market, and even remotely uninstall apps from Android devices, in general their approach to app management is hands off. ( Hoog ) Source: http://www.theverge.com/2012/ 1/4/2681360/android-market- 400000-app-available http://www.theverge.com/2012/ 1/4/2681360/android-market- 400000-app-available Approved for Public Release 20 Android Forensics
Android Open Source Project The Android Open Source Project (AOSP) is led by Google, and is tasked with the maintenance and development of Android.Android Open Source Project (AOSP) It is good experience to download and install AOSP from source. Not critical for all forensics analysts to get this deep into Android. May be helpful for deep analysis. We wont be doing that in this course… Source: http://en.wikipedia.org/wiki/A ndroid_(operating_system)#An droid_Open_Source_Project http://en.wikipedia.org/wiki/A ndroid_(operating_system)#An droid_Open_Source_Project Approved for Public Release 21 Android Forensics
Source: http://www.talkandroid.com/w p- content/uploads/2011/05/Linux Android.png?3995d3 http://www.talkandroid.com/w p- content/uploads/2011/05/Linux Android.png?3995d3 Approved for Public Release 22
Linux, Open Source Software & Forensics Open source software has had a tremendous impact on the digital forensics discipline. Forensic tools that are released as free open source software have tremendous advantages over closed source solutions including the following: The ability to review source code and understand exact steps taken The ability to improve the software and share enhancements with entire community The price Linux is not only a critical component of Android but can also be used as a powerful forensic tool. Source: Andrew Hoog, Android Forensics, Elselvier 2010 Approved for Public Release 23 Android Forensics
Linux Commands man help cd mkdir mount rmdir/rm nano ls tree cat dd find chmod chown sudo apt-get grep | and > Approved for Public Release 24 … see Linux Commands handout for valuable commands Android Forensics
Source: http://viaforensics.com/services /mobile-forensics/android- forensics/ http://viaforensics.com/services /mobile-forensics/android- forensics/ Approved for Public Release 25
Android & Forensics Relatively new, emerged in ~2009 Best known expert in the field is Andrew Hoog Other leaders in the Android Security field include Jon Oberheide and Zach Lanier Community is rapidly growing In-house investigations on pilot / prototype apps Penetration tests Vulnerability assessments Funded research Approved for Public Release 26 Android Forensics
Source: http://viaforensics.com/services /mobile-forensics/android- forensics/ http://viaforensics.com/services /mobile-forensics/android- forensics/ Approved for Public Release 27
Course Setup Ubuntu Linux distribution with Android SDK Ubuntu 11.10 32-bit running on VMWare. Fully functional free, open-source environment for you to keep after the course is over. http://www.vmware.com/ Need 20GB hard drive space and 2+GB RAM for the VM http://www.ubuntu.com/download/ubuntu/download Windows for some commercial tools Approved for Public Release 28 Android Forensics
VM Setup – 1 of 7 Approved for Public Release 29 Android Forensics
VM Setup – 2 of 7 Approved for Public Release 30 Android Forensics
VM Setup – 3 of 7 Approved for Public Release 31 Android Forensics
VM Setup – 4 of 7 Approved for Public Release 32 Android Forensics
VM Setup – 5 of 7 Approved for Public Release 33 Android Forensics
VM Setup – 6 of 7 Approved for Public Release 34 Android Forensics
VM Setup – 7 of 9 Approved for Public Release 35 Ubuntu User name: student Password: password1 Android Forensics
Forensic Workstation Setup Approved for Public Release 36 Disable Automount Command: gconf-editor Navigate to apps > nautilus > preferences, uncheck media_automount and media_automount_open Android Forensics
Source: http://www.geeky- gadgets.com/wp- content/uploads/2010/08/andro id3.jpghttp://www.geeky- gadgets.com/wp- content/uploads/2010/08/andro id3.jpg Approved for Public Release 37
Got Android? http://developer.android.com/guide/basics/what-is-android.html 38 Android Forensics
http://www.geeky-gadgets.com/wp-content/uploads/2010/08/android3.jpg 39
Hardware - core CPU Radio Memory (RAM & NAND Flash) Memory GPS WiFi Bluetooth SD Card Screen Camera(s) Keyboard Battery USB Accelerometer / Gyroscope Speaker Microphone SIM Approved for Public Release 40 Android Forensics
More Memory Memory (RAM & NAND Flash) Memory Manufactured together into multichip package (MCP) http://www.hynix.com/products/mobile/mcp.jsp?menuNo=1&m=4&s=4 41 Android Forensics
Samsung Vibrant Galaxy S Android 2.2 (Froyo) /data/dbdata Wear leveling Logical Physical Source: Mark Guido, MITRE Android Forensics
Hardware - devices Smartphones Tablets Google TV Vehicle Stereos Standalone GPS Kindle Fire B&N Nook 700+ Android devices Approved for Public Release 43 Android Forensics
ROM & Boot Loaders ROM varies by manufacturer Contains boot process seven key steps to the Android boot process: 1. Power on and on-chip boot ROM code execution 2. The boot loader 3. The Linux kernel 4. The init process 5. Zygote and Dalvik 6. The system server 7. Boot complete Source: The Android boot process from power on by Mattias Björnheden of the Android Competence Center at Enea 44 Android Forensics
ROM & Boot Loaders Source: The Android boot process from power on by Mattias Björnheden of the Android Competence Center at Enea 45 Android Forensics
Security Model At app (.apk) installation, Android checks for developers unique signature. NOTE: Not signed by a CA. Key is the responsibility of the developer. After signature validation, Android check the permissions (AndriodManifest.xml) needed for the app, designated by the developer. For example: network access, GPS access, access to storage Checking an apps permissions, compared to its functionality could give a clue if an app has potential malicious intent. Important area to look at for forensics analysis. Approved for Public Release 47 Android Forensics
Application Security Quick intro/review of Android security model Every application (.apk) gets a unique Linux user ID and group ID Apps run with their unique user ID Each running app gets its own dedicated process and a dedicated Dalvik VM Each app has its own storage location in /data/data/, only accessible by the unique user ID and group ID Apps can share data with other apps using Content Providers (see Intro to Android App Dev for details) Source: Geary Sutterfield, MITRE 48.java.class.dexjavadx Android Forensics
Approved for Public Release 49
Android Tools Needed Android SDK (Software Development Kit) Though we are not going to use any of the development tools for device forensics AVD (Android Virtual Device) ADB (Android Debug Bridge) Approved for Public Release 50 Android Forensics
SDK Setup Android 4.1 (newest), 2.3.3, and 2.2 (most used) SDK is already installed on Ubuntu workstation For more: http://blog.markloiseau.com/2011/06/how- to-install-the-android-sdk-and-eclipse-in-ubuntu/http://blog.markloiseau.com/2011/06/how- to-install-the-android-sdk-and-eclipse-in-ubuntu/ Eclipse installed, not needed for device forensics, but will be used for later application reverse engineering Approved for Public Release 51 Android Forensics
SDK Install via command Approved for Public Release 52 Android Forensics copy the android sdk to /opt sudo -s cp -r android-sdk_r20.0.3-linux.tgz /opt change you into the Android working directory cd /opt unpack your Android SDK sudo -s tar xvzf android-sdk_r20.0.3-linux.tgz make the /opt directory and the Android SDK writable and executable for all users sudo -s chmod -R 755 /opt/android-sdk-linux copy the android sdk to /opt sudo -s cp -r android-sdk_r20.0.3-linux.tgz /opt change you into the Android working directory cd /opt unpack your Android SDK sudo -s tar xvzf android-sdk_r20.0.3-linux.tgz make the /opt directory and the Android SDK writable and executable for all users sudo -s chmod -R 755 /opt/android-sdk-linux
SDK Manager Starting up Android SDK and Android Virtual Device (AVD) manager from terminal Icon on desktop, or $ cd /opt/android/tools $./android Approved for Public Release 53 Android Forensics
SDK Plugins Download the SDK plugins you want. For us: 4.1 (newest), 2.3.3, and 2.2 (most used) Choose whichever SDK is appropriate for the device you are analyzing. Approved for Public Release 54 Android Forensics
USB Drivers in Windows Adding USB Drivers in Windows is very easy. Approved for Public Release 55 Android Forensics
USB Drivers in OS X Lion (1 of 2) If you're developing on Mac OS X, it just works. Approved for Public Release 56 Android Forensics
USB Drivers in OS X Lion (2 of 2) Update PATH for Android tools nano –w ~/.bash_profile export PATH=${PATH}: /tools: /platform- tools Close / reopen Terminal Approved for Public Release 57 Android Forensics
USB Drivers in Linux Add a udev rules file Contains a USB configuration for each type of device Approved for Public Release 58 Android Forensics
USB Vendor IDs This table provides a reference to the vendor IDs needed in order to add USB device support on Linux. The USB Vendor ID is the value given to the ATTR{idVendor} property in the rules file, as described above. CompanyUSB Vendor ID Acer 0502 ASUS 0B05 Dell 413C Google 18D1 HTC 0BB4 Lenevo 17EF LG 1004 Motorola 22B8 Nook 2080 Samsung 04E8 Toshiba 0930 Approved for Public Release 59 Android Forensics
UDEV Rules Log in as root and create this file: sudo nano -w /etc/udev/rules.d/51- android.rules Use this format to add each vendor to the file: SUBSYSTEM=="usb", ATTR{idVendor}=="0bb4", MODE="0666", GROUP="plugdev" I used: #HTC SUBSYSTEM==usb, SYSFS{idVendor}==0bb4, MODE=0666 Approved for Public Release 60 Android Forensics
Final UDEV Touches Make file readable to all: sudo chmod a+r /etc/udev/rules.d/51- android.rules UDEV Rules Overview: http://reactivated.net/writing_udev_rules.html Approved for Public Release 61 Android Forensics
AVD (Emulator) and connecting devices Forensics analysts utilize AVD/emulator to learn app execution on a device Useful for validating investigation findings Useful for testing a forensics or reverse engineering tool an Android device or app Terminal: android (will start up AVD) Approved for Public Release 63 Android Forensics
Create AVD Location of AVD Files: Approved for Public Release 64 Desktop OSAVD Data Location Ubuntu/home/ /.android Max OS X/Users/ /.android Windows 7C:\Users\ \.android Android Forensics
/.android Directory Tree Command: tree Approved for Public Release65 Android Forensics
Interesting Files cache.img: disk image of /cache partition sdcard.img: disk image of SD card (if created during AVD setup) userdata-qemu.img: disk image of /data partition More details on these directories later Approved for Public Release 66 Android Forensics
REVIEW Learned a brief overview of Android and Linux Defined the basics of forensics, penetration testing, and vulnerability assessments Explored the hardware components of an Android device Familiarized with the Forensics Workstation and Android AVD Approved for Public Release 67 Android Forensics
EXERCISE Create AVD and explore directories of interest Create FroyoForensics AVD or AVD based on your own Android device Explore /.android subdirectories Locate cache.img Approved for Public Release 68 Android Forensics
Approved for Public Release 69
Connecting Device to VM Mac OS X with VMWare Fusion VirtualBox Approved for Public Release 70 Android Forensics
Setting up USB Interfaces Each device has different USB setting options when connected to a PC Some options are: Charge only Sync Disk drive Mobile Broadband Connect Approved for Public Release 71 Android Forensics
USB Connection Test To ensure the device is connected and passing through the host OS to the Ubuntu VM Open a terminal window and type dmesg (display message or driver message) Approved for Public Release 72 Android Forensics
USB Forensics Precaution Important to disable auto-mount to prevent automatic detection and mounting of USB mass storage Critical to limit and modifications to device when acquiring forensic data (more later) A hardware USB write blocker is an option To check for mounted SD cards, use df command. Approved for Public Release 73 Android Forensics
http://www.geeky-gadgets.com/wp-content/uploads/2010/08/android3.jpg 74
SD Card Approved for Public Release 75 Most developers store large data files on SD cards. Core application data is located in /sdcard/data/data Android Forensics
http://www.geeky-gadgets.com/wp-content/uploads/2010/08/android3.jpg 76
Android Debug Bridge One of the most important pieces of Android forensics. Best time to pay attention is now. Android Debug Bridge (ADB) Developers use this, forensic analysts and security analysts rely on this. Approved for Public Release 77 Android Forensics
USB Debugging Enable USB debugging on device Applications > Development > USB Debugging This will run adb daemon (adbd) on device. adbd runs as a user account, not an admin account. No root access. Unless your device is rooted, then adbd will run as root. If the device is locked with a pass code, enabling USB debugging is difficult. Approved for Public Release 78 Android Forensics
USB Debugging Source: http://theheatweb.com 79 Android Forensics
USB Debugging Enable USB debugging on device Applications > Development > USB Debugging This will run adb daemon (adbd) on device. adbd runs as a user account, not an admin account. No root access. Unless your device is rooted, then adbd will run as root. If the device is locked with a pass code, enabling USB debugging is difficult. Approved for Public Release 80 Android Forensics
ADB Components Three components adbd on device adbd on workstation adb on workstation adb is free, open-source, and our primary tool for Android forensics Approved for Public Release 81 Android Forensics
ADB Devices To identify devices connected, use command adb devices Approved for Public Release 82 Android Forensics
Bad ADB Sometimes adb doesnt respond properly. To kill adb, use command adb kill-server Approved for Public Release 83 Android Forensics
ADB Shell To open an adb shell on an Android device, use command adb shell Gives full shell access directly on device. Once we learn more about file system and directories, adb shell will get you much of the data needed for forensic analysis Approved for Public Release 84 Android Forensics
Full list of adb commands at http://developer.android.com/guide/developing/tools/adb.html http://developer.android.com/guide/developing/tools/adb.html ADB Shell – example Approved for Public Release 85 Android Forensics
REVIEW Learned proper technique for connecting Android device to a forensic workstation Became familiar with USB Debuggings importance to forensics Explored ADB and its relevance to successful investigations Approved for Public Release 86 Android Forensics
EXERCISE Locate data directory on an Android device Connect an Android device to your VM workstation (or startup an AVD) Verify USB Debugging is enabled on the device Start adb on your forensic workstation Using adb shell, locate directories in /data/data Jot down the name of some interesting directories for further exploration later Approved for Public Release 87 Android Forensics
http://www.geeky-gadgets.com/wp-content/uploads/2010/08/android3.jpg 88
SMS History Deleted SMS Contacts (stored in phone memory and on SIM card) Call History Received Calls Dialed Numbers Missed Calls Call Dates & Durations Datebook Scheduler Calendar To-Do List File System (physical memory) System Files Multimedia Files Java Files / Executables Deleted Data Notepad More... GPS Waypoints, Tracks, Routes, etc. RAM/ROM Databases E-mail Page 89 Forensics Data Gathered and Analyzed Android Forensics
File System & Data Overview File Systems Data Storage What Data? Important Directories Five Data Storage Methods Shared Preferences Internal Storage External Storage SQLite Network Where else? Linux Kernel & Android Stack dmesg logcat Forensically Thinking Approved for Public Release 90 Android Forensics
File Systems More than a dozen file systems in Android More than a dozen file systems in use on Android Forensics analysts should understand the most important EXT FAT32 YAFFS2 Most user data live in those Want to find the file systems on your device? adb shell cat /proc/filesystems Approved for Public Release 91 Android Forensics
Data Storage Explore file systems and virtual machines Learning the Android file systems, directory structures, and specific files will be crucial to successful Android forensics analysis Approved for Public Release 92 Android Forensics
What Data? Apps shipped with Android (with the OS) – eg. Browser Apps installed by manufacturer – eg. Moto Blur Apps installed by wireless carrier – eg. CarrierIQ Additional Google/Android apps – eg. Google Play Music, Gmail Apps installed by the user, from Play Store or elsewhere Approved for Public Release 93 Android Forensics
Important Directories /data/data- Apps data generally installed in a subdirectory Example: Android browser is named com.android.browser, data files are stored at /data/data/com.android.browser Approved for Public Release 94 Android Forensics
Common Subdirectories /data/data/ / Approved for Public Release 95 shared_prefsXML of shared preferences libCustom library files required by app filesDeveloper saved files cacheFiles cached by the app databasesSQLite databases and journal files Android Forensics
Five Data Storage Methods We will be exploring these methods Shared preferences Internal storage External storage SQLite Network Source: Hoog 96 Android Forensics
Shared preferences Key-value XML data use cat command to view files Approved for Public Release 97 Android Forensics
Can be source of data Approved for Public Release 98 Android Forensics
Shared preferences – example Android device security application Exploring shared_prefs, and SDPrefs_V2.xml, my user name and password are stored in the clear Approved for Public Release 99 Android Forensics
Shared preferences – example MDM product Stores entire connection string, including user name, domain, and password in clear text Approved for Public Release 100 Android Forensics
Internal storage Common file systems used: ext3, ext4, yaffs2. By default, files stored in /data/data are encrypted, accessed only by the application. Commonly root access is needed to access these files. Approved for Public Release 101 Android Forensics
Internal storage Notice user app_84 is the owner. That user was created when Google Maps was installed Theres a lot of potential rich forensic maps data in these directories Approved for Public Release 102 Android Forensics
External storage External storage (SD Card) have less permission restrictions. FAT32 does not have fine-grain permissions of other file systems. Approved for Public Release 103 Android Forensics
SQLite Lightweight open-source relational database Entire database contained in a single file Generally stored on internal storage at /data/data/ /databases Browser subdirectories contain valuable data Approved for Public Release 104 Android Forensics
SQLite – commands sqlite3 Runs SQLite.tablesLists available tables.headers ONDisplays header row select * from ;Displays table contents CTRL+ZExits SQLite Approved for Public Release 105 Android Forensics
SQLite – example These directories all contain one of more databases of interesting data for analysis. Contents include (app_geolocation) GPS positions for tracking where the device has traveled, (databases, app_databases and app_cache) stored data from visited web sites/apps. Approved for Public Release 106 Android Forensics
Network Network storage via Java and Android network classes Network data is not stored locally on the device, though configuration files and related databases generally are locally stored Approved for Public Release 107 Android Forensics
Where else? Linux Kernel & Android Stack Android is Linux at the kernel…we know that. With Linux, there is a kernel log, which may have some interesting data. To access the kernel log, command dmesg or display message, prints the kernel messages to the console (avd or adb shell) Approved for Public Release 108 Android Forensics
dmesg Notice [KEY] above. Possibly something logging keystrokes. May be worth further investigation Root access is not needed for dmesg, just USB debugging Approved for Public Release 109 Android Forensics
…more dmesg commands dmesg | wc displays word count of log –l for line count dmesg > dmesg.log saves dmesg to a log file Approved for Public Release 110 Android Forensics
dmesg.log Approved for Public Release 111 Android Forensics
logcat Displays a live stream of messages, system and app debug message Used in the CarrierIQ demonstration video on YouTubeYouTube Approved for Public Release 112 Android Forensics
logcat Message Indicators Approved for Public Release 113 Android Forensics Message IndicatorDescription VVerbose DDebug IInformation WWarning EError FFatal SSilent
Forensically Thinking Now that we have some idea of how to locate data Time to start thinking about identifying potential interesting data, forensically thinking What you might look for: Time stamps – when was something modified, when did an event occur User Information – locate user names and/or passwords in insecure prefs/logs. Locate user authentication times in log files. Image files – identify.JPEG or other picture files, for later assessment of the picture. SD Card Files – look for files saved to SD Card Call logs – Who has the user been calling / receiving calls from Approved for Public Release 114 Android Forensics
REVIEW Explored Android file system, internal and external Located common directories for rich forensic information Identified five key areas of stored persistent data Explored application preference files to locate important forensic data Explored databases in search of data for forensics analysis Identified sensitive data stored insecurely Approved for Public Release 115 Android Forensics
EXERCISE Apply current Android forensics knowledge to locate data of interest Using adb shell (or /.android if using an AVD), explore an applications shared_prefs within /data/data Use the cat command to open an xml file and review the contents Note anything of interest to share with the class Using sqlite3, explore an applications databases within /data/data Use.tables and select commands to gather data of interest, which could identify something specific about the user. Note anything of interest to share with the class Approved for Public Release 116 Android Forensics
Learning Objectives By the end of this course, you will be able to: Extract and analyze data from an Android device Manipulate Android file systems and directory structures 3. Understand techniques to bypass passcodes NEW! 4. Utilize logical and physical data extraction techniques 5. Reverse engineer Android applications 6. Analyze acquired data Approved for Public Release 117 Android Forensics
Source: thebransonhistory.blogspot.com 118
Device Handling & Modification Forensics rule: Avoid modification of the target, at all costs Not so easy for mobile. Drives, RAM, CPU, etc are all in non-accessible locations Just the act of taking the device out of sleep mode records a log (remember logcat) The realization: You cannot get a pristine mobile device, but take much precaution to minimize modification to the device Approved for Public Release 119 Android Forensics
Device Acquisition Extend screen timeout to max, immediately (if not already locked) Enable Stay Awake while charging and USB debugging Disable network communication Do nothing further until in a secure location with minimal cellular / network connectivity Approved for Public Release 120 Android Forensics
What if its already off? Boot into recovery mode Test for connectivity and root access Cross your fingers that USB debugging is already enabled and/or device is already rooted Approved for Public Release 121 Android Forensics
http://www.geeky-gadgets.com/wp-content/uploads/2010/08/android3.jpg 122
Circumventing Passcodes Critical capability in forensics and security testing Techniques vary from platform-to-platform There is no panacea for circumventing passcodes on Android …but we will learn a few potential techniques Approved for Public Release 123 Android Forensics
Passcodes Types Pattern lock PIN Approved for Public Release 124 Alphanumeric Android Forensics
New Passcode Type Facial recognition Approved for Public Release 125 Android Forensics
How Do We Crack Them? Smudge Attack Pattern Lock Vulnerability ADB and USB Debugging, with psneuter Continues to evolve… Approved for Public Release 126 Android Forensics
Smudge Attack Screens are reflective; smudge (aka pattern lock) is diffuse. Directional lighting and a camera capturing photos overexposed by two to three f-stops (4 to 8 times correct exposure) Creates an image displaying pattern lock Not 100% accurate, since other swipes of the screen may have damaged the pattern lock smudge Approved for Public Release 127 Android Forensics
Smudge Attack Approved for Public Release 128 Android Forensics http://bcove.me/7ozhp9u4
Pattern Lock Crack Source: http://www.youtube.com/user/SecurityCompass 129 Android Forensics Pattern Lock creates a file gesture.key Hash of the pattern stored If custom recovery ROM is installed (i.e. ClockWork Recovery) Remove & recreate key to bypass pattern
http://androinica.com 130
Gaining Root Needed for many forensic techniques, including physical acquisition Not enabled on any device by default Not possible on all devices Gaining root isnt always the best choice in forensics It will change data on the device, possibly altering evidence It will be time consuming to gain root, as its implemented differently across most devices Root makes the device vulnerable to many exploits Approved for Public Release 131 Android Forensics
Three Common Types of Root Temp root – roots the device only until it is rebooted, which then disables root Perm root – root persists after reboots. Commonly enabled with custom ROMs Recovery mode root – flashing (installing) a custom recovery partition, allowing root to run only in recovery mode Approved for Public Release 132 Android Forensics
Temp Root For forensics, temp root is what we want to enable, if needed Suggest testing these procedures many times, not, on your primary / target device Approved for Public Release 133 Android Forensics
Temp Root Is USB debugging enabled? Is it already rooted? adb shell su permission denied – no root # - root MyTouch 4G – custom ROM Droid X – stock OS If not rooted, start searching xda-developers.com Approved for Public Release 134 Android Forensics
Property Service Neuter Psneuter is a form of a malicious app, but for our good Uses a vulnerability in Android to gain superuser access, and ultimately root To gain root shell (or temp root) with psneuter: adb devices adb push psneuter /data/local/tmp adb shell $ cd /data/local/tmp $ chmod 777 psneuter $./psneuter Approved for Public Release 135 Android Forensics
Permanent Root Not as common for forensics We want to limit the footprint Perm root leaves a HUGE footprint Approved for Public Release 136 Android Forensics
Busy Box The Swiss Army Knife of Embedded Linux # mount -o remount,rw -t rfs /dev/block/st19 /system # exit adb push busybox /system/bin adb push su /system/bin adb install Superuser.apk adb shell # chmod 4755 /system/bin/busybox # chmod 4755 /system/bin/su # mount -o remount,ro -t rfs /dev/block/st19 /system # exit adb reboot Approved for Public Release 137 Android Forensics
SuperOneClick A simple tool for "rooting" your Android phone Approved for Public Release 138 Android Forensics
SuperOneClick Root for perm, Shell Root for temp Approved for Public Release 139 Android Forensics
A couple roots Acer A500 http://www.tabletroms.com/forums/sho wwiki.php?title=AcerIconiaFaq:How-to-root- the-Acer-Iconia-Tab-A500 http://www.tabletroms.com/forums/sho wwiki.php?title=AcerIconiaFaq:How-to-root- the-Acer-Iconia-Tab-A500 Lenovo http://rootzwiki.com/topic/8722- lenovo-ideapad-k1-rooting-guide- messy/page__st__120 http://rootzwiki.com/topic/8722- lenovo-ideapad-k1-rooting-guide- messy/page__st__120 Approved for Public Release 140 Android Forensics
Agenda DAY 1 Forensic Introduction Course Setup – Linux, OS X, and Windows Android Overview SDK and AVD Android Security Model ADB and shell Introduction File System and Data Structures Device Handling Circumvent passcode Gain Root Access Approved for Public Release 141 Android Forensics
Agenda DAY 2 Recovery Mode Boot Loaders Logical Forensic Techniques Open Source Tools Commercial Tools Physical Forensic Techniques & Tools Forensic Analysis Application Penetration Testing Setup Reverse Apps …more Reversing Document Findings Approved for Public Release 142 Android Forensics
Got sqlite3? $ adb push sqlite3 /sdcard/ $ adb shell $ su # mount -o remount,rw -t yaffs2 /dev/block/mtdblock3 /system # dd if=/sdcard/sqlite3 of=/system/bin/sqlite3 # chmod 4755 /system/bin/sqlite3 # mount -o remount,ro -t yaffs2 /dev/block/mtdblock3 /system sqlite3 binary is in SuperOneClick directory. Approved for Public Release 143 Android Forensics
http://www.mymac.com 144
Recovery Mode Designed as an avenue for manufacturers to deliver and apply system updates Recovery partitions offer shell access and root permissions When booting into recovery mode, pass codes are circumvented Approved for Public Release 145 Android Forensics
Recovery Not User Accessible Approved for Public Release 146 Android Forensics
Recovery User Accessible Check adb devices on forensic workstation If no adb access, search for root while in recovery mode Approved for Public Release 147 Android Forensics
Recovery Mode Techniques DeviceKey Combination Motorola Droid X Power off. Hold Home and press power button. Release power. When (!) displays release Home. Press Search button. (needs more research) HTC IncredibleHold volume down and press power button. Use volume down to select recovery and press power button. Approved for Public Release 148 Android Forensics
Passcode Circumvention Recap If device is on and passcode protected, connect to USB and attempt ADB access. If pattern lock is present (and you have access to lighting and camera), attempt smudge attack. If those fail, attempt to reboot into recovery mode. If device is off, attempt boot into recovery mode. Approved for Public Release 149 Android Forensics
REVIEW Identified the important of proper device handling Explored techniques for circumventing passcodes Applied rooting techniques and tools Located recovery partitions and benefit of recovery mode Approved for Public Release 150 Android Forensics
EXERCISE Attempt to circumvent passcode and obtain root access Document your findings to share with the class Approved for Public Release 151 Android Forensics
Learning Objectives By the end of this course, you will be able to: Extract and analyze data from an Android device Manipulate Android file systems and directory structures Understand techniques to bypass passcodes NEW! 3. Utilize logical and physical data extraction techniques 4. Reverse engineer Android applications 5. Analyze acquired data Approved for Public Release 152 Android Forensics
http://www.geeky-gadgets.com/wp-content/uploads/2010/08/android3.jpg 153
Android Forensics Techniques Forensic data acquisition Acquiring SD card data Open-source and commercial forensic tools qtADB viaExtract CelleBrite Paraben Approved for Public Release 154 Android Forensics
http://www.geeky-gadgets.com/wp-content/uploads/2010/08/android3.jpg 155
Logical vs. Physical Acquisition Logical vs. Physical Logical ADB Pull Other tools Physical Hardware vs. software Software technique in detail Approved for Public Release 156 Android Forensics
Logical vs. Physical Acquisition Logical Physical Accesses the file system. Data that is readily available to a user. Targets the physical memory, not relying on the file systems. Gains much more data than logical, potentially circumvents passcodes. Approved for Public Release 157 Android Forensics
http://www.geeky-gadgets.com/wp-content/uploads/2010/08/android3.jpg 158
Logical SD Card Acquisition User app data lives in /data/data directories which each sub-directory is RW protected to the app user SD cards are used for large storage (audio, video, maps) SD uses cross-platform FAT file systems.apk files residing on SD cards are increasingly encrypted Removing SD card challenges Unencrypted.apks are mounted in /mnt/asec This is an important directory to pull and analyze, if 3 rd party apps are part of the investigation Approved for Public Release 159 Android Forensics
ADB Pull – logical Command used for copying data from an emulator or device Primary logical acquisition tool adb pull on non-rooted Droid X: Approved for Public Release 160 Android Forensics
ADB Pull – rooted & locked adb pull on rooted and password locked HTC Glacier (aka T-Mobile MyTouch 4G): Approved for Public Release 161 Android Forensics
ADB Pull – rooted & locked ~700 MB ~27 minutes Approved for Public Release 162 Android Forensics
QtADB http://qtadb.wordpress.com/ Graphical app based on adb Open-source, currently well- supported Approved for Public Release 164 Android Forensics
QtADB – features File manager copying files and dirs between phone and computer removing files and dirs creating new dir and other App manager installing apps removing apps creating backup of apps with data restoring backups of apps with data Sms manager receiving sms (baloon in tray) reading sms sending sms Shell opens android shell Screenshot take screenshot of your device save screenshot to png file Fastboot flash bootloader, radio and recovery boot recovery Recovery nandroid backup/restore wipe data flash rom wipe battery stats fix uid mismatches Reboot to bootloader to recovery normal reboot Settings set font used by app set starting paths (or remember paths on exit) and other Logcat Automatically detects phone (device, fastboot and recovery mode) Approved for Public Release 165 Android Forensics
QtADB – in action Recovery partition Logcat Approved for Public Release 166 Android Forensics
QtADB – setup Windows: Must have Android SDK installed ZIP contain all libraries Extract to a permanent directory Open QtADB application Choose path to directory with adb and aapt binaries (example: C:\Users\ \App Data\Local\Android\andr oid-sdk\platform-tools ) Approved for Public Release 167 Android Forensics
REVIEW Identified the difference between logical and physical forensics Explored open and free tools and techniques for logically acquiring data Located directories and file details for SD card logical acquisition Approved for Public Release 168 Android Forensics
EXERCISE Using either ADB or QtADB pull a logical acquisition from your device or AVD. Verify pull successfully completed, and document size of data acquired. Approved for Public Release 169 Android Forensics
AFLogical Android forensics logical extraction tool Free for law enforcement and government agencies Leverages Content Providers Approved for Public Release 170 Android Forensics CallLog Calls
Cellebrite UFED Page 171 Android Forensics
Cellebrite Physical Analyzer Approved for Public Release 172 Android Forensics
Paraben Device Seizure 173 Android Forensics
Device Seizure – Acquisition DS acquisition temp installs Seizure Service on device. Removes automatically during completion of acquisition 174 Android Forensics
Device Seizure – Acquisition 175 Device Seizure hung while acquiring data after more than 11 hours Keep in mind, I'm acquiring from a rooted CyanogenMod ROM, and checked options to acquire all data, including the entire contents of 32GB Class 10 microSD card Android Forensics
Device Seizure – Acquisition 176 This screen displays for considerable amount of time when completing / canceling an acquisition Android Forensics
Device Seizure – Results 177 Contacts and Calendar were empty Android Forensics
Device Seizure – Sorting 178 After acquisition, "Do you want to fill the sorter? This will take about an hour Android Forensics
Device Seizure – Sort Results 179 Sorting all the findings Android Forensics
Device Seizure – Reports 180 Creating a PDF report of the entire case Android Forensics
Device Seizure – Report 181 Android Forensics
Device Seizure – Report 182 Android Forensics
Device Seizure – Report 183 Android Forensics
http://www.geeky-gadgets.com/wp-content/uploads/2010/08/android3.jpg 184
Software Physical Acquisition Lets get a full NAND acquisition of the user accessible data partition For times sake, and now that we know of open- source and commercial tools, lets take advantage of them for the physical acquisition Approved for Public Release 185 Android Forensics
http://www.geeky-gadgets.com/wp-content/uploads/2010/08/android3.jpg 186
Forensic Analysis Analyzing acquired data File System Analysis SQLite Analysis Directory Structure FAT Analysis SD Card Analysis YAFFS2 Analysis Approved for Public Release 187
Forensic Analysis - photos Common location for storage of photos in JPG format Approved for Public Release 188
Important Directories Recap /cache/ Previewed Gmail attachments Downloads (Market and messages) /data/ dalvik-cache: applications (.dex) that have been run app:.apk files data: subdirectories per app with SQLite databases and XML shared preferences misc: protocol info system: installed applications (or packages.xml) accounts database device and app login details,.key files /proc & /sys – list of device filesystems, web history, device info /mnt/sdcard/DCIM/Camera - images /sdcard/android or sdcard/data/data – FAT32, limited permission 189 Android Forensics
REVIEW Explored several commercial Android forensics products Identified the benefits and acquisition steps of physical forensics Located the most important directories for analysis Approved for Public Release 190
EXERCISE Determine what the user does for work and fun (in groups) Now that you have acquired data many different ways, analyze the data using one of the forensics tools (adb, adb shell, Device Seizure, QtADB, etc) to get a fresh data acquisition from your device Look at earlier exercises for commands, as a refresher Explore data in directories like /data/ and /cache/ As a forensic analyst, document findings that would help you determine the users profession and hobbies Be prepared to share your findings with the class Approved for Public Release 191
Learning Objectives By the end of this course, you will be able to: Extract and analyze data from an Android device Manipulate Android file systems and directory structures Understand techniques to bypass passcodes Utilize logical and physical data extraction techniques 4. Reverse engineer Android applications 5. Analyze acquired data Approved for Public Release 192 Android Forensics
Reverse Engineering Apps http://www.areamobile.it/wp-content/uploads/2011/12/defend-reverse-engineering.jpg 193
Analyzing APKs Byte code is reverted to source First extracting each of the classes.dex files Using dex2jar.bat, a jar file is created Approved for Public Release 194 Android Forensics.java.class.dexjavadx Batch file used to convert dex files to jar files
More Analyzing APKs Java Decompiler used to create a zip file containing all of the Java source code Used to view class files and convert them to java The remaining content of each of the APK files is extracted Approved for Public Release 195 Android Forensics Yes, its a painful process! How can we make it easier?
APK Reversing Rename Android app (.apk) to.zip. Extract.zip. Run Dex2Jar desktop script (.bat or.sh) on extracted.dex file Dex2Jar decompiles.dex to.jar (Java Archive) Open.jar in Java Decompiler desktop app to review source http://en.wikipedia.org/wiki/Step_by_Step_(TV_series) 196.java.class.dexjavadx
APKTool Powerful tool for forensic analysts Tool for reverse engineering Android binaries Available at code.google.com Approved for Public Release 197 Android Forensics
androguard Reverse engineering, Malware and goodware analysis of Android applications... and more ! Check for permissions and usage Available at code.google.com Approved for Public Release 198 Android Forensics
APKinspector Powerful tool for forensic analysts Graphically reverse engineer and analyze apps Available at code.google.com Approved for Public Release 199 Android Forensics
REVIEW Explored reversing tools for Android Reverse engineered app back to source code Explored code and data for an APK Approved for Public Release 200
EXERCISE Reverse engineer an app and locate critical data Use APKInspector Reverse engineer Facebook or F-Droid, mobile app market, application Both apps located in Documents directory on workstation Locate the database where user IDs are stored Approved for Public Release 201
Learning Objectives By the end of this course, you will be able to: Extract and analyze data from an Android device Manipulate Android file systems and directory structures Understand techniques to bypass passcodes NEW! Utilize logical and physical data extraction techniques Reverse engineer Android applications Analyze acquired data Approved for Public Release 202 Android Forensics
Similar presentations
© 2017 SlidePlayer.com Inc.
All rights reserved.


text:
Storage Choice- Gulfport
Storage Choice- Gulfport
Website: http://www.storagechoice.net
Contact: Robert Brown
Storage Choice is your one stop moving and storage facility serving Gulfport, Mississippi. We carry a large selection of boxes, rope, tape, locks, etc. to make your storage and moving experience easy.
UNHCR Your generous support to the UN Refugee Agency will provide protection, shelter, clean water ...

subset: commoncrawl


text:
Gazebo Kits
Maybe you've always dreamed about the idea of having a gazebo in your backyard or garden area, but most likely you might have thought that a gazebo would be too expensive or too difficult to be delivered intact to your home. Instead of having a fully assembled gazebo delivered to your door, perhaps what you need is a gazebo kit! Many people don't realize that a variety of gazebo kits are available for those people who might be interested in installing gazebos themselves. Our gazebo kits make it quick and easy for most individuals to order and self install a gazebo in their own backyard or garden area.
Prefab gazebo kits from Alan's Factory Outlet come with all of the tools and pieces that you will need to make your backyard gazebo dreams come true. Alan's Factory Outlet even offers free delivery to customers in many states with the purchase of our Amish gazebo kits. Please refer to the illustrations below to see more details about the different varieties of Amish gazebo kits that are available for purchase from our catalog of gazebo and pergola items.
Alan's Factory Outlet gazebo kits are all precut, and the kits arrive at your home conveniently bundled into sections. All of the necessary hardware as well as detailed instructions are included with each gazebo kit. Our gazebo kits can be purchased in your choice of pressure treated wood or maintenance free vinyl. Most of our gazebo kits can be assembled in the space of just one day with the cooperation of two people. Assembly from prefab gazebo kits for larger gazebo sizes may take up to two days total to put together at your home.
Alan's Factory Outlet is happy to offer free delivery on gazebo kits to the following 37 states: AL, AR, CT, DE, DC, FL, GA, IA, IL, IN, KS, KY, LA, MA, MD, ME, MI, MN, MO, MS, NC, ND, NE, NH, NJ, NY, OH, OK, PA, RI, SC, SD, TN, TX, VA, VT, WI and WV.
Amish wood gazebo kits and vinyl gazebo kits are packaged for easy assembly. Alan's Factory Outlet Amish gazebo kits are delivered by tractor-trailer curbside to your home. As the customer, it will be your responsibility to unload the gazebo kit from the tractor trailer delivery vehicle. We recommend that it is best for you to have a second person available curbside at the time of your gazebo's delivery to help you unload the gazebo kit.
At Alan's Factory Outlet, all of our gazebo kits are available in either the Octagon or Oval design of your choice. Each gazebo kit has been custom built for easy installation. This photo shows an example of how your Gazebo kit will arrive at your home on a wooden pallet with the pieces ready for assembly.
Amish gazebo kits are delivered nationwide in the USA
If prefab gazebo kits don't sound like the best option for you, consider investing in a gazebo that has already been assembled for you. Gazebos are available fully assembled which are delivered to VA and WV. As a courtesy to our fellow Virginia residents, we also offer free delivery to 21 local counties in Virginia on all of our gazebo kits.
12' Double Roof Wood Gazebo Kits
We can also deliver our gazebo kits to any of the lower 48 states in the USA.
Pergola Kits are also available for purchase. Alan's Factory Outlet offers free delivery, with no hidden charges or fees, on all gazebo kit and pergolas to Alabama, Arizona, Arkansas, Connecticut, Delaware, District of Columbia, Florida, Georgia, Illinois, Indiana, Iowa, Kansas, Kentucky, Louisiana, Massachusetts, Maryland, Maine, Michigan, Minnesota, Mississippi, Missouri, Nebraska, New Hampshire, New Jersey, New York, North Carolina, North Dakota, Ohio, Oklahoma, Pennsylvania, Rhode Island, South Carolina, South Dakota, Tennessee, Texas, Vermont, Virginia, West Virginia and Wisconsin.
Call today to find out whether our Amish gazebo kits are right for you!


text:
Let's Play Bartender! Shop These 12 Fun Bar Accessories
Your bar has never looked cooler.
Before you mix that next cocktail, make sure you have the right barware to do it in style. These 12 amazing finds will help take your home bar setup — and your mixology chops — to the next level!


text:
Jeff Carlson
iMovie 4 and iDVD 4 for Mac OS X : Visual QuickStart Guide (VISUAL QUICKSTART GUIDES)
Книгу можно купить в интернет-магазинах:
· OZON.ru 1218р. [Проверить наличие]
ISBN: 0321246632Издательство: Pearson Education
Год издания: 1905
Book Description One makes cinematographers out of the masses; the other gives the masses a medium on which to distribute their masterworks--and that's just the beginning of what Apple's iMovie 4 and iDVD 4 are capable of. This task-based guide is the key to using them effectively and creatively. In friendly Visual QuickStart fashion, this volume uses step-by-step instructions and loads of illustrations to get you up to speed quickly in the process of making movies with iMovie 4 and creating Hollywood-quality DVDs on which to share them (as well as photos, music, and more). You'll find all the basics covered here--from shooting and capturing footage, viewing clips, and working in the iMovie timeline to dragging and dropping iMovies into new iDVD projects and adding GarageBand-created songs to your newly created DVDs. You'll also find detailed explanations of all of the programs' niftiest new features, including iDVD's more than 20 new themes (from Wedding to Drive In!) and iMovie's...


text:
Your PDF has successfully downloaded.
You may be interested in finding more content on these topics:
You are not currently logged in.
Access JSTOR through your library or other institution:
Stuart McCook
Vol. 104, No. 4 (December 2013), pp. 773-776
Published by: The University of Chicago Press on behalf of The History of Science Society
Stable URL: http://www.jstor.org/stable/10.1086/674943
Page Count: 4
- Item Type
- Article
- Thumbnails
- References
We're having trouble loading this content. Download PDF instead.
ABSTRACTThe "global turn" in the history of science offers new ways to think about how to do national and regional histories of science, in this case the history of science in Latin America. For example, it questions structuralist and diffusionist models of the spread of science and shows the often active role that people in Latin America (and the rest of the Global South) played in the construction of "universal" scientific knowledge. It suggests that even national or regional histories of science must be situated in a global context; all too often, such histories have treated global processes as a distant backdrop. At the same time, historians need to pay constant attention to the role of power in the construction of scientific knowledge. Finally, this essay highlights a methodological tool for writing globally inflected histories of science: the method of "following."
© 2013 by The History of Science Society. All rights reserved.


text:
Perfect & Cosy Apartment
Find Hotel Rates
Recent Searches
Wego searches multiple travel sites so you can find and compare the best rates.
Perfect & Cosy Apartment Hotel Reviews
Based on reviews from across the web.
Perfect & Cosy Apartment Hotel Details
Check-in: 14:00
Check-out: 12:00
Situated in Sofia centre, 500 metres from Vitosha Boulevard, Orange Flower Apartments offers self-catering accommodation with free WiFi, free luggage storage and a garden. Parking spaces can be found within a 3-minute walk and Serdika Metro Station is 500 metres away. The air-conditioned apartments and studios come with a well-equipped kitchenette, a flat-screen TV with satellite channels and a living area. They also feature a bathroom with a shower and a hairdryer. Several restaurants, bars and shops can be found within a 5-minute walk. St Nevski Cathedral and St Nedelya Church are both reachable within 1.5 km.


text:
Pastor Dieugrand Jacques Found Guilty of Molestation, Said He Did It to "All My Girls"
Dieugrand Jacques, a former pastor of the New Alliance Haitian Church in Boynton Beach, was found guilty by a jury yesterday of molesting a 15-year-old female churchgoer during a counseling session in 2007.
Another girl testified during the trial that she went to Jacques to confide in him about a previous molestation in her life, so Jacques told her "he needed to determine the extent of the molestation" -- which apparently meant having sex with the girl in the church, according to the Palm Beach State Attorney's Office.
According to a probable-cause affidavit, Jacques -- who was married -- brought the 15-year-old victim over to his house for "counseling" about the girl's relationship problems with her boyfriend.
Instead of the "counseling," Jacques told the girl to sit on his lap and take her pants off, and when she began to get nervous, Jacques said, "Don't worry, I do this to all my girls," according to the report.
Upcoming Events
Florida Panthers v Dallas Stars
TicketsSat., Mar. 4, 7:00pm
Elite Bash Nationals 2017
TicketsSun., Mar. 5, 10:00am
Florida Panthers v New York Rangers
TicketsTue., Mar. 7, 7:30pm
Florida Panthers v Minnesota Wild
TicketsFri., Mar. 10, 7:30pm
Jacques proceeded to molest and kiss the girl before getting back in the church van and driving her back home, police say.
A few months later, the girl told her boyfriend about the incident, and they both confronted Jacques.
Jacques either denied or didn't answer the boyfriend's questions, and he stopped attending the church -- which is where the cops stepped in.
Police had the girl call Jacques and ask why he denied what he did, and Jacques responded, "You are a very nice little girl. At the time, you just came to our church and I met you. I hope you stay the same way you were and God will do the rest." Jacques hung up twice after the girl attempted to ask him questions about the incident, the report says.
The cops interviewed Jacques, who denied molesting the girl but admitted to the "kissing thing" with the girl, and said he thought the girl made up the molestation story to get her boyfriend away from the church, police say.
That's when one of the girl's friends came forward to police and told them Jacques had sex with her in the church when she was 14 years old, according to the report.
Faced with that allegation, Jacques said it couldn't have happened because he was out of town at the time -- which, based on receipts from Jacques' trip, police found to be untrue.
A detective from the Palm Beach County Sheriff's Office wrote in the report that police were able to apply the Williams Rule in the case due to the similarities in the cases to corroborate evidence of the crime, and he was arrested in January 2010.
Jacques' sentencing is scheduled for October 21, where he faces a maximum sentence of 15 years in prison.
Follow The Pulp on Facebook and on Twitter: @ThePulpBPB. Follow Matthew Hendley on Facebook and on Twitter: @MatthewHendley.
Get the Things to Do Newsletter
Find out about upcoming events and special offers happening in South Florida.
In Case You Missed It
Upcoming Events
2017 Delray Beach Open
TicketsSun., Feb. 26, 1:00pm
Florida Panthers v Ottawa Senators
TicketsSun., Feb. 26, 7:30pm
Florida Panthers v Carolina Hurricanes
TicketsTue., Feb. 28, 7:30pm
Nova Southeastern University Sharks Womens Basketball
TicketsWed., Mar. 1, 7:00pm
Sponsor Content


text:
Books, notebooks & stationery Barcodes, stickers & labels Address labels
Address labels
Address Labels
Phoenix Corporation
Plot No. 8, A- 1- 2, Upper Floor, Girdhar Industries Society 2 Near Navjivan Circle, Udhana, Magdalla Road, , Surat, 4213, Gujarat, India.
Address Labels
Kallu Box & Sons
Shop No. 108/112 Ustad Building Ground Floor Shop No. 1 Opposite Khara Kuwa Zaveri Bazar, Zaveri Bazar, Mumbai, 400002, Maharashtra, India.
Return Address Label
Glossy International
No. 206 Reti Street Near Harish medical, , Moradabad, 6237, Uttar Pradesh, India.
Address Labels
Sunshine Graphics
No. 159/ B, B. B. Ganguly Street, 1st Floor, , Kolkata, 1633, West Bengal, India.
Address Labels
New Delhi
Nirmal Stickers & Labels Private Limited
Nirmal House, No. J-4/21, Rajouri Garden, Rajouri Garden, New Delhi, 110006, Delhi, India.
Address Labels
Art Printers
No. 53 A, Surya Sen Street, Room No. 144, 1st Floor, , Kolkata, 8313, West Bengal, India.
Address Labels
Kunal Traders
no. 31 R. R. Sarani, Amhrest Street, , Kolkata, 8313, West Bengal, India.
Address Labels
Ascent Multiforms Pvt. Ltd.
No. 69 C, Sector F, Sanwer Road, Industrial Area, Industrial Area, Indore, 2870, Madhya Pradesh, India.
Address Labels
Subam Exports
No. 6/198 Kurumanthottam Uthukuli Road Vijayamangalam, , Erode, 2800, Tamil Nadu, India.
Printed Address Labels
Phinex Arts & Graphics
No. 34 /1, Shital Nagar, No. 2, Mumbai - Banglore Highway, Dehu Road, Dehu Road, Pune, 3178, Maharashtra, India.
Return Address Labels
Manjunatha Process
Adugodi, Bangalore, Bangalore, Bengaluru, 3898, Karnataka, India.
Inkjet Label
Swastik Lamicoat
No. 331/A, Sarita Industrial Estate, W. E. Highway Dahisar Checknaka, Dahisar East, Dahisar East, Mumbai, 744, Maharashtra, India.
Barcode Label
Signor Hisec Packaging Pvt. Ltd.
C-40, Sector 63, Sector 63, Noida, 8078, Uttar Pradesh, India.


text:
With Instructables you can share what you make with the world, and tap into an ever-growing community of creative experts.
Tell us about yourself!
Build a Bicycle Sidecar
The (Mason) Jar-inator!
The Multi-Axis Camera Mount
Cedar paneling for van interior
Pallet Shelves. no big tools
Altoids Bike Headlight On The Cheap!
Join 2 million + to receive instant DIY inspiration in your inbox.
© 2016 Autodesk, Inc.


text:
In this episode, Alex learns different words and phrases about travel…
Here are some useful words and phrases about animals from the episode…
Click the play button to hear the pronunciation
bus = autobus
car = samochód
railway/train = kolej/ pociąg
tram = tramwaj
ferry = prom
platform = peron
departure = wyjazd, odjazd (wheeled), wylot, odlot (by air)
arrival = przyjazd (wheeled), przylot (by air)
Does this train stop in… = Czy ten pociąg staje w…?
airport = lotnisko
gate = brama
Taxi! Please take me to… = Taxi!/Taksówka! Proszę mnie zawieźć do …
I have lost my ticket! = Zgubiłem/Zgubiłam swój bilet…
timetable = rozkład jazdy
entrance/exit = wejście/wyjście
When can I hear Learn Polish?
Subscribe to Learn Polish for free on iTunes now to make sure you never miss an episode.


text:
Division of Research and Graduate Studies, Fresno State
What's New?
GRADUATE AND POSTBACCALAUREATE ADMISSION: Fall 2017
The Fall 2017 application filing period is October 1, 2016 through June 1, 2017. Graduate programs may have different program deadlines. Check with your respective program to confirm filing deadlines. Please review our program admission criteria and apply online at www.csumentor.edu
California Pre-doctoral Scholarship Program: Applications now being accepted for 2017-18 Sally Casanova Scholarship. Fresno State deadline to apply is February 10, 2017. Details
California Doctoral Incentive Program (CDIP): Applications for CDIP are now being accepted. Fresno State campus deadline is February 10, 2017. For information and to apply visit CDIP
We'll meet for breakfast in the Vintage Room on Thursday, February 16, 8 a.m. - 10 a.m. Register here.
Washington Monthly ranked Fresno State fourth in the nation among master's degree-granting universities and first in the California State University system.


text:
Is Bhuvanam Logyistics incorrect or missing key business information? Update your Hotfrog listing today.
Contact details
Are these details correct?
Hotfrog INDIA provides information regarding Bhuvanam Logyistics in Chennai Tamil Nadu. Bhuvanam Logyistics is located at SMJ Parry, s Plaza 2nd floor 28 Second Lane Beach, Chennai Tamil Nadu 600001 and provides logistics solutions services. Contact them on +91 44 4235 8013 or by visiting them on their website http://www.bhulog.com.
Is Bhuvanam Logyistics in SMJ Parry, s Plaza 2nd floor 28 Second Lane Beach, Chennai Tamil Nadu 600001 your business? Claim your listing and attract more leads by adding more content, photos and other business details.
We have more logistics solutions services in Chennai Tamil Nadu available on Hotfrog INDIA. You can update your search for Chennai logistics solutions by location, keyword or service options.
SOMASUNDARA MUDALI ST PARRYS chennai Tamil Nadu 600001
TEYNAMPET chennai Tamil Nadu 600018
ANNA NAGAR WEST chennai Tamil Nadu 600040
15TH CROSS STREET, HINDU COLONY, NANGANALLUR chennai Tamil Nadu 600061
Small Business Hub
Sharing tips, ideas and advice to help grow your small business.
Your profile without ads
Have you considered upgrading to Hotfrog AdVantage? No competitor advertising means exclusive focus on your business. You take centre stage.
Create your free Hotfrog business profile
Follow Hotfrog on:
Share on:
Hotfrog Small Business Hub


text:
Strong trend continues for Austrian plastics machinery
The export-oriented Austrian plastics and rubber industry enjoyed a pretty handsome year in 2015, as production value of the machinery sector grew 11% last year.
Total export value of Austrian plastics machinery sector amounted to €1.5 billion, with China being its third largest destination.
"What I heard at the end of last year was that the order books were very good, so they are also expecting a promising first half this year," said Christina Schösser, Consul (Commercial Affairs) of Austrian Consulate General Shanghai.
As the European economy remains sluggish, Austria has to look for new opportunities elsewhere.
"In general 75% of our country's export goes to the European Union, so we need to look for new markets, whether it is new applications or other overseas countries," Schösser said.
The is why a lot of Austrian companies were attending CHINAPLAS, according to her, as plastics consumption began to grow exponentially in Asia.
Packaging, she says, is one of the key drivers because plastics packaging accounts for 30% of total plastics consumption in developed countries, but it is only less than 10% in China.
"Of course, in addition to staying close to the market trends, we also have to stay advanced in terms of technological development," Schösser emphasized.
The strategy to promote greener, energy efficient and high quality production in China plays to the strength of the Austrian plastics industry , as "we have a lot to offer" in the course of its development and "we will make sure we can support with Austrian technology".
She also believed that the "Made in China 2025″ initiative will allow Chinese and Austrian companies to grow together as partners and potentially penetrate third markets.
Website: www.adsalecprj.com


text:
Rift of Perseus
58,034articles in progressAdd New Page
|Rift of Perseus
|Time rift
|The Quantum Archangel
The Rift of Perseus was the location of the first strike in the Millennium War. It was here that the Dæmons stopped the Mad Mind of Bophemeral from using a dark matter cloud in the rift. (PROSE: The Quantum Archangel)


text:
BigOven Pro required (try it free)
Notice a categorization error? Let us know by clicking [alert editor] on the recipe page, in the ingredients box.
Skewered Honey-Balsamic Chicken
Spicy Baked Chicken Wings
Smoked Salmon Wraps
Creepy Ginger Ale with Spooky Ice Cubes
Spinach and Strawberry Salad with Pepper Vinaigrette
Bread Cones
Mozzarella and Roasted Red Pepper Boo-schetta
Brew-Ha-Ha Punch
Brown Bag Apple Pie
Party Red Sangria
German Potato Salad
Pizza Stuffed Pasta Shells
Citrus Breakfast Cake
Lobster Macaroni & Cheese
Quick and Easy Party Meatballs
Beef Satay
Marinated Feta and Olive Skewers
Ice Cream Profiteroles
Stuffed Mushrooms with Artichoke & Fig (Vegetarian)
Cedar-Planked Salmon


text:
Kwara Poly Admission List 2015 is Out
This is to inform all aspirants of Kwara State Polytechnic that their Post UTME admission list 2015 is out.
Candidates can check their admission status via this link: kwarapoly.waeup.org/applicants/check status
- Enter your Applicant ID and Password (Surname) in the spaces provided.
- Enter the figures on the Captcha Box in the space provided.
- Click on "Submit" to access your admission status.
» Get your Original JAMB Admission Letter : Click here to Apply!
» Get your JAMB Result Slip with your passport on it: Click here to Apply!
» Buy & Download Original Post UTME Past Questions and Answers (Up-to-Date):
myPastQuestion.com Products and Services:
- Post UTME Past Questions = from N1,000
- JAMB Past Questions = N1,500
- WAEC/NECO Past Questions = N500 per subject
- Junior (JS33) Past Questions = N1,000 per subject
- All Scholarship Past Questions = N2,000
- JUPEB Past Questions = N2,000
- NDA Past Questions = N2,000
- NPA Past Questions = N1,500
- Job Interview Past Questions = N2,000
- JAMB Original Result = N2,200
- JAMB Admission Letter = N2,200
- JAMB Result Checker Card = N2,000
- WAEC Result Checker Card = N800
- NECO Result Checker Card = N800
- Post UTME Success Guide (eBook) = N1,000
- JAMB CBT Success Guide (eBook) = N1,000
- Creation of Blogs = N10,000
AD: Make Money Online: Turn N12,500 into N50,000 with Ultimate Cycler in One Week. Click Here to Learn More
Read Also


text:
Picture: Chrysta Bell - David Lynch presents Chrysta Bell at Le Poisson Rouge - New York, New York, United States - Friday 22nd February 2013
David Lynch's son Riley is following in his filmmaker father's footsteps after launching a Kickstarter.com page to fund a new movie project.
The School for the Art Institute of Chicago student has written the untitled film project and plans to direct it with two friends, but he needs $5,000 (£3,125) to make a start on it, and he has taken to the fundraising website to ask for donations.
He explains, "The film centers on a young man living in poor conditions in a dark city. He is unable to recall his dreams. Previously tapping these dreams as a source for ideas, his budding career as a writer dwindles to nothing. He has a profound love of plant life and nature.
"In his depression over his failed career, his love of alcohol, nicotine, and caffeine spirals out of control. He retreats from this city and relocates to a home in a sunny location. The home he has come to belongs to an elderly woman, whose relation to the man is unknown, though it becomes clear that this is a place of healing and mental rehabilitation.
"The man spends his days writing and working in the garden with the woman. Her ways are strict and she forbids him to fall upon any of his vices, but there is a deep tenderness to the woman. This love that the woman emanates begins to brush off on the man after hours spent in the garden."
Riley's dad is already a fan of the project and took to Twitter.com on Monday (25Feb13) to support his son, writing, "Dear Twitter friends, I just found out my youngest son Riley has a Kickstarter page. Please check it out... I really loved the first film he shot, Four and a Half Days, which he mentions on his page. I'm gonna donate some money myself because I really wanna see what he does next."
At press time, Riley Lynch's Kickstarter.com fund had topped $680 (£425).
Inland EmpireTrailerA story of a mystery…A mystery inside worlds within worlds…Unfolding around a women…A women...
To those who thought that Terry Gilliam's gothic frenzy Tideland was an auteur who had...
[In the spirit of competition, we present a rare filmcritic.com double review on David Lynch's...


text:
In January, it had to be "put back on track". By spring, it had to be "resurrected". By autumn, it had to be "salvaged". By year's end, even the BBC World Service's correspondent in Jerusalem was at last forced to admit it was "dying".
Variously regarded as a railway train, a buried corpse, a sinking Titanic - anything rather than admit the truth - the Oslo Agreement was in reality dead the moment it was signed. The Wye Agreement, dutifully signed by Benjamin Netanyahu and Yasser Arafat in October, was merely part of the wake.
When the Israeli Prime Minister formally declared Wye "suspended" just before Christmas, it was an acknowledgment that the game was up. There would be no more talks with the Palestinians - but of course, that didn't stop further Jewish settlement-building on Arab land, the continued confiscation of Palestinian identification papers and the continued destruction of Palestinian homes.
By the year's end the Palestine Liberation Organisation leader ruled over a garbage-tip Bantustan of slivered towns and refugee camps with the help of 11 secret police forces, prison torture, censorship and total disdain for his people's would-be democratic parliament.
The Middle East peace was supposed to have been founded on UN Security Council Resolution 242 of 1967, which called for Israeli withdrawal from occupied Arab land in return for the security of all states (including Israel) in the region.
Oslo allowed Israel to renegotiate 242, to decide which bits of occupied land it might "give" to the Palestinians and which bits it would keep. The occupied West Bank was henceforth to be called "disputed", which meant the whole place was up for grabs. Which is why the Israelis started building a new settlement at Jebel Abu Ghoneim east of Jerusalem - now called by its Hebrew name of Har Homa - on the basis that Oslo didn't say they couldn't build more settlements on Arab land.
And which is why Mr Netanyahu's new Foreign Minister, fresh from securing the Wye Agreement, told the Jewish settlers in the West Bank to "seize every hilltop they can". Each Palestinian objection was treated as an attempt to destroy the "peace process". When Mr Arafat suspended peace talks because of the Jebel Abu Ghoneim/Har Homa settlement, he was accused of wanting to abrogate peace. When Palestinians protested violently against further settlements, they were told they were trying to kill peace.
When Mr Netanyahu declared Jerusalem the unified and eternal capital, he told the Palestinians they had no right to take away Israel's sovereign capital - even though the future of Jerusalem, like settlements and Palestinian refu-gees, was supposed to be part of the final status talks in the Oslo agreement next May.
But when Mr Arafat, sick and humiliated, scorned by increasing numbers of his own people, suggested he might declare a Palestinian state if there was no May settlement, the Israelis turned on him vengefully.
First, the Israelis said, the Palestine National Council had to renounce - for the second time - the clause in its charter that calls for the destruction of Israel. And only hours before it obediently did so, Israel produced more conditions: no more threats to declare a Palestinian state or violent protests against the peace accord.
Inevitably, the violent Palestinian Hamas movement, still demanding an Islamic state for all of Palestine, continued its war against Israel. "Terrorists," screamed the Israelis. When Jewish settlers shot down Palestinians they were called "extremists" or "zealots". Double standards have also been a foundation of the Oslo Agreement.
But the "peace process" is not about fairness or justice; it revolves around just how little the Palestinians will accept in return for being a client kingdom of Israel. The Wye Agreement - presided over by thefickle leadership of Bill Clinton - restated all the Oslo conditions that Mr Netanyahu and Mr Arafat had failed to meet but added a new pro-Israeli clause, which heaped the blame for all violence on to Palestinians.
Mr Arafat was enjoined to hunt down "terrorists", "terrorist cells" and the "terrorist structure" of "terror groups" - and he could forget the "terrorist" violence of Israeli settlers over whom there was to be no control - with the help of the CIA. Palestinian jails began to fill up again with "Islamists" and the PLO's torturers went back to work with the CIA's blessing.
Mr Clinton used the opportunity of "saving the peace" to embellish his own failed statesmanship, accepting almost all Israel's demands - even considering the release of an Israeli spy who had been paid to steal American military secrets - while rewarding Mr Arafat with a visit to Gaza.
For most of the year, the Palestinians burnt American flags. In December, they paused to fly the US flag over Gaza to greet President Clinton as he stepped on to the soil of "Palestine". But within four days - once they realised that the "friend" of Palestine was abandoning them again - the Palestinians burnt the American flag once more.
Even before Mr Clinton had left the Middle East, Mr Netanyahu refused to carry out further troop withdrawals that Israel had promised and then suspended the Wye Agreement altogether - no objections from the Americans, of course.
Unable any longer to balance his refusal to abide by the terms of the Oslo accord with the even more bellicose policies of extremists in his cabinet, Mr Netanyahu called an election, which will suspend all relations with the Palestinians for more than three months - an effective death notice for Oslo.
Syria, which saw through the facade of Oslo from the start, still sticks to Resolution 242 as a foundation of peace - and the return by Israel of the occupied Syrian Golan Heights. And so does Lebanon, where Syrian- supported guerrillas from the Hizbollah movement continue to attack Israeli troops occupying the southern part of Lebanon - and whose withdrawal was supposed to have been completed in 1978 under the terms of UN Resolution 425.
Israel condemns these "terrorist attacks", demanding yet more conditions that do not appear in the UN resolution.
If Labour takes power in the April Israeli elections, say the optimists, maybe the "peace process" will be put back on track again. But the dead cannot be resurrected and by April, the explosion that all America's friends in the region - Hosni Mubarak of Egypt, King Hussein of Jordan and King Fahd of Saudi Arabia - have warned of may well have come to pass.
- More about:
- Middle East
- Syria
- Yasser Arafat


text:
A Republican congressman has proposed a new plan that aims to slash 10 percent of the federal workforce to avoid the first year of sequestration cuts to the Defense Department.
Rep. Howard "Buck" McKeon (R-Calif.) introduced Dec. 14 the Down Payment to Protect National Security Act that would reduce one-tenth of the government workforce over 10 years by hiring only one federal employee for every three who retire. The legislation aims to apply the savings to pay for one year of sequestration, for defense and non-defense categories.
Related story:
What does sequestration really mean for DOD?
The failure of the so-called supercommittee to identify $1.2 trillion dollars in savings over 10 years triggered automatic sequestration that would cut military funding by $500 billion.
"The troops simply don't have any more to give," said McKeon, who also serves as chairman of the House Armed Services Committee. "It is time we address our debt crisis sensibly, by literally shrinking the size of government. At the same time, we will meet our commitment to saving $1.2 trillion over 10 years. That should be enough to persuade the commander in chief to put politics aside and protect our troops."
One of the bill's co-sponsors, Rep. Marsha Blackburn (R-Tenn.), said along with attrition and extending the federal pay freeze for another three years, the act could save $234 billion.
"This legislation is another in a long line of pro-defense, common-sense legislation that works to protect our strength and position in the world while making substantive and common-sense cuts to the expanding bureaucracy," she said.
But the bill, which addresses only the first year of sequestration, is unlikely to get President Barack Obama's signature. In November, he vowed to veto any measure that would decrease the impact of sequestration.
"There will be no easy off-ramps on this one," he said then. "We need to keep the pressure up to compromise, not turn off the pressure."
But those threats fell on deaf ears on some of the Republican lawmakers, who questioned the validity of Obama's veto pledge. "I cannot conceive of a commander-in-chief threatening to veto a bill that would save the Department of Defense from ruin," said Sen. Lindsey Graham (R-S.C.), according to reports.
About the Author
Camille Tuutti is a former FCW staff writer who covered federal oversight and the workforce.
E-Mail this page
Printable Format
Advanced Search
Save the date for 28th annual Federal 100 Awards Gala.
March 30, 2017
The new $7.5 billion SETI acquisition program aims to rapidly contract innovative technologies and solutions across the Defense Department.
The Department of Commerce is revising its confidentiality agreement for statistical data survey respondents to reflect the fact that the Department of Homeland Security could see some of that data if it is captured by the Einstein system.
In a Feb. 17 memo, Defense Secretary Jim Mattis told senior leadership to establish teams to look for duplication across the armed services in business operations, including in IT and cybersecurity.
State election officials had more questions than answers after a Department of Homeland Security presentation on the designation of election systems as critical U.S. infrastructure.
The government desperately needs younger talent to replace an aging workforce, and experts say that a freeze on hiring doesn't help.
The Department of Veterans Affairs will test an internally developed scheduling module at primary care sites nationwide to see if it's ready to service the entire agency.
I tend to agree with Erich Darr's comment below. By the way, I've got pay-banding civil servants, GS civil servants and contractors to rate-on/write monthly reports...and we need all of them for daily operations, let alone ongoing and impending projects. We've got additional duties and already put in the time...just to try and keep up. CAC reader at home, Blackberry, long work days, eat lunch at desk while working...this is today's theme. We're already stretched, stressed, etc. I don't see how you can cut more (e.g. broadly across the board). Each situation should be evaluated independently for potential cuts/savings/efficiency. Some of us also donate annual leave each year because we couldn't or chose not to utilize it due to work-load. Sick leave piles-up (can't donate), yet I can't remember when I last took sick leave (years ago?)...or maybe for one or two doctor's appointments per year (usually just an hour or so, then get back to the office). Many things can't be delegated, therefore a smaller amount of employees/supervisors/experts are suddenly becoming 'essential' without anyone even recognizing this fact. Process-mapping; paying analysts to 'discover' problems and new ways to address them; this can also be a waste of time and money (a.k.a. Rand, etc.).
But try and tell a Congressman how many staffers he can have rather than letting him mange to an office budget and then listen to the screams.
I am constantly amazed at the lack of wisdom displayed by Congressmen.
I really want to weep for the 3 federal workers who "oversee" 30 contractors. Clearly the writer has never had to supervise employees in the private sector. It's quite possible that one supervisor will keep tabs on 30 employees. So I guess, losing one of those 3 would mean that the ratio would be 1:15. If you write a decent contract, and treat contractors with respect, and work well with the contractor project manager, I'm sure your horrendous tasks will seem lighter. Just remember, those contractors are laid off once the contract ends...but you go on, and on, and on with all your benefits. So sad.
You can't replace CS leaving the government using 1 hire for every 3 that leave across the board. You will end up with offices that don't have sufficient personnel to carry out their mission. Any cuts need to be managed. Managment needs to determine where cuts can be made. Thery're responsible for getting the job done. So it's their function.
(1) Anybody do the math? His numbers don't add up. If the census data is correct, cuts in non-defense areas will need to be closer to 13.5% (~284,000 personnel), slashing payroll about $18B/yr. Over ten years -- if all 284,000 quit immediately, the savings will only be about $180B. Unless he's factoring in no pay raises for the next ten years.....(2) And the contractors who replace us will cost how much? (3) How many contractors will be attrited in the next 10 years?
Show All Comments
8251 Greensboro Drive, Suite 510, McLean, VA 22102 | 703-876-5100
© 1996-2017 1105 Media, Inc. All Rights Reserved.


text:
This field is required
This field is requiredSign in
Remember meForgot ID or Password? Register now
Reregulation and the Regulatory Timeline
Peter Molk
Willamette University - College of Law
Arden Rowell
University of Illinois College of Law; Harvard Law School
March 16, 2016
Iowa Law Review, Vol. 101 (2016)
Regulation is often casually conceived of as functioning like a binary on/off switch: as if an area, issue, or industry is either regulated or not. While this binary model of regulation can be useful, it also decontextualizes regulatory decisions from their position in time, and thus obscures important ways in which regulators are constrained and incentivized by past and future decisions. As an alternative, we present a timeline approach to regulation. The timeline approach is particularly helpful in illustrating the ways that earlier regulatory decisions create vestigial effects for later related decisions, and for highlighting the informational advantage that later regulators have over regulators earlier in the timeline. These temporally contextualized qualities are especially important under conditions of reregulation, which arise when a previously deregulated issue is regulated once again. Applying insights from financial option theory, we show how lessons from the timeline approach can be used to enhance regulatory decision-making at all stages on the timeline.
Number of Pages in PDF File: 37
Keywords: regulation, deregulation, regulatory analysis, timeline, path dependency, intertemporal dependence, time orientation, regulation over time
JEL Classification: K40, K49, K20, K21, K23, K29, K32, K39, K00
Date posted: April 5, 2014 ; Last revised: June 17, 2016
Suggested Citation
Contact Information


text:
Hotels in Club Makokola
Hotel reservation
Club Makokola
Hotel rooms in Club Makokola
There are not so many hotel rooms in Club Makokola, just 4, still everyone can find an offer to suit his choice. The most common offers in this city are 3 и 4 stars, they count 2 out of 4, and their prevalent location is central district. According to our practice, it is the most profitable to book a hotel in the east of Club Makokola, as it is the location of the hotels with optimal cost and quality offers along with the cheap hotels. Taking into account the small size of the city, there is no need to dwell hotel reservation on the location: the road to the city center would take less then half an hour, so one can book a hotel in any district of Club Makokola. The most populated with hotels district of Club Makokola is the south, 100% of cheap hotel rooms are concentrated here. Club Makokola is a truly multifaceted city, here everyone can find a hotel of his choice: a business person, a young couple or a family with little children. In Club Makokola one can enjoy the beauty of Lake Malawi National Park. Moreover, there is a choice of 0 hotels, located within a walking distance from these attractions, however they might not be the cheap ones. Apart from all these, hotels in Club Makokola offer their customers 24 hours front desk service, laundry service, business centre and bar. Take a look at our selection of the cheap hotel rooms in Club Makokola to make a well-informed choice for your reservation!
Best hotels in Club Makokola
Hotels in Club Makokola are spread around the city within the distance of 72 kilometers. Those who are keen on antique should definitely fall in love with
Sunbird Nkopola Lodge
, the oldest hotel of Club Makokola, constructed in 1971. This hotel is located 9.1 km away from the city center. The most popular accommodations in Club Makokola is
Sunbird Nkopola Lodge
, 3 stars hotel located in a 9.1 kilometers from the city center.
The best hotels are here and now. Try them!
All cities in Malawi


text:
...The End is Nigh!
The Mayan Calendar heralds the end of the World this week, in fact on Friday. It ends earlier in Australia than the USA because we've been far badder than the Americans.
If the world ends on friday, I'd like to say that I've really enjoyed being a Red Bubbler and meeting so many wonderful photographers across the globe, It's been a HOOT!!!!
NASA says the world won't end, so perhaps I'm wasting my breath.
Others say it's just the end of an old order.
OMG…I've forgot to order the ham….I'm doomed.


text:
Patrols started their first fundraiser of the year. We are selling Dreamette gift cards. This is a really great opportunity for patrols to earn money towards the Washington D.C. trip. The cost of the gift cards are $10 and the value is $10. Dreamette will give us 50% profit so for every gift card we sell for $10 we get $5 back. Please let Ms. Corrie or Mrs. Spence know if you would like to purchase any. We appreciate your support! Click here for more information.
The Band is Back!
Our school has launched a Chorus and Percussion Ensemble for the 2016-2017 school year. We are excited to be able to provide this type of Arts enrichment to our 4th and 5th grade students.
In order to expand this program and continue to create musical opportunities we are looking for gently used instruments (Violins, Ukulele's, Drums, Flutes, Trumpets, etc.). If you can donate one of these items we would truly appreciate it! Please drop off your donation in the main office!
Click here for more information.
In an effort to promote reading and everyday literacy in the real-world, the department is excited to announce the launching of the Just Take 20 literacy campaign.
o Just Take 20 will provide Florida families with practical, easy-to-implement reading activities they can do with their children to add 20 minutes of reading to their day.
o The centerpiece of the Just Take 20 program is our custom web application, www.JustTake20.org.
o The website is accessible from a family's computer, tablet or smart phone and allows families the opportunity to create a customizable literacy plan tailored to their child's grade level and needs.
o Each family can build its own family profile, score points and earn badges while having fun with various reading and writing activities. Each activity includes tips for struggling readers and is provided in English, Spanish and Creole.
o The campaign also includes a portal for educators to download materials that will engage students and their families in literacy learning.
o The Just Take 20 campaign is available free to all Florida families and K-12 public schools. We hope you will visit www.JustTake20.org.
Parents, it is time to turn in your BoxTops, Campbell's Labels (Labels for Education), Community Coffee, or Tyson A+ labels! Please send them to school with your children to turn in to their teachers by November 1st! Let's try to make it a record breaking year! See flyer here!
Extended Day Registration forms now available here.
We at Duval County Public Schools want to see every student inspired and prepared for success in college or a career, and life.
8:45 AM - 9:00 AM Flag Raising
9:00 AM - 10:00 AM Discover Duval - Ft. Caroline Middle
6:00 PM - 7:00 PM SAC Meeting
8:00 AM - 9:00 AM Early Dismissal


text:
Choose and Focus
Japanese Business Strategies for the 21st Century
By (author) Ulrike Schaede
Format: Hardback
Normal Price: $59.99
Your Price: $53.99 AUD, inc. GST
Shipping: $7.95 per order
You Save: $6.00! (10% off normal price)
Plus...earn $2.70 in Boomerang Bucks
Availability: Available, ships in 7-10 days
Choose and Focus by Ulrike Schaede
Book DescriptionBetween 2002 and 2008, Japan's economy saw constant expansion, a record among the world's advanced economies and Japan's longest period of economic growth since World War II. This remarkable achievement came about because of a transformation of Japanese business practices. This transformation was guided by strategies that enabled Japan's leading corporations, previously diversified to an exceptionally high degree, to become leaner, more nimble, and more competitive at home and in the global economy. In Choose and Focus, the first in-depth account of this strategic inflection point in Japanese business, Ulrike Schaede argues that the emerging practices and attitudes have created a New Japan. Drawing on profiles of several corporations, including Panasonic, Takeda and Astellas, Softbank, kakaku.com, and SBI E*Trade, Schaede explains how the fundamental principles of Japan's economy have been overturned. "Choose and focus" strategies, whereby corporations concentrate on core areas and spin off unrelated businesses, have completely altered the strategic logic of Japan's previous industrial architecture. These surprisingly aggressive moves, Schaede finds, have created new market opportunities for start-up enterprises and foreign investors, as well as a wave of mergers, acquisitions, and hostile takeovers that have shaken Japanese companies out of complacency. Unlike the advances made by Japanese firms in the 1970s and 1980s, the current transformation is taking root in component and materials industries rather than in consumer products. Because of the relative obscurity of the changes and the overshadowing story of China's ascent, the Japanese corporate revolution has gone largely unnoticed among Western observers. Choose and Focus is required reading for anyone doing business in Japan or trying to understand how contemporary Japanese business works and how Japanese corporations have reinvented themselves to face the challenges-and realize the opportunities-of the 21st century.
Buy Choose and Focus book by Ulrike Schaede from Australia's Online Bookstore, Boomerang Books.
Book DetailsISBN: 9780801447068
(235mm x 156mm x 25mm)
Pages: 304
Imprint: Cornell University Press
Publisher: Cornell University Press
Publish Date: 17-Jul-2008
Country of Publication: United States
Books By Author Ulrike Schaede
Japan's Managed Globalization, Paperback (December 2002)
By bringing together case studies of eight critical issue areas, this text looks at Japan's responses to globalization and moves toward "permeable insulation". Topics covered include past practices and changes in policy, and Japan's compliance with and resistance to global trade rules.
Cooperative Capitalism, Hardback (June 2000)» View all books by Ulrike Schaede
This text examines the effect that a reduced role of government regulation in Japanese industry is having on the openness of Japanese markets to foreign competition. It argues that Japanese trade associations have adopted self-regulation policies, setting and enforcing their own rules.
» Have you read this book? We'd like to know what you think about it - write a review about Choose and Focus book by Ulrike Schaede and you'll earn 50c in Boomerang Bucks loyalty dollars (you must be a member - it's free to sign up!)
Facebook Page | Twitter | Google+ | Bulletin e-Newsletter | Blog | RSS
Become a Member | Book Lists | Recently Released | Coming Soon | Fast Delivery Books
Bestselling Books: Our Current Bestsellers | Australia's Hottest 1000 Books | Bestselling Fiction | Bestselling Crime Mysteries and Thrillers | Bestselling Non Fiction Books | Bestselling Sport Books | Bestselling Gardening and Handicrafts Books | Bestselling Biographies | Bestselling Food and Drink | Bestselling History | Bestselling Travel Books | Bestselling School Textbooks & Study Guides | Bestselling Children's General Non-Fiction | Bestselling Young Adult Fiction | Bestselling Children's Fiction | Bestselling Picture Books | Top 100 US Bestsellers
For: Schools | Organisations | Libraries | Publishers | Authors | Book Clubs | Bloggers | Affiliates
About Us | Contact Us | Help Desk | Security | Privacy | Terms of Use | Copyright
Phone: 1300 36 33 32 (9am-5pm Mon-Fri AEST) - International: +61 2 9960 7998 - Online Form
Address: Boomerang Books, 878 Military Road, Mosman Junction, NSW, 2088
© 2003-2017. All Rights Reserved. Eclipse Commerce Pty Ltd - ACN: 122 110 687 - ABN: 49 122 110 687
For every $20 you spend on books, you will receive $1 in Boomerang Bucks loyalty dollars. You can use your Boomerang Bucks as a credit towards a future purchase from Boomerang Books. Note that you must be a Member (free to sign up) and that conditions do apply.