Last week I attended IIW 17, the 17th meeting of the Internet Identity Workshop, which is held twice a year in Mountain View, California. As usual it was a great opportunity to exchange ideas and meet people, with its unconference format, its many sessions, its rotating demos, its wide space for discussions, and its two free dinners with free drinks.
For me, however, it was tinged with sadness, because of what has happened since the first IIW I attended, IIW 12, in May 2011. IIW 12 was the first IIW after the launch of NSTIC. IIW 17 was the first IIW after Snowden.
The NSTIC Strategy Document, released in April 2011 with a preface signed by President Obama, repeatedly emphasized the goal of enhancing privacy as a key element of the "vision" and "guiding principles" of NSTIC. The document explicitly stated that the Identity Ecosystem will use privacy-enhancing technology and policies to inhibit the ability of service providers to link an individual's transactions, thus ensuring that no one service provider can gain a complete picture of an individual's life in cyberspace. At the time, Facebook Connect was threatening to inject Facebook as a middleman in all or most Internet activities, and I was happy to see that the US Government seemingly wanted to prevent such a massive invasion of privacy; I even convened a session at IIW 12 proposing a technique for achieving the privacy goals of NSTIC in the short term. Little did I know that the government was busy building a massive surveillance apparatus that would give the government a complete picture of an individual's life in cyberspace, by means including bulk collection of data from service providers.
The Internet, given to the world by the US Department of Defense, was a world-wide forum for free-flowing, spontaneous exchange of ideas. Now the NSA, part of the same Department of Defense, has taken that away. People know that they are being tracked and identified when they post an anonymous comment. People know that their conversations are being recorded. Therefore people must think twice about they say.
I don't know if Congress will be able to rein in the NSA. It should be clear that spying on US citizens is unconstitutional, but some politicians think that it is the NSA's job to spy on everybody else in the planet. They don't seem to consider or care that, if the US Government insists on a God-given right to spy on everybody else, other countries or regions may develop their own national or regional networks, separated from the US Internet by an air gap.
Fortunately, the technical community has reacted strongly against the NSA's attacks on Internet privacy. And thanks to Snowden's revelations, many of the attack techniques are known. It may therefore be possible to protect Internet privacy by technical means.
The only intrinsic advantage of federated login is that it allows the identity provider to collect vast amounts of information about the user, since the identity provider learns not only the user's identity and/or attributes, but also what relying parties the user logs in to. The identity provider uses the information to sell ads that target the user accurately. We now know that the information is also shared with the government, which makes it available to thousands of analysts and IT personnel who use it for legal or illegal government or personal purposes.
There are no other intrinsic advantages to federated login.
The government and the identity providers argue that federated login is more secure than direct authentication to the relying party with username and password, but the opposite is true.
Security is supposedly increased because federated login reduces password reuse. But password reuse will not be substantially reduced unless a large majority of world-wide web sites force their users to use federated login with one of a small number of global identity providers such as Google or Facebook, something that will hopefully not come to pass.
Security is also supposedly increased because a large identity provider supposedly does a better job of protecting the user's password. But I don't know why a large identity provider would provide better protection against hackers, since large companies are not known to provide great security. And I do know that a password entrusted to a large identity provider may become available to thousands of employees of the government, of government contractors, and of the identity provider.. And the capture of a password used at an identity provider, which provides access to multiple web sites, is more damaging to the user than the capture of a password used at a single web site.
There is an alternative to authenticating to a web site with username and password that provides both security and privacy: namely, authentication with a cryptographic key pair automatically generated on the user's machine when the user registers with the site. The site stores the hash of the public key component of the key pair in its database, and uses it to locate the user's account when the user visits the site again and demonstrates knowledge of the private key component.
Another claimed advantage of federated login is that the user can register at a new site with a single click if logged in to the identity provider, any personal data required by the site being provided by the identity provider. This is a real advantage, but not an intrinsic one. The same benefit could be easily obtained by storing the personal data in the browser, and specifying a protocol by which the browser would supply selected personal data items to a web site upon demand by the site and approval by the user. Such a protocol would be much simpler than any of the federated login protocols and would provide more security and more privacy.
Yet another claimed advantage of federated login is that the identity provider could provide the relying party with a user's identity and/or attributes verified by an identity proofing procedure; however, such verified identity and/or attributes could equally well be provided by a certificate authority using a public key certificate (or by multiple authorities providing a combination of a certificate binding a public key to an identity and one or more certificates binding the identity to various attributes), without the certificate authority having to be informed of what relying parties the certificate is submitted to.
It is sometimes argued (cf. the NSTIC 101 session at last week's IIW) that using public key cryptography for authentication would be expensive and would require the user to carry a separate dongle or smartcard for every credential. This is not true. There is no need for special hardware to store a cryptographic credential, and if special hardware is desired for some reason, there is no need to use different pieces of hardware for different credentials.
Two sessions at IIW 17 gave me hope that Internet privacy is not a lost cause.
One of them was convened by Tim Bray of Google to report on the comments he received in response to a blog post arguing to developers that they should use federated login rather than login with username and password. The comments, which he referred to as a "bloodbath," showed that neither developers nor end-users like federated login. I hope that such pushback will eventually force companies like Google to give up on federated login.
The other one was convened by Kazue Sako of NEC to discuss anonymous credentials and their possible uses. The room was overflowing and the level of engagement of the audience was high, showing that technical people are interested in privacy-enhancing authentication technologies even if large companies are not.
In a recent tweet, Ian Glazer quoted Patrick Gallagher, director of NIST, saying at a recent White House meeting on NSTIC that the "current suite of technologies we rely on are insufficient".
SSL client certificates have failed to displace passwords for Web authentication since they were introduced 17 years ago.
Credentials in PIV cards have failed to displace passwords in federal agencies eight years after HSPD 12; a GAO report does a good job of documenting the many obstacles faced by agencies in implementing the directive, ranging from the fact that some categories of agency employees do not have PIV cards, to the desire by employees to use Apple MAC computers and mobile devices that lack card readers. I'm glad that we don't live in the Soviet Union and heads of agencies are not sent to the Gulag when they ignore unreasonable orders.
Third-party login solutions such as OpenID, as currently used on the Web, not only do not eliminate passwords, they make the password security problem worse, by facilitating phishing attacks. They also impinge on the user's privacy, because the identity provider is told what relying parties the user logs in to.
Social login solutions based on OAuth, e.g. "login with Facebook", worsen the privacy drawback of third party login by limiting the user's choice of identity providers to those that the relying party has registered with, and by broadcasting the user's activities to the user's social graph. Eric Sachs of Google said at the last Internet Identity Workshop that users participating in usability testing were afraid of logging in via Facebook or Google+ because "their friends would be spammed".
But some proponents of NSTIC do not seem to realize that. In a recent interview, Howard Schmidt went so far as to say that NSTIC is "low-hanging fruit", because "the technology is there". What technology would that be? In a blog post that he wrote last year shortly after the launch of NSTIC, it was clear that the technology he was considering for NSTIC was privacy-enhancing cryptography, used by Microsoft in U-Prove and by IBM in Idemix. He used the words "privacy-enhancing" in the interview, so he may have been referring to that technology in the interview as well.
But Idemix has never been deployed commercially, and an attempt at deploying U-Prove within the Information Cards framework failed when Microsoft discontinued CardSpace, two months before the launch of NSTIC.
Credentials based on privacy-enhancing cryptography, sometimes called anonymous credentials, have inherent drawbacks. One of them is that unlinkability makes revocation of such credentials harder than revocation of public key certificates, as I pointed out in a blog post on U-Prove and another blog post on Idemix. The difficulty of revoking credentials based on privacy-enhancing cryptography has led ABC4Trust, which can be viewed as the European counterpart of NSTIC, to propose arresting users for the purpose of revoking their credentials! See page 23, end of last paragraph, of the ABC4Trust document Architecture for Attribute-based Credential Technologies.
Another inherent drawback is that it is difficult to keep the owner of an anonymous credential from making it available for use online by others who are not entitled to it. For example, it would be difficult to prevent the owner of a proof-of-drinking-age anonymous credential (a use case often cited by proponents of anonymous credentials) from letting minors use it for a fee.
The mistaken belief that "the technology is there" explains why the NSTIC NPO has made little effort to improve on existing technology. Instead of requesting funding for research, it requested funding for pilots; a pilot is usually intended to demonstrate the usability of a newly developed technology; it assumes that the technology already exists. After the launch of NSTIC, the NPO announced three workshops, on governance, privacy and technology. The first two were held, but the workshop on technology, which was supposed to take place in September of last year, was postponed by six months and merged with the yearly NIST IDtrust workshop, which took place in March of this year. The IDtrust workshop usually includes a call for papers. But this year there was none: new ideas were not solicited.
The NSTIC NPO has been trying to "bring relying parties to the table". Ian Glazer dubbed the recent White House meeting the NSTIC Relying Party Event. The meeting was about getting a bigger table according to the NPO blog post on the event, and about "getting people to volunteer" according the Senator Mikulski as quoted by the blog post. Earlier, Jim Sheire of the NPO convened a session entitled NSTIC How do we bring relying parties to the table? at the last Internet Identity Workshop.
One idea mentioned in the report on the IIW session for bringing relying parties to the table is to target 100 "top relying parties" in the hope of creating a snowball effect. But it's not clear what it would mean for those 100 relying parties and any additional ones caught in the snowball, to "come to the table". What would they do at the table? What technology would they use? OpenID? OAuth? Smart cards? Information cards? Anonymous credentials? NSTIC has not proposed any specific technology. Or would they come to the table just to talk?
There are many millions of Web sites that use passwords for user authentication. The goal should be to get all those sites to adopt an identity solution that eliminates the security risk of passwords. Web site developers will do that of their own initiative once a solution is available that is more secure and as easy to deploy as password authentication.
While the technology is not there, various technology ingredients are there, and missing ingredients could be developed. It is not difficult to conceive a roadmap that could lead to one or more good identity solutions. But success would require a concerted effort by many different parties: not only relying parties and identity and attribute providers, but also standards bodies, browser vendors, vendors of desktop and mobile operating systems, vendors of smart cards and other hardware tokens, perhaps biometric vendors, and the providers of the middleware, software libraries, and software development tools used on the Web. When I first heard of NSTIC I hoped that it would provide the impetus and the forum needed for such a concerted effort. But that has yet to happen.
In February 2011 Microsoft discontinued CardSpace, a Windows application for federated login that was the deployment vehicle for the U-Prove privacy-enhancing Web authentication technology, which itself is said to have inspired the NSTIC initiative. Cormac Herley, a Microsoft researcher, and Paul van Oorshot, a professor at Carleton University, have written a paper entitled A Research Agenda Acknowledging the Persistence of Passwords that mentions the CardSpace failure and calls for research on traditional password authentication.
It blames the failure of attempts at replacing passwords on a lack of research on identifying and prioritizing the requirements to be met by alternative authentication methods.
It argues that passwords have many virtues, will persist for some time, and may be the best fit in many scenarios; and it calls for research on how to better support them.
I disagree with the first point but agree with the second.
Other single sign-on initiatives had obvious non-technical obstacles. OpenID required people to use a URL as their identity, something that could only appeal to the tiny fraction of users who understand or care about the technical underpinnings of the Web. CardSpace was a Microsoft product; that by itself must have provided motivation for all Microsoft competitors to oppose it; furthermore it only ran on Windows; and in order to support CardSpace relying party developers had to install and learn to use a complex toolkit. Again, no wonder CardSpace failed.
The non-technical obstacles faced by Passport, OpenID and CardSpace were due to lack of maturity of the Web industry. Such obstacles will slowly go away as the industry matures. Signs of maturity are appearing: there are now five major browsers that seem to understand the need for common standards; the World Wide Web consortium (W3C) has shown that it can bring them together to develop standards such as HTML5 and has already engaged them in identity work through the Identity in the Browser workshop and the identity mailing list that was set up after the workshop; and OpenID 2.0 no longer insists on users using URLs as their identities. Industries can take decades to mature, so it's not surprising that progress is slow.
As for passwords, I agree that they have virtues, will persist, and deserve research. There is actually research on passwords going on.
Password managers are an active area of research and development by browser providers and others.
There was a session on passwords at the last Internet Identity Workshop (IIW), called by Jay Unger, where Alan Karp described his site password tool, which can be viewed as an alternative to a password manager, where passwords for different sites are computed rather than retrieved from storage. The tool computes a high entropy password for a Web site from a master password and an easy-to-remember name for the site.
One of them describes a countermeasure against online password guessing that places a hard limit on the total number of guesses that an attacker can make against a password. Besides the traditional counter of consecutive bad guesses the countermeasure uses an additional counter of total bad guesses, not necessarily consecutive. The user is asked to change her password if and when this second counter reaches a threshold, rather than at arbitrary intervals.
The other describes a technique for password distribution, that allows an administrator to send a temporary password to a user, e.g. after a password reset, over an unprotected channel such as ordinary email. The administrator puts a hold on the user's account that allows no further access beyond changing the temporary password into a password chosen by the user. The administrator removes the hold only after being notified by the legitimate user that she has successfully changed the password, e.g. over the phone. In abstract terms, instead of relying on a confidential channel to send the password, the administrator relies on a channel with data-origin authentication to receive the user's notification.
Microsoft or anybody else who wants to increase password security can license either of these patents. You may use the contact form of this site to inquire about licensing.
There is an inherent problem with anonymous credentials such as those provided by Idemix or U-Prove: if it is not possible to tell who is presenting a credential, the legitimate owner of a credential may be willing to lend it to somebody else who is not entitled to it. For example, somebody could sell a proof-of-drinking-age credential to a minor, as noted by Jaap-Henk Hoepman in a recent blog post .
This problem is known in cryptography as the credential sharing or credential transferability problem, and various countermeasures have been proposed. In this post I will briefly discuss some of these countermeasures, then I will describe a new method of sharing credentials that is resistant to most of them.
A traditional countermeasure proposed by cryptographers, mentioned for example in , is to deter the sharing of an anonymous credential by linking it to one or more additional credentials that the user would not want to share, such as a credential that gives access to a bank account, in such a way that the sharing of the anonymous credential would imply the sharing of the additional credential(s). I shall refer to this countermeasure as the "credential linking countermeasure". I find this countermeasure unrealistic, because few people would escrow their bank account for the privilege of using an anonymous credential.
In her presentation  at the recent NIST Meeting on Privacy-Enhancing Cryptography , Anna Lysyanskaya said that it is a misconception to think that "if all transactions are private, you can't detect and prevent identity fraud". But the countermeasure that she proposes for preventing identity fraud is to limit how many times a credential is used and to disclose the user's identity if the limit is exceeded. However this can only be done in cases where a credential only allows the legitimate user to access a resource a limited number of times, and I can think of few such cases in the realm of Web authentication. Lysyanskaya gives as an example a subscription to an online newspaper, but such subscriptions typically provide unlimited access for a monthly fee. I shall refer to this countermeasure as the "limited use countermeasure".
Lysyanskaya's presentation also mentions identity escrow as useful for conducting an investigation if "something goes very, very wrong".
At the panel on Privacy in the Identification Domain at the same meeting Lysyanskaya also proposed binding an anonymous credential to a biometric. The relying party would check the biometric and then forget it to keep the presentation anonymous. But if the relying party can be trusted to forget the biometric, it may as well be trusted to forget the entire credential presentation, in which case an anonymous credential is not necessary.
An interesting approach to binding a biometric to a credential while keeping the user anonymous can be found in . The biometric is checked by a tamper-proof smartcard trusted by the relying party, but a so-called warden trusted by the user is placed between the smartcard and the relying party, and mediates the presentation protocol to ensure that no information that could be used to identify or track the user is communicated by the smart card to the relying party.
However, if what we are looking for is an authentication solution that will replace passwords on the Web at large, biometric-based countermeasures are not good candidates because of their cost.
Update. In a response to this post on the Identity Commons mailing list Terry Boult has pointed out that cameras and microphones are pretty ubiquitous and said that, in volume, fingerprint sensors are cheaper than smartcard readers.
In his blog post , Hoepman suggested that, to prevent the sharing of an anonymous credential, the credential could be stored in the owner's identity card, presumably referring to the national identity card that citizens carry in the Netherlands and other European countries. This is a good idea because lending the card would put the owner at risk of impersonation by the borrower. I shall refer to this as the "identity card countermeasure".
Rather than storing a proof of age credential as an additional credential in a national identity card, anonymous proof of age could be accomplished by proving in zero knowledge that a birthdate attribute of a national identity credential (or, in the United States, of a driver's license credential) lies in an open interval ending 21 years before the present time; Idemix implements such proofs. The identity credential could be stored in a smartcard or perhaps in a tamper-proof module within a smart phone or a personal computer. I'll refer to this countermeasure as the "selective disclosure countermeasure". As in the simpler identity card countermeasure, the legitimate user of the credential would be deterred from sharing the credential with another person because of the risk of impersonation.
But this countermeasure, like most of the above ones, does not help with the following method of sharing credentials.
For example, somebody of drinking age could install his or her national identity credential or driver's license credential on a Web server, either by copying the credential to the server or, if the credential is contained in a tamper-proof device, by connecting the device to the server. The credential owner could then allow minors to buy liquor by proxying a proof of drinking age based on the birthdate attribute in the credential. (Minors would need a special user agent to do the proxying, but the owner could make such user agent available for download from the same server where the credential is installed.) The owner could find a surreptitious way of charging a fee for the service.
This method of sharing a credential, which could be called proxy-based sharing, defeats most of the countermeasures mentioned above. Biometric-based countermeasures don't work because the owner of the credential can input the biometric. Credential linking countermeasures don't work because the secret of the credential is not shared. The identity card countermeasure and the selective disclosure countermeasure don't work because the owner is in control of what proofs are proxied and can refuse to proxy proofs that could allow impersonation. The limited use countermeasure could work but, as I said above, I can think of few Web authentication cases where it would be applicable.
Are there any other countermeasures that would prevent or inhibit this kind of sharing? If a minor were trying to buy liquor using an identity credential and a payment credential, the merchant could require the minor to prove in zero-knowledge that the secret keys underlying both credentials are the same. That would defeat the sharing scheme by making the owner of the identity credential for pay for the purchase. However there are proof-of-age cases that do not require a purchase. For example, an adult site may be required to ask for proof of age without or before asking for payment.
The only generally applicable countermeasure that I can think of to defeat proxy-based sharing is the identity escrow scheme that Lysyanskaya referred to in her talk . Using provable encryption, as available in Idemix, a liquor merchant could ask the user agent to provide the identity of the owner of the credential as an encrypted attribute that could be decrypted, say, by a judge. (The encrypted attribute would be randomized for unlinkability.) The user agent would include the encrypted attribute in the presentation proof after asking the user for permission to do so.
Unfortunately this requires the user to trust the government. This may not be a problem for most people in many countries. But it undermines one of the motivations for using privacy-enhancing technologies that I discussed in a previous blog .
 Jaap-Henk Hoepman. On using identity cards to store anonymous credentials. November 16, 2011. Blog post, at http://blog.xot.nl/2011/11/16/on-using-identity-cards-to-store-anonymous-credentials/.
 Jan Camenisch and Anna Lysyanskaya. An Efficient System for Non-transferable Anonymous Credentials with Optional Anonymity Revocation. In Proceedings of the International Conference on the Theory and Application of Cryptographic Techniques: Advances in Cryptology (EUROCRYPT 01). 2001. Research report available from http://www.zurich.ibm.com/security/privacy/.
 Anna Lysyanskaya. Conditional And Revocable Anonymity. Presentation at the NIST Meeting on Privacy-Enhancing Cryptography. December 8-9, 2011. Slides available at http://csrc.nist.gov/groups/ST/PEC2011/presentations2011/lysyanskaya.pdf.
 NIST Meeting on Privacy-Enhancing Cryptography. December 8-9, 2011. At NIST Meeting on Privacy-Enhancing Cryptography.
 Russell Impagliazzo and Sara Miner More. Anonymous Credentials with Biometrically-Enforced Non-Transferability. In Proceedings of the 2003 ACM workshop on Privacy in the electronic society (WPES 03).
 Francisco Corella. Are Privacy-Enhancing Technologies Really Needed for NSTIC? October 13, 2011. Blog post, at http://pomcor.com/2011/10/13/are-privacy-enhancing-technologies-really-needed-for-nstic/.
Last week I participated in the Meeting on Privacy-Enhancing Cryptography at NIST. The meeting was organized by Rene Peralta, who brought together a diverse international group of cryptographers and privacy stakeholders. The agenda is online with links to the workshop presentations.
The presentations covered many applications of privacy-enhancing cryptography, including auctions with encrypted bids, database search and data stream filtering with hidden queries, smart metering, encryption-based access control to medical records, format-preserving encryption of credit card data, and of course authentication. There was a talk on U-Prove by Christian Paquin, and a talk on Idemix by Gregory Neven. There were also talks on several techniques besides anonymous credentials that could be used to implement privacy-friendly authentication: group signatures, direct anonymous attestation, and EPID (Enhanced Privacy ID). Kazue Sako's talk described several possible applications of group signatures, including a method of paying anonymously with a credit card.
A striking demonstration of the practical benefits of privacy-enhancing cryptography was the presentation on the Danish auctions of sugar beets contracts by Thomas Toft. A contract gives a farmer the right to grow a certain quantity of beets for delivery to Danisco, the only Danish sugar producer. A yearly auction allows farmers to sell and buy contracts. Each farmer submits a binding bid, consisting of a supply curve or a demand curve. The curves are aggregated into a market supply curve and a market demand curve, whose intersection determines the market clearing price at which transactions take place. What's remarkable is that farmers submit encrypted bids, and bids are never decrypted. The market clearing price is obtained by computations on encrypted data, using secure multiparty computation techniques. Auctions have been successfully held every year since 2008.
I was asked to participate in the panel on Privacy in the Identification Domain and to start the discussion by presenting a few slides summarizing my series of blog posts on privacy-enhancing technologies and NSTIC. In response to my slides, Gregory Neven of IBM reported that a credential presentation takes less than one second on his laptop, and Brian La Macchia of Microsoft pointed out that deployment is difficult for public key certificates as well as for privacy-friendly credentials. There were discussions with Gregory Neven on revocation and with Anna Lysyanskaya on how to avoid the sharing of anonymous credentials; these are big topics that deserve their own blog posts, which I plan to write soon, so I won't say any more here. Jeremy Grant brought the audience up to date about NSTIC, which has received funding and is getting ready to launch pilots. Then there was a wide ranging discussion.
Recently the World Wide Web Consortium (W3C) launched a Tracking Protection Working Group, following several recent proposals for Do-Not-Track mechanisms, and more specifically in response to a W3C-member submission by Microsoft. A useful list of links to proposals and discussions related to Do-Not-Track can be found in the working group's home page.
A Do-Not-Track setting and a filtering mechanism are good ideas, but they only deal with the traditional way of tracking a user. Today there is another way of tracking a user, which can be used whenever the user logs in to a Web site with authentication provided by a third party, such as Facebook, Google or Yahoo.
Third-party login uses a double-redirection protocol. When the user wants to log in to a Web site, the user's browser is redirected to a third party, which plays the role of "identity provider." The identity provider authenticates the user and redirect the browser back to the Web site, which plays the role of "relying party." The identity provider is told who each relying party is, and can therefore can track the user without any need for cookies. The identity provider can link the user's logins to relying parties to the information in the user's account at the identity provider, which in the case of Facebook includes the user's real name and much other real identity information.
Privacy-enhancing technologies, which I discussed in a recent series of blog posts (starting with the one on U-Prove), may eventually make it possible to log in with a third party credential without the identity provider being able to track the user; but in the meantime, means must be found of providing protection against tracking via third-party login. The W3C Tracking Protection working group could provide such protection by broadening the scope of the Do-Not-Track setting so that it would apply to both the traditional method of tracking via embedded content and the new method of tracking via third-party login. An identity provider who receives a Do-Not-Track header while participating in a double-redirection protocol would be required to forget the transaction after authenticating the user.
The scope of the filtering mechanism could also be broadened so that it would apply to redirection requests in addition to third-party content embedding. This could mitigate a security weakness that affects third-party login protocols such as OpenID and OAuth. Such protocols are highly vulnerable to a phishing attack that captures the user's password for an identity provider: the attacker sets up a malicious relying party that redirects the browser to a site masquerading as the identity provider. A filtering mechanism that would block redirection by default could prevent the attack based on the fact that the site masquerading as the identity provider would not be whitelisted (while the legitimate identity provider would be).
In comments on the previous post at the Identity Commons mailing list and comments at the session on deployment and usability of cryptographic credentials at the Internet Identity Workshop, people have questioned the advantages of running cryptographic protocols for issuing and presenting credentials inside TLS, and argued in favor of running them instead over HTTP. I believe running such protocols inside TLS removes several obstacles that have hindered the deployment of cryptographic credentials. So in this post I will try to answer those comments.
TLS is ubiquitous. It is implemented by all browsers and all server middleware. If issuance and presentation protocols were implemented inside TLS, then users could use cryptographic credentials without having to install any applications or browser plugins, and developers of RPs and IdPs would not have to install and learn additional SDKs.
Inside TLS, an interactive cryptographic protocol can be run in a separate TLS layer, allowing the underlying TLS record layer to interleave protocol messages with application data (and possibly with messages of other protocol runs), thus mitigating the latency impact of protocol interactions.
Simplicity. Running a protocol over HTTP would require specifying how protocol messages are encapsulated inside HTTP requests and responses, i.e. it would require defining an HTTP-level protocol.
Performance. Running a protocol over HTTP would add the overhead of sending HTTP headers, and, possibly, of establishing different TLS connections for different HTTP messages if TLS connections cannot be kept alive for some reason.
 Christian Paquin. U-Prove Cryptographic Specification V1.1 Draft Revision 1, February 2011. Downloadable from http://www.microsoft.com/u-prove.
 M. Blum, P. Feldman and S. Micali. Non-Interactive Zero-Knowledge and Its Applications (Extended Abstract). In Proceedings of the Twentieth Annual ACM Symposium on Theory of Computing (STOC 1988).
 Jan Camenisch et al. Specification of the Identity Mixer Cryptographic Library, Version 2.3.1. December 2010. Available at http://www.zurich.ibm.com/~pbi/identityMixer_gettingStarted/ProtocolSpecification_2-3-2.pdf.
 A. Fiat and A. Shamir. How to Prove Yourself: Practical Solutions to Identification and Signature Problems. In Proceedings on Advances in Cryptology (CRYPTO 86), Springer-Verlag.
 J. Groth and A. Sahai. Efficient Non-Interactive Proof Systems for Bilinear Groups. In Theory and Applications of Cryptographic Techniques (EUROCRYPT 08), Springer-Verlag.
 R. Canetti, O. Goldreich and S. Halevi. The Random Oracle Methodology, Revisited. Journal of the ACM, vol. 51, no. 4, 2004.
This is the fourth and last of a series of posts on the prospects for using privacy-enhancing technologies in the NSTIC Identity Ecosystem.
Experience has shown that it is difficult to deploy cryptographic credentials on the Web and have them adopted by users, relying parties and credential issuers. This is true for privacy-friendly credentials as well as for ordinary public-key certificates, both of which have a place in the NSTIC Identity Ecosystem, as I argued in the previous post.
I believe that this difficulty can be overcome by putting the browser in charge of managing and presenting credentials, by supporting cryptographic credentials in the core Web protocols, viz. HTTP and TLS, and by providing a simple and automated process for issuing credentials.
For credentials to be widely adopted, users must not be required to install additional software, let alone proprietary software that only runs on one operating system, such as Windows Cardspace. Therefore credentials must be managed and presented by the browser.
The browser should allow users to set up multiple personas or profiles and associate particular credentials with particular personas. Many users, for example, have a personal email address and a business email address, which could be associated with a personal profile and a business profile respectively. The user could declare one profile to be the "currently active persona" in a particular browser window or tab, and thus facilitate the selection of appropriate credentials when visiting sites in that window or tab.
People who use multiple browsers in multiple computing devices (including desktop or laptop computers, smart phones and tablets) must have access to the same credentials on all those devices. Credentials can be synced between browsers through a Web service without having to trust the service by equipping each browser with a key pair for encryption and a key pair for signature (in the same way as email can be sent with end-to-end confidentiality and origin authentication using S/MIME or PGP). Credentials can be backed up to an untrusted Web service similarly.
HTTP should provide a way for the relying party to ask for particular credentials or attributes, and TLS should provide a way for the browser to present one or multiple credentials. Within TLS, the mechanism for presenting credentials should be separate from and subsequent to, the handshake, to benefit from the confidentiality and integrity offered by the TLS connection after it has been secured.
Privacy-friendly credentials have cryptographically complex interactive issuance protocols. Paradoxically, this suggests a way of simplifying the issuance process, for both PKI certificates and privacy-friendly credentials.
Since the process is interactive, it should be run directly on a transport layer connection, to avoid HTTP and application overhead. That connection should be secure to protect the confidentiality of the attributes being certified. To reduce the latency due to the cryptographic computations, the protocol interactions should be interleaved with the transmission of other data. And the cryptographic similarity of issuance and presentation protocols suggests that they should be run over the same kind of connection.
Since TLS is universally supported by server middleware, implementing issuance protocols directly over TLS would make allow servers to issue credentials automatically without installing additional software. In particular, it would make it easy for any Web site to issue a PKI certificate as a result of the user registration process, for use in subsequent logins.
Once credentials are handled by browsers and directly supported by the core protocols of the Web, smooth and painless user experiences become possible.
For example, a user can open a bank account online as follows. The user accepts terms and conditions and clicks on an account creation button button. The bank asks the browser for a social security credential and a driver's license credential. The browser presents the credentials to the bank after asking the user for permission. The bank checks the user's credit ratings and automatically creates an account and issues a PKI certificate binding the account number to the public key component of a new key pair generated by the browser on the fly. On a return visit, the user clicks on a login button and the bank asks the browser for the certificate. The user may allow the browser to present the certificate without asking for permission each time. Double factor authentication can be achieved, for example, by keeping the private key and certificate in a password-proctected smart card.
As a second example, suppose a user visits a site to sign up for receiving coupons by email. The user accepts terms and conditions and clicks on a sign-up button. The site asks the browser for a verified email-address certificate (issued by an email service provider) and a number of self-asserted attributes, such as zip code, gender, age group, and set of shopping preferences. The browser finds in its certificate store (or in a connected smart card) an email address certificate and a personal-data credential associated with the currently active persona. The personal-data credential is a privacy-friendly credential featuring unlinkability and selective disclosure. The browser presents simultaneously the email certificate and the personal-data credential, disclosing only the personal-data attributes requested by the site. The browser may or may not ask the user for permission to present the credentials, depending on user preferences that may be persona-dependent.
In this series of posts I have argued that new privacy-enhancing technologies should be developed to fill the gaps in currently implemented systems and to take advantage of new techniques developed by cryptographers over the last 10 or 15 years. I have also argued that the NSTIC Identity Ecosystem should accomodate both privacy-friendly credentials and ordinary PKI certificates, because different use cases call for different kinds of credentials. Finally I have sketched above two examples of user experiences that can be provided if credentials are handled by browsers and directly supported by the core protocols of the Web.
Of course this requires major changes to the Web infrastructure, including: extensions to HTTP; a revamp of TLS to allow for the presentation of privacy-friendly credentials, the simultaneous presentation of multiple credentials, and the issuance of credentials; support of the protocol changes in browsers and server middleware; and implementation of browser facilities for managing credentials.
These changes may seem daunting. The private sector by itself could not carry them out, especially given the current reliance of technology companies on business models based on advertising, which benefit from reduced user privacy. But I hope NSTIC will make them possible.


• A total of $594 million was awarded to 53 cities to provide core medical and support services for individuals living with HIV/AIDS under Part A of the Ryan White HIV/AIDS Program. These grants are awarded to eligible metropolitan areas with the highest number of people living with HIV/AIDS and to areas experiencing increases in HIV/AIDS cases and emerging care needs.
Atlanta received $21.5 million through Part A.
• Approximately $1.16 billion was awarded in FY 2013 to 59 states and territories under Part B of the Ryan White HIV/AIDS Program. Part B grants include grants that can be used for home and community-based services, AIDS Drug Assistance Program (ADAP) assistance, and other direct services. In FY 2013, $309 million was awarded in Part B base funding and $782 million was awarded for ADAP. In addition, 16 states received Emerging Community grants based on the number of AIDS cases over the most recent five-year period. Thirty-six states and territories were also awarded $10.1 million in Part B Minority AIDS Initiative grants. See a list of the Part B awards.
For Georgia, the money received is: $12 million for "final base award"; $31.6 million for ADAP; and a $566,494 supplemental award for a total of more than $47.5 million.
• In FY 2013, approximately $178 million was awarded across the country to 357 local community-based organizations to provide core medical and support services to individuals living with HIV/AIDS under Part C of the Ryan White HIV/AIDS Program.Currently 351 Part C grantees are providing ongoing services. Part C grant recipients provide comprehensive primary health care in outpatient settings to people living with HIV disease.


Quiring set out to prove that an upfront investment in state-of-the-art greenhouses would have a transformational impact on quality. From that moment forward, he has been perfecting automation for cost control, technology for crop control, and varietal advancements for consumer appreciation.
Our hands on approach to growing ensures we give our plants the care they deserve.
Different channels with different perspectives telling the same story.
Not every vegetable is created equal nor grown the same way. Best practices shape our strategies with one common goal; deliver exceptional quality, regardless of the season.
Learn how we grow your vegetables by watching our staff inspired video series. Learn about all the sustainable initiatives we have in place to be as eco-friendly as possible.


Fracht CAMEROUN is located at 341 rue Mandessi, Bell (Bali), P.O. Box 5361 Douala / Cameroun, T +237 683 75 61 61. Albert Nguoghia E albert.nguoghia@cm.fracht.africa and his experienced team provide a complete logistics package within Cameroun as well as services to / from neighbouring countries Chad, Central African Republic, Congo, Gabon and Equatorial Guinea.
BELGIUM: Barge congestion via the port of Antwerp still continues this year in spite of the fact that some efforts were made to consolidate cargo to reduce the overall number of barges. The recent storms "Eberhard" and "Franz" with wind speeds of up to 100 km/h have exacerbated the problem.
INDONESIA: Australia and Indonesia have signed the "Indonesia-Australia Comprehensive Economic Partnership Agreement (IA-CEPA) on 4 March starting a new chapter of cooperation and economic management with one of our most important neighbours. This FTA is a great deal for Australia. It means that 99% of Australian goods (by value) will enter Indonesia duty-free or under significantly improved preference arrangements by 2020.
SINGAPORE: The Changi Airport Group (CAG) is planning the construction of a "Changi East Industrial Zone" which will almost double Singapore's air cargo capacity from its current 3 million tonnes to 5.4 million tonnes per year. Cargo facilities in the expanded hub will be automated and will include dedicated lanes for autonomous guided vehicles.
SWEDEN: Swedish ports unfortunately experienced strike action (again) in March by the Swedish Dockworkers Association. The ports of Gothenburg, Stockholm and Helsingborg were affected.
SINGAPORE AIRLINES WILL ADD A THIRD DAILY FLIGHT from Singapore to Osaka on 27 April. This additional service will be operated by A330-300 equipment. The carrier will also introduce a new non-stop service to Seattle on 3 September. Initially there will be three flights per week before increasing to four times per week.
EMIRATES WILL INCREASE ITS CAPACITY BETWEEN DUBAI AND CAIRO from 21 to 25 flights per week. The four new 777-300ER services will increase the weekly cargo capacity by 160 tonnes.
QATAR AIRWAYS WILL LAUNCH DAILY FLIGHTS TO LISBON commencing 14 June 2019.
THE RECENTLY GROUNDED BOEING 737 MAX 8 FLEET following the recent Ethiopian Airlines crash may actually increase air cargo capacity on certain routes because some airlines will have to use 777-300 equipment as temporary replacement.
AIR CARGO SECURITY REQUIREMENTS FOR EXPORT from Australian airports have become much stricter on 1 March. Please refer to our special newsletter of that date.
50 YEARS OF CONTAINERISATION IN AUSTRALIA: On 28 March 1969 at around 8am the ship "Encounter Bay" arrived in Fremantle. This was the first international container ship liner call at an Australian port and it was part of a revolution in the movement of seafreight not only to Australia but around the world. The vessels deployed on the Australian route back then had a capacity of approx 1,300 TEUs (twenty foot equivalent units). Today the largest container ships boast a capacity of 22,000 TEUs but the biggest vessels calling Australian ports only carry up to 9,500 TEUs at the moment. Prior to containerisation, the general cargo ships' handling of cargo was a manual, laborious and very expensive task. Ships regularly stayed in port for weeks to load and / or discharge.
MSC AND CMA CGM HAVE ANNOUNCED A NEW PARTNERSHIP TO UGRADE THEIR joint service between Europe and Australia. The Australia Express Service will commence in September 2019 with a fleet of 14 ships of 9,500 TEU capacity of which nine will be provided by MSC. The rotation will be London – Rotterdam – Hamburg – Antwerp – Le Havre – Fos sur Mer – La Spezia – Genoa –Gioia Tauro – Pointe des Galets – Port Louis – Sydney – Melbourne – Adelaide – Fremantle – Singapore – Colombo – Valencia – Sines – London.
ANALYSTS PREDICT THAT THE NEW 0.5% SULPHUR CAP MAY lead to slower transit times and more transshipments. As reported in our November newsletter the sulphur cap reductions from 3.5% to 0.5% from 2020 could result in additional bunker costs of up USD 60 billion for the whole shipping industry. To minimise the increase shipping lines could potentially reduce the speed of the vessels and reduce the amount of direct port calls. Both of these measures would be very unpopular with importers and exporters.
UNFORTUNATELY THE STEVEDORES DP WORLD ARE CURRENTLY EXPERIENCING INDUSTRIAL ACTION by the Maritime Union of Australia which is now part of the CFMMEU. The terminals in Sydney, Melbourne, Brisbane and Fremantle are affected. The "rolling industrial action" was announced on 18 March while the DP World management was preparing for enterprise agreement negotiations which were due to recommence on 26 March. The stoppages are creating delays for truckers, impacting rail operations and are negatively affecting vessel schedule integrity which at the end all results in additional costs for importers and exporters. Let's hope an amicable solution can be found soon.
VICTORIA INTERNATIONAL CONTAINER TERMINAL EXTENDS ITS OPERATING HOURS on Webb Dock effective 1 April. The landside operating hours run 24 hours per day five days a week, closing from 2pm Saturday until 6am Sunday and again Sunday from 2pm until Monday 6am. The decision has been praised by the landside transport group.


text:
Congenital Myopathies
Congenital myopathies are rare, inherited disorders of the muscles that cause reduced muscle tone and weakness. These disorders are present at birth or show up during infancy.
There are several types of congenital myopathies. The three most common types of congenital myopathy are
Central core and multiminicore myopathies (core myopathies)
Centronuclear myopathy
Nemaline myopathy
Symptoms and lifespan vary with the type and severity of the myopathy.
Central core myopathy and multiminicore myopathy (core myopathies)
Central core myopathy and multiminicore myopathy are the most common form of congenital myopathy.
Most newborns have severely reduced muscle tone (hypotonia, or "floppiness") and mild muscle weakness, but sometimes symptoms of core myopathy do not manifest until adulthood. Many people also have facial weakness. The weakness does not become worse, and life expectancy is normal, but some people are severely affected and require a wheelchair. People who have central core myopathy are at increased risk of a life-threatening disorder called malignant hyperthermia.
Centronuclear myopathies are inherited in various ways. The forms that are inherited via a gene carried on the X chromosome (see X-Linked Inheritance) are the most common and most severe, and most affected children do not survive beyond the first year of life. Symptoms of the autosomal dominant forms typically appear in adolescence or adulthood. People who have one of these forms have muscle pain caused by exercise, facial weakness, droopy eyelids, and weakness of the eye muscles.
Nemaline myopathy, one of the more common congenital myopathies, can be autosomal dominant or autosomal recessive.
Nemaline myopathy may be severe, moderate, or mild. People who have a severe form may have weakness of the muscles used for breathing and respiratory failure. People who have a moderate form may have weakness in muscles of the face, neck, trunk, and feet that becomes worse over time, but their life expectancy may be nearly normal. People who have a mild form have weakness that does not worsen, and their life expectancy is normal.
Diagnosis of Congenital Myopathies
Symptoms of weakness
Muscle biopsy
The diagnosis of congenital myopathy is based on characteristic symptoms of weakness that are caused by each specific type.
Doctors confirm the diagnosis by taking a sample of the weak muscle tissue for biopsy (removal of a piece of tissue for examination under a microscope).
Treatment of Congenital Myopathies
Specific treatments are not available, but physical therapy may help maintain muscle function.
Muscular Dystrophy Association: Information on research, treatment, technology, and support for people living with a congenital myopathy

redpajama_set_name: RedPajamaCommonCrawl


text:
bso118 lottery
bso118 lottery, Chris Hunichen secured the $400,000 first-place prize of the $25,500 MILLIONS Super High Roller on the same day Kempe emerged victorious before Sam Greenwood came out on top of a 1,061-strong field in the $5,300 MILLION Main Event to become the latest poker millionaire created by the poker LIVE tour.There had been certain shifts in the players for different reasons, however, the performance has remained mindblowing for the fansThe tax was introduced back in 2015 with its main purpose being to raise revenue in an effort to pay for the retirement benefits of Panama Citizens. This was implemented by the previous government and new officials believe that it is negatively affecting the tourist trade.Canasta Turbo Jogatina: Card Game For Free is available for Android 9.0 and above. The current version of the app is 2.0.0, and you can get it in English, Spanish and Portuguese..
Check Out These Other Sit & Go Hero Games
The ball supposed to go straight up, and let's say that many of the people around believed it is an impossible shot. The collected pot from all bystanders was approximately 12 hundred dollars. This is one of the stories where you can see how confident and cocky Phil Mickelson really is. The moment he hit the ball, he just took the money and put them in his pocket without even waiting for the ball to drop. But do you consider this as Phil Mickelson gambling money?The MILLIONS Online Mini Main Event centrolls pay $1.10 Phase 1 ticketsHaving an expert tutorial is a pre-requisite for any learnerA deal never crossed his mind despite facing one of the best players on the planet.We will start the chart from the bottom to the top. We will do our best to briefly explain what the podcast is about, who are the podcasters, and where you could listen for free or download. Without further ado, here are the top Poker Podcasts you should listen to!.
MILLIONS Main Event Day 1A Top 10 Chip Counts
Why? To defend your first win is much harder than winning the first$42,189 is his largest score at the virtual felt, a prize he's already guaranteed to blow out of the water regardless of where he finishes bso118 lottery, A casino's layout is never too simple, nor easy to navigate. This is what, inarguably, makes the casino the most money. Having the visitors see all new games before finding the exit is the most ingenious casino interior design idea. But don't be fooled; it's used in other fields too.This is really strange, but somehow playing slowly has become some sort of fashion, like it is cool to dwell on every decision a player makes.This is a game that people have played at sporting places with their friends.
$500,000 Challenge
The different scenarios that crop up in the games will help you master this skill-based card gameAs with anything, there are pros and cons to gambling using your Smartwatch. It's important to be aware of all of these aspects before committing your time and real money. This also helps you make an informed choice as to whether or not this new concept is for you.Prize pool: $64,478 bso118 lottery, The Mazagan10 High Roller package consists of:.
work at a place where there is gambling
wrexham score
wednesday deal domino indonesai
klasmen kualifikasi piala dunia zona eropa 14-11-2016
candy crush free online
Hong Kong lottery number that came out today
fortune apk shoot fish
trik lotre 500
fishing trick
the best soccer gambling, cockfighting gambling, klotok gambling


text:
Kevan attends Blind Veterans UK Event
Kevan Jones MP has pledged to ensure that Armed Forces veterans will not have to battle blindness alone at a special parliamentary reception earlier this week, held at the House of Commons.
The reception, held on Tuesday 23 February, was organised by Blind Veterans UK, the national charity for vision impaired ex-Service men and women, to raise awareness of the charity and to encourage all local authorities to work with Blind Veterans UK to reach out to more veterans with severe sight loss so that they are able to access the charity's free services and support.
Kevan Jones MP joined over 30 other MPs, including Mark Lancaster, Minister for Defence Personnel and Veterans, and Clive Betts, chair of the Communities and Local Government Committee, along with representatives from the military, local authorities, the NHS and other sight loss and military charities. They met with beneficiaries and staff of Blind Veterans UK to pledge their support to the charity's beneficiary recruitment campaign.
The call for support from local authorities comes after it was found that of the 4000+ veterans Blind Veterans UK currently supports, almost a quarter struggled with severe sight loss for six years or more before they found out about the support available from the charity. In addition, new research from Blind Veterans UK estimates that currently there are 59,000 Armed Forces and National Service veterans battling severe sight loss, most of whom are missing out on the free, lifelong support of Blind Veterans UK.
Kevan Jones MP said: "As the MP for North Durham, I am pleased to pledge my support to Blind Veterans UK by helping to ensure that no veterans in my constituency will have to battle blindness alone. It is vital we all work to honour the Armed Forces Covenant and make sure everyone who comes into contact with blind ex-Service men and women signpost them to Blind Veterans UK for free, lifelong support."
Major General (Rtd) Nick Caplin CB, Blind Veterans UK's Chief Executive, said: "We are delighted that so many MPs and key representatives from local authorities, together with military and health professionals attended the event and have pledged their support to ensure that blind ex-Service men and women can enjoy a life beyond sight loss.
"We currently support over 4,000 blind ex-Service men and women and their families, but we know there are many more out there who need and deserve our support. This event is crucial in helping us spread the word about Blind Veterans UK. We want as many MPs, local authorities and health networks as possible to work in partnership with us so we can reach out to the many veterans in need of our support."
If you are, or know of, a veteran with severe vision impairment and would like more information about Blind Veterans UK's free, lifelong support go to www.noonealone.org.uk or call freephone 0800 389 7979.


text:
Home » Drama » Tyrant: "Gone Fishing" Review
Tyrant: "Gone Fishing" Review
Posted on August 28, 2014 by Michael Spring in Drama, Reviews // 0 Comments
Bassam's plot to overthrow Jamal faces some last minute problems as important allies threaten to pull out.
"I WOULD HAVE GIVEN YOU ANYTHING."
I've had a kind of love/hate relationship with Tyrant over the course of its debut season. Every show has its ups and downs, but Tyrant ranged back and forth between the good and the bad on a very regular basis. Recently the show had seemed to have found its footing, with Bassam's plan to overthrow Jamal taking center stage, but the season finale endeavoured to throw away all of that solid work in favor of some truly terrible scenes.
There's absolutely no guarantee we'll get a second season of Tyrant, which has solid ratings but high production costs and behind the scenes troubles likely going against it right now. So with that being the case, it would seem smart to have a thrilling finale that pulls together all of the ongoing storylines and deliver a satisfying conclusion that would set up a potential second season, right? Wrong! Apparently the smart thing to do was devote an unbelievable amount of time (for a finale) to an awful subplot involving Bassam's daughter and sister-in-law getting pickpocketed, arguing with a restaurant owner, nearly getting arrested, and then finally getting saved by a freaking internet search. Honestly this was excruciating to watch at times for me. I wanted to see how the Bassam and Jamal stuff played out but had to sit through several scenes that held absolutely no purpose other than to give Molly something to worry about.
The only surprise to come from this subplot was that nobody got kidnapped. I thought for sure we were going down the cliché route of a kidnapping that would cause Bassam to call off his plan, perhaps masterminded by Ihab. Now that I mention Ihab actually, I'll bring up another gripe I've had with this season. So many different characters just came and went throughout the course of the season. Ihab looked to be a serious opponent to the Al-Fayeed regime at one stage, but he just disappeared when his father died and was barely mentioned again. Bassam's kids dropped in and out of the story at will, and Sammy's gay storyline and love interest got completely dropped. All of these elements didn't have to return in the finale, but there was no resolution at all on several different plotlines, and the kids especially felt like they were just plot devices that were used to soak up a bit of time here and there.
The thing we all wanted to find out this week was whether Bassam's coup would succeed or not, but even that storyline ended up spinning its wheels a bit. The outcome was probably the smart choice in the end, as having Bassam actually succeed and start running Abuddin would probably have been way too ridiculous in the grand scheme of things. That being said, I felt the Americans pulling their support for Bassam after weeks of build-up felt a little flat, and Bassam managing to reverse their decision a few scenes later was pretty jarring. I've mentioned in a previous review how I felt this coup-plotline felt a little rushed, and this back and forth between Bassam and the Americans would have benefitted with a bit more time to play out.
As has been the case for most of the season, Ashraf Barhom stole the show every time he was on screen. I must admit that I had my suspicions, but I didn't quite call that he knew all about Bassam's coup during their time on the boat. Watching those scenes back now actually makes them a lot better as you can see that Jamal is giving his brother every opportunity to reconsider and back down on his plan. Jamal's words to Bassam about giving him control of Abuddin if he had asked rang a little false for me however, as I'm not quite certain that his ego would have allowed that. Ending with Bassam in a cell with his co-conspirators getting riddled with bullets upstairs was a good moment for the show, with the threat of execution looming large over his head. I found myself wishing that the show had taken a daring route and actually killed Bassam off, although that may have been a little too similar to a certain first season of a certain popular HBO show…
Where does Tyrant go now then? In my opinion, the future isn't too bright for the show. The ratings seem good enough to warrant a second season, but the other factors that I previously mentioned will also influence the decision. If we do get a second season, I don't see the show taking the brave route of executing Bassam, which will mean more ridiculous plotlines to manufacture a reason for him staying in the story. Jamal, with Tariq whispering in his ear, will likely be even more horrible after this massive betrayal, which could be interesting to watch at least. Jamal was the most captivating character on the show by a country mile this season, so thankfully he didn't get killed off. Unfortunately, none of the other main characters died either, so get ready for more Al-Fayeed family hi-jinks if the show does get renewed!
Tyrant is by no means a terrible show and did offer up a few great episodes over the course of the opening 10. Unfortunately, some bad writing and so-so acting have pulled the show down, and I'm not sure that there's any way to fix all of these problems if the show gets renewed. There should be a decision made soon about the show's future, and I hope it does get another shot to right its wrongs, I'm just not entirely sure if I'd be tuning in to find out.
Does 'Tyrant' deserve a second season or has it run out of time? Let us know in the comments below.
abuddin
fx networks
gone fishing review
tyrant
tyrant finale
tyrant finale review
tyrant gone fishing review


Welcome to Management Training Philippines!
Surely, having leadership or management skills is a good first step to get the job done. Still, it is not the end-all of effective leadership.
In order to inspire people to take responsibility for all their tasks – even the ones they hesitate to perform — leaders need to build credibility with their people and with upper management. Leaders need to be a source of positive influence. They must be seen as professionals worthy of both admiration and emulation.
What, then, is a manager's most powerful leadership tool? It is high-impact communication.
Project the leadership aura and charisma needed to get the respect of both top management and every team member.
Know your leadership communication style and use it effectively.
Establish better relationships with your people without sacrificing quality outputs.
Empower subordinates and assist them to perform excellently.
Seek the cooperation and commitment of your colleagues in working toward a successful project.
Sell ideas more persuasively to influence the attitudes and behaviors of everyone in the organization.
Turn communication into a strategic tool to produce more results. Join Guthrie-Jensen's Leadership Communication seminar today!
For more information about this seminar, call Guthrie-Jensen today at (+63-2) 816-1610. You can also email trainingseminars@guthriejensen.com, or visit www.guthriejensen.com for information about this program as well as other training courses in the Philippines.


Architectures supporting Dynamic and Partial Reconfiguration (DPR) are becoming increasingly complex in terms of both reconfiguration mechanism and embedded computing and storage resources. One of the major issue when designing such architectures is to be able to obtain a quick feed-back over proposed architectural choices. To address this problem, we have proposed a platform model for the definition of dynamically reconfigurable architectures (DRA) and their associated design tools.
The use of reconfigurable hardware in critical applications like transportation and transaction systems is increasing rapidly. Undetected errors caused e.g. by radiation may result in fatal silent data corruption and unreproducible system crashes. Since it is virtually impossible to build devices which are free from faults, it is essential to embed some sort of fault-tolerance in such devices, which will enable them to work correctly even in the presence of faults. Since the past decade, a lot of research has been done to develop fault-tolerant reconfigurable systems on various granularity levels, although most of them have dealt with the lowest level such as offered by FPGAs.
We have considered the possibility of implementing low-cost hardware techniques which would allow to tolerate temporary faults in the data-paths of coarse-grained reconfigurable architectures. Our goal was to use less hardware overhead than commonly used duplication or triplication methods.
To cope with the high sensitivity of electronic devices to failures or soft errors, we also proposed a multiprocessor system on an dynamically reconfigurable architecture for the design of fault-tolerant systems. First we have proposed and designed a flexible communication model which ensures reliable communication. This work permits to switch from a communication protocol, by reconfiguring the reserved zone for the communication protocol, to a secondary one in order to mitigate communication errors. Some possibilities to integrate this dynamic platform into standardized automotive software infrastructure have also been introduced.
In order to exploit the computational power and the flexibility of reconfigurable architecture, and at the same time to guarantee the correct functionality of the entire system, we proposed a fully dynamic MPSoC topology. In this system, all the processors can be dynamically reconfigured, moved or replaced in the system, hence providing fault-tolerant and self-repair capability. A deep exploration of a standard design flow has been done to facilitate the design of this architecture using commercially available FPGAs.
To support the dynamic behavior of new embedded applications, heterogeneous execution resources are often included in modern MPSoC (Multi-Processor System-on-Chip) systems. The management of these resources is typically supported by an operating system (OS) that includes specific services for the scheduling and placement of tasks within the reconfigurable resources, along with inter-task communication management. The classical scheduling problem is then extended with a spatial dimension to manage the physical available area into the reconfigurable resource. We have therefore proposed a scheduling algorithm based on Artificial Neural Networks (ANN). The scheduling was moreover extended with task placement on heterogeneous reconfigurable execution resource by defining a spatio-temporal scheduling. Finally, we have proposed an area efficient hardware implementation of the neural network used in our scheduler. This implementation demonstrates the relevance of a hardware implementation of the service.
To support task communications within reconfigurable resources, we have proposed a specific inter- connection architecture, that is well-suited to dynamic and partial reconfiguration. We also defined specific communication services to support data exchanges between hardware and/or software tasks. This service can be seen as a middleware service managing data transfers (send, receive) without any information about the actual task placement on the platform. This drastically simplifies the application development and provides a unified communication interface for all tasks. A demonstrator platform has been prototyped to illustrate our concept of communication network re- configuration. To support the communication constraints required by dynamic reconfiguration, we have proposed the DRAFT Network-on-Chip (NoC), a NoC based on a fat-tree topology. Thanks to the ability to automatically generate DRAFT simulation and synthesis models, we were able to com- pare our model against other popular NoC topologies, such as mesh and regular fat-tree.


A year ago I returned home from Fort Worth, where I was a participant at the "International Leadership Academy" which is an international issues forum where students from 8 countries meet and discuss a certain topic.
Before the actual program started, we visited the Texas Rangers Baseball Stadium with the Swazis.
These countries are Mexico, Italy, Hungary, China, Japan, Swaziland, Indonesia, Germany and of course, the USA. Only Fort Worth's sister cities have access to the program.
All the people I got to know are very important to me now. I text them almost everyday and I am very glad that certain social media platforms make it possible for us to stay in touch.
"ILA" is a great opportunity to meet people who are highly interested in social activities, politics and international friendships. We had two sessions every day where we worked on the topic "Building a Culture of Health", which was selected for ILA 2016. Additionally, we did many activities together for example helping at a community center and visiting a center where they collected food for homeless people and families who could not afford groceries. We also went to different malls and to the historical district of Fort Worth which was great! I will later write a blogpost about the city and its sights.
Generally, all the friendly, open-minded and caring people- including Facilitators, Delegation Leaders and Program Participants made the program very special and I assume that there is no other program in the world where everyone is so passionate about and engaged in working together.
The campus is huge! It is like a little student village.
Additionally, I really liked the topic "Building a culture of health" because I think in course of the globalization which is followed by more work and also stress, it is very important to care about other people's cultures and about oneself. Also stress should not be underestimated because people have to be healthy in order to deal with it appropriately. Furthermore, it was great to do group activities and especially visiting business companies in Fort Worth. Thus we got a brief insight into their work and how they help society.
In addition, I had the honor to interview three very inspiring business people with two other boys of the program. I am very glad that I had this opportunity because I learned a lot about these people, about their work-life-balance and how two deal with too much work and stress.
At this point I would like to thank Sister Cities for offering me this great opportunity!
We stayed at the TCU (Texas Christian University) Campus for two weeks but we also spent a weekend in a host family. This weekend with my host family was probably the best weekend in my life so far. They were very friendly and hospitable. They brought me to all the great places in- and around Fort Worth. It was great because they introduced me to activities they also like to do at weekends and I was able to do "typical american things". They planned the weekend and also asked my what I would like to do, for example going to the Kimbell art museum where I was able to see some of my favorite paintings by Piet Mondrian or Michelangelo. We also went to the rodeo which was very exciting for me because we do not have similar things in Germany. Additionally, we went to a Drive-In movie theater which reminded me stereotypically of the movie "Grease" – it was great! But these were only three of many activities. They were also very interested in German Culture and in my everyday life. There was always something to talk about.
Participating in the International Leadership Academy was the best decision of my life and these two weeks were the best weeks in my whole life so far. I would appreciate coming back 2018 or 2019 and hopefully one day I can say "I've been to all the Sister Cities countries and I was able to meet all my friends there!"!
They even had a huge food court, a Starbucks and the Recreation Center (Fitness Center with an indoor track field, 3 Basketball fields, a climbing wall, a gym and two swimming pools) on campus. There were also Beach Volley Ball fields in addition to the Football stadium and the Basketball arena.
Looking at these pictures makes me really sad because I really miss the time and all the people I got to know there. I miss the hot sun in Texas, I miss candy shopping, I miss dancing salsa with my Mexican friends in the evening in front of our dorm, I miss having pool parties and swimming with my friends from Swaziland and I really miss my host family. Actually it is really hard to write about this experience because my eyes are almost filled with tears.
But I should not be whining because I am grateful for this experience and furthermore, I will be starting my next adventure very soon!
Have you ever participated in a similar program or have you ever experienced something so great that you actually feel miserable thinking about it because you really miss the the people and the place? Let me know in the comments!
It was :)!! I am from Trier, Germany and Trier is one of the Sister Cities. So I applied and fortunately got in 🙂 Thank you so much!!
That's so amazing! I'm so happy you were able to go!


Music in a general sense is a fine art that initiates some emotional response through auditory cues through tempo, pitch, melodies, vocals, and other elements commonly found in songs. What we tend to forget is music is often felt as well as heard. That's where Kid Kin comes in. Peter Lloyd adopted the name Kid Kin as his moniker for his solo instrumental project. He is a budding artist with ample amounts of potential in the cinematic and post-rock scene. His upcoming debut album, New Day At Dusk, will be released January 28. This marks his official footprint in the music scene all the while bringing in new elements along with the old. His style fluctuates within the realm of post-rock, though there are definitive aspects taken from other genres as well. You'll hear plenty of piano woven in between the tracks, while at times you'll encounter synthesizers making for a creative mixture between traditional post-rock tunes and electronic synth pop. His previous EPs, Orange County and The Mile Of The Smile are more reserved and channel characteristics from Explosions In The Sky. However, it is shown in the teasers for New Day At Dusk that he is developing his own unique set of sounds and is exploring new paths. Stream some of Kid Kin's latest tunes below.


text:
package com.pilotfish22.ricecake;

import java.io.File;
import java.util.ArrayList;

import android.app.Activity;
import android.content.Context;
import android.content.Intent;
import android.graphics.Bitmap;
import android.graphics.BitmapFactory;
import android.graphics.Color;
import android.net.Uri;
import android.os.Bundle;
import android.os.Environment;
import android.view.View;
import android.view.View.OnClickListener;
import android.view.ViewGroup;
import android.widget.AdapterView;
import android.widget.AdapterView.OnItemClickListener;
import android.widget.ArrayAdapter;
import android.widget.Gallery;
import android.widget.ImageButton;
import android.widget.ImageView;
import android.widget.Toast;

public class SavedIvitationActivity extends Activity {
	// Bitmap[] mBitmap;
	private StringImageAdapter adapter;
	private ArrayList<String> mInvitationList = new ArrayList<String>();
	private String mInvitationPath;
	private int mPosition;
	private Gallery gallery;
	private ImageView image;

	@Override
	protected void onCreate(Bundle savedInstanceState) {
		super.onCreate(savedInstanceState);
		setContentView(R.layout.activity_savedinvitation);

		gallery = (Gallery) findViewById(R.id.gallery);
		image = (ImageView) findViewById(R.id.image);

		init();

		// ¹è°æ ¼±ÅÃÀ¸·Î À̵¿
		ImageButton btnBackgrounList = (ImageButton) findViewById(R.id.btnBackgrounList);
		btnBackgrounList.setOnClickListener(new OnClickListener() {
			@Override
			public void onClick(View v) {
				Intent intent = new Intent(getApplicationContext(),
						SelectBackgroundActivity.class);
				intent.setFlags(Intent.FLAG_ACTIVITY_CLEAR_TOP);
				startActivity(intent);

			}
		});

		// »èÁ¦
		ImageButton btnDelete = (ImageButton) findViewById(R.id.btnDelete);
		btnDelete.setOnClickListener(new OnClickListener() {

			@Override
			public void onClick(View v) {
				if (mInvitationPath != null) {
					if (deleteInvitation(mInvitationPath)) {
						Toast.makeText(getApplicationContext(),
								R.string.deleted, Toast.LENGTH_LONG).show();
						image.setImageBitmap(null);
						adapter.notifyDataSetChanged();
						gallery.invalidate();

					}
				}

			}
		});

		// °øÀ¯
		ImageButton btnShare = (ImageButton) findViewById(R.id.btnShare);
		btnShare.setOnClickListener(new OnClickListener() {

			@Override
			public void onClick(View v) {
				if (mInvitationPath != null) {
					Uri uri = Uri.fromFile(new File(mInvitationPath));
					Intent intent = new Intent(
							android.content.Intent.ACTION_SEND);
					intent.putExtra(intent.EXTRA_STREAM, uri);
					intent.setType("image/jpg");
					startActivity(Intent.createChooser(intent, getResources()
							.getText(R.string.title_share)));
				}

			}
		});

	}

	// ÃʱâÈ
	private void init() {
		if (Environment.getExternalStorageState().equals(
				Environment.MEDIA_MOUNTED)) {
			String path = Constant.DEFAULT_PATH;
			File file = new File(path);
			if (file.listFiles() != null) {
				for (File f : file.listFiles()) {
					mInvitationList.add(new String(path + "/" + f.getName()));
				}
			}

		}

		if (mInvitationList != null) {
			adapter = new StringImageAdapter(this, mInvitationList);
			gallery.setAdapter(adapter);

			gallery.setOnItemClickListener(new OnItemClickListener() {
				@Override
				public void onItemClick(AdapterView<?> parent, View view,
						int position, long id) {
					mPosition = position;
					mInvitationPath = mInvitationList.get(position).toString();
					image.setImageBitmap(BitmapFactory
							.decodeFile(mInvitationPath));
				}
			});
		}
	}// end init

	// ÃÊ´ëÀå »èÁ¦
	private boolean deleteInvitation(String path) {
		if (Environment.getExternalStorageState().equals(
				Environment.MEDIA_MOUNTED)) {
			File file = new File(path);
			if (file.isFile()) {
				file.delete();
				mInvitationList.remove(mPosition);
				return true;
			}
		}
		return false;
	}

}// end class

redpajama_set_name: RedPajamaGithub


text:
// Copyright 2012 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include "cc/test/fake_picture_layer_tiling_client.h"

#include <limits>

namespace cc {

class FakeInfinitePicturePileImpl : public PicturePileImpl {
 public:
  FakeInfinitePicturePileImpl()
      : PicturePileImpl(false) {
    gfx::Size size(std::numeric_limits<int>::max(),
                   std::numeric_limits<int>::max());
    Resize(size);
    recorded_region_ = Region(gfx::Rect(size));
  }

 protected:
  virtual ~FakeInfinitePicturePileImpl() {}
};

FakePictureLayerTilingClient::FakePictureLayerTilingClient()
    : tile_manager_(&tile_manager_client_,
                    NULL,
                    1,
                    false,
                    false,
                    false,
                    &stats_instrumentation_),
      pile_(new FakeInfinitePicturePileImpl()) {
}

FakePictureLayerTilingClient::~FakePictureLayerTilingClient() {
}

scoped_refptr<Tile> FakePictureLayerTilingClient::CreateTile(
    PictureLayerTiling*,
    gfx::Rect rect) {
  return make_scoped_refptr(new Tile(&tile_manager_,
                                     pile_.get(),
                                     tile_size_,
                                     rect,
                                     gfx::Rect(),
                                     1,
                                     0));
}

void FakePictureLayerTilingClient::SetTileSize(gfx::Size tile_size) {
  tile_size_ = tile_size;
}

gfx::Size FakePictureLayerTilingClient::CalculateTileSize(
    gfx::Size /* content_bounds */) {
  return tile_size_;
}

const Region* FakePictureLayerTilingClient::GetInvalidation() {
  return NULL;
}

const PictureLayerTiling* FakePictureLayerTilingClient::GetTwinTiling(
      const PictureLayerTiling* tiling) {
  return NULL;
}

}  // namespace cc


text:
Katolickou církev v Súdánu a Jižním Súdánu tvoří
 jedna latinská hierarchie, sjednocená v jedné biskupské konferenci, označované jako Súdánská katolická biskupská konference, zahrnující církevní provincii pod metropolitní arcidiecézí v každé zemi, s celkem 7 sufragánními diecézemi.
 tři východní katolické nadnárodní jurisdikce, z nichž každá pokrývá obě země (melchitská především Egypt).

V hlavním městě země Chartúmu existuje také apoštolská nunciatura v Súdánu (papežské diplomatické zastoupení na úrovni velvyslanectví) (do níž je začleněna i nunciatura v Eritreji), a apoštolská nunciatura v Jižním Súdánu, ale tento poslední úřad je přidělen nunciatuře v Keni (v Nairobi).

Současné latinské diecéze

Církevní provincie Chartúm
zahrnující celý Súdán
 Metropolitní arcidiecéze Chartúm
 Diecéze El Obeid

Církevní provincie Džuba
pokrývající celý Jižní Súdán

 Metropolitní arcidiecéze Džuba
 Diecéze Malakal
 Diecéze Rumbek
 Diecéze Tombura-Yambio
 Diecéze Torit
 Diecéze Wau
 Diecéze Yei

Současné východní katolické jurisdikce
Tři církve specifického obřadu mají příslušné diecézní jurisdikce, ale žádná z nich není vlastní pouze jedné zemi :

Arménská církev
(arménský obřad v arménském jazyce)
 Arménská katolická eparchie Iskanderiya (Alexandrie) v Káhiře, v Egyptě a hlavně pro Egypt

Melchitská (řecko)katolická církev
(byzantského obřadu)
 Melchitské katolické patriarchální území Egypta, Súdánu a Jižního Súdánu

Syrská katolická církev
(antiochijský obřad v syrštině)
 Syrské katolické patriarchální území Súdánu a Jižního Súdánu

Zaniklé jurisdikce
Žádný titulární úřad.
Pouze přímí předchůdci současných stolců, s výjimkou jednoho zrušeného biskupství v Súdánu:
 Latinská diecéze Dongola

Odkazy

Reference

Související články
 Katolická církev v Súdánu
 Katolická církev v Jižním Súdánu

Externí odkazy

 Catholic Church in Republic of South Sudan (South Sudan)
 Catholic Church in Sudan na Catholic-Hierarchy.org

Súdánské katolické diecéze

redpajama_set_name: RedPajamaWikipedia


text:
(-) Reptile
Skov, C., Hansen, J. H., Baktoft, H. et al. 2020. A field evaluation of long‐term effects of PIT tagging. Journal of Fish Biology 96(4), 1055-1059.
Passive integrated transponder (PIT)‐tagging is commonly used in behavioural studies of fish, although long‐term evaluations of effects from tagging under natural conditions are scarce. We PIT‐tagged common bream Abramis brama, European perch Perca fluviatilis, pike...
Harris, C., White, P., Mohler, V. et al. 2020. Electroencephalography can distinguish between pain and anaesthetic intervention in conscious lambs undergoing castration. Animals 10(3), 428.
Australian sheep routinely undergo painful surgical husbandry procedures without anaesthesia or analgesia. Electroencephalography (EEG) has been shown to be a successful measure of pain in livestock under a general anaesthetic. The aim of this study...
Fanning, L., Larsen, H., Taylor, P. S. 2020. A preliminary study investigating the impact of musical concerts on the behavior of captive Fiordland penguins (Eudyptes pachyrhynchus) and collared peccaries (Pecari tajacu). Animals 10(11), 2035.
Captive animal welfare is important for establishments that exhibit species for education, conservation, and research. However, captive animals are often exposed to a number of potential stressors, such as visitors and anthropogenic noise. We aimed...
Taylor, P. 2020. Remote controlled nociceptive threshold testing systems in large animals. Animals 10(9), 1556.
Nociceptive threshold (NT) testing is widely used for the study of pain and its alleviation. The end point is a normal behavioural response, which may be affected by restraint or unfamiliar surroundings, leading to erroneous...
Rasys, A. M., Divers, S. J., Lauderdale, J. D. et al. 2020. A systematic study of injectable anesthetic agents in the brown anole lizard (Anolis sagrei). Laboratory Animals 54(3), 281–292.
Anolis lizards have served as important research models in fields ranging from evolution and ecology to physiology and biomechanics. However, anoles are also emerging as important models for studies of embryo development and tissue regeneration...
Stabach, J. A., Cunningham, S. A., Connette, G. et al. 2020. Short-term effects of GPS collars on the activity, behavior, and adrenal response of scimitar-horned oryx (Oryx dammah). PLoS ONE 15(2), e0221843.
GPS collars have revolutionized the field of animal ecology, providing detailed information on animal movement and the habitats necessary for species survival. GPS collars also have the potential to cause adverse effects ranging from mild...
Natusch, D. J. D., Aust, P. W., Khadiejah, S. et al. 2020. Behavioral and corticosterone responses to carbon dioxide exposure in reptiles. PLoS ONE 15(10), e0240176.
The use of carbon dioxide (CO2) exposure as a means of animal euthanasia has received considerable attention in mammals and birds but remains virtually untested in reptiles. We measured the behavioral responses of four squamate...
Fernandez, E. J., Ramirez, M., Hawkes, N. C. 2020. Activity and pool use in relation to temperature and water changes in zoo hippopotamuses (Hippopotamus amphibious). Animals 10(6), 1022.
In the wild, hippopotamuses spend much of their daily activity in the water. In zoos, it is less clear the extent to which hippos spend time in the water. We examined how much time Woodland...
Kane, L. P., Chinnadurai, S. K., Vivirito, K. et al. 2020. Comparison of isoflurane, sevoflurane, and desflurane as inhalant anesthetics in prairie rattlesnakes (Crotalus viridis). Journal of the American Veterinary Medical Association 257(9), 945-949.
OBJECTIVE: To characterize induction and recovery characteristics of 3 commonly used inhalant anesthetics in prairie rattlesnakes (Crotalus viridis): isoflurane, sevoflurane, and desflurane. ANIMALS: 12 healthy adult prairie rattlesnakes. PROCEDURES: In a randomized crossover design, snakes...
Unwin, S. L., Saunders, R. A., Blackwell, E.-J., et al. 2020. A double-blind, placebo-controlled trial investigating the value of Pet Remedy in ameliorating fear of handling of companion rabbits. Journal of Veterinary Behavior 36, 54-64.
Rabbits are popular companion animals. There are numerous welfare issues affecting the majority of the population, including the fact that most rabbits are fearful when handled. Pet Remedy ™ (Unex Designs) is an herbal product...


text:
USS Ramage (DDG-61) – amerykański niszczyciel rakietowy typu Arleigh Burke. Okręt nazwano imieniem wiceadmirała Lawsona P. Ramage'a. Podczas budowy nosił oznaczenie DDG-61. Portem macierzystym okrętu jest Naval Station Norfolk w stanie Wirginia.

21 lipca 1997 niszczyciel eskortował USS "Constitution", gdy ten płynął po zatoce Massachusetts.

28 października 2009, stojąc w gdyńskim porcie po zakończeniu udziału w ćwiczeniach Joint Warrior, podczas przeprowadzania rutynowej obsługi karabinu maszynowego M240 przypadkowo wystrzelił trzy pociski w stronę portu. Trafiony został magazyn, nie było rannych. Lokalna policja zezwoliła na planowe wyjście okrętu z portu po przesłuchaniu załogi.

Przypisy

Linki zewnętrzne

Aktywne niszczyciele US Navy
Niszczyciele rakietowe typu Arleigh Burke
Okręty amerykańskie po 1945


1940 Jefferson Nickel. CoinTrackers.com has estimated the 1940 Jefferson Nickel value at an average of 35 cents, one in certified mint state (MS+) could be worth $120. (see details).
For a coin collector, a Jefferson Nickel is only worth acquiring if the coin is in excellent overall condition. Such coins are not only the most valuable, but are the .
During this time, the Jefferson Nickel was minted with silver in order to preserve. It is said that the coin was not widely seen in circulation until 1940, almost two .
1944 S Jefferson Nickel *35% SILVER* *Nice Looking Coin*. $2.45. 2018-S Jefferson. $0.0389955 $0.0389955 is the melt value for the 1938-1942 nickel on February 19, 2019.. 1940 D, 43,450,000, $0.10 – $4.00. 1940 S, 39,690,000 .
Better than good condition, clear date. Composition: 1938-1942, 1946 to date: weight 5 grams. 750 copper. 250 nickel, 1942-1945.560 copper. 350 silver.
1940 Jefferson Nickel: Finding The Value Of Your Coin. The new alloy composition consisted of a mixture of 56% copper, 35% silver, and 9% manganese.


The Louisiana Ragin' Cajuns have added a transfer outfielder to their 2019 roster.
Julie Rawls, who spent the previous two seasons at Northwestern St., has elected to transfer to Louisiana.
A native of Hallsville, Texas, Rawls hit a .296 for the Demons in 2017, to go along with 10 home runs and 36 runs batted in.
A left-handed hitter, Rawls also collected 17 outfield assists last season.
A standout player at Hallsville High School, Rawls was named a three-time all-state selection, while being tabbed the Class 5A Player of the Year in Texas by MaxPreps as a senior.
The Cajuns, who finished 41-16 last season, have now added Rawls, to go along with outfielder Keeli Milligan (Texas A&M), outfielder Kendall Talley (Lamar), pitcher Kali Kitsinis (Chiminade), and junior college transfer, Tiana Patrick (Santa Ana College), as transfers who will be competing for the Cajuns next season.


text:
Home » basketball player » Karim Souchu Net Worth 2018: What is this basketball player worth?
Karim Souchu Net Worth 2018: What is this basketball player worth?
Karim Souchu is a professional basketball player who plays Shooting guard / Small forward for the SLUC Nancy. Souchu was born on March 30, 1979, in Senlis. Souchu's height is 6 ft 6 in. Souchu's weight is 213 pounds. This article takes a deep dive into Karim Souchu's net worth.
Karim Souchu Career and Earnings/Salary
Souchu played basketball in college with Furman Paladins men's basketball (1999-2003) and started playing professionally in 1998. Souchu was first drafted in 2003.
Souchu played for the JDA Dijon Basket during 1998-1999 as well as the ASVEL Basket in 2003-2005. Later, Souchu played for the Liège Basket throughout 2005-2007, the AEL Limassol over 2007-2008, the Chorale Roanne Basket during 2008-2009, and the Limoges CSP during 2009-2011.
Souchu won a silver medal in the 2012 FIBA 3×3 World Championship in the Men's event.
Karim Souchu Net Worth 2018
Player yearly earnings range between $20,000 and tens of millions of dollars per annum, depending on a number of circumstances. Although most professional NBA players earn a salary of about $2 million, a few with D-league crossover deals earn as little as $50,000. The salary cap for National Basketball Association players is approximately $100 million, although as of today no player brings in anywhere near that amount. The top players in the NBA earn close to $35 million. Outside of the NBA, annual payments can be under $20,000 annually for minor league teams.
Karim Souchu net worth: basketball salary distribution
So what is basketball player Karim Souchu's net worth in 2018? Our estimate for Karim Souchu's net worth as of 2018 is:
Looking for other basketball players? Check out these basketball net worth articles: Chris Commons, Dontaye Draper, Polat Kocaoğlu, Lloyd Neal, Robert Skibniewski, Aleksandar Cvetković, Darko Matic, Sarah Ogoke, Loy Vaught, Randy Breuer, and Guido Grünheid.


text:
Q: jupyter notebook is not opening in the Google Cloud Platform The image of error I'm getting.
Please help me.

A: Unfortunately there is not enough information regarding the steps you took before getting the error. I have tested to create a Jupyter notebook both in VM Instance and in Google Cloud shell. Try one of the methods below:
For VM Instance:

*

*Update the current packages executing sudo apt update

*Install pip and Python header files, because they are used by some Jupyter's dependencies. Execute sudo apt install python3-pip python3-dev

*Upgrade pip by executing sudo -H pip3 install --upgrade pip

*Install virtual environment by executing sudo -H pip3 install virtualenv

*Create a virtual environment with virtualenv VIRTUAL_ENV_NAME

*Activate the virtual environment with source VIRTUAL_ENV_NAME/bin/activate

*Install Jupyter by executing pip install jupyter

*Run Jupyter Notebook with local host tag as ip: jupyter notebook --ip=127.0.0.1

*After that a link will be generated and when you click on it, the Browser will show you the Home for Jupyter Notebook.

For Google Cloud Shell the procedure is the same with the VM Instance one, but skip the first 4 steps.

*

*Create a virtual environment with virtualenv VIRTUAL_ENV_NAME

*Activate the virtual environment with source VIRTUAL_ENV_NAME/bin/activate

*Install Jupyter by executing pip install jupyter

*Run Jupyter Notebook with local host tag as ip: jupyter notebook --ip=127.0.0.1

*After that a link will be generated and when you click on it, the Browser will show you the Home for Jupyter Notebook.

redpajama_set_name: RedPajamaStackExchange