David Aplin Group is honoured to be a winner of the Canadian HR Reporter 2017 Readers' Choice Award for Executive Recruitment. The Readers' Choice Awards celebrate HR vendors and suppliers that HR Reporter readers select as their favourites, designed to highlight these extraordinary firms — the ones their readers think are the very best at what they do.
Published 21 times a year, the popular tabloid (www.hrreporter.com) offers readers the most current news, information on the latest trends and practices, expert advice, experiences and insights from HR practitioners, research and resources. Each issue provides real-world solutions to perplexing HR situations (from peers and industry experts), helpful case studies and insightful commentary.
David Aplin Group (www.aplin.com) was established in 1975 and today is one of Canada's most accomplished recruiting firms. We provide the strongest talent for every organization we help—from local entrepreneurs to Fortune 500's. We work hard to give our customers deeply specialized, full-service recruiting and HR solutions —from one source. Most of all, we proactively seek better employment strategies to help ensure our client's recruiting success. Aplin Executive Search consultants find senior management and executives who best fit your current business strategies and share your vision for the future – whether they are located across town or across the globe. We consider each executive search engagement unique. Beyond search, we offer services to assess your organizational culture and integrate your new leader while advising your executive leadership and/or board.


Preschool children participated in a science-learning event about light in their own classroom. The same day as the event, parents or caregivers were instructed to converse with their children at home in the evening about either the science learning event or another 'special or fun' event that happened to them recently in whatever way was natural for them. One week later, a researcher interviewed children to examine what they remembered about the science-learning event. Analyses focused on the impact of the topic and degree of elaboration of parent-child conversations on children's memory for the science-learning event a week later. The findings have implications for best practices in preschool education.
Stone, Emily A., "Parental Conversation Styles and Learning Science With Preschoolers" (2015). Honors Theses and Capstones. 230.


text:
Wedding Present - Bizarro
Vendor: Sony Music
NEW VINYL LP ON SONY 2012
The Wedding Present has added seven extra tracks to their 1989 album BIZARRO, among them the B-sides from earlier hit singles "Brassneck" and "Kennedy." Two years on from their debut album, the Wedding Present delivered a proper sophomore effort, one quite distanced from the jangle punk days of 1987's George Best. Though David Gedge's obsession with the lovelorn had by no means disappeared, the band finally found a way to frame his lyrics properly, resulting in a darker album with more emotional weight where needed. "Brassneck," the Weddoes' first collaboration with engineer Steve Albini, became their biggest hit yet, peaking at Number 24 on the British charts. http://en.wikipedia.org/wiki/The_Wedding_Present
1. Brassneck
2. Crushed
3. No
4. Thanks
5. Kennedy
6. What Have I Said Now?
7. Granadaland
8. Bewitched
9. Take Me!
10. Box Elder
11. Don't Talk Just Kiss
12. Gone
13. Be Honest

redpajama_set_name: RedPajamaCommonCrawl


This article introduces basic domain-related concepts such as top-level domains, subdomains, and DNS.
Remember that in order to run your own web site, you need more than just a domain name. You also need a hosting package that provides you an account on one of A2 Hosting's servers. A hosting package includes the storage space, e-mail services, and other resources that you need to run a complete web site.
Even if you have never hosted a web site before, you have undoubtedly used domain names. Every time you use a web browser to visit a web site by name, such as a2hosting.com, you are using domain names.
Domain names are organized hierarchically from right to left. The right-most portion of a domain name is called the top-level domain (TLD). The .com TLD is probably the most well known, but there are many others, such as .net, .org, .edu, and .mil. (Country codes, such as .us and .fr, are also TLDs.) When you register a domain name, you can choose which TLD to use (though some TLD's, such as .edu and .gov, are restricted to certain types of organizations).
The next domain name level after the TLD is called the second-level domain. This is the part of the domain name that you define. For example, a2hosting is the second-level domain in a2hosting.com. When you purchase a domain name, this is the portion that you "own", as well as any subdomains beneath it. A domain name always contains a TLD and a second-level domain.
As you may have guessed, a subdomain is a third-level domain. The www subdomain is probably the most well known, but you can name subdomains anything you want. Subdomains are sometimes used to subdivide web site functionality. For example, you could have an English version of your web site at en.example.com, and a French version at fr.example.com.
A2 Hosting accounts include the www subdomain by default. Therefore, users can access your web site using the URL www.example.com or example.com—they both point to your web site. This helps ensure that you do not lose any potential visitors to your web site.
Without the Domain Name System (DNS), the Internet would be a much less user-friendly place. Instead of using easily remembered names such as a2hosting.com, we would have to use a sequence of numbers like 75.98.175.166 (also known as an IP address) every time we wanted to visit a web site or access a service on the Internet. DNS translates human-readable domain names into numeric IP addresses that computers can understand.
When you purchase a domain name from a third-party registrar, you own the name, but it initially does not point to anything. (Technically, a domain registrar often "parks" the domain, and visitors to the domain see a generic web page provided by the registrar.) To enable users to access your web site using the domain name, you must define the name servers that the domain should use.
Name servers are computers that use DNS to translate the human-reabable domain names into IP addresses. Name servers often contain ns in their domain names (for example, ns3.a2hosting.com). If you purchase a domain name directly from A2 Hosting, you do not have to worry about configuring name server settings, because we take care of this for you. However, if you have purchased a domain name with another registrar (for example, eNom or Go Daddy), you must update the domain's name server settings to "point" to A2 Hosting's name servers. After you do this, users will be able to visit your web site by typing the domain name in their web browser.
If you purchase your domain directly from A2 Hosting, no further action is required. A2 Hosting takes care of the name server (DNS) settings for you.
If you already own a domain that you purchased from a different registrar or hosting company, you can transfer the entire domain to A2 Hosting. All aspects of the domain, including billing and domain administration, are transferred from the registrar to A2 Hosting. For information about how to do this, please see this article.
If you already own a domain that you purchased from a different registrar or hosting company, you can change the domain's name server (DNS) settings to point to A2 Hosting's servers. Unlike a transferred domain, billing and domain administration remain with the domain's current registrar. For information about how to do this, please see this article.
For more information about DNS, please visit http://en.wikipedia.org/wiki/Domain_Name_System.
To view a list of all top-level domains (TLDs), please visit http://www.iana.org/domains/root/db.
If you're a brand-new shared hosting customer, this Quick Start Guide is for you.
This Quick Start Guide provides information you need as a reseller to get your site and your customers' sites up and running.
This Quick Start Guide provides all the information you need to get your new VPS up and running quickly.


ABSENT: Jakson L. Kelly M. Vanessa S.
7-12th girls Volleyball Team Shirts are in! The cost is $12.50, which must be paid before you get your shirt.
Band T-Shirts are here! Please pay $10.00 to Mrs. Kemnitz ASAP. Thanks!
Yearbooks are on sale for $45. See Mrs. G to purchase one.
Ro-So-Dak is bringing back "Ask Shirley". If there is a question you want to ask anonymously or if you need any kind of advice, write it down and drop it in Mrs. Hustel's mailbox in the office.
Mr. Schiltz is selling football "Focus" shirts for $10. He has youth sizes all the way up to Adult 2XL available. Stop by his room and pick one up!
We are clearing out the Raiders athletic wear – VB T-shirts $3.00; Raiders Headbands $2.00; Boys Basketball navy ¼ zip pullovers $10.00; Girls Basketball white full zip jackets $10.00 – Stop in the office if you are interested.
o XC – Deuel Invitational in Clear Lake at 4:00; Please dismiss the following students at 12:55 – Emery C. McKenzie F. Austin F. Kasianna K. Marilyn L. Tye S. Savion W.
o There will be a meet –n- greet for all VB parents and players in the lunchroom after the game. This gives all the parents a chance to visit and meet the kids. Lemonade and cookies will be served!


text:
Bei der Amokfahrt von Karlsruhe, die am 29. August 1985 in den Karlsruher Höhenstadtteilen geschah, wurden fünf Menschen getötet und vier weitere schwer verletzt. Der Täter begann seine Amokfahrt im Stadtteil Grünwettersbach, fuhr mit einem entwendeten Pkw über Wolfartsweier in die Bergwaldsiedlung und von dort aus weiter nach Hohenwettersbach. Auf dieser Strecke tötete und verletzte er anscheinend wahllos Passanten und Anwohner. Wieder in Grünwettersbach angekommen, wurde er nach seiner 45-minütigen Amokfahrt von der Polizei gestellt und ließ sich widerstandslos festnehmen.

Täter
Der Täter, ein arbeitsloser Dreher, war zum Zeitpunkt der Tat 32 Jahre alt und lebte im Haus seiner verstorbenen Eltern im Waldbronner Ortsteil Busenbach, in dem er auch aufgewachsen war.

Er lebte ohne Sozialkontakte abgeschottet in verwahrlosten Verhältnissen und war mehrfach straffällig geworden; so wurden 1981 und 1982 bei Hausdurchsuchungen Schusswaffen sichergestellt und er zu einer zehnmonatigen Haftstrafe verurteilt, die zur Bewährung ausgesetzt wurde. Schon länger bestehende psychische Probleme in Form von Verfolgungswahn, die sich auch in Gewalt gegenüber seiner Halbschwester äußerten, traten nun deutlich zutage.

Mehrere Versuche des Bewährungshelfers und der verbliebenen Familienmitglieder, den Täter zu einer Untersuchung zu bewegen bzw. die Untersuchung und eine eventuelle Einweisung in eine Psychiatrie von den zuständigen Behörden anordnen zu lassen, scheiterten. Ende August 1985 war das Erbe seiner Eltern, von dem der Täter bis dahin gelebt hatte, aufgebraucht und der Täter befand sich in akuter Geldnot.

Tathergang
Am Tag der Tat, einem sonnigen Donnerstag, war der Täter verzweifelt. Er hatte noch 8 DM und nichts mehr zu essen im Haus.

Im Garten seines Hauses grub er daraufhin einen dort versteckten großkalibrigen Revolver aus, den er als Dekorationswaffe gekauft und wieder für scharfe Munition funktionsfähig gemacht hatte. Die dazugehörige Dumdum-Munition hatte er selbst präpariert.

Misslungener Banküberfall
Der Täter beschloss, eine Bank in Palmbach zu überfallen, informierte sich vorher jedoch nicht über die Öffnungszeiten. Gegen 16:50 Uhr bestieg er in Busenbach sein Mofa und fuhr zu der Bankfiliale nach Palmbach, die um diese Uhrzeit geschlossen hatte. Daher fuhr er von Palmbach weiter nach Grünwettersbach und erreichte gegen 17 Uhr die am Ortsrand gelegene Aral-Tankstelle in der Wiesenstraße.

Entwendung eines Autos
An der Tankstelle wollte der Täter ein Auto entwenden und forderte von einem Mann die Autoschlüssel; dieser sagte ihm, dass die Schlüssel an der Kasse lägen, woraufhin der Täter die Verkaufsräume betrat. Der Kassiererin, die ihm beim Anblick der Waffe das Geld aus der Kasse hinlegte, teilte er mit, dass er kein Geld, sondern lediglich die Autoschlüssel haben wolle.

Ein 65 Jahre alter Rentner, der als unbeteiligter Kunde anwesend war, ging währenddessen auf den Täter zu, legte die Hand auf die Waffe und sagte dem Täter, er solle "keinen Blödsinn machen". Als der Täter weiter rückwärts zurückwich und der Rentner ihm folgte, stieß der Täter mit dem Rücken an einen Warenständer. Daraufhin gab der Täter drei Schüsse auf ihn ab, der Rentner verstarb an seinen Verletzungen.

Wieder im Freien schoss er auf zwei weitere Kunden, die von den Geschehnissen noch nichts mitbekommen hatten: einen Mann und eine 32-jährige Frau, die er beide traf und schwer verletzte. Anschließend stieg er in ein Auto, das an einer Zapfsäule stand, und begann seine Amokfahrt. Er fuhr über die Wiesenstraße und die Straße "Am Wetterbach" über die L623 nach Wolfartsweier, vorbei am Zündhütle und von dort aus weiter auf die K9652/Tiefentalstraße in Richtung Hohenwettersbach.

Amokfahrt
Der Täter begann nun, auf seiner Fahrt wahllos auf unbeteiligte Menschen zu schießen. Auf der K9652/Tiefentalstraße schoss er von hinten auf eine 43-jährige Radfahrerin, die bergauf in Richtung Hohenwettersbach fuhr. Sie stürzte verletzt zu Boden. Der Täter hielt an, stieg aus und schoss der Frau noch drei Mal aus nächster Nähe in den Kopf. Die Frau verstarb am Tatort.

Danach setzte der Täter seine Fahrt zunächst in die Bergwaldsiedlung fort. In der Straße des Roten Kreuzes sah er eine 60-jährige Frau zusammen mit ihrem 29-jährigen Sohn im Garten arbeiten. Er gab aus dem heruntergekurbelten Autofenster heraus fünf Schüsse auf die beiden ab, traf die Mutter drei Mal und den Sohn zwei Mal in den Rücken. Beide verstarben kurze Zeit später.

In der gleichen Straße traf er etwa 200 Meter weiter auf drei Frauen, die aus einem Haus kamen und in ein Auto steigen wollten. Aus dem Autofenster schoss er drei Mal auf die Gruppe. Ein Projektil schlug in ein geparktes Auto ein und blieb dort stecken; beim zweiten und dritten Schussversuch versagte die Waffe. Die Frauen gingen hinter dem Auto in Deckung und blieben unverletzt; der Täter fuhr daraufhin weiter nach Hohenwettersbach und von dort aus über Feldwege in Richtung des Batzenhofes. Auf einem Feldweg machte er eine Zigarettenpause, lud die Waffe nach, überdachte seine Situation und bemerkte den kreisenden Polizeihubschrauber.

Der Täter wendete und fuhr zurück nach Hohenwettersbach in die Straße "Rosengarten", wo er auf dem Gehweg fünf ältere Menschen an einer Bushaltestelle stehen sah. Der Täter stieg aus und versuchte, eine Frau als Geisel zu nehmen, was ihm aufgrund der Gegenwehr ihres Ehemannes und eines Begleiters misslang. Der Täter gab daraufhin mehrere Schüsse ab, tötete die 61-jährige Frau und verletzte die beiden Männer schwer.

Festnahme
Der Täter setzte nun seine Fahrt zum letzten Mal fort. Er fuhr in Hohenwettersbach über die Lindenstraße in Richtung Autobahn, unterquerte die Autobahn 8 durch eine Feldwegunterführung und fuhr, jetzt zurück in Grünwettersbach, über die Heidenheimer Straße wieder zur Wiesenstraße, von wo aus er den Weg einschlug, den er bereits etwa 40 Minuten zuvor befahren hatte.

Zu diesem Zeitpunkt waren der Polizei bereits Fahrzeugtyp, Farbe und Kennzeichen des entwendeten Autos bekannt. Die Zufahrts- und Verbindungsstraßen zu und zwischen den Höhenstadtteilen wurden nach und nach gesperrt, die Fahndung nach dem Pkw wurde aus der Luft durch einen Polizeihubschrauber koordiniert und unterstützt. Als das Fahrzeug des Täters entdeckt war, wurde die Verfolgung mit einem zivilen Fahrzeug aufgenommen, um beim Zugriff das Überraschungsmoment nutzen zu können.

Gegen 17:45 Uhr bog der Täter in die Hohenwettersbacher Straße ein, eine enge und steile Straße, die auf seiner Seite mit mehreren Fahrzeugen zugeparkt war. Als er wegen eines entgegenkommenden Fahrzeuges hinter einem geparkten Pkw halten musste, vermutete er in dem entgegenkommenden Auto die Polizei, woraufhin er die Hände hob. In diesem Moment rammte ihn das verfolgende zivile Fahrzeug der Polizei, schob ihn auf den geparkten Pkw auf und keilte ihn ein. Der Täter ließ sich daraufhin widerstandslos festnehmen.

Juristische Aufarbeitung und Hintergründe
Der Tatablauf wurde wenige Tage nach der Tat von der Polizei und der Staatsanwaltschaft zusammen mit dem Täter rekonstruiert. Auf diese Rekonstruktion sowie auf ein späteres psychiatrisches Gutachten stützte sich das spätere Urteil maßgeblich.

Rekonstruktion
Der Täter zeigte sich während der Rekonstruktion sehr kooperativ und erläuterte an den einzelnen Tatorten den genauen zeitlichen Ablauf sowie seine Positionen und die seiner Opfer. Die Rekonstruktion wurde von den ermittelnden Beamten mit einer Kamera aufgezeichnet.

Der Kriminaldirektor Franz Burkhart bemerkte im Rahmen der Rekonstruktion des Tatablaufs, der Täter sei "nach der Tat nicht sonderlich erregt, sondern in Anbetracht der Tat eher gleichgültig" gewesen; darüber hinaus sei der Täter "sehr bemüht" gewesen, den Tatablauf detailliert darzustellen. Diese Kooperation wurde dem Täter aus Sicht seines Rechtsanwalts falsch ausgelegt; es hieß später im Prozess, er hätte "sich selbstdarstellerisch betätigt".

Einige direkte Anwohner reagierten sehr aufgebracht, als der Täter unter Bewachung der Polizei auf der Straße stand und die Abläufe erläuterte. Laut Aussage seines Anwalts herrschte "Lynchklima", und es fielen mehrfach Rufe wie "Bringt ihn um".

Prozess
Der Täter wurde vor dem Prozess psychiatrisch begutachtet; er sei "kein berechnender Killer, sondern ein Täter ohne erkennbares Motiv". Der Prozess vor der Schwurgerichtskammer des Landgerichts Karlsruhe fand im Oktober 1986 statt.

Seine Tat wurde dem Angeklagten nicht als Schuld zugerechnet, da er laut Gutachter seit 1978 geisteskrank sei. Es wurde festgestellt, dass eine Behandlung auf absehbare Zeit kaum zum Erfolg führen würde, da die Persönlichkeitsverformung zu weit fortgeschritten sei und keine Krankheitseinsicht bestehe. An der außerordentlichen Gefährlichkeit des Täters sei nichts zu ändern, eine medikamentöse Behandlung sei wenig erfolgversprechend.

Dem Täter wurde eine schwere geistig-seelische Erkrankung aus dem halluzinatorisch-schizophrenen Formenkreis bescheinigt; er wurde ohne zeitliche Begrenzung in ein psychiatrisches Landeskrankenhaus eingewiesen. Auch 2015 soll er sich noch in einem psychiatrischen Krankenhaus befunden haben.

Hintergründe des Täters
Die Ursachen für die Erkrankung des Täters, die letztlich zu der Amokfahrt geführt hatte, liegen in seinem Minderwertigkeitsgefühl und seiner Waffenliebe und reichen bis in seine Kindheit zurück.

Familiäre Hintergründe
Seine Mutter hatte ihn sehr verwöhnt, es bestand laut Bewährungshelfer "ein enges und inniges Verhältnis". Sie starb 1977, der Täter kam mit diesem Verlust nicht zurecht. 1980 starb auch sein Vater, ein Korbmacher mit Alkoholproblemen, zu dem er kein gutes Verhältnis hatte. Ab diesem Zeitpunkt hatte der Täter so gut wie keine Sozialkontakte und familiären Bindungen mehr.

Der Täter arbeitete nicht mehr, da er glaubte, von seinem Erbe in Höhe von rund 29.000 DM (entspricht in etwa einer Kaufkraft von rund 32.000 € im Jahr 2015) auf Dauer leben zu können. Zu seiner wesentlich älteren Halbschwester, der Tochter seiner Mutter aus erster Ehe, war das Verhältnis angespannt.

Illegaler Waffenbesitz und Bewährungsstrafe
Bereits ab 1972 hatte sich der Täter, teilweise im nahen Frankreich, mehrere Schusswaffen gekauft. Gegenüber seinem Rechtsanwalt äußerte er sich später, dass er "ein schwächliches und kränkliches Kind" gewesen und oft von Mitschülern gehänselt und verprügelt worden sei. Als er im Jugendalter dann einmal mit einer Korkenpistole seinem größten Widersacher ins Gesicht geschossen habe, habe er auf einmal die Macht einer Waffe gespürt und dieses Gefühl genossen. Ab diesem Zeitpunkt habe man ihn in Ruhe gelassen; das Gefühl der Macht habe in ihm die "Liebe" zu Waffen geweckt.

Im Frühjahr 1981 förderte eine überraschende Hausdurchsuchung zwei Faustfeuerwaffen und sechs Gewehre zutage, darunter auch mehrere seinerzeit nicht erlaubnispflichtige Vorderlader. Im April 1982 wurde er wegen unerlaubten Waffenbesitzes zu 10 Monaten Haft auf Bewährung verurteilt und ihm ein gerichtlich bestellter Bewährungshelfer zugewiesen, der in den folgenden drei Jahren sein nahezu einziger regelmäßiger Sozialkontakt sein sollte.

Verfolgungswahn und Abschottung
Ab 1982 traten erste psychische Probleme auf. Er nahm an, von den Nachbarn vergiftet zu werden, und vermutete körperliche Schäden, denen er selbst entgegenzuwirken versuchte. So begann er, große Mengen an Kaffee und Bier zu trinken, um eine befürchtete Nierenschädigung durch "Ausschwemmen der Gifte" zu "kurieren". Darüber hinaus befürchtete er, von seiner Schwester mit Schlaftabletten vergiftet zu werden, um von ihr um sein Erbe gebracht zu werden.

Als der Täter den Kontakt zum Bewährungshelfer, der bis zur Tat sein einziger Kontakt zur Außenwelt war, immer mehr blockierte, suchte ihn dieser in seinem Haus auf; dabei stellte der Bewährungshelfer fest, dass sich der spätere Täter gewissermaßen in seinem Haus verbarrikadiert hatte. Bei der Durchsuchung des Hauses nach der Amokfahrt fanden die Ermittler zudem selbstgebaute "Schutzvorrichtungen", da er befürchtete, von den Nachbarn durch Gase vergiftet zu werden; so schlief der Täter in der Küche in einer Hängematte, die mit einer Zeltplane überspannt war. Beim Schlafen setzte er sich eine Atemmaske auf, die von einem Belüftungsgerät mit frischer Luft von außen versorgt wurde.

Der Bewährungshelfer erkannte den psychisch labilen Zustand des Täters und bemühte sich mehrfach um eine fachärztliche Untersuchung und eine Einweisung in die Psychiatrie, die jedoch trotz wochenlanger Anstrengungen des Bewährungshelfers von den Behörden nicht vorgenommen wurde.

Psychische Erkrankung
Ab 1983 "flüchtete" der Täter immer öfter aus seinem Haus, um sich der vermeintlichen Vergiftung durch die Nachbarn zu entziehen; so wurde der Täter aufgrund seines auffälligen Verhaltens in Pforzheim nachts von einem Streifenpolizisten aufgegriffen. Bei der anschließenden Vernehmung machte er einen verängstigten und verwirrten Eindruck, weshalb er zu seinem eigenen Schutz die Nacht in der Arrestzelle des Polizeireviers Pforzheim-Nord verbrachte und am nächsten Morgen der Gesundheitsbehörde vorgestellt wurde:

Auf den zunehmenden Verfolgungswahn und den beginnenden Realitätsverlust weisen auch Auszüge aus Briefen des Täters hin, die bei den Ermittlungen nach der Tat zur Beurteilung seines psychischen Zustands berücksichtigt wurden:

Nach Aussage eines Rechtspflegers des Amtsgerichts Ettlingen strebte die Halbschwester des Täters aufgrund seines psychisch labilen Zustands seine Entmündigung an, da er sie mehrfach bedroht und geschlagen habe. Sie befürchtete jedoch weitere Übergriffe des Täters, da diesem ein Duplikat des Antrags auf Entmündigung zugestellt werden würde. Aus diesem Grund zog sie ihren Antrag auf Entmündigung zurück.

Die Einstellung des Täters gegenüber seiner Halbschwester beschreibt er in dem Brief vom Mai 1985 wie folgt:

Im Juni 1985 setzt sich der Täter abermals mit seinem Gesundheitszustand auseinander:

Zu diesem Zeitpunkt bemühte sich der Bewährungshelfer, der die sich zuspitzende Situation erkannt hatte, schon intensiv um eine fachärztliche Untersuchung und die Einweisung des Täters in eine Psychiatrie, die von den zuständigen Behörden jedoch nicht angeordnet wurden.

Zuspitzung der Situation kurz vor der Tat
Anfang August 1985 meldete sich der Täter bei der Polizei Ettlingen. Er erschien dort persönlich und bat um Hilfe; man "blase Gas in seine Fenster". Beamte gingen daraufhin mit ihm in seine Wohnung, suchten nach Auffälligkeiten, konnten aber nichts finden, was auf einen derartigen Angriff hindeutete. Dabei wurden jedoch mehrere Waffen gefunden und beschlagnahmt.

Die Polizei setzte sich daraufhin mit nahen Verwandten des Täters in Verbindung, die mit ihm ein "intensives Gespräch in seinem Sinne" führten, damit er einen Arzt aufsuchte. Der spätere Täter zeigte sich nach dem Gespräch zunächst damit einverstanden und willigte einer fachärztlichen Untersuchung in der Klinik Langensteinbach ein.

Zwei Tage vor der Tat wurde der Täter in die Klinik Langensteinbach zur Untersuchung in der neurologischen Abteilung gefahren. Der Bewährungshelfer stand in telefonischem Kontakt mit der Klinik und bat darum, dass die Untersuchung möglichst zeitnah stattfinde, da er befürchtete, der Täter könne es sich während der Wartezeit wieder anders überlegen.

Am Tag der geplanten Untersuchung erhielt der Bewährungshelfer zunächst einen Anruf von der Polizei Ettlingen. Die Polizei war während seiner Abwesenheit in die Wohnung des Täters eingedrungen. Man habe dort einen weißen Behälter gefunden, in dem weitere Schusswaffen gelagert waren. Die Polizei beauftragte daraufhin den Bewährungshelfer, das zuständige Gericht zu kontaktieren, dass es die Aussetzung der Strafe wegen illegalen Waffenbesitzes zur Bewährung widerrufe. Daraufhin verständigte der Bewährungshelfer mündlich den zuständigen Richter in der Bewährungssache und kündigte einen schriftlichen Bericht an.

Gegen Mittag wurde dem Bewährungshelfer mitgeteilt, dass die Untersuchung fehlgeschlagen sei: Der Täter sei auf dem Klinikgelände aus dem Auto gesprungen und verschwunden. Der Bewährungshelfer verständigte daraufhin die Polizei und berichtete, dass der Täter in aufgeregtem und hilflosen Zustand unterwegs und sein Aufenthaltsort unbekannt sei. Die Polizei sagte, man wolle eine Streife zu seiner Wohnung schicken und ihn dort aufgreifen. Dies geschah nicht.

Ab diesem Zeitpunkt hatte der Täter keinen Kontakt mehr zur Polizei, seinen Verwandten und seinem Bewährungshelfer. Zwei Tage später kam es zur Amokfahrt.

TV-Dokumentation
In einer TV-Dokumentation von 1991 wurde der Tathergang rekonstruiert. In zwei parallelen Erzählsträngen werden einerseits die Tat (vom Beginn in Busenbach bis zur Festnahme in Grünwettersbach) und andererseits der psychologische Hintergrund des Täters (von seiner Kindheit bis zur Einweisung in das psychiatrische Landeskrankenhaus) detailliert dargestellt.

Die 42-minütige Produktion enthält neben Interviews mit seinem Bewährungshelfer, den ermittelnden Beamten, Schulfreunden, Familienmitgliedern und Opfern des Täters sowohl Originalaufnahmen von den Tatorten, die direkt nach der Tat 1985 angefertigt wurden, als auch Aufnahmen von den Fahrwegen und Tatorten zum Zeitpunkt der Produktion 1991.

Aus einer Rezension:

Quellen

Zeitungs- und Zeitschriftenartikel
 Peter Vollmer: Bei Rekonstruktion der Bluttat führte Todesschütze Regie. Artikel in den Badischen Neuesten Nachrichten vom 5. September 1985.
 ders.: Empfehlung zur Untersuchung kam erst nach der Bluttat an. Artikel in den Badischen Neuesten Nachrichten vom 7. September 1985.
 ders.: Sein "Überlebenskampf" endete in Amokfahrt. Artikel in den Badischen Neuesten Nachrichten vom 7. Oktober 1986.
 ders.: Amokläufer kommt in Psychiatrie. Artikel in den Badischen Neuesten Nachrichten vom 18. Oktober 1986
 Peter Bier: "Im Prinzip war es ein Unfall". Artikel im Stern vom 9. Oktober 1986.

TV-Dokumentation
 Christoph Felder: Amokläufer, D 1991, 42:00 min (kostenpflichtig)

Weblinks
 Notiz im Nachrichtenmagazin Focus vom 14. März 1994, abgerufen am 12. März 2010.
 Notiz im Nachrichtenmagazin Der Spiegel vom 26. April 2001, abgerufen am 12. März 2010.
 Stadtchronik auf www.karlsruhe.de, abgerufen am 27. Februar 2014.
 Sven Felix Kellerhoff: "Frauenhass war der Grund für die schreckliche Bluttat". Artikel auf www.welt.de, abgerufen am 29. August 2020.

Einzelnachweise

Karlsruhe
Karlsruhe
Geschichte (Karlsruhe)
Kriminalfall 1985

redpajama_set_name: RedPajamaWikipedia


text:
Neomordellistena testacea es una especie de coleóptero de la familia Mordellidae.

Distribución geográfica
Habita en la  República Democrática del Congo.

Referencias

Testacea
Fauna de la República Democrática del Congo


text:
\subsection{Proprietary Command Codes}
At the time this research was performed, we were not aware that the command codes, which we revealed with our attack, could already be found in example firmware of NXP\footnote{\url{http://www.nxp.com/files/markets/identification/download/MC081380.zip}}. Note that the firmware refers to the command codes sent from PC to reader. Our research shows that (perhaps obviously) these are the same command codes sent from reader to card.

We used a card in transport configuration with default keys and empty data blocks to reveal the encrypted commands used in the high-level protocol.
All the commands send by the reader consist of a command byte, parameter byte and two CRC bytes. We made several attempts to reveal the command by modifying the ciphertext of this command. The way to do this is to assume we actually know the command. With this `knowledge' we XOR the ciphertext which gives us the keystream. To check if this is indeed the correct keystream, we XOR it with a new command for which we know the response. If we guessed the initial command right the response of the card will be that known response. This method revealed the commands shown in Figure~\ref{tabcommands}.

Now, one could try to replay the same authentication again and try to execute a command that returns an ACK or NACK in order to recover more keystream. Because an ACK or NACK is only 4 bits in size, it leaves some spare bits for which we know the keystream. We can use these bits to execute another command for which we now know the plaintext. This delivers more known keystream as a result, and this method can be applied repeatedly. However, this approach does only work if a \textit{decrement}, \textit{increment} or \textit{transfer} is allowed. These are the commands that return an ACK and therefore are in total shorter than the \textit{read}. We can only send valid commands because otherwise the protocol aborts.
\begin{figure}[hb]
\begin{center}
\includegraphics[width=80mm]{pictures/commands.eps}
\caption{Command set of \textsc{mifare} Classic}
\label{tabcommands}
\vspace{-15pt}
\end{center}
\end{figure}
The \textit{read} command returns 16 data bytes and 2 CRC bytes. On a \textit{write} command the card returns a 4-bit ACK, this indicates that the card is ready to receive 16 data bytes followed by 2 CRC bytes.\\
The \textit{decrement}, \textit{increment} and \textit{restore} commands all follow the same procedure. The card indicates that it is expecting a value from the reader by sending a 4-bit ACK response. This value is 4 bytes and is followed by 2 CRC bytes. For the \textit{restore} this value is send but not used. The value is send as \texttt{YY YY YY YY ZZ ZZ}, where \texttt{YY} are the value bytes and \texttt{ZZ} the CRC bytes.\\
Finally, a \textit{transfer} command is send to transfer the result of one of the previous commands to a memory block. The card response is an ACK if it went well. Otherwise it responds with a NACK.

The 4-bit ACK is \texttt{0xa}. When a command is not allowed the card sends \texttt{0x4}. When a transmission error is detected the card sends \texttt{0x5}. The card does not even give a response at all if the command is of the wrong length. The protocol aborts on every mistake or disallowed command.

\section{Weakness in MIFARE Classic} \label{weakness}
Nohl and Pl\"otz partially recovered the CRYPTO1 algorithm that is used to encrypt the communication between the card and the reader~\cite{CCC,USENIX08}. The pseudo-random generator on the card, which initiates the algorithm by generating a nonce, is weak. In our analysis, we use this weakness to extend the work of Nohl and Pl\"otz with a practical attack, which delivers the needed known plaintext for brute-force, and a description of the \textsc{mifare} Classic protocol. In this attack, we do not need knowledge about the CRYPTO1 algorithm other than that it is a stream cipher which encrypts bitwise.
\paragraph{}
During our experiments, independently, we also noted the weakness of the pseudo-random generator of the card by requesting many card nonces. We were able to request about 600,000 nonces every hour. Within one hour, a nonce reappeared at least about four times. The nonce is generated by a \textit{Linear Feedback Shift Register} (LFSR)~\cite{USENIX08} which shifts every 9.44\,$\upmu$s. This is exactly one bit period in the communication. Therefore a random nonce could theoretically reappear after 0.618s, if the card is queried at exactly the right time.\\
In another experiment, we tried to request a nonce at a fixed time after powering-up\footnote{as was suggested by Nohl and Pl\"otz~\cite{CCC}} the card. This way, we could reduce the card nonces to ten different ones, which decreases the waiting time.
\paragraph{}
Without knowing the cryptographic algorithm, only an online brute force attack on the key can be mounted. Because of the communication delay, this would take 5ms for each attempt. An exhaustive key search would then take 16,289,061 days, which equals about 44,627 years.\\
When the cryptographic algorithm is known, an off-line brute force attack can be mounted using a few eavesdropped traces of an authentication run. Nohl and Pl\"otz state that with dedicated hardware of around \$17,000 this would take about one hour. For this attack to work, some known plaintext is required. Our analysis provides this plaintext.

\section{Introduction}
RFID and contactless smart cards have become pervasive technologies nowadays. Over the last few years, more and more systems adopted this technology as replacement for barcodes, magnetic stripe cards and paper tickets for a variety of applications. Contact-less cards consist of a small piece of memory that can be accessed wirelessly, but unlike RFID tags, they also have some computing capabilities. Most of these cards implement some sort of simple symmetric-key cryptography, which makes them suitable for applications that require access control.

A number of high profile applications make use of contactless smart cards for access control. For example, they are used for payment in several public transport systems like the Octopus card\footnote{\url{http://www.octopuscards.com/}} in Hong Kong, the Oyster card\footnote{\url{http://oyster.tfl.gov.uk}} in London, and the OV-Chipkaart\footnote{\url{http://www.ov-chipkaart.nl/}} in The Netherlands, among others. Many countries have already incorporated a contactless card in their electronic passports~\cite{hoepman_iwsec_2006} and several car manufacturers have it embedded in their car keys as an anti-theft method. Many office buildings and even secured facilities like airports and military bases, use contactless smart cards for access control.

On the one hand, the wireless interface has practical advantages: without mechanical components between readers and cards, the system has lower maintenance costs, is more reliable, and has shorter reading times, providing higher throughput. On the other hand, it represents a potential threat to privacy~\cite{hoepman_iwsec_2006} and it is susceptible to relay, replay and skimming attacks that were not possible before.

There is a huge variety of cards on the market. They differ in size, casing, memory and computing power. They also differ in the security features they provide. A well known and widely used system is \textsc{mifare}. \textsc{mifare} is a product family from NXP semiconductors (formerly Philips). According to NXP there are about 200 million \textsc{mifare} cards in use around the world, covering 85\,\% of the contactless smartcard market. The \textsc{mifare} family contains four different types of cards: Ultralight, Standard, DESFire and SmartMX. The \textsc{mifare} Classic cards come in three different memory sizes: 320B, 1KB and 4KB. The \textsc{mifare} Classic is the most widely used contactless card in the market. Throughout this paper we focus on this card. \textsc{mifare} Classic provides mutual authentication and data secrecy by means of the so called CRYPTO1 stream cipher. This cipher is a proprietary algorithm of NXP and its design is kept secret.

Nohl and Pl\"otz~\cite{CCC} have recently reverse engineered the hardware of the chip and exposed several weaknesses. Among them, due to a weakness on the pseudo-random generator, is the observation that the 32-bit nonces used for authentication have only 16 bits of entropy. They also noticed that the pseudo-random generator is stateless. They claim to have knowledge of the exact encryption algorithm which would facilitate an off-line brute force attack on the 48-bit keys. Such an attack would be feasible, in a reasonable amount of time, especially if dedicated hardware is available.

\paragraph{Our Contribution}

We used a Proxmark III\footnote{\url{http://cq.cx/proxmark3.pl}} to analyze \textsc{mifare} cards and mount an attack.
To do so, we have implemented the ISO 14443-A functionality on the Proxmark, since only ISO 14443-B was implemented at that time. We programmed both processing and generation of reader-to-tag and tag-to-reader communication at physical and higher levels of the protocol. The source code of the firmware is available in the public domain\footnote{\url{http://www.proxmark.org}}. Concurrently, and independently from Nohl and Pl\"otz results, we also noticed a weakness in the pseudo-random generator.

Our contribution is threefold: First and foremost, using the weakness of the pseudo-random generator, and given access to a particular \textsc{mifare} card, we are able to recover the keystream generated by the CRYPTO1 stream cipher, without knowing the encryption key. Secondly, we describe in detail the communication between tag and reader. Finally, we exploit the malleability of the stream cipher to read \emph{all} memory blocks of the first sector (sector zero) of the card (without having access to the secret key). In general, we are able to read \emph{any} sector of the memory of the card, provided that we know \emph{one} memory block within this sector. After eavesdropping a transaction, we are always able to read the first 6 bytes of every block in that sector, and in most cases also the last 6 bytes. This leaves only 4 unrevealed bytes in those blocks.

We would like to stress that we notified NXP of our findings before publishing
our results. Moreover, we gave them the opportunity to discuss with us how to
publish our results without damaging their (and their customers) immediate
interests. They did not take advantage of this offer.

\paragraph{Consequences of our attack}
Any system using \textsc{mifare} Classic cards that relies on the secrecy or
the authenticity of the information stored on sector zero is now insecure.
Our attack recovers, in a few minutes, \emph{all} secret information in
that sector. It also allows us to \emph{modify} any information stored there.
This is also true for most of the data in the remaining sectors, depending on the specific scenario.
Besides, our attack complements Nohl and Pl\"otz results providing the necessary plaintext for a brute force attack on the keys. This is currently work in progress.

\paragraph{Outline of this paper}
Section~\ref{mifare} describes the architecture of the \textsc{mifare} cards and the communication protocol.
Section~\ref{hardware} describes the hardware used to mount the attack. Section~\ref{comchar} discusses the protocol by a sample trace. Section~\ref{weakness} exposes weaknesses in the design of the cards. The attack itself is described in Section~\ref{attack}. Finally, Section~\ref{conclusions} gives some concluding remarks and detailed suggestions for improvement.

\section{MIFARE Classic} \label{mifare}
Contactless smartcards are used in many applications nowadays. Contactless cards are based on \textit{radio frequency identification} technology (RFID) \cite{HANDBOOK}. In 1995 NXP, Philips at that time, introduced \textsc{mifare}\footnote{\url{http://www.nxp.com}}. Some target applications of \textsc{mifare} are public transportation, access control and event ticketing. The \textsc{mifare} Classic \cite{NXPMIFARE4K} card is a member of the \textsc{mifare} product family and is compliant with ISO 14443 up to part 3. ISO 14443 part 4 defines the high-level protocol and here the implementation of NXP differs from the standard. Section \ref{communication} discusses the different parts of the ISO standard.

\subsection{Communication Layer} \label{communication}
The communication layer of the \textsc{mifare} Classic card is based on the ISO 14443 standard \cite{ISO14443}. This ISO standard defines the communication for identification cards, contactless integrated circuit(s) cards and proximity cards. The standard consists of four parts.\\
Part 1 describes the physical characteristics and circumstances under which the card should be able to operate.\\
Part 2 defines the communication between the reader and the card and vice versa. The data can be encoded and modulated in two ways, type A and type B. \textsc{mifare} Classic uses type A. For more detailed information about the communication on RFID we refer to the ``RFID Handbook'' by Klaus Finkenzeller~\cite{HANDBOOK}.\\
Part 3 describes the initialization and anticollision protocol. The \textit{anticollision} is needed in order to select a particular card when more cards are present within the reading range of the reader. After a successful initialization and anticollision the card is in an active state and ready to receive a command.\\
Part 4 defines how commands are send. This is the point where \textsc{mifare} Classic differs from the ISO standard, using a proprietary and undisclosed protocol. The \textsc{mifare} Classic starts with an authentication, after that all communication is encrypted. On every eight bits a parity bit is computed to detect transmission errors. In the \textsc{mifare} Classic protocol this parity bit is also encrypted which means that integrity checks are only possible in the application layer.

\subsection{Logical Structure} \label{logicalstructure}
A \textsc{mifare} Classic card is in principle a memory card with few extra functionalities. The memory is divided into data blocks of 16 bytes. Those data blocks are grouped into sectors. The \textsc{mifare} Classic 1k card has 16 sectors of 4 data blocks each. The first 32 sectors of a \textsc{mifare} Classic 4k card consists of 4 data blocks and the remaining 8 sectors consist of 16 data blocks. Every last data block of a sector is called \textit{sector trailer}. A schematic of the memory of a \textsc{mifare} Classic 4k card is shown in Figure \ref{picmemory}.
\paragraph{}
Note that block 0 of sector 0 contains special data. The first 4 data bytes contain the unique identifier of the card (UID) followed by its 1-byte \textit{bit count check} (BCC). The bit count check is calculated by successively XOR-ing all UID bytes. The remaining bytes are used to store manufacturer data. This data block is read-only.
\begin{figure}[htb!]
\begin{center}
\includegraphics[height=60mm]{pictures/memory.eps}
\caption{\textsc{mifare} Classic 4k Memory}
\vspace{-20pt}
\label{picmemory}
\end{center}
\end{figure}
The reader needs to authenticate for a sector before any memory operations are allowed. The sector trailer contains the secret keys \textit{A} and \textit{B} which are used for authentication. The \textit{access conditions} define which operations are available for this sector.\\
The sector trailer has special access conditions. Key A is never readable and key B can be configured as readable or not. In that case the memory is just used for data storage and key B cannot be used as an authentication key. Besides the access conditions (AC) and keys, there is one data byte (U) remaining which has no defined purpose. A schematic of the sector trailer is shown in Figure \ref{picsectortrailer}.
A data block is used to store arbitrary data or can be configured as a \textit{value block}. When used as a value block a signed 4-byte value is stored twice non-inverted and once inverted. Inverted here means that every bit of the value is XOR-ed with 1.
These four bytes are stored from the least significant byte on the left to the most significant byte on the right. The four remaining bytes are used to store a 1-byte block address that can be used as a pointer.
\begin{figure}[hb]
\centering
\subfloat[Sector Trailer]{\label{picsectortrailer}\includegraphics[width=60mm]{pictures/sectortrailer.eps}}
\subfloat[Value Block]{\label{picvalueblock}\includegraphics[width=60mm]{pictures/valueblock.eps}}
\caption{Block contents}
\vspace{-20pt}
\label{picblockcontents}
\end{figure}

\subsection{Commands}
The command set of \textsc{mifare} Classic is small.
Most commands are related to a data block and require the reader to be authenticated for its containing sector. The access conditions are checked every time a command is executed to determine whether it is allowed or not. A block of data might be configured to be read only. Another example of a restriction might be a value block which can only be decremented.
\paragraph{Read and Write}
The read and write commands read or write one data block. This is either a data block or a value block. The write command can be used to format a data block as value block or just store arbitrary data.
\paragraph{Decrement, Increment, Restore and Transfer}
These commands are only allowed on data blocks that are formatted as value blocks. The \textit{increment} and \textit{decrement} commands will increment or decrement a value block with a given value and place the result in a memory register. The \textit{restore} command loads a value into the memory register without any change. Finally the memory register is transferred in the same block or transferred to another block by the \textit{transfer} command.

\subsection{Security Features}
The \textsc{mifare} Classic card has some built-in security features.
The communication is encrypted by the proprietary stream cipher CRYPTO1.

\subsubsection{Keys}
The 48-bit keys used for authentication are stored in the sector trailer of each sector (see section \ref{logicalstructure}). \textsc{mifare} Classic uses symmetric keys.

\subsubsection{Authentication Protocol} \label{authentication}
\textsc{mifare} Classic makes use of a mutual three pass authentication protocol that is based on ISO 9798-2 according to the \textsc{mifare} documentation~\cite{NXPMIFARE4K}. However, it turned out that this is not completely true~\cite{DS2008}. In this paper we only use the first initial nonce that is send by the card. The reader sends a request for sector authentication and the card will respond with a 32-bit nonce $N_{C}$. Then, the reader sends back an 8-byte answer to that nonce which also contains a reader random $N_{R}$. This answer is the first encrypted message after the start of the authentication procedure. Finally, the card sends a 4-byte response. As far as our attack is concerned this description captures all the necessary information.

\section{Communication Characteristics}\label{comchar}
To find out what the \textsc{mifare} Classic communication looks like we made traces of transactions between \textsc{mifare} readers and cards. This way, we gathered many traces which gave us some insights on the high-level protocol of \textsc{mifare} Classic. In this section we explain a trace we recorded as an example, which is shown in Figure \ref{trace04}.
\begin{figure}[th]
\input{traces/trace04.tex}
\caption{Trace of a card with default keys, recorded by the Proxmark III}
\label{trace04}
\end{figure}
This trace contains every part of a transaction. We refer to the sequence number (SEQ) of the messages we discuss. The messages from the reader are shown as PCD (Proximity Coupling Device) messages and from the card as TAG messages. The time between messages is shown in Elementary Time Units (ETU). One ETU is a quarter of the bit period, which equals 1.18\,$\upmu$s. The messages are represented in hexadecimal notation. If the parity bit of a byte is incorrect\footnote{encrypted parity bits show up as parity error in the message}, this is shown by an exclamation mark. We will discuss only the most significant messages.
\paragraph{Anticollision} The reader starts the SELECT procedure. The reader sends \texttt{93 20} (\#3), on which the card will respond with its unique identifier (\#4). The reader sends \texttt{93 70} followed by the UID and two CRC bytes (\#5) to select the card.
\paragraph{Authentication}
The card is in the active state and ready to handle any higher layer commands.
In Section \ref{authentication} we discussed the authentication protocol. In Figure \ref{trace04}, messages \#7 to \#10 correspond to the authentication.\\
The authentication request of the reader is \texttt{60 04 d1 3d} (\#07). The first byte \texttt{60} stands for an authentication request with key A. For authentication with key B, the first byte must be \texttt{61}. The second byte indicates that the reader wants to authenticate for block 4. Note that block 4 is part of sector 1 and therefore this is an authentication request for sector 1. The last two bytes are CRC bytes.
\paragraph{Encrypted Communication}
After this successful authentication the card is ready to handle commands for sector 1. The structure of the commands can be recognized clearly. Since we control the \textsc{mifare} Classic reader we knew which commands were sent. Message \#11 to \#15 show how an \textit{increment} is performed. The \textit{increment} is immediately followed by a \textit{read} command (\#16 and \#17).

\section{Keystream Recovery Attack} \label{attack}
In Section \ref{weakness} we discussed a weakness in the pseudo-random generator of the \textsc{mifare} Classic. In this section we deploy a method to recover the keystream that was used in an earlier recorded transaction between a reader and a card. As a result the keystream of the communication will be recovered. For this attack we need to be in possession of the card. The following reasons make this attack interesting:
\begin{enumerate}
\item Our attack provides the known plaintext necessary to mount a brute force attack on the key.
\item Using our attack we recovered details about the byte commands.
\item Using the recovered keystream we can \textit{read} card contents without knowing the key.
\item Using the recovered keystream we can also \textit{modify} the contents of the card without knowing the key.
\end{enumerate}

\subsection{Keystream Recovery} \label{knowledge}
To recover the keystream we exploit the weakness of the pseudo-random generator. As it is this random nonce in combination with only one valid response of the reader what determines the remaining keystream. For this attack we need complete control over the reader (Proxmark) and access to a (genuine) card. The attack consists of the following steps:
\begin{enumerate}
\item Eavesdrop the communication between a reader and a card. This can be for example in an access control system or public transport system.
\item Make sure that the card will use the same keystream as in the recorded communication. This is possible because the card repeats the same nonce in reasonable time, and we completely control the reader.
\item Modify the plaintext, such that the card receives a command for which we know plaintext in the response (e.g., by changing the block number in a read command).
\item For each segment of known plaintext, compute the corresponding keystream segment.
\item Use this keystream to partially decrypt the trace obtained in 1.
\item Try recovering more keystream bits by shifting commands.
\end{enumerate}
\paragraph{}
The plaintext $P_{1}$ in the communication is XOR-ed bitwise with a keystream $K$ which gives the encrypted data $C_{1}$.
When it is possible to use the same keystream on a different plaintext $P_{2}$ and either $P_{1}$ or $P_{2}$ is known, then both $P_{1}$ and $P_{2}$ are revealed.
\begin{equation}
	\left.
	\begin{array}{l}
	P_{1} \oplus K = C_{1} \\
	P_{2} \oplus K = C_{2}
	\end{array}
	\right\}
	C_{1} \oplus C_{2} \Rightarrow P_{1} \oplus P_{2} \oplus K \oplus K \Rightarrow P_{1} \oplus P_{2}
\end{equation}
The weak pseudo-random generator makes it possible to replay an earlier recorded transaction. We can flip ciphertext bits to try to modify the first command such that it gives another result. Another result gives us another plain text. The attack is based on this principle.

\subsection{Keystream Mapping}
The data is encrypted bitwise. When the reader sends or receives a message, the keystream is shifted the number of bits in this message on both the reader and card side. This is needed to stay synchronized and use the same keystream bits to encrypt and decrypt. The stream cipher does not use any feedback mechanism. Despite that, when we tried to reveal the contents of a message sequence using a known keystream of an earlier trace, something went wrong.
We recorded an \textit{increment} followed by a \textit{transfer} command. We used this trace to apply our attack and changed the first command to a \textit{read} command which consists of 4 command bytes and delivers 18 response bytes. Together with the parity bits this makes it a 198 bit stream. The plaintext was known and therefore we recovered 198 keystream bits.

When we used this keystream to map it on the original trace of the \textit{increment} (Figure~\ref{trace03}), it turned out that the keystream was not in phase after the first command. The reason was the short 4-bit answer of the card that is not followed by a parity bit. In our original trace we are now half way the first response byte. This means that after 4 more bits we arrive at the parity bit in the original trace. However, in our new trace we are then half way the next command byte. To correct this we needed to throw away the keystream bit that was originally used to encrypt the parity bit.\\
But what to do when we need to decrypt a parity bit in the new situation and we are half way a byte with respect to the first trace? The solution is to encrypt the parity bit with the next bit from the recovered keystream and use this same keystream bit to decrypt the next data bit.\\
From this we can conclude that parity bits are encrypted with keystream bits that are also used to encrypt databits.
\begin{figure}[ht]
\begin{center}
\input{traces/trace03.tex}
\caption{Recovering the Keystream and Commands}
\vspace{-20pt}
\label{trace03}
\end{center}
\end{figure}
\paragraph{}
The following method successfully maps the keystream on another message sequence as we described above.\\
Take the recovered keystream and strip all the keystream bits from it that were at parity bit positions. The remaining keystream can be used to encrypt new messages. Every time a parity bit needs to be encrypted, use the next keystream bit without shifting the keystream, in all other cases use the next keystream bit and shift the keystream.

\input{sections/replay.tex}

\input{sections/readsector.tex}

\section{Reading Higher Sectors}
In the higher sectors of the \textsc{mifare} Classic card we do not have the advance of the manufacturer data. We basically have the sector trailer and some unknown data blocks. Because of key A we can recover always the first 10 keystream bytes. Key B is in most cases not readable and therefore will give 6 more keystream bytes, but leaves us with a gap of 4 bytes (AC and U).\\
Although it is harder to achieve, there is a potential threat for these sectors to become compromised.

\input{sections/revealcommands.tex}

\subsection{Reading Sector Zero}
We will show that it is possible to read sector 0 from a card without knowing the key. We only need one transaction between a genuine \textsc{mifare} reader and card. Every \textsc{mifare} Classic card has some known memory contents. The product information published by NXP \cite{NXPMIFARE4K} gives this information.\\
When a sector trailer is read the card will return logical `0's instead of key A because key A is not readable. If key B is not readable the card also returns logical `0's. It depends on the access conditions if key B is readable or not.
\vspace{-10pt}
\begin{figure}[ht]
\begin{center}
\includegraphics[width=70mm]{pictures/sector0.eps}
\caption{Recovering Sector Zero}
\label{picsector0}
\vspace{-30pt}
\end{center}
\end{figure}
The access conditions can be recovered by using the manufacturer data. Block 0 contains the UID and BCC followed by the manufacturer data. The UID and BCC cover 5 bytes and are known. The remaining 11 bytes are covered by the manufacturer data. Some investigation on different cards (\textsc{mifare} Classic 1k and 4k) revealed that the first 5 bytes of the manufacturer data almost never change. These bytes (MFR1) cover the positions of the access conditions (AC) and the unknown byte U, as shown in Figure \ref{picsector0}. This means that the keystream can be recovered using the known MFR1 bytes by reading block 0 and block 3 (sector trailer) subsequently. Remember that the access conditions are stored twice in 3 bytes. Once inverted and once non-inverted. This way it is easy to detect if we indeed revealed the access conditions. The unknown byte U can be in any state when the card leaves the manufacturer but appears to be often \texttt{00} or \texttt{69}.

The access conditions tell us whether key B is readable or not. In many cases key B is not readable, for instance as in the OV-Chipkaart\footnote{\textsc{mifare} Classic 4k card} that is used in the Dutch public transport system. The first 5 bytes of the manufacturer data (MFR1 in Figure \ref{picsector0}) recovered the access conditions for sector 0. Because the access conditions for the sector trailer define key B as not readable, we know the plaintext is zeros. Hence the whole sector trailer was revealed and therefore the contents of the whole sector 0 were revealed as well.

\subsection{Authentication Replay} \label{replay}
To replay an authentication we first need a trace of a successful authentication between a genuine \textsc{mifare} reader and card. An example of an authentication followed by one read command is shown below.
\begin{center}
\input{traces/trace01.tex}
\label{trace01}
\end{center}
After we recorded an authentication between card and reader, we do not modify the memory. This ensures that the memory of the card remains unaltered and therefore it will return the same plaintext. Now we will act like a \textsc{mifare} reader and try to initiate the same authentication. In short:
\begin{enumerate}
\item We recorded a trace of a successful authentication between a genuine card and reader.
\item We send authentication requests (\#1) until we get a nonce that is equal to the one (\#2) in the original trace.
\item We send the recorded response (\#3) to this nonce. It consists of a valid response to the challenge nonce and a challenge from the reader.
\item We retrieve the response (\#4) to the challenge from the card.
\item Now we are at the point where we could resend the same command (\#5) or attempt to modify it.
\end{enumerate}

\section{Hardware and Software} \label{hardware}
An RFID system consists of a transponder (card) and a reader \cite{HANDBOOK}. The reader contains a radio frequency module, a control unit and a coupling element to the card. The card contains a coupling element and a microchip. The control unit of a \textsc{mifare} Classic enabled reader is typically a \textsc{mifare} microchip with a closed design. This microchip communicates with the application software and executes commands from it. Note that the actual modulation of commands is done by this microchip and not by the application software. The design of the microchip of the card is closed and so is the communication protocol between card and reader.

\begin{wrapfigure}{r}{130px}
  \begin{center}
    \includegraphics[width=130px]{pictures/prox3-straight.eps}
  \end{center}
  \caption{The Proxmark III}
\end{wrapfigure}

We want to evaluate the security properties of the \textsc{mifare} system.
Therefore we need hardware to eavesdrop a transaction. It should also be possible to act like a \textsc{mifare} reader to communicate with the card. The Proxmark III developed by Jonathan Westhues has these possibilities\footnote{Hardware design and software is publicly available at \url{http://cq.cx/proxmark3.pl}}. Because of its flexible design, it is possible to adjust the Digital Signal Processing to support a specific protocol. This device supports both low frequency (125\,kHz - 134\,kHz) and high frequency (13.56\,MHz) signal processing. The signal from the antenna is routed through a Field Programmable Gate Array (FPGA). This FPGA relays the signal to the microcontroller and can be used to perform some filtering operations before relaying.
\begin{figure}[ht]
\begin{center}
\includegraphics[width=90mm]{pictures/setup.eps}
\vspace{-15pt}
\caption{Experimental Setup}
\vspace{-25pt}
\label{picsetup}
\end{center}
\end{figure}
The software implementation allows the Proxmark to eavesdrop communication (Figure~\ref{picsetup}) between an RFID tag and a reader, emulate a tag and a reader. In this case our tag will be the \textsc{mifare} Classic card.
Despite the basic hardware support for these operations the actual processing of the digitized signal and (de)modulation needs to be programmed for each specific application. The physical layer of the \textsc{mifare} Classic card is implemented according to the ISO14443-A standard \cite{ISO14443}. We had to implement the ISO14443-A functionality since it was not implemented yet. This means we had to program both processing and generation of reader-to-tag and tag-to-reader communication in the physical layer and higher level protocol. To meet the requirements of a replay attack we added the functions `hi14asnoop' to make traces, `hi14areader' to act like a reader and `hi14asim' to simulate a card. We added the possibility to send custom parity bits. This was needed because parity bits are part of the encryption.

\section{Conclusions \& Recommendations} \label{conclusions}

We have implemented a successful attack to recover the keystream of an earlier
recorded transaction between a genuine \textsc{mifare} Classic reader and card.

We used a \textsc{mifare} Classic reader in combination with a `blank' card
with default keys to recover the byte commands that are used in the proprietary
protocol.
Knowing the byte commands and a sufficiently long keystream allowed us to
perform any operation as if we were in possession of the secret key.

We managed to read \emph{all} memory blocks of the sector zero of the card, without having access to the secret key. In general, we were able to read \emph{any} sector of the memory of the card, provided that we know \emph{one} memory block within this sector. Moreover, after recording a valid transaction on any sector, we were able to read the first 6 bytes of any block in that sector and also the last 6 bytes if key B is read only.
Similarly, we are able to \emph{modify} the information stored in a particular
sector.

\paragraph{Consequences}

First of all, all data stored on the card (except the keys themselves) should
no longer be considered secret. In particular, if the \textsc{mifare} Classic card is used to
store personal information (like name, date of birth, or travel information),
this constitutes a direct privacy risk. The security risk is relatively low
because in general the security is guaranteed by the secrecy of the keys.
Note that in particular we are not able to clone cards,
because the secret keys remain secret.

Secondly, the integrity and authenticity of the data stored on the card can no
longer be relied on. This is quite a severe security risk. This is particularly
worrying in applications where the card is used to store a certain value, like
loyalty points or, even worse, some form of digital currency. The loyalty level
or the value stored in the electronic purse could easily be increased (or
decreased, in a denial-of-service type of attack).

Thirdly, knowledge of the plaintext (or the keystream) is a necessary
condition to perform brute force (or other more sophisticated) attacks to
recover the secret key. We are making good progress in developing a very
efficient attack to recover arbitrary sector keys of a \textsc{mifare} Classic card.

\paragraph{Recommendations}

For short term improvements we recommend not to use sector zero to store secret information. Configure key B as readable and store random information in it. Do not store sensitive information in the first 6 bytes of any sector.
Use multiple sector authentications in one transaction to thwart attackers in an attempt to recover plaintext. This is only helpful when value block commands are not allowed. Value block commands are shorter than a read command and will enable a shift of the keystream. Another possibility, that might be viable for some applications, is to employ another encryption scheme like AES in the backoffice, and store only encrypted information on the tags.
To prevent unauthorized modification of a data block, an extra authentication on this data could be added. This authentication is then verified in the backoffice.

Proper fraud detection mechanisms and extra security features in the backoffice
are necessary to signal or even prevent the types of attacks described
above. In general, the backoffice systems collecting and processing data that
comes from the readers are a very important second line of defense.

On the long term these countermeasures will not be sufficient. The \textsc{mifare} Classic card has a closed design. Security by obscurity has shown several times that at some point the details of the system will be revealed compromising security~\cite{kerckhoffs1883cryptographie}. Therefore we recommend to migrate to more advanced cards with an open design architecture.

redpajama_set_name: RedPajamaArXiv


text:
Чон Джи-хьон (Хангъл: 전지현; Ханча: 全智賢; родена Уанг Джи-хьон) е южнокорейска актриса, станала известна с участието си в много продукции, влезли в класацията на най-печелишвите филми в Южна Корея. Освен филмите, Джи-хьон е известно рекламно лице с над 90 реклами зад гърба си, снимани за цяла Източна Азия.

Кариерата на Джи-хьон започва през 1997, когато става модел на списанието "Ecole". Пробивът си като актриса прави с филма "Моето нахално момиче", който става много популярен в Източна Азия и продължава с филми като "Крадците", "Берлинският файл" и "Политическо убийство", също както и сериала "Моята любов от звездите", който става първата и успешна телевизионна продукция.

Кариера
Преди да стане известна като актриса, Джи-хьон е позната на аудиторията като рекламен модел. Първият ѝ филм "Бяла валентинка" излиза през 1999 година, но не става успешен. Малко по-късно през същата година снима реклама за Самсунг, което я прави сензация за тийнеджърите и жените в ранните 20-те.

През 2000, Чон играе във "Времето отвъд любовта". Мелодрамата става по-успешна от предишния ѝ проект, но все още не я затвърждава като актриса на корейското кино.

Филмът, с който пробива озаглавен "Моето нахално момиче" излиза през 2001 година и разказва за наивния студен Гьон-У и откачената му приятелка, в лицето на Чон Джи-хьон. Филмът става блокбъстър в цяла Азия. Филма става най-успешната корейска комедия на всички времена и се задържа две седмици на първо място за най-гледани филми в Хонг Конг, правейки Чон и една от първите звезди на разрастващата се популярност на корейските сценични изкуства в Азия и главно китайско-говорещата аудитория (Корейската Халю вълна, както ще станат известни след като заливат и останалата част от света години по-късно.). В родната си страна е нареченена "първата любов на нация" (титла, сега принадлежащта на Сузи от Мис Ей) и в резултат подписва договори за голям брой реклами, които ѝ печелят прозвището "кралица на рекламите". От наградите "Grand Bell" печели в категорията "най-добра актриса".

През 2003 излиза филма психотрилъра "Неканените" с Джи-хьон в главната роля, който впечатлява критиците на киното, но разочарова феновете. След неуспеха на филма, акрисата отново работи с режисьора на "Моето нахално момиче" в романтичната комедия "Уиндстрък". За този филм аудиторията я осъжда, че се преповтаря с "Моето нахално момиче". Неуспеха на двата поредни проекта започва да си личи, след като започва да снима само реклами. Въпреки това, "Уиндстрък" пробива в Япония във време, в което "Моето нахално момиче" не е полулярен филм.

Следващия ѝ проект "Дейзи" е обещаващ – режисьор е популярния режисьор на Азия Андрю Лау, а заснемането е в Нидерландия; филма разказва за Хье-йонг (Чон Джи-хьон), която прави портрети за 30 евро и Пак И (Чонг У-сонг), наемен убиец, който се влюбва в нея. Въпреки популярността на двамата актьори и бюджет от 10 милиона долара, филмът постига среден успех.

Отново през 2006 година, Чон обявява, че ще направи "скок" към Холивуд. Заглавието на проекта е "Кръв: Последният вампир". Филмът е live-action на японсокото аниме. За ролята си, преминава през три месечно усилено обучение. По време на рекламирането на филма, приема "западното" име Джиана Чон.
През 2008, Джи-хьон основава собствена линия дънки наречени "Gianna by True Religion" като участва активно в проекта по създаването им – от дизайна до производството им.

За филма "Човекът, който беше Супермен", Чон отрязва дългата си "копринена" коса, с която е известна и приема ролята на циничен продуцент на документилани филми, който среща странен герой с униформа на хавайска тениска, който се бори с градската апатия и проповядва добродетелността. За възможността да работи с актьора Хуанг Чонг-мин, Джи-хьон споделя: "Въпреки че късметът сигурно е намесен, мисля, че е съдба актьора да срещне нова работа. От първия ден, в който го срещнах, осъзнах, че мога да науча много от него, не само от актьорските му наложби, но и от личността му". Филмът не постига голям успех.

През 2009 излиза "Кръв: Последният вампир" и получава доста критики и от страна на Корея, и от страна на Америка. Кейти Роуз от "Korea times" пише в статията си, че единственото хубаво нещо от филма е Чон Джи-хьон.

През 2010 участва в английскоговорещата продукцията "Снежно цвете и тайното ветрило" по романа със същото заглавие на Лиза Сий. Филмът разказва да приятелството на две жени от XIX век, които са лишени от свобода, заради статуса си на жени и строгите кодекси, които е трябвало да спазват жените по това време в Китай. Филмът отново получа ниски ревюта от страна на критиците. По времето на реализирането на филма е снимана от Анни Лейбовиц за американското издание на Vogue, което я прави първата корейка, която е включена в списанието.

Периода от 2012 година до днес е нов за актрисата – статуса ѝ на топ актриса на Южна Корея е утвърден, всичките заснети филми са с комерсиален успех и всичките са в топ 35 на най-високо касовите филми за всички времена в Корея.

През 2012 по кината в Корея се появява заглавието "Крадците", който разказва за крадци от Корея и Китай, които се обединяват, за да откраднат диамант на стойност 30 милиона долара, който е затворен в специална стая в Макао. Чон Джи-хьон играе ролята на Йеникал, професионален измамник и крадец. Филмът става петият най-касов филм на всички времена в Корея.

Година по-късно в "Берлинският файл" играе ролята на преводач, омъжена за севернокорейски разузнавателен агент. Филмът печели както и публиката, така и критиката на Корея и Америка. Филмът застава под номер 31 на най-касовите филми в Корея.

Минали са 14 години откакто Джи-хьон за последно е била в телевизията. Джи-хьон прави дълго очакванато си завръщане по телевизията със сериала "Моята любов от звездите". Играе ролята на Чонг Сонг-и, топ актриса, която се влюбва в извънземно, което е на Земята от 400 години. Главната мъжка роля е играна от Ким Су-хьон, с който си партнира и няколко години по-рано в "Крадците". Сериалът се превръща в абсолютен хит в Азия. В Корея по време на излъчването поддържа добър рейтинг и създана трендове в модата, грима и дори ресторантите. Джи-хьон получава Десанг, най-високата награда, която може да получи актьор за телевизионно изпълнение в Корея за ролята си на 50-те награди "Пексанг" и на наградите на телевизия SBS.

През 2015 излиза филма "Политическо убийство", екшън, чието действие се развива пред 30-те години на ХХ, когато Корея е колония на Япония. Чон играе ролята на снайперист, който заедно с още няколко бойци за свобода се наемат със задачата да убият про-японски корейски магнат, който поробва народа си. Филмът е още един успех за Джи-хьон – става най-касовия филм на Южна Корея за годината и 7-и на всички времена.

От 16 ноември по телевизията SBS се излъчва сериала "Легендата на Синьото море", с Джи-хьон в главната женска роля и с И Мин-хо в главната мъжка. Чон играе ролята на Шим Чон – русалка, която се опитва да се приспособи в света на хората.

Личен живот
Повече от 600 гости, включително звезди, близки приятели и семейството на звездата присъстват на сватбата ѝ с Чой Джун-хьок на 13 април 2012. Чой е внук на известния дизайнер на ханбок И Йонг-хе и син на дизайнера И Чонг-у. Първото им дете, момче се ражда на 10 февруари 2016 година. Втория си син ражда на 26 януари 2018 г.

Филмография

Филми

Сериали

Източници

Южнокорейски актьори и актриси
Родени в Сеул


text:
Malta Is Going Crypto Crazy For Bitcoin
By Tim Diacono
A Bitcoin revolution has started sweeping over Malta, with a growing number of companies starting to test the waters of the popular cryptocurrency and the blockchain technology underpinning it.
Prime Minister Joseph Muscat revealed a few months ago he intends to see Malta become a pioneer in embracing Bitcoin, and companies have wasted no time in jumping on board.
For example, leading job vacancy website Keepmeposted has started accepting payments in Bitcoin.
"We thought it would be a natural step for us to start accepting payment by Bitcoin and be early adopters of this new and exciting currency phenomenon," a spokesperson told Lovin Malta.
Keepmeposted – Now accepting payments in Bitcoin
Advertising agency Blonde and Giant is taking it a step further, and has recently started offering its staff a portion of its salary in Bitcoin.
"We think there is a very high chance blockchain and cryptocurrencies will become a feature of how we and our clients do business, both locally and internationally," the agency's head of digital Mike Stivala told Lovin Malta. "The decision to offer Bitcoin as a salary was motivated by the idea that if you really want to learn about something, it helps to have a stake in it, and a means by which to experiment, observe and play."
"By giving each of our staff a reason to observe and interact with the Bitcoin market, we believe we can quickly become conversant in the technology and be among the first to see its potential applications in our industry."
Blonde and Giant – Now paying some of its staff in Bitcoin
Malta's first Bitcoin ATM was launched in July, but soon proved to be a dud as it kept eating clients' money and the machine's owner was revealed to have had no prior experience in dealing with the cryptocurrency.
However, the flop hasn't deterred other companies from ordering their own ATMs. Ivaja, a new start-up owned by two Swedish and German entrepreneurs plans to launch its own Bitcoin ATM in Valletta later this month. Real estate company Quicklets last week installed a Bitcoin ATM at its headquarters and its founder Steve Mercieca says he plans to install such ATMs in every Quicklets branch.
Fellow real estate company Engel & Volkers Sara Grech also looks set to get in on the act sooner than later, with managing director Benjamin Grech recently revealing plans to use blockchain to create a transparent property database.
The Bitcoin revolution also looks set to spill into Malta's igaming industry, with cryptocurrency gambling set to be legalised in early 2018, according to a Malta Gaming Authority White Paper.
Meanwhile, blockchain consultant Steve Tendon has set up a 'Blockchain Malta' LinkedIn group which is organising seminars on blockchain, one of which was recently addressed by Max Ganado – senior partner of the major law firm Ganado Advocates.
Also, Bitcoin clubs have popped up in Malta and Gozo and are organising regular and well-attended information sessions on the cryptocurrency.
Bitcoin clubs are organising information sessions on the cryptocurrency
Malta – 'The Silicon Valley of Europe'
It was back in April when Prime Minister Joseph Muscat first revealed he wanted Malta to become the 'Silicon Valley of Europe' with regards to blockchain technology and Bitcoin cryptocurrency.
"I understand regulators are wary of this technology but the fact is, it's coming," he said. "We must be on the frontline in embracing this crucial innovation, and we cannot just wait for others to take action and copy them. We must be the ones others copy."
Essentially, blockchain – known as an "electronic ledger" – allows data to be distributed across a network of computers and to be constantly updated but not copied. There is no central point of the chain hackers can exploit, meaning the information is truly public.
Joseph Muscat wants Malta to fully embrace the Blockchain technology
Blockchain was originally created to record Bitcoin transactions, but governments are now starting to see the technology as a way to improve transparency and security when carrying out other types of transactions. And this is where Malta comes in. Indeed, the government's approach so far has been less on embracing Bitcoin and cryptocurrencies per se, but rather on the blockchain technology which allows for its existence.
Plans will include implementing blockchain in the Lands Registry, a move which will make public the value of lands, and in the health registries, which will give patients full control over their own health data.
Blockchain will soon be implemented in Malta's Lands Registry
Malta is also licking its lips at the prospect of attracting business which operate on blockchain to the island, wooing them with tax incentives reminiscent to those used to attract iGaming companies. A new Blockchain Authority will be set up to regulate the new sector and issue licenses for these companies.
Silvio Schembri, parliamentary secretary for the digital economy, told MaltaToday in July the Labour government's business-friendly approach will give Malta an edge over other countries interested in tapping into this niche.
"Ministers and even the Prime Minister often agree to meet up with businesspeople only a few days after receiving an e-mail request," he said.
Do you have any more information on Bitcoin and blockchain in Malta? Please e-mail us on [email protected]
READ NEXT: Malta's First Bitcoin ATM Runs Into A Bit Of Trouble
Controversial San Ġwann Bike Lane To Be 'Fixed According To Permit' Says Transport Minister
Two Kittens Dumped 'Soaking And Starving' Into Skip To Be Taken To Maltese Cat Sanctuary


text:
Q: How to display Latin-1 characters in Android app I have to fetch text from an online database encoded in Latin-1 charset and every special Latin character (i.e. à, ò, ù, è...) was displayed with black squares with a "?" inside.
How can i display this correctly?
Luckily i found an answer after a couple of hours and i want to share it with you all.
Read below for my solution

A: solution was really simple but i haven't thought about it, but it has the benefit of being really simple to understand and implement. In fact, here is the code:
mIn = new BufferedReader(new InputStreamReader(mSocket.getInputStream(),"ISO-8859-1"));

this way, all the incoming strings from the Latin-1 server will be decoded correctly and will be displayed perfectly on android TextViews

redpajama_set_name: RedPajamaStackExchange


text:
Zillions of Games — это коммерческая универсальная игровая программа, разработанная Джеффом Маллетом () и Марком Лефлером () в 1998. Спроектирована в основном для поддержки настольных  и головоломок.

Правила игры описываются в специальном файл правил Zillion'а (), имеющем расширение .ZRF, на языке, с синтаксисом, основанным на S-выражениях (то есть лиспоподобном).

Пример описания крестиков-ноликов на этом языке:

(define add-to-empty  ((verify empty?) add))

(game
   (title "Tic-Tac-Toe")
   (description "...")
   (history "...")
   (strategy "...")
   (players X O)
   (turn-order X O)
   (board
        (image "images\TicTacToe\TTTbrd.bmp")
        (grid
            (start-rectangle 16 16 112 112) ; top-left position
            (dimensions ;3x3
                ("top-/middle-/bottom-" (0 112)) ; rows
                ("left/middle/right" (112 0))) ; columns
            (directions (n -1 0) (e 0 1) (nw -1 -1) (ne -1 1))
        )
   )
   (piece
        (name man)
	(help "Man: drops on any empty square")
	(image X "images\TicTacToe\TTTX.bmp"
	       O "images\TicTacToe\TTTO.bmp")
        (drops (add-to-empty))
   )
   (board-setup
        (X (man off 5))
        (O (man off 5))
   )

   (draw-condition (X O) stalemated)
   (win-condition (X O)
	  	(or (relative-config man n man n man)
                    (relative-config man e man e man)
                    (relative-config man ne man ne man)
                    (relative-config man nw man nw man)
		)
    )
)

Игра распространяется как shareware. Демоверсию «Zillions of Games» можно скачать бесплатно, установочный файл занимает около 18 мегабайт, скачав его, вы получите 46 самых разных игр, у большинства из них которых есть по 5-10 вариантов, сильно отличающихся от основного. Ко всем играм прилагается описание правил и стратегии, можно включить подсветку допустимых ходов.

У демоверсии есть ряд ограничений, основное — это блокировка подключения дополнительных игр. После ввода регистрационного ключа можно подключить к игре один из нескольких тысяч доступных в исходных .ZRF кодах игр, или написать свою собственную. Поддерживается игра по сети.

Программа позволяет подключать сменные модули искусственного интеллекта (реализованные в виде .dll). Модуль по умолчанию автоматически выводит  из описанных правил игры: подвижности фигур, геометрии доски и цели, обеспечивающей выигрыш. При этом используются алгоритмы, обычные для компьютерных шахмат: альфа-бета-отсечение с упорядочиванием ходов,  и т. д.. Специализированный модуль используется для игры Го. В документации к программе описывается, как написать собственный такой модуль.

С 2007 года распространяется программируемый модуль (метаигровой движок) Axiom, рекомендованный к использованию на оф. сайте Zillions of Games, и позволяющий описывать всю игру, и правила, и (если есть такое желание или необходимость) соответствующий ИИ (полностью или частично), на диалекте языка forth (ForthScript). Впрочем, поскольку Axiom — плагин к Zillion of Games, часть правил нужно продублировать в ZRF (такие, как базовая геометрия доски, игроки и перечисление фигур, без описания их ходов). Вся базовая логика Axiom такая, как алгоритмы искусственного интеллекта, используемые по умолчанию, реализована на этом диалекте Форта; весь форт-код axiom доступен в виде исходных тестов (файл axiom.4th содержит игровой движок, а файл CORE.4th — собственно реализацию языка Forth). Axiom может быть подключён, помимо ZoG, и к другим, специально написанным для этого программам. В составе дистрибутива Axiom Development Kit поставляется одна такая программа-клиент — AutoPlay.exe, предназначенная для автоматического тестирования Axiom-игр (без графического интерфейса пользователя).

Примечания

Ссылки
 Zillions of Games homepage
 Zillions of Games в прессе
 Hans Bodlaender. Обзор Zillions of Games на ChessVariants
 На русском
 Владимир Николаевич. О шахматах и не только (ч. 2), Компьютерра № 17 от 11 мая 2004 года. (см. также ч. 1 и ч. 3)
 Популярно об ИИ, ч. 2, статья в «Компьютерной газете» № 4, 2009 г., см. также часть первую.
 Из серии статей Валентина Челнокова на ХабраХабр
 Приручаем ZoG (Часть 1: Волки и Козленок)
 Приручаем ZoG (Часть 2: Бац!)
 Приручаем ZoG (Часть 3: Футбол Кумской долины)
 Приручаем ZoG (Часть 4: Осторожно — мины!)
 Приручаем ZoG (Часть 5: Сбор маны)
 Тёмная сторона ZRF
 Аксиома — повышаем градус!

Шахматные программы
Компьютерные стратегические игры
Игровые движки по алфавиту
Игровой искусственный интеллект
Программное обеспечение для разработки компьютерных игр


With my grandmother crafting Easter Baskets we use glitter sprinkled on the gifts, candy, and toys.
As a child multi-colored glitter sparkles light everywhere.
When I find the glitter bottle, I marvel with the look it makes in the bathtub.
When flushing the toilet glitter swirls towards the bottom with many colors.
Glitter on ceramic floors produces a surreal look.
Glitter footprints make fun designs.
My mom doesn't like glitter.
(And glitter is hard to get rid of…ever!) Nice response to the prompt!


text:
Plus-size model reveals key to keeping marriage alive
9 Jan, 2019 2:29pm 2 minutes to read
Simon Wilson: Bike lanes are just the beginning
NEW ZEALAND | Health
Jay Kuten: Cannabis 'evils' are noise
9 Jan, 2019 5:00pm
By: Jay Kuten
The announcement by the Government that it would hold a referendum in 2020 on both the legalisation of cannabis and the End of Life Choice bill was, I felt, a mixed blessing.
On the one hand this apparent faith in the pure democracy of giving the people choice in how they live their lives, what adults take in their bodies or their ultimate expressions of dignity at its ending, represents a step back from the arrogance of intrusion into personal privacy. Long in coming, it feels as if reason might have come back to the legislative chamber.
The downside, given the recognition that our representatives are too fearful for their own electoral chances to take a stand in these controversial issues, is that we can expect that subtle and not-so-subtle disinformation from opponents to legalisation and/or the ELOC will more and more emerge as the time for voting approaches.
Read more: Jay Kuten: New day dawning in United States
Jay Kuten: Guess what ... the good and the bad of 2018
Jay Kuten: It's time to defeat violence
Jay Kuten: Bullying and abuse of power
We've already had evidence of the scaremongering by the far right clique as the original ELOC bill went to Select Committee. Legalising cannabis may give that same crowd a field day for trolling us.
In the US state of New York, following the December 18 announcement by Governor Andrew Cuomo that he plans to propose legislation legalising cannabis in 2019, opponents began to campaign almost immediately. Beginning on December 26, three articles have appeared in the New York Times, the paper of influence, declaiming some negative aspects of cannabis, each successively more tendentious.
First was a story claiming California residents in Sonoma objected to the smell of growing marijuana plants. Next was a purported evaluation of CBD (Cannabidiol), a derivative of cannabis with no psychoactive properties, reportedly beneficial as an ointment for joint pain.
The writer, a professor of psychopharmacology, claims CBD is a placebo. He did acknowledge that US government restrictions on marijuana research meant there were very few studies. The professor's own potential conflict of interest was not addressed.
This week an ex-reporter turned CIA spy novelist wrote an op-ed on the "untold dangers" of legalisation that seemed straight out of Reefer Madness. One of his more flagrant distortions was the claim that cannabis use leads to opioid abuse, when the opposite is true.
Three major public health studies, one funded by the Pentagon, show that the death rate from opioids (a measure of prevalence), declined by 25 per cent in those states that legalised medicinal cannabis. This suggests that people who used cannabis were less likely to turn to opioids.
Jay Kuten: New day dawning in United States
The trend is clear. We can expect this stuff here as voting time draws near. Unlike the debate over vaping, which was conducted in whispers, opponents like our local MP, Harete Hipango, will be increasingly heard, demanding delay until further studies of cannabis' safety can be done.
They know such studies can't be done while cannabis is illegal.
My position is that justice delayed is justice denied. That's why I'm with Chester Borrows on this one.
If only one single good result could come from legalisation, it would be the one expressed by Chester Borrows. Borrows, our former MP, now free from the toxic vapours of the Beehive, but with decades of experience as a cop, a lawyer, and as Minister of the Courts, has changed his outlook on cannabis.
Previously, like many in the National Party he was a "law and order" guy. Now "I have become convinced that the unlawfulness of smoking cannabis creates far more evil than it prevents."
The evil that Borrows references is the social destructiveness imposed by the criminalisation of cannabis, its waste of police resources on essentially victimless crimes, its application of the laws in a manner reflective of institutional bias on the basis of money and race — the poor and darker-skinned people are more likely apprehended and more likely punished — and the damage to families losing fathers and mothers to prison.
Then there's the cost to taxpayers of $108,000 per annum per prisoner.
If one referendum could end this evil, it would be virtue indeed.
Jay Kuten is an American-trained forensic psychiatrist who emigrated to New Zealand for the fly fishing. He spent 40 years comforting the afflicted and intends to spend the rest afflicting the comfortable.


text:
Alexandra Abreu, conhecida como Xana Abreu ou Xana Toc Toc (Lisboa, 1975), é uma cantora e artista plástica portuguesa. Ganhou êxito com trabalhos na música infantil, que renderam mais de 350 milhões de visualizações na internet, certificações de platina em DVD, 130 mil discos vendidos e 15 mil livros comercializados até o ano de 2020.

Biografia
Xana é formada em artes plásticas e pintura pela Faculdade de Belas Artes da Universidade de Lisboa. Nos anos 2000 era vocalista da banda Massala.

Criou o projeto Xana Toc Toc em 2010, indo ao público no ano seguinte. O projeto ganhou êxito, chegando ao primeiro lugar em vendas, além de encher as salas de espetáculos. Em 2014, o projeto já estava em seu quarto álbum musical.

Até o ano de 2020, recebeu 12 galardões de platina na categoria de DVD. Nesse mesmo ano, lançou o álbum "O Melhor de Xana Toc Toc" para celebrar os dez anos de projeto.

Em março de 2020, Xana lançou o single "Todos Unidos, Todos Protegidos", uma canção positiva para as crianças em meio à pandemia de Covid-19. Nesse mesmo ano, a artista anunciou o fim do projeto Xana Toc Toc por motivos de saúde.

Após o fim do projeto como Xana Toc Toc, Xana Abreu seguiu com o trabalho como artista plástica, com vários trabalhos individuais da série "Na Tua Pele".

Na televisão, participou na última temporada de "A Máscara". Em 2021 passou a integrar o elenco da telenovela "Amor Amor Vol.2". Em 2022 fez parte do elenco da telenovela Sangue Oculto, da SIC.

Vida pessoal
Xana Abreu cresceu com ausência do pai, que abandonou a família e foi para o Brasil quando a artista tinha apenas um ano. Aos seis anos, teve um breve contato paterno, que foi embora no mesmo dia. Aos 17 anos, o pai voltou a dar sinais por causa de um livro dedicado aos filhos, mas Xana decidiu não mais vê-lo.

Em fevereiro de 2021, Xana Abreu revelou que teve um cancro na mama. Foi na época em que a artista lançara o primeiro DVD como Xana Toc Toc, que já havia alcançado grande êxito de venda. Apesar dos efeitos dos tratamentos, ela manteve a rotina de concertos.

A artista é mãe da atriz Marta Peneda.

Discografia

Álbuns de estúdio

 "Xana Toc Toc" (2011 - Universal Music)
 "As Histórias da Xana Toc Toc" (2012 - Universal Music)
 "A Festa é Nossa" (2012 - Universal Music)
 "Na Aldeia Colorida" (2013 - Universal Music)
 "No Seu Trolipop" (2014 - Universal Music)
 "As Histórias Da Xana Toc Toc No Seu Trolipop" (2016 - Universal Music)
"Na Selva" (2017 - Universal Music)
"Rádio Toc Toc" (2019 - Universal Music)

Compilações

 "Todas As Músicas Da Xana Toc Toc!" (2015 - Universal Music)
 "O Melhor de Xana Toc Toc" (2020 - Universal Music)

Referências

Ligações externas

 Sítio oficial

 Página de Xana Toc Toc no Facebook

Cantoras de Portugal
Artistas plásticos de Portugal
Cantores de música infantil
Alumni da Universidade de Lisboa
Naturais de Lisboa


Irving Pichel (24 June 1891 - 13 July 1954), was an American actor, and film director. He married Violette Wilson, daughter of Jackson Stitt Wilson, a methodist minister and Socialist mayor of Berkeley, California. Credited with the discovery of Natalie Wood. Among his most notable roles were the servant Sandor in Dracula's Daughter, and Fagin in the 1933 adaptation of Oliver Twist. He directed several well-regarded films, including The Miracle of the Bells, Mr. Peabody and the Mermaid, Tomorrow is Forever and Destination Moon. His voice was heard as narrator in How Green Was My Valley. By the mid 1940s, Pichel played small parts in several of the films that he directed, performed on radio, and was the narrator of John Ford's She Wore a Yellow Ribbon in 1949. His last films as a director were Santa Fe with Randolph Scott in 1951 and two sectarian church-basement favorites Martin Luther in 1953, and Day of Triumph in 1954. Died suddenly of a heart attack in 1954 just a week after completing Day of Triumph.


Just starting out in music production? Then this is the course for you.
This course provides a gateway into music for those whose passion has never fully been realised. If you're serious about producing music it's essential to build a solid foundation of understanding.
This 9-month course will ground you in vital techniques, and help you to grow as a music producer. It's aimed at total beginners, but also suitable if you're a self-taught producer. Study from £61 per month.
With the help of our expert tutors and studios you'll be comfortably using Ableton Live and making music. Throughout the course there is a strong focus on developing your own musical style, all genres welcome! All tasks are highly practical, helping your technical ability increase through creativity.
Produce using the latest Ableton Live, NI Komplete plugin packages and huge sample libraries. Make use of all this with unlimited studio access!
Ableton Live is a leading music production software, which for the DJs opens up a gateway to remixing live. We'll take you from beginner level, to finishing tracks comfortably with it.
Music Production: 1x6hr daytime or 2 evening lectures weekly (6 months). Music Composition: 7pm-10pm lectures on Mondays or Wednesdays (3 months).
What makes a great track?
You may have a deep desire to make music, but you didn't study this at school. You may not play an instrument – that's fine too. It's not required for this course.
What this course will teach you is how to make music using Ableton Live. Writing in drums, bass, vocals, synths, and absolutely everything else.
Whether you want to make drum'n'bass, hip-hop, house, techno, or something else entirely. We'll show you how to make it.
None. Suitable for beginners or self-taught producers. No software, equipment at home or prior qualifications needed.
You'll be producing music – creating ideas and arranging them into a track- confidently with Ableton Live.
Contact us for full timetable with regards to Music Composition and Music Production.
From 12 – 48 months, from £65 per month.
Unlike most training centres SEM has a limit on lecturer to student ratio and keeps its class sizes small. We therefore have limited availability and courses fill up in advance. We would recommend enrolling as soon as you are ready, to avoid disappointment. If you are looking at a start date that is more than 3 months away, we would strongly recommend contacting a course advisor so that we can primarily secure your place before the window opens for you to apply for finance.


Prayer is the most important activity of our lives. It is the main way in which we deepen our relationship with God, developing the 'transforming friendship' with our Father in heaven. We'd love to encourage you to give praying a go and join in with the prayer life here at Trinity Churches.
#TryPraying– This is our recent initiative to help encourage people to give praying a go. Booklets are available free from Church or download the trypraying app, and follow along for 7 days and see how prayer can transform your life. Go to www.trypraying.co.uk to find out more.
Prayer Ministry on a Sunday Morning – Make the most of regular opportunities to be prayed for. We offer these opportunities – called 'prayer ministry' – at every Sunday service, and these are a great opportunity to someone to come and pray for and with you for God's blessing, grace and healing in your life.
Monthly Prayer Diary – Follow along with this booklet to pray for our local communities every day for a month. Available from the back of church as well as to download from the links to the right.
Parish Prayers –Come to Parish Prayers, taking place every Monday 9.45am to 1030am in the Trinity Centre. We begin with coffee from 9.30am. All very welcome!
Join with other people from across the parish in praying and reading the Bible each day. Come and join us at various locations around the parish. (Mon-Fri, 8.40am-9am at Café Connect. Tues 8.40am – 9am at Church in the Meet Place, Wednesday 9am in the Primary School) .