In January, Hawick Lau (劉愷威) announced that his wife, Yang Mi (楊冪) is pregnant. Completing Tiny Times 3.0 <小時代3> last week, Yang Mi can finally take a break. She is approximately five-months pregnant and starting to show her belly bump.
This week, Yang Mi was seen at the Shanghai airport with her assistant. Her pregnancy bump was already noticeable under her loose sports jacket. Though pregnant, she went through the security x-ray machine without fretting.
Hawick who is currently promoting his new drama, revealed that Yang Mi has become gentler and more adorable ever since she got pregnant. He shared happily, "Although she used to have these silly smiles, she is doing that more often now. The feeling is really great!" Expectant mothers are not the only ones in which parental instincts kick in early. Admitting that his paternal instincts have already started, Hawick now finds himself with a brand new motivation to work harder.
Asked about the gender of the baby, Hawick did not want to directly answer the question but once again hinted that like all fathers, he hopes to have a daughter. At the same time, he is afraid the baby girl will turn out to look like him, which will then make her look odd. Hawick's father, actor Lau Dan (劉丹), will be given the honor to choose the name of his grandchild.
Her face look so skinny now, I thought pregnant women usually gain it on their face first.
With all the plastic work these two have done to their faces, looks like two teenagers with stretched faces.
Doubt the kid will look like either one of them.
That picture is lol!!!! They look like a couple of goblins with pointy ears, pointy noses, big mouths and bug eyes. Bad pic!
Did both of Hawick and Yang Mi alter their faces again recently?
Yang Mi was a really cute child star at age 4 and doesn't look too different from the way she looks as an adult.
thats how PS makes $$$$… as long the their inner beauty is so genuine sweet and not fake as outer apperance..
I don't think their PS matters as even before PS, they were pretty above average looking…so their child shall be fine. Lol.
That pic is soooo frigging cute!!!!
It shows how close he is with his father. I like this pair. He is obviously smitten with her and she with him. Just curious; usually what month can see baby bump? 5th month is a bit too late even more so when Yang Mi isn't exactly big size.
Yea,I feel he is really close to his father. I think he and his father are so sweet and he is truly lucky to have such a good father.
Depend on the person really. As my SIL was really skinny and you can't tell she was pregnant until she was 6 1/2 months pregnant. Then she got really big at 8 months. As for me, I already look pregnant when I was 4 months as I was chubbier!
I want to age naturally and do not want to use Botox or anything because it is not good for your health and long term beauty. I also do not want my face stiff because I love to smile and all.
Me too but only because I can't afford it.
For me it us not because I can afford it or not. I do not like to use unnatural means just to look better. I am also a big chicken and am afraid of needles,so no way would I want a needle to poke into my face.
I actually did hear about that on Entertainment tonight and it freaked me out. Wow celebs do not only spend money but go through so much pain for beauty. I am personally too chicken to do so even if I had the money. Long term health is better than long term beauty? If I just physically looked good but did not physically feel good then there is no point in looking physically good.
I think it's OK to do PS and botox as long as one don't overdo it to the point where they end up looking uglier then before. So if one have money and want to enhance their look, I don't see why not? Especially, if it can help their career and change their life.
Oh well, you win some, you lose some. They do look pretty happy together.
lucky baby to have good parents and grandfather.
I like the pair. Very cute couple.


Ends: Today Get cost-free UPS terrain delivery on all products Michele Olivieri Coupons.
How to save with Michele Olivieri promo codes?
You are in the list of the best Michele Olivieri coupon codes.
Copy that code and go to the Michele Olivieri website.
Select Michele Olivieri products that you want to purchase.
Apply the coupon code on Michele Olivieri checkout page while placing the order.
How to Michele Olivieri coupons work?
We hope that one of our 9 Michele Olivieri promotional codes for April 2019 helped you save when shopping.
Check out our 9 Michele Olivieri coupons, promo codes and deals for April 2019.
Michele Olivieri stocks all the top quality brand name European footwear, leather goods and accessories available in the market. Shoes designed in house are also available exclusively at Michele Olivieri.


Initially published in 1937 3 as U.S. Digital camera and Journey, it later assumed the identify Journey + Leisure in 1971. Previous issues highlighted the top resorts within the Caribbean, the top golf courses on the earth, and essentially the most luxurious motels. In addition to creating distinctive and cheap travel experiences, virtual vacations open up new destination prospects.
After eleven consecutive years of being among Journey + Leisure's World's Finest Awards Prime Ten Destination Spas", Westglow has been named 2017's #1 Domestic Destination Spa! Barceló Corporacion Empresarial S.A. on the acquisition of leases of 20 motels, conference and leisure amenities owned by the Paramount Group of inns.
Backed up by over 25 years of expertise, Journey & Leisure Group, the oldest and most trusted timeshare brokers in Europe, has made it easier than ever earlier than to promote, buy or lease timeshare properties for people throughout the globe. SUBSCRIPTION OPTIONS ARE CURRENTLY ACCESSIBLE, and present subscribers to the U.S. print edition of TRAVEL + LEISURE journal can still get FREE access to the digital version of T+L for iPad!
We give attention to regulatory compliance, commercial transactions, dispute resolution, well being and safety, crisis administration, employment, mental property, information know-how, and knowledge protection, all from a perspective of an in depth understanding of the journey trade.
These elegant resorts located within the heart of Bali and Phuket, hit all the correct notes for whenever you're eager for an escape from the peculiar. The restaurant business is directly related to travel and tourism, and is without doubt one of the largest employers within the personal sector.


At Ellis Eye Laser & Medical Center, you can rest assured that your LASIK laser vision correction procedure will be performed by El Cerrito's premier LASIK surgeon. Dr. Ellis is a pioneer in the field of refractive surgery and brings his extensive training, including a residency at Stanford University, to each and every refractive procedure he performs.
Are you are searching for a LASIK or cataract surgeon in the El Cerrito area? Request an appointment with Dr. William Ellis of Ellis Eye and Laser Medical Centers. Our eye doctors provide LASIK, carnosidad, cataract surgery, and a wide range of other services.


It's hard to believe that the 4th annual Right-Brainers in Business Video Summit has come and gone! We had thousands of creative souls gather around our virtual circle. Several of our participants have attended all 4 summits and we welcomed lots of new folks, too, who finally found their home with us right-brainers.
We celebrated the launch of my second book Building Your Business the Right-Brain Way, each day I did some teaching from the new material, and we learned so much from our guest experts. We wrapped up week 2 on Friday and it was an absolutely amazing way to close out this incredible event.
Here are a few quotes from our vibrant chat room from our final day.
JuliaAM: Jenn challenged us to "sell something" to pay for Premium. I figured out how to do that and was able to come up with the money. AND I raised my price so I'll have a profit. That's crazy!
tekpoet: Thank you! I had the time of my life with you!
Want to get a taste of what the event was like? You can watch the week 2 highlights video above to see practical and inspiring tips from Melanie Duncan, Beth Barany, Cory Huff, Susan Miller, Christine Kane, Alexandra Franzen, Kiala Givehand, and Marney Makridakis.
Christine Kane who took us deep into the spiritual side of business AND gave us practical systems and suggestions for creating sustainable success. She described the process of upleveling and how it's an evolution of your soul and your business!) Plus I had a fun, experiential surprise exercise that was for some one of the biggest shifts for them at the summit.
Alexandra Franzen who gave us a simple structure for introducing yourself. The structures she shared helped spark new ways of people articulating what they do. I've heard some great intros now from the folks sharing in the Premium group!
We also had our last live Show and Tell Spotlight with Shooting Star Kiala Givehand who was LIVE and in-person in my creative space. You're going to be so inspired by this incredible woman of action. My desk was overflowing with all of her creative products and offerings!
Sign-up here to catch these extended replays now before they're gone!


text:
Even more in The Commons!
We're super excited to be adding five new institutions to The Commons, our home for photographs from public collections across the world. If historic photos are your jam, check out the other Commons institutions we've added recently.
Mennonite Church USA Archives:
The Mennonite Church USA Archives not only serves as the institutional archives for the Mennonite Church USA, but also holds substantial manuscript collections documenting Mennonite, Amish, and Hutterite life in the United States.
Dundas Museum and Archives:
The mission of the Dundas Museum and Archives is to collect, preserve, exhibit, and interpret objects which demonstrate the founding, settlement, diversity, and development of Dundas and environs, for the education and enjoyment of our generation, and those of the future.
University of Limerick Digital Library:
The Glucksman Library at the University of Limerick holds collections that include archives, rare books and manuscripts relating particularly to the history, literature and culture of Limerick and the Midwest region of Ireland. This year marks the University's 40th anniversary and a project is underway to organise and digitise the photographic archives which document the history and the development of its campus, academic programs, and community life. We are also digitising material from other archives in our Special Collections and through Flickr we hope to give people a taste of the different resources the library has to offer.
The New Institute:
The collection of The New Institute is one of the largest architecture collections in the world: eighteen kilometers of drawings, sketches, scale models, photographs, books and periodicals. The institute is responsible for conserving, managing and providing access to these archives and collections, which contain work by almost every important Dutch architect from the period after 1800, such as the archives of W.M. Dudok, P.J.H. Cuypers, H. Berlage and M. de Klerk.
Mississippi Department of Archives and History:
The Mississippi Department of Archives and History was founded in 1902, and is the second oldest state department of archives and history in the United States. A comprehensive historical agency, the department collects, preserves, and provides access to the archival resources of Mississippi, administers museums and historic sites, and oversees statewide programs for historic preservation, government records management, and publications.
You're welcome – nay, encouraged! – to add information to these and all photos in The Commons, through tags and comments. And if you represent an institution and are interested in joining, why not register today?
Daniel Bogan
I do the stuff on the Internets.
You led Yahoo! Weather to an Apple Design Award
Yahoo! Weather is one of the proud winners of the Apple Design Awards 2013. A big thank you to everyone contributing great weather photography from […]
Fantastic scenes of fog
Mystifying forests, hiding valleys, shrouding cities — so many ways of those low-lying clouds to create captivating scenery. Enjoy these various views of fog in […]
The Commons: The Past Is 100% Part of Our Future
We are very proud of the The Flickr Commons photos uploaded by galleries, libraries, archives, museums, and governmental institutions. These photos won't be deleted as a result of any of our announced changes. Photos that were Creative Commons licensed before our announcement are also safe.

redpajama_set_name: RedPajamaCommonCrawl


text:
Q: How do i replace something in array using jquery? I have got this jquery array
var left=[1,2,3,4];

And i want to replace 3 element with 7.

A: You need to use map function here. Try this:
var left = [1,2,3,4];

result = left.map(function(item) {
    return item == 3? 7: item;
});

redpajama_set_name: RedPajamaStackExchange


text:
Lupin appoints Dr Kamal K Sharma as Advisor
Dr Sharma has vast industry experience spanning over four decades
Lupin announced the appointment of Dr Kamal K Sharma as Advisor to the company, for a period of one year effective October 1, 2018.
During this period, Dr Sharma will continue to hold the position of Vice Chairman of the Board in a Non-Executive capacity. Dr Sharma has vast industry experience spanning over four decades and has held a range of senior management positions in the fields of projects, operations, corporate development and general management in the pharmaceutical and chemical industry.
Commenting on the appointment, Vinita Gupta, CEO, Lupin and Nilesh Gupta, MD, Lupin stated, "Dr Sharma has served Lupin for over 30 years and has helped drive the company to be a formidable pharmaceutical player globally. His decades of experience in the global pharmaceutical industry and commitment to our success has proved invaluable to the company. Dr Sharma has always embodied the values that we believe in at Lupin. We look forward to his continued guidance on our strategic choices as we accelerate our efforts to evolve and grow our business."
Speaking on the matter, Dr Kamal K Sharma, Vice-Chairman, Lupin said, "I am honoured by the confidence placed in me by the board, and look forward to the opportunity to guide Lupin through the dynamic changes in the global pharmaceutical industry."
Alembic Pharma gets US FDA nod for diabetes drug
DoP urges pharma industry to develop innovative drugs


UU A Way Of Life: What is the fifth of the five themes of the perennial psychology?
What is the fifth of the five themes of the perennial psychology?
The fifth theme of the perennial psychology is meditation. Meditation is the going within and becoming aware of what's behind the chatter in the mind of our ego. This chatter the Buddhists call the "monkey mind" because it is incessant. It would be nice if it was a radio and we could just turn it off.
Turning off the external stimuli and going within we become aware of the All, the Oneness of which we are a part which is the ground of our being. In all our efforts to separate ourselves from our Divine Source and enhance an ego apart from the ground of our being we have forgotten that of which we are not only a part but which is essential to our conscious existence.
The experience of this Oneness is deep bonding and connection with existence. It has been called bliss and some call it Love. In A Course In Miracles, it is written, "The course does not aim at teaching the meaning of love, for that is beyond what can be taught. It does aim, at removing the blocks to the awareness of love's presence, which is you natural inheritance."
The practice of mediation can be described and taught in many ways. The best description is the removal of the blocks to the awareness of love's presence.
In Unitarian Univeralism we covenant together to affirm and promote seven principles the seventh of which is "respect for the interdependent web of all existence of which we are a part." I would rather say "love for the interdependent web of all existence..." Meditation is about the awareness of love at the base of our being which we often forget as we go about our busy, daily lives.
In our contemporary times, the word that keeps arising to describe the phenomenon of mediation is "mindfulness." In the various contexts in which the word "mindfulness" occurs, the meanings change with subtle distinctions. Most often "mindfulness" means watching, or witnessing our functioning physically, emotionally, cognitively, and behaviorally. Practicing mindfulness or witnessing our functioning is very helpful for our overall wellness but is not the same thing that the mystics mean when they describe meditation for meditation is a step beyond mindfulness where even mindfulness does not exist since the ego to watch no longer exists.


text:
Q: localStorage keys is not deleted after called from useEffect and cause Maximum update depth exceeded error I have 2 routes that I don't want to allow access to an logged user.
/login
/forgot-password

In those Component I've applied useEffect function to detect if the user is "logged in" like this:
useEffect(() => {
    if(isLogged()){
      history.push("/dashboard")
    }
  }, [])

export const isLogged = () => {
    return (
        localStorage.getItem("userid") !== null ||
        localStorage.getItem("authUser") !== null ||
        localStorage.getItem("token") !== null ||
        localStorage.getItem("permission") !== null
    )
}

Now if the user is logged in it's move to /dashboard
on /dashboard I check the user authentic with API request to the server, and if the data is not valid I redirect the user to /logout
useEffect(() => { //act like componentDidMount()

        getInstitutes().then((response) => {
            if (response.errorCode !== null && response.errorName !== null) {
                if (response.errorCode === 999) { //invalid token so... logout please.
                    props.history.push('/logout')
                } else {
                    setErrorMsg(response.errorName)
                    setErrorNum(response.errorCode)
                }
            } else {
                setInstitutesList(response.object)
            }
        }).catch((e) => {
            setErrorMsg("Error occur.")
        })
        // eslint-disable-next-line react-hooks/exhaustive-deps
    }, [])

On /logout -
useEffect(() => {
    clearStorage();
    history.push("/login")
  })

clearStorage() function:
export const clearStorage =  () => {
        localStorage.removeItem("userid")
        localStorage.removeItem("authUser")
        localStorage.removeItem("token")
        localStorage.removeItem("permission")
    }

And then I receive this error, which say that I'm in infinite loop, this cause because of the localStorage items are not delete at all, And that cause the infinite loop.
I don't have any clue why the localStorage's items does not deleted this way,
when I enter the route /logout manually it's successfully delete the items.
What is my mistake?
Thanks!

A: didn't you forget to pass the dependency array in the /logout path?
useEffect(() => {
    clearStorage();
    history.push("/login")
}, []) // <--- here

A: From my point of view, this logic should not be a part of the component, you could have it inside the auth hook that you get the isLogged from, or you could have it inside your route component.
Just add a prop that specify the access level of this route and have the logic there.
Should not be a part of the component itself by any chance.


text:
1870 год в истории железнодорожного транспорта

События
 6 мая (24 апреля по старому стилю) — Акционерное общество Новогородской железной дороги получает концессию на строительство узкоколейной железной дороги от линии Николаевской железной дороги до Великого Новгорода.
 1 июня — открыт второй путь на всём протяжении Рязанско-Козловской железной дороги, являвшейся на тот момент самой грузонапряжённой.
 9 августа — открыто движение на участке Тамбов — Умёт Тамбово-Саратовской железной дороги.
 Построена железнодорожная линия Москва — Смоленск.
 Построена Beach Pneumatic Transit — демонстрационная линия пневматической железной дороги в американском Нью-Йорке.
 По трассе Москва — Сергиев Посад — Александров — Ярославль (Московско-Ярославская железная дорога) прошёл первый поезд.
 Основана Железная дорога острова Мэн.

Персоны

Родились
 3 июля Красин, Леонид Борисович — советский государственный и партийный деятель.

Примечания

redpajama_set_name: RedPajamaWikipedia


text:
El riu Cebollatí (en castellà, río Cebollatí) és un dels rius més llargs de l'Uruguai, amb un curs de 235 quilòmetres. La mida de la seva àrea d'influència és de 14.085 km².

Descripció
Neix a la Cuchilla Grande, al departament de Lavalleja, i desemboca a la Llacuna Merín. És el límit natural entre els departaments de Rocha i Treinta y Tres i és navegable per vaixells d'escàs calat des de la desembocadura d'un dels seus afluents, el riu Olimar, fins a la Llacuna Merín on desemboca.

L'octubre de 2009 s'habilita un servei gratuït de bassa per travessar el riu Cebollatí de La Charqueada (departament de Treinta y Tres) al poble de Cebollatí (departament de Rocha), construïda per la Direcció Nacional d'Hidrografia de l'Uruguai.

Referències

Rius de l'Uruguai
Lavalleja
Rocha
Treinta y Tres
Cebollati


This rum has been exclusively selected for the 12th edition of the "Whisky & Rum aan Zee festival" 2018. It is from a single cask (number 44) yielding 294 bottles and is from one of my favourite distilleries in the world, Foursquare in Barbados.
I have written many times before about Foursquare rums so I won't repeat myself here today. Suffice to say, I think that everything coming from Foursquare is top notch.
As is always the case with Foursquare, there are no additives in this rum. Furthermore this blend of pot and column still rums has no added colouring and comes in at a stonking 59% ABV. It has been aged for 13 years, three in the Caribbean and ten in Europe.
The UK and Europe do seem to be very fortunate to have so many independent bottlers of fine spirits.
Under Richard Seale's/Luca Gargano's proposed rum categorisation, this would most-likely be classed as a "Single Blended Rum" – A blend of only pot still and traditional column still. When tested with my hydrometer, I measured 59% implying no detectable additives in the rum.
The rum is presented in a standard size bottle with a synthetic cork and is adorned with a beautiful picture of a flower aptly named "The Pride of Barbados." The artwork was created by painter Hans Dillesse.
The label has lots of useful info regarding the rum's age (13 years), ABV (59%), number of bottles (294) although there is no reference to the stills used.
In the glass, the rum is a medium to deep amber. As I have been told that no colour has been added, that means it is the 13 years of barrel ageing that have coloured it. Swirling the rum around my glass leaves dotted lines and thick legs that are very slow to descend the sides of my glass.
The nose immediately reveals the unmistakable Foursquare-esque toffee and varnish. This has more wood/oak notes than many other Foursquare rums I have tried. Even with a deep inhalation, this does not take my breath away, which is surprising given that it's 59%. The toffee becomes burnt with further nosings and is joined by green bananas, apricots, dried fruits and orange peel.
Soft and slightly oily on entry. Beautifully dry and easy on the palate despite the high ABV. A touch of dried fruits balances the oak and after multiple sips the rum tastes less dry. Light vanilla, orange peel and raisins too.
At times the rum is buttery, but is always, very smooth. At the mid-palate, a touch of freshly milled black pepper tickles the tongue. This pepper continues to the rear of the mouth creating a spicy finish. The dried fruits merge with the pepper and orange peel creating a delicious ensemble.
Towards the rear, the dry oak continues to produce more tannins. The toffee returns too balancing the oak influence.
The rum has a medium-long and dry finish. The pepper is still there but it does not dominate.
As always, rum produced by Foursquare's Master Distiller Richard Seale is of the finest quality and free from gimmicks and additives.
This latest offering from Dutch Indie bottler The Duchess is a great example of a fine single cask expression. Looking ahead, there will be a Worthy Park bottle coming in the Autumn.
The Duchess Barbados 13yo Foursquare Rum is available to buy direct from https://www.zeewijck.nl/en.
Richard Blesgraaf (Photo below) from Zeewijck co-produced this rum and the service you will receive from his online shop is second to none!


Hola amigos. New all levels courses are about to start in January, including beginners, intermediate and advanced ones, as well as one-to-one tuition. Please, send us an email to the following address, info@anglospanishschool.com, or give us a call on 07551 006590 and we will provide all the details you need to start or improve your Spanish. You will have fun, meet new friends and YOU WILL SPEAK SPANISH. Do not hesitate, contact us for further information.


text:
Encore  () é francês e significa "de novo, mais, ainda".  A palavra foi emprestada do inglês, muito usada pela parte "extra" de um concerto, depois do final oficial, que se faz a pedido da audiência.

Encore (programa)
Encore! Encore!, uma sitcom estadunidense
Encore (canal de TV)

Música
Encore (álbum de David Garrett)
Encore (álbum de Eminem)
Encore (álbum de Lionel Richie)
Encore (álbum de The Specials)
Encore (canção) – de Jay-Z


A native of Kenya, Dr. Amuguni first came to the U.S. to pursue a master's degree in International Development before completing her Ph.D. in Infectious Disease and Global Health at Tufts. In addition to serving as faculty at Tufts, she is the Senior Technical Lead for the USAID Emerging Pandemic Threats One Health Workforce force, coordinating collaborative initiatives across eight African countries that investigate, respond to, and counter existing and future emerging infectious disease outbreaks using a One Health approach.
I want to work in a place that makes diversity and inclusion a big part of what they do. I'm black, I am a woman and I'm foreign – I want to feel like I belong and I don't want to live in fear. In my work environment, I want to feel safe and secure. Diversity to me means that no matter, what I look like or where I come from, I belong , I am at home and I am valued for what I bring to the table. I want the same thing for the students I teach, especially in this current political climate.
Why is diversity and inclusion important at Tufts?
Tufts presents itself as a collaborative, engaging, inclusive university, and I think it has been exemplary at that. I work with people from different backgrounds, and I see that as a way that Tufts stands out as a university that's very inclusive. This inclusivity is what builds an academic institution. If you're closed in, you don't know what's happening around the world. But if you're open, then you're able to attract excellent minds who will change the culture and change the direction of your institution.


text:
My friend David Szafranski sent this link for a minimal-music movement (or rather, "loose grouping") called lowercase sound. Dave notes: "Interesting web design based on the Mac System 6 operating system circa 1989, the one that fits entirely on a single floppy disk."
Carl Fudge's new work at Ronald Feldman gallery in New York was good (the show ended last week). Fudge has a system where he grids a picture, then flips selected squares, creating hundreds of mirror-images of lines and patterns going this way and that within a single image. (He once used a photocopier to make the grids; now he uses a computer.) The effect is that the image--in this case a Transformer robot--looks like it's vibrating in a wormhole; turning into pure iterative mathematics before your eyes. It's interesting to see such a rigorous formal system applied to throwaway pop culture; yet there's actually more sci-fi resonance between system and image here than in his earlier work, which did the same type of "deconstructing" with classic Japanese ukiyo-e woodblock images. The Transformers are even preferable to the Sailor Moon series he did two years ago: possibly because he doesn't coyly hide the robots in abstraction the way he did the female faces. (Also because most are on canvas rather than silkscreen paper.) As usual, his craftsmanship--a combination of silkscreening and masking tape stencilling--is faultless. The new paintings are both elegant and intelligent.
- tom moody 5-28-2002 10:01 pm [link] [10 comments]
Yesterday a friend and I drove down to Philadelphia to see the Barnett Newman retrospective, the Duchamp collection (my first time), and the real, lowbrow impetus for the trip: a rare screening of Dario Argento's 1980 slasher masterpiece Inferno. Here's my Amazon review of the film, from 3 years ago:
Although the acting is fairly poor, the dialogue stilted, and the plot non-existent, this movie--as the Re/Search book Incredibly Strange Films notes--is about as close as one gets to the flow and feel of a dream. I would attribute the mood to the bravura visuals--classically composed still shots a la Peter Greenaway; planes of saturated color winking on and off as characters move through a outrageous deco sets; swooping lens movements worthy of Sam Raimi's "wraithCam"--working in tandem with the gorgeous, occasionally incongruous prog-rock stylings of ELP keyboard whiz Keith Emerson. Scenes of great formal beauty are intermittently jarred by stabbings, immolations, strangulations, eyeball-gougings, and rodent attacks, all fairly gratuitous (just like in real life!), and Emerson's synthesizer flailings are equally prone to erupt without warning--often to miraculous effect. The music that accompanies one woman's taxi ride through the rainswept streets of Rome is wild and offbeat and sticks with you, and the Gregorian finale--the repeated incantation "Suspiriorum, Lachrymarum, Tenebrarum," referring to the "mothers" (all of them witches) who cause the film's mayhem--sounds like a rock opera version of Orff's "Carmina Burana" (it's hokey, but trust me, it works!). I have also seen Suspiria, but prefer this film on the level of pure, macabre experience.
Seeing the film on the big screen for the first time was fun and terrifying, especially in the company of a couple hundred Argentophiles, laughing and screaming in all the right places. The print left something to be desired--the glorious, saturated colors had sadly faded, and the sound was all in the squawky midrange--but that was more than made up for by all the extra detail you just can't see on the video: ghoulish carvings on the walls of Mater Tenebrarum's New York digs, the extent of the decrepitude and ruin in the "hidden" parts of the house, the fleshy reality of Mater Lachrymarum's beautiful, frightening face. Also, seeing the film with a large group made me realize how carefully paced and audience-friendly it is (for a non-linear film depicting bizarre senseless murders). Like Hitchcock, Argento follows super-traumatic scenes with tension-relieving laughs: usually non-sequitur lines or strange behavior from his Euro-weirdo actors. For the record, the strongest audience reaction came in the scene where housecats viciously attack Daria Nicolodi: several moments of utter, primal mayhem as the felines jump on her head and tear at her skin and clothing, accompanied by huge close-ups of claws and teeth and hellish animal screaming on the soundtrack. Why would anyone want to see something like this? To be ready when it happens to you, of course!
Revisionism runs rampant these days: first we had Gerhard Richter as loving family man and now we have a non-creepy Spider-Man. (I haven't seen the movie yet, but please let me critique the hype.) First Scintillatin' Stan (Lee), Spidey's co-creator, gets a crack, in a New York Times op-ed: "I have often thought Spider-Man's worldwide appeal also owes something to his costume. Sharp-eyed fans are sure to have noticed that Spider-Man's costume covers every inch of his body. There is absolutely no skin showing beneath his oh-so-trendy red and blue fashion statement. When Steve Ditko first dreamed up our hero's threads, he created one of the most unique designs in comic-book history. But more than that, Spidey's costume is completely user-friendly. Any reader, of any race, in any part of the world, can imagine himself under that costume — and fantasize that he himself is Spider-Man." I'm not sure friendly, user- or otherwise, is the word I would use to describe those malevolent, pupilless eyes, muscle-hugging cobwebs, and black widow between the pecs, but Lee's "big, sloppy heart" (as Jonathan Lethem calls it) tends to make us forget such details. While you wouldn't expect the creator of a lucrative franchise to admit that it has any dark underpinnings, what's critic David Edelstein's excuse? Here's his take in Slate: "The Marvel Spider-Man comic was born at the beginning of the Pop Art era—its colors are primary. Unlike Bruce Wayne's Batman and Bruce Banner's Incredible Hulk, Peter Parker's Spider-Man has no metaphoric component. The spider persona doesn't emanate from any aspect of Parker's troubled psyche—it's just a cool conceit." C'mon, the kid looks like a Mexican Santo wrestler, creeps and crawls around buildings, has connections in the underworld (remember "Patch"?), spurts semen-like goo out of his wrists--sure, Lee and Ditko made him a lovable everyman with personal "hang-ups," but let's face it, the appeal of the strip was the "normal" kid flirting with the Dark Side. This was never stated by the Marvel's merry men (who were ever mindful of the Comics Code) but the message came through loud and clear to us 8-year olds who enjoyed the strip back in the day.
Another early-'60s creation that artfully mixed the heroic with the macabre was The Scarecrow, played by Patrick McGoohan, before he was the Prisoner or even the Secret Agent. This Disney-produced mini-series (later released as the feature Dr. Syn and the Scarecrow) had good guys fighting King George III to save the public from punitive taxation, but in costumes guaranteed to keep sensitive children awake at night. McGoohan's raspy voice and crooked smile, Hellspite's "leatherface" mask, and Johnny Banks' Evil Barn Owl get-up were the stuff of pure black nightmare. By day McGoohan was the mild-mannered Vicar Syn, hanging out with the aristocracy; by night he roamed the marshes on horseback, robbing the King's supply caravans. Today we would call him a terrorist, though all the violence in the show was implicit. The Scarecrow's specialty was psychological warfare: in an unforgettable scene his band of masked men judge and "hang" a traitor: at the last minute he is cut down, his near-asphyxiation serving as a warning. I saw the film in my late teens and was a bit let down but my childhood memories of the show are potent: I recently discovered a website devoted to the character [since disappeared] and got a case of goosebumps that wouldn't go away.
- tom moody 5-08-2002 10:00 am [link] [6 comments]
Installation shots and opening night photos from my exhibition in Munich with Gregor Passens are here (page and text of this post removed for remodeling). The exhibition opened May 3, and runs through June 14, 2002. An earlier homeroom exhibition, "Some Things Matter," is documented here.
Scott Speh's review of the Whitney Biennial 2002 is right on, and not just because I'm listed as an also-ran. Yes, the big New York critics all trashed the show, but their reviews aren't helpful because none puts forth an agenda any better than the Whitney's. "Why no Elizabeth Murray instead of Vija Celmins?" asks the Times. Puh-lease. I get the feeling that those bad reviews are curator Larry Rinder's "Welcome to NY" hazing, and now he'll be with us for decades. A few years from now these same critics will be saying "Mr. Rinder got off to a rocky start with his first couple of shows, but he's shown great improvement, blah blah."
What Rinder attempts to do with the show is actually fairly interesting: a kind of Mondo 2000 vibe, emphasizing the high-tech on one hand and the primitive, handmade, and "tribal" on the other. Yet in order for a vision to leap wildly from mind to mind it must have what Robert Storr once called "the juice," and as every critic of the show noted, that's sadly lacking.
Speh has a somewhat different take: he believes there's been an upswing in good, new abstract art that the Whitney flat-out missed. I wish he had made more arguments for that position, but even the long list of people he supports shows more focus than the major media critiques of the show. Also, he's much better than Schjeldahl, et al, in conveying the boredom-bordering-on-disgust the show inspires. Those Detroit banners by Mike Kelley and Jim Shaw are awful, aren't they? Talk about forced zaniness. Two rich art stars reliving their art-garage-band youth, presenting clunky mural-style paintings of John Sinclair, MC5, Grand Funk Railroad, Sun Ra, etc...
And notably, in a show that so badly wants to be current, the boomer-centric time-line in the banners stops about 1982. When many people think of Detroit now, they think of techno pioneers Juan Atkins, Derrick May, Kevin Saunderson (and later, Carl Craig, Underground Resistance, Drexciya, DJ Assault...): all musicians who stayed in the city and created a scene--one that got worldwide attention. Whereas Shaw and Kelley bailed, made it big on the West Coast as artists, and now are getting all nostalgic. They love Motor City, but not enough to live there.
Strange Words has a nice essay on visionary science fiction this month, concentrating on the great Cordwainer Smith. "Scanners Live in Vain," written in 1948, is still mind-blowing in its depiction of a highly militaristic post-human society. Before the space program it wasn't unimaginable that outer space could be a place where travelers experienced great physical pain. Smith describes a caste of humans who go up into the vacuum called "habermen," mostly convicts and social misfits, who have their spinal cords cut and machines inserted to control motor and sensory functions. Their only means of perception is vision, which is unaffected by the Great Pain of Space, as it is called; otherwise their bodies are so much unfeeling meat. "Scanners" are volunteers who undergo the same surgery, but unlike the habermen, they are equipped with control boxes that allow them constantly to monitor readouts of their own heartbearts, adrenaline levels, and so forth, as well as those of other scanners. These elite space pilots live entirely through their eyes, except when "cranched," a procedure that temporarily restores hearing, taste, touch, and smell. They speak in a lofty, ritualistic language by means of lip reading, light flashing, and a "talking nail," an extended digit used for marking on a chalkboard; although they are completely disconnected from ordinary human experience, freaks really, they consider themselves highly rational supermen. The story concerns the discovery of a new form of space travel that will make Scanners obsolete, and their conspiracy to kill the inventor. In 1948 the idea of living a completely optical existence probably seemed a lot stranger than it does now. Click click click click...
Another unforgettable Smith story is "A Planet Called Shayol." On this prison world, nature metes out punishments worse than death: when released into the outdoors, the prisoner is immediately hit by a swarm of "dromozoa," a kind of flying one-celled organism that causes intense, crippling pain. Within hours the dromozoa-afflicted body begins growing "spare parts": a hand attached to your neck, say, or a string of baby heads coming out of your abdomen. One inmate turns into a giant foot, another has organs on the outside of his body, others have been voluntarily lobotomized and burrow into the dirt like crabs. And it gets worse: once a month, an attendant comes out and harvests the body parts for transplants and other surgical needs. To remove the parts, he administers extra doses of a powerful painkiller called super-condamine; fortunately for the prisoners, their attendant is kind and gives extra doses of the drug. The protagonist of the story spends decades (he's not sure how long), alternately blissed out on the drug or screaming in agony, while his body goes through every kind of obscene mutation. It's Dante for the space age, sure, but without the moral framework. In Smith's vision, Shayol only exists because it's in the backwater of a very large, very decadent bureaucratic system that goes for millennia without reform. There is no purpose for the punishment except meaningless cruelty. And I'll refrain from commenting on our own incarceration industry in the here and now.
Nancy Burson was a digital imaging pioneer (art gallery variety) and her omission from the Whitney's BitStreams show last year was just one more example of that show's 30-something parochialism. That said, she kind of lost her way when she started taking photos of people with craniofacial deformities (can you say...exploitation?), and looking back at her classic work, it appears that the tech world has passed her by. Nowadays anyone with Photoshop can combine a man's face with a gibbon's (e.g., Will Self's Great Apes book cover from a few years ago), or give someone a bulbous forehead. And I always thought her "aging software" was a bit of a scam--taking what a police sketch artist does intuitively and dressing it up with pseudoscientific bells and whistles. Nevertheless, her morph of Reagan and Brezhnev (with a pinch of Thatcher, Mitterand, and Deng) is still a grabber. Also noteworthy is her Ordinaires CD cover, where the nine band members merge into a blandly smiling whole.
A website for her current retrospective is here, slow-loading Flash intro and all.


Des transport sûrs et invisibles.
In the world of secure delivery, there exists a well hidden treasure: Safety Delivery. A fleet of 80 vehicles all provided with a secured compartment to which the driver has no access and can be opened remotely from our center in Brussels. These vehicles are monitored and can be traced 24/7. Do you want a package (confidential documents, watches, jewellery, etc.) delivered ASAP or do you want to customise the delivery? SD has drivers available all day and will deliver the package where and when you want, whether it is a one-shot or there are regular deliveries to be taken care of. If you are looking for a professional and reliable partner in the Benelux and its neighbouring countries, Safety Delivery can and will provide.
Safety Delivery works for high-quality customers who require a professional approach and flawless security for its deliveries. Unlike other delivery companies, our vehicles are anonymous and from different brands to make sure they do not draw unneeded attention. For the same reason, our drivers are dressed casual, without any logo. They drive one of the 80 vehicles available and are protected themselves by panic buttons inside the drivers' cabin. As mentioned above in the introduction, our vehicles are traceable day and night and are monitored by our team in Brussels. It is also only from there that the secured compartments of our vehicles can be opened.
In case of attempted theft, this security system allows a rapid police intervention and an immense loss of time for the criminals. If one manages to get away with the packages, they are traceable just like our vehicles by our team in Brussels. This information will be transmitted immediately to the police and a swift intervention will make sure the stolen packages are retrieved. The team in Brussels consists of a select number of people, all chosen for their trustworthiness and their ability to handle stress situations. They are the support for our drivers and are the main support for our clients as well. This team can be reached by telephone at all times and will respond to all your questions and will try to solve all your problems concerning the deliveries whether you speak English, Dutch, French or German.
We have selected the best drivers to make sure that they treat every package with the utmost care from the pick-up until the delivery itself. Clients can choose whether or no their name appears on the delivery receipt. SD offers two types of deliveries. The first option: "The express", where the driver immediately departs to the destination, throughout Europe. The second option: "à la carte", where we listen to the client and adapt the delivery to her desires. Aside from that we can provide security guards when the clients want to make a sale or presentation of its high value products.


I called my landline with my textnow number and it showed my text now number, but not my name on the caller ID. How can I get my name to show?
Hey John! Our Caller ID option is currently only available for premium and wireless subscribers.


text:
Kawhi Leonard's Sister Kimesha Williams STILL in Jail for 2019 Pechanga Murder. Why So long for JUSTICE?
Bringing this story forward from September 2019. WHY is this case taking so long? Afaf Anis Assad deserves JUSTICE.
ANOTHER MURDER at Pechanga Resort & Casino. UPDATE, according to Riverside Sheriff's records, Kimesha Williams has a court date today:
LA Clippers star Kawhi Leonard is the brother of one of the women accused of the BRUTAL MURDER of a Long Beach woman at Pechanga Resort Casino, his aunt confirmed Saturday, the PE has reported.
Kimesha Monae Williams, Leonard's sister, is being held without bail at Indio Correction Facility.
An elderly woman visiting Pechanga Resort and Casino, a tribal gaming venue know for cheating their own people via tribal disenrollment, located in Temecula, CA
was assaulted soon after arriving on the premises on Sat, Aug. 31 and later died from injuries suffered in the attack, prompting Riverside Co Sheriff's Dept to arrest 2 female suspects on charges of murder and robbery
The victim, 84-year-old Afaf Anis Assad of Long Beach, was found unconscious on the floor of a bathroom at Pechanga at 8 a.m. Aug. 31, just 30 mins after her son-in-law dropped Assad and her husband off at the casino. |
If Townsel and Williams are tried on first degree murder charges, they could face sentences of 25 years to life, life or capital punishment, though California has suspended the death penalty.
Pechanga Statement, just released a WEEK after the attack:
Saturday morning, an elderly guest was found on the floor of the casino valet restroom, the potential victim of an assault by a woman. Pechanga EMTs immediately provided assistance and had the victim transported to a nearby hospital to treat critical injuries.
Below is a statement from Jared Munoa, President of the Pechanga Development Corporation.
"We are absolutely saddened over this incident and are praying for the victim and her family.The suspects were quickly identified through surveillance footage and the information was immediately provided to local law enforcement. We pride ourselves on putting the safety of our guests and Team Members first and are fully cooperating with law enforcement to bring these perpetrators to justice."
Labels: Pechanga Casino
Be Honest, Native Advocates (NARF, NCAI, ACLU, NIG...
Historic Secretary of the Interior Deb Haaland Has...
If We Don't PUSH ADVOCACY Groups Like NCAI and NAR...
Yulu Ewis Brings ORAL HISTORY TO YOU. OPE Is Avai...
What Abuses Are Tribal Nations OKAY WITH, To Prote...
Saginaw Chippewa Disenrolled Have Letter for Presi...
Saginaw Chippewa Disenrollment Case Sent BACK to I...
Can FAWN SHARP, NCAI President Speak Out on Disen...
Kawhi Leonard's Sister Kimesha Williams STILL in J...
BOYCOTT SOVEREIGN TRIBAL ENTITIES LIKE NOOKSACK TH...
Sen Dianne Feinstein OPPOSES Win River Casino Move...
FOLLOW NEW Website Indigenous Wire, Focused on Ind...
The New York Times, Which was a DECADE Late on Dis...
Tribal Disenrollment is a HATE CRIME
Nooksack 306 Evictions DELAYED Due to Bad Weather....


Palm Springs, a city in the Sonoran Desert of southern California, is known for its hot springs, stylish hotels, golf courses and spas. It's also noted for its many fine examples of midcentury-modern architecture. The Palm Springs Aerial Tramway in Palm Springs, California, is the largest rotating aerial tramway in the world. It was opened in September 1963 as a way of getting from the floor of the Coachella Valley to relatively near the top of San Jacinto Peak and was constructed in rugged Chino Canyon. Living Desert Zoo and Gardens, formerly the Living Desert Museum, is a desert botanical garden and a zoo located in Palm Desert, California, United States. Desert Hills Premium Outlets offers more than 180 stores with savings of up to 65% off regular retail prices. Find impressive savings at your favourite brands!
Today we will make our way to Palm Springs, CA, where we will first ride the Palm Springs Aerial Tramway up the cliffside of Chino Canyon. From there, we will head to the Living Desert Zoo and Gardens.
After lunch, we will take a tour of the famous homes in the area, seeing the places where some of our favorite celebrities live. Finally, we will stop at the Desert Hills Premium Outlets in the area for some amazing discount shopping.
By the end of the day, we will return to Los Angeles, CA in the late evening to conclude our tour. Please advise your drop off address when check out.
Palm Springs, a city in the Sonoran Desert of southern California, is known for its hot springs, stylish hotels, golf courses and spas. Its core shopping district along Palm Canyon Drive features vintage boutiques, interior design shops and restaurants. The surrounding Coachella Valley offers hiking, biking and horseback riding trails. Shop the antique and specialty shops along this route if you can on Thursdays when the road is closed to vehicles, and local merchants fill the streets with goods and fresh produce – look for the plump dates that grow especially well in the valley.
Chino Canyon is a 5.5-mile-long (8.9 km) desert canyon, and its associated stream is a tributary of the Whitewater River in Riverside County, California, United States. The canyon is located in the northern part of the San Jacinto Mountains and is part of the Coachella Valley. It is one of the steepest canyons in North America, dropping from over 8,500 feet (2,600 m) at the south rim to less than 2,700 feet (820 m) on the valley floor in less than a mile. The southernmost, upper reaches of the canyon are bordered by Mount San Jacinto State Park. The canyon mouth at the north end is being encroached by the outskirts of Palm Springs, California. Chino Canyon is the site of the Palm Springs Aerial Tramway.


Welcome to the Companions of the Way! We are an Episcopal Christian community seeking to live out a monastic vocation in the 21st century, meaning we seek to be disciples of Jesus while living in the world. Our motto is discipuli facientes discipuli, or "disciples making disciples." Members are single or married, ordained or lay, living in community or with their families. The desire of our community is to see members in every local church promoting and living out Christian discipleship and experiencing the joy, love, and peace that comes from following Jesus.
For regular news and updates about the Companions of the Way, please subscribe today to our Companions newsletter.
What is so Holy About Holy Week?


Sales of existing homes in March were disappointing, dropping 7.5% year over year. Some analysts use the 5 million mark as an indication of a healthy housing market.
As a percent of the population, the change in existing home sales is rather small, yet the change of ownership prompts remodeling projects and home furnishing purchases after the sale, spiff ups before the sale, and commissions and fees for real estate professionals at the time of the sale.
As a percent of the total stock of homes, sales are likewise small yet determine the valuation of everyone's home. There are concrete consequences: a lowered evaluation of a home's value might mean that a person cannot get a home equity loan to help start a new business. As we discovered in this last recession, lowered valuations of a home can mean that homeowners are upside down on their mortgages. Low valuations "box in" a homeowner's choices so that they may feel that they can not move to a nearby town to be closer to a new job. These cumulative effects can promote a defeatist attitude among homeowners. In the past several years, many of us recently found that we were worth less – $50K, $100K, $200K – because the value of our homes had dropped. Even though many of us had no intention of moving, we felt poorer.
The methodology underlying the calculation of the Consumer Price Index (CPI) involves the concept of Owner Equivalent Rent (OER). The CPI treats home ownership as though the family who owns the home is renting the home to themselves. In this sense, owning a home is like a owning a U.S. Treasury bond that pays regular interest payments, or coupons. Until the recent recession, many regarded home ownership as though it were a Treasury bond, unlikely to ever lose value. Even better than a Treasury bond, a house was likely to gain in value.
Most of us, however, do not think in terms of OER. We feel poorer when the value of our home drops by 20%. Likewise, a stock market drop of 20% has a significant effect on the value of our retirement funds. Even if we do not need that money for 10 years or more, we are poorer on paper and this affects many other buying decisions.
Other economic reports this week offset the negative news on home sales. The flash, or preliminary, index of manufacturing activity indicates a positive report next week on the sector. Durable goods orders were strong, reinforcing the signs that manufacturing is on a spring upswing. New claims for unemployment were a bit above expectations but nothing significant and the 4 week moving average of claims indicates a much improved labor market.
Although UPS and 3M had disappointing earnings or forecasts, industrial giants GM and Caterpillar surprised to the upside, as did tech giants Microsoft and Apple. Expectations for this earnings season were rather lukewarm but the aggregate earnings growth of the SP500 may come in below 1%. Some attribute Friday's drop in the market to accelerating tensions in Ukraine but the market was essentially flat this past week, reflecting a general lack of enthusiasm or worry.
Put 10% of the cash in short-term government bonds and 90% in a very low-cost S&P 500 index fund. I suggest Vanguard's. (VFINX) I believe the trust's long-term results from this policy will be superior to those attained by most investors – whether pension funds, institutions, or individuals – who employ high-fee managers.
Doughroller presented some good observations on Buffet's recommendation. Also at the same site Rob Berger offers a fresh perspective on the stock – bond allocation mix.
In a recent analysis of trends in the various components of the Consumer Price Index, Doug Short presented several graphs of the annualized growth rates of the different components. It comes as no surprise that medical care costs have risen 70% in the past 13 years. The real surprise to me was that college tuition costs have shot up almost twice that – 130% in the same period. Average tuition and fees for an in state student at a public four year college are currently almost $9K per year.
The growth in costs should worry parents with a son or daughter six years away from entering college. Perhaps they may have planned on $10K – $12K a year. However, if these growth trends remain as constant in the coming years as they have in the past, tuition and fees will be more like $15K per year when their child begins college. By the time they graduate – if they graduate within four years – the cost could be $20K per year. Remember, this doesn't include any housing costs. Higher education receives heavy subsidies from each state and the Federal government. So why the skyrocketing tuition costs? Heavy lobbying, influence in the state capitols in the nation, inefficient and bloated administrative structures, protectionism – these are just a few of the reasons for the escalation in costs. A spokesman for higher education won't give those reasons, of course. She will cite the need to attract quality teachers, investments in new technologies, aging infrastructure that is costly to maintain, and those certainly do contribute to increasing costs. Higher education is still largely built on a framework that was suited for the sons of the landed gentry in the 18th and early 19th centuries. As Obama and voters discovered after the 2008 elections, change comes slowly. Like the tax system, higher education will continue to receive incremental changes, a hodgepodge of patches to fix this and that, to pad the pockets of this interest group or ameliorate a select slice of voters.


Derek Nees of Brotke Well and Pump will present a hydrology project case study.
Cost will be $15 for members, $20 for non-members, and $10 for students and those between jobs.
Please RSVP at http://www.aegstl.org/monthly-section-meetings/ by noon on Wednesday, May 16, 2018.


Tickets can be purchased from Ticketmaster using the Apple iPad. On this device the user can use wither using the built-in Safari browser or the Ticketmaster app, that is now available from the official Apple app store. Ticketmaster uses a different design (than other environments) for the ticket purchase page for Broadway show ticket purchases on the iPad - whether it is on the web site or using the app. The new web page and the app page allows the use of a discount code, also known as an "Offer Code". The box appears at the bottom on the purchase page.
Below are the instructions and screen shots for using an iPad for buying tickets from Ticketmaster. Different Broadway shows were used as the examples. The iPad has limitations that impedes the process of buying a ticket on Ticketmaster as some of the functionality has been cut down due to the lack of support of Adobe Flash on this device. This means that this environment does not have a seat map, so the user is given Ticketmaster's best guess, or "best available" tickets. These tickets may not be the best seats for seeing the show, but you cannot change the Ticketmaster selection. Clearly, the best device to buy tickets with on Ticketmaster using a discount code, is on a desktop PC or an Apple iMac, where the full functionality exists and users can choose many more seating options and pricing.
Buying discount tickets on Ticketmaster using the iPad with the Safari browser is a less common way to navigate the Ticketmaster website ticket purchase process. It is not the best way to do the transaction as the iPad does not support Adobe Flash, which means that the interactive seat map will not appear. There are a few things to consider for this ticket purchase process - See the iPad screen shots and instructions below for the specifics.
Use your iPad and the Safari browser to visit the Ticketmaster.com website. The Ticketmaster website will encourage you to install the Ticketmaster app on its main page, but you should avoid this as the app does not deliver any additional functionality.
Select the Broadway show that you're interested in and tap on "see tickets" for for the date and time of the performance that are required.
Tap on the "Got An Offer Code" yellow lock button - see image below. Type the code into the box that pops up and tap on "Apply". If the code fails, try another date/time. If that fails, please go back to the supplier of the discount code and let them know that the code is not working. Another box should pop up stating "You've Unlocked Promotion Ticket Selection".
Select the quantity of tickets required and tap on "Find Tickets" you may need to navigate the anti-robot RECAPTCHA software.
Ticketmaster will give you what it thinks is the "best available" tickets for that offer - you cannot choose alternative seats in that section because you are using a device that does not support Adobe Flash, which is a pre-requisite for the Ticketmaster seat chooser system.
If you are happy with the tickets selected, continue through the ticket sale process. Do not be confused with the voucher code box on the Ticketmaster checkout page, this is not for your offer discount code - be sure to enter your discount code on the initial step of selecting your tickets, not at the end of the transaction - see the notes above.
The Ticketmaster app for the iPad is just another flavor of a less-than-stellar offering from the app-store and Ticketmaster, The app is marginally better than just using the Safari browser on the iPad to buy tickets on Ticketmaster. The biggest problem is that Apple's iPad does not support Adobe Flash, which means that the interactive seat map on the Ticketmaster app will not appear, significantly limiting the functionality of the service. As previously indicated, the best way to purchase a ticket on ticketmaster is to use a PC, Notebook or iMac to buy tickets - as these devices support Adobe Flash. There are a few things to consider when using the Ticketmaster app on the iPad - screen shots and instructions are below for the specific experience.
1. Start the Ticketmaster app from your home screen on the iPad. Select the date and time of the Broadway show you are are interested in.
2. The Ticketmaster app seems like it is well designed, but it is just a glitzy view that still lacks the functionality that exists on other environments like the iMac. The app uses a visually appealing wheel to select the number of tickets for the various ticket types on the show.
3. If you have an offer code, first deselect all the standard numbers of tickets on all the other wheels, by setting them to zero. If you do not do this then the request for discount tickets will be denied with scant information about what the error or problem is.
4. Go to the "offer code" section and enter the offer code where it indicates "required and select how many discount tickets are required. Then tap on the green "find tickets" button.
5. If the code fails, try another date/time. If that fails, please go back to the supplier of the discount code and let them know that the code is not working. You may have to navigate the RECAPTCHA security controls to move to the next screen, these parameters can change from day-to-day.
6. The Ticketmaster app will now show the "best available tickets". You cannot choose to modify these seats, you either accept their "best available" setting or start the whole process over, which is very frustrating.
7. If you are happy with the tickets, continue through the ticket sale process. Do not be confused with the voucher code box on the Ticketmaster checkout page, this is not for your offer discount code, be sure to enter that value on the initial screen, where you select how many tickets you require.


text:
MAN FOUR-STROKE ENGINES WILL OPERATE ON FUTURE GREEN FUELS
MAN Energy Solutions says that its four-stroke engines will be able to exploit a multitude of synthetically manufactured, climate-neutral fuels, with MAN four-stroke engines already able to use power-to-X fuels such as synthetic natural gas (SNG) for climate-neutral operation.
MAN customers will in due course be able to use other, so-called 'future fuels' – such as ammonia, methanol and hydrogen – also produced in a climate-neutral manner. While these fuels are not currently available on the market, their use in MAN units will, however, be possible through the incipient start-up of green-fuel production facilities. These, in turn, will further reduce harmful emissions and reliably meet future, stricter environmental requirements and regulations.
Marita Krems, Head of Four-Stroke Marine Engines Division, MAN Energy Solutions, said: "Green future-fuels are key to the decarbonisation of shipping. By 2050, greenhouse gas emissions in ship transport must decrease by at least 50%. We will therefore make future-proof solutions available to our customers, which will make the diversified use of green fuels possible – both for new engines and engines in the existing fleet."
The company points out that today, its engines can run on biofuels in order to reduce emissions.
Krems added: "Sustainably produced biofuels, for example those derived from waste woods, can reduce CO2 output by up to 85%. In 2022, we will offer engines that are designed for later conversion – if required – to methanol operation. From 2024, we will make solutions for the use of methanol in four-stroke engines available."
The company has its sights firmly set on the use of ammonia.
Krems said: "In container ships with a two-stroke engine, ammonia will certainly play a decisive role and such an engine will be available from 2024. When it comes to the four-stroke segment, we have already discussed the relevance of this fuel in great detail with our customers. Cruise ships or ferries, for example, are basically floating cities and have especially high safety standards. Here, we only see options for ammonia's use if initial, positive operating experiences have been gathered in other segments. As soon as there is a demand for an ammonia solution, we will be ready. With our two-stroke engines, we are the pioneers when it comes to ammonia and we have the necessary, developmental competence. Together with partners – as part of the 'AmmoniaMot' research project – we have already defined the steps necessary for the development of a four-stroke, multi-fuel engine that can also operate on ammonia. As soon as relevant fields of application emerge, we will be able to handle them."
MAN Energy Solutions says it continues to follow the concept it has built up over several generations.
Bernd Siebert, Head of Four-Stroke Retrofitting, MAN PrimeServ, said: "In addition to new engines, we are also always thinking in terms of retrofitting the existing fleet. Ships have a lifetime of several decades. After retrofitting, engines already in the field have the same capabilities as our new engines. This is how we safeguard, not only the climate, but also our customers' investment."
Article published in Propulsion & Machinery
synthetic fuel


text:
Q: How do I highlight a HTML button using CSS? I am trying to highlight the "current page" in my navigation menu (with drop-down menus).

The code below did the job when I had simple navigation links (built using the "" HTML tag). I am now upgrading my navigation bar to hold drop-down menus (using "< button >" HTML tags).
I believe I need to take a similar approach and assign an active class to the "current" page but I can't work out how to loop through "< button >" objects in the same way I did for "" objects
How can I dynamically highlight the current page in my navigation bar when using buttons ("< button >") in my navigation bar?
I found a related article on W3: https://www.w3schools.com/howto/tryit.asp?filename=tryhow_js_active_element2 but it doesn't work for my use-case as I'm navigating between different URLs.
A simplified version of my code looks like this:

  Home
  Page A

    <button class="dropbtn" onclick="location.href='page_b.html'" type="button"> Page B</button>

      Food
      Exercise
      Drinks

  Page C
  Page D

Associated CSS:
...
.active {
  background-color: blue;
}
...

.dropdown:not(.dropdown-content) {
  float: left;
  overflow: hidden;
}

.dropdown .dropbtn {
  font-size: 17px;
  border: none;
  outline: none;
  padding: 14px 16px;
  margin: 0;
}

...

.dropdown-content {
  display: none;
  position: absolute;
  z-index: 1;
  box-shadow: 0px 8px 16px 0px rgba(0,0,0,0.2);
}

.dropdown-content a {
  color: #ffffff;
  background-color: #000000;
  padding: 14px 16px;
  text-decoration: none;
  display: block;
  text-align: left;
}

.dropdown:hover .dropdown-content{
  display: block;
  z-index: 1;
}

A: You would need to add the class active to each page so the when the user is on the home page. your code would be like this.
 Home

For page A
  Page A


text:
Home » Cancer » Cauliflower, Kale and Cabbage Could Fight Cancer
Cauliflower, Kale and Cabbage Could Fight Cancer
By The Doctors Health Press Editorial Board - July 7, 2008
A special group of vegetables called cruciferous vegetables could help to reduce your risk for getting cancer. Researchers have discovered that these cruciferous vegetables contain a phytochemical known as isothiocyanates. Isothiocyanates stimulate your body to break down potential carcinogens. They work by preventing the transformation of normal healthy cells into cancerous cells.
An excellent example of an anti-cancer cruciferous vegetable is broccoli. Broccoli contains sulforaphane, which is a natural chemical that stimulates your body to produce enzymes and destroy carcinogens. This substance is particularly rich in broccoli sprouts and about 20 to 50 times richer in mature broccoli.
At the Harbor UCLA Medical Center in Torrance, California, a study was conducted to determine the effects of eating broccoli among men and women aged 50 to 74. The results showed that those who consumed more broccoli (average: 3.7 cooked servings per week (each serving is about a half a cup)) were 50% less likely to develop colorectal cancer than those who never ate broccoli!
Many cruciferous vegetables also contain a compound called indole-3-carbinol. This compound is said to reduce the risk of hormone-dependent cancers such as prostate, breast and ovarian cancer. Indoles are sources of chemicals that contain sulfur, which are released whenever cruciferous vegetables are crushed or cooked.
Indoles may be responsible for the reduced cancer risk in people who eat large amounts of cauliflower, kale and cabbage. A clinical study found that the indoles found in cruciferous vegetables helped reduce the incidence of head and neck tumors in smokers.
Starting to become convinced about the cancer-protective effect of broccoli, cabbage and kale? Try adding some of these veggies to your diet every day:
— Arugula
— Bok choy
— Broccoli
— Brussels sprouts
— Cabbage
— Cauliflower
— Chinese cabbage
— Collard greens
— Daikon
— Kale
— Kohlrabi
— Mustard greens
— Radishes
— Rutabaga
— Turnips
— Watercress
Tags: General Health Advice, Healthy Diet, Healthy Vegetables


text:
Holorusia similis is een tweevleugelige uit de familie langpootmuggen (Tipulidae). De soort komt voor in het Oriëntaals gebied.

similis
Langpootmug uit het Oriëntaals gebied


text:
Thu, August 09, 2012
Sports > Popular News > 2012 London Olympic Games
Can China hold gold lead on day 13?
2012-08-09 06:23:10 GMT2012-08-09 14:23:10(Beijing Time) China Daily
China's Zhou Yu and Wu Yanan competes in the women's kayak double (K2) 500m semifinal at the Eton Dorney during the London 2012 Olympic Games, Aug 7, 2012. [Photo/Agencies]
Can a 24-year-old from China beat a host nation opponent in front of a deafening crowd to become the first female Olympic boxing champion?
Ren Cancan, the world champion, defeated Marlen Esparza of the US 10-8 in the women's 51kg boxing semifinals on Wednesday and a place in boxing history.
Ren will now face Nicola Adams in the first women's final at 11:30 pm in what is sure to be a highlight of Olympic day 13 and an ear-piercing event as the Brits can get passionate about the sport firmly rooted in the country's culture.
But success could also come early from other unlikely places.
Historically, China has not done well in Olympic canoe and kayak events, winning just two medals since 2000. Gold medals in Beijing and Athens are from the men's 500m canoe double sprint.
Huang Maoxing and Li Qiang, who ranked first in semifinal, could offer an early gold in the men's canoe double 1000m sprint finals at 4:30 pm.
League leaders Wu Yanan and Zhou Yu will also vie for medal glory in the women's kayak double 500m final at 5:35 pm.
Chen Ruolin, who has already won one gold in London and is the current Olympic diving champion will compete against teammate Hu Yadan for a medal in the women's 10m platform diving. The semifinal is at 5 pm, the final 2 am.
Also back in the water, Fang Yanqiao will chase a medal in the women's 10km swimming marathon at 7 pm.
In the women's taekwondo 57kg world champion Hou Yuzhou will face Diana Lopez of the US for a place in the final from 7:30 pm. The final will be held at 5:15 am.
And Olympic champion Wang Jiao will defend her 2008 title in her bout against Nigeria'a Amarachi Favour Obiajunwa in the women's 72kg freestyle wrestling at 8:56 pm. The final is at 2:48 am.
Team China also has two athletes competing in track medal events in the early hours of Friday morning. Dong Bin will compete in the men's triple jump final at 2:20 am and Lu Huihui in the women's javelin throw final at 4 am.
UNESCO World Heritage site Lijiang
China final of Miss Bikini Global Contest starts
Maggie Cheung poses for Magazine Figaro
1Typhoon Haikui approaches China's eas...
2China not present at Hiroshima memorial
3China's frigate "Yantai" arrives in B...
4The surface of Mars
5FHM 2012 Sexiest Women list
6Chinese swimming team arrive at the B...
7NASA rover sends first photos from Mars
8Report reveals measly pay for China's...
9Man hired as human bomb in deadly off...
10Mandela meets Clinton at his South Af...
Clinton's charming stunt of showing off dance moves
Buskers in Australian Chinese Got Talent
Typhoon Haikui enters Anhui Province
Taking in nutrition in autumn


The atypical transmembrane receptor tyrosine kinase (RTK) Ryk is a Wnt receptor that plays important roles in axon guidance and neurite outgrowth. Ryk is an unusual RTK because its intracellular domain (ICD) does not exhibit tyrosine kinase activity, so the mechanism by which it mediates Wnt signaling is unclear (see commentary by Zhong). Noting that Ryk is found in neural progenitor cells (NPCs) and neurons, Lyu et al. investigated its role in NPC function. Immunohistochemical analysis of brain sections showed that Ryk knockout (KO) mice had fewer mature cortical plate neurons than did their wild-type (WT) counterparts, without having any differences in the number or proliferative ability of their NPCs. Whereas Ryk was detected on the surface of NPCs from WT mice, Ryk was less abundant at the surface of mature neurons. Instead, the Ryk ICD was detected in the nucleus in neurons. Lentiviral-mediated expression of WT Ryk in Ryk-deficient NPCs restored their ability to differentiate into neurons in culture, but expression of a mutant Ryk lacking its transmembrane domain did not. In cultured NPCs, addition of an inhibitor of γ-secretase, which cleaves ICDs from other transmembrane proteins, prevented the nuclear accumulation of Ryk ICD. Lentiviral expression of Wnt3 in NPCs stimulated their differentiation into neurons and induced more nuclear localization of Ryk ICD compared to that of control NPCs. Wnt3-induced neuronal differentiation was blocked in NPCs expressing a dominant-negative Ryk that lacked an ICD. Together, these data suggest that Wnt-stimulated neuronal differentiation depends on γ-secretase–dependent processing of Ryk and nuclear localization of its ICD, leading the authors to speculate that the Ryk ICD may regulate the expression of Wnt-target genes through a mechanism independent of β-catenin.


This was a timed edition glow-in-the-dark screen print that was only available for 72 hours. The only way to get this print after the initial timed release is through the Twilight Horror print set.
This is a four color screen print plus glow ink on 100# white paper, sized at 9x12. This print is a signed and numbered edition of 50 and has a hand stamped custom machete on the back to signify the number in the edition.


text:
/*
 * To change this template, choose Tools | Templates
 * and open the template in the editor.
 */
package org.clothocad.core.security.nosecurity;

import org.apache.shiro.authz.AuthorizationException;
import org.apache.shiro.mgt.SecurityManager;
import org.apache.shiro.session.Session;
import org.apache.shiro.subject.PrincipalCollection;
import org.apache.shiro.subject.support.DelegatingSubject;
import static org.clothocad.core.security.ServerSubject.SERVER_USER;

/**
 *
 * @author spaige
 */
public class LoggedInSubject extends DelegatingSubject {

    public LoggedInSubject(PrincipalCollection principals, boolean authenticated, String host, Session session, boolean sessionCreationEnabled, SecurityManager securityManager) {
        super(principals, authenticated, host, session, sessionCreationEnabled, securityManager);
    }

    @Override
    public Object getPrincipal() {
        return SERVER_USER;
    }

    @Override
    public boolean isAuthenticated() {
        return true;
    }

    @Override
    protected void assertAuthzCheckPossible() throws AuthorizationException {
    }
}

redpajama_set_name: RedPajamaGithub


text:
Making Sense of the Last Month of DDoS Attacks
In this piece, we'll take a brief look at the impact of the unprecedented #DDoS attacks of September and October 2016 and provide guidance for those interested in improving their resiliency.
Let's celebrate that the Internet of Things has arrived! We know it's finally here because it got used as a cyber weapon three times starting in September. It started with a massive attack on blogger journalist Brian Krebs, whose website krebsonsecurity.com was hosted and protected by the CDN Akamai. The attack was severe enough to affect Akamai's other customers, so they dropped their pro-bono defense of the blogger.
Industry researchers (including F5's) were alerted to a new botnet comprised of DVRs and video cameras and other "things." But the DVRs and video cams are significant because they have both high CPU capability (which can therefore host sophisticated malware) and high-bandwidth uplinks (from which they launched attacks up to 100 Mbs each). The total attack traffic directed at Krebs was 620 Gbs, which at the time was the world's largest DDoS attack.
The second attack knocked out OVH, the largest French hosting provider (number three in the world, if you believe the literature) for much of a day. Many media reports listed the OVH attack at nearly double the size of the Krebs attack; a full terabit per second.
The third and possibly worst attack came against Dyn, the DNS services company. Dyn is the DNS provider for many marquee websites, including Twitter, Spotify, and GitHub (where ironically the IoT botnet code was posted).
So, Who Did It?
By strange coincidence, industry luminary Bruce Schneier had been making the interview circuit the previous month warning of massive, nation-state DDoS attacks to come. His inside information came from unnamed industry sources who were spotting calibration DDoS attacks against the core Internet infrastructure.
But, as it turns out, those probing attacks may have been just coincidence. Schneier himself admitted on his blog that he doesn't think the Dyn attack was a nation-state at all. But maybe that nation-state is just watching and waiting.
The key to attribution in the Krebs, OVH, and Dyn cases may likely come from Brian Krebs himself.
"The attack on DYN comes just hours after DYN researcher Doug Madory presented a talk on DDoS attacks in Dallas, Texas at a meeting of the North American Network Operators Group (NANOG). …the record 620 Gbps DDoS against KrebsOnSecurity.com came just hours after I published the story on which Madory and I collaborated."
Very likely the adversary is an individual (or small group) with an agenda against Brian Krebs or Doug Madory, or both.
We could all understand that millions of users would be affected by a full-scale China-US cyberwar. But if it turns out to be a personal agenda from a single individual against another single individual? That's even scarier than a nation-state attack. What kind of Internet have we built when a single person with a grudge against another person can interrupt critical services for millions of people?
F5 has been monitoring the hunt for Internet of Things (IoT) devices for over a year now. Our first report on this issue was published in July of 2016 and showed a 140% increase in year-over-year telnet and SSH brute force scans. Telnet and SSH are widely used remote administration ports, and they are often left unknowingly exposed to the Internet with vendor default (or easy to guess) user name and passwords.
The unprecedented DDoS attacks on Krebs, OVH, and Dyn in October of 2016 used exactly this technique (scanning for telnet ports and vendor default passwords on IoT devices) to create a botnet of unique capability.
Everyone's a target again. The bot herders aren't afraid to turn their cyber weapon against some of the largest providers in the world—targets that were previously thought untouchable.
While these attacks might feel like they happened overnight, in reality, the bot herder has been slowly searching for, finding, and compromising vulnerable IoT devices for at least a year.
Deep Dive into What We Know
We actually have a pretty good idea of the capabilities of the IoT botnet, Mirai. The researchers at F5 wrote a technical breakdown of the Mirai bot shortly after its author released the source code on hackforums.net.
The collective firepower is likely an order of magnitude greater than previous botnets; north of terabits per second.
The IoT botnet includes (but is not limited to) the following advanced DDoS techniques. The prescriptive guidance section below will provide recommendations on how to mitigate these, when possible.
HTTP GET Floods Resistant to Redirection
HTTP GET floods were already pernicious. For years, attackers have been able to disable web sites by sending a flood of HTTP requests for large objects or slow database queries. Typically, these requests flow right through a standard firewall because they look just like normal HTTP requests to most devices with hardware packet processing. The Mirai attack code takes it a step further by fingerprinting cloud-based DDoS scrubbers and then working around any 302 redirects that the scrubbers send back. Redirects used to be a good way to stymie simple bots, but this one isn't simple.
DNS Water Torture
The Mirai bot includes a "water torture" attack against a target DNS provider. This technique is different from the regular DNS reflection and amplification attack because it requires significantly fewer queries to be sent by the bot, letting the ISP's recursive DNS server perform the attack on the target authoritative DNS server. In this attack, the bot sends a well-formed DNS query containing the target domain name to resolve, while appending a randomly generated prefix to the name. The attack becomes effective when the target DNS server becomes overloaded and fails to respond. The ISP's DNS servers then automatically retransmits the query to try another authoritative DNS server of the target organization, thus attacking those servers on behalf of the bot.
Dyn confirmed in their blog post, Dyn Analysis Summary of Friday, October 21 attack, that the water torture was indeed used against them.
"For example, the impact of the attack generated a storm of legitimate retry activity as recursive servers attempted to refresh their caches, creating 10-20X normal traffic volume across a large number of IP addresses. When DNS traffic congestion occurs, legitimate retries can further contribute to traffic volume.
It appears the malicious attacks were sourced from at least one botnet, with the retry storm providing a false indicator of a significantly larger set of endpoints than we now know it to be. We are still working on analyzing the data but the estimate at the time of this report is up to 100,000 malicious endpoints."
F5 researcher Liron Segal had detailed the mechanics of the bot's Water Torture attack in his post weeks earlier—Mirai, the Bot that took down Krebs.
Updated Layer 4 Attacks
According to the bot's creator, the so called "TCP STOMP" attack is a variation of the simple ACK flood intended to bypass mitigation devices. While analyzing the actual implementation of this attack, it seems that the bot opens a full TCP connection and then continues flooding with ACK packets that have legitimate sequence numbers in order to hold the connection alive.
Given our understanding of the individual threat vectors with the new IoT bot, we can provide some guidance for the mitigation of those individual threat vectors.
Let's be clear before we start the guidance. The Krebs, OVH, and Dyn attacks are in a class by themselves. Clearly, existing DDoS mitigation techniques did not easily throw back the attackers—hence the outages and the headline media coverage. However, mitigation eventually did take effect in many cases. And proper architecture, such as using Anycast and dispersed data centers helped, as well. Note that the West Coast and western regions of the US were largely unaffected by the Dyn attack.
Prescriptive Guidance
Our guidance comes from our own customers. F5 has been delivering applications for the world's marquee brands for twenty years, and many of those customers get attacked with DDoS every day. Our most experienced customers break their defenses into three or four zones:
Cloud scrubbing
Network defense
Application defense
DNS, where applicable
A superlative DDoS-resistant architecture therefore looks like this:
This is the DDoS protection reference architecture, which has been widely used by F5 customers for years. The full reference architecture and recommended practices can be found at F5.com. However, for faster consumption, the guidance relevant to these attacks is detailed below.
Volumetric Defense
The French hosting company OVH was hit with a volumetric attack of 990Gbs. There were reports that the Dyn attack peaked at 1.2 terabits. Attacks of that size can usually only be mitigated by cloud scrubbers that specialize in defense at scale. Cloud scrubbers, including F5's Silverline DDoS Protection, intercept the attack traffic, scrub it clean, and send only the good traffic to the target over pre-arranged tunnels.
Guidance: Organizations should ensure they have agreements with one or more cloud scrubbers prior to getting attacked. Configuring the pre-arranged tunnels is not something that can easily be done in the midst of a volumetric attack. Contract with a cloud scrubbing DDoS defense as part of your DDoS strategy.
Guidance: Attack diffusion can be your friend for volumetric attacks. Remember that DNS can be your friend, too; Anycast your global data centers for replicated content to diffuse DDoS attacks when they happen. Each data center that participates with Anycast can help divide the attack.
Relevant Materials:
F5 Silverline DDoS – Deployment Methods
The F5 DDoS Playbook: Ten Steps for Combating DDoS in Real Time
F5 DDoS Protection Recommended Practices
F5 DDoS Reference Architecture
The Mirai bot includes several layer 4 attacks in its arsenal: standard SYN floods, TCP floods, and UDP floods. These ancient threat vectors must be mitigated either at a cloud scrubber or, if they are sufficiently small, at the network defense tier in the data center. The network defense tier is built around the network firewall. It is designed to mitigate computational attacks such as SYN floods and ICMP fragmentation floods. This tier also mitigates volumetric attacks up to the congestion of the ingress point (typically 80 to 90 percent of the rated pipe size).
Guidance: Many firewalls are not resistant to DDoS attacks unless properly configured. Check with your network firewall vendor for settings. Some customers will put anti-DDoS devices in front of their firewalls to repel layer 4 attacks.
Guidance: The F5 firewall module (BIG-IP Advanced Firewall Manager (AFM)), was designed specifically to repel layer 4 attacks. Some architects use BIG-IP AFM for just this case—either in front of, or replacing conventional network firewalls. Hardware appliances with AFM use field programmable gate arrays to repel more than 30 types of packet floods and offload the work from the CPU.
DDoS Mitigation with BIG-IP AFM
F5 BIG-IP Advanced Firewall Manager Datasheet
The Top Ten Hardcore F5 Security Features in BIG-IP 12.1
The Mirai bot can generate impressive HTTP GET floods and handle directs. Because GET floods look like normal traffic to the network defense devices, they must be handled at the application tier. GET floods are by far the most common application layer attack type that F5 sees, and there are many ways to mitigate them, depending on the product portfolio that a customer is wielding.
Guidance: For bots that can handle simple redirects, F5 recommends either throttling connections based on their request-per-second metric or by using what is called a "login-wall." A login wall requires a connection to be authenticated to the application before it can consume non-cached or dynamic resources such as database queries.
Login Page Protection with ASM
DevCentral: Simple iRule Login-Wall
DNS Defense
There are two DNS issues worth talking about in regards to the Dyn attack. The first and most straightforward is what to do if your DNS provider is taken offline by one of the new types of attacks. Dyn was the name-service provider for Twitter, GitHub, and Spotify, so when Dyn was blocked, end-users were unable to find IP addresses for these services.
Guidance: Build resiliency into your DNS plan that includes, but is not limited to, multiple DNS providers to serve addresses for your critical applications. In this way, if one of the providers succumbs to an attack temporarily, the other provider can serve your addresses. It may slow your end users by a few milliseconds, but your applications and services will still be available.
The second issue is what to do if your own DNS server comes under attack. DNS is the most targeted service with HTTP being second. When DNS is disrupted, all external data center services (not just a single application) are affected. This single point of total failure, along with the often under-provisioned DNS infrastructure, makes DNS a tempting target for attackers.
Recall that even if your own server isn't under attack, an outage downstream of you could cause a different set of DNS servers to flood your DNS servers with requests as they try to fill their own caches. Dyn reported 10 to 20 times normal requests when this happened with them, and that was from legitimate DNS servers trying to cope with the situation.
Guidance: A significant percentage of DNS services are under-provisioned to the point where they are unable to withstand even small-to-medium-size DDoS attacks. DNS caches have become popular as they can boost the perceived performance of a DNS service and provide some resilience against standard DNS query attacks. Attackers have switched to what is called "no such domain" (or NXDOMAIN) attacks, which quickly drain the performance benefits provided by the cache.
For F5 customers, F5 recommends front-ending the DNS services with the DNS proxy module called F5 DNS Express™. DNS Express acts as an absolute resolver in front of the existing DNS servers. It loads the zone information from the servers and resolves every single request or returns NXDOMAIN. It is not a cache and cannot be emptied via NXDOMAIN query floods.
Guidance: Remember that DNS can be your friend during a DDoS attack; Anycast your global data centers for replicated content to diffuse DDoS attacks when they happen.
Guidance: Consider the placement of DNS services. Often the DNS service exists as its own set of devices apart from the first security perimeter. This is done to keep DNS independent of the applications it serves.
Some large enterprises with multiple data centers serve DNS outside the main security perimeter using a combination of BIG-IP DNS with DNS Express and the BIG-IP AFM firewall module. The main benefit of this approach is that the DNS services remain available even if the network defense tier goes offline due to DDoS.
F5 Friday: No DNS? No…Anything
F5 DNS Datasheet
DevCentral: DNS Express and Zone Transfers
DevCentral: DNS Express - Part 1
The Dynamic DNS Infrastructure
The Krebs, OVH, and Dyn attacks mark a new phase in DDoS. At the same time, they mark the coming of age of the Internet of Things.
As you can see, F5 has a lot of experience researching, combating, and writing about DDoS and we want to work with customers to keep their applications available. This will require vigilance on all our parts—from F5 to partners to customers.
If you are a customer, or even if you aren't, and you come under attack, remember that F5 Silverline DDoS Protection is only a phone call away: 866-329-4253.
As for the IoT threat, blackhats share with each other all the time (they shared Mirai after it attacked Krebs and OVH, and it was used in the Dyn attack). We in the InfoSec community need to take a page from their playbook by banding together to solve this global IoT problem. We have no choice but to do this. It's human nature to understand problems, fix, and therefore evolve.
There will no doubt be hiccups over the next few years while attacks grow in size, scrubbing services grow in bandwidth to accommodate these large attacks, and IoT device manufactures figure out how to deal with their device insecurities. Organizations and consumers have to get used to this evolving threat, like all other major issues before this one.