text:
No new notifications at this time.
Scan Engines
All Pattern Files
Subscribe to Download Center RSS
Home Office Online Store
香港 (中文) (Hong Kong)
भारत गणराज्य (India)
대한민국 (South Korea)
台灣 (Taiwan)
ประเทศไทย (Thailand)
Deutschland, Österreich Schweiz
Suomi (Finland)
Türkiye (Turkey)
Log In to Support
Lost Device Portal
Trend Micro Vault
Customer Licensing Portal
Online Case Tracking
Worry-Free Business Security Services
Remote Manager
Referral Affiliate
Learn of upcoming events
File Storage Security
Industrial Network Security
Mobile Network Security
User Protection
Industrial Endpoint
Endpoint & Gateway Suites
Detection & Response
Zero Trust Risk Insights
Global Threat Intelligence
Connected Threat Defense
All Products & Trials
Small & Midsize Business Security
For Cloud
Cloud Operational Excellence
SaaS Applications
Connected Consumer
5G Security for Enterprises
End-of-Support Systems
Detection and Response
Why Trend Micro
The Trend Micro Difference
Research, News and Perspectives
Security Reports
Zero Day Initiative (ZDI)
Annual Predictions
The Deep Web
DevOps Resource Center
CISO Resource Center
Cloud Health Assessment
Enterprise Guides
Managed XDR
Virus & Threat Help
Renewals & Registration
Free Cleanup Tools
Find a Support Partner
For Popular Products
Deep Security
Apex One
Worry-Free Renewals
Channel Partner Overview
Alliance Overview
Our Alliance Partners
Partner Successes
Internet Safety and Cybersecurity Education
Cybercrime & Digital Threats
Linux Threat Report 2021 1H: Linux Threats in the Cloud and Security Recommendations
Linux powers many cloud infrastructures today. However, it is not immune to threats and risks. We discuss several pressing security issues including malware and vulnerabilities that compromise Linux systems in the first half of 2021.
By Magno Logan and Pawan Kinger
The ubiquity of Linux
The Linux threat landscape
OWASP top 10 and beyond
How to secure Linux servers
Conclusion and Trend Micro solutions
Many regard Linux as a unique operating system because of its stability, flexibility, and open-source nature. Its stellar reputation is backed by its many notable achievements in recent years. For example, 100% of the world's top 500 supercomputers run on Linux, and 50.5% of the top 1,000 websites in the world use it, according to a survey by W3Techs. Our previous article shared how Linux dominates the cloud, running on 90% of public cloud workloads in 2017. Linux is also uniquely supported for top price/performance cloud workloads using Advanced RISC Machines (ARM) processors, such as the AWS Graviton. And aside from running on 96.3% of the top 1 million web servers globally, Linux also powers smartwatches, high-speed trains, and even the world's major space programs.
Linux is powerful, universal, and dependable, but it is not devoid of flaws; like other operating systems, it is still susceptible to attacks. This article discusses the state of Linux security in the first half of 2021 and provides an in-depth look at the Linux threat landscape. We discuss several pressing security issues that affect Linux, which include the types of malware that exist in the Linux world, the vulnerabilities that affect the Linux operating system, and the various software stacks that run on it. This article will also cover web app security risks and how attackers abuse them to compromise Linux systems running in the cloud.
The data presented in this article comes from the Trend MicroTMSmart Protection Network™ (SPN), or the data lake for all detections across all Trend Micro's products. In addition, we also collected data from honeypots, sensors, anonymized telemetry, and other backend services. This data stands for the real-world prevalence of malware and vulnerability exploitation across enterprises — from small organizations to large corporations across various verticals.
Before we delve into the specific threats that affect Linux systems, we would like to first share the prevalence of the various flavors or distributions of Linux and Unix from across our enterprise customer base. After all, Linux is undeniably ubiquitous, especially in the cloud, where it powers most infrastructures. Linux users comprise the majority of the Trend Micro Cloud One™ enterprise customer base at 61%, while Windows users are at 39%.
Figure 1. The percentage of Linux and Windows workloads protected by Trend Micro Cloud One
Figure 2. The percentage of various Linux distributions across workloads protected by Trend Micro Cloud One
Amongst the Linux/Unix-based deployments, Red Hat takes up a big chunk of enterprise users, followed by AWS Linux and Ubuntu. Enterprises rely on well-maintained sources of Linux deployments for their workloads, and this chart reflects the support provided by vendors. For example, Red Hat Enterprise Linux (RHEL) and Amazon Linux AMI are usually the first to offer patches to their supported versions. While this data distribution should not surprise most readers, it's worth noting that about 2.6% of these are IBM AIX and Oracle Solaris. AIX and Oracle Solaris are known for their stability and robustness; enterprises run critical workloads on these platforms.
Exposed Linux systems
Because Linux has a large footprint, there's bound to be a percentage of its administrators who would unwittingly expose Linux systems and, ultimately, critical data. Data from Censys.io, a search engine for internet devices, shows almost 14 million results when searching for exposed devices connected to the internet and running any sort of Linux operating system on July 6, 2021:
Figure 3. The total number of exposed Linux servers detected by Censys.io as of July 6, 2021 (Query: operating system.product=Linux)
A look at port 22 in Shodan, a port commonly used for Secure Shell Protocol (SSH) for Linux-based machines, revealed even more prominent results: almost 19 million devices connected to the internet have this port exposed:
Figure 4. The total number of servers with port 22 exposed as detected by Shodan as of July 27, 2021 (Query: port 22)
It is imperative for organizations not to leave such ports exposed to avoid attackers from gaining a foothold into Linux systems. In the past, we have observed attackers abusing these ports to launch malicious activities; last year, we published an article that described how attackers used botnets to perform brute-force attacks after scanning for open SSH and Telnet ports.
The Linux threat landscape: What are the top Linux threats?
With the goal of spreading awareness about Linux-based malware threats, we utilized Trend Micro SPN data to show how rampant malware families are in Linux systems. Because we were looking at millions of detections, we decided to examine the data through different lenses. In an article we published earlier this year, we categorized the data based on various malware types: ransomware, cryptocurrency miners, rootkits, malicious scripts, and web shells.
This time around, we present SPN data showcasing the prevalence of Linux as an operating system and the pervasiveness of the platform's various threats and vulnerabilities. Almost 40% of the detections came from the US, followed by Thailand and Singapore with 19% and 14%, respectively. It's also important to note that detections arose from systems running end-of-life versions of Linux distributions. The majority (almost 44%) of the detections were from CentOS versions 7.4 to 7.9, followed by CloudLinux Server, which had more than 40% of the detections, and Ubuntu with almost 7%.
Linux malware: Threats by the numbers
From over 13 million events that we identified and flagged from our sensors, we identified the top 10 malware families which we then consolidated by their threat types. Table 1 lists the top threat types affecting Linux servers from January 1, 2021 to June 30, 2021, based on data from Trend MicroTM Deep SecurityTM and Trend Micro Cloud OneTM - Workload Security. Note that some Windows-based malware families made the list, which means that Linux servers act as a storage or command-and-control (C&C) server for Windows malware.
Figure 5. We categorized the Top 10 malware families we detected according to their threat types. These are the top threat types found in Linux systems in the first half of 2021.
An interesting observation here is the high prevalence of coinminers, of which Coinminer.Linux.MALXMR.SMDSL64 and Coinminer.Linux.MALXMR.PUWELQ are the most prevalent families; and web shells, of which the most detected families are Backdoor.PHP.WEBSHELL.SBJKRW, Backdoor.PHP.WEBSHELL.SMMR and Backdoor.PHP.WEBSHELL.SMIC. Given that the cloud holds a seemingly endless amount of computing power, hackers have a clear motive in stealing computing resources to run their cryptocurrency mining activities. It's also important to note that cryptocurrency miners have been plaguing container environments in recent years. We also saw ransomware as a prevalent Linux threat, and DoppelPaymer, a modern ransomware family that utilized double extortion tactics, is the most prevalent ransomware family based on our data. In our monitoring of the ransomware landscape, we have also recently seen other ransomware variants that were targeting Linux systems such as RansomExx, DarkRadiation, and even DarkSide.
Our SPN data shows the top four Linux distributions where we found the above mentioned top malware families:
Figure 6. The top four Linux distributions where the top threat types in Linux systems were found in the first half of 2021
Vulnerabilities in Linux systems
Our previous article discussed various vulnerabilities affecting the Linux platform and the software stack and applications that run on it. To further define the state of Linux security for the first half of 2021, we dissected IPS (Intrusion Prevention System) hits from Trend Micro Cloud One - Workload Security and sifted through over 50 million events, ignored false positives, eliminated test data, and layered data with available threat intel to draw some conclusions. It should be noted that there can be a degree of error here due to the nature of the data and internet activity.
These 50 million+ events that we dissected represent:
More than 100,000 unique Linux hosts reported the events.The top 20 Linux and Unix flavors that reported events into this dataset by volume.
Figure 7. Volume of IPS events sorted by operating system in 1H 2021
Here, we look at the triggers for vulnerabilities known to be actively exploited or have a known proof of concept. Based on Trend Micro Cloud One data, the following list features the top 15 Common Vulnerabilities and Exposures (CVEs) that are being actively exploited in the wild or have existing proofs of concept. It should be noted that Trend Micro Cloud One provides protection against the top 15 vulnerabilities listed below via its virtual patching, vulnerability shielding, and exploit blocking features.
Top Vulnerabilities With Known Exploits or Proofs of Concept CVE Severity
Apache Struts2 remote code execution (RCE) vulnerability CVE-2017-5638 Critical
Apache Struts 2 REST plugin XStream RCE vulnerability CVE-2017-9805 High
Drupal Core RCE vulnerability CVE-2018-7600 Critical
Oracle WebLogic server RCE vulnerabilities CVE-2020-14750 Critical
WordPress file manager plugin RCE vulnerability CVE-2020-25213 Critical
vBulletin 'subwidgetConfig' unauthenticated RCE vulnerability CVE-2020-17496 Critical
SaltStack salt authorization weakness vulnerability CVE-2020-11651 Critical
Apache Struts OGNL expression RCE vulnerability CVE-2017-12611 Critical
Eclipse Jetty chunk length parsing integer overflow vulnerability CVE-2017-7657 Critical
Alibaba Nacos AuthFilter authentication bypass vulnerability CVE-2021-29441 Critical
Atlassian Jira information disclosure vulnerability CVE-2020-14179 Medium
Nginx crafted URI string handling access restriction bypass vulnerability CVE-2013-4547 N/A
Apache Struts 2 RCE vulnerability CVE-2019-0230 Critical
Apache Struts OGNL expression RCE vulnerability CVE-2018-11776 High
Liferay portal untrusted deserialization vulnerability CVE-2020-7961 Critical
Table 1. The top 15 vulnerabilities with known exploits or proofs of concept
Table 1 shows the top vulnerabilities by volume of triggers. In total, we see about 200 different vulnerabilities triggered across the board. A noteworthy point here is that even though there are an estimated 20,000 vulnerabilities reported in 2020 alone — many of which affect Linux or the Linux application stack — only 200 of those vulnerabilities have publicly known exploits and were observed. Striving to prioritize the patching of these vulnerabilities should be an approach baked into any organization's security practices. Trend Micro uses an approach that focuses on weaponized vulnerabilities to ensure that the most likely to be exploited get protected first.
The applications affected by these 200 vulnerabilities have a few clear targets, including WordPress or Apache Struts, but services such as Atlassian JIRA, dnsmasq, and Alibaba Nacos aren't the first ones a security expert would automatically assume to be in attackers' crosshairs. Based on our data, the top triggers are spread across the following applications:
Figure 8. The applications with the most number of triggers from the abovementioned top vulnerabilities with known exploits or proofs of concept
Most of the applications and workloads exposed to the internet run web applications. Web application attacks happen to be the most common attack vector in our telemetry. If launched successfully, web app attacks can allow hackers to execute arbitrary scripts, compromise secrets, or modify, extract, and even destroy data. In this section, we start by comparing the spread of web and non-web attacks on Linux systems. As shown in Figure 8, 76% of the attacks are web-based, while only 24% of the attacks are non-web in nature.
Figure 9. The percentage of web-based and non-web-based attacks in the first half of 2021
It's worth dissecting these web-based attacks under the Open Web Application Security Project (OWASP) lens. But since the OWASP Top 10 ranks the ten most critical web app threats and risks, what about other web-based attacks and their prevalence? Let's look at the OWASP Top 10 and beyond it.
Before we go further, note that the succeeding data stands for volume-based analysis of Linux environments. Therefore, this data does not undermine the importance of the OWASP Top 10. Instead, this data highlights activity more than importance. For example, brute force attacks are so rampant that they dwarf any other OWASP Top 10 security risk. Obviously, an attacker would need to keep trying in a brute force attack, hence the volume of events.
Figure 10. The percentage of OWASP Top 10 attacks and non-OWASP attacks in the first half of 2021
With Linux being the first choice for web servers and applications, the OWASP Top 10 has become more relevant to the operating system. Since 76.9% of the top 10 million web servers globally are Unix-based, the OWASP web app risks act as an important filter when looking at vulnerabilities affecting Linux/Unix systems.
Looking only at the OWASP 10 security risks, we see that injection flaws and cross-scripting (XSS) attacks are as high as ever. What sticks out in this chart is the high number of insecure deserialization vulnerabilities. This is partly due to the ubiquity of Java and deserialization vulnerabilities in it. Other than that, we have also observed Liferay Portal, Ruby on Rails, and Red Hat JBoss deserialization vulnerabilities. Attackers also try to use vulnerabilities where there is broken authentication to gain unauthorized access to systems. The number of command Injection hits also came as a surprise as they are higher than what we would have expected.
Figure 11. The top OWASP security risks by volume
Layering brute-force, directory traversal, and request smuggling attacks, the three most prevalent non-OWASP security risks based on our data, on the chart in Figure 11 shows the state of exploitation of these security risks based on the volume of activity:
Figure 12. Volume of activity comparison between top OWASP security risks and non-OWASP security risks
What are open-source security (OSS) and software supply chain attacks (SSCA)?
When talking about application security, we need to be aware that most applications rely on libraries and dependencies that are, for the most part, open-source software. These libraries are usually incorporated during the development lifecycle and rarely get updated or checked against known vulnerabilities.
Another pertinent aspect that must be secured is software supply chains. Attackers can compromise software components of third-party suppliers by inserting malicious code inconspicuously. This code will then connect to a C&C server and download and deploy backdoors and other malicious payloads within the system. This can lead to RCE and unhampered access to an enterprise's system and computing resources. Supply chain attacks can also come from misconfigurations, which we discussed in a report published earlier this year. According to a report by Snyk, Trend Micro's open source security partner, misconfiguration is the second top incident type in cloud native environments. More than 56% of their survey respondents experienced a misconfiguration or known unpatched vulnerability incident involving their cloud native applications.
On May 12, 2021, US President Joe Biden signed an executive order (EO) to improve US cybersecurity and protect their federal government networks. Section 4 of the EO detailed the enhancement of the security for the software supply chain. The goal is to improve software security by establishing a baseline of secure coding standards for applications sold to the US government, such as requiring organizations to maintain greater visibility into their software and making security data available to the public.
Figure 13. Comparison between a traditional supply chain and a software supply chain
While the software supply chain is similar to the traditional supply chain regarding the journey it takes to reach its end goal, the software supply chain is often more complex, requiring more layers of checking and security.
In October 2020, we published a whitepaper, "Supply Chain Attacks in the Age of Cloud Computing: Risks, Mitigations, and the Importance of Securing Back Ends," which discusses multiple security gaps and risks related to the world of DevOps, where cloud services play a major role in digital and business transformation.
In Gartner's 2019 report, "Technology Insight for Software Composition Analysis," concerns about security vulnerabilities such as the use of untrusted third-party components and the lack of vendor accountability tops the most significant challenges with operations support systems (OSS).
The term software composition analysis (SCA) is relatively new to the world of cybersecurity. But similar approaches have been used since the early 2000s to indicate security verifications on open-source components. SCA, an evolution of early verification systems, identifies and lists all the parts and versions present in the code. It also includes the checking of each specific service and looking for outdated or vulnerable libraries that may impose security risks to the application. These tools can also check for legal issues regarding the use of open-source software with different licensing terms and conditions.
Containers are a big part of the Linux ecosystem — and it is also largely targeted by attackers. In an article that we penned in 2019, we delved deep into the various possible threats and risks to container environments at various stages in the development pipeline, including malware embedded in container images, hijacked image registries, and Docker and Kubernetes API abuse. The following table shows the vulnerabilities for the 15 most popular official Docker images on Docker Hub and the number and level of vulnerabilities for each that we found using our image scanning solution, Trend Micro Cloud OneTM – Container Security, on June 9, 2021.
Image Total Vulnerabilities Critical High Medium Low Others
python 482 32 129 246 38 37
node 470 32 126 238 37 37
wordpress 402 26 109 198 40 29
golang 288 10 87 157 13 21
nginx 118 18 41 44 7 8
postgres 86 8 32 35 6 5
influxdb 85 8 33 34 6 4
httpd 84 7 33 32 6 6
mysql 76 9 28 31 5 3
debian 66 7 26 25 5 3
memcached 65 7 25 25 5 3
redis 65 7 25 25 5 3
mongo 47 3 18 23 3 0
centos 68 7 36 23 2 0
rabbitmq 30 1 7 20 2 0
Table 2. The 15 most popular Docker images and the number and level of vulnerabilities for each
In the foreseeable future, enterprises and organizations will continue to depend on Linux to power their digital infrastructure, including their mainframes, servers, web development platforms, and mobile applications. And malicious actors will look for every opportunity to compromise the platform for financial gain — whether by developing and launching malware, exploiting vulnerabilities, or taking advantage of misconfigurations. Keeping Linux, the bedrock of critical systems and services, protected against threats can be achieved using a multilayered security approach: maximizing built-in tools and trusted commercial or free third-party security control. This section will cover these security recommendations and best practices.
How to secure Linux using native Linux tools and configurations
Linux Tool or Configuration Description
iptables This Linux rule-based firewall utility can be used to set up, maintain, and inspect the tables of IP packet filter rules in the Linux kernel. This means that iptables can effectively allow or block traffic by looking for a rule to which a connection request is matched. This tool usually comes installed by default on most Unix or Unix-based operating systems.
seccomp The secure computing (seccomp) mode is a popular Linux kernel security feature that restricts access to system calls (syscalls) by processes. This means that seccomp can filter syscalls and allow or limit which syscalls can be executed in the system.
AppArmor AppArmor is a mandatory access control (MAC) security system for Linux applications. It uses program profiles to restrict the capabilities of individual programs.
SELinux Security-Enhanced Linux (SELinux) Linux is an application of a hardened MAC designed to meet various security requirements. It applies security labels to objects and evaluates all security-relevant interactions via the security policy. When a subject (such as an application or a process) requests to access an object (such as a file), SELinux will check the permission assigned for subjects and objects via an access vector cache (AVC).
grsecurity This is an extensive set of security enhancements for the Linux kernel that uses role-based access control (RBAC), memory corruption-based exploit prevention, and a host of other system hardening features that defend against a wide range of security threats. These patches are used to check remote connections from untrusted locations, such as web servers and systems offering shell access to their users.
PaX PaX adds intrusion prevention mechanisms to the Linux kernel, which reduce the risks posed by exploitable memory corruption bugs. A few key features of PaX are enforcing non-executable pages, preventing kernel code reuse attacks, sanitizing freed memory, adding address space layout randomization (ASLR), and preventing potential misuse of userland pointers in the kernel. PaX also makes novel use of GCC plugins to constify applicable types, defend against some Spectre variants, and harden the kernel's memory allocator.
Table 3. Native Linux tools or configurations
For more information about Linux kernel security features, Linux provides a helpful article that gives a high-level overview of Linux security extensions.
How to secure Linux using third-party tools and controls
The following are notable security controls your multilayered security solutions should have in order to keep Linux threats at bay:
Antimalware is the first line of defense and basic hygiene on any operating system. Antimalware would pick and prevent known scripts (remember that web shells are scripts) and malware from running in the system. In addition, advanced controls in antimalware can detect malicious activity through behavior monitoring or system activity. It's important to note that not all anti-malware solutions have a focus on Linux-based malware, hence, it's important to carefully consider the anti-malware for Linux.
Intrusion prevention/detection system (IPS/IDS)
Deep packet inspection products inspect network traffic to detect or prevent possible intrusion. These products can be an agent-based IPS running on the workload or a network appliance, with controls that can prevent vulnerabilities from being exploited. In addition to vulnerability protection, these systems also provide rules or filters that can be useful in detecting or preventing attackers' lateral movement (east-west traffic) and detecting command and control connections from previously infected workloads.
Some IPS systems can even allow their customers to write their own rules to contain outbreak situations.
Often known as application control and leaning towards the zero-trust model, execution control is a broader all-encompassing term for a control that can limit which software and scripts can run on a computer. Simply blocking executables leaves a huge blind spot, but defining policies to allow or disallow types of script files (e.g., PHP, Bash, Perl, Python, etc.) and even specific scripts, provides more control and flexibility. This control is most effective if coupled with feedback by a known "good" feed source.
Configuration assessment
A particularly crucial step to ensure that Linux systems are configured properly is to run regular scans to check for any misconfigurations. This includes ensuring that the operating system and its dependencies, and all the applications running on it are properly configured. They are two vastly different things. Scanning for operating system configuration issues does not certify the system is in a "safe" state. The application stack can open up severe problems if not correctly configured.
Vulnerability assessment and patching
Vulnerability assessment tools provide a periodic snapshot or continuous monitoring of missing patches. They help prioritize the most critical patches based on the severity of the vulnerabilities discovered. If the change management process doesn't allow immediate patching, an IPS must be deployed to deploy the available virtual patches.
It can take months before a breach can be detected. Given the recent shifts in malware and the threat landscape, it takes more than traditional controls to protect users and enterprises against sophisticated cyberattacks. Continuous activity monitoring through a managed service or by a security operations center (SOC) team enables streamlined detection of any suspicious network activity.
Managed detection and response (MDR) or extended detection and response (XDR) services can help detect malicious activities, with threat intelligence from various sources, helping catch threats faster and improve investigations, analysis, and response times.
How to secure containers
When it comes to container security, there are three questions that enterprises and organizations need to ask themselves:
How secure are the container images?
This comes down to ensuring one's containers are up-to-date and free of any vulnerability that cybercriminals can exploit. Organizations should secure the base image and ensure that the applications running in their containers have been scanned and verified. Although some open-source tools are available for this purpose, not all can detect vulnerabilities beyond operating system packages. For this, organizations can use a solution that also covers application vulnerabilities.
Can the container images be trusted?
Are the containers running in the system built from the images in one's registries? How can you ensure that? Using image-signing tools such as The Update Framework or Notary users can sign their images and maintain a system of trust for the content of their containers. We recently published an article that expounds on this topic.
Are the container images running with proper privileges?
The principle of least privilege applies here. Enterprises should only run containers with users having the minimal operating system privileges that are necessary to carry out their tasks. We previously expounded on why it's a bad idea to run privileged containers in Docker, or containers with all the root capabilities of a host machine.
We created a comprehensive guide on how containers can be better protected by examining potential threats at each stage of the development pipeline.
Following these basic Docker best practices, provided by Snyk, will help enterprises keep their containers secure:
Use lightweight base images such as Alpine Linux
Apply the principle of least privilege; don't run containers as root or in privileged mode
Sign and verify container images to protect them against supply chain attacks
Actively scan and fix vulnerabilities in container dependencies
Don't hardcode secrets or credentials on container images
How to secure code via application security and testing
Also referred to as code security, application security is the layer over which organizations and enterprises have the most control. The code of an organization's applications is the heart of its critical systems. Together with the applications' respective databases, these codes are usually exposed to the internet — hence, attackers will focus on compromising them if all other components are appropriately secured. So how can you ensure that your apps are securely coded when you have tens, hundreds, or maybe thousands of developers writing and deploying code every day to their production environment?
Organizations must ensure that all communications are being made using TLS encryption. This should be applied even among internal services like load balancers, application servers, and databases.
Organizations can significantly reduce the attack surface of their systems just by limiting and monitoring exposed services, ports, and API endpoints. Here, it is essential to also think about container base images and the systems on which its clusters are running.
There are various code security verifications to add to your pipeline to ensure that one's code is secured:
Static application security analysis (SAST)
This is also called "security code review" or "code auditing," and is still one of the best and quickest ways to detect security issues in one's code. Regardless of the language being used, enterprises should have at least one static analysis tool embedded into the pipeline. This tool will check for unsafe coding practices every time developers commit new code into the application. In addition, the OWASP Foundation has a list of open-source and commercial tools designed to analyze source code or compiled code to detect security flaws.
Dynamic application security analysis (DAST)
Although dynamic analysis can only be done when there is a running application to test against, it is also a good idea to perform automated scans and checks to test for common application attacks such as SQL injection, XSS attacks, and cross-site request forgery (CSRF) attacks. These tools will also test your application, container, and cluster resilience when faced with a series of unexpected load and malformed requests. In addition, OWASP has a dynamic analysis tool that can also be automated and embedded into the pipeline called OWASP Zed Attack Proxy (ZAP).
Software composition analysis (SCA)
Between 70% and 90% of all cloud-native applications are made of libraries or third-party dependencies. These are chunks of code — which could have been written by someone outside one's organization — embedded and running inside an organization's production systems. These codes are generally not checked during the static analysis phase. However, tools like the OWASP dependency-check can be used to check for outdated or vulnerable libraries in one's code. Trend Micro Cloud One - Open Source Security by Snyk provides cloud-native application security via continuous monitoring and by identifying open-source code vulnerabilities and license risks in application components.
Runtime Application Self-Protection (RASP)
RASP is a strong application security tool that kicks in when an application starts, providing real-time or immediate protection against threats and attacks, such as zero-day exploits, XSS attacks, and email and messaging app attacks. RASP not only detects attacks, but it also analyzes the attacks' behavior and the context of the behavior. This means that it can correctly pinpoint legitimate requests from attacks, minimizing false positives and gray alerts. Trend Micro Cloud OneTM – Application Security offers RASP, which allows developers to design and deploy secure applications and protect against sophisticated attacks quickly and efficiently.
Patching and ensuring that proper configurations are set are separate tracking items. The responsibility for these rests with the application owners and their application security teams. DAST and penetration testing are usually helpful in identifying vulnerabilities and configuration issues. Enterprises can deploy systems that can prevent such from happening or perform virtual patching, such as a web application firewall (WAF) or an IPS.
Linux allows organizations to make the most of their cloud-based environments and power their digital transformation strategies. And with its popularity and wide-ranging user base, it's important to learn about the threats affecting Linux to properly defend systems — especially the pervasive ones. The data and real-world attack examples highlighted in this article are expected to provide the reader with a clearer picture of the threats looming around Linux systems. Given how deeply Linux is rooted in daily life, especially as an integral part of cloud infrastructure and the internet of things (IoT), the security of Linux and Linux workloads must be treated at par with that of Windows and other operating systems.
Users and organizations should always apply security best practices, which include utilizing the security by design approach, deploying multilayered virtual patching or vulnerability shielding, employing the principle of least privilege, and adhering to the shared responsibility model.
Enterprises can also benefit from multilayered security solutions such as the Trend MicroTM Cloud OneTM, a security services platform for cloud builders. It provides automated protection for cloud migration, cloud-native application development, and cloud operational excellence. It also helps identify and resolve security issues sooner and improves delivery time for DevOps teams. It includes the following:
Cloud One - Workload Security: runtime protection for workloads
Cloud One - Container Security: automated container image and registry scanning
Cloud One - File Storage Security: security for cloud file and object storage services
Cloud One - Network Security: cloud network layer IPS security
Cloud One - Application Security: security for serverless functions, APIs, and applications
Cloud One - Conformity: real-time security for cloud infrastructure — secure, optimize, comply
Cloud One - Open Source Security: Visibility and monitoring of open source vulnerabilities and license risks
Like it? Add this infographic to your site:
1. Click on the box below. 2. Press Ctrl+A to select all. 3. Press Ctrl+C to copy. 4. Paste the code into your page (Ctrl+V).
Image will appear the same size as you see above.
Posted in Cybercrime & Digital Threats, Linux, Malware, Vulnerabilities
Trend Micro Security Predictions for 2022: Toward a New Momentum
Protecting Your Krew: A Security Analysis of kubectl Plug-ins
Minding the Gaps: The State of Vulnerabilities in Cloud Native Applications
Attacks From All Angles: 2021 Midyear Cybersecurity Report
Modern Ransomware's Double Extortion Tactics and How to Protect Enterprises Against Them
Reinforcing NAS Security Against Pivoting Threats
GitHub Action Runners: Analyzing the Environment and Security in Action
Ransomware Spotlight: REvil
Addressing Cloud-Related Threats to the IoT
Virtualization & Cloud
Securing Home Routers
Security for the Next-Generation Retail Supply Chain
The Most Common Cloud Misconfigurations That Could Lead to Security Breaches
Security 101: Protecting Serverless and Container Applications with RASP (Runtime Application Self-Protection)
Ransomware Spotlight: Conti
Alexa and Google Home Devices can be Abused to Phish and Eavesdrop on Users, Research Finds
Mirai Variant Spotted Using Multiple Exploits, Targets Various Routers
A Look Into the Most Noteworthy Home Network Security Threats of 2017
2021 Midyear Cybersecurity Report
In the first half of this year, cybersecurity strongholds were surrounded by cybercriminals waiting to pounce at the sight of even the slightest crack in defenses to ravage valuable assets.
View the report
In 2022, decision-makers will have to contend with threats old and new bearing down on the increasingly interconnected and perimeterless environments that define the postpandemic workplace.
View the 2022 Trend Micro Security Predictions
Copyright © 2022 Trend Micro Incorporated. All rights reserved.


text:
1965 NR 1h 59m DVD
Get ready for an electrifying and chilling film experience that lays bare the intimate longings of a man -- and the woman who has become his captive. Based on the best-selling novel by John Fowles, The Collector tells the story of a quiet London bank clerk (Terence Stamp) whose butterfly-collecting hobby takes a sinister twist when he kidnaps a most unusual specimen -- a beautiful woman (Samantha Eggar).
Terence Stamp, Samantha Eggar, Mona Washbourne, Maurice Dallimore
Thrillers, Classic Thrillers, Psychological Thrillers, Mystery
Suspenseful
English: Dolby Digital Mono

redpajama_set_name: RedPajamaCommonCrawl


text:
Q: Python ml engine predict: How can I make a googleapiclient.discovery.build persistent? I need to make online predictions from a model that is deployed in cloud ml engine. My code in python is similar to the one found in the docs (https://cloud.google.com/ml-engine/docs/tensorflow/online-predict):
service = googleapiclient.discovery.build('ml', 'v1')
name = 'projects/{}/models/{}'.format(project, model)

if version is not None:
    name += '/versions/{}'.format(version)

response = service.projects().predict(
    name=name,
    body={'instances': instances}
    ).execute()

However, I receive the "instances" data from outside the script, I wonder if there is a way I could run this script without making the  "service = googleapiclient.discovery.build('ml', 'v1')" each time before a request, since it takes time.
pd: this is my very first project on gcp. Thank you.

A: Something like this will work. You'll want to initialize your service globally then use that service instance to make your call.
import googleapiclient.discovery
AI_SERVICE = None

def ai_platform_init():
    global AI_SERVICE
    # Set GCP Authentication
    credentials = os.environ.get('GOOGLE_APPLICATION_CREDENTIALS')

    # Path to your credentials
    credentials_path = os.path.join(os.path.dirname(__file__), 'ai-platform-credentials.json')
    if credentials is None and os.path.exists(credentials_path):
        os.environ['GOOGLE_APPLICATION_CREDENTIALS'] = credentials_path

    # Create AI Platform Service
    if os.path.exists(credentials_path):
        AI_SERVICE = googleapiclient.discovery.build('ml', 'v1', cache=MemoryCache())

# Initialize AI Platform on load.
ai_platform_init()

then later on, you can do something like this:
def call_ai_platform():
   response = AI_SERVICE.projects().predict(name=name,
                                            body={'instances': instances}).execute()

Bonus! in case you were curious about the MemoryCache class in the googleapiclient.discovery call, that was borrowed from another SO:
class MemoryCache():
    """A workaround for cache warnings from Google.
    Check out: https://github.com/googleapis/google-api-python-client/issues/325#issuecomment-274349841
    """
    _CACHE = {}

    def get(self, url):
        return MemoryCache._CACHE.get(url)

    def set(self, url, content):
        MemoryCache._CACHE[url] = content

redpajama_set_name: RedPajamaStackExchange


The 49ers have inked who they are hoping will be their quarterback of the future, as the team has come to terms with second round pick rookie quarterback Colin Kaepernick to a four-year contract.
Kaepernick is expected to be cleared for training camp after missing offseason practices following a minor lower leg procedure.
Highly athletic with a cannon arm, Kaepernick may have an early-season role similar to Tim Tebow's last year as a situational running threat. He's officially competing for the starting job, but Alex Smith is the heavy favorite for opening day.
Be the first to comment on "49'ers Sign Second Round Pick QB Kaepernick"


Developing life-long learning is one of the main political and social challenges of Estonia, which would support the rise in quality of life and the development of the economy. Estonia has a small population but has set high goals in terms of quality of life and good economy. Therefore it is necessary for the citizens to be entrepreneurial and have modern knowledge and skills. It is also essential to create access to learning possibilities both in the formal and informal education systems. The main goal of the education system is to help people socialize, find an area of work which corresponds to their interests and abilities, and prepare her for her roles in work, public life and family.
Life-long learning system is much wider than the formal education system. Therefore it is necessary to have a long term strategy , which would help develop a life-long learning system.
During the year 2013 the Ministry of Education and Science with the Estonian Cooperation Assembly and the Estonian Education Forum will develop the Estonian Life-Long Learning Strategy for the years 2014-2020. The goal is to create a strategic framework for the bonded management of the educational field and for the effective use of the European structural funds in order to increase the competitiveness of Estonia during 2014-2020.
The main principles behind the strategy: organisation of Estonian education is effective and of high-quality, Estonian educational system is open to all in equal terms, Estonian educational system is accessible and the Estonian educational system meets the needs of employers and employees.
Based on a three-way agreement concluded by the Estonian Cooperation Assembly, Estonian Education Forum and the Ministry of Education and Research, a draft of the Estonian Education Strategy for the years 2012 to 2020 was drawn up and handed over to the minister in June 2011.
Project Estonian Strategy for Education and Lifelong Learning preceded the the Estonian Life-Long Learning Strategy for the years 2014-2020.
On February 13 th 2014 the Govenment approved the Estonian Lifelong Learning Strategy.


A Springfield woman is in jail, charged with felony assault. Lisa Hunt allegedly choked an 8-month pregnant woman at a center for the homeless.
A Springfield woman is in the Greene County Jail after allegedly assaulting and choking a woman who was eight months pregnant at the time while the two were at a drop-in center for homeless people.
Lisa Kay Hunt, 52, is charged with third-degree felony assault in an incident that occurred the evening of Oct. 7 at the Gathering Tree, 634 W. Wall St.
According to the probable statement, the victim told police that Hunt followed her into the bathroom, grabbed her neck with both hands and squeezed so tightly that the victim "could not breathe and ... thought she was going to go unconscious."
Hunt allegedly said "I'm going to kill you" before letting go of the victim's neck and leaving the bathroom.
Read: Greene County Jail ends in-person visits. Here's why some people are concerned.
An officer observed and took photos of red marks on the victim's neck.
According to the prosecuting attorney's bond recommendation, Hunt and the victim did not know each other.
The prosecutor wrote that Hunt pleaded guilty to felony tampering with a motor vehicle in 2014. She has numerous misdemeanor convictions for property damage, resisting arrest, assault and assault on law enforcement, according to the documents.
"Given her assaultive history and her conduct in this case, it is clear that the defendant represents a continuing danger to both the victim and the rest of the community," the bond recommendation said.
The Giving Tree is an evening drop-in center where homeless people can rest, take a shower, use computers and charge their cellphones. It is located at 634 W. Wall St., and open to homeless people 5-8 p.m. every day.


Anyone else going to Burning of the Snowman in Port Clinton?
I hate facebook but this is their most current source of activities. Google will pop plenty other, non facebook links to info as well.
We booked a room for the weekend at the Commodore Perry Hotel/Bar/Restaurant across the street from the party.
The Commodore has a great bar and food.
Also keeps me from paying for the local gestapos cab service.
Weve been to this party when it was at its previous location but was a PIA due to being in the middle of no where.
The party started as an idea from some Port Clinton locals, to celebrate the end of winter.
Being the last weekend in February, we are almost there and Im ready to celebrate!


If a picture says a thousand words, then the best travel blogs shouldn't need to.
With Trottin trips, you get one photo and 350 characters each day... that's it. We make the best travel blogs easy for you to write, and your friends to follow.
Custom travel postcards from your camera to the mailboxes of friends and family worldwide with our travel postcard creator.
Send postcards from any day of your Trottin travel blog, or upload a photo and write a custom message from scratch. We deliver worldwide, so you can share your adventures from anywhere in the world.
You've done the miles, now share them with the world with our travel map maker.
Connect and collaborate with travel buddies from home and on the road.
Every Trottin traveler gets their own profile page with maps, travel stats, and recent trips and trots.
Add other travelers from around the world to your list of travel companions.
Work together with your travel companions to keep your trip blog up to date by adding them to your trip as 'collaborators'.
Tag your travel companions each day of the trip.


text:
Die Wirtschaft Äthiopiens ist bislang landwirtschaftlich geprägt und ihr wichtigstes Exportgut ist zurzeit Kaffee.

Das Land ist mit einem Pro-Kopf-Einkommen von etwa 542 US-Dollar (2013) eines der ärmsten der Welt; hingegen liegt der Durchschnittswert für Afrika südlich der Sahara bei über 600 US-Dollar. Etwa ein Viertel hat ein Einkommen von weniger als einem US-Dollar am Tag, vier Fünftel haben weniger als zwei US-Dollar täglich zur Verfügung. Etwa die Hälfte der Bevölkerung (44–50 %) lebt unterhalb der Armutsgrenze.

Nach der Revolution von 1974 wurde eine sozialistische Zentralverwaltungswirtschaft eingeführt. Eine umfassende Staatskontrolle wurde aufgebaut und ein großer Teil der Wirtschaft wurde in die öffentliche Hand transferiert. Seit Mitte 1991 entwickelt sie sich wieder zu einem dezentralen, mehr marktwirtschaftlich geprägten System.

Äthiopien wies im Jahr 2015 mit 10,2 % das höchste Wirtschaftswachstum der Welt auf. Gleichzeitig war es in diesem Jahr das einzige Land, das ein zweistelliges Wirtschaftswachstum vorweisen konnte.

Im Index für wirtschaftliche Freiheit belegte das Land 2017 Platz 142 von 180 Ländern.

Allgemeine Betrachtungen

Für afrikanische Verhältnisse ist Äthiopien ein potentiell reiches Land, ausgestattet mit fruchtbarem Boden und in weiten Gebieten mit ausreichend Regenfall. Die Landwirte bauen eine Reihe verschiedener Getreidesorten an. An den Südhängen kann Kaffee gut gedeihen. Hirten können ihr Vieh, Schafe und Ziegen, in großen Teilen des Landes weiden lassen. Zudem verfügt es über verschiedene wertvolle mineralische Rohstoffe, darunter Gold und Platin.

Rahmenbedingungen

Die größte Gewerkschaft des Landes ist die eine Einheitsgewerkschaft, die Konföderation Äthiopischer Gewerkschaften.

Wirtschaftsgeschichte

Nachdem Griechen, Armenier und Araber die Tür ins Land aufgestoßen hatten, übernahmen diese die Schnittstelle zwischen dem Land und dem Rest der Welt. Die Araber siedelten auch innerhalb der Landesgrenzen und dominierten letztendlich die geschäftlichen Aktivitäten. Die Italiener, die Äthiopien seit den 1930er Jahren besetzten, hinterließen bei ihrem Rückzug eine Wirtschaftsstruktur, die sich kaum von der Struktur in den Jahrhunderten zuvor unterschied. Auch in den beiden nächsten Dekaden tat sich diesbezüglich wenig. Die Regierung konzentrierte sich lediglich auf den Ausbau des Behördenapparates und der Nebendienstleistungen, bis Anfang der 1950er Jahre Kaiser Haile Selassie I. die Forderungen nach einem Wandel von einer Subsistenzwirtschaft hin zu einer agro-industriellen Wirtschaft aufgriff. Im Fiskaljahr 1954/55 richtete die Regierung den Nationalen Wirtschaftsrat ein, um ihre Entwicklungspläne koordinieren zu können. Anfang der 1970er Jahre konnte die Wirtschaft ein gewisses Wachstum verzeichnen und zudem wurde begonnen, die Wirtschaft mit Branchen wie der verarbeitenden Industrie und Dienstleistungen zu diversifizieren. Diese Änderungen konnten das Leben der meisten Äthiopier jedoch nicht verbessern.

Wirtschaftssektoren

Den wichtigsten Wirtschaftszweig stellt die Landwirtschaft dar. Rund 43,6 % (2003/04; 40,1 % im Jahr 2005) des Bruttoinlandsprodukts und vier Fünftel des Exports steuert diese bei. Hinzu kommt die Bedeutung für den Arbeitsmarkt, denn vier Fünftel der Äthiopier sind in der Landwirtschaft beschäftigt. Des Weiteren tragen 1,6 % die Sektoren Wasser und Energie und 0,6 % der Bergbau bei. Der Industriesektor steuerte im gleichen Zeitraum 9,6 % zum BIP bei. Den größten Anteil hält der Dienstleistungssektor mit 47,2 % (2005) der Wertschöpfung. Äthiopien ist damit und mit dem geringen Pro-Kopf-Einkommen eines der am wenigsten entwickelten Entwicklungsländer, ein sogenanntes Least Developed Country.

Landwirtschaft

Das wichtigste Agrarprodukt ist der Kaffee, welcher mit 65–75 % zu den Deviseneinnahmen beiträgt.

Vom Kaffee hängt die Wirtschaft des Landes massiv ab, so wurden 1999 allein 267 Millionen US-Dollar durch den Export von 105.000 Tonnen der Bohne eingenommen. Schätzungen zufolge liegt der Beitrag des Kaffees zum BIP bei etwa 10 %. Der im Jahr 2005 von Äthiopien beantragte Markenschutz für die drei Anbauregionen Yirgacheffe, Harrar und Sidamo konnte nach einem Rechtsstreit mit der Kaffeehauskette Starbucks im Jahre 2007 per Vergleich beigelegt werden, nachdem Starbucks mit der Sorte Shirkina Sun-Dried Sidamo außerordentliche Profite erzielt hatte, ohne die Produzenten daran zu beteiligen.

Weitere agrarische Exportgüter sind lebende Tiere, Felle, Hülsenfrüchte, die leichte Droge Khat und Ölsaaten.

Der Agrarsektor ist einer Reihe von Problemen ausgesetzt. Dazu gehören periodische Dürren, Erosion durch Überweidung, Entwaldung, die hohe Bevölkerungsdichte, hohe Steuersätze auf agrarische Erzeugnisse und eine schlechte Infrastruktur, welche den Marktzugang erschwert. Bisher ist die Landwirtschaft die aussichtsreichste Ressource zur Entwicklung des Landes. Das Potenzial einer Selbstversorgung mit Getreide und eines Ausbaus des Exports an Vieh, Getreide, Gemüse und Obst besteht. Es sind rund 4,6 Millionen Menschen auf Lebensmittellieferungen aus dem Ausland angewiesen.

Ein besonders dynamischer Agrar-Bereich stellt die Produktion von Schnittblumen und Jungpflanzen dar. Für 2005 sollten Schätzungen zufolge 32 Firmen (2001: drei Firmen) einen Exporterlös von 20 Millionen US-Dollar erreicht haben. Unter den Firmen befanden sich 15 ausländische Investoren, zu denen auch drei deutsche gehörten, die bereits erste Erfolge einfahren konnten. Der kritische Faktor für die weitere Entwicklung bleibt die Transportkapazität, welche durch die Fluglinien nicht im benötigten Umfang vergrößert werden konnte, obwohl beispielsweise die Ethiopian Airlines ihre Frachtflugzeug-Flotte mittels Leasing erweitert hatte.

Bergbau und Energie

Das Land verfügt über keine bedeutenden Rohstoffvorkommen. Die vorhandenen Rohstofflager werden auch nur in begrenztem Umfang ausgebeutet. So werden Gold, Kalkstein und kleinere Mengen an Tantal abgebaut. Davon ist Gold der bedeutendste Rohstoff, von ihm werden jährlich rund vier Tonnen gefördert. Dies geschieht durch den MIDROC-Konzern des saudisch-äthiopischen Großinvestors Mohammed Hussein Al Amoudi, der 1997 die ehemals staatliche Goldproduktion für 175 Millionen US-Dollar übernommen hatte. Der MIDROC-Konzern beutet auch die Salzvorkommen aus.

Andere nachgewiesene Vorkommen, die sich kommerziell ausbeuten ließen, sind Kaliumcarbonat, Erdgas, Phosphor, Platin, Eisenerz und Erdöl. Die gesicherten Erdöl-Reserven werden für Januar 2002 mit 214.000 Barrel angegeben. In Gambela, einer Region im Westen des Landes, führt das malaysische Unternehmen Petronas Erdölexplorationen durch. Diese standen angeblich kurz vor der Nutzung, waren aber durch die dortige politische Instabilität gefährdet. Das britisch-sudanesische Joint-Venture White Nile erwarb im Juli 2005 Explorationsrechte im selben Gebiet. Petronas erwarb darüber hinaus auch die Nutzungsrechte über vier Jahre (mit Verlängerungsrecht) für die südöstliche Somaliregion. Die National Mining Corporation (NMC) von Scheich Al-Ahmoudi prospektierte im Awash-Becken der Region Afar nach Öl. Seine National Oil Corporation (NOC) hingegen baute seit März 2004 ein umfangreiches Verteilungs- und Tankstellennetz auf. Die geplante Übernahme des bereits vorhandenen Netzes von ExxonMobil durch den Unternehmer gelang nicht, weil der Konzern seine Engagements in Afrika, insgesamt in 14 Ländern, an Total verkaufte.

In West-Wellega, in der Region Oromia, wird künftig das 230 Millionen Tonnen mächtige Kohlevorkommen durch ein chinesisches Unternehmens-Konsortium mittels eines im Bau befindlichen Kohlekraftwerks genutzt. Die gesicherten Gasreserven betragen 24,92 Milliarden m³ (Januar 2002), von denen sich 12,5 Milliarden m³ allein im Kalub-Feld im Ogaden/Region Somali befinden. Die Nutzung dieser Reserve wird jedoch durch die angespannte Sicherheitslage in der Region vereitelt. Zudem steht geothermische Energie zur Verfügung.

Gewerbe und Industrie

Äthiopien verfügt hauptsächlich über Leichtindustrie wie Nahrungsmittel-, Getränke-, Textil- und Lederindustrie. Hinzu kommt Chemische Industrie, Metallverarbeitende Industrie und Zementindustrie. Die industrielle Produktion konzentriert sich auf städtische Zentren. Der Industriesektor ist im Zeitraum 2003/2004 um 6,8 Prozent gewachsen und blieb damit hinter dem Wachstum der Gesamtwirtschaft, welches sich insbesondere auf die gute Ernte in der Landwirtschaft stützen konnte, zurück. Das Finanzministerium gibt die Anteile der Teilsektoren mit 4,8 Prozent für Herstellende Betriebe, drei Prozent für das Baugewerbe und 1,9 Prozent für Klein-Handwerksbetriebe an.

Die Privatisierung und Verwaltung der Staatsbetriebe wurden zusammengelegt. Die so neu strukturierte Privatization and Public Enterprises Supervising Agency (PPESA) kann mit der Privatisierung und Managementverträgen in der Textilindustrie und der größten Gerberei des Landes, als auch mit der Expansion der Zuckerindustrie und ihrer möglichen Privatisierung, Erfolge verbuchen.

Dienstleister

Seit 1999/2000 ist der Anteil aus dem tertiären Sektor am Volkseinkommen der größte. Der Einzelhandel kam dem Finanzministerium zufolge für das Jahr 2002/2003 auf einen Anteil am BIP von 16,2 Prozent, gefolgt von der öffentlichen Verwaltung mit 15,4 Prozent und dem Bankwesen mit einem Beitrag von 7,4 Prozent.

Banken, Versicherungen

Es sind sieben Privatbanken zugelassen, die mittlerweile 21,3 Prozent der Einlagen verbuchen, das entspricht 815 Millionen US-Dollar (Juni 2009). Die staatliche Commercial Bank of Ethiopia (CBE) kommt auf 74,2 Prozent oder 2,8 Milliarden US-Dollar. Das Verhältnis hat sich damit zugunsten der Privatbanken verschoben, denn 1999 lautete dieses noch 1:10. Die Privaten sind engagierter in der Kreditvergabe an mittlere Unternehmen und Kooperativen und haben angefangen, gemeinsam mit internationalen Partnern ins Import/Export-Finanzierungsgeschäft einzusteigen. Hinzu kommen noch zwei kleinere staatliche Banken, die Development Bank of Ethiopia und die Construction and Business Bank.

Das Bankensystem bleibt trotz der steigenden Vergabe von Krediten an Regierung und den Privatsektor unterentwickelt. Seit einem Korruptionsskandal vor einigen Jahren, ausgelöst durch eine große Zahl fauler Kredite der CBE, belasten neue Sicherheitsvorkehrungen besonders die kleineren Privatbanken zu Lasten der Verfügbarkeit von Krediten. Mit gerade 784 Filialen (2003/04), das sind 20 mehr als ein Jahr zuvor, ist die Bankendichte sehr niedrig. Statistisch betrachtet kommen danach auf jede Niederlassung 198.000 Äthiopier, was der zweifache Wert im Vergleich mit dem Durchschnitt von Sub-Sahara-Afrika ist. Ausländische Investitionen sind im Banksektor nicht zugelassen.

Es gibt eine staatliche und neun private Versicherungsgesellschaften mit insgesamt 238 Filialen (2003/04), das sind 17 Niederlassungen mehr als ein Jahr zuvor.

Tourismus

Die politischen Ereignisse im Umfeld der Wahl vom Mai 2005 und die Strukturschwäche des Landes stellen insbesondere für den Tourismussektor ein Problem dar. Daran konnte auch die internationale Aufmerksamkeit durch die Rückkehr des Aksum-Obelisken aus Rom und ein Großkonzert zu Bob Marleys 60. Geburtstag im selben Jahr nichts ändern. Durch die Konferenzen der in Addis Abeba ansässigen Organisationen der Afrikanischen Union und der Wirtschaftskommission für Afrika sind die großen Hotels der Hauptstadt regelmäßig ausgebucht. Deswegen folgte im Januar 2005 der Entschluss, zwei neue Hotels für insgesamt 17 Millionen US-Dollar durch ein kuwaitisch-französisches Konsortium errichten zu lassen.

Mit über 864.000 Touristen stand Äthiopien 2016 auf Platz 21 der meistbesuchten Länder in Afrika. Die Tourismuseinnahmen beliefen sich im selben Jahr auf 280 Mio. US-Dollar. Das Potenzial für Tourismus gilt als groß. Im Land gibt es insgesamt neun UNESCO-Welterbestätten.

Kennzahlen

Alle Werte sind in US-Dollar (Kaufkraftparität) angegeben.

Mitgliedschaft

Äthiopien ist Mitglied folgender wirtschaftsrelevanter Organisationen:

Regional
 Afrikanische Entwicklungsbank (AfDB)
 Afrikanische Union (AU)
 Wirtschaftskommission für Afrika der Vereinten Nationen (UNECA)
 Intergovernmental Authority on Development

Handel
 Gemeinsamer Markt für das Östliche und Südliche Afrika (COMESA)
 Welthandelsorganisation (als Beobachter, derzeit (2005) keine Verhandlungen)
 AKP-Gruppe

Bretton-Woods-Institutionen
 Internationaler Währungsfonds (IWF)
 Weltbank

Siehe auch
 politisches System Äthiopiens
 Wirtschaft Afrikas
 Landwirtschaft in Entwicklungsländern
 Entwicklungstheorie
 Exportorientierung

Quellen
Das Fiskaljahr beginnt in Äthiopien am 8. Juli und endet am 7. Juli. Dadurch sind viele Angaben hinsichtlich des gregorianischen Kalenders jahresübergreifend, andere Angaben beziehen sich wiederum auf das gregorianische Kalenderjahr. Die verwendeten Jahresangaben richten sich, soweit bekannt, nach dem gregorianischen Kalender und nicht nach dem äthiopischen.

Literatur
 Bundesagentur für Außenwirtschaft (Hrsg.): Äthiopien – Wirtschaftsentwicklung 2004/05. Köln 2006.
 OECD (Hrsg.): Development Centre and African Development Bank African Economic Outlook 2005/2006 – Country Studies Ethiopia. Paris 2006.
 Fantu Cheru, Christopher Cramer, Arkebe Oqubay (Hrsg.): The Oxford Handbook of the Ethiopian Economy. Oxford University Press, Oxford 2019, ISBN 978-0-19-881498-6.
 Arkebe Oqubay: Made in Africa: Industrial Policy in Ethiopia. Oxford University Press, Oxford 2015, ISBN 978-0-19-873989-0.
 UNCTAD (Hrsg.): An Investment Guide to Ethiopia – Opportunities and conditions. Genf 2004.

Weblinks

 http://www.ethiopianreporter.com Wirtschaftsnachrichten aus Äthiopien
 Handelskammer Addis Abeba (englisch)

 Äthiopische Nationalbank: Geschichte des Bankwesens in Äthiopien (englisch)
 German Ethiopian Business Association (deutsch/englisch)

redpajama_set_name: RedPajamaWikipedia


IMP International Business Marketing and Innovation Program a Specialised Master in English in Budapest supported by hIMP and leading IMP scholars. Candidates are welcome before the end of October.
The very first Specialised Masters Program in IMP research topics is organised by the Corvinus University of Budapest with the support of the hIMP (Hungarian IMP Research Centre) as well as some well-known IMP-related scholars.
The aim of the IMP International Business Marketing and Innovation Program is to provide a strong theoretical basis as well as a practice-oriented marketing knowledge with international best practices. The language of the courses is English.
The IMP International Business Marketing and Innovation Program gives a broad balanced, state of the art marketing knowledge which corresponds to the challenging business life.
It is broad in the sense that it is at the same time approach-shaping and practical.
It is balanced in the sense that it deals with both global and local marketing issues.
It corresponds to the challenging business life in the sense that it aids students to recognise marketing and organisational problems, to make a multidimensional analysis of them, to find and evaluate alternative solutions, to acquire relevant knowledge of marketing decision making and control.
who are searching for a specific internationally competitive marketing knowledge.
The IMP International Business Marketing and Innovation postgraduate program has an outstanding International Scientific Advisory Board grouping IMP top professors and presided by Professor Håkan Håkansson. For all details please contact the http://kti.linett.hu website.


Band 5 RMNs are required for the Adult Mental Health team working in Chertsey, Surrey.
The contract is for a minimum period of 3 months.
The service is looking for candidates to work with adults in a 24/7 ward environment.
Shifts will include long days, nights and weekends.
You will be assessing and providing care for adult patients with mental health problems in a ward setting.
You will deliver a high quality service to people with mental health problems.
You should be capable of managing your own caseload whilst working in an organised, professional manner to high standards.
Please also bear in mind our £250 referral fee bonus for any nurse you refer who we place in to work on a 3 month contract.
We also offer a £150 sign up bonus for any new nurses that register with our agency.
This will be paid in your first pay packet.
- Nationwide provider of mental health staff to over 40 different NHS trusts offering mental health services and over 200 local authorities.


Lancashire have signed Australia all-rounder and World Cup winner James Faulkner as an overseas player to cover for Peter Siddle.
Pace bowler Siddle has been named in Australia's squad for their Ashes series with England later this year.
Left-arm seamer Faulkner, 24, will join Division Two side Lancashire after appearing for Rajasthan Royals in the Indian Premier League.
And he will remain at Old Trafford until the end of August.
Faulkner, who was named man of the match after taking 3-36 in Australia's World Cup final victory over New Zealand last month, will be available to play in all competitions for Lancashire until he links up with his country's one-day side.
"James is a world-class cricketer and we are absolutely thrilled to bring him to Lancashire," said cricket director Ashley Giles.
"While he is better known at the moment for his performances in white ball cricket, his record in first-class cricket is fantastic."
Faulkner added: "Lancashire is a huge county with a fine history in the game and I am looking forward to joining the squad next month.
"Playing in English conditions will benefit my career and I cannot wait to work with Ashley and the rest of the team."
Siddle is available to play in Lancashire's first four Championship matches of the season, starting with a fixture at Derbyshire on 19-22 April.


« Don't Miss John Mayall at Eureka Springs Blues Weekend 2018!
The festival kicks off on Friday, July 13th at 5:30pm with Short Track competitions at Lake Leatherwood City Park and winds up Sunday morning at 10am with live music from Jeff Fox & The Man on the Wall.
In between you'll see Downhill, Super D, Cross-Country, and the annual Big Town Ride around Eureka Springs. Plus, each day features an after party with live music, food, awards ceremonies, jam sessions, raffles, and more. There are even competitions and distractions for the kids! The full schedule of events is available on the Fat Tire Festival website.
Eureka Springs loves a party and the whole town gets into the Fat Tire Festival. Beyond the excitement at the festival proper, you'll also find plenty of other related events and specials around town.
Eureka Springs Fat Tire Festival is a guaranteed thrill ride of fun and excitement for all!
Learn more at the Fat Tire Festival website. You can also follow the event on Facebook.
5 Ojo Inn Bed & Breakfast would love to host your Eureka Springs Fat Tire Festival stay. Our Eureka Springs B&B is located on a one-and-a-half acre wooded lot just a short stroll from historic downtown. Your stay includes luxury lodging in one of our 9 guestrooms and suites, exemplary Ozark hospitality, and daily gourmet breakfasts. Make the most of your Eureka Springs getaway – Book your stay at 5 Ojo Inn Bed & Breakfast today!


After a spring and summer of outdoor activity, autumn is the ideal time to schedule house washing. An experienced pressure washing service will clean your house's exterior to remove contaminants and keep your home and outdoor spaces looking their best. Dacey's Power Cleaning in Puyallup, WA, explains below some of the most popular services they offer to help you ready everything for winter.
Over the course of a year, the siding of your house can accumulate a lot of dirt, debris, and water stains. A thorough house washing removes the gray tinge and makes your home look brighter, which immediately improves its curb appeal.
Moss, algae, and lichen grow on your roof after rain and feed off the organic materials of your shingles. Worse, they can eat through the shingles and start consuming your roof deck, resulting in wood rot and the need for expensive repairs. Regular gentle pressure washing can remove these organisms and extend the lifespan of your roof.
House washing extends to your outdoor furniture and grill, too. These items spend all summer outdoors and accumulate mud, dust, spider webs, and algae. Before storing them for the winter, clean them quickly with pressure washing. This removes caked on dirt and grime, so your pieces will be ready for use when the weather warms up.
Algae and mold form on the surface of decks and patios, and it results in a slippery, unattractive, greenish stain. Additionally, leaves and other fall debris can break down and stain wooden or concrete surfaces. Keep your deck or patio safer and more beautiful by having them professionally washed every fall.
The driveway accumulates oil stains, tire scuffs, and other eyesores. Since it's one of the first features visitors see, have your driveway pressure washed as needed to remove the stains.
There are many pressure washing jobs you can have done to prepare your house and outdoor spaces for winter. For assistance, contact Dacey's Power Cleaning, the premier house washing service in Pierce County. They'll clean your siding, the roof, the deck surface and patio furniture, even your driveway and make everything gleam. Visit their website to request a quote, and call (253) 335-0539 to schedule a consultation.


text:
{% extends 'layout.html' %}
{% block content %}

    <input autofocus="autofocus" name="filter" placeholder="Type here to filter...">

    {%- for column in facts_columns %}

      {%- for letter in column %}
        {%- if letter is not none  %}

            {{ letter[0][0]|upper }}

              {%- for fact in letter %}

{{ fact }}

              {%- endfor %}

        {%- endif %}
      {%- endfor %}

    {%- endfor %}

{% endblock content %}

redpajama_set_name: RedPajamaGithub


The Flagship Monteverde limited edition fountain pen has been crafted with black carbon fiber and rose gold trim. One of Monteverde's most significant models, the Regatta could be called the Flagship of the brand.
Each Monteverde Regatta limited edition fountain pen comes with a color coordinated black stainless steel #6 nib, a standard universal ink cartridge and an ink converter for bottled inks. The cap has a magnetic closure that also holds fast when posted. The Regatta comes in a Monteverde gift box to complete the presentation.
The Monteverde Regatta Limited Edition Fountain Pens usually ships within 1 business day unless otherwise specified.
Each Monteverde Regatta Limited Edition Fountain Pens we sell is guaranteed to be genuine, authentic and will arrive brand new & unused!
This is an absolutely stunning pen, and is quite a conversation piece. My pen arrived in beautiful condition, except for cracks in the nib housing unit - causing ink to creep up the grip section and onto my fingers when I wrote. I contacted customer service and received a new unit in record time. Incredibly satisfied with my purchase and Pen Chalet's support.
Fancier than my normal choices but its a really good weight, looks amazing and with a stub nib writes really well.
Obviously this is a handsome instrument. The magnet in cap carries the weight. So writing while posted requires hand strength. I'm writing un-posted. With initial rinsing, lays good ink and smooth monteverde nib flow.
I expected a very large pen, which wasn't so. It is medium sized, rose gold plated, heavy but very well balanced uncapped. What this pen lacks in size it definitely makes up in design and balance. The nib, a 1.1 stub, looks gorgeous with the black plating, however, it gave too much feedback when i started writing with it even though I used a lubricating ink and had cleaned the pen prior to use. Since this is a gift to my future husband, I want him to have the best writing experience possible. I swiped the nib over micro mesh until there was no more feedback. It now writes like a dream and i can see myself sneaking it from my fiance and using it myself. This pen is excellence!
The product and service are the best!
This is an absolutely beautiful pen. It is dramatic to say the least. It does have weight, but balances perfectly in your hand. It is really very comfortable to write with and has an excellent flow. I'm so pleased with this pen.
This is the Monteverde Regatta Sport fountain pen. It comes in a green faux leather box. It has the Monteverde logo printed in silver on the top of the box lid, which lifts open. It has a soft white satin interior, the Monteverde logo printed in silver on the underside of the box lid. And of course, we have the Monteverde Regatta Sport fountain pen.
This is the rose gold version and each pen is numbered. There is only a limited number of the pens made. It alternates between the rose gold and carbon fiber black. You can see these sections here, carbon fiber and then in between the rose gold and the black is a black metal knurled section.
The top of the cap, it has the Monteverde mountain logo on a rose gold medallion. Black ring, with a gold colored clip. Plain clip, nothing on it, but it has a curve to it. These are metal sections with the rose gold.
On the backside is the limited edition and the number of the pen, printed. And you can see those alternating sections. It's a little bit thinner here at the bottom of the barrel of the pen, for posting it, and has a black tip or end on the very end of the barrel.
The cap is magnetic, and it's also magnetic when it posts, so it holds on simply and easily and very nice. It's a metal section matching rose gold and comes with a stainless steel nib. The Monteverde logo, a black color, and the feed on the back side of the pen.
It's a cartridge converter style pen. To change the ink you unscrew this section from the barrel of the pen. An ink converter will be included with the pen, and also under the false bottom of the box we have additional ink cartridges for the pen and information about the pen, the warranty, use and care guide, and all of that.
Great pen. Get your Monteverde Regatta Sport limited edition fountain pen at PenChalet.com!
Northern Lights - Medium (Steel nib) SOLD OUT!


Cutting down ifit trees at the new military base site will be a loss for Guam, according to a forester and a political activism group leader.
Although the Navy plans to donate the wood to local carvers, cutting down a mass amount of trees at the new Marine Corps base construction site will be a large loss of valuable vegetation and a culturally significant plant, according to a Department of Agriculture forester and a political activism group leader.
David L. Snyder, public access program coordinator for the Naval Facilities Engineering Command, announced at a Mayor's Council of Guam meeting in April the military's plans to clear 227 ifit and 129 breadfruit trees at the new base site.
Military contractors will clear the ifit and breadfruit trees at the site and donate them to the public, with the help of village mayors, according to Snyder. The trees could be mulched, but the military would like to see them go to residents who could make use of the wood, Snyder said. He said carvers and other cultural artists preferably would take first pick.
"I do truly think there's going to be enough (trees) for everybody," Snyder said.
The ifit is the official territorial tree of Guam and is culturally significant throughout the Marianas, according to Guampedia. When large mature ifit trees were still abundant before World War II, the wood was used to build homes and furniture.
The tree is known for its hard, durable wood, and is a popular material for carvers on Guam. Carving is a tradition on Guam, and continues to hold cultural significance. Today, master carvers and artisans use ifit to create beautiful furniture, and decorative and commemorative items.
Ifit is a slow-growing tree, especially depending on invasive damage, according to Department of Agriculture forester Belmina Soliva. It takes about five years of undisturbed growth for an ifit tree to mature, and its growth can become stunted if people cut its bark, Soliva said.
Although there are enough trees to sustain cultural carving practices, cutting down the trees at the military base site will be a loss for the island, Soliva said.
Permits must be acquired from the Guam Department of Agriculture to cut down ifit trees on government of Guam property, according to Soliva. However, if the tree is on private property it's legal to cut them Soliva said.
The ifit isn't endangered or specifically protected under federal and Guam law, and consequently wasn't directly addressed by Navy construction plans, according to Marine Corps Activity Guam spokesman Maj. Tim Patrick. However, the cultural significance of the tree was taken into consideration as part of the federal consultation process that resulted in the 2011 Programmatic Agreement, Patrick said.
The Navy conducted surveys and plans to salvage wood of ifit, breadfruit and joga trees during the construction process to give the public access to wood materials, in coordination with the Department of Chamorro Affairs, according to Patrick.
Cutting down this mass amount of ifit is insulting, said Victoria-Lola Leon Guerrero, co-chair of Independent Guåhan.
Leon Guerrero said the decision to clear the trees is only part of a larger problem of the military buildup and construction. Military development of local land has moved forward without consent from the people of Guam, despite dissent from the local community at various public hearings, she said.
Maria Hernandez, member of indigenous rights group Prutehi Litekyan and a descendant of Ritidian original landowners, said the decision to cut down native trees is offensive.
"Obviously, this endemic tree means so much to our people, which is why the tree is protected by local law," Hernandez said. "For the Navy to move forward with cutting them down despite this is just another example of how little they care about the concerns of the indigenous people of this island and the cultural resources we hold dear."
Hernandez said the destruction of ifit and breadfruit trees should have been vetted by the local community before even being considered.
"I'm offended that Department of Defense and local media seem to be passing off their decision to give out the trees as a benevolent gesture," she said. "It's offensive."
The military also has a forest enhancement program for the new Marine Corps base, which will take place on military installations in Finegayan and Northwest Field, Patrick said.
In an agreement with the U.S. Fish and Wildlife Service, the military has committed to a one-to-one forest enhancement ratio, he said. For every acre of undeveloped habitat to be disturbed by buildup-related construction, another acre of habitat must be rehabilitated. The military plans to restore a total of 1,000 acres of habitat in Finegayan, Patrick said.
For the first step of the forest enhancement process, the military plans to limit the population of wild deer and pigs, which cause damage to Guam's ecology, by placing extensive fencing in north and south Finegayan to trap and eradicate them. Once the invasive animals are controlled, biologists and natural resource specialists will work to replace harmful, invasive plants with species native to Guam, Patrick said.
And long-term monitoring throughout Finegayan and Northwest Field will continue for 10 to 20 years to ensure growth of the native plants.
In addition to the forest enhancement program, the military also has forest conservation efforts specifically to build habitats for Guam's native species throughout Finegayan and Northwest Field, Patrick said. The military has agreed to set aside four acres of undeveloped habitat for every acre of land impacted for the relocation of Marines to Guam, he said.
Combined with the forest enhancement program, the military will be able to provide a wildlife habitat of 5,234 acres to support the recovery of endangered species in northern Guam, according to Patrick.
To help restore the habitat of the Micronesian kingfisher, which now only survives in captivity, Joint Region Marianas has obligated more than $2 million in funding, Patrick said.
The military plans for additional investments of up to $2 million per year for the next eight years, with the priority of controlling invasive animal species in the area.
Leon Guerrero said, according to the United Nations, if an administering power is going to impact the resources of a non self-governing territory, they must do so with the consent of the people.
The Department of Agriculture's forestry division is working on planting more ifit trees around the island. There are conservation areas in Santa Rita and Yona, but the ifit tree doesn't thrive in these areas because of southern Guam's clay soil. The species grows better in rocky areas in the northern side of the island, Soliva said.
The forestry division is currently cultivating several thousand trees on different project sites and conservation areas, Soliva said.
The forestry division has a program for residents to help plant native trees on their private property, according to Soliva. Department of Agriculture workers first must to do a site visit to see how many plants could be grown on the property.
Anyone interested in growing ifit or other native plants can contact Soliva at belmina.soliva@agriculture.guam.gov or Division of Forestry chief Joseph Mafnas at joseph.mafnas@agriculture.guam.gov.


Please dress as warm as if going skiing or snowshoeing with winter jacket, snow pants, sunglasses, hat and gloves as it is a 15 minute walk from the road to my ice fishing shanty.
Rates include all the gear and bait, lunch, transportations, spare jackets and snow pants, -40 Kamik ice fishing boots (sizes 4-14), and entertaining fishing guide.
Rates do not include one day Alberta Provincial Fishing Licenses or gst tax of 5%.
Rates are subject to change year to year.


Sometimes a band channels little bits of other artists but those artists are quite disparate. The Vultures are initially quite hard to pinpoint because their brand of sym-folk-phonic rock flips from track to track but there's a bit of Morrissey, Nick Cave and David Bowie thrown into the mix.
This follow on EP showcases six tracks and opens with the dirge-like spoken word of "Ballad of the Werewolf". The strings and deep spoken vocal are what make the atmospheric track work best and is what makes me think of Nick Cave. It's a misleader though as the rest of the EP is far more rock driven than folk, but the string arrangements throughout are very folk like. This is why I've now penned a new mini genre – sym-folk-phonic!
"Suicide" is the most straight up rocking track and is Bowie esque in vocal delivery and short, snappy riffs that really pull you in. It was the track that got me interested in the band and it's a stand out here. "Le Denier Jour", French for The Last Day, is a lovely French/English duet and has a gypsy sway to it. "Rumpelstiltskin" moves from gypsy to something more like a deranged circus. It's purposely clunky percussion and tunes mask a twisted string arrangement that's actually quite sultry and alluring. "The Bat And I" reminds me more of Rasputina than anything else as the violins take centre stage on the rocking track. They drive hard and fast and in its two minutes – the track packs a mighty punch. Rounding off the EP is the waltzing "Surrender" where the unrefined Leonard Cohen-like vocals really add a timeless depth as the voice sings slowly over a fast tempo rock track.
I really like The Vultures' sound. It's like gypsy rock but with a fully charged amplifier turned all the way up. The minor issue with the EP is that four of the songs are under two and a half minutes long. They don't outstay their welcome, but they also feel a little underdeveloped too and so I'd like to see more variety in song structure for future releases. They certainly have variety in sound sorted already!


Here's my rundown of the three main shakes featured on the Dr. Oz 3-Day Detox.
For shake details and the shopping list please scroll to the bottom of this post.
Here goes – Day 1, Shake 1. It is clearly way too early in the morning to have my picture taken, but what the heck. It's a breakfast shake, right? This one had a funky green color because I added a little too much spinach, and not quite enough raspberries. The subsequent breakfast shakes were a little more red.
As there weren't any fresh organic raspberries at the market, I had to use to use frozen ones. But it's OK to use frozen organic produce – they're picked at the height of freshness, so they don't lose much in terms of nutritional content. Also, the frozen variety tend to be less expensive.
Frozen organic produce can offer the same benefits as fresh, in a cheaper and more convenient form.
The Bottom Line This shake was very refreshing 1st thing in the morning. I found myself looking forward to it. 4/5 Stars.
I have to admit that I struggled with this shake. The texture of the coconut oil threw me off. I know how important coconut oil is to your health and that it is a vital part of process, but I couldn't take it in the shake. Instead I warmed the oil up a little on the stove and took it as a shot before I drank the shake. I used a little extra of my Homemade Almond Milk to compensate for the loss moisture from leaving out the oil. It made it taste infinitely better to me.
Not everything has to be part of the shake to be a part of the cleanse. If you need to make adjustments like the one above, you can. Just make sure you're getting each element into your body in some form.
The kale I used is from a frozen supply that I have. I buy lots of beautiful kale from a local organic market called The Green Thumb. I wash it and store it in the freezer in large ziplock bags. That way I have a supply to use in smoothies and soups throughout the winter.
Bottom Line: Cayenne pepper and frozen kale help make this shake a wonderful way to end the day. 5/5 stars.
You are supposed to choose any of the shakes and have that as your "snack" in the middle of the afternoon. Dr Oz calls it the "Bonus Shake". The first and third day I didn't have the bonus shake. I wasn't that hungry so I didn't feel like I needed it. On the 2nd day I thought I was going to kill someone if I didn't eat something. Unfortunately, I was not anywhere near home, or a blender, when the hunger struck. I managed to find a market and inhaled 2 bananas before I could say Mississippi.
We all have to make it through the day, and if you feel like you really need to eat, then do. Just try to limit the food you consume to the foods that are on the cleanse. Eat an apple, or a bowl of berries. Or, if you're really hungry have some almond butter on celery sticks. You should not feel like you are starving! At the same time, it's important to recognize when hunger is real, vs when our minds think they need food.
+ I lost 2 pounds and felt much more energized with clearer thinking. I already have a very clean diet and focus a lot on detoxifying my body so I was surprised that got the results that I did.
+ I loved taking the bath every night. I felt so relaxed and found that I slept much better. I even sprayed a little lavender on my pillow.
- The evening meal was difficult. I have a husband a 2 kids to feed, so not eating the same meal as them was hard. My kids kept asking me when I was going to eat dinner.
- It's not portable. You need to be close to home, or to a blender, for the 3 days you choose to do this.


text:
All-in-One Printers That Wont Break the Bank
By: Nathan Eddy | July 16, 2009
by Nate Eddy
HP Photosmart C8180 All-in-One ($399.99)
This printer, scanner and copier from HP is great for photos, allowing users to remove dust and scratches, then print, copy and archive photos to disks. Users have a 3.5-inch touch-screen to edit, save, print and share documents, and it prints up to 34 pages per minute in black and 33 in color.
Epson Workforce 600 ($200)
Compact size (18 by 16 by 9 inches) and fast printing speeds make this all-in-one ideal for offices with a lack of desk space. You also get scanning, copying and faxing capability, and auto-duplexing (printing on both sides of a page). And the Workforce 600 has Wi-Fi and Ethernet networking built-in.
Samsung CLX-3175FW ($449.99)
With high-speed USB 2.0 and Ethernet capability; fast copying features including ID card, clone, N-up, auto fit and poster; and a compact footprint, this wireless color laser multifunction printer is an excellent choice for businesses that can afford to spend a little more.
Canon Pixma MX7600 ($399.99)
This all-in-one from Canon offers a built-in automatic document feeder (ADF), holds up to 35 originals and enables automatic duplexing so you don't have to wait, then manually turns over your two-sided original. In addition, Canon's new PgR ink system uses a higher-intensity black pigment ink along with a clear ink and specially formulated color pigment inks.
Lexmark X9575 Professional ($249.99)
Although it may not look as sleek and sophisticated as some of its competitors, this all-in-one ink-jet from Lexmark boasts built-in 802.11g wireless technology and Ethernet, and automatic cartridge alignment for optimal print quality.
Xerox Phaser 6130 ($449)
This compact printer is best for frequent small jobs and carries a maximum duty cycle of 40,000 pages per month. It also features Adobe PostScript 3 and uses Emulsion Aggregation (EA) high-grade toner. Though it isn't an all-in-one, its big brother, the 6115MFP color multifunction printer ($899), offers coping, scanning and faxing.
Dell Multifunction Laser 1125 ($249)
Dell's entry-level all-in-one offers cost-conscious businesses a considerable amount of features for the price, including 600-by-600-dpi quality prints, 24-bit color scanning with a 30-page automatic document feeder and a generous 250-sheet paper tray.
Kodak ESP 9 ($299.99)
Built-in Wi-Fi and Ethernet connectivity, a dedicated photo paper tray, and print speeds of up to 32 pages per minute (in black) and 30 in color are just a few of the features this all-in-one offers. This Wi-Fi-enabled printer can also scan to e-mail by launching an e-mail message on a PC and attaching the scanned document to the message.
Brother MFC-5460CN ($149.99)
A real bargain, this Ethernet-enabled all-in-one also features a high-speed fax modem, media card slots and a PictBridge interface, which allows users to print photos directly from their digital camera's media card or from their PictBridge-enabled camera without a computer. It also carries an automatic document feeder (ADF) and a network port.
Microsoft Surface Hub 2 Takes Work Team Collaboration...
HP's Unveils Trio of EliteBook 700 Notebooks With AMD...
Velocity Micro Tunes ProMagix HD150 Desktop for Business...
Dell Targets Enterprises With Array of New Desktops,...
2020 and CEO Bob Swan's Impressive Year at Intel
Laptops that Defined 2020 and their Respective Makers
Lenovo Shows New Data Management Solutions for Hybrid Cloud, AI
HP Elite c1030 Chromebook: The Corporate Notebook We've Been Awaiting


This time you get a sneak peek into my kitchen where my wife Siobhan shares her recipe for parsley pesto. Sometimes the best things happen by accident and this pesto is no exception. It came about when planted too much parsley for our seedling sales and had to find something to do with it. This stuff is now the new ketchup in our house and it's difficult to see how we managed without it. Parsley pesto in especially good with fish, just spread a generous gloop on pretty much any fish and stick it in the oven for 15 mins, perfect.
When threatened with a glut of parsley about to go into orbit and realising there is only so much chopped parsley one can keep putting on everyone's meal, I needed to take action.
I thought about making basil pesto but since my crop of basil is decidedly not blooming, I turned to my burgeoning parsley plot instead. This is the thing you can make and everyone will marvel at your culinary skills, you can smile smugly, secretly knowing it took about 5 mins to prepare. It will give days, if not weeks of satisfaction although it is consumed so quickly in our house, being put to use on everything from oatcakes to baked white fish.
I like garlic so I used quite a few cloves , 9 or 10 approx.
Parsley – I had quite a lot , 6 or 7 handfuls of both flat leaf and curly.
Rapeseed Oil for it's milder flavour than Olive, as the parsley can give a fair punch.
Pinenuts, a few table spoons depending on your taste. Alternatively you can use walnuts or cashews.
Parmesan Cheese – optional. It gives a richness to the flavour but is not necessary.
A good pinch of Maldon Sea Salt or any other type of sea salt and pepper.
I'd like to say there is a technique to making it, but there isn't. Throw the leaves, garlic, nuts, salt, pepper and cheese (if using), in the whizzer and press the button, start pouring the oil in as it's whizzing. Pour enough oil depending on the consistency you may prefer, be it spreadable or runny.
Store in jars in the fridge, with a layer of oil on the top to keep it fresh.
Wish I had seen this before my parsley went to seed. But I will be trying it next year. I pinned this !
I wish I'd seen this before my parsley went to seed, but I will be trying it next year. I pinned this !
Yes, it's a great one. I can't get enough of it and use it all the time, as I said it's the business on fish. I'm glad you enjoyed the post and look forward to hearing from you again.