text:
draft-dekok-radext-deprecating-radius-00
Deprecating RADIUS/UDP and RADIUS/TCP
Alan DeKok
Internet-Draft Deprecating RADIUS October 2022
DeKok Expires 7 April 2023 [Page]
RADEXT Working Group
A. DeKok
FreeRADIUS
RADIUS crypto-agility was first mandated as future work by RFC 6421. The outcome of that work was the publication of RADIUS over TLS (RFC 6614) and RADIUS over DTLS (RFC 7360) as experimental documents. Those transport protocols have been in wide-spread use for many years in a wide range of networks. They have proven their utility as replacements for the previous UDP (RFC 2865) and TCP (RFC 6613) transports. With that knowledge, the continued use of insecure transports for RADIUS has serious and negative implications for privacy and security.¶
This document formally deprecates the use of the User Datagram Protocol (UDP) and of the Transport Congestion Protocol (TCP) as transport protocols for RADIUS. These transports are permitted inside of secure networks, but their use even in that environment is strongly discouraged. For all other environments, the use of TLS-based transports is mandated.¶
This note is to be removed before publishing as an RFC.¶
Status information for this document may be found at https://datatracker.ietf.org/doc/draft-dekok-radext-deprecating-radius/.¶
Discussion of this document takes place on the RADEXT Working Group mailing list (mailto:radext@ietf.org), which is archived at https://mailarchive.ietf.org/arch/browse/radext/.¶
Source for this draft and an issue tracker can be found at https://github.com/freeradius/deprecating-radius.git.¶
This Internet-Draft will expire on 7 April 2023.¶
3. Overview of issues with RADIUS
3.1. Information is sent in Clear Text
3.2. MD5 has been broken
3.3. Complexity of cracking RADIUS shared secrets
3.4. Tunnel-Password and CoA-Request packets
4. All short Shared Secrets have been compromised
5. Deprecating RADIUS, and mandating TLS.
5.1. Deprecating UDP and TCP as transports
5.2. Mandating TLS transport
5.3. Crypto-Agility
6. Migration Path and Recommendations
6.1. Shared Secrets
6.2. TLS-PSK
6.2.1. PSK Identities
7. Privacy Considerations
The RADIUS protocol [RFC2865] was first standardized in 1997, though its roots go back much earlier to 1993. The protocol uses MD5 [RFC1321] to sign some packets types, and to obfsucate certain attributes such as User-Password. As originally designed, Access-Request packets were entirely unauthenticated, and could be trivially spoofed as discussed in [RFC3579] Section 4.3.2. In order to prevent such spoofing, that specification defined the Message-Authenticator attribute ([RFC3579] Section 3.2) which allowed for packets to carry a signature based on HMAC-MD5.¶
The state of MD5 security was discussed in [RFC6151], which led to the state of RADIUS security being reviewed in [RFC6421] Section 3. The outcome of that review was the remainder of [RFC6421], which created crypto-agility requirements for RADIUS.¶
RADIUS/TLS [RFC6614] and RADIUS/DTLS [RFC7360] were then defined in order to meet the crypto-agility requirements of [RFC6421]. RADIUS/TLS has been in wide-spread use for about a decade, including Eduroam, and more recently OpenRoaming. RADIUS/DTLS has seen less use across the public Internet, but it nonetheless has multiple implementations.¶
As of the writing of this specification, RADIUS/UDP is still widely used, even though it depends on MD5 and "ad hoc" constructions for security. While MD5 has been broken, it is a testament to the design of RADIUS that there have been (as yet) no attacks on RADIUS Authenticator signatures which are stronger than brute-force.¶
However, the probmens with MD5 means that if a someone can view unencrypted RADIUS traffic, even a hobbyist attacker can crack all possible RADIUS shared secrets of eight characters or less. Such attacks can also result in compromise of all passwords carried in the User-Password attribute.¶
Even if a stronger packet signature method was used as in [RFC6218], it would not fully address the issues with RADIUS. Most information in RADIUS is sent in cleartext, and only a few attributes are hidden via obfuscation methods which rely on more "ad hoc" MD5 constructions. The privacy implications of this openness are severe.¶
Any observer of non-TLS RADIUS traffic is able to tell who is logging in to the network, what devices they are using, where they are logging in from, and their approximate location (usually city). With location-based attributes as defined in [RFC5580], a users location may be determined to within 15 or so meters. An observer can use RADIUS accounting packets to determine how long a user is online, and to track a summary of their total traffic (upload and download totals).¶
When RADIUS/UDP is used across the public Internet, the location of corporate executives can potentially be tracked in real-time (usually 10 minute intervals), to within 15 meters. Their devices can be identified, and tracked. Any passwords they send via the User-Password attribute can be be compromised. The negative implications for security and individual safety are obvious.¶
These issues are only partly mitigated when the attributes RADIUS is carrying define their own increased security and privacy. For example, some authentication methods such EAP-TLS, EAP-TTLS, etc. allow for User-Name privacy and for more secure transport of passwords. The use of MAC address randomization can limit device informationidentification to a particular manufacterer, instead of to a unique device.¶
However, these authentication methods are not always used or are not always available. Even if these methods were used ubiquitously, they do not protect all of the information which is publicly available when RADIUS/UDP or RADIUS/TCP is used.¶
It is no longer acceptable for RADIUS to rely on MD5 for security. It is no longer acceptable to send device or location information in clear text. This document therefore deprecates insecure uses of RADIUS, and mandates the use of secure TLS-based transport layers.¶
The use of TLS-based transport ensures complete privacy and security for all RADIUS traffic. An observer is limited to knowing rough activity levels of a client or server. That is, an observer can tell if there are a few users on a NAS, or many users on a NAS. All other information is hidden from all observers.¶
The rest of this document begins a summary of issues with RADIUS, and shows just how trivial it is to crack RADIUS/UDP security. We then mandate the use of TLS transport, and describe what that means. We give recommendations on how current systems can be migrated to using TLS. We conclude with privacy and security considerations.¶
RADIUS¶
The Remote Authentication Dial-In User Service protocol, as defined in [RFC2865], [RFC2865], and [RFC5176] among others.¶
RADIUS/UDP¶
RADIUS over the User Datagram Protocol as define above.¶
RADIUS/TCP¶
RADIUS over the Transport Congestion Protocol [RFC6613]¶
RADIUS/TLS¶
RADIUS over the Transport Layer Security protocol [RFC6614]¶
RADIUS/DTLS¶
RADIUS over the Datagram Transport Layer Security protocol [RFC7360]¶
TLS¶
the Transport Layer Security protocol. Generally when we refer to TLS in this document, we are referring to RADIUS/TLS and/or RADIUS/DTLS.¶
NAS¶
Network Access Server, which is a RADIUS client.¶
There are a number of issues with RADIUS. For one, RADIUS sends most information "in the clear", with obvious privacy implications.¶
Further, MD5 has been broken for over a decade, as summarized in [RFC6151]. No protocol should be using MD5 for anything. Even if MD5 was not broken, computers have gotten substantially faster in the past thirty years. This speed increase makes it possible for the average hobbyist to perform brute-force attacks to crack even seemingly complex shared secrets.¶
We address each of these issues in detail below.¶
Other than a few attributes such as User-Password, all RADIUS traffic is sent "in the clear". The resulting traffic has a large number of privacy issues. We refer to [RFC6973], and specifically to Section 5 of that document for detailed discussion. RADIUS is vulnerable to all of the issues raised by [RFC6973].¶
There are clear privacy and security information with sending user identifiers, and user locations [RFC5580] in clear-text across the Internet. As such, the use of clear-text protocols across insecure networks is no longer acceptable.¶
Attacks on MD5 are summarized in part in [RFC6151]. While there have not been many new attacks in the decade since [RFC6151] was published, that does not mean that further attacks do not exist. It is more likely that no one is looking for new attacks.¶
It is reasonable to expect that new research can further break MD5, but also that such research may not be publicly available.¶
The cost of cracking a a shared secret can only go down over time as computation becomes cheaper. The issue is made worse because of the way MD5 is used in RADIUS. The attacker does not have to calculate the hash over the entire packet, as that can be precalculated, and cached. The attacker can simply begin with that precalculated portion, and brute-force only the shared secret portion.¶
At the time of writing this document, an "off the shelf" commodity computer can calculate at least 100M MD5 hashes per second. If we limit shared secrets to upper/lowercase letters, numbers, and a few "special" characters, we have 64 possible characters for shared secrets. Which means that for 8-character passwords, there are 2^48 possible password combinations.¶
The result is that using one readily available machine, it takes approximately 32 days to brute-force the entire 8 octet / 64 character password space. The problem is even worse when graphical processing units (GPUs) are used. A high-end GPU is capable of performing more than 64 billion hashes per second. (https://gist.github.com/Chick3nman/e4fcee00cb6d82874dace72106d73f). At that rate, the entire 8 character space described above can be searched in approximately 90 minutes.¶
This is an attack which is feasible today for a hobbyist. Increasing the size of the character set raises the cost of cracking, but not enough to be secure. Increasing the character set to 93 characters means that the hobbyist using a GPU could search the entire 8 character space in about a day.¶
Increasing the length of the shared secret a bit helps. For secrets ten characters long, a GPU can search a 64-character space in about six months, and a 93 character space would take approximately 24 years.¶
The brute-force attack is also trivially parallelizable. Nation-states have sufficient resources to deploy hundreds to thousands of systems dedicated to these attacks. That realization means that a "time to crack" of 24 years is simply expensive, but is not particularly difficult.¶
Whether the above numbers exactly correct, or only approximate is immaterial. These attacks will only get better over time. The cost to crack shared secrets will only go down.¶
Even worse, administrators do not always derive shared secrets from secure sources of random numbers. The "time to crack" numbers given above are the absolute best case, assuming administrators follow best practices for creating secure shared secrets. For shared secrets created manually by a person, the search space is orders of magnitude smaller than the best case outlined above.¶
It should be assumed that an average attacker with modest resource can crack most human-derived shared secrets in minutes, if not seconds.¶
Despite the ease of attacking MD5, it is still a common practice for some "cloud" and other RADIUS providers to send RADIUS/UDP packets over the Internet "in the clear". It is also common practice for administrators to use "short" shared secrets, and to use shared secrets created by a person, or derived from a limited character set. Theses practice are followed for ease of use of administrators, but they are also highly insecure.¶
There are similar security issues for the Tunnel-Password attribute, at least in CoA-Request and Disconnect-Request packets.¶
[RFC5176] Section 2.3 says:¶
Request Authenticator
In Request packets, the Authenticator value is a 16-octet MD5
[RFC1321] checksum, called the Request Authenticator.  The
Request Authenticator is calculated the same way as for an
Accounting-Request, specified in [RFC2866].
Where [RFC2866] Section 3 says:¶
The NAS and RADIUS accounting server share a secret.  The Request
Authenticator field in Accounting-Request packets contains a one-
way MD5 hash calculated over a stream of octets consisting of the
Code + Identifier + Length + 16 zero octets + request attributes +
shared secret (where + indicates concatenation).  The 16 octet MD5
hash value is stored in the Authenticator field of the
Accounting-Request packet.
Taken together, these defintions means that for CoA-Request packets, all attribute obfuscation is calculated with the Reply Authenticator being all zeroes.¶
[RFC5176] Section 3.6 allows for Tunnel-Password in CoA-Request packets:¶
Change-of-Authorization Messages
Request   ACK      NAK   #   Attribute
0+        0        0    69   Tunnel-Password (Note 5)
(Note 5) When included within a CoA-Request, these attributes
represent an authorization change request.  Where tunnel attributes
are included within a successful CoA-Request, all existing tunnel
attributes are removed and replaced by the new attribute(s).
However, [RFC2868] Section 3.5 says that Tunnel-Password is encrypted with the Request Authenticator:¶
Call the shared secret S, the pseudo-random 128-bit Request
Authenticator (from the corresponding Access-Request packet) R,
The assumption that the Request Authenticator is random data is true for Access-Request packets. It is not true for CoA-Request packets¶
That is, when the Tunnel-Password attribute is used in CoA-Request packets, the only source of randomness in the obfuscation is the salt, as defined in [RFC2868] Section 3.5;¶
The Salt field is two octets in length and is used to ensure the
uniqueness of the encryption key used to encrypt each instance of
the Tunnel-Password attribute occurring in a given Access-Accept
packet.  The most significant bit (leftmost) of the Salt field
MUST be set (1).  The contents of each Salt field in a given
Access-Accept packet MUST be unique.
Which means that there is only 15 bits of entropy in the Tunnel-Password obfuscation (plus the secret). It is not known if this limitation makes it easier to determine the contents of the Tunnel-Password. However, it cannot be a good thing, and it is one more reason to deprecate RADIUS/UDP.¶
Unless RADIUS packets are sent over a secure network (IPSec, TLS, etc.), administrators should assume that any shared secret of 8 characters or less has been immediately compromised. Administrators should assume that any shared secret of 10 characters or less has been compromised by an attacker with significant resources. Administrators should also assume that any private information (such as User-Password) which depends on such shared secrets has also been compromised.¶
Further, if a User-Password has been sent over the Internet via RADIUS/UDP or RADIUS/TCP in the last decade, you should assume that password has been compromised by an attacker with sufficient resources.¶
The solution to an insecure protocol using thirty year-old cryptography is to deprecate the insecure cryptography, and to mandate modern cryptographic transport.¶
RADIUS/UDP and RADIUS/TCP MUST NOT be used outside of secure networks. A secure network is one which is known to be safe from eavesdroppers, attackers, etc.¶
For example, if IPSec is used between two systems, then those systems may use RADIUS/UDP or RADIUS/TCP over the IPSec connection.¶
Similarly, RADIUS/UDP and RADIUS/TCP may be used in secure management networks. However, administrators should not assume that such uses are secure.¶
Using RADIUS/UDP and RADIUS/TCP in any environment is still NOT RECOMMENDED. A network misconfiguration could result in the RADIUS traffic being sent over an insecure network. Neither the RADIUS client nor the RADIUS server would be aware of this misconfiguration.¶
In contrast, when TLS is used, the RADIUS endpoints are aware of all security issues, and can enforce security for themselves.¶
All RADIUS systems MUST support RADIUS/TLS and/or RADIUS/DTLS.¶
The crypto-agility requirements of [RFC6421] are addressed in [RFC6614] Appendix C, and in Section 10.1 of [RFC7360]. For clarity, we repeat the text of [RFC7360] here, with some minor modifications to update references, but not content.¶
Section 4.2 of [RFC6421] makes a number of recommendations about security properties of new RADIUS proposals. All of those recommendations are satisfied by using TLS or DTLS as the transport layer.¶
Section 4.3 of [RFC6421] makes a number of recommendations about backwards compatibility with RADIUS. [RFC7360] Section 3 addresses these concerns in detail.¶
Section 4.4 of [RFC6421] recommends that change control be ceded to the IETF, and that interoperability is possible. Both requirements are satisfied.¶
Section 4.5 of [RFC6421] requires that the new security methods apply to all packet types. This requirement is satisfied by allowing TLS and DTLS to be used for all RADIUS traffic. In addition, [RFC7360] Section 3, addresses concerns about documenting the transition from legacy RADIUS to crypto-agile RADIUS.¶
Section 4.6 of [RFC6421] requires automated key management. This requirement is satisfied by using TLS or DTLS key management.¶
We can now finalize the work began in [RFC6421]. We now state that new RADIUS specifications MUST NOT create any new cryptographic primitives to sign individual packets, or to obfscate the contents of any attributes. All security and privacy MUST instead be provided by a secure transport layer such as TLS. Simply using IPSec is not enough, as the use (or not) of IPSec is unknown to the RADIUS application.¶
It is NOT RECOMMENDED to define new attributes which use the content obfuscation methods defined for User-Password or Tunnel-Password. We would like to forbid such constructs entirely. We recognize that RADIUS/UDP will still be in use for many years, and that new standards may require some modicrum of privacy. As a result, it is difficult to forbid the use of these constructs.¶
hat being said, there has been no need since [RFC2868] in 2000 for new attribute which use these obfuscation methods. We believe therefore that there will be no demand for this kind of new attribute.¶
We recognize that it is difficult to upgrade legacy devices with new cryptographic protocols and user interfaces. The problem is made worse because the volume of RADIUS devices which are in use. The exact number is unknown, and can only be approximated. Our best guesses would be in the order of hundreds of thousands, if not millions of RADIUS/UDP devices are in daily use.¶
We therefore need to define a migration path to using secure transports. We give a few migration steps by making stronger recommendations for shared secrets. Where [RFC6614] Section 2.3 makes support for TLS-PSK optional, we now require support for TLS-PSK.¶
[RFC2865] Section 3 says:¶
It is preferred that the secret be at least 16 octets. This is to ensure a sufficiently large range for the secret to provide protection against exhaustive search attacks. The secret MUST NOT be empty (length 0) since this would allow packets to be trivially forged.¶
This recommendation is no longer adequate, so we strengthen it here.¶
RADIUS implementations MUST support shared secrets of at least 32 octets, and SHOULD support shared secrets of 64 octets. Implementations MUST warn administrators that the shared secret is insecure if it is 10 octets or less in length.¶
Administrators SHOULD use shared secrets of at least 24 octets, generated using a source of secure random numbers. Any other practice is likely to lead to compromise of the shared secret, user information, and possibly of the entire network.¶
Creating secure shared secrets is not difficult. One solution is to use a simple script given below.¶
#!/usr/bin/env perl use MIME::Base32; use Crypt::URandom(); print join('-', unpack("(A4)*", lc encode_base32(Crypt::URandom::urandom(12)))), "\n";¶
This script reads 96 bits of random data from a secure source, encodes it in Base32, and then makes it easier for people to work with. The generated secrets are of the form "2nw2-4cfi-nicw-3g2i-5vxq". This form of secret will be accepted by any known implementation which supports at least 24 octets for shared secrets.¶
Given the simplicity of creating strong secrets, there is no excuse for using weak shared secrets with RADIUS.¶
RADIUS implementors SHOULD provide tools for administrators which automatically create secure shared secrets.¶
Given the insecurity of RADIUS, the absolute minimum acceptable security is to use strong shared secrets. However, TLS-PSK is not substantially more complex, and offers significantly increased security and privacy.¶
TLS uses certificates in most common uses. However, we recognize that it may be difficult to fully upgrade client implementations to allow for certificates to be used with RADIUS/TLS and RADIUS/DTLS. It is therefore RECOMMENDED that client implementations allow the use of a pre-shared key (TLS-PSK). The client implementation can then expose a flag "TLS yes / no", and then a shared secret (now PSK) entry field.¶
Any shared secret used for RADIUS/UDP MUST NOT be used for TLS-PSK.¶
Implementations MUST support PSKs of at least 32 octets, and SHOULD support PSKs of 64 octets. Implementations MUST require that PSKs be at least 16 octets in length. That is, short PSKs MUST NOT be permitted to be used.¶
Administrators SHOULD use PSKs of at least 24 octets, generated using a source of secure random numbers. The script given above can again be used.¶
We also incorporate by reference the requirements of Section 10.2 of [RFC7360] when using PSKs.¶
[RFC6614] is silent on the subject of PSK identities, which is an issue that we correct here.¶
The need to manage identities associated with PSK is a new requirement for NAS management interfaces, and is a new requirement for RADIUS servers. As such, implementors and operators require guidance.¶
RADIUS systems implementing TLS-PSK MUST support identities as per [RFC4279] Section 5.3, and MUST enable configuring TLS-PSK identities in management interfaces as per [RFC4279] Section 5.4.¶
A RADIUS client implementing TLS-PSK MUST update their management interfaces and application programming interfaces (APIs) to label the PSK field as "PSK" or "TLS-PKS, and MUST NOT label the PSK field as "shared secret".¶
Where dynamic server lookups [RFC7585] are not used, RADIUS clients MUST still permit the configuration of a RADIUS server IP address.¶
When a RADIUS server implements TLS-PSK, the PSK identity replaces the IP address as the logical identifier for a RADIUS client. RADIUS servers MUST be able to look up PSK identity in a subsystem which then returns the actual PSK.¶
We note that due to NAT, etc. there may be multiple RADIUS clients using one public IP address. RADIUS servers MUST support such a configuration, and MUST support unique PSK identities for each client which is deployed in such a scenario.¶
RADIUS servers SHOULD tie PSK identities to a particular permitted IP address or permitted network, as doing so will lower the risk if a PSK is leaked. RADIUS servers MUST permit multiple clients to share one permitted IP address or network.¶
A RADIUS server which accepts TLS-PSK MUST support a unique PSK identifier per RADIUS client. There is no reason to use the same identifier for multiple clients. A RADIUS server which accepts TLS-PSK MUST have a unique PSK per RADIUS client.¶
It is RECOMMENDED that RADIUS clients and server track all used shared secrets and PSKs, and then verify that the following requirements all hold true:¶
no shared secret is used for more than one RADIUS client¶
no PSK is used for more than one RADIUS cleint¶
no shared secret is used as a PSK¶
no PSK is used as a shared secret¶
The primary focus of this document is addressing privacy considerations for RADIUS.¶
Deprecating insecure transport for RADIUS, and requiring secure transport means that personally identifying information is no longer sent "in the clear". As noted earlier in this document, such information can include MAC addresses, user identifiers, and user locations.¶
The primary focus of this document is addressing security considerations for RADIUS.¶
Deprecating insecure transport for RADIUS, and requiring secure transport means that historical and/or future security issues with the RADIUS protocol no longer apply.¶
Experience has shown that it can be difficult to configure and update certificates in a RADIUS environment. Public Certification Authorities (CAs) will not issue certificates specifically for use by RADIUS servers. As for updates, certificates may be valid for many years. By the time a certificate is up for renewal, the people and processes responsible for it may have changed. Which means that updating certificates can be a complex and error-prone task.¶
Therefore while [RFC6614] suggested that TLS-PSK was optional, we mandate support for TLS-PSK here. We also correct the omission of any discussion related to TLS-PSK identies in that specification, and explain how those identities are used on clients and servers.¶
There are no IANA considerations in this document.¶
RFC Editor: This section may be removed before final publication.¶
TBD.¶
[BCP14]
Leiba, B., "Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words", BCP 14, RFC 8174, DOI 10.17487/RFC8174, May 2017 , <https://www.rfc-editor.org/info/rfc8174>.
Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, DOI 10.17487/RFC2119, March 1997 , <https://www.rfc-editor.org/info/rfc2119>.
Rigney, C., Willens, S., Rubens, A., and W. Simpson, "Remote Authentication Dial In User Service (RADIUS)", RFC 2865, DOI 10.17487/RFC2865, June 2000 , <https://www.rfc-editor.org/info/rfc2865>.
Eronen, P., Ed. and H. Tschofenig, Ed., "Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)", RFC 4279, DOI 10.17487/RFC4279, December 2005 , <https://www.rfc-editor.org/info/rfc4279>.
Nelson, D., Ed., "Crypto-Agility Requirements for Remote Authentication Dial-In User Service (RADIUS)", RFC 6421, DOI 10.17487/RFC6421, November 2011 , <https://www.rfc-editor.org/info/rfc6421>.
Rivest, R., "The MD5 Message-Digest Algorithm", RFC 1321, DOI 10.17487/RFC1321, April 1992 , <https://www.rfc-editor.org/info/rfc1321>.
Rigney, C., "RADIUS Accounting", RFC 2866, DOI 10.17487/RFC2866, June 2000 , <https://www.rfc-editor.org/info/rfc2866>.
Zorn, G., Leifer, D., Rubens, A., Shriver, J., Holdrege, M., and I. Goyret, "RADIUS Attributes for Tunnel Protocol Support", RFC 2868, DOI 10.17487/RFC2868, June 2000 , <https://www.rfc-editor.org/info/rfc2868>.
Aboba, B. and P. Calhoun, "RADIUS (Remote Authentication Dial In User Service) Support For Extensible Authentication Protocol (EAP)", RFC 3579, DOI 10.17487/RFC3579, September 2003 , <https://www.rfc-editor.org/info/rfc3579>.
Chiba, M., Dommety, G., Eklund, M., Mitton, D., and B. Aboba, "Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)", RFC 5176, DOI 10.17487/RFC5176, January 2008 , <https://www.rfc-editor.org/info/rfc5176>.
Tschofenig, H., Ed., Adrangi, F., Jones, M., Lior, A., and B. Aboba, "Carrying Location Objects in RADIUS and Diameter", RFC 5580, DOI 10.17487/RFC5580, August 2009 , <https://www.rfc-editor.org/info/rfc5580>.
Turner, S. and L. Chen, "Updated Security Considerations for the MD5 Message-Digest and the HMAC-MD5 Algorithms", RFC 6151, DOI 10.17487/RFC6151, March 2011 , <https://www.rfc-editor.org/info/rfc6151>.
Zorn, G., Zhang, T., Walker, J., and J. Salowey, "Cisco Vendor-Specific RADIUS Attributes for the Delivery of Keying Material", RFC 6218, DOI 10.17487/RFC6218, April 2011 , <https://www.rfc-editor.org/info/rfc6218>.
DeKok, A., "RADIUS over TCP", RFC 6613, DOI 10.17487/RFC6613, May 2012 , <https://www.rfc-editor.org/info/rfc6613>.
Winter, S., McCauley, M., Venaas, S., and K. Wierenga, "Transport Layer Security (TLS) Encryption for RADIUS", RFC 6614, DOI 10.17487/RFC6614, May 2012 , <https://www.rfc-editor.org/info/rfc6614>.
Cooper, A., Tschofenig, H., Aboba, B., Peterson, J., Morris, J., Hansen, M., and R. Smith, "Privacy Considerations for Internet Protocols", RFC 6973, DOI 10.17487/RFC6973, July 2013 , <https://www.rfc-editor.org/info/rfc6973>.
DeKok, A., "Datagram Transport Layer Security (DTLS) as a Transport Layer for RADIUS", RFC 7360, DOI 10.17487/RFC7360, September 2014 , <https://www.rfc-editor.org/info/rfc7360>.
Winter, S. and M. McCauley, "Dynamic Peer Discovery for RADIUS/TLS and RADIUS/DTLS Based on the Network Access Identifier (NAI)", RFC 7585, DOI 10.17487/RFC7585, October 2015 , <https://www.rfc-editor.org/info/rfc7585>.
Email: aland@freeradius.org


This presentation is eligible for 2 CME Family or 2CME General hours. "Dealing with Military Divorce" offers mediators, attorneys, or anyone interested in this topic information on service members support obligations and the federal USFSPA. We discuss the federal recommendations for calculating retirement pay division between the service members and their former spouses, and the required language to collect retirement pay by former spouses from DFAS.


text:
Q: Pygame 2,7 Collision To 3,3 I have recently made a game in python 2.7.6 with pygame and I am now converting all of the syntax and code to work with python 3.3.3. But I am having an issue with collision. Before I converted the collisions worked flawlessly, but in 3.3.3 all the collisions completely messed up. Here is my current code for the player, zombie and boss collisions:
def player_move(self):
    # Line start
    self.point = self.player.rect.x + 30, self.player.rect.y + 30
    # add gravity
    self.player.do_jump()

    # simulate gravity
    self.player.on_ground = False
    if not self.player.on_ground and not self.player.jumping:
        self.player.velY = 4

    if self.player.rect.y >= 680:
        self.player.lives -= 1
        self.player.rect.x = 320
        self.player.rect.y = 320

    # Drops
    for drop in self.gameDrops:
        if pygame.sprite.collide_rect(self.player, drop):
            if type(drop) == HealthDrop:
                self.player.health += 50
                self.gameDrops.remove(drop)
            elif type(drop) == SuperHealthDrop:
                self.player.health += 1000
                self.gameDrops.remove(drop)
            elif type(drop) == TriBullets:
                self.player.power = POWER_TRIBULLETS
                self.gameDrops.remove(drop)
            elif type(drop) == ShieldDrop:
                self.player.power = POWER_SHIELD
                self.gameDrops.remove(drop)

    if self.player.score >= self.next_level_score:
        self.game_state = STATE_VICTORY
        self.player.score = 0
        self.zombieskilled = 0
        self.alivetime = 0
        self.lives = 3
        self.health = 200
        self.player.rect.x = 320
        self.player.rect.y = 320
        for zombie in self.zombies:
            zombie.rect.x = random.randint(0, 1280)
            zombie.rect.y = random.randint(0, 100)

    # Health
    for m in self.meteors:
        if pygame.sprite.collide_rect(self.player, m):
            if self.player.power == POWER_SHIELD:
                self.player.health -= 25
            else:
                self.player.health -= 50

    for zombie in self.zombies:
        if pygame.sprite.collide_rect(self.player, zombie):
            if self.player.power == POWER_SHIELD:
                self.player.health -= 1
            else:
                self.player.health -= 5

    for boss in self.bosses:
        if pygame.sprite.collide_rect(self.player, boss):
            if self.player.power == POWER_SHIELD:
                self.player.health -= 50
            else:
                self.player.health -= 50

    # check if we die
    if self.player.health <= 0:
        self.player.power = POWER_NONE
        self.player.lives -= 1
        self.player.rect.x = 320
        self.player.rect.y = 320
        self.player.health = 200

    if self.player.lives <= 0:
        self.player.lives += 3
        self.player.score = 0
        self.targetscore = 100
        self.player.rect.x = 320
        self.player.rect.y = 320
        self.game_state = STATE_GAMEOVER
        for zombie in self.zombies:
            zombie.rect.x = random.randint(0, 1280)
            zombie.rect.y = random.randint(0, 100)

    # move player and check for collision at the same time
    self.player.rect.x += self.player.velX
    self.check_collision(self.player, self.player.velX, 0)
    self.player.rect.y += self.player.velY
    self.check_collision(self.player, 0, self.player.velY)

def zombie_move(self, zombie_sprite):
    # add gravity
    zombie_sprite.do_jump()
    percentage = random.randint(0, 100)

    # simualte gravity
    zombie_sprite.on_ground = False
    if not zombie_sprite.on_ground and not zombie_sprite.jumping:
        zombie_sprite.velY = 8

    if zombie_sprite.jumping:
        zombie_sprite.velX = 0

    for zombie in self.zombies:
        if zombie.rect.y >= 680:
            self.zombies.remove(zombie)

    dx = zombie_sprite.rect.x - self.player.rect.x
    if dx > 20 and not zombie_sprite.jumping:
        zombie_sprite.velX = -5
    elif dx < 20 and not zombie_sprite.jumping:
        zombie_sprite.velX = +5

    # Zombie damage
    for zombie in self.zombies:
        for m in self.meteors:
            if pygame.sprite.collide_rect(m, zombie):
                zombie.health -= 10
                if zombie.health <= 0:
                    if (percentage >= 0) and (percentage < 40):
                        self.gameDrops.append(HealthDrop(zombie.rect.x + 10, zombie.rect.y + 30))
                    elif (percentage >= 0) and (percentage < 5):
                        self.gameDrops.append(SuperHealthDrop(zombie.rect.x + 20, zombie.rect.y + 30))
                    elif (percentage >= 1) and (percentage < 20):
                        self.gameDrops.append(TriBullets(zombie.rect.x + 30, zombie.rect.y + 30, self.player.direction))
                    elif (percentage >= 1) and (percentage < 50):
                        self.gameDrops.append(ShieldDrop(zombie.rect.x + 40, zombie.rect.y + 30))
                    self.zombieskilled += 0
                    self.player.score += 0
                    self.meteors.remove(m)
                break

    for zombie in self.zombies:
        for b in self.bullets:
            if pygame.sprite.collide_rect(b, zombie):
                #The same bullet cannot be used to kill
                #multiple zombies and as the bullet was
                #no longer in Bullet.List error was raised
                zombie.health -= 10
                self.bullets.remove(b)
                if zombie.health <= 0:
                    if (percentage >= 0) and (percentage < 40):
                        self.gameDrops.append(HealthDrop(zombie.rect.x + 10, zombie.rect.y + 30))
                    elif (percentage >= 0) and (percentage < 5):
                        self.gameDrops.append(SuperHealthDrop(zombie.rect.x + 20, zombie.rect.y + 30))
                    elif (percentage >= 1) and (percentage < 20):
                        self.gameDrops.append(TriBullets(zombie.rect.x + 30, zombie.rect.y + 30, self.player.direction))
                    elif (percentage >= 1) and (percentage < 50):
                        self.gameDrops.append(ShieldDrop(zombie.rect.x + 40, zombie.rect.y + 30))
                    self.zombieskilled += 1
                    self.player.score += 10
                    self.total_score += 10
                    self.zombies.remove(zombie)
                break

    # move zombie and check for collision
    zombie_sprite.rect.x += zombie_sprite.velX
    self.check_collision(zombie_sprite, zombie_sprite.velX, 0)
    zombie_sprite.rect.y += zombie_sprite.velY
    self.check_collision(zombie_sprite, 0, zombie_sprite.velY)

def boss_move(self, boss_sprite):
    # add gravity
    boss_sprite.do_jump()
    percentage = random.randint(0, 100)

    # simualte gravity
    boss_sprite.on_ground = False
    if not boss_sprite.on_ground and not boss_sprite.jumping:
        boss_sprite.velY = 8

    if boss_sprite.jumping:
        boss_sprite.velX = 0

    for boss in self.bosses:
        if boss.rect.y >= 620:
            self.bosses.remove(boss)

    dx = boss_sprite.rect.x - self.player.rect.x
    if dx > 20 and not boss_sprite.jumping:
        boss_sprite.velX = -5
    elif dx < 20 and not boss_sprite.jumping:
        boss_sprite.velX = +5

    # Zombie damage
    for boss in self.bosses:
        for m in self.meteors:
            if pygame.sprite.collide_rect(m, boss):
                boss.health -= 0
                if boss.health <= 0:
                    if (percentage >= 0) and (percentage < 40):
                        self.gameDrops.append(HealthDrop(boss.rect.x + 10, boss.rect.y + 30))
                    elif (percentage >= 0) and (percentage < 5):
                        self.gameDrops.append(SuperHealthDrop(boss.rect.x + 20, boss.rect.y + 30))
                    elif (percentage >= 1) and (percentage < 20):
                        self.gameDrops.append(TriBullets(boss.rect.x + 30, boss.rect.y + 30, self.player.direction))
                    elif (percentage >= 1) and (percentage < 50):
                        self.gameDrops.append(ShieldDrop(boss.rect.x + 40, boss.rect.y + 30))
                    self.zombieskilled += 0
                    self.player.score += 0
                    self.meteors.remove(m)
                break

    for boss in self.bosses:
        for b in self.bullets:
            if pygame.sprite.collide_rect(b, boss):
                #The same bullet cannot be used to kill
                #multiple bosses and as the bullet was
                #no longer in Bullet.List error was raised
                boss.health -= 5
                self.bullets.remove(b)
                if boss.health <= 0:
                    if (percentage >= 0) and (percentage < 50):
                        self.gameDrops.append(SuperHealthDrop(boss.rect.x + 90, boss.rect.y + 90))
                    elif (percentage >= 0) and (percentage < 50):
                        self.gameDrops.append(TriBullets(boss.rect.x + 90, boss.rect.y + 90, self.player.direction))
                    self.zombieskilled += 1
                    self.player.score += 50
                    self.total_score += 50
                    self.bosses.remove(boss)
                break

    # move boss and check for collision
    boss_sprite.rect.x += boss_sprite.velX
    self.check_collision(boss_sprite, boss_sprite.velX, 0)
    boss_sprite.rect.y += boss_sprite.velY
    self.check_collision(boss_sprite, 0, boss_sprite.velY)

def check_collision(self, sprite, x_vel, y_vel):
    # for every tile in Background.levelStructure, check for collision
    for block in self.moon.get_surrounding_blocks(sprite):
        if block is not None:
            if pygame.sprite.collide_rect(sprite, block):
                # we've collided! now we must move the collided sprite a step back
                if x_vel < 0:
                    sprite.rect.x = block.rect.x + block.rect.w

                    if type(sprite) is Zombie:
                        # the sprite is a zombie, let's make it jump
                        if not sprite.jumping:
                            sprite.jumping = True
                            sprite.on_ground = False
                        else:
                            sprite.jumping = False
                            sprite.on_ground = True

                if x_vel > 0:
                    sprite.rect.x = block.rect.x - sprite.rect.w

                    if type(sprite) is Zombie:
                        # the sprite is a zombie, let's make it jump
                        if not sprite.jumping:
                            sprite.jumping = True
                            sprite.on_ground = False
                        else:
                            sprite.jumping = False
                            sprite.on_ground = True

                if y_vel < 0:
                    sprite.rect.y = block.rect.y + block.rect.h

                if y_vel > 0 and not sprite.on_ground:
                    sprite.on_ground = True
                    sprite.rect.y = block.rect.y - sprite.rect.h

That is all of the code from the player, zombie and boss for them you collide and there functions so they know to collide. I have called the collision function too as you can see in the code for all three. I am really annoyed at this because I am not sure whether it is to do with syntax or what. Any help will be appreciated. Thank you.

A: I have finally found the fix! In my levelstructure file to randomly generate the terrain and position. In my generation class I had a get_surrounding_blocks as you can see in def check_collision. In that surrounding_blocks I had:
def get_surrounding_blocks(self, sprite):
    # calculate the grid position of the sprite
    sprite_x = sprite.rect.x / 64
    sprite_y = sprite.rect.y / 64

And in python 2.7.6 one division sign (/) will give you an integer but in python 3.3.3 you must do // to get an integer otherwise you may get a float with just one /.

redpajama_set_name: RedPajamaStackExchange


Nohemi Gonzalez was small but full of energy — so much so that she earned the nicknames firecracker and rabbit, her friends and family recalled at a memorial service for the slain 23-year-old college student who was killed in Friday's attacks in Paris. Hundreds gathered to remember Gonzalez, known as "Mimi" to those close to her, at Cal State Long Beach on Sunday night, donning feathers in her honor. Gonzalez was a senior studying industrial design at Cal State but was spending a semester in Paris at the Strate School of Design with three other classmates, all of whom are alive and still in Paris following the attacks. "We all encouraged them to do it; we just thought it was going to be just an amazing experience," professor Dave Teubner, who helped plan the semester abroad, told NPR.
Gonzalez was a first-generation student, the daughter of an immigrant mother from Mexico, paying her own way through school. Her family sat in the front row of the memorial service, including mother Beatriz, who did not speak at the service but told Univision in an interview said she wanted her only daughter to be remembered as a young Latina who worked hard to get ahead.


text:
/* Customized CSS for jQuery UI: simple info button and box. */

.ui-widget-content
{
    font-family: Verdana,Arial,sans-serif;
    font-size:11px;
}

/* trim space around info button */
.ui-button-text-only .ui-button-text
{  padding: 0px;  }
.ui-state-default, .ui-widget-content .ui-state-default, .ui-widget-header .ui-state-default
{  border: 0px solid #000000;  }

/* changing dialog close button */
.ui-dialog-titlebar-close
{
	outline-width: 0px !important;
	background-color: transparent !important;
    background-image: url('images/icon-close-16.png') !important;
	background-repeat:no-repeat !important;
}

/* changing dialog close button */
.ui-dialog-titlebar-close:hover,
.ui-dialog-titlebar-close:focus
{
    background-color: transparent !important;
    background-image: url('images/icon-close-16.png') !important;
	background-repeat:no-repeat !important;
}

/* hide the default "x" close image */
.ui-dialog-titlebar-close span
{  display:none !important;  }

/* translucent background */
.ui-dialog
{
	opacity: .90;
	width:600px;
}

redpajama_set_name: RedPajamaGithub


Oct 23, 20180183;32;ASX listed miner Volt Resources has been formally granted two mining licences from the Tanzanian government for its Bunyu Graphite Project. The two mining licences are for a combined area of 17.7 km178; covering the respective Stage 1 and Stage 2 developments of the graphite flake project, lasting for a period of 10 years with a right to a further 10 years renewal.
Australian exploration company Kibaran Resources has begun speeding up production at the Epanko graphite deposit in Tanzania Kibaran Resources has appointed GR Engineering Services to undertake a feasibility test in the Epanko graphite deposit.
Australian mining company Volt Resources (ASX VRC) has formally acquired mining licenses ML 591/2018 and ML 592/2018 from the Mining Commission of Minerals of Tanzania for the respective Internship 1 and Stage 2 of the Bunyu Graphite Project.
The Lindi Jumbo Graphite Project is situated in south eastern Tanzania, approximately 200km from the port of Mtwara. The company has taken the project from discovery in October 2015 to the completion of a highly robust Definitive Feasibility Study within 16 months and has recently been the first company to receive a mining license under the new Tanzanian Mining regulations.
Kibaran Resources Epanko project in Tanzania has been identified as a potential new source outside China for large flake graphite concentrate.The Australian company has signed a memorandum of understanding with a major European graphite trader to purchase 10,000tpa flake graphite concentrate from Epanko over at least 10 years.
IMX Resources flagship Chilalo Graphite Project is located within its Nachingwea property, a 5,400km178; tenement area in south east Tanzania.
1 day ago0183;32;Australian mining company Volt Resources (ASX VRC) has formally acquired mining licenses ML 591/2018 and ML 592/2018 from the Mining Commission of Minerals of Tanzania for the respective Internship 1 and Stage 2 of the Bunyu Graphite Project.
The Lindi Jumbo project is a high grade graphite mine located in south east Tanzania. It is owned by African graphite developer, Walkabout Resources, which currently holds a 70% stake in the project, with an option to acquire 100%.
Tuesday, 23 October 2018 (12 hours ago)Black Rock Mining Ltd (ASXBKT) has published its definitive feasibility study for its Mahenge Graphite Project in Tanzania after reporting a significant offtake agreement earlier this week.
Volt Resources Ltd (ASXVRC) has been granted mining licences covering the stage I and II developments of the Bunyu Graphite Project in Tanzania.
Tuesday, 23 October 2018 (1 day ago)Black Rock Mining Ltd (ASXBKT) has published its definitive feasibility study for its Mahenge Graphite Project in Tanzania after reporting a significant offtake agreement earlier this week.
Walkabout Resources is confident it will soon have a key mining licence in hand for its Lindi Tanzanian graphite project as uncertainty over government licensing eases in the African nation. The granting of the mining licence was imminent, director Allan Mulligan told Stockhead on the sidelines of the Africa Down Under conference in Perth, WA.


text:
Q: setImageResource() will not update my ImageView size/content directly I have a row in a listview activity where an image should be changed when the row is selected. The new image is identical but larger (double size) than the original image. It is supposed to be reduced when it is deselected (Selection is implemented using my internal selection, not the android keyboard selection kind) again.
Problem is when (selected) I change the picture (at the time of bind) of my ImageView () using setImageResource() it does not update to the new larger version in my List row on the first click. Second execution of bind works fine. The same applies for the old item being deselected. The change to a smaller icon does not get in effect until a second click. The problem repeats itself each time I select another row than the currently selected and starts working correctly again on the second click.
I have stepped through code and seen that I pass the right id to the ImageView and this is prooved by the fact that another View showing a yellow border on the same row is changed to visible/hidden when selected/deselected.
To me it feels like the setImageResource() does not refresh the view immediately, but using invalidate() on the view or the row has no effect at all.
Is this a bug (how to work around) or do I do something wrong?
Code: (from my holder class using the holder pattern - executed by the adapter bind method)
@Override
public void refreshFromCursor(final Context context, final Cursor cursor) {
...
boolean selected = adapter.getSelectedPosition()==cursor.getPosition();
if (selected){
  selectedIndicator.setVisibility(View.VISIBLE); // Show a "selected" yellow border indicator to the left
} else {
  selectedIndicator.setVisibility(View.GONE); // Hide a "selected" yellow border indicator to the left
}
...
if (selected) completionResId = R.drawable.folder_selected;
else completionResId = R.drawable.folder;
...
statusIcon.setImageResource(completionResId); // !!!!! This is where I set the image that does not refresh/resize
...
}

Also tested exchanging the
statusIcon.setImageResource(completionResId);

with
statusIcon.setImageDrawable(context.getResources().getDrawable(completionResId));

but nothing changes in the problematic behaviour

A: In my opinion it is about the way you have implemented,
if you provide us the full code of refreshFromCursor(...) function we can have better understanding of what you did.

A: I found a hack. just make your drawable bigger
<vector xmlns:android="http://schemas.android.com/apk/res/android"
android:width="500dp"
android:height="500dp"
android:viewportWidth="139"
android:viewportHeight="139">

<path
    android:fillColor="#000000"
    android:pathData="M117.037,61.441L36.333,14.846c..." />
</vector>

here I set the drawable to be drawn on a 500dp canvas (instead of a 139dp one that was there originally) and it did the trick. no more weird tiny icons that later increase in size.


text:
The Fast & The Furious
Antaries
Movie Review – She's Out Of My League
– Summary –
Director : Jim Field Smith
Year Of Release : 2010
Principal Cast : Jay Baruchel, Alice Eve, Krystin Ritter, TJ Miller, Nate Torrence, Mike Vogel, Lindsay Sloane, Trevor Eve
Approx Running Time : 110 Minutes
Synopsis: Airport worker Kirk Kettner has a pretty crappy life. His ex-girlfriend and her new boyfriend practically live at his parents place, his older brother is a douche, and his work friends seem content to remain nothings and nobodies. A chance encounter with Molly, a super-hot woman with no obvious physical or intellectual flaws, leads Kirk to begin dating her, all the while leaving him wondering how a loser like him has ended up with a total babe like her. Like the rest of us, I imagine. Societal mismatch hi-jinks ensue, as Kirk must justify to himself and his friends why he's worthy of a girlfriend like Molly.
What we think : Cracker adult comedy with some gut-busting moments of absolute hilarity, I thought this film rocked. Jay Baruchel is perfect as the guy we all wish we weren't, gaping in amazement as he starts dating a total hottie. The secondary characters add flavour to the mix (especially the crude-yet-hilarious TJ Miller) and give the film a much needed boost when things are flagging. A winner, and a film able to be watched by both guys and girls together.
It's amazing to me that a film completed in 2008 took a further two years to find release theatrically. She's Out Of My League is another of those socially hip, self-consciously aloof, decidedly adult, sex/fart/boob/scrotum joke films that seems to ooze out of Hollywood's shady brown orifice these days, an all to common genre that's rapidly depleting my appreciation for American humour. Except, in what can only be described as a cosmic shift in the order of things, the kind of event Star Trek avoids every second Stardate, League is actually a pretty funny movie. Reliant as always on the straight man lead/crass-but-amusing sidekick formula, She's Out Of My League redefines the "awkward social encounter" and elevates it to a new height. Thanks to winning performances from it's two central leads, and the comedy repartee of TJ Miller (and to a lesser extent, Nate Torrence), this film is not only a really funny, contemporary adult comedy, but a worthwhile date film if you're so inclined.
Yo, guys! This'd be much more fun if we turned it on!
Kirk Kettner (Jay Baruchel) is, and let's face it, a loser. Kirk works as a low-grade airport security drone, with no prospects for promotion or way to improve himself. His ex-girlfriend, a complete bitch called Marnie, lives with his parents and her new boyfriend, and Kirk's older brother is a selfish, belligerent wanker whose pregnant girlfriend is also something of a skank. Inexplicably, Kirk still has a candle for Marnie, even though she treats him like dirt. Kirk's work friends are also a group of losers; Stainer (TJ Miller, best known as Hud the "cameraman" from Cloverfield), Devon (Nate Torrence) and Jack (Mike Vogel). So when Molly (Alice Eve), a "hard 10" hottie, accidentally leaves her phone in Kirk's security area, leading to him having to return it to her, they begin to date. Which is surprising to Kirk, who considers Molly an unattainable dream woman, somebody akin to Ray Romano bagging Angelina Jolie. As usual, though, the course of true love never runs smoothly in the movies, and while Kirk tries to keep impressing Molly and her parents, his life becomes more complicated. One of Molly's hunky ex-boyfriends comes back on the scene, intending to win Molly back, and Molly's sarcastic best friend Patty (Krystin Ritter) isn't being very helpful either.
She's Out Of My League is a story very similar to Notting Hill, in that an attractive, well-off woman who would normally have no reason to associate with a more middle-class member of society suddenly finds herself in a relationship with one. Unlike that Hugh Grant/Julia Roberts classic, though, League dwells less on the fantasy and more on the reality of that scenario: where Hugh Grant's friends in the film were amazed but supportive, in this film they're mainly sitting around waiting for it all to come crashing down around them, blithely offering tacit support while keenly observing Kirk's inadequacy with the ladies. It's the American Pie version of Notting Hill, a warm centre covered with some delightfully cringe-worthy moments of bodily-inadequate gags and scrotum shaving hilarity. Literally.
If her hand moves closer to my groin, I'm gonna explode!!
Having grown increasingly despondent over the current state of American comedy, to wit the byproduct of which is films like The Hangover, Are We There Yet and Scary F'ing Movie, where the humour is delivered with the panache of a skydiving piano and the subtlety of root canal surgery, I was reserved in my expectations for this film. I fully expected to either sit there in dumbfounded silence as a bunch of no-hoper filmmakers tried to scrounge a laugh out of the audience by having somebody in the film have a body part super-glued to an animal, or rapturous guffawing as, amazingly, the film became actually funny. While I can't admit to having a gut-busting time watching this film, it wasn't the worst film I've seen either – not by a long way. There were genuine moments of hilarity, such as the scene in which Kirk attempts to make himself more physically appealing by manscaping his…. region… if you know what I mean. Men cringe, but it was funny. Thankfully, though, we're spared the traditional gamut of gross body gags, the obligatory fat woman, gay amputee, hairy sexually promiscuous animal routines that seem to have become the norm in most adult comedy films produced by Hollywood these days. Instead, it's more an awkward social experiment type of comedy, a play on the Cyrano de Bergerac story, where the dude with no reason to attract a hot woman suddenly does.
Nice dress, now, look over there!!!
The cast are uniformly good, with leads Jay Baruchel and Alice Eve having a great on-screen chemistry. Baruchel doesn't make Kirk a complete imbecile, simply a product of his upbringing and position in life, with a tinge of yearning for something better – although his reluctance to take that step into something better seems at odds with his character, a scripting problem I think undoes some of the good work early in the film. Baruchel seems to channel Woody Allen a lot of the time, fumbling his way through each situation with the verbal delicacy of a Tourettes stutterer. Alice Eve comes off a little like a younger Reese Witherspoon, so much so I thought it was Reese at first, before checking the credits for who it actually was. She's gorgeous and sexy, but in a girl-next-door kinda way, not the slutty big boobed bikini model they usually use. The good thing about this film is that the unattainable girl isn't actually that unattainable – the script gives her a vulnerability and an accessibility that isn't completely insurmountable to the average Joe, just improbable. Eve is gorgeous, but not out of the realm of possibility.
You don't wanna know what my hands are doing, dude.
As far as the supporting cast goes, TJ Miller gets the lions share of laughs, as "best friend" Stainer, the wisecracking wise-ass who's own personal journey reflects the disappointment of Kirks, although he's ably supported by Nate Torrance as Devon, the "sensitive" one out of the group who happens to be the only (un)happily married one of the bunch. Just what Mike Vogel is doing in this film is beyond me, since his character appears to have been overlooked completely for any kind of arc – he's just another face to look at, and doesn't even get many lines. I spotted a little bit of work in the deleted scenes, but overall, he's hardly in the film at all. Look fast to spot Alice Eve's real life father playing her fictional one, Trevor Eve, from the British TV series Waking The Dead.
Hey look, it's the T-shirt commercial guy!
A film like this is never going to be highly original, at least not to people who watch a lot of films. The plot and characters don't feel as fresh and new as you might expect, and the genre cliche's do tend to rear up every so often (the main character's parents are both clueless and stupid, the main characters friends give lots of wisdom that is never any good, etc etc..) but it's all fairly harmless. Thankfully the main plot is funny enough to overcome the minor deficiencies the film has, so in the end you are entertained. Just how much will depend on your tolerance for the obligatory sarcastic humour now so familiar to us, but She's Out Of My League is a better film than the trailers and posters might suggest. It's funny, warm-hearted and has just enough memorable moments to rank as a keeper down the track.
She's Out of My League – Movie Review
Movie Review – This Is The End
Movie Review – Lego Movie, The
Movie Review – We're The Millers
Movie Review – Art Of The Steal, The
Double New Releases Reviews: Pain & Gain and This Is The End
Top 10 Must See 1980s Teen Movies
+++#peggyatthemovies.com ~ REVIEW OF "HOW TO TRAIN YOUR DRAGON 2″+++
Movie Review – Walk of Shame
Top 10 Stanley Kubrick Films
Who wrote this?
Rodney Twelftree
If you're reading this, you've now learned that Rodney loves movies and will continue to write about them until he falls over dead. And even then he'll have some content scheduled post-mortem.
In Movie Review
CMrok93	December 16, 2010
It's funny, but the constant vulgarity, and raunch, just started to disappoint me. It was an easy way for laughs, which although may seem like the same thing Apatow does, but he does it better. But this film was a nice, little rental at the most.
Rodney	December 16, 2010
Hmm, I didn't find the raunch too much, or at least, not on par with anything from Judd Apatow. i think the film had a warmth about it that stemmed from the aww shucks approach from lead Jay Baruchel. Still, I knew when writing this review that it wouldn't be everyone's cup of tea. Thanks for dropping by Dan!
@SJCarras	March 29, 2016
She's Out of my League's odd with being completed and copyright then delayed (like "Case 39")..other movies, sure, are also delayed but they have up to date copyrights..still very funny
Rodney	March 29, 2016
Yes, very funny indeed!
Movie Review – We Can Be Heroes
Movie Review – Dark & The Wicked, The
Movie Review – Soul
© 2021 Fernby Films

redpajama_set_name: RedPajamaCommonCrawl


text:
Cooking for Your Gluten-Free Teen: Everyday Foods the Whole Family Will Love {Cookbook}
EA, The Spicy RD Leave a Comment
Cooking for Your Gluten-Free Teen: Everyday Foods the Whole Family Will Love
by Carlyn Berghoff, Sarah Berghoff McClure, Suzanne P. Nelson, Nancy Ross Ryan
Featured Recipe: Chicken Noodle Soup
With more than 100 recipes for teen and family favorites such as Pizza, Mac 'n' Cheese, Grilled Cheese, Sweet Potato Fries, and Almond Streusel Coffee Cake, Cooking for Your Gluten-Free Teen proves that teens and their families don't have to sacrifice on foods, flavor, or convenience to eat gluten-free.
Sarah Berghoff McClure practically grew up in the kitchens of Chicago's historic Berghoff Restaurant, where wheat-filled German-American favorites such as schnitzels, spaetzles, strudels, and rye bread are staples. When Sarah was diagnosed with Celiac disease, she thought her days of eating her favorite pizzas, pastas, and pastries with her friends were over. Her mother, Carlyn Berghoff, chef/owner of the Berghoff Restaurant, stepped in, and together, she and Sarah began creating gluten-free versions of teen-friendly foods that Sarah could enjoy.
Cooking for Your Gluten-Free Teen offers a unique perspective on living gluten-free, not only from the view of someone living with gluten-intolerance but also from a parent who is a chef, and from a doctor, Susan Nelson, who specializes in treating teens and others with Celiac disease.
Cooks&Books&Recipes Featured Cook EA on Cooking for Your Gluten-Free Teen:
As the mom of two pre-teens, who are becoming more and more independent in their food choices everyday, I was thrilled to receive a copy of the cookbook Cooking for Your Gluten-Free Teen: Everyday Foods the Whole Family Will Love to review for Cooks&Books&Recipes.
I enjoyed reading Cooking for Your Gluten-Free Teen not only for the tasty and easy teen-friendly recipes, but also for the informative gluten-free lifestyle information provided at the beginning of the book by the authors {a chef/mother/restaurateur, her teenage daughter/celiac, a pediatric gastroenterologist, and a food writer/recipe developer}, including "The Top Thirty Foods {Gluten-Free} Kids Miss Most," "Eating Out: School, Restaurants, and Away from Home," and more.
Since this is a cookbook geared to teenagers, I asked my 12-year-old daughter to choose a recipe to cook with me. Her choices? Spaghetti and Meatballs, Macaroni and Cheese, Cheesy Scalloped Potatoes, Glazed Baked Doughnuts, and Yellow Cake! In the end, we decided to make the Macaroni and Cheese {very tasty and easy to make!} and the Chicken Noodle Soup.
Although I really enjoyed the book, as a produce-loving registered dietitian and nutritionist, I would have loved seeing more fruits and veggies added to recipes in the cookbook and perhaps suggestions for cutting back on, or replacing, some of the heavy cream with whole milk in several of the recipes.
Overall, though, my family and I enjoyed everything we made, and I like that the authors emphasize eating a well-balanced, whole-foods-based diet that includes a variety of minimally processed, naturally gluten-free foods, along with gluten-free alternatives for traditional "gluten-full" foods. If you are looking for a cookbook and resource book to add to your gluten-free library, I highly recommend Cooking for Your Gluten-Free Teen: Everyday Foods the Whole Family Will Love.
The Cookbook Basics:
Paperback (8.9 x 7.5 inches)
192 pages, 100+ recipes
About the authors: Carlyn Berghoff McClure, CEO of the Berghoff Catering and Restaurant Group, is the fourth generation to continue the Berghoff legacy, operating the famous Berghoff restaurants and also catering out of Chicago's century-old Berghoff building. She is an author (The Berghoff Family Cookbook, The Berghoff Café Cookbook), a chef and restaurateur, a caterer, and a wife and mother. Sarah Berghoff McClure is the second daughter of Jim McClure and Carlyn Berghoff McClure. In 2009, she became critically ill, lost ten pounds suddenly, and was diagnosed with celiac disease. Since then she has regained her health and vitality, eating gluten free. Dr. Suzanne P. Nelson, MD, MPH, specializes in pediatric gastroenterolgy and is Assistant Professor of Clinical Pediatrics, The Feinberg School of Medicine, Northwestern University in Chicago, Illinois. Nancy Ross Ryan served as the writer for The Berghoff Family Cookbook and The Berghoff Café Cookbook. She is the founder of Fresh Food Writing in Chicago, Illinois, and specializes in food writing and recipe development.
Cooking for Your Gluten-Free Teen
Filed Under: Andrews McMeel Publishing, Cooks, EA, Featured Cookbooks, Publishers
« Chicken Noodle Soup {Recipe}
{Today's Cookbook}
Coolhaus Ice Cream Book: Custom-Built Sandwiches with Crazy-Good Combos of Cookies, Ice Creams, Gelatos, and Sorbets »


Today we move from the Karpas peninsula after eleven days of relentless dawn to dusk searching for migrants and rarities. We have had a good trip in this part of the island with over 150 quality species logged but the only rarity to report was the Isabelline Shrike - small reward and somewhat a surprise for 520 man hours of birding !
We now make our way back to the north west of the island at the well known migration watchpoint at Cape Kournikatis (west of Girne). On the way we stopped at Kouklia and photo'd these Wood Sandpipers. The Red-veined Darters were still present in big numbers. We also found the Slender Skimmer dragonfly (bottom image).
There was no surprise at the airport to find our flight delayed due to the Icelandic volcano. Thus we had one more day at Kournikatis. We were impressed with this site; it is for sure an easy place to bird with no difficult juniper forest to contend with. Reading other blogs, this cape certainly turns up the numbers and we were pleased to see a flock of 60 Ortolan Buntings and a single Cretzschmar's.
Super shots Steve the dragonflies are great.


text:
SHINYL.CO.UK
ADY CRAMPTON CHATS TO THE STARS
Gerald Alston of The Manhattans
When Gerald was asked to lend his PA equipment to local band The Manhattans for a performance in his school there was no way he could have known that less than a year later he would join them as lead vocalist, and be attracting sell-out audiences around the world.
Here Gerald chats about his life in music with the Manhattans, his solo career at Motown and beyond, his love of Sam Cooke and a return to his gospel roots
https://www.shinyl.co.uk/wp-content/uploads/2020/11/gerald-alston-shinyl-170.mp3
The Manhattans featuring Gerald Alston are still performing and recording, with two brand new singles released and an album on the way.
Why not hook up with the guys on social media here and visit their website here
Why not browse the many other interviews on this site and get to know the back stories to the artists you know and love
Jerry 'Swamp Dogg' Williams
Best known in Europe for his northern soul classic 'If You Ask Me', Jerry's recording career began as a child musician in 1954. He recorded his debut solo release just 6 years later and here gives a humerous insight into grinding out a living in the 60s. He goes on to...
Kim Weston
Detroit soul legend Kim Weston's recording career began at Motown's Divinity label as part of the gospel group Wright Special before signing with them as a solo artist. Here Kim chats about her life in music as a songwriter, performer, record label owner, radio...
The Ritchie Family
The Ritchie Family is a Philadelphia based vocal group steeped in disco history. They achieved several hits during the disco era including the dance anthem 'Best Disco In Town'. That remains one of the biggest selling disco releases ever ! Here, original members...
Click here for a full archive of interviews


Most fire accidents at home or at work can be prevented by taking some basic and simple precautions. There are different types of fire that need to be approached differently, depending on the location of the fire. That being said, one should be aware of building fires, industrial and transport fires, and bush fires. In case of an unforeseen emergency, businesses need to come up plans and procedures in order to recover, and one of the things they definitely need is some suitable firefighting equipment.
Our company, Extinct Fire Engineers, has grown into one of the best fire fighting and service providers in India and it specializes in the most advanced Turnkey fire protection systems. We have been working for more than twenty years with one goal, and that is to exceed our clients' expectations. We aim towards preserving the environment and helping people lower the risk of emergency incidents and hazards.
Over the years, our business has developed rapidly and we have built a comprehensive range of high quality products and services. This has come as a result of our hard work, great customer service and unfailing team effort. When it comes to Fire Services In India, we offer a complete selection of industrial safety and life-saving equipment. Our firefighting systems and processes are highly developed, as well as safety-focused, while our management team is concentrated on quality management systems and safety in general.
We have a fire protection division that is exclusively into the field of fire protection, starting from the design, continuing with expert consultancy and ending with implementation. Our years of experience and great expertise allow us to provide fire fighting services to lots of public buildings like schools, hospitals, malls, banks or multiplexes. We have experienced and skilled professionals that strive to deal with fire as soon as possible and by rendering these services, we have earned huge appreciation on the market.


In this blog, we're sharing some more details about the recently announced team focus on ships and modules, and will show you some specific changes coming this October in the EVE Online: Lifeblood expansion.
Let's start with talking a little about how we do balance work and what is changing.
The most important thing to know is that game balance is a complex effort which incorporates every gameplay team working on EVE. Whether our devs are working on structures, events, ships, modules, territory ownership, or the new player experience, you can be sure that there will be reverberations in the economy, in the combat meta, and in activity levels across all different types of space. Balance work requires careful, widespread consideration and it's a constant effort by all parties involved to adjust EVE as carefully as possible.
The changes we are making now are meant to increase our overall bandwidth and investment in ship and module related work specifically. The Council of Stellar Management (CSM) has been advocating heavily for more rapid and consistent balance changes, and we agree that it's a good time to put more focus on this area. We are also allocating more time to experiment with totally new mechanics and concepts for ships and modules. Rather than forming a totally new team, Team Size Matters will be shifting priorities in this direction.
You should still expect to see balance work from all the EVE dev teams, but hopefully in the coming months you see more focus on ships and module balance and some brand-new mechanics introduced to EVE.
The Rifter has always been the most popular Minmatar frigate (and still is), but it isn't performing quite as well as its competition. We are going to switch the utility high, which doesn't get used very often, to a low. Hopefully this makes way for some new options as an armor brawler or an artillery platform that will serve to separate the Rifter from the Slasher and the Breacher.
The Dragoon is a bit of a cap warfare specialist, so we don't expect huge usage, but it's still be lower than we want. We are proposing to keep the theme and overall feel of the Dragoon but move one of its high slots to a mid so it has more flexible control and capacitor options to go along with its slower fighting style. A little extra fitting room will help as well.
Not to be rude, but the Corax is a bit on the heavy side. We're going to lower its mass significantly and it is still going to be 50,000 kg heavier than the second heaviest destroyer. The added speed and agility should make the Corax feel much better to fly. We're also going to turn that burn into beef where it counts by giving the Corax some more shield HP.
The Arbitrator is in the strange position of being sole the representative for secondary weapons systems in the Amarr tech one cruiser lineup, while also being in the ewar category. We are going to give the Arbitrator fitting room so it can be used more easily as generalist combat ships alongside its ewar support role. We are also going to bump lock range so they it a more realistic shot at putting those ewar bonuses to use. The Arbitrator is going to pick up an extra launcher slot as well to make missile focused fits stronger.
The Bellicose is is much the same position as the Arbitrator, as the sole representative for secondary weapons systems in the Minmatar tech one cruiser lineup. It will also receive more fitting room so that it becomes better suited to an all around combat role, as well as increased lock range to be able to put its ewar bonuses to better use.
The Omen seems to come up a bit short on fitting and capacitor in many situations, even though the ship has a lot of potential. We're going to bump the fitting room up and give it a larger capacitor pool to give cap boosterless fits more time space to work with.
The Stabber has always gotten a pretty bad rap and that's reflected in its popularity. That said, it's a solid support killer and shows very high kill efficiency among those pilots who do use it. After considering a few options we are going to go with the Tempest treatment rather than change the slot layout. Frigate Pilots beware!
The Tristan is quite the little monster. It offers extreme versatility and power in many configurations. We don't think it needs massive changes though, as we are happy to see a ship where so many fitting strategies and gameplay styles are viable. A small increase to mass will slow it down slightly, giving other pilots a little more hope of catching up and pinning it down.
Like the Tristan, the Vexor is extremely popular due to its versatility. In the case of the Vexor we do feel that it is too easy to fit an enormous tank without sacrificing much damage due to all the free fitting room afforded by drone warfare not requiring high slot weapons. We are going to bring the power grid down to put more pressure on big tank fits.
We hope this pass, while not addressing every balance issue, sets a good tone for the kind of changes we want to make. We haven't nailed down the next set of changes in detail, but we are looking at Tech I Battlecruisers and Battleships, Pirate and Navy faction ships, and Tech II classes like Assault Frigates and Heavy Assault Cruisers all as potential candidates. We'll keep you up to date as we progress and hope to have consistent, incremental changes like these coming at a quick pace alongside long-term reworks and totally new ships.


text:
Glaciar Ahlmann () es el más meridional de dos glaciares que fluyen hacia el este en Seligman Inlet, en la costa este de la Tierra de Graham. El glaciar fue fotografiado desde el aire en 1940 por el Programa Antártico de los Estados Unidos, y fue trazado en 1947 por la British Antarctic Survey, que lo nombraron por el profesor Hans Wilhelmsson Ahlmann, glaciólogo y geógrafo de Suecia.

Fuente
 Este artículo incorpora material de dominio público desde el documento del Servicio Geológico de Estados Unidos: "Glaciar Ahlmann" (contenido del Sistema de Información de Nombres Geográficos).

Ahlmann

redpajama_set_name: RedPajamaWikipedia


Professional Resumes Format Perfect Resume Format Examples Fresh Elegant Languages Resume Fresh Point is just one of the many collections of Sample Resume Reference that we have on this website. We have a lot of Sample Resume Template or Cover Letter Template and any other things concerning in this website. We're not just providing info about , but , you can get a lot more reference to create your Resume and Cover Letter as well. So , don't forget to keep visiting Edmyedguide24.com to get the latest update about Sample Resume Format , Cover Letter Sample , Sample Resume Template and more.
Professional Resumes Format Perfect Resume Format Examples Fresh Elegant Languages Resume Fresh Point was posted in January 24, 2018 at 10:35 pm. Professional Resumes Format Perfect Resume Format Examples Fresh Elegant Languages Resume Fresh Point has viewed by 43 users. Click it and download the Professional Resumes Format Perfect Resume Format Examples Fresh Elegant Languages Resume Fresh Point.
Resume Guide, List Of Usa Resume Format was posted January 25, 2018 at 2:35 pm by Edmyedguide24.com . More over List Of Usa Resume Format has viewed by 2753 visitor.
Resume Guide, Simple Resume Template For First Job was posted January 5, 2018 at 3:16 pm by Edmyedguide24.com . More over Simple Resume Template For First Job has viewed by 2835 visitor.
Resume Guide, Book Of Www Resume Com Format was posted January 8, 2018 at 10:53 am by Edmyedguide24.com . More over Book Of Www Resume Com Format has viewed by 3345 visitor.


text:
The Ocean's 11/12/13 Trilogy Review – Some Clever Heists In A Pinch
Posted by N on August 10, 2012 at 4:19 pm
They sure did bring in a ton of people, didn't they?
One cool part about using the Nexus 7 to consume content, as it was intended to, is its easy access to super cheap video rentals almost every night. I took the opportunity to brush up on the Ocean's 11 trilogy, which for the past decade had been Soderbergh's "commercial" movies sandwiched between his quirky experiments like Bubble and The Good German. The Ocean's films often received a brow-beating for their lavish use of their ensemble cast, including George Clooney and Brad Pitt as the ringleaders of the operation, as the cinematic equivalent of a celebrity circle-jerk, never minding that the original film featured Sinatra and the Rat Pack in virtually the same function. Thankfully, Soderbergh's films were a bit more substantial than that.
Ocean's 11 (2001)
I caught the film in college and I loved it immediately. Danny Ocean (Clooney) has just been freed from prison and he has a plan: hit up Las Vegas' Bellagio vault, which serves two other casinos, for a cool $150 million. The task is impossible of course, but he has Rusty (Brad Pitt) as his right-hand man to assemble a team to draft and set their impressive plan in motion. A variety of tricks and bank robber lingo flies around as they overcome a variety of issues, including the fact that Danny's ex-wife Tess (Julia Roberts) is dating Terry Benedict (Andy Garcia) who owns the properties the guys are trying to hit. That the crew is ultimately able to perform the feat with little resistance (and little cinematic tension) is offset by how slick the whole plan is. There are so many clever twists and hilarious jabs that it compensates for how over-written the film is at times. The film is amazing fun.
I'd honestly never seen this until a few nights ago, but I knew it was the weak point of the series. This is where the series gets arty as Soderbergh trades in many of his vibrant colors and motion titles for static, slender Helvetica title cards (something that would be his trademark). Through the help of the Night Fox (Vincent Cassel), Benedict confronts Ocean's group from the original film in their new wealthy positions and demands they pay him back plus interest. From here, they fly to Amsterdam to steal a valuable stock certificate. But, the heist isn't nearly as exciting and Amsterdam simply isn't as vibrant a backdrop as the neon flashbang of Vegas. Still not terribly interesting is Catherine Zeta-Jones' role as Europol investigator and Rusty's former girlfriend who hounds them from stop to stop. Then there's the copout of an ending that makes the entire second act a complete waste of time and Julia Roberts, as Tess Ocean, impersonating Julia Roberts. Definitely a low point for the series. If it weren't for some narrative hooks in the next film, probably skippable altogether.
A diminished return to form, we return to Vegas after Al Pacino's Willy Banks has done in the gang's financier, Reuben (Elliott Gould). So in a spit of clever, flashy revenge, the gang takes on Bank in his recently completed casino, titled, uh, The Bank. But they're not entirely up for the fortune, they just want to bring the casino down while the patrons walk out with the funds. To that end, they re-enlist Eddie Izzard's Roman, who serves as a technical adviser, and one-time villain Terry Benedict to fund their tunnel-carving drill when their first one fails. The film doesn't fall far from the tree, but it's still worthy rent as-is. Highlight: Banks' aid Sponder (Barkin) falls for Matt Damon in a prosthetic nose. Double entendres abound! Okay, here's another: doofus Mormon brothers Turk (Scott Caan) and Virgil (Casey Affleck) loudly kicking out a hotel reviewer.
Short URL: http://fez.nu/nFzjA


text:
Bogotá Schools Partner with InfoComm International for Audio-Visual Education
By :Jared Wade
Tag: Almacenes Audiovisuales, bogotá, education, ICIF, InfoComm International, International Communications Industries Foundation, Laura Diaz, Sofia Arreola
Bogotá has partnered with a U.S.-based trade association to bring audiovisual education to some 400 students in capital. InfoComm International, a group headquartered in Fairfax, Virginia, that represents firms in the global audio-visual industry, has signed a deal with the city's education minister that will allow a select group of high school sophomores and juniors to take online classes and, eventually, an exam to become a certified technician in the field.
This aligns with Bogotá's push to provide more specialized high-tech training in an attempt to expand the labor poor. While adding 400 to the workforce won't change the field overnight, it will impact this niche market if the students take to the training and do pursue a career in the AV world.
Bogotá's education district came across the association's student-engagement programs in Mexico and realized bringing something similar to the capital could be a great opportunity for students, said Laura Diaz, an advisor to Bogotá's secretary of education.
"Students enrolled in our AV program will be better prepared to pursue their passion in this field after they graduate high school," said Diaz. "This is our first partnership of this kind with an international organization, and we have very high expectations for its impact on our students."
InfoComm was happy to extend the program further southward. In 2013, the group partnered with the Instituto Politécnico Nacional to develop a program that invited students to attend TecnoMultimedia InfoComm Mexico for a tour of the trade show floor. As will occur in Bogotá, some are then selected enroll in online courses and take the AV Technologist Certificate exam.
"For me, InfoComm's program for students is more than online courses or an internship — it's a process of discovery and growth," said Sofia Arreola, application engineer for Almacenes Audiovisuales of Colonia Juarez, Mexico.
Arreola speaks from experience. She was one of the students selected for the program in Mexico and believes it was a big reason that she was able to secure a job at Almacenes.
"When I finished my training, the company Grupo Niza offered me and other students internships. After my internship, and with the support of my mentor, Oscar Lopez, I applied for an opportunity to work in sales and design for Almacenes Audiovisuales. I've been working there now for almost a year as an application engineer."
Officials in Bogotá and InfoComm executives are both hoping that Colombian kids can follow the same path as Sofia. "This program will provide students with the foundation for their professional development in the AV industry," said Scott Wills, senior director of international member services at InfoComm International. "Students will enrich their resume and have the opportunity to obtain a certificate recognized by members of the pro-AV industry."
DON'T MISS OUT: The only English-language Colombia news that's strictly business, markets, & investment!
Join global executives & investors by subscribing to our FREE weekly updates
I agree to have my personal information transferred to MailChimp ( more information ) DISCLAIMER: Protección de Datos Personales Artículo 15 de la Constitución Política de Colombia, ley 1581 de 2012 y decreto 1377 de 2013.
We will never spam you or share your email address ¡Nunca Jamás!
Jared Wade is editor in chief of Finance Colombia. He is a Bogotá-based journalist with 15 years of experience covering topics including business, financial services, Latin America, and sports. Email him at jared.wade(at) financecolombia.com or follow him on Twitter at @Jared_Wade.
Colombian President Juan Manuel Santos Wins Nobel Peace Prize
Bogotá Mayor Peñalosa and Urban Planners Assess Transportation Challenges and Potential Benefits of High Population Density
Colombia Enacts Immediate Emergency Travel Ban On Travel From United Kingdom
Avianca Changes Redemption Model, Making It More Expensive To Earn LifeMiles & Difficult To Attain Elite Status
Israeli Drug Kingpin Gabriel Kenigsberger Captured In Bogotá


28 And it shall come to pass afterward, that I will pour out my spirit upon all flesh; and your sons and your daughters shall prophesy, your old men shall dream dreams, your young men shall see visions: 29 And also upon the servants and upon the handmaids in those days will I pour out my spirit.30 And I will shew wonders in the heavens and in the earth, blood, and fire, and pillars of smoke.
We are on a mission to win souls for Christ by preaching the unadulterated Word of God with resurrection power to people all around the world. We are also passionately committed to sharing the love of Jesus Christ to those who are hurting by conducting various evangelistic outreaches locally and globally.
There is no better time than right now to become an End Time Apostolic Network covenant member.
Beloved, you won't regret your decision to support this global vision. God promised us that this IS a season of double fruitfulness for us and for all those who labor with us to bring souls into the Kingdom of God. The miraculous part of this promise is that when God says double, He means DOUBLE!
Do you remember the day you accepted Jesus Christ as your Lord and Savior? Wouldn't you like others around the world to have that same transformational experience? Now is the time. Now IS the time to move as God directs.


Literature References: One of the most widespread carotenoid alcohols in nature. Occurs together and is isomeric with xanthophyll, q.v. It is the pigment of yellow corn Zea mays L., Gramineae. Isoln from yellow corn grits: Karrer et al., Helv. Chim. Acta 13, 268 (1930). Isoln by chromatography: Kuhn, Grundmann, Ber. 67, 596 (1934). Isoln from algae, bacteria: A. J. Aasen et al., Acta Chem. Scand. 26, 404 (1972). Isoln of dipalmitate from Physalis petal: Kuhn et al., Ber. 63, 1489 (1930). Does not possess vitamin A potency: Schumacher et al., Poult. Sci. 23, 529 (1944). Stereochemistry: Zechmeister, Chem. Rev. 34, 267 (1944). Abs config of natural zeaxanthin: T. E. de Ville et al., Chem. Commun. 1969, 1311; J. R. Hlubucek et al., J. Chem. Soc. Perkin Trans. 1 1974, 848. Total synthesis: Isler et al., Helv. Chim. Acta 39, 2041 (1956); 40, 456 (1957); Loeber et al., J. Chem. Soc. C 1971, 404; A. Rüttimann, H. Mayer, Helv. Chim. Acta 63, 1456 (1980); P. R. Ellis et al., ibid. 64, 1092 (1980); E. Widmer et al., ibid. 65, 944, 958 (1982). Sepn of configurational isomers by HPLC: A. Rüttimann et al., J. High Resolut. Chromatogr. Chromatogr. Commun. 6, 612 (1983). First isoln of enantiomeric and meso-zeaxanthin in nature: T. Maoka et al., Comp. Biochem. Physiol. 83B, 121 (1986). Mfg procedure: Isler et al., US 2917539 (1959 to Hoffmann-La Roche). Reviews: Zechmeister, Carotinoide (Berlin, 1934); Mayer, The Chemistry of Natural Coloring Matters (New York, 1943); Karrer, Jucker, Carotenoids (New York, 1950).
Properties: Yellow rhombic plates with steel-blue metallic luster from ethanol, mp 207° (Zechmeister); mp 215.5° (Kuhn). Optically inactive. Absorption bands (ethanol) 483, 451.5 nm. Practically insol in water. Slightly sol in petr ether, methanol; sol in carbon disulfide, benzene, chloroform, carbon tetrachloride, pyridine, ethyl acetate; sol in glacial acetic acid upon addition of hexane. Less sol in boiling methanol (1:1550) than xanthophyll.
Properties: Fine yellow or red needles from benzene, mp 97°.


Birmingham Watercolour Skyline Framed Artwork. This Michael Tompsett piece features Birmingham's arresting skyline in a Rust effect colour scheme giving it a vintage feel. Printed on museum-quality canvas, it's an updated take on an old-world art form that will offer life and contrast in any space.


Cattle Fence/Field Fence,Temporary Fence,Razor Barbed Wire,Anping Jintong Wire Mesh Products Co., Ltd.
Anping Jintong Wire Mesh Products Co.,Ltd. was established in 1992, located in Anping county which is well known as home of wire meshes. The company is a high-tech enterprise and also an important export company in China. We supply all kinds of wire mesh products: perforated sheet, welded wire mesh, chain link fence, crimped wire mesh, Holland wire mesh, cattle fence, gabion box, barbed wire mesh, razor barbed wire, steel grating, expanded wire mesh, hesco, fence post, fence protective net, metal plate net, all kinds of wire mesh machines and so on. With the development in production technology, all kinds of wire mesh and wire that we produced have reached advanced level, and the products are exported to Southeast Asia, the Middle East, Canada, the United States and other countries and regions. Our company gets the best reputations from most of our clients relying on high quality, good reputation, and high quality after sales service. Over the years, our company adheres to the "survival depending on quality, development depending on reputation". By virtue of excellent quality, good reputation, quality service and reasonable prices, we have expanded the market. Any inquiry from you is welcomed. We will make every effort to meet your demands and make sure that your requirements will be satisfied as early as possible.


Just finally getting around to watching Anthony Bourdain's The Layover: Dublin, which aired Monday and I somehow managed to get filmed for when I was in Dublin this summer (for background details on filming, see a few posts below this). You can see me for a second back-to at Gig's, drinking wine across from a man in a blue coat (my friend Georg). It was amazing to see how many places showcased were in Ballsbridge (where I worked) and how I did and visited many of the exact things Bourdain showcased (like the Gravedigger tour, and the actor that we met who was from Cork–shoutout to Aileen, my tour buddy from Cork!). Despite the fact I was working every weekday I was there, I managed to do SO MANY things (which I still intend on writing about eventually). I feel proud for doing most of it alone, and also incredibly grateful and blessed to have had the opportunity to do so. When I started this blog in 2009, I had no idea how many opportunities I would have and how many places I would go. I certainly had no expectations as to how I would manage to continue to travel 3 years later, and the ways in which I would do so. I guess I can officially say I did Dublin right.


George Clooney is set to star in and direct a six-episode adaptation of the Joseph Heller novel Catch-22.
Previously adapted as a 1970 film directed by Mike Nichols, this Paramount Television/Anonymous Content production will be penned by Luke Davies (Lion) and David Michôd (TV's Animal Kingdom), THR.com reports. The limited series will be shopped to prospective outlets in December.
An Oscar winner, Clooney's previous TV credits include, of course, ER (where he earned two Emmy nods), 2000's live broadcast of Fail Safe, Sisters, Roseanne and The Facts of Life.


Bickers Automotive is a domestically owned and operated business in central Warrnambool. The aircraft rose and a stall warning sounded, however he continued to drag again heedlessly. Because the aircraft climbed sharply, it misplaced velocity. The airspeed sensors started working once more, providing the crew with correct numbers. But Bonin continued to sluggish the airplane. The jet stalled and began to fall. If he had simply let go of the management, the A330 would doubtless have righted itself. However he didn't. The plane dropped 35,000 feet in three minutes earlier than hitting the ocean. All 228 passengers and crew members died.
I am Shrikant from India. I have a suggestion from Dar Engineering as design engineer in Riyadh. I have 8 yrs experience in energy plant design. They supplied me 15000 SAR per thirty days together with HRA & Automotive allowance. I need to know whether or not this company Dar Engineering is reliable one in KSA and wage which have been provided is okay as per KSA salaries. Did your dad and mom keep your childhood drawings on the fridge door or a box in the attic? An Academic Portfolio is an identical assortment of work, at a better degree.
Dual-product" market, the place media suppliers sell content material to consumers and eyeballs" to advertisers (Napoli, 2003). To not point out the numerous computer systems that also exist to handle the passengers comforts and leisure, as they drive. Different workforce members included Regina Jorgenson (UCSD graduate student in physics); Carl Heiles (professor of astronomy at UC Berkeley); Timothy Robishaw (graduate pupil at Berkeley). This research was funded by National Science Foundation.
Engine oil stop leak will not fix this, however that's okay as a result of it is simple to repair in any other case. In your oil pan, on the underside of the automobile, is a screw in plug. It exists in order that once you want your oil changed, the plug could be unscrewed and all of the old oil will stream out. Then the plug can be screwed in again and new oil put in. If this screw is leaky, you should purchase a brand new one and have it replaced the subsequent time you get your oil modified.
Program prepares individuals to have interaction within the servicing and upkeep of all varieties of vehicles. And what of the particular motorist, what does 2008 have in retailer for us? Effectively how about additional will increase in automobile tax, more toll roads, increased congestion fees and still a seeming lack of a viable alternative to road use by means of dependable, clean and secure public transport.