text:
Joyeux Noel Film - the true message of Christmas portrayed
Click on image above to view the singing by a German soldier of 'Stille Nacht' & 'Adeste Fideles', the latter to the accompaniment of bagpipes played by Scottish soldiers
The French 2005 production 'Joyeux Noel' is one of the most emotionally captivating films that I have ever witnessed. In my humble opinion, it captures the true message of Christmas, namely 'Peace and Goodwill To All Peoples'.
May I wish you and yours a joyful festive holiday (still a few days left!) and a progressive New Year.
Background to the film:
Along the Western Front on Christmas Eve 1914, soldiers from German, Scottish, English and French regiments organised unofficial ceasefires. Troops ventured into No Man's Land to exchange gifts, play football, sing songs together and bury their dead.
Ordinary soldiers saw that they were one and the same, no matter what was the colour of the uniform.
Click on image above to hear Scottish soldier pipers playing "I'm Dreaming of Home"
Generals on both sides were incensed and scared that this laying down of arms and friendship across the divide would spread. So they ensured that no such large scale fraternisation ever happened again by ordering artillery barrages during subsequent Christmases. In an insane brutal war, there were already 3.5 million casualties by the end of 1914. Another 32 million would die before the war ended.
The leaders of the main warring nations dressed up the conflict as a 'War To End Wars', a struggle for peace and liberty when in reality they were only concerned about expanding their empires. Whilst the 'Allies' promoted the war as a struggle to free small nations (e.g. Belgium) from German, Austrian and Turkish tyranny, World War One actually resulted in the victorious French and British dividing up the Middle East between them against the wishes of the local populations.
The horrible legacy of this imperial carve up and the promises made to financiers and oilmen during and soon after WW1 are the conflicts in Iraq, Libya and Palestine that we have today.
John Lennon and Yoko Ono recognised that throughout the ages, war and conflict were used by those in power to kill, butcher and maim peoples and the planet in order to maintain and expand their control. Their 1971 classic, Happy Christmas, War is Over (below) perfectly encapsulates this message
Peace, Justice and Equality to All Men and Women!
Click on image above to hear John, Yoko & Plastic Ono Band sing their 1971 anti-war song 'Happy Christmas, War is Over'
Labels: "happy christmas, anti-war, christmas, christmas truce 1914, imperialism, Iraq, israel, john lennon, Joyeux Noel, libya, palestine, peace, war is over, world war one, WW1
Galway- Potential to become Europe's 'Silicon Valley'
I was privileged to be granted recently the Galway Science Person of the Year 2012 award
So I decided to take advantage of this recognition by encouraging the relevant local stakeholders to work together to promote the city and environs as a Digital Galway Bay or as a European version of Silicon Valley, a concept that is perfectly achievable and that could easily capture the popular imagination.
The following is an article that I submitted to the media on why this concept is based on solid foundations
"A well known local science advocate believes that Galway should emulate its international status as an arts city by striving to become the European equivalent of California's Silicon Valley.
Presented with the 'Galway Science Person of the Year' 2012 Award at the recent Galway Science and Technology Festival for delivering a range of pioneering science and technology learning initiatives to schools, colleges and to communities, Brendan Smith believes passionately that the city possesses many of the key ingredients needed to transform the region into a leading global hub for smart technologies' innovation and development.
According to Brendan Smith, "Silicon Valley is located in the San Francisco Bay area and is home to many of the world's largest information technology corporations as well as thousands of small start-ups who have established a symbiotic relationship with third level colleges in the vicinity that provide the stream of young enthusiastic inventors, innovators, entrepreneurs, engineers and scientists needed to sustain their existence and success. Companies such as Hewlett Packard and Google grew out of the research work being undertaken by neighbouring university and research institutes.
Whilst it is the digital products and business aspects that largely define the identity of the Silicon Valley and environs, nevertheless there are other elements of the San Francisco Bay area that clearly played a crucial part in its evolution as the world's premier powerhouse of technology innovation.
Located on the west coast of the United States, the area is famed for its natural beauty that has engendered a 'quality of life' ethos amongst the inhabitants. The city of San Francisco has also long being characterized by political, environmental and social liberalism; possessing a strong progressive artistic, music, cultural and community solidarity dynamic with a youthful, student, cosmopolitan and outward-looking population.
Galway therefore bears an uncanny resemblance to San Francisco possessing many of its main traits in abundance. Our president Michael D Higgins could be said to be the personification of this image of Galway as visionary, vibrant, artistic, socially just and technology-savvy.
Many of the leading corporations in the biomedical and information technology sectors such as Avaya, Boston Scientific, Cisco, Electronic Arts, Hewlett-Packard, Medtronic, SAP and Valeo, are already based here with established links to research institutes located in GMIT and NUIG such as DERI, Ryan and REMEDI which are providing the scientific expertise to sustain their presence in Galway and underpin their status as leaders in cutting edge product development. DERI for instance has over one hundred and forty young experts from thirty three countries developing the next generation of the World Wide Web known as the Semantic Web.
There is also the presence locally of indigenous high tech manufacturing and services industries comprising Irish-owned companies such as Creganna and Storm Technologies.
But what is also an abiding feature of Galway is the deep sense of 'community solidarity' as well as the high level of volunteerism that exists amongst many of the prime 'movers and shakers' in the industrial, political, educational and local government sectors who have over the years collaborated under the auspices of the Galway Education Centre, Junior Achievement and the Galway Science and Technology Festival, to deliver important learning initiatives in schools and colleges across the Western region. In a modern industrial urban version of 'Meitheal' that was once the hallmark of traditional Irish rural community support, these visionaries have promoted and harnessed an army of young professional mentors from industry and third level colleges who give their time and energies to teach in primary and post-primary classrooms delivering science courses whilst acting as positive 'role models' for our young generation.
Such courses will equip our children with a range of skills, from using mathematics to fostering critical thinking, necessary for transforming Ireland from being a nation of 'digital users' into a nation of 'digital creators' that would export worldwide a series of beneficial Irish-made smart tech products and services.
These formal learning programmes are now being complimented by the activities of electronic and computer coding volunteer clubs such as 091 Labs and Coderdojo which are often established by young people themselves to provide informal after-school digital maker's environments where participants are encouraged to be creative and to experiment in new processes and ideas, writing software for instance for online games or to control the movements of robots.
The success of these initiatives is best shown by the dramatic uptake by schools in these mentoring courses as well as by the tens of thousands that attend the science shows and exhibitions during the annual two week Galway Science and Technology Festival.
Galway can rightly claim to be the country's first and premier 'Digital City', building on an unbroken tradition of computing innovation that dates back to 1971 when Digital Equipment Corporation (DEC), then the world's largest minicomputer company, opened its first European manufacturing facility in Mervue. This proud technology heritage is exemplified by the fact that the 'Computer and Communications Museum of Ireland', which pays tribute amongst other things to the oftentimes hidden role of Ireland, women and youth in communications development, is based in the city at DERI in NUI Galway.
Brendan Smith is the Education and Community Outreach Officer at the Digital Enterprise Research Institute (DERI) in NUI Galway. For over twelve years, he has coordinated an array of successful medical, environmental, digital heritage and web science projects for schools and communities through his work with DERI, Medtronic, Waterways Ireland, the Galway Education Centre, Galway County Council and the Galway Science and Technology Forum. He is co-founder of Coderdojo Galway, Conservation Volunteers Terryland Forest Park, Cumann na bhFear (Men's Shed Galway city), Ballinfoile Mór Community Organic Garden and curator of the 'Computer and Communications Museum of Ireland'.
As well as being a previous recipient in 2006 of the Galway 'Science Person of the Year' Award, Brendan has also earned other accolades including the Galway City Mayoral Community Award, the ITAG 'Computing in Schools' Award and the Apple Distinguished Educator(ADE).
Labels: Galway City, galway coderdojo, galway education, galway science and technology festival, innovation, ireland, silicon valley
A Jesus in Today's Palestine
Could the story of the Nativity happen today in Palestine?
Unlikely.
For would a poor young unmarried teenage girl in the West Bank, who had just announced that she was pregnant, not become a victim of male 'honour'?
Even if she did survive, she and her new husband would have found it extremely difficult to go from Nazareth to Bethlehem due to road-blocks and travel restrictions placed on local inhabitants by the occupying Israeli military; the shepherds would have probably lost their grazing lands to compulsory acquisition for the erection of the 'Security Wall' and Jewish colonial settlements; and the three wise men from Iraq (Mesopotamia) would have being denied entry visas.
But even if the birth did manage to occur in Bethlehem, Israeli military border controls would have probably barred Mary's family from crossing into Egypt to escape religious persecution thus sealing their faith.
Yet there is no doubt that an adult Jesus of the New Testament and of a modern Middle East would have ended their lives in a similar terrible fashion. For anyone preaching a message of peace and love, a call for people's liberation from poverty and oppression, of respect for all races and creeds, of freedom for prisoners, and an end to the oppression of women would have made himself both an enemy of the state and of a religious fundamentalism that preaches intolerance towards non-believers and death to all apostates and blasphemers.
Yes, death would have come either from an American-made laser guided missile or from execution by a Islamic death squad.
Labels: arab christians, christ, christianity, gaza, islamic fundamentalism, israel, jesus, jewish colonialism, palestine, west bank
Joyeux Noel Film - the true message of Christmas p...


text:
Q: How to scrape a form out a website using beautifulSoup? So far we have made this code to scrape the website: http://www.theft-alerts.com
In the website is a form and in that form a frmSFair. We need all the stolen artworks information. Can someone help?
If we scrape the form by:
import urllib2
from bs4 import BeautifulSoup

connection = urllib2.urlopen('http://www.theft-alerts.com')
soup = BeautifulSoup(connection, "html.parser")

form = soup.find_all(span="table")
for form in soup.form.stripped_strings:
    print(str(form.encode('utf-7')))

Output:
Sign up for our newsletter
Add email address below
See a sample eSalvo

The code picks the table newsletter on the ride side of the website and we need the table in the middle. This information:
STOLEN : CHERUB IN MARBLE, PART OF A FOUNTAIN
Stolen from Canterbury, Kent, UK on 8 February 2016
Item : A copy of Verrocchio's cupid - winged cherub standing on one leg holding a dolphin - in white marble which formed the top part of a fountain. approximately 3 foot high. Item has discoloured due to weathering with some lichen growth.
Any info to : PC 12994 Canterbury. Tel 01622 690690
Messages : Send a message
Crime Ref : ZY - 4370 - 16
No of items stolen : 1
images:
Location : UK > Kent
Category : STATUARY
ID : 93578
User : 53329 ; Diyer/Homeowner/Private ; (Registered SalvoWEB user for 1 month)
Date Created : 10 Feb 2016 14:36:23
Date Modified : 11 Feb 2016 16:40:06;

A: To get the text from each:
for sp in soup.select("table div.itemspacingmodified"):
    for wd in sp.select("div.itemindentmodified"):
        text = wd.text
        if not text.startswith("Images :"):
            print(text)

Which gives you:
STOLEN : CHERUB IN MARBLE, PART OF A FOUNTAIN
Stolen from Canterbury, Kent, UK on 8 February 2016
Item : A copy of Verrocchio's cupid - winged cherub standing on one leg holding a dolphin - in white marble which formed the top part of a fountain. approximately 3 foot high. Item has discoloured due to weathering with some lichen growth.
Any info to : PC 12994 Canterbury. Tel 01622 690690
Messages : Send a message
Crime Ref : ZY - 4370 - 16

No of items stolen : 1

Location : UK > KentCategory : STATUARYID : 93578User : 53329 ; Diyer/Homeowner/Private ;  (Registered SalvoWEB user for 1 month)Date Created : 10 Feb 2016 14:36:23Date Modified : 11 Feb 2016 16:40:06;
STOLEN : OVER 70 ANTIQUE YORK STONE PAVING SLABS
Stolen from Steyning on 30th October 2015
Item : Antique York Stone paving slabs stolen from historic landscaped garden overnight. Truck driven through electric gates to gain access.
Any info to : PCSO Stewart Metcalfe. Sussex Police mob. 07912 894151
Messages : Send a message
Web URL : https://stmarysbramber.co.uk

Crime Ref : 47150140173

No of items stolen : 70

Recovered Details : None

Location : UK > West SussexCategory : FLAGSTONES & FLOOR TILESID : 92311User : 52866 ; Diyer/Homeowner/Private ;  (Registered SalvoWEB user for 3 months)Date Created : 05 Nov 2015 12:04:50Date Modified : 05 Nov 2015 12:15:10;
STOLEN : GARDEN STATUE OF BOY
Stolen from Bridgnorth, Shropshire on 20th / 21st Aug 2015
Item : Small lead,(I think ! ),statue of a boy standing on a stone plinth
Any info to : West Mercia Police - Crime No 22FJ59981W15
Messages : Send a message
Crime Ref : 22FJ59981W15

No of items stolen : 2

Recovered Details : NA

Location : UK > ShropshireCategory : STATUARYID : 91278User : 52457 ; Diyer/Homeowner/Private ;  (Registered SalvoWEB user for 6 months)Date Reset : 10 Sep 2015 00:30:01Date Modified : 26 Aug 2015 15:07:31;  EL from 26 Aug 2015 to 09 Sep 2015 26Aug15;EL History : 26 Aug 2015 10:52:49;
STOLEN : YORKSTONE FLAGSTONES
Stolen from Nr Sevenoaks, Kent, UK on 26 Aug 2015
Item : Flagstones from  St Mary's Church, Sundridge, Sevenoaks, Kent TN14 6EA. 70 in total. They are old Yorkstone flagstones approx. 2" thick, the sizes are as follows:

24 x   3'x2'
14 x   2'x1.5'
10 x   2'x2'
10 x  2'x1'
12 x  1'x1'
Any info to : Maidstone, Kent  Police station Tel: 101
Messages : Send a message
Crime Ref : YY/17519/15

No of items stolen : 70

Location : UK > KentCategory : FLAGSTONES & FLOOR TILESID : 91428User : 52513 ; Churches and Memorial Custodians ;  (Registered SalvoWEB user for 6 months)Date Created : 03 Sep 2015 14:48:45Date Modified : 04 Sep 2015 09:34:13;
STOLEN : RED STANDSTONE BIRDBATH
Stolen from Watlington, Oxfordshire UK on 16 July 2015
Item : A red sandstone bird bath with applied bronze decoration and a central bronze figure of a young girl on a dolphin by Richard Garbe
Overall height 4'3" (129.5 cm), Figure height 1' 3" (38 cm)
Square at bowl 1'3" (38 cm) Square at base 1'4" (40.4 cm)
Any info to : R McIntyre, PC 0200, Wallingford
Messages : Send a message
Crime Ref : 4315016713

No of items stolen : 1

Location : UK > OxfordshireCategory : STATUARYID : 89824User : 52054 ; Diyer/Homeowner/Private ;  (Registered SalvoWEB user for 6 months)Date Reset : 13 Jul 2015 00:30:02Date Modified : 21 Jun 2015 20:58:33;  EL from 21 Jun 2015 to 12 Jul 2015 21Jun15;EL History : 21 Jun 2015 20:50:51;
STOLEN : STONE SCULPTURE - STATUE IS OF A PROPHET
Stolen from Belton, Loughbrough on 05/05/2015
Item : Statue is of a Prophet
5ft tall, this has been sympathetically restored by stonemason using a local stone which is very similar to the original stone.
The statue is 63" tall and weighs around ½ ton

Any info to : 3046515
Messages : Send a message
Crime Ref : 3046515

No of items stolen : 1

Location : UK > LeicestershireCategory : GARDENID : 89030User : 51750 ; Professional/Architect/Designer/Media/Film/TV ;  (Registered SalvoWEB user for 6 months)Date Created : 06 May 2015 15:38:24Date Modified : 06 May 2015 16:18:28;
STOLEN : WOOL CARPET/RUG IN VARIOUS COLOURS GEOMETRIC DESIGN
Stolen from Kensal Green on 21 April 2015
Item : A knotted wool rug or carpet, approx 118 by 76 inches, with a geometric design in light and dark brown, cream, pink and black.
Any info to : Metropolitan Police. Tel: 101 and quote crime ref: 6518176/15
Messages : Send a message
Crime Ref : 6518176/15

No of items stolen : 1

Location : UK > London North WestCategory : FURNITURE & MIRRORSID : 88924User : 34 ; Antique/Reclamation/Salvage Trade ;  (Salvo Code Dealer)Date Created : 29 Apr 2015 21:46:11Date Modified : 29 Apr 2015 22:24:45;
STOLEN : ANOTHER HISTORIC MILESTONE STOLEN AT REDBOURN, HERTS.
Stolen from Redbourn, Hertfordshire on 15th March 2015
Item : Very distinctive square section small Milepost, well-known to local residents and others, and featured in local publications. It was on the A5183 at St.Albans Road at Redbourn, opposite the Chequers Public House. It would originally have been installed by The Dunstable-St. Albans-London Turnpike Trust, established by Act of Parliament in 1722; after the abolition of this and other similar trusts responsibility would have fallen to the Parish Council, later passing to the County Council in the 20th Century.

This milestone has the Milestone Society Identity ref. HE_LH24. Its neighbour HE_LH23 was stolen two years ago.
Any info to : Hertfordshire Police 01707 354000
Messages : Send a message
Crime Ref : WCR/41/20187/15

No of items stolen : 1

Location : UK > WarwickshireCategory : Architectural STONE & TERRACOTTAID : 88606User : 46089 ; Charity/Government/Institution/Plc ;  (Registered SalvoWEB user for 2 years or more)Date Created : 10 Apr 2015 14:15:35Date Modified : 28 Apr 2015 16:52:03;
STOLEN : COALBROOKDALE GARDEN BENCH
Stolen from near Lichfield, Staffordshire UK on 25 February 2015
Item : A beautiful (most likely Coalbrookdale) cast iron 'Oak and Ivy' pattern bench. White painted with wooden slatted seat - but could now be a different colour. Approximate size 155 cm wide. Taken from a garden near Lichfield but possibly now in the Kent or South East region or anywhere in the country. Unusual and striking pattern. A £100 reward for first information which leads to recovery.
Any info to : PC 3864 Lichfield Tel 0300 123 4455
Messages : Send a message
Crime Ref : 27th February 2015 No 644

No of items stolen : 1

Location : UK > North YorkshireCategory : GARDENID : 87846User : 51382 ; Diyer/Homeowner/Private ;  (Registered SalvoWEB user for 1 year)Date Reset : 19 Mar 2015 00:30:01Date Modified : 11 Mar 2015 18:00:05;  EL from 03 Mar 2015 to 10 Mar 2015 03Mar15;  EL from 11 Mar 2015 to 18 Mar 2015 11Mar15;EL History : 02 Mar 2015 10:07:07;11 Mar 2015 00:30:01;
STOLEN : MILESTONE TAKEN FROM THE SIDE OF OLD LONDON ROAD, MALDON, ESSEX
Stolen from Maldon, Essex, UK on 31/1/15 - 11/3/15
Item : This is a milestone approximately 30 cms square but only around 90 total height including below surface. It was set into a concrete socket and would probably have needed lifting equipment to extract. It had received damage to one corner and face about six years ago, probably by carelessly operated grass-cutting machinery. It was situated opposite the cemetery in Old London Road (Grid Ref TL83740712) and was registered bythe Milestone Society with the ID ref EX_MGMN37
Any info to : PS 214 Maldon District Neighbourhood Policing Sergeant Direct Dial: 101 Ext 412104
Messages : Send a message
Crime Ref : CF0205920315

No of items stolen : 1

Location : UK > EssexCategory : Architectural STONE & TERRACOTTAID : 88150User : 46089 ; Charity/Government/Institution/Plc ;  (Registered SalvoWEB user for 2 years or more)Date Created : 16 Mar 2015 11:31:40Date Modified : 16 Mar 2015 11:45:20;
STOLEN :  MILESTONE PLATE STOLEN. A420 JUST WEST OF CHIPPENHAM, WILTSHIRE
Stolen from Chippenham, Wiltshire on Before Christmas 2014
Item : This stone was involved in a major traffic accident sometime before Christmas 2014 and is now not only leaning over at a worse angle than ever but is in three or more pieces.  The Cast iron plate on its front has disappeared, presumed stolen.
Any info to : Crime reference number 5410002796 reported by Wiltshire Council. Tel: 101 to report any news, quoting the ref. number.
Messages : Send a message
Crime Ref : 5410002796 Wiltshire

No of items stolen : 1

Location : UK > WiltshireCategory : Architectural METALWORKID : 86859User : 46089 ; Charity/Government/Institution/Plc ;  (Registered SalvoWEB user for 2 years or more)Date Created : 10 Jan 2015 17:26:33Date Modified : 28 Apr 2015 16:54:46;
STOLEN : A LARGE TAYLORS OF LOUGHBOROUGH BELL
Stolen from Bromyard on 7 August 2014
Item : The bell has a diameter of 37 1/2" is approx 3' tall weighs just shy of half a ton and was made by Taylor's of Loughborough in 1902. It is stamped with the numbers 232 and 11.

The bell had come from Co-operative Wholesale Society's Crumpsall Biscuit Works in Manchester.
Any info to : PC 2361. Tel 0300 333 3000
Messages : Send a message
Crime Ref : 22EJ / 50213D-14

No of items stolen : 1

Location : UK > Hereford & WorcsCategory : Shop, Pub, Church, Telephone Boxes & BygonesID : 84377User : 1 ; Antique/Reclamation/Salvage Trade ;  (Administrator)Date Created : 11 Aug 2014 15:27:57Date Modified : 11 Aug 2014 15:37:21;

Each section is contained in a div with the class itemspacingmodified, then all the info is inside the divs with the class itemindentmodified so you just need to pull the text from each.
The only problem is the line breaks, you can see  91278User is syuck together, we can replace the line breaks with newlines:
connection = urllib2.urlopen('http://www.theft-alerts.com')
soup = BeautifulSoup(connection.read().replace("<br>","\n"), "html.parser")

for sp in soup.select("table div.itemspacingmodified"):
    for wd in sp.select("div.itemindentmodified"):
        text = wd.text
        if not text.startswith("Images :"):
            print(text)

So now we get:
STOLEN : CHERUB IN MARBLE, PART OF A FOUNTAIN
Stolen from Canterbury, Kent, UK on 8 February 2016
Item : A copy of Verrocchio's cupid - winged cherub standing on one leg holding a dolphin - in white marble which formed the top part of a fountain. approximately 3 foot high. Item has discoloured due to weathering with some lichen growth.
Any info to : PC 12994 Canterbury. Tel 01622 690690
Messages : Send a message
Crime Ref : ZY - 4370 - 16

No of items stolen : 1

Location : UK > Kent
Category : STATUARY
ID : 93578
User : 53329 ; Diyer/Homeowner/Private ;  (Registered SalvoWEB user for 1 month)
Date Created : 10 Feb 2016 14:36:23
Date Modified : 11 Feb 2016 16:40:06;

STOLEN : OVER 70 ANTIQUE YORK STONE PAVING SLABS
Stolen from Steyning on 30th October 2015
Item : Antique York Stone paving slabs stolen from historic landscaped garden overnight. Truck driven through electric gates to gain access.
Any info to : PCSO Stewart Metcalfe. Sussex Police mob. 07912 894151
Messages : Send a message
Web URL : https://stmarysbramber.co.uk

Crime Ref : 47150140173

No of items stolen : 70

Recovered Details : None

Location : UK > West Sussex
Category : FLAGSTONES & FLOOR TILES
ID : 92311
User : 52866 ; Diyer/Homeowner/Private ;  (Registered SalvoWEB user for 3 months)
Date Created : 05 Nov 2015 12:04:50
Date Modified : 05 Nov 2015 12:15:10;

STOLEN : GARDEN STATUE OF BOY
Stolen from Bridgnorth, Shropshire on 20th / 21st Aug 2015
Item : Small lead,(I think ! ),statue of a boy standing on a stone plinth
Any info to : West Mercia Police - Crime No 22FJ59981W15
Messages : Send a message
Crime Ref : 22FJ59981W15

No of items stolen : 2

Recovered Details : NA

Location : UK > Shropshire
Category : STATUARY
ID : 91278
User : 52457 ; Diyer/Homeowner/Private ;  (Registered SalvoWEB user for 6 months)
Date Reset : 10 Sep 2015 00:30:01
Date Modified : 26 Aug 2015 15:07:31;  EL from 26 Aug 2015 to 09 Sep 2015 26Aug15;
EL History : 26 Aug 2015 10:52:49;

STOLEN : YORKSTONE FLAGSTONES
Stolen from Nr Sevenoaks, Kent, UK on 26 Aug 2015
Item : Flagstones from  St Mary's Church, Sundridge, Sevenoaks, Kent TN14 6EA. 70 in total. They are old Yorkstone flagstones approx. 2" thick, the sizes are as follows:

24 x   3'x2'
14 x   2'x1.5'
10 x   2'x2'
10 x  2'x1'
12 x  1'x1'
Any info to : Maidstone, Kent  Police station Tel: 101
Messages : Send a message
Crime Ref : YY/17519/15

No of items stolen : 70

Location : UK > Kent
Category : FLAGSTONES & FLOOR TILES
ID : 91428
User : 52513 ; Churches and Memorial Custodians ;  (Registered SalvoWEB user for 6 months)
Date Created : 03 Sep 2015 14:48:45
Date Modified : 04 Sep 2015 09:34:13;

STOLEN : RED STANDSTONE BIRDBATH
Stolen from Watlington, Oxfordshire UK on 16 July 2015
Item : A red sandstone bird bath with applied bronze decoration and a central bronze figure of a young girl on a dolphin by Richard Garbe
Overall height 4'3" (129.5 cm), Figure height 1' 3" (38 cm)
Square at bowl 1'3" (38 cm) Square at base 1'4" (40.4 cm)
Any info to : R McIntyre, PC 0200, Wallingford
Messages : Send a message
Crime Ref : 4315016713

No of items stolen : 1

Location : UK > Oxfordshire
Category : STATUARY
ID : 89824
User : 52054 ; Diyer/Homeowner/Private ;  (Registered SalvoWEB user for 6 months)
Date Reset : 13 Jul 2015 00:30:02
Date Modified : 21 Jun 2015 20:58:33;  EL from 21 Jun 2015 to 12 Jul 2015 21Jun15;
EL History : 21 Jun 2015 20:50:51;

STOLEN : STONE SCULPTURE - STATUE IS OF A PROPHET
Stolen from Belton, Loughbrough on 05/05/2015
Item : Statue is of a Prophet
5ft tall, this has been sympathetically restored by stonemason using a local stone which is very similar to the original stone.
The statue is 63" tall and weighs around ½ ton

Any info to : 3046515
Messages : Send a message
Crime Ref : 3046515

No of items stolen : 1

Location : UK > Leicestershire
Category : GARDEN
ID : 89030
User : 51750 ; Professional/Architect/Designer/Media/Film/TV ;  (Registered SalvoWEB user for 6 months)
Date Created : 06 May 2015 15:38:24
Date Modified : 06 May 2015 16:18:28;

STOLEN : WOOL CARPET/RUG IN VARIOUS COLOURS GEOMETRIC DESIGN
Stolen from Kensal Green on 21 April 2015
Item : A knotted wool rug or carpet, approx 118 by 76 inches, with a geometric design in light and dark brown, cream, pink and black.
Any info to : Metropolitan Police. Tel: 101 and quote crime ref: 6518176/15
Messages : Send a message
Crime Ref : 6518176/15

No of items stolen : 1

Location : UK > London North West
Category : FURNITURE & MIRRORS
ID : 88924
User : 34 ; Antique/Reclamation/Salvage Trade ;  (Salvo Code Dealer)
Date Created : 29 Apr 2015 21:46:11
Date Modified : 29 Apr 2015 22:24:45;

STOLEN : ANOTHER HISTORIC MILESTONE STOLEN AT REDBOURN, HERTS.
Stolen from Redbourn, Hertfordshire on 15th March 2015
Item : Very distinctive square section small Milepost, well-known to local residents and others, and featured in local publications. It was on the A5183 at St.Albans Road at Redbourn, opposite the Chequers Public House. It would originally have been installed by The Dunstable-St. Albans-London Turnpike Trust, established by Act of Parliament in 1722; after the abolition of this and other similar trusts responsibility would have fallen to the Parish Council, later passing to the County Council in the 20th Century.

This milestone has the Milestone Society Identity ref. HE_LH24. Its neighbour HE_LH23 was stolen two years ago.
Any info to : Hertfordshire Police 01707 354000
Messages : Send a message
Crime Ref : WCR/41/20187/15

No of items stolen : 1

Location : UK > Warwickshire
Category : Architectural STONE & TERRACOTTA
ID : 88606
User : 46089 ; Charity/Government/Institution/Plc ;  (Registered SalvoWEB user for 2 years or more)
Date Created : 10 Apr 2015 14:15:35
Date Modified : 28 Apr 2015 16:52:03;

STOLEN : COALBROOKDALE GARDEN BENCH
Stolen from near Lichfield, Staffordshire UK on 25 February 2015
Item : A beautiful (most likely Coalbrookdale) cast iron 'Oak and Ivy' pattern bench. White painted with wooden slatted seat - but could now be a different colour. Approximate size 155 cm wide. Taken from a garden near Lichfield but possibly now in the Kent or South East region or anywhere in the country. Unusual and striking pattern. A £100 reward for first information which leads to recovery.
Any info to : PC 3864 Lichfield Tel 0300 123 4455
Messages : Send a message
Crime Ref : 27th February 2015 No 644

No of items stolen : 1

Location : UK > North Yorkshire
Category : GARDEN
ID : 87846
User : 51382 ; Diyer/Homeowner/Private ;  (Registered SalvoWEB user for 1 year)
Date Reset : 19 Mar 2015 00:30:01
Date Modified : 11 Mar 2015 18:00:05;  EL from 03 Mar 2015 to 10 Mar 2015 03Mar15;  EL from 11 Mar 2015 to 18 Mar 2015 11Mar15;
EL History : 02 Mar 2015 10:07:07;11 Mar 2015 00:30:01;

STOLEN : MILESTONE TAKEN FROM THE SIDE OF OLD LONDON ROAD, MALDON, ESSEX
Stolen from Maldon, Essex, UK on 31/1/15 - 11/3/15
Item : This is a milestone approximately 30 cms square but only around 90 total height including below surface. It was set into a concrete socket and would probably have needed lifting equipment to extract. It had received damage to one corner and face about six years ago, probably by carelessly operated grass-cutting machinery. It was situated opposite the cemetery in Old London Road (Grid Ref TL83740712) and was registered bythe Milestone Society with the ID ref EX_MGMN37
Any info to : PS 214 Maldon District Neighbourhood Policing Sergeant Direct Dial: 101 Ext 412104
Messages : Send a message
Crime Ref : CF0205920315

No of items stolen : 1

Location : UK > Essex
Category : Architectural STONE & TERRACOTTA
ID : 88150
User : 46089 ; Charity/Government/Institution/Plc ;  (Registered SalvoWEB user for 2 years or more)
Date Created : 16 Mar 2015 11:31:40
Date Modified : 16 Mar 2015 11:45:20;

STOLEN :  MILESTONE PLATE STOLEN. A420 JUST WEST OF CHIPPENHAM, WILTSHIRE
Stolen from Chippenham, Wiltshire on Before Christmas 2014
Item : This stone was involved in a major traffic accident sometime before Christmas 2014 and is now not only leaning over at a worse angle than ever but is in three or more pieces.  The Cast iron plate on its front has disappeared, presumed stolen.
Any info to : Crime reference number 5410002796 reported by Wiltshire Council. Tel: 101 to report any news, quoting the ref. number.
Messages : Send a message
Crime Ref : 5410002796 Wiltshire

No of items stolen : 1

Location : UK > Wiltshire
Category : Architectural METALWORK
ID : 86859
User : 46089 ; Charity/Government/Institution/Plc ;  (Registered SalvoWEB user for 2 years or more)
Date Created : 10 Jan 2015 17:26:33
Date Modified : 28 Apr 2015 16:54:46;

STOLEN : A LARGE TAYLORS OF LOUGHBOROUGH BELL
Stolen from Bromyard on 7 August 2014
Item : The bell has a diameter of 37 1/2" is approx 3' tall weighs just shy of half a ton and was made by Taylor's of Loughborough in 1902. It is stamped with the numbers 232 and 11.

The bell had come from Co-operative Wholesale Society's Crumpsall Biscuit Works in Manchester.
Any info to : PC 2361. Tel 0300 333 3000
Messages : Send a message
Crime Ref : 22EJ / 50213D-14

No of items stolen : 1

Location : UK > Hereford & Worcs
Category : Shop, Pub, Church, Telephone Boxes & Bygones
ID : 84377
User : 1 ; Antique/Reclamation/Salvage Trade ;  (Administrator)
Date Created : 11 Aug 2014 15:27:57
Date Modified : 11 Aug 2014 15:37:21;

redpajama_set_name: RedPajamaStackExchange


text:
Recall: Small metal, glass pieces found in Kool-Aid mix sold at Costco, Stater Bros.
By Catherine Stoddard
The Kraft Heinz Company and the U.S. Food and Drug Administration have issued a recall for Kool-Aid Tropical Punch that was sold at Costco and Stater Bros. Markets due to very small pieces of glass or metal that were found in the drink mix.
The foreign materials "may have been introduced during production," according to a Stater Bros. Markets recall notice.
The Kool-Aid mix was sold in canisters that held 82.5 ounces of product and had a "Best When Used By" date of Aug. 31, 2023 or Sept. 1, 2023.
Customers can find the date on the bottom of the Kool-Aid container, according to a recall letter sent to Costco members.
Kool-Aid Tropical Punch drink mix.
RELATED: Certain Tastykake food products recalled due to concerns of tiny pieces of metal mesh wire
People who purchased the Kool-Aid Tropical Punch can return it to their local Costco or Stater Bros. store for a full refund.
"The company discovered the issue during an internal review at the manufacturing facility. There have been no consumer complaints and no reports of illness or injury related to this issue to date," according to Stater Bros.
Any customers with further concerns can contact Kraft Heinz at 855-713-9237.

redpajama_set_name: RedPajamaCommonCrawl


text:
Q: How to properly set TOCBOT with Bootrap-4 I am trying to use the good add-on called TOCBot. I have the following two questions that I would hope some one could help me with.
Issue #1:
In there you can see that a white vertical bar that significantly extends beyond the list items.
I think the bar should be as long as the vertical content only.
Is there any way I could customize the width or the length of this bar?
JSFiddle. Note reference to the tool not shown here.
HTML Code:

          some text1

Root

Subheading, h2

          Some text 2

Third level heading

          Some text 3

Another level 3 heading

          Some text 4

A second subheading

          Some text 4

Initialization
 tocbot.init({
        tocSelector    : '.js-toc',
        contentSelector: '.js-toc-content',
        headingSelector: 'h1, h2, h3, h4',
        collapseDepth  :  6,
        headingsOffset :  1,
        orderedList    :  true
    });

Issue #2:
I want to be able to make the last clicked (current) link stand out either by color, background color or margin settings. How can this be accomplished?

A: Try this.
1) Let's setup the CSS more explicitly to override tocs CSS without the use of !important
body a.toc-link{
    color: wheat;
}

2) The white line is created using the a.toc-link::before pseudo selector. Since it is using height:inherit, the height could potentially change depending on what device/screen size you're on so lets use jQuery to grab the height of the anchor tag and set that to the height of the white line
var tocHeight = $('a.toc-link').height(); //18

3) We can't directly style ::before with JS so we have to dynamically insert it into the page as a `;

//Insert it above the closing `</body>` tag
$('body').append(html);

4) Set up an on click event listener for the anchor tags and add a class to alter the color to red.
$('a.toc-link').on('click', function(){

  //Remove any previously added classes of 'clicked' to all toc-link elements
  $('a.toc-link').removeClass('clicked');

  //Add the class to the currently clicked anchor tag
  $(this).addClass('clicked');
});

5) create the .clicked class in CSS
body a.toc-link.clicked {
  color:red;
}

demo: https://jsfiddle.net/b0n4xk1c/
Note: Whilst the white line is the same size as the anchor tags, there are gaps due to margin/spacing between the links (see the demo). If you want the line to fully connect then just add a few extra pixels to the value after grabbing it instead.
var tocHeight = $('a.toc-link').height() + 6;

A: I have contacted the author of TOCBOT, who kindly spotted a bug in my code. This bug is related to issue#1.
I need to include the "toc" class not only the "js-toc" class in the code above.

By doing that, there is no need to write further JS.
Update: If your list is numbered, you will also need to do something like this and not rely on the parameter setting orderedList: true alone.
.toc>.toc-list li{
    list-style:decimal-leading-zero;
}

GitHub Thread


text:
Due to the influence of big pharma,the FDA has refused (until recently) to investigate the benefits of phytocannabinoid oil for humans or pets. We are not allowed to say or imply that phytocannabinoid has any medical benefits, however the 1st Amendment also protects our right to tell you about our experiences with phytocannabinoid helping our own pets, and the fact that there have been more than 1500 clinical studies regarding the effectiveness of phytocannabinoids.*The owners and staff of Innovet believe, but cannot legally claim or imply, that countless dogs and cats have used phytocannabinoid oils for many conditions.
As mentioned above, CBD is no longer considered a Schedule I controlled substance under the Farm Act. However, under the DEA's definition, it remains on the list. This allows for individual states to create exceptions to the status of CBD, even when cultivated from hemp plants grown legally under the act. It also maintains illegal status for any CBD sourced from plants produced in settings that are not consistent with that Act, or by an unlicensed grower. It is expected that more clarification on the status of CBD will come early this year (2019).
REM Behavior Disorder: REM behavior disorder (RBD) is a parasomnia disorder characterized by shouting, becoming physically agitated, or otherwise acting out during sleep. For many, RBD is a symptom of a larger, more serious condition or disorder, such as Alzheimer's disease or PTSD. CBD oil minimizes the symptoms of RBD, and also alleviates the anxiety and painful symptoms that often accompany disorders that lead to RBD.
Hemp being federally legal would be huge for the CBD industry, as CBD oil made from hemp extract (a plant that has very low amounts of THC) would be legal. A new, more available form of CBD would also allow for more research on the subject of cannabidiol, and perhaps the entire marijuana plant. More research brings the potential of coming closer to full legalization.
In practice, selling CBD seems to be legally riskier than possessing it. The DEA's priority seems mostly to concern commercial violations; most cases involved smoke shops and non-cannabis vape stores selling CBD cartridges. In 2015, police seized CBD cartridges at a vape store near Milwaukee, but the store owners were never arrested or charged. (A 2014 law made it legal for patients to possess and use CBD oil in Wisconsin, but the law did not make it legal to sell.) That same year, police in central Florida arrested the owner of a local smoke shop chain for selling CBD products.
CBD oil has gained the most traction among the general public for its ability to treat psychiatric conditions like anxiety and addiction. The roots of CBD oil in psychological treatment originated from its surprising effectiveness at helping children with epilepsy, and it's becoming increasingly popular as a way to help ameliorate symptoms in children with autism spectrum disorder as well.
Finally, CBD is gaining traction as a way to dampen some of the negative effects that come alongside its sister molecule, THC. Tetrahydrocannabinol (THC) is the psychoactive compound in recreational and medical cannabis, and while it's being actively explored for medical applications in its own right, it does have some well-known side effects, such as paranoia and anxiety.
Armentano pointed to several pieces of evidence as proof that CBD has always been treated as illegal at the federal level. Congress has tried and is currently trying to pass bills to remove CBD from the Controlled Substances Act—which would be unnecessary if the compound were already legal. Further, the Controlled Substances Act itself specifies that the government has the right to control substances that are chemically similar to the ones explicitly listed.
Due to the influence of big pharma,the FDA has refused (until recently) to investigate the benefits of phytocannabinoid oil for humans or pets. We are not allowed to say or imply that phytocannabinoid has any medical benefits, however the 1st Amendment also protects our right to tell you about our experiences with phytocannabinoid helping our own pets, and the fact that there have been more than 1500 clinical studies regarding the effectiveness of phytocannabinoids. The owners and staff of Innovet believe, but cannot legally claim or imply, that countless dogs and cats have used phytocannabinoid oils for many conditions.
Though there are some topical treatments, cannabis oil is typically administered orally to dogs. It also can be used in conjunction with traditional medications and treatments. Emerging research suggests there can be "synergistic benefits" between marijuana and traditional medications, Richter says. "There are few, if any, known significant drug interactions that you really need to be concerned about."
Now, scientific research is discovering why. Evidence from laboratory studies and clinical studies, have begun to reveal the mechanisms through which CBD helps control seizures. But, unlike most other conditions that CBD has been shown to treat, the FDA has actually agreed that the evidence is conclusive enough that CBD is now an approved medication for epilepsy for humans.
In 2017, state Governor Scott Walker signed and passed the 2017 Wisconsin Act 100. This law is described as a "pilot program to study growth, cultivation, and marketing of industrial hemp." It allows the cultivation of "only industrial hemp of the species Cannabis sativa, with THC concentration of Non-Detectable." Republican Representative Jesse Kremer sponsored the bill. He tweeted, "signing the bill will make Wisconsin a national and global leader in hemp production." Wisconsin is joining over 30 other states across the country that are taking advantage of this new cash crop.
The human body also produces cannabinoids, known as endocannabinoids, in a bodily system known as the endocannabinoid system (or ECS). The ECS promotes homeostasis by regulating a wide range of functions, including motor skills, mood, appetite, and sleep. As we age, our ECS produces fewer endocannabinoids; they may also decrease due to physical injury or disease. Replenishing depleted endocannabinoids with phytocannabinoids like CBD can help restore balance to the body.
So, you need a CBD-induced mood change. You need to calm your mind, boost your vibe, refocus, and perhaps meditate on a few things. There are plenty of ways to get the right dose, but you'd prefer these effects to settle in quickly and that CBD edible is definitely going to take its time kicking in. Topical creams won't tackle the full-body feel you're going for either.
Vaping, tinctures, topicals—they all have their qualities, but does anything beat the decadence and sheer enjoyment of dark chocolate? These Tasty Cocoas CBD Chocolates from Tasty Hemp Oil come individually wrapped, ready to deliver a delicious serving of soothing CBD. Made with the highest-quality cocoa and raw hemp oil, these chocolates are available in dark and dark mint variations.


text:
Placerville Airport  is three miles east of Placerville, in El Dorado County, California, United States. The National Plan of Integrated Airport Systems for 2011–2015 categorized it as a general aviation airport.

There are no passenger airlines at the airport. The runway is long enough for aircraft such as the Pilatus PC-12 and is home to a T-28 Trojan. In 1977-78 California Air Commuter scheduled Piper Navajos to Placerville.

Facilities
Placerville Airport covers 243 acres (98 ha) at an elevation of 2,585 feet (788 m). Its one runway, 5/23, is 4,201 by 75 feet (1,280 x 23 m). It has one helipad, H1, 50 by 50 feet (15 x 15 m).

In the year ending April 30, 2010 the airport had 66,000 aircraft operations, average 180 per day: 97% general aviation, 1.5% air taxi, and 1.5% military. 138 aircraft were then based at the airport: 96% single-engine, 2% multi-engine, 1% helicopter, and 1% ultralight.

References

External links
 El Dorado County airports
 Aerial image as of May 1993 from USGS The National Map

Airports in El Dorado County, California
Placerville, California

redpajama_set_name: RedPajamaWikipedia


text:
"Ace Security", Islington: 1970s non-disco
"Ace Security" burglar alarm, Islington • A 1970s disco logo for a 1970s non-disco group: Ace, a bunch of hairy be-flared musos notable mainly for the very successful single "How Long", which was top 20 in both the UK and the USA in 1974-5. • Spotted: Aylesbury Street, Islington, London, EC1, England, 2007 • Politics: In the Labour constituency of Islington South and Finsbury
Ace the one-hit-wonder group
Pingback: Britain's Colourful Burglar Alarms Are Oddly Mesmerising | Gizmodo Australia
Quite like it, sort of suits an otherwise bland white box. big tick!
1970s disco, 2007, Audio, Delta, Labour Party, Monogram, Music, Other connotations, Pop music, Typographic
burglar alarm, EC1, graphic design, Islington, London, politics, postaday, Street, surveillance
Clarion, Camden: shrill
"ADT", Southwark: daisy chain
MP Security Protects, Oxford, 2012
Disc Security Systems, Glasgow: real CD
Sonic Alarms, Cardiff: spiky


Image Title: Up To 10 Seats Dining Tables IKEA For Table Ideas 9. Filename: up-to-10-seats-dining-tables-ikea-for-table-ideas-9.jpg. Image Dimension: 520 x 350 pixels. Images Format: jpg/jpeg. Publisher/Author: Sid Schmidt. Uploaded Date: Monday - February 19th. 2018 22:21:42 PM. Category: Architecture. Image Source: diy.com.
Tap The Thumbnail Bellow to See Related Gallery of "Up To 10 Seats Dining Tables IKEA For Table Ideas 9"


Find out what the related areas are that Cryptography and Network Security connects with, associates with, correlates with or affects, and which require thought, deliberation, analysis, review and discussion. This unique checklist stands out in a sense that it is not per-se designed to give answers, but to engage the reader and lay out a Cryptography and Network Security thinking-frame.
How far is your company on its Cryptography and Network Security journey?
Take this short survey to gauge your organization's progress toward Cryptography and Network Security leadership. Learn your strongest and weakest areas, and what you can do now to create a strategy that delivers results.
Below you will find a quick checklist designed to help you think about which Cryptography and Network Security related domains to cover and 140 essential critical questions to check off in that domain.
Analyze Cryptography and Network Security visions and catalog what business benefits will Cryptography and Network Security goals deliver if achieved.
– At what point will vulnerability assessments be performed once Cryptography and Network Security is put into production (e.g., ongoing Risk Management after implementation)?
– Are there any disadvantages to implementing Cryptography and Network Security? There might be some that are less obvious?
– Does the Cryptography and Network Security task fit the clients priorities?
Gauge Intel Corporation quality and revise understanding of Intel Corporation architectures.
– For your Cryptography and Network Security project, identify and describe the business environment. is there more than one layer to the business environment?
– What tools do you use once you have decided on a Cryptography and Network Security strategy and more importantly how do you choose?
– How do we know that any Cryptography and Network Security analysis is complete and comprehensive?
Differentiate Kerckhoffs's Principle issues and look at it backwards.
– What are your results for key measures or indicators of the accomplishment of your Cryptography and Network Security strategy and action plans, including building and strengthening core competencies?
– what is the best design framework for Cryptography and Network Security organization now that, in a post industrial-age if the top-down, command and control model is no longer relevant?
– Are there Cryptography and Network Security Models?
Analyze Export of cryptography strategies and suggest using storytelling to create more compelling Export of cryptography projects.
– What are the Key enablers to make this Cryptography and Network Security move?
– What is our formula for success in Cryptography and Network Security ?
– Is the scope of Cryptography and Network Security defined?
Reconstruct Free speech management and diversify by understanding risks and leveraging Free speech.
– Record-keeping requirements flow from the records needed as inputs, outputs, controls and for transformation of a Cryptography and Network Security process. ask yourself: are the records needed as inputs to the Cryptography and Network Security process available?
– Will Cryptography and Network Security deliverables need to be tested and, if so, by whom?
– Are accountability and ownership for Cryptography and Network Security clearly defined?
Systematize People's Republic of China decisions and ask what if.
– Does Cryptography and Network Security create potential expectations in other areas that need to be recognized and considered?
– Can Management personnel recognize the monetary benefit of Cryptography and Network Security?
Demonstrate Bernstein v. United States decisions and achieve a single Bernstein v. United States view and bringing data together.
– What are the top 3 things at the forefront of our Cryptography and Network Security agendas for the next 3 years?
– How likely is the current Cryptography and Network Security plan to come in on schedule or on budget?
Analyze Quantum physics decisions and budget the knowledge transfer for any interested in Quantum physics.
– Think about the people you identified for your Cryptography and Network Security project and the project responsibilities you would assign to them. what kind of training do you think they would need to perform these responsibilities effectively?
– Does our organization need more Cryptography and Network Security education?
Jump start All Writs Act quality and gather All Writs Act models .
– Does Cryptography and Network Security analysis isolate the fundamental causes of problems?
Consult on Geospatial intelligence projects and look at it backwards.
– Do those selected for the Cryptography and Network Security team have a good general understanding of what Cryptography and Network Security is all about?
– What are all of our Cryptography and Network Security domains and what do they do?
– How can we improve Cryptography and Network Security?
Have a meeting on Signals intelligence by alliances, nations and industries engagements and do something to it.
– When a Cryptography and Network Security manager recognizes a problem, what options are available?
– What are the Essentials of Internal Cryptography and Network Security Management?
– What will drive Cryptography and Network Security change?
Reason over Classical cipher management and balance specific methods for improving Classical cipher results.
– In the case of a Cryptography and Network Security project, the criteria for the audit derive from implementation objectives. an audit of a Cryptography and Network Security project involves assessing whether the recommendations outlined for implementation have been met. in other words, can we track that any Cryptography and Network Security project is implemented as planned, and is it working?
– Who will provide the final approval of Cryptography and Network Security deliverables?
Focus on Mathematical recreations visions and intervene in Mathematical recreations processes and leadership.
– Where do ideas that reach policy makers and planners as proposals for Cryptography and Network Security strengthening and reform actually originate?
– How will you know that the Cryptography and Network Security project has been successful?
Chart Tabula recta issues and know what your objective is.
– What other jobs or tasks affect the performance of the steps in the Cryptography and Network Security process?
– How do we Identify specific Cryptography and Network Security investment and emerging trends?
– What are the short and long-term Cryptography and Network Security goals?
Illustrate Asemic writing adoptions and triple focus on important concepts of Asemic writing relationship management.
– Consider your own Cryptography and Network Security project. what types of organizational problems do you think might be causing or affecting your problem, based on the work done so far?
– Are assumptions made in Cryptography and Network Security stated explicitly?
Distinguish Topics in Cryptography visions and create Topics in Cryptography explanations for all managers.
– How will we insure seamless interoperability of Cryptography and Network Security moving forward?
– How do we manage Cryptography and Network Security Knowledge Management (KM)?
Interpolate Intelligence analysis management management and sort Intelligence analysis management activities.
– How can skill-level changes improve Cryptography and Network Security?
Adapt Johannes Trithemius risks and explain and analyze the challenges of Johannes Trithemius.
– What are your current levels and trends in key measures or indicators of Cryptography and Network Security product and process performance that are important to and directly serve your customers? how do these results compare with the performance of your competitors and other organizations with similar offerings?
– What are your key performance measures or indicators and in-process measures for the control and improvement of your Cryptography and Network Security processes?
– What sources do you use to gather information for a Cryptography and Network Security study?
Shape Radar MASINT failures and learn.
– What are the record-keeping requirements of Cryptography and Network Security activities?
– How can you measure Cryptography and Network Security in a systematic way?
Steer The Codebreakers management and get going.
– Can we add value to the current Cryptography and Network Security decision-making process (largely qualitative) by incorporating uncertainty modeling (more quantitative)?
Grade Wassenaar Arrangement engagements and modify and define the unique characteristics of interactive Wassenaar Arrangement projects.
– What are the success criteria that will indicate that Cryptography and Network Security objectives have been met and the benefits delivered?
Bootstrap Electronic Frontier Foundation issues and explore and align the progress in Electronic Frontier Foundation.
– Are there any easy-to-implement alternatives to Cryptography and Network Security? Sometimes other solutions are available that do not require the cost implications of a full-blown project?
– Among the Cryptography and Network Security product and service cost to be estimated, which is considered hardest to estimate?
Pilot Advanced Encryption Standard adoptions and separate what are the business goals Advanced Encryption Standard is aiming to achieve.
– Think about the kind of project structure that would be appropriate for your Cryptography and Network Security project. should it be formal and complex, or can it be less formal and relatively simple?
– What are current Cryptography and Network Security Paradigms?
– Is Cryptography and Network Security Required?
Prioritize Outline of cryptography visions and know what your objective is.
– Why is it important to have senior management support for a Cryptography and Network Security project?
– What is the purpose of Cryptography and Network Security in relation to the mission?
Understand Friedrich Kasiski results and maintain Friedrich Kasiski for success.
– Have the types of risks that may impact Cryptography and Network Security been identified and analyzed?
– What are internal and external Cryptography and Network Security relations?
– How do we keep improving Cryptography and Network Security?
Adapt Biuro Szyfrów tactics and finalize the present value of growth of Biuro Szyfrów.
– How do we measure improved Cryptography and Network Security service perception, and satisfaction?
– How can the value of Cryptography and Network Security be defined?
Focus on Subliminal stimuli strategies and figure out ways to motivate other Subliminal stimuli users.
– What are the key elements of your Cryptography and Network Security performance improvement system, including your evaluation, organizational learning, and innovation processes?
– Who will be responsible for making the decisions to include or exclude requested changes once Cryptography and Network Security is underway?
– Is there any existing Cryptography and Network Security governance structure?
Start HD DVD adoptions and get answers.
– Does Cryptography and Network Security systematically track and analyze outcomes for accountability and quality improvement?
– What are the business goals Cryptography and Network Security is aiming to achieve?
Reorganize Quantum computing leadership and find the ideas you already have.
– Who will be responsible for documenting the Cryptography and Network Security requirements in detail?
– How will you measure your Cryptography and Network Security effectiveness?
Exchange ideas about Earthquake casualty estimation failures and get answers.
– To what extent does management recognize Cryptography and Network Security as a tool to increase the results?
– How do we go about Comparing Cryptography and Network Security approaches/solutions?
– Have all basic functions of Cryptography and Network Security been defined?
Have a round table over Project MINARET adoptions and customize techniques for implementing Project MINARET controls.
– Who is the main stakeholder, with ultimate responsibility for driving Cryptography and Network Security forward?
– How do we Improve Cryptography and Network Security service perception, and satisfaction?
– Are there recognized Cryptography and Network Security problems?
Participate in Comparison of cryptography libraries visions and report on developing an effective Comparison of cryptography libraries strategy.
– What management system can we use to leverage the Cryptography and Network Security experience, ideas, and concerns of the people closest to the work to be done?
– What role does communication play in the success or failure of a Cryptography and Network Security project?
– What potential environmental factors impact the Cryptography and Network Security effort?
Probe Sacred geometry strategies and integrate design thinking in Sacred geometry innovation.
– What business benefits will Cryptography and Network Security goals deliver if achieved?
– Why should we adopt a Cryptography and Network Security framework?
Have a meeting on Interactive proof system risks and report on setting up Interactive proof system without losing ground.
– How do we go about Securing Cryptography and Network Security?
– How to deal with Cryptography and Network Security Changes?
Refer to PC World projects and observe effective PC World.
– In what ways are Cryptography and Network Security vendors and us interacting to ensure safe and effective use?
– In a project to restructure Cryptography and Network Security outcomes, which stakeholders would you involve?
Illustrate Books on cryptography tasks and adopt an insight outlook.
– Do several people in different organizational units assist with the Cryptography and Network Security process?
– What are your most important goals for the strategic Cryptography and Network Security objectives?
Consider Brute-force attack management and report on developing an effective Brute-force attack strategy.
– What is Effective Cryptography and Network Security?
Have a meeting on Modular arithmetic leadership and point out Modular arithmetic tensions in leadership.
– How do mission and objectives affect the Cryptography and Network Security processes of our organization?
Consolidate Information theory tactics and overcome Information theory skills and management ineffectiveness.
– Meeting the challenge: are missed Cryptography and Network Security opportunities costing us money?
– What tools and technologies are needed for a custom Cryptography and Network Security project?
Reason over National Security Agency tasks and intervene in National Security Agency processes and leadership.
– Are we Assessing Cryptography and Network Security and Risk?
– What is our Cryptography and Network Security Strategy?
Bootstrap Cognitive traps for intelligence analysis risks and find out what it really means.
– Do Cryptography and Network Security rules make a reasonable demand on a users capabilities?
Differentiate The Register risks and adopt an insight outlook.
– Which customers cant participate in our Cryptography and Network Security domain because they lack skills, wealth, or convenient access to existing solutions?
– What are the long-term Cryptography and Network Security goals?
Add value to Lorenz SZ40/42 engagements and ask questions.
– Do we cover the five essential competencies-Communication, Collaboration,Innovation, Adaptability, and Leadership that improve an organizations ability to leverage the new Cryptography and Network Security in a volatile global economy?
– Is Cryptography and Network Security Realistic, or are you setting yourself up for failure?
Jump start Pattern recognition governance and get answers.
– How does the organization define, manage, and improve its Cryptography and Network Security processes?
Understand Number theory outcomes and catalog Number theory activities.
– Why are Cryptography and Network Security skills important?
Debate over Colossus computer visions and figure out ways to motivate other Colossus computer users.
– Think of your Cryptography and Network Security project. what are the main functions?
Brainstorm over Law enforcement agency management and explain and analyze the challenges of Law enforcement agency.
– Risk factors: what are the characteristics of Cryptography and Network Security that make it risky?
– What are our Cryptography and Network Security Processes?
Devise Intelligence cycle security management and stake your claim.
– Think about the functions involved in your Cryptography and Network Security project. what processes flow from these functions?
– Why is Cryptography and Network Security important for you now?
Substantiate USENIX Annual Technical Conference management and give examples utilizing a core of simple USENIX Annual Technical Conference skills.
Understand Data integrity projects and arbitrate Data integrity techniques that enhance teamwork and productivity.
– What is the source of the strategies for Cryptography and Network Security strengthening and reform?
– Are we making progress? and are we making progress as Cryptography and Network Security leaders?
Grasp The Code Book outcomes and attract The Code Book skills.
– How much does Cryptography and Network Security help?
Analyze Casualty estimation tasks and be persistent.
Sacred Geometry | Make the invisible visible.
Best Currys PC World deals | What Hi-Fi?
Number theory, branch of mathematics concerned with properties of the positive integers (1, 2, 3, …). Sometimes called "higher arithmetic," it is among the oldest and most natural of mathematical pursuits. Number theory has always fascinated amateurs as well as professional mathematicians.


Illustrations for Trends on Trends, a creative agency with a focus on breakfast and morning time rituals.
The folks behind Bonnaroo approached us to name and brand their new music festival in Charleston, SC. We created a myriad of work for High Water Festival, including these illustrations.
Illustrations for Not Not Creative, a dialogue and workshop intended to examine and celebrate the role of producers, project managers, accounts and strategy within the design process and creative community.
Illustrations for Arcade, a children's shop in Nashville, Tennessee.
Illustrations for Coast Brewing in Charleston.
Illustrations for Positive Energy, a green energy company.
Pattern and icon illustration for Puppet, a Portland-based leader in IT automation.
Illustration for Wingz, a ride-share company located in the Bay area.
Illustrations for a set of 12 constellation tees, buy one at the Pretend Store.
Illustrations for men's fashion brand, Hugh & Crye.
Illustration for Montessorium, creator of childhood education apps.
Illustration and iconography for Zenefits.
Character illustration for Cannonborough Beverage Company.
Illustration work for Candlefish, a retail store featuring a carefully curated collection of fine candles, as well as its own fragrance library.
An illustration-rich identity for Westbrook Brewery based on wrought-iron work and the sometimes surprising ingredients found in the beer.
Pattern work for a towel.
Occult pattern for a Fuzzco x Hansel from Basel collaboration for Pretend Store.
Find out more about the taxonomies of space, water and the body with our illustrated poster series.
Illustrations for The Gin Joint's all-natural and hand-crafted cocktail brand Bittermilk.
Icons for Bulls Bay Salt Company in Charleston.
Spot illustrations for Homezen, an app that makes selling your home a breeze.


text:
MHJ WIKI Specialist Article New possibilities with GRAFCET
What is GRAFCET?
The most important elements of the GRAFCET plan
The power of GRAFCET
What is GRAFCET used for?
Use of the GRAFCET in practice
Wishful thinking: Load the GRAFCET logic directly into the controller
GRAFCET misused as a programming language?
Implementation of the theory: GRAFCET-Studio
Does GRAFCET Studio replace the device manufacturer's programming software? Where are the limits?
GRAFCET in training
The description of the functioning of an automation system is one of the essential aspects of automation technology. The European standard "GRAFCET" has been developed especially for this purpose and is ideally suited for this application. The required expenditure is often not made, despite the benefits resulting from the creation of a GRAFCET for a system. Because for many the GRAFCET provides no more benefits once the planning phase is completed.
But what if you could transfer the GRAFCET directly into a PLC?
GRAFCET is a description language used to describe the operation of a machine or its sequence. This standard is valid throughout Europe and has existed for more than 14 years under the designation "DIN EN 60848". The standard was developed in France: GRAFCET stands for Graphe Fonctionnel de Commande Etape Transition". This means: "Representation of the control function with steps and transition conditions". This makes it possible to describe step chains or sequence controls very well.
Those responsible for the GRAFCET standard have meticulously ensured that the required symbols are easy to draw and that the number of various elements is also as few as possible. For these reasons, a GRAFCET plan can also be implemented without much effort using pencil and paper.
The essential elements of a GRAFCET plan are:
Steps (square)
A step can be active or inactive. If a step is active, the machine is already in this state (for example, a bottle is being filled).
Transitions (horizontal line intersecting the line of action)
The transition includes a condition. If this condition is true, the transition to the subsequent step takes place, that is, the following step becomes active. The previously active step is deactivated.
Actions (rectangle)
Actions are always assigned to a step. In one action, e.g. an actuator is switched on. This could, for example, be a valve.
Multiple actions can be linked to a step.
Directed lines (horizontal and vertical lines)
The directed lines links individual elements (steps, transitions, actions) to one another.
In addition, GRAFCET provides elements to build hierarchies and structures. These include, for example, the forced commands, which can be used, among other things, to implement the conditions for the operating states (manual/automatic) of a system.
Fig 1: Example of a simple GRAFCET
Figure 1 shows a simple GRAFCET plan. What happens here?
First, the so-called initial step with the designation "1" is activated. Thus, the action to the right is also active and the binary output "Q0" is activated. The condition of the subsequent transition is defined by the term "1s/X1". This means that the transition is triggered as soon as step "1" is active for one second. At the transition, step "2" becomes active and step "1" becomes inactive. With the activation of step "2" the output "Q1" is also activated. After step "2" has been activated for one second, step "3" is activated, and again, after one second, the step returns to step "1".
The outputs Q0 to Q2 are thus switched on one after the other for one second each.
GRAFCET provides several variants of steps and actions with different properties. In the transition condition, a binary link (AND/OR) can be formulated; edge evaluations, comparators and time response can also be implemented. Binary operands are not the only ones that can be used within an action; the use of digital operands, including computational operations is also possible. All in all, a powerful and easy to learn description language.
A detailed description of GRAFCET can be found in the newly published book "GRAFCET Workbook" (available in English language for free).
GRAFCET is used across disciplines and is an integral part of most curricula of technical training courses. This provides the prerequisites so that various disciplines can 'talk' to each other 'in' GRAFCET.
If a new plant is developed, the designers can describe the sequence of the system via the GRAFCET. Thus, the experts from the fields of mechanics and electrical engineering have a discussion basis using which the first problems can be recognized and solved already during planning. This also helps to assess the need for actuators and sensors. The actuators and sensors of the machine are linked in a control program which usually runs in a programmable controller. A PLC programmer must therefore create the control program, whereby the GRAFCET acts as his programming basis. The machine must then be put into operation. The GRAFCET also plays an important role here: Does the machine now really work the way the designers have envisaged?
Of course, the machine operator also has advantages when he has knowledge of the precise operation of his machine. For example, the service staff does not always have to be called in the event of a fault.
Conclusion: The GRAFCET can be extremely useful if there is an up-to-date GRAFCET plan.
Everyone knows: Detailed machine documentation is necessary so that an equipment can be successfully built, programmed, commissioned and maintained.
Important: The documentation must be up-to-date. If, therefore, changes are made to the equipment, regardless of the scope, the documentation (the GRAFCET plan) must be updated accordingly. And here is mostly where the problems start: In case of a system modification the programming must be adjusted. If you do not change the GRAFCET plan now, the programming and the documentation diverge from each other to such an extent that you can no longer use the original documentation.
This is also the reason why GRAFCET has not been widely used in practice. Some effort is required to ensure that the actual state of the programming is consistent with the GRAFCET plan.
Here comes the wish: If I have already spent the effort and have created a GRAFCET plan from the outset, then I would also like to use it in the controller. Then, programming and documentation would never diverge.
The wish to transfer a GRAFCET logic into a controller is as old as the GRAFCET itself. But GRAFCET is not a programming language, but rather a description language.
The following scenario would be optimal:
You create a GRAFCET plan and load its logic to a device, regardless of which manufacturer has produced the device.
How could this be realized? The manufacturers usually use different hardware as well as different programming systems. The solution would be some type of "GRAFCET engine". This would be an intermediate layer that is fed with a GRAFCET logic. This intermediate layer is manufacturer-dependent, it must therefore be available for the device and must be installed on it. If this were the case, then a GRAFCET plan could be created and transferred directly to such a device.
Assuming it is possible to create a GRAFCET plan and transfer it to a device (for example, a PLC), the following application scenarios can be implemented and the following advantages are obtained:
The complete control program can be created with GRAFCET for smaller machines and equipment (drilling rig, sheet bending machine etc.).
For larger machines and equipment, partial areas are implemented in GRAFCET, e.g. the step chains. Things such as PID controllers, motion control, etc. are, as before, programmed in a control-specific manner (for example in FBD, LD, SCL).
Certain processes can be modified or reprogrammed in the system by the end customer (system operator). The end customer then does not need the extensive programming tool of the PLC manufacturer, but can do so using a small, simple tool. Here, the technical staff of the end customer needs 'only' the knowledge of GRAFCET and no PLC programming expertise.
GRAFCET for maintenance support: In addition to the 'normal' control program, a GRAFCET developed specifically for the error search is stored in the PLC which supports the maintenance staff if needed. Here, too, the PLC manufacturer's programming software would not be necessary.
Documentation and programming are standardized.
The PLC of the manufacturer A is replaced by a PLC of the manufacturer B. If the programming was performed via GRAFCET, the same GRAFCET is transferred to PLC-B without modification.
Adjustments would be necessary only in the address assignment (Symbol table).
Use in training:
Existing training equipment and mechatronic systems can be programmed conventionally or with GRAFCET.
Training equipment can be equipped with an Arduino or Raspberry PI and programmed with GRAFCET.
GRAFCET is not a programming language, but rather a description language for sequence controls. Therefore, there will always be cases where a GRAFCET plan makes only limited sense. However, there are also applications for which a GRAFCET programming system is a very elegant solution.
All small and medium-sized sequence controls without regulation, motion and communication tasks are particularly suitable for the GRAFCET programming, e.g.:
Processing stations
Sheet metal benders
Less suitable and not fully realized are extensive machines and plants with distributed control systems or time-critical operations where there is a struggle for every millisecond of cycle time. Here the GRAFCET can only take over a part of the system control. Things like e.g. PID controllers or communication tasks must be carried out using the native languages and thus the tool of the PLC manufacturer.
The theory described puts a new software into practice: A GRAFCET-Engine realize the platform independence on the device. After the GRAFCET engine is installed on the device, it can be programmed with GRAFCET Studio.
Fig 2:GRAFCET-Studio
GRAFCET Studio offers the following features:
Creation of a GRAFCET according to DIN EN 60848
Simulation of the GRAFCET on the PC (GRAFCET engine runs on the PC)
Transfer of the GRAFCET logic to the device
Monitoring the GRAFCET: The status of the transition conditions (True, False, Time Delay) is displayed as well as the status of the individual steps
Loading an existing GRAFCET logic from a device
GRAFCET Studio currently supports the following devices: Siemens S7-1200/1500/300/400, Arduino-Boards, IOT2000 from SIEMENS.
GRAFCET Studio cannot completely replace the programming software of the device manufacturer because the device must be
prepared in the first step: The GRAFCET engine must be installed on the device with the device manufacturer's programming software. The inputs/outputs must also be parameterized (addressing, measuring ranges of the analog inputs, output ranges of the analog outputs). The device can then be used with GRAFCET Studio.
If these settings are constant for a system type (for example, series machines), and a device can accept this data by inserting an external storage medium (for example, memory card), the preparation process is only necessary once per type of installation.
GRAFCET Studio currently supports max. 255 steps.
The platform independence through the GRAFCET engine also presents a disadvantage: A chain processed by the GRAFCET engine is not as performant as a step chain developed in the native programming languages (SCL, STL). However, this is only relevant for time-critical applications.
Since 2005, GRAFCET has been firmly anchored in training. GRAFCET is a component of the curriculum in numerous technical training courses in Germany. For example, in the training of mechatronics, electronics engineers for automation technology and industrial engineering as well as industrial mechanics. Including in Secondary Technical Schools and two-year Secondary Chemical Technology Schools focusing on Production Technology. GRAFCET is also used in training at technical high schools.
A large number of trained specialists are therefore familiar with GRAFCET and are thus able to program a programmable controller with a suitable software tool.
There is new impetus for the GRAFCET topic. The use of GRAFCET as a manufacturer-independent programming language increases its benefits many times over. GRAFCET Studio provides several new possibilities (see section application scenarios) for programmers and end users. For example, it is possible for the first time to program an S7-1200/1500 from Siemens using a small, simple tool.
Dipl.-Ing. (FH) Matthias Habermann mh@mhj.de
MHJ-Software GmbH & Co. KG
Albert-Einstein-Str. 101
75015 Bretten – Germany
www.mhj.de


Little Cottage in the Woods: Being a horror fan and having a life don't go together easily. Especially if the horror keeps entering your life. For the couple that lives in the Little Cottage in the Woods, this is a regular occurrence.
Being a horror fan and having a life don't go together easily. Especially if the horror keeps entering your life. For the couple that lives in the Little Cottage in the Woods, this is a regular occurrence.
Roadworks Goblins was a solo effort by me, done in 2006 for the book Groningen bij Nacht, published by Uitgeverij de Passage.


The "intended functionality" in the picture is what the software is supposed to do, feature-wise. This intended functionality takes in intended inputs, and produces an intended effect.
Because of design flaws, implementation bugs, and side effects that are result of unintended interactions with the environment, almost all (or probably all) real-world systems exhibit "unintended functionality".
Bugs are functionality too. Another way at looking this is that hacking systems doesn't "break" them – it just uses them in ways that were originally unintended.
Removing unnecessary functionality. As the unintended functionality is created as a side effect of intended functionality, removal of intended functionality will also remove some unintended functionality. However, you cannot tell specifically how much; but the general consensus is that by removing features, you usually make the system more resilient. This is also true because it is easier to analyse.
One real-world option is to split the expressive language parsing into a (sandboxed) front-end, that is as small as possible and restricted in what it can do, and that outputs a simplified, less expressive output, that is then the input for the main processing step.
Dropping invalid input. If the inputs are not treated as a formal language with an acceptor (recognizer), as is the typical real-world case where parsers are just hacked together, then invalid inputs often end up being processed. The often-quoted engineering practice of "being liberal in what you accept, and conservative in what you send" may cause security issues because liberal acceptance often means that we have to interpret badly defined inputs. Security-wise, it is usually better to be conservative. Dropping invalid input as early as possible is usually a good strategy.
Tainting. In real-world systems, we often process data flows whose origin is unknown, untrusted, or obscure. A strategy that can be pursued both in secure coding and by various tools is "tainting" these untrusted data flows, and only using them after they have been "untainted". This strategy will be discussed later in more detail.
Context-specific output encoding. Systems output data to other systems. Depending on where the data is being output, it may need to be escaped or encoded. The only place where we really know the required encoding is at the output – we cannot guess where the data ends up later during its lifetime. Doing this elsewhere may lead to double-encoding or missing encoding (the latter of which can be a security issue).
Recap of session 1: Data is being run as code in the process context. In the demo and exercises last week, we were working in an environment where the lowest-level execution environment - the processor itself - is tricked into executing attacker's code.
The same idea can be pulled off on higher level languages. In these situations, it is typically an interpreter which is tricked into executing code that has been injected into the original program. The details vary by language and environment.
Since the advent of the World Wide Web, so-called "web applications" have become an extremely widely deployed set of programs. Originally, most of the logic was on the server end, and static web pages written in HTML were passed back and forth.
Discussion: Which execution environments or languages exist in the web application space? Where are they executed? Where does the code that they execute, come from?
SQL is also a real programming language in its own right.
One thing that protects the server side from a complete failure is that web servers usually run programs written in a higher level language, such as Python or PHP, where things like buffer overflows are less of a problem. Of course, these languages have their own failure modes and injection vectors.
Some ways of getting attacker's code to run in a web application context. We will look at two: Cross-Site Scripting and SQL injection as examples.
Browsers' security model is Same-Origin Policy. The "origin" is a triplet of the URI scheme, domain, and port.
Scripts from a specific origin can only access and manipulate data, and connect to, resources from the same origin.
An XSS attack means that the attacker can inject code into a document which the browser thinks came from that specific origin, and thus can get access to something the attacker shouldn't be able to access.
A reflected XSS attack sends the attack code in a request, and gets it back in a response. Because the code now "came" from the specific origin, it has elevated its privileges to act as if it really was intended to come from the server.
A stored XSS attack is like a reflected attack, but the attack code gets somehow stored in a database or some other place, and it gets played back without it being in the currently processed request.
What an attacker can typically do with an XSS attack?
Manipulate the web page, and access anything the user types on the web page.
There are new web technologies such as Cross-Document Messaging and Cross-Origin Resource Sharing (CORS), which have an effect on the same-origin policy. We will not go into these in detail, but just to let you know that if you want to stay relevant in modern web application security, you need to read up on those.
Discuss: What aspects of the system model of Part 1 contribute to the existence of the XSS problem?
SQL is still the most prevalent back-end database query language. The rise of so-called NoSQL databases has eroded the popularity a bit. However, similar injection ideas also work for many NoSQL databases. Cassandra's CQL even looks like SQL.
A very typical SQL injection happens when attacker-supplied query terms are directly concatenated into an SQL query. They get executed as a part of the SQL query under the database user's (application's) privileges, and in this way this can also be construed as a privilege escalation.
Add, copy, or delete data.
Dump contents (many of the 'data breaches' reported in the press have an SQL injection at their core).
New SQL users could perhaps be created, if the permissions are right.
If the SQL server (and the user on which the injection code is executed) provides some more esoteric services, such as access to the underlying OS environment, those might get used.
Discuss: What aspects of the system model of Part 1 contribute to the existence of SQL injections?
and of course, input languages that cannot be validated because they're too expressive, so you can't write a proper parser (recogniser).
What would be the (academically speaking) correct way to do input encoding?
A state machine that is driven by specifc inputs, with clearly defined state transitions that are caused by each symbol that is read.
This requires a formal grammar specification for the input. The challenge is that many real-life inputs are not easy to parse. For example, validating input where validation depends on something that was in the input previously (context-sensitive) potentially causes pretty hard validation challenges. Also most real-life specifications are not formal enough to be without interpretation issues.
Prepared statements are query language, and often database specific.
The idea is that attacker injection only works if the injected data is interpreted as code (i.e., directing execution) in the output context.
Usually every output context has escaping rules where characters that would otherwise have special meaning will be transformed into something that only represents the character.
Input validation does not replace the need to do proper output encoding.
When doing input validation, you do not yet know in which contexts the data is going to be output in the future.
In output validation, the developer knows exactly where the untrusted data is (immediately) being used, so specific escaping or encoding can be applied.
There is less probability for data corruption due to poorly implemented, pre-emptive escaping or filtering.
What sort of attacks does output encoding not help?
Input TAINTING is a method that can be used to track untrusted input through the system.
The term "tainting" comes from Perl.
Untrusted (i.e., potential attacker) input is marked as "tainted", and the system ensures that tainted data cannot be output in any sensitive output context before being untainted (i.e., escaped or encoded).
Some frameworks offer good support for this, e.g., Django (a Python web framework).
Aim as simple inputs as possible, and implement parsers for them using a parser generator (look at Bison and Yacc).
Perform complex parsing in a restricted environment, like a sandbox, if you can.
Never try to guess what the input meant. Strict input validation and silent discard are often good alternatives, although compatibility issues may be in conflict with this principle.
Always understand the output context and perform output encoding when you know the output context. Do not perform encoding/escaping until you know the output context, to avoid double encoding.
Note: Cross-Site Request Forgery, discussed below, is one of the topics of the weekly exercise. It will not be demoed during the lecture, but if requested, we will demonstrate it during the weekly "lab hours".
There's a large category of problems that are related to confused state machines that plague web applications.
HTTP itself is stateless, but web applications are stateful.
In order to tie separate web page requests together, the server must have some information about the client. Usually this is done through creating a session, identified by a session identifier, and the client provides this session identifier to the server in every request.
This is often implemented as a session cookie, which, as we remember, is sent automatically every time a request is made to that domain.
This opens up various ways of attacking the user's session.
The target site believes that this was an authentic user-initiated request and processes it.
Mitigating these risks is a pain if you need to do this manually. Modern, good web frameworks provide protection against this type of issues (as well as good session control) out of the box.
Therefore, it is important to keep these issues in mind when doing technology selection for web application development.
Note: The weekly exercise involves the use of attack proxies. We will do a high-level introduction to them during the lecture to get you up to speed. If you need more face-to-face coaching, that is available during the "lab hours".
Typical exploratory web security testing utilises an attack proxy.
An attack proxy sits between the client and the server, and allows the tester to modify server requests and responses.
OWASP has a tool called Zaproxy (Zed Attack Proxy); there is a commercial tool with a lot of market share called the Burp Suite.
Demo: We show both Burp Suite and Zap in practice, how they look like, and what concepts you need to understand about them.
This is a list of useful documents that will enhance your understanding of the course material. The reading list is session-by-session. "Primary" material means something you would be expected to read if you are serious about the course, and may help you to do the weekly exercise; "Additional" material you may want to read if you would like to deepen your understanding on a specific area.
Graff and van Wyk: Secure Coding: Principles and Practices, chapter 4: Implementation, subsections "Handle Data with Caution", and "Bad Practices".
Graff and van Wyk: Secure Coding: Principles and Practices, chapter 4: Implementation, subsection "'State' on the Web". Where you are at it, read the whole chapter 4, it isn't that long.
The sqlmap SQL injection discovery tool is a powerful thing. Have a look at its feature list.
Have a look at Django security documentation. Of special note, read the section on XSS and think about how the "safe strings" concept relates to tainted data and output encoding. Also read the section on CSRF and try to comprehend how the CSRF protection works in Django. It doesn't matter if you don't have previous Python or Django exposure; the overall idea should be clear.
Programs with exploitable bugs can be viewed as weird machines that are programmed with exploits; for example, a ROP attack could be seen as a language that specifies an execution flow for a machine that is the vulnerable program. If you're interested, see Bratus et al.: Exploit Programming: From Buffer Overflows to "Weird Machines" and Theory of Computation and Bratus, et al.: Beyond Planted Bugs in "Trusting Trust": The Input-Processing Frontier in IEEE Security & Privacy, January 2014.
For the course targets, the weekly exercise will get you the exposure to the attack proxies. The Burp Suite documentation is fairly good, so I recommend reading http://portswigger.net/burp/help/suite_usingburp.html#vulns and get a feel of how a web application security assessment would run (even if you would choose to use Zaproxy for the weekly exercise).
Stuttard and Pinto: The Web Application Hacker's Handbook, 2nd Edition. This is a thick one, and definitely not needed for the course. But if you want to go forward in web application security testing, this one methodically gives you a (long!) checklist of things you need to explore. Written by the author of the Burp Suite, it goes well with that specific tool. Unlike many "hacking" books out there, the book approaches web security testing as a methodical and sometimes boring exercise (which is what it is). It is getting a bit dated, so it doesn't cover the newest web technologies. I hope the authors will update the book at some point.
Zalewski: The Tangled Web. This book is a seemingly neverending list of design and implementation failures in web browsers and technologies. It makes an entertaining reading if you have any background in web application implementation or standardisation, and opens your eyes to all the crud that there is in this space. Also this book is getting a bit dated - it does not diminish the humor value, though.
This is lecture support material for the course on Software Security held at Aalto University, Spring 2016. It is not intended as standalone study material.
Created by Antti Vähä-Sipilä <avs@iki.fi>, @anttivs. Big thanks to Sini Ruohomaa and Prof. N. Asokan.


Back in my earlier sewing years, I had this "fast fashion" habit of trying to sew up garments as quickly as possible. Sometimes I'd want a new top to wear going out that night so I'd rush through the process. Perhaps unsurprisingly my workmanship wasn't the best and things did not always fit very well. It no longer makes sense for me to sew 5-6 garments a month at lightning speed simply because I don't need that many clothes. I would be happy to make 1-2 garments a month if they're well-made and will last. This time around I'm trying to make a concerted effort to slow down and do a good job. Unfortunately I have yet to outgrow my natural sense of impatience.
About a month ago, I watched as many Bluprint (formerly Craftsy) classes as I could on sewing jeans and fitting/drafting pants. I was all set to buy a new jeans pattern, but common sense prevailed. I've had Jalie 2908 in my stash for years. Several of the classes suggested that you really only need 1 well-fitting jeans pattern and then you can make as many style variations as you want. I traced off a size Q (which is actually a girls' size but it was the closest to my actual measurements, go figure) and went to work.
At this point I have lost count but I think I've gone through at least 6 muslins. Pants fitting was always really hard for me and it appears that it hasn't gotten any easier. I'm hoping to post more about this later but I've really learned a lot about my body shape, namely that I am curvier than my measurements (and the eye test) might suggest. I finally gave up and cut out my fabric not because I had the fit perfect but more because I ran out of random stretchy bottomweights that I could use for practice.
I bought some remnant Cone Mills Denim from Threadbare Fabrics on sale. I am aware that my first pair of jeans will probably not turn out that great, so though it was still on the pricey side, certainly it's not the end of the world if they end up in the trash.
I've been following the Sewing Designer Jeans class. It's a good class for the most part but it's one of those things that makes the process look fairly easy when in my experience it hasn't been. For example, I like doing the distressing because I don't like super dark denim and that worn-in look makes the fabric softer. But although the teacher does give instructions for how to distress it takes practice to get it right. so instead of having those perfect horizontal whiskers on the front hips, i have weird random creases. i also made the mistake of trying to distress the knees while i was wearing the jeans so i have super obvious light blotches right at my knee bones, which is not a great look. but again, i knew going in that these jeans wouldn't be perfect and I'm willing to accept that.
Another thing that is driving me batty is my choice of Gutterman topstitching thread. firstly it only comes on like 33 yd spools (at least at joanns) which is kind of obnoxious. but mostly what is maddening is that the thread will skip a stitch or shred right before I'm finished with my topstitching, so I have to rip it out when I'm like 1" from the end. I also don't like how thick and shiny it is, and I made a poor color choice. I know that bright gold is traditional but I prefer more subtle topstitching.
I am taking my time and basically following the lessons from the class, one day = one lesson. it helps keep my sewing to manageable chunks but man, it's taking forever. i'm already pretty sick of this project and I just want to sew something else. plus there's the very likely takeaway that I won't even wear these jeans when they're done so it feels like it's just a waste of time.
hopefully i'll get through this, file away a bunch of new knowledge for later, and eventually i'll be ready to try again. but for now it's definitely a struggle.