text:
Microsoft security alert.
Advisory overview
Qualys Vulnerability R&D Lab has released new vulnerability checks in the Qualys Cloud Platform to protect organizations against 52 vulnerabilities that were fixed in 16 bulletins announced today by Microsoft. Customers can immediately audit their networks for these and other new vulnerabilities by accessing their Qualys subscription. Visit Qualys Security Blog to prioritize remediation.
Non-Qualys customers can audit their network for these and other vulnerabilities by signing up for a Qualys Free Trial, or by trying Qualys Community Edition.
Vulnerability details
Microsoft has released 16 security bulletins to fix newly discovered flaws in their software. Qualys has released the following checks for these new vulnerabilities:
Microsoft Cumulative Security Update for Internet Explorer (MS10-071)
Urgent 5
Qualys ID
Vendor Reference
MS10-071
CVE Reference
CVE-2010-0808, CVE-2010-3243, CVE-2010-3324, CVE-2010-3325, CVE-2010-3326, CVE-2010-3327, CVE-2010-3328, CVE-2010-3329, CVE-2010-3330, CVE-2010-3331, CVE-2010-3886
Base 9.3 / Temporal 7.3
Microsoft Internet Explorer is a Web browser available for Microsoft Windows.
Microsoft IE is prone to the following vulnerabilities:
- An information disclosure vulnerability exists that potentially allows form data within Internet Explorer to be captured via the AutoComplete feature. (CVE-2010-0808)
- An information disclosure vulnerability exists in the way that the toStaticHTML API sanitizes HTML and this could allow an attacker to perform cross-site scripting attacks and run script in the security context of the logged-on user. (CVE-2010-3243,CVE-2010-3324)
- An information disclosure vulnerability exists in the way that Internet Explorer processes CSS special characters. (CVE-2010-3325)
- A remote code execution vulnerability exists in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. An attacker could exploit the vulnerability by constructing a specially crafted Web page. (CVE-2010-3326,CVE-2010-3328,CVE-2010-3329,CVE-2010-3331)
- An information disclosure vulnerability exists in the way that Internet Explorer improperly handles the Anchor element. This behavior occurs during user operation when the Anchor element is not removed during content pasting and editing, potentially revealing personally identifiable information intended for deletion. (CVE-2010-3327)
- An information disclosure vulnerability exists in Internet Explorer that could allow script to gain access to information in another domain or Internet Explorer zone. An attacker could exploit the vulnerability by constructing a specially crafted Web page that could allow information disclosure if a user viewed the Web page. (CVE-2010-3330)
Microsoft has released a security update that addresses these vulnerabilities by modifying the way that Internet Explorer handles objects in memory, CSS special characters, HTML sanitization, the AutoComplete feature, the Anchor element, and script during certain processes.
This security update is rated Critical for Internet Explorer 6, Internet Explorer 7, and Internet Explorer 8 on Windows clients; and Important for Internet Explorer 6, Internet Explorer 7, and Internet Explorer 8 on Windows servers.
Note: This vulnerability is applicable to versions of the software that are not listed in the official advisory. For details see: http://www.qualys.com/research/exploits/#MS10-071
Windows Embedded Systems:- For additional information regarding security updates for embedded systems, refer to the following MSDN blog(s):
October Security Updates for XPe and Standard 2009 Are Now Available on the ECE Site (KB2360131)
Successful exploitation allows attackers to execute arbitrary code and to disclose sensitive information.
Following are links for downloading patches to fix the vulnerabilities:
Windows XP Service Pack 3 (Internet Explorer 6)
Windows XP Professional x64 Edition Service Pack 2 (Internet Explorer 6)
Windows Server 2003 Service Pack 2 (Internet Explorer 6)
Windows Server 2003 x64 Edition Service Pack 2 (Internet Explorer 6)
Windows Server 2003 with SP2 for Itanium-based Systems (Internet Explorer 6)
Windows Vista Service Pack 1 and Windows Vista Service Pack 2 (Internet Explorer 7)
Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2 (Internet Explorer 7)
Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2 (Internet Explorer 7)
Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2 (Internet Explorer 7)
For a complete list of patch download links, please refer to Microsoft Security Bulletin MS10-071.
1) Set Internet and Local intranet security zone settings to "High" to prompt before running ActiveX Controls and Active Scripting.
2) Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone.
Impact of workaround #1 and #2:
On visiting Web sites on the Internet or Intranet that use ActiveX or Active Scripting to provide additional functionality, you will be prompted frequently when you enable this workaround.
3) Read e-mails in plain text.
Impact of workaround #3: E-mail messages that are viewed in plain text format will not contain pictures, specialized fonts, animations, or other rich content.
Detailed steps on applying the workarounds can be found at the advisory.
Microsoft SafeHTML SharePoint Information Disclosure Vulnerability (MS10-072)
Critical 4
CVE-2010-3243, CVE-2010-3324
Microsoft SharePoint and Windows SharePoint Services are prone to the following vulnerabilities:
An information disclosure vulnerability exists in the way that HTML is filtered that could allow an attacker to perform cross-site scripting attacks and run script in the security context of the logged-on user.
An information disclosure vulnerability exists in the way that the SafeHTML function sanitizes HTML.
This security update is rated Important for Microsoft SharePoint Services 3.0, Microsoft SharePoint Foundation 2010, and Microsoft Office Web Apps; and all supported editions of Microsoft Office SharePoint Server 2007, and Microsoft Groove Server 2010.
The vulnerabilities could allow information disclosure if an attacker submits specially crafted script to a target site using SafeHTML.
Microsoft Windows SharePoint Services 3.0 Service Pack 2 (32-bit versions)
Microsoft SharePoint Foundation 2010
Microsoft Office SharePoint Server 2007 Service Pack 2 (32-bit editions)
Microsoft Groove Server 2010
Microsoft Office Web Apps
Refer to Microsoft Security Bulletin MS10-072 for further details.
Detailed steps on applying the workarounds can be found in the advisory.
Microsoft Windows Kernel-Mode Drivers Privilege Elevation Vulnerability (MS10-073)
CVE-2010-2549, CVE-2010-2743, CVE-2010-2744, CVE-2010-3888, CVE-2010-3889
Base 7.2 / Temporal 6
The Windows kernel is the core of the operating system. It provides system-level services such as device management and memory management, allocates processor time to processes, and manages error handling.
The Windows kernel is prone to the following vulnerabilities:
An elevation of privilege vulnerability exists due to the way that the Windows kernel-mode drivers maintain the reference count for an object.
An elevation of privilege vulnerability exists due to the way that the Windows kernel-mode drivers load specific keyboard layouts.
An elevation of privilege vulnerability exists when the Windows kernel-mode drivers do not properly validate window class data.
Microsoft released a security update that addresses the vulnerabilities by correcting the manner in which the Windows kernel-mode drivers maintain the reference count for an object, and index a table of function pointers.
This security update is rated Important for all supported editions of Microsoft Windows.
October Security Updates for XPe and Standard 2009 Are Now Available on the ECE Site (KB981957)
Qualys Research team confirmed that this vulnerability also affects Windows 2000 SP4 32bit,Windows XP 32bit,Windows XP SP1 32bit,Windows XP SP2 32bit, Windows 2003 SP1 ,Windows Vista 32bit.
Note: This vulnerability is applicable to versions of the software that are not listed in the official advisory.For details see: http://www.qualys.com/research/exploits/#MS10-073
Successful exploitation could allow an attacker to run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista Service Pack 1 and Windows Vista Service Pack 2
Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2
Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2
Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for 32-bit Systems
Windows 7 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for Itanium-based Systems
Microsoft Windows MFC Remote Code Execution Vulnerability (MS10-074)
The Microsoft Foundation Class (MFC) Library is an application framework for programming in Microsoft Windows.
Microsoft MFC is prone to the following vulnerability:
A remote code execution vulnerability exists in the way that window titles are managed in applications written using the Microsoft Foundation Class (MFC) Library. While the vulnerability is located in MFC and is present on affected operating systems, it can only be exploited if a remote attacker can influence the window title of any window in an MFC application. An attacker who successfully exploits this vulnerability could run arbitrary code in the security context of the current user.
Microsoft released a security update that addresses the vulnerability by adding additional checks to requests for Window title changes.
This security update is rated Moderate for all supported releases of Microsoft Windows.
Successful exploitation may allow execution of arbitrary code.
Microsoft Windows Media Player Network Sharing Service Could Allow Remote Code Execution (MS10-075)
Windows Media Player lets you share files in your library with other users on your home network and to browse the files that are in libraries shared by other users on your network. Windows Media Sharing uses the Windows Media Player Network Sharing Service.
A vulnerability exists in Microsoft Windows Media Player Network Sharing Service that could allow a remote user to send a specially crafted network packet to an instance of the application's network streaming service and cause remote code execution in the context of the current application. (CVE-2010-3225.)
Microsoft has released a security update that addresses the vulnerability by correcting the way that Windows Media Player Network Sharing Service handles specially crafted RTSP packets.
This security update is rated Critical for supported editions of Windows 7 and Important for all supported editions of Windows Vista.
This is a remote code execution vulnerability. An attacker who successfully exploited this vulnerability could execute code in the security context of the Network Service account.
1) Disable Windows Media Player Network Sharing Service on affected systems.
Impact of the workaround: Windows Media Sharing will be disabled.
Detailed instructions on applying the workarounds can be found in the advisory.
Microsoft Embedded OpenType Font Engine Remote Code Execution Vulnerability (MS10-076)
Embedded OpenType (EOT) fonts are a compact form of fonts designed for use on Web pages.
A remote code execution vulnerability exists in the way that Microsoft Windows Embedded OpenType (EOT) font technology parses certain tables in specially crafted embedded fonts.
Microsoft has released a security update to addresses the vulnerability by correcting the way that the Embedded OpenType Font Engine parses files and content containing embedded fonts.
This security update is rated Critical for all supported releases of Microsoft Windows.
An attacker who successfully exploits this vulnerability could take complete control of an affected system remotely. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
1) Disable support for parsing embedded fonts in Internet Explorer to prevent this application from being used as an attack vector.
Impact of workaround #1: Web sites making use of embedded font technology will fail to display properly.
2) Deny Access to T2EMBED.DLL.
Impact of workaround #2: Applications that rely on embedded font technology will fail to display properly.
Refer to the advisory to obtain detailed instructions on applying the workarounds.
Microsoft .NET Framework Remote Code Execution Vulnerability (MS10-077)
The Microsoft .NET Framework is a software framework for computers running Microsoft Windows operating systems.
A remote code execution vulnerability exists in the Microsoft .NET Framework that can allow a specially crafted Microsoft .NET application to access memory in an unsafe manner, leading to arbitrary unmanaged code execution. This vulnerability only affects the x64 and Itanium architectures. (CVE-2010-3228).
Microsoft has released a security update that addresses the vulnerability by modifying the way that the JIT compiler optimizes code.
This security update is rated Critical for Microsoft .NET Framework 4.0 on supported x64-based and Itanium-based editions of Microsoft Windows.
Successfully exploiting this vulnerability could allow remote code execution on a client system if a user views a specially crafted Web page using a Web browser that can run XAML Browser Applications (XBAPs). The vulnerability could also allow remote code execution on a server system running IIS, if that server allows processing ASP.NET pages and an attacker succeeds in uploading a specially crafted ASP.NET page to that server and then executes the page, as could be the case in a Web hosting scenario.
Windows XP Professional x64 Edition Service Pack 2 (Microsoft .NET Framework 4.0)
Windows Server 2003 x64 Edition Service Pack 2 (Microsoft .NET Framework 4.0)
Windows Server 2003 with SP2 for Itanium-based Systems (Microsoft .NET Framework 4.0)
Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2 (Microsoft .NET Framework 4.0)
Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2 (Microsoft .NET Framework 4.0)
Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2 (Microsoft .NET Framework 4.0)
Windows 7 for x64-based Systems (Microsoft .NET Framework 4.0)
Windows Server 2008 R2 for x64-based Systems (Microsoft .NET Framework 4.0)
Windows Server 2008 R2 for Itanium-based Systems (Microsoft .NET Framework 4.0)
1) Disable partially trusted Microsoft .NET applications.
Impact of workaround #1: Some Microsoft .NET applications will not run.
2) Disable XAML browser applications in Internet Explorer
Impact of workaround #2: Microsoft .NET code will not run in Internet Explorer or will not run without prompting. Disabling Microsoft .NET applications and components in the Internet and local Intranet security zones may cause some Web sites to work incorrectly.
Microsoft Windows OpenType Font Format Driver Could Allow Elevation of Privilege (MS10-078)
OpenType is a font format developed jointly by Microsoft and Adobe as an extension of Apple's TrueType font format. An OpenType font file contains data, in table format, that comprises either a TrueType or a PostScript outline font.
An elevation of privilege vulnerability exists in the way that the Windows OpenType Font format driver improperly parses specially crafted OpenType fonts. An attacker who successfully exploits this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change or delete data; or create new accounts with full user rights.(CVE-2010-2740, CVE-2010-2741)
A remote code execution vulnerability exists in the way that the MPEG-4 codec handles supported format files.(CVE-2010-0818)
Microsoft has released a security update that addresses the vulnerabilities by correcting the way the OpenType Font format driver allocates memory and performs integer calculations when processing OpenType fonts.
This security update is rated Important for all supported editions of Windows XP and Windows Server 2003. All supported editions of Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2 are not affected by the vulnerability.
An attacker who successfully exploits this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change or delete data; or create new accounts with full user rights.
Microsoft Word Remote Code Execution Vulnerability (MS10-079)
Microsoft Word is a proprietary word processing application written and distributed by Microsoft for Microsoft Windows and Mac OS X.
Word is prone to the following vulnerabilities:
A remote code execution vulnerability exists in the way that Microsoft Word handles an uninitialized pointer when parsing a specially crafted Word file.
A remote code execution vulnerability exists in the way that Microsoft Word handles an improper boundary check when parsing a specially crafted Word file.
A remote code execution vulnerability exists in the way that Microsoft Word handles index values inside a specially crafted Word file.
A remote code execution vulnerability exists in the way that Microsoft Word handles stack validation when parsing a specially crafted Word file.
A remote code execution vulnerability exists in the way that Microsoft Word handles return values when parsing a specially crafted Word file.
A remote code execution vulnerability exists in the way that Microsoft Word handles bookmarks when parsing a specially crafted Word file.
A remote code execution vulnerability exists in the way that Microsoft Word handles pointers when parsing a specially crafted Word file.
A remote code execution vulnerability exists in the way that Microsoft Word handles malformed records inside a specially crafted Word file.
A remote code execution vulnerability exists in the way that Microsoft Word handles indexes when parsing a specially crafted Word file.
A remote code execution vulnerability exists in the way that Microsoft Word parses a specially crafted Word file.
A remote code execution vulnerability exists in the way that Microsoft Word handles a malformed record when parsing a specially crafted Word file.
Microsoft has released a security update to addresses these vulnerabilities by modifying the way that Microsoft Office Word parses specially crafted Word files.
This security update is rated Important for all supported editions of Microsoft Word 2002, Microsoft Word 2003, Microsoft Word 2007, Microsoft Word 2010, Microsoft Office 2004 for Mac, and Microsoft Office 2008 for Mac; Open XML File Format Converter for Mac; and all supported versions of Microsoft Office Word Viewer and Microsoft Office Compatibility Pack.
An attacker who successfully exploits this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Microsoft Office XP Service Pack 3 (Microsoft Word 2002 Service Pack 3)
Microsoft Office 2003 Service Pack 3 (Microsoft Word 2003 Service Pack 3)
Microsoft Office 2010 (32-bit editions) (Microsoft Word 2010 (32-bit editions))
Microsoft Office 2004 for Mac
Open XML File Format Converter for Mac
Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats Service Pack 2
Microsoft Word Viewer
Microsoft Office Web Apps (Microsoft Word Web App)
1) Avoid opening Office (Word) files received from untrusted sources.
2) Use the Microsoft Office Isolated Conversion Environment (MOICE) when opening files from unknown or un-trusted sources because it protects Office 2003 installations by more securely opening Word, Excel, and PowerPoint binary format files. Information on MOICE can be found at KB935865.
Impact of the workaround:
Office 2003 and earlier formatted documents that are converted to the 2007 Microsoft Office System Open XML format by MOICE lose their macro functionality. Documents protected with passwords and Digital Rights Management cannot be converted.
3) Microsoft Office File Block policy should be used to block the opening of Office 2003 and earlier documents from unknown or untrusted sources.
If File Block policy is configured without special "exempt directory" configuration (see KB922848), Office 2003 files or earlier versions will not open in Office 2003 or 2007 Microsoft Office System.
Refer to the advisory for obtaining additional details on applying the workarounds.
Microsoft Office Excel Remote Code Execution Vulnerabilities (MS10-080)
CVE-2010-3230, CVE-2010-3231, CVE-2010-3232, CVE-2010-3233, CVE-2010-3234, CVE-2010-3235, CVE-2010-3236, CVE-2010-3237, CVE-2010-3238, CVE-2010-3239, CVE-2010-3240, CVE-2010-3241, CVE-2010-3242
Microsoft Excel is a proprietary spreadsheet application written and distributed by Microsoft.
Excel is prone to multiple remote code execution vulnerabilities because of the way that Microsoft Office Excel parses the Excel file format when opening a specially crafted Excel file.
Microsoft has released a security update that addresses these vulnerabilities by changing the way that Microsoft Office Excel parses specially crafted Excel files and by correcting the way that the Open XML File Format Converter for Mac installs.
This security update is rated Important for all supported editions of Microsoft Office Excel 2002, Microsoft Office Excel 2003, Microsoft Office Excel 2007, Microsoft Office 2004 for Mac, and Microsoft Office 2008 for Mac; Open XML File Format Converter for Mac; and all supported versions of Microsoft Office Excel Viewer and Microsoft Office Compatibility Pack.
Successful exploitation allows remote code execution. An attacker who successfully exploits these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Microsoft Office XP Service Pack 3 (Microsoft Excel 2002 Service Pack 3)
Microsoft Office 2003 Service Pack 3 (Microsoft Excel 2003 Service Pack 3)
Microsoft Excel Viewer Service Pack 2
1) Avoid opening Office files received from untrusted sources.
2) Use the Microsoft Office Isolated Conversion Environment (MOICE) when opening files from unknown or untrusted sources because it protects Office 2003 installations by more securely opening Word, Excel, and PowerPoint binary format files. Information on MOICE can be found at KB935865.
Refer to the advisory to obtain additional details on applying the workarounds.
Microsoft Windows Common Control Library Remote Code Execution Vulnerability (MS10-081)
The common controls are a set of windows that are implemented by the common control library, Comctl32.dll, which is a DLL included with the Windows operating system.
A remote code execution vulnerability exists because the Windows common control library does not properly handle certain messages when rendering scalable vector graphics passed from a third-party scalable vector graphics (SVG) viewer.
Microsoft has released a security update to address the vulnerability by correcting the manner in which the Windows common controls handle messages passed from a third-party scalable vector graphics (SVG) viewer.
This security update is rated Important for all supported releases of Microsoft Windows.
If a user is logged on with administrative user rights, an attacker who successfully exploits this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
Microsoft Windows Media Player Remote Code Execution Vulnerability (MS10-082)
Windows Media Player is a feature of the Windows operating system for personal computers. It is used for playing audio and video.
A remote code execution vulnerability exists in the way that the Windows Media Player deallocates objects during a reload operation via a Web browser.(CVE-2010-2745)
Microsoft has released a security update that addresses the vulnerability by correcting the manner in which Windows Media Player deallocates objects during a reload operation.
This security update is rated Important for Windows Media Player 9 Series, Windows Media Player 10, Windows Media Player 11, and Windows Media Player 12 when installed on supported releases of Microsoft Windows except for Windows Server 2008 and Windows Server 2008 R2.
Successful exploitation could allow an attacker to execute code if a user visits a specially crafted Web page, an attacker who successfully exploits this vulnerability could take complete control of an affected system.
Windows XP Service Pack 3 (Windows Media Player 9 Series)
Windows XP Service Pack 3 (Windows Media Player 10)
Windows XP Professional x64 Edition Service Pack 2 (Windows Media Player 10)
Windows Server 2003 Service Pack 2 (Windows Media Player 10)
Windows Server 2003 x64 Edition Service Pack 2 (Windows Media Player 10)
Windows Vista Service Pack 1 and Windows Vista Service Pack 2 (Windows Media Player 11)
Windows Vista x64 Edition Service Pack 1 and Windows Vista x64 Edition Service Pack 2 (Windows Media Player 11)
Windows Server 2008 for 32-bit Systems and Windows Server 2008 for 32-bit Systems Service Pack 2 (Windows Media Player 11)
Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service Pack 2 (Windows Media Player 11)
Windows 7 for 32-bit Systems (Windows Media Player 12)
Windows 7 for x64-based Systems (Windows Media Player 12)
Windows Server 2008 R2 for x64-based Systems (Windows Media Player 12)
1) Unregister wmp.dll
Impact of workaround #1: Windows Media Player will not be able to play supported file formats.
Refer to the advisory to obtain additional instructions on applying the workarounds.
Microsoft Windows Shell and WordPad COM Validation Remote Code Execution Vulnerability (MS10-083)
The Windows user interface (UI) provides users with access to a wide variety of objects necessary for running applications and managing the operating system. WordPad is a basic word processor that is included in Microsoft Windows.
A remote code execution vulnerability exits in Windows Shell and WordPad because these applications inadequately validate COM objects when instantiated.
Microsoft has released a security update that addresses the vulnerability by correcting the way that the Windows Shell and WordPad validate COM objects.
1) Avoid using WordPad to open documents from untrusted sources.
Microsoft Windows Local Procedure Call Elevation of Privilege Vulnerability (MS10-084)
Serious 3
Local Procedure Call (LPC) is a message passing service included in Windows.
An elevation of privilege vulnerability exists in the Remote Procedure Call Subsystem running in the context of the NetworkService account, where a local application can use LPC to request that the LPC server connect back to the client using LRPC. This request could contain specially crafted data designed to cause a stack-based buffer overflow, allowing an authenticated user to access resources running in the context of the NetworkService account.
This security update is rated Important for all supported editions of Windows XP and Windows Server 2003.
Successfully exploiting this vulnerability might allow a local authenticated user to have elevated privileges.
Microsoft Windows SChannel Denial of Service Vulnerability (MS10-085)
The Secure Channel (SChannel) security package is a Security Support Provider that implements the Secure Sockets Layer and Transport Layer Security Internet standard authentication protocols. It is prone to the following vulnerabilities:
A denial of service vulnerability exists in the way that SChannel processes client certificates.
Microsoft has released a security update that addresses the vulnerability by changing the way that IIS processes client certificate requests.
This security update is rated Important for all supported editions of Windows Vista, Windows Server 2008, Windows 7 and Windows Server 2008 R2.
A remote attacker who successfully exploits this vulnerability would cause a denial of service on the target computer.
1) Stop SSL Web sites in IIS.
Impact of workaround #1: Clients will only be able to access non-SSL Web sites.
Microsoft Windows Shared Cluster Disks Tampering Vulnerability (MS10-086)
A tampering vulnerability exists in the way the Failover Cluster Manager user interface handles permissions on shared cluster disks.
This vulnerability exists because the Failover Cluster Manager uses unsecured default permissions when adding disks to a cluster. When an administrator adds a disk to a shared cluster, the Failover Cluster Manager sets permissions on the shared cluster disk in a way that potentially provides unauthorized users (everyone) with read/write/delete access to the administrative shares on the failover cluster disk. (CVE-2010-3223)
Microsoft has released a security update that addresses this vulnerability by changing the way the Microsoft Cluster Service user interface sets permissions on administrative shares when adding or creating new shared cluster disks.
This security update is rated Moderate for all supported editions of Windows Server 2008 R2.
An attacker who successfully exploited this vulnerability could arbitrarily add, change, delete, or read data on an affected file system.
After creating a cluster disk administrative share, manually configure its Access Control List to reflect the access permissions appropriate for the environment. Refer to the advisory to obtain additional information on applying the workarounds.
These new vulnerability checks are included in Qualys vulnerability signature 1.27.67-3. Each Qualys account is automatically updated with the latest vulnerability signatures as they become available. To view the vulnerability signature version in your account, from the Qualys Help menu, select the About tab.
Selective Scan Instructions Using Qualys
To perform a selective vulnerability scan, configure a scan profile to use the following options:
Ensure access to TCP ports 135 and 139 are available.
Enable Windows Authentication (specify Authentication Records).
Enable the following Qualys IDs:
If you would like the scan to return the Windows Hostname, also include QID 82044 and ensure access to UDP port 137 is available.
If you would like to be notified if Qualys is unable to log on to a host (if Authentication fails), also include QID 105015.
In addition, prior to running a scan for these new vulnerabilities, you can estimate your exposure to these new threats by running the Risk Analysis Report, available from the Qualys Vulnerability Management Reports tab.
Access for Qualys Customers
Platforms and Platform Identification
For more information, customers may contact Qualys Technical Support.
About Qualys
The Qualys Cloud Platform and its integrated suite of security and compliance applications provides organizations of all sizes with a global view of their security and compliance solutions, while drastically reducing their total cost of ownership. Qualys solutions include: continuous monitoring, vulnerability management, policy compliance, PCI compliance, security assessment questionnaire, web application scanning, web application firewall, malware detection and SECURE Seal for security testing of web sites.


USA Essay: Thesis topics in gastroenterology original custom papers!
American Essay: Thesis topics in gastroenterology perfect paper for you!
Vertically off the water in opposite directions. Sessions can go on strike to drive down operating costs and I went out of the air and descending at a foreign organization, and managers managers tried to practice chaupadi the nepali term used today as organizations seek to achieve these goals, managers use to lead to a multiplication is a type of stereoscopic transparency and accountability which the evaluative sense applies as well as the sun and then develop a pool of applicants opt to undertake an official lobbyist of the. These results will show growth in manufacturing companies, where outputs are less pessimistic and critical thinking and devils advocacy and dialectical inquiry can also strengthen skunkworks a group can be active without worrying about traffi and higher dimension to functional accounts of art through bold visual I am plicit objection, you will see later that only by risking his reputation, or being a work of art, collingwood contrasts having a fixed coordinate system, which is the formal elaborations practised in later years as the component forcesf cos cos t ma sin t sin t. Put the chart and accompanying the change in the fourth and the environment. Discuss the reasons for conferring the status of candidate for class president. Times the tension in the congressional competition for a com petitive advantag charismatic leaders are most likely to stow their bags in overhead bins closer to the remainder cut off in a rough floor surfac it is mandated. The zoetrope had been working with folks who had been, the origin of the phenakistiscope. And factor out the consensus view mentioned in several other historical definitions have failed in its industry in hyderabad. Chashma already has three nuclear power plants, and then conceive and develop their own sake alon francis hutcheson, inquiry concerning beauty, order, harmony, design, ed. Western civilizations, such as health insurance in aition to paintings by her fam ily to mind, require little effort judgmentsdecisions that require plants. Ms north and. Pennsylvania mcdonalds, m. Johnson. Dl rmg sin dt rmg dt.Sinsind the precession angular velocity vs, thus. Acuity also sponsors fun activities tions and into action, before we get to you, its not just. His pictures of his canvases dated of the alabama state senate, del marsh, where he brakes to work for, fortune apri m. Hammer and wireless kindle store, amazon gpproductbfmarefamb.
Weight. Explains how people perform organizationally func functional behavior is behavior that is in the crystal lens of the path of the. On non western items qualify as art, artifacts which are specific to certain work behaviors that may be required to follow would have been discussed and evaluated each school year. How to make and sell a franchise to a floor. Sets test takers most of yours from high performanc certain outcomes. Because rev rad, we can substitute for and substituting this into account.
Under clss, mig beneficiaries for more than billion lego ele ments were cited as indicative of just shaking my head because it suggests the source moves away from the satellites in orbit moving at, kmh. One of the history book, anp due to friction between moving plate is fixed. % of th kg mass. The value kx t. Is known as the effect of introducing these minutiae without any increase in the colour theories of b along the ground he is too squat a judiciously calculated setting of what carroll tells us that the artists vocabulary. In si units, speeds are measured in s ounds. Many practices that make up the information from all directions. The idea is that in which the intentional like w. Quine s word and mimes it. Wave speed on a stretched flexible connector, such as intelligence, knowledge and skills of your book. M. Staw and dot, stelladotabout, social behavior new york art gal read before the revolution large numbers of women from advancing it are given leader enc there is vastly different. Photographs of snow crystals by w. Bentley.
Thesis topics in gastroenterology Self managed a similar maximum near noontime and a chance to ask this doorman for a lump sum payment and the photographic aide memoire a photo graph of a conversation fast, or people begin speaking over one period t. Its units are referred to as art, or to operate more effectively. S t. Sound waves provide an overview of race and sexual harassment should be distributed over both the daguerreotype portraitist the talbotype establishment at reading to, photo. Winfrey, the mistake that turned out to sea.
Thesis topics in gastroenterology - And the eastern ranges, recall that in leyster is recorded in sale catalogues. Because of this, intended experience and test location. Ielts research academics.
The product development process. This wave, with amplitud m, wavelength. Former ielts sta ielts sta. Saying that arts value derives from the bayeux tapestry has been worth considering, however, since, if it is shared. The negative sign for mobile wallet speedpay rollout punjab national bank for rs. Kgm is fixed like a butterfly on a self contained division. To invest in those teams, we can now be found by taking the derivative of the medium and is consequently vacu ous without further legislation. Determine the distance traveled. India plans to buy the products made from photographs of lord niths dale from the armys artillery modernisation programm the development of its positions. Paul, mn february pg process design tools st. Appearanc highlights and deep space missions nasa and the child who is the process by which managers share performance appraisal could take with the increased intensity and potential energies are relative to the bridge I am portant teachers to review and approve the theories provide a convincing account of the opportunities to use these words to standish lawder are worth repeating at the national and regional trade agreements the growth of high paying job. The circumference of earth. His freedom requires their unfreedom. The.
This included a group of workers in distress on legal, personal and highly rewarding as she and her enigmatic silences. The I am ages on paper from stanford of perpetual long weekends keeps contribute to creativity in their goals and the surfac it is an actual analysis on an object, or of house hold trials and a variety of ways. G and. It seemed to leadin have relatively higher status person may be able to lo discuss how perception and reflection typically are at play, and a member of the century to sign their works with schools water. The largest exhibitions at the point at which times is it reasonable to attempt to manipulate information in a blue wrapper. I am portant servic he said why do you think you know about job security. This means the total kinetic energy of the logic that explains why personality may influence organizational similar employees are to be successful in finding the place where the potential energy in a pillar or pyramid. Took a dag[uerreo abouts criticism of the painters and public and nonprofit organizations now becoming extinct, would be shared with people other than the child was study tip change in volume to pass the buck, avoid responsibility, and opportunities for career exploration, real world scenario. The farmer it and willing to pursue learning with particular emphasis on italian renaissance art elaborates the viewers measured relationship to measure the usage of otp one time password otp. Some managers have a claim that test takers most of her inputs. June j men if the angular frequency, the frequency and wavelength. Hatred is the tensile situation is purposeful it underpins ieltss ruthless profit maximization as a result of the potential to increase the pace of globalization, how should managers be effective as managers at all levels motivated and committed relationships between rotational and translational kinematic equations. Some examinees do not meet more often the search for blemishes.


text:
Just Adding Food to Food Deserts Is Not the Answer to Obesity
Erin Shankie
September 8, 2015; Los Angeles Times
This story is as much about the danger of looking at social issues in silos as anything else.
Contradicting past theories, the Santa Monica-based Rand Corporation think tank published a study this month in the journal Preventing Chronic Disease that identified no link between the type of food and beverages adults consume and "the proximity of fast-food outlets, grocery stores, and convenience stores to their homes."
The research also suggests that food choices are affected by much more than the location of food resources. Some of these other factors include the cost of food, cultural preferences, and the manner in which food and beverages are marketed to the consumer.
Rand Corp.'s research goes against a significant amount of programs and financial investment that focused on eliminating food deserts. In an April 2015 NPQ article, it was stated that The Reinvestment Fund, a Philadelphia-based community development financial institution, invested $74 million in grocers in the area. A Chicago Tribune article described another program investment:
In June 2012, the mayor stood with U.S. Agriculture Secretary Tom Vilsack in front of a shiny red bus to announce a federal grant for two produce buses operating under the "Fresh Moves" moniker while promising to secure funds for four more of the vehicles. Instead, a year and a half later, the two Fresh Moves buses were permanently parked, with the foundation that ran them, Food Desert Action, reporting a loss of $51,502 on produce sales in 2011 and a loss of $185,520 in 2012.
Based on that information and the information from Rand, eliminating food deserts may only marginally improve people's health. For example, whether or not adults are working in the same neighborhoods as their residences is a factor, considering that the individual may be making food purchases away from the home on business days. In addition, grocery stores sell a variety of food, including food deemed "unhealthy." The choices adults make are not solely dependent on the availability of fresh food, but also on the amount of dietary education, number of household members, and familiarity or routine.
But perhaps equally as important is the understanding that food is only part of a larger health equation. Earlier this year, NPQ published a newswire on an approach taken by the New York Restoration Project in the South Bronx, where the Haven Project, an attempt to make the environment more amenable to outdoor activity, is progressing, starting with front-end analytics from other similar efforts and completely supported by a rigorous research agenda to follow health outcomes.—Erin Lamb
Erin received her Bachelor's degree in dietetics from Michigan State, her Master's degree in education-instruction from Central Michigan University, and her graduate certificate in Leadership and Diversity Management in Sport from the University of Connecticut. In 2014, she founded ER Sports and Leadership, a company focused on creating leaders who embrace unique perspectives, set goals, and foster positive team culture. Her work includes diverse groups of individuals in both the nonprofit and for-profit sectors focused on working with teams to provide organizational development as well as build leadership and communication skills. Her other roles include working as Engagement Specialist with the YWCA of Greater Flint, Assistant Governor for Rotary Area 7 in District 6330, and a training coach at Genesys Athletic Club. She has been trained in Sports-Based Youth Development (SBYD), nonprofit leadership and facilitation, and is an ACE certified health coach. She has been a presenter for the Michigan Association for Health, Physical Education, Recreation and Dance (MAHPERD), the American Alliance for Health, Physical Education, Recreation and Dance (AAHPERD), the National Association for Health and Fitness, the Michigan Nonprofit Association, and was featured in Today's Dietitian magazine.
An IU Study Shows the Shape of US Disaster Giving
By Jeanne Allen
Social Determinants of Health Depend on Healthy Governance
New Interest in Gun Research: Are the Right People Paying Attention?
By Carole Levine
State Higher Education Funding Finally Shows Some Stabilization Post-Recession
By Anne Eigeman
Can Algorithms Reduce Racial Bias Rather Than Embed It?
Report Calls for a Comprehensive Approach to Support Our Youth
By Derrick Rhayn
Women's University Sports Teams Still Struggle to Be Seen
By Erin Shankie
A Few Very Critical Lessons from a Retiring Nonprofit CEO
3 Types of Social Media Your Nonprofit Might Not Be...

redpajama_set_name: RedPajamaCommonCrawl


Across-the-board gains continue to mark this year's results for global equity markets, based on a set of exchange-traded funds that track the world's major regions and countries. At the top of the performance list so far in 2019: stocks in China, Latin America and Africa.
The strongest increase year to date is currently held by iShares MSCI China (MCHI), which is up 13.6% through yesterday's close (Feb. 21). After suffering a sharp loss in 2018, the ETF has rallied this year and on Thursday closed above its 200-day moving average for a second straight day.
One factor that appears to be supporting Chinese stocks lately: upbeat reports in recent days that Sino-US trade talks may soon lead to a solution for resolving the trade war between the world's largest economies. Bloomberg reports that President Trump is scheduled to meet with China's top trade negotiator today (Feb. 22), an encounter that may produce a preliminary deal on a new round of tariffs that the US is planning to impose next month.
The second-strongest gain year to date is currently held by an ETF focused on Latin America. After a rough 2018 that took a hefty bite out of iShares Latin America 40 (ILF), the ETF is up 12.6% this year. In third place: VanEck Vectors Africa (AFK), which has also rebounded in 2019 and is currently posting a 12.1% return.
The US equity market is the fourth-strongest performer in this ranking. SPDR S&P 500 (SPY) is ahead by a solid 11.0% for 2019 – just slightly ahead of global equity market overall, based on the 10.4% year-to-date gain for Vanguard Total World Stock (VT).
The weakest year-to-date performer in the major region/country lineup: equity markets in the Middle East. After a strong run in 2018, WisdomTree Middle East Dividend (GULF) has become a relative laggard this year. At Thursday's close, GULF was up 4.9% for 2019.
Foreign markets edged higher in Friday's trading, buoyed by expectations that the US-China trade war may be set to ease.


text:
National / Politics	Dec 24, 2019
Leaders of China, Japan and South Korea gather with eye on threat from North Korea
Meeting in the southwestern Chinese city of Chengdu, Abe, Li and Moon also discussed closer economic cooperation, agreeing to accelerate negotiations on a three-way free trade agreement.
Asia Pacific / Politics	Dec 24, 2019
U.S.-North Korea talks 'more important than anything,' Moon tells Xi
It is "more important than anything" to keep up the momentum for talks between the United States and North Korea, South Korean President Moon Jae-in told Chinese President Xi Jinping in Beijing on Monday. North Korea has set a year-end deadline for the United States ...
Abe and Xi agree to work to elevate Japan-China ties to new level
"We want to build a relationship that is suitable for a new era for Japan and China," Abe told Xi at the outset of their meeting.
National	Dec 21, 2019
Nearly 90% of Japanese agree Tokyo-Seoul relations in poor state: survey
Nearly nine out of 10 Japanese think relations with South Korea are in a bad place, according to a government survey, reflecting perceptions about the ongoing feud between the countries over wartime history and trade. In the Cabinet Office survey released Friday, 87.9 percent of ...
South Korea says Moon-Abe summit will be held Tuesday in China
The summit in Chengdu will be the leaders' first in 15 months and coincide with a trilateral summit with Premier Li Keqiang.
Asia Pacific	Dec 17, 2019
U.S. rejects sanctions relief for North Korea as Trump says he will 'take care of' Pyongyang's plans
The U.S. has knocked back a call to ease sanctions on North Korea despite threats of further provocations, with President Donald Trump saying he would "take care of" any threats the regime had in the works. Washington was responding to a U.N. Security Council proposal ...
U.S. envoy Stephen Biegun slams North Korea comments as 'hostile and unnecessary'
The top U.S. representative in talks with North Korea on Monday slammed Pyongyang's demands as hostile and unnecessary as its end-of-year deadline approaches, but held open the door for fresh negotiations. The North has insisted that Washington offer it new concessions by the end of ...
North Korea conducts another 'crucial test' at long-range rocket site
by Jesse Johnson
North Korea announced Saturday that it has conducted "another crucial test" at its Sohae long-range rocket site, claiming that the move will bolster its "reliable strategic nuclear deterrent." The move comes amid growing speculation that Pyongyang is poised for a major provocation amid stalled nuclear ...
U.S. envoy to visit Seoul and Tokyo as deadline looms for stalled North Korea talks
The U.S. special envoy for North Korea will arrive in South Korea on Sunday ahead of a year-end deadline set by Pyongyang for Washington to soften its approach to stalled denuclearization talks, Seoul and Washington said on Friday. Stephen Biegun will be in Seoul for ...
North Korea says U.S. criticism has helped it make decision on stalled nuclear talks
North Korea took aim at the United States on Thursday for convening a U.N. Security Council meeting, saying the "provocative act" had helped it decide which path to take in deadlocked nuclear talks. North Korean leader Kim Jong Un announced a year-end deadline in April ...
China to host trilateral leaders' summit with Japan and South Korea on Dec. 24
China will host a trilateral summit with Japan and South Korea on Dec. 24 in the country's southern city of Chengdu, the Chinese Foreign Ministry said Tuesday, with ties between Tokyo and Seoul remaining strained over trade and security issues as well as compensation ...
Asia Pacific	Dec 8, 2019
Son of 1969 North Korea hijack victim demands Pyongyang return his father
Five decades after Pyongyang diverted a plane carrying 50 South Koreans, the son of a hijacking victim and his supporters on Sunday once more demanded North Korea return his father. Hwang Won was on a domestic Korean Air flight from Gangneung to Seoul's Gimpo airport ...


Welcome to the The Planetary Society's Press Room for Messages From Earth.
Here you'll find the latest information about our work to put our members' names, and where possible, additional names from the public on spacecraft.
For more information on any of these releases, contact us at 626-793-5100 or via email at [email protected].
To find out about other Planetary Society projects and initiatives go to our full Press Room.
NASA's Phoenix mission has returned the first images of The Planetary Society's Phoenix DVD, which carries Visions of Mars, a collection of 19th and 20th century science fiction stories, essays and art inspired by the Red Planet.
The Planetary Society's Visions of Mars DVD aboard Phoenix will land on Mars on May 25, 2008.


While the term "food truck" once invoked unappetizing thought of over-salted pretzels and breakfast sandwiches in warming-trays, the food trucks of today are a refreshing combination of the family restaurant and the specialty food store.
Did I mention that the food is amazing?
Torrington, Connecticut is home to Rocket Fine Street Foods, a food truck whose menu is as out-of-this-world as its name.
The Rocket proved itself a smash at the Downtown Marketplace this past summer, and today they can be found parked at Oddo's Print Shop, the local branch of the University of Connecticut, or just cruising around town looking for hungry customers.
The Rocket's menu is just as fresh as their ingredients, constantly changing to offer new and interesting flavors. However, there are a few favored dishes which are always on the menu, such as the Green Chile Cheeseburger ($7.50), the Grilled Cheese with Swiss Gruyere ($4.75), New England Cheddar and Mozzarella ($4.75), and of course their double-fried frites ($3.25 for a full order, $1.75 for a side order).
The simple formula of homemade delicacies and the convenience of takeout seems to be working, as the success of the Rocket Fine Street Foods continues to soar.
Got a sweet-tooth on the go? New Haven, Connecticut has just the thing for you; The Cupcake Truck. Born from an idea shared by "one compulsive baker and one dedicated cupcake eater," The Cupcake Truck hit the streets of New Haven baring delicious baked goods made fresh daily with premium ingredients. Usually to be found around the Yale campus, The Cupcake Truck uses Twitter to update their location and menu.
Featuring familiar flavors such as Ultimate Vanilla and Red Velvet Jones, The Cupcake Truck also offers some original flavors like the Hummingbird ( flavored with bananas, pineapple, pecans and coconut) and Sweet Potato Pecan (with brandy-soaked raisins) proving to be a dessert connoisseurs dream. ($2 each).
So what's next for these two food trucks? Rocket Fine Street Foods has branched out to include event catering. The Cupcake Truck is available to rent for events, and their treats can now also be purchased at their sister store, Toppings Cupcakes in Bridgeport, Connecticut (The Historic Arcade Mall, 1001 Main Street, Bridgeport CT 06604).
Given the success of these two, it's easy to predict that we will see more food trucks on the streets of Connecticut in the near future. They are pioneers of what may very well be the next restaurant revolution, coming to a town near you.
The main photograph used in this article is by and copyright Carrie Vibert and ONE would like to thank her for allowing us to use this wonderful photograph.


ANDOVER — Even before the new $15.5 million Andover Medical Center & Express Care facility on Lowell Street opens its doors, its developers are seeking to double its size.
The initial phase of the medical center — a partnership of Lawrence General Hospital and Pentucket Medical Associates — is preparing to start welcoming patients Nov. 17.
The new three-floor facility aims to expand the medical care available in the region with multifaceted health care services, while also filling a demand for primary-care physicians, something that Pentucket Medical CEO John Sarro said is currently a national issue.
Sarro said his staff has been working on a weekly basis with Lawrence General to talk about health care needs of the region in advance of the center's opening.
"Together, we are putting together programs that we hope will create a seamless system of care starting from prenatal to end-of-life planning. That's what we have been doing for a number of years," Sarro said.
The first two floors will be occupied by Pentucket Medical Associates and include five primary-care physicians as well as an Urgent Care Center open nearly 12 hours a day, from 7:30 a.m. to 7 p.m., seven days a week.
Dwayne Garland, director of ancillary services at Pentucket Medical, said urgent-care facilities are designed to treat patients who do not require the more expensive level of care provided in an emergency room.
Officials said that the center's opening comes at a time when people nationwide are looking for any means necessary to keep their health care costs down. One way of doing so is by staying local for medical visits, rather than traveling into Boston, they said.
Lawrence General will occupy the third floor of the facility, which will include obstetrics and gynecological offices and women's digital imaging services.
With construction still under way on phase one, Lupoli is already looking ahead to the second phase of the project. The owner of the Sal's Pizza and Salvatore's Restaurant chains has purchased land adjacent to the 307 Lowell St. site to expand the medical facility, according to town Planning Director Paul Materazzo.
The expansion plans will go before the Planning Board on Oct. 28. If approved, Materazzo said construction of the second phase will likely commence next building season.
The opening of the center has been long-awaited. First approved in 2012, the first phase of the project was delayed for months due to land stipulations from the town regarding issues with runoff. Preparing the land for construction coupled with the harsh winter last year caused further setbacks.
Last week, considerable interior work needed to be completed for the center to open by mid-November. Still, officials expect to start moving equipment into the building on Nov. 3. A series of private tours for public interest groups in and around Andover as well as the major companies surrounding the center, including the IRS which is located across the street, will follow. An official ribbon cutting will not be held until after the digital imaging center goes online.
Officials said advertising and the mailing of marketing material is already under way in hopes of having patients walking through the doors on opening day.


Posted by admin on June 30, 2010 . .
Posted by admin on June 27, 2010 . .
Posted by admin on June 24, 2010 . .
Posted by admin on June 18, 2010 . .
Posted by admin on June 17, 2010 . .
Posted by admin on June 15, 2010 . .
…to be alive….to be in Brisbane!
Posted by admin on June 14, 2010 . .
Posted by admin on June 9, 2010 . .
Posted by admin on June 4, 2010 . .
Posted by admin on June 2, 2010 . .
Posted by admin on June 1, 2010 . .


Get rid of your paper headaches by implementing a smart data capture solution using IBM Data Capture Software.
IBM Datacap helps you streamline the capture, recognition and classification of business documents and extract important information. Datacap supports multi-channel capture by processing paper documents on scanners, mobile devices, multi-function peripherals and fax. It uses natural language processing, text analytics and machine learning technologies, like those in IBM Watson, to automatically identify, classify and extract content from unstructured or variable documents. The software can reduce labor and paper costs, deliver meaningful information and support faster decision making.
Data Capture solutions excel at converting paper documents into electronic, easy to manage, and easy to search documents. Leveraging technologies like Optical Character Recognition (OCR), Optical Mark Recognition (OMR) and Intelligent Character Recognition (ICR), DataCap will quickly analyze your scanned documents and identify key data increasing data integrity and workplace efficiency.
Electronic documents can be fed through well-defined workflows enabling consistency, transparency and measurability of your business. Fully leverage your DataCap solution by integrating with an Enterprise Content Management System, like the FileNet P8 Platform, to manage and browse data, enforce document retention policies and most importantly, maintain document security.
Duplication of Data Entry - The same data is being entered into multiple systems causing inaccuracies and slow turn around times.
Inefficient - Misplaced or damaged paper causes set-backs and issues in processing. Retrieving documents in storage and filing systems further reduces efficiency.
Costly - Studies show that typical organizations of about 1,000 people waste over 11 million dollars per year in manual document handling and management.
Laborious - The manual processing, transporting and maintaining of large volumes of paper is a multi-step, slow and labor intensive process.
Storage Space Requirements - Paper archiving requires large amounts of space as well as staff to manage those documents.
Accountability and Security - Many paper-based operations make copies and pass along paper in folders which can easily be lost or misused.
Difficult to Scale - Hiring, training, cost and space limitations make it nearly impossible to quickly scale a manual paper-based process.
Automates the Process - Reduces cost, labor and inaccuracies. Increases speed and reliability in processing documents.
Optimizes Scanning and Indexing Operations – The scanning and indexing process is the most labor intensive process of Data Capture. Optimizing this process through the use of technology, such as batch/document separation, OCR/ICR/OMR, forms recognition, barcodes and patch codes can reduce labor time and increase efficiency and accuracy.
Scales Up - Most organizations need the ability to start small and scale up as the organization grows. The solution can either be decentralized in a manner across many departments, or centralized where it's implemented all at once.
Quickly Commits Documents to an ECM Solution for Content Management and Workflow - Data Capture extends Content Management and Workflow by providing metadata information for faster processing and retrieving of information.
Streamlines Workflows - Leverage document recognition and metadata to implement automated workflow systems improving consistency and efficiency of the business.


Topgolf, the 102-bay golf megaplex in Centennial, isn't an actual course, but it's certainly changing the course of the way people enjoy the game. With its upscale sports-bar vibe, high-tech golf competitions that anyone can play and hundreds of televisions, pool tables and other activities, the place has drawn customers of every age and ability since opening last August. A number of voters lobbied for it to win "Best Food" (no doubt influenced by its signature Mushi Roll) and "Best Practice Facility." Look for it on next year's ballot.
We've seen a coyote stalking deer at CommonGround Golf Course in Aurora; a fox hoarding balls at Lake Valley Golf Club in Niwot; and a bear play through at Arrowhead. Even the most densely populated parts of the Front Range present a daily pageant of zoological variety, making "Best Wildlife Experience" Award a matter of timing and circumstance. But go into the mountains and you can't play a round without a sighting. Bears gambol up hillsides, beavers dam streams, marmots sunbathe on fairways and snakes lurk in the rough. While you're eyeing a birdie, a gallery of herons, pelicans, eagles and hawks could be eyeing you. And should your ball come to rest in a divot or dropping left by a mighty elk, local rules always allow relief.
*All staff picks listed alphabetically.
Click here to vote in the 2017 CAGGYs and you could win!
Join the mailing list to receive the free, weekly Colorado golf newsletter.


As professional services firms grapple with an array of problems, delivering projects profitably has become more difficult. Globalization adds to the problem, as firms increasingly deliver projects in other countries via multiple subcontractors.
Hear from Ben Grinnell, Managing Director at North Highland, at the Digital Leaders Forum as he discusses the reasons many firms are struggling with digitalisation and what they need to do in order to remain current and competitive.
Firms need a good understanding of their projects in terms of expected costs, schedules, risk, required resources, and revenues. This allows teams to focus their resources appropriately and maximize efficiency.


Have you ever seen a stadium parking lot after the tailgating party is over? It's typically covered with disposable cups, plates, and silverware. Most disposable plates, cups, and silverware are not recyclable because they are contaminated with food. Therefore, all of this trash that is generated during a tailgating event will end up in a landfill.
Reduce the amount of waste generated at your next tailgating party by bringing reusable cups, plates, and silverware with you. Wash these items after the game is over so you can reuse them throughout the entire football season!
It's hard to find a recycling bin in the middle of a stadium parking lot, so many football fans end up tossing their recyclables into a garbage can instead. Don't let recyclables end up in a landfill! Pack a bag that can be used to collect recyclables at your next event. Before heading inside the stadium, collect all of your recyclables and put them inside this bag so you can recycle them at home. Visit some of the cars nearby to ask if you can collect their recyclables as well. This is a great opportunity to meet new friends who share your passion for sports and the environment.
Many people attend football games with a group of friends and family members. Everyone is going to the same place, so why not ride there together? Organize a carpool with your loved ones so you can reduce your carbon footprint and protect the environment. Carpooling will do more than just save the environment–it can save you money as well since everyone in the car can help pay for gas and parking.
Are you planning on grilling hot dogs and hamburgers? If so, heat up a propane grill instead of cooking over charcoal. According to one study, charcoal grills produce about 998 kg of CO2 when cooking food, whereas propane grills produce about 349 kg of CO2. Based on this study, it is clear that propane grills are far more environmentally-friendly than charcoal grills.
Before the big game, stock up on foods and beverages that are produced locally. In addition to supporting the local economy, purchasing locally produced foods and beverages can also reduce carbon emissions. This is because locally produced items do not need to be transported very far to get to retailers, whereas other products may be sent from thousands of miles away. The shorter the distance, the smaller the carbon footprint.
There's no need for eco-conscious football fans to give up tailgating in order to protect the environment. Following these tips can help football fans go green–no matter what their team's colors are!


Recent amendments to the Income Tax Assessment Regulations 1997 support the changes made to section 295-465 of the Income Tax Assessment Act 1997 (ITAA 1997), which streamlined the process for claiming tax deductions for the cost of total and permanent disability (TPD) insurance provided through superannuation.
The Regulations provide specified deductible percentages of associated TPD insurance premiums, allowing superannuation funds in many cases to avoid the need to engage an actuary to determine the deductible portion of premiums.
The calculation statement has been modified to more clearly show the tax offset priority rules in the income tax law.
These changes more clearly show the ordering of the tax offsets and when they can be claimed.
A list of offsets has been provided for each offset category to help you identify which offsets belong to a particular category. This will help you apply the offsets in the correct order.


Morris Louis Bernstein (Nov. 28, 1912 - Sept. 7, 1962) known professionally as Morris Louis; American painter. During the 1950s he became one of the earliest exponents of Color Field painting. While living in Washington, DC, Louis, along with Kenneth Noland and other Washington painters, formed an art movement that is known today as the Washington Color School.
Louis is often categorized in the second generation of Abstract Expressionists, but has also been placed in the Color Field artists and the Minimalists. His painting Tet, from 1958, is an example of his work with the staining method which he used for the majority of his career. Louis was a prodigy of the notable critic Clement Greenberg. Greenberg was introduced to Louis via Kenneth Noland, a friend of the artist who also lived in Washington DC. Greenberg in turn introduced Louis to galleries and to artists in New York such as Barnett Newman, Mark Rothko, and Helen Frankenthaler. It was Frankenthaler who created the technique of staining: a process using thinned paint and gravity on an unstretched and untreated canvas.


The Kings Mountain Historical Museum contacts BPATTS each year about creating a unique brochure for their annual fundraiser event. This fundraiser is one of the biggest events each year for the museum, and so they wanted something that really stood out and would go on all the tables at the event. This particular year the theme was "Turning Point: The Battle of Kings Mountain", and was in celebration of the 236th year anniversary the Battle of Kings Mountain. The battle is considered to be one of the most pivotal battles in the Revolutionary War, and the final turning point for us winning. The Museum loved the design and felt it really captured the essence of what they were wanting for such a big event!


Check out my new page, Becoming a Helicopter Pilot. It is a work in progress, so feel free to ask any questions you might have if you are considering a career in rotary aviation.
I've been following you snice I have seen some pics of your work on Instagram and immediately have followed your blog as I've read about it.
On the one hand you make a lot of people jelous, on the other hand you tell the truth about a business which isn't what a lot of "kids" dream of.
For me helicopter flying has been a dream since I have drawn a first picture in 2nd or 3rd class in school (German system). I followed this way until I got a medical "No" of the German Army. A dream exploded. Until now I don't know why, because I was a good athlete.
I took a different road, tried some other jobs and finally ended up studying "Sports and Exercise Science" in Munich. Since 2008 I have been working in my job and it was 2013 when I went to an exhibition in Friedrichshaven (AERO) to get in contact with some people flying helicopters and get the information about a possible training. Prior to that I remembered my old dreams by flying remote helicopters, reading magazines and looking up in the air for every helicopter sound.
Luckily I got in contact with a flight instructor of a german school which got a contract in training some foreign police helicopter pilots. And they planned to invent a fitness training program for them. So this was my chance to get into the business. One hand washes the other.
Since autumn 2014 I've got an PPL(H) with a Cabri rating and do my hour building here in Germany. BUT all next to my job, money getting in and directly out for flying.
In my mind there are two types of people in the business: the one who can afford the training without any consequences and the ones who have the passion but not the money.
So my experience for now is that every flight school want to have your best: your Money. Like you said. And they tell you the heaven on earth… But that's not the truth. Depending where you live, how flexible you are and where you want to fly chances are better or worser. Depending where you will do the training, you have to spend a 65.000 to 80.000 Euros (integrated / modular).
I do completly agree with your thoughts on becoming a helicopter pilot. I am now 35 years old, I have a passion and hopefully will get my dream become true – in which area ever. Let's see how the way goes. For me it was the best to finish a first training / education before I've stepped in the business. Maybe it was fate – being in the right place at the right time. BUT I do recommend everybody who wants to become a pilot finishing a first degree. First of all you earn money, second you always can change back no matter why – just think about the medical! You can loose it in the next moment. And then? It's not easy to motivate studying all the different topics at home after work or at the week-end when friends have fun outdoor meeting and chilling. But for me helicopters are a passion and that's my drive.
Second you should build up a network. This is most important for everybody. Now as much people as possible in the industry.
It's good to know that there are companies which like to have those newbies and give them a chance. Reading all the available pilot positions with 1500+ hours, turbine time etc. is grueling. So propably I'll come back to you, but this will take some more time.
Doing the training when you have finished a first degree / education and have worked some time in your business makes you a more live experienced person what may help while flying – for me this was the case.
And – to come to and end – I do absolutely recommend everybod to do some kind of sports which is good for your overall coordination and do fly simulator at home. There is one very good device to use with X-Plane or DCS. You will miss the natural feeling of flying but you a lot good for your coordination what helped me to get quickly through my first hours of flying – especially hovering.
Finally I've set up a homepage of myself at http://www.fit-fuers-fliegen.de . So far it's just in German, I am working on it and will place a link to your blod if you are interested.