When practical, limit successful sessions to specific IP addresses. This usually only works when dealing within an intranet setting, where the IP ranges are predictable and finite.
Re-authenticate the user before critical actions are performed. If possible, try to limit unique session tokens to each browser instance (e.g. generate the token with a hash of the MAC address of the computer and process id of the browser, etc.) Configure the appropriate spoof rules on gateways (internal and external). Monitor for ARP cache poisoning, by using IDS products or ARPwatch.
Use x.509 certificates to prevent more traditional types of TCP hijacking.
Use encryption. This can be done by one or more of the following.
Forcing all incoming connections from the outside world to be fully encrypted.
Forcing all connections to critical machines to be fully encrypted.
Forcing all traffic on the network to be encrypted.
Using encrypted protocols, like those found in the OpenSSH suite. The OpenSSH suite includes the ssh program which replaces rlogin and telnet, scp which replaces rcp, and sftp which replaces ftp. Also included is sshd which is the server side of the package, and the other basic utilities like ssh-add, ssh-agent, ssh-keygen and sftp-server.
Use strong authentication (like Kerberos) or peer-to-peer VPN's.
This security tool can remotely display all active sessions on a terminal server, router, dial-in server, access server, etc. The user can reset any TCP session remotely.
Resetting a connection is simple.
Enter the IP address of the machine whose connection is to be reset.
Enter the read-write community string.
Click on the connection that is to be disconnected, and select 'Break' from the toolbar.
There are few programs/source codes available for doing a TCP hijack.
Juggernaut is a network sniffer that can be used to hijack TCP sessions. It runs on Linux Operating systems.
Juggernaut can be set to watch for all network traffic or it can be given a keyword like password to look out for.
The main function of this program is to maintain information about various session connections that are occurring on the network.
Juggernaut is basically a network sniffer that can also be used to hijack TCP sessions. It runs on Linux and has a Trinux module as well. Juggernaut can be activated to watch all network traffic on the local network.
For example, Juggernaut can be configured to wait for the login prompt, and then record the network traffic that follows (usually capturing the password). By doing so, this tool can be used to capture certain types of traffic by simply leaving the tool running for a few days, and then the attacker just has to pick up the log file that contains the recorded traffic. This is different than regular network sniffers that record all network traffic making the log files extremely huge (and thus easy to detect).
However, the main feature of this program is its ability to maintain a connection database. This means an attacker can watch all the TCP based connection made on the local network, and possibly "hijack" the session. After the connection is made, the attacker can watch the entire session (for a telnet session, this means the attacker sees the "playback" of the entire session. This is like actually seeing the telnet window).
When an active session is watched, the attacker can perform some actions on that connection, besides passively watching it. Juggernaut is capable of resetting the connection (which basically means terminating it), and also hijacking the connection, allowing the attacker to insert commands in the session or even to completely take the session into his hands (resetting connection on the legitimate client). sessions and he can pick a session he wants to hijack.
Sequence Numbers are very important to provide reliable communication but they are also crucial to hijacking a session.
Sequence numbers are a 32-bit counter, which means the value can be any of over 4 billion possible combinations.
The sequence numbers are used to tell the receiving machine what order the packets should go in when they are received.
Therefore an attacker must successfully guess the sequence number to hijack a session.
TCP provides a full duplex reliable stream connection between two end points. A connection is uniquely defined by the IP address of sender, TCP port number of the sender, IP address of the receiver and TCP port number of the receiver.
Every byte that is sent by a host is marked with a sequence number and is acknowledged by the receiver using this sequence number. The sequence number for the first byte sent is computed during the connection opening. It changes for any new connection based on rules designed to avoid reuse of the same sequence number for two different sessions of a TCP connection.
We have sent the increment of sequence number in our discussion of the three way handshake. What happens if the sequence number is predictable? When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer.
The next step taken was to tighten the OS implementation of TCP and introduce randomness in the ISN. This was done by the use of pseudo-random number generators (PRNGs). PRNGs introduced some randomness when producing ISNs used in TCP connections. However, adding a series of numbers together provided insufficient variance in the range of likely ISN values; thereby allowing an attacker to disrupt or hijack existing TCP connections or spoof future connections against vulnerable TCP/IP stack implementations.
This implied that systems relying on random increments to make ISN numbers harder to guess were still vulnerable to statistical attack. In other words, with the passage of time, even computers choosing random numbers will repeat themselves, because the randomness is based on an internal algorithm that is used by a particular operating system. Once a sequence number has been agreed to, all following data will be the ISN+1. This makes injecting data into the communication stream possible.
If a sequence number within the receive window is known, an attacker can inject data into the session stream or choose to terminate the connection. If the attacker knows the initial sequence number, he can send a simple packet to inject data or kill the session if he is aware of the number of bytes transmitted in the session this far.
As this is a difficult proposition, the attacker can guess a suitable range of sequence numbers and send out a number of packets into the network with different sequence numbers - but falling within the range. Since the range is known, it is likely that at least one packet will be accepted by the server. This way, the attacker need not send a packet for every sequence number, but resort to sending an appropriate number of packets with sequence numbers a window-size apart. But how does he know how many packets are to be sent?
This is obtained by dividing the range of sequence numbers to be covered by the fraction of the window size that is used as an increment. Why was this possible despite the introduction of PRNGs? The problem lay in the use of increments themselves, random or otherwise, to advance an ISN counter, making statistical guessing practical. The result of this is that remote attackers can perform session hijacking or disruption by injecting a flood of packets with a range of ISN values, one of which may match the expected ISN. The more random the ISNs are, the more difficult it is to carry out these attacks.
Now i will show you how to hack a website with Denial of service attack. For this tutorial we will be using one of the most effective and one of the least known tools called "Low Orbit Ion Cannon", created by Anonymous members from 4chan.org, this program is one of the best for DDoS'ing, and I have successfully used it to DDoS websites. An internet connection as bad as mine (2,500 kb/s) was able to keep a site down for a day with this program running. Remember that this tool will work best with high internet speeds, and try not to go for impossible targets (like Google, Myspace,Yahoo). LOIC is used on a single computer, but with friends it's enough to give sites a great deal of downtime.
Step 4: Click the big button " IMMA FIRIN MAH LAZAR!"
DONT PUT IT IN UR COMPUTER, I AM NOT RESPONSIBLE, if it happens, to you, start windows in safe mode, and open registry editor by typiing REGEDIT in start->run. navigate to [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]and remove the string value named VIRUS, restart you computer.
well i am also trying to find the method which executes without any drawbacks. So if u have one, pls post it here.
In an active attack, an attacker finds an active session and takes over.
With a passive attack, an attacker hijacks a session, but sits back and watches and records all of the traffic that is being sent forth.
Session hijacking can be active or passive in nature depending on the degree of involvement of the attacker in the attack. The essential difference between an active and passive hijack is that while an active hijack takes over an existing session, a passive attack monitors an ongoing session.
Generally a passive attack uses sniffers on the network allowing the attacker to obtain information such as user id and password so that he can use it later to logon as that user and claim his privileges. Password sniffing is only the simplest attack that can be performed when raw access to a network is obtained. Counters against this attack range from using identification schemes such as one-time password (e.g. skey) to ticketing identification (such as Kerberos). While these may keep sniffing from yielding any productive results, they do not insure the network from an active attack neither as long as the data is neither digitally signed nor encrypted.
In an active attack, the attacker takes over an existing session by either tearing down the connection on one side of the conversation or by actively participating by being the man-in-the-middle. These have been discussed at length under the discussion covering the various steps involved in a session hijack.
This requires the ability to predict the sequence number before the target can respond to the server. Sequence number attacks have become much less likely because OS vendors have changed the way initial sequence numbers are generated. The old way was to add a constant value to the next initial sequence number; newer mechanisms use a randomized value for the initial sequence number.
How does an attacker go about hijacking a session? The hijack can be broken down into four broad phases.
The attacker will wait to find a suitable target and host. He use a network sniffer to track the victim and host or identify a suitable user by scanning with a scanning tool such as nmap to find a target with a trivial TCP sequence prediction. This is done to ensure that because the correct sequence and acknowledgement numbers are captured, as packets are checked by TCP through sequence and/or acknowledgement numbers. These will later be used by the attacker in crafting his own packets.
A desynchronized state is when a connection between the target and host is in the established state; or in a stable state with no data transmission; or the server's sequence number is not equal to the client's acknowledgement number; or the clients sequence number is not equal to the server's acknowledgement number. To desynchronize the connection between the target and host, the sequence number or the acknowledgement number (SEQ/ACK) of the server must be changed. This can be done if null data is sent to the server so that the server's SEQ/ACK numbers will advance; while the target machine will not register such an increment.
The desynchronizing is preceded by the attacker monitoring the session without interference till an opportune moment, when he will send a large amount of " null data" to the server. This data serves only to change the ACK number on the server and does not affect anything else. The attacker does likewise to the target also. Now both the server and target are desynchronized.
Another approach is to send a reset flag to the server and tearing down the connection on the server side. This is ideally done in the early setup stage. The goal of the attacker is to break the connection on the server side and create a new one with different sequence number.
The attacker listens for a SYN/ACK packet from the server to the host. On detecting the packet, he sends an RST to the server and a SYN packet with exactly the same parameters such as port number but a different sequence number. The server on receiving the RST packet, closes connection with the target, but initiates another one based on the SYN packet - with a different sequence number on the same port. Having opened a new connection, the server sends a SYN/ACK packet to the target for acknowledgement. The attacker detects (but does not intercept) this and sends back an ACK packet to the server. Now, the server is in the established state. The target is oblivious to the conversation and has already switched to the established state when it received the first SYN/ACK packet from the server. Now both server and target are in desynchronized but established state.
This can also be done using a FIN flag, but this will cause the server to respond with an ACK and give away the attack through an ACK storm. This results due to a flaw in this method of hijacking a TCP connection. When receiving an unacceptable packet the host acknowledges it by sending the expected sequence number and using its own sequence number. This packet is itself unacceptable and will generate an acknowledgement packet which in turn will generate an acknowledgement packet, thereby creating a supposedly endless loop for every data packet sent. The mismatch in SEQ/ACK numbers results in excess network traffic with both the server and target trying to verify the right sequence. Since these packets do not carry data they are not retransmitted if the packet is lost. However, since TCP uses IP the loss of a single packet puts an end to the unwanted conversation between the server and target on the network.
The desynchronizing stage is added in the hijack sequence so that the target host is kept in the dark about the attack. Without desynchronizing, the attacker will still be able to inject data to the server and even keep his identity by spoofing an IP address. However, he will have to put up with the server's response being relayed to the target host as well.
Now that the attacker has interrupted the connection between the server and target, he can choose to either inject data into the network or actively participate as the "man in the middle", and pass data from the target to the server, and vice versa, reading and injecting data as he sees fit.
Alice opens a telnet session to Bob and starts doing some work.
Eve observes the connection between Alice and Bob using a sniffer that is integrated into her hijacking tool. Eve makes a note of Alice's IP address and her hijacking software samples the TCP sequence numbers of the connection between Alice and Bob.
Eve launches a DoS attack against Alice to stop Alice doing further work on Bob and to prevent an ACK storm from interfering with her attack.
Eve generates spoofed packets with the correct TCP sequence numbers and connects to Bob.
Bob thinks that he is still connected to Alice.
Alice notices a lack of response from Bob and blames it on the network.
Eve finds herself at a root prompt on Bob. She issues some commands to make a backdoor and uses the sniffer to observe the responses from Bob.
After covering her tracks, Eve logs out of Bob and ceases the DoS attack against Alice.
Alice notices that her connection to Bob has been dropped.
Eve uses her backdoor to get directly into Bob.
A spoofing attack is different from a hijack in that an attacker is not actively taking another user offline to perform the attack. he pretends to be another user or machine to gain access.
The early record of a session hijacking is perhaps the Morris Worm episode that affected nearly 6000 computers on the ARPANET in 1988. This was ARPANET's first automated network security incident. Robert T. Morris wrote a program that would connect to another computer, find and use one of several vulnerabilities to copy itself to that second computer, and begin to run the copy of itself at the new location. Both the original code and the copy would then repeat these actions in an infinite loop to other computers on the ARPANET.
Blind IP spoofing involves predicting the sequence numbers that the victimized host will send in order to create a connection which appears to originate from the host. Before exploring blind spoofing further, let us take a look at sequence number prediction.
TCP sequence numbers are used to provide flow control and data integrity for TCP sessions. Every byte in a TCP session has a unique sequence number. Moreover, every TCP segment provides the sequence number of the initial byte (ISN), as part of the segment header. The initial sequence number does not start at zero for each session. Instead, the participants specify initial sequence numbers as part of the handshake process-a different ISN for each direction-and begin numbering the bytes sequentially from there.
Blind IP spoofing relies on the attacker's ability to predict sequence numbers as he is unable to sniff the communication between the two hosts by virtue of not being on the same network segment. He cannot spoof a trusted host on a different network and see the reply packets because the packets are not routed back to him. He cannot resort to ARP cache poisoning as well because routers do not route ARP broadcasts across the Internet. As he is not able to see the replies he is forced to anticipate the responses from the victim and prevent the host from sending a RST to the victim. The attacker then injects himself into the communication by predicting what sequence number the remote host is expecting from the victim. This is used extensively to exploit the trust relationships between users and remote machines, these services include NFS, telnet, IRC, etc.
IP spoofing is relatively easy to accomplish. The only pre-requisite on part of the attacker is to have root access on a machine in order to create raw packets. In order to establish a spoofed connection the attacker must know what sequence numbers are being used. Therefore, IP spoofing forces the attacker to have to predict the next sequence number.
The attacker can use "blind" hijacking, to send a command, but can never see the response. However, a common command would be to set a password allowing access from somewhere else on the net. The attack became famous when Kevin Mitnick used it to hack into Tsutomu Shimomura's computer network. The attack exploited the trust that Shimomura's machines had with the other network. By SYN flooding the trusted host, Mitnick was able to establish a short connection which was then used to gain access through traditional methods.
With Hijacking an attacker is taking over an existing session, which means he is relying on the legitimate user to make a connection and authenticate. Then take over the session.
With IP Spoofing there is no need to guess the sequence number since there is no session currently open with that IP address. The traffic would get back to the attacker only by using source routing. This is where the attacker tells the network how to route the output and input from a session, and he simply sniffs it from the network as it passes by him. Source routing is an IP option used today mainly by network managers to check connectivity. Normally, when an IP packet leaves a system, its path is controlled by the routers and their current configuration. Source routing provides a means to override the control of the routers.
When an attacker uses captured, reverse engineered or brute forced authentication tokens to take over the control of a legitimate user's session while he is in session, the session is said to be hijacked. Due to this attack, the legitimate user may loose access or be deprived of the normal functionality of the session to the attacker, who now acts with the user's privileges.
Most authentications occur at the beginning of a TCP session, this makes it possible for the attacker to gain access to a target machine. A popular method attackers adopt is to use source-routed IP packets. This allows an attacker to become a part of the target - host conversation by deceiving the IP packets to pass through his system. The attacker can also carry out the classic man-in-the-middle attack using a sniffing program to monitor the conversation.
In TCP session hijacking, a familiar aspect of the attacks is the carrying out of a denial-of-service (DoS) attack against the target / host to prevent it from responding by either forcing the machine to crash, or against the network connection to result in a heavy packet loss (e.g. SYN flood).
Session hijacking is even more difficult than IP address spoofing. In session hijacking, John would seek to insert himself into a session that Jane already had set up with \\Mail. John would wait until Jane established a session, then knock her off the air by some means and pick up the session as though he was her. As before, John would send a scripted set of packets to \\Mail but would not be able to see the responses. To do this, he would need to know the sequence number in use when he hijacked the session, which could be calculated knowing the ISN and the number of packets that have been exchanged.
Successful session hijacking is extremely difficult and only possible when a number of factors are under the attacker's control. Knowledge of the ISN would be the least of John's challenges. For instance, he would need a way to knock Jane off the air at will. He also would need a way to know the exact status of Jane's session at the moment he mounted his attack. Both of these require that John have far more knowledge about and control over the session than normally would be possible.
However, IP address spoofing attacks can only be successful if IP addresses are used for authentication. An attacker cannot perform IP address spoofing or session hijacking if per-packet integrity checking is executed. Similarly, neither IP address spoofing nor session hijacking are possible if the session uses encryption such as SSL or PPTP, as the attacker will not be able to participate in the key exchange. Therefore the essential requirements to hijack non-encrypted TCP communications can be listed as: Presence of non-encrypted session oriented traffic, ability to recognize TCP sequence numbers and predict the next sequence number (NSN) and capability to spoof a hosts MAC or IP address to receive communications which are not destined for the attackers host. If the attacker is on the local segment, they can sniff and predict the ISN+1 number and have the traffic routed back to them by poisoning the ARP cache.
Understanding the flow of message packets over the Internet by dissecting the TCP stack.
Familiarizing with the basic attacks possible due to the IPv4 standard.
At its simplest level, TCP hijacking relies on the violation of trust relationships between two interacting hosts. Before we go into the details of session hijacking, let us take a look at the TCP stack and the IPv4 protocol, to understand why this attack is possible.
Consider the everyday scenario when you access the Internet with your browser - say IE. IE works at the application layer and accepts the initial datagram to be sent across the Internet. The transport protocol comes into action in the next layer - aptly called the transport layer - and the appropriate protocol header is added to the datagram. Here it is TCP header, as it is the TCP protocol that is being used. This ensures the reliability of data transported over inherently unreliable communication platforms, and also controls many of the aspects in the management and initiation of communication between the two hosts. In the network layer, routers offer the functionality for the datagram to hop from source to the destination, one hop at a time. This also sees the IP header being added to the datagram. The final layer that communicated with the physical hardware is the data link layer. This layer is responsible for the delivery of signals from the source to the destination over a physical communication platform, which in this case is the Ethernet.
Now, the headers are peeled back on reaching the destination to reveal the original datagram. Having understood the TCP stack, let us look at IPv4. The original IPv4 standard needed to address three basic security issues - authentication, integrity and privacy. Authentication was an issue because an attacker could easily spoof an IP address and exploit a session. Spoofing was not restricted to IP address alone, but also extended to MAC addresses in ARP spoofing. An attacker sniffing on a network could sniff packets and carry out simple attacks such as change, delete, reroute, add, forge or divert data. Perhaps the most popular among these attacks is the Man-In-the-Middle attack. An attacker can grab unencrypted traffic from a victim's network-based TCP application, further tampering with the authenticity and integrity of the data before forwarding it on to the unsuspecting target.
The USERDUMP application is designed to gather user information from the target. Some of the information enumerated is the user RID, privileges, login times, login dates, account expiration date, network storage limitations, login hours, and much more.
The user's password never expires.
The Administrator last logged in at 12:44 a.m. on January 16, 2004.
The account has had 9 bad password attempts.
The Administrator has only logged in to this computer 2 times.
The username Administrator details have been successfully enumerated via the USERDUMP application.
The USERINFO application is designed to gather user information from the target. Some of the information enumerated is the user RID, privileges, login times, login dates, account expiration date, network storage limitations, login hours, and much more. An attacker uses this information in his or her social engineering phase of an attack.
roll in the dumpster. The information on that roll is priceless, including names, addresses, account numbers, phone numbers, how much they actually pay for their movies, and so forth.
one of these personnel to verify their credentials?
This attack is very risky as the attacker can now be personally identified should he or she get caught. Again, this attack is normally very successful so bear this in mind.
Human-based Social Engineering refers to person to person interaction to retrieve the desired information.
Human based social engineering involves human interaction in one manner or the other. Computer based engineering depend on software to carry out the task at hand.
Gartner Group notes six human behaviors for positive response for social engineering. Corroborate this with the traits discussed in module one of the course.
Someone is given a "token" and feels compelled to take action.
You buy the wheel of cheese when given a free sample.
Certain behavior patterns are consistent from person to person.
If you ask a question and wait, people will be compelled to fill the pause.
Someone is compelled to do what everyone else is doing.
Stop in the middle of a busy street and look up; people will eventually stop and do the same.
People tend to say yes to those they like, and also to attractive people.
Attractive models are used in advertising.
People tend to listen and heed the advice of those in a position of authority.
"Four out of five doctors recommend...."
If someone is in low supply, it becomes more "precious" and, therefore, more appealing.
Furbees or Sony Playstation 2.
Getting someone's IP Address or location was never so easy!
For doing all this, you just need to attach an image provided by SpyPig. If you want, you can also use your images by making an ID @ SpyPig.com .
Have you ever been some place other than your home on your computer? If your answer is anything other then yes, you need to stop being a computer hugging hippy and go outside, get a whif of some fresh air, step on some dog crap and accidently run over a cat. It'll do you some good. Anyways, have you visited someone somewhere and while using his/her/its computer, you realized you didn't know a password because it was saved on your browser, or you wanted to show your friend that one cool website with the non-Asian ninjas, but it was in your bookmarks, or you wanted to use an extension you had installed on your browser that got rid of homosexual ads? Well you can. It's called portable browsers, a.k.a a browser on your USB drive.
If you use Mozilla Firefox, which I highly recommend, you can download the portable browser hiya: I'm a link.
If you're an apple fanboy or just like safari, you can download it's portable version hiya: I'm a link too.
If you use Internet Explorer, you must have some sort of brain blockage and need to fall off a cliff.
then you know it is disabled for your user level.
To get a COMMAND.COM prompt up, open Notepad.exe and type in "command.com" without the quotes. Next, save it as a batch file via the ".bat" extention. So save it as "anything.bat" . Now once you double click this file, you should get a functional command prompt if it isn't disabled.
Social Engineering is the use of influence and persuasion to deceive people for the purpose of obtaining information or persuading the victim to perform some action.
An employee may unwittingly give away key information in an email or by answering questions over the phone with someone they don't know or even by talking about a project with co workers at a local pub after hours.
It is said that security is only as strong as the weakest link. Social engineering is the use of influence and persuasion to deceive people for the purpose of obtaining information or persuading the victim to perform some action. It need not be restricted to corporate networks alone. It does not matter if enterprises have invested in high end infrastructure and security solutions such as complex authentication processes, firewalls, VPNs and network monitoring software. None of these devices or security measures is effective if an employee unwittingly gives away key information in an email, by answering questions over the phone with a stranger or new acquaintance or even brag about a project with coworkers at a local pub after hours.
Most often, people are not even aware of the security lapse made by them, albeit inadvertently. Attackers take special interest in developing social engineering skills and can be so proficient that their victims would not even realize that they have been scammed. Despite having security policies in place within the organization, they are compromised because this aspect of attack preys on the human impulse to be kind and helpful.
Attackers are always looking for new ways to access information. They will ensure that they know the perimeter and the people on the perimeter - security guards, receptionists and help desk workers - to exploit human oversight. People have been conditioned not to be overtly suspicious that, they associate certain behavior and appearance to known entities. For instance, on seeing a man dressed in brown and stacking a whole bunch of boxes in a cart, people will hold the door open because they think it is the delivery man.
Some companies list employees by title and give their phone number and email address on the corporate Web site. Alternatively, a corporation may put advertisements in the paper for high-tech workers who trained on Oracle databases or UNIX servers. These little bits of information help Attackers know what kind of system they're tackling. This overlaps with the reconnaissance phase.
Social Engineering includes acquisition of sensitive information or inappropriate access privileges by an outsider, based upon building of inappropriate trust relationships with outsiders.
The goal of a social engineer is to trick someone into providing valuable information or access to that information.
It preys on qualities of human nature, such as the desire to be helpful, the tendency to trust people and the fear of getting in trouble.
Social engineering is the art and science of getting people to comply with an attacker's wishes. It is not a way of mind control, and it does not allow the attacker to get people to perform tasks wildly outside of their normal behavior. Above all, it is not foolproof. Yet, this is one way most Attackers get a foot into the corporation. There are two terms that are of interest here.
Social engineering is hacker jargon for getting needed information from a person rather than breaking into a system.
Psychological subversion is the term for using social engineering over an extended period of time to maintain a continuing stream of information and help from unsuspecting users.
Let us look at a sample scenario.
Attacker: "Good morning Ma'am, I am Bob; I would like to speak with Ms. Alice"
Alice: "Hello, I am Alice"
Attacker: "Good morning Ma'am, I am calling from the data center, I am sorry I am calling you so early..."
Alice:" Uh, data center office, well, I was having breakfast, but it doesn't matter"
Attacker: "I was able to call you because of the personal data form you filled when creating your account."
Alice: "My pers.. oh, yes"
Attacker: "I have to inform you that we had a mail server crash tonight, and we are trying to restore all corporate users' mail. Since you are a remote user, we are clearing your problems first."
Alice: "A crash? Is my mail lost?"
Alice: "Er, my password? Well..."
Alice: "Well, it's not so secret (also smiling! It's amazing...), my password is xxxxxx"
Attacker: "Thank you very much, Ma'am. We will restore your mail in a few minutes" Alice: "But no mail is lost, is it?"
Attacker: "Absolutely, Ma'am. You should not experience any problems, but do not hesitate to contact us just in case. You will find contact numbers on the Intranet"
People are usually the weakest link in the security chain.
A successful defense depends on having good policies in place and educating employees to follow the policies.
Social Engineering is the hardest form of attack to defend against because it cannot be defended with hardware or software alone.
Social engineering concentrates on the weakest link of the computer security chain. It is often said that the only secure computer is an unplugged one. The fact that you could persuade someone to plug it in and switch it on means that even powered down computers is vulnerable.
Anyone with access to any part of the system, physically or electronically is a potential security risk. Any information that can be gained may be used for social engineering further information. This means even people not considered as part of a security policy can be used to cause a security breach. Security professionals are constantly being told that security through obscurity is very weak security. In the case of social engineering it is no security at all. It is impossible to obscure the fact that humans use the system or that they can influence it.
Attempting to steer an individual towards completing a desired task can use several methods. The first and most obvious is simply a direct request, where an individual is asked to complete the task directly. Although difficult to succeed, this is the easiest method and the most straightforward. The individual knows exactly what is wanted of them. The second is by creating a contrived situation which the victim is simply a part of. With other factors than just the request to consider, the individual concerned is far more likely to be persuaded, because the attacker can create reasons for compliance other than simply personal ones. This involves far more work for the attacker, and almost certainly involves gaining extensive knowledge of the 'target'. This does not mean that situations do not have to be based in fact. The fewer untruths, the better the chances of success.
One of the essential tools used for social engineering is a good memory for gathered facts. This is something that hackers and sysadmins tend to excel in, especially when it comes to facts relating to their field.
Denial of Service is a very commonly used attack methodology.
Distributed Denial Of Service using a multiplicity of Zombie machines is an often seen attack methodology.
Protection against DOS is difficult due to the very nature of the attacks.
There are several tools available which could detect whether a system is being used as a DDOS server. The following tools can detect TFN2K, Trinoo and Stacheldraht.
The tool find_ddos is intended to scan a local system that is either known or suspected to contain a DDOS program. It is capable of scanning executing processes on Solaris 2.6 or later, and of scanning local files on a Solaris 2.x (or later) system.
The tool will detect several known denial-of-service attack tools by looking at all 32-bit ELF format files in a given directory tree, and comparing the files' strings and symbol table against a set of known "fingerprints" for TFN and trinoo tools. If a file is considered a close enough match to one of these fingerprints, it is identified with that file. The tool will optionally make a copy of all files that are found to match. If it finds a match in a running process, it will also grab a core image of the process for subsequent analysis. Any matches that are found are also examined for any embedded IP addresses. All results are either displayed to the user's terminal, or stored in a log file.
When no primary_target(s) are specified on the command line, SARA starts up in interactive mode and takes commands from the HTML user interface. When primary_target(s) are specified on the command line, SARA collects data from the named hosts, and, possibly, from hosts that it discovers while probing a primary host. A primary target can be a host name, a host address, or a network number. In the latter case, SARA collects data from each host in the named network. SARA can generate reports of hosts by type, service, vulnerability and by trust relationship.
This is a tool that explores another system and looks for vulnerabilities. DDoSPing is a remote network scanner for the most common DDoS programs. It can detect Trinoo, Stacheldraht and Tribe Flood Network programs running with their default settings, although configuration of each program type is possible from the tool's configuration screen. Scanning is performed by sending the appropriate UDP and ICMP messages at a controllable rate to a user-defined range of addresses.
RID (remote intrusion detector) is a tool programmed in C that is a highly configurable packet snooper and generator. It works by sending out packets defined in the config.txt file, then listening for appropriate replies.
The Trinoo distributed denial of service attack client.
The Tribal flood network distributed denial of service attack client.
The StachelDraht distributed denial of service attack client.
This list is not extensive -- the tool is highly configurable to suit specific needs. RID is not a vulnerability assessment tool. It is also -- not a network intrusion detection system in the sense that it does not continually run monitoring your network.
Example: # Sample config file  start AgentStacheldraht   send icmp type=0 id=668 data=""
An Intrusion Detection System (abbreviated as IDS) is a defense system, which detects hostile activities in a network. The key is then to detect and possibly prevent activities that may compromise system security, or a hacking attempt in progress including reconnaissance/data collection phases that involve for example, port scans.
One key feature of intrusion detection systems is their ability to provide a view of unusual activity and issue alerts notifying administrators and/or block a suspected connection. In addition, IDS tools are capable of distinguishing between insider attacks originating from inside the organization (coming from own employees or customers) and external ones (attacks and the thread posed by hackers).
Once an intrusion has been detected, IDS issues alerts notifying administrators of this fact. The next step is undertaken either by the administrators or the IDS itself, by taking advantage of additional countermeasures (specific block functions to terminate sessions, backup systems, routing connections to a system trap, legal infrastructure etc.) - following the organization's security policy.
There are two kinds of DDOS-generated traffic, control traffic (between DDOS client and servers) and flood traffic (between DDOS servers and DDOS victim).
Anomaly 0: This is not real "DDOS" traffic, but it can be a viable method of determining the origin of DDOS attacks. As observed by RFP, an attacker will have to resolve his victim's hostname before a DDOS attack. BIND name servers are capable of recording these requests. You can either send them a WINCH signal with 'kill' or you can specify query logging in the BIND configuration. A single PTR type query before an attack indicates the request was made from the attacker's host, a great load of PTR type query for a DDOS victim before an attack indicates that the flood servers have been fed a host name and each server was resolving the hostname for itself.
Anomaly 1: Amount of bandwidth exceeds a maximum threshold that is expected normal traffic for a site could cause. Alternatively, the threshold can be measures for addresses in the traffic. These are clear signs of flood traffic and ACL rules can be implemented on the backbone routers that detect these signs and filter traffic.
Anomaly 2: Oversized ICMP and UDP packets. Stateful UDP sessions are normally using small UDP packets, having a payload of not more than 10 bytes. Normal ICMP messages don't exceed 64 to 128 bytes. Packets that are reasonably bigger are suspicious of containing control traffic, mostly the encrypted target(s) and other options for the DDOS server. Once (non-decoy) control traffic is spotted, one of the DDOS servers' location is revealed, as the destination IP address is not spoofed in control traffic.
Anomaly 3: TCP packets (and UDP packets) that are not part of a connection. The stealthiest DDOS tools use random protocols, including connection-oriented protocols, to send data over non-connection-oriented channels. Using stateful firewalls or link-state routing can discover these packets. Additionally, packets that indicate connection requests with destination ports above 1024, with which no known service is registered and running, are highly suspicious.
Anomaly 4: Packet payload contains ONLY alphanumeric character (e.g. no spaces, punctuation, control characters). This can be a sign that the packet payload is BASE64-encoded, and therefore contains only base64 characters. TFN2K is sending such packets in its control traffic. A TFN2K (and TFN2K derivatives) specific pattern is a string of repeating A's (AAAA...) in the payload, since the buffer size is padded by the encryption routine. If the BASE64 encoding is not used, and the payload contains binary encrypted traffic, the A's will be trailing binary \0's.
Anomaly 5: Packet payload contains ONLY binary, high-bit characters. While this can be a binary file transfer (traffic transmitted over ports 20, 21, 80, etc. must be excluded if this rule is applied), especially if contained in packets that are not part of valid stateful traffic, it is suspicious of being non-base64 encoded, but encrypted control traffic that is being transmitted in the packet payload.
IDS pattern matching technologies have a database of signatures. When it finds packets that have a given pattern, it sets off an alarm.
The bandwidth used in DDoS attacks is important. Therefore, there should be proper coordination with the ISP and the ISP with the upstream providers. To prevent SYN flooding attacks, set up the TCP interception feature. Details about this can be found at http://www.cisco.com. Block the UDP and ICMP messages that are not required by the network. Especially permitting outgoing ICMP unreachable messages could multiply the impact of a packet flooding attack. Deny all traffic that is not explicitly needed for the servers run. Adopt multi-homing as a best practice.
If attacked, start countermeasures as soon as possible. The response should be to determine origins of spoofed DoS attacks. This should be done quickly as the router entries that allow traffic backtracking will expire a short time after the flood is halted. Be updated. Check exploits databases, for example at securityfocus.com, or packetstorm.Com, to make sure that the versions of server software are not proven vulnerable. Learn sufficiently enough about how the system and server software operates, and review configuration and the security measures that are applied frequently. Set up a system that generates cryptographic signatures of all binary and other trusted system files, and compare the changes to those files periodically. Additionally, using a system where you store the actual checksums on a different machine or removable media, to which a remote attacker cannot have access, is strongly recommended. If you detect an attack emerging from your networks or hosts, or if you are being contacted because of this, you must immediately shut down your systems, or at least disconnect any of the systems from any network. If such attacks are being run on your hosts, it means that the attacker has almost-full control of the machines. They should be analyzed, and then reinstalled.
The DoS and DDoS attacks in combination with malicious codes implantations are easily launched but difficult to completely stop. With the nature of TCP/IP and programming issues that are often overlooked, the current Internet is still vulnerable to various forms of DoS and DDoS attacks. There is no "silver bullet" solution to this, like many other security issues.
Timely application of patches and system updates, especially to potentially exposed machines. For example, update and maintain a current build of BIND on DNS servers.
However, in mitigating DoS or DDoS attacks, it requires good network design to be able to control the point of entry or the gateway. As for mitigating new attacks, it is essential to have filtering capability based on packet header and content within the network or at the critical gateways in order to filter malicious traffic as a response to such attacks while waiting for a permanent solution from suppliers to be applied to the devices. Applying all known patches and fixes to all devices in the network to prevent known attacks is necessary. Finally, it is important to have the relevant referrals in the policy and legislations to address the issue of DoS and DDoS to ensure an effective cooperation between service providers and law enforcement agencies .
Improved on some of the weaknesses of trinoo by adding different types of attacks that could be mounted against the victim site.
Structured like trinoo with attackers, clients (masters) and daemons.
Initial system compromise allows the TFN programs to be installed.
Tribe Flood Network, like trinoo, uses a master program to communicate with attack agents located across multiple networks. TFN launches coordinated Denial of Service Attacks that are especially difficult to counter as it can generate multiple types of attacks and it can generate packets with spoofed source IP addresses. Some of the attacks that can be launched by TFN include UDP flood, TCP SYN flood, ICMP echo request flood, and ICMP directed broadcast. The basic characteristics of and suggested defense strategies against the TFN DDoS attack follow.
To initiate TFN, the attacker accesses the master program and sends it the IP address of one or more targets. The master program proceeds to communicate with all of the agent programs, instructing them to initiate the attack.
Communications between TFN master programs and agent programs use ICMP echo reply packets, where the actual instruction to be carried out is embedded in the 16-bit ID field in binary format. The use of ICMP (Internet Control Message Protocol) makes packet protocol filtering possible.
TFN agents can be defeated by configuring your router or intrusion detection system to disallow all ICMP echo and echo reply packets onto your network. However, this will break all internet programs (such as "ping") that utilize these functions.
The TFN master program reads a list of IP addresses containing the locations of the agents programs. This list of addresses may be encrypted, using "Blowfish" encryption.
If it is not encrypted, then the agents can be identified from the list.
The TFN agent programs have been found on systems with the filename td and the master programs with the name tfn. They can be positively identified by running the UNIX strings command.
TFN agents do not check where the ICMP echo reply packets come from. Therefore, it is possible to forge ICMP packets to flush out these processes.
No password is required to run the client, although it is necessary to have the list of daemons at hand in an "iplist" file. Communication from the TFN client to daemons is accomplished via ICMP_ECHOREPLY packets. There is no TCP or UDP based communication between the client and daemons at all.
The values of these numbers, as well as macros that change the name of the running process as seen by PS (1) are defined by the file "config.h". As with trinoo, the method used to install the client/daemon will be the same as installing any program on a UNIX system, with all the standard options for concealing the programs and files.
Both the client and the daemon must be run as root, as they both open an AF_INET socket in SOCK_RAW mode. The client program requires the iplist be available. Recent installations of TFN daemons have included strings that indicate the author is (or has) added Blowfish encryption of the iplist file. This will make the task of determining the daemons much harder.
TFN2K is a DDOS program which runs in distributed mode. There are two parts to the program: client and server.
The server (also known as zombies) runs on a machine in listening mode and waits for commands from the client.
The TFN2K distributed denial of service system consists of client/server architecture.
The Client: The client is used to connect to master servers, which can then perform specified attacks against one or more victim machines. Commands are sent from the client to the master server within the data fields of ICMP, UDP, and TCP packets. The data fields are encrypted using the CAST algorithm and base64 encoded.
The client can specify the use of random TCP/UDP port numbers and source IP addresses. The system can also send out "decoy" packets to non-target machines. These factors make TFN2K more difficult to detect than the original TFN program.
The Master Server: The master server parses all UDP, TCP, and ICMP echo reply packets for encrypted commands. The master server does not use a default password when it is selected by the user at compile time.
The Attack: The TFN2K client can be used to send various commands to the master for execution, including commands to flood a target machine or set of target machines within a specified address range. The client can send commands using UDP, SYN, ICMP echo, and ICMP broadcast packets. These flood attacks cause the target machine to slow down because of the processing required to handle the incoming packets, leaving little or no network bandwidth.
TFN2K can also be used to execute remote commands on the master server and bind shells to a specified TCP port. TFN2K runs on Linux, Solaris, and Windows platforms.
Stacheldraht combines the features of TFN and Trinoo but adds encryption layer between daemons.
Stacheldraht consists of three parts: the master server, client, and agent programs.
The client is used to connect to the master server on port 16660 or port 60001. Packet contents are blowfish encrypted using the default password "sicken", which can be changed by editing the Stacheldraht source code. After entering the password, an attacker can use the client to manage Stacheldraht agents, IP addresses of attack victims, lists of master servers, and to perform DoS attacks against specified machines.
The Master Server: The master server handles all communication between client and agent programs. It listens for connections from the client on port 16660 or 60001. When a client connects to the master, the master waits for the password before returning information about agent programs to the client and processing commands from the client.
The Agent: The agent listens for commands from master servers on port 65000. In addition to this port, master server/agent communications are also managed using ICMP echo reply packets. These packets are transmitted and replied to periodically. They contain specific values in the ID field (such as 666, 667, 668, and 669) and corresponding plaintext strings in the data fields (including "skillz", "ficken", and "spoofworks"). The ICMP packets act as a "heartbeat" between agent and master server, and to determine source IP spoofing capabilities of the master server. The agent identifies master servers using an internal address list, and an external encrypted file containing master server IP addresses. Agents can be directed to "upgrade" themselves by downloading a fresh copy of the agent program and deleting the old image as well as accepting commands to execute flood attacks against target machines.
The Attack: Like TFN/TFN2K, Stacheldraht can be used to perform ICMP, SYN, and UDP flood attacks. The attacks can run for a specified duration, and SYN floods can be directed to a set of specified ports. These flood attacks cause the target machine to slow down because of the processing required to handle the incoming packets, leaving little or no network bandwidth.
Stacheldraht (German for "barbed wire") combines features of the "trinoo" distributed denial of service tool, with those of the original TFN, and adds encryption of communication between the attacker and stacheldraht masters and automated update of the agents.
One of the weaknesses of TFN was that the attacker's connection to the master(s) that control the network was in clear-text form, and was subject to standard TCP attacks (session hijacking, RST sniping, etc.) Stacheldraht deals with this by adding an encrypting "telnet alike" (stacheldraht term) client. The attacker(s) control one or more handlers using encrypting clients. Each handler can control many agents (up to 1000 agents). The agents are all instructed to coordinate a packet-based attack against one or more victim systems by the handler.
Unlike trinoo, which uses UDP for communication between handlers and agents, or the original Tribe Flood Network, which uses ICMP for communication between the handler and agents, stacheldraht uses TCP and ICMP. Client to handler(s): 16660/tcp and Handler to/from agent(s): 65000/tcp, ICMP_ECHOREPLY. Remote control of a stacheldraht network is accomplished using a simple client that uses symmetric key encryption for communication between itself and the handler.
After connecting to the handler using the client program, the attacker is prompted for a password. This password (default "sicken") is a standard crypt() encrypted password, which is then Blowfish encrypted using the passphrase "authentication" before being sent over the network to the handler. One feature of stacheldraht not shared by trinoo or TFN is the ability to upgrade the agents on demand. This feature employs the Berkeley "rcp" command (514/tcp), using a stolen account at some site as a cache. On demand, all agents are instructed to delete the current program image, go out and get a new copy (either Linux- or Solaris-specific binary) from a site/account using "rcp", start running this new image with "nohup", and then exit.
When each agent starts up, it attempts to read a master server configuration file to learn which handler(s) may control it. This file is a list of IP addresses, encrypted using Blowfish, with a passphrase of "randomsucks". Failing to find a configuration file, there are one or more default handler IP addresses compiled into the program. Once the agent has determined a list of potential handlers, it then starts at the beginning of the list of handlers and sends an ICMP_ECHOREPLY packet with an ID field containing the value 666 and data field containing the string "skillz". If the master gets this packet, it sends back an ICMP_ECHOREPLY packet with an ID field containing the value 667 and data field containing the string "ficken".
In addition to finding an active handler, the agent performs a test to see if the network on which the agent is running allows packets to exit with forged source addresses. It does this by sending out an ICMP ECHO packet with a forged IP address of "3.3.3.3", an ID of 666, and the IP address of the agent system (obtained by getting the hostname, then resolving this to an IP address) in the data field of the ICMP packet.
If the master receives this packet, it replies to the IP address embedded in the packet with an ICMP_ECHOREPLY packet containing an ID of 1000 and the word "spoofworks" in the data field. If the agent receives this packet, it sets a spoof_level of zero (can spoof all 32 bits of IP address). If it times out before receiving a spoof reply packet, it sets a spoof_level of 3 (can only spoof the final octet).


text:
package com.google.template.soy.basicfunctions;

import static com.google.common.truth.Truth.assertThat;
import static com.google.template.soy.jbcsrc.restricted.testing.ExpressionTester.assertThatExpression;

import com.google.common.collect.ImmutableList;
import com.google.common.collect.Sets;
import com.google.template.soy.data.SoyList;
import com.google.template.soy.data.SoyValue;
import com.google.template.soy.data.SoyValueConverterUtility;
import com.google.template.soy.data.SoyValueProvider;
import com.google.template.soy.data.internal.DictImpl.RuntimeType;
import com.google.template.soy.data.restricted.StringData;
import com.google.template.soy.jbcsrc.restricted.BytecodeUtils;
import com.google.template.soy.jbcsrc.restricted.Expression;
import com.google.template.soy.jbcsrc.restricted.FieldRef;
import com.google.template.soy.jbcsrc.restricted.MethodRef;
import com.google.template.soy.jbcsrc.restricted.SoyExpression;
import com.google.template.soy.jssrc.restricted.JsExpr;
import com.google.template.soy.pysrc.restricted.PyExpr;
import com.google.template.soy.pysrc.restricted.PyListExpr;
import com.google.template.soy.types.UnknownType;
import java.util.Set;
import org.junit.Test;
import org.junit.runner.RunWith;
import org.junit.runners.JUnit4;

/**
 * Unit tests for KeysFunction.
 *
 */
@RunWith(JUnit4.class)
public class KeysFunctionTest {

  @Test
  public void testComputeForJava() {
    KeysFunction keysFunction = new KeysFunction();

    SoyValue map =
        SoyValueConverterUtility.newDict(
            "boo", "bar", "foo", 2, "goo", SoyValueConverterUtility.newDict("moo", 4));
    SoyValue result = keysFunction.computeForJava(ImmutableList.of(map));

    assertThat(result).isInstanceOf(SoyList.class);
    SoyList resultAsList = (SoyList) result;
    assertThat(resultAsList.length()).isEqualTo(3);

    Set<String> resultItems = Sets.newHashSet();
    for (SoyValueProvider itemProvider : resultAsList.asJavaList()) {
      resultItems.add(itemProvider.resolve().stringValue());
    }
    assertThat(resultItems).containsExactly("boo", "foo", "goo");
  }

  @Test
  public void testComputeForJbcSrc() {
    KeysFunction keysFunction = new KeysFunction();
    // empty map becomes empty list
    assertThatExpression(
            keysFunction.computeForJbcSrc(
                /*context=*/ null,
                ImmutableList.of(
                    SoyExpression.forSoyValue(
                        UnknownType.getInstance(),
                        MethodRef.DICT_IMPL_FOR_PROVIDER_MAP.invoke(
                            MethodRef.IMMUTABLE_MAP_OF.get(0).invoke(),
                            FieldRef.enumReference(RuntimeType.LEGACY_OBJECT_MAP_OR_RECORD)
                                .accessor())))))
        .evaluatesTo(ImmutableList.of());
    assertThatExpression(
            keysFunction.computeForJbcSrc(
                /*context=*/ null,
                ImmutableList.of(
                    SoyExpression.forSoyValue(
                        UnknownType.getInstance(),
                        MethodRef.DICT_IMPL_FOR_PROVIDER_MAP.invoke(
                            BytecodeUtils.newLinkedHashMap(
                                ImmutableList.<Expression>of(
                                    BytecodeUtils.constant("a"), BytecodeUtils.constant("b")),
                                ImmutableList.<Expression>of(
                                    FieldRef.NULL_PROVIDER.accessor(),
                                    FieldRef.NULL_PROVIDER.accessor())),
                            FieldRef.enumReference(RuntimeType.LEGACY_OBJECT_MAP_OR_RECORD)
                                .accessor())))))
        .evaluatesTo(ImmutableList.of(StringData.forValue("a"), StringData.forValue("b")));
  }

  @Test
  public void testComputeForJsSrc() {
    KeysFunction keysFunction = new KeysFunction();
    JsExpr expr = new JsExpr("JS_CODE", Integer.MAX_VALUE);
    assertThat(keysFunction.computeForJsSrc(ImmutableList.of(expr)))
        .isEqualTo(new JsExpr("soy.$$getMapKeys(JS_CODE)", Integer.MAX_VALUE));
  }

  @Test
  public void testComputeForPySrc() {
    KeysFunction keysFunction = new KeysFunction();
    PyExpr dict = new PyExpr("dictionary", Integer.MAX_VALUE);
    assertThat(keysFunction.computeForPySrc(ImmutableList.of(dict)))
        .isEqualTo(new PyListExpr("(dictionary).keys()", Integer.MAX_VALUE));
  }
}

redpajama_set_name: RedPajamaGithub


Patients are typically referred to the Hypertension Clinic when they have hypertension that is difficult to control and is being treated with three or more types of medication; a provider suspects a secondary or reversible cause of hypertension, such as narrowing of an artery, a hormonal abnormality or an inherited genetic condition; or a patient has a strong family history of hypertension.
In some cases, the Hypertension Clinic incorporates the use of ambulatory blood pressure monitoring, a technique that utilizes a small, wearable device to take measurements of a patient's blood pressure over a 24- to 48-hour period. This technique provides the most accurate method for determining blood pressure at home, and can be used in some patients to more accurately assess cardiovascular risk.
The clinic is located on the 7th floor of the Norm Maleng Building at Harborview Medical Center.
Laura J. Hanson Pharm.D., B.C.P.S.


text:
using System;
using Liquid.NET.Constants;
using Liquid.NET.Utils;

namespace Liquid.NET.Filters
{
    /// <summary>
    /// See: http://www.ruby-doc.org/core/Time.html#method-i-strftime
    /// </summary>
    // ReSharper disable once ClassNeverInstantiated.Global
    public class DateFilter : FilterExpression<LiquidDate, LiquidString>
    {
        private readonly LiquidString _format;

        public DateFilter(LiquidString format)
        {
            _format = format;
        }

        public override LiquidExpressionResult ApplyTo(ITemplateContext ctx, LiquidDate liquidDate)
        {
            if (/*dateValue.IsUndefined ||*/ !liquidDate.DateTimeValue.HasValue)
            {
                return LiquidExpressionResult.Success(LiquidString.Create(""));
            }
            //Console.WriteLine("Formatting " + dateValue.Value + " with format "+_format.StringVal);
            String format = "%m/%d/%Y";
            if (_format != null )
            {
                format = _format.StringVal;
            }
            return LiquidExpressionResult.Success(LiquidString.Create(liquidDate.DateTimeValue.Value.ToStrFTime(format)));

        }

    }
}


text:
"Vantage Live Sessions" promoting Underground Musicians!
It all started in 2011 when Pakistan music industry started suffering because Pakistani musicians were not encouraged by the sponsors. On the contrary, there were still some platforms creating good music but the problems for the emerging stars remained the same.
Watch Vantage Live Session
The man behind the existence of Vantage Live session is Mr. Nabeel Ur Rehman, who initiated the idea of giving the new comers a platform where they can to promote their talent. His focus was to indulge Pakistani music industry and to revive the music culture for Pakistan's youth.
For the past 11 years,, Nabeel has been in music and for the last 5 years, he is the music producer and head of music production in Renown Pakistani Channel.
Download Audios
The vantage Live Session Season 2 came out with the return of Vantage band Member Mr. Ibtihaj Abbas Khan who came from Australia, was already part of Vantage Band Since 2005 and now united with Mr. Nabeel ur Rehman, to continue the Dream of Vantage live Sessions i.e. "Strive to promote the new singers and musicians" with the Tagline "Let The Music Speak"!
CORNETTO POP ROCK 2 Comes to Islamabad!
Taazi releases a satirical video on World Intellectual Property Day!

redpajama_set_name: RedPajamaCommonCrawl


text:
Total Recall: My Unbelievably True Life Story
Author: Arnold Schwarzenegger
Narrator: Stephen Lang, Arnold Schwarzenegger
Publisher: Simon & Schuster Audio
Genre: Biography & Autobiography - Political
One of the most anticipated autobiographies of this generation, Arnold Schwarzenegger's Total Recall is the candid story by one of the world's most remarkable actors, businessmen, and world leaders.THE GREATEST IMMIGRANT SUCCESS STORY OF OUR TIME…AND HE TELLS IT BRILLIANTLY, READING THE FIRST AND LAST CHAPTERS HIMSELF! His story is unique, and uniquely entertaining, and he tells it brilliantly in these pages. He was born in a year of famine, in a small Austrian town, the son of an austere police chief. He dreamed of moving to America to become a bodybuilding champion and a movie star. By the age of twenty-one, he was living in Los Angeles and had been crowned Mr. Universe. Within five years, he had learned English and become the greatest bodybuilder in the world. Within ten years, he had earned his college degree and was a millionaire from his business enterprises in real estate, landscaping, and bodybuilding. He was also the winner of a Golden Globe Award for his debut as a dramatic actor in Stay Hungry. Within twenty years, he was the world's biggest movie star, the husband of Maria Shriver, and an emerging Republican leader who was part of the Kennedy family. Thirty-six years after coming to America, the man once known by fellow bodybuilders as the Austrian Oak was elected governor of California, the seventh largest economy in the world. He led the state through a budget crisis, natural disasters, and political turmoil, working across party lines for a better environment, election reforms, and bipartisan solutions. With Maria Shriver, he raised four fantastic children. In the wake of a scandal he brought upon himself, he tried to keep his family together. Until now, he has never told the full story of his life, in his own voice. Here is Arnold, with total recall.
Al Franken, Giant of the Senate
by Al Franken
#1 New York Times Bestseller"Flips the classic born-in-a-shack rise to political office tale on its head. I skipped meals to read this book - also unusual - because every page was funny. It made me deliriously happy." - Louise Erdrich, The New York...
Narrator: Al Franken
by Ron Chernow
A New York Times Bestseller, and the inspiration for the hit Broadway musical Hamilton!Pulitzer Prize-winning author Ron Chernow presents a landmark biography of Alexander Hamilton, the Founding Father who galvanized, inspired, s...
Narrator: Scott Brick,Grover Gardner
by Andrew G. McCabe
The Instant #1 New York Times Bestseller!This program is read by the author.On March 16, 2018, just twenty-six hours before his scheduled retirement from the organization he had served with distinction for more than two decades, Andrew G. McCabe was...
Narrator: Andrew G. McCabe
The Restless Wave
by John McCain
In this candid new political memoir from Senator John McCain, an American hero reflects on his life—and what matters most."I don't know how much longer I'll be here. Maybe I'll have another five years. Maybe, with the a...
Narrator: Beau Bridges
by James Comey
"Comey's conversational tone instantly connects with the listener, and hearing him deliver the book's highly charged contents in his own voice brings authenticity and immediacy to the presentation...This greatly anticipated, revelatory memoir needs ...
Narrator: James Comey
by Arnold Schwarzenegger
One of the most anticipated autobiographies of this generation, Arnold Schwarzenegger's Total Recall is the candid story by one of the world's most remarkable actors, businessmen, and world leaders.THE GREATEST IMMIGRANT SUCCESS STORY OF...
Narrator: Stephen Lang
by Chris Matthews
INCLUDES AN INTERVIEW WITH THE AUTHOR! New York Times Bestseller A revealing new portrait of Robert F. Kennedy that gets closer to the man than any book before, by bestselling author Chris Matthews, an esteemed Kennedy expert and anchor of MSNBC&rsq...
Narrator: Chris Matthews
by Hillary Rodham Clinton
A TIME MAGAZINE BEST BOOK OF THE YEAR AND NEW YORK TIMES NOTABLE BOOK 2018 Audie Award Finalist "In the past, for reasons I try to explain, I've often felt I had to be careful in public, like I was up on a wire without a net. Now I&rsquo...
Narrator: Hillary Rodham Clinton
The inspiration for the hit Broadway musical Hamilton! In the first full-length biography of Alexander Hamilton in decades, National Book Award winner Ron Chernow tells the riveting story of a man who overcame all odds to shape, inspire, and sc...
{"id":"143909","ean":"9781442353268","abr":"Unabridged","title":"Total Recall: My Unbelievably True Life Story","subtitle":"My Unbelievably True Life Story","author":"Arnold Schwarzenegger","rating_average":"4.55","narrator":"Stephen Lang","ubr_id":"143909","abr_id":"143908","ubr_price":"29.95","abr_price":"17.95","ubr_memprice":"17.97","abr_memprice":"10.77","ubr_narrator":"Stephen Lang","abr_narrator":"Stephen Lang","ubr_length":"Unabridged: 25 hr","abr_length":"Abridged: 7 hr"}


Isabel Sharpe reads from As Good as It Got.
Isabel Sharpe's book Knit in Comfort was available from LibraryThing Early Reviewers.
Isabel Sharpe is currently considered a "single author." If one or more works are by a distinct, homonymous authors, go ahead and split the author.
Isabel Sharpe is composed of 1 name.


The preparations to celebrate Eid Milad-un-Nabi (PBUH) are in full swing across the country.
Special programs are being finalized to highlight the glaring aspects of the life of the Holy Prophet Mohammad (PBUH).
Mosques, government and private buildings, markets, shopping centres and roads are being decorated with green buntings, flags and colourful lights.


text:
Liberal Democrat Newswire #54: still time to vote for Party President
Edition #54 of Liberal Democrat Newswire came out last week, a quick mid-month update on several issues.
Welcome to the 54th edition of Liberal Democrat Newswire, a quick mid-month update on some of the issues covered last time.
As ever I hope you enjoy reading Liberal Democrat Newswire, which has more subscribers than the party's own official monthly publication, Ad Lib.
P.S. You don't have to wait for the next edition of Liberal Democrat Newswire to keep up with news. My site is regularly updated with stories such as Christmas gift ideas for political friends.
Party strategy: what the Lib Dems need to do next
That was the main theme running through Liberal Democrat Newswire #53, following which I took part in a discussion on The Westminster Hour:
Of course, the performance of the party leader is a large part of being a successful modern political party. The BBC's Daily Politics covered this in more depth recently too, looking at all three of the main parties:
Polls close soon
Voting for the Liberal Democrat federal committees closes at noon, Thursday 20 November.
This ballot is open to voting conference reps (this time round – party conference has agreed in principle to change this for future elections).
Voters should have either received an email with a link to voting and the candidate manifestos or had a posted mailing.
I'm restanding for the Federal Policy Committee; see my FPC manifesto here and also my tips for six great candidates to vote for. It's also well worth taking a look at Jennie Rigg's site for her excellent set of candidate Q+As.
For more on what the committees up for election do, and what to do if you've had neither an email nor a posted mailing see the helpful round up on Lib Dem Voice.
Voting for Liberal Democrat Party President closes at noon, Wednesday 26 November.
This ballot is open to all party members, who should by now have received a ballot mailing with options to vote by post, by manually going to a web address or by scanning a QR code.
Manifestos for the candidates were included in the mailing and are available after you login to the voting site. I've also added them to my round-up of literature from the Presidential candidates.
If you are a member and have not yet received your Presidential ballot, the email address is help@libdems.org.uk or call 020 7022 0988.
Lib Dems launch NHS push
In another example of the party's increasing willingness to let Coalition differences show in public, the Liberal Democrats have launched a public push, including a petition, to secure an extra £1.5 billion in funding for the NHS as part of next month's Autumn Statement.
Health minister Norman Lamb said:
The NHS needs significantly more money to help trusts adapt to the changing needs of our population and it can't afford to wait.
That's why securing extra money for the NHS must be a high priority for the whole Government in next month's Autumn Statement. And we want at least an extra billion pounds put in every year in the next Parliament too.
A significant amount of that needs to go on improving mental health services, especially for children and young people. For too long mental health has been seen as a second class issue in the NHS and the Liberal Democrats are determined that changes.
Please rate this edition
I really value the views of readers as it helps me decide what to include in future editions.
How much did you like this newsletter?
lowest 1 2 3 4 5 6 7 8 9 10 highest
Sorry, voting is closed.
Thank you – and please forward
I hope you're found this edition of Liberal Democrat Newswire interesting, informative, useful – or all three!
Like this newsletter? Then let your friends know about it too. Just point them at this sign-up page. You can catch up on previous editions by taking a look at the online archive.
Best wishes and thank you for reading,
P.S. I use Mailchimp to power these newsletters and absolutely love it – it's really powerful yet easy to use, and comes with a good range of free and low cost options. Plus their technical support team responds quickly and in plain English. If you're after an email service yourself, you can sign up for a Mailchimp account here.
Keep scrolling to read the next post: Osborne warns EU: one of the political cartoons of the year...
2014 Liberal Democrat Party President Election, Autumn Statement 2014, Liberal Democrat Newswire archive
← Osborne warns EU: one of the political cartoons of the year
The turnout massacre: what went wrong with the Lib Dem internal elections? →


text:
Houston art dealer Hiram Butler's quest fuels Ellsworth Kelly's 'Austin' chapel
Arts & Entertainment // Entertainment
New masterpiece latest in a series by leading artists
Molly Glentzer Feb. 23, 2018 Updated: Feb. 25, 2018 12:56 p.m.
Houston art dealer Hiram Butler's quest fuels Ellsworth...
1of19The array of 12 stained-glass windows in the west facade of Ellsworth Kelly's "Austin" conveys the artist's lifelong fascination with the spectrum of color.Photo: Molly Glentzer
2of19The entry door to Ellsworth Kelly's "Austin" is made of native Texas live oak re-purposed from the site of the new Dell Medical School at the University of Texas at Austin.Photo: Molly Glentzer
3of19Light from the stained glass windows dances across the walls of Ellsworth Kelly's "Austin," whose elements include a series of 14 black & white marble panels that are abstract references to the Stations of the Cross.Photo: Blanton Museum of Art, University of Texas at Austin, Photographer
4of19Houston art dealer Hiram Butler, from left, the late artist Ellsworth Kelly, architect Rick Archer and builder Tom Butler of Linbeck Construction discuss plans for Kelly's "Austin."Photo: Courtesy Hiram Butler
5of19Simone Wicha, director of the Blanton Museum of Art, speaks during a preview of Ellsworth Kelly's "Austin," which she shepherded into being.Photo: Molly Glentzer
6of19Ellsworth Kelly's "Austin" draws influences from Romanesque and Cistercian cathedrals.Photo: Molly Glentzer
7of19"Spectrum IV," an oil painting of 13 joined panels, is among the works in "Form Into Spirit," a temporary exhibition at the Blanton Museum of Art that unpacks the motifs of Kelly's new "Austin," the permanent building and artwork next door.Photo: Molly Glentzer
8of19The entrance to Ellsworth Kelly's cruciform-shaped building "Austin," which is located near the Blanton Museum of Art on the University of Texas at Austin campus.Photo: Blanton Museum of Art, University of Texas at Austin, Photographer
9of19A southeast view of Ellsworth Kelly's "Austin," the Blanton Museum of Art's new artist-designed building with an installation of colored glass windows, black and white marble panels, and a redwood totem.Photo: Blanton Museum of Art, The University of Texas at Austin, Photographer
10of19Simone Wicha, director of the Blanton Museum of Art, speaks during a preview of Ellsworth Kelly's "Austin," which she shepherded into being.Photo: Molly Glentzer
11of19Light from the stained glass windows dances across the walls of Ellsworth Kelly's "Austin," whose elements include a series of 14 black & white marble panels that are abstract references to the Stations of the Cross.Photo: Blanton Museum of Art, University of Texas at Austin, Photographer
12of19The stained glass windows on the south-facing wall of Ellsworth Kelly's "Austin" incorporate a grid motif the artist employed throughout his career.Photo: Blanton Museum of Art, University of Texas at Austin, Photographer
13of19The Blanton Museum of Art is ready for an influx of visitors with numerous products in its gift shop devoted to Ellsworth Kelly's "Austin."Photo: Molly Glentzer
14of19"Form Into Spirit," the temporary exhibition of works by Ellsworth Kelly that reflect the motifs of his new "Austin," includes several totems similar to the one rendered in redwood for the chapel.Photo: Molly Glentzer
15of19Emerging artist Matt Kleberg envisions an eye-popping chapel that gets its color from paint.Photo: Courtesy of the artist
17of19Following repairs, Live Oak Friends Meetingight artist James Turrell's Skyspace is set to reopen for viewing hours on July 30, 2010. Â James Turrell. Photo: F. Holzherr
18of19SAVE FOR BEST-PLACES. LIVE OAK FRIENDS MEETING HOUSE -- Inside the meeting area at the Live Oak Friends Meeting House, 1318 West 26th, photographed Tuesday evening, November 27, 2001. The benches are white oak mounted on bleached pine flooring, but the centerpiece is artist James Turrell's Skyspace which is a 12 foot-square opening directly over the center of the meeting room. The roof covering the Skyspace is retractable providing an opening to the sky. Tubes of neon which are out of sight fill the opening with a profound blue light. (Smiley N. Pool/Chronicle) 11/27/01 FOR TEXMAG STORY BY RICHARD VARA ON 'SACRED SITES'Photo: Smiley N. Pool, Staff
19of19Visitors explore Richard Serra's massive "Sequence" steel sculpture at SFMOMA in San Francisco, Calif.Photo: Paul Chinn, Staff
AUSTIN - Ellsworth Kelly conceived "Austin," the sculptural building unveiled last week on the University of Texas campus, as a place of serenity.
With its double-barrel vaulted ceiling and shape inspired by a Romanesque church, the quiet space brings important motifs of the artist's career into focus as one transcendent gesture of form, color and light.
The late American minimalist, who died in 2015 at 92, had dreamed of producing a chapel for several decades. A painter and sculptor, he initially sketched his building in 1986 for TV producer Douglas Cramer, a Kelly collector who wanted a structure for a vineyard in Santa Barbara, Calif. That never came to pass.
The story of why the university's Blanton Museum of Art ended up with the masterpiece begins, curiously, neither in Santa Barbara nor in Austin, but in Houston, where the art dealer who would be Kelly's agent for the project was struggling with acceptance and faith.
Cultural protest
Ellsworth Kelly's 'Austin'
When: 10 a.m.-5 p.m. Tuesdays-Fridays, 11 a.m.-5 p.m. Saturdays, 1-5 p.m. Sundays; related exhibition "Form Into Spirit," through April 29
Where: Blanton Museum of Art, University of Texas at Austin, 200 E. MLK Jr. Blvd.
Info: $5-$9; 512-471-5482, blantonmuseum.org
Tempers were as hot as the temperature outside the gates of the Astrodome on the night of Aug. 17, 1992.
Inside, where the Republican National Convention was opening, conservative commentator Patrick Buchanan was sowing divisiveness, throwing salvos about a "cultural war" against those who supported abortion, radical feminism and the "homosexual rights movement."
While real fireworks exploded above the Dome, police clashed at the gates with a crowd of about 2,000 demonstrators who were protesting the federal government's lack of support for AIDS research.
The marchers had walked several miles, from Hermann Park, through the Texas Medical Center. Some staged a "die-in." A few burned an effigy of President George H.W. Bush.
Hiram Butler, a Houston art dealer, participated as a board member of the National Gay and Lesbian Task Force, which had set up shop for the week in his West End gallery.
The protest was fully permitted and legal, Butler said recently. "I was very careful about that."
Then, as he remembers it, the police attacked, and he and his friends ran for their lives. He avoided arrest but was incensed and offended, mad enough to complain about the police brutality to the city council.
Like a lot of people in Houston's gay community, Butler was fed up with so many things: the hostile rhetoric of the Bush administration, which denounced gays as enemies of "family values." Gay bashings on the streets, including the fatal stabbing of 27-year-old Paul Broussard the previous year by two carloads of teenage boys from The Woodlands.
Less noisy deaths, too. By his early 40s, he had seen too many to count.
Butler, a native of Eagle Pass who started his career at the Museum of Modern Art, had moved back to Texas after losing all of his New York friends to AIDS. But the epidemic dragged on across Houston, too - especially in Montrose, where haunting, withered figures were seemingly everywhere one looked.
As it so happened, Butler visited Florence, Italy, and Rome soon after the convention protest. And as he viewed Italy's largely Bible-inspired Renaissance masterpieces, he had a revelation: "You start looking at the Sistine Chapel and all the great monuments of Western civilization, and you realize that Michelangelo and Leonardo were gay."
What was a gay man to do with such knowledge in Houston in 1992?
A place for Friends
Butler was no heathen. Raised Episcopalian but bothered by the gender-based politics of the local diocese, he had been exploring the Quaker faith because it and its Religious Society of Friends involved no clergy or hierarchy, and because they cared about gender equality and recognized gay marriage.
The intersection of art and religion fascinated Butler, and he decided to turn his frustration into action, with the Rothko Chapel as his model. He would use his blue-chip network of patrons and artists to shepherd other conceptual art buildings across Texas that would be havens of tolerance and spiritual enlightenment.
The thought stuck: "Lemme show 'em what one queer can do."
Butler quickly orchestrated a commission for stained-glass windows at St. Stephen's Episcopal Church in Montrose, by New York artist Jennifer Bartlett, which was unveiled in 1995.
Five years later, the Live Oak Friends Meeting House, designed by architect Leslie Elkins, opened in the Heights. Not just drawing more Quakers to share worship, the meeting house quickly became a magnet for international art lovers who wanted to see the city's first skyspace by James Turrell - a luminous, sublime experience that changed with each day's setting sun.
Now, more than 20 years into his quest, Butler has five meditative spaces under his belt.
Kelly's "Austin" is the latest.
Butler learned of the project that would become "Austin" almost by the grace of God in the summer of 2012.
He and his husband, Andrew Spindler-Roesle, were in New York for a memorial service and ran into Kelly and his husband, Jack Shear - with whom they were friends - on the sidewalk outside the funeral home. As they exchanged pleasantries, Butler told Kelly he was planning Turrell's Philadelphia meeting house.
Kelly said, "You know what? I designed a chapel in the '80s. Bring me a patron."
"That was like catnip," Butler said.
Because Kelly was in his late 80s by then, and in delicate health, Butler quickly engaged San Antonio architect Rick Archer and builder Tom Butler (no relation) to join him in meetings at Kelly's New York studio.
The art dealer called Houston's major museums first. They liked the idea but couldn't take it on, so he then pitched Kelly's concept to a devoutly Catholic Houston couple who prefer to remain anonymous. They, too, embraced it and wanted to build Kelly's chapel at Strake Jesuit High School in southwest Houston.
Kelly, who was an atheist, turned them down. He was inspired by religious architecture but wanted his chapel to be seen as a work of art, nondenominational and ecumenical.
Butler also shopped the project to Rice University, but he said officials there felt the design was too specific, too Christian - given the cruciform shape of the building; 14 interior panels that, though utterly abstract and minimal, were inspired by the Stations of the Cross; and the tall redwood totem that might be construed as a cross at the altar end of the building.
So Hiram Butler and Archer turned to their alma mater, the University of Texas. They had collaborated with the Landmarks public art program there to create Turrell's "The Color Inside."
With an assist from patrons Jeanne and Michael Klein, who got the project in front of the university president quickly, and significant support from major patrons including Houstonians Charles and Judy Tate (who gave their Latin American art collection as part of a $10 million gift to the Blanton in 2014) and the large Blanton family (also from Houston), Kelly's project finally took off.
"It was literally a village," said Blanton Museum director Simone Wicha, who managed the project for the university and raised more than half of the $23 million cost. "We knew if we were given the chance by Ellsworth - if he felt like we were the place because clearly he had had conversations with other institutions as well - it would be a great honor. … Having funders who stepped up early on gave weight to it as something that could be achieved. And that really mattered because of Ellsworth's age. It would have been a lot of slower if there hadn't been people who didn't just get it immediately."
No one felt that pressure more than Archer and Tom Butler and their colleagues at Overland Partners and Linbeck, who brought the artist's concept from vision to visible, as Archer likes to say.
The artist's crude drawings from the '80s proposed a slightly different configuration, made of stucco. That raw plan became the jumping-off point for deep and intense collaboration, as the architect and builder and their teams talked Kelly through his options for materials he had never used before - including three window designs of meticulously colored, hand-blown stained glass; the 14 panels rendered as "paintings" of black-and-white marble; black granite floors and an exterior whose 1,569 panels of muted, gray Spanish limestone wouldn't be too glaring in the Texas sun.
To understand what Kelly was trying to accomplish, Archer said, they needed to learn not just what Kelly was thinking but his thought process. The architect had seen meticulous before, collaborating with Turrell and other artists on previous projects, including glass master Dale Chihuly's "Splendor on the Ceiling" at the San Antonio Museum of Art.
Kelly was "the kind of artist who would stare at two canvases to decide whether the gap between them should be 2⁄16ths of an inch or 3⁄32nds of an inch," Archer said. "But he also believed in letting things happen through chance because he wanted people to see the art, not the artist."
That's why the building's stonework placement was planned digitally: The patterns were chosen randomly via an algorithm.
Wicha was great at listening and making sure Kelly's wishes were met, Archer said.
Kelly produced "hundreds and hundreds" of drawings that the team regenerated as construction documents, so they could ensure that every detail satisfied his desire.
Yet Kelly understood the realities, too: His building had to accommodate the public, with air condititioning and auxiliary lighting; for that, he depended on the architect and contractor.
Kelly gave the work its title, following his tradition of naming works for the places they were created. But it was also deeply personal to the artist, Archer said. "He was deeply engaged in connecting it to his life." Many of the tactile, tangible decisions he made related directly to things he loved in his home and studio.
As simplistic as Kelly's art may look to some people, virtually every painting, drawing or sculpture he made grew from ideas that he considered his entire career.
"Austin" is a primer in several key Kelly themes: Its stained-glass designs depict his lifelong fascination with the color grid and the color spectrum. The panels mirror his most reductive, black-and-white works. The mathematically precise redwood totem, like others he designed in stainless steel, painted aluminum and bronze, represents a segment of a circle.
Even the building's shape had been in his head for decades, referencing religious architecture he first saw in Europe as a young military artist during World War II.
Timeless eloquence
More than a thousand people lined up to experience "Austin" last Sunday, when the doors first opened to the public.
"We are very lucky to have it," Butler said about the idea he helped bring to reality. "It's absolutely glorious."
Does it really all relate to that moment of awakening when he wanted to show the world what a queer could do?
"Yes!" Butler said. "There was very much a topical aspect to it, in addition to a spiritual aspect."
Wicha credits Butler as the catalyst. "He had tremendous courage and initiative to find a home for it, truthfully, in the nick of time," she said.
Butler is quietly pressing on to realize more chapels, including one in San Antonio that he hopes will be a commission for emerging artist Matt Kleberg. Turrell has also recently designed a private space for a River Oaks couple and a public chapel that will be built in Fort Worth.
Less developed is a project Butler has yearned to create for years, with Elkins, the architect: a synagogue designed by minimalist draftsman and sculptor Richard Serra, akin to one the artist created in Germany.
Serra isn't getting any younger, and neither is Butler, who said, "That is what I most want to do."
Kelly, who lived in New York and was too ill to travel during the final years of his life, never visited the city and museum that would build his final magnum opus.
The date on the "Austin" cornerstone reads "2015" because that's when Kelly donated his only building to the Blanton. Wicha defended that decision.
"In many ways," she said, the project was "completed" when Kelly passed away because he had selected the site and every inch of material in its 2,715 square feet. He had overseen the design of every detail, even down to the handle on the nearly invisible emergency-exit door. And ground was broken before his death.
"In a sense, he had handed it over for us to fabricate, the way any artist would do," Wicha said.
Gray skies may have made the dancing light on the walls less intense during the chapel's opening days than they will be on a bright summer day, but "Austin" is unquestionably a masterpiece.
The place feels timeless, really, but time will pass eloquently there.
Molly Glentzer
Follow Molly on:
http://www.facebook.com/mollyglentzer
Molly Glentzer, a staff arts critic since 1998, writes mostly about dance and visual arts but can go anywhere a good story leads. Through covering public art in parks, she developed a beat focused on Houston's emergence as one of the nation's leading "green renaissance" cities.
During about 30 years as a journalist Molly has also written for periodicals, including Texas Monthly, Saveur, Food & Wine, Dance Magazine and Dance International. She collaborated with her husband, photographer Don Glentzer, to create "Pink Ladies & Crimson Gents: Portraits and Legends of 50 Roses" (2008, Clarkson Potter), a book about the human culture behind rose horticulture. This explains the occasional gardening story byline and her broken fingernails.
A Texas native, Molly grew up in Houston and has lived not too far away in the bucolic town of Brenham since 2012.
Memorial Park Conservancy wants to hear from you
How a veteran feminist artist threads past and present together
Frame Dance plans a fun look at social anxieties with "Oh, I have to wash my hair"


text:
Shaping : BROCHE
Size : 1 x 215 mm
Mission South Pole
Matthieu Tordeur
In 2019, all-terrain explorer Matthieu Tordeur became the first Frenchman and youngest ever person to reach the South Pole on their own, unsupported and unassisted.
At just 28 years old, Matthieu Tordeur has all the makings of a great explorer and promises to be the next Jean-Louis Etienne or Sylvain Tesson. He has already crossed Europe on a bike and the Atlantic in a sailboat, traveled around the world in a Renault 4L, walked 150... At just 28 years old, Matthieu Tordeur has all the makings of a great explorer and promises to be the next Jean-Louis Etienne or Sylvain Tesson. He has already crossed Europe on a bike and the Atlantic in a sailboat, traveled around the world in a Renault 4L, walked 150 miles across the Sahara unsupported, and completed an Ironman.
In this book, Matthieu takes us along with him on a new adventure: conquering the South Pole. In November 2018, he landed in Antarctica to start a pilgrimage of over 700 miles across the white continent powered only by his arms and legs. His goal: reach the Geographic South Pole in 50 days in total autonomy (without any outside provisions or assistance).
With humility and passion, Matthieu tells the story of his extraordinary trek, marked by a number of obstacles and surprises, and shares just as many moments of anguish and doubt as those of grace and amazement. In this hostile yet protected environment, the only place in the world devoid of the native presence of humans, Matthieu is a direct witness to the disastrous consequences of climate change at the Earth's poles.
I contemplate the vastness of this continent and I'm struck by the thought of being alone in the middle of this huge desert for the next seven weeks. It's a dizzying thought, one that puts knots in my stomach. Especially when I notice the regularly spaced ridges crossing the surface of the snow, like wrinkles on an immaculate face. They are cracks. Some open up into terrifying chasms. Others are closed and covered by bridges of snow. You can recognize them by the change in the snow's color. If they give way, these snow bridges could turn into deadly traps. These cracks are my worst nightmare.
See the product page
Matthieu Tordeur was born in 1991 in Rouen. When he is not on an expedition, he gives talks to businesses and directs documentary films. He is a member of the French Society of Explorers. Mission South Pole is his second book.
Agnès Naudin
Que faire face à l'antisémitisme ?
François Esperet
Ne restons pas ce que nous sommes
Agnès Grossmann
L'Affaire Rambla ou le Fantôme de Ranucci
Yunice Abbas, Thierry Niemen
J'ai séquestré Kim Kardashian
Jean-Michel Verne, Collectif
Résister en Corse
Frédéric Saldmann
La Santé devant soi
Alexandre Poussin, Sonia Poussin
Madatrek
Jacques Duplessy, Anna Erelle
L'École hors de la République
Rémi Camus
Aventurier de la vie
Catherine Le Gall
L'imposture océanique
Mélusine Mallender
Les Voies de la liberté


The Delburne Municipal Library is a proud member of the Parkland Regional Library system, a cooperative of 50 public libraries across central Alberta. With your library membership, you are a member of 50 other unique libraries and have access to their services too!
Our Mission is to enrich the lives of all the members of the community by providing books, audio tapes, CD's, Magazines and Internet Service as a means of stimulating the Appreciation of Learning.
We are governed by appointed trustees from the municipality of Delburne. Library board meetings are open to the public and occur once a month on the first Thursday. Our current board chair is Tanya O'Donoghue and our library manager is Judy Nicklom.
So come on in and Check Out what's going on! We have special offers, awesome activities, and interesting presentations throughout the year!
Box 405, 2210 Main St.