text:
Mikhail Rudenko
Mikhail (Michael) Kuzmich Rudenko (rus.: Михаил Кузмич Руденко) is the Ukrainian juggler who invented the semi-filled juggling stage balls that became known as Russian balls. He is a great juggler, who when he was young, practiced very hard with no mercy on himself. He has been an inspiration to many other jugglers, but has never been acknowledged for his accomplishments. This article is an attempt to shine some light on an important juggler, whose name and invention deserves to be better known. With the help of several other jugglers (who are credited below in this article), I assembled some information about him and called him for an interview.
Mikhail Rudenko was born November 20, 1954 in Lubny, Poltavs'ka oblast, Ukraine, to the family of Kuzma Ivanovich Rudenko, an engineer of urban green landscape solutions, and Maria Ivanovna Rudenko, a ticket controller at the city bus company. His daughter, Alexandra Rudenko, (born November 2, 1994) used to juggle in a circus studio organized by her father from 2004 to 2011. When Rudenko was around 15 years old, he went to a children's circus school in his town where he started juggling. Unfortunately, this school closed shortly after Rudenko enrolled, so he practiced alone until he joined a circus school in the neighboring city of Pryluky, where he learned under the tutelage of juggling teacher, Alexander Petrovich Gruzin. Gruzin later taught his most famous student, Victor Kee.
In 1971, Mikhail attended the Republican Studio of Variety and Circus Arts in Kiev (currently called the Circus Academy) with two years of education at that time. His teacher there was Alisa Aslanyan. In the same year, there was another juggling student named Yuriy Pozdnyakov.
After graduation in 1973, Rudenko was working with Ukrconcert but was drafted into the army. Luckily he got into a military ensemble with Yuriy Pozdnyakov. They put together a juggling act and with this act they were even sent to participate in the 5th Contest of Variety Artists of the Soviet Union in Moscow in 1974, and they had good success.
After the army and until 1980, Rudenko worked with the concert company Kiev Music Hall which had 120 artists and was touring around the Soviet Union. He also performed in Czechoslovakia and Poland. It was not easy to go to another country in the Soviet times. Only privileged artists in the Head Circus Company in Moscow had this opportunity to perform in the west. To get into this circus company artists must have had very high level skills and a little bit of luck. Rudenko wanted to get into this company, so they invited him to show his act in front of the creative team at their headquarters. Heading this creative team was Alexander Kiss, who liked Rudenko very much and was on his side. Kiss recommended Rudenko, but they could offer him only a small salary as a rookie. Rudenko asked for a higher salary and when the company declined, Rudenko didn't take their offer.
During his work with Kiev Music Hall, Rudenko took his skills to a very high level. In 1978 he was at the top of his abilities. He put 10 ball multiplex juggling in his act and was practicing 12 balls multiplex. His goal was 14 balls, but in the same year he got very sick, developing an infection in his liver which affected his future life. Rudenko was very obsessed with juggling, especially since he was so close to his goal that he just couldn't stop practicing. This made his illness even worse and he was forced to retire in 1980.
In 1987, Rudenko taught juggling in the State Kiev Circus School and retired shortly thereafter because of health problems. His student was Anatoliy Klimentiev, who is teaching juggling now in Pryluky City in the children's circus school Udai, which was rebuilt by Viktor Kee. Also Viktor Kee himself had Rudenko as his teacher on his last grade in the circus school in Kiev.
From 1990 to 2011 Rudenko organized a children's circus school in his town and was teaching juggling there. But again his health was getting worse and he had no more strength to continue. Unfortunately, he is currently still not healthy and is dependent on his small pension.
At the beginning in the children's circus school, Rudenko learned to juggle different tricks with 3 and 4 big balls within two years, as well as a 5 ball cascade and similar things with clubs. With rings he juggled 7 within the first couple of years and was able to juggle 8 rings in a sync pattern.
But when he enrolled in the Kiev Circus School, he narrowed down his focus to only balls and he juggled almost only with the small balls that he created himself.
Jugglers who know him say he was training very hard. Sometimes he trained 8 to 10 hours a day and only took breaks to drink milk and nothing more.
In his stage act with the balls, he performed tempo juggling with a lot of movement around the stage, which was a popular style at that time. He did some contact juggling with three balls on his chest. With five balls he ran around the stage with a lot of 180s and 360s (5-6 connected turns), backcrosses, and so on. With 6 balls, he juggled in a shower and shower multiplex while jumping in a circle. In his act he also did some tricks with 6 balls that we call today siteswaps, like 9555, for several rounds.
After 6 balls, he put 8 balls in one line and picked them one by one with his foot, kicking up each ball into the pattern until he had all of them and was juggling 8 balls in a multiplex pattern. Then he did different tricks and finished with 8 balls sync. He says the kick ups from the floor had been done by jugglers with the clubs before and he decided to do the same with balls.
In 1978 his final trick was 10 balls in multiplex pattern.
According to Rudenko, he did 7 balls for 1869 catches in training when he was 18 years old. He was practicing 10 balls starting in 1976 until he could run them for around one minute in practice. After that he put it in his act. In 1978 he started to practice with 12 balls multiplex and achieved a personal best of 16 catches (each catch with two balls). Note: he launched all 12 balls from his hands and used no special holster or anything. However, his goal was 14 balls and for that he used buttons on his pants and balls so that he could flash ten balls from his hands and then grab the 4 others connected to his pants and add them into pattern. Unfortunately it never happened because of his health issues.
12 balls multiplex (one ball is out of the picture)
At the same time, Mikhail Rudenko and another great juggler, Vladimir Kuzmenko, were the first jugglers who did 10 balls multiplexes in their show in the USSR.
Rudenko regrets that he wasted his time and energy on juggling with other props. If he could start from the beginning again, he would practice differently, using only small balls using his own juggling system and with the help of an athletic coach.
In 2002 during the first «Juggling Day» in Russia Rudenko was honored with two prizes:
– «For commitment to a high ideals and personal contribution in developing circus art»
– «For development of Juggling as a genre.
From left: Bilyauer, Rudenko, Chernov
«Rudenkos» (Rudenko style balls)
Many only knew the name Mikhail Rudenko as the inventor of Rudenko style balls – mistakenly called Russian balls. When I asked him if he is aware of what the common name for these balls is, he said no. When I told him, he laughed and asked me "why Russian if they were made in Ukraine?" I said that probably because Ukraine and Russia for the western people were kind of the same country.
So what exactly did Rudenko invent? There was a factory in Pryluky City producing plastic toys and a kind of skittles games. So he took the balls from that game and filled them with sand. When he attended a circus school in Kiev, he took semolina instead of sand just because it was easier to fill the balls with. The plastic yellow balls from the Pryluky factory had a diameter of 80 mm and had a quite hard shell. Rudenko filled them partially with semolina to get 100 – 120 grams balls. He explained that previously there were smaller fully-filled balls and he his innovation was filling them just partly. When Alexander Kiss saw Rudenko's creation he didn't really like them and called them "Wobbly balls" but Rudenko was fine with his new juggling creation. These kind of balls got very popular in Ukraine, and most jugglers used semolina filling. Even the Kiev State Circus School was buying balls from the Pryluky factory for their student jugglers. The balls became really famous world-wide through Viktor Kee. Thanks to his creative modern juggling, many jugglers wanted to have the same juggling balls as him.
There is an extensive article written by Pavel Koshel about Rudenko's juggling training system. That would be another extra article to write but in general it is about how to organize our training, how to develop other muscles apart from those that we use for juggling, and how to use athletics as a model to train endurance. "The athletes train their feet to be fast, we should train our hands to be fast." He recommends having "aerobic juggling," which means practicing basic tricks with 5 balls for about 45 – 60 minutes while paying attention to arm and body position, rather than only concentrating on the hardest tricks we can do. He also gives an example of the training week with a daily plan.
During the research process about M. Rudenko I got in touch with many jugglers to get some information. All of them remember him practicing very hard, and doing very impressive tricks. I would like to say thank you for help to the following people:
Pavel Koshel of the amazing duo Koshel & Koshman: "When I first saw Mikhail in training, I was just overwhelmed. I stood there hypnotized by his work and just couldn't stop staring. His stage act is one of the brightest impressions in my life."
Anatoliy Klimentiev: "Mikhail is a real fan of juggling. He always had some ideas in his head, always built new combinations. Even when he was very sick, he was thinking about juggling."
Gala Kuzmenko and Vladimir Kuzmenko: "Rudenko is a hard worker. He could buy some milk and practice the whole day non-stop."
Viktor Kee: "Rudenko has always been the one who inspired me for long training sessions. The legend about Rudenko and his commitment to juggling lived in all students of that time. We always had his 10 hour training sessions as an example to follow and to motivate ourselves to work harder.
Special thanks to Alexandra Rudenko, his daughter, for sending me information and photos via Internet.
And of course to Mikhail Rudenko himself! I wish he will get better soon!
Mikhail Rudenko juggler Kiev Circus School 1973 from Stanislav on Vimeo.


The Fremont Bridge Troll is a unique, almost-neon green with purple elements and a subtle linear holo finish. Purple shimmer and purple micro-glitter give the bright green a deeper, more complex neon hue. From the story "The Three Billy Goats Gruff, " this statue is Seattle's version of a troll living under the Aurora Bridge. He is a gigantic, one-eyed sculpture, holding a real VW Beetle and is a popular spot for tourist photos.


GF Pink is made specifically for fresh snow, and is intended to be a perfect compliment in between GT Red and GT Carrot. As with all tar wax you can expect easy application and amazing durability. GT Pink can also be used to cover klisters in mixed snow conditions.


Malin once again has shown what a rider this young woman is .. winning the 6 year old championships in Falsterbo with the mega talent Foreign Affair!. The Rock Forever Scandic youngster continued his winning, after last year winning the 5 year old Championships in Falsterbo and having a very successful season in Germany!.
Handling it all in his stride, Foreign Affair showed off his three very good gaits and talent for the changes and extensions, with some 9 s awarded, in both rounds to lead the competition with a score of 76.406%... 2 percent ahead of the rest! .
Not to be outdone in his short time with us here at Outstanding Stables, Forlan showed his maturity and ability, finishing third with a score 71.979% early in his competition career. This young jazz has it all and is a very interesting horse for the future, following in the steps of other successful Jazz offspring.
Huge thanks and well done goes to Malin!. Malin is a most valued member of our team, and is a serious talent in the saddle with horses of all ages!. Malin has done a super job with both these horses, which where presented beautifully and expertly developed taking the time it is needed to let each horse be confident and happy.


text:
Parabradya confluens is een eenoogkreeftjessoort uit de familie van de Ectinosomatidae. De wetenschappelijke naam van de soort is voor het eerst geldig gepubliceerd in 1936 door Lang.

Ectinosomatidae

redpajama_set_name: RedPajamaWikipedia


text:
Q: Deserializing complex JSON response using Jackson I am developing my web application backend using Spring. In particular, my application manages data on soccer teams and their players.
My application interacts with a third party REST API to fetch team and player data.
As for the teams, I created a Team entity as follows:
@Data
@Table(name = "team")
@Entity
public class Team {
    @Id
    @GeneratedValue(strategy = GenerationType.AUTO)
    @Column(name = "id", nullable = false)
    private Long id;
    private String name;
    private String logoUrl;
    @OneToMany(fetch = FetchType.EAGER, mappedBy = "team")
    private Set<Player> players;
}

The response that comes to me from the API, however, has a particular structure and contains an array of Teams in the "response" node.
Here is the structure of the response:
{
   "get":"teams",
   "parameters":{
      "league":"135",
      "season":"2020"
   },
   "errors":[

   ],
   "results":20,
   "paging":{
      "current":1,
      "total":1
   },
   "response":[
      {
         "team":{
            "id":487,
            "name":"Lazio",
            "country":"Italy",
            "founded":1900,
            "national":false,
            "logo":"https:\/\/media.api-sports.io\/football\/teams\/487.png"
         },
         "venue":{
            "id":910,
            "name":"Stadio Olimpico",
            "address":"Viale dei Gladiatori, 2 \/ Via del Foro Italico",
            "city":"Roma",
            "capacity":68530,
            "surface":"grass",
            "image":"https:\/\/media.api-sports.io\/football\/venues\/910.png"
         }
      },
      {
         "team":{
            "id":488,
            "name":"Sassuolo",
            "country":"Italy",
            "founded":1922,
            "national":false,
            "logo":"https:\/\/media.api-sports.io\/football\/teams\/488.png"
         },
         "venue":{
            "id":935,
            "name":"MAPEI Stadium - Citt\u00e0 del Tricolore",
            "address":"Piazza Azzuri d'Italia, 1",
            "city":"Reggio nell'Emilia",
            "capacity":23717,
            "surface":"grass",
            "image":"https:\/\/media.api-sports.io\/football\/venues\/935.png"
         }
      },
      ... // Other team objects
   ]
}

How can I parse the answer to get a List<Team> using the Jackson library?

A: You should create classes for Jackson that match result structure then convert instances of those classes to your Team class. Using same class for JPA entity and for Jackson deserialization is a bad idea.
There are online services that allow generating classes like this. For example this one https://json2csharp.com/json-to-pojo generated classes like this:
// import com.fasterxml.jackson.databind.ObjectMapper; // version 2.11.1
// import com.fasterxml.jackson.annotation.JsonProperty; // version 2.11.1
/* ObjectMapper om = new ObjectMapper();
Root root = om.readValue(myJsonString), Root.class); */
public class Parameters{
    public String league;
    public String season;
}

public class Paging{
    public int current;
    public int total;
}

public class Team{
    public int id;
    public String name;
    public String country;
    public int founded;
    public boolean national;
    public String logo;
}

public class Venue{
    public int id;
    public String name;
    public String address;
    public String city;
    public int capacity;
    public String surface;
    public String image;
}

public class Response{
    public Team team;
    public Venue venue;
}

public class Root{
    public String get;
    public Parameters parameters;
    public List<Object> errors;
    public int results;
    public Paging paging;
    public List<Response> response;
}

A: As @Sankozi said you can modelize your java pojos for json deserialization.
Then use an ObjectMapper for deserialization like :
ObjectMapper mapper = new ObjectMapper();

CollectionType javaType = mapper.getTypeFactory()
  .constructCollectionType(List.class, Response.class);

List<Response> asList = mapper.readValue(jsonArray, javaType);

List<Team> teams = asList.stream()

  .flatMap(response -> response.getTeam())

  .collect(Collectors.toList());

redpajama_set_name: RedPajamaStackExchange


text:
'No Country for Old Men'
Joel and Ethan Coen, Josh Brolin, and Javier Bardem discuss the making of "No Country for Old Men."
Joel Coen Ethan Coen Javier Bardem Josh Brolin
Oscar Contenders '08
Excerpts from past conversations about the leading Oscar contenders: "No Country for Old Men," and "There Will Be Blood." 54:24
'No Country for Old Men'; Michael Korda
Entertainment, Books, History
The filmmakers and actors behind "No Country for Old Men"; Michael Korda on his Dwight Eisenhower biography, "Ike: An American Hero." 53:45
Cate Blanchett introduces her latest film, "The Missing," directed by Ron Howard. 28:40
Susan Sarandon on her role in the film "The Client" and her work as an activist. 24:02
World, Entertainment
Oliver Stone on his latest film, "Heaven and Earth," a true story about a Vietnamese peasant's survival during and after WWII. 23:46

redpajama_set_name: RedPajamaCommonCrawl


So I'm not a huge numbers guy.
But this summer, there were some really impressive records that were set or broken or both at the domestic and worldwide box office that I want to talk about.
Some of them could merit their own individual posts and others are smaller, so I decided to just summarize them all in this 'end of summer' breakdown post.
And these numbers are all subject to change, but as of August 25th or so, this is what we got.
And I'll have my Top 10 (yeah, there's a few more than last year…) Most Anticipated of the Fall coming at you guys real soon too.


text:
Vieyra Joins Alabama Crimson Tide
***David Vieyra currently trains at ACE Tennis in Burlington, Ontario, and has recently been offered a tennis scholarship to the University of Alabama commencing January 2012. A 2 time Canadian Junior Nationals Finalist, 3 time Canadian Junior Nationals Doubles Champion and top 300 ITF ranked player, David has travelled the world playing ITF's and participated in the Junior Davis Cup for Canada. To read the article on David Vieyra from the Alabama Crimson Tide website, please click here.***
ONcourt: Congratulations David on your scholarship to the University of Alabama. What does this mean to you?
David Vieyra: This opportunity means a great deal to me. The University of Alabama is known for both its great athletic and academic programs. I feel it will provide me with the necessary tools to excel on and off the court.
ONcourt: What have you done over the past year to make your tennis scholarship a reality?
David Vieyra: I believe that the scholarship I received was the result of many years of hard work. Over the last year I have focused primarily on my studies so that I could be in a position to receive an opportunity such as this.
ONcourt: What was your experience like training at Tennis Canada in Montreal?
David Vieyra: I had an enjoyable experience at the national training center in Montreal. Traveling and playing tennis with close friends has left me with many fond memories. The center provided me the opportunity to play tennis at the highest level and travel around the world to compete against some of the very best.
ONcourt: Why did you leave Tennis Canada and return to train at ACE Tennis?
David Vieyra: I left the national training center because I found it extremely difficult to balance both my tennis and studies. ACE provided me with the structure and support I needed to not only continue playing tennis at the highest level, but to also reach my goals academically. If not for ACE tennis and the help they have provided, perhaps the scholarship to the University of Alabama would not have come to fruition.
ONcourt: What are you looking forward to the most about playing for the University of Alabama?
David Vieyra: The University takes great pride in its athletics. Students wearing the A are some of the very best at their sport. I'm looking forward to being part of such an environment. As well, I look forward to playing tennis as part of a team, something that is extremely unique to college tennis.
ONcourt: Thank you very much for you time. Good luck with your tennis and your education.
David Vieyra: You're welcome. Thank you.
A deeper dive into second serve statistics
The two most widely reported second serve statistics in professional tennis are the number of double faults a player hit, and their second serve winning percentage. If we're trying to understand the effectiveness of a particular player's second serve, relying only on those statistics has significant drawbacks. Article by Michal Kokta.
Mental Strength Training with Patricia Hy
Everyone knows the importance of mental strength, but not everyone knows how to go about it. If these ring a bell with you, let me help strengthen your player's mental fitness. Zoom workshops every Friday November 20 – December 18. 2020.
On Zoom. Starts Dec. 3, 7:30-8:15 Sign Up Today!
Who is this for? Tennis parents and coaches who want their athlete to succeed…3 Thursdays December 3rd – 17th. Sign up now!
Yves Boulais: No Excuses… Get Working
Yves was proud to work with players including Greg Rudsedski, Patricia Hy, Oliver Marach, Eugenie Bouchard and Rebecca Marino, who achieved excellent results on the world stage. He was an Olympic Coach in Barcelona 1992 & Atlanta 1996, and Captain of the Canadian FedCup Team 1998 – 2000.
Update on UK Tennis Situation with Master Louis Cayer
I would like to share a mindset I instil in all the players I coach, one I believe has greatly influenced all of the player's performances; "whatever happens, I can handle it." This mindset is achieved through a systematic, tactical development process, so that whoever the opponent, whatever the surface, regardless of the environment, or scoring, the players can, and will rise to the challenge as it is presented.
Tennis Guru, Louis Borfiga Shares What Makes "A Good Coach?"
Many are asking this question, each with their own opinion, their own truth. In reality, it is difficult to answer with certainty, as the evaluation method can vary from one person to another. However, when you think about it, when you look at the references in the field of coaching in various sports, there are certain common and fundamental elements that I will describe to you here…
Next Gen Tennis League promises exciting matches
ITF Men's 85 World Team Championships Renamed the Lorne Main Cup


text:
@interface PodsDummy_Pods_SeededNSURLSession_Tests : NSObject
@end
@implementation PodsDummy_Pods_SeededNSURLSession_Tests
@end

redpajama_set_name: RedPajamaGithub


Optical or light microscopy involves passing visible light transmitted through or reflected from the sample through a single or multiple lenses to allow a magnified view of the sample. The resulting image can be detected directly by the eye, imaged on a photographic plate or captured digitally. The basic light microscope is made up of a single lens with its attachments, or the system of lenses and imaging equipment, along with the appropriate lighting equipment, sample stage and support.


A photograph as the expression of more than a moment, but of an emotion, be it your own, that of your family, friends, your child... Allowing you to experience, even years later, the power and the magic of a fleeting instant. Looking at a photo and feeling like you're there... These are my promises.
A photographer from Lyon, limited only by the four corners of the earth. With a lust for life and spontaneity, I bring a sense of humour, simplicity and a self-confessed touch of the unexpected, I'll always be with you when it counts. The sole focus of my work is to making you look incredible.
Because my only signature is what will become yours, after all everything is the story of an encounter between the two of us.


text:
YRDSB Blog
Winter Break Extended to January 5, 2022
Dear families,I hope that this communication finds your family healthy and safe as we continue to be challenged with the pandemic. We have received notice from the Ontario Ministry of Education that following the winter break, all Ontario schools will be closed to studentson January 3 and 4, 2022. During this period, students will not participate in face-to-face or online learning. Both face-to-face and remote learning will commence on January 5, 2022.
Winter Break Message
Dear families, As we go into the winter break, we want to take this opportunity to thank you for your partnership over the first half of the school year. We know this year, our second year in a pandemic, has created challenges for families and we appreciate your collaboration to ensure the continuity of learning for our students. We also want to share some important reminders with families:
Secondary School Return to Four Period Timetable
Dear Families,We are very pleased to share that we have received approval from York Region Public Health to return to a more traditional pre-pandemic secondary timetabling. This means students will return to participating in four 75 minute course periods each day compared to the current modified semester system with two 150 minute course periods per day alternating weekly.
Inclement Weather Days During the 2021-2022 School Year
Dear families, We are writing to share some important updates with you.Inclement Weather Days As we enter the colder months, we wanted to inform families that similar to last school year, we have made the decision to close schools to students when an inclement weather day is declared and school transportation is cancelled. Please do not send your child to school when an inclement weather day is declared.
This year on September 30, in addition to acknowledging Orange Shirt Day, we mark the first National Day for Truth and Reconciliation - a day to reflect on the lasting legacies of residential schools.
Dear families, It has been a joy to welcome our students back to school. We have missed them, and whether they are joining their classrooms in person or remotely, we are so happy to see them and hope they have had a positive start to the school year.
Message from the Board Chair and Director of Education
We are deeply saddened by the news that again, unmarked graves have been found at the site of a former residential school in Canada. The remains of 751 people, mainly Indigenous children, have been identified at the site of Marieval Residential School in Saskatchewan. This is an ongoing reminder of the devastating legacy of residential schools in our country, and highlights our need to continue to address the ongoing trauma that Indigenous students, families, staff and communities face.
Tragic Incident in London, Ontario
Yesterday, we were heartbroken to hear of a Muslim family that was targeted with a vehicle in London, Ontario. Our deepest condolences go to the family and all those grieving this act of terrorism and hate.
Message from the Chair and Director
Over the weekend, we were heartbroken to see the news of the discovery of a mass grave of 215 children at the former residential school in Kamloops, British Columbia. This is a devastating reminder of not only the tragic legacy of residential schools in our country, but our need to continue to address the ongoing trauma that Indigenous students, families, staff and communities face. Our Director's Action Plan commits us to interrogate the ongoing impact of colonialism, and Residential Schools were a dehumanizing embodiment of the Canadian colonial project.
Sadly, York Region District School Board has been subject to hate mail. It comes in different forms: email, social media and their messaging platforms and, sometimes, through traditional mail. Approximately four years ago, we started receiving hate mail that contained anti-Black racism and antisemitism. While no physical threats were contained in the messages, the level of racism was disturbing and we contacted York Regional Police (YRP), who opened an investigation.
Previous page < PREV


text:
Los Angeles Lakers, Luke Walton part ways; Tyronn Lue among candidates for job
Connor Grott
The Los Angeles Lakers and head coach Luke Walton parted ways Friday after three seasons. The move came three days after team president Magic Johnson stepped down from his role. File Photo by John Angelillo/UPI | License Photo
April 12 (UPI) -- The Los Angeles Lakers and head coach Luke Walton agreed to part ways Friday, the team announced.
The move came three days after Lakers president of basketball operations Magic Johnson stepped down from his role with the organization. Johnson held an impromptu press conference Tuesday night and announced his decision to leave the team.
Walton finished his third campaign as the Lakers' head coach with a disappointing 37-45 record in a season that began with high expectations after the acquisition of star forward LeBron James.
Walton had two years remaining on his five-year contract.
RELATED Los Angeles' Magic Johnson steps down as Lakers president
"We would like to thank Luke for his dedicated service over the last three years," Lakers general manager Rob Pelinka said in a statement. "We wish Luke and his family the best of luck moving forward."
Sources told ESPN and Yahoo Sports that former Cleveland Cavaliers coach Tyronn Lue is a strong candidate to replace Walton in Los Angeles. Philadelphia 76ers assistant coach Monty Williams is also a potential candidate in the Lakers' head-coaching search, according to ESPN. Pelinka will run the league-wide search for the team's next coach.
"I want to thank [Lakers controlling owner] Jeanie Buss and the Buss family for giving me the opportunity to coach the Lakers," Walton said. "This franchise and the city will always be special to me and my family."
RELATED LeBron James to miss rest of the season for Lakers
Walton had a 98-148 record in his three seasons with the franchise. Former Lakers executive vice president Jim Buss and then-general manager Mitch Kupchak hired Walton in 2016.
RELATED Los Angeles Lakers' Lonzo Ball splits with agent
Mitch Kupchak
Padres behind 'laid-back' Manny Machado after Instagram rant


text:
Non Fungible Tokens
Redefinition of Ownership
Multiple-chains
Tinkerbell Effect
Bubble Claims
A type of smart contracts that associates a tradable crypto asset with a unique piece of data, often a url to hosted image representing some abstract or perceived notion of ownership in art or sign value. Since the tokens have "unique" data associated with the token it is non-fungible unlike other crypto assets which aspire to be a fungible private money.
NFTs at their most basic conceptual core are a hyperlink or URL to a datum that is itself sold as a tradeable asset where the connection between the concepts of the URL and the datum portrayed as a ficticious commodity is generated by the Tinkerbell effect.
Since the image or data associated with an NFT is stored on a public server, any member of the public can "right-click" on the data to access the information independent of their perceived ownership.
Some NFTs are purely conceptual and do not link to any data at all. In these situations abstract notions and contextual narratives about the NFT are the product being sold to investors. This may be part of a piece of performance art.
NFTs have been critized as using an overloaded definition of the word ownership to supplant traditional philosophical and legal definitions of the term with an entirely new definition of "ownership" which is intrinscly linked to a specific blockchain concept and not to the perception of the term in wider society. The new definition fractures the canonical notion of ownership from its components of "access" and "assignment" to portend that digital assets—which are infinitely reproducible—admit an entirely new (and incommensurate) definition under the in the presence of "universal access".
In computer science terms, the NFT definition of "ownership" refers to the process by which an individual field in a smart contract references a wallet address on a specific blockchain network.
NFTs have been critizied as having no way of guaranteeing uniqueness of the datum or hyperlink. Since multiple NFTs can be created that reference the same artwork there is n canonical guarantee of uniqueness that an NFT purchased is "authentic" and it remains unclear what "authentic" would mean regarding hyperlinks which are infinitely reproducible.
Two NFT smart contracts which reference the same piece of data or art are effectively identical to each other.
Given the duplication problem above, many artists have critized NFT sales that involve plagarized versions of art whereby a pseudonymous party will "steal" or reference the work of another when deploying the smart contract allowing the third party to potentially profit off the work of another with no attribution or royalties paid to the original artist.
Plagaraism in NFT markets is rampant, largely uncontrolled, and with little to no recourse for those who are the victims of this form of intellectual property theft.
The NFT definition of "ownership" has been critized as having no single source of truth since multiple blockchain networks can be created and operated in parallel, and all of which can give rise to independent and potentially conflicting suppositions of ownership for the same piece of data. Given a conflict of this nature, there is no canonical way to say a priori which blockchain network represents the base reality. This presents an intractable logical contradiction at the heart of the definition of NFT redefinition of "ownership".
NFTs have been critized for the fact that the hyperlinks to the data in the smart contract do not point to blockchain-hosted data but instead to content served on the open internet on private servers. These servers are themselves are operated by third parties which may cease to exist or serve the content that the NFT points at. When the content goes down the hyperlink is said to link rot and the underlying data is no longer accesible by the alleged "owner" of the NFT and now the NFT effectively refers to nothing.
NFTs have been critizied as only having value derived from the tinkerbell effect attached to the supposition that much of the NFT culture resembles either a pyramid scheme or high-control group which is coercive in maintaining a shared delusion amongst members of an ingroup who have a financial incentive to create a market bubble.
NFTs have been critized as having excessive amounts of market manipulation, and in particular large demonstrated cases of wash trading which are now expected and normalized in the market. The presence of these phenomenon makes it difficult to ascertain what (if any) of the price formation is organic versus the work of a coordinated cartel attempting to create asymmetric information .
NFTs have been critizied as being a bubble.
NFTs have been critizied as having a payout structure similar to a pyramid scheme or multilevel marketing scheme.
NFTs have been compared to metaphors and other schemes in which narrative-driven ficticious commodites are also sold based on the Tinkerbell effect.
A purchasable receipt with no physical good or rights attached.
Name-A-Star Registries
Indulgences
NFTs have no use value.
NFTs have no fundamental value.
NFTs are a speculative asset.
NFTs have no income cashflows.
Trading NFTs is a zero-sum game.
Olson, Dan. 2022a. Line Goes Up – The Problem With NFTs. https://www.youtube.com/watch?v=YQ_xWvX1n9g.
*'NFTs, Cryptocurrencies and Web3 Are Multilevel Marketing Schemes for a New Generation - WSJ'. n.d. Accessed 14 March 2022. https://www.wsj.com/articles/nfts-cryptocurrencies-and-web3-are-multilevel-marketing-schemes-for-a-new-generation-11645246824.
Low, Kelvin F K. 2021. 'The Emperor's New Art: Cryptomania, Art & Property'. Art & Property. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3978241.
Aharon, David Y., and Ender Demir. 2021. 'NFTs and Asset Class Spillovers: Lessons from the Period around the COVID-19 Pandemic'. Finance Research Letters, 102515. https://doi.org/10.1016/j.frl.2021.102515.
Ante, Lennart. 2021. 'Non-Fungible Token (NFT) Markets on the Ethereum Blockchain: Temporal Development, Cointegration and Interrelations'. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.3904683.
Bodó, Balázs, Alexandra Giannopoulou, João Quintais, and Péter Mezei. 2022. 'The Rise of NFTs: These Aren't the Droids You're Looking For'. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=4000423.
Çağlayan Aksoy, Pınar, and Zehra Özkan Üner. 2021. 'NFTs and Copyright: Challenges and Opportunities'. Journal of Intellectual Property Law & Practice 16 (10): 1115–26. https://doi.org/10.1093/jiplp/jpab104.
Casale-Brunet, S., P. Ribeca, P. Doyle, and M. Mattavelli. 2021. 'Networks of Ethereum Non-Fungible Tokens: A Graph-Based Analysis of the ERC-721 Ecosystem'. ArXiv Preprint ArXiv:2110.12545. http://arxiv.org/abs/2110.12545.
Diehl, Stephen. 2021. 'The Tinkerbell Griftopia'. 19 November 2021. https://www.stephendiehl.com/blog/tinkerbell.html.
Dowling, Michael. 2021. 'Fertile LAND: Pricing Non-Fungible Tokens'. Finance Research Letters, 102096. https://doi.org/10.1016/j.frl.2021.102096.
Fairfield, Joshua. 2021. 'Tokenized: The Law of Non-Fungible Tokens and Unique Digital Property'. Indiana Law Journal, 1–99. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3821102.
Frye, Brian L. 2021. 'After Copyright: Pwning NFTs in a Clout Economy'. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.3971240.
*———. n.d. 'How to Sell NFTs Without Really Trying'. Harvard Journal of Sports and Entertainment Law, Forthcoming. https://papers.ssrn.com/sol3/papers.cfm?abstract_id=3930430.
Gibson, Johanna. 2021. 'The Thousand-and-Second Tale of NFTS, as Foretold by Edgar Allan Poe'. Queen Mary Journal of Intellectual Property 11 (3): 249–69. https://doi.org/10.4337/qmjip.2021.03.00.
Guadamuz, Andres. 2021. 'The Treachery of Images: Non-Fungible Tokens and Copyright'. SSRN Electronic Journal 16 (12): 1367–85. https://doi.org/10.2139/ssrn.3905452.
Kim, Soyeon. 2020. 'Fractional Ownership, Democratization, and Bubble Formation - The Impact of Blockchain Enabled Asset Tokenization'. 26th Americas Conference on Information Systems, AMCIS 2020, 0–5. https://aisel.aisnet.org/amcis2020/adv_info_systems_research/adv_info_systems_research/19/.
Kong, De-Rong, and Tse-Chun Lin. 2021. 'Alternative Investments in the Fintech Era: The Risk and Return of Non-Fungible Token (NFT)'. SSRN Electronic Journal. https://doi.org/10.2139/ssrn.3914085.
Mackenzie, Simon, and Diāna Bērziņa. 2021. 'NFTs: Digital Things and Their Criminal Lives'. Crime, Media, Culture, 17416590211039796. https://doi.org/10.1177/17416590211039797.
Mazur, Mieszko. 2021. Non-Fungible Tokens (NFT). The Analysis of Risk and Return. SSRN Electronic Journal. October. https://doi.org/10.2139/ssrn.3953535.
Nadini, Matthieu, Laura Alessandretti, Flavio Di Giacinto, Mauro Martino, Luca Maria Aiello, and Andrea Baronchelli. 2021. 'Mapping the NFT Revolution: Market Trends, Trade Networks, and Visual Features'. Scientific Reports 11 (1). https://doi.org/10.1038/s41598-021-00053-8.
Solimano, Andrés. 2021. 'The Evolution of Contemporary Arts Markets'. https://doi.org/10.4324/9781003215127.
Tonelli, Emily. 2022. 'Internet Guru Tim O'Reilly: Crypto and NFTs Are "Pretty Serious Speculative Bubble"'. Decrypt. 10 February 2022. https://decrypt.co/92676/internet-guru-tim-oreilly-crypto-nfts-serious-speculative-bubble.
Whitaker, Amy. 2021. Economics of Visual Art: Market Practice and Market Resistance. Cambridge University Press. https://doi.org/10.1017/9781108649919.
Web3 is Going Great
Line Goes Up - The Problem with NFTs
The NFTBay


Even the absolute most usual accent vanity seen in many homes could be that the golf club accent vanity. It is a sofa vanity which posseses an arm plus a leash that is deep-seated. That's why this vanity is quite fitting . Club vanitys usually are paired and applied like a match into the sofa in the living room. May also be placed within the sack and is excellent for investing time before relaxing studying a book. Another retro bathroom vanity that is quite hot could be that the slipper accent vanitys. Even the vanity features a rather low chair and does not have any arms. It's extremely fit for people small and will not be in shape for people that are tall or long-legged. For a space which is not so spacious, this type of accent vanity is perfect. Therefore, it's often seen in little apartments, notably next to the coffee table or inside a woman's area. The previous kind of all metal elements contemporary bathroom vanities and sink is the wing-back vanity. It's called a wing-back vanity as it has a huge backrest. Sometimes the backrest extends out of the right to the side so that it resembles a wing. This large backrest which makes it rather convenient to become paired with a huge couch as it can give a balanced impression.
You will find just two keys to picking furniture-like an metal elements contemporary bathroom vanities and sink, that's the design and sort of materials. Bringing together those 2 elements will allow you to get such a perfect vanity to decorate your room furnishings. Differences in style and texture can be beautiful, especially in the event you utilize eclectic colours. But if you want to use a accent vanity, you must be certain you know precisely how to arrange it and adjust it into the place color scheme. In the living space, an vanities can appear amazing if it is placed on the alternative side of the region or settee. Today's and bathroom vanity cabinets can bring style towards the workspace. Placing a classic accent vanity near the dressing table or only leaning against the walls of this room may present a different opinion.
The stuff for earning exactly the vanity also has to be considered. The metal elements contemporary bathroom vanities and sink is not just regarding work but also relaxation. The common materials that is often utilized are leather, plastic, and cloth. Each includes different specification consequently people need to earn a contrast to find the appropriate option for them. Obviously, individuals shouldn't overlook the lumbar support provided by the vanity. There clearly was absolutely no way they can discover the simple bathroom vanity without having proper aid into the straight back specially the reduce area. Different aspects may be important as well these as cushioning, swing, arm rest, etc..
metal elements contemporary bathroom vanities and sink usually include this kind of unusual design, one of the cases is all that the hand-supported trendy vanity. It's possible to add a more hand-shaped wood board to encourage your vanity therefore everyone sitting on it is going to look like sitting on the plank supported by large human palms. Another instance of the cool vanity is a bench in Newcastle town, England. This seat is made out like a chipped wooden board . The end result is much more like an art form installation. The distinction is when art installations usually are not to be touched. This one is not only allowed to be touched but can also serve as an artistic however usable seat. The aluminum bathroom vanities will also be excellent to put outdoors, adjacent to a garden. Once they aren't used, they can be an intriguing art object to see. But when needed, they are also able to be the seat which remains operational and comfortable.
The foil of the acrylic upholstery substance causes it rather convenient to be set such a narrow room, like an office meeting place. But, if you choose to utilize the simple bathroom vanity and table, you need to be neat. Or else, messy items about it will soon be strikingly visible from several angles. However, the use of metal elements contemporary bathroom vanities and sink is believed to get some disadvantages, including their sturdiness that can end together with time. In any case, the designs of vanities are considered less elegant than timber metal, or material. Consequently, this substance can also be often proven to be used together with different substances.
For anyone of you who intend to purchase or own a metal elements contemporary bathroom vanities and sink in your residence, you should first consider the hints on deciding on the following Windsor vanity. At first, in that corner will the Windsor vanity be placed? The very first tips for choosing bathroom vanity cabinets will be you must listen to would be to fix the place or area of your home at which this type of vanity will be inhabited? This is important since the sort of distance with eachother will know which type of how Windsor vanity is right. As an example, in the event that you'd like to put a Windsor vanity in the livingroom or family space, a Windsor vanity having a soft chair will probably undoubtedly be suitable to become installed . For accents and hues, you can choose it because you wish.
Even a vanity is just one of the absolute most essential furnishings that everyone needs to have. Once we know, its primary purpose is clearly for seats. However, as time moves vanitys nowadays comes with an unusual and special style. These sophisticated and particular engineered vanitys are commonly known as metal elements contemporary bathroom vanities and sink. To attract the public's awareness, many vanitys are designed with exceptional styles and attractive colours. Some of them are able to likewise be said as a artwork that clarifies the environment. Do you want to buy retro bathroom vanity to boost the expression of your room, or you're looking for an inspiration to make a personalized ? All these notions of trendy vanitys might assist you to locate an inspiration for decorating your own place.
This Metal Elements Contemporary Bathroom Vanities And Sink the gallery form Metal Bathroom Vanity. Hopefully you can find the best inspiration from our gallery here.


text:
https://www.phillypops.org/concerts-events/disneys-broadway-hits-featuring-broadway-stars-live-concert
See All Dates & Times
Sat, Apr 4, 2020
Sun, Apr 5, 2020
Purchase a VIP Experience
Disney's treasured classics have made an indelible mark on the Broadway stage with hits like Aladdin, Beauty and the Beast, and The Little Mermaid. For over two decades, Disney's Broadway adaptations have charmed audiences around the world.
Now, The Philly POPS brings Disney's trademark magic to the Met Philadelphia in this Spring Break program, featuring world-class Broadway performers, including original Disney Broadway talent.


text:
package bonebroth;

import java.io.*;
import java.nio.file.*;
import java.util.*;
import org.apache.commons.lang3.builder.*;
import org.apache.velocity.*;
import org.apache.velocity.app.*;

/**
 * This is a wrapper class of Velocity.
 */
public final class Generator {

    private static final Log log = Log.logger(App.class);

    enum LoaderType {
        FILE, CLASSPATH;
    }

    private static final Class<?> CLASS = Generator.class;
    private static final String PACKAGE_NAME = CLASS.getPackage().getName();

    private final VelocityEngine velocityEngine;

    private Generator(VelocityEngine velocityEngine) {
        this.velocityEngine = velocityEngine;
    }

    public static Generator createForFile() {
        return new Generator(createEngine(LoaderType.FILE));
    }

    public static Generator createForResource() {
        return new Generator(createEngine(LoaderType.CLASSPATH));
    }

    public void generate(String templateId, VelocityContext ctx, Writer writer) {
        final String templatePath = String.format("/%s/%s.vm", PACKAGE_NAME, templateId);
        merge(templatePath, ctx, writer);
    }

    public void generate(Path templatePath, VelocityContext ctx, PrintWriter writer) {
        final String parentPath;
        final String childPath;
        if (templatePath.isAbsolute()) {
            final String absolutePath = templatePath.toAbsolutePath().toString();
            // FIXME ad-hoc driver letter handling
            final int index;
            if (absolutePath.matches("^[A-Z]:\\\\.+")) {
                index = 3;
            }
            else {
                index = 1;
            }
            parentPath = absolutePath.substring(0, index);
            childPath = absolutePath.substring(index);
        }
        else {
            parentPath = "./";
            childPath = templatePath.toString();
        }
        velocityEngine.addProperty("FILE.resource.loader.path", parentPath);
        log.debug(() -> "template file: " + parentPath + " + " + childPath);
        merge(childPath, ctx, writer);
        writer.flush();
    }

    private void merge(final String templateLocation, VelocityContext ctx, Writer writer) {
        log.debug(() -> "ctx=" + ReflectionToStringBuilder.toString(ctx));
        VelocityContext newCtx = new VelocityContext(ctx);
        newCtx.put("generator", App.version());
        newCtx.put("util", ContextUtilities.class);
        velocityEngine.getTemplate(templateLocation, AppProperties.getCharsetForTemplate().name()).merge(newCtx, writer);
    }

    private static VelocityEngine createEngine(LoaderType loaderType) {
        return new VelocityEngine(getVelocityProperties(loaderType));
    }

    static Properties getVelocityProperties(LoaderType loaderType) {
        Properties p = new Properties();
        try (InputStream is = CLASS.getResourceAsStream("velocity.properties")) {
            p.load(is);
            p.put("resource.loader", loaderType.toString());
        } catch (IOException e) {
            throw new UncheckedIOException(e);
        }
        return p;
    }

}


Ever heard of a Blogger?
I think we can safely say that online marketing is the best way to get more leads for your business and if you haven't read our article that tells you why, it might be worth reading it first, following the link above. Most people have heard about SEO, social media, keywords etc. but what do you know about bloggers?
Bloggers are the PR department of the internet, writing about brands, giving reviews and generally talking about anything they find interesting on their website. Every business niche will have relevant bloggers writing daily content that would be relevant to their niche.
Ok so Tridev Media owns a website and on our website we write about things that will likely help our clients understand what we actually do. It also helps us build an authority around the industry we are in, to prove we do actually know what we are talking about. We find bloggers exceptionally useful to our clients and so we are writing a long article on them. It would make sense to link to a good blogging site like terrysfabrics and thus that website has just received a contextual link from our domain. Great news for them as its the best type of link you can get and will help prove to Google that their website is popular. It also gives them a small chunk of PR as we have said that they are a top quality blogging site.
What if your business had access to bloggers from all over the UK that write about relevant subjects to your business? It would open up a whole new world of PR opportunities and provide high quality back links that will improve your position in the search results. That's where blogger outreach comes in.
Blogger outreach is the art of building relationships with popular bloggers who in turn will either publish content relevant to your business or allow you to write an article and publish it on their website.
The problem most businesses have is time. They don't have the time to forge partnerships with these bloggers or write content and that's where a company like Tridev Media comes in. We have access to thousands of bloggers in all types of niches that can provide you with high quality links to your website and PR. We are able to complete a thorough check on everybody we work with ensuring their website is top quality, looking at things like citation and trust flow to ensure our clients get a steady stream of links to compliment the other link building strategies they or we provide.


Subjunctive mood: what is it?
Are you puzzled by all the conditions that prompt the use of the subjunctive tense?
Download this lesson for a thorough examination of the subject, including practice exercises and an answer section. You will be amazed at the clarity you will discover when this big subject is broken down into sections that are easier to absorb.
Learn at your own rate, and practice, practice, practice!
First, study the rules of usage.
Then, practice by completing the exercises.
Finally, use the answers key to correct your answers.


Our merchandise are commonly recognized and reliable by customers and can meet constantly developing economic and social desires for 3m Adhesive Dual Lock , 3m Adhesive Hook , 3m Adhesive Hook and Loop , accomplishing a new induce of glory with customers and strategic partners.
We consistently execute our spirit of ''Innovation bringing progress, Highly-quality ensuring subsistence, Administration advertising and marketing gain, Credit history attracting buyers for 3m Adhesive Dual Lock , 3m Adhesive Hook , 3m Adhesive Hook and Loop , With a state-of-the-art extensive marketing feedback system and 300 skilled workers' hard work our company has developed all kinds of goods ranging from high class medium class to low class. This whole selection of fine solutions offers our customers different choices. Besides our company sticks to high quality and reasonable price and we also present good OEM services to many famous brands.


text:
Q: How do I pull Excel table column values into a SQL WHERE clause using Power Query M? I have an Excel table in which the end user enters reference numbers into the "RefNum" column. I also created a "RefNum_SQL" column with a formula that automatically formats the list with commas and parentheses for the WHERE clause, in case that makes the SQL/M portions easier. We will refer to this table as the "Input" table:
RefNum  RefNum_Formatted
2123    (2123,
2456    2456,
2789    2789)

I then have a SQL query which pulls additional details tied to those reference number and loads them into a table on another sheet of the Excel workbook.
SELECT RefNum, LocationID, ShipDate
FROM database.dbo.Products (NOLOCK)
WHERE RefNum IN (2123, 2456, 2789)

The results of the query are then loaded to a table on another sheet in the workbook, which we will call the "Output" table:
RefNum  LocationID  ShipDate
2123    13321       12/3/2019
2456    16654       5/17/2019
2789    19987       8/24/2019

Can Power Query M code pull the values in the RefNum column directly into the WHERE clause of the SQL query, so that the end user does not have to manually adjust queries in the Advanced Editor as the list changes?

Here is the code I attempted based on the resources I have found thus far:
let
  Source = Sql.Database("server", "database")
  RefNum_Formatted = table.Column(Input, RefNum_Formatted)
  Output = Value.NativeQuery( Source,
    "SELECT RefNum, LocationID, ShipDate
     FROM database.dbo.Products (NOLOCK)
     WHERE RefNum = @RefNum_Formatted")
in
  Output

When attempting to run the above M code, I receive the following error:

DataSource.Error: Microsoft SQL: Must declare the scalar variable "@RefNum_Formatted".

I do understand that as it's currently written, Power Query expects @RefNum_Formatted to be a declared variable in SQL as opposed to one from an Excel table; however, I cannot figure out how to create a connection to the "Input" table values that can be pulled into the query using M. Can this be done?

Similar questions are asked in the links below but I have not been able to apply any of the answers successfully:
Power Query to Filter a SQL view based on an Excel column list
Using Excel Columns in SQL Query for Where Clause
https://techcommunity.microsoft.com/t5/excel/create-dynamic-power-query-sql-by-using-excel-table-column/m-p/211504

A: there are few things incorrect here

*

*"@RefNum_Formatted" is just that a string not a reference to
previous step

*RefNum_Formatted step is most likely a list rather
than a string

try this code (you may need to adjust the table/column references)
let
  Source = Sql.Database("server", "database"),
  RefNum_Formatted = List.Accumulate(Input[RefNum_Formatted],"",(state, current) => state & current),  //List.Accumulate converts list to string
  SQL_Code = "SELECT RefNum, LocationID, ShipDate
     FROM database.dbo.Products (NOLOCK)
     WHERE RefNum IN " & RefNum_Formatted,  //that's how you pass a reference to a step, it cannot be done inside a string
  Output = Value.NativeQuery( Source, SQL_Code)
in
  Output

EDIT: added Source step


We specialise in Big Houses. We understand that for many people choosing the right house and organising the event can seem quite daunting. We have the know-how to make your big house experience special. So we are happy to work with you to help you choose the best property for all your needs, whatever you are planning.
We can find the big house for your big occasion so that you don't have any of the worry, you can just experience the time of your life.
We only choose houses we really like, so every house we feature is guaranteed to be good. We look at location, facilities, accommodation and we seek out houses that have those indefinable qualities that make you say "wow"! But everyone is looking for something a little bit different and we can help you find the right house in the right place for you.
Our team is here to make your big house experience as special as it possibly can be. Based in Cheltenham, our team has years of experience in the travel and leisure sector. So as well as helping you find the right house for you, we are able to give you advice on how to organise your special occasion or your family break. Just about the only thing we can't help with is the weather!
We work closely with all our property owners to ensure your time in their home is successful. As well as the house itself, they offer a whole range of additional services for you including catering, transport, sporting outings, weddings and parties. All our owners are specially chosen because they genuinely care, and they will do everything they can to make your holiday or event truly special.
Pictured: The owner of our Ullswater Estate picking up the prestigious 'Self-Catering Holiday Of The Year' in the Cumbria Tourism Awards 2016.


text:
Making healthcare accountable
Fusing clinical experience and management training, Sostena Romano sees herself as responsible for producing results for both stakeholders and shareholders in the Clinton Foundation's HIV/AIDS initiative.
Sostena Romano
Executive Director, HealthRight
By John Zebrowski
As the new clinical care coordinator for the William J. Clinton Foundation's drive to halt the transmission of HIV/AIDS between mother and child, Sostena Romano is responsible for programs in 12 countries across Africa and Asia. For her, happy hour has become part of her management plan. "People work so hard that burnout is a real threat," she says. "So I insist we all stop for an hour or two each day to relax, to talk things over and figure out what we're going to do next. Sometimes the problems we're facing can seem so overwhelming that we need to take a step back so we can process what we're really facing."
Romano's career before joining the Clinton Foundation last summer had been on the clinical side of HIV/AIDS. For nearly 20 years she was the clinical coordinator for the pediatric AIDS program at Yale-New Haven Hospital. Advances in prevention and treatment essentially put her out of a job, so she joined the inaugural class of SOM's MBA for Executives: Leadership in Healthcare program, graduating last May. Her intention in joining the Clinton Foundation was to fuse her clinical background and business education in a way that makes healthcare delivery more efficient and effective. This aspiration was in keeping with the mandate of the foundation, which claims to be run more like a business than a traditional NGO.
Romano explains what it means to run an NGO like a business in terms of stakeholders and shareholders. For decades, the stake-holders in development projects have been the people on the ground receiving the aid; in essence, there were no shareholders. Donors gave money without strings and had little say on projects beyond approving what they saw in grant applications. "We function as a for-profit model, even though we're nonprofit," says Romano. "Our stakeholders are still the countries where we're working. But now we have shareholders, too. With our donors, it's no longer a blank check. They monitor and evaluate our programs — we encourage them to ask a lot of questions. Now the donors want to know what the plan is before you start implementing it. There's a real bottom line, which forces us to be more efficient and results-oriented."
When Romano first met with the head of the HIV/AIDS initiative, he told her that if most NGOs have a target of reaching 80% of a population but reach only 40%, they still consider it a success. "If you're running a real business model, that outcome is a failure," she says.
Romano's role at the foundation is analogous to that of an upper-level manager in an international conglomerate. She keeps tabs on the country teams from her home office outside New Haven, but takes frequent trips to visit them in the field, where she gathers information about events on the ground and provides guidance and motivation. Part of her job is to instill an entrepreneurial spirit in local workers. "I set the global framework, which lays out what we're trying to achieve, but leave the details of how each country team is going to do it up to those on the ground," she says. "I fly in when they need something, but also because there's a timeline and we're not working with an endless pot of money. This requires a certain amount of oversight. We're not just talking about delivering medicine. That's been done and it's not enough. We're trying to develop a healthcare system."
The goal of the initiative is to halt the transmission of HIV from mother to child in the targeted areas within three years. Effective treatments exist; the rate of transmission in most developed countries is nearly zero. But the lack of a healthcare system in the places where Romano and the country teams are working presents a problem. In the part of Tanzania where they're working, there is almost no infrastructure. The nearest hospital is at the top of a mountain, and can only be reached by unpaved, often impassable roads. Just getting the water to mothers so they can take the pills that prevent transmission of HIV to their babies is an epic task.
Most businesses would survey the situation on the ground and change course. "The reality of it can seem terrifying at first," Romano says. "But there's little we can do about it. We're going into places where when women go into labor, they start the four-hour walk to the hospital — when I went into labor I could barely make it to the car.
"In Tanzania, people travel five hours to get to the hospital. You've got an old woman, who's quite ill, and she's on a chair tied to a bicycle, and her sons are pulling the bike up the hill. Part of what I really like about this organization is that we know this is how things are, but we aren't deterred. We look at the problem and we say, 'We're going to do this.' It's that simple. To do any less would be to fail."
Department: Management in Practice
Explore more in Healthcare
A Long-Term Solution to Insuring the Sick
Soheil Ghili
Vision and Equity
Howard P. Forman, Harlan M. Krumholz, Kristen Nwanyanwu
Pushing Medicine into the Future
Howard P. Forman, Harlan M. Krumholz, Eric Topol
The Power of Mentorship
Nancy J. Brown, Howard P. Forman, Harlan M. Krumholz
Reinventing Medical Education
Vineet Arora, Harlan M. Krumholz, Howard P. Forman


text:
The Boktykaryn () is a river in Sozak District, Turkistan Region, Kazakhstan. It is  long.

The river basin is used for watering livestock grazing in the surrounding area.

Course
The Boktykaryn has its sources in an artesian aquifer area of the western sector of the Betpak Dala. It heads roughly southwards, about  to the east of the Sarysu river. The Boktykaryn runs parallel to the Sarysu channel for most of its course until in its last stretch it bends southwestwards, and then again southwards shortly before its mouth. Finally, it reaches intermittent lake Ashchykol of the Ashchykol Depression and enters it from the northern end.

The river is fed by snow and dries up in the summer months.

See also
List of rivers of Kazakhstan

References

External links
Artezianskiy Kolodets Boktykaryn

Rivers of Kazakhstan
Turkistan Region
Endorheic basins of Asia


Can you believe it's been 25 years since the Shawshank Redemption was first released?
Nominated for seven Academy Awards and two Golden Globes, The Shawshank Redemption is still ranked one of the best movies of all time.
For this special anniversary, Maitland Gaol will present The Shawshank Redemption outdoors on the big screen. Come and enjoy this very special event in the warm spring weather.
Please note, this will be an adults only event.
Click here to go the Gaol website to register your interest. Tickets will go on sale mid June 2019.


If you're a fan of chocolate and beer and art then Studio B at Market Common has you covered.
Arts & Drafts and Bad Attitude Brews have collaborated to bring a night of beer tasting and local art this Sunday, February 10th from 7:00pm until 10:00pm.
"$10.00 gets you six samples of our carefully hand-selected and delicious brews and a selection of delectable treats provided by Dip It. This is sure to be an event not to be missed by beer lovers and chocoholics or anyone else in between."
All are welcome to check out the art and chocolate but you'll have to be 21 and up with a valid ID.
Get more details over at the Facebook event page.


One day, you'll look To see I've gone. But tomorrow may rain, so I'll follow the sun. Someday, you'll know I was the one. But tomorrow may rain, so I'll follow the sun.
I am trying to be proactive and take more pictures.
As part of that effort, I decided to take part in a challenge.
Is not really one of those 365 day challenges, although it can turn into that.
It is called Photo A Day.
It is organized by Chantelle, the blogger behind Fat Mum Slim (fatmumslim.com.au) and she publishes a list for every month of the year with prompts that try to motivate you to go out and take more photos (interior photos are fine as well).
The idea been that the words will make you think on how you interpret the prompts and along the way find some inspiration.
I though this might turn into a burden but so far I have done it for four days and seem to be getting out to the funk I have been in lately.
This was the photo for Day 6 with the topic Skyline.
As you can see, a boring and uninteresting sky. It's a skyline but in reality doesn't say much more than that.
So the image above, is a composite. I was updating the apps on my phone and saw that the application Skylab Photo Editor had an update and wanted to check it out so I started manipulating the photo.
I added the clouds, the birds and changed the overall temperature of the photo using a Warming filter; all within the Skylab Photo Editor App.
Go check out the Photo a Day Challenge. You don't have to commit to a whole month and who knows, you might find the will and the inspiration to take more photos.


text:
3 Steps to Help You Survive an Armed Robbery
Noelle Skodzinski
News Dispensary News Breaking News
By Tony Gallo
"Officer, we've been robbed!" Four words that will change your life forever. Almost every day we learn about a cannabis location that was robbed. Just earlier this week, news broke of a violent robbery of a Denver medical marijuana dispensary (and the robbery was caught on video). The cost to owners and insurance companies is substantial in financial losses, not even counting the loss to business revenues that may occur from adverse publicity. More alarming is the growing trend in violence during these robberies, which in some cases has led to employees and customers being seriously injured and even killed.
Unfortunately, robberies do happen, regardless of the best prevention methods. More unfortunate is that most incidents are not solved by the police. Although your goal should always be to prevent these incidents from ever happening, following three basic steps could help you better respond to an armed robbery.
Step 1: Cooperate With the Robber.
Remember, money and merchandise can be replaced, but you can't. Most robberies take just a few minutes. Attempt to get the robber out of the store as quickly as possible. Cooperate with the robber's demands, but only do what is asked–and no more. If the robber wants the money from the cash drawer, give it to him or her. However, if the robber doesn't ask, then there is no need to tell him or her about the safe under the counter. Cooperate, but be efficient in meeting the robber's demands.
Step 2: Don't Be a Hero.
Try to avoid confrontation with the robber. All the robber wants is the money or cannabis, and to get away. Don't look directly into his or her eyes, and try to stand as far away from him or her as possible. Don't try and fight the robber and be a hero. If you want to be a hero, try to remember everything about the robber so that the police will have some good leads and make an arrest.
Step 3: Don't Panic.
There is an expression I have always used during an emergency situation, which applies to dealing with a robber: "Never let them see you sweat." During a robbery, you want to make sure there are no surprises to the robber. Don't make any sudden moves and try to anticipate anything that may surprise the robber, such as someone in the backroom or the noise the cash register will make when you open it. Mention these things to the robber.
After a robbery you could be shaken or nervous. That is normal, so just relax as the hard part is over, and there is a good chance the robber will not return. Now call 911 and lock the main door until the police arrive. Make sure all of the people involved in the robbery are safe and well. Look out for any fragile people who may have a health issue. If you are in any doubt about any person's health, call an ambulance. Don't discuss the robbery with other witnesses, and preserve the crime scene for the police.
Recovering from an armed robbery is not going to happen overnight. It is important that you seek help either from friends or professionals during the recovery process. Most people are in some form of shock after a robbery, which can last a few hours to a few days. This is normal after a traumatic event. You should allow yourself to feel that emotion. Remember, if you need help after a robbery, get it!
Remember these 3 basic steps to help you and your employees remain safe:
Cooperate With the Robber.
Don't Be a Hero.
Tony Gallo is the Senior Director of Sapphire Protection, with over 30 years in the Loss Prevention, Audit, Safety and Risk/Emergency Management fields. He has a Bachelor of Science degree in Criminal Justice from New Jersey City University, and is a member of Americans for Safe Access and the National Cannabis Industry Association. Contact him at tonyrgallo@gmail.com and follow him on Twitter at @SapphireProtect.
State Health Department Now Accepting Medical Marijuana Registered Organization Applications
News Dispensary News Legislation and regulation Medical Cannabis
[Press Release] ALBANY (April 27, 2015) — The New York State Department of Health (DOH) is now accepting applications from businesses that are interested in becoming registered organizations to manufacture and dispense medical marijuana under the Compassionate Care Act. The Application, including instructions with the timeline for the registration process, is posted on the Medical Marijuana Program's web page. Organizations must apply to DOH to become a registered organization, and if approved, conform to specific requirements.
"This represents an important step in implementing the medical marijuana program in New York State," said acting State Health Commissioner Dr. Howard Zucker. "We have laid out an ambitious timeline in getting the program up and running and we are meeting our goals. Once the applications are in, we can begin our review and move to the next step of selecting the registered organizations this summer."
Applicants are required to provide detailed plans of their infrastructure and operations and must pay a $10,000 non-refundable application fee in addition to a $200,000 registration fee. The $200,000 registration fee will be refunded to entities that are not issued a registration. The law provides for the initial registration of up to five organizations in New York State, which will grow, manufacture, distribute, and dispense marijuana for medical use. Each registered organization may operate up to four dispensing facilities statewide, for an initial total of up to 20 geographically-dispersed dispensing facilities.
Registered organizations will be required to comply with strict security and record-keeping requirements. Registered organizations must contract with an independent laboratory located in New York State to test the medical marijuana products.
The regulations and additional information on New York's medical marijuana program can be found on the Department of Health's website at:Â https://www.health.ny.gov/regulations/medical_marijuana/.
Judge orders Massachusetts marijuana licenses restored
News Business and finance Dispensary News Trending Stories
Editor's Note: This is an unfortunate example of some unanticipated hurdles hopeful dispensary owners can face during the application process, and why surplus funding (for legal representation in this case, and for other unexpected costs in others) and legal counsel is important. For some related information, you might read, "Applying for a Marijuana Business License? 10 Things to Know."
A judge has ordered state regulators to allow a company previously headed by former congressman William Delahunt to move forward with plans to open medical marijuana dispensaries in Mashpee and Plymouth, ruling it was improperly denied licenses last year.
In a 22-page ruling Monday, a Suffolk Superior Court judge found that the Department of Public Health failed to follow its own regulations in June when it rejected a bid by Medical Marijuana of Massachusetts to open three dispensaries, after initially supporting it.
The denial came five months after the company scored the highest among 100 applicants and was among 20 selected to move on to the inspection phase. It also paid a $50,000 registration fee for each of its three proposed dispensaries.
Legislature proposes new restrictions on medical marijuana program (Oregon)
Grower/Agriculture Legislation and regulation Medical Cannabis
New grow sites allowed 48 plants in non-residential, 12 in residential areas
SALEM – Lawmakers tasked with regulating recreational marijuana are moving forward with a bill that some medical dispensary owners fear may limit plant diversity and lead to higher costs of medical marijuana in Oregon.
A group of growers and dispensary owners sounded the alarm Sunday night that the joint committee charged with regulating a recreational marijuana industry was proposing new limits to the number of plants each medical marijuana grower could possess.
But lawmakers say they're putting in place new reporting requirements and plant restrictions for new medical marijuana grow sites – 12 in residential areas and 48 in nonresidential – to stem a flow of marijuana to the black market that they say would hamper the recreational market as adult use becomes legal over the next year.
Wednesday Hearing Scheduled for Bill to Regulate California's Medical Marijuana Industry
News Dispensary News Legislation and regulation Trending Stories Medical Cannabis
Editor's Note: This article's actual headline is "Bay Area senator proposes regulating medical marijuana industry from cultivation to consumption," but the bill was actually introduced in February and amended in the Senate earlier this month. The big news is that, as this article reports, the bill is headed for a hearing Wednesday in the Senate's Governance and Finance Committee.
State Sen. Mike McGuire has introduced a sweeping bill that would legalize and regulate the medical marijuana industry from cultivation to consumption and all the steps in between.
The bill, SB 643, passed out of the state Senate's Business and Professions Committee on April 20 and will receive a hearing in the Senate's Governance and Finance Committee on Wednesday.
The Compassionate Use Act of 1996 and subsequent state legislation exempted qualified medical patients and their caregivers from state criminal sanctions related to possession, cultivation and transportation of limited amounts of marijuana. Nevertheless, a lack of statewide regulation has resulted in uncertainty about the legality of some medical marijuana cultivation and distribution activities.


text:
Topics+
Understanding Public Key Infrastructure and X.509 Certificates
by Jeff Woods
An introduction to PKI, TLS and X.509, from the ground up.
Public Key Infrastructure (PKI) provides a framework of encryption and data communications standards used to secure communications over public networks. At the heart of PKI is a trust built among clients, servers and certificate authorities (CAs). This trust is established and propagated through the generation, exchange and verification of certificates.
This article focuses on understanding the certificates used to establish trust between clients and servers. These certificates are the most visible part of the PKI (especially when things break!), so understanding them will help to make sense of—and correct—many common errors.
As a brief introduction, imagine you want to connect to your bank to schedule a bill payment, but you want to ensure that your communication is secure. "Secure" in this context means not only that the content remains confidential, but also that the server with which you're communicating actually belongs to your bank.
Without protecting your information in transit, someone located between you and your bank could observe the credentials you use to log in to the server, your account information, or perhaps the parties to which your payments are being sent. Without being able to confirm the identity of the server, you might be surprised to learn that you are talking to an impostor (who now has access to your account information).
Transport layer security (TLS) is a suite of protocols used to negotiate a secured connection using PKI. TLS builds on the SSL standards of the late 1990s, and using it to secure client to server connections on the internet has become ubiquitous. Unfortunately, it remains one of the least understood technologies, with errors (often resulting from an incorrectly configured website) becoming a regular part of daily life. Because those errors are inconvenient, users regularly click through them without a second thought.
Understanding the X.509 certificate, which is fully defined in RFC 5280, is key to making sense of those errors. Unfortunately, these certificates have a well deserved reputation of being opaque and difficult to manage. With the multitude of formats used to encode them, this reputation is rightly deserved.
An X.509 certificate is a structured, binary record. This record consists of several key and value pairs. Keys represent field names, where values may be simple types (numbers, strings) to more complex structures (lists). The encoding from the key/value pairs to the structured binary record is done using a standard known as ASN.1 (Abstract Syntax Notation, One), which is a platform-agnostic encoding format.
Designed for efficient operation across a broad range of hosts, ASN.1 allows several ways to encode values using its "basic encoding rules" (BER). As you will see shortly, multiple encodings for the same data will not work for your certificates, so the X.509 standard designated a subset of BER as the "distinguished encoding rules" (DER). The use of DER ensures that there is exactly one way any value might be encoded.
A certificate may be distributed in this raw, binary DER format. Since binary data is not terminal- or email-friendly, the encodings defined in the Privacy Enhanced Mail (PEM) standard are commonly applied. Although PEM is largely an obsolete standard, it defines methods of encoding binary material in a text-safe format. Most important, it defines the base64 scheme for encoding binary data into text and specifies the use of encapsulation boundaries to signal the beginning and ending of encoded content. The use of the PEM format is generally preferred on Linux servers (more on that later in this article).
Certificates may be distributed in a multitude of other formats as well. What is important to understand is that regardless of the encoding format—DER, PEM, PFX or something else—all certificates are basically the same when they are decoded. Tools, such as OpenSSL, are able to read or convert any of these formats easily.
The certificate encodes two very important pieces of information: the server's public key and a digital signature that can be used to confirm the certificate's authenticity. Additionally, the certificate will include metadata used by the CA to track the certificate and provide guidelines on how the public key can be used.
Public key cryptography, also known as asymmetric key cryptography, provides a mechanism to establish a secured communication channel over an insecure network. Using the server's public key, the client and server are able to negotiate a shared symmetric key securely, which can be used to secure communications.
Encryption: Symmetric vs. Asymmetric
Two broad types of encryption are widely used to secure web traffic: symmetric key and asymmetric key.
In both types of encryption, the key refers to a passphrase (of sorts) required to encrypt or decrypt the data. Without the key, an entity attempting to read the data would be unable to read the encrypted content. Likewise, malicious content would be difficult to generate.
Symmetric key encryption uses the same key on both sides of the communication channel to encrypt or decrypt data. Symmetric key encryption is implemented in algorithms such as AES or DES. It has the advantage of being very fast with a low overhead, but a secure channel must exist between the two parties through which the key may be exchanged.
Asymmetric key encryption uses a pair of keys, known as a private key and a public key. These keys are different values. Data encrypted using the private key can be decrypted only using the public key. The reverse is also true: data encrypted with the public key can be decrypted only with the private key. Asymmetric encryption algorithms include algorithms such as RSA, DSA and ECDSA.
While symmetric keys have desirable properties for communication, they must be generated and exchanged in a secure manner. Asymmetric algorithms fit this niche, and you can use them as the foundation for building a secured channel.
But, how do you (as the client) know that the public key can be trusted as authentic? You can use the certificate authority (CA), a trusted third party, as a mediator of sorts. By submitting the certificate to be signed by the CA, the owner of the server gives consent for the certificate to be "authenticated" by the CA. If the client, who trusts that the CA has verified the server properly, can confirm that the signature is valid, the certificate can be trusted.
A hash, often using the SHA256 algorithm, is a digital fingerprint of the data. If you change a single bit in the data, the hash will change. By computing a hash over the DER-encoded public key section of the certificate and then signing the hash with its own private key, the CA is giving its stamp of approval on the certificate. This signed hash value is the signature appended to the certificate.
When the client receives the server's certificate, the client can create the hash over the same data in the certificate that was signed by the CA. If the client is able to decrypt the signature using the CA's public key and it matches the hash the client computed itself, the client can be certain that the server's certificate was endorsed by the CA.
The final piece of the puzzle is understanding that the client must trust the CA explicitly. This is done by adding the CA's public key to the client's "trusted key store". As the user of common web services, you don't need to think much about certificate authorities. Both your operating system and your web browser ship with curated lists of authorities, which have been pre-selected as trustworthy for you. Still, from time to time, it may be necessary to install a certificate from a non-standard CA.
Now that you understand the basics of how a certificate is put together, let's look at a real-world example. Using the following command, you can pull the certificate from the google.com domain:
$ openssl s_client -showcerts -connect google.com:443 </dev/null
This command connects to the remote server using TLS and dumps a large amount of information about the TLS handshake to your console. If you had not redirected standard input from /dev/null, the connection would remain open, allowing you to interact directly with the server on port 443 (you can close this connection explicitly with Ctrl-D).
Below is an (abbreviated) view of the output, which I explore through the remainder of this article:
$ openssl s_client -showcerts -connect google.com:443
↪</dev/null
CONNECTED(00000003)
depth=2 OU = GlobalSign Root CA - R2, O = GlobalSign, CN =
↪GlobalSign
verify return:1
depth=1 C = US, O = Google Trust Services, CN = Google
↪Internet Authority G3
depth=0 C = US, ST = California, L = Mountain View, O =
↪Google LLC, CN = *.google.com
0 s:/C=US/ST=California/L=Mountain View/O=Google
↪LLC/CN=*.google.com
i:/C=US/O=Google Trust Services/CN=Google Internet
↪Authority G3
-----BEGIN CERTIFICATE-----
MIIIgjCCB2qgAwIBAgIITFQTbb/xK/QwDQYJKoZIhvcNAQELBQAwVDELMAkGA1UE
BhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczElMCMGA1UEAxMc
R29vZ2xlIEludGVybmV0IEF1dGhvcml0eSBHMzAeFw0xODEwMzAxMzE1MDVaFw0x
<... content omitted ...>
OTAxMjIxMzE1MDBaMGYxCzAJBgNVBAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlh
pvxysdjrJ8qfUyD0AY/Z8dCs1RQfx8SKbXuoML9e0X5uxRmeyjQ0s+BPJDIQG5b8
IGSRGSm8vWtg9vz/GDZIErtEO1kgXOslBBGL5NSCFpxkp1lh/Usi3nFzPcU6Fbvx
WMSdoZZKpgy5+6GGjYv/dEyEdnXYzg==
-----END CERTIFICATE-----
1 s:/C=US/O=Google Trust Services/CN=Google Internet
i:/OU=GlobalSign Root CA - R2/O=GlobalSign/CN=GlobalSign
MIIEXDCCA0SgAwIBAgINAeOpMBz8cgY4P5pTHTANBgkqhkiG9w0BAQsFADBMMSAw
HgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMjETMBEGA1UEChMKR2xvYmFs
U2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjAeFw0xNzA2MTUwMDAwNDJaFw0yMTEy
FIwsIONGl1p3A8CgxkqI/UAih3JaGOqcpcdaCIzkBaR9uYQ1X4k2Vg5APRLouzVy
7a8IVk6wuy6pm+T7HT4LY8ibS5FEZlfAFLSW8NwsVz9SBK2Vqn1N0PIMn5xA6NZV
c7o835DLAFshEWfC7TIe3g==
This output shows that the server returned not one, but two PEM-encoded certificates. Each certificate is bracketed by -----BEGIN CERTIFICATE----- and -----END CERTIFICATE----- markers. Although they look intimidating, remember that they are nothing more than base64-encoded DER data, and you have tools that can look inside!
OpenSSL provides a little bit of context just above the BEGIN mark of each certificate with the s: (subject) and i: (issuer) tags. The subject tells you what server (or other entity) the certificate was generated for, while the issuer tells you which certificate authority signed the certificate. If the subject matches the server to which you are connecting and you trust the issuer, you can be on your way.
At this point, let's pause to note that the X.509 standard used to encode certificates descends from the same series of X.500 standards as LDAP. You can see some of this common lineage in the directory syntax used to identify the subject and issuer:
C=US,ST=California,L=Mountain View,O=Google LLC,CN=*.google.com
If you're not familiar with LDAP naming standards, it's most important to understand that the "CN" is the "common name" of the certificate owner, with the remainder of the name being used for organization within a directory.
You can decode these certificates using OpenSSL. Extract the first certificate (CN=*.google.com) into a file named "google_com.crt" and the second certificate (CN=Google Internet Authority G3) into a file named "google_authority_g3.crt". Include the BEGIN and END wrapping each certificate, but nothing more. When you're done, you should have two files that look like this:
$ cat google_com.crt
$ cat google_authority_g3.crt
Now you can decode the content of either certificate using the command:
$ openssl x509 -in google_com.crt -noout -text
Here's a slightly edited version of the output:
Serial Number: 5500042407018834932 (0x4c54136dbff12bf4)
Issuer: C = US, O = Google Trust Services, CN = Google
Not Before: Oct 30 13:15:05 2018 GMT
Subject: C = US, ST = California, L = Mountain View,
↪O = Google LLC, CN = *.google.com
Modulus:
00:d1:bf:94:10:1f:94:15:bd:6c:3b:83:97:49:29:
ad:08:63:18:11:1b:57:7d:4d:b3:3f:9c:cd:62:ed:
eb:4d:d2:6b:78:3f:3f:01:48:43:a8:81:b6:42:f6:
e1:e4:24:b8:21:c4:9e:e5:86:c6:73:45:4f:a8:6f:
e0:81:f3:4e:46:03:3d:e9:d2:01:5b:6f:57:3c:22:
d4:83
DNS:*.google.com, DNS:*.android.com,
↪<... content omitted ...>
URI:http://crl.pki.goog/GTSGIAG3.crl
c7:57:a4:97:ad:32:e1:5f:10:53:05:ba:03:c4:cd:2e:11:c9:
7d:36:a9:4c:16:a8:46:a1:5a:30:c4:4f:04:86:8d:8b:e1:95:
24:34:62:94:48:b9:8a:3d:d2:d7:49:eb:a5:6c:59:72:c3:64:
16:9c:64:a7:59:61:fd:4b:22:de:71:73:3d:c5:3a:15:bb:f1:
58:c4:9d:a1:96:4a:a6:0c:b9:fb:a1:86:8d:8b:ff:74:4c:84:
76:75:d8:ce
This looks like progress—you can see the certificate provided by the google.com server in all of its glory! Let's visit the highlights.
Near the top of the certificate, you can see the serial number in the "Data" section. The certificate authority gives each certificate a unique serial number when it is generated. This allows certificates to be identified uniquely if there ever is a need to revoke them.
Two "Signature Algorithm" blocks follow the Data block. The first of these contains the server's public key information along with any extensions (options) enabled by the CA. The second block contains the signed hash generated by the CA.
Looking at the detail within the first "Signature Algorithm" block, you can see the subject, issuer and validity dates for the certificate. In general, the certificate may be used only on a server with a name matching the subject and within the dates specified. The "Issuer" (a CA) identifies the public key used to validate the signature in the second block. If this issuer's public key is in the trusted key store, the certificate is valid.
Perhaps most important, you can see the server's public key in this section. This is the key the client will use to encrypt content so that it can be decrypted only on the server. In this case, the server is providing a 2048-bit RSA key.
Below the server's public key, you'll find a block labeled "X509v3 extensions". The extensions in this section are set by the CA when the certificate is signed and can be used to enable (or restrict) the use of the certificate. The full details of these extensions are defined in RFC 5280, but I'll cover the highlights here.
You can see in the "X509v3 Extended Key Usage" section that the certificate is authorized for "TLS Web Server Authentication". This means that the certificate may be used to identify a web server positively. Other common uses that might be listed here include functioning as a CA (allowing the signing of certificates for other servers) or authorizing the certificate to be used as proof of a client's identity.
The "Subject Alternative Names" section is optional, but it may be used to list any additional web servers permitted to use this certificate. The SAN section allows servers to be listed using either DNS names or IP addresses. As you can see in the example, wild cards are supported. If the certificate's subject does not match the server name, but a match can be made here, the certificate is treated as if the subject were a match.
The final entry to look at in the X509v3 extensions block is the "X509v3 CRL Distribution Points". A CRL is a "certificate revocation list". These lists contain the serial numbers of any certificates issued by the CA that have been compromised, retired or (for some other reason) made invalid.
As a regular step in negotiating a TLS connection, the client should verify that the certificate presented by the server—or the serial numbers of a certificate used as a CA—does not appear on a CRL. Ideally, these serial numbers would be checked against a current version of the domain's CRL each time a certificate is verified. In practice, pulling an updated CRL for each connection adds a lot of overhead to the process. Most clients will use a cache, which is rarely up to date but avoids issues if the site hosting the CRL is unavailable.
The second "Signature Algorithm" block contains the signed hash of the DER-encoded X.509 data found in the first block. You can see that the SHA256 hash algorithm was used, and that an RSA private key was used to sign the hash. After being decoded with the CA's corresponding public key, this hash must match the value computed by the client for the same data.
This is where the use of DER for encoding is important: if there were multiple ways to encode the data in the certificate, as there might be using BER, the hash might assume several different values. By using DER, you guarantee that the values are encoded and decoded consistently into the same series of bytes. If a single byte changes, a different hash would be created and the verification of the signature could not be completed!
Certificates contain a lot of detail, and all of it must line up before a client can trust the certificate. It shouldn't be surprising that things fall apart as often as they do.
The most common errors with TLS connections include:
Server name mismatch, meaning that the certificate's CN (or any entries in the subject alternative names section) doesn't match the host that presents it.
A certificate has expired and needs to be re-issued by the CA.
The root CA used to sign the certificate is not in the client's trusted key store.
With the knowledge you've gained about certificates in this article, the meanings and (perhaps more important) solutions to those problems should become more clear.
Introduction to ASN.1
RFC 5280 (X.509 standard)
RFC 1421 (Privacy Enhanced Mail)
OpenSSL man pages relating to x509 manipulation, specifically man x509 or man openssl-x509.
OpenSSL man pages relating to secure client, specifically man s_client or man openssl-s_client.
Jeff Woods has worked in the IT field for more than 20 years, with broad experience in areas including software engineering, data engineering, operations, security engineering and DevOps. His experience with Linux dates back to 1993, when he began working with the SLS distribution. He currently works as an IT Architect for a global FinTech near Atlanta, Georgia. In addition to his IT experience, Jeff is a Navy veteran, Dad, and has served as a leader in various BSA programs for the past 12 years. You can contact him at jcwoods@gmail.com or via LinkedIn at https://www.linkedin.com/in/jeff-woods-a50b921.
Load Disqus comments
Our discussions are powered by Disqus, which require JavaScript.
Shrinking Linux Attack Surfaces
Zack Brown
When Choosing Your Commercial Linux, Choose Wisely!
Vince Calandra
Arduino from the Command Line: Break Free from the GUI with Git and Vim!
Matthew Hoskins
An AI Wizard of Words
Marcel Gagné
Joey Bernard
Linux IoT Development: Adjusting from a Binary OS to the Yocto Project Workflow
Mirza Krak
Linux Journal Week in Review
Sign up to get all the good stuff delivered to your inbox every week.
The Value of Open Source Journalism
Subscribe and support our coverage for technology's biggest thinkers – with up to 52% savings.
Linux Journal, currently celebrating its 25th year of publication, is the original magazine of the global Open Source community.
© 2019 Linux Journal, LLC. All rights reserved.


text:
Junior Showtime was a British variety show for children made by Yorkshire Television and shown on ITV between 1969 and 1974. The series' executive producer was Jess Yates.

Presented by Bobby Bennett from the Leeds City Varieties theatre, the show consisted of song and dance routines in the music hall style. Several regular performers later developed successful careers in Britain as adults, including Joe Longthorne, Pauline Quirke, Kathryn Apanowicz, Bonnie Langford, Janet Kay, Mark Curry, Lisa Stansfield, Perry Cree, and Malandra Burrows. One of the regulars was Glynn Poole of the Poole Family, winners of Opportunity Knocks. The show also featured the return of the 1930s music hall character Old Mother Riley, played by Roy Rolland.

In a 2001 poll by Channel 4 to find the "100 Greatest Kids' TV shows" Junior Showtime was at number 99. However Jeff Evans, the author of The Penguin TV Companion has also identified it as being amongst the twenty worst shows of all time. Almost all of the 190 episodes broadcast have not survived (see Wiping); only three programmes are believed to still exist.

References

External links

1969 British television series debuts
1974 British television series endings
1960s British children's television series
1970s British children's television series
British variety television shows
ITV children's television shows
Television series by Yorkshire Television
Television series by ITV Studios
English-language television shows