When you love your location and neighbors, many times it is more financially beneficial to add on. For our client and their family, adding on to an existing small farm house in SW Portland was the best decision. We increased the size of the kitchen and added a family room.
The new open kitchen includes a baking center (with appliance garage, wall oven and microwave, pantry, and open spice rack), a message center and a built-in window seat with lighting for reading or just having a quiet conversation. The dining area is intimate for daily family dining – but large enough to expand for large gatherings.
The new family room includes built-ins for their glass art collection, games and media equipment. Our clients are tall (over 5'10") so a custom sectional was designed with extra depth in the seat for comfort. Since this is also the media room – we installed blackout shades on the windows. The ottoman holds remotes and video game controllers to make it easier for keeping their home organized and neat.


Welcome, welcome, to our new home.
We've moved to a new domain, and doesn't it look awesome?
There will be many of you who didn't catch my extremely last-minute post about this before we moved over; so here it is in all its bouncy enthusiasm..
For a while TJ has not been happy with various aspects of the way the site is being run from our present base; and Sharon has been longing to spread her wings and get scope to design something just as informative and friendly but more up to date. Consequently there has been much investigating of new freedoms and new, well-organised enterprises prepared to give us those freedoms. Finances being another issue of course.
Sharon has been careful to ensure that the boards are carried over with as little disruption as possible, and has been amazing about consulting me every step of the way. The forums are still being supported by the same organisation and will be familiar and easy to move around. However, we will also have the opportunity to consider different colour options and styles, even on the new live forums.
Yes, we will be missing a few posts, from about the start of September, but those are safe and we will be in touch to tell you when you need to re-post them (I've only done 4 since then anyway, much to my shame!! ). Sharon will be contacting the 3 new members we have had since then to ask them to re-register.
As far as the main site is concerned, there is still work to do and it will be up to Sharon to decide when it will be fully open. But believe me she is doing the most fantastic job - you will love it. And we may be getting new photos from TJ to celebrate!
And at this point I would like you to join me in sincere gratitude and appreciation of Sharon. Without all her talented and superb backstage work this could never have happened - we are sooo lucky to have her!
PS Didja notice we have an integrated chatbox now?
Re: The Switch on the Site!
Love the new look! How cool is this!?
It looks very professional, well done!
Met TJ on 12/07/2014 at London Film & Comic Con.
Ah, that's only this bit. Wait till you see the main site..
Thanks so much! I love the new forum and I can't wait to see what the new site looks like!
Dr. Jack Hodgins: Up and forward are only two directions. Science should look in all directions.
Just in case anyone is wondering, that name logo and the navigation menu are just tests for now. Doesn't mean they will stay that way. I actually know what is going to be up at the top there but I am going to wait to put it up.
Sorry, I haven't been on for ages. Is the main site up and running yet?
Hi! Welcome back! No, the main site isn't finished yet. I'm not sure when it will be ready but we'll definitely announce once we know!
Lurving that new header, Sharon..
Steph. I think the text is too dark though, so while the look won't change the colors might. That bright blue makes it harder to get colors that don't fade in. LOL We could change the blue but since this was the one you liked I didn't want to do that.
You could change the color of the silhouettes to a shade of blue or soft grey or another color that goes with the blue background (but doesn't blend into it?) and then make the "tj thyne" font color white? That way you keep the blue background that Steph likes?
Yes, that header is awesome!


text:
Q: How to setup Julia in VS code? I'm coming from a pure Windows Visual Studio programming background with little Linux experience. It seems possible to use VS Code to program in Julia, but I can't figure out how to get things set up correctly.
Does anybody have good example launch.json, tasks.json, or other files that can serve as an example to build from?
This would be a great thing to see in a detailed tutorial.

A: Here is how things work if you are using the Julia extension for VisualStudio Code.
The extension adds a bunch of new commands. They all start with "julia", so filtering by that string should show you everything you can do with the extension.
In terms of running Julia code, the extension offers only two options right now. First, you can execute a command to start a REPL. This will just show a default Julia prompt, and you can interact with it like you would with any other Julia REPL. The second is that there is also a command, triggered by Ctrl + Enter, to send either the current editor selection or the current editor line to this REPL.
There is currently no further integration offered by the Julia extension. We do plan to add debugger support in the future, at which point I would expect F5 to start the current file in the debugger, or something like that. But that functionality is probably a couple of months away.

redpajama_set_name: RedPajamaStackExchange


Borak, Son of Oronok at the bridge near Eclipse Point in Shadowmoon Valley wants you to recover the Stormrage Missive.
All you need to do is lie in wait for him to dismiss his bodyguard. When he is alone, make your strike! Kill him and take the missive.
Be quick about it, <boy/girl>.
Clever bastards! This is a directive from Illidan that dictates where the cipher is to be hidden next. Apparently, they keep it moving. It does not tell us where it currently rests... If only we could deliver the missive now that we know the next location.
Too bad the seal on the missive is broken, rendering it unusable.
Should you fail to kill Envoy Icarius, Borak has the speech option: Borak, I need another bundle of bloodthistle. To which Borak replies with: "You have it. Do not lose it again!"
Borak, Son of Oronok whispers: Hide! Hide before they see you! Back up!
Blood Lord Zarath says: What is it, my lord?
Envoy Icarius says: Zarath you must return to the Black Temple at once! I... I seem to have misplaced Lord Illidan's orders. Quickly!
Blood Lord Zarath says: My lord, surely you do not expect me to leave you unattended. Lord Illidan would have my head if anything were to happen to you.
Envoy Icarius says: Zarath, I am perfectly capable of making it up this road to Eclipse Point. If we do not deliver the missive, Lord Illidan will have both of our heads! You are dismissed!
Blood Lord Zarath says: As you wish, my lord.
Envoy Icarius says: Ah, sweet, sweet [Bloodthistle]... Probably left behind by one of those filthy addicts at Eclipse Point.
Icarius kneels by the bundle.
Borak, Son of Oronok whispers: The time to strike is at hand. Terminate Icarius.
Envoy Icarius puts the bundle of bloodthistle in his robe.
This opens up the search for the three parts of the key.
This page was last edited on 11 September 2018, at 13:36.


Every cat-owner knows that our furry friends tend to get trapped in all kinds of obscure places, but very few have probably survived a ride like the one you are about to read.
About four months ago, Vitaliy Bouranin left with his Toyota Land Cruiser for a business trip somewhere in Russia. After about 50 miles, running at speeds of over 120 km/hour, he made a stop to get a refill.
Until then, he had noticed nothing strange with his car. But this is when things started to get weird. As he was filling the car up, he heard a noise coming somewhere from the car. He checked under the car, nothing. He checked under the hood, again nothing.
Then, he saw that a furry creature was inside one of the jeep's suspension springs. On closer inspection he saw that it was a cat that not only had managed to crawl up inside the spring but apparently had survived the whole trip unharmed!
Bouranin first asked an attendant for help, but they couldn't get the cat out. The gas station staff then called the police and fire service, who decided that the only viable option was to dismantle the suspension and remove the spring.
The whole ordeal lasted more than three hours. Surprisingly, the cat remained perfectly calm and relaxed during the whole time, despite having lost at least one out of its nine lives! After being released, the cat was put into a box and taken back to the large Russian island in the North Pacific Ocean in southeast Russia, where the journey had begun.


BUPA Hi Holdings Pty Limited is a foreign-owned private company that derives its revenue through the provision of private health insurance and healthcare services in Australia and New Zealand. The group employs around 2,310 people and its headquarters is located in Melbourne. The company's ultimate parent is the UK-based private insurer, The British United Provident Association Limited.
Bupa Aged Care - Providing residential aged care, as well as respite and specialist dementia care.
Bupa Optical - The group's optical brand market fashion and prescription eyewear and contact lenses.
Bupa Wellness - Operates as a corporate and workplace wellness company, offering services including diet and nutrition consultations, life coaching, fitness and exercise programs, stress management and smoking cessation, as well as a range of natural therapies and ergonomic solutions.
Bupa Medical TeleHealth - Offers telephone-based services for wellness, prevention and chronic disease management.


Among engagement rings, the Celtic engagement rings are the ones laced with the much meaning.
Openly, a Celtic engagement ring declares the couple's promise to create a new existence together and independently the style of Celtic engagement ring can contain many intimate elements significant to the couple's lives through the intricate metalwork, engravings or gemstones. To know more about engagement rings dublin, visit our website today!
Many people are drawn to the Celtic engagement ring art because of its elaborately knotted designs where the knots have no beginning in addition to no finish.
The Celtic engagement ring gives meaning literal to the famous phrase "tie the knot" as the rings are representations of infinity in addition to eternal love when crafted unto a Celtic engagement gemstone.
1. The lover's knot. For example two interconnected indicating infinity and may symbolize a couple u . s . as you.
Many Celtic wedding bands and rings incorporate the "lover's knot" within their pattern of design. The traditional Celtic design engagement rings usually illustrate the Heron and Creyr, on every side.
Creatures, for the Celts were the gods' messengers. Every animal was connected to the earth's natural cycle. Creyr is the creator of "existence" and the carrier of babes, as the stork would be to the Americans.
2. The Celtic mix. Versions of the Celtic mix differ based upon the legend, although a typical version draws on the efforts of the Celtic monks' to incorporate Christianity to questionnable beliefs.
The mix symbolizes God's eternal love, revealed through the sacrifice of Christ on the "mix".
Celtic crosses have a very circular sign, whereby the mix a part of the "crucifix" is enclosed. The halo, because it known as, is considered to represent of God's angelic quality through His endless passion for His people.
3. Celtic bands. These vary in intricacy and thickness. An easy Celtic band really may craft a "metal knot" from thin gold strands, while elaborate Celtic designs are etched or engraved onto wider bands.
Celtic bands may include gemstones, particularly emeralds or diamonds inset unto the metal, although elevated settings are rare.
4. Claddagh rings. They are the renowned and popular Celtic ring types and therefore are an indication of love and friendship.
Because every Celtic ring design offers a definite meaning, jewelers frequently will personalize the engagement ring to include the Celtic symbols and knots that you want.
The preferences of particular knots hold special importance to the couple, as an heirloom design or family pattern or the designs can easily be matching aesthetic favorites.
Because the Celtic rings' intricacy a specialized engagement ring tend to be more costly when compared with easily available rings, particularly if it requires completely knots and patterns.
Jewelers usually decide to create Celtic engagement rings from titanium metal lined with gold or silver. Typically, these rings are manufactured from gold or silver only, however, because of their intricate designs and delicate nature of gold and silver, titanium can be used today as the base for durability.
When looking for your Celtic engagement ring, it's significant to begin searching as soon as possible, to ensure that if you can't locate one that you want, you could have one customized that takes a longer period to complete.
In addition, getting your Celtic engagement ring correctly sized in addition to engraving together with your names will require time.
Any engagement ring ought to be looked after meticulously, however Celtic engagement rings needs special handling and choose to be certain that they continue to be dazzling for a long time.
Prior to you buying a cleansing solution, evaluate first which kind of metal is the ring and which choices are perfect for various kinds of metals in addition to gemstones, because the solution that cleans easily one metal can mistakenly damage another. Do not forget to visit us at jacobsondiamonds.com for the best variety of engagement rings.
Celtic engagement rings necessitate more frequent cleansing due to its design. Make use of a very soft "bristle brush" to keep dirt and grime from accumulating in the small scrollwork pattern.
As highly symbolic and detailed rings, Celtic engagement rings are a good option for couples to announce their engagement in addition to the knots in the ring will linger on to become a tangible remembrance of methods your ex and life is intertwined through the many for many years.


UNL contracts with City of Lincoln StarTran to operate bus routes that connect East, Downtown and Innovation Campuses. The routes run Monday through Friday during the fall and spring semesters and provide timely access throughout the day. Passes are available, and required, for students, faculty and staff to use these services.
An on-call van service is provided during Mondays to Fridays after hours. During weekends, an intercampus bus service between City Campus and East Campus is available on Saturday only.


text:
package com.mediamonks.googleflip.net.common;

import com.mediamonks.googleflip.net.bluetooth.AbstractBluetoothService;

/**
 * Defines several constants used between {@link AbstractBluetoothService} and the UI.
 */
public enum ServiceMessageType {

    // Message types sent from the BluetoothService Handler
    MESSAGE_STATE_CHANGE,
    MESSAGE_READ,
    MESSAGE_DEVICE_ADDED,
    MESSAGE_DEVICE_CONNECTED,
    MESSAGE_DEVICE_REMOVED,
    MESSAGE_CONNECT_FAILED;
}

redpajama_set_name: RedPajamaGithub


text:
The Board of Dartford and Gravesham NHS Trust is responsible for setting the strategic direction of the organisation and making sure that it is delivered.
The Board is led by a non-executive Chairman appointed by the Secretary of State for Health, via NHS Improvement. The Board includes five other non-executive directors, also appointed via NHS Improvement. Non-executive directors are people with a connection to the area that the Trust serves. They are not employed by the organisation; rather they bring wider experience and an independent perspective to the Board.
The Board includes the Chief Executive and six executive directors (although only four have voting rights, should Board decisions require a vote). The Chief Executive and the executive directors are full-time salaried members of staff.
All Board members are required to declare any interests they have that have the potential to conflict with the decisions being made by the organisation. The Register of Directors' Interests is updated annually, and published in the Annual Governance Statement and in the Trust Annual Report. It is also updated each time there is a new Board member. Each Board meeting also asks for any interests to be declared at the start.
Should you have any queries about the Trust Board please contact the Trust Secretary.
Letter: Trust Headquarters, Darent Valley Hospital, Darenth Wood Rd, Dartford, DA2 8DA.
Annual Audit Report
Trust Board Papers
Bribery Act Statement
Mixed Sex Accommodation
NHS Provider Licence
Safeguarding Declaration
Trust Board Minutes/Agendas
Trust Board Videos

redpajama_set_name: RedPajamaCommonCrawl


text:
2020 Election, Bigotry, Politics August 11, 2020
Biden Accused Of Pandering To Special Interest Group Comprising Most People By Promising Female VP Pick
Facing accusations of pandering when it comes to his VP pick, Joe Biden today attempted to justify his decision to limit the pool of running mates to a narrow field of candidates making up a…
Bigotry, Politics, Sports July 3, 2020
Redskins Henceforth To Be Known As The Washington Lobbyists
Having completed its review and concluded that its current name is not appropriate, the Washington Redskins will change its name to the Washington Lobbyists. "Just as Pittsburgh has its beloved Steeler Nation, we now have…
Bigotry, Food, Politics June 17, 2020
Panicked Planters Executives Hold Crisis Meeting To Discuss Mr Peanut
With racial and stereotypical depictions no longer acceptable given recent events, management at Planters snack food company were reportedly in crisis discussions today regarding Mr Peanut. Anonymous sources present at the meeting say the fear…
Bigotry, Law & Order, Politics June 15, 2020
Justice Kavanaugh Delivers Blistering Oral Dissent In Landmark LGBT Case
SCOTUS BRIEF: With a majority of the US Supreme Court, led surprisingly by Justice Gorsuch, finding sexual orientation protections for workers in a LGBT victory today, Justice Samuel Alito delivered a pointed written dissent criticism…
Bigotry, Politics, Sports June 10, 2020
NASCAR Reassures Anxious Fans That Mullets Are Still Allowed
Following the announcement of a total ban on displays of the Confederate Flag at its events, NASCAR has been working hard today to reassure fans that rumors circulating that mullets are also banned are completely…
Bigotry, Politics May 29, 2020
Cautious White Supremacist Calls White House To Confirm Dog Whistle
A neo-Nazi who marched in Charlottesville called the White House today to confirm the latest racist dog whistle sent out by President Trump. "That tweet about looting and shooting was one, right?" Though he clearly…
Bigotry, Law & Order, Politics May 28, 2020
Minneapolis Police Unsure What To Do With Black Suspect They Captured Alive
There was confusion in Minneapolis today when police attempted to shoot a black male who was reported by someone as being suspicious. Before they knew what had happened, the suspect – being perfectly aware of…
2020 Election, Bigotry, Politics February 15, 2020
Mike Bloomberg Apologizes For Patting Down Black Voter At Meet & Greet "Old habits die hard!"
Presidential hopeful Mike Bloomberg apologized today for an incident at a campaign meet & greet where he patted down a black voter who came to shake his hand. "Old habits die hard as they say!"…
Bigotry, Health, Politics February 14, 2020
Tennessee Republicans Fear More Frequent Periods If Tampon Tax Holiday Passes
GOP lawmakers in Tennessee are pushing back against a proposal to make tampons and other feminine sanitary products part of the state's tax holiday. "If you make tampons tax-free then they'll start having even more…
Arts & Entertainment, Bigotry, Literary February 9, 2020
OSCARS Asks Barnes & Noble For Secret To Making Stories About White People More Diverse
Realizing it was about to face yet another #OscarsSoWhite controversy, the organizers of this awards ceremony have put out an emergency call to Barnes & Noble for assistance. "We heard Barnes & Noble found a…
Bigotry, Education, Local February 6, 2020
CMU Apologizes To White People For Omitting Black Neighborhoods From Map "We've learned our lesson"
Local cradle of higher education Carnegie-Mellon University has apologized for a map that depicted the college and surrounding neighborhoods with some notable exceptions – namely predominantly black neighborhoods like the Hill District and Garfield. "We…
Bigotry, Politics February 2, 2020
Trump Brings Ben Carson Out Of Storage To Decorate Cabinet For Black History Month
President Trump was unhappy today to see his Cabinet was not properly decorated for February as Ben Carson had not been brought out. But he soon accepted responsibility for the oversight. "Melania does Christmas and…
Bigotry, Holidays, Politics January 20, 2020
Black Friend Ruins MLK Day With Angry Quotes Instead Of Reciting "I Have A Dream" Speech
What was otherwise shaping up to be another perfect MLK day of celebrating America's most beloved pastor by a group a friends was ruined today when one of their number deviated from the standard practice…
Arts & Entertainment, Bigotry, Politics January 13, 2020
Gay Actor Nominated For Role As Traditional Family Man in 'The Trump Administration'
Gay actor Mike Pence has been nominated for an Oscar in the best supporting actor category for his convincing portrayal as a traditional straight family man in the comedy of the year, "The Trump Administration"….
Bigotry, Local, Transport December 29, 2019
Man Who Has Never Been To Pittsburgh Outraged By Its Bike Lanes
(Sharon, PA) A local man is continuing his protest against Mayor Peduto's bike lane initiative, telling anyone who will listen that they're the worst. "I am beyond angry over this." Though he's never seen a Pittsburgh…
Bigotry, Politics December 16, 2019
Army Cadet Accused Of Making White Power Signals Says He Was Just Following Orders
An Army cadet accused of making a White Power hand signal during the Army Navy game has said he was simply carrying out the wishes of his Commander in Chief. "Or have I totally misread…
Arts & Entertainment, Bigotry, TV December 16, 2019
Conservative Group To Target Hallmark's Sympathetic Black Friends & Single Working Women Next
After sucessfully forcing Hallmark to pull ads featuring a lesbian couple from its channel, a Conservative group says it next plans to target the traditional formula of Hallmark movies which contains elements it considers 'deeply…
Bigotry, Politics December 7, 2019
Nikki Haley Says Burning Crosses Were A Symbol Of Brotherly Love Before Dylann Roof Hijacked Them
As if murdering a group of churchgoers and destroying the reputation of the Confederate flag wasn't bad enough, former Governor and UN ambassador Nikki Haley today accused Dylann Roof of destroying another one of America's…
Bigotry, God Stuff, Politics August 7, 2019
El Paso Hit By Second White Supremacist In Less Than A Week
The city of El Paso is suffering yet again today as local officials learned that a dangerous member of the Alt-Right is visiting the area. Though he is just there to look around, they say…
Bigotry, Business, Politics, Sports July 7, 2019
Nike Announces It Will No Longer Sell White Sneakers
Sports apparel manufacturer Nike has announced it will no longer manufacturer nor sell white sneakers. It has also initiated a generous buy back program to get rid of those already out there. The move follows…


Hey, I just brought my Apple TV 2 back from the living dead. After a botched firmware update all it did was flashing the white LED fast (about 3 times a second).
I followed the official reset instructions using the Apple remote but that didn't help at all. Then I came across a few posts that said that by hooking up Apple TV 2 to a Mac using just a micro USB cable, you could actually restore it in iTunes. Those posts explicitly said that you have to disconnect HDMI and power and just plug in the USB cable.
I dug out a micro USB cable and connected it to my Mac. Shortly after, iTunes showed up with the restore screen for Apple TV 2. So far, so good.
But every time during the early stages of the update process, one of those error messages appeared.
It just didn't work. I was already thinking about returning it back to Apple, when I had an idea. Maybe the power delivered by the Mac's USB port isn't enough for whatever goes on during the restore process? So I connected a power cable after (!) Apple TV 2 showed up as being restorable in iTunes and voilà, the restore went through without a hitch!
If your Apple TV 2 is stuck with a fast flashing LED and iTunes fails to restore it using a micro USB cable, just connect the power cable as well and the restore might get through.
Apple TV 2 should now start flashing the LED wildly and appear in iTunes with the restore button.
If it still doesn't show up, maybe there's something wrong with your cable. I was using a wiggly micro USB plug that needed some weight put on it in order to have a reliable connection.
If you always receive the 1602 error at the end of the restore process, it could help to restore Apple TV 2 using Xcode's Organizer instead of iTunes.
Next PostTRIM support on its way for Mac OS X Lion 10.7?
Oh God, I remember when I first got the 1602 error.
I connected the USB and the power cable, received the 1602 error, but with fixed light! I connected then to my TV and works perfectly! great job! Thank you!
I have the same issue with the blinking light, but when plugged into my television, I see the Apple logo, then the device shuts down, then it restarts to apple logo, then shuts down again. I've tried plugging it into my computer but it doesn't appear in iTunes. My iTunes is up to date, and I've plugged the Apple TV into power after connecting the USB. Any ideas?
I had to remove all of the Apple software (iTunes, QT, Bonjour…) on my Dell running Windows XP and then restarted. Then I reinstalled iTunes and quicktime from the Apple website.
I could then use the micro usb cable with the Apple TV 2 and the restoreworked fine without the need of the power cable.
Buy a new one. Box up old atv2 in the new box. Return for full refund. Don't let crappy software cost you. Let them take the lose. No warranty worries.
Same here error 9 keeps coming up have tried two USB cords and two computers warranty expired, need help! !
This worked for me. Many thanks. Now to try another attempt at JB'ing the thing.
Restored my Apple TV 2 using this fix. Like Terry above, I too got the 1602 error at the end but that didn't affect it. Many thanks.
ive updated apple tv2 to 4.4.4 by using this thread (thx) and fund that I'm missing the netflix menu under internet. this I've tried to google – but no answers. anyone here that tried this ? i have an netflix account at it worked fine before updating to 4.4.4.
Just wanted to give a shout out for this post as well… plugging in the power cable after the micro USB cable made the errors go away! I was able to restore my ATV2 without any issues. I did get the 1602 error at the end but that didn't seem to matter. Thanks!
wanted to stop by and say thank you. after jailbreaking my ATV2, and then trying to update in October, the thing totally crashed and there was nothing but the Apple onscreen, I thought I had totally messed it up beyond repaid. However I persevered and read forum after forum. This one was the best (THANK YOU) as it described the combination of everything I needed: Plugging in the power is essential, as is the Menu/Play combination for 15 seconds. But the absolute KEY was jiggling / holding the mini USB in place. It took be about 5 goes, with loads of failed tries and error messages (mostly 1602 or 9) …. and in fact it never actually completed the firmware installation that followed the software installation …. and note I had to hold the mini usb absolutely stock still for about 5 mins while the update happened. Eventually I noticed the white light was steady …. so I plugged it into the TV via HDMI and hey presto, I got the regular setup menu, and was able to get as far as the settings where I went straight to system reset where it reset the whole thing ….. and back to normal.
FYI – After repeated 1602 errors, I plugged the Apple TV back into the HDMI cable, it worked fine after going through the set-up menus.
So I had the same issue as everyone else. After being prompted a bunch of times to make the firmware update I relented and it failed and the micro USB graphic with the iTunes icon would display on my television. I went and got a micro USB cable and tried restoring numerous times both following these recommendations (above) and not. It still failed and resulted in a 1602 error every time so I took the unit back the Apple store near me. Wasn't able to get a Genius appointment at the time and they wouldn't flat out exchange the unit so on a hunch when I got home I hooked it back up to the tv. It had been restored and was on the initial set up screen despite the fact that iTunes was saying the restore failed and was throwing the 1602 error. So check to make sure the unit isn't restored even if you get the 1602 error.
Thanks, the USB without the power lead and hitting the DFU set up sorted me not being able to get the TV recognised in iTunes. Now updated thanks.
thank you, your article helps me !
Thank you for the post. I was experiencing the blinking light of death and could not get the Apple TV to show up in iTunes until I plugged in the power cord. Thanks again!
I spoke to apple. The rep on the phone admitted that he had received 3 such calls that day and there was definitely a problem with the software update.
He said that since I had fixed my apple Tv myself not much to do…..but had I called with a failed restore through itunes apple would replace the appletv at no charge within the 1 year period(even if I did not have a support plan with them). All that I would have to do was to walk into an apple store with the defective apple tv and they would replace it.
Just sharing this on this board if some one else is also suffering the same issue.
I kept getting 1602 after restoring firmware, power cable did not make a difference. I was about to give up when I tried another micro usb cable, and the restore worked without a hitch, not sure why and it does not make sense. I did do a reboot in between so perhaps that's why.
Great tip, the most recent update failed, but performing the restore provided both the update and a functional Apple TV.
Worked for me the first time. Didn't even have to use the power cord. Thank for the info!
Got 4.4(3140) working on my appletv2……but apple really messed up with this update. Now when I scroll through the menus ….a voice reads of all the menu items… This obviously was beta which was rushed out by apple withour proper QA.
Anyways the voice is a minor irritant….but the apple tv box works….so wont touch it for some time.
See above. I ignored the 1602, re-connected it to the tv and it works fine.
Did an Apple TV update and the box bricked it self.
Kept getting 1602 error. Updated to latest itunes. Worked just like dee1722's did.
Why do you say to not update the software?
Anyone reading this message, DO NOT UPDATE YOUR APPLE TV SOFTWARE! I wish I had known!!!
I literally RAN to the Apple store, bought an AppleTV a minute before they closed. Got it home, agreed when it said it wanted to update the software…and then it bricked itself.
Looks like there must be a rogue update that's bricking them right now.
Using the micro USB cable worked for me after the update failed on Oct. 14, 2011. The cable I used is the same one I use to charge my phone if that helps anyone. I also run a program called ASUS Ai Charger on my pc that ups the power output on my USB ports so they'll charge my iPad2.
Why Apple have to do an up date that requir to conect to iTunes? Why did like that? I tried 3 times up to if didnt work I have to take it to Apple store! Update should not requir iatune like before. i wish some can rase this point not all have Itune and not all have amc book?!
The trickiest part of this for me was finding the micro (NOT mini) USB cable. None of the camera cables I had worked, but tracked one down at RadioShack. Attached to my fully-updated Mac, and the update went through seamlessly. No power required! Cheers.
Awesome, thanks. No power/USB restored and worked.
After having problems trying to update to Apple TV 2 version 4.4 (just after release of iTunes 5), I tried to restore but kept getting restore error message 1602. I tried the methods listed above several times including different micro USB cables and the power cables. Then I realized that I might need to update iTunes to the latest version and then try restore. Worked perfectly without power supply!!!
Rocketfish from Best Buy. about $20.00.
The re-boot worked with the micro USB and apple tv power source through my macbook even though I received "error 1602" after the finish. The light had quit blinking rapidly after this "failed reboot", so, on the chance that it might be repaired, I connected the apple to the HD tv again, and it works so far. Many thanks!
It worked for me too. Connected it on my pc to itunes with the apple tv on a usb.
Thank you. Only this solution solved my problem. Now it works again.
Thank you so much! We were so frustrated until we found your post!
THanks a lot dude, you're a star * it's worked just perfect.
Thanks for the info. I went to power off the ATV by removing the power plug and saw that the PC was able to keep the Apple TV alive through the USB port. As soon as I removed the power cable, Itunes recognized the ATV and I could restore. Yippee!
Thanks!!! I've tried for days and this is the only thing that worked!!!
THIS WORKED!! THE POWER CABLE!


If you are bored with your hair and if you would ant to try out something new, you have come to the right place today because we are going to be talking about new hairstyles that you can try out. Maybe you have been living with only one hairstyle your whole life and if you have, you should really change things up a bit for a change because it can get really boring if you do not do this. You may really want to style your hair in a way that will make you look really pretty for an event that you are going to and if you do not know what you can do to your hair, you should keep on reading down below as we are going to tell you what you can do with it. There are so many hairstyles out there that you can try but today we are going to be looking at two of them that are really good to try out so keep on reading to find out what these two hairstyles are.
One hairstyle that you really should try out is the braid. Braiding your hair can be really fun and it can make your hair look really cool and stylish indeed so you should really try to braid your hair some time. If you do not have long hair, you may think that you can not do a braid because your hair is too short but you actually still can because there is such a thing as french braiding which starts at the top of your head so you can still get to braid your hair even though your hair is not that long. Braiding can make your hair look really pretty and there are even some girls who put flowers on their braided hair to make it look even more prettier. Your can look really cool in your braided hairstyle so you should really go and try it today if you have never done so yet in your life.


text:
Call for Submissions: JRC Capacity Building Workshop
Opportunity closing date: 29 April 2016
The International Network for Government Science Advice (INGSA) is a collaborative platform for policy exchange, capacity building and research across diverse global science advisory organisations and national systems. The network aims to enhance the global science-policy interface to improve the potential for evidence-informed policy formation at both national and transnational levels
INGSA looks forward to collaborating with the Joint Research Centre of the European Commission on its upcoming capacity building event scheduled for late August in Italy.
The Joint Research Centre of the European Commission welcomes applications for a capacity building event, connecting African and European scientists and policymakers to learn together how to better use evidence for policy-making. They are looking for 25 scientists from across Africa who are engaged in research into water-energy and food (W-E-F) nexus, including those involved in collaborative research projects funded by FP7, Horizon 2020, the African Union Research Grants, the ACP S&T Programme and the ERAfrica initiative.
The event, organised jointly by the European Commission, the African Union Commission and International Institute for Applied Systems Analysis (IIASA), will take place at the European Commission's Joint Research Centre site in Ispra (Italy), from 30 August to 2 September 2016. The program includes lectures and panels with high-level policymakers and scientists, as well as highly engaging interactive masterclasses.
They are looking for applications from scientists and policy officers conducting research and developing policy in the field of the Water-Energy-Food nexus. Apart from inviting you to apply, the JRC would encourage you to share the call for participants with your colleagues and networks.
The Application Form, together with specific eligibility criteria and a draft program of the event, can be found here and should be sent to JRC-KNOWLEDGE@ec.europa.eu.
African scientists are encouraged to apply.
Applicants should also submit their CV, along with a motivation statement outlining how their scientific work in the field of the water-energy-food nexus interacts with respective governmental policies and why they would benefit from attending the event.
The deadline for applications is 29 April 2016. Travel, visa and subsistence costs for participation will be covered by the Joint Africa-EU Strategy Support Mechanism.
Please do not hesitate to contact JRC-KNOWLEDGE@ec.europa.eu for any further information.
For more about the International Network for Government Science Advice, click here.
Fish App – Young African Mathematicians Help Senegal's FishermenCall for Submissions: JRC Capacity Building Workshop


text:
How to achieve security using different types of firewalls
The fact that the dynamic rise of the internet has brought the world closer but also at the same time, it has left us with various kinds of security threats. To ensure the confidentiality and integrity of valuable information of a corporate network from outside threats and attacks, we must have some strong mechanism which is why this firewall comes into the picture.
A firewall is a type of cyber-security tool that is used to filter traffic on a network. Firewalls can be used to segregate network nodes from external traffic sources, internal traffic sources, or even specific applications. Firewalls can be software, hardware, or cloud-based, with each type of firewall having its own unique advantages and disadvantages.
The primary goal of a firewall is to block malicious traffic requests and data packets while allowing legitimate traffic through.
It can be compared with a security guard standing at the entrance of a president's home. He/She keeps an eye on everyone and physically checks every person who wishes to enter the house. It won't allow a person to enter if anyone is carrying a harmful object like a knife, gun, etc. Likewise, even if the person doesn't possess any banned object but appears suspicious, the guard can still prevent that person's entry.
Top 5 types of firewalls
Firewall types can be segregated into several different categories based on their general structure and method of operation. Here are the top 5 types of firewalls:
Packet filtering firewall
Circuit-level gateway
Stateful inspection firewall
Application-level gateway (aka proxy firewall)
Packet-Filtering Firewalls
Packet-filtering firewalls basically are the oldest type of firewall architecture that creates a checkpoint at a traffic router or switch. The firewall performs a simple check of the data packets which are coming through the router, inspecting information such as the destination IP address, packet type, port number without opening up the packet to inspect its contents.
The good thing about these firewalls is that they don't require exclusive access to large amounts of data. This means they don't have a huge impact on system performance and are relatively simple. However, they are also relatively easy to bypass compared to firewalls with more robust inspection capabilities.
Circuit-Level Gateways
Another schematic firewall type that is meant to quickly and easily approve or deny traffic without consuming significant computing resources, circuit-level gateways work by verifying the transmission control protocol (TCP) handshake which is designed to make sure that the session the packet is from is legitimate.
While exceedingly resource-efficient, these firewalls do not check the packet itself. By any chance, if a packet held malware, but had the right TCP handshake, it would pass right through. That's why circuit-level gateways are not enough to protect your business by themselves.
Stateful Inspection Firewalls
Stateful inspection firewalls combine both packet inspection technology and TCP handshake verification to create a level of protection bigger than either of the previous two architectures could provide alone.
However, these firewalls do put more exertion on computing resources which may slow down the transfer of legitimate packets compared to the other solutions.
Proxy Firewalls (Application-Level Gateways/Cloud Firewalls)
Proxy firewalls operate at the application layer to filter incoming traffic between your network and the traffic source—hence, the name "application-level gateway." These firewalls are delivered via a cloud-based solution or another proxy device. Instead of letting traffic connect directly, the proxy firewall first establishes a connection to the source of the traffic and inspects the incoming data packet.
This security check is similar to the stateful inspection firewall in that it looks at both the packet and at the TCP handshake protocol. Likewise, proxy firewalls may also perform deep-layer packet inspections, checking the actual contents of the information packet to verify that it contains no malware.
Once the security check is complete, and the packet is approved to connect to the destination, the proxy sends it off. This creates an extra layer of separation between the client and the individual devices on your network, obscuring them to create additional anonymity and protection for your network.
If there's one drawback to proxy firewalls, it's that they can create a significant slowdown because of the extra steps in the data packet transferal process.
Most recently released firewall products are being touted as "next-generation" architectures. Nonetheless, there is not as much consensus on what makes a firewall truly next-gen.
Few common features of next-generation firewall architectures include deep-packet inspection (checking the actual contents of the data packet), TCP handshake checks, and surface-level packet inspection. Next-generation firewalls may incorporate other technologies as well, such as intrusion prevention systems (IPSs) that work to automatically stop attacks against your network.
Source :https://images.app.goo.gl/4B6ubRUL6qovWrM59
Choosing the ideal firewall begins with understanding the architecture and functions of the private network being protected but also calls for understanding the different types of firewalls and firewall policies that are most effective for the organization.
Whichever of the types of firewalls you choose, keep in mind that a misconfigured firewall can, in some ways, be worse than no firewall at all because it lends the threatening impression of security while providing little or none.
Navdeep Rathore
How does access control protect data?
Who should access the company's data? How to ensure those who attempt access have actually been granted that access? Under which situations to invalidate access to a user with access privileges?
To strongly protect the data, the organization's access control policy must address these and many other questions.
Access control is a procedure of ensuring that users have the appropriate access to company data or in simple words a selective restriction of access to data.
Authentication is a method used to verify that someone is who they claim to be. Authentication isn't sufficient by itself to protect data. What is needed is an additional layer, authorization, which verifies whether a user should be allowed to access the data or make the transaction they're attempting.
Mostly during a data breach, access controls are among the first policies investigated.
If the data could be of any value to someone without the proper authorization to access it, then the organization needs strong access control, especially for businesses with employees who work remotely out of the office and require access to the company data resources and services.
Access control policy: Key considerations
Many of us work in different various environments or say hybrid environments where data moves from on-premises servers or the cloud to offices, homes which can make enforcing access control difficult.
A cultivated access control policy can be adapted dynamically to respond to evolving risk factors.
Based on the risk factor access control rules must be updated, which means that organizations must establish security analytics layers that sit on top of the existing network and security configuration. They need to identify threats in real-time and automate the access control rules correspondingly.
4 Types of access control
Organizations must determine the significant access control model to adopt based on the type and sensitivity of data they're processing. Legacy access models include discretionary access control (DAC) and mandatory access control (MAC), role-based access control (RBAC) is the most common model today, and the most recent model is known as attribute-based access control (ABAC).
Discretionary access control (DAC)
DAC is a method of assigning access rights based on rules that users specify. Here data owner decides on access.
Mandatory access control (MAC)
Here people are granted access based on an information clearance. MAC is an approach in which access rights are assigned based on regulations from a central authority.
RBAC provides access based on a user's role and implements key security principles, such as the least privilege and separation of privilege. Thus, someone attempting to access information can only access data that are esteemed necessary for their role.
Attribute-Based Access Control (ABAC)
In ABAC, each resource and user is assigned a series of attributes. Here, a comparative assessment of the user's attributes, including the time of day, position, and location, are used to make a decision on access to a resource.
It's upto organizations to decide which model is most suitable for them based on data sensitivity and operational requirements for data access.
A number of technologies can support various access control models. In a few cases, multiple technologies may need to work together to achieve the desired level of access control.
Most data spread across various cloud service providers dictates the need to orchestrate a secure solution. There are various vendors providing privilege access and identity management solutions that can be integrated into a traditional Active Directory. 2-way Multi Factor authentication can be a component to further enhance security.
Why authorization remains a challenge
Authorization can still be challenging to determine and perpetually monitor who gets access to which data resources, how they should be able to access them, and under which conditions they have granted access, for starters.
Access control must be continuously monitored, in terms of compliance with the corporate security policy as well as operationally, to identify any potential security gaps. Organizations need recurring vulnerability scans against any application running access control functions and should collect and monitor logs on each access for violations of the policy.
Access control must be considered as a technology infrastructure that uses the most advanced tools which reflect changes in the work environment such as increased mobility, identifies the devices we use and their inherent risks, and takes into consideration the rapidly increasing movement towards the cloud.
Cloud Security Tips to Address Risks
Cloud computing offers many benefits to the organization, but these benefits are likely to be undetermined by the failure to ensure appropriate information security and privacy protection when using cloud services. The aim to provide practical reference and help organizations information technology and business decision-makers to analyze information security of cloud computing.
When considering a move to cloud computing, we should have a clear understanding of security benefits and risks associated with it.
Services are segregated in 3 categories
Infrastructure as a service(IaaS)
Platform as a service(PaaS)
Software as a service(SaaS)
There are a number of risks associated with cloud computing that must be addressed.
Loss of governance ownership
In a public cloud deployment, customers give authority to cloud computing providers
over a number of issues that may occur, which may affect the security and privacy of sensitive data. Yet cloud service agreements may not offer a commitment to resolve such issues as a part of the cloud service provider thus leaving gaps in security and defenses.
Responsibility ambiguity
Responsibility for aspects of security and privacy is shared between the cloud service provider and customer, due to this there is a possibility of sensitive information that may remain unguarded, hence there is failure to allocate responsibilities to cloud providers and customers clearly. This split of responsibilities vary on cloud service model used like(IaaS, SaaS)
Despite the fact that sensitive cloud information can be accessed from anywhere, there is a serious need for a strong authentication and authorization algorithm for identity management to access the data. As there are employees, contractors, partners, and customers. And the data access layer of each category is different. Due to this reason Authentication and authorization becomes a critical concern.
Handling security incidents
The detection, reporting of subsequent management is outsourced to cloud service providers. And these incidents impact the customer. To resolve this Notification rules need to be negotiated clearly in cloud service agreement so that customers are not unaware or should be informed in an unacceptable delay
Application protection
Traditionally application was protected by security solutions knowing all physical and virtual configurations, and in trusted zones. outsourcing this responsibility of security infrastructure to cloud service providers, reconsideration of security measures over the network should be done by applying more controls to the application at the user level.
The same level of security measures should be applied at cloud by cloud service providers.
The major concerns can be releasing personal or sensitive data, or to bear loss or unavailability of data. It is important for cloud service customers to check the data handling process of cloud service providers. This problem is worse in the situation of multiple data transfer which may result in a lack of ownership transparency in data processing.
Personal data regulation
It is common in most of the jurisdiction that personal data must be treated according to respective rules and regulations of the jurisdiction. This is something beyond the protection of personal data as well as it involves rights to, inspect, correct or delete the data and in some cases data to be transferred from one location to another. Any cloud service using personal data should meet this requirement and at the same time data should be secured
Malicious behaviors of insiders
Damage caused by malicious action of authorities working inside an organization can be substantial, given the access and authorization, this risk is compounded in a cloud computing environment. And this activity may occur from both customer organizations or cloud service provider organizations.
Service unavailability
This could be caused by hardware, software, or any network communication failures.
Lack of portability
Dependency on cloud service providers could lead customers to be tied to the service provider. This causes a lack of portability and lack of portability poses a risk of service unavailability in case any change requests occur in an application.
Insecure or incomplete data deletion
The termination of a contract with a provider may not result in the deletion of the customer's data from the provider's and providers' third-party systems. Backup copies of data usually exist, and maybe mixed on the same media with other customers' data, making it difficult to selectively erase. thus represents a higher risk to the customer.
Analyzing the above-mentioned risk parameter for cloud security for migrating an application or moving data on a cloud service provider will help to minimize the risk of surface attacks and avoid substantial risks caused by data loss.
Mayur Rathod
DevOps strategies to boost your security
DevOps provides an environment with great potential to enhance security. Practices such as collaboration, continuous testing, automation better feedback loops, provides an opportunity to integrate security as a component of the DevOps processes.
Mostly, a wide range of security flaws and risks exist in the cloud environment, containers, and other resources developers rely on when making applications. This includes the third-party code, tools, networks, and other components of the development systems. Without proper tools, control, and protection, these areas can lead to unstable and insecure applications.
Some factors that increase vulnerabilities include:
Wrong configurations and weakness in containers
Insecure in-house and third-party code, privilege exposures, etc.
Security flaws in the scripts or CI/CD tools
Malicious insiders
Insecure infrastructure and employee behavior.
Many common DevOps practices inherently lend themselves to providing a development and delivery pipeline that can improve your overall security posture.
Three biggest risks to IT security are as follows:
Lack of process
DevOps can positively impact all three of these major risk factors, without negatively impacting the stability or reliability of the core business network.
Best DevOps practices to boost your security
Here, is a list of the top five DevOps practices and tooling that can help boost overall security when incorporated directly into your end-to-end continuous integration/continuous delivery (CI/CD) pipeline:
Security test automation
Configuration and patch management
Collaboration and understanding your security requirements
Many of us are required to adopt a security policy. It may be in the form of a corporate security policy, a customer security policy, or a set of compliance standards (ex. SOX, HIPAA, etc). Even if you are not mandated to use a specific policy or regulating standard, we all still want to ensure we follow the best practices in securing our systems and applications. The key is to identify your sources of security requirements information and, collaborate early so they can be incorporated into the overall solution.
Whether you are building a brand new solution or upgrading an existing solution, there likely are several security considerations to integrate. Due to iterative agile development, handling all security at once in a "big bang" approach likely will result in project delays. To be certain that projects keep moving, a layered approach often can be helpful to ensure you are continuously building additional security layers into your pipeline as you progress from development to a live product. Security test automation can ensure you have quality gates throughout your deployment pipeline giving immediate feedback to stakeholders on a security standpoint and allowing for quick remediation early in the pipeline.
In traditional development, servers/instances are equipped and developers are able to work on the systems. To make sure servers are equipped and managed using consistent, repeatable, and reliable patterns it's critical to ensure you have a strategy for configuration management. The key is to be certain you can reliably guarantee and manage consistent settings across your environments.
Similar to the concerns with configuration management, you need to make sure you have a method to quickly and reliably patch your systems. Missing patches are a common cause of exploited vulnerabilities including malware attacks. Being able to swiftly deliver a patch across a large number of systems can drastically reduce your overall security exposures.
Make certain you have monitoring in place across all environments with transparent feedback is important so it can alert you quickly of potential breaches or security issues. It is important to identify your monitoring needs across the infrastructure and application and then take benefits of some of the tooling that exists to quickly identify, isolate, and remediate potential issues before they become vulnerable. Most of your monitoring strategy also should include the ability to automatically collect and analyze logs. The analysis of running logs can help identify exposures quickly and compliance activities can become extremely expensive if they are not automated early.
DevOps strategies allow us to integrate early with security experts which increase the level of security tests and automation to enforce quality gates for security and provide better mechanisms for ongoing security management and compliance activities.
Incorporating security practices into your DevOps processes boosts in creating an effective security layer for the environment and applications. This, in the future, ensures security and compliance in a more proactive and efficient way.
Microservices Security | Best practices to follow
Microservices is an architecture in which all the components of the system are put into individual components that can be built, deployed, and scaled individually. Microservices can serve as an elegant way to break the shackles of monolithic architectures when building or deploying applications. Apart from pioneers such as Netflix, which began exploring this territory a few years ago, chances are microservices are something relatively new for your organization. Protection against cyber-attacks illustrates an even bigger unknown for many.
Let me explain to you a simple analogy
You must have seen how bees build their honeycomb by orienting hexagonal wax cells. In the first instance, they start with a small section using various materials and continue to build a large beehive out of it. These cells form a pattern resulting in a strong structure that holds together a particular section of the beehive. Here, each cell is independent of the other but it also corresponds with the other cells. This means that damage to one cell doesn't damage the other cells so bees can recreate these cells without impacting the complete beehive.
In this above diagram, each hexagonal shape represents an individual service component. Similar to the working of bees, each agile team builds an individual service component with the available frameworks and the hand-pick technology stack. Just as in a beehive, each service component forms a robust microservice architecture to provide better scalability. Besides, issues with each service component can be handled individually by the agile team with minimal or no impact on the entire application.
Why microservices?
you are developing a large/complex application
you need to deliver it rapidly, frequently and reliably
over a long period of time
the Microservice Architecture is often a good choice
Microservices Security – Presumably not what you think it is
Microservices and container security are sometimes incorrectly referred to interchangeably, even though they are two different things. This may be due, in part, to how most enterprises run microservices on containers.
The incertitude between containers and microservices might also have a lot to do with how container security protocols can help to protect against potential vulnerabilities of microservices within containers.
It would be easier if there were a simple algorithm on how to secure a microservice. Unfortunately, there is no such thing. However, there are some practices that can be used as a guide on the way to securing microservices.
1. Use TLS protocols for all APIs
Any application consisting of microservices needs an API as a key. If there are many independent API services, this software might require some additional tools to manage those APIs.
So, what you definitely need is access control. That will provide you secure authentication and authorization. There are some frequently used servers that allow administrators and developers to attain tokens for API authentication.
You can also use third-layer-security protocols for all the APIs to make sure that the system is protected from practicable attacks. All APIs that might be exposed must have an HTTPS certificate. One more last but not the least essential element is to encrypt all the communication between client and server with transport layer security (TLS).
2. Profile all your APIs due to their deployment zones
Malicious software, such as bots often aims at exposing the capabilities of the service too many more recipients than required. Technically, only authorized users are supposed to have access to them. To avoid unnecessary exposure, developers can label all the APIs to ensure who should be able to access them.
The API topology goes as follows:
Corporate Zone – private traffic.
Hybrid Zone – minimal deployments can be recorded at the data center.
DMZ – a zone for traffic originating from the Internet.
Ethernet – the app is vulnerable to those outside the data center.
There is also a process called network segmentation. This allows developers to perform partition of traffic and illustrate different content to different user segments.
3. Use OpenID or OAuth 2.0
The main task of these tools is to allow the developer to process user tokens. OAuth 2.0 protocol particularly simplifies the process of securing microservices.
It is an authorization framework that allows users to procure admittance to a resource from the resource server. This is done using tokens.
There are 4 different roles that OAuth 2.0 can play in microservices security patterns: resource server, resource owner, authorization server, and client. These tokens are accountable for access to the resource prior to its expiry time.
There are also refresh tokens that are in charge of requesting new access after the original token has expired.
4. Don't show sensitive data as plain text
Plain text is easy to read, copy, and overwrite by people and machines. While working on securing the personally identifying information you need to make sure that it is not being displayed as a plain text. All the credentials – passwords and usernames should be masked during the storing in logs or records.
However, adding extra encryption above TLS or HTTP won't add protection for traffic traveling through the wire. It can only help a little bit at the point where TLS terminates, so it can protect sensitive data from accidentally dumping into a request log.
Additional encryption might help you protect data against those attacks that aim at accessing the log data but it will not help with those which try accessing the memory of the application servers or the main data storage.
5. Use Multi-factor Authentication
It is safer to use a multi-factor authentication system when a user comes to the website and you need to authorize that user. Most apps use two-factor authentication, which requires a username and password as well as another form of identity verification.
By using multi-factor authentication (MFA), you offer your users better protection by default as some aspects are harder to steal than others. For example, using biometrics for authentication takes microservice security on a whole new level.
6. Protect Public APIs From Denial-Of-Service-Attacks
It's not a rare situation for applications to get sabotaged by Denial-Of-Service-Attacks. Deliberately those are attempts of sending an overwhelming number of service messages with the aim of causing website failure. Such attacks can present themselves in many different shapes. They can also target the entire platform and network stack out of which most of the DoS attacks concentrate on volumetric flooding of the network pipe.
There is a way to prevent huge numbers of API requests causing the DoS attack or other problems with API services. You need to set a limit or restriction on how many requests in a given period of time can be sent to each API.
If the number exceeds the limit, you can block the access from a particular API for some reasonable interval, and also make sure to analyze the payload for threats.
7. Use Encryption Before Persisting The Data
We have already discussed additional encryption of sensitive data instead of showing it as a plain text. Another option that is highly recommended is that you encrypt the user data before persisting it.
You can also adopt some strong cryptographic algorithms such as RSA 2048+ or Blowfish. They make data transmission much safer. Remember to make sure that the algorithms are compliant with industry standards.
Microservices security requires non-trivial or ready-made solutions. We categorized some of the best practices that might help you with the security of your applications.
Nevertheless, remember that when it comes to security, there is always room and demand for innovation. It's always better to use cutting edge tools and technologies than sticking with old-fashioned approaches and hoping for the best.
Security Tips to follow while WFH due to COVID-19 [Infographics]
As this is the challenging time for both the employees and employers due to COVID-19, the demand for transitioning users to full-time remote workers is striking.
Here are some tips for protecting your devices and personal information.
Sumit Agrawal
CIS Benchmark for Google Android
Security configuration benchmarks are provided in this document which guides for establishing secure configuration posture for the Google Android OS. This benchmark will be useful for Android 10.0.x and hardware devices on which this OS is supported.
So the following settings have to be checked or changed:
Android OS security settings
Android OS privacy settings
Android OS chrome browser settings
Android OS can be secured by making the changes into settings of OS, which will reduce the probability of exploiting the device by an attacker.
E.g Ensure the device firmware is up to date.
Ensure that the device is updated with security patch levels.
To verify that the devices up to date to the most recent firmware version:
Tap settings gear icon
Tap system
Tap advanced
Tap System update
Verify that Android security patch level is current and that no new updates exist.
Follow the below steps to check and update the device security patch level:
Tap check for updates
Apply the update if available.
Similarly, we can ensure for other options like enabled screen lock, disabled pattern visibility, disabled smart lock etc. in the security settings section.
Privacy-related recommendations are provided in this section.
E.g Ensure 'Lock screen' is set to 'don't show notifications at all'
Disable the notifications on the lock screen.
To verify 'Notifications on the lock screen' are set to 'don't show notifications at all':
Tap apps and notifications
Tap notifications
Tap Lock Screen
6. Verify that the lock screen is set to don't show notifications at all.
Follow the below steps to set on the lock screen to 'don't show notifications at all':
6. Tap lock screen and set it to don't show notifications at all.
According to the recommendations, we can disable Use Location, Web and app activity, Device Information etc. in the privacy settings section.
E.g Ensure 'Microphone' is set to 'Enabled'
This setting controls if a site asks before accessing the microphone.
To verify if microphone is enabled:
Tap Chrome Icon
Tap Menu Icon
Scroll to the Advanced section
Tap Site settings
Verify that microphone displays Ask First.
Follow the below steps to Enable the microphone permission request:
Tap Microphone
Toggle to the On position.
Similarly, we can enable the settings for Location, Safe Browsing, Do Not Track options to secure Android OS.
Mobile devices with Android OS can be secured by following CIS benchmarks which help to protect the device from different threats.
Is CNSP the future of software development?
Application development methodologies or say SDLC are moving away from the traditional "waterfall" or "V" model towards more agile continuous integration delivery (CI/CD) processes with the end-to-end automation. This new approach brings a multitude of benefits, such as quick release time to market and faster delivery, but it also introduces security challenges since traditional security methodologies weren't designed to address these modern application workflows.
As developer teams adopt cloud-native technologies, security teams find themselves scrambling to keep up. Minimal prevention controls, lack of visibility, and tools that lack automation yield incomplete security analytics. All of these things increase the risk of compromise and the likelihood of successful breaches in cloud environments. Meanwhile, the demand for an entirely new approach to security emerges. Enter cloud-native security platforms.
Before we dive into what is a cloud-native security platform CNSP, let's first understand what "cloud-native" actually means.
What Does 'Cloud-Native' Mean?
The term "cloud-native" refers to an approach to building and running applications that takes full advantage of a cloud computing delivery model instead of an on-premises data center.
This process takes the best of what cloud has to offer
Deployability
Limitless on-demand compute power
and applies these principles to software development, combined with CI/CD automation, to radically increase productivity, business agility, and cost savings.
Cloud-native architectures are made up of cloud services, such as containers, serverless security, platform as a service (PaaS), and microservices. These services are loosely coupled, meaning they are not hardwired to any infrastructure components, allowing developers to make changes frequently without affecting other pieces of the application or other team member's projects – all across technology boundaries, such as public, private and multi-cloud deployments.
In short, "cloud-native security" refers to a methodology of software development that is essentially designed for cloud delivery and epitomizes all the benefits of the cloud by nature.
The 4C's of Cloud-Native Security
Let's start with a diagram that may help you understand how you can think about security in layers.
Note: This layered approach augments the defense-in-depth approach to security, which is widely regarded as a best practice for securing software systems. The 4C's are Cloud, Clusters, Containers, and Code.
As you can see from the above figure, each one of the 4C's depend on the security of the squares in which they fit. It is nearly impossible to safeguard against poor security standards in Cloud, Containers, and Code by only addressing security at the code level. However, when these areas are dealt with appropriately, then adding security to your code augments an already strong base.
The Beginnings of Cloud-Native Security
As more organizations have embraced DevOps and developer teams have begun to update their application development pipelines, Security teams quickly realized their tools were ill-suited for the developer-driven, API-centric, infrastructure-agnostic patterns of cloud-native security. As a result, cloud-native security platform products began to hit the market. These products on their own, they could not collect enough information to accurately understand or report on the risks across cloud-native environments. They were each engineered to address one part of the problem or one segment of the software stack. This forced security teams to juggle multiple tools and vendors, which increased cost, complexity, and risk in addition to creating blind spots where the tools overlapped but didn't integrate.
Enter Cloud-Native Security Platforms
Solving this problem requires a unified platform approach that can envelop the entire CI/CD lifecycle and integrate with the DevOps workflow. Just as cloud-native approaches have fundamentally changed how cloud is used, CNSP is fundamentally restructuring how the cloud is secured.
Cloud-native security platform shares context about infrastructure, PaaS, users, development platforms, data, and application workloads across platform components to enhance security. They also:
Provide unified visibility for SecOps and DevOps teams.
Dispatch an integrated set of capabilities to respond to threats and protect cloud-native applications.
Automate the remediation of misconfigurations and vulnerabilities consistently across the entire build deploy run lifecycle.
Cloud-Native Security Platform Future
In the past, organizations that wanted to embrace new compute options were unendurable by the need to buy more security products to support those options. Stitching together disparate solutions in an attempt to enforce consistent policies across technology boundaries became more of a problem than a solution.
Cloud-Native security platform, however, provides coverage across the continuum of compute options, multi-cloud, and the application development lifecycle. This allows organizations to choose the right to compute options for any given workload, granting them freedom without worry over how to integrate solutions for security. CNSP epitomizes the benefits of a cloud-native strategy, enabling agility, flexibility, and digital transformation.
The role of Identity Access Management(IAM) in Cloud Security
Most of the organizations are advancing towards the cloud-based environment. They are transferring their work either on the private or public cloud platforms through various vendors. But sometimes it is a challenging task for all the companies to keep the data safe and secure in the cloud. In the current scenario, the customer needs to face each program anywhere either on-premises or in the cloud.
What is Identity Access Management in Cloud Computing
The concept of identity in the cloud can refer to many things, but for the purpose of this discussion, we will focus on two main entities:
cloud resources.
IAM policies are sets of permission policies that can be attached to either users or cloud resources to authorize what they access and what they can do with it.
Roles of Identity Access Management in Cloud Security
IAM is crucial to protecting sensitive enterprise systems, assets, and information from unauthorized access or use. This represents the systematic management of any single identity and provides authentication, authorization, privileges, and roles of the enterprise boundaries.
The primary goal is to upgrade security and productivity by decreasing the total cost, repetitive tasks, and system downtime. Identity access management in cloud computing covers all types of users who can work with defined devices under unlike circumstances.
In a cloud system, the storage and processing of data are performed by organizations or with the help of third-party vendors. The service provider has to ensure that data and applications stored in the cloud are protected as well as the infrastructure is an insecure environment. Further, users need to verify that their credentials for authentication are secure.
There are many security issues that compromise data in the process of data access and storage in the cloud environment, especially in the case of data storage with the help of third-party vendors who themselves may be a malicious attacker. Though standards and best practices are available for overcoming such security problems, cloud service providers are reluctant in securing their network with the updated set of security standards.
Identity and access management is one of the best practices to measure cloud services. Presently, Identity and Access Management (IAM) provides effective security for cloud systems. IAM systems perform different operations for providing security in the cloud environment that includes authentication, authorization, and provisioning of storage and verification. IAM system guarantees the security of identities and attributes of cloud users by ensuring that the right persons are allowed in the cloud systems. IAM systems also help to manage access rights by checking if the right person with the right privileges is accessing information that is stored in cloud systems.
Currently, many organizations use Identity and Access Management systems to provide more security for sensitive information that is stored in the cloud environment.
How Identity Access Management can control Interactions with Data and Systems
IAM can move beyond simply allowing or blocking access to data and systems.
For example, IAM can:
Restrict access to data: Specific roles can access only necessary parts of systems, databases, and information.
Only allow view access: Users with such roles can only view data, they cannot add, update, or amend it.
Only permit access on certain platforms: Users may have access to operational systems, but not on development, testing, or PROD platforms.
Only allow access to create, amend, or delete data, not to transmit it: Some roles may not be able to send or receive data outside the system, meaning it cannot be exposed to other third parties and applications.
Based on a company's specific requirements, there are many ways to implement IAM policies to define and enforce exactly how individual roles can access systems and data.
Why Identity Access Management is a Vital IT Enablement & Security Layer
IAM offers several advantages over all other traditional products. Below is the list to understand the few benefits of identity management in cloud computing:
Enhanced Network Abilities: Identity access management (IAM) makes it simple in sharing the network capabilities with a complete grid of users who were connected with it.
Support On-demand improvement: 24*7 hours support and monitoring can be provided based on need.
Increase Overall Productivity: Cloud-based services are configured and hosted by service providers. As a result, many organizations can improve their overall productivity instead of worrying about the infrastructure.
Centralized Management System: Clients can be able to manage all their services and programs at one place with the cloud-based services. Identity access management can be done with one click on a single dashboard.
IAM in the cloud security controls access to resources within that enterprise system by incorporating user policies and restrictions with the verified identity. This is undoubtedly a great way of controlling information about users on the network. It is possible to identify, manage, and control user identities across the entire system by setting up policies, roles, and access. This is definitely a highly intelligent way of handling the security of the uniqueness of an enterprise.