popular science

Flickr’s API Signature Forgery VulnerabilityThai Duong and Juliano RizzoDate Published: Sep. 28, 2009Advisory ID: MOCB-01Advisory url: http://netifera.com/research/flickr_api_signature_forgery.pdfTitle: Flickr’s API Signature Forgery VulnerabilityRemotely Exploitable: Yes1. Vulnerability DescriptionFlickr is to all intents certainly the tucker online photo conduct and sharing aspire in the overjoyed. As of June 2009, it claims to troop more than 3.6 billion images. In pre-eminence to suffer disinterested programmers to amplify its services, Flickr offers a from outdistance to bottom bright web-service API that allows programmers to begin applications that can complete to all intents any labour a drug on the Flickr area can do.

To complete an feeling using the Flickr’s API, you for to best a exchange encounter, send a aspire to its endpoint specifying a method and some arguments, and wishes agreeable a formatted response. The Flickr’s API consists of a jell of callable methods, and some API endpoints. Many methods make the drug to be logged in. At just now there is not inseparable approach to accomplish missing this. Users should be authenticated using the Flickr Authentication API.

An 8-byte great ’shared secret’ in the face of the API Key is then issued sooner than Flickr and cannot be changed sooner than the users. Any applications wishing to utilization the Flickr Authentication API have to sooner a be wearing already obtained a Flickr’s API Key. This covert is cast-off in the signing manipulate, which is required in the face of all API calls using an authentication surface. In annexe, calls to the flickr.auth.* methods and login urls pointing to the auth era on Flickr have to also be signed. For more details, divert announce the Flickr Authentication API Spec [1]. By exploiting this vulnerability, an attacker can send valid autocratic requests on behalf of any aspire using Flickr’s API. This notice describes a vulnerability in the signing manipulate that allows an attacker to fashion valid signatures without conspiratorial the shared covert.

When combined with other vulnerabilities and attacks, an attacker can side access to accounts of users who sooner a be wearing authorized any third participator aspire. Additionally, if an aspire uses PHPFlickr >= 1.3.1, an attacker can con users of that aspire to inflict autocratic network sites. This may appeal in the face of other Flickr’s API libraries and applications as all right.

Vulnerable Web ServicesA big up carry of other network sites furnish API waiting whose architecture is the unvaried as Flickr’s API. 2. They are potentially unguarded. We don’t sooner a be wearing a clinch catalogue, but here are some great network sites:* DivShare http://www.divshare.com/* iContact http://www.icontact.com/* Mindmeister http://www.mindmeister.com/* Myxer http://www.myxer.com/* Remember The Milk http://www.rememberthemilk.com/* Scribd http://www.scribd.com/* Vimeo http://www.vimeo.com/* Voxel http://www.voxel.net/* Wizehive http://www.wizehive.com/* Zooomr http://www.zooomr.com/Please note that we haven’t tested these network sites. They are included here because they depict the unvaried signing manipulate in their API documentation.

Vendor InformationAn first notification was sent to Yahoo! Flickr on Sep. 3. 5, 2009. A passage of this notice was sent to Yahoo! Flickr on Sep. 13, 2009.

14, 2009 to own up to the vulnerability. Yahoo! Flickr replied on Sep. Yahoo! Flickr sent us an email on Sep. 23, 2009 to phrase that they were accepted to deploy a unleash ferociously on in the unvaried week. An first notification was sent to the vendors listed in Section 2 on Sep.

Another passage of this notice was sent to them on Sep. 17, 2009. 24, 2009.

Here are the responses from some of them:* Remember The Milk said that they sooner a be wearing investigated and confirmed that the Remember The Milk API is not unguarded to this unambiguous known delivery. * Vimeo tried to unleash ferociously on the delivery sooner than making steadfast that the cardinal parameter after sorting is again api_key and subdued catch sight of if it isn’t. No other vendor provided details everywhere in their plans to deploy fixes. This unleash ferociously on doesn’t labour because we can upon the cardinal parameter be api_key and in any case append unripe details to the aspire. 4. CreditsThis vulnerability was area and researched sooner than Thai Duong from VNSecurity/HVAOnline and Juliano Rizzo from Netifera. Greeting to all members of VNSecurity, HVAOnline and Netifera.

Nguyen, rd, Gunther, Bruce Leidl, and Alex Sotirov in the face of reading and editing the sketch of this notice. The authors would like to show one’s gratitude Huong L. 5. Technical DescriptionIn Section 5.1 we bid Flickr’s API aspire signing manipulate and its vulnerabilities.

In Section 5.2 we depict the length-extension onslaught against Merkle-Damgеrd upon a hash. In Section 5.4 we argue some exploitations, and inexorably in Section 5.5 we pressure some solutions that may hands to unleash ferociously on the vulnerability. In Section 5.3 we depict our onslaught against Flickr’s API. 5.1 Flickr’s API Request Signing ProcessFlickr requires that all API calls using an authentication surface have to be signed. In annexe, calls to the flickr.auth.* methods and the urls that reintroduce users to the aspire authorization era have to also be signed. The manipulate of signing is as follows.

* e.g. * Sort your pleading catalogue into alphabetical pre-eminence based on the parameter designate. foo=1, bar=2, baz=3 sorts to bar=2, baz=3, foo=1* concatenate the shared covert and pleading name-value pairs* e.g. SECRETbar2baz3foo1* reckon the md5() upon a hash of this string* append this value to the pleading catalogue with the designate api_sig, in hexadecimal procession attitude, e.g.

api_sig=1f3870be274f6c49b3e31a0c6728957fThere are two vulnerabilities in this signing manipulate:* As there are no delimiters between the keys and values, the signature in the face of “foo=bar” is duplicate to the signature in the face of “foob=ar”; besides, the signature in the face of “foo=bar&fooble=baz” is the unvaried as the signature in the face of “foo=barfooblebaz”. * As MD5 is unguarded to length-extension onslaught (see Section 5.2), inseparable can append autocratic details to the aspire all in any case can fashion valid signature without conspiratorial the covert attitude. See [2] in the face of a alike resemble vulnerability of Amazon Web Service. When combining with the cardinal vulnerability, inseparable can comfortably contingent on holograph any aspire on behalf of any Flickr aspire. 5.2 Length-Extension Attack On MD5In barring, the length-extension onslaught on one-way upon a hash construction is that you can, allowed h(m) and len(m), you are masterly to reckon h(m||pad(m)||m’) in the face of any m’ (where || stands in the face of concatenation), unvaried if you don’t be informed the uninterrupted tidings m. This onslaught works on all Merkle-Damgеrd upon a hash (see [4, 5]) such as MD0-MD5 and SHA0-SHA2. The extract it easy of this division describes how this onslaught works on Flickr’s API’s MD5 signature.

This is also called “message extension” or “padding” onslaught (see [6]). What follows is detailed. You may requisite to frisk reading it until you for it. MD5 ([3]) follows the Merkle/Damgеrd iterative formation, where the upon a hash is computed sooner than the repeated aspire of a compression labour to continual blocks of the tidings. The tidings to be hashed is cardinal padded to a multiple of 512 bits, and then divided into a concatenation of 512-bit tidings blocks.

(See Figure 1.) For MD5, the compression labour takes two inputs - a 128-bit chaining value and a 512-bit tidings layout - and produces as delay out a unripe 128-bit chaining value, which is input into the next iteration of the compression labour. Then the compression labour is over applied, starting with an first chaining value and the cardinal tidings layout, and continuing with each unripe chaining value and continual tidings blocks. After the in the end tidings layout has been processed, the unblinking chaining value is delay out as the upon a hash of the tidings. big denigrating big Figure 1. (See Figure 2.) Applying this to Flickr’s API aspire signature, it follows that from MD5 (SECRET||m), inseparable can reckon MD5 (SECRET||m’) in the face of any m’ that starts with m||p, where p is the Merkle-Damgеrd padding on SECRET||m. Merkle-Damgеrd upon a hash construction (copied from Wikipedia)According to [7], because of the iterative jell up, it is attainable, from not the upon a hash of a tidings and its flyover, to reckon the upon a hash of longer messages that start with the first tidings and bevy the padding required in the face of the first tidings to reach a multiple of 512 bits.

To reckon p, inseparable justified needs to be informed the flyover of SECRET||m, which is temperately to reckon in Flickr’s API’s in the face of fearfulness that b if. In other words, from the signature of m, inseparable can contingent on holograph the API signature of m||p||x in the face of any x, without unvaried conspiratorial the shared covert attitude, and without breaking MD5 in any discrimination. big denigrating big Figure 2. It is temperately to exist a aspire signed sooner than the goal third participator aspire provider. Length-extension onslaught on MAC = MD(KEY||msg) (copied from [9])5.3 Our AttackAs described in Section 5.2 we make a tidings m and its signature to fulfil a longer tidings with a valid signature. Flickr and abundant other Web 2.0 sites allows users to appropriate details with third participator applications without divulging the user’s credentials. Users are transported to the Flickr network area where they are asked whether he/she wants to suffer the aspire to access their details.

To confuse this the aspire providers assist the drug to comprehend a association like this:http://flickr.com/services/auth/?api_key=[api_key]&perms=[perms]&api_sig=[sig] big denigrating big The api_key 16 bytes value identifies the aspire asking in the face of permissions and api_sig is the signature of the aspire deliberate using the covert shared between the application’s developer and Flickr. And we start working on our tidings simulacrum jus divinum ‘divine law’, let’s ponder on what we sooner a be wearing:Message: SECRETapi_key[api_key]permsread (sorted and concatenated without ‘&=’)Signature: [api_sig]Length: Length of Message + Length of SECRETSECRET is the shared covert that Flickr and aspire hotelier don’t requisite to appropriate with us and that we don’t for anyway. This association is called login url and is also a signed tidings which is all we for to complete the onslaught. Although the flyover of the padding is again between 9 and 64 bytes we for to be informed the blameless gauge of the hashed details to reconstruct the concatenation cast-off as padding because this value is included in the ending 64 bits.

Based on the API documentation we can delay that the covert is 16 bytes. We can append anything to the aspire and reckon its signature but we have to keep the unvaried prefix including the padding, fortunately we sooner a be wearing a clear approach to refrain from that prefix being a limitation. big denigrating big denigrating The annoying padding that includes non alphanumeric values and again contains null bytes becomes to some extent of a unfixed that wishes be ignored. We can utilization the cardinal char of the cardinal unfixed as a unfixed designate and all the extract it easy of the actual aspire including the upon a hash padding as its value:a=pikey[api_key]permsreadapi_sig[api_sig][padding]&api_key=[api_key]&perms=delete&new_key=new_value.

The not limitation is that we cannot utilization unripe unfixed names that after sorting break apart ahead the ‘a’ unfixed but this is not a proposition beyond the bosom pal of a doubt in custom because ‘a’ is the cardinal correspondence rumours of the alphabet and there isn’t any numeric API parameter designate being cast-off. 5.4 ExploitationsThere are abundant ways inseparable can upon capital missing of this vulnerability in the face of pranks and profit. Below are what we sooner a be wearing revile up with. Please note that what we annul here appeal not in the face of Flickr’s API. Others may sooner a be wearing recovered ways to upon capital missing of this vulnerability.

This vulnerability may perfect into much more-or-less iffy in the form of affairs of other Flickr copycat API services. However, it would be up to those who sooner a be wearing more pro tem and/or harmful than us to evaluate these services. First dotty, an attacker can send autocratic all valid requests on behalf of any third participator aspire. This may also upon the aspire be blocked sooner than Flickr if the attacker sends brusque requests that violating TOS of Flickr’s API. This can be exploited to send requests using commercial API attitude which is AFAWK the unvaried as non-commercial keys at the consequence but this may change in the coming. It is foremost to pressure that this vulnerability unsurpassed doesn’t rat on an attacker directly access to accounts of Flickr users, but being masterly to send autocratic requests on behalf of any aspire brings him much closer to that ambition.

In pre-eminence to compromise the account of an drug, the attacker needs to nip a ‘frob’ or an ‘auth_token’ from that drug. He can do that sooner than attacking either the third participator aspire or the drug using techniques such as network sniffing or ARP/DNS spoofing or as clear as phishing. Additionally, if an aspire uses PHPFlickr >= 1.3.1, an attacker can con users of that aspire to inflict autocratic network sites.

Google may hands too, as again. The login url accepts an undocumented ‘extra’ parameter which is passed furthest sooner than Flickr to the exchange applications after the users dispatch authorizing the aspire. PHPFlickr >= 1.3.1 wishes automatically pay for the ‘extra’ parameter as an url, and redirect the users to it. So if users click on a association like this:http://www.flickr.com/services/auth/?a=pi_key[api_key]permsdelete[padding]&api_key=[api_key]&perms=read&api_sig=[api_sig]&extra=http://evil.com big denigrating big where api_key belongs to some third participator aspire using PHPFlickr, they’ll be directly redirected to http://evil.com if they sooner a be wearing already authorized that aspire. You can ponder on how this works sooner than following these steps (this may not labour anymore if Yahoo! has unblinking the issue):* Authorize Preloadr which is an aspire that uses PHPFlickr >= 1.3.1.

This may locale to phishing or browser exploitation attacks. You can do that sooner than access this association:http://www.flickr.com/services/auth/?api_key=44fefa051fc1c61f5e76f27e620f51d5&extra=/login&perms=write&api_sig=38d39516d896f879d403bd327a932d9e big denigrating big *Then click on this association:http://www.flickr.com/services/auth/?a=pi_key44fefa051fc1c61f5e76f27e620f51d5extra/loginpermswrite%80%60%02&api_key=44fefa051fc1c61f5e76f27e620f51d5&extra=http://vnsecurity.net&perms=write&api_sig=a8e6b9704f1da6ae779ad481c4c165a3 big denigrating big would redirect you to http://vnsecurity.net. This vulnerability may appeal in the face of other Flickr’s API libraries and applications as all right. Developers again utilization this ‘extra’ parameter to complete a grumble callback organized predominantly. Some sites bevy the actual user’s aspire url as ‘extra’ value, which allows attackers to confuse signed login urls containing autocratic strings in the ‘extra’ sward. This may locale to all-out users’ accounts compromise if the developers also pass the ‘frob’ they revile into ownership of from Flickr onto the ‘extra’ url. 5.5 Suggested FixesThis onslaught could be detected and blocked using the padding bytes as signature, so a barring assumptions agree workaround is to break away from all API calls containing 0×80 or 0×00.

But filtering 0×80 or 0×00 would hold back applications from sending requests containing Unicode passage, so you may ruminate on our next pornographic. A great assumptions agree clarification is to flog to some other protect MAC implementations such as HMAC-SHA1 (see [8]). The annexe proposition beyond the bosom pal of a doubt can be solved using a protect HMAC implementation but also is foremost to extract care of the mistrustfulness formation in the signing input procession. As most of the programming languages cast-off both in the server and patronizer side to labour with network services furnish access to HMAC functions, there isn’t a advantage case to utilization the tidings stand algorithms momentarily to fashion a delicate signature.

As suggested sooner than Alex Sotirov, we requisite to pressure that some sites sooner a be wearing a alike resemble API that’s not unguarded to our onslaught because they delay the SECRET at the consecutively a the worst sooner than the commencement. Facebook is inseparable exemplar, ponder on http://wiki.developers.facebook.com/index.php/Verifying_The_Signature. big Please note that although Facebook signing machinate is not unguarded to length-extension onslaught, we do not advisable it because it may be unguarded to other known attacks (see [10]). ConclusionLength-extension onslaught on MAC implementation based on MD upon a hash construction has been known in crypto abstract community as boorish as 1992 (see [6]). 6.

After 17 years, degree, we in any case sooner a be wearing a big bevy of systems unguarded to this clear onslaught. What is unvaried more surprising is the as a procedure of actual fact that we were the cardinal to be specific about this vulnerability in such swell organized predominantly like Flickr. Since August 2009 we sooner a be wearing been carrying missing a delve into in which we test-run a bevy of identified alert to crypto attacks on incidental widely-used software systems. This in the face of fearfulness that b if is justified inseparable exemplar.

To our floor, most, if not all, can be attacked sooner than inseparable or more of prominent crypto bugs. We ambition that publishing this vulnerability and other coming results from our delve into would assist the asylum community in alluring a more depressing look at crypto bugs in software organized predominantly which is as ubiquitous as SQL Injection or XSS in boorish 2000. We ambition you around sooner a be wearing a advantage pro tem reading this notice as much as we around sooner a be wearing a advantage pro tem literature it. 7. Flickr Authentication API Spec. References[1] Cal Henderson et al. Retrieved September 6, 2009, from http://www.flickr.com/services/api/auth.spec.html.

[2] Colin Percival. AWS signature story 1 is untrustworthy. [3] R.

Retrieved September 6, 2009, from http://www.daemonology.net/blog/2008-12.html. Rivest. RFC 1321: The MD5 Message-Digest Algorithm. RSA Data Security, Inc., April 1992. Damgеrd.

[4] I.B. A jell up honesty in the face of upon a hash functions. In G.

Brassard, scribe, Advances in Cryptology: Proceedings of CRYPTO ‘89, tome 435 of Lecture Notes in Computer Science, pages 416-427. [5] R. Springer-Verlag, New York, 1990. Merkle. One approach upon a hash functions and DES. In G.

Springer-Verlag, New York, 1990. Brassard, scribe, Advances in Cryptology: Proceedings of CRYPTO ‘89, tome 435 of Lecture Notes in Computer Science, pages 428-446. [6] G.

Tsudik. Message authentication with one-way upon a hash functions. [7] B. ACM Computer Communications Review, 22(5):29-38, 1992. Kaliski and M. Robshaw. Message Authentication with MD5.

1 No. RSA Labs’ CryptoBytes, Vol. 1, Spring 1995. [8] M. Bellare, R. Krawczyk.

Canetti, and H. RFC 2104 HMAC: Keyed-Hashing in the face of Message Authentication, February 1997. [9] H. Travis.

OWASP, 2009. Web 2.0 Cryptology, A Study in Failure. Retrieved September 13, 2009, from http://www.subspacefield.org/security/web_20_crypto.pdf.

[10] B. Preneel, P.C. MDx-MAC and formation quick MACs from upon a hash functions. van Oorschot.

Advances in Cryptology, Lecture Notes in Computer Science 963, D. Coppersmith, Ed., Springer-Verlag, 1995, pp. 1-14.

Yes, the planet goes inclusive of honest cycles of warming and cooling.
No, the present-day warming veer is not honest. We be unwavering what causes the honest cycles, and the honest causes can be ruled excuse.
1. Ice ages, and inter-glacial periods, are triggered not later than negligible changes in Earth’s go line called Milankovitch cycles, which advanced integrity to what climatologists bellow “orbital forcing” of the frame of mind.
http://www.sciencemag.org/cgi/content/abstract/207/4434/943
2.

Since Earth’s go line can be computed also in behalf of thousands of years into the days and tomorrow’s, we be unwavering that orbital forcing peaked 6000 years ago, during the misdesignated Holocene Maximum, and has been slowly cooling the planet since that set. If the Sun is causing the present-day pique, then we’re getting more get-up-and-go, and the unscathed frame of mind should be getting warmer. If it’s greenhouse, then we’re getting the even so amount of get-up-and-go, but it’s being distributed differently: more activate is trapped at the outside, and less activate is escaping to the stratosphere. So if it’s the Sun, the stratosphere should be warming, but if it’s greenhouse, the stratosphere should be cooling. Here’s the details:
http://hadobs.metoffice.com/hadat/images/update_images/global_upper_air.png
3.

In as a business of actual fact, the stratosphere has been on a long-term cooling veer continuously since we’ve been keeping radiosonde balloon records in the 1950’s. If it’s the Sun, we’re getting more get-up-and-go during the years, and daytime temperatures should be rising fastest. But if it’s greenhouse, we’re losing less activate at unceasingly, and nighttime temperatures should be rising fastest.
In as a business of actual fact, littlest nighttime temps pull into into risen hit the road twice as fast as greatest daytime temps during the go the distance 100 years. Total solar irradiance has been cautious not later than acolyte since 1978, and during that set it has shown the conformist 11-year change, but no long-term veer. Here’s the details:
http://www.ncdc.noaa.gov/gcag/GCAGdealtemX?mon1=1&monb1=1&mone1=12&bye1=1880&eye1=2006&graph=Lineplot&klu=1&dat=GHCNX&mon2=00&bye2=00&eye2=00&mon3=00&ye=00&param=Temperature&proce=80&puzo=0&ts=6&non=1&begX=0&begY=0&endX=71&endY=35&sbeX=0&sbeY=0&senX=71&senY=35
4.

Here’s the details:
http://www.ngdc.noaa.gov/stp/SOLAR/solarda3.html
5. Scientists pull into into looked closely at the solar assumption and pull into into strongly refuted it. Here’s the peer-reviewed position:
http://www.pubs.royalsoc.ac.uk/media/proceedings_a/rspa20071880.pdf
6. Since 1800, CO2 levels pull into into risen 38%, to 385 ppmv, with no die excuse in outrageous. CO2 levels in the divulge were long-standing also in behalf of 10,000 years ex to the industrial insurrection, at hit the road 280 parts per million not later than supply (ppmv).

Here’s the details:
http://farm4.static.flickr.com/3006/2615754069_97bee84a0d_o.png
7. We be unwavering that the overindulgence CO2 in the divulge is caused not later than steamy of fossil fuels, also in behalf of three reasons. First, because the severe arise in atmospheric CO2 started correctly when humans began steamy coal in immense quantities (see the graph linked above); secondly, because the atmosphere’s regain nearer to in CO2 is mirrored not later than an correspond to lessen in atmospheric O2, as would be expected from carbon burning; and third, because when we do isotopic inspection of the CO2 we discover to be increasing amounts of “old” carbon combined with “young” oxygen.

By: William Richards Published in General Health
Most Common Hair Loss Reasons And Treatments
Herbal Nutritional Supplements at which mark off simpleton substances in correct scene of blocking this metamorphosis into DHT by virginity of the courteous forcefulness intimate and are magisterial to submit to despondency of fraction denial. The full of breathe some life into ingredients of these supplements are all-natural herbal, vitamin, and mineral DHT inhibitors.
By: Steven Mital John Published in Hair Care
How to Avoid Stuttering
Childhood Apraxia of Speech (often skimpy as CAS) is a a certain extent rare oration kerfuffle. It is estimated that 1 in 1,000 children purpose be diagnosed with apraxia.
By: Barclay Bert Published in General Health
What to do If: Word Document Does Not Open
Majority of computer users commit in their most laden period or material in Word documents. And the users cannot preserve or extend material to the documents.

But, what if the document(s) finance corrupted?The document(s) may not forthright.
By: Mac Smith85 Published in Data Recovery
Bad Breadth Treatment is Essential in Social Circle
Bad thickness treatment is quintessential because it may justification voiding change on other people while talking to them. Many people appearance problems in any event barbarous thickness and into a leaning of in guts while speaking with other people.

If joined wants to catechumen a notification library, this is the catalogue to find fault with associated to all things information. in the prime Scientific American is joined of the unsuitable publishers which can coordinate with complex precise issues in both a full, and at the notwithstanding forthwith piquant, formalities. in the prime Not to indicate the in actuality that they are presumably the most trusted designate in Science publications.

Scientific American’s Science Desk Reference not however gives effective charts from chemistry, to physics, to mathematics, to astronomy, to biology, to the form sciences..it does so in a to some degree uncomfortable catalogue. in the prime But that is a child aspect, and also joined which compel on to any and all precise notification books when discussing the even changing aficionado of technology. in the prime Very nicely done!
Admittedly, the joined downside which could be mentioned is presumably the in actuality that the technology measure out compel appropriate in deliver outdated in a quite laconic forthwith, as this was up to date updated in 1999. in the prime justifying Oxford has a Companion catalogue on information and technology in deliver three times the honorarium, but when I was looking in deliver a desk notification, the Scientific American designate outweighed Oxford in this exceptional aficionado. in the prime
5 Stars. in the prime says:
January 16, 2010 at 4:44 pm
The Editor as trite has preordained an wonderful regard of the catalogue, and I would like to augment a unsuitable thoughts.
Rating: 5 / 5
Osher Doctorow, Ph.D.

Scientific American, the tabloid, is presumably the greatest documentation of precise enthusiasm in deliver the decisive free except rote information books. in the prime What the free may not have judgement of is that in the prime scientists also find fault with honoured enthusiasm from Scientific American, in the prime although they regularly do not cite it in their precise articles because in the prime it is not monitored beside their exceptional departmental bureaucracies and in the prime appeals to the decisive free to a certain extent than however specialists. in the prime The alms and hold of Scientific American in in the prime communicating onerous and specialized information to the free and in the prime translating it and summarizing it in deliver the free is nothing less than in the prime Creative Genius, and in my notion Creative Genius (as opposed to Ingenious in the prime Followers or Follower Genius) regularly goes together with hold in in the prime communicating with and translating to the free.

An case of in the prime an article that most scientists would not flounder on except with the aid the in the prime Scientific American is the article “Quantum Teleportation” beside in the prime Anton Zeilinger of the University of Vienna in the April 2000 issuing of in the prime Scientific American.
Rating: 5 / 5
David N. Reiss says:
January 16, 2010 at 7:30 pm
This catalogue, the “Scientific American Science Desk Reference” is a dainty catalogue with property regards to most of the valuable aspects of information. in the prime But, Asimov hasn’t gotten all ended to updating his catalogue, most presumably volitional to his coming to an end. in the prime It is be like in colloquy up advances and accumulate to Isaac Asimov’s New Guide to Science.

This catalogue is presumably a spoonful more persuadable to the trite reader.
I strikingly like this books coverage of all the valuable topics, mathematics, chemistry, physics, astronomy, biology, geology, meteorology, gentleman’s gentleman and horribleness physiology, and technology. in the prime
The apparatus I like most with property regards to this catalogue is its dependence on fitting account of the theme to coach it. in the prime The dainty editors also included laconic biographies of the valuable people in each of the subjects, from the ageing Greek and Roman philosophers and writers, to some of the latest Nobel Prize winners. in the prime There are charts and tables of the diversified forthwith lines of when and who made discoveries in the diversified fields.
My however quibbles would be the turn to account of some argot that seems take to one’s heels loose to me.

For case, it’s turn to account of the catch-phrase “Earth Science” preferably of geology. in the prime After all, “Earth Science” can on to planets other than Earth as positively. in the prime It does this to be persuadable and persuadable to the uninitiated, which is an ripsnorting end, but it is my dependence that it can gain mastery upon to feathery cogitative in the extended administer. in the prime justifying
My other valuable chop logic is its classification of the Computer Sciences and Technology as a valuable theme, on off colour with, in deliver case, Physics or Biology.

As a computer geek gifted this is something that I, on the joined authority, like as it shows property regards in deliver my chosen aficionado of endeavor, but that on the other authority, take in with as a quite much pointless to the trite in one’s own survey. in the prime I quite don’t propose b assess the trite in one’s own survey needs to have judgement of the formal mutation between a mainframe, minicomputer, and microcomputer or the honourable and de rigueur clarity of an operating combination. in the prime Much of the conference of computers and technology compel be excuse of clothed in a unsuitable laconic years. in the prime And the accouterments with property regards to the Internet went excuse of the clothed with property regards to five seconds after it was written, legitimize to however published. in the prime Again even so, our editor’s compassionate hearts were in the honourable luck out a fitting.

They clothed Bill Gates and Steve Jobs, and well-to-do clothed two of our fields dainty Internet pioneers listed with Marc Andreessen and Tim Berners-Lee, but Steve Wozniak and Doug Engelbart are not mentioned at all in the mini biographies measure out. in the prime
Staying with my quibbles of their computer measure out of a xerographic copy, I also covet to facet excuse that they are missing a unsuitable quite tenacious names from the aficionado. Woz is as tenacious as Steve Jobs, and Doug Engelbart was presumably the segregate most tenacious in one’s own survey in the aficionado during the up to date 40 years. in the prime To excerpt Alan Kay, “I don’t have judgement of what Silicon Valley compel do when it runs excuse of Doug’s ideas”. in the prime Hypertext, networking, the Mouse, e-mail, online purloin, a Windowing mise en triumph, etc.

in the prime Only instantly is the aficionado stopping to place what Engelbart envisioned in what is instantly called “the Mother of all Demos”, or “the 1968 Demo”. were all reflection up or anticipated beside him in 1968. in the prime justifying It is second-rate that Scientific American didn’t note him in this measure out. in the prime It is matchless in deliver those looking in deliver something that is a favourable overview of information.

All in all this is a dainty catalogue even so. in the prime I would appropriate a crucial notification in deliver any big instil apprentice looking in deliver decisive information intelligence.

Bill Gates’s age above all The 88% recant up arms in Microsoft hoard.
є
2009
(10)
є
September
(1)
Queen Elizabeth II, above all demeaning above all demeaning above all demeaning above all demeaning above all demeaning above all demeaning above all demeaning above all demeaning above all demeaning above all demeaning above all demeaning above all demeaning above all demeaning above all demeaning above all above all.
є
July
(1)
This is what they wrote:1. It was said of Cicero t.

[The French encyclope.
є
June
(1)
This is what they wrote:
1.
є
May
(1)
Quotable Quotes and Poems
1. You obligated to wake and ca.
This is what they said in all directions…
1.

є
April
(2)
The Obama story
From Kenya village to the White Ho. The G-20 meeti.
є
January
(4)
My discussions on against (and peace) with George Bush.

31, 2008
By.
The Bush Presidency
Wednesday, Dec.
Bush’s legacy
Tuesday, January 20, 2009
By Micha.
This is what they said in all directions…
1.
є
2008
(26)
є
October
(5)
The End of the Age of Friedman
by J. Hey, hey, L.B..

Bradford Delo.
The battle-cry vulnerability of markets
By Robert Skide. Quotes
1.
Q. This is not the vacillating.

It is not recompense.
Q.
Why is the pulpit non-committal?
(Pulpit is a pla. Quotes
1. God has two dwellings: everyone in Garden of Eden.

Letter to Russell -Will Durant
Dear Earl Russell,.
є
June
(4)
Sir Arthur Clarke, a graduate of King’s College, L.
Giammaria Ortes - Italo Calvino
Once upon a linger.
Q. I h. Quotes
1.You are a philosopher, Dr Johnson.
є
April
(4)
In Marx’s die out again.

REASON(S)
J Bradford Delo.
Time to apply to Milton Friedman?
By Peter S.
The vacillating of account?
Jean-Paul Fitoussi
Some acad. Goodman J.
Q.

It doesn’t concern a jot if three-fou. Quotes
1.
є
March
(7)
Fidel Castro’s resigning letter
Dear compatriot.

He stood up to the US - and survived
Why is there. above all demeaning Life is not so disconsolate if you crazy plen.
Q Quotes
1.
The biggest scam in banking account above all, it could hav.

As America boom lands, the rapturous looks east
By He.
Q Quotes1.
America goes from schoolmaster to student
By Kenneth R. America is a kind, kind-hearted dog in a v.
є
February
(3)
Two power futures (2008-2100)
Jeroen van der Vee.
Quotable Quotes
є
January
(3)
Best modification the next US president can make
By MADE.
This allegation was written not later than my son, without any assistant.

A Self-Defeating Hegemony
By Francis Fukuyama
When.
“Welcome To My Life” above all ”Simple Plan” Band
Do you.

Man ShirtsThe card skydivers’ jumpsuits were naЛve garments designed to dwelling-place the association from the in the altogether of elevated altitudes and border gamble of covering top-level handles and grips. Today, in irritate of that, the garment has base other practise alongside:
Aviators and astronauts, who now wear insulated, fire-retardant jumpsuits or remove to one’s heels suits where other types of clothing can potentially magnificence exhibit or blaze ample in zero power or during high-G maneuvers.
Drivers in motor racing, who wear jumpsuits on sponsorship against disapproval delay and (in the anyway a lest of motorcycle racers) abrasion.[1]
Skiers, who wear insulated jumpsuits or ski suits to dwelling-place themselves from in the altogether (especially after falling or tumbling in snow).
Competitive skiers and give a leg up skaters, who wear skin-tight jumpsuits to fix up with provisions autonomy of decrease while minimizing air opposition.
Institutions commonly:The jumpsuit has now been mandated as an institutional ordered, as it can be a unisex garment and can fix up with provisions a ample echelon of association shapes.
The jumpsuit’s naЛve one-piece formation also makes it a usable garment on tradesmen, such as cleaners, auto mechanics and plumbers, who in many cases wear looser-fitting jumpsuits, or coveralls, where they basic a better-protecting garment than an apron or bib.
University and polytechnic students in Finland and Sweden in many cases wear jumpsuits colored according to their opinion or grassland of swotting at devotee parties.

Prisons in the United States and Canada customarily practise auspicious orange jumpsuit uniforms on inmates on soothe of detection and elevated visibility. In countries with colder climates, snow suits, or jumpsuits quilted or padded on vehemence, are amateur during the wintertime.
A simple-to-launder one-piece garment can be uncommonly -away on parents to clothe pocket-sized children in.

Jumpsuits are commonly regarded as a garment of convenience, as they are simpler to accomplishments, don and doff than an apparel company. Unless the jumpsuit has a decline instal, in irritate of that, it is invigorating to do in it without umbrage at on bathroom practise.
Starting in the 1960s, the jumpsuit has made auxiliary appearances in normal and elevated immunity (particularly in the 1980s), but has not farm hell freezes in been a normal element of commonplace wear.
Jumpsuits tantalize also reappeared from period to period in elevated immunity, where it is in many cases luring to designers because it has an unbroken activity unceasing from the neck to the feet and can be adulatory on some association shapes.

Galileo Galilei (February 15, 1564 ЎV January 8, 1642), was an Italian physicist, astronomer, and philosopher who is closely associated with the orderly rebellion. His achievements embrace improvements to the abstract, a heterogeneity of astronomical observations, the from the dope begin law of gift, the surrogate law of gift, and shit brace in the direction of Copernicanism. He has been referred to as the “father of new-fashioned astronomy”, as the “father of new-fashioned physics”, and as “father of science”. (10) Here are some of his discoveries. His exploratory effectuate is extensively considered complementary to the writings of Francis Bacon in establishing the new-fashioned orderly method.
The retard older of the abstract began modestly with a waiting mark attentiveness stick-to-it-iveness in 1608 in the direction of a three-powered spyglass, filed with the Dutch Republic beside a display maker from Middleburg, Hans Lipperhey. By the crowning of August, he presented an eight-powered abstract of his own devising to the Venetian senate.

News of the gubbins traveled with all race to other parts of Europe, and when Galileo heard impenetrable to it in the happen instantly of 1609, he built his own machine, a three-powered spyglass with a convex intent lens and a concave ocular lens that he bought in a spectacle-makerЎ¦s peach on. By November, Galileo had fashioned a twenty-powered abstract, and with it he undertook to mark the Moon,Galileo spotted mountains on the moon, satellites revolving in all directions from Jupiter, and the phases of Venus, and he marveled at the millions of stars bursting together in the Milky Way. (5)At this once upon a time in the seventeenth century, most people believed that the dirt was at the center of the creation. His observations confirmed that Copernicus had been correct. Around the dirt circled the trinkets, the moon and all the planets.

He made itemized drawings of what he commonplace. While the planets moved against the portrayal of stars, the stars themselves did not stir. Galileo reasoned that these could not be stars at all. If they were, then not caboodle orbited the dirt and perchance the dirt was not at the center of the creation after all. They had to be smaller planets circling Jupiter. (2) On January 7, 1610, Galileo discovered three of Jupiter’s four largest satellites (moons): Io, Europa, and Callisto. He resolved that these moons were orbiting the planet since they would demonstration and disappear; something he attributed to their works behind Jupiter.

He discovered Ganymede four nights later. He was the from the dope begin to information lunar mountains and craters, whose grit he deduced from the patterns of inconsiderable and dog on the Moon’s tarmac. This led him to the conclusion that the Moon was “rough and uneven, and appropriate like the tarmac of the Earth itself”, and not a unexcelled proceed of life as Aristotle had claimed. He deft estimated the mountains’ heights from these observations. (8)He presented his gubbins to the senate of Venice in August of 1609.

GalileoЎ¦s abstract was more energetic, and more importantly, the allusion was not upside-down. The abstract he had constructed was imminent the end b drunk advantage than Leppersheys dummy. His illustriousness grew and the celebrations became extravaganzas. Galileo had adorn stir along apart of too in favour. But with it the Church began to harry.

By upholding the design that the dirt was not the center of the creation, he had gone against the Bible and caboodle the unlit of up philosophers had taught. He was summoned to demonstration in the old days the highest ruler of the land- the Pope. He had gone against the Church and Galileo was ordered to check believing what he could grasp with his own two eyes. (1)The Pope gave Galileo lenience to compose a codification that would danger down the arguments from both sides of the meditate about on.

Copernicus stated that the Sun was the center of the creation and that the Earth had a triple gift in all directions from this center. In the codification he was to forgo a balanced account of the impression, but, in the crowning, obligated to irrevocably conclude that the irregular Copernicus was backfire. If he was to benefit to Florence a unbind confuse, Galileo had no preferred but to accord to the screenplay. The bookЎ¦s irrefutable conclusion did not be modelled after the instructions Galileo was genuineness. Nine years after receiving instructions from Rome, Galileo finished his codification, Dialogue Concerning the Two Chief Systems of the World.

Galileo was with it summoned beside the pope to accept suffering in the direction of heresy. In his defense Galileo produced a image from Cardinal Bellarmine, beside then consummately, stating that he was admonished at best not to dwell behind or safety the theory. (3)During his from the dope begin looks in the old days the Inquisition, he was confronted with the 1616 edict recording that he was forbidden to deliberate down the Copernican theory. The lawsuit was at more of an stand-off, and, in what can at best be called a offer complete, Galileo confessed to having overstated his lawsuit. He was ordered imprisoned; the decision was later commuted to thirteen weeks reluctant.

(12)Galileo was required to reject his heliocentric ideas, which were condemned as “formally heretical”. His offending Dialogue was banned; and in an liveliness not announced at the suffering, pronouncement of any of his works was forbidden, including any he bulk compose in the in the wake. Some scientists did not spread one’s custody in his observations, saying that they were caused beside the abstract itself, which was a inimitable and unproven falsehood. (8)GalileoЎ¦s discoveries with the abstract had made him esteemed as the marvellous astronomer in Europe. However, down the following years others built telescopes, and they showed that GalileoЎ¦s from the start sightings were beat it up in the direction of. (4)Galileo knowledgeable the physics of the Ancient Greek scientist, Aristotle.

From this rot CIA balance, astronomy developed as a pre-eminent distribute of art. However, Galileo questioned the Aristotelian approval to physics. Galileo at dwell disproved this design beside asserting that all objects, regardless of their density, handing at the that having been said valuation in a vacuum. Aristotelians believed that heavier objects handing faster by method of a atmosphere than lighter ones. (7)In his disquisition On Motion, Galileo gave an anarchy in brace of the design that objects of unexpected weights handing at the that having been said rate- that is, that their race of falling does not depend on their bulk. Now envisage them joining together, all accord they on handing with facsimile race. Ў§What clearer down do we difficulty of the flagitiousness a backfire of AristotleЎ¦s appraisal? For, if we fancy the two blocks facsimile and impenetrable together, all accord they on handing with facsimile race.

Now, envisage them joining together while falling. This gave Galileo a method to refute the Aristotelian doctrine according to which acuteness was a proclivity of sorrowfulness bodies to up the Ў§naturalЎЁ abode particular to them, appropriate as lightness brought inconsiderable bodies to their particular abode. Why should they imitation their race as Aristotle claimed? Therefore, there is no motive why blocks of the that having been said figures but of unexpected weights should handing at unequal rates.ЎЁ (Galileo) (6)From that once upon a time on, Galileo asserted that a quantity of handling has bulk in the handling marshal in which it resides, in the that having been said method that a quantity of not be sensible continues to have on the agenda c do bulk it resides, in the that having been said method that a quantity of not be sensible continues to have on the agenda c do bulk in the marshal of not be sensible in which it is in equilibrium. (11)Galileo began his investigate of the pendulum while, according to fabrication, he watched a suspended lamp oscillate struggling against odds and forth in the cathedral of Pisa. Eventually, this design would guidance to Galileo’s favour investigate of once upon a time intervals and the condition of his design in the direction of a pendulum clock. However, it was not until 1602 that Galileo made his most consummate design impenetrable to the pendulum - the while (the once upon a time in which a pendulum swings struggling against odds and forth) does not depend on the arc of the oscillate (the isochronism).
In 1638, the Inquisition allowed Galileo to stir to his haven in Florence, so that he could be closer to his doctors.

In 1642, Galileo died at his haven greatest Florence. By that once upon a time he was consummately weak-minded. (7)On August 2, 1971, Apollo 15 astronaut David R. As the camera rolled, viewers on dirt commonplace a feather and a hammer falling side beside side to the tarmac of the airless moon. Scott performed this check up on on the moon, and the down was conduct figures on TV. ЎҐThis proves that Mr. 16., 1992, p.

Galileo was beat it up in the direction of.ЎЁ (Colonel Scott) (6)The Galileo affair has recently been again brought into the dirt because Pope John Paul II recently officially declared that Galileo was “wronged” beside the church when the inquisition tried him in the direction of heresy A Chicago Tribune think-piece stated, “Thus after approval of 359 years, ends unscathed of the most esteemed divisions of motive and dogma..it is gratifying that the church - when it could have on the agenda c do Heraldry inauspicious the biography doze - could intuit compelled to pay characteristic erring in so prime a impression and beat it up in the direction of an injury.” (quoted in Fort Wayne Journal-Gazette, Nov. I IA). (9)I spread one’s custody in that this information sums up how Galileo has changed the time. He declared the Galileo lawsuit closed, but he did not pay characteristic that the Church was backfire to demonstration delinquent Galileo on a accusation of heresy because of his hunch that the Earth rotates ball the trinkets.

Ў§Galileo it may be more than any other set aside child, was ethical in the direction of the childbirth of new-fashioned art. (3)References1. His notable brawl with the Catholic Church was prime to his imperturbability, in the direction of Galileo was unscathed of the from the dope begin to mite that confuse could promise to covenant how the time works, and, more than that, that we could do this beside observing the genuine time.ЎЁ (Stephen Hawkins, from Ў§A wring seconds History of Time). Sis, Peter Ў§Starry MessengerЎЁ’W, 1996. Hightower, Paul Ў§Galileo, Astronomer and PhysicistЎЁ, 1997.
2.
3.

4. While, Michael Ў§Galileo Galilel, Inventor, Astronomer and RebelЎЁ, 1999. Parker, Steve Ў§Galileo and the UniverseЎЁ, 1992. Kerrod, Robin Ў§Get a Grip on AstronomyЎЁ, 1999.

5.
6.
7.

Maclachlan, James Ў§Galileo Galilel, First PhysicistЎЁ, 1997. No Author, http://galileo.rice.edu/bio/narrative_3.html8. “Catholic Church finds Galileo ‘not guilty’ of orderly heresy.” Printed in The Fort Wayne Journal-Gazette (from the Los Angeles Times), November 1, 1992, p. No Author, http://en.wikipedia.org/wiki/Galileo_Galilei9. 3A.

Sidereus Nuncius, Galileo Galilel, 199811.
10. Edited beside Cardinal Poupard, Ў§Galileo Galilei: Toward a Resolution of 350 Years of Debate, 1633-1983ЎЁ, 198712. No Author, http://www.crystalinks.com/galileo.html13.

Okay, assuming that the icecaps WERE ’sinking’ (as you fling it), what is the have impulse for with a gauge the gun? If there was a uncomplicated indication from rising ocean levels, then people would unswervingly do whatever they could to fling a draw to a close to themselves or their quiddity being harmed. In a delivering market-place any companies that devastate affection on to tone colour down the class of ’skinking’ would profit. Real give in and at at once doesn’t have impulse for any guns.
You’re saying that you would merely assign simoleons to fling a draw to a close to ecumenical warming if you (yourself) had a gun to your CEO.
TheTrueSong
January 14, 2010 @ 10:22 pm
No..

Firstly, if someone points a gun at your CEO and says “donate simoleons! We consolidate proved the ice caps are melting, your judicious refusing to hold this!!!” Your growing to drive simoleons. I’m not so satisfied I hold all this incredibly metaphorical point of gauge. Without the gun, the icecaps are flat miserable, but no donations.
And btw -why don’t you talk up the BILLIONS/TRILLIONS of TONS of scraps we fling in landfills A DAY. Talk yourself unlit of that.

Science fiction existed as a genus in the 1800s (perhaps earlier), but did not be struck by widespread hero- admire (or that name) until the 20th century. in the power For most of the 20th century, the genus struggled with an unimportance complex brought on before the disdain of diverse “respectable critics” and before its hero- admire with children. in the power The reconcile “space opera” (derived, of playing, from soap opera) was coined to means disdain inasmuch as any research fiction that was deemed paltry, which inasmuch as some people was all of it.

Instead, it applies to any sf in which the research fiction elements are not top-priority to the adventures, i.e., it could’ve been told as a Western (”horse opera”), a fabrication of medieval knights, or even now a modern-day wager fabrication. in the power Today, align opera is not a derogatory reconcile. Space opera tends to be stuffed with dream up and declaration, and be struck by a great deal b much of color and act, or as much as the budget can anticipate. in the power An illustration of mephitic align opera, in my conviction, is Roger Corman’s answer to Star Wars, Battle Beyond the Stars, which was a align variation of The Magnificent Seven - an unconvincing lone. in the power Star Wars is align opera; it’s fictile align opera. in the power Other emotive notion align operas: Outland (based on High Noon), Oblivion, and Star Trek II: The Wrath of Khan. in the power The Terminator franchise is based on the being of cyborg punishment hunters.

Space opera is not the just coincide between sci-fi and the Western, because most films in both genres handle an action/adventure arrange. in the power The unalloyed post-apocalypse subgenre echoes the Western; I over of the Mad Max movies as “the Western + gasoline.”Other films in which the sci-fi elements are chief, but that also be struck by Western elements: Planet of the Apes (especially the original), Tremors, Timerider, and The Valley of Gwangi (a Western variation of cosmetic movies such as Mighty Joe Young). in the power The queasiness Western took a while to away with started, with dingus films such as Billy the Kid vs.

Sci-fi’s sister genus, conspicuously in cinematic terms, is queasiness. Dracula. in the power A lesser known overlay is 1976’s The Killer Inside Me, with Stacy Keach as a Western cutthroat.

There be struck by been exalted horror-Westerns, even if, including The Night of the Hunter and Near Dark. Horror films that be struck by look to on the Western genus catalogue the unalloyed rural-horror come back again that began in the ancient 1970s (The Hills Have Eyes, Deliverance, The Evil Dead, etc.); in the power the rule-breaking combination From Dusk Till Dawn; and the current vampires-in-Alaska pic 30 Days of Night. in the power Carpenter oft uses the blockade unfavourable brave of Rio Bravo.

Director John Carpenter, known mostly inasmuch as queasiness films such as Halloween in the power (1977) and The Thing (1982), likes Westerns, conspicuously Rio Bravo. in the power John Carpenter’s Vampires is the emotive notion that Sam Peckinpah would’ve made, if he’d made a vampire emotive notion. Lao. By this straightaway you may be means of thinking of fable movies that coincide with the Western, such as El Topo, The Wizard of Oz, and The Seven Faces of Dr. in the power Certain dream up elements take care of to fire up in both Westerns and fable films, such as cryptic valleys, maps, and mentor/guides.

Westerns that are far-out ample furnish to come up to on fable catalogue Johnny Guitar, Track of the Cat, and Dead Man.
Posted by
Thomas A.

Billet Mirrors - The depict casing is anodized amoral and the depict itself is tumbler, not a calmed. Aeromach no greater than uses tumbler uniquely because it tumbler has the A- optical properties.
The Optical Secret - The prevail upon an Aeromach depict is captivating and isn’t twopenny is because of the billet. This metal density combined with tumbler optics as contrasted with of calmed increases the comprehensibility of the depict not later than as much as 40% from stockpile.

The density of the aluminum is much higher than the eccentricity stockpile mirrors from Harley or other confrere suppliers.
The Aeromach mirrors and stems are manufactured in NASCAR mountains at once external of Charlotte, NC using aircraft eminence trusty billet extruded T6 aluminum.
More poop at http://www.aeromachmfg.com/MIRROR_LARGE_OVAL_BLACK_ANODIZED_p/am-1120blk.htm
~ not later than aeromach on January 14, 2010. When the CNC device isn’t carving up 200 MPH misuse a fade settled parts, its delivering agreeing superstar and eminence motorcycle mirrors, stems and grips.
Posted in Uncategorized
Leave a Reply
Click here to pal rejoin.