text:
I recently started using the excellent keybase.io app for encrypted chat and all the crypto goodness motivated me to finally set up gpg verified commits on Github. I started with this helpful article: Github GPG + Keybase PGP which I recommend you take a look at, but I had to do a few more steps that I wanted to document.
Keybase is easy to install: keybase.io/download. For arch, it was a simple install and setup:
packer -S keybase-bin run_keybase
Once installed, you'll need to start up the app and create an account if you haven't already.
Generate a new key with keybase, and upload it to your profile. Alternatively, use
keybase pgp select to use your an existing key. To use this key for Github verified commits, it will need to have the same email as on your Github account.
$ keybase pgp gen
Export your keybase secret key to your gpg keyring:
$ keybase pgp export -s -p | gpg --allow-secret-key-import --import --
List keys in your gpg keyring and locate your keybase key
$ gpg --list-secret-keys --keyid-format LONG /home/jay/.gnupg/pubring.kbx ---------------------------- sec rsa4096/C17228D898051A91 2017-01-30 [SC] 326DA75610069B5DECA8D2DDC17228D898051A91 uid [ultimate] Jay Baker
ssb rsa4096/7C87801D5E56F673 2017-01-30 [E] sec rsa4096/C24CD98AB0900706 2017-09-28 [SC] [expires: 2033-09-24] F21FC721B22B0C176BAFBE35C24CD98AB0900706 uid [unknown] Jay Baker uid [unknown] Jay Baker ssb rsa4096/4599729752E8D5C4 2017-09-28 [E] [expires: 2033-09-24]
I have two keys here, the second one is the one I made with keybase pgp gen. We want to grab the keyid string from the second line:
sec rsa4096/C24CD98AB0900706 2017-09-28 [SC] [expires: 2033-09-24] C24CD98AB0900706=
Let's set a trust level for our key. Since we just made it, we can give it full trust.
$ gpg --edit-key C24CD98AB0900706 gpg (GnuPG) 2.2.1; Copyright (C) 2017 Free Software Foundation, Inc. This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Secret key is available. sec rsa4096/C24CD98AB0900706 created: 2017-09-28 expires: 2033-09-24 usage: SC trust: unknow validity: unknown ssb rsa4096/4599729752E8D5C4 created: 2017-09-28 expires: 2033-09-24 usage: E [unknown] (1). Jay Baker
[unknown] (2) Jay Baker gpg> trust Please decide how far you trust this user to correctly verify other users' keys (by looking at passports, checking fingerprints from different sources, etc.) 1 = I don't know or won't say 2 = I do NOT trust 3 = I trust marginally 4 = I trust fully 5 = I trust ultimately m = back to the main menu Your decision? 5 Do you really want to set this key to ultimate trust? (y/N) y sec rsa4096/C24CD98AB0900706 created: 2017-09-28 expires: 2033-09-24 usage: SC trust: ultimate validity: ultimate ssb rsa4096/4599729752E8D5C4 created: 2017-09-28 expires: 2033-09-24 usage: E [ultimate] (1). Jay Baker [ultimate] (2) Jay Baker gpg> quit
Now we can decide to do global or per repository signing with git. This step is optional, you can always manually sign commits with
git -S or
git --gpg-sign on a per commit basis.
$ git config commit.gpgsign true
This is per repository, add a
--global flag after
config if you want to enable gpg signing globally for git. If we change our minds later and want to disable signing just run the same command but with
false. Also, if want to do just do a single commit without signing:
$ git --no-gpg-sign commit
Now let's tell git which gpg key to use:
$ git config user.signingkey C24CD98AB0900706 # per repository
Again, add a
--global flag if you want.
To verify that our commit worked:
$ git log --show-signature commit 1f10113fadeae03fd8de870fb18c8563d0b3c602 (HEAD -> master) gpg: Signature made Thu 28 Sep 2017 17:23:20 EDT gpg: using RSA key F21FC721B22B0C176BAFBE35C24CD98AB0900706 gpg: Good signature from "Jay Baker
" [ultimate] gpg: aka "Jay Baker " [ultimate] Author: Jay Baker Date: Thu Sep 28 17:23:20 2017 -0400 detailed commit message goes here
Finally, we need to add our key to Github. Remember, your key will need the same email as your Github user email. You can add more email addresses to your key with
gpg --edit-key and then the
adduid command.
Let's get our public key from keybase:
$ keybase pgp export -----BEGIN PGP PUBLIC KEY BLOCK----- mQINBFnNUb8BEAC3RGNiW3AYUIxAsrQBRfclM65naI/xGlvRju6b5tuoZ33Qbvnq ... WB+E6/rYlZG4Vdk2W1bTk0R2iAVHoamZD0PmJAkv46SiuHqeyOdBGAGsgdVo1FGa Gw== =sE0m -----END PGP PUBLIC KEY BLOCK-----
Copy that, and head to https://github.com/settings/keys, click "New GPG key", paste it in, then click "Add GPG key" to save it. verifi
That's it! You can now have verified commits on Github with your keybase pgp key!
Conky is a lightweight system monitor for X. It's a great way to display all sorts of helpful information right on your desktop. It's somewhat similar to Rainmeter (for Windows) or GeekTool (for OSX), but it's far more powerful. Unfortunately, as with many things in Linux, powerful can mean hard to configure. In this guide, I'll go over my
~/.conkyrc for a minimal, clean conky configuration that provides useful info without polluting your desktop with clutter.
First, let's install Conky. It's available in the official repos of most distributions.
pacman -S conky #For Arch apt-get install conky #For Debian/Ubuntu dnf install conky #For Fedora 23, use yum for older versions
Note that configuring Conky with your desktop environment/distribution may require additional packages to be installed. If you're using Gnome on Fedora 23, then the
.conkyrc I provide below will work for sure. If you're using another desktop environment with Arch, check out the Arch wiki on conky. It provides tons of details on configuring conky, and even lots of little mini guides for how to cusomize your
If your distro doesn't have a conky package, or if you want to compile it yourself, instructions can be found here.
Once installed, you could start using the default configuration right away. Just start conky with
conky &. The default configuration is fine, but didn't suit my tastes. Conky will look in
~/.conkyrc for any user configurations, so that's where we'll put ours.
Our minimal, clean .conkyrc:
# - Conky settings update_interval 1 total_run_times 0 net_avg_samples 1 cpu_avg_samples 1 imlib_cache_size 0 double_buffer yes no_buffers yes # - Text settings use_xft yes xftfont Sans:size=12 override_utf8_locale yes text_buffer_size 2048 # - Window specifications own_window_class Conky own_window yes own_window_type normal own_window_argb_visual yes own_window_argb_value 255 own_window_transparent yes own_window_hints undecorated,below,sticky,skip_taskbar,skip_pager alignment top_right gap_x 40 gap_y 40 minimum_size 300 550 maximum_width 550 default_bar_size 550 8 # - Graphics settings draw_shades no default_color cccccc color0 white color1 E07A1F color2 white TEXT Kernel: ${alignr} ${execi 5000 uname -r | sed "s@.fc.*.x86_64@@g" } Uptime: ${alignr}${uptime} CPU1: ${cpu cpu1}%${alignr}CPU2: ${cpu cpu2}% CPU3: ${cpu cpu3}%${alignr}CPU4: ${cpu cpu4}% Temp: ${alignr}${acpitemp}°C Memory: ${mem} ${alignr}${membar 8,60} Disk: ${diskio}${alignr}${diskiograph 8,60 F57900 FCAF3E} Battery: ${battery_percent BAT0}% ${alignr}${battery_bar 8,60 BAT0} # Processes Processes: ${alignr}$processes Highest: ${alignr 40}CPU${alignr}RAM ${voffset -11.5}${hr 1} ${voffset -4}${top name 1} ${goto 124}${top cpu 1}${alignr }${top mem 1} ${voffset -1}${top name 2} ${goto 124}${top cpu 2}${alignr }${top mem 2} ${voffset -1}${top name 3} ${goto 124}${top cpu 3}${alignr }${top mem 3} ${voffset -1}${top name 4} ${goto 124}${top cpu 4}${alignr }${top mem 4} ${voffset -4}SSID: ${alignr}${wireless_essid wlp3s0} ${voffset -4}Local IP: ${alignr}${addr wlp3s0} ${voffset -4}External IP: ${alignr}${execi 600 curl https://icanhazip.com} ${voffset -4}hal:${alignr}${execi 600 /home/user/bin/pingtest server1.com} ${voffset -4}helper:${alignr}${execi 600 /home/user/bin/pingtest server2.com}
Just open up your favorite text editor and paste in the above. Save the file as
~/.conkyrc. To test it, start conky with
conky &. You should now see my conky configuration on your desktop!
The first few sections deal with Conky's appearance and position on the screen. If you want to change colors or positioning, poke around in here. Otherwise, let's move on to
TEXT section, this is the stuff that actually gets displayed on the screen.
First, let's take a look at this line, and break everything down:
Kernel: ${alignr} ${execi 5000 uname -r | sed "s@.fc.*.x86_64@@g" }
Kernel: – This just prints 'Kernel:' on the screen in the font and colors we specified earlier.
${alignr} – This means align right. Pretty simple.
${execi 50000 – This conky function means to execute a command in the shell every 5000 seconds.
uname -r | – Calls the
uname command with the
-r flag, which prints the kernel version, then pipes it to the next command with
sed "s@.fc.*.x86_64@@g" – Calls the
sed stream editor to do some inline string replacement. More on that below
On Fedora,
uname -r returns this:
4.2.7-300.fc23.x86_64, which is more info than I want. I already know I'm on 64 bit Fedora 23. It's just the kernel version that I want displayed. So we use
sed to replace
fc.*x86_84 with nothing, so we're just left with the kernel version that precedes it. The
* here is a regular expression meaning, any number of any characters. That way, when I upgrade to Fedora 24, I won't have to change my conkyrc.
Of course, conky has a built in way to display the kernel version, with
${kernel}. I could just use this instead:
Kernel: ${alignr} ${kernel}
But just like
uname -r, it would display the Fedora version and whether we have a 32 or 64 bit kernel:
4.2.7-300.fc23.x86_64. If you're happy with what
${kernel} displays for your distribution, then just leave it. If you want to display just the kernel version, then modify the
sed command as needed.
sed is a very powerful tool, but it can be a little daunting at first. If you're new to it, then check out the wikipedia entry for more info.
Let's turn our attention to the networking section, as you may need to make some changes here:
${voffset -4}SSID: ${alignr}${wireless_essid wlp3s0} ${voffset -4}Local IP: ${alignr}${addr wlp3s0} ${voffset -4}External IP: ${alignr}${execi 600 curl https://icanhazip.com}
${wireless_essid wlp3s0} will display the SSID (wireless network name) of whatever network the wlp3s0 interface is connected to. If your wireless interface is named differently, you will need to change this value. To find your wireless interface name, simply issue
ip addr:
It will return information on all of your network interfaces, but we're just looking for your wireless interace:
2: wlp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000 ...
To get the local IP address, we use
${addr wlp3s0}. Again replace wlp3s0 with whatever your interface name is. Note that if you have a wired connection, it will not be displayed here. You'll have to use
ip addr to find the name of your wired interface and put it here.
There are several ways to get your external IP address, but I find that the simplest is to do
curl https://icanhazip.com. Thus, our conky code is
${voffset -4}External IP: ${alignr}${execi 600 curl https://icanhazip.com}.
Finally, we come to the handy little lines that show whether my servers are up.
${voffset -4}hal:${alignr}${execi 600 /home/user/bin/pingtest server1.com} ${voffset -4}helper:${alignr}${execi 600 /home/user/bin/pingtest server2.com}
/home/user/bin/pingtest is a super simple bash script that pings whatever url you give it and returns "Up" if it gets a response and "Down" if it doesn't. Save this script to your
#!/bin/bash if ping -c 1 -W 2 "$1" > /dev/null; then echo "Up" else echo "Down" fi
Alternatively, you could put the script anywhere in your
$PATH. You can always check your
$PATH environment variable with:
$ echo $PATH /usr/local/bin:/usr/local/sbin:/usr/bin:/usr/sbin:/home/user/bin
/home/user/bin isn't part of your
$PATH environment variable, you can add it by adding this line to your
export PATH=$PATH:/home/user/bin
If you don't have any servers to monitor, just remove those lines or comment them out.
And that's all there is to my conky set up. Conky is a very powerful tool and can be used to display all sorts of information. I like mine simple and clean, but feel free to go crazy. There are tons of really slick conky configs out there.
I've been using Arch Linux as my media server/htpc for several years now and it's been incredibly reliable. Some people prefer a versioned distribution with an LTS release for something like a media server, but I want the freshest packages, and I don't want to deal with the headache of upgrading/reinstalling when an LTS release outlives its usefulness or won't allow me to get the new packages I want. Recently, I decided to give emby a try, after hearing about it on one of my favorite podcasts, the Linux Action Show.
This guide assumes you have a working Arch Linux installation. If you're starting completely from scratch, then consult the excellent Arch Beginner's Guide. And if you don't have time to go through a full Arch installation (thought I highly recommend it as you'll learn a lot about Linux in the process), then you can always just go with Antergos, which is basically Arch with a nice installer and some sane defaults.
emby is a media server that can manage and stream your movies, tv shows, music, home videos to a plethora of devices. It's a lot like Plex, but it comes with all of the best features free to use. It works with a server/client set up. You install and configure emby server, in our case on an Arch Linux rig (though they have support for many distributions and operating systems), and then access it from a client like your Web browser, a DLNA client like a PlayStation 4, Kodi media center, the Android or iOS apps, or any number of other options. Check out their download page to see what I mean. Their cross-platform support is some of the best for any app I've seen in a while, let alone a media server.
First, let's create a user account for emby:
sudo useradd -r -s /bin/false emby
emby is available in the community repos. Install it with:
sudo pacman -S emby-server
Now that it's installed, we'll need to start the emby service with systemd:
sudo systemctl start emby-server sudo systemctl enable emby-server
Check to make sure the emby-server service started properly:
sudo systemctl status emby-server ● emby-server.service - Emby brings together your videos, music, photos, and live television. Loaded: loaded (/usr/lib/systemd/system/emby-server.service; enabled; vendor preset: disabled) Active: active (running) since Sun 2015-11-29 15:42:16 EST; 23h ago Main PID: 15379 (mono) CGroup: /system.slice/emby-server.service └─15379 /usr/bin/mono /usr/lib/emby-server/MediaBrowser.Server.Mono.exe -programdata /var/lib/emby -ffmpeg /usr/bin/ffmpeg -ffprobe /usr/bin/ffprobe
You should see something like that. If you get errors, check the logs with
sudo journalctl -xe. When I first tried to start the service, I got an error saying that emby didn't have permission to write to the /var/lib/emby/logs directory. If you get an error like that, you can fix it with
sudo chown -R emby:emby /var/lib/emby
Once we've got the emby-server service started, let's continue with the set up by pointing your web browser to
http://localhost:8096. If you did everything correctly, you'll see the emby welcome screen. The emby set-up wizard is really very easy to use, so I won't go over every step, but you basically create a user account and tell emby where your media folders are and what kind of media they contain.
NOTE: emby can only scrape and recognize your media if it is named properly. It supports a number of naming conventions, so you'll just have to pick one and make sure your media conforms to it. My media was already named properly, so I didn't have to worry about this step, but there are a few tools, like filebot that can help you get your files in order.
Once you get through the initial set up, take a while to look through the options in the 'Manager Server' section:
There are a lot of options you can configure here. Familiarize yourself with all of the options and decide which are best for your set up. You can choose what libraries each user has access to, the max bitrate each user can stream at (useful if you live under the tyrannical rule of Comcast's data caps), and where to save metadata files (fanart, posters, etc.).
Right now, you have a working emby server set up, you could just open port 8096 in your firewall and access your server from the web with https://your.external.ip.address:8096. emby even has built in ssl (https) support. But I already have nginx web server set up with ssl, and I don't want the additional security risk and hassle of opening another port in my router.
nginx (pronounced "engine X") is an awesome web server that's fast, configurable and reliable. The configuration can be a little tricky to new users and users coming from Apache, but I actually prefer the nginx syntax now that I'm used to it. In any case, you can just cut and paste my configuration below to simplify the process.
Basically, nginx is going to act as a go-between for clients wanting to access it (and other web services we might be running, like transmission, subsonic, or owncloud). That means, we really only need to have 3 ports open in our router/firewall: http (80), https (443), and ssh (22). It also means, we can set up custom sub-domains, like emby.your-domain.com.
First, install nginx with:
sudo pacman -S nginx
Once it's installed, we'll need to create a configuration file for our emby reverse proxy. Create
/etc/nginx/conf.d/emby.conf in your text editor of choice and paste in my configuration below, making sure to change the server name to your own:
server { listen 80; return 301 https://$host$request_uri; } server { server_name emby.yourdomain.com; #change this to your domain! listen 443 ssl spdy; ssl_certificate /etc/nginx/certs/emby.crt; ssl_certificate_key /etc/nginx/certs/emby.key; ssl_prefer_server_ciphers On; ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers 'AES256+EECDH:AES256+EDH:!aNULL'; resolver 126.96.36.199 188.8.131.52 valid=300s; resolver_timeout 5s; ssl_stapling_verify on; keepalive_timeout 180; add_header Strict-Transport-Security max-age=31536000; client_max_body_size 1024M; location / { # Send traffic to the backend proxy_pass http://127.0.0.1:8096; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-for $proxy_add_x_forwarded_for; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto $remote_addr; proxy_set_header X-Forwarded-Protocol $scheme; proxy_redirect off; # Send websocket data to the backend as well proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "upgrade"; } }
There's a lot going on there, but this configuration takes any http requests to emby.yourdomain.com and redirects them to use https. It then creates a proxy so that any requests to emby.yourdomain.com/ get redirected to http://127.0.0.1:8096. That's how we can keep the 8096 port closed. The emby clients will connect to nginx, which will then talk to the local emby server at 127.0.0.1:8096. Any data you send to or from your emby server will be encrypted and secured with ssl.
Our nginx proxy isn't ready to go yet, we still need to create some self-signed certificates. Now, you could of course purchase an ssl certificate, but that's sort of overkill for a home media server if you ask me … But if you already have some certs to use, put them in
/etc/nginx/certs, Otherwise, let's make some now.
sudo mkdir /etc/nginx/certs/ cd /etc/nginx/certs/ sudo openssl req -new -x509 -nodes -newkey rsa:4096 -keyout emby.key -out emby.crt -days 1095 sudo chmod 400 emby.*
-days 1095 will set how long the certificate will be valid, adjust it to suit your needs. If you don't understand the other settings, don't mess with them. Running the openssl command will prompt you for some info, you can leave these blank if you want or fill them in, doesn't really matter.
chmod 400 emby.* will set some secure permissions on the certs so that other user accounts can't mess with them.
Once you've completed the above steps, let's test our new set up.
sudo systemctl start nginx sudo systemctl enable nginx
With the nginx service started, point your browser to emby.yourdomain.com. You should be redirected to https://emby.yourdomain.com and be presented with the emby server log in screen. Your browser may give you a warning about an untrusted certificate, but that's just because we're using a self-signed certificate. We just created the damn things so we know it's safe. Add a security exception for the cert in Firefox or select Proceed anyway in Chrome. Either way, you shouldn't be bothered with this message again (unless the certificate is changed).
Success! You've now got your own personal Netflix. You've got access to all of your media wherever you have an internet connection in a secure, encrypted way. You can make user accounts for your friends and family to use and give them an easy to remember url.
But what about in your home theater? emby's web client is pretty slick, but no one wants to open up a web browser on their tv to view their local media files. That's where kodi comes in.
Kodi (formerly known as xbmc) is open source home theater software. It provides a stylish, themeable, easy to use UI to display and organize all of your media. It has great remote control apps for Android and iOS and supports IR devices as well. If you're serious about creating the ultimate home theater/media server set up, then at the very least you should look into it.
Kodi can play our local media just fine without emby, and in fact that was the set up I had for years. It works great in this regard and it can handle just about any file type you can throw at it. Guests were always amazed by my kodi set up and how I controlled it with my smart phone (using the excellent yatse app). Where kodi falls short is that it while it can do streaming over DLNA, it doesn't do transcoding. There's also not a simple way to keep track of your played position/status if you have multiple kodi instances throughout the house. emby can solve these problems in an elegant way by acting as the backend for Kodi, while letting us keep the beautiful and functional Kodi UI for our big screen.
NOTE: The emby add-on for Kodi will replace your existing Kodi metadata database completely. If you have a working Kodi install, then be sure to make a back up of any user data before proceeding. You have been warned.
That being said, I have found emby to be much better at scraping titles and downloading all of the proper meta images (posters, fan art, banners, logos, etc.) Even though I spent years getting my Kodi database just right, a few minutes of work with emby and I'm happy to throw all that away. I've still got my backup of course, but I doubt I'll ever use it. emby really is that good.
Install Kodi with:
sudo pacman -S kodi
As always, the Arch wiki has a ton of useful info on this package. Be sure to read up on the entry for Kodi if you're unfamiliar with it.
emby provides their own Kodi repository for their add-on, so installing it is just as simple as installing any other Kodi add-on. Download their repository .zip file.
wget http://www.mb3admin.com/downloads/addons/xbmb3c/kodi-repo/repository.emby.kodi-1.0.2.zip
Then open up Kodi and navigate to System > Settings > Add-ons > Install from zip file.
Once the repo is installed, you'll need to install the emby add-on itself. In Kodi, navigate to Add-ons > Video add-ons > Emby
Launch the add-on by going to Video add-ons > Emby. If your emby-server service is running, then it should auto detect emby-server for you. Just log in and emby will perform a metadata sync with emby-server. Again, this will completely replace any existing metadata that Kodi has collected. There are a few options you can set in the emby add-on, but if you're running Kodi on the same machine that's running the emby server the defaults should work for you.
The emby website has some great screen shots of the emby add-on being used with different Kodi skins to give you a taste of the awesomeness to come:
The emby add-on for Kodi doesn't yet support streaming over the web, so if you want to run Kodi with the emby add-on set up on a different machine, you'll have to share the media over the network using samba or nfs and then set up path substitution in emby, so that kodi can find the files on the network to play. You'll still be able to track played position/status and see all of your metadata, etc., it just requires some more set up. I haven't had to set that up yet, so I'll save that for another guide.
In any case, you should now have a bad ass media center/server set up on Arch Linux!
In this guide, we will set up Docker on a Digital Ocean CentOS 7 droplet, then set up OpenVPN. We'll also discuss how to create a custom SystemD service file so that we can manage our container with
systemctl commands.
VPNs (virtual private networks) are a great way to secure your internet traffic over untrusted connections. It can provide easy access to your home network file server or other machines that you don't want to expose to the internet directly. Also, you can use it to circumvent blocked sites or services on a company network, or it can be used as a proxy to access restricted content in your country (like Hulu or Netflix).
Docker allows you to easily deploy and manage Linux containers: isolated, virtualized environments. Their isolation makes them secure and easy to manage, especially for developers who can develop their container, without worrying about which distro or even OS it will be deployed to.
This guide assumes you already have a CentOS 7 server set up. I recommend using Digital Ocean, but any provider which gives you root access will work as well. This guide should also work with any distribution that uses SystemD. I liked the set up so much, that I implemented it on my home Arch server as well.
First, let's install docker:
sudo yum -y update sudo yum -y install docker docker-registry
Once that's done, we'll start Docker and then enable it to start at boot:
sudo systemctl start docker.service sudo systemctl enable docker.service
If you don't want to have to type
sudo every time you use the
docker command, then you'll have to add your user to the group 'docker'. Do so with:
sudo usermod -aG docker $USER newgrp docker
The second command will make your current session aware of your new group.
Now that Docker is up and running, we'll need to set up busybox and OpenVPN. busybox is a super minimal docker image designed for embedded systems. We just want it for its small footprint. All we're running is a VPN, so theres no need for extra fluff.
Get it set up with:
sudo docker run --name dvpn-data -v /etc/openvpn busybox docker run --volumes-from dvpn-data --rm kylemanna/openvpn ovpn_genconfig -u udp://$DOMAIN:1194 docker run --volumes-from dvpn-data --rm -it kylemanna/openvpn ovpn_initpki
The first command pulls the busybox image and creates a new container called 'dvpn-data'. The second command starts a container that will hold the configuration files and certificates. Replace
$DOMAIN with the IP or domain of your server. Take note that port 1194 will need to be opened in your firewall. The thrid command will generate Diffe-Hellman parameters. It will take a long time so just be patient.
To open the required port in firewalld, issue the following command:
sudo firewall-cmd --permanent --zone=public --add-port=1194/udp
Now we need to create the credentials that will allow your client to connect to the VPN.
sudo docker run --volumes-from dvpn-data --rm -it kylemanna/openvpn easyrsa build-client-full $CONNECTION_NAME nopass sudo docker run --volumes-from dvpn-data --rm kylemanna/openvpn ovpn_getclient $CONNECTION_NAME > $CONNECTION_NAME.ovpn
Replace $CONNECTION_NAME with whatever you want to call your VPN connection. I named mine after my server name. You will be asked to create a password during the process, just pick one. It will take a while to do some crypto stuff, but eventually you'll get an ovpn file in your current director. This is what will allow you to add the connection to your client. You will need to securely move this to the machine that will be connecting to your vpn.
rsync or
scp are good options. You could even use a usb thumb drive.
Since the first machine I used this VPN for was a Mac I use at work, I chose Tunnelblick for my client. After it's installed, double clicking on the ovpn file is all the set up that was needed to add the connection to Tunnelblick on Mac. Consult your client's documentation if this doesn't work for you.
Now that we've got all of the docker stuff out of the way, let's create a custom systemd service file so we can manage our new container with the
systemctl command. SystemD service files are like init or Upstart scripts, but can be more robust and even take the place of Cron.
In CentOS 7 and Arch, these files are kept in
/etc/systemd/system/ so we'll put our's their too. Fire up your text editor of choice, for me it's
sudo vim /etc/systemd/system/dvpn.service, and paste in the following:
[Unit] Description=OpenVPN Docker Container Requires=docker.service After=docker.service [Service] Restart=always ExecStart=/usr/bin/docker run --name vpn --volumes-from dvpn-data --rm -p 1194:1194/udp --cap-add=NET_ADMIN kylemanna/openvpn ExecReload=/usr/bin/docker stop && /usr/bin/docker run --name vpn --volumes-from dvpn-data --rm -p 1194:1194/udp --cap-add=NET_ADMIN kylemanna/openvpn ExecStop=/usr/bin/docker stop vpn [Install] WantedBy=local.target
There's a lot going on here, so let's break it down. The stuff in the
[Unit] section is straigtforward enough. We give our service file an arbitrary description. The
Requires=docker.service and
After=docker.service mean that this service won't start until after the docker service has started.
Restart=always means that our service will restart if it fails. The
ExecStart= tells systemd what to run when we start the service. Let's break this command down further, to help you understand what's going on here:
docker run – This starts a process in a new container, pulling from the image specified later in the command.
--volumes-from dvpn-data – This gives our new container access to the dvpn-data container, where our certificates live.
--rm – This makes our container be destroyed after stopping.
-p 1194:1194/udp – This maps your physical machine's port 1194 to the container's port 1194.
--cap-add=NET_ADMIN This gives your container the ability to access the network stack on your physical machine.
kylemanna/openvpn – This specifies the image from which to start the container.
You can find more info about the
docker run command in the Docker documentation, it has tons of options. Of course, you could just check the
man page for it, with
man docker run.
Finally, the
[Install] section basically allows us to enable the service to be enabled to start at boot. You can read more about systemd service files in this excellent tutorial: Understanding Systemd Units and Unit Files.
Now that our service is created we can start it and enable it to load at boot with:
sudo systemctl start dvpn.service sudo systemctl enable dvpn.service
You can also check its status with
sudo systemctl status dvpn.service
And that's it! You now have a SystemD managed, Docker controlled, OpenVPN set up. Enjoy!
UPDATE:I tried following my own guide to create a vpn on my home Arch Linux rig and ran into some problems. You might get iptables errors when attempting to start the dvpn service file created above.
┌─[jay@hal]─(~) └─[13:19]$ docker run --name vpn --volumes-from ovpn-data --rm -p 1194:1194/udp --cap-add=NET_ADMIN kylemanna/openvpn Error response from daemon: Cannot start container d8afcbc7069b0530893779c9abf4d10aa73ab53f820c310a8baf2b956f79877c: failed to create endpoint vpn on network bridge: iptables failed: iptables --wait -t nat -A DOCKER -p udp -d 0/0 --dport 1194 -j DNAT --to-destination 172.17.0.2:1194 ! -i docker0: iptables: No chain/target/match by that name. (exit status 1)
It is possibly due to either the
xt_conntrack kernel module not loading or because you simply need to restart the firewalld and docker daemons to reload the iptables rules. Additional info can be found here. Try restarting the daemons first with:
sudo systemctl restart firewalld sudo systemctl restart docker
If that doesn't work, try loading the kernel module:
sudo modprobe xt_conntrack
It is simple enough to use a self-signed certificate to encrypt traffic to your site with SSL, but if you have a WordPress blog or any site that might see lots of visitors, then a self-signed certificate is not an option: How many average users are going to proceed to your site with a warning from their Web browser about an untrusted connection? This guide will show you start to finish how to get a free SSL certificate from StartSSL, install it on your server, configure apache, and set up WordPress to use https.
All of the information I'm using is from these guides:
If you get stuck, it might help to reference one of these guides. My set up is a CentOS 7 Digital Ocean droplet with apache and WordPress, but a lot of these steps should work for other distributions. Also, keep in mind that the free certificate offered by StartSSL is for non-commercial use only.
Open up Chrome and head to startssl.com. Click on "Express Signup," fill out the forms and hit continue. Check your email for the verification code. Click the link in the e-mail and you will be asked to generate a private key. Choose "High" for the grade. Once it's done, click "Install" and Chrome will present you with a pop-up that says it has been successfully installed.
This is not your SSL certificate, it's just a key that you will use to log in to the StartSSL Web site. Click on "Control Panel" and then "Authenticate." Chrome will give you a pop-up to authenticate with the site.
Once you're in the Control Panel, click on the Validations Wizard tab and select "Domain Name Validation" from the drop-down menu. Choose whichever e-mail you have access to (like firstname.lastname@example.com).
If you're using Google Apps for your e-mail provider, you can just create a group called webmaster and give it public access permissions to post to the group. Add yourself to the group and you will get any messages sent to email@example.com. This is any easy way to get extra addresses forwarding to your main Google Apps account without creating another user.
Check that whatever account you're using for the validation e-mail and paste in the code.
In the Control Panel, click on the "Certificates Wizard" tab. Select "Web Server SSL/TLS Certificate" from the drop-down menu. Hit continue and enter a strong password. You'll get a text box that contains your key. Copy its contents into your text editor of choice and save the file as
Hit continue and select your recently verified domain. Choose a sub-domain on the next screen. You probably want to pick 'www', but it's up to you. Hit continue and you'll get another text box, this time containing your certificate. Copy it to your text editor and save it as
Click on "Toolbox," and download the StartCom Root CA and the StartSSL's Class 1 Intermediate Server CA. Just right-click on the links with those names and hit save as.
Now we need to unencrypt your your private key so that your sever can use it. Do so with:
openssl rsa -in ssl.key -out private.key
You should now have 5 files:
ca.pem private.key sub.class1.server.ca.pem ssl.crt ssl.key
Note: the
private.key file is the unencrypted version of your private key. Make certain that no one has access to it and that you delete it from your local machine once you upload it to the server. It isn't necessary to upload the ssl.key file to your server. Let's upload the ones we do need though, using scp:
scp -p 2222 {ca.pem,private.key,sub.class1.server.ca.pem,ssl.crt} email@example.com:/home/user/
In this example, the ssh listening port is 2222, change it to whatever your port is. You can also specify a different destination directory by changing /home/user to whatever you want.
SSH into your server and let's get it set up.
$ sudo yum install -y mod_ssl $ sudo mkdir /etc/httpd/ssl $ sudo mv {ca.pem,private.key,sub.class1.server.ca.pem,ssl.crt} /etc/httpd/ssl $ sudo nano /etc/httpd/conf.d/ssl.conf
The first command will install the ssl module for apache, the second creates a directory for your certificate to live in. The third command will move all of your certificate files to your newly created ssl directory. The last will open up the ssl configuration file for apache. Look for this line:
<VirtualHost _default_:443>
Uncomment (delete the # at the beginning of the line) the
DocumentRoot and
ServerName lines and change
example.com:443 to whatever your domain is. It is important that this match what you entered when you created the certificate.
Uncomment these lines as well and change the location of the files to match what's shown here:
SSLCertificateFile /etc/apache2/ssl/ssl.crt SSLCertificateKeyFile /etc/apache2/ssl/private.key SSLCertificateChainFile /etc/apache2/ssl/sub.class1.server.ca.pem
Once you're done, save and close the
ssl.conf file and open up your site's configuration file:
$ sudo vim /etc/httpd/sites-enabled/yoursitesname.com.conf
And add these lines before the closing
RewriteEngine On RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
This will force https for the whole site, so that even if users don't type out https:// before your address, they will still be protected.
Restart the apache server:
$ sudo systemctl restart httpd
Test that it works by going to https://yourdomain.com. You should see a little lock in the address bar. If you get an Untrusted Connection error, then you probably forgot to change the location of the certificate files from the defaults in the
ssl.conf file. If you get a lock symbol, but with a triangular alert symbol, then you've got yourself a mixed content warning. No big deal, we'll fix that in the next step.
Log in to your WordPress admin portal and click on "Settings," and change the "WordPress Address (URL)" from http://yourdomain.com to https://yourdomain.com. Make the same change to the "Site Address (URL)" field as well.
If you've got the Mixed Content warning, then you've got some work to do. This warning basically means that your Web browser has detected some content on the page that is being fetched with plain old http, meaning it's not encrypted and secure. This could mean anything, but images you've added to posts is a great place to start. Take a look at one of your posts with images and view it in text mode. Scroll down to where your image is and check the html, if it looks like this:
<img src="http://yourdomain.com/cat.jpg" ... then that's probably the problem.
There are a number of ways to fix this. If you have a new site, then you can just click through your posts and add an 's' after http to all of your image tags. If you have hundreds or more images, this could get tedious. This guide: Moving to HTTPS on WordPress has some SQL kung fu that might be able to automate the process for you.
<iframe> or
<link> tags could also be causing the problem if they are calling http. This stackoverflow post has some more info as well.
Keep an eye out for mixed content warnings on other pages, but otherwise you should be done!


text:
Following a World Trade Organisation (WTO) dispute between the US and New Zealand against Indonesia, the country has amended its import restrictions to meet WTO ruling.
On 6 June Indonesia's Ministry of Agriculture (MOA) revised and amended the Import Recommendations (IR) as a direct response to the WTO Dispute Settlement Body decision.
The MOA will discontinue the policy of rejecting IRs for certain months around scheduled harvest periods. In addition, the IR length which previously would not exceed six months, has been changed to one calendar year, which importers can apply for at any time.
According to a USDA Gain report, the revised regulation gives the Director General for Horticulture "authority to consider 'domestic horticultural production' when issuing IRs" instead of the previous ban during specific months.
The report adds that as recently as 22 June this year, importers reported that the MOA was still not approving IRs for apple imports during the months of August to October; the same months that were banned under previous criteria.
"The overall impact of this revised regulation is likely to be very negative for US fresh fruit export prospects to Indonesia," the Gain report stated.
US Washington Apples count Indonesia as their largest market in South East Asia, and since Indonesia's import rules were introduced in 2011/12, shipments have dropped by as much as 50 per cent in following seasons.

subset: commoncrawl


text:
Project Description
Dominator festival turned in a global gathering of Hardcore fans, where a massive crowd comes to enjoy the hardest dance styles. Each year there is a new terrifying theme that comes to life in the impressive stages and scary visuals.
Project Details
Art of Dance
Dance Events
- Stage design: Stagekings / Create!


text:
AMD's competitor to Ivy Bridge launches: up to 12 hour laptop battery life
We're hearing a lot about Intel's Ivy Bridge lately, as computer manufacturers across the planet scramble to announce machines using the new chips. But what about Intel's competitor, AMD? Well, we now have an answer, and it comes with battery life to boot.... (Read More)


text:
Anybody can put together a wine list but these six restaurants have taken that responsibility to the highest level. If you want the best wine lists in Las Vegas these are the best restaurants to visit.
Aureole at Mandalay Bay
There is no equal in Las Vegas and we aren't even going to mention the bungee jumping wine steward. Over 55,000 bottles and 4,100 selections make this place a wine lovers mecca.
Delmonico Steakhouse at Venetian
With 17,400 bottle and 1,750 selections, you can almost disregard the fact that the food is out of this world.
Picasso at Bellagio
Great wine, great food, and tiny portions to leave enough room for that third bottle. 1,525 selections among their 15,000 bottles can easily make your night.
Emeril's New Orleans Fish House at the MGM Grand
Choose from 1,275 selections and a masterpiece of a meal. Bottles from France, California, Italy, and Germany
Eiffel Tower Restaurant at Paris Las Vegas
Watch the dancing fountains across the street and try to figure out what French bottle from their selection of 900 will keep you company for the night.


text:
There was a large crowd in attendance for the final day of horse racing at Arizona Downs in Prescott Valley.
Arizona Downs had a challenging inaugural season. They first opened their gates on Friday, May 24, offering an opportunity for affordable family entertainment. In addition to the horse racing, they offered a Family Fun Zone, which included 'Mini Dog Races'.
All was off to a great start, until this announcement was made on June 21, "...Arizona Downs has informed employees and horsemen that the racetrack's summer season is being suspended due to ongoing issues in the battle for fair and equal access to out-of-state racing signals for its Off Track Betting (OTB) system. Pending additional financing, the final live race days for the 2019 summer meet are June 22 & 23."
However, the Arizona state Legislature passed HB 2547, mandating that any simulcast signal of live racing brought into Arizona from another state must be offered equally to any commercial live-racing entity in the state.
Suddenly, the races were back on starting July 20! Arizona Downs secured an additional investor that provided further financing, the OTB looked promising and the legislation was in place.
Arizona Downs held seven more weeks of racing before this final weekend over Labor Day, and continued to reach out with community events, such as a tug-of-war on the racetrack between the jockeys and the Bradshaw Mountain football team.
In the meantime, a lawsuit was filed on August 9th in the US District Court regarding HB 2547, by plaintiffs Monarch Content Management and Laurel Racing Association. What affect this lawsuit will have, if any, on Arizona Downs remains to be seen.


text:
Italian director Tonino De Bernardi, a regular guest at IFFR, filmed on the Greek island Evia (or Euboea) during the refugee crisis. Many immigrants arrived on the Greek islands, as well as in Italy. De Bernardi also filmed the border town Ventimiglia, where refugees play football and queue up for aid in a parking lot.
But the focus of this documentary is on the Greek coastal resort Amarynthos, which looks out on Boeotia, where the ancient port of Aulis once lay. This was the setting for Euripides' Iphigenia in Aulis, the tragedy in which King Agamemnon demonstrates his willingness to sacrifice his daughter Iphigenia. De Bernardi uses locals as the 'dramatis personae' – protagonists such as Iphigenia, Clytemnestra, Agamemnon and Achilles, and has them read excerpts from the play. Fragments which, like a Greek chorus, comment on the status of refugees in Europe. A banner reads 'Solidarity', and a life jacket forms a leitmotif throughout the film.


text:
Another major study on breast cancer screening was published last week in the Journal of the American Medical Association (JAMA). This study follows a report two months ago on the results of a large clinical trial on mammography conducted in Canada.
A summary of the Canadian trial's main findings and links to several commentaries about it are in my recent post on top cancer research stories.
The study reported last week in JAMA did not include any new trial findings or other new evidence. Instead, it was a thorough review of what we know about the benefits and harms of mammography from the many trials and other studies that have been conducted over the last 50 years and an effort to distill from all this information what the current state of knowledge is about mammography. Continue reading


text:
Jan. 10, 2015
Sectorial Analysis
January 6, 2015, the French Competition Authority expresses its concern about the effectiveness of the independence of the operator of the rail transport network, now integratednow integrated into the public group that also included public operator faced with competition
Jan. 8, 2015
Breaking news
In its December 2014 report on codes of conduct, the "Commission de Régulation de l'Energie" (French Energy Regulatory Commission) estimates that the company law doesn't make sufficient independent transmission system operators
The French law provides that the Commission de Régulation de l'Énergie - CRE (French Regulatory Energy Commission) publishes an annual report on compliance with codes of conduct and independence of the power transmission grid operators. In Decembre 2014, CRE has published its report on compliance with codes of conduct and independence of electricity networks and natural gas (Respect des codes de bonne conduite et indépendance des gestionnaires de réseaux d'électricité et de gaz naturel).
This particular statutory provision shows the proximity between Regulation and Governance, nearby sometimes believed limited to the sphere of banking and finance.
This is designed especially for managers of transport networks which are often subsidiaries of incumbents production and energy sales, economic and legal integration that the law does not prohibit even though it requires independence transport network managers. This independence must be de facto and not de jure, which is a higher requirement than mere legal autonomy of companies, the result of the requirements of "governance", the operator is obliged not to exercise the rights and powers its parent company status yet gives a regular basis so that the first principle of independence of the network manager is preserved.
The relationship between the controlling shareholder and its subsidiary are governed by "codes of conduct" in the mandatory order of the independence of management and decision making of the subsidiary. In a 90-page reportthe regulator sets the constraints so that this goal leads in effect on the parent company, beyond corporate law.
However, the regulator is very severe. It believes that the way in which subsidiaries present themselves to consumers mark such similarity with their parent that these third parties can't identify them as independent of them. According to the regulator, consumers therefore don't identify them as carriers or distributors of energy also offered by competitors of their parent.
Thus, the regulator considers it necessary that these subsidiaries will change their brands, logos and legal designation, eg ERDF ceases to have a name so close to EDF.
The implicit question is the legal effect of such reproaches and suggestions, if the companies aren't listening. The report discusses the prospect to bring the question before their independent body able to impose sanctions. But the case will be difficult because the principle of independence meets the principle of freedom and the terms of the interference between regulatory law and corporate law aren't yet clearly established.
Updated: Jan. 23, 2012 (Initial publication: Dec. 5, 2011)
Thesaurus : Doctrine
Updated: Jan. 5, 2012 (Initial publication: Jan. 5, 2012)
Thesaurus : Doctrine


text:
Father of Slain WDBJ Reporter Keynotes Gun Violence Summit
Andy Parker, father of WDBJ Roanoke reporter, Alison Parker, who was slain on camera in August by a disgruntled former station employee, has made good on his pledge to leverage that tragedy to lobby for gun control.
Parker will be the keynote speaker at a national summit on gun violence in Washington Oct. 27, sponsored by the Brady Campaign and the American Public Health Association.
Alison Parker and cameraman Adam Ward were shot and killed on-air Aug. 26 while doing an early morning stand-up.
Parker was an intern at the station before being named the morning reporter, teamed with Ward. She also formerly worked at WCTI Jacksonville, N.C., and was a graduate of James Madison University in Harrisonburg, Va., in 2012, where she studied journalism and got hands-on experience in news producing at ABC affiliate WHSV. She was also news editor for JMU's newspaper, The Breeze.
Adam Ward had been with the station for four years, like Parker starting as an intern in the production department before moving on to news. He was a graduate of Virginia Tech, previously the focus of national attention for its own shooting tragedy.
The television industry's top news stories, analysis and blogs of the day.
Thank you for signing up to Next TV. You will receive a verification email shortly.
There was a problem. Please refresh the page and try again.


text:
Business hours:
Mon - Sat: 10:30am - 11:00pm
Sun 12:00pm - 10:00pm
Call ahead to make reservations.
Special events
Meetings, social gatherings, birthday parties, large groups
Save on food and drinks
Leave the cooking to us
When you aren't spending all your time and energy preparing for the party, you can sit back and enjoy your guests. Let us take care of all the work so you can have some fun!
Mini tacos, southwest spuds, cream cheese jalapeno poppers, and more
Quesadillas and Nachos
With all your favorite toppings
Mexican favorites
Tacos, enchilada, tostadas, burritos, taco salad, Mexican pizza, and more
American favorites
Salads, soups, burgers, sandwiches, hot dogs, and more
Finish of your meal and treat your guests to Banditos, fried ice cream, or a cheesecake burrito.
Your choice of payment
• Personal checks
Call ahead
Rest assured
We are fully licensed, bonded, and insured.


text:
Dwayne Johnson won't be laying the smacketh down on Donald Trump in the 2020 US presidential election, but that doesn't mean he's given up on running for high office.
Fans of the People's Champion have built a pretty impressive online movement in hopes of convincing him to run against The Donald in a battle of two former WrestleMania headliners at the ballot box.
However, The Rock is just too damn busy to make it happen. In the next few years alone, Johnson is releasing Jumanji: Welcome to the Jungle, Rampage, making another season of his HBO show Ballers, shooting both Fast & Furious 9 and a spin-off for his character Hobbs, working on a Black Adam solo movie and possibly even appearing in Suicide Squad 2. Not to mention that he's going to be a dad again too in 2018.
However, Dwayne has confirmed to Variety that he really is "100%" interested in a presidential run once his jam-packed schedule settles down. Maybe in 2024.
"I couldn't do both [movies and politics]," he acknowledged. "Realistically, as we go into 2018, when you look at my slate as we're developing and shooting into 2019 and 2020, the slate goes deep into 2021, so it feels like the realistic consideration would be 2024."
In the meantime, Dwayne says he is studying the actions of the current president and the issues that have caused such division in the US over the last year.
He did throw a bit of shade at Trump, in criticising the controversial US leader's penchant for publicly shaming athletes who protest police brutality during the playing of the National Anthem.
"I think this is just a product of my DNA, in that when there's an issue, that's the time we have to come together, work hard to understand each other and ultimately get to a better place," Johnson said.
"For example, when it's a polarizing issue like our NFL players kneeling during the National Anthem, that's not a time to be divisive and shut them out of the White House.
"It's the time to actually open the doors and bring those players in so our President and staff can understand exactly what the needs are — face to face, so change and positive progress can happen — but that's not happening right now."
As for a possible running mate, The Rock is looking for "a tremendous leader and a high-quality human being". Might we suggest The Undertaker or one of the Dudley Boys?
One thing Dwayne must watch out for if he does run for office in 2024 is sabotage, since his Jumanji: Welcome to the Jungle co-star Kevin Hart has already promised to wreck his campaign.
Watch the two bantering about the White House on The Graham Norton Show below:
Want up-to-the-minute entertainment news and features? Just hit 'Like' on our Digital Spy Facebook page and 'Follow' on our @digitalspy Twitter account and you're all set.


text:
Tech brands are quick to jump on trends started or popularized by their competitors, and the current smartwatch phase is no exception. There used to only be one or two options if you wanted a piece of technology on your wrist, but as time progressed, choice only became a problem because there were too many. However, some decided to target specific markets – there's that for the style-concious, then there's that for the fitness-minded. In this unboxing, we take a look at ASUS' foray into the fitness smartwatch category with the ASUS VivoWatch.
Upon lifting the cover of its white, cubic, elegant-looking box, you'll solely be greeted by the ASUS VivoWatch. Tucked in the compartments of its packaging is a docking station and a micro-USB cable, both for charging. Of course, there's documentation, but who reads them anyway?
Once the watch is out of the box, everything else is pretty straightforward. You place the watch in the dock and plug it either on an outlet or a USB port to power it up. Once it does, you're ready to use it.
The Watch
The ASUS VIvoWatch is the very first smartwatch I'm reviewing, so I really can only compare it with the more popular ones like the Apple Watch, which I also have a very brief experience on. But comparing it to the Apple Watch is like comparing apples to oranges. The VivoWatch, though a smartwatch, is fitness-centric. In fact, the correct term for it is a sportswatch. Nevertheless, the VivoWatch sports (pun intended) an understated elegance that other fitness smartwatches don't really have.
It looks like a normal digital square-faced watch, but it's display, like most smartwatches now, is touch responsive. It's how you navigate through the watch's proprietary interface, aside from the single home / dismiss button you'll find on its right side. The display is a monochromatic 128×128 panel. It's not the sharpest, but its bright under direct sunlight. It's also power-saving since the display only refreshes the pixels that are needed, which also helps back up the claim of up to 10 days battery life.
The VivoWatch was released in 2015, and initially it didn't support notifications for third party apps like Facebook and Viber, but after numerous updates, thankfully, it finally does. All apps, no matter what type of notification, appears on your wrist. It's not the best experience to read on a display this small and low res, but it will remind you of old Nokia displays such as that on the 3310.
The Accompanying App
The VivoWatch works on both iOS and Android devices as long as you have the HiVivo app installed. It's where all the data you collect through the watch is displayed – steps, distance covered, calories burned, pulse rate, sleep patterns, even something called the "Happiness Index" that measures your happiness based on your physical activities.
The app's interface for both platforms are similar. There are a few perks for the Android counterpart like additional watchfaces, but the difference ends there. Navigation is familiar and all you need to do is scroll and tap.
Pairing the watch on your phone is as easy as connecting an external speaker. You turn on your phone's Bluetooth, search for the watch and pair. It sometimes asks for a pairing key, but that's the most challenging part. Pairing is smooth 95% of the time. The rest of it is a case of hit and miss.
We'll be putting the VivoWatch to the test to see how well it fits into the lifestyle of someone who doesn't really do much physical activities.
Stay tuned for the complete review soon!


text:
The CE has a reputation as a tough negotiator. His skills were honed by years of CEO-ness, before he title-waived the O and was elevated to the royal position of Chicken Emperor de Pollo Grande. He has wrestled mortgage rates to the ground – back in the late '70's when the going rate was headed above 14%, he managed to lock in a 10% rate, leaving the bank rep blinking and wondering whoa, what just happened. Maitre d's have even been known to crumble before his powers; early in our relationship he dazzled me by somehow bypassing a half-block long line outside a popular restaurant and snagging us a coveted window seat.
They say that long-marrieds tend to absorb one another's traits. Perhaps that is how I managed to accomplish my very own recent feat of negotiation, because yes, PolloPlayer readers, a new day has dawned in the Kingdom of Chickens: there WILL be a second coop.
Chez Poulet was barely completed before I saw that there would be a need down the line for Poulet Plus. Three chickens (R.I.P. dear Lily) does not quite a flock make and, as many of you know, I have designs on adding a few ladies to the dance card. It didn't work out for this season, but all the better to have an extra year's cushion – since hens lay prolifically only for two or three years maximum, it will be better to have that bit of space between our three girls and next wave of the work force.
The challenge is in what is called "flock integration". Despite the fact that there is plenty of space, food and treats to go around, existing flocks are not known to be welcoming of new members. In extreme instances, the young 'uns can actually be pecked to death if the transition isn't handled just right. Thus the need for an auxiliary coop where, ideally, new pullets can be stashed safely at night and given some face time with their elders during the day until they are gradually accepted as bona fide flock members.
I started mumbled something about "a-s-econdcoop" last summer, which the CE did not even choose to dignify with a response. When I uttered the words more distinctly in the fall I only got as far as "a…second… -" before I was cut off with an "ABSOLUTELY NOT NO WAY DON'T EVEN MENTION IT".
But just as winter turns to spring and spring to summer, ice and attitudes melt away, and the other day, when I pointed out a nifty little spot where a small auxiliary coop could be built, the CE glanced to to spot and spoke the words I've so long awaited: "Hmmm, yes, I think that could work."
Yes, I realize I should have asked for diamonds or a round-the-world cruise when he's in that frame of mind, but the truth is, what I really want is just a few more chickens. For the moment, that is…
Thank you, Dear


text:
The last sound you want to hear in the middle of your dressage test is the judge urgently ringing a bell, but in the case of Jr. Beginner Novice rider Ava Cunningham, it wasn't because she'd gone off course. She was being rung out of the ring because an order had just come down from show management for all riders to dismount and proceed to the barn immediately, even if they were in the middle of a test.
For poor Ava and several other riders, it was the third time they'd been sent back to the barns; after two warmups terminated by holds for lightning, she'd finally made it up the centerline and then … ding-ding-ding! An ominous incoming storm was the final straw, forcing all remaining Friday competition to be postponed until Saturday.
We eventers are champions at rolling with the punches, though, and we wish Ava a happy rematch tomorrow. Let's hear it for all our Jr. Beginner Novice competitors, in fact! They're an inspiration, perhaps still too young and fresh to be saddled with all the neurotic garage we heap upon ourselves as adults.
Take, for instance, Mackenzie Lowe and Addie Oakie. Addie did not like that judge's box. Not. One. Bit. Refused to go near that cursed devil hut before their test.
But Mackenzie just kept breathing and rode him quietly through it, and once she got him in the ring he mostly forgot about the aliens and was all business.
We caught up with Mackenzie after her ride to ask what was going through her head:
Well-played, Mackenzie! Gracie Friend was another rider who did a pro job of soothing her horse's nerves:
Jr. Beginner Novice is the largest AEC division, and only about a third of the competitors squeezed their tests in before the storm delay. Best of luck to the rest of the field tomorrow! Click here for the new schedule and here for new ride times.
Only four of the eight Novice and Beginner Novice divisions scheduled to tackle dressage today were completed before the competition suspension; Novice Amateur, Junior Novice, Beginner Novice Amateur and Beginner Novice Horse all wrapped up dressage today, and there are still four riders to go in Beginner Novice Rider, 10 to go in Novice Rider, 20 to go in Junior Beginner Novice, and all of the Novice Horse competitors.
Meanwhile over at cross country, a full day of action was scheduled for Training, Preliminary, Intermediate and Advanced divisions, but mother nature intervened. Only Training and three of the four Preliminary divisions had their chance to leave the start box on Tremaine Cooper's cross-country course (check out a virtual preview here). The remaining Preliminary division, Intermediate and Advanced will now go cross country on Saturday morning. Preliminary will show jump on Saturday, while Intermediate and Advanced will Show Jump on Sunday morning. Click here for the revised schedule.
Here's a roundup of the day's action, with quotes from the leaders of each division! Many thanks to the good-looking, hardworking media folks at USEA and Colorado Horse Park for making such comprehensive coverage possible.
Jr. Novice
In the lead after dressage: Julia Brittain and Haiku, her own 6-year-old Dutch Warmblood gelding by Sir Donnerhall, on a 29.2.
On their partnership: "I got him almost two years ago. I introduced him to eventing, so it's a big deal to be here. We switched barns a year ago, and my partnership with him hasn't been as smooth as I would have liked, but we're definitely on an upward trajectory at this point."
Her cross country plan: "Not take any of the jumps for granted. Cross country and dressage are probably our strongest phases. I just need to ride him forward and strong and straight, especially to the combinations."
On their heels: Miriam Copeland and her own D'Stinctive, an 11-year-old Friesian gelding (Diederik x Rippin And Snortin), are 2nd on a score of 29.2. Blake Foley and Judicial Review, Ellen Doughty-Hume's 11-year-old Thoroughbred gelding, are 3rd on a 31.8.
Top three after dressage:
Novice Amateur
In the lead after dressage: Erin Contino and Handsome Ransom, her 6-year-old Thoroughbred gelding (Desert Warrior x St. Casmir's Secret), on a score of 25.8.
On their test: "Yesterday in my warmup ride he was obedient but tight and definitely a little distracted," said Contino. "He was just a bit more reactive than I wanted him. But today when I got on him, I felt him take a deep breath. I rode a little ahead of my scheduled time, the horse in front of me must have scratched. I debated waiting for my time because he was still a little bit up. But I decided to use that to my advantage to keep him a bit brighter and to come up with a bigger test than I normally do. It could have backfired, but it didn't."
On the Colorado resident's first AEC: "It's nice that it's here. We're really excited. We figured we had better take advantage of that!"
On their heels: Michelle Meghrouni and Swizzle, a 7-year-old Holsteiner mare (Blauer Vogel x Swiss Detail), are 2nd on a score of 27.0. with Lorilee Hanson and Hypnotik, her own 7-year-old Warmblood/Thoroughbred gelding Hypnotik (Montego Bay x Trelawny), are 3rd on a 27.5.
Top three after dressage:
Beg. Novice Amateur
In the lead after dressage: Cami Pease and Vibrant, her own 8-year-old Belgian Warmblood gelding (Orlando x Fatima Van De Heffenk), on a score of 24.5.
On their test: "We have been working really hard on dressage. I want to do the dressage regionals this year. I just wanted to go in and be positive; he felt really good. I was a little bit surprised by the score. There were a couple of moments that I thought could have been improved, but that's always true. He was great. Last year at the AEC he was kind of spooky in the ring; Tryon is kind of a big atmosphere. It was nice that the Horse Park let us get them acclimated and get in the rings. He was great, focused and happy."
On the cross country course: "It looks great! It looks really fun. I love that it's galloping and there are open fields with plenty of space to get into a rhythm. The fences look incredible. It looks like a lot of fun. It's an incredible backdrop, the sky is huge out here! You can see for miles."
On their heels: Sherry Pound and Gestalt, her 6-year-old Mecklenburg gelding (Gloriosus x Celine), are 2nd on a 27.4. Meagan Counts and Aviator, her own 6-year-old Holsteiner gelding, are 3rd on 27.5 penalties.
Top three after dressage:
Beg. Novice Horse
In the lead after dressage: Alexa Ehlers and Clear Laveer, her own 12-year-old Hanoverian gelding (Rascalino x Hauptstutbuch Wincenta 2), on a 27.4.
On their test: "Our test today was good. I'm pleased with him. He was really obedient, which was good. But with that said, he was also pretty fresh. Yesterday we schooled, and that went great. He's just a really happy dude. The whole point of me eventing him is just for him to learn to enjoy working. I got him for that reason. Today he just seemed really happy, and I'm happy for that reason. He was really steady and did everything I asked of him. He threw in a little porpoise-like move, having way too much fun with himself. I'm just happy that he was having fun the whole time. He's super rideable."
On their plan for the weekend: "My plan will be to go out there and get it done, but, I'm merely here to have fun. I just want my horse to have a really good time. I'm going to be the ridiculous person, patting him. Doing all of the things that I don't do with the other horses. But I want him to go out and have a good time and be confident and come home confident. That's the whole point."
On their heels: Taylor Lindsten and Claudia Channing's Chestnut Oak's Drummer Boy, an 11-year-old Shire gelding (Clononeen Romantic Traveler x Steege's Beth), are 2nd on a score of 28.1. Sophie Mueller and Dawn Holmes' 24Karat Magic, a 7-year-old Australian Stock Horse gelding by Icewood's Cadabra, are 3rd on a 29.6.
Top three after dressage:
Junior/Young Rider Preliminary
In the lead after cross country: Madelyn Floyd and her own Clementine, a 9-year-old Hanoverian mare (Carrico x La Belle), on a score of 29.5.
On their run: "The course rode great. My mare was super good, and I was really happy with the overall performance. This is our first year doing the full Preliminary level, so I have been really proud of her. She was super bold and confident to everything, and just gave me a nice overall feel. I just came off of the Intermediate at Woodside which gave me some preparation, it was a bit big but it was a competitive track and I enjoyed it. She and I both love cross-country!"
On having the AECs close-ish to home (Madelyn lives in Washington): "I've never been here to CHP before and this is my first AEC. It was really exciting for me, because I couldn't have made it to the East Coast with school and stuff, so I was very happy to find out it was coming to the Midwest."
On their heels: Camryn Holcomb and Michaela Holcomb's Cloud Nine, a 13-year-old Thoroughbred gelding, are 2nd on a 32.7. Callia Englund and her own Xyder, an 8-year-old Cheval Canadien gelding (D D D-Cromwell Prince 2 I x Cosyland Start Kandi), sit 3rd on a 42.3.
Top three after cross country:
Preliminary Horse
In the lead after cross country: Tamra Smith and Fleeceworks Ghost, Judith McSwain's 6-year-old Irish Sport Horse/Belgian Warmblood mare (Shannondale Sarco x Riverlon Mist), on their dressage score of 29.0.
On their run: "I wasn't sure how the time was going to run. We metered it and it was pretty right on, so I figured that the time wouldn't be super hard to make, but it actually was hard to make, and the course rode a lot more tough than I had anticipated. That mare is pretty experienced and she had her eyes open. I had to ride. All the questions were fair. I thought it presented itself very well. It's a championship. It should be at the top of the level. I thought Tremaine [Cooper] did a great job with the design. It was very much a championship course."
On their show jumping plan: "She's a good jumper, I'm really happy to be on her going into day three. I mean, she can occasionally have a rail. She tries really hard and she's a good jumper, so I'm hoping that it works out great."
On their heels: Gina Economou and Syntax, Lauren Rath's 13-year-old Thoroughbred gelding (Devil His Due x Synful Maid), on a score of 30.4. Smith also rounds out the top three on the MB Group LLC's MB MaiBlume, an 8-year-old German Sport Horse/Thoroughbred gelding (Sir Schiwago x Free Lady), on their dressage score of 31.9.
Top three after cross country:
Preliminary Amateur
In the lead after cross country: Erin Hofmann and her own Darkwatch, a 2008 Thoroughbred gelding (Royal Academy x Without), on their dressage score of 32.4.
On their run: "Our cross country run today was really good. I was a little nervous at the beginning, but my horse is really bold and likes a good galloping course so it was a good fit for him. It was a lot of fun, and it rode really well."
On competing at the AEC: "I was at the very first AEC as a volunteer, but this is my first AEC as a competitor. It's so nice to be here, and to have this in our home court is a dream. We love coming here, it's a great facility and a great event."
On their heels: Julia Spatt and her own 5o1 Macintosh, an 8-year-old Belgian Warmblood gelding, are 2nd, having collected 0.8 time penalties for a score of 35.1. Darlene McInnes and her own Speed Bump, an 8-year-old Thoroughbred gelding (Pomeroy x Everdream), are in 3rd on a 35.5.
Top three after cross country:
Junior Training
In the lead after cross country: Eva Jacroux and Rubel, a 12-year-old Zweibrucker gelding (Radikal x When the Worlds Unite), on a 31.4.
On their run: "Rue was really good today. We were a little sticky in warm up, but as soon as we got out there it was fun! Today I really went out with the goal to not pick up any time faults, so I worked on going a little more forward than I normally do. He was good and seemed to like being pushed a bit more. All of the jumps seemed friendly, but there were some tricky questions in there, which is what this is all about."
On her plan for show jumping: "It's always been the toughest phase for us, so tomorrow I want to make sure that I do my job to the best of my ability, so that he can try his hardest for me too. Hopefully it'll work out!"
On their heels: Rosie Smith and her own Seamus, a 15-year-old Irish Sport Horse gelding by Corrcullen, RID are 2nd on a 33.8. Sunny Courtwright and Around Midnight, a 10-year-old Irish Sport Horse mare, sit in 3rd on a score of 34.3.
Top three after cross country:
Training Horse
In the lead after cross country: Lizzy Jahnke and Patrickswell Royal, Lightspeed Equestrian LLC's 6-year-old Irish Sport Horse mare (Royal Storm x Rahard Sally), moved up from fourth to first place with a total score of 33.6.
On the mare: "She's six this year, and she's for sale. We imported her last year with the idea of a resale. We got her out of Ireland and she's been with me for about a year and a half now. I click well with her. She's lovely, super sweet, and a really nice horse."
Of the day's cross country course: "I thought it was a really nice course. Definitely the biggest course this mare has ever jumped – she's super young. It was a challenge, but fair. It was beautifully decorated, and they made really good use of the terrain. I thought everything rode really well."
On their heels: McKenzie Rollins moved into second place with Excel Star Lord, a 6-year-old Irish Sport Horse gelding (Non-Stop x Korea B), with a 34.9. Marc Grandia aboard Michelle Jones' Command N' Rule, a 19-year-old Thoroughbred gelding, are 3rd on a score of 35.5 penalties.
Top three after cross country:
Training Amateur
In the lead after cross country: Linda Quist and Belle Gambe, her 14-year-old Iberian Warmblood mare (Temerario VII x Mojave), on their dressage score of 27.3.
On the course: "I thought it was a very fun course, and my horse was a rockstar. It just flowed really nicely, one thing came to you after the next. The big jumps were big, but nothing too hard to handle!"
On their plan for tomorrow: "Going into tomorrow, I'm just going to try really hard to leave all of the rails up. She likes show jumping, but she wants to jump stadium like it's cross country, so it's our tough spot."
On their heels: Cherye Huber and her own Sam I Am, a 12-year-old British Sport Horse gelding (Cameo's Reflection x Castle War Rebel), moved up from 5th to 2nd place with 30.2 penalties. Dawn Robbins and her own Diablo Tejano, a 15-year-old Thoroughbred gelding (Sandpit x Soar Like An Eagle), also jumped up the leaderboard from 9th into 3rd on a 31.1.
Top three after cross country:
Training Rider
In the lead after cross country: Tracy Alvez and Romulus, her own 20-year-old Dutch Warmblood gelding (Contango x Divottii), overtook the lead and move forward on a score of 26.8.
On their four-year partnership: "We've only had one solid year of showing because we had two years of quarter cracks and other things that we were dealing with. This is our first year back, but it's also his retirement year so today was our final competitive cross country together. I'd like him to dabble in some dressage moving forward, but I won't be doing the cross country with him, because I've just found that the conditioning for it can take a toll on him."
On his favorite phase: "People tend to think that his strongest phase is dressage because he has a good education, but his favorite phase is cross country. Yesterday he was really quiet in the warm-up, and I thought 'oh man, he's behind my leg and I'm in trouble!' when we got in the ring and started going around, he got way more excited. He turns into quite a showman."
On their heels: Rebecca Mortensen and her own Seattle Freckles, a 10-year-old Thoroughbred gelding, are 2nd on a 28.8. Jessica Maranto and Czardus, an 11-year-old American Warmblood gelding (Sweet's Lucky Moondancer x Cadence), are 3rd on a 32.8.
Top three after cross country:
If you thought that was a long event report, just imagine how much longer if could have been if half the day hadn't gotten postponed. Tomorrow is going to be a monster — get ready!
Go Eventing.
AEC: Website, Schedule, Ride Times, Live Scores, Live Stream, EN's Coverage, EN's Twitter, EN's Instagram


text:
SAT also modified its Thursday's stay orders on two other companies—J. Kumar Infraprojects and Prakash Industries—and disposed of the case in line with its orders on six other firms Friday. Photo: Mint
New Delhi: Leading stock exchange NSE on Friday said trading in four companies, including Parsvnath Developers and SQS India BFSI Ltd, will resume on Monday after Securities Appellate Tribunal (SAT) stayed trading restriction imposed by Securities and Exchange Board of India (Sebi) on these companies.
Other two companies are Signet Industries Ltd and Pincon Spirit Ltd.
Shares of these four companies would be moved out of GSM (Graded Surveillance Measures) framework and made available for trading with effect from 14 August, NSE said in a circular.
Parsvnath would be allowed to trade in a price band of 10%, while the same for other three would be 20%.
The move comes after the SAT Friday stayed trading restrictions imposed on these four companies, which figured in a list of 331 "suspected shell companies" referred by the government to Sebi.
The appellants had submitted their respective financials, along with other filings, before SAT to establish that they are not shell companies and are in compliance with all regulations. Besides, trading in JKumar Infraprojects and Prakash Industries resumed today after SAT, Thursday, lifted trading restriction imposed on them as per a Sebi directive.
Sebi, on 7 August, had asked stock exchanges to restrict trading in shares of 331 "suspected shell companies", some of which have investments by several well-known domestic and foreign investors.
Subsequently, the exchanges had moved such stocks to the highest sixth grade of GSM, where the shares are allowed to trade only on first Monday of the month with no upward movement in price with Additional Surveillance Deposit of 200% of trade value to be deposited by the buyers.
Sebi had received the list of such companies from the corporate affairs ministry and many of the 331 firms are under the scanner of the serious fraud investigation office (SFIO) and the income tax department.


text:
Leakage Effects of Dominant and Higher Order Modes on Slotline
Typ dokumentupříspěvek z konference - elektronický
Macháč, Jan
Zehentner, Jan
Práva© 1996 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other uses, in any current or future media, including reprinting/republishing this material for advertising or promotional purposes, creating new collective works, for resale or redistribution to servers or lists, or reuse of any copyrighted component of this work in other works.
MetadataZobrazit celý záznam
The properties of the slotline when the dominant bound or leaky wave propagates, together with the behaviour of new higher order modes are investigated. The frequency range in which the slotline transmits the bound wave only is determined and the closed-form formula for its upper cut-off frequency is presented. The evolution of the propagation constant in the spectral gap between the propagating bound and leaky wave regions is shown. The influence of the substrate losses on leaky wave behaviour is presented. Some new aspects of both space and surface higher order leaky waves on the wide-slot line are discussed.
K tomuto záznamu jsou přiřazeny následující licenční soubory:


text:
Justin and Jennifer are loading their beds into the back of a pickup truck, and they end up crammed in next to them while they ride towards the village. Jeremy and Sandy try to flag down a truck, but it turns out to not be theirs. Andy and Tommy are moving their beds into position as Team Adventure arrives in fourth place and reads their clue. The snowboarders, seeing a green truck pulling up, figure that's theirs and start loading it up, to Jeremy and Sandy's great but ultimately impotent chagrin. "This could have been their truck, but who knows?" Andy says as they cruise down the road. They don't seem keen to make him turn around and go back, though. Ernie and Cindy show up in fifth, and Ernie smoothly jumps over a deep ditch while holding his end of the bed. And here are Bill and Cathi, in sixth place.
Back at the tailor shop, Amani and Marcus have finished sewing, although Amani says, "Babe, my jacket could look like anything, Lord have mercy." As their guy tries it on, Marcus insists, "My grandma would be proud! Come on with that clue!" He hands it over, because how many other people are going to walk out of that tailor shop wearing a genuine Amani jacket? No, don't get up, I'll fire myself. Back into the cab, where Marcus frets, "I'm on a high-speed chase, and this is the opposite of a high-speed chase."
Laurence and Zac are trying to convince the driver of their taxi -- a standard four-dour sedan, unmarked like most of the other taxis we're seeing in Malawi -- that two twin-sized bed frames are going to fit in his car somehow. "Can we open the passenger doors and put the beds through the middle?" Zac asks, obviously thinking he's in some alternate dimension where the rules of time and space do not apply, or in India. Jeremy and Sandy finally get a truck and load it up. Laurence and Zac and their driver read the rest of the clue telling them to ask the shop owner to call a driver, so they go to do that. "Bloody frustrating," Laurence says. Ernie and Cindy load up a truck, as do Bill and Cathi. "Now we're cooking!" Bill says. Laurence and Zac seem to be just trying to flag down a truck driver. We see Ernie and Cindy going down the road, clinging to the metal frame over their truck bed. "I've never felt less safe in my life than right now," Cindy says. Laurence, on the other hand, runs up to a moving truck, opens the driver's door, and runs along as it tries to take off, asking the driver for a ride for his beds. So Laurence clearly has a different safety threshold from Cindy. Bill and Cathi are on their way, while he whoops and yells happily at traffic from a standing position in the truck bed. "You'd better sit down before you fall down," Cathi warns, like he's the faller of the two of them. Laurence and Zac pile into the back seat of their truck's extended cab, saying they're in a race. "If those guys get there before us, we're done," Laurence tells the driver. "We go home." "Those guys" being Amani and Marcus, who are finally at the furniture store. They open their clue, get their beds into a pickup, and get back into their cab, telling their driver to follow the truck carrying their beds. "Please don't let us get eliminated," Amani says.


text:
One of the classic fibres for handspinners. Shetland wools have always been appreciated for their durability combined with a nice handle. This is a natural shade of grey showing a slight hint of brown undertones in the current combing that we have on sale. There is always slight variations from each combed lot of fleeces and this one is particularly interesting.
For needle felters of animals this is a good shade of grey possibly useful as a squirrel type shade.
Also good for wet felting


text:
Overwatch, to celebrate its first year, is launching an anniversary event which will run from now until June the 12th.
Details of the anniversary event were released via a video on the PlayOverwatch channel.
New arcade maps include the Black Forest, Necropolis, and Castillo. Legendary skins, dances, and emotes are also included in the update.


text:
Transaction will enable Genesis to provide enhanced offerings on a national basis
Los Angeles, California – October 12, 2017 – Genesis Capital, LLC ("Genesis" or "the Company"), a specialty commercial lending platform providing financing solutions to professional residential real estate developers, today announced that it has signed a definitive
agreement with an affiliate of Goldman Sachs ("Goldman Sachs") to support the Company in its next phase of growth. Genesis is being acquired from funds managed by Oaktree Capital Management L.P. ("Oaktree") and management. Terms of the transaction were not disclosed.
The transaction will enable Genesis to continue to grow its platform, with a focus on achieving additional scale in its current market segments and introducing new products and financing solutions to a broader and national client base. The Company's strategy is to be the debt financing partner of choice to the nation's top professional residential developers offering responsive, flexible and reliable service that empowers clients to seize upon opportunities and grow their businesses successfully.
"Our new partnership is a validation of the platform we have worked tirelessly to build and the strong relationships we have developed with a loyal client base," said Robert Wasmund, Co-Chief Executive Officer of Genesis Capital. "We look forward to working with the Goldman Sachs team in our next stage of development."
Rayman Mathoda, Co-Chief Executive Officer of Genesis, stated, "Over the last several years, we have grown significantly and solidified our position in the market. Through our robust and differentiated platform, we are well-positioned to extend financing solutions so that our clients can capitalize on the market's opportunities. This transaction will support that strategy by bringing further investment into the Company and allow our clients to benefit from an expanded suite of offerings designed to meet their growing needs."
"We are delighted to partner with the Genesis management team and help them scale in a large and attractive segment of the real estate lending market," said Anthony Arnold, Managing Director at Goldman Sachs. "We look forward to building on Genesis' industry-leading platform and positioning the Company for continued innovation and success."
Commenting on today's announcement, Brian Laibow, Managing Director of Oaktree, said, "We have enjoyed our relationship with Genesis over the past four years and are delighted to have overseen their rapid development, including loan originations surpassing $2.5 billion. The management team has built a truly differentiated platform that should afford them continued success. We wish Genesis well under their new stewardship."
Genesis was advised by Wells Fargo Securities. Legal counsel was provided to Genesis and Oaktree by Munger, Tolles & Olson. Goldman Sachs was advised by Goldman Sachs & Co. LLC and legal counsel was provided by Davis Polk & Wardwell and Mayer Brown LLP.
About Genesis Capital
Genesis Capital is a high growth specialty commercial lending platform providing financing for qualified and experienced real estate developers focused on the residential real estate market. Genesis Capital is headquartered in Los Angeles, CA. Visit Genesis Capital at www.genesiscapital.com.
About The Goldman Sachs Group, Inc.
The Goldman Sachs Group, Inc. is a leading global investment banking, securities and investment management firm that provides a wide range of financial services to a substantial and diversified client base that includes corporations, financial institutions, governments and individuals. Founded in 1869, the firm is headquartered in New York and maintains offices in all major financial centers around the world.
About Oaktree
Oaktree is a leader among global investment managers specializing in alternative investments, with $99 billion in assets under management as of June 30, 2017. The firm emphasizes an opportunistic, value-oriented and risk-controlled approach to investments in distressed debt, corporate debt (including high yield debt and senior loans), control investing, convertible securities, real estate and listed equities. Headquartered in Los Angeles, the firm has over 900 employees and offices in 18 cities worldwide. For additional information, please visit Oaktree's website at www.oaktreecapital.com
Media Contact for Genesis Capital, LLC
Brian Schaffer
212.279.3115 x229


text:
Are you prepared for flu season?
Protecting your children is a parent's biggest job. Whether it's from the school bully, the boogeyman or the flu. We are sure you have the first two under control but are your kids vaccinated against the flu? If not, there are many reasons as to why you should get them the flu shot immediately.
The CDC estimates that approximately 80,000 Americans and 10,000 Texans lost their lives due to flu-related illnesses last winter. The number of pediatric deaths this past season reached a new high, 185, excluding pandemic years. The loss of anyone to a vaccine-preventable disease is horrible, but especially when it is a child.
If that isn't enough of a reason for you to get you and your family the flu shot this season, here are five more reasons.
1) It minimizes symptoms
The flu shot greatly reduces the risk of contracting the flu. However, there is still a small chance they may still catch the virus. In the event they do, the flu shot helps to minimize the severity of symptoms and amount of time they have the flu. No one wants to see their child suffer, and thanks to the shot, you don't have to.
2) It saves money
If you do not vaccinate your children and they contract the flu, a trip to the doctor's office is just about a guarantee. In that case, you have to pay for the office visit, the medicine, and you lose time at work, which can impact your pay check. During the 2016- 2017 flu season, the flu vaccine prevented 2,640,000 medical visits and 84,700 hospitalizations, saving millions of dollars in health care costs. If you don't want to lose money, the flu shot is a great way to go.
3) It protects others
Everyone's immune system responds differently to the flu. Your child may get the flu and recover just fine, but may pass it on to another person whose immune system is not as strong, causing a more severe experience for someone else.
4) Kids are more at risk
Children under the age of two are more at risk of contracting the flu because their immune systems are still developing. Of the 185 pediatric deaths last year, 80 percent of them were not vaccinated.
5) It's always different
Just because your child did not get sick the previous year, does not mean they have a special immune systems and are unlikely to get the flu the next year. Flu strands are different from year to year because they are constantly mutating. That is why it is important to get your child the flu shot every year.
Flu season officially began on October 1st, are you and your family protected? If not, talk to your doctor about getting the vaccine and prevent the preventable!


text:
Destruction of Expired Special Education Records
As required by Federal Rule 34 CFR 300.624, Crosby ISD does hereby give notice to eligible students or the parents of students of the district's intention to destroy Special Education records that have expired retention periods. The retention period for Special Education records is five (5) years after graduation or cessation of services plus five (5) years. This will include those students receiving special education services who graduated in May of 2011. Those that have expired retention periods will be destroyed as noted by the rules of the Department of Education Federal Register, no sooner than February 28, 2017, unless objected to by eligible students or the parents of the student in writing to :
Karla McGee
Director of Special Education
Crosby ISD
706 Runneburg Rd.
Crosby, TX 77532


text:
Covers and color at Bull Run Winery!
Happy Fall! I will be playing some of your favorite music from the last 40 decades at Bull Run Winery tomorrow, November 1st, between 4:30 pm and 8:30 pm. View of the Winery at Bull Run Leave behind the drama … Continue reading Covers and color at Bull Run Winery!


text:
TrustedCare is here to help you. Our unique online directory provides care seekers with instant access to a full list of care homes, their specialisms and facilities, making it easier than ever to find a care home that feels like home.
Nestled in the heart of Cornwall, Bodmin is a small town steeped in history. Home to the Bodmin and Wenford railway (the only working full-size steam railway in Cornwall) and a host of other historical buildings and monuments, such as Cornwall's Regimental Museum, Bodmin Beacon and Bodmin Jail, there are plenty of things to see and do in this tranquil town.
At TrustedCare, we know that the process of researching care homes in Bodmin, creating a shortlist and making appointments to view suitable homes can be stressful and time-consuming at a time that is already emotionally charged. Our Care Advisors are trained, knowledgeable, compassionate, and on hand to help you. If the task ahead is just too much, please don't hesitate to get in touch with our Care Liaison Team. A Care Advisor will talk you through the general process, ask you to list your needs and preferences, and help you to create a shortlist. If required, they can arrange your viewings for you, too. With their help, we hope to help all care seekers to find the best possible residential care home in Bodmin to meet their needs.
Cowbridge is a residential care home for permanent residents where we look after people with dementia with the love and respect they would receive from their own families. The original building was owned by a local family...
4.3 out of 5.0
3 reviews
Call provider 01208 222212
Meadowbrook House has a warm and friendly atmosphere, with an excellent staff team who strive to provide the highest level of care to our residents. At Meadowbrook House we specialise in caring for those with dementia,...
4.3 out of 5.0
3 reviews
Call provider 01208 222211
Hendra Court is registered to care for 50 residents. We have a dual registration and can provide both Nursing and Residential care. The majority of our residents have a diagnosis of dementia or other cognitive deficit. We...
4.7 out of 5.0
3 reviews
Call provider 01726 213033
Trecarrel Care Home is registered for 44 residents with varying degrees of dementia. We have 26 rooms with en-suite facilities. Residents are always encouraged to personalise their bedroom with personal belongings. All...
4.0 out of 5.0
3 reviews
Call provider 01726 213408
TrustedCare offers free help & advice for people looking for a care for themselves or a loved one.
Our specialist Care Advisers can talk you through your options and identify the best services locally to provide the support you require.
Call us on 01865 680331Send message
St Austell
Beech Lodge was originally the home of the founder of St Austell Brewery here in St Austell. It was built around 1851. Beech Lodge stands in 7.5 acres of beautifully planted mature trees and camellias, with Rhododendrons...
4.0 out of 5.0
3 reviews
Call provider 01726 213398
Rivermead View Care Home, originally Tregertha Court Hotel, was built over 60 years ago. It stands on the main station road overlooking the estuary and enjoys stunning views of Looe. We are currently having major...
4.0 out of 5.0
3 reviews
Call provider 01503 770333
Addison Park is a dual registered EMI residential home. It is a unique building as it is all on a ground floor level which makes it a very easily accessible home for all to use. It has a big open plan feel with different...
4.3 out of 5.0
3 reviews
Call provider 01579 550411
Here at Kernow House Care Centre we are able to care for both older and younger people in our purpose built dedicated units. We are a home that listens to the views of our residents and we strive to ensure quality and...
4.3 out of 5.0
3 reviews
Call provider 01566 702108
Purpose built in award-winning gardens, Kenwyn Care Home offers a warm and friendly environment. Our large en-suite bedrooms are complimented by a variety of communal sitting areas. Our levels of care, service and attention to...
5.0 out of 5.0
3 reviews
Call provider 01255 411158
Nazareth House Plymouth is a care home registered by CQC to care for 44 residents with residential care needs. We are also proud to offer specialist palliative care. We have successfully achieved accreditation of the 'St...
4.5 out of 5.0
4 reviews
Call provider 01752 279083
Red House is nestled on the edge of Dartmoor in the historic village of Yelverton, Red House is a luxurious residential care home, which offers a holistic approach to care and a superior quality of life. More than just a...
4.7 out of 5.0
3 reviews
Call provider 01822 600044
Hayle, St Ives
Set amid beautiful gardens in the Cornish seaside destination of Hayle, Pine Trees is a residential care home in the popular Connor Downs area of the town. The ranch style house has been converted to a dedicated care home...
4.0 out of 5.0
1 review
Call provider 01736 803979
Concerned about how to fund the care of a loved one? Confused by the funding process? Read our articles and advice on care funding.
When it comes to paying for care it is essential to be practical, especially as there is a huge variance between the cost of care between local care homes.
Exploring the different scenarios and circumstances which make it necessary to sell the family home in order to fund ongoing care costs.
Choosing a care home for a loved one will likely be one of the biggest and most important decisions you will make in your adult life. Read on to find out the 5 key considerations which apply to everyone when choosing a care home.
It is not until a relative or loved one needs care that many people discover there is a difference between Care Homes & Nursing Homes! Read on to find out the distinguishes features between residential and nursing care.
Below are some of the most popular locations for nursing, residential, home and live-in care support, click to find out more about the support offered in these areas.
Live chat Speak with a care advisor.