I think anybody who has watched the channel for any amount of time knows that I'm a Vim fanboy. I prefer Vim to all other editors and I proclaim the benefits and merits and awesomeness of Vim to everyone who'll listen to me. Like literally I tell people who don't even at all care about text editors how great Vim is. I have a problem. But that's because Vim is truly amazing. It's really, really good. It's extensible. It's fast. It's just everything you want in a text editor. It doesn't have Tetris, but what can you do? But when it comes to writing there are definite drawbacks to actually using Vim. And a lot of this has to do with the functionality you would find in a word processor. Things that are built in dedicated to making writing easier. One of those things is autocorrect. Autocorrect has become a meme in internet land.  If you use the Android or an iOS phone, autocorrect is horrible. Something that AI has generated to try to fix your misspellings. It's not that great. And some of the outputs of those things are generally hilarious. For the most part, while it's definitely nice that it's there and you wouldn't want it to go away, everyone knows that it's subpar, but it's still something that you want to have. So if you're in like a text editor like LibreOffice, autocorrect is something that is there. So if you misspell a commonly misspelled word, chances are LibreOffice will go ahead and correct that spelling. So for example, I always misspell the word the. I know I know how to spell the word the, but I'm typing so fast that I always misspell it like I put the letters in the wrong order. So it's always TEH. It happens all the time. Like literally every time I type the word, that's just the way it happens. I don't know why I've tried to train myself out of it. It's not it's like impossible. But because in a word processor, that's something apparently a lot of people do. You can have it set up so that it just autocorrects to the appropriate spelling of the word the. In Vim, it's not something that you can do out of the box. Well, that's not true. You can do it out of the box, but it's not set up for you out of the box. Like it doesn't have like a list of words that automatically corrects for you. You have to set it up and that's what we're going to talk about today. The functionality that I'm talking about is called abbreviations and it is awesome. Now, I know I've been talking about this from a writing perspective because that's the perspective that I look at them in. But if you're a developer or anything like that, this could be very useful for you as well. Because if you have certain things that you type a lot and you want to have a shorthand for that kind of thing and just have like auto expand. This would work for that as well. If you are always mistyping something in a certain programming language and you want to have it so that it autocorrects to what it's supposed to be. This would work as well for that. So this is not just for writers. This is for anyone who uses Vim. So let me show you how this works because it's astonishingly simple and you don't have to install plug-in, forward or anything. And it's really cool. So let's go ahead and move on over to my desktop here. And the way I have my nvim set up. Now this works in nvim, neovim or vim. So it doesn't really matter. So if you are in vim, your chances are you're going to be in your home directory and you'll do this instead of your vimrc file. And there's nothing wrong with that. This is the way vim works. For nvim, all the configuration for neovim takes place inside of .config slash nvim. And I have mine set up in a little bit different way. So mine is going to look a little bit different than yours, but the functionality is going to be the same. So if I vim into init.vim, which is the file that everyone who uses neovim will have. This is the equivalent of your vimrc file. So the same syntax and everything. And this is the way I have mine set up. All of my separate things are put in their own file and they're sourced from here. So basically it just means that it's going to put all that stuff here, but it's going to be in separate files. It means it's more organized, but that's kind of beside the point. The way you do this is you create a section in your vimrc file or your init.vim that looks like this. And this is the way you set up abbreviations on vim. So you start off with the trigger ab. So that just means abbreviation. And then the first argument after that is going to be the word that you either misspell or the thing that you want to type in for it to work. So in the case of the word the, I always mistype it teh, so I've put teh here. And then the next argument is the thing that you want it to be replaced with. So this would then automatically replace the misspelled word with the proper word. So let me do this teh and I hit space and see how it replaced it. So teh space and it replaced it. So I also have one for tlc, hit space and it's going to expand to the next cast. So this is useful for two things. So not only misspellings like teh, but also for text expansion. So if you've used Mac before, there's this application called text expander. And it's really awesome and it allows you to set up shortcuts for certain words. And then when it sees that shortcut, it will expand out into whatever you wanted to expand out to. So in this case, I did tlc, it expanded out into the Linux cast. Now I also have one for my name. So if I type in mw and hit space, it expands into my full name. That's really cool, right? So another awesome thing that you can do with this, if you're a coder or developer or whatever, you could set up things. So if you have things that you use all the time, you could set up a shortcut for that. So in this case, I'm always using the paragraph functionality and HTML. So I do comma p and then space and it gives me the paragraph tags for HTML. I'd still have to move my cursor back here. But the point is, is that you can do that. Now that's really cool, right? So if I wanted to create a new one, so I just do a B and then I'm going to say I misspell the word emerge. So I always, I've been messing around with gentoo. So I misspell the word emerge. I forget the R and let's just say I set up flat. So I type in the correct one here like so. And now, so if I save this and then source my MRC or in it dot them. Now, if I type in E M E G E and hit space, it'll correct it to the appropriate spelling. That's really cool, right? And that's literally all there is to it. You can probably see the benefits that this could bring you no matter what you use them for.  So that you can have them automatically replaced with the correct spelling or just expanded to the appropriate words. And if you are a developer or whatever, you can set up things that you type in all the time so that they're automatically expanded for you. So like that paragraph tag set there, you could do that, but for literally anything. Or you could set up things like if you misspelled the word class all the time, whatever, you could set up the an abbreviation for that so that it would replace it with the appropriate word. That's literally all there is to it. That's amazing. And it's a functionality that I use all the time. These are not all my abbreviations. These are just the ones that I showed you. The one that I use all the time is actually the Tonki one. My boss's name is Tony, but for whatever reason, I always type Tonki whenever I type his name. And I don't know why. So I have it set up automatically to change that to Tony so that I don't send an email or something with the war on spelling in it because that'd be really embarrassing. But you can see here the benefits of the abbreviation functionality of them. And it's really quite cool and it's really simple.  So just A, B, then the word that you want to type in to get to the result end. So like I said, T, E, H is that first positional argument and then the word that you want to replace it with. You don't have to anything that comes after that first word is going to be replaced once you hit space. So for example, when I was telling you about the TLC one like that, anything after that is going to be what's replaced. So you don't have to use quotation marks or anything like that. So it could be literally as long as you want it to be. So if you wanted to have like an address one, so address like this and then you type in your address, you know, 5500 West Main Street, Detroit, whatever. You know, you could just type that in and then whenever you typed in ADD, it would replace that whole thing. It doesn't matter how much you have after that. It would just use that first word to expand everything after it. So that is Vim's abbreviation functionality. I think it's amazing. It's literally one of the things that I rely on the most now because as I do my writing, I tend to misspell things. So if you've watched the channel for any amount of time, you know that I misspell things all the time. This here makes it so that I don't have a document full of misspellings. It's amazing. So if you have questions about this, you can leave those in the comment section below. I also want to shout out Jake Atlenex who showed me this in one of his videos. So you should definitely go check him out. I will link to his channel in the video description below as well. So if you want to follow me on Twitter, you can do so at the Linuxcast. If you want to follow me on Macedon or any other social media network, you can find those links in the video description below. You can support me on Patreon at patreon.com. Slash the Linuxcast. I'd like to thank my current patrons, Robert, Sid, Devon, Patrick, Fred, Kramer, TriDevil, Antoine, Unclebone, and KB, Gryff's Lounge, Megalyn, Jack Snipes and Jules, T-Vase, Abril and Xkeric, Samo, TGB, Keith, Andy, Gary, Ross, Mitchell, D-Dog, Carbon Data, Jeremy, Sean, Odin, Marnie, Eduardo, Artstern, Elliott, Mizzalov, Merrick, Camdash, Oli, Peterik, Crucials, Eric, 26, Primes, PM, Harlock, 1, and Phillip. Thanks everybody for watching. I'll see you next time.


Computers keep changing the world, but their power and safety is limited by their rigid design. The T2Tile project works for bigger and safer computing using living systems principles. Follow our progress here on T-Tuesday updates.


Hi everyone, Joe for Jaspy's Case Breaks.com coming at you with 2023 Panini Zenith Football. Six box, half case, pick your team, number three, half case from a fresh case. A very big thanks to this group for making it happen. Evan with that last spot Mojo Falcons before we pulled the remaining team for that random number block. Here's everybody else. And then we did this random number block randomizing a different video but here are the results of that. So it's a serial number break that only applies to these teams and that break, Zenith three. Set that right over here, let's pop open this fresh case and let's see what we can do here. Now this is a whole, this is a mess. These box are all over the place, terrible, terrible. Now we're doing a six box break, half case. So we've got six on the left side, six on the right side. One, two, three, four, five, six. We'll roll the die, one, two, three for the left side, four, five, six for the right side. And it's five again. I think we got five last time. So this was one, two, three so we're going to save these for some other time. And this is what we're looking for here. Two autographs, maybe one patch autograph per box on average. First two, there we go. Z-Star CD-Lam, class president. Mari Cooper, Rader. And there's Devin Singletary who's going to help us out. Let's do the regular auto, the non-patch auto. First it's my guy, Michael Maher. I think former Notre Dame, tight end I want to say. Pretty good player here, Jeffrey with my Raiders, nice. 14 out of 23, sharp looking card. And we've got more Raiders, Trey Tucker, 240 out of 299, a Raiders personal box. Silver and black patch, that's always a sharp look. And there's the speedy Trey Tucker's autograph, Jeffrey. And there's Singletary one out of 50. Z-Team, DK Metcalf, Justin Jefferson, and Anton Harrison 22 out of 50. For the Jags, that's going to be for Ed P. Thin Auto is Z-Grab's Leroy Kelly. 117 out of 199, that'll be for Jeffrey. Cleveland, this is for you. And we've got Sosgardner, 30 out of 50. Jersey, Z-Jersey, an autograph. That's going to be for Brad and the Jets. Brock Purdy, 4 out of 25, nice. Epic season. That's for the Niners, that'll be, that's a number block team. So that'll go to Niners, 4. Simon with that one. How about some Jake Hayner, one of one. Jerry Bennington and the Saints, nice. All aboard the Big Hit Express. And there's DeAndre Swift, 13 out of 25, Z-Jersey, an autograph. For the Eagles, Eagles are a random number block team. And that goes to Philadelphia 3. Joe Lawson with Philadelphia 3. I realize there could be some non-numbered cards for that random number block groups. I'll do a randomize for that. Winner take all on the non-numbered base cards. I think all the hits are numbered, so I don't think that will be an issue. Cross that bridge when we get there. Bryce Young, nice. Nice, Bryce. It's going to go to Carolina. Okay, there's a non-numbered card right there. So that's going to be something for someone to look forward to. Josh Jacobs and we've got Mackay Blackman, 49 out of 50. All right, your hits. We've got Davon A'shane, nice. 121 out of 299. Dolphins are a random number block team. That is numbered. 121 out of 299. So that'll go to Joe Lawson and the number one. And how about a Jalen Hyatt, 152 out of 299? I feel like I'm in some of the off-season football reading that I do. People are kind of high on Jalen Hyatt. I feel like he could really improve. Brad Monroe with the Giants. Adding Mahomes. We've got Jamar Chase, 10 out of 10. It's a cool-looking card. Serenity with the Bengals, nice. Z-Graphs autograph Neil Anderson, 38 out of 199. And we've got Kate Aughton, 1 out of 10. Nice patch. Look at that. Some great color popping out of that window. Fred has the Buccaneers. All right, final box coming up. They've made the shrink wrap a lot stronger this year. Madison, down at Washington. All right, final two hits. Good luck, everybody. First off is Garrett Williams, 183 out of 299. That'll be for Jeffrey and the Cardinals. And we've got Jackson Smith and Jig Butt, 223 out of 299. The Hawks of the Sea, Adam with the Seattle Seahawks. Great. There you go, gang. Congrats to all. Second half in the store right now, jaskyscasebreaks.com. Let's do the randomizer for the Bryce Young and other non-numbered cards. Let's flip back to the list. Let's grab the names on here. New dice, new list. Name on top gets all those non-numbered cards, including the Bryce Young after six times. Five and a one, one, two, three, four, five, and six. After six, Joe Lawson. We're going to get that Bryce Young non-numbered card and any other potential non-numbered cards that may be for the group of number block teams. There you have it, folks. I'm Joe for jaskyscasebreaks.com, and I will see you next time for the next one. Bye-bye.


I am a woman and I deserve a place on the table. The road to gender equality requires the elimination of all forms of discrimination, violence, exploitation, harmful policies and practices that affects women. Data from the World Bank suggests that globally, around 2.4 billion women of working age are not afforded equal economic opportunities with 178 countries maintaining legal barriers that prevent the full economic participation of women. In Nigeria, the case may not be different as development indicators from the World Bank as of 2020 shows that the country has only made 0.33% progress with respect to gender equality. This is why volunteer migrants and women in media advocate for a balanced society where no one is left behind. The call is all about equal rights, conditions, opportunity and powers for us as women to shape our life to contribute to the development of the society in general. The society persists when women and girls can contribute on the same terms as boys and men through their knowledge and resources. Tapping into the abilities and initiative of women is an important driver to development. We need to make conscious effort as a people. If you look at our political scene right now, we don't have 10% of women in governance. We seem to be re-trogressing compared to what we had a couple of years back. We need to have conscious effort, legislation, laws that will make it compulsory and necessary for us to have seats that are available for capable women. I'd like to emphasise that. I know that it can sound a bit intimidating for certain people when you say equality. They are quick to tell you a man and a woman and all the same.  But what it's calling for actually is to give women equal opportunity, equal playing field for setting desires, aspiration, fundamental human rights. It's not anything outrageous at the end of the day. It's not contest within gender. It's to say that if a woman aspires to political heights, she should get there. If she's in the military, she has the right to get there. If she wants to have a certain job opportunity, she should not be held back because she's a woman. She should not be denied setting fundamental rights as a result of her gender will be treated less than a male because she's a woman. So it's nothing too difficult to achieve actually for the world. Imagine a world where we have gender equality. Imagine in Nigeria where you have 50% of women in the National Assembly, women who are capable, women who can make a difference. The ones we have in place that are doing great, we need to encourage more women. Don't just encourage them, support them. We actually need to have more men talking about gender equality than we have women talking about it. Because men, perhaps if they are talking about it, they will listen to themselves. Let's support gender equality. This message is from the Migrants as Messengers volunteers.


Welcome to Learning English, a daily 30-minute program from the Voice of America. I'm Ashley Thompson. And I'm Dan Novak. This program is designed for English learners, so we speak a little slower, and we use words and phrases, especially written for people learning English. Coming up on the program, Gregory Stockle reports on the United States Senate dress code. Katie Weaver has a story on strangely shaped tomatoes. Anna Mateo joins me for a story on the American citizenship test for the Education Report. Later, John Russell and I present the English lesson of the day. But first, here is Gregory Stockle. The U.S. Senate's Majority Leader said this week that the legislative body will no longer enforce a dress code on its floor. A dress code is a set of rules about what may and may not be worn. Senator Chuck Schumer, the Majority Leader, said in a statement, Senators are able to choose what they wear on the Senate floor. I will continue to wear a suit. The change comes after Senator John Fetterman, a Democrat from Pennsylvania, has been voting from the doorways of the Senate to avoid violating the dress code. While other Senators wear business clothes or dresses in the Capitol building, Fetterman usually wears informal clothes like shorts at work. Schumer did not talk about Fetterman in his statement about the dress code, but the loosening of the dress code will only apply to Senators, not other employees. During his campaign for the U.S. Senate, Fetterman suffered a stroke, a serious medical condition that happens when the brain does not get enough oxygen from the blood. Earlier this year, Fetterman checked himself into a hospital for treatment on depression. When Fetterman returned from treatment, he started wearing more informal clothes, which he says make him more comfortable. The changes in dress code were met with disapproval from some of the Senate's more formal members. Kansas Senator Roger Marshall, a Republican, said it is a sad day in the Senate and that the people who Fetterman and Schumer represent should be embarrassed. Republican Senator Susan Collins of Maine agreed, arguing that the new rules discredit what the Senate represents. I plan to wear a bikini tomorrow to the Senate floor, Collins joked. A bikini is what one wears when swimming. Fetterman said he was not sure if he would start making use of the new rules just yet. He said it is nice to have them as a choice, but he plans to not use them very often and not overuse them. Fetterman said of his critics, they're freaking out, I don't understand it. He said there are more important things they should be working on instead of what he wears. Not all Republicans were troubled by the change. Missouri Senator Josh Hawley was wearing jeans on Monday evening. He says he normally wears informal clothes when he flies in from his home state for the first votes of the week. Now I can vote from the Senate floor on Mondays, Hawley said, noting that he usually wears a suit and tie every other day.  Nearby, Connecticut Senator Chris Murphy was also without a tie. The Democrat said he has gotten in trouble with the Senate's official clothes police, called Sargent at Arms, in the past for not wearing a tie on the floor. They would tell us when we were doing it wrong, Murphy said. It is unclear if the rules for more formal wear were actually written down anywhere. But Schumer's statement means employees will no longer criticize senators for their choice of clothing or ask them to vote from the doorway. I think we should all want to be more comfortable, Fetterman told a group of reporters on Monday. He added that now that they have that choice, and if people want to wear a suit, then that's great. I'm Gregory Stockle. This is the time of year when many gardeners are harvesting tomatoes. Associated Press gardening expert Jessica Demiano recently reported about the many pictures of strangely shaped tomatoes sent to her from fans of her gardening advice. She said people sometimes question if the tomatoes are okay to eat. The good news Demiano said is that there is nothing wrong with the deformed fruits. Unless otherwise diseased, they are perfectly good for eating. Their unusual appearance does not affect their taste or nutritional value. If you have ever cut open a tomato, you know they are divided into internal parts called locuoles, which contain seeds and a substance called gel. Most tomatoes have about four or five locuoles. Other kinds of the fruit, like cherry tomatoes, contain two or three. Plum or roma tomatoes have two locuoles. But when a plant experiences temperature extremes, cell division in the developing fruit can go off track. Temperatures over 32 degrees Celsius during the day and 27 overnight can lead the tomato to form an extra locule. But there is not enough room inside a tomato for the extra part, so it grows on the outside of the fruit. Not every tomato on an affected plant will be deformed, however. Under the right conditions, temperatures that are too hot or even too cold, this could affect one or two tomatoes per plant, depending on where they are in the development process and what the weather conditions are, said Timothy McDermott. He is an assistant professor and extension educator at Ohio State University. The likelihood of one of your tomatoes developing a locule oddity is estimated to be about one in a thousand, McDermott said. Any tomato can grow an extra locule, but Damiano noted, heirloom kinds seem more likely to have this genetic mutation than hybrids. The extra locule mutation is not the only abnormality caused by extreme heat. Conditions including sunscald, blossom drop, halted fruit formation and ripening can also arise when plants are grown outside their usual temperature limit. Add shade for your plants when temperatures are predicted to remain above 32 degrees Celsius for several days. Attach a piece of 40 to 50% shade cloth to stakes inserted into the ground around the plant. Leave it in place from 12 to 4 pm when the sun is at its strongest. Then remove it to avoid problems caused by a lack of sunlight. And when harvesting your crop, remember, the funny looking tomatoes taste just as good. I'm Katie Weaver. The United States admitted over 967,000 people as new citizens in 2022. United States Citizenship and Immigration Services, or USCIS, said that was the largest number of people naturalized since 2008. To become a US citizen, a candidate needs to live in the country as a permanent resident for at least 5 years and be over 18 years old. After applying, a candidate for citizenship needs to pass an interview with a US CIS officer. In the interview, an official assesses the person for their English ability, knowledge of American history and government, and personal background. Over 96% of people pass the naturalization test, but changes are coming to the test that could make it more difficult for English learners. Caroline Quinn and John Schmelzer teach a free class in Montgomery County, Maryland to help prepare people living in the area for the interview. They said, it is most important that people are able to understand the questions the interviewer is asking. It is not as important to speak in grammatically correct sentences. The question the interviewer is trying to answer is, do these people understand enough English to be a functioning citizen, Schmelzer said. At the beginning of each class, Quinn and Schmelzer ask their students simple, small talk questions they might hear in the interview, like, how did you get here today? Or why do you want to become a United States citizen? Much of the interview is based on questions on the application for naturalization form called the N400. Most are personal questions related to employment, family, and personal history. Rajbiet Khan took Quinn's class and passed the naturalization interview in August. She said the class gave her more confidence to speak English in the interview. Before the class she rarely spoke English, she said, but now I talk to anyone. However, Quinn stresses to her students that her class is not an English class and she has students enter her class without enough English knowledge to pass the interview. With the increase in Afghan immigrants into the United States, Quinn said she has had a few Afghan women come into her class. She said they never had any kind of schooling, so they don't know how to write, they don't know how to read, they don't know letter sounds. Even family members with better English skills will fill out the N400 form for them, but they would be unable to answer the interview questions themselves. Possible changes to the naturalization interview would make civics questions multiple choice to reflect current best practices in test design. U.S. CIS said in a document explaining the update to the test. Schmelzer said that would make the test harder for immigrants who may not have a great understanding of American history or English. For now, students memorize 100 civics questions. Ten of the questions will be asked on the day of the interview, and applicants must answer six correctly to pass. One question is, name one war fought by the United States in the 1800s. Currently, people just need to memorize one war fought during that 100 year period, but a multiple choice test would require knowledge of four wars presented as answer choices, and know which one was fought in the 1800s. We're forcing them to expand their memorization, Schmelzer said. Another proposed change would add a speaking test to assess English ability. The officer would present three photos, and the interviewee would have to describe what is happening in the pictures. Currently, English knowledge is assessed through questions from the N400 and other small talk questions. The new interview changes are currently being tested in several locations around the country. USCIS will hear feedback about the tests before the end of the year. Quinn and Schmelzer said the test should be updated. Just one civics question is related to a female American historical figure, Schmelzer said. But Quinn questions what is to be gained by making changes to the test to make it harder. People in her class put their souls into becoming citizens. How much more do we need to ask them to do, she said? John Yepo is another of Quinn's students, who along with his wife recently became a U.S. citizen. Yepo came from the Democratic Republic of Congo. He lived in Zambia for 10 years before moving to the United States. Yepo, who works as a medication technician, said he follows American politics closely. He calls himself a life-long learner and has even taken online classes about American history. I want to learn and make sure I'm integrated into American society, he said. Yepo added, this is the land of opportunity. We are dreaming big. He said he will make sure to take advantage of every opportunity. I'm Anna Mateo. And I'm Dan Novak. Hello Dan, thank you for having me on your podcast. I have a couple of questions for you about the story we just presented. Sure, Anna, go ahead. Well, the story mentioned that changes were coming to the naturalization interview and that those changes could make it harder for English learners. Could you please explain those changes again? Yeah, so I spoke to two teachers of a citizenship class for this story. They said there are a couple changes that could make the test more difficult. One is making the civics portion multiple choice. Now applicants just need to memorize 100 questions and 100 answers. But making it multiple choice could make it harder. For example, there is one civics question that asks to name a war the U.S. fought in in the 1800s. Now the teachers tell the students to memorize the Civil War as the correct answer. But there are actually several correct answers. The War of 1812 or the Spanish American War, for example. Any of those could show up as the correct answer in a multiple choice format. For people that haven't been living in the U.S. for that long and aren't as familiar with American history or government, it's definitely going to be more challenging. And there's another proposed section in the interview that would assess English ability. Is that correct? Right. There is a proposed speaking test in which an officer would present three photos to the applicant and they would need to describe what is going on in the photos. I attended a couple of the citizenship classes. And just by speaking to the students, there was a really big range of English skills. Some could easily answer my questions and others struggled more. So I think a section to describe photos could be really difficult for some people. When would these changes come? The changes are in a trial period now and USCIS will hear feedback about the changes sometime before the end of this year and make improvements. So I would expect the changes to come no earlier than late 2024. Thank you so much for answering my questions, Dan. No problem, Anna. Thanks for joining me. In this report, John Russell talks to us about an empty village in the United Arab Emirates. We learn a little about the history of the village. We also learn about how it has become popular with visitors. Pay careful attention to the word reminder. We will talk more about the word after the report. About an hour's drive from the tall buildings of Dubai is an empty village in the sands of the United Arab Emirates. It stands as a reminder of how fast the Middle Eastern country is changing. Built in the 1970s, the village of Alhoreva was left empty 20 years later. Oil wealth has turned the UAE, home to the cities of Dubai and Abu Dhabi, into an international center of commerce and tourism. In recent years, the empty village near the town of Almadam in the Sharjah Emirate has become more popular with visitors. The village, made up of two rows of homes and a religious center, can teach us a lot of the modern history of the UAE, said Ahmed Sukar, of the University of Sharjah. Sukar is part of a team studying the area. Alhoreva was built as part of a public housing project after the 1971 establishment of the United Arab Emirates, a group of seven sheikhdoms. The discovery of oil 13 years earlier was just starting to reshape the country. The village housed around 100 members of the Alkhetbi tribe, Sukar said. They were one of several Bedouin groups that until then had led a semi-nomadic existence. They raised animals, traveled among the desert oases, and visited Dubai and Abu Dhabi when they were small towns. The modern cement houses were built with local details to ease the change to settled life. The inside walls were brightly colored, and some had mosaics. The homes also had spaces where village leaders could gather locals for meetings. One house had special paper known as wall paper, showing a land with green plants and trees, a big difference from the sandy environment outside. It is unclear what exactly caused people to leave just 20 years after the homes were built. Some say they were driven away by evil spirits. But Sukar says it is more likely that people left to seek a better life in the UAE's fast-growing cities. The village had limited electricity and water, and was often hit by sandstorms. Families would have also had to deal with long traveling times across the desert to reach government jobs and schools in Dubai. Now the desert is slowly taking back the village. Sand has blown into the homes. Only the religious center, or mosque, remains as it was thanks to regular cleaning by workers from nearby Al-Madam. Some descendants of the camel-mounted Bedouin who once traveled the desert sands still live in the Emirates' rural areas. However, many now live in cities with tall buildings, large shopping centers, and modern roads. Foreign nationals make up the majority of the UAE's population, and some have taken an interest in its history. It is also a place for them to record music videos and social media posts. On a recent day, groups of visitors walked through the abandoned village. I wonder why they left, said Nitin Panchal, an Indian living in the UAE. Could it be a genie? Could it be black magic? Panchal asked. We'll never know. The local government recently installed fencing along with a security gate, waste containers, and a parking lot. Officials made the changes because past visitors had caused damage to the village. The new measures have taken some of the mystery from the village. Danny Booth is from the Isle of Man, a British crown dependency in the Irish Sea. He said he had decided to come and have a look before things start to change here. Sometimes these places are better left undisturbed as they lose their charm when they become crowded, he said. I'm John Russell. Before the report, we asked you to pay careful attention to the word reminder. Can you remember when you heard it? You heard reminder at the beginning of the story. Let's listen again. About an hour's drive from the tall buildings of Dubai is an empty village in the sands of the United Arab Emirates. It stands as a reminder of how fast the Middle Eastern country is changing. Let's start by breaking apart the word reminder. The online etymology dictionary tells us that the word has Latin and Germanic roots. It consists of re, meaning again, and mind. That is how we get the verb remind. When we add an er ending to remind, we get the noun form reminder. It was first used in the mid 1600s. The verb remind means to cause someone to remember something. The noun reminder means something that causes you to think about or remember something. Google's Ngram viewer tells us that reminder has become more commonly used over the past 200 years. It also tells us that English speakers are more likely to use the short word a with the noun reminder. So in other words, you are more likely to hear English speakers say a reminder than the reminder. Let's explore some examples in everyday situations. At work, you might hear a person say, please send me a reminder about the documents, or I will send you a reminder. At school, you might hear a teacher say, that student needs a reminder about the class rules. We also use the term reminder when we talk about history or current events. You might hear a person describe an object or group of objects as a reminder of something. That is why the report described the empty village as a reminder of how fast the UAE is changing. And that's the lesson of the day. Thanks for listening. And that's our program for today. Join us again tomorrow to keep learning English through stories from around the world. I'm Ashley Thompson. And I'm Dan Novak.


in the name of the law we bring you another of the thrilling stories in this exciting series taken from actual police case file story begins in Chicago's Chinatown Chicago's lime house a strange medley of splendor and shabbiness would you hadn't brought me on this trip Chinatown's no place to bring a girl on the honeymoon ah them Chinese invented barcrackers nothing never happens in Chinatown these days guy on the left is the headquarters of the only uncle I tell you nothing ever happened in Chinatown on the left is the city in police station 50 minutes of choice I try to garden and bizarre where you may witness it in police station return here is picking see Jack he turned he shut up like a bunch of plans when you want to get anything out of them and come now young I'll talk to you all again I'm going inside shop now to look at my dead body of respected long fool after that I want to talk particularly to you Hong and you long change car divers old pottery porcelain no fine shop all right and here he lies in the middle of it riddled with bullets and it's a fine gentleman lies here Sergeant Schroeder is this the way you found long food yes that's what I'm lost but by this little alter that Buddha can only speak if you cover one full of that banner that's the way it was the interior yellow dragon of old China must have pulled that banner off the wall in the struggle you break open that front door sergeant yes Lieutenant Haley that number Chinese was outside when I came along at half past eight long for always open this place at eight o'clock yeah that's what all those gentlemen said you're yelling about trouble and thought something must have happened but busted in the door and found one full like this shot five or six times under the left chest oh have you got that lend of them yes I'm checking on those bullets holes in the wall too and be sure your photograph show the position of the body in relation to that open safe right oh I want a picture of this pair of slippers too I have those with on both and that sheet of wrapping paper here is right arm looks as if he was shot down while he was wrapping up those slippers hey those are women's slippers you think the murderer could have been a woman somebody fired at least 12 bullets at long foes and nobody heard me gunfire no reports in the blotter last night nope not a firecracker shot off could have covered up pistol shots I'd say six of those bullets hit him I don't think the trigger figure belongs to a woman though but here's a woman's purse over here on the field and three glasses here here's a bottle hmm I got past rice wine beautiful glasses fingerprints well take care of them shorter that's a long who must have been having a little party three glasses shorter bring you know Chang and who home yes I'm coming oh come on now your employer was murdered last night none of this no talkie business on Kentucky one one full the sides you can speak English how they sound a long full catchy double on the boat and fly I'll make much sadness saying thanks you're so long word yeah that you both work for one food and yes every day workshop here thanks your boss was a kind man was me yes everybody hold in large esteem he called one for young thing who killed him you see show me a Chinaman of the murder case now show you a clam these men may tell us something yeah they were perch and quarters here I wanted you last see one food what were his last words to you a slack of night and what time was that seven o'clock last night who is with you no tell I'll find out another way home remember tongue I hear many voices in Chinatown I went for last night and you work until eleven o'clock every night no not every night last night on level long cool and fight us sick with him having tea and talk conversation you didn't have this rice wine from these glasses oh no not drinking gapa with one cool on that day and you left him here at eleven o'clock last night yes he come to door with us he bowed a good night long cool shut door we have both inside the bar lock we saw you leave who are your witnesses nobody see what woman was here last night you know there was a woman here she left this person won't tell you I'm when they're young they are one full of long cool who's this guy who are you well I I think that's your one full of just here sadness of his death yes too bad I ain't you've not been in Chicago long have you short time three weeks I think have you any idea who could have killed your uncle not no uncle have no enemies do you know of any woman who came here somebody whose feet but these slippers I think why didn't this woman take that date necklace don't know woman song find out maybe maybe song take care of you rather have your uncle's tongue handled a you'd rather get a hatchet man to pay off this murder is that it no very sorry uncle has gone to ancestors like this with bullets what's that oh they're mourning for one full of Sergeant shoulder Sergeant shoulder a commandment as the third district wagon for the body bring these three Chinese down the headquarters if that's left you away from those other two you don't have enough to kill them come on come on we're going to give you something better than rice cakes and tea yeah have a drink tea for a rubber hose come on let's have a hilly we're going to see Lee gentlemen will you join me in bubble bubble thanks Lee John I will take none of these water pipes for me I'll stick the cigarettes and to each division it is wise man who know his own desires as for me I prefer the pulverized tobacco about Chinese bubble bubble a cool soothing mellow method of smoking that's really good walk you know the pride sometimes I'm trying to find out who murdered one fool leech young we've come to you to help us solve this crime it saddens me to know that that's my friend Wong who has gone to the salary kingdom you know what Confucius say lieutenant Healy know what we don't work better that a man phone never met in holy place and he'd be dishonored by his friend that's exactly my idea to your idea of what say I like this Chinese philosophy too but how's it going to help us find out who killed one fool dishonored by his friend Ali Jung you have not titled but they call you mayor of China down here in Chicago I know we can depend upon you to solve this crime you know my people well lieutenant boss there is small help I can offer yes I will do everything I can it is well to remember that the murderer of Wong who was a wily crafty person and trusted otherwise Wong who would not open his face in such a present excuse me yes I am I sound lieutenant boss you have to go through this out of Hong Lee oh yes leech and all right come on well only that's the place where that receipt came from the receipt and that first we found the one who store yes lieutenant Healy that is true why we stop there on our way down here and they wouldn't talk they will speak now ask to speak with our chin if you gentlemen should need me as poor translator of Chinese dialect unfamiliar to you do not hesitate to call upon this number you can't keep me in my dressing room all night I've got to go on from my yes we you put on a neck last night at Wong food with a couple of goods I don't even know Wong food his family is too good for my suit to channel but you are beautiful miss Lee how did that first of yours get there on his table how should I know I would see you here at blossom gardens last night I couldn't have been at Wong food impossible hold out your foot miss Lee fine shall claim you want to take footprints no but I'd like to try these slippers on just wait a minute Cinderella what do you think of that it's a perfect fit well how do you explain that miss Lee explain what this slipper which we found in Wong food dead hand fits your foot exactly my foot would fit hundreds of slippers in any Chinese store any other Chinese girl isn't it you bought it at Hong Lee's desire didn't you I had one like it but I lost it who is it this man it's a big time it never needs that going on singing and dancing I'll be right out chin I think not miss Lee your next act is going on as headquarters no I had nothing to do with it take it down wall I'm going over apartment and look for a guy I did no one but I didn't kill him that is all I can tell you there is nothing more I young child seen Chinese dinner over the floor but those bits of paper and you to me what do they call each other a devil in human form has taken Wong food life so little sister paper 10,000 of them are to protect his immortal soul from devil how's that in every sister paper there are nine small 90,000 holes all together what do they do to reach one full soul each one of the 10,000 Chinese that I would have to crawl through each of the 90,000 holes now his mother is called to a hole so far but you think you do not get past the murder that's right I didn't want to come to this you know I don't mind a good Irish wake but these Chinese bury and give me the creed Wong who knows not his murderer else their justice would have reached him yeah with a hatchet a wall watch all the faces around here and see if I do anything they leech him you see our him over there you mean they saw one for his long steels nephew yes notice anything clone his face is sometimes like a mask and sometimes he's very nervous he's not acting like a Chinese of a criminal yeah something is eating that guy he's smoking a lot of cigarettes outside a while ago chain smoking them too I've got a hunch I think we'd better take our hing to a resting place but I do not belong in your prison in this small cell yes your uncle doesn't belong in his face tonight either where'd you get the money our hing I suppose you found it in your uncle's face it's better to talk now hing Hong San Bang the hatchets of the tongues are sharp I would leave money from China on a relative I suppose yes from another uncle in Shanghai if you needed money why did you go to your uncle one fool for it because you knew he wouldn't give it to you're a lazy Chinaman and don't like work is not about it money came from Shanghai you took that six hundred dollars from your uncle see why was woman first found and woman slipper really explain that you explained why you hid that money in the mattress of your bed where did you hide the gun there was a two guys build your uncle with enough lead all right woman murdered my uncle came to steal gave necklace after my uncle was dead she she lost confidence and left necklace oh what does matter oh this is what must have gone on over here it's hot oh Draper bring us a white ball will you please this one went out oh my darkness and there you are all right it's cinnamon crack yet no he got that six hundred bucks from another uncle in Shanghai just a minute oh sergeant Drapers or anyone in solitary and oh lieutenant sir ain't had anybody there since big iron Rodgers last week good come on long I ain't we're going to put you where you can think things over a little better you'll take me please solitary yeah this cell right here in doc yeah you don't like the doc do you are hanging no no please do not lock me in doc if there's full of devil and it's full of ghosts too I think you'll find the ghost of your uncle won't fool in there you killed him didn't you know no please on the boat placement put me anywhere in prison but not in that please do not lock me up in here please on the boat placement let me out why did you kill one fool I know nothing about his mother please let me out it is so far I think you're going to stay in there in the dark and will you tell us the truth I'm not keeping in darkness this is all around me this is all black and full of devil you've been in there five hours on each of them I think perhaps he is ready now to speak well I think why did you murder your uncle one who did not die by my hand could not kill well it is a family blood you spilled plenty of family blood why don't you admit it I think he did I cannot compare murder I could yeah let's just go down the corridor a little way all right very well I think you like the dark so much you stay in there cut me out come and keep me in darkness come and keep me in darkness I don't reach him what's he saying he'll say he'll kill you one fool well paper get me along to take on this confession sit down here I think that was how you killed your uncle I don't think I want to be so you can't speak English yeah how can I get that stuff done I think he said he will speak now only in his own language you translate for it really germ I will do so what's he saying he says I killed my uncle I was in need of money take that down along I'm getting with him he says I went to my uncle and asked him to give me money he says no you are very wasteful and I would not find favor in eyes of my uncle say unless you change your mode of living mode of living is not pleasing to me nor to my entity I'll call that pleasure what they are uncle by earning some of money saving it bringing it to me to show me I borrowed $60 he said I bought a gun with $10 of this money and I took it with me to my uncle's shop this was done last Saturday night he said I stole a woman's purse and took it with me to leave it in shop to confuse honorable police I'm so confused he is saying my uncle received me well when I showed him the money yeah is some which I have earned with your uncle as you commanded just pay dollars and if you you'll make me glad now I am sure our ancestors will approve your mode of living I will give you a little present and we shall have some wine ah this is very poor rice wine it is best one for taste it's not just in beauty taste necklace that you see in your face I'm miserable necklace oh it is priceless my uncle would you like to gaze upon it his humble eyes would indeed like to see it I shall open the space and get it out my gay necklace most cherished they're all my poor position three thousand years ago and grown in beauty day by day my nephew you have tonight yourself pleasure in saving this 50 dollar I shall now give you a little present which perhaps you would like to give to someone you cherish please nipper happy the woman whose foot they will fit with their uncle but nephew why do you have a gun with their uncle I bring it to kill you he said he took money from his faith taking care to wear gloves and to wipe off all fingerprints from the wine glass he said he did not take these days necklace because he knew he would be caught by the town he threw the gun into the river that's it all thank you leach on our hing why did you leave a third wine glass on the table I left it there for confusion of honorable police but it didn't work our hing you forgot just one thing what our hing forget you were afraid of the dark our hing the jury having found you guilty of murderers charged criminal court of cook county hereby sentences you to imprisonment the state penitentiary in jollyeth illinois for the rest of your natural life the winners again when truth and justice triumph in the name of the law


I've been working on web applications security for about three years, some of the things I've seen, how to get into different systems on a purely web application level, not the web server, more like the CGI's on top of it, so just briefly go over what a web application is. Basically a CGI, there are message boards, web mail, guest books, auctions, online banking, stock quotes, the biggest companies run these things, they're everywhere. If you go on the web and do just about anything, chances are you're working on a web application. What, as your security folks, do we see and how to break them down, how to circumvent the security in them, so that's what I'll be covering. So the scope of the topic I'm going to try to keep to on the client side of the connection, web application security does deal with the actual exploitation of the system, however RFP or many other people cover it a lot better than I do, so this is sticking to basic client level, attacking the browsers, attacking the cookies and things of that nature, however if you guys have like system things you want to ask, quote very, also if you guys have any questions, any time, go for it. So who uses web applications? Eve, Yahoo, Microsoft Hotmail, eTrade, anybody got some more? What was that? Right, there's a web application too, like say, like leaks, this, routers and stuff like that, that would be a web application. Right, at least distance learning and things like that. Right, right, right, like all advantage or something or, not sure exactly what I followed, but if you have questions on it. Parasites, okay. Let's see, from a security standpoint when you're auditing a system or I'm attacking a system, generally there's three main types of what I'm trying to profile a system as far as learning about it and what I'm trying to do. There's the CGIs or the web applications that allow the user to input HTML and get an echo of HTML back where it means it might be filtered, but it still comes back as HTML, it's actually allowable, seen in chat rooms and message boards and things of that nature where it stays HTML. The other ones are the ones that do not allow HTML at all, the ones that strip it out blatantly for whatever reason, you know, we'll figure out why later. And the other ones are systems that use their own subset of HTML, I won't cover this too much, but you'll come across like chat rooms and message boards and stuff like that where you want to change the formatting of the web application, you have to use their own subset of tags and there's also the ones I'll briefly cover on the ones that use Java based engines to run it. The chat rooms like, you know, Java based client that connects to IRC or something like that, there's a lot of them out there, but I won't cover those too much because they're kind of their own embedded app. So when you have a CGI, what kind of things are you exposed to by putting it up on the web where everyone can look at it? There's system exploits on the system itself, you can, there's browser redirects for the user, if you can find it and implement a CGI bug, you can throw an entire site to another site, say a portal site, that'd be kind of fun. There's page spoofing where we see instances of a bug being exploited in a system where the user gets a fake login page and the end-with-the-link give up their username and password. There's also depth of their cookie file on that domain which could give up their authentication for that particular session. And there's also things you can get user information and you can also track the user even though it's not really your site. So we can cover, anybody have a question so far? I'm sorry, what was the question? No, I'm just, no it's from myself. Okay, first we'll cover the systems that allow HTML. Let's sit here. Let's go over the basic cookie security because a lot of sites, they use cookies for simple authentication and re-authentication as they move through the sites, also like for shopping carts and things like that where the cookie actually keeps track of the actual session. Basic cookie security is a particular website should not have access to any cookies or only should have access to cookies for its particular domain. It shouldn't get access to cookies from another domain. However, nice people at Microsoft with that latest IE bug kind of destroyed that one. But basically that's the security implementation. So let's say you found a, what is JavaScript now? What does JavaScript have access to? JavaScript when you're implementing it to the system into like a chat room or a message board or something like that, what does it actually have access to? Well, it has access to all the browser information, it has access to the IPs of the user, all the plugins and the paths to the plugins, just about everything that they're using, it also has access to the cookie files and their environmental variables. The important one that it has access to, the domain that JavaScript is executing on, it has access to the cookies on that domain. Now the trick would be for a supposed hacker or malicious user is to try to get the user's cookies off the domain into another domain. Okay, so I'll show you how a lot of, how that's accomplished. How that is accomplished is if a user was to put HTML and JavaScript into a message board and you were to go read that message that JavaScript would execute in your browser environment, okay, it would be able to grab the domain cookie string and append it to some HTML mechanism that would send a GET request off the domain to somewhere else. For instance, you could change the source of an image on that page and append it to the end. So a GET request would go to another server off the domain and you'd get the actual cookie string. I hope that's like clear. Okay. Anybody have any questions on this? I know what I did get clear. Yes. It's okay. I guess it would, the flaw would lie in JavaScript. Okay. If you're able to put JavaScript into a system and users would read it. Okay. If a user would read it, the code would grab the string and say, make it real simple, open a new window with the attackers domain and append it with a CGI and append the cookie data to the CGI variable. So it would do a GET request with the cookie value off of the CGI. So basically the whole cookie value gets passed to the CGI off the domain. That's for authentication. That seems to be one of the more widespread ones. If you're able to get the users cookies, you can replace your cookie with theirs and in essence become them. So if an active eTrade user was running, grab their cookie file, replace it with yours and guess what? You get to trade stocks in their account. So now in a lot of systems, they'll have, I guess, HTML JavaScript filters to try to clean up the problem, but still have to allow, I don't know, for whatever, formative reason to keep HTML and JavaScript in this HTML itself for their users and features. So I'll talk about some of the ways to get around it, how you test it. The basic, basic, basic tags, when you're running off CGI, what you don't want to allow into your system to be able for the user to pass into the message board are the following tags. You don't want to have the P tag going. I'll explain these why later. You don't have the applet tag coming in. The embed, script, layer, frame, set, frame, HTML, body, style, meta, or object. There's a lot of them you have to filter. If you allow the applet tag into the system into a system that allows HTML, they can load whatever Java applet you want and do whatever to somebody else's domain. Imagine if somebody, like Microsoft Hotmail, you email somebody a message with an applet and it loads, and then you have access to everything on their domain with a Java applet. The same thing goes for the style tag, embed, anything of that nature. So those tags you actually have to strip out even though you allow HTML. Nothing good can happen when you're using those tags. So the script tag, the P tag. There's a known exploit that's been posted to BugTrack. I think George Iginenski found it where you can actually add a VB expression that actually execute JavaScript without actually having any JavaScript looking things in it so nobody knows really to filter for it. You'll find it on BugTrack and things like that. Which brings right into the things that you can check in your own CGI's or other people's CGI's. I'm sorry. The question was, do I think that more security should be in place for say forms of values being passed to the CGR to the web server as far as should it show you what you're actually sending them? I think yes, but no one's seen it so far. Basically I guess the idea of the web is trying to make it user friendly. But yeah, I think so. I'd like to be able to know immediately what cookie data I'm sending without actually having to look in the cookie file. That would be my preference. So when you're testing a system, if you're actually auditing your own systems or somebody else's systems, what can you actually test against what actually are the exploits to get past the, I guess the string filters and things like that. One very simple one is the script tag. Everybody should be familiar with HTML and JavaScript. The actual script tag, when you put an expression in there, you submit it to the system. You can even try it like a lot of search engines will allow you to put right into their search function, put a script tag in, and it brings back a script tag and it executes major no-no to have on your major site. Another way to, so what major sites do is they filter for the script tag itself and they'll strip it out, replace it with whatever, they'll strip it out completely or replace it with something, which is a good tactic that you should all use. Another way to get around that would be to when you're submitting to the search engine itself a string, instead of just one singular line, throw a carriage return in it because it's actually a character and it'll actually, a lot of times beat, they won't escape the carriage return, so it'll actually beat the filters and still get by and echo back. Let me show you. Okay, you see the script tag way up there? That's the most basic one. Try that into a lot of places and that will work. So basically what you can do is if you know somebody's active on a session, say anywhere like on Hotmail or something like that, you email them, I'm not saying it works in Hotmail, but you email them an HTML mail with the script tag in it and it executes. You have access to everything that Hotmail actually has access to. The second one from the top is I call image sourcing. Basically what the idea is the JavaScript colon and then the JavaScript expression will actually execute inside of Netscape and run. It doesn't actually look like JavaScript, but it actually works, so sites will have to look for the JavaScript keyword and like separate it somehow or do whatever they want to do so it doesn't execute anything other than what it originally looks like before it gets echoed back to the user has to be done. In the ones below it where actually Netscape's code names for JavaScript are developing it, Mocha and LiveScript and Replacer JavaScript will also work which is quite nice of Netscape to not to tell us about. So basically those in all systems that allow HTML have to strip those out before they get echoed back to the user otherwise security breakdown again. The singular line break below that is what I was talking about before that will still execute in Netscape and beat a lot of filters. The multi-line break so trying these against systems they'll get smart and wise up and start escaping the carriage returns or you can multi-carriage return and it still works so you escape the whole thing so we begin to start to see the thing where HTML and JavaScript start not to look like HTML and JavaScript it looks visually broken but it still works so you still have to clean it up before it gets echoed back to the user. The one just below it HTML entity string break there's one that's an HTML entity that's like a weird character you want to display I'm sorry you have a question? I haven't seen any commercially available ones most companies that I deal with have been writing their own for their own developers which means that they want to strip things like this out they'll write their own libraries and have all user input variables filtered through them and then they can use them or they just blatantly rip out every instance of HTML I haven't seen any commercial products that do this so everybody's kind of on their own until someone figures one out. The HTML entity string the ampersand pound sign zero nine semicolon is just a I think that's like a tab or something in ASCII and the whole ASCII set is available in Netscape so you can make all the weird characters show up but I found that that particular string 9 through 12 actually breaks it up and will still execute settle bypass the implemented filters once again so things like that will work what happens is when you throw that into the system and you know you use source on it that will actually not look like that but it'll be separated but still work This requires a greater than less than what if they just strip out the group? Right, that's the most effective way I've seen so far on a system that does not want to allow HTML into the system you rip out this less than and greater than science and also the quotes and you lose all HTML functionality and security back Do you still have the application allowed to continue on the system? Yes you will so most chat rooms measure the boards to allow that yeah the one just below it HTML entity I did have to figure out why this works but I found it one day and it works the hamper send I guess open curly brace and it has to be perfect for it to work and it only works in Netscape the hamper send curly brace open has to be filtered for otherwise JavaScript will execute any expression that you throw in there so it might be a good one to remember because it's posted out there but it's hard to find oh sure, she asked me to repeat the question before I answer sorry okay when I'm auditing a system that what I'm generally looking for is I'm looking at the URL I'm looking at all the source code in the web page, looking at all the form values looking at all the link URL values anything that has a CGI and all the variables to it and seeing what values it's taking if it's taking any and shopping carts are notorious for this when you're buying an item it'll have price equals and then you submit so it stops me from 3,000 I'll just make it 5 bucks many, many sites put this in there and trust the value that I give it and I bought a laptop for $5 I didn't get that question take the fifth also all the strings a lot of times developers will put strings inside of URL variables and stuff they actually get thrown up on the page for instance like ads and things like that a lot of times they don't filter those and see what actual variables are getting filtered and what aren't you know you can change it to anything change it to JavaScript HTML HTML put a negative 999 in there and crash the CGI many, many things also what I had to mention is many CGIs when they're doing authentication for the users that aren't using cookies, they use a login equals and like for portfolios and things like that so if you actually just change the login to a different username you'll get their portfolio don't do this people are looking now basically you've seen a lot of the exploits there are more but as of yet no one's put out a good security auditor yet I've heard rumor of them but I haven't seen any of that good so how to protect and defend do not trust any of the input that the user is going to give you don't care if it's the browser information their username and password do not trust anything that they're giving you check everything, strip everything because people are doing this for a lot of free time and testing every single value they could put into every variable and to see what your CGI does so you have to account for everything one rule of thumb when you're developing a CGI never, ever, ever allow JavaScript, Java or any plugins that your site didn't create onto your system so that means is if your users are able to put JavaScript, Java or a plugin on your system you've got to disallow it because do very bad things, for instance like Flash has JavaScript in it as far as like a sub-language with Lingo and they have full JavaScript functionality from inside of Flash so you might think I've got everything all blocked and you're allowing them to use Flash and all of a sudden your whole entire user base will have to do somewhere else also if you're really security paranoid and you're running like, say business.com and you have to allow some of these things to go through and you're really paranoid that you're not going to get everything right like say for your message or your chat room you want to keep pretty good security for the cookies themselves hosted on a different top-level domain hosted instead of like business.com go through business.net for a moment until you move them back to business.com it's a method I've seen work pretty effective in the past again somebody asked the question how to defend if you're in a workgroup type environment create libraries to do HTML stripping that all your developers can use and funnel all the user input variables through and get them back out so they know all the variables are safe to use in the user's environment and out of the user's environment and also one more authentication scheme that I've seen a lot of people use is when you're doing a cookie-based authentication and you're doing a session ID with your hashing the user in the password with a random variable or something you can actually rehash another variable let's say in a form submittal you put a hidden variable inside the form that you're submitting to the CGI that means no one else is going to be able to submit the form off of your site that's quite clear it's kind of like tagging the web page of sorts well let's say I'll use Hotmail for instance let's say they're doing a session-based ID session-based authentication and you don't want people logging into Hotmail from places other than Hotmail so what you would theoretically do is run a hash on their cookie that's in their system and tag it as a hidden variable inside your login page that way if you move it to somewhere else and try to submit again with different values it will fail because the hash won't match the hash has to be server generated unless it defeats the purpose sure yeah the question was you'll pass different or multiple variables off pages as you go through so it's important to check every single variable as you're going through the site so basically you have to crawl the whole site and be thorough any other questions? the question was what I feel that this is a problem of I guess lazy developers not doing correct string matches or not being very security conscious in general basically I would say yes and no one I would say yes they're lazy programmers they're not looking at bug track or the other sources for the known exploits to know they aren't because they don't know them all so they can't filter for something that they didn't know existed yes it does that's why HTML email pretty much exists I'm sorry he asked does HTML mail execute JavaScript yeah it can you'll see in the news all those Hotmail exploits and stuff like that those I haven't played with firsthand but problems with those probably could and do exist any other questions? I know of like a couple but I wouldn't classify them as good yet they're looking for basically the tools that I've seen are looking on a commercially available applications most bigger systems where these are going to be needed the most are not something that you can write an immediate big software package for because they're proprietary and you have to do it manually now unless somebody comes up with something pretty good and I haven't seen that yet no basically you would his question was about defeating the hashing you hash a variable like something random on the page and also part of their session with only a hash that you possess you have to keep your hash kind of private you have to do it that way you have to use something on the server side that only the user has and the site has so it has to be done well I probably not explaining it well as like applied cryptography would but you can hash the page and have it work well well that's the idea that's the idea of hashing you can't go backwards at least I can any other question? if you turn off the this question was if you turn off JavaScript and Java will the image sourcing one work no it won't get all JavaScript is pretty much turned off but that makes for a pretty lousy web environment and everything breaks on the web those who have run it have seen any other questions? alright yes that's it thank you how hard is it what a hell I feel about crypting the browser session and or the data being passed right I would say I would like it all encrypted however I guess the the RSA licensing gets pretty expensive from time to time I mean you have to get a license for every single server so it gets pretty expensive that's why they only do it on purchases and stuff like that but I would like to see all of it but we don't have it yet but even if this is encrypted this is not stopping the fact at all because the data on the client is not there right yeah basically he's talking about client side client side signing is he can claim to be whoever he wants and there's no checking on the client side end so yeah also actually I didn't get to ask Jennifer Granik one question I don't know if she's here or not but basically I wonder if the source of the web page would fall under unauthorized access of the source code of an interpreted page or or I guess fall under reverse engineer that did the DMCA would I be in the source code of a web page fall under that I don't know maybe and this is any other question that you said oh I'm sorry there well let's say I guess some people want to direct traffic away from your site to somewhere else and they post something on your site that means all your visitors that go to your site get forward to somewhere else that would be one other thing if they can't well if you're the only one posting the information on your site then you're pretty much clean that means everything that you do is your fault so alright the parent friend he's actually not a way to hide the URL if I know any ways I haven't seen any really good ways to do it I say the parent frame technique works quite well I haven't seen any other really good ways I have seen begin to load a page and then stop the load and then he kind of gets a URL that way but I haven't seen any really good ways that's kind of weak the question was you can actually yeah I forgot to mention that one's a pretty good one a lot of I guess browsers and search engines will take not only ASCII as a domain name but you can actually or like IP addresses you can actually re-encode them in URL encode and get those to work or you can get hacks to work I've seen octal work and everything like that so those are actually good filter passing mechanisms the question was using hidden iframes yeah hidden iframes you can use hidden layers and do it that way so again don't wow people putting layers on your page bad news the p-tag sorry I don't have like the perfect syntax memorized to type it out for you however I guess in VB script there's a left colon expression you can search for that under the p-tag I think Georgi Geninski on his site has it posted but it's a VB script that will execute also style has one similar like that on a style tag you have type equals and you can put javascript and stuff in between it in between the beginning and style tags and once again javascript into the system javascript's pretty much a cockroach you have to exterminate I'm sorry I missed that I really don't have no X in all that well but from what I read from the specs it seems it's like for instance the ones that are broken to the visually don't work under XML because it's very specific meaning that programming is not forgiving when you make a mistake so any other questions what time do we have close though that's all I got so


Over the last nine years, the aviation sector in India has seen unprecedented growth. From 2014 to 2019, air passenger numbers increased from 160 million to 341 million. In 2014, India had 74 operational airports. By 2022, that number doubled to 147 operational airports. This incredible transformation was made possible by our honourable Prime Minister's unique vision. Karnataka has been a strong partner in this growth story, with the state government actively funding construction of new airports. A new chapter begins as the Shivamoga Airport prepares to open its doors to passengers. Shivamoga Airport's strategic location will usher in a new era of development in the Malanad region in Karnataka. The new airport will unlock a world of opportunities for Malanad with an increase in tourism, job opportunities for the youth, and economic growth. Constructed over an area of 775 acres at a cost of rupees 450 crores, the airport has a modern passenger terminal with a unique architectural design. Its state-of-the-art infrastructure and facilities will ensure efficient operations and seamless experiences for passengers. The terminal can accommodate 300 passengers per hour. Shivamoga Airport, the new gateway to Malanad, is being inaugurated today by the honourable Prime Minister, Sri Narendra Modiji.


This is Jimmy Powers, and happy to be coming your way with another Grantland Rice story. There, this is Jimmy Powers transcribed. Today, Granny Rice tells about writers and pals, and exactly as he wrote it for the tumult and the shouting. I'll narrate it in first person. I believe that I came along in gayer, happier times for both newspaper readers and writers. Somewhere in the late 1920s, there was a sudden change. In those earlier days, columnists wrote verses and paragraphs. There was Franklin P. Adams of the Mail and Harold Tribune, whose two columns, always in good humor, and the Conning Tower, were magnificent. Burt Leston Taylor, BLT, who conducted the line a type or two in the Chicago Tribune, was equally wonderful. These were the two stars, but there were many others who were excellent. Frank L. Stanton, the serious poet in the Atlanta Constitution, was in front of them all. Others were Judd Mortimer Lewis in the Houston Post, John D. Wells in the Buffalo News, Don Marquis of the Old Son, whose Archie the Cockroach and other superb verse held high attention. Also, Eddie Guest and Henry Sidnor Harrison from Virginia. These and some others rule those days of column readers. They suddenly gave way to Westbrook Pegler, Haywood Bruin, Alexander Wilcott, Ralph McGill, Walter Lippmann, Frank Kent, Evie Dirling, John O'Donnell, Bob Considine, and many more. Certainly, Frank Adams, Burt Taylor, and Don Marquis had an appeal that could equal that of any columnist of the present era, with perhaps the exception of Westbrook Pegler. Pegler's fiery diatribes kept you wondering what he would say or whose scalp he would lift. Nevertheless, I got a far greater thrill in reading Adams, Taylor, or Marquis in other years than I have got since. Maybe it was because I was a graduate of the verse and paragraph school from the days of the Nashville, Tennesseean. Frank Adams was the best light verse writer I ever read in this country or Europe. It was Frank Adams who wrote one of baseball's few immortal lyrics. These are the saddest of possible words, tinker and evers and chants. Pricking forever our gonflin bubble, causing a giant to hit into a double. Words that are heavy with nothing but trouble, tinker to evers to chants. I was at the evening mail in 1912 when Mr. Miles, the managing editor, called me to his office. He showed me the verse Adams had just turned in. Frank may write a better piece of verse than this, Miles said, but this is one he will be remembered by. He was right. One of the finest columnists I ever read was Huey Keoh who conducted a sporting composium in verse and paragraphs. Keoh had but a short burst. He began his column in 1905 and died in 1911. A master, a fine verse writer, and a brilliant paragrapher, Huey had the most interesting sport column I ever read. Here are a few examples of his one-line masterpieces. The race is not to the swift, but that is where to look. The art of self-defense, 100 years in 10 seconds. Throw your bread upon the waters and a carp will beat you to it. The rules of sport are all founded upon fair play. I think one reason the papers switched from verse to prose is this. Good poets suddenly disappeared and readers for some reason lost the old poetic zest. I know that I started keeping a poetry scrapbook around 1905. I kept this up for 25 years. I have many rare things in it. Suddenly around 1930 I quit collecting. The reason? I found little worth while pasting in my treasured book. This is a much more serious age than the old days ever were. There was a light-heartedness that the world knew before the First World War that has never been worn since. I'm grateful for H.I. Phillips. There has been war or the shadow of war for the past 40 years, and the dark shadow hasn't ever been absent from the scene in that time. Most of the true singers have had little heart with which to sing. No newspaper man hits the road more often than the writer assigned to a Major League Baseball team or the one who enjoys syndication and can hunt at large in search of game. It was in Bill Corham's drawing room aboard the train returning to New York from Cincinnati following the Detroit Cincinnati World Series in 1940 that I heard a wise sum-up of a sportswriter's approach to his job. Joe Williams was there, and so were Tom Meaney, Gary Schumacher, and Tommy Laird, the sage of San Francisco. The talk over Juleps got around to jobs. Laird mentioned that Lefty O'Doole, as manager of the San Francisco Seals, was happier than he ever had been in the Majors. We were all sounding off on what we'd do if given another whirl at Fates' old wheel. As for me, said Corham, I don't want to be a millionaire, I just want to live like one. Toots Shore put it another way. Watching a group of baseball writers carving their initials in his bar at 3 a.m. after a baseball writer's party, Toots said, Grant, there's not a millionaire in that bunch. They just live like them. While stopping over for a brief stand, we, who are travelers for the night at this old wayside inn called Earth, we meet many people, few of them alike, and Toots Shore, a fellow who runs a great New York restaurant, is strictly himself. He is the only worldwide man I know. I was sitting with Toots at lunch when he lifted the phone and called Ben Hogan at Fort Worth to cheer Ben up after he'd been beaten by Sammy Snead in the 54 Masters. Ten minutes later he called up Ford Frick, the baseball commissioner, to discuss some naughty problem that had come up in baseball. Five minutes later he was on the line to two close friends, Ernest and Mrs. Hemingway in South Africa. He found that Hemingway had been much more severely injured in that plane wreck than he had let anyone know. Then Toots called Gene Fowler in Los Angeles to see how Gene felt. Heard he wasn't so good, Toots said. Jimmy Cannon told the true story from Louisville at the Derby. Before a certain race, Toots told his bunch, he would get the right tip from his old friend Horatio. Toots left, got the tip, and the horse was out of the money. Can you imagine an old friend double crossing you like that? Toots howled. How long have you known the guy, Cannon asked? I met him yesterday, replied Toots. Shore is a friend of the world at large, barring all communists and hypocrites. In turn, he is respected and loved by all those who know him. A close friend of the athlete, sports writer, columnist, Toots and baby his bride are tops in my little old book. And with us today is Granny Rice's big jovial friend, Toots Shore, who runs a big spacious restaurant here in New York. Toots, I suppose your place is peopled by more stars of the sports world than perhaps any restaurant in New York. How come? The only reason I can give is ever since I've been a kid I've been interested in all sports, every kind of sport. In fact, all the people are in sports, and the most important people have helped to make my place a hangout are sports writers like yourself, in which Granny Rice was the boss of all. Granny Rice, I know, used to meet a lot of his cronies there, and I suspect got the idea for plenty of his columns from his friends, the big name players. Oh actually, Jimmy, Granny was never a table hopper. He came in and sat down, all the great athletes. It seemed they made a beeline at Granny's table, not because he was looking for him, but Granny was a fellow that everybody wanted to be with. And his advice was so priceless that, well, I know that people are still doing things that Granny told him to do. For such a gregarious bunch that the sports writing fraternity is, and with Granny Rice as their dean, well, he certainly was a kindly someone to look up to. He was just the greatest man we'll ever know. He would come in and when he walked in the restaurant, it seemed that everybody in the place would lift their head from their table whatever they were doing, eating or drinking. He lit a room up. Not many men do that, but Granny Rice did. And that party that spread over two complete floors in your place the night before Granny's book, the tumult and the shouting was published. Why it almost seemed that on that particular night, Granny was back. In many ways, Jimmy, that was the most amazing, greatest party we fellas in sports and in theater will ever have. It was started in a strange way. We're sitting around the corner one day over a drink. I said to Granny, we'd like to give him a party on his birthday, which was November the 1st. It had been a 74th. It was also going to be the day this book was going to be published, which there's no doubt in my mind is the best book on sports ever printed. It tells everything by a man who knew more about the game and every game and we'll ever know. We gave him a party. And that night it seemed that Granny was with us. People from all over the world, and I say all over the world, came to the party every great sports figure, every great athlete, anybody you can think of in the show business was there at a Granny's party. It was joy all evening long. We ate and we drank and we told stories of Granny Rice. It was so many can be told of his humbleness, of his decency, and of his way of treating people who were coming up in the world. Fellows like you, Jimmy, who started when Granny was already the tops in sports writing. That night will go down in my lifetime. I know when everybody else who was there were over 300 men.  Thank you, Tooth Shore, for taking time out from your busy schedule to chat with us today. Now, this is Jimmy Powers transcribe saying, Hasta la vista.