#it is what it is and the most important thing now is that troj is okay and that she will continue to be okay.

[fjordfolk]

trojzoi saga continues

heart murmur confirmed in troj. grade 1~2 according to vet, says she would've missed it on a bad day or if i hadn't brought it up, called it a 'slight clicking sound.' everything else is fine, pulse is solid, so vet didn't think there was reason to worry or have much else to say about it other than 'we'll keep it in mind, i guess.'

[challopea]

The Skywalker in the Title of TROS—Leia and her Redemption

I’m not saying that Leia is the only skywalker the title of EP IX refers to. Like TLJ could mean Luke Skywalker, Rey, Leia (with her Mary Poppins trick), or even Ben Solo, the TROS could be referring to multiple persons, including you know who. Let’s leave it there. In this post, I want to focus on the redemption of Leia.

Everyone refers to her as Leia Organa, the princess, the General, the senator, the politician. And she tried her best to hide her heritage as a skywalker. Only a few knows that she’s the daughter of Vader. Isn’t it weird? She fully embraced her identity as the adopted daughter of the Organas, but she rejected the ‘mighty Skywalker blood’ in her veins. It’s not like only men inherited the blood. Ben Solo is only a quarter Skywalker, and how his potential impressed Snoke. The emperor Palpatine also confirmed that Leia is her brother’s equal in the force in TROJ. Isn’t it weird she never even thought about learning to use force herself to help her beloved rebellion, to help guiding her poor son who is tortured by the dark side?

No. She’d rather watch her soldiers, her fellow freedom fighters die in numbers than using that almighty force she could tap into. She’d rather watch her best friend for life sacrifice herself for her cause than touching that unknown frightening thing called the force. She’d rather watch her only child being eaten alive by the dark side of the force, being turned into a tool/fool, roaming the galaxy like a caricature version of her own father than accepting him as her son and doing whatever she can to save him.

That’s her sin, pride.

She let vanity blind her & let fear overwhelm her. She should be the one hurling tie fighters around, destroying Star destroyers. She should be the one waving a lightsaber, lifting the rocks & saving the rebellion. Instead, she left that job to Rey and Luke. She should be the one chasing down Kylo Ren/Ben Solo and the first order, and do what a good mother does, protecting/saving her only child, again she left the job to Luke/Rey.

Leia Organa is a failure as a politician, a general, or the mother of the rebellion because she failed as a wife, by keeping the most important information about her child from her husband, she failed as a mother, because she left her child to the preying monsters, turning her head away, pretending not to see, she failed as a human being because she failed to embrace the role of a mother, a wife, she failed to accept her Skywalker identity, she failed the force.

Leia has to be redeemed. Leia has to come to peace with her skywalker identity. Leia has to fully accept the force. Otherwise, the force can’t be at peace. She has to accept both the light side & the dark side in her to save herself, to save her son and save the rebellion. May Leia truly understand the meaning of “May the force of the others be with you” and achieve full redemption. The untimely death of Carrie Fisher does make it difficult to accomplish but JJ if you truly want to make a movie that people still gonna watch in 100 years, you’d better pull it off. No one will be watching felicity 100 yrs from now. This is your best chance.

[korn-for-all-life-blog]

Patch is just behind us in the case of Microsoft and Adobe, and just ahead of us in the case of Oracle.

As regular Naked Security reader Haemish Edgerton pointed out to us, Adobe updated both Flash and Shockwave Player (for those of you still using it), but only the Flash update involves security fixes, so there was only one Adobe security bulletin this month.

Three CVEs (officially-numbered vulnerabilities) are listed amongst the bugs fixed in the Flash update.

Two of the CVEs, namely CVE-2014-0537 and CVE-2014-0539, weren’t publicly disclosed holes, and weren’t remote code execution vulnerabilities.

Unfortunately, the third CVE relates to a vulnerability that is now being popularised, like Heartbleed, with a catchy name and logo by the Google researcher who worked out how to exploit it.

Michele Spagnuolo has dubbed his exploit “Rosetta”, by analogy with the Rosetta Stone that helped linguists decipher early Egyptian script, because it works by translating Flash files into 100% printable alphanumeric characters.

The “Rosetta” exploit, officially tagged as CVE-2014-4671, is what’s known as a Cross Site Request Forgery, or CSRF, meaning that it provides a way for malicious website X to retrieve data that is only supposed to be revealed when you visit site Y.

According to Adobe, the Flash update for July 2014 update also fixes “vulnerabilities that could potentially allow an attacker to take control of the affected system.”

That’s longhand for remote code execution (RCE) or click-to-own, where a crook implants malware on your computer without so much as a by-your-leave.

We suggest that you apply this Flash update as soon as you possibly can, not just because of the RCE holes, but because Spagnuolo has now gone public with a detailed description of the Rosetta attack.

Spagnuolo has also published what he refers to as “ready-to-be-pasted, universal, weaponized full featured proofs of concept with ActionScript sources.”

Heigh-ho.

If you are relying on Adobe’s auto-updating process, the new Flash Player version numbers to look out for are 11.2.202.394 on Linux, and 14.0.0.145 on Windows and OS X.

NB. Sophos products detect and block Flash files made with Spagnuolo’s “Rosetta Flash” conversion tools as Troj/RosFlash-A.

MICROSOFT’S PATCHES

Microsoft published six bulletins this month, matching what it announced in advance.

The update that most users will be immediately interested in is Bulletin One, a Cumulative Security Update for Internet Explorer that gets the identifier MS14-037.

This is a critical fix because it patches RCE holes, as well as various other bugs, so don’t delay in applying it.

Fortunately, however, the RCE flaws are amongst some of the 23 vulnerabilities that were responsibly disclosed, none of which has been seen in the wild.

Only one of this month’s vulnerabilities in IE was publicly known in advance of the patches, and is nevertheless not known to have been exploited in real-world attacks.

The publicly-disclosed hole is known as CVE-2014-2783, and has been dubbed an “Extended Validation SSL Certificate” vulnerability.

Briefly put, so-called Extended Validation (EV) HTTPS certificates are supposed to apply to specific server names only.

So a rogue Certificate Authority that fell in with crooks, or was under pressure from its country’s intelligence service, or had its private keys stolen, would be throttled to issuing one dodgy EV certificate at a time.

If the untrustworthy CA tried to create an EV certificate for, say, *.example.com instead of justthisone.example.com, browsers should reject that certificate, considering the wildcard to be below the standards required for extended validation.

JNT – A NEW RISKY FILE TYPE

But for all the obvious importance of Microsoft’s IE update, it is the second critical fix, MS14-038, that is the most intriguing, and perhaps even more important, patch.

This closes a single, privately-disclosed, parsing flaw in Microsoft Journal (JNT) files.

I’ll be honest and admit that I wasn’t even aware of .JNT files, or the application JOURNAL.EXE (installed by default on non-server flavours of Windows), until this vulnerability was announced.

Journal is a note-taking application that lets you scribble down notes as if on a piece of paper, and share them in them as .JNT files with other people.

Anyway, deliberately-crafted Journal files can be made to crash the Journal software in a way that could give an attacker remote control of your computer, for example by persauding you to open a .JNTattachment in an email.

In short: apply the patch.

And, if you weren’t aware of .JNT files as yet another proprietary Windows document exchange type, then you almost certainly aren’t deliberately using the Journal application, so consider adding .JNTto your web and email file filtering blocklist.

ELEVATION OF PRIVILEGE

Three of the other flaws patched by Microsoft are so-called Elevation of Privilege (EoP) holes, two of which allow local users to “promote” themselves to kernel-level privilege.

As usual, these flaws only get an Important rating, instead of Critical, mainly because they can’t be directly exploited from outside your network, or even inside your network by someone who isn’t logged in.

However, I’m sticking to my opinion that this sort of hole is probably somewhere closer to Criticalthan Important, simply because of the advantage, to crooks who are already inside your network, of being able to get kernel-level privileges at will.

There are two obvious abuse scenarios for EoP-to-kernel exploits:

By rogue insiders. Users who have not been given administrator privileges on their own computers can unofficially acquire those rights in unauthorised, and quite possibly unauditable, ways. That’s hard for IT to control or even to detect using its regular tools.

By malware seeking to install a rootkit. Rootkits are add-on modules that add what you might call tamper protection to malware, often making it harder to detect and remove. Making users non-administrators usually keeps rootkits out.

ORACLE’S PATCHES

Finally, to wrap up this overview, we’ll mention Oracle.

Oracle’s patching drum beats to a different rhythm, using the Tuesday closest to the middle of the month, not the second Tuesday as with Microsoft and Adobe.

So Oracle’s July 2014 updates have yet to drop, but we do know one thing: support for Java on Windows XP is over.

In Oracle’s own words, Java 8 won’t work at all on XP, but users “may still continue to use Java 7 updates on Windows XP at their own risk.”

As my friend and colleague Chester Wisniewski twittily quipped,

 Of course, the truth is that the sort of users who are sticking with a now-unsupported XP “because they can” are likely to end up even less secure, by sticking with a now-unsupported Java as well.

Still got Java in your browser?

Try turning it off and seeing if any websites stop working – the chance is good that nothing will break and you can leave it off for evermore.

source:https://nakedsecurity.sophos.com/2014/07/09/patch-tuesday-wrap-up-july-2014-adobe-fixes-rosetta-plus-a-new-risky-file-type-on-windows/

[maier-files]

New Post has been published on The Maier Files

New Post has been published on http://the.maier-files.com/rolf-dietrichs-mystic-riddles-and-esoteric-codes/

Rolf Dietrich's mystic riddles and esoteric codes

The attentive reader of the first episodes of Maier files will have noticed that the tale once told by Rolf Dietrich and the history of Otto Maier are filled with powerful themes and images that might provide a clue to the real hidden mystery, among them: the Rose Trail (Troj de Reses), web of woven silk, the knights in the line of Dietrich von Bern, the enchanted windmill, fiancée of the Month of May, the land beyond the North, Parzival connection to the little dipper,  and many more. What were the real objectives of the division Parzival? Is it all connected as it looks like to the concept of the Grail? Is this Grail tangible? if so this thing would have been found long ago, considering all the massive resources, manpower and money thrown at it over the centuries. Could those men of Parzival be the hidden secret guardians? But what if this magical stone or pearl was less material in nature (That which is, isn’t).

Many years ago I met a man named Naumann or maybe he was truely Dietrich after all. In fact I’m dedicating this entire graphic novel series to him and his mesmerizing story. The first time I met him, was on one of my work related trips to Dresden, Germany. In those days he ran a hotel business and he was a delight to talk to. Every time I was in Germany for business I looked him up and we quickly became friends. I found I could ask him questions about more or less anything and he would tell me what he knew. During the course of one of our lively conversations about history and a folktale called Tannhauser, he baffled me by announcing that he inherited a big secret. This would become the most bizarre and compelling story I ever heard. His story became the basis of the Maier Files and in a sense I’m producing the story, I wanted him to write.

Is it a gigantic puzzel? It certainly looks like one, but for sure it is filled with many earthly and at the same time “otherworld” secrets. As the stories of Tannhauser, the witches of the Harz and Dietrich von Bern seemed to have an important value to Mr. Naumann, it looks like they are a good starting point for our quest. A knight of the lineage of Dietrich means a knight of the line of the Key (dietrich means skeleton key). The story of Dietrich and the Elfin legend about the garden of Roses is quite like a classic initiation; under the protection of ancient guardians wherein over time one must develop a clue-key, unlock the door and enter their world. Comparable to Don Quixote’s sojourn in the Caves. And the Troj de Reses (the Rose Trail) is again a suggestion of an unbroken link leading into hidden realms. One can ask if these realms are real or just hidden secrets and knowledge avoiding the touch of non-initiates. When in the legend the knight found the mill with the sleeping dwarfs and when he started to sing about the fiancee of the month of may he walked through their cave straight into the paradise Garden of Roses and into eternity. Consider 2 puzzle pieces, the Month of May was an ancient celebrated female month and the Christian movement of the Waldenses (“Light glows in the darkness”) who were very active around the region of Worms, were called millers. The Waldenses’ symbol of light in the darkness, a glowing candle, has a lot of the myth of Prometheus the lightbearer, and the torch of the witch Hecate (see statue of liberty in New York) and of course with Lucifer the archetype of a bringer of light.  The web of woven silk around Laurin’s garden alludes also to a thread, maybe a guide as personified in mythology by Ariadne, Circe, Ceridwen and Hecate. The story of these goddesses is very powerful and they reined supreme long before christianity took over. Could the quest of the Grail be a quest to find the Goddess? Could Rolf Dietrich be associated with a guide?

That brings us to the story of Tannhauser, the knight-minnesinger who entered the Venus mountain. Sometimes also called Frau Holda mountain. (See other posts on this subject.) Venus is the enchanting goddess of love and beauty. But in the Bible one can find this statement: Isaiah 14.12 ‘How thou art fallen from heaven, O Lucifer, son of the morning.’

That states that the Morning star, of course, Venus is Lucifer. The Bible writers actually identifies Lucifer with the planet Venus. How can we equate the goddess of Venus in Greece and Rome – Aphrodite to the Greeks – with Lucifer in the Judeo-Christian tradition? There are key points of similarity: both Lucifer and Venus got to do with sexuality. The apple is the fruit associated with both. The apple is universally the fruit of Venus, because if you slice an apple in two, the path that Venus traces in the sky over a forty-year period is described there as a five-pointed star (a pentagram), pinpointed by the position of the pips.

Many beautiful representations of Venus have come down to us from antiquity, but there were terrifying representations too. Behind the image of a woman of matchless beauty lurked the terrifying serpent woman. One can read in Wolfram von Eschenbach’s enigmatic poetry: See! Lucifer, there he is! If there are still master-priests Then you know well that I am saying the truth. Saint Michael saw God’s anger … He took Lucifer’s crown from his head In such a way that the stone jumped out of it Which on earth became Parzival’s stone.

As Lucifer fell a great emerald dropped from his forehead. (Could this mean a loss of vision in the Third Eye, the so called brow Chakra?)

Most people would naturally assume that Christianity allows the existence of only one Devil, but the authors of the Bible are mentioning something else. Lucifer and Satan aren’t the same entity. Satan as agent of the materialistic world is to be identified with the god of the planet Saturn and a six pointed star, as Lucifer is identified with Venus and a five pointed star.  Now tradition tells us that the influence of Satan makes life often hard to bear, and Venus makes it often hard to understand and this influence of Venus is a paradoxical one. “Fair is foul, and foul is fair!” Why is it that the way forward sometimes looks like the way backwards? Why is it that the thing we most ought not do looks almost indistinguishable from the thing we ought to do? Often everything in this world looks the other way round. Everything here is upside down and inside out and nothing is ever what it seems.

so many enigmas, so many questions, … so much more to learn …  step by step.