Friday, September 6, 2019

W.S. Merwins translation of poem Essay Example for Free

W.S. Merwins translation of poem Essay As I read W.S. Merwins translation of this poem, I feel a sense that the poet was trying to articulate the harmony which exists between humanity and nature. The initial lines of the poem: Into my head rose/the nothings/ my life day after day (Merwin) seemed to indicate a state of disharmony, sadness and banality. The reader immediately wonders: what might be the cause of the poets malaise. Rather than immediately show or evoke the source of sadness and disharmony in the poem, the next lines reveal the antidote to this feeling, which is expressed in motion: but I am leaving the shore/in my skin boat (Merwin) which sets up a metaphor of the body-as-voyage. This feeling moves toward at least a partial explanation,explication of the poets source of malaise and sadness: the world itself, but particularly the world of human ambition and human affairs: and the ache/ that comes from the things/I have to do every day (Merwin) This realization on the part of the poet which is expressed obliquely to the reader allows the second half of the poem to function as a response to or answer to the poets malaise and sadness. By separating the poem into a call and response format, it is easier for the reader to sense the movement of the poem from a state of emotional disharmony to a state of reprieve or even illumination. The most profound aspect of the   call and response motif is that it actually unifies dual idea of the poet speaking to nature or inquiring into it for a panacea against malaise and angst and the poet inquiring into himself for an answer to his emotional distress. By unifying these concepts, the poet expresses that nature and the human soul are actually one.   The concluding lines bring a simultaneous experience of going back to nature and of being reborn. By juxtaposing the idea of introspection with a journey into nature, the poet is able to bring the reader through an emotional arc which begins with feelings of oppression and melancholy and transforms through a vision of a nature and the soul as one, into an image of rebirth which more than adequately disperses the melancholic feelings expressed by the poet and brought to climax in the reader, making a dramatic emotional and psychological reversal from sadness to joy.

Thursday, September 5, 2019

Sql Injection Attacks Pose Computer Science Essay

Sql Injection Attacks Pose Computer Science Essay In recent years, SQL injection attacks pose a common and serious security threat to web applications: they allow attackers to obtain unrestricted access to the database underlying the applications and to the potentially sensitive information these database contain, and it is becoming significantly more popular amongst hackers. According to recent data, between Q1 2012 and Q2 2012, there has been an estimated 69 percent increase of this attack type. [1][2] As you can imagine, a hacker gaining administrator access to your server means that you will have effectively lost all of the data on that server to the invader. Worse yet there is now a beachhead behind your firewall from which attacks on other server and services can now be made. In this way SQL injection can provide access to all company or personal data. In the web environment, end -user privacy is one of the most controversial legal issues, therefore, all types of SQL injections which are dangerous for the components of the web application must be prevented. This article introduces the SQL injection in the first section then provides some techniques for defecting and preventing this kind of attack in the second section. Section 1: Introduction of SQL injection attack SQL injection is an attack technique which can be used by the attacker to exploit the web application; as a result the attacker may gain unauthorized access to a database or to retrieve information directly from the database. Attacker can exploit SQL injection vulnerabilities remotely without any database or application authentication. SQL injection attackers are straightforward in nature an attacker just passes malicious string as an input to an application for stealing confidential information. There are four main kinds of SQL Injection attacks [3]: SQL manipulation, Code injection, Function call injection and Buffer overflows. SQL manipulating usually involves modifying the SQL query through altering the WHERE clause. In this class of attack, amend the WHERE clause of the statement so the WHERE clause constantly results in TRUE [4]. In the case of code injection an attacker introduces new SQL statements into the input field instead of valid input. The classic code or statement appends a SQL server command to make SQL statement vulnerable. Code injection only works when multiple SQL statements per database request are supported or keywords like AND, OR are supported by the database. Function call injection is the addition of database functions or user defined functions into a vulnerable SQL queries. These function calls can be used to make internal calls or modify data in the database that can be harmful to the users. SQL injection of buffer overflows is a subset of function call injection. In several commercial and open-source databases, vulnerabilities exist in a few database functions that may result in a buffer overflow. Once an attacker realizes that a system is vulnerable to SQL injection, he is able to execute any SQL command including DROP TABLE to the database; hence the attack must be prevented. Protection Methods for SQL Injection attacks: To build secure applications, security and privacy must be carefully considered, and developer must be aware about it. The main goals of information security are Confidentiality, Integrity and availability. A single unprotected query can be harmful for the application, data, or database server; hence the SQL injection must be prevented. SQL injection attacks can be protected with simple changes in server site programming as well as client side programming. Developers must be aware of all types of attacks and take care for all possible attacks. Developers should authenticate user input against rules; ensure users with the permission to access the database have the least privileges; also do not leak any critical info in error log files. Taking user input from predefined choices: In this way the web application can be secured from malicious attacks. The attacker cannot insert custom queries or any type of harmful script which can disturb the integrity of the database. This is a simple yet effective way to curb web application attacks. This can be established by making simple changes into the server site code. Bind variables mechanism: Bind variable is another technique to control SQL injection attacks. Using bind variables helps in improving web application performance. The web application developer should use bind variables in all SQL statements. In Java language there is a mechanism called prepared statement, this implements the concept of bind variables mechanism. Input validation: This is the simplest method for defense against SQL injection attacks. User input should always be treated with care and there a number of reasons to validate all of the user input before further processing. Every passed string parameter ought to be validated. Many web applications use hidden fields and other techniques, which also must be validated. If a bind variable is not being used, special database characters must be removed or escaped. In most databases the single quote character and other special characters are a big issue, the simplest method to avoid them is to escape all single quotes. This can be established by using client side scripting language. Validation code can help to avoid wasting server resources by restricting requests that would not return useful results and they can provide much more helpful messages to the user than a SQL error message or empty result set would likely provide. Also, they can help stop SQL injection by rejecting, outright, any forms of input that could be used to perform a SQL injection. With the benefits that validation can bring, it is generally wise to validate all user input, even when fully parameterized database calls and uses and uses an account with limited permissions. Use only stored procedures The greatest value for using stored procedures in preventing SQL injection is that the DBA can set permissions for the application account so that its only way to interact with the SQL server is through stored procedures. This would mean that most SQL injection attacks would fail due to lack of permissions even if the calling program did not parameterize. This of course still leaves open the possibility of SQL injection working through dynamic SQL inside the stored procedures, but the stored procedures can be given an execute as clause which limits their permission to only those needed by the procedure. It is generally easier to verify that all stored procedures are written to guard against SQL injection then it is to check every place where the application interacts with SQL server. Limit permission The most important thing is that we should never user admin rights for web based application. The safe way is to give the user as little rights as possible in other word user rights should allow him to do only what is necessary and nothing more. If the account does not have permission to drop a table, then it will not be dropped even if the command is slipped to SQL server. Similarly, if the account has only read access, although the attack my have right to gain some information, he/she will be not able to modify or destroy the data, which is frequently worse. Even the read permission should be strictly limited by database, to limit which tables can be viewed. And if the application only needs selected columns from a table, then read permission on the view can be granted rather than the full table. Conceal error messages: Injection attacks often depend on the attacker at least some information about the database schema. [4] One common way for hackers to spot code vulnerable to SQL injection is by using the developers own tools against them. For example, to simplify debugging of failed SQL queries, many developers echo the failed query and the database error to the log files and terminate the script. In this case, error messages are useful to an attacker because they give additional information about the database that might not otherwise be available. It is often thought of as being helpful for the application to return an error message to the user if something goes wrong so that if the problem persists they have some useful information to tell the technical support team. Hence, the generated error becomes a literal guideline to devising more tricky queries. For example, applications will often have some code that looks like this: try { } catch (Exception exception) { MessageBox.Show(log on failed, exception.Message); } A better solution that does not compromise security would be to display a generic error message that simply states an error has occurred with a unique ID. The unique ID means nothing to the user, but it will be logged along with the actual error diagnostics on the server which the technical support team has access to. The code above would change to something like this instead: try { } catch (Exception exception) { int id = GetIdFromException(exception); MessageBox.Show(log on failed, id.ToString()); } Code review: Code review can be incredibly difficult to implement, especially in a team of old-timers who are not used to it. But once done, it will not only decrease the number of defects in your code, it will also increase the collaboration and help team building, improve brotherhood amongst developers and will propagate best practices and improvement of skill across an entire team or department. Use automated test tools: Even if developers follow the coding rules and do their best to avoid dynamic queries with unsafe user input, we still need to have a procedure to confirm this compliance. There are automated test tools to check for SQL injections and there is no excuse for not using them to check all the code of your database applications. To make a summary: Encrypt sensitive data Access the database using an account with the least privileges necessary Install the database using an account with the least privileges necessary Ensure that data is valid Do a code review to check for the possibility of second-order attacks Use parameterized queries Use stored procedures Re-validate data in stored procedures Ensure that error messages give nothing away about the internal architecture of the application or the database Conclusion SQL injection is one of the more common and more effective forms of attack on a system. Controlling the malicious SQL code/script on the web application and maintaining the end privacy is still a key challenge for the web developer. These issues must be considered seriously by the web developers involved in developing websites using databases.

Wednesday, September 4, 2019

Saudi Arabia: History of Relationship to US :: essays research papers fc

Although the United Sates and Saudi Arabia present the United States and Saudi Arabia’s relationship as excellent, there are actually two nations who have bitter disagreements but who allies through oil. The only thing that has held this alliance together is the US dependence on Saudi oil. The United States has felt and still fells that it is a necessity to have bases present in the Middle East to protect oil, and silently to protect Israel. The relationship began in 1933 when Standard Oil of California signed an agreement with the Saudi government. In 1943 FDR affirmed that the defense of Saudi Arabia was a vital interest to the United States and moved troops into the region. Future presidents would emulate this declaration and mobilization of troops to Saudi Arabia. Again in 1945 Abd al Aziz, the Saudi king, and FDR would cement this alliance, on a US warship in the Suez Canal. Soon after, airfields were constructed at Dhahran and other spots over Saudi Arabia; beginning a long tradition of US military facilities in Saudi Arabia. Abd al Aziz was the first of his line of successors to meet with US presidents. The relationship was only strengthened with the onset on the Cold war, as the US used the bases in Saudi Arabia as potential air force launch sites to the USSR and constructed more military facilities. In 1941 Harry S. Truman made another assertion of Americas protection and alliance with Saudi Arabia to Abd Al Aziz. Truman stated that â€Å"support for Saudi Arabia’s territorial integrity and political independence was a primary objective of the United States.† (Countrystudies.com) Another stipulation of this pact was that the US established a permanent military training mission in the Saudi Arabia. That mission lasted until 1992. Soon after the pact between Truman and Aziz was agreed upon the US-Saudi relationship would endure its first major disagreement. On May 14th, 1948 Israel was declared an independent state in the former Ara b dominated Palestine. Israel’s independence was backed the United States. Saudi Arabia refused to acknowledge the country of Israel and to engage in any relations with them. The Saudis concerns of the Israel-US relationship were reinforced in the 1970’s and 1980’s when the US sold arms to Israel, but refused to sell arms to Saudi Arabia. In some cases congressional leaders refused to sell arms to Saudi Arabia on the grounds that Saudi Arabia might use them against Israel.

Tuesday, September 3, 2019

Youth Workers Essay -- Article Analysis, Rachel Brooks

Introduction This essay will focus on the main points of an article written by Rachel Brooks. The article centers on a wide description of young people and their political participation. More specifically, it involves around the fact that young people tend to show interest and to participate less in the political action than other age groups. Moreover, it focuses on young women’s willingness to express their selves politically, and the extent of their political engagement. It also emphasizes to the absence of gender, when it comes to political participation amongst the young age groups Most of the survey results concerning young members of the European Union show that both young men and women tend to be politically apathetic. However, it is argued that the lack of social activities and voluntary work is two of the main reasons of young people’s inactive social cohesion and citizenship. Young people and political engagement Political engagement, as it is illustrated by the contemporary media, concerns the qualification of a moral label of a ‘good citizen’, the domain of voluntary work, watching the everyday news, taking part in activism, and voting. Nowadays, most of the books, articles, and press documents, present young people as political apathetic. This particular age group is failing in terms of civic and political participation e.g. voting in the elections, and it is considered as passive and disengaged. (Banaji, 2008, p.1) According to Banaji (2008), nowadays political engagement and civic participation don’t appeal to young’s peoples general beliefs and activities, as they are viewed more as mandatory and less as maturity, citizen’s political agency, or sense of power and responsibility . However, t... ...no action and that ‘civic’ engagement is better than no engagement.’ This means that nowadays political participation could be expressed with the use of different forms and sources and if using an alternative way to express it, it doesn’t mean that it still it no longer exists. There is no formal evidence which proves that the younger age groups are less engaged to politics than the older ones. Nevertheless, there are lots of different methods that youth workers can use in order to actuate young people to political action, social cohesion and engagement through informal education. These methods contain voluntary work, group discussions and peer education. Finally, the notable absence of gender in terms of youth participation in politics constitutes another very important consideration that has to be highlighted in the future researches and surveys. Youth Workers Essay -- Article Analysis, Rachel Brooks Introduction This essay will focus on the main points of an article written by Rachel Brooks. The article centers on a wide description of young people and their political participation. More specifically, it involves around the fact that young people tend to show interest and to participate less in the political action than other age groups. Moreover, it focuses on young women’s willingness to express their selves politically, and the extent of their political engagement. It also emphasizes to the absence of gender, when it comes to political participation amongst the young age groups Most of the survey results concerning young members of the European Union show that both young men and women tend to be politically apathetic. However, it is argued that the lack of social activities and voluntary work is two of the main reasons of young people’s inactive social cohesion and citizenship. Young people and political engagement Political engagement, as it is illustrated by the contemporary media, concerns the qualification of a moral label of a ‘good citizen’, the domain of voluntary work, watching the everyday news, taking part in activism, and voting. Nowadays, most of the books, articles, and press documents, present young people as political apathetic. This particular age group is failing in terms of civic and political participation e.g. voting in the elections, and it is considered as passive and disengaged. (Banaji, 2008, p.1) According to Banaji (2008), nowadays political engagement and civic participation don’t appeal to young’s peoples general beliefs and activities, as they are viewed more as mandatory and less as maturity, citizen’s political agency, or sense of power and responsibility . However, t... ...no action and that ‘civic’ engagement is better than no engagement.’ This means that nowadays political participation could be expressed with the use of different forms and sources and if using an alternative way to express it, it doesn’t mean that it still it no longer exists. There is no formal evidence which proves that the younger age groups are less engaged to politics than the older ones. Nevertheless, there are lots of different methods that youth workers can use in order to actuate young people to political action, social cohesion and engagement through informal education. These methods contain voluntary work, group discussions and peer education. Finally, the notable absence of gender in terms of youth participation in politics constitutes another very important consideration that has to be highlighted in the future researches and surveys.

Monday, September 2, 2019

Descriptive Essay about Sunset Beach -- Description, narrative, descrip

Ever since Sunset Beach has been officially opened to the public, there has been a drastic increase of tourists present. Television programs concluded that at least a thousand people visit the beach everyday. Reasons for their stay are that they feel comfortable with the environment that surrounds the beach front, people who are at the beach are joyous and numerous activities to enjoy, and the fresh scent of the sparkly waters, make the visitors feel calm and pleasurable. So I decided to take a trip there. As I walked down the sidewalk, my nose picked up the salty scent of the sea breeze. I looked ahead and saw the gleaming beach in the far distance. Before me, the tranquil city along with the endless blue sea sandwiched the golden beach that stretched across for miles. Then my eyes were grasped by the incredible beauty of the city skyscrapers that stood hundreds of meters tall, and they probably had also captured the sight of many other tourists. Some people were jogging and others were bike riding Just as the yellow sun rises from behind the buildings. It’s easy for many people t...

Sunday, September 1, 2019

Game Theory †21 flags winning strategy Essay

There were 21 flags and each player had the opportunity to remove 1,2, or 3 flags. The player that removes the last flags will be the winning team. By applying the backwards induction theory, think backwards in time and the optimal winning strategy is to leave the opponent player 4 flags by each step to remove the flags so that the remaining number is divisible by 4. The player that has the first attempt to remove the 1st flag will control the 100% of whole situation. This is the unbeatable strategy that will lead the whole situation by leaving the opponent player with a multiple of 4 flags. This apply when both player understand the trick of this 21 flags game. By leaving the opponent player with 20 flags at the first attempt, no matter how many flags the opponent player remove, the player that in control could then remove the flags and leave the opponent with 16 flags, then 12 flags, then 8 flags and finally 4 flags which forces the opponent in to a situation where no matter how many flags the opponent player remove, the in charge player will be able to take the last flag. The key of this game is the target number you arrange it so you leave your opponent player with. Then whatever amount of flags the opponent player take, you can remove the remaining 1 to 3 flags that sum up to 4. The first attempt to remove the 1st flag of this 21 flags game has the upper hand. However, if you lost the first attempt to remove this game, you better hope the opponent player do not know the trick of 21 flags. By this, you may still stand a chance to get back the control of this game by playing randomly to confuse the opponent player and try to get back the target number of 4. Unless the opponent understand well the strategy of this game else they most probably will go to make a mistake and allow you to control back the situation by getting back the situation where flags number able to be divide by 4 before ending the game.

Saturday, August 31, 2019

Hitting a Baseball

It has been a proven fact that hitting a baseball is one of the toughest things to accomplish in sports. In the major leagues if you fail 7 out of 10 times you are still considered to be an incredibly good hitter. That statistic shows how challenging it is even for Athletes at the professional level to produce a perfect swing. In order to achieve this perfect swing there is a series of adjustments that must be made. In this essay I will show how hitting a baseball develops through 3 different stages of learning. When someone is first starting off usually around the ages of 7 to 9 , they do not understand that the way a bat is held effects the outcome of the swing. In the beginning process many tend to place the bat in their palm and grip it extremely tight, without aligning their knuckles. They do not realize that holding the bat this way will reduce the range of motion in the swing, causing slower bat speed. Another key component to hitting a baseball is the hitter’s stance. In the beginning stage many crowd the plate, with their toes pretty much touching the corner of the tip of the plate. The legs are extremely bent and the toes are pointing in two different directions. The hands are then placed right next to the ear with both elbows facing up. The hitters back is usually arched at the top, with their shoulders kinds of pushing in to the neck. As the ball is pitched the hitter does not take a step towards the pitch, instead they keep their feet planted on their heels. When the ball is getting closer they begin their swing by dropping the back elbow and lifting the front one up. As the bat begins to cross the plate the head begins to turn away from the ball, because they are using no hip action. The bat is stopped in front of their body, creating no follow through. There may be little or no contact at this point. As a hitter progresses around the middle school stage, one thing they begin to change is the way they grip the bat. Now that they are a little more informed they begin to align the knuckles and place the bat on the fingers instead of on the palm. The hitter now has more flexion in the wrist along them to better their chances of hitting the ball. The stance of the batter is now gradually changing as well. The batter is now able to get in a position to where they can feel a little more comfortable. The knees are just are just slightly bent still allowing them to have some mobility. The toes are both facing in the same direction but are still planted on their heels. The elbows are now facing down instead of up, and the hands are up just above the shoulders and away from the ears. The back is no longer arched and the hitter is now at a stance where they are not as stiff as they once were. As the pitch comes the hitter now takes a step forward to generate some force, and prepare for his swing to begin. As the pitch is coming the hitter now keeps his eyes on the ball as it is coming in and extends hit arms out toward the baseball but slightly drops the barrel of the bat because of this, the hitter might have a tendency to pop the ball up instead of hitting a solid line drive. At this point the swing has now gotten better but still it has not generated bat speed to its full potential. Once the collegiate level is reached the batter now understands all the key fundamentals to hitting a baseball. With many years of practice and execution the hitter’s swing is now at its perfect state making it much easier to create contact and power. At this point the hitter no longer has any difficulty with the grip of the bat, or stance. Their feet are at shoulder width length allowing them to be at their most powerful position. The hitter is on the balls of his or her feet and is no longer on the heels. As the pitch is coming the hitter shifts his weight from the front leg to the back leg. The hitter is creating negative force by taking a step back, then going forward once again. At this point, weight should be about 70 percent on the back leg, 30 percent on the front leg. This allows the hitter to stay on the back leg to generate the most amount of power possible as they are swinging. While this is happening the hitter must also shift his hand back to generate more power in the upper body as well. The next step is the key essential where many beginners go wrong when trying to hit a baseball. Many believe that the hands trigger the swing, but this is untrue. It is the explosion of the hip that creates the swing. The hips start to open and allow the hands to explode through the hitting zone at a much higher rate of speed than if the hands triggered first and were still inhibited by the body. This has been proven by some of the most respected hitting authorities in the world by using high speed motion detection software to analyze a hitter's swing. Once the hips have started to open, the hands shoot through the zone. The hitter drives the nob of the bat to the ball, and keeps the bat through the zone as long as possible. This makes it easier to hit the pitch no matter where it is thrown. Once the bat has made contact the hips naturally finish their rotation as the hands leave the hitting zone and follow through. The weight shifts forward into contact, and all of the steps come together into a fluid, quick swing. Now the batter can produce hard linedrives or homeruns instead of soft grounders or pop ups.