full-disclosure-uk August 2008 archive
Main Archive Page > Month Archives  > full-disclosure-uk archives
full-disclosure-uk: [Full-disclosure] Internet Justice #1 August

[Full-disclosure] Internet Justice #1 August 2008 (Part 1/7)

From: Great Council of Internet Superheros <internetsuperheros_at_nospam>
Date: Fri Aug 08 2008 - 14:43:06 GMT
To: full-disclosure@lists.grok.org.uk


-----BEGIN PGP SIGNED MESSAGE-----

Hash: SHA1 ___ . . . / \ |_|_ o _|_ / O O \ .,-. .-. | | .-. .--..-.. .-. . .--.| | O | | )( )| | (.-' | ( |(.-' | `--.| , | | , |`-' `-' `-`-'`--'' `-`| `--'-' `-`--'`-' \/( )\/ | ._.' | ) ( | ' th3 p0lt3rg31st squ4dr0n: p0ss3ss1ng b14tchz n34r j00 |( )| || | |' Say it's the leaves, the way they rustle. `| | | Say it's a shadow, the scraping of a stick. | | | Childhood friends, dead and buried | /-' they're out there now, small ghosts |_.' who never knew when enough was enough... ....... ...CEILING.. ...GHOST...... ..IS.. ......... ......... ......... ...... .. ......... ......... ......... ......... WATCHING..YOU....SELLING OUT........ One who ran into a car, one who tripped on a stone and fell on a stick that poked through his heart. Lost and forgotten, they've gone into the world to become the snap of a branch, the skittering of leaves. What are they whispering? It's late and it's cold. THEY WANT TO COME IN... o.O MERRY CHRISTMAS... o.O 4nd unh4ppy 2008! . . . . ,`,`,`,`, Kevin Mitnick . . . . `\`\`\`\; `\`\`\`\`, ~|;!;!;\! Nate Lawson ~\;\;\;\|\ (--,!!!~`! . (--,\\\===~\ (--,|||~`! ./ Pedtko D. Petkov (--,\\\===~\ `,-,~,=,:. _,// (--,\\\==~`\ ~-=~-.--- |\;/J, Tom Ferris ( --,\\\((```==. ~'`~/ a | (-,.\\('('(`\\. ~'=~| \_. \ Thomas Ptacek (,--(,(,(,'\\. ~'=| \\_;> (,-( ,(,(,;\\ ~=/ \ OWASP (,-/ (.(.(,;\\,/ ) (,--/,;,;,;,\\ ./------. Kurt Seifreid (==,-;-'`;' /_,----`. \ ,.--_,__.-' `--. ` \ Alan Shimel (='~-_,--/ , ,!,___--. \ \_) (-/~( | \ ,_- | ) /_| Still(in)Secure (~/((\ )\._, |-' _,/ / \\)))) / ./~. |  \_\;

    Security Bloggers Network ,__///// / / ) / '===~' | | (, <. Core Security / / \. \ P0W3R3DBY4N4RMY _/ / \_\ 0FFUCK1NUN1K0RNZ ... AND YOU! /_!/ >_\

....... ........... .............. ...... ......... ......... ......... .......
Ho fucking ho, ho fucking ho, fuckin ho, fuckin ho, fuckin ho, fuckin ho ho ho! ....... ....OUT....TO....GET...JOO.... ...... .................. ......... ....

    "The whole IT security industry is an accident -- an artifact of how the

    computer industry developed." Bruce Schneier

o.Oo.O 1. THE HIT LIST: "R1d1n j00 Yah00"

    The Judge for Security Sellout Crimes hereby wages war against: |/| Tom Ferris @ adobe.com security- protocols.com |/| Matasano LLC @ matasano.com sockpuppet.org |/| Nate Lawson @ rootlabs.com |/| Joanna Rutkowska @ trannyvideos.com |/| Petko D. Petkov @ googlemail.com gnucitizen.org |/| Matt Richard @ idefense.com |/| /\) Toralv Dirro @ mcafee.com AVERT Labs |/|/\/ Dan Kaminsky @ ioactive.com arkham.wstn.ioactive.com |/|\/ Dror Shalev @ sec.drorshalev.com (\\\) Dragos Riuiu @ gaysecwest.com (\\\) Thorsten Holz @ honeynet.org mwcollect.org (\\\) Andre Protas @ eeye.com mwcollect.org (IDA leaker) (\\\) Gadi Evron @ linuxbox.org kosherobese.org (\\\) Valdis Kletnieks @ vt.edu & his alcoholic mother /\\/\ Robert Lemos @ securityfocus.com / ,^./\ Ryan Naraine @ zdnet.com gmail.com / / \/\ Beyond Security @ Isreal, Gadi's bitch tits / / \/\ SecReview @ blogspot.com (gay reviews) ( ( )/) Juha-Matti Laurio @ netti.fi & Isreal (blog moron) | | |/| Sergio Alvarez @ gmail.com nruns.com (AV rapist) | | DIE |/| Theo de Raadt @ cvs.openbsd.org gaydate.com | | |/| Alan Shimel @ yahoo.com stillsecure.com ( ( )/) Lance M. Havok @ dumb.lame.idiot.pl \ \ / / kingcope/kcope @ gmx.net lame.idiot.de \ `---' / Jennifer Granick @ whitefat.defender.lame `-----' David Maynor @ gmail.com erratasec.com apple.com Andrew Cushman @ microsoft.com gossip.sec

    On 4 l0ng 3n0f t1m3l1n3, th3 surv1v4l r4t3 f0 3v3ry0n3 dr0pz t0 z3r0.

    Th4t t1m3l1n3 3ndz 0n Xm4z 2007. G3t r34dy f0 t3 fuck1n rucku5.     B14tch3z b3 g3tt1n r41d3d... 4bd1c8 or b3 n3zt 1n l1n3!

W3 4r3 v3rrry pr0ud 0f 0ur fr31ndz 4t Core Security f0r th3 Theo de Raadt
hum1l14t10n, y3t y0 4r3 s3ll1ng 0ut t00 m|_|ch. D0n b3 l4m3 thx! .................................................................... ...........
o.Oo.O 2. PETKO D. PETKOV EXPOSED: STUP1D INZ1D3, ARROG4NT OUTS1D3

W007 f1rz7 1n l1n3 1z Petko D. Petkov, pdp, th3 1337 wh1t3h47: l3tz z33 s0m
m41lz fr0m h1z m41lb0z (h4s b4ckup s1nc3 2005! uz3l3z h34d3rz ztr1p3d):

Delivered-To: pdp.gnucitizen@gmail.com
Received: by 10.35.34.18 with SMTP id m18cs29927pyj;

        Fri, 24 Mar 2006 11:24:20 -0800 (PST) Received: by 10.65.181.7 with SMTP id i7mr885419qbp;

        Fri, 24 Mar 2006 11:24:00 -0800 (PST) Return-Path: <full-disclosure-bounces@lists.grok.org.uk> Received: from lists.grok.org.uk (lists.grok.org.uk [195.184.125.51])

        by mx.gmail.com with ESMTP id
f15si768247qba.2006.03.24.11.23.48;

        Fri, 24 Mar 2006 11:24:00 -0800 (PST) designates 195.184.125.51 as permitted sender) Received: from lists.grok.org.uk (localhost [127.0.0.1]) by lists.grok.org.uk (Postfix) with ESMTP id 30966F93; Fri, 24 Mar 2006 19:19:43 +0000 (GMT) X-Original-To: full-disclosure@lists.grok.org.uk Delivered-To: full-disclosure@lists.grok.org.uk Received: from mail.atlasvanlines.ca (unknown [66.207.102.26]) by lists.grok.org.uk (Postfix) with ESMTP id 439D01F2 for <full-disclosure@lists.grok.org.uk>; Fri, 24 Mar 2006 14:53:15 +0000 (GMT) Date: Fri, 24 Mar 2006 09:53:57 -0500
Message-ID:
<517427E78F20CF4DB817BEB8504B002B013E69A9@mail.atlasvanlines.ca> From: "Andrew Florjancic" <aflorjancic@atlasvanlines.ca> To: "Theo de Raadt" <deraadt@cvs.openbsd.org>, "Gadi Evron" <ge@linuxbox.org>
Cc: full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com Subject: [Full-disclosure] RE: SendGate: Sendmail Multiple Vulnerabilities

        (Race Condition DoS, Memory Jumps, Integer Overflow) Sender: full-disclosure-bounces@lists.grok.org.uk

Finally PEOPLE speak the TRUTH!!!! Well said!!=20

  • -----Original Message----- From: Theo de Raadt [mailto:deraadt@cvs.openbsd.org]=20 Sent: Thursday, March 23, 2006 9:52 PM To: Gadi Evron Cc: bugtraq@securityfocus.com; full-disclosure@lists.grok.org.uk Subject: Re: SendGate: Sendmail Multiple Vulnerabilities (Race Condition DoS, Memory Jumps, Integer Overflow)=20

> Sendmail is, as we know, the most used daemon for SMTP in the world.=20
> This is an International Infrastructure vulnerability and should have=20
> been treated that way. It wasn't. It was handled not only poorly, but=20
> irresponsibly.

You would probably expect me to the be last person to say that Sendmail
is perfectly within their rights. I have had a lot of problems with what they are doing.

But what did you pay for Sendmail? Was it a dollar, or was it more? Let me guess. It was much less than a dollar. I bet you paid nothing.

So does anyone owe you anything, let alone a particular process which
you demand with such length?

Now, the same holds true with OpenSSH. I'll tell you what. If there is
ever a security problem (again :) in OpenSSH we will disclose it exactly
like we want, and in no other way, and quite frankly since noone has ever paid a cent for it's development they have nothing they can say about it.

Dear non-paying user -- please remember your place.

Or run something else.

OK?

Luckily within a few months you will be able to tell Sendmail how to disclose their bugs because their next version is going to come out with
a much more commercial licence. Then you can pay for it, and then you
can complain too.

    w007! w007! w007! w007! w007! w007! G4D1 VS. TH30!!????? International Infrastructure vulnerability DANGER DANGER DANGER DANGER strcpy(burger,gadi);

Delivered-To: pdp.gnucitizen@gmail.com
Received: by 10.90.50.9 with SMTP id x9cs508025agx;

        Thu, 28 Jun 2007 07:09:33 -0700 (PDT) Received: by 10.100.195.10 with SMTP id
s10mr1111608anf.1183039772787;

        Thu, 28 Jun 2007 07:09:32 -0700 (PDT) Return-Path: <david.kierznowski@gmail.com> Received: from wr-out-0506.google.com (wr-out-0506.google.com [64.233.184.237])

        by mx.google.com with ESMTP id
c4si9154299anc.2007.06.28.07.09.31;

        Thu, 28 Jun 2007 07:09:32 -0700 (PDT) Received: by wr-out-0506.google.com with SMTP id i4so569430wra

        for <pdp.gnucitizen@googlemail.com>; Thu, 28 Jun 2007 07:09:31 -0700 (PDT)
Received: by 10.90.119.15 with SMTP id
r15mr1685038agc.1183039771473;

        Thu, 28 Jun 2007 07:09:31 -0700 (PDT) Received: by 10.90.104.12 with HTTP; Thu, 28 Jun 2007 07:09:31 - 0700 (PDT)
Message-ID:
<f4cd4c010706280709o25bec985kf7393272444d0cbd@mail.gmail.com> Date: Thu, 28 Jun 2007 15:09:31 +0100
From: "David Kierznowski" <david.kierznowski@gmail.com> To: "pdp (architect)" <pdp.gnucitizen@googlemail.com> Subject: Re: blog security
In-Reply-To:
<6905b1570706280658h2eb21bc4pe03528ef085c9af3@mail.gmail.com> MIME-Version: 1.0
Content-Type: multipart/alternative;

        boundary="----=_Part_44034_2752723.1183039771445" References:
<6905b1570706280625p48ff650blab35a5d471fcb8ad@mail.gmail.com> <f4cd4c010706280630p3a5d517dyb6658d4323b4bc2e@mail.gmail.com> <6905b1570706280658h2eb21bc4pe03528ef085c9af3@mail.gmail.com> - ------=_Part_44034_2752723.1183039771445 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Let me think on it...

On 28/06/07, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > > I am in winterflood ... do you like the idea of microblogging... > > I was thinking that we could have to types of blogs on gnucitizen...
> the standard one.. which is what we have atm and a micro blog which is
> actually another category called microblog which contains messages and > interesting info but in very all in all very short format. > > what do u think... cuz guys, I don't know how they doit but guys like
> 0x000000 have more trafic ranking acording to alexa then us and rsnake
> is the king of the hill.... we need to truely combine forces and get > them out from the top place... but we need to layout an attack... > startey... > > any ideas? > > On 6/28/07, David Kierznowski <david.kierznowski@gmail.com> wrote: > > Lets catch up tomorrow so we can plan the move and format and I have a
> > couple of other ideas around the project that I can fill you in on. > > > > Hows L2012? > > > > David > > > > > > On 28/06/07, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote:
> > > what's up
> > > we need to start thinking how we are going to move blogsecurity to
> > > gnucitizen. Do you mind if we follow the same theme... that will be
> > > the easiest way to do it. I have some cool ideas about how to graph > > > the wp-scanner results via Flex. > > > -- > > > pdp (architect) | petko d. petkov > > > http://www.gnucitizen.org > > > > > > > > > > -- > pdp (architect) | petko d. petkov > http://www.gnucitizen.org >

    ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT
    PDP & D4V1D K13RZ0ZKI W4NT TOP R4NKZ ON G0000GL3 4ND 4L3X4. Z0 TH31R 4DZ

    G3T M0R3 M0N3YZ!!11!!!1 RSNAKE FEAR! truely! PDP 1Z ZT1LL PL4NN1NG 4TT4CK!

Received: by 10.35.48.16 with HTTP; Sun, 3 Sep 2006 03:12:54 -0700 (PDT)
Message-ID:
<6905b1570609030312n76367496p61debdbf3215ec09@mail.gmail.com> Date: Sun, 3 Sep 2006 11:12:54 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: pagvac <unknown.pentester@gmail.com> Subject: have a look
MIME-Version: 1.0
Content-Type: multipart/mixed;

        boundary="----=_Part_28854_31891556.1157278374496" Delivered-To: pdp.gnucitizen@gmail.com

  • ------=_Part_28854_31891556.1157278374496 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline

hei, man
here is something that I wrote yesterday night. Can you have a look through it and tell me what you think. I will put it on my blog but I
have some reservations so I need advice from true friend. If it is lame, just tell me. :) Thanks man. Check the attachment.

  • -- pdp (architect) http://www.gnucitizen.org
  • ------=_Part_28854_31891556.1157278374496 Content-Type: application/vnd.oasis.opendocument.text; name="Backdooring Flash Objects.odt" Content-Transfer-Encoding: base64 X-Attachment-Id: f_ern9mek7 Content-Disposition: attachment; filename="Backdooring Flash Objects.odt" L4M3 4TT4CHM3NT...
  • ------=_Part_28854_31891556.1157278374496--

    PDP Y0 D0NT N33D T0 M41L UR H4CK3R FR31NDS T0 4SK 1F 1TZ L4M3! L34V3

    TH3 3M41L S0 THE GH0ZTZ C4N Z33 1T. 1ND33D, 1TZ L4M3. BUT Y0 P0ZT3D

    1T!!?? Th4nkz

From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: pagvac <unknown.pentester@gmail.com> Subject: Re: have a look
In-Reply-To:
<b7a807650609041500r5e5f067ah6541a7612b63b80a@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References:
<6905b1570609030312n76367496p61debdbf3215ec09@mail.gmail.com>

         <b7a807650609041500r5e5f067ah6541a7612b63b80a@mail.gmail.com> Delivered-To: pdp.gnucitizen@gmail.com

well, :) too late... it is up now. The modified version is on http://www.gnucitizen.org.
I am also working on some other cool stuff that you may find extremely
interesting.

On 9/4/06, pagvac <unknown.pentester@gmail.com> wrote: > i like it, but a bit too heavy for my taste. it feels too long. my > mind was only able to read about 60% of it. of course, this is just my > opinion, so you shouldn't take it as the absolute truth ;-) > > if it took u testing X number of tools until u made it work u could
> have just said that in one line and then go straight to examples using
> the tool that finally worked. people like practical and quick things > (again this is my opion). > > other than that, interesting topic (backdooring a flash file). > > On 9/3/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > > hei, man > > here is something that I wrote yesterday night. Can you have a look
> > through it and tell me what you think. I will put it on my blog but I
> > have some reservations so I need advice from true friend. If it is > > lame, just tell me. :) Thanks man. Check the attachment. > > > > -- > > pdp (architect) > > http://www.gnucitizen.org > > > > > > > > > -- > pagvac > [http://ikwt.com/] >

        N0W Y0R R34D3RZ C4N F1ND G00D PDP 0D4Y H3R3 T00. 4ND Y0 H4V3 FR33

        3M41L B4CKUPZ! HEHEHEHEHEHEHEHEHE Date: Tue, 5 Sep 2006 17:38:48 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: pagvac <unknown.pentester@gmail.com> Subject: Re: have a look
In-Reply-To:
<b7a807650609050859r23e3aa5x8364f48dfe224ea7@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References:
<6905b1570609030312n76367496p61debdbf3215ec09@mail.gmail.com> <b7a807650609041500r5e5f067ah6541a7612b63b80a@mail.gmail.com> <6905b1570609050555s1be2e41eu1b4953cfe76dd2f1@mail.gmail.com> <b7a807650609050859r23e3aa5x8364f48dfe224ea7@mail.gmail.com> Delivered-To: pdp.gnucitizen@gmail.com

don't get you man

On 9/5/06, pagvac <unknown.pentester@gmail.com> wrote: > On 9/5/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > > well, :) too late... it is up now. The modified version is on > > http://www.gnucitizen.org. > > I am also working on some other cool stuff that you may find extremely > > interesting. > > "extremely interesting" tells me nothing unless you tell me what > exactly you're talking about ;-D

PDP.... YO N33D T0 3ZPL41N TH1NGZ S0 P30PL3S D0NT TH1NK Y0 4R3 T4LK1NG BULLSH1TZ Received: by 10.35.48.16 with HTTP; Tue, 5 Sep 2006 13:26:57 -0700 (PDT)
Message-ID:
<6905b1570609051326q30d18acfn6669efc78d2a5d9c@mail.gmail.com> Date: Tue, 5 Sep 2006 21:26:58 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: pagvac <unknown.pentester@gmail.com> Subject: Re: have a look
In-Reply-To:
<b7a807650609051155q76da4047j36d423bf442fcc94@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References:
<6905b1570609030312n76367496p61debdbf3215ec09@mail.gmail.com> <b7a807650609041500r5e5f067ah6541a7612b63b80a@mail.gmail.com> <6905b1570609050555s1be2e41eu1b4953cfe76dd2f1@mail.gmail.com> <b7a807650609050859r23e3aa5x8364f48dfe224ea7@mail.gmail.com> <6905b1570609050938l4f6c6a0fqe8826f2165f921ef@mail.gmail.com> <b7a807650609051155q76da4047j36d423bf442fcc94@mail.gmail.com> Delivered-To: pdp.gnucitizen@gmail.com

ieh, but sometimes I want it to be a surprise ;-)

On 9/5/06, pagvac <unknown.pentester@gmail.com> wrote: > On 9/5/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > > don't get you man > > sorry, I'm tired. basically all I'm saying is that why tell me u're
> working on something interesting if you dont tell me what it is?!!!
> it'll only be interesting if i know what it is - you know what i mean > ;-) > > u know me, im curious. do always tell me what ure working on!

 PDP.... M41L DISCL0ZUR3 SURP1Z3! H4PPY XM4Z HEHEHEHE W3 4R3 V3RY CUR10UZ T00 Received: by 10.35.48.16 with HTTP; Tue, 5 Sep 2006 18:07:02 -0700 (PDT)
Message-ID:
<6905b1570609051807n5fef365epe9cdf3928c44868d@mail.gmail.com> Date: Wed, 6 Sep 2006 02:07:02 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: pagvac <unknown.pentester@gmail.com> Subject: Re: have a look
In-Reply-To:
<6905b1570609051326q30d18acfn6669efc78d2a5d9c@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References:
<6905b1570609030312n76367496p61debdbf3215ec09@mail.gmail.com> <b7a807650609041500r5e5f067ah6541a7612b63b80a@mail.gmail.com> <6905b1570609050555s1be2e41eu1b4953cfe76dd2f1@mail.gmail.com> <b7a807650609050859r23e3aa5x8364f48dfe224ea7@mail.gmail.com> <6905b1570609050938l4f6c6a0fqe8826f2165f921ef@mail.gmail.com> <b7a807650609051155q76da4047j36d423bf442fcc94@mail.gmail.com> <6905b1570609051326q30d18acfn6669efc78d2a5d9c@mail.gmail.com> Delivered-To: pdp.gnucitizen@gmail.com

so, you can check my new baby on my website :)

On 9/5/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > ieh, but sometimes I want it to be a surprise ;-) >

 (S0, Y0U C4N CH3CK PDP EM41LZ ON 1NT3RN3TS) HEHEHEHEHEHE Delivered-To: pdp.gnucitizen@gmail.com
Received: by 10.35.48.16 with SMTP id a16cs7553pyk;

        Mon, 4 Sep 2006 04:36:36 -0700 (PDT) Received: by 10.35.39.2 with SMTP id r2mr9977768pyj;

        Mon, 04 Sep 2006 04:36:36 -0700 (PDT) Return-Path: <petko.petkov@nta-monitor.com> Received: from mercury.nta-monitor.com (dsl-62-3-105-225.zen.co.uk [62.3.105.225])

        by mx.gmail.com with ESMTP id
v53si5193691pyv.2006.09.04.04.36.35;

        Mon, 04 Sep 2006 04:36:36 -0700 (PDT) Received: from [192.168.124.33] (petko.nta-monitor.com [192.168.124.33])

        by mercury.nta-monitor.com (8.13.4/8.13.4/Debian-3sarge1) with ESMTP id k84BaY5G005589

        for <pdp.gnucitizen@gmail.com>; Mon, 4 Sep 2006 12:36:34 +0100 Message-ID: <44FC0FC2.7020006@nta-monitor.com> Date: Mon, 04 Sep 2006 12:36:34 +0100
From: Petko Petkov <petko.petkov@nta-monitor.com> User-Agent: Thunderbird 1.5.0.5 (Windows/20060719) MIME-Version: 1.0
To: pdp.gnucitizen@gmail.com
Subject: good start
Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit
X-Scanned-By: MIMEDefang 2.51 on 192.168.124.1 X-Virus-Scanned: ClamAV 0.88.4/1795/Sun Sep 3 23:48:24 2006 on mercury.nta-monitor.com
X-Virus-Status: Clean

Web browser flaws are nothing new, but the professional crooks are finding new ways to combine these flaws into a system for turning a quick profit. This post describes an example of how one web site is combining system fingerprinting, browser vulnerabilities, email spam,
fake web forums, and buggy PHP applications into an automated malware
installation system.

good start !!!!

 !! ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT
 PDP H4Z PSYCH0 PR0BL3MZ H3 M41LZ H1MZ3LF. PL1Z N0T3 TH33Z:  mercury.nta-monitor.com (8.13.4/8.13.4/Debian-3sarge1) D3B14N 0WN3D L0L! petko.nta-monitor.com [192.168.124.33] N0 J4V4ZCR1PT P0RT SC4N dsl-62-3-105-225.zen.co.uk [62.3.105.225] N33D3D! HEHEHEHE  0KZ, TH4NKZ F0R TH3 H0M3 1P 4ND C0RP0R4T3 3M41LZ! HEHEHEHEHEHEHEHE  PL1Z FB1 CH3CK TH4T 4DSL F0R CH1LD PR0N 4ND 1LL3G4L SH1TZ!!!!!!!!  !! ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT Received: by 10.35.54.8 with HTTP; Sat, 13 May 2006 10:52:00 -0700 (PDT)
Message-ID:
<6905b1570605131052y77364439yada2a7187ad03884@mail.gmail.com> Date: Sat, 13 May 2006 18:52:00 +0100
From: "Petko Petkov" <pdp.gnucitizen@googlemail.com> To: "Nabil c.nabil" <c.nabil@gmail.com>
Subject: Re: he pedko
In-Reply-To:
<6905b1570605130259j60531db6q8ae2275e9abe42d3@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: quoted-printable Content-Disposition: inline
References:
<eaef2e580605120932o7e6a992ag767497fe4afd7b9@mail.gmail.com>

         <6905b1570605130259j60531db6q8ae2275e9abe42d3@mail.gmail.com> Delivered-To: pdp.gnucitizen@gmail.com

Nabil,

I will look for LC5 latter but I don't know if I will be able to find
it or even send it. The best thing to do is to get it from bittorent.
It will take you less than 10 minutes.

I can write the software for you but I don't have any details. If you
tell me where you want to login to, what username and password (this is for testing when developing the application) you have to use and what information you are looking for I will be able to help you.

Cheers man,
Speek to you soon.

On 5/13/06, Petko Petkov <pdp.gnucitizen@googlemail.com> wrote: > man, I will play arround with it latter on and I will send you LC5 if > I can dig it up from the pile of cds I have... cheers. > > On 5/12/06, Nabil c.nabil <c.nabil@gmail.com> wrote: > > hi pedko > > > > i just need this favor, > > > > it s very simple, i need a software which according to the time of the
> > computer, for example it checks the system time, 10am, 10 of may 2006, =
log
> > in to a website with username and password, click on inbox, click on 1 =
st > > email, retrieve email content, log out. > > > > then again, 11 may 2006, at 10 am, same steps, > > > > if it is too much just give some hints of how to do it the simplest way=
ok
> >
> > or otherswise you can send me the program with sourcecode u already mad=
e, i > > try to understand a nd change it the way i want > > > > and plus, the lc5 software please > > > > thank you so much i know i always ask thos kind of favors > > > > you have to come, and probably, joseph will be here as well. > > > > i just so adrian, yesterday in the graduation ceremony > > > > it was nice > > > > so let me know if everything is ok > > > > thanks again > > > > nabil > > > > > > > > > > >

 ALERT: PETKO D. PETKOV 1Z A CR4CK3R 4ND B4D H4CK3R H3Z D01NG TR0J4NZ!

Received: by 10.35.48.16 with HTTP; Sun, 11 Jun 2006 07:19:20 -0700 (PDT)
Message-ID:
<6905b1570606110719j61183a76sde7dde0aa05ea641@mail.gmail.com> Date: Sun, 11 Jun 2006 15:19:20 +0100
From: "Petko Petkov" <pdp.gnucitizen@googlemail.com> To: "Halvar Flake" <halvar@gmx.de>
Subject: Re: [Dailydave] Statistical distinguisher for compression algorithms ?
In-Reply-To: <017901c68bb8$75cb0300$c7b2a8c0@D1NQ6Z1J> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References: <017901c68bb8$75cb0300$c7b2a8c0@D1NQ6Z1J> Delivered-To: pdp.gnucitizen@gmail.com

Well, I am not an exprert, however this is what I think: If the data is actually a file, which is probably what you are looking
at the moment, you can save it as such and run some of these signature
tools; like 'file' for UN/LIN. It is lame and stupid I know. :)

On 6/9/06, Halvar Flake <halvar@gmx.de> wrote: > > > Hey all, > > I ran into a small problem today: Given a stream of data that I suspect to
> be compressed with
> a well-known lossless compression algorithm, is there a way of deciding > which algorithm that > might be ? > > It appears to be such a common problem that somebody else (who understands
> something about
> statistics, which I don't) would've run into -- can somebody give me > pointers to existing work on > this perhabs ? > > Cheers, > Halvar

 PDP H3LPZ H4LV4R G3N1UZ T0 4DD F1L3 ID T0 BINDIFF 1N J4V4  TW0 0F TH3 B3ZT WH1T3H4TZ W0RK1NG T0G3TH3RZ F0R B3TT3R W0RLDZ!!  L1K3 CLAMAV-SCAN | RM -RF / | ECHO HEHEHEHEHEHEHEHEHEHEHE Received: by 10.35.48.16 with HTTP; Tue, 13 Jun 2006 01:39:04 -0700 (PDT)
Message-ID:
<6905b1570606130139y13b27808mc9a922139dd3d914@mail.gmail.com> Date: Tue, 13 Jun 2006 09:39:04 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: RSnake <h@ckers.org>
Subject: Re: [Full-disclosure] Hotbot XSS vulnerability In-Reply-To: <448DB7DD.1060704@ckers.org> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline References: <448C92D7.5060309@ckers.org> <6905b1570606120556l48509e82q7380d134bb11554d@mail.gmail.com> <448DB7DD.1060704@ckers.org>
Delivered-To: pdp.gnucitizen@gmail.com

Yeh, javascript is amazing... I am quite interested in XSS worms. Did
you have a look on the latest yahoo worm. After myspace incident, it is getting quite attractive way of compromising online accounts and generating network activity which could lead to ddos.

cheers

On 6/12/06, RSnake <h@ckers.org> wrote:
>
> Thanks! I'm giving it my best shot - trying to document all the
> known vectors... of course I'm not enumerating them, but this is about
> as close as it gets without writing an application to do that. Alas, > I'm pretty hindered by what HTML and JavaScript can do. :) > > pdp (architect) wrote: > > I like your website dude... you have nice collection of XSS going on > > there. Keep on comming with good stuff. > > > > cheers > > > > P.S. indeed, this hotbot XSS is quite funny. > > > > On 6/11/06, RSnake <h@ckers.org> wrote: > >> There's a vulnerability in the way Hotbot parses text to display on the
> >> page during search results. The description of the flaw is located
> >> here: http://ha.ckers.org/blog/20060611/hotbot-xss- vulnerability/ > >> > >> -RSnake > >> Home: http://ha.ckers.org/ > >> RSS: http://ha.ckers.org/blog/feed/ > >> > >> _______________________________________________ > >> Full-Disclosure - We believe in it. > >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html > >> Hosted and sponsored by Secunia - http://secunia.com/ > >> > > > > > >

 FULL-DICLOSURE: WE BELIEVE IN IT! HEHEHEHEHEHEHEHEHEHE (W1TH 3M41LZ!)
 0KZ, Z0 P3RTY XSS C0LL3CT10N! N0W Y0 C4N WR1T3 W0RMZ 4ND B4D SH1TZ!  RSNAKE T34CH3Z MICROSOFT HOW TO H4CK 1N W3BZ W1TH J4V4SCR1P7!!!  willey note: th3y s3cr3tly w4nt t0 ddos pr0n starz myspaces

Delivered-To: pdp.gnucitizen@gmail.com
Received: by 10.35.48.16 with SMTP id a16cs81080pyk;

        Mon, 19 Jun 2006 01:12:39 -0700 (PDT) Received: by 10.49.28.14 with SMTP id f14mr5099255nfj;

        Mon, 19 Jun 2006 01:12:38 -0700 (PDT) Return-Path: <Zone-H@zone-h.org>
Received: from zone-h.org (www.zone-h.org [213.219.122.11])

        by mx.gmail.com with ESMTP id
p45si5399516nfa.2006.06.19.01.12.38;

        Mon, 19 Jun 2006 01:12:38 -0700 (PDT) Received-SPF: pass (gmail.com: best guess record for domain of ZoneH @zone-h.org
designates 213.219.122.11 as permitted sender) Received: from www.zone-h.org (localhost [127.0.0.1]) by zone-h.org (Postfix) with ESMTP id 8A8C53D396 for <pdp.gnucitizen@gmail.com>; Mon, 19 Jun 2006 11:13:05 +0300 (EEST)
Date: Mon, 19 Jun 2006 11:13:05 +0300
To: pdp.gnucitizen@gmail.com
From: Zone-H <Zone-H@zone-h.org>
Subject: Account details for pdp (architect) at www.zone-h.org Message-ID: <8d0c69819c373a2249efda3fc0367609@www.zone-h.org> X-Priority: 3
X-Mailer: PHPMailer [version 1.73]
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="iso-8859-1"

Hello pdp (architect),

Thank you for registering at www.zone-h.org. Your account is created and must be activated before you can use it. To activate the account click on the following link or copy-paste it in your browser:
http://www.zone-
h.org/index.php?option=com_registration&task=activate&activation=313 f0d99f776607a892a7abf1874483b

After activation you may login to http://www.zone-h.org using the following username and password:

Username - pdp
Password - pe123_ter

 TH4NKZ PDP N0W C4N SUBM1T H1Z D3F4C3M3NTZ TO ZONE-H (N0W YOU C4N T00) HEHEHE Received: by 10.35.48.16 with HTTP; Wed, 28 Jun 2006 07:18:45 -0700 (PDT)
Message-ID:
<6905b1570606280718v46e1bd23q47c7a687607ba5e7@mail.gmail.com> Date: Wed, 28 Jun 2006 15:18:45 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: "Matthew Franz" <mdfranz@gmail.com>
Subject: Re: Jython Shell
In-Reply-To:
<33acb3db0606280705s1a8d5b76m42493e5476791cb1@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References:
<6905b1570606261323o5801bf6fn4225549238d8924c@mail.gmail.com> <33acb3db0606272134w50f800e5v66c96ec84b70628c@mail.gmail.com> <6905b1570606272311g7c459672n44d659b33a512cb9@mail.gmail.com> <33acb3db0606280705s1a8d5b76m42493e5476791cb1@mail.gmail.com> Delivered-To: pdp.gnucitizen@gmail.com

I will do that soon :) check my website in a week time or subscribe to the feed

cheers

On 6/28/06, Matthew Franz <mdfranz@gmail.com> wrote: > Exactly, and for some of the stuff I've been using there were no > Python APIs or the Java ones were much better :) > > Do you have the complete source/build instructions up anywhere? > > On 6/28/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > > I am happy that you like it... since java has so much good API, why > > not reuse it? > > > > cheers > > > > On 6/28/06, Matthew Franz <mdfranz@gmail.com> wrote: > > > This great, thanks for posting to dd! > > > > > > I too have gotten hooked on jython over the last few months. > > > > > > - mdf > > > > > > On 6/26/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote:
> > > > In the last couple of days I've been doing some Java programming. :)
> > > > that was funny, anyway this is a simple jython shell that can run of
> > > > the browser. Of course in order to that you have to give jython some > > > > extra privileges but this is not the point. > > > > > > > > The purpose of my little experiment is to make python a bit more
> > > > modular so I can run my scripts on every machine that has Java
> > > > installed (no Java Mobile unfortunately). I am also using the shell to > > > > code python on the fly which is sometimes very handy. > > > > > > > > Now, some people may ask why a tool like this is posted on security
> > > > mail lists. Well, I guess you don't know python. IMHO python can come > > > > very handy if you know it. It saved the day many times in my > > > > professional career. > > > > > > > > If you have any problems with the applet bash me an email. I am kind
> > > > of constantly improving it. I am also building a small collection of
> > > > security related scripts that will come as a module which you guys can > > > > execute whenever you need. > > > > > > > > thanks. > > > > > > > > P.S. btw, this is the URL
<http://www.gnucitizen.org/projects/jython-shell/> > > > > > > > > -- > > > > pdp (architect) > > > > http://www.gnucitizen.org > > > > > > > > ------------------------------------------------------------ - ------------- > > > > Sponsored by: Watchfire > > > > > > > > As web applications become increasingly complex, tremendous amounts of
> > > > sensitive data - personal, medical and financial - are exchanged, and
> > > > stored. Consumers expect and demand security for this information. This
> > > > whitepaper examines a few vulnerability detection methods - specifically
> > > > comparing and contrasting manual penetration testing with automated
> > > > scanning tools. Download "Automated Scanning or Manual Penetration > > > > Testing?" today! > > > > > > > >
https://www.watchfire.com/securearea/whitepapers.aspx?id=70130000000 8BOQ > > > > ------------------------------------------------------------ - -------------- > > > > > > > > > > > > > > > > > -- > > > Matthew Franz > > > http://www.threatmind.net > > > > > > > > > -- > > pdp (architect) > > http://www.gnucitizen.org > > > > > -- > Matthew Franz > http://www.threatmind.net >

    ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT ALERT
    MDFRANZ MDFRANZ MDFRANZ MDFRANZ MDFRANZ CISCO MDFRANZ MDFRANZ MDFRANZ
    pdp f1ndz j4v4 funny!

    'It saved the day many times in my professional career.' Petko D. Petkov

    (t4lk1ng 0n Pyth0n 0r cr0ss l1s7 p0st1ngz (CLP) ???????) hehehehe

    To: full-disclosure@lists.grok.org.uk, dailydave@lists.immunitysec.com,

    pen-test@securityfocus.com, webappsec@securityfocus.com, P0LT3RG31S7@PDP Date: Tue, 27 Jun 2006 16:04:32 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: unknown.pentester@gmail.com
Subject: bug me free
MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
Delivered-To: pdp.gnucitizen@gmail.com

man you are like ghost... people cannot find you... what's going on man

:) anyway I am completely bored that's why I am bugging you

    HE HE HE HE HE HE 'man you are like ghost' HE HE HE HE HE HE!

Received: by 10.35.48.16 with HTTP; Tue, 27 Jun 2006 08:38:21 -0700 (PDT)
Message-ID:
<6905b1570606270838pdb45090w2074401762c05f1c@mail.gmail.com> Date: Tue, 27 Jun 2006 16:38:21 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: pagvacito <unknown.pentester@gmail.com> Subject: Re: bug me free
In-Reply-To:
<b7a807650606270836w1d48e1f7oc82a4b8fdb43521f@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References:
<6905b1570606270804w5b77200bn9db69000432a160c@mail.gmail.com> <b7a807650606270823s3f992187n7a2066f2a2339b89@mail.gmail.com> <6905b1570606270830m1097af4dhdc5273c62d1b1ba8@mail.gmail.com> <b7a807650606270836w1d48e1f7oc82a4b8fdb43521f@mail.gmail.com> Delivered-To: pdp.gnucitizen@gmail.com

sure... 700 m4ny 53(r375

On 6/27/06, pagvacito <unknown.pentester@gmail.com> wrote: > I'll tell you more about the PPTP thing in person or via PGP > > On 6/27/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > > man... sometimes I cannot follow your thought :) you are so random man.
> >
> > everything sounds good. it seems that you have a lot of fun. cool stuff man. > > > > I am not sure if I will be able to come to london tonight but > > definitely I would like to do something some day. > > > > Today I released my JythonShell and posted my website on a couple of
> > places. :) on the other side nothing interesting is happening. Tell me > > a bit more about your PPTP thing. It sounds interesting > > > > On 6/27/06, pagvacito <unknown.pentester@gmail.com> wrote: > > > Check this out man, unbelievable: > > > > > >
http://www.youtube.com/watch?v=9QuMASPj6Fg&search=new%20coke%20and%2 0mentos
> > >
> > > I'm watching Spain VS France tonight at a pub in London, you should
> > > come! I might also be meeting Shawn on Friday so join us if you want!
> > > He got an internship for Summer in a company located near the Saint
> > > Paul station. Monsy is also working as a Barrista for the Costa coffee
> > > shop in Bromley. the cool thing is that she gets free coffees and > > > sandwiches! > > > > > > I've just been playing around lately, doing vulnerability research and
> > > also a wardrive survey in the London area for Procheckup. listen, we
> > > found APs with the encryption key set as the SSID! do u understand?!!
> > > the ssid were 32 hex values (128 bits - sounds familiar? like 128 > > > keys). the SSIDs looked something like \021\043\12\033 etc... > > > > > > other highlights is an onsite test for 3 days in Dublin for next > > > month, so I'm looking forward to that. > > > > > > other than that, ive been walking around london, making weird noises > > > in the office :-) and did my first VPN PPTP hack: > > > > > > vulnerable VNC 4.11 (auth bypass) -> local administrator account with > > > no password -> hushes from DC -> come back via VPN PPTP > > > > > > why set up a backdoor when PPTP is there for you and you have all the > > > usernames and passwords? PPTP is the backdoor!!!! > > > > > > > > > > > > On 6/27/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote:
> > > > man you are like ghost... people cannot find you... what's going on man > > > > > > > > :) anyway I am completely bored that's why I am bugging you > > > > > > > > -- > > > > pdp (architect) > > > > http://www.gnucitizen.org > > > > > > > > > > > > > -- > > > pagvac > > > [http://ikwt.com] > > > > > > > > > -- > > pdp (architect) > > http://www.gnucitizen.org > > > > > -- > pagvac > [http://ikwt.com] >

    ALERT ALERT EMPLOYER ALERT ALERT ALERT ALERT ALERT ALERT 700 m4ny 53(r375

    ALERT ALERT EMPLOYER ALERT ALERT ALERT ALERT ALERT ALERT 700 m4ny 53(r375

    ALERT ALERT EMPLOYER ALERT ALERT ALERT ALERT ALERT ALERT 700 m4ny 53(r375

    ALERT ALERT EMPLOYER ALERT ALERT ALERT ALERT ALERT ALERT 700 m4ny 53(r375

    PDP 1N D4 UK D01NG W4RDR1V1NG????? TH4TZ N0T L3G4L     PDP 1Z G1V1NG 1NF0Z 0N H1Z J0B TO P30PL3Z? PL34S3 PDP'S 3MPL0Y3R, D1D TH1Z
    GUY S1GN ND4 AGR33M3NTZ? N0t s0 pr0 0f y0u PDP!

> > > vulnerable VNC 4.11 (auth bypass) -> local administrator account with
> > > no password -> hushes from DC -> come back via VPN PPTP

   PL1Z SC0TL4ND Y4RD, TH4NK UZ F0R PR0V1D1NG 3V1D3NZ3 0F H4CKZ BY PDP 4ND H1Z
   G4NG

Message-ID:
<6905b1570607100921x12c9741di11eaa499eb1cb55d@mail.gmail.com> Date: Mon, 10 Jul 2006 17:21:26 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: unknown.pentester@gmail.com
Subject: some words
MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
Delivered-To: pdp.gnucitizen@gmail.com

hei man, I might need to leave the country in a couple of days... I don't know. If everything is fine I could stay a bit more. There are some complications around my visa. I just wanted to let you know and I
will speak to you soon.

cheers

  ALERT ALERT ALERT ALERT ALERT ALERT ALERT! PDP ESCAPES UNITED KINGDOM!
  C4LL SCOTL4ND Y4RD! C4LL SCOTL4ND Y4RD! C4LL SCOTL4ND Y4RD! !!!!!!
  J41L PDP! J41L PDP! J41L PDP! J41L PDP! J41L PDP! J41L PDP! J41L PDP! Received: by 10.35.48.16 with HTTP; Wed, 9 Aug 2006 07:25:59 -0700 (PDT)
Message-ID:
<6905b1570608090725w6c73e698h19c3d7657f0fde1@mail.gmail.com> Date: Wed, 9 Aug 2006 15:25:59 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: "Daniel Bartlett" <dan@f-box.org>
Subject: Re: [Full-disclosure] XSSing the Lan 3 (web trojans.. not a new idea)
In-Reply-To: <44D9E9FC.8060703@f-box.org> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References:
<6905b1570608080618p2276dd39ta72da68e6c397318@mail.gmail.com> <44D9B24E.3010903@f-box.org> <6905b1570608090346pfeefdf0sac3506a6d5127e36@mail.gmail.com> <44D9C2F2.2050301@f-box.org> <6905b1570608090632i43139493uf36b623b53d2e645@mail.gmail.com> <44D9E9FC.8060703@f-box.org>
Delivered-To: pdp.gnucitizen@gmail.com

cool,

I've put your code into AttackaAPI.js together with credits... If we can make all these working from a single Js file it will be great. I am also putting cidrToRange and rangeToArray Util functions and other
stuff that might be helpful just as a proof of concept.

I will mail you the code as soon as I finish it.

On 8/9/06, Daniel Bartlett <dan@f-box.org> wrote: > Hi PP, > > pdp (architect) wrote: > > my name is petko not petco (this is American pet company) anyway. call > > me pdp or pp, it doesnt matter. these are my initials anyway. > > OK, noted. For the record I'm Dan / Daniel, and my general nickname > online is DanBUK. > > > > > your code is using LiveConnect. apparently this is the name of the
> > technology firefox, opera and a dozen of other browsers are > > implementing to make JavaScript communicate with Java. Unfortunately
> > IE6 and IE7 does no have this facility, which means that a true cross
> > platformed code like the one you provided requires embed Java Object. > > I must say your code is much neater but again cross platform > > capabilities are also desirable. > > Ok that all makes sense, I was trying to stay away from "real" Java I > wanted all in Javascript. > > Actually there might be something in IE, it was not available in Moz but > there is a chance with IE. > > document.location.hostaddress > > > > > cheers > > > > BTW, http://www.gnucitizen.org/blog/xssing-the-lan-4 thats the forth one. > > > > I just read it, well from the link you posted to FD. Should really get > your RSS into my aggregator... > > Cheers, > Dan. >

    AMERICAN PET COMPANY AMERICAN PET COMPANY AMERICAN PET COMPANY     PDP L1KZ B3ZT14L1TY? Received: by 10.35.48.16 with HTTP; Sun, 20 Aug 2006 05:19:34 -0700 (PDT)
Message-ID:
<6905b1570608200519s23274d91y86f34def3ada38b0@mail.gmail.com> Date: Sun, 20 Aug 2006 13:19:34 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: pdp@gnucitizen.org
Subject: test
MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
Delivered-To: pdp.gnucitizen@gmail.com

test

    1nd33d 1t w0rkz, gr8. l0lz.

Received: by 10.35.48.2 with HTTP; Sat, 9 Sep 2006 09:25:31 -0700 (PDT)
Message-ID:
<6905b1570609090925i51a8349cn74d1035709cbaa5d@mail.gmail.com> Date: Sat, 9 Sep 2006 17:25:31 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: "David Kierznowski" <david.kierznowski@gmail.com> Subject: Re: this is it
In-Reply-To:
<f4cd4c010609090920tc7cc812v8664a3176d8676e@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References:
<6905b1570609090647l1e091afekf283089743d4e8ef@mail.gmail.com> <f4cd4c010609090649r35ff0c45q3e162e60fbaf6cef@mail.gmail.com> <6905b1570609090651i3d977215pb3abeffbcf46175a@mail.gmail.com> <f4cd4c010609090653w39e2f2c2p40f6b49a6fba1e40@mail.gmail.com> <6905b1570609090657k5d3af7cdvbf882589f5839360@mail.gmail.com> <6905b1570609090705w4dafc798i1eb0fbdf5b89cf4c@mail.gmail.com> <f4cd4c010609090709w4eea5814kba0169e248991277@mail.gmail.com> <f4cd4c010609090714n2aa6f019hce7152b9c25b6b6e@mail.gmail.com> <6905b1570609090919o2d91d9dcr77bf789785d0509b@mail.gmail.com> <f4cd4c010609090920tc7cc812v8664a3176d8676e@mail.gmail.com> Delivered-To: pdp.gnucitizen@gmail.com

the one that you already wrote or which one

On 9/9/06, David Kierznowski <david.kierznowski@gmail.com> wrote: > did u read the introduction? :) > > On 09/09/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > > this is cool > > > > On 9/9/06, David Kierznowski <david.kierznowski@gmail.com> wrote:
> > > Well I was thinking we can keep the table of contents but then have > > > generic links like: > > > IntroductionContent > > > Chapter1Content > > > etc etc > > > > > > On 09/09/06, David Kierznowski <david.kierznowski@gmail.com> wrote: > > > > :D > > > > > > > > On 09/09/06, pdp (architect)
<pdp.gnucitizen@googlemail.com> wrote:
> > > > > sorry man,
> > > > > I am paranoid :) can you change the password to something else and sms
> > > > > it to me. :) also we should break down the structure so it is easier
> > > > > to work but it is wiki after all :) should be easy, couse it is not > > > > > nice to have the book in a single page :) haha... > > > > > > > > > > On 9/9/06, pdp (architect)
<pdp.gnucitizen@googlemail.com> wrote:
> > > > > > ok, I'v got it... you should of actually sms me the creds.. I don't trust google > > > > > > > > > > > > > > > > > > On 9/9/06, David Kierznowski <david.kierznowski@gmail.com> wrote:
> > > > > > > stop looking at your girl and read your email properly man, its there :)
> > > > > > >
> > > > > > > On 09/09/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > > > > > > > > this is pretty god but I have no creds :) > > > > > > > > > > > > > > > > On 9/9/06, David Kierznowski <david.kierznowski@gmail.com> wrote: > > > > > > > > > Here we go man: > > > > > > > > > > > > > > > > > > https://dk.strangled.net/kcgi-bin/view > > > > > > > > > projects:xss%0wns > > > > > > > > > > > > > > > > > > > > > > > > > > > On 09/09/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote:
> > > > > > > > > > --

 1t d03snt m4773r d00d, w3 0wn y0ur ph0n3 t00. H0wz y0 m4m4?

Message-ID:
<6905b1570609210418s79425ca0q190804d2c8a49336@mail.gmail.com> Date: Thu, 21 Sep 2006 12:18:41 +0100
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: "Naraine, Ryan" <Ryan_Naraine@ziffdavis.com> Subject: Re: eWEEK media query (Backdooring MP3 files) In-Reply-To:
<BD2A69C91E3CF846A653B716872B0BBD0291C240@NYMSGVS02.media.ziffdavis. com>
MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References:
<BD2A69C91E3CF846A653B716872B0BBD0291C240@NYMSGVS02.media.ziffdavis. com>
Delivered-To: pdp.gnucitizen@gmail.com

Hi Ryan,
How are you? I will try to answer your questions as promptly as possible. I don' t mind at all.

  1. have you reported this to apple? Have they acknowledged receiving a report and said anything about a possible fix?

The short answer is no. Vendors are not interested in fixing issues related to features in their products. Fixing it means removing it or
restricting it and that is not what they want.

It is quite interesting to be a security researcher today. You can see
patterns in the way various companies mitigate security problems found
in their products. I don't blame them. They are quite right from their
business point of you.

This is a quote from an article I wrote a month ago about disclosing security vulnerabilities:

[quote]
For me and other people that I know, it is crucial to stay ahead of the game. After all we are the good guys. It is not that we want to satisfy our ego and that is the reason why we continue researching these topics. All this research, could be valuable to professional attackers but the tendency is that it will take some time until it gets into mainstream exploitation. This gives us a couple of months technological benefit that we will use for the good.

Now here is something that I learned from Mario Puzo's "The Godfather". When the heads of all families gathered to discuss about the potentials in the drug business there was only one of them that made any sense. This dude, sorry I forgot his name, reasoned that after all, although he don't believe in drugs, he will take part of the business because then he can control it. As such he will do more good than evil by not allowing drug lords to go to schools or other public places.
[quote]

2. do you think this can be expanded in live attack scenarios? Can you
provide a few examples of what's maliciously possible?

Yes, IMHO this issue can be exploited on a massive scale. This is the
reason why I posted this security notice to full-disclosure and other
security related mailing lists.

Let's put it this way; media formats are the essence of today's Internet. Youtube, Apple's Movie Trailers are just two of many other websites that deals with media content.

iTunes and QuickTime are standard part of many business and home workstations. QuickTime is widely spread technology in the business sector due to its functionality. Also it is the default player in Mac
environments. Macs are getting quite popular today and this makes it even worse.

Attackers can exploit the issues I found in many different ways with various degree of success. This all depends on how skillful they are.
JavaScript and mainly browser related exploitation attacks are not as
mature as traditional buffer overflow attacks. It will take some time
for the bad guys to realise the potentials.

A skillful attacker can get complete access to the local filesystem via this vulnerability. This effects all home users. In corporate environments attackers are able to break into network devices and hijack network interfaces and all this can be done through a simple mp3, mp4, m4a, mov, avi, etc... file. You can see the potential problems. Keep in mind that WEB traffic is usually allowed by many firewall setups. This enables attackers to sneak into any network they
want totally unnoticed.

3. what triggered your interest in researching these backdoors? understand you also worked closely on the pdf backdoor issue...

Yes, I participated in David's research although "Backdooring PDF" is
his own work. I am glad this issue was well covered by the media. We were looking into backdooing PDF documents for quite a while and there
is a lot more to be said.

I have been researching client side security for quite a while. I truly believe that this will be the next generation of attacks; high-end hacking.

There are many other issue found in HTML, Flash, QuickTime files as well. I welcome you to check my website. It is really hard for me to summarize all issues in this correspondence. :)

4. is this an implementation vulnerability? Or just a feature that can be manipulated maliciously?

It is quite useful feature actually. I guess it can be quite handy when dealing with DVD content. Actually when I found this issue I realised that I can use it to organize some media files I had hanging
around my home folder. It is quite handy feature.

5. do you think we'll start seeing actual attacks using these backdoors in popular file formats? Why?

Yes. You will see more of them I guarantee. I know for sure that this
issue can be used to create worms similar to Yamaner and Samy but with
much higher degree of impact. As I said earlier Word Documents, MP3s,
AVIs, MOVs can bypass firewalls and other network based protection mechanisms. They can carry malicious payloads that upon execution will
bring attackers into your network.

6. lastly, is there a real name I can use? Can you identify yourself?
Are you affiliated with a research company or working independently?

Well... my name is Petko D. Petkov. "pdp" is my initials. My other nickname, "architect" was the result of a research I conducted years ago based around passive hacking and information gathering attacks. A
lot of people started to reffer me as information architect since I was dealing with quite a lot of information.

I am security research from UK. My research is independent while my day work is based around non-standard penetration testing for various
companies in the London area.

If you have more questions please bash me an email.

Petko

   I AM SECURITY REESEARCH! I AM SECURITY REESEARCH! I AM SECURITY REESEARCH!
   Petk0 r3pl1s t0 Ry4n N4r41n3 f0r gr347 1nt3rv13w 4nd f4m3    HIGH END HACKING HIGH END HACKING
   I AM GLAD THIS ISSUE WAS WELL COVERED BY THE MEDIA! (n0w c0v3r3d h3r3)

Received: by 10.35.48.16 with HTTP; Thu, 5 Oct 2006 00:51:16 -0700 (PDT)
Message-ID:
<6905b1570610050051y252e4415vaad6ba32114c040d@mail.gmail.com> Date: Thu, 5 Oct 2006 15:51:16 +0800
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> To: "cy lim" <cylim1@gmail.com>
Subject: Re: recommendation
In-Reply-To:
<6905b1570610040032k2c2d611y48d339d73ea38db4@mail.gmail.com> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline
References:
<6905b1570609250156w5a2fa25eude38dffc49e628d8@mail.gmail.com> <510d0e480610030423v192ca79bnf36d398c353c3fea@mail.gmail.com> <6905b1570610040032k2c2d611y48d339d73ea38db4@mail.gmail.com> Delivered-To: pdp.gnucitizen@gmail.com

ALEXANDER Ltd
ALEXANDER Study Centre
26 Targovska Street, 2900 Goce Delchev
BULGARIA
Telephone +359 +751 24043
E-mail: alschool@goce.net
http://asc.search.bg

The address is still the name but my parents changed the name. Is that
a problem?

On 10/4/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > I will send it to you tomorrow cuz I don't have it here with me. thanks > > On 10/3/06, cy lim <cylim1@gmail.com> wrote: > > can you get me the letter head with company details etc, please, it is
> > urgent as we will try to submit the application asap, pending this as > > the only outstanding item, many thanks, cy. > > > > On 25/09/06, pdp (architect) <pdp.gnucitizen@googlemail.com> wrote: > > > recommendation document > > > > > > thanks CY, > > > Petko > > > > > > -- > > > pdp (architect) > > > http://www.gnucitizen.org > > > > > > > > > > > > > > -- > pdp (architect) > http://www.gnucitizen.org >

    P4R3NTZ ADDR3SS! P4R3NTZ ADDR3SS! P4R3NTZ ADDR3SS! P4R3NTZ ADDR3SS!
    b1g b0mb l3tt3r 0n 1tz w4y!

Received: by 10.35.48.2 with HTTP; Mon, 6 Nov 2006 00:53:49 -0800 (PST)
Message-ID:
<6905b1570611060053u510ef49cs56c9bfedcce9ddf0@mail.gmail.com> Date: Mon, 6 Nov 2006 16:53:49 +0800
From: "pdp (architect)" <pdp.gnucitizen@googlemail.com> Subject: pictures from Singapore
MIME-Version: 1.0
Content-Type: multipart/mixed;

        boundary="----=_Part_55755_20420625.1162803229520" Bcc: anna@classbg.com, pagvac <unknown.pentester@gmail.com>,

        pdp.gnucitizen@gmail.com
Delivered-To: pdp.gnucitizen@gmail.com

  • ------=_Part_55755_20420625.1162803229520 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline

pictures from Singapore

  • -- pdp (architect) | petko d. petkov http://www.gnucitizen.org
  • ------=_Part_55755_20420625.1162803229520 Content-Type: image/jpeg; name=IMGP0841.JPG.JPG Content-Transfer-Encoding: base64 X-Attachment-Id: f_eu6mtej6 Content-Disposition: attachment; filename="IMGP0841.JPG.JPG"

/9j/4AAQSkZJRgABAQEASABIAAD/4YgtRXhpZgAASUkqAAgAAAALAA8BAgATAAAAkgAA ABABAgAQ
AAAApgAAABIBAwABAAAAAQAAABoBBQABAAAAtgAAABsBBQABAAAAvgAAACgBAwABAAAA AgAAADEB
AgASAAAAxgAAADIBAgAUAAAA2AAAABMCAwABAAAAAgAAAGmHBAABAAAASgIAAKXEBwBe AQAA7AAA
AGZ5AABQRU5UQVggQ29ycG9yYXRpb24AAFBFTlRBWCBPcHRpbyBTNgBIAAAAAQAAAEgA AAABAAAA
T3B0aW8gUzYgVmVyIDEuMDAAMjAwNjowOToyMyAwODowNjozNQBQcmludElNADAzMDAA ACEAAQAW
ABYAAgABAAAAAwDWAAAABwAAAAAACAAAAAAACQAAAAAACgAAAAAACwAeAQAADAAAAAAA DQAAAAAA
DgA2AQAAAAEFAAAAAQH/AAAAAgGDAAAAAwGDAAAABAGDAAAABQGDAAAABgGDAAAABwGD g4MAEAGA
AAAAAAIAAAAABwIAAAAACAIAAAAACQIAAAAACgIAAAAACwJGAQAADQIAAAAAAAMFAAAA AQP/AAAA
AgODAAAAAwODAAAABgODAAAAEAOAAAAACREAABAnAAALDwAAECcAAJcFAAAQJwAAsAgA ABAnAAAB HAAAECcAAF4CAAAQJwAAiwAAABAnAADLAwAAECcAAOUbAAAQJwAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AmoIF AAEAAAC4
AwAAnYIFAAEAAADAAwAAIogDAAEAAAACAAAAJ4gDAAEAAADIAAAAAJAHAAQAAAAwMjIw A5ACABQA
AADIAwAABJACABQAAADcAwAAAZEHAAQAAAABAgMAApEFAAEAAADwAwAABJIKAAEAAAD4 AwAABZIF
AAEAAAAABAAAB5IDAAEAAAAFAAAACZIDAAEAAAAJAAAACpIFAAEAAAAIBAAAfJIHADB1 AAAQBAAA
AKAHAAQAAAAwMTAwAaADAAEAAAABAAAAAqAEAAEAAAAACwAAA6AEAAEAAABACAAABaAE AAEAAABI
eQAAAaQDAAEAAAAAAAAAAqQDAAEAAAAAAAAAA6QDAAEAAAAAAAAABKQFAAEAAABAeQAA BaQDAAEA
AAAmAAAABqQDAAEAAAAAAAAACKQDAAEAAAAAAAAACaQDAAEAAAAAAAAACqQDAAEAAAAA AAAADKQD
AAEAAAADAAAAAAAAAAEAAAAoAAAADgEAAGQAAAAyMDA2OjA5OjIzIDA4OjA2OjM1ADIw MDY6MDk6
MjMgMDg6MDY6MzUAwKO3AADAWgAAAAAACgAAABsAAAAKAAAAPgAAAAoAAABBT0MASUk5 AAEAAwAB
AAAAAwAAAAIAAwACAAAAQAHwAAMABAABAAAAtSYAAAQABAABAAAABAcAAAUABAABAAAA OCsBAAYA
BwAEAAAAB9YJFwcABwADAAAACAYhAAgAAwABAAAAAgAAAAkAAwABAAAAGQAAAAsAAwAB AAAAAAAA
AAwAAwABAAAACAEAAA0AAwABAAAAAAAAAA4AAwABAAAA//8AAA8AAwABAAAA//8AABAA AwABAAAA
AgAAABIABAABAAAAxAkAABMAAwABAAAAGwAAABQAAwABAAAACQAAABUAAwABAAAAEAAA ABYAAwAB
AAAAMgAAABcAAwABAAAAAAAAABkAAwABAAAAAAAAABoAAwABAAAABAAAABsAAwABAAAA 4BoAABwA
AwABAAAAQCUAAB0ABAABAAAA+AIAAB4AAwABAAAAZAAAAB8AAwABAAAAAQAAACAAAwAB AAAAAQAA
ACEAAwABAAAAAQAAACIAAwABAAAAAAAAACMAAwABAAAAFAAAACQAAwABAAAADAAAACUA AwABAAAA
AAAAACYAAwABAAAAAAAAACcABwAEAAAA/v/69yoABAABAAAAAH0AACsABAABAAAAY1gA ACwABAAB
AAAA2P8AAC0ABAABAAAAABIAAC4ABAABAAAAAHgAAC8AAwABAAAAAAAAADEABAABAAAA JQAAADIA
BwAEAAAAAAAAAEEAAwABAAAAAAAAAEIACAABAAAA+A8AAEMACAABAAAA/wEAAEQACAAB AAAAAAAA
AEUABAABAAAAAAAAAEYAAwABAAAA6wAAAEcABgABAAAAGQAAAEkAAwABAAAAAAAAAEoA AwACAAAA
ACcgF0sABAABAAAAoL4BABUCBAAFAAAAyAYAABcCAwAEAAAA3AYAAP8DAwAQAAAA5AYA AAAAAAA4 KwEAAAAAAAEAAAACAAAA5ehYHk0dryMAI14PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA
AAD/2P/bAIQADAgICBAIDAoKDBIMCgwSFhAMDBAWGBQUFhQUGCAYGBgYGBggHBwcHBwc HBwcHBwc
HBwcHBwcHBwcHBwcHBwcHAEODg4aGBowICAwKBwcHCgoHBwcHCgiHBwcHBwiIhwcHBwc HCIcHBwc
HBwcHBwcHBwcHBwcHBwcHBwcHBwcHBwc/8QBogAAAQUBAQEBAQEAAAAAAAAAAAECAwQF BgcICQoL
AQADAQEBAQEBAQEBAAAAAAAAAQIDBAUGBwgJCgsQAAIBAwMCBAMFBQQEAAABfQECAwAE EQUSITFB
BhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCkqNDU2Nzg5OkNERUZH SElKU1RV
VldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1 tre4ubrC
w8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+hEAAgECBAQDBAcFBAQA AQJ3AAEC
AxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl8RcYGRomJygpKjU2 Nzg5OkNE
RUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImKkpOUlZaXmJmaoqOk paanqKmq
srO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP09fb3+Pn6/8AAEQgA 8AFAAwEh
AAIRAQMRAf/aAAwDAQACEQMRAD8A8tooKFooAUEg5BwR3qZLy5XpIfx5/nRYC1DrM6kb 0Vx37H+o
/St9QCoPrzWc1Y1g7i7KULWZaQFaAtIY4LVqBfk/GpZSQ6RP3b+4P8q5XURzGfYj9aqm TVKOKQ1s
ZBScUCCimAKjE4UFj6Dk1Ktjen7sEhz32nH50BYmTR9SbpAR9SB/MipU8P6geoRP95v8 M0XHyslT
w3dFv3kqKvquWP5ED+dSjw0M/NcEjuAmP6mlcOUkHh207ySfmv8AhT10KwHVWb6sf6Yo uFiRdJ08
dIQfqSf5mniytB0hQf8AARRcCQRqBhQAPQcUhWgQwrTWWgCNlpjLTAjZajZaAMGlqiAo oAKWgBa7
C1GYIz6qp/Ss6mxrTJdlLsrG5rYTZzRtoHYcFqzbr8h+tS3oVHcmMeQR61zN3pd/JsEc DEjOc4Xr
j+9inTdhVItkUfhrVG5ZUj9mb/4ndU6eE7gj95Oin/ZBb+e2tPaL1IVJk6eFIB/rJ2b1 2gL/ADzU
6eG9OByweT2Zv/icUvaD9miVNE0xW3LApP8AtEsPyYkVMllaKdyQRq3qFAP6CjmYcqJN o7CkK0xC
EUFaYhMU3FMkTbSEUxCYppFMQhFNIoENIphFMBrLUZFAEbLUbLQBztLVEBRQAtFAxRXZ 6eubOA+s
af8AoIrOpsa0ty35VBj4rnub2G7KTZTuFhwWrNqnyn61MnoOO5OEpdlZ3NBNlIVppiGl aaVrREMa
VppFUiGNIpCKokQikIqiRMUhFMQhFIRTENIpCKYhpFIRQIaRTCKYDSvNMK0ARstMZaAO YpaogKWg
ApRQMcBXcaZHmwtv+uSf+gisaz0NqK1NJIMjpSPBgdK4+bU67ELR0zZWiZLQBKtWicN+ FKT0CO5Z
CUbKyuaWEKU0rVIloYVphWtEQxhFNK1oiGIRTcVSJYhFIRVEMTFJimA3FIRTJEIppFMT EIppFMBC
KaRQIYRTCKAGMtRstAjlqKokKWgBRTgKQxwFd9oiZ0+2P/TNR+QxWFd6fM6KC1NyC246 UTW3fFeY
56ndy6FKSLmoDHXTFmTQmyrVmn3vwpyegJalkJRsrK5dhpSmFapMTQxlqMrWqZmxjCmE VoiGNIpp
FWiGIRSEVSJExSYpkiEU0imIQikIpiGkU0imAmKaRQIaRTSKBEbCmMKYHJUUyRaWgYop wFIaJFWv
QvDUZbSrY/7JH5MRXLiX7vzOrDrU6a1QBeRTriMFeK8aUveO4zJrc5qq8VdlORnJEeyr Nmn3/wAP
61rJ6ERWpa2UFKxuaWGlajZatMloiZajZa2izNkbCmEVojNjCKQitEQxpFIRVIljSKMU yRCKaRTE
IRSEUxDSKQimA0imkUCEIphFMBrCo2FAjj6KZItKKBjgKeBUspInjXmvTfB1uDolscf3 /wD0Y1cO
NlaHz/zOzD7/ACOrgsV2gtVuOxiIH7tTjoSATXzMpSqS5Y6eYqlVjb20L2kiEZwDtHuO RXJTw4Nd
uChKDcX3uvvcX+SLoyun5fqVWTmrNkv3/wAP616cnoaLct7aQpWNzQaUqNkq0yWiF0qJ 1reLM5ET
CoyK2RixpFNIq0QxpFNIq0SxCKTFMkQikIpiEIppFMQhFNIpgIRTSKBCEU0imIaRUbL7 UAcZS0yQ
pwoGOFSoKllxLEK9K9Y8DRA6Ha+2/wD9GNXl5i/3Z1U3ZP0OvgjB57dqtKgArnynDJx5 n11OSpIX
YvPvXGapb+XcSR4wFY4+nb9K7MVRUbNd2n/283L9Gb4SWrXlf7v+HMtxzU9iOX/Csnsd a3LeKXFY
mgm2mslNMCCRKrOK3gZSIWFRkV0IxYwimkVojNjSKQ1aIYhFJimJiYpMUxDSKQimIQim 4piEIppF
ACEU3FMQjCo2FAjiaWmIUUooGPFSJUMuJahPNeq+Aph/Y8a/3Xcfrn+tebmEb02dUNn6 HZW7jpVk
OKyyuulTSfTT7mcc1qBdc4zXM+JUAuRIOjryfccfyxXViqsZK3VS/wDbb/kzTDaT9U/6 /A59+tT2
R+ZvoKwex3rct5ozWVjQM0jEUJAQSEVWkreCMpMgaozXTEwY000irRDGkUhFWiGNIoxT EJikIpkj
SKQimAhFNIpiEIppFACEUmKYhpFNK0AcNRTJFpRQNDhUiVLLiWI2r0PwLdY0twTjEzY/ 75WuLFRv
B/11Oui9TtLa/jwAzYPY1bNwFQOzEKehr5qcJwl7t0n27k1KWvrsVP7dsGkwk4bYcScN x19vUVm6
1f20qoIm3MpPOCBg9euPauilSquak72vd3t2t67DhScXfYxGaprNv3h+lexbQ2vqXN1G 6sbGlxC1
MZ6pITZC7VC5raKMpETUw1sjJjSKaa0RDGkUlUiGJikxVEsMUhFMQ0ikIoATFIRTENIp pFACEUmK
YhpFIRQI4OlpiClFAxwp60mUiVDXa+DHP2CQD/nsf/QVrnrL3WdFJ6ne6VHGMO/J7ZrT eaMqQeQe
1fO4hNy8jSsm36HHxtIbm/DdEnOzgD5eg6fTHPpUUjV6dNaL0j/6SmaJ6ff+ZCWqa0b9 4fpW7Wgk
y2Gpd1ZWNLjS1MZqaRLZXuLiKOJpZWCxoMsx7Vyt74zO8raxfID99zyfw7fnW8I3Mpys W9L8T29x
KIZU8mVuE5yrH0zxgnsP1zWwa05bGfNcaaQ1SJYhFJVksSkpkiYpMUxCGkIoAaRSEUxC GmkUAIRT
cUxCEU3HNAHBUUyRaUUDHCnA0mND1Ndp4GYG3mX0kB/Mf/WrCt8LN6XxHdRTAKAD0qQz 8da8SUdT
ucbnP2MudQ1VSeBKuPxXP9abMeTXbBfkv/SUQ9vm/wA2Q7qltW/eH6VvbQzLe6jdWVjS 4hamFqpI
lnLeLb/lbQHCgb5Pc9h/n2rnrTTjLuJbaoP41009EY1NRbq0ERDxkgrjPP612WlXhnsI Zj98jD/7
y8H8zzVPVEbMtUUIGNpDVIhhikpiCkxTENNIRQISmmmAhppFMBDTaBCGm0wOBooJFpRQ MUU4Uhjg
a67wNJxdj0MZH47v8KyrL3WbUn7yOg1fXTZ2qzCPzSzBNu7b1BOc4PpWDL4+1E/6qCJR /tbmP6EV
xQw/NrsdUqttDOfxDqQlluIpBE9ywMu1VIJVQBjcGx3qtLrOpu2WuZM/7J2j8lwK6o0o r5afcYOo
yfRLmZtVi3uzZ3Z3En+E+tdjbN8/4UqisODLJak3Vz2NrgWppaqSEzgPEkrHVZxnoQB+ AFLYJOkC
SdFJ5HqD0/z9K6Y/CYPWQ94SyM7HIIOe5z9fQVpeEJW8m5gPIjcMD/vDH/so/OjoJ7nQ UUITEpDV
IkKSmISkNMQhFIaYhppDQAhFNNMBppM0CGmmEUCOCpaYgFKKBi0ooGOFdP4LfDXY9RGf y3VnUWjN
Kb1L3iwk6eP9lwf5iuQDVnSWhdR6krH9yh/z1P8AhUYNaITNDRCRqkHH97/0E12Vu/zi s6hcC1uo
3Vz2NhomjLlAwLjkrnn8qC1UhM891pw2pTuvI3nk+3FXbe432yiPBPGQe2K3+yjFP3mL JK6wsHxk
ZOBVfw9qq207h0LpKMELjORyDz+NNLRim9TrLfU7aQAjKk9AwP8A+qreRihCYlJVEsKS mSFIaBDT
SGmAlIaAG000xDTTaAGmmmgRwdFMQtAoGSRxSOcRoXPoozWpZaBM5Vrg+Wh6qOW/wH6/ SonNIuEL
k+qaFBFama3MjOpG5TgjB7jAB496k8JSYup19UB/I/8A16iMrxZo42kjT8SHOmSexX/0 IVx5NFPY
VTcstj7FG3fcR/M1teFWHlXgPONmPxDUpLRlRdmvQWQk69bEnojZP0D1sLPIHyi7se/r UvYbdtdy
aC8kaUI6bdwJHrxj0zVvdxg1k1bfcuErowAZBfyXEcn76QypyBj5VbaOnYov5c1sWjym 1jMxDS7c
SEdCw4OOnertoVOV36afdY4XWRjUZwO7k/nzUVjku2DhlUkY747VtH4Tnl8RdupM2zYX BYDOao6e
im+jV/ugkn6AZ/pREJm0AX3Oev8AnitnSbxnQxOcsnQ+o9z/AJz+dQtynsaFFaEMSkpk iUlAhDSU
wENNNACGmmmIaaaaAGmmGgDi0sLojITA9yAfyPP6VYj0ic8sygfif8KTkgUWWY9DXPzy E/QY/wAa
uw6TZrg+WGP+1k/oeP0qHNmigi9FGoGFUAegqwtZtGiZKpPHOMVh6M7f29eFuGPmbh7+ YM0Q6+jC
b29TR1/nTZfwP5MK5eC0MibhKg4JKk4IA/znjNaQdkRJXZYmjthp8SCQm5Ej71HK7MLt ORx13Z5J
4HA6m3oF1HE00bsAJgvztwBtz6ZJ69AM8Um9CktTSkiiWUXDXtsTnasfzK7Bj/CWRcYz znHT3rUs
YykAV50dhnLgrzkmstdLpr8fyukXddHt8vzK13cqJhI06hlBVUzye56fl/kVn/2yMyF5 ypYAM4ID
Af7Ab/63rQ4K9+woydvzKB1iKObMTPNH8zEyABsspBxj1zk+/T32NF1h7gTIIggjGU5z ncT1rSUf
kKMv+Cc1fpKZ5JJQQ5bvSabDI02UGSozgdTz0HvjPFOL0JktS7dgGBwpB29+2AabpdqD K8xBJcOI
gOcHaSd3ocA4HU9enNERSL0DDaQOlW9GJF447FD/ADFSinsbdLWhmIabTEGaQ0CG5pDT AQmmmgBC
aaTTENNNJoAaaYxoArDTzt3A5FPjtI+7c9xU8pXMWFtYR15oe2XnYDxQ4oSkRhSPanis 2jVMeKoR
2Xlav9pjH7udWD85w5O4/gcZ+ufYVK0f4FPVempNqpLWU4/2Cfy5rloGxDJ/tDb/AOPA /wBK0WxD
3I6eCexx60MpDvMlxjecHtmlWWVRhXKjrgGi4NEMksjPuZizHqSaj3GqM2wFdB4SP76c f7I/nSls
OO5o65pYmgLwr+/U5+vFZGmwoGkWQESKcr7FDn/H/A9s4s0krmlP5JgeRQrou0BiN3BO GJC43e3b
pVjzbeNMqxDYDbRzz7n8OmentWiMWUm2faJNgwpwQBwOQDU+kn/Tv+Amo6mnQ3M0ZqyA zTSaYhCa
QmmIQmkJoAaTSE0ANJppNMQ0mmk0AMJpjGmIsAIhz39BUvlQMN3/AOugRHtXPyZwPxpy NIGzkY6E
VLKQyXluRyBimqpzgcn0qGaIle2lCgkdeMCkMTqMlSB64qJRLjJFe6t5JIZI4xkyKyjP QEjHNc/c
aLeQxyEgOqgszrnaAGA6kDnrwMkAZ6c0KaWjBwe66GdThVsSFzSZoG2RN1pKpGTCtzwu +LmX3T+o
oY0dGLmLdt3jcegzzWLfZi1B2UfLKN2P97hh+eT+IrOxpcaZ1aP93GSF270OMEknPHTp ipZJScAQ
kOD948jB5ByCfpnr+FWjNkKZ8x8nnjP5CrWkk/b/AG2mo6l9DczRmrIYZpM0xCZpCaYh CabmgBKa
TTAQmmE0CGk00mgBhNNJpiLbQDG5AB6+h/CmBSDzx6//AK6BXJ1AI4XHv2p8UeWwaQ0x 5jXaOMEc
ZoVAoPyj3Pek0NMcZlIGMk/1ptysrbUHC9WPTgdcUmUtyLyQMhSRjpnvTVRcEPhuvykc cjH8uKwn
D8TohK5BNZ2Mq/vLdDxgYAU/mMEfn61Ul0HTCBtDx467G6/99bqlXX/BG2n/AMAqnwyh BKzkZPy5
UHj8x/T6VRudEuUcqHWTuAobdj1IAOPzrRT1JcepWbSrw4KKHznAUjPy9cA4Jx7ZqL7B e97eX/vh
v8K0UkZOLI2hlVQzIyq33SQQD9K2PDli8sx++qHhnCkjA5xnpk+9D2CO51R8N2TKNzSg Dvhefz6V
j6voyW8ocuTDJwhbkgjqD/j/AJK5Rqd2U4lRCTGy84yCMj9anE87MFVIyT0AXJyfxqU2 U0mbFh4Y
d3aa7lyAo/dpgcjsTjt0459xjnYh0vTY48xQKsnTcck4+p/xrRR7mUpdCpdWxQB1+4f0 qvmiwXEz
SZoATNITTEITSE0AJmmk0xCE00mgBpNNJoAYTTCaYi+Cep5+tToBzjv1B70yQK8fKNp7 +lPQYwQQ
fXFIY9cHryKGBHJ7dfpSARIQSGPBPQnr+VPcYUK2MDoc/wD6qGUiJkOeOuMcjFZ1zqmm o5jecLIO
owSB7ZAIqGiuaw9XVlVxyrAFcehpskkgYBYWkY/dAwB+JPSs2bR1+fUX/SW++REPQfM3 5ngfkfrV
C70x2uBcwnEgGMsT29+SPwqYoqb00Gv9vdfJkgXzOgn3H14ONvOB0yQe4IJrUtoZiiqc uygAsB1P
rV8qI5vka9vYW4UecvznrnpmrsdvEvKgD8a0jGxlKTY59uNudxbjAqne2EDqFnG9ANwH Ug/XjH51
TJuY02i2rAMF5JwI1GD9SRyf8/hd0vw+kDvMwJc8LuPQe319+w7ZIqEi3I243QREDlm4 A9vf0pjl
dgVjnPRR/P6fWtDMikdDHs/M9qzDblm+UgfXgUmNCvYXIGdu4e1VmyCQRgjqDSsO4xmA BJOAOpqJ
rqEKWLfKOpwSKEAwX1oRkSrj64p32mHGQ4PvnimNxa3HBgRkHIPekJoJG5ppNADSaaTQ IYTTCaYG
mQ+08cU1JGJO0hQOrGmSO83n7zN744pfO9Ac984qblWJVuU28Kdw9OlWY41YhmOWPRf8 KEFrFr5F
+vemzovlAZyabEQKpJ29e6tWTP4Ws5JWkMrrvJZkBXqTnjjgfnUtDkrllLcRRRwsfljU Kp+gxnHv
14qxGYFI+YZ9SM/qOKVio3sWDbwucFVyed3I/Uf403+yUJ/1gUemQf60OI1IBpsKyAls kfwtyPxx
VqNGP3CCvqBxRGNglK5KfM//AFDmhYnPGWz9AKokeYCAfmIY98ZP5io2V9hHG7++2R+H +TQIS1dV
+ST5iMkkDJGee3UVYaRSCMEDuTQBD9ohy0UZUsvBUHp35qC5lUKfmHmHkgfy/AUAiKIy kZBJP1/p
U5iLY3HDY4IAFJFMIlnH7tCBjht3r7fhVTUbGQ/OzDd+hptCTMWW3Ybg2XPdTwMf57kZ qEQuigRj
aMYKk7uPx5/H8OwoQ2zOns8S7lQEZyy9vw/z0q9btGxELIAAMqvrjrke3p0ppWuXKbkk u2/6Mmll
2LuUEAcZ60gu4SPvfoam5FhRcQkcOPx4/nR5iHowP0NO4gJppNMQwmmk0AXUnfsMfjxU qQTbd7Lt
UnjPBP4df0piFWCYA4QnPTFKY5QRuUp6Ag1LGh3ljy9v6irlqV2YcjK8ZoiOQ8yQ7sBw 2e1RX+q2
NtFm5kCuR8sY5b8AP5nj3qiTLh1q0mkKrKULYCKQRnHbkdauRq5cCMsSfXHH+feoZaRb WCDPzKc9
yeamRLYcYHPbFFhXK5QCTNvIKsQ+aw/eSMe3YfpQl9xTat5loW6Km4nOeAD61LFgKB0p pENkhaAA
BmGfbmjIVg3LKaYh0k0ZUkEnH4VTeV2OM8emf8/560MaIoNU08XDWokQTrjdHkZ5GeB3 49KtG7sQ
6LJMkbyHEauwBYjsAev4UIGNuYYQvmuyhE5LlsAe+en51hw6tp76hJZxSCSVRuUjBVj1 KqwPJA6/
j1wcDQJm7bQRFVyWBYZUjgU9otsipncCeKEDYSgh3GM4UEiqTiR25VlQdBj+X+RTEQTW yseLdie7
cc/nmoH098f6pUHqzD/61S0UmV5dNODlRz6Hj+tVxZsjZEeWznOc/lQMCTnGMZ6g9DWb PEQ5x0NS
xkJB79R+f/16THp/iP8AP61IxCzfwMQfb/P5VPbTllIb7y4z+NUmJrQlJphNWQdFawWq DKnzJB/F
159vT8Ksx24J8yX73bPb6Z6f5zTJLUO3ngAjqe1SMEf5SuV96BFWWyAPCbgemKgezcji Mj3pWKTB
doXZKnHQMP8APFUptPsHkaR4oWc8lnUFj7n1pDIhpVisgdbdVcdGUAY9x0FXTBtUFhkH 16/pmgYL
CN2UQ/lTBO+WVgeuBjr+vNIe5LBblgHEWE9SeT/SrSIw4BwRyKYEzO3G4cD055pS2Vwn JPU5ximS
NVe2Nx7/AOc/0p6lx0PHcEYpDEMyF9jbQ5HC55xTJWtkQvMQidNzHAz6f/W70xHGazoT zyy3mnwS
iLLPNLcMsaepKq+1wPc4HpwK5pnkKqrMWCjCgnoCc4HpySfqc0CLZ1bUzY/YGnY2nH7o 4PCnIGcZ
wD0GcfkKrJkEMp2uDkMOOaYzpNH8bX8GyG/BurdcAOMCRQPQ9G/4FyT/ABV2WnanZXXl y2kokTd8
w6MuM8EHkfj17ZFAizdOgncHPzKOn5VTMkg4TJ/3j/hj+dAICk7AHa/uUY/yPH6037OA c8hz3kGf
1BNIY3fOvBYEepwy/n/jikLuchkQke1AEMsQYfcXPpjBrPubCMjoRj86TQ0yhLYd8/Ke /wDnpUBs
5sbhhvp3/wDr1PKVcqucZJ6j+tR2kmLoKf4gQf50IOhoE0wmrIOrUEKBGAOwqzEjBcE/ N/e96ZA2
WfYjGRcAfxD1/n+VSW85blc468jH86ALaMOn5in+WpoGNe2iPLAVWm0+LG5MZByAPX+t KwJkH2Nt
27I7khufbP8AgKhninCKCuSP5HpSKK8kzkKCCCvRu4/GrcCOQDICSPu8fMfx4/XmgZKP NXIAwvp/
+rpTxgAHHytyO4/+tTEP3L6YHbuDR+6J5BB68jj8+lAC+UpGd6kHv0pDbSj5lO5frmlY dzC13w+8
9xHfxhmkg2hoASA6K24qDwVY5POcfTrUCWepyz+YpmtMN+73zGUqgxxsYtuZjydzYUcb SRktMTIt
V0DV54znUDMwHMLr5anHThMgn6r+Nc1PoerRnD2shPbYN4/8dzRcRUkt7iMjz4mjLcqH BUnHHQ1G
X7UwEJY8DkVs+Fb63t9SMlxK8UZRhuUgDIGcNwTjjjHO7HqaQHeJcwyAOWLL/CUA2kHk YYnnjv36
gCpRcQgfJER/tNj/ABoAja4Zj+6xu77Tj8zx+n50x0lAzIJcd8MCKBjV3EZQlx0II+Yf hzke9MZp
EP3ckdMcH8uh/SgAF/bk4kUqR6in+ZbMMK4PtTFYq3Fn1aPv1Xsf/r1QwoJGMf3l7/h/ hSGZeqxY
Am4YE8n1+v8An+VZVsT9rj+v6YqWilsapNMY1RJ1f2yLOAAPduKDdR5GJFz/AHgf0I5z TJGowMxd
5Qy9gegP04q9FLGOrD8Dn/P5/nQIka4iPGT7MAaYLtlbAJYf57UDJBeMesZI96sRyoRk gKfx/wAB
QAuFMg3HgjgfQ1HdDEobswx+IoAia1h4bb8x7+5oMbA/Ic49f/rUh3G+aQzbz5ee59B6 E8VGl6oJ
VAWQfdJ7nufof89eC47A9wzEM+1PYYyfzH8qjM0hztOU9+M0gsSJIWGCSOPU02S2x82c Z5BFA9h0
MMhIKyN+DGrSxkjaxKuPU5z+eaEDYCPB+ZVbHXIwfzH+FO8u1I+eNlP+ycj/AB/SmSVN Q0HSbuEQ
zHOOUPR1PqO/1zwe44rkPDvhSxvJrmczE2UEpjhXo7qOQW4+UFcdsnn7uOSwHYWmlaVb x7LS1RX6
bx8zf99Hn9a53xR4ZaUtc2seLocyRqMBx65/vfz+tOwjlLfVdSt8xxSsiqcGNuQCOvB6 e/Sr9n4o
1RZVeVFuIidpUrjJPZWUdfTr9DQM7CzuTc2yz28Z8t8/eHII4IOe4PB6+1P8q8ByqY9u 36UhjZDc
Zzs247g/ypy3s4G2WPzF98UXAY7afIcOGjb8/wDP5VG2nqeYZVceh4P59f0osF7ETC8i 6ggdweR+
dRTkSLuC4ceh6n09j6flQBlXnzWkg7kkf8CUbh+eSKwoJokuFeQ4UZ5684xSY0aC3tqf uyr+dO8x
SMggj2oA6iOxsx998n06D9KsJDZgcYqrEXHebbDgDJ9hT1aVv9XHgercUASC2fG6Rz9B xUyxRqM7
ce+M0BccJY/f8qcZ0x3FAArEncwx6fSllJZQPTpQAwMeM9ulPCEj5XwDQMgntjtOPm9Q TVGNCHHY
cg1LRSY4pluOTUqu4GGUA9qQ2CS4YAcsegHrWhHprOA0rDb1EYPy5piZcgtLRvkaJUkX 0GM+4xSy
aeuMKzfz/U807E3IlgLMUY4cd/WkNpKOMfjQA02bnrwKri1sInZkQq7HLMi4yfU4HP40 ARyxyN/q
5Jee2z+uKq3Wmaq8DrbzNHLj92z4ZM+4Ofp0OOuD0p3CxzN14L16Wdprpo2dhy6Y7DA4 AUVDD4Y8
QGaJJ2kjgtTut3ypIOQflAY7emfbA4pXA3rO0nhiEW+TGSWZ3Ykljkk47k8mrHlkHO5H PcZ/x5oG
KGg6PHtPqKDFbnooP0oAje1jI+X5fpUJLL8sy7k7OOooAY6SqPMt5SydxnP6e1VZZWzg j5iOCOM/
lwfw980AU53zEXP8bgn6kYP61zF0gErRn+En+eKGNFcx+9JtYdDSA9IQEnCjJqzHZnrI 2B6CqsQW
Y0t06AZp/wBoQdKYg+0SHhRSgyfxH8OppDAv6cD9agd33AAY9f8AJoAnWRto4OfYf5FO 89geVO31
IoGSiaI8ZGacE7oaAHAt3FV5rQNlo/v9dvr/AJ7UgRSeTadpUq47UGbIwAS36VJY+3Qh t5+961bh
aTfw2z3B/wABTQmWzNMAN7B8dG6EfiP8Ks2mohm8uQYPZuxqiSe7hGwOhw45BqGG8Xbi bhh37GgQ
83MJ+Xdx7cUoeHooFABvXsKQnPQUAN2GmmJT1oAY1tEeoqvLp9s3UUWC5XfSl/gdl/X+ dQSaZOOR
tf6jB/OgdyAwzpnfCxHqhzSLLC2QH2sOoccD6+n4mgCKaIR7nCYXvtOR+XGKy75lUoy/ KVYZHpzg
/wCe4xQBm3TbUMQP3ZCB+Bz/AFrAvz/p8vvg/oKTGQUhNIZ6ehAGFGKcA5qyCRYalECg ZNAXHqD2
GBTiB9fYdKQEMiykHAwOwA60xbe4+/nB/wB0/wAv/rUDJo5LodQH/wCAkfyqVZ5e8Le/ FFwHF4zx
JE312mjbbA/K5j/MfzoAkRj2dZB9RmnFo+c8EdRQAx4rdwBIQV7MTgj8aiXSIM8Trt9O Cfzz/Sk1
caY/+zLcdJAfbIprlkGDH8vZlxj9KLWC4BtwypyPam/OG+XGPU0ATJqUyjY+JFPVf/ri nfbbM9bU
k98kH+YpisPF3Yf8+7A/7qmpFuNOP8O36of6UABn04EDPP8Aut/hTJLqzH8Bcevb9aAK kt5D/BAm
ffB/Pgfzpq6jECA8EY/3QB+vNFx2LC3tk33t0Z9ecfmpH8qd5lt0SfH1Yj/0KgkQpIRl JmI7EYYf
yqFkvf4ZyfZk/wABQBE8upr1RJB7ZU/rVaW6iLgXUBibtIOo/Tp+dAxknyjBYNE/SQfd OezD+o/H
FYer8Im0n5TtP4dP0I5pgjNv2BvHA6A5/QVgXkga8Zh7D9KljIzSZpDPVFxUqFc4UFj6 CrMyYIQP
mIX26mmtcwDo+7/PtQA37QGGR07Zpq3RBOGH0I//AFfpQBYS9ixzjd3IFK95Gfu5B7jj +tIZItxH
tzvwfdeP0qWO4U9JEP1yKALCiQ9Ch+hp3kS/3FP40AOEL94gfpil8jjmEge2KAHbYx1j I/ClCwf3
P0oAc0EAwdoGacYVK7SBjtRYClJpsO4tHmN/b/Cq02nT9VIPsRSHcqPaOv31IPqOn6Ux YkP3XIb6
n+tAxpjnBwXPsaQCY8CQg+hNGoxP9JXhQD685prGU/f/ACP+QKQDxG3R3EYP+zn9RTxb 2BHzXDEn
uFJH8jTsK402S/8ALK6jYHsx2/pThp13jqh9wT/hRYLjWsbvsq/n/wDWqvJY3w52j/gJ /pT1C5Vl
Fwn39w/OlW/n24Lb17q3P86VwK8l2o3eV8qkfvYuq4P8Q/zx+NUL5s2sZJyc4/z+BH5V QjG1Cfb5
kmew2/Ujj/GsRcls9+9SxklJSGenIw6k7vwqX7XgbVBz6AYqzMZJK5GCcA9QKh2d1P4U gLMRUj5f
xJ61IUQ9QKBgII+3H0pwjA/iNADXiJGS/HYGo0ERbacqf72eKBlpbW4xmOXPpUijUF/j B/OjUNBW
udSHOePY06LVrxcBlJ/Wi4WJTr0448vJ96swarvH7yIj1ODj86LoLFsTwuBg49Knj5OP yNAiKUfO
cU+NQRzQANEh4IqvLp1u3JUZ9aAK0mkgZ2H8Dz/9f9aZ9iUf6yHcPVTn+eP60WHcaXsV O3y2B+mK
XdakcQsR9KLIBB9kHSEjPorf4VHI9gDloyMdyCP50aARNc6Z08rd+R/rTBLpX/PHH1FF kA7OmHAw
vPuv+NONlbMMomQO64P8qdhEbQygYGJF7o/X8D/jn8KzbqzgYny8xy94zwfw9fwPPTIp AmYqsV1B
o36MNrfjVa+kKwiLuj4P4/8A1gKYzmtQnLSbAchTk/X/AOtUCDjPc1LGO/lTTSGf/9kA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAA
-----BEGIN PGP SIGNATURE-----

Charset: UTF8
Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 3.0

wpwEAQMCAAYFAkicW4MACgkQ5g5u/REitpbfYwP9HzyGCrUt+sLkLv/f8RI0cUqlwMiR 5Rw4AwZo6ZnZdKN8cdCaJg3JALW6M64WPHNi9c61JvYAdl464TC1Z5hl0l++GVU4/Mzo UyKNqJKiCGoOoPsHSc7e7ocNEZJWib66zog7FWN7u3dWoanHTZ6Ckf6n0IOecdK/Rm5y dP212e4=
=froV
-----END PGP SIGNATURE-----
-- Explore all of Europe's beauty! Click now for great vacation packages! http://tagline.hushmail.com/fc/Ioyw6h4ePhlzKqardkUZYpL5APyNlhD9bWl9yateV3jeBxOTbtOJD6/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/