Daily Blog #20: 7/13/13 Saturday Reading List

Hello Reader,
       It's saturday! The week is over and hopefully you are either at the office and making overtime looking for something to read while a process runs or at home ready to relax with some good forensic reading. It's been a light reading week for me as I was at the DFIR Summit Mon-Wed and then onsite working. Here is what I'm looking into this week, let's learn together.

1. TSK has a api now that allows any developer to access forensic images through it! You can find the documentaiton here, http://www.sleuthkit.org/sleuthkit/docs/api-docs/, and there are implementaitons in C, C++ and Python so far. Matthew and I are looking into this to see how we can implement the api into our triforce app so we can get access to the artifacts directly from the image. If you are working on a tool and want easier access to the evidence this creative commons based license is amazing.

2. The FOX toolkit is something I just learned existed from reading the gena documentation that came from TZWorks, you can read more about it here http://fox-toolkit.org/. If you are developing gui apps and are looking for a good light weight cross platform GUI solution this seems to be a winner. For an example of it in action check out 'gena' from tzworks. You can get it here, https://www.tzworks.net/prototype_page.php?proto_id=28.

3. One of the great things about being both a development shop and a forensic lab is that we get lots and lots of evidence to test our tools against and validate our findings as we push whats possible. This week we were validating some USN data and running some re-creation tests, the results of which we will publish once they are done, by comparing our triforce output to TZWorks USN parser. The first time we did this the TZWorks parser actually returned more records than our parser which was surprising to us since the USN is supposed to be a well documented and understood standard. As Matthew went back to validate the records and find the exceptions we found some very unusual behavior which has been documented here. When we send out the August beta this updated parser will be included and we can now recover these entries and handle more exceptions/produce more records than other parsers in our tests now.

4. This isn't necessarily a read but Hal Pomeranz did a great presentation at the DFIR Summit titled 'Facing your Dragons ' you can watch it here, https://t.co/JG7V1B3Xfl. Many times when asked for advice by those looking to get started and move forward in their careers I've explained that most of major achievements of my life were done by saying 'Yes'. I think a lot of people might have misunderstood my advice as a bad version of Jim Carrey's movie 'Yes man'. Hal really explains what I mean in better terms with good stories to back it up. If you are looking to succeed in your career and move forward than watch Hal's presentation and when the time comes to face your fears say Yes!'.

5. For those who've missed Matthew and I (and our beards) talk about the TriForce so far we will be doing a webcast with SANS on monday 7/15/13. You can watch us here https://www.sans.org/webcasts/force-ntfs-tri-force-you-always-96857 and ask questions!

6. Harlan Carvey posted some more How to's since last saturday, this one was the most interesting to me http://windowsir.blogspot.com/2013/07/howto-track-lateral-movement.html. If you are doing IR tracking lateral movement can be as important as discovering how the intruder got access in the first place.

7. Corey Harrell has posted his keynote presentation from the SANS DFIR Summit titled, Finding Malware Like Ironman. http://journeyintoir.blogspot.com/2013/07/finding-malware-like-iron-man-slide.html I found that it was both entertaining and informative and I hope you give it a read. I've mentioned before that I am more DF than IR so getting to understand the other side of the acronym is always interesting to me.

Get ready for tomorrow's Sunday Funday going to make it a bit more approachable than last weeks. 

Klasemen Liga Italia 2013-2014 [UPDATE]

Klasemen Liga Italia 2013-2014 [Update] Persaingan di daftar klasemen sementara Liga Italia memang selalu sengit dari tahun ke tahun, dan cukup menengangkan bagi para fans klub Serie A Italia, seperti Inter Milan, Juventus, dan AC Milan.

Total ada 20 klub yang berpartisipasi di Liga Italia 2013-2014 ini, dan menjalani partai kandang-tandang, masing-masing klub memainkan 38 pertandingan semusim, berjibaku untuk menjadi sang juara.

Palermo, Siena, dan Pascara adalah tim yang promosi ke Liga Italia musim ini. Kompetisi  Serie A yang ke 82 ini diagendakan berlangsung pada tanggal 24 Agustus 2013 sampai dengan 18 Mei 2014. Klasemen ini akan terus update setiap pekannya, jadi jangan lupa untuk menyimpan halaman ini dengan menekan CTRL+D.

Klasemen liga Italia

 

Demikian artikel sepakbola tentang Klasemen Liga Italia 2013-2014 [UPDATE]. Mohon maaf atas segala kekurangannya. Semoga bermanfaat.

Foto-foto Bayi

Foto-foto Bayi memang bagus-bagus, lucu-lucu dan imut-imut, tampa bergaya yang lebay, foto mereka sudah terlihat begitu menggemaskan. Begitulah foto bayi, foto-foto jepretan alami begitu lucu dan menggemaskan, mungkin karea mereka masih polos, jadi aura kelucuannya masih bersinar hehe, Berikut adalah foto-foto bayi yang laucu dan imut-imut.



foto bayi imut dibalik selimut



bayi lucu malu-malu

Gluttony and Sloth ...

... ain't got nothing on Addict and Uncaring.

I think this is what has really poisoned the discourse when it comes to carbs and food quality vs. calories.  The "alternate hypothesis" camp banks heavily on the visceral response and religious/judgmental tone of the terms gluttony and sloth to anger their base.  

Read more »

Proses Kelahiran Bayi

Proses Kelahiran Bayi - Saat kelahiran anak adalah saat yang paling dinanti oleh setiap Ibu hamil. Setelah menunggu hingga 9 bulan, akhirnya saatnya datangnya Bayi yang ditunggu tiba juga. Namun begitu, saat proses kelahiran bayi ini, juga menjadi hal yang mendebarkan bagi seorang Ibu, terutama bagi Ibu yang baru hamil pertama kali.  Oleh katena itu, baiknya Ibu mengetahui proses dari kelahiran

Ucapan Kelahiran Bayi

Ucapan Kelahiran Bayi biasanya digunakan sebagai tanda syukur atas kelahiran dari si buah hati. Ucapan kelahiran bayi ini biasanya juga diwujudkan dalam kartu ucapan yang didesain rupa agar tampak menarik. Berikut adalah beberapa contoh ucapan kelahiran bayi.





Semoga Allah memberikan berkah dengan anak yang dianugerahi atas-MU, dan engkau kepada Dzat yang Maha Memberi. Semoga engkau diberikan

Beragam Penyakit pada Sistem Ekskresi Manusia

Sistem Ekskresi Manusia adalah pengeluaran
zat buangan atau zat sisa hasil metabolisme di dalam tubuh. Sedangkan
pengeluaran zat yang masih berguna bagi tubuh disebut sekresi. Adapun yang
termasuk dalam system Ekskresi Manusia adalah Ginjal, Kulit, Paru-paru dan
Hati.

A.   Ginjal

Ginjal Merupakan alat
pengeluaran yang utama yang berfungsi :

RNs Say Sutter’s New Electronic System Causing Serious Disruptions to Safe Patient Care at East Bay Hospitals

Add the following from Sutter East Bay Hospitals to nurses' and physicians' complaints at Marin General Hospital (http://hcrenewal.blogspot.com/2013/05/marin-general-hospitals-nurses-are.html), Affinity Medical Center (http://hcrenewal.blogspot.com/2013/06/affinity-rns-call-for-halt-to-flawed.html), Contra Costa County (http://hcrenewal.blogspot.com/2012/08/contra-costas-45-million-computer.html), San Francisco Department of Public Health (http://hcrenewal.blogspot.com/2010/11/avatar-fails-no-not-cameron-movie-but.html), and others:

For Immediate Release 
July 11, 2013
Contact-  Charles Idelson, 510-273-2246

RNs Say Sutter’s New Electronic System Causing Serious Disruptions to Safe Patient Care at East Bay Hospitals

Introduction of a new electronic medical records system at Sutter corporation East Bay hospitals has produced multiple problems with safe care delivery that has put patients at risk, charged the California Nurses Association today.

Problems with technology are not unique to health care – pilots of the ill fated Asiana airline that tragically crashed at San Francisco International Airport July 6 told federal investigators that an automatic throttle failed to keep the jetliner at the proper speed for landing, the Los Angeles Times reported July 9.  [What is unique to healthcare IT is the complete lack of regulation - ed.]

In over 100 reports submitted by RNs at Alta Bates Summit Medical Center facilities in Berkeley and Oakland, nurses cited a variety of serious problems with the new system, known as Epic. The reports are in union forms RNs submit to management documenting assignments they believe to be unsafe.

Patient care concerns included computerized delays in timely administration of medications and contact with physicians, ability to properly monitor patients, and other delays in treatment.  Many noted that the excessive amount of time required to interact with the computer system, inputting and accessing data, sharply cuts down on time they can spend with patients with frequent complaints from patients about not seeing their RN.  [Note: patients are not given the opportunity for informed consent about the risks, nor opt-out of EHR use in their care - ed.]

"EPIC is a system that is so cumbersome to use for nurses and physicians, that we often feel as though we are caring for a computer, not a patient,” said Thorild Urdal, an RN at Alta Bates Summit’s hospital in Berkeley. “It delays care and treatment, the program is naturally counter-intuitive and it was clearly not designed in concert with nurses and physicians." [Clinicians end up caring for an "iPatient", as others have noted - ed.]

"The Epic program developed and implemented by Sutter is neither nurse or patient friendly,” said Alta Bates Summit Oakland RN Mike Hill. “Epic does not enhance my ability to chart instead it takes time away from the bedside and my patients and preventing me from providing the absolute best care that they and I expect from me as a nurse."

Sutter CEO Pat Fry last year told the San Francisco Business Times that Sutter will spend $1 billion on Epic, a system that has sparked controversy at several other hospitals, including a Contra Costa facility where several RNs cited serious medical errors in testimony to county supervisors last August.

At Alta Bates Summit specific incidents directly related to Epic problems included:

• A patient who had to be transferred to the intensive care unit due to delays in care caused by the computer.  [It's happenstance they did not have to be transferred to the morgue - ed.]
• A nurse who was not able to obtain needed blood for an emergent medical emergency.
• Insulin orders set erroneously by the software.
• Missed orders for lab tests for newborn babies and an inability for RNs to spend time teaching new mothers how to properly breast feed babies before patient discharge.
• Lab tests not done in a timely manner.
• Frequent short staffing caused by time RNs have to spend with the computers.
• Orders incorrectly entered by physicians requiring the RNs to track down the physician before tests can be done or medication ordered.
• Discrepancies between the Epic computers and the computers that dispense medications causing errors with medication labels and delays in administering medications.
• Patient information, including vital signs, missing in the computer software.
• An inability to accurately chart specific patient needs or conditions because of pre-determined responses by the computer software.
• Multiple problems with RN fatigue because of time required by the computers and an inability to take rest breaks as a result.
• Inadequate RN training and orientation.

These "incidents" are certainly capable of causing harms or fatalities.  One wonders if hospital executives are providing the usual refrain that these are just "glitches" (http://hcrenewal.blogspot.com/search/label/glitch) and that patient care has not been compromised (http://hcrenewal.blogspot.com/search/label/Patient%20care%20has%20not%20been%20compromised).

A bit more background follows:

... Hospitals nationally are spending tens of billions of dollars on technology systems, especially on electronic health records (EHR) programs for which they also receive federal financial incentives.

EHR programs are paraded as a panacea for reducing medical errors and cutting costs, but in life the promise is falling short in both areas.

A RAND corporation analysis earlier this year said visions of savings and improved efficiency in patient care have had what the New York Times called “mixed results, at best.”

The U.S. Food and Drug Administration has acknowledged getting hundreds of reports of problems involving health information technology including numerous patient injuries and deaths.

Some examples seen at hospitals across the country:

• At Marin General Hospital in Northern California, RNs called on the Marin Healthcare District board to delay implementation of their EHR system. "Orders are being inadvertently passed to the wrong patients. People have gotten meds when they've been allergic to them. This is dangerous," Marin RN Barbara Ryan said in comments reported by the Marin Independent Journal.
• In Chicago, the Chicago Tribune in 2011 reported on a patient death at Advocate Lutheran General hospital after an automated machine prepared an intravenous solution containing a massive overdose of sodium chloride — more than 60 times the amount ordered by a physician.
• At Affinity Medical Center RNs in Massillon, Oh. RNs in June raised multiple objections to the hurried introduction of an EHR system. Subsequently, they have cited medication errors, delays in care, problems with documentation, computers crashing, and other concerns.

I am simply the reporter here.

-- SS

A "Simply Outstanding," "Superb" Hospital CEO Cops a Plea to Two Felonies

In all the discussions of what is wrong with US health care, very rarely is the quality of the leadership of health care organizations questioned.  In fact, no major US health care organization seems to have leadership that is anything short of brilliant.  The amazing brilliance of these leaders serves as a rationale for the ever increasing compensation that they receive.  Yet while subordinates, friendly members of boards of trustees, and hard working public relations flacks may stress their leaders' wondrous qualities, there rarely is an opportunity to compare their proclamations with results.

A few small items in the New York media provide us one case study of how these proclamations may not square with reality.

Background

In 2005, the CEO of New York's renowned Hospital for Special Surgery announced his retirement.  In a hospital news release, we find these pronouncements about outgoing President and CEO John Reynolds,

HSS board Co-Chairman Aldo Papone said, 'John's guidance and devotion to the Hospital for Special Surgery these last two decades have been simply outstanding. Under his watch, the quality of care, fiscal health and scope of treatment for musculoskeletal disease at the hospital have reached the highest level in its history.  While we regret his decision, we can only offer a most grateful expression of thanks...'

Also, HSS board Co-Chairman Dean R. O'Hare said,

He is a superb leader and we appreciate his thoughtful approach to succession which is emblematic of his service to HSS.

I cannot find anything on the internet about Mr Reynolds' compensation prior to his retirement, but in 2006, after he took on the position of Co-CEO during the transition, a copy of the hospital's 2006 990 form filed with the US Internal Revenue service, (and still available here, note though that rather confusingly, the Hospital still files under its archaic original name, "The New York Society for the Relief of the Ruptured and Crippled,") showed that Mr Renynolds' total compensation was $1,310,603

The CEO as Crook

Nothing publicly appeared to challenge the notion that Mr Reynolds' leadership was less that "outstanding" and "superb" until a Bloomberg article in September, 2012,

.

John R. Reynolds, former chief executive officer of New York's Hospital for Special Surgery, was charged by federal prosecutors with taking $1.4 million in a decade-long illegal-kickback scheme.

Reynolds, 63, was arrested at his home in Massachusetts this morning, according to a statement from the office of U.S. Attorney Preet Bharara. An indictment unsealed today in Manhattan federal court charges Reynolds with racketeering and making false statements to the government. He faces as long as 25 years in prison if convicted.

Prosecutors claim that, from 1996 to 2007, Reynolds took money from at least two hospital vendors, a hospital employee and an unidentified health-care organization in the U.K.

Furthermore,

 The government claims Reynolds took a total of $420,000 in kickbacks from at least two hospital vendors, from 1996 to 2002, in exchange for steering hospital business to them. From 2000 to 2005, he extorted an additional $298,500 from a subordinate at the hospital after negotiating an annual bonus for the employee, according to the charges. Reynolds also received $670,000 for approving a clinical partnership between his hospital and the U.K. health-care organization, prosecutors claim.


Reynolds is also charged with lying in 2008 to an agent of the U.S. Department of Health and Human Services inspector general’s office.

'By allegedly exploiting his position at the helm of a world renowned hospital for his own personal gain, John Reynolds tarnished the hospital’s reputation and did a disservice to its employees,' Bharara said in the statement.

Not surprisingly,

 'Obviously, it was a shock to us,' said Deborah Sale, a hospital spokeswoman, referring to the charges.

Of course, in the US, people accused of crimes are assumed to be innocent until proven guilty.  So I am now writing about this case because yesterday Bloomberg published the follow up story,

The former chief executive officer of New York’s Hospital for Special Surgery, charged by federal prosecutors with taking $1.4 million in kickbacks, pleaded guilty to two felonies. 

John R. Reynolds, 64, today pleaded guilty to wire fraud and making false statements, admitting that he took payments from a hospital employee and lied to investigators about it.

He will be subject to a stiff fine, although less than what he was charged with extracting through his scheme, and may be imprisoned,

 Under a plea agreement with the government, Reynolds will forfeit $718,500. Both sides agreed that federal sentencing guidelines, which are advisory, call for him to serve 27 to 33 months in prison.

The story so far has also been covered briefly by two tabloids, the New York Post, and the Daily News.  To date, the Hospital for Special Surgery has not issued a news bulletin on this.

Summary

So yet another "outstanding," "superb" multimillion dollar CEO turned out to be something rather less, in  fact, to be a criminal.


We have frequently discussed how the leaders of large US health care organizations are often hailed as brilliant, and compensated hugely for their brilliance, but rarely publicly subject to any objective assessment of their performance.  In many cases, they seem unaccountable for leadership that may be ill-informed, hostile to the health care mission, or even criminal or corrupt.

 The good news is that this criminal was eventually caught.  The bad news is that it only happened 18 years after he began acting criminally, hardly an example of swift justice.  One wonders how many other brilliant health care leaders will years later turn out not to be so, and how many others' performance will never be publicly assessed.  

While we breathlessly await the rigorous prospective study that assesses public assessments of the leaders of large health care organizations against objective results, we are stuck with case studies as a means to do so.  This case study shows a particularly stark contrast between the public relations puffery and the sordid reality. 


Instead of "brilliant" leaders paid like royalty, we would do better with competently collegial leaders rewarded reasonably as part of a team all focused on the health care mission, which puts service to patients first.  As long as health care organizations appear to be a path to riches for their leaders, expect the people who want to lead them to be more interested in their own fortunes than patients' and the public's health.  As long as health care professionals, policy makers and the public assume that those who lead health care organizations are fully qualified, fairly paid, and always do what is right, expect the insiders to continue to run things for their own profit. 

The qualifications of those who would lead health care, how much they are paid, what they are doing and what the results of their work are ought to be publicly known and publicly discussed.  Health care professionals, policy makers, and the public should demand nothing less.  . 

5 Candi Terindah di Negeri Kamboja

     Kamboja sama seperti indonesia, yaitu tempat dimana Hindu dan Budha pernah berjaya, namun kejayaan di kamboja masih berlangsung sampai sekarang dimana banyak terdapat kuil-kuil, candi, dan para biksu. Dan berikut adalah 5 candi terindah di Kamboja..

1. Angkor Thom

     Adalah reruntuhan kompleks ibu kota kerajaan kuno Khmer di Kamboja. Ibu kota ini didirikan oleh raja Jayawarman VII dan mencakup kawasan seluas 9 km². Di kawasan ini terdapat beberapa monumen dari masa sebelumnya. Reruntuhan di dalam kompleks kota ini antara lain berbagai candi-candi dan istana-istana, serta terdapat arca-arca yang besar. Pada pusat kota ini berdiri candi Bayon, candi Lokeswara, sementara situs-situs arkeologi penting lainnya berhimbun di sekitar lapangan kejayaan, semacan alun-alun tepat di sebelah utara candi Bayon.

2. Angkor Wat

     Adalah sebuah kuil atau candi yang terletak di kota Angkor, Kamboja, dan dianggap sebagai salah satu dari keajaiban dunia. Ia dibangun oleh Raja Suryavarman II pada pertengahan abad ke-12. Pembangunan kuil Angkor Wat memakan waktu selama 30 tahun.

     Angkor Wat berada dalam keadaan yang baik dibandingkan dengan kuil lain di dataran Angkor disebabkan Angkor Wat telah dialihfungsikan menjadi kuil Buddha dan dipelihara serta digunakan secara terus menerus ketika agama Buddha menggantikan agama Hindu di Angkor pada abad ke-13. Kuil Angkor pernah dijajah oleh Siam pada tahun 1431.

     Pada tahun 1992 Angkor Wat masuk dalam daftar Situs Warisan Dunia UNESCO.

3. Baksei Chamkrong

     Adalah candi Hindu yang dibuat untuk Shiva dan digunakan untuk memegang gambaran emas untuknya. Candi ini dapat terlihat di sisi kiri ketika memasuki Angkor Thom di gerbang selatan. Candi ini dibuat untukYasovarman oleh anaknya, Raja Harsavarman. Candi ini diselesaikan oleh Rajendravarman II (944-968 SM).

4. Banteay Srei

     Banteay Srei dibangun dari bahan batu pasir berwarna merah dengan ukiran yang halus dan rumit. Ukuran bangunan ini terbilang kecil jika dibandingkan standar ukurang bangunan di Angkor, akan tetapi keistimewaannya adalah pada keindahan detil ukiran relief dan ornamennya. Karena faktor inilah maka candi ini menjadi sangat mahsyur di kalangan wisatawan dan disanjung sebagai "permata seni Khmer.

5. Preah Vihear

     Preah Vihear kuil Khmer yang terletak di bukit setinggi 525 di Pegunungan Dangrek, di Provinsi Preah Vihear,Kamboja dan dekat distrik Kantharalak, Thailand. Pada tahun 1962, kuil di dipersengketakan antara Thailand dan Kamboja, dan Mahkamah Internasional menyerahkan kepemilikan kuil ini kepada Kamboja.

Diolah dari http://id.wikipedia.org/

Ini dia Mouse Komputer pertama di Dunia

     Mouse adalah perangkat keras yang digunakan untuk memasukkan perintah keadalam komputer. Ia mendapat namanya karena kabel panjang yang menyerupai ekor tikus.

Mouse pertama di dunia

     Mouse pertama kali dibuat pada tahun 1963 oleh Douglas Engelbart berbahan kayu dengan satu tombol. Model kedua sudah dilengkapi dengan 3 tombol. Pada tahun 1970, Douglas Engelbart memperkenalkan mouse yang dapat mengetahui posisi X-Y pada layar komputer, mouse ini dikenal dengan nama X-Y Position Indicator (indikator posisi X-Y).

Douglas, Penemu Mouse

Perkembangan Mouse-mouse Pertama    

1. Penemuan Douglas Engelbart

   Paten bola mouse pertama. Gambar ini menunjukkan roda trek berlawanan oleh Englebart, dengan nomor paten 3541541 (Inggris) November 1970.

2. Penemuan Rider

     Gambar diatas adalah bola dan roda oleh Rider, dengan nomor paten 3835464 (Inggris) September 1974.

3. Penemuan Opocentsky

     Yang ketiga adalah bola dan dua penggelinding oleh Opocentsky, dengan nomor paten 3987685 (Inggris) Oktober 1976.

 Saat ini, teknologi terbaru sudah memungkinkan mouse memakai sistem laser, memungkinkan resolusi mencapai 2.000 titik per inci (dpi) hingga 4.800 titik per inci. Biasanya mouse model ini diperuntukkan bagi penggemar permainan video.vSekian, semoga bermanfaat...

Diolah dari http://id.wikipedia.org/