From nobody Wed Jun 1 09:02:13 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 19DC912D11B for ; Wed, 1 Jun 2016 09:02:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ZG3pRJIzacEJ for ; Wed, 1 Jun 2016 09:02:09 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 8D5EC12B061 for ; Wed, 1 Jun 2016 09:02:09 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id E67D56DC08C; Wed, 1 Jun 2016 12:02:08 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id D0E0A6DC098; Wed, 1 Jun 2016 12:02:08 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Wed, 1 Jun 2016 12:02:08 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Wed, 1 Jun 2016 12:02:08 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=cKiYwWutuL4kh52K52lkkE6l8egXdOXJnci+OA/jq3o=; b=bDLfNm5+OlaToWOqj1SbGDeJ4hYOV3O0xIj66fgeSKIkK5mCuQluJr2LPS4PSGtsweixGpXnkvQnzd9evPq02WobcobUokBLmFYfU4iOVPIQPGI4AvzwHPN0yX18X+6DKGJXEj0fuk8z16dCdssvJsPXsqGFE/RYj+40v9tuEt0= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) with Microsoft SMTP Server (TLS) id 15.1.506.9; Wed, 1 Jun 2016 16:02:06 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0506.013; Wed, 1 Jun 2016 16:02:06 +0000 From: "Haynes, Dan" To: "Romascanu, Dan (Dan)" , "sacm@ietf.org" Thread-Topic: FOR REVIEW: IM Merge - Additional changes in the I-D IM to be considered for the WG IM Thread-Index: AdGvo6sPnva3kl2KT8q+VQFulOHDLwAgtHIAAAKQ6gABkxde0AFoTflw Date: Wed, 1 Jun 2016 16:02:06 +0000 Message-ID: References: <9904FB1B0159DA42B0B887B7FA8119CA751E4B5C@AZ-FFEXMB04.global.avaya.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: avaya.com; dkim=none (message not signed) header.d=none;avaya.com; dmarc=none action=none header.from=mitre.org; x-originating-ip: [192.160.51.88] x-ms-office365-filtering-correlation-id: 9b7ebf96-5ed8-468f-35a1-08d38a3614b0 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1078; 5:wUwaPHzHzQtFsyZoWD91yrthOehY2Cof383LTabiVVpaXSxagFJDfA3AI8ftlD1I3/Peg0iYwwH4BZcjzSxEFpGvId6dAZW5wK27095YXkQ9IkX2vQngNLdwDXKIZSAiU4aStX67ElkSme8zbJCrsg==; 24:nt+F1I9/aI2+P+MdcIOyOkhfhswnFOesJeKmEGYVwWT/EEwPLFnWOqEnxxXlwCqsfK43BxW8lZ9A4JXLEJJgz78dzmDsjndEdrq6+ixwvmk=; 7:Qg2oczitkkLFmrsLPXZYvRHXADgmP34dbeEB14eR57a++XI/s7MlvDmAiBEbQRdvpFUdkd89BP7HTMf6GLaC57dfhI+oBiIrbfUmWYpUtwN3cHrSyFRn5WIoE3l5YW93GYiUENvitBbFi/dedzkbFWWm9YC+szRuOlTpX245H5uYMOcl7q9vFpb/+Po4Vtt2 x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1078; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(10436049006162)(120809045254105)(166708455590820)(131327999870524)(788757137089)(21748063052155)(231250463719595); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1078; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1078; x-forefront-prvs: 096029FF66 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(377454003)(53754006)(3846002)(3280700002)(6116002)(5001770100001)(19580405001)(790700001)(102836003)(74316001)(93886004)(5890100001)(586003)(9686002)(2906002)(3900700001)(19300405004)(3660700001)(2501003)(5003600100002)(8666004)(76576001)(5002640100001)(122556002)(16236675004)(81166006)(8676002)(189998001)(8936002)(5004730100002)(86362001)(11100500001)(19625215002)(5008740100001)(10400500002)(66066001)(92566002)(2900100001)(19580395003)(107886002)(87936001)(50986999)(76176999)(54356999)(77096005)(15975445007)(19617315012)(31430400001)(2950100001)(33656002)(99286002)(7059030); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1078; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB107818708CCB20825E5474D6A5470BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Jun 2016 16:02:06.6206 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1078 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] FOR REVIEW: IM Merge - Additional changes in the I-D IM to be considered for the WG IM X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jun 2016 16:02:13 -0000 --_000_BY2PR09MB107818708CCB20825E5474D6A5470BY2PR09MB1078namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable So far, I haven't heard feedback on any of these changes. Do they all seem= reasonable? Most are straight forward, but, I know the group wanted to discuss SACM sta= tements and content-element structures more (for example). I am fine givin= g another day or two to review the changes if needed, but, I also need to h= ave all the changes in an updated draft for June 8th (next Wednesday) :). If you have any thoughts on these changes, please bring them up as soon as = possible so we can have any questions/issues resolved by Friday of this wee= k. Thanks, Danny From: Haynes, Dan Sent: Wednesday, May 25, 2016 8:20 AM To: Haynes, Dan ; Romascanu, Dan (Dan) ; sacm@ietf.org Subject: RE: FOR REVIEW: IM Merge - Additional changes in the I-D IM to be = considered for the WG IM Just an update on this. I committed the proposed changes regarding the merg= er in a branch in the IM GitHub repository [1]. For your convenience, I also have attached a updated text version so you ca= n diff it against the version up on the IETF site [2]. A couple of things to note about this draft (in addition to the changes lis= ted earlier in this thread): * Includes text for SACM Statements and SACM Content-Elements. Ther= e was discussion around whether or not this was needed at the Virtual Inter= im Meeting [3]. Please review and provide feedback. * Contains change from "Object" to "Subject". There is ongoing disc= ussion here [4]. * Does not include the IEs from the I-D IM. These will be carried o= ver once the IPFIX syntax is updated as long as there are no objections to = the proposed IEs. So far, we haven't heard any, but, the thread is here [5= ] in case you want to provide any feedback. * The WG IM is now "standards track" instead of "informational". I = had forgotten to update that in the XML version of the I-D when we made the= decision last year [6]. * Removes text about SACM Components [7]. This was discussed here [= 8]. * The updated IPFIX syntax is not included in this revision. As a reminder, we have put a deadline of May 31st for review and feedback s= o that we can have a revised draft for June 8th which is a week before the = next virtual interim meting (June 15th). Let me know if you have any questions. Thanks, Danny [1] https://github.com/sacmwg/draft-ietf-sacm-information-model/blob/propos= ed-im-merger-changes/draft-ietf-sacm-information-model.xml [2] https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/ [3] http://www.ietf.org/mail-archive/web/sacm/current/msg04043.html [4] http://www.ietf.org/mail-archive/web/sacm/current/msg04014.html [5] http://www.ietf.org/mail-archive/web/sacm/current/msg03961.html [6] https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/29 [7] https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/33 [8] http://www.ietf.org/mail-archive/web/sacm/current/msg03955.html From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Tuesday, May 17, 2016 7:42 AM To: Romascanu, Dan (Dan) >; s= acm@ietf.org Subject: Re: [sacm] FOR REVIEW: IM Merge - Additional changes in the I-D IM= to be considered for the WG IM Hi Dan, That seems like a reasonable request. I will take the current WG IM and in= tegrate the proposed changes from the I-D IM into it and send it out on thi= s thread so everyone can more easily review the changes. Thanks, Danny From: Romascanu, Dan (Dan) [mailto:dromasca@avaya.com] Sent: Tuesday, May 17, 2016 6:29 AM To: Haynes, Dan >; sacm@ietf.or= g Subject: RE: FOR REVIEW: IM Merge - Additional changes in the I-D IM to be = considered for the WG IM Hi, I do not know if I am the only one, but I have difficulties visualizing the= proposed changes as a 'dry' intellectual exercise. I suspect that you have a work-in-progress version that includes these chan= ges. Why do not you post it together with the Log of Changes, and we can mo= re easily see and debate what we like or do not like. Any I-D is anyway w-i= -p. Regards, Dan From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Monday, May 16, 2016 9:55 PM To: sacm@ietf.org Subject: [sacm] FOR REVIEW: IM Merge - Additional changes in the I-D IM to = be considered for the WG IM Hi Everyone, More recently, we have continued our I-D and WG IM merger work in Henk's Gi= tHub repository [1] for easier collaboration and in case anyone wants to fo= llow along with our progress :). With that said, Henk, Nancy, Mike, and I have spent some more time merging = the text between the I-D IM [1] and the WG IM [2] and would like to make so= me additional proposals. 1. Replace the text in the beginning of Section 3 of the WG IM with t= he text from Section "Structure of Information Elements" of the I-D IM (not= e: we plan to maintain the current IPFIX syntax sections although it will b= e updated in the near future to address some of the concerns Jim raised) 2. Insert Sections "SACM Content Elements" and "SACM Statements" of t= he I-D IM into Section 3 of the WG IM as subsections 3. Replace Section 3.4 of the WG IM with Section "Relationships" in t= he I-D IM 4. Insert Section "Events" of the I-D IM into the Section 3 of the WG= IM as a subsection. Remove Section 5.4.5 of the WG IM. Please review and provide any feedback by Tuesday May 31st. Let me know if= you have any questions. As a side note, we plan to briefly discuss SACM statements, content element= s, relationships, events, and categories at tomorrow's virtual interim meet= ing. Thanks, Danny [1] https://github.com/henkbirkholz/sacmim/blob/master/draft-camwinget-sacm= -information-model-01.md [2] https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/ --_000_BY2PR09MB107818708CCB20825E5474D6A5470BY2PR09MB1078namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

So far, I haven’= t heard feedback on any of these changes.  Do they all seem reasonable= ? 

 

Most are straight forw= ard, but, I know the group wanted to discuss SACM statements and content-el= ement structures more (for example).  I am fine giving another day or = two to review the changes if needed, but, I also need to have all the changes in an updated draft for June 8th<= /sup> (next Wednesday) J. 

 

If you have any though= ts on these changes, please bring them up as soon as possible so we can hav= e any questions/issues resolved by Friday of this week.

 

Thanks,

 

Danny

 

From: Haynes, Dan
Sent: Wednesday, May 25, 2016 8:20 AM
To: Haynes, Dan <dhaynes@mitre.org>; Romascanu, Dan (Dan) <= dromasca@avaya.com>; sacm@ietf.org
Subject: RE: FOR REVIEW: IM Merge - Additional changes in the I-D IM= to be considered for the WG IM

 

Just an update on this= . I committed the proposed changes regarding the merger in a branch in the = IM GitHub repository [1].

 

For your convenience, = I also have attached a updated text version so you can diff it against the = version up on the IETF site [2].

 

A couple of things to = note about this draft (in addition to the changes listed earlier in this th= read):

 

·         Includes text = for SACM Statements and SACM Content-Elements. There was discussion around = whether or not this was needed at the Virtual Interim Meeting [3]. Please r= eview and provide feedback.

·         Contains chang= e from “Object” to “Subject”. There is ongoing disc= ussion here [4].

·         Does not inclu= de the IEs from the I-D IM. These will be carried over once the IPFIX synta= x is updated as long as there are no objections to the proposed IEs.  = So far, we haven’t heard any, but, the thread is here [5] in case you want to provide any feedback.

·         The WG IM is n= ow “standards track” instead of “informational”. I = had forgotten to update that in the XML version of the I-D when we made the= decision last year [6].

·         Removes text a= bout SACM Components [7]. This was discussed here [8].

·         The updated IP= FIX syntax is not included in this revision.

 

As a reminder, we have= put a deadline of May 31st for review and feedback so that we c= an have a revised draft for June 8th which is a week before the = next virtual interim meting (June 15th).

 

Let me know if you hav= e any questions.

 

Thanks,


Danny

 

[1] https://github.com/sacmwg/draft-ie= tf-sacm-information-model/blob/proposed-im-merger-changes/draft-ietf-sacm-i= nformation-model.xml

[2] https://datatracker.i= etf.org/doc/draft-ietf-sacm-information-model/

[3] http://www.ietf.org/mail-= archive/web/sacm/current/msg04043.html

[4] http://www.ietf.org/mail-= archive/web/sacm/current/msg04014.html

[5] http://www.ietf.org/mail-= archive/web/sacm/current/msg03961.html

[6] https://github.com/= sacmwg/draft-ietf-sacm-information-model/issues/29

[7] https://github.com/= sacmwg/draft-ietf-sacm-information-model/issues/33

[8] http://www.ietf.org/mail-= archive/web/sacm/current/msg03955.html

 

 

From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan
Sent: Tuesday, May 17, 2016 7:42 AM
To: Romascanu, Dan (Dan) <d= romasca@avaya.com>; sacm@ietf.org
Subject: Re: [sacm] FOR REVIEW: IM Merge - Additional changes in the= I-D IM to be considered for the WG IM

 

Hi Dan,

 

That seems like a reas= onable request.  I will take the current WG IM and integrate the propo= sed changes from the I-D IM into it and send it out on this thread so every= one can more easily review the changes.

 

Thanks,

Danny

 

From: Romascanu, Dan (Dan) [mailto:dromasca@avaya.com]
Sent: Tuesday, May 17, 2016 6:29 AM
To: Haynes, Dan <dhaynes@mit= re.org>; sacm@ietf.org
Subject: RE: FOR REVIEW: IM Merge - Additional changes in the I-D IM= to be considered for the WG IM

 

Hi,<= /p>

 

I do not know if I am = the only one, but I have difficulties visualizing the proposed changes as a= ‘dry’ intellectual exercise.

 

I suspect that you hav= e a work-in-progress version that includes these changes. Why do not you po= st it together with the Log of Changes, and we can more easily see and deba= te what we like or do not like. Any I-D is anyway w-i-p.

 

Regards,

 

Dan<= /p>

 

 

From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan
Sent: Monday, May 16, 2016 9:55 PM
To: sacm@ietf.org
Subject: [sacm] FOR REVIEW: IM Merge - Additional changes in the I-D= IM to be considered for the WG IM

 

Hi Everyone,

 

More recently, we have continued our I-D and WG IM m= erger work in Henk’s GitHub repository [1] for easier collaboration a= nd in case anyone wants to follow along with our progress :).

 

With that said, Henk, Nancy, Mike, and I have spent = some more time merging the text between the I-D IM [1] and the WG IM [2] an= d would like to make some additional proposals.

 

1.  = ;     Replace the text in the beginning of Section 3 of the WG IM with the= text from Section “Structure of Information Elements” of the I= -D IM (note: we plan to maintain the current IPFIX syntax sections although= it will be updated in the near future to address some of the concerns Jim raised)

 

2.  = ;     Insert Sections “SACM Content Elements” and “SACM = Statements” of the I-D IM into Section 3 of the WG IM as subsections<= o:p>

 

3.  = ;     Replace Section 3.4 of the WG IM with Section “Relationships&#= 8221; in the I-D IM

 

4.  = ;     Insert Section “Events” of the I-D IM into the Section 3= of the WG IM as a subsection. Remove Section 5.4.5 of the WG IM.

 

Please review and provide any feedback by Tuesday Ma= y 31st.  Let me know if you have any questions.

 

As a side note, we plan to briefly discuss SACM stat= ements, content elements, relationships, events, and categories at tomorrow= ’s virtual interim meeting.

 

Thanks,

Danny

 

[1] https://github.com/henkbirkholz/sacmim/blob/master/draft-camwinget-sacm-inf= ormation-model-01.md

[2] https://datatracker.ietf.or= g/doc/draft-ietf-sacm-information-model/

 

 

--_000_BY2PR09MB107818708CCB20825E5474D6A5470BY2PR09MB1078namp_-- From nobody Wed Jun 1 12:19:27 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 862E212D59B for ; Wed, 1 Jun 2016 12:19:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zQM0psNPgTD8 for ; Wed, 1 Jun 2016 12:19:22 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 5F4E712D563 for ; Wed, 1 Jun 2016 12:19:22 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id D7E4F6C051E; Wed, 1 Jun 2016 15:19:21 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id C0E746C003F; Wed, 1 Jun 2016 15:19:21 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Wed, 1 Jun 2016 15:19:21 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Wed, 1 Jun 2016 15:19:21 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=MTZ9GlnV1SebeuIOUt+EixUkLSxAP2By0oCN/yHtsCw=; b=Sfe4msMKAsPbJ1E3fBr522tVI322MimBSkq+cacmaZol8gET8CO0WP5M5N59iMyPOjlQ/BQGXHfJRx84fPQqTj35qRUXO8Bl2UjhYCgTgXOObLsAHTdGZsH09zatxIS5BXB0otEBkPZl+JEB+u9PfaSg/R3AQfLqq504Iigibsg= Received: from SN1PR09MB0990.namprd09.prod.outlook.com (10.166.69.8) by SN1PR09MB0992.namprd09.prod.outlook.com (10.166.69.10) with Microsoft SMTP Server (TLS) id 15.1.506.9; Wed, 1 Jun 2016 19:19:20 +0000 Received: from SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) by SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) with mapi id 15.01.0506.013; Wed, 1 Jun 2016 19:19:19 +0000 From: "Schmidt, Charles M." To: Gunnar Engelbach , Adam Montville Thread-Topic: [sacm] Some technical details for SWID M&A proposals Thread-Index: AQHRu23El3zMnI0gBEW76u6p+w51NZ/UoNKg Date: Wed, 1 Jun 2016 19:19:19 +0000 Message-ID: References: <827360a9-1c95-1a9a-50c0-12b0d6cf323d@ThreatGuard.com> <6bb4b3ef-7afa-d981-60cd-c90f7a4e23e8@ThreatGuard.com> <5707e531-ef34-5ea4-04c8-739d9c7be123@ThreatGuard.com> <6bacd100-1dd8-921a-1bc6-e4210760d1bf@ThreatGuard.com> In-Reply-To: <6bacd100-1dd8-921a-1bc6-e4210760d1bf@ThreatGuard.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: threatguard.com; dkim=none (message not signed) header.d=none;threatguard.com; dmarc=none action=none header.from=mitre.org; x-originating-ip: [192.160.51.88] x-ms-office365-filtering-correlation-id: 714896a4-df2d-4ef7-14e7-08d38a51a1b0 x-microsoft-exchange-diagnostics: 1; SN1PR09MB0992; 5:VUwGDBdq6YPjgeqmUpNDuku4tLcLFdWcE9o7Pbw1/Utxisn5MvInkxN/hSlBEst2yNAbgZ2w0lb0/qP0VkNI2VzxyCGpTlOL9GtIclV91ds5tqXXVPgpUVLZGZYZHjXlR6suWeX95cCe/GfX8uMOjA==; 24:AZEXM+fpq8P1afk0wsrK1ramLRUmWoawWhHS6o8LhzDBInKOKjSkCKGqLxsGIkM28n+2EPDPUn552tdzgFG3HFa64XcESYBvLgfe8EB3gP8=; 7:/MmVwLVAaAHkgL/eCQuhDCmSXyVdSRYYstFDnhGxaT2fPIsBNPmmkqDuYrU3SNFD3huKxY4D7G4AyDsuAXlKRnQmTE0CQhs6Enb526CI2BLDSCCfww6njNQAT6a0FXfVRJR8ynWljMTnqWPAzqn3nGwLDwQ37M3JbMPGBBIWH/pz3iydf8o1ewBw2Sb6xzSd x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR09MB0992; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:SN1PR09MB0992; BCL:0; PCL:0; RULEID:; SRVR:SN1PR09MB0992; x-forefront-prvs: 096029FF66 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(13464003)(24454002)(377454003)(66066001)(93886004)(81166006)(77096005)(5003600100002)(74316001)(8936002)(8676002)(33656002)(10400500002)(9686002)(3660700001)(19580405001)(19580395003)(5008740100001)(3280700002)(2950100001)(586003)(102836003)(3846002)(6116002)(76576001)(5004730100002)(99286002)(87936001)(2900100001)(99936001)(86362001)(189998001)(50986999)(122556002)(2906002)(5001770100001)(54356999)(76176999)(4326007)(92566002)(106116001)(5002640100001); DIR:OUT; SFP:1101; SCL:1; SRVR:SN1PR09MB0992; H:SN1PR09MB0990.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_010F_01D1BC10.9392DFF0" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Jun 2016 19:19:19.7308 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR09MB0992 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Some technical details for SWID M&A proposals X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Jun 2016 19:19:25 -0000 ------=_NextPart_000_010F_01D1BC10.9392DFF0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi Gunnar, Thanks, as always, for the good insights. If I can paraphrase what I think I am hearing: you are asserting that the use of certain tags is likely to be context dependent. Specifically, certain types of tags will primarily be used on certain OSs and/or on devices in a certain role. A centralized normalization function needs to have translators for the tags of every context in the enterprise. However, if translation is done on the endpoints (i.e., within that very context that is producing the tags) those endpoints only need to support the translators appropriate for their specific context. Moreover, as new contexts are added to an enterprise, I think you are arguing that it is more natural to account for the new varieties of tags that could arise in those contexts locally (i.e., on the endpoint) rather than updating a central server every time a new context is added. Do I have this correct? What are others' thoughts on this? Thanks, Charles > -----Original Message----- > From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] > Sent: Tuesday, May 31, 2016 1:53 PM > To: Schmidt, Charles M. ; Adam Montville > > Cc: sacm@ietf.org > Subject: Re: [sacm] Some technical details for SWID M&A proposals > > > The reality is that not all tagging formats are going to be implemented > on the first iteration and new ones will be devised and revisions made > to the existing ones. > > Depending on the vendor, the most likely outcome is that only a few of > the most common tagging systems will ever be implemented and if your > enterprise uses any others you are just out of luck -- unless you do > some in-house work or some other vendor is willing to invest the time > and effort into supporting the less common tag types. > > If the normalization is done centrally by the Validator then the > Validators (and every other consumer) needs to support all tag types > right from the start, keep updating as the various tag formats change, > and be done thus by every vendor. > > Which, I can guarantee, won't happen. And even if it did, the develop > and release cycle on large systems is typically 1 to 2 years, which is > just too large a gap in this space. > > I also don't expect collectors to implement all tag types. Even > accounting for the obvious omissions -- a Windows agent wouldn't be > expected to have any awareness of tagging specific to OSX, HP-UX, > Android, etc, -- I think we can count on agents having incomplete > coverage. In fact, I think we should plan on that being the case. > > But if the collector does the translation to a standardized format, then > that data is available for any SACM usage immediately with no need for > updates to any other part of the SACM environment. In the worst case I > would have my own IT department develop something to fill in the gaps, > and the only part they would need to worry about is the tag > collector-to-common-DM for that specific tag type. > > The downside is that I may need to install and maintain multiple agents > on some systems, but the most likely case is that that kind of > customization will only be necessary to cover systems that otherwise > wouldn't be covered at all. > > So, yeah, your option (C) is what I would go with with (E) being the > most palatable of any of the other options. > > > --gun > > > On 5/31/2016 10:52 AM, Schmidt, Charles M. wrote: > > Hi Gunnar, > > > > Comments below: > > > >>>> 3) Tag information intended for use in a SACM environment is > translated > >>>> into a common standard data format prior to delivery from the > >>>> collector. This will still create some limitation on the number of > >>>> formats supportable within a SACM environment since it is reliant on > > the > >>>> collector being able to do that translation, but any data that does > >>>> enter the SACM sphere will be usable. > >>> To me, this doesn't seem > >>> different from the earlier concerns about the Posture Collector > > receiving > >>> data it cannot parse. > >> Well, no, it's not commensurate, for at least three reasons: > >> > >> 1) The tag types that need to be known to a collector is a subset of > >> all tag types, since a collector runs on a particular type of system. A > >> Windows agent would not be expected to be able to handle OSX-specific > >> tag types. > > True - I clearly overstated the burden on individual endpoints, so thank you > > for the correction. > > > > That said, from an enterprise perspective I would think the set of > > translators would be constant regardless of whether translation occurred > on > > endpoints or servers. If one endpoint has tags of interest that are not one > > of the specified SACM forms, the appropriate translator needs to be > > somewhere. The question is whether that somewhere should be the > endpoint or > > the server. (Or, as you note below, on the end-consumer.) > > >> 2) Similar to (1), a single collector does not necessarily need to be > >> able to translate every tag type it could possibly come across. This > >> might be because multiple collection methods are in use, a collector is > >> built for a single narrow function, etc. > > I think I agree, but I think I would phrase it differently. I would say that > > not all tags on an endpoint are necessarily of interest to the enterprise. > > Some types of tags might be generally unreliable in nature (e.g., a poor > > correlator with software presence), might not have the needed metadata > bout > > installed software products, or could be for software the enterprise > doesn't > > care about monitoring. In the first two cases, the presence of an alternate > > tag type from the same source (and covering the same products) could > render > > the second format completely unnecessary. > > > > Are we saying the same thing using different words here? > > > >> 3) There is more than one consumer for the collected data. It could be > >> for vulnerability analysis, license administration, inventory, > >> compliance, and so on. Every current and future use for that > >> information would need to be able to parse every supported tag type in > >> order to do its function. A considerable amount of duplication to say > >> the very least. The same can be said for every other type of data being > >> collected from an endpoint. > > I think you are talking about a scenario where every end consumer of tags > is > > responsible for normalization. That is certainly yet another option (call it > > option 4), although I agree that it has the weaknesses you note here. I > > would argue that this is not equivalent to having normalization done on the > > Posture Validator, which is more what I was thinking of in my previous > > email. > > > > Given this discussion, it might be useful to recast our options based on who > > is responsible for data normalization. > > > > A) No normalization + data model. Posture Collectors collect and SWID > M&A > > transports only a defined set of tag types and formats. All tags that are > > not expressed in those formats are not collected and are ignored. (Former > > option 1) > > B) No normalization + no data model. Posture Collectors collect and SWID > M&A > > transports any type or format of tags. Tag consumers collecting tags from > > the CMDB/Posture Validator get whatever tags they can understand and > other > > types of tags are ignored. > > C) Posture Collector normalization. The Posture Collector is responsible for > > normalizing the tags collected on an endpoint prior to delivery to a Posture > > Validator. SWID M&A supports transmission of a defined set of tag types > and > > formats, to which the Posture Collector translates. (Option 3 from Gunnar's > > earlier email) > > D) Posture Validator normalization. Posture Collectors collect and SWID > M&A > > transports any type or format of tags. The receiving Posture Validator is > > responsible for normalizing the incoming data to a set of types and formats > > identified by SACM (but whose specification is outside the scope of SWID > M&A > > itself). > > E) Consumer normalization. Posture Collectors collect and SWID M&A > > transports any type or format of tags. Tags are stored on the Posture > > Validator or CMDB until a consumer needs them. The consumer then > collects > > the relevant tags and is responsible for translating any tags into a format > > it can consume. (Option 4 from this email) > > > > Gunnar, I believe you are an advocate of C, correct? I also think both of > > use agree that options B and E are probably bad ideas since the data > > consumers can have no idea as to what they are going to get. Personally, I > > think I'm more of a fan of D - it has a centralized rather than distributed > > normalization function and can avoid unnecessary data loss. > > > > Gunnar, have I misinterpreted any of your comments? Do others have any > > thoughts on this? > > > > Thanks, > > Charles > > ------=_NextPart_000_010F_01D1BC10.9392DFF0 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVFzCCBQcw ggPvoAMCAQICChY3sr0AAQAAGTYwDQYJKoZIhvcNAQELBQAwUDETMBEGCgmSJomT8ixkARkWA09S RzEVMBMGCgmSJomT8ixkARkWBU1JVFJFMSIwIAYDVQQDExlNSVRSRSBDb3Jwb3JhdGlvbiBQRSBD QS0yMB4XDTE1MDEyNjE0MjQ1MFoXDTE4MDEyNTE0MjQ1MFowTjELMAkGA1UEBhMCVVMxDjAMBgNV BAoTBU1JVFJFMQ8wDQYDVQQLEwZQZW9wbGUxHjAcBgNVBAMTFVNjaG1pZHQuQ2hhcmxlcy4yNTY1 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN5xc5J1BiLU7EoWUMfTywdDl9O8BN8w Mv9ZVYlyXwRv7wyLQOSV6zlFANSf8RvuP2Yt5akFlLawX9s5MsqMTqNoDuJ0rV3fz7cwniAHJPJQ 9r7Ito9rtbW55YcLy9AQeD1MwZEP8BX8Xw4iGtyjNSYFOuPbumz19c9S2e1Hu5kbgQcgpKAl8yqw jmxbxjl2Dabd8Vsb718KIbXW63Lcq0XXZAHHRmoZS3sYAHiYR7IkoXAdu6jZdaBapuQ2zTrBPhY8 a9D2HFWBLnDo3H7rT75+xtOr5toOg5X35K0loeRRF+gVGvRCPzpICJm+2FEaV1AbfG4CBVpXzMHu RCyzitECAwEAAaOCAeMwggHfMCgGA1UdJQQhMB8GCCsGAQUFBwMEBgkrBgEEAXMCAQcGCCsGAQUF BwMCMB0GA1UdDgQWBBTqU2AbFZCeOIL9w7THoPvAqThWlzAOBgNVHQ8BAf8EBAMCBsAwHgYDVR0R BBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAfBgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2l JzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0 aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/BggrBgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6 Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29ycG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYG CCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRyZS5vcmcvb2NzcDA+BgkrBgEEAYI3FQcEMTAvBicr BgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6uAYE2gZe0EIWZ/woCAWQCAQswNAYJKwYBBAGCNxUK BCcwJTAKBggrBgEFBQcDBDALBgkrBgEEAXMCAQcwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD ggEBAGHCUualAhLcCqxuPwC1EcEtQ+11msjtfh0g21t0ocOwVVidgoB/QL8PFaFp15XKEzYcGf7l IcJHNjLWwG8x8G1rnSdKGyJgj/5vHSFRm/NUYmSpqWc1k3s/Ps5GlvWWEmu8VtUHJcqeqPy7tkXe 0rzHGpvj0+pPAGjgqvLUxs3IPj2ME1v+lQ/DotWa9WTJo6SitnbYpj5ARRDoQjS9zY1idjZpTqyZ XPDO/yZnTaR5Ue1sHdARztlnNIQszBsJRPWh4kldQ4d0qHUycia+Jtm7Rbj1Itpb4jDyiK+9mxzE tNfYzzvtmCB0y/Eq4PGurhFFydPk18zpEapb+dlP5WYwggUtMIIDFaADAgECAhBMOlIUIU/ToEQV R3+ykPtQMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBvcmF0aW9uIFBFIFJv b3QgQ0EtMTAeFw0xMTA0MjYxOTQ1NDVaFw0yMTA0MjYxOTQ4MjJaMCkxJzAlBgNVBAMTHk1JVFJF IENvcnBvcmF0aW9uIFBFIFJvb3QgQ0EtMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ALafIUdIUat4pvgJcH2+WRxj+ZNjkmNk5VR2ByDFAx9zH1u2+vJQd49zMADLMRitZHv7ejuCtLfc ER+EA4DkNQrYZjhmVu8YjfNYdLz9WH9eEjboFGu2bx/Sj94l7MvEJzh2pdWyn9D2vSl4m+fKlLsH 2mUgk1uT9npKnfM+ExE73wVrz4A8csZ1bIgDusi/VmkaTIklTIWC1stykblP4LntG1RIvqnYPoRD YdTUjV6aKrHktutp6uXMecMm0fzxdGLLUPTTZWAzOXCxAimBx8w+nFyiaM7hV64rMJRPK3Z2u1Ws cma34AtLnhCGP7bI/+uSMlIcjwcDtGaVvi7PQneGPhEUruZkeRXfMONnlc7qLJpN7NwMaygvmeLV 2JI2ollHbiHoAIkk9byQcJEud70fs6wV9xKeepezBVb1vxnLGfcFE9hxuuSTnolXNmMwhKi4EN2Q gR59PaAWoNpZzGnPhNrCpvWii98cx7OnMg/KgiSvTvECwqqNwpswEpTsLUxYi2IKT1vzEpoGDrfS a8BwM5PewxxSkxbbY61xjJoTFc2nbdRIzJ9Vr/LeViwSNKkqF/zGItgmnog7BIlkbvTZqbt6ZovJ u7SEfXLHWwFT5LNrKDTFjqKRhKRUEg71Nfpu+79oyCkCmMWJjds1DieEyRS9aLJ2f+9TJiwg1Xfh AgMBAAGjUTBPMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbh32f/my+ Aunz4Ck6ilQlLJ84LzAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQsFAAOCAgEAMu/LF7D/ 3qhx/P7jmMsUOkwQ4ZAgcTaMvDBdnPVA57OQAy9assTwJaQwbC/todWc7dxbz44NEqERP/Y7shta sTM4Zb9I3UMddrREnaN7gW+tW9brnOB/1cQiVgyOCmS/wedxCPBxj41AXSwA4Dphvfbn35ubmq0p I7SF//wc91OkH80z5VVhYuEps0SNpqdehkPET7if1jJaGgJ/Fx+hI0tqC4xmQvD8PPwuOluPDb2d SWU62b2Ga+xprr5qZWCuvEmb/0+UrvhZS0U8vbjV0Cx7Zuoyr5wx9sgeus08H2g6Z4yC56wtjuwD UVWXNCssIiolt5weyaKu+P11bjCNT4kgcrdkLvkSEv1gCOcDIm05sEogcUGar7rYfnV6GpCcjj9l oOY7y+eb/US2YQ6jLUSOaL5zhb04DSUKjT0npBrQPpugrZf74ZEoOuRRQjIWkpJ+72NiJfkfB6Ll iTfME2rnXnsZ8h3A/jJbfEGgeQhK6Q43nhmX0NBXGJvuk7ZTMw8OXhYU/yekKwAQsX4C5FRR7qzH EA+CZJl15KuWz/hjZGNFMtizG8P1A/eDhFdS6XwKlJE/pruWG78YPnpRbbGnfiMfKMFt+9scpyAA 4fatWx5vo9ThzyZhgC1ivZokaQuLd4rH7t2QdEKSP3tj6OjBA9/dyW9GG863BJRb+mQwggVkMIID TKADAgECAgphCxNwAAAAAAAIMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBv cmF0aW9uIFBFIFJvb3QgQ0EtMTAeFw0xNDA5MjMxNDExMDlaFw0yMDA5MjMxNDIxMDlaMFAxEzAR BgoJkiaJk/IsZAEZFgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUg Q29ycG9yYXRpb24gUEUgQ0EtMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCwfdfN xVXZ6/JpLeCsWV8VvVPRAiI4uemN3Cyn81gK/0uC0KJRX/WJ1XHmfzeLesyF46yxCgd0fe6mtaDf FQNWfngzMVaiHHT7nNyRcOo5TE+ZmzDe7i4Cp+Sd7ySSyaj5WTLVylv6PmFxtKYm/2tI44tELhGR Dsw/J7rhwi0/9jEujxjXpL64l72bcrEaDj8pSFg1LNPLFEe4S2jI9yxc5k0ZKQJtqGhBVPtOGSiZ gI8axrVkdnjr1Dwr0M1UT7Qmexp+r0WvMK16877VaApOGn0560eKtLgBYb8j72B7KUwFGFMtuM7Z dCCHYbiwLVnauOFbPK6qxhK/1fQBhZ0CAwEAAaOCAWUwggFhMBIGCSsGAQQBgjcVAQQFAgMBAAEw IwYJKwYBBAGCNxUCBBYEFK3ZS7o7L84O/Az72pcz74oBuJlNMB0GA1UdDgQWBBQMxmvuAka12Y/b o8zsvD7hBb2lJzAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRbh32f/my+Aunz4Ck6ilQlLJ84LzBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290 JTIwQ0EtMS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9odHRwOi8vcGtpLm1pdHJl Lm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290JTIwQ0EtMS5jcnQwDQYJKoZIhvcN AQELBQADggIBAD06aH/7xILol2cSQVcb5IUOOmM7spT7YGRDhGIosIFKbLSovt8NtmVwJY0I/2/Y 9rSD5hRQ2jdVWny3baAWRuhxjg/DjJgZ3wHyf8h5UtzcUEIfmslxOlDNlfFihKaMDUyqD4ycLEXW R7VGMjFQH5470vQPebdgoTgHBhdRHrOrtUb0/X1U4PUiR2TeOM4uQw0c0KupxNqG28Ff/Esonb2f JXs3i6hC8ke9gsysG8IssgY1xD8hPkqdJWBEcZYQjzkqIEyM+Z5p7640fX8eFPYiIXhHr2ZLf+8c 33FaIZEHDiQ7eFcxMQ3oxo0YvJKLwwrTGugne3pPNUd2DizbNP5u3YcPfMKSLgkmIqHOlshBq/kT na8btf//rwCspdTYGgCCtLrc0Tb26Rj4nKN8aEPJ08QYfFIgJv9DwejCC4km5bJh1ixczGraLqKb g8WJng9fRojYQcWKbf6NuJjWuwxud4NSDwcHcoTODd7p+3e9o6DrfH0OBzPOgd9+EFKI+dg6pbgY iZT8MUSUMA7dKxVysbrMrx/QOGVeYq7KzS+nip0usB4sCGIGZfyGZLkbj9rhtY3EnIdD8iKcgCtU CZHDDb3SzH7IpXICOzhIGRp8y9qSCemevhBJ8aXgcZcBvYPGbGcB4qzDclJKiDCC8rfUTeptdzOn dxibyGqMSYRKMIIFbzCCBFegAwIBAgIKFjewygABAAAZNTANBgkqhkiG9w0BAQsFADBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTIwHhcNMTUwMTI2MTQyNDUwWhcNMTgwMTI1MTQyNDUwWjBOMQswCQYD VQQGEwJVUzEOMAwGA1UEChMFTUlUUkUxDzANBgNVBAsTBlBlb3BsZTEeMBwGA1UEAxMVU2NobWlk dC5DaGFybGVzLjI1NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPFZQSeVxZu+ Gt4BfFomoILNlkXW2oAGBuhcEI5+Gfu33x7Or9K2NR3etzu9EqGPafLrJ1dyDWFIM9ktke0LqNKL 73WkWyCcpN0Bb7yXNPQynHzOgQSIrQbi7yrhmEbmNQC7hU5+BxfikIu/O7eSjWRgm9coRkEg6zpO 4nrADfumKIw/yVJ0dwqRVh9cMB7S8QJIXteDPHeZPeMAt7fw5TXTgF+OAwIqyjhHN4SiPMTQoDyZ HydqDxpd42gMZjLILS7oZ7pIDCfSwuPnM9PNHUzz5w+0D2hAYjv2a8BBh2L1LTV3nZVREN9uugVf w5Bu9q3T1ddeLrWsU4QvE8c0LwIDAQABo4ICSzCCAkcwEwYDVR0lBAwwCgYIKwYBBQUHAwQwgZQG CSqGSIb3DQEJDwSBhjCBgzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsOAwIH MAoGCCqGSIb3DQMHMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAS0wCwYJYIZIAWUDBAEWMAsGCWCG SAFlAwQBGTALBglghkgBZQMEAQIwCwYJYIZIAWUDBAEFMB0GA1UdDgQWBBTembLBQG/LThypM1w0 LH0xnzFqWzAOBgNVHQ8BAf8EBAMCBSAwHgYDVR0RBBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAf BgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2lJzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8v cGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/Bggr BgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29y cG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRy ZS5vcmcvb2NzcDA9BgkrBgEEAYI3FQcEMDAuBiYrBgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6u AYE20YFnhpiTPgIBZAIBEzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMEMA0GCSqGSIb3DQEB CwUAA4IBAQAKdBfLmGhQyfhBlJUrWwu5iuDwZTsOuddl9d4mw3Ml8yQjc21cCPDGJ3Tc3cwIJyj7 6rSK4mV6xsyUKDxZBZcNSM/7iLtFS9N8noe0Mo0TcPZuJzxzD8xtd/qlIvOLZR0rrS9v816ajAly u2OHTPi4lVtk/rI7ccO5C8uEMfrmXXTN6IJNyhqlprfCLDrICsGM3rXafADIkxBFGr0bXq6orGrM hJRMVQcdKdB5d/VqflqePmynjoorrIMnIfIEsfplYSsF3Uv8hAHxrHSldqOrl8aXvvyIh8d/UBx/ pQcw+0JQn9ebPCcMilCvNH2sKq+8SjJrmHNI1mjSxD5QLH3MMYIDXDCCA1gCAQEwXjBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTICChY3sr0AAQAAGTYwCQYFKw4DAhoFAKCCAdMwGAYJKoZIhvcNAQkD MQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTYwNjAxMTkxOTE1WjAjBgkqhkiG9w0BCQQx FgQUPizIsjFQAkt9c4bewKc2c/WqogEwbQYJKwYBBAGCNxAEMWAwXjBQMRMwEQYKCZImiZPyLGQB GRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENvcnBvcmF0aW9u IFBFIENBLTICChY3sMoAAQAAGTUwbwYLKoZIhvcNAQkQAgsxYKBeMFAxEzARBgoJkiaJk/IsZAEZ FgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUgQ29ycG9yYXRpb24g UEUgQ0EtMgIKFjewygABAAAZNTCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglg hkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG 9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATAN BgkqhkiG9w0BAQEFAASCAQBY6YULiV72ZkXvA2V3O40lfqqVs9JuzegVZPvOMCC0S1lk+4QHxMnq 4trt1Wfn5x9gxRbmlcwxV2lnK7dxhhLnUufCyJViZP5FRrN7VuoP140aui7BQUMZJ8sW+ORIKUBP UcBYHXxU18QcciVk1m+Bqvfg/bIy3QaWLuHOePRdFGGTixkgfYFVZKBL/Gn4csK9oQM/exVsbGI9 8563ahTAvd69/KzN/em/w/meNJqnsAWAuJaxpPiC+SKa7sAMYYMlDRzA8M8BmRikQz/gk3HQ/3Vr QBBdhbElmS5Ntar+cswNf5jvor8zO6YeSI2j9rKQuDAnFoZBDVSsg3/2p+mBAAAAAAAA ------=_NextPart_000_010F_01D1BC10.9392DFF0-- From nobody Wed Jun 1 17:10:37 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6A9EA12D642 for ; Wed, 1 Jun 2016 17:10:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4NrOozW2smRR for ; Wed, 1 Jun 2016 17:10:18 -0700 (PDT) Received: from mail-oi0-x233.google.com (mail-oi0-x233.google.com [IPv6:2607:f8b0:4003:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52A8912D63F for ; Wed, 1 Jun 2016 17:10:13 -0700 (PDT) Received: by mail-oi0-x233.google.com with SMTP id k23so53601964oih.0 for ; Wed, 01 Jun 2016 17:10:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=l56iILyvTIg21ncwRNEP3yl4nIHTATyKv48c78cyWUk=; b=ZQS5jWLfzwi82N9ooXkYi8XKfMgVwhK9jdWqG+pIL/VAQTq/E/7Em7U0wcWzt+/wO+ fg+wTIt3N3Ul+6bSqFIcHRy3w5xnmPRCX09RYpXqX0YwDx5oHWSnZYqMasb9R1o3WkFr Vj+jbjJObw+tVRVlNLDloHm8qCi/ookIy6cH1RbmKa6E1KekpWjQeg4MdyWxArkbcQsw w4/DlEXql3NtykBQ66m6CDKRYxTFj2x5r1hfG+JlToMGPZgraA22IuTzjOZoRJ4OLtzl jOPMYeUtXuYeDwzVATaPHFSULlvpCmbFOp9vXWDODELqjdZdyudTN8ZwLmIKvk7GJvJJ +o6w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=l56iILyvTIg21ncwRNEP3yl4nIHTATyKv48c78cyWUk=; b=amLxK8PsNPMRTW/EZMdF0gM5FISwH7M47uyJiQSDBOHc4CFZ0h3OAwMVeoF3+COD1v G2AEhotTS0QlFwxzsZFoSdX6ING6K+NHYrU/DWAHhAtxv3s93J8+Hcc6PUsJX3aXuWfU 4yue9hTz1dblfL4W23hLumVPuNDzTRFujYNgQYxSF8kLXXNB6+XJ6petCLmlMM5Y2fLF +KHIwgQaybtuivownDvwzh+NPR8+osqvz4XkBhIwRYLj28pDcOSIEG3eYFw3kwPVKozC +5LwULYjFMmz7T7VXD/c8uchAiEx/ZRNifC8VwpWyxxnwYI2hWIoNufinPjG2jXLJfbY KaOg== X-Gm-Message-State: ALyK8tIT7FPpt1/Se4zG+EPXrH8DJdDkTOy9W7BzBIB4fvnrY9n15na4sy4psf0Pbi5/8g== X-Received: by 10.202.61.197 with SMTP id k188mr25662179oia.203.1464826212636; Wed, 01 Jun 2016 17:10:12 -0700 (PDT) Received: from [192.168.2.39] (r74-192-164-154.gtwncmta01.grtntx.tl.dh.suddenlink.net. [74.192.164.154]) by smtp.gmail.com with ESMTPSA id 59sm22157324oti.32.2016.06.01.17.10.10 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 01 Jun 2016 17:10:11 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_F8573ECC-6857-482D-87A7-60B1C80918B4"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Wed, 1 Jun 2016 19:10:07 -0500 Message-Id: <1FF03FBD-47A9-44CB-91E9-1FEA8FE4BD9D@gmail.com> References: <827360a9-1c95-1a9a-50c0-12b0d6cf323d@ThreatGuard.com> <6bb4b3ef-7afa-d981-60cd-c90f7a4e23e8@ThreatGuard.com> <5707e531-ef34-5ea4-04c8-739d9c7be123@ThreatGuard.com> <6bacd100-1dd8-921a-1bc6-e4210760d1bf@ThreatGuard.com> To: "Schmidt, Charles M." X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Gunnar Engelbach , "sacm@ietf.org" Subject: Re: [sacm] Some technical details for SWID M&A proposals X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jun 2016 00:10:29 -0000 --Apple-Mail=_F8573ECC-6857-482D-87A7-60B1C80918B4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 To clarify, this isn=E2=80=99t as much about tags as it is about the = normalization of different tagging structures, correct? In that case, I = think that the normalization/translation should be happening on the = endpoints or from within those contexts. So, information would go from context-specific format to normalized = format for centralized needs (i.e. inventory assessment, reporting, what = have you). Then, if something needs to be done with that specific piece = of software at the endpoint, we may need a way to get back from the = normalized format to the context-specific format, or at least to = reference that context-specific format distinctly. Thoughts? > On Jun 1, 2016, at 2:19 PM, Schmidt, Charles M. = wrote: >=20 > Hi Gunnar, >=20 > Thanks, as always, for the good insights. If I can paraphrase what I = think I > am hearing: you are asserting that the use of certain tags is likely = to be > context dependent. Specifically, certain types of tags will primarily = be > used on certain OSs and/or on devices in a certain role. A centralized > normalization function needs to have translators for the tags of every > context in the enterprise. However, if translation is done on the = endpoints > (i.e., within that very context that is producing the tags) those = endpoints > only need to support the translators appropriate for their specific = context. > Moreover, as new contexts are added to an enterprise, I think you are > arguing that it is more natural to account for the new varieties of = tags > that could arise in those contexts locally (i.e., on the endpoint) = rather > than updating a central server every time a new context is added. >=20 > Do I have this correct? What are others' thoughts on this? >=20 > Thanks, > Charles >=20 >> -----Original Message----- >> From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] >> Sent: Tuesday, May 31, 2016 1:53 PM >> To: Schmidt, Charles M. ; Adam Montville >> >> Cc: sacm@ietf.org >> Subject: Re: [sacm] Some technical details for SWID M&A proposals >>=20 >>=20 >> The reality is that not all tagging formats are going to be = implemented >> on the first iteration and new ones will be devised and revisions = made >> to the existing ones. >>=20 >> Depending on the vendor, the most likely outcome is that only a few = of >> the most common tagging systems will ever be implemented and if your >> enterprise uses any others you are just out of luck -- unless you do >> some in-house work or some other vendor is willing to invest the time >> and effort into supporting the less common tag types. >>=20 >> If the normalization is done centrally by the Validator >>=20 >> If the normalization is done centrally by the Validator then the >> Validators (and every other consumer) needs to support all tag types >> right from the start, keep updating as the various tag formats = change, >> and be done thus by every vendor. >>=20 >> Which, I can guarantee, won't happen. And even if it did, the = develop >> and release cycle on large systems is typically 1 to 2 years, which = is >> just too large a gap in this space. >>=20 >> I also don't expect collectors to implement all tag types. Even >> accounting for the obvious omissions -- a Windows agent wouldn't be >> expected to have any awareness of tagging specific to OSX, HP-UX, >> Android, etc, -- I think we can count on agents having incomplete >> coverage. In fact, I think we should plan on that being the case. >>=20 >> But if the collector does the translation to a standardized format, = then >> that data is available for any SACM usage immediately with no need = for >> updates to any other part of the SACM environment. In the worst case = I >> would have my own IT department develop something to fill in the = gaps, >> and the only part they would need to worry about is the tag >> collector-to-common-DM for that specific tag type. >>=20 >> The downside is that I may need to install and maintain multiple = agents >> on some systems, but the most likely case is that that kind of >> customization will only be necessary to cover systems that otherwise >> wouldn't be covered at all. >>=20 >> So, yeah, your option (C) is what I would go with with (E) being the >> most palatable of any of the other options. >>=20 >>=20 >> --gun >>=20 >>=20 >> On 5/31/2016 10:52 AM, Schmidt, Charles M. wrote: >>> Hi Gunnar, >>>=20 >>> Comments below: >>>=20 >>>>>> 3) Tag information intended for use in a SACM environment is >> translated >>>>>> into a common standard data format prior to delivery from the >>>>>> collector. This will still create some limitation on the number = of >>>>>> formats supportable within a SACM environment since it is reliant = on >>> the >>>>>> collector being able to do that translation, but any data that = does >>>>>> enter the SACM sphere will be usable. >>>>> To me, this doesn't seem >>>>> different from the earlier concerns about the Posture Collector >>> receiving >>>>> data it cannot parse. >>>> Well, no, it's not commensurate, for at least three reasons: >>>>=20 >>>> 1) The tag types that need to be known to a collector is a subset = of >>>> all tag types, since a collector runs on a particular type of = system. > A >>>> Windows agent would not be expected to be able to handle = OSX-specific >>>> tag types. >>> True - I clearly overstated the burden on individual endpoints, so = thank > you >>> for the correction. >>>=20 >>> That said, from an enterprise perspective I would think the set of >>> translators would be constant regardless of whether translation = occurred >> on >>> endpoints or servers. If one endpoint has tags of interest that are = not > one >>> of the specified SACM forms, the appropriate translator needs to be >>> somewhere. The question is whether that somewhere should be the >> endpoint or >>> the server. (Or, as you note below, on the end-consumer.) >>=20 >>>> 2) Similar to (1), a single collector does not necessarily need to = be >>>> able to translate every tag type it could possibly come across. = This >>>> might be because multiple collection methods are in use, a = collector is >>>> built for a single narrow function, etc. >>> I think I agree, but I think I would phrase it differently. I would = say > that >>> not all tags on an endpoint are necessarily of interest to the > enterprise. >>> Some types of tags might be generally unreliable in nature (e.g., a = poor >>> correlator with software presence), might not have the needed = metadata >> bout >>> installed software products, or could be for software the enterprise >> doesn't >>> care about monitoring. In the first two cases, the presence of an > alternate >>> tag type from the same source (and covering the same products) could >> render >>> the second format completely unnecessary. >>>=20 >>> Are we saying the same thing using different words here? >>>=20 >>>> 3) There is more than one consumer for the collected data. It = could > be >>>> for vulnerability analysis, license administration, inventory, >>>> compliance, and so on. Every current and future use for that >>>> information would need to be able to parse every supported tag type = in >>>> order to do its function. A considerable amount of duplication to = say >>>> the very least. The same can be said for every other type of data > being >>>> collected from an endpoint. >>> I think you are talking about a scenario where every end consumer of > tags >> is >>> responsible for normalization. That is certainly yet another option > (call it >>> option 4), although I agree that it has the weaknesses you note = here. I >>> would argue that this is not equivalent to having normalization done = on > the >>> Posture Validator, which is more what I was thinking of in my = previous >>> email. >>>=20 >>> Given this discussion, it might be useful to recast our options = based on > who >>> is responsible for data normalization. >>>=20 >>> A) No normalization + data model. Posture Collectors collect and = SWID >> M&A >>> transports only a defined set of tag types and formats. All tags = that > are >>> not expressed in those formats are not collected and are ignored. > (Former >>> option 1) >>> B) No normalization + no data model. Posture Collectors collect and = SWID >> M&A >>> transports any type or format of tags. Tag consumers collecting tags > from >>> the CMDB/Posture Validator get whatever tags they can understand and >> other >>> types of tags are ignored. >>> C) Posture Collector normalization. The Posture Collector is = responsible > for >>> normalizing the tags collected on an endpoint prior to delivery to a > Posture >>> Validator. SWID M&A supports transmission of a defined set of tag = types >> and >>> formats, to which the Posture Collector translates. (Option 3 from > Gunnar's >>> earlier email) >>> D) Posture Validator normalization. Posture Collectors collect and = SWID >> M&A >>> transports any type or format of tags. The receiving Posture = Validator > is >>> responsible for normalizing the incoming data to a set of types and > formats >>> identified by SACM (but whose specification is outside the scope of = SWID >> M&A >>> itself). >>> E) Consumer normalization. Posture Collectors collect and SWID M&A >>> transports any type or format of tags. Tags are stored on the = Posture >>> Validator or CMDB until a consumer needs them. The consumer then >> collects >>> the relevant tags and is responsible for translating any tags into a > format >>> it can consume. (Option 4 from this email) >>>=20 >>> Gunnar, I believe you are an advocate of C, correct? I also think = both > of >>> use agree that options B and E are probably bad ideas since the data >>> consumers can have no idea as to what they are going to get. = Personally, > I >>> think I'm more of a fan of D - it has a centralized rather than > distributed >>> normalization function and can avoid unnecessary data loss. >>>=20 >>> Gunnar, have I misinterpreted any of your comments? Do others have = any >>> thoughts on this? >>>=20 >>> Thanks, >>> Charles >>>=20 >=20 --Apple-Mail=_F8573ECC-6857-482D-87A7-60B1C80918B4 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXT3liAAoJEDEhyx7etgAB+DAQAITU4t81kZIJVv36AXZ+Aqav JZA5iGBCeS3dMJdW4ZzhGq08CVh2npn277GfmsCCWutgW9eDrHHCSWEDIO6gEzh8 8089+vxloImMAyCs8S4HsdbP0ghjiPYjAk8GLAjU6uTGekKJVyx3xLEf1SiBLxUJ +1LJtQfvSMe5Jf3Y3BuIhxU7j97PsTyEgqgk3xj0PSxpWEh8QJJ46VibsuHxeZ7U djgJojEMP5gmXNmkB+Ju1hLQMyoDVwCRYB+TD13phYTOyrA4age1Vv+bBi3K6wfC R3z5HsmlrWlGB7qJO7/AKRyseu3KNcOiU8bJAm51lXli4TnUFFn+oPM8QS/oqfja OCkIi4yEM4CmuKS07LeNAJzKZJcJLsnluqUtM9xVI7b5AKynqtTdxq+4U41E8bYj vWedD0g42gZrasDrxCdePwt7gQNPU0cBvOxWb+2UmvBupFolJ5YbsS/8236mMyOc lLqse7Fs/YGy1fJHseriUlmJHsRsEEqeZ0cmZ3ArpOP8FHdRqkzjZpH/s8KNv2Ab cV+kGBSUt2sc6yM302LaRY1vmEJBzAN8jx9JHZNvKAY+L9K3xRQnx+2g6Lqgeg9n HTZVm4PNELh3RB/iPBpKSmrHmwoeJS/JhYCDVbSzfo1MZYt2SxBrFLDOmWVSo9b7 8NEvMA9zo7P99IFwTBE8 =ShEd -----END PGP SIGNATURE----- --Apple-Mail=_F8573ECC-6857-482D-87A7-60B1C80918B4-- From nobody Wed Jun 1 18:05:40 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1B11812D1E1 for ; Wed, 1 Jun 2016 18:05:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=threatguard-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LoO9GFU1m-NY for ; Wed, 1 Jun 2016 18:05:35 -0700 (PDT) Received: from mail-pa0-x22e.google.com (mail-pa0-x22e.google.com [IPv6:2607:f8b0:400e:c03::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0F60512B005 for ; Wed, 1 Jun 2016 18:05:35 -0700 (PDT) Received: by mail-pa0-x22e.google.com with SMTP id bz2so1174784pad.1 for ; Wed, 01 Jun 2016 18:05:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=threatguard-com.20150623.gappssmtp.com; s=20150623; h=from:subject:to:references:cc:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding; bh=j1hxoM7/n6jD8q+rRXvxfAphTFRqiWeZjBkq6Hq/5s0=; b=wL1lr3IsK/32+9v3n18zfVemBvGRzaPneGQ2ZFyJChaOn3j3ZJJF8CHKZm4Dguel4X jXUvTfnap78rRjO1VfGbAe3oZ+z5oayOfQbP0O0lIzaK+AlsRDdcn4nCnX9gDZgU4OGl w/TJcjl+ABZqq3kstspR2s9OQVjvskpnlGLOyKFUVJlA1iAv3qWRNH8LQUnJcRg+ynbf qpjStD3edXKlZ6ND+EIComczTrNuippuSpJ4a586mtG3s4FhlkPMPf5tYSsT6W407hjM 0GbFc2cOO+YZxFOv2EKlMn+LDoUDBZ/JSSxGcZVbGwYuueG44yEzodcHoJPLXKlIk9zp HaGw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:references:cc:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=j1hxoM7/n6jD8q+rRXvxfAphTFRqiWeZjBkq6Hq/5s0=; b=XW3A9IbQovIlwymMLfax9SY4oDEq+PN1NAEkm+R0bsW5BxUL3JbWSqZT418yCvoxUn 7J04VNykgMJE+2pAPRYfaa3cmg+zFApFrLKMQj0iK5zIGfOqEWm0CQs+cZNlYsG03GSO kvueqeBdynq39lxGhT8ch7KPmQMMIjzP76qtp4l8eiN6lUFj/y7G7VPAyKKkIWMSr46b qoBKNew561prctnp6+moXiTBnjfxuWydna+2vA6sSxidh/aDtGRYNagSkbjMNLXjtHq7 UzFuUdiuIaKqPkcZPqiMn4EiOhwki7I9BI4js7ksWDE5x5+aFFRyFjiW4I9FX0RMVN4r fbTA== X-Gm-Message-State: ALyK8tKkcduVOuXoagLca/mNWBRIWerZ9QQ1UWb4KMMuoZ4WqzTXS2pNwJuPdA0M6T7Z9Q== X-Received: by 10.66.141.139 with SMTP id ro11mr1755005pab.74.1464829534391; Wed, 01 Jun 2016 18:05:34 -0700 (PDT) Received: from [172.16.1.122] (75-142-12-171.dhcp.mdfd.or.charter.com. [75.142.12.171]) by smtp.gmail.com with ESMTPSA id g11sm50641567pfd.89.2016.06.01.18.05.32 (version=TLSv1/SSLv3 cipher=OTHER); Wed, 01 Jun 2016 18:05:33 -0700 (PDT) From: Gunnar Engelbach X-Google-Original-From: Gunnar Engelbach To: Adam Montville , "Schmidt, Charles M." References: <827360a9-1c95-1a9a-50c0-12b0d6cf323d@ThreatGuard.com> <6bb4b3ef-7afa-d981-60cd-c90f7a4e23e8@ThreatGuard.com> <5707e531-ef34-5ea4-04c8-739d9c7be123@ThreatGuard.com> <6bacd100-1dd8-921a-1bc6-e4210760d1bf@ThreatGuard.com> <1FF03FBD-47A9-44CB-91E9-1FEA8FE4BD9D@gmail.com> Message-ID: <34147ecb-60d8-536e-409d-315b6783f128@ThreatGuard.com> Date: Wed, 1 Jun 2016 18:05:36 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: <1FF03FBD-47A9-44CB-91E9-1FEA8FE4BD9D@gmail.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Some technical details for SWID M&A proposals X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jun 2016 01:05:38 -0000 Charles: Yes, that's a decent restatement of what I have in mind. Adam: In line, I think, with what you are saying, the sooner the data is transformed into the common format the sooner in its lifecycle components can be created that make use of that data. Doing it at the endpoint (or a proxy acting on behalf of an endpoint) is as far out on that limb as you can get. The drawback, however, is that the original tag information is not available, and that could represent a data loss -- or a lossy conversion, as Charles has been characterizing it. I think there are ways around that, such as retaining enough information such that an interested party could go back and get the original tag, but the actual process of doing something like that would be outside of the scope of SACM. And with that I'll linger a bit to see what others have to say. --gun On 6/1/2016 5:10 PM, Adam Montville wrote: > To clarify, this isn’t as much about tags as it is about the normalization of different tagging structures, correct? In that case, I think that the normalization/translation should be happening on the endpoints or from within those contexts. > > So, information would go from context-specific format to normalized format for centralized needs (i.e. inventory assessment, reporting, what have you). Then, if something needs to be done with that specific piece of software at the endpoint, we may need a way to get back from the normalized format to the context-specific format, or at least to reference that context-specific format distinctly. > > Thoughts? > > >> On Jun 1, 2016, at 2:19 PM, Schmidt, Charles M. wrote: >> >> Hi Gunnar, >> >> Thanks, as always, for the good insights. If I can paraphrase what I think I >> am hearing: you are asserting that the use of certain tags is likely to be >> context dependent. Specifically, certain types of tags will primarily be >> used on certain OSs and/or on devices in a certain role. A centralized >> normalization function needs to have translators for the tags of every >> context in the enterprise. However, if translation is done on the endpoints >> (i.e., within that very context that is producing the tags) those endpoints >> only need to support the translators appropriate for their specific context. >> Moreover, as new contexts are added to an enterprise, I think you are >> arguing that it is more natural to account for the new varieties of tags >> that could arise in those contexts locally (i.e., on the endpoint) rather >> than updating a central server every time a new context is added. >> >> Do I have this correct? What are others' thoughts on this? >> >> Thanks, >> Charles >> >>> -----Original Message----- >>> From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] >>> Sent: Tuesday, May 31, 2016 1:53 PM >>> To: Schmidt, Charles M. ; Adam Montville >>> >>> Cc: sacm@ietf.org >>> Subject: Re: [sacm] Some technical details for SWID M&A proposals >>> >>> >>> The reality is that not all tagging formats are going to be implemented >>> on the first iteration and new ones will be devised and revisions made >>> to the existing ones. >>> >>> Depending on the vendor, the most likely outcome is that only a few of >>> the most common tagging systems will ever be implemented and if your >>> enterprise uses any others you are just out of luck -- unless you do >>> some in-house work or some other vendor is willing to invest the time >>> and effort into supporting the less common tag types. >>> >>> If the normalization is done centrally by the Validator >>> >>> If the normalization is done centrally by the Validator then the >>> Validators (and every other consumer) needs to support all tag types >>> right from the start, keep updating as the various tag formats change, >>> and be done thus by every vendor. >>> >>> Which, I can guarantee, won't happen. And even if it did, the develop >>> and release cycle on large systems is typically 1 to 2 years, which is >>> just too large a gap in this space. >>> >>> I also don't expect collectors to implement all tag types. Even >>> accounting for the obvious omissions -- a Windows agent wouldn't be >>> expected to have any awareness of tagging specific to OSX, HP-UX, >>> Android, etc, -- I think we can count on agents having incomplete >>> coverage. In fact, I think we should plan on that being the case. >>> >>> But if the collector does the translation to a standardized format, then >>> that data is available for any SACM usage immediately with no need for >>> updates to any other part of the SACM environment. In the worst case I >>> would have my own IT department develop something to fill in the gaps, >>> and the only part they would need to worry about is the tag >>> collector-to-common-DM for that specific tag type. >>> >>> The downside is that I may need to install and maintain multiple agents >>> on some systems, but the most likely case is that that kind of >>> customization will only be necessary to cover systems that otherwise >>> wouldn't be covered at all. >>> >>> So, yeah, your option (C) is what I would go with with (E) being the >>> most palatable of any of the other options. >>> >>> >>> --gun >>> >>> >>> On 5/31/2016 10:52 AM, Schmidt, Charles M. wrote: >>>> Hi Gunnar, >>>> >>>> Comments below: >>>> >>>>>>> 3) Tag information intended for use in a SACM environment is >>> translated >>>>>>> into a common standard data format prior to delivery from the >>>>>>> collector. This will still create some limitation on the number of >>>>>>> formats supportable within a SACM environment since it is reliant on >>>> the >>>>>>> collector being able to do that translation, but any data that does >>>>>>> enter the SACM sphere will be usable. >>>>>> To me, this doesn't seem >>>>>> different from the earlier concerns about the Posture Collector >>>> receiving >>>>>> data it cannot parse. >>>>> Well, no, it's not commensurate, for at least three reasons: >>>>> >>>>> 1) The tag types that need to be known to a collector is a subset of >>>>> all tag types, since a collector runs on a particular type of system. >> A >>>>> Windows agent would not be expected to be able to handle OSX-specific >>>>> tag types. >>>> True - I clearly overstated the burden on individual endpoints, so thank >> you >>>> for the correction. >>>> >>>> That said, from an enterprise perspective I would think the set of >>>> translators would be constant regardless of whether translation occurred >>> on >>>> endpoints or servers. If one endpoint has tags of interest that are not >> one >>>> of the specified SACM forms, the appropriate translator needs to be >>>> somewhere. The question is whether that somewhere should be the >>> endpoint or >>>> the server. (Or, as you note below, on the end-consumer.) >>>>> 2) Similar to (1), a single collector does not necessarily need to be >>>>> able to translate every tag type it could possibly come across. This >>>>> might be because multiple collection methods are in use, a collector is >>>>> built for a single narrow function, etc. >>>> I think I agree, but I think I would phrase it differently. I would say >> that >>>> not all tags on an endpoint are necessarily of interest to the >> enterprise. >>>> Some types of tags might be generally unreliable in nature (e.g., a poor >>>> correlator with software presence), might not have the needed metadata >>> bout >>>> installed software products, or could be for software the enterprise >>> doesn't >>>> care about monitoring. In the first two cases, the presence of an >> alternate >>>> tag type from the same source (and covering the same products) could >>> render >>>> the second format completely unnecessary. >>>> >>>> Are we saying the same thing using different words here? >>>> >>>>> 3) There is more than one consumer for the collected data. It could >> be >>>>> for vulnerability analysis, license administration, inventory, >>>>> compliance, and so on. Every current and future use for that >>>>> information would need to be able to parse every supported tag type in >>>>> order to do its function. A considerable amount of duplication to say >>>>> the very least. The same can be said for every other type of data >> being >>>>> collected from an endpoint. >>>> I think you are talking about a scenario where every end consumer of >> tags >>> is >>>> responsible for normalization. That is certainly yet another option >> (call it >>>> option 4), although I agree that it has the weaknesses you note here. I >>>> would argue that this is not equivalent to having normalization done on >> the >>>> Posture Validator, which is more what I was thinking of in my previous >>>> email. >>>> >>>> Given this discussion, it might be useful to recast our options based on >> who >>>> is responsible for data normalization. >>>> >>>> A) No normalization + data model. Posture Collectors collect and SWID >>> M&A >>>> transports only a defined set of tag types and formats. All tags that >> are >>>> not expressed in those formats are not collected and are ignored. >> (Former >>>> option 1) >>>> B) No normalization + no data model. Posture Collectors collect and SWID >>> M&A >>>> transports any type or format of tags. Tag consumers collecting tags >> from >>>> the CMDB/Posture Validator get whatever tags they can understand and >>> other >>>> types of tags are ignored. >>>> C) Posture Collector normalization. The Posture Collector is responsible >> for >>>> normalizing the tags collected on an endpoint prior to delivery to a >> Posture >>>> Validator. SWID M&A supports transmission of a defined set of tag types >>> and >>>> formats, to which the Posture Collector translates. (Option 3 from >> Gunnar's >>>> earlier email) >>>> D) Posture Validator normalization. Posture Collectors collect and SWID >>> M&A >>>> transports any type or format of tags. The receiving Posture Validator >> is >>>> responsible for normalizing the incoming data to a set of types and >> formats >>>> identified by SACM (but whose specification is outside the scope of SWID >>> M&A >>>> itself). >>>> E) Consumer normalization. Posture Collectors collect and SWID M&A >>>> transports any type or format of tags. Tags are stored on the Posture >>>> Validator or CMDB until a consumer needs them. The consumer then >>> collects >>>> the relevant tags and is responsible for translating any tags into a >> format >>>> it can consume. (Option 4 from this email) >>>> >>>> Gunnar, I believe you are an advocate of C, correct? I also think both >> of >>>> use agree that options B and E are probably bad ideas since the data >>>> consumers can have no idea as to what they are going to get. Personally, >> I >>>> think I'm more of a fan of D - it has a centralized rather than >> distributed >>>> normalization function and can avoid unnecessary data loss. >>>> >>>> Gunnar, have I misinterpreted any of your comments? Do others have any >>>> thoughts on this? >>>> >>>> Thanks, >>>> Charles >>>> From nobody Thu Jun 2 07:34:16 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2F1DF12D73A for ; Thu, 2 Jun 2016 07:34:15 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.003 X-Spam-Level: X-Spam-Status: No, score=-2.003 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=-0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tG9FFMhlEMUl for ; Thu, 2 Jun 2016 07:34:12 -0700 (PDT) Received: from na01-bl2-obe.outbound.protection.outlook.com (mail-bl2on0140.outbound.protection.outlook.com [65.55.169.140]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3214712D742 for ; Thu, 2 Jun 2016 07:34:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=xlE/TtorbCsY6OgPBRww6ZzSoxwjl1YdyLsXezT9SII=; b=k1AEHPlfv7GqvLXMMyPDqSLEdKNTShneTADrZHzug378Cv/nKkoKjPXS126oODrnoLElfaLDFTedW2no5LEscbA1Q1vEZtExpakPMze1GNJmA4pDgUMCbHQ7PDh4FYUx8cg7RMBdLMxjEgEGODY4YxZKs+5JQw5maFgTP6H8p+k= Received: from BN1PR03MB123.namprd03.prod.outlook.com (10.255.201.27) by BN1PR03MB122.namprd03.prod.outlook.com (10.255.201.19) with Microsoft SMTP Server (TLS) id 15.1.497.12; Thu, 2 Jun 2016 14:34:09 +0000 Received: from BN1PR03MB123.namprd03.prod.outlook.com ([169.254.11.56]) by BN1PR03MB123.namprd03.prod.outlook.com ([169.254.11.56]) with mapi id 15.01.0497.019; Thu, 2 Jun 2016 14:34:09 +0000 From: Michael Godsey To: Gunnar Engelbach , Adam Montville , "Schmidt, Charles M." Thread-Topic: [sacm] Some technical details for SWID M&A proposals Thread-Index: AQHRvGM4QPRIJzVOyEGLmQEC5y3Mgp/VXPcAgADfQzA= Date: Thu, 2 Jun 2016 14:34:09 +0000 Message-ID: References: <827360a9-1c95-1a9a-50c0-12b0d6cf323d@ThreatGuard.com> <6bb4b3ef-7afa-d981-60cd-c90f7a4e23e8@ThreatGuard.com> <5707e531-ef34-5ea4-04c8-739d9c7be123@ThreatGuard.com> <6bacd100-1dd8-921a-1bc6-e4210760d1bf@ThreatGuard.com> <1FF03FBD-47A9-44CB-91E9-1FEA8FE4BD9D@gmail.com> <34147ecb-60d8-536e-409d-315b6783f128@ThreatGuard.com> In-Reply-To: <34147ecb-60d8-536e-409d-315b6783f128@ThreatGuard.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: threatguard.com; dkim=none (message not signed) header.d=none;threatguard.com; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [131.107.147.195] x-ms-office365-filtering-correlation-id: 62f40fab-2ac7-4a50-0a05-08d38af2f593 x-microsoft-exchange-diagnostics: 1; BN1PR03MB122; 5:zvKupx9yv+tbRlc2ZC1ZZ31ysAbq15WTY94Ikv0mX+ZTGyiH+4qv9UYQh+5I2B2vSEUbi3/hjmkvuCZ/HPRCKmDHomlSNXTyJzuXZRhboyCNxvndKauJ3anL+pTYRf9vDc1Llqf8bU+hJuY/I1FsfA==; 24:yr3VCKiVEGEbZO4UuQp9/xed/32AvqkcNcR+Yn1KD1XzjuRyKUqPZtBHTtiU3OJB1l9aZ80FUPD41GQFT/ulQWz1GDpER4ytuWS9VT9apD4=; 7:2xC78ukysgbyMSF46EnIl7gPv+nVrJBgWPVASxsf3QZTY1KYr0V0gK3Y4Ody7spfXJ07dpx5mwCtJOgZMqGp1GHK+ZM8MMo21A22wjIfb7pZT6JUFMeUH55XWLyvHr4y2R0vtaqOKE+JGKPL6pY1zTxpzhx8HXsDQxyqjvMqQfYXM/Yx633FQLcQYugwjxaQnxwLnh2MaZz3IgRxPxL5RQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR03MB122; x-o365eop-header: O365_EOP: Allow for Unauthenticated Relay x-o365ent-eop-header: Message processed by - O365_ENT: Allow from ranges (Engineering ONLY) x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(72170088055959)(211171220733660); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026)(61426038)(61427038); SRVR:BN1PR03MB122; BCL:0; PCL:0; RULEID:; SRVR:BN1PR03MB122; x-forefront-prvs: 0961DF5286 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(13464003)(51444003)(24454002)(52314003)(377454003)(33656002)(76176999)(5001770100001)(54356999)(81166006)(3846002)(19580405001)(5004730100002)(189998001)(5005710100001)(10290500002)(106116001)(99286002)(86362001)(5008740100001)(11100500001)(102836003)(15975445007)(10400500002)(93886004)(50986999)(6116002)(4326007)(9686002)(10090500001)(8936002)(19580395003)(92566002)(3280700002)(74316001)(2900100001)(5002640100001)(87936001)(2950100001)(66066001)(8676002)(586003)(3660700001)(2906002)(122556002)(5003600100002)(76576001)(31430400001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR03MB122; H:BN1PR03MB123.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jun 2016 14:34:09.1308 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR03MB122 Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Some technical details for SWID M&A proposals X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jun 2016 14:34:15 -0000 QWx0aG91Z2ggSSBhZ3JlZSB0aGF0IGRhdGEgdHJhbnNmb3JtYXRpb24gYXQgdGhlIGVuZCBwb2lu dCBpcyBhcyBmYXIgb3V0IG9uIHRoZSBsaW1iIGFzIHlvdSBjYW4gZ2V0IChzaG9ydCBvZiBkYXRh IGNyZWF0aW9uIGl0c2VsZiBiZWluZyBkb25lIGZvciBhbGwgZm9ybWF0cyBuZWVkZWQsIG5vdCBs aWtlbHkgdG8gZXZlciBoYXBwZW4pLCBJIHRoaW5rIHRoYXQgd291bGQgYmUgdmVyeSBkaWZmaWN1 bHQgdG8gZXhwZWN0IG9uIGEgZ29vZCBudW1iZXIgb2YgZW5kcG9pbnRzLiAgIEl0IGRvZXNuJ3Qg bWFrZSBzZW5zZSB0byBleHBlY3QgZWFjaCBlbmRwb2ludCB0byBoYXZlIHRoZSBjYXBhYmlsaXR5 IHRvIHRyYW5zcG9zZSBmcm9tIGFsbCB0aGUgZGlmZmVyZW50IHBvdGVudGlhbCBmb3JtYXRzLiAg IFNvbWUgd29uJ3QgaGF2ZSBwcm9jZXNzaW5nIGNhcGFiaWxpdHkgdG8gZG8gc28sIHNvbWUgd29u J3QgaGF2ZSByb29tIG9uIHRoZSBlbmRwb2ludCBmb3Igc3VjaCBhIHRyYW5zcG9zaXRpb24gc2Vy dmljZSwgZXRjLiAgIEl0IHNlZW1zIG11Y2ggbW9yZSBsaWtlbHkgdGhlcmUgd291bGQgbmVlZCB0 byBiZSBhbiBhZ2dyZWdhdG9yIHNlcnZpY2UgdGhhdCBwdWxscyBmcm9tIGVhY2ggZW5kcG9pbnQg YW5kIGtub3dzIGhvdyB0byBkbyB0aGUgdHJhbnNwb3NpdGlvbi4gIFRoaXMgaXMgcHJvYmFibHkg dGhlIHByb3h5IHlvdSByZWZlcmVuY2UsIHRob3VnaCBJIGRvbid0IHRoaW5rIG9mIHRoYXQgdGVy bSBpbiByZWxhdGlvbiB0byBjb2xsZWN0aW5nIGFuZCB0cmFuc3Bvc2luZyBkYXRhLiAgQnV0IG1h eWJlIHRoZSB0ZXJtIGFnZ3JlZ2F0b3IgZG9lc24ndCByZXNvbmF0ZSB3ZWxsIHdpdGggZXZlcnlv bmUgZWl0aGVyLg0KDQpSZTogdGhlIGxvc3N5IGNvbnZlcnNpb24gaXNzdWUsIEkgZG8gdGhpbmsg dGhhdCBhIHJlcG9zaXRvcnkgb2YgdGFnIGRhdGEgaGVscHMgYWRkcmVzcyB0aGlzLCB3aGVyZWJ5 IHlvdSBjYW4gdXNlIGEgdGFnIElEIGFuZCBoaXQgdXAgYSBzZXJ2aWNlIHRvIHJldHJpZXZlIHRo ZSB0YWcncyBmdWxsIGFuZCBvcmlnaW5hbCBkYXRhLCB3b3VsZCBiZSBtdWNoIG5lZWRlZC4gICBX ZSBzdGFydGVkIGRpc2N1c3Npbmcgb24gdGhlIG5lZWQgZm9yIHNvbWUgc3RhbmRhcmQgZm9yIHRh ZyByZXBvc2l0b3J5IHNlcnZpY2UgYXQgdGhlIE5JU1Qgd29ya3Nob3Agb24gVGFnIGltcGxlbWVu dGF0aW9uIGluIEFwcmlsLCBhbmQgYXJlIGNyZWF0aW5nIGEgVGFnIFZhdWx0IHdvcmsgZ3JvdXAg dG8gbG9vayBhdCBhZGRyZXNzaW5nIHRoYXQuICBQcm9iYWJseSBlbm91Z2ggdG8gc2F5IGl0IHdv dWxkIGJlIG91dCBvZiBzY29wZSBmb3IgdGhpcyBTQUNNIGVmZm9ydCwgYWx0aG91Z2gga25vd2lu ZyB0aGF0IHN1Y2ggYSBzdGFuZGFyZHMgY29tcGxpYW50IHNlcnZpY2UgZXhpc3RlZCBhbmQgY292 ZXJpbmcgaG93IChjb25jZXB0dWFsbHkgYW55d2F5LCBhdCB0aGlzIHBvaW50KSB2YXJpb3VzIG1v bml0b3Jpbmcgc2VydmljZXMgY291bGQgdXRpbGl6ZSBzdWNoIGEgdGFnIHJlcG9zaXRvcnksIHdv dWxkIGJlIGhlbHBmdWwgdG8gYWRkcmVzcyBJIHRoaW5rLg0KDQotLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KRnJvbTogc2FjbSBbbWFpbHRvOnNhY20tYm91bmNlc0BpZXRmLm9yZ10gT24gQmVo YWxmIE9mIEd1bm5hciBFbmdlbGJhY2gNClNlbnQ6IFdlZG5lc2RheSwgSnVuZSAxLCAyMDE2IDY6 MDYgUE0NClRvOiBBZGFtIE1vbnR2aWxsZSA8YWRhbS53Lm1vbnR2aWxsZUBnbWFpbC5jb20+OyBT Y2htaWR0LCBDaGFybGVzIE0uIDxjbXNjaG1pZHRAbWl0cmUub3JnPg0KQ2M6IHNhY21AaWV0Zi5v cmcNClN1YmplY3Q6IFJlOiBbc2FjbV0gU29tZSB0ZWNobmljYWwgZGV0YWlscyBmb3IgU1dJRCBN JkEgcHJvcG9zYWxzDQoNCg0KQ2hhcmxlczogIFllcywgdGhhdCdzIGEgZGVjZW50IHJlc3RhdGVt ZW50IG9mIHdoYXQgSSBoYXZlIGluIG1pbmQuDQoNCkFkYW06ICBJbiBsaW5lLCBJIHRoaW5rLCB3 aXRoIHdoYXQgeW91IGFyZSBzYXlpbmcsIHRoZSBzb29uZXIgdGhlIGRhdGEgaXMgdHJhbnNmb3Jt ZWQgaW50byB0aGUgY29tbW9uIGZvcm1hdCB0aGUgc29vbmVyIGluIGl0cyBsaWZlY3ljbGUgY29t cG9uZW50cyBjYW4gYmUgY3JlYXRlZCB0aGF0IG1ha2UgdXNlIG9mIHRoYXQgZGF0YS4gRG9pbmcg aXQgYXQgdGhlIGVuZHBvaW50IChvciBhIHByb3h5IGFjdGluZyBvbiBiZWhhbGYgb2YgYW4gZW5k cG9pbnQpIGlzIGFzIGZhciBvdXQgb24gdGhhdCBsaW1iIGFzIHlvdSBjYW4gZ2V0Lg0KDQpUaGUg ZHJhd2JhY2ssIGhvd2V2ZXIsIGlzIHRoYXQgdGhlIG9yaWdpbmFsIHRhZyBpbmZvcm1hdGlvbiBp cyBub3QgYXZhaWxhYmxlLCBhbmQgdGhhdCBjb3VsZCByZXByZXNlbnQgYSBkYXRhIGxvc3MgLS0g b3IgYSBsb3NzeSBjb252ZXJzaW9uLCBhcyBDaGFybGVzIGhhcyBiZWVuIGNoYXJhY3Rlcml6aW5n IGl0LiAgSSB0aGluayB0aGVyZSBhcmUgd2F5cyBhcm91bmQgdGhhdCwgc3VjaCBhcyByZXRhaW5p bmcgZW5vdWdoIGluZm9ybWF0aW9uIHN1Y2ggdGhhdCBhbiBpbnRlcmVzdGVkIHBhcnR5IGNvdWxk IGdvIGJhY2sgYW5kIGdldCB0aGUgb3JpZ2luYWwgdGFnLCBidXQgdGhlIGFjdHVhbCBwcm9jZXNz IG9mIGRvaW5nIHNvbWV0aGluZyBsaWtlIHRoYXQgd291bGQgYmUgb3V0c2lkZSBvZiB0aGUgc2Nv cGUgb2YgU0FDTS4NCg0KQW5kIHdpdGggdGhhdCBJJ2xsIGxpbmdlciBhIGJpdCB0byBzZWUgd2hh dCBvdGhlcnMgaGF2ZSB0byBzYXkuDQoNCg0KLS1ndW4NCg0KDQpPbiA2LzEvMjAxNiA1OjEwIFBN LCBBZGFtIE1vbnR2aWxsZSB3cm90ZToNCj4gVG8gY2xhcmlmeSwgdGhpcyBpc27igJl0IGFzIG11 Y2ggYWJvdXQgdGFncyBhcyBpdCBpcyBhYm91dCB0aGUgbm9ybWFsaXphdGlvbiBvZiBkaWZmZXJl bnQgdGFnZ2luZyBzdHJ1Y3R1cmVzLCBjb3JyZWN0PyAgSW4gdGhhdCBjYXNlLCBJIHRoaW5rIHRo YXQgdGhlIG5vcm1hbGl6YXRpb24vdHJhbnNsYXRpb24gc2hvdWxkIGJlIGhhcHBlbmluZyBvbiB0 aGUgZW5kcG9pbnRzIG9yIGZyb20gd2l0aGluIHRob3NlIGNvbnRleHRzLg0KPg0KPiBTbywgaW5m b3JtYXRpb24gd291bGQgZ28gZnJvbSBjb250ZXh0LXNwZWNpZmljIGZvcm1hdCB0byBub3JtYWxp emVkIGZvcm1hdCBmb3IgY2VudHJhbGl6ZWQgbmVlZHMgKGkuZS4gaW52ZW50b3J5IGFzc2Vzc21l bnQsIHJlcG9ydGluZywgd2hhdCBoYXZlIHlvdSkuICBUaGVuLCBpZiBzb21ldGhpbmcgbmVlZHMg dG8gYmUgZG9uZSB3aXRoIHRoYXQgc3BlY2lmaWMgcGllY2Ugb2Ygc29mdHdhcmUgYXQgdGhlIGVu ZHBvaW50LCB3ZSBtYXkgbmVlZCBhIHdheSB0byBnZXQgYmFjayBmcm9tIHRoZSBub3JtYWxpemVk IGZvcm1hdCB0byB0aGUgY29udGV4dC1zcGVjaWZpYyBmb3JtYXQsIG9yIGF0IGxlYXN0IHRvIHJl ZmVyZW5jZSB0aGF0IGNvbnRleHQtc3BlY2lmaWMgZm9ybWF0IGRpc3RpbmN0bHkuDQo+DQo+IFRo b3VnaHRzPw0KPg0KPg0KPj4gT24gSnVuIDEsIDIwMTYsIGF0IDI6MTkgUE0sIFNjaG1pZHQsIENo YXJsZXMgTS4gPGNtc2NobWlkdEBtaXRyZS5vcmc+IHdyb3RlOg0KPj4NCj4+IEhpIEd1bm5hciwN Cj4+DQo+PiBUaGFua3MsIGFzIGFsd2F5cywgZm9yIHRoZSBnb29kIGluc2lnaHRzLiBJZiBJIGNh biBwYXJhcGhyYXNlIHdoYXQgSSANCj4+IHRoaW5rIEkgYW0gaGVhcmluZzogeW91IGFyZSBhc3Nl cnRpbmcgdGhhdCB0aGUgdXNlIG9mIGNlcnRhaW4gdGFncyBpcyANCj4+IGxpa2VseSB0byBiZSBj b250ZXh0IGRlcGVuZGVudC4gU3BlY2lmaWNhbGx5LCBjZXJ0YWluIHR5cGVzIG9mIHRhZ3MgDQo+ PiB3aWxsIHByaW1hcmlseSBiZSB1c2VkIG9uIGNlcnRhaW4gT1NzIGFuZC9vciBvbiBkZXZpY2Vz IGluIGEgY2VydGFpbiANCj4+IHJvbGUuIEEgY2VudHJhbGl6ZWQgbm9ybWFsaXphdGlvbiBmdW5j dGlvbiBuZWVkcyB0byBoYXZlIHRyYW5zbGF0b3JzIA0KPj4gZm9yIHRoZSB0YWdzIG9mIGV2ZXJ5 IGNvbnRleHQgaW4gdGhlIGVudGVycHJpc2UuIEhvd2V2ZXIsIGlmIA0KPj4gdHJhbnNsYXRpb24g aXMgZG9uZSBvbiB0aGUgZW5kcG9pbnRzIChpLmUuLCB3aXRoaW4gdGhhdCB2ZXJ5IGNvbnRleHQg DQo+PiB0aGF0IGlzIHByb2R1Y2luZyB0aGUgdGFncykgdGhvc2UgZW5kcG9pbnRzIG9ubHkgbmVl ZCB0byBzdXBwb3J0IHRoZSB0cmFuc2xhdG9ycyBhcHByb3ByaWF0ZSBmb3IgdGhlaXIgc3BlY2lm aWMgY29udGV4dC4NCj4+IE1vcmVvdmVyLCBhcyBuZXcgY29udGV4dHMgYXJlIGFkZGVkIHRvIGFu IGVudGVycHJpc2UsIEkgdGhpbmsgeW91IGFyZSANCj4+IGFyZ3VpbmcgdGhhdCBpdCBpcyBtb3Jl IG5hdHVyYWwgdG8gYWNjb3VudCBmb3IgdGhlIG5ldyB2YXJpZXRpZXMgb2YgDQo+PiB0YWdzIHRo YXQgY291bGQgYXJpc2UgaW4gdGhvc2UgY29udGV4dHMgbG9jYWxseSAoaS5lLiwgb24gdGhlIA0K Pj4gZW5kcG9pbnQpIHJhdGhlciB0aGFuIHVwZGF0aW5nIGEgY2VudHJhbCBzZXJ2ZXIgZXZlcnkg dGltZSBhIG5ldyBjb250ZXh0IGlzIGFkZGVkLg0KPj4NCj4+IERvIEkgaGF2ZSB0aGlzIGNvcnJl Y3Q/IFdoYXQgYXJlIG90aGVycycgdGhvdWdodHMgb24gdGhpcz8NCj4+DQo+PiBUaGFua3MsDQo+ PiBDaGFybGVzDQo+Pg0KPj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+Pj4gRnJvbTog R3VubmFyIEVuZ2VsYmFjaCBbbWFpbHRvOmd1bm5hci5lbmdlbGJhY2hAdGhyZWF0Z3VhcmQuY29t XQ0KPj4+IFNlbnQ6IFR1ZXNkYXksIE1heSAzMSwgMjAxNiAxOjUzIFBNDQo+Pj4gVG86IFNjaG1p ZHQsIENoYXJsZXMgTS4gPGNtc2NobWlkdEBtaXRyZS5vcmc+OyBBZGFtIE1vbnR2aWxsZSANCj4+ PiA8YWRhbS53Lm1vbnR2aWxsZUBnbWFpbC5jb20+DQo+Pj4gQ2M6IHNhY21AaWV0Zi5vcmcNCj4+ PiBTdWJqZWN0OiBSZTogW3NhY21dIFNvbWUgdGVjaG5pY2FsIGRldGFpbHMgZm9yIFNXSUQgTSZB IHByb3Bvc2Fscw0KPj4+DQo+Pj4NCj4+PiBUaGUgcmVhbGl0eSBpcyB0aGF0IG5vdCBhbGwgdGFn Z2luZyBmb3JtYXRzIGFyZSBnb2luZyB0byBiZSANCj4+PiBpbXBsZW1lbnRlZCBvbiB0aGUgZmly c3QgaXRlcmF0aW9uIGFuZCBuZXcgb25lcyB3aWxsIGJlIGRldmlzZWQgYW5kIA0KPj4+IHJldmlz aW9ucyBtYWRlIHRvIHRoZSBleGlzdGluZyBvbmVzLg0KPj4+DQo+Pj4gRGVwZW5kaW5nIG9uIHRo ZSB2ZW5kb3IsIHRoZSBtb3N0IGxpa2VseSBvdXRjb21lIGlzIHRoYXQgb25seSBhIGZldyANCj4+ PiBvZiB0aGUgbW9zdCBjb21tb24gdGFnZ2luZyBzeXN0ZW1zIHdpbGwgZXZlciBiZSBpbXBsZW1l bnRlZCBhbmQgaWYgDQo+Pj4geW91ciBlbnRlcnByaXNlIHVzZXMgYW55IG90aGVycyB5b3UgYXJl IGp1c3Qgb3V0IG9mIGx1Y2sgLS0gdW5sZXNzIA0KPj4+IHlvdSBkbyBzb21lIGluLWhvdXNlIHdv cmsgb3Igc29tZSBvdGhlciB2ZW5kb3IgaXMgd2lsbGluZyB0byBpbnZlc3QgDQo+Pj4gdGhlIHRp bWUgYW5kIGVmZm9ydCBpbnRvIHN1cHBvcnRpbmcgdGhlIGxlc3MgY29tbW9uIHRhZyB0eXBlcy4N Cj4+Pg0KPj4+IElmIHRoZSBub3JtYWxpemF0aW9uIGlzIGRvbmUgY2VudHJhbGx5IGJ5IHRoZSBW YWxpZGF0b3INCj4+Pg0KPj4+IElmIHRoZSBub3JtYWxpemF0aW9uIGlzIGRvbmUgY2VudHJhbGx5 IGJ5IHRoZSBWYWxpZGF0b3IgdGhlbiB0aGUgDQo+Pj4gVmFsaWRhdG9ycyAoYW5kIGV2ZXJ5IG90 aGVyIGNvbnN1bWVyKSBuZWVkcyB0byBzdXBwb3J0IGFsbCB0YWcgdHlwZXMgDQo+Pj4gcmlnaHQg ZnJvbSB0aGUgc3RhcnQsIGtlZXAgdXBkYXRpbmcgYXMgdGhlIHZhcmlvdXMgdGFnIGZvcm1hdHMg DQo+Pj4gY2hhbmdlLCBhbmQgYmUgZG9uZSB0aHVzIGJ5IGV2ZXJ5IHZlbmRvci4NCj4+Pg0KPj4+ IFdoaWNoLCBJIGNhbiBndWFyYW50ZWUsIHdvbid0IGhhcHBlbi4gIEFuZCBldmVuIGlmIGl0IGRp ZCwgdGhlIA0KPj4+IGRldmVsb3AgYW5kIHJlbGVhc2UgY3ljbGUgb24gbGFyZ2Ugc3lzdGVtcyBp cyB0eXBpY2FsbHkgMSB0byAyIA0KPj4+IHllYXJzLCB3aGljaCBpcyBqdXN0IHRvbyBsYXJnZSBh IGdhcCBpbiB0aGlzIHNwYWNlLg0KPj4+DQo+Pj4gSSBhbHNvIGRvbid0IGV4cGVjdCBjb2xsZWN0 b3JzIHRvIGltcGxlbWVudCBhbGwgdGFnIHR5cGVzLiAgRXZlbiANCj4+PiBhY2NvdW50aW5nIGZv ciB0aGUgb2J2aW91cyBvbWlzc2lvbnMgLS0gYSBXaW5kb3dzIGFnZW50IHdvdWxkbid0IGJlIA0K Pj4+IGV4cGVjdGVkIHRvIGhhdmUgYW55IGF3YXJlbmVzcyBvZiB0YWdnaW5nIHNwZWNpZmljIHRv IE9TWCwgSFAtVVgsIA0KPj4+IEFuZHJvaWQsIGV0YywgIC0tIEkgdGhpbmsgd2UgY2FuIGNvdW50 IG9uIGFnZW50cyBoYXZpbmcgaW5jb21wbGV0ZSANCj4+PiBjb3ZlcmFnZS4gIEluIGZhY3QsIEkg dGhpbmsgd2Ugc2hvdWxkIHBsYW4gb24gdGhhdCBiZWluZyB0aGUgY2FzZS4NCj4+Pg0KPj4+IEJ1 dCBpZiB0aGUgY29sbGVjdG9yIGRvZXMgdGhlIHRyYW5zbGF0aW9uIHRvIGEgc3RhbmRhcmRpemVk IGZvcm1hdCwgDQo+Pj4gdGhlbiB0aGF0IGRhdGEgaXMgYXZhaWxhYmxlIGZvciBhbnkgU0FDTSB1 c2FnZSBpbW1lZGlhdGVseSB3aXRoIG5vIA0KPj4+IG5lZWQgZm9yIHVwZGF0ZXMgdG8gYW55IG90 aGVyIHBhcnQgb2YgdGhlIFNBQ00gZW52aXJvbm1lbnQuICBJbiB0aGUgDQo+Pj4gd29yc3QgY2Fz ZSBJIHdvdWxkIGhhdmUgbXkgb3duIElUIGRlcGFydG1lbnQgZGV2ZWxvcCBzb21ldGhpbmcgdG8g DQo+Pj4gZmlsbCBpbiB0aGUgZ2FwcywgYW5kIHRoZSBvbmx5IHBhcnQgdGhleSB3b3VsZCBuZWVk IHRvIHdvcnJ5IGFib3V0IA0KPj4+IGlzIHRoZSB0YWcgY29sbGVjdG9yLXRvLWNvbW1vbi1ETSBm b3IgdGhhdCBzcGVjaWZpYyB0YWcgdHlwZS4NCj4+Pg0KPj4+IFRoZSBkb3duc2lkZSBpcyB0aGF0 IEkgbWF5IG5lZWQgdG8gaW5zdGFsbCBhbmQgbWFpbnRhaW4gbXVsdGlwbGUgDQo+Pj4gYWdlbnRz IG9uIHNvbWUgc3lzdGVtcywgYnV0IHRoZSBtb3N0IGxpa2VseSBjYXNlIGlzIHRoYXQgdGhhdCBr aW5kIA0KPj4+IG9mIGN1c3RvbWl6YXRpb24gd2lsbCBvbmx5IGJlIG5lY2Vzc2FyeSB0byBjb3Zl ciBzeXN0ZW1zIHRoYXQgDQo+Pj4gb3RoZXJ3aXNlIHdvdWxkbid0IGJlIGNvdmVyZWQgYXQgYWxs Lg0KPj4+DQo+Pj4gU28sIHllYWgsIHlvdXIgb3B0aW9uIChDKSBpcyB3aGF0IEkgd291bGQgZ28g d2l0aCB3aXRoIChFKSBiZWluZyB0aGUgDQo+Pj4gbW9zdCBwYWxhdGFibGUgb2YgYW55IG9mIHRo ZSBvdGhlciBvcHRpb25zLg0KPj4+DQo+Pj4NCj4+PiAtLWd1bg0KPj4+DQo+Pj4NCj4+PiBPbiA1 LzMxLzIwMTYgMTA6NTIgQU0sIFNjaG1pZHQsIENoYXJsZXMgTS4gd3JvdGU6DQo+Pj4+IEhpIEd1 bm5hciwNCj4+Pj4NCj4+Pj4gQ29tbWVudHMgYmVsb3c6DQo+Pj4+DQo+Pj4+Pj4+IDMpIFRhZyBp bmZvcm1hdGlvbiBpbnRlbmRlZCBmb3IgdXNlIGluIGEgU0FDTSBlbnZpcm9ubWVudCBpcw0KPj4+ IHRyYW5zbGF0ZWQNCj4+Pj4+Pj4gaW50byBhIGNvbW1vbiBzdGFuZGFyZCBkYXRhIGZvcm1hdCBw cmlvciB0byBkZWxpdmVyeSBmcm9tIHRoZSANCj4+Pj4+Pj4gY29sbGVjdG9yLiAgVGhpcyB3aWxs IHN0aWxsIGNyZWF0ZSBzb21lIGxpbWl0YXRpb24gb24gdGhlIG51bWJlciANCj4+Pj4+Pj4gb2Yg Zm9ybWF0cyBzdXBwb3J0YWJsZSB3aXRoaW4gYSBTQUNNIGVudmlyb25tZW50IHNpbmNlIGl0IGlz IA0KPj4+Pj4+PiByZWxpYW50IG9uDQo+Pj4+IHRoZQ0KPj4+Pj4+PiBjb2xsZWN0b3IgYmVpbmcg YWJsZSB0byBkbyB0aGF0IHRyYW5zbGF0aW9uLCBidXQgYW55IGRhdGEgdGhhdCANCj4+Pj4+Pj4g ZG9lcyBlbnRlciB0aGUgU0FDTSBzcGhlcmUgd2lsbCBiZSB1c2FibGUuDQo+Pj4+Pj4gVG8gbWUs IHRoaXMgZG9lc24ndCBzZWVtDQo+Pj4+Pj4gZGlmZmVyZW50IGZyb20gdGhlIGVhcmxpZXIgY29u Y2VybnMgYWJvdXQgdGhlIFBvc3R1cmUgQ29sbGVjdG9yDQo+Pj4+IHJlY2VpdmluZw0KPj4+Pj4+ IGRhdGEgaXQgY2Fubm90IHBhcnNlLg0KPj4+Pj4gV2VsbCwgbm8sIGl0J3Mgbm90IGNvbW1lbnN1 cmF0ZSwgZm9yIGF0IGxlYXN0IHRocmVlIHJlYXNvbnM6DQo+Pj4+Pg0KPj4+Pj4gMSkgIFRoZSB0 YWcgdHlwZXMgdGhhdCBuZWVkIHRvIGJlIGtub3duIHRvIGEgY29sbGVjdG9yIGlzIGEgc3Vic2V0 IA0KPj4+Pj4gb2YgYWxsIHRhZyB0eXBlcywgc2luY2UgYSBjb2xsZWN0b3IgcnVucyBvbiBhIHBh cnRpY3VsYXIgdHlwZSBvZiBzeXN0ZW0uDQo+PiBBDQo+Pj4+PiBXaW5kb3dzIGFnZW50IHdvdWxk IG5vdCBiZSBleHBlY3RlZCB0byBiZSBhYmxlIHRvIGhhbmRsZSANCj4+Pj4+IE9TWC1zcGVjaWZp YyB0YWcgdHlwZXMuDQo+Pj4+IFRydWUgLSBJIGNsZWFybHkgb3ZlcnN0YXRlZCB0aGUgYnVyZGVu IG9uIGluZGl2aWR1YWwgZW5kcG9pbnRzLCBzbyANCj4+Pj4gdGhhbmsNCj4+IHlvdQ0KPj4+PiBm b3IgdGhlIGNvcnJlY3Rpb24uDQo+Pj4+DQo+Pj4+IFRoYXQgc2FpZCwgZnJvbSBhbiBlbnRlcnBy aXNlIHBlcnNwZWN0aXZlIEkgd291bGQgdGhpbmsgdGhlIHNldCBvZiANCj4+Pj4gdHJhbnNsYXRv cnMgd291bGQgYmUgY29uc3RhbnQgcmVnYXJkbGVzcyBvZiB3aGV0aGVyIHRyYW5zbGF0aW9uIA0K Pj4+PiBvY2N1cnJlZA0KPj4+IG9uDQo+Pj4+IGVuZHBvaW50cyBvciBzZXJ2ZXJzLiBJZiBvbmUg ZW5kcG9pbnQgaGFzIHRhZ3Mgb2YgaW50ZXJlc3QgdGhhdCBhcmUgDQo+Pj4+IG5vdA0KPj4gb25l DQo+Pj4+IG9mIHRoZSBzcGVjaWZpZWQgU0FDTSBmb3JtcywgdGhlIGFwcHJvcHJpYXRlIHRyYW5z bGF0b3IgbmVlZHMgdG8gYmUgDQo+Pj4+IHNvbWV3aGVyZS4gVGhlIHF1ZXN0aW9uIGlzIHdoZXRo ZXIgdGhhdCBzb21ld2hlcmUgc2hvdWxkIGJlIHRoZQ0KPj4+IGVuZHBvaW50IG9yDQo+Pj4+IHRo ZSBzZXJ2ZXIuIChPciwgYXMgeW91IG5vdGUgYmVsb3csIG9uIHRoZSBlbmQtY29uc3VtZXIuKQ0K Pj4+Pj4gMikgIFNpbWlsYXIgdG8gKDEpLCBhIHNpbmdsZSBjb2xsZWN0b3IgZG9lcyBub3QgbmVj ZXNzYXJpbHkgbmVlZCANCj4+Pj4+IHRvIGJlIGFibGUgdG8gdHJhbnNsYXRlIGV2ZXJ5IHRhZyB0 eXBlIGl0IGNvdWxkIHBvc3NpYmx5IGNvbWUgDQo+Pj4+PiBhY3Jvc3MuIFRoaXMgbWlnaHQgYmUg YmVjYXVzZSBtdWx0aXBsZSBjb2xsZWN0aW9uIG1ldGhvZHMgYXJlIGluIA0KPj4+Pj4gdXNlLCBh IGNvbGxlY3RvciBpcyBidWlsdCBmb3IgYSBzaW5nbGUgbmFycm93IGZ1bmN0aW9uLCBldGMuDQo+ Pj4+IEkgdGhpbmsgSSBhZ3JlZSwgYnV0IEkgdGhpbmsgSSB3b3VsZCBwaHJhc2UgaXQgZGlmZmVy ZW50bHkuIEkgd291bGQgDQo+Pj4+IHNheQ0KPj4gdGhhdA0KPj4+PiBub3QgYWxsIHRhZ3Mgb24g YW4gZW5kcG9pbnQgYXJlIG5lY2Vzc2FyaWx5IG9mIGludGVyZXN0IHRvIHRoZQ0KPj4gZW50ZXJw cmlzZS4NCj4+Pj4gU29tZSB0eXBlcyBvZiB0YWdzIG1pZ2h0IGJlIGdlbmVyYWxseSB1bnJlbGlh YmxlIGluIG5hdHVyZSAoZS5nLiwgYSANCj4+Pj4gcG9vciBjb3JyZWxhdG9yIHdpdGggc29mdHdh cmUgcHJlc2VuY2UpLCBtaWdodCBub3QgaGF2ZSB0aGUgbmVlZGVkIA0KPj4+PiBtZXRhZGF0YQ0K Pj4+IGJvdXQNCj4+Pj4gaW5zdGFsbGVkIHNvZnR3YXJlIHByb2R1Y3RzLCBvciBjb3VsZCBiZSBm b3Igc29mdHdhcmUgdGhlIA0KPj4+PiBlbnRlcnByaXNlDQo+Pj4gZG9lc24ndA0KPj4+PiBjYXJl IGFib3V0IG1vbml0b3JpbmcuIEluIHRoZSBmaXJzdCB0d28gY2FzZXMsIHRoZSBwcmVzZW5jZSBv ZiBhbg0KPj4gYWx0ZXJuYXRlDQo+Pj4+IHRhZyB0eXBlIGZyb20gdGhlIHNhbWUgc291cmNlIChh bmQgY292ZXJpbmcgdGhlIHNhbWUgcHJvZHVjdHMpIA0KPj4+PiBjb3VsZA0KPj4+IHJlbmRlcg0K Pj4+PiB0aGUgc2Vjb25kIGZvcm1hdCBjb21wbGV0ZWx5IHVubmVjZXNzYXJ5Lg0KPj4+Pg0KPj4+ PiBBcmUgd2Ugc2F5aW5nIHRoZSBzYW1lIHRoaW5nIHVzaW5nIGRpZmZlcmVudCB3b3JkcyBoZXJl Pw0KPj4+Pg0KPj4+Pj4gMykgIFRoZXJlIGlzIG1vcmUgdGhhbiBvbmUgY29uc3VtZXIgZm9yIHRo ZSBjb2xsZWN0ZWQgZGF0YS4gIEl0IA0KPj4+Pj4gY291bGQNCj4+IGJlDQo+Pj4+PiBmb3IgdnVs bmVyYWJpbGl0eSBhbmFseXNpcywgbGljZW5zZSBhZG1pbmlzdHJhdGlvbiwgaW52ZW50b3J5LCAN Cj4+Pj4+IGNvbXBsaWFuY2UsIGFuZCBzbyBvbi4gIEV2ZXJ5IGN1cnJlbnQgYW5kIGZ1dHVyZSB1 c2UgZm9yIHRoYXQgDQo+Pj4+PiBpbmZvcm1hdGlvbiB3b3VsZCBuZWVkIHRvIGJlIGFibGUgdG8g cGFyc2UgZXZlcnkgc3VwcG9ydGVkIHRhZyANCj4+Pj4+IHR5cGUgaW4gb3JkZXIgdG8gZG8gaXRz IGZ1bmN0aW9uLiAgQSBjb25zaWRlcmFibGUgYW1vdW50IG9mIA0KPj4+Pj4gZHVwbGljYXRpb24g dG8gc2F5IHRoZSB2ZXJ5IGxlYXN0LiAgVGhlIHNhbWUgY2FuIGJlIHNhaWQgZm9yIGV2ZXJ5IA0K Pj4+Pj4gb3RoZXIgdHlwZSBvZiBkYXRhDQo+PiBiZWluZw0KPj4+Pj4gY29sbGVjdGVkIGZyb20g YW4gZW5kcG9pbnQuDQo+Pj4+IEkgdGhpbmsgeW91IGFyZSB0YWxraW5nIGFib3V0IGEgc2NlbmFy aW8gd2hlcmUgZXZlcnkgZW5kIGNvbnN1bWVyIA0KPj4+PiBvZg0KPj4gdGFncw0KPj4+IGlzDQo+ Pj4+IHJlc3BvbnNpYmxlIGZvciBub3JtYWxpemF0aW9uLiBUaGF0IGlzIGNlcnRhaW5seSB5ZXQg YW5vdGhlciBvcHRpb24NCj4+IChjYWxsIGl0DQo+Pj4+IG9wdGlvbiA0KSwgYWx0aG91Z2ggSSBh Z3JlZSB0aGF0IGl0IGhhcyB0aGUgd2Vha25lc3NlcyB5b3Ugbm90ZSANCj4+Pj4gaGVyZS4gSSB3 b3VsZCBhcmd1ZSB0aGF0IHRoaXMgaXMgbm90IGVxdWl2YWxlbnQgdG8gaGF2aW5nIA0KPj4+PiBu b3JtYWxpemF0aW9uIGRvbmUgb24NCj4+IHRoZQ0KPj4+PiBQb3N0dXJlIFZhbGlkYXRvciwgd2hp Y2ggaXMgbW9yZSB3aGF0IEkgd2FzIHRoaW5raW5nIG9mIGluIG15IA0KPj4+PiBwcmV2aW91cyBl bWFpbC4NCj4+Pj4NCj4+Pj4gR2l2ZW4gdGhpcyBkaXNjdXNzaW9uLCBpdCBtaWdodCBiZSB1c2Vm dWwgdG8gcmVjYXN0IG91ciBvcHRpb25zIA0KPj4+PiBiYXNlZCBvbg0KPj4gd2hvDQo+Pj4+IGlz IHJlc3BvbnNpYmxlIGZvciBkYXRhIG5vcm1hbGl6YXRpb24uDQo+Pj4+DQo+Pj4+IEEpIE5vIG5v cm1hbGl6YXRpb24gKyBkYXRhIG1vZGVsLiBQb3N0dXJlIENvbGxlY3RvcnMgY29sbGVjdCBhbmQg DQo+Pj4+IFNXSUQNCj4+PiBNJkENCj4+Pj4gdHJhbnNwb3J0cyBvbmx5IGEgZGVmaW5lZCBzZXQg b2YgdGFnIHR5cGVzIGFuZCBmb3JtYXRzLiBBbGwgdGFncyANCj4+Pj4gdGhhdA0KPj4gYXJlDQo+ Pj4+IG5vdCBleHByZXNzZWQgaW4gdGhvc2UgZm9ybWF0cyBhcmUgbm90IGNvbGxlY3RlZCBhbmQg YXJlIGlnbm9yZWQuDQo+PiAoRm9ybWVyDQo+Pj4+IG9wdGlvbiAxKQ0KPj4+PiBCKSBObyBub3Jt YWxpemF0aW9uICsgbm8gZGF0YSBtb2RlbC4gUG9zdHVyZSBDb2xsZWN0b3JzIGNvbGxlY3QgYW5k IA0KPj4+PiBTV0lEDQo+Pj4gTSZBDQo+Pj4+IHRyYW5zcG9ydHMgYW55IHR5cGUgb3IgZm9ybWF0 IG9mIHRhZ3MuIFRhZyBjb25zdW1lcnMgY29sbGVjdGluZyANCj4+Pj4gdGFncw0KPj4gZnJvbQ0K Pj4+PiB0aGUgQ01EQi9Qb3N0dXJlIFZhbGlkYXRvciBnZXQgd2hhdGV2ZXIgdGFncyB0aGV5IGNh biB1bmRlcnN0YW5kIA0KPj4+PiBhbmQNCj4+PiBvdGhlcg0KPj4+PiB0eXBlcyBvZiB0YWdzIGFy ZSBpZ25vcmVkLg0KPj4+PiBDKSBQb3N0dXJlIENvbGxlY3RvciBub3JtYWxpemF0aW9uLiBUaGUg UG9zdHVyZSBDb2xsZWN0b3IgaXMgDQo+Pj4+IHJlc3BvbnNpYmxlDQo+PiBmb3INCj4+Pj4gbm9y bWFsaXppbmcgdGhlIHRhZ3MgY29sbGVjdGVkIG9uIGFuIGVuZHBvaW50IHByaW9yIHRvIGRlbGl2 ZXJ5IHRvIA0KPj4+PiBhDQo+PiBQb3N0dXJlDQo+Pj4+IFZhbGlkYXRvci4gU1dJRCBNJkEgc3Vw cG9ydHMgdHJhbnNtaXNzaW9uIG9mIGEgZGVmaW5lZCBzZXQgb2YgdGFnIA0KPj4+PiB0eXBlcw0K Pj4+IGFuZA0KPj4+PiBmb3JtYXRzLCB0byB3aGljaCB0aGUgUG9zdHVyZSBDb2xsZWN0b3IgdHJh bnNsYXRlcy4gKE9wdGlvbiAzIGZyb20NCj4+IEd1bm5hcidzDQo+Pj4+IGVhcmxpZXIgZW1haWwp DQo+Pj4+IEQpIFBvc3R1cmUgVmFsaWRhdG9yIG5vcm1hbGl6YXRpb24uIFBvc3R1cmUgQ29sbGVj dG9ycyBjb2xsZWN0IGFuZCANCj4+Pj4gU1dJRA0KPj4+IE0mQQ0KPj4+PiB0cmFuc3BvcnRzIGFu eSB0eXBlIG9yIGZvcm1hdCBvZiB0YWdzLiBUaGUgcmVjZWl2aW5nIFBvc3R1cmUgDQo+Pj4+IFZh bGlkYXRvcg0KPj4gaXMNCj4+Pj4gcmVzcG9uc2libGUgZm9yIG5vcm1hbGl6aW5nIHRoZSBpbmNv bWluZyBkYXRhIHRvIGEgc2V0IG9mIHR5cGVzIGFuZA0KPj4gZm9ybWF0cw0KPj4+PiBpZGVudGlm aWVkIGJ5IFNBQ00gKGJ1dCB3aG9zZSBzcGVjaWZpY2F0aW9uIGlzIG91dHNpZGUgdGhlIHNjb3Bl IG9mIA0KPj4+PiBTV0lEDQo+Pj4gTSZBDQo+Pj4+IGl0c2VsZikuDQo+Pj4+IEUpIENvbnN1bWVy IG5vcm1hbGl6YXRpb24uIFBvc3R1cmUgQ29sbGVjdG9ycyBjb2xsZWN0IGFuZCBTV0lEIE0mQSAN Cj4+Pj4gdHJhbnNwb3J0cyBhbnkgdHlwZSBvciBmb3JtYXQgb2YgdGFncy4gVGFncyBhcmUgc3Rv cmVkIG9uIHRoZSANCj4+Pj4gUG9zdHVyZSBWYWxpZGF0b3Igb3IgQ01EQiB1bnRpbCBhIGNvbnN1 bWVyIG5lZWRzIHRoZW0uIFRoZSBjb25zdW1lciANCj4+Pj4gdGhlbg0KPj4+IGNvbGxlY3RzDQo+ Pj4+IHRoZSByZWxldmFudCB0YWdzIGFuZCBpcyByZXNwb25zaWJsZSBmb3IgdHJhbnNsYXRpbmcg YW55IHRhZ3MgaW50byANCj4+Pj4gYQ0KPj4gZm9ybWF0DQo+Pj4+IGl0IGNhbiBjb25zdW1lLiAo T3B0aW9uIDQgZnJvbSB0aGlzIGVtYWlsKQ0KPj4+Pg0KPj4+PiBHdW5uYXIsIEkgYmVsaWV2ZSB5 b3UgYXJlIGFuIGFkdm9jYXRlIG9mIEMsIGNvcnJlY3Q/IEkgYWxzbyB0aGluayANCj4+Pj4gYm90 aA0KPj4gb2YNCj4+Pj4gdXNlIGFncmVlIHRoYXQgb3B0aW9ucyBCIGFuZCBFIGFyZSBwcm9iYWJs eSBiYWQgaWRlYXMgc2luY2UgdGhlIA0KPj4+PiBkYXRhIGNvbnN1bWVycyBjYW4gaGF2ZSBubyBp ZGVhIGFzIHRvIHdoYXQgdGhleSBhcmUgZ29pbmcgdG8gZ2V0LiANCj4+Pj4gUGVyc29uYWxseSwN Cj4+IEkNCj4+Pj4gdGhpbmsgSSdtIG1vcmUgb2YgYSBmYW4gb2YgRCAtIGl0IGhhcyBhIGNlbnRy YWxpemVkIHJhdGhlciB0aGFuDQo+PiBkaXN0cmlidXRlZA0KPj4+PiBub3JtYWxpemF0aW9uIGZ1 bmN0aW9uIGFuZCBjYW4gYXZvaWQgdW5uZWNlc3NhcnkgZGF0YSBsb3NzLg0KPj4+Pg0KPj4+PiBH dW5uYXIsIGhhdmUgSSBtaXNpbnRlcnByZXRlZCBhbnkgb2YgeW91ciBjb21tZW50cz8gRG8gb3Ro ZXJzIGhhdmUgDQo+Pj4+IGFueSB0aG91Z2h0cyBvbiB0aGlzPw0KPj4+Pg0KPj4+PiBUaGFua3Ms DQo+Pj4+IENoYXJsZXMNCj4+Pj4NCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX18NCnNhY20gbWFpbGluZyBsaXN0DQpzYWNtQGlldGYub3JnDQpodHRwczov L3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20NCg== From nobody Thu Jun 2 12:14:13 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3CE5B12D7DF for ; Thu, 2 Jun 2016 12:14:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7nsRwCIsjJ0R for ; Thu, 2 Jun 2016 12:14:09 -0700 (PDT) Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0118.outbound.protection.outlook.com [23.103.200.118]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6688E12D169 for ; Thu, 2 Jun 2016 12:14:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=UiaPoL/Z2LWX1HO4SV1US3i0idNLYGLqQV5tRInWbog=; b=MkhkeqwyQPZD1irDRCmJm6tnm8xAplDznwpfEQgiiZfWM0J7qENd3a5NrYySlIftkUrY1jVMBIIS1Eo6jvrrdmiECym8U71K2mYo9ohMOI2AxYlAPVxwLCWAav7UniwpLRGR/N0m5MlFRrQJt0tK96hhKKARgDHWGWDKgb2sTyU= Received: from CY1PR09MB0363.namprd09.prod.outlook.com (10.160.147.13) by CY1PR09MB0364.namprd09.prod.outlook.com (10.160.147.139) with Microsoft SMTP Server (TLS) id 15.1.506.9; Thu, 2 Jun 2016 19:14:07 +0000 Received: from CY1PR09MB0363.namprd09.prod.outlook.com ([10.160.147.13]) by CY1PR09MB0363.namprd09.prod.outlook.com ([10.160.147.13]) with mapi id 15.01.0506.013; Thu, 2 Jun 2016 19:14:07 +0000 From: "Waltermire, David A. (Fed)" To: Michael Godsey , Gunnar Engelbach , Adam Montville , "Schmidt, Charles M." Thread-Topic: [sacm] Some technical details for SWID M&A proposals Thread-Index: AdG3apgK7xT1Uh+iRimR5f7eSYtHBAAIni6AAB3hXYAADmbYgAAB9NQAAAC6aoAAA8QbgADDT6eAAAIdqQAAMzKdgAAKJ/SAAAHwDwAAHD0BgAAJMEug Date: Thu, 2 Jun 2016 19:14:07 +0000 Message-ID: References: <827360a9-1c95-1a9a-50c0-12b0d6cf323d@ThreatGuard.com> <6bb4b3ef-7afa-d981-60cd-c90f7a4e23e8@ThreatGuard.com> <5707e531-ef34-5ea4-04c8-739d9c7be123@ThreatGuard.com> <6bacd100-1dd8-921a-1bc6-e4210760d1bf@ThreatGuard.com> <1FF03FBD-47A9-44CB-91E9-1FEA8FE4BD9D@gmail.com> <34147ecb-60d8-536e-409d-315b6783f128@ThreatGuard.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: microsoft.com; dkim=none (message not signed) header.d=none;microsoft.com; dmarc=none action=none header.from=nist.gov; x-originating-ip: [129.6.224.58] x-ms-office365-filtering-correlation-id: d93381e2-c30d-464c-5bec-08d38b1a11f5 x-microsoft-exchange-diagnostics: 1; CY1PR09MB0364; 5:SSnD3hiRdHGj18Btt5ezFbJVb1yXdkbNUkYdLflM7N6AHD4ql3DovkNo+XNsCoakOIaNnu2DXrs1/pgOekd4WYNXyCCCs0DiRd4oLT+aOqE0VbP+j8ISq4GGkXMwtokwuIEQAYs62bJz9TJJhhGAaA==; 24:SvPHOxaGAegyidIF/5SrB7QMzq+/AFXt6tm6jVpMekpqTliEbXT4dI5OatU6qUgxUfax/cE0cyunh16NEDx8eqO0rldtfHr4bHQDkZPo/MU=; 7:c7FzxfVdeu3jBz/7pEh+njp+5XKhVBLfXWBnv/LxaGIZsxIiE9rNueulUOcyCTH4dR/C+Zi4hEvyI4NnODh3i0PuFrKmJNckX/nM/UkM5D5dKvNL14fNFLdqexRT6kYoS8QTHGEcEc0eCoRe+DprmBQhQ1+lpxiInXzlbFnSs5IvlIxgWBGTKQctFPM/6eQE x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:CY1PR09MB0364; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(72170088055959)(120809045254105)(166708455590820)(192374486261705)(211171220733660); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:CY1PR09MB0364; BCL:0; PCL:0; RULEID:; SRVR:CY1PR09MB0364; x-forefront-prvs: 0961DF5286 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(24454002)(13464003)(377454003)(51444003)(52314003)(5003600100002)(99286002)(5001770100001)(122556002)(586003)(92566002)(11100500001)(66066001)(102836003)(6116002)(19580395003)(3846002)(93886004)(5002640100001)(189998001)(1511001)(10400500002)(33656002)(76576001)(76176999)(81166006)(2906002)(2950100001)(2900100001)(5008740100001)(8936002)(4326007)(8676002)(86362001)(15975445007)(77096005)(3660700001)(2421001)(87936001)(19580405001)(74316001)(50986999)(2561002)(5004730100002)(31430400001)(8666004)(54356999)(9686002)(3280700002); DIR:OUT; SFP:1102; SCL:1; SRVR:CY1PR09MB0364; H:CY1PR09MB0363.namprd09.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jun 2016 19:14:07.3574 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: CY1PR09MB0364 Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Some technical details for SWID M&A proposals X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jun 2016 19:14:12 -0000 TWljaGFlbCwNCg0KV2UgYXJlIGluIGZhY3Qgd29ya2luZyBvbiBhIGRhdGEgcmVwb3NpdG9yeSBz dGFuZGFyZCBmb3Igc2VjdXJpdHkgYXV0b21hdGlvbiBpbmZvcm1hdGlvbiBpbiBJRVRGIE1JTEUg WzFdLiBXZSBhcmUgY3VycmVudGx5IHdvcmtpbmcgb24gZ2VuZXJhbGl6aW5nIHRoZSBjdXJyZW50 IGRyYWZ0LCB3aGljaCBpcyBmb2N1c2VkIG9uIGluY2lkZW50IGFuZCBpbmRpY2F0b3IgaW5mb3Jt YXRpb24sIHRvIGFsbG93IGZvciBhbiBleHRlbnNpYmxlIGxpc3Qgb2YgaW5mb3JtYXRpb24gdHlw ZXMuIFRoaXMgaXMgYmFzZWQgb24gYSBwcmVzZW50YXRpb24gSSBtYWRlIGF0IElFVEYgOTUgaW4g TUlMRSBbMl0uIFNvZnR3YXJlIHRhZyBpbmZvcm1hdGlvbiBpcyBvbmUgb2YgdGhlIHR5cGVzIHRo YXQgd2Ugd2FudCB0byBhbGxvdy4NCg0KVGhlIHZhbHVlIG9mIGdlbmVyYWxpemluZyBzdWNoIGFu IGFwcHJvYWNoIGlzIHRoYXQgdmVuZG9ycyBhbmQgZW5kLXVzZXIgb3JnYW5pemF0aW9ucyBjYW4g c3RvcmUgU1dJRCB0YWdzLCB2dWxuZXJhYmlsaXR5IHJlY29yZHMsIGNvbmZpZ3VyYXRpb24gY2hl Y2tsaXN0cywgYW5kIG90aGVyIGZvcm1zIG9mIHNlY3VyaXR5IGF1dG9tYXRpb24gZGF0YSBpbiB0 aGUgc2FtZSBkYXRhIHJlcG9zaXRvcnkgYWxsb3dpbmcgdG9vbHMgdG8gZGlzY292ZXIsIHNlYXJj aCwgYWNjZXNzLCBhbmQgcmV0cmlldmUgYWxsIG9mIHRoaXMgaW5mb3JtYXRpb24gdXNpbmcgdGhl IHNhbWUgbWVjaGFuaXNtcy4gQSBvbmUtb2ZmIHRhZyByZXBvc2l0b3J5IHN0YW5kYXJkIGlzIG5v dCBhcyB1c2VmdWwgaW4gbXkgdmlldywgc2luY2UgaXQgY3JlYXRlcyB5ZXQgYW5vdGhlciBuZXcg dGhpbmcgZm9yIGEgc3BlY2lhbGl6ZWQgcHVycG9zZSB0aGF0IHZlbmRvcnMgbmVlZCB0byBidWls ZCBhbmQgdXNlcnMgbmVlZCB0byBvcGVyYXRlLg0KDQpXZSBhcmUgZGV2ZWxvcGluZyB0aGVzZSBz cGVjaWZpY2F0aW9ucyBhdDogaHR0cHM6Ly9naXRodWIuY29tL0NJU2VjdXJpdHkvUk9MSUUNCg0K V2UgcGxhbiB0byBwb3N0IGFuIGludGVyaW0gUk9MSUUgdXBkYXRlIGJhc2VkIG9uIHRoaXMgdG9t b3Jyb3c7IGhvd2V2ZXIsIG1vcmUgd29yayBpcyBuZWVkZWQgdG8gYWNoaWV2ZSBvdXIgZ29hbHMu DQoNCldlIHdvdWxkIHdlbGNvbWUgdGhlIHBhcnRpY2lwYXRpb24gb2YgdGhlIFRhZ1ZhdWx0IGdy b3VwIGluIHRoaXMgd29yay4NCg0KWzFdIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9j L2RyYWZ0LWlldGYtbWlsZS1yb2xpZS8NClsyXSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3Jn L2RvYy9zbGlkZXMtOTUtbWlsZS0zLw0KDQpUaGFua3MsDQpEYXZlDQoNCj4gLS0tLS1PcmlnaW5h bCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogc2FjbSBbbWFpbHRvOnNhY20tYm91bmNlc0BpZXRmLm9y Z10gT24gQmVoYWxmIE9mIE1pY2hhZWwgR29kc2V5DQo+IFNlbnQ6IFRodXJzZGF5LCBKdW5lIDAy LCAyMDE2IDEwOjM0IEFNDQo+IFRvOiBHdW5uYXIgRW5nZWxiYWNoIDxndW5uYXIuZW5nZWxiYWNo QHRocmVhdGd1YXJkLmNvbT47IEFkYW0NCj4gTW9udHZpbGxlIDxhZGFtLncubW9udHZpbGxlQGdt YWlsLmNvbT47IFNjaG1pZHQsIENoYXJsZXMgTS4NCj4gPGNtc2NobWlkdEBtaXRyZS5vcmc+DQo+ IENjOiBzYWNtQGlldGYub3JnDQo+IFN1YmplY3Q6IFJlOiBbc2FjbV0gU29tZSB0ZWNobmljYWwg ZGV0YWlscyBmb3IgU1dJRCBNJkEgcHJvcG9zYWxzDQo+IA0KPiBBbHRob3VnaCBJIGFncmVlIHRo YXQgZGF0YSB0cmFuc2Zvcm1hdGlvbiBhdCB0aGUgZW5kIHBvaW50IGlzIGFzIGZhciBvdXQgb24g dGhlDQo+IGxpbWIgYXMgeW91IGNhbiBnZXQgKHNob3J0IG9mIGRhdGEgY3JlYXRpb24gaXRzZWxm IGJlaW5nIGRvbmUgZm9yIGFsbCBmb3JtYXRzDQo+IG5lZWRlZCwgbm90IGxpa2VseSB0byBldmVy IGhhcHBlbiksIEkgdGhpbmsgdGhhdCB3b3VsZCBiZSB2ZXJ5IGRpZmZpY3VsdCB0bw0KPiBleHBl Y3Qgb24gYSBnb29kIG51bWJlciBvZiBlbmRwb2ludHMuICAgSXQgZG9lc24ndCBtYWtlIHNlbnNl IHRvIGV4cGVjdA0KPiBlYWNoIGVuZHBvaW50IHRvIGhhdmUgdGhlIGNhcGFiaWxpdHkgdG8gdHJh bnNwb3NlIGZyb20gYWxsIHRoZSBkaWZmZXJlbnQNCj4gcG90ZW50aWFsIGZvcm1hdHMuICAgU29t ZSB3b24ndCBoYXZlIHByb2Nlc3NpbmcgY2FwYWJpbGl0eSB0byBkbyBzbywgc29tZQ0KPiB3b24n dCBoYXZlIHJvb20gb24gdGhlIGVuZHBvaW50IGZvciBzdWNoIGEgdHJhbnNwb3NpdGlvbiBzZXJ2 aWNlLCBldGMuICAgSXQNCj4gc2VlbXMgbXVjaCBtb3JlIGxpa2VseSB0aGVyZSB3b3VsZCBuZWVk IHRvIGJlIGFuIGFnZ3JlZ2F0b3Igc2VydmljZSB0aGF0DQo+IHB1bGxzIGZyb20gZWFjaCBlbmRw b2ludCBhbmQga25vd3MgaG93IHRvIGRvIHRoZSB0cmFuc3Bvc2l0aW9uLiAgVGhpcyBpcw0KPiBw cm9iYWJseSB0aGUgcHJveHkgeW91IHJlZmVyZW5jZSwgdGhvdWdoIEkgZG9uJ3QgdGhpbmsgb2Yg dGhhdCB0ZXJtIGluDQo+IHJlbGF0aW9uIHRvIGNvbGxlY3RpbmcgYW5kIHRyYW5zcG9zaW5nIGRh dGEuICBCdXQgbWF5YmUgdGhlIHRlcm0gYWdncmVnYXRvcg0KPiBkb2Vzbid0IHJlc29uYXRlIHdl bGwgd2l0aCBldmVyeW9uZSBlaXRoZXIuDQo+IA0KPiBSZTogdGhlIGxvc3N5IGNvbnZlcnNpb24g aXNzdWUsIEkgZG8gdGhpbmsgdGhhdCBhIHJlcG9zaXRvcnkgb2YgdGFnIGRhdGEgaGVscHMNCj4g YWRkcmVzcyB0aGlzLCB3aGVyZWJ5IHlvdSBjYW4gdXNlIGEgdGFnIElEIGFuZCBoaXQgdXAgYSBz ZXJ2aWNlIHRvIHJldHJpZXZlIHRoZQ0KPiB0YWcncyBmdWxsIGFuZCBvcmlnaW5hbCBkYXRhLCB3 b3VsZCBiZSBtdWNoIG5lZWRlZC4gICBXZSBzdGFydGVkIGRpc2N1c3Npbmcgb24NCj4gdGhlIG5l ZWQgZm9yIHNvbWUgc3RhbmRhcmQgZm9yIHRhZyByZXBvc2l0b3J5IHNlcnZpY2UgYXQgdGhlIE5J U1Qgd29ya3Nob3ANCj4gb24gVGFnIGltcGxlbWVudGF0aW9uIGluIEFwcmlsLCBhbmQgYXJlIGNy ZWF0aW5nIGEgVGFnIFZhdWx0IHdvcmsgZ3JvdXAgdG8NCj4gbG9vayBhdCBhZGRyZXNzaW5nIHRo YXQuICBQcm9iYWJseSBlbm91Z2ggdG8gc2F5IGl0IHdvdWxkIGJlIG91dCBvZiBzY29wZSBmb3IN Cj4gdGhpcyBTQUNNIGVmZm9ydCwgYWx0aG91Z2gga25vd2luZyB0aGF0IHN1Y2ggYSBzdGFuZGFy ZHMgY29tcGxpYW50IHNlcnZpY2UNCj4gZXhpc3RlZCBhbmQgY292ZXJpbmcgaG93IChjb25jZXB0 dWFsbHkgYW55d2F5LCBhdCB0aGlzIHBvaW50KSB2YXJpb3VzDQo+IG1vbml0b3Jpbmcgc2Vydmlj ZXMgY291bGQgdXRpbGl6ZSBzdWNoIGEgdGFnIHJlcG9zaXRvcnksIHdvdWxkIGJlIGhlbHBmdWwg dG8NCj4gYWRkcmVzcyBJIHRoaW5rLg0KPiANCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0N Cj4gRnJvbTogc2FjbSBbbWFpbHRvOnNhY20tYm91bmNlc0BpZXRmLm9yZ10gT24gQmVoYWxmIE9m IEd1bm5hciBFbmdlbGJhY2gNCj4gU2VudDogV2VkbmVzZGF5LCBKdW5lIDEsIDIwMTYgNjowNiBQ TQ0KPiBUbzogQWRhbSBNb250dmlsbGUgPGFkYW0udy5tb250dmlsbGVAZ21haWwuY29tPjsgU2No bWlkdCwgQ2hhcmxlcyBNLg0KPiA8Y21zY2htaWR0QG1pdHJlLm9yZz4NCj4gQ2M6IHNhY21AaWV0 Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtzYWNtXSBTb21lIHRlY2huaWNhbCBkZXRhaWxzIGZvciBT V0lEIE0mQSBwcm9wb3NhbHMNCj4gDQo+IA0KPiBDaGFybGVzOiAgWWVzLCB0aGF0J3MgYSBkZWNl bnQgcmVzdGF0ZW1lbnQgb2Ygd2hhdCBJIGhhdmUgaW4gbWluZC4NCj4gDQo+IEFkYW06ICBJbiBs aW5lLCBJIHRoaW5rLCB3aXRoIHdoYXQgeW91IGFyZSBzYXlpbmcsIHRoZSBzb29uZXIgdGhlIGRh dGEgaXMNCj4gdHJhbnNmb3JtZWQgaW50byB0aGUgY29tbW9uIGZvcm1hdCB0aGUgc29vbmVyIGlu IGl0cyBsaWZlY3ljbGUgY29tcG9uZW50cw0KPiBjYW4gYmUgY3JlYXRlZCB0aGF0IG1ha2UgdXNl IG9mIHRoYXQgZGF0YS4gRG9pbmcgaXQgYXQgdGhlIGVuZHBvaW50IChvciBhDQo+IHByb3h5IGFj dGluZyBvbiBiZWhhbGYgb2YgYW4gZW5kcG9pbnQpIGlzIGFzIGZhciBvdXQgb24gdGhhdCBsaW1i IGFzIHlvdSBjYW4NCj4gZ2V0Lg0KPiANCj4gVGhlIGRyYXdiYWNrLCBob3dldmVyLCBpcyB0aGF0 IHRoZSBvcmlnaW5hbCB0YWcgaW5mb3JtYXRpb24gaXMgbm90IGF2YWlsYWJsZSwNCj4gYW5kIHRo YXQgY291bGQgcmVwcmVzZW50IGEgZGF0YSBsb3NzIC0tIG9yIGEgbG9zc3kgY29udmVyc2lvbiwg YXMgQ2hhcmxlcyBoYXMNCj4gYmVlbiBjaGFyYWN0ZXJpemluZyBpdC4gIEkgdGhpbmsgdGhlcmUg YXJlIHdheXMgYXJvdW5kIHRoYXQsIHN1Y2ggYXMgcmV0YWluaW5nDQo+IGVub3VnaCBpbmZvcm1h dGlvbiBzdWNoIHRoYXQgYW4gaW50ZXJlc3RlZCBwYXJ0eSBjb3VsZCBnbyBiYWNrIGFuZCBnZXQg dGhlDQo+IG9yaWdpbmFsIHRhZywgYnV0IHRoZSBhY3R1YWwgcHJvY2VzcyBvZiBkb2luZyBzb21l dGhpbmcgbGlrZSB0aGF0IHdvdWxkIGJlDQo+IG91dHNpZGUgb2YgdGhlIHNjb3BlIG9mIFNBQ00u DQo+IA0KPiBBbmQgd2l0aCB0aGF0IEknbGwgbGluZ2VyIGEgYml0IHRvIHNlZSB3aGF0IG90aGVy cyBoYXZlIHRvIHNheS4NCj4gDQo+IA0KPiAtLWd1bg0KPiANCj4gDQo+IE9uIDYvMS8yMDE2IDU6 MTAgUE0sIEFkYW0gTW9udHZpbGxlIHdyb3RlOg0KPiA+IFRvIGNsYXJpZnksIHRoaXMgaXNu4oCZ dCBhcyBtdWNoIGFib3V0IHRhZ3MgYXMgaXQgaXMgYWJvdXQgdGhlIG5vcm1hbGl6YXRpb24gb2YN Cj4gZGlmZmVyZW50IHRhZ2dpbmcgc3RydWN0dXJlcywgY29ycmVjdD8gIEluIHRoYXQgY2FzZSwg SSB0aGluayB0aGF0IHRoZQ0KPiBub3JtYWxpemF0aW9uL3RyYW5zbGF0aW9uIHNob3VsZCBiZSBo YXBwZW5pbmcgb24gdGhlIGVuZHBvaW50cyBvciBmcm9tDQo+IHdpdGhpbiB0aG9zZSBjb250ZXh0 cy4NCj4gPg0KPiA+IFNvLCBpbmZvcm1hdGlvbiB3b3VsZCBnbyBmcm9tIGNvbnRleHQtc3BlY2lm aWMgZm9ybWF0IHRvIG5vcm1hbGl6ZWQNCj4gZm9ybWF0IGZvciBjZW50cmFsaXplZCBuZWVkcyAo aS5lLiBpbnZlbnRvcnkgYXNzZXNzbWVudCwgcmVwb3J0aW5nLCB3aGF0DQo+IGhhdmUgeW91KS4g IFRoZW4sIGlmIHNvbWV0aGluZyBuZWVkcyB0byBiZSBkb25lIHdpdGggdGhhdCBzcGVjaWZpYyBw aWVjZSBvZg0KPiBzb2Z0d2FyZSBhdCB0aGUgZW5kcG9pbnQsIHdlIG1heSBuZWVkIGEgd2F5IHRv IGdldCBiYWNrIGZyb20gdGhlDQo+IG5vcm1hbGl6ZWQgZm9ybWF0IHRvIHRoZSBjb250ZXh0LXNw ZWNpZmljIGZvcm1hdCwgb3IgYXQgbGVhc3QgdG8gcmVmZXJlbmNlDQo+IHRoYXQgY29udGV4dC1z cGVjaWZpYyBmb3JtYXQgZGlzdGluY3RseS4NCj4gPg0KPiA+IFRob3VnaHRzPw0KPiA+DQo+ID4N Cj4gPj4gT24gSnVuIDEsIDIwMTYsIGF0IDI6MTkgUE0sIFNjaG1pZHQsIENoYXJsZXMgTS4gPGNt c2NobWlkdEBtaXRyZS5vcmc+DQo+IHdyb3RlOg0KPiA+Pg0KPiA+PiBIaSBHdW5uYXIsDQo+ID4+ DQo+ID4+IFRoYW5rcywgYXMgYWx3YXlzLCBmb3IgdGhlIGdvb2QgaW5zaWdodHMuIElmIEkgY2Fu IHBhcmFwaHJhc2Ugd2hhdCBJDQo+ID4+IHRoaW5rIEkgYW0gaGVhcmluZzogeW91IGFyZSBhc3Nl cnRpbmcgdGhhdCB0aGUgdXNlIG9mIGNlcnRhaW4gdGFncyBpcw0KPiA+PiBsaWtlbHkgdG8gYmUg Y29udGV4dCBkZXBlbmRlbnQuIFNwZWNpZmljYWxseSwgY2VydGFpbiB0eXBlcyBvZiB0YWdzDQo+ ID4+IHdpbGwgcHJpbWFyaWx5IGJlIHVzZWQgb24gY2VydGFpbiBPU3MgYW5kL29yIG9uIGRldmlj ZXMgaW4gYSBjZXJ0YWluDQo+ID4+IHJvbGUuIEEgY2VudHJhbGl6ZWQgbm9ybWFsaXphdGlvbiBm dW5jdGlvbiBuZWVkcyB0byBoYXZlIHRyYW5zbGF0b3JzDQo+ID4+IGZvciB0aGUgdGFncyBvZiBl dmVyeSBjb250ZXh0IGluIHRoZSBlbnRlcnByaXNlLiBIb3dldmVyLCBpZg0KPiA+PiB0cmFuc2xh dGlvbiBpcyBkb25lIG9uIHRoZSBlbmRwb2ludHMgKGkuZS4sIHdpdGhpbiB0aGF0IHZlcnkgY29u dGV4dA0KPiA+PiB0aGF0IGlzIHByb2R1Y2luZyB0aGUgdGFncykgdGhvc2UgZW5kcG9pbnRzIG9u bHkgbmVlZCB0byBzdXBwb3J0IHRoZQ0KPiB0cmFuc2xhdG9ycyBhcHByb3ByaWF0ZSBmb3IgdGhl aXIgc3BlY2lmaWMgY29udGV4dC4NCj4gPj4gTW9yZW92ZXIsIGFzIG5ldyBjb250ZXh0cyBhcmUg YWRkZWQgdG8gYW4gZW50ZXJwcmlzZSwgSSB0aGluayB5b3UgYXJlDQo+ID4+IGFyZ3VpbmcgdGhh dCBpdCBpcyBtb3JlIG5hdHVyYWwgdG8gYWNjb3VudCBmb3IgdGhlIG5ldyB2YXJpZXRpZXMgb2YN Cj4gPj4gdGFncyB0aGF0IGNvdWxkIGFyaXNlIGluIHRob3NlIGNvbnRleHRzIGxvY2FsbHkgKGku ZS4sIG9uIHRoZQ0KPiA+PiBlbmRwb2ludCkgcmF0aGVyIHRoYW4gdXBkYXRpbmcgYSBjZW50cmFs IHNlcnZlciBldmVyeSB0aW1lIGEgbmV3IGNvbnRleHQNCj4gaXMgYWRkZWQuDQo+ID4+DQo+ID4+ IERvIEkgaGF2ZSB0aGlzIGNvcnJlY3Q/IFdoYXQgYXJlIG90aGVycycgdGhvdWdodHMgb24gdGhp cz8NCj4gPj4NCj4gPj4gVGhhbmtzLA0KPiA+PiBDaGFybGVzDQo+ID4+DQo+ID4+PiAtLS0tLU9y aWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiA+Pj4gRnJvbTogR3VubmFyIEVuZ2VsYmFjaCBbbWFpbHRv Omd1bm5hci5lbmdlbGJhY2hAdGhyZWF0Z3VhcmQuY29tXQ0KPiA+Pj4gU2VudDogVHVlc2RheSwg TWF5IDMxLCAyMDE2IDE6NTMgUE0NCj4gPj4+IFRvOiBTY2htaWR0LCBDaGFybGVzIE0uIDxjbXNj aG1pZHRAbWl0cmUub3JnPjsgQWRhbSBNb250dmlsbGUNCj4gPj4+IDxhZGFtLncubW9udHZpbGxl QGdtYWlsLmNvbT4NCj4gPj4+IENjOiBzYWNtQGlldGYub3JnDQo+ID4+PiBTdWJqZWN0OiBSZTog W3NhY21dIFNvbWUgdGVjaG5pY2FsIGRldGFpbHMgZm9yIFNXSUQgTSZBIHByb3Bvc2Fscw0KPiA+ Pj4NCj4gPj4+DQo+ID4+PiBUaGUgcmVhbGl0eSBpcyB0aGF0IG5vdCBhbGwgdGFnZ2luZyBmb3Jt YXRzIGFyZSBnb2luZyB0byBiZQ0KPiA+Pj4gaW1wbGVtZW50ZWQgb24gdGhlIGZpcnN0IGl0ZXJh dGlvbiBhbmQgbmV3IG9uZXMgd2lsbCBiZSBkZXZpc2VkIGFuZA0KPiA+Pj4gcmV2aXNpb25zIG1h ZGUgdG8gdGhlIGV4aXN0aW5nIG9uZXMuDQo+ID4+Pg0KPiA+Pj4gRGVwZW5kaW5nIG9uIHRoZSB2 ZW5kb3IsIHRoZSBtb3N0IGxpa2VseSBvdXRjb21lIGlzIHRoYXQgb25seSBhIGZldw0KPiA+Pj4g b2YgdGhlIG1vc3QgY29tbW9uIHRhZ2dpbmcgc3lzdGVtcyB3aWxsIGV2ZXIgYmUgaW1wbGVtZW50 ZWQgYW5kIGlmDQo+ID4+PiB5b3VyIGVudGVycHJpc2UgdXNlcyBhbnkgb3RoZXJzIHlvdSBhcmUg anVzdCBvdXQgb2YgbHVjayAtLSB1bmxlc3MNCj4gPj4+IHlvdSBkbyBzb21lIGluLWhvdXNlIHdv cmsgb3Igc29tZSBvdGhlciB2ZW5kb3IgaXMgd2lsbGluZyB0byBpbnZlc3QNCj4gPj4+IHRoZSB0 aW1lIGFuZCBlZmZvcnQgaW50byBzdXBwb3J0aW5nIHRoZSBsZXNzIGNvbW1vbiB0YWcgdHlwZXMu DQo+ID4+Pg0KPiA+Pj4gSWYgdGhlIG5vcm1hbGl6YXRpb24gaXMgZG9uZSBjZW50cmFsbHkgYnkg dGhlIFZhbGlkYXRvcg0KPiA+Pj4NCj4gPj4+IElmIHRoZSBub3JtYWxpemF0aW9uIGlzIGRvbmUg Y2VudHJhbGx5IGJ5IHRoZSBWYWxpZGF0b3IgdGhlbiB0aGUNCj4gPj4+IFZhbGlkYXRvcnMgKGFu ZCBldmVyeSBvdGhlciBjb25zdW1lcikgbmVlZHMgdG8gc3VwcG9ydCBhbGwgdGFnIHR5cGVzDQo+ ID4+PiByaWdodCBmcm9tIHRoZSBzdGFydCwga2VlcCB1cGRhdGluZyBhcyB0aGUgdmFyaW91cyB0 YWcgZm9ybWF0cw0KPiA+Pj4gY2hhbmdlLCBhbmQgYmUgZG9uZSB0aHVzIGJ5IGV2ZXJ5IHZlbmRv ci4NCj4gPj4+DQo+ID4+PiBXaGljaCwgSSBjYW4gZ3VhcmFudGVlLCB3b24ndCBoYXBwZW4uICBB bmQgZXZlbiBpZiBpdCBkaWQsIHRoZQ0KPiA+Pj4gZGV2ZWxvcCBhbmQgcmVsZWFzZSBjeWNsZSBv biBsYXJnZSBzeXN0ZW1zIGlzIHR5cGljYWxseSAxIHRvIDINCj4gPj4+IHllYXJzLCB3aGljaCBp cyBqdXN0IHRvbyBsYXJnZSBhIGdhcCBpbiB0aGlzIHNwYWNlLg0KPiA+Pj4NCj4gPj4+IEkgYWxz byBkb24ndCBleHBlY3QgY29sbGVjdG9ycyB0byBpbXBsZW1lbnQgYWxsIHRhZyB0eXBlcy4gIEV2 ZW4NCj4gPj4+IGFjY291bnRpbmcgZm9yIHRoZSBvYnZpb3VzIG9taXNzaW9ucyAtLSBhIFdpbmRv d3MgYWdlbnQgd291bGRuJ3QgYmUNCj4gPj4+IGV4cGVjdGVkIHRvIGhhdmUgYW55IGF3YXJlbmVz cyBvZiB0YWdnaW5nIHNwZWNpZmljIHRvIE9TWCwgSFAtVVgsDQo+ID4+PiBBbmRyb2lkLCBldGMs ICAtLSBJIHRoaW5rIHdlIGNhbiBjb3VudCBvbiBhZ2VudHMgaGF2aW5nIGluY29tcGxldGUNCj4g Pj4+IGNvdmVyYWdlLiAgSW4gZmFjdCwgSSB0aGluayB3ZSBzaG91bGQgcGxhbiBvbiB0aGF0IGJl aW5nIHRoZSBjYXNlLg0KPiA+Pj4NCj4gPj4+IEJ1dCBpZiB0aGUgY29sbGVjdG9yIGRvZXMgdGhl IHRyYW5zbGF0aW9uIHRvIGEgc3RhbmRhcmRpemVkIGZvcm1hdCwNCj4gPj4+IHRoZW4gdGhhdCBk YXRhIGlzIGF2YWlsYWJsZSBmb3IgYW55IFNBQ00gdXNhZ2UgaW1tZWRpYXRlbHkgd2l0aCBubw0K PiA+Pj4gbmVlZCBmb3IgdXBkYXRlcyB0byBhbnkgb3RoZXIgcGFydCBvZiB0aGUgU0FDTSBlbnZp cm9ubWVudC4gIEluIHRoZQ0KPiA+Pj4gd29yc3QgY2FzZSBJIHdvdWxkIGhhdmUgbXkgb3duIElU IGRlcGFydG1lbnQgZGV2ZWxvcCBzb21ldGhpbmcgdG8NCj4gPj4+IGZpbGwgaW4gdGhlIGdhcHMs IGFuZCB0aGUgb25seSBwYXJ0IHRoZXkgd291bGQgbmVlZCB0byB3b3JyeSBhYm91dA0KPiA+Pj4g aXMgdGhlIHRhZyBjb2xsZWN0b3ItdG8tY29tbW9uLURNIGZvciB0aGF0IHNwZWNpZmljIHRhZyB0 eXBlLg0KPiA+Pj4NCj4gPj4+IFRoZSBkb3duc2lkZSBpcyB0aGF0IEkgbWF5IG5lZWQgdG8gaW5z dGFsbCBhbmQgbWFpbnRhaW4gbXVsdGlwbGUNCj4gPj4+IGFnZW50cyBvbiBzb21lIHN5c3RlbXMs IGJ1dCB0aGUgbW9zdCBsaWtlbHkgY2FzZSBpcyB0aGF0IHRoYXQga2luZA0KPiA+Pj4gb2YgY3Vz dG9taXphdGlvbiB3aWxsIG9ubHkgYmUgbmVjZXNzYXJ5IHRvIGNvdmVyIHN5c3RlbXMgdGhhdA0K PiA+Pj4gb3RoZXJ3aXNlIHdvdWxkbid0IGJlIGNvdmVyZWQgYXQgYWxsLg0KPiA+Pj4NCj4gPj4+ IFNvLCB5ZWFoLCB5b3VyIG9wdGlvbiAoQykgaXMgd2hhdCBJIHdvdWxkIGdvIHdpdGggd2l0aCAo RSkgYmVpbmcgdGhlDQo+ID4+PiBtb3N0IHBhbGF0YWJsZSBvZiBhbnkgb2YgdGhlIG90aGVyIG9w dGlvbnMuDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+IC0tZ3VuDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+IE9u IDUvMzEvMjAxNiAxMDo1MiBBTSwgU2NobWlkdCwgQ2hhcmxlcyBNLiB3cm90ZToNCj4gPj4+PiBI aSBHdW5uYXIsDQo+ID4+Pj4NCj4gPj4+PiBDb21tZW50cyBiZWxvdzoNCj4gPj4+Pg0KPiA+Pj4+ Pj4+IDMpIFRhZyBpbmZvcm1hdGlvbiBpbnRlbmRlZCBmb3IgdXNlIGluIGEgU0FDTSBlbnZpcm9u bWVudCBpcw0KPiA+Pj4gdHJhbnNsYXRlZA0KPiA+Pj4+Pj4+IGludG8gYSBjb21tb24gc3RhbmRh cmQgZGF0YSBmb3JtYXQgcHJpb3IgdG8gZGVsaXZlcnkgZnJvbSB0aGUNCj4gPj4+Pj4+PiBjb2xs ZWN0b3IuICBUaGlzIHdpbGwgc3RpbGwgY3JlYXRlIHNvbWUgbGltaXRhdGlvbiBvbiB0aGUgbnVt YmVyDQo+ID4+Pj4+Pj4gb2YgZm9ybWF0cyBzdXBwb3J0YWJsZSB3aXRoaW4gYSBTQUNNIGVudmly b25tZW50IHNpbmNlIGl0IGlzDQo+ID4+Pj4+Pj4gcmVsaWFudCBvbg0KPiA+Pj4+IHRoZQ0KPiA+ Pj4+Pj4+IGNvbGxlY3RvciBiZWluZyBhYmxlIHRvIGRvIHRoYXQgdHJhbnNsYXRpb24sIGJ1dCBh bnkgZGF0YSB0aGF0DQo+ID4+Pj4+Pj4gZG9lcyBlbnRlciB0aGUgU0FDTSBzcGhlcmUgd2lsbCBi ZSB1c2FibGUuDQo+ID4+Pj4+PiBUbyBtZSwgdGhpcyBkb2Vzbid0IHNlZW0NCj4gPj4+Pj4+IGRp ZmZlcmVudCBmcm9tIHRoZSBlYXJsaWVyIGNvbmNlcm5zIGFib3V0IHRoZSBQb3N0dXJlIENvbGxl Y3Rvcg0KPiA+Pj4+IHJlY2VpdmluZw0KPiA+Pj4+Pj4gZGF0YSBpdCBjYW5ub3QgcGFyc2UuDQo+ ID4+Pj4+IFdlbGwsIG5vLCBpdCdzIG5vdCBjb21tZW5zdXJhdGUsIGZvciBhdCBsZWFzdCB0aHJl ZSByZWFzb25zOg0KPiA+Pj4+Pg0KPiA+Pj4+PiAxKSAgVGhlIHRhZyB0eXBlcyB0aGF0IG5lZWQg dG8gYmUga25vd24gdG8gYSBjb2xsZWN0b3IgaXMgYSBzdWJzZXQNCj4gPj4+Pj4gb2YgYWxsIHRh ZyB0eXBlcywgc2luY2UgYSBjb2xsZWN0b3IgcnVucyBvbiBhIHBhcnRpY3VsYXIgdHlwZSBvZiBz eXN0ZW0uDQo+ID4+IEENCj4gPj4+Pj4gV2luZG93cyBhZ2VudCB3b3VsZCBub3QgYmUgZXhwZWN0 ZWQgdG8gYmUgYWJsZSB0byBoYW5kbGUNCj4gPj4+Pj4gT1NYLXNwZWNpZmljIHRhZyB0eXBlcy4N Cj4gPj4+PiBUcnVlIC0gSSBjbGVhcmx5IG92ZXJzdGF0ZWQgdGhlIGJ1cmRlbiBvbiBpbmRpdmlk dWFsIGVuZHBvaW50cywgc28NCj4gPj4+PiB0aGFuaw0KPiA+PiB5b3UNCj4gPj4+PiBmb3IgdGhl IGNvcnJlY3Rpb24uDQo+ID4+Pj4NCj4gPj4+PiBUaGF0IHNhaWQsIGZyb20gYW4gZW50ZXJwcmlz ZSBwZXJzcGVjdGl2ZSBJIHdvdWxkIHRoaW5rIHRoZSBzZXQgb2YNCj4gPj4+PiB0cmFuc2xhdG9y cyB3b3VsZCBiZSBjb25zdGFudCByZWdhcmRsZXNzIG9mIHdoZXRoZXIgdHJhbnNsYXRpb24NCj4g Pj4+PiBvY2N1cnJlZA0KPiA+Pj4gb24NCj4gPj4+PiBlbmRwb2ludHMgb3Igc2VydmVycy4gSWYg b25lIGVuZHBvaW50IGhhcyB0YWdzIG9mIGludGVyZXN0IHRoYXQgYXJlDQo+ID4+Pj4gbm90DQo+ ID4+IG9uZQ0KPiA+Pj4+IG9mIHRoZSBzcGVjaWZpZWQgU0FDTSBmb3JtcywgdGhlIGFwcHJvcHJp YXRlIHRyYW5zbGF0b3IgbmVlZHMgdG8gYmUNCj4gPj4+PiBzb21ld2hlcmUuIFRoZSBxdWVzdGlv biBpcyB3aGV0aGVyIHRoYXQgc29tZXdoZXJlIHNob3VsZCBiZSB0aGUNCj4gPj4+IGVuZHBvaW50 IG9yDQo+ID4+Pj4gdGhlIHNlcnZlci4gKE9yLCBhcyB5b3Ugbm90ZSBiZWxvdywgb24gdGhlIGVu ZC1jb25zdW1lci4pDQo+ID4+Pj4+IDIpICBTaW1pbGFyIHRvICgxKSwgYSBzaW5nbGUgY29sbGVj dG9yIGRvZXMgbm90IG5lY2Vzc2FyaWx5IG5lZWQNCj4gPj4+Pj4gdG8gYmUgYWJsZSB0byB0cmFu c2xhdGUgZXZlcnkgdGFnIHR5cGUgaXQgY291bGQgcG9zc2libHkgY29tZQ0KPiA+Pj4+PiBhY3Jv c3MuIFRoaXMgbWlnaHQgYmUgYmVjYXVzZSBtdWx0aXBsZSBjb2xsZWN0aW9uIG1ldGhvZHMgYXJl IGluDQo+ID4+Pj4+IHVzZSwgYSBjb2xsZWN0b3IgaXMgYnVpbHQgZm9yIGEgc2luZ2xlIG5hcnJv dyBmdW5jdGlvbiwgZXRjLg0KPiA+Pj4+IEkgdGhpbmsgSSBhZ3JlZSwgYnV0IEkgdGhpbmsgSSB3 b3VsZCBwaHJhc2UgaXQgZGlmZmVyZW50bHkuIEkgd291bGQNCj4gPj4+PiBzYXkNCj4gPj4gdGhh dA0KPiA+Pj4+IG5vdCBhbGwgdGFncyBvbiBhbiBlbmRwb2ludCBhcmUgbmVjZXNzYXJpbHkgb2Yg aW50ZXJlc3QgdG8gdGhlDQo+ID4+IGVudGVycHJpc2UuDQo+ID4+Pj4gU29tZSB0eXBlcyBvZiB0 YWdzIG1pZ2h0IGJlIGdlbmVyYWxseSB1bnJlbGlhYmxlIGluIG5hdHVyZSAoZS5nLiwgYQ0KPiA+ Pj4+IHBvb3IgY29ycmVsYXRvciB3aXRoIHNvZnR3YXJlIHByZXNlbmNlKSwgbWlnaHQgbm90IGhh dmUgdGhlIG5lZWRlZA0KPiA+Pj4+IG1ldGFkYXRhDQo+ID4+PiBib3V0DQo+ID4+Pj4gaW5zdGFs bGVkIHNvZnR3YXJlIHByb2R1Y3RzLCBvciBjb3VsZCBiZSBmb3Igc29mdHdhcmUgdGhlDQo+ID4+ Pj4gZW50ZXJwcmlzZQ0KPiA+Pj4gZG9lc24ndA0KPiA+Pj4+IGNhcmUgYWJvdXQgbW9uaXRvcmlu Zy4gSW4gdGhlIGZpcnN0IHR3byBjYXNlcywgdGhlIHByZXNlbmNlIG9mIGFuDQo+ID4+IGFsdGVy bmF0ZQ0KPiA+Pj4+IHRhZyB0eXBlIGZyb20gdGhlIHNhbWUgc291cmNlIChhbmQgY292ZXJpbmcg dGhlIHNhbWUgcHJvZHVjdHMpDQo+ID4+Pj4gY291bGQNCj4gPj4+IHJlbmRlcg0KPiA+Pj4+IHRo ZSBzZWNvbmQgZm9ybWF0IGNvbXBsZXRlbHkgdW5uZWNlc3NhcnkuDQo+ID4+Pj4NCj4gPj4+PiBB cmUgd2Ugc2F5aW5nIHRoZSBzYW1lIHRoaW5nIHVzaW5nIGRpZmZlcmVudCB3b3JkcyBoZXJlPw0K PiA+Pj4+DQo+ID4+Pj4+IDMpICBUaGVyZSBpcyBtb3JlIHRoYW4gb25lIGNvbnN1bWVyIGZvciB0 aGUgY29sbGVjdGVkIGRhdGEuICBJdA0KPiA+Pj4+PiBjb3VsZA0KPiA+PiBiZQ0KPiA+Pj4+PiBm b3IgdnVsbmVyYWJpbGl0eSBhbmFseXNpcywgbGljZW5zZSBhZG1pbmlzdHJhdGlvbiwgaW52ZW50 b3J5LA0KPiA+Pj4+PiBjb21wbGlhbmNlLCBhbmQgc28gb24uICBFdmVyeSBjdXJyZW50IGFuZCBm dXR1cmUgdXNlIGZvciB0aGF0DQo+ID4+Pj4+IGluZm9ybWF0aW9uIHdvdWxkIG5lZWQgdG8gYmUg YWJsZSB0byBwYXJzZSBldmVyeSBzdXBwb3J0ZWQgdGFnDQo+ID4+Pj4+IHR5cGUgaW4gb3JkZXIg dG8gZG8gaXRzIGZ1bmN0aW9uLiAgQSBjb25zaWRlcmFibGUgYW1vdW50IG9mDQo+ID4+Pj4+IGR1 cGxpY2F0aW9uIHRvIHNheSB0aGUgdmVyeSBsZWFzdC4gIFRoZSBzYW1lIGNhbiBiZSBzYWlkIGZv ciBldmVyeQ0KPiA+Pj4+PiBvdGhlciB0eXBlIG9mIGRhdGENCj4gPj4gYmVpbmcNCj4gPj4+Pj4g Y29sbGVjdGVkIGZyb20gYW4gZW5kcG9pbnQuDQo+ID4+Pj4gSSB0aGluayB5b3UgYXJlIHRhbGtp bmcgYWJvdXQgYSBzY2VuYXJpbyB3aGVyZSBldmVyeSBlbmQgY29uc3VtZXINCj4gPj4+PiBvZg0K PiA+PiB0YWdzDQo+ID4+PiBpcw0KPiA+Pj4+IHJlc3BvbnNpYmxlIGZvciBub3JtYWxpemF0aW9u LiBUaGF0IGlzIGNlcnRhaW5seSB5ZXQgYW5vdGhlciBvcHRpb24NCj4gPj4gKGNhbGwgaXQNCj4g Pj4+PiBvcHRpb24gNCksIGFsdGhvdWdoIEkgYWdyZWUgdGhhdCBpdCBoYXMgdGhlIHdlYWtuZXNz ZXMgeW91IG5vdGUNCj4gPj4+PiBoZXJlLiBJIHdvdWxkIGFyZ3VlIHRoYXQgdGhpcyBpcyBub3Qg ZXF1aXZhbGVudCB0byBoYXZpbmcNCj4gPj4+PiBub3JtYWxpemF0aW9uIGRvbmUgb24NCj4gPj4g dGhlDQo+ID4+Pj4gUG9zdHVyZSBWYWxpZGF0b3IsIHdoaWNoIGlzIG1vcmUgd2hhdCBJIHdhcyB0 aGlua2luZyBvZiBpbiBteQ0KPiA+Pj4+IHByZXZpb3VzIGVtYWlsLg0KPiA+Pj4+DQo+ID4+Pj4g R2l2ZW4gdGhpcyBkaXNjdXNzaW9uLCBpdCBtaWdodCBiZSB1c2VmdWwgdG8gcmVjYXN0IG91ciBv cHRpb25zDQo+ID4+Pj4gYmFzZWQgb24NCj4gPj4gd2hvDQo+ID4+Pj4gaXMgcmVzcG9uc2libGUg Zm9yIGRhdGEgbm9ybWFsaXphdGlvbi4NCj4gPj4+Pg0KPiA+Pj4+IEEpIE5vIG5vcm1hbGl6YXRp b24gKyBkYXRhIG1vZGVsLiBQb3N0dXJlIENvbGxlY3RvcnMgY29sbGVjdCBhbmQNCj4gPj4+PiBT V0lEDQo+ID4+PiBNJkENCj4gPj4+PiB0cmFuc3BvcnRzIG9ubHkgYSBkZWZpbmVkIHNldCBvZiB0 YWcgdHlwZXMgYW5kIGZvcm1hdHMuIEFsbCB0YWdzDQo+ID4+Pj4gdGhhdA0KPiA+PiBhcmUNCj4g Pj4+PiBub3QgZXhwcmVzc2VkIGluIHRob3NlIGZvcm1hdHMgYXJlIG5vdCBjb2xsZWN0ZWQgYW5k IGFyZSBpZ25vcmVkLg0KPiA+PiAoRm9ybWVyDQo+ID4+Pj4gb3B0aW9uIDEpDQo+ID4+Pj4gQikg Tm8gbm9ybWFsaXphdGlvbiArIG5vIGRhdGEgbW9kZWwuIFBvc3R1cmUgQ29sbGVjdG9ycyBjb2xs ZWN0IGFuZA0KPiA+Pj4+IFNXSUQNCj4gPj4+IE0mQQ0KPiA+Pj4+IHRyYW5zcG9ydHMgYW55IHR5 cGUgb3IgZm9ybWF0IG9mIHRhZ3MuIFRhZyBjb25zdW1lcnMgY29sbGVjdGluZw0KPiA+Pj4+IHRh Z3MNCj4gPj4gZnJvbQ0KPiA+Pj4+IHRoZSBDTURCL1Bvc3R1cmUgVmFsaWRhdG9yIGdldCB3aGF0 ZXZlciB0YWdzIHRoZXkgY2FuIHVuZGVyc3RhbmQNCj4gPj4+PiBhbmQNCj4gPj4+IG90aGVyDQo+ ID4+Pj4gdHlwZXMgb2YgdGFncyBhcmUgaWdub3JlZC4NCj4gPj4+PiBDKSBQb3N0dXJlIENvbGxl Y3RvciBub3JtYWxpemF0aW9uLiBUaGUgUG9zdHVyZSBDb2xsZWN0b3IgaXMNCj4gPj4+PiByZXNw b25zaWJsZQ0KPiA+PiBmb3INCj4gPj4+PiBub3JtYWxpemluZyB0aGUgdGFncyBjb2xsZWN0ZWQg b24gYW4gZW5kcG9pbnQgcHJpb3IgdG8gZGVsaXZlcnkgdG8NCj4gPj4+PiBhDQo+ID4+IFBvc3R1 cmUNCj4gPj4+PiBWYWxpZGF0b3IuIFNXSUQgTSZBIHN1cHBvcnRzIHRyYW5zbWlzc2lvbiBvZiBh IGRlZmluZWQgc2V0IG9mIHRhZw0KPiA+Pj4+IHR5cGVzDQo+ID4+PiBhbmQNCj4gPj4+PiBmb3Jt YXRzLCB0byB3aGljaCB0aGUgUG9zdHVyZSBDb2xsZWN0b3IgdHJhbnNsYXRlcy4gKE9wdGlvbiAz IGZyb20NCj4gPj4gR3VubmFyJ3MNCj4gPj4+PiBlYXJsaWVyIGVtYWlsKQ0KPiA+Pj4+IEQpIFBv c3R1cmUgVmFsaWRhdG9yIG5vcm1hbGl6YXRpb24uIFBvc3R1cmUgQ29sbGVjdG9ycyBjb2xsZWN0 IGFuZA0KPiA+Pj4+IFNXSUQNCj4gPj4+IE0mQQ0KPiA+Pj4+IHRyYW5zcG9ydHMgYW55IHR5cGUg b3IgZm9ybWF0IG9mIHRhZ3MuIFRoZSByZWNlaXZpbmcgUG9zdHVyZQ0KPiA+Pj4+IFZhbGlkYXRv cg0KPiA+PiBpcw0KPiA+Pj4+IHJlc3BvbnNpYmxlIGZvciBub3JtYWxpemluZyB0aGUgaW5jb21p bmcgZGF0YSB0byBhIHNldCBvZiB0eXBlcyBhbmQNCj4gPj4gZm9ybWF0cw0KPiA+Pj4+IGlkZW50 aWZpZWQgYnkgU0FDTSAoYnV0IHdob3NlIHNwZWNpZmljYXRpb24gaXMgb3V0c2lkZSB0aGUgc2Nv cGUgb2YNCj4gPj4+PiBTV0lEDQo+ID4+PiBNJkENCj4gPj4+PiBpdHNlbGYpLg0KPiA+Pj4+IEUp IENvbnN1bWVyIG5vcm1hbGl6YXRpb24uIFBvc3R1cmUgQ29sbGVjdG9ycyBjb2xsZWN0IGFuZCBT V0lEIE0mQQ0KPiA+Pj4+IHRyYW5zcG9ydHMgYW55IHR5cGUgb3IgZm9ybWF0IG9mIHRhZ3MuIFRh Z3MgYXJlIHN0b3JlZCBvbiB0aGUNCj4gPj4+PiBQb3N0dXJlIFZhbGlkYXRvciBvciBDTURCIHVu dGlsIGEgY29uc3VtZXIgbmVlZHMgdGhlbS4gVGhlDQo+IGNvbnN1bWVyDQo+ID4+Pj4gdGhlbg0K PiA+Pj4gY29sbGVjdHMNCj4gPj4+PiB0aGUgcmVsZXZhbnQgdGFncyBhbmQgaXMgcmVzcG9uc2li bGUgZm9yIHRyYW5zbGF0aW5nIGFueSB0YWdzIGludG8NCj4gPj4+PiBhDQo+ID4+IGZvcm1hdA0K PiA+Pj4+IGl0IGNhbiBjb25zdW1lLiAoT3B0aW9uIDQgZnJvbSB0aGlzIGVtYWlsKQ0KPiA+Pj4+ DQo+ID4+Pj4gR3VubmFyLCBJIGJlbGlldmUgeW91IGFyZSBhbiBhZHZvY2F0ZSBvZiBDLCBjb3Jy ZWN0PyBJIGFsc28gdGhpbmsNCj4gPj4+PiBib3RoDQo+ID4+IG9mDQo+ID4+Pj4gdXNlIGFncmVl IHRoYXQgb3B0aW9ucyBCIGFuZCBFIGFyZSBwcm9iYWJseSBiYWQgaWRlYXMgc2luY2UgdGhlDQo+ ID4+Pj4gZGF0YSBjb25zdW1lcnMgY2FuIGhhdmUgbm8gaWRlYSBhcyB0byB3aGF0IHRoZXkgYXJl IGdvaW5nIHRvIGdldC4NCj4gPj4+PiBQZXJzb25hbGx5LA0KPiA+PiBJDQo+ID4+Pj4gdGhpbmsg SSdtIG1vcmUgb2YgYSBmYW4gb2YgRCAtIGl0IGhhcyBhIGNlbnRyYWxpemVkIHJhdGhlciB0aGFu DQo+ID4+IGRpc3RyaWJ1dGVkDQo+ID4+Pj4gbm9ybWFsaXphdGlvbiBmdW5jdGlvbiBhbmQgY2Fu IGF2b2lkIHVubmVjZXNzYXJ5IGRhdGEgbG9zcy4NCj4gPj4+Pg0KPiA+Pj4+IEd1bm5hciwgaGF2 ZSBJIG1pc2ludGVycHJldGVkIGFueSBvZiB5b3VyIGNvbW1lbnRzPyBEbyBvdGhlcnMgaGF2ZQ0K PiA+Pj4+IGFueSB0aG91Z2h0cyBvbiB0aGlzPw0KPiA+Pj4+DQo+ID4+Pj4gVGhhbmtzLA0KPiA+ Pj4+IENoYXJsZXMNCj4gPj4+Pg0KPiANCj4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCj4gc2FjbSBtYWlsaW5nIGxpc3QNCj4gc2FjbUBpZXRmLm9yZw0K PiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20NCj4gX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gc2FjbSBtYWlsaW5nIGxp c3QNCj4gc2FjbUBpZXRmLm9yZw0KPiBodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL3NhY20NCg== From nobody Thu Jun 2 13:10:35 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 99EE012D1C2 for ; Thu, 2 Jun 2016 13:10:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.002 X-Spam-Level: X-Spam-Status: No, score=-2.002 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=microsoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oWyvKCPL9rM8 for ; Thu, 2 Jun 2016 13:10:30 -0700 (PDT) Received: from na01-bn1-obe.outbound.protection.outlook.com (mail-bn1on0742.outbound.protection.outlook.com [IPv6:2a01:111:f400:fc10::742]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AE01D12B039 for ; Thu, 2 Jun 2016 13:10:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=selector1; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=HG8so6M0lvcS/Bs/ZCufG3uuj5HFVmAT9QvPwov+d0Q=; b=AWe2SB7FdQEO/WjT8c0/nUKwI5OT+IIrrTxEGahm9xtsgHSdUx5ercfUzSuKZPdawUVpN+ChHHzN8QSiKvbHnpIPOZ/VjWhzc38dBBwWZDTqBrkyc5eQIf06D4ASumcrQC+r/ch/g0b/BuVCXX1DfuhE/6jBythvyUT5X3gRjuQ= Received: from BN1PR03MB123.namprd03.prod.outlook.com (10.255.201.27) by BN1PR03MB123.namprd03.prod.outlook.com (10.255.201.27) with Microsoft SMTP Server (TLS) id 15.1.497.12; Thu, 2 Jun 2016 20:09:54 +0000 Received: from BN1PR03MB123.namprd03.prod.outlook.com ([169.254.11.56]) by BN1PR03MB123.namprd03.prod.outlook.com ([169.254.11.56]) with mapi id 15.01.0497.019; Thu, 2 Jun 2016 20:09:54 +0000 From: Michael Godsey To: "Waltermire, David A. (Fed)" , Gunnar Engelbach , Adam Montville , "Schmidt, Charles M." Thread-Topic: [sacm] Some technical details for SWID M&A proposals Thread-Index: AQHRvGM4QPRIJzVOyEGLmQEC5y3Mgp/VXPcAgADfQzCAAFDdgIAADnqw Date: Thu, 2 Jun 2016 20:09:53 +0000 Message-ID: References: <827360a9-1c95-1a9a-50c0-12b0d6cf323d@ThreatGuard.com> <6bb4b3ef-7afa-d981-60cd-c90f7a4e23e8@ThreatGuard.com> <5707e531-ef34-5ea4-04c8-739d9c7be123@ThreatGuard.com> <6bacd100-1dd8-921a-1bc6-e4210760d1bf@ThreatGuard.com> <1FF03FBD-47A9-44CB-91E9-1FEA8FE4BD9D@gmail.com> <34147ecb-60d8-536e-409d-315b6783f128@ThreatGuard.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: nist.gov; dkim=none (message not signed) header.d=none;nist.gov; dmarc=none action=none header.from=microsoft.com; x-originating-ip: [75.172.79.145] x-ms-office365-filtering-correlation-id: 6120af4a-5628-4ac0-ac9e-08d38b21dcc4 x-microsoft-exchange-diagnostics: 1; BN1PR03MB123; 5:Sitdy+zC/WAg84vscVWl66qUpakDflQQfjfjymCeTIBGIF6WPR+yyaHuRdzk1bTN/B6BUKSJaM3EOh4tVXJoRAZwlkD+UMy8iqBSsxzqaN9fywwYXyGoCYU9WOwAM+haojDoTI1widXKMyaHnGN39A==; 24:19yJwnmiWTGFkJcA8BfzOPk9MvQMbGPOVyxRfMNHjzzAb1QLTcr95gzQX2JiO/AZEX69ccz8vxhim+/idgLizuCQcDZ8CE91KK/JuxM87P0=; 7:n2GHOUhb1FD+V2+GuF5xQQzDluqP46lMkS8nQpHq55i+DnoT4/3jd5LVhyD5HUV57jlP3FWm75L/XFs5ZeLZIvXQrbtxDLzEBkUekQEyZ8Z5aCWjsQBPcA5ZXRuOQHQtvtxv4za+aSmiuGQWdd9fW3eRRJLP/c4YeTBNih+ogyGcM4HaYdUHHcr1jXPpdhtNQ4P+dmZEOmxay8GNaePaWA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BN1PR03MB123; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(65766998875637)(72170088055959)(120809045254105)(166708455590820)(192374486261705)(275809806118684)(211171220733660); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(61425038)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026)(61426038)(61427038); SRVR:BN1PR03MB123; BCL:0; PCL:0; RULEID:; SRVR:BN1PR03MB123; x-forefront-prvs: 0961DF5286 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(24454002)(13464003)(51444003)(52314003)(377454003)(189998001)(5001770100001)(86362001)(2900100001)(10400500002)(99286002)(50986999)(54356999)(3280700002)(122556002)(106116001)(93886004)(10290500002)(19580405001)(5003600100002)(19580395003)(92566002)(33656002)(76176999)(586003)(5004730100002)(87936001)(2950100001)(3660700001)(10090500001)(5008740100001)(74316001)(6116002)(2906002)(81166006)(11100500001)(76576001)(15975445007)(8676002)(5005710100001)(5002640100001)(8936002)(3846002)(31430400001)(66066001)(102836003)(4326007)(9686002)(8666004)(7059030); DIR:OUT; SFP:1102; SCL:1; SRVR:BN1PR03MB123; H:BN1PR03MB123.namprd03.prod.outlook.com; FPR:; SPF:None; MLV:sfv; LANG:en; spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-OriginatorOrg: microsoft.com X-MS-Exchange-CrossTenant-originalarrivaltime: 02 Jun 2016 20:09:53.4538 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 72f988bf-86f1-41af-91ab-2d7cd011db47 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN1PR03MB123 Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Some technical details for SWID M&A proposals X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 02 Jun 2016 20:10:33 -0000 VGhhbmtzIERhdmlkLCBJIGtuZXcgdGhlcmUgd2VyZSBvdGhlciBlZmZvcnRzIGJhc2VkIG9uIHNv bWUgZGlzY3Vzc2lvbnMgaW4gQXByaWwgYnV0IGRpZG4ndCBrbm93IHRoZSBzcGVjaWZpY3Mgc28g dGhpcyBpcyBtb3N0IGhlbHBmdWwuICAgSSBjb21wbGV0ZWx5IHN1cHBvcnQgdGhlIG5vdGlvbiBv ZiBhIG1vcmUgY29tcHJlaGVuc2l2ZSBwb3J0YWwgdGhhdCBhIHZlbmRvciBjb3VsZCBzdG9yZSBy ZWxhdGVkIGRhdGEsIG5vdCBqdXN0IHRhZ3MuICAgQXMgSSBtZW50aW9uZWQsIHRhZ3MgYW5kIHRo ZWlyIGZpbGUgbWFuaWZlc3RzIGlzIG9ubHkgb25lIG9mIHRoZSB0aGluZ3MgSSB3b3VsZCB0aGlu ayB3ZSB3b3VsZCB3YW50IHRvIGNvdmVyLiAgIFdlIGRvIHdhbnQgdG8gZmlndXJlIG91dCBob3cg YnJvYWRseSB0byBtYWtlIGl0LCB3aGlsZSBub3QgaW5jbHVkaW5nIGV2ZXJ5dGhpbmcgdW5kZXIg dGhlIHN1bi4gICBJIHRoaW5rIGl0IG1pZ2h0IGJlIGJyb2FkZXIgdGhhbiBqdXN0IHNlY3VyaXR5 IGF1dG9tYXRlZCBpbmZvLCB0aG91Z2ggSSB0aGluayB0aGF0IHByb2JhYmx5IGNvdmVycyBhIGxh cmdlICUgb2YgaXQuDQoNCldpbGwgYmUgZ3JlYXQgdG8gY29sbGFib3JhdGUgYW5kIG1ha2Ugc3Vy ZSB0aGUgd29yayBpbiBUYWcgVmF1bHQgaXNuJ3QgZHVwbGljYXRlIGFuZCByZWR1bmRhbnQsIGFu ZCB3ZSBjYW4gbGV2ZXJhZ2UgcmF0aGVyIHRoYW4gcmVpbnZlbnQuICBJJ2xsIGNoYXQgbW9yZSB3 aXRoIHlvdSBvbiB0aGF0IGFzIHdlIGdvIGFsb25nICA6KQ0KDQotLS0tLU9yaWdpbmFsIE1lc3Nh Z2UtLS0tLQ0KRnJvbTogV2FsdGVybWlyZSwgRGF2aWQgQS4gKEZlZCkgW21haWx0bzpkYXZpZC53 YWx0ZXJtaXJlQG5pc3QuZ292XSANClNlbnQ6IFRodXJzZGF5LCBKdW5lIDIsIDIwMTYgMTI6MTQg UE0NClRvOiBNaWNoYWVsIEdvZHNleSA8bWdvZHNleUBtaWNyb3NvZnQuY29tPjsgR3VubmFyIEVu Z2VsYmFjaCA8Z3VubmFyLmVuZ2VsYmFjaEB0aHJlYXRndWFyZC5jb20+OyBBZGFtIE1vbnR2aWxs ZSA8YWRhbS53Lm1vbnR2aWxsZUBnbWFpbC5jb20+OyBTY2htaWR0LCBDaGFybGVzIE0uIDxjbXNj aG1pZHRAbWl0cmUub3JnPg0KQ2M6IHNhY21AaWV0Zi5vcmcNClN1YmplY3Q6IFJFOiBbc2FjbV0g U29tZSB0ZWNobmljYWwgZGV0YWlscyBmb3IgU1dJRCBNJkEgcHJvcG9zYWxzDQoNCk1pY2hhZWws DQoNCldlIGFyZSBpbiBmYWN0IHdvcmtpbmcgb24gYSBkYXRhIHJlcG9zaXRvcnkgc3RhbmRhcmQg Zm9yIHNlY3VyaXR5IGF1dG9tYXRpb24gaW5mb3JtYXRpb24gaW4gSUVURiBNSUxFIFsxXS4gV2Ug YXJlIGN1cnJlbnRseSB3b3JraW5nIG9uIGdlbmVyYWxpemluZyB0aGUgY3VycmVudCBkcmFmdCwg d2hpY2ggaXMgZm9jdXNlZCBvbiBpbmNpZGVudCBhbmQgaW5kaWNhdG9yIGluZm9ybWF0aW9uLCB0 byBhbGxvdyBmb3IgYW4gZXh0ZW5zaWJsZSBsaXN0IG9mIGluZm9ybWF0aW9uIHR5cGVzLiBUaGlz IGlzIGJhc2VkIG9uIGEgcHJlc2VudGF0aW9uIEkgbWFkZSBhdCBJRVRGIDk1IGluIE1JTEUgWzJd LiBTb2Z0d2FyZSB0YWcgaW5mb3JtYXRpb24gaXMgb25lIG9mIHRoZSB0eXBlcyB0aGF0IHdlIHdh bnQgdG8gYWxsb3cuDQoNClRoZSB2YWx1ZSBvZiBnZW5lcmFsaXppbmcgc3VjaCBhbiBhcHByb2Fj aCBpcyB0aGF0IHZlbmRvcnMgYW5kIGVuZC11c2VyIG9yZ2FuaXphdGlvbnMgY2FuIHN0b3JlIFNX SUQgdGFncywgdnVsbmVyYWJpbGl0eSByZWNvcmRzLCBjb25maWd1cmF0aW9uIGNoZWNrbGlzdHMs IGFuZCBvdGhlciBmb3JtcyBvZiBzZWN1cml0eSBhdXRvbWF0aW9uIGRhdGEgaW4gdGhlIHNhbWUg ZGF0YSByZXBvc2l0b3J5IGFsbG93aW5nIHRvb2xzIHRvIGRpc2NvdmVyLCBzZWFyY2gsIGFjY2Vz cywgYW5kIHJldHJpZXZlIGFsbCBvZiB0aGlzIGluZm9ybWF0aW9uIHVzaW5nIHRoZSBzYW1lIG1l Y2hhbmlzbXMuIEEgb25lLW9mZiB0YWcgcmVwb3NpdG9yeSBzdGFuZGFyZCBpcyBub3QgYXMgdXNl ZnVsIGluIG15IHZpZXcsIHNpbmNlIGl0IGNyZWF0ZXMgeWV0IGFub3RoZXIgbmV3IHRoaW5nIGZv ciBhIHNwZWNpYWxpemVkIHB1cnBvc2UgdGhhdCB2ZW5kb3JzIG5lZWQgdG8gYnVpbGQgYW5kIHVz ZXJzIG5lZWQgdG8gb3BlcmF0ZS4NCg0KV2UgYXJlIGRldmVsb3BpbmcgdGhlc2Ugc3BlY2lmaWNh dGlvbnMgYXQ6IGh0dHBzOi8vZ2l0aHViLmNvbS9DSVNlY3VyaXR5L1JPTElFDQoNCldlIHBsYW4g dG8gcG9zdCBhbiBpbnRlcmltIFJPTElFIHVwZGF0ZSBiYXNlZCBvbiB0aGlzIHRvbW9ycm93OyBo b3dldmVyLCBtb3JlIHdvcmsgaXMgbmVlZGVkIHRvIGFjaGlldmUgb3VyIGdvYWxzLg0KDQpXZSB3 b3VsZCB3ZWxjb21lIHRoZSBwYXJ0aWNpcGF0aW9uIG9mIHRoZSBUYWdWYXVsdCBncm91cCBpbiB0 aGlzIHdvcmsuDQoNClsxXSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1p ZXRmLW1pbGUtcm9saWUvDQpbMl0gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mvc2xp ZGVzLTk1LW1pbGUtMy8NCg0KVGhhbmtzLA0KRGF2ZQ0KDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2Fn ZS0tLS0tDQo+IEZyb206IHNhY20gW21haWx0bzpzYWNtLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJl aGFsZiBPZiBNaWNoYWVsIEdvZHNleQ0KPiBTZW50OiBUaHVyc2RheSwgSnVuZSAwMiwgMjAxNiAx MDozNCBBTQ0KPiBUbzogR3VubmFyIEVuZ2VsYmFjaCA8Z3VubmFyLmVuZ2VsYmFjaEB0aHJlYXRn dWFyZC5jb20+OyBBZGFtIA0KPiBNb250dmlsbGUgPGFkYW0udy5tb250dmlsbGVAZ21haWwuY29t PjsgU2NobWlkdCwgQ2hhcmxlcyBNLg0KPiA8Y21zY2htaWR0QG1pdHJlLm9yZz4NCj4gQ2M6IHNh Y21AaWV0Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtzYWNtXSBTb21lIHRlY2huaWNhbCBkZXRhaWxz IGZvciBTV0lEIE0mQSBwcm9wb3NhbHMNCj4gDQo+IEFsdGhvdWdoIEkgYWdyZWUgdGhhdCBkYXRh IHRyYW5zZm9ybWF0aW9uIGF0IHRoZSBlbmQgcG9pbnQgaXMgYXMgZmFyIA0KPiBvdXQgb24gdGhl IGxpbWIgYXMgeW91IGNhbiBnZXQgKHNob3J0IG9mIGRhdGEgY3JlYXRpb24gaXRzZWxmIGJlaW5n IA0KPiBkb25lIGZvciBhbGwgZm9ybWF0cyBuZWVkZWQsIG5vdCBsaWtlbHkgdG8gZXZlciBoYXBw ZW4pLCBJIHRoaW5rIHRoYXQgd291bGQgYmUgdmVyeSBkaWZmaWN1bHQgdG8NCj4gZXhwZWN0IG9u IGEgZ29vZCBudW1iZXIgb2YgZW5kcG9pbnRzLiAgIEl0IGRvZXNuJ3QgbWFrZSBzZW5zZSB0byBl eHBlY3QNCj4gZWFjaCBlbmRwb2ludCB0byBoYXZlIHRoZSBjYXBhYmlsaXR5IHRvIHRyYW5zcG9z ZSBmcm9tIGFsbCB0aGUgZGlmZmVyZW50DQo+IHBvdGVudGlhbCBmb3JtYXRzLiAgIFNvbWUgd29u J3QgaGF2ZSBwcm9jZXNzaW5nIGNhcGFiaWxpdHkgdG8gZG8gc28sIHNvbWUNCj4gd29uJ3QgaGF2 ZSByb29tIG9uIHRoZSBlbmRwb2ludCBmb3Igc3VjaCBhIHRyYW5zcG9zaXRpb24gc2VydmljZSwg ZXRjLiAgIEl0DQo+IHNlZW1zIG11Y2ggbW9yZSBsaWtlbHkgdGhlcmUgd291bGQgbmVlZCB0byBi ZSBhbiBhZ2dyZWdhdG9yIHNlcnZpY2UgDQo+IHRoYXQgcHVsbHMgZnJvbSBlYWNoIGVuZHBvaW50 IGFuZCBrbm93cyBob3cgdG8gZG8gdGhlIHRyYW5zcG9zaXRpb24uICANCj4gVGhpcyBpcyBwcm9i YWJseSB0aGUgcHJveHkgeW91IHJlZmVyZW5jZSwgdGhvdWdoIEkgZG9uJ3QgdGhpbmsgb2YgdGhh dCANCj4gdGVybSBpbiByZWxhdGlvbiB0byBjb2xsZWN0aW5nIGFuZCB0cmFuc3Bvc2luZyBkYXRh LiAgQnV0IG1heWJlIHRoZSANCj4gdGVybSBhZ2dyZWdhdG9yIGRvZXNuJ3QgcmVzb25hdGUgd2Vs bCB3aXRoIGV2ZXJ5b25lIGVpdGhlci4NCj4gDQo+IFJlOiB0aGUgbG9zc3kgY29udmVyc2lvbiBp c3N1ZSwgSSBkbyB0aGluayB0aGF0IGEgcmVwb3NpdG9yeSBvZiB0YWcgDQo+IGRhdGEgaGVscHMg YWRkcmVzcyB0aGlzLCB3aGVyZWJ5IHlvdSBjYW4gdXNlIGEgdGFnIElEIGFuZCBoaXQgdXAgYSBz ZXJ2aWNlIHRvIHJldHJpZXZlIHRoZQ0KPiB0YWcncyBmdWxsIGFuZCBvcmlnaW5hbCBkYXRhLCB3 b3VsZCBiZSBtdWNoIG5lZWRlZC4gICBXZSBzdGFydGVkIGRpc2N1c3Npbmcgb24NCj4gdGhlIG5l ZWQgZm9yIHNvbWUgc3RhbmRhcmQgZm9yIHRhZyByZXBvc2l0b3J5IHNlcnZpY2UgYXQgdGhlIE5J U1QgDQo+IHdvcmtzaG9wIG9uIFRhZyBpbXBsZW1lbnRhdGlvbiBpbiBBcHJpbCwgYW5kIGFyZSBj cmVhdGluZyBhIFRhZyBWYXVsdCANCj4gd29yayBncm91cCB0byBsb29rIGF0IGFkZHJlc3Npbmcg dGhhdC4gIFByb2JhYmx5IGVub3VnaCB0byBzYXkgaXQgDQo+IHdvdWxkIGJlIG91dCBvZiBzY29w ZSBmb3IgdGhpcyBTQUNNIGVmZm9ydCwgYWx0aG91Z2gga25vd2luZyB0aGF0IHN1Y2ggDQo+IGEg c3RhbmRhcmRzIGNvbXBsaWFudCBzZXJ2aWNlIGV4aXN0ZWQgYW5kIGNvdmVyaW5nIGhvdyAoY29u Y2VwdHVhbGx5IA0KPiBhbnl3YXksIGF0IHRoaXMgcG9pbnQpIHZhcmlvdXMgbW9uaXRvcmluZyBz ZXJ2aWNlcyBjb3VsZCB1dGlsaXplIHN1Y2ggDQo+IGEgdGFnIHJlcG9zaXRvcnksIHdvdWxkIGJl IGhlbHBmdWwgdG8gYWRkcmVzcyBJIHRoaW5rLg0KPiANCj4gLS0tLS1PcmlnaW5hbCBNZXNzYWdl LS0tLS0NCj4gRnJvbTogc2FjbSBbbWFpbHRvOnNhY20tYm91bmNlc0BpZXRmLm9yZ10gT24gQmVo YWxmIE9mIEd1bm5hciANCj4gRW5nZWxiYWNoDQo+IFNlbnQ6IFdlZG5lc2RheSwgSnVuZSAxLCAy MDE2IDY6MDYgUE0NCj4gVG86IEFkYW0gTW9udHZpbGxlIDxhZGFtLncubW9udHZpbGxlQGdtYWls LmNvbT47IFNjaG1pZHQsIENoYXJsZXMgTS4NCj4gPGNtc2NobWlkdEBtaXRyZS5vcmc+DQo+IENj OiBzYWNtQGlldGYub3JnDQo+IFN1YmplY3Q6IFJlOiBbc2FjbV0gU29tZSB0ZWNobmljYWwgZGV0 YWlscyBmb3IgU1dJRCBNJkEgcHJvcG9zYWxzDQo+IA0KPiANCj4gQ2hhcmxlczogIFllcywgdGhh dCdzIGEgZGVjZW50IHJlc3RhdGVtZW50IG9mIHdoYXQgSSBoYXZlIGluIG1pbmQuDQo+IA0KPiBB ZGFtOiAgSW4gbGluZSwgSSB0aGluaywgd2l0aCB3aGF0IHlvdSBhcmUgc2F5aW5nLCB0aGUgc29v bmVyIHRoZSBkYXRhIA0KPiBpcyB0cmFuc2Zvcm1lZCBpbnRvIHRoZSBjb21tb24gZm9ybWF0IHRo ZSBzb29uZXIgaW4gaXRzIGxpZmVjeWNsZSANCj4gY29tcG9uZW50cyBjYW4gYmUgY3JlYXRlZCB0 aGF0IG1ha2UgdXNlIG9mIHRoYXQgZGF0YS4gRG9pbmcgaXQgYXQgdGhlIA0KPiBlbmRwb2ludCAo b3IgYSBwcm94eSBhY3Rpbmcgb24gYmVoYWxmIG9mIGFuIGVuZHBvaW50KSBpcyBhcyBmYXIgb3V0 IG9uIA0KPiB0aGF0IGxpbWIgYXMgeW91IGNhbiBnZXQuDQo+IA0KPiBUaGUgZHJhd2JhY2ssIGhv d2V2ZXIsIGlzIHRoYXQgdGhlIG9yaWdpbmFsIHRhZyBpbmZvcm1hdGlvbiBpcyBub3QgDQo+IGF2 YWlsYWJsZSwgYW5kIHRoYXQgY291bGQgcmVwcmVzZW50IGEgZGF0YSBsb3NzIC0tIG9yIGEgbG9z c3kgDQo+IGNvbnZlcnNpb24sIGFzIENoYXJsZXMgaGFzIGJlZW4gY2hhcmFjdGVyaXppbmcgaXQu ICBJIHRoaW5rIHRoZXJlIGFyZSANCj4gd2F5cyBhcm91bmQgdGhhdCwgc3VjaCBhcyByZXRhaW5p bmcgZW5vdWdoIGluZm9ybWF0aW9uIHN1Y2ggdGhhdCBhbiANCj4gaW50ZXJlc3RlZCBwYXJ0eSBj b3VsZCBnbyBiYWNrIGFuZCBnZXQgdGhlIG9yaWdpbmFsIHRhZywgYnV0IHRoZSANCj4gYWN0dWFs IHByb2Nlc3Mgb2YgZG9pbmcgc29tZXRoaW5nIGxpa2UgdGhhdCB3b3VsZCBiZSBvdXRzaWRlIG9m IHRoZSBzY29wZSBvZiBTQUNNLg0KPiANCj4gQW5kIHdpdGggdGhhdCBJJ2xsIGxpbmdlciBhIGJp dCB0byBzZWUgd2hhdCBvdGhlcnMgaGF2ZSB0byBzYXkuDQo+IA0KPiANCj4gLS1ndW4NCj4gDQo+ IA0KPiBPbiA2LzEvMjAxNiA1OjEwIFBNLCBBZGFtIE1vbnR2aWxsZSB3cm90ZToNCj4gPiBUbyBj bGFyaWZ5LCB0aGlzIGlzbuKAmXQgYXMgbXVjaCBhYm91dCB0YWdzIGFzIGl0IGlzIGFib3V0IHRo ZSANCj4gPiBub3JtYWxpemF0aW9uIG9mDQo+IGRpZmZlcmVudCB0YWdnaW5nIHN0cnVjdHVyZXMs IGNvcnJlY3Q/ICBJbiB0aGF0IGNhc2UsIEkgdGhpbmsgdGhhdCB0aGUgDQo+IG5vcm1hbGl6YXRp b24vdHJhbnNsYXRpb24gc2hvdWxkIGJlIGhhcHBlbmluZyBvbiB0aGUgZW5kcG9pbnRzIG9yIGZy b20gDQo+IHdpdGhpbiB0aG9zZSBjb250ZXh0cy4NCj4gPg0KPiA+IFNvLCBpbmZvcm1hdGlvbiB3 b3VsZCBnbyBmcm9tIGNvbnRleHQtc3BlY2lmaWMgZm9ybWF0IHRvIG5vcm1hbGl6ZWQNCj4gZm9y bWF0IGZvciBjZW50cmFsaXplZCBuZWVkcyAoaS5lLiBpbnZlbnRvcnkgYXNzZXNzbWVudCwgcmVw b3J0aW5nLCANCj4gd2hhdCBoYXZlIHlvdSkuICBUaGVuLCBpZiBzb21ldGhpbmcgbmVlZHMgdG8g YmUgZG9uZSB3aXRoIHRoYXQgDQo+IHNwZWNpZmljIHBpZWNlIG9mIHNvZnR3YXJlIGF0IHRoZSBl bmRwb2ludCwgd2UgbWF5IG5lZWQgYSB3YXkgdG8gZ2V0IA0KPiBiYWNrIGZyb20gdGhlIG5vcm1h bGl6ZWQgZm9ybWF0IHRvIHRoZSBjb250ZXh0LXNwZWNpZmljIGZvcm1hdCwgb3IgYXQgDQo+IGxl YXN0IHRvIHJlZmVyZW5jZSB0aGF0IGNvbnRleHQtc3BlY2lmaWMgZm9ybWF0IGRpc3RpbmN0bHku DQo+ID4NCj4gPiBUaG91Z2h0cz8NCj4gPg0KPiA+DQo+ID4+IE9uIEp1biAxLCAyMDE2LCBhdCAy OjE5IFBNLCBTY2htaWR0LCBDaGFybGVzIE0uIA0KPiA+PiA8Y21zY2htaWR0QG1pdHJlLm9yZz4N Cj4gd3JvdGU6DQo+ID4+DQo+ID4+IEhpIEd1bm5hciwNCj4gPj4NCj4gPj4gVGhhbmtzLCBhcyBh bHdheXMsIGZvciB0aGUgZ29vZCBpbnNpZ2h0cy4gSWYgSSBjYW4gcGFyYXBocmFzZSB3aGF0IA0K PiA+PiBJIHRoaW5rIEkgYW0gaGVhcmluZzogeW91IGFyZSBhc3NlcnRpbmcgdGhhdCB0aGUgdXNl IG9mIGNlcnRhaW4gDQo+ID4+IHRhZ3MgaXMgbGlrZWx5IHRvIGJlIGNvbnRleHQgZGVwZW5kZW50 LiBTcGVjaWZpY2FsbHksIGNlcnRhaW4gdHlwZXMgDQo+ID4+IG9mIHRhZ3Mgd2lsbCBwcmltYXJp bHkgYmUgdXNlZCBvbiBjZXJ0YWluIE9TcyBhbmQvb3Igb24gZGV2aWNlcyBpbiANCj4gPj4gYSBj ZXJ0YWluIHJvbGUuIEEgY2VudHJhbGl6ZWQgbm9ybWFsaXphdGlvbiBmdW5jdGlvbiBuZWVkcyB0 byBoYXZlIA0KPiA+PiB0cmFuc2xhdG9ycyBmb3IgdGhlIHRhZ3Mgb2YgZXZlcnkgY29udGV4dCBp biB0aGUgZW50ZXJwcmlzZS4gDQo+ID4+IEhvd2V2ZXIsIGlmIHRyYW5zbGF0aW9uIGlzIGRvbmUg b24gdGhlIGVuZHBvaW50cyAoaS5lLiwgd2l0aGluIHRoYXQgDQo+ID4+IHZlcnkgY29udGV4dCB0 aGF0IGlzIHByb2R1Y2luZyB0aGUgdGFncykgdGhvc2UgZW5kcG9pbnRzIG9ubHkgbmVlZCANCj4g Pj4gdG8gc3VwcG9ydCB0aGUNCj4gdHJhbnNsYXRvcnMgYXBwcm9wcmlhdGUgZm9yIHRoZWlyIHNw ZWNpZmljIGNvbnRleHQuDQo+ID4+IE1vcmVvdmVyLCBhcyBuZXcgY29udGV4dHMgYXJlIGFkZGVk IHRvIGFuIGVudGVycHJpc2UsIEkgdGhpbmsgeW91IA0KPiA+PiBhcmUgYXJndWluZyB0aGF0IGl0 IGlzIG1vcmUgbmF0dXJhbCB0byBhY2NvdW50IGZvciB0aGUgbmV3IA0KPiA+PiB2YXJpZXRpZXMg b2YgdGFncyB0aGF0IGNvdWxkIGFyaXNlIGluIHRob3NlIGNvbnRleHRzIGxvY2FsbHkgKGkuZS4s IA0KPiA+PiBvbiB0aGUNCj4gPj4gZW5kcG9pbnQpIHJhdGhlciB0aGFuIHVwZGF0aW5nIGEgY2Vu dHJhbCBzZXJ2ZXIgZXZlcnkgdGltZSBhIG5ldyANCj4gPj4gY29udGV4dA0KPiBpcyBhZGRlZC4N Cj4gPj4NCj4gPj4gRG8gSSBoYXZlIHRoaXMgY29ycmVjdD8gV2hhdCBhcmUgb3RoZXJzJyB0aG91 Z2h0cyBvbiB0aGlzPw0KPiA+Pg0KPiA+PiBUaGFua3MsDQo+ID4+IENoYXJsZXMNCj4gPj4NCj4g Pj4+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQo+ID4+PiBGcm9tOiBHdW5uYXIgRW5nZWxi YWNoIFttYWlsdG86Z3VubmFyLmVuZ2VsYmFjaEB0aHJlYXRndWFyZC5jb21dDQo+ID4+PiBTZW50 OiBUdWVzZGF5LCBNYXkgMzEsIDIwMTYgMTo1MyBQTQ0KPiA+Pj4gVG86IFNjaG1pZHQsIENoYXJs ZXMgTS4gPGNtc2NobWlkdEBtaXRyZS5vcmc+OyBBZGFtIE1vbnR2aWxsZSANCj4gPj4+IDxhZGFt LncubW9udHZpbGxlQGdtYWlsLmNvbT4NCj4gPj4+IENjOiBzYWNtQGlldGYub3JnDQo+ID4+PiBT dWJqZWN0OiBSZTogW3NhY21dIFNvbWUgdGVjaG5pY2FsIGRldGFpbHMgZm9yIFNXSUQgTSZBIHBy b3Bvc2Fscw0KPiA+Pj4NCj4gPj4+DQo+ID4+PiBUaGUgcmVhbGl0eSBpcyB0aGF0IG5vdCBhbGwg dGFnZ2luZyBmb3JtYXRzIGFyZSBnb2luZyB0byBiZSANCj4gPj4+IGltcGxlbWVudGVkIG9uIHRo ZSBmaXJzdCBpdGVyYXRpb24gYW5kIG5ldyBvbmVzIHdpbGwgYmUgZGV2aXNlZCANCj4gPj4+IGFu ZCByZXZpc2lvbnMgbWFkZSB0byB0aGUgZXhpc3Rpbmcgb25lcy4NCj4gPj4+DQo+ID4+PiBEZXBl bmRpbmcgb24gdGhlIHZlbmRvciwgdGhlIG1vc3QgbGlrZWx5IG91dGNvbWUgaXMgdGhhdCBvbmx5 IGEgDQo+ID4+PiBmZXcgb2YgdGhlIG1vc3QgY29tbW9uIHRhZ2dpbmcgc3lzdGVtcyB3aWxsIGV2 ZXIgYmUgaW1wbGVtZW50ZWQgDQo+ID4+PiBhbmQgaWYgeW91ciBlbnRlcnByaXNlIHVzZXMgYW55 IG90aGVycyB5b3UgYXJlIGp1c3Qgb3V0IG9mIGx1Y2sgLS0gDQo+ID4+PiB1bmxlc3MgeW91IGRv IHNvbWUgaW4taG91c2Ugd29yayBvciBzb21lIG90aGVyIHZlbmRvciBpcyB3aWxsaW5nIA0KPiA+ Pj4gdG8gaW52ZXN0IHRoZSB0aW1lIGFuZCBlZmZvcnQgaW50byBzdXBwb3J0aW5nIHRoZSBsZXNz IGNvbW1vbiB0YWcgdHlwZXMuDQo+ID4+Pg0KPiA+Pj4gSWYgdGhlIG5vcm1hbGl6YXRpb24gaXMg ZG9uZSBjZW50cmFsbHkgYnkgdGhlIFZhbGlkYXRvcg0KPiA+Pj4NCj4gPj4+IElmIHRoZSBub3Jt YWxpemF0aW9uIGlzIGRvbmUgY2VudHJhbGx5IGJ5IHRoZSBWYWxpZGF0b3IgdGhlbiB0aGUgDQo+ ID4+PiBWYWxpZGF0b3JzIChhbmQgZXZlcnkgb3RoZXIgY29uc3VtZXIpIG5lZWRzIHRvIHN1cHBv cnQgYWxsIHRhZyANCj4gPj4+IHR5cGVzIHJpZ2h0IGZyb20gdGhlIHN0YXJ0LCBrZWVwIHVwZGF0 aW5nIGFzIHRoZSB2YXJpb3VzIHRhZyANCj4gPj4+IGZvcm1hdHMgY2hhbmdlLCBhbmQgYmUgZG9u ZSB0aHVzIGJ5IGV2ZXJ5IHZlbmRvci4NCj4gPj4+DQo+ID4+PiBXaGljaCwgSSBjYW4gZ3VhcmFu dGVlLCB3b24ndCBoYXBwZW4uICBBbmQgZXZlbiBpZiBpdCBkaWQsIHRoZSANCj4gPj4+IGRldmVs b3AgYW5kIHJlbGVhc2UgY3ljbGUgb24gbGFyZ2Ugc3lzdGVtcyBpcyB0eXBpY2FsbHkgMSB0byAy IA0KPiA+Pj4geWVhcnMsIHdoaWNoIGlzIGp1c3QgdG9vIGxhcmdlIGEgZ2FwIGluIHRoaXMgc3Bh Y2UuDQo+ID4+Pg0KPiA+Pj4gSSBhbHNvIGRvbid0IGV4cGVjdCBjb2xsZWN0b3JzIHRvIGltcGxl bWVudCBhbGwgdGFnIHR5cGVzLiAgRXZlbiANCj4gPj4+IGFjY291bnRpbmcgZm9yIHRoZSBvYnZp b3VzIG9taXNzaW9ucyAtLSBhIFdpbmRvd3MgYWdlbnQgd291bGRuJ3QgDQo+ID4+PiBiZSBleHBl Y3RlZCB0byBoYXZlIGFueSBhd2FyZW5lc3Mgb2YgdGFnZ2luZyBzcGVjaWZpYyB0byBPU1gsIA0K PiA+Pj4gSFAtVVgsIEFuZHJvaWQsIGV0YywgIC0tIEkgdGhpbmsgd2UgY2FuIGNvdW50IG9uIGFn ZW50cyBoYXZpbmcgDQo+ID4+PiBpbmNvbXBsZXRlIGNvdmVyYWdlLiAgSW4gZmFjdCwgSSB0aGlu ayB3ZSBzaG91bGQgcGxhbiBvbiB0aGF0IGJlaW5nIHRoZSBjYXNlLg0KPiA+Pj4NCj4gPj4+IEJ1 dCBpZiB0aGUgY29sbGVjdG9yIGRvZXMgdGhlIHRyYW5zbGF0aW9uIHRvIGEgc3RhbmRhcmRpemVk IA0KPiA+Pj4gZm9ybWF0LCB0aGVuIHRoYXQgZGF0YSBpcyBhdmFpbGFibGUgZm9yIGFueSBTQUNN IHVzYWdlIGltbWVkaWF0ZWx5IA0KPiA+Pj4gd2l0aCBubyBuZWVkIGZvciB1cGRhdGVzIHRvIGFu eSBvdGhlciBwYXJ0IG9mIHRoZSBTQUNNIA0KPiA+Pj4gZW52aXJvbm1lbnQuICBJbiB0aGUgd29y c3QgY2FzZSBJIHdvdWxkIGhhdmUgbXkgb3duIElUIGRlcGFydG1lbnQgDQo+ID4+PiBkZXZlbG9w IHNvbWV0aGluZyB0byBmaWxsIGluIHRoZSBnYXBzLCBhbmQgdGhlIG9ubHkgcGFydCB0aGV5IA0K PiA+Pj4gd291bGQgbmVlZCB0byB3b3JyeSBhYm91dCBpcyB0aGUgdGFnIGNvbGxlY3Rvci10by1j b21tb24tRE0gZm9yIHRoYXQgc3BlY2lmaWMgdGFnIHR5cGUuDQo+ID4+Pg0KPiA+Pj4gVGhlIGRv d25zaWRlIGlzIHRoYXQgSSBtYXkgbmVlZCB0byBpbnN0YWxsIGFuZCBtYWludGFpbiBtdWx0aXBs ZSANCj4gPj4+IGFnZW50cyBvbiBzb21lIHN5c3RlbXMsIGJ1dCB0aGUgbW9zdCBsaWtlbHkgY2Fz ZSBpcyB0aGF0IHRoYXQga2luZCANCj4gPj4+IG9mIGN1c3RvbWl6YXRpb24gd2lsbCBvbmx5IGJl IG5lY2Vzc2FyeSB0byBjb3ZlciBzeXN0ZW1zIHRoYXQgDQo+ID4+PiBvdGhlcndpc2Ugd291bGRu J3QgYmUgY292ZXJlZCBhdCBhbGwuDQo+ID4+Pg0KPiA+Pj4gU28sIHllYWgsIHlvdXIgb3B0aW9u IChDKSBpcyB3aGF0IEkgd291bGQgZ28gd2l0aCB3aXRoIChFKSBiZWluZyANCj4gPj4+IHRoZSBt b3N0IHBhbGF0YWJsZSBvZiBhbnkgb2YgdGhlIG90aGVyIG9wdGlvbnMuDQo+ID4+Pg0KPiA+Pj4N Cj4gPj4+IC0tZ3VuDQo+ID4+Pg0KPiA+Pj4NCj4gPj4+IE9uIDUvMzEvMjAxNiAxMDo1MiBBTSwg U2NobWlkdCwgQ2hhcmxlcyBNLiB3cm90ZToNCj4gPj4+PiBIaSBHdW5uYXIsDQo+ID4+Pj4NCj4g Pj4+PiBDb21tZW50cyBiZWxvdzoNCj4gPj4+Pg0KPiA+Pj4+Pj4+IDMpIFRhZyBpbmZvcm1hdGlv biBpbnRlbmRlZCBmb3IgdXNlIGluIGEgU0FDTSBlbnZpcm9ubWVudCBpcw0KPiA+Pj4gdHJhbnNs YXRlZA0KPiA+Pj4+Pj4+IGludG8gYSBjb21tb24gc3RhbmRhcmQgZGF0YSBmb3JtYXQgcHJpb3Ig dG8gZGVsaXZlcnkgZnJvbSB0aGUgDQo+ID4+Pj4+Pj4gY29sbGVjdG9yLiAgVGhpcyB3aWxsIHN0 aWxsIGNyZWF0ZSBzb21lIGxpbWl0YXRpb24gb24gdGhlIA0KPiA+Pj4+Pj4+IG51bWJlciBvZiBm b3JtYXRzIHN1cHBvcnRhYmxlIHdpdGhpbiBhIFNBQ00gZW52aXJvbm1lbnQgc2luY2UgDQo+ID4+ Pj4+Pj4gaXQgaXMgcmVsaWFudCBvbg0KPiA+Pj4+IHRoZQ0KPiA+Pj4+Pj4+IGNvbGxlY3RvciBi ZWluZyBhYmxlIHRvIGRvIHRoYXQgdHJhbnNsYXRpb24sIGJ1dCBhbnkgZGF0YSB0aGF0IA0KPiA+ Pj4+Pj4+IGRvZXMgZW50ZXIgdGhlIFNBQ00gc3BoZXJlIHdpbGwgYmUgdXNhYmxlLg0KPiA+Pj4+ Pj4gVG8gbWUsIHRoaXMgZG9lc24ndCBzZWVtDQo+ID4+Pj4+PiBkaWZmZXJlbnQgZnJvbSB0aGUg ZWFybGllciBjb25jZXJucyBhYm91dCB0aGUgUG9zdHVyZSBDb2xsZWN0b3INCj4gPj4+PiByZWNl aXZpbmcNCj4gPj4+Pj4+IGRhdGEgaXQgY2Fubm90IHBhcnNlLg0KPiA+Pj4+PiBXZWxsLCBubywg aXQncyBub3QgY29tbWVuc3VyYXRlLCBmb3IgYXQgbGVhc3QgdGhyZWUgcmVhc29uczoNCj4gPj4+ Pj4NCj4gPj4+Pj4gMSkgIFRoZSB0YWcgdHlwZXMgdGhhdCBuZWVkIHRvIGJlIGtub3duIHRvIGEg Y29sbGVjdG9yIGlzIGEgDQo+ID4+Pj4+IHN1YnNldCBvZiBhbGwgdGFnIHR5cGVzLCBzaW5jZSBh IGNvbGxlY3RvciBydW5zIG9uIGEgcGFydGljdWxhciB0eXBlIG9mIHN5c3RlbS4NCj4gPj4gQQ0K PiA+Pj4+PiBXaW5kb3dzIGFnZW50IHdvdWxkIG5vdCBiZSBleHBlY3RlZCB0byBiZSBhYmxlIHRv IGhhbmRsZSANCj4gPj4+Pj4gT1NYLXNwZWNpZmljIHRhZyB0eXBlcy4NCj4gPj4+PiBUcnVlIC0g SSBjbGVhcmx5IG92ZXJzdGF0ZWQgdGhlIGJ1cmRlbiBvbiBpbmRpdmlkdWFsIGVuZHBvaW50cywg DQo+ID4+Pj4gc28gdGhhbmsNCj4gPj4geW91DQo+ID4+Pj4gZm9yIHRoZSBjb3JyZWN0aW9uLg0K PiA+Pj4+DQo+ID4+Pj4gVGhhdCBzYWlkLCBmcm9tIGFuIGVudGVycHJpc2UgcGVyc3BlY3RpdmUg SSB3b3VsZCB0aGluayB0aGUgc2V0IA0KPiA+Pj4+IG9mIHRyYW5zbGF0b3JzIHdvdWxkIGJlIGNv bnN0YW50IHJlZ2FyZGxlc3Mgb2Ygd2hldGhlciANCj4gPj4+PiB0cmFuc2xhdGlvbiBvY2N1cnJl ZA0KPiA+Pj4gb24NCj4gPj4+PiBlbmRwb2ludHMgb3Igc2VydmVycy4gSWYgb25lIGVuZHBvaW50 IGhhcyB0YWdzIG9mIGludGVyZXN0IHRoYXQgDQo+ID4+Pj4gYXJlIG5vdA0KPiA+PiBvbmUNCj4g Pj4+PiBvZiB0aGUgc3BlY2lmaWVkIFNBQ00gZm9ybXMsIHRoZSBhcHByb3ByaWF0ZSB0cmFuc2xh dG9yIG5lZWRzIHRvIA0KPiA+Pj4+IGJlIHNvbWV3aGVyZS4gVGhlIHF1ZXN0aW9uIGlzIHdoZXRo ZXIgdGhhdCBzb21ld2hlcmUgc2hvdWxkIGJlIA0KPiA+Pj4+IHRoZQ0KPiA+Pj4gZW5kcG9pbnQg b3INCj4gPj4+PiB0aGUgc2VydmVyLiAoT3IsIGFzIHlvdSBub3RlIGJlbG93LCBvbiB0aGUgZW5k LWNvbnN1bWVyLikNCj4gPj4+Pj4gMikgIFNpbWlsYXIgdG8gKDEpLCBhIHNpbmdsZSBjb2xsZWN0 b3IgZG9lcyBub3QgbmVjZXNzYXJpbHkgbmVlZCANCj4gPj4+Pj4gdG8gYmUgYWJsZSB0byB0cmFu c2xhdGUgZXZlcnkgdGFnIHR5cGUgaXQgY291bGQgcG9zc2libHkgY29tZSANCj4gPj4+Pj4gYWNy b3NzLiBUaGlzIG1pZ2h0IGJlIGJlY2F1c2UgbXVsdGlwbGUgY29sbGVjdGlvbiBtZXRob2RzIGFy ZSBpbiANCj4gPj4+Pj4gdXNlLCBhIGNvbGxlY3RvciBpcyBidWlsdCBmb3IgYSBzaW5nbGUgbmFy cm93IGZ1bmN0aW9uLCBldGMuDQo+ID4+Pj4gSSB0aGluayBJIGFncmVlLCBidXQgSSB0aGluayBJ IHdvdWxkIHBocmFzZSBpdCBkaWZmZXJlbnRseS4gSSANCj4gPj4+PiB3b3VsZCBzYXkNCj4gPj4g dGhhdA0KPiA+Pj4+IG5vdCBhbGwgdGFncyBvbiBhbiBlbmRwb2ludCBhcmUgbmVjZXNzYXJpbHkg b2YgaW50ZXJlc3QgdG8gdGhlDQo+ID4+IGVudGVycHJpc2UuDQo+ID4+Pj4gU29tZSB0eXBlcyBv ZiB0YWdzIG1pZ2h0IGJlIGdlbmVyYWxseSB1bnJlbGlhYmxlIGluIG5hdHVyZSAoZS5nLiwgDQo+ ID4+Pj4gYSBwb29yIGNvcnJlbGF0b3Igd2l0aCBzb2Z0d2FyZSBwcmVzZW5jZSksIG1pZ2h0IG5v dCBoYXZlIHRoZSANCj4gPj4+PiBuZWVkZWQgbWV0YWRhdGENCj4gPj4+IGJvdXQNCj4gPj4+PiBp bnN0YWxsZWQgc29mdHdhcmUgcHJvZHVjdHMsIG9yIGNvdWxkIGJlIGZvciBzb2Z0d2FyZSB0aGUg DQo+ID4+Pj4gZW50ZXJwcmlzZQ0KPiA+Pj4gZG9lc24ndA0KPiA+Pj4+IGNhcmUgYWJvdXQgbW9u aXRvcmluZy4gSW4gdGhlIGZpcnN0IHR3byBjYXNlcywgdGhlIHByZXNlbmNlIG9mIGFuDQo+ID4+ IGFsdGVybmF0ZQ0KPiA+Pj4+IHRhZyB0eXBlIGZyb20gdGhlIHNhbWUgc291cmNlIChhbmQgY292 ZXJpbmcgdGhlIHNhbWUgcHJvZHVjdHMpIA0KPiA+Pj4+IGNvdWxkDQo+ID4+PiByZW5kZXINCj4g Pj4+PiB0aGUgc2Vjb25kIGZvcm1hdCBjb21wbGV0ZWx5IHVubmVjZXNzYXJ5Lg0KPiA+Pj4+DQo+ ID4+Pj4gQXJlIHdlIHNheWluZyB0aGUgc2FtZSB0aGluZyB1c2luZyBkaWZmZXJlbnQgd29yZHMg aGVyZT8NCj4gPj4+Pg0KPiA+Pj4+PiAzKSAgVGhlcmUgaXMgbW9yZSB0aGFuIG9uZSBjb25zdW1l ciBmb3IgdGhlIGNvbGxlY3RlZCBkYXRhLiAgSXQgDQo+ID4+Pj4+IGNvdWxkDQo+ID4+IGJlDQo+ ID4+Pj4+IGZvciB2dWxuZXJhYmlsaXR5IGFuYWx5c2lzLCBsaWNlbnNlIGFkbWluaXN0cmF0aW9u LCBpbnZlbnRvcnksIA0KPiA+Pj4+PiBjb21wbGlhbmNlLCBhbmQgc28gb24uICBFdmVyeSBjdXJy ZW50IGFuZCBmdXR1cmUgdXNlIGZvciB0aGF0IA0KPiA+Pj4+PiBpbmZvcm1hdGlvbiB3b3VsZCBu ZWVkIHRvIGJlIGFibGUgdG8gcGFyc2UgZXZlcnkgc3VwcG9ydGVkIHRhZyANCj4gPj4+Pj4gdHlw ZSBpbiBvcmRlciB0byBkbyBpdHMgZnVuY3Rpb24uICBBIGNvbnNpZGVyYWJsZSBhbW91bnQgb2Yg DQo+ID4+Pj4+IGR1cGxpY2F0aW9uIHRvIHNheSB0aGUgdmVyeSBsZWFzdC4gIFRoZSBzYW1lIGNh biBiZSBzYWlkIGZvciANCj4gPj4+Pj4gZXZlcnkgb3RoZXIgdHlwZSBvZiBkYXRhDQo+ID4+IGJl aW5nDQo+ID4+Pj4+IGNvbGxlY3RlZCBmcm9tIGFuIGVuZHBvaW50Lg0KPiA+Pj4+IEkgdGhpbmsg eW91IGFyZSB0YWxraW5nIGFib3V0IGEgc2NlbmFyaW8gd2hlcmUgZXZlcnkgZW5kIGNvbnN1bWVy IA0KPiA+Pj4+IG9mDQo+ID4+IHRhZ3MNCj4gPj4+IGlzDQo+ID4+Pj4gcmVzcG9uc2libGUgZm9y IG5vcm1hbGl6YXRpb24uIFRoYXQgaXMgY2VydGFpbmx5IHlldCBhbm90aGVyIA0KPiA+Pj4+IG9w dGlvbg0KPiA+PiAoY2FsbCBpdA0KPiA+Pj4+IG9wdGlvbiA0KSwgYWx0aG91Z2ggSSBhZ3JlZSB0 aGF0IGl0IGhhcyB0aGUgd2Vha25lc3NlcyB5b3Ugbm90ZSANCj4gPj4+PiBoZXJlLiBJIHdvdWxk IGFyZ3VlIHRoYXQgdGhpcyBpcyBub3QgZXF1aXZhbGVudCB0byBoYXZpbmcgDQo+ID4+Pj4gbm9y bWFsaXphdGlvbiBkb25lIG9uDQo+ID4+IHRoZQ0KPiA+Pj4+IFBvc3R1cmUgVmFsaWRhdG9yLCB3 aGljaCBpcyBtb3JlIHdoYXQgSSB3YXMgdGhpbmtpbmcgb2YgaW4gbXkgDQo+ID4+Pj4gcHJldmlv dXMgZW1haWwuDQo+ID4+Pj4NCj4gPj4+PiBHaXZlbiB0aGlzIGRpc2N1c3Npb24sIGl0IG1pZ2h0 IGJlIHVzZWZ1bCB0byByZWNhc3Qgb3VyIG9wdGlvbnMgDQo+ID4+Pj4gYmFzZWQgb24NCj4gPj4g d2hvDQo+ID4+Pj4gaXMgcmVzcG9uc2libGUgZm9yIGRhdGEgbm9ybWFsaXphdGlvbi4NCj4gPj4+ Pg0KPiA+Pj4+IEEpIE5vIG5vcm1hbGl6YXRpb24gKyBkYXRhIG1vZGVsLiBQb3N0dXJlIENvbGxl Y3RvcnMgY29sbGVjdCBhbmQgDQo+ID4+Pj4gU1dJRA0KPiA+Pj4gTSZBDQo+ID4+Pj4gdHJhbnNw b3J0cyBvbmx5IGEgZGVmaW5lZCBzZXQgb2YgdGFnIHR5cGVzIGFuZCBmb3JtYXRzLiBBbGwgdGFn cyANCj4gPj4+PiB0aGF0DQo+ID4+IGFyZQ0KPiA+Pj4+IG5vdCBleHByZXNzZWQgaW4gdGhvc2Ug Zm9ybWF0cyBhcmUgbm90IGNvbGxlY3RlZCBhbmQgYXJlIGlnbm9yZWQuDQo+ID4+IChGb3JtZXIN Cj4gPj4+PiBvcHRpb24gMSkNCj4gPj4+PiBCKSBObyBub3JtYWxpemF0aW9uICsgbm8gZGF0YSBt b2RlbC4gUG9zdHVyZSBDb2xsZWN0b3JzIGNvbGxlY3QgDQo+ID4+Pj4gYW5kIFNXSUQNCj4gPj4+ IE0mQQ0KPiA+Pj4+IHRyYW5zcG9ydHMgYW55IHR5cGUgb3IgZm9ybWF0IG9mIHRhZ3MuIFRhZyBj b25zdW1lcnMgY29sbGVjdGluZyANCj4gPj4+PiB0YWdzDQo+ID4+IGZyb20NCj4gPj4+PiB0aGUg Q01EQi9Qb3N0dXJlIFZhbGlkYXRvciBnZXQgd2hhdGV2ZXIgdGFncyB0aGV5IGNhbiB1bmRlcnN0 YW5kIA0KPiA+Pj4+IGFuZA0KPiA+Pj4gb3RoZXINCj4gPj4+PiB0eXBlcyBvZiB0YWdzIGFyZSBp Z25vcmVkLg0KPiA+Pj4+IEMpIFBvc3R1cmUgQ29sbGVjdG9yIG5vcm1hbGl6YXRpb24uIFRoZSBQ b3N0dXJlIENvbGxlY3RvciBpcyANCj4gPj4+PiByZXNwb25zaWJsZQ0KPiA+PiBmb3INCj4gPj4+ PiBub3JtYWxpemluZyB0aGUgdGFncyBjb2xsZWN0ZWQgb24gYW4gZW5kcG9pbnQgcHJpb3IgdG8g ZGVsaXZlcnkgDQo+ID4+Pj4gdG8gYQ0KPiA+PiBQb3N0dXJlDQo+ID4+Pj4gVmFsaWRhdG9yLiBT V0lEIE0mQSBzdXBwb3J0cyB0cmFuc21pc3Npb24gb2YgYSBkZWZpbmVkIHNldCBvZiB0YWcgDQo+ ID4+Pj4gdHlwZXMNCj4gPj4+IGFuZA0KPiA+Pj4+IGZvcm1hdHMsIHRvIHdoaWNoIHRoZSBQb3N0 dXJlIENvbGxlY3RvciB0cmFuc2xhdGVzLiAoT3B0aW9uIDMgDQo+ID4+Pj4gZnJvbQ0KPiA+PiBH dW5uYXIncw0KPiA+Pj4+IGVhcmxpZXIgZW1haWwpDQo+ID4+Pj4gRCkgUG9zdHVyZSBWYWxpZGF0 b3Igbm9ybWFsaXphdGlvbi4gUG9zdHVyZSBDb2xsZWN0b3JzIGNvbGxlY3QgDQo+ID4+Pj4gYW5k IFNXSUQNCj4gPj4+IE0mQQ0KPiA+Pj4+IHRyYW5zcG9ydHMgYW55IHR5cGUgb3IgZm9ybWF0IG9m IHRhZ3MuIFRoZSByZWNlaXZpbmcgUG9zdHVyZSANCj4gPj4+PiBWYWxpZGF0b3INCj4gPj4gaXMN Cj4gPj4+PiByZXNwb25zaWJsZSBmb3Igbm9ybWFsaXppbmcgdGhlIGluY29taW5nIGRhdGEgdG8g YSBzZXQgb2YgdHlwZXMgDQo+ID4+Pj4gYW5kDQo+ID4+IGZvcm1hdHMNCj4gPj4+PiBpZGVudGlm aWVkIGJ5IFNBQ00gKGJ1dCB3aG9zZSBzcGVjaWZpY2F0aW9uIGlzIG91dHNpZGUgdGhlIHNjb3Bl IA0KPiA+Pj4+IG9mIFNXSUQNCj4gPj4+IE0mQQ0KPiA+Pj4+IGl0c2VsZikuDQo+ID4+Pj4gRSkg Q29uc3VtZXIgbm9ybWFsaXphdGlvbi4gUG9zdHVyZSBDb2xsZWN0b3JzIGNvbGxlY3QgYW5kIFNX SUQgDQo+ID4+Pj4gTSZBIHRyYW5zcG9ydHMgYW55IHR5cGUgb3IgZm9ybWF0IG9mIHRhZ3MuIFRh Z3MgYXJlIHN0b3JlZCBvbiB0aGUgDQo+ID4+Pj4gUG9zdHVyZSBWYWxpZGF0b3Igb3IgQ01EQiB1 bnRpbCBhIGNvbnN1bWVyIG5lZWRzIHRoZW0uIFRoZQ0KPiBjb25zdW1lcg0KPiA+Pj4+IHRoZW4N Cj4gPj4+IGNvbGxlY3RzDQo+ID4+Pj4gdGhlIHJlbGV2YW50IHRhZ3MgYW5kIGlzIHJlc3BvbnNp YmxlIGZvciB0cmFuc2xhdGluZyBhbnkgdGFncyANCj4gPj4+PiBpbnRvIGENCj4gPj4gZm9ybWF0 DQo+ID4+Pj4gaXQgY2FuIGNvbnN1bWUuIChPcHRpb24gNCBmcm9tIHRoaXMgZW1haWwpDQo+ID4+ Pj4NCj4gPj4+PiBHdW5uYXIsIEkgYmVsaWV2ZSB5b3UgYXJlIGFuIGFkdm9jYXRlIG9mIEMsIGNv cnJlY3Q/IEkgYWxzbyB0aGluayANCj4gPj4+PiBib3RoDQo+ID4+IG9mDQo+ID4+Pj4gdXNlIGFn cmVlIHRoYXQgb3B0aW9ucyBCIGFuZCBFIGFyZSBwcm9iYWJseSBiYWQgaWRlYXMgc2luY2UgdGhl IA0KPiA+Pj4+IGRhdGEgY29uc3VtZXJzIGNhbiBoYXZlIG5vIGlkZWEgYXMgdG8gd2hhdCB0aGV5 IGFyZSBnb2luZyB0byBnZXQuDQo+ID4+Pj4gUGVyc29uYWxseSwNCj4gPj4gSQ0KPiA+Pj4+IHRo aW5rIEknbSBtb3JlIG9mIGEgZmFuIG9mIEQgLSBpdCBoYXMgYSBjZW50cmFsaXplZCByYXRoZXIg dGhhbg0KPiA+PiBkaXN0cmlidXRlZA0KPiA+Pj4+IG5vcm1hbGl6YXRpb24gZnVuY3Rpb24gYW5k IGNhbiBhdm9pZCB1bm5lY2Vzc2FyeSBkYXRhIGxvc3MuDQo+ID4+Pj4NCj4gPj4+PiBHdW5uYXIs IGhhdmUgSSBtaXNpbnRlcnByZXRlZCBhbnkgb2YgeW91ciBjb21tZW50cz8gRG8gb3RoZXJzIA0K PiA+Pj4+IGhhdmUgYW55IHRob3VnaHRzIG9uIHRoaXM/DQo+ID4+Pj4NCj4gPj4+PiBUaGFua3Ms DQo+ID4+Pj4gQ2hhcmxlcw0KPiA+Pj4+DQo+IA0KPiBfX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fXw0KPiBzYWNtIG1haWxpbmcgbGlzdA0KPiBzYWNtQGlldGYu b3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2FjbQ0KPiBfX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXw0KPiBzYWNtIG1haWxp bmcgbGlzdA0KPiBzYWNtQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vc2FjbQ0K From nobody Fri Jun 3 12:15:28 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3684812D539 for ; Fri, 3 Jun 2016 12:15:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.326 X-Spam-Level: X-Spam-Status: No, score=-8.326 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5C_Pomjelmis for ; Fri, 3 Jun 2016 12:15:24 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BABED12D09A for ; Fri, 3 Jun 2016 12:15:22 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-2ubuntu2.1) with ESMTP id u53JFHKB003340 (version=TLSv1/SSLv3 cipher=AES256-SHA256 bits=256 verify=NOT) for ; Fri, 3 Jun 2016 21:15:20 +0200 Received: from [192.168.16.50] (134.102.43.163) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.294.0; Fri, 3 Jun 2016 21:15:12 +0200 To: References: From: Henk Birkholz Message-ID: <5751D73F.3060000@sit.fraunhofer.de> Date: Fri, 3 Jun 2016 21:15:11 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.163] Archived-At: Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #1 - Managing Terminology X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 03 Jun 2016 19:15:27 -0000 Hello all, some comments on the current definition of terms: 1) Supplemental Collection task: looks like a good way to move forward Does this propose to define a separate collection task that focuses on on the acquisition of previously obtained endpoint attributes from a repository in the SACM domain? The endpoint attributes could be identical to the ones that can be acquired via the already defined collection task, but most certainly do not have to be! I would propose to "handle" the endpoint attributes in an identical way and to annotate where they come from, when they were acquired and similar metadata. As a result, this could enable a single method to conduct both tasks and simply things, I think. 2) Vulnerability assessment: the proposed definition sounds fine The current definition of Endpoint Assessment is: "Evaluate the actual values of the endpoint attributes against those expressed in the policy. (An evaluation result may become additional endpoint data)." Implied - but yet not explicitly defined - in the definition of Endpoint Assessment is that it is a concatenated sequence of tasks defined by SACM. (Software) vulnerability assessment would be a specialization of that composition of tasks. Background: i.e., the vulnerability assessment would process a sub-set of endpoint attributes that can be acquired by the: - collection task (which is directly targeted at specific target endpoints) and the - target endpoint discovery task (which is supposed to be acquiring any kind indicator information (i.e. also endpoint attributes) that can be used to detect and re-detect target endpoints in a SACM domain) as a basis for the collection task. 3) Endpoint management capability: seems to be a little bit vague, still. Especially the term "management". This description seems to be more about a repository of expected (should) or possible (could) states that are based on configuration? Is an endpoint management capability (and its corresponding functions) also providing guidance(instructions)? 4) Vulnerability management capability: Here too, the term management seems to imply guidance (or management decision) of some sort. The definition itself seems to describe a repository or a meta directory that provides information acquired, for example, by ROLIE? 5) Management Capability: It should be made very clear what this capability actually provides; i.e., which category of endpoint attributes and/or guidance. This would resolve most of the ambiguity in a simple way, I think. Essential information elements of the content should also be included in the SACM IM, I think. 6) Endpoint Management Capability and Vulnerability Management Capability: It seems - taking into account 2-4 - that Vulnerability Management Capability is a part of Endpoint Management Capability? 7) process & workflow: A workflow might involve multiple processes with various dependences and interconnections, I think. But I am not sure if that distinction is really relevant to SACM. Workflow seems to be the more general term and is less overloaded. Viele Grüße, Henk On 05/31/2016 10:41 PM, Haynes, Dan wrote: > Did anyone else have any thoughts on this particular issue? > > If we want to take the approach of promoting a few terms as Adam has > suggested, we might want do it as follows. > > Supplemental (previously targeted) collection: The task of collecting > specific endpoint information from the target endpoint, that is not > available from the endpoint management capability, in order to make a > determination about that endpoint (vulnerability status, identification, > etc.). > > This seems general enough to be promoted as-is. > > Vulnerability assessment: The process of determining whether a set of > endpoints is vulnerable according to the information contained in the > vulnerability description information. > > We would need to generalize it more to remove the reference to > “vulnerability description information”. One approach might be to > replace “vulnerability description information” with “information > pertaining to the existence of a flaw or flaws in software, hardware, > and/or firmware on an endpoint.” It might also make sense to highlight > this as a specialization of “assessment”. As a side note, does anyone > see a distinction between process and workflow (as described here > http://blog.goodelearning.com/bpmn/business-process-vs-workflow/) and > that assessment might be better described as a workflow? With that said, > our definition comes from RFC5209 and we may not want to make any > changes which is perfectly fine – just something to think about :). > > Endpoint management capability: An enterprise IT capability managing > endpoint identity, endpoint information, and associated metadata on an > ongoing basis. > > Vulnerability management capability: An enterprise IT capability > managing endpoint vulnerabilities and associated metadata on an ongoing > basis by ingesting vulnerability description information and > vulnerability detection data, and performing a vulnerability assessment. > > Right now, we have definitions for “endpoint management capability” and > “vulnerability management capability”. To support promoting these, we > may want to create a more general “management capability” term and then > include “endpoint management capability” and “vulnerability management > capability” as specializations of that term. A definition of > “management capability” might read something like “An enterprise IT > capability responsible for managing specific information about an > endpoint in support of continuous monitoring processes which may or may > not be driven by guidance”. > > Anyways, this is just a little bit more to think about :). Let me know > what you think. > > Thanks, > > Danny > > *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Haynes, Dan > *Sent:* Tuesday, May 24, 2016 7:43 AM > *To:* Adam Montville > *Cc:* sacm@ietf.org > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario > Issue #1 - Managing Terminology > > Do others have thoughts regarding whether or not terminology from the > vulnerability assessment scenario draft should be promoted ot the > Terminology I-D? If so, which terms make sense to promote? > > Thanks, > > Danny > > *From:*Adam Montville [mailto:adam.w.montville@gmail.com] > *Sent:* Thursday, May 19, 2016 8:04 PM > *To:* Haynes, Dan > > *Cc:* sacm@ietf.org > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario > Issue #1 - Managing Terminology > > I’ll echo my statements from the virtual interim by pointing out that > the vulnerability scenario, while narrowing our focus, does not change > the scope of our charter. From that perspective, I would like to see > terms “promoted” into the terminology draft sooner rather than later. > Of the set of terms Danny described, I think endpoint management > capability and targeted collection are prime candidates for such > promotion. I also believe that vulnerability management capability and > vulnerability assessment are suitable for promotion. Vulnerability > description information and vulnerability detection data could stay > within the vulnerability draft. > > Adam > > On May 17, 2016, at 1:15 PM, Haynes, Dan > wrote: > > During today’s virtual interim meeting, we discussed various open > issues with respect to the Vulnerability Assessment Scenario [1] as > a result of feedback that we received on the draft which you can see > here [2][3]. The slide’s from today’s meeting can be found here [4]. > > The first issue was whether or not the following terms from Section > 2 of the Vulnerability Assessment Scenario should be pulled into the > Terminology I-D [5] with the expectation that any terms pulled in > will be used outside of the Vulnerability Assessment Scenario. > > •Vulnerability description information > > •Vulnerability detection data > > •Endpoint management capability > > •Vulnerability management capability > > •Vulnerability assessment > > •Targeted collection > > During the meeting, there were concerns that while some of these > terms leverage general terms already in the Terminology I-D, they > use them in specific ways with respect to the Vulnerability > Assessment Scenario. It was also noted that some terms like > “endpoint management capability” and “vulnerability management > capability”, while specific, have the potential to become broader as > SACM eventually expands into other areas (e.g. configuration, > etc.). As a result, the consensus on the call was to leave the > terms in Section 2 of the Vulnerability Assessment Scenario, for > now, with the expectation that we may reassess this decision in the > future. > > If you have any thoughts on this issue, please provide feedback by > May 31^st . We are planning to have an updated version of the > scenario for June 8^th . > > Thanks, > > Danny > > [1]https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ > > [2]https://github.com/sacmwg/vulnerability-scenario/pull/3 > > [3]https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html > > [4]https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/(looks > like the slides are not available just yet, but, I suspect they > should be soon) > > [5]https://datatracker.ietf.org/doc/draft-ietf-sacm-terminology/ > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > From nobody Fri Jun 3 23:09:58 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 512CD12D0E8 for ; Fri, 3 Jun 2016 23:09:53 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.7 X-Spam-Level: X-Spam-Status: No, score=-1.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XXOVhW7iQTcW for ; Fri, 3 Jun 2016 23:09:50 -0700 (PDT) Received: from mail-vk0-x22c.google.com (mail-vk0-x22c.google.com [IPv6:2607:f8b0:400c:c05::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9F2FC12D09C for ; Fri, 3 Jun 2016 23:09:50 -0700 (PDT) Received: by mail-vk0-x22c.google.com with SMTP id d64so17472580vkb.0 for ; Fri, 03 Jun 2016 23:09:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=UO8haQwbiiJIPS3tuRGMd2mVhImN6ZKtoZNxQmabjnE=; b=A+1onI2TOePz205X+ZN6Ud9lX0ZpB2h9OkW+vyYN8BlCUAvIcvY9JOW/oo9dbMpBkf QlOqytV2vBRzphHUvBI3PZPBhtGUNPTUmeAOwFdepDPRg45e/Ysd6EwyzfP/QwGNg8Q0 FgEqyFpNIzRR0le4TxJQlkAhcZpehcH0fEXwVe6MNgKvl8i3jW50wQfBoe6b5rE3MsOd n4JA3TO7j1VRzR7oKAwEqNDFL2aRqM4OhFzA/tJ1GTHglmrBSw8H0UXXEbReD83wtQfr en4b8cIKcbL83LsAYkzwUBP6V3v9Cd9gOv930BUxztQDK7IGlb7LifnArcpVrqm0w/or ydJg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=UO8haQwbiiJIPS3tuRGMd2mVhImN6ZKtoZNxQmabjnE=; b=TaxkRdZoHLPdF3xLmHRQU7IUtFPDwvh9hniUvv2vct65r/TjFkf5k38a2jPiuZDc5M gJcxKuEskWV1AuVHT4oaDfiDk1wohM49atcKzjDyO3nlBZYQJhGkaTRurpJxB0n10VYM PXOJvwqWrl+OLN6nDwSdyq63QNHg8GvlPhDXgL30j44MFujmSQDedIQw0AQZ67tNyHB7 2oIFJhB8gpX/rElZgpw1rle7ZVvy83lFybPFcqGsJY5aJJbgMD8RKDI9WYWRyAzDOn5U kfX7jwF0zTIokUVNjuPGCVXIz1gwtjjKF4Bhl/CpRDIVi+OzPjR5bJ6AqghSuUkk95M8 yi9Q== X-Gm-Message-State: ALyK8tLdeVhhVAmtrbaW87v7QqZ+FSYECXgcAy+wqwR1y1PXN8Xxj+sRlyST2aXV+V6+Tc+LvGEPMU2lKiT3fg== X-Received: by 10.31.192.194 with SMTP id q185mr3634669vkf.155.1465020589432; Fri, 03 Jun 2016 23:09:49 -0700 (PDT) MIME-Version: 1.0 Received: by 10.31.63.204 with HTTP; Fri, 3 Jun 2016 23:09:48 -0700 (PDT) In-Reply-To: <5751D73F.3060000@sit.fraunhofer.de> References: <5751D73F.3060000@sit.fraunhofer.de> From: Jerome Athias Date: Sat, 4 Jun 2016 09:09:48 +0300 Message-ID: To: Henk Birkholz Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #1 - Managing Terminology X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Jun 2016 06:09:53 -0000 Hi, while I do understand use and reference to rfc4949, etc. I don't see it as an efficient strategic approach while it is not really aligned with Frameworks used in real life. Organis/zations would tend to use NIST Risk Management Framework or ISO 270= 01. An approach like: NIST Cybersecurity Framework NIST Risk Management Framework NIST SP 800-53 ... would benefit from a consolidated centralized (if not Ontology) Lexicon/Glossary such as https://niccs.us-cert.gov/glossary at least for general terms. Vulnerability Assessment and Management Definition: In the NICE Workforce Framework, cybersecurity work where a person: Conducts assessments of threats and vulnerabilities, determines deviations from acceptable configurations, enterprise or local policy, assesses the level of risk, and develops and/or recommends appropriate mitigation countermeasures in operational and non-operational situations. From: NICE Workforce Framework Vulnerability Assessment (NIST SP 800-53A Rev 4) [CNSSI 4009, Adapted] Systematic examination of an information system or product to determine the adequacy of security and privacy measures, identify security and privacy deficiencies, provide data from which to predict the effectiveness of proposed security and privacy measures, and confirm the adequacy of such measures after implementation. Then, it could be used "In the context of SACM, " or "Within SACM the use of the term is expanded", etc. So I would be in favor of having all terms in Terminology I-D 2016-06-03 22:15 GMT+03:00 Henk Birkholz : > Hello all, > > some comments on the current definition of terms: > > 1) Supplemental Collection task: looks like a good way to move forward > > Does this propose to define a separate collection task that focuses on on > the acquisition of previously obtained endpoint attributes from a reposit= ory > in the SACM domain? The endpoint attributes could be identical to the one= s > that can be acquired via the already defined collection task, but most > certainly do not have to be! I would propose to "handle" the endpoint > attributes in an identical way and to annotate where they come from, when > they were acquired and similar metadata. > > As a result, this could enable a single method to conduct both tasks and > simply things, I think. > > 2) Vulnerability assessment: the proposed definition sounds fine > > The current definition of Endpoint Assessment is: "Evaluate the actual > values of the endpoint attributes against those expressed in the policy. = (An > evaluation result may become additional endpoint data)." > > Implied - but yet not explicitly defined - in the definition of Endpoint > Assessment is that it is a concatenated sequence of tasks defined by SACM= . > (Software) vulnerability assessment would be a specialization of that > composition of tasks. > > Background: i.e., the vulnerability assessment would process a sub-set of > endpoint attributes that can be acquired by the: > > - collection task (which is directly targeted at specific target endpoint= s) > and the > - target endpoint discovery task (which is supposed to be acquiring any k= ind > indicator information (i.e. also endpoint attributes) that can be used to > detect and re-detect target endpoints in a SACM domain) as a basis for th= e > collection task. > > > 3) Endpoint management capability: seems to be a little bit vague, still. > Especially the term "management". > > This description seems to be more about a repository of expected (should)= or > possible (could) states that are based on configuration? Is an endpoint > management capability (and its corresponding functions) also providing > guidance(instructions)? > > > 4) Vulnerability management capability: Here too, the term management see= ms > to imply guidance (or management decision) of some sort. > > The definition itself seems to describe a repository or a meta directory > that provides information acquired, for example, by ROLIE? > > > 5) Management Capability: > > It should be made very clear what this capability actually provides; i.e.= , > which category of endpoint attributes and/or guidance. This would resolve > most of the ambiguity in a simple way, I think. Essential information > elements of the content should also be included in the SACM IM, I think. > > > 6) Endpoint Management Capability and Vulnerability Management Capability= : > > It seems - taking into account 2-4 - that Vulnerability Management > Capability is a part of Endpoint Management Capability? > > > 7) process & workflow: > > A workflow might involve multiple processes with various dependences and > interconnections, I think. But I am not sure if that distinction is reall= y > relevant to SACM. Workflow seems to be the more general term and is less > overloaded. > > > Viele Gr=C3=BC=C3=9Fe, > > Henk > > > > > > > On 05/31/2016 10:41 PM, Haynes, Dan wrote: >> >> Did anyone else have any thoughts on this particular issue? >> >> If we want to take the approach of promoting a few terms as Adam has >> suggested, we might want do it as follows. >> >> Supplemental (previously targeted) collection: The task of collecting >> specific endpoint information from the target endpoint, that is not >> available from the endpoint management capability, in order to make a >> determination about that endpoint (vulnerability status, identification, >> etc.). >> >> This seems general enough to be promoted as-is. >> >> Vulnerability assessment: The process of determining whether a set of >> endpoints is vulnerable according to the information contained in the >> vulnerability description information. >> >> We would need to generalize it more to remove the reference to >> =E2=80=9Cvulnerability description information=E2=80=9D. One approach mi= ght be to >> replace =E2=80=9Cvulnerability description information=E2=80=9D with =E2= =80=9Cinformation >> pertaining to the existence of a flaw or flaws in software, hardware, >> and/or firmware on an endpoint.=E2=80=9D It might also make sense to hi= ghlight >> this as a specialization of =E2=80=9Cassessment=E2=80=9D. As a side not= e, does anyone >> see a distinction between process and workflow (as described here >> http://blog.goodelearning.com/bpmn/business-process-vs-workflow/) and >> that assessment might be better described as a workflow? With that said, >> our definition comes from RFC5209 and we may not want to make any >> changes which is perfectly fine =E2=80=93 just something to think about = :). >> >> Endpoint management capability: An enterprise IT capability managing >> endpoint identity, endpoint information, and associated metadata on an >> ongoing basis. >> >> Vulnerability management capability: An enterprise IT capability >> managing endpoint vulnerabilities and associated metadata on an ongoing >> basis by ingesting vulnerability description information and >> vulnerability detection data, and performing a vulnerability assessment. >> >> Right now, we have definitions for =E2=80=9Cendpoint management capabili= ty=E2=80=9D and >> =E2=80=9Cvulnerability management capability=E2=80=9D. To support promot= ing these, we >> may want to create a more general =E2=80=9Cmanagement capability=E2=80= =9D term and then >> include =E2=80=9Cendpoint management capability=E2=80=9D and =E2=80=9Cvu= lnerability management >> capability=E2=80=9D as specializations of that term. A definition of >> =E2=80=9Cmanagement capability=E2=80=9D might read something like =E2=80= =9CAn enterprise IT >> capability responsible for managing specific information about an >> endpoint in support of continuous monitoring processes which may or may >> not be driven by guidance=E2=80=9D. >> >> Anyways, this is just a little bit more to think about :). Let me know >> what you think. >> >> Thanks, >> >> Danny >> >> *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Haynes, Dan >> *Sent:* Tuesday, May 24, 2016 7:43 AM >> *To:* Adam Montville >> *Cc:* sacm@ietf.org >> *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario >> Issue #1 - Managing Terminology >> >> Do others have thoughts regarding whether or not terminology from the >> vulnerability assessment scenario draft should be promoted ot the >> Terminology I-D? If so, which terms make sense to promote? >> >> Thanks, >> >> Danny >> >> *From:*Adam Montville [mailto:adam.w.montville@gmail.com] >> *Sent:* Thursday, May 19, 2016 8:04 PM >> *To:* Haynes, Dan > >> *Cc:* sacm@ietf.org >> *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario >> Issue #1 - Managing Terminology >> >> I=E2=80=99ll echo my statements from the virtual interim by pointing out= that >> the vulnerability scenario, while narrowing our focus, does not change >> the scope of our charter. From that perspective, I would like to see >> terms =E2=80=9Cpromoted=E2=80=9D into the terminology draft sooner rathe= r than later. >> Of the set of terms Danny described, I think endpoint management >> capability and targeted collection are prime candidates for such >> promotion. I also believe that vulnerability management capability and >> vulnerability assessment are suitable for promotion. Vulnerability >> description information and vulnerability detection data could stay >> within the vulnerability draft. >> >> Adam >> >> On May 17, 2016, at 1:15 PM, Haynes, Dan > > wrote: >> >> During today=E2=80=99s virtual interim meeting, we discussed various= open >> issues with respect to the Vulnerability Assessment Scenario [1] as >> a result of feedback that we received on the draft which you can see >> here [2][3]. The slide=E2=80=99s from today=E2=80=99s meeting can b= e found here [4]. >> >> The first issue was whether or not the following terms from Section >> 2 of the Vulnerability Assessment Scenario should be pulled into the >> Terminology I-D [5] with the expectation that any terms pulled in >> will be used outside of the Vulnerability Assessment Scenario. >> >> =E2=80=A2Vulnerability description information >> >> =E2=80=A2Vulnerability detection data >> >> =E2=80=A2Endpoint management capability >> >> =E2=80=A2Vulnerability management capability >> >> =E2=80=A2Vulnerability assessment >> >> =E2=80=A2Targeted collection >> >> During the meeting, there were concerns that while some of these >> terms leverage general terms already in the Terminology I-D, they >> use them in specific ways with respect to the Vulnerability >> Assessment Scenario. It was also noted that some terms like >> =E2=80=9Cendpoint management capability=E2=80=9D and =E2=80=9Cvulner= ability management >> capability=E2=80=9D, while specific, have the potential to become br= oader as >> SACM eventually expands into other areas (e.g. configuration, >> etc.). As a result, the consensus on the call was to leave the >> terms in Section 2 of the Vulnerability Assessment Scenario, for >> now, with the expectation that we may reassess this decision in the >> future. >> >> If you have any thoughts on this issue, please provide feedback by >> May 31^st . We are planning to have an updated version of the >> scenario for June 8^th . >> >> Thanks, >> >> Danny >> >> [1]https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ >> >> [2]https://github.com/sacmwg/vulnerability-scenario/pull/3 >> >> [3]https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html >> >> >> [4]https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/(looks >> like the slides are not available just yet, but, I suspect they >> should be soon) >> >> [5]https://datatracker.ietf.org/doc/draft-ietf-sacm-terminology/ >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm >> >> >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm >> > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm From nobody Fri Jun 3 23:33:22 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B177312B009 for ; Fri, 3 Jun 2016 23:33:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 1.099 X-Spam-Level: * X-Spam-Status: No, score=1.099 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.377, MIME_HTML_ONLY=0.723, MISSING_MIMEOLE=1.899, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YBWtE2L250_m for ; Fri, 3 Jun 2016 23:33:20 -0700 (PDT) Received: from sc9-admin1.yaanatech.net (63-128-177-34-static.dzbja.com [63.128.177.34]) by ietfa.amsl.com (Postfix) with ESMTP id 0720A12B037 for ; Fri, 3 Jun 2016 23:33:20 -0700 (PDT) Received: from extmail1.yaanatech.com (extmail1.yaanatech.com [63.128.177.51]) by sc9-admin1.yaanatech.net (Postfix) with ESMTP id E46DC4ED; Sat, 4 Jun 2016 06:33:19 +0000 (UTC) Received: from [192.168.1.183] (pool-173-67-205-17.clppva.fios.verizon.net [173.67.205.17]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by extmail1.yaanatech.com (Postfix) with ESMTP id 9237558086; Sat, 4 Jun 2016 06:27:58 +0000 (UTC) Date: Sat, 04 Jun 2016 02:33:16 -0400 Message-ID: X-Android-Message-ID: In-Reply-To: From: Tony Rutkowski To: Jerome Athias Importance: Normal X-Priority: 3 X-MSMail-Priority: Normal MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: base64 Archived-At: Cc: sacm@ietf.org, Henk Birkholz Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #1 - Managing Terminology X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Jun 2016 06:33:22 -0000 PHAgZGlyPSJsdHIiPk1vcmUgbGlrZWx5IHRoZXkgd291bGQgYmUgdXNpbmcgdGhlIENyaXRpY2Fs IFNlY3VyaXR5IENvbnRyb2xzIGZyYW1ld29yay48L3A+Cg== From nobody Fri Jun 3 23:48:40 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3B4BF12D0AD for ; Fri, 3 Jun 2016 23:48:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bxo1m-gkTdbM for ; Fri, 3 Jun 2016 23:48:37 -0700 (PDT) Received: from mail-vk0-x233.google.com (mail-vk0-x233.google.com [IPv6:2607:f8b0:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0656612B037 for ; Fri, 3 Jun 2016 23:48:37 -0700 (PDT) Received: by mail-vk0-x233.google.com with SMTP id a6so141741287vkg.3 for ; Fri, 03 Jun 2016 23:48:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=GCQVUg+oVMJsNwP7+Ih63HvnmqZhVaTqC567deXIMB8=; b=galoRSyTosq8QNHfDoUKHGVk6i1DHWMPwQZcaCfKf5hqRNMT9pcCa79YiEEHhLn5hs bg2v7xAUZUHTd9WZWj34oTVZZenZf9ZZtnkeQoSgps+XOGDxz9p7sFw96YE62voxD0Bx LpM/j8eHf7BfJmOXXrSEOrM3RjVkPL6XrJIPAudDK94KLDB9PVSIAg9Hi4s/vY6qs6M2 YscH2n5Gi5vIMtIMd8Uk9s5n9kqDj5OXpsLNT9BB641awJ3J7B7bRxkIUXeCodTX61YM ujZamu/mgUE9Pu1rzPO0s9lZ41C0WUYXlCM6wRTKm8Zip/anEE8g5Gdn8HfouA1m9apB 0FSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=GCQVUg+oVMJsNwP7+Ih63HvnmqZhVaTqC567deXIMB8=; b=JbSLbgyiz990oaxuY18BBhThu/WkrrcN2x/K5KUDz3lneLQJeMYWzDCeTUUSYKJF5K kM71D1nu0+QmqNdw/8iH2QLgz9McIAkWr/iqFZsDSqYfLA5W6PDDk3dhIwRog5KZ+fv9 PfpN0cU/a0jHHUBCG+zhS6oNUthcDvmQQ00zBDUv+GlGH+d04nBRPi6IyfC5tZPQY/jW 7lKuOytsB23LoTrQ+7DcQ9B/cI9+ISxk03wj69mjE1jr5X3Fuzz3jpenVSdj7FXxtAp7 bYmhQ3Zk1HxOciloWhMfvCqRK11RCjFPgSWCmARdobehFAwJx/c9eOOfoeHIm8TFo5/K ecWw== X-Gm-Message-State: ALyK8tIDsVEPgP68v3+h7su5fU3h0m5KMaTBLd34c22BJmg+FJaglVes+vFBm23ya7Z4lOFrjjN7EaBKc6FGmg== X-Received: by 10.31.7.194 with SMTP id 185mr3645646vkh.74.1465022916041; Fri, 03 Jun 2016 23:48:36 -0700 (PDT) MIME-Version: 1.0 Received: by 10.31.210.193 with HTTP; Fri, 3 Jun 2016 23:48:35 -0700 (PDT) In-Reply-To: References: From: Jerome Athias Date: Sat, 4 Jun 2016 09:48:35 +0300 Message-ID: To: "Haynes, Dan" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Jun 2016 06:48:39 -0000 While the scenario provided by Adam is valid, if your concern is that "the information beyond that" would be "supplemental endpoint information": I don't see a scenario where an endpoint management capability would have to push -supplemental- information to the vulnerability assessment capability (what would the vulnerability assessment capability do with 'unknown' additional information) So I think the issue is to change "the information beyond that" to something like "the updated information" 2016-05-18 16:15 GMT+03:00 Haynes, Dan : > During yesterday=E2=80=99s virtual interim meeting, we discussed various = open issues > with respect to the Vulnerability Assessment Scenario [1] as a result of > feedback that we received on the draft which you can see here [2][3]. Th= e > slide=E2=80=99s from the meeting can be found here [4]. > > > > One issue that we didn=E2=80=99t have a chance to discuss because we ran = out of time > was whether or not an endpoint management capability has the ability to p= ush > supplemental endpoint information to the vulnerability assessment > capability. This question came out of a review of the following text fro= m > the Vulnerability Assessment Scenario (specifically the last sentence). > > > > =E2=80=9CIn many cases, the endpoint information needed to determine an e= ndpoint=E2=80=99s > vulnerability status will have been previously > > collected by the Endpoint Management Capability and available in a > Repository. However, in other cases, the necessary > > endpoint information will not be readily available in a Repository and a > targeted collection will be necessary. Of course, > > an implementation of an endpoint management capability may prefer to enab= le > operators to perform targeted collection under > > certain circumstances, even when sufficient information can be provided b= y > the endpoint management capability (e.g. there > > may be freshness requirements for information). Targeted collection of > endpoint information for the purpose of vulnerability > > assessment does not necessarily need to be a pull by the vulnerability > assessment capability. Under certain deployment > > scenarios, once the necessary detection information is known, the > information beyond that which is available in the endpoint > > management capability can be pushed to the vulnerability assessment > capability by the endpoint whenever that information > > changes.=E2=80=9D > > > > Our main question is whether or not pushing information from the endpoint > management capability to the vulnerability assessment capability is actua= lly > possible because it would not necessarily know what information it needs = to > push prior to the server requesting it (in which case it is probably > considered a pull)? Is there a situation where the endpoint would know, = in > advance, what additional information is needed for an assessment without = a > server requesting it? > > > > If you have any thoughts on this issue, please provide feedback by May 31= st. > We are planning to have an updated version of the scenario for June 8th. > > > > Thanks, > > Danny > > > > [1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ > > [2] https://github.com/sacmwg/vulnerability-scenario/pull/3 > > [3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html > > [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ (looks > like the slides are not available just yet, but, I suspect they should be > soon) > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > From nobody Fri Jun 3 23:58:14 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5947D12D0BD for ; Fri, 3 Jun 2016 23:58:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0xEsznuYQW60 for ; Fri, 3 Jun 2016 23:58:11 -0700 (PDT) Received: from mail-vk0-x230.google.com (mail-vk0-x230.google.com [IPv6:2607:f8b0:400c:c05::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 69F6B12B069 for ; Fri, 3 Jun 2016 23:58:11 -0700 (PDT) Received: by mail-vk0-x230.google.com with SMTP id e4so5488786vkb.1 for ; Fri, 03 Jun 2016 23:58:11 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=1gOlWDXAmCfYMlqg2JYAc/3Q1RdZ6NeLNvVDAdQx6O8=; b=KkEvRfgVDaS/2jrZOF7YCAXVoSlrvgHt2zy8cogrXxpCxrDwreUmgVNS6c5L//NfDr d0HnWH4cfe2w9WzPNu55cyntEd0vw57t+4CN+0apxRFkV5IBmrjEY3K3d/32WZ6GQAGs 7UWhm9wpw33BfLf4ztfUsbjuGrZJbDrcAaNup4zqwsYS4CJq4GJw1PGZyr60ycEr0bK/ KjrEyHM0PCrOCJ6cjG/O1hTWx9keA621qQaEDYFg/87013L/FEXBwcu8/2ucTn75STlZ UkMTA5tTb864m33VDFIb/AVwNGOUc07MVlsBI1YIAbf2mdYhkJgzx0v9zyiaVDeUgVuR rytQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=1gOlWDXAmCfYMlqg2JYAc/3Q1RdZ6NeLNvVDAdQx6O8=; b=FZd1dNvcebA7I0v2lI0qlQvQp6GvlO/IN6ISQNitpChD+nbzD7h/Pnf5wbRlyTd05O CiWgRQULgLL/+lgriD/2qaehHV36aGM+vHWFy0KC8xv7TK/pG4VomSS31utI2dyXhCN2 pPWudhi6OwBrO7jX4iPErt0ZBCpNHU7vhZm11tUeW0D91AE1AOh/T9r70cLWmzkg/MNL gUA6WERu7nZlMWPLrqhzGoePDgzmNisTH4i7af8GFczPXeQvemmtPzRswy7gBCMmTbco jlKnpInpAizJPpVQNhXVBogn2bVIcJx6HKNqqWiV2TKNBDRGQFN1uC5nE57F6C6phvua xBow== X-Gm-Message-State: ALyK8tIHABkgtQOTEossdv5nxEgs4nN51YV5ALCXcSLLX9Mk8OkjMXMPhovjypoF6EiTNAseBKZ0ckU0ejb1cQ== X-Received: by 10.31.209.71 with SMTP id i68mr3516063vkg.18.1465023490537; Fri, 03 Jun 2016 23:58:10 -0700 (PDT) MIME-Version: 1.0 Received: by 10.31.210.193 with HTTP; Fri, 3 Jun 2016 23:58:10 -0700 (PDT) In-Reply-To: References: From: Jerome Athias Date: Sat, 4 Jun 2016 09:58:10 +0300 Message-ID: To: "Haynes, Dan" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Changing the IM "Object" Construct to "Subject" X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 04 Jun 2016 06:58:13 -0000 IMHO I'm afraid not. Where Subject is coming from? (is that aligned with IETF terminology, an RFC...?) It's adding complexity/confusion for me while for example not aligning anymore with NIST SP 800-53A 2016-05-31 19:58 GMT+03:00 Haynes, Dan : > Hi Jerome, > > Using our new terms: > > Subject: unique name and one or more Subjects and/or Attributes > Attribute: unique name and value > > I think it would map as follows to subject-predicate-object. > > subject: Subject > predicate: always a "has-a" relationship > object: Subject/Attribute > > Does this help clarify things? > > Thanks, > > Danny > >> -----Original Message----- >> From: Jerome Athias [mailto:athiasjerome@gmail.com] >> Sent: Friday, May 20, 2016 1:17 AM >> To: Haynes, Dan >> Cc: sacm@ietf.org >> Subject: Re: [sacm] Changing the IM "Object" Construct to "Subject" >> >> Yes and No >> While the wording is better, it seems there is still semantic confusion >> regarding triples subject(-predicate-)object >> >> 2016-05-20 2:23 GMT+03:00 Haynes, Dan : >> > At IETF 95, there was an informal SACM working session after the first >> > SACM session [1]. During the meeting, it was proposed that we change >> > the name of the IM construct =E2=80=9CObject=E2=80=9D to =E2=80=9CSubj= ect=E2=80=9D. The definitions >> > effectively remain the same although worded differently: >> > >> > >> > >> > Object: Objects are the mechanism by which attributes (Section >> > 3.1) and/or other objects can be logically grouped together to create >> > more complex models. >> > >> > >> > >> > Subject: A subject is a richer structure that has a unique subject >> > name and one or more attributes or subjects. >> > >> > >> > >> > Anyways, during the virtual interim meeting on Tuesday, I realized >> > that I forgot to bring this proposed change to the list for broader >> > consensus. As a result, I wanted to do that now as part of the IM upd= ates. >> > >> > >> > >> > Please let me know if you have any objections or concerns with this >> > change by May 25th. >> > >> > >> > >> > Thanks, >> > >> > Danny >> > >> > >> > >> > [1] https://www.ietf.org/mail-archive/web/sacm/current/msg03907.html >> > >> > >> > _______________________________________________ >> > sacm mailing list >> > sacm@ietf.org >> > https://www.ietf.org/mailman/listinfo/sacm >> > From nobody Mon Jun 6 05:22:39 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5384D12D0FC for ; Mon, 6 Jun 2016 05:22:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kQs-Fw2rLGLB for ; Mon, 6 Jun 2016 05:22:33 -0700 (PDT) Received: from mail-oi0-x236.google.com (mail-oi0-x236.google.com [IPv6:2607:f8b0:4003:c06::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 33E8212D12F for ; Mon, 6 Jun 2016 05:22:30 -0700 (PDT) Received: by mail-oi0-x236.google.com with SMTP id k23so222841040oih.0 for ; Mon, 06 Jun 2016 05:22:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=Bs7sCKeusJmg801X23T3wqYiL80khxLBlvkW550WaRM=; b=xeCyh79j6IUT43+OfTmLomP/v1F0qhEXNyfny5dtJm+2NWhYqc3dZcoqK0Vm5uqAX+ bpRl33IOteQdQAasakC7cEjOqZ1RDoVu0QrNbiwpXygS4yocKW93g+1GPsY8VnskcS87 AweIdKZx35p35dZWN7idn4gsJnSRG/SwE5pHlgAPOR0TX9U2LrlRsZMVW8L7RLUduwqE tyvv3Fy2W/PgaZt8tkBHNjsGQ2QC8fjFfXvPp4ZcMRPnCghoS4oaClckxaiLoXDdR+5e snF2Zr0Z/NQZkNt6piGneU/FxCU1/mTZfpF3Gqn1N6TSxyFSHgxSK/fdzBLUHCVzCK5C 4cUQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=Bs7sCKeusJmg801X23T3wqYiL80khxLBlvkW550WaRM=; b=RBwAhuXduj0+4A085uBevRjPvP15s5kpg9XOTbVyc33pRvRO/nyTQVBTT88C69F9m5 LHc/2khqjsVi83dSLa/rbYLa1K+BMft/t2YmyxQiiH/Py4L4ejPyYXynvzLxENAaiLmj +e+kwpqhqkQD29P9daVWrAgRDdAR7VINcBEew+cSmqWBPHsTX19B/a4/rVlDPqB4dZkz rf2hNvPGoYrGHPA35LWdcRsftH1StA5zWDSQZuZJxGIBAzTxSsndIvFbJ9w49NQZWyuG tmfS0yB8ARn4WSyfg+q5kEwUbLPZIkRoHWlLhQdDKAiuusEJfTgBHXLm6yn6PQ2VV9zE GFtA== X-Gm-Message-State: ALyK8tJv7GIaWJskGYzB5rRgQNRaAbsda1Tll0WvxohFjfolaLIRJFt44jEkWs/ESOD1kw== X-Received: by 10.202.230.66 with SMTP id d63mr8544225oih.93.1465215749260; Mon, 06 Jun 2016 05:22:29 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id f199sm3662181oih.2.2016.06.06.05.22.27 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 06 Jun 2016 05:22:27 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_E08AF82B-97A8-4164-BFF1-C1526C432C81"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: <5751D73F.3060000@sit.fraunhofer.de> Date: Mon, 6 Jun 2016 07:22:23 -0500 Message-Id: References: <5751D73F.3060000@sit.fraunhofer.de> To: Henk Birkholz X-Mailer: Apple Mail (2.3124) Archived-At: Cc: sacm@ietf.org Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #1 - Managing Terminology X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jun 2016 12:22:37 -0000 --Apple-Mail=_E08AF82B-97A8-4164-BFF1-C1526C432C81 Content-Type: multipart/alternative; boundary="Apple-Mail=_54A3AD22-6588-495F-B337-778840D1BB1E" --Apple-Mail=_54A3AD22-6588-495F-B337-778840D1BB1E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 A bunch of comments inline, as contributor. > On Jun 3, 2016, at 2:15 PM, Henk Birkholz = wrote: >=20 > Hello all, >=20 > some comments on the current definition of terms: >=20 > 1) Supplemental Collection task: looks like a good way to move forward >=20 > Does this propose to define a separate collection task that focuses on = on the acquisition of previously obtained endpoint attributes from a = repository in the SACM domain? The endpoint attributes could be = identical to the ones that can be acquired via the already defined = collection task, but most certainly do not have to be! I would propose = to "handle" the endpoint attributes in an identical way and to annotate = where they come from, when they were acquired and similar metadata. >=20 > As a result, this could enable a single method to conduct both tasks = and simply things, I think. >=20 > 2) Vulnerability assessment: the proposed definition sounds fine >=20 > The current definition of Endpoint Assessment is: "Evaluate the actual = values of the endpoint attributes against those expressed in the policy. = (An evaluation result may become additional endpoint data)." >=20 > Implied - but yet not explicitly defined - in the definition of = Endpoint Assessment is that it is a concatenated sequence of tasks = defined by SACM. (Software) vulnerability assessment would be a = specialization of that composition of tasks. >=20 > Background: i.e., the vulnerability assessment would process a sub-set = of endpoint attributes that can be acquired by the: >=20 > - collection task (which is directly targeted at specific target = endpoints) and the > - target endpoint discovery task (which is supposed to be acquiring = any kind indicator information (i.e. also endpoint attributes) that can = be used to detect and re-detect target endpoints in a SACM domain) as a = basis for the collection task. >=20 >=20 > 3) Endpoint management capability: seems to be a little bit vague, = still. Especially the term "management". >=20 > This description seems to be more about a repository of expected = (should) or possible (could) states that are based on configuration? Is = an endpoint management capability (and its corresponding functions) also = providing guidance(instructions)? =93Endpoint management=94 is not something we are likely to get into, = but it=92s one way to talk about the processes and workflows used by a = given enterprise to manage their endpoints. We=92re getting into the = more abstract layers of a security program that are generally governed = by chosen or required control frameworks, and it is important that we = have continuity from that level to the level at which SACM operates. >=20 >=20 > 4) Vulnerability management capability: Here too, the term management = seems to imply guidance (or management decision) of some sort. >=20 > The definition itself seems to describe a repository or a meta = directory that provides information acquired, for example, by ROLIE? The same things I said for =93endpoint management=94 apply for = =93vulnerability management=94. The definition may describe a = repository or meta directory, but those things are facets to = vulnerability management and provide vulnerability management = capabilities=97the things that are likely required by the processes and = workflows derived from control frameworks. >=20 >=20 > 5) Management Capability: >=20 > It should be made very clear what this capability actually provides; = i.e., which category of endpoint attributes and/or guidance. This would = resolve most of the ambiguity in a simple way, I think. Essential = information elements of the content should also be included in the SACM = IM, I think. This is an abstract term from which specializations can be derived, and = I believe the specialization is where we can be very clear. We should = be able tot describe, however, that a =93management capability=94 in the = context of SACM is one that derives from the level of a control = framework. >=20 >=20 > 6) Endpoint Management Capability and Vulnerability Management = Capability: >=20 > It seems - taking into account 2-4 - that Vulnerability Management = Capability is a part of Endpoint Management Capability? I would say no. Endpoint management capability is part of asset = management capability. Vulnerability management capability will = certainly rely upon endpoint management capabilities, but I would not = view it as part of endpoint management, coming at this from a control = framework perspective. Most frameworks will say things like, "manage = your endpoints so you know where everything is and what you have=94, and = then say things like, =93for all your endpoints, make sure you=92re = addressing vulnerabilities=94. >=20 >=20 > 7) process & workflow: >=20 > A workflow might involve multiple processes with various dependences = and interconnections, I think. But I am not sure if that distinction is = really relevant to SACM. Workflow seems to be the more general term and = is less overloaded. I am partial to the term =93workflow=94 over =93process=94. >=20 >=20 > Viele Gr=FC=DFe, >=20 > Henk >=20 >=20 >=20 >=20 >=20 > On 05/31/2016 10:41 PM, Haynes, Dan wrote: >> Did anyone else have any thoughts on this particular issue? >>=20 >> If we want to take the approach of promoting a few terms as Adam has >> suggested, we might want do it as follows. >>=20 >> Supplemental (previously targeted) collection: The task of collecting >> specific endpoint information from the target endpoint, that is not >> available from the endpoint management capability, in order to make a >> determination about that endpoint (vulnerability status, = identification, >> etc.). >>=20 >> This seems general enough to be promoted as-is. >>=20 >> Vulnerability assessment: The process of determining whether a set of >> endpoints is vulnerable according to the information contained in the >> vulnerability description information. >>=20 >> We would need to generalize it more to remove the reference to >> =93vulnerability description information=94. One approach might be to >> replace =93vulnerability description information=94 with =93information= >> pertaining to the existence of a flaw or flaws in software, hardware, >> and/or firmware on an endpoint.=94 It might also make sense to = highlight >> this as a specialization of =93assessment=94. As a side note, does = anyone >> see a distinction between process and workflow (as described here >> http://blog.goodelearning.com/bpmn/business-process-vs-workflow/) and >> that assessment might be better described as a workflow? With that = said, >> our definition comes from RFC5209 and we may not want to make any >> changes which is perfectly fine =96 just something to think about :). >>=20 >> Endpoint management capability: An enterprise IT capability managing >> endpoint identity, endpoint information, and associated metadata on = an >> ongoing basis. >>=20 >> Vulnerability management capability: An enterprise IT capability >> managing endpoint vulnerabilities and associated metadata on an = ongoing >> basis by ingesting vulnerability description information and >> vulnerability detection data, and performing a vulnerability = assessment. >>=20 >> Right now, we have definitions for =93endpoint management capability=94= and >> =93vulnerability management capability=94. To support promoting = these, we >> may want to create a more general =93management capability=94 term = and then >> include =93endpoint management capability=94 and =93vulnerability = management >> capability=94 as specializations of that term. A definition of >> =93management capability=94 might read something like =93An = enterprise IT >> capability responsible for managing specific information about an >> endpoint in support of continuous monitoring processes which may or = may >> not be driven by guidance=94. >>=20 >> Anyways, this is just a little bit more to think about :). Let me = know >> what you think. >>=20 >> Thanks, >>=20 >> Danny >>=20 >> *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Haynes, Dan >> *Sent:* Tuesday, May 24, 2016 7:43 AM >> *To:* Adam Montville >> *Cc:* sacm@ietf.org >> *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario >> Issue #1 - Managing Terminology >>=20 >> Do others have thoughts regarding whether or not terminology from the >> vulnerability assessment scenario draft should be promoted ot the >> Terminology I-D? If so, which terms make sense to promote? >>=20 >> Thanks, >>=20 >> Danny >>=20 >> *From:*Adam Montville [mailto:adam.w.montville@gmail.com] >> *Sent:* Thursday, May 19, 2016 8:04 PM >> *To:* Haynes, Dan = >> >> *Cc:* sacm@ietf.org > >> *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario >> Issue #1 - Managing Terminology >>=20 >> I=92ll echo my statements from the virtual interim by pointing out = that >> the vulnerability scenario, while narrowing our focus, does not = change >> the scope of our charter. =46rom that perspective, I would like to = see >> terms =93promoted=94 into the terminology draft sooner rather than = later. >> Of the set of terms Danny described, I think endpoint management >> capability and targeted collection are prime candidates for such >> promotion. I also believe that vulnerability management capability = and >> vulnerability assessment are suitable for promotion. Vulnerability >> description information and vulnerability detection data could stay >> within the vulnerability draft. >>=20 >> Adam >>=20 >> On May 17, 2016, at 1:15 PM, Haynes, Dan >> >> wrote: >>=20 >> During today=92s virtual interim meeting, we discussed various = open >> issues with respect to the Vulnerability Assessment Scenario [1] = as >> a result of feedback that we received on the draft which you can = see >> here [2][3]. The slide=92s from today=92s meeting can be found = here [4]. >>=20 >> The first issue was whether or not the following terms from = Section >> 2 of the Vulnerability Assessment Scenario should be pulled into = the >> Terminology I-D [5] with the expectation that any terms pulled in >> will be used outside of the Vulnerability Assessment Scenario. >>=20 >> =95Vulnerability description information >>=20 >> =95Vulnerability detection data >>=20 >> =95Endpoint management capability >>=20 >> =95Vulnerability management capability >>=20 >> =95Vulnerability assessment >>=20 >> =95Targeted collection >>=20 >> During the meeting, there were concerns that while some of these >> terms leverage general terms already in the Terminology I-D, they >> use them in specific ways with respect to the Vulnerability >> Assessment Scenario. It was also noted that some terms like >> =93endpoint management capability=94 and =93vulnerability = management >> capability=94, while specific, have the potential to become = broader as >> SACM eventually expands into other areas (e.g. configuration, >> etc.). As a result, the consensus on the call was to leave the >> terms in Section 2 of the Vulnerability Assessment Scenario, for >> now, with the expectation that we may reassess this decision in = the >> future. >>=20 >> If you have any thoughts on this issue, please provide feedback by >> May 31^st . We are planning to have an updated version of the >> scenario for June 8^th . >>=20 >> Thanks, >>=20 >> Danny >>=20 >> = [1]https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ = >>=20 >> [2]https://github.com/sacmwg/vulnerability-scenario/pull/3 = >>=20 >> = [3]https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html = >>=20 >> [4]https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ = (looks >> like the slides are not available just yet, but, I suspect they >> should be soon) >>=20 >> [5]https://datatracker.ietf.org/doc/draft-ietf-sacm-terminology/ = >>=20 >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org > >> https://www.ietf.org/mailman/listinfo/sacm = >>=20 >>=20 >>=20 >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm = >>=20 >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = --Apple-Mail=_54A3AD22-6588-495F-B337-778840D1BB1E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252
A bunch of comments inline, as = contributor.

On Jun 3, 2016, at 2:15 PM, Henk Birkholz = <henk.birkholz@sit.fraunhofer.de> wrote:

Hello all,

some comments on the current definition of = terms:

1) Supplemental = Collection task: looks like a good way to move forward

Does this propose to define a separate = collection task that focuses on on the acquisition of previously = obtained endpoint attributes from a repository in the SACM domain? The = endpoint attributes could be identical to the ones that can be acquired = via the already defined collection task, but most certainly do not have = to be! I would propose to "handle" the endpoint attributes in an = identical way and to annotate where they come from, when they were = acquired and similar metadata.

As a result, this could enable a single method = to conduct both tasks and simply things, I think.

2) Vulnerability assessment: the proposed = definition sounds fine

The current definition of Endpoint Assessment = is: "Evaluate the actual values of the endpoint attributes against those = expressed in the policy. (An evaluation result may become additional = endpoint data)."

Implied - but yet = not explicitly defined - in the definition of Endpoint Assessment is = that it is a concatenated sequence of tasks defined by SACM. (Software) = vulnerability assessment would be a specialization of that composition = of tasks.

Background: i.e., = the vulnerability assessment would process a sub-set of endpoint = attributes that can be acquired by the:

- collection task (which is directly targeted at = specific target endpoints) and the
- target endpoint discovery task (which = is supposed to be acquiring any kind indicator information (i.e. also = endpoint attributes) that can be used to detect and re-detect target = endpoints in a SACM domain) as a basis for the collection = task.


3) Endpoint management capability: seems = to be a little bit vague, still. Especially the term = "management".

This description = seems to be more about a repository of expected (should) or possible = (could) states that are based on configuration? Is an endpoint = management capability (and its corresponding functions) also providing = guidance(instructions)?


=93Endpoint management=94 is not something we are = likely to get into, but it=92s one way to talk about the processes and = workflows used by a given enterprise to manage their endpoints. =  We=92re getting into the more abstract layers of a security = program that are generally governed by chosen or required control = frameworks, and it is important that we have continuity from that level = to the level at which SACM operates.




4) Vulnerability management capability: = Here too, the term management seems to imply guidance (or management = decision) of some sort.

The definition itself seems to describe a = repository or a meta directory that provides information acquired, for = example, by ROLIE?

The same = things I said for =93endpoint management=94 apply for =93vulnerability = management=94.  The definition may describe a repository or meta = directory, but those things are facets to vulnerability management and = provide vulnerability management capabilities=97the things that are = likely required by the processes and workflows derived from control = frameworks.



5) Management = Capability:

It should be made = very clear what this capability actually provides; i.e., which category = of endpoint attributes and/or guidance. This would resolve most of the = ambiguity in a simple way, I think. Essential information elements of = the content should also be included in the SACM IM, I think.

This is an abstract term from which = specializations can be derived, and I believe the specialization is = where we can be very clear.  We should be able tot describe, = however, that a =93management capability=94 in the context of SACM is = one that derives from the level of a control framework.



6) Endpoint Management Capability and = Vulnerability Management Capability:

It seems - taking into account 2-4 - that = Vulnerability Management Capability is a part of Endpoint Management = Capability?

I would say = no.  Endpoint management capability is part of asset management = capability.  Vulnerability management capability will certainly = rely upon endpoint management capabilities, but I would not view it as = part of endpoint management, coming at this from a control framework = perspective.  Most frameworks will say things like, "manage your = endpoints so you know where everything is and what you have=94, and then = say things like, =93for all your endpoints, make sure you=92re = addressing vulnerabilities=94.



7) process & workflow:

A workflow might involve multiple = processes with various dependences and interconnections, I think. But I = am not sure if that distinction is really relevant to SACM. Workflow = seems to be the more general term and is less overloaded.

I am partial to the term =93workflow=94 over = =93process=94.  



Viele Gr=FC=DFe,

Henk





On 05/31/2016 10:41 = PM, Haynes, Dan wrote:
Did anyone else have any thoughts on this particular = issue?

If we want to take the approach of = promoting a few terms as Adam has
suggested, we might want = do it as follows.

Supplemental (previously = targeted) collection: The task of collecting
specific = endpoint information from the target endpoint, that is not
available from the endpoint management capability, in order = to make a
determination about that endpoint (vulnerability = status, identification,
etc.).

This seems general enough to be promoted as-is.

Vulnerability assessment: The process of = determining whether a set of
endpoints is vulnerable = according to the information contained in the
vulnerability = description information.

We would need to = generalize it more to remove the reference to
=93vulnerabili= ty description information=94. One approach might be to
replace =93vulnerability description information=94 with = =93information
pertaining to the existence of a flaw or = flaws in software, hardware,
and/or firmware on an = endpoint.=94  It might also make sense to highlight
this as a specialization of =93assessment=94.  As a side = note, does anyone
see a distinction between process and = workflow (as described here
http://blog.goodelearning.com/bpmn/business-process-vs-workflow= /) and
that assessment might be better described as a = workflow? With that said,
our definition comes from = RFC5209 and we may not want to make any
changes which is = perfectly fine =96 just something to think about :).

Endpoint management capability:  An enterprise IT = capability managing
endpoint identity, endpoint = information, and associated metadata on an
ongoing = basis.

Vulnerability management capability: =  An enterprise IT capability
managing endpoint = vulnerabilities and associated metadata on an ongoing
basis = by ingesting vulnerability description information and
vulnerability detection data, and performing a vulnerability = assessment.

Right now, we have definitions = for =93endpoint management capability=94 and
=93vulnerabilit= y management capability=94. To support promoting these, we
may want to create a more general =93management capability=94 = term and then
include =93endpoint management capability=94 = and =93vulnerability management
capability=94 as = specializations of that term.  A definition of
=93management capability=94 might read something like =93An = enterprise IT
capability responsible for managing specific = information about an
endpoint in support of continuous = monitoring processes which may or may
not be driven by = guidance=94.

Anyways, this is just a little = bit more to think about :).  Let me know
what you = think.

Thanks,

Danny

*From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Haynes, = Dan
*Sent:* Tuesday, May 24, 2016 7:43 AM
*To:* Adam Montville <adam.w.montville@gmail.com>
*Cc:* sacm@ietf.org
*Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment = Scenario
Issue #1 - Managing Terminology

Do others have thoughts regarding whether or not terminology = from the
vulnerability assessment scenario draft should be = promoted ot the
Terminology I-D?  If so, which terms = make sense to promote?

Thanks,

Danny

*From:*Adam = Montville [mailto:adam.w.montville@gmail.com]
*Sent:* = Thursday, May 19, 2016 8:04 PM
*To:* Haynes, Dan <dhaynes@mitre.org <mailto:dhaynes@mitre.org>>
*Cc:* sacm@ietf.org <mailto:sacm@ietf.org>
*Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment = Scenario
Issue #1 - Managing Terminology

I=92ll echo my statements from the virtual interim by = pointing out that
the vulnerability scenario, while = narrowing our focus, does not change
the scope of our = charter.  =46rom that perspective, I would like to see
terms =93promoted=94 into the terminology draft sooner rather = than later.
 Of the set of terms Danny described, I = think endpoint management
capability and targeted = collection are prime candidates for such
promotion. =  I also believe that vulnerability management capability and
vulnerability assessment are suitable for promotion. = Vulnerability
description information and vulnerability = detection data could stay
within the vulnerability = draft.

Adam

   On May 17, 2016, at 1:15 PM, Haynes, Dan = <dhaynes@mitre.org
   <mailto:dhaynes@mitre.org>> wrote:

   During today=92s virtual interim meeting, = we discussed various open
   issues with = respect to the Vulnerability Assessment Scenario [1] as
   a result of feedback that we received on = the draft which you can see
   here [2][3]. =  The slide=92s from today=92s meeting can be found here [4].

   The first issue was whether = or not the following terms from Section
   2 = of the Vulnerability Assessment Scenario should be pulled into the
   Terminology I-D [5] with the expectation = that any terms pulled in
   will be used = outside of the Vulnerability Assessment Scenario.

   =95Vulnerability description information

   =95Vulnerability detection = data

   =95Endpoint = management capability

   =95Vulnerability management capability

   =95Vulnerability = assessment

   =95Targeted = collection

   During the = meeting, there were concerns that while some of these
   terms leverage general terms already in the = Terminology I-D, they
   use them in = specific ways with respect to the Vulnerability
   Assessment Scenario.  It was also = noted that some terms like
   =93endpoint = management capability=94 and =93vulnerability management
   capability=94, while specific, have the = potential to become broader as
   SACM = eventually expands into other areas (e.g. configuration,
   etc.).  As a result, the consensus on = the call was to leave the
   terms in = Section 2 of the Vulnerability Assessment Scenario, for
   now, with the expectation that we may = reassess this decision in the
   future.

   If you have any thoughts on = this issue, please provide feedback by
   May= 31^st .  We are planning to have an updated version of the
   scenario for June 8^th .

   Thanks,

   Danny

   [1]https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenari= o/

   [2]https://github.com/sacmwg/vulnerability-scenario/pull/3

   [3]https://www.ietf.org/mail-archive/web/sacm/current/msg03958.htm= l

   [4]https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/<= /a>(looks
   like the slides are not = available just yet, but, I suspect they
   should be soon)

   [5]https://datatracker.ietf.org/doc/draft-ietf-sacm-terminology/

   _____________________________________________= __
   sacm mailing list
   sacm@ietf.org <mailto:sacm@ietf.org>
   https://www.ietf.org/mailman/listinfo/sacm



_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


_______________________________________________
sacm mailing = list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_54A3AD22-6588-495F-B337-778840D1BB1E-- --Apple-Mail=_E08AF82B-97A8-4164-BFF1-C1526C432C81 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXVWsCAAoJEDEhyx7etgABJxkP/j4W9qKGF1HfeSRkfBOj7h09 q94f1fpigFBFBuhT3nxX35+xTRJTwKhtYpfXX5IKt1qNEUKLU1l9+1/XSnt1O3SQ Qb4lb57S8a2b7Lf0ubGJOhrmTs4ezBGULvIvmjwHTmKvGJmXa6xo+NO5IiCD9PvF obReKj/qWRVdWOfMUdhV6VDRzBHU25o9vpminOugAfcfD7q1CrgXj10zdlmrw7Gi JT1w4ueIyCGVjfj+eoRw3T5chjOps55cidAKx+vWTX8X9cn2XLse0RJAq1i6F8zZ g+3sIWsHxU5FVdt70/0xR1W2Za7zwMjXZBSRZwW3qSpgvKTJJBwwxf5yq/Qb+79e h9iz5Cy4PGrRlXY4M4h8biL/oVeo4wheG/ud5Di1+brd94Ra8c+7i1zNZjpeW3xX OMW5Wbbd+N2/4N95gT77UCCFowCJhnjthjPNqCutTQJphHS72lK3nB9ozYGafimx mhaVe0Y5kw76OKHAFrfa0z+tIvDOv4OnYdDh35ywatJ/zoY/ynrU5cw/ahUwXpfb b28Lqk7L0gTUop0GTaakC5xGN6jqpN2tsBMlYS4IYVXYB1gLW2XTcjPokv4mzaAa IsIqbgpkmULSyIuYFHWjOXAwu7X7Evwt/5RuzNQXcWmIxchiWIfgZ+oFMmDrKXcI q4zt/sDT2ecQ5cq3aUE0 =OHU2 -----END PGP SIGNATURE----- --Apple-Mail=_E08AF82B-97A8-4164-BFF1-C1526C432C81-- From nobody Mon Jun 6 05:23:34 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DE5612D76F for ; Mon, 6 Jun 2016 05:23:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LuRXRILpvreW for ; Mon, 6 Jun 2016 05:23:31 -0700 (PDT) Received: from mail-oi0-x22a.google.com (mail-oi0-x22a.google.com [IPv6:2607:f8b0:4003:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEAEC12D0FC for ; Mon, 6 Jun 2016 05:23:31 -0700 (PDT) Received: by mail-oi0-x22a.google.com with SMTP id p204so27211511oih.3 for ; Mon, 06 Jun 2016 05:23:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=BSQEtF6zihtv7/kQAx70f+mGxFVsrDESMbsCcSE/5EU=; b=YxFQoya9BBoY/6m5XBEZBt+FH7E0n6qOsx13d6uBNEN9gZM0OXArjtGq+5h6SL/RSQ +t4J0K6cWjOFaoY31qV0yvrC4yLQzQkBPbpiCs4nztiF83uZdnfJbSGOS9vxRnzyrFDl 3d8Hkk/yEirhBFGRFSZONLINf2XLjzBweQCosm1vuMkGsX7RplakeFty//nJrYRljlgW nMmTbpPN6S7HrqzKsnzXVlJnaVuqPvCPhX7O/oN5xg/VQrfU4Zpfq76/u1qNJ66l8AJE zeOl5WscgoZHJxibZmGwsI8mp+7ZP3jQkUDzHF5OTx6KPbvR72bRd0sSuH3SCmKHBVlI sFDQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=BSQEtF6zihtv7/kQAx70f+mGxFVsrDESMbsCcSE/5EU=; b=MH6t4usQI+PNGkaSxlZspyNsAC5hzdWEaKf7r7ZWDMFIdmeRmLuEK7LJgT1I3FkDMC MVBzV+922ER9BhP1YzOR3L7iBtHbs48jhR5/vn2knI8HyOoT9pTXEjnliu7hQjhEjySO rqhkNnLoW4ZCCw9H+qUVWGc0v5LS/jH13kGeLqWKkQWPOTaF4mTsCmR/zYEwJmPRVrSR G9o34kEXQOPvSNJZB1XIajeDjlzXH560Kmvxcx+2sxjF/tWftcA4XbrytYD33zL1QTuE JqxyfOYjrVPjXRFcmVEfBldW1f28wnuXdKvfVIWN6AOzRs7vSTDIKimNUgJzXyl4ki1r fK1g== X-Gm-Message-State: ALyK8tKizmtoimqOm16xX/FFreFiv1em4YwYDMWdLsBZO7zSgg2hBXSU8/jgpQGKWrjhkQ== X-Received: by 10.157.36.135 with SMTP id z7mr8717031ota.74.1465215811222; Mon, 06 Jun 2016 05:23:31 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id f199sm3662181oih.2.2016.06.06.05.23.28 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 06 Jun 2016 05:23:30 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_683BC67E-BF0D-4BA2-842A-6D6AFF8D2B0D"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville X-Priority: 3 In-Reply-To: Date: Mon, 6 Jun 2016 07:23:28 -0500 Message-Id: <0B72E51C-BC8F-4BCF-B453-C541A9D3A75A@gmail.com> References: To: Tony Rutkowski X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Jerome Athias , sacm@ietf.org, Henk Birkholz Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #1 - Managing Terminology X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jun 2016 12:23:33 -0000 --Apple-Mail=_683BC67E-BF0D-4BA2-842A-6D6AFF8D2B0D Content-Type: multipart/alternative; boundary="Apple-Mail=_38731111-F7FF-49EC-A5A9-B73848C55279" --Apple-Mail=_38731111-F7FF-49EC-A5A9-B73848C55279 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=us-ascii Yes, some organizations may start with the CIS Critical Controls. Full disclosure: My org manages development of those controls. > On Jun 4, 2016, at 1:33 AM, Tony Rutkowski wrote: > > More likely they would be using the Critical Security Controls framework. > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm --Apple-Mail=_38731111-F7FF-49EC-A5A9-B73848C55279 Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii Yes, some organizations may start with the CIS Critical Controls.

Full disclosure: My org manages development of those controls.


On Jun 4, 2016, at 1:33 AM, Tony Rutkowski <tony@yaanatech.com> wrote:

More likely they would be using the Critical Security Controls framework.

_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

--Apple-Mail=_38731111-F7FF-49EC-A5A9-B73848C55279-- --Apple-Mail=_683BC67E-BF0D-4BA2-842A-6D6AFF8D2B0D Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXVWtAAAoJEDEhyx7etgAB3SoQALZo8kjdnM9NtqiryIyt6aFO l+7HmXAcwtIKxhkQQP+7KCjX1xorw9HrbPzlIwCQA5+ku0xYa9nJ+I2LyG1B+WjJ 9XQM5X0aLMUtpAnMKfUWotkzFsaJcCYAZGLzoXxpJ+vzF/r9lQNPj1Eem83p6SCs r/C7bBDdvF/wbg6kjMTsX7MY7HLJjqFe2zeo3cT/AOW94+oOgmC20qZ0DBPHLEiH gUWBXlVghl3z5v/TEZzYmTjJlM0wKgbBBRzyxewxx66VoUs3hv1TohP9BxYNBcUI OXxzD9RohUw+m8SpZA6miK0YJyx0C22OS4TL+Wo91AmAcJPh+4w47b6Kd5lZjOSG IOHjpAo4ToGjuJoFz3+HFqkcy1JzLFU7mrxHJK8t9EavGsR8CbFIsn+qJWtM95+H MGgoyvIKAKPkTez5S4RPUKG3UuvREHy+DYeXQzKGd1XIwJIhFOSh4IBbiB8b30VD yIbGINcBrK12dPN2oiA0DCCGI7oxcx9Q69EHvqMmohYqGUyFH+SQUvnmq5jMmUD2 DHgcZKmwqxgl2t7lzIRdR47F1P/AgynXdL2MzcVO3oE2FhX/pPQrhFsWx46eYkHz JoZp9fUZIE/D+PW9Hg/xXeOgxUC/5K0mHSfFSMJyhOeDt+upTKtOyTouIECXatxe rz3cpElhIXC2aeg8PTZL =8rUb -----END PGP SIGNATURE----- --Apple-Mail=_683BC67E-BF0D-4BA2-842A-6D6AFF8D2B0D-- From nobody Mon Jun 6 05:32:39 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BB24C12B025 for ; Mon, 6 Jun 2016 05:32:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GdbEYfjPUEdM for ; Mon, 6 Jun 2016 05:32:36 -0700 (PDT) Received: from mail-oi0-x229.google.com (mail-oi0-x229.google.com [IPv6:2607:f8b0:4003:c06::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CE498128B44 for ; Mon, 6 Jun 2016 05:32:36 -0700 (PDT) Received: by mail-oi0-x229.google.com with SMTP id p204so27561517oih.3 for ; Mon, 06 Jun 2016 05:32:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=X6sEkKhHUh/n/DW1GF/1WdKoefVmZVUd88PK7wv6e7Q=; b=cIWvQySu3q8iN+EW7qgoKhZGNgkFqSae04HFvqryZq9WkPxQc/7xeemMZBD1sZtENZ iehMIvsmfpO9LtjsJs68lAKWEMJ/vmdUEILyVo7EaeuJeSjW+Da8BnoFwTfrnPCKcj+b VH2lRqP1y94eHVNvOkAqiUOJzIxxwP8ZZD2RV/XlFjYFcpaFXFNQSASuQOcGIletoFag FRbab3Ke5iqytB3LaXK7IXSmi6AGLsXZyI9tB/XIRpbgj1MVAeFPT6jiOKl2pdqP4nBS 5Q0jd6IFiB+K1tGnkibcR9C6TTZGiAsjkDUcVeVoljIwXN1CxM4ElpO8BktKYwUhhbyy 4SAA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=X6sEkKhHUh/n/DW1GF/1WdKoefVmZVUd88PK7wv6e7Q=; b=N1wYFMVG4mx2j+VPl6purQ7koVzoatd16Cw3Ws00t044dm46a5gtCsovLDT1tb/kE5 jA6LB3h5Q5d7DNFhclJTJDEXSSCNCRrBwY+lwhks2Sa/7EiUd458rSNP/B5QBTr+qM+B /dvX1FHrXsg5uok4mlGvme+hk4AA8rjwZyeOYWyjIl/R1RL5gqxT3FnRVNPclfM7WCag IsSercanNttD2bep4LCf8lMHPwm13pTVOC4mR6k4ZN8AOYYBoVaxqP8HCZUUSa7PHfSs VWirMEHoPYCfxozvLczfZ+iEDOo56qHl5r9Kw2Xqdw4IGFwvre//d2mGGlCmXaX3ZHCf 6dzQ== X-Gm-Message-State: ALyK8tI3ThJ84e5dgazVbsHVJXpFauX1uzYfOt/ZofMgUZ3vP86tKRvC+PtlIUQtBIhLEw== X-Received: by 10.202.230.66 with SMTP id d63mr8567271oih.93.1465216356103; Mon, 06 Jun 2016 05:32:36 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id e21sm5917816ote.34.2016.06.06.05.32.34 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 06 Jun 2016 05:32:35 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_BCB535DC-B49C-4C82-ABD9-BFF024926E1C"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Mon, 6 Jun 2016 07:32:33 -0500 Message-Id: References: To: Jerome Athias X-Mailer: Apple Mail (2.3124) Archived-At: Cc: "Haynes, Dan" , "sacm@ietf.org" Subject: Re: [sacm] Changing the IM "Object" Construct to "Subject" X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jun 2016 12:32:39 -0000 --Apple-Mail=_BCB535DC-B49C-4C82-ABD9-BFF024926E1C Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I don=E2=80=99t think =E2=80=9Csubject=E2=80=9D is rooted in anything = IETF/RFC at this point=E2=80=94it=E2=80=99s something we are exploring = to provide a better way of articulating what we=E2=80=99re getting at = within the information model. I think some concrete examples might = help. An endpoint could be a subject that has a network interface = (subject-predicate-object relationship). That network interface =E2=80=9C= has a=E2=80=9D IP address (another subject-predicate-object = relationship). I=E2=80=99m not saying those are exact examples, but they should be = enough to demonstrate the intent. Adam > On Jun 4, 2016, at 1:58 AM, Jerome Athias = wrote: >=20 > IMHO I'm afraid not. > Where Subject is coming from? (is that aligned with IETF terminology, > an RFC...?) > It's adding complexity/confusion for me while for example not aligning > anymore with NIST SP 800-53A >=20 >=20 >=20 > 2016-05-31 19:58 GMT+03:00 Haynes, Dan : >> Hi Jerome, >>=20 >> Using our new terms: >>=20 >> Subject: unique name and one or more Subjects and/or Attributes >> Attribute: unique name and value >>=20 >> I think it would map as follows to subject-predicate-object. >>=20 >> subject: Subject >> predicate: always a "has-a" relationship >> object: Subject/Attribute >>=20 >> Does this help clarify things? >>=20 >> Thanks, >>=20 >> Danny >>=20 >>> -----Original Message----- >>> From: Jerome Athias [mailto:athiasjerome@gmail.com] >>> Sent: Friday, May 20, 2016 1:17 AM >>> To: Haynes, Dan >>> Cc: sacm@ietf.org >>> Subject: Re: [sacm] Changing the IM "Object" Construct to "Subject" >>>=20 >>> Yes and No >>> While the wording is better, it seems there is still semantic = confusion >>> regarding triples subject(-predicate-)object >>>=20 >>> 2016-05-20 2:23 GMT+03:00 Haynes, Dan : >>>> At IETF 95, there was an informal SACM working session after the = first >>>> SACM session [1]. During the meeting, it was proposed that we = change >>>> the name of the IM construct =E2=80=9CObject=E2=80=9D to = =E2=80=9CSubject=E2=80=9D. The definitions >>>> effectively remain the same although worded differently: >>>>=20 >>>>=20 >>>>=20 >>>> Object: Objects are the mechanism by which attributes (Section >>>> 3.1) and/or other objects can be logically grouped together to = create >>>> more complex models. >>>>=20 >>>>=20 >>>>=20 >>>> Subject: A subject is a richer structure that has a unique = subject >>>> name and one or more attributes or subjects. >>>>=20 >>>>=20 >>>>=20 >>>> Anyways, during the virtual interim meeting on Tuesday, I realized >>>> that I forgot to bring this proposed change to the list for broader >>>> consensus. As a result, I wanted to do that now as part of the IM = updates. >>>>=20 >>>>=20 >>>>=20 >>>> Please let me know if you have any objections or concerns with this >>>> change by May 25th. >>>>=20 >>>>=20 >>>>=20 >>>> Thanks, >>>>=20 >>>> Danny >>>>=20 >>>>=20 >>>>=20 >>>> [1] = https://www.ietf.org/mail-archive/web/sacm/current/msg03907.html >>>>=20 >>>>=20 >>>> _______________________________________________ >>>> sacm mailing list >>>> sacm@ietf.org >>>> https://www.ietf.org/mailman/listinfo/sacm >>>>=20 >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm --Apple-Mail=_BCB535DC-B49C-4C82-ABD9-BFF024926E1C Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXVW1iAAoJEDEhyx7etgABv9YQAIL1f8673bEKBiNuhwXNDuOx qkrGRW6eJjp1hJdP82zD0Zs3TumW4+MrYj75B8mYNYLU2aahBMk2ml2bLUzo+f3Z 7YIBANTtf8aQ/QvR1VHESvxjk7kdg5YOjYZHHU0AmE3dV1BoHKPeFuU/Oa2k7QPr bVMfACjNlmNtmQkzy2IT4zSYXGFh4TxWV19c0wbUOQEvoBMT+Zo60LQgy7X0nB/R sHkg1nJerjc7cILR64yTk6JZ3Pp5ZARbx0s9DtQ7BMLt5AlGhC/shMJpVNWOb6Nd 4vxFkYqDMINadRLOl3jioaWiasceYE2Z84JKr+kRC3cCjAJK/GjFcx1c4CKMIH5n cAPsilkElPPZ6UPrp1/xNd6ipq0YODz1z8vJweB+uUs4n7cYFO1FCZUkEUHhoxjl dI/C4IrTAQPCrRWahyUaM3GoU2HNDwIte9OFDRL7JA7AWkNjcIInq58AgHXT14Yw mgysKd4xCZiHvfGJwRmvkrB4vGr+gzwXiM0WjGIE+xSwmycJ8z7og/+f0uzMRFJj 9JK+bv4dHeaonXEJ1yd/LveXTJ52Qh5tbfz8Y8zzjCl8TzziqLWRyWD4SWRD3NNA Q85xhLNrvS3ip1sE5ArOT/+iZUhrk0d2LXliIjn30tglJIyEFCiYMf/ednk4w3oF YpPipamjsNJQ9osnOiUz =h6zN -----END PGP SIGNATURE----- --Apple-Mail=_BCB535DC-B49C-4C82-ABD9-BFF024926E1C-- From nobody Mon Jun 6 08:00:43 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E97712D7DD for ; Mon, 6 Jun 2016 08:00:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pJJAPV3zJN7f for ; Mon, 6 Jun 2016 08:00:39 -0700 (PDT) Received: from mail-vk0-x230.google.com (mail-vk0-x230.google.com [IPv6:2607:f8b0:400c:c05::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0295D12D7E0 for ; Mon, 6 Jun 2016 08:00:21 -0700 (PDT) Received: by mail-vk0-x230.google.com with SMTP id d64so79154732vkb.0 for ; Mon, 06 Jun 2016 08:00:20 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=vBQ1QuK8Bav4NZGA8xrh5o1daNRi6AU/amIGd+zwxiA=; b=Ih9uj7xfZoVlDSTCLv24C9fQCikPsZXVQrBOMdiFIqkSbkElffFG2Bau7WuRqr+qVJ rPnbswIHRUhwBc92T3CwRuBA4RjP2kfhZMPypa5XmyByqk0OJzrjvYOHgve5g3Ye+rTT PuoqGZjekYPSfWl14v38XVE52W5x6ggAvdGqFXe4DuTvo8U9+pwxHBHhhr5dcevFllMv hmvc5y9/OgKI7sC8j3B93Pe8pL+ozmejrBZ8R3Jf9XCti+muNoFlvvRh7/FbibDrg4Po h608MPK9nbU6g2cmzaVc+haSlHgwlzpAowQBmba8N4sbweqL30P8NJWTvBKbdZHVMzbZ qjbg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=vBQ1QuK8Bav4NZGA8xrh5o1daNRi6AU/amIGd+zwxiA=; b=Gj+QvqCKkwUWJCUZahctehZqEAWGn2fezGs9CR57/qJ8EbB4A87aHKsnlVnmRy78// eNjJBMIERuAURJnMte52kXlax8ZlMaU2Ci/yXZeNrMEincF9MRQjvDELDBP5fq/FonSI 56uiVIgcNCkqYFPfk7NHNZowyJMEb7AE6h3VXvsp202aJkabYUAV9DBzJNN2gnc8gDlv blL9grvox4bLqWbgabCqkeZW+w/KkKqi901PtI3ff7SC5cB7knSjPnoWAXODoFALYJiO 5Bs/MoOl4pXlNysCY8yH+4GFh+G034vaeZdzqCqkZDBS3mh6mLmWPmEBID6bL7fIvRsc KEwQ== X-Gm-Message-State: ALyK8tLlrQoThfm+91zEDf9ZO+61piWMuQFYos6d7Nne1btyAXYk3QRpeXYAPFhrvq2VPjwD7Vzxg5Em0Oc2jg== X-Received: by 10.159.32.131 with SMTP id 3mr8492703uaa.75.1465225219985; Mon, 06 Jun 2016 08:00:19 -0700 (PDT) MIME-Version: 1.0 Received: by 10.31.210.193 with HTTP; Mon, 6 Jun 2016 08:00:18 -0700 (PDT) In-Reply-To: References: From: Jerome Athias Date: Mon, 6 Jun 2016 18:00:18 +0300 Message-ID: To: Adam Montville Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Archived-At: Cc: "Haynes, Dan" , "sacm@ietf.org" Subject: Re: [sacm] Changing the IM "Object" Construct to "Subject" X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jun 2016 15:00:42 -0000 Right. Just putting things on the table... So I think we agree on Objects-Attributes. For physical things, I do like to use the notion of Components (e.g. Components of a Device. And a Component could have (sub)Components. e.g. processor, SIM card, etc.) Now, back to the subject :p and your examples, just for information, in (STIX)CybOX they use the term Top Level Object (TLO). 2016-06-06 15:32 GMT+03:00 Adam Montville : > I don=E2=80=99t think =E2=80=9Csubject=E2=80=9D is rooted in anything IET= F/RFC at this point=E2=80=94it=E2=80=99s something we are exploring to prov= ide a better way of articulating what we=E2=80=99re getting at within the i= nformation model. I think some concrete examples might help. An endpoint = could be a subject that has a network interface (subject-predicate-object r= elationship). That network interface =E2=80=9Chas a=E2=80=9D IP address (a= nother subject-predicate-object relationship). > > I=E2=80=99m not saying those are exact examples, but they should be enoug= h to demonstrate the intent. > > Adam > >> On Jun 4, 2016, at 1:58 AM, Jerome Athias wrote= : >> >> IMHO I'm afraid not. >> Where Subject is coming from? (is that aligned with IETF terminology, >> an RFC...?) >> It's adding complexity/confusion for me while for example not aligning >> anymore with NIST SP 800-53A >> >> >> >> 2016-05-31 19:58 GMT+03:00 Haynes, Dan : >>> Hi Jerome, >>> >>> Using our new terms: >>> >>> Subject: unique name and one or more Subjects and/or Attributes >>> Attribute: unique name and value >>> >>> I think it would map as follows to subject-predicate-object. >>> >>> subject: Subject >>> predicate: always a "has-a" relationship >>> object: Subject/Attribute >>> >>> Does this help clarify things? >>> >>> Thanks, >>> >>> Danny >>> >>>> -----Original Message----- >>>> From: Jerome Athias [mailto:athiasjerome@gmail.com] >>>> Sent: Friday, May 20, 2016 1:17 AM >>>> To: Haynes, Dan >>>> Cc: sacm@ietf.org >>>> Subject: Re: [sacm] Changing the IM "Object" Construct to "Subject" >>>> >>>> Yes and No >>>> While the wording is better, it seems there is still semantic confusio= n >>>> regarding triples subject(-predicate-)object >>>> >>>> 2016-05-20 2:23 GMT+03:00 Haynes, Dan : >>>>> At IETF 95, there was an informal SACM working session after the firs= t >>>>> SACM session [1]. During the meeting, it was proposed that we change >>>>> the name of the IM construct =E2=80=9CObject=E2=80=9D to =E2=80=9CSub= ject=E2=80=9D. The definitions >>>>> effectively remain the same although worded differently: >>>>> >>>>> >>>>> >>>>> Object: Objects are the mechanism by which attributes (Section >>>>> 3.1) and/or other objects can be logically grouped together to create >>>>> more complex models. >>>>> >>>>> >>>>> >>>>> Subject: A subject is a richer structure that has a unique subject >>>>> name and one or more attributes or subjects. >>>>> >>>>> >>>>> >>>>> Anyways, during the virtual interim meeting on Tuesday, I realized >>>>> that I forgot to bring this proposed change to the list for broader >>>>> consensus. As a result, I wanted to do that now as part of the IM up= dates. >>>>> >>>>> >>>>> >>>>> Please let me know if you have any objections or concerns with this >>>>> change by May 25th. >>>>> >>>>> >>>>> >>>>> Thanks, >>>>> >>>>> Danny >>>>> >>>>> >>>>> >>>>> [1] https://www.ietf.org/mail-archive/web/sacm/current/msg03907.html >>>>> >>>>> >>>>> _______________________________________________ >>>>> sacm mailing list >>>>> sacm@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/sacm >>>>> >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm > From nobody Mon Jun 6 11:36:18 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0DFB412D53B for ; Mon, 6 Jun 2016 11:36:13 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9OhsSey0FwIx for ; Mon, 6 Jun 2016 11:36:09 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id C87EB12D54D for ; Mon, 6 Jun 2016 11:36:08 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 54D4F6C08F1; Mon, 6 Jun 2016 14:36:08 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 350356C08F2; Mon, 6 Jun 2016 14:36:08 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Mon, 6 Jun 2016 14:36:07 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Mon, 6 Jun 2016 14:36:07 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=Q81bG3Sd1vXGi3sRlavs1cQPI8QX4aFThQZyPRZGsZc=; b=scTdk5+erBkMQ+UV1y4kvDpFNJTmsl+FsyJoWQj3rH21yilxIX9HeFmNwKmdsCrscDh1jfN+QfzBzrOGqfNWwjID6fyOFR+pkxFkbT00/cqWdlT8VQfgcWG5V5824knCS9XTSjfuq9L4wcX+l3BHJBFLlpjAb3Bv1eIMe3OqEfM= Received: from SN1PR09MB0990.namprd09.prod.outlook.com (10.166.69.8) by SN1PR09MB0989.namprd09.prod.outlook.com (10.166.69.7) with Microsoft SMTP Server (TLS) id 15.1.506.9; Mon, 6 Jun 2016 18:36:05 +0000 Received: from SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) by SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) with mapi id 15.01.0506.016; Mon, 6 Jun 2016 18:36:06 +0000 From: "Schmidt, Charles M." To: Gunnar Engelbach , "tony@yaanatech.com" , Michael Godsey , Jerome Athias Thread-Topic: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document Thread-Index: AQHRssiXYgDnjWKISkyXny5miMOOyp/c27iA Date: Mon, 6 Jun 2016 18:36:05 +0000 Message-ID: References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <0aa7684f-5a47-c00a-4b5b-e19484dd718a@yaanatech.com> <0418b8dc-9fd8-f8d2-3461-ce8e019fe22a@yaanatech.com> <8eb2719e-6baa-013a-daf5-5f2b269a75c1@ThreatGuard.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=cmschmidt@mitre.org; x-originating-ip: [192.160.51.88] x-ms-office365-filtering-correlation-id: 528c3fe0-2d24-47b3-7225-08d38e396baf x-microsoft-exchange-diagnostics: 1; SN1PR09MB0989; 5:ix1xrAMs4ApY+oGLQGt4rrfhBZ31yo11U9FE1C2+gmRTGR1YGmIElMHzCw+pTNKSgXTt9iAOoEzkpYNs+7u++zL9boT/8D0noG4peNPKN9VP3RolCuhzEuqVMAyTiSzkAI9bJq6zuDc3N+TNBScBZw==; 24:MdkWgS9H1v6fmRSLqJwy7RI/dV5Q3214MSQVFbypezClUFlO0BB7wezr4nlbgnjfhQog4g5IiPsZfChcclPQcFVxNyWXhzIECf7+kRkUpVg=; 7:2MD/frVWTfG62UHSS+MQjk8Z3BGlf7L/8Xn8OCC7YsIASsV6WZnaBXwSoPKQBKSB2HBTTwgLvsNFllbSH+BjPTXBb5/Bj+Ivo0BXhuO0q+akxsN9aclYCi4Odsag+mpVVoXId5N2cceCxUREP79PA4uQpZsiA03yI1ldjBWeejbKnFRvhh/gPNtNJVnT/nupSChOEe69Gd5UPqPYealOQf04md3VjKqoHbTU8w0K6gc= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR09MB0989; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(20558992708506)(120809045254105)(100405760836317)(211171220733660); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:SN1PR09MB0989; BCL:0; PCL:0; RULEID:; SRVR:SN1PR09MB0989; x-forefront-prvs: 096507C068 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(51914003)(53754006)(13464003)(24454002)(51444003)(199003)(377454003)(189002)(3660700001)(3280700002)(93886004)(101416001)(1511001)(54356999)(76176999)(5890100001)(2501003)(2900100001)(2950100001)(68736007)(561944003)(230783001)(81166006)(19580395003)(19580405001)(81156014)(5004730100002)(6116002)(2561002)(76576001)(2906002)(15975445007)(586003)(92566002)(3846002)(4326007)(102836003)(33656002)(5002640100001)(8936002)(8676002)(50986999)(99936001)(66066001)(77096005)(99286002)(5003600100002)(5001770100001)(86362001)(87936001)(10400500002)(9686002)(97736004)(5008740100001)(74316001)(2421001)(122556002)(105586002)(8666004)(106116001)(189998001)(106356001)(7059030); DIR:OUT; SFP:1101; SCL:1; SRVR:SN1PR09MB0989; H:SN1PR09MB0990.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0079_01D1BFF8.5D822560" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Jun 2016 18:36:05.7187 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR09MB0989 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" , Karen O'Donoghue Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jun 2016 18:36:13 -0000 ------=_NextPart_000_0079_01D1BFF8.5D822560 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello everyone, I wanted to do a quick loop back to the original question of this thread, namely the adoption of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as a SACM working group document. This and other threads have indicated that there is some desire to evolve the document to address certain concerns, many of which I hope to address in the next draft. With the understanding that adoption as a working group draft does not in any way end the discussion or evolution of this draft, are there any other thoughts regarding adoption? Gunnar/Tony - you both raised concerns about adoption due to the document being exclusively focused on ISO SWID tags, but since then there appears to be agreement to expand to other possible tag types (with the caveat that there also appears to be consensus that this list of tags should be constrained so that endpoints are sending content using a consistent data model). Does this alteration address you concerns? If so, does that change your feelings on adoption? Thanks, Charles > -----Original Message----- > From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] > Sent: Friday, May 20, 2016 1:51 PM > To: Schmidt, Charles M. ; tony@yaanatech.com; > Michael Godsey ; Jerome Athias > > Cc: sacm@ietf.org; Karen O'Donoghue > Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as > a SACM WG document > > > Inline... > > On 5/19/2016 1:27 PM, Schmidt, Charles M. wrote: > > Tony/Gunnar, > > > > I agree. Details below. > > > >> Two questions not asked: who might do the > >> work to bridge the gap with the gazillion other > >> software identifier approaches out there, and > >> whether some form of out-of-band SWID capability > >> (as is used with may of the other SWID mechanisms) > >> cannot be included. For a lot of IoT stuff, it is > >> essential. > >> > >> This right here is an excellent point. There are other software ID > > mechanisms > >> out there and SWID is not going to cover everything for which there is an > >> alternative. > >> > >> Because this proposal is so SWID-specific, I can't get behind it. > > However, if it > >> was genericized to allow for use of current and possible future tagging > >> mechanisms, I could certainly support that. > > This makes sense. Even those strongly attached to the use of SWID tags > would > > like to make sure that this specification can handle future revisions of the > > ISO SWID specification, and as you both note, there are other structures > out > > there which people might wish to use. > > > > Basically, it seems to me that we want to support a common, core set of > > functionality related to inventory and inventory events, but that we want > to > > have some flexibility in the data (I'll call these "records") used to convey > > that information to a policy server. Are we in agreement on this? (I don't > > think we want the nature of what one can infer from a report to change > based > > on the record structure used to convey that report.) > > > > Given this, the following are the core capabilities of SWID M&A for > > reporting records as I see them: > > 1) Records need to be associated with specific instances of a specific > > software product and version thereof. > > --- If the same version of the same product is installed multiple times, > > there will need to be multiple records naming the same product and > version - > > one associated with each actual installation. (We need to convey that a > > given product+version is installed "exactly X times" rather than "at least > > one instance".) > > --- Changes to a software product need to result in a change in the > > associated record. (The record needs to distinguish between AcmeApp > v1.2.3 > > and AcmeApp v1.2.4, since this is critical to multiple consumers of this > > data.) > > --- Records associated with a product+version need to be consistent over > > time and across endpoints. (There needs to be an easy way for the SWID- > PV to > > say "this is the same product+version" across different reports and > between > > reports from different machines.) > > 2) If the record is more than about 200 bytes, there needs to be a concise > > identifier for this record. In SWID tags, this is created by the combination > > of the TagCreatorRegID and the TagID fields. (Concise identifiers are used > > in multiple places in SWID M&A to convey information without bloating > > messages.) > > I tried to find fault, but I think as a basic core set, this is good > coverage. > > In ongoing practice there are undoubtedly going to be more capabilities > desired for other use cases, and some tagging solutions will have useful > capabilities that are not available in others. Extensibility is assumed. > > I think it's also a necessity that a common data model be used > regardless of the tag type/source. For hopefully obvious reasons. > > > > > > > Do you (or anyone) have any questions or concerns about any of these > core > > capabilities, or have any others to add? I think all of the other SWID M&A > > capabilities (monitoring for changes, tracking and ordering of events, > > subscriptions, processing targeted requests, etc.) are fairly neutral with > > regard to the record structure used in messages assuming the two > > requirements above are met. Let me know if you disagree about that. > > > > Capabilities do not need to be inherent in the record itself. (For example, > > there is nothing in a SWID tag that allows one to distinguish between > > multiple installations of a single product.) There just needs to be a > > reliable, deterministic mechanism by which these capabilities can be met > > while using the record. > > > > I will work on putting together some proposals on how different record > types > > can be clearly labeled in SWID M&A messages so recipients can know the > type > > of content they are getting prior to parsing. (Probably want a way for > > SWID-PVs to express a preference too... need to think about this.) While I > > am doing that, if you have a favorite non-ISO-SWID record that you would > > like to see supported, could you put together any necessary requirements > > that would be needed to ensure it aligns with the core capabilities > > described above? I think that would be very useful for fleshing out this > > flexibility. > > > > I am interested in your thoughts on this. Thanks for the input. > > > > Charles ------=_NextPart_000_0079_01D1BFF8.5D822560 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVFzCCBQcw ggPvoAMCAQICChY3sr0AAQAAGTYwDQYJKoZIhvcNAQELBQAwUDETMBEGCgmSJomT8ixkARkWA09S RzEVMBMGCgmSJomT8ixkARkWBU1JVFJFMSIwIAYDVQQDExlNSVRSRSBDb3Jwb3JhdGlvbiBQRSBD QS0yMB4XDTE1MDEyNjE0MjQ1MFoXDTE4MDEyNTE0MjQ1MFowTjELMAkGA1UEBhMCVVMxDjAMBgNV BAoTBU1JVFJFMQ8wDQYDVQQLEwZQZW9wbGUxHjAcBgNVBAMTFVNjaG1pZHQuQ2hhcmxlcy4yNTY1 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN5xc5J1BiLU7EoWUMfTywdDl9O8BN8w Mv9ZVYlyXwRv7wyLQOSV6zlFANSf8RvuP2Yt5akFlLawX9s5MsqMTqNoDuJ0rV3fz7cwniAHJPJQ 9r7Ito9rtbW55YcLy9AQeD1MwZEP8BX8Xw4iGtyjNSYFOuPbumz19c9S2e1Hu5kbgQcgpKAl8yqw jmxbxjl2Dabd8Vsb718KIbXW63Lcq0XXZAHHRmoZS3sYAHiYR7IkoXAdu6jZdaBapuQ2zTrBPhY8 a9D2HFWBLnDo3H7rT75+xtOr5toOg5X35K0loeRRF+gVGvRCPzpICJm+2FEaV1AbfG4CBVpXzMHu RCyzitECAwEAAaOCAeMwggHfMCgGA1UdJQQhMB8GCCsGAQUFBwMEBgkrBgEEAXMCAQcGCCsGAQUF BwMCMB0GA1UdDgQWBBTqU2AbFZCeOIL9w7THoPvAqThWlzAOBgNVHQ8BAf8EBAMCBsAwHgYDVR0R BBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAfBgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2l JzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0 aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/BggrBgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6 Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29ycG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYG CCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRyZS5vcmcvb2NzcDA+BgkrBgEEAYI3FQcEMTAvBicr BgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6uAYE2gZe0EIWZ/woCAWQCAQswNAYJKwYBBAGCNxUK BCcwJTAKBggrBgEFBQcDBDALBgkrBgEEAXMCAQcwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD ggEBAGHCUualAhLcCqxuPwC1EcEtQ+11msjtfh0g21t0ocOwVVidgoB/QL8PFaFp15XKEzYcGf7l IcJHNjLWwG8x8G1rnSdKGyJgj/5vHSFRm/NUYmSpqWc1k3s/Ps5GlvWWEmu8VtUHJcqeqPy7tkXe 0rzHGpvj0+pPAGjgqvLUxs3IPj2ME1v+lQ/DotWa9WTJo6SitnbYpj5ARRDoQjS9zY1idjZpTqyZ XPDO/yZnTaR5Ue1sHdARztlnNIQszBsJRPWh4kldQ4d0qHUycia+Jtm7Rbj1Itpb4jDyiK+9mxzE tNfYzzvtmCB0y/Eq4PGurhFFydPk18zpEapb+dlP5WYwggUtMIIDFaADAgECAhBMOlIUIU/ToEQV R3+ykPtQMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBvcmF0aW9uIFBFIFJv b3QgQ0EtMTAeFw0xMTA0MjYxOTQ1NDVaFw0yMTA0MjYxOTQ4MjJaMCkxJzAlBgNVBAMTHk1JVFJF IENvcnBvcmF0aW9uIFBFIFJvb3QgQ0EtMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ALafIUdIUat4pvgJcH2+WRxj+ZNjkmNk5VR2ByDFAx9zH1u2+vJQd49zMADLMRitZHv7ejuCtLfc ER+EA4DkNQrYZjhmVu8YjfNYdLz9WH9eEjboFGu2bx/Sj94l7MvEJzh2pdWyn9D2vSl4m+fKlLsH 2mUgk1uT9npKnfM+ExE73wVrz4A8csZ1bIgDusi/VmkaTIklTIWC1stykblP4LntG1RIvqnYPoRD YdTUjV6aKrHktutp6uXMecMm0fzxdGLLUPTTZWAzOXCxAimBx8w+nFyiaM7hV64rMJRPK3Z2u1Ws cma34AtLnhCGP7bI/+uSMlIcjwcDtGaVvi7PQneGPhEUruZkeRXfMONnlc7qLJpN7NwMaygvmeLV 2JI2ollHbiHoAIkk9byQcJEud70fs6wV9xKeepezBVb1vxnLGfcFE9hxuuSTnolXNmMwhKi4EN2Q gR59PaAWoNpZzGnPhNrCpvWii98cx7OnMg/KgiSvTvECwqqNwpswEpTsLUxYi2IKT1vzEpoGDrfS a8BwM5PewxxSkxbbY61xjJoTFc2nbdRIzJ9Vr/LeViwSNKkqF/zGItgmnog7BIlkbvTZqbt6ZovJ u7SEfXLHWwFT5LNrKDTFjqKRhKRUEg71Nfpu+79oyCkCmMWJjds1DieEyRS9aLJ2f+9TJiwg1Xfh AgMBAAGjUTBPMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbh32f/my+ Aunz4Ck6ilQlLJ84LzAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQsFAAOCAgEAMu/LF7D/ 3qhx/P7jmMsUOkwQ4ZAgcTaMvDBdnPVA57OQAy9assTwJaQwbC/todWc7dxbz44NEqERP/Y7shta sTM4Zb9I3UMddrREnaN7gW+tW9brnOB/1cQiVgyOCmS/wedxCPBxj41AXSwA4Dphvfbn35ubmq0p I7SF//wc91OkH80z5VVhYuEps0SNpqdehkPET7if1jJaGgJ/Fx+hI0tqC4xmQvD8PPwuOluPDb2d SWU62b2Ga+xprr5qZWCuvEmb/0+UrvhZS0U8vbjV0Cx7Zuoyr5wx9sgeus08H2g6Z4yC56wtjuwD UVWXNCssIiolt5weyaKu+P11bjCNT4kgcrdkLvkSEv1gCOcDIm05sEogcUGar7rYfnV6GpCcjj9l oOY7y+eb/US2YQ6jLUSOaL5zhb04DSUKjT0npBrQPpugrZf74ZEoOuRRQjIWkpJ+72NiJfkfB6Ll iTfME2rnXnsZ8h3A/jJbfEGgeQhK6Q43nhmX0NBXGJvuk7ZTMw8OXhYU/yekKwAQsX4C5FRR7qzH EA+CZJl15KuWz/hjZGNFMtizG8P1A/eDhFdS6XwKlJE/pruWG78YPnpRbbGnfiMfKMFt+9scpyAA 4fatWx5vo9ThzyZhgC1ivZokaQuLd4rH7t2QdEKSP3tj6OjBA9/dyW9GG863BJRb+mQwggVkMIID TKADAgECAgphCxNwAAAAAAAIMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBv cmF0aW9uIFBFIFJvb3QgQ0EtMTAeFw0xNDA5MjMxNDExMDlaFw0yMDA5MjMxNDIxMDlaMFAxEzAR BgoJkiaJk/IsZAEZFgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUg Q29ycG9yYXRpb24gUEUgQ0EtMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCwfdfN xVXZ6/JpLeCsWV8VvVPRAiI4uemN3Cyn81gK/0uC0KJRX/WJ1XHmfzeLesyF46yxCgd0fe6mtaDf FQNWfngzMVaiHHT7nNyRcOo5TE+ZmzDe7i4Cp+Sd7ySSyaj5WTLVylv6PmFxtKYm/2tI44tELhGR Dsw/J7rhwi0/9jEujxjXpL64l72bcrEaDj8pSFg1LNPLFEe4S2jI9yxc5k0ZKQJtqGhBVPtOGSiZ gI8axrVkdnjr1Dwr0M1UT7Qmexp+r0WvMK16877VaApOGn0560eKtLgBYb8j72B7KUwFGFMtuM7Z dCCHYbiwLVnauOFbPK6qxhK/1fQBhZ0CAwEAAaOCAWUwggFhMBIGCSsGAQQBgjcVAQQFAgMBAAEw IwYJKwYBBAGCNxUCBBYEFK3ZS7o7L84O/Az72pcz74oBuJlNMB0GA1UdDgQWBBQMxmvuAka12Y/b o8zsvD7hBb2lJzAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRbh32f/my+Aunz4Ck6ilQlLJ84LzBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290 JTIwQ0EtMS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9odHRwOi8vcGtpLm1pdHJl Lm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290JTIwQ0EtMS5jcnQwDQYJKoZIhvcN AQELBQADggIBAD06aH/7xILol2cSQVcb5IUOOmM7spT7YGRDhGIosIFKbLSovt8NtmVwJY0I/2/Y 9rSD5hRQ2jdVWny3baAWRuhxjg/DjJgZ3wHyf8h5UtzcUEIfmslxOlDNlfFihKaMDUyqD4ycLEXW R7VGMjFQH5470vQPebdgoTgHBhdRHrOrtUb0/X1U4PUiR2TeOM4uQw0c0KupxNqG28Ff/Esonb2f JXs3i6hC8ke9gsysG8IssgY1xD8hPkqdJWBEcZYQjzkqIEyM+Z5p7640fX8eFPYiIXhHr2ZLf+8c 33FaIZEHDiQ7eFcxMQ3oxo0YvJKLwwrTGugne3pPNUd2DizbNP5u3YcPfMKSLgkmIqHOlshBq/kT na8btf//rwCspdTYGgCCtLrc0Tb26Rj4nKN8aEPJ08QYfFIgJv9DwejCC4km5bJh1ixczGraLqKb g8WJng9fRojYQcWKbf6NuJjWuwxud4NSDwcHcoTODd7p+3e9o6DrfH0OBzPOgd9+EFKI+dg6pbgY iZT8MUSUMA7dKxVysbrMrx/QOGVeYq7KzS+nip0usB4sCGIGZfyGZLkbj9rhtY3EnIdD8iKcgCtU CZHDDb3SzH7IpXICOzhIGRp8y9qSCemevhBJ8aXgcZcBvYPGbGcB4qzDclJKiDCC8rfUTeptdzOn dxibyGqMSYRKMIIFbzCCBFegAwIBAgIKFjewygABAAAZNTANBgkqhkiG9w0BAQsFADBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTIwHhcNMTUwMTI2MTQyNDUwWhcNMTgwMTI1MTQyNDUwWjBOMQswCQYD VQQGEwJVUzEOMAwGA1UEChMFTUlUUkUxDzANBgNVBAsTBlBlb3BsZTEeMBwGA1UEAxMVU2NobWlk dC5DaGFybGVzLjI1NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPFZQSeVxZu+ Gt4BfFomoILNlkXW2oAGBuhcEI5+Gfu33x7Or9K2NR3etzu9EqGPafLrJ1dyDWFIM9ktke0LqNKL 73WkWyCcpN0Bb7yXNPQynHzOgQSIrQbi7yrhmEbmNQC7hU5+BxfikIu/O7eSjWRgm9coRkEg6zpO 4nrADfumKIw/yVJ0dwqRVh9cMB7S8QJIXteDPHeZPeMAt7fw5TXTgF+OAwIqyjhHN4SiPMTQoDyZ HydqDxpd42gMZjLILS7oZ7pIDCfSwuPnM9PNHUzz5w+0D2hAYjv2a8BBh2L1LTV3nZVREN9uugVf w5Bu9q3T1ddeLrWsU4QvE8c0LwIDAQABo4ICSzCCAkcwEwYDVR0lBAwwCgYIKwYBBQUHAwQwgZQG CSqGSIb3DQEJDwSBhjCBgzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsOAwIH MAoGCCqGSIb3DQMHMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAS0wCwYJYIZIAWUDBAEWMAsGCWCG SAFlAwQBGTALBglghkgBZQMEAQIwCwYJYIZIAWUDBAEFMB0GA1UdDgQWBBTembLBQG/LThypM1w0 LH0xnzFqWzAOBgNVHQ8BAf8EBAMCBSAwHgYDVR0RBBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAf BgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2lJzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8v cGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/Bggr BgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29y cG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRy ZS5vcmcvb2NzcDA9BgkrBgEEAYI3FQcEMDAuBiYrBgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6u AYE20YFnhpiTPgIBZAIBEzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMEMA0GCSqGSIb3DQEB CwUAA4IBAQAKdBfLmGhQyfhBlJUrWwu5iuDwZTsOuddl9d4mw3Ml8yQjc21cCPDGJ3Tc3cwIJyj7 6rSK4mV6xsyUKDxZBZcNSM/7iLtFS9N8noe0Mo0TcPZuJzxzD8xtd/qlIvOLZR0rrS9v816ajAly u2OHTPi4lVtk/rI7ccO5C8uEMfrmXXTN6IJNyhqlprfCLDrICsGM3rXafADIkxBFGr0bXq6orGrM hJRMVQcdKdB5d/VqflqePmynjoorrIMnIfIEsfplYSsF3Uv8hAHxrHSldqOrl8aXvvyIh8d/UBx/ pQcw+0JQn9ebPCcMilCvNH2sKq+8SjJrmHNI1mjSxD5QLH3MMYIDXDCCA1gCAQEwXjBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTICChY3sr0AAQAAGTYwCQYFKw4DAhoFAKCCAdMwGAYJKoZIhvcNAQkD MQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTYwNjA2MTgzNjAxWjAjBgkqhkiG9w0BCQQx FgQUWUiFCuJsovO36FHcPh+gfd7jfPUwbQYJKwYBBAGCNxAEMWAwXjBQMRMwEQYKCZImiZPyLGQB GRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENvcnBvcmF0aW9u IFBFIENBLTICChY3sMoAAQAAGTUwbwYLKoZIhvcNAQkQAgsxYKBeMFAxEzARBgoJkiaJk/IsZAEZ FgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUgQ29ycG9yYXRpb24g UEUgQ0EtMgIKFjewygABAAAZNTCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglg hkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG 9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATAN BgkqhkiG9w0BAQEFAASCAQBDdVsBQ39FGCeaMvN0O6fAwrwLRBAyRvIL1nXczfEI3rklPfRhqpaX +fLz+DCky7UDGltRSp1ah1GtiVoSKpksirXcAaV5C/m1GR/Q9RygSspKDLAkxumA7GIk6zSv+qTm rimEvxBN2TBg/5RXDWOZ819EDTC8H4m87pCeMp4f+RBWchx/araUYEDksISSMzHI6F4UUj5SfvmQ akCPOTBGimT1X3NS1QhRUN5SKGUPUCpDsBifUHvw/OBWsPwKe2tMmFhbEmeTw6/m8w+rBNIwrDmJ P1ZR98EZojYp+HQw71h1blXwFCsJIb3g3SwuXDYwQu9fW095aVHP8GGdiSaiAAAAAAAA ------=_NextPart_000_0079_01D1BFF8.5D822560-- From nobody Mon Jun 6 11:45:09 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65C3312D7D5 for ; Mon, 6 Jun 2016 11:45:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=threatguard-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4QggN87XF59z for ; Mon, 6 Jun 2016 11:45:06 -0700 (PDT) Received: from mail-pa0-x235.google.com (mail-pa0-x235.google.com [IPv6:2607:f8b0:400e:c03::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4917812D5AE for ; Mon, 6 Jun 2016 11:45:06 -0700 (PDT) Received: by mail-pa0-x235.google.com with SMTP id xk1so37784269pac.2 for ; Mon, 06 Jun 2016 11:45:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=threatguard-com.20150623.gappssmtp.com; s=20150623; h=from:subject:to:references:cc:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding; bh=smQRMe/US6ZicfF4l0H6bTLMNEnQGl9QMRcvqf9X6pw=; b=fyQnM+xwguBSQyL5CkYRmNAyCE2L9HO3ew5qv8p1sHZGw+GUYyvdge8tgYSOzXCUTY Yhty3PIbTYVNYJhpw/w1QSnO9fefcytUtM9qZMcwvSeh2T6zxt5UE8VeHGv9avvBD/B6 7E5vLt6MAl5IUDr56UaDUuI1zQw4JCRt5FdVC0TYS/ncu9jqLlrenwSybOWWbtzTgIXj Cc7nvPJu5ytexkPwyH+DCfA3/mQtM9NLBuLRUVRR9QTv352Sgbrsb/znr1vMxwd7+Rz5 ujZvkRvA6Bt6QpUyGcakVvDgzetc1j4iG8JEa5azxsxBdzv/4eYNkdN6n9Hs+sE5EEKI bqfQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:references:cc:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=smQRMe/US6ZicfF4l0H6bTLMNEnQGl9QMRcvqf9X6pw=; b=g63OnHoROQLS3hkuuSNV/uh4+1v1ojXwymnQUkGWzHNPYc9sCtY09aZQ+c0mQiyXDQ NGceHr6v02wKuyxjH8CnnPZ5Lqii5UfQSNPdvJyKqRcjVbtPlIu4xC1B85WaGRF4RRvI zrPGVrLz4MrUN8YlYgNM+MPNaQ0LTOuFhogrlJGMhijVw9hRYUpHz5uRHHgyNQvcyau0 Qii09zkdAe2YgW1RzGVls1qg6KxFrqD20WyJXbq81SgAhXUip3OQAM1GtYgZNOStg9D8 EaQUjficwoORxHQUfGfOajaTigPnmV6zosrd59yjpKY5pXNrWz4nxsSMIArkxrXZcqL+ Zmmg== X-Gm-Message-State: ALyK8tKktGvvvIQeMPShxuFkh8GJtIXVWfkPAVrV140fNIeUPyTsAHLCkWeq4oknHEOzXw== X-Received: by 10.66.63.98 with SMTP id f2mr26396332pas.123.1465238705634; Mon, 06 Jun 2016 11:45:05 -0700 (PDT) Received: from [172.16.1.122] (75-142-12-171.dhcp.mdfd.or.charter.com. [75.142.12.171]) by smtp.gmail.com with ESMTPSA id f24sm29365331pfd.62.2016.06.06.11.45.03 (version=TLSv1/SSLv3 cipher=OTHER); Mon, 06 Jun 2016 11:45:04 -0700 (PDT) From: Gunnar Engelbach X-Google-Original-From: Gunnar Engelbach To: "Schmidt, Charles M." , "tony@yaanatech.com" , Michael Godsey , Jerome Athias References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <0aa7684f-5a47-c00a-4b5b-e19484dd718a@yaanatech.com> <0418b8dc-9fd8-f8d2-3461-ce8e019fe22a@yaanatech.com> <8eb2719e-6baa-013a-daf5-5f2b269a75c1@ThreatGuard.com> Message-ID: <6217ee86-3479-9476-d76c-d8d74af9175b@ThreatGuard.com> Date: Mon, 6 Jun 2016 11:45:04 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: "sacm@ietf.org" , Karen O'Donoghue Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jun 2016 18:45:08 -0000 On 6/6/2016 11:36 AM, Schmidt, Charles M. wrote: > Hello everyone, > > I wanted to do a quick loop back to the original question of this thread, > namely the adoption of > https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as a SACM > working group document. This and other threads have indicated that there is > some desire to evolve the document to address certain concerns, many of > which I hope to address in the next draft. > > With the understanding that adoption as a working group draft does not in > any way end the discussion or evolution of this draft, are there any other > thoughts regarding adoption? > > Gunnar/Tony - you both raised concerns about adoption due to the document > being exclusively focused on ISO SWID tags, but since then there appears to > be agreement to expand to other possible tag types (with the caveat that > there also appears to be consensus that this list of tags should be > constrained so that endpoints are sending content using a consistent data > model). Does this alteration address you concerns? If so, does that change > your feelings on adoption? If there's going to be a consistent data model I don't see I reason why there should be any constraint on what endpoint tag types are supported. I'd prefer to see that translation happen as soon in the lifecycle of the data as possible, but we'll see what consensus is on that. For reasons already stated, if that translation is done centrally then I don't SACM adoption extending much beyond a few large vendors that put out, effectively, their own stovepipes. --gun > > Thanks, > Charles > >> -----Original Message----- >> From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] >> Sent: Friday, May 20, 2016 1:51 PM >> To: Schmidt, Charles M. ; tony@yaanatech.com; >> Michael Godsey ; Jerome Athias >> >> Cc: sacm@ietf.org; Karen O'Donoghue >> Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc > as >> a SACM WG document >> >> >> Inline... >> >> On 5/19/2016 1:27 PM, Schmidt, Charles M. wrote: >>> Tony/Gunnar, >>> >>> I agree. Details below. >>> >>>> Two questions not asked: who might do the >>>> work to bridge the gap with the gazillion other >>>> software identifier approaches out there, and >>>> whether some form of out-of-band SWID capability >>>> (as is used with may of the other SWID mechanisms) >>>> cannot be included. For a lot of IoT stuff, it is >>>> essential. >>>> >>>> This right here is an excellent point. There are other software ID >>> mechanisms >>>> out there and SWID is not going to cover everything for which there is > an >>>> alternative. >>>> >>>> Because this proposal is so SWID-specific, I can't get behind it. >>> However, if it >>>> was genericized to allow for use of current and possible future tagging >>>> mechanisms, I could certainly support that. >>> This makes sense. Even those strongly attached to the use of SWID tags >> would >>> like to make sure that this specification can handle future revisions of > the >>> ISO SWID specification, and as you both note, there are other structures >> out >>> there which people might wish to use. >>> >>> Basically, it seems to me that we want to support a common, core set of >>> functionality related to inventory and inventory events, but that we > want >> to >>> have some flexibility in the data (I'll call these "records") used to > convey >>> that information to a policy server. Are we in agreement on this? (I > don't >>> think we want the nature of what one can infer from a report to change >> based >>> on the record structure used to convey that report.) >>> >>> Given this, the following are the core capabilities of SWID M&A for >>> reporting records as I see them: >>> 1) Records need to be associated with specific instances of a specific >>> software product and version thereof. >>> --- If the same version of the same product is installed multiple times, >>> there will need to be multiple records naming the same product and >> version - >>> one associated with each actual installation. (We need to convey that a >>> given product+version is installed "exactly X times" rather than "at > least >>> one instance".) >>> --- Changes to a software product need to result in a change in the >>> associated record. (The record needs to distinguish between AcmeApp >> v1.2.3 >>> and AcmeApp v1.2.4, since this is critical to multiple consumers of this >>> data.) >>> --- Records associated with a product+version need to be consistent over >>> time and across endpoints. (There needs to be an easy way for the SWID- >> PV to >>> say "this is the same product+version" across different reports and >> between >>> reports from different machines.) >>> 2) If the record is more than about 200 bytes, there needs to be a > concise >>> identifier for this record. In SWID tags, this is created by the > combination >>> of the TagCreatorRegID and the TagID fields. (Concise identifiers are > used >>> in multiple places in SWID M&A to convey information without bloating >>> messages.) >> I tried to find fault, but I think as a basic core set, this is good >> coverage. >> >> In ongoing practice there are undoubtedly going to be more capabilities >> desired for other use cases, and some tagging solutions will have useful >> capabilities that are not available in others. Extensibility is assumed. >> >> I think it's also a necessity that a common data model be used >> regardless of the tag type/source. For hopefully obvious reasons. >> >> >> >>> Do you (or anyone) have any questions or concerns about any of these >> core >>> capabilities, or have any others to add? I think all of the other SWID > M&A >>> capabilities (monitoring for changes, tracking and ordering of events, >>> subscriptions, processing targeted requests, etc.) are fairly neutral > with >>> regard to the record structure used in messages assuming the two >>> requirements above are met. Let me know if you disagree about that. >>> >>> Capabilities do not need to be inherent in the record itself. (For > example, >>> there is nothing in a SWID tag that allows one to distinguish between >>> multiple installations of a single product.) There just needs to be a >>> reliable, deterministic mechanism by which these capabilities can be met >>> while using the record. >>> >>> I will work on putting together some proposals on how different record >> types >>> can be clearly labeled in SWID M&A messages so recipients can know the >> type >>> of content they are getting prior to parsing. (Probably want a way for >>> SWID-PVs to express a preference too... need to think about this.) While > I >>> am doing that, if you have a favorite non-ISO-SWID record that you would >>> like to see supported, could you put together any necessary requirements >>> that would be needed to ensure it aligns with the core capabilities >>> described above? I think that would be very useful for fleshing out this >>> flexibility. >>> >>> I am interested in your thoughts on this. Thanks for the input. >>> >>> Charles From nobody Mon Jun 6 12:34:51 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BCDF312D7CF for ; Mon, 6 Jun 2016 12:34:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id k4EcptQat8pw for ; Mon, 6 Jun 2016 12:34:46 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 4676412D5CF for ; Mon, 6 Jun 2016 12:34:46 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id ED7416C0043; Mon, 6 Jun 2016 15:34:45 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id D5FD56C08FB; Mon, 6 Jun 2016 15:34:45 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Mon, 6 Jun 2016 15:34:45 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Mon, 6 Jun 2016 15:34:45 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=zoSD2D8iasEKyeKCIsMwdRlMgcRXRca8tRPscyr7mBo=; b=LkyRaWYh1Df8+iqmoiUe+qILtIVVEox8qVXV3CuGcVwmZcqCkZnMZbjj18FNZV7uiedTV9lzz3klqB9IbhUp4VbG8W0Yp2B6Tp7tJqg7z5hmw1AHc54nMpd5KzoiLMXHzKmMWWaNRDYOV8wqQUtpyiKALRHpG2GbKcM3D8XY0+A= Received: from SN1PR09MB0990.namprd09.prod.outlook.com (10.166.69.8) by SN1PR09MB0992.namprd09.prod.outlook.com (10.166.69.10) with Microsoft SMTP Server (TLS) id 15.1.511.8; Mon, 6 Jun 2016 19:34:38 +0000 Received: from SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) by SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) with mapi id 15.01.0506.016; Mon, 6 Jun 2016 19:34:38 +0000 From: "Schmidt, Charles M." To: Gunnar Engelbach , "tony@yaanatech.com" , Michael Godsey , Jerome Athias Thread-Topic: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document Thread-Index: AQHRwCOcXyroj0wY0k+1KGmeoj7imJ/c0Y+A Date: Mon, 6 Jun 2016 19:34:37 +0000 Message-ID: References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <0aa7684f-5a47-c00a-4b5b-e19484dd718a@yaanatech.com> <0418b8dc-9fd8-f8d2-3461-ce8e019fe22a@yaanatech.com> <8eb2719e-6baa-013a-daf5-5f2b269a75c1@ThreatGuard.com> <6217ee86-3479-9476-d76c-d8d74af9175b@ThreatGuard.com> In-Reply-To: <6217ee86-3479-9476-d76c-d8d74af9175b@ThreatGuard.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=cmschmidt@mitre.org; x-originating-ip: [192.160.51.88] x-ms-office365-filtering-correlation-id: c923ba83-3db7-4bd8-5dcb-08d38e41991b x-microsoft-exchange-diagnostics: 1; SN1PR09MB0992; 5:C0aZa25z+12G/3esvHhlCxNmIMSG2SakDQzfzgPqp+smqUHvmucREqgk7GNDtZtnuH5kVZv6IbhnwjvVn8y/M7lYHHtAMsjWMUx3mDOAlpahA16oEfec+2P3yBAJSFOW4+0v7FbpiXBYVlHYvys99w==; 24:k/HmoCICg2oc0uLqdgvGJ6r2bYUW81z5WzbIMKXF6D+blYXw9qNe9HinVnvskY6GBQriuANJKsvvEON15SVppqrafrLZ6zXxtiJhxaw1DdQ=; 7:Lg8LrItEefkuRIdz9DL3uYiCsPC7EQGspf8Tbq0HBWSowFliIfCBurOTJZa9bzAUfhZeh3ekdSyoUrBTrD80J/Kv7MNI7SaZuFR7mfKWrNGONccUQ+I47P5vQntZ3itEOPhTx6+QbvUFKDEr8oGPnzqe3dXqCBNwcQNf/fk29eMN8xAUpZS93T3lKpbf3DbB9T48IOrlmIICxhGXONkRMWOn+ANuAaJCNY74TY/ot04= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR09MB0992; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(20558992708506)(120809045254105)(100405760836317)(211171220733660); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:SN1PR09MB0992; BCL:0; PCL:0; RULEID:; SRVR:SN1PR09MB0992; x-forefront-prvs: 096507C068 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(189002)(377454003)(53754006)(199003)(13464003)(24454002)(51914003)(51444003)(81156014)(8676002)(81166006)(4326007)(2900100001)(2950100001)(97736004)(2906002)(5890100001)(2501003)(33656002)(54356999)(561944003)(76176999)(101416001)(5001770100001)(105586002)(93886004)(77096005)(50986999)(87936001)(8666004)(15975445007)(10400500002)(2561002)(5002640100001)(230783001)(122556002)(8936002)(5003600100002)(3280700002)(68736007)(3660700001)(9686002)(189998001)(3846002)(99936001)(66066001)(586003)(2421001)(102836003)(6116002)(86362001)(5004730100002)(1511001)(106116001)(74316001)(19580395003)(106356001)(19580405001)(5008740100001)(92566002)(99286002)(76576001)(11100500001)(7059030); DIR:OUT; SFP:1101; SCL:1; SRVR:SN1PR09MB0992; H:SN1PR09MB0990.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:23 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_007E_01D1C000.8AC64E40" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 06 Jun 2016 19:34:37.9435 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR09MB0992 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" , Karen O'Donoghue Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Jun 2016 19:34:49 -0000 ------=_NextPart_000_007E_01D1C000.8AC64E40 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit > If there's going to be a consistent data model I don't see I reason why > there should be any constraint on what endpoint tag types are supported. I'm afraid you have lost me here. My understanding was that you were arguing that SWID M&A should support tag types other than the ISO SWID tags. As I understand the term, ISO SWID 2015 defines a data model, and then different tag formats (XML, CBOR, JSON) would all be data formats of that common data model. But if we have completely different tag types, (for example, SWID 2015 tags and RPM records), I'm confused how there could be a common data model that both represent. In other words, when you argued for a common data model, to me this implicitly meant we needed to curtail the types of tags supported to only those that could serialize that common data model. Sorry if I am being slow here, but could you clarify how you see the tag types relating to this common data model? Thanks, Charles > -----Original Message----- > From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] > Sent: Monday, June 06, 2016 1:45 PM > To: Schmidt, Charles M. ; tony@yaanatech.com; > Michael Godsey ; Jerome Athias > > Cc: sacm@ietf.org; Karen O'Donoghue > Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as > a SACM WG document > > > > On 6/6/2016 11:36 AM, Schmidt, Charles M. wrote: > > Hello everyone, > > > > I wanted to do a quick loop back to the original question of this thread, > > namely the adoption of > > https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as a > SACM > > working group document. This and other threads have indicated that there > is > > some desire to evolve the document to address certain concerns, many of > > which I hope to address in the next draft. > > > > With the understanding that adoption as a working group draft does not in > > any way end the discussion or evolution of this draft, are there any other > > thoughts regarding adoption? > > > > Gunnar/Tony - you both raised concerns about adoption due to the > document > > being exclusively focused on ISO SWID tags, but since then there appears > to > > be agreement to expand to other possible tag types (with the caveat that > > there also appears to be consensus that this list of tags should be > > constrained so that endpoints are sending content using a consistent data > > model). Does this alteration address you concerns? If so, does that change > > your feelings on adoption? > > If there's going to be a consistent data model I don't see I reason why > there should be any constraint on what endpoint tag types are supported. > > I'd prefer to see that translation happen as soon in the lifecycle of > the data as possible, but we'll see what consensus is on that. For > reasons already stated, if that translation is done centrally then I > don't SACM adoption extending much beyond a few large vendors that put > out, effectively, their own stovepipes. > > > --gun > > > > > > Thanks, > > Charles > > > >> -----Original Message----- > >> From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] > >> Sent: Friday, May 20, 2016 1:51 PM > >> To: Schmidt, Charles M. ; tony@yaanatech.com; > >> Michael Godsey ; Jerome Athias > >> > >> Cc: sacm@ietf.org; Karen O'Donoghue > >> Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc > > as > >> a SACM WG document > >> > >> > >> Inline... > >> > >> On 5/19/2016 1:27 PM, Schmidt, Charles M. wrote: > >>> Tony/Gunnar, > >>> > >>> I agree. Details below. > >>> > >>>> Two questions not asked: who might do the > >>>> work to bridge the gap with the gazillion other > >>>> software identifier approaches out there, and > >>>> whether some form of out-of-band SWID capability > >>>> (as is used with may of the other SWID mechanisms) > >>>> cannot be included. For a lot of IoT stuff, it is > >>>> essential. > >>>> > >>>> This right here is an excellent point. There are other software ID > >>> mechanisms > >>>> out there and SWID is not going to cover everything for which there is > > an > >>>> alternative. > >>>> > >>>> Because this proposal is so SWID-specific, I can't get behind it. > >>> However, if it > >>>> was genericized to allow for use of current and possible future tagging > >>>> mechanisms, I could certainly support that. > >>> This makes sense. Even those strongly attached to the use of SWID tags > >> would > >>> like to make sure that this specification can handle future revisions of > > the > >>> ISO SWID specification, and as you both note, there are other structures > >> out > >>> there which people might wish to use. > >>> > >>> Basically, it seems to me that we want to support a common, core set of > >>> functionality related to inventory and inventory events, but that we > > want > >> to > >>> have some flexibility in the data (I'll call these "records") used to > > convey > >>> that information to a policy server. Are we in agreement on this? (I > > don't > >>> think we want the nature of what one can infer from a report to change > >> based > >>> on the record structure used to convey that report.) > >>> > >>> Given this, the following are the core capabilities of SWID M&A for > >>> reporting records as I see them: > >>> 1) Records need to be associated with specific instances of a specific > >>> software product and version thereof. > >>> --- If the same version of the same product is installed multiple times, > >>> there will need to be multiple records naming the same product and > >> version - > >>> one associated with each actual installation. (We need to convey that a > >>> given product+version is installed "exactly X times" rather than "at > > least > >>> one instance".) > >>> --- Changes to a software product need to result in a change in the > >>> associated record. (The record needs to distinguish between AcmeApp > >> v1.2.3 > >>> and AcmeApp v1.2.4, since this is critical to multiple consumers of this > >>> data.) > >>> --- Records associated with a product+version need to be consistent > over > >>> time and across endpoints. (There needs to be an easy way for the > SWID- > >> PV to > >>> say "this is the same product+version" across different reports and > >> between > >>> reports from different machines.) > >>> 2) If the record is more than about 200 bytes, there needs to be a > > concise > >>> identifier for this record. In SWID tags, this is created by the > > combination > >>> of the TagCreatorRegID and the TagID fields. (Concise identifiers are > > used > >>> in multiple places in SWID M&A to convey information without bloating > >>> messages.) > >> I tried to find fault, but I think as a basic core set, this is good > >> coverage. > >> > >> In ongoing practice there are undoubtedly going to be more capabilities > >> desired for other use cases, and some tagging solutions will have useful > >> capabilities that are not available in others. Extensibility is assumed. > >> > >> I think it's also a necessity that a common data model be used > >> regardless of the tag type/source. For hopefully obvious reasons. > >> > >> > >> > >>> Do you (or anyone) have any questions or concerns about any of these > >> core > >>> capabilities, or have any others to add? I think all of the other SWID > > M&A > >>> capabilities (monitoring for changes, tracking and ordering of events, > >>> subscriptions, processing targeted requests, etc.) are fairly neutral > > with > >>> regard to the record structure used in messages assuming the two > >>> requirements above are met. Let me know if you disagree about that. > >>> > >>> Capabilities do not need to be inherent in the record itself. (For > > example, > >>> there is nothing in a SWID tag that allows one to distinguish between > >>> multiple installations of a single product.) There just needs to be a > >>> reliable, deterministic mechanism by which these capabilities can be met > >>> while using the record. > >>> > >>> I will work on putting together some proposals on how different record > >> types > >>> can be clearly labeled in SWID M&A messages so recipients can know the > >> type > >>> of content they are getting prior to parsing. (Probably want a way for > >>> SWID-PVs to express a preference too... need to think about this.) While > > I > >>> am doing that, if you have a favorite non-ISO-SWID record that you > would > >>> like to see supported, could you put together any necessary > requirements > >>> that would be needed to ensure it aligns with the core capabilities > >>> described above? I think that would be very useful for fleshing out this > >>> flexibility. > >>> > >>> I am interested in your thoughts on this. Thanks for the input. > >>> > >>> Charles ------=_NextPart_000_007E_01D1C000.8AC64E40 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVFzCCBQcw ggPvoAMCAQICChY3sr0AAQAAGTYwDQYJKoZIhvcNAQELBQAwUDETMBEGCgmSJomT8ixkARkWA09S RzEVMBMGCgmSJomT8ixkARkWBU1JVFJFMSIwIAYDVQQDExlNSVRSRSBDb3Jwb3JhdGlvbiBQRSBD QS0yMB4XDTE1MDEyNjE0MjQ1MFoXDTE4MDEyNTE0MjQ1MFowTjELMAkGA1UEBhMCVVMxDjAMBgNV BAoTBU1JVFJFMQ8wDQYDVQQLEwZQZW9wbGUxHjAcBgNVBAMTFVNjaG1pZHQuQ2hhcmxlcy4yNTY1 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN5xc5J1BiLU7EoWUMfTywdDl9O8BN8w Mv9ZVYlyXwRv7wyLQOSV6zlFANSf8RvuP2Yt5akFlLawX9s5MsqMTqNoDuJ0rV3fz7cwniAHJPJQ 9r7Ito9rtbW55YcLy9AQeD1MwZEP8BX8Xw4iGtyjNSYFOuPbumz19c9S2e1Hu5kbgQcgpKAl8yqw jmxbxjl2Dabd8Vsb718KIbXW63Lcq0XXZAHHRmoZS3sYAHiYR7IkoXAdu6jZdaBapuQ2zTrBPhY8 a9D2HFWBLnDo3H7rT75+xtOr5toOg5X35K0loeRRF+gVGvRCPzpICJm+2FEaV1AbfG4CBVpXzMHu RCyzitECAwEAAaOCAeMwggHfMCgGA1UdJQQhMB8GCCsGAQUFBwMEBgkrBgEEAXMCAQcGCCsGAQUF BwMCMB0GA1UdDgQWBBTqU2AbFZCeOIL9w7THoPvAqThWlzAOBgNVHQ8BAf8EBAMCBsAwHgYDVR0R BBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAfBgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2l JzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0 aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/BggrBgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6 Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29ycG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYG CCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRyZS5vcmcvb2NzcDA+BgkrBgEEAYI3FQcEMTAvBicr BgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6uAYE2gZe0EIWZ/woCAWQCAQswNAYJKwYBBAGCNxUK BCcwJTAKBggrBgEFBQcDBDALBgkrBgEEAXMCAQcwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD ggEBAGHCUualAhLcCqxuPwC1EcEtQ+11msjtfh0g21t0ocOwVVidgoB/QL8PFaFp15XKEzYcGf7l IcJHNjLWwG8x8G1rnSdKGyJgj/5vHSFRm/NUYmSpqWc1k3s/Ps5GlvWWEmu8VtUHJcqeqPy7tkXe 0rzHGpvj0+pPAGjgqvLUxs3IPj2ME1v+lQ/DotWa9WTJo6SitnbYpj5ARRDoQjS9zY1idjZpTqyZ XPDO/yZnTaR5Ue1sHdARztlnNIQszBsJRPWh4kldQ4d0qHUycia+Jtm7Rbj1Itpb4jDyiK+9mxzE tNfYzzvtmCB0y/Eq4PGurhFFydPk18zpEapb+dlP5WYwggUtMIIDFaADAgECAhBMOlIUIU/ToEQV R3+ykPtQMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBvcmF0aW9uIFBFIFJv b3QgQ0EtMTAeFw0xMTA0MjYxOTQ1NDVaFw0yMTA0MjYxOTQ4MjJaMCkxJzAlBgNVBAMTHk1JVFJF IENvcnBvcmF0aW9uIFBFIFJvb3QgQ0EtMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ALafIUdIUat4pvgJcH2+WRxj+ZNjkmNk5VR2ByDFAx9zH1u2+vJQd49zMADLMRitZHv7ejuCtLfc ER+EA4DkNQrYZjhmVu8YjfNYdLz9WH9eEjboFGu2bx/Sj94l7MvEJzh2pdWyn9D2vSl4m+fKlLsH 2mUgk1uT9npKnfM+ExE73wVrz4A8csZ1bIgDusi/VmkaTIklTIWC1stykblP4LntG1RIvqnYPoRD YdTUjV6aKrHktutp6uXMecMm0fzxdGLLUPTTZWAzOXCxAimBx8w+nFyiaM7hV64rMJRPK3Z2u1Ws cma34AtLnhCGP7bI/+uSMlIcjwcDtGaVvi7PQneGPhEUruZkeRXfMONnlc7qLJpN7NwMaygvmeLV 2JI2ollHbiHoAIkk9byQcJEud70fs6wV9xKeepezBVb1vxnLGfcFE9hxuuSTnolXNmMwhKi4EN2Q gR59PaAWoNpZzGnPhNrCpvWii98cx7OnMg/KgiSvTvECwqqNwpswEpTsLUxYi2IKT1vzEpoGDrfS a8BwM5PewxxSkxbbY61xjJoTFc2nbdRIzJ9Vr/LeViwSNKkqF/zGItgmnog7BIlkbvTZqbt6ZovJ u7SEfXLHWwFT5LNrKDTFjqKRhKRUEg71Nfpu+79oyCkCmMWJjds1DieEyRS9aLJ2f+9TJiwg1Xfh AgMBAAGjUTBPMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbh32f/my+ Aunz4Ck6ilQlLJ84LzAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQsFAAOCAgEAMu/LF7D/ 3qhx/P7jmMsUOkwQ4ZAgcTaMvDBdnPVA57OQAy9assTwJaQwbC/todWc7dxbz44NEqERP/Y7shta sTM4Zb9I3UMddrREnaN7gW+tW9brnOB/1cQiVgyOCmS/wedxCPBxj41AXSwA4Dphvfbn35ubmq0p I7SF//wc91OkH80z5VVhYuEps0SNpqdehkPET7if1jJaGgJ/Fx+hI0tqC4xmQvD8PPwuOluPDb2d SWU62b2Ga+xprr5qZWCuvEmb/0+UrvhZS0U8vbjV0Cx7Zuoyr5wx9sgeus08H2g6Z4yC56wtjuwD UVWXNCssIiolt5weyaKu+P11bjCNT4kgcrdkLvkSEv1gCOcDIm05sEogcUGar7rYfnV6GpCcjj9l oOY7y+eb/US2YQ6jLUSOaL5zhb04DSUKjT0npBrQPpugrZf74ZEoOuRRQjIWkpJ+72NiJfkfB6Ll iTfME2rnXnsZ8h3A/jJbfEGgeQhK6Q43nhmX0NBXGJvuk7ZTMw8OXhYU/yekKwAQsX4C5FRR7qzH EA+CZJl15KuWz/hjZGNFMtizG8P1A/eDhFdS6XwKlJE/pruWG78YPnpRbbGnfiMfKMFt+9scpyAA 4fatWx5vo9ThzyZhgC1ivZokaQuLd4rH7t2QdEKSP3tj6OjBA9/dyW9GG863BJRb+mQwggVkMIID TKADAgECAgphCxNwAAAAAAAIMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBv cmF0aW9uIFBFIFJvb3QgQ0EtMTAeFw0xNDA5MjMxNDExMDlaFw0yMDA5MjMxNDIxMDlaMFAxEzAR BgoJkiaJk/IsZAEZFgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUg Q29ycG9yYXRpb24gUEUgQ0EtMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCwfdfN xVXZ6/JpLeCsWV8VvVPRAiI4uemN3Cyn81gK/0uC0KJRX/WJ1XHmfzeLesyF46yxCgd0fe6mtaDf FQNWfngzMVaiHHT7nNyRcOo5TE+ZmzDe7i4Cp+Sd7ySSyaj5WTLVylv6PmFxtKYm/2tI44tELhGR Dsw/J7rhwi0/9jEujxjXpL64l72bcrEaDj8pSFg1LNPLFEe4S2jI9yxc5k0ZKQJtqGhBVPtOGSiZ gI8axrVkdnjr1Dwr0M1UT7Qmexp+r0WvMK16877VaApOGn0560eKtLgBYb8j72B7KUwFGFMtuM7Z dCCHYbiwLVnauOFbPK6qxhK/1fQBhZ0CAwEAAaOCAWUwggFhMBIGCSsGAQQBgjcVAQQFAgMBAAEw IwYJKwYBBAGCNxUCBBYEFK3ZS7o7L84O/Az72pcz74oBuJlNMB0GA1UdDgQWBBQMxmvuAka12Y/b o8zsvD7hBb2lJzAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRbh32f/my+Aunz4Ck6ilQlLJ84LzBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290 JTIwQ0EtMS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9odHRwOi8vcGtpLm1pdHJl Lm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290JTIwQ0EtMS5jcnQwDQYJKoZIhvcN AQELBQADggIBAD06aH/7xILol2cSQVcb5IUOOmM7spT7YGRDhGIosIFKbLSovt8NtmVwJY0I/2/Y 9rSD5hRQ2jdVWny3baAWRuhxjg/DjJgZ3wHyf8h5UtzcUEIfmslxOlDNlfFihKaMDUyqD4ycLEXW R7VGMjFQH5470vQPebdgoTgHBhdRHrOrtUb0/X1U4PUiR2TeOM4uQw0c0KupxNqG28Ff/Esonb2f JXs3i6hC8ke9gsysG8IssgY1xD8hPkqdJWBEcZYQjzkqIEyM+Z5p7640fX8eFPYiIXhHr2ZLf+8c 33FaIZEHDiQ7eFcxMQ3oxo0YvJKLwwrTGugne3pPNUd2DizbNP5u3YcPfMKSLgkmIqHOlshBq/kT na8btf//rwCspdTYGgCCtLrc0Tb26Rj4nKN8aEPJ08QYfFIgJv9DwejCC4km5bJh1ixczGraLqKb g8WJng9fRojYQcWKbf6NuJjWuwxud4NSDwcHcoTODd7p+3e9o6DrfH0OBzPOgd9+EFKI+dg6pbgY iZT8MUSUMA7dKxVysbrMrx/QOGVeYq7KzS+nip0usB4sCGIGZfyGZLkbj9rhtY3EnIdD8iKcgCtU CZHDDb3SzH7IpXICOzhIGRp8y9qSCemevhBJ8aXgcZcBvYPGbGcB4qzDclJKiDCC8rfUTeptdzOn dxibyGqMSYRKMIIFbzCCBFegAwIBAgIKFjewygABAAAZNTANBgkqhkiG9w0BAQsFADBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTIwHhcNMTUwMTI2MTQyNDUwWhcNMTgwMTI1MTQyNDUwWjBOMQswCQYD VQQGEwJVUzEOMAwGA1UEChMFTUlUUkUxDzANBgNVBAsTBlBlb3BsZTEeMBwGA1UEAxMVU2NobWlk dC5DaGFybGVzLjI1NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPFZQSeVxZu+ Gt4BfFomoILNlkXW2oAGBuhcEI5+Gfu33x7Or9K2NR3etzu9EqGPafLrJ1dyDWFIM9ktke0LqNKL 73WkWyCcpN0Bb7yXNPQynHzOgQSIrQbi7yrhmEbmNQC7hU5+BxfikIu/O7eSjWRgm9coRkEg6zpO 4nrADfumKIw/yVJ0dwqRVh9cMB7S8QJIXteDPHeZPeMAt7fw5TXTgF+OAwIqyjhHN4SiPMTQoDyZ HydqDxpd42gMZjLILS7oZ7pIDCfSwuPnM9PNHUzz5w+0D2hAYjv2a8BBh2L1LTV3nZVREN9uugVf w5Bu9q3T1ddeLrWsU4QvE8c0LwIDAQABo4ICSzCCAkcwEwYDVR0lBAwwCgYIKwYBBQUHAwQwgZQG CSqGSIb3DQEJDwSBhjCBgzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsOAwIH MAoGCCqGSIb3DQMHMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAS0wCwYJYIZIAWUDBAEWMAsGCWCG SAFlAwQBGTALBglghkgBZQMEAQIwCwYJYIZIAWUDBAEFMB0GA1UdDgQWBBTembLBQG/LThypM1w0 LH0xnzFqWzAOBgNVHQ8BAf8EBAMCBSAwHgYDVR0RBBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAf BgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2lJzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8v cGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/Bggr BgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29y cG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRy ZS5vcmcvb2NzcDA9BgkrBgEEAYI3FQcEMDAuBiYrBgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6u AYE20YFnhpiTPgIBZAIBEzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMEMA0GCSqGSIb3DQEB CwUAA4IBAQAKdBfLmGhQyfhBlJUrWwu5iuDwZTsOuddl9d4mw3Ml8yQjc21cCPDGJ3Tc3cwIJyj7 6rSK4mV6xsyUKDxZBZcNSM/7iLtFS9N8noe0Mo0TcPZuJzxzD8xtd/qlIvOLZR0rrS9v816ajAly u2OHTPi4lVtk/rI7ccO5C8uEMfrmXXTN6IJNyhqlprfCLDrICsGM3rXafADIkxBFGr0bXq6orGrM hJRMVQcdKdB5d/VqflqePmynjoorrIMnIfIEsfplYSsF3Uv8hAHxrHSldqOrl8aXvvyIh8d/UBx/ pQcw+0JQn9ebPCcMilCvNH2sKq+8SjJrmHNI1mjSxD5QLH3MMYIDXDCCA1gCAQEwXjBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTICChY3sr0AAQAAGTYwCQYFKw4DAhoFAKCCAdMwGAYJKoZIhvcNAQkD MQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTYwNjA2MTkzNDMzWjAjBgkqhkiG9w0BCQQx FgQUFqX3nLISYGSLjF9KcTVuO0RTlZswbQYJKwYBBAGCNxAEMWAwXjBQMRMwEQYKCZImiZPyLGQB GRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENvcnBvcmF0aW9u IFBFIENBLTICChY3sMoAAQAAGTUwbwYLKoZIhvcNAQkQAgsxYKBeMFAxEzARBgoJkiaJk/IsZAEZ FgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUgQ29ycG9yYXRpb24g UEUgQ0EtMgIKFjewygABAAAZNTCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglg hkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG 9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATAN BgkqhkiG9w0BAQEFAASCAQCBi4MpcI3JqhlG/ZZoxmWPy8uV+GHQFhHYqRWD0pWJwLW3EIAMFciM HLJjX0+ec8GYS5u7XbnLsGXYG9m4A7lhKRVri8r1DNa1JxJYZhl2HJILJDOptQg0aJxV2xilZXls so9HrTc5gsdEL3UGNTH9ERXbcEXkEMscBCVwmd/VS2ufIPo4+nPve57rOXiImMSee7xAgZ43c2GW BNruBKzdBkRpTgAJCAMu/hhEFigBIlH3tkQwCia3921qPfxolnZPB5Y32XPxgADgmkm4AjSOEPmD hqs30TSH3fOlFhZTwAAfC0T3rTffTOnNIfwC2UJfRy9YyBoSmTZuBs+l/sefAAAAAAAA ------=_NextPart_000_007E_01D1C000.8AC64E40-- From nobody Mon Jun 6 18:59:33 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CFAB112D7D3 for ; Mon, 6 Jun 2016 18:59:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S4z7sXa6j6Ga for ; Mon, 6 Jun 2016 18:59:29 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id D70C112D745 for ; Mon, 6 Jun 2016 18:59:28 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 101A86CC00C; Mon, 6 Jun 2016 21:59:28 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id F281D6CC009; Mon, 6 Jun 2016 21:59:27 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Mon, 6 Jun 2016 21:59:27 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Mon, 6 Jun 2016 21:59:27 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=owd5oxKmN4dP5ovNzJBEV+zF7b+h4fh26Ra0fgjEtNg=; b=HO+XWj09NIo4B2BieeJLlhXohKMnnJkT5c1WbaYMAthsLaGA7v0iHQ4JjAF3uHZ79ypKckH2Fg04v8hVIQNGcCbEToBPlGJqhBXxCiD0CryJ7Yj+TugIXj3VDj2/LN18PnA6WI0GpFCqF8kIx6xjlJN+Nv/p/t8iQLd45lM8OX8= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1080.namprd09.prod.outlook.com (10.166.116.12) with Microsoft SMTP Server (TLS) id 15.1.511.8; Tue, 7 Jun 2016 01:59:24 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0511.010; Tue, 7 Jun 2016 01:59:24 +0000 From: "Haynes, Dan" To: Henk Birkholz , "sacm@ietf.org" Thread-Topic: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #1 - Managing Terminology Thread-Index: AdGwZ0CBNxGcgzSeTTCG3Pz7mH3peQBw8vKAAOGJYjABcVqTUACVaOWAAKQu1aA= Date: Tue, 7 Jun 2016 01:59:24 +0000 Message-ID: References: <5751D73F.3060000@sit.fraunhofer.de> In-Reply-To: <5751D73F.3060000@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.88] x-ms-office365-filtering-correlation-id: 70dbeddd-c8fa-44df-4893-08d38e7759cb x-microsoft-exchange-diagnostics: 1; BY2PR09MB1080; 5:rcGP6DNVXmsT4dLAdvUTymWINCmLytVxKjAKbvDNU66Jk40QvlXOZGoVqY+GeL/nd8RqW5xb/j+svRMlPFEhgREBVZXSDSUlJuTk/oMKe6bmq8Bu1nJG3D1waA6lS4NJBs31152fm0GxoGVYXggN5Q==; 24:ZxwshtXrYu4GEFeKCks6MkFMPPnEmJcbC3Z9GMZrGC4f7bxMMLCUiwSphXB3ZSNTHujcGfuXwIiF6OJV92JNLUiNGtPTWe4ICzjg4KudX3o=; 7:CPdj/a9zKnfmdAB4p11HpYBeNgh5FM3AgcFNB7UZklku0133r8b7km7oR7mDHCLy/2KiAhlbdNwOgKZoOqjGum3y0vdYUPhFOFliepTomjVif/EIDg4+lCXoe0JtznvMr2XTArmwPWQylSmgD0hI+nRrvJLHLjfcr3sHu08KkdAecctw0zNYDIPCmDzCpf3FeqJMDhnP/Xi/Lw4ABhYY+KZ2rLhTI0gIRr3G+8uYu9o= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1080; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(72170088055959)(120809045254105)(166708455590820)(271806183753584)(131327999870524)(788757137089)(100405760836317); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1080; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1080; x-forefront-prvs: 09669DB681 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(189002)(478694002)(199003)(31014005)(5383002)(377454003)(76104003)(24454002)(87936001)(189998001)(99286002)(66066001)(93886004)(5001770100001)(97736004)(107886002)(2501003)(81156014)(33656002)(5008740100001)(81166006)(5002640100001)(92566002)(10400500002)(5003600100002)(8676002)(15975445007)(86362001)(76576001)(74316001)(19580405001)(19580395003)(77096005)(3846002)(586003)(3660700001)(3280700002)(6116002)(102836003)(101416001)(5004730100002)(11100500001)(122556002)(50986999)(54356999)(105586002)(9686002)(76176999)(2900100001)(2950100001)(106356001)(2906002)(68736007)(8936002)(17413003); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1080; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jun 2016 01:59:24.3431 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1080 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #1 - Managing Terminology X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jun 2016 01:59:32 -0000 > 1) Supplemental Collection task: looks like a good way to move forward >=20 > Does this propose to define a separate collection task that focuses on on= the > acquisition of previously obtained endpoint attributes from a repository = in > the SACM domain? The endpoint attributes could be identical to the ones > that can be acquired via the already defined collection task, but most > certainly do not have to be! I would propose to "handle" the endpoint > attributes in an identical way and to annotate where they come from, when > they were acquired and similar metadata. >=20 > As a result, this could enable a single method to conduct both tasks and > simply things, I think. [danny]: No, I don't think this proposes a separate collection task. It wo= uld just be the standard collection task already defined. That is, once th= e vulnerability management capability realizes that it does not have certai= n information that it needs for an assessment (as specified in the vulnerab= ility detection data), it would call out to a collector, via a collection t= ask, with guidance on what information to collect. Once the task completes = and the collector provides that information, the vulnerability management c= apability can continue with the assessment.=20 =20 > 2) Vulnerability assessment: the proposed definition sounds fine >=20 > The current definition of Endpoint Assessment is: "Evaluate the actual va= lues > of the endpoint attributes against those expressed in the policy. > (An evaluation result may become additional endpoint data)." >=20 > Implied - but yet not explicitly defined - in the definition of Endpoint > Assessment is that it is a concatenated sequence of tasks defined by SACM= . > (Software) vulnerability assessment would be a specialization of that > composition of tasks. >=20 > Background: i.e., the vulnerability assessment would process a sub-set of > endpoint attributes that can be acquired by the: >=20 > - collection task (which is directly targeted at specific target > endpoints) and the > - target endpoint discovery task (which is supposed to be acquiring any k= ind > indicator information (i.e. also endpoint attributes) that can be used to > detect and re-detect target endpoints in a SACM domain) as a basis for th= e > collection task. [danny]: I agree with this. > 3) Endpoint management capability: seems to be a little bit vague, still. > Especially the term "management". >=20 > This description seems to be more about a repository of expected > (should) or possible (could) states that are based on configuration? Is a= n > endpoint management capability (and its corresponding functions) also > providing guidance(instructions)? [danny]: I was under the impression that it would just provide endpoint inf= ormation and not guidance. With that said, I think an endpoint management c= apability could be controlled by guidance. > 4) Vulnerability management capability: Here too, the term management > seems to imply guidance (or management decision) of some sort. >=20 > The definition itself seems to describe a repository or a meta directory = that > provides information acquired, for example, by ROLIE? [danny]: Yes, the vulnerability detection data is the guidance that drives = how it carries out an assessment. > 5) Management Capability: >=20 > It should be made very clear what this capability actually provides; > i.e., which category of endpoint attributes and/or guidance. This would > resolve most of the ambiguity in a simple way, I think. Essential > information elements of the content should also be included in the SACM > IM, I think. [danny]: I left it particularly vague (i.e. information) because we have ye= t to define all the management capabilities we want :). Based on the discu= ssion during the last virtual interim meeting, I was under the impression t= hat we would define new ones as we focus on additional areas (configuration= , hardware, maybe something for guidance?, etc.).=20 > 6) Endpoint Management Capability and Vulnerability Management > Capability: >=20 > It seems - taking into account 2-4 - that Vulnerability Management > Capability is a part of Endpoint Management Capability? [danny]: I am not sure. I suspect it is up to the implementer whether or n= ot they want standalone capabilities or a monolithic one. > 7) process & workflow: >=20 > A workflow might involve multiple processes with various dependences and > interconnections, I think. But I am not sure if that distinction is > really relevant to SACM. Workflow seems to be the more general term and > is less overloaded. [danny]: So, is that a +1 for workflow :)? Thanks, Danny > Viele Gr=FC=DFe, >=20 > Henk >=20 >=20 >=20 >=20 >=20 > On 05/31/2016 10:41 PM, Haynes, Dan wrote: > > Did anyone else have any thoughts on this particular issue? > > > > If we want to take the approach of promoting a few terms as Adam has > > suggested, we might want do it as follows. > > > > Supplemental (previously targeted) collection: The task of collecting > > specific endpoint information from the target endpoint, that is not > > available from the endpoint management capability, in order to make a > > determination about that endpoint (vulnerability status, identification= , > > etc.). > > > > This seems general enough to be promoted as-is. > > > > Vulnerability assessment: The process of determining whether a set of > > endpoints is vulnerable according to the information contained in the > > vulnerability description information. > > > > We would need to generalize it more to remove the reference to > > "vulnerability description information". One approach might be to > > replace "vulnerability description information" with "information > > pertaining to the existence of a flaw or flaws in software, hardware, > > and/or firmware on an endpoint." It might also make sense to highlight > > this as a specialization of "assessment". As a side note, does anyone > > see a distinction between process and workflow (as described here > > http://blog.goodelearning.com/bpmn/business-process-vs-workflow/) > and > > that assessment might be better described as a workflow? With that said= , > > our definition comes from RFC5209 and we may not want to make any > > changes which is perfectly fine - just something to think about :). > > > > Endpoint management capability: An enterprise IT capability managing > > endpoint identity, endpoint information, and associated metadata on an > > ongoing basis. > > > > Vulnerability management capability: An enterprise IT capability > > managing endpoint vulnerabilities and associated metadata on an ongoing > > basis by ingesting vulnerability description information and > > vulnerability detection data, and performing a vulnerability assessment= . > > > > Right now, we have definitions for "endpoint management capability" and > > "vulnerability management capability". To support promoting these, we > > may want to create a more general "management capability" term and > then > > include "endpoint management capability" and "vulnerability management > > capability" as specializations of that term. A definition of > > "management capability" might read something like "An enterprise IT > > capability responsible for managing specific information about an > > endpoint in support of continuous monitoring processes which may or may > > not be driven by guidance". > > > > Anyways, this is just a little bit more to think about :). Let me know > > what you think. > > > > Thanks, > > > > Danny > > > > *From:*sacm [mailto:sacm-bounces@ietf.org] *On Behalf Of *Haynes, > Dan > > *Sent:* Tuesday, May 24, 2016 7:43 AM > > *To:* Adam Montville > > *Cc:* sacm@ietf.org > > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario > > Issue #1 - Managing Terminology > > > > Do others have thoughts regarding whether or not terminology from the > > vulnerability assessment scenario draft should be promoted ot the > > Terminology I-D? If so, which terms make sense to promote? > > > > Thanks, > > > > Danny > > > > *From:*Adam Montville [mailto:adam.w.montville@gmail.com] > > *Sent:* Thursday, May 19, 2016 8:04 PM > > *To:* Haynes, Dan > > > *Cc:* sacm@ietf.org > > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario > > Issue #1 - Managing Terminology > > > > I'll echo my statements from the virtual interim by pointing out that > > the vulnerability scenario, while narrowing our focus, does not change > > the scope of our charter. From that perspective, I would like to see > > terms "promoted" into the terminology draft sooner rather than later. > > Of the set of terms Danny described, I think endpoint management > > capability and targeted collection are prime candidates for such > > promotion. I also believe that vulnerability management capability and > > vulnerability assessment are suitable for promotion. Vulnerability > > description information and vulnerability detection data could stay > > within the vulnerability draft. > > > > Adam > > > > On May 17, 2016, at 1:15 PM, Haynes, Dan > > wrote: > > > > During today's virtual interim meeting, we discussed various open > > issues with respect to the Vulnerability Assessment Scenario [1] as > > a result of feedback that we received on the draft which you can se= e > > here [2][3]. The slide's from today's meeting can be found here [4= ]. > > > > The first issue was whether or not the following terms from Section > > 2 of the Vulnerability Assessment Scenario should be pulled into th= e > > Terminology I-D [5] with the expectation that any terms pulled in > > will be used outside of the Vulnerability Assessment Scenario. > > > > .Vulnerability description information > > > > .Vulnerability detection data > > > > .Endpoint management capability > > > > .Vulnerability management capability > > > > .Vulnerability assessment > > > > .Targeted collection > > > > During the meeting, there were concerns that while some of these > > terms leverage general terms already in the Terminology I-D, they > > use them in specific ways with respect to the Vulnerability > > Assessment Scenario. It was also noted that some terms like > > "endpoint management capability" and "vulnerability management > > capability", while specific, have the potential to become broader a= s > > SACM eventually expands into other areas (e.g. configuration, > > etc.). As a result, the consensus on the call was to leave the > > terms in Section 2 of the Vulnerability Assessment Scenario, for > > now, with the expectation that we may reassess this decision in the > > future. > > > > If you have any thoughts on this issue, please provide feedback by > > May 31^st . We are planning to have an updated version of the > > scenario for June 8^th . > > > > Thanks, > > > > Danny > > > > [1]https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario= / > > > > [2]https://github.com/sacmwg/vulnerability-scenario/pull/3 > > > > [3]https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html > > > > [4]https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/(l= ooks > > like the slides are not available just yet, but, I suspect they > > should be soon) > > > > [5]https://datatracker.ietf.org/doc/draft-ietf-sacm-terminology/ > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > > > > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm From nobody Mon Jun 6 19:08:33 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0F1E412D97E for ; Mon, 6 Jun 2016 19:08:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XAjriP-26fhl for ; Mon, 6 Jun 2016 19:08:29 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id B460412D97C for ; Mon, 6 Jun 2016 19:08:28 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 3C8687BC02C; Mon, 6 Jun 2016 22:08:28 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 2B31A7BC02B; Mon, 6 Jun 2016 22:08:28 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Mon, 6 Jun 2016 22:08:27 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Mon, 6 Jun 2016 22:08:27 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=ke2AUZ5H8HANvVynwatE55zdu34xFsUGqAckeUCkTAA=; b=urJx/r7T4kbhJenbxFl7CpZnd4NmfuG3rPg5m0D4bpWzhkAcnFZyXvRt0kJbkfCkYiVY9JMWc2poECh5SiZBekIdaAe/HSQvtUUynhJz0F78HH0fK03Lz3P1lSXbxmWldi9FY33cG39LLVOkb0rKRog3CKQsr88zbECDd90DqtM= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1079.namprd09.prod.outlook.com (10.166.116.11) with Microsoft SMTP Server (TLS) id 15.1.511.8; Tue, 7 Jun 2016 02:08:26 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0511.010; Tue, 7 Jun 2016 02:08:26 +0000 From: "Haynes, Dan" To: Jerome Athias Thread-Topic: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability Thread-Index: AdGwcFvLuy7EoIEtTYaAcqw7unANPgNvMHSAAHxc8hA= Date: Tue, 7 Jun 2016 02:08:25 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.88] x-ms-office365-filtering-correlation-id: 822dd120-6b40-4ab7-d5f0-08d38e789c7c x-microsoft-exchange-diagnostics: 1; BY2PR09MB1079; 5:cObkotjgUNZRl2Y18H2rJvTFnwKYfYFf4owbQnLzhg7yAFaTkUmHP/t8Sx89YuNgcI2GPpzkJxhMv998E97Wn5/4dD3+ld2+Pt406+9NTBLfSXV5forQ2Kz5+YCAtNFMNjyo3bXr/5VhLEP2B5nDjg==; 24:c7nVc+2b9m7Yx1cqIC1QiCc9Lc5POXcZvII1NLwkG/UKzZrYTfJNC6jpdrHVMoKaANPEcanImRXKDMhUdBFPZPocs7WfNvtf2vakunOlUOg=; 7:z3NrLbZnuHcptqdaNgcLVWWE5X7Dn36uYaV+naTEcKP/SEjibN9WYQgg2C5F9qF8FtU3aEwg0JRJGHDgN239czfkK/pxxYkdyjVF/674eGE3u3iXKjHUAe+704klaOxdG6MjomYs8FBXEdJJIYeeTvqh3uO4X8HzeYUGjii63fncwZfHgysnt2aBz/KJU8qXpBx/RmmtEdbAL39n7cJunP5eALkhUC2BEqchnJ5Bxps= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1079; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(120809045254105)(166708455590820)(100405760836317); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1079; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1079; x-forefront-prvs: 09669DB681 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(5383002)(199003)(377454003)(189002)(478694002)(377424004)(13464003)(3660700001)(110136002)(76576001)(9686002)(68736007)(8936002)(3280700002)(122556002)(2906002)(33656002)(5008740100001)(8676002)(189998001)(105586002)(74316001)(4326007)(106356001)(50986999)(77096005)(54356999)(76176999)(15975445007)(1411001)(2950100001)(2900100001)(6116002)(102836003)(11100500001)(3846002)(66066001)(86362001)(19580395003)(19580405001)(81166006)(81156014)(101416001)(586003)(5002640100001)(5003600100002)(87936001)(99286002)(97736004)(92566002)(5004730100002)(10400500002); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1079; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jun 2016 02:08:25.8268 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1079 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jun 2016 02:08:31 -0000 QmFzZWQgb24gdGhlIGZlZWRiYWNrLCB3b3VsZCB0aGUgZm9sbG93aW5nIHJld3JpdGUgb2YgdGhl IHBhcmFncmFwaCBoZWxwIGNsYXJpZnkgdGhpbmdzPw0KDQoiSW4gbWFueSBjYXNlcywgdGhlIGVu ZHBvaW50IGluZm9ybWF0aW9uLi4uVW5kZXIgY2VydGFpbiBkZXBsb3ltZW50IHNjZW5hcmlvcywg YXMNCnRoZSB2dWxuZXJhYmlsaXR5IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSBwcm9jZXNzZXMgdnVs bmVyYWJpbGl0eSBkZXRlY3Rpb24gZGF0YSBvdmVyDQp0aW1lLCB0aGUgZW5kcG9pbnQgbWFuYWdl bWVudCBjYXBhYmlsaXR5IG1heSBsZWFybiBhYm91dCBhZGRpdGlvbmFsIGRldGVjdGlvbiANCmlu Zm9ybWF0aW9uIHRoYXQgaXQgd2FzIHByZXZpb3VzbHkgbm90IGNvbGxlY3RpbmcgYW5kIHB1c2gg dGhhdCBpbmZvcm1hdGlvbiB0byB0aGUgDQp2dWxuZXJhYmlsaXR5IG1hbmFnZW1lbnQgY2FwYWJp bGl0eSB3aGVyZSBpdCBjYW4gc3VwcG9ydCBmdXR1cmUgYXNzZXNzbWVudHMuIFRoZSANCnB1c2hp bmcgb2YgdGhpcyBkYXRhIG1heSBwb3RlbnRpYWxseSBiZSBkcml2ZW4gYnkgc29tZSB0cmlnZ2Vy IChlLmcuLCBjaGFuZ2UgDQppbiBzb2Z0d2FyZSBpbnZlbnRvcnksIHBvbGljeSwgbmV0d29yayBj b25uZWN0aXZpdHkgc3RhdHVzLCBldGMuKS4iDQoNCldoaWxlIHRoaXMgcG90ZW50aWFsbHkgY3Jl YXRlcyBhIGNvdXBsaW5nIGJldHdlZW4gdGhlIHZ1bG5lcmFiaWxpdHkgbWFuYWdlbWVudCBjYXBh YmlsaXR5IGFuZCB0aGUgZW5kcG9pbnQgbWFuYWdlbWVudCBjYXBhYmlsaXR5LCBhcyB3cml0dGVu LCBJIHRoaW5rIGl0IHdpbGwgYmUgbGVmdCB0byB0aGUgaW1wbGVtZW50ZXIgb2YgdGhvc2UgY2Fw YWJpbGl0aWVzIHRvIGRlY2lkZS4gIEkgdGhpbmsgdGhlIHBvaW50IGlzIGp1c3QgdGhhdCB5b3Ug Y291bGQgZG8gc29tZXRoaW5nIGxpa2UgdGhpcyB0byBpbXByb3ZlIHRoZSB2dWxuZXJhYmlsaXR5 IGFzc2Vzc21lbnQuICANCg0KSWYgd2Ugc3RpbGwgZG9uJ3QgaGF2ZSBjb25zZW5zdXMgb24gdGhp cywgYW5vdGhlciBhcHByb2FjaCBtaWdodCBiZSB0byBqdXN0IHJlbW92ZSB0aGlzIHRleHQgYWxs IHRvZ2V0aGVyIGFzIEkgZG9uJ3QgdGhpbmsgZG9pbmcgc28gd291bGQgcHJlY2x1ZGUgYW4gaW1w bGVtZW50ZXIgZnJvbSBzdXBwb3J0aW5nIGZ1bmN0aW9uYWxpdHkgbGlrZSB0aGlzIGluIHRoZWly IHByb2R1Y3QuDQoNClRob3VnaHRzPw0KDQpUaGFua3MsDQoNCkRhbm55DQoNCj4gLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCj4gRnJvbTogSmVyb21lIEF0aGlhcyBbbWFpbHRvOmF0aGlhc2pl cm9tZUBnbWFpbC5jb21dDQo+IFNlbnQ6IFNhdHVyZGF5LCBKdW5lIDA0LCAyMDE2IDI6NDkgQU0N Cj4gVG86IEhheW5lcywgRGFuIDxkaGF5bmVzQG1pdHJlLm9yZz4NCj4gQ2M6IHNhY21AaWV0Zi5v cmcNCj4gU3ViamVjdDogUmU6IFtzYWNtXSBGT1IgUkVWSUVXOiBWdWxuZXJhYmlsaXR5IEFzc2Vz c21lbnQgU2NlbmFyaW8gSXNzdWUgIzUNCj4gLSBDaGFuZ2UgRGV0ZWN0aW9uIHdpdGggYW4gRW5k cG9pbnQgTWFuYWdlbWVudCBDYXBhYmlsaXR5DQo+IA0KPiBXaGlsZSB0aGUgc2NlbmFyaW8gcHJv dmlkZWQgYnkgQWRhbSBpcyB2YWxpZCwgaWYgeW91ciBjb25jZXJuIGlzIHRoYXQgInRoZQ0KPiBp bmZvcm1hdGlvbiBiZXlvbmQgdGhhdCIgd291bGQgYmUgInN1cHBsZW1lbnRhbCBlbmRwb2ludA0K PiBpbmZvcm1hdGlvbiI6DQo+IEkgZG9uJ3Qgc2VlIGEgc2NlbmFyaW8gd2hlcmUgYW4gZW5kcG9p bnQgbWFuYWdlbWVudCBjYXBhYmlsaXR5IHdvdWxkIGhhdmUNCj4gdG8gcHVzaCAtc3VwcGxlbWVu dGFsLSBpbmZvcm1hdGlvbiB0byB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nlc3NtZW50DQo+IGNhcGFi aWxpdHkgKHdoYXQgd291bGQgdGhlIHZ1bG5lcmFiaWxpdHkgYXNzZXNzbWVudCBjYXBhYmlsaXR5 IGRvIHdpdGgNCj4gJ3Vua25vd24nIGFkZGl0aW9uYWwgaW5mb3JtYXRpb24pDQo+IA0KPiBTbyBJ IHRoaW5rIHRoZSBpc3N1ZSBpcyB0byBjaGFuZ2UgInRoZSBpbmZvcm1hdGlvbiBiZXlvbmQgdGhh dCIgdG8gc29tZXRoaW5nDQo+IGxpa2UgInRoZSB1cGRhdGVkIGluZm9ybWF0aW9uIg0KPiANCj4g DQo+IA0KPiAyMDE2LTA1LTE4IDE2OjE1IEdNVCswMzowMCBIYXluZXMsIERhbiA8ZGhheW5lc0Bt aXRyZS5vcmc+Og0KPiA+IER1cmluZyB5ZXN0ZXJkYXnigJlzIHZpcnR1YWwgaW50ZXJpbSBtZWV0 aW5nLCB3ZSBkaXNjdXNzZWQgdmFyaW91cyBvcGVuDQo+ID4gaXNzdWVzIHdpdGggcmVzcGVjdCB0 byB0aGUgVnVsbmVyYWJpbGl0eSBBc3Nlc3NtZW50IFNjZW5hcmlvIFsxXSBhcyBhDQo+ID4gcmVz dWx0IG9mIGZlZWRiYWNrIHRoYXQgd2UgcmVjZWl2ZWQgb24gdGhlIGRyYWZ0IHdoaWNoIHlvdSBj YW4gc2VlDQo+ID4gaGVyZSBbMl1bM10uICBUaGUgc2xpZGXigJlzIGZyb20gdGhlIG1lZXRpbmcg Y2FuIGJlIGZvdW5kIGhlcmUgWzRdLg0KPiA+DQo+ID4NCj4gPg0KPiA+IE9uZSBpc3N1ZSB0aGF0 IHdlIGRpZG7igJl0IGhhdmUgYSBjaGFuY2UgdG8gZGlzY3VzcyBiZWNhdXNlIHdlIHJhbiBvdXQN Cj4gPiBvZiB0aW1lIHdhcyB3aGV0aGVyIG9yIG5vdCBhbiBlbmRwb2ludCBtYW5hZ2VtZW50IGNh cGFiaWxpdHkgaGFzIHRoZQ0KPiA+IGFiaWxpdHkgdG8gcHVzaCBzdXBwbGVtZW50YWwgZW5kcG9p bnQgaW5mb3JtYXRpb24gdG8gdGhlIHZ1bG5lcmFiaWxpdHkNCj4gPiBhc3Nlc3NtZW50IGNhcGFi aWxpdHkuICBUaGlzIHF1ZXN0aW9uIGNhbWUgb3V0IG9mIGEgcmV2aWV3IG9mIHRoZQ0KPiA+IGZv bGxvd2luZyB0ZXh0IGZyb20gdGhlIFZ1bG5lcmFiaWxpdHkgQXNzZXNzbWVudCBTY2VuYXJpbyAo c3BlY2lmaWNhbGx5IHRoZQ0KPiBsYXN0IHNlbnRlbmNlKS4NCj4gPg0KPiA+DQo+ID4NCj4gPiDi gJxJbiBtYW55IGNhc2VzLCB0aGUgZW5kcG9pbnQgaW5mb3JtYXRpb24gbmVlZGVkIHRvIGRldGVy bWluZSBhbg0KPiA+IGVuZHBvaW504oCZcyB2dWxuZXJhYmlsaXR5IHN0YXR1cyB3aWxsIGhhdmUg YmVlbiBwcmV2aW91c2x5DQo+ID4NCj4gPiBjb2xsZWN0ZWQgYnkgdGhlIEVuZHBvaW50IE1hbmFn ZW1lbnQgQ2FwYWJpbGl0eSBhbmQgYXZhaWxhYmxlIGluIGENCj4gPiBSZXBvc2l0b3J5LiBIb3dl dmVyLCBpbiBvdGhlciBjYXNlcywgdGhlIG5lY2Vzc2FyeQ0KPiA+DQo+ID4gZW5kcG9pbnQgaW5m b3JtYXRpb24gd2lsbCBub3QgYmUgcmVhZGlseSBhdmFpbGFibGUgaW4gYSBSZXBvc2l0b3J5IGFu ZA0KPiA+IGEgdGFyZ2V0ZWQgY29sbGVjdGlvbiB3aWxsIGJlIG5lY2Vzc2FyeS4gIE9mIGNvdXJz ZSwNCj4gPg0KPiA+IGFuIGltcGxlbWVudGF0aW9uIG9mIGFuIGVuZHBvaW50IG1hbmFnZW1lbnQg Y2FwYWJpbGl0eSBtYXkgcHJlZmVyIHRvDQo+ID4gZW5hYmxlIG9wZXJhdG9ycyB0byBwZXJmb3Jt IHRhcmdldGVkIGNvbGxlY3Rpb24gdW5kZXINCj4gPg0KPiA+IGNlcnRhaW4gY2lyY3Vtc3RhbmNl cywgZXZlbiB3aGVuIHN1ZmZpY2llbnQgaW5mb3JtYXRpb24gY2FuIGJlDQo+ID4gcHJvdmlkZWQg YnkgdGhlIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSAoZS5nLiB0aGVyZQ0KPiA+DQo+ ID4gbWF5IGJlIGZyZXNobmVzcyByZXF1aXJlbWVudHMgZm9yIGluZm9ybWF0aW9uKS4gVGFyZ2V0 ZWQgY29sbGVjdGlvbiBvZg0KPiA+IGVuZHBvaW50IGluZm9ybWF0aW9uIGZvciB0aGUgcHVycG9z ZSBvZiB2dWxuZXJhYmlsaXR5DQo+ID4NCj4gPiBhc3Nlc3NtZW50IGRvZXMgbm90IG5lY2Vzc2Fy aWx5IG5lZWQgdG8gYmUgYSBwdWxsIGJ5IHRoZSB2dWxuZXJhYmlsaXR5DQo+ID4gYXNzZXNzbWVu dCBjYXBhYmlsaXR5LiAgVW5kZXIgY2VydGFpbiBkZXBsb3ltZW50DQo+ID4NCj4gPiBzY2VuYXJp b3MsIG9uY2UgdGhlIG5lY2Vzc2FyeSBkZXRlY3Rpb24gaW5mb3JtYXRpb24gaXMga25vd24sIHRo ZQ0KPiA+IGluZm9ybWF0aW9uIGJleW9uZCB0aGF0IHdoaWNoIGlzIGF2YWlsYWJsZSBpbiB0aGUg ZW5kcG9pbnQNCj4gPg0KPiA+IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSBjYW4gYmUgcHVzaGVkIHRv IHRoZSB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQNCj4gPiBjYXBhYmlsaXR5IGJ5IHRoZSBlbmRw b2ludCB3aGVuZXZlciB0aGF0IGluZm9ybWF0aW9uDQo+ID4NCj4gPiBjaGFuZ2VzLuKAnQ0KPiA+ DQo+ID4NCj4gPg0KPiA+IE91ciBtYWluIHF1ZXN0aW9uIGlzIHdoZXRoZXIgb3Igbm90IHB1c2hp bmcgaW5mb3JtYXRpb24gZnJvbSB0aGUNCj4gPiBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxp dHkgdG8gdGhlIHZ1bG5lcmFiaWxpdHkgYXNzZXNzbWVudA0KPiA+IGNhcGFiaWxpdHkgaXMgYWN0 dWFsbHkgcG9zc2libGUgYmVjYXVzZSBpdCB3b3VsZCBub3QgbmVjZXNzYXJpbHkga25vdw0KPiA+ IHdoYXQgaW5mb3JtYXRpb24gaXQgbmVlZHMgdG8gcHVzaCBwcmlvciB0byB0aGUgc2VydmVyIHJl cXVlc3RpbmcgaXQNCj4gPiAoaW4gd2hpY2ggY2FzZSBpdCBpcyBwcm9iYWJseSBjb25zaWRlcmVk IGEgcHVsbCk/ICBJcyB0aGVyZSBhDQo+ID4gc2l0dWF0aW9uIHdoZXJlIHRoZSBlbmRwb2ludCB3 b3VsZCBrbm93LCBpbiBhZHZhbmNlLCB3aGF0IGFkZGl0aW9uYWwNCj4gPiBpbmZvcm1hdGlvbiBp cyBuZWVkZWQgZm9yIGFuIGFzc2Vzc21lbnQgd2l0aG91dCBhIHNlcnZlciByZXF1ZXN0aW5nIGl0 Pw0KPiA+DQo+ID4NCj4gPg0KPiA+IElmIHlvdSBoYXZlIGFueSB0aG91Z2h0cyBvbiB0aGlzIGlz c3VlLCBwbGVhc2UgcHJvdmlkZSBmZWVkYmFjayBieSBNYXkNCj4gMzFzdC4NCj4gPiBXZSBhcmUg cGxhbm5pbmcgdG8gaGF2ZSBhbiB1cGRhdGVkIHZlcnNpb24gb2YgdGhlIHNjZW5hcmlvIGZvciBK dW5lIDh0aC4NCj4gPg0KPiA+DQo+ID4NCj4gPiBUaGFua3MsDQo+ID4NCj4gPiBEYW5ueQ0KPiA+ DQo+ID4NCj4gPg0KPiA+IFsxXSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFm dC1jb2ZmaW4tc2FjbS12dWxuLXNjZW5hcmlvLw0KPiA+DQo+ID4gWzJdIGh0dHBzOi8vZ2l0aHVi LmNvbS9zYWNtd2cvdnVsbmVyYWJpbGl0eS1zY2VuYXJpby9wdWxsLzMNCj4gPg0KPiA+IFszXSBo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL3NhY20vY3VycmVudC9tc2cwMzk1 OC5odG1sDQo+ID4NCj4gPiBbNF0gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mvc2xp ZGVzLWludGVyaW0tMjAxNi1zYWNtLTMtMS8NCj4gPiAobG9va3MgbGlrZSB0aGUgc2xpZGVzIGFy ZSBub3QgYXZhaWxhYmxlIGp1c3QgeWV0LCBidXQsIEkgc3VzcGVjdCB0aGV5DQo+ID4gc2hvdWxk IGJlDQo+ID4gc29vbikNCj4gPg0KPiA+DQo+ID4NCj4gPg0KPiA+IF9fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQo+ID4gc2FjbSBtYWlsaW5nIGxpc3QNCj4g PiBzYWNtQGlldGYub3JnDQo+ID4gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9zYWNtDQo+ID4NCg== From nobody Mon Jun 6 22:07:08 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A655A12B01D for ; Mon, 6 Jun 2016 22:07:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YDiFqC0iiRIP for ; Mon, 6 Jun 2016 22:07:04 -0700 (PDT) Received: from mail-vk0-x22e.google.com (mail-vk0-x22e.google.com [IPv6:2607:f8b0:400c:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2E0F912D0BB for ; Mon, 6 Jun 2016 22:07:04 -0700 (PDT) Received: by mail-vk0-x22e.google.com with SMTP id d127so227930926vkh.2 for ; Mon, 06 Jun 2016 22:07:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=5tjgJ0Ux/WE+c4F53UyA2ZY41i97fK3AAwOGzVLcjsk=; b=kMIGfhPjciDcSUtW+nba59MhrxYuI1Yvr1ThVyKXaB5kgiyqAIuSuQL37mh4K4dP72 /JUzjBirwJoH4fwaJIx7v7xmKFdzP8iW9XSyCp1o7LG1K/8/htZi/yj+HJ+glNIwP+Ih V+FiWnKil/funTsJxWXU/RNqYsirQy9hVgPuupdRUWVljm2zhPma5j+6usvbP1iQNQ2a 4I8Y5QpmZ+5t6Qzeh6hJAEooEbnJ9fbWRavb3t3xx1qDgP+s13EOL/WO2nKb6bCuEyNF wLaVAXB77A1BPFw4dcz0wPgPEbU6cMmSTL9nBiTjYElQaBxfm5iuu4gp/23qczHvOVhk IrsQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=5tjgJ0Ux/WE+c4F53UyA2ZY41i97fK3AAwOGzVLcjsk=; b=RM/4UJcnvKInhvryXCXESoUP3UcvlgYDpxMSYHffOVyr3aqkTZhral1fAiq2g7UGXD 2D3IHfK7t+maakMLj8ULdJ2O8B94u2F0bYwSpUZd2X5KlHWCtxeKCRIAEsnhQeZ/BScJ 6cFAaO5Deq0iRDyD0rJz+xxluY3KemUrKBv2mbF0/7B9cWYmO9upYWzgKU8lYr4CXvOR rbldr67S2SPTNYsQraIczdWL+5t6JHwRdYTov5NyXeGhW6oPvl5VxilSJqWssUPYGDwk Q63WrQm/tyMSRC/5zOpFvTB7aOuICXG+D4/y9pEqrBxqTu1SO6pP21PNZwB2JaCQTYeX 6hqg== X-Gm-Message-State: ALyK8tK8JfGFFAfNnCFv4BXcM0VC3EFUT/ldaZguWmD7HWFQExbumsEWhmH7vAJXDfbJF2uKkCM4NZIle9buJw== MIME-Version: 1.0 X-Received: by 10.31.14.145 with SMTP id 139mr5549949vko.137.1465272478894; Mon, 06 Jun 2016 21:07:58 -0700 (PDT) Received: by 10.31.210.193 with HTTP; Mon, 6 Jun 2016 21:07:58 -0700 (PDT) In-Reply-To: References: Date: Tue, 7 Jun 2016 07:07:58 +0300 Message-ID: From: Jerome Athias To: "Haynes, Dan" Content-Type: multipart/alternative; boundary=001a114573129a91fe0534a85579 Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jun 2016 05:07:06 -0000 --001a114573129a91fe0534a85579 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable This rewrite is imho better Thanks On Tuesday, 7 June 2016, Haynes, Dan wrote: > Based on the feedback, would the following rewrite of the paragraph help > clarify things? > > "In many cases, the endpoint information...Under certain deployment > scenarios, as > the vulnerability management capability processes vulnerability detection > data over > time, the endpoint management capability may learn about additional > detection > information that it was previously not collecting and push that > information to the > vulnerability management capability where it can support future > assessments. The > pushing of this data may potentially be driven by some trigger (e.g., > change > in software inventory, policy, network connectivity status, etc.)." > > While this potentially creates a coupling between the vulnerability > management capability and the endpoint management capability, as written,= I > think it will be left to the implementer of those capabilities to decide. > I think the point is just that you could do something like this to improv= e > the vulnerability assessment. > > If we still don't have consensus on this, another approach might be to > just remove this text all together as I don't think doing so would preclu= de > an implementer from supporting functionality like this in their product. > > Thoughts? > > Thanks, > > Danny > > > -----Original Message----- > > From: Jerome Athias [mailto:athiasjerome@gmail.com ] > > Sent: Saturday, June 04, 2016 2:49 AM > > To: Haynes, Dan > > > Cc: sacm@ietf.org > > Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > #5 > > - Change Detection with an Endpoint Management Capability > > > > While the scenario provided by Adam is valid, if your concern is that > "the > > information beyond that" would be "supplemental endpoint > > information": > > I don't see a scenario where an endpoint management capability would ha= ve > > to push -supplemental- information to the vulnerability assessment > > capability (what would the vulnerability assessment capability do with > > 'unknown' additional information) > > > > So I think the issue is to change "the information beyond that" to > something > > like "the updated information" > > > > > > > > 2016-05-18 16:15 GMT+03:00 Haynes, Dan > >: > > > During yesterday=E2=80=99s virtual interim meeting, we discussed vari= ous open > > > issues with respect to the Vulnerability Assessment Scenario [1] as a > > > result of feedback that we received on the draft which you can see > > > here [2][3]. The slide=E2=80=99s from the meeting can be found here = [4]. > > > > > > > > > > > > One issue that we didn=E2=80=99t have a chance to discuss because we = ran out > > > of time was whether or not an endpoint management capability has the > > > ability to push supplemental endpoint information to the vulnerabilit= y > > > assessment capability. This question came out of a review of the > > > following text from the Vulnerability Assessment Scenario > (specifically the > > last sentence). > > > > > > > > > > > > =E2=80=9CIn many cases, the endpoint information needed to determine = an > > > endpoint=E2=80=99s vulnerability status will have been previously > > > > > > collected by the Endpoint Management Capability and available in a > > > Repository. However, in other cases, the necessary > > > > > > endpoint information will not be readily available in a Repository an= d > > > a targeted collection will be necessary. Of course, > > > > > > an implementation of an endpoint management capability may prefer to > > > enable operators to perform targeted collection under > > > > > > certain circumstances, even when sufficient information can be > > > provided by the endpoint management capability (e.g. there > > > > > > may be freshness requirements for information). Targeted collection o= f > > > endpoint information for the purpose of vulnerability > > > > > > assessment does not necessarily need to be a pull by the vulnerabilit= y > > > assessment capability. Under certain deployment > > > > > > scenarios, once the necessary detection information is known, the > > > information beyond that which is available in the endpoint > > > > > > management capability can be pushed to the vulnerability assessment > > > capability by the endpoint whenever that information > > > > > > changes.=E2=80=9D > > > > > > > > > > > > Our main question is whether or not pushing information from the > > > endpoint management capability to the vulnerability assessment > > > capability is actually possible because it would not necessarily know > > > what information it needs to push prior to the server requesting it > > > (in which case it is probably considered a pull)? Is there a > > > situation where the endpoint would know, in advance, what additional > > > information is needed for an assessment without a server requesting i= t? > > > > > > > > > > > > If you have any thoughts on this issue, please provide feedback by Ma= y > > 31st. > > > We are planning to have an updated version of the scenario for June > 8th. > > > > > > > > > > > > Thanks, > > > > > > Danny > > > > > > > > > > > > [1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ > > > > > > [2] https://github.com/sacmwg/vulnerability-scenario/pull/3 > > > > > > [3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html > > > > > > [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ > > > (looks like the slides are not available just yet, but, I suspect the= y > > > should be > > > soon) > > > > > > > > > > > > > > > _______________________________________________ > > > sacm mailing list > > > sacm@ietf.org > > > https://www.ietf.org/mailman/listinfo/sacm > > > > --001a114573129a91fe0534a85579 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable This rewrite is imho better
Thanks

On Tuesday, 7 Ju= ne 2016, Haynes, Dan <dhaynes@mitre= .org> wrote:
Based on the feedback= , would the following rewrite of the paragraph help clarify things?

"In many cases, the endpoint information...Under certain deployment sc= enarios, as
the vulnerability management capability processes vulnerability detection d= ata over
time, the endpoint management capability may learn about additional detecti= on
information that it was previously not collecting and push that information= to the
vulnerability management capability where it can support future assessments= . The
pushing of this data may potentially be driven by some trigger (e.g., chang= e
in software inventory, policy, network connectivity status, etc.)."
While this potentially creates a coupling between the vulnerability managem= ent capability and the endpoint management capability, as written, I think = it will be left to the implementer of those capabilities to decide.=C2=A0 I= think the point is just that you could do something like this to improve t= he vulnerability assessment.

If we still don't have consensus on this, another approach might be to = just remove this text all together as I don't think doing so would prec= lude an implementer from supporting functionality like this in their produc= t.

Thoughts?

Thanks,

Danny

> -----Original Message-----
> From: Jerome Athias [mailto:athiasjerome@gmail.c= om]
> Sent: Saturday, June 04, 2016 2:49 AM
> To: Haynes, Dan <dhaynes@mitre.org>
> Cc: sacm@ietf.org
> Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issu= e #5
> - Change Detection with an Endpoint Management Capability
>
> While the scenario provided by Adam is valid, if your concern is that = "the
> information beyond that" would be "supplemental endpoint
> information":
> I don't see a scenario where an endpoint management capability wou= ld have
> to push -supplemental- information to the vulnerability assessment
> capability (what would the vulnerability assessment capability do with=
> 'unknown' additional information)
>
> So I think the issue is to change "the information beyond that&qu= ot; to something
> like "the updated information"
>
>
>
> 2016-05-18 16:15 GMT+03:00 Haynes, Dan <dhaynes@mi= tre.org>:
> > During yesterday=E2=80=99s virtual interim meeting, we discussed = various open
> > issues with respect to the Vulnerability Assessment Scenario [1] = as a
> > result of feedback that we received on the draft which you can se= e
> > here [2][3].=C2=A0 The slide=E2=80=99s from the meeting can be fo= und here [4].
> >
> >
> >
> > One issue that we didn=E2=80=99t have a chance to discuss because= we ran out
> > of time was whether or not an endpoint management capability has = the
> > ability to push supplemental endpoint information to the vulnerab= ility
> > assessment capability.=C2=A0 This question came out of a review o= f the
> > following text from the Vulnerability Assessment Scenario (specif= ically the
> last sentence).
> >
> >
> >
> > =E2=80=9CIn many cases, the endpoint information needed to determ= ine an
> > endpoint=E2=80=99s vulnerability status will have been previously=
> >
> > collected by the Endpoint Management Capability and available in = a
> > Repository. However, in other cases, the necessary
> >
> > endpoint information will not be readily available in a Repositor= y and
> > a targeted collection will be necessary.=C2=A0 Of course,
> >
> > an implementation of an endpoint management capability may prefer= to
> > enable operators to perform targeted collection under
> >
> > certain circumstances, even when sufficient information can be > > provided by the endpoint management capability (e.g. there
> >
> > may be freshness requirements for information). Targeted collecti= on of
> > endpoint information for the purpose of vulnerability
> >
> > assessment does not necessarily need to be a pull by the vulnerab= ility
> > assessment capability.=C2=A0 Under certain deployment
> >
> > scenarios, once the necessary detection information is known, the=
> > information beyond that which is available in the endpoint
> >
> > management capability can be pushed to the vulnerability assessme= nt
> > capability by the endpoint whenever that information
> >
> > changes.=E2=80=9D
> >
> >
> >
> > Our main question is whether or not pushing information from the<= br> > > endpoint management capability to the vulnerability assessment > > capability is actually possible because it would not necessarily = know
> > what information it needs to push prior to the server requesting = it
> > (in which case it is probably considered a pull)?=C2=A0 Is there = a
> > situation where the endpoint would know, in advance, what additio= nal
> > information is needed for an assessment without a server requesti= ng it?
> >
> >
> >
> > If you have any thoughts on this issue, please provide feedback b= y May
> 31st.
> > We are planning to have an updated version of the scenario for Ju= ne 8th.
> >
> >
> >
> > Thanks,
> >
> > Danny
> >
> >
> >
> > [1] https://datatracker.ietf.org/doc/draft-c= offin-sacm-vuln-scenario/
> >
> > [2] https://github.com/sacmwg/vulnerability-scenario/p= ull/3
> >
> > [3] https://www.ietf.org/mail-archive/web/sac= m/current/msg03958.html
> >
> > [4] https://datatracker.ietf.org/doc/slides-int= erim-2016-sacm-3-1/
> > (looks like the slides are not available just yet, but, I suspect= they
> > should be
> > soon)
> >
> >
> >
> >
> > _______________________________________________
> > sacm mailing list
> > sacm@ietf.org
> > https://www.ietf.org/mailman/listinfo/sacm
> >
--001a114573129a91fe0534a85579-- From nobody Tue Jun 7 14:44:37 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B095612D0FF for ; Tue, 7 Jun 2016 14:44:35 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QiBit1PWqshX for ; Tue, 7 Jun 2016 14:44:32 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id EF4DC12B03F for ; Tue, 7 Jun 2016 14:44:31 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 59C4AABC064; Tue, 7 Jun 2016 17:44:31 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 420FCABC062; Tue, 7 Jun 2016 17:44:31 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Tue, 7 Jun 2016 17:44:30 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Tue, 7 Jun 2016 17:44:30 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=EY5qnXZMnBfYVZmR1sOdBzrTbTbqDyKy5xUQgD5RLdc=; b=TwBydEFvrpUrk8yoN1FXZHwW6JMIO5YEvp+gHB7R5xIUEZVeb2xhNYVBIT2uDgvzs0Irg0B3z9U4jVL1+xAuTzeu9paCjDlHTe6FNXQ5FK7HPRCcDSelaUSLJNrgUqQv5yhEcvMzJUxrZ7tmZ8F91FRGyl34fML8JJx6rqBNkbA= Received: from SN1PR09MB0990.namprd09.prod.outlook.com (10.166.69.8) by SN1PR09MB0991.namprd09.prod.outlook.com (10.166.69.9) with Microsoft SMTP Server (TLS) id 15.1.511.8; Tue, 7 Jun 2016 21:44:24 +0000 Received: from SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) by SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) with mapi id 15.01.0506.016; Tue, 7 Jun 2016 21:44:23 +0000 From: "Schmidt, Charles M." To: Gunnar Engelbach , "tony@yaanatech.com" , Michael Godsey , Jerome Athias Thread-Topic: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document Thread-Index: AQHRwCOchZw7lyao2UagUav4D+Ed8p/c0Y+AgAGvylA= Date: Tue, 7 Jun 2016 21:44:23 +0000 Message-ID: References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <0aa7684f-5a47-c00a-4b5b-e19484dd718a@yaanatech.com> <0418b8dc-9fd8-f8d2-3461-ce8e019fe22a@yaanatech.com> <8eb2719e-6baa-013a-daf5-5f2b269a75c1@ThreatGuard.com> <6217ee86-3479-9476-d76c-d8d74af9175b@ThreatGuard.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=cmschmidt@mitre.org; x-originating-ip: [192.160.51.86] x-ms-office365-filtering-correlation-id: f5444b02-b13f-431d-527d-08d38f1ce40a x-microsoft-exchange-diagnostics: 1; SN1PR09MB0991; 5:beH2cdYvmgf0EL2UxXORZdW1Bf/uO5oJcmn0HgUDFst11GnGxW60TkzQi4ak0Pi8dcMJr8tzoYmT0j1DpU72gToDKuCDT6HlFgdIbNSjfojNeyOnLcZPLfCIIB0fkZ4R3+rasQtQrPze/Iuf9ALfJA==; 24:nEYhnCFnSvPifLVhxPdq5lMJ+SoTESyOTpPUmZlb3QD1txLU7sNHj7AqAfbnRtD7Md+LB46VnJGS9cvzOY/LgwDRFQnCw0c9j+sYTsCbw9I=; 7:9db1Ez8/nILtt1uXZLbPvLul7619sxRlT3ruM+ZmkRZWdL1G6/SV352AsMUzm8hdSgwGS276uCLJqNcBCZAFJyU9KfXkufaStgxOXAT6HWPdaMk194wM+W8UpB8zv1gvL5yFoyQx5F/MbMmmHNWrd8lT/z5GGkYWjNRHgKEGL2CXvZV/SFbXb7SaKdLFptSrbnVA9R4LGxVdpkR8t1g4AKZY4p6ogHzvW9tynDXyd0Q= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR09MB0991; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(20558992708506)(120809045254105)(100405760836317)(211171220733660); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:SN1PR09MB0991; BCL:0; PCL:0; RULEID:; SRVR:SN1PR09MB0991; x-forefront-prvs: 09669DB681 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(189002)(53754006)(377454003)(51914003)(51444003)(199003)(24454002)(13464003)(561944003)(5890100001)(2501003)(81156014)(81166006)(77096005)(87936001)(2900100001)(2950100001)(5008740100001)(586003)(5003600100002)(66066001)(4326007)(86362001)(76576001)(68736007)(33656002)(8666004)(15975445007)(1511001)(74316001)(93886004)(5002640100001)(2906002)(8676002)(76176999)(3660700001)(106116001)(106356001)(122556002)(5004730100002)(230783001)(3280700002)(2561002)(92566002)(105586002)(99936001)(2421001)(9686002)(101416001)(19580405001)(19580395003)(102836003)(5001770100001)(8936002)(189998001)(50986999)(54356999)(10400500002)(6116002)(3846002)(99286002)(97736004)(7059030); DIR:OUT; SFP:1101; SCL:1; SRVR:SN1PR09MB0991; H:SN1PR09MB0990.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_01F6_01D1C0DB.D54A6B50" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jun 2016 21:44:23.4922 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR09MB0991 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" , Karen O'Donoghue Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jun 2016 21:44:36 -0000 ------=_NextPart_000_01F6_01D1C0DB.D54A6B50 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Ok - Gunnar has set me straight. Put in terms for the easily confused (such as myself): Gunnar was advocating that the network messages used to convey tag data via SWID M&A employ a standard data model so that recipients always see the same structure in the messages and can rely on being able to parse it. With that in mind, many tag types could be converted to this common data model used in the messages, thus many tag types should be collected by the Posture Collector as potential input. Gunnar - did I get it right? In fact, this is largely what the SWID M&A specification does now. The ISO SWID 2015 and ISO SWID 2009 specifications form a data model for SWID M&A messages conveying tag information. However, the specification notes that the SWID tag collection that is conveyed in these messages could come from many "sources", some of which might be translated from different record types. (E.g., potentially converted from package manager records or third party inventory tool results.) That said, based on some of the conversations that have occurred in meetings and on list, I think there are some open questions here: 1) Currently SWID M&A uses the ISO SWID specifications as a data model. Various parties have weighed in on the pros and cons of ISO SWID tags. Looking from a strictly data-model perspective, what structure makes sense for conveying tag/inventory data as the standard data model in these messages. Personally, I would argue that the core should probably be an existing structure - I don't see any call to invent yet another way to describe software. 2) As I wrote it, one of the change proposals presented to the group was effectively to allow SWID M&A to convey any type of tag natively and simply include a field to identify the type of tag contained in the message. This would allow SWID M&A to convey inventory information via an unlimited number of data models. What do people think about this given the recent discussions? Gunnar, I take it you would be against this change and would prefer a fixed tag format (a.k.a. data model) in the SWID M&A messages themselves. Other thoughts? 3) With regard to conversion, I will note that some tag types (e.g., ISO SWID tags) can be cryptographically signed. Obviously, any conversion is going to lose those signatures. Do people think that being able to discern correctly signed tags from other tags would be of operational significance? If so, maybe the solution would be three types of messages: a) capture inventory information using a single, standard data model to which all source tags are converted [by-normalized-value], b) capture inventory information using identifiers that can be used to reference tag structures [by-reference], c) capture inventory information using whatever native tag structure there is, noting that some tag types might not be consumable, but ensuring that signatures and the like are correctly conveyed [by-non-normalized-value]. The requesting party can indicate which of these return methods it would like. Any thoughts about any of these? Thanks, Charles > -----Original Message----- > From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Schmidt, Charles > M. > Sent: Monday, June 06, 2016 2:35 PM > To: Gunnar Engelbach ; > tony@yaanatech.com; Michael Godsey ; Jerome > Athias > Cc: sacm@ietf.org; Karen O'Donoghue > Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as > a SACM WG document > > > If there's going to be a consistent data model I don't see I reason why > > there should be any constraint on what endpoint tag types are supported. > > I'm afraid you have lost me here. My understanding was that you were > arguing > that SWID M&A should support tag types other than the ISO SWID tags. As I > understand the term, ISO SWID 2015 defines a data model, and then > different > tag formats (XML, CBOR, JSON) would all be data formats of that common > data > model. But if we have completely different tag types, (for example, SWID > 2015 tags and RPM records), I'm confused how there could be a common > data > model that both represent. In other words, when you argued for a common > data > model, to me this implicitly meant we needed to curtail the types of tags > supported to only those that could serialize that common data model. > > Sorry if I am being slow here, but could you clarify how you see the tag > types relating to this common data model? > > Thanks, > Charles > > > -----Original Message----- > > From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] > > Sent: Monday, June 06, 2016 1:45 PM > > To: Schmidt, Charles M. ; tony@yaanatech.com; > > Michael Godsey ; Jerome Athias > > > > Cc: sacm@ietf.org; Karen O'Donoghue > > Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc > as > > a SACM WG document > > > > > > > > On 6/6/2016 11:36 AM, Schmidt, Charles M. wrote: > > > Hello everyone, > > > > > > I wanted to do a quick loop back to the original question of this > thread, > > > namely the adoption of > > > https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as a > > SACM > > > working group document. This and other threads have indicated that > there > > is > > > some desire to evolve the document to address certain concerns, many > of > > > which I hope to address in the next draft. > > > > > > With the understanding that adoption as a working group draft does not > in > > > any way end the discussion or evolution of this draft, are there any > other > > > thoughts regarding adoption? > > > > > > Gunnar/Tony - you both raised concerns about adoption due to the > > document > > > being exclusively focused on ISO SWID tags, but since then there appears > > to > > > be agreement to expand to other possible tag types (with the caveat that > > > there also appears to be consensus that this list of tags should be > > > constrained so that endpoints are sending content using a consistent > data > > > model). Does this alteration address you concerns? If so, does that > change > > > your feelings on adoption? > > > > If there's going to be a consistent data model I don't see I reason why > > there should be any constraint on what endpoint tag types are supported. > > > > I'd prefer to see that translation happen as soon in the lifecycle of > > the data as possible, but we'll see what consensus is on that. For > > reasons already stated, if that translation is done centrally then I > > don't SACM adoption extending much beyond a few large vendors that put > > out, effectively, their own stovepipes. > > > > > > --gun > > > > > > > > > > Thanks, > > > Charles > > > > > >> -----Original Message----- > > >> From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] > > >> Sent: Friday, May 20, 2016 1:51 PM > > >> To: Schmidt, Charles M. ; > tony@yaanatech.com; > > >> Michael Godsey ; Jerome Athias > > >> > > >> Cc: sacm@ietf.org; Karen O'Donoghue > > >> Subject: Re: [sacm] Call for adoption of > draft-coffin-sacm-nea-swid-patnc > > > as > > >> a SACM WG document > > >> > > >> > > >> Inline... > > >> > > >> On 5/19/2016 1:27 PM, Schmidt, Charles M. wrote: > > >>> Tony/Gunnar, > > >>> > > >>> I agree. Details below. > > >>> > > >>>> Two questions not asked: who might do the > > >>>> work to bridge the gap with the gazillion other > > >>>> software identifier approaches out there, and > > >>>> whether some form of out-of-band SWID capability > > >>>> (as is used with may of the other SWID mechanisms) > > >>>> cannot be included. For a lot of IoT stuff, it is > > >>>> essential. > > >>>> > > >>>> This right here is an excellent point. There are other software ID > > >>> mechanisms > > >>>> out there and SWID is not going to cover everything for which there > is > > > an > > >>>> alternative. > > >>>> > > >>>> Because this proposal is so SWID-specific, I can't get behind it. > > >>> However, if it > > >>>> was genericized to allow for use of current and possible future > tagging > > >>>> mechanisms, I could certainly support that. > > >>> This makes sense. Even those strongly attached to the use of SWID > tags > > >> would > > >>> like to make sure that this specification can handle future revisions > of > > > the > > >>> ISO SWID specification, and as you both note, there are other > structures > > >> out > > >>> there which people might wish to use. > > >>> > > >>> Basically, it seems to me that we want to support a common, core set > of > > >>> functionality related to inventory and inventory events, but that we > > > want > > >> to > > >>> have some flexibility in the data (I'll call these "records") used to > > > convey > > >>> that information to a policy server. Are we in agreement on this? (I > > > don't > > >>> think we want the nature of what one can infer from a report to > change > > >> based > > >>> on the record structure used to convey that report.) > > >>> > > >>> Given this, the following are the core capabilities of SWID M&A for > > >>> reporting records as I see them: > > >>> 1) Records need to be associated with specific instances of a specific > > >>> software product and version thereof. > > >>> --- If the same version of the same product is installed multiple > times, > > >>> there will need to be multiple records naming the same product and > > >> version - > > >>> one associated with each actual installation. (We need to convey that > a > > >>> given product+version is installed "exactly X times" rather than "at > > > least > > >>> one instance".) > > >>> --- Changes to a software product need to result in a change in the > > >>> associated record. (The record needs to distinguish between AcmeApp > > >> v1.2.3 > > >>> and AcmeApp v1.2.4, since this is critical to multiple consumers of > this > > >>> data.) > > >>> --- Records associated with a product+version need to be consistent > > over > > >>> time and across endpoints. (There needs to be an easy way for the > > SWID- > > >> PV to > > >>> say "this is the same product+version" across different reports and > > >> between > > >>> reports from different machines.) > > >>> 2) If the record is more than about 200 bytes, there needs to be a > > > concise > > >>> identifier for this record. In SWID tags, this is created by the > > > combination > > >>> of the TagCreatorRegID and the TagID fields. (Concise identifiers are > > > used > > >>> in multiple places in SWID M&A to convey information without bloating > > >>> messages.) > > >> I tried to find fault, but I think as a basic core set, this is good > > >> coverage. > > >> > > >> In ongoing practice there are undoubtedly going to be more capabilities > > >> desired for other use cases, and some tagging solutions will have > useful > > >> capabilities that are not available in others. Extensibility is > assumed. > > >> > > >> I think it's also a necessity that a common data model be used > > >> regardless of the tag type/source. For hopefully obvious reasons. > > >> > > >> > > >> > > >>> Do you (or anyone) have any questions or concerns about any of these > > >> core > > >>> capabilities, or have any others to add? I think all of the other SWID > > > M&A > > >>> capabilities (monitoring for changes, tracking and ordering of events, > > >>> subscriptions, processing targeted requests, etc.) are fairly neutral > > > with > > >>> regard to the record structure used in messages assuming the two > > >>> requirements above are met. Let me know if you disagree about that. > > >>> > > >>> Capabilities do not need to be inherent in the record itself. (For > > > example, > > >>> there is nothing in a SWID tag that allows one to distinguish between > > >>> multiple installations of a single product.) There just needs to be a > > >>> reliable, deterministic mechanism by which these capabilities can be > met > > >>> while using the record. > > >>> > > >>> I will work on putting together some proposals on how different > record > > >> types > > >>> can be clearly labeled in SWID M&A messages so recipients can know > the > > >> type > > >>> of content they are getting prior to parsing. (Probably want a way for > > >>> SWID-PVs to express a preference too... need to think about this.) > While > > > I > > >>> am doing that, if you have a favorite non-ISO-SWID record that you > > would > > >>> like to see supported, could you put together any necessary > > requirements > > >>> that would be needed to ensure it aligns with the core capabilities > > >>> described above? I think that would be very useful for fleshing out > this > > >>> flexibility. > > >>> > > >>> I am interested in your thoughts on this. Thanks for the input. > > >>> > > >>> Charles ------=_NextPart_000_01F6_01D1C0DB.D54A6B50 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVFzCCBQcw ggPvoAMCAQICChY3sr0AAQAAGTYwDQYJKoZIhvcNAQELBQAwUDETMBEGCgmSJomT8ixkARkWA09S RzEVMBMGCgmSJomT8ixkARkWBU1JVFJFMSIwIAYDVQQDExlNSVRSRSBDb3Jwb3JhdGlvbiBQRSBD QS0yMB4XDTE1MDEyNjE0MjQ1MFoXDTE4MDEyNTE0MjQ1MFowTjELMAkGA1UEBhMCVVMxDjAMBgNV BAoTBU1JVFJFMQ8wDQYDVQQLEwZQZW9wbGUxHjAcBgNVBAMTFVNjaG1pZHQuQ2hhcmxlcy4yNTY1 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN5xc5J1BiLU7EoWUMfTywdDl9O8BN8w Mv9ZVYlyXwRv7wyLQOSV6zlFANSf8RvuP2Yt5akFlLawX9s5MsqMTqNoDuJ0rV3fz7cwniAHJPJQ 9r7Ito9rtbW55YcLy9AQeD1MwZEP8BX8Xw4iGtyjNSYFOuPbumz19c9S2e1Hu5kbgQcgpKAl8yqw jmxbxjl2Dabd8Vsb718KIbXW63Lcq0XXZAHHRmoZS3sYAHiYR7IkoXAdu6jZdaBapuQ2zTrBPhY8 a9D2HFWBLnDo3H7rT75+xtOr5toOg5X35K0loeRRF+gVGvRCPzpICJm+2FEaV1AbfG4CBVpXzMHu RCyzitECAwEAAaOCAeMwggHfMCgGA1UdJQQhMB8GCCsGAQUFBwMEBgkrBgEEAXMCAQcGCCsGAQUF BwMCMB0GA1UdDgQWBBTqU2AbFZCeOIL9w7THoPvAqThWlzAOBgNVHQ8BAf8EBAMCBsAwHgYDVR0R BBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAfBgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2l JzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0 aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/BggrBgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6 Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29ycG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYG CCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRyZS5vcmcvb2NzcDA+BgkrBgEEAYI3FQcEMTAvBicr BgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6uAYE2gZe0EIWZ/woCAWQCAQswNAYJKwYBBAGCNxUK BCcwJTAKBggrBgEFBQcDBDALBgkrBgEEAXMCAQcwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD ggEBAGHCUualAhLcCqxuPwC1EcEtQ+11msjtfh0g21t0ocOwVVidgoB/QL8PFaFp15XKEzYcGf7l IcJHNjLWwG8x8G1rnSdKGyJgj/5vHSFRm/NUYmSpqWc1k3s/Ps5GlvWWEmu8VtUHJcqeqPy7tkXe 0rzHGpvj0+pPAGjgqvLUxs3IPj2ME1v+lQ/DotWa9WTJo6SitnbYpj5ARRDoQjS9zY1idjZpTqyZ XPDO/yZnTaR5Ue1sHdARztlnNIQszBsJRPWh4kldQ4d0qHUycia+Jtm7Rbj1Itpb4jDyiK+9mxzE tNfYzzvtmCB0y/Eq4PGurhFFydPk18zpEapb+dlP5WYwggUtMIIDFaADAgECAhBMOlIUIU/ToEQV R3+ykPtQMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBvcmF0aW9uIFBFIFJv b3QgQ0EtMTAeFw0xMTA0MjYxOTQ1NDVaFw0yMTA0MjYxOTQ4MjJaMCkxJzAlBgNVBAMTHk1JVFJF IENvcnBvcmF0aW9uIFBFIFJvb3QgQ0EtMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ALafIUdIUat4pvgJcH2+WRxj+ZNjkmNk5VR2ByDFAx9zH1u2+vJQd49zMADLMRitZHv7ejuCtLfc ER+EA4DkNQrYZjhmVu8YjfNYdLz9WH9eEjboFGu2bx/Sj94l7MvEJzh2pdWyn9D2vSl4m+fKlLsH 2mUgk1uT9npKnfM+ExE73wVrz4A8csZ1bIgDusi/VmkaTIklTIWC1stykblP4LntG1RIvqnYPoRD YdTUjV6aKrHktutp6uXMecMm0fzxdGLLUPTTZWAzOXCxAimBx8w+nFyiaM7hV64rMJRPK3Z2u1Ws cma34AtLnhCGP7bI/+uSMlIcjwcDtGaVvi7PQneGPhEUruZkeRXfMONnlc7qLJpN7NwMaygvmeLV 2JI2ollHbiHoAIkk9byQcJEud70fs6wV9xKeepezBVb1vxnLGfcFE9hxuuSTnolXNmMwhKi4EN2Q gR59PaAWoNpZzGnPhNrCpvWii98cx7OnMg/KgiSvTvECwqqNwpswEpTsLUxYi2IKT1vzEpoGDrfS a8BwM5PewxxSkxbbY61xjJoTFc2nbdRIzJ9Vr/LeViwSNKkqF/zGItgmnog7BIlkbvTZqbt6ZovJ u7SEfXLHWwFT5LNrKDTFjqKRhKRUEg71Nfpu+79oyCkCmMWJjds1DieEyRS9aLJ2f+9TJiwg1Xfh AgMBAAGjUTBPMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbh32f/my+ Aunz4Ck6ilQlLJ84LzAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQsFAAOCAgEAMu/LF7D/ 3qhx/P7jmMsUOkwQ4ZAgcTaMvDBdnPVA57OQAy9assTwJaQwbC/todWc7dxbz44NEqERP/Y7shta sTM4Zb9I3UMddrREnaN7gW+tW9brnOB/1cQiVgyOCmS/wedxCPBxj41AXSwA4Dphvfbn35ubmq0p I7SF//wc91OkH80z5VVhYuEps0SNpqdehkPET7if1jJaGgJ/Fx+hI0tqC4xmQvD8PPwuOluPDb2d SWU62b2Ga+xprr5qZWCuvEmb/0+UrvhZS0U8vbjV0Cx7Zuoyr5wx9sgeus08H2g6Z4yC56wtjuwD UVWXNCssIiolt5weyaKu+P11bjCNT4kgcrdkLvkSEv1gCOcDIm05sEogcUGar7rYfnV6GpCcjj9l oOY7y+eb/US2YQ6jLUSOaL5zhb04DSUKjT0npBrQPpugrZf74ZEoOuRRQjIWkpJ+72NiJfkfB6Ll iTfME2rnXnsZ8h3A/jJbfEGgeQhK6Q43nhmX0NBXGJvuk7ZTMw8OXhYU/yekKwAQsX4C5FRR7qzH EA+CZJl15KuWz/hjZGNFMtizG8P1A/eDhFdS6XwKlJE/pruWG78YPnpRbbGnfiMfKMFt+9scpyAA 4fatWx5vo9ThzyZhgC1ivZokaQuLd4rH7t2QdEKSP3tj6OjBA9/dyW9GG863BJRb+mQwggVkMIID TKADAgECAgphCxNwAAAAAAAIMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBv cmF0aW9uIFBFIFJvb3QgQ0EtMTAeFw0xNDA5MjMxNDExMDlaFw0yMDA5MjMxNDIxMDlaMFAxEzAR BgoJkiaJk/IsZAEZFgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUg Q29ycG9yYXRpb24gUEUgQ0EtMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCwfdfN xVXZ6/JpLeCsWV8VvVPRAiI4uemN3Cyn81gK/0uC0KJRX/WJ1XHmfzeLesyF46yxCgd0fe6mtaDf FQNWfngzMVaiHHT7nNyRcOo5TE+ZmzDe7i4Cp+Sd7ySSyaj5WTLVylv6PmFxtKYm/2tI44tELhGR Dsw/J7rhwi0/9jEujxjXpL64l72bcrEaDj8pSFg1LNPLFEe4S2jI9yxc5k0ZKQJtqGhBVPtOGSiZ gI8axrVkdnjr1Dwr0M1UT7Qmexp+r0WvMK16877VaApOGn0560eKtLgBYb8j72B7KUwFGFMtuM7Z dCCHYbiwLVnauOFbPK6qxhK/1fQBhZ0CAwEAAaOCAWUwggFhMBIGCSsGAQQBgjcVAQQFAgMBAAEw IwYJKwYBBAGCNxUCBBYEFK3ZS7o7L84O/Az72pcz74oBuJlNMB0GA1UdDgQWBBQMxmvuAka12Y/b o8zsvD7hBb2lJzAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRbh32f/my+Aunz4Ck6ilQlLJ84LzBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290 JTIwQ0EtMS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9odHRwOi8vcGtpLm1pdHJl Lm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290JTIwQ0EtMS5jcnQwDQYJKoZIhvcN AQELBQADggIBAD06aH/7xILol2cSQVcb5IUOOmM7spT7YGRDhGIosIFKbLSovt8NtmVwJY0I/2/Y 9rSD5hRQ2jdVWny3baAWRuhxjg/DjJgZ3wHyf8h5UtzcUEIfmslxOlDNlfFihKaMDUyqD4ycLEXW R7VGMjFQH5470vQPebdgoTgHBhdRHrOrtUb0/X1U4PUiR2TeOM4uQw0c0KupxNqG28Ff/Esonb2f JXs3i6hC8ke9gsysG8IssgY1xD8hPkqdJWBEcZYQjzkqIEyM+Z5p7640fX8eFPYiIXhHr2ZLf+8c 33FaIZEHDiQ7eFcxMQ3oxo0YvJKLwwrTGugne3pPNUd2DizbNP5u3YcPfMKSLgkmIqHOlshBq/kT na8btf//rwCspdTYGgCCtLrc0Tb26Rj4nKN8aEPJ08QYfFIgJv9DwejCC4km5bJh1ixczGraLqKb g8WJng9fRojYQcWKbf6NuJjWuwxud4NSDwcHcoTODd7p+3e9o6DrfH0OBzPOgd9+EFKI+dg6pbgY iZT8MUSUMA7dKxVysbrMrx/QOGVeYq7KzS+nip0usB4sCGIGZfyGZLkbj9rhtY3EnIdD8iKcgCtU CZHDDb3SzH7IpXICOzhIGRp8y9qSCemevhBJ8aXgcZcBvYPGbGcB4qzDclJKiDCC8rfUTeptdzOn dxibyGqMSYRKMIIFbzCCBFegAwIBAgIKFjewygABAAAZNTANBgkqhkiG9w0BAQsFADBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTIwHhcNMTUwMTI2MTQyNDUwWhcNMTgwMTI1MTQyNDUwWjBOMQswCQYD VQQGEwJVUzEOMAwGA1UEChMFTUlUUkUxDzANBgNVBAsTBlBlb3BsZTEeMBwGA1UEAxMVU2NobWlk dC5DaGFybGVzLjI1NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPFZQSeVxZu+ Gt4BfFomoILNlkXW2oAGBuhcEI5+Gfu33x7Or9K2NR3etzu9EqGPafLrJ1dyDWFIM9ktke0LqNKL 73WkWyCcpN0Bb7yXNPQynHzOgQSIrQbi7yrhmEbmNQC7hU5+BxfikIu/O7eSjWRgm9coRkEg6zpO 4nrADfumKIw/yVJ0dwqRVh9cMB7S8QJIXteDPHeZPeMAt7fw5TXTgF+OAwIqyjhHN4SiPMTQoDyZ HydqDxpd42gMZjLILS7oZ7pIDCfSwuPnM9PNHUzz5w+0D2hAYjv2a8BBh2L1LTV3nZVREN9uugVf w5Bu9q3T1ddeLrWsU4QvE8c0LwIDAQABo4ICSzCCAkcwEwYDVR0lBAwwCgYIKwYBBQUHAwQwgZQG CSqGSIb3DQEJDwSBhjCBgzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsOAwIH MAoGCCqGSIb3DQMHMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAS0wCwYJYIZIAWUDBAEWMAsGCWCG SAFlAwQBGTALBglghkgBZQMEAQIwCwYJYIZIAWUDBAEFMB0GA1UdDgQWBBTembLBQG/LThypM1w0 LH0xnzFqWzAOBgNVHQ8BAf8EBAMCBSAwHgYDVR0RBBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAf BgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2lJzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8v cGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/Bggr BgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29y cG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRy ZS5vcmcvb2NzcDA9BgkrBgEEAYI3FQcEMDAuBiYrBgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6u AYE20YFnhpiTPgIBZAIBEzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMEMA0GCSqGSIb3DQEB CwUAA4IBAQAKdBfLmGhQyfhBlJUrWwu5iuDwZTsOuddl9d4mw3Ml8yQjc21cCPDGJ3Tc3cwIJyj7 6rSK4mV6xsyUKDxZBZcNSM/7iLtFS9N8noe0Mo0TcPZuJzxzD8xtd/qlIvOLZR0rrS9v816ajAly u2OHTPi4lVtk/rI7ccO5C8uEMfrmXXTN6IJNyhqlprfCLDrICsGM3rXafADIkxBFGr0bXq6orGrM hJRMVQcdKdB5d/VqflqePmynjoorrIMnIfIEsfplYSsF3Uv8hAHxrHSldqOrl8aXvvyIh8d/UBx/ pQcw+0JQn9ebPCcMilCvNH2sKq+8SjJrmHNI1mjSxD5QLH3MMYIDXDCCA1gCAQEwXjBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTICChY3sr0AAQAAGTYwCQYFKw4DAhoFAKCCAdMwGAYJKoZIhvcNAQkD MQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTYwNjA3MjE0NDE3WjAjBgkqhkiG9w0BCQQx FgQULFFd2HZFIR2m42rlm/4urKJ6sPswbQYJKwYBBAGCNxAEMWAwXjBQMRMwEQYKCZImiZPyLGQB GRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENvcnBvcmF0aW9u IFBFIENBLTICChY3sMoAAQAAGTUwbwYLKoZIhvcNAQkQAgsxYKBeMFAxEzARBgoJkiaJk/IsZAEZ FgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUgQ29ycG9yYXRpb24g UEUgQ0EtMgIKFjewygABAAAZNTCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglg hkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG 9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATAN BgkqhkiG9w0BAQEFAASCAQDNLNYKnuDMSy0naeJKGGXwqZ4bztABD8GGlEnVrBjEHoWEKQgftq4f G65Cdxn8J6wyQ82Jog0wE863e5Ir8uwQF4ZfKH36sgaV9xD0Wj1jFSdSNkmzzsCzhi07IXaDPt5p mqnRR3GOK4sYKpR6WXcWjTPhXG/V/m8OE9CDyainua6XMnvJuBHJCI3+a+uoLPFnK2ztQpmF+383 q0kCyB0Ql30fbwN5enoguKkTei++Jeem/MXxqYtiptKqnRgjgkHBOkEzm42degrzW0fQEaEu2mf9 qiSLW7d1U3cOwsOJ63DEFQA8cXjUBkvMh8C6Iu6o0YgYSWa8I1m2t5qXiEumAAAAAAAA ------=_NextPart_000_01F6_01D1C0DB.D54A6B50-- From nobody Tue Jun 7 15:21:57 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2CA3912D83F for ; Tue, 7 Jun 2016 15:21:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.901 X-Spam-Level: X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=threatguard-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id uv37Cs5uOD1a for ; Tue, 7 Jun 2016 15:21:43 -0700 (PDT) Received: from mail-pa0-x229.google.com (mail-pa0-x229.google.com [IPv6:2607:f8b0:400e:c03::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9989D12D6B2 for ; Tue, 7 Jun 2016 15:21:43 -0700 (PDT) Received: by mail-pa0-x229.google.com with SMTP id bz2so49792043pad.1 for ; Tue, 07 Jun 2016 15:21:43 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=threatguard-com.20150623.gappssmtp.com; s=20150623; h=from:subject:to:references:cc:message-id:date:user-agent :mime-version:in-reply-to:content-transfer-encoding; bh=7ITA6pFnNjg62ESnbpMqc+jOOYFkaibUyU1HhGj9+ss=; b=y1D6mkGkOyMvxCt9g2g+u4E+ybCHa4x2Zi68GN6uS9oL+dQXjaVmpwHA4VLGHJg0WF xIka9W6L9R9gGD3aJslutacjedGccgSRs0EF0dkUA6OTB8RQdwJxQ6l126tqGRMSCXPj SWlwZu06BRS6eRpV1zLanNY8zjUZs/zGf/F8FjCzGdcISGr8s7O+yQGpdY+eqMY+Bb8J 7FV4deXAvqxPj4vaIZ6kcxBAT9sinuXuGocXervm/gIi0rhW0HQpVKAwRPWOj3NOmVog MEQb7snDpjAZGD51VN5Ko9fY6uSK7WvQDN8k3wYnUG71HfweNufYliSxZRbKf1tn0P0Y yOQg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:references:cc:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=7ITA6pFnNjg62ESnbpMqc+jOOYFkaibUyU1HhGj9+ss=; b=Es+qFbhdw9znsT7IA/Of4gvGeoPiWLQlA+9Td5q0Q9HjpIiH/P7YZeXRLi9URxkQHg d12pML+1lWZY45BsBwTkCxAdXltt8EoWbRrOtK8WNJCYoVyU/2adBx3MAfJKvT8CRoGI t35yBWGsLYS45mRwb1y/W4CVsEPBrg3aRMAiSRQwgdAm9cAcnUGnysLW4I8juvFlLWZh noUFNbrM8/cDModp3xuXgg2aJeYAW7t5/CwnnaZ6tGHlLHySYV36q4MvXG7Z/tqO0rlu cGsbq9zolPZchfrPf0Cxf6iqxtvQEEbWJ9m/IBuT0xG9bVMrKgKjNzNx5OfD5eHQs5+a Fi6g== X-Gm-Message-State: ALyK8tJV1Azcs2h+4VwwktevzOIR0oJKhxDG1A5MpYI+xB5QAuczh67U0qjFHfEh8q9A/Q== X-Received: by 10.66.73.193 with SMTP id n1mr1827490pav.70.1465338102995; Tue, 07 Jun 2016 15:21:42 -0700 (PDT) Received: from [172.16.1.122] (75-142-12-171.dhcp.mdfd.or.charter.com. [75.142.12.171]) by smtp.gmail.com with ESMTPSA id kb15sm35410679pad.28.2016.06.07.15.21.41 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 07 Jun 2016 15:21:41 -0700 (PDT) From: Gunnar Engelbach X-Google-Original-From: Gunnar Engelbach To: "Schmidt, Charles M." , "tony@yaanatech.com" , Michael Godsey , Jerome Athias References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <0aa7684f-5a47-c00a-4b5b-e19484dd718a@yaanatech.com> <0418b8dc-9fd8-f8d2-3461-ce8e019fe22a@yaanatech.com> <8eb2719e-6baa-013a-daf5-5f2b269a75c1@ThreatGuard.com> <6217ee86-3479-9476-d76c-d8d74af9175b@ThreatGuard.com> Message-ID: <11ca5853-6d33-fead-afa4-e143ea557c48@ThreatGuard.com> Date: Tue, 7 Jun 2016 15:21:43 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Cc: "sacm@ietf.org" , Karen O'Donoghue Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Jun 2016 22:21:55 -0000 On 6/7/2016 2:44 PM, Schmidt, Charles M. wrote: > Ok - Gunnar has set me straight. > > Put in terms for the easily confused (such as myself): Gunnar was advocating > that the network messages used to convey tag data via SWID M&A employ a > standard data model so that recipients always see the same structure in the > messages and can rely on being able to parse it. With that in mind, many tag > types could be converted to this common data model used in the messages, > thus many tag types should be collected by the Posture Collector as > potential input. Gunnar - did I get it right? Sounds like it. But then, I thought we were understanding each other the last time. ... > > In fact, this is largely what the SWID M&A specification does now. The ISO > SWID 2015 and ISO SWID 2009 specifications form a data model for SWID M&A > messages conveying tag information. However, the specification notes that > the SWID tag collection that is conveyed in these messages could come from > many "sources", some of which might be translated from different record > types. (E.g., potentially converted from package manager records or third > party inventory tool results.) The same, I'm sure, can be said about the other tag types: that is, their data models can be used to represent data from other "sources." Taken as a given that inventing yet another software tag data model is a non-starter, the question then is which of the various existing models would be the most useful? Most useful, in this case, would to me involve three primary factors: 1) The most complete (that is, closest to being able to represent the other tag types without loss of data or shoe-horning data into fields that weren't really meant for that type of data). 2) Capable of being easily extended to cover gaps as necessary. Possibly as a fork and not part of its normal maintenance. 3) Readily accessible (for example, the spec is not behind a paywall). > > That said, based on some of the conversations that have occurred in meetings > and on list, I think there are some open questions here: > 1) Currently SWID M&A uses the ISO SWID specifications as a data model. > Various parties have weighed in on the pros and cons of ISO SWID tags. > Looking from a strictly data-model perspective, what structure makes sense > for conveying tag/inventory data as the standard data model in these > messages. Personally, I would argue that the core should probably be an > existing structure - I don't see any call to invent yet another way to > describe software. > > 2) As I wrote it, one of the change proposals presented to the group was > effectively to allow SWID M&A to convey any type of tag natively and simply > include a field to identify the type of tag contained in the message. This > would allow SWID M&A to convey inventory information via an unlimited number > of data models. What do people think about this given the recent > discussions? Gunnar, I take it you would be against this change and would > prefer a fixed tag format (a.k.a. data model) in the SWID M&A messages > themselves. Other thoughts? Yup, I'm all for a single common tag format for SACM. But it also needs to be one that can be extended to accommodate future needs -- for instance, adding in data items available in other tag types that the common model does not have an allowance for. Other options: i. Minimize the amount of data items covered by the common data model and include the original tag as an "attachment," thus preserving all data that it represents. ii. We allow that an OOB mechanism can exist, providing enough information with the common tag such that the original can be retrieved if that's what the processor really needs. > > 3) With regard to conversion, I will note that some tag types (e.g., ISO > SWID tags) can be cryptographically signed. Obviously, any conversion is > going to lose those signatures. Do people think that being able to discern > correctly signed tags from other tags would be of operational significance? > If so, maybe the solution would be three types of messages: a) capture > inventory information using a single, standard data model to which all > source tags are converted [by-normalized-value], b) capture inventory > information using identifiers that can be used to reference tag structures > [by-reference], c) capture inventory information using whatever native tag > structure there is, noting that some tag types might not be consumable, but > ensuring that signatures and the like are correctly conveyed > [by-non-normalized-value]. The requesting party can indicate which of these > return methods it would like. > > Any thoughts about any of these? > > Thanks, > Charles > >> -----Original Message----- >> From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Schmidt, Charles >> M. >> Sent: Monday, June 06, 2016 2:35 PM >> To: Gunnar Engelbach ; >> tony@yaanatech.com; Michael Godsey ; Jerome >> Athias >> Cc: sacm@ietf.org; Karen O'Donoghue >> Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc > as >> a SACM WG document >> >>> If there's going to be a consistent data model I don't see I reason why >>> there should be any constraint on what endpoint tag types are supported. >> I'm afraid you have lost me here. My understanding was that you were >> arguing >> that SWID M&A should support tag types other than the ISO SWID tags. As I >> understand the term, ISO SWID 2015 defines a data model, and then >> different >> tag formats (XML, CBOR, JSON) would all be data formats of that common >> data >> model. But if we have completely different tag types, (for example, SWID >> 2015 tags and RPM records), I'm confused how there could be a common >> data >> model that both represent. In other words, when you argued for a common >> data >> model, to me this implicitly meant we needed to curtail the types of tags >> supported to only those that could serialize that common data model. >> >> Sorry if I am being slow here, but could you clarify how you see the tag >> types relating to this common data model? >> >> Thanks, >> Charles >> >>> -----Original Message----- >>> From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] >>> Sent: Monday, June 06, 2016 1:45 PM >>> To: Schmidt, Charles M. ; tony@yaanatech.com; >>> Michael Godsey ; Jerome Athias >>> >>> Cc: sacm@ietf.org; Karen O'Donoghue >>> Subject: Re: [sacm] Call for adoption of > draft-coffin-sacm-nea-swid-patnc >> as >>> a SACM WG document >>> >>> >>> >>> On 6/6/2016 11:36 AM, Schmidt, Charles M. wrote: >>>> Hello everyone, >>>> >>>> I wanted to do a quick loop back to the original question of this >> thread, >>>> namely the adoption of >>>> https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as > a >>> SACM >>>> working group document. This and other threads have indicated that >> there >>> is >>>> some desire to evolve the document to address certain concerns, many >> of >>>> which I hope to address in the next draft. >>>> >>>> With the understanding that adoption as a working group draft does not >> in >>>> any way end the discussion or evolution of this draft, are there any >> other >>>> thoughts regarding adoption? >>>> >>>> Gunnar/Tony - you both raised concerns about adoption due to the >>> document >>>> being exclusively focused on ISO SWID tags, but since then there > appears >>> to >>>> be agreement to expand to other possible tag types (with the caveat > that >>>> there also appears to be consensus that this list of tags should be >>>> constrained so that endpoints are sending content using a consistent >> data >>>> model). Does this alteration address you concerns? If so, does that >> change >>>> your feelings on adoption? >>> If there's going to be a consistent data model I don't see I reason why >>> there should be any constraint on what endpoint tag types are supported. >>> >>> I'd prefer to see that translation happen as soon in the lifecycle of >>> the data as possible, but we'll see what consensus is on that. For >>> reasons already stated, if that translation is done centrally then I >>> don't SACM adoption extending much beyond a few large vendors that put >>> out, effectively, their own stovepipes. >>> >>> >>> --gun >>> >>> >>>> Thanks, >>>> Charles >>>> >>>>> -----Original Message----- >>>>> From: Gunnar Engelbach [mailto:gunnar.engelbach@threatguard.com] >>>>> Sent: Friday, May 20, 2016 1:51 PM >>>>> To: Schmidt, Charles M. ; >> tony@yaanatech.com; >>>>> Michael Godsey ; Jerome Athias >>>>> >>>>> Cc: sacm@ietf.org; Karen O'Donoghue >>>>> Subject: Re: [sacm] Call for adoption of >> draft-coffin-sacm-nea-swid-patnc >>>> as >>>>> a SACM WG document >>>>> >>>>> >>>>> Inline... >>>>> >>>>> On 5/19/2016 1:27 PM, Schmidt, Charles M. wrote: >>>>>> Tony/Gunnar, >>>>>> >>>>>> I agree. Details below. >>>>>> >>>>>>> Two questions not asked: who might do the >>>>>>> work to bridge the gap with the gazillion other >>>>>>> software identifier approaches out there, and >>>>>>> whether some form of out-of-band SWID capability >>>>>>> (as is used with may of the other SWID mechanisms) >>>>>>> cannot be included. For a lot of IoT stuff, it is >>>>>>> essential. >>>>>>> >>>>>>> This right here is an excellent point. There are other software ID >>>>>> mechanisms >>>>>>> out there and SWID is not going to cover everything for which there >> is >>>> an >>>>>>> alternative. >>>>>>> >>>>>>> Because this proposal is so SWID-specific, I can't get behind it. >>>>>> However, if it >>>>>>> was genericized to allow for use of current and possible future >> tagging >>>>>>> mechanisms, I could certainly support that. >>>>>> This makes sense. Even those strongly attached to the use of SWID >> tags >>>>> would >>>>>> like to make sure that this specification can handle future > revisions >> of >>>> the >>>>>> ISO SWID specification, and as you both note, there are other >> structures >>>>> out >>>>>> there which people might wish to use. >>>>>> >>>>>> Basically, it seems to me that we want to support a common, core set >> of >>>>>> functionality related to inventory and inventory events, but that we >>>> want >>>>> to >>>>>> have some flexibility in the data (I'll call these "records") used > to >>>> convey >>>>>> that information to a policy server. Are we in agreement on this? (I >>>> don't >>>>>> think we want the nature of what one can infer from a report to >> change >>>>> based >>>>>> on the record structure used to convey that report.) >>>>>> >>>>>> Given this, the following are the core capabilities of SWID M&A for >>>>>> reporting records as I see them: >>>>>> 1) Records need to be associated with specific instances of a > specific >>>>>> software product and version thereof. >>>>>> --- If the same version of the same product is installed multiple >> times, >>>>>> there will need to be multiple records naming the same product and >>>>> version - >>>>>> one associated with each actual installation. (We need to convey > that >> a >>>>>> given product+version is installed "exactly X times" rather than "at >>>> least >>>>>> one instance".) >>>>>> --- Changes to a software product need to result in a change in the >>>>>> associated record. (The record needs to distinguish between AcmeApp >>>>> v1.2.3 >>>>>> and AcmeApp v1.2.4, since this is critical to multiple consumers of >> this >>>>>> data.) >>>>>> --- Records associated with a product+version need to be consistent >>> over >>>>>> time and across endpoints. (There needs to be an easy way for the >>> SWID- >>>>> PV to >>>>>> say "this is the same product+version" across different reports and >>>>> between >>>>>> reports from different machines.) >>>>>> 2) If the record is more than about 200 bytes, there needs to be a >>>> concise >>>>>> identifier for this record. In SWID tags, this is created by the >>>> combination >>>>>> of the TagCreatorRegID and the TagID fields. (Concise identifiers > are >>>> used >>>>>> in multiple places in SWID M&A to convey information without > bloating >>>>>> messages.) >>>>> I tried to find fault, but I think as a basic core set, this is good >>>>> coverage. >>>>> >>>>> In ongoing practice there are undoubtedly going to be more > capabilities >>>>> desired for other use cases, and some tagging solutions will have >> useful >>>>> capabilities that are not available in others. Extensibility is >> assumed. >>>>> I think it's also a necessity that a common data model be used >>>>> regardless of the tag type/source. For hopefully obvious reasons. >>>>> >>>>> >>>>> >>>>>> Do you (or anyone) have any questions or concerns about any of these >>>>> core >>>>>> capabilities, or have any others to add? I think all of the other > SWID >>>> M&A >>>>>> capabilities (monitoring for changes, tracking and ordering of > events, >>>>>> subscriptions, processing targeted requests, etc.) are fairly > neutral >>>> with >>>>>> regard to the record structure used in messages assuming the two >>>>>> requirements above are met. Let me know if you disagree about that. >>>>>> >>>>>> Capabilities do not need to be inherent in the record itself. (For >>>> example, >>>>>> there is nothing in a SWID tag that allows one to distinguish > between >>>>>> multiple installations of a single product.) There just needs to be > a >>>>>> reliable, deterministic mechanism by which these capabilities can be >> met >>>>>> while using the record. >>>>>> >>>>>> I will work on putting together some proposals on how different >> record >>>>> types >>>>>> can be clearly labeled in SWID M&A messages so recipients can know >> the >>>>> type >>>>>> of content they are getting prior to parsing. (Probably want a way > for >>>>>> SWID-PVs to express a preference too... need to think about this.) >> While >>>> I >>>>>> am doing that, if you have a favorite non-ISO-SWID record that you >>> would >>>>>> like to see supported, could you put together any necessary >>> requirements >>>>>> that would be needed to ensure it aligns with the core capabilities >>>>>> described above? I think that would be very useful for fleshing out >> this >>>>>> flexibility. >>>>>> >>>>>> I am interested in your thoughts on this. Thanks for the input. >>>>>> >>>>>> Charles From nobody Wed Jun 8 11:52:43 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3EBCF12B00E for ; Wed, 8 Jun 2016 11:52:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.383 X-Spam-Level: X-Spam-Status: No, score=-5.383 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_24=1.618, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vAs0GDY72hnl for ; Wed, 8 Jun 2016 11:52:39 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 13F8712B00B for ; Wed, 8 Jun 2016 11:52:38 -0700 (PDT) Date: Wed, 08 Jun 2016 11:52:37 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465411957; bh=h+HRJN7NHFlPVLD1o8pHQ68j97AAnAb/9UzP5VyCgO4=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=V+MaRA00tHAmtPnpzr40JQulfmsvJkC7VqEbN+sE5cPIEenGDkVvU6jYsfieh8ML1 jSf03aJ2cqocfxDkdc1xf5UpluITCiYx3G+tzHJvAyz8okD5q9IPtBXFGwdA7g5agF NlLXwb+28bKgdrO5MSsZUjOvcQvrupwCx2pumrEs= From: Danny Haynes To: sacmwg/draft-ietf-sacm-information-model Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5758697587131_645b3fdec01e32bc1016c6"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/draft-ietf-sacm-information-model] Proposed im merger changes (#44) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/draft-ietf-sacm-information-model List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jun 2016 18:52:41 -0000 ----==_mimepart_5758697587131_645b3fdec01e32bc1016c6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit You can view, comment on, or merge this pull request online at: https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/44 -- Commit Summary -- * includes proposed changes for IM #41. updates WG IM to standards track instead of informational #29. removes text about SACM components which should be in the architecture #33. * fixed some formatting warnings. -- File Changes -- M draft-ietf-sacm-information-model.xml (1674) -- Patch Links -- https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/44.patch https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/44.diff --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/44 ----==_mimepart_5758697587131_645b3fdec01e32bc1016c6 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

You can view, comment on, or merge this pull request online at:

  https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/44

Commit Summary

  • includes proposed changes for IM #41. updates WG IM to standards track instead of informational #29. removes text about SACM components which should be in the architecture #33.
  • fixed some formatting warnings.

File Changes

Patch Links:

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_5758697587131_645b3fdec01e32bc1016c6-- From nobody Wed Jun 8 11:55:35 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CB4EA12B00B for ; Wed, 8 Jun 2016 11:55:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.909 X-Spam-Level: X-Spam-Status: No, score=-5.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0TBvsfoP2w6s for ; Wed, 8 Jun 2016 11:55:32 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6115C12B00E for ; Wed, 8 Jun 2016 11:55:32 -0700 (PDT) Date: Wed, 08 Jun 2016 11:55:31 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465412131; bh=yaODcv82bJuwEv5foqp+8aQUR+tpcuR6+rW+KoW48xQ=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=CCSnWxNIlDBxFPcnJEQuCo+78r+nnvTAefVBiQSKHKWWm+kW+9F8FPDUdsrlpulVZ A0aRLwrmxNAUR4MKvcc3S3idmjYbv6tVSgTflnaVsULEojmz3J81iq/HeBEYP5y7Ky AOPo+/TQeNK5k3rVD9ffngIT84/c3wrD+OJyIatE= From: Danny Haynes To: sacmwg/draft-ietf-sacm-information-model Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_57586a239c52c_7ba43fd1897392a0255760"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] Proposed im merger changes (#44) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/draft-ietf-sacm-information-model List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jun 2016 18:55:34 -0000 ----==_mimepart_57586a239c52c_7ba43fd1897392a0255760 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Merged #44. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/pull/44#event-686285687 ----==_mimepart_57586a239c52c_7ba43fd1897392a0255760 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Merged #44.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_57586a239c52c_7ba43fd1897392a0255760-- From nobody Wed Jun 8 13:16:07 2016 Return-Path: X-Original-To: sacm@ietf.org Delivered-To: sacm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 503D512D7BF; Wed, 8 Jun 2016 13:16:05 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.21.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160608201605.20039.98503.idtracker@ietfa.amsl.com> Date: Wed, 08 Jun 2016 13:16:05 -0700 Archived-At: Cc: sacm@ietf.org Subject: [sacm] I-D Action: draft-ietf-sacm-information-model-05.txt X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jun 2016 20:16:05 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Security Automation and Continuous Monitoring of the IETF. Title : SACM Information Model Authors : David Waltermire Kim Watson Clifford Kahn Lisa Lorenzin Michael Cokus Daniel Haynes Filename : draft-ietf-sacm-information-model-05.txt Pages : 128 Date : 2016-06-08 Abstract: This document defines the information elements that are transported between SACM components and their interconnected relationships. The primary purpose of the Secure Automation and Continuous Monitoring (SACM) Information Model is to ensure the interoperability of corresponding SACM data models and addresses the use cases defined by SACM. The information elements and corresponding types are maintained as the IANA "SACM Information Elements" registry. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-sacm-information-model-05 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-ietf-sacm-information-model-05 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Jun 8 15:32:02 2016 Return-Path: X-Original-To: sacm@ietf.org Delivered-To: sacm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id C704112D7C5; Wed, 8 Jun 2016 15:31:57 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.21.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160608223157.19955.70112.idtracker@ietfa.amsl.com> Date: Wed, 08 Jun 2016 15:31:57 -0700 Archived-At: Cc: sacm@ietf.org Subject: [sacm] I-D Action: draft-coffin-sacm-nea-swid-patnc-01.txt X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jun 2016 22:31:58 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Security Automation and Continuous Monitoring of the IETF. Title : SWID Message and Attributes for PA-TNC Authors : Chris Coffin Daniel Haynes Charles Schmidt Jessica Fitzgerald-McKay Filename : draft-coffin-sacm-nea-swid-patnc-01.txt Pages : 97 Date : 2016-06-08 Abstract: This document specifies the SWID Message and Attributes for PA-TNC. It extends the PA-TNC specification [RFC5792] by providing specific attributes and message exchanges to allow endpoints to report their software inventory information to a NEA server (as described in [RFC5209]) using SWID tags [SWID]. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-coffin-sacm-nea-swid-patnc-01 A diff from the previous version is available at: https://www.ietf.org/rfcdiff?url2=draft-coffin-sacm-nea-swid-patnc-01 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Wed Jun 8 16:37:10 2016 Return-Path: X-Original-To: sacm@ietf.org Delivered-To: sacm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 011A712D823; Wed, 8 Jun 2016 16:37:09 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: internet-drafts@ietf.org To: X-Test-IDTracker: no X-IETF-IDTracker: 6.21.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160608233708.19995.57209.idtracker@ietfa.amsl.com> Date: Wed, 08 Jun 2016 16:37:08 -0700 Archived-At: Cc: sacm@ietf.org Subject: [sacm] I-D Action: draft-ietf-sacm-vuln-scenario-00.txt X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 08 Jun 2016 23:37:09 -0000 A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Security Automation and Continuous Monitoring of the IETF. Title : SACM Vulnerability Assessment Scenario Authors : Christopher Coffin Brant Cheikes Charles Schmidt Daniel Haynes Jessica Fitzgerald-McKay David Waltermire Filename : draft-ietf-sacm-vuln-scenario-00.txt Pages : 23 Date : 2016-06-08 Abstract: This document describes an automated enterprise vulnerability assessment scenario aligned with the SACM Use Cases. The scenario assumes the existence of an endpoint management capability and begins with an enterprise ingesting vulnerability description information. Endpoints are assessed against the vulnerability description information based a combination of examining known endpoint characterization information and collected endpoint information. The IETF datatracker status page for this draft is: https://datatracker.ietf.org/doc/draft-ietf-sacm-vuln-scenario/ There's also a htmlized version available at: https://tools.ietf.org/html/draft-ietf-sacm-vuln-scenario-00 Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ From nobody Thu Jun 9 04:48:38 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 043F412D11A for ; Thu, 9 Jun 2016 04:48:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DtVsD3o95v_x for ; Thu, 9 Jun 2016 04:48:36 -0700 (PDT) Received: from mail-oi0-x233.google.com (mail-oi0-x233.google.com [IPv6:2607:f8b0:4003:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 77B4F12B027 for ; Thu, 9 Jun 2016 04:48:36 -0700 (PDT) Received: by mail-oi0-x233.google.com with SMTP id p204so58729542oih.3 for ; Thu, 09 Jun 2016 04:48:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:subject:date:message-id:to:mime-version; bh=p6ZEKmTON2ZYK4TbHgLlo8UFs30CzrH7g8+wT8YDOXI=; b=k2AIEvQPbD94ptOKMkBL2PBY3uHb6xkbCQBmJ7DS2uBH9aVZlGi+9n6mS2lijKJjJs fdlTWRP9tnaP4wjYTh81Nevue0l4ELLWyVsdas05XCICpXYzueUNmQnK9l0EsT5VsSr4 GpR9yAD6LpwWSldhXC/dOGmhI3hxI6GHLrMAHHz5AtvlH953qUlZ2mjEBDzHsQxHdlkf jMwqTwBv76zOYaLOFzf357+sLXYGhYUBJCu5bU8MRoXJWBuJRxzW9SsJgEE2XOKVWxwE 4hQlE4MkALkDX1fwSa5eJiTt+qJeZv76zJOIDa+NzxOtzLm+Na2PSDIliVnqmhYiRD3x 7CEQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:date:message-id:to:mime-version; bh=p6ZEKmTON2ZYK4TbHgLlo8UFs30CzrH7g8+wT8YDOXI=; b=RbGOR+sRH9IOekb4U6AX9dPzKPM63XABHgyynjy9u6VaYOjpNb8oaeRkb+POKwDQ8A 1aR2iq/UmPqFReNe67lmTPpDrMyXlJ8OWXh3e4QlHLCcGQ3WTERx74BNX95AIoE6O2k2 UYZhz3dnbo+xAEGcMktQMrjZ5WEMV78ygqCQD8bYDgyXSP8h9UczDDvtjxPWfs8Qzj5W nHyQpiA+3tYH/wYPUJ2xTe+xAKuNVFm0nwBLn9h3EXEObs0Pk6MHyFWqZENo5NhhCCle 0kbJXaOkZnLLZaic9P+V5kvM1IIJZa/0tWOeGKrZU0yRPy9w6CFr6rnLrnQeh77/FOJc qmDg== X-Gm-Message-State: ALyK8tK1jveBAN0WGAf4TZjoz/oCs9Cx7D1Y9jAN7/OkUm85FvS/abe+C0jXdMJc/0mMdg== X-Received: by 10.157.42.199 with SMTP id e65mr4974274otb.110.1465472915639; Thu, 09 Jun 2016 04:48:35 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id c5sm2675661otb.33.2016.06.09.04.48.34 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 09 Jun 2016 04:48:34 -0700 (PDT) From: Adam Montville X-Pgp-Agent: GPGMail 2.6b2 Content-Type: multipart/signed; boundary="Apple-Mail=_09CB3DCC-1FDF-4799-8B34-35983DA2342A"; protocol="application/pgp-signature"; micalg=pgp-sha512 Date: Thu, 9 Jun 2016 06:48:33 -0500 Message-Id: <882083C9-878C-40C9-B7F2-4CDAF8135236@gmail.com> To: "" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [sacm] Virtual Interim Agenda Items X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 11:48:38 -0000 --Apple-Mail=_09CB3DCC-1FDF-4799-8B34-35983DA2342A Content-Type: multipart/alternative; boundary="Apple-Mail=_205D5D0A-04B2-4E86-82B9-C53A90A54748" --Apple-Mail=_205D5D0A-04B2-4E86-82B9-C53A90A54748 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 All: There have been three draft updates [1][2][3]. Our next virtual interim = is coming up on Wednesday [4]. I=E2=80=99d like to propose the = following specific agenda: * Working group status - chairs, 10 minutes or less * Vulnerability assessment open issues - Danny Haynes, 20 minutes * Information model open issues - Danny Haynes, 40 minutes * SWID M&A open issues - Charles Schmidt, 40 minutes * Any other business - open, 10 minutes The above is a proposed agenda, which is open to bashing. I assigned = times for the vulnerability assessment and information model discussions = based on the number of open issues against each WG draft in GitHub [5]. = I think we might need a bit of time to address any remaining concerns = with respect to the SWID M&A draft, which is still being considered for = adoption (which could change by the time Wednesday gets here). If you have any suggestions to make on this proposed agenda, please = opine. Finally, we will need at least one note taker, and it would be best if = one or more folks volunteered before the meeting starts. Kind regards, Adam [1] Information Model - = https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/ = [2] Vulnerability Scenario - = https://datatracker.ietf.org/doc/draft-ietf-sacm-vuln-scenario/ = [3] SWID M&A - = https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ = [4] June virtual interim announcement - = https://mailarchive.ietf.org/arch/msg/sacm/NDLhlF38s1IwA3AgxNo05D3MSBI = [5] https://github.com/sacmwg --Apple-Mail=_205D5D0A-04B2-4E86-82B9-C53A90A54748 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 All:

There = have been three draft updates [1][2][3].  Our next virtual interim = is coming up on Wednesday [4].  I=E2=80=99d like to propose the = following specific agenda:

* Working group status - chairs, 10 minutes or less
* Vulnerability assessment open issues - Danny Haynes, 20 = minutes 
* Information model open issues - = Danny Haynes, 40 minutes
* SWID M&A open issues = - Charles Schmidt, 40 minutes
* Any other business = - open, 10 minutes

The above is a proposed agenda, which is open to bashing. =  I assigned times for the vulnerability assessment and information = model discussions based on the number of open issues against each WG = draft in GitHub [5].  I think we might need a bit of time to = address any remaining concerns with respect to the SWID M&A draft, = which is still being considered for adoption (which could change by the = time Wednesday gets here).

If you have any suggestions to make on this proposed agenda, = please opine.

Finally, we will need at least one note taker, and it would = be best if one or more folks volunteered before the meeting = starts.

Kind = regards,

Adam


[1] Information Model = - https://datatracker.ietf.org/doc/draft-ietf-sacm-information-mo= del/
[2] Vulnerability Scenario - https://datatracker.ietf.org/doc/draft-ietf-sacm-vuln-scenario/=
[3] SWID M&A - https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-pat= nc/
[4] June virtual interim announcement = - https://mailarchive.ietf.org/arch/msg/sacm/NDLhlF38s1IwA3AgxNo0= 5D3MSBI
[5] https://github.com/sacmwg 


= --Apple-Mail=_205D5D0A-04B2-4E86-82B9-C53A90A54748-- --Apple-Mail=_09CB3DCC-1FDF-4799-8B34-35983DA2342A Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXWVeRAAoJEDEhyx7etgABwE0QAL4bwY508Hzjx0f6D3FV99fg Q4pA70rhhSBKnyduoJ9XWzFZNQemHzCDMB6Tf3BOLoDBn6T3f72mjVExzzL5/yQP Yu8BX2K6MZn3aGCXKJRgh05sw5fxW5SEPqX7v0+Q3GYgMr2CWvhe89wsD2vTAdMS f/77SnhqijZUSmTkmN0yDt9YAEjwoizYRaF9Er0M7UWQxDhszv4Ch8vooBJTSBQR 4JLRnXVwLsyE1id0yjWrL3HI5rO6khr0dF03/yHeG5yPHAA9Mc2ebeGrUqMotyJZ avlj8xXgp5T9NC9CBU5fCbs3sjhjRso07HqVhi3m0FMxZMQilMSB8NAiI8rscrTI OZjrS/B8zdiZk5M9Be3xu370mqWViJvGPXFuDyyTKYjRW+dw5qVXefa4xmo6IGz9 t1OhIXgL3fkv3Pm7fLkfptbibn/yMyD55x0bPFLNo7oLKDMVIJW9SFFhUtdeAntq uv6mZ6JU/nnynUhfFEvy2D9IvkayymRheSW1AoTvpI5BXFPHs7gxs6pYfZmnCnQ8 yV0M663oantMGA21rMQnVIiDQfb2AL7FDDjaOjsr4ezJtp7Qp//RXFIrh9h6sBRl GpTT3Msun6cnAbbxK2XKxPqCbwYRcToGT8LP8H3HDDVATvHVGsQmgm00SqHd5i8n OgPS1oJC0U62u0IiWOl9 =0rOx -----END PGP SIGNATURE----- --Apple-Mail=_09CB3DCC-1FDF-4799-8B34-35983DA2342A-- From nobody Thu Jun 9 05:21:53 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C8D2312B012 for ; Thu, 9 Jun 2016 05:21:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.909 X-Spam-Level: X-Spam-Status: No, score=-5.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q6RBknOpKXbR for ; Thu, 9 Jun 2016 05:21:51 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 38CDB12D5AD for ; Thu, 9 Jun 2016 05:21:51 -0700 (PDT) Date: Thu, 09 Jun 2016 05:21:47 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465474907; bh=Vje6kB5gGxbnB3sOQuOt6Pq4AO+lOzP2gEYk8lhNikc=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=vJhW/3rTY2Ahhru1Xt1fAYfCX5kzcYV+owEVA2nKCUNXzTObhd9/YAmWN8gE5Wf9h J7KGIjmMJzRJdlLW1gXHkd+BG9DiGvX/yjYHWuEXX3PnhkpNENsKQz9YkWTLPpjpqr xvkLfoIo6+PKZPoO4ACMxXxaweEk2NvDMvmmalB8= From: Danny Haynes To: sacmwg/draft-ietf-sacm-information-model Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_57595f5b98eb1_65e33fe05ad2d2bc6893e2"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] Should SACM Components be defined in the IM? (#33) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/draft-ietf-sacm-information-model List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 12:21:53 -0000 ----==_mimepart_57595f5b98eb1_65e33fe05ad2d2bc6893e2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #33. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/33#event-687155738 ----==_mimepart_57595f5b98eb1_65e33fe05ad2d2bc6893e2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #33.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_57595f5b98eb1_65e33fe05ad2d2bc6893e2-- From nobody Thu Jun 9 05:35:36 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id D429D128874 for ; Thu, 9 Jun 2016 05:35:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.909 X-Spam-Level: X-Spam-Status: No, score=-5.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id y6I2WZktJ244 for ; Thu, 9 Jun 2016 05:35:33 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext1.iad.github.net [192.30.252.192]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 590CB12D5BD for ; Thu, 9 Jun 2016 05:35:33 -0700 (PDT) Date: Thu, 09 Jun 2016 05:35:32 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465475732; bh=EgEmdtWmZjKsR9NouuXBM20zlSrmxvw3/N3eZWAH3Qs=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=Ww1dkVmpfvmhJB+5OeS9S51410c5Pb1QRWIAKyGQ/Rs1aOzdi/c14vPZFssBGdUro wWI3PDf39R4HLYB6p9p0SZvQrwykxZ0Htvk7Di6RLzWlyAFJor9V2pk6WEWyzgQLZF zdmrh9ULPss00oZQnsatCDlu2apoWdyrw0mmZQ34= From: Danny Haynes To: sacmwg/draft-ietf-sacm-information-model Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_57596294915c6_5eb73f8a54adb2b8845d4"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-information-model] reference for ISO SWID tag (#2) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/draft-ietf-sacm-information-model List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 12:35:35 -0000 ----==_mimepart_57596294915c6_5eb73f8a54adb2b8845d4 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #2. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/2#event-687169484 ----==_mimepart_57596294915c6_5eb73f8a54adb2b8845d4 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #2.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_57596294915c6_5eb73f8a54adb2b8845d4-- From nobody Thu Jun 9 05:45:36 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 475FD12D5D0 for ; Thu, 9 Jun 2016 05:45:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.909 X-Spam-Level: X-Spam-Status: No, score=-5.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0sNEmI3qgl-s for ; Thu, 9 Jun 2016 05:45:31 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext6.iad.github.net [192.30.252.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF4F912B009 for ; Thu, 9 Jun 2016 05:45:31 -0700 (PDT) Date: Thu, 09 Jun 2016 05:45:30 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465476331; bh=pZgnRSz9TmuOdyKcU9UP4D/HB98cDE51iarbPtECXaw=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=D39eZkujsf816uBVI1Mk1fgw2XVvEkRQVv8nneLxxW+3vmPIzuNn2tHshI8KqeGiv LLAzHSaH9lTJwEgXsOKfg1pYaSuW9XB+HpWdPPtupCRSwUaWmQi7/r9eXxQbcMmztc p2dHh+5Aj5P0+t/RIWvo1wb/8cqu1BsOV57oH460= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575964eaecc23_4ada3f94c4e232c0105935"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] storage of collected data (#16) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 12:45:34 -0000 ----==_mimepart_575964eaecc23_4ada3f94c4e232c0105935 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #16. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/16#event-687180245 ----==_mimepart_575964eaecc23_4ada3f94c4e232c0105935 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #16.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575964eaecc23_4ada3f94c4e232c0105935-- From nobody Thu Jun 9 05:45:43 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3A99412D5D0 for ; Thu, 9 Jun 2016 05:45:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.909 X-Spam-Level: X-Spam-Status: No, score=-5.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XwZeHOoAObwR for ; Thu, 9 Jun 2016 05:45:38 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB53B12D5D3 for ; Thu, 9 Jun 2016 05:45:37 -0700 (PDT) Date: Thu, 09 Jun 2016 05:45:37 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465476337; bh=8AUrQoqcUiLINwBqyDcFfMyZOHhOOlkqmHcFeOajfV4=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=nCJk1+tHWuxBcn59kzDoiww4HT8/0/HDaTeQtHmw0I5VwQmZFG+y5v3DvsLLLHXtT HpG3ED17PAEqvdOOvqLIGwBJxyzsHq7syogXdKxPmlCXiMIeE0JYlQn5qrebc9QyYf N1vxc+/Y1nFNeMYEb2mxuZVmbrPe1XkmSxjYGirI= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575964f110ac9_4b323f94c4e232c02875d"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] defining targeted collection (#14) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 12:45:39 -0000 ----==_mimepart_575964f110ac9_4b323f94c4e232c02875d Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #14. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/14#event-687180346 ----==_mimepart_575964f110ac9_4b323f94c4e232c02875d Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #14.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575964f110ac9_4b323f94c4e232c02875d-- From nobody Thu Jun 9 05:46:50 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0D4CD12D5F2 for ; Thu, 9 Jun 2016 05:46:49 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.908 X-Spam-Level: X-Spam-Status: No, score=-5.908 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4gGbQGDPsJ_5 for ; Thu, 9 Jun 2016 05:46:47 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext4.iad.github.net [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8D85112D5DB for ; Thu, 9 Jun 2016 05:46:47 -0700 (PDT) Date: Thu, 09 Jun 2016 05:46:41 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465476401; bh=P9Sz4PznP7Wa4wuMBAh4NoQFI9iNdneTJ8iKTrbKsdA=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=YWobFI8dqGC4985JV9tO1udoaqqcDSbKL0aG5ed/B3x/OcfnWqYfAiCtgMxWuQ7+l v22ZgYIzrkF3q+mHIv41OymyLYBOiq+9O9TvMwHIPkEI5NOKYYgyZA3R5w9cUu/Igy B0berDpZsI4naFBK5XvgbNFwGlIj64YdrKaTuOL8= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575965315774b_6c0e3f8a54adb2b8368839"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] where do vulnerability assessment attributes belong (#17) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 12:46:49 -0000 ----==_mimepart_575965315774b_6c0e3f8a54adb2b8368839 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Addressed in https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt. A tracker has also been added for the IM (https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/43). --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/17#issuecomment-224883809 ----==_mimepart_575965315774b_6c0e3f8a54adb2b8368839 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Addressed in https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt. A tracker has also been added for the IM (sacmwg/draft-ietf-sacm-information-model#43).

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575965315774b_6c0e3f8a54adb2b8368839-- From nobody Thu Jun 9 05:48:18 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8DFB012D5D3 for ; Thu, 9 Jun 2016 05:48:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.942 X-Spam-Level: X-Spam-Status: No, score=-4.942 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3GvNAlG-ll8E for ; Thu, 9 Jun 2016 05:48:16 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext6.iad.github.net [192.30.252.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EEC5512D5AF for ; Thu, 9 Jun 2016 05:48:15 -0700 (PDT) Date: Thu, 09 Jun 2016 05:48:15 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465476495; bh=CRj8Fir9wS1YW3eaJWijOzdZSCi4JBXouivJ2FXysMY=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=AHUp4dGAK39sR0gR2eZ8aWea/DVDqf8HSdKdis/2vnHwrC4wAZfDobNhn7i5xHKMr zogIi15Pp/nW2Nvj+9HK3aXbfazEvPk/mLzNFe/C8mR3ak4WTy7q/FHIdFPhqY4N8t MibRpMv7rRftd0bOds5EeyHjjMnVJZ7FepzpHksk= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5759658f3f274_6e13fb3d532b2c0405180"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] storage of collected data (#16) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 12:48:17 -0000 ----==_mimepart_5759658f3f274_6e13fb3d532b2c0405180 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Based on mailing list feedback, no changes were needed here. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/16#issuecomment-224884174 ----==_mimepart_5759658f3f274_6e13fb3d532b2c0405180 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Based on mailing list feedback, no changes were needed here.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_5759658f3f274_6e13fb3d532b2c0405180-- From nobody Thu Jun 9 05:48:32 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C32BD12D5FF for ; Thu, 9 Jun 2016 05:48:31 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.942 X-Spam-Level: X-Spam-Status: No, score=-4.942 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BLLNZQZBW00R for ; Thu, 9 Jun 2016 05:48:29 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F099412D600 for ; Thu, 9 Jun 2016 05:48:27 -0700 (PDT) Date: Thu, 09 Jun 2016 05:48:27 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465476507; bh=zey36nufZMEuPEZPhv2r8P3g2MP0H/NTKqoG3lgtKMo=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=YGuICXHZ2unkunPLhwef3FwNp0riUeRtmJfJjMR4SCSOLzIgbLyX99LZK7G1n0Haz dR4kDCsexMwlITK2ps74Bx0yQOksXlTuTe5XfKNIwSz1qtT/Chr/wK1GWGSWbUXj67 xaAvnHxFTq7f4049QNnQSlaz6qyEiuXjrUtEXO8A= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5759659b40413_fa23ff6a8acb2bc1483f6"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] defining targeted collection (#14) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 12:48:32 -0000 ----==_mimepart_5759659b40413_fa23ff6a8acb2bc1483f6 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Addressed in https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/14#issuecomment-224884214 ----==_mimepart_5759659b40413_fa23ff6a8acb2bc1483f6 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Addressed in https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_5759659b40413_fa23ff6a8acb2bc1483f6-- From nobody Thu Jun 9 05:49:10 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BABFD12D5AF for ; Thu, 9 Jun 2016 05:49:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.909 X-Spam-Level: X-Spam-Status: No, score=-5.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Qi1lpCSYvUVT for ; Thu, 9 Jun 2016 05:49:06 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext8.iad.github.net [192.30.252.199]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5169612D5D0 for ; Thu, 9 Jun 2016 05:49:06 -0700 (PDT) Date: Thu, 09 Jun 2016 05:49:05 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465476545; bh=mVjaA8/KMm8tv7cYLypRtQdXvTlPJcO3AbQ0wqMcV9c=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=hgkxWV9VTdvuMS0ROiIO7YB8GNvHCFZZHskpKXJuYXbrqA8um3xAWVVdJp839eo5A BxC56Sbc819RzFfRsSnQg070DXzWzG4FlQSHX4zYWK49/R4rbFXRrBx4tWdt09ZA3Q +vRNrIRvHhQSGfN1Iy0gQ5q7DrOJbyh5rsK9Ocdw= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575965c180c78_72003fe88f8f129c2559ee"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] clarifying the definition of vulnerability detection data (#13) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 12:49:09 -0000 ----==_mimepart_575965c180c78_72003fe88f8f129c2559ee Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #13. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/13#event-687184128 ----==_mimepart_575965c180c78_72003fe88f8f129c2559ee Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #13.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575965c180c78_72003fe88f8f129c2559ee-- From nobody Thu Jun 9 05:49:19 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 22CF612D60A for ; Thu, 9 Jun 2016 05:49:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.942 X-Spam-Level: X-Spam-Status: No, score=-4.942 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t9fP8949HuNr for ; Thu, 9 Jun 2016 05:49:15 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext8.iad.github.net [192.30.252.199]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C942E12D60B for ; Thu, 9 Jun 2016 05:49:15 -0700 (PDT) Date: Thu, 09 Jun 2016 05:49:15 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465476555; bh=yYx4KuhMJHp+J/Kplj2IcKDpBG0N/QU/fvCvAu1u8E0=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=H9pX2Feo3cXGoDZTMCDXyx5/bTufGV1UjpfiReEVewT/OteRUYRVgm0QT+bOU2nuW RlMh4WGWXdTtmjipzQfjbuhnCytdVWoa2FDSRHYQ5bogn6p4zvxFgf8AKpTrGDGiJp /eDdpAA8Wu5dwsZVlk4/6/3HZzDfHQvlv5qBiako= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575965cb19663_4acd3f846aae32a01526a4"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] processing vulnerability description information (#15) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 12:49:17 -0000 ----==_mimepart_575965cb19663_4acd3f846aae32a01526a4 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Addressed in https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/15#issuecomment-224884399 ----==_mimepart_575965cb19663_4acd3f846aae32a01526a4 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Addressed in https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575965cb19663_4acd3f846aae32a01526a4-- From nobody Thu Jun 9 05:49:25 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5BDF312D5E3 for ; Thu, 9 Jun 2016 05:49:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.909 X-Spam-Level: X-Spam-Status: No, score=-5.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BMEWUo35iJtu for ; Thu, 9 Jun 2016 05:49:17 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0888D12D5AF for ; Thu, 9 Jun 2016 05:49:16 -0700 (PDT) Date: Thu, 09 Jun 2016 05:49:15 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465476555; bh=mOq3EmvHZG00U8jtjsPdgLudHgFoqVdkh3QGQWm6uPE=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=rH3prDqL5sQ2whZ87yHHk33atV+KYQO78837QkCYJWYSfRfg9Hw7tYqTXmhYV9XR1 BjDJn+A5AXP8HPWePe/V8FKidAePN1qEf2XORJg1bAxHutIJH7anlX0llujFhjgKuX boUdFe5L/jnj3TWjYh2L1nN+VG8PuXjZdwwN9+/0= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575965cb4ca8f_6c0e3f8a54adb2b8423056"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] processing vulnerability description information (#15) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 12:49:18 -0000 ----==_mimepart_575965cb4ca8f_6c0e3f8a54adb2b8423056 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #15. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/15#event-687184268 ----==_mimepart_575965cb4ca8f_6c0e3f8a54adb2b8423056 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #15.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575965cb4ca8f_6c0e3f8a54adb2b8423056-- From nobody Thu Jun 9 07:05:22 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 65E6C12B04D for ; Thu, 9 Jun 2016 07:05:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bE8rpPJR1_-O for ; Thu, 9 Jun 2016 07:05:13 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 3CCE612D60F for ; Thu, 9 Jun 2016 07:05:13 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id A9BE76C0ADE; Thu, 9 Jun 2016 10:05:12 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 951426C0ADD; Thu, 9 Jun 2016 10:05:12 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Thu, 9 Jun 2016 10:05:12 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Thu, 9 Jun 2016 10:05:11 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=cWG+3wVG8vMHACIN0b1Qenz4+9qRgZZE+dZxRpUL/Lg=; b=q76N08nBTcEzHp6vemhn7UWzHeVcWacN2U6V5CEd491VIEx8bskWkMJi0zb7nnWv+BL+2A7D3INmddVhZoFDZG6fXj2oSkWiyENbz6EW2fFObElZvBj+xO0T1GjITlGsUJfcoWfjIMGbHKdwd3w5NCMZEbit6DqaM7D4CjO/IFo= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) with Microsoft SMTP Server (TLS) id 15.1.517.8; Thu, 9 Jun 2016 14:05:10 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0517.005; Thu, 9 Jun 2016 14:05:09 +0000 From: "Haynes, Dan" To: "Haynes, Dan" , "Romascanu, Dan (Dan)" , "sacm@ietf.org" Thread-Topic: FOR REVIEW: IM Merge - Additional changes in the I-D IM to be considered for the WG IM Thread-Index: AdGvo6sPnva3kl2KT8q+VQFulOHDLwAgtHIAAAKQ6gABkxde0AFoTflwAY5KyrA= Date: Thu, 9 Jun 2016 14:05:09 +0000 Message-ID: References: <9904FB1B0159DA42B0B887B7FA8119CA751E4B5C@AZ-FFEXMB04.global.avaya.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.89] x-ms-office365-filtering-correlation-id: 4cc53f52-c00b-442f-7c3f-08d3906f1171 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1078; 6:KcoWOc51aIGMgvYgft16xFnoUW0C8yM4It1uGayDEwCao1bh0zOcPPCkjAO1+mnNQoXKTf6ew55rS8CcUZO5lVZBSiKbeUCi1VnRS/rYFR4iU6RNncB5EKu5G+ufEJE49no+C0bSvQmf+GDO0oW1kbGpmQS/jjy48uBwdRva8+BVzIkN7aP947Ev9mXxsxX6+rCKQmNJZpop3RExPnguTfnyrR0LEfgsLH44qSDS64bgd3rmfD3EaSL1wFZ+M0JyuGBO9tzCdgdvQTrtFFx/XpAlIige97dElGY/48eviBk=; 5:HKHeFVA4qIqXL/uCGNXVJBKVh0wQ8GeMqgJwbmZqEAZpHnW12fXBGb/HGgUxI9sNFCFVs0kze/sVRghX8flRNNgmGIohn8Gg7lKruCaP44DPxHIGsviyTPF06lHeAvTqXvEI0dKaZO5eMpMs4BXDiQ==; 24:GP9MPPZ2Rb0u33uztTIv6Mrzh379St2SFtkRULWrJlk+PLiPtL0K1QI1ydqQiTJRuG5EzECAG5XxSvVjjC5H8GrzYy/22OF21EE3hbz2PGs=; 7:jacgUsH98qIMdpLrjUXSdVAZd5yzz71T8A9rGrBD/AXBCWEumn9HE3L4rmgu28mMy+PbklvwyCVGPAWZfv4e3O1qL6wQY8TIBq0QXxWukKpucBw1Sq7HisHIgc8TfN0BM82gHcviG7D85i2uFlFvQY/TCn39SOcT2CrMVHzn+/PdmHktQo7UB6MrJQ2N6zSQq8QvxE0JRlSyzNGkeAV5bA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1078; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(10436049006162)(120809045254105)(166708455590820)(131327999870524)(788757137089)(21748063052155)(231250463719595); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:BY2PR09MB1078; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1078; x-forefront-prvs: 0968D37274 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(199003)(377454003)(53754006)(189002)(68736007)(9686002)(15975445007)(77096005)(31430400001)(8936002)(2501003)(5890100001)(101416001)(8676002)(81156014)(81166006)(66066001)(8666004)(2900100001)(2906002)(2950100001)(586003)(790700001)(6116002)(102836003)(3846002)(5008740100001)(19580405001)(5003600100002)(3660700001)(3280700002)(54356999)(92566002)(76176999)(50986999)(3900700001)(106356001)(19580395003)(105586002)(5002640100001)(10400500002)(189998001)(122556002)(74316001)(76576001)(99286002)(86362001)(19617315012)(87936001)(107886002)(93886004)(19625215002)(19300405004)(33656002)(5001770100001)(97736004)(5004730100002)(16236675004)(7059030)(564094006); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1078; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; CAT:NONE; LANG:en; CAT:NONE; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB1078725589A559CF67395BB9A55F0BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Jun 2016 14:05:09.4666 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1078 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] FOR REVIEW: IM Merge - Additional changes in the I-D IM to be considered for the WG IM X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 14:05:22 -0000 --_000_BY2PR09MB1078725589A559CF67395BB9A55F0BY2PR09MB1078namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Just a heads up, these changes have been posted in -05 which can be found a= t the following link. https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/ Thanks, Danny From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Wednesday, June 01, 2016 12:02 PM To: Romascanu, Dan (Dan) ; sacm@ietf.org Subject: Re: [sacm] FOR REVIEW: IM Merge - Additional changes in the I-D IM= to be considered for the WG IM So far, I haven't heard feedback on any of these changes. Do they all seem= reasonable? Most are straight forward, but, I know the group wanted to discuss SACM sta= tements and content-element structures more (for example). I am fine givin= g another day or two to review the changes if needed, but, I also need to h= ave all the changes in an updated draft for June 8th (next Wednesday) :). If you have any thoughts on these changes, please bring them up as soon as = possible so we can have any questions/issues resolved by Friday of this wee= k. Thanks, Danny From: Haynes, Dan Sent: Wednesday, May 25, 2016 8:20 AM To: Haynes, Dan >; Romascanu, D= an (Dan) >; sacm@ietf.org Subject: RE: FOR REVIEW: IM Merge - Additional changes in the I-D IM to be = considered for the WG IM Just an update on this. I committed the proposed changes regarding the merg= er in a branch in the IM GitHub repository [1]. For your convenience, I also have attached a updated text version so you ca= n diff it against the version up on the IETF site [2]. A couple of things to note about this draft (in addition to the changes lis= ted earlier in this thread): * Includes text for SACM Statements and SACM Content-Elements. Ther= e was discussion around whether or not this was needed at the Virtual Inter= im Meeting [3]. Please review and provide feedback. * Contains change from "Object" to "Subject". There is ongoing disc= ussion here [4]. * Does not include the IEs from the I-D IM. These will be carried o= ver once the IPFIX syntax is updated as long as there are no objections to = the proposed IEs. So far, we haven't heard any, but, the thread is here [5= ] in case you want to provide any feedback. * The WG IM is now "standards track" instead of "informational". I = had forgotten to update that in the XML version of the I-D when we made the= decision last year [6]. * Removes text about SACM Components [7]. This was discussed here [= 8]. * The updated IPFIX syntax is not included in this revision. As a reminder, we have put a deadline of May 31st for review and feedback s= o that we can have a revised draft for June 8th which is a week before the = next virtual interim meting (June 15th). Let me know if you have any questions. Thanks, Danny [1] https://github.com/sacmwg/draft-ietf-sacm-information-model/blob/propos= ed-im-merger-changes/draft-ietf-sacm-information-model.xml [2] https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/ [3] http://www.ietf.org/mail-archive/web/sacm/current/msg04043.html [4] http://www.ietf.org/mail-archive/web/sacm/current/msg04014.html [5] http://www.ietf.org/mail-archive/web/sacm/current/msg03961.html [6] https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/29 [7] https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/33 [8] http://www.ietf.org/mail-archive/web/sacm/current/msg03955.html From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Tuesday, May 17, 2016 7:42 AM To: Romascanu, Dan (Dan) >; s= acm@ietf.org Subject: Re: [sacm] FOR REVIEW: IM Merge - Additional changes in the I-D IM= to be considered for the WG IM Hi Dan, That seems like a reasonable request. I will take the current WG IM and in= tegrate the proposed changes from the I-D IM into it and send it out on thi= s thread so everyone can more easily review the changes. Thanks, Danny From: Romascanu, Dan (Dan) [mailto:dromasca@avaya.com] Sent: Tuesday, May 17, 2016 6:29 AM To: Haynes, Dan >; sacm@ietf.or= g Subject: RE: FOR REVIEW: IM Merge - Additional changes in the I-D IM to be = considered for the WG IM Hi, I do not know if I am the only one, but I have difficulties visualizing the= proposed changes as a 'dry' intellectual exercise. I suspect that you have a work-in-progress version that includes these chan= ges. Why do not you post it together with the Log of Changes, and we can mo= re easily see and debate what we like or do not like. Any I-D is anyway w-i= -p. Regards, Dan From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Monday, May 16, 2016 9:55 PM To: sacm@ietf.org Subject: [sacm] FOR REVIEW: IM Merge - Additional changes in the I-D IM to = be considered for the WG IM Hi Everyone, More recently, we have continued our I-D and WG IM merger work in Henk's Gi= tHub repository [1] for easier collaboration and in case anyone wants to fo= llow along with our progress :). With that said, Henk, Nancy, Mike, and I have spent some more time merging = the text between the I-D IM [1] and the WG IM [2] and would like to make so= me additional proposals. 1. Replace the text in the beginning of Section 3 of the WG IM with t= he text from Section "Structure of Information Elements" of the I-D IM (not= e: we plan to maintain the current IPFIX syntax sections although it will b= e updated in the near future to address some of the concerns Jim raised) 2. Insert Sections "SACM Content Elements" and "SACM Statements" of t= he I-D IM into Section 3 of the WG IM as subsections 3. Replace Section 3.4 of the WG IM with Section "Relationships" in t= he I-D IM 4. Insert Section "Events" of the I-D IM into the Section 3 of the WG= IM as a subsection. Remove Section 5.4.5 of the WG IM. Please review and provide any feedback by Tuesday May 31st. Let me know if= you have any questions. As a side note, we plan to briefly discuss SACM statements, content element= s, relationships, events, and categories at tomorrow's virtual interim meet= ing. Thanks, Danny [1] https://github.com/henkbirkholz/sacmim/blob/master/draft-camwinget-sacm= -information-model-01.md [2] https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/ --_000_BY2PR09MB1078725589A559CF67395BB9A55F0BY2PR09MB1078namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Just a heads up, these= changes have been posted in -05 which can be found at the following link.<= o:p>


https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/

 

Thanks,

Danny

 

From: sacm [mailto:sacm-bounces@ietf.org] = On Behalf Of Haynes, Dan
Sent: Wednesday, June 01, 2016 12:02 PM
To: Romascanu, Dan (Dan) <dromasca@avaya.com>; sacm@ietf.org Subject: Re: [sacm] FOR REVIEW: IM Merge - Additional changes in the= I-D IM to be considered for the WG IM

 

So far, I haven’= t heard feedback on any of these changes.  Do they all seem reasonable= ? 

 

Most are straight forw= ard, but, I know the group wanted to discuss SACM statements and content-el= ement structures more (for example).  I am fine giving another day or = two to review the changes if needed, but, I also need to have all the changes in an updated draft for June 8th<= /sup> (next Wednesday) J. 

 

If you have any though= ts on these changes, please bring them up as soon as possible so we can hav= e any questions/issues resolved by Friday of this week.

 

Thanks,

 

Danny

 

From: Haynes, Dan
Sent: Wednesday, May 25, 2016 8:20 AM
To: Haynes, Dan <dhaynes@mit= re.org>; Romascanu, Dan (Dan) <dromasca@avaya.com>; sacm@ietf.org
Subject: RE: FOR REVIEW: IM Merge - Additional changes in the I-D IM= to be considered for the WG IM

 

Just an update on this= . I committed the proposed changes regarding the merger in a branch in the = IM GitHub repository [1].

 

For your convenience, = I also have attached a updated text version so you can diff it against the = version up on the IETF site [2].

 

A couple of things to = note about this draft (in addition to the changes listed earlier in this th= read):

 

·         Includes text = for SACM Statements and SACM Content-Elements. There was discussion around = whether or not this was needed at the Virtual Interim Meeting [3]. Please r= eview and provide feedback.

·         Contains chang= e from “Object” to “Subject”. There is ongoing disc= ussion here [4].

·         Does not inclu= de the IEs from the I-D IM. These will be carried over once the IPFIX synta= x is updated as long as there are no objections to the proposed IEs.  = So far, we haven’t heard any, but, the thread is here [5] in case you want to provide any feedback.

·         The WG IM is n= ow “standards track” instead of “informational”. I = had forgotten to update that in the XML version of the I-D when we made the= decision last year [6].

·         Removes text a= bout SACM Components [7]. This was discussed here [8].

·         The updated IP= FIX syntax is not included in this revision.

 

As a reminder, we have= put a deadline of May 31st for review and feedback so that we c= an have a revised draft for June 8th which is a week before the = next virtual interim meting (June 15th).

 

Let me know if you hav= e any questions.

 

Thanks,


Danny

 

[1] https://github.com/sacmwg/draft-ie= tf-sacm-information-model/blob/proposed-im-merger-changes/draft-ietf-sacm-i= nformation-model.xml

[2] https://datatracker.i= etf.org/doc/draft-ietf-sacm-information-model/

[3] http://www.ietf.org/mail-= archive/web/sacm/current/msg04043.html

[4] http://www.ietf.org/mail-= archive/web/sacm/current/msg04014.html

[5] http://www.ietf.org/mail-= archive/web/sacm/current/msg03961.html

[6] https://github.com/= sacmwg/draft-ietf-sacm-information-model/issues/29

[7] https://github.com/= sacmwg/draft-ietf-sacm-information-model/issues/33

[8] http://www.ietf.org/mail-= archive/web/sacm/current/msg03955.html

 

 

From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan
Sent: Tuesday, May 17, 2016 7:42 AM
To: Romascanu, Dan (Dan) <d= romasca@avaya.com>; sacm@ietf.org
Subject: Re: [sacm] FOR REVIEW: IM Merge - Additional changes in the= I-D IM to be considered for the WG IM

 

Hi Dan,

 

That seems like a reas= onable request.  I will take the current WG IM and integrate the propo= sed changes from the I-D IM into it and send it out on this thread so every= one can more easily review the changes.

 

Thanks,

Danny

 

From: Romascanu, Dan (Dan) [mailto:dromasca@avaya.com]
Sent: Tuesday, May 17, 2016 6:29 AM
To: Haynes, Dan <dhaynes@mit= re.org>; sacm@ietf.org
Subject: RE: FOR REVIEW: IM Merge - Additional changes in the I-D IM= to be considered for the WG IM

 

Hi,<= /p>

 

I do not know if I am = the only one, but I have difficulties visualizing the proposed changes as a= ‘dry’ intellectual exercise.

 

I suspect that you hav= e a work-in-progress version that includes these changes. Why do not you po= st it together with the Log of Changes, and we can more easily see and deba= te what we like or do not like. Any I-D is anyway w-i-p.

 

Regards,

 

Dan<= /p>

 

 

From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan
Sent: Monday, May 16, 2016 9:55 PM
To: sacm@ietf.org
Subject: [sacm] FOR REVIEW: IM Merge - Additional changes in the I-D= IM to be considered for the WG IM

 

Hi Everyone,

 

More recently, we have continued our I-D and WG IM m= erger work in Henk’s GitHub repository [1] for easier collaboration a= nd in case anyone wants to follow along with our progress :).

 

With that said, Henk, Nancy, Mike, and I have spent = some more time merging the text between the I-D IM [1] and the WG IM [2] an= d would like to make some additional proposals.

 

1.  = ;     Replace the text in the beginning of Section 3 of the WG IM with the= text from Section “Structure of Information Elements” of the I= -D IM (note: we plan to maintain the current IPFIX syntax sections although= it will be updated in the near future to address some of the concerns Jim raised)

 

2.  = ;     Insert Sections “SACM Content Elements” and “SACM = Statements” of the I-D IM into Section 3 of the WG IM as subsections<= o:p>

 

3.  = ;     Replace Section 3.4 of the WG IM with Section “Relationships&#= 8221; in the I-D IM

 

4.  = ;     Insert Section “Events” of the I-D IM into the Section 3= of the WG IM as a subsection. Remove Section 5.4.5 of the WG IM.

 

Please review and provide any feedback by Tuesday Ma= y 31st.  Let me know if you have any questions.

 

As a side note, we plan to briefly discuss SACM stat= ements, content elements, relationships, events, and categories at tomorrow= ’s virtual interim meeting.

 

Thanks,

Danny

 

[1] https://github.com/henkbirkholz/sacmim/blob/master/draft-camwinget-sacm-inf= ormation-model-01.md

[2] https://datatracker.ietf.or= g/doc/draft-ietf-sacm-information-model/

 

 

--_000_BY2PR09MB1078725589A559CF67395BB9A55F0BY2PR09MB1078namp_-- From nobody Thu Jun 9 08:12:54 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 027B912B060 for ; Thu, 9 Jun 2016 08:12:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MnpTtQ_E0BPm for ; Thu, 9 Jun 2016 08:12:50 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext4.iad.github.net [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 60B6412B009 for ; Thu, 9 Jun 2016 08:12:50 -0700 (PDT) Date: Thu, 09 Jun 2016 08:12:49 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465485169; bh=yzvNBitKxfuwumSAA2L/l202Srctqi71fTR5QFRCdUY=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=Yq7gpUkuiJ/AwpeD/aSeeJVaG3k7RAh5XzIUZxIXt+Y3lnd9sz++EuaRnrZvSy6am d7bq70RWw3M2g2XiizqUKQwb+/L9wu2lUl0sLz9hZdO3FXrRRz9tyiTuKUSGsINSZQ D0TulxnhdFRsNUIoSFtM9UAjl7EsXbBHG7s7sNK8= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_57598771638f0_37ee3fcb30b3929c15501"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/vulnerability-scenario] review appendices and include references (#18) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 15:12:52 -0000 ----==_mimepart_57598771638f0_37ee3fcb30b3929c15501 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit We should review the appendices and include the appropriate references to them through the main body of the document. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/18 ----==_mimepart_57598771638f0_37ee3fcb30b3929c15501 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

We should review the appendices and include the appropriate references to them through the main body of the document.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_57598771638f0_37ee3fcb30b3929c15501-- From nobody Thu Jun 9 08:22:27 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A45BA12D0AA for ; Thu, 9 Jun 2016 08:22:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xwyKRsiQBYIv for ; Thu, 9 Jun 2016 08:22:24 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext4.iad.github.net [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DE52912B03A for ; Thu, 9 Jun 2016 08:22:23 -0700 (PDT) Date: Thu, 09 Jun 2016 08:22:23 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465485743; bh=En01sGiMQBmtvV7JXGlhZ5X0Nmj/s4542KbQNw+x70A=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=YFsxnGLvLElQdd8ae52D9McCPIjiQTGJhhfkTO/ZZszufPvvU5JuWzzCHky6vOyrY AzrVzLrQiIkoG9ZMfk73K6zDgta8jEGHrbScXk6uhLwz8vkPBNULZ6fB2AJ1KteZ9F Zb3Pmuiw1WFe/FxgCsa+spT/kzhjxtT7tkh9FoPw= From: Jerome Athias To: sacmwg/vulnerability-scenario Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575989af30108_53993fa74796d2b82518c7"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/vulnerability-scenario] typo Vulnerability rememdiation (#19) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 15:22:25 -0000 ----==_mimepart_575989af30108_53993fa74796d2b82518c7 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Vulnerability rememdiation should be Vulnerability remediation --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/19 ----==_mimepart_575989af30108_53993fa74796d2b82518c7 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Vulnerability rememdiation
should be
Vulnerability remediation

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575989af30108_53993fa74796d2b82518c7-- From nobody Thu Jun 9 12:47:59 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 8B6A412B031 for ; Thu, 9 Jun 2016 12:47:58 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Q3eIqcb21JyT for ; Thu, 9 Jun 2016 12:47:56 -0700 (PDT) Received: from mail-oi0-x22a.google.com (mail-oi0-x22a.google.com [IPv6:2607:f8b0:4003:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id ABD4E12D561 for ; Thu, 9 Jun 2016 12:47:54 -0700 (PDT) Received: by mail-oi0-x22a.google.com with SMTP id w5so1233401oib.2 for ; Thu, 09 Jun 2016 12:47:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:subject:from:in-reply-to:date:message-id:references:to; bh=KXdn+oO4zCyx9POaSZclHbmYeh1PSbCJJQsyqWkOzzg=; b=v/SMsUEo/TxSTVCVTyP/qwngaG+YDa8oPGEAACd7G2VLBQMb22/rBbTWgAYy83iZd7 OLj7Sz9SWkj11rQiucFQgXvMQc1YQQqvgdF1KXOs+QaifTiXbfYLwELw8VeUlP1JmjyK EH9TIMlP2VMCf6pO46AcZVy0esXEbGiMQQipigXwXvKKYSWsXiunMKkZy14gMD9pWo+v mpLrmNuhqG8cbL4lFkAgcSrpYHg6HFjJ+p0Ui85nw/waqlYiXjn2CSS/M+QxCWm3EK6f XjxmAhRGdGBihI8sJMWJhBbcqNvwq2fmYmHG/ohtY5wJ4minxuJtG70yj5MhDm3MeN8f XThA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:subject:from:in-reply-to:date :message-id:references:to; bh=KXdn+oO4zCyx9POaSZclHbmYeh1PSbCJJQsyqWkOzzg=; b=OZtjgDMxF0tQAa1k8BEDqmnbIiF/Y2N6dW2pvW3Snj5yI589eHZo+F8uVvbD2YDN6T My1A9MCEN3TGZO4Z+t0L35MPSLuMVpqKkdzaVcNm3pChm/3KwZ1G55+TtO4Tei/+vTV8 37LVYpVs7PODX/Lhb+pCozPenrZFFNMDCqJ26HoyDeKlA++pUu4vebeG4JbYbylToZOa xvf+Oa1veT4+Z9tM7Zfj6z9mfN0x3kPUv1g82FE5dJHARNZeGNbH/Q9y6fy+QHmSgSw2 7W6uX2+2SCy/qrdVaS1Kzl6UlYOnAlVZGgRek8KqY++Q/sSY9F4XdYJEbe4ptDNZsgtr HPcQ== X-Gm-Message-State: ALyK8tKrPp3rY00hrKvB3KDeiVB3jAMUX+5s34K0oftYWdwdRbic7eeQQVjb4ek8wS79vw== X-Received: by 10.202.86.13 with SMTP id k13mr5943573oib.3.1465501673558; Thu, 09 Jun 2016 12:47:53 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id 59sm3572686otn.37.2016.06.09.12.47.51 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 09 Jun 2016 12:47:52 -0700 (PDT) Content-Type: multipart/signed; boundary="Apple-Mail=_4996D370-0B49-4F96-A95A-B28D30E41DE1"; protocol="application/pgp-signature"; micalg=pgp-sha512 Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> Date: Thu, 9 Jun 2016 14:47:47 -0500 Message-Id: References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> To: "" X-Mailer: Apple Mail (2.3124) Archived-At: Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 19:47:58 -0000 --Apple-Mail=_4996D370-0B49-4F96-A95A-B28D30E41DE1 Content-Type: multipart/alternative; boundary="Apple-Mail=_F05E9381-05C1-49E2-A280-D454F47899AD" --Apple-Mail=_F05E9381-05C1-49E2-A280-D454F47899AD Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii All: After several on-list discussions, the last virtual interim, and the = discussions surrounding this call for adoption, the chairs acknowledge = that there are some key concerns with this draft, but also see that = there is rough consensus for adoption. We additionally note that no = other solutions to the problem of software identification have been = submitted to the working group [1]. Because the topic of software identification, and SWID in particular, = appears to be a contentious one, we are designating Charles Schmidt and = Gunnar Engelbach as editors of the working group draft [2]. We believe = that Charles and Gunnar will bring the necessary balance to this draft, = so that the key concerns are sufficiently addressed. Kind regards, Adam & Karen [1] This draft adoption does not preclude future alternative submissions [2] Note that original authors will remain authors, but Charles and = Gunnar will hold the pen. > On May 17, 2016, at 11:21 AM, Karen O'Donoghue = wrote: >=20 > Folks, >=20 > As discussed during our last couple of meetings, this is the official = call for adoption of = https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ = as = a SACM working group document. >=20 > Please reply with any comments or concerns along your support of this = action to the mailing list. >=20 > Thanks, > Karen and Adam > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm --Apple-Mail=_F05E9381-05C1-49E2-A280-D454F47899AD Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii
All:

After several on-list discussions, the = last virtual interim, and the discussions surrounding this call for = adoption, the chairs acknowledge that there are some key concerns with = this draft, but also see that there is rough consensus for adoption. =  We additionally note that no other solutions to the problem of = software identification have been submitted to the working group = [1].

Because = the topic of software identification, and SWID in particular, appears to = be a contentious one, we are designating Charles Schmidt and Gunnar = Engelbach as editors of the working group draft [2].  We believe = that Charles and Gunnar will bring the necessary balance to this draft, = so that the key concerns are sufficiently addressed.

Kind regards,

Adam & = Karen

[1] This = draft adoption does not preclude future alternative = submissions
[2] Note that original authors will = remain authors, but Charles and Gunnar will hold the pen.


On May 17, 2016, at 11:21 AM, = Karen O'Donoghue <odonoghue@isoc.org> wrote:

Folks,

As discussed during our last couple of meetings, this is = the official call for adoption of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-pat= nc/ as a SACM working group document. 

Please reply with any comments or concerns along your = support of this action to the mailing list. 

Thanks,
Karen and Adam
_______________________________________________
sacm = mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_F05E9381-05C1-49E2-A280-D454F47899AD-- --Apple-Mail=_4996D370-0B49-4F96-A95A-B28D30E41DE1 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXWcfmAAoJEDEhyx7etgAB490QAMKybUv0YjUUIFn3jSb030gU Bu6+CywrpmUttq4zCByIajjfJvT9+h5psjzgJBWvc3/4u8bJTTKiLPDcddq2FHDN eaYXoagBo98WzpGzIn5lAPS+yF8ZyuMFjy4nEkeLQX/obAajPYSM6xIo26sA7UYq 5hBPQPMvFnN69AJ+70rZvQghwFDJJwoZc0PLDOxXyNQKr9AAlov1aSLdPS8A4D93 5nDHDWXF3bRkcnMCJf1pKi+9cUbM0R4vMsBIdu1liVoi7RLvVGasqfBoMRNmeqzi hM5N87t9lVPfI7Cl+UqnfouhETRLUAICZ4MtHoBukT9MYV5ZIDYc3ruYZpA2Tvfb PhiRZCT/asFENagRasPmG3f1Ml6FlMZrqotY/OO7vNgAwwADiGju7AsIHSaMeKUX DK+/qGLQDWHw0Lr8/n8UkVaVFcaHKYN7oOkwZ2z4wFBtRPWBEhd4T9NbIJNbR31W +143VT1Nihk/PP50M+cTi4IxdBIYaTIptHJfRBy/D+2bDb7Oi3rWIKa4YVjmgfE1 irnFahwOZyt10HRY1yKUnzAYFmyMA6wnaQcwkohVzmgqamfl3sqqbN1heZyKPcLn HcQnsnpFMh4JbR0uP3GcN1lUoaIMVYiCIbiy2Sq6+PifhTcuajxINLBARd66qooz dl8vbrgaZ3Ei9ldWOpED =qrDg -----END PGP SIGNATURE----- --Apple-Mail=_4996D370-0B49-4F96-A95A-B28D30E41DE1-- From nobody Thu Jun 9 14:33:09 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 58D8412DA13 for ; Thu, 9 Jun 2016 14:33:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2Ui-nLNl4iqV for ; Thu, 9 Jun 2016 14:33:06 -0700 (PDT) Received: from sc9-admin1.yaanatech.net (63-128-177-34-static.dzbja.com [63.128.177.34]) by ietfa.amsl.com (Postfix) with ESMTP id 3A58212D9BD for ; Thu, 9 Jun 2016 14:33:05 -0700 (PDT) Received: from extmail1.yaanatech.com (extmail1.yaanatech.com [63.128.177.51]) by sc9-admin1.yaanatech.net (Postfix) with ESMTP id 17E93146; Thu, 9 Jun 2016 21:33:05 +0000 (UTC) Received: from [192.168.1.51] (pool-173-67-205-17.clppva.fios.verizon.net [173.67.205.17]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by extmail1.yaanatech.com (Postfix) with ESMTP id AA98758086; Thu, 9 Jun 2016 21:27:32 +0000 (UTC) References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> To: Adam Montville , "" From: Tony Rutkowski Organization: Yaana Technologies Message-ID: <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> Date: Thu, 9 Jun 2016 17:33:03 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------0B3D2B123BE3FB8DC9A603BD" Archived-At: Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: tony@yaanatech.com List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 21:33:08 -0000 This is a multi-part message in MIME format. --------------0B3D2B123BE3FB8DC9A603BD Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Hi Adam, A good solution. Charles and Gunnar should also engage in some proactive outreach. Simply stating that "no other solutions to the problem of software identification have been submitted" is preposterous when there are so many out there. IMHO, one of the long-standing problems with SACM is its institutional and participatory insularity in an arena where so many almost identical activities are occurring in other venues where there is far greater industry participation. Ignoring them diminishes the value of whatever SACM accomplishes. --tony On 2016-06-09 3:47 PM, Adam Montville wrote: > All: > > After several on-list discussions, the last virtual interim, and the > discussions surrounding this call for adoption, the chairs acknowledge > that there are some key concerns with this draft, but also see that > there is rough consensus for adoption. We additionally note that no > other solutions to the problem of software identification have been > submitted to the working group [1]. > > Because the topic of software identification, and SWID in particular, > appears to be a contentious one, we are designating Charles Schmidt > and Gunnar Engelbach as editors of the working group draft [2]. We > believe that Charles and Gunnar will bring the necessary balance to > this draft, so that the key concerns are sufficiently addressed. > > Kind regards, > > Adam & Karen > > [1] This draft adoption does not preclude future alternative submissions > [2] Note that original authors will remain authors, but Charles and > Gunnar will hold the pen. > > >> On May 17, 2016, at 11:21 AM, Karen O'Donoghue > > wrote: >> >> Folks, >> >> As discussed during our last couple of meetings, this is the official >> call for adoption of >> https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as >> a SACM working group document. >> >> Please reply with any comments or concerns along your support of this >> action to the mailing list. >> >> Thanks, >> Karen and Adam >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm --------------0B3D2B123BE3FB8DC9A603BD Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit Hi Adam,

A good solution.  Charles and Gunnar should also engage
in some proactive outreach.  Simply stating that "no other
solutions to the problem of software identification have
been submitted" is preposterous when there are so many
out there.  IMHO, one of the long-standing problems with
SACM is its institutional and participatory insularity in an
arena where so many almost identical activities are occurring
in other venues where there is far greater industry participation.
Ignoring them diminishes the value of whatever SACM
accomplishes.

--tony

On 2016-06-09 3:47 PM, Adam Montville wrote:
All:

After several on-list discussions, the last virtual interim, and the discussions surrounding this call for adoption, the chairs acknowledge that there are some key concerns with this draft, but also see that there is rough consensus for adoption.  We additionally note that no other solutions to the problem of software identification have been submitted to the working group [1].

Because the topic of software identification, and SWID in particular, appears to be a contentious one, we are designating Charles Schmidt and Gunnar Engelbach as editors of the working group draft [2].  We believe that Charles and Gunnar will bring the necessary balance to this draft, so that the key concerns are sufficiently addressed.

Kind regards,

Adam & Karen

[1] This draft adoption does not preclude future alternative submissions
[2] Note that original authors will remain authors, but Charles and Gunnar will hold the pen.


On May 17, 2016, at 11:21 AM, Karen O'Donoghue <odonoghue@isoc.org> wrote:

Folks,

As discussed during our last couple of meetings, this is the official call for adoption of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as a SACM working group document. 

Please reply with any comments or concerns along your support of this action to the mailing list. 

Thanks,
Karen and Adam
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm



_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

--------------0B3D2B123BE3FB8DC9A603BD-- From nobody Thu Jun 9 16:57:40 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C023512B057 for ; Thu, 9 Jun 2016 16:57:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8E_OZW6ykqEL for ; Thu, 9 Jun 2016 16:57:36 -0700 (PDT) Received: from mail-pf0-x236.google.com (mail-pf0-x236.google.com [IPv6:2607:f8b0:400e:c00::236]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9B46512B034 for ; Thu, 9 Jun 2016 16:57:36 -0700 (PDT) Received: by mail-pf0-x236.google.com with SMTP id y124so17583256pfy.0 for ; Thu, 09 Jun 2016 16:57:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=eCJV5F7XvO/xDib8RT9NxTj2Lw+zqX4TTv8vt3UUCnI=; b=pMWuvZgPI5rInP+fbD16OVTmfafOks0ZZ8g+pA3NzkQNfkvIZIKNS0g0pT7i/0DKrh /PlTemMFkcdABD5zgeeG/CEmthgh8k5aMSmKYFNkBS93E2PE0U9GotelNV7uxYE85K8P KtogK3tFOBLr+J7A/SBokzRx39JU5Tv/kYqI5TM2HNOlZ1d89chS/bBCInF7PmXUW/PW GiIVb5JNPGf1di/Z0uaiWPmgnN6JRgzf5JnV/ZhIk9jPv4EIM8K64psnUy+bTS7LGTFG Sq4Bp6wwnJiW/vIE8mULUanaZZXWeb4ECdt4H5wu+Lg6DKU81Cxr+bXc7zNAroauNJfY BTfw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=eCJV5F7XvO/xDib8RT9NxTj2Lw+zqX4TTv8vt3UUCnI=; b=J4zCBiJMQvKWLHAAiDLqRMm3AnfL+n46zCe9O4GvF7kOVNNjjKAhlk+oI1QcU+nw0N NoazkBt+y5ax/lSno1UImyaxrundEgb5H9XUkP93GL+8B4Y1uJ1v4unwT2WHA+UMqnZZ ZGcyqbtPyWPH8tOaq5QSV3B9iE3SYsGiYlWzjogCEvVVOSWAFO0ZRQxXRvsA81t7Jemk nLleNfyoI3knDly3EcKAvjnrdvaYEYD3ej4BL4MHKf8Z4f/zi3UJSFy5ZtdBN/D4mg7K svEH8MCMZ9RK/UmxMcZ4Og9mDErLokFXqLPsZs1MWnjVY9ZKYfuievHI/BrAaeoA8x+5 +6Hw== X-Gm-Message-State: ALyK8tImqzBedVUyH+AiJgDNN/nxXhun1GEiRd1BQRrSU+3sz/GiZKHoKcFGkPUma0+DIQ== X-Received: by 10.98.149.10 with SMTP id p10mr3875165pfd.88.1465516656152; Thu, 09 Jun 2016 16:57:36 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id s8sm12560430pav.39.2016.06.09.16.57.32 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 09 Jun 2016 16:57:33 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_9EEB5908-0AE1-4576-AB40-ADF3693C29D1"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> Date: Thu, 9 Jun 2016 18:57:27 -0500 Message-Id: References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> To: tony@yaanatech.com X-Mailer: Apple Mail (2.3124) Archived-At: Cc: "" Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 09 Jun 2016 23:57:39 -0000 --Apple-Mail=_9EEB5908-0AE1-4576-AB40-ADF3693C29D1 Content-Type: multipart/alternative; boundary="Apple-Mail=_61734FF9-1761-42BA-9758-7FAF89737658" --Apple-Mail=_61734FF9-1761-42BA-9758-7FAF89737658 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Tony, This working group has, on several occasions, reached out formally to = other standards development organizations very early on in our work, and = I believe you are well aware of such facts. I don=92t believe we=92re ignoring anything or being insular or making = preposterous statements, but I am pleased to see that you like the = adopted solution. Kind regards, Adam > On Jun 9, 2016, at 4:33 PM, Tony Rutkowski wrote: >=20 > Hi Adam, >=20 > A good solution. Charles and Gunnar should also engage > in some proactive outreach. Simply stating that "no other > solutions to the problem of software identification have > been submitted" is preposterous when there are so many > out there. IMHO, one of the long-standing problems with > SACM is its institutional and participatory insularity in an > arena where so many almost identical activities are occurring > in other venues where there is far greater industry participation. > Ignoring them diminishes the value of whatever SACM > accomplishes. >=20 > --tony >=20 > On 2016-06-09 3:47 PM, Adam Montville wrote: >> All: >>=20 >> After several on-list discussions, the last virtual interim, and the = discussions surrounding this call for adoption, the chairs acknowledge = that there are some key concerns with this draft, but also see that = there is rough consensus for adoption. We additionally note that no = other solutions to the problem of software identification have been = submitted to the working group [1]. >>=20 >> Because the topic of software identification, and SWID in particular, = appears to be a contentious one, we are designating Charles Schmidt and = Gunnar Engelbach as editors of the working group draft [2]. We believe = that Charles and Gunnar will bring the necessary balance to this draft, = so that the key concerns are sufficiently addressed. >>=20 >> Kind regards, >>=20 >> Adam & Karen >>=20 >> [1] This draft adoption does not preclude future alternative = submissions >> [2] Note that original authors will remain authors, but Charles and = Gunnar will hold the pen. >>=20 >>=20 >>> On May 17, 2016, at 11:21 AM, Karen O'Donoghue >> wrote: >>>=20 >>> Folks, >>>=20 >>> As discussed during our last couple of meetings, this is the = official call for adoption of = https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ = as = a SACM working group document. >>>=20 >>> Please reply with any comments or concerns along your support of = this action to the mailing list. >>>=20 >>> Thanks, >>> Karen and Adam >>> _______________________________________________ >>> sacm mailing list >>> sacm@ietf.org > >>> https://www.ietf.org/mailman/listinfo/sacm = >>=20 >>=20 >>=20 >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm = --Apple-Mail=_61734FF9-1761-42BA-9758-7FAF89737658 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252
Tony,

This working group has, on several = occasions, reached out formally to other standards development = organizations very early on in our work, and I believe you are well = aware of such facts.

I don=92t believe we=92re ignoring anything or being insular = or making preposterous statements, but I am pleased to see that you like = the adopted solution.

Kind regards,

Adam

On Jun 9, 2016, at 4:33 PM, Tony Rutkowski = <tony@yaanatech.com> wrote:

Hi Adam,

A good solution.  Charles and Gunnar should = also engage
in some proactive outreach.  Simply stating = that "no other
solutions to the problem of software = identification have
been submitted" is preposterous when = there are so many
out there.  IMHO, one of the long-standing = problems with
SACM is its institutional and participatory = insularity in an
arena where so many almost identical activities = are occurring
in other venues where there is far greater = industry participation.
Ignoring them diminishes the value of = whatever SACM
accomplishes.

--tony

On 2016-06-09 3:47 PM, Adam Montville = wrote:
All:

After several on-list discussions, the last = virtual interim, and the discussions surrounding this call for adoption, = the chairs acknowledge that there are some key concerns with this draft, = but also see that there is rough consensus for adoption.  We = additionally note that no other solutions to the problem of software = identification have been submitted to the working group [1].

Because the topic of software identification, = and SWID in particular, appears to be a contentious one, we are = designating Charles Schmidt and Gunnar Engelbach as editors of the = working group draft [2].  We believe that Charles and Gunnar will = bring the necessary balance to this draft, so that the key concerns are = sufficiently addressed.

Kind regards,

Adam & Karen

[1] This draft adoption does not preclude future alternative = submissions
[2] Note that original authors will remain = authors, but Charles and Gunnar will hold the pen.


On May = 17, 2016, at 11:21 AM, Karen O'Donoghue <odonoghue@isoc.org <mailto:odonoghue@isoc.org>> wrote:

Folks,

As discussed during our = last couple of meetings, this is the official call for adoption of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-pat= nc/ as a SACM = working group document.

Please reply with = any comments or concerns along your support of this action to the = mailing list.

Thanks,
Karen = and Adam
_______________________________________________
sacm mailing list
sacm@ietf.org <mailto:sacm@ietf.org>
https://www.ietf.org/mailman/listinfo/sacm



_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_61734FF9-1761-42BA-9758-7FAF89737658-- --Apple-Mail=_9EEB5908-0AE1-4576-AB40-ADF3693C29D1 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXWgJqAAoJEDEhyx7etgABzLwQANEY0Qs9OXNTZ3ruB/VNbHFN YMJ3HpBIolqUPvG7i3qbIcJniaePKCRGCxYBctfdDt7GXnsf8puyI6cIJ7CaZFc3 JoJc0jn78ghPx8MOl5ubODadOF8snmEOQ9+md8SX5l8dcjfzXdZy9cm0mS47IyFh 5UBK/hbLIEUR5rnn8XrOmixUCBz6sRYaUlhJ0Dn5tG9o2puMIvVzZiTFSU4nUPjv CX71hHW5+sbrN3zw1DyDplpqStWsVBE6h3w5QN29aX7Cw1IKwDeH3BdOyTgdhr6q FVRyS0i/ihfP7qmOvGycRs6RsvNOfC+W4QGR14nyvQYY1t+1KI+7A/vMYXKA5ENR N6qJmUpvxQtrD1jjcfxkoGAN93BV906DoW1e2ikrIUOr5vgW3ise0YWtq4CSEIw2 /tTdkldhsnx+oSpDMxlVsBt5gebRTyK2hbe/FgWY5TR0vt+YCspUANUPrQ1oTuDC G7c+XEwPusnPua6beyFjd49ARdtx8ASQjJzzqrQbUhEiBYuyzd71Ef2GaQCBM/SK ia4ye1N5Du2N2Ilo/Jbna7Dj5FGV8sVOY/1NLFnfY30EopFe+mVjAVBtHAHwD6LP ejnD5xWFOpLkLLMUfVhunYB9S8NWlYtjjYUmnH4cmT8wC7eOiBOwH/FVuTtMhU9Q IhzMEZZ3M1WkPpaMnVp7 =BMRl -----END PGP SIGNATURE----- --Apple-Mail=_9EEB5908-0AE1-4576-AB40-ADF3693C29D1-- From nobody Thu Jun 9 17:05:02 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 682AE12DA4A for ; Thu, 9 Jun 2016 17:05:01 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UF4vSBFspzwM for ; Thu, 9 Jun 2016 17:05:00 -0700 (PDT) Received: from sc9-admin2.yaanatech.net (63-128-177-42-static.dzbja.com [63.128.177.42]) by ietfa.amsl.com (Postfix) with ESMTP id 3879F12DA45 for ; Thu, 9 Jun 2016 17:05:00 -0700 (PDT) Received: from extmail1.yaanatech.com (extmail1.yaanatech.com [63.128.177.51]) by sc9-admin2.yaanatech.net (Postfix) with ESMTP id E0AF81B6; Fri, 10 Jun 2016 00:04:59 +0000 (UTC) Received: from [192.168.1.51] (pool-173-67-205-17.clppva.fios.verizon.net [173.67.205.17]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by extmail1.yaanatech.com (Postfix) with ESMTP id 7717058086; Thu, 9 Jun 2016 23:59:27 +0000 (UTC) References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> To: Adam Montville From: Tony Rutkowski Organization: Yaana Technologies Message-ID: <4daad106-ff4f-2a62-c896-b64c9f9a50e8@yaanatech.com> Date: Thu, 9 Jun 2016 20:04:58 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------B0DBE4143C1AC16375555502" Archived-At: Cc: "" Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: tony@yaanatech.com List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jun 2016 00:05:01 -0000 This is a multi-part message in MIME format. --------------B0DBE4143C1AC16375555502 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: quoted-printable Adam, I don't buy the "group has...reached out." That's like the ITU-T game of sending out "liaison statements" to other groups asking for their reactions to some work item. You have to task someone to go look at all the many pointers that have been provided - do the research and analysis and incorporate their solutions in what you are doing. Try breaking out of your walls of insularity. --tony On 2016-06-09 7:57 PM, Adam Montville wrote: > This working group has, on several occasions, reached out formally to=20 > other standards development organizations very early on in our work,=20 > and I believe you are well aware of such facts. > --------------B0DBE4143C1AC16375555502 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit Adam,

I don't buy the "group has...reached out."   That's like
the ITU-T game of sending out "liaison statements"
to other groups asking for their reactions to
some work item.   You have to task someone to
go look at all the many pointers that have been
provided - do the research and analysis and
incorporate their solutions in what you are doing.
Try breaking out of your walls of insularity.

--tony

On 2016-06-09 7:57 PM, Adam Montville wrote:
This working group has, on several occasions, reached out formally to other standards development organizations very early on in our work, and I believe you are well aware of such facts.



--------------B0DBE4143C1AC16375555502-- From nobody Thu Jun 9 17:44:53 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 17FA312DA5D for ; Thu, 9 Jun 2016 17:44:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=threatguard-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id bDttfu-sDzMZ for ; Thu, 9 Jun 2016 17:44:49 -0700 (PDT) Received: from mail-pa0-x233.google.com (mail-pa0-x233.google.com [IPv6:2607:f8b0:400e:c03::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BEA2E12D842 for ; Thu, 9 Jun 2016 17:44:49 -0700 (PDT) Received: by mail-pa0-x233.google.com with SMTP id ec8so18085445pac.0 for ; Thu, 09 Jun 2016 17:44:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=threatguard-com.20150623.gappssmtp.com; s=20150623; h=from:subject:to:references:message-id:date:user-agent:mime-version :in-reply-to; bh=JLHmA5I9u1gczfoGhfhB3VPglFpX6H+UEd6K+GaU2PY=; b=mMpDZzLlLohom8lntrNRdr2y0quxlM9bxDiB+Qx09ra9rER14AuaH4w9E6Qh1Hp26F 0Qe6ZBhTY6AJty2aO5hxP09gm+ZFo9GVZkjTORdky1rCDoOfytwpN9xXLTVf49qbfXiU O25I9vKj3dWwT4aQjnrcIIPHgBvukEGzG5Du5VBdCVcgVC+kLpHPXk+KU7mWm9bjIdED XBOlCu8gCQKPdNdzTOgvKk4sO/ZpK9IuZr9UCo/2KOsKQpQDzB4+RpDYewuEp/rn6Q3I j+hCPG/42bJKLKaa/iTKdjN0SbUlLLCPG2ELs9c0OfOJx2KTMcha+JK+LSIGZRz0Cn9l LHwQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:references:message-id:date :user-agent:mime-version:in-reply-to; bh=JLHmA5I9u1gczfoGhfhB3VPglFpX6H+UEd6K+GaU2PY=; b=gxSLknAJeJ/VBSyRNlOyi2BU7150PLOf8+KOUOeygJx8LzPJZt6H4GK+v1sLSH7uyB 0xItTezNvQGQipLeREvfQwNbjakmCPZ2HqnOH79x8xzd7vLzowG25eIb5Vd5iq3wBTPN 8DG6AZ6O5uzCysQEgoiAIVBitVHu+55BouDJpnf6Qs/2UF3Lt6bp3mQQ/qBLbVFysZ4A ou32vHBJXtJG6XB6H1/y2MmmcHg9xxVG59VzerCZbpbdBJlN4H5N8ZHDnYwKqHpAE/Ai sC9VxwikjLsWY8Y4DAJePDQ/OZOeFT3vl3DJBAw4fZ7Nn/eIm8Lr0WGA2OteVgVyx14I TPBw== X-Gm-Message-State: ALyK8tLNkfDRIs2bpTG9vGY6zfQO0Ti6DlqS1ptumga89nhr+KReZ6FZPd2lasftaQHcfQ== X-Received: by 10.66.168.109 with SMTP id zv13mr15322356pab.10.1465519489272; Thu, 09 Jun 2016 17:44:49 -0700 (PDT) Received: from [172.16.1.122] (75-142-12-171.dhcp.mdfd.or.charter.com. [75.142.12.171]) by smtp.gmail.com with ESMTPSA id eh9sm12663864pad.47.2016.06.09.17.44.47 (version=TLSv1/SSLv3 cipher=OTHER); Thu, 09 Jun 2016 17:44:48 -0700 (PDT) From: Gunnar Engelbach X-Google-Original-From: Gunnar Engelbach To: tony@yaanatech.com, Adam Montville , "" References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> Message-ID: Date: Thu, 9 Jun 2016 17:44:52 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> Content-Type: multipart/alternative; boundary="------------6E3DC71E7B158C78D99C17C9" Archived-At: Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jun 2016 00:44:52 -0000 This is a multi-part message in MIME format. --------------6E3DC71E7B158C78D99C17C9 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Hey Tony, funny thing that you should say that. You seem to have a better awareness of the other efforts going on out there than I do, so I could use your help in identifying other good candidates and what will be necessary to support as many of them as possible. What I'd really like to do is take a more formal approach -- gather some requirements and then see from among the existing efforts which is the best from among those that are good enough. If any. But first is a matter of setting the requirements. Stated generally, I really only have three: 1) Is extensible -- as a fork outside of the current owner, if necessary, to be sure it continues to meet SACM needs without relying on the good graces of the current owner 2) Readily accessible (eg., spec is not cost prohibitive for any users) 3) The most complete (that is, closest to being able to represent the other tag types without loss of data or shoe-horning data into fields that weren't really meant for that type of data) I'm sure Charles, et al, will have other requirements, so feel free to chime in. However, I think the simpler and more informal we can keep this list the quicker we can grind through it. --gun On 6/9/2016 2:33 PM, Tony Rutkowski wrote: > Hi Adam, > > A good solution. Charles and Gunnar should also engage > in some proactive outreach. Simply stating that "no other > solutions to the problem of software identification have > been submitted" is preposterous when there are so many > out there. IMHO, one of the long-standing problems with > SACM is its institutional and participatory insularity in an > arena where so many almost identical activities are occurring > in other venues where there is far greater industry participation. > Ignoring them diminishes the value of whatever SACM > accomplishes. > > --tony > > On 2016-06-09 3:47 PM, Adam Montville wrote: >> All: >> >> After several on-list discussions, the last virtual interim, and the >> discussions surrounding this call for adoption, the chairs >> acknowledge that there are some key concerns with this draft, but >> also see that there is rough consensus for adoption. We additionally >> note that no other solutions to the problem of software >> identification have been submitted to the working group [1]. >> >> Because the topic of software identification, and SWID in particular, >> appears to be a contentious one, we are designating Charles Schmidt >> and Gunnar Engelbach as editors of the working group draft [2]. We >> believe that Charles and Gunnar will bring the necessary balance to >> this draft, so that the key concerns are sufficiently addressed. >> >> Kind regards, >> >> Adam & Karen >> >> [1] This draft adoption does not preclude future alternative submissions >> [2] Note that original authors will remain authors, but Charles and >> Gunnar will hold the pen. >> >> >>> On May 17, 2016, at 11:21 AM, Karen O'Donoghue >> > wrote: >>> >>> Folks, >>> >>> As discussed during our last couple of meetings, this is the >>> official call for adoption of >>> https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as >>> a SACM working group document. >>> >>> Please reply with any comments or concerns along your support of >>> this action to the mailing list. >>> >>> Thanks, >>> Karen and Adam >>> _______________________________________________ >>> sacm mailing list >>> sacm@ietf.org >>> https://www.ietf.org/mailman/listinfo/sacm >> >> >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm --------------6E3DC71E7B158C78D99C17C9 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit

Hey Tony, funny thing that you should say that.  You seem to have a better awareness of the other efforts going on out there than I do, so I could use your help in identifying other good candidates and what will be necessary to support as many of them as possible.

What I'd really like to do is take a more formal approach -- gather some requirements and then see from among the existing efforts which is the best from among those that are good enough.  If any.

But first is a matter of setting the requirements.  Stated generally, I really only have three:

  1)  Is extensible -- as a fork outside of the current owner, if necessary, to be sure it continues to meet SACM needs without relying on the good graces of the current owner

  2)  Readily accessible (eg., spec is not cost prohibitive for any users)

  3)  The most complete (that is, closest to being able to represent the other tag types without loss of data or shoe-horning data into fields that weren't really meant for that type of data)


I'm sure Charles, et al, will have other requirements, so feel free to chime in.  However, I think the simpler and more informal we can keep this list the quicker we can grind through it.


--gun




On 6/9/2016 2:33 PM, Tony Rutkowski wrote:
Hi Adam,

A good solution.  Charles and Gunnar should also engage
in some proactive outreach.  Simply stating that "no other
solutions to the problem of software identification have
been submitted" is preposterous when there are so many
out there.  IMHO, one of the long-standing problems with
SACM is its institutional and participatory insularity in an
arena where so many almost identical activities are occurring
in other venues where there is far greater industry participation.
Ignoring them diminishes the value of whatever SACM
accomplishes.

--tony

On 2016-06-09 3:47 PM, Adam Montville wrote:
All:

After several on-list discussions, the last virtual interim, and the discussions surrounding this call for adoption, the chairs acknowledge that there are some key concerns with this draft, but also see that there is rough consensus for adoption.  We additionally note that no other solutions to the problem of software identification have been submitted to the working group [1].

Because the topic of software identification, and SWID in particular, appears to be a contentious one, we are designating Charles Schmidt and Gunnar Engelbach as editors of the working group draft [2].  We believe that Charles and Gunnar will bring the necessary balance to this draft, so that the key concerns are sufficiently addressed.

Kind regards,

Adam & Karen

[1] This draft adoption does not preclude future alternative submissions
[2] Note that original authors will remain authors, but Charles and Gunnar will hold the pen.


On May 17, 2016, at 11:21 AM, Karen O'Donoghue <odonoghue@isoc.org> wrote:

Folks,

As discussed during our last couple of meetings, this is the official call for adoption of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as a SACM working group document. 

Please reply with any comments or concerns along your support of this action to the mailing list. 

Thanks,
Karen and Adam
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm



_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm




_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

--------------6E3DC71E7B158C78D99C17C9-- From nobody Thu Jun 9 23:02:22 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C2FE12D140 for ; Thu, 9 Jun 2016 23:02:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.942 X-Spam-Level: X-Spam-Status: No, score=-4.942 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wMc0Nzzq-SM8 for ; Thu, 9 Jun 2016 23:02:19 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B31B312D19F for ; Thu, 9 Jun 2016 23:02:19 -0700 (PDT) Date: Thu, 09 Jun 2016 23:02:18 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465538538; bh=/KkOcMijqbJsyxsSDcb1BYV7mSq2bSn+VFPXJ2PG+P0=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=h3D26LaRoEZZ2jOwLK5OtMsyo8EmLSgvjZWYVbHK3AGOm1HWcxn5gBFIEU3MekaUd +m/7kDuYDZv6F+ov03gOiwfavYYlCgpN7wpERT9JpObp6RjyU1gsJqD9Qj8xCiHx9Q o/MOXWMJyvuGOFQ+Tu5s8g2I2HOCZkN0s3n6l8yE= From: Jerome Athias To: sacmwg/draft-ietf-sacm-information-model Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575a57eaa0a00_58e33fd8d783b2c03877d"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/draft-ietf-sacm-information-model] typo statement-metatdata (#45) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/draft-ietf-sacm-information-model List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jun 2016 06:02:21 -0000 ----==_mimepart_575a57eaa0a00_58e33fd8d783b2c03877d Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit statement-metatdata should be statement-metadata --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/45 ----==_mimepart_575a57eaa0a00_58e33fd8d783b2c03877d Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

statement-metatdata
should be
statement-metadata

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575a57eaa0a00_58e33fd8d783b2c03877d-- From nobody Thu Jun 9 23:04:39 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9471812DAAC for ; Thu, 9 Jun 2016 23:04:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.942 X-Spam-Level: X-Spam-Status: No, score=-4.942 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hk0OJvqC4szL for ; Thu, 9 Jun 2016 23:04:36 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext6.iad.github.net [192.30.252.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6E7DB12DAA8 for ; Thu, 9 Jun 2016 23:04:36 -0700 (PDT) Date: Thu, 09 Jun 2016 23:04:35 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465538675; bh=/kiGESfeXyG2RnW1cMv/4Fj++fV1FGwwQT9TuzYgmeA=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=BrjQ9W3QUXOjnxBE8gXJ5THKiOtXt6bbx1YBytNVsfeLoC5EL8AH5MutMB1U0lPmQ QuWlIPn9+uobffwBmeTLo5T45vGtI5BB2Xr+3ktMHuGol5cBXdC4Y5Tl2ZWVUVj3kn hqx/OqDNbIQUO0ItlBG84mEuN4BV/zX3o40TfE2A= From: Jerome Athias To: sacmwg/draft-ietf-sacm-information-model Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575a5873b5f1b_34013fd560bad2c0710c7"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/draft-ietf-sacm-information-model] typo information that my originate (#46) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/draft-ietf-sacm-information-model List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jun 2016 06:04:38 -0000 ----==_mimepart_575a5873b5f1b_34013fd560bad2c0710c7 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit information that my originate information that may originate --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/46 ----==_mimepart_575a5873b5f1b_34013fd560bad2c0710c7 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

information that my originate
information that may originate

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575a5873b5f1b_34013fd560bad2c0710c7-- From nobody Thu Jun 9 23:16:30 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EA56B12D8C5 for ; Thu, 9 Jun 2016 23:16:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.942 X-Spam-Level: X-Spam-Status: No, score=-4.942 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wZVFrrlsZvSY for ; Thu, 9 Jun 2016 23:16:27 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext5.iad.github.net [192.30.252.196]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A6BBD12B056 for ; Thu, 9 Jun 2016 23:16:27 -0700 (PDT) Date: Thu, 09 Jun 2016 23:16:26 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465539386; bh=xsHy7fEjHUtS0LqrhKqdb7mpqCWQi0xuzAMRgAtmE/4=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=oZnQy5Y8hz1xjIsQbslwQKsnVcl5KeMRd0FhPFoHqw/v7gUBLD+QkLQmSOS1QCAY1 lzDfyBxUopK7O3NCDe4TzgrN9L8yyrC2+2UXYBdg5z4aizUU2klGvlnKh0SDkrDY2a 1Igjbbk+LxiUkVHGlsPwsyMSHl9yeWZFZ3SVcyys= From: Jerome Athias To: sacmwg/draft-ietf-sacm-information-model Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575a5b3a73c65_33a13fdb8ba272bc10421c"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/draft-ietf-sacm-information-model] typo an best-effort (#47) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/draft-ietf-sacm-information-model List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jun 2016 06:16:29 -0000 ----==_mimepart_575a5b3a73c65_33a13fdb8ba272bc10421c Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit an best-effort a best-effort --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/47 ----==_mimepart_575a5b3a73c65_33a13fdb8ba272bc10421c Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

an best-effort
a best-effort

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575a5b3a73c65_33a13fdb8ba272bc10421c-- From nobody Thu Jun 9 23:17:01 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 5E4F812DAB1 for ; Thu, 9 Jun 2016 23:17:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.942 X-Spam-Level: X-Spam-Status: No, score=-4.942 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qfRAhSpJ_nGK for ; Thu, 9 Jun 2016 23:16:59 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext1.iad.github.net [192.30.252.192]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 43D0412B056 for ; Thu, 9 Jun 2016 23:16:59 -0700 (PDT) Date: Thu, 09 Jun 2016 23:16:58 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465539418; bh=aEPnQf/DoR7EMAtF/Wgbjp3PnoInVo5FdvRD6xQZOyA=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=bogbmUwlrFsAGJVIDml0y6PJRWBdCrbLWHTx2D8bJFxoIv7kdL9ww8VUHnlV5tEsr nWP2NuoOktKr3IG549We18Nd5F3EAKBdptH2ip46hF9cGY02JgU7VYecgJERGARoxV d6HAQ76cZJL/NIRGZFjgdGTF9oMyLrzPOEW1s0ng= From: Jerome Athias To: sacmwg/draft-ietf-sacm-information-model Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575a5b5a889d4_3dc63fdac34052bc1032de"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: athiasjerome X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/draft-ietf-sacm-information-model] typo into our out of a particular system (#48) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/draft-ietf-sacm-information-model List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jun 2016 06:17:00 -0000 ----==_mimepart_575a5b5a889d4_3dc63fdac34052bc1032de Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit into our out of a particular system into or out of a particular system --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-information-model/issues/48 ----==_mimepart_575a5b5a889d4_3dc63fdac34052bc1032de Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

into our out of a particular system
into or out of a particular system

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575a5b5a889d4_3dc63fdac34052bc1032de-- From nobody Fri Jun 10 04:24:53 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3D9E912D169 for ; Fri, 10 Jun 2016 04:24:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iDO81xr5xjAK for ; Fri, 10 Jun 2016 04:24:49 -0700 (PDT) Received: from mail-oi0-x22f.google.com (mail-oi0-x22f.google.com [IPv6:2607:f8b0:4003:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 8B2CC12D112 for ; Fri, 10 Jun 2016 04:24:49 -0700 (PDT) Received: by mail-oi0-x22f.google.com with SMTP id p204so107321662oih.3 for ; Fri, 10 Jun 2016 04:24:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=yPTh6CWXJBQwjKJ/a0yU6iURoIe2syOhOG0QKLBcB0U=; b=Ket93a/UI0V95pMXlSzHbDuFtnb6sgquSVPIFyy9WfDB02MWM54Habj5VALp0QIJrP bwrxorNhYaKdV8oRHDGJ/eZJcQsso3BwyFdGYhNsqFImRD+TDoMI8poGWdmw5XYpnEba 0L5byBq7ye0PodOiohWnKm9WoFi5QcnYn5nOXZE2/KZGlTlpydD/GpuMBOeFe4vPSEvG d0fr2uKfqVRml1dgJWHXLGkbRXCobygBJ+XHbvp2LX+SQojVYQXdJwqMn2cI3G/4Inkn tiw1fI2V4GJXovOylibwGJHm1vvCHEcjZ+rAKIa4M5Q5IS3h2yqahVWnzdlod3L72bJH Vu5w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=yPTh6CWXJBQwjKJ/a0yU6iURoIe2syOhOG0QKLBcB0U=; b=DFYYKYV47syfXWzChxGONZWo0RD9TfbSdtnJrQIMywgxZOy1OspFVba7iDrKmorne/ bk21rfeEBjP5simZaewM9Rx6TkFE6wXvwqDHACWGgKHwMFxwTQBaTVsxd4SlJ/hBgar2 yfVJsQeAI/NyqJw3BtCSE2rOtmT1bIFfK3fIODD5fY9cI7zz9lzCg85l2aZEdaO6KjW8 EoK1NapfsFWhrxtVVI6T8du7eGWHfHE+5VqAX53lejyGabPrvHG0F4yCDMB0ZtS/LntB K3IwCCa39Nr0Y5ikEZjoSW3owyyW5vCzXgtA+VsrWK0EP7+CY494GdUYDpEtzOKpzXOk dF7g== X-Gm-Message-State: ALyK8tL94HeCDnnV+Sm2Nxni1mYhUkKRc+irzJ5N2KMTn+iQ4wEDzHRPP0awwNiGaAjTEA== X-Received: by 10.157.27.46 with SMTP id l43mr661585otl.54.1465557888831; Fri, 10 Jun 2016 04:24:48 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id z89sm4944242ota.5.2016.06.10.04.24.47 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 10 Jun 2016 04:24:47 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_7BC531DE-076A-4585-9CFA-37F2EF675A6D"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Fri, 10 Jun 2016 06:24:46 -0500 Message-Id: <6062111F-9C39-4C7C-B008-F7E23FED40DE@gmail.com> References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> To: Gunnar Engelbach X-Mailer: Apple Mail (2.3124) Archived-At: Cc: "" , tony@yaanatech.com Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 10 Jun 2016 11:24:52 -0000 --Apple-Mail=_7BC531DE-076A-4585-9CFA-37F2EF675A6D Content-Type: multipart/alternative; boundary="Apple-Mail=_2FED9738-71E0-493F-9EE0-5E4C308C9EC9" --Apple-Mail=_2FED9738-71E0-493F-9EE0-5E4C308C9EC9 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 This seems like a fine approach. As part of that third item, I=92d like to get requirements from our own = drafts as well, starting perhaps with the vulnerability scenario, but = also considering our requirements and other drafts. > On Jun 9, 2016, at 7:44 PM, Gunnar Engelbach = wrote: >=20 >=20 >=20 > Hey Tony, funny thing that you should say that. You seem to have a = better awareness of the other efforts going on out there than I do, so I = could use your help in identifying other good candidates and what will = be necessary to support as many of them as possible. >=20 > What I'd really like to do is take a more formal approach -- gather = some requirements and then see from among the existing efforts which is = the best from among those that are good enough. If any. >=20 > But first is a matter of setting the requirements. Stated generally, = I really only have three: >=20 > 1) Is extensible -- as a fork outside of the current owner, if = necessary, to be sure it continues to meet SACM needs without relying on = the good graces of the current owner >=20 > 2) Readily accessible (eg., spec is not cost prohibitive for any = users) >=20 > 3) The most complete (that is, closest to being able to represent = the other tag types without loss of data or shoe-horning data into = fields that weren't really meant for that type of data) >=20 >=20 > I'm sure Charles, et al, will have other requirements, so feel free to = chime in. However, I think the simpler and more informal we can keep = this list the quicker we can grind through it. >=20 >=20 > --gun >=20 >=20 >=20 >=20 > On 6/9/2016 2:33 PM, Tony Rutkowski wrote: >> Hi Adam, >>=20 >> A good solution. Charles and Gunnar should also engage >> in some proactive outreach. Simply stating that "no other >> solutions to the problem of software identification have >> been submitted" is preposterous when there are so many >> out there. IMHO, one of the long-standing problems with >> SACM is its institutional and participatory insularity in an >> arena where so many almost identical activities are occurring >> in other venues where there is far greater industry participation. >> Ignoring them diminishes the value of whatever SACM >> accomplishes. >>=20 >> --tony >>=20 >> On 2016-06-09 3:47 PM, Adam Montville wrote: >>> All: >>>=20 >>> After several on-list discussions, the last virtual interim, and the = discussions surrounding this call for adoption, the chairs acknowledge = that there are some key concerns with this draft, but also see that = there is rough consensus for adoption. We additionally note that no = other solutions to the problem of software identification have been = submitted to the working group [1]. >>>=20 >>> Because the topic of software identification, and SWID in = particular, appears to be a contentious one, we are designating Charles = Schmidt and Gunnar Engelbach as editors of the working group draft [2]. = We believe that Charles and Gunnar will bring the necessary balance to = this draft, so that the key concerns are sufficiently addressed. >>>=20 >>> Kind regards, >>>=20 >>> Adam & Karen >>>=20 >>> [1] This draft adoption does not preclude future alternative = submissions >>> [2] Note that original authors will remain authors, but Charles and = Gunnar will hold the pen. >>>=20 >>>=20 >>>> On May 17, 2016, at 11:21 AM, Karen O'Donoghue > wrote: >>>>=20 >>>> Folks, >>>>=20 >>>> As discussed during our last couple of meetings, this is the = official call for adoption of = https:= //datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ = as = a SACM working group document. >>>>=20 >>>> Please reply with any comments or concerns along your support of = this action to the mailing list. >>>>=20 >>>> Thanks, >>>> Karen and Adam >>>> _______________________________________________ >>>> sacm mailing list >>>> sacm@ietf.org >>>> https://www.ietf.org/mailman/listinfo/sacm = >>>=20 >>>=20 >>>=20 >>> _______________________________________________ >>> sacm mailing list >>> sacm@ietf.org >>> https://www.ietf.org/mailman/listinfo/sacm = >>=20 >>=20 >>=20 >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm = >=20 --Apple-Mail=_2FED9738-71E0-493F-9EE0-5E4C308C9EC9 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252
This seems like a fine approach.

As part of that third = item, I=92d like to get requirements from our own drafts as well, = starting perhaps with the vulnerability scenario, but also considering = our requirements and other drafts.  



On = Jun 9, 2016, at 7:44 PM, Gunnar Engelbach <gunnar.engelbach@threatguard.com> wrote:

=20 =20


Hey Tony, funny thing that you should say that.  You seem to = have a better awareness of the other efforts going on out there than I do, so I could use your help in identifying other good candidates and what will be necessary to support as many of them as possible.

What I'd really like to do is take a more formal approach -- gather some requirements and then see from among the existing efforts which is the best from among those that are good enough.  If any.

But first is a matter of setting the requirements.  Stated generally, I really only have three:

  1)  Is extensible -- as a fork outside of the current = owner, if necessary, to be sure it continues to meet SACM needs without relying on the good graces of the current owner

  2)  Readily accessible (eg., spec is not cost = prohibitive for any users)

  3)  The most complete (that is, closest to being able to = represent the other tag types without loss of data or shoe-horning data into fields that weren't really meant for that type of data)
=

I'm sure Charles, et al, will have other requirements, so feel free to chime in.  However, I think the simpler and more informal we = can keep this list the quicker we can grind through it.


--gun




On 6/9/2016 2:33 PM, Tony Rutkowski wrote:
Hi Adam,

A good solution.  Charles and Gunnar should also engage
in some proactive outreach.  Simply stating that "no other =
solutions to the problem of software identification have
been submitted" is preposterous when there are so many
out there.  IMHO, one of the long-standing problems with
SACM is its institutional and participatory insularity in an
arena where so many almost identical activities are occurring
in other venues where there is far greater industry = participation.
Ignoring them diminishes the value of whatever SACM
accomplishes.

--tony

On 2016-06-09 3:47 PM, Adam = Montville wrote:
All:

After several on-list discussions, the last virtual interim, and the discussions surrounding this call for adoption, the chairs acknowledge that there are some key concerns with this draft, but also see that there is rough consensus for adoption.  We additionally note that no = other solutions to the problem of software identification have been submitted to the working group [1].

Because the topic of software identification, = and SWID in particular, appears to be a contentious one, we are designating Charles Schmidt and Gunnar Engelbach as editors of the working group draft [2].  We believe that Charles and Gunnar will bring the necessary balance to this draft, so that the key concerns are sufficiently addressed.

Kind regards,

Adam & Karen

[1] This draft adoption does not preclude future alternative submissions
[2] Note that original authors will remain authors, but Charles and Gunnar will hold the pen.


On May 17, 2016, at 11:21 AM, Karen = O'Donoghue <odonoghue@isoc.org> wrote:

= Folks,

As discussed during our last couple of meetings, this is the official call for adoption = of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/&n= bsp;as a SACM working group document. 

Please reply with any comments or = concerns along your support of this action to the mailing list. 

Thanks,
Karen and Adam
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/m= ailman/listinfo/sacm



_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/m=
ailman/listinfo/sacm




_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/m=
ailman/listinfo/sacm


= --Apple-Mail=_2FED9738-71E0-493F-9EE0-5E4C308C9EC9-- --Apple-Mail=_7BC531DE-076A-4585-9CFA-37F2EF675A6D Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXWqN+AAoJEDEhyx7etgAByjgP/182yn1LhGbL8Lhd73ETW4OQ 1nBSYilFNQ+RpI0VMQ/DdfeAtsWao6BzX6hDtl1S+OzK7iGtDXD4m6qgnfZL2skx 1PWAW7vk+sXcHwr5n+sVjeXZJ19uXhou9Nsg4DNrcmn6cbF49tD8jQrysFk69mSD mGeXCR3+/bq1k4aQuqFIEGIEHnlvCjLHKFmUj6FAFd2OfpcoymNmjLacNvY3Ty8T SKRsu9JucX8rOg10WYfBV0GQGcXcYIh84Q19PTPdPfannzYxr/EzovveOZxI82wP Wix+CtAdifEZH2kPMdeQG5p3mEaEZ90IVmlMV/IXwfELLIqK7eDXzCqGGl/5pXBr ym1wpDFEw3T6EQMjZGbEzrlD7aHCCo8g2u6tYZYbMBZWM0Hhtobt17xBtZDmIw4E TZzokZdg0E5ad7nnYCNpn7wGgKQzu7az5TkDzF86ZQXG4GmRYzK1GBTPwvY9TzED y18ngZJ2W76k2HtcNYZ/vMx7kWyOB/wiAE3nqHZxk4q+SPDN9xk33wAmp5S8dEG5 Ht80bpzNIx3ocFMi0qHlXhJhPm6pJG4LzeQaewpw+rq6AIq6OXq7uAyd++hk6H2M znh/O5Vp+rGaq4iwqfL5okBNR62leAO34tsDl8Sy947mQQXD4owmvGZpSBtHDsJV WJN3Y5653JHubhtGgfME =LvVW -----END PGP SIGNATURE----- --Apple-Mail=_7BC531DE-076A-4585-9CFA-37F2EF675A6D-- From nobody Sun Jun 12 22:44:50 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7720812B078 for ; Sun, 12 Jun 2016 22:44:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0vVAJpbTALmt for ; Sun, 12 Jun 2016 22:44:47 -0700 (PDT) Received: from mail-vk0-x22e.google.com (mail-vk0-x22e.google.com [IPv6:2607:f8b0:400c:c05::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3532A12B034 for ; Sun, 12 Jun 2016 22:44:47 -0700 (PDT) Received: by mail-vk0-x22e.google.com with SMTP id d127so165244750vkh.2 for ; Sun, 12 Jun 2016 22:44:47 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=BG3WmYKSKFpIFGY9CPcPI92DQBw+iFpdmmpiG+stpA4=; b=K+f+hVk70Va9hfT9UgrYY5Og6xDaMpemegwFdRQShUzpFYGFOtbG4zp3jbk2/sLKtf 0RH/SttjzK2pYwv0Q0An/hJYO9PCLuNdebxq4ZDOyuFXAFeCHvZxhxXiqEyK+16bnVYd nWwUarLyjCr3A6LMMRfncpUJ6Uh6c52dpOl1UyddO/dBcZp8Tdsc/p+yAacdppK/l58A GIy0ny2g7sLqDrkrXwOPxRYYiOhFdrFEOAh5mc0fuw8ac0j2B55DONlvok3F8epHUAXQ p1iGuQWKTuvWt7H81/SBnkq7Pm8eMxBXUqnDeIWzAdQStRHqmWjCE8FmfRfaEfz2JmrY 3EbA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=BG3WmYKSKFpIFGY9CPcPI92DQBw+iFpdmmpiG+stpA4=; b=XVVFDFKZLT9THdUakuXBuVHhvpeyqgv6pLBKliSYBcCFSVYTqTF2YMBFBYhhaNMUQY ALlGSO/DRGQrLfEFq0ZdtrG1dCViUo0YtjwmIpPHPB2otslFfQyL0trYfreFgx29mADr 9Uzh4W7vn54GyOZVtPyYdLxU/TNsUcvM7WqfyJK9xtGqysgidvnPJ/VvMB7OxBug30B2 d15/Jx/eM1LTxPjZEx1ulqIXopEzjzycfKutHmirNPwap+iUQPtWeKysctNtC5ZVn9rQ ciPpRF7rI6zymy/JFEeaZocK4iApmY/rjwYLY8RCK93lAPuLm0ywclXs0EMi/tOylxuH qiuw== X-Gm-Message-State: ALyK8tIgbfTvyMarbKDxxaKMrkxa7aWVF4onlI79Sa6S87klq8jgKxZbghrmO0rxYRJ29FBqMsr/p7zmsu9MKA== X-Received: by 10.31.94.135 with SMTP id s129mr4899844vkb.148.1465796686287; Sun, 12 Jun 2016 22:44:46 -0700 (PDT) MIME-Version: 1.0 Received: by 10.31.210.193 with HTTP; Sun, 12 Jun 2016 22:44:45 -0700 (PDT) In-Reply-To: References: <5751D73F.3060000@sit.fraunhofer.de> From: Jerome Athias Date: Mon, 13 Jun 2016 08:44:45 +0300 Message-ID: To: "Haynes, Dan" Content-Type: text/plain; charset=UTF-8 Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #1 - Managing Terminology X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Jun 2016 05:44:48 -0000 Hi, 7) "Workflow or process engine" would, IMHO, be ITIL compliant "More likely they would be using the Critical Security Controls framework." Right, I understand this statement in a maturity level context, etc. (I appreciate a lot the CSC, and its usage in SACM) I'm just thinking about providing metrics from SACM (to be aligned with strategic levels) But I don't want to add 'complexity' Regards From nobody Mon Jun 13 07:12:14 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AEE3812D7B6 for ; Mon, 13 Jun 2016 07:12:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.345 X-Spam-Level: X-Spam-Status: No, score=-8.345 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FTIu6eXMEEOm for ; Mon, 13 Jun 2016 07:12:09 -0700 (PDT) Received: from de307622-de-outbound.net.avaya.com (de307622-de-outbound.net.avaya.com [198.152.71.100]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 031A812D78A for ; Mon, 13 Jun 2016 07:12:08 -0700 (PDT) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: =?us-ascii?q?A2D9AwBVvl5X/xUHmMZbGgEBAQGCUiEtV?= =?us-ascii?q?n0GAb0UBRcBCoI+gzcCgTA8EAEBAQEBAQFlJ4RKAQEBAQMBAQELBAsQOAkLEAI?= =?us-ascii?q?BCA0EBAEBCx0HJwsUCQgCBAENBQgTB4gOAQ2cHJsyAQEBAQEBAQEBAQEBAQEBA?= =?us-ascii?q?QEBAQEBFwWGKINJgQOEQjSCdoISHQWYYQGGA4oNhFKDIIVFhkiJJjUfggccFoE?= =?us-ascii?q?1bokJAX4BAQE?= X-IPAS-Result: =?us-ascii?q?A2D9AwBVvl5X/xUHmMZbGgEBAQGCUiEtVn0GAb0UBRcBCoI?= =?us-ascii?q?+gzcCgTA8EAEBAQEBAQFlJ4RKAQEBAQMBAQELBAsQOAkLEAIBCA0EBAEBCx0HJ?= =?us-ascii?q?wsUCQgCBAENBQgTB4gOAQ2cHJsyAQEBAQEBAQEBAQEBAQEBAQEBAQEBFwWGKIN?= =?us-ascii?q?JgQOEQjSCdoISHQWYYQGGA4oNhFKDIIVFhkiJJjUfggccFoE1bokJAX4BAQE?= X-IronPort-AV: E=Sophos;i="5.26,466,1459828800"; d="scan'208,217";a="158220917" Received: from unknown (HELO co300216-co-erhwest-exch.avaya.com) ([198.152.7.21]) by de307622-de-outbound.net.avaya.com with ESMTP; 13 Jun 2016 10:12:05 -0400 X-OutboundMail_SMTP: 1 Received: from unknown (HELO AZ-FFEXHC02.global.avaya.com) ([135.64.58.12]) by co300216-co-erhwest-out.avaya.com with ESMTP/TLS/AES256-SHA; 13 Jun 2016 10:12:04 -0400 Received: from AZ-FFEXMB04.global.avaya.com ([fe80::6db7:b0af:8480:c126]) by AZ-FFEXHC02.global.avaya.com ([135.64.58.12]) with mapi id 14.03.0174.001; Mon, 13 Jun 2016 16:12:03 +0200 From: "Romascanu, Dan (Dan)" To: Adam Montville , Gunnar Engelbach Thread-Topic: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document Thread-Index: AQHRwofVZvePbn+GLkScwx2ekpOAm5/hhmqAgAA1mACAARdeAIAEogyg Date: Mon, 13 Jun 2016 14:12:02 +0000 Message-ID: <9904FB1B0159DA42B0B887B7FA8119CA7520D40F@AZ-FFEXMB04.global.avaya.com> References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> <6062111F-9C39-4C7C-B008-F7E23FED40DE@gmail.com> In-Reply-To: <6062111F-9C39-4C7C-B008-F7E23FED40DE@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [135.64.58.48] Content-Type: multipart/alternative; boundary="_000_9904FB1B0159DA42B0B887B7FA8119CA7520D40FAZFFEXMB04globa_" MIME-Version: 1.0 Archived-At: Cc: "" , "tony@yaanatech.com" Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Jun 2016 14:12:13 -0000 --_000_9904FB1B0159DA42B0B887B7FA8119CA7520D40FAZFFEXMB04globa_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Re: Requirements - is this not what https://datatracker.ietf.org/doc/draft-= ietf-sacm-requirements/ is about? Maybe it needs an update. Regards, Dan From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Adam Montville Sent: Friday, June 10, 2016 2:25 PM To: Gunnar Engelbach Cc: ; tony@yaanatech.com Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc a= s a SACM WG document This seems like a fine approach. As part of that third item, I'd like to get requirements from our own draft= s as well, starting perhaps with the vulnerability scenario, but also consi= dering our requirements and other drafts. On Jun 9, 2016, at 7:44 PM, Gunnar Engelbach > wrote: Hey Tony, funny thing that you should say that. You seem to have a better = awareness of the other efforts going on out there than I do, so I could use= your help in identifying other good candidates and what will be necessary = to support as many of them as possible. What I'd really like to do is take a more formal approach -- gather some re= quirements and then see from among the existing efforts which is the best f= rom among those that are good enough. If any. But first is a matter of setting the requirements. Stated generally, I rea= lly only have three: 1) Is extensible -- as a fork outside of the current owner, if necessary= , to be sure it continues to meet SACM needs without relying on the good gr= aces of the current owner 2) Readily accessible (eg., spec is not cost prohibitive for any users) 3) The most complete (that is, closest to being able to represent the ot= her tag types without loss of data or shoe-horning data into fields that we= ren't really meant for that type of data) I'm sure Charles, et al, will have other requirements, so feel free to chim= e in. However, I think the simpler and more informal we can keep this list= the quicker we can grind through it. --gun On 6/9/2016 2:33 PM, Tony Rutkowski wrote: Hi Adam, A good solution. Charles and Gunnar should also engage in some proactive outreach. Simply stating that "no other solutions to the problem of software identification have been submitted" is preposterous when there are so many out there. IMHO, one of the long-standing problems with SACM is its institutional and participatory insularity in an arena where so many almost identical activities are occurring in other venues where there is far greater industry participation. Ignoring them diminishes the value of whatever SACM accomplishes. --tony On 2016-06-09 3:47 PM, Adam Montville wrote: All: After several on-list discussions, the last virtual interim, and the discus= sions surrounding this call for adoption, the chairs acknowledge that there= are some key concerns with this draft, but also see that there is rough co= nsensus for adoption. We additionally note that no other solutions to the = problem of software identification have been submitted to the working group= [1]. Because the topic of software identification, and SWID in particular, appea= rs to be a contentious one, we are designating Charles Schmidt and Gunnar E= ngelbach as editors of the working group draft [2]. We believe that Charle= s and Gunnar will bring the necessary balance to this draft, so that the ke= y concerns are sufficiently addressed. Kind regards, Adam & Karen [1] This draft adoption does not preclude future alternative submissions [2] Note that original authors will remain authors, but Charles and Gunnar = will hold the pen. On May 17, 2016, at 11:21 AM, Karen O'Donoghue > wrote: Folks, As discussed during our last couple of meetings, this is the official call = for adoption of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid= -patnc/ as a SACM working group document. Please reply with any comments or concerns along your support of this actio= n to the mailing list. Thanks, Karen and Adam _______________________________________________ sacm mailing list sacm@ietf.org https://www.ietf.org/mailman/listinfo/sacm _______________________________________________ sacm mailing list sacm@ietf.org https://www.ietf.org/mailman/listinfo/sacm _______________________________________________ sacm mailing list sacm@ietf.org https://www.ietf.org/mailman/listinfo/sacm --_000_9904FB1B0159DA42B0B887B7FA8119CA7520D40FAZFFEXMB04globa_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Re: Requirements – = is this not what = https://datatracker.ietf.org/doc/draft-ietf-sacm-requirements/ is about= ? Maybe it needs an update.

 <= /p>

Regards,

 <= /p>

Dan

 <= /p>

 <= /p>

From: sacm [ma= ilto:sacm-bounces@ietf.org] On Behalf Of Adam Montville
Sent: Friday, June 10, 2016 2:25 PM
To: Gunnar Engelbach
Cc: <sacm@ietf.org>; tony@yaanatech.com
Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-= patnc as a SACM WG document

 

This seems like a fine approach.

 

As part of that third item, I’d like to get re= quirements from our own drafts as well, starting perhaps with the vulnerabi= lity scenario, but also considering our requirements and other drafts. &nbs= p;

 

 

 

On Jun 9, 2016, at 7:44 PM, Gunnar Engelbach <gunnar.engelbach@threatgua= rd.com> wrote:

 



Hey Tony, funny thing that you should say that.  You seem to have a be= tter awareness of the other efforts going on out there than I do, so I coul= d use your help in identifying other good candidates and what will be neces= sary to support as many of them as possible.

What I'd really like to do is take a more formal approach -- gather some re= quirements and then see from among the existing efforts which is the best f= rom among those that are good enough.  If any.

But first is a matter of setting the requirements.  Stated generally, = I really only have three:

  1)  Is extensible -- as a fork outside of the current owner, if= necessary, to be sure it continues to meet SACM needs without relying on t= he good graces of the current owner

  2)  Readily accessible (eg., spec is not cost prohibitive for a= ny users)

  3)  The most complete (that is, closest to being able to repres= ent the other tag types without loss of data or shoe-horning data into fiel= ds that weren't really meant for that type of data)


I'm sure Charles, et al, will have other requirements, so feel free to chim= e in.  However, I think the simpler and more informal we can keep this= list the quicker we can grind through it.


--gun



On 6/9/2016 2:33 PM, Tony Rutkowski wrote:

Hi Adam,

A good solution.  Charles and Gunnar should also engage
in some proactive outreach.  Simply stating that "no other
solutions to the problem of software identification have
been submitted" is preposterous when there are so many
out there.  IMHO, one of the long-standing problems with
SACM is its institutional and participatory insularity in an
arena where so many almost identical activities are occurring
in other venues where there is far greater industry participation.
Ignoring them diminishes the value of whatever SACM
accomplishes.

--tony

On 2016-06-09 3:47 PM, Adam Montville wrote:

All:

 

After several on-list discussions, the last virtual = interim, and the discussions surrounding this call for adoption, the chairs= acknowledge that there are some key concerns with this draft, but also see= that there is rough consensus for adoption.  We additionally note that no other solutions to the proble= m of software identification have been submitted to the working group [1].<= o:p>

 

Because the topic of software identification, and SW= ID in particular, appears to be a contentious one, we are designating Charl= es Schmidt and Gunnar Engelbach as editors of the working group draft [2]. =  We believe that Charles and Gunnar will bring the necessary balance to this draft, so that the key concerns a= re sufficiently addressed.

 

Kind regards,

 

Adam & Karen

 

[1] This draft adoption does not preclude future alt= ernative submissions

[2] Note that original authors will remain authors, = but Charles and Gunnar will hold the pen.

 

 

On May 17, 2016, at 11:21 AM, Karen O'Donoghue <<= a href=3D"mailto:odonoghue@isoc.org">odonoghue@isoc.org> wrote:=

 

Folks,

 

As discussed during our last couple of meetings, thi= s is the official call for adoption of https://datatracker.ietf.or= g/doc/draft-coffin-sacm-nea-swid-patnc/ as a SACM working group document. 

 

Please reply with any comments or concerns along you= r support of this action to the mailing list. 

 

Thanks,

Karen and Adam

_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org= /mailman/listinfo/sacm





_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.iet=
f.org/mailman/listinfo/sacm





_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.iet=
f.org/mailman/listinfo/sacm

 

 

--_000_9904FB1B0159DA42B0B887B7FA8119CA7520D40FAZFFEXMB04globa_-- From nobody Mon Jun 13 08:54:33 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A07E212D17B for ; Mon, 13 Jun 2016 08:54:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.009 X-Spam-Level: X-Spam-Status: No, score=-4.009 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ygkUxw5uw1WB for ; Mon, 13 Jun 2016 08:54:31 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5489912D81D for ; Mon, 13 Jun 2016 08:54:31 -0700 (PDT) Date: Mon, 13 Jun 2016 08:54:30 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1465833270; bh=LqEcgH958FH4+Yj9BSDECjO2neIZnW/Aw7c9iRw4Pw4=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=Bow+yPPfam8Uj4XV+Han/ZqHsRaX7reim/MOq5L26bhs49DLKfRaXQRSHu/jtIcOh /s6fkBmC419JhvJAVLBN1KZCvnmECBBk5+KMgEGtK7Bc8sRdKfulJrSSzQgUqEEJP4 s9JwmOS5ZBx3zI2Q1BEfiPNXipjCSLXA0sRlvzhY= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_575ed7363d7c_76fe3ff467a6f2c014606b"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] Reorg (#3) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Jun 2016 15:54:32 -0000 ----==_mimepart_575ed7363d7c_76fe3ff467a6f2c014606b Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Closed #3. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/pull/3#event-690640887 ----==_mimepart_575ed7363d7c_76fe3ff467a6f2c014606b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Closed #3.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_575ed7363d7c_76fe3ff467a6f2c014606b-- From nobody Tue Jun 14 12:02:36 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4E98712D8F1 for ; Tue, 14 Jun 2016 12:02:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FyIvclmZhpLE for ; Tue, 14 Jun 2016 12:02:32 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 4675412D8DB for ; Tue, 14 Jun 2016 12:02:29 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 96B2DABC357; Tue, 14 Jun 2016 15:02:28 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 41BD0ABC36A; Tue, 14 Jun 2016 15:01:54 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Tue, 14 Jun 2016 15:01:53 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Tue, 14 Jun 2016 15:01:53 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=U5ywvJ6ggm/TV1VXLLHgB5WN3/HuAgYJ9iM3PnMvrvo=; b=eEZqQ6+l7mEiNVcnKoZO3ohOf0jeebBhc9vz9nwz4FHjrfnyB8uQynomwCQuXeiP76caDtTwpw+We5aK9Ks2oLsUgC/ri+kUHiw5KiTTmjBWxNIRjOXXwoWpQvzwV7Znt5xrIhbeSu3pWumr4ctr30IZUEg597SDFOJti9tNBW8= Received: from SN1PR09MB0990.namprd09.prod.outlook.com (10.166.69.8) by SN1PR09MB0989.namprd09.prod.outlook.com (10.166.69.7) with Microsoft SMTP Server (TLS) id 15.1.517.8; Tue, 14 Jun 2016 19:01:51 +0000 Received: from SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) by SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) with mapi id 15.01.0517.013; Tue, 14 Jun 2016 19:01:51 +0000 From: "Schmidt, Charles M." To: Gunnar Engelbach , "tony@yaanatech.com" , Adam Montville , "" Thread-Topic: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document Thread-Index: AQHRwrFMhZw7lyao2UagUav4D+Ed8p/pV3Bg Date: Tue, 14 Jun 2016 19:01:51 +0000 Message-ID: References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=cmschmidt@mitre.org; x-originating-ip: [192.160.51.89] x-ms-office365-filtering-correlation-id: 42172336-0e1d-4e9e-70d1-08d39486580f x-microsoft-exchange-diagnostics: 1; SN1PR09MB0989; 6:g2FbFydke0ioEuvzxJ4AFKuEwiPxwOhA4dZV7tPH3Lqemnh4+sIhrJmXOYplQH0d56K2ZL6oI9OWnEQ6zPcXKaA9xP90mQ92/x4Y2nD7TNHzfbDc5DBn2PLScoZi2qV+sC0WBPa45gZxgiTgeszZrawt9R4ffOQrQaBX7EWwv1SotCchoqHS7sq58S/bYQ3+GOwXMu7pYww5XGMy8FjPGvoLnKZre71dKAS7ZSajlX5KexBvIfB5U4lP2mN5VLuNUExmmUnbv5I3xFUvFhVV/jvK7gUpxA2fgC1AJ1jLMka8xl3s6RFbAFglipivvO0f9X0kd/nfOFKpfzKLSrzTmA==; 5:ijIIjqQorM4sEMn+D7wialJEtL+9jKj1SRUDdyDthz4PPJpFXOvrGp2MzQvWNAk2Khi3Yzkj9Rp6jOOUUMReP85HdbRSXSFQk3pqsuJMLcITLvl2wsS4jqF8xa8DUb4FwGIMdRRZOU6SeV7of4kY5Q==; 24:BEPSivnu1/i3Ux3wPcUYtoNaINXtUWoIOaI87rFi19hW1xczP5E6A2Ec+U4xbEhrRKU+MFi/rs1AJzpNTFn+fz7pNdAvpBzJLFUtz/diuFI=; 7:XDAvrn/tm7skbnbbjA50VntU1Z42SYD58+Zqsvcnp85p/Ue+OXVrUPLs50WpNLPTrair6xJPacaVfe3W5OfGdFQsykQeQRbTo2H/XiBnLa1KGnLDWDGlFCsM8c4t9xCVGcgD99LGiJUX41jUYdi+0efeao7qVTYNxrBHJn7sSFVD17WD/M5IgOHr7X9oyZUoXhTbeaPDY9X8XpfKIlSgBqJ05XPlnJJevRx3ICssQVk= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR09MB0989; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(100405760836317); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:SN1PR09MB0989; BCL:0; PCL:0; RULEID:; SRVR:SN1PR09MB0989; x-forefront-prvs: 09730BD177 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(189002)(199003)(13464003)(377424004)(71364002)(51914003)(24454002)(52044002)(377454003)(76576001)(87936001)(189998001)(2950100001)(33656002)(15975445007)(5002640100001)(77096005)(19580405001)(5004730100002)(2900100001)(74316001)(19580395003)(54356999)(76176999)(3660700001)(99936001)(50986999)(97736004)(68736007)(5001770100001)(107886002)(5003600100002)(92566002)(93886004)(101416001)(3280700002)(5008740100001)(81166006)(8676002)(81156014)(66066001)(99286002)(106116001)(2906002)(105586002)(106356001)(230783001)(122556002)(86362001)(2501003)(10400500002)(9686002)(8936002)(586003)(11100500001)(102836003)(3846002)(6116002)(491001); DIR:OUT; SFP:1101; SCL:1; SRVR:SN1PR09MB0989; H:SN1PR09MB0990.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; CAT:NONE; LANG:en; CAT:NONE; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_0107_01D1C645.48FE6650" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Jun 2016 19:01:51.1901 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR09MB0989 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Jun 2016 19:02:34 -0000 ------=_NextPart_000_0107_01D1C645.48FE6650 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi Gunnar, Thanks for the suggestions. I agree with these requirements with a possible tweak on number 3: I would say that the data model needs to cover a sufficent "core", but probably does not need to explicitly cover every piece of information from every reasonable, providing that the extensibility features described in item 1 would allow that information to be captured. The end result is the same - the transmitted data can capture all information from whatever source is used without loss. The difference is that we only need to identify fields that are likely to be of common utility, and edge cases can naturally be taken care of through extensions. Does this seem reasonable? Charles > -----Original Message----- > From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Gunnar Engelbach > Sent: Thursday, June 09, 2016 7:45 PM > To: tony@yaanatech.com; Adam Montville ; > > Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as > a SACM WG document > > > > Hey Tony, funny thing that you should say that. You seem to have a better > awareness of the other efforts going on out there than I do, so I could use > your help in identifying other good candidates and what will be necessary to > support as many of them as possible. > > What I'd really like to do is take a more formal approach -- gather some > requirements and then see from among the existing efforts which is the best > from among those that are good enough. If any. > > But first is a matter of setting the requirements. Stated generally, I really > only have three: > > 1) Is extensible -- as a fork outside of the current owner, if necessary, to be > sure it continues to meet SACM needs without relying on the good graces of > the current owner > > 2) Readily accessible (eg., spec is not cost prohibitive for any users) > > 3) The most complete (that is, closest to being able to represent the other > tag types without loss of data or shoe-horning data into fields that weren't > really meant for that type of data) > > > I'm sure Charles, et al, will have other requirements, so feel free to chime in. > However, I think the simpler and more informal we can keep this list the > quicker we can grind through it. > > > --gun > > > > > > On 6/9/2016 2:33 PM, Tony Rutkowski wrote: > > > Hi Adam, > > A good solution. Charles and Gunnar should also engage > in some proactive outreach. Simply stating that "no other > solutions to the problem of software identification have > been submitted" is preposterous when there are so many > out there. IMHO, one of the long-standing problems with > SACM is its institutional and participatory insularity in an > arena where so many almost identical activities are occurring > in other venues where there is far greater industry participation. > Ignoring them diminishes the value of whatever SACM > accomplishes. > > --tony > > > On 2016-06-09 3:47 PM, Adam Montville wrote: > > > All: > > After several on-list discussions, the last virtual interim, and > the discussions surrounding this call for adoption, the chairs acknowledge > that there are some key concerns with this draft, but also see that there is > rough consensus for adoption. We additionally note that no other solutions > to the problem of software identification have been submitted to the > working group [1]. > > Because the topic of software identification, and SWID in > particular, appears to be a contentious one, we are designating Charles > Schmidt and Gunnar Engelbach as editors of the working group draft [2]. We > believe that Charles and Gunnar will bring the necessary balance to this draft, > so that the key concerns are sufficiently addressed. > > Kind regards, > > Adam & Karen > > [1] This draft adoption does not preclude future alternative > submissions > [2] Note that original authors will remain authors, but Charles > and Gunnar will hold the pen. > > > > On May 17, 2016, at 11:21 AM, Karen O'Donoghue > > wrote: > > Folks, > > As discussed during our last couple of meetings, this > is the official call for adoption of coffin-sacm-nea-swid-patnc/> https://datatracker.ietf.org/doc/draft-coffin- > sacm-nea-swid-patnc/ as a SACM working group document. > > Please reply with any comments or concerns along > your support of this action to the mailing list. > > Thanks, > Karen and Adam > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > ------=_NextPart_000_0107_01D1C645.48FE6650 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVFzCCBQcw ggPvoAMCAQICChY3sr0AAQAAGTYwDQYJKoZIhvcNAQELBQAwUDETMBEGCgmSJomT8ixkARkWA09S RzEVMBMGCgmSJomT8ixkARkWBU1JVFJFMSIwIAYDVQQDExlNSVRSRSBDb3Jwb3JhdGlvbiBQRSBD QS0yMB4XDTE1MDEyNjE0MjQ1MFoXDTE4MDEyNTE0MjQ1MFowTjELMAkGA1UEBhMCVVMxDjAMBgNV BAoTBU1JVFJFMQ8wDQYDVQQLEwZQZW9wbGUxHjAcBgNVBAMTFVNjaG1pZHQuQ2hhcmxlcy4yNTY1 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN5xc5J1BiLU7EoWUMfTywdDl9O8BN8w Mv9ZVYlyXwRv7wyLQOSV6zlFANSf8RvuP2Yt5akFlLawX9s5MsqMTqNoDuJ0rV3fz7cwniAHJPJQ 9r7Ito9rtbW55YcLy9AQeD1MwZEP8BX8Xw4iGtyjNSYFOuPbumz19c9S2e1Hu5kbgQcgpKAl8yqw jmxbxjl2Dabd8Vsb718KIbXW63Lcq0XXZAHHRmoZS3sYAHiYR7IkoXAdu6jZdaBapuQ2zTrBPhY8 a9D2HFWBLnDo3H7rT75+xtOr5toOg5X35K0loeRRF+gVGvRCPzpICJm+2FEaV1AbfG4CBVpXzMHu RCyzitECAwEAAaOCAeMwggHfMCgGA1UdJQQhMB8GCCsGAQUFBwMEBgkrBgEEAXMCAQcGCCsGAQUF BwMCMB0GA1UdDgQWBBTqU2AbFZCeOIL9w7THoPvAqThWlzAOBgNVHQ8BAf8EBAMCBsAwHgYDVR0R BBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAfBgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2l JzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0 aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/BggrBgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6 Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29ycG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYG CCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRyZS5vcmcvb2NzcDA+BgkrBgEEAYI3FQcEMTAvBicr BgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6uAYE2gZe0EIWZ/woCAWQCAQswNAYJKwYBBAGCNxUK BCcwJTAKBggrBgEFBQcDBDALBgkrBgEEAXMCAQcwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD ggEBAGHCUualAhLcCqxuPwC1EcEtQ+11msjtfh0g21t0ocOwVVidgoB/QL8PFaFp15XKEzYcGf7l IcJHNjLWwG8x8G1rnSdKGyJgj/5vHSFRm/NUYmSpqWc1k3s/Ps5GlvWWEmu8VtUHJcqeqPy7tkXe 0rzHGpvj0+pPAGjgqvLUxs3IPj2ME1v+lQ/DotWa9WTJo6SitnbYpj5ARRDoQjS9zY1idjZpTqyZ XPDO/yZnTaR5Ue1sHdARztlnNIQszBsJRPWh4kldQ4d0qHUycia+Jtm7Rbj1Itpb4jDyiK+9mxzE tNfYzzvtmCB0y/Eq4PGurhFFydPk18zpEapb+dlP5WYwggUtMIIDFaADAgECAhBMOlIUIU/ToEQV R3+ykPtQMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBvcmF0aW9uIFBFIFJv b3QgQ0EtMTAeFw0xMTA0MjYxOTQ1NDVaFw0yMTA0MjYxOTQ4MjJaMCkxJzAlBgNVBAMTHk1JVFJF IENvcnBvcmF0aW9uIFBFIFJvb3QgQ0EtMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ALafIUdIUat4pvgJcH2+WRxj+ZNjkmNk5VR2ByDFAx9zH1u2+vJQd49zMADLMRitZHv7ejuCtLfc ER+EA4DkNQrYZjhmVu8YjfNYdLz9WH9eEjboFGu2bx/Sj94l7MvEJzh2pdWyn9D2vSl4m+fKlLsH 2mUgk1uT9npKnfM+ExE73wVrz4A8csZ1bIgDusi/VmkaTIklTIWC1stykblP4LntG1RIvqnYPoRD YdTUjV6aKrHktutp6uXMecMm0fzxdGLLUPTTZWAzOXCxAimBx8w+nFyiaM7hV64rMJRPK3Z2u1Ws cma34AtLnhCGP7bI/+uSMlIcjwcDtGaVvi7PQneGPhEUruZkeRXfMONnlc7qLJpN7NwMaygvmeLV 2JI2ollHbiHoAIkk9byQcJEud70fs6wV9xKeepezBVb1vxnLGfcFE9hxuuSTnolXNmMwhKi4EN2Q gR59PaAWoNpZzGnPhNrCpvWii98cx7OnMg/KgiSvTvECwqqNwpswEpTsLUxYi2IKT1vzEpoGDrfS a8BwM5PewxxSkxbbY61xjJoTFc2nbdRIzJ9Vr/LeViwSNKkqF/zGItgmnog7BIlkbvTZqbt6ZovJ u7SEfXLHWwFT5LNrKDTFjqKRhKRUEg71Nfpu+79oyCkCmMWJjds1DieEyRS9aLJ2f+9TJiwg1Xfh AgMBAAGjUTBPMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbh32f/my+ Aunz4Ck6ilQlLJ84LzAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQsFAAOCAgEAMu/LF7D/ 3qhx/P7jmMsUOkwQ4ZAgcTaMvDBdnPVA57OQAy9assTwJaQwbC/todWc7dxbz44NEqERP/Y7shta sTM4Zb9I3UMddrREnaN7gW+tW9brnOB/1cQiVgyOCmS/wedxCPBxj41AXSwA4Dphvfbn35ubmq0p I7SF//wc91OkH80z5VVhYuEps0SNpqdehkPET7if1jJaGgJ/Fx+hI0tqC4xmQvD8PPwuOluPDb2d SWU62b2Ga+xprr5qZWCuvEmb/0+UrvhZS0U8vbjV0Cx7Zuoyr5wx9sgeus08H2g6Z4yC56wtjuwD UVWXNCssIiolt5weyaKu+P11bjCNT4kgcrdkLvkSEv1gCOcDIm05sEogcUGar7rYfnV6GpCcjj9l oOY7y+eb/US2YQ6jLUSOaL5zhb04DSUKjT0npBrQPpugrZf74ZEoOuRRQjIWkpJ+72NiJfkfB6Ll iTfME2rnXnsZ8h3A/jJbfEGgeQhK6Q43nhmX0NBXGJvuk7ZTMw8OXhYU/yekKwAQsX4C5FRR7qzH EA+CZJl15KuWz/hjZGNFMtizG8P1A/eDhFdS6XwKlJE/pruWG78YPnpRbbGnfiMfKMFt+9scpyAA 4fatWx5vo9ThzyZhgC1ivZokaQuLd4rH7t2QdEKSP3tj6OjBA9/dyW9GG863BJRb+mQwggVkMIID TKADAgECAgphCxNwAAAAAAAIMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBv cmF0aW9uIFBFIFJvb3QgQ0EtMTAeFw0xNDA5MjMxNDExMDlaFw0yMDA5MjMxNDIxMDlaMFAxEzAR BgoJkiaJk/IsZAEZFgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUg Q29ycG9yYXRpb24gUEUgQ0EtMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCwfdfN xVXZ6/JpLeCsWV8VvVPRAiI4uemN3Cyn81gK/0uC0KJRX/WJ1XHmfzeLesyF46yxCgd0fe6mtaDf FQNWfngzMVaiHHT7nNyRcOo5TE+ZmzDe7i4Cp+Sd7ySSyaj5WTLVylv6PmFxtKYm/2tI44tELhGR Dsw/J7rhwi0/9jEujxjXpL64l72bcrEaDj8pSFg1LNPLFEe4S2jI9yxc5k0ZKQJtqGhBVPtOGSiZ gI8axrVkdnjr1Dwr0M1UT7Qmexp+r0WvMK16877VaApOGn0560eKtLgBYb8j72B7KUwFGFMtuM7Z dCCHYbiwLVnauOFbPK6qxhK/1fQBhZ0CAwEAAaOCAWUwggFhMBIGCSsGAQQBgjcVAQQFAgMBAAEw IwYJKwYBBAGCNxUCBBYEFK3ZS7o7L84O/Az72pcz74oBuJlNMB0GA1UdDgQWBBQMxmvuAka12Y/b o8zsvD7hBb2lJzAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRbh32f/my+Aunz4Ck6ilQlLJ84LzBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290 JTIwQ0EtMS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9odHRwOi8vcGtpLm1pdHJl Lm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290JTIwQ0EtMS5jcnQwDQYJKoZIhvcN AQELBQADggIBAD06aH/7xILol2cSQVcb5IUOOmM7spT7YGRDhGIosIFKbLSovt8NtmVwJY0I/2/Y 9rSD5hRQ2jdVWny3baAWRuhxjg/DjJgZ3wHyf8h5UtzcUEIfmslxOlDNlfFihKaMDUyqD4ycLEXW R7VGMjFQH5470vQPebdgoTgHBhdRHrOrtUb0/X1U4PUiR2TeOM4uQw0c0KupxNqG28Ff/Esonb2f JXs3i6hC8ke9gsysG8IssgY1xD8hPkqdJWBEcZYQjzkqIEyM+Z5p7640fX8eFPYiIXhHr2ZLf+8c 33FaIZEHDiQ7eFcxMQ3oxo0YvJKLwwrTGugne3pPNUd2DizbNP5u3YcPfMKSLgkmIqHOlshBq/kT na8btf//rwCspdTYGgCCtLrc0Tb26Rj4nKN8aEPJ08QYfFIgJv9DwejCC4km5bJh1ixczGraLqKb g8WJng9fRojYQcWKbf6NuJjWuwxud4NSDwcHcoTODd7p+3e9o6DrfH0OBzPOgd9+EFKI+dg6pbgY iZT8MUSUMA7dKxVysbrMrx/QOGVeYq7KzS+nip0usB4sCGIGZfyGZLkbj9rhtY3EnIdD8iKcgCtU CZHDDb3SzH7IpXICOzhIGRp8y9qSCemevhBJ8aXgcZcBvYPGbGcB4qzDclJKiDCC8rfUTeptdzOn dxibyGqMSYRKMIIFbzCCBFegAwIBAgIKFjewygABAAAZNTANBgkqhkiG9w0BAQsFADBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTIwHhcNMTUwMTI2MTQyNDUwWhcNMTgwMTI1MTQyNDUwWjBOMQswCQYD VQQGEwJVUzEOMAwGA1UEChMFTUlUUkUxDzANBgNVBAsTBlBlb3BsZTEeMBwGA1UEAxMVU2NobWlk dC5DaGFybGVzLjI1NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPFZQSeVxZu+ Gt4BfFomoILNlkXW2oAGBuhcEI5+Gfu33x7Or9K2NR3etzu9EqGPafLrJ1dyDWFIM9ktke0LqNKL 73WkWyCcpN0Bb7yXNPQynHzOgQSIrQbi7yrhmEbmNQC7hU5+BxfikIu/O7eSjWRgm9coRkEg6zpO 4nrADfumKIw/yVJ0dwqRVh9cMB7S8QJIXteDPHeZPeMAt7fw5TXTgF+OAwIqyjhHN4SiPMTQoDyZ HydqDxpd42gMZjLILS7oZ7pIDCfSwuPnM9PNHUzz5w+0D2hAYjv2a8BBh2L1LTV3nZVREN9uugVf w5Bu9q3T1ddeLrWsU4QvE8c0LwIDAQABo4ICSzCCAkcwEwYDVR0lBAwwCgYIKwYBBQUHAwQwgZQG CSqGSIb3DQEJDwSBhjCBgzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsOAwIH MAoGCCqGSIb3DQMHMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAS0wCwYJYIZIAWUDBAEWMAsGCWCG SAFlAwQBGTALBglghkgBZQMEAQIwCwYJYIZIAWUDBAEFMB0GA1UdDgQWBBTembLBQG/LThypM1w0 LH0xnzFqWzAOBgNVHQ8BAf8EBAMCBSAwHgYDVR0RBBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAf BgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2lJzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8v cGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/Bggr BgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29y cG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRy ZS5vcmcvb2NzcDA9BgkrBgEEAYI3FQcEMDAuBiYrBgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6u AYE20YFnhpiTPgIBZAIBEzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMEMA0GCSqGSIb3DQEB CwUAA4IBAQAKdBfLmGhQyfhBlJUrWwu5iuDwZTsOuddl9d4mw3Ml8yQjc21cCPDGJ3Tc3cwIJyj7 6rSK4mV6xsyUKDxZBZcNSM/7iLtFS9N8noe0Mo0TcPZuJzxzD8xtd/qlIvOLZR0rrS9v816ajAly u2OHTPi4lVtk/rI7ccO5C8uEMfrmXXTN6IJNyhqlprfCLDrICsGM3rXafADIkxBFGr0bXq6orGrM hJRMVQcdKdB5d/VqflqePmynjoorrIMnIfIEsfplYSsF3Uv8hAHxrHSldqOrl8aXvvyIh8d/UBx/ pQcw+0JQn9ebPCcMilCvNH2sKq+8SjJrmHNI1mjSxD5QLH3MMYIDXDCCA1gCAQEwXjBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTICChY3sr0AAQAAGTYwCQYFKw4DAhoFAKCCAdMwGAYJKoZIhvcNAQkD MQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTYwNjE0MTkwMTQ1WjAjBgkqhkiG9w0BCQQx FgQU7R7GlnQZAzn9niqtXgh8JgZQEIAwbQYJKwYBBAGCNxAEMWAwXjBQMRMwEQYKCZImiZPyLGQB GRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENvcnBvcmF0aW9u IFBFIENBLTICChY3sMoAAQAAGTUwbwYLKoZIhvcNAQkQAgsxYKBeMFAxEzARBgoJkiaJk/IsZAEZ FgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUgQ29ycG9yYXRpb24g UEUgQ0EtMgIKFjewygABAAAZNTCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglg hkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG 9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATAN BgkqhkiG9w0BAQEFAASCAQDafFbouWUW+ClLFkYYHJ/k/XmsS/J0EisUZrOeI9lu5Iu1dIBIMoSr ziWO/LEBlLq81EgpnlAti7RAcOeqasPKEeVp1AxNavn7EI9z3TeDX2IO1el2ux+L/I1+i078b2Uy rVO7sO1t5S9Qhc2QnOrnqf/kL5dyhuErp8tdaHLcWMV9MjvvmsgG4qGfypHdVkVUn2iAWTQKl+0r hgL+oZJax8ZUQRBkSvnRWY+CGbLu9hUSVzK/6eHYTnqpH/dHc7K+xpbyC19CI9E77ZRu2gyW4PIJ fxBYaniuddhvDl1B/uLWFTNozqfbuKPD1iSI6iei293iDaZAELgc9jqo9veYAAAAAAAA ------=_NextPart_000_0107_01D1C645.48FE6650-- From nobody Tue Jun 14 12:53:27 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A5AFC12D941 for ; Tue, 14 Jun 2016 12:53:23 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.601 X-Spam-Level: X-Spam-Status: No, score=-2.601 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=threatguard-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id FJJVuHIsJqbA for ; Tue, 14 Jun 2016 12:53:20 -0700 (PDT) Received: from mail-pa0-x22a.google.com (mail-pa0-x22a.google.com [IPv6:2607:f8b0:400e:c03::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C4CC912D942 for ; Tue, 14 Jun 2016 12:53:17 -0700 (PDT) Received: by mail-pa0-x22a.google.com with SMTP id b13so212665pat.0 for ; Tue, 14 Jun 2016 12:53:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=threatguard-com.20150623.gappssmtp.com; s=20150623; h=from:subject:to:references:message-id:date:user-agent:mime-version :in-reply-to:content-transfer-encoding; bh=iaRQxdqr1OA29WxvPGXe7AOFeFhxQtz40mp8OFN7Ie4=; b=uaQw08GJDSYRBfUFnOVyA2SZZtabaa6J7uhxNNN31ATXziiCXqY+B4bgFc/7OYNEnm bBAA/G3J4FYN39g6D+NqaiqGB9U3SVTBoVOFb229s7aWjBtEsO0e756k2o19aTUfcJUs U1WRk6Iy/zi2FNByhOhtcw1cuy0tWrINmdP+1wNV5S7epfqWJy1iWDeRNf99JgAADxmB ZmJSwMX6iGvpHBphSRRFR6EuNNiBWedCOcAjYqBOisonyEGof9iJ2Ma1NFSbbeT42DX1 DbA0C0ONtlkCLtXaI3F8Zu6aPbL7LeBnqPbJUbcJvLI4uINtjtY9d1irUsF3ble5QVBm ZsvQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:references:message-id:date :user-agent:mime-version:in-reply-to:content-transfer-encoding; bh=iaRQxdqr1OA29WxvPGXe7AOFeFhxQtz40mp8OFN7Ie4=; b=h2DmJd7Uj9LGEFSuNadIKaS9cpFGuMKF+PrRzW6CDkj2Vhcb1tOk/XgiKWNPIVJjN+ FO8GTLDfjMDh9T+pHBS9bCQD6TBp1Mywky36Xeuid/sfi1BLQ/1JPBNjJM58SVKxVw71 UugCThnS2YECm/qbMVhpCgZJP6CvqKYtYpoBuBzUhwu3/QrVDY5vx/buiBlP3HWQRwWA IsBde8XJ+dk5zcxVt2SiJMhYKDY8SQHBofuIZ9A3B8jr7/irZF7vXbTqTJV8nfjf/Ffj M0+dWdmh/09HH+DH5CQ733IBOnlyIczs4iHc4ADDP78EWR9Ar2OeuNa9MujS0SbsEW5s i3Fw== X-Gm-Message-State: ALyK8tIWjvxxJxelG83TDBi96qmp2Razx5fAM2fsDGV+qjxZ0ax1wFUEYdVD2gRaGSzfYg== X-Received: by 10.66.89.228 with SMTP id br4mr29649781pab.110.1465933997029; Tue, 14 Jun 2016 12:53:17 -0700 (PDT) Received: from [172.16.1.122] (75-142-12-171.dhcp.mdfd.or.charter.com. [75.142.12.171]) by smtp.gmail.com with ESMTPSA id i17sm47273565pfj.77.2016.06.14.12.53.15 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 14 Jun 2016 12:53:16 -0700 (PDT) From: Gunnar Engelbach X-Google-Original-From: Gunnar Engelbach To: "Schmidt, Charles M." , "tony@yaanatech.com" , Adam Montville , "" References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> Message-ID: <7c3e8459-9364-da92-3207-70cbd11d9f00@ThreatGuard.com> Date: Tue, 14 Jun 2016 12:53:17 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit Archived-At: Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Jun 2016 19:53:23 -0000 Yes, that's exactly what I had in mind. Ideally there would be enough coverage right off the bat such that we don't have to do any extensions right away -- and the fewer down the road the better. All three of these requirements are linked. I would say that extensibility is primary, but that needs to be weighed against how easy it is to extend, which depends on the owning organization and might be offset by starting with a data model that is already very complete for our needs. And so on. The trickier part to start with is figuring out what we mean by complete. What is that set of properties and data types that are core? I would prefer to build such a list by looking at usage -- current and desired. A simpler approach would be to look at existing data models and flag things we think are important, but that can be self-fulfilling and insular. --gun On 6/14/2016 12:01 PM, Schmidt, Charles M. wrote: > Hi Gunnar, > > Thanks for the suggestions. I agree with these requirements with a possible > tweak on number 3: I would say that the data model needs to cover a > sufficent "core", but probably does not need to explicitly cover every piece > of information from every reasonable, providing that the extensibility > features described in item 1 would allow that information to be captured. > The end result is the same - the transmitted data can capture all > information from whatever source is used without loss. The difference is > that we only need to identify fields that are likely to be of common > utility, and edge cases can naturally be taken care of through extensions. > > Does this seem reasonable? > > Charles > >> -----Original Message----- >> From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Gunnar Engelbach >> Sent: Thursday, June 09, 2016 7:45 PM >> To: tony@yaanatech.com; Adam Montville ; >> >> Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc > as >> a SACM WG document >> >> >> >> Hey Tony, funny thing that you should say that. You seem to have a better >> awareness of the other efforts going on out there than I do, so I could > use >> your help in identifying other good candidates and what will be necessary > to >> support as many of them as possible. >> >> What I'd really like to do is take a more formal approach -- gather some >> requirements and then see from among the existing efforts which is the > best >> from among those that are good enough. If any. >> >> But first is a matter of setting the requirements. Stated generally, I > really >> only have three: >> >> 1) Is extensible -- as a fork outside of the current owner, if > necessary, to be >> sure it continues to meet SACM needs without relying on the good graces of >> the current owner >> >> 2) Readily accessible (eg., spec is not cost prohibitive for any users) >> >> 3) The most complete (that is, closest to being able to represent the > other >> tag types without loss of data or shoe-horning data into fields that > weren't >> really meant for that type of data) >> >> >> I'm sure Charles, et al, will have other requirements, so feel free to > chime in. >> However, I think the simpler and more informal we can keep this list the >> quicker we can grind through it. >> >> >> --gun >> >> >> >> >> >> On 6/9/2016 2:33 PM, Tony Rutkowski wrote: >> >> >> Hi Adam, >> >> A good solution. Charles and Gunnar should also engage >> in some proactive outreach. Simply stating that "no other >> solutions to the problem of software identification have >> been submitted" is preposterous when there are so many >> out there. IMHO, one of the long-standing problems with >> SACM is its institutional and participatory insularity in an >> arena where so many almost identical activities are occurring >> in other venues where there is far greater industry participation. >> Ignoring them diminishes the value of whatever SACM >> accomplishes. >> >> --tony >> >> >> On 2016-06-09 3:47 PM, Adam Montville wrote: >> >> >> All: >> >> After several on-list discussions, the last virtual interim, > and >> the discussions surrounding this call for adoption, the chairs acknowledge >> that there are some key concerns with this draft, but also see that there > is >> rough consensus for adoption. We additionally note that no other > solutions >> to the problem of software identification have been submitted to the >> working group [1]. >> >> Because the topic of software identification, and SWID in >> particular, appears to be a contentious one, we are designating Charles >> Schmidt and Gunnar Engelbach as editors of the working group draft [2]. > We >> believe that Charles and Gunnar will bring the necessary balance to this > draft, >> so that the key concerns are sufficiently addressed. >> >> Kind regards, >> >> Adam & Karen >> >> [1] This draft adoption does not preclude future alternative >> submissions >> [2] Note that original authors will remain authors, but > Charles >> and Gunnar will hold the pen. >> >> >> >> On May 17, 2016, at 11:21 AM, Karen O'Donoghue >> > wrote: >> >> Folks, >> >> As discussed during our last couple of meetings, > this >> is the official call for adoption of > > coffin-sacm-nea-swid-patnc/> > https://datatracker.ietf.org/doc/draft-coffin- >> sacm-nea-swid-patnc/ as a SACM working group document. >> >> Please reply with any comments or concerns along >> your support of this action to the mailing list. >> >> Thanks, >> Karen and Adam >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm >> >> >> >> >> >> >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm >> >> >> >> >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm >> From nobody Wed Jun 15 09:04:44 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 97EBD12D7CD for ; Wed, 15 Jun 2016 09:04:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.555 X-Spam-Level: X-Spam-Status: No, score=-3.555 tagged_above=-999 required=5 tests=[BAYES_20=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cJ_5db9WGwvS for ; Wed, 15 Jun 2016 09:04:41 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext4.iad.github.net [192.30.252.195]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1D60512D8FB for ; Wed, 15 Jun 2016 09:04:41 -0700 (PDT) Date: Wed, 15 Jun 2016 09:04:40 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1466006680; bh=R6uyUQApbVb8PRSeei7Q1JTHJdZBr0L03E0GBVaK4G4=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=Hz38uaFjCbnnfKk0Ibk7zDxgUE3uT4aAtDk+ncnaPHDG/CVam49oBLhHmrJCAgdjm 7zO8Sxg5lFItNWj7cngyUXs7Zxj7mhIYylWYS85bJJY+2h3wzEI2nEe++fRcFu9PQS vQen5bP3ovqMmvwgYO3ZZJ/gKpRpUwYL4jLMHjRo= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_57617c987c9b_10cd3ff6901bb2c091018"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/vulnerability-scenario] adding wg version of vulnerability assessment scenario (#24) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Jun 2016 16:04:43 -0000 ----==_mimepart_57617c987c9b_10cd3ff6901bb2c091018 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit You can view, comment on, or merge this pull request online at: https://github.com/sacmwg/vulnerability-scenario/pull/24 -- Commit Summary -- * adding wg version of vulnerability assessment scenario -- File Changes -- A draft-ietf-sacm-vuln-scenario.xml (1215) -- Patch Links -- https://github.com/sacmwg/vulnerability-scenario/pull/24.patch https://github.com/sacmwg/vulnerability-scenario/pull/24.diff --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/pull/24 ----==_mimepart_57617c987c9b_10cd3ff6901bb2c091018 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

You can view, comment on, or merge this pull request online at:

  https://github.com/sacmwg/vulnerability-scenario/pull/24

Commit Summary

  • adding wg version of vulnerability assessment scenario

File Changes

Patch Links:

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_57617c987c9b_10cd3ff6901bb2c091018-- From nobody Wed Jun 15 12:34:38 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 251D612DB27 for ; Wed, 15 Jun 2016 12:34:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wAgYQ9BtYy39 for ; Wed, 15 Jun 2016 12:34:35 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id C562712D8D9 for ; Wed, 15 Jun 2016 12:34:34 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 235F36C08B8 for ; Wed, 15 Jun 2016 15:34:34 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 0F0BB6C089F for ; Wed, 15 Jun 2016 15:34:34 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Wed, 15 Jun 2016 15:34:33 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Wed, 15 Jun 2016 15:34:33 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=h1JwXccFqkfh6UhoWEGTY9NiWQ6LZN3FfeEmlMvYRUM=; b=G7p7d2sfkkfnZi4MAFr0k1SsdQS+eiA2B+SuW7kXsZcmkHCFXlbMZIOPLaUT0tCxaUagRjQowy+W6hdOE+v66v/fMPj24du7/vInhdwCEVyvMTp2gZ6UiPyIwc7GdMX4HhHzdSZD4Sw71Inb8QiUFvMohTr8ZYKupTs06Xpz7XA= Received: from SN1PR09MB0990.namprd09.prod.outlook.com (10.166.69.8) by SN1PR09MB0989.namprd09.prod.outlook.com (10.166.69.7) with Microsoft SMTP Server (TLS) id 15.1.517.8; Wed, 15 Jun 2016 19:34:32 +0000 Received: from SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) by SN1PR09MB0990.namprd09.prod.outlook.com ([10.166.69.8]) with mapi id 15.01.0517.013; Wed, 15 Jun 2016 19:34:32 +0000 From: "Schmidt, Charles M." To: "" Thread-Topic: NIST IR 8060 - Guidelines for the Creation of Interoperable Software Identification (SWID) Tags Thread-Index: AdHHOyogWN1Lf6BxTmCIP3NbfOeSGQ== Date: Wed, 15 Jun 2016 19:34:31 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=cmschmidt@mitre.org; x-originating-ip: [192.160.51.88] x-ms-office365-filtering-correlation-id: 64f916db-1186-428c-d071-08d39554131f x-microsoft-exchange-diagnostics: 1; SN1PR09MB0989; 6:n4HMfe7aW+Ca5SF8kYwxFqyb7IIn9zddq96XZBGTaVfaR0HWjL0lVOMBkSf7a1uwuQTcESqbUk0cAwfdyPV7wBgbLTRK+TH3UsB2rhpnSZUNzlXcGM82WFpcUUUm2zh9/TIhXff1nMeqht1/loftF5X6slLK5mp4zuRO2AEdkhIhfo4KlAuFkA1FA+O8QhNxxiYdIZ/Bt/ivkf75tfBc8BQVJfWIpATXYsDBNTlK8G6SR5RImKjyWGSodXHAmVc7DwZExzM3CaQAOkUBdeaX0M43NZRPONMJFgpPXlnYkI7D0a9Qthakz7gmiB8QA+hPGelqiHvgPLPVlCNeXzVExg==; 5:X4VoyFS/Ys8fXkJAah76tOTvi0VvqEMbeoUyv7rusvdM9AlYGHAh8/AFDnGfvKdK8H4EGaq/eLbi2hF4eP+eKtQt3aU0mJ58rc6ePrnxCq5uAy833uB+PhieA602/uJ3fR4RqWhD+Jn1a3c3EBLAVg==; 24:pvCiQUnEAw5OhBmSuoaXC7HnMNdsgVzo+yAuqpYMvTOTdk29D/LvyQc66QAZgv203/1wwSHJ30xH5ZDCOmbxzQLgLv8lCuF1W+/pYWEIPAM=; 7:SPBhc/u1QXgb9W6MpjRgojcNct9jK3VbF2D4sNFugP8RPGHjsJspjxpLx3ceDXI53+ziT7Xo9jU3PyLo/lhqY2cKpSILz9QZav3kvZ14i7FW5OShHOObYe38DVxsjHtB+naUX29r5x0qtDzDo25as9a3FxndcW0DTa2XSYn+iu7i590CZy/+rBVydfy93Rmb4iumbPbJ5To+Q38s3JpOaUia5kTlR4OO+lSq1G7kCT0= x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:SN1PR09MB0989; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(65766998875637)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:SN1PR09MB0989; BCL:0; PCL:0; RULEID:; SRVR:SN1PR09MB0989; x-forefront-prvs: 09749A275C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(979002)(6009001)(7916002)(189002)(199003)(101416001)(2900100001)(99286002)(450100001)(10400500002)(99936001)(2906002)(8936002)(3280700002)(5004730100002)(8676002)(81166006)(15975445007)(77096005)(5008740100001)(76576001)(87936001)(33656002)(68736007)(3846002)(229853001)(81156014)(97736004)(5003600100002)(19580395003)(74316001)(106356001)(54356999)(50986999)(11100500001)(189998001)(3660700001)(122556002)(105586002)(586003)(6116002)(9686002)(92566002)(107886002)(86362001)(102836003)(110136002)(5002640100001)(66066001)(491001)(969003)(989001)(999001)(1009001)(1019001); DIR:OUT; SFP:1101; SCL:1; SRVR:SN1PR09MB0989; H:SN1PR09MB0990.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; CAT:NONE; LANG:en; CAT:NONE; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=SHA1; boundary="----=_NextPart_000_009C_01D1C713.052BFD10" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jun 2016 19:34:31.7671 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN1PR09MB0989 X-OriginatorOrg: mitre.org Archived-At: Subject: [sacm] NIST IR 8060 - Guidelines for the Creation of Interoperable Software Identification (SWID) Tags X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Jun 2016 19:34:37 -0000 ------=_NextPart_000_009C_01D1C713.052BFD10 Content-Type: multipart/alternative; boundary="----=_NextPart_001_009D_01D1C713.052BFD10" ------=_NextPart_001_009D_01D1C713.052BFD10 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hello, On today's call Jim requested a link to the NIST Interagency Report on SWID tags. The link to that document (NISTIR 8060 "Guidelines for the Creation of Interoperable Software Identification (SWID) Tags") is here: http://nvlpubs.nist.gov/nistpubs/ir/2016/NIST.IR.8060.pdf Between this and the freely available XML schema for ISO SWID 2015 tags (http://standards.iso.org/iso/19770/-2/2015-current/schema.xsd) hopefully this addresses most of the availability concerns regarding ISO SWID 2015 as a data model. And for the sake of being complete, the XML schema for ISO SWID 2009 is also available (http://standards.iso.org/iso/19770/-2/2009/schema.xsd). Note that the NIST document deals with SWID 2015, not SWID 2009. Charles ------=_NextPart_001_009D_01D1C713.052BFD10 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable NIST IR 8060 - Guidelines for the Creation of Interoperable = Software Identification (SWID) Tags

Hello,

On today's call = Jim requested a link to the NIST Interagency Report on SWID tags. The = link to that document (NISTIR 8060 "Guidelines for the Creation of = Interoperable Software Identification (SWID) = Tags") is here: http:/= /nvlpubs.nist.gov/nistpubs/ir/2016/NIST.IR.8060.pdf

Between this = and the freely available XML schema for ISO SWID 2015 tags = (ht= tp://standards.iso.org/iso/19770/-2/2015-current/schema.xsd) hopefully this addresses most of = the availability concerns regarding ISO SWID 2015 as a data model.

And for the = sake of being complete, the XML schema for ISO SWID 2009 is also = available (http://sta= ndards.iso.org/iso/19770/-2/2009/schema.xsd). Note that the NIST document = deals with SWID 2015, not SWID 2009.

Charles

------=_NextPart_001_009D_01D1C713.052BFD10-- ------=_NextPart_000_009C_01D1C713.052BFD10 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIIVFzCCBQcw ggPvoAMCAQICChY3sr0AAQAAGTYwDQYJKoZIhvcNAQELBQAwUDETMBEGCgmSJomT8ixkARkWA09S RzEVMBMGCgmSJomT8ixkARkWBU1JVFJFMSIwIAYDVQQDExlNSVRSRSBDb3Jwb3JhdGlvbiBQRSBD QS0yMB4XDTE1MDEyNjE0MjQ1MFoXDTE4MDEyNTE0MjQ1MFowTjELMAkGA1UEBhMCVVMxDjAMBgNV BAoTBU1JVFJFMQ8wDQYDVQQLEwZQZW9wbGUxHjAcBgNVBAMTFVNjaG1pZHQuQ2hhcmxlcy4yNTY1 ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN5xc5J1BiLU7EoWUMfTywdDl9O8BN8w Mv9ZVYlyXwRv7wyLQOSV6zlFANSf8RvuP2Yt5akFlLawX9s5MsqMTqNoDuJ0rV3fz7cwniAHJPJQ 9r7Ito9rtbW55YcLy9AQeD1MwZEP8BX8Xw4iGtyjNSYFOuPbumz19c9S2e1Hu5kbgQcgpKAl8yqw jmxbxjl2Dabd8Vsb718KIbXW63Lcq0XXZAHHRmoZS3sYAHiYR7IkoXAdu6jZdaBapuQ2zTrBPhY8 a9D2HFWBLnDo3H7rT75+xtOr5toOg5X35K0loeRRF+gVGvRCPzpICJm+2FEaV1AbfG4CBVpXzMHu RCyzitECAwEAAaOCAeMwggHfMCgGA1UdJQQhMB8GCCsGAQUFBwMEBgkrBgEEAXMCAQcGCCsGAQUF BwMCMB0GA1UdDgQWBBTqU2AbFZCeOIL9w7THoPvAqThWlzAOBgNVHQ8BAf8EBAMCBsAwHgYDVR0R BBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAfBgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2l JzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0 aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/BggrBgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6 Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29ycG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYG CCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRyZS5vcmcvb2NzcDA+BgkrBgEEAYI3FQcEMTAvBicr BgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6uAYE2gZe0EIWZ/woCAWQCAQswNAYJKwYBBAGCNxUK BCcwJTAKBggrBgEFBQcDBDALBgkrBgEEAXMCAQcwCgYIKwYBBQUHAwIwDQYJKoZIhvcNAQELBQAD ggEBAGHCUualAhLcCqxuPwC1EcEtQ+11msjtfh0g21t0ocOwVVidgoB/QL8PFaFp15XKEzYcGf7l IcJHNjLWwG8x8G1rnSdKGyJgj/5vHSFRm/NUYmSpqWc1k3s/Ps5GlvWWEmu8VtUHJcqeqPy7tkXe 0rzHGpvj0+pPAGjgqvLUxs3IPj2ME1v+lQ/DotWa9WTJo6SitnbYpj5ARRDoQjS9zY1idjZpTqyZ XPDO/yZnTaR5Ue1sHdARztlnNIQszBsJRPWh4kldQ4d0qHUycia+Jtm7Rbj1Itpb4jDyiK+9mxzE tNfYzzvtmCB0y/Eq4PGurhFFydPk18zpEapb+dlP5WYwggUtMIIDFaADAgECAhBMOlIUIU/ToEQV R3+ykPtQMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBvcmF0aW9uIFBFIFJv b3QgQ0EtMTAeFw0xMTA0MjYxOTQ1NDVaFw0yMTA0MjYxOTQ4MjJaMCkxJzAlBgNVBAMTHk1JVFJF IENvcnBvcmF0aW9uIFBFIFJvb3QgQ0EtMTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB ALafIUdIUat4pvgJcH2+WRxj+ZNjkmNk5VR2ByDFAx9zH1u2+vJQd49zMADLMRitZHv7ejuCtLfc ER+EA4DkNQrYZjhmVu8YjfNYdLz9WH9eEjboFGu2bx/Sj94l7MvEJzh2pdWyn9D2vSl4m+fKlLsH 2mUgk1uT9npKnfM+ExE73wVrz4A8csZ1bIgDusi/VmkaTIklTIWC1stykblP4LntG1RIvqnYPoRD YdTUjV6aKrHktutp6uXMecMm0fzxdGLLUPTTZWAzOXCxAimBx8w+nFyiaM7hV64rMJRPK3Z2u1Ws cma34AtLnhCGP7bI/+uSMlIcjwcDtGaVvi7PQneGPhEUruZkeRXfMONnlc7qLJpN7NwMaygvmeLV 2JI2ollHbiHoAIkk9byQcJEud70fs6wV9xKeepezBVb1vxnLGfcFE9hxuuSTnolXNmMwhKi4EN2Q gR59PaAWoNpZzGnPhNrCpvWii98cx7OnMg/KgiSvTvECwqqNwpswEpTsLUxYi2IKT1vzEpoGDrfS a8BwM5PewxxSkxbbY61xjJoTFc2nbdRIzJ9Vr/LeViwSNKkqF/zGItgmnog7BIlkbvTZqbt6ZovJ u7SEfXLHWwFT5LNrKDTFjqKRhKRUEg71Nfpu+79oyCkCmMWJjds1DieEyRS9aLJ2f+9TJiwg1Xfh AgMBAAGjUTBPMAsGA1UdDwQEAwIBhjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRbh32f/my+ Aunz4Ck6ilQlLJ84LzAQBgkrBgEEAYI3FQEEAwIBADANBgkqhkiG9w0BAQsFAAOCAgEAMu/LF7D/ 3qhx/P7jmMsUOkwQ4ZAgcTaMvDBdnPVA57OQAy9assTwJaQwbC/todWc7dxbz44NEqERP/Y7shta sTM4Zb9I3UMddrREnaN7gW+tW9brnOB/1cQiVgyOCmS/wedxCPBxj41AXSwA4Dphvfbn35ubmq0p I7SF//wc91OkH80z5VVhYuEps0SNpqdehkPET7if1jJaGgJ/Fx+hI0tqC4xmQvD8PPwuOluPDb2d SWU62b2Ga+xprr5qZWCuvEmb/0+UrvhZS0U8vbjV0Cx7Zuoyr5wx9sgeus08H2g6Z4yC56wtjuwD UVWXNCssIiolt5weyaKu+P11bjCNT4kgcrdkLvkSEv1gCOcDIm05sEogcUGar7rYfnV6GpCcjj9l oOY7y+eb/US2YQ6jLUSOaL5zhb04DSUKjT0npBrQPpugrZf74ZEoOuRRQjIWkpJ+72NiJfkfB6Ll iTfME2rnXnsZ8h3A/jJbfEGgeQhK6Q43nhmX0NBXGJvuk7ZTMw8OXhYU/yekKwAQsX4C5FRR7qzH EA+CZJl15KuWz/hjZGNFMtizG8P1A/eDhFdS6XwKlJE/pruWG78YPnpRbbGnfiMfKMFt+9scpyAA 4fatWx5vo9ThzyZhgC1ivZokaQuLd4rH7t2QdEKSP3tj6OjBA9/dyW9GG863BJRb+mQwggVkMIID TKADAgECAgphCxNwAAAAAAAIMA0GCSqGSIb3DQEBCwUAMCkxJzAlBgNVBAMTHk1JVFJFIENvcnBv cmF0aW9uIFBFIFJvb3QgQ0EtMTAeFw0xNDA5MjMxNDExMDlaFw0yMDA5MjMxNDIxMDlaMFAxEzAR BgoJkiaJk/IsZAEZFgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUg Q29ycG9yYXRpb24gUEUgQ0EtMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJCwfdfN xVXZ6/JpLeCsWV8VvVPRAiI4uemN3Cyn81gK/0uC0KJRX/WJ1XHmfzeLesyF46yxCgd0fe6mtaDf FQNWfngzMVaiHHT7nNyRcOo5TE+ZmzDe7i4Cp+Sd7ySSyaj5WTLVylv6PmFxtKYm/2tI44tELhGR Dsw/J7rhwi0/9jEujxjXpL64l72bcrEaDj8pSFg1LNPLFEe4S2jI9yxc5k0ZKQJtqGhBVPtOGSiZ gI8axrVkdnjr1Dwr0M1UT7Qmexp+r0WvMK16877VaApOGn0560eKtLgBYb8j72B7KUwFGFMtuM7Z dCCHYbiwLVnauOFbPK6qxhK/1fQBhZ0CAwEAAaOCAWUwggFhMBIGCSsGAQQBgjcVAQQFAgMBAAEw IwYJKwYBBAGCNxUCBBYEFK3ZS7o7L84O/Az72pcz74oBuJlNMB0GA1UdDgQWBBQMxmvuAka12Y/b o8zsvD7hBb2lJzAZBgkrBgEEAYI3FAIEDB4KAFMAdQBiAEMAQTALBgNVHQ8EBAMCAYYwDwYDVR0T AQH/BAUwAwEB/zAfBgNVHSMEGDAWgBRbh32f/my+Aunz4Ck6ilQlLJ84LzBQBgNVHR8ESTBHMEWg Q6BBhj9odHRwOi8vcGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290 JTIwQ0EtMS5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9odHRwOi8vcGtpLm1pdHJl Lm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBSb290JTIwQ0EtMS5jcnQwDQYJKoZIhvcN AQELBQADggIBAD06aH/7xILol2cSQVcb5IUOOmM7spT7YGRDhGIosIFKbLSovt8NtmVwJY0I/2/Y 9rSD5hRQ2jdVWny3baAWRuhxjg/DjJgZ3wHyf8h5UtzcUEIfmslxOlDNlfFihKaMDUyqD4ycLEXW R7VGMjFQH5470vQPebdgoTgHBhdRHrOrtUb0/X1U4PUiR2TeOM4uQw0c0KupxNqG28Ff/Esonb2f JXs3i6hC8ke9gsysG8IssgY1xD8hPkqdJWBEcZYQjzkqIEyM+Z5p7640fX8eFPYiIXhHr2ZLf+8c 33FaIZEHDiQ7eFcxMQ3oxo0YvJKLwwrTGugne3pPNUd2DizbNP5u3YcPfMKSLgkmIqHOlshBq/kT na8btf//rwCspdTYGgCCtLrc0Tb26Rj4nKN8aEPJ08QYfFIgJv9DwejCC4km5bJh1ixczGraLqKb g8WJng9fRojYQcWKbf6NuJjWuwxud4NSDwcHcoTODd7p+3e9o6DrfH0OBzPOgd9+EFKI+dg6pbgY iZT8MUSUMA7dKxVysbrMrx/QOGVeYq7KzS+nip0usB4sCGIGZfyGZLkbj9rhtY3EnIdD8iKcgCtU CZHDDb3SzH7IpXICOzhIGRp8y9qSCemevhBJ8aXgcZcBvYPGbGcB4qzDclJKiDCC8rfUTeptdzOn dxibyGqMSYRKMIIFbzCCBFegAwIBAgIKFjewygABAAAZNTANBgkqhkiG9w0BAQsFADBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTIwHhcNMTUwMTI2MTQyNDUwWhcNMTgwMTI1MTQyNDUwWjBOMQswCQYD VQQGEwJVUzEOMAwGA1UEChMFTUlUUkUxDzANBgNVBAsTBlBlb3BsZTEeMBwGA1UEAxMVU2NobWlk dC5DaGFybGVzLjI1NjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPFZQSeVxZu+ Gt4BfFomoILNlkXW2oAGBuhcEI5+Gfu33x7Or9K2NR3etzu9EqGPafLrJ1dyDWFIM9ktke0LqNKL 73WkWyCcpN0Bb7yXNPQynHzOgQSIrQbi7yrhmEbmNQC7hU5+BxfikIu/O7eSjWRgm9coRkEg6zpO 4nrADfumKIw/yVJ0dwqRVh9cMB7S8QJIXteDPHeZPeMAt7fw5TXTgF+OAwIqyjhHN4SiPMTQoDyZ HydqDxpd42gMZjLILS7oZ7pIDCfSwuPnM9PNHUzz5w+0D2hAYjv2a8BBh2L1LTV3nZVREN9uugVf w5Bu9q3T1ddeLrWsU4QvE8c0LwIDAQABo4ICSzCCAkcwEwYDVR0lBAwwCgYIKwYBBQUHAwQwgZQG CSqGSIb3DQEJDwSBhjCBgzAOBggqhkiG9w0DAgICAIAwDgYIKoZIhvcNAwQCAgCAMAcGBSsOAwIH MAoGCCqGSIb3DQMHMAsGCWCGSAFlAwQBKjALBglghkgBZQMEAS0wCwYJYIZIAWUDBAEWMAsGCWCG SAFlAwQBGTALBglghkgBZQMEAQIwCwYJYIZIAWUDBAEFMB0GA1UdDgQWBBTembLBQG/LThypM1w0 LH0xnzFqWzAOBgNVHQ8BAf8EBAMCBSAwHgYDVR0RBBcwFYETY21zY2htaWR0QG1pdHJlLm9yZzAf BgNVHSMEGDAWgBQMxmvuAka12Y/bo8zsvD7hBb2lJzBMBgNVHR8ERTBDMEGgP6A9hjtodHRwOi8v cGtpLm1pdHJlLm9yZy9NSVRSRSUyMENvcnBvcmF0aW9uJTIwUEUlMjBDQS0yKDEpLmNybDB/Bggr BgEFBQcBAQRzMHEwRwYIKwYBBQUHMAKGO2h0dHA6Ly9wa2kubWl0cmUub3JnL01JVFJFJTIwQ29y cG9yYXRpb24lMjBQRSUyMENBLTIoMSkuY3J0MCYGCCsGAQUFBzABhhpodHRwOi8vb2NzcC5taXRy ZS5vcmcvb2NzcDA9BgkrBgEEAYI3FQcEMDAuBiYrBgEEAYI3FQiDrqwjho6WV4GNiT2CpKsShb6u AYE20YFnhpiTPgIBZAIBEzAbBgkrBgEEAYI3FQoEDjAMMAoGCCsGAQUFBwMEMA0GCSqGSIb3DQEB CwUAA4IBAQAKdBfLmGhQyfhBlJUrWwu5iuDwZTsOuddl9d4mw3Ml8yQjc21cCPDGJ3Tc3cwIJyj7 6rSK4mV6xsyUKDxZBZcNSM/7iLtFS9N8noe0Mo0TcPZuJzxzD8xtd/qlIvOLZR0rrS9v816ajAly u2OHTPi4lVtk/rI7ccO5C8uEMfrmXXTN6IJNyhqlprfCLDrICsGM3rXafADIkxBFGr0bXq6orGrM hJRMVQcdKdB5d/VqflqePmynjoorrIMnIfIEsfplYSsF3Uv8hAHxrHSldqOrl8aXvvyIh8d/UBx/ pQcw+0JQn9ebPCcMilCvNH2sKq+8SjJrmHNI1mjSxD5QLH3MMYIDXDCCA1gCAQEwXjBQMRMwEQYK CZImiZPyLGQBGRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENv cnBvcmF0aW9uIFBFIENBLTICChY3sr0AAQAAGTYwCQYFKw4DAhoFAKCCAdMwGAYJKoZIhvcNAQkD MQsGCSqGSIb3DQEHATAcBgkqhkiG9w0BCQUxDxcNMTYwNjE1MTkzNDI3WjAjBgkqhkiG9w0BCQQx FgQUfoEqRJjtKhoq4edwCf/gvpXCNr8wbQYJKwYBBAGCNxAEMWAwXjBQMRMwEQYKCZImiZPyLGQB GRYDT1JHMRUwEwYKCZImiZPyLGQBGRYFTUlUUkUxIjAgBgNVBAMTGU1JVFJFIENvcnBvcmF0aW9u IFBFIENBLTICChY3sMoAAQAAGTUwbwYLKoZIhvcNAQkQAgsxYKBeMFAxEzARBgoJkiaJk/IsZAEZ FgNPUkcxFTATBgoJkiaJk/IsZAEZFgVNSVRSRTEiMCAGA1UEAxMZTUlUUkUgQ29ycG9yYXRpb24g UEUgQ0EtMgIKFjewygABAAAZNTCBkwYJKoZIhvcNAQkPMYGFMIGCMAsGCWCGSAFlAwQBKjALBglg hkgBZQMEARYwCgYIKoZIhvcNAwcwCwYJYIZIAWUDBAECMA4GCCqGSIb3DQMCAgIAgDANBggqhkiG 9w0DAgIBQDAHBgUrDgMCGjALBglghkgBZQMEAgMwCwYJYIZIAWUDBAICMAsGCWCGSAFlAwQCATAN BgkqhkiG9w0BAQEFAASCAQCnH37C7amnhYOSGbz4ej5TcPXmwj6iyqdVFPdflhKlEO+QuwoN1kMB gmSLcNER+BMt747ZUZqvuzhcBDjPkIYfh0sJGBpa31rTo+H1ekTT9cAr0kLxaa4lHQBdbNCGQcBx LzzxLAZUQF0IGXCzLJVaVgOGtjC5QwPUTSj67MAWtvb98vcojVXjLxiHqvNN4JaHlQHR7hrR6/sQ AEOzBYTPfzas5E3HqMamyUf1JC+fg4wJ/8bnhRHMEbXG0Mxs8Tek4r1S1ROsJbbDvB4jDzQwpj1G d+kwGJNnsDChrz9JM2pBGNc5MtbM0WhlGu6hAnLh6FVvT8f3AI5UBQZTxvmeAAAAAAAA ------=_NextPart_000_009C_01D1C713.052BFD10-- From nobody Wed Jun 15 18:38:42 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 67A9C12D82B for ; Wed, 15 Jun 2016 18:38:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.941 X-Spam-Level: X-Spam-Status: No, score=-4.941 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id SWcLz2h1KiGE for ; Wed, 15 Jun 2016 18:38:39 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E95E012D594 for ; Wed, 15 Jun 2016 18:38:38 -0700 (PDT) Date: Wed, 15 Jun 2016 18:38:37 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1466041117; bh=32m+Py4QdvjzXFllrj/exXFpmG4ns+QFimFd5LO3tO4=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=HZIxhMNjsfPsRAf7JY4VKEH1yzVV4oiHjBqAt99dSd22H4v4TNyAWBJeRLBfe7/4D rdxmIQ3uFScBkKUSmlfymKllcEa+0OaM1UzVualQltPbPQpVttODwasQf3bfNs0IeE Uiq5tNixpkjzt9qWafKUpib02leFyJrjOsebGgm0= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_5762031dca9c8_63103fb25bc952a025465"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/vulnerability-scenario] determine alignment of vulnerability assessment process with sacm tasks (#25) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jun 2016 01:38:40 -0000 ----==_mimepart_5762031dca9c8_63103fb25bc952a025465 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit We should examine the vulnerability assessment process outlined in the draft and determine the alignment with SACM tasks and update as necessary. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/25 ----==_mimepart_5762031dca9c8_63103fb25bc952a025465 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

We should examine the vulnerability assessment process outlined in the draft and determine the alignment with SACM tasks and update as necessary.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_5762031dca9c8_63103fb25bc952a025465-- From nobody Thu Jun 16 10:15:56 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 405B112DA18 for ; Thu, 16 Jun 2016 10:15:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S8k80G9hzDtY for ; Thu, 16 Jun 2016 10:15:52 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 0ECE812DA16 for ; Thu, 16 Jun 2016 10:15:51 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 5A29C6C007C; Thu, 16 Jun 2016 13:15:51 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 406BA6C003C; Thu, 16 Jun 2016 13:15:51 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Thu, 16 Jun 2016 13:15:49 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Thu, 16 Jun 2016 13:15:49 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=klMccy+MEB6hYBNkM5hIu9tkBE98+Y3atQdEIoGObhc=; b=FWCgaYX1RfRw4aHSPlpRPb3IEELq9XLN4Qmr77LcrK7cleXmb6oErBFryULoPuZxp3+gugCUnD7tYcfrL0MWv6aTpw/kQaCKir9XnS3d1L96Grpuu6otWrElBfUAPZeMBuHY0CdxJ4m99rC2Pflz3h3pPtWRpGstu2IA5D7UFU8= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1079.namprd09.prod.outlook.com (10.166.116.11) with Microsoft SMTP Server (TLS) id 15.1.523.12; Thu, 16 Jun 2016 17:15:43 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.011; Thu, 16 Jun 2016 17:15:43 +0000 From: "Haynes, Dan" To: Jerome Athias Thread-Topic: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability Thread-Index: AdGwcFvLuy7EoIEtTYaAcqw7unANPgNvMHSAAHxc8hAAFObXAAHecrng Date: Thu, 16 Jun 2016 17:15:43 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.89] x-ms-office365-filtering-correlation-id: 5441ca7f-e783-4477-27a3-08d39609d96b x-microsoft-exchange-diagnostics: 1; BY2PR09MB1079; 6:kpzNb/dIuQTXvJy/4tih91+7FXXMX9UnGKyJJdFG4FKE/lc2DwkIpadDZBYZ6XQ37df0ta2B4SL+KrfcrpApH7gMtl2jeVPkR6gVQZRdbsVpBFxQF84dQpIRG77webYk+bfpbAGNzHUNqWFrGfhEXACVexyXP8lDnPQxNDccLNAoP/Ixp1uU61dcSb3P7FBU0lIxWHbPgtlhjecMzDHm6McNQw121ShpckchArxlEX8gyGt1pHWT5pivTd0ZhAUuUpCrRaSqj7E7MMicceFJYL2iImqPF0BwCl9I7ppY/H9V3p5AAP9TYZYjIYjCNeo7LfDgdUuTPD9wf7gcSgpRsQ==; 5:dm8NKmlB4U5HtxhQnc4c/zREZwXqy2wXeo6a8/z6Aae7QDAG16tBoJCkVT625r8HZt97F/fSegRCdvzaZ1sZDAJyxDnjC6USNG5A9c+3S65iXbO6kmTojZvC2QczIUHYa5ryCTifFXcMUSSMXSX1EQ==; 24:PwrI8mchAmgpPaGYaz1WB6eJgzpPxojSk0Hd77uRvMVrsClQ4sEKuuvV7LTrq56B/AlEfx5mveQUJzZDsDSKuMOvH/XxMLbl8/l6G2UR7eo=; 7:i/ZIb2MB6TOt8mVgJaLJ3gg4tM33Hx1cQ+G0yWwXMlsH4F8txp1tQxmAIajbUm8CtAX/jzfhO0t7165XvDAoUpxYjnOO5JlhR9dWSKhusFPeyHN6e6DB5H9laZSpQE+0y0XMe+Sx9HfBno0ANZianH2ofLHt+T5kqAbPEQOtsQ13d+soK9AEUoNXlUlOnCl35Uqfj+b6j7aYqIUSuftAdg== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1079; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(120809045254105)(166708455590820)(100405760836317)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1079; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1079; x-forefront-prvs: 09752BC779 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(13464003)(377454003)(5383002)(377424004)(478694002)(189002)(199003)(24454002)(3280700002)(7906002)(33656002)(2906002)(3660700001)(1411001)(101416001)(76576001)(5008740100001)(50986999)(19617315012)(54356999)(66066001)(99286002)(11100500001)(86362001)(19580395003)(76176999)(8676002)(93886004)(586003)(19580405001)(10400500002)(92566002)(15975445007)(19609705001)(97736004)(81166006)(81156014)(106356001)(3846002)(102836003)(8936002)(2900100001)(2950100001)(122556002)(19625215002)(6116002)(110136002)(4326007)(87936001)(19300405004)(74316001)(189998001)(790700001)(9686002)(16236675004)(5004730100002)(68736007)(5003600100002)(5002640100001)(77096005)(105586002); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1079; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; CAT:NONE; LANG:en; CAT:NONE; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB1078CAB1881C9EF7E1106407A5560BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jun 2016 17:15:43.3060 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1079 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jun 2016 17:15:55 -0000 --_000_BY2PR09MB1078CAB1881C9EF7E1106407A5560BY2PR09MB1078namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 T2ZmIGxpc3QsIEkgcmVjZWl2ZWQgYSBzdWdnZXN0ZWQgdXBkYXRlIHRvIHRoaXMgdGV4dCBmcm9t IENoYXJsZXMuICBJIHdhcyBob3BpbmcgdG8gZGlzY3VzcyBpdCBhdCB5ZXN0ZXJkYXnigJlzIHZp cnR1YWwgaW50ZXJpbSBtZWV0aW5nLCBob3dldmVyLCBJIHJhbiBvdXQgb2YgdGltZS4gIEFzIGEg cmVzdWx0LCBJIHdvdWxkIGxpa2UgdG8gcHJvcG9zZSB0aGUgdXBkYXRlZCB0ZXh0IGFzIGl0IHNl ZW1lZCBjbGVhcmVyIGFuZCBtb3JlIGNvbmNpc2UgdGhhbiB3aGF0IEkgaGFkIHByb3Bvc2VkLCBi dXQsIHNheXMgdGhlIHNhbWUgdGhpbmcuDQoNClRoZSBuZXcgdGV4dCB3b3VsZCByZWFkIGFzIGZv bGxvd3MgKGJhc2VkIG9uIHRoZSB1cGRhdGVkIGRyYWZ0IHBvc3RlZCBvbiA2LzgvMTYgWzFdKS4N Cg0KIlN1cHBsZW1lbnRhbCBjb2xsZWN0aW9uIG9mIGVuZHBvaW50IGluZm9ybWF0aW9uIGZvciB0 aGUgcHVycG9zZXMgb2bigKZPdmVyIHRpbWUsIHNvbWUgbmV3IHBpZWNlcyBvZiBpbmZvcm1hdGlv biB0aGF0IGFyZSBuZWVkZWQgZHVyaW5nIGNvbW1vbiB0eXBlcyBvZiBhc3Nlc3NtZW50cyBtaWdo dCBiZSBpZGVudGlmaWVkLiBQcmUtYXNzZXNzbWVudCBjb2xsZWN0aW9uIGNhbiBiZSByZWNvbmZp Z3VyZWQgdG8gaGF2ZSB0aGlzIGluZm9ybWF0aW9uIGRlbGl2ZXJlZCBhdXRvbWF0aWNhbGx5LiBU aGlzIGF2b2lkcyB0aGUgbmVlZCBmb3IgcmVndWxhciBzdXBwbGVtZW50YWwgY29sbGVjdGlvbnMg dG8gZ2F0aGVyIHRoaXMgaW5mb3JtYXRpb24gZHVyaW5nIGFzc2Vzc21lbnRzLCBzdHJlYW1saW5p bmcgdGhlIGFzc2Vzc21lbnQgcHJvY2Vzcy4gTGlrZXdpc2UsIGl0IG1pZ2h0IGJlIG9ic2VydmVk IHRoYXQgY2VydGFpbiBpbmZvcm1hdGlvbiBkZWxpdmVyZWQgZHVyaW5nIHByZS1hc3Nlc3NtZW50 IGNvbGxlY3Rpb24gaXMgcmFyZWx5IHVzZWQuIEluIHRoaXMgY2FzZSwgaXQgbWlnaHQgYmUgdXNl ZnVsIHRvIHN0b3AgcHJlLWFzc2Vzc21lbnQgY29sbGVjdGlvbiBvZiB0aGlzIGluZm9ybWF0aW9u IHRvIHJlZHVjZSBuZXR3b3JrIGFuZCBwcm9jZXNzaW5nIG92ZXJoZWFkLiBJbnN0ZWFkLCBzdXBw bGVtZW50YWwgY29sbGVjdGlvbiBjYW4gYmUgdXNlZCB0byBnYXRoZXIgdGhpcyBkYXRhIG9uIHRo ZSByYXJlIG9jY2FzaW9ucyB3aGVuIGl0IGlzIG5lZWRlZC4iDQoNClBsZWFzZSBsZXQgbWUga25v dyB5b3VyIHRob3VnaHRzIG9uIHRoaXMgcHJvcG9zZWQgdGV4dCBieSBUdWVzZGF5IEp1bHkgMjFz dC4NCg0KVGhhbmtzLA0KDQpEYW5ueQ0KDQpbMV0gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWQvZHJh ZnQtaWV0Zi1zYWNtLXZ1bG4tc2NlbmFyaW8tMDAudHh0DQoNCg0KDQpGcm9tOiBKZXJvbWUgQXRo aWFzIFttYWlsdG86YXRoaWFzamVyb21lQGdtYWlsLmNvbV0NClNlbnQ6IFR1ZXNkYXksIEp1bmUg MDcsIDIwMTYgMTI6MDggQU0NClRvOiBIYXluZXMsIERhbiA8ZGhheW5lc0BtaXRyZS5vcmc+DQpD Yzogc2FjbUBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtzYWNtXSBGT1IgUkVWSUVXOiBWdWxuZXJh YmlsaXR5IEFzc2Vzc21lbnQgU2NlbmFyaW8gSXNzdWUgIzUgLSBDaGFuZ2UgRGV0ZWN0aW9uIHdp dGggYW4gRW5kcG9pbnQgTWFuYWdlbWVudCBDYXBhYmlsaXR5DQoNClRoaXMgcmV3cml0ZSBpcyBp bWhvIGJldHRlcg0KVGhhbmtzDQoNCk9uIFR1ZXNkYXksIDcgSnVuZSAyMDE2LCBIYXluZXMsIERh biA8ZGhheW5lc0BtaXRyZS5vcmc8bWFpbHRvOmRoYXluZXNAbWl0cmUub3JnPj4gd3JvdGU6DQpC YXNlZCBvbiB0aGUgZmVlZGJhY2ssIHdvdWxkIHRoZSBmb2xsb3dpbmcgcmV3cml0ZSBvZiB0aGUg cGFyYWdyYXBoIGhlbHAgY2xhcmlmeSB0aGluZ3M/DQoNCiJJbiBtYW55IGNhc2VzLCB0aGUgZW5k cG9pbnQgaW5mb3JtYXRpb24uLi5VbmRlciBjZXJ0YWluIGRlcGxveW1lbnQgc2NlbmFyaW9zLCBh cw0KdGhlIHZ1bG5lcmFiaWxpdHkgbWFuYWdlbWVudCBjYXBhYmlsaXR5IHByb2Nlc3NlcyB2dWxu ZXJhYmlsaXR5IGRldGVjdGlvbiBkYXRhIG92ZXINCnRpbWUsIHRoZSBlbmRwb2ludCBtYW5hZ2Vt ZW50IGNhcGFiaWxpdHkgbWF5IGxlYXJuIGFib3V0IGFkZGl0aW9uYWwgZGV0ZWN0aW9uDQppbmZv cm1hdGlvbiB0aGF0IGl0IHdhcyBwcmV2aW91c2x5IG5vdCBjb2xsZWN0aW5nIGFuZCBwdXNoIHRo YXQgaW5mb3JtYXRpb24gdG8gdGhlDQp2dWxuZXJhYmlsaXR5IG1hbmFnZW1lbnQgY2FwYWJpbGl0 eSB3aGVyZSBpdCBjYW4gc3VwcG9ydCBmdXR1cmUgYXNzZXNzbWVudHMuIFRoZQ0KcHVzaGluZyBv ZiB0aGlzIGRhdGEgbWF5IHBvdGVudGlhbGx5IGJlIGRyaXZlbiBieSBzb21lIHRyaWdnZXIgKGUu Zy4sIGNoYW5nZQ0KaW4gc29mdHdhcmUgaW52ZW50b3J5LCBwb2xpY3ksIG5ldHdvcmsgY29ubmVj dGl2aXR5IHN0YXR1cywgZXRjLikuIg0KDQpXaGlsZSB0aGlzIHBvdGVudGlhbGx5IGNyZWF0ZXMg YSBjb3VwbGluZyBiZXR3ZWVuIHRoZSB2dWxuZXJhYmlsaXR5IG1hbmFnZW1lbnQgY2FwYWJpbGl0 eSBhbmQgdGhlIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSwgYXMgd3JpdHRlbiwgSSB0 aGluayBpdCB3aWxsIGJlIGxlZnQgdG8gdGhlIGltcGxlbWVudGVyIG9mIHRob3NlIGNhcGFiaWxp dGllcyB0byBkZWNpZGUuICBJIHRoaW5rIHRoZSBwb2ludCBpcyBqdXN0IHRoYXQgeW91IGNvdWxk IGRvIHNvbWV0aGluZyBsaWtlIHRoaXMgdG8gaW1wcm92ZSB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nl c3NtZW50Lg0KDQpJZiB3ZSBzdGlsbCBkb24ndCBoYXZlIGNvbnNlbnN1cyBvbiB0aGlzLCBhbm90 aGVyIGFwcHJvYWNoIG1pZ2h0IGJlIHRvIGp1c3QgcmVtb3ZlIHRoaXMgdGV4dCBhbGwgdG9nZXRo ZXIgYXMgSSBkb24ndCB0aGluayBkb2luZyBzbyB3b3VsZCBwcmVjbHVkZSBhbiBpbXBsZW1lbnRl ciBmcm9tIHN1cHBvcnRpbmcgZnVuY3Rpb25hbGl0eSBsaWtlIHRoaXMgaW4gdGhlaXIgcHJvZHVj dC4NCg0KVGhvdWdodHM/DQoNClRoYW5rcywNCg0KRGFubnkNCg0KPiAtLS0tLU9yaWdpbmFsIE1l c3NhZ2UtLS0tLQ0KPiBGcm9tOiBKZXJvbWUgQXRoaWFzIFttYWlsdG86YXRoaWFzamVyb21lQGdt YWlsLmNvbTxqYXZhc2NyaXB0Ojs+XQ0KPiBTZW50OiBTYXR1cmRheSwgSnVuZSAwNCwgMjAxNiAy OjQ5IEFNDQo+IFRvOiBIYXluZXMsIERhbiA8ZGhheW5lc0BtaXRyZS5vcmc8amF2YXNjcmlwdDo7 Pj4NCj4gQ2M6IHNhY21AaWV0Zi5vcmc8amF2YXNjcmlwdDo7Pg0KPiBTdWJqZWN0OiBSZTogW3Nh Y21dIEZPUiBSRVZJRVc6IFZ1bG5lcmFiaWxpdHkgQXNzZXNzbWVudCBTY2VuYXJpbyBJc3N1ZSAj NQ0KPiAtIENoYW5nZSBEZXRlY3Rpb24gd2l0aCBhbiBFbmRwb2ludCBNYW5hZ2VtZW50IENhcGFi aWxpdHkNCj4NCj4gV2hpbGUgdGhlIHNjZW5hcmlvIHByb3ZpZGVkIGJ5IEFkYW0gaXMgdmFsaWQs IGlmIHlvdXIgY29uY2VybiBpcyB0aGF0ICJ0aGUNCj4gaW5mb3JtYXRpb24gYmV5b25kIHRoYXQi IHdvdWxkIGJlICJzdXBwbGVtZW50YWwgZW5kcG9pbnQNCj4gaW5mb3JtYXRpb24iOg0KPiBJIGRv bid0IHNlZSBhIHNjZW5hcmlvIHdoZXJlIGFuIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0 eSB3b3VsZCBoYXZlDQo+IHRvIHB1c2ggLXN1cHBsZW1lbnRhbC0gaW5mb3JtYXRpb24gdG8gdGhl IHZ1bG5lcmFiaWxpdHkgYXNzZXNzbWVudA0KPiBjYXBhYmlsaXR5ICh3aGF0IHdvdWxkIHRoZSB2 dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQgY2FwYWJpbGl0eSBkbyB3aXRoDQo+ICd1bmtub3duJyBh ZGRpdGlvbmFsIGluZm9ybWF0aW9uKQ0KPg0KPiBTbyBJIHRoaW5rIHRoZSBpc3N1ZSBpcyB0byBj aGFuZ2UgInRoZSBpbmZvcm1hdGlvbiBiZXlvbmQgdGhhdCIgdG8gc29tZXRoaW5nDQo+IGxpa2Ug InRoZSB1cGRhdGVkIGluZm9ybWF0aW9uIg0KPg0KPg0KPg0KPiAyMDE2LTA1LTE4IDE2OjE1IEdN VCswMzowMCBIYXluZXMsIERhbiA8ZGhheW5lc0BtaXRyZS5vcmc8amF2YXNjcmlwdDo7Pj46DQo+ ID4gRHVyaW5nIHllc3RlcmRheeKAmXMgdmlydHVhbCBpbnRlcmltIG1lZXRpbmcsIHdlIGRpc2N1 c3NlZCB2YXJpb3VzIG9wZW4NCj4gPiBpc3N1ZXMgd2l0aCByZXNwZWN0IHRvIHRoZSBWdWxuZXJh YmlsaXR5IEFzc2Vzc21lbnQgU2NlbmFyaW8gWzFdIGFzIGENCj4gPiByZXN1bHQgb2YgZmVlZGJh Y2sgdGhhdCB3ZSByZWNlaXZlZCBvbiB0aGUgZHJhZnQgd2hpY2ggeW91IGNhbiBzZWUNCj4gPiBo ZXJlIFsyXVszXS4gIFRoZSBzbGlkZeKAmXMgZnJvbSB0aGUgbWVldGluZyBjYW4gYmUgZm91bmQg aGVyZSBbNF0uDQo+ID4NCj4gPg0KPiA+DQo+ID4gT25lIGlzc3VlIHRoYXQgd2UgZGlkbuKAmXQg aGF2ZSBhIGNoYW5jZSB0byBkaXNjdXNzIGJlY2F1c2Ugd2UgcmFuIG91dA0KPiA+IG9mIHRpbWUg d2FzIHdoZXRoZXIgb3Igbm90IGFuIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSBoYXMg dGhlDQo+ID4gYWJpbGl0eSB0byBwdXNoIHN1cHBsZW1lbnRhbCBlbmRwb2ludCBpbmZvcm1hdGlv biB0byB0aGUgdnVsbmVyYWJpbGl0eQ0KPiA+IGFzc2Vzc21lbnQgY2FwYWJpbGl0eS4gIFRoaXMg cXVlc3Rpb24gY2FtZSBvdXQgb2YgYSByZXZpZXcgb2YgdGhlDQo+ID4gZm9sbG93aW5nIHRleHQg ZnJvbSB0aGUgVnVsbmVyYWJpbGl0eSBBc3Nlc3NtZW50IFNjZW5hcmlvIChzcGVjaWZpY2FsbHkg dGhlDQo+IGxhc3Qgc2VudGVuY2UpLg0KPiA+DQo+ID4NCj4gPg0KPiA+IOKAnEluIG1hbnkgY2Fz ZXMsIHRoZSBlbmRwb2ludCBpbmZvcm1hdGlvbiBuZWVkZWQgdG8gZGV0ZXJtaW5lIGFuDQo+ID4g ZW5kcG9pbnTigJlzIHZ1bG5lcmFiaWxpdHkgc3RhdHVzIHdpbGwgaGF2ZSBiZWVuIHByZXZpb3Vz bHkNCj4gPg0KPiA+IGNvbGxlY3RlZCBieSB0aGUgRW5kcG9pbnQgTWFuYWdlbWVudCBDYXBhYmls aXR5IGFuZCBhdmFpbGFibGUgaW4gYQ0KPiA+IFJlcG9zaXRvcnkuIEhvd2V2ZXIsIGluIG90aGVy IGNhc2VzLCB0aGUgbmVjZXNzYXJ5DQo+ID4NCj4gPiBlbmRwb2ludCBpbmZvcm1hdGlvbiB3aWxs IG5vdCBiZSByZWFkaWx5IGF2YWlsYWJsZSBpbiBhIFJlcG9zaXRvcnkgYW5kDQo+ID4gYSB0YXJn ZXRlZCBjb2xsZWN0aW9uIHdpbGwgYmUgbmVjZXNzYXJ5LiAgT2YgY291cnNlLA0KPiA+DQo+ID4g YW4gaW1wbGVtZW50YXRpb24gb2YgYW4gZW5kcG9pbnQgbWFuYWdlbWVudCBjYXBhYmlsaXR5IG1h eSBwcmVmZXIgdG8NCj4gPiBlbmFibGUgb3BlcmF0b3JzIHRvIHBlcmZvcm0gdGFyZ2V0ZWQgY29s bGVjdGlvbiB1bmRlcg0KPiA+DQo+ID4gY2VydGFpbiBjaXJjdW1zdGFuY2VzLCBldmVuIHdoZW4g c3VmZmljaWVudCBpbmZvcm1hdGlvbiBjYW4gYmUNCj4gPiBwcm92aWRlZCBieSB0aGUgZW5kcG9p bnQgbWFuYWdlbWVudCBjYXBhYmlsaXR5IChlLmcuIHRoZXJlDQo+ID4NCj4gPiBtYXkgYmUgZnJl c2huZXNzIHJlcXVpcmVtZW50cyBmb3IgaW5mb3JtYXRpb24pLiBUYXJnZXRlZCBjb2xsZWN0aW9u IG9mDQo+ID4gZW5kcG9pbnQgaW5mb3JtYXRpb24gZm9yIHRoZSBwdXJwb3NlIG9mIHZ1bG5lcmFi aWxpdHkNCj4gPg0KPiA+IGFzc2Vzc21lbnQgZG9lcyBub3QgbmVjZXNzYXJpbHkgbmVlZCB0byBi ZSBhIHB1bGwgYnkgdGhlIHZ1bG5lcmFiaWxpdHkNCj4gPiBhc3Nlc3NtZW50IGNhcGFiaWxpdHku ICBVbmRlciBjZXJ0YWluIGRlcGxveW1lbnQNCj4gPg0KPiA+IHNjZW5hcmlvcywgb25jZSB0aGUg bmVjZXNzYXJ5IGRldGVjdGlvbiBpbmZvcm1hdGlvbiBpcyBrbm93biwgdGhlDQo+ID4gaW5mb3Jt YXRpb24gYmV5b25kIHRoYXQgd2hpY2ggaXMgYXZhaWxhYmxlIGluIHRoZSBlbmRwb2ludA0KPiA+ DQo+ID4gbWFuYWdlbWVudCBjYXBhYmlsaXR5IGNhbiBiZSBwdXNoZWQgdG8gdGhlIHZ1bG5lcmFi aWxpdHkgYXNzZXNzbWVudA0KPiA+IGNhcGFiaWxpdHkgYnkgdGhlIGVuZHBvaW50IHdoZW5ldmVy IHRoYXQgaW5mb3JtYXRpb24NCj4gPg0KPiA+IGNoYW5nZXMu4oCdDQo+ID4NCj4gPg0KPiA+DQo+ ID4gT3VyIG1haW4gcXVlc3Rpb24gaXMgd2hldGhlciBvciBub3QgcHVzaGluZyBpbmZvcm1hdGlv biBmcm9tIHRoZQ0KPiA+IGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSB0byB0aGUgdnVs bmVyYWJpbGl0eSBhc3Nlc3NtZW50DQo+ID4gY2FwYWJpbGl0eSBpcyBhY3R1YWxseSBwb3NzaWJs ZSBiZWNhdXNlIGl0IHdvdWxkIG5vdCBuZWNlc3NhcmlseSBrbm93DQo+ID4gd2hhdCBpbmZvcm1h dGlvbiBpdCBuZWVkcyB0byBwdXNoIHByaW9yIHRvIHRoZSBzZXJ2ZXIgcmVxdWVzdGluZyBpdA0K PiA+IChpbiB3aGljaCBjYXNlIGl0IGlzIHByb2JhYmx5IGNvbnNpZGVyZWQgYSBwdWxsKT8gIElz IHRoZXJlIGENCj4gPiBzaXR1YXRpb24gd2hlcmUgdGhlIGVuZHBvaW50IHdvdWxkIGtub3csIGlu IGFkdmFuY2UsIHdoYXQgYWRkaXRpb25hbA0KPiA+IGluZm9ybWF0aW9uIGlzIG5lZWRlZCBmb3Ig YW4gYXNzZXNzbWVudCB3aXRob3V0IGEgc2VydmVyIHJlcXVlc3RpbmcgaXQ/DQo+ID4NCj4gPg0K PiA+DQo+ID4gSWYgeW91IGhhdmUgYW55IHRob3VnaHRzIG9uIHRoaXMgaXNzdWUsIHBsZWFzZSBw cm92aWRlIGZlZWRiYWNrIGJ5IE1heQ0KPiAzMXN0Lg0KPiA+IFdlIGFyZSBwbGFubmluZyB0byBo YXZlIGFuIHVwZGF0ZWQgdmVyc2lvbiBvZiB0aGUgc2NlbmFyaW8gZm9yIEp1bmUgOHRoLg0KPiA+ DQo+ID4NCj4gPg0KPiA+IFRoYW5rcywNCj4gPg0KPiA+IERhbm55DQo+ID4NCj4gPg0KPiA+DQo+ ID4gWzFdIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWNvZmZpbi1zYWNt LXZ1bG4tc2NlbmFyaW8vDQo+ID4NCj4gPiBbMl0gaHR0cHM6Ly9naXRodWIuY29tL3NhY213Zy92 dWxuZXJhYmlsaXR5LXNjZW5hcmlvL3B1bGwvMw0KPiA+DQo+ID4gWzNdIGh0dHBzOi8vd3d3Lmll dGYub3JnL21haWwtYXJjaGl2ZS93ZWIvc2FjbS9jdXJyZW50L21zZzAzOTU4Lmh0bWwNCj4gPg0K PiA+IFs0XSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9zbGlkZXMtaW50ZXJpbS0y MDE2LXNhY20tMy0xLw0KPiA+IChsb29rcyBsaWtlIHRoZSBzbGlkZXMgYXJlIG5vdCBhdmFpbGFi bGUganVzdCB5ZXQsIGJ1dCwgSSBzdXNwZWN0IHRoZXkNCj4gPiBzaG91bGQgYmUNCj4gPiBzb29u KQ0KPiA+DQo+ID4NCj4gPg0KPiA+DQo+ID4gX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX18NCj4gPiBzYWNtIG1haWxpbmcgbGlzdA0KPiA+IHNhY21AaWV0Zi5v cmc8amF2YXNjcmlwdDo7Pg0KPiA+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc2FjbQ0KPiA+DQo= --_000_BY2PR09MB1078CAB1881C9EF7E1106407A5560BY2PR09MB1078namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFsLCBsaS5Nc29Ob3JtYWws IGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90dG9tOi4wMDAxcHQ7DQoJ Zm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3IFJvbWFuIixzZXJpZjt9 DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCglj b2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0KYTp2aXNpdGVkLCBzcGFu Lk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0eTo5OTsNCgljb2xvcjpw dXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1zb25vcm1hbDAsIGxpLm1z b25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCglt c28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4t Ym90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0K CWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uRW1haWxTdHlsZTE4 DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsOw0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0Kc3Bhbi5FbWFpbFN0eWxlMTkNCgl7bXNvLXN0eWxl LXR5cGU6cGVyc29uYWwtY29tcG9zZTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJp ZjsNCgljb2xvcjp3aW5kb3d0ZXh0O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBl OmV4cG9ydC1vbmx5Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNhbGlicmki LHNhbnMtc2VyaWY7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFb ZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0i ZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91 dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+T2ZmIGxpc3QsIEkg cmVjZWl2ZWQgYSBzdWdnZXN0ZWQgdXBkYXRlIHRvIHRoaXMgdGV4dCBmcm9tIENoYXJsZXMuJm5i c3A7IEkgd2FzIGhvcGluZyB0byBkaXNjdXNzIGl0IGF0IHllc3RlcmRheeKAmXMgdmlydHVhbCBp bnRlcmltIG1lZXRpbmcsIGhvd2V2ZXIsIEkgcmFuIG91dCBvZiB0aW1lLiZuYnNwOw0KIEFzIGEg cmVzdWx0LCBJIHdvdWxkIGxpa2UgdG8gcHJvcG9zZSB0aGUgdXBkYXRlZCB0ZXh0IGFzIGl0IHNl ZW1lZCBjbGVhcmVyIGFuZCBtb3JlIGNvbmNpc2UgdGhhbiB3aGF0IEkgaGFkIHByb3Bvc2VkLCBi dXQsIHNheXMgdGhlIHNhbWUgdGhpbmcuPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj5UaGUgbmV3IHRleHQgd291bGQgcmVhZCBhcyBmb2xsb3dzIChiYXNlZCBvbiB0 aGUgdXBkYXRlZCBkcmFmdCBwb3N0ZWQgb24gNi84LzE2IFsxXSkuPG86cD48L286cD48L3NwYW4+ PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0Qi PjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mcXVvdDtTdXBwbGVtZW50YWwgY29sbGVjdGlvbiBv ZiBlbmRwb2ludCBpbmZvcm1hdGlvbiBmb3IgdGhlIHB1cnBvc2VzIG9m4oCmT3ZlciB0aW1lLCBz b21lIG5ldyBwaWVjZXMgb2YgaW5mb3JtYXRpb24gdGhhdCBhcmUgbmVlZGVkIGR1cmluZyBjb21t b24gdHlwZXMgb2YgYXNzZXNzbWVudHMNCiBtaWdodCBiZSBpZGVudGlmaWVkLiBQcmUtYXNzZXNz bWVudCBjb2xsZWN0aW9uIGNhbiBiZSByZWNvbmZpZ3VyZWQgdG8gaGF2ZSB0aGlzIGluZm9ybWF0 aW9uIGRlbGl2ZXJlZCBhdXRvbWF0aWNhbGx5LiBUaGlzIGF2b2lkcyB0aGUgbmVlZCBmb3IgcmVn dWxhciBzdXBwbGVtZW50YWwgY29sbGVjdGlvbnMgdG8gZ2F0aGVyIHRoaXMgaW5mb3JtYXRpb24g ZHVyaW5nIGFzc2Vzc21lbnRzLCBzdHJlYW1saW5pbmcgdGhlIGFzc2Vzc21lbnQgcHJvY2Vzcy4N CiBMaWtld2lzZSwgaXQgbWlnaHQgYmUgb2JzZXJ2ZWQgdGhhdCBjZXJ0YWluIGluZm9ybWF0aW9u IGRlbGl2ZXJlZCBkdXJpbmcgcHJlLWFzc2Vzc21lbnQgY29sbGVjdGlvbiBpcyByYXJlbHkgdXNl ZC4gSW4gdGhpcyBjYXNlLCBpdCBtaWdodCBiZSB1c2VmdWwgdG8gc3RvcCBwcmUtYXNzZXNzbWVu dCBjb2xsZWN0aW9uIG9mIHRoaXMgaW5mb3JtYXRpb24gdG8gcmVkdWNlIG5ldHdvcmsgYW5kIHBy b2Nlc3Npbmcgb3ZlcmhlYWQuIEluc3RlYWQsIHN1cHBsZW1lbnRhbA0KIGNvbGxlY3Rpb24gY2Fu IGJlIHVzZWQgdG8gZ2F0aGVyIHRoaXMgZGF0YSBvbiB0aGUgcmFyZSBvY2Nhc2lvbnMgd2hlbiBp dCBpcyBuZWVkZWQuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj5QbGVhc2UgbGV0IG1lIGtub3cgeW91ciB0aG91Z2h0cyBvbiB0aGlzIHByb3Bvc2VkIHRl eHQgYnkgVHVlc2RheSBKdWx5IDIxPHN1cD5zdDwvc3VwPi4NCjxvOnA+PC9vOnA+PC9zcGFuPjwv cD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48 bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+VGhhbmtzLDxicj4NCjxicj4NCkRhbm55PG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5bMV08L3NwYW4+DQo8c3BhbiBzdHls ZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMt c2VyaWY7Y29sb3I6IzFGNDk3RCI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWQvZHJhZnQtaWV0Zi1z YWNtLXZ1bG4tc2NlbmFyaW8tMDAudHh0PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9v OnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xv cjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAx LjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3Jk ZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4g MGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206 PC9zcGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBKZXJvbWUgQXRoaWFzIFttYWlsdG86YXRoaWFz amVyb21lQGdtYWlsLmNvbV0NCjxicj4NCjxiPlNlbnQ6PC9iPiBUdWVzZGF5LCBKdW5lIDA3LCAy MDE2IDEyOjA4IEFNPGJyPg0KPGI+VG86PC9iPiBIYXluZXMsIERhbiAmbHQ7ZGhheW5lc0BtaXRy ZS5vcmcmZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBzYWNtQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8 L2I+IFJlOiBbc2FjbV0gRk9SIFJFVklFVzogVnVsbmVyYWJpbGl0eSBBc3Nlc3NtZW50IFNjZW5h cmlvIElzc3VlICM1IC0gQ2hhbmdlIERldGVjdGlvbiB3aXRoIGFuIEVuZHBvaW50IE1hbmFnZW1l bnQgQ2FwYWJpbGl0eTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPlRoaXMgcmV3cml0ZSBpcyBpbWhvIGJldHRlcjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rczxicj4NCjxicj4NCk9uIFR1ZXNkYXksIDcgSnVuZSAy MDE2LCBIYXluZXMsIERhbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRoYXluZXNAbWl0cmUub3JnIj5k aGF5bmVzQG1pdHJlLm9yZzwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPGJsb2NrcXVv dGUgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkICNDQ0NDQ0MgMS4wcHQ7cGFk ZGluZzowaW4gMGluIDBpbiA2LjBwdDttYXJnaW4tbGVmdDo0LjhwdDttYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1yaWdodDowaW47bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj5CYXNlZCBvbiB0aGUgZmVlZGJhY2ssIHdvdWxkIHRoZSBmb2xsb3dpbmcgcmV3cml0ZSBv ZiB0aGUgcGFyYWdyYXBoIGhlbHAgY2xhcmlmeSB0aGluZ3M/PGJyPg0KPGJyPg0KJnF1b3Q7SW4g bWFueSBjYXNlcywgdGhlIGVuZHBvaW50IGluZm9ybWF0aW9uLi4uVW5kZXIgY2VydGFpbiBkZXBs b3ltZW50IHNjZW5hcmlvcywgYXM8YnI+DQp0aGUgdnVsbmVyYWJpbGl0eSBtYW5hZ2VtZW50IGNh cGFiaWxpdHkgcHJvY2Vzc2VzIHZ1bG5lcmFiaWxpdHkgZGV0ZWN0aW9uIGRhdGEgb3Zlcjxicj4N CnRpbWUsIHRoZSBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxpdHkgbWF5IGxlYXJuIGFib3V0 IGFkZGl0aW9uYWwgZGV0ZWN0aW9uPGJyPg0KaW5mb3JtYXRpb24gdGhhdCBpdCB3YXMgcHJldmlv dXNseSBub3QgY29sbGVjdGluZyBhbmQgcHVzaCB0aGF0IGluZm9ybWF0aW9uIHRvIHRoZTxicj4N CnZ1bG5lcmFiaWxpdHkgbWFuYWdlbWVudCBjYXBhYmlsaXR5IHdoZXJlIGl0IGNhbiBzdXBwb3J0 IGZ1dHVyZSBhc3Nlc3NtZW50cy4gVGhlPGJyPg0KcHVzaGluZyBvZiB0aGlzIGRhdGEgbWF5IHBv dGVudGlhbGx5IGJlIGRyaXZlbiBieSBzb21lIHRyaWdnZXIgKGUuZy4sIGNoYW5nZTxicj4NCmlu IHNvZnR3YXJlIGludmVudG9yeSwgcG9saWN5LCBuZXR3b3JrIGNvbm5lY3Rpdml0eSBzdGF0dXMs IGV0Yy4pLiZxdW90Ozxicj4NCjxicj4NCldoaWxlIHRoaXMgcG90ZW50aWFsbHkgY3JlYXRlcyBh IGNvdXBsaW5nIGJldHdlZW4gdGhlIHZ1bG5lcmFiaWxpdHkgbWFuYWdlbWVudCBjYXBhYmlsaXR5 IGFuZCB0aGUgZW5kcG9pbnQgbWFuYWdlbWVudCBjYXBhYmlsaXR5LCBhcyB3cml0dGVuLCBJIHRo aW5rIGl0IHdpbGwgYmUgbGVmdCB0byB0aGUgaW1wbGVtZW50ZXIgb2YgdGhvc2UgY2FwYWJpbGl0 aWVzIHRvIGRlY2lkZS4mbmJzcDsgSSB0aGluayB0aGUgcG9pbnQgaXMganVzdCB0aGF0IHlvdSBj b3VsZA0KIGRvIHNvbWV0aGluZyBsaWtlIHRoaXMgdG8gaW1wcm92ZSB0aGUgdnVsbmVyYWJpbGl0 eSBhc3Nlc3NtZW50Ljxicj4NCjxicj4NCklmIHdlIHN0aWxsIGRvbid0IGhhdmUgY29uc2Vuc3Vz IG9uIHRoaXMsIGFub3RoZXIgYXBwcm9hY2ggbWlnaHQgYmUgdG8ganVzdCByZW1vdmUgdGhpcyB0 ZXh0IGFsbCB0b2dldGhlciBhcyBJIGRvbid0IHRoaW5rIGRvaW5nIHNvIHdvdWxkIHByZWNsdWRl IGFuIGltcGxlbWVudGVyIGZyb20gc3VwcG9ydGluZyBmdW5jdGlvbmFsaXR5IGxpa2UgdGhpcyBp biB0aGVpciBwcm9kdWN0Ljxicj4NCjxicj4NClRob3VnaHRzPzxicj4NCjxicj4NClRoYW5rcyw8 YnI+DQo8YnI+DQpEYW5ueTxicj4NCjxicj4NCiZndDsgLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0t LS08YnI+DQomZ3Q7IEZyb206IEplcm9tZSBBdGhpYXMgW21haWx0bzo8YSBocmVmPSJqYXZhc2Ny aXB0OjsiPmF0aGlhc2plcm9tZUBnbWFpbC5jb208L2E+XTxicj4NCiZndDsgU2VudDogU2F0dXJk YXksIEp1bmUgMDQsIDIwMTYgMjo0OSBBTTxicj4NCiZndDsgVG86IEhheW5lcywgRGFuICZsdDs8 YSBocmVmPSJqYXZhc2NyaXB0OjsiPmRoYXluZXNAbWl0cmUub3JnPC9hPiZndDs8YnI+DQomZ3Q7 IENjOiA8YSBocmVmPSJqYXZhc2NyaXB0OjsiPnNhY21AaWV0Zi5vcmc8L2E+PGJyPg0KJmd0OyBT dWJqZWN0OiBSZTogW3NhY21dIEZPUiBSRVZJRVc6IFZ1bG5lcmFiaWxpdHkgQXNzZXNzbWVudCBT Y2VuYXJpbyBJc3N1ZSAjNTxicj4NCiZndDsgLSBDaGFuZ2UgRGV0ZWN0aW9uIHdpdGggYW4gRW5k cG9pbnQgTWFuYWdlbWVudCBDYXBhYmlsaXR5PGJyPg0KJmd0Ozxicj4NCiZndDsgV2hpbGUgdGhl IHNjZW5hcmlvIHByb3ZpZGVkIGJ5IEFkYW0gaXMgdmFsaWQsIGlmIHlvdXIgY29uY2VybiBpcyB0 aGF0ICZxdW90O3RoZTxicj4NCiZndDsgaW5mb3JtYXRpb24gYmV5b25kIHRoYXQmcXVvdDsgd291 bGQgYmUgJnF1b3Q7c3VwcGxlbWVudGFsIGVuZHBvaW50PGJyPg0KJmd0OyBpbmZvcm1hdGlvbiZx dW90Ozo8YnI+DQomZ3Q7IEkgZG9uJ3Qgc2VlIGEgc2NlbmFyaW8gd2hlcmUgYW4gZW5kcG9pbnQg bWFuYWdlbWVudCBjYXBhYmlsaXR5IHdvdWxkIGhhdmU8YnI+DQomZ3Q7IHRvIHB1c2ggLXN1cHBs ZW1lbnRhbC0gaW5mb3JtYXRpb24gdG8gdGhlIHZ1bG5lcmFiaWxpdHkgYXNzZXNzbWVudDxicj4N CiZndDsgY2FwYWJpbGl0eSAod2hhdCB3b3VsZCB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nlc3NtZW50 IGNhcGFiaWxpdHkgZG8gd2l0aDxicj4NCiZndDsgJ3Vua25vd24nIGFkZGl0aW9uYWwgaW5mb3Jt YXRpb24pPGJyPg0KJmd0Ozxicj4NCiZndDsgU28gSSB0aGluayB0aGUgaXNzdWUgaXMgdG8gY2hh bmdlICZxdW90O3RoZSBpbmZvcm1hdGlvbiBiZXlvbmQgdGhhdCZxdW90OyB0byBzb21ldGhpbmc8 YnI+DQomZ3Q7IGxpa2UgJnF1b3Q7dGhlIHVwZGF0ZWQgaW5mb3JtYXRpb24mcXVvdDs8YnI+DQom Z3Q7PGJyPg0KJmd0Ozxicj4NCiZndDs8YnI+DQomZ3Q7IDIwMTYtMDUtMTggMTY6MTUgR01UJiM0 MzswMzowMCBIYXluZXMsIERhbiAmbHQ7PGEgaHJlZj0iamF2YXNjcmlwdDo7Ij5kaGF5bmVzQG1p dHJlLm9yZzwvYT4mZ3Q7Ojxicj4NCiZndDsgJmd0OyBEdXJpbmcgeWVzdGVyZGF54oCZcyB2aXJ0 dWFsIGludGVyaW0gbWVldGluZywgd2UgZGlzY3Vzc2VkIHZhcmlvdXMgb3Blbjxicj4NCiZndDsg Jmd0OyBpc3N1ZXMgd2l0aCByZXNwZWN0IHRvIHRoZSBWdWxuZXJhYmlsaXR5IEFzc2Vzc21lbnQg U2NlbmFyaW8gWzFdIGFzIGE8YnI+DQomZ3Q7ICZndDsgcmVzdWx0IG9mIGZlZWRiYWNrIHRoYXQg d2UgcmVjZWl2ZWQgb24gdGhlIGRyYWZ0IHdoaWNoIHlvdSBjYW4gc2VlPGJyPg0KJmd0OyAmZ3Q7 IGhlcmUgWzJdWzNdLiZuYnNwOyBUaGUgc2xpZGXigJlzIGZyb20gdGhlIG1lZXRpbmcgY2FuIGJl IGZvdW5kIGhlcmUgWzRdLjxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsg Jmd0Ozxicj4NCiZndDsgJmd0OyBPbmUgaXNzdWUgdGhhdCB3ZSBkaWRu4oCZdCBoYXZlIGEgY2hh bmNlIHRvIGRpc2N1c3MgYmVjYXVzZSB3ZSByYW4gb3V0PGJyPg0KJmd0OyAmZ3Q7IG9mIHRpbWUg d2FzIHdoZXRoZXIgb3Igbm90IGFuIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSBoYXMg dGhlPGJyPg0KJmd0OyAmZ3Q7IGFiaWxpdHkgdG8gcHVzaCBzdXBwbGVtZW50YWwgZW5kcG9pbnQg aW5mb3JtYXRpb24gdG8gdGhlIHZ1bG5lcmFiaWxpdHk8YnI+DQomZ3Q7ICZndDsgYXNzZXNzbWVu dCBjYXBhYmlsaXR5LiZuYnNwOyBUaGlzIHF1ZXN0aW9uIGNhbWUgb3V0IG9mIGEgcmV2aWV3IG9m IHRoZTxicj4NCiZndDsgJmd0OyBmb2xsb3dpbmcgdGV4dCBmcm9tIHRoZSBWdWxuZXJhYmlsaXR5 IEFzc2Vzc21lbnQgU2NlbmFyaW8gKHNwZWNpZmljYWxseSB0aGU8YnI+DQomZ3Q7IGxhc3Qgc2Vu dGVuY2UpLjxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0Ozxicj4N CiZndDsgJmd0OyDigJxJbiBtYW55IGNhc2VzLCB0aGUgZW5kcG9pbnQgaW5mb3JtYXRpb24gbmVl ZGVkIHRvIGRldGVybWluZSBhbjxicj4NCiZndDsgJmd0OyBlbmRwb2ludOKAmXMgdnVsbmVyYWJp bGl0eSBzdGF0dXMgd2lsbCBoYXZlIGJlZW4gcHJldmlvdXNseTxicj4NCiZndDsgJmd0Ozxicj4N CiZndDsgJmd0OyBjb2xsZWN0ZWQgYnkgdGhlIEVuZHBvaW50IE1hbmFnZW1lbnQgQ2FwYWJpbGl0 eSBhbmQgYXZhaWxhYmxlIGluIGE8YnI+DQomZ3Q7ICZndDsgUmVwb3NpdG9yeS4gSG93ZXZlciwg aW4gb3RoZXIgY2FzZXMsIHRoZSBuZWNlc3Nhcnk8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZn dDsgZW5kcG9pbnQgaW5mb3JtYXRpb24gd2lsbCBub3QgYmUgcmVhZGlseSBhdmFpbGFibGUgaW4g YSBSZXBvc2l0b3J5IGFuZDxicj4NCiZndDsgJmd0OyBhIHRhcmdldGVkIGNvbGxlY3Rpb24gd2ls bCBiZSBuZWNlc3NhcnkuJm5ic3A7IE9mIGNvdXJzZSw8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7 ICZndDsgYW4gaW1wbGVtZW50YXRpb24gb2YgYW4gZW5kcG9pbnQgbWFuYWdlbWVudCBjYXBhYmls aXR5IG1heSBwcmVmZXIgdG88YnI+DQomZ3Q7ICZndDsgZW5hYmxlIG9wZXJhdG9ycyB0byBwZXJm b3JtIHRhcmdldGVkIGNvbGxlY3Rpb24gdW5kZXI8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZn dDsgY2VydGFpbiBjaXJjdW1zdGFuY2VzLCBldmVuIHdoZW4gc3VmZmljaWVudCBpbmZvcm1hdGlv biBjYW4gYmU8YnI+DQomZ3Q7ICZndDsgcHJvdmlkZWQgYnkgdGhlIGVuZHBvaW50IG1hbmFnZW1l bnQgY2FwYWJpbGl0eSAoZS5nLiB0aGVyZTxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0OyBt YXkgYmUgZnJlc2huZXNzIHJlcXVpcmVtZW50cyBmb3IgaW5mb3JtYXRpb24pLiBUYXJnZXRlZCBj b2xsZWN0aW9uIG9mPGJyPg0KJmd0OyAmZ3Q7IGVuZHBvaW50IGluZm9ybWF0aW9uIGZvciB0aGUg cHVycG9zZSBvZiB2dWxuZXJhYmlsaXR5PGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7IGFz c2Vzc21lbnQgZG9lcyBub3QgbmVjZXNzYXJpbHkgbmVlZCB0byBiZSBhIHB1bGwgYnkgdGhlIHZ1 bG5lcmFiaWxpdHk8YnI+DQomZ3Q7ICZndDsgYXNzZXNzbWVudCBjYXBhYmlsaXR5LiZuYnNwOyBV bmRlciBjZXJ0YWluIGRlcGxveW1lbnQ8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgc2Nl bmFyaW9zLCBvbmNlIHRoZSBuZWNlc3NhcnkgZGV0ZWN0aW9uIGluZm9ybWF0aW9uIGlzIGtub3du LCB0aGU8YnI+DQomZ3Q7ICZndDsgaW5mb3JtYXRpb24gYmV5b25kIHRoYXQgd2hpY2ggaXMgYXZh aWxhYmxlIGluIHRoZSBlbmRwb2ludDxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0OyBtYW5h Z2VtZW50IGNhcGFiaWxpdHkgY2FuIGJlIHB1c2hlZCB0byB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nl c3NtZW50PGJyPg0KJmd0OyAmZ3Q7IGNhcGFiaWxpdHkgYnkgdGhlIGVuZHBvaW50IHdoZW5ldmVy IHRoYXQgaW5mb3JtYXRpb248YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgY2hhbmdlcy7i gJ08YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7 ICZndDsgT3VyIG1haW4gcXVlc3Rpb24gaXMgd2hldGhlciBvciBub3QgcHVzaGluZyBpbmZvcm1h dGlvbiBmcm9tIHRoZTxicj4NCiZndDsgJmd0OyBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxp dHkgdG8gdGhlIHZ1bG5lcmFiaWxpdHkgYXNzZXNzbWVudDxicj4NCiZndDsgJmd0OyBjYXBhYmls aXR5IGlzIGFjdHVhbGx5IHBvc3NpYmxlIGJlY2F1c2UgaXQgd291bGQgbm90IG5lY2Vzc2FyaWx5 IGtub3c8YnI+DQomZ3Q7ICZndDsgd2hhdCBpbmZvcm1hdGlvbiBpdCBuZWVkcyB0byBwdXNoIHBy aW9yIHRvIHRoZSBzZXJ2ZXIgcmVxdWVzdGluZyBpdDxicj4NCiZndDsgJmd0OyAoaW4gd2hpY2gg Y2FzZSBpdCBpcyBwcm9iYWJseSBjb25zaWRlcmVkIGEgcHVsbCk/Jm5ic3A7IElzIHRoZXJlIGE8 YnI+DQomZ3Q7ICZndDsgc2l0dWF0aW9uIHdoZXJlIHRoZSBlbmRwb2ludCB3b3VsZCBrbm93LCBp biBhZHZhbmNlLCB3aGF0IGFkZGl0aW9uYWw8YnI+DQomZ3Q7ICZndDsgaW5mb3JtYXRpb24gaXMg bmVlZGVkIGZvciBhbiBhc3Nlc3NtZW50IHdpdGhvdXQgYSBzZXJ2ZXIgcmVxdWVzdGluZyBpdD88 YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZn dDsgSWYgeW91IGhhdmUgYW55IHRob3VnaHRzIG9uIHRoaXMgaXNzdWUsIHBsZWFzZSBwcm92aWRl IGZlZWRiYWNrIGJ5IE1heTxicj4NCiZndDsgMzFzdC48YnI+DQomZ3Q7ICZndDsgV2UgYXJlIHBs YW5uaW5nIHRvIGhhdmUgYW4gdXBkYXRlZCB2ZXJzaW9uIG9mIHRoZSBzY2VuYXJpbyBmb3IgSnVu ZSA4dGguPGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7PGJyPg0K Jmd0OyAmZ3Q7IFRoYW5rcyw8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgRGFubnk8YnI+ DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsg WzFdIDxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWNvZmZp bi1zYWNtLXZ1bG4tc2NlbmFyaW8vIiB0YXJnZXQ9Il9ibGFuayI+DQpodHRwczovL2RhdGF0cmFj a2VyLmlldGYub3JnL2RvYy9kcmFmdC1jb2ZmaW4tc2FjbS12dWxuLXNjZW5hcmlvLzwvYT48YnI+ DQomZ3Q7ICZndDs8YnI+DQomZ3Q7ICZndDsgWzJdIDxhIGhyZWY9Imh0dHBzOi8vZ2l0aHViLmNv bS9zYWNtd2cvdnVsbmVyYWJpbGl0eS1zY2VuYXJpby9wdWxsLzMiIHRhcmdldD0iX2JsYW5rIj4N Cmh0dHBzOi8vZ2l0aHViLmNvbS9zYWNtd2cvdnVsbmVyYWJpbGl0eS1zY2VuYXJpby9wdWxsLzM8 L2E+PGJyPg0KJmd0OyAmZ3Q7PGJyPg0KJmd0OyAmZ3Q7IFszXSA8YSBocmVmPSJodHRwczovL3d3 dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL3NhY20vY3VycmVudC9tc2cwMzk1OC5odG1sIiB0 YXJnZXQ9Il9ibGFuayI+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hpdmUvd2ViL3Nh Y20vY3VycmVudC9tc2cwMzk1OC5odG1sPC9hPjxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0 OyBbNF0gPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mvc2xpZGVzLWlu dGVyaW0tMjAxNi1zYWNtLTMtMS8iIHRhcmdldD0iX2JsYW5rIj4NCmh0dHBzOi8vZGF0YXRyYWNr ZXIuaWV0Zi5vcmcvZG9jL3NsaWRlcy1pbnRlcmltLTIwMTYtc2FjbS0zLTEvPC9hPjxicj4NCiZn dDsgJmd0OyAobG9va3MgbGlrZSB0aGUgc2xpZGVzIGFyZSBub3QgYXZhaWxhYmxlIGp1c3QgeWV0 LCBidXQsIEkgc3VzcGVjdCB0aGV5PGJyPg0KJmd0OyAmZ3Q7IHNob3VsZCBiZTxicj4NCiZndDsg Jmd0OyBzb29uKTxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0Ozxi cj4NCiZndDsgJmd0Ozxicj4NCiZndDsgJmd0OyBfX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fXzxicj4NCiZndDsgJmd0OyBzYWNtIG1haWxpbmcgbGlzdDxicj4N CiZndDsgJmd0OyA8YSBocmVmPSJqYXZhc2NyaXB0OjsiPnNhY21AaWV0Zi5vcmc8L2E+PGJyPg0K Jmd0OyAmZ3Q7IDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v c2FjbSIgdGFyZ2V0PSJfYmxhbmsiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc2FjbTwvYT48YnI+DQomZ3Q7ICZndDs8bzpwPjwvbzpwPjwvcD4NCjwvYmxvY2txdW90ZT4N CjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BY2PR09MB1078CAB1881C9EF7E1106407A5560BY2PR09MB1078namp_-- From nobody Thu Jun 16 10:41:28 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C4AE212D831 for ; Thu, 16 Jun 2016 10:41:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Rn0DOoNLbNae for ; Thu, 16 Jun 2016 10:41:24 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id E0F9E12D7DB for ; Thu, 16 Jun 2016 10:41:23 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 5EEE0ABC157 for ; Thu, 16 Jun 2016 13:41:23 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 4DBC26C001C for ; Thu, 16 Jun 2016 13:41:23 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Thu, 16 Jun 2016 13:41:22 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Thu, 16 Jun 2016 13:41:22 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=VlAwVKOdlOWoyVou079KxhQmjPyMmMH8gk0bTEcSB4U=; b=Y0NTPXjRTZXrCuSznlXjy18MBm5C3PxkcO/AWh8Fm8RjMJDqkCVH97S5HuUgbOu7ZeW4a+2BqCw5IxW3W8vkfTXrBUiR0b7zHjPztu5OqPmN4VC7KbQbnB4SAX17UUCnm5gnbAgt8n7tgRf5Ra7PkktMt/h4RmSvIBKt8d2g5k4= Received: from BLUPR09MB0834.namprd09.prod.outlook.com (10.162.89.14) by BLUPR09MB0834.namprd09.prod.outlook.com (10.162.89.14) with Microsoft SMTP Server (TLS) id 15.1.523.12; Thu, 16 Jun 2016 17:41:16 +0000 Received: from BLUPR09MB0834.namprd09.prod.outlook.com ([10.162.89.14]) by BLUPR09MB0834.namprd09.prod.outlook.com ([10.162.89.14]) with mapi id 15.01.0523.011; Thu, 16 Jun 2016 17:41:16 +0000 From: "Cokus, Michael S." To: "sacm@ietf.org" Thread-Topic: Data Formats for Endpoint Data Model Thread-Index: AdHH9bLjpxuYovT4T5SHRGfRzopaKw== Date: Thu, 16 Jun 2016 17:41:16 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=msc@mitre.org; x-originating-ip: [128.29.199.61] x-ms-office365-filtering-correlation-id: cabba0f4-520d-469b-c228-08d3960d6b20 x-microsoft-exchange-diagnostics: 1; BLUPR09MB0834; 6:UCWDGWl6z4n8gJRctFPgQTlw6jP7+E0Zx0r57NfaljYXi2Ng5g6rTN9fa7L6VdXgDzRF40Wm4Fayb07MAHqnM7sEbh1UuBK9WQy0LYcJ/6Yi1P/3UQhEmg1V/cyy39IE+UuvWITXvajCE96pWnV6uD6gEMMkWnnp1yjTsowRDDTc3pZEwT401rFDEKXUAkDWL06hzTuxHyVUbQEo08RZ6atR84YvFu4/AiFurzR2g+wXURFeq53ciZDsFbvi4plWwy7sDmemfBXczqycrpoAnJb6QwPK3v6oK//uGWR9bGgwW4K1BYCBYQK9hP/g9SP5aM39VD4KxytjWKdMVAkslw==; 5:1yec8BPqwGUV4p7f/wFcx9aKOuqU6fqqSNaM94jm8MbLAGj8D4dST9Nlc7lrd3oq0Ze6mngJLtq94paODDBYGAXJsVbM3DUQPDNxnlHdmFxyb2yB+IOBzQCyCDe17b9GDgxwfayVvCl3DT4WdCROrw==; 24:qs0akLyNEKtlRL2pViwibVh75szNwLhf0Wtdcc4CkTZ6B8MnQ2rvQ8PX9SBQ50VlV9yTJdwmYz5aYyJyYc0PE4D78DR1g8ced1H0jG59HYI=; 7:JqIQOvJhPTab9Q+7YmqgzshcIPb4TzVyGBuEZz2ITt6i7Aaa1ThBxror7CwiAbJud9W5vnDCEPsurxfyoUKMiq2nnyN8nos5zWXAR4cw9EIYcqmgzg9zHf9qiIS2QfWbcwpinEHXH4sOZS7VSM4I0nvcR2KkrRVXN1o9UmtsEX1W8OAzBMNzXhxRaw0q0dMHnj6KV770MrieAeDlOZwcNg== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BLUPR09MB0834; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026); SRVR:BLUPR09MB0834; BCL:0; PCL:0; RULEID:; SRVR:BLUPR09MB0834; x-forefront-prvs: 09752BC779 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(189002)(76104003)(199003)(2900100001)(50986999)(19580395003)(86362001)(87936001)(99286002)(450100001)(107886002)(110136002)(5004730100002)(66066001)(54356999)(74316001)(2501003)(15975445007)(97736004)(5003600100002)(92566002)(33656002)(16236675004)(122556002)(7906002)(77096005)(189998001)(10400500002)(19625215002)(5002640100001)(11100500001)(5630700001)(19617315012)(229853001)(105586002)(101416001)(106356001)(19300405004)(2906002)(2351001)(3846002)(790700001)(102836003)(6116002)(1730700003)(68736007)(81166006)(76576001)(81156014)(3280700002)(5008740100001)(8676002)(9686002)(586003)(5640700001)(8936002)(3660700001); DIR:OUT; SFP:1101; SCL:1; SRVR:BLUPR09MB0834; H:BLUPR09MB0834.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; CAT:NONE; LANG:en; CAT:NONE; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BLUPR09MB08345A29608924087F1E89D5B4560BLUPR09MB0834namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jun 2016 17:41:16.4611 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR09MB0834 X-OriginatorOrg: mitre.org Archived-At: Subject: [sacm] Data Formats for Endpoint Data Model X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jun 2016 17:41:26 -0000 --_000_BLUPR09MB08345A29608924087F1E89D5B4560BLUPR09MB0834namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable All, As the IM document gets closer to completion, I'd like to queue up discussi= on pertaining to data models based on OVAL. I propose that as a pilot effo= rt we look at selecting a data format for representing a data model for con= figuration endpoint information. Since data formats are potentially a lively subject, I'd like to suggest so= me questions we should consider when discussing the merits of a data format= . 1 - Does the data format meet SACM requirements? [1] 2 - Does the data format support the SACM IM? [2] 3 - What are the PROs and CONs of the data format with respect to SACM? The purpose of the questions above is to focus discussion. What do you thi= nk? Are there other ideas? Assuming we can agree to the first step, I think the way to begin is to det= ermine which of the SACM requirements are relevant to data formats. I'm gu= essing that many of the requirements have no effect on which data format(s)= to use. So narrowing these down would be a good idea. Would anyone like = to take a look at the requirements document [1] and come up with a list of = data-format-relevant requirements? Thanks, --mike [1] https://datatracker.ietf.org/doc/draft-ietf-sacm-requirements/ [2] https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/ Mike Cokus Systems Engineer The MITRE Corporation --_000_BLUPR09MB08345A29608924087F1E89D5B4560BLUPR09MB0834namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

All,

 

As the IM document gets closer to completion, I&#= 8217;d like to queue up discussion pertaining to data models based on OVAL.=   I propose that as a pilot effort we look at selecting a data format = for representing a data model for configuration endpoint information.

 

Since data formats are potentially a lively subje= ct, I’d like to suggest some questions we should consider when discus= sing the merits of a data format.

 

1 - Does the data format meet SACM requirements? = [1] 

 

2 - Does the data format support the SACM IM? [2]=

 

3 - What are the PROs and CONs of the data format= with respect to SACM? 

 

The purpose of the questions above is to focus di= scussion.  What do you think?  Are there other ideas?<= /p>

 

Assuming we can agree to the first step, I think = the way to begin is to determine which of the SACM requirements are relevan= t to data formats.  I'm guessing that many of the requirements have no= effect on which data format(s) to use.  So narrowing these down would be a good idea.  Would anyone like to t= ake a look at the requirements document [1] and come up with a list of data= -format-relevant requirements?

 

Thanks,

 

--mike

 

[1] https://datatracker.ietf.org/doc/draft-ietf-sacm-requirements/

[2] https://datatracker.ietf.org/doc/draft-ietf-sacm-information-model/

 

 

Mike Cokus

Systems Engineer

The MITRE Corporation

 

--_000_BLUPR09MB08345A29608924087F1E89D5B4560BLUPR09MB0834namp_-- From nobody Thu Jun 16 12:18:04 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9D92A12D5D3 for ; Thu, 16 Jun 2016 12:18:03 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zbTbQBEFAmvo for ; Thu, 16 Jun 2016 12:18:02 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2CE9412B02D for ; Thu, 16 Jun 2016 12:18:02 -0700 (PDT) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schaad@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id B1DE838EF9 for ; Thu, 16 Jun 2016 12:18:01 -0700 (PDT) From: "Jim Schaad" To: Date: Thu, 16 Jun 2016 12:18:00 -0700 Message-ID: <017a01d1c803$ccccb580$66662080$@augustcellars.com> MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Mailer: Microsoft Outlook 16.0 Thread-Index: AdHH+SbXvMylcolyTSGeplIKclyxIg== Content-Language: en-us Archived-At: Subject: [sacm] Is SACM based on a grid? X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jun 2016 19:18:03 -0000 In yesterday's conference call, Henk made a statement that I did not feel was important at the time to dispute. I have since changed my mind. Specifically, he agreed with the statement that SACM is a grid architecture. I don't believe this is a true statement based both on my own personal understanding of how things will/should work and based on the use cases document (RFC 7632). The use case document has the "Ice Station Zebra" use case (Section 2.2.5). In this case one method of setting this up with be for a SACM component to be placed at the university and another one at the remote office. Since there is not going to be either continuous or high-speed connections between the two locations, one is going to have a replication type situation between these two components to move guidance from the university to the station and end point assessments from the station back to the university. There is not the concept of a grid here as there is a single choke point between the two locations. This view is also reflected in the architecture document. One has repositories that can either be standalone or replicate between each other. One has proxy agents that one can ask for data which will go and get it from other locations (such as remote offices, partners, or other departments). One does not want to have everyone talking to the same end-point every time that they want to get an assessment done. So one will have a graph rather than a grid of SACM components. Some endpoints will only ever talk to a single other component (a local repository) by publishing data and getting guidance (and may not even the latter). The context that this was raised in was the question of NEA and if the client and server NEA components are SACM components individually or if only the NEA server is a SACM component. I can understand both sides of the argument that the client is or is not a SACM component. The argument that it is not because SACM is a grid is not something that I would consider to be a valid argument because of the previous paragraphs. The NEA client can get guidance: there are provisions for sending guidance both about what to assess and how to remediate in NEA. The NEA client can do assessments: We talked about this for quite some time on the conference call when looking at the SWID questions. NEA can trigger events from either side, this is a SACM requirement. There are valid reasons for not considering NEA to be a SACM protocol, but we need to be clear about why we think it is or is not a valid protocol esp. if we are looking at adopting it as a SACM work item. Jim From nobody Thu Jun 16 14:50:09 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EAD1612D971 for ; Thu, 16 Jun 2016 14:50:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.902 X-Spam-Level: X-Spam-Status: No, score=-1.902 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=nistgov.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Dw1b4t3pizDo for ; Thu, 16 Jun 2016 14:50:05 -0700 (PDT) Received: from gcc01-CY1-obe.outbound.protection.outlook.com (mail-cy1gcc01on0097.outbound.protection.outlook.com [23.103.200.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BF1AA12D54B for ; Thu, 16 Jun 2016 14:50:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nistgov.onmicrosoft.com; s=selector1-nist-gov; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=U1LbaHqXK1Cjl2Ybir/fWj+IMqgGaNJ8SK1HNhDVYxo=; b=QnsTVwLQDQuzLtJ8dpjoRAEcOlbZJpeXPH2sCZc7YVlbCop4itvoqYXVdIhJIJPSFIKrYdAB/l33rbAO5sMukPVBlDL9E4KxiNsq3Mslb3F5n0aMGwjZI3MvnA+HZmImUVCQxuH8Z7CUwHfB76Mg9rkvrypb2MY2+2neXT5LKbk= Received: from DM2PR09MB0365.namprd09.prod.outlook.com (10.160.247.18) by DM2PR09MB0366.namprd09.prod.outlook.com (10.160.247.20) with Microsoft SMTP Server (TLS) id 15.1.517.8; Thu, 16 Jun 2016 21:50:03 +0000 Received: from DM2PR09MB0365.namprd09.prod.outlook.com ([10.160.247.18]) by DM2PR09MB0365.namprd09.prod.outlook.com ([10.160.247.18]) with mapi id 15.01.0517.014; Thu, 16 Jun 2016 21:50:03 +0000 From: "Waltermire, David A. (Fed)" To: Jim Schaad , "sacm@ietf.org" Thread-Topic: [sacm] Is SACM based on a grid? Thread-Index: AdHH+SbXvMylcolyTSGeplIKclyxIgADBH0w Date: Thu, 16 Jun 2016 21:50:03 +0000 Message-ID: References: <017a01d1c803$ccccb580$66662080$@augustcellars.com> In-Reply-To: <017a01d1c803$ccccb580$66662080$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=david.waltermire@nist.gov; x-originating-ip: [129.6.230.3] x-ms-office365-filtering-correlation-id: 8bfe0060-72a2-465f-3a0f-08d396302c4b x-microsoft-exchange-diagnostics: 1; DM2PR09MB0366; 6:PLdis3Cc1YW25kpXSTuf+WoqTSSXVfUgNVE3w5sIfg4VKLhcQJCOetg3Ia4g5BYWGRGrJ/M4+B4ZoSSRtNoUCgcBVjxty6/TKrOSn0jdXq7SLVXE4V33jVn4VLA1s8lQgBHz9cs4dZzG3MiOV27Exwmc6yvOcA/d/s70igospKAlqnqoPI2ioIxtSre901bY7FXFKwljPLISJTpqbVtxB5sNNZKJWB3XfHRbLCbPz/UEYyLppG5Uq9i350P+46TqoOnK9HuQShsYwyqT8j0hIkGZ8kWw1MoGBfhC+bj4dlQ6KIOspQkCr0VKDgxZk4E5f3QCpfatIbLJkcVlXSxzfA==; 5:1gpROpnYjLtSQeNqYwYOU57zQLjb1iiKE0OetUsKO06Rsk4t3UBRy1o67LAl/PHOdERLjcQSw88JmliOF/fPfgFRRjAyByw7s4cL1cA7yCPsyOgwxPVvAFglMaUN1RGdf+5fANfdcK6w0HRS+Mvi/w==; 24:4KNE52gISZQ7woIXgzJ6QP9FnHFfI0rMWG3Boy51spu5qJ/DANpMIzoFz8bejFsEDqX9DrHK2JaNEAM9Jjfw3mbzupJC4+b/Ugs5f/7PPI4=; 7:tT9iL/E0FwJ21aJTpYzaxN89wJFGRkO17BYMIg0DgZCUNyD/f5Fk+yvCjqOddBG86PFwFmfRubAGsJBj49vpFXCYtMw+RsF/o3S1bMOLL5Xg3PDJ6kTFsG8Bp4yNOJiCbW28ycSU6u0KZu9bSFAptFjDozEf3KQtKhj8Z8Zh527v+G3zn0GKZGjzDSnSyExXEd1W+kOLH9iOJ8zjI90bdA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM2PR09MB0366; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026); SRVR:DM2PR09MB0366; BCL:0; PCL:0; RULEID:; SRVR:DM2PR09MB0366; x-forefront-prvs: 09752BC779 x-forefront-antispam-report: SFV:NSPM; SFS:(10019020)(6009001)(7916002)(199003)(13464003)(377454003)(189002)(2906002)(77096005)(105586002)(92566002)(106356001)(81166006)(2501003)(81156014)(66066001)(8936002)(3280700002)(8676002)(19580405001)(5004730100002)(5001770100001)(107886002)(9686002)(86362001)(31430400001)(6116002)(68736007)(586003)(97736004)(2950100001)(33656002)(2900100001)(11100500001)(54356999)(50986999)(101416001)(3660700001)(87936001)(10400500002)(102836003)(3846002)(189998001)(5002640100001)(76176999)(5008740100001)(99286002)(76576001)(122556002)(19580395003)(5003600100002)(74316001); DIR:OUT; SFP:1102; SCL:1; SRVR:DM2PR09MB0366; H:DM2PR09MB0365.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; CAT:NONE; LANG:en; CAT:NONE; received-spf: None (protection.outlook.com: nist.gov does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nist.gov X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Jun 2016 21:50:03.3533 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 2ab5d82f-d8fa-4797-a93e-054655c61dec X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM2PR09MB0366 Archived-At: Subject: Re: [sacm] Is SACM based on a grid? X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Jun 2016 21:50:08 -0000 Jim, These are good points that align with my thinking as well. More below. > -----Original Message----- > From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Jim Schaad > Sent: Thursday, June 16, 2016 3:18 PM > To: sacm@ietf.org > Subject: [sacm] Is SACM based on a grid? >=20 > In yesterday's conference call, Henk made a statement that I did not feel= was > important at the time to dispute. I have since changed my mind. >=20 > Specifically, he agreed with the statement that SACM is a grid architectu= re. > I don't believe this is a true statement based both on my own personal > understanding of how things will/should work and based on the use cases > document (RFC 7632). The use case document has the "Ice Station Zebra" > use case (Section 2.2.5). In this case one method of setting this up wit= h be > for a SACM component to be placed at the university and another one at th= e > remote office. Since there is not going to be either continuous or high-= speed > connections between the two locations, one is going to have a replication > type situation between these two components to move guidance from the > university to the station and end point assessments from the station back= to > the university. There is not the concept of a grid here as there is a si= ngle > choke point between the two locations. I agree.=20 > This view is also reflected in the architecture document. One has > repositories that can either be standalone or replicate between each othe= r. > One has proxy agents that one can ask for data which will go and get it f= rom > other locations (such as remote offices, partners, or other departments). > One does not want to have everyone talking to the same end-point every > time that they want to get an assessment done. So one will have a graph > rather than a grid of SACM components. Some endpoints will only ever tal= k > to a single other component (a local repository) by publishing data and > getting guidance (and may not even the latter). Your point about the problems with having all other components talking to t= he same target endpoint every time an assessment is needed is a strong one.= This is the value of having a single component that coordinates all data c= ollection from the target endpoint. It can consolidate all of the data coll= ection requests, provide previously requested data that is fresh enough, an= d compute the most efficient way to collect data from the target endpoint. = This can dramatically reduce the amount of duplicate collection needed to s= atisfy the needs of all other downstream SACM components. This reduces the = load on the target endpoint, which is a win-win IMHO. This approach is also= irrespective to scenarios where the collection component is connected to a= grid or directly communicating with the other SACM components requesting c= ollection. > The context that this was raised in was the question of NEA and if the cl= ient > and server NEA components are SACM components individually or if only > the NEA server is a SACM component. I can understand both sides of the > argument that the client is or is not a SACM component. The argument tha= t > it is not because SACM is a grid is not something that I would consider t= o be a > valid argument because of the previous paragraphs. The NEA client can ge= t > guidance: there are provisions for sending guidance both about what to > assess and how to remediate in NEA. The NEA client can do assessments: >From RFC5209 section 5, the NEA Client is the NEA Posture Collectors, Postu= re Broker Client, and Posture Transport Client on the target endpoint. This= component can get guidance and will likely do so in an operational setting= . The NEA server consisting of Posture Validators, Posture Broker Server, a= nd Posture Transport Server would be the point of collection coordination. = This component would work to ensure that the SACM collection requests are a= ddressed in an efficient way that does not duplicate collection activities.= =20 This is expressed as requirement OP-003 in the requirements draft. > We talked about this for quite some time on the conference call when > looking at the SWID questions. NEA can trigger events from either side, = this > is a SACM requirement. Indeed. This is requirement G-011 in the requirements draft. > There are valid reasons for not considering NEA to be a SACM protocol, bu= t > we need to be clear about why we think it is or is not a valid protocol e= sp. > if we are looking at adopting it as a SACM work item. After a number of calls for solution submissions, the approach we have been= working on based on extending NEA is the only approach that I have seen th= at provides an actual solution to the use cases. Use of SWID Messages repre= sents a concrete method for collection of software inventory information fr= om a target endpoint. This is a significant part of what we have been chart= ered to address. It also supports a significant portion of the data that ne= eds to be collected to address vulnerability assessment. If extensions to N= EA are not considered part of the SACM architecture, then I don't think we = have made any progress towards a solution. This would be a very troubling o= utcome considering there is no concrete alternative for collection of softw= are inventory information. I believe we need to update the architecture to capture the need for a comp= onent to coordinate posture collection activities regarding target endpoint= s. This would bring the architecture in sync with our use cases and require= ments. This would also make the role of NEA extensions more clear as part o= f the SACM solution set. >=20 > Jim Thanks, Dave From nobody Fri Jun 17 05:59:33 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A2C0D12D1E7 for ; Fri, 17 Jun 2016 05:59:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WeMIf0pBnHlA for ; Fri, 17 Jun 2016 05:59:28 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 0E0F812D520 for ; Fri, 17 Jun 2016 05:59:24 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id A44046C026D for ; Fri, 17 Jun 2016 08:59:23 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 824F36C002E for ; Fri, 17 Jun 2016 08:59:23 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Fri, 17 Jun 2016 08:59:22 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Fri, 17 Jun 2016 08:59:22 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=i7KpKG94mftBRKXhtvjTjZrmzrfU3mA0t8ySbmDzZDc=; b=CI1X89rjVwXWCz/cgoRLoV4MR6jH8YvgWqESSiLLDBzevGB+6TZj1Vs2TdOuz09uwzUkkA7NpgMAd1pp4jJZbAwrlaVYkHQdaIBA4O+jO9wJF7Sa5uBhSc4bFlmXUdtSAVr+TVDpCgCtLPsujVDCVu/Jvo27JuF7IXm10hptyco= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) with Microsoft SMTP Server (TLS) id 15.1.523.12; Fri, 17 Jun 2016 12:59:15 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.015; Fri, 17 Jun 2016 12:59:15 +0000 From: "Haynes, Dan" To: "sacm@ietf.org" Thread-Topic: Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 Thread-Index: AdHIkuRuh5CvhlIOStepa2ZMRUUCng== Date: Fri, 17 Jun 2016 12:59:15 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.89] x-ms-office365-filtering-correlation-id: 0421fb75-c9dc-4a56-81d7-08d396af3004 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1078; 6:rdAbuoLXwuHMCpY9l1skdmuOKQpwHa8LouHEeTx0RxuF3i4OMJ4SJWG8ZdtQ9Yq6yoKP19Lu/MaVaQl0y/FCJZdtKKDNdhbyUspCzINOs5nt5Y7YFmKDSDfmOXikDlp3w605hh3muQSU7bZh7zM3cgGK760Gq2k8MQ2duSGm9ZktVkfc6LtBZPKScnObT9TDMmFeOLMXiMoNEA3WlC/zIabDaME1LkH/73tVDh27RVKVM8wL8AJM55W2wzFBIn5oQCLPJSKkhvUG+zEKtg7BgSrIE1+198o7El56opHEXAoFBzInptm6QWtqNKgCIBziecswiOrKO1ASCzIsm79O3Q==; 5:lgW8W+5zeeTDfbHsk8Ehw1PqdTojQnJYxDksVZJ+krZVixhRmsIDY+I1Uob57Xvu5NrBrfCJjhB4KwEITKRM1ewioM8ehE3XnviUaAaJzZZRxSB7ccCuNZXprqW8GEbLwgQsP0erfHiR2VYJ3UU6LA==; 24:5WChyeNLDwweKAMHzRy+uSkG3/DmBn3XYXGrDy5y51Tf7Upmor88eS4SYTOZQQUlkA5P0HJaQjSGqfKFFH7lP9E9wLkK5JScYGBkOI5fZ9k=; 7:j/caISSIlaEI4Qf2BM0IW3N8bdSmjiR5aPzXoCjoAxDTKDVrIpSACYQGUNcWINB/6L6zNTxVNFcotne0EU/38eKeHoj9AzkOmR2sbNQC/WGiYNjcDJL1m9d/0r1QYWdWsCt3yMHRSD3ISrp8fy0b2U0330uzJ3hlBGPHkySZl+6Riz6DAnsoo5NOdc77mcLJ2zBAx+9TWWESBhDzpicglR55KROZ5FGEfyTJGJEZy4lpAfZb7oMswwAw01g2rLJG x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1078; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(166708455590820)(192374486261705)(273802758526341)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:BY2PR09MB1078; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1078; x-forefront-prvs: 09760A0505 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(5383002)(199003)(189002)(2501003)(7906002)(1730700003)(8676002)(74316001)(2351001)(106356001)(105586002)(10710500007)(2420400007)(66066001)(16236675004)(8936002)(19300405004)(450100001)(122556002)(68736007)(10400500002)(99286002)(15650500001)(2906002)(86362001)(19580395003)(19617315012)(229853001)(81156014)(81166006)(19625215002)(87936001)(33656002)(92566002)(5004730100002)(5008740100001)(586003)(101416001)(2900100001)(50986999)(54356999)(3280700002)(76576001)(3846002)(9686002)(102836003)(6116002)(790700001)(99936001)(77096005)(15975445007)(97736004)(11100500001)(5003600100002)(3660700001)(5890100001)(107886002)(7110500001)(189998001)(5002640100001)(110136002)(5640700001)(5630700001); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1078; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/mixed; boundary="_004_BY2PR09MB10785E8DAC1DC5D76942955DA5570BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 17 Jun 2016 12:59:15.5924 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1078 X-OriginatorOrg: mitre.org Archived-At: Subject: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 12:59:30 -0000 --_004_BY2PR09MB10785E8DAC1DC5D76942955DA5570BY2PR09MB1078namp_ Content-Type: multipart/alternative; boundary="_000_BY2PR09MB10785E8DAC1DC5D76942955DA5570BY2PR09MB1078namp_" --_000_BY2PR09MB10785E8DAC1DC5D76942955DA5570BY2PR09MB1078namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable We have a tracker that recommends updating Appendix E to reference Critical= Security Controls v6.0 instead of v5.1 [1][2]. I went through both versio= ns of the document and made the appropriate updates to the text (see attach= ed) as some controls have changed or have been removed. Please review the attached changes and let me know if they seem reasonable = to incorporate into the next revision of the Vulnerability Assessment Scena= rio I-D. Thanks, Danny [1] https://github.com/sacmwg/vulnerability-scenario/issues/23 [2] https://www.cisecurity.org/critical-controls.cfm --_000_BY2PR09MB10785E8DAC1DC5D76942955DA5570BY2PR09MB1078namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

We have a tracker that recommends updating Appendix = E to reference Critical Security Controls v6.0 instead of v5.1 [1][2]. = ; I went through both versions of the document and made the appropriate upd= ates to the text (see attached) as some controls have changed or have been removed.

 

Please review the attached changes and let me know i= f they seem reasonable to incorporate into the next revision of the Vulnera= bility Assessment Scenario I-D.

 

Thanks,

 

Danny

 

[1] https://github.com/sacmwg/vulnerability-scenario/issues/23

[2] https://www.cisecurity.org/critical-controls.cfm

 

--_000_BY2PR09MB10785E8DAC1DC5D76942955DA5570BY2PR09MB1078namp_-- --_004_BY2PR09MB10785E8DAC1DC5D76942955DA5570BY2PR09MB1078namp_ Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document; name="csc-updates.docx" Content-Description: csc-updates.docx Content-Disposition: attachment; filename="csc-updates.docx"; size=22382; creation-date="Wed, 15 Jun 2016 15:20:02 GMT"; modification-date="Fri, 17 Jun 2016 12:10:46 GMT" Content-Transfer-Encoding: base64 UEsDBBQABgAIAAAAIQBMCwvMdgEAALUGAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIooAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0 lctqwzAQRfeF/oPRtthKuiilxMmij2UbaPoBijRORPVCUl5/3/GTUtK4NPHGYM/ce88IMZ7M9lol W/BBWpOTcTYiCRhuhTSrnHwsXtJ7koTIjGDKGsjJAQKZTa+vJouDg5Cg2oScrGN0D5QGvgbNQmYd GKwU1msW8dWvqGP8k62A3o5Gd5RbE8HENJYeZDp5goJtVEye9/i5JvGgAkke68YyKyfMOSU5i1in WyN+pKRNQobKqiespQs32EDo0YSy8ntAo3vDo/FSQDJnPr4yjV10Z72gwvKNRmV22uYIpy0KyaHT l27OWw4h4JlrlXUVzaRp+X/lCPGgIFyeovbtj4cYUTAEQOPci7CD5ftgFN/Me0G41aXJABSt858R qmsuQAyH0ib0IhUYvmBLBZdn6ax7IRxYNwRB7dsbH3EtQv0cnw1R2ZyKxM65ty7gbfD/mLndo6U6 xWkd+ChPr4IuEa3Png+am3Ukm1Y/nekXAAAA//8DAFBLAwQUAAYACAAAACEAHpEat+8AAABOAgAA CwAIAl9yZWxzLy5yZWxzIKIEAiigAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAKySwWrDMAxA74P9g9G9UdrBGKNOL2PQ2xjZBwhbSUwT29hq 1/79PNjYAl3pYUfL0tOT0HpznEZ14JRd8BqWVQ2KvQnW+V7DW/u8eACVhbylMXjWcOIMm+b2Zv3K I0kpyoOLWRWKzxoGkfiImM3AE+UqRPblpwtpIinP1GMks6OecVXX95h+M6CZMdXWakhbeweqPUW+ hh26zhl+CmY/sZczLZCPwt6yXcRU6pO4Mo1qKfUsGmwwLyWckWKsChrwvNHqeqO/p8WJhSwJoQmJ L/t8ZlwSWv7niuYZPzbvIVm0X+FvG5xdQfMBAAD//wMAUEsDBBQABgAIAAAAIQDB14BaLgEAAKwE AAAcAAgBd29yZC9fcmVscy9kb2N1bWVudC54bWwucmVscyCiBAEooAABAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAKyUy07DMBBF90j8Q+Q9cVKgIFSnG0DqFsoHuPbkIeKH7AGav8e0hKYPLCSy nBn5nuOx5Nl8rdrkHZxvjGYkTzOSgBZGNrpi5GX5eHFLEo9cS94aDYx04Mm8OD+bPUHLMRzydWN9 ElK0Z6RGtHeUelGD4j41FnSYlMYpjqF0FbVcvPIK6CTLptQNM0ixl5ksJCNuIQN/2Vn4S7Ypy0bA vRFvCjSeQFAMZyEEclcBMrIpt808DWGEnna4HNPhA1bPgBgW7Hcmg2ZM5OYXEdUIZ7wpMRVGfTsE dp4fsC0Y2w4WsK1jxMmYV/dH9+47MYV8VAXsWhgKbOoYfjomvjQal3w1fIOfVkzi+p8PH6ZfSv5h jaAlyB3+cBKzuBpzFT34WKVXoHt/TPEJAAD//wMAUEsDBBQABgAIAAAAIQACZQTMBSAAAH2RAgAR AAAAd29yZC9kb2N1bWVudC54bWzsXW1vq0qS/r7S/ocWX2ZXygvvmGiORxjDzhlpRkcnmbvSju6H DnRidDAwgOPj++u3q7ENdowNN7lxbFe+JMHtpim6nn6quqvqz3/5OY3JC8uLKE2+SMqNLBGWBGkY Jc9fpH8++NcDiRQlTUIapwn7Ii1YIf1l+J//8ef5XZgGsylLSsK7SIq7eRZ8kSZlmd3d3hbBhE1p cTONgjwt0qfyJkint+nTUxSw23mah7eqrMjiryxPA1YU/H4uTV5oIS27C3526y3M6Zx/GTrUb4MJ zUv2s+5D6d2JcWvfDrY7mr5+tDRjCf/wKc2ntOT/5s+3U5r/mGXXvN+MltFjFEflgncpm6tu0i/S LE/ull1cr4cCX7mrhrL8tfpG3uW+1VfGy9ch7nibs5iPIU2KSZStZTr9vb3xDyerTl72PcTLNF61 m2eK/rYJMa7eSt1hl+EvX+U0rka+v0dF7vBGoIv1N7oMYfOeq5FMaZTUN/5domkIVzH6daC+6sAs WL8ujGUXt8ViWqvGPHt+21v+nzydZXVv0dt6+5r8WPcFeNWjr+Vsac7g4m2DuZ/QjKvyNLj7+pyk OX2M+Yj4uyf89RHxBghoiTTkaPqYhgv4nfEP9LuM5vRryAHZ1zVbdQ1JXOWIVMJVa/nDr95x5A6/ f5FkeayrI7O+9C3fcXHMnugsLl9/8q1xSYziWw6/SvpYLH/zhi80/iLF7KmEb2UpF46tmNLtvgbK QFP3t1AtfbC/hWaa+v4WujGQ97cwdPvASE1dOTBSS1MPjHSg6gdGygV2YKSKLFuHhCrb9oGxKoot HxisovLhHmiiWfqh4eqmIYZ7W8+WIqMBn/28CX0qGcxDaB5HoI+qvv7n+wzUgc7KtLpFXs253E+T soAvF0HE0cBNZ3nEcvIPNodvMlqUThHRL9JDNGUFXCbf0ylN4MOJkxSvvxIUm5fE3YI0TvPVI8ni p/qg+G11VV1fcWE8jWu3y9HerjUFunqtdyf6WPxVDr0b5YYQN4/KKKAxuWcBv1O5IC5/jDyNC/HC q69UcngNXpZnqsZI1iUELwSvugmC1+cCr93Kq3i64/CZJ6HyovLWTVB5kXn8scwDjC/xIvkrynJW sPyFSUNCyMOEkQ3WMb8LWcz7icLli+ZvdJJyKfyVLhJWXJFx9RAhLeH9y4p5LZvXivGgyHeGdifL /1eJaacAlxfHTDzNqUuVC+qBQ/iQ958EUUzShLiLR5ZDk9VnNZfjV+BLUQL9gXSVN0j33GaiyxIO LeSJ3+Ir/JWwcnNa3grJnaNqDldWwJ+Kt1kGmjzSHNcZSxvkQh/4simPRivdQ3KB5ALJBUFy8QHk 4l/BEs+ugyWM/UqiJIhnIR91sYK41WcC/SlJZlO+hpL0icw2Ua/JTFR4qG5rp/UgW3ea1YuZcAVX BpUL+aSZCetIRbR3EOc5yK0c0mchs1e8Y/eSa1m+rmoWwBTa87jk4pKLS+6Rl9wiYAnNo5Tjd5FO GSyj80kUTAjNGV9pX1jOQr4Gk3ISFWR12OQG/ACRWJLheEMHW8N0ZXmgDNCRicCHwIfA9wmAb4Vl BYc2RmgcPSfiHN0jK+eMAeAx4rbaEzoMvLMvTrmTjV72hK9bjumfvj1ROTo7GhVwvuatMj0H4XEz DFyaO82K81PQ4Z+K2qKnSQiK14VQOJZpuCNHQkKxpwUSCiQUSCjeFa9aCUXOYvZCOYPgvytiwW0p YBErE+umA6wZ9ljWddOTENYQ1uomCGuncFpLNcaebOugZKi8qLyovMhJPsiGgnPi4qQ4H3aUzNJZ QX6ZxQnLaRUAR5yiYEUBtKQLCVEVc8TFIiGOIY7VTRDHToGE6CPTHak27rSg8qLyIgn5BI4Ryb13 iX7XhZwIB/B3NmVhJALnr6RqN7oDaeHTxDU1DY/WIO4h7iHufQLcgwMzrAjy6JGF5HFxYEfZhIH2 2f00cUf50I6yEMIbZXoOwrusHeUWhWzVvAFqXifNSzpqHZieqHUw2Z5S1LmmzjViGfuFip7xJNkt uUNBjTV6Kf3CQi8Wvg5H2p6bTq4DRQktuBG+tr7jxfak2mFOy45ueKYFYaBoTqM5jeY0mtNHZRKE 0ODfsyhnVxzNwF3If8NhUfqD8U/AVwjpFBI++Cip0kDCpYhfzUM+zDLtgHma6Vgj34JYUcQ8xDzE vFPa9zRcc6C7qi+h8qLy1k1QeU/i5ORA8weaq0movKi8dRNU3pNQXsvx7LGrS6i8qLx1E1RedBUc w1XgQj2A5IqwktD4hqx/vJ9ZxBuRMQuYyBilyFcEXON1k+39iixP0ycvh7GWi4zf5Tmn0/uS5uVy NlyEQCExVxfBeEl4nmIZfqPPjCj6rx18SJbsWZpnwaYMLoa4GOJieEpM1lINzbLG6ENC5UXlRSZ7 bOK1OgRyPc75q23QVELuHffvB9lqkbE4PmO6OoQwgk5COFtq2sLY75cpJzbmjPj52yxhwurpwGVl S3WckYc5dva2wOUQl8NPyGXlkaKMuSUqofKi8tZNUHlPIojb8B1/YGMaKFReVF40RD/BDkAUsqSM nhbkpRG6HUGoQb4M14aTmUlIplESTaPfmAh3nEdJmM5J+tTB2tAHquyMfLQ2EPMQ8xDzPgHmpVmW 5uUsgRAaUWuoLGnwg+XFjVQVQlxl9mzEeW+XSugAfOrAUk11jBl7EPgQ+BD4PgPZK6qCCBzP5lE5 ISKBD0DblANLlMWc2NFFcdeF1Fm66XkqGrKIbYhtp+aFki3V1WFKoPKi8tZNUHmRmByJmAgiskE7 NpKK9KjyWqXCaClLevqZZ262udnrvCHaOwjrAvKGXMO1y8kZohCaZXHEh1KmlSdj7eQQrg1akqgk AY2X9ZfzWZJwuO1kCvjm2NfQv7u3BbIJZBPIJt4V0/ZUbHqexTS/IvDipnzJCznYUYFngH4c4qMX PqCMgx/Upf+Nfx5HRQmFnTrgnamPPduxMZsI4h3iHeLdJ8C7ra37yrdbVfvmcMdbZmkSitreLVtb XVieM3ZHvgXZjBH1EPUQ9RD1jox6G9vxsLUVJSVLQg5oHPQeGWE/WTAD7pcmhIpSxMsiFY+0iKo0 cx1wT1Ec2zMMwCfEPcQ9xD3EvaPjHlubrkwUI35MOd9rksDFkt1ly2SZdeLM7oXYtbHr+yMTEwUj 8CHwIfB9CrfelIULALxtg3cDzuYXl95nSPNNRG8RwaVFS4dREcyKYnV6l5Fv1bK5IAULYDnssAya njdWTKz9vb8FLoO4DOIy+BGYRgijeQx33I5IuOnizRhYru1i8DiiGaLZJ0az3cpr+bYre+pYQuVF 5a2boPIiFTkSFXnYOEdIi2IGwxWHCcHcEsVJszwqGKFxzig33ie0IJQUfKQBg3OGHTiLKo8Hrmzi zjPCHsIewt4ngL2OWy3NMuHcWDsQ46DD8/Q4tq/Yu2Mc9LE2ckYnLPYuMQ7GOwhrT4zDqcvwQmMc 9C4uEM007JE9hhmEdALpBNKJU3KBqCNtJGsjV0LlReWtm6Dyoi1wJFtgBGevdlH7BlsF10Uftqoq vdiqqqlQH/VkhduNrTZMJSGAN8rzHATXbiqdm/oNVQInF/fo2AB17F11DLLWoY5dlI5ZhOaMTGnI COcyRfQYM/K4IHM4aMzpS9O3VaaEbotl13EDVR4plg26iXQd6TrSdaTrR6br3xl/71GZ5gtSREkA 2ayjgmPeDz5o3vAlSmdFvCB8HDELIHiMr3WU0BcaxRTwsNuWpe7Zuqf66GNE3EPcQ9z7BLgXc8qe cxuKxosiKl5R2l0YJo81Z2BhmhPEMMSwz4thbYaXr/imjoYXKi8qLxKQT0BA/ncSxUtrq05BlPIR J2lJniEJpchLyUjISm5sibj2STrvQFRMa6B4Ix8wCbEOsQ6xDrHuyFi3TixZOcvn6SwOISNRQONg BpZYSPgAqny84RXk3RVIWKazYALZiop02iVDh+Xppj4ydAmBD4GvboLAh8B3JODjnA0oXDSF+mo0 KUU5ITj7XiWj3ImLvDENRLxQF65nu7praJiUCCEPIQ8h7xNAHkvCLOXGK0Q/sqIQuSizPA34321Z Z24IcbgVzMneVddcbK7rm6q8BXvmWB6ofPLDwyPsIewh7CHsfRTsbWNaVVeyaJSV3IC15lFNVbz6 bkcLrQfZutPNXkc1XVc1PeV0hb4+qqnIcLXDYU1VeQeJnoPoyuHNYHs5PdfTmldLoypkNF7q3UZc chcHkuMrCtaBRFqBtAJpxaegFUsP0YKbSL9sJFlYfbDOeldXrys28nx2gD15bJiOYaETCWEPYQ9h 7xPAHn+hU3HiAdxF3bLLrAEx5IPtVKfTkBVLHsu6hLCHsFc3QdhD2DsS7OUsYBzariBV1pzFMfx+ jYBrpBM2bs6eaR7CYYkOkKf4xohPTVdCyEPIq5sg5CHkHQ3ypiyMWKcIHNlSZV8V+3uIXoheiF4n FYFj+IqvuqBkqLyovKi8SD2OTD2g+nedkPh1EA4NwxxOLW0F4cAx9QVMii4JX6yxP7IMb4uycOXS jZHrwLMj6iHqIeoh6n2owbWAmt/LSuD1MU3ejINL0TyOeeDkEiRD6JMUTTP6nVyyFNW2T/ct9E0y p2rvIM9zENwFJZkz2rVL7z4bxCk2o9+5QMVWdff0k/rvRrorUQN3S+fg1lOAuu80eWaiAO5K1sZy DbscuQ0FrreiUmMe9k3Xiyi/X55CAKjXh+Q5uNor0KYqe0m4Eu5SkRvi7pEJtxL3YPeiammGKovO GsL2TMO1N9O53peLmK0ezl2Okj2xnCUB23zU1TOsPt14iBVmdXnnO4ZxPlhOINVxPzi3u8P5mYhu qF/bB2XU0JNtCTWQ+CNmuLj9Bc7w4T5Qu93pQ9JUzzJ8ZyvxnGZbriaPxNqMPiT0Ie1ogj6kj1Bt UNoL8yFVgTbide8yXLW+AW27GNelkh0ax7u4Ts17z22WDSFga2su1S4xrW8oXxt7P/VJUw6LDSHd nq1LrAV2xGnHaVRGz+LAdyGsgoyWwYSvM5W7Z/cM6uGk3juDFNPQfPWUZ1DUNoUa2N3DBf17sPvU hbiCZZqLPBUXg9ItSpnOStgTL4I061oLwFJ013FsrAWwtwWaM6+aoDmD5swfYs6I+Nl5mv+4IeQ+ mkYxzePFob1vTYcB465Im7hXK2PXvW+tbwlz3Ps+ectPgxJD1QG8gmQsh2hOQNkioAlkC+vAJlRD s2VNAWVENoFsAtkEsokjswlYwlhSRoHIaz1NQyY8FbvYRGP1e48zFue9+jWol0BlpF5tMuxGvc5N IYdmk01M0wSqGgLKxukznGl9mLx2f+2KU7I0yx374HZGQoGEAgkFEooPwa+YD+c7S0KWs/AbfWaj nNEf1URopRo7Cgexsq4cNGVgRkHF6ioxIlRujYq6lqs4inIoSY7q6frA0iWEwz0tEA4RDhEO3xMO 20HvKQ1mBbzdNCHSfEL5VOB4twQ1klOOfDmHP8o/naRz6UpYX7QKaFoDZRci6IxcU/V8CZEPka9u gsiHyHck5JvQF8aBLufXsjQJhae8yjZfcJSLy0k6e54I5icKboQz3rAR4b48snAA9vSB6qqWA7Hp CHsIewh7CHtHhj2wa6MkSKcZLaNHCDyBk4AsEkSvyhFbAC4mZZ7GnRKJmbLv2IqFGIcYhxj3eTFu t/LKljPydGcrW70q2wNVrk6L91He5ZaP5ZhytQfXQaOXjVGjd7dAjf4QjW7sh/aIcDYfFO1Or85s V72dJPlpC/zV9gb+NqR3LuQIkpiJowXkflGUbEq8pITc0N9ZXIVJTKKMhBF9zum0PWKrmmz9Z1C7 qJcXN+H1ZOW/PvWfhCSZTR9hk4ZwcWdiR7lXNK85sGRVtzRpY/lS/IGjyyIx93tyT1ypcKVC7vn7 lpgGOvaIQbxgdGxdo/Zg5Pmt1MMwyllQxouqAujWkluf+NN7hCW2TqpzmD0Y2AruLPDa18c51j77 VXW3MA1mIkfjqvG2yHblDVE0TfVHgM4NpmHonqsN/HUeo56G8mhsaQrsiXahH8vGYmhIP5B+HNtQ 1jVo2gNzDfXUDWXo6iIMYfYzYFVVuPSpfdHV+04A+UwX3bZMa6vk5iKxAh9ny9LcEGmPuL2mTp2f SIdlSlgSZmnER90itwYW9Yj4aJXbxRoV4HshFvkvMU0hcXWWJgX778uyNG62cK7NKapbVW+NydfX Y9xz8jWI3zlatPfg+SMKuTaBoK8ju7Zm3uYLqVMvvvJRw0h9R1PqghDtYnx76sXq9qsh4ttcGVt7 sGO3faVoI1uzRb7Mhn2lq5aneaa3kiHaVztaoH31qslZ2Fcid+xF2Vf1wxt999BwTd3KwsJI+sJy SIAozq8WBWSU2ip+y4dPn5lwhRVAccS0jcpJb/TWNU8zFQU8As0zYAPXNh1/vJL9H4nejTztiN6I 3kdHb6PvNtdZoXff7RhE7w30Th9LGiUwDV8XLK8YduWcixJI8iOOppCnPJ1WGx980EF/Ai4bsj92 FQDrBoSbquKYugfnA3tB+KGjFFX1BzEKRGtEazxK8btgVoN7IszulthhmI0S4XwiyhUEvXKaHM7E bHpdxW/d1BRuwlav6G4f1cpluJZ5i3Df7o6q7rQe1S6m7loj37d1CaM19rRAmEeYPyrMtymvPHD8 EcA+Ki8qLyrvSYVa6bqtGyKoCpUXlReV96SU1/ZlRRZFhFF5UXlReU9JeQ3bsXzTxAwFqLyovKem vMrIMVTbgAOeqLyovKi8p6S8qqP6A6TNqLyovJ97UxG6eq13J/pY87aIHDd9eoqSK8JKQuMbsv7x fmYRpHccs4BBPgqiyFcEtk7rJtvpPrI8TZ+8HMZaLjJ+F8gJIuIElrPhIgTK5fKvLoLxkvA8xTKE 7PJEMX7dkMLuxdAaGZoz8uBsFC6GuBjiYnhSPiTNNzzf0yVUXlTeugkqLzLZYxCvrwl/nwkrr8c5 f7UNmkrIveP+/SBbLTIWx2dMV4e/zOKkkxDOlpq2MPb7VV6cVz9/myVMWD0duKwylmVPVbfCNXE5 xOXwQBNcDo/PZXXDl31ntJXLCpUXlReV9/Mr78D1ZHusS6i8qLx1E1ReNET/YJPKu1Fu1BtC/krz cE7zqhL7ffpUin++Ji8sgSLRrEthaFUzRp5pIIohiiGKnRoFUSzb9w0flAyVF5UXlRcpyFFdmlC4 JSrqjN/8bxoXaZUznoUipVFVuXiVno43aKZF6lK73fSckWuLslYIegh6CHoIekcGvaCq0i4yVnBs m9IoWaUNmjRNtGJlokW1iXZF5pMoEIneDpUw9g1NGdvbYauqYdu+rMHTI+4h7iHuIe59FO4BlAWQ 3JJTu8eFyHnmbgBZM6O+cDF1zJFkPCjKnd6SUX9gW7LsnbA8hwzOjGwj/qtU+kaPEgStAtuTVOrU 5bjK/ZTOkiCK4YPWbFAXopFbuteYSj2qMlz0VEr2TqMGmAkJIJjx6cat9hYou0yta0ySHuUoznuS 7D862VaNp4FfPTKwXzJ+uYvHilhczEo4vGcB77pcEKhXohBptfu52C6YdSuM6v8XAAAA///snW1v 47gRgP8KoU93wCbR+0vQBJBluw1w2wabFC36paAt2hZWFgWSjs/360tSkmUlsS1jrxsnmQUWjija oobkw+HMkFxfl2htudclZvguvTFcO7YddzAydKogvwuVGtT/ZOo141n67cYwzaFrD/w26Z69kjgk M7zKxcs79ztJt39ZX5f3TH0IPOH1p8z4hPMbIyczob5VUn5jRJZvXB3KYIWOfTiHHbjh4RyO77uH c7heaB7O4bnRkZL6rnWkpIFjHylpaLtHSioFdqSklmkGx4RqRtGRslpWZB4prGXL4h7J4gTuseK6 vqeLe9W2Fl7iaVbMZRY8E0S1Q5U9zwoiq9vdXnxb5TIBrwStHsGqNsfGtBBcfZlPs+zGSOiKZYSh v5O1+ibBXMQ8wzfGY7YkXCWjb3SJC3VzERf85VemvJuknzalOWXNK5n6X3WD/9Gk2tuURJVnJ+2q Lu3Vtqeon3rZ797pa8mqRL8vc12RsopKRjhhT8S4RQjFK7GgLPuDpAgXKfpngduEIXnKpoQb+k7y kCAbGXfFEykEZRtEZ7qRVI+pZKdR0wGe7yQjJw5DA4AHwGuzAPAAeGcIvAc6E2vMyKWB0OMi44hP SYFZRlFKp6slUQLAPagXRHHoBxGoeUA9oB5Q7wyoVzIqNTmOxAILpMBWkmk2y6ZIUCQfnpOpUHWv iLjEWSHkf3W9wCxVQFQ3enDPTaLEHJmRAdwD7rVZgHvAvTfiHq81OpRigREWgmWTlZAlnsnnPq3y gjA8yfJMbBDmXBJSKXmoXDHZXAj/gmTmHtyzoqHjmaZlAPeAe20W4B5w7424JxZkq9fRAtGZTmnV uRaESuXbUjJrrHs9oOfFA3OcjG0DoAfQa7MA9AB6bwS9xkhHUgkyDbxRkZZUTmfRUKl/SQtEXn/q +fBMptM1R1Nc9OGePXLjYZIYwD3gXpsFuAfceyPu4ZxTNCFoxSX51MRWoa+ewyrVL1uWOVFg1Ca+ jv+jB+/saJR4gwScGcA74B3w7gx4t9r12e66KNqJrCw1nmvmNa4P+UK/kMv55ZceyPMHYRyHIdjz AHmAPEDeOfgx5NxUe2QFpTlHOaXf1ZVS9jo0bAD46yVCXykj9ImwL0of7EE91/LHztgDgx5QD6gH 1DuHiW3tmhUU4el0xbAg+QZlqZrKzjaI1NY97cT4onOhXKl6DKVkzgjppes5w2Qce4pOQD2gHlAP qPfW1CvLPJti5Z/gqEMwKQtG6WzE1PPFppTfnDO8fBCYibqGP5iQbjPeRwKjIv2Y77+nkchBTw5w OFdjHpnNlDPriWzHwyrYacf939PQOw6SgeeNDRgJD+SAkRBGQhgJfwbk0LMAzdame9mDZt7I9ZPQ Ab0eaAY0O1+a7em8STBInGBoQOeFzttmgc4LqsgbqSKPfaIJUypfoaACLfCTir9+ksrLnDQhOT2U Fssxg9CPwfEM3APuAffOgHvbhcIpETjLufzkU5ZNqhhrtSmMpcxLyEZYrS4mG6RX22WzGWFyptbH 7GQnbhBoNgHzgHnAPGDeGzOvjRhUZFvTVZ6q8Gq6Ehd0dsGntNRh1WJ3hxi9VFgHXtfKYA/y+b7t +W7sGEA+IF+bBcgH5HuzFXSydBJ/T1lKNMy0J7EgCoeY6UAcvipLyirUTeVbM5rzPvZ414ns2HRg bxiAHcDufGG3R1MZWFFkDj0DOi903jYLdF7QVM7BHn9XRQTXQXN61nbMVt8NK9ujsoyGvj14viDC GlmWPdJhUkA9oB5QD6j306i3zsRCb22yuzcxzrN5oW9V9vgO2dbXKcnlgzKlxenar1aL3Rh/w5tC bXE3rF5TzvRUCzEt/8L0Lyz/USLP8q5N8z+VIF8VcZ04JPp9XTuIg3csdympRwn52wuV1ly0I4RM UbmyQv2Alqfy0/6oPD+C4MTtCwuAlNJH7Jm3lbfrQB9T2gL0sT+vjznQxz5bH3PRpF3lJ3WZHqq6 Gbnh0DLBQHEwB6jqL7KAqg6q+v9FVVf7ELKSZbxdl1X5k5t1WWozhwXJWHcHm4KINWXfeyDPjcLA czzXAOQB8tosgDxA3lstXN7uKn3ZM2Bamy54Zbvot0jVDyI39tzY6FDPC8aRE0viNKIG6gH1gHpA vZ9AvTog5sVWDVO6VGtVv+FiTvQODai2aNRt7HMISFmknwlmx1im5us9jTvBoxlem9FJxjJvZJte +H5lWtvHXpesfeFoyT4zonUb3kgFsL7e7FTBQt8fjpLjUnsQm5w0pUzq3yc6xH9KumVunt7c7Ty+ KeKnrzw11Xul8qqUg/Soh8KPRo9bez8ldMs4xQTsnkSJMLaDYfLuG1p/k7o6jflH5fkRBLffpL7T +FTAKjS+o43P7dn4gpN90B+28Tl7Gt+e8bsG/44o/yz388DyvdjqiPJPGPCbSVDn3V7vEu+3EvfM CiYblJJZdYYqfuV4re15rL3PVfXGQTw0wNR7IAcYPV5kAaPHz+CA6rSfzOiB0ZLIcSdV6yDppDku mpaEYe3Z4hsuyFLhDc0yOZI0162FuAf2HNMdhNYYsAfYA+wB9s4Ae8qpJa9Fc6BqJqHG0YzRZWcr jJTgvHJqbY/e0isTejDPGyR+OLIUm4B5wDxgHjDvjZnXbPyzfy+Man+zjG8PYO2j3PkDV85pI9ht GkAHoDtf0L3eeQPfiUJ3+HwzB8eORmNHmyVP6by1KdyPTXusjhmFHg09+n306NZPFDgq6ynG+CqU ofq1d6kB7XNRB3VN7QjnhDiPXeFo2aDe5NipmA8UKiBVMDW3tC+i7d6LeqdFddyzmofu+Bfuhkjg udqY8d9ff1Nq2RKLS4Qe/nU3VE/b4557HfFWEMdeMhwaHcT75tiPndMDLQHxgPh3j3jd6j8V4nde XvdNQPjrEpMtSBbnGylSwkh6j+dkwAj+3gyDB+Euic3RLwshSn59dUWKy3X2PStJmuFLyuZX6urq 7uEfV3ej5L9WFATmr/U0HOecqrk4PpntwXAQeWbsGh2228nATsbjk+fewHZg+7tn+8kxcR+J7SfH uIF63tkvmHKeTXLyzNvTnPtwdBnUyfx2Iy+I7FFidHXz2DedgaVbMvAb+P2Z+B2eHFb6gfgdnhwI Cvzuerh2jrTo7K11eQDNXQNYG6jbmL+2kt0jwh8Psa2etC3VaxFU4zhxRpFrHHey+a6Ep+5Fz/Ff 36nELEes++6bVXf1s+cPql7WChh1513Iv72wIUM5/4rVlwUtFQ6qLCybL0R7OaFC0GV7rRDSXi0I ThUmAltfzijV1Kgv5ytRQ6RpPqpN1FWu8ujklE7/yjJVXQot95mYLtTI0TSa6hX1nxOabqoKrx2b t/8DAAD//wMAUEsDBBQABgAIAAAAIQAneJoE8QMAAOQQAAARAAAAd29yZC9jb21tZW50cy54bWzU V99v4jgQfj/p/gcrz1di5zdRYdUksNuX02nLvdzLyQRToiZ2FBso//2Ok0CAZauk1Uk9CUHweL4Z f9/MGO6/vBY52rFKZoJPDDLCBmI8FauMP0+Mvxfzu8BAUlG+orngbGIcmDS+TH//7X4fpqIoGFcS AQSX4b5MJ8ZGqTI0TZluWEHlqMjSSkixViPYbIr1OkuZuRfVyrQwwfVTWYmUSQnxYsp3VBotXPra D21V0T04a0DHTDe0Uuy1wyCDQVxzbAbXQMXPRxMl42Bci6qgCr5Wz2ZBq5dteQe4JVXZMsszdQBI 7B1hxMTYVjxsIe5OqWiXsEml/Th6VH3iNi6JSLdajzqiWbEcchBcbrLyxGnxXjQwbo4gu7cOsSvy 4759SZyPFUTSqNIB9km/lbLIm8zfRiS4hyIa4uTRJ4XLmMdMCprxLvC7qDkjl7jDAKyfADzJhkG4 LYQpD0XXGvvy+WMqf63EtuzQso+hPfKXE5aeVwOw2mo5r2D5sWSeNrSEVi7S8PGZi4ouc8gItEcg H6oVQLpLjGk3TdE+zFYTw3INeKJbtREwAr7RA2fyD5RQrpdXVAEOxPPusHdH/AX2Q9cLMf5HWzOe qYzmkPq3pEYuIZQTlrSij4Ds+NiNIxdmkl6FGaf0qpuQsRXNfA0Ad8Hq+8TA2LddCwenpYSt6TZX Z5Ya/a+q/nhShxyOE+5oPjHi5jALQDfM6b152ta8tc+3XL6zNavgBmKtX7uXci5UPdBgQ2s54anp n0KhjKP4KUY7b4S1WR036eD1e8vwDbLH/cl2F4SEttuTbCtKiO3E80uy8dxzXOzhC7Jjn1jjOpFr slvLJyD7PF9iuzh266w+yr89mP+gb7Fb0ZwEdTOd8W/Nxpj4Ebngf/5gk/jhFv+t5bMUux5OoSxp CrSUFZOs2jGjVuCC9iu55p5vPTRFpKZ8Wywh8Eprtrv2arYMV9Gph0c/Fb0FsUPX7ttF4/EsIORq ZFmuD2Mo0b3VHTNKfJt0S2cqtpbPouJU9wlS9IVJJLYKqQ17Sz7Xs2M7auS7XQDoKOpNPX/hIxUr JZICZdC/EsHNtYRL6oCWTEJKAlWsEDsGyYFR8z4aWBOeM6gmnBBe/WrCtSJ/7nhXne3jwPeSq84O PC+ZxbdqorV8mppox+g7Rqinm2MQ0b2vMCeJsBPpy+q8+ZzA8V2/m5d1ixHPfei4P2++xjKc6KUQ L/pv1ZOC/2PtWX1Lh+C0gEP9+1VENH3RTv+ZKhFLIRayRvYb4nSpzviqS7RB+6Vs/uD+GPeUDQdx AL/6Z5eyef585o3nerWTzXvA1tnSmWyt5X/YH92znP4AAAD//wMAUEsDBBQABgAIAAAAIQCqUiXf IwYAAIsaAAAVAAAAd29yZC90aGVtZS90aGVtZTEueG1s7FlNixs3GL4X+h/E3B1/zfhjiTfYYztp s5uE7CYlR3lGnlGsGRlJ3l0TAiU5Fgqlaemhgd56KG0DCfSS/pptU9oU8heq0XhsyZZZ2mxgKVnD Wh/P++rR+0qPNJ7LV04SAo4Q45imHad6qeIAlAY0xGnUce4cDkstB3AB0xASmqKOM0fcubL74QeX 4Y6IUYKAtE/5Duw4sRDTnXKZB7IZ8kt0ilLZN6YsgUJWWVQOGTyWfhNSrlUqjXICceqAFCbS7c3x GAcIHGYund3C+YDIf6ngWUNA2EHmGhkWChtOqtkXn3OfMHAESceR44T0+BCdCAcQyIXs6DgV9eeU dy+Xl0ZEbLHV7Ibqb2G3MAgnNWXHotHS0HU9t9Fd+lcAIjZxg+agMWgs/SkADAI505yLjvV67V7f W2A1UF60+O43+/Wqgdf81zfwXS/7GHgFyovuBn449Fcx1EB50bPEpFnzXQOvQHmxsYFvVrp9t2ng FSgmOJ1soCteo+4Xs11CxpRcs8Lbnjts1hbwFaqsra7cPhXb1loC71M2lACVXChwCsR8isYwkDgf EjxiGOzhKJYLbwpTymVzpVYZVuryf/ZxVUlFBO4gqFnnTQHfaMr4AB4wPBUd52Pp1dEgb17++Obl c3D66MXpo19OHz8+ffSzxeoaTCPd6vX3X/z99FPw1/PvXj/5yo7nOv73nz777dcv7UChA199/eyP F89effP5nz88scC7DI50+CFOEAc30DG4TRM5McsAaMT+ncVhDLFu0U0jDlOY2VjQAxEb6BtzSKAF 10NmBO8yKRM24NXZfYPwQcxmAluA1+PEAO5TSnqUWed0PRtLj8IsjeyDs5mOuw3hkW1sfy2/g9lU rndsc+nHyKB5i8iUwwilSICsj04Qspjdw9iI6z4OGOV0LMA9DHoQW0NyiEfGaloZXcOJzMvcRlDm 24jN/l3Qo8Tmvo+OTKTcFZDYXCJihPEqnAmYWBnDhOjIPShiG8mDOQuMgHMhMx0hQsEgRJzbbG6y uUH3upQXe9r3yTwxkUzgiQ25BynVkX068WOYTK2ccRrr2I/4RC5RCG5RYSVBzR2S1WUeYLo13Xcx MtJ99t6+I5XVvkCynhmzbQlEzf04J2OIlPPymp4nOD1T3Ndk3Xu3si6F9NW3T+26eyEFvcuwdUet y/g23Lp4+5SF+OJrdx/O0ltIbhcL9L10v5fu/710b9vP5y/YK41Wl/jiqq7cJFvv7WNMyIGYE7TH lbpzOb1wKBtVRRktHxOmsSwuhjNwEYOqDBgVn2ARH8RwKoepqhEivnAdcTClXJ4PqtnqO+sgs2Sf hnlrtVo8mUoDKFbt8nwp2uVpJPLWRnP1CLZ0r2qRelQuCGS2/4aENphJom4h0SwazyChZnYuLNoW Fq3M/VYW6muRFbn/AMx+1PDcnJFcb5CgMMtTbl9k99wzvS2Y5rRrlum1M67nk2mDhLbcTBLaMoxh iNabzznX7VVKDXpZKDZpNFvvIteZiKxpA0nNGjiWe67uSTcBnHacsbwZymIylf54ppuQRGnHCcQi 0P9FWaaMiz7kcQ5TXfn8EywQAwQncq3raSDpilu11szmeEHJtSsXL3LqS08yGo9RILa0rKqyL3di 7X1LcFahM0n6IA6PwYjM2G0oA+U1q1kAQ8zFMpohZtriXkVxTa4WW9H4xWy1RSGZxnBxouhinsNV eUlHm4diuj4rs76YzCjKkvTWp+7ZRlmHJppbDpDs1LTrx7s75DVWK903WOXSva517ULrtp0Sb38g aNRWgxnUMsYWaqtWk9o5Xgi04ZZLc9sZcd6nwfqqzQ6I4l6pahuvJujovlz5fXldnRHBFVV0Ip8R /OJH5VwJVGuhLicCzBjuOA8qXtf1a55fqrS8Qcmtu5VSy+vWS13Pq1cHXrXS79UeyqCIOKl6+dhD +TxD5os3L6p94+1LUlyzLwU0KVN1Dy4rY/X2pVrb/vYFYBmZB43asF1v9xqldr07LLn9XqvU9hu9 Ur/hN/vDvu+12sOHDjhSYLdb993GoFVqVH2/5DYqGf1Wu9R0a7Wu2+y2Bm734SLWcubFdxFexWv3 HwAAAP//AwBQSwMEFAAGAAgAAAAhAEvr69ZvBAAAngwAABEAAAB3b3JkL3NldHRpbmdzLnhtbLRX W3PaOBR+35n9D4yfl+C7wVPSMQZv0wltJ6Q/QLYFaCJZHkmG0M7+9z2WrUASbyfdTp+Qz3duOlfx 7v0jo6MDFpLwam45V7Y1wlXBS1Lt5tbX+2w8tUZSoapElFd4bp2wtN5f//nHu2MssVLAJkegopIx K+bWXqk6nkxksccMySte4wrALRcMKfgUuwlD4qGpxwVnNVIkJ5So08S17dDq1fC51Ygq7lWMGSkE l3yrWpGYb7ekwP2PkRBvsduJLHnRMFwpbXEiMAUfeCX3pJZGG/u/2gDcGyWHH13iwKjhOzr2G657 5KJ8kniLe61ALXiBpYQEMWocJNXZsP9K0ZPtK7DdX1GrAnHH1qdLz4OfU+C+UhBK/HMqgl7FRJ4Y fjSKJH1LSDroluQCia7g+niwIr7ZVVygnII7EJcRXG2kvbOuocq/cc5Gx7jGooBUQ4tEtjVpAQgw 324UUhhgWWNKdc8UFCNQe4x3AjGodkPRMkqg4uEOH0jbblKTSrxFDVX3KN8oXoPcAcGFIre3UuwR yCgsNjUqwEDKKyU4NXwl/8RVCs0kINe9hG6t82nTtSlIVIjBFZ+13pqXuHW2EeTtuWgFtHUnuDT5 0hCHsSJIie/b0G7UieIMnN+Qbzipyo+NVAQ06gb8BQ9+5ACuWsufoRjuTzXOMFINhOk3GdOZyCip 10QILm6qEsrltxkj2y0WYIBA+a2hfIjgRx3nDxiVMM1/0e7ksoxgN5TSHO44V4bVtpe+uwijztMW PSOOF9hpXx4vkDDwMncQmbl+uhhCXM9N3WwI8d0oiQY98JfeIhnUFoRe6g0jK9cOpkNI6DvO1B9G vDDsu/UFkthuthpCIi9w7UE7URLaXjiETMNwuUoHkVlk24N2pokbLQdlZgGEYRBZQIKSvvpeIMvI cwazkEaOO5sNIqkbrga1/XftrMIgnQ3ayXyIzzASRm4y6EGWeE6a9FXd1zKL2239RZhTO5hGrJNI EcsFQaN1u88nLUcuHhakMniOYa/gS2TT5AYcjztAMkRpBpPbALpAWFwSWS/xVp/pGondWW/PIQap sCU+PulqFxEWfwve1B16FKjuBo5hcXy/lySVuiXM0GWTb4xUBZvwAmqq8vNB6DidwwMrCwaHHty3 SA8gzYur8ddNF+yCik07XPAa1XU3o/KdM7co2e2V044VBV8lPPv0R75ze8zVmNth+gMV7c2Auz+c aa6hXfB5huadab6h+WdaYGjBmRYaWtjS9rAdBGzvBxiX5tjSt5xSfsTlhzP+itQFQe5RjZfdJofy 4h2hX+1ydIjxIzwdcEkUvKZrUjL0CDmyXd3oPTdFJ96oZ7wt1jLXzzWUSCEzqJ8J6xJ/4Uv7wigI lOPmxPLzw+Gqc5wSCculhjeG4sJgf2nM8eOSFzfQSXDS9GAGc8vuO9MJ9NtE3bdPGsj7Hd4ukMRl jxnRoBP9njlR4DhZNJ55Xjj2vWA2Tnw3GwerxI7CILBDb/pP36Tmj8X1vwAAAP//AwBQSwMEFAAG AAgAAAAhAG4EmkMfAgAAUwcAABIAAAB3b3JkL2ZvbnRUYWJsZS54bWy8lNFu2jAUQN8n7R8sv5c4 IdCCGipKQao07aFrP8AYJ7EW25FtCPz9rp1AtzE0omkNIgr32ie+B/veP+xlhXbcWKFVhuMBwYgr pjdCFRl+e13d3GFkHVUbWmnFM3zgFj/MPn+6b6a5Vs4imK/sVLIMl87V0yiyrOSS2oGuuYJkro2k Dn6aIpLUfN/WN0zLmjqxFpVwhyghZIw7jLmGovNcMP6k2VZy5cL8yPAKiFrZUtT2SGuuoTXabGqj GbcWapZVy5NUqBMmTs9AUjCjrc7dAIrpVhRQMD0m4UlW74BRP0ByBhhb3g8x6hCRPUi+x0iy6XOh tKHrCkhQEoJVoQDGs+7PRM1UUQnpBa3E2oiQqKnSlseQ29EqwyQhKzKCu/+kZOjvOPIDWUmN5R7S DiRtOKdSVIdj1DbC2jZRC8fKY3xHjfBLa1NWFJDY2jXJ8JLAlaxWuI3EGU4hMF+cIol/V7jiLjI8 RYiPsMBpR0zCLBY4pzHwzqg1cGbiVUhu0VfeoBctqbpgJCFjMDECH97MsJcRE7h9jSTzn40sIHJ7 lx7rfzcy+buRlnO9kYXeGsGNd3LBxi0YmAQr3kbay4bUG27+pCMXe77p4WL4ES6+8UJz9PZ8QcRj J6D9wsb4vwclBhW/HBSvYpnenh2U5AoVT323Rdsy0BdRlO5i4/Dt4qMaxzyUuvytccD2fDzbGqH6 f2wc3YOd/QAAAP//AwBQSwMEFAAGAAgAAAAhAIhKRpqLAQAA4AMAABQAAAB3b3JkL3dlYlNldHRp bmdzLnhtbJST3U7DMAyF75F4hyr3W7sx0FSxIU0TCAkhxM8DpKm7RSRxFGcr4+nxuo4NxgW9inOc 89WW3eubD2uSNQTS6CZi0M9EAk5hqd1iIt5eb3tjkVCUrpQGHUzEBkjcTM/Pruu8huIFYuSXlDDF UW7VRCxj9HmaklqCldRHD46TFQYrI1/DIrUyvK98T6H1MupCGx036TDLrkSLCf+hYFVpBXNUKwsu Nv40gGEiOlpqT3ta/R9ajaH0ARUQcT/W7HhWaveNGYxOQFargIRV7HMzbUUNiu2DrImsOQAuuwGG J4Argm6IyxaR0sbCh0isyu8XDoMsDJO4pYSrShqwmPJIS72m9kzqXJe8EYPxeHRxMRo2+QLLzbzJ raXhpEi3Kg/0Aaq4V7Nv9Vkvln/Ir+hPxRnGiPaXznXMyrCN4sHjeBEFX+hz+24beKmgjRUa5P2R q4g7hDmqrJuz+FFRN2847ryLNT00vQv3ZzMX9FFb/Qm3GGYBa4LQfE0ag/XT493Of/RfTr8AAAD/ /wMAUEsDBBQABgAIAAAAIQCOlXhi4AEAAOIDAAAQAAgBZG9jUHJvcHMvYXBwLnhtbCCiBAEooAAB AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxTwW7bMAy9D+g/GL43stuk7QJFRZFi6GFbA8Rt z5pMJ8JkSZDYoNnXj7JXT9l22u3xkXp6Iil++9ab4gAhamdXZT2rygKscq22u1X51Hw6vymLiNK2 0jgLq/IIsbwVZx/4JjgPATXEgiRsXJV7RL9kLKo99DLOKG0p07nQS6Qw7JjrOq3g3qnXHiyyi6q6 YvCGYFtoz/0kWI6KywP+r2jrVPIXn5ujJz3BG+i9kQjiazppZq3DnrOJ5Y1DaRrdg1hUFSWmkG/k DqK45GwE/MWFNoqbS2JGyNd7GaRC6qGYX88/cpYR/M57o5VEaq/4olVw0XVYPA6eiyTAWV7C6R1b UK9B41GQkTzkn7VNVuiGEZG3IHdB+n0UdZ0cTiHfKmlgTT0QnTQROPtN8AeQab4bqZPDAy4PoNCF IuofNOGLsvgmI6TOrcqDDFpaLMeyMRiw8RGDaDQa0p7iAeZlOdZzUQ8FBE4Lh2DwQPjU3XBDfOzo bfgPs3VudvAwWs3s5M7e7/hDde16Ly11mE2IOvw9PvnG3af9+NXDUzIb/IvG/dZLRUNZLK7rfAWy FN8SCy3NdBrKRPAHekIw6QI6a3fQvtf8nUhL9Tx+WVFfzaoqrWzG0SZMf0n8BAAA//8DAFBLAwQU AAYACAAAACEAG8c+5XYBAADuAgAAEQAIAWRvY1Byb3BzL2NvcmUueG1sIKIEASigAAEAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAjJJdT4MwFIbvTfwPpNdCKXPTEMYSXRYvXGIiRuNdbc+2OihN 243x7y2wMYm78O58POft6dsms0ORe3vQRpRyikgQIg8kK7mQ6yl6yxb+PfKMpZLTvJQwRTUYNEuv rxKmYlZqeNGlAm0FGM8pSRMzNUUba1WMsWEbKKgJHCFdc1XqglqX6jVWlG3pGnAUhhNcgKWcWoob QV/1iugoyVkvqXY6bwU4w5BDAdIaTAKCz6wFXZiLA23nF1kIWyu4iJ6aPX0wogerqgqqUYu6/Qn+ WD6/tlf1hWy8YoDShLPYCptDmuBz6CKz+/oGZrtyn7iYaaC21OkTrSWYG29OZcuc6o3jW6irUnPj pgeZwzgYpoWy7h077UHB0Tk1dukediWAP9TDY/62mwkNe9H8izQiLdLnydHlbjfgnnMn7rw8dd5H j/NsgdIoJBM/nPhknJHbeEziMPxs1hvMnwWL4wb/UbzLSBSTcKh4EugcGv7Q9AcAAP//AwBQSwME FAAGAAgAAAAhAJMYJvMoDQAAZX8AAA8AAAB3b3JkL3N0eWxlcy54bWzUnVtz27oRx9870+/A0VP7 kFg3y3HmOGdiJ6k9JxefyGmeIRKyUJOESlJx3E9fAAQlUEuQXBBxp0+2SO4Pl93/AuD1t99/JnHw g2Y54+nFaPJyPApoGvKIpfcXo293H168GgV5QdKIxDylF6Mnmo9+f/PXv/z2+DovnmKaBwKQ5q+T 8GK0KYrt65OTPNzQhOQv+ZamYueaZwkpxM/s/iQh2cNu+yLkyZYUbMViVjydTMfjxUhjsj4Uvl6z kL7j4S6haaHsTzIaCyJP8w3b5hXtsQ/tkWfRNuMhzXPR6CQueQlh6R4zmQNQwsKM53xdvBSN0TVS KGE+Gav/kvgAOMUBpgCwyCkOcaoRJ/lTQn+OgiR8fXOf8oysYkESTQpErQIFHr0R3ox4+I6uyS4u cvkzu830T/1L/fnA0yIPHl+TPGTsTtRCoBImqNdv05yNxB5K8uJtzkjjzo38p3FPmBfG5ksWsdGJ LDH/j9j5g8QXo+m02nIla1DbFpP0vtpG0xfflmZNjE0rwb0YkezF8q00PNENK/8azd0e/1IFb0nI VDlkXVARqJPFWEJjJnUxPT2vfnzdyR4mu4LrQhSg/LvHnoAeF/EronlZikrspeuPPHyg0bIQOy5G qiyx8dvNbcZ4JoRzMTpXZYqNS5qwaxZFNDUOTDcsot83NP2W0+iw/c8PKvj1hpDvUvH/7GyioiDO o/c/Q7qVUhJ7UyJ98lkaxPLoHTsUrsz/XcEm2hNN9htKZD4JJscIVX0UYiotcqO1zczdUdvVUaiC Zs9V0Py5Cjp9roIWz1XQ2XMV9Oq5ClKYX1kQSyP6sxQiLAZQuzgWNaI5FrGhORYtoTkWqaA5FiWg OZZAR3MscYzmWMIUwSl4aItCI9hnlmhv53aPEW7c7iHBjds9ArhxuxO+G7c7v7txu9O5G7c7e7tx u5M1nltOtYIbIbO0GKyyNedFygsaFPTncBpJBUstsvzw5KBHMy+N9IApM5seiAfTQqJ+d0eIEqn7 eF7I5VzA18Ga3e8ysTYfWnGa/qCxWCUHJIoEzyMwo8Uus/SIS0xndE0zmobUZ2D7g8qVYJDukpWH 2NySe28smkaeu68iekkK+4AW6+eNFAnzENQJCTM+vGqceMsPH1k+vK8kJLjcxTH1xPrsJ8QUa/ja QGGGLw0UZvjKQGGGLwwMn/nqIk3z1FOa5qnDNM1Tv5Xx6avfNM1Tv2map37TtOH9dseKWKV4c9Yx 6X/u7irm8rT44Hos2X1KxARg+HCjz5kGtyQj9xnZbgJ5VroZa7YZW84lj56COx9j2p7ka16vQuRK tJqlu+EdWqP5Etee50lee54nge15wyX2SUyT5QTt2s96ZrlbFY2iVaReol2SeFdOaIerjRTDI+wg gA8sy73JoBnrIYI/y+msdKePzHeo5fCKHVjDZXWclbxWTyM91DLm4YOfNHz9tKWZWJY9DCZ94HHM H2nkj7gsMl7Gmin5qXJJL8m/T7YbkjO1Vqoh+g/11QX14BPZDm7QbUxY6sdv718khMWBvxnE9d2n j8Ed38plpuwYP8BLXhQ88cbUZwL/9p2u/u6ngm/FIjh98tTat55ODynYFfMwyJQkHnkiiWkmS5mX MVTx/qBPK06yyA/tNqPlPSwF9URckmRbTjo8aEvkxUeRfzzMhhTvnyRj8ryQL1HdeYEZpw3z3epf NBye6j7zwMuZoS+7Qp1/VFNdZe0PN3yaUMMNnyIob4rhQcavh8bWcMMbW8P5auxVTPKcWS+hOvN8 Nbfi+W7v8MWf5vGYZ+td7K8DK6C3HqyA3rqQx7skzX22WPE8NljxfLfXY8gonodTcor3j4xF3pyh YL48oWC+3KBgvnygYF4dMPwOHQM2/DYdAzb8Xp0S5mkKYMB8xZnX4d/TVR4D5ivOFMxXnCmYrzhT MF9xNnsX0PVaTIL9DTEG0lfMGUh/A01a0GTLM5I9eUK+j+k98XCCtKTdZnwtH27gaXkTtwekPEcd e5xslzhfTv5OV96qJlk+6+XhjCiJY849nVs7DDjKsn7vWpeZepJjcBVuYxLSDY8jmlnaZLcV6+Vl +VjGcfVVNXqd9vzI7jdFsNzsz/abmMW407JasNfMugts6vNF9TxLk9knGrFdUlUUPkyxmPU3VhFd M553Gx9mEjXL056WsMxFt+VhllyzPOtpCct81dNS6bRm2aaHdyR7aAyEs7b42a/xLMF31hZFe+PG YtsCaW/ZFIJnbVFUk0rwNgzl1QLonX6asdv3E4/dHqMiOwUjJzult67siDaBfaU/mBzZMUlTlbe/ ewLkfTWJ7pU5/9zx8rx97YJT/4e6bsTEKc1p0MiZ9b9wVcsy9n7snW7siN55x47onYDsiF6ZyGqO Skl2Su/cZEf0TlJ2BDpbwREBl62gPS5bQXuXbAUpLtlqwCzAjug9HbAj0EKFCLRQB8wU7AiUUIG5 k1AhBS1UiEALFSLQQoUTMJxQoT1OqNDeRaiQ4iJUSEELFSLQQoUItFAhAi1UiEAL1XFubzV3Eiqk oIUKEWihQgRaqGq+OECo0B4nVGjvIlRIcREqpKCFChFooUIEWqgQgRYqRKCFChEooQJzJ6FCClqo EIEWKkSghVo+auguVGiPEyq0dxEqpLgIFVLQQoUItFAhAi1UiEALFSLQQoUIlFCBuZNQIQUtVIhA CxUi0EJVFwsHCBXa44QK7V2ECikuQoUUtFAhAi1UiEALFSLQQoUItFAhAiVUYO4kVEhBCxUi0EKF iLb41JcobbfZT/BnPa137Pe/dKUr9dV8lNtEzfqjqlrZWf2fRbjk/CFofPBwptYb/SBsFTOuTlFb LqubXHVLBOrC55er9id8TPrAly7pZyHUNVMAn/e1BOdU5m0hb1qCRd68LdJNSzDrnLdlX9MSDIPz tqSrdFndlCKGI2DclmYM44nFvC1bG+awi9tytGEIe7gtMxuGsIPb8rFheBrI5Hxsfdqznxb7+0sB oS0cDcKZndAWltBXVTqGwujrNDuhr/fshL5utBNQ/rRi8I61o9AetqPcXA1lhnW1u1DtBKyrIcHJ 1QDj7mqIcnY1RLm5GiZGrKshAetq9+RsJzi5GmDcXQ1Rzq6GKDdXw6EM62pIwLoaErCuHjggWzHu roYoZ1dDlJur4eQO62pIwLoaErCuhgQnVwOMu6shytnVEOXmarBKRrsaErCuhgSsqyHBydUA4+5q iHJ2NUS1uVqdRam5GuVhwxw3CTMMcQOyYYhLzoahw2rJsHZcLRkEx9US9FXlc9xqyXSandDXe3ZC XzfaCSh/WjF4x9pRaA/bUW6uxq2WmlztLlQ7Aetq3GrJ6mrcaqnV1bjVUqurcaslu6txq6UmV+NW S02udk/OdoKTq3GrpVZX41ZLra7GrZbsrsatlppcjVstNbkat1pqcvXAAdmKcXc1brXU6mrcasnu atxqqcnVuNVSk6txq6UmV+NWS1ZX41ZLra7GrZZaXY1bLdldjVstNbkat1pqcjVutdTkatxqyepq 3Gqp1dW41VKrqy2rpZPH2geYJFt930wcXDxtqXwHt/HATFS+g1RfBFQH3kT7DyVJY1mTQH+SSm9W FdYXDMsSlSEsKtyIskL99iRLUfotqPvHeNQ7UI8LtrwqVVXk0AXV0bpLD5dCy+Nqlz1b613ILm+p s3JJax+VXrNV8FyHYVcNRX1WcfnRLvHPTRoJwKP+YFVZ0+gnKVFi/xWN40+kPJpv7YfGdF2Ueydj 9dD80f5V+f43q32mEoUVcFKvTPlTfzjM0t/lG+H1FWxrSEo1NHS3up1iaE/b61aTy74213efPtZe XXZcL3lA/eVmZd8SUd4XqXAgKPn6RdPaNL4SQhoeTFnOZAQpq/H43Xx6Wd26o78MJ+JeJQzxtzpO Bots+ZbnoqiJHgVsB0xezfR4YztielZlcdsRs0V1Z5TtiPnpK52AbUeczs87arqYTzpqejabdtT0 1bS6i6ClwzpqOhmPz7o6dXx+3lHXyeR83FHZyVRUt+OQ2Vl1f4L1kPniVFVXylpHC/ieoPk1wfn+ R/PXBC2fZJS3Ou0yRrPgM32UhMNHEO9YQnO5OfjKE6IeGFWfYwQmYV7fVKrk8B1G3dTadxjVNuNz in0GtnCXi3yphtvjpNWo485UERzkfpQvGgfLzuyBzBz2NPF/76q9Y654It8Qe7hJ7NgpjZ9SwbnE X6qezqZX0w81Hxw6p8rJZueU27o7p3lw052j3mHR0i/qMylNXWIb1QzurxjQzF4CnzrFpqPnzRPH PXPc63p/+UrqgdnB9O6QxNAalEM6rTUol/oFpS1xWb3DtKmLQONT2aO2nQ3dpsv/1fGrO3RVtuEq /xXRZjbFFnD6GHvMNWra3m++I87soF8bf/ptRY1JsfYmo6ZesmVEA/rsGdHnZG1J7zkNvt0YI7y5 SQ7v+99HnproeWtt+FLb/AX8cTe3+W9oejXjxHOw/496vfovf/NfAAAA//8DAFBLAwQUAAYACAAA ACEA9ou6/OgBAAApBgAADwAAAHdvcmQvcGVvcGxlLnhtbKSU246bMBCG7yv1HZCvlxgToIBCVlWj trne9gG8xgRr8UE2h+TtawiH7a60Ipsr8GG++e3fM7vHM6+clmrDpMgA2njAoYLInIlTBv7++enG wDE1FjmupKAZuFADHvdfv+w6FKaKSlVRxyKESTtFMlDWtUohNKSkHJsNZ0RLI4t6QySHsigYobCT Ooe+h7zhT2lJqDE23w8sWmzAiCPndbRc484G98AAkhLrmp4XBroZEsIExm9B/P3RpKLCLhZSc1zb oT5BjvVLo1zLVbhmz6xi9cUivWjCyAw0WqQjwp2l9CHpVcr4mSL0mrzXkIMkDaeiHjJCTSurQQpT MjXfKf8szS6WE6T96BAtr6Z9nULBfQ/icHVlAa6RP1rJq6vyj4nIW+FIj5gj1kj4P+ekhGMmlsSf uppXl4vC2wD+O0Bk6G2IcERAc+FLaXTqdJ/Lv7Rs1EJj99GO4mVm9f3qBtb4Wl6/YHOfmKcSK1vK nKTHk5AaP1dWkfXesfY5gwNOXyVgP3ZTbaTo11Lc1KW0tf8bXwQ1D84Bi2mTpsY2aHoUhRy22mwt y6k+5hn4fgDDXGOu4ycXuaHrIxclgRdF0XYbu77/DXmeH8Uu2gZJGMRo67tJEoUBgPsdXITMg77H 7/8BAAD//wMAUEsDBBQABgAIAAAAIQCmEBGl3QEAAAEHAAAZAAAAd29yZC9jb21tZW50c0V4dGVu ZGVkLnhtbKSV226jMBCG7yvtOyDfJ7ZZSAkqqUQOVa7bPoBrnGAVH2STkLz9mgRCupEiaK7A2P83 vz3j4eX1IApvz4zlSiYAjxHwmKQq43KbgM+P1SgCni2JzEihJEvAkVnwOvvz9FLhMKZKCCZLuzx4 DiNtXGmagLwsdQyhpTkTxI4Fp0ZZtSnHbjlUmw2nDFbKZNBHGJ3etFGUWetizoncEwsaHD30o2WG VE5cAwNIc2JKdugYeDAkhFMY/Q8St1tTmkk3uVFGkNINzRYKYr53euS4mpT8ixe8PDokmrQYlYCd kXGDGF2s1JL4bKV5tArTJ+5ZslB0V2fkFBEaVjgPStqc68uZit/S3GTeQvb3NrEXRbuu0jh4rCAW 56x0wD72m1SK4uz8PhGjHhmpERdFHws/Y7ZOBOGyC/yro7k6XBwOA/g3gIllwxBhg4D2KLqrUent Y1l+M2qnOxp/jLaW3xdW3bMGsJpqua5g+5iZ95xod5UFjddbqQz5Kpwjl3vPpc87ZcCrbwmYXXdU 11DrkSaGrLMEBM8onKeh6yH11+zUiBGA9yR+usB/g/lqgCTw0xWO/HBIlOl0GWE8xFjop8+rYDIo SrBIUZCiARIUzSNX8MsbCfz535r9AwAA//8DAFBLAQItABQABgAIAAAAIQBMCwvMdgEAALUGAAAT AAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhAB6RGrfv AAAATgIAAAsAAAAAAAAAAAAAAAAArwMAAF9yZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhAMHXgFou AQAArAQAABwAAAAAAAAAAAAAAAAAzwYAAHdvcmQvX3JlbHMvZG9jdW1lbnQueG1sLnJlbHNQSwEC LQAUAAYACAAAACEAAmUEzAUgAAB9kQIAEQAAAAAAAAAAAAAAAAA/CQAAd29yZC9kb2N1bWVudC54 bWxQSwECLQAUAAYACAAAACEAJ3iaBPEDAADkEAAAEQAAAAAAAAAAAAAAAABzKQAAd29yZC9jb21t ZW50cy54bWxQSwECLQAUAAYACAAAACEAqlIl3yMGAACLGgAAFQAAAAAAAAAAAAAAAACTLQAAd29y ZC90aGVtZS90aGVtZTEueG1sUEsBAi0AFAAGAAgAAAAhAEvr69ZvBAAAngwAABEAAAAAAAAAAAAA AAAA6TMAAHdvcmQvc2V0dGluZ3MueG1sUEsBAi0AFAAGAAgAAAAhAG4EmkMfAgAAUwcAABIAAAAA AAAAAAAAAAAAhzgAAHdvcmQvZm9udFRhYmxlLnhtbFBLAQItABQABgAIAAAAIQCISkaaiwEAAOAD AAAUAAAAAAAAAAAAAAAAANY6AAB3b3JkL3dlYlNldHRpbmdzLnhtbFBLAQItABQABgAIAAAAIQCO lXhi4AEAAOIDAAAQAAAAAAAAAAAAAAAAAJM8AABkb2NQcm9wcy9hcHAueG1sUEsBAi0AFAAGAAgA AAAhABvHPuV2AQAA7gIAABEAAAAAAAAAAAAAAAAAqT8AAGRvY1Byb3BzL2NvcmUueG1sUEsBAi0A FAAGAAgAAAAhAJMYJvMoDQAAZX8AAA8AAAAAAAAAAAAAAAAAVkIAAHdvcmQvc3R5bGVzLnhtbFBL AQItABQABgAIAAAAIQD2i7r86AEAACkGAAAPAAAAAAAAAAAAAAAAAKtPAAB3b3JkL3Blb3BsZS54 bWxQSwECLQAUAAYACAAAACEAphARpd0BAAABBwAAGQAAAAAAAAAAAAAAAADAUQAAd29yZC9jb21t ZW50c0V4dGVuZGVkLnhtbFBLBQYAAAAADgAOAIQDAADUUwAAAAA= --_004_BY2PR09MB10785E8DAC1DC5D76942955DA5570BY2PR09MB1078namp_-- From nobody Fri Jun 17 06:35:13 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A088212D52B for ; Fri, 17 Jun 2016 06:35:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3lHw8KMleouK for ; Fri, 17 Jun 2016 06:35:10 -0700 (PDT) Received: from mail-oi0-x230.google.com (mail-oi0-x230.google.com [IPv6:2607:f8b0:4003:c06::230]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id CDA1812D0E2 for ; Fri, 17 Jun 2016 06:35:09 -0700 (PDT) Received: by mail-oi0-x230.google.com with SMTP id d132so117122181oig.1 for ; Fri, 17 Jun 2016 06:35:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=NLlXrGhB1zGn6/yWi9f64Vio72pLqJpx3uncxaakfCs=; b=QD8sa9PAHzVcE62YaX35T8bTVODSFHBC3JNs+6ACdT6KrWA/8gDw+aXlIs9gmaL2IV JkbhzxboQmGj5ecK3cU5joJhtpERoBIB2BocX+bIAbWCP75+WTiOnqODQBFEbvvy9AsA PLvOamWonebEaTaIhHjZ5dUoUzyTxsJvCola68nqaYfet8B1BG2KsH47oGCyjt10aKpi BXbAL4lbicp9GytkbefCoKzlGODIiovd9WL0POnVnKdWYkB1sAGII5kao/Dq24Pno2vx xgifa7RoqIzxmgVHueaY/83UDHXCw8cdEgiuwgF0VKQzkd/x/caolUFoKv6u1BB1Ly/i Werw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=NLlXrGhB1zGn6/yWi9f64Vio72pLqJpx3uncxaakfCs=; b=L3puzPHGVKNoXlX7MrgMVBl3MY2iWQPdgMUiPyzdyoD1uWuvdQdsEgGYGWXiKTeO+d qh3XbHgWVF60wgyHOXlI7r4cF34v8ro8cJnsulh1VjigBIzC5Qqhv1u4IsrlsFFe7Hwf z83BDy6kWNPA7R6oQTUHsOGTvMdJSL4jsTs1I8sWDGCG86h1ayBPEeTT+4E0nj1BEFyc kSgCjkAjMwSJ53jRZeOb7r3FIyu9YqstkltSjWy733cVFFTRsSGjAtU58crKTIDnvgWH NpSLGLBakoCpjvAHrJ4IR76h18JpEiRW9nrVn0BgBbYtZZT3b9Y3QtEtmRv1wTIGJJIR 0kjA== X-Gm-Message-State: ALyK8tLJfF1+GfJdqFpSABl3aE51gh6EkkC3xLyjygh1vI+3hZTR6EPOZNirNSq+m2/glTB4UkpgxeGj+1z2aw== X-Received: by 10.157.10.70 with SMTP id 64mr1675924otg.131.1466170508905; Fri, 17 Jun 2016 06:35:08 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.11.240 with HTTP; Fri, 17 Jun 2016 06:34:49 -0700 (PDT) In-Reply-To: References: <017a01d1c803$ccccb580$66662080$@augustcellars.com> From: Ira McDonald Date: Fri, 17 Jun 2016 09:34:49 -0400 Message-ID: To: "Waltermire, David A. (Fed)" , Ira McDonald Content-Type: multipart/alternative; boundary=001a1136e7da5d18790535796c34 Archived-At: Cc: Jim Schaad , "sacm@ietf.org" Subject: Re: [sacm] Is SACM based on a grid? X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 13:35:12 -0000 --001a1136e7da5d18790535796c34 Content-Type: text/plain; charset=UTF-8 Hi Jim and Dave, All good points that I agree with. I especially want to reinforce Jim's comments that SACM is NOT tied to a grid architecture (a concept as fuzzy as cloud architecture, IMO). In the existing real world most/many endpoints will only communicate with one upstream posture server (except when falling back, because of a failed primary posture server). SACM will certainly not change the world. It may offer enough value to integrate into the world and augment the already complex universe of security services. Cheers, - Ira Ira McDonald (Musician / Software Architect) Co-Chair - TCG Trusted Mobility Solutions WG Chair - Linux Foundation Open Printing WG Secretary - IEEE-ISTO Printer Working Group Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG IETF Designated Expert - IPP & Printer MIB Blue Roof Music / High North Inc http://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com Winter 579 Park Place Saline, MI 48176 734-944-0094 Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 On Thu, Jun 16, 2016 at 5:50 PM, Waltermire, David A. (Fed) < david.waltermire@nist.gov> wrote: > Jim, > > These are good points that align with my thinking as well. > > More below. > > > -----Original Message----- > > From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Jim Schaad > > Sent: Thursday, June 16, 2016 3:18 PM > > To: sacm@ietf.org > > Subject: [sacm] Is SACM based on a grid? > > > > In yesterday's conference call, Henk made a statement that I did not > feel was > > important at the time to dispute. I have since changed my mind. > > > > Specifically, he agreed with the statement that SACM is a grid > architecture. > > I don't believe this is a true statement based both on my own personal > > understanding of how things will/should work and based on the use cases > > document (RFC 7632). The use case document has the "Ice Station Zebra" > > use case (Section 2.2.5). In this case one method of setting this up > with be > > for a SACM component to be placed at the university and another one at > the > > remote office. Since there is not going to be either continuous or > high-speed > > connections between the two locations, one is going to have a replication > > type situation between these two components to move guidance from the > > university to the station and end point assessments from the station > back to > > the university. There is not the concept of a grid here as there is a > single > > choke point between the two locations. > > I agree. > > > This view is also reflected in the architecture document. One has > > repositories that can either be standalone or replicate between each > other. > > One has proxy agents that one can ask for data which will go and get it > from > > other locations (such as remote offices, partners, or other departments). > > One does not want to have everyone talking to the same end-point every > > time that they want to get an assessment done. So one will have a graph > > rather than a grid of SACM components. Some endpoints will only ever > talk > > to a single other component (a local repository) by publishing data and > > getting guidance (and may not even the latter). > > Your point about the problems with having all other components talking to > the same target endpoint every time an assessment is needed is a strong > one. This is the value of having a single component that coordinates all > data collection from the target endpoint. It can consolidate all of the > data collection requests, provide previously requested data that is fresh > enough, and compute the most efficient way to collect data from the target > endpoint. This can dramatically reduce the amount of duplicate collection > needed to satisfy the needs of all other downstream SACM components. This > reduces the load on the target endpoint, which is a win-win IMHO. This > approach is also irrespective to scenarios where the collection component > is connected to a grid or directly communicating with the other SACM > components requesting collection. > > > The context that this was raised in was the question of NEA and if the > client > > and server NEA components are SACM components individually or if only > > the NEA server is a SACM component. I can understand both sides of the > > argument that the client is or is not a SACM component. The argument > that > > it is not because SACM is a grid is not something that I would consider > to be a > > valid argument because of the previous paragraphs. The NEA client can > get > > guidance: there are provisions for sending guidance both about what to > > assess and how to remediate in NEA. The NEA client can do assessments: > > >From RFC5209 section 5, the NEA Client is the NEA Posture Collectors, > Posture Broker Client, and Posture Transport Client on the target endpoint. > This component can get guidance and will likely do so in an operational > setting. The NEA server consisting of Posture Validators, Posture Broker > Server, and Posture Transport Server would be the point of collection > coordination. This component would work to ensure that the SACM collection > requests are addressed in an efficient way that does not duplicate > collection activities. > > This is expressed as requirement OP-003 in the requirements draft. > > > We talked about this for quite some time on the conference call when > > looking at the SWID questions. NEA can trigger events from either side, > this > > is a SACM requirement. > > Indeed. This is requirement G-011 in the requirements draft. > > > There are valid reasons for not considering NEA to be a SACM protocol, > but > > we need to be clear about why we think it is or is not a valid protocol > esp. > > if we are looking at adopting it as a SACM work item. > > After a number of calls for solution submissions, the approach we have > been working on based on extending NEA is the only approach that I have > seen that provides an actual solution to the use cases. Use of SWID > Messages represents a concrete method for collection of software inventory > information from a target endpoint. This is a significant part of what we > have been chartered to address. It also supports a significant portion of > the data that needs to be collected to address vulnerability assessment. If > extensions to NEA are not considered part of the SACM architecture, then I > don't think we have made any progress towards a solution. This would be a > very troubling outcome considering there is no concrete alternative for > collection of software inventory information. > > I believe we need to update the architecture to capture the need for a > component to coordinate posture collection activities regarding target > endpoints. This would bring the architecture in sync with our use cases and > requirements. This would also make the role of NEA extensions more clear as > part of the SACM solution set. > > > > > Jim > > Thanks, > Dave > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > --001a1136e7da5d18790535796c34 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Jim and Da= ve,

All good points that I agree with.

I especial= ly want to reinforce Jim's comments that SACM is NOT tied
to a= grid architecture (a concept as fuzzy as cloud architecture, IMO).

=
In the existing real world most/many endpoints will only communicate<= br>
with one upstream posture server (except when falling back, becaus= e
of a failed primary posture server).

SACM will cert= ainly not change the world.=C2=A0 It may offer enough value
to int= egrate into the world and augment the already complex universe
of = security services.

Cheers,
- Ira


=
Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Tru= sted Mobility Solutions WG
Chair - Linux Foundation Open Printing WG
= Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Int= ernet Printing Protocol WG
IETF Designated Expert - IPP & Printer MI= B
Blue Roof Music / High North Inc
http:= //sites.google.com/site/blueroofmusic
ht= tp://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
Win= ter=C2=A0 579 Park Place=C2=A0 Saline, MI=C2=A0 48176=C2=A0 734-944-0094Summer=C2=A0 PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434

On Thu, Jun 16, 2016 at 5:50 PM, Waltermire,= David A. (Fed) <david.waltermire@nist.gov> wrote:
Jim,

These are good points that align with my thinking as well.

More below.

> -----Original Message-----
> From: sacm [mailto:sacm-bounc= es@ietf.org] On Behalf Of Jim Schaad
> Sent: Thursday, June 16, 2016 3:18 PM
> To: sacm@ietf.org
> Subject: [sacm] Is SACM based on a grid?
>
> In yesterday's conference call, Henk made a statement that I did n= ot feel was
> important at the time to dispute.=C2=A0 I have since changed my mind.<= br> >
> Specifically, he agreed with the statement that SACM is a grid archite= cture.
> I don't believe this is a true statement based both on my own pers= onal
> understanding of how things will/should work and based on the use case= s
> document (RFC 7632).=C2=A0 The use case document has the "Ice Sta= tion Zebra"
> use case (Section 2.2.5).=C2=A0 In this case one method of setting thi= s up with be
> for a SACM component to be placed at the university and another one at= the
> remote office.=C2=A0 Since there is not going to be either continuous = or high-speed
> connections between the two locations, one is going to have a replicat= ion
> type situation between these two components to move guidance from the<= br> > university to the station and end point assessments from the station b= ack to
> the university.=C2=A0 There is not the concept of a grid here as there= is a single
> choke point between the two locations.

I agree.

> This view is also reflected in the architecture document.=C2=A0 One ha= s
> repositories that can either be standalone or replicate between each o= ther.
> One has proxy agents that one can ask for data which will go and get i= t from
> other locations (such as remote offices, partners, or other department= s).
> One does not want to have everyone talking to the same end-point every=
> time that they want to get an assessment done.=C2=A0 So one will have = a graph
> rather than a grid of SACM components.=C2=A0 Some endpoints will only = ever talk
> to a single other component (a local repository) by publishing data an= d
> getting guidance (and may not even the latter).

Your point about the problems with having all other components talki= ng to the same target endpoint every time an assessment is needed is a stro= ng one. This is the value of having a single component that coordinates all= data collection from the target endpoint. It can consolidate all of the da= ta collection requests, provide previously requested data that is fresh eno= ugh, and compute the most efficient way to collect data from the target end= point. This can dramatically reduce the amount of duplicate collection need= ed to satisfy the needs of all other downstream SACM components. This reduc= es the load on the target endpoint, which is a win-win IMHO. This approach = is also irrespective to scenarios where the collection component is connect= ed to a grid or directly communicating with the other SACM components reque= sting collection.

> The context that this was raised in was the question of NEA and if the= client
> and server NEA components are SACM components individually or if only<= br> > the NEA server is a SACM component.=C2=A0 =C2=A0I can understand both = sides of the
> argument that the client is or is not a SACM component.=C2=A0 The argu= ment that
> it is not because SACM is a grid is not something that I would conside= r to be a
> valid argument because of the previous paragraphs.=C2=A0 The NEA clien= t can get
> guidance: there are provisions for sending guidance both about what to=
> assess and how to remediate in NEA.=C2=A0 The NEA client can do assess= ments:

>From RFC5209 section 5, the NEA Client is the NEA Posture Collec= tors, Posture Broker Client, and Posture Transport Client on the target end= point. This component can get guidance and will likely do so in an operatio= nal setting. The NEA server consisting of Posture Validators, Posture Broke= r Server, and Posture Transport Server would be the point of collection coo= rdination. This component would work to ensure that the SACM collection req= uests are addressed in an efficient way that does not duplicate collection = activities.

This is expressed as requirement OP-003 in the requirements draft.

> We talked about this for quite some time on the conference call when > looking at the SWID questions.=C2=A0 NEA can trigger events from eithe= r side, this
> is a SACM requirement.

Indeed. This is requirement G-011 in the requirements draft.

> There are valid reasons for not considering NEA to be a SACM protocol,= but
> we need to be clear about why we think it is or is not a valid protoco= l esp.
> if we are looking at adopting it as a SACM work item.

After a number of calls for solution submissions, the approach we ha= ve been working on based on extending NEA is the only approach that I have = seen that provides an actual solution to the use cases. Use of SWID Message= s represents a concrete method for collection of software inventory informa= tion from a target endpoint. This is a significant part of what we have bee= n chartered to address. It also supports a significant portion of the data = that needs to be collected to address vulnerability assessment. If extensio= ns to NEA are not considered part of the SACM architecture, then I don'= t think we have made any progress towards a solution. This would be a very = troubling outcome considering there is no concrete alternative for collecti= on of software inventory information.

I believe we need to update the architecture to capture the need for a comp= onent to coordinate posture collection activities regarding target endpoint= s. This would bring the architecture in sync with our use cases and require= ments. This would also make the role of NEA extensions more clear as part o= f the SACM solution set.

>
> Jim

Thanks,
Dave

_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

--001a1136e7da5d18790535796c34-- From nobody Fri Jun 17 11:28:28 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9DFA612D99E for ; Fri, 17 Jun 2016 11:28:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.455 X-Spam-Level: X-Spam-Status: No, score=-5.455 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KnbpfQeBAfGC for ; Fri, 17 Jun 2016 11:28:25 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 11FD212D998 for ; Fri, 17 Jun 2016 11:28:25 -0700 (PDT) Date: Fri, 17 Jun 2016 11:28:23 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1466188103; bh=nET6U3ZQKuxO587bA7QNsbfo61J445MWmeppjGXhcOQ=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=JP6+x5EULJSFK1/3FtSdT6iKOpTRiVXRdd7uGELS7wkRG7vsO9YntbBRptM/hwvoa MjIDMQSHSUf0jOP59lbPlH03XoLaf19N1W1eRqjth6b9D18QseT+MIPkHUQUht0E77 J3OmNZKzd3ZSOLkwIK88tnnQBtE8rPt7rnnSYQes= From: Danny Haynes To: sacmwg/draft-ietf-sacm-terminology Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_57644147b9181_1ec23f8d2cd8329c518975"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/draft-ietf-sacm-terminology] Update draft-ietf-sacm-terminology.md (#34) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/draft-ietf-sacm-terminology List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 18:28:26 -0000 ----==_mimepart_57644147b9181_1ec23f8d2cd8329c518975 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Fixed a couple other typos. You can view, comment on, or merge this pull request online at: https://github.com/sacmwg/draft-ietf-sacm-terminology/pull/34 -- Commit Summary -- * Update draft-ietf-sacm-terminology.md -- File Changes -- M draft-ietf-sacm-terminology.md (6) -- Patch Links -- https://github.com/sacmwg/draft-ietf-sacm-terminology/pull/34.patch https://github.com/sacmwg/draft-ietf-sacm-terminology/pull/34.diff --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-terminology/pull/34 ----==_mimepart_57644147b9181_1ec23f8d2cd8329c518975 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Fixed a couple other typos.

You can view, comment on, or merge this pull request online at:

  https://github.com/sacmwg/draft-ietf-sacm-terminology/pull/34

Commit Summary

  • Update draft-ietf-sacm-terminology.md

File Changes

Patch Links:

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_57644147b9181_1ec23f8d2cd8329c518975-- From nobody Fri Jun 17 13:09:20 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CE13912DA8C for ; Fri, 17 Jun 2016 13:09:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.326 X-Spam-Level: X-Spam-Status: No, score=-8.326 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RR41s3yL5cvk for ; Fri, 17 Jun 2016 13:09:17 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B649F12DA8A for ; Fri, 17 Jun 2016 13:09:15 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-2ubuntu2.1) with ESMTP id u5HK99rn015693 (version=TLSv1/SSLv3 cipher=AES256-SHA256 bits=256 verify=NOT) for ; Fri, 17 Jun 2016 22:09:12 +0200 Received: from [192.168.16.50] (134.102.43.163) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.294.0; Fri, 17 Jun 2016 22:09:04 +0200 To: References: <017a01d1c803$ccccb580$66662080$@augustcellars.com> From: Henk Birkholz Message-ID: <576458DF.7040002@sit.fraunhofer.de> Date: Fri, 17 Jun 2016 22:09:03 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.163] Archived-At: Subject: Re: [sacm] Is SACM based on a grid? X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 20:09:19 -0000 My intend was to highlight that any SACM component should be able to discovery any other SACM component and find out how to consume the data it provides. In regard to the use case of Ice Station Zebra, an example: There is a SACM component on the remote site. That component is unavailable/unreachable to the campus site for most of the time. But if there is connectivity, the SACM component at the remote site can register again at a broker on the campus site, publish data to the SACM domain because it is able to register and then becomes unavailable again. If a grid protocol would be used, data published in the available windows could be consumed by any other SACM component or new guidance could be discovered and then requested by the remote SACM component. If an end-to-end protocol is used, data published is transported to a single SACM component, which again can provide it to other SACM components (because this capability can be discovered and used by other SACM components). The choke-point scenario does not inhibit the use of a grid architecture, but that was actually not the point I had in mind when I mentioned the grid architecture. Maybe my words were chosen poorly. My point was: It is vital for SACM components to be able to provide data in a standardized way so that other SACM components can consume it without the mapping/parsing/homogenization overhead that is still very common at every turn. This requires to things: 1) at minimum, SACM components require a base set of standardized information elements that can be used to refer to "data of interest" in the SACM domain (which are provided by the information model). 2) the data a component provides has to be consumable by other components If a collector does not produce at least something every other component can consume, it is not a SACM component. But thats absolutely okay - if that kind of collector always comes with a counterpart that provides the functions/capabilities of a SACM component. In this case the SACM component might be a composite of sub-components? And this could be an addition to the part of the architecture that defines SACM components? Grüße, Henk From nobody Fri Jun 17 13:56:34 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 866F612DB55 for ; Fri, 17 Jun 2016 13:56:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.909 X-Spam-Level: X-Spam-Status: No, score=-5.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id p7-i-wSfSUnS for ; Fri, 17 Jun 2016 13:56:31 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 39A1812DB51 for ; Fri, 17 Jun 2016 13:56:30 -0700 (PDT) Date: Fri, 17 Jun 2016 13:56:28 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1466196988; bh=q3RjWC5vS3SEkG2It0qHabMfDyom0dha0JFeptHkzKo=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=Wfmb/1SpyBVix8oPyPMvNlkWq/O07lJIie3B25pixp4Ijdw1HzrODPajKhRVfhjhR 8DjlNyfoifdzNwp/N12oqoSNhEatK8dUu2k68rwv9MRxQZtfQOdwJi6bVlXLAxI+cl AxVQrr9k6CAp1TjXvYQALXIblmfVEP6l3XlEkHK0= From: henkbirkholz To: sacmwg/draft-ietf-sacm-terminology Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_576463fc2910c_7c803fe6ec35b2a093479"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: henkbirkholz X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/draft-ietf-sacm-terminology] Update draft-ietf-sacm-terminology.md (#34) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/draft-ietf-sacm-terminology List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 20:56:32 -0000 ----==_mimepart_576463fc2910c_7c803fe6ec35b2a093479 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Merged #34. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/draft-ietf-sacm-terminology/pull/34#event-696451065 ----==_mimepart_576463fc2910c_7c803fe6ec35b2a093479 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Merged #34.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_576463fc2910c_7c803fe6ec35b2a093479-- From nobody Fri Jun 17 14:52:34 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7A79512DBC7 for ; Fri, 17 Jun 2016 14:52:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.7 X-Spam-Level: X-Spam-Status: No, score=-2.7 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id rRJvoJMcr-eB for ; Fri, 17 Jun 2016 14:52:31 -0700 (PDT) Received: from mail-pa0-x22d.google.com (mail-pa0-x22d.google.com [IPv6:2607:f8b0:400e:c03::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id A1C4312D8F3 for ; Fri, 17 Jun 2016 14:52:31 -0700 (PDT) Received: by mail-pa0-x22d.google.com with SMTP id bz2so31969566pad.1 for ; Fri, 17 Jun 2016 14:52:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=Gbp73YauF6InF8CNGzaOzFoP0pJisE94v0zUf4Coy2o=; b=0v7JhO1m2Tf7AjrZpJHk02vDfno3T2oJ1b/ZZ8dz/qHEYzyU9BPbGN0/7nVWf17tHV RjZ49obbxaDiTxzDivPfYAgoIddDWnJyFzYNByoyoxHB5sD1GopyOYT6CnwIh4SPGVyl +RLYTHy4tfSxMakWQgvk4ssFeSlRAJDeq5MsukHTTOJ/zBPj2i8sbWBdc+sBaJxuQRaN EfQc2L3jqEkzz2EsURDxLM9Jji4IEju2SmNloTzMyg9CPciOPrJBVhf03d22nbklDOuf PujKP650qqb2iVz87FwrVTXdGaLJA0eOIR+OkUQHah+P8NmAV2ArpyxgNZ/7s10Rmom4 aNRQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=Gbp73YauF6InF8CNGzaOzFoP0pJisE94v0zUf4Coy2o=; b=cniqAMDdnBAres/hK1lVR//fMzVlGra/10bqWxHtKG8dptP8N7he1qQnHb6Db0E5VR V5MixyqS7Q3OkVNE85hU/9ioGf4fVPgp/MMiLF3TqseuitoWepsqSbUumYk9OaVzrdSq dQJjDCkJPXklFXgDpc0XQBMAaSmQCvy32pGeB0WYXXNQjcCVSXy4ruzQxR2TIFRteICX IVrYuyZ+Gv2obDs1l9NvELwMldzBf8U5Foywuia3whpe+1OKt4oObRdRcjeCyo87sS/T bUBWhJTsuMLi9lZHbMHZKEnwhCDKwmBBRwAq19Lz1OkTBp4edmkIgZObjr1AtXjwEwW8 2UBw== X-Gm-Message-State: ALyK8tIgu4BpUdSI8lz1tzGjVRDWJBeaM4XSoJ6PE079DHZAqGTihi97bvm1IpGX/ZYnGw== X-Received: by 10.66.172.49 with SMTP id az17mr4761422pac.104.1466200350625; Fri, 17 Jun 2016 14:52:30 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id ot2sm55772500pac.29.2016.06.17.14.52.28 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 17 Jun 2016 14:52:29 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_FE48C3F4-A821-4229-B41F-6A471A62BBD8"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: <576458DF.7040002@sit.fraunhofer.de> Date: Fri, 17 Jun 2016 16:52:23 -0500 Message-Id: <8B5E290F-209F-4097-BCEB-CD9B3BB02234@gmail.com> References: <017a01d1c803$ccccb580$66662080$@augustcellars.com> <576458DF.7040002@sit.fraunhofer.de> To: Henk Birkholz X-Mailer: Apple Mail (2.3124) Archived-At: Cc: sacm@ietf.org Subject: Re: [sacm] Is SACM based on a grid? X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 21:52:33 -0000 --Apple-Mail=_FE48C3F4-A821-4229-B41F-6A471A62BBD8 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Is use of the term =93grid=94 getting in the way? As a working group, = we have let the architecture draft expire. That draft described an = architecture with component discovery and registration as Henk = describes. That draft also described an architecture that can be = configured as a consolidation architecture, as Charles put it during the = virtual interim. The drafts we have adopted as a working group presume a NEA architecture = as a starting point, and this does not seem contrary to the spirit of = our expired architecture draft, nor does it seem contrary to the content = of our requirements draft. It seems that what we have not yet done is to satisfy discovery, = registration, and probably other requirements. Such requirement may not = be met by NEA=92s. If not, then it=92s the job of the working group to = satisfy those requirements by extending NEA (at least that is implied by = our adoption of, at least, the SWID over PA-TNC draft). Kind regards, Adam > On Jun 17, 2016, at 3:09 PM, Henk Birkholz = wrote: >=20 > My intend was to highlight that any SACM component should be able to = discovery any other SACM component and find out how to consume the data = it provides. >=20 > In regard to the use case of Ice Station Zebra, an example: > There is a SACM component on the remote site. That component is = unavailable/unreachable to the campus site for most of the time. But if = there is connectivity, the SACM component at the remote site can = register again at a broker on the campus site, publish data to the SACM = domain because it is able to register and then becomes unavailable = again. >=20 > If a grid protocol would be used, data published in the available = windows could be consumed by any other SACM component or new guidance = could be discovered and then requested by the remote SACM component. >=20 > If an end-to-end protocol is used, data published is transported to a = single SACM component, which again can provide it to other SACM = components (because this capability can be discovered and used by other = SACM components). >=20 > The choke-point scenario does not inhibit the use of a grid = architecture, but that was actually not the point I had in mind when I = mentioned the grid architecture. Maybe my words were chosen poorly. >=20 > My point was: It is vital for SACM components to be able to provide = data in a standardized way so that other SACM components can consume it = without the mapping/parsing/homogenization overhead that is still very = common at every turn. This requires to things: >=20 > 1) at minimum, SACM components require a base set of standardized = information elements that can be used to refer to "data of interest" in = the SACM domain (which are provided by the information model). >=20 > 2) the data a component provides has to be consumable by other = components >=20 > If a collector does not produce at least something every other = component can consume, it is not a SACM component. But thats absolutely = okay - if that kind of collector always comes with a counterpart that = provides the functions/capabilities of a SACM component. In this case = the SACM component might be a composite of sub-components? And this = could be an addition to the part of the architecture that defines SACM = components? >=20 >=20 > Gr=FC=DFe, >=20 > Henk >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm --Apple-Mail=_FE48C3F4-A821-4229-B41F-6A471A62BBD8 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXZHEbAAoJEDEhyx7etgABtZYP/jADpCZGEXF7m0pBQsqz+p9E qNzgR2083tVat1xsQEn/KxfpUVMSAgVjPpRDqYqFx/u+W0LlvZBNuBYLBrTS2Ppb fbzIHZ4doYYLoDuNWbVBtlD+aIB1hjdI12uDvvVXFrpc1TDeLhLn8BG4anXELvZy IQ/lJkA7oHXOX/Gaefs6Mgau/5WpqbQz6M88avmHAweWcRgY1sCWUnuIl1ueaA8J Ry425mZqAWaai6zFjzH1drRfcjUztJoaeEyUoOfi47IMs5xwTwVTo0/cx4HQJ2uf rBx8dS1flMjIjd+59HCwOs8HmYupa3xTySXslvjgyfYQEgKAgctZ1vZpQUTi+WXd nbjam/NzWzpuOu8HVQXVKXS9Os5w9vF30UIPjraWd5Ijr8tO8o1uHAn7in2y2su1 PcvcLoAJgjSzGS9U99lkgL6OzqZoagU4Pent/1EWZpGLN+iKVJbZq42BUyzmypLe JdNHQU1YPPmLo8qLS0evM4wh3GvPjGqrBgdabYFpL4n4JFHonIJWm2x4qc/RyEna yDJmfcmvx7CBJydjiV0u6zQEDjtntG+23fLkb/6lWL7lxojVdfOc1ErMpjLI34w3 1s3z6/4k1MRJjEsvXGOYLNOeZFvkzq4IBLdItAI1CieOGrSA2B+zRecMIKOpwL7P haoMmsRx2a/hyI2re5k3 =4gIY -----END PGP SIGNATURE----- --Apple-Mail=_FE48C3F4-A821-4229-B41F-6A471A62BBD8-- From nobody Fri Jun 17 14:58:40 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B056D12DBD5 for ; Fri, 17 Jun 2016 14:58:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ka-ssN3_D17w for ; Fri, 17 Jun 2016 14:58:36 -0700 (PDT) Received: from mail-pa0-x234.google.com (mail-pa0-x234.google.com [IPv6:2607:f8b0:400e:c03::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id AC7E712DBD4 for ; Fri, 17 Jun 2016 14:58:36 -0700 (PDT) Received: by mail-pa0-x234.google.com with SMTP id b13so31991124pat.0 for ; Fri, 17 Jun 2016 14:58:36 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=rEQJSU5M2eePlBbOTOj5tFmW9XRRIg1iwuDwHTXK/kQ=; b=YlSTyFSdRFgDY+2/NjzAwdCnbSxoefRmyTIzga1nZ1uHgpFvMoQGpr3jyxgwau0myJ X1l6qoXQvAozaEv26+YD14580wyAdbv0KJAmqL4hTRa1tCCE5v3io99GE2dv46kRNjQj ww0StK1IgCeHiccnjkCnPZkDYGft0RWmW+RLhhoF+wRXu3oCISJhnFv2UeUvImBvuSGA uXT70/LEhtXFmoFqfh6StN/mpZ+8jljNDs2R51bPZ8Fsmb1C8bb4hn7km9tbVKWyZwHY Xw/qOwcHIWKZWNrZ/0miXXkiyBZA70Q6hyyFJN5KhEUvbGvdSvPsV82ASYUVBAV4SSB8 rzpA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=rEQJSU5M2eePlBbOTOj5tFmW9XRRIg1iwuDwHTXK/kQ=; b=Z94LzJYbEszKLRsSS6W/nKvhVarioPO3b/H3R6UK7j/Kc6pAXXAimY9d+YD7qCmaGf nJH+vmpH59h2tz4968YrKx1WyXgL6IPjym8DGbCbI+NJndjzMVPgl/u6F+bcpTyJXQLm H3N6FNkyYD6/72+HYUV58EOAhCER0nIfBRmNrb01Aq1qjVFejRlTmJNgxy7uP1LugltB cAn5839KnFUgRlvFD5/xRbveN6BjfOGHBM5zuYKN55mSowXqvcdtjiKgJPhMdM3WxWD3 cgM4/Rfhg6PH+HKgO4QOg5SU/wc/zdY1+5UzhsCj2ReY7VGWXdlOzgGrQTTZMU1Wvm+L MSjw== X-Gm-Message-State: ALyK8tIvrPsn0okE43Fnpk6i4pd2hYouEVNAkoeTVvsPDbhkb882gid/40xlOSlI/pYH3g== X-Received: by 10.66.73.71 with SMTP id j7mr4758463pav.109.1466200715969; Fri, 17 Jun 2016 14:58:35 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id 78sm59391770pfm.43.2016.06.17.14.58.34 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 17 Jun 2016 14:58:34 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_2C243614-4962-46CA-B1BB-CF6B90061219"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Fri, 17 Jun 2016 16:58:32 -0500 Message-Id: References: To: "Haynes, Dan" X-Mailer: Apple Mail (2.3124) Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 21:58:39 -0000 --Apple-Mail=_2C243614-4962-46CA-B1BB-CF6B90061219 Content-Type: multipart/alternative; boundary="Apple-Mail=_229FED4E-81D3-42B9-BEE1-56D571195B12" --Apple-Mail=_229FED4E-81D3-42B9-BEE1-56D571195B12 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii This looks good from my perspective, Danny, thank you. > On Jun 17, 2016, at 7:59 AM, Haynes, Dan wrote: >=20 > We have a tracker that recommends updating Appendix E to reference = Critical Security Controls v6.0 instead of v5.1 [1][2]. I went through = both versions of the document and made the appropriate updates to the = text (see attached) as some controls have changed or have been removed. >=20 > Please review the attached changes and let me know if they seem = reasonable to incorporate into the next revision of the Vulnerability = Assessment Scenario I-D. >=20 > Thanks, >=20 > Danny >=20 > [1] https://github.com/sacmwg/vulnerability-scenario/issues/23 = > [2] https://www.cisecurity.org/critical-controls.cfm = >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = --Apple-Mail=_229FED4E-81D3-42B9-BEE1-56D571195B12 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii This looks good from my perspective, Danny, thank you.

On Jun 17, 2016, at 7:59 AM, Haynes, Dan <dhaynes@mitre.org> = wrote:

We have a tracker that = recommends updating Appendix E to reference Critical Security Controls = v6.0 instead of v5.1 [1][2].  I went through both versions of the = document and made the appropriate updates to the text (see attached) as = some controls have changed or have been removed.
 
Please = review the attached changes and let me know if they seem reasonable to = incorporate into the next revision of the Vulnerability Assessment = Scenario I-D.
 
Thanks,
 
Danny
 
[2] https://www.cisecurity.org/critical-controls.cfm
 
<csc-updat= es.docx>_______________________________________________
sacm mailing = list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_229FED4E-81D3-42B9-BEE1-56D571195B12-- --Apple-Mail=_2C243614-4962-46CA-B1BB-CF6B90061219 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXZHKIAAoJEDEhyx7etgABlNQP/ilajqoKAhSfu2SutOKXjQhQ PvgqbVw5pn07oit6zJFrZdWTyDB2mx7OCCwKFa0elQhq74NxDmLxyV8S5Jn0iqnb wBRBiIgNs+6Bfjs/A7s8fDcrH1RRO6q7lNOcGBnbya2/LEf5Rnu6VkOC/FABZKae 2viy/m53fzprLOSTnI5lQ7y3l2i1IfJqt6neI8SUIzvzcy2WCpMzRFxyq44O6loO TM8DSn60asY77hwsDXLFpDiG9gnDWdKuATN6J7PwzB4vtzm6YGvrB5s5nM169K5D IVy2hcYLk67Cbth8XVdM7RHGyzuR7ktZZqk4KUO5qRaWfUCiFY7fuUetpjvfqHTH 7y0KoMe3TgLMjMQUukcUcST6kdKNDDYH7tPUaS5U14nh5V4/FZF7x/Wl7HgloZuc q8nLhonOeq2A2aqZkEGWVPPSy/DTxekbklVcCbSFsynNvESPkjeYgmi0KfMjEHP3 xi6VtPPhppz+0irJwNuTexxHB6FGB9pnXsMzK1C57dAmbKJLxElasLtT8XEXzPPX 6o7udx6gM3/g0+d25MdeQuB2To6NxjbTxCSE7AizUbJSsZmIJIcDzDesf2Hzzx1F Q6DCjjIwU77a/ogZb9yDX2st0XSA34Ryr7E1XG/NTFBNcmaZ8Jw7haASfkGxsEIr 1F1QLEJI3TErIwk+1cSS =s8sP -----END PGP SIGNATURE----- --Apple-Mail=_2C243614-4962-46CA-B1BB-CF6B90061219-- From nobody Fri Jun 17 15:03:14 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36BEC12DBDA for ; Fri, 17 Jun 2016 15:03:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L8dkpjH8EKaN for ; Fri, 17 Jun 2016 15:03:10 -0700 (PDT) Received: from mail-oi0-x22d.google.com (mail-oi0-x22d.google.com [IPv6:2607:f8b0:4003:c06::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4666012D98C for ; Fri, 17 Jun 2016 15:03:10 -0700 (PDT) Received: by mail-oi0-x22d.google.com with SMTP id u201so136358650oie.0 for ; Fri, 17 Jun 2016 15:03:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=Easu1ErF7o6IUfltpAYChNnIQ8Ed/wpFaBi8anALznk=; b=w+IlR567SH7gg2ClY5s8C9mblk8cLbb6NbSWVPcNcJ2yHAqtI0ycCs7rGi8j14wuqC sSxuB8S/LIlGdnit8bZp20yXpVri2COGX4tdHRpCY7+ltx072NCEJg/trY6i2nm6afqc NvGhvlQCtSq1NLrxvQNv3zzvJ0AOn4/UQAH+Vi91p3luZKk19GqfqtRoLmeIyLcnIpPe 09pPu5LnacUeptlaPX23XWp71sAH2jk33qzNPK2GgfFPysMvQByNo409JykOeRC38NTy nSsCeSiZ7RcDo8vnZ6TkNkqKuPOw93jjcIDZtlHy1MJnV7NNhUc4prR5m7lXQvS0oy1v w2FQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=Easu1ErF7o6IUfltpAYChNnIQ8Ed/wpFaBi8anALznk=; b=fcHwERKeMH2cci83YDV4T5La7mLS+wA+wDanhHgcOcuBGnTrZO8kWFnxAaVQ/g39q+ 5L3EHPg4ay+TZ1yl8zp3lOpuyEiw1moq76/ZfaoeSPjUsU2m0CzyhuG03LoPppCPMgDl piIao47iCTPN1ZJ9qQXpOdQ5Bjz1rM0681TrkaqpX9dCEbdKMScm9aGQw+I3SZdo2EKz 7pKLIW0j7+PAIVN/k0Mop0uytys4LVn6YtmsHiZgurY4WSojyY34jJtxPBZ7ex4tzXlw 3G+vFQjXiwRgPdAYP5JOIRsfYlQQByO4DKD029256cJgu2dzGy52EdXboZb90R+Y22aR sbiw== X-Gm-Message-State: ALyK8tI8E6ZTdme2JoeFsuGsG5IjsFMCtXRj5GRKSIbvw4JgZ+MmfidUChYculh/rIuQeQ== X-Received: by 10.202.84.138 with SMTP id i132mr2477980oib.75.1466200989608; Fri, 17 Jun 2016 15:03:09 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id b63sm10173374otc.20.2016.06.17.15.03.08 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 17 Jun 2016 15:03:08 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_C15E5ED5-9B84-4C3E-A338-FE7B37CA62B5"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Fri, 17 Jun 2016 17:03:07 -0500 Message-Id: <66B18A4D-ED4D-49D7-92C7-A1C6F60FA269@gmail.com> References: To: "Schmidt, Charles M." X-Mailer: Apple Mail (2.3124) Archived-At: Cc: "" Subject: Re: [sacm] NIST IR 8060 - Guidelines for the Creation of Interoperable Software Identification (SWID) Tags X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 22:03:12 -0000 --Apple-Mail=_C15E5ED5-9B84-4C3E-A338-FE7B37CA62B5 Content-Type: multipart/alternative; boundary="Apple-Mail=_7FF6BB10-1F8F-4B3A-9FA1-690FB2919F5F" --Apple-Mail=_7FF6BB10-1F8F-4B3A-9FA1-690FB2919F5F Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Thank you, Charles. This should, I agree, go a long way toward = addressing availability concerns. Adam > On Jun 15, 2016, at 2:34 PM, Schmidt, Charles M. = wrote: >=20 > Hello, >=20 > On today's call Jim requested a link to the NIST Interagency Report on = SWID tags. The link to that document (NISTIR 8060 "Guidelines for the = Creation of Interoperable Software Identification (SWID) Tags") is here: = http://nvlpubs.nist.gov/nistpubs/ir/2016/NIST.IR.8060.pdf = > Between this and the freely available XML schema for ISO SWID 2015 = tags (http://standards.iso.org/iso/19770/-2/2015-current/schema.xsd = ) = hopefully this addresses most of the availability concerns regarding ISO = SWID 2015 as a data model. >=20 > And for the sake of being complete, the XML schema for ISO SWID 2009 = is also available (http://standards.iso.org/iso/19770/-2/2009/schema.xsd = ). Note that the = NIST document deals with SWID 2015, not SWID 2009. >=20 > Charles >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm --Apple-Mail=_7FF6BB10-1F8F-4B3A-9FA1-690FB2919F5F Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii Thank you, Charles.  This should, I agree, go a long way = toward addressing availability concerns.

Adam

On = Jun 15, 2016, at 2:34 PM, Schmidt, Charles M. <cmschmidt@mitre.org>= wrote:

NIST IR 8060 - Guidelines for the Creation of = Interoperable Software Identification (SWID) Tags

Hello,

On today's = call Jim requested a link to the NIST Interagency Report on SWID tags. = The link to that document (NISTIR 8060 "Guidelines = for the Creation of Interoperable Software Identification (SWID) = Tags") is here: http://nvlpubs.nist.gov/nistpubs/ir/2016/NIST.IR.8060.pdf

Between this and the freely available XML schema for ISO SWID = 2015 tags (http://standards.iso.org/iso/19770/-2/2015-current/schema.xsd) hopefully this addresses most of the = availability concerns regarding ISO SWID 2015 as = a data model.

And for the sake of being = complete, the XML schema for ISO SWID 2009 is also available = (http://standards.iso.org/iso/19770/-2/2009/schema.xsd). Note that the NIST document deals with SWID 2015, not SWID = 2009.

Charles

_______________________________________________
sacm = mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_7FF6BB10-1F8F-4B3A-9FA1-690FB2919F5F-- --Apple-Mail=_C15E5ED5-9B84-4C3E-A338-FE7B37CA62B5 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXZHObAAoJEDEhyx7etgABu+MQAJZlPlrNa7AoDwu3oJMDOTx8 JJ8DxQbmXtNBv5pt+wbHuMMEjpXRsSEPkGUZl1ImSpRdLCIh4V9nKsUjZoUC5T2L 0PUxV2EqLCpcT56r0JZ98tQ2VJTNgH/QjaAZPe0C0f1naTtda+0nzWKIA0zwEzEB ynxUrAD8FQ/Gyn52zVzO0INOCxUqQoQ2ZbRKk656dGuFqvDACBx9WHwIlef7LZkH XgjfOd5mPpfmGoEYOQmbLQDYG12+YevlcuDtAHyk+823uY2xg5ZnttTN2SGp/6kv VFjJKz8fGVWJoVjisLPY37/cT6LqXYwU+gZ3oGlDB+IhRrWMh///6JDcasga8kZB JiHVZFufcej9Rul3zV0g2FsMa8t92gkC5iq2ROcjHY15PR8HIzoXQxZey4NYuLRF mNYPph/eByzCA8hQkxFPQoMVwcV2CtQqtR16aF6D2HofJj1Dev/vIywzi3WPcdHH BE1cVSc+k5RTRZkqT0L7P6lgGzLPYr81ZUXs/CLSz1aPl2p7YHvsmGQgTz6byrAA NBQOArWc5u3O0PTqSjqI2A9Lo/+WH809qh/D7mU9AUmvp7YAK3WWzZvlR0HTqdah PYyERy5rUI0seLBIXI0pY0FhojDLYNcK+03UDN0ULTZooReMDSzBKHDlaCELaMkQ 4htDL8jT5eAhkkZVNJtf =+AdY -----END PGP SIGNATURE----- --Apple-Mail=_C15E5ED5-9B84-4C3E-A338-FE7B37CA62B5-- From nobody Fri Jun 17 15:14:38 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6972712DB7F for ; Fri, 17 Jun 2016 15:14:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id M3dAZH4d9b0K for ; Fri, 17 Jun 2016 15:14:34 -0700 (PDT) Received: from mail-oi0-x234.google.com (mail-oi0-x234.google.com [IPv6:2607:f8b0:4003:c06::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5C19712DBC5 for ; Fri, 17 Jun 2016 15:14:34 -0700 (PDT) Received: by mail-oi0-x234.google.com with SMTP id p204so136869934oih.3 for ; Fri, 17 Jun 2016 15:14:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=HUmRyMiM/Dn2LZqmU3Eq4P8/9/GV397/TPtrplcJhjU=; b=wN6gfeBmSxlupKq9x5QenPEY9vwG+05CUz/ApAx8suJjfdp3eYSQy7SK7hJ8itu4cv f3Hn9//yd3CJukcyXceTOxMeshdzrcXMrShrEZOzv4RZqExSmiNAJDbPHdjwpTNnetEc Z1CONRfYHXVCw2D5qkRSGTF5pNmcyFLyy/Z7UnqL/2J9aBmcbAXcs0Raz0wHYMJhriIg lQsX0JtymKSoKZ9VzRL3IPgSCJBYU0oQ2vrDqwfqYHFF08zML29WOyPnnq5iFPjtmVql 4L8SBI1WOiPWa3lErkZKJA5iAg2bTWyKx07pZep/NIUXsuItq3tCmMn97TDto6JW2TiC NxQA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=HUmRyMiM/Dn2LZqmU3Eq4P8/9/GV397/TPtrplcJhjU=; b=GcBDArbx2jhpjmUlssvv9LkKAm31GdrFWDXAY8qWinspx3eUV9YbwUhPvdYjg2SCEh 9nfhhJUWxQGAzgXfHRfm87a66UGCkfi1+cXz1UXxH0SMmz7lLgecNbhpeK3Ku3WUA18/ /hSyhBg0NPW7lo72OO6k2sWedSONBNMI4onsMZhaTEZkzpRbqVftkKZMbTCY6zPlQUVL VFpKWtuja6QILZeGZ6y7R+ZSHrDskGaPQHBW7kJ+R1IQw4e4KPBk0CVEL+O4TwYaihro Vz5oW2lLcGpiQNiGd4wztsqkZ0Eq9B9VINsy5/xKhbJBiw+oHUKQmibC18y3DmksPuA8 doPQ== X-Gm-Message-State: ALyK8tL/Mkvj0UBeC/H3iHW8B39Icz+6DlWseSwK2Kwrvp78KDpPuELYzQGriWdLJKHpQg== X-Received: by 10.202.218.195 with SMTP id r186mr2472978oig.201.1466201673622; Fri, 17 Jun 2016 15:14:33 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id 35sm11994514otb.25.2016.06.17.15.14.31 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 17 Jun 2016 15:14:32 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_130C49A4-B427-4F7B-8610-DBF75B3FEA9F"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Fri, 17 Jun 2016 17:14:27 -0500 Message-Id: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> References: To: "Haynes, Dan" X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Jerome Athias , "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 22:14:37 -0000 --Apple-Mail=_130C49A4-B427-4F7B-8610-DBF75B3FEA9F Content-Type: multipart/alternative; boundary="Apple-Mail=_6874F767-E56C-47E1-AE06-C9C6AD05654E" --Apple-Mail=_6874F767-E56C-47E1-AE06-C9C6AD05654E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 I really don=E2=80=99t want to be the one to bring this up, but are we = forgetting our definition of =E2=80=9Cassessment=E2=80=9D? We borrow, = and expand upon, the term from RFC5209. Here=E2=80=99s what our = terminology draft says: Assessment: Defined in [RFC5209] as =E2=80=9Cthe process of collecting = posture for a set of capabilities on the endpoint (e.g. host-based = firewall) such that the appropriate validators may evaluate the posture = against compliance policy.=E2=80=9D Within SACM the use of the term is = expanded to support other uses of collected posture (e.g. reporting, = network enforcement, vulnerability detection, license management). The = phrase =E2=80=9Cset of capabilities on the endpoint=E2=80=9D includes: = hardware and software installed on the endpoint. But, in the text proposed, and in general, we are talking about = collection in the context of *pre*-assessment. So, a collection before = =E2=80=9Cthe process of collecting posture=E2=80=A6=E2=80=9D, which = seems off to me. Do we really mean to say, pre-evaluation? Or, do we need =E2=80=9Cpre=E2=80= =9D anything? There is data available at the time of evaluation or = there is not. If there is not, we go grab it, or indicate that it needs = to be grabbed during the next collection opportunity, and we indicate = whether it=E2=80=99s something we need to grab all the time, or just = this once. Thoughts? Adam > On Jun 16, 2016, at 12:15 PM, Haynes, Dan wrote: >=20 > Off list, I received a suggested update to this text from Charles. I = was hoping to discuss it at yesterday=E2=80=99s virtual interim meeting, = however, I ran out of time. As a result, I would like to propose the = updated text as it seemed clearer and more concise than what I had = proposed, but, says the same thing. >=20 > The new text would read as follows (based on the updated draft posted = on 6/8/16 [1]). >=20 > "Supplemental collection of endpoint information for the purposes = of=E2=80=A6Over time, some new pieces of information that are needed = during common types of assessments might be identified. Pre-assessment = collection can be reconfigured to have this information delivered = automatically. This avoids the need for regular supplemental collections = to gather this information during assessments, streamlining the = assessment process. Likewise, it might be observed that certain = information delivered during pre-assessment collection is rarely used. = In this case, it might be useful to stop pre-assessment collection of = this information to reduce network and processing overhead. Instead, = supplemental collection can be used to gather this data on the rare = occasions when it is needed." >=20 > Please let me know your thoughts on this proposed text by Tuesday July = 21st. >=20 > Thanks, >=20 > Danny >=20 > [1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt = >=20 >=20 >=20 > From: Jerome Athias [mailto:athiasjerome@gmail.com] > Sent: Tuesday, June 07, 2016 12:08 AM > To: Haynes, Dan > Cc: sacm@ietf.org > Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario = Issue #5 - Change Detection with an Endpoint Management Capability >=20 > This rewrite is imho better > Thanks >=20 > On Tuesday, 7 June 2016, Haynes, Dan > wrote: > Based on the feedback, would the following rewrite of the paragraph = help clarify things? >=20 > "In many cases, the endpoint information...Under certain deployment = scenarios, as > the vulnerability management capability processes vulnerability = detection data over > time, the endpoint management capability may learn about additional = detection > information that it was previously not collecting and push that = information to the > vulnerability management capability where it can support future = assessments. The > pushing of this data may potentially be driven by some trigger (e.g., = change > in software inventory, policy, network connectivity status, etc.)." >=20 > While this potentially creates a coupling between the vulnerability = management capability and the endpoint management capability, as = written, I think it will be left to the implementer of those = capabilities to decide. I think the point is just that you could do = something like this to improve the vulnerability assessment. >=20 > If we still don't have consensus on this, another approach might be to = just remove this text all together as I don't think doing so would = preclude an implementer from supporting functionality like this in their = product. >=20 > Thoughts? >=20 > Thanks, >=20 > Danny >=20 > > -----Original Message----- > > From: Jerome Athias [mailto:athiasjerome@gmail.com <>] > > Sent: Saturday, June 04, 2016 2:49 AM > > To: Haynes, Dan > > > Cc: sacm@ietf.org <> > > Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario = Issue #5 > > - Change Detection with an Endpoint Management Capability > > > > While the scenario provided by Adam is valid, if your concern is = that "the > > information beyond that" would be "supplemental endpoint > > information": > > I don't see a scenario where an endpoint management capability would = have > > to push -supplemental- information to the vulnerability assessment > > capability (what would the vulnerability assessment capability do = with > > 'unknown' additional information) > > > > So I think the issue is to change "the information beyond that" to = something > > like "the updated information" > > > > > > > > 2016-05-18 16:15 GMT+03:00 Haynes, Dan >: > > > During yesterday=E2=80=99s virtual interim meeting, we discussed = various open > > > issues with respect to the Vulnerability Assessment Scenario [1] = as a > > > result of feedback that we received on the draft which you can see > > > here [2][3]. The slide=E2=80=99s from the meeting can be found = here [4]. > > > > > > > > > > > > One issue that we didn=E2=80=99t have a chance to discuss because = we ran out > > > of time was whether or not an endpoint management capability has = the > > > ability to push supplemental endpoint information to the = vulnerability > > > assessment capability. This question came out of a review of the > > > following text from the Vulnerability Assessment Scenario = (specifically the > > last sentence). > > > > > > > > > > > > =E2=80=9CIn many cases, the endpoint information needed to = determine an > > > endpoint=E2=80=99s vulnerability status will have been previously > > > > > > collected by the Endpoint Management Capability and available in a > > > Repository. However, in other cases, the necessary > > > > > > endpoint information will not be readily available in a Repository = and > > > a targeted collection will be necessary. Of course, > > > > > > an implementation of an endpoint management capability may prefer = to > > > enable operators to perform targeted collection under > > > > > > certain circumstances, even when sufficient information can be > > > provided by the endpoint management capability (e.g. there > > > > > > may be freshness requirements for information). Targeted = collection of > > > endpoint information for the purpose of vulnerability > > > > > > assessment does not necessarily need to be a pull by the = vulnerability > > > assessment capability. Under certain deployment > > > > > > scenarios, once the necessary detection information is known, the > > > information beyond that which is available in the endpoint > > > > > > management capability can be pushed to the vulnerability = assessment > > > capability by the endpoint whenever that information > > > > > > changes.=E2=80=9D > > > > > > > > > > > > Our main question is whether or not pushing information from the > > > endpoint management capability to the vulnerability assessment > > > capability is actually possible because it would not necessarily = know > > > what information it needs to push prior to the server requesting = it > > > (in which case it is probably considered a pull)? Is there a > > > situation where the endpoint would know, in advance, what = additional > > > information is needed for an assessment without a server = requesting it? > > > > > > > > > > > > If you have any thoughts on this issue, please provide feedback by = May > > 31st. > > > We are planning to have an updated version of the scenario for = June 8th. > > > > > > > > > > > > Thanks, > > > > > > Danny > > > > > > > > > > > > [1] = https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ = > > > > > > [2] https://github.com/sacmwg/vulnerability-scenario/pull/3 = > > > > > > [3] = https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html = > > > > > > [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ = > > > (looks like the slides are not available just yet, but, I suspect = they > > > should be > > > soon) > > > > > > > > > > > > > > > _______________________________________________ > > > sacm mailing list > > > sacm@ietf.org <> > > > https://www.ietf.org/mailman/listinfo/sacm = > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm --Apple-Mail=_6874F767-E56C-47E1-AE06-C9C6AD05654E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
I really don=E2=80=99t want to be the one to = bring this up, but are we forgetting our definition of =E2=80=9Cassessment= =E2=80=9D?  We borrow, and expand upon, the term from RFC5209. =  Here=E2=80=99s what our terminology draft says:

Assessment: Defined in = [RFC5209] as =E2=80=9Cthe process of collecting posture for a set of = capabilities on the endpoint (e.g. host-based firewall) such that the = appropriate validators may evaluate the posture against compliance = policy.=E2=80=9D  Within SACM the use of the term is expanded to = support other uses of collected posture (e.g. reporting, network = enforcement, vulnerability detection, license management).  The = phrase =E2=80=9Cset of capabilities on the endpoint=E2=80=9D includes: = hardware and software installed on the endpoint.

But, in the text proposed, and in = general, we are talking about collection in the context of = *pre*-assessment.  So, a collection before =E2=80=9Cthe process of = collecting posture=E2=80=A6=E2=80=9D, which seems off to me.

Do we really mean to = say, pre-evaluation?  Or, do we need =E2=80=9Cpre=E2=80=9D = anything?  There is data available at the time of evaluation or = there is not.  If there is not, we go grab it, or indicate that it = needs to be grabbed during the next collection opportunity, and we = indicate whether it=E2=80=99s something we need to grab all the time, or = just this once.

Thoughts?

Adam



On Jun 16, 2016, at 12:15 PM, = Haynes, Dan <dhaynes@mitre.org> wrote:

Off list, I received a suggested update to = this text from Charles.  I was hoping to discuss it at = yesterday=E2=80=99s virtual interim meeting, however, I ran out of = time.  As a result, I would like to propose the updated text as it = seemed clearer and more concise than what I had proposed, but, says the = same thing.
 
The new text would read = as follows (based on the updated draft posted on 6/8/16 [1]).
 
"Supplemental = collection of endpoint information for the purposes of=E2=80=A6Over = time, some new pieces of information that are needed during common types = of assessments might be identified. Pre-assessment collection can be = reconfigured to have this information delivered automatically. This = avoids the need for regular supplemental collections to gather this = information during assessments, streamlining the assessment process. = Likewise, it might be observed that certain information delivered during = pre-assessment collection is rarely used. In this case, it might be = useful to stop pre-assessment collection of this information to reduce = network and processing overhead. Instead, supplemental collection can be = used to gather this data on the rare occasions when it is needed."
 
Please let me know your = thoughts on this proposed text by Tuesday July 21st.
 
Thanks,
Danny
 
From: Jerome = Athias [mailto:athiasjerome@gmail.com] 
Sent: Tuesday, June 07, 2016 = 12:08 AM
To: Haynes, Dan <dhaynes@mitre.org>
Cc: sacm@ietf.org
Subject: Re: [sacm] FOR REVIEW: = Vulnerability Assessment Scenario Issue #5 - Change Detection with an = Endpoint Management Capability
 
This rewrite is imho better
Thanks

On Tuesday, 7 June 2016, Haynes, Dan <dhaynes@mitre.org> = wrote:
Based on the = feedback, would the following rewrite of the paragraph help clarify = things?

"In many cases, the endpoint = information...Under certain deployment scenarios, as
the = vulnerability management capability processes vulnerability detection = data over
time, the endpoint management capability may = learn about additional detection
information that it was = previously not collecting and push that information to the
vulnerability management capability where it can support = future assessments. The
pushing of this data may = potentially be driven by some trigger (e.g., change
in = software inventory, policy, network connectivity status, etc.)."

While this potentially creates a coupling = between the vulnerability management capability and the endpoint = management capability, as written, I think it will be left to the = implementer of those capabilities to decide.  I think the point is = just that you could do something like this to improve the vulnerability = assessment.

If we still don't have = consensus on this, another approach might be to just remove this text = all together as I don't think doing so would preclude an implementer = from supporting functionality like this in their product.

Thoughts?

Thanks,

Danny

> -----Original Message-----
> From: = Jerome Athias [mailto:athiasjerome@gmail.com]
> Sent: Saturday, June 04, 2016 2:49 AM
> = To: Haynes, Dan <dhaynes@mitre.org>
> Cc: sacm@ietf.org
> Subject: Re: [sacm] FOR = REVIEW: Vulnerability Assessment Scenario Issue #5
> - = Change Detection with an Endpoint Management Capability
>
> While the scenario provided by Adam = is valid, if your concern is that "the
> information = beyond that" would be "supplemental endpoint
> = information":
> I don't see a scenario where an = endpoint management capability would have
> to push = -supplemental- information to the vulnerability assessment
> capability (what would the vulnerability assessment = capability do with
> 'unknown' additional = information)
>
> So I think the issue = is to change "the information beyond that" to something
>= like "the updated information"
>
>
>
> 2016-05-18 16:15 GMT+03:00 Haynes, = Dan <dhaynes@mitre.org>:
> > = During yesterday=E2=80=99s virtual interim meeting, we discussed various = open
> > issues with respect to the Vulnerability = Assessment Scenario [1] as a
> > result of feedback = that we received on the draft which you can see
> > = here [2][3].  The slide=E2=80=99s from the meeting can be found = here [4].
> >
> >
> >
> > One issue that we didn=E2=80=99= t have a chance to discuss because we ran out
> > of = time was whether or not an endpoint management capability has the
> > ability to push supplemental endpoint information = to the vulnerability
> > assessment = capability.  This question came out of a review of the
> > following text from the Vulnerability Assessment = Scenario (specifically the
> last sentence).
> >
> >
> >
> > =E2=80=9CIn many cases, the endpoint information = needed to determine an
> > endpoint=E2=80=99s = vulnerability status will have been previously
> = >
> > collected by the Endpoint Management = Capability and available in a
> > Repository. = However, in other cases, the necessary
> >
> > endpoint information will not be readily available = in a Repository and
> > a targeted collection will = be necessary.  Of course,
> >
> = > an implementation of an endpoint management capability may prefer = to
> > enable operators to perform targeted = collection under
> >
> > certain = circumstances, even when sufficient information can be
> = > provided by the endpoint management capability (e.g. there
> >
> > may be freshness = requirements for information). Targeted collection of
> = > endpoint information for the purpose of vulnerability
> >
> > assessment does not = necessarily need to be a pull by the vulnerability
> = > assessment capability.  Under certain deployment
> >
> > scenarios, once the = necessary detection information is known, the
> > = information beyond that which is available in the endpoint
> >
> > management capability can = be pushed to the vulnerability assessment
> > = capability by the endpoint whenever that information
> = >
> > changes.=E2=80=9D
> = >
> >
> >
> = > Our main question is whether or not pushing information from the
> > endpoint management capability to the vulnerability = assessment
> > capability is actually possible = because it would not necessarily know
> > what = information it needs to push prior to the server requesting it
> > (in which case it is probably considered a = pull)?  Is there a
> > situation where the = endpoint would know, in advance, what additional
> > = information is needed for an assessment without a server requesting = it?
> >
> >
> = >
> > If you have any thoughts on this issue, = please provide feedback by May
> 31st.
>= > We are planning to have an updated version of the scenario for = June 8th.
> >
> >
> >
> > Thanks,
> = >
> > Danny
> >
> >
> >
> > = [1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenari= o/
> >
> > [2] https://github.com/sacmwg/vulnerability-scenario/pull/3
> >
> > [3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.htm= l
> >
> > [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/<= /a>
> > (looks like the slides are not available = just yet, but, I suspect they
> > should be
> > soon)
> >
> = >
> >
> >
> = > _______________________________________________
> = > sacm mailing list
> > sacm@ietf.org
> > https://www.ietf.org/mailman/listinfo/sacm
> >
_______________________________________________
sacm mailing = list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_6874F767-E56C-47E1-AE06-C9C6AD05654E-- --Apple-Mail=_130C49A4-B427-4F7B-8610-DBF75B3FEA9F Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXZHZGAAoJEDEhyx7etgABz+oQAII3+woQg+jTER0QVC/MQ+gb 5zEVCzcWPly66XXUR2cFeoXxeLWuttx7AKtKB+/EfW2HWmqHozTqXi9WAMGLEM3h jbdcn1M3KGQEkihwYBWQX+dmj/nEIJgnLaEINCvRhrkpoU7JPOxuJEioR5nVywVK S/JteJkzrv9KS47GPDuG4YlZeqHE8no3bkerCjrnrbpCJjgJmNoc5T+Ul9OVSZ7r Cq1PQ0qeQLCrOAppUovr/+NNzkNeFZ+FeuBYwaUL6/Rx5JHbuCnQEcPsVDS8nv6i 6IWIf4muc8INJq8Qym8VyzM8V9o0S4tDraa2NQIPH91/N0jF8b6d3nCZwCkvaqM6 yNdbUXbONsyTLWhZ6sjkolRJFFLrSVPYcvrRMbBuCImRQ6iMJpbTCc7tTIbeTIV4 uofaxf2l9gIYz7UmzYe80diDLA2rnddy5efwF3yifag0LF5cWGFZzA+MUhijIPpG ho5zPYd8x84cc3j8VPo9I6JySpf6/ACjJzBmNLyQnYV+AfE/EhU1oc/6duCW1f/W J7rgJaJj7jdAiGwPmOeQD+S+z0d0BtTpihe+QXRsBgeQGn5uQNe8jZS69t8dyPgj jL0LbvnvLb/Cj+UEnf49as8fBnoGOKY0dk9lSuDIWecp885rdM5EEqc4xKFnCbwS oN4xYa0Kd2TXtxEymSDQ =FyB3 -----END PGP SIGNATURE----- --Apple-Mail=_130C49A4-B427-4F7B-8610-DBF75B3FEA9F-- From nobody Fri Jun 17 15:17:43 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6E94F12DBD8 for ; Fri, 17 Jun 2016 15:17:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cWrPlhLzpwOI for ; Fri, 17 Jun 2016 15:17:39 -0700 (PDT) Received: from mail-pa0-x229.google.com (mail-pa0-x229.google.com [IPv6:2607:f8b0:400e:c03::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B0D2212DBB0 for ; Fri, 17 Jun 2016 15:17:39 -0700 (PDT) Received: by mail-pa0-x229.google.com with SMTP id b5so32060355pas.3 for ; Fri, 17 Jun 2016 15:17:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:subject:date:references:to:message-id:mime-version; bh=DLR8s5UQ6FdEo4kUnhb9uw0n64xMmGCagF8Jjb+y4Vc=; b=zqrZdL7szQC8NP0i0T7L8s5OQCr8CAr8d6GlFT6QxuoyQfvB9V6PC9fQPLn2qw39gN vVTOkO8ZOMsnHQCfJgfO7wseyECWvJfFJ7B4dnTQzO14DcAL5mj39KxWoNR1Sg9XQZ5D tDCqznPKONKvGsFJr9iSm0sStKOgeAgxck5lrngsoLcTT6RcwiWrG+5C4OagmLf5YC+j nUslRZf+69hzfxuwpAV4DFh80YjJSr0JRMBtPZ3ou+BD02dYbt/7mJWBtaGntawMC2I4 +SoNmm9hKqZpN5/Tr7MFHPLAa6DXVeYD6rwcdA15UAvzwFjJP4+JRj+Fw6hnF6Wc4hBd OWbQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:date:references:to:message-id :mime-version; bh=DLR8s5UQ6FdEo4kUnhb9uw0n64xMmGCagF8Jjb+y4Vc=; b=grztKSwr3wFjbJ8BiIQtyeWbPzajE7hcj1D4KWh+fOwawbj2Q2FIhQ9NaaLFSbNf5D zPE6tqmeSnUJsIYBXPQ6nbz/SoqZejgt6ptWKzkX293eWIfEpgpij9iWKSm6zNSKkn6x HOdOwKUV+UYylsV09jkaZp4krhId9WmE3wsjWZi2583SK9R12rEzZrPC9Lu1vtqHFMHO ChQXp34cuHobImg0HwdB9kwJnfXH+Ae01XS81Z8filN9YQ3P6v4rVcFpw8e7ejyug3g0 MAbbwaCa/EdqfIQDG5G3KQDCv0Sn+oky5RNsYR+6jCb1aIYrK3dQnA1ye/IJ1nfQIcTI j6lQ== X-Gm-Message-State: ALyK8tJ9FoTAiB8qBjmq3nT6mVRJmPoJohbx7laKkag9yINSjI6CnkcrTmZ7TtyFDUsicw== X-Received: by 10.66.47.196 with SMTP id f4mr4765036pan.126.1466201858801; Fri, 17 Jun 2016 15:17:38 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id d2sm67203385pfk.36.2016.06.17.15.17.37 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Fri, 17 Jun 2016 15:17:37 -0700 (PDT) From: Adam Montville X-Pgp-Agent: GPGMail 2.6b2 Content-Type: multipart/signed; boundary="Apple-Mail=_03F78F47-7B94-44AD-80BE-E218683DD2DA"; protocol="application/pgp-signature"; micalg=pgp-sha512 Date: Fri, 17 Jun 2016 17:17:35 -0500 References: <20160617175307.9738.92414.idtracker@ietfa.amsl.com> To: "" Message-Id: <11730F54-11A2-4D2E-97BE-AA7081629C9B@gmail.com> Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [sacm] Fwd: IETF 96 Preliminary Agenda X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 17 Jun 2016 22:17:41 -0000 --Apple-Mail=_03F78F47-7B94-44AD-80BE-E218683DD2DA Content-Type: multipart/alternative; boundary="Apple-Mail=_9A0E7714-0FDD-42D1-8488-1CFD305C561A" --Apple-Mail=_9A0E7714-0FDD-42D1-8488-1CFD305C561A Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 In case you=E2=80=99ve missed it=E2=80=94preliminary agenda for 96 has = been published. Looks like we=E2=80=99ve drawn, for now, some favorable = slots on Monday and Friday morning. > Begin forwarded message: >=20 > From: IETF Agenda > Subject: IETF 96 Preliminary Agenda > Date: June 17, 2016 at 12:53:07 PM CDT > To: "IETF Announcement List" > Cc: 96all@ietf.org, ietf@ietf.org > Reply-To: ietf@ietf.org, IETF Agenda >=20 > The IETF 96 Preliminary Agenda has been posted. The final agenda will = be published on Friday, June 24, 2016. >=20 > https://datatracker.ietf.org/meeting/96/agenda.html > https://datatracker.ietf.org/meeting/96/agenda.txt >=20 > NOTE: We are continuing the experiment to have sessions begin at 10:00 = based on positive community feedback. >=20 > More information regarding IETF 96 in Berlin is located here: = https://www.ietf.org/meeting/96/index.html >=20 > Thank you! >=20 > IETF Secretariat >=20 --Apple-Mail=_9A0E7714-0FDD-42D1-8488-1CFD305C561A Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 In case you=E2=80=99ve missed it=E2=80=94preliminary agenda = for 96 has been published.  Looks like we=E2=80=99ve drawn, for = now, some favorable slots on Monday and Friday morning.

Begin forwarded message:

From: = IETF Agenda <agenda@ietf.org>
Subject: = IETF 96 = Preliminary Agenda
Date: = June 17, 2016 at 12:53:07 PM = CDT
To: = "IETF Announcement List" <ietf-announce@ietf.org>
Cc: 96all@ietf.org, ietf@ietf.org
Reply-To: = ietf@ietf.org, IETF Agenda <agenda@ietf.org>

The= IETF 96 Preliminary Agenda has been posted. The final agenda will be = published on Friday, June 24, 2016.

https://datatracker.ietf.org/meeting/96/agenda.html
https://datatracker.ietf.org/meeting/96/agenda.txt

NOTE: We are continuing the experiment to have = sessions begin at 10:00 based on positive community feedback.

More information regarding IETF 96 in Berlin = is located here: https://www.ietf.org/meeting/96/index.html

Thank you!

IETF = Secretariat


= --Apple-Mail=_9A0E7714-0FDD-42D1-8488-1CFD305C561A-- --Apple-Mail=_03F78F47-7B94-44AD-80BE-E218683DD2DA Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXZHcAAAoJEDEhyx7etgABIKQP/1JH+QLmjGaqBrOFoE+8QI5i M1NrjTUI7R28NB/o4v2OgaByo6TEmPD1+RnAJ3uWofD3zElz1JN1JVUI1LZssgQl 32ueAfi3HdGafXhgx9MeCToCgCsN9z941z2RPWqJtdznaT7KWsizCgZo/fAiZ/jP Eufm8ng1trFWN1W/WKabNrLN/1cmEfLEEfBTBe18oUPg2OmvEs2nKY12KVXx52Lv 1ycHfqGRgL4FUNoX0W7bXJ0h5rgCn7caShC1OZX/xIZz92iRj+/tl2zTppL9UGo6 9tLp0ppmBR7nuoowcQ6g91GZA3EAHSDFIfPAvoPEwEFWF1XorPO0xgIZ6Yeet0Xk UbvLtKT2zWjYC8BhnoH5QEOMHEAp24MBf8HnxWhF8IEp1dkj4VYar/+SnWasonr5 VeVcX4ErxpiOudXAM9oJOlS6BWSHNuSdTEGcu6lGzXefM+jbst09HU1cc9XsMJfq d5Upx1+CjjHbpxu/qO4gzBGZ3amlQA+CDcX88Fjm4r4+FBK2vdc5yEXjMwAbkgtL hm5eMxc2jianvc4567zg2LHMpwxtWQSpdf16Ja/qp9nJOw7GXI/FX18Fu+reglxp 6WSKSSZpRQipgAetsnBrsn9TdSqnCB/LE944SxYsFujfgm7x4e8QFjO6V6s7FFac krJNXZlsyAv5jHnyl6gC =27Md -----END PGP SIGNATURE----- --Apple-Mail=_03F78F47-7B94-44AD-80BE-E218683DD2DA-- From nobody Fri Jun 17 23:38:22 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4FD2012B036 for ; Fri, 17 Jun 2016 23:38:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id stJbwwViN0IT for ; Fri, 17 Jun 2016 23:38:17 -0700 (PDT) Received: from mail-vk0-x22f.google.com (mail-vk0-x22f.google.com [IPv6:2607:f8b0:400c:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 965D812B00C for ; Fri, 17 Jun 2016 23:38:17 -0700 (PDT) Received: by mail-vk0-x22f.google.com with SMTP id j2so141343122vkg.2 for ; Fri, 17 Jun 2016 23:38:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=ftUl949nr7sFyZAUPkod4FI+FIlrLo8lxk9xYc9RmRE=; b=bcVLm3Y1lv+iSOBvWEDQMBeFwOTPZRlWVdL+drGaWflIB65D6NJF1vi1/mU7twlzlA 3iG3ad16kHCrdWAoml0BFNAzx6SLeCEGOv/+E9/x2wUUQrALbRyKn4BVyfuICq8eFtLv Eb0KDByQX5RTMwkliN6vW0GPsS6ygk+Lp5G/aus2FwEJ1uHnF2SR3qOKfwM6TopEqk4y DCpRAVsKTKWUfE9nfNdcQRRNoeJnBdqeCfMznQyakqc96kB8fe8vWwbq09LtVAWjRD15 xzCa9C2eZhjsgZl6odyxfJFK1x3pRnxNFSdd7LUPmJ6GkIjzm2ocH2PdYiTvardU/yQ6 pkHQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=ftUl949nr7sFyZAUPkod4FI+FIlrLo8lxk9xYc9RmRE=; b=Yft6RX2Hydsol1C/gPrZxMyxP9lLRVNzqmnjCRs96qhCOyA+/llX5vwo2++Fax15ux EbcbuwB8lPgjGyjQeLzX8DN23yFesr5zPdKEPJLmRuphD2dHavWk1yA6qeiBXHyvgD9M fdF5dtLByk9OONK88X1LtqFysVxxin3o0rivAtUA/wBOPaUyxqOQzt0K9s2bjsp5lBlw tQ/yXeVGcmAP1QxpyeH+QMbHWKul886Ck7vp0yGBl+u6IrxIi28HDux0scFKdZ9goL00 qfRxCV9pDw3J+2FSNWJFy72L12Efu+NehJRjRsZJnvBO+BL/uHY0C9j6GrAjpFweJySP J9Nw== X-Gm-Message-State: ALyK8tIltG9Hd2+T4PeCX08ih6X9xUoQ94lUKxNbIgXeixkO51/x+8dWs9z/oy7KyKJJ9DwQFe0ueCYNRofX4Q== MIME-Version: 1.0 X-Received: by 10.176.1.116 with SMTP id 107mr2130719uak.54.1466231896229; Fri, 17 Jun 2016 23:38:16 -0700 (PDT) Received: by 10.31.210.193 with HTTP; Fri, 17 Jun 2016 23:38:16 -0700 (PDT) In-Reply-To: References: Date: Sat, 18 Jun 2016 09:38:16 +0300 Message-ID: From: Jerome Athias To: "Haynes, Dan" Content-Type: multipart/alternative; boundary=001a113d16365550a6053587b7c1 Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2016 06:38:20 -0000 --001a113d16365550a6053587b7c1 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable IMHO the new text is improved, well done Meantime, Adam's point needs to be reviewed regarding "pre" something Moreover I changed a bit my mind thinking about this scenario: 1) unauthenticated assessment (voluntary or because credentials unknown/not available) 2) add of credentials in the endpoint management (need for push? For authenticated assessment) 3) updates of the credentials (push or pull to/by endpoint assessment) Sorry if it's not valid scenario On Thursday, 16 June 2016, Haynes, Dan wrote: > Off list, I received a suggested update to this text from Charles. I was > hoping to discuss it at yesterday=E2=80=99s virtual interim meeting, howe= ver, I ran > out of time. As a result, I would like to propose the updated text as it > seemed clearer and more concise than what I had proposed, but, says the > same thing. > > > > The new text would read as follows (based on the updated draft posted on > 6/8/16 [1]). > > > > "Supplemental collection of endpoint information for the purposes of=E2= =80=A6Over > time, some new pieces of information that are needed during common types = of > assessments might be identified. Pre-assessment collection can be > reconfigured to have this information delivered automatically. This avoid= s > the need for regular supplemental collections to gather this information > during assessments, streamlining the assessment process. Likewise, it mig= ht > be observed that certain information delivered during pre-assessment > collection is rarely used. In this case, it might be useful to stop > pre-assessment collection of this information to reduce network and > processing overhead. Instead, supplemental collection can be used to gath= er > this data on the rare occasions when it is needed." > > > > Please let me know your thoughts on this proposed text by Tuesday July 21 > st. > > > > Thanks, > > Danny > > > > [1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt > > > > > > > > *From:* Jerome Athias [mailto:athiasjerome@gmail.com > ] > *Sent:* Tuesday, June 07, 2016 12:08 AM > *To:* Haynes, Dan > > *Cc:* sacm@ietf.org > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > #5 - Change Detection with an Endpoint Management Capability > > > > This rewrite is imho better > > Thanks > > On Tuesday, 7 June 2016, Haynes, Dan > wrote: > > Based on the feedback, would the following rewrite of the paragraph help > clarify things? > > "In many cases, the endpoint information...Under certain deployment > scenarios, as > the vulnerability management capability processes vulnerability detection > data over > time, the endpoint management capability may learn about additional > detection > information that it was previously not collecting and push that > information to the > vulnerability management capability where it can support future > assessments. The > pushing of this data may potentially be driven by some trigger (e.g., > change > in software inventory, policy, network connectivity status, etc.)." > > While this potentially creates a coupling between the vulnerability > management capability and the endpoint management capability, as written,= I > think it will be left to the implementer of those capabilities to decide. > I think the point is just that you could do something like this to improv= e > the vulnerability assessment. > > If we still don't have consensus on this, another approach might be to > just remove this text all together as I don't think doing so would preclu= de > an implementer from supporting functionality like this in their product. > > Thoughts? > > Thanks, > > Danny > > > -----Original Message----- > > From: Jerome Athias [mailto:athiasjerome@gmail.com] > > Sent: Saturday, June 04, 2016 2:49 AM > > To: Haynes, Dan > > Cc: sacm@ietf.org > > Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > #5 > > - Change Detection with an Endpoint Management Capability > > > > While the scenario provided by Adam is valid, if your concern is that > "the > > information beyond that" would be "supplemental endpoint > > information": > > I don't see a scenario where an endpoint management capability would ha= ve > > to push -supplemental- information to the vulnerability assessment > > capability (what would the vulnerability assessment capability do with > > 'unknown' additional information) > > > > So I think the issue is to change "the information beyond that" to > something > > like "the updated information" > > > > > > > > 2016-05-18 16:15 GMT+03:00 Haynes, Dan : > > > During yesterday=E2=80=99s virtual interim meeting, we discussed vari= ous open > > > issues with respect to the Vulnerability Assessment Scenario [1] as a > > > result of feedback that we received on the draft which you can see > > > here [2][3]. The slide=E2=80=99s from the meeting can be found here = [4]. > > > > > > > > > > > > One issue that we didn=E2=80=99t have a chance to discuss because we = ran out > > > of time was whether or not an endpoint management capability has the > > > ability to push supplemental endpoint information to the vulnerabilit= y > > > assessment capability. This question came out of a review of the > > > following text from the Vulnerability Assessment Scenario > (specifically the > > last sentence). > > > > > > > > > > > > =E2=80=9CIn many cases, the endpoint information needed to determine = an > > > endpoint=E2=80=99s vulnerability status will have been previously > > > > > > collected by the Endpoint Management Capability and available in a > > > Repository. However, in other cases, the necessary > > > > > > endpoint information will not be readily available in a Repository an= d > > > a targeted collection will be necessary. Of course, > > > > > > an implementation of an endpoint management capability may prefer to > > > enable operators to perform targeted collection under > > > > > > certain circumstances, even when sufficient information can be > > > provided by the endpoint management capability (e.g. there > > > > > > may be freshness requirements for information). Targeted collection o= f > > > endpoint information for the purpose of vulnerability > > > > > > assessment does not necessarily need to be a pull by the vulnerabilit= y > > > assessment capability. Under certain deployment > > > > > > scenarios, once the necessary detection information is known, the > > > information beyond that which is available in the endpoint > > > > > > management capability can be pushed to the vulnerability assessment > > > capability by the endpoint whenever that information > > > > > > changes.=E2=80=9D > > > > > > > > > > > > Our main question is whether or not pushing information from the > > > endpoint management capability to the vulnerability assessment > > > capability is actually possible because it would not necessarily know > > > what information it needs to push prior to the server requesting it > > > (in which case it is probably considered a pull)? Is there a > > > situation where the endpoint would know, in advance, what additional > > > information is needed for an assessment without a server requesting i= t? > > > > > > > > > > > > If you have any thoughts on this issue, please provide feedback by Ma= y > > 31st. > > > We are planning to have an updated version of the scenario for June > 8th. > > > > > > > > > > > > Thanks, > > > > > > Danny > > > > > > > > > > > > [1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ > > > > > > [2] https://github.com/sacmwg/vulnerability-scenario/pull/3 > > > > > > [3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html > > > > > > [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ > > > (looks like the slides are not available just yet, but, I suspect the= y > > > should be > > > soon) > > > > > > > > > > > > > > > _______________________________________________ > > > sacm mailing list > > > sacm@ietf.org > > > https://www.ietf.org/mailman/listinfo/sacm > > > > > --001a113d16365550a6053587b7c1 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable IMHO the new text is improved, well done
Meantime, Adam's point nee= ds to be reviewed regarding "pre" something
Moreover I = changed a bit my mind thinking about this scenario:
1) unauthenti= cated assessment (voluntary or because credentials unknown/not available)
2) add of credentials in the endpoint management (need for push? F= or authenticated assessment)
3) updates of the credentials (push = or pull to/by endpoint assessment)

Sorry if it's not valid scena= rio=C2=A0

On Thursday, 16 June 2016, Haynes, Dan <dhaynes@mitre.org> wrote:

Off list, I received a suggested upda= te to this text from Charles.=C2=A0 I was hoping to discuss it at yesterday= =E2=80=99s virtual interim meeting, however, I ran out of time.=C2=A0 As a result, I would like to propose the updated text as it seemed clearer= and more concise than what I had proposed, but, says the same thing.

=C2=A0

The new text would read as follows (b= ased on the updated draft posted on 6/8/16 [1]).

=C2=A0

"Supplemental collection of endp= oint information for the purposes of=E2=80=A6Over time, some new pieces of = information that are needed during common types of assessments might be identified. Pre-assessment collection can be reconfigured to have= this information delivered automatically. This avoids the need for regular= supplemental collections to gather this information during assessments, st= reamlining the assessment process. Likewise, it might be observed that certain information delivered during p= re-assessment collection is rarely used. In this case, it might be useful t= o stop pre-assessment collection of this information to reduce network and = processing overhead. Instead, supplemental collection can be used to gather this data on the rare occasions when it i= s needed."

=C2=A0

Please let me know your thoughts on t= his proposed text by Tuesday July 21st.

=C2=A0

Thanks,

Danny

=C2=A0

[1] https://www.ietf.org/id/draft-ietf-sacm-vuln= -scenario-00.txt

=C2=A0

=C2=A0

=C2=A0

From: Jerome Athias [mailto:athiasjerome@gmail.com]
Sent: Tuesday, June 07, 2016 12:08 AM
To: Haynes, Dan <dhaynes@mitre.org> Cc: sacm@ietf.org
Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Is= sue #5 - Change Detection with an Endpoint Management Capability<= /u>

=C2=A0

This rewrite is imho better

Thanks

On Tuesday, 7 June 2016, Haynes, Dan <dhaynes@mitre= .org> wrote:

Based on the feedback, would the following rewrite o= f the paragraph help clarify things?

"In many cases, the endpoint information...Under certain deployment sc= enarios, as
the vulnerability management capability processes vulnerability detection d= ata over
time, the endpoint management capability may learn about additional detecti= on
information that it was previously not collecting and push that information= to the
vulnerability management capability where it can support future assessments= . The
pushing of this data may potentially be driven by some trigger (e.g., chang= e
in software inventory, policy, network connectivity status, etc.)."
While this potentially creates a coupling between the vulnerability managem= ent capability and the endpoint management capability, as written, I think = it will be left to the implementer of those capabilities to decide.=C2=A0 I= think the point is just that you could do something like this to improve the vulnerability assessment.

If we still don't have consensus on this, another approach might be to = just remove this text all together as I don't think doing so would prec= lude an implementer from supporting functionality like this in their produc= t.

Thoughts?

Thanks,

Danny

> -----Original Message-----
> From: Jerome Athias [mailto:athiasjerome@gmail.com]
> Sent: Saturday, June 04, 2016 2:49 AM
> To: Haynes, Dan <dhaynes@mitre.org>
> Cc: sacm@ietf.org
> Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issu= e #5
> - Change Detection with an Endpoint Management Capability
>
> While the scenario provided by Adam is valid, if your concern is that = "the
> information beyond that" would be "supplemental endpoint
> information":
> I don't see a scenario where an endpoint management capability wou= ld have
> to push -supplemental- information to the vulnerability assessment
> capability (what would the vulnerability assessment capability do with=
> 'unknown' additional information)
>
> So I think the issue is to change "the information beyond that&qu= ot; to something
> like "the updated information"
>
>
>
> 2016-05-18 16:15 GMT+03:00 Haynes, Dan <dhaynes@mitre.org>= ;:
> > During yesterday=E2=80=99s virtual interim meeting, we discussed = various open
> > issues with respect to the Vulnerability Assessment Scenario [1] = as a
> > result of feedback that we received on the draft which you can se= e
> > here [2][3].=C2=A0 The slide=E2=80=99s from the meeting can be fo= und here [4].
> >
> >
> >
> > One issue that we didn=E2=80=99t have a chance to discuss because= we ran out
> > of time was whether or not an endpoint management capability has = the
> > ability to push supplemental endpoint information to the vulnerab= ility
> > assessment capability.=C2=A0 This question came out of a review o= f the
> > following text from the Vulnerability Assessment Scenario (specif= ically the
> last sentence).
> >
> >
> >
> > =E2=80=9CIn many cases, the endpoint information needed to determ= ine an
> > endpoint=E2=80=99s vulnerability status will have been previously=
> >
> > collected by the Endpoint Management Capability and available in = a
> > Repository. However, in other cases, the necessary
> >
> > endpoint information will not be readily available in a Repositor= y and
> > a targeted collection will be necessary.=C2=A0 Of course,
> >
> > an implementation of an endpoint management capability may prefer= to
> > enable operators to perform targeted collection under
> >
> > certain circumstances, even when sufficient information can be > > provided by the endpoint management capability (e.g. there
> >
> > may be freshness requirements for information). Targeted collecti= on of
> > endpoint information for the purpose of vulnerability
> >
> > assessment does not necessarily need to be a pull by the vulnerab= ility
> > assessment capability.=C2=A0 Under certain deployment
> >
> > scenarios, once the necessary detection information is known, the=
> > information beyond that which is available in the endpoint
> >
> > management capability can be pushed to the vulnerability assessme= nt
> > capability by the endpoint whenever that information
> >
> > changes.=E2=80=9D
> >
> >
> >
> > Our main question is whether or not pushing information from the<= br> > > endpoint management capability to the vulnerability assessment > > capability is actually possible because it would not necessarily = know
> > what information it needs to push prior to the server requesting = it
> > (in which case it is probably considered a pull)?=C2=A0 Is there = a
> > situation where the endpoint would know, in advance, what additio= nal
> > information is needed for an assessment without a server requesti= ng it?
> >
> >
> >
> > If you have any thoughts on this issue, please provide feedback b= y May
> 31st.
> > We are planning to have an updated version of the scenario for Ju= ne 8th.
> >
> >
> >
> > Thanks,
> >
> > Danny
> >
> >
> >
> > [1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/
> >
> > [2] https://github.com/sacmwg/vulnerability-scenario/pull/3
> >
> > [3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html
> >
> > [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/
> > (looks like the slides are not available just yet, but, I suspect= they
> > should be
> > soon)
> >
> >
> >
> >
> > _______________________________________________
> > sacm mailing list
> > sacm@ietf.org
> > https://www.ietf.org/mailman/listinfo/sacm
> >

--001a113d16365550a6053587b7c1-- From nobody Sat Jun 18 04:32:52 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B0C5812D0C4 for ; Sat, 18 Jun 2016 04:32:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.326 X-Spam-Level: X-Spam-Status: No, score=-8.326 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jZlcr515FKzl for ; Sat, 18 Jun 2016 04:32:47 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 7395512D0B1 for ; Sat, 18 Jun 2016 04:32:46 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-2ubuntu2.1) with ESMTP id u5IBWfZ6031169 (version=TLSv1/SSLv3 cipher=AES256-SHA256 bits=256 verify=NOT) for ; Sat, 18 Jun 2016 13:32:43 +0200 Received: from [192.168.16.50] (134.102.43.163) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.294.0; Sat, 18 Jun 2016 13:32:36 +0200 To: References: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> From: Henk Birkholz Message-ID: <57653152.4010702@sit.fraunhofer.de> Date: Sat, 18 Jun 2016 13:32:34 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.163] Archived-At: Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2016 11:32:51 -0000 This "pre-collection" could be in overlap with the already defined discovery task, which handles the un-targeted detection and re-detection of target endpoints, providing a basis for the collection task (in cases where the collector does not reside on the target endpoint). If "pre-collection" is in fact the first targeted collection and the following supplemental collections are just further targeted collections, then those are all simply collection tasks regarding a target endpoint, which are aligned in a specific sequence due to an implied workflow - which we should make explicit. At the moment, the term "collection" is associated with target endpoints. Maybe we do not want that? Maybe, a SACM component could "collect", for example, "reference values"/"could state" in the form of endpoint attributes, such as SWID provided by vendors stored in a repository? It seems to me that we are talking about: - endpoint attributes from or about a target endpoint (is-state) - endpoint attributes from a repository (could-state / should-state) - guidance (e.g. the how to collect, the where to collect from, specific sequence of tasks, etc.) In some cases, all of three of them could be the exactly same content (a stale and overused but valid example: an IP-address with subnet descriptor), but that information element can be used for all three purposes - depending on the context. It is important, I think, to specify the intended input and output of tasks - and by that what SACM components provide and consume in the end - while taking into account that three (or maybe there are more) contexts of information elements. Grüße, Henk On 06/18/2016 12:14 AM, Adam Montville wrote: > I really don’t want to be the one to bring this up, but are we > forgetting our definition of “assessment”? We borrow, and expand upon, > the term from RFC5209. Here’s what our terminology draft says: > > Assessment: Defined in [RFC5209] as “the process of collecting posture > for a set of capabilities on the endpoint (e.g. host-based firewall) > such that the appropriate validators may evaluate the posture against > compliance policy.” Within SACM the use of the term is expanded to > support other uses of collected posture (e.g. reporting, network > enforcement, vulnerability detection, license management). The phrase > “set of capabilities on the endpoint” includes: hardware and software > installed on the endpoint. > > But, in the text proposed, and in general, we are talking about > collection in the context of *pre*-assessment. So, a collection before > “the process of collecting posture…”, which seems off to me. > > Do we really mean to say, pre-evaluation? Or, do we need “pre” > anything? There is data available at the time of evaluation or there is > not. If there is not, we go grab it, or indicate that it needs to be > grabbed during the next collection opportunity, and we indicate whether > it’s something we need to grab all the time, or just this once. > > Thoughts? > > Adam > > > >> On Jun 16, 2016, at 12:15 PM, Haynes, Dan > > wrote: >> >> Off list, I received a suggested update to this text from Charles. I >> was hoping to discuss it at yesterday’s virtual interim meeting, >> however, I ran out of time. As a result, I would like to propose the >> updated text as it seemed clearer and more concise than what I had >> proposed, but, says the same thing. >> The new text would read as follows (based on the updated draft posted >> on 6/8/16 [1]). >> "Supplemental collection of endpoint information for the purposes >> of…Over time, some new pieces of information that are needed during >> common types of assessments might be identified. Pre-assessment >> collection can be reconfigured to have this information delivered >> automatically. This avoids the need for regular supplemental >> collections to gather this information during assessments, >> streamlining the assessment process. Likewise, it might be observed >> that certain information delivered during pre-assessment collection is >> rarely used. In this case, it might be useful to stop pre-assessment >> collection of this information to reduce network and processing >> overhead. Instead, supplemental collection can be used to gather this >> data on the rare occasions when it is needed." >> Please let me know your thoughts on this proposed text by Tuesday July >> 21^st . >> Thanks, >> >> Danny >> [1]https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt >> *From:*Jerome Athias [mailto:athiasjerome@gmail.com] >> *Sent:*Tuesday, June 07, 2016 12:08 AM >> *To:*Haynes, Dan > >> *Cc:*sacm@ietf.org >> *Subject:*Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario >> Issue #5 - Change Detection with an Endpoint Management Capability >> This rewrite is imho better >> Thanks >> >> On Tuesday, 7 June 2016, Haynes, Dan > > wrote: >> >> Based on the feedback, would the following rewrite of the >> paragraph help clarify things? >> >> "In many cases, the endpoint information...Under certain >> deployment scenarios, as >> the vulnerability management capability processes vulnerability >> detection data over >> time, the endpoint management capability may learn about >> additional detection >> information that it was previously not collecting and push that >> information to the >> vulnerability management capability where it can support future >> assessments. The >> pushing of this data may potentially be driven by some trigger >> (e.g., change >> in software inventory, policy, network connectivity status, etc.)." >> >> While this potentially creates a coupling between the >> vulnerability management capability and the endpoint management >> capability, as written, I think it will be left to the implementer >> of those capabilities to decide. I think the point is just that >> you could do something like this to improve the vulnerability >> assessment. >> >> If we still don't have consensus on this, another approach might >> be to just remove this text all together as I don't think doing so >> would preclude an implementer from supporting functionality like >> this in their product. >> >> Thoughts? >> >> Thanks, >> >> Danny >> >> > -----Original Message----- >> > From: Jerome Athias [mailto:athiasjerome@gmail.com] >> > Sent: Saturday, June 04, 2016 2:49 AM >> > To: Haynes, Dan >> > Cc:sacm@ietf.org >> > Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment >> Scenario Issue #5 >> > - Change Detection with an Endpoint Management Capability >> > >> > While the scenario provided by Adam is valid, if your concern is >> that "the >> > information beyond that" would be "supplemental endpoint >> > information": >> > I don't see a scenario where an endpoint management capability >> would have >> > to push -supplemental- information to the vulnerability assessment >> > capability (what would the vulnerability assessment capability >> do with >> > 'unknown' additional information) >> > >> > So I think the issue is to change "the information beyond that" >> to something >> > like "the updated information" >> > >> > >> > >> > 2016-05-18 16:15 GMT+03:00 Haynes, Dan : >> > > During yesterday’s virtual interim meeting, we discussed >> various open >> > > issues with respect to the Vulnerability Assessment Scenario >> [1] as a >> > > result of feedback that we received on the draft which you can see >> > > here [2][3]. The slide’s from the meeting can be found here [4]. >> > > >> > > >> > > >> > > One issue that we didn’t have a chance to discuss because we >> ran out >> > > of time was whether or not an endpoint management capability >> has the >> > > ability to push supplemental endpoint information to the >> vulnerability >> > > assessment capability. This question came out of a review of the >> > > following text from the Vulnerability Assessment Scenario >> (specifically the >> > last sentence). >> > > >> > > >> > > >> > > “In many cases, the endpoint information needed to determine an >> > > endpoint’s vulnerability status will have been previously >> > > >> > > collected by the Endpoint Management Capability and available in a >> > > Repository. However, in other cases, the necessary >> > > >> > > endpoint information will not be readily available in a >> Repository and >> > > a targeted collection will be necessary. Of course, >> > > >> > > an implementation of an endpoint management capability may >> prefer to >> > > enable operators to perform targeted collection under >> > > >> > > certain circumstances, even when sufficient information can be >> > > provided by the endpoint management capability (e.g. there >> > > >> > > may be freshness requirements for information). Targeted >> collection of >> > > endpoint information for the purpose of vulnerability >> > > >> > > assessment does not necessarily need to be a pull by the >> vulnerability >> > > assessment capability. Under certain deployment >> > > >> > > scenarios, once the necessary detection information is known, the >> > > information beyond that which is available in the endpoint >> > > >> > > management capability can be pushed to the vulnerability >> assessment >> > > capability by the endpoint whenever that information >> > > >> > > changes.” >> > > >> > > >> > > >> > > Our main question is whether or not pushing information from the >> > > endpoint management capability to the vulnerability assessment >> > > capability is actually possible because it would not >> necessarily know >> > > what information it needs to push prior to the server >> requesting it >> > > (in which case it is probably considered a pull)? Is there a >> > > situation where the endpoint would know, in advance, what >> additional >> > > information is needed for an assessment without a server >> requesting it? >> > > >> > > >> > > >> > > If you have any thoughts on this issue, please provide >> feedback by May >> > 31st. >> > > We are planning to have an updated version of the scenario for >> June 8th. >> > > >> > > >> > > >> > > Thanks, >> > > >> > > Danny >> > > >> > > >> > > >> > > >> [1]https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ >> > > >> > > [2]https://github.com/sacmwg/vulnerability-scenario/pull/3 >> > > >> > > >> [3]https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html >> > > >> > > [4]https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ >> > > (looks like the slides are not available just yet, but, I >> suspect they >> > > should be >> > > soon) >> > > >> > > >> > > >> > > >> > > _______________________________________________ >> > > sacm mailing list >> > >sacm@ietf.org >> > >https://www.ietf.org/mailman/listinfo/sacm >> > > >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > From nobody Sat Jun 18 04:37:03 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAB7612D14D for ; Sat, 18 Jun 2016 04:37:02 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.326 X-Spam-Level: X-Spam-Status: No, score=-8.326 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BbIjxsPP4W4Y for ; Sat, 18 Jun 2016 04:37:01 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0A84C12D12B for ; Sat, 18 Jun 2016 04:37:00 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-2ubuntu2.1) with ESMTP id u5IBawIs031298 (version=TLSv1/SSLv3 cipher=AES256-SHA256 bits=256 verify=NOT) for ; Sat, 18 Jun 2016 13:36:59 +0200 Received: from [192.168.16.50] (134.102.43.163) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.294.0; Sat, 18 Jun 2016 13:36:53 +0200 To: References: <017a01d1c803$ccccb580$66662080$@augustcellars.com> <576458DF.7040002@sit.fraunhofer.de> <8B5E290F-209F-4097-BCEB-CD9B3BB02234@gmail.com> From: Henk Birkholz Message-ID: <57653253.2020301@sit.fraunhofer.de> Date: Sat, 18 Jun 2016 13:36:51 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: <8B5E290F-209F-4097-BCEB-CD9B3BB02234@gmail.com> Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.163] Archived-At: Subject: Re: [sacm] Is SACM based on a grid? X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2016 11:37:03 -0000 +1 for fleshing out discovery, registration and other management-plane capabilities/functions. On 06/17/2016 11:52 PM, Adam Montville wrote: > Is use of the term “grid” getting in the way? As a working group, we have let the architecture draft expire. That draft described an architecture with component discovery and registration as Henk describes. That draft also described an architecture that can be configured as a consolidation architecture, as Charles put it during the virtual interim. > > The drafts we have adopted as a working group presume a NEA architecture as a starting point, and this does not seem contrary to the spirit of our expired architecture draft, nor does it seem contrary to the content of our requirements draft. > > It seems that what we have not yet done is to satisfy discovery, registration, and probably other requirements. Such requirement may not be met by NEA’s. If not, then it’s the job of the working group to satisfy those requirements by extending NEA (at least that is implied by our adoption of, at least, the SWID over PA-TNC draft). > > Kind regards, > > Adam > > > > >> On Jun 17, 2016, at 3:09 PM, Henk Birkholz wrote: >> >> My intend was to highlight that any SACM component should be able to discovery any other SACM component and find out how to consume the data it provides. >> >> In regard to the use case of Ice Station Zebra, an example: >> There is a SACM component on the remote site. That component is unavailable/unreachable to the campus site for most of the time. But if there is connectivity, the SACM component at the remote site can register again at a broker on the campus site, publish data to the SACM domain because it is able to register and then becomes unavailable again. >> >> If a grid protocol would be used, data published in the available windows could be consumed by any other SACM component or new guidance could be discovered and then requested by the remote SACM component. >> >> If an end-to-end protocol is used, data published is transported to a single SACM component, which again can provide it to other SACM components (because this capability can be discovered and used by other SACM components). >> >> The choke-point scenario does not inhibit the use of a grid architecture, but that was actually not the point I had in mind when I mentioned the grid architecture. Maybe my words were chosen poorly. >> >> My point was: It is vital for SACM components to be able to provide data in a standardized way so that other SACM components can consume it without the mapping/parsing/homogenization overhead that is still very common at every turn. This requires to things: >> >> 1) at minimum, SACM components require a base set of standardized information elements that can be used to refer to "data of interest" in the SACM domain (which are provided by the information model). >> >> 2) the data a component provides has to be consumable by other components >> >> If a collector does not produce at least something every other component can consume, it is not a SACM component. But thats absolutely okay - if that kind of collector always comes with a counterpart that provides the functions/capabilities of a SACM component. In this case the SACM component might be a composite of sub-components? And this could be an addition to the part of the architecture that defines SACM components? >> >> >> Grüße, >> >> Henk >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > From nobody Sat Jun 18 05:16:29 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 43A6C12B039 for ; Sat, 18 Jun 2016 05:16:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XLFuJBqeagn6 for ; Sat, 18 Jun 2016 05:16:26 -0700 (PDT) Received: from mail-pf0-x22a.google.com (mail-pf0-x22a.google.com [IPv6:2607:f8b0:400e:c00::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 435A612B054 for ; Sat, 18 Jun 2016 05:16:26 -0700 (PDT) Received: by mail-pf0-x22a.google.com with SMTP id i123so35263665pfg.0 for ; Sat, 18 Jun 2016 05:16:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:subject:date:message-id:to:mime-version; bh=+MhAXfTLH1YAh5PzHKfBWE+HXLA/gzPr/W4XweZO3L4=; b=OuD1oRs0Dv7RgxZ8kv1kKqaQtL1wSczYBvOGJNIAoWl3JS1f1Jk+m0TzhvOGp/GEV+ 3wMuf4Ismc/N6I3bzFDJ6HuwRKYCNQMaaVxk5XdABOSFZBpCLccrsnjd+zhE1vyI/q63 KlYh8Raaw6jkFbLSulvFExSao69vVeXOy7Xk0nQL8ZnDyxLqgqIkKQFDfP1oKuvP6Ytu /kCPqWq+hJQOiVNoek6d61N1CPP8Li9t7Xd+FKMbjkaueAziCUdNkrIfJtcYqVfPueBG QNz3pEOP5/Lv8OYMfzoRoVVI9tQX4Jr5SrNBz3f4lUaluyIKABraLD9cuZoX15AW28ec fbow== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:date:message-id:to:mime-version; bh=+MhAXfTLH1YAh5PzHKfBWE+HXLA/gzPr/W4XweZO3L4=; b=CnR8Kz2HCQmjTk5/QDSzhsa28IjbxLc4Ux0A3eO4BMIgI39p+o44Vac5MXLkyyae3b 5WxyalTNV2XgMwR9Y7nWcmHhFbajdmbkdKRseHyq8aeCpRI8As+4vbjiooBpmO7maRm5 ZEVHsScpS6MCHxdjSn8UsjZcoplN/IJ4Lt2OrZv7IbBUUYqjXEfhbXr52lht5CJLucnu Y/7IBmK+AJoWkqKi+NNiQjtA3ut3CMNWR+Rc+APeje8DLvj3EXdWFhZNxi7eVKw2kwCQ fVJotsBRs/+z1UiMZ1HhL0/aCahaxsqdLXfdsT/RZbqgXxnPK2H3WcO4KDV7LYye+ASL 2cAA== X-Gm-Message-State: ALyK8tIHFtGf7moW1b6/zkcFmlMpC7pr+PGURac6Yai1pZTmGHhQWpddXfcP2ATzhnlPAg== X-Received: by 10.98.15.68 with SMTP id x65mr8827890pfi.66.1466252185479; Sat, 18 Jun 2016 05:16:25 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id i20sm13391522pfj.91.2016.06.18.05.16.23 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sat, 18 Jun 2016 05:16:24 -0700 (PDT) From: Adam Montville X-Pgp-Agent: GPGMail 2.6b2 Content-Type: multipart/signed; boundary="Apple-Mail=_9AD69307-053C-4A69-B67B-DB955CAB9B29"; protocol="application/pgp-signature"; micalg=pgp-sha512 Date: Sat, 18 Jun 2016 07:16:19 -0500 Message-Id: <163018D7-D88B-46F8-B7D9-5B37002B9E96@gmail.com> To: "" Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [sacm] June 2016 Virtual Interim Notes Available X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2016 12:16:28 -0000 --Apple-Mail=_9AD69307-053C-4A69-B67B-DB955CAB9B29 Content-Type: multipart/alternative; boundary="Apple-Mail=_E16F68FF-F136-4267-8ED8-DAC6DB39E05E" --Apple-Mail=_E16F68FF-F136-4267-8ED8-DAC6DB39E05E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii All: Thanks to Danny and Charles for compiling detailed notes, which are = summarized and posted here: = https://www.ietf.org/proceedings/interim/2016/06/15/sacm/minutes/minutes-i= nterim-2016-sacm-4 = Kind regards, Adam --Apple-Mail=_E16F68FF-F136-4267-8ED8-DAC6DB39E05E Content-Transfer-Encoding: 7bit Content-Type: text/html; charset=us-ascii All:

Thanks to Danny and Charles for compiling detailed notes, which are summarized and posted here: https://www.ietf.org/proceedings/interim/2016/06/15/sacm/minutes/minutes-interim-2016-sacm-4

Kind regards,

Adam
--Apple-Mail=_E16F68FF-F136-4267-8ED8-DAC6DB39E05E-- --Apple-Mail=_9AD69307-053C-4A69-B67B-DB955CAB9B29 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXZTuWAAoJEDEhyx7etgABdbIQAMuJPL4OuDXhEdO31SiAuT1b pjnq1Lv1kMQrSCVV+LSukH6rfu9i2UsOsxD1RNffMdF0g//VeI4cDfLdRJ9APSJP bwV7DxaUqkZVOUAgFKKcXC3+3nGK54QX116IAhWUVhV9dHVKAAH+UOtCcSfGz/Ah Qk164f1/gLEOlAHrbV+t1k2+38MkI+gF9muxHLtA29AhI1Ja38U9TUOXyxoMmpAC QZAIM45NuyIGi7f2Vm0H9DazZ+Z1wYX6ihQI0VniUhnpB5bDnuHTV1Hmh5fvE8U9 KGG9UYmFj1+gg42Kq3KpZy2R3R8f0uRM+6E8SR09kjkWRm/DHyeNb3YE3MKZe0HM 3T3xCMJGHHUNwgpM5uY2lImynh5+6GQ1VhaR4P/xBcwanaDQcAqIu1AGGQT5Nj9s n/w24AOU/eGkTpVDTUUoXsJsglJCsB+HFn2iE6iv05UqPKlwi1lBmBZH0B0GF88w XRJ1kSJh4nw7lzpHFIn+ZPgD8fEJ8fHXgQDHqFrn20thWuhtv9YXDiWmPTMa18KR xzbhxtN4YmaCtO/Jo6Ujq9/KB5LKl3U34KDbOfjViRXGcRa03fyxTP1ClF8nrshR i3Umk0kBPXgjvAt9Pfs9GYLpFeA+ULuQr9N4xMXh9P71owfSGg7EOpeu8H0bW+KJ ZYTSqnMxjU9jMRFQo6Dd =eG6g -----END PGP SIGNATURE----- --Apple-Mail=_9AD69307-053C-4A69-B67B-DB955CAB9B29-- From nobody Sat Jun 18 05:38:44 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B04A112D11F for ; Sat, 18 Jun 2016 05:38:41 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HKsQDAmGlYvq for ; Sat, 18 Jun 2016 05:38:39 -0700 (PDT) Received: from mail-oi0-x22b.google.com (mail-oi0-x22b.google.com [IPv6:2607:f8b0:4003:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id BB0CA12B047 for ; Sat, 18 Jun 2016 05:38:38 -0700 (PDT) Received: by mail-oi0-x22b.google.com with SMTP id p204so153047150oih.3 for ; Sat, 18 Jun 2016 05:38:38 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=2ea4700Svmkp7BEQsaMQMNHYQCvEaj0f72eSneWFQ0U=; b=Wscs8RXQUgXfyjwCJ3USGolI3XpTizlAqVQmCbSdFoeJ/6XpC7AisRhOSnyAzBE+b9 9GzjBNl2FDOZIUffvZQeiaXAnjL6UDzNTT5C6RCNRLQNfF3WcR6xoDK4T3OTRow4OqA2 2SFmn6VWD/V6H3RieCEjv6hydhzwXjuC+zWG5NDiigAbRyH7ZT8Qgi4f5F1AI9theeOw QAGaLUVp0OGw7XjvQ5wOkmZUWrxqUdN+i5up8UDtf7J3Hje4t2SVpEIXj5Hqxgj4dCm1 C2KMrccO+J09QmLgbS/sGsIB04rKNn9pxJw/lL7LuqiPyjykXzVJNcOh0gWVq8qhHx0B opew== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=2ea4700Svmkp7BEQsaMQMNHYQCvEaj0f72eSneWFQ0U=; b=LcutC8umz/3sZz3amQ0bskwTk87PwXw0yYTgJxiY1HRN3RD93TG0UTvS+JzmuJU2gk eXZpj7YcQh33FHzx8ufSsTItuKSNs77/lw4mrKwU/p89VCCxEGwRDcG5f1558omrqTK1 Mo1fiZ8557e0CU/F7b3AySNSKmRMBpU5mOX4lcw836IfpoUDVXuvcrKJtOv4MniA0Cgq vBf3UR5SA5Z1AdjpE4MRkHyMvHhty/LKnnrfmPWANtU/qcE5eLPcvbMuQXHLnpki+ZkN 73jcXVhqxwy63m9/N2+labh2XJnm82n5Qmcvl31YExSKvvBaM6sG9UQs/MhOPx1NICda cs+w== X-Gm-Message-State: ALyK8tKE2So1H4SeX3BW2DzhPxvarBc4NYKmXK06C4jvNAkikIFxsWS+CihAbzd7KP9Iqg== X-Received: by 10.202.245.129 with SMTP id t123mr3938233oih.92.1466253517740; Sat, 18 Jun 2016 05:38:37 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id h94sm3493503oth.21.2016.06.18.05.38.35 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sat, 18 Jun 2016 05:38:36 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_9969214F-42E5-4537-99B0-7D8A44732F8E"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: <9904FB1B0159DA42B0B887B7FA8119CA7520D40F@AZ-FFEXMB04.global.avaya.com> Date: Sat, 18 Jun 2016 07:38:30 -0500 Message-Id: References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> <6062111F-9C39-4C7C-B008-F7E23FED40DE@gmail.com> <9904FB1B0159DA42B0B887B7FA8119CA7520D40F@AZ-FFEXMB04.global.avaya.com> To: "Dan (Dan) Romascanu" X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Gunnar Engelbach , "" , "tony@yaanatech.com" Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2016 12:38:42 -0000 --Apple-Mail=_9969214F-42E5-4537-99B0-7D8A44732F8E Content-Type: multipart/alternative; boundary="Apple-Mail=_464D1E45-28CD-4866-9269-CDF48555F28D" --Apple-Mail=_464D1E45-28CD-4866-9269-CDF48555F28D Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi. Because we would like to move our requirements through IESG, I = would like to drive this to ground. There are three things that = we=E2=80=99re talking about doing when it comes to selecting a data = model for software identification: 1) Extensibility 2) Accessibility (not cost prohibitive) 3) Completeness There is a data model requirement for (1) - DM-014 Attribute = Extensibility. There does not seem to be a requirement for = accessibility (2) or completeness (3). My question is this: Do we need such requirements? I would assert that we do not. Accessibility is something that we will = always judge by virtue of the fact that we operate within the culture of = the IETF. Completeness is not something we need to put into the = requirements draft by virtue of DM-002 Data Model Structure, which = indicates that a data model can be structured monolithically or composed = of modules/sub-modules=E2=80=94this seems to imply that we could be ok = with =E2=80=9Ccompleteness=E2=80=9D potentially coming from more than = one place. Thoughts? Adam > On Jun 13, 2016, at 9:12 AM, Romascanu, Dan (Dan) = wrote: >=20 > Re: Requirements =E2=80=93 is this not what = https://datatracker.ietf.org/doc/draft-ietf-sacm-requirements/ = is = about? Maybe it needs an update. >=20 > Regards, >=20 > Dan >=20 >=20 > From: sacm [mailto:sacm-bounces@ietf.org = ] On Behalf Of Adam Montville > Sent: Friday, June 10, 2016 2:25 PM > To: Gunnar Engelbach > Cc: >; tony@yaanatech.com = > Subject: Re: [sacm] Call for adoption of = draft-coffin-sacm-nea-swid-patnc as a SACM WG document >=20 > This seems like a fine approach. >=20 > As part of that third item, I=E2=80=99d like to get requirements from = our own drafts as well, starting perhaps with the vulnerability = scenario, but also considering our requirements and other drafts. >=20 >=20 >=20 > On Jun 9, 2016, at 7:44 PM, Gunnar Engelbach = > wrote: >=20 >=20 >=20 > Hey Tony, funny thing that you should say that. You seem to have a = better awareness of the other efforts going on out there than I do, so I = could use your help in identifying other good candidates and what will = be necessary to support as many of them as possible. >=20 > What I'd really like to do is take a more formal approach -- gather = some requirements and then see from among the existing efforts which is = the best from among those that are good enough. If any. >=20 > But first is a matter of setting the requirements. Stated generally, = I really only have three: >=20 > 1) Is extensible -- as a fork outside of the current owner, if = necessary, to be sure it continues to meet SACM needs without relying on = the good graces of the current owner >=20 > 2) Readily accessible (eg., spec is not cost prohibitive for any = users) >=20 > 3) The most complete (that is, closest to being able to represent = the other tag types without loss of data or shoe-horning data into = fields that weren't really meant for that type of data) >=20 >=20 > I'm sure Charles, et al, will have other requirements, so feel free to = chime in. However, I think the simpler and more informal we can keep = this list the quicker we can grind through it. >=20 >=20 > --gun >=20 >=20 >=20 >=20 > On 6/9/2016 2:33 PM, Tony Rutkowski wrote: > Hi Adam, >=20 > A good solution. Charles and Gunnar should also engage > in some proactive outreach. Simply stating that "no other > solutions to the problem of software identification have > been submitted" is preposterous when there are so many > out there. IMHO, one of the long-standing problems with > SACM is its institutional and participatory insularity in an > arena where so many almost identical activities are occurring > in other venues where there is far greater industry participation. > Ignoring them diminishes the value of whatever SACM > accomplishes. >=20 > --tony >=20 > On 2016-06-09 3:47 PM, Adam Montville wrote: > All: >=20 > After several on-list discussions, the last virtual interim, and the = discussions surrounding this call for adoption, the chairs acknowledge = that there are some key concerns with this draft, but also see that = there is rough consensus for adoption. We additionally note that no = other solutions to the problem of software identification have been = submitted to the working group [1]. >=20 > Because the topic of software identification, and SWID in particular, = appears to be a contentious one, we are designating Charles Schmidt and = Gunnar Engelbach as editors of the working group draft [2]. We believe = that Charles and Gunnar will bring the necessary balance to this draft, = so that the key concerns are sufficiently addressed. >=20 > Kind regards, >=20 > Adam & Karen >=20 > [1] This draft adoption does not preclude future alternative = submissions > [2] Note that original authors will remain authors, but Charles and = Gunnar will hold the pen. >=20 >=20 > On May 17, 2016, at 11:21 AM, Karen O'Donoghue > wrote: >=20 > Folks, >=20 > As discussed during our last couple of meetings, this is the official = call for adoption of = https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ = as = a SACM working group document. >=20 > Please reply with any comments or concerns along your support of this = action to the mailing list. >=20 > Thanks, > Karen and Adam > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = >=20 >=20 >=20 >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = >=20 >=20 >=20 >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = >=20 >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = --Apple-Mail=_464D1E45-28CD-4866-9269-CDF48555F28D Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi.  Because we would like to move our requirements = through IESG, I would like to drive this to ground.   There are = three things that we=E2=80=99re talking about doing when it comes to = selecting a data model for software identification:

1) Extensibility
2) = Accessibility (not cost prohibitive)
3) = Completeness

There is a data model requirement for (1) - DM-014 Attribute = Extensibility.  There does not seem to be a requirement for = accessibility (2) or completeness (3).  

My question is this: Do we need such = requirements?

I = would assert that we do not.  Accessibility is something that we = will always judge by virtue of the fact that we operate within the = culture of the IETF.  Completeness is not something we need to put = into the requirements draft by virtue of DM-002 Data Model Structure, = which indicates that a data model can be structured monolithically or = composed of modules/sub-modules=E2=80=94this seems to imply that we = could be ok with =E2=80=9Ccompleteness=E2=80=9D potentially coming from = more than one place.  

Thoughts?

Adam


On = Jun 13, 2016, at 9:12 AM, Romascanu, Dan (Dan) <dromasca@avaya.com> = wrote:

Re: Requirements =E2=80=93 is this not = what https://datatracker.ietf.org/doc/draft-ietf-sacm-requirements/<= /a> is about? Maybe it = needs an update.
 
 
 
From: sacm [mailto:sacm-bounces@ietf.org] On Behalf = Of Adam = Montville
Sent: Friday, June 10, 2016 2:25 = PM
To: Gunnar Engelbach
Cc: <sacm@ietf.org>; tony@yaanatech.com
Subject: Re: [sacm] Call for = adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document
 
This seems like a fine approach.
 
As part of that third item, I=E2=80=99d = like to get requirements from our own drafts as well, starting perhaps = with the vulnerability scenario, but also considering our requirements = and other drafts.  
 
 
 
On = Jun 9, 2016, at 7:44 PM, Gunnar Engelbach <gunnar.engelbach@threatguard.com> wrote:
 



Hey = Tony, funny thing that you should say that.  You seem to have a = better awareness of the other efforts going on out there than I do, so I = could use your help in identifying other good candidates and what will = be necessary to support as many of them as possible.

What I'd really like to do is take a more formal approach -- = gather some requirements and then see from among the existing efforts = which is the best from among those that are good enough.  If = any.

But first is a matter of setting the = requirements.  Stated generally, I really only have three:

  1)  Is extensible -- as a fork = outside of the current owner, if necessary, to be sure it continues to = meet SACM needs without relying on the good graces of the current = owner

  2)  Readily accessible = (eg., spec is not cost prohibitive for any users)

  3)  The most complete (that is, closest to being = able to represent the other tag types without loss of data or = shoe-horning data into fields that weren't really meant for that type of = data)


I'm sure Charles, et = al, will have other requirements, so feel free to chime in.  = However, I think the simpler and more informal we can keep this list the = quicker we can grind through it.


--gun



On 6/9/2016 2:33 PM, Tony Rutkowski wrote:

Hi Adam,

A good solution.  = Charles and Gunnar should also engage
in some proactive = outreach.  Simply stating that "no other 
solutions to = the problem of software identification have 
been = submitted" is preposterous when there are so many
out = there.  IMHO, one of the long-standing problems with
SACM is its institutional and participatory insularity in = an 
arena = where so many almost identical activities are occurring 
in other = venues where there is far greater industry participation.
Ignoring them diminishes the value of whatever SACM 
accomplishes.

--tony

On 2016-06-09 3:47 PM, Adam Montville wrote:
All:
 
After several on-list discussions, the last virtual = interim, and the discussions surrounding this call for adoption, the = chairs acknowledge that there are some key concerns with this draft, but = also see that there is rough consensus for adoption.  We = additionally note that no other solutions to the problem of software = identification have been submitted to the working group [1].
 
Because the topic of software = identification, and SWID in particular, appears to be a contentious one, = we are designating Charles Schmidt and Gunnar Engelbach as editors of = the working group draft [2].  We believe that Charles and Gunnar = will bring the necessary balance to this draft, so that the key concerns = are sufficiently addressed.
 
Kind regards,
 
Adam & Karen
 
[1] This draft adoption does not preclude future = alternative submissions
[2] Note that = original authors will remain authors, but Charles and Gunnar will hold = the pen.
 
 
On May 17, 2016, at = 11:21 AM, Karen O'Donoghue <odonoghue@isoc.org> wrote:
 
Folks, 
 
As discussed during our last couple of = meetings, this is the official call for adoption of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-pat= nc/ as a SACM working group document. 
 
Please reply with any comments or = concerns along your support of this action to the mailing = list. 
 
Thanks,
Karen and Adam
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm




_______________________________________________
sacm mailing =
list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm




_______________________________________________
sacm mailing =
list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm
 
 
_______________________________________________
sacm mailing = list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_464D1E45-28CD-4866-9269-CDF48555F28D-- --Apple-Mail=_9969214F-42E5-4537-99B0-7D8A44732F8E Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXZUDKAAoJEDEhyx7etgABJ6gQAIWnrMD82G5vrbIxfNIPH5NH PxuCDLUWTg4YofZyvW7ZYPGtFCg0Iemv/RO6wlthkbDGKI2eP9IQH5s2ZF+S4J4Q KxydtFbP8bZJPhfzEGn5CGBUJTAVjcocO3EIZ6l0GtVN2IPW+NHmhzWM9+9ggcxp TmXyFY7GvXTtsjcx1Zmpy/8OZkDUKsMcVAVo+jMI0xpOdJKj0S/2KAUYMa01iM6p zrT4a1a5C063yU258ptlKsBOVwKyjqtm5AKcdADARf+GjXj326o++AFcyLwaRqTM psOLJ5hHs/IZpIxRUlO6GKe7KbcOGpVbqqNz0mH3WEsNJ7OlpkfNYDTfAi/J7zDN xiR+SJPSqwGnsWw4o+NJIZsb8f6owna6aoW9efWtiHKSBno1oteffvkuafxX1lf9 mu8jsjcl2qvqOTkqBFVNN5Rnn8dwiNyz4Yw5Jt9Z+MyvWgT0DUSvznwHZW4//Q5m Sc1g6rwu0raphQ7jVNBlhJ3SYOW7Q4KxxW8eF7Jb/kezKA6+kkw+aJwOTVHpE+4P X+5lRZBXYwxrhS2nq5FPBbS1/12mjqW3YiryvwEnEDjCr5xRS2WvrH9XfpQVaT/y dTXWYaBjl2PZghpTAFs/8fyGUnmZ5uNtzGdcC8qN7eY/vQ7T+RjR3WBLOYTHPtg9 EOJ3Ec4ltQEjSlxeu7dG =049o -----END PGP SIGNATURE----- --Apple-Mail=_9969214F-42E5-4537-99B0-7D8A44732F8E-- From nobody Sat Jun 18 06:41:59 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 71BD812D1A2 for ; Sat, 18 Jun 2016 06:41:57 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9cOwLNLWilHC for ; Sat, 18 Jun 2016 06:41:54 -0700 (PDT) Received: from mail-oi0-x22c.google.com (mail-oi0-x22c.google.com [IPv6:2607:f8b0:4003:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2B28512D091 for ; Sat, 18 Jun 2016 06:41:54 -0700 (PDT) Received: by mail-oi0-x22c.google.com with SMTP id p204so154349025oih.3 for ; Sat, 18 Jun 2016 06:41:54 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=vO367N0nrRLnPsy5B/jH6kljiwyPwlxsuur/r+lYFzU=; b=p9wXqEiRcqzIunbWNQzEigoi2c2/AbX8l/nITgIdjXzs6hTEnWKo84tP0jBU3BiOhs aYlpsga94E8ppmveIp5tCFZjb9P9SRtTPQ3FXiArgjIElfVeLSYnuxmcnKMfdr/Kvdag Ymax9lsNAB2qjMMd+DCLdeWOjOpF+U3JbDfmYaH3A83ECTzrkNjEs4ZjbDOStOQ3sezE tzD6psv3peN9/RcZdah6fLy4ohPBi4uZWwcfaDbnYWgKkp76jHksEhVK/+nyKOb+O6Eb S0t/qsNF85Q21RuimojlQg3Mq9+ESpv0r9rkkJMNCOlV5ImtmeYgUiMchxQdJY+y8wRW f7ew== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=vO367N0nrRLnPsy5B/jH6kljiwyPwlxsuur/r+lYFzU=; b=W2p9Dtm1B74rmoXHdUAmEjotcZ1TkcZzfpQy1uQPmisJcWnms55RaCRLdkQEZ2UiSI Fp0DibpTPifN56zvdan3SSspXm6nZPYN3aA9lQHBVybwwVopoBpWUIghmBrO8uK7CHOG 9Jp0o86GGJYc9r+lenoF/zN7uz1q7PlnVyV7+XYcOga++B+uhn8g/RdCHneHTK9DBGN8 Fbhp5OtWxh1702db6HOyfIJqxgNSgjPB7o1Fdeb1vDs9/CatsCXKLIHMWsysjLdxb3P/ x/foF3ivSDSYZnglxHB/taky3mkIt5MnBgxzIWAFTAdra/0s9hJBaxLAU9dnDG81VJ4G KphA== X-Gm-Message-State: ALyK8tIAIEqH/iSktJkilsQeBk6e5u1LLkXojDlqWVE12Ygbc51OXeaCKfwCZOBKzs8+6gckyG97D0K5H1SY7g== X-Received: by 10.202.224.87 with SMTP id x84mr3502492oig.57.1466257313328; Sat, 18 Jun 2016 06:41:53 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.11.240 with HTTP; Sat, 18 Jun 2016 06:41:33 -0700 (PDT) In-Reply-To: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> References: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> From: Ira McDonald Date: Sat, 18 Jun 2016 09:41:33 -0400 Message-ID: To: Adam Montville , Ira McDonald Content-Type: multipart/alternative; boundary=001a113d38804f750705358da2f0 Archived-At: Cc: Jerome Athias , "Haynes, Dan" , "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2016 13:41:57 -0000 --001a113d38804f750705358da2f0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, I share Adam's distaste for "pre-" anything. Perhaps "external collection" - defined as simply using any non-SACM protocol to forward endpoint posture to a SACM Collector (in this case, e.g., a NEA Server)? Cheers, - Ira Ira McDonald (Musician / Software Architect) Co-Chair - TCG Trusted Mobility Solutions WG Chair - Linux Foundation Open Printing WG Secretary - IEEE-ISTO Printer Working Group Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG IETF Designated Expert - IPP & Printer MIB Blue Roof Music / High North Inc http://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com Winter 579 Park Place Saline, MI 48176 734-944-0094 Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 On Fri, Jun 17, 2016 at 6:14 PM, Adam Montville wrote: > I really don=E2=80=99t want to be the one to bring this up, but are we fo= rgetting > our definition of =E2=80=9Cassessment=E2=80=9D? We borrow, and expand up= on, the term from > RFC5209. Here=E2=80=99s what our terminology draft says: > > Assessment: Defined in [RFC5209] as =E2=80=9Cthe process of collecting po= sture for > a set of capabilities on the endpoint (e.g. host-based firewall) such tha= t > the appropriate validators may evaluate the posture against compliance > policy.=E2=80=9D Within SACM the use of the term is expanded to support = other uses > of collected posture (e.g. reporting, network enforcement, vulnerability > detection, license management). The phrase =E2=80=9Cset of capabilities = on the > endpoint=E2=80=9D includes: hardware and software installed on the endpoi= nt. > > But, in the text proposed, and in general, we are talking about collectio= n > in the context of *pre*-assessment. So, a collection before =E2=80=9Cthe= process > of collecting posture=E2=80=A6=E2=80=9D, which seems off to me. > > Do we really mean to say, pre-evaluation? Or, do we need =E2=80=9Cpre=E2= =80=9D anything? > There is data available at the time of evaluation or there is not. If > there is not, we go grab it, or indicate that it needs to be grabbed duri= ng > the next collection opportunity, and we indicate whether it=E2=80=99s som= ething we > need to grab all the time, or just this once. > > Thoughts? > > Adam > > > > On Jun 16, 2016, at 12:15 PM, Haynes, Dan wrote: > > Off list, I received a suggested update to this text from Charles. I was > hoping to discuss it at yesterday=E2=80=99s virtual interim meeting, howe= ver, I ran > out of time. As a result, I would like to propose the updated text as it > seemed clearer and more concise than what I had proposed, but, says the > same thing. > > The new text would read as follows (based on the updated draft posted on > 6/8/16 [1]). > > "Supplemental collection of endpoint information for the purposes of=E2= =80=A6Over > time, some new pieces of information that are needed during common types = of > assessments might be identified. Pre-assessment collection can be > reconfigured to have this information delivered automatically. This avoid= s > the need for regular supplemental collections to gather this information > during assessments, streamlining the assessment process. Likewise, it mig= ht > be observed that certain information delivered during pre-assessment > collection is rarely used. In this case, it might be useful to stop > pre-assessment collection of this information to reduce network and > processing overhead. Instead, supplemental collection can be used to gath= er > this data on the rare occasions when it is needed." > > Please let me know your thoughts on this proposed text by Tuesday July 21 > st. > > Thanks, > > Danny > > [1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt > > > > *From:* Jerome Athias [mailto:athiasjerome@gmail.com > ] > *Sent:* Tuesday, June 07, 2016 12:08 AM > *To:* Haynes, Dan > *Cc:* sacm@ietf.org > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > #5 - Change Detection with an Endpoint Management Capability > > This rewrite is imho better > Thanks > > On Tuesday, 7 June 2016, Haynes, Dan wrote: > > Based on the feedback, would the following rewrite of the paragraph help > clarify things? > > "In many cases, the endpoint information...Under certain deployment > scenarios, as > the vulnerability management capability processes vulnerability detection > data over > time, the endpoint management capability may learn about additional > detection > information that it was previously not collecting and push that > information to the > vulnerability management capability where it can support future > assessments. The > pushing of this data may potentially be driven by some trigger (e.g., > change > in software inventory, policy, network connectivity status, etc.)." > > While this potentially creates a coupling between the vulnerability > management capability and the endpoint management capability, as written,= I > think it will be left to the implementer of those capabilities to decide. > I think the point is just that you could do something like this to improv= e > the vulnerability assessment. > > If we still don't have consensus on this, another approach might be to > just remove this text all together as I don't think doing so would preclu= de > an implementer from supporting functionality like this in their product. > > Thoughts? > > Thanks, > > Danny > > > -----Original Message----- > > From: Jerome Athias [mailto:athiasjerome@gmail.com] > > Sent: Saturday, June 04, 2016 2:49 AM > > To: Haynes, Dan > > Cc: sacm@ietf.org > > Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > #5 > > - Change Detection with an Endpoint Management Capability > > > > While the scenario provided by Adam is valid, if your concern is that > "the > > information beyond that" would be "supplemental endpoint > > information": > > I don't see a scenario where an endpoint management capability would ha= ve > > to push -supplemental- information to the vulnerability assessment > > capability (what would the vulnerability assessment capability do with > > 'unknown' additional information) > > > > So I think the issue is to change "the information beyond that" to > something > > like "the updated information" > > > > > > > > 2016-05-18 16:15 GMT+03:00 Haynes, Dan : > > > During yesterday=E2=80=99s virtual interim meeting, we discussed vari= ous open > > > issues with respect to the Vulnerability Assessment Scenario [1] as a > > > result of feedback that we received on the draft which you can see > > > here [2][3]. The slide=E2=80=99s from the meeting can be found here = [4]. > > > > > > > > > > > > One issue that we didn=E2=80=99t have a chance to discuss because we = ran out > > > of time was whether or not an endpoint management capability has the > > > ability to push supplemental endpoint information to the vulnerabilit= y > > > assessment capability. This question came out of a review of the > > > following text from the Vulnerability Assessment Scenario > (specifically the > > last sentence). > > > > > > > > > > > > =E2=80=9CIn many cases, the endpoint information needed to determine = an > > > endpoint=E2=80=99s vulnerability status will have been previously > > > > > > collected by the Endpoint Management Capability and available in a > > > Repository. However, in other cases, the necessary > > > > > > endpoint information will not be readily available in a Repository an= d > > > a targeted collection will be necessary. Of course, > > > > > > an implementation of an endpoint management capability may prefer to > > > enable operators to perform targeted collection under > > > > > > certain circumstances, even when sufficient information can be > > > provided by the endpoint management capability (e.g. there > > > > > > may be freshness requirements for information). Targeted collection o= f > > > endpoint information for the purpose of vulnerability > > > > > > assessment does not necessarily need to be a pull by the vulnerabilit= y > > > assessment capability. Under certain deployment > > > > > > scenarios, once the necessary detection information is known, the > > > information beyond that which is available in the endpoint > > > > > > management capability can be pushed to the vulnerability assessment > > > capability by the endpoint whenever that information > > > > > > changes.=E2=80=9D > > > > > > > > > > > > Our main question is whether or not pushing information from the > > > endpoint management capability to the vulnerability assessment > > > capability is actually possible because it would not necessarily know > > > what information it needs to push prior to the server requesting it > > > (in which case it is probably considered a pull)? Is there a > > > situation where the endpoint would know, in advance, what additional > > > information is needed for an assessment without a server requesting i= t? > > > > > > > > > > > > If you have any thoughts on this issue, please provide feedback by Ma= y > > 31st. > > > We are planning to have an updated version of the scenario for June > 8th. > > > > > > > > > > > > Thanks, > > > > > > Danny > > > > > > > > > > > > [1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ > > > > > > [2] https://github.com/sacmwg/vulnerability-scenario/pull/3 > > > > > > [3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html > > > > > > [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ > > > (looks like the slides are not available just yet, but, I suspect the= y > > > should be > > > soon) > > > > > > > > > > > > > > > _______________________________________________ > > > sacm mailing list > > > sacm@ietf.org > > > https://www.ietf.org/mailman/listinfo/sacm > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > --001a113d38804f750705358da2f0 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi,

I share Adam's distast= e for "pre-" anything.

Perhaps "external collec= tion" - defined as simply using any non-SACM
protocol to forward e= ndpoint posture to a SACM Collector (in this case,
e.g., a NE= A Server)?

Cheers,
- Ira


Ira McDonald (Mu= sician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions W= G
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Pri= nter Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol W= G
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / Hi= gh North Inc
http://sites.google.com/site/b= lueroofmusic
http://sites.google.com/sit= e/highnorthinc
mailto: blueroofmusic@gmail.com
Winter=C2=A0 579 Park Place= =C2=A0 Saline, MI=C2=A0 48176=C2=A0 734-944-0094
Summer=C2=A0 PO Box 221= =C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434


On Fri, Jun 17, 2016 at 6:14 PM, Adam Montvi= lle <adam.w.montville@gmail.com> wrote:
I really do= n=E2=80=99t want to be the one to bring this up, but are we forgetting our = definition of =E2=80=9Cassessment=E2=80=9D?=C2=A0 We borrow, and expand upo= n, the term from RFC5209.=C2=A0 Here=E2=80=99s what our terminology draft s= ays:

Assessment: Defined in [RFC5209] as =E2=80=9C= the process of collecting posture for a set of capabilities on the endpoint= (e.g. host-based firewall) such that the appropriate validators may evalua= te the posture against compliance policy.=E2=80=9D =C2=A0Within SACM the us= e of the term is expanded to support other uses of collected posture (e.g. = reporting, network enforcement, vulnerability detection, license management= ).=C2=A0 The phrase =E2=80=9Cset of capabilities on the endpoint=E2=80=9D i= ncludes: hardware and software installed on the endpoint.

But, in the text proposed, and in general, we are talking about col= lection in the context of *pre*-assessment.=C2=A0 So, a collection before = =E2=80=9Cthe process of collecting posture=E2=80=A6=E2=80=9D, which seems o= ff to me.

Do we really mean to say, pre-evaluation= ?=C2=A0 Or, do we need =E2=80=9Cpre=E2=80=9D anything?=C2=A0 There is data = available at the time of evaluation or there is not.=C2=A0 If there is not,= we go grab it, or indicate that it needs to be grabbed during the next col= lection opportunity, and we indicate whether it=E2=80=99s something we need= to grab all the time, or just this once.

Thoughts= ?

A= dam



On Jun 16, 2016, at 12:15 PM, Hayn= es, Dan <dhaynes@= mitre.org> wrote:

Off list, I received a suggest= ed update to this text from Charles.=C2=A0 I was hoping to discuss it at ye= sterday=E2=80=99s virtual interim meeting, however, I ran out of time.=C2= =A0 As a result, I would like to propose the updated text as it seemed clea= rer and more concise than what I had proposed, but, says the same thing.=
=C2=A0=
The new text would read as foll= ows (based on the updated draft posted on 6/8/16 [1]).=
=C2=A0
"Supplemental collection of endpoint informa= tion for the purposes of=E2=80=A6Over time, some new pieces of information = that are needed during common types of assessments might be identified. Pre= -assessment collection can be reconfigured to have this information deliver= ed automatically. This avoids the need for regular supplemental collections= to gather this information during assessments, streamlining the assessment= process. Likewise, it might be observed that certain information delivered= during pre-assessment collection is rarely used. In this case, it might be= useful to stop pre-assessment collection of this information to reduce net= work and processing overhead. Instead, supplemental collection can be used = to gather this data on the rare occasions when it is needed."
=C2=A0
Please let me know your thoughts on t= his proposed text by Tuesday July 21st.
=C2=A0
Thanks,

Danny
=C2=A0
=C2=A0
=C2=A0
= =C2=A0
From:<= span style=3D"font-size:11pt;font-family:Calibri,sans-serif">=C2=A0Jerome Athias [mailto:athiasjerome@gmail.com]=C2=A0
Sent:<= span>=C2=A0Tuesday, June 07, 2016 12:08 AM
To:=C2=A0= Haynes, Dan <dhaynes@mitre.org>
Cc:=C2=A0sacm@ietf.org
Subject:=C2=A0Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario I= ssue #5 - Change Detection with an Endpoint Management Capability=
=C2=A0
This rewrite is imho better
Thanks

On Tuesday, 7 June 2016, Haynes, Da= n <dhaynes@mitre.org> wrote:<= u>
Based on the feedback, would= the following rewrite of the paragraph help clarify things?

"I= n many cases, the endpoint information...Under certain deployment scenarios= , as
the vulnerability management capability processes vulnerability det= ection data over
time, the endpoint management capability may learn abou= t additional detection
information that it was previously not collecting= and push that information to the
vulnerability management capability wh= ere it can support future assessments. The
pushing of this data may pote= ntially be driven by some trigger (e.g., change
in software inventory, p= olicy, network connectivity status, etc.)."

While this potentia= lly creates a coupling between the vulnerability management capability and = the endpoint management capability, as written, I think it will be left to = the implementer of those capabilities to decide.=C2=A0 I think the point is= just that you could do something like this to improve the vulnerability as= sessment.

If we still don't have consensus on this, another appr= oach might be to just remove this text all together as I don't think do= ing so would preclude an implementer from supporting functionality like thi= s in their product.

Thoughts?

Thanks,

Danny

>= ; -----Original Message-----
> From: Jerome Athias [mailto:athiasj= erome@gmail.com]
> Sent: Saturday, June 04, 2016 2:49 AM
> = To: Haynes, Dan <dhaynes@mitre.org>
> Cc:=C2=A0sacm@ietf.org
> Subject: Re: [sacm] FOR REVIEW: Vulnerabil= ity Assessment Scenario Issue #5
> - Change Detection with an Endpoin= t Management Capability
>
> While the scenario provided by Adam= is valid, if your concern is that "the
> information beyond tha= t" would be "supplemental endpoint
> information":
= > I don't see a scenario where an endpoint management capability wou= ld have
> to push -supplemental- information to the vulnerability ass= essment
> capability (what would the vulnerability assessment capabil= ity do with
> 'unknown' additional information)
>
&g= t; So I think the issue is to change "the information beyond that"= ; to something
> like "the updated information"
>
= >
>
> 2016-05-18 16:15 GMT+03:00 Haynes, Dan <dhaynes@= mitre.org>:
> > During yesterday=E2=80=99s virtual interim = meeting, we discussed various open
> > issues with respect to the = Vulnerability Assessment Scenario [1] as a
> > result of feedback = that we received on the draft which you can see
> > here [2][3].= =C2=A0 The slide=E2=80=99s from the meeting can be found here [4].
> = >
> >
> >
> > One issue that we didn=E2=80=99= t have a chance to discuss because we ran out
> > of time was whet= her or not an endpoint management capability has the
> > ability t= o push supplemental endpoint information to the vulnerability
> > = assessment capability.=C2=A0 This question came out of a review of the
&= gt; > following text from the Vulnerability Assessment Scenario (specifi= cally the
> last sentence).
> >
> >
> >> > =E2=80=9CIn many cases, the endpoint information needed to deter= mine an
> > endpoint=E2=80=99s vulnerability status will have been= previously
> >
> > collected by the Endpoint Management = Capability and available in a
> > Repository. However, in other ca= ses, the necessary
> >
> > endpoint information will not = be readily available in a Repository and
> > a targeted collection= will be necessary.=C2=A0 Of course,
> >
> > an implement= ation of an endpoint management capability may prefer to
> > enabl= e operators to perform targeted collection under
> >
> > = certain circumstances, even when sufficient information can be
> >= provided by the endpoint management capability (e.g. there
> >> > may be freshness requirements for information). Targeted collect= ion of
> > endpoint information for the purpose of vulnerability> >
> > assessment does not necessarily need to be a pull = by the vulnerability
> > assessment capability.=C2=A0 Under certai= n deployment
> >
> > scenarios, once the necessary detect= ion information is known, the
> > information beyond that which is= available in the endpoint
> >
> > management capability = can be pushed to the vulnerability assessment
> > capability by th= e endpoint whenever that information
> >
> > changes.=E2= =80=9D
> >
> >
> >
> > Our main questio= n is whether or not pushing information from the
> > endpoint mana= gement capability to the vulnerability assessment
> > capability i= s actually possible because it would not necessarily know
> > what= information it needs to push prior to the server requesting it
> >= ; (in which case it is probably considered a pull)?=C2=A0 Is there a
>= ; > situation where the endpoint would know, in advance, what additional=
> > information is needed for an assessment without a server requ= esting it?
> >
> >
> >
> > If you have = any thoughts on this issue, please provide feedback by May
> 31st.> > We are planning to have an updated version of the scenario for J= une 8th.
> >
> >
> >
> > Thanks,
>= ; >
> > Danny
> >
> >
> >
> &g= t; [1]=C2=A0https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln= -scenario/
> >
> > [2]=C2=A0https://github.com/sacmwg/v= ulnerability-scenario/pull/3
> >
> > [3]=C2=A0<= /span>= https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html
>= ; >
> > [4]=C2=A0https://datatracker.ietf.org/doc/slides-i= nterim-2016-sacm-3-1/
> > (looks like the slides are not avail= able just yet, but, I suspect they
> > should be
> > soon= )
> >
> >
> >
> >
> > ________= _______________________________________
> > sacm mailing list
&= gt; >=C2=A0sacm@ietf.org
> >=C2=A0https://www.ietf.org/mai= lman/listinfo/sacm
> >
<= /div>
_______________________________________________
sacm mailing= list
sacm@ietf.orghttps://www.ietf.o= rg/mailman/listinfo/sacm


_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


--001a113d38804f750705358da2f0-- From nobody Sat Jun 18 10:06:15 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DF2DE12D672 for ; Sat, 18 Jun 2016 10:06:12 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=threatguard-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id MK5i-bQymOgE for ; Sat, 18 Jun 2016 10:06:10 -0700 (PDT) Received: from mail-pa0-x22d.google.com (mail-pa0-x22d.google.com [IPv6:2607:f8b0:400e:c03::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 72B2612D0A2 for ; Sat, 18 Jun 2016 10:06:10 -0700 (PDT) Received: by mail-pa0-x22d.google.com with SMTP id wo6so1256880pac.3 for ; Sat, 18 Jun 2016 10:06:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=threatguard-com.20150623.gappssmtp.com; s=20150623; h=from:subject:to:references:cc:message-id:date:user-agent :mime-version:in-reply-to; bh=dWAcAEGHdCC8/DLJEfm+wORnTQLYxHh4w3fGclirms4=; b=xSv86Y0Ga4XdK65RuG9vNQRYLukRpeaNQiiTTpijjhAvqVSDoSqA9GMte6EEzeFh1u aQxoxg7YYUy6577Szy/7u6kJ4FV1jKmjpUfT3/a5QueZlAyI1aUB04Ywoh6WbcsWDGQ3 lWw4iwOpnu6uh6+kR9OF+tDrxzNlGDgz4tBFLoaEoIH6SdTqbTfiEy7vdVJ7LgV8S1om XhpVS/fFlSN+C7asipIdrgrqFEcLgmfTwHq9YxI0xCevq7rkjgv9BjvXlKjzNJEGL2nt SGY9ra5VQJfqPtfz4RCIyGIEursfTxoUXhpWY2VsNtgIiMcfOzzhja08QBXMvhlmrGSn s0Hg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:references:cc:message-id:date :user-agent:mime-version:in-reply-to; bh=dWAcAEGHdCC8/DLJEfm+wORnTQLYxHh4w3fGclirms4=; b=GIeqlJC48DjOYkLYMyelF+9IkxfpMRgAX08n4uCzYJ9c3+7bYuuusuwnQIQOZvBv7l oTVSxMwHO/NWCfr3VQOkfYIb/VB1NdcfxkvpWCIYgZGYtVvQibrzAgJsP4KjK19Irb6Y wlN0wAhxkTzN8r+mw1tJKIpyTgHfmkp/VA//upgdUUKds0b9YrcgCuSdiwL8BfXsTXNS Azusm1qUYwJBd70iSpZMrl7zTg834EL5HmmJZL+xslTorWp/EtdMfAFsHBi5BmBuGh8v Rb91FW94kPubZaaJ0yAeNlkSeHWxbWVrUr9PIDMC6t9zwVK/4p/smntFYX3FQpkCH5Iz q+lA== X-Gm-Message-State: ALyK8tK50ST8zk9hZw5cem+YIIVB5UJrkyPOOQi2Jeh5WZ0x7+ENfWz+R2qtO9zp3xoTLg== X-Received: by 10.67.4.137 with SMTP id ce9mr4145463pad.120.1466269569675; Sat, 18 Jun 2016 10:06:09 -0700 (PDT) Received: from [172.16.1.122] (75-142-12-171.dhcp.mdfd.or.charter.com. [75.142.12.171]) by smtp.gmail.com with ESMTPSA id k22sm36354012pfj.16.2016.06.18.10.06.08 (version=TLSv1/SSLv3 cipher=OTHER); Sat, 18 Jun 2016 10:06:08 -0700 (PDT) From: Gunnar Engelbach X-Google-Original-From: Gunnar Engelbach To: Adam Montville , "Dan (Dan) Romascanu" References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> <6062111F-9C39-4C7C-B008-F7E23FED40DE@gmail.com> <9904FB1B0159DA42B0B887B7FA8119CA7520D40F@AZ-FFEXMB04.global.avaya.com> Message-ID: <94680da4-b547-6ee8-2510-ea10eb1e02ff@ThreatGuard.com> Date: Sat, 18 Jun 2016 10:06:15 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: Content-Type: multipart/alternative; boundary="------------289E678FBB4155228021069F" Archived-At: Cc: "" , "tony@yaanatech.com" Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2016 17:06:13 -0000 This is a multi-part message in MIME format. --------------289E678FBB4155228021069F Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit While we're on the topic, There is an effort in progress to determine a data model for SACM endpoint collection. Software identity information is just a set of endpoint attributes. So is there a reason why software identity is treated differently? --gun On 6/18/2016 5:38 AM, Adam Montville wrote: > Hi. Because we would like to move our requirements through IESG, I > would like to drive this to ground. There are three things that > we’re talking about doing when it comes to selecting a data model for > software identification: > > 1) Extensibility > 2) Accessibility (not cost prohibitive) > 3) Completeness > > There is a data model requirement for (1) - DM-014 Attribute > Extensibility. There does not seem to be a requirement for > accessibility (2) or completeness (3). > > My question is this: Do we need such requirements? > > I would assert that we do not. Accessibility is something that we > will always judge by virtue of the fact that we operate within the > culture of the IETF. Completeness is not something we need to put > into the requirements draft by virtue of DM-002 Data Model Structure, > which indicates that a data model can be structured monolithically or > composed of modules/sub-modules—this seems to imply that we could be > ok with “completeness†potentially coming from more than one place. > > Thoughts? > > Adam > > >> On Jun 13, 2016, at 9:12 AM, Romascanu, Dan (Dan) > > wrote: >> >> Re: Requirements – is this not >> whathttps://datatracker.ietf.org/doc/draft-ietf-sacm-requirements/is >> about? Maybe it needs an update. >> Regards, >> Dan >> *From:*sacm [mailto:sacm-bounces@ietf.org]*On Behalf Of*Adam Montville >> *Sent:*Friday, June 10, 2016 2:25 PM >> *To:*Gunnar Engelbach >> *Cc:*>;tony@yaanatech.com >> >> *Subject:*Re: [sacm] Call for adoption of >> draft-coffin-sacm-nea-swid-patnc as a SACM WG document >> This seems like a fine approach. >> As part of that third item, I’d like to get requirements from our own >> drafts as well, starting perhaps with the vulnerability scenario, but >> also considering our requirements and other drafts. >> >> On Jun 9, 2016, at 7:44 PM, Gunnar Engelbach >> > > wrote: >> >> >> >> Hey Tony, funny thing that you should say that. You seem to have >> a better awareness of the other efforts going on out there than I >> do, so I could use your help in identifying other good candidates >> and what will be necessary to support as many of them as possible. >> >> What I'd really like to do is take a more formal approach -- >> gather some requirements and then see from among the existing >> efforts which is the best from among those that are good enough. >> If any. >> >> But first is a matter of setting the requirements. Stated >> generally, I really only have three: >> >> 1) Is extensible -- as a fork outside of the current owner, if >> necessary, to be sure it continues to meet SACM needs without >> relying on the good graces of the current owner >> >> 2) Readily accessible (eg., spec is not cost prohibitive for >> any users) >> >> 3) The most complete (that is, closest to being able to >> represent the other tag types without loss of data or >> shoe-horning data into fields that weren't really meant for that >> type of data) >> >> >> I'm sure Charles, et al, will have other requirements, so feel >> free to chime in. However, I think the simpler and more informal >> we can keep this list the quicker we can grind through it. >> >> >> --gun >> >> >> >> On 6/9/2016 2:33 PM, Tony Rutkowski wrote: >> >> Hi Adam, >> >> A good solution. Charles and Gunnar should also engage >> in some proactive outreach. Simply stating that "no other >> solutions to the problem of software identification have >> been submitted" is preposterous when there are so many >> out there. IMHO, one of the long-standing problems with >> SACM is its institutional and participatory insularity in an >> arena where so many almost identical activities are occurring >> in other venues where there is far greater industry >> participation. >> Ignoring them diminishes the value of whatever SACM >> accomplishes. >> >> --tony >> >> On 2016-06-09 3:47 PM, Adam Montville wrote: >> >> All: >> After several on-list discussions, the last virtual >> interim, and the discussions surrounding this call for >> adoption, the chairs acknowledge that there are some key >> concerns with this draft, but also see that there is >> rough consensus for adoption. We additionally note that >> no other solutions to the problem of software >> identification have been submitted to the working group [1]. >> Because the topic of software identification, and SWID in >> particular, appears to be a contentious one, we are >> designating Charles Schmidt and Gunnar Engelbach as >> editors of the working group draft [2]. We believe that >> Charles and Gunnar will bring the necessary balance to >> this draft, so that the key concerns are sufficiently >> addressed. >> Kind regards, >> Adam & Karen >> [1] This draft adoption does not preclude future >> alternative submissions >> [2] Note that original authors will remain authors, but >> Charles and Gunnar will hold the pen. >> >> On May 17, 2016, at 11:21 AM, Karen O'Donoghue >> > wrote: >> Folks, >> As discussed during our last couple of meetings, this >> is the official call for adoption of >> https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as >> a SACM working group document. >> Please reply with any comments or concerns along your >> support of this action to the mailing list. >> Thanks, >> Karen and Adam >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm >> >> >> >> >> >> _______________________________________________ >> >> sacm mailing list >> >> sacm@ietf.org >> >> https://www.ietf.org/mailman/listinfo/sacm >> >> >> >> >> >> _______________________________________________ >> >> sacm mailing list >> >> sacm@ietf.org >> >> https://www.ietf.org/mailman/listinfo/sacm >> >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm > --------------289E678FBB4155228021069F Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit
While we're on the topic,

There is an effort in progress to determine a data model for SACM endpoint collection.  Software identity information is just a set of endpoint attributes.  So is there a reason why software identity is treated differently?


--gun


On 6/18/2016 5:38 AM, Adam Montville wrote:
Hi.  Because we would like to move our requirements through IESG, I would like to drive this to ground.   There are three things that we’re talking about doing when it comes to selecting a data model for software identification:

1) Extensibility
2) Accessibility (not cost prohibitive)
3) Completeness

There is a data model requirement for (1) - DM-014 Attribute Extensibility.  There does not seem to be a requirement for accessibility (2) or completeness (3).  

My question is this: Do we need such requirements?

I would assert that we do not.  Accessibility is something that we will always judge by virtue of the fact that we operate within the culture of the IETF.  Completeness is not something we need to put into the requirements draft by virtue of DM-002 Data Model Structure, which indicates that a data model can be structured monolithically or composed of modules/sub-modules—this seems to imply that we could be ok with “completeness†potentially coming from more than one place.  

Thoughts?

Adam


On Jun 13, 2016, at 9:12 AM, Romascanu, Dan (Dan) <dromasca@avaya.com> wrote:

Re: Requirements – is this not what https://datatracker.ietf.org/doc/draft-ietf-sacm-requirements/ is about? Maybe it needs an update.
 
Regards,
 
Dan
 
 
From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Adam Montville
Sent: Friday, June 10, 2016 2:25 PM
To: Gunnar Engelbach
Cc: <sacm@ietf.org>; tony@yaanatech.com
Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document
 
This seems like a fine approach.
 
As part of that third item, I’d like to get requirements from our own drafts as well, starting perhaps with the vulnerability scenario, but also considering our requirements and other drafts.  
 
 
 
On Jun 9, 2016, at 7:44 PM, Gunnar Engelbach <gunnar.engelbach@threatguard.com> wrote:
 



Hey Tony, funny thing that you should say that.  You seem to have a better awareness of the other efforts going on out there than I do, so I could use your help in identifying other good candidates and what will be necessary to support as many of them as possible.

What I'd really like to do is take a more formal approach -- gather some requirements and then see from among the existing efforts which is the best from among those that are good enough.  If any.

But first is a matter of setting the requirements.  Stated generally, I really only have three:

  1)  Is extensible -- as a fork outside of the current owner, if necessary, to be sure it continues to meet SACM needs without relying on the good graces of the current owner

  2)  Readily accessible (eg., spec is not cost prohibitive for any users)

  3)  The most complete (that is, closest to being able to represent the other tag types without loss of data or shoe-horning data into fields that weren't really meant for that type of data)


I'm sure Charles, et al, will have other requirements, so feel free to chime in.  However, I think the simpler and more informal we can keep this list the quicker we can grind through it.


--gun



On 6/9/2016 2:33 PM, Tony Rutkowski wrote:

Hi Adam,

A good solution.  Charles and Gunnar should also engage
in some proactive outreach.  Simply stating that "no other 
solutions to the problem of software identification have 
been submitted" is preposterous when there are so many
out there.  IMHO, one of the long-standing problems with
SACM is its institutional and participatory insularity in an 
arena where so many almost identical activities are occurring 
in other venues where there is far greater industry participation.
Ignoring them diminishes the value of whatever SACM 
accomplishes.

--tony

On 2016-06-09 3:47 PM, Adam Montville wrote:
All:
 
After several on-list discussions, the last virtual interim, and the discussions surrounding this call for adoption, the chairs acknowledge that there are some key concerns with this draft, but also see that there is rough consensus for adoption.  We additionally note that no other solutions to the problem of software identification have been submitted to the working group [1].
 
Because the topic of software identification, and SWID in particular, appears to be a contentious one, we are designating Charles Schmidt and Gunnar Engelbach as editors of the working group draft [2].  We believe that Charles and Gunnar will bring the necessary balance to this draft, so that the key concerns are sufficiently addressed.
 
Kind regards,
 
Adam & Karen
 
[1] This draft adoption does not preclude future alternative submissions
[2] Note that original authors will remain authors, but Charles and Gunnar will hold the pen.
 
 
On May 17, 2016, at 11:21 AM, Karen O'Donoghue <odonoghue@isoc.org> wrote:
 
Folks, 
 
As discussed during our last couple of meetings, this is the official call for adoption of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as a SACM working group document. 
 
Please reply with any comments or concerns along your support of this action to the mailing list. 
 
Thanks,
Karen and Adam
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm




_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm




_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm
 
 
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


--------------289E678FBB4155228021069F-- From nobody Sat Jun 18 10:35:55 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1384112D7D7 for ; Sat, 18 Jun 2016 10:35:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id mQ884oXIocHh for ; Sat, 18 Jun 2016 10:35:50 -0700 (PDT) Received: from mail-oi0-x22c.google.com (mail-oi0-x22c.google.com [IPv6:2607:f8b0:4003:c06::22c]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 4DA2D12D760 for ; Sat, 18 Jun 2016 10:35:50 -0700 (PDT) Received: by mail-oi0-x22c.google.com with SMTP id d132so158858912oig.1 for ; Sat, 18 Jun 2016 10:35:50 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=NsVHCsAlnTen1I8O6tyWd1u74vGwVBIfpq16jdd9PaY=; b=BuZDR57oNs0lpHgsZ72K+E5LvaWP2He/8PSXXGx39QQEeL+UmZRZ5dqbHHUMwVM8vx Z4BIljZYMGIj/2vIvW7Um3yO3tGxMfgFYsu4WPoULwDrWSLMO7RqfAiWvCzXEK68D2FJ KgMNPSvJ2VTdac2WVFJOIvFhjTMWdRZjS36JbBxug0bkryPBP9jCX9RIAb/St2eSrfzs ZvBln6e245spBrLntENxqgNVb/+8VMkzimmPX79+Njd/COAnYeiHZwh/9yUv9QHc867v JAOdzgh7GYV4h63npAhCTaEbptzUGGE34Kl5DOh18G5Corqj8EWqRa6FLp4QHoQ5hmFB cqgA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=NsVHCsAlnTen1I8O6tyWd1u74vGwVBIfpq16jdd9PaY=; b=Og0aSBDrlMtcE7GWFi5IZX/JRREZTMPZ/7d5nbeIoxWN4ZjDmLnK2fyGVjLho4IlJV hfKz5F+kQDa2TNVaJ0+o1viCtKvOIiy31TPKyNNIy3y3qW98dTwywKpljJhMkUXqykSl GSpOreJ0doMZV+afArJ86uxTaM3CpCLIcPx+rNA3ELW6RtATIbOYIur7CbQTIp1o7EkD XXhpPS6BGBdqyFhUb4SfdgVjH7hI9klkIcY7RGEqc2xptIhtnKmgXtYadsdG1OQCSLle eP2kdV3QkY5x/CO1DWCpzXOb0q0KshD1ZZxzOoR89xtk1a8R+D9z+cdAmYyGSY6g5ohb LepA== X-Gm-Message-State: ALyK8tJXVUPyttnWPfi8bTOMKwHUYUuX8jHCDCcs69Co4tPnzH6GEKXoQ2y0obZjM/Kgfw== X-Received: by 10.157.37.109 with SMTP id j42mr5163573otd.45.1466271349452; Sat, 18 Jun 2016 10:35:49 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id v63sm9371131ota.41.2016.06.18.10.35.46 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Sat, 18 Jun 2016 10:35:47 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_5446BBD5-F092-4403-AF93-D9314E86C3FA"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Sat, 18 Jun 2016 12:35:42 -0500 Message-Id: References: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> To: Ira McDonald X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Jerome Athias , "Haynes, Dan" , "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 18 Jun 2016 17:35:54 -0000 --Apple-Mail=_5446BBD5-F092-4403-AF93-D9314E86C3FA Content-Type: multipart/alternative; boundary="Apple-Mail=_A5E3D273-6E41-409E-9278-70EBC0500139" --Apple-Mail=_A5E3D273-6E41-409E-9278-70EBC0500139 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 My concern does not stem from using the prefix =E2=80=9Cpre=E2=80=9D, as = much as it is about the definition of the term assessment and how = we=E2=80=99re using pre-assessment often, which turns into =E2=80=9Ccollec= ting before the process of collecting=E2=80=9D, which is confusing at = best. The situation we are looking at feels very much like a cache miss. We = look for some information in one place and don=E2=80=99t find it, so we = have to go fetch it from somewhere else. > On Jun 18, 2016, at 8:41 AM, Ira McDonald = wrote: >=20 > Hi, >=20 > I share Adam's distaste for "pre-" anything. >=20 > Perhaps "external collection" - defined as simply using any non-SACM > protocol to forward endpoint posture to a SACM Collector (in this = case, > e.g., a NEA Server)? >=20 > Cheers, > - Ira >=20 >=20 > Ira McDonald (Musician / Software Architect) > Co-Chair - TCG Trusted Mobility Solutions WG > Chair - Linux Foundation Open Printing WG > Secretary - IEEE-ISTO Printer Working Group > Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > IETF Designated Expert - IPP & Printer MIB > Blue Roof Music / High North Inc > http://sites.google.com/site/blueroofmusic = > http://sites.google.com/site/highnorthinc = > mailto: blueroofmusic@gmail.com > Winter 579 Park Place Saline, MI 48176 734-944-0094 > Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 >=20 >=20 > On Fri, Jun 17, 2016 at 6:14 PM, Adam Montville = > > wrote: >=20 >> I really don=E2=80=99t want to be the one to bring this up, but are = we forgetting >> our definition of =E2=80=9Cassessment=E2=80=9D? We borrow, and = expand upon, the term from >> RFC5209. Here=E2=80=99s what our terminology draft says: >>=20 >> Assessment: Defined in [RFC5209] as =E2=80=9Cthe process of = collecting posture for >> a set of capabilities on the endpoint (e.g. host-based firewall) such = that >> the appropriate validators may evaluate the posture against = compliance >> policy.=E2=80=9D Within SACM the use of the term is expanded to = support other uses >> of collected posture (e.g. reporting, network enforcement, = vulnerability >> detection, license management). The phrase =E2=80=9Cset of = capabilities on the >> endpoint=E2=80=9D includes: hardware and software installed on the = endpoint. >>=20 >> But, in the text proposed, and in general, we are talking about = collection >> in the context of *pre*-assessment. So, a collection before =E2=80=9Ct= he process >> of collecting posture=E2=80=A6=E2=80=9D, which seems off to me. >>=20 >> Do we really mean to say, pre-evaluation? Or, do we need =E2=80=9Cpre=E2= =80=9D anything? >> There is data available at the time of evaluation or there is not. = If >> there is not, we go grab it, or indicate that it needs to be grabbed = during >> the next collection opportunity, and we indicate whether it=E2=80=99s = something we >> need to grab all the time, or just this once. >>=20 >> Thoughts? >>=20 >> Adam >>=20 >>=20 >>=20 >> On Jun 16, 2016, at 12:15 PM, Haynes, Dan wrote: >>=20 >> Off list, I received a suggested update to this text from Charles. I = was >> hoping to discuss it at yesterday=E2=80=99s virtual interim meeting, = however, I ran >> out of time. As a result, I would like to propose the updated text = as it >> seemed clearer and more concise than what I had proposed, but, says = the >> same thing. >>=20 >> The new text would read as follows (based on the updated draft posted = on >> 6/8/16 [1]). >>=20 >> "Supplemental collection of endpoint information for the purposes = of=E2=80=A6Over >> time, some new pieces of information that are needed during common = types of >> assessments might be identified. Pre-assessment collection can be >> reconfigured to have this information delivered automatically. This = avoids >> the need for regular supplemental collections to gather this = information >> during assessments, streamlining the assessment process. Likewise, it = might >> be observed that certain information delivered during pre-assessment >> collection is rarely used. In this case, it might be useful to stop >> pre-assessment collection of this information to reduce network and >> processing overhead. Instead, supplemental collection can be used to = gather >> this data on the rare occasions when it is needed." >>=20 >> Please let me know your thoughts on this proposed text by Tuesday = July 21 >> st. >>=20 >> Thanks, >>=20 >> Danny >>=20 >> [1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt >>=20 >>=20 >>=20 >> *From:* Jerome Athias [mailto:athiasjerome@gmail.com >> >] >> *Sent:* Tuesday, June 07, 2016 12:08 AM >> *To:* Haynes, Dan >> *Cc:* sacm@ietf.org >> *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario = Issue >> #5 - Change Detection with an Endpoint Management Capability >>=20 >> This rewrite is imho better >> Thanks >>=20 >> On Tuesday, 7 June 2016, Haynes, Dan wrote: >>=20 >> Based on the feedback, would the following rewrite of the paragraph = help >> clarify things? >>=20 >> "In many cases, the endpoint information...Under certain deployment >> scenarios, as >> the vulnerability management capability processes vulnerability = detection >> data over >> time, the endpoint management capability may learn about additional >> detection >> information that it was previously not collecting and push that >> information to the >> vulnerability management capability where it can support future >> assessments. The >> pushing of this data may potentially be driven by some trigger (e.g., >> change >> in software inventory, policy, network connectivity status, etc.)." >>=20 >> While this potentially creates a coupling between the vulnerability >> management capability and the endpoint management capability, as = written, I >> think it will be left to the implementer of those capabilities to = decide. >> I think the point is just that you could do something like this to = improve >> the vulnerability assessment. >>=20 >> If we still don't have consensus on this, another approach might be = to >> just remove this text all together as I don't think doing so would = preclude >> an implementer from supporting functionality like this in their = product. >>=20 >> Thoughts? >>=20 >> Thanks, >>=20 >> Danny >>=20 >>> -----Original Message----- >>> From: Jerome Athias [mailto:athiasjerome@gmail.com] >>> Sent: Saturday, June 04, 2016 2:49 AM >>> To: Haynes, Dan >>> Cc: sacm@ietf.org >>> Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario = Issue >> #5 >>> - Change Detection with an Endpoint Management Capability >>>=20 >>> While the scenario provided by Adam is valid, if your concern is = that >> "the >>> information beyond that" would be "supplemental endpoint >>> information": >>> I don't see a scenario where an endpoint management capability would = have >>> to push -supplemental- information to the vulnerability assessment >>> capability (what would the vulnerability assessment capability do = with >>> 'unknown' additional information) >>>=20 >>> So I think the issue is to change "the information beyond that" to >> something >>> like "the updated information" >>>=20 >>>=20 >>>=20 >>> 2016-05-18 16:15 GMT+03:00 Haynes, Dan : >>>> During yesterday=E2=80=99s virtual interim meeting, we discussed = various open >>>> issues with respect to the Vulnerability Assessment Scenario [1] as = a >>>> result of feedback that we received on the draft which you can see >>>> here [2][3]. The slide=E2=80=99s from the meeting can be found = here [4]. >>>>=20 >>>>=20 >>>>=20 >>>> One issue that we didn=E2=80=99t have a chance to discuss because = we ran out >>>> of time was whether or not an endpoint management capability has = the >>>> ability to push supplemental endpoint information to the = vulnerability >>>> assessment capability. This question came out of a review of the >>>> following text from the Vulnerability Assessment Scenario >> (specifically the >>> last sentence). >>>>=20 >>>>=20 >>>>=20 >>>> =E2=80=9CIn many cases, the endpoint information needed to = determine an >>>> endpoint=E2=80=99s vulnerability status will have been previously >>>>=20 >>>> collected by the Endpoint Management Capability and available in a >>>> Repository. However, in other cases, the necessary >>>>=20 >>>> endpoint information will not be readily available in a Repository = and >>>> a targeted collection will be necessary. Of course, >>>>=20 >>>> an implementation of an endpoint management capability may prefer = to >>>> enable operators to perform targeted collection under >>>>=20 >>>> certain circumstances, even when sufficient information can be >>>> provided by the endpoint management capability (e.g. there >>>>=20 >>>> may be freshness requirements for information). Targeted collection = of >>>> endpoint information for the purpose of vulnerability >>>>=20 >>>> assessment does not necessarily need to be a pull by the = vulnerability >>>> assessment capability. Under certain deployment >>>>=20 >>>> scenarios, once the necessary detection information is known, the >>>> information beyond that which is available in the endpoint >>>>=20 >>>> management capability can be pushed to the vulnerability assessment >>>> capability by the endpoint whenever that information >>>>=20 >>>> changes.=E2=80=9D >>>>=20 >>>>=20 >>>>=20 >>>> Our main question is whether or not pushing information from the >>>> endpoint management capability to the vulnerability assessment >>>> capability is actually possible because it would not necessarily = know >>>> what information it needs to push prior to the server requesting it >>>> (in which case it is probably considered a pull)? Is there a >>>> situation where the endpoint would know, in advance, what = additional >>>> information is needed for an assessment without a server requesting = it? >>>>=20 >>>>=20 >>>>=20 >>>> If you have any thoughts on this issue, please provide feedback by = May >>> 31st. >>>> We are planning to have an updated version of the scenario for June >> 8th. >>>>=20 >>>>=20 >>>>=20 >>>> Thanks, >>>>=20 >>>> Danny >>>>=20 >>>>=20 >>>>=20 >>>> [1] = https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ >>>>=20 >>>> [2] https://github.com/sacmwg/vulnerability-scenario/pull/3 >>>>=20 >>>> [3] = https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html >>>>=20 >>>> [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ >>>> (looks like the slides are not available just yet, but, I suspect = they >>>> should be >>>> soon) >>>>=20 >>>>=20 >>>>=20 >>>>=20 >>>> _______________________________________________ >>>> sacm mailing list >>>> sacm@ietf.org >>>> https://www.ietf.org/mailman/listinfo/sacm >>>>=20 >>=20 >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm >>=20 >>=20 >>=20 >> _______________________________________________ >> sacm mailing list >> sacm@ietf.org >> https://www.ietf.org/mailman/listinfo/sacm = --Apple-Mail=_A5E3D273-6E41-409E-9278-70EBC0500139 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
My concern does not stem from using the = prefix =E2=80=9Cpre=E2=80=9D, as much as it is about the definition of = the term assessment and how we=E2=80=99re using pre-assessment often, = which turns into =E2=80=9Ccollecting before the process of = collecting=E2=80=9D, which is confusing at best.

The situation we are looking at feels = very much like a cache miss.  We look for some information in one = place and don=E2=80=99t find it, so we have to go fetch it from = somewhere else.



On Jun 18, 2016, at 8:41 AM, = Ira McDonald <blueroofmusic@gmail.com> wrote:

Hi,

I share Adam's distaste for "pre-" = anything.

Perhaps "external = collection" - defined as simply using any non-SACM
protocol to forward = endpoint posture to a SACM Collector (in this case,
e.g., a NEA = Server)?

Cheers,
- Ira


Ira McDonald (Musician / Software = Architect)
Co-Chair - TCG Trusted Mobility Solutions = WG
Chair - Linux Foundation Open Printing = WG
Secretary - IEEE-ISTO Printer Working = Group
Co-Chair - IEEE-ISTO PWG Internet Printing = Protocol WG
IETF Designated Expert - IPP & Printer = MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
Winter  579 Park Place  Saline, = MI  48176  734-944-0094
Summer  PO Box 221  Grand = Marais, MI 49839  906-494-2434


On Fri, Jun 17, = 2016 at 6:14 PM, Adam Montville <adam.w.montville@gmail.com>
wrote:

I really don=E2=80=99t want to be the one to bring this = up, but are we forgetting
our definition of = =E2=80=9Cassessment=E2=80=9D?  We borrow, and expand upon, the term = from
RFC5209.  Here=E2=80=99s what our terminology = draft says:

Assessment: Defined in = [RFC5209] as =E2=80=9Cthe process of collecting posture for
a set of capabilities on the endpoint (e.g. host-based = firewall) such that
the appropriate validators may = evaluate the posture against compliance
policy.=E2=80=9D =  Within SACM the use of the term is expanded to support other = uses
of collected posture (e.g. reporting, network = enforcement, vulnerability
detection, license management). =  The phrase =E2=80=9Cset of capabilities on the
endpoint=E2=80=9D includes: hardware and software installed = on the endpoint.

But, in the text proposed, = and in general, we are talking about collection
in the = context of *pre*-assessment.  So, a collection before =E2=80=9Cthe = process
of collecting posture=E2=80=A6=E2=80=9D, which = seems off to me.

Do we really mean to say, = pre-evaluation?  Or, do we need =E2=80=9Cpre=E2=80=9D anything?
There is data available at the time of evaluation or there is = not.  If
there is not, we go grab it, or indicate = that it needs to be grabbed during
the next collection = opportunity, and we indicate whether it=E2=80=99s something we
need to grab all the time, or just this once.
Thoughts?

Adam



On Jun 16, 2016, at 12:15 PM, = Haynes, Dan <dhaynes@mitre.org> wrote:

Off list, I received a suggested update to this text from = Charles.  I was
hoping to discuss it at yesterday=E2=80= =99s virtual interim meeting, however, I ran
out of time. =  As a result, I would like to propose the updated text as it
seemed clearer and more concise than what I had proposed, = but, says the
same thing.

The = new text would read as follows (based on the updated draft posted on
6/8/16 [1]).

"Supplemental = collection of endpoint information for the purposes of=E2=80=A6Over
time, some new pieces of information that are needed during = common types of
assessments might be identified. = Pre-assessment collection can be
reconfigured to have this = information delivered automatically. This avoids
the need = for regular supplemental collections to gather this information
during assessments, streamlining the assessment process. = Likewise, it might
be observed that certain information = delivered during pre-assessment
collection is rarely used. = In this case, it might be useful to stop
pre-assessment = collection of this information to reduce network and
processing overhead. Instead, supplemental collection can be = used to gather
this data on the rare occasions when it is = needed."

Please let me know your thoughts = on this proposed text by Tuesday July 21
st.

Thanks,

Danny

[1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt



*From:* = Jerome Athias [mailto:athiasjerome@gmail.com
<athiasjerome@gmail.com>]
*Sent:* = Tuesday, June 07, 2016 12:08 AM
*To:* Haynes, Dan <dhaynes@mitre.org>
*Cc:* sacm@ietf.org
*Subject:* Re: [sacm] FOR = REVIEW: Vulnerability Assessment Scenario Issue
#5 - = Change Detection with an Endpoint Management Capability

This rewrite is imho better
Thanks

On Tuesday, 7 June 2016, Haynes, Dan <dhaynes@mitre.org> = wrote:

Based on the feedback, would the = following rewrite of the paragraph help
clarify things?

"In many cases, the endpoint = information...Under certain deployment
scenarios, as
the vulnerability management capability processes = vulnerability detection
data over
time, the = endpoint management capability may learn about additional
detection
information that it was previously = not collecting and push that
information to the
vulnerability management capability where it can support = future
assessments. The
pushing of this data = may potentially be driven by some trigger (e.g.,
change
in software inventory, policy, network connectivity status, = etc.)."

While this potentially creates a = coupling between the vulnerability
management capability = and the endpoint management capability, as written, I
think = it will be left to the implementer of those capabilities to decide.
I think the point is just that you could do something like = this to improve
the vulnerability assessment.

If we still don't have consensus on this, = another approach might be to
just remove this text all = together as I don't think doing so would preclude
an = implementer from supporting functionality like this in their product.

Thoughts?

Thanks,

Danny

-----Original = Message-----
From: Jerome Athias [mailto:athiasjerome@gmail.com]
Sent: = Saturday, June 04, 2016 2:49 AM
To: Haynes, Dan <dhaynes@mitre.org>
Cc: sacm@ietf.org
Subject: Re: [sacm] FOR = REVIEW: Vulnerability Assessment Scenario Issue
#5
- Change Detection with an Endpoint Management Capability

While the scenario provided by Adam is valid, = if your concern is that
"the
information beyond that" = would be "supplemental endpoint
information":
I don't see a scenario where an endpoint management = capability would have
to push -supplemental- information = to the vulnerability assessment
capability (what would the = vulnerability assessment capability do with
'unknown' = additional information)

So I think the = issue is to change "the information beyond that" to
something
like "the updated information"


2016-05-18 16:15 GMT+03:00 Haynes, Dan <dhaynes@mitre.org>:
During yesterday=E2=80=99= s virtual interim meeting, we discussed various open
issues = with respect to the Vulnerability Assessment Scenario [1] as a
result of feedback that we received on the draft which you = can see
here [2][3].  The slide=E2=80=99s from the = meeting can be found here [4].



One issue that we didn=E2=80=99t have a chance = to discuss because we ran out
of time was whether or not = an endpoint management capability has the
ability to push = supplemental endpoint information to the vulnerability
assessment capability.  This question came out of a = review of the
following text from the Vulnerability = Assessment Scenario
(specifically = the
last = sentence).



=E2=80=9CIn many cases, the = endpoint information needed to determine an
endpoint=E2=80=99= s vulnerability status will have been previously

collected by the Endpoint Management Capability and available = in a
Repository. However, in other cases, the necessary

endpoint information will not be readily = available in a Repository and
a targeted collection will = be necessary.  Of course,

an = implementation of an endpoint management capability may prefer to
enable operators to perform targeted collection under

certain circumstances, even when sufficient = information can be
provided by the endpoint management = capability (e.g. there

may be freshness = requirements for information). Targeted collection of
endpoint information for the purpose of vulnerability

assessment does not necessarily need to be a = pull by the vulnerability
assessment capability. =  Under certain deployment

scenarios, = once the necessary detection information is known, the
information beyond that which is available in the endpoint

management capability can be pushed to the = vulnerability assessment
capability by the endpoint = whenever that information

changes.=E2=80=9D


Our main = question is whether or not pushing information from the
endpoint management capability to the vulnerability = assessment
capability is actually possible because it = would not necessarily know
what information it needs to = push prior to the server requesting it
(in which case it = is probably considered a pull)?  Is there a
situation = where the endpoint would know, in advance, what additional
information is needed for an assessment without a server = requesting it?



If you have any thoughts on this issue, please provide = feedback by May
31st.
We are planning to have an updated version of = the scenario for June
8th.



Thanks,

Danny



[1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenari= o/

[2] https://github.com/sacmwg/vulnerability-scenario/pull/3

[3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.htm= l

[4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/<= /a>
(looks like the slides are not available just yet, = but, I suspect they
should be
soon)




_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm



_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_A5E3D273-6E41-409E-9278-70EBC0500139-- --Apple-Mail=_5446BBD5-F092-4403-AF93-D9314E86C3FA Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXZYZxAAoJEDEhyx7etgABXC0QAIjELbyHAu0f9i8nhWAGG6Rr +vhh8ynmlra3YTRsaNUtV0818B4Hnq05BfiIc9k2a1qmRhjAwmkE6oGyg5zTJcV8 U/4qJ7XKLtTbD0oscWa6YtIy0cHISpUC5VSM7PyrW2wLze6CB+q3TfUhVFOiDoWY RPxAPC7EZikswy3Agrz4SfexrwW/nB/tl8wjZXqBK/TvhS9rh3Mkh2yo8HPoQGi4 RldDhaJQyvc/Tg992ar4xZrq5CymkxyCRtQQT1b/FH2it+owNfWOYk3o4+FnRG2T JeafLpH+Q7PmA0Pi4CanBMiJsIASV7RfmOSS4AypwZ+EgRgBmxkMOZN49J2G1OWF qKTeFE+FWmh0QSbMhFx/VijVYLJxtgNSM0JM72BV57W+SMkmqoyjTntpojp8fwqj OTIIziwxbCsd83392GP/UunyOaWaSFY88tsr4QWoCRalGOkj+AH/C2GEyg0DryYP gpaql9MNyyFV9+kXU30K0rSFEPuT+q+M7UFzjIwK5lYbbaZN1ne8XzzXebGK2vOI PofuNaHJCewuI8wRxA45t7DsNqUhGVzKkjUYhn6Zrnwv/DLjWxe2bLcEKTUyhaaR ziX9pZElmoEN+DpxulSTZ4wYVe4Zanlkg9NwP+l88mrwZ4ceGplvIn3iKr/0h+Ow 3br4mmbTpsw61Vniz+xf =GNjB -----END PGP SIGNATURE----- --Apple-Mail=_5446BBD5-F092-4403-AF93-D9314E86C3FA-- From nobody Mon Jun 20 07:04:31 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AC4FB12D113 for ; Mon, 20 Jun 2016 07:04:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aVjLOnB9ahWR for ; Mon, 20 Jun 2016 07:04:27 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 228BF127058 for ; Mon, 20 Jun 2016 07:04:27 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 86DAB6C06ED; Mon, 20 Jun 2016 10:04:26 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 757467BC29E; Mon, 20 Jun 2016 10:04:26 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Mon, 20 Jun 2016 10:04:26 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Mon, 20 Jun 2016 10:04:25 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=D1IT06/kp0flwgr0FsP4yVGlUUUothep2311dxWN31U=; b=dn+j5xhDIOUCtMbYZrf90DhhttlxlzL0R8k5FmLVjn+rn78R/DhLSKmgQ4IW5zHGW2zHDloWfX7Tro30IHihfp5oCzQKw8BT/W4EBDhIvBqU0u0NvgefwuSYM1qsY66Prqk3i6N/hWLpVHzNIeRd60D6cjiy2qAUufaguJkmLY0= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1080.namprd09.prod.outlook.com (10.166.116.12) with Microsoft SMTP Server (TLS) id 15.1.523.12; Mon, 20 Jun 2016 14:04:19 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.015; Mon, 20 Jun 2016 14:04:19 +0000 From: "Haynes, Dan" To: Adam Montville Thread-Topic: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 Thread-Index: AdHIkuRuh5CvhlIOStepa2ZMRUUCngAUH7kAAIZNikA= Date: Mon, 20 Jun 2016 14:04:19 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.86] x-ms-office365-filtering-correlation-id: 9e5ba807-9a9e-4208-f5bc-08d39913c64a x-microsoft-exchange-diagnostics: 1; BY2PR09MB1080; 6:0HWRmjwvqGtgBp9MsiVDJ9GU5x/l5qlFgnsOekcxdvFe2JVU5CtYLVYCv9P8gtU8Qu3Beicvv0dvRfat9bpmTHpEEEB4jy73IoIEdVpPWaP2W6Im4qspJMht1lAMDBgEsom2P3rWLUPU5dlOpQwjZGem48FG3jgUrHwA3gExgwmbA+6YyF86TskUiOrsqluyrgTwv0Z87AWJHPLhY+u71u0H0GPRPt0OEOHAev4a5V2u8M33bfteRbZDIBlCflIQM8mBKAsEW3Cq2NhD5frjpoGF/H2mzrT+Bzv9n/P/WGUyYNxot376wmr3JFfzG0kXvBZxYwm0e9HnO9z+p1N7Hw==; 5:k0E42m7Ru9+69XoYE7LuM3WPugipVky9MGx3zUgstJnsNHrFU2ovkpLPFf3uApICk3zK0/uDfCNlxIutOKB4h8/xVWK9t9U2vRONArmkMcPznQj6KvKuKcFAH3IicVyKk8X2tS/t9wgBD39seLMqqg==; 24:9CaUmPXs8iOPFuLT/iz7drQs3cnK+ZcG4shAbQtiVGJXCaf7057Vw4uCsUf7dq/bwSScWNwy4bOPRViKg2Ytmv/3ktAs32h9dXuHAiw1ckA=; 7:D1YL7zq9YPhqhNCINoNGc3gOLESDdgW/ap3VW01LmeJfqUJIL95mEWz892AUlv26baxysS9CffeOyISmneX+EE/WrlnoqMw6mfr/O+osUsn5U44fiC0+jDtHXjxtMT0ceCZmSQ/Q/mOMf4eLkzeQIRnealG/7dgMgAa8ETzjBtCV1RdEEROG7RVXZG4IUXz0jcq7mRcfiQhpiiL9BrKmhA+2Yah6ELK1iSmss7cfQtozufQgqeg2CqScr8JOtiCq x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1080; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(166708455590820)(192374486261705)(273802758526341)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:BY2PR09MB1080; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1080; x-forefront-prvs: 09796A1B83 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(377454003)(199003)(24454002)(189002)(5383002)(81166006)(99286002)(10400500002)(8676002)(66066001)(5002640100001)(122556002)(5003600100002)(19300405004)(81156014)(86362001)(16236675004)(74316001)(87936001)(5004730100002)(77096005)(15975445007)(2950100001)(2900100001)(19580395003)(97736004)(2420400007)(102836003)(54356999)(105586002)(19609705001)(50986999)(9686002)(19617315012)(19580405001)(110136002)(3280700002)(19625215002)(7906002)(189998001)(7110500001)(101416001)(10710500007)(3660700001)(6116002)(15650500001)(5890100001)(76576001)(2906002)(4326007)(33656002)(68736007)(92566002)(790700001)(7846002)(106356001)(11100500001)(76176999)(8936002)(3846002)(586003); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1080; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB1078E03DDDC93DA94830D551A52A0BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jun 2016 14:04:19.6779 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1080 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jun 2016 14:04:31 -0000 --_000_BY2PR09MB1078E03DDDC93DA94830D551A52A0BY2PR09MB1078namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Thanks Adam. Do others have thoughts on these changes? Thanks, Danny From: Adam Montville [mailto:adam.w.montville@gmail.com] Sent: Friday, June 17, 2016 5:59 PM To: Haynes, Dan Cc: sacm@ietf.org Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Ap= pendix E to Reference CSC v6.0 This looks good from my perspective, Danny, thank you. On Jun 17, 2016, at 7:59 AM, Haynes, Dan > wrote: We have a tracker that recommends updating Appendix E to reference Critical= Security Controls v6.0 instead of v5.1 [1][2]. I went through both versio= ns of the document and made the appropriate updates to the text (see attach= ed) as some controls have changed or have been removed. Please review the attached changes and let me know if they seem reasonable = to incorporate into the next revision of the Vulnerability Assessment Scena= rio I-D. Thanks, Danny [1] https://github.com/sacmwg/vulnerability-scenario/issues/23 [2] https://www.cisecurity.org/critical-controls.cfm _______________________________________________ sacm mailing list sacm@ietf.org https://www.ietf.org/mailman/listinfo/sacm --_000_BY2PR09MB1078E03DDDC93DA94830D551A52A0BY2PR09MB1078namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Thanks Adam.  Do others have tho= ughts on these changes?

 

Thanks,

Danny

 

From: Adam Montville [mailto:adam.w.= montville@gmail.com]
Sent: Friday, June 17, 2016 5:59 PM
To: Haynes, Dan <dhaynes@mitre.org>
Cc: sacm@ietf.org
Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Up= date Appendix E to Reference CSC v6.0

 

This looks good from my perspective, Danny, thank yo= u.

 

On Jun 17, 2016, at 7:59 AM, Haynes, Dan <dhaynes@mitre.org> wrote:

 

We have a tracker that recommends updating Appendix= E to reference Critical Security Controls v6.0 instead of v5.1 [1][2].&nbs= p; I went through both versions of the document and made the appropriate updates to the text (see attached) as some controls h= ave changed or have been removed.

 

Please review the attached changes and let me know = if they seem reasonable to incorporate into the next revision of the Vulner= ability Assessment Scenario I-D.

 

Thanks,

 

Danny

 

 

<csc-updates.docx>__________________________= _____________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

 

--_000_BY2PR09MB1078E03DDDC93DA94830D551A52A0BY2PR09MB1078namp_-- From nobody Mon Jun 20 07:10:38 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7076112D0DD for ; Mon, 20 Jun 2016 07:10:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.699 X-Spam-Level: X-Spam-Status: No, score=-1.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, FREEMAIL_REPLY=1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=no autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qPAjwqVW86Zl for ; Mon, 20 Jun 2016 07:10:36 -0700 (PDT) Received: from mail-ob0-x234.google.com (mail-ob0-x234.google.com [IPv6:2607:f8b0:4003:c01::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id DF59112B04A for ; Mon, 20 Jun 2016 07:10:35 -0700 (PDT) Received: by mail-ob0-x234.google.com with SMTP id hx8so438003obb.3 for ; Mon, 20 Jun 2016 07:10:35 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=zzzanjbNuAp3Ag0Q077FdaN2JdH9nfR9K9fZbyuoQ98=; b=v0RoHBsctvoTM5wBDA3LEOPmFFYXb55ZxAZPV48jRfpNd/6jMRX4ktiHlKH5WQcyEW 6aiZr1h773YzHj90D9YjbdqiiSRLPRSQBB9MXrIq3eWnsoofrisA4Zl2qNWlU06wIhX5 UinjSD86LYdy2qZ4Ph2Jd7qXwQUqWVb/nB/rnrYL7gyQ7FdCS1xz+AV6c/yKDPGJYV2Q KMmC9PkdOqMcQUEhLFyWskMIOGXT7K5rODkrh7fGIWTtbZZ4nu93QMYMlin1gWkimd7J zEjk7hmw1huNrr8YjdlP7G/ZNVCiHmU5RPKDekJaT2N7q9SSj9TpTtdLVObu/2exwLp7 1zCA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=zzzanjbNuAp3Ag0Q077FdaN2JdH9nfR9K9fZbyuoQ98=; b=T4hXpP2Kwz470x5Yuggjyi3RXLDPeJG2dF7/hoj2rdHpfs/2VVBNS8we610KgRBQII ucQzCxib0vMVfp/NWjphPCnzL8F6CwDNa6A7ca7HCE3+tvRxSfoEl1MyYrioU7Gy8ItD YgNa7uqkPYoYmB7Mpvv9naHuAzw2a0LykdwfYU5glEKHjhzj/Ql0plqyQyatxxdjulgS g+8lSt0DjUZjl+XISKN36vP76Cd9qwcXuNIqsGaYwBzrWbOv9iTH7dYwt5sG6nY08sYL Cu4IdOdIg9lhE9BeNE5PN0oJGUbyCYjDUJ7FryNm846OwArhsxtxE7BjNHrqhn2tmyLT 0btA== X-Gm-Message-State: ALyK8tLfpSUuMcnRzF6FlW3GbY+ColebXA/+f8n2U/3Re3QvHQI6LLKuIu+KBiVXDNIrZmrHsBuE1wmK1z+EHA== X-Received: by 10.157.51.9 with SMTP id f9mr10635302otc.40.1466431831969; Mon, 20 Jun 2016 07:10:31 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.11.240 with HTTP; Mon, 20 Jun 2016 07:10:12 -0700 (PDT) In-Reply-To: References: From: Ira McDonald Date: Mon, 20 Jun 2016 10:10:12 -0400 Message-ID: To: "Haynes, Dan" , Ira McDonald Content-Type: multipart/alternative; boundary=001a113ac8c46f00200535b644cb Archived-At: Cc: Adam Montville , "sacm@ietf.org" Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jun 2016 14:10:37 -0000 --001a113ac8c46f00200535b644cb Content-Type: text/plain; charset=UTF-8 Hi Danny, +1 Cheers, - Ira Ira McDonald (Musician / Software Architect) Co-Chair - TCG Trusted Mobility Solutions WG Chair - Linux Foundation Open Printing WG Secretary - IEEE-ISTO Printer Working Group Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG IETF Designated Expert - IPP & Printer MIB Blue Roof Music / High North Inc http://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com Winter 579 Park Place Saline, MI 48176 734-944-0094 Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 On Mon, Jun 20, 2016 at 10:04 AM, Haynes, Dan wrote: > Thanks Adam. Do others have thoughts on these changes? > > > > Thanks, > > Danny > > > > *From:* Adam Montville [mailto:adam.w.montville@gmail.com] > *Sent:* Friday, June 17, 2016 5:59 PM > *To:* Haynes, Dan > *Cc:* sacm@ietf.org > *Subject:* Re: [sacm] Vulnerability Assessment Scenario Issue #23 - > Update Appendix E to Reference CSC v6.0 > > > > This looks good from my perspective, Danny, thank you. > > > > On Jun 17, 2016, at 7:59 AM, Haynes, Dan wrote: > > > > We have a tracker that recommends updating Appendix E to reference > Critical Security Controls v6.0 instead of v5.1 [1][2]. I went through > both versions of the document and made the appropriate updates to the text > (see attached) as some controls have changed or have been removed. > > > > Please review the attached changes and let me know if they seem reasonable > to incorporate into the next revision of the Vulnerability Assessment > Scenario I-D. > > > > Thanks, > > > > Danny > > > > [1] https://github.com/sacmwg/vulnerability-scenario/issues/23 > > [2] https://www.cisecurity.org/critical-controls.cfm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > --001a113ac8c46f00200535b644cb Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Danny,

+1

Cheers,
- Ira


Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted = Mobility Solutions WG
Chair - Linux Foundation Open Printing WG
Secre= tary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet= Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
= Blue Roof Music / High North Inc
http://si= tes.google.com/site/blueroofmusic
http:/= /sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
Winter= =C2=A0 579 Park Place=C2=A0 Saline, MI=C2=A0 48176=C2=A0 734-944-0094
Su= mmer=C2=A0 PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434
<= div style=3D"display:inline">

On Mon, Jun 20, 2016 at 10:04 AM, Haynes, Da= n <dhaynes@mitre.org> wrote:

Thanks Adam.=C2=A0 Do others have tho= ughts on these changes?

=C2=A0

Thanks,

Danny

=C2=A0

From: Adam Montville [mailto:adam.w.montville@g= mail.com]
Sent: Friday, June 17, 2016 5:59 PM
To: Haynes, Dan <dhaynes@mitre.org>
Cc: sacm@ietf.org=
Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Up= date Appendix E to Reference CSC v6.0

=C2=A0

This looks good from my perspective, Danny, thank yo= u.

=C2=A0

On Jun 17, 2016, at 7:59 AM, Haynes, Dan <dhaynes@mitre.org> w= rote:

=C2=A0

We have a tracker that recommends updating Appendix= E to reference Critical Security Controls v6.0 instead of v5.1 [1][2].=C2= =A0 I went through both versions of the document and made the appropriate updates to the text (see attached) as some controls h= ave changed or have been removed.

=C2=A0

Please review the attached changes and let me know = if they seem reasonable to incorporate into the next revision of the Vulner= ability Assessment Scenario I-D.

=C2=A0

Thanks,

=C2=A0

Danny

=C2=A0

=C2=A0

<csc-updates.docx>__________________________= _____________________
sacm mailing list
s= acm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm<= u>

=C2=A0


_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


--001a113ac8c46f00200535b644cb-- From nobody Mon Jun 20 08:03:21 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A299B12B064 for ; Mon, 20 Jun 2016 08:03:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -8.326 X-Spam-Level: X-Spam-Status: No, score=-8.326 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_HI=-5, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 38swpzK7CvRa for ; Mon, 20 Jun 2016 08:03:14 -0700 (PDT) Received: from mailext.sit.fraunhofer.de (mailext.sit.fraunhofer.de [141.12.72.89]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 0D71412B015 for ; Mon, 20 Jun 2016 08:03:12 -0700 (PDT) Received: from mail.sit.fraunhofer.de (mail.sit.fraunhofer.de [141.12.84.171]) by mailext.sit.fraunhofer.de (8.14.4/8.14.4/Debian-2ubuntu2.1) with ESMTP id u5KF38fW010787 (version=TLSv1/SSLv3 cipher=AES256-SHA256 bits=256 verify=NOT) for ; Mon, 20 Jun 2016 17:03:10 +0200 Received: from [134.102.43.173] (134.102.43.173) by mail.sit.fraunhofer.de (141.12.84.171) with Microsoft SMTP Server (TLS) id 14.3.294.0; Mon, 20 Jun 2016 17:03:03 +0200 To: References: From: Henk Birkholz Message-ID: <576805A6.8040609@sit.fraunhofer.de> Date: Mon, 20 Jun 2016 17:03:02 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.8.0 MIME-Version: 1.0 In-Reply-To: Content-Type: text/plain; charset="windows-1252"; format=flowed Content-Transfer-Encoding: 8bit X-Originating-IP: [134.102.43.173] Archived-At: Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jun 2016 15:03:19 -0000 The changes look fine to me. The CSC 4 System Entity Relationship diagram seems to imply the use of a vulnerability scanner, I think. Could an "SCAP Unauthenticated Vulnerability Scanner" be used as an example for a Posture Collector that does not reside on the target endpoint itself? Grüße, Henk On 06/20/2016 04:04 PM, Haynes, Dan wrote: > Thanks Adam. Do others have thoughts on these changes? > > Thanks, > > Danny > > *From:*Adam Montville [mailto:adam.w.montville@gmail.com] > *Sent:* Friday, June 17, 2016 5:59 PM > *To:* Haynes, Dan > *Cc:* sacm@ietf.org > *Subject:* Re: [sacm] Vulnerability Assessment Scenario Issue #23 - > Update Appendix E to Reference CSC v6.0 > > This looks good from my perspective, Danny, thank you. > > On Jun 17, 2016, at 7:59 AM, Haynes, Dan > wrote: > > We have a tracker that recommends updating Appendix E to reference > Critical Security Controls v6.0 instead of v5.1 [1][2]. I went > through both versions of the document and made the appropriate > updates to the text (see attached) as some controls have changed or > have been removed. > > Please review the attached changes and let me know if they seem > reasonable to incorporate into the next revision of the > Vulnerability Assessment Scenario I-D. > > Thanks, > > Danny > > [1]https://github.com/sacmwg/vulnerability-scenario/issues/23 > > [2]https://www.cisecurity.org/critical-controls.cfm > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > From nobody Mon Jun 20 10:02:47 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 7E0F312D805 for ; Mon, 20 Jun 2016 10:02:45 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3DuKjli5-6tT for ; Mon, 20 Jun 2016 10:02:43 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 7DDD812D7EE for ; Mon, 20 Jun 2016 10:02:43 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 155C1ABC069; Mon, 20 Jun 2016 13:02:43 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id E009EABC059; Mon, 20 Jun 2016 13:02:42 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Mon, 20 Jun 2016 13:02:42 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Mon, 20 Jun 2016 13:02:42 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=zq+JjowZIyRCSCWS6jRb4pUWjP3xxZKPyHYAS80pJFU=; b=EWQKUZhqBhZsCtM93mD2HzqVOklqqBmK0QNJiRWyB/Z0AGDh7TEPNIp1IByFiSLnkafSAWnvq7zRsXew5iBt4nzYkBIUZhN401tYOr8LNqBASBP2uchgSGJ2gRbeqmiiw8+tiZi/6Amg5900ZOrK1Nbd94fezFjJBQe3tdnKnQM= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) with Microsoft SMTP Server (TLS) id 15.1.523.12; Mon, 20 Jun 2016 17:02:41 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.015; Mon, 20 Jun 2016 17:02:41 +0000 From: "Haynes, Dan" To: Henk Birkholz , "sacm@ietf.org" Thread-Topic: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 Thread-Index: AdHIkuRuh5CvhlIOStepa2ZMRUUCngAUH7kAAIZNikAAAg9pAAAC12Cg Date: Mon, 20 Jun 2016 17:02:40 +0000 Message-ID: References: <576805A6.8040609@sit.fraunhofer.de> In-Reply-To: <576805A6.8040609@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.86] x-ms-office365-filtering-correlation-id: 8efd0180-1dd0-4db8-d258-08d3992cb0c2 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1078; 6:H3cuKZM/s5skZWljHSEFx9lykPM7Ah9lnGpSJvMGHx4mWl8YZIvnwHkoxtoGlOpQ/uDOgbMjwND3ySkJIWG4Hg4rWJBaqyhwScG+JHT9DaV9m3CBbgNrmKvYyCZPOALslI0BRALjf3IPKA13P8qW8+t4O+ZddeXJdzB7XU6EB+BHfz6BydkzAmrlgYeB9gnvx8d29RESbb7DTj+xkA3Rr/HD610y5e7YM8uYQmpON4dWpl4nRxP/fJ+lWRrATFHgWlulAJ8lKBg88lLsCbH3zNtMUXicv+saYfRZj/G756OhIhEqy5juPECgTxnLwDgWlQaqwmuFVl4JnnVrjxx5rA==; 5:fM1HcpMbQfDKXGuvBEri6ojPGGImFm0+og2RpFZ9jcRkuSDB4DLo7NOk1Yhk8nC/TBOfxQTKMEZphBJ6gqjMNWHl7h59GzCVR4IpTL5xW6+BePf7rkRpTvFD1MaBhMphfPbaiOQzhN9/arkQrHIzOQ==; 24:DgK7TQQeiQG5OAiKL+2g6epP+jY1VAMp48wujVddbZoMWaSUSHJ/v/6gJVoVDqVDpyo7gVQEEVQLOQGAKWXE2vNsrqLzvoiSGj6BsLPFBHQ=; 7:cazuvHFGkMDLrJqsQ/l3w9gv+F13ACI+UNiJza6ezAX+uhFFgUVXXjRkh2/tz5sugCqjlayMbG5xMdOM+3UmiFE65SY3tEBnNDAroRUDJUQcCX8HEo/4pNE2xjZSLXo6ylz/n0KlzNSooG7zGvLyKVCABd58pl6hlLCP3D7yt6wFcNzeGJo1iN8drmOAO3RG1C8Dqk6IKGUnDdI4IYbQsOBWFsgDytuLioirromAWyzRSDPEimuGqwpD9/lDUVI8 x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1078; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(166708455590820)(192374486261705)(273802758526341); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026); SRVR:BY2PR09MB1078; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1078; x-forefront-prvs: 09796A1B83 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(13464003)(24454002)(189002)(199003)(377454003)(5383002)(3846002)(8936002)(86362001)(66066001)(2950100001)(93886004)(92566002)(586003)(102836003)(54356999)(76176999)(50986999)(5890100001)(9686002)(122556002)(6116002)(10400500002)(2900100001)(68736007)(11100500001)(2501003)(3660700001)(105586002)(107886002)(101416001)(15975445007)(3280700002)(97736004)(74316001)(87936001)(5002640100001)(106356001)(5001770100001)(2906002)(19580395003)(19580405001)(76576001)(189998001)(33656002)(77096005)(7846002)(99286002)(15650500001)(81156014)(8676002)(81166006)(5003600100003)(7696003)(7736002); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1078; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jun 2016 17:02:40.8907 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1078 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jun 2016 17:02:45 -0000 Thanks Ira and Henk. =20 Henk, I think so. With that said, I think the scanner in the diagram could= be either on/off the endpoint and it could perform authenticated/unauthent= icated scans.=20 =20 Thanks, Danny > -----Original Message----- > From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Henk Birkholz > Sent: Monday, June 20, 2016 11:03 AM > To: sacm@ietf.org > Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Update > Appendix E to Reference CSC v6.0 >=20 > The changes look fine to me. >=20 > The CSC 4 System Entity Relationship diagram seems to imply the use of a > vulnerability scanner, I think. Could an "SCAP Unauthenticated Vulnerabil= ity > Scanner" be used as an example for a Posture Collector that does not resi= de > on the target endpoint itself? >=20 > Gr=FC=DFe, >=20 > Henk >=20 >=20 > On 06/20/2016 04:04 PM, Haynes, Dan wrote: > > Thanks Adam. Do others have thoughts on these changes? > > > > Thanks, > > > > Danny > > > > *From:*Adam Montville [mailto:adam.w.montville@gmail.com] > > *Sent:* Friday, June 17, 2016 5:59 PM > > *To:* Haynes, Dan > > *Cc:* sacm@ietf.org > > *Subject:* Re: [sacm] Vulnerability Assessment Scenario Issue #23 - > > Update Appendix E to Reference CSC v6.0 > > > > This looks good from my perspective, Danny, thank you. > > > > On Jun 17, 2016, at 7:59 AM, Haynes, Dan > > wrote: > > > > We have a tracker that recommends updating Appendix E to reference > > Critical Security Controls v6.0 instead of v5.1 [1][2]. I went > > through both versions of the document and made the appropriate > > updates to the text (see attached) as some controls have changed or > > have been removed. > > > > Please review the attached changes and let me know if they seem > > reasonable to incorporate into the next revision of the > > Vulnerability Assessment Scenario I-D. > > > > Thanks, > > > > Danny > > > > [1]https://github.com/sacmwg/vulnerability-scenario/issues/23 > > > > [2]https://www.cisecurity.org/critical-controls.cfm > > > > updates.docx>_______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > > > > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm From nobody Mon Jun 20 11:24:40 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DBC6812D0A9 for ; Mon, 20 Jun 2016 11:24:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vTN4WZp4GPhU for ; Mon, 20 Jun 2016 11:24:35 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 8CEE4127078 for ; Mon, 20 Jun 2016 11:24:35 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id ED28B6C005D; Mon, 20 Jun 2016 14:24:34 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id D96006C035C; Mon, 20 Jun 2016 14:24:34 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Mon, 20 Jun 2016 14:24:33 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Mon, 20 Jun 2016 14:24:34 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=9M/c3EpDLLMFZUkMhAyYVRcJKCY4KLBpP61wPb+uigw=; b=qZkAeXw5GIDnNLF7ko8UQoO9//Fb5M+mOZ9LOVy9KFT7kV8teE0UoyXVIxFppBVmLh0U8GDewZnT1ulsPKyZ9RaftXsIyawzpzDsU4mcZXIu7t66jLUMr44o3eYdJH5GNBT6yvw3Em4pU7tsk2RzrzAmts3gl662weRpTYK2kYc= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1080.namprd09.prod.outlook.com (10.166.116.12) with Microsoft SMTP Server (TLS) id 15.1.523.12; Mon, 20 Jun 2016 18:24:27 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.015; Mon, 20 Jun 2016 18:24:27 +0000 From: "Haynes, Dan" To: Adam Montville , "Dan (Dan) Romascanu" Thread-Topic: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document Thread-Index: AQHRsFg3j9pPF/hRvEyIr/ZBYgADtZ/hrueAgAAdaYCAADWYAIAAsskAgATluwCAB8GGAIADd8Ig Date: Mon, 20 Jun 2016 18:24:26 +0000 Message-ID: References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> <6062111F-9C39-4C7C-B008-F7E23FED40DE@gmail.com> <9904FB1B0159DA42B0B887B7FA8119CA7520D40F@AZ-FFEXMB04.global.avaya.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.86] x-ms-office365-filtering-correlation-id: 40278d15-6e2c-4cc0-380c-08d399381d28 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1080; 6:A9Mw/rB22n3BtV7JA54MGQNo5Mu4sjyLPhRQMJ/sWLDTURpxJa17yQdo5+4/SEqgE7KuAY8RTpXMzGEc+2qvJiazZmD1VtlN/CdQYjLJzIJWQSGnWjQlz44NqbNaN3hJububE7Cy1TmUxoobBsuFVAAV2/gmYySE/TvGtijmp7WHquGrwKVsRzQOH1YE6hTamYDAQ+Bm4v1oYxNqNoRIFNn2CyKsK75fCRrhJT9BBLiz/g5jkGTNlht9M+0N7eosBkeIctIVaCj2ewPlDOLS0gl6u2XQ3lhvJmwzop8zygarbvOKGNeM/DvRk7R6Qe+ybXtwyLwK+DKgd2+1neMqdA==; 5:36OF1pvUvMTVNqZkCgMJuLDgQOn/qgNMtgedLknODln6LT0WFedf68mTFnyx5lV/1Xg/+OAt04ejlMX3JjdI3wmX0mdfkAFGoDERqaNALOX4upVPy+n31LtAo3SDrPIxJqSZvK0FeDxRQetnCRnTlw==; 24:EDr0sRJg88Zo6CyB314iedvpqBjPMWnm+9WEPkooLtMEZvyLTuQxkK0LoLluZR8b/VVt01D/9rc2aDzSXIPy6B92kSFqiu+bZC8VsbsFhWU=; 7:PnOk7qGtl7wWePQHTou5uqu4L5VJ/UdXliQEgt4uRZAtFs5VosSNnM2SBvAv9NheOImlqGw4onv83KcgP7uDk106wnl6f6UT8R2+OWpWpr5UeJC/BWCLCroVcjOarN9L9mZCse/r5oxAHNZZ1+fANUY8nHI/Ohbh5Tuu34Njfl+enlbdLmvEDUh6KR4pN2Cssth3Z76rX5t83EBlOEL02u/opqBCGiesU8f1rrhkGBdui8NCLcThHrs15Uh7OQaK x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1080; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(100405760836317)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1080; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1080; x-forefront-prvs: 09796A1B83 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(377454003)(199003)(377424004)(71364002)(52044002)(189002)(24454002)(57704003)(5001770100001)(81166006)(10400500002)(99286002)(8676002)(5002640100001)(66066001)(19300405004)(122556002)(81156014)(86362001)(16236675004)(74316001)(87936001)(77096005)(15975445007)(2900100001)(2950100001)(19580405001)(230783001)(68736007)(19580395003)(97736004)(102836003)(8666005)(54356999)(19609705001)(50986999)(105586002)(9686002)(19617315012)(3280700002)(7906002)(189998001)(19625215002)(101416001)(3660700001)(6116002)(76576001)(2906002)(106116001)(9326002)(4326007)(93886004)(33656002)(7846002)(92566002)(790700001)(106356001)(11100500001)(8936002)(586003)(3846002)(76176999)(5003600100003)(7696003)(7736002)(7059030); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1080; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB1078437729D1E67B79C83516A52A0BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 20 Jun 2016 18:24:27.1111 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1080 X-OriginatorOrg: mitre.org Archived-At: Cc: Gunnar Engelbach , "" , "tony@yaanatech.com" Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jun 2016 18:24:39 -0000 --_000_BY2PR09MB1078437729D1E67B79C83516A52A0BY2PR09MB1078namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgQWRhbSwNCg0KDQpUaGlzIGFsbCBtYWtlcyBzZW5zZSB0byBtZS4gIFdpdGggcmVnYXJkcyB0 byBjb21wbGV0ZW5lc3MsIEkgd291bGQgYWxzbyBhZGQgRE0tMDAxIHdoaWNoIHNheXMg4oCcVGhl IGRhdGEgbW9kZWwgTVVTVCBjb250YWluIGEgZGF0YSBtb2RlbCBlbGVtZW50IGZvciBlYWNoIGlu Zm9ybWF0aW9uIG1vZGVsIGVsZW1lbnTigJ0uICBBcyBsb25nIGFzIHdlIG1ha2Ugb3VyIElNIGNv bXBsZXRlLCBvdXIgRE0gd2lsbCBhbHNvIGJlIGNvbXBsZXRlIGJlY2F1c2Ugb2YgdGhpcyByZXF1 aXJlbWVudC4NCg0KVGhhbmtzLA0KDQpEYW5ueQ0KDQpGcm9tOiBzYWNtIFttYWlsdG86c2FjbS1i b3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYgT2YgQWRhbSBNb250dmlsbGUNClNlbnQ6IFNhdHVy ZGF5LCBKdW5lIDE4LCAyMDE2IDg6MzkgQU0NClRvOiBEYW4gKERhbikgUm9tYXNjYW51IDxkcm9t YXNjYUBhdmF5YS5jb20+DQpDYzogR3VubmFyIEVuZ2VsYmFjaCA8Z3VubmFyLmVuZ2VsYmFjaEB0 aHJlYXRndWFyZC5jb20+OyA8c2FjbUBpZXRmLm9yZz4gPHNhY21AaWV0Zi5vcmc+OyB0b255QHlh YW5hdGVjaC5jb20NClN1YmplY3Q6IFJlOiBbc2FjbV0gQ2FsbCBmb3IgYWRvcHRpb24gb2YgZHJh ZnQtY29mZmluLXNhY20tbmVhLXN3aWQtcGF0bmMgYXMgYSBTQUNNIFdHIGRvY3VtZW50DQoNCkhp LiAgQmVjYXVzZSB3ZSB3b3VsZCBsaWtlIHRvIG1vdmUgb3VyIHJlcXVpcmVtZW50cyB0aHJvdWdo IElFU0csIEkgd291bGQgbGlrZSB0byBkcml2ZSB0aGlzIHRvIGdyb3VuZC4gICBUaGVyZSBhcmUg dGhyZWUgdGhpbmdzIHRoYXQgd2XigJlyZSB0YWxraW5nIGFib3V0IGRvaW5nIHdoZW4gaXQgY29t ZXMgdG8gc2VsZWN0aW5nIGEgZGF0YSBtb2RlbCBmb3Igc29mdHdhcmUgaWRlbnRpZmljYXRpb246 DQoNCjEpIEV4dGVuc2liaWxpdHkNCjIpIEFjY2Vzc2liaWxpdHkgKG5vdCBjb3N0IHByb2hpYml0 aXZlKQ0KMykgQ29tcGxldGVuZXNzDQoNClRoZXJlIGlzIGEgZGF0YSBtb2RlbCByZXF1aXJlbWVu dCBmb3IgKDEpIC0gRE0tMDE0IEF0dHJpYnV0ZSBFeHRlbnNpYmlsaXR5LiAgVGhlcmUgZG9lcyBu b3Qgc2VlbSB0byBiZSBhIHJlcXVpcmVtZW50IGZvciBhY2Nlc3NpYmlsaXR5ICgyKSBvciBjb21w bGV0ZW5lc3MgKDMpLg0KDQpNeSBxdWVzdGlvbiBpcyB0aGlzOiBEbyB3ZSBuZWVkIHN1Y2ggcmVx dWlyZW1lbnRzPw0KDQpJIHdvdWxkIGFzc2VydCB0aGF0IHdlIGRvIG5vdC4gIEFjY2Vzc2liaWxp dHkgaXMgc29tZXRoaW5nIHRoYXQgd2Ugd2lsbCBhbHdheXMganVkZ2UgYnkgdmlydHVlIG9mIHRo ZSBmYWN0IHRoYXQgd2Ugb3BlcmF0ZSB3aXRoaW4gdGhlIGN1bHR1cmUgb2YgdGhlIElFVEYuICBD b21wbGV0ZW5lc3MgaXMgbm90IHNvbWV0aGluZyB3ZSBuZWVkIHRvIHB1dCBpbnRvIHRoZSByZXF1 aXJlbWVudHMgZHJhZnQgYnkgdmlydHVlIG9mIERNLTAwMiBEYXRhIE1vZGVsIFN0cnVjdHVyZSwg d2hpY2ggaW5kaWNhdGVzIHRoYXQgYSBkYXRhIG1vZGVsIGNhbiBiZSBzdHJ1Y3R1cmVkIG1vbm9s aXRoaWNhbGx5IG9yIGNvbXBvc2VkIG9mIG1vZHVsZXMvc3ViLW1vZHVsZXPigJR0aGlzIHNlZW1z IHRvIGltcGx5IHRoYXQgd2UgY291bGQgYmUgb2sgd2l0aCDigJxjb21wbGV0ZW5lc3PigJ0gcG90 ZW50aWFsbHkgY29taW5nIGZyb20gbW9yZSB0aGFuIG9uZSBwbGFjZS4NCg0KVGhvdWdodHM/DQoN CkFkYW0NCg0KDQpPbiBKdW4gMTMsIDIwMTYsIGF0IDk6MTIgQU0sIFJvbWFzY2FudSwgRGFuIChE YW4pIDxkcm9tYXNjYUBhdmF5YS5jb208bWFpbHRvOmRyb21hc2NhQGF2YXlhLmNvbT4+IHdyb3Rl Og0KDQpSZTogUmVxdWlyZW1lbnRzIOKAkyBpcyB0aGlzIG5vdCB3aGF0IGh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc2FjbS1yZXF1aXJlbWVudHMvIGlzIGFib3V0 PyBNYXliZSBpdCBuZWVkcyBhbiB1cGRhdGUuDQoNClJlZ2FyZHMsDQoNCkRhbg0KDQoNCkZyb206 IHNhY20gW21haWx0bzpzYWNtLWJvdW5jZXNAaWV0Zi5vcmddIE9uIEJlaGFsZiBPZiBBZGFtIE1v bnR2aWxsZQ0KU2VudDogRnJpZGF5LCBKdW5lIDEwLCAyMDE2IDI6MjUgUE0NClRvOiBHdW5uYXIg RW5nZWxiYWNoDQpDYzogPHNhY21AaWV0Zi5vcmc8bWFpbHRvOnNhY21AaWV0Zi5vcmc+PjsgdG9u eUB5YWFuYXRlY2guY29tPG1haWx0bzp0b255QHlhYW5hdGVjaC5jb20+DQpTdWJqZWN0OiBSZTog W3NhY21dIENhbGwgZm9yIGFkb3B0aW9uIG9mIGRyYWZ0LWNvZmZpbi1zYWNtLW5lYS1zd2lkLXBh dG5jIGFzIGEgU0FDTSBXRyBkb2N1bWVudA0KDQpUaGlzIHNlZW1zIGxpa2UgYSBmaW5lIGFwcHJv YWNoLg0KDQpBcyBwYXJ0IG9mIHRoYXQgdGhpcmQgaXRlbSwgSeKAmWQgbGlrZSB0byBnZXQgcmVx dWlyZW1lbnRzIGZyb20gb3VyIG93biBkcmFmdHMgYXMgd2VsbCwgc3RhcnRpbmcgcGVyaGFwcyB3 aXRoIHRoZSB2dWxuZXJhYmlsaXR5IHNjZW5hcmlvLCBidXQgYWxzbyBjb25zaWRlcmluZyBvdXIg cmVxdWlyZW1lbnRzIGFuZCBvdGhlciBkcmFmdHMuDQoNCg0KDQpPbiBKdW4gOSwgMjAxNiwgYXQg Nzo0NCBQTSwgR3VubmFyIEVuZ2VsYmFjaCA8Z3VubmFyLmVuZ2VsYmFjaEB0aHJlYXRndWFyZC5j b208bWFpbHRvOmd1bm5hci5lbmdlbGJhY2hAdGhyZWF0Z3VhcmQuY29tPj4gd3JvdGU6DQoNCg0K DQpIZXkgVG9ueSwgZnVubnkgdGhpbmcgdGhhdCB5b3Ugc2hvdWxkIHNheSB0aGF0LiAgWW91IHNl ZW0gdG8gaGF2ZSBhIGJldHRlciBhd2FyZW5lc3Mgb2YgdGhlIG90aGVyIGVmZm9ydHMgZ29pbmcg b24gb3V0IHRoZXJlIHRoYW4gSSBkbywgc28gSSBjb3VsZCB1c2UgeW91ciBoZWxwIGluIGlkZW50 aWZ5aW5nIG90aGVyIGdvb2QgY2FuZGlkYXRlcyBhbmQgd2hhdCB3aWxsIGJlIG5lY2Vzc2FyeSB0 byBzdXBwb3J0IGFzIG1hbnkgb2YgdGhlbSBhcyBwb3NzaWJsZS4NCg0KV2hhdCBJJ2QgcmVhbGx5 IGxpa2UgdG8gZG8gaXMgdGFrZSBhIG1vcmUgZm9ybWFsIGFwcHJvYWNoIC0tIGdhdGhlciBzb21l IHJlcXVpcmVtZW50cyBhbmQgdGhlbiBzZWUgZnJvbSBhbW9uZyB0aGUgZXhpc3RpbmcgZWZmb3J0 cyB3aGljaCBpcyB0aGUgYmVzdCBmcm9tIGFtb25nIHRob3NlIHRoYXQgYXJlIGdvb2QgZW5vdWdo LiAgSWYgYW55Lg0KDQpCdXQgZmlyc3QgaXMgYSBtYXR0ZXIgb2Ygc2V0dGluZyB0aGUgcmVxdWly ZW1lbnRzLiAgU3RhdGVkIGdlbmVyYWxseSwgSSByZWFsbHkgb25seSBoYXZlIHRocmVlOg0KDQog IDEpICBJcyBleHRlbnNpYmxlIC0tIGFzIGEgZm9yayBvdXRzaWRlIG9mIHRoZSBjdXJyZW50IG93 bmVyLCBpZiBuZWNlc3NhcnksIHRvIGJlIHN1cmUgaXQgY29udGludWVzIHRvIG1lZXQgU0FDTSBu ZWVkcyB3aXRob3V0IHJlbHlpbmcgb24gdGhlIGdvb2QgZ3JhY2VzIG9mIHRoZSBjdXJyZW50IG93 bmVyDQoNCiAgMikgIFJlYWRpbHkgYWNjZXNzaWJsZSAoZWcuLCBzcGVjIGlzIG5vdCBjb3N0IHBy b2hpYml0aXZlIGZvciBhbnkgdXNlcnMpDQoNCiAgMykgIFRoZSBtb3N0IGNvbXBsZXRlICh0aGF0 IGlzLCBjbG9zZXN0IHRvIGJlaW5nIGFibGUgdG8gcmVwcmVzZW50IHRoZSBvdGhlciB0YWcgdHlw ZXMgd2l0aG91dCBsb3NzIG9mIGRhdGEgb3Igc2hvZS1ob3JuaW5nIGRhdGEgaW50byBmaWVsZHMg dGhhdCB3ZXJlbid0IHJlYWxseSBtZWFudCBmb3IgdGhhdCB0eXBlIG9mIGRhdGEpDQoNCg0KSSdt IHN1cmUgQ2hhcmxlcywgZXQgYWwsIHdpbGwgaGF2ZSBvdGhlciByZXF1aXJlbWVudHMsIHNvIGZl ZWwgZnJlZSB0byBjaGltZSBpbi4gIEhvd2V2ZXIsIEkgdGhpbmsgdGhlIHNpbXBsZXIgYW5kIG1v cmUgaW5mb3JtYWwgd2UgY2FuIGtlZXAgdGhpcyBsaXN0IHRoZSBxdWlja2VyIHdlIGNhbiBncmlu ZCB0aHJvdWdoIGl0Lg0KDQoNCi0tZ3VuDQoNCg0KDQoNCk9uIDYvOS8yMDE2IDI6MzMgUE0sIFRv bnkgUnV0a293c2tpIHdyb3RlOg0KSGkgQWRhbSwNCg0KQSBnb29kIHNvbHV0aW9uLiAgQ2hhcmxl cyBhbmQgR3VubmFyIHNob3VsZCBhbHNvIGVuZ2FnZQ0KaW4gc29tZSBwcm9hY3RpdmUgb3V0cmVh Y2guICBTaW1wbHkgc3RhdGluZyB0aGF0ICJubyBvdGhlcg0Kc29sdXRpb25zIHRvIHRoZSBwcm9i bGVtIG9mIHNvZnR3YXJlIGlkZW50aWZpY2F0aW9uIGhhdmUNCmJlZW4gc3VibWl0dGVkIiBpcyBw cmVwb3N0ZXJvdXMgd2hlbiB0aGVyZSBhcmUgc28gbWFueQ0Kb3V0IHRoZXJlLiAgSU1ITywgb25l IG9mIHRoZSBsb25nLXN0YW5kaW5nIHByb2JsZW1zIHdpdGgNClNBQ00gaXMgaXRzIGluc3RpdHV0 aW9uYWwgYW5kIHBhcnRpY2lwYXRvcnkgaW5zdWxhcml0eSBpbiBhbg0KYXJlbmEgd2hlcmUgc28g bWFueSBhbG1vc3QgaWRlbnRpY2FsIGFjdGl2aXRpZXMgYXJlIG9jY3VycmluZw0KaW4gb3RoZXIg dmVudWVzIHdoZXJlIHRoZXJlIGlzIGZhciBncmVhdGVyIGluZHVzdHJ5IHBhcnRpY2lwYXRpb24u DQpJZ25vcmluZyB0aGVtIGRpbWluaXNoZXMgdGhlIHZhbHVlIG9mIHdoYXRldmVyIFNBQ00NCmFj Y29tcGxpc2hlcy4NCg0KLS10b255DQpPbiAyMDE2LTA2LTA5IDM6NDcgUE0sIEFkYW0gTW9udHZp bGxlIHdyb3RlOg0KQWxsOg0KDQpBZnRlciBzZXZlcmFsIG9uLWxpc3QgZGlzY3Vzc2lvbnMsIHRo ZSBsYXN0IHZpcnR1YWwgaW50ZXJpbSwgYW5kIHRoZSBkaXNjdXNzaW9ucyBzdXJyb3VuZGluZyB0 aGlzIGNhbGwgZm9yIGFkb3B0aW9uLCB0aGUgY2hhaXJzIGFja25vd2xlZGdlIHRoYXQgdGhlcmUg YXJlIHNvbWUga2V5IGNvbmNlcm5zIHdpdGggdGhpcyBkcmFmdCwgYnV0IGFsc28gc2VlIHRoYXQg dGhlcmUgaXMgcm91Z2ggY29uc2Vuc3VzIGZvciBhZG9wdGlvbi4gIFdlIGFkZGl0aW9uYWxseSBu b3RlIHRoYXQgbm8gb3RoZXIgc29sdXRpb25zIHRvIHRoZSBwcm9ibGVtIG9mIHNvZnR3YXJlIGlk ZW50aWZpY2F0aW9uIGhhdmUgYmVlbiBzdWJtaXR0ZWQgdG8gdGhlIHdvcmtpbmcgZ3JvdXAgWzFd Lg0KDQpCZWNhdXNlIHRoZSB0b3BpYyBvZiBzb2Z0d2FyZSBpZGVudGlmaWNhdGlvbiwgYW5kIFNX SUQgaW4gcGFydGljdWxhciwgYXBwZWFycyB0byBiZSBhIGNvbnRlbnRpb3VzIG9uZSwgd2UgYXJl IGRlc2lnbmF0aW5nIENoYXJsZXMgU2NobWlkdCBhbmQgR3VubmFyIEVuZ2VsYmFjaCBhcyBlZGl0 b3JzIG9mIHRoZSB3b3JraW5nIGdyb3VwIGRyYWZ0IFsyXS4gIFdlIGJlbGlldmUgdGhhdCBDaGFy bGVzIGFuZCBHdW5uYXIgd2lsbCBicmluZyB0aGUgbmVjZXNzYXJ5IGJhbGFuY2UgdG8gdGhpcyBk cmFmdCwgc28gdGhhdCB0aGUga2V5IGNvbmNlcm5zIGFyZSBzdWZmaWNpZW50bHkgYWRkcmVzc2Vk Lg0KDQpLaW5kIHJlZ2FyZHMsDQoNCkFkYW0gJiBLYXJlbg0KDQpbMV0gVGhpcyBkcmFmdCBhZG9w dGlvbiBkb2VzIG5vdCBwcmVjbHVkZSBmdXR1cmUgYWx0ZXJuYXRpdmUgc3VibWlzc2lvbnMNClsy XSBOb3RlIHRoYXQgb3JpZ2luYWwgYXV0aG9ycyB3aWxsIHJlbWFpbiBhdXRob3JzLCBidXQgQ2hh cmxlcyBhbmQgR3VubmFyIHdpbGwgaG9sZCB0aGUgcGVuLg0KDQoNCk9uIE1heSAxNywgMjAxNiwg YXQgMTE6MjEgQU0sIEthcmVuIE8nRG9ub2dodWUgPG9kb25vZ2h1ZUBpc29jLm9yZzxtYWlsdG86 b2Rvbm9naHVlQGlzb2Mub3JnPj4gd3JvdGU6DQoNCkZvbGtzLA0KDQpBcyBkaXNjdXNzZWQgZHVy aW5nIG91ciBsYXN0IGNvdXBsZSBvZiBtZWV0aW5ncywgdGhpcyBpcyB0aGUgb2ZmaWNpYWwgY2Fs bCBmb3IgYWRvcHRpb24gb2YgaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQt Y29mZmluLXNhY20tbmVhLXN3aWQtcGF0bmMvIGFzIGEgU0FDTSB3b3JraW5nIGdyb3VwIGRvY3Vt ZW50Lg0KDQpQbGVhc2UgcmVwbHkgd2l0aCBhbnkgY29tbWVudHMgb3IgY29uY2VybnMgYWxvbmcg eW91ciBzdXBwb3J0IG9mIHRoaXMgYWN0aW9uIHRvIHRoZSBtYWlsaW5nIGxpc3QuDQoNClRoYW5r cywNCkthcmVuIGFuZCBBZGFtDQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fXw0Kc2FjbSBtYWlsaW5nIGxpc3QNCnNhY21AaWV0Zi5vcmc8bWFpbHRvOnNhY21A aWV0Zi5vcmc+DQpodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20NCg0K DQoNCg0KDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f DQoNCnNhY20gbWFpbGluZyBsaXN0DQoNCnNhY21AaWV0Zi5vcmc8bWFpbHRvOnNhY21AaWV0Zi5v cmc+DQoNCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2FjbQ0KDQoNCg0K DQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCg0K c2FjbSBtYWlsaW5nIGxpc3QNCg0Kc2FjbUBpZXRmLm9yZzxtYWlsdG86c2FjbUBpZXRmLm9yZz4N Cg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zYWNtDQoNCg0KX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNhY20gbWFpbGluZyBs aXN0DQpzYWNtQGlldGYub3JnPG1haWx0bzpzYWNtQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zYWNtDQoNCg== --_000_BY2PR09MB1078437729D1E67B79C83516A52A0BY2PR09MB1078namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsN CglwYW5vc2UtMToyIDExIDYgOSAyIDIgNCAzIDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFt aWx5OlRhaG9tYTsNCglwYW5vc2UtMToyIDExIDYgNCAzIDUgNCA0IDIgNDt9DQovKiBTdHlsZSBE ZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWwsIGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0K CXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0 Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5N c29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4 dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQphOnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9s bG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRl Y29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0KCXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNv LXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFy Z2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQtc2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNv dXJpZXIgTmV3Ijt9DQpwLm1zb25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWww DQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsN CgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdp bi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iLHNlcmlmO30NCnNwYW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1u YW1lOmFwcGxlLWNvbnZlcnRlZC1zcGFjZTt9DQpzcGFuLkhUTUxQcmVmb3JtYXR0ZWRDaGFyDQoJ e21zby1zdHlsZS1uYW1lOiJIVE1MIFByZWZvcm1hdHRlZCBDaGFyIjsNCgltc28tc3R5bGUtcHJp b3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0dGVkIjsNCglmb250LWZh bWlseTpDb25zb2xhczt9DQpzcGFuLkVtYWlsU3R5bGUyMQ0KCXttc28tc3R5bGUtdHlwZTpwZXJz b25hbDsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdE O30NCnNwYW4uRW1haWxTdHlsZTIyDQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLWNvbXBvc2U7 DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7DQoJY29sb3I6d2luZG93dGV4dDt9 DQouTXNvQ2hwRGVmYXVsdA0KCXttc28tc3R5bGUtdHlwZTpleHBvcnQtb25seTsNCglmb250LXNp emU6MTAuMHB0O30NCkBwYWdlIFdvcmRTZWN0aW9uMQ0KCXtzaXplOjguNWluIDExLjBpbjsNCglt YXJnaW46MS4waW4gMS4waW4gMS4waW4gMS4waW47fQ0KZGl2LldvcmRTZWN0aW9uMQ0KCXtwYWdl OldvcmRTZWN0aW9uMTt9DQotLT48L3N0eWxlPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86 c2hhcGVkZWZhdWx0cyB2OmV4dD0iZWRpdCIgc3BpZG1heD0iMTAyNiIgLz4NCjwveG1sPjwhW2Vu ZGlmXS0tPjwhLS1baWYgZ3RlIG1zbyA5XT48eG1sPg0KPG86c2hhcGVsYXlvdXQgdjpleHQ9ImVk aXQiPg0KPG86aWRtYXAgdjpleHQ9ImVkaXQiIGRhdGE9IjEiIC8+DQo8L286c2hhcGVsYXlvdXQ+ PC94bWw+PCFbZW5kaWZdLS0+DQo8L2hlYWQ+DQo8Ym9keSBsYW5nPSJFTi1VUyIgbGluaz0iYmx1 ZSIgdmxpbms9InB1cnBsZSI+DQo8ZGl2IGNsYXNzPSJXb3JkU2VjdGlvbjEiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRm aWxsLWZpbGwtY29sb3I6IzFGNEU3OTttc28tc3R5bGUtdGV4dGZpbGwtZmlsbC1hbHBoYToxMDAu MCUiPkhpIEFkYW0sPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZx dW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtY29s b3I6IzFGNEU3OTttc28tc3R5bGUtdGV4dGZpbGwtZmlsbC1hbHBoYToxMDAuMCUiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjRFNzk7 bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtY29sb3I6IzFGNEU3OTttc28tc3R5bGUtdGV4dGZpbGwt ZmlsbC1hbHBoYToxMDAuMCUiPlRoaXMgYWxsIG1ha2VzIHNlbnNlIHRvIG1lLiZuYnNwOyBXaXRo IHJlZ2FyZHMgdG8gY29tcGxldGVuZXNzLCBJIHdvdWxkIGFsc28gYWRkIERNLTAwMSB3aGljaCBz YXlzIOKAnFQ8L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRl eHRmaWxsLWZpbGwtY29sb3I6IzFGNEU3OTttc28tc3R5bGUtdGV4dGZpbGwtZmlsbC1hbHBoYTox MDAuMCUiPmhlIGRhdGEgbW9kZWwgTVVTVCBjb250YWluIGEgZGF0YSBtb2RlbCBlbGVtZW50IGZv ciBlYWNoIGluZm9ybWF0aW9uIG1vZGVsIGVsZW1lbnTigJ0uICZuYnNwO0FzIGxvbmcgYXMgd2Ug bWFrZSBvdXIgSU0gY29tcGxldGUsIG91ciBETSB3aWxsIGFsc28gYmUgY29tcGxldGUgYmVjYXVz ZSBvZiB0aGlzIHJlcXVpcmVtZW50LjxvOnA+PC9vOnA+PC9zcGFuPjwvcHJlPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjRFNzk7bXNvLXN0eWxlLXRleHRm aWxsLWZpbGwtY29sb3I6IzFGNEU3OTttc28tc3R5bGUtdGV4dGZpbGwtZmlsbC1hbHBoYToxMDAu MCUiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5O21zby1zdHlsZS10ZXh0ZmlsbC1maWxsLWNvbG9y OiMxRjRFNzk7bXNvLXN0eWxlLXRleHRmaWxsLWZpbGwtYWxwaGE6MTAwLjAlIj5UaGFua3MsPGJy Pg0KPGJyPg0KRGFubnk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+ PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1ZSAxLjVw dDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJib3JkZXI6 bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAwaW4gMGlu IDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48Yj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEx LjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPkZyb206PC9z cGFuPjwvYj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiBzYWNtIFttYWlsdG86c2FjbS1ib3VuY2VzQGlldGYu b3JnXQ0KPGI+T24gQmVoYWxmIE9mIDwvYj5BZGFtIE1vbnR2aWxsZTxicj4NCjxiPlNlbnQ6PC9i PiBTYXR1cmRheSwgSnVuZSAxOCwgMjAxNiA4OjM5IEFNPGJyPg0KPGI+VG86PC9iPiBEYW4gKERh bikgUm9tYXNjYW51ICZsdDtkcm9tYXNjYUBhdmF5YS5jb20mZ3Q7PGJyPg0KPGI+Q2M6PC9iPiBH dW5uYXIgRW5nZWxiYWNoICZsdDtndW5uYXIuZW5nZWxiYWNoQHRocmVhdGd1YXJkLmNvbSZndDs7 ICZsdDtzYWNtQGlldGYub3JnJmd0OyAmbHQ7c2FjbUBpZXRmLm9yZyZndDs7IHRvbnlAeWFhbmF0 ZWNoLmNvbTxicj4NCjxiPlN1YmplY3Q6PC9iPiBSZTogW3NhY21dIENhbGwgZm9yIGFkb3B0aW9u IG9mIGRyYWZ0LWNvZmZpbi1zYWNtLW5lYS1zd2lkLXBhdG5jIGFzIGEgU0FDTSBXRyBkb2N1bWVu dDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkhpLiAmbmJz cDtCZWNhdXNlIHdlIHdvdWxkIGxpa2UgdG8gbW92ZSBvdXIgcmVxdWlyZW1lbnRzIHRocm91Z2gg SUVTRywgSSB3b3VsZCBsaWtlIHRvIGRyaXZlIHRoaXMgdG8gZ3JvdW5kLiAmbmJzcDsgVGhlcmUg YXJlIHRocmVlIHRoaW5ncyB0aGF0IHdl4oCZcmUgdGFsa2luZyBhYm91dCBkb2luZyB3aGVuIGl0 IGNvbWVzIHRvIHNlbGVjdGluZyBhIGRhdGEgbW9kZWwgZm9yIHNvZnR3YXJlIGlkZW50aWZpY2F0 aW9uOjxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+MSkgRXh0 ZW5zaWJpbGl0eTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+MikgQWNjZXNzaWJpbGl0eSAobm90IGNvc3QgcHJvaGliaXRpdmUpPG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4zKSBDb21wbGV0ZW5lc3M8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhl cmUgaXMgYSBkYXRhIG1vZGVsIHJlcXVpcmVtZW50IGZvciAoMSkgLSBETS0wMTQgQXR0cmlidXRl IEV4dGVuc2liaWxpdHkuICZuYnNwO1RoZXJlIGRvZXMgbm90IHNlZW0gdG8gYmUgYSByZXF1aXJl bWVudCBmb3IgYWNjZXNzaWJpbGl0eSAoMikgb3IgY29tcGxldGVuZXNzICgzKS4gJm5ic3A7PG86 cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk15IHF1 ZXN0aW9uIGlzIHRoaXM6IERvIHdlIG5lZWQgc3VjaCByZXF1aXJlbWVudHM/PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkkgd291bGQgYXNzZXJ0 IHRoYXQgd2UgZG8gbm90LiAmbmJzcDtBY2Nlc3NpYmlsaXR5IGlzIHNvbWV0aGluZyB0aGF0IHdl IHdpbGwgYWx3YXlzIGp1ZGdlIGJ5IHZpcnR1ZSBvZiB0aGUgZmFjdCB0aGF0IHdlIG9wZXJhdGUg d2l0aGluIHRoZSBjdWx0dXJlIG9mIHRoZSBJRVRGLiAmbmJzcDtDb21wbGV0ZW5lc3MgaXMgbm90 IHNvbWV0aGluZyB3ZSBuZWVkIHRvIHB1dCBpbnRvIHRoZSByZXF1aXJlbWVudHMgZHJhZnQgYnkg dmlydHVlDQogb2YgRE0tMDAyIERhdGEgTW9kZWwgU3RydWN0dXJlLCB3aGljaCBpbmRpY2F0ZXMg dGhhdCBhIGRhdGEgbW9kZWwgY2FuIGJlIHN0cnVjdHVyZWQgbW9ub2xpdGhpY2FsbHkgb3IgY29t cG9zZWQgb2YgbW9kdWxlcy9zdWItbW9kdWxlc+KAlHRoaXMgc2VlbXMgdG8gaW1wbHkgdGhhdCB3 ZSBjb3VsZCBiZSBvayB3aXRoIOKAnGNvbXBsZXRlbmVzc+KAnSBwb3RlbnRpYWxseSBjb21pbmcg ZnJvbSBtb3JlIHRoYW4gb25lIHBsYWNlLiAmbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhvdWdodHM/PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkFkYW08bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPGRpdj4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5P biBKdW4gMTMsIDIwMTYsIGF0IDk6MTIgQU0sIFJvbWFzY2FudSwgRGFuIChEYW4pICZsdDs8YSBo cmVmPSJtYWlsdG86ZHJvbWFzY2FAYXZheWEuY29tIj5kcm9tYXNjYUBhdmF5YS5jb208L2E+Jmd0 OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5SZTogUmVxdWlyZW1lbnRzIOKAkyBpcyB0aGlz IG5vdCB3aGF0PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFu PjxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc2Fj bS1yZXF1aXJlbWVudHMvIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5odHRwczovL2RhdGF0 cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1pZXRmLXNhY20tcmVxdWlyZW1lbnRzLzwvc3Bhbj48 L2E+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPmlzDQog YWJvdXQ/IE1heWJlIGl0IG5lZWRzIGFuIHVwZGF0ZS48L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlJlZ2FyZHMs PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJy aSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMUY0OTdEIj5EYW48L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5i c3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29s aWQgYmx1ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0 eWxlPSJib3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNCNUM0REYgMS4wcHQ7cGFkZGluZzoz LjBwdCAwaW4gMGluIDBpbiI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMC4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7VGFob21hJnF1b3Q7LHNh bnMtc2VyaWYiPkZyb206PC9zcGFuPjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNw YWNlIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhv bWEmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PC9zcGFuPjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjEwLjBwdDtmb250LWZhbWlseTomcXVvdDtUYWhvbWEmcXVvdDssc2Fucy1zZXJpZiI+ c2FjbQ0KIFs8YSBocmVmPSJtYWlsdG86c2FjbS1ib3VuY2VzQGlldGYub3JnIj48c3BhbiBzdHls ZT0iY29sb3I6cHVycGxlIj5tYWlsdG86c2FjbS1ib3VuY2VzQGlldGYub3JnPC9zcGFuPjwvYT5d PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxiPk9uIEJl aGFsZiBPZjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48 L2I+QWRhbSBNb250dmlsbGU8YnI+DQo8Yj5TZW50OjwvYj48c3BhbiBjbGFzcz0iYXBwbGUtY29u dmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+RnJpZGF5LCBKdW5lIDEwLCAyMDE2IDI6MjUgUE08 YnI+DQo8Yj5Ubzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7 PC9zcGFuPkd1bm5hciBFbmdlbGJhY2g8YnI+DQo8Yj5DYzo8L2I+PHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPiZsdDs8YSBocmVmPSJtYWlsdG86c2FjbUBp ZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+c2FjbUBpZXRmLm9yZzwvc3Bhbj48 L2E+Jmd0Ozs8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+ PGEgaHJlZj0ibWFpbHRvOnRvbnlAeWFhbmF0ZWNoLmNvbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1 cnBsZSI+dG9ueUB5YWFuYXRlY2guY29tPC9zcGFuPjwvYT48YnI+DQo8Yj5TdWJqZWN0OjwvYj48 c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+UmU6IFtzYWNt XSBDYWxsIGZvciBhZG9wdGlvbiBvZiBkcmFmdC1jb2ZmaW4tc2FjbS1uZWEtc3dpZC1wYXRuYyBh cyBhIFNBQ00gV0cgZG9jdW1lbnQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+VGhpcyBzZWVt cyBsaWtlIGEgZmluZSBhcHByb2FjaC48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QXMgcGFy dCBvZiB0aGF0IHRoaXJkIGl0ZW0sIEnigJlkIGxpa2UgdG8gZ2V0IHJlcXVpcmVtZW50cyBmcm9t IG91ciBvd24gZHJhZnRzIGFzIHdlbGwsIHN0YXJ0aW5nIHBlcmhhcHMgd2l0aCB0aGUgdnVsbmVy YWJpbGl0eSBzY2VuYXJpbywgYnV0IGFsc28gY29uc2lkZXJpbmcgb3VyIHJlcXVpcmVtZW50cyBh bmQgb3RoZXIgZHJhZnRzLiAmbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7 PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5 bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPGRpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIEp1biA5LCAyMDE2LCBhdCA3OjQ0IFBNLCBHdW5uYXIg RW5nZWxiYWNoICZsdDs8YSBocmVmPSJtYWlsdG86Z3VubmFyLmVuZ2VsYmFjaEB0aHJlYXRndWFy ZC5jb20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmd1bm5hci5lbmdlbGJhY2hAdGhyZWF0 Z3VhcmQuY29tPC9zcGFuPjwvYT4mZ3Q7IHdyb3RlOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2lu LWJvdHRvbToxMi4wcHQiPjxicj4NCjxicj4NCkhleSBUb255LCBmdW5ueSB0aGluZyB0aGF0IHlv dSBzaG91bGQgc2F5IHRoYXQuJm5ic3A7IFlvdSBzZWVtIHRvIGhhdmUgYSBiZXR0ZXIgYXdhcmVu ZXNzIG9mIHRoZSBvdGhlciBlZmZvcnRzIGdvaW5nIG9uIG91dCB0aGVyZSB0aGFuIEkgZG8sIHNv IEkgY291bGQgdXNlIHlvdXIgaGVscCBpbiBpZGVudGlmeWluZyBvdGhlciBnb29kIGNhbmRpZGF0 ZXMgYW5kIHdoYXQgd2lsbCBiZSBuZWNlc3NhcnkgdG8gc3VwcG9ydCBhcyBtYW55IG9mIHRoZW0g YXMgcG9zc2libGUuPGJyPg0KPGJyPg0KV2hhdCBJJ2QgcmVhbGx5IGxpa2UgdG8gZG8gaXMgdGFr ZSBhIG1vcmUgZm9ybWFsIGFwcHJvYWNoIC0tIGdhdGhlciBzb21lIHJlcXVpcmVtZW50cyBhbmQg dGhlbiBzZWUgZnJvbSBhbW9uZyB0aGUgZXhpc3RpbmcgZWZmb3J0cyB3aGljaCBpcyB0aGUgYmVz dCBmcm9tIGFtb25nIHRob3NlIHRoYXQgYXJlIGdvb2QgZW5vdWdoLiZuYnNwOyBJZiBhbnkuPGJy Pg0KPGJyPg0KQnV0IGZpcnN0IGlzIGEgbWF0dGVyIG9mIHNldHRpbmcgdGhlIHJlcXVpcmVtZW50 cy4mbmJzcDsgU3RhdGVkIGdlbmVyYWxseSwgSSByZWFsbHkgb25seSBoYXZlIHRocmVlOjxicj4N Cjxicj4NCiZuYnNwOyAxKSZuYnNwOyBJcyBleHRlbnNpYmxlIC0tIGFzIGEgZm9yayBvdXRzaWRl IG9mIHRoZSBjdXJyZW50IG93bmVyLCBpZiBuZWNlc3NhcnksIHRvIGJlIHN1cmUgaXQgY29udGlu dWVzIHRvIG1lZXQgU0FDTSBuZWVkcyB3aXRob3V0IHJlbHlpbmcgb24gdGhlIGdvb2QgZ3JhY2Vz IG9mIHRoZSBjdXJyZW50IG93bmVyPGJyPg0KPGJyPg0KJm5ic3A7IDIpJm5ic3A7IFJlYWRpbHkg YWNjZXNzaWJsZSAoZWcuLCBzcGVjIGlzIG5vdCBjb3N0IHByb2hpYml0aXZlIGZvciBhbnkgdXNl cnMpPGJyPg0KPGJyPg0KJm5ic3A7IDMpJm5ic3A7IFRoZSBtb3N0IGNvbXBsZXRlICh0aGF0IGlz LCBjbG9zZXN0IHRvIGJlaW5nIGFibGUgdG8gcmVwcmVzZW50IHRoZSBvdGhlciB0YWcgdHlwZXMg d2l0aG91dCBsb3NzIG9mIGRhdGEgb3Igc2hvZS1ob3JuaW5nIGRhdGEgaW50byBmaWVsZHMgdGhh dCB3ZXJlbid0IHJlYWxseSBtZWFudCBmb3IgdGhhdCB0eXBlIG9mIGRhdGEpPGJyPg0KPGJyPg0K PGJyPg0KSSdtIHN1cmUgQ2hhcmxlcywgZXQgYWwsIHdpbGwgaGF2ZSBvdGhlciByZXF1aXJlbWVu dHMsIHNvIGZlZWwgZnJlZSB0byBjaGltZSBpbi4mbmJzcDsgSG93ZXZlciwgSSB0aGluayB0aGUg c2ltcGxlciBhbmQgbW9yZSBpbmZvcm1hbCB3ZSBjYW4ga2VlcCB0aGlzIGxpc3QgdGhlIHF1aWNr ZXIgd2UgY2FuIGdyaW5kIHRocm91Z2ggaXQuPGJyPg0KPGJyPg0KPGJyPg0KLS1ndW48YnI+DQo8 YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+T24gNi85LzIwMTYgMjozMyBQTSwgVG9ueSBSdXRrb3dza2kgd3Jv dGU6PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1h cmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPkhpIEFkYW0sPGJyPg0KPGJyPg0KQSBnb29k IHNvbHV0aW9uLiZuYnNwOyBDaGFybGVzIGFuZCBHdW5uYXIgc2hvdWxkIGFsc28gZW5nYWdlPGJy Pg0KaW4gc29tZSBwcm9hY3RpdmUgb3V0cmVhY2guJm5ic3A7IFNpbXBseSBzdGF0aW5nIHRoYXQg JnF1b3Q7bm8gb3RoZXI8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8 L3NwYW4+PGJyPg0Kc29sdXRpb25zIHRvIHRoZSBwcm9ibGVtIG9mIHNvZnR3YXJlIGlkZW50aWZp Y2F0aW9uIGhhdmU8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3Nw YW4+PGJyPg0KYmVlbiBzdWJtaXR0ZWQmcXVvdDsgaXMgcHJlcG9zdGVyb3VzIHdoZW4gdGhlcmUg YXJlIHNvIG1hbnk8YnI+DQpvdXQgdGhlcmUuJm5ic3A7IElNSE8sIG9uZSBvZiB0aGUgbG9uZy1z dGFuZGluZyBwcm9ibGVtcyB3aXRoPGJyPg0KU0FDTSBpcyBpdHMgaW5zdGl0dXRpb25hbCBhbmQg cGFydGljaXBhdG9yeSBpbnN1bGFyaXR5IGluIGFuPHNwYW4gY2xhc3M9ImFwcGxlLWNvbnZlcnRl ZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCmFyZW5hIHdoZXJlIHNvIG1hbnkgYWxtb3N0IGlk ZW50aWNhbCBhY3Rpdml0aWVzIGFyZSBvY2N1cnJpbmc8c3BhbiBjbGFzcz0iYXBwbGUtY29udmVy dGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGJyPg0KaW4gb3RoZXIgdmVudWVzIHdoZXJlIHRoZXJl IGlzIGZhciBncmVhdGVyIGluZHVzdHJ5IHBhcnRpY2lwYXRpb24uPGJyPg0KSWdub3JpbmcgdGhl bSBkaW1pbmlzaGVzIHRoZSB2YWx1ZSBvZiB3aGF0ZXZlciBTQUNNPHNwYW4gY2xhc3M9ImFwcGxl LWNvbnZlcnRlZC1zcGFjZSI+Jm5ic3A7PC9zcGFuPjxicj4NCmFjY29tcGxpc2hlcy48YnI+DQo8 YnI+DQotLXRvbnk8bzpwPjwvbzpwPjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+T24gMjAxNi0wNi0wOSAzOjQ3IFBNLCBBZGFtIE1vbnR2aWxsZSB3cm90ZTo8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1 LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+QWxsOjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5BZnRlciBzZXZlcmFsIG9uLWxp c3QgZGlzY3Vzc2lvbnMsIHRoZSBsYXN0IHZpcnR1YWwgaW50ZXJpbSwgYW5kIHRoZSBkaXNjdXNz aW9ucyBzdXJyb3VuZGluZyB0aGlzIGNhbGwgZm9yIGFkb3B0aW9uLCB0aGUgY2hhaXJzIGFja25v d2xlZGdlIHRoYXQgdGhlcmUgYXJlIHNvbWUga2V5IGNvbmNlcm5zIHdpdGggdGhpcyBkcmFmdCwg YnV0IGFsc28gc2VlIHRoYXQgdGhlcmUgaXMgcm91Z2ggY29uc2Vuc3VzIGZvcg0KIGFkb3B0aW9u LiAmbmJzcDtXZSBhZGRpdGlvbmFsbHkgbm90ZSB0aGF0IG5vIG90aGVyIHNvbHV0aW9ucyB0byB0 aGUgcHJvYmxlbSBvZiBzb2Z0d2FyZSBpZGVudGlmaWNhdGlvbiBoYXZlIGJlZW4gc3VibWl0dGVk IHRvIHRoZSB3b3JraW5nIGdyb3VwIFsxXS48bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+QmVj YXVzZSB0aGUgdG9waWMgb2Ygc29mdHdhcmUgaWRlbnRpZmljYXRpb24sIGFuZCBTV0lEIGluIHBh cnRpY3VsYXIsIGFwcGVhcnMgdG8gYmUgYSBjb250ZW50aW91cyBvbmUsIHdlIGFyZSBkZXNpZ25h dGluZyBDaGFybGVzIFNjaG1pZHQgYW5kIEd1bm5hciBFbmdlbGJhY2ggYXMgZWRpdG9ycyBvZiB0 aGUgd29ya2luZyBncm91cCBkcmFmdCBbMl0uICZuYnNwO1dlIGJlbGlldmUgdGhhdCBDaGFybGVz IGFuZCBHdW5uYXINCiB3aWxsIGJyaW5nIHRoZSBuZWNlc3NhcnkgYmFsYW5jZSB0byB0aGlzIGRy YWZ0LCBzbyB0aGF0IHRoZSBrZXkgY29uY2VybnMgYXJlIHN1ZmZpY2llbnRseSBhZGRyZXNzZWQu PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPktpbmQgcmVnYXJkcyw8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNw OzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCI+QWRhbSAmYW1wOyBLYXJlbjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5b MV0gVGhpcyBkcmFmdCBhZG9wdGlvbiBkb2VzIG5vdCBwcmVjbHVkZSBmdXR1cmUgYWx0ZXJuYXRp dmUgc3VibWlzc2lvbnM8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlsyXSBOb3RlIHRoYXQgb3JpZ2luYWwgYXV0aG9ycyB3 aWxsIHJlbWFpbiBhdXRob3JzLCBidXQgQ2hhcmxlcyBhbmQgR3VubmFyIHdpbGwgaG9sZCB0aGUg cGVuLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1 LjBwdCI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPk9uIE1heSAxNywgMjAx NiwgYXQgMTE6MjEgQU0sIEthcmVuIE8nRG9ub2dodWUgJmx0OzxhIGhyZWY9Im1haWx0bzpvZG9u b2dodWVAaXNvYy5vcmciPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPm9kb25vZ2h1ZUBpc29j Lm9yZzwvc3Bhbj48L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkZvbGtzLDxzcGFu IGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkFzIGRpc2N1c3NlZCBkdXJpbmcgb3VyIGxhc3QgY291cGxlIG9mIG1lZXRpbmdzLCB0 aGlzIGlzIHRoZSBvZmZpY2lhbCBjYWxsIGZvciBhZG9wdGlvbiBvZiZuYnNwOzxhIGhyZWY9Imh0 dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWNvZmZpbi1zYWNtLW5lYS1zd2lk LXBhdG5jLyI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aHR0cHM6Ly9kYXRhdHJhY2tlci5p ZXRmLm9yZy9kb2MvZHJhZnQtY29mZmluLXNhY20tbmVhLXN3aWQtcGF0bmMvPC9zcGFuPjwvYT4m bmJzcDthcw0KIGEgU0FDTSB3b3JraW5nIGdyb3VwIGRvY3VtZW50LiZuYnNwOzxvOnA+PC9vOnA+ PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj5QbGVhc2UgcmVwbHkgd2l0aCBhbnkgY29tbWVudHMgb3IgY29uY2Vy bnMgYWxvbmcgeW91ciBzdXBwb3J0IG9mIHRoaXMgYWN0aW9uIHRvIHRoZSBtYWlsaW5nIGxpc3Qu Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8 ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoYW5rcyw8bzpwPjwvbzpwPjwvcD4N CjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkthcmVu IGFuZCBBZGFtPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX188YnI+DQpzYWNtIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpz YWNtQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVycGxlIj5zYWNtQGlldGYub3JnPC9z cGFuPjwvYT48YnI+DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL3NhY20iPjxzcGFuIHN0eWxlPSJjb2xvcjpwdXJwbGUiPmh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vc2FjbTwvc3Bhbj48L2E+PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwcmU+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188bzpw PjwvbzpwPjwvcHJlPg0KPHByZT5zYWNtIG1haWxpbmcgbGlzdDxvOnA+PC9vOnA+PC9wcmU+DQo8 cHJlPjxhIGhyZWY9Im1haWx0bzpzYWNtQGlldGYub3JnIj48c3BhbiBzdHlsZT0iY29sb3I6cHVy cGxlIj5zYWNtQGlldGYub3JnPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48YSBo cmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20iPjxzcGFuIHN0 eWxlPSJjb2xvcjpwdXJwbGUiPmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8v c2FjbTwvc3Bhbj48L2E+PG86cD48L286cD48L3ByZT4NCjwvYmxvY2txdW90ZT4NCjxkaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwv bzpwPjwvcD4NCjwvZGl2Pg0KPHByZT5fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fXzxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPnNhY20gbWFpbGluZyBsaXN0PG86 cD48L286cD48L3ByZT4NCjxwcmU+PGEgaHJlZj0ibWFpbHRvOnNhY21AaWV0Zi5vcmciPjxzcGFu IHN0eWxlPSJjb2xvcjpwdXJwbGUiPnNhY21AaWV0Zi5vcmc8L3NwYW4+PC9hPjxvOnA+PC9vOnA+ PC9wcmU+DQo8cHJlPjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc2FjbSI+PHNwYW4gc3R5bGU9ImNvbG9yOnB1cnBsZSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbG1hbi9saXN0aW5mby9zYWNtPC9zcGFuPjwvYT48bzpwPjwvbzpwPjwvcHJlPg0KPC9ibG9j a3F1b3RlPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiZuYnNwOzxvOnA+PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250 LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+X19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpzYWNtIG1haWxpbmcgbGlzdDxi cj4NCjwvc3Bhbj48YSBocmVmPSJtYWlsdG86c2FjbUBpZXRmLm9yZyI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjpwdXJwbGUiPnNhY21AaWV0Zi5vcmc8L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYi Pjxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3Rp bmZvL3NhY20iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6cHVycGxlIj5odHRwczovL3d3dy5pZXRm Lm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY208L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9wPg0KPC9k aXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5i c3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwv Ym9keT4NCjwvaHRtbD4NCg== --_000_BY2PR09MB1078437729D1E67B79C83516A52A0BY2PR09MB1078namp_-- From nobody Mon Jun 20 14:27:18 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2152312DA61 for ; Mon, 20 Jun 2016 14:27:17 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.454 X-Spam-Level: X-Spam-Status: No, score=-5.454 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id w9qX5YvijV3e for ; Mon, 20 Jun 2016 14:27:15 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext7.iad.github.net [192.30.252.198]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 9E1E112DA59 for ; Mon, 20 Jun 2016 14:27:15 -0700 (PDT) Date: Mon, 20 Jun 2016 14:27:13 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1466458033; bh=lW9oEMrrq3KzqnDMX0gB/WhRBu3BEChu615WNZ1CIXE=; h=From:Reply-To:To:Cc:Subject:List-ID:List-Archive:List-Post: List-Unsubscribe:From; b=TgeWkT84mWXKcBPSBoIBZRmn61vDio9odabymR30DFxmIlYRezI097A/K10Jfs1Gg U9NE+cxKY9rHWVlxbR7r6PhypHNjE8YSYL7N4MwfRAS6XhgnLyfeOa2AB50EhS4YsU k9kE9iajgtQ7E47sjcSPYwoorxy+S6vZaZIcLxWM= From: Jim Schaad To: sacmwg/vulnerability-scenario Message-ID: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_57685fb127483_1da53fe785d0b2c02542e2"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: [sacm] [sacmwg/vulnerability-scenario] Correct urls to be version neutral (#26) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jun 2016 21:27:17 -0000 ----==_mimepart_57685fb127483_1da53fe785d0b2c02542e2 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit If we point to version neutral URLs then they do not need to be updated every time a new version of the document is published. You can view, comment on, or merge this pull request online at: https://github.com/sacmwg/vulnerability-scenario/pull/26 -- Commit Summary -- * Merge remote-tracking branch 'refs/remotes/sacmwg/master' * Point to version neutral versions -- File Changes -- M README.md (4) -- Patch Links -- https://github.com/sacmwg/vulnerability-scenario/pull/26.patch https://github.com/sacmwg/vulnerability-scenario/pull/26.diff --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/pull/26 ----==_mimepart_57685fb127483_1da53fe785d0b2c02542e2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

If we point to version neutral URLs then they do not need to be updated every time a new version of the document is published.

You can view, comment on, or merge this pull request online at:

  https://github.com/sacmwg/vulnerability-scenario/pull/26

Commit Summary

  • Merge remote-tracking branch 'refs/remotes/sacmwg/master'
  • Point to version neutral versions

File Changes

Patch Links:

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_57685fb127483_1da53fe785d0b2c02542e2-- From nobody Mon Jun 20 15:34:27 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 21B8D12D908 for ; Mon, 20 Jun 2016 15:34:26 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.9 X-Spam-Level: X-Spam-Status: No, score=-1.9 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ROBS3ZVZY7DX for ; Mon, 20 Jun 2016 15:34:23 -0700 (PDT) Received: from sc9-admin1.yaanatech.net (63-128-177-34-static.dzbja.com [63.128.177.34]) by ietfa.amsl.com (Postfix) with ESMTP id C24E712D84B for ; Mon, 20 Jun 2016 15:34:16 -0700 (PDT) Received: from extmail1.yaanatech.com (extmail1.yaanatech.com [63.128.177.51]) by sc9-admin1.yaanatech.net (Postfix) with ESMTP id 7AADD38C for ; Mon, 20 Jun 2016 22:34:16 +0000 (UTC) Received: from [192.168.1.51] (pool-173-67-205-17.clppva.fios.verizon.net [173.67.205.17]) (using TLSv1 with cipher DHE-RSA-AES128-SHA (128/128 bits)) (No client certificate requested) by extmail1.yaanatech.com (Postfix) with ESMTP id C56E658086 for ; Mon, 20 Jun 2016 22:28:16 +0000 (UTC) References: <576805A6.8040609@sit.fraunhofer.de> To: sacm@ietf.org From: Tony Rutkowski Organization: Yaana Technologies Message-ID: <75cb4a18-0ee2-dbd7-ce5e-36df09a2f74a@yaanatech.com> Date: Mon, 20 Jun 2016 18:34:10 -0400 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: <576805A6.8040609@sit.fraunhofer.de> Content-Type: multipart/mixed; boundary="------------9E9FBE5BE082F6ACCBF8C3E9" Archived-At: Subject: [sacm] useful reference listing to SACM related work X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list Reply-To: tony@yaanatech.com List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jun 2016 22:34:26 -0000 This is a multi-part message in MIME format. --------------9E9FBE5BE082F6ACCBF8C3E9 Content-Type: multipart/alternative; boundary="------------59CC44369B043142347CB671" --------------59CC44369B043142347CB671 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit This listing is updated every six months. It is a handy compendium, inter alia, for formal citations to many SACM related specifications. Note the citations to the ITU-T version of OVAL - X.1526. It is freely available with official translations into five other languages. http://www.itu.int/rec/T-REC-X.1526-201401-I The citation to the Critical Security Controls, ETSI TR 103 305 is to the V5.1 version. The V6.0 version as well as the various compendiums and mapping to frameworks and implementations were adopted last Friday by the TC CYBER Plenary, and will be published shortly. X.1500 Amd 10 in Sept will reflect the new version. It will also likely contain updates for the OASIS STIX, TAXII, and CybOX specifications, and the new 3GPP Security Assurance Specification for 3GPP Network Products (TS 33.116 , TS 33.117, and TS 33.926). --tony --------------59CC44369B043142347CB671 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit This listing is updated every six months.  It
is a handy compendium, inter alia, for formal
citations to many SACM related specifications.

Note the citations to the ITU-T version of OVAL
- X.1526.  It is freely available with official
translations into five other languages.
http://www.itu.int/rec/T-REC-X.1526-201401-I

The citation to the Critical Security Controls,
ETSI TR 103 305 is to the V5.1 version.  The V6.0
version as well as the various compendiums and
mapping to frameworks and implementations were
adopted last Friday by the TC CYBER Plenary, and
will be published shortly.   X.1500 Amd 10 in Sept
will reflect the new version.  It will also likely
contain updates for the OASIS STIX, TAXII, and
CybOX specifications, and the new 3GPP Security
Assurance Specification for 3GPP Network Products
(TS 33.116 ,  TS 33.117, and TS 33.926).

--tony





--------------59CC44369B043142347CB671-- --------------9E9FBE5BE082F6ACCBF8C3E9 Content-Type: application/pdf; name="T-REC-X.1500-201603-I!Amd9!PDF-E.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="T-REC-X.1500-201603-I!Amd9!PDF-E.pdf" JVBERi0xLjUNCiW1tbW1DQoxIDAgb2JqDQo8PC9UeXBlL0NhdGFsb2cvUGFnZXMgMiAwIFIv TGFuZyhlbi1VUykgL1N0cnVjdFRyZWVSb290IDExOSAwIFIvT3V0bGluZXMgMTE2IDAgUi9N YXJrSW5mbzw8L01hcmtlZCB0cnVlPj4+Pg0KZW5kb2JqDQoyIDAgb2JqDQo8PC9UeXBlL1Bh Z2VzL0NvdW50IDIwL0tpZHNbIDMgMCBSIDIzIDAgUiAzOCAwIFIgNTIgMCBSIDYwIDAgUiA2 MiAwIFIgNjQgMCBSIDY2IDAgUiA2OCAwIFIgNzAgMCBSIDcyIDAgUiA3NCAwIFIgNzYgMCBS IDc4IDAgUiA4MCAwIFIgOTEgMCBSIDEwMSAwIFIgMTEwIDAgUiAxMTEgMCBSIDExMyAwIFJd ID4+DQplbmRvYmoNCjMgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3Vy Y2VzPDwvRm9udDw8L0YxIDUgMCBSL0YyIDggMCBSL0YzIDEwIDAgUi9GNCAxMiAwIFIvRjUg MTQgMCBSPj4vRXh0R1N0YXRlPDwvR1M3IDcgMCBSPj4vWE9iamVjdDw8L0ltYWdlMTkgMTkg MCBSL0ltYWdlMjEgMjEgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQy9J bWFnZUldID4+L01lZGlhQm94WyAwIDAgNTk1LjMyIDg0Mi4wNF0gL0NvbnRlbnRzIDQgMCBS L0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZpY2VSR0I+Pi9UYWJz L1MvU3RydWN0UGFyZW50cyAwPj4NCmVuZG9iag0KNCAwIG9iag0KPDwvRmlsdGVyL0ZsYXRl RGVjb2RlL0xlbmd0aCAxOTAzPj4NCnN0cmVhbQ0KeJy9WltvEzkUfq/U/+DHGbRxfB8bIaQ0 DZBdWqDNCljKQ0inpdImgTQt9N/vOfaEzjVNk2FVqW5mbH/fuR877fYWy6uL8WRJnj3r9pbL 8eRrek4+dUfzb5+7o7tvafft+PJqNl5ezWfd05svS3z0Kh2fp4vnz8nBYZ8cjPb3ui84cWR0 sb/HCYMfToRLaOKIZZpqQ0ZTmPPyNCGX1/t7jFzir5f7e58iEn8moz/39wawCRkc9Um3gc/B fLmcT5spvZjPlyVKgnBOmSrQ0ooqS7ih1nMqElhJUl3mHLVGNa37vr/3LqNPum+R+FF/eEhY 9/V4dkmidNZ5eRBn1GBu4JDAZobDQJUkCaNOk0W6v/f+CZnlmIgie0cdMEtgemJqiLxr5MK3 gBfEVtSXETCMKvUoAuKeABeaOr5ioIShzDVQkGUNcMkp8E0M1eJR+LLBGI8goxrIKEtVIMOo ZsJ7t//De/gw7ijBoxkM3EZLGJiJUnwoowUOzL9jNhqHhziFm+gKBx7Nw7rilH/DOxK2HoV3 aeEdfuIymoSH2S5THJgfAPbmfmsYMrxJWPcQFxhIePg3Dkl+F5GbWTBNxShqSzu4Ukxz6kTe Dps6hS5HhTEJZTqLCuUwdW0clJDp7OPgTUX8DD8Tf0MCwQ0N5qiH8XNY3FGjYTPAAo0nVOWg 8jSTEs2w0oSVorxyZSNpSiQZBUwBk1eZCyJDK/RercGLyoR3gHKKihJWp8X9BbNU6OL+o+33 F+XKKQXlsrh9rT1zJhUaQkCuTCoZo8yuM6m9N2l+qQlLk0ZFsAJTpQU1wjPlGdEPlGvGKmx3 ANEwzdgCyEPayBxcY/oAfaIiIaYsTaRu0Icru3h1rapylQRCv9bNmbpPReDgXEeDWEWvB7GJ +m/A4aOjo1hi6uQiOh72/diLVTZ3CFNkdNzgUttSE5AmrS5yq9VkS0rQTsAeAef0l2wo5fFh 7+QQPrFo+E8PH8uVyAQnDuJOEgWdhDXwTkUnbavDOMyxeZa/VRsWkvSqefQCvYg7IiLDIH9T /tsIVNSAGgEdaxF1bdgUmkV2Hw5SSwr5L+PBnaXQB1di6VeDZIsJQiBhcDn5K3Z7MRh0isZO 8dfsHFUxTWMdzZYVfjuBa8ijmDhy4FUN7IgAZxxRQHAtI0Dya0eEWjvz7ewMXbkqnwyUBV1Y cDgodKuqdRYx2UUvF4ybGML9LCYQ3wQNv5sp6hhoaMQgOAoMNjwciXIfqKBCWZX1nzzx5aom 1Ov6QK3hbLK2UlXxZbH8YO8ZCGAjqJNmBlzXZRtoA5WDFXKVfQeo8ZPh4NRr/sNTctjDsMPW K+qRY/969D6k2b/8pD8IJuE3YK23g1Vm7rjoI8Tp6WhwVG/B+8TVhgTQhJskk6CPTKBmgi9B 0TRYM7FwJNhDBprHp6QXqia8PiRB5L6ffDL0gn6sTbG7MFUQl65IdEODq/YNDplCrtyuj2Lf xXA6+5KighbX6QRVcLO4ghOdDa/IlU/AFzhhvpiOl/7zfEZSnPITdDrBB1/HM/x8mbauPgmR ylWReVV/j0HRdSgQCdoWUJ4xdsCfty4OHMCgYW9RnDU+lwdB97/NKirY+hbP4FH6I04iMscn 3sK/O1qh0ttVvvF+cwesvqTB80zO89pWiID1/sicI7BhFOr2oxCb60fmAlMuPjxRmLtD8UHx RPUSoKH4SKuoXdvOVvGTNTdjoJKMTaaSRjqlxiXTh0z8dU7mp7cpOKd30h/YBZL5BcGM7h3k 7gv2gMFdJLoLuM8qV2Gtgb+uZjDjYo6JzKerOTaNmK0EZKskbAPZ6hJWlpJVVWjbkpwa+xBb lHNDvbvtKFR6xJWqNcPzzBZd9k7oQiqaJEX0xqy3LYSjluchCMYlnGEn0HA/bRlMa4ygdfJU 77ZZS6YUhuE1SQH8xJfj2xivYa/TWEbnvn++Xi7Amjf4brK8WaBpw4ss+TpMvn6i94JJnK/+ btNLe96yjwpH5SpJQzgDswtsPYAchjP46IwEp3XRT6TswxkfkCWKPvmKwT/zjcr3G1/mrh+y jWgp0hVPqFNFETbU4qq99198eRIidAvhohu6E06zY/3Fk7oNVKVE4ImQZyUCf4tNKwSH0WTf ViCdjYXQWZm4WHT6r2rKRGCUKbWJUmPh5HCU5jZP6yRUgvk0pLHZuW9QVeRbmhkhw1H9nckO XAS0itBDVLnU3x7vhGSoqEMakebkuSWWhBJVKxXe1WLxZKjR6p3trrBGU+1qYNsXEKZyXYN0 hhcP/CxuG1BxgynjfxBNiYbo2Amp7pikQhqsIK09K20tFjQNcPIrg2FZZ5KHwt5+ICgl8UuY qjJ7WYrBODifpmtapC2RNRaN1s1YiyQl/mtAFal6MbkrkhL1SBvWE/N76wkzNNmCVVL4D5JK DVXcf7Hm2TRsnts5+zO/f+7c0UFvZ0wYa3m2pXYa/cQIKmxOWg5ZANpd5ACdIbxSHJqHbM0E /7VmOB1fptyRwzmpFatw1pDU+L2sspQb0glK7GiaaOdy+wme3+8/zWMtPA0KZW5kc3RyZWFt DQplbmRvYmoNCjUgMCBvYmoNCjw8L1R5cGUvRm9udC9TdWJ0eXBlL1RydWVUeXBlL05hbWUv RjEvQmFzZUZvbnQvVGltZXMjMjBOZXcjMjBSb21hbi9FbmNvZGluZy9XaW5BbnNpRW5jb2Rp bmcvRm9udERlc2NyaXB0b3IgNiAwIFIvRmlyc3RDaGFyIDMyL0xhc3RDaGFyIDEyMi9XaWR0 aHMgMTUwOCAwIFI+Pg0KZW5kb2JqDQo2IDAgb2JqDQo8PC9UeXBlL0ZvbnREZXNjcmlwdG9y L0ZvbnROYW1lL1RpbWVzIzIwTmV3IzIwUm9tYW4vRmxhZ3MgMzIvSXRhbGljQW5nbGUgMC9B c2NlbnQgODkxL0Rlc2NlbnQgLTIxNi9DYXBIZWlnaHQgNjkzL0F2Z1dpZHRoIDQwMS9NYXhX aWR0aCAyNTY4L0ZvbnRXZWlnaHQgNDAwL1hIZWlnaHQgMjUwL0xlYWRpbmcgNDIvU3RlbVYg NDAvRm9udEJCb3hbIC01NjggLTIxNiAyMDAwIDY5M10gPj4NCmVuZG9iag0KNyAwIG9iag0K PDwvVHlwZS9FeHRHU3RhdGUvQk0vTm9ybWFsL2NhIDE+Pg0KZW5kb2JqDQo4IDAgb2JqDQo8 PC9UeXBlL0ZvbnQvU3VidHlwZS9UcnVlVHlwZS9OYW1lL0YyL0Jhc2VGb250L1RpbWVzIzIw TmV3IzIwUm9tYW4sQm9sZC9FbmNvZGluZy9XaW5BbnNpRW5jb2RpbmcvRm9udERlc2NyaXB0 b3IgOSAwIFIvRmlyc3RDaGFyIDMyL0xhc3RDaGFyIDEyMi9XaWR0aHMgMTUxMiAwIFI+Pg0K ZW5kb2JqDQo5IDAgb2JqDQo8PC9UeXBlL0ZvbnREZXNjcmlwdG9yL0ZvbnROYW1lL1RpbWVz IzIwTmV3IzIwUm9tYW4sQm9sZC9GbGFncyAzMi9JdGFsaWNBbmdsZSAwL0FzY2VudCA4OTEv RGVzY2VudCAtMjE2L0NhcEhlaWdodCA2NzcvQXZnV2lkdGggNDI3L01heFdpZHRoIDI1NTgv Rm9udFdlaWdodCA3MDAvWEhlaWdodCAyNTAvTGVhZGluZyA0Mi9TdGVtViA0Mi9Gb250QkJv eFsgLTU1OCAtMjE2IDIwMDAgNjc3XSA+Pg0KZW5kb2JqDQoxMCAwIG9iag0KPDwvVHlwZS9G b250L1N1YnR5cGUvVHJ1ZVR5cGUvTmFtZS9GMy9CYXNlRm9udC9BcmlhbC9FbmNvZGluZy9X aW5BbnNpRW5jb2RpbmcvRm9udERlc2NyaXB0b3IgMTEgMCBSL0ZpcnN0Q2hhciAzMi9MYXN0 Q2hhciAxMjIvV2lkdGhzIDE1MTYgMCBSPj4NCmVuZG9iag0KMTEgMCBvYmoNCjw8L1R5cGUv Rm9udERlc2NyaXB0b3IvRm9udE5hbWUvQXJpYWwvRmxhZ3MgMzIvSXRhbGljQW5nbGUgMC9B c2NlbnQgOTA1L0Rlc2NlbnQgLTIxMC9DYXBIZWlnaHQgNzI4L0F2Z1dpZHRoIDQ0MS9NYXhX aWR0aCAyNjY1L0ZvbnRXZWlnaHQgNDAwL1hIZWlnaHQgMjUwL0xlYWRpbmcgMzMvU3RlbVYg NDQvRm9udEJCb3hbIC02NjUgLTIxMCAyMDAwIDcyOF0gPj4NCmVuZG9iag0KMTIgMCBvYmoN Cjw8L1R5cGUvRm9udC9TdWJ0eXBlL1RydWVUeXBlL05hbWUvRjQvQmFzZUZvbnQvQXJpYWws Qm9sZC9FbmNvZGluZy9XaW5BbnNpRW5jb2RpbmcvRm9udERlc2NyaXB0b3IgMTMgMCBSL0Zp cnN0Q2hhciAzMi9MYXN0Q2hhciAxMjEvV2lkdGhzIDE1MTcgMCBSPj4NCmVuZG9iag0KMTMg MCBvYmoNCjw8L1R5cGUvRm9udERlc2NyaXB0b3IvRm9udE5hbWUvQXJpYWwsQm9sZC9GbGFn cyAzMi9JdGFsaWNBbmdsZSAwL0FzY2VudCA5MDUvRGVzY2VudCAtMjEwL0NhcEhlaWdodCA3 MjgvQXZnV2lkdGggNDc5L01heFdpZHRoIDI2MjgvRm9udFdlaWdodCA3MDAvWEhlaWdodCAy NTAvTGVhZGluZyAzMy9TdGVtViA0Ny9Gb250QkJveFsgLTYyOCAtMjEwIDIwMDAgNzI4XSA+ Pg0KZW5kb2JqDQoxNCAwIG9iag0KPDwvVHlwZS9Gb250L1N1YnR5cGUvVHlwZTAvQmFzZUZv bnQvQXJpYWwvRW5jb2RpbmcvSWRlbnRpdHktSC9EZXNjZW5kYW50Rm9udHMgMTUgMCBSL1Rv VW5pY29kZSAxNTEzIDAgUj4+DQplbmRvYmoNCjE1IDAgb2JqDQpbIDE2IDAgUl0gDQplbmRv YmoNCjE2IDAgb2JqDQo8PC9CYXNlRm9udC9BcmlhbC9TdWJ0eXBlL0NJREZvbnRUeXBlMi9U eXBlL0ZvbnQvQ0lEVG9HSURNYXAvSWRlbnRpdHkvRFcgMTAwMC9DSURTeXN0ZW1JbmZvIDE3 IDAgUi9Gb250RGVzY3JpcHRvciAxOCAwIFIvVyAxNTE1IDAgUj4+DQplbmRvYmoNCjE3IDAg b2JqDQo8PC9PcmRlcmluZyhJZGVudGl0eSkgL1JlZ2lzdHJ5KEFkb2JlKSAvU3VwcGxlbWVu dCAwPj4NCmVuZG9iag0KMTggMCBvYmoNCjw8L1R5cGUvRm9udERlc2NyaXB0b3IvRm9udE5h bWUvQXJpYWwvRmxhZ3MgMzIvSXRhbGljQW5nbGUgMC9Bc2NlbnQgOTA1L0Rlc2NlbnQgLTIx MC9DYXBIZWlnaHQgNzI4L0F2Z1dpZHRoIDQ0MS9NYXhXaWR0aCAyNjY1L0ZvbnRXZWlnaHQg NDAwL1hIZWlnaHQgMjUwL0xlYWRpbmcgMzMvU3RlbVYgNDQvRm9udEJCb3hbIC02NjUgLTIx MCAyMDAwIDcyOF0gL0ZvbnRGaWxlMiAxNTE0IDAgUj4+DQplbmRvYmoNCjE5IDAgb2JqDQo8 PC9UeXBlL1hPYmplY3QvU3VidHlwZS9JbWFnZS9XaWR0aCAxNjEvSGVpZ2h0IDY3L0NvbG9y U3BhY2UvRGV2aWNlUkdCL0JpdHNQZXJDb21wb25lbnQgOC9JbnRlcnBvbGF0ZSBmYWxzZS9T TWFzayAyMCAwIFIvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA0MzQ3Pj4NCnN0cmVhbQ0K eJztnWtQVtUax9+PfbIvnY/N1IfmzFQfzhnPh8apceo43UYrjmWnnMrI8GiOWXbx4JRUmlbq mHe0xEIhlEJQENA38AIKgspFBAS5KSIqCt4ow3N+L39ZLvd7AU14jfaaZ/Zs9l7v2nuv3/o/ 63nWfgGP51o5v2bTLweqPG4Z1KX1uWnhvgW39G9ByGdjYsN9F27p33L0nlGuux7cBSEf/9tL 4b4Lt/RvQciuux7cBSE3eIZ25haH+0bc0o8FIWNdZ8+F+0bc0l8FCSPktqnz+1K5trFtR2HD nKW7/C1nT11Z5Yn+vlu33FxpGR4F5QspOQHPHjl+emn83q++yZs4Ix2UyVkHK2pbOXjkeFtN 88nDzSerjrbuPdS0dlMJdZ5+I2HMW8nUbzzWPsBP4ZYQRUJuuHO47a67rlyJTykdNjrukRfX ZOfXNLaeMdZwog3rpny65vgpUa5sOnGwoaW07jiI41L3vzs/89VpG9dtLGs/1xnGR3OLKRIy W/aBglojJiQ9+PgK9Hj05Fms+XSHTPtsDWtRztl3JGFL6TuzsmYs9j4VmZB7oK6gqnFlclFk dCqtuaDDXi7XN/uE7Bm689+foT5gvRWTMfSZVWynz/VqGz3fqy0eW1ukinPGdbPPKXw1Hnuz txrKaH/05PWfLMvdVnw4bnPxy1N+4ni4n/LPXk6NixHleWO/fmzs94CubGpFsCfOnMNaz57H TrVf0E5L2zkMLWcX1WokQHnemjwQd7vrZiZlhBybVvzk62sBvePgEc6On77JlXO4CsHw3Q8t rLpjmCblV96Ih5T4imxbx0XZKVn7BRBTgWkaZ655OX1X1cvv/QhH5Mx0PGVWZmFV057KBuBG TEqiZlrBIYi7gffAF4Ki+x5dwrxZ+ekqCbn03mev8e24eObcRdTXfv6SjB8N5ZScgzhq5mWF XtXHTlU0teK9R0YloO691UdpFhWDmEswACbM3MwOVwz3Q/+JCr095u1kHCx0jrS0ld81QpSb XoqGoPh2XPTxPX+pUybKKJoBAF8Cb4VeUCbuoikQo2V89ZAHvmBGZi7eebAuvbByxGvx3gO1 2fsPM4m7lAem0M/EwBWNLWQ90CHVLc3aLcRY6+Kk0x0XBPfiL79inb9eZmsoa2om9mZSzivx LYkQVoEPaZfVH99X65uRkTDOmSNMx7BmygZxRlGVS3kAys69jUgMFky7BjFiRL+GcvOGbdAU 3Mu//YYZynLXOHNiLdwyW+IrfDVNMWZo9sCR5tmxOwjOCapf/SAFF51TWoOv3ph3iEk5Zc9B rs49hLsbBm1pPNbOXIn/hIWtYlzusdpjRFxXKd85/MzuMpgCt+tKV1fXFSGW616RWPT0uETC LcJvoinlyL7puAcx0oYjrjv/UAOVcdSIekFiPioG8Yb8csaGuw7WT2XY6DgkBgUHYjDhdcmb jJCh3FFYDtbfurowWLMP0HEfpEJN2VNFbSvumswXxKRaBnHR4WNUg++uinocNeLVdZmXQZyU V7YyswhnHu7OGISFSRMJ0/9QKK0LgBihZT8xzUFZvppIm1CKgMrMxVrs4oO4YmZ246iZizFk S1AtxDjqGYu9UGb7024f4vickugVXu4n3F0yqAqOMTI6lcmRjAYEUL46FxeU1z48vuHN2Y3v L6qY9FXmwxOvIe6hTPwMXzSLl1ZErezYRNTMvERcDABctFScs+8I1wLx9nJfuIWvJtwaOzOF cCtxuw/x6q37npuS5LrrW1imz/VmF9VGfZluI65sOlF9rNWH2MZ6vVXdMSx2RhJwmYglYWIt rXEpL8ZohLx47aYSRtGYt5Kj53uRMDvz1uQBmlgLX521rxpHDWJMiL/6MR/5h7tjBklBLLhT Jke2hVVNDl/dvCU/BGJpmTptHU6+JikGMQOmvL6FZhk/BM8gjpiUBGK8NIaEQQxoYi0iMSh/ m1W8PKNw1OREV8i3pJCWZu6txm2S4xRUNfYglpBbAWRnTMGMfNmsUWsWNu+b8AaMFsaMvLQW MKG8ZEMBc7H3QO3WkhrCaRAzESfuLIF+TFzusvRCZn/uLdzd84cv7ec6iW+RErkSbhPExlej u6tBV2XdtYwpuDESyK2MhK23xq1GwjQOXzwGg0pJMXy17qFYa932kti04uHjvsNRL9i4e+TE BMdLCrJmIrHQ6u6PFW/TZl9uoNeybmPZgMWTXAuxEPYgKBDT/0bImpGh7FNiz0p1L/bgGJ9j 7+Zb0+2ie74V0KxYmsYxEHM51ApirV4iYRAjYRAzEaNiwi0QR87Z5FjvomeGPPBFiOWRux9a SGJ+a3uJcJGLmh6j/d85imjBNNjfhWCYDpdnJujVi79u/+xjhHfV0gfa9C1QD4/qizVv2EZE zURMO0da2jBaw5Qd0z6XAzEqNl7651JfdM3+luIa4q7UPZXkUMgZ1nSvfcM2YnaMETHaR0QZ HBDHOKKhgudXBYnIvwVaNh9RI8JhfrRvQK09+PgKtppTdFZGIxK7Roja1AcHEjHKRXH/C1Jg cf5SZ7CzoQvRFzQDniL2BjGxtGItEJNqBaxJdE3PhEaMJzf9r4NmXz1J0u0AZDytfwubvdUg 00cMBZuI4waoyY4om7OMFu0sjd/r6UbMU6hNDa0BQ4y3IYUB8Y7CBns8y+hhXCuIzTDuu/Eg UGMKphHHKVoDMXBRsYmlGQ+fLMt11OSumEToHNst+yN2YJVepFnJR/fvr8GALaiyoDgQS+Z2 C9I719JFPdYQMjvmlnQzA4yYMbYobQ8OORhiJmUS3idfX3sTiEmgcAIhEI//KA3EWrdkPNgu ziCOmJD0/IfJ0oKKHe2oJ7VjpmxFMvqRavhPrshWs6cjWPJvgWo6yEVNRIS0TU27Be3L7PbZ mh31s6mmIwMWbnEVupdZMhhiEhwQ35yKmY5xAsEQMwuDWLkS6XAwxIz8sTNTJB+33ERhbBPH EgUFQ0yA3X7+kv8U6V+ZFhx1QEyK5F8ZnyDEkdGpypVAjOQDIiboIoHCpYe7q/6o5Z1ZWaSi FcERE2zrSzha9UKVSD4YYhx+XOr+MW8nz47doSUO8qNgKsZFg1hvD8mVQBxwLl697YADseMX LgJmT7aTvA0LTv4mbs+sD9zQ002ZlUn3ljeeCIZ4V0X9Iy+uUTKLQQ3JB0MMfciiXECPnrwe 0NuKDwdEfLrjAvrFA2/MO6RcuKUtsIpBzFx8/xPLzT37zwj+z2WHOrdhgc6N3h5T1ZDrQ/o+ fhzEZCVl9ceDIcZPIq6dB+uQM4bfVh4UEHHr4iSNBKph32YVk5EFRHyq4yL6Re/i+513P149 GOKpy7IdeZO6yITQiEI5y5Drg151glLjId3ZqyIic4St6nDctECz0suQnkxWaylqoS+nOGJD tJNi3bN9ln3HzfM4JmWzH0fmeDq25k5UWeG92mQLYrq3tC4oYiSshS9MlEMgbhkedWDk1ILC Cr3u1+vggHMxwRVT8AvTk8V39dZ9IRB/nLB9yPX5hQOxPsjj6GH1ixtDrl/csHNSdYiq2RRo VmJRaK021WNUMHU8PemwrkI84zjlQKxqtKN7cCDWCAGribEZbxw0j6Nn9E/MzbNQ09P9dQ67 cW5Jz8IH6V7fWlMQxHpTT4KTV9Ig0KV1AYJkg9j3evGv/0r3FlOTsYEFVHFFbSt8cb8vv/cj NjIqgSPB5mIQD31mVa+IeSg9pgOxOkrPa44omdWOp2eRSt8kZEe/o+GA5cjHQ5yiz02DHiuP Npj8Nc7NmMUT3WrAxNxu0H4W4wrsxlWND8bE5RJEBUPMXAkCOh/KQoZXD41Yrxd3rd+mF4UB ERNc4aJpGQmvzCxanlF49OTZECp2RNQa5yaTgqmSX0x0tIwsMXJEp0xqzJYO5AhbcbFbMHOc LqFr0ZS9NB3iFB/XtUxT5iwf0bA0H/RYmbu5eZ01jehm1IhZlbWfTs/i+Li5KxpBQcRIwRBn 7aveWlLz7vxMtMwOyKjcO+JuS5ifRGbkXxmtcXDemrzIOZvguyy9cFHaHlz3+OmbgiEe90Gq xy03VRhmpCTEycEQE/digI6e742Y4EMWcDVDOHxft77+nSNTM5VNOGFXZrAt2VCAfoFI1lZ/ 9Kz8kuMGlmUUgfi2jY1v/4KbGjU5cUViUTDEBEWEvmkFhwBNgjzitfj0XVXBECNw/DNzsU35 QkqOebljDJpL4/eeab+6qBKfUuo/DBR4w3figgz7fSKejdtW+Mo4CZEehj77Jyl01KipPyRs KQ2GOCmvbEN+OZQFOnF72ccLc4Mhxhtk7q0m1rIpnxoXE1ChvRoN/lxaD+LH/7POfjlrxzah F/MH8oXd7VwiJiX5spsgiMmaiYswsUbUdHswxLTDSCBCi9tcjIu2hUwkcEOU0TVp1Ofrd324 2usIpwMiVoxhAg+9IzDhjfZ1A9TRgNFZ2eBeA9d3L4MhJuLFAE0CK9YB8yAh5hTDgMGgr2Dl Pz/dBNiducVo2d9j+xsIfJFb2zn4SsKOr28FRGzSKDuhMGdNbstI047HSkNMRjlYC0Pa9xX3 9kt0rMNAScT7bVYxubNhnb3ftybpX5kWCLk1GFSZT215f7HtsX85UKXP0rG2iIil53T/TRga Yf6Vf8bGzkxxvCz2dL+YEyazjOOxkkH/VQWPhdjsmLN2ujqICykJaFZm7IuMTmW2RYPEuhhu mYyGoBfQGMgwKmwpriHGVj7FFs88ZVbm7NgdDAaRxdjH+JQvANMvoXfb0XtGwfpsTCy61nd+ ZPmHGmhW8bPs+Q+TifafeNP5my/KYZGeFg8dyaCdcjoctT7icNR2ujqICx1CikqvTl645bHI eDwkQWzUl+kLNu7GSFqxpZt9CY5MxEVQKLGpy7JHTkzAYuJyVY2P+D4145uC+8cE/C5f+V0j OGuYGmP+BS5xILdhfxnALb+nPP1GAn07c932F6YnPzb2e/jSvfqaK7Yw1WeGNSZ1O4yDaH/8 R2kPvbQ68vWVP705t/TeZ3v90iYDwIAGLpPv3yNWcnVNxO6fAblVxQhZHvK+R5fwI3L+5Icd bDFwO4gb7vaPK1el95GswzIfnjj5mbmIV3AxbsBd8bi15anIBESk7sVJokT4ygxlm7UhbvZ3 /mPcjZJ1/OKM7bdxJuHuksFWCDwQkVEQTvL+p5Yb6Ia1IR7Qrvvt1BtU8Wersg1fru4uTPVH wTEad00nw5dpUUeYpm3Wtom7MZRoh9C9Khe4X36dYodb+OrBvRYR3hIxKYnYmH42ioY1+0bO fTH0GNppMwaowKxtK9dEXEwZ4e6GwVyIYKGstMWWlZFz3w05m7/m5MiV/Mna6ZIbRfd3EWXC LYdyFYNJ432X83f/DDA7Q3nh5wn+fBlI7p/RG5gCZQJasid/CvLbfQSN/KnMVBvQbye98qnL N4xFlE2W6g/at74R0nVrBdL22/7LXBxhAHAV/Ibrn8NS3pmVhX8ODdFerzDGGMACTtAO0IRe y4f/1+UbxrLZW42cQ3hmTjEMxHrszBSk3WtsBuiEv0TYoFuGR7n/AiyMBYl9vDC3L7EWcDFY a8qWlm3TQZq679Eliz5L8/29a+vrXvzo/luZMBZ9HTSgW5bT7nV2VgBGNfy/+fVPmOpfvJnF kLMxsS7oMBYUvSLR9yeVfN/HWJChmBkLDZdq1B812fe3MYNNuzhqVHz0nlEN3a+V4T7Aj+YW R2lpO6c/azzm7WS5X4QMaBn7csvjP0qbPtdLzb7/iRvgtj43zQV9u5XOXy8Xlh7Tb8dj7P/O Bi/XN7cuTsKBu6AHfRFrQm4X9E2U/wPPj4A3DQplbmRzdHJlYW0NCmVuZG9iag0KMjAgMCBv YmoNCjw8L1R5cGUvWE9iamVjdC9TdWJ0eXBlL0ltYWdlL1dpZHRoIDE2MS9IZWlnaHQgNjcv Q29sb3JTcGFjZS9EZXZpY2VHcmF5L01hdHRlWyAwIDAgMF0gL0JpdHNQZXJDb21wb25lbnQg OC9JbnRlcnBvbGF0ZSBmYWxzZS9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDMyNT4+DQpz dHJlYW0NCnic7dlbDoQgDAXQ7n/TnRhFiiChPNo7xJv5QAnxWAMTlIiImcCDD/yEo4EH4gv5 E47mAeQYL9EzkcJ5XGVXLkdBh2I8EK88BGIV9ydCX2KDz1XY5HMUNvrchM0+J6HC5yJU+TyE 6EClz1yo9lkL0YEdPlshOrDLdwoltEbm1x1Fy53OAdauxK7A84Bfm/GEPBkPjIChSiXgXcHw 0wE7fWH/cl01rRBJy93XWcGtgSbZGiilXeR8UL4iYQELS+YIMEwIzmdBMhfyRmVQNp/mAEvX 1gOLSyYYcFUFy4+YvIEW2RrIyZ/VIjM8sFdIJBYEDtTQ4onamcC7hQPk9cA+oRi5+hEPAK2y I9DUh/92Cx+oFZr78N9R4wM1Qhcf/occ/E9hjURP3y5CXKLYQyISk15XIBWMea+TTKZSKxRi LXbEH3DcPHsNCmVuZHN0cmVhbQ0KZW5kb2JqDQoyMSAwIG9iag0KPDwvVHlwZS9YT2JqZWN0 L1N1YnR5cGUvSW1hZ2UvV2lkdGggMTIyL0hlaWdodCA4NDMvQ29sb3JTcGFjZVsvSW5kZXhl ZC9EZXZpY2VSR0IgMjU1IDIyIDAgUl0gL0JpdHNQZXJDb21wb25lbnQgOC9JbnRlcnBvbGF0 ZSBmYWxzZS9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDE4NDk2Pj4NCnN0cmVhbQ0KeJzM fQu4VcWVZkQjSlpBFFojDyEiNAQNqC2IAS++FRATrsmAICgiDRoQRm+iEIFoJoioKApijDEq jygYohIn+NH2xEcH8w2NjsnoOB+aGUd5dNvtl2Qyc+E6tR5Vtap2Ve3a5xxups45++yzz7l3 nX32+mut9deqVZ991si2/9AD2e299967+eab/wxtifM/oi+8V+5LlNzx3Jz2jev/4dG/+uSX h/z28AUL1iX+f+CAPrJfNCW5x7OHtba2tpU2K/nwBcv3V2mh7wDn3KN/jlyW/D065wXLJ0yY sH79+hZok7FNxbYWW2dsY0y717Q3cPOGen5q5MiR3Z4eV+2cFyzo3bt332OmTJly7bXXvvzg gw+ecsop55xzzoyL7r///gsvvPB4bI+8gLfPvXbP5147Xd1P/9xgbKNHjz5C3Tcety/vhFU7 ++zrsK1Zs2b5BHVTZ4wnPZlOeshsOGV4wOmuXYvnShs+T322sHnjjd+MzG6vYLs61G6r0uZg u+1Xd2W3oJ6UHowcRTz3iAG4z5lOy/h30eOBNxKSNzxMKsDbcVkSkm857yUkD9Ii+flibA89 9NDYJdh27NixYscKaBdg637fffd1v6/70u5Ll8KmE93gjo9P3XbUdwdF28Oe0iOqqCNxUPXy g5dccslTClSAqgsHKlS9DqD69UsvvfTBa/fA7XMKUYArwBQ+CFX7clH1jZ99jXsSJbrvMeoG kkfcSpKfAjhfdP9AwPPrryOgf/3Bay88osTCHWSTUN5uPO5PSvK4VvPDJiTnXszAm6IjNXv/ 99AD6tbDPOh2QGz1bcO6des2rduErWuJoLK3tcU48Hf9cxpdZ+g/Fyw4qfR/l34AJZ+Q32// 8q/wOs+uJDn4CZDc8elxe3I0zNiqwxcMW3QjtkuxTcQ2f/78Weo+S21nnUY3uONjJt3gjg+1 +emqVau+naNfoNtWMoAKYEW6rW3VDKXZA9FWKb1m7VagQr2mzRFGtZVuZ/3S/jlryechnpXk 859CPCOiFabgrhB1lsIVYYrQzEKPYMm5oo81ratp72LbBo9t6mnbyabdjpvb1TNs6EEb3n6p Y3arplSlH+F+u8ez6gZ3fNCmx4Z+TqsouexDh7KUkMno9rRQvdbWypLTH9PnHDLPUq7aeR7b ANPWQeuFjXq2TUe7bVKo3aLbTT2jTZ1yUbe5J1nQFw0GoupxodsDAVRnoGb/UJmqswhVbDKM ahvdjuiyd8pC8gJC1RQtGkzV+U9pWzWQBP/6JSUXUMVyGdAWz/v2xQT7BzpgW4ht0Y3qDjfV jeED+jB8QC9mOjG62z6Muy/szH56ZnZ727QvvijNXg2aB8dQw8b3y2ni1978US3i3A+i5FXb qR9zr6z3aruQfPjCO2oSLT8Jko2TaYQEL7yUPJf6xhvcdlKofSvSvjRt2rRB7F7Guu/WomRp qx5HN+x8Um1E1Rmvs6GiuApwZTVbQwt0+6rt43JO2pVMotFUgQuoQKXMJGJKu4AoWstFW2XE b9w4ejRKLsoNHNnOzjbcHW8b3e3u4G8rj7s7etvC3e70KW/Jy7bb7x6Z3WrTqehHE/2232qU HPtsQnKPxw5zWq2SIx9OSO74tHu1a5Yc9Xr9U9U7Iz01++QnP/nJ5dgMmuaeckpzczPi6TJs d99996hRox6Z98i8vXv3voPtB6Z9wbTdqk3pFm0+yLXvSaaKQjr7Dc45xwLaxlWPvKZhZRGF NpJs1VWtIRAVepf333//RGxNJ17cNPviK7Ehvk7dovA1dOjQ57BdYdoyuC8z7ftO+18nZLfa r3MsxohdZ/8QnXKTesweW8e30O+hbvfPOmfZe26qR7RlK8aPDF/oRL/957okmz5s8fZoRNXq S2bes/fwlpaWphOBgZs9FRRt6tRTt8BtyxalaDuxfWza501bbdtb55577sqcM7Zx1eEUWGmi hGGFAZ1A1Q+BJjkLYivCk0AVwUrYqpJTbrv8b7CdDa25eVdz8/IJy7t06bJ+velBVBsyT92G DPmRuts2ffduYCSnP2BvD0x/+bDsVt+lLfxJ0lZxxIXRT49na5Hs+Kjui5Tk/n2cVpPk+B8l JPfzVL42yZGzTlrJIz2Vf++9m9UdR1CGt6ibAlXTbCDzEVVbt27VqCJYEZ5og4CijUDVk7ER k6Kt+hqjCgK63sBVOKhCWBnfEyIrjKp0WOXAijj9toDniXj2Dhe83inAkxD7eD74ntpMarkI aCMYJROUj9ARHeB5D9zgjg/a8FY/YURlNrD94ovqhne3ffjhh+b5O+ZBN9yDnV9lhVTYIJDk YHJAjdomX6KGTcuKJcWv3fvt+kUT+3jV9uiltsfldZ7t/csaRINn0DEdVukOXEoeBpHFQowt FkFgoaJ3FVdceunSTuoxsdPETvM7HRVtp8066rSZyOk/EbeSDqpA8h81B9ibKMARGFmhAwhx FVKAZ2gH8HiClVVvQZUQT5JEVUzyMb6VRMleLPma9T0dPKuQzqAqLl2/AxyUptY1DQVc5NFH Hw1E5CRkIycBIbntlltw++VUuymLVMdWvzo7f5myVdPq4j1jR/WfJiSP96i48FevLloyNFns YysOoLjXGS8z8s7q+tqLTReZtzVc5zj7iBZDowotBvAkRrfRAZTaLVFlYCV0O67cwkqakW82 kwRnFk1oNrIBUOR8Eksi0Tx69HHl/Re/2QpELz4UvAYMGNCrVy/EGVC9+EB+lwnfSbxlflc/ 3SLaTYuzGwx74+Pqq69ugLKRhmWNfIvrfPac+kTjGB14tavipsqP3Dm6uaBOyXzO/bYrK5m+ xr5ub6bRGjNks43ZSP3E4zP6yTyfdPvJ3+I7jN0Mak14Yp6tEqiy41WnXELG6i10w8hUWUy5 oLKoypEZkSwsFcDKOIAoWkV0wOkTqiyshJV0bVXq9zaE/sKFixYuIkp/EYxMTsQHM/pA6SOn z3w+bojF1xt6qsDp169Uzt+HeRLqxsdXySepJrnESj7m5tDUL9mJsdLso/H1oWn33jyTm08b cuz1E/vz9iW/1u4+uPoJT3+kp3TIGZwNnMEu1Zqbm5czaUCcwd2jRs1TbQi2Hw0RhEHnzp13 7+7sMAbqkeAMHFuizj6AKjegk6iiwApx5eHZjCb8aV8Jos3bEMXebKLYJkjPUlHs7NmzKYql GBaCWIhicQNxqw1jZQibjmL91kgNK2ErPKSZsH14yxLv39fyNYh9/HZOk9d5nfcvaxCN7OPK MlcI4VU3+1g45wM9PS2O9N+Obm/evPnxB+eeMveU5uYZOPTM0AJsAak/b97eve/AHcl82iCb TxvN6ZefsbFV33MjOnQ+tevJvqdxAHGEzsZVRFfY8ec/+LlSEdmtrZcb8pF6kuXUkyD7iOcL Jzp7XrEnUb3IdLcnmf6/Dzr76KNKvJU5UgbvN15y1Equqn90sDbJyjF0Lv9Bl2xEnzDOGEn8 Bjxo1HRiEwwaYXeN/bWg8mHMSI8bLROjRt+nTe6o0as+B2jiqsMt/Xjt3BG3vqxhRa4nOYCu 92k9QOl7lgOKupKf8OjgsGHDNkNHAiLBTDfP6MJWmrBFHQkOD+79gR4e/AJ2J6oDcXuSvGa9 eLND2QW85bQC5wmeE3kGme3H2H73u9/deec6X49q0DeMq/rFk4dEk+zjSd5/rEmyEv1Y1rWO so+12yp0MksCjDaPiVt0n80bmnjjjTrAoAiDtpz4SJlDOsCwT/+9T58+T2ad8r6QB+i7gIgq hhW5f77/J1H1L5ktJJmtpMEzESXW9+SATuJZ+p5gJXmrn8yz3dluPXyxJ3x7d0/vkmPPW/2E nP7f5bZp9StVtpXs5+K58ZKjVvIZL6vDG/Sq85skzvlMT+VxBMWG7gwqRBWF7hpN5lnjCtPx ZPgOwftPV0Uj9Wc8FgFt1b95nL7mSXi8yqBK67Zm9a1y85AVc/rWEIu9VE6cRZWWzEN0Rvjv aZxMw8pl9EG65EmkVGefXjD7CPSjTjTttc5lf4/WpKN5Nryj3SnPNPWbNI4JZcvVNsp9zLKS P9GuweXDdr1Sp2JrVA3K8gzqz330reSBfg+3JgaOjNFwch+PPfbdd981uePAQQIFuU1ekS8b ztHuiD3NPuZayaLFUN4YpRQLtkLCyjNWGlQGVeWCvZEyPf5sUWVGvvVogkN96nDOsZJ55rmV ch8h85FyH0/V2Y801egCGJ/E5MfuSzvp9EdMejTPIv3xoOc+1mKrTB6J2Wm05IBM/U08Ks7/ n/XJjmQgomDfMaTRE97ynEH9yk4MDOzBLswW5Adt5iTmDvrso2+r2Fg9/uBc4YcZR8xVbGGq zMwux2IksRXF84PuYAIYKgfQPqI3bqTxZ+vilYCaUUUJxYgqBtUKwhSAimbwdeKNhZPY09Cq gKqUfapB4eKosrDiPWJcb47NvK6q5cQ+5s+81uxj8QdIHQkdIvYxiwSUseQaAye744Ao/IJf IbIAVX3yeANHt3EW8voWmIXcNIpp7iFDtm6Fadf44PnH+slMQdbPq//LyJEjV7b6blf4nB08 a1uFoMKBMs0+6oDuGvYBPTCLuKoETKadjVOv11x33XKYej1hvbrDGeuZ17PVKeO8azplTHaU Z2xOWZxz/sxrfUV132meixeSOsviYdOJ/mp8vPusNPO6or1I4rnHKnducGMlh2o46G8C7KPU vMZLjp3zkZ5biCMo778/vGU4DhoRlGZfaUlIHDFCEtLkE/N4kTdgpNpXl/08PmLidy8JWwUZ iHrmNRpJz1Y5uGLv07WSyR4lLpmcXoNnA2ieHmrHE5yRb8pKy+nEDrqGRckLiiUxjNzk/fta vgZK7peVyRJlH+uQ/GSrr02hX19e56bGSE6wj7L7dnIf0R/S5Qy0O4T+kHGE7M1xhHSQAd6Q 72SmJP9R5Eoxqa9RpeMqE1hpjsQDFSu4h6qU+BSejddL89l8p9eXDd6nLzlhqDH3jTYcOOsn zN/h6FkFyLgnImW5a/drnHndAECnbFV/iamePRsrOGWrxndzL/bBl6xF9/FUnodP4M5sIzD5 0KcR3Qj82Gm9evWaSY+vz1R3dYM7Pmhj2n/tE21luY9OXNXMtsoYq9+/RMPPBlqarzDso6/b ceX2fE8dSiJFQ7SnE9F5uDKCbSwpIrq0xbIWYwAlPyL9yKmPkPuo2cdNHvcoOcdI7mPP6At4 JccQknGLezCmmKhh7TTzOsQ+wg9cuMD+AalhO8rPr+wLYe5jvEpIjAPc7I2K2hFRHAMVe7GJ 12bmdRlV0eZndZBug6miyEoz68JU8VBZgazgOWUFn6D4q/ORJJ6ZKGFT5bmeBVMla2mVco+t rdSHQQ92JzQ9FImd2JumYQemui/qxHp5HVdeH+a3+tW5tN+OWK/2kMyin3A5/XaRjKJ9x5Dd Ef3EPsk2UwtmG/si5Jc4joj7gl4lfJIC+3i9zeqQFgPoR20xrKmCvF47WFVQ7o0muglgqTBS ZmyV9T1tSrG2kkK2MJAhyTyakIEtzT4y/cj+9lDN6d9HDreuZmC9btfb/ktz+nENCwHLTjZv 2hG1fflfAyVXn3m9rn7RMFIGuY9FL2iPPywqJa9pzDn3HBcwG8Umx6sW8Pgz2irNGbhDZb4f 5sxAOaIYV8WoR/VW0lYZF5DnlCGcjZkMgMqiqtQ8OzOvOfcReVebnYUTr/3cR06jhuxHmUb9 wK1/mdzHBKoCsGovyUrsoMZnUQcli3EL2t1gunRqMXczejz9VRNR7N97fTnT22vWEL89Yf0E qqY6uaUJ519zaVFDbzO/bQluZrixrihVU420X6TwTLmPwlT9xvAklgLkmC4IqlJUBbxemPPN kr30MBnREaCtheZ6CjmjCYXhBMnpe/vyhaHtAwM28kiFaqoib2hiA/Qcdbv6zOtt9Ysm9jEU aBRs10FhH+N1H8XFlufce8UFHbQLtOi+Rd3vg6nXN97YaSlPvJ7Y6aij4nOvYer1LD3zOnDO fiuxVZonERHdNS8JJ9DSFRBVwUxNh65InbnkSdA+WwONDI3BswNogyrPPoPk4AkHDkq2whQ0 kFmO7guT52h3xF6legb1K1XMYhS67obOvK4ieXw3F1rtJ3mVN3GUJy3CjEWT+EiZjyafWCQ9 2hKEM0ObmTNv6hklwR72Jmt+g2kSE9GhbmM8Z7xPy1YUXE/fYgV8z1iIVeZ7Sp/3daw5TibS GSiTI2Uunv813kT8TAG0ofTNrFwbQVMILakrL4a+/Ut/ndv6O+xj/epWI/v4ivcvaxANcVWP JBVnjIbDPjbmnGmIu9xWiX57M8yy1ywz0MxOlisRzHLXcMuWdgZUHRmiW/cUvoxhH03tnYIf ZkAFuq2TOsIOYLkHaM+6NKIz48/SWDmgOv1zIusygOfIV3Dyt5U7YKZFmOEUPTMCJ16bbkzn bzsJ3O088zrbVjV85nW2ZG/mdTx+ynmn8FYirurvXXDZJ4pO0TD6dkcw9xF2X71I+CSHhfL0 PxEDVoW4Sqi2Q6zbyEa4YkHd9owIv3S8XjNHVGQUu6gqWMnT5QxRzij+54xmMopp8QKd+qjJ R3S8rzCLF3RaKtYucMhHwz7u/fe57bGDrNuSOXD2ezwr5sUOv8P7/zV8D7RVi7O4Idl7Pl// DwDnPH5ljsFwIvfmLAgn3wPJ/hB32Ei62fIwXxImXkNYsxy0Ws+8xqnXe/fShEmcMamnS+qZ kvwM8yV9JzMimvFs4Uy+J4w/w8RvE9IBmslKajMZZh/DeA65n0bDdpkaDsuJfDT0o6nh4JKP 06fThmhH3v6FZl6HUFXswPXRdpR8ZjuNYxQkT3vVzff1/mW9ohM5cSeMc4cY9AgKzbw2KY9L lnDSI2U9moK9y64w1Xq/b6ZeL6sy81r0JF5KMdUzwKQOMf4saBLJkviTyixbUT4CzdOrYOI1 TL3GidfUk0Awx9w+lnCAnoR7EVOYWfcl1JlUm3ndfhrmX3oec4dB93UFAdW/CNV9zBpzPzjs Y8RYOYej7GPt9lkPcZdomhPdYLY61lOdfeWVsrIB1jagjGLemoxiuwMYgzo0NDiYZ6vYPuty +nr+M+bpO8Q6M+t65RftfZqwKup7BlrGGJ1kSq55yaayBEe+8yX77KN44fGO/kvJOpr9Cuxj npMTebeokIe6DqbzqqPLlNUPpNyeBNlH0dpFMp76md7VFpG7qZmGy6BMNLG7oB9t4G4id3fu dZWZ19f/TKBK2CpM0pID0MJaSWr9dGeu5nF/KAeyRNUfC1V/zAwBL6ILhHRuLJmbpNVWMpuN 8rcxonMTuENRXcXZbO2jYSFDaeuHDX+oAd8CJffMqiF2MCI6P4M3rGtSw5Z7o6DF6U6BcVD3 EM9mKxXbJmuaHi5slZz/7FkME1YFsh9H+7Nf6rVVrpk0kq2R9MafYx6Je9ys4yT6L9t7Afc4 a/4spxdz+izv1dehD1uV1xqgz7WgSh1qR8mJ3MeDEleZwMo6htSPtt85F9hHsFWfhCyGGSfz lNuJq7SlcnU7b3ZqoD5JaPaLYySxTrEDKl9yhmivJouLLQMuXORRk/rkFhjPwAEWoiqP05cd ZgV/L6YT5AFm5ZPQisSQOLSm5aOc/53WN2Ifs+bFyt5zovcfa5S8IRXeeKNGbKt26Uqq+sn3 7YsHHHefq6mmbJWfsaRRhUzcOVQE0WHiCjUQdztMnF5/hZg438kMG0lnjE4P0umITvAkPqr0 Yp42nUTPEPhTdHlez/2U1VR5aqxTTRUjWCSJdPgqZ8bq+NVWU80upnpuFSRlKF1qTpl3pG5t zu63ewxy5wa3n2R/WNr7l/WKTsxmO9frzD8xTNywzcNo2b9dmorjGogWXY/oGogup2+JuOwV 0vZE6xnoiM4Pq8JxlZPVEfX/vDfcuo8jaCRDn3IXTT7yQAYXfkTukbbOCfM4xv9P7GMPu2ub iCUXNmqkbFpWLCnZx2Pr/wHwnPVsk7RnIq3k8MbU0uqY0DHRvvEPVrn7zr7YdNdLsMPGGB6r qRZX4Pu+w+ovs5y+72SW2CrDPlpUEVvxljPv5gMgAckBdDI7zBzRP2RPKrMl0xBWNDrYjMNz ClUKyU5PYvoRxhTUUs3tSfzm5Bn4iQacYOCkFbgv3CyDStVU61fnbDz3X+zUxms/yXdpEiMQ Vx0kW8XGys8ak+yjH2GIEEOG7nIleS+Gx2qqkVbIffTGn505ZZyl5cLKMusBaj3Ok3hzItzV SLTkomgz8Qbh7EaTHvsIgM5CtEfje6uksbfve/d6wQTXz69YTVXg+SRfjWpQN7RVd2XhGXtP 6j+HveL/y+qi5czrkt47mvtY+zlP8yttxzgDG90M81HlR+6C0heRu0QXRO6PZdbS+pljq8Qc UcuTyOTHiAsY4klyrKRlaI7py/kk0kq6BI3Ac2Hgm0a+M8S2OfUMBsg8U5loKuqpQn6pfuEl mupM09xWv1KV99vccR/EGsUlVvKw9mYftejFXmlCkzkuasFso6nXNOnabG1n56eLe9VUIy2S +yjnP1uyQrAVcpUKMUzG7KPN6/XnrMU0u7U0T/+cGZ7veZZEFbUjBuNtI6BqO5iqrHYxNhXe LOGJ19BW2HKqOPEa2lLTOrntU9kqj5QRI6IfrD+evgk9Ku7p3fhMzUKD6/zoo4cccsjhh+9y /5er1UHWs/gSJfe5alzGr61HjZTkwy8t/s8iqIook0cORSczW/Kjh/wRJC/YdXWo3ZZoc/yG I2VX7YnTnj6qBLN+zDHnnXfeiMepVgeMAl900UUXMl3xQ2UxzgLlBlN1D2v2YKvayg/b/qc9 MI+rXHCb+LW1lZyiJN/6+MssGQTfryX//pprAFYomlE1WMMKhSvJ7m8K30OIw5e0IX77OuC3 Yc71hAnrh1/WghNjsU2FabFY+NG0Mabda9obulWo+xjUmUhnnXEQNKxHXov9y8jR2OEcPB9Z mHkd+2fxN+LyDz0QoluxTbvKUbw9+5Hh3Z/6b/x+4gPynM2v6Uv+tqd6urDodWtgTv9ypWDq BtlaUsNg2nVnVDKafN0ZtMroGBVTvbdMw572JHsj3wrP5ylYKUzB6rwMZ4aVApW6KxwDrthQ DUY4E6JgU0AVVPB3X+qf244aLV9DxVQnYH4aF1OdyrBaa88YTtli6g1zyvdWRNUrbuMO03mC Z7e3NK/sDr9RYeb12LFjd4ztsGNHhx0dFpVpUcm7GN2Abk8blNP4OsOF7t2VtJi3pdrMH7PP 7HuOf2K7nOy+J7KvJSsNO7wlBzrpD4Dk/o5gL6gUnIHyw7SV7A161YTlVJVSwSrya09duwXb zp07bTFV07xiqstWr4Zqqitj2uxJtucsao6PeBxwhbCaQaACVAGsEFEvfABm8vSzBjOwCFmj serPn5xwrmCng5I5lxkQrYwkrmD6FAhmOL/OklE0rgvMYlkuWcnU+Ray8cp7xYx+0/aeuR5g 3v/N+oxGVaw5uY+LF+f+18xPJWzVXa+6VyL7fCxqxZ7c3W96EuEciL1BngpAgAEP1ZU9xDHG ChtjYC6eumNooQMNDi14+2lujPFwwFYBniWqlK1SsALVPh9t1UDCFKn2Cx+wduuwSqv3xtHo Ae7DLBlfvwOHXDwDqBjPlwjJKqRjWP3wpUcAywgqLfoIg6vRIckh0XDsWNO6mvYuL0ai28lu uz3RKlRTfR4bEjSbXN3Jh5IfV2WukGZ/7WFvV5EW/iTq9pGhbot9fN6qJ3mdd1SSHPzooehk Bq+z/3Wk5M3AN0LDWqrz31RPbw54s9ebvdR9pr19HR5eTVVZifCEMsEsma2krVB3zJRrR1w7 QlsMbatoAPqH1wClD2NkYKl0YGVUG1BFyh38vd2DHqoQzohnsJLKVDGsWC74no98oCDNkSRh mZC1cTSMJqCVjJy0ucj4bFeSh9923QB1o5+3l7+Yk1lLfhLTkJOYf5wkHjctzm7VlKr0s7rf DpmMDYX6JFUkl304IfnZwwq2qpro9KcTkvtvdyVTfyi28HSDaSeFWrSWanJEtNtVthuReAZ/ G5Qb7QXQFWwwWLW1tVIWw5gqQVYM3sjIYt0uA5VAlaw4iTzJJQ9aY+V6gC9Y0SybTSRGdPta 7ZnJPXmQGnoGD9FKTrSUk13LiZL0l6oNeQbkFvD202Crxj5WQpXrCnmvkrqttNt5ZUb7L5+y 5o6qX6P4eZTcJ2u0X/aed9Yg2fsDkLxBaXGpirXtkZJ3Ff9ThmiX91ReZp+rQjwBdtyOZBqv +qXrAUJ0c4mxVUa5WbfJWgnN1qYKbdW4uMVw3ghFdEoyBlYsGPw/hjPZKhZsJAvRGs8OirwX /IpRJRZI8/xtApaFFSJK+9rmuR1Q5TwV/ySJKhdWtUmO/k1K8iB3bnBNkgs9iHmdkOw7hsVu qFZg7S855yfkGJ2Tgdh7gVBt0m2t3Cq2MdqtNVtz+uyKsdWwuu3ps6/ejq3S9UnATJIDeP45 4AMOvBBwBQUNoEKJ8v58OwmitWSwVb6UwAF1xKmm2ozlVCcs7zJhwvrLWtRt1KhRkyebegZO NVW4mfaAbtXqGdTYX0ajm6SFsgffe08vkPbnHdH/V/41JEPTo2NWFrXsPbvWrtifCd0+cFgr BxrJ/ltKHh6CWLWvguxjQqBQNsdiILtNnD7QkERwT1271hDcmtseYzn9Mcjla44bqqmuLHcA 4aVnqwSitQMIIZ0BMzqfBtKDresJ1CNmabkTImKCQfL1bpYWkI8jHkeG5hKAs/Z6dUj30lku mk1PQoC2PUnqJ8dDxOSLrX7CZ8HZF3d5f45ZIi29vqTf6tHmwF+mbFXPQhWvOjyvwp8mJPfz qLi6IFz820QfNsgV3DoWhlBgAGVFhx0dZFGnRYu6d+8O5VSXLr300k6dJk5Uj0/VLVpMFW/f jY+YeKdc8ACRJ9lMqi2spIUVKLer3YwqqlE8LieeY6/XX3VGSEYrqeCs7gJVjlhjJRlVKDmJ KC36bdO+6LYX3fahWVX+Q0p+pLxHWk9ebypVU103YJNeW7tr9W7aVzLywzb0z2mSfXyxXsFK MpDoR2b93DK6WVK3ZGIftY1Ma5rJfVSS+y7iYqqXTsS0x4lcTHX+/Ddp0uJROvHRNJ63KGYt rlr17daA6KLsAqpgtIroCgEqcD5NPOdqt6YqGFXWYpRhq4hn9j1pzvdTlvd8/XhGFhH6tB3s 0J6A5z+USdTNXyGNNsDka1r/5G3b7EJpJ598Q4rSr7hCWp1K5UXu8Y67yD7WLVq8DI3RaclA YgisNUJwiWQW3dMDubm4cHVppRm93Iy+uOVXF9tJt9/+rdR1XumBTFuMQzy24lZDAc7AqEpa K1ZuaS40tsKoCil5wEqakM5IJtFUcVL7nlq0lY2AdiSn+9AO2PS0iBsXmZosUBaaKxpMxKrQ MPF6Pmdwz9Jdl+jBymqy+I2nBMDmwwZoG/lhWb4nRrFnY1m+CR/VL5rYx6wcmrrZx6LkDR5w g4ZynKNhuwSGaI6TWCTNTG9KMPpUTfXMEqWOW4zNI7StEsYqFt0cwZSFYSt+ETKRYftclGwE O5LZUIFoZGdoI3xPWnVmj5v6Fj/r983CRhc3XUwTrrduPZWZyKHEQpqafDiFb3V3SphZtlrd REG+sqp8frsjQMyHDwU/FkJVxGD4rX51dg6kIrpzC3n6DZBsjpSwj/L61xvRebJz2Ue2VTz+ rEkDUG0d3sy4SFD6Z7C98HElmfWyDsTKlmxFX9dKCmOFvicZq0JcpUHFuVJ53Ugbr/MNC31D a5rchJTQVAUuXED+1LVYkG8nFjPABySk6ey01Rpe/PTVZasT63z7rVGXWVznCKr8XCLVkbyP C6SdeOKOCJBjskLfDjUsc4U00Xuuq/8HgLze8SOz1ExrGPhhDTDQcM6LKXovUzXHYigdM+mP 0IFPhS68M6rY0J2kYLxFRSMt4y2pGVTMOKx1e/lJh3gSZauuHfEyDScwBahdQBPT2VFvxwUc nfIA/S/ANYr/hhdIa16ubl0mqBsw+i13jxo1GaZcE6OvWf3pDqn/wHRbqLh9OP3Cx7WGWfAk IdY4yXi03djHguhERLfh1VZW+gZGdFZ0+Jx7MG/jAI1nguACaWuI06eaqsTpqx6cCX1O1Des PvH5Ml8dlkpL5um7CHdzH/saEhAHvh0PUGDKJ9ejVjIMZWsl3fwwaSSlYON84jCdQbRkSXjM PUN2q+D0bxN7fnq+Zu+9Vw6bT89VV0ijYHJAA7QNOcDMFdIE+3hD/aIxi/oEA5+U1ZDzqy5u jGTPyYw5RY7FkKvELuIgHhh9uBOjH+f0j0JuklZIa8sQHI6rrjWuJ44/I7FuIzqMrKxuO8rt 2arSX9tWqCNcwVCZ9DzZ9RSANuGcayVxjugeP3oOA0sw65TneOyxm7oefTTzkZOYtAKm6pZb cPtl2n75XXWDOz5oo7Y3ZZHq2OpXKudPUuxjcYW0xtmq4PxnLXi8S8XlzYrIlZz0t3t6+sY5 ribJFXJc1YUXSa6c1mqTW2/R+5TXOukW+zwpcZ2Jt7HCqfaOJh89k8HMugjpIKMYHgJUMrQq Z9ataBrHOMTwntpIat+TnU8JZ7JVGleDxcQbm3VZxHPha+gsLZH9qNkR3ZnhbAjaYFaWk6rl VimuOvO6gSoW8YZCeid6z7PnRAK66OHicWIfs3wD2W8vqv8HAPu8oVuWkknOYJecKyh3fV+k 8Np4JTzzOoc5iNgqrdpkqxxCH0FlEzscU3VEQrf9rxCXTGlaNqtD4oomCAx2ppTx6rx7YnMi 3Ks8rlWjauzYsRJUjCpKKiZAuWBiNMldcA8qoCquzjUpWzaqDjxbtzbLPwiueW3Cx/yZ17VK jpxzx6fdBAQzgsJbfKJEA97q9ALILTD7+MIu4GqeE57+uZ7miTxAva4RFFOdAPUegTXAxVeK eYDTfzR9N3MF+gk5g6ozr+XSbDTzesTjD1I1VTZVLqIZVCKnWEOriOdQJiQ2qKaKBOSfgYDk AJai1yuv3Ars46lbDDmErBByj7SRtBCxkD//z7ntiUZrWJomETzJAdOTLFmysAHfAiV3zOpJ ZO+5qcbuw5F8AOs+ZnSgTu5j/ScNEV3/7a1RtRImQ3uAtkbxclOjuAUKio6aPCqQXQuo4tn+ tFYYQwuYON/JjPGehQzE86aYkTL2PQde6HqA97AP6CQgwsovo3GMLs9WtYksLSGak6g9osQJ 6aTfaw1lAM+xc6//0oo/SMdVzszghrKPMcladB83Oy/hbibeib4Vt1U9Nrzq/u7tcc500i77 2LbHjKA0Tb64iaj8K2kslntrcIw+/vgK2cww0Wocf+XxWHzKn3ltKh391o+ryFax76lHynDy i/A77bC3jqv+hdiKYFfiHpQ1ikecp+5z5841aEIzrcRBh0I1ivfOe2cv3n5gGldmVvZ69+7p x1SrpqpTC5x9SiuQmQaQY2B3Ks8d9Jupjff882gwGmExqs+8vqF+RUf20dPiSHwjbdVDjZE8 LaxeIVtl+O07KUto4sQBkO5IvAlNDLZTr92Z1n6DmdeP5ZmMaFzFqJpxEdsq11hZrkKyJMys BzNKCr95QrKkHwuCJUsiSikoK5lpJFtt3Uf4ZZGTIkaKSamjLS9lmCnmoAKs1C1O3ceDMPO6 ar9NHXex7mM7SEbR2kvi69BOkpXonl5Guan7SE9c+RHyIDHPVaZAmo61thxXj3At0W3XDfP8 MM8Ro9zHAlsRx7P1PV0PkGkSwZOYkbJHPnjBF2s9wCCWQx2oqKaKsCJcecCSsOIdhJHeGFC5 qOq5OPpCvWovDXM8UNwRa6fuurr+r4G26szKM69Ly3jlSe73sHOxI5bLsRibNaC6djWQspjK ARWialBrlnb7cZWdqelaDI+u4Fx56QEyqlRcVeoUEJ6vD1X90aMJxvX05bLgYj7JuD9kDZMp YyU4Az3zGqdeM/N4wQXdu0Oto6WCgpQcpGEe22nmdS2ocmEF+STJ8CkZWoW+gcfQOK9GuiOk DfB05R8kIjp/WLqQXaBpfPeFTSWI8Pn8XoJ9HOkxGK5ui7BKLzyoScCCJyYZQBFXub1IQs+T VrJoJjntUtOPZVlaba6f7cDbVFNdDsUuoe7jZestCTkPy/MN+REm0OBGTIq1WTQ2jabuaqoH A1U+rOz6Ve9fecdndZOAlPtYeeZ1Y3IfDxzwPa4EE8cc4PISUqaMsvlsP+c+evod/g7uzOvl 6y+bgPV6m7icKvLca02ilszSEgpmNew3MPM6Ljgg2WUfb33cjNFhRKdpEsuTmMkvLqgCtipq rLiaKmSmYQHZCTTZnEvIzp5KsGJUOadszpmT0qqiqth72h7Tf1noQoudaHvNvPb/II1nj31s P8nKMXScwfaTDI6h1HIeMsIxI854tPNBOp+6BZfg2wlJ60M//vjj5567wuQS2/EiIiJXr/7q smWJnHU/W+0bpiNxUWVnajL7WDSSbmjFc0Q1+RhxssVJF+uTaNGe1xsSLS00jiZAllZUqPdG +11n316JWHLTHZ+Vd84l76Ot6ldGzmDz2cdG8J5PBlIfA3yYiG5m1//Tg5Xs+HRWx+3EVZTu eCmsI080JE1XnP/mLJ6viJMUzcIzOF3RzlukWYs48zquZUK3Q3Ufyfn0ldunSUQ0JzOKEzbS +cWTvqceo7NW0vieln308knMaEL8CrdhQGnoKN4BWorn5OonL3j2X9Yx87qRgE5ldRzM3MdC TyIjuru6uSqf+k81RnSRc/ZSqNp+/OMf/w7bnapNhBviCemx+W8OeJMofSDzmdHvVaig6nP6 kWYIV2OrxMi3XftFEyV+XIW5j4XZbA4HqHU7gWl8K40qMUTnMyW+kdRVQqzkElypHxvud1LT XRcUrzV85GnmF/86la4tGUHJbCZVSD1K7VS5MqKGjc+qTyJzH6+uX80xrkKPq9RqyOvcoTGS +3mzgWNjdMJWbbZ54txvuvRjtM8Uvee0adPolPMkC1S5FKA1GUXV9nVbz9T0z7hkboKDZ87S 8o2kniPqTbrRQ2VG8j8LYMldZ39fK04/WUS1DG7kcgbgGXBRFgKZV8cAvQO3FgtvZv7Hr3zl Kz/Pegwq6Eh1rRJ/oDQsMNHaI0j4VWMFF2yVfDHymYMx8zpDMqZQib68vN/K+YStOOkxrkIy TOCUGo8ZS2KtCBHdBJQ7OFTmsBUhDjDcnZXZKst7GlD5qHJq75RL1qIdTp9IfZFQrDOKLZ/v EPo+o1+J08+6ilmfwQ8lrrOPMWIfMXq/spYaxSFbVdvM6wZEdHd5WpywGDq6mfBRgKOSrFSI inKPASvVM8dSFdbULBgr4gBteEMTykQKosesZw5WtZbFVTTtZmDQSrqZj7rmeL5kvZbTdcuX r5mwHCl95PRxzjmvX7V27VTi871ql/eOcafFVmMfMxGTiavCzGt/zEoMKdUPJPEHIYthBR/k PP2iZL3fzwvp20/yYx7U3NXCaOY1qBiy26xhW4esZYIbVEtpmdEu2Ep6u2TmddFKfs+ppXXM lGs5r/c3Iq6K048GWJRRnNGJtIlKCjGvd4ZMKAmZZ98+ew5mAt2h/tLpMANHHG7ffVFthbQl uEDajg53JpSnkq2qtkIasI/vNkgyTkNOBu4YuQuL0dQYyf09LU5HdGQxeLVYSHDQteW76+Ly 1iWiqYtxb8gb4o7HVTKiCym3qRJX0GyXWbdxVZ698qup9jXrY5xieBKa8x3Bs2+fPVjFL7fI iUPy0WTE2Rg6M3SugX1sp377QMeDN+c7LfmuZwLsY+OEJ/JJVnmKJ9c2Z/4LJt332tTLTcbT SXg09ZrT8OyTzse7KZ6A94xnJUMrKrmgcideI/sokzqKup3pA5azj2isophyrKTOZU5Tntzc FcaBkaIVxrt6hFQmrCqgSrCPL+YF6ah1SQ2rzD4Ou7p+NUdU+Xn68awOHVetyD7n6AepRrFv rIKindxHCyxClboBoGTu+CSNK4Eom+IKOa6LoTBKhn5Li4FrOUFVe6hopfP0cUmlQFQlR6xc Tr8aqhwrOUIYKxPRhYSHPMCCrYohDAl9HkDRIygDiNOH8RM7gDKTWX1D6Qep/QqcfiM77RJb dVehRnF7SX7iYNUPS0vu0YMmcNomO0mY0mR6ypNud2Y40cwmuVt1lpPvGDq+J8EKlh20tXcA VIImYZ5EJvaK2S+cK5VlMWCMzhn5xprjbkR3kSvZJx8d9jE7obiVZ/DBFL6Lm7Dc49aHiIjc smPFULg999wVcHfrqUIh1WU4a28ZP2gOX4Vqqu2mYQf8Jmbw1bRCWiiu6lk5T//5xkj2h7gT FkNrWHNjJPtD3MmRMjFTk3TbKLfgAGOemIOqMLMe+hrlHqDre2o8O0YyYSXjsJLVVDkxTVdT 3UrJaUN34jLfH+80BQ3ctDRdThV3/hLVVD+riqp2lNyQFdJqkcx5+qZPbz/Jj3nj8CZ/G3Ws qaWJtYxVjHRM1lPdaYtlaDUTu1BNNdJ+4Q1uaPaRaxT3dubdBPJJDKqKI98b42N0oX7lclkY hWs4YGIx1nAYhVOuhxSLOOjl0UxJFH6qUE1VZnWIXVP2RZaEoQO6Egw/mTewKEyFVWew7iMt ITAxP7iJahlGdJXrPi7oWr+iE/sYzH0sVHdqPPvYMcsNo1wpbTFwNBaHYp2F5C3vWBiMDc2v 8p3M1NwE43vq1EcM6YKgYqLE+p5ltbQKqMqaec1W0jeTBefTs5JlZ0styOl7FH5wIDRA7M+p xOnXr1TiD9K2qn1zH4Xku14tso+VepD0Fy2O9puvMqjVTaGiERS+reigoLRw4QUXdF+4aFF3 XAtlKeQQLZ04URdT/bS8mmpqhTShfLKi1QLDVoiIztdsU6BOo8rkSiXySdRzgcXIQZUZTwgM KAi5o92MYi2heICOOOwj04+CznfC6wwW8kt/ndv6E6W8zq6QVp+qY+5jv7/ACmlOlZASj19e 5x2NkTztVRVBlHegMgNRso9EPepqqke7/KOk9MWeety0uOdifcol0r2Z19pWmaoCNqKzuVJh k6FnXudZZz+TRQ98O3j2Ae1MZtN5WiCZahSP25NoVnCru5YTtBt5TTpoE7HRmnSzcE06yoDk PEjIgJyFq9LpJMifZi/ldOZ+w9I76rTf7Oznl/utopkn82x2UvNuAiukfSZEy2/hfCP363lf 1rxMSV5p9A43of9TeF08EDiChxKS+wuFh6eT3XaD204KtdRaTgn2caXjC7XS+PO/fYK5j8ST HHMeEOuwkvwlYDFmzBh4/0CuvQMu4COAKr2cOxQ0ALXGB81/3jfOAbNFtcB3q7WSnxxiJWOF OlzDHlIfSfKFhqHB2S/qBiLxQUJ5u/G4fYRlXtlaPms462/gzIrgRH0odDRrwHyg9bH1wjYT HjgvAu94+7o/RaIapx9Ul+Cx4sE7vMOHxpaoKDZb33PXhLx/bg4zzO0T63aPnllRrLrOX3v0 l7+F69x7kfknUWHpN8j33NAN8rFck+FEGfQCJCs/7LeHKMm7BLBOuiG4PJp5TqDqzKfH7SlI 8wNLjSqUfHjvzSNunQutublZKXWXLl0uw3b3qLtHjbp776h58+bt3bv3HWxcqQ2rtf1gt7rv /oK67T6vW7dur46Teh3YpX0650+MlVTGCvD8OBAl5z+FsCrg+QNEFUIKMQ1AZljhTM2CJPcF v3JXSLsS25KtS7aeumPLji1Dhw5dsfM5bILSh/sy02peIa1EZVJvhd6rgKrSf59+0383JfmE wkhZ2T8ve1u+n5A8jYMbreRZ/7r8A/oTcck9vs1RlZZ8PaGKLQa4YcpkqOhmLtbqAGwhW3G/ 0G1S7Xu0dmtjgRpuddvTZ/tSSxc9CcVVfRWqrkUreQrWfTxHoQpkk9hfk61CwSSXcGVsFUhu 5WiuVdcpY69fO//0bFa23KXuzc1EP6ouBNhHLCA7T92GMPs4xJaQBfZxN98fsK3aWk45lzHn I/CZhIb5h2FuArYlWxeV2YOML4KSs2sU43WGwH1TvuTYp1DyYeLKFkyF1e3rf2Y4g+GZkq0x dfb2s5Xs36asZEGjCwf0OeNJtwxvwjZ59pXqtpX677VbsO18budQKGnA7fOmrZbtrXOffHJl 0CwWDgjJClOIaETV3AfJVgGgEc3sAYKlegGqqb5mYCUATVUFgj9y4ZBdIW2XKXe+vAvBqoWr qCpQzfMwBajaDZXOdxtSH9ut1Th90aIryTOpz09Qzh0Xk9dLycMrrPCez+m7OuLsuy+8V/5L fp2yVX0KK6RlqXPm5xKSafEKe60rSS7/oJSsJ0Xg/ARkHwXK21rHjh27YywmcK/owOyjuvNa TkhALr1U3TsR/3hUpyj5eNRps9Q9wT4+40qWqEJYoZGkVSoIVhfdr24X6lUqfq/sFdypnoFd qELD6jjv34fApf1t0YctsAb6WjCSLBolX2jwzIB2JBvRFs9BmfKgWDLhi2+b5RLM0Nh3zDOi CB604a1GlsZXBVQde6xexb7ryXdkqlHCMUUN25CVdSl7zxcDMC0eCByxh1Dy34/zwolCGA3P UvJDFU85dM7gZAaElliMvgPWYaNI3SmbSxwkMo+FdotoNy1evPgEX7/DyiYla/oRjBXq9vls q8hYsQ/4wmuk3uj6af9PK7fQ7bA86RkYrxfhTPQjrnfDNcfB90RQMU9yzT1GMoiWTi/gGYgS r7fyXvHLdevcFdI2bVJqjiukHQ1Uf9euk/D2rmlfxk1kgbSKK6RVUqqSz3r9tmsy0uxjqeT0 h1OSu213fvfqkpOfTkju6V3v57ENWIcbBagBBlabaHP0JsoonoQPxhHtI44ksiZ5efpOWxnX bWUxSLORrdA1igciXcGWSgPLsRZCuSGvF3XbV+eiepOtspx+796IZoQVB3TIPg48XsvmeE4/ QY7+6VRLS4WSIDnUg4WO0ZqaltO/Ua/uqCl9KHc0y6H0T7OE/kxB51fl9F8x7eo5YWsQtBkx RSMNyxr5Fr3n2XNy/bw4vY+Sz3w6dF397lT224ty/bw4lwG2asOr48ZF7JPsvKXks7VrIhwR u6e9EPNsd4xPgp6+OuWUULM2W9FWEaiIBLQc4OtnHG8wpcyViyvph7UlTzaIZzZWBCvLk5AD KIwViEbf0xHOqBJWMiEd3nrvPT21/8+Q/QhhLCSmaR5y7ZatHMSqEBYL8338edpgAEsbL4o9 F25wxwdteKuf4LkmlYr/Qcpi6KMcdMTxWv37eBGdL/mxmrih8pEywZMEV67q0dEDeeKca/lC xXM2X+UJT7Kus67um0eoG4JpF8CpSxcFKOTjkDp4BJZfgRVY3nnnB/ggOh83QOkDo59cgcXv 1zw8E6DJVOmwSsZVylZp/08XqaPBZx3RSVSlYNXWamoUqzYBW8vwy1rubiF0XTl765AhW6eu xUbLVY0Zo7ZjxsA8c9y8YW/pdb5D1VSvNhvY3nb1HLEH948gYeu2OfCYcxttxa55mlN55jVH 7h0G1KpW3vhzj8W5M6+NlfxO7aINs34AR8rSJoPepFnIxG8vrFGyQCaccx9jI5PCpW5vXmJm Xq/g5a/vu28RFaKB/EfdZOYjbDj/8VP1gNzHw1q1wSqRbLM6FuisjvNufflB9D3J+YTASpsp CqwIUQVjNVraqmA4JQ6FYkklGUSzkdRwNngG68yuJ64KjCUnRxsrqTPCikGceyzVe9ZwyYO9 Z9BcZYyUhZUq8neBGogH9IIYoViyZtGFP0yc87RW19+vXXDwOiUkP+GBnOMLiixoi8EFbTi0 oK0NL6CIqggsRO20n565KtIG+SpW0G1kANlYAajOcSI6pdkmomJo4exnpdv46Pv0uAg5UThY lEzkI9ppNNNvcUAnZFvhg3Ew4fQjnHyS1tZEVGf2NQGInAg+mAehLaQ+QttmphemqhlUmnlN UlHk23Vom/5T1LB+WZIxfKaJXWuSvUreV6KRsqfHlRor1xsaUEFE+KxR8uKIjvl+mDxphtLz 8zFnyE4H7iWmA0O+EKUNxeYCK+BaOxk/8aJubyb2kW0VBXSk3SKsImrds1UBZj3xgycka9fT 4fRh5BuNVUEs4rnA6cdFO9VUJ+p6qvRDD1i3juZev2lmXzewmmrdOuWxFRFThWCrl330JTt/ nbAYG9hp0Ncgxf0k3om9FZEMR48UCg+iqW/UPaN51jla5tmmZ4m9KrmPHR/2bZXA8wKe/4wG Q1dfNBbj+Nd5TpkJq3zlhrjKskKR7sQcDqMKKRrjATqSwf9kNBdFC/YxbKjEUSj7qO4wOWLr qWOh7OMWLvx4wX34AE8bH0vNZKOl7GVbX5u87U8/rbKSfAN022fiYrDymlkh7fIpDxVBUvlr 0EhZ7sxrc523ldKrWePPHR+OXGm3N5WSmxpzzoPCGSyyEbNuY0mbLn8eFN8Bg8GBlR0qO+ss yVYUlLs4CpywkhjRGclIk2jXE3ElQCWtJDueOq4yHqDjAhZ/cHscIaU2AKslO9RtxQ4bxCpM cTFVjSwsHWaQRbErAerTo9St4gppdaNK/Id4v13AWoMkS7YigufxoXzPRoim/xE95x4H+njR hyGg7A4SUfLlbYaRkjtz7Ia36ikuebweKdPaLiqLdumiHusvGz68pQUXoJk9efJsyFOaulbd OndmLg6YuDFIwxET51Bxb7xF5LZLZtNe0ev92qO/ZFL/fxhUIVlhXUBm9BHNmHXJtiqAZw2q uM+tT5rZxzV0zkA+qrNuuRvXcoLKBmun4h3PV6+QxsukjXHKqWK1y3vP+U+57bBkV51+M6Sb cX67YLPMzOtFC9dlCCpDAUrunzvzWluMYR/VjzCQ3I8DuhKbIW3VjgZIVj8jj5SVGSvmPWkU GMqpKv1aDwuktVDpDKS3UcVQxzqPkdo1BtcLo2qqhCpYIY0J13LJAQ/Q2CptJDWsCFccVwUc QPIAM8S2sX2W+SRTjN9r2Ucd0rFgLTnke7r2OYVqp9N0OlDsQ/VWd4+m7/xmuB1aaeZ1TUr1 t+GWsBgHznQ5/TIMx96vLrmj5519VuNJV5c80rvo5A1B/jb5Qw6lj94QUfpLTZRB7tA3w5L/ T9T5OaHAPoqqPxTRGdUWtkqmaRGlH5H8335hjFUZtsJ4JispSX2NZ5b8WobkEvdTc4D89C6v 5fRu123bTkYGUgTY8KRpxsh1/lU++4hZQpQfdnJ89lhR21jSP/2je/KoYdNyZ17rX3tNZuwk JX91+8r/4EsevzL+OwstK7KPFSX/61d9yT2zwio9pwxzK5oH6GnX63SGFpdTpTQtTtTCVK1v GsmX/aOQ/KWePXsC+5ghW46U9bYeICu3tVVGuckD/JyVvH1ft8v+5z9p3RbUU6ln4I3RHaPJ R0l8niEkE6EvJP9iX1vbv7OSLapSnC9WU2VUMawozbHrNoIUcPn4MKhi4upvheQ2K/n/9XZ1 oXFVQfhFKkSb/knBkBhTHyxEQokYW2mqEYq1wVJo1m7bKA0WLdaF1mD6IIL0wW3RlArFWkX7 YEFrQ6FYrBrEB1uIkWIi+BCFqiQP/YmgfYklberOOTPnzJx7z9lzd7de3ezdUDJ7d+c7M+eb me9mQFWFy/YNY3n6x2LusLEcilVp7GPlEaO45ST49thUecsnzsvvnv5wVtPGm/NjHewIWP7O 2dFpjeLSAxFFkDKYOkViqhZWAxZVcJy+8D5Dle+mji1ubYP5NuVhxrmRfLRpmCUBeaxaObvQ nFtUBRyboQpXknm2Rkd4VoBWlW9RKTsoLQ8yy2Us2ovmaqp0Mzo1eq1qJ/2kp6oGr3fSxHXp iVnuHrLX/EA8p08NeKWf58rmZMwZ0dLIxal8x4gNGsrDHNlUz8Emr3fFWb51Q0SM6c2DMyPM cmNiGNRzCPYxA8CMZVjDhj7Ls2u+c7ace+mIYZn15r2S0mdcPlL47BwtTWn2o3cGX3/f19d3 byT7yPMw6NLSg9e6TWthN7Vpwdz141epTWti/wRd5Ehn94Wjs70v4cuH1eT1hijL9prn4eT1 oudf0F1iTlsHxSoVrNDyt8XSSb57dMjiuewnjc+optpVeuxaB11ZquNx33Bb20/Q8vjueOk/ MXiNEo8UJTdc2d05UhydRsvXazd57QkYLFbpNYujqtFUivBMnuJRloXx7K2sZZUJHOaoSlqB Y+OalN7HKvZVI3dtOVm67hy3nE4KHXF7H6uzXLw40pEvDubyKZ+2c8klBAiX9+xuTMQQ9edS zEBG/0PjYdMi6/3tbEK+IQ1RyrJlKyb14DWIjsOIKGWAPEgmomTC8mha64gIj/RaNxSDmirc PX7vc11du3Aq9tnh7WYo9svx9vH2S+NfjKu7fENHsbW8Jcdsf51JTbUqVKlLODr5ccjD0mtl ZiXpWkfN8lFvxKJKIVrkni1RKwlnH7/K4OjWcglVc8xyI7CPtiDr/9IrZR+N5b8788UdpyeZ 5dbUUYSEgzP2sXnlKsU6dpFkLyzg1LQOLevgZNiwfgk9bGxmUCUklPpePn78CWIfyzOuH31z t6mU2S2dAZVMPZEEpH1V8eKUyLcBz/yzDiDMqKnS4HUOyP2eHorLavb61ataS5WNXltUbc7N WOJgIuPkdYMVU234BSdFaVa0gY1dsFPm271/HZ1cQN9z/Ixolev2lP5Se2N2dNiWV9HkNXtt vtnO3OYSooXl1IgBYgPC7eLCszc+awffcc+F4BqmrvmOWWnZsI/v7XtGV2I1/bh2rcqBFPeI gqpIPeo7OVXCPkqo8X4SdUclnQGyKKnZCrmtMqhyD5UBltvL4UqianSGoQE8q1qC6WSx1QRu OcA+zvn6LoXpuVnJ4xsi3/mtqXgaTj/dcEcGTt8wNIuXvJLFz32W43sfeZ9+jSxvPBzio8zn zT3MBOgI817LjTdbqEYXDhlimg3A9MZa1DM4VCgUlhYOrK8roJxB3dZr/dfmw6N0eDxsT2tr KwI3KkrymTJkK0xf74urkayQzj2WXjXSvh1hN5T1opqqznpZNeHRP1k7M6rUqb5H+OFWygLv QStqJkavF9fX6x7jX2HsGgevocN4AKes6ck865MMk9eR63bc3ktUvhMreNJy1F+N/GeBKAmJ Ief6s2BYvma/sm8rxD6mTF4vP7N8+aeGfjT8o5BTJfKRTnDSeps6Bmjwept/8rrFLcSzShmy FbZSJtgKQVdQByKpGfAZUc6sh5ayIKow92Q7yR+0itdB1qSlu7Q0rrDyHbF4brhiVe3fpNEI NXZdKGzF0QiaiTDPJKJK0xD86fNHjoT6KfjBUs5zlWaDosMBQkZUlGSf9ipy1OosN948Zqnm QM2Mf8+nqjetFK1MrArXYlmU7HHYR04/Cv7RvEh0FMPkNeV6EfsqG6vYtor5tnBuIkpQqcP4 tnbutIjheQcBVOm2S7GhMzs6hmiyTNp45isugy3i9C2pv/5MPzD6/T/jooZd+sDow8MqqSaO bZs2XV/RsiLu/4p3N3LdNn8lGauSv8Df1NAyRQwPP7PR2cXW0vItfd/BdMO6hYrhW1Y6OaQI U3DKcOOH1f1l+vQdl9P92yvV5DVS+rtzT+dyq7XqjqEO3gFOX1P6WlB1/wQMXOPktRq7vrwj OHl9Pq2f5J9vXE7f5J6YAbrbKosqIU8C2juBBVOAm90hDTn9YdDiK21oFaXf3q4Zfb2lJTFV paJqfrz9ltVUraGaarSH6Ywo4GHuQdfM2ccq3kpl7GNzQ/UfAETJvrILp0pKqtLSSresgVs2 WMnpl+ZlJNXB6AonVFGssqkYzWqqiCFCRjADtKknocoUvt1KmcRVeu9jIkp6QUbs4+90L6ec bi227COJqW5n5CPoPS5YcBnFVEH/8bapqUagCr/naFTV2rI/Vt1svQ2zCdJyMhyrA9lH4/C3 amraN3kNl42VamNcVY1e+/cPLUOzV/Wq68IRrODD29vakNIHTh/KRuqhikcoQkNPpEPD+/P5 qSxuiH4S21CClTLW+yg3dCxSiQzwSTv/PBsYg1ZhK2Xmm+3oPHoGiGfKe3Eh0TOiaZbTTbN9 lVFYMmy+PeHEvji38krqpLI7pN1XA2errE//sderNw0R4wR5cThiSS2tSLbG/w5hDVO8RPk4 KdlHRTxCK3FpE3/oEOzhl4KUaqFu67X1B+bXhdRUQUx153xQU10TyQE6UXKRuj0vUOsCVIwE NK291reZ9s7Z6SiuYk7cdcbCWQ+JpgRJdcNDLvqTnLtxYOV/GxxVDET8VKLIeeW8zICqGiCJ LdvBKFmjrkuf5QD7mNrVUTPbAcvHU9hHRT/SPh1v5GTIR+wnNqyj4RvtCVGPSk21ydP9qFHO 8CY7ipfZ3FPwJAxTNvdkqBIKdTFgnpOVMuwoZsknyrhKy9y0RTSyj8nc0/dOpJrqEmB2NaeP P5WYquoxHngowetzSl+fZuD0BfsYu2z7/2GG3ke2bvfUwM0V++jqsqWvn4J9jL9o33uEleRB N+NKdzhu+QOSU9WsPn359fUCVbarWKBKw2pPU1PTsdGE6TTbwTxMjT87JKCJVHxHJ1AV9VmD JovAczOfuyElhackqnjmibfmBUBhBujGKu+nzfIwfX80TeoDq68ZfWwy1kqq6sfL7M5oQvEo m5pqTVftcKyq0TRbvGXDPn4iVfn+B8toutXxc5GTiFyf5SRMUtVNSVimH75vQt+Q42zYK+Xk YbixMr7tOLf0btzckG97nXlOQvs/NQ/P+g0KZW5kc3RyZWFtDQplbmRvYmoNCjIyIDAgb2Jq DQo8PC9MZW5ndGggNzY4Pj4NCnN0cmVhbQ0K9pGF9c3CzXiE6lMP/uzZ4XJz98q9/4w+9omA /sWZ1mNr8IR+89DG0ltmwklc5oF97KOZ976xuURcuUhg+cK+/vXr1G1x+YdE85mM/s+rrixK 25WY/2UA/p9bw1Jj98S4sjFN/qhr+MG07Gs3tTpU/nka8q2g/pZMw1pr6bmz8qGS/ryLvT1U 9oyC3IKCzVRi9aR36IuD3Hx79o+E8pyO/7J/3Aob9JWJ8r+14pua6bOu87ao8qia5mZr/uLL 6pSK/9i/4ZSS9oh/9rms8qyd1HV68p6Q8qSV1Y2T87Chy2Rw652T5nx61ISM//787cK5/mwJ 2nFz89TKx0tc56Ge7qqi3oqK9NnP2Bcn+d3aymFtwkVZ//z845GO9ryuqSJE44mE/oIs9JeK 9biq63565K2r8qaY9NfNy1Bf+HMfy1ll4Y6LszVRzWl0sy5LqR9C8bGm7npM65CHyl1p87mf 36OjwkJX5JiV/tm1riZG9LWmqSBD98e7zHN/8pZ3uDZQzm14/p9Y2ISI9NDEpBg/x2V03GZr 5ExS8YiA1Whu/m8M3Gpu65mO6qWg9pKG5nh21HB21np/8qKT63p3/u7j87Ki1omO/rJ24G5w /vjz56ml85WJ85iM89PH6oV//tS0xmp687Ol7snA/t3D/te88qqb44WAwlVo6J6Z/nQV8Ipl /vz6/vbv9Yd/wE5h/mgE89bM8riv9KaN2nZ4wV5v9ZSJ3X9+/f38rSlI7IJr9M7C3oeG9ZaJ 4C03tz1W/tGr9LOk89XK+dzQ6V0fqSNF/vv39pOH85uM4jtE9JiL//395nNz9Kyb983L+NPE 1n+F3yUv33l4xldm9KaS9q2bri5N9szAxmh37oJa8IuDukBY8JOX4Keo8IRa7YmM7K+o3Jye 9ZSI85eL9cTD5lheridH85+FpiBD4HZ28IF7///+746E/v7+/v///v/+88/E/v7/89DE119n 9NDD/f799M/D/f396nJ34aCg8Xph30kY//7+oxk//2YA////pBk/DQplbmRzdHJlYW0NCmVu ZG9iag0KMjMgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwv Rm9udDw8L0YxIDUgMCBSL0YyIDggMCBSL0Y2IDI2IDAgUi9GNyAzMSAwIFIvRjggMzYgMCBS Pj4vRXh0R1N0YXRlPDwvR1M3IDcgMCBSL0dTMjUgMjUgMCBSPj4vUHJvY1NldFsvUERGL1Rl eHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+L01lZGlhQm94WyAwIDAgNTk1LjMyIDg0Mi4w NF0gL0NvbnRlbnRzIDI0IDAgUi9Hcm91cDw8L1R5cGUvR3JvdXAvUy9UcmFuc3BhcmVuY3kv Q1MvRGV2aWNlUkdCPj4vVGFicy9TL1N0cnVjdFBhcmVudHMgMT4+DQplbmRvYmoNCjI0IDAg b2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDcwMTc+Pg0Kc3RyZWFtDQp4nMVd XW8cN7J9N+D/MI8zi/Woyf4GggCOrHh9N5K8lpxsEOyDooydwZXtRBonu//+sopkT5PVrGaX hb0wYIymi1OnmqxDdlWRffL8/rB/d3N7WH311cnzw+Hm9tfdL6ufTq4//favk+v//LY7eX3z fv/x5rD/9PHk6vPPB/jqb7ubX3b3X3+9+ubF6eqb66dPTr5Vq351/e7pE7UqzD+10n27bftV V9TbulldfzAyL6/a1fuHp0+K1Xv8S9fuz5dPn/y0Xm3+tbr+n6dPzszPrc7OT1erk9eA6fz0 1YtVEeva9k2orui3Vb1q286r+2n9avOsXF9vnql6/Xb04/AbQzPdbHXU7FlS1qjox7KrYluU VbW6vv1pfb36Z6pdVW/LMmyHTZKKKiPZhqCuzt68Ots8q9ZXK2OQXr/ZVGvzt16fmg+X5/DJ /Kfclxcvnm96ZzrehcuLq4Sysmu2qgqVjbvi96dP/jHRISroEE07RGlj9apt9LbV7mdfPL9+ vrowoEqDsgJ47fqHSzDqzd83z+r11V9XiBW+eQ1mgNQFmruCP69+vLqGa/A1GNvbr08vNw38 3bov3168On1+bWRebdyPXVytntvbssJbuHnW44+cvkUwb8wt6tbQ4sfETaraAm/S2JrETTIf jZQy46RS2840NQOzNndjW6vV/e7pkx/+svpoREe3Urtb6Vp2lW2qbVOFbYtq1DjpBE2zLbF5 bX5mAuY/PNIR2KpV22ZA2xlv7Vm05REtNG09WGhpdOeDrdp2qxZgHYOoHAhkksZ4oTZW19W2 1MYlTQ/pre4Qw7u/jK7X264zl1RjhYbrals1Yfti21VT142vu+vj9q7T7O+7TpuWwF+YknC3 MgXRX8b2U5fLbdf45l25rXSVkMBfmJKo6w7+PN4F1fdteCPruoU/kyiH68FPBPdyJGLvpROZ 6A47rPDSaFCNOzQt4Y0ZJFANEbJYWKHIp80UYKh88OmqS3hJTX0amlYjnw7aJr2k1dbW0jAP egkO+Z+AHw3TfQPE9Z2heiR5mAqQEV8gZz7fKOXmAPyIly7OjpPiD8CZl28MS/79injel8FW vRkjPYWdy0b2Pg9slLzPDWEji/fIRnl4HRnFcP+5hbulCOh8Xc2Erl6hL0bKviqKb9TXck1T VvXNttdps8yc25u5s/8C+ya01lpt6wmt2ezeuk71TGBheD+vKLMnBTwPDALexSvKapxMxAKq 2XZ1Bgt0lAWgaSNmAV1stR7f00vDA6pwiz5cPdlFktL2u/Mr/BLp4eLIB3gNlpC4ekTxiwtc Xp7ahdlx3ZgkBpklutLWwWNLcpnB3vt5ZugJM1jAQmYgeK0PafChwv6XcKIMtRMkURcKviJ6 WZaQWVgX7bR9nTWvt/89rs7S9ObSURA8fxQRSVgcDEkkBTxJDAIMSXAyEUkUZhXUZpCEUpQl oG0nZonCPHlX47tq3T9y/dHs/wofkl7iw9E38PXZ8PT4g/0TH8Z6RzGL1xAyc7TpF9VOmJNL FbYH5qlCacIVFrGQKwhgyxXlPFdkqGW4ItbLcoXMQuSKKfs6ax7PFUKdliuWDYOgf8uIKywO hiuSAp4rBgGGKziZkCsasyJsR1zRpAZqRagCm459q1nAFI1ZpetmfE/PzzAQcwVejQ8NL9HX 6a3+IvXKrBDVhPa/HZ9bbNjnxXdmYLnFC/z90i9xbMBm4LPzJPfIAGoDsKonEGZSj+vQgXqS HVrHzOPwHn0kC68lHgrXEk81SzwZWtO8Q9RyvCOzD2hn0rrOGsfSjlAlss7CERD0bROyjoPh SaWJSSd53XHO8brnkyamHE4kYpy23+o+Z3XSUsoxbUvp4qTpDKjghr7A1UcQz7aejauKH5OO LUKhzFOe6U+KItex7X3LWFN0xLMRsGxJQfFaz67nPXteK+PZsVrWs0X2oWdPWddZ43jPlqm0 nr1sCAR920eejTDSy4nkde/Z/np6McGJRJ7dNEHaITlCdUE9G9pqsWtDkqQLohNXr8ClucDj +NHDTvyjHI0NZThiOF/BUECZq9fDU8mRLtJLAJlVuunhRlKrcqnCdsQ8VWhFqMIiFnIFAWy5 opnnigy1DFnEelmykFmIbDFlX2fN49lCqNPSxbJhEPSvjujC4mD4IingCWMQYBiDk4koAxI2 OVkNXVLKgLbitEZjsLYpxji3OdvjM4F9FrGPKBfXSXeXIVKmeddQRLnebu9hhrdXxNstYKG3 x3its7fzzp6hlXH2SC3r6zL70NcnrOuscbyrC1VaV180BIK+rSNPtzAYT08KeE8fBBhP52Qi T4dcZ07mQjfU0yv1BamLpqqjUO/VGZRf9LjyH1XqpBf8Mv1KF+jXRH+uY9tbluHYLXFsi1jo 2ASw9exu3rMz1DKeHetlXVtmIbr2lH2dNa9ifVuo0/r2smEQ9G8XObfFwTh3UsA79yDAODcn Ezk3ZDBzMg66p84NbcUZhwZSvVVqHse5G+sV8L9RuYIPMiYL1UICkGFUDQZFKMZcArC3dZ4A yoIQgEUsJAACeEQANUsAGWoZAoj1sgQgsxAJYMo+RwD85C7UaQlg2TAI+ldFBGBxMASQFPAE MAgwBMDJRASgmqw0QkkrDrGpOI0AadwglELLEmyUD5/ny+OUj8nGt1FdwouVGQav/dLg8nRT 2u+vrnyzi5dJjhDZAZW9Zo6nduRShL3xs+H+khRPOryycD+Bawmin18hzGtl+CFWy/KDyD6k hynrOs8MHD3IVFp2WDYCgr6tInawMNLh/tR1zw3D9XS4nxGJmKGo8sL9JS1chLbycH/RRlFW 68DfXr5xRdzVxBLARgMxElinAoc2E7j0GUJki4bYTzthSy492LufsYIg5YwWsHABsQxvACQq wbMwmJkudd0PZn+dmecYkXAw173Ki3CXtP4O2y6PBXfFtq6gdR0FAV/uPprBuLuHgXpzh2Py Ab64xXH4edOs7+G7/QFG6X82qrNL4hucBkHyN2gJ4uX68JAatkLUygwDMy1R1Jnj1t3ojHFL iu0cYtnApYBHBavF7OyWo3tyemugrJ0o56Y3oZm1UlCXO2Nn48vvHle3eaCsm6WDIth8EZXe OSBpdkgLOHo4CqT5gZWJCKLNrNKvaOkdtl0ePfYE0UU1zxe7A7r6nxtdrj9Bd94jM/yv6V1k Ao4tUmwgg6iqHqYDAjGXDNrMkvyKVNM5wEIyiPHGXFCyXJChmuGCLr9EX2ikpwLWyoaPiElV OyZYNCCCno7q6hwOhgiSAp4IBgGGCDiZiAggBzYmgr5ODVpaWTduvGQTnqcCWDT2QcB7d/vZ rFMDF0cWMGvgDxvVu1XBR/Ol/fTefNrhpw+bdm1WGtX6kCQFIVrVtFDpRtHm0oLVe6SF9C0m tW6jtoKdgxRyzAxskCxLOUMNsXaWG4SGenLgLW187vuRlTt6WDYygh6PKuAcEmZLHyPhGWKQ YLb08UIRR0D2LCclVtFKuHFbwWIB8oxqfGft0+vubvcz1LfuP8FjMDLD7nAPn/e36UcEGRRV AZYJKLnub9VmrApIPdyoqWBVQADHzt+xzp+hm/H9WDnr+zIzvevzdjZ8KEyq23n+skER9HZU IeeAMCuDpID3+0GAWRlwMpHXGxPbZj5UXtMiOWxaC0PlNeQfy1Qa/MzlzHxQbEHSzGbaXMjs 6uzN96/wZ079ryazajJztLnjfTlhTi5v2Ps/GzGvSW2cwyuKmC+EGwCJirgcjGR4N3ndj+fh ejK8y4lEoxmqmrucbem0gAvbtuI5rDSogjt6/tk80d4d9rc3WLgFz7eH1QM+4pb5j7gyUKo2 knoCVO6otPdxfjarSRGXQyyczQjgEcur+YBXhm5mNouVs7OZzEw/m/F2NtbM5Gwm1O1ms2WD IujtqKzLAWFms6SA9/5BgJnNOJnI/yERlJPeqWlZ17itwP+1eTqogz1cZtWqOrdsxUQOPNBC GExXjxsGkwFXbbWt1ATwXI6wajM4gtSDjZoKOIIAjjlCsRyRoZvhiFg5yxEyMz1H8HY2/tiK x9XtOGLZoAh6O6oOc0AYjkgKeI4YBBiO4GQijoD8Wk7WrKbVYeO2Ao6APGQQYTz/BM+3P0NH 7u92yc2lQrUKBlI3odaTzIJ1iBBBVeJTNUGQyzFWbcbxN6TkbNRUwDEEcMwxmuWYDN0Mx8TK WY6Rmek5hrez8XvZH1e345hlgyLo7agAzQFhOCYp4DlmEGA4hpMJOQZPNspJvDW0Am3cdjnH VJDODKKUWCoCgbQ2XGHkO78QkSqN83cTiDKd36nNcH5STTZqutz5KeDY+SvO+XN0p52fKOec X2imc/4ZO2dybVLd1vkXDoqgt6P6Mgck7fxpAef8R4G087MykfNDXi4nkN7QGrNxW4HzQwYz CFQmU23aFtzgBXwOOWCQ/fYT8MRdMrouxKfqctvoCXy5VGDVZlABKRwbNRVQAQEcUwGbWsvR zVBBrJylApmZngp4Oxu/Bf1xdTsqWDYogt6OqvMcEIYKkgKeCgYBhgo4mYgKmmaIKXPR3YYW 6I2b5oejPRG0RRTfxeD5bgedep90bpHKvsMzVKnKZ4+rRxUKynZiPatnpmuLzvgLnCRtWOyR lfZmZP0XjFMaHSlWY6siXbfh+UOyFZwMVFNtiynjc1nbap3NbTSkanLUcnFug8KNObthOXte NUPZsW6WskVGesbmrZwphRCqdoS9bDwEB5pGFZMORzJ5lLzu6Xq4nkwecSIRWdfVkGthFxkt rZYctxWs2wzUMCTPlUvufhme5TDp+SKotl5ACjLMqtXwpgCKOZcVrNr5tVxL6idHTQVrOQI4 5oWW5YUM3QwxxMpZYpCZ6ZmBt7PxpwY8rm5HDcsGRdDbUQ2lA8Ks5ZICnhwGAWYtx8lE9ABZ 6JzcUktLKMdtBfQArwYIovHo96/tHsLvpe4vw6TKZttPYcp1f6s2w/1JmeSoqcD9CeDY/dlC qRzdjPvHyln3l5np3Z+3c6ZQSqrbuf+yQRH0dlQi6YAw7p8U8O4/CDDuz8lE7g/bj3PSRi0t jxy3Xb51sIKEfRAoh2KmH/GVB8MhxnASmC5sQdTpqIJKr6/OkCbgy7fDG3Ny9ggKUauu3Zp7 SVHnEoRVm0EQpJJy1FRAEMsAB0iiKj+Hgxm8SQE/eAcBZvByMtHgVU1ePqKjZX7jtoK5S8dV 01i4hzsAMe9ptwwKyh6EuGD+gqwEwZU7PFWTl5XoSMXeqKlgeBLAI16fP30/Rzczf8XK2flL Zqafv3g7Z/YCSnW7+WvZoAh6OyqLdEAYCkgKeApQce3+BAVwMhEFFJnl/R0tjRy3FVBAEZdP w1yED7Wf4T8oizrsbF3/R/j//bgYCiNgN27zT4oKZPhgI6DqJvDlUkGRWfPfkSrJUVMBFRDA MRWwWwFzdDNUECtnqUBmpqcC3s65BKVQt6OCZYMi6O2oStIBYaggKeCpoJiv+WdlQioo4XRs PcpKlKlxS6skse141m30ks2AJRwjrsij7C+4EsB9fTDrd8MJAbgjsB1vCHxvhEZ7AYcLyQ2B UsSqqeGwCoo4kx3cXT5Gv5N3mdRHOsij8GweZEsPFHFMD2zSMkt5mh+Ido4fpIY6gpixdCbU JVZuGWLhwAh6PKqRdEiGMLcm+wEZCccRR4khzq3JfkBeKGIJOOG9ylkw0DpJbLt8QnYPvCWc SB6WMfw/7w0S2uM2B1F7cinEdkHGO75I+aNDLFtgLAQcIIlK8xyO9OSXFvADexBIT36sTDSs IR/UZAzrnpbmYVtxlqeEDcRBcPwMR6fdIYCPwceN7jCl2a1Cx8NyoDjHiH6wu2Hb4+p5fwtv pcbtBvBnsnpHiF/1lR2NMf7cYWxvecYwJoV8DrFwGBPAo+lh/iVUObqZeTBWzs6DMjP9NMjb ObObSKrbzYLLBkXQ21EhnwPCUEVSwFPFIMBQBScTUQUkh3J2E/a0kA/bijM+JeTRgkD62583 z4yj/w6+DxGyPdTr2WQPPCXb+RCjaB9h8oNPPm3sqkb87iOl13/C1Hi8HG4+QtKhVYMpSpHZ qbWGzUfUzlxKsV2TQSmkINAhFlIKARxTCrv5KEc3QymxcpZSZGZ6SuHtnNkYINXtKGXZoAh6 OyoIdEAYSkkKeEoZBBhK4WQiSoFTrHMYhRYEltXxtD8Bo0Bqjr442752Bp0fvX13d3PYDU/k K59dspllZAxYeAyn8KCUW3u0M2sPGXxdlHDaFoWfSxR4wzN4gtSgOcBCniB4Y55g9xDk6GZ4 IlbO8oTMTM8TvJ0zITqpbscTy8ZE+NLcqBDNIWGIIingiWIQYIiCk4mIApJ7OoMpVEGr0Up9 PPdP8Phd4pupZ/LNo6wyHEM7TiiP3rQNx9ua5cj58+E9uuOTbfHX/gnnWpMXXr48SxKJzDjd VVC1SI3LJRLbIRkvvCtI3ZqDLKSSZYhDKFFRlQPCDPOkgB/mgwAzzDmZCZD+OaDYdn0HJvqe hk29QeQ25SwgOA5oJ7tmCM032/KooezNvZ/SEDaeiIZPIzz2azwLw7HaQWDlEvzgD58IL+3H /Q4c4U90BJyDceZ9NyzlbzeqMEty893Pu/uH3e3ne1ilV/EqfcIEWpuSbYLqNTw4URMWDEe/ qnFuYVXHVcjj/vXOZzt4tpJcFf2gAX3HamjrbddMaQhfP06DaNMA6b1x2sitGU2GyTdUTgAh lQOzQE6+bdPLgRjWxHJgAgRlsdy74dcG/O2YPsBgAggNCmUDcQuFLxiyw5umsaWnUQsgWbae vO5JdLieLFvnRCLyg0PVc+L0Sk2EKaCxOLNfwhbu4MZ+/3lTr+/wnRcYb7DngePm4/0dkFSL GxBPHiDVZx41cBlgQw7/hojnr+Z7n+wb4qGphYAMu+ptXo9gz10I2PudsRBQNPZgIQsXAgRx TC/soQQ5uplnilg5+0whM9PzBm/nXOxBqNtRxbJREXZ3HHywSJjFVlLA88QgwCy2OJmQKXSv 8lIfStHwg7ZvchcyhYb93nHuQ5vVTuOP8wXKONl/3HQu7bH/BakBL55AqOJXkD2GJbEBHqq2 hwbKh0H1evdvI2R/5FekH/gNlkmEtmmYV+oJ2zKZxPVHDpOQ6ISDLGMSijhmEjY6kaM7zSRE OcckQjMdk8zYOROdkOq2TLJwVATdraPohEOSZpK0gGOSo0CaSViZiEnazHMWlabRCW1fHS9l EshN14RJkqsHXGG45yeXRz0ef4Df3+1v97tk3FKIVpknTHMTKdpcbmgzT2BUmizUHWQhNxDE MTew1UM5uhluiJWz3CAz03MDb+fMkQdS3Y4blo2KsLujkI5DwnBDUsBzwyDAcAMnE3EDnDme RQ10n5y2r4qXUoN9PdX4DMYdHMJqFwz4yBGvFW6GLAb+uR+eXIAsRvtusQgR8xy24mKUMfkd izIgEbt7SBYhCg3TqgeLqGG5LIJ9kUMiZLOdQywkEQI4JhF2D36OboZEYuUsicjM9CTC2zmz C1+q25HIskERdne0284hYUgkKeBJZBBgSISTiUgETjDPSn9oGtLU9hX0UhaB9HMQbyclyu82 PdZc2QeVT/5s1ylGwU/IPa566w8XFlFtuqhCaICL0FIDctnC3vQcuiBb7xxkIV0QxDFdsFvz c3QzdBErZ+lCZqanC97OmXplqW5HF8tGRdjd0f5Gh4Shi6SAp4tBgKELTiaii0rlJYBKur8R 23IJEJYsqrgI/PnDg93Z5HYxjk7rsIGJJSFOGTZ32hrFlssDlcrLtpQkUeEAiw7uoXhjFmB3 6GeoZkgg1s2SgMhIzwG8lY1/7/ejqnYUsGxAhF0d7W90QJIpkOR1TwDD9WQKhBOJ3F9nblVQ Jd3ciI3FexV0GZfKQ0nEd+Dul2/tRgPcjXB5Dl9hzdXbUSHExUuMT8D+hjem73O25QvxwqNE 10/gzSUFnbkXQZVkt6ODLFwcLEMcQom24jkgzMSVFPDjVs/vRmBlopGrwgMC02+NUyUtP8DW 4xdgLnszH8Svw2KEPzZ+Qz4sU/e747sKfBmCWbYOcbTbu09QlAxT3XHBO2xSMP/9hvJw/QA7 e0u/s9eXKi86r0ZqrC7rbaGosbnjXoWH2HE9RDbyOczCF/sRyKOZopndvpClm5kRI+XshCg0 00+JrJ1u+4L6EjOZOXHRsAi7O9rF55Awb/VjJDy9DBLMW/14oYhgisxD7VRJt/Fh40b8IA25 VB1PjXef/BaGJGe4cwFCzuBfjdKMnrZ3D3soVYR2H5NkIrNMq3Jb1BOW5ZJJkXn2napIMZKD LJxECeJJLtEpJ8vQzVBJrJzlEpmZnkp4O2dqB6S6HZUsGxVhd0fbJh0SZqGSFPBMMggwCxVO JuQR1Weefqcqum8SG3dSHoGCHVX9V3nEnkz0gEcRRIel3+Ci5bC/3T2sbvy+qiME0IL7s2z5 wt0e8w0fh32dyTyj8B6VhYLlCb1HmYzk+jWHkUgdnoMsYySKOGYktgYhR3eakYhyjpGEZjpG mrFzJs8o1W0ZaeGoCLs72p3pkKQZKS3gGOkokGYkViZipDbzQD5V0bpHbCwmJEjfNrOElHJ0 kWplJpdKT6h+NM6zuc/Rc9vdDgvQ7fb04zkrNg1apddWMgN11UNOnBqYS2Rt5rGBqiJlmRax kMcI4JjH2FRnhmqGxmLdLI2JjPQsxls5k7kQqnYktmxEhF0dlWRaIAyHpa57CvPXGQZjRCIC g53oKiNpUdFqTGwrzFkoSBx3Qdzn8OtQrJ0d2REwTYowJMbAarsuJ4zJ5Qt79+eTHBWpvbR4 RTkOCjdmCzbHMa+ZIYtYNUsWEhM9V/A2zpxALNPsqGLZYAi6uY5qLi2OZH4jddkThb+czG4w EhFN1LhxMWOdU9NaS2ysxQsdA7UWOZfFnDEZ16R60UEWzsbLEIdQoso6AKKYETB3WcE56Xjd 9EXqOl4CoaIojyIeQLkt3YraD5QlIn4IoCI3BIgqL4S/cxQKfgne+NF3XshDnhZJW1W1JTyN OJHO3L2qSguhqqNQoMw7me+BtJNxEu43fDehSNBTw4+kbRpEfDfgr1C8OVITI9I/g9lR3636 iPXAN1TZb7sg7PQtvlX2fvXuM0y794eNqmAnBIQgKvM1FiTscAPWBt47i68P+Otqg7N6Y5b9 N7C8f9gNZY7w6Z1ZHbiDIg6fhrCIWTeYjzu8Yh4eINphfuuw+mS+eYeZzVfX8NXbkROON+jp skC6OJoQvlkplC2J7LUBbQ+pMEuOZo2Llg8f8IRIeEB5hsuXZn2zac06xciiAH7/sI3UIKlE oZV+W7ShwjGb/J7ikTrotam1S99C0EXpatsu+eEmHg50HsQRYYAr/nf/D9KwfNMNCmVuZHN0 cmVhbQ0KZW5kb2JqDQoyNSAwIG9iag0KPDwvVHlwZS9FeHRHU3RhdGUvQk0vTm9ybWFsL0NB IDE+Pg0KZW5kb2JqDQoyNiAwIG9iag0KPDwvVHlwZS9Gb250L1N1YnR5cGUvVHlwZTAvQmFz ZUZvbnQvVGltZXMjMjBOZXcjMjBSb21hbi9FbmNvZGluZy9JZGVudGl0eS1IL0Rlc2NlbmRh bnRGb250cyAyNyAwIFIvVG9Vbmljb2RlIDE1MDUgMCBSPj4NCmVuZG9iag0KMjcgMCBvYmoN ClsgMjggMCBSXSANCmVuZG9iag0KMjggMCBvYmoNCjw8L0Jhc2VGb250L1RpbWVzIzIwTmV3 IzIwUm9tYW4vU3VidHlwZS9DSURGb250VHlwZTIvVHlwZS9Gb250L0NJRFRvR0lETWFwL0lk ZW50aXR5L0RXIDEwMDAvQ0lEU3lzdGVtSW5mbyAyOSAwIFIvRm9udERlc2NyaXB0b3IgMzAg MCBSL1cgMTUwNyAwIFI+Pg0KZW5kb2JqDQoyOSAwIG9iag0KPDwvT3JkZXJpbmcoSWRlbnRp dHkpIC9SZWdpc3RyeShBZG9iZSkgL1N1cHBsZW1lbnQgMD4+DQplbmRvYmoNCjMwIDAgb2Jq DQo8PC9UeXBlL0ZvbnREZXNjcmlwdG9yL0ZvbnROYW1lL1RpbWVzIzIwTmV3IzIwUm9tYW4v RmxhZ3MgMzIvSXRhbGljQW5nbGUgMC9Bc2NlbnQgODkxL0Rlc2NlbnQgLTIxNi9DYXBIZWln aHQgNjkzL0F2Z1dpZHRoIDQwMS9NYXhXaWR0aCAyNTY4L0ZvbnRXZWlnaHQgNDAwL1hIZWln aHQgMjUwL0xlYWRpbmcgNDIvU3RlbVYgNDAvRm9udEJCb3hbIC01NjggLTIxNiAyMDAwIDY5 M10gL0ZvbnRGaWxlMiAxNTA2IDAgUj4+DQplbmRvYmoNCjMxIDAgb2JqDQo8PC9UeXBlL0Zv bnQvU3VidHlwZS9UeXBlMC9CYXNlRm9udC9UaW1lcyMyME5ldyMyMFJvbWFuLEJvbGQvRW5j b2RpbmcvSWRlbnRpdHktSC9EZXNjZW5kYW50Rm9udHMgMzIgMCBSL1RvVW5pY29kZSAxNTA5 IDAgUj4+DQplbmRvYmoNCjMyIDAgb2JqDQpbIDMzIDAgUl0gDQplbmRvYmoNCjMzIDAgb2Jq DQo8PC9CYXNlRm9udC9UaW1lcyMyME5ldyMyMFJvbWFuLEJvbGQvU3VidHlwZS9DSURGb250 VHlwZTIvVHlwZS9Gb250L0NJRFRvR0lETWFwL0lkZW50aXR5L0RXIDEwMDAvQ0lEU3lzdGVt SW5mbyAzNCAwIFIvRm9udERlc2NyaXB0b3IgMzUgMCBSL1cgMTUxMSAwIFI+Pg0KZW5kb2Jq DQozNCAwIG9iag0KPDwvT3JkZXJpbmcoSWRlbnRpdHkpIC9SZWdpc3RyeShBZG9iZSkgL1N1 cHBsZW1lbnQgMD4+DQplbmRvYmoNCjM1IDAgb2JqDQo8PC9UeXBlL0ZvbnREZXNjcmlwdG9y L0ZvbnROYW1lL1RpbWVzIzIwTmV3IzIwUm9tYW4sQm9sZC9GbGFncyAzMi9JdGFsaWNBbmds ZSAwL0FzY2VudCA4OTEvRGVzY2VudCAtMjE2L0NhcEhlaWdodCA2NzcvQXZnV2lkdGggNDI3 L01heFdpZHRoIDI1NTgvRm9udFdlaWdodCA3MDAvWEhlaWdodCAyNTAvTGVhZGluZyA0Mi9T dGVtViA0Mi9Gb250QkJveFsgLTU1OCAtMjE2IDIwMDAgNjc3XSAvRm9udEZpbGUyIDE1MTAg MCBSPj4NCmVuZG9iag0KMzYgMCBvYmoNCjw8L1R5cGUvRm9udC9TdWJ0eXBlL1RydWVUeXBl L05hbWUvRjgvQmFzZUZvbnQvVGltZXMjMjBOZXcjMjBSb21hbixJdGFsaWMvRW5jb2Rpbmcv V2luQW5zaUVuY29kaW5nL0ZvbnREZXNjcmlwdG9yIDM3IDAgUi9GaXJzdENoYXIgMzIvTGFz dENoYXIgMTIyL1dpZHRocyAxNTIxIDAgUj4+DQplbmRvYmoNCjM3IDAgb2JqDQo8PC9UeXBl L0ZvbnREZXNjcmlwdG9yL0ZvbnROYW1lL1RpbWVzIzIwTmV3IzIwUm9tYW4sSXRhbGljL0Zs YWdzIDMyL0l0YWxpY0FuZ2xlIC0xNi40L0FzY2VudCA4OTEvRGVzY2VudCAtMjE2L0NhcEhl aWdodCA2OTQvQXZnV2lkdGggNDAyL01heFdpZHRoIDE4MzEvRm9udFdlaWdodCA0MDAvWEhl aWdodCAyNTAvTGVhZGluZyA0Mi9TdGVtViA0MC9Gb250QkJveFsgLTQ5OCAtMjE2IDEzMzMg Njk0XSA+Pg0KZW5kb2JqDQozOCAwIG9iag0KPDwvVHlwZS9QYWdlL1BhcmVudCAyIDAgUi9S ZXNvdXJjZXM8PC9Gb250PDwvRjEgNSAwIFIvRjIgOCAwIFI+Pi9FeHRHU3RhdGU8PC9HUzcg NyAwIFIvR1MyNSAyNSAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0lt YWdlSV0gPj4vQW5ub3RzWyA0MCAwIFIgNDEgMCBSIDQyIDAgUiA0MyAwIFIgNDQgMCBSIDQ1 IDAgUiA0NiAwIFIgNDcgMCBSIDQ4IDAgUiA0OSAwIFIgNTAgMCBSIDUxIDAgUl0gL01lZGlh Qm94WyAwIDAgNTk1LjMyIDg0Mi4wNF0gL0NvbnRlbnRzIDM5IDAgUi9Hcm91cDw8L1R5cGUv R3JvdXAvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9TL1N0cnVjdFBhcmVu dHMgMj4+DQplbmRvYmoNCjM5IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3Ro IDU0MDY+Pg0Kc3RyZWFtDQp4nLVda48bN7L9bsD/ob9dKfC0mq9+LBYL2Hk4vtjgZuMJNoAT LDSSxiNgRprVaJz4398qPiSyu9lkszW7SCJp2DyHxWLV4UPi4u3huL1dro7Z3/++eHs8Lld3 m3X2aXG9f/xjcf31cbP4efl5u1set/vd4uPzzRE/+nGzXG8O//hH9u67b7N3169fLX4gWZNd 375+RbIC/k8y2lR51WR1IXJRZtcPUOb9xyr7/PT6VZF9lu+o0G/fv371aZbN/8iu//f1q++h uuz7n77NFh5m7/bH4/7BT+6H/f7YIkczQvKCOwQFz3mdsSJvFD2XAT5nSjZNXpc8qihtaF4w p+gvczHbrOZXdJZnH65/9TzIGM/rynnwylu0zkXjFL2e81n2GwDlRBSF77ma5IxENYPVPC9c Nr/P5ldsRos5ITNCfp/Pq9lifsVnbwH1Af+0zptsTpguWDAsKEvQgpT4Bp7pR+MNoNFBYuhf PV3IWC7cB7ceDMHKdlEb47+vX/1Lu122+Bkd7qdvP3yXFYt/Lnefs9lmd/X+3Vy7FJRVvlMC PKVAv8ppnRH4kPHssHn96t/fZDvDG1yPd3g3eQMfVRXPz17CwUv2aK+HOf5DKKCul2jL4xY+ 2eOrXfYB7O440b8k+YmESMNyVjmEri6PUeeFcDCuwWerjs9eBI0KmgvmoGVDGMTBEBZGn1+Q sF/4KxwwkYCYmVW8yIXm/H9fsNs3h3k9+wJOsJXv4M2f8ytwkAyHlXSM22w1J8XsK76+kcWf TNHV80E+doTXX9NM4GfM4KNGOJQTzTyEUeecORiyQbt5M7uVI+Ygh8vStFL+VY+XDZroL3y9 uoPysszuM4bkS9PkvM7LMmCKPmei2pluD1ff/ng5Z6IlxDqWlTVYj2pCb63QMr+qzOvjxbsM slklXOzL+wXkQdpqYHNxEC4waQZachmoguWkycqKYpAb40HschEIONQ0K0WZUyc1fcFxhnlI xZW1DD3y9fHwvDo+w7A7yE+L2eorlrWj0ApeOVEIXsgK1DiGQQxjGP5gDeO4MZwdoe5mdrfb or767/MG3jy5JusYi1/MWKKgOeeuseI6TEwf8tBXtE9UlCB06KCndtiUfWx8KIohoegm0Tqq 8iG41Yq6yVl8rXXbcLwWeXUyXFPmtejtyV7DiZLlvNLoH9HHnvFfD3P8B3Tt8gBe6kugaciE QK5oIfvCZAChzz7NoEqJoNy2EGd5Q0wqediAPXbrB0gfiZxtCEIpzB8cBF8sH1Vr3a71ElwZ zUvqVnvcZ/OrkkCwhECEllmhZn94UCoMDbWEf+uwtsOyzezDnDK/mB9BiApgUrmEfPp9VLUV Kgin2mugLurZbyjaUUEU+L6BSR/M8ggMld/n+EE5ezzsv2zXGwjST9jYYobNV2XvpRGejviO zva36oEnzCNooucDPrVWZWHeTASMOlpAQoFPZoenzbyUxoXR2cwwqdSQVK4gQ8hSw7k5wedh xkhM47eQqjAKPMgFB2RIZpiBSsxAkH2wqdzQuZMdrgrJ1182ygS8md0gd3wrXUN9tpLN26D/ yCcxm17x6uRZN9M7lBUwCRZum86kpMfulIvunpHD/T20hBnDYn88P67P5ESFuVj1sChmx7vN E3adqq1tF3AahPqyv/8izYNv3qBcuHiPkRIV27l1f6GxH5dyEL4BJrSRBlamVu93WO5PbG1z ai18vF2fqGq73G6Nc8KfwReuyplVI77V9oSPTm8f75crEwfWufrj9R06ri7MnEHBKExr7u/3 fz6pomBXfFHN9s/Heyy13ekPHiWEHGhr9ckWnYmR8zM3+7XTKoCSI46WUEa37kpcvhNAGgly EpAxMRENwwlaZvskien3WAaSzFrlGzQQhwZC71Wz23tjRBk55PCj1Iw/49lQx9P2iJr0uRWD 8U/SGhzMofyhQ1F2mi573GDIwyLWeKe1pKheF1CfcorL2pPD/KMy9vxpCYH2sAID3E2PCQ3J SRvgAjmy4d1qcSHwTbbdre6fL5CEYbpN3PrX253s+c8yrNxs5ZsbNbL28sPDEoz2eLddYT/K CJdht/PZLbrTacDuVjo0P+WByQQpJsgqVhQYjgOm74UlXg3NS4GzyGgRTai/Kk7ysk+X+qrq zEMpITh3QWMImlHK8jJaj3MicEVcof+owyOE3NIrwpPQmhokeAvN5/89AKRHg2P5BiUTw/kM zUA/AazcDjkXdgzHfUpdmULWw8711N010L7lcfAEhk/DWKzMtOr7NYRCuZCIyb7bzkmAuOXT Bux1aMtSuOJATqYiMJdu6mFjCY+xZE2GulVRJHnCaV653NWiPKaF/QP4HUwDK70oL5OM34wT qVBa4HL8KDvicl/RGDuWFIPAoBlLjxntipisCFiPIV8VOScuedwkekS1AoH4C67mLO87zZmK y+CjRowzGoNZJ0RpY7QKkMWw1SqP1WRN1Yk91MTHsacVxlqH/cfj8/rrvJ5l78F8ynjPj50W TUauOfrKOLsBWHketETmsUG71T67YU30NFTUgsgI9iDLcPEN2Rcmh/4K5trJoQkaLfswJ+Xs u67ZRgG7e9u8LPMCQasz6DcTEXqaVuFOgtOyUL/otFMR3HM/Re/S1yneBSKdBbCeqr8eP+2K y4TKqirnZiMECnlTTRIISCbWBonNNMo6VlT22Yf6tn91eFfMPRUNJJqixn61qYOP1rNrnMx0 V4MmglFQoKWL1l0amojBCtyxcDBkY7LfcG7Zv787EbKiGK1G9b9JMKr/zxnS2/2+XV67osrO VHHcKegy3rjc5eqZLyOm4tSVPCcy3PVTQWD+iCdFbJCCXxqFFRS3+l62KayQM7dWv1wchZTy oM8YzzUyRXvuWaZ4XZcGZIomfxYLkeRFgRMgN7ZXXkmSilLCNKsZaSKtSHRwPysS10QfH5e7 s5VYQJTo4HTO3G3+J8aNkCeYqhJHNjJWnx8+m1e/yDNuBBdbCrqAfxULFHRQd1kE1hiob3YY TdOjL1DxcZt0x8znVpxayBGrafKKZkVeQjvUDPj2G78cESyvw2qE+uZ1RihgNSRVjUAlZXNS I91YOwnEqBEbJFaNSOPEiBHffE0nUkU8VYwMM58IAdGgLF2MCMGTisaJdFQbzSt4kjF422ht vSOPN5gzk0Qemvx9Ls89qAOTpMKtgK4fTiNGBUdKoxzR5DPpiBGqyDcDtush6arIpg6Wo978 m4qjVdGwf0wF0arIBinYpVGMKnrRphhV5DTl4r1iVNEYxzWqSDluhCjyrkFouaK5p4oiJ8X4 RVEqihZFoyykRZHKMXGayLcmYMSGjkzxmkjUZl0pWhOJigc0EfNNzaNpDmuiM+kITQRRuiYn TSSaBmJ2SBMxkTfnnYG69vgs85401noF62H99YRFEaTKhp1EUXdQTwIxosgGiRVFyjrn9Oe3 j2+io/OoYu6pKKiKhqlPhNCqyMaIUEWpaFoV2WheVZSMwdtGS1NFXUecRsyoojGeaPKZ8sST LPI7om8uaVdkb2vEcteyyOY+KItScbQsGnaQqSBaFtkgRfeY30QUI4tetClGFjlN6Sb9qSha Fo3xXCOLtOeedJHfdb3rC1qxaPInxRJLXusiJ8v4dVEqitZFo0ykdZFOMydh1DKRI4yYb3nC KA4dnE6Ko8O/LYx4gYc2RwmjSpCQMPItE0TTHBZGZ9IRwog1+I2vcYtFpM5JxN4V801DjWbB epL3rihH4kYYdSduk0CMMLJBYoWRsk7EchHzTXZ0KlXMU5eLhqlPhNDCyMaIEEapaFoY2Whe YZSMwdtGSxNGXUecRswIozGeaDKa8sTwehHzTSjtiibsotncwXT+RZZUHC2Mhh1kKogWRjbI wC5aIooRRi/aFCOMnH4pL46ihdEYzzXCSHtueMGIexcZtGTR5FMXjJws4xdGqShaGI0ykRZG Os1ErRhx3xKFURw6OMWvGFGGrjFKGDWcBoQR926JxtIcFkZn0hHCiBLEGrdiVBQ5D+si7puH GslSyNN5ibqoKHN63kXrBqhJIEYX2SCxukgaJ0IWcd9cRydSRTxVFg0znwihZZGNESGLUtG0 LLLRvLIoGYO3jZYmi7p+OI2YkUVjHNHkM+mIYVXEfbNJu54Ju2g29UFVlIqjVdGwf0wF0arI BhlYLkpEMaroRZtiVJHTFL/AS0XRqmiM4xpVpBw3QhR5Fxi0XNHcU0WRk2L8oigVRYuiURbS okjlmDhN5D0mrsWGjkzxmgj8h43bRaMFDy0W8dCp7CDNYU10Jh2hiSBkc+IsFvGQJqI1xS/i BHfReOCgs6wndReNgm4R51004RNFaSBaFDkgkaJIWydiF00MH3TWzBN30QLUJ0IoVeRghFVR MppSRQ6aTxWlY/C20dJUUdcRpxHTqmiUJ+p8pj0xvIsmAkeuNffUXTSHO5jOm4CTcZQsCjjI VBAlixyQwnt6PBVFy6KXbYqWRW6/XLxXtCwa5blaFhnPDe+iicCRa0M+cRfNzTJeXZSMonTR OBMpXWTSTNQumggcuTbBKXoXTY64cbtolIgmIIxE4Mh1mOagMLJIh4URrUVeipHCqOSo1YKr RSJw5lrWk7qLhl8ELc+7aN014EkgRhjZILHCSFknYrlIDB+61swTl4sC1CdCaGFkY0QIo1Q0 LYxsNK8wSsbgbaOlCaOuI04jZoTRGE80GU15Yni9SAROXWvuqetFDvdBYZSKo4XRsINMBdHC yAbxrxelohhh9KJNMcLI6RfvLloyihZGYzzXCCPtueEFIxE4dm3IJy4YuVnGL4xSUbQwGmUi LYx0molaMRKBc9cmOEWvGNHydFA8WhgxFjp3XQbOXYdpDguj0n+6vSuMoDOraqQw4h6h4TQy cOgaKsGv5CeqIkHz+ryH1nXYSSBGFdkgsaqIe3OfY5zhE9eadqokGuY9EUJLIhsjQhKlomlJ ZKN5JVEyBm8bLU0Sdb1wGjEjica4ocllvIrQQ2XguLUmnqyHbOJgt+5a2lQcrYeGvWMqiNZD Noh/0ykVxeihF22K0UNO8PQet05G0XpojNsaPcSrGDFUBs5aG+apYihgn6koWgyNso8WQ7yK VEJl4KC1iUnxSkicjoZHKyHOy5ASChy0DtMcVkLCf569q4Sg94uR30CjtMlJxN5ZGThoLetJ 3jtjAh82Yqj2iqEkECOGbJBYMaSsE7F3Vg4ftNbMU/fOhqlPhNB6yMaI0EOpaFoP2WhePZSM wdtGi9dDF+ZCKcFvhTpkbMnV9fWJeFpyjXF2ky6Vs4e358rAWW7NPXl7zuY+qLpScbTqGvbB qSBaddkgA6tQiShGdb1oU4zqcqK0X3WlomjVNcZzjerSnhvenqsCZ7kN+dTtuYCJpqJo4TXK RFp46UwWtT1XBc5ym+AUvz3HOJ50HqW9RBPSXlXgLHeY5rD2OpOO0F4MelZEaS+nCea3kou8 FgQvRDRSB2gx3vnpXaytJeCI+jFiU7ASPtc3N97o3wOmhKJZgDfYpsxFG8F5VnQFXz/BWMUH j+jraeQ1kCj7QruxVXkpEkYRdkgMDiaHS6W56GyteHR/4tfuL6MpVYdZZf1dVp9QpAxUPUZ4 CaE13GdNR4T6WEaq0JC5ujfzFJejoFVqh4NXqnbZkMux0Sq2w+YqxIFekAPv7ZS0pb/Q4KvZ xYgbiZo++moTyozkUFS6PxZtDz+7rLDWFr2jrxYnFKVL1fCDGTmrwyGzLru62EczVhh3LCbv VA10XHVBHlo4j3f7+oIktLDukGj/slaXRXM5FkZ4jzZFU1yShBLmXb8ImaIhF2ShhXv6eG5M VDT6WFPp/Ii5PZ6N9tfj+bzo6h3QDTvByF9ZNwNaXgkcGs8N704WfDRjZwtdEVSF+k1ckIWe TUzoNxPjjODWKaHzG+dOv+kJiZZB58Vgf7+ZEGa0toJRWrsPpTWdaQLfb/DS9s9nyOmux+j5 TB380Y4mtPkf5jk8obFZ9/V0d1ZD+NnS8bMaaHXaFTAFFrWZuzo/5KM9RPw35JCmMJdX9tTp rdB/Tw7BIdgzXbSqOpmD8AJvSTB3eza5b8ECtFbblPLZ2vOsQ0sZj8D0CMpHLBe4wNzfUlr0 X3VqNXXx9nDc3i5XR6zx7fG4XN1t1tmnxbv98bh/+GNx/fVxs/h5+Xm7k7foLT4+3xzxox/2 ++Pm4IfG7yIZ6P/0/M9iYz9NcOLJ3Mej+ltYVHB0uVdAKFK1kLFX1fpNi0H/kIS+KUoO8wHr yfZt96ZsiQHaKZthxsZ2rEDv7z2PVY3MaM5j8gkfDpRs4XyaLeW9Nyu8QfzpyWdbCEicxrWF EIZ3Zjhl5R06dxvfE7TE4BdXO21AnLtl5e0982a22j+Y+U7f5T1vPFXSQp5FioJHQcFFT+O+ 4rTr0ddCygh+5y0OQi1K9dhvLi/x8zzFK8y5cQhC3jpku80VuJvAnzUA5/n1l3/6HsQbq9kI f6OVQOHpsLo7zkvVoEds0N/w1QI+Wsg2LqEfd+t7fL3J4bXsO3WnH5bO5fsdvjyqB/uBGYhc EdmnDOZelLUHn7HGdud7rGIoiuONgb+/LsiYgcEggUX2KWsoCgB3ZK/XB7w8W97N7RvanAq8 NyQKhFNcJXKK3s4r1Uebe7wv0/cgr3FtJw4Ept/tWLO/9RWGmU10xXj7cqtiOWz3zwffIzWD CBtZfV2ignHK/onmnzfOla5Oxit4PsBepayeRFGCXDs9caNujEKsJ327IZv5gh2kO+hC53lv qC1q1ABO2Vt1WzsY7R6GrBymEnjj63kCcQnidRwgxCXSbtxXX2GY2xRlZMWluuzeLhtISVWF 3xuPq73GcOGWjbxQDg25+x/8o2940lL9inQMEVqW8hoOu+zz6X4s30NNiSsMcQAwTeAtgA/g cd+BB+S+wARyoBrwuB5BVvZoQ1yCEC2aP+wPwxVVfRVBKq6rUXzq3mpg5DK3ms1fsn9lZz+q FPZmuOamr2bQsUMd0jf/BX3WN7F0q61afdc/r71TudWk6L+ZzLw4SZDlbg0hTafoLXS9Ss85 /k2l56N5CFSxXI6GiTL+V30GE+bzG3vGbE1ONdlaSmiCK1YVTh2r7uy0JzqKCma27TZ+mtWs 8PhozeRE23rOXeVzygJG6ZRFtUBwngm5f7Mb7HDSu+1qV69v1nSaIHvo/Ulf5MMQfdNXPSly Gpj1Wt6YUOifaMLJT7/hJfT/A90YBYkNCmVuZHN0cmVhbQ0KZW5kb2JqDQo0MCAwIG9iag0K PDwvU3VidHlwZS9MaW5rL1JlY3RbIDM5Mi43IDM3MS42MiA0OTYuODcgMzg5LjQyXSAvQlM8 PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwOi8vaGFuZGxlLml0 dS5pbnQvMTEuMTAwMi8xMDAwLzExMDYwKSA+Pi9TdHJ1Y3RQYXJlbnQgMz4+DQplbmRvYmoN CjQxIDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsgMzkyLjcgMzUzLjgyIDQ5Ni44NyAz NzEuNjJdIC9CUzw8L1cgMD4+L0YgNC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHA6 Ly9oYW5kbGUuaXR1LmludC8xMS4xMDAyLzEwMDAvMTE1NzQpID4+L1N0cnVjdFBhcmVudCA0 Pj4NCmVuZG9iag0KNDIgMCBvYmoNCjw8L1N1YnR5cGUvTGluay9SZWN0WyAzOTIuNyAzMzYu MDMgNDk2Ljg3IDM1My44Ml0gL0JTPDwvVyAwPj4vRiA0L0E8PC9UeXBlL0FjdGlvbi9TL1VS SS9VUkkoaHR0cDovL2hhbmRsZS5pdHUuaW50LzExLjEwMDIvMTAwMC8xMTc1MSkgPj4vU3Ry dWN0UGFyZW50IDU+Pg0KZW5kb2JqDQo0MyAwIG9iag0KPDwvU3VidHlwZS9MaW5rL1JlY3Rb IDM5Mi43IDMxOC4yMyA0OTYuODcgMzM2LjAzXSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUv QWN0aW9uL1MvVVJJL1VSSShodHRwOi8vaGFuZGxlLml0dS5pbnQvMTEuMTAwMi8xMDAwLzEx OTQyKSA+Pi9TdHJ1Y3RQYXJlbnQgNj4+DQplbmRvYmoNCjQ0IDAgb2JqDQo8PC9TdWJ0eXBl L0xpbmsvUmVjdFsgMzkyLjcgMzAwLjQzIDQ5Ni44NyAzMTguMjNdIC9CUzw8L1cgMD4+L0Yg NC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHA6Ly9oYW5kbGUuaXR1LmludC8xMS4x MDAyLzEwMDAvMTIwNDEpID4+L1N0cnVjdFBhcmVudCA3Pj4NCmVuZG9iag0KNDUgMCBvYmoN Cjw8L1N1YnR5cGUvTGluay9SZWN0WyAzOTIuNyAyODIuNjMgNDk2Ljg3IDMwMC40M10gL0JT PDwvVyAwPj4vRiA0L0E8PC9UeXBlL0FjdGlvbi9TL1VSSS9VUkkoaHR0cDovL2hhbmRsZS5p dHUuaW50LzExLjEwMDIvMTAwMC8xMjE1OSkgPj4vU3RydWN0UGFyZW50IDg+Pg0KZW5kb2Jq DQo0NiAwIG9iag0KPDwvU3VidHlwZS9MaW5rL1JlY3RbIDM5Mi43IDI2NC44MyA0OTYuODcg MjgyLjYzXSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0aW9uL1MvVVJJL1VSSShodHRw Oi8vaGFuZGxlLml0dS5pbnQvMTEuMTAwMi8xMDAwLzEyMzM0KSA+Pi9TdHJ1Y3RQYXJlbnQg OT4+DQplbmRvYmoNCjQ3IDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsgMzkyLjcgMjQ3 LjAzIDQ5Ni44NyAyNjQuODNdIC9CUzw8L1cgMD4+L0YgNC9BPDwvVHlwZS9BY3Rpb24vUy9V UkkvVVJJKGh0dHA6Ly9oYW5kbGUuaXR1LmludC8xMS4xMDAyLzEwMDAvMTI0NDYpID4+L1N0 cnVjdFBhcmVudCAxMD4+DQplbmRvYmoNCjQ4IDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVj dFsgMzkyLjcgMjI5LjIzIDQ5Ni44NyAyNDcuMDNdIC9CUzw8L1cgMD4+L0YgNC9BPDwvVHlw ZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHA6Ly9oYW5kbGUuaXR1LmludC8xMS4xMDAyLzEwMDAv MTI1OTYpID4+L1N0cnVjdFBhcmVudCAxMT4+DQplbmRvYmoNCjQ5IDAgb2JqDQo8PC9TdWJ0 eXBlL0xpbmsvUmVjdFsgMzkyLjcgMjExLjQzIDQ5Ni44NyAyMjkuMjNdIC9CUzw8L1cgMD4+ L0YgNC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHA6Ly9oYW5kbGUuaXR1LmludC8x MS4xMDAyLzEwMDAvMTI4NTEpID4+L1N0cnVjdFBhcmVudCAxMj4+DQplbmRvYmoNCjUwIDAg b2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsgMzc0Ljg2IDY3LjEzOSA1NDMuMTUgNzkuNzg4 XSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwOi8vaGFu ZGxlLml0dS5pbnQvMTEuMTAwMi8xMDAwLzExODMwLWVuKSA+Pi9TdHJ1Y3RQYXJlbnQgMTM+ Pg0KZW5kb2JqDQo1MSAwIG9iag0KPDwvU3VidHlwZS9MaW5rL1JlY3RbIDUyLjIgNTQuNDkg OTkuOTk1IDY3LjEzOV0gL0JTPDwvVyAwPj4vRiA0L0E8PC9UeXBlL0FjdGlvbi9TL1VSSS9V UkkoaHR0cDovL2hhbmRsZS5pdHUuaW50LzExLjEwMDIvMTAwMC8xMTgzMC1lbikgPj4vU3Ry dWN0UGFyZW50IDE0Pj4NCmVuZG9iag0KNTIgMCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQg MiAwIFIvUmVzb3VyY2VzPDwvRm9udDw8L0YxIDUgMCBSL0YyIDggMCBSL0Y5IDU0IDAgUj4+ L0V4dEdTdGF0ZTw8L0dTNyA3IDAgUi9HUzI1IDI1IDAgUj4+L1Byb2NTZXRbL1BERi9UZXh0 L0ltYWdlQi9JbWFnZUMvSW1hZ2VJXSA+Pi9Bbm5vdHNbIDU5IDAgUl0gL01lZGlhQm94WyAw IDAgNTk1LjMyIDg0MS42OF0gL0NvbnRlbnRzIDUzIDAgUi9Hcm91cDw8L1R5cGUvR3JvdXAv Uy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9TL1N0cnVjdFBhcmVudHMgMTU+ Pg0KZW5kb2JqDQo1MyAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAzOTAy Pj4NCnN0cmVhbQ0KeJylW1uP28YVfjfg/0DkpVSxy+VweC0CA7bj2C6cxs1u4BZOHiiJXi26 JmVRysb99T2XuUocmYsiiC2SM2fOnOt3zoyvnu/2d5/a1T76/vur5/t9u9p06+jj1c2w/f3q 5uu2u3rf3t717f5u6K+uD8s9vnrTtetu9+xZ9OKHl9GLm6dPrn4UURPdfHr6REQp/CeirKmS sorqtEiy6OYzDHl9XUW349MnaXRLT1mhHl8/ffIxjha/Rzd/f/rkFVCLXv30MroKMPZi2O+H z2HefhyG/QlvQiRp7vFXlElZ5pFMkzon/qI0SYsUNrH6GN/dOdwwjWyCRpklVe3ToOnR0Ww9 XqRZkmbO+I/xL4si7laLyyxOorc3v4Ym5nlSl97Ey+DQOilqb+jNIo+jf8FCiSjSNDSvEYmU 3rzgNpo8AUG5Q3+LF5cyztKFELEQvy0WVXy1uMzj57DqZ/y0TppoIaQamEocSCOyVJT4AHOm V5MprBZm7MvTJ/9UFhNdvUdb+enl2x+i9JsGkJVlUouoKuBLqQj/+POiBJXk8asPPwPn+OuH EFsZyPlo+gy+hMPXkSlWMkuk1dllHW+6RQNEL+syfrsQddzvUWLdbnFZxH0L3+j5Dnge6PEe H2F8VfD8Tr/DH6vhMylDVPGhv8O3qxbtTtGAPwbUQ8/r/Qpje3zmLz1TZe0RL7QAjgLFwTv+ ToNHwzSRdjZBRJFd3sfafPgHfHD2Qyvi4iOSreJx2+EaKxhBH3mvJT/8Fx4gMACdOm5v8aEn f/qKBJg8jevt8x7mbjqm/QkpI0/dPYp1bUeROD6BJZ+qdUp7okkqrT3e3z36dsB8qiwp0qNZ qKHp0eCbub9GdJkmouZo9fkQjDdFUnizOD71x+HNTBB5Ivx1ICqKOqNpYC+BaZnE8HS60Ik+ g0GrQNP3pHEBWshk7SiPVEVa2YFWyJLbPSrN2ihOaHu0hixPSaBips3jTFYbWc+G3g/kPcOt cQS05VFRd5zhJQQKcogRvQECbShoNE2SZf4+Q1E2h7hX+EM5KCAzneLBd0W1Dfb9e5NZQArl pBBKVwZs+HMsPa0wizFL1/uW9LNGn9xRpDfCQs/UCipZPyKt4+tupV192KnY0VQTsSVgKzUY W+NzEUyGdZXIyh9LxE3QQoaQO1SqEGnc0rsm3nZ6PyGfzCAn50d8tH2HkuU4rajzHsmE2p4j Hr3+5HDgqzEhXpoZspBFlTRinixkCQm+mZCFkQLGbiUG4rkbwc22Qz9S3C3jJecSJSGMjEZ/ SGDUWj2svxob6G9VQMURJ/7F1ohmgtZ6MdsES0Agud7EsOWM6CVEs67MKxURZF6Tzbe7hQoZ uAWtBhz35UC+NeIr6x09CkWawCJ1TBpHGHLwd4lUEDUYxxMqUHXoIX7k6VWixDnkHFKalElx S3170OxS2tJbUhv6w4amByIhlWepcUYpwDzKeWeSnHFRG2Bv5yugFkl1muyOdx0Kuiq5466B p+hh2HHyfcBt05B1Fy3xG5ogSzsUU9EPU+FxNAOHZWEcVpYyET4MixaFjD8MaDjkA2AHuYxv YNPVIzZNk64RBWuNtIv6XNB08hPMRCwNNofCJvNgd1QwJydoHfB8USei8fb1ATbWxNfPkV+O hRdEA21tw+yDpeWZMt7ObAV8IReUBsny2PMsD5yiDyoswAv61JEo6OV4wQSUjykwtzRobgS4 WCkIOccOixSSpGOHqCudXLYYCFYj82Lww848jzAMPBh/csSKlvyXpvR2UXwjFzVZkguPi2Aq agpMW+5Qjr6nXNwyxCFJbsfoYXO3wofNRcRWAtGNWTwgDuovoi3+PawPqw7sKQrEHwjBWbwG 0ypsXBtAVorWxoY+V4TGLlmOIScsMiiFM293M5xQnnFCCe5cnxZD7XarE/NAFthS5IgGo+Bo BoSAGln4SwTVBvUdlNOn7Ggx1w68mgzykQ6x9GsFXDfKbaBqwRjn29yWPg0rqmoOeq9dhPG1 vbMlynpAX+0jNocPMJDYApcuFW+jgcsUKA5ORgtpMQWwWfqbDcHTQoDp+0NF2DrALM7QDZhH fsY8BMQyTYprY4QYBDQK8OwhwEkN5czxdFYdzZQqQXLAGtU7C9UK5X5uJUIQcaIUwcEocoV3 eqsJrid0fYrj/LBLi9ISBIt0VS8A7ztYQPssp29FaAZkzJukrnwJBCFjIRNZ+GOJ+F9ww1o8 Ww73LhK5IHZrG5JpYM+ioBpq1KGf5rqy4Hh4AldGq6Ai7mbnhzSFylmxvmVX2pqsi22DBrXV smsaabfLQbPmtyX+UMUXpKx21J0DCNF3etSGw881NpIiBowQdundq5fwLohi6jIRhc/vDBcp JlxEdV4LAES1nE+qPEMKkEP2CFLVGVKA1goxn1Q9RQoqwFRCVCmw+GFS2EH6WafrV0EglCVS +BNn8NBcvWv72wjC++XrF4twUCqgYgec5QYlROFCe6upsKRQVYLflptKH2hvF7q4MJRUSw1f dH/Cb2XZxrFMvS1TGX+nG7FrWoXjhenUEcFjS8fZ36EF8xq6QEa+CaiM1I9bqwWOoqGatCJw sbpD1ErDe6oniU5aOlVKKhVPFgSv0EX3uuGiCC4HUwClyG0g18g6KWtfF7NCRd5Apm/+j5qG 0Fm7/mxqmBlC5hCBNdDOrnVra2PV3By2BjT48UgVnn7f8+ggxWs/pxPmK8sMI4UngOQslaku tiwLnO5RmdMQP1OJ5WWTNJoW9thYDdt7s/+2NynFSaVetYxpU/tfadKIcT9MAGcBnCLhtrZx HcoE3B889KqtoEuhRI15A7wQTOss6LvwWHIYnw3b1XgGHV8tgdXQ77WFeB1v+tjppEe83un2 /jzXKKokq1y41LqCGrwcnjc6Hg0WEox3mNRtU79IhWr47U2Vq+Z2PSVWBhXdhRrcJWjiyYUa ZPenj0QK7AO5SXtJY0xhuXeKZSJhelf4AGXFvZYw9aOWdxoLmPOKr+qYypmFEW6tHlSzecI4 gx1eSIlF5kuXzVf3gRRpp0CbC3xyyLOlJuqZ1llTL3JTq0CV3tpWHQO7P9RZS54xZO16+u3C 1Nzi5Vy6nOvSUjcVrAmVvgXBtKD9KL5sWWR7FGT7CTdm3D654pWXWDMBzG3jpoV0dK+N5DvL vu1ejKxTpjL4atjNPRnKoexpNHoaltY+uCe8N8zx/hmA9mjuB47rETsElAZclqANELucjxgw M/8qnWjcze1ou46LYenTF/x9sK+5mu56TWOMUEhK1gfM36B+kvRA6a77c0uJizM7105fDjoA oYi4V9VxaBqTSBeqG02PmhCzj9ly0eAxNQtzPHBjJFIKrlC/a6TH1hZx0cXdeBTb4da0OXGE xlNOByR4xNXUSdb4y6suvxAB369hc25loI8dm0c4pHGAyNj8kXzhAQACu1zbUz7YGgexgStU eOQ1FeXexuak7anejcL4ORQx1WNoTRX6ipasM+zuzqd1piKSUMbkj6F1piSSGF8fA3Mma6IU ChGglZV4n0LXDRUVM1zIvINf717BH+aEEQ+IEMy/i97DKzQkLHvev1IPNObfeBaIT1SEvIan N5ri9cnFlmbiboSswRpqj7Hv0zSVz769z3r+zRs6m3OqJeccE2LvmjP5A0bs3MJeaqn0Dhwy ScNFEn7qofBNrczB1kdL/GMiwzuTzaKUGE0zo9AJCr+vDCvcfaUM4tRCuapuHOTqhcSpaw86 i1aamVIXj5T+c/mY6pHGu2BRc9Q7EFb3NWZE4KzJk8o7+6EGT1lCJqJsRb9Nz6zM6awKXq30 bRRuYzLTa/7mXm+hFGSvrZCUDu71FiD5fqdLosJHdiW7gc2vG/qchDBYVpVJLv1NnRyql0r5 7X9saqG3/cB/bwcAKPnUtYISC2HOBXxtx7bsnBM3s4IWJSEtdRCmUOQFf3HSNH/XZwLHYhhm A5QMYqzQm/eQMBnUUq8w6SyXboO0kI6W9Q6+peiS2+h8ouHqGaiBnrG9capnVcId63mkAqFQ 6JRMZ2OqAp7Wmi5JZ7NkyQwWRbx0VjgxhAI9qdTnb6xRKmdKp5zwkSKP4SoNRUVteIaza32T A5Z93GWjDArj/Pjc65duAaXinIiwZiB/T0WTGkqyihTwXhk7P3PsWidF5XMyJw824XI/K9Kk 1qf6dNpJ3VPhNOBF48d1+JzGaxND9RvnNIgnTR0bFfpjgLzGXYH9iwIBk8fzY3p6kzc/FA+b dh3qYMoKu/feqiEOZQ51R+GP7QdzNUVoPIkMY+pyioO1kmM/8KFRiSNgFycC0/dGqAPSmTIw 4NA4d2sPN7fdKUy9mGf/sjZH2cpk7VGL9uZG+/KWah8GDRAgHjZ4BK9OW9AxneS47KaLGFtV McCYSOl6hejYgpDu7DshCUcfEWoencUSFCZ1yVbNbxZkWWGObTnmu4eFXGEspAup+LDLgUqq tyZTD2rAHGNx8Fudv6iKUdmevixlSDFc4xyy18WlJXJ8H9A7gXOaZDCUqmHsT9CK8Eo4bTdj /JpMpYY4DdvQzbwsqTyhDdyHdS9kSN3CutUepVcf6COgAkxEh3uNG44kzFJgzP5iIcqZmhRZ oiuJLSvJFvPR2qquVUdYuGnThjm5gx9dXW/b3l6ameoeCwhJZemszK93t/rXL3S/f7PXwGH7 N/hFd7/pD7rzg3aO/ye2V3dILFTa6xnfPt/E0JAKTxCh480MAmTeeEOJ9JW2fbpXcXWuE55N dcLxZnnZeBK5Nf/OIZhPSyrAXWZcdVihGnkLvEoqsgav86VJXjVNHe26p08+/TV862mq2a4q WrzVr055id9516jOtAFEVeDViflXss60AQTYd/2Ic9Gs8MrQqRo3q1LsBqA49VVCqHGf58+O C+TJfzxQNXi85E4O5uGspjzsjZ1xTp+ms1eQEJCOV6B/VxH6pws5nn8GSYdkOtUOUXFHiNqH bqqvqiP7js/Kj8C6zhEUe01CsLcJunVCYRP7IRw1CT20phqYbjfbXLSl00p7u8yeK3pVmpTH WWvJqYAYUzdy1kSLcdD6wgT5pY33qvtmyPEtkp5ZoTC34eA7UovSOxOSMraXH3kbxN2B4/Jx agDeLJCye5ld8om0NAAK466lY8J0R5cz1d1ae3JMt151kg3cugpfgBdVnpSFt/wcy6uOm0rZ VEephr8e8U+Esqm7BeYO6Df/tdH/AHvD/XANCmVuZHN0cmVhbQ0KZW5kb2JqDQo1NCAwIG9i ag0KPDwvVHlwZS9Gb250L1N1YnR5cGUvVHlwZTAvQmFzZUZvbnQvU3ltYm9sL0VuY29kaW5n L0lkZW50aXR5LUgvRGVzY2VuZGFudEZvbnRzIDU1IDAgUi9Ub1VuaWNvZGUgMTUyMiAwIFI+ Pg0KZW5kb2JqDQo1NSAwIG9iag0KWyA1NiAwIFJdIA0KZW5kb2JqDQo1NiAwIG9iag0KPDwv QmFzZUZvbnQvU3ltYm9sL1N1YnR5cGUvQ0lERm9udFR5cGUyL1R5cGUvRm9udC9DSURUb0dJ RE1hcC9JZGVudGl0eS9EVyAxMDAwL0NJRFN5c3RlbUluZm8gNTcgMCBSL0ZvbnREZXNjcmlw dG9yIDU4IDAgUi9XIDE1MjQgMCBSPj4NCmVuZG9iag0KNTcgMCBvYmoNCjw8L09yZGVyaW5n KElkZW50aXR5KSAvUmVnaXN0cnkoQWRvYmUpIC9TdXBwbGVtZW50IDA+Pg0KZW5kb2JqDQo1 OCAwIG9iag0KPDwvVHlwZS9Gb250RGVzY3JpcHRvci9Gb250TmFtZS9TeW1ib2wvRmxhZ3Mg MzIvSXRhbGljQW5nbGUgMC9Bc2NlbnQgMTAwNS9EZXNjZW50IC0yMTYvQ2FwSGVpZ2h0IDY5 My9BdmdXaWR0aCA2MDAvTWF4V2lkdGggMTExMy9Gb250V2VpZ2h0IDQwMC9YSGVpZ2h0IDI1 MC9TdGVtViA2MC9Gb250QkJveFsgMCAtMjE2IDExMTMgNjkzXSAvRm9udEZpbGUyIDE1MjMg MCBSPj4NCmVuZG9iag0KNTkgMCBvYmoNCjw8L1N1YnR5cGUvTGluay9SZWN0WyAxMzUuMzgg MjEwLjI3IDI2OC44MSAyMjIuOTJdIC9CUzw8L1cgMD4+L0YgNC9BPDwvVHlwZS9BY3Rpb24v Uy9VUkkvVVJJKGh0dHA6Ly93d3cuaXR1LmludC9JVFUtVC9pcHIvKSA+Pi9TdHJ1Y3RQYXJl bnQgMTY+Pg0KZW5kb2JqDQo2MCAwIG9iag0KPDwvVHlwZS9QYWdlL1BhcmVudCAyIDAgUi9S ZXNvdXJjZXM8PC9Gb250PDwvRjEgNSAwIFIvRjIgOCAwIFIvRjggMzYgMCBSL0Y3IDMxIDAg Uj4+L0V4dEdTdGF0ZTw8L0dTNyA3IDAgUi9HUzI1IDI1IDAgUj4+L1Byb2NTZXRbL1BERi9U ZXh0L0ltYWdlQi9JbWFnZUMvSW1hZ2VJXSA+Pi9NZWRpYUJveFsgMCAwIDU5NS4zMiA4NDEu NjhdIC9Db250ZW50cyA2MSAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5 L0NTL0RldmljZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQYXJlbnRzIDE3Pj4NCmVuZG9iag0KNjEg MCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggNDI0Nj4+DQpzdHJlYW0NCnic vRvbbuPG9X2B/YdBn6TCpjm8swgC7G626RYN2mTdtMAmD5REW0JsUitS9vrvey4zQw6poeWL iiBeijycM+d+G16827Wbq2LZiu++u3jXtsVyXa7El4vLevv7xeXDtrz4V3G9qYp2U1cXn/eL Fm/9rSxW5e7778X7Hz6I95dv31z8VYrcyxNxefX2jRQ+/CdFkKdekorMj7wQntwC2I+fU3Hd vH3ji2v6FcTq549v33yZifnv4vLvb998hBXFx58+iAvH5t7XbVvfuvf317puB/sLhJSeH1kb jBMvSSIR+l4W0f7sLeCLGlT6gecHR4EGeeTJ3AL9ZR7PyuX8PJh54tPlvx0vhmHq+aH14rkL NPK9NLZAL+fRTPwXEHky9n3Xe1noRelRZIRZ4gWJBfrbbH4ezgJ/LuVMyt/m83R2MT+PZu8A 6y0+Wnm5mMtQAfohAhJE4MsEf8A7h7FFOWCb3Beq2AERhqEn7V1KB4o4zLwkc+L4+vbNz0rt xMW/UOF++vDpB+EPtShyaFGagoZkRuARCLxG0m/n+L8MZmW1KpAt7Qbu1HhViU/AQqc+yNz3 ZGgv7FIICUqXSRv2EtQhnVSHIMq9ILffOoIn8uIfRXUtgKLzH9/Pewwyu4kDT2YiBYXOErXu P++Q5HI3z2Z3wIAN/YIf9669+eBQQnsNp8nJkOjowxKHr8RyLv3ZA14vCHej8S73O9pDC9f0 XGwqYNcVCW1HEiv0cwJUIitRj7/h9XI9zxmmukYDd6l2BCoauQlxMDl4jMlBHHsRiNwPvVQL 711P2ebnqb5uXTYegPxDewmnPwgDLx2gy52wuZfm7nWZZNtpUqxIstRLj3ohz7wQDDFJpZcE fau7Q/mhibGkVwLlRdftbr9s9yDOHd31Z8sHhO3rxRKuLL1wufjYy3MbuTsc5F4Y27CEoAJV A00DND1lO07TRAs7zWfraoMx5eu+hB/NhGfNA/deHeoXutSP/HBwyAMmKHXthJ2ePgHgwAYe u/psiAKICDP7rV9KYMX2pliW82Qm3m238/MMjDCaVavNN/Cs8UzcI3s2LTJuLdp1KYrtFqEJ YoFXN/XQ/xygL5S+F6QWcs+l+eCJwtxJnYPZkZvZhyJOkIToGmM0FtmzfCAOKAOqSGmABS7r lEiO9fpR1hmjDoVHvSEDigAx+ij9xmc2wF0JbnYllg8L+LfcNfNDdsf++AogyBh2lolEAwuJ wEDYOsAOrsmQ0ULQaCpa8+seLkunhaQh5nbWXo8QWvwEC5EBhGdAEcZeLE02hSnbetOwVsak lfNzoEisatTjRlR1ixosruodSPVWFBUwpS2vdwBdAMSN2Bbo5netqK8w/2vXtACs+cv8PCZr WCK7bm857KFx4IvKz1SeOyFLfS+2N+zgCVyiA0jB00ReGogoCzBtwXAnduXbN//5s6gAtMe5 5BDn1DLgR2gdyetEw3WMVQz8A8bYSMQ+5bc6IwbeFQuk9KYUnzzZJ+BnouF4jOlIpFHgBYGF 8Tvffy+/fz6OEVUyyoY4Zi8hYowgliMExDatOWs2K/iz+Qo/91qNGgEWBQkTKBk51nuMpPig +MO8QXDNmbhD4yYpVFopdwhJktnc0N/2AZQbEa/I9DE6N23Rzhlc4J9vZj8FLX9NT/DmzR7X bVp06LvXZE8MVd+j7P/ZNgWq4dClQNDHagsSWQ/QH7aE1GUJsAoEyall3GVtCgEDCU7zzr9f UkGCDF5X4HA3KC7wiqGVtSp+vQS3DEJMMyzcj7FMRhKKFI0wgKonn+Za5uAaLRRZC8VP2HsQ Q6aW2nv/ATWQcsPljgsBCLMt6j5e1dWItBfuAfOHNH4a/yLIzDOpUUo/xiA9xb/cwT9aKLAW Cp6w9wj4lw/0jjofwK4riEsRV39lBRkbKGIzIuuF+GO4FT5F96yaVhf61JoCn4HVRQRhBfJ8 H8Ma/JF5ntJOrv58HIiypGmQNDIg4JuSbAQjI9+LgslltNYxCGpdFo6AIsj78mxyHZRAqiGU AEZbDjNis1mGnrrYw7IkZJ0k+1Q5AfR2nQB6IwaANmDD2G458DNUDfZpnEQfthB5sMXROUda yLGOW0ETzImBJ4mPNQIqKCnbl9kHsJKaUrRbzssOqu1roY9SLM576O/2N1WJGWax2ICB3nAF ncyocNpwZM8x5J9wU5Bo+ml/U0W1gvAkym+Aels3UDY0uJOTbgKKlijub4IbmSieX+H/jxBE rYT5FVDnYHAHUR8ZNZVK66g5qdQHW0pdzGICdMg6TMKhHqyMEqz1UK1VdWjUGksPrFzmMiWt Poe87g6Ltj0pGWodZG6QCaqAegPAdNHqCw6+1MQpsLxbgUaAOkBhuN9xkomaSf0eQTWgIGRl iwuva27/XJFV7eAll/q8EgsgX/ctFhANqxJ33mqzot084L7oaXWNl5D+AmkYF79xtwdu5xYA XzMpeGPH/gKILYhYlZFwv6uklAXL3h0bccL4Ca2wRKBh0PjjCQmclHFg/qEcmL9ixxY3iw7A pGJnSh1WYqs3X98Zfq5YJZZ0u699WhZYVdA1theMe6NlqKzR2oJUE/I9/lkYt7i8QXYzJ0/L FXAKieWp/0CkVX2P3QKxZcp5YyVQCTWQhwRcYicMijLUoLqg3RLHaqJMoFn+ijc/0rCGOECE t65s9rl0hDLxsvQAHTVbKRSL+axEwcSsnqIssBeL5syugfZNj2rRkF3Q7fLEjMfZgxWNVmxj BbKpoDoKvUndqJhkTG5bGHPSJl+CueXa2hCypPaNsrYu1GrjXBa4/PZIp8gRCp/UNQJCvX1S 1oR5ikVSjzXshtknm22Ssx078JVoqOmHvOwsdsndOQCD6IrA96jLai34s+60YG1eIo39E70O Vh4bKy+rPZmCCi3KNcKOKgL2TsyeLPLSdBgElbVtyDGtSFEaLV1y7lW5EuiWagHmqtSCrNzl qg/ohlGgFfVNigWZUmncGnK/1kq5JiU8MS9wrBiPVYUkXe9NDOvEL0h1xKLE/SrbQMLJ7eHQ Ru2+JqaVSOaa5Xwm0N6qlVrhSlvgcmxlPcPsuAHh4rV9H5ShOM0fMYGCN2nrlp0Zq7M76X8l aUB1bmeYKhw02I9fUngdahIzmzZ8Y2zucSv2BJ4IaAQ5R5Lzcn0GYQeCjbIEbHDLgDrcWgZk 48u6Yj9rcp8TMwX+SccJ27FZ1n7JoyVybp2f25m6qcEAdyY2OgvZcuwggs9YSwnum+jSwX7C egg3+YszoRIU/LVS1tBnHDoGtJiTci+MsNPf4x7ble4z9jWjl4ZoFqcuCulNr5enoOaIurrp Bcma0riCUgeCb1BbEw4QJSkoWzuUkTprODU7AunFx2X/eKESHApXKU2hz2lkGXeuijWrIcKM 29oztRu8Wa06JqO7b42G7DhRLsSiXwOUV4SEFabRzrfT160JtBwyqSo5LdPg9ayX+QsfADHB WEK4GDenX4o0pjncEOkXKgVYAhhkTYcy1z6ws+tShyaeTqz62R0H6HQiudPJEnrb1nKpKL5V 502beqc0QftUfKQz+5OKJMCzWHLsFDG09qon0I7a+Cr07rHJcxqcyCvGLdggccJbsw9kHqyJ xVVDenzHQPcbE5EF8pFJJ6UsO8fZrwkKLY2bqebQK/EFeztWGbPdL0wC1q8KrTLN2e9I+hpy qN2hK2D8hS0wbapKIwjVf9aWxxcffsVnOtc8LT9S38ssfqx4Z3Zea5I2cNpoWyYJUwG+5/73 JHRhnj0ahs96lQG9tzV1BwPvOqHwYss9cxi53ohTJ11BnOEhyic3hF7b7eUR5n7j3YypfzGm FH3HGNPzu36c12PXD1V6b5w0BnwQO+sDg1KLCAuszGQiGS0Karh4QG9+WmlHsRdHfaof6cOp /FrV7QWXaveY7ZSmDBS9xJKVh9xhv4t1uJ1I9Fblvdju6gUO1Pt9IpUsmaTixIwJA+xO9xiz YH/OEaEU5EgVPcszioVUy+mKv6xEwacDMN3VTjCdcfSwSa5vTBeQU2QM44yuqzkHgjgt9YGP hyz6ccN07pKhQFCsKkv4ionFhs400JGmO06j454a9Nsb3mvbcpDlOIseb//IgbQaTeiB9ORo 4uBxw24kzCToifDxJER86BZHE2l8OMn8snDNoZ+NNEo9OcJpn91+HUSxj9PaEaJPc5lxqvjv V0eZ5J4/ZugpiEsDdKZjTESY+C8qvidj/hrh99fGHsvMi4MD2I8/UBApLTaT8ADNQI/dg9Ep AX5O80PruRmUO943J07oeTf77yDMJN2xgpr68+Nu6t/bop606wX0yL8HwlQyv3lY33G7R4Yb QO3SDaB2YQB43G/D2PP+JMFvPYilalzqcD8Hz3J2o93hOsedR1FTZZnHXhrZLeGnjftfhj6j zw+OHfc/nHQveKjUTpCWqtNlZp2ieeDTfzrPu50aP77KrmCRzApwv81cQ/5nIoq93D+ESJ8s +Px5Hk4cLXgeVkjF44PkHXm0gLGqkwXT9uM60at221spdlEwkUChBeXZKAasUTuEPf05ssww iZ/Rv9TKnhvMJLnvxvmZHrZ2jaEGb8VcnfaHz5ytDyrXRxLMl/IHNCO0+FNUot5yg6U7AEGd KZ6N3de7P9DKRH/WjZyUipX7SjcVddelz55eYi642avKL9WBXhrjNcl2087V9JwZ9Hhj8aVM AV+TZqPSe9SGb2godqW+mIDECdvOnGM8p2b1ep0wsmqBHda6MvM+YkSD5/XjPiM5xyeRkcSu zc16v23+gpp4Yn5Bye5bJfuCK8/yzLRw2Ba2rC9UirAcob6q7jSBvOnKTLlKNdKh/pgnPhbL NameRaGgxk292veGgcWJCYZqPbIIVq34spvKLYVqkjtKq2dvIY+wTTLeQq1qPTPpHR0DMqZM Z1tgNdVck5QIn2mBFFQu9rqm9lQAjbSm4Np1ZIlU7lic2jYx4YzGg6NvZsZh+rrCNN233Xmv kr8x0K0/08XoD+fYtHoNDiI/VSMQqrwVcxLdSjIlNrYiucW0b7h7xMP5lTq+odVDta15Dn1i lkEVLg+nTkCTdewHfZQyXToCtOvm7dsJdmpGdEM0HGLQ7W5AxKM26rosEefXTlKmpdINLfqn jk5tzX46SC2fmAoMBixuj2f7LcNFopJbbBwB4wE3OVBa54P6cTLthQczNaU4cf7oQY0X8g6/ HbeyB2umNf6i5qVYM4mnq0ZYnUOzoSnj136Z8oelqMnR8fS08wLsyT1xCcLE4JTNTCetrkxc 0mFpINSTcjvDb4rG56e6442lmZI0vRMqlOsS4aw+S9PkPpBmDdUHeTdMZ6bOoA05brSWLEMl h/zd8WmZleRelI0CRW1loJzndjk4Bceqn3sI5YMGw6J9d25vdzh3I1GQ27jpjSUGaSJPmipK la+7COE4iTfukzKLVJt0us5yfS+mul29lYKnMFu1SWUOPH9ql/TZOKlLOkA50Ud8Nh5qko7w HNEjfTZG7pH+H0jjFukI0aBDKic7pM9FrjqkI+THN0gzu0EaQATPs8kvqRSI7pEe+kpqahUz DyGQ6a+kptbhfqmCmP5Kqltm6isplgHh6knABpDB5HdoUxCmiQQQU7xzb6MDcCHp3D1ATLPW jaYDcKFh1jPANOcNFno4ZKuBkYFbOMcAkVr/D/dszKINCmVuZHN0cmVhbQ0KZW5kb2JqDQo2 MiAwIG9iag0KPDwvVHlwZS9QYWdlL1BhcmVudCAyIDAgUi9SZXNvdXJjZXM8PC9Gb250PDwv RjEgNSAwIFIvRjIgOCAwIFIvRjcgMzEgMCBSPj4vRXh0R1N0YXRlPDwvR1M3IDcgMCBSL0dT MjUgMjUgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+ L01lZGlhQm94WyAwIDAgNTk1LjMyIDg0MS42OF0gL0NvbnRlbnRzIDYzIDAgUi9Hcm91cDw8 L1R5cGUvR3JvdXAvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9TL1N0cnVj dFBhcmVudHMgMTg+Pg0KZW5kb2JqDQo2MyAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2Rl L0xlbmd0aCA1NDU5Pj4NCnN0cmVhbQ0KeJzNPGtv20a23wPkP8xHaeHQfD8WRYEm7XZ70aLb m+x2gbQfaIm2jDqkKkpJc3/9PY95khxalmW3KOpI4uGcM2fOnPfM5Ve7/e11vdqLL764/Gq/ r1ebZi3eX77rtr9evvu8bS7/Vd/ctvX+tmsv3x6u9vjTP5t63ey+/FK8/vqNeP3u5YvLf0Si Eu+uX76IRAj/RSKuiiAvRBlmQSzefQCQb98W4qZ/+SIUN/QtzuTXb1++eL8Qy1/Fu/95+eIb GE1888Mbcekh7HW333cf/LT9o+v2I9qiKAhTh74sD/I8FUkYlCnR934RWyTwi/HEi3kcRKX7 ohi8qECjMA7C2AH932W2aFbLV/EiEN+9+7fvxTQNytx58ZUXtAyy0gF9t0wX4r+AKIiyMPS9 V0VBkhw3jSoNwsoB/WWxfJUs4nAZRYso+mW5LBaXy1fp4ivA+gEfrYNKLKNEAoYJAhJEHEY5 foF3prElIWDzE/b7yxc/SQmBj7iKhSjSIogjkZawNPBmEZSJ2DUvX/z8N9EC7OW/UIR+ePPd 1yK8/L5ub8SiaV99+3ophUSOA9JAA8U8UEoDxak1khaK2JGIKgFoeDnLgqrUawBLXF/h5O8a 8V0Q2XP4iabxEJzFEGeUxviWjfOLMHwdffkYLKOZoXANsCweN5ExiiwaoSDmNSDFK/h/gzxs 8c/t7/D1gJ/wWS+W1eIWHmQLsd804hNKFz6of9NvEFx/IT4uS37xjuDx5x1C0vrc3tHf/WdR t4h4jV9BeMNFv6/3SwYX+OcPTU9Nw9/QE/zx7oDj9vtmmcPIZ2VQBkrk3iX4yd0VBe6gIs6C IhFlEqQiDoM89eyJyLcnYBQgkIZJp4ex920B2xYnmcDsLEXEym7TLoHFuEK/H5a4LiMWPQxZ FCdBHjvI7mNKlEagDxVX4ioMqnm+xB6+0ECaVBoomyU2zqogKRxiv0ax6lGGVjuQTeLMdo8C jZ+6djSXByNNoiQosgdxKAXYMlIcisBy58kshxIPh2igWBFLA8WzxKbAocqVHTKUwJDr5asI pAi51LSrBoWpH83jwQgzsOvJA+THnnUqJ0p+DGxtMFgg/HmQiTAoYvwTVVVFiK//dhSElP1Z iCJVEKA+8nIEEqVhkMZzgygRIgiUILCSQ5g0iVDNzIyCrC4kgGT0iNqkJOaqQeBh4WULLxmh ggUr8tGEvACKVi+AokMDECEuzEA75GUWhJnSDglIZe6R/WxeO9BAudqow4H8bmkETItgUhG9 jpJJYvZ+8RGdpsMdqocWdgNYG7BeUl/cgdWhD3v88xkhxdUBf71jo1jxk1v4pRXbHeqdjgbE X9Y8HJhJgOsbUkrw6bADp244Kr3UtOvOeqXebu9gsxLoqoZ9KnGhIkPwdnJnnY9VYB/TMasM kaImf2BNE/Ap1lOJiBF7NUHEjv0PxdEaPtFPqw18khwXamE6gcTVd/grLRl9v2raBth5Te4J LBSBiiteiXrdbc26olTc8O/gj5TM+A/wzodlVIA9edolyMsKd5g1e5oE7A+Uoxr/NqK7Jlet hy8rWJnMofo7kLU34C2A51dKKTOyjqJ+u8xsMZcf2IQG517UJAbNEk1M62gbkUuFYGm5MNYK NR6pfn5Obo/z3FKCk+9bbgE8N0o9ntKSkyNIfc6PjUKPp7RoGNvqPB7qcsluemSYbU3DDyCp 9ANIKgwAUeHCuO5vCszIIuZpBCFaGXs0eTHv/86OY/sUMjGQF8qnkELzBkS3o6CY/vg346kI wXnKbISfKMapf2sxAOct0p8bJ2z8orSRNu3hQwO7eEchk3Rjz401SVHdWFg5vYAc/vkbUB9O UuE0VBU4C5OojowvJCLpQcwKXjnvQtgjZdNEz2tlEMQkdSUxRUk0VuETOtlgHkFOfiNTraSF bBasKMKxBt6jUKEVgtfwH2lWxRbfY48CvQYtbhXbrW4no+mIZWKNJrHVCvwaJOazfiiNwbyt ejRbsqFWr9u1oMDiD0S/2tT4mWmxyTq0OG9pjaVbtb4QzCN6pz+wsUJ3qBG98gDIRveiUzwR vf5Ijz4tI3iLXILmqSef4nZwlUUmqXckgASgD4BOgVLz8zeiaTElIifX61VlUWJvh7lIE7tW k19pdcBumVjfku+Djw6My4S9F089fdjVqTP9tYzClXvGkThSOvRiL0SP+k171Ctbz6F7B1J0 QEjmHfk7kkc9fM7UWmfGF0QZKWSGRLrbue1ts2/Y3ZntBjiemEPg+hQ2g3g2RO5HvSNW6Jf2 QF+62LBmoHmueOfQZ7NPWvy65slsSAZ4Z6COmJU+oQSjlVyk7cU5ALHCPbSmQeqn50pYuTa9 28oYzA6tuha/sv/ef0bXHx7li+YD7u8+ACc3klIg2NXvOyTfjcdIR5rtpZRoAY6/1iV7JYOs XA8c25CeZpQsjs+nU7Mqd10QXBKadt3S6hIRsHBRzAqjaVlq5CZBFQAfPW78ydTFKSxbMabO 7MQdaepP4Cy54leA9NGzO2eVmzUqRDtkIylA7bHRkQnvZ/x0kLv8iZlfUqZvwP01bdFblAZi fhsoRX7LriiswpaVGS2UXBFLoDkRiRsPdE+hNBZNruPXdfKhWQve+rzVSQ1u16wZyEw+NQsK 8r0sFqgoWZqbj3KD4KYj5XJhXBLyRvgZ0W87sGZD3xg/57AVnd6bovljyxF9pgy9Mu4MTawS Vwdei5Y3AuiGHoGf2uBlWRmkiSMbtID1mrQo0UZTrZ0FpMl2FtNaZ9dyRN/SSCoOL2AuTYv/ msSR1D1XLDo1F1eUad3wBnpy3Z2lGQbFjs3f0jyYAqmCcA93LAo8S9wvEcYV6OLGcjHxhbGi 7tEQwkww+UVwaw3yf8ip9dk1WwJzy5OJuXkTXI9AVQVJNYHKtUJGlFpyWLob2oFPLuBJEsSu gMssGpCAKr4XvUOn48SgI2EFMPbKKvhhko6neK2lwUxeHCxfyXH3SUGsVJ3nWm2Pldh2NDjL nFQ6TP9Tsy2m94+NA5SXtVVc6badcXXXghlRSM+uI4154J2eK1Uqk8UtmoqSlepwkYxWxfek gX6GqCgLC8z32ebj8NmyGIKcKl7/VUfmcqso69Vqmg3Ayc+ddostCVsfVhMBIUoEo2JjKY0X jchpUGOSt2Rvn5ghaZUFUTWTU/emXE/HjF5MMYH5yKqlRCyrlrN5l2q+bGmPFD9kCimW9HPK u9i1ABECYAJB1er94v2Vr3Z5OlYI6aMRUrdh6EyYshBiwzEmiGtKztz/+/w48woTvs8yPcCR pROouCjxX3IKoixOcSv8enb0WVQGWTyB/uiiQxS6VYe8TDEBOFdzliCq8DBVUZ4bRddZCGS+ pjw3DhchJMR8VdkMM1dWlqtAyKw1sKY1AyEJnoGQtBgIomUA5JYjEghRKlniiSJQFIWvHeee fhwaKLEGGta0BknztCiCLHtMQeLBGPMUlf/jKhIPRprFQeIg7Vcyd6KySDeYlaG2LmVqP3Ce 5byEJBVaoOkixdu3y2SmSnE0rihEVTxGdWSRQgqjKlLMiuM9bVCSZGXwp4iedzVAPIvKtZYV KkCwlu82PjfjdKwQEGfpCOt7EgeBzl02qo4MXGL2VSn/aFLGMtQdpf2EWvwUF/+XpeVCW9GG yYqK+r5a/aMZng89rG7btAIz1ERXzemgT93uN9wswi7jSOcXS0hYDTENH7nDBY7vG+pE2FCO rdY5sUaX/nsn1YR+Mf4i7s8IPJoDoCoyhwPGgd8qSgclG5PJtvhBbzj1zrrlbJcMFKQsGV6p oWUhzaQLNy0FP+Tsd8RFjgFYfMjD0v0RoD9m1Na5mAS6pSweFCGuR5mfdfMRQ1+KaLutLhcN s7/e8ggKUL0lnFd6twzaQHLVBUJcJwZt7ouPHs2cuAhix9hwxkzG7nJectNTH/ytTg3KXALV QamFi5Ow+Mh0wZxb7cVgUrA4PaLbmy96BKoMg+kxquEyc+6dE5EcXmJpkSor1Fo2rh/oprOn XdwoDbKJTBdG+vxJEtjr3XvQEf6ggjfdisZJ1unKGvVKkUAfaMNstbgrtJib0C1k8OnJ+RHS +3aKzdPxRzrNmnJmly0Vh4iPrEd2qvS64bnJPAtb0i1WYerf0CSMsum1LEM8rMvtsYxIygqP zJytze2TbHGmSY7VKVtRXZDhiieng9acG6pbbIu71lyVtcX+GcxDUuRBHo0yRPc3qCphRnMv Pm0arO1Ko7ghJThWE9JZF0aHykzr2puGOnl6SVxitns8vSPTUNKzVmmoWc/6nvZ5OQeVSTh+ DjIPhT6undU8Lg91OlbKQw2RziRqTsdEeagxpiPyUKfj5DzUs0yP81BjVIM8VDabhzoZvcxD jdEfn4dK3TxUin20lb/7VT73dr9631c5Z34+0/3qHYETT/LxTPerGcDb/SoZzukiw25rHjMQ ks4ZCEmIgeCUkwvkppziKgrikvlaVKiWPIrId5ZBrg+NU02PM5EASSDErophwmlHdfi9rn2Z yvp8+uWhyME8JQ7yt83qsLtlk5IsPp8ZXZIE+Ti51u53shCW636ASNa3dmemII7wxIpFATbC Wj14K/bP2DX96I2MTsQelkE6mv/nq2Ynvm7QsDMN8uDWeXHHFZ1Tm0y0vX0Dk/Xn2e7DNK0Z 4aU0n8J7ZNZN7keZdZvdkfl80k3SL92b42egnLeswvPSQ9OyaVS7pxvK4IeVLtoK2FC+40HU YNzSD/iYC8HcPoR1X/RR+26lXrTaqvjQCmdgmpZ7drj72JsnPhMr0qGjN9kResW9qxS1kG+/ naznU2hj+iGtFlDdLLHatLeqZ0ymC5wOYp38MD2ANSZR6lvV1qD6i00uYa07A9Vuv7+z6LF8 A8VXOjk0bmPkhA/ndy4GQd+2a9cXuuuHwnsjQPTpRvZfUWUde+04GSlDK4qs7DBQRQ0E1HHa 1ZvQOHXCCWgJPD00mrCbLH5absf0+jAl0dlNtS4X6jUJDfdocVeBJY0rzCBccZQm9DbE4IzT n5Tg6wMUMZVQ46ywX0ip/eNayajpgXRIfFomgS3KRysEVF9xCA5ahgJt6jjhpNvaidlr1dV9 kBvTyxknq9Fc6yB85Zx+VA3v+hAftsyVyLQzi2ga5XzPyJABRwat0jDJoHXWMPkOS8moQ85A etIPmAGHrGiY7AzLcSHryUgpYh3inAnpTkYEAWtWTmBCe0muijeMOxllkSlLnxzvqzhLXbpR HEYeceSP4uRzbxTnfd9K2cTRXBTnHYGjOPl4JoozA3ijOMlvemS4bU3DDyCp9ANIKgwAUeHC uBEcRFIyfoth8MJ3Fj3ydTTJpRkMU9zjVxflQGZ+pMaz5r4+gQeiyTP3pMnHwx0mDnM67Sud TemD3h+3PRB3FqvbVEzL/BKrr73uFu17SiyT2saw9bwEgDAl5VQqGa9HqW9mzeVpGONicGKT oyVa2/+ABcOrm76fPUN5JMIojIJkAt/Rmif23dIk4yiiQ13gMkXJrJuA4p0VnuDnTsUlnLA/ 2J6nrIGjLwD+EJ2+xy2Bp5Cu1eHI1gqaXun7D6TnZWfITT0LsV3dqrsanKCLvGYqiDMB2p32 OLn3sOZ4yPuZCJu3Sl1DnYUVGeq9p2vjdJxZSqZwgPM9BWTlwtmyqo4/KDFTXMFlNYpUqWNf dmgsX8meoNyKSHFdeYPUGG31neU7tqrE8iN82VIh989fkCzBu6UecWEI9V1AyKDPZMqClH06 SFD8ade7sBchs0szNR4PzhatezqgdQ/K0bbwNbo/N+dAFecO57D0KDMAgwB/8naTxrRxO4cC uBqng//OPmmARctOSprSJPYBnO3hSreDUPqFeCUXapwOmO6Rf25GxuXgbLG8TEaHi4Pi+Kpr dSdeq5IWMjuAYVgndIsQH2jkWuDgcI3gszxsMfe6i4mOIulTyKw1h/mYjR6JOo/+dAZGWeD4 Xf6zJuo4PncdEdNWXFEvFh2rQWuapM2sIybjG+oeR3+cF9gxMaJfNjJs9XFpmgDn9XTzz7yM 2Eegvd1hz71OYXz0GekAjESUgIP1SnpY4rZdqWPkB6fxT6iKiNtQwIfkm7XdO9RSdwElFvjL etuZDrX9dFnlmbkUldXAx143+oiptkL9hXM9U91aJn2gSl27bg5gghrRZlt/EpSP2na9k6U2 I5q+MbGRvUeoWv58rhXFIDDgLSxPnpJXuukOZpnt9Jp1NtfuOzTbKSBfR7DDy+/oA86ux9tr tmNkVC0mVW8/UKcmJ70h9nuKPs/N0jwNcudEBatQsqCtkN26W/K1Rxaiud8n2pLS5e1Ocvt3 rX45Sapbfs11YJ4LHk+eapJF2OQ/nqrxVnwXATz3akDo7d5sB/v3WlkmlkG24M49QtbJy2LQ fTswhPbR7HaNvB+qxsnbaeweP6ebGRQU9yCiuuLggU9y/0X4mVSD80JKcFEggQGd4Z3xSK1r JWwFst3py13Yxtjp8cGm8HrJjbr6gRubKSzmc5KsT/bLv4K3GsX54BogDve8d8/Zwbk82ny/ 5FKEcCG29NNqY3FBm6wLWij6vML7dri7+0K1kmvFQdFDt1OnY/9SezpKMYM7IYNuoeigY5o9 NUZQp58lgLemXDwX1A86vStLzXawNydsvRpqfJGFpsitWs1ew3syu9KIOruG7MLkSQy/Y/Jk otz93IsZRoGzltImPjAkzVS5HBz2Tp+ChjCX+W60seWzUWrNuk/ooJdCJyzskK8xHvPQf/E0 hp6+cnFG990OWHPyYo1znr5Tf74BH9StW+b4gpPRz+yYpOdbSVlts1f3SYVrum9XrtbgViZq R/zhe/q8ITlo8KYirDrL5OjwCIgTytBdOyZymi8RP5YNBew7hw1yrrYJ9J6DwsgTp9LxMZ6r g5a8nU4rKv/RHvDH/yA48xlDQSfEgz+c6w+edOI5eIfjI80b44/yBVt0YHLjiIE55mY8WOzj sJbQniyauY2GtKw++tcKzylO9hR3BlVsYpG6tXyuXBb7jjTKmqsZKH6QjuAaNtYX8sGBxvtr 2KfipBL2EOVMCftUPNRyPcZzRMv1qRi54foZpsbt1mNEg3brfLbd+kTkstl6jPz4YlnilulR R2SFfcy+GFbqJYh16N+A6Cq3fxTdrEIgzqF/A6SL4f5xuGovIZxD/xbFqmSuhrEO/VtQPHVa A74H3qyA+zwsTftAGCYPgdA10LA0TQ42hGSdlwrz3IdDcpYhrEYIG0Yy1ovFPPdhYb4zgNUs 4UyW2a6Q8L35A55qkLC0F8YzzgwQifT/A3psL6YNCmVuZHN0cmVhbQ0KZW5kb2JqDQo2NCAw IG9iag0KPDwvVHlwZS9QYWdlL1BhcmVudCAyIDAgUi9SZXNvdXJjZXM8PC9Gb250PDwvRjEg NSAwIFIvRjIgOCAwIFIvRjcgMzEgMCBSPj4vRXh0R1N0YXRlPDwvR1M3IDcgMCBSL0dTMjUg MjUgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+L01l ZGlhQm94WyAwIDAgNTk1LjMyIDg0MS42OF0gL0NvbnRlbnRzIDY1IDAgUi9Hcm91cDw8L1R5 cGUvR3JvdXAvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9TL1N0cnVjdFBh cmVudHMgMTk+Pg0KZW5kb2JqDQo2NSAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xl bmd0aCA1MTA3Pj4NCnN0cmVhbQ0KeJy9XVuP3Dayfjfg/8C37V54NLpfzgkC2BMnm4ME66y9 ZwN486BpadwDj6V2X+x4f/2pC0lRoqjp7lEfBB50Nymyqlisy8eicv1yu7+/K1d78d131y/3 +3K1rivx/vpdu/nj+t23TX39pvxw35T7+7a5fnu43eNPf6vLqt5+/7149cONePXu+bPrHwNR eEUq3t09fxYIH/4LRFhkXpqJ3I+9CFo+Qbef3mbiw+75M198oG9hIr/+9PzZ+4VY/iHe/c/z Z69hRPH61xtx7SDuVbvft5/c9P3YtvsBfaEIAs+PewQmqZemsYh8L4+Jvj4J+KDqGvih54dH dQ2L2AuKXtd/LJNFvVpehQtP/Pzun44Hoyjz/Kj34JWra+x7WdLr+m4ZL8TvMJEXJL7vei6P vDg7io0oT70w7XX992J5FS1CfxkEiyD493KZLa6XV/HiJcz6CZsqrxDLIJId/Qg7Uo/QD1L8 As+MzxYXMNskXahiI0sYRV7QpzJyTJFEuZfmzjk+P3/2m1Q7+IiqkYkszrwQiMtDL4CFybw8 Etv6+bN//VU00Pf6Derlrzc//yD861/K5oNY1M3VT6+WUvPkOKBiNFDIA8U0UBgbI2kVDXvM FcBbDA8niVfkeplBi8pblO9DLX72ApOH34iNU+bMhnMGcYhPmXN+5/uvgu+fMovFWRDnw1kW T2PEniIJrClIeDVslBX8W6MMG/xz/xm+HvATtu3EsljcQ0OyEPt1Lb6iAmND+VE/Qf12L8SX Zc4PPlB//HmLPWl97h/o7/6bKBucuMKvsD/8xW5f7pfcXeCfPzU9JQ3/gVrwx4cDjrvb18sU Rp5VQAmYtEeX4Lf+riADlYWJl0UCTYkIfS+NHXsicO0JGAUIpGHi8WHcNjuLPR9ZjoBXw/Kx dV03SxA4rtfnwxJXyRLYU6YOwshLw97UjwksiAMwx0piYeF7xbTMQofMaCBNOA2UnEB6mBRe lPVI/wEVcIfattqCFpPUNntUffzUNhZnTyQhCiJ0WadIL4a+eaCkF/iJl0aT0osc0qOBQkU6 DRSeQHoM0iv6OkceHYR1t7wKQPtQgnWzqlEJdxZXT5w+gZ+iE/TOlEgshUABF5iLyEdzkXqJ gAAixD9BURRExt1fj+ohd9BkjyxWPcAkgc8ddgkgfInDqUGUslEP1DXwvMM+cRSg6ZoYBQWf yQ5S7Ba1EBVEBinQmDnFwgtIU8HyZanFkLODotXZQdGhOxAh/T4Dq5JmoRcnyqokoZekjn2R TFsVGihVW3o4UC8MBjEFwEaQgBUmXSTFer/YbNGStLADcnCM4Kz+C60IOD7x9yVskP9FL/bS ZVKOnz8MIQxPRub/Rey+YYC52y+v0kX9aRmA916tS9yQW4hTS/IPeyAM9mrCNm4H+3ePH+jb Cr7txE59XPMYpbhD0tst++6RXfcUMfr0gMEGTVNvtto2o41pkGyisfmAPIq6qTbtPfRpiHyB P3L7HbDaIr9APDC9R9qlPX8xXIwEhFbVyyBEIybdZqOH0nO2+FMjdivspKUysyTSvEC1NyRB NEmxoxD+3CBbLJSd8lJSHqWgnzfYb4VykQyli5X4BF958dcdhzU8kPHal0oJakHKQu3VmKww seH1odkO2PFBiWo3u0SyDJ8zJDJYgZ5eAilSdVrghz4OlYaYXKOIxFZp1u7wsIyZ/Z1o2Z1F tGvhc8myrkFSO9oWpFN1Q0rlPX0vR2nsgY21GT3auaXSkhnm2Q+1Jwgtn8XtFPX12g3rPfq8 EflAe+eNwjHzPjqCdETc3HmicMz8+6Hph8KhE5ICpqZOvAYb7g6SSncHSUXXgajo9+nnAjEI IwlYpkEOYnJ4oEx6oLvt1c3f7Fxgahh3YJRCQAS5fIrBbW5qUP37vm52Kqq9fcDozLVBZ6EA 9mzWo2DVkiHh8BAt0YfDtsRf9trWts1FSYpiNCMmSWtOkj66sqLz5gPLPT7fgzJA0s+6/ecs /IbBwJdWNVvMrfIWZnZzUVL83MvTMWdWMExWXlwaSUHgnUECQ3KID97If5gA/ri8yvug3Aw0 BMA/GDGbhiOzZTmrjGunrEo+HdeaAyWjDAydLlgSsMwGye9QQOw18c/v6PsoimwwglDmBb4L 2lt618s9Tq73QP627KLNFBUQtiOYpdVH+PlBB6E6JIXIDCdY6WB10wVkjdCTtOz5e/Ge4JEw nHk0ZD1dQjFqRi8sgbALQQS1t+6UXFYl8NfF1zKORGHBmkHvQ4l/ayuQ+Qosb7UEh2HMjmc7 qDAHpUmTUPhPUoV1MMWaYlIAAnkxuyzA5MU9WdzWDYeavBxb5OwjpSW8Gk0lKIp9wIYu8oQP lfjYRfEVBGMkFVHhj+3qQDGfDL12nnjZUDRK2ngDvN1gM+3n2XkEs5r1rOqAmi6Y3HRhZc1A Kbs7Qxc5QYt55Q4rJYCDfrISq1atHG0rnbaZqt9ymIqbhTscdAB874pLj+c8ynIvjmzODS2b W8h+IZGdLnq4UxvfNCH7ZdITBMuRBLXTEjYzJ5J4+wkBUqHzSTYwUoh6kUq1o2jCmhcXkuqi l1OD8sEv0irOLQf0GMkTbAvtdcxpzRyR2GnqSqDwWpbIYbNp0bLa6XNnU+GTnUQbfbXgCFBY rTFjIrtWz25okpyg06ldyIvW1Ix32O7mhWi7xcW2hrj4D1ItGcRupdp8kANWuNK7e5UgHowR tcjLh2UiU8tSCfxBN3dWnI33/ILJKGAwBFMeiJvWWLqaGFm1JK9N52tLsNWYF+wZbMk6cSlY AUTAXp1GG3mU4fPW9EX8rCd4izDYMDfXCRmo8/dJ+XQjGQY+AnE2KSSkXQueC3aCNmKNYZ9K XI6K16YUtCptxS6R21nzDDNmBjeDLSp0xESwlxkpzC31OMG03wLrRsEg6b7xV4oJcjskQE93 FYQLl27tNQY4CIFAt9D0wqP8I4ejLJ1WOwCa2wgQ4svEB3j+HvakIqNPdPOtINCu/aKtZiVR NnHokEaJWap1litMEm0qy+UNvVv9p4GWaqMPnQ1RUKCANuCwVabucs48CemBfuI9GpOCU0XK XghQEaRuzcjeWNTYdugds474QjGSaGT9IIF/ZtGT1cfvfEyFeDBu0tn59zOvCKzAaU1usr7F gEIusd661CRo9Xlla/H1vrJPb0+3UnhAHoyQhFNvOtSUdLJi67PZ9DKyFXvIZEyvSLptWwkC Sf9ftCsuEiwusk5eylVn6FO5whyrjdgAiB5IL0xAF3Utk+LAx6x9BW6UjhyoxujXX5wA8AmB NrTF0QhLR54Ly5nkufAUTlBMnwubA4WTJMdYXJESTmAeVwhwhtAk3q3eL97fus5/T5gGsuzA mqVfDnbu0An0zEfGtvXkjxlmKwKEC+zZjsb4A78P8qcQ8qkT1DGQX7Y7QX7n8/r8IlDlDQ6Q 3zkCg/yyeQLk7wZwgvxSwtSE8g0tPiZ6SDonekhCuh5EyKBTH+iPIinUIEm8rHCV/DxS8wOj eH5gDJSfgmrGWeYlvXAfccz2E8cO6FIew3WfOD+eWPXm3zyUGOgM8N3LEpGEXtQjom4On9AB bfvB0iVpiAo0uRa8jMvxBhOf1xjJuHHlM2cvEOIfm/1IYBl1WKHKk1r8SBWWJF+5uDEGhm4b NDcr+pobo+amHPTCenEKwFnOMPcRuMSU7m97yKEZGKsViBdvXsMfEL4KkWVEjoGMce4NsTWE DDRHpXv9hx39dNByBvvp0MVz6EHMrtuKEYSWAJyKgmEdypAovul8vJIlVgUFZh3AcEsQPUea 6oRfJYp3nERBE0LLGueSXVTZSKwQLh10zy4FPEjtSWHNwX41oIty5y8ql5HBnNjoDiMQq+hA KTy+r3UpQxdgb3SCzA//BZdgJ+iMTCIch06rFAbSFQFIsGxuocBmzjMrgWy+MKC17w4HvnHy qzV8JLlE7ZaFR6juTUkr2js+kEjJPW+zEZiE0TKCclaIblEiWo1UUswvijDzwsQCU9oPmkOi k/G5URy9y2iMag5UrvrBFa6fQGYIUSmECWNkzjB4Aua+GBncjnnPGTz2kjHKh4YWbN/NGxDs a9GAFSjkjztZFUN2KlEGhvdjRkVvmD4a0t8dcfR2hn4EwEXkIF/cGudH3ccOyTw0t7psyuqA GNJaVpwJtL+8cyQjX1VYwZrPmbpdVDXDQkVZgTVBNqdzaIG8/GIPboIA5a1K/y+wwX0IzKN+ 6MYA83BBdv+N6JCQ8CgHBXTEMGbLjkN9X9AyrgkeWKMfzYd1f3K1O1yk7dCi6tCV380ulygv vMip2Mif9E/lVp/FSBl03qDpqSwqdAtcEopKT9EIEowWX9dU+DhE1Yz44VtXKHfHVzt6ndr5 hZARVmWCVHxkUdPRTQLagO7oYfTwjisUdmVnyNA7ousk73VYMcaDnaRUN3NsKL9AAMem/EEd CO1ZL+1TNaXgjPWXokJsaWWeRBH5x2BoZ4g6pSfOPkA5YitRMTFBvOuaj58Y1t+gQprL17Gu U7dSOhZmXvWdWwZ4Paqw4q6x6Pueq6YJJKRTzsqIRftVKrfM+BpPDWmDrufw3uAU8EKlRfEs oQHeUMhGBmcfgFG4PJtSh+1XsVzeO73BeEtVpBDOhZx9BfE+Y49kiUDrjUdHYjsnUnvKlHmM 94fsKY+EajHzVjjtZOYdOepEJfIoSVbI4xTJEqodZt7HQbWnzENYrZ3gO7HaU8ZOfC8bGfvn ZZBzEcY/55glLfA2xYVYyCDpjUcGJ/IFoc5ekIQ57pE/pkzd+SowQB8upQIWyDGjClhjX0YF LsOCVAFr8DEV8IILKcEAfLmUElgYz4xKYI19GSW4DAtSCazBR5UgvJASDMCmSymBhWnNqATW 2JdRgsuwIJXAGnxUCaILKcEABbqUEhyBZJ2tBNbYl1GCy7AglcAafFQJYucp9AlTJmHqjeGr x59Cx/1T6BjvKxbuU2jZ7jyFdj6viii4feIU2jkCn0LL5olT6G4A5ym0lDCfIHfyNfiY6CHp nOghCel68Cl0v1P/FDqEGAJyFZJrmnlRlLgSCdeVZ7lANFDcDRQfdxVfnn9GYYDVj4YmvW2x IJ+ve+0h6/rKiZjj/PPM2YvYy/yx2bd0kWL6xPeJHPs53jUfgQv4UlVqICCrUl34klddLklY WNDLIfrlZtGi/DCz7LOU3qpiT3fk2bPUXHn8PK276fTxs+RA5u2jPAyhgnCIbrxt7widGpw8 KvzLBQMN4bDGuD+Ate+EMPJJ9Nt/kU/6oSsQpw54Lq1vjSAkxnhkJbjgU728RWJoj4AmZ0jC HyIYp1T+l7ftQV+g4FvS/LguZdQF9HQpozrmFJrOHQh03+grk64DSTX6oTLq1OeWEep4YR/J 7nUZgYLaX/A5c6VLHtWrY6jWn09wGTdEPBC5UPe71vLov0PVeQwHUnUCD5HPjsLiwRbTOYNL t9wfXFxBCJlihSmEkPf2+1/OmCiAEDK4FBcBhd/24Butld3FGAk/Y4u4PfDJIV945NclPFYm cYb6gWmOenSZlcGeIMOSgmF5uiRCfAVWMjLjHGIOIfZCeNUa3LCG/L4Rvo6kxY7GpHWaC21z ehUS2nJ1pTKlqpThcg88EZt/rTLfSxNrrcqGJudLSd0tB3VLgenvX+/s1zR96c4jnfD1KUuR BHjAaFN7JHwtnbdEsKeddzZdayyploH5JNUyX0XnHQen5qunzEP56nCaiWTvlLEpX7XHptjg LSZ8fwf1vqa4mX57fYN6GhRZ5s8wfQKmLs4vxFsShvjKU3vwcJbB83HKnfnwKYPDE5h5WYMf nxDn/YQ4wntAEwmxbHcmxM7n9VkVtU8kxM4ROCGWzRMJcTeAMyGWIqYmQ8AGHxM9JJ0TPSQh XQ8iZNCpnxAHGTAnK2mL0EtCl1lyXYGQ60PjjA/zeAqWhOoVkmeWZT9pdhB8NPu7V55EUZgN 3gZzToX2kyiw3o/W1WfjP1kg7MiQz5oZemajMx+ZH0tFlvnxlCqHrnftSlPB5MuwYIyBYQyT RHjtYao2m+7jXz1yIZ9e1UaZKwc7fBbfyyGN0iqzbJUiwUODSdLnw2NlZyezB/uj/06TYws9 VKET1qMN3wNwnEi66nN8/MAX87sIVnRha2XWV2HpFhGEQSGX6urMGFv55blzyynMB282YRJ0 xbwuVqKSPUzFBy92kYU+W/X+khrrtQx58OVrmVDRrfFG1xm5JEj5lrwrPYqHnMptlOZ4fcTm lm4QdmV//Mq3uWUM1iGysoXDg4YX+FU3usbGqGofvw4uAcZdq98Hs5J3fY0yfoVQta2+pb3z xI8tvolZvmDwT13yKid/IW4wEH09twD80LORlSP24oqzba7yrcUBtVK/04J0dNeu1HPyvQco QOMtQzuUZrpojlW9eTkP8mIQJEy+X1BWWRICwSsmviLCrm3Amivg5Xu0i0X/LutpnN522aYT gjp+g+UxXlKz+XVWq50wdI7O1R5a3wG+Cs03mhI6N/c6Ztkg3Bq+i8RdcHb8XAVVlNpzHZmv y2BC5uuTwYTrwqJMqphkmTVMkSyTdQwmopNvBh8/C6Xqw0km0tnjR+Z7wfbQ6krwa2fi+egc o/93kDijcz57wqNz0DDs56CYN4Xd2zcpeRqkobKLSkN7XYwMzjWKgTyF5otAe52MPM81Dqek skfvxdTZWDIY9t4I2u/FrPMS0FzdAvTaiaZx0RzRRSUG1GVKek5CdLt7Fm0lWH6T0nXOo9vd 87D0ZY9p6etpqHEgWtVFzTS+QEf1snV79FX2ajMN/08O/L+BwJPzwGkuP3eb6P8A5vZQ5w0K ZW5kc3RyZWFtDQplbmRvYmoNCjY2IDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBS L1Jlc291cmNlczw8L0ZvbnQ8PC9GMSA1IDAgUi9GMiA4IDAgUi9GNyAzMSAwIFI+Pi9FeHRH U3RhdGU8PC9HUzcgNyAwIFIvR1MyNSAyNSAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFn ZUIvSW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA1OTUuMzIgODQxLjY4XSAvQ29u dGVudHMgNjcgMCBSL0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZp Y2VSR0I+Pi9UYWJzL1MvU3RydWN0UGFyZW50cyAyMD4+DQplbmRvYmoNCjY3IDAgb2JqDQo8 PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDU2MDY+Pg0Kc3RyZWFtDQp4nL1d64/bNrb/ HiD/A79de5Fo9H4ARYEkTbpZNGi7ncUNkPaDxtZkZjuR3LGdx/3r73mQFCmJsmzLxWKntkXx PHh4eM6Ph8zVi8fd/W252onvvrt6sduVq7tqLT5cXTebP66uv22qq1/Kj/d1ubtv6qvf9jc7 /OmfVbmuHr//Xrz84ZV4ef30ydWbQBTi+vbpk0D48L9AhEXmpZnI/cQLxfUnaPLjb5n4uH36 xBcf6VuYyK8/Pn3yYSGWf4jrfz198hp6E6/fvRJXDsZeNrtd88nN25um2fV4CwLPjy3+ktRL 01hEvpfHxN+HRWywwC+GAy+moRfk9oui86JqGvih54dW038vk0W1Wj4PF554e/0f14tx7OWp 9eJzZ9PcS3Kr6fUyXoj3QMgLEt93vVcEXhRNE6OIPb+wmv6+WD6PFqG/DIJFEPy+XGaLq+Xz ePECqH7CR2uvEMsgkg39CBtSi9APUvwC7wxTi3yg5mbsr6dPfpUWAh9xFDORxZkXBiLOYWjg zczLI/FYPX3yv/8QNbS9+gVN6N2rtz8I/+qnsv4oFlX9/MeXS2kksh+wBuoo5I5i6iiMjZ60 UYSWReS+l8TwcpJ4Ra7HAIa4vEHhHyrxFuaAIcOvJMYxNLMuzSAsvDS0aH7n+y+D78+h0pMs iJIulcV5ggyQyHskSHkVWPEK/n+HOqzxz/1f8HWPn/DZViyLxSN8wC8P1eey3okdfGzEDl4J fPpd4J/P+Id62D2bmfso8L2osLm/B1JBQrzfr5fPk0VLXpT1GieBuFNSkDgoxf12d7/aAr/J 4qsWu6TXPpIk+OPDHvvb7qplCi/NKkkSxF6aHxrqX+3Zl+FMzcLEyyKRF16WitD30tgx+QLX 5INugEXqJ3b0Y3qILCMPnEUgoOHy2K3e1UuwFFTyX/sl6rinpSOpBWGKDU1qh/QSwAgkgVJM CJ42HddM6NAMdaRYpX6yUV7DNEVPbfL6Ay44WzSj1eMyZ81sdjB16FNT90Q5lmYED+PsKP3E UeHlhdJPAQtYMqqeyKEe7KdQrGI34IXHWI3TyItDi1Vaj0EbtzBnwYRQRVW9qtCStj0pjqWH cyqfrhlT5FhKScESTGxYFWFipzAyvpeF+CcoioLo3v5jUgtp9qMtsli1gHkB/XWbBPAsy8c6 kdZDDaTxdJugFoPRTqSeqQGoOQ77nCSwbERh2wk87FNSWuEBI1IwXDDfu/I4GyhenQ0UH7oB MWK3sd1lCv/JA+l4UnDVDqNPpNHfPj5/9c++t6RuwuFuTBuU4WoWhCgpWiGZ1IfF23oFLiBd rDFMq+odugjR3OC3/9LqtIK5wL8OGe3pnPg+qtTgZF1tV7wMFn3/NC/xNM+8ODWJV1+B1uoO VF0JjEvZETTICwWyJf54ATWkGYX4BiccKr/9GQcFvfbrJUQRb6w4+SSCAQTU0QC9iauYtFe5 io0YbDq6iElupU8YYHc4TQuSENwsmG+EmZTBPcSI+eIOXbcgS6lxnNCiE7TogC06WdCYolUH aNUqSNhREIY/gu1B7gJLY6JNL9Wmp2wDX6k/Uq/iFlqCdcBIfVoG2aJkKmu5hsjQg5jBn7ai JNNZl/CFqJYuM5pFTTC3YktNxGm1edRRAHJVMyeKpXsQGaRFye/KVmsberf5jJ9JKhJyixov BfWFb0BEW4KjoLZr0E42oB1STIP90COmVEGsm0Osa6v3gsrBuZ+ZummIL7FqPuFMI4ab+gEl /YbMwPBzRAlWDUJXa0HWVUsvEfUFVSEVvlzeNHulYEVis6evFSUuSBqVyRa5fwTN0fu7loFL KiNLZFAilcF2u1KOd13VivutJ94i9z+DDZFfeoPpyFoHlSR4urihmQQZzriatJYEK3xdPZCN YGZUOA1vO+aAZ9EHuOXE1AfIUXIUCDbfrNTokARgCmT0ckLT2GpBkOvtRg8sqqZ1DDj0a/Fl ySqj9+/ojff47ruf+G1aDe8q6rf0HBH6ifJGRYiRSk/eiTG7XA04Zh9ZDLLRkF3yLkPoybzH cewVvBgEccs8hF1+HMHUXn1YfLhxRO2nkkxiCgA7JG08bhY6GUWiPTow9XJe7P4zM8UsRVKX lyxjpKpHh4QSZPhekMQBmv4f89JOICxPB0hPTsNyablGJuGHOmkJe9kVP+eQzGpgZBqDHbRZ tx8aiVM4lIkMdtDmpn5oJE3hUKbih2bKFHbzJalseqRVbQjhfC55dD6XLLTPiQWriZ0rJQj1 JFKfYEc5fBn2N8U4ttTrqAeJdcNzcDWZZTOvYdX7qpOBqt5S9tTUW/DZPv/YHEgRjuciCrvu oJMe0Bwy8hYKsmZnIyhwjTTDSkJINrC0K4Vw/PBxdtJ+irZikP6FAn9MU4nk9k5F3NHioytV mk428MFXDFCdmCxJQjJZGrXYwLUXwa7A7Ckb5nk8oMG1Mu9nTDqoQqw5W3zVEWm9JkSdY5JK qEDQDgmHQ5GTeQ0TaJsM8MphM1mzyt2CWEMSsUy4thiWPWrr20hjjGWIiV9riuJzHcQLlaf1 sxR60zmFZxoVmNCRJel2v8FplBg5qTEEMn1r1EednXK+JGQKs5HDmvJ0SNXj6jPKzJkwhPH/ JqiHwlJISFKWvsIETuXEB0CXmZQA7qSDRY0EOefSzHyviAZo9sOcsynFXhwMULIDHd8XxhzU 00wPfEWJEKQYmGk0wspIVdKlzIHzrv5onSlJFEdemA1IsmshlLtaS/HXnnJ3R452Li8FOeQe K8YkvrC1+rCGWMAZZvNDeMG+XlePvEFHoQE5oPUzUWJijHnknqfzmjPGioGPbcclkXWsvsGP N7I39NOrvYao0AdIgKJuYQftGTgNv6hKkgIsPeoZRjMImJG1EL9Knhb00JCQzoZZMPxaj2Es 5NpBs7NbG/jnpBgQsF7zBGwY1asb3Go2kUdK/ve0LF1Y+XmA9Q1d5cN6gXgTGAvoaysaZVTG iqIBP4Nvl5JTiWO50IfTl3xIO6NgQIqJAIQkzADEeIDl2m/mVMnoCHe9pksgUYg0thC0SSDE 6TQZhujQdOfqZxAiHKJHiFbo19doHG8gjkgXb17BH5gofuDK2U/mIYFJWIR9HiZn7UFop+2Y cAburJ0fu5N21+stDheMpeyu11tkIxhL2PXrznxdKpoegZqLOO5KMNJCMjnSQvLRtiBGOo3s vD2GocszqdIg8r3YWRPi2tuXYzPe00DCmKSx51swP9ak1YK3OzmLCaJJO3rH004CLIUwaP+M JG/+Syu43FmZmSQMTm6RPFTwMTsHYYp2MYSUqG3VmQkGEfp+gyChICds2R5P2odkwiLt2rSd m3Kc514YTcGjqOxSLuuzc5ElXmpx8duOYof9SnOyf4QAd2668N/CWgtega6/QUCp9zQhQL7n LDpafJudfuJj0GJVTyDq5y4WcFVXHc1BAJlPmg5wMBGRkpQkIjXui+NRRMrsKRtmejxwBc9s i9BDpNYNjSSnR3IDn3IKIzPeCsqu7uR+ccGhSS23/tVbuFk5vOv/A3XezaM78JEKf8dD+bM1 AutFZmnk9VfymWhblXjTx6iku0GJre3Y35djyffJfIYw34HBPp/r6lalozVOd4ViQGgYq9DQ z1CDvsbVcLwG8sPLahijG4vzqtY71qs7QrE5s7My7ikZKorbKWzolwKIkjeHJR7H2ZmVyxvV BkB1wwxgMo+lI5lCBS+qI1jAo8IqjCBpiOWypnn1f8CbmRoSaFHWayqHKVcqznhQIIRdYFIZ wLIyFcY6Gpp0FerDrA1QJQcs/WghypfqAag/zG35cZhglttTTT/hmnUoILTJiu5Ek1rHibbh cZCa0YUktZxkbMmgP1WusG19p/pkFriQcd5Av7Kch8Ylg9UcSSi0yi6xUoBBNmDtA9X1s2rH D7zA0s52z6USoqSFQdUzcvWXZOtW6YK1NbeHDKkeos+aC14+nVIUeGExQGl+rx9BCpUMUMIJ /375PFu8A1X+NP9ik+Fk+ztUmfv4Yp/STbmVCO393DSjgACvPs3Di4gLgzudF6yDH+JlIgYn CTMGNx5SJqMYnNERdHGMe2YMDkNKE6edBMKdTpRBuC5RNwp3BiVC4fqUHDBcFvqRC4Y7mQkJ w/WZmI7DpTYOl2QpduUE4uRzNxLn7ECB0vR4BItzdqAgS3o8gsa1HTjhOKlweoTqTnrnDUZa SD5HWkhG2hbESKeRDcdFMNGLVGWbcYSz3jFfXXV7coSop8zsKT+QOUdDmXvziT0dOj4GLMDh ZZw5l6s/D6TvxzMR+rh0Gkxsyt2Oj+ZBTHAIEjueng/WmNlZx/4TgoCPVgXszGSjIsYX7AV7 eRAFO55OHnqhhYLx7ldJtbL3y9goeF1xwJpdTOa08NIBRA6tDIFfqhZCqAx/cJ+lmE43gLGN wwG6E/EYORcVHjM6GfNRPEbyrJb/IaZHw+k4ijrA7asln+D+hRWmNgrVIQZV1Zx3AuuVroU2 627wLxeY0Ey7a9aiu8vdrTVay8MJ6RQCB5KNs7UDPiOJ7FTsAGjUyo6BMlXeSCiLknpj6nMr Wbyj02Q6TkGww5+Unm2GMj1IjV/s9GEShFP+xATNbPuo6++3F9aRT8mP6XCIdiVwwMSmwUJ3 Su5JUgJTKP3k2v9KHa9A4HZLmlJg0Yogola5dDyi4op81C1uLsgqjOHY+GTRIgh3YFb0RdvX yhYVlEh7/dqGL6noqEjwggNT0TuFExkWwyP/P6jbrdhUfKYOywHa4wh6chGaUnlopvIo1TcC VOQAUg1Sv9jIPB5lFhlgo7akrKHz9weqyM7WCaxCsbWo295mKwg5MY4dVV9RD2SADcN5djHd trlVSkXDlaowVEQqIzXJQh9Dk4SEMVBFfAjDua2ampRfbXQFxmVVk1Ka1j/qxMAZwSQf2QcN +xhC9zZaW8bRFQKiRIk9ycMxHdTIVAm7PQv7Mw6AlZc2EFjb7aiPkDFZRam2rQrDe39WFUs5 mDc2qr62x+HQp/NJN/REVExakxIeeedHAW1rXc9lWoME0OZ2ViBiFAxI6oJMznCLPiKTfUrr asMzjtaxuqRIkOBFtrMLL0FRHHdCbWnq1hGsmZUR5BldNNOjfav85ErQiUtaK1zY9MnkwyCn +3h65Gcf9TAMkESf0hd9CpYcxFrg3P66edDRTbsLwI94H4Qb8Lri0awyHCsePi/0fl3en5e4 xtweLvg826SioJNGOeNirvMUG73GWJsU5EXFZn9j+dGV+sYYfIkl2iVtstCvpW7NS0d7zvAB dU5ue18JXqrYMQ2FAhdWUVB0MkBX/Il7WGwVcpH9Ym198eHHUqiadHCVG3KwvDVXb1VqIE3g /bufxHaF26PqeGQbE15UYD/tpHs65c2slDfVAWJ7jFxHsSVu8TU1y/ltrLzy9BkLfpru6ury OxHalemphHZHs1PXkSuG0qQECnacLoGEdjE7DbMjod3TiTK02yXqhnbPoETQbp/S4YOep9Pk o55/h3R82LNPqXPYMx477HkydT7u2Sc+GbAOfRuwRpA1SNyAtXzuBqydHbQ7OEEyBlg7O2jB /SAZA6zbDpyAtdQ3g82ttg0xRlpIPkdaSEbaFgxY241swDqAfLcoFByHV0imDi8UHrhUjHrK XT0NAIoh3nw0WGp2ALo8nhLMSjuW5mrRLeVJn8sbDZccKqE8nnQaIfpoAtTvN5i/cla3NRev mSknQec0TYvXfrv5+b0bop1OCh+CE+qTmgjRSutTEO2o+Y3f3CZ5Vsv4ENOjYQcaY9iDaM3D NFzotm2xHgqUyhtX0nEyR1joECcDHPE9LuTZOXSj6J4DN6pHVQOsGEeOqfl40drJnGL8nkYD nGowG/LxLZ7f6WAADDIeiCTPHlKY9TauzGE/HU/dl3xIlZGrQaB8u6Fi8nsFqpq7LKo665kD P33GcTalW6UGZwi2qXRJmlnq1UG0L6oXcEkdsEafsutDr9K0GtwisEr3BN/1NDQhEp14Yi7X JiJcMCQoD9O1gQwjcorW6LonwYfNKZO5m9tuY0iq8MWuIsZLzs7WO3jJvjnywWG+0MZSb6vc FR9o7N9atOfnDNLrO3Tk8dBHVa9tpMAwkFjIlUE22K0zG6mKofRJDLiVC9tpRPctm6mv87qi bmorj4wKgse7WyDP9R4IO8yeh5rbTYYRlsb25Rnca9Hlg7KQMFXeu3u312WVHyadiwLK9fpR beS3cYvEGjqOgQ7SDvsEQTWsPJC0i81bnlJ8u4iXnbFcTMhTtxtbvLultaEvHbioUoII3+hD oHuad2yApXE2VGEqCm6xrVfpTmLl3TLS9jjvM6EvvWt3anFdsht1j7erTQBd+ovL0I3iya4g nnAN2tna8/1OKIxLXUP+Ty+RnbElwIfXVeMSPb1Ylu1FYOWXkq+UbQNrF+Rz+kSGxApypr4g EyEfGe5KyGc02h2/iFdKoPL2I1Y+hnwwYouOhXxOJ8qQT5eoGxQ5g1JGF0D3KL1C+LizerlA kdOpw4vZAPHpoEhsgyJob6EBSfh+1MVFZJMWFzHbGJiCq5sWBA0tdMRsYwAPrm5aOCm0MBKL 4xadCG2YxGrFostBYJSjHQJDqpEWkuGRFpKXtgUjJXajDlISJF5k3GxUuC7kC12VuCq9xo5i R0cDiXyQd29kfUc7FF/IZz6OLXunUsy6l5uWO3lswbg7+AZvfd9RBDMz+aRzfegpNX1HE+2e gZ9U0Xc0ld6tRKu78rHUF0BX+iCxSg4jlYHNzIjzmhd1wLIfBh9Lqogh3h0iNRUd4hnXXvHl nnLjNyJLjtsrNHosjwYuOAHtsO+6vRLZFWOcSjKjWps+SU7LKN4xSmaE3rTUlRZ0U9GeaioE b+3t2wJBVR5nnJtTFRcWYJHIHU7qZhCwGLPJebSedaMsztbevXgN/Lw6eBTzZPJ4I00yQN6q 0KTgFPNG61ZmrSWuTXmgW5tdcBPld6tmjYG8TAUOYz9n6hSmcBEfhf1IzqbAMSfyFsYR3ubV 581VZHE6oZSi8B6hFt7Dq4V7lz+ZJ1AnX0Tdna8qGavEDdoLZ4gXHu2YXjcBhw0elDWrYNv6 2pu9lTlu8aRizIjInShHrxw7eUCShAakx+dNdYeu5rMKNRo+Idn/d0LOo4//AFaYDdAfqHg+ l1LB5QVdSqW+kLDSB3x3DATMzAEYfzGk69lFjWG5T4ZEramu0TA/q676ojMBwq7UCmgdVTRO yODkxcTH+rU+/amIAYdA+g4udwQ0fg245L+9IWoi/xIvwHDEDFun4QWn0mS4oEtzBC44mRAV iPQJHS4QOZkk14f8DbJxeUifUKc8JB0rDzmVOFeH9GlPB0I6t4Fjnh6mo0CIbDIKhIx100KD YXoACBnrpoWQwvQAENJ2MwqE8Bjo68J6NSUB/nNyoUM3E5qopI6ajKvPyYpu4Kaj/Ci1OKBf Jx3dwE1HWS61ODAAmo6+Z61X1NOSGh6kSa3Ivv8fo7cXrg0KZW5kc3RyZWFtDQplbmRvYmoN CjY4IDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8L0ZvbnQ8 PC9GMSA1IDAgUi9GMiA4IDAgUi9GNyAzMSAwIFI+Pi9FeHRHU3RhdGU8PC9HUzcgNyAwIFIv R1MyNSAyNSAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0g Pj4vTWVkaWFCb3hbIDAgMCA1OTUuMzIgODQxLjY4XSAvQ29udGVudHMgNjkgMCBSL0dyb3Vw PDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZpY2VSR0I+Pi9UYWJzL1MvU3Ry dWN0UGFyZW50cyAyMT4+DQplbmRvYmoNCjY5IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNv ZGUvTGVuZ3RoIDM0NzA+Pg0Kc3RyZWFtDQp4nL1bW2/bOBZ+D5D/wEdrkDCi7gIGBaa32S42 wMw2u1ug0wdZUmLvpJJr2U07v37PhZQoy1Kc2F0UTZyQ4rlfvkPl6pf1Znmb5Rvx889Xv2w2 Wb4oC/Hx6qZefbq6+b4qr37L7pZVtlnW1dX77XyDv/pbmRXl+sUL8fL1K/Hy5vzs6q0SqUwj cXN7fqaEC/+U8NJYRrFI3ED6sPIZtv36PhZ3zfmZK+7oJy/UP/56fvZxJpxP4ubv52dv4ETx 5vqVuBph7mW92dSfx/l7W9ebHf48oZR0gx6DYSSjKBC+K5OA+OuzgA+arcr1pOsdtNVLA6nS 3tZ/OuGszJ1LbybFu5t/jTzo+7F0/d6Dl2NbA1fGYW/rjRPMxAcgJFXoumPPJb4M4oPE8JNI elFv6x8z59Kfea6j1EypPxwnnl05l8HsF6D6GZcKmQpH+Xqj6+NG2uG5KsIf4Jn91IIUqE3y hS62x4S+L1Wfy3CEROgnMkpGaXw5P/tdux18RNeIRRzE0gPmEk8qMEwsE1+sy/Oz//wkKth7 9Rv65fWrd6+Fe/WPrLoTs7K6/PWloz1PnwMuRgd5fFBAB3mBdVLrol5PuMSVYQAPh6FMk9bM 4EXZHPV7X4p3oDRLht9JjKfQjHdpKi+Vkdej+bPrvlQvjqEykEz54S6V2XGC7CGRDEiQ8koI lBz+L1CHFX5ZfoEft/gJ1xrhpLM1fMAf7suvWbURG/hYiw08olz6vcAvX/ELnbC5ODH3vnKl n/a5XwIpFRLvy8K5DGcdeZFVBcaZWBgpSByUYtlslnkD/Iazb63YGT12R5LgL++3eF6zKZ0I HjqpJKEKMOweMfXv/eijRBh7oYx9kaQyjoTnyigYCT41FnxwDLBI5wQj54xXhziWCjJF7IO4 Vo7lPL6oHPAbVPmXrYMaH+jsKNrKi/Axm/ZjOlNgnVAZpXmpAptNas0b0RodZBinc+IncO5F kXTTHuevsfo16HD52klYa6sNBBl9qquBYMdx4MNWqHFP0V3gpzJJje7SRIbhpOr8EdXhOalh HI+B7H0440EExdnrMU6NA2jqFiIfXA/VV1Z5iR7YDGQ6jjrGaXK41mx1BFoD1NVBsvBdTBYR 2BC6FA+/qDRNiYvbnw7aoYNnckccmB0QXXDe7hYFa3EydYj2M9qg3Wx3C+pUTR6itU4bQOmB N+QEOw/f6w6BxSEloxU2H5EC40HW2JVndIPhdXSD4aPdQIz09/RTcBSEGM2cvmIQ1BuJiHA6 BeM5auSYcZeMPM7AykPB0SnJwz7O3m/WmE62OfaUG/q4BmCwz19PxYProm4tHrAWLNZltsHK +SNJR0ksg8gm/a5yoA3hnFCvIT1Q8521ytB59YcyFUO26DFVflhBslpzbmqgj/h/cAHfvR4X jDze3wD9dx96aOMEVNNwhOqBtVlHk67NU+EUTdZm5l5nrH3st21E6EEVgADyEbzuBlCEAZSi y2C7CM5DQYVxlGKnnECr2P4yg8pDG8U7RyWz6hZ/W9PaZ0fFMw6DJagdLP7m2wq9kmt+0xV6 QRCQLYQwkYjQeR/waTAXrAjaTE14NuY7z1QDxHDQU0OzQS1wLkHecpLC1gVwIe6RoQw+VXe4 ss3uUDhxi3tZBaLAIo2SQodDeoAn5riZPvFzIv8OG+Yl7QBEEUH64G49nZks0j5xC9h6TL1N fVq9YIKJbbWQoReZ8Y0htafSiRW2VwM6KA9TyNG/KjEv0ewNkCbwEoMBLkQD32lXvWMXwDxH s4bDmsAfsgYACaxyj1r/jmSbkuYbx5Lzob1KwyG5o+XwAVCHe1WM3iQy1GteV6hLji9j3LIa N/NRThWHupHUnLAfVxUVCLKiFF2WKcV7/LaTEQRmQUd5bcwt8beVZrygmDtWcSqSKhyye7xF VCJTNTwYA78WYIuvKBGmBMHxRr5PeXV7D3so64g1V3aTe8oTGwkqWWgzVxN9sap1L2H7x9Kk QeaszWahEWBftcAQH0tmXBNIuEK0Drk2LvqVBKYawgRqMWcd3ALNLXFBXyhAT6yYIN1pOUus aZeMxrr2hnm84FqAViu/kYsSo8QcLKKdv20Qyen4i2ZzXhOU9gqRbY30taWhbG6UXcqjvRFh ebxHrgOhsW5dGBpPdS7xJDRmfjU2neI3CAKZcueigo5fAC1u4EOGyz/OPs5HEPDhRMKAANMO kf7Y/Zknx9TiDU6GzhQ6ji7DfTqaUhJiIz6kdDB6T7SRLADqei3W9QagnNe5d+5tsADq3gO6 sQ4sd3jb2wdg9x7QDThgucPaFosdwHU9G2lbW1hK1i+tdNq1hBhd1zyOrmsW2nXioL+lD7F9 QFKRgdhelOIP+0MrncbY0wc9jqV8b8eDrqH/CWcPlIqon38Eyh3LgEox9doMUK9AkDYrEDBk /PkH8+FGMunBhDcA9b8RPliAAX6wGkK+PrTIv8WmaB/O/8GMJApbygG4vr5Gq+BQ942jwtnb cZT9XAaU8vCiYcjAgThb0zUz8KmYUmMXd5ys7JPi/SLsdg4QRv7OoAibXOwbxHUG9Z8q+oND QQU9gbhGnMMFH/YUGXYKGWDoHIc86HAUem8HDZTQ5oDl69dvHLKEMGC7IYA03RQ9Qzi12z7k NeYIRsjzmi7OLilOQ7tBEhTI2AaauYGGdOLBCTsYuLAAMH4qtg1evNGR3OTpPhDgIpy3aptU C7ELWuLHRbNAFMd928l14YKTR0OsxRK2DO3peHENlNX2fIL3ENjUfsEMpx18a0EwAdOCXKeg 1b/QPQrqiTNqlhetEutKErGbxcmlDxk3D6RvbYkfWCRiAZNGwEnjLV460qxkQW7B0l+Ih8WS r9Y6L2hEDnJv0V3Yui0YsRp/raNtB9PFnFfwvYR/T41nny09ZKakJz37eVXUZLvmQiww1Bsx LzG6K/bKLWE4kresyCXAcPS9tjw/N13/thiBfE9m2/cV3iYP2aZA7cOu+bbDfuh1PGZJNduc p4pMF+bgsRndM3QLe1QPMTcrsmpu4uHWsJqLFjbxPK0U7EEUYWuTUnPCXmuTkv7ieVsXjxSs DHxzzGYlpxBrWjknx6P9ZMJKjypbTgj6UfRdCFYfcLNtTq4b6F7Dvm62q1W9JiNGvWGjmSlQ iJnmheTSg4TaTBt6U8fHchctVqLZYmAu9inAAPpTix74Mu41A0XWFk0Oe1RBI7vpNZfcncRD WSJv82RpPDsTrB4KWUo1rDqqJFCFc7x6LcTD0rjc4vGpwzOkhEDtN39ZAWk+tCYwbAErtT4a w+iVxCxazQhOZmpExuPrzrXbBN5NepolYlZ2/HYoTEkZvAhnFP8lQnk79OnmPSfXj0p2WkLt 1chNlnNWinaC3Q6LnqTwqS+qVVVsoclRCjHn6aNOLpqArV+uv9TTlL0j2U5NG21Yz02k3ZrK bpV+dNxTa84NZdIbDa9YX38SQ9xkGmuqUXMat+Jp5X3rldWfxnm0ovUk8ZbvI/U4szQKUqGl /oV9LIretLmpUwy1lvHp27gg9aX3iF6sGaR1K9JlAZ7ichoB5XnaheYlBWltZ+RaUldyz+mU Fx6cKW3olqYy2eqhHbgSlVVbdk6sF3z5MNwzwLcEZIkAARzdoKg0kmm8h+hwEvfksz289gv3 nI1DWbAPI5bW3a2pK01uyYblZ3RZ3bQ1NNLtJ9NmEB403sc0wZmkrngjte8nN1YU47XSoBvX uRCzVpfOOYGxQNB1n0DBXoSvxw6ZKDWQoQxdFDqNYrmq7TsPnJnjy4dO0EvVO6nDLjXc1JkC 2GFK0YXNkgviD6hBQRhKvyfntkU89+ZDF6AGn2DcLtqlssue0UB0KV45VGHNLSj7ncCHqgW5 UN5BJ+OVYks3Yvp+2SRNm4ecfHlbnD6JBp6M/APaloZwqi4m2NBnK3SHbdu5aNvz/QgFJeXh ef0N0imX+q8dvt2212P3HZDuMIqJ6AsqKjpedeNzag34rnR37vlaB7ezNRXG8GlNN3Xv9sgj 0s6BTQnVnuI7d2ef28qaC/o8nCrQlZN9s03p6fQKUbH00oFCsFr0u3QL7LfTMdxTI9PoL8fn J/y7inAPR53SO/iYcMRlppXcAxLpMp1fHWGsM5zGmP6FspI9s7Pemzm5xl16ogcOtcsXGidg XFAwrDhLEGe69YisYDUvrLQDvfZFFbRM72UUPR0g4Mzjuq75NsHM1ZHVYgAkzUfaF45Oqwkf tqa9nm5/7ojtCRXfvFf8RlRr98zO010cX/R6/XYEavcBt21bMSwM3fhhB61TNcRn2rnvqVUT p9LvqUY36s2WJnKiwziP56WsfeGJtjVNi3W+dhMYrW16oQtLVdg5nAFQ8WzsfvspM65AYfsx FPDAG25NSr/8PXlnMPb3Bnw/aR2EL2BP8axvufHOwGooDrrkfgoVvubeoTJ+y/2ko+mee3D0 ztRl7Jb7CZRCV8lkoKonXHMrr3/PHYHu/WT8nluvj99zjx5gXs2g5Yl77tEDzCsAtDxxz90d MHrPrTXML4N3+u3t8KV5eP8JY+vmko/Wx/U0wUK7Y4SESQK0PKHJCRLtjhESxhFpeULXHQl+ aX5Hl2aTobLHII9vGfrs3j80GftDK/3XrPA99cdC5EsXHP8DzNyFqQ0KZW5kc3RyZWFtDQpl bmRvYmoNCjcwIDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8 L0ZvbnQ8PC9GMSA1IDAgUi9GMiA4IDAgUi9GNyAzMSAwIFIvRjYgMjYgMCBSPj4vRXh0R1N0 YXRlPDwvR1M3IDcgMCBSL0dTMjUgMjUgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VC L0ltYWdlQy9JbWFnZUldID4+L01lZGlhQm94WyAwIDAgNTk1LjMyIDg0MS42OF0gL0NvbnRl bnRzIDcxIDAgUi9Hcm91cDw8L1R5cGUvR3JvdXAvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNl UkdCPj4vVGFicy9TL1N0cnVjdFBhcmVudHMgMjI+Pg0KZW5kb2JqDQo3MSAwIG9iag0KPDwv RmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA1MDY0Pj4NCnN0cmVhbQ0KeJzNHWuPGzfue4D8 B6Gf7MPu7Gjec1cUaJo0zSG9S9MtrkDbD7P2ZL13uzOOH01zv/74kDTSvGyv7d6iSGp7OCJF UiRFkcrV16vN3YdithFffnn19WZTzBblXPxydV0vf7u6/rwsr94Vt3dVsbmrq6sftzcb/Om7 spiXq6++Ei9efiNeXD9/dvWtFLm4/vD8mRQ+/CdFkKdekorMj71AXD8AyOsfU3G7fv7MF7f0 LYjV19fPn/0yEdPfxPXfnz97BaOJV99/I64GCHtRbzb1wzBt39b1pkOblJ4fOfTFiZckkQh9 L4uIvl8miUUCvxj0vJgEnszcF0XrRQ0q/cDzAwf0/TSelLPpZTDxxJvrn4ZejCIvS5wXLwdB My/OHNDraTQRPwMiT8a+P/ReLr0w3G8aeeT5uQP662R6GU4CfyrlRMpfp9N0cjW9jCZfA9YH fDT3cjGVoQL0QwQkiMCXCX6Bd/qxhT5gGybs4/NnPygNEVfvUDe+/+bNS+FfvS2qWzEpq8vX L6aO9EGIgSNBGeZeHok0bRgG8ihukNL7UrzxwjYnrr5NO4NkuefHzSBf+v4L+VWPArVey2Pn tRGmZy4gEVmCaGfwZ4G0VvjX3Uf4usVP+GwtpvlkBR/KgWGD1Pdkag17X/5eVBuxgXdqsYFx pU8jiSWOWd/f4f8Q5WeBP/9hsBeE/pZg8cd7ICKerDflNAEK+rFHMViDZGD2lmThY5yiFqRR 6OWpyENUhsBHi7Iqnz/7119EBaCW/GWf/NUwQcTjZNY4sPSbgYYXe5p7En5KY98L7eXFS3hR TUEAqNUft9PQ4fkPNJ8jscsgA1gXu+gg+cHhm4ylF6WacSFYoHCcc8EA52igRNNOA8WHEB+k MRFiE/8Srd+aNGo1zZh1yw2oLH2qq87cjiUiDHIvCw/jYBRHXpBrDmbwJR1lYDjAQBwn1KTj MMlBwo9gpaYt1SPvAez6AMsUlBB5WFazEnVx3ZnVkfjjABxdcADrbJ5Eig3k68HVRrgKkshL E+F7UcZ/IRUf/rLX89w3z2EV5YkLAG4O3eXgAKhFoRkAtQgU04GIYlibgTVCmudZG4TYyRDA TvDRLTLDzIui0TH2AVHMYLHRIxBamkWd2Q5D6NkYCELTAtK0jAK51jgEn5cHyo6FgCQeWhPx uDmmgcKhgUZjLx/UNw0luhHUSVIwtsmrgldGyH+RSZmhP7zHT/T1doExyQYf96ry6SiUZLkt CpermvDWM6CoJpIExUEUICH9b+HPOycsOglFMgy8JOihaO/FnIx5iFQTplwNUZZ0KOsLwSXG 4AFJM3aFeZlNFmjnICzBYAKjjQ9g+pRcExDrPXxlkSITFxvi53IFcWhNn2v8eYZ8jg2f08n1 W3gNeCw+FWsIWjIeuyzgE71VzhkpDkBvgXVF41pv8QsTAhCEsxS3FGvxAADEI6wYY68jS/UK snllS7ELewxfQeK5zdf1okBqkUnEuormIWpiq1jDbMpqrR8i5+nD7zzZO5xX9QEZTHN+mMp0 UmzwV5RIXXnEMCU7XHa1QUR4GCW/URt2EtoGqCpQsGuxqD89DR76CRh9i4eftN7NS9Ktz8RC Ev2CGPUZNQihIKomVbCe3cHPq37jcyy9QZxRXN+ml7mO2EnKivGpKz6KvbTa37C8Zzo+W/EG IJ9syWih/ltr5YYmXFdze55PQnQJWErYGLd58QDKSpMv56TSzINSmLVsJr5EvS5BirCRbus2 GxIwOPXvWn/nHNgSZCHMOiJcS2JdKeAL4CKMi3puDM1T4FbmYxhgcavgLQ4xASdZCqYbf1h7 4g1Ohc0uzXMt5iXMeQ1fErWWy7kgZQHrICxeEJtrZVZ4zFKgeScm1bh2RG00VrQ1eEB7nwQT k6wVl9ywsHFOZQmKVVnTmTfmlRVoW+hgZX2hDCjusEmhKrQd/4UfnVmvGzBBcYXR7m2lrLgO fdCdrgVJp2IdxeU7q0m/WST38DIr6vxpsDOOWyFLQXZG0btdN6YIHDpY4qBnoeLHt++mKtoi 5QUTd3LzCy8mYR/FaAiAPtRQRS0TBpxHS1Mu2UtYCo+fnpwxhV2C70yMta7j3vUkaZkK4zFu ynu9wFEEKvLgd2zH1A4seG1/QlvT6POCw5aqBK6piF9QYLJdGQZi6BfTL2CT0MokT8XQhmY/ 7bjoOcW1TSQqPkG0JlVUKWiSTRCKNnWhQ01jSnA9rEttHu14SzHyQhhJNapWVOjBL4Slm21H aN5CI1IxRUTqEzG7MvVSh6Xbag7cUf6p+A96L89Yg11zrLQOC7Sm2zUpD5vXar3VJnpjdnAW 4/YLeXuEYIWVT2cDkfgxHl9YfFV6tsaY4MEsysreBgg2scj98uPWRLzl3EN/Q9YZeQWabZlm fqfQkSZntJYnt9JhBC/mPfPSXgR1WtEhaBHVKswXdvyxM4D/k+QT5/Bi3plHxzki47tRVN8e TpR/IPsXtJ8laLXVpR+YIxUdEbABB2uDItuu9BCEkfdEMwhGYh2M0DvuvtIKl5m4p8HTNPdS h6cqUuVlGfowr62xEGa5U3TVNjHM6a278L8wEdluaawXGPCttG1QXpNDNArJSTdR0l80XsIy NOwmngZfk9TzU5uvCwjm7ltTe0QqonczQDwr/3p6AxIEeBrQncwRPO6k29I90m3DI+6WRBx4 kZMjeA8m+NVLjNceOQvGmfThzKQXpl2c7dPSw7H1zjBLvCzvmeFxE+tHBQF/3IPqXUlrb12j kShogapNyeIO/ea++1m1qTZmpFnVVcFphLkgmzQep60FEXJv7DLt3HsjtxMxRmlZSAdvbd+0 4MQS7jpPLpFcepnsQVz+sTEuXBmYQmViSs7bJrYRuuiY0fKPxv2pTM6FeP8KTAyeZ1LwsnMT QwkRS6jNmUQTrFvu+szCCVJPyo5waiuHV7NrJ6Zxxqbk3QXVHeiot1Em9O8cH+h4mUO/FKID 4jX/XHA+vUTbLhq7ozeCg8llYQJkk6QQNz2e7bRskpEXO2xaFhS00CZrLqzA4MakbpqVJupV O8JZlnrnscata+WdfBUEWeDlsof0Xl51fE92Xt8T5bA4HceJBUPfv3gFmvD+DBYh9tK0B+kZ /FyeeXHYRXUePxdgiVR88on1o0rQqnZRvb17cLMy4I/mOhe+7gTIN1tjNJSH82iNtNJ1wyl4 3o8VdLxiDrIQWHz9/Qt4/uo9OtfzGoQoA7sZd3M3h2ew2BlZWT6yImuEC5ugd6HMBsfxzelR g8okhy8xO3xq4Yexj36iO+1iM7WSSpZsmbTKNoIQjZ9bLCkYO4c+2g5VlHGfnyH0k1gY1MV6 eQZUsRfFHVTCh+Xvwy51Bp67PoPdjLxA/jkTzFMyLx1U/yE9osMg3tvesOvl06fTm7l4YMr7 uc38zG4zztGpW2S9Br5Q+IRR6D/OIJbQC+IevOfwnInnyy6qc3lOSX76xBMbctJB3oPqGyy1 VQFzz2kdm00rIUxBttliDHkYnUNzDo/UfmM2Tdlkl7fmvFAl6TjTd/5YOorAhzh5tRk5Ld4h YB5IHcQDgXNr9uQcrUoL86Q1SfIyOW+BC3KmZls3Mzn7QkcYlJyU8QDzPfEdnh3RoS3IKZhY gb51TnJefoVgifLHhBpWnFRxhIHSXSITqLSj2XlilIY9FbVhy7JupY1rHXwoHdzo7ALBVyUq 1QXgWfVmj07LkYDcrsURjv9Qd7gAi9KGMJ2tnoOpLZrbR4X22SpXdz2cfvGnVDDZpXlA404f ukkfjzq6BOzn0GRvP8UJhemn2H1i0fWv795MA7UXeHUGhxbQjqmD9hwOLaKQpo3qXA7NRzSn nlg/qhDbgLqofoIVWI0ktDzxIyr5lszPv7UFmenyODyZN2anqOaFrsucq5P85WdtcDoVn2h3 tpgS4tOkC+Go0ZktUgiSTuSRNhpsMxei9eyZiWt6c63tFz7mxGWzy7pQflEdwC1qa0fWJO+w x2dlSmg3U1O5eXJViSSVqHcZNGx9PprGC4WVGy9Gq8zlUNcP1+qrYx7V+nAI+RCzYddJKFHM zrYrClPadv3SrSE6FmmSeWkHZ9+m61hEKXYw9mBqDuR/OznOPO7j6AFF6DJQ4rUaJOKRZhF6 PNIrMvC6bhWhx2OdIvr9wUYRAhjrExkeQU1RcZseWbxuQUTNNGikw0CQVwrEMMuBUfwaocWC GEKkuKpAGrY6QIqzDSZ62kJmAUUO91pDaW2NbBm4k2cxjKOzgEbQ7QfVVenezjGziNzGUd2v DIs3GcxQuPYUXwELCmsui0SUwaoHnqReNmRNo6GmHYUaB4p5oKg90EC7a47tewAc+doRdLtt o64N2B9jty8XUMUuxv7I64hZyShp4+gxZEchyDsIDu3/jYZbe+/mvNWOeIjN3QcKTmZYlUXN 9IjqQsxp/PWs/r2k1DP2AHPXLz0RH7koMaGR+LHbCEzRygnZEkMEmmW7+P6Duwi4cw0CkjQQ uY8tjdgEGQ0tgl2dazhQODDQSB9xypcGyBRD6Mf2ET8SuQwSrI90kO9sI45SLGhWfAuyFN33 KOMGu8RwpEDTTiOlBxAPgQY2tjjEH95GfBwNocwwLXwQA6MwRkeiGIg3QcB2fJSBQ3U/NFKm iaeRsgOIjxLwvZlL/GF9xMfhj2VAXbd7M89hStbTSIymI0yb4M33ZSfqGQehqGcMBLa4mQEB t67aim0Y1CnpDINP+6BQ8xhKaV4bCDksrZFMRNgGQjEwFIoh6xKlI5HxoTSTWKK6gziJOnNr APB1F0YRbUB0+3DSaTEehXHtdIDV8VJZuBQjs3houQyduShbSSNZA0X7aavq3w3w9g1n5/pS J57XM6t/aYVL5vOOXuIjScli3BU7OUQ+JEfPAf5YWulcekRBwFBN7Skpw1i0XX8cYrJYlxFX tyWfdKtyNxnt6rs+kqLEb7WpzD7fsJAoOUw8267MqcFmmp5berCS+to98JyfGVKvtNwKlbQJ B/3YcSRJcGNhH0l7BgNqcapgYHR1BoP5Y7aHPANlDgem0J95A2eS0fIMBnrGrcI1Tp1hNcmC M+4fKaPWqTyf6QOi7bzdo4lAqiOgmnPerll5utqFC9zEp8Ud2YYFNYsUwyWWp+EB2IXYycPe lGK71tm+ud3Grg5BuCo0sZpP+FAN2+o0C2q7B2ltMplb0wasuGc1rM0+U4cX1lzrhoAmYev0 BJyXIWCO8p7m553p2ItGWYjM5TFTPAjnellqtiqZpObeirOyKvH72sStLDz1JnbYMBRYP5ac wE+xYLtDziHs3nEyTnUkF2rl6lVNHrLAFoqCcu9Nn6Jq1DZl1wPdPicVBowS97Rez7B8ab1u yqpaqqjODJRTM7r2OH0UBfUHfyrvQQW5vpZ/Wdb3UxVgGDXl8l3dt8ZVarPFmbkURq0GdZ4E HdArM7Zctu9k0CXNdJmIYquxYdw93TThOZw1C3O7mtrHWS5XewuW2Xf3H+sex4swo0tcurzY czeqPLjajY578MGzFd6H8BTUbvCAKUQRXWuFHjxM9z9bORZpTpvWFtLew5UjMcV060QXExXK U5Ty08lxphLvM/wzZod3ugU9mGhi4mfqdpFxSvdC9hwiHYc9DqTXN829swlB6wwJN6bBjrMR BoFYO+geIVjbZDWMSgF0oFTyCaCaFIB7YmF208HIsUaTiQGoJgXQexgxPpTiAIuCGGAJwppb A4BTa8Ew0QaEELRAFDWjMG4KQOKFZDoFADFuHgxZqKGL99QuiQYaGGf3vk22nfJrbAa/w35g tT+rSqs9a7VjF3kcMX7b3hfzB77Kw9SLq9gt5Gye6mc6J1FYUuNedqJ3/7j4/4kEgJCKFR4q zIRJNnIQclbCQL2SEycBjiMoSdA+PzIHIHfeVXcccXhU6hBnJW+GEhCPwyh9MF89CPe330Mn lCpBoUyHSlAgYfKwGBMWfeaUJ2B7kt3JXqtWt1tTSVnfcJOnjstNg5cdQA6E5fPmrgl83Fxb aEYRFEeqhk8KWpccxZac48NrE/qDzD5u2GLaAXog4/CWb/emCHU+41Ru8dVi8wu6w6fmqwXU BVBmwlaBbzJZiGJOK8PcZ8K2jnoJV7qq2e4N55bYj1u9VaFqKWYf38fGVytxM4FYmopgdZ3H /5+VaFadzJZpWaXG2YZT1j0l/wQmUHxJ/ahc/jy74EsbqvlAomttGi+5yLoyrPxg32rAykz3 c1GVb09T/ZETDzGoDLsTf7w0uoZj6FR3rxFHaj2VzNIUIzGn1jNLu7We+yMbqTrsIHsso0Yw ocNKezCdfIf8t1OTHmQhbm33YVKvooyeYh+vKEno2smzKkob2fkUpYPpAEVp3XJ3aa65a265 g++nVxT89w/kXkzqVZTBWzpOoyj8rzr8SYrSRnY+RelgOkBRlj2djkfqQISNlD1U3ZveISRv II13BN44pw38Hnzv5vAUUpXDG90gD3XzqzwCR/EqD7M/9TqDB8GyvavZL4P3aJycwGvhHElx PRaRyt91EO2Rv3ssSpW+O//cVPaug+j61IgySg10EXX1+1hEdJNbF5HORPqUifTkYC7ykYjj IPeSPjXZfy+bu7nIAP+lisAuR7KSaJyLVCAmF+nA6HxdM0xTjuRC4fkDQznlSJ20nhnJqiFy gXChMJRTjtTN/o0PpTjAoiAGNIJoPY+CwWztHiDIRAUymtBtKEEeusRYIFGwK+eroEZzvgYZ PXORNRBRsCsrrKDGs8JjyCyQEWz7QZG6/w8eNC95DQplbmRzdHJlYW0NCmVuZG9iag0KNzIg MCBvYmoNCjw8L1R5cGUvUGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwvRm9udDw8L0Yx IDUgMCBSL0YyIDggMCBSL0Y3IDMxIDAgUi9GNiAyNiAwIFI+Pi9FeHRHU3RhdGU8PC9HUzcg NyAwIFIvR1MyNSAyNSAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0lt YWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA1OTUuMzIgODQxLjY4XSAvQ29udGVudHMgNzMgMCBS L0dyb3VwPDwvVHlwZS9Hcm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZpY2VSR0I+Pi9UYWJz L1MvU3RydWN0UGFyZW50cyAyMz4+DQplbmRvYmoNCjczIDAgb2JqDQo8PC9GaWx0ZXIvRmxh dGVEZWNvZGUvTGVuZ3RoIDQ5ODU+Pg0Kc3RyZWFtDQp4nM0ca4/bxvG7Af+H/Si1Ph6Xb6JB gNhxUxcx6jRXNEWcD5TIOx1yJmVRsuN/33nskrt8nR68wAhy1p2GM7OzM7PzWl5/t9vf32br vfjmm+vv9vtsvSly8ev1TbX97frmy7a4fpfd3ZfZ/r4qr38+rPb4p38UWV7svv1WvPz+lXh5 8/zZ9d+lSJ00Eje3z59J4cJ/Unhp7ESxSNzA8eGbDwD2w8+xuKufP3PFHf3mherXH54/+3Uh lr+Jm38+f/YaMIrXb1+J6xHmXlb7ffVhnL+/V9W+w58npHTcwGIwjJwoCoTvOklA/Nks4IMa VLqe43pHgXpp4MjUAv33MlwU6+WVt3DEm5v/jDzo+7Hj+taDV2OggevEoQV6swwW4hcg5MjQ dceeS3wniI9ahp9EjhdZoO8Xyyt/4blLKRdSvl8u48X18ipYfAdUP+BXuZOKpfQVoOsjIEF4 rozwF3hmmFqQArVJvlDFBrbQ9x1pcxmPkAj9xImSURofnz/7SakdfETViEUcxI4HzCWeI2Fj Yifxxa54/uy/fxElwF6/Q718++rN98K9/jEr78SiKK9+eLlUmqfwgIoRIo8RBYTICwxMjYp6 1uJS6QT4cBg6adJsM2hRtkL5PhTijROYa/iJlnEKzbhLU4JmhTbNb1z3pfz2Eiq9lckg6lJZ XLaQARJpjwQJrwBDWcP/G5RhiT/uP8KvB/yE39VimS528AF/eSg+ZeVe7OFjJfbwiHTp7+I+ X16F9JFQgJvC3+/XSwnbg84ISb0QOeGv19WnAowEsX4RGT1B34iP+POwjAgTf428PRwQW70v 8OvdvIIJXd9Jksdk/5NtDuSZYg8eiUXqOoDSc50oGLEGOWYNgAZYJDzJCJ5xdx3HjgTTjX3P 8U2vx551Uy5B0uhsPh6WuJM9oV1EXHqRE3eIPyY1CfsTNWLzkhjMeVJu3ojcCJGnWSdE8Qm8 exGcSLHN+/d4JNWoXuvdMmHBbfeg+fQJ1Le7tAt58GXihOFp8gv80AljLT88gtN0Un7+iPwI UaJ5J0TJCbwHkXT8xOadjnQQF5i9BBVEGRblukBNrHvLupB+KD0njk6QnSmTQImBQi5wHAHa QEDK7DpBwj+Qi9u/HPV96k59H4Ogmu+TFNm2AFCLpIXAdWUfBBWNQZSiWRAoTmngiNM06UOg wBkEBZ50GMFoIAgmkWhh8K7RV7BnsKLuYloAXIwNo3htQIiMDaJZmYKxHXHkgohC5cOkjDGi GbaIcNoTE6JoDNG4RkYQDeMBJH2MEVEjSb2UWZBbqQ67NdjHqB8+l7R0YWsHKF8NGcR8K3Vd fNygV+3uKQIoMa7dU/CQDxrlbDxESQL/mjw8oK8mh323wbh7DxH5Z+LqHvbhbrN/YobiUDsk xRDxUub6JEYFyEg2FUpp98TswL+xxU7xBzCw3oAFPJEa9kkeGRMoC1YxwaQJR9NBgVqA8pOD K2h4DoHbhGwnNHmGsDhZbPA0EzuOgtNFDfYLOrTuC+50up50HTfs0+2b7Dm4Aanfx13RSkgL wURTtNCALDQ1rQa1crOH8PvzkowGTEf/7QqDfKXO8BdLn0OlzxTCayXDo7+kp4sxPT9/y8D9 pObyOMP+N0S//wLOf3yz9NzF6/dLkVMEctusvQRnHC9EJnaGY254n2d348CJ/T6Ls+xunDje AG5rd2lDeGuz7XbXbE/GeYFQDhozuPUXAFoVlOBdzp2f0ond42727UfP75sUakoM1wdaCEki 4iV+wcUqvb1tHS9++rCUsdJeFeOLGp7fZKga/ATCkgY7/SWcsXmQl6ayz/x/gF4NBCNlLoI4 3xALtciQ1y3+fbtrFqC28gXtZSZe/YxPv1nKhEyA/JdgnZhf9jGFkqbyMb+FFv4cspKo6OEA sVr7rux3jKY21QNuILmkglRd8L6iYot6k3HBIAYfxA4pF8jnH+ifksY90YPFVi+A/QLClUyK aEakVVVZi4pqG/NLNvJ0BUItVpknr0vpOPzlgAsi9ejp+FpnrHnLfv0CZdFqdM6+GwXAbgDR KUVjAKG21JBqYzaFPjHAdMKJGO98MYRuJ5Q91nzJGGjvBJ1fqzmMFstI6QBTs7jzABLpeAB5 luesk3haocpnK9LzQszkqr00xYOkT9mOdTB7n8X3+YGH5Y4+vZtNITBMpz3NMDKpt5U2RI46 ZlcwP+7kLsqzsjWgFq3BrYDSr7pGoxy0cs3EbAHMrzG9aIMMlGEulCb+YynDxc0N7t6794uf l9LFqr/W0eag2kBMAo+9fYPgb1+zFytyCsGy+UUAubWdOrWeZFtoB4d9DJYJcfPXXyCPefuj Q38vRYb+Uklu23ikrIkt59AaGThSDnA7i0rKCHtGfeTsaJXugUCqWz7V4GMbKpe/kyZ0XKJe /H2jSWV7oivp1k9zLEuvk3uiaqoDg9i51Vu0FprNJgBsffxRkRR+ZHc84ooJFk/fuMVi206O dmPE5XTUoN04M2xt4EpMRnsiObLAqpJRVWCdTEbj6Qqr4llVOKd5xhYml5BgsQ3TAlLFAM6I m/Wvi1/7B9o5dFIK0jt0hg60M5CHPubvfeRNZoah6RvY+te/zUEuSams2SN3dDU4UVtm1DbD iTovfZ3CGRYMl3Gbx0eruAQxUcTVGMZruAQxVcIdR6FWqSRMXxnyNRZiQOBKOkDMagtDhDow iplpILuKG0Q+2psqPQW+I5MRq0unq7jTiB6tm4VpgHmaoU44RvD23bvlVbwQWyws7qq26qFi helS3qUsQeroy14pj8usJSePFAD72i8/MT8RGJ6V498VZdE0ztZie1gtZWCcl/VmrOJ4LivS h+eGWHmk8n3p0tEXWPTqw6pe7yg/hIWuRqtdM9EPAse36HPL7YCbX673+pSvygz/onYgYl35 MvsmeJI2ocfUkXVfRVfXfaeMXo7NlCjXaqKKh9fQiZnCFPzYQOW3qW/WogbJbYu1Vuw2hmqy Zy4KiFw1P614hkM9jApLoXyI2O6qJvHG2Kx6aALN4g9Kqcu63UMKmYxQ65G48QwZJJSYmZZM rJSU/LVlRQoawaoftJ4PGPTpTHgenAzpABOj2fVJyH3sk/eRo8Hq8nW7wtVIqfoMwlGCaX2f MKrPAW00bG00tUxUxdmOaDWxAJWBBzrZqY7XqcyjqwOYkM6vIeBgE98+Dq9Yl3G4B+vNoa5G RW0CXGPSA6ZBXK6p3E4VOAQqRIk5fq4M5P0C5MLL27a9BbQClSk3eRUkyZh1wv4dVpR+F5Rh xItP7XOkuCIrH6tMnSEJcJaeJQnbIIROtY6tVe2bbeQaQIWlHhQOeJNkUf8NBajcR/EJv+La viC3UDXiHvdK3BbpFBpmFws4/8gSi/JVNl3us/A2bqk+S4pfZTl8VBtteF4cMdsUJcp0xUUG AlxnPFJidbBUMtsYE+6JaNtcDQ+WcgJ6tQFkZhkJeH7h+LITTE55H3M1RgkWNQK5c8S7w2hR 8xQHFQc4wDnIG5utLv2C1d7a/T1VSKeK+6Zo22hmWwk1k/una3JMuDF1rbdiPb+QZdoJjzHX XNVqXBB+fDJK2Xl7NrddzxJ0UsueXBTBKjstqaDHqsddIv6asbJA6mbreOW3bW+xzIcKQ/ax Tn2c2eXiRp3Y+LP21XkhUOGzHTslWDDZAld5VMULud5uGwenvEukfRjK4YXRdyDTO7TdYVXw KYvPNa7VI8srchI8d67WValaK9qzzS2BIPW70Tp6nrLpgagTSS3phSrqaX+6EWZTKMaRNr0Q XgEHS3weVyPoUOa8zb83hTN2ffiNIIZq9EfFByz+1i/ml0IiO+F5ydvdYU31zkpaBy8NcguP zy+9RZrfq4jkQN8Bz9w+yuHgpdYbnE6X+ynfj5w4HWB/Y1Qss+3WGmJQQwmhPgPZJtsQYnbh QrQXxSZ3rC8fDzocaIdIRNE6o7I9/csjzvJ6tDB6kuMPHd8fYPnIyqgipSujk+na2NCzqmOZ qJJprlVpFNM1Lz61NHoSHSqNdulMlEZPQc6l0T5yiqZfv5uDBBzrgyRm4T+OKdPvIXfdyB0t 5p5AAOfwoyECRxdzpWdXc7H4KJPxcq76fryeayAYK+gqkPGKbotjtKSrQCZqulNI1GKVpLmo 28q5AxHKVhy4pNNAUGgKpBWaCaPkZvBC5WObHQNI0dLC7aJSzi2UpnxNIBZxS46LzDa5Foap NRLsIlLqGkpzJywJ8GZMkzOAJugdB9XX8MGJ/uY6mDd0nS/AkW45ZlAfB655BW6IN2KOuOYl g+l7XoQpPfmqEld2AxlgG274nlc4ej3qKJr9e16JjzOZJs3Je15nrixJu1TG73mdSSL1eiSe 8p7Xnu9w1TVd0cLn+T7XWmHq3N+Kxq9vnbdevIziRY+J1I5muN/kJwFeKUgDp3/5xFLyRy4N EJ54GM/E7a2ULjP6qUQjO/f21nm0pZfS7V2T9qMF+5BaUEpoHrA/ffdIjs5pIyLNOOGRJ93d Ch1X2qyffnfrIhZ8rDakp0kv8D0nSrX0cFg+6d8Ws8Q3PlkAWYfmnRD179BNXN0KU3StFu8n Xt26hHwIf/JPUTxLJMnA1S10GsEjQc00CAU1UyB8h0uBgKXBAnrBSiid2MQyGNGA1kGgoKCU 2vUDEQ+jlQbTSLTiUbTCUGoXxkKMaVRKRmpD9aWuKOgszfhe3emKgg7PLYi+rxX1xgEmYWzv LCE0klJ5Nk/ihc0RS3lkGoAQGXhO6rb6MZ2mVosQEvpD3QzZT/Z6L6MNturb7YaHDI9bXThM +S0DfSO9iLqEXCMdIH60nXqjjVo+QtTOqiNkmLGhdxvIkJrEuCWeVQ16tdQjittDW2VV5Uds BNGRChARV6sOZa/C0jRba9Vtyw9rXTGqxef7prbLTTcq1K2KnK+XDGjBUUs9AfRxqcB+hVba vG9KTwejXYK1OSrpUomsO8R35kLGufPw9RJygDsiB1Kmup3ZB6TG5zscXXhLHQOjM5TlVLJW NVij3k5XXVY4hDvQS9XV7K9gjyATSy0prA7q4kfbkqDuglEjZ12ul91e1sGoM5PivhB3OE5g dDpKq26b3VEHkYR3b0idOxxoJIlGdSD9ZiQDDeU/X3B+gA31rnJXghsIhq1S66mj9KrIrVrM m9OuBA3cZvtbp2vbXHxpRkCIWjFQx//zJQdPRP0RF8O+qMujOnvNJ5xoK9jYWHlQrBW3Byqu /ZMA0PP+D2Bfwr+vfyF1IsGxM2bbZl1iPJkx+oAXC9I+O1+BzNy0c+Zzl6wQ2AIypoG43zy3 x3QDPN76TAyMxFxKKcZgrE9peyAt2FbcQBU0vU1dujutIfryj/ImyubWTcsDoWsaPwj5Xhpq So2+HK9VHOZeig/PxUNCQ9YemCE9ZdXOZxljA1+B2nlp1Im4yJXrDi2aUr9Fu21uJTQNriGf 1gzj0FBEttINM1bpNlLgzjQHTgejfU4yOhgTCe3QT6crzK3twembP1+iiY83cbtRh7o8qe4D i6Zpu2+mQ0hYmXnkjhURLrC+wMPIqM/jRTFYNEiJenc9SsP1zUuXBemim869rGFKvpOEA5SK ZtqEhuMaSzd8tvYFygPQ9SVrwopcHneW1Q2nxqC615y+DucRNxUVfWaRlq9pkKzuLpjjplt9 NSc3Z6UsIanRFwpKy9q6EESQagIGQ+9jh97ANaDzqL4GqYUJvsho6CZgpAqx+IlD54zu4rWR OAiRQhv1CC2XZ9dwKDEX5ohFIxQasxhq5V94/kGaFfgD6zlfyP20fqyhP4oxPmkvAr/z6hAK DdEyDzwdk4tm0GPysBPUrbATTLHXA7LrTanGdY4XzXEL8V2QfjiwEDpPjbSjFiu8Gcfnay7U mVltcdpxZDhlHhH7Ejsr5jAUn3Rl3oyC5VwE4cYPj6If2uygEzvR+B+7Rk4WKbK41yOY3Svq xkXK3PAenGbS9KXxtgqd1GEcyTnyEwtHJk7g9YIF4vOPIp9bWWQS0jnZo3pCmH8spQRbD31K agwpr3iWqig/tQNLYDpt9SDES+B4UbsdhqPc8EG98Ck1omsjn6PLE/wCBVPBnngbsRhuLXNd tQcXOZL2BQ40dNm87IEXUTUzeqLG9RZNitMcl+1rb/QbIWg6l+IHdi1b9foVOOvojFBnB2qz +siVuCcVhUx9fB2mWW76YrxfpBA3O1xatzo4WU39gd7aSZOtW6Neh8/gV/QO3Bciw/pBxY9w gSsvxGe8EGbfd3/S1Seu/QYk+2h/GnPuETWKdKRuxjtcGnVSJ5RRPNJe8pHL2IYVHszKShOv YLjSFmuM4eSnlXwU2+//wUApVAdyKdZtQttE0M3qshNCo+OY8rDzKvtMDcqg065VNHW7dqoL 5Y29q5QbptyK0f3S4wO7AMcguOcRGDM8j44+XkQT57N6JIenCC+iE7rYxewT4jPk7dBQ4UX0 4giHEPv0ju9s+faAIbYzvbRpG1NPs9NZViDUhOuCtK1VLzW7xh0g6horqLZrbAG1HVgvNVu9 PaCwwdR2jW2220btBCq1ft4Jbhq3+2ABeDjEZ/TVgxNBUIYKRMvQAmEZtoxQd9rmRYM0dNrm fNAVs4KymvPdRndDjHvYNjENookZTfeguxMKyurf91rmk9QamElyx0GRtv8fNKTzOQ0KZW5k c3RyZWFtDQplbmRvYmoNCjc0IDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jl c291cmNlczw8L0ZvbnQ8PC9GMSA1IDAgUi9GMiA4IDAgUi9GNyAzMSAwIFIvRjYgMjYgMCBS Pj4vRXh0R1N0YXRlPDwvR1M3IDcgMCBSL0dTMjUgMjUgMCBSPj4vUHJvY1NldFsvUERGL1Rl eHQvSW1hZ2VCL0ltYWdlQy9JbWFnZUldID4+L01lZGlhQm94WyAwIDAgNTk1LjMyIDg0MS42 OF0gL0NvbnRlbnRzIDc1IDAgUi9Hcm91cDw8L1R5cGUvR3JvdXAvUy9UcmFuc3BhcmVuY3kv Q1MvRGV2aWNlUkdCPj4vVGFicy9TL1N0cnVjdFBhcmVudHMgMjQ+Pg0KZW5kb2JqDQo3NSAw IG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA0NDUzPj4NCnN0cmVhbQ0KeJzN XG1v28gR/h4g/2Fxn6TCprl8JxAYiH3JNUXT3jUuWiB3H2iKttw4pCKKcdJf33lZLnfFF8uW dD0cnKPE4e7M7OzszDNDnb1eb+5usnwjXr06e73ZZPmyWIiPZ1fV6rezq++r4uzn7PauzDZ3 VXn2obne4Fd/LrJFsT4/Fxc/XoqLq5cvzt5KkYqrm5cvpHDhPym8NHaiWCRu6Hji6jOQ/PQh Frf1yxeuuKVPXqg+/vTyxceZmP8mrv7y8sUbGE28eX8pzkYYu6g2m+rzOG9vq2rT401Kxw0s /sLIiaJA+K6TBMTfx1lisMAPegMPRp4jE/tBsfVgSypdz3E9i/Qf83BW5PNTb+aId1f/HHsw CJwksh48HSVNnDCxSK/mwUz8GyZyZOi6Y8+l0vH93cRIA8dNLdJfZ/NTf+a5cylnUv46n8ez s/lpMHsNs37GWwsnFXPpK0LXR0Ki8FwZ4Qd4Zng234XZxhn78vLFL8pC4BJXMRZxEDueFEEC SwNPxk7ii3Xx8sW//iRKoD37GU3o/eW7H4V79tesvBWzojz96WKujESNA9ZAA3k8UEADeYEx kjYKz7II6ftOCg+HoZMmeg1gibNrFP6+EO+c0JThFxLjKXPGvTkT33FDa85Xrnshz/eZpS9Z km7PMttPkP4UqdebgpRXgBXn8LdEHZb4z90X+NjgFd6rxTydreECP9wXX7NyIzZwWYkNPCJd +l7cLeanIV3SEJs7JPkusrpu8AY+n9GdXI0k8OKebtabYh4ByUHlDSLpeNFjKv3FtvIYd0Ts wSOxgM2YCM91omDExuWYjcMowCENkwwPY+7DOHUClNL3HN/0LOy9luUcFgQ39JdmjgvSU9LT ZpNeiq7Smu0xtcgQiGWrFw8YTicV440ohsZpOaVh5CSvXhQ6rrR5/RH9ek2GtJ4nrJnVBiyU rqqyJ8pTJ/Vl6vjp0xQUAHGUtgqScBQn8aSG/BEN4UBxyyyNE00yG4QpeUSTWTr5QCE3sDnB ilBLRZkXaEx1T46nThjCOe0/xXxMqQMlKAUmsLkDtNsgcuJAuE6Q8D84782fdrqfulP3Y8dP 9H3YF8C2RSBDiaJ3z7tga1sUGIK0JMp2LApUnzTGiNM06VOEegylYZtRP3GCYHKQVhe8THQL FimOtmXp7qMsNoliVZPQLDZJy8kUje0qw1D5SRlBdDRi7OG0nwxxJdPhYUzTg3jQRT8pfVhY Mj2yo53dF/LKvmuK2WjSdylelSkMcTscBEuQNYiI99BkHQ7gZLbE3SoW4NVi9mK3GLeVYrWm wxiOxjK/g029usebSFyL29bjfUXaAg7kEMYR1xlvc3Uzx6M7r8ocfcAKaWpR3eCRK/CxDdLA U0BEjPyMgeT7QXUeTAOuCwtgaCArFyRMUZKHWrc6INbpqrxBNVTIMCnk81zGs2yDUiifL/Q9 VM49KMy4bSioIkIWFcSE0IWGbkA/KSsDlV2VGY2iPtL33/FBR2DUfVT1REkCg2wbiFqXRYHc 6sVlKwH/jstJSmlqYDaaCVRi8bWlKx5A1IAUfYe0RKpsCa7hsChJW4LNgdWF9raL4o+pizhE z2kog83B4lOb7oDZ7seFJ10n9Ae4YDWQKtny6lXBga1S+I224Qz23QZsiM1KcI62yiiexiAZ vq6FPDDjvgfqG2L89NATQeoID/Qn8iHnBPEEmtwaoxHTFiFpSHHhjmk5cFSkFkds7lm7zYcM W7TLiKZ/w5639UOLKm/0VoGdws/Ts9uOlG1Uf1mUCxR3IYCDEDePGrvqJnaEcQocVS2hixnR 8dQCJw3+X+0N2hqirNba6ZD4plOueReYPFguqT6uPiCVjCx98DpqXkR20wpd5LSV8UtzwWlx t89t9rS2o4VY3OMvlGidLsAxkM5veM9sncYOfqZzZ9TPHVIlEPq5lkoWnGzZJ07/wEEVmbsc cn0QGPUQTeuh9eaHdk3SCeWAOLTJdKjwpbkj4AE/WnYH906Oq2ipEyjrcMvb0KNZUOBHKmcd FXV7ZjAp30Jjo8iJtlSGXqahK3VO48FzIjK0UVEX8C8b8fX3bmAjArycB7Ofjh3khGmKmY4h OzgOikq3Y42SIJBCPFTrTxiu3er7VbMCv4mcgz21OwMeirRN5hWtKNsdS/vQbjkW23bdxxQ4 occNgdnkvjTtjhk2QVrcFVxktPQExGXld7xDmw1WGygb05XQYxPrfEwp4wCBkyMta0ZiN+WC A156pGIvxGfpkYWLIMG2hGMz0/kKb8fWqXXnf90uhbGde3uWVrHLQWglnUPHs2niyHBAkB3B LUyfFbI1lT/Hk8iWYl7BILszHyDqy/lz5O3MvMlXolgxoJRwAlWi2wRJDGFG+uFRyIgoJhCj doRxwIgopvCi8SGUjErZdKtTdSeGcR/lsEmYz46EZrFJFCOTNDZcFED2H/sK6glDNMRhK0qn IaPeOMk0ZhQGgePFdl4NTrcZA9N3Hj9xWdO98WvyAxD3jzil5woCcU1kTVR8wxCUHGqzuUOX NJ6WP3dSmTquPWn5lY+tCiYvPxdcOZIYneyrUelJRLT7c+6I8qmJFNA3ZWNyrEbJftYcSA7z PH1igE1ACLqN5eCBgSFKgMbx5huec2r19JnRZgVvUKMlnRFdkFBRXmVF0Awr0Ohv3mAIodLv haoC+EZSykGkyB7NNfcWHyw1lf0DM6OEOKNDfKFF+y8nyZg11dU91grN9AjlsPQAZ35pqcBM yD98R72xiimiqgWMcbm8gwxudWShsXZkCc1r86G6hNNfLYuWo6SAdImBQb4UGCgUpc4ldZyv UmWyEQqkFsWJWGRtOpoJvCSgJVarWzU6nsoLuFkDCVwTwZHldyMntIILxrAr5qNu8euFyB4g oAPb55VjIsYb2lCVlq6F2aoVaWE9NxNnFU2BM7LCaNs0Hknj9pU4SP2t0L5mgJ3EeCAZyNYL Dt4XLBcbJhssR+ijlctnc+hFMRb8+xyOIaV7zJQ6iRyYScMkXbTL6FHBjTkExy/vao2r0N26 apNgIyamc+2OANPjLmgit7KYYjuJYe4XxLDKr5bKoeGG1vBuQVuTH1mSiapqQgcmNbwpqWpT LsyEFB30dVXpbzCpg4G+4BdNUWJdh9g4sjYgmLPjjYb54FwU5G4lZNEJ7RWkC5N3A9/atIBL U2uYTXlDMx3/QPkdwhFilZHv+0S5EpWKlG/41MGtp20WKbr8/siagajXDlCWHUa2NEAH9knX hrgkhPJs3bd4Vd202aLSJjkO5eBXXZZ8bSaTG+1u0PJy1ErtiHeookcKNHvrIPAd36pnZosF nuFGGEOQ4YnIK4JK2TTofCpL04n3TIBPPQhqUgxqVEqN/hMxk5oCXfWoOmK6lBu1wOE3HTXH VYFPz1vQzh7eNRqaCTJ2SCl7M71yXUzcwuj81Ifr0IO/5FxKvA75uyA6T7fIXB/+LtTtN4pc qsdfn4fqI5IFAT0dRvzxIqS7fozj41w0aIwU8XmkpgliJvZA3NDnv+Atc3F5fhoQUzR0wg/y V5c0APEgaVh84KJl+bJlndltB2LGeo14B11emWCno4lpkQXT1l6RuVUdepWtlrryjpuWvIDh Cr6qIKYtoOpCYYGbw9jg3dZZK6eJn2kLFN8wlMobIz4+oRuMr+O0C3NjbfRQwnRQR94VbugE so9uo/MvbtvzsXPVrB6FcsLthtWJYb8KFQ4esgTU1tlndEc0TE3cAmKTeeZYnyBDYuZI0VNE UJgY5pmRYaLCBUIfTqb84+zj9UjD1/MnDWKEhbbmHKot7ztR6CIM1p+pzXPD2W8HnzMO2szd nnNnlFF6NsyI2FgoO5wRcbYtqFGRaKzRJOlwOjVIizfaRAQ5KioDczSJOjiPR9Kg4TZRqEcy sEeL7Q71mxhKya+WgiHIbiE62QwCwiBtGua6o2GA0aZR/EwT2TCkjChN5V5Z38ci8MjWHevT VKgWDZSMDDSApPlJgg2tPRxSo4UEohXo2x8ohl5T1PsInvdkLuJtp5dXZVlwE9QIfrfzHGky MsfueyiYwuVku3qqDXmIl8mzCdfAs4LWd3AMY6ZBnkXlWTmfQnHvkKpWWyiEqrmp0B3Ot1Kl u3WHSsTUgNYmkYJKu3VOYasRE1gJkK4bdZ0RomrxvJEM/jHdPIH0cTXCAkeWGkkzp6GdtKso pMbqHQOADH0o0PLvoMUP1hsqB+HRQ/eTDvA40gK1z0wptnz3Z+JwDJEp7nm459SvXByaAwiw 8fE+B880kqmZPCcNB2Yyugiy1aprnsQ4GL8zsVzqCqpu5qGR53aAyR/ArrF3zB9APBZbtXQq tDckbrXuirxd5F0qP97ifJ+4h/RttRY04LfMaFAoTsQDjAmGUhISQFOZG2YA9vr9dQMxme/3 rNzAZwRtaPCh5NwaI6ExG2nFikELNI6lqkgQ3oN6hD1it4l1yG5DqBMn/9yLRKbV6H6e+oT7 De/bAbJr1RD8hzAtCNhtrKCstKO8adWUa2jf3DIMjFI7dwehUE8etw90Z0clcqrK6cODbbKX EyqEZUHYI/dlMLjGLeSEyVa5gi2z0XLm769FL9yKobbberjQRRzT7tNW+Ong3l+G6Cz6LB3+ nJEpxlP9mQ7u5T0PYu54YKZrzs/BCMhCNu2WNlHH9/RFB8xu25syY6pHEdyx0pk+39JdTWZP /6HPsdSjl357EjK4bjRk0asWfwCTl95WMM3sbbs5ChKN1yZis83YatzfWha+x1Vh3PKcDig3 hLse9NCL4NRaMhTL8Cw49rYeoOuXeaOrOSrK/b/r00tTxHD6tWkdao/gTXvMjJ0icmDm56uj nziNvWh1IK0lIUJmVuIkEyzOcgFIJTHqEOrATA6Cjca4ninVlA3A+eLgCeSciKURUoD51bpM aj2F9XSq/cdWAXkK2dxfCTFsRUsJdHBT3y0EJqqH/ntX4zfLG4++T3NCsV+T0/tajIZipNzc 6wIpxNdr3WI/6C2/4AhdW3MXXWVH1gxkQnY9bLgmeq37WbmaiwFOaqYQpnnAldEVUIlrFZ6g FmJDC8XC0T3M3GGjt/J0AWh/sQkQfdo7Fboh4+BBgsQTrcdSwd2mNPd1sVgY9euB0uuy68/Z zs7SNsQkSKNrSWEHQEcHoSPo/PUbUkfVvh84A7tRn12oaZC5anqvbvTq60YZMdf4je7CXhRt PcdoyumhNsbBWIquu+lWX+mASZWGIpUQHVdJnkQs1DzujBQKNshQkzYkqs2aNiHpqruhuq1P RLs3s//MT2Vkvg6VL2ntV0K1ezfoxNilo2V0+dq6ayWYwAAOqgs3RbDcysHQyttUvv9aZD+Q JdsZ6GMouFl/l/3/cMeq5dd9fmiNgdLZI2tAphH+r5fEN/SW8PIHvVFy9rQoCfUbDLwRqxRC bAs6A+91ufGB3jZm0+pMA8uXMCrBqzpEHOt92iPED+hHHPqyHh4Uw+pLODDTdM8LB9V5tXi8 iWf/FU98zHd6K07G1vmwgaPgGpGEqvOdqgepKYzKbPdOtZHhnXRpiOi2vKpUG4bCRkKjskst WwXVxmlzfewtEcutFyNH8yujp6d3/nEVP9PYpvZwFuAyerwe3DJl6Mh0QLiDgxO+pC6x/kzd u6OnofFaNC4tnL2dXdlnb9spevAkLJA+/QhHj89B89qq+KtJ2x93mSwbjv2IBNenVS2t/bWV J/DPFX+sYPlGqL1Txf/5k1I0uT3neMX/+RNxxb8/EzmXv8FewSLdWNH/+dPGEf6eSH/a3QuW sV30x1K0F04W/RXJRNHfGGSi6K+oJov+3UhTRX9FNV30f2QoJT8uRaBeWsKFiHtvJsmo+yGb drCnkaASFUmrRIuElWhwQj+IYzPT0lg/mtMfiBStqDpFW0Ss6G42/t0ce7aWxvptnaGBQj1b txi2+LwY09Nposn5dqMii/8fWpU57Q0KZW5kc3RyZWFtDQplbmRvYmoNCjc2IDAgb2JqDQo8 PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8L0ZvbnQ8PC9GMSA1IDAgUi9G MiA4IDAgUi9GNyAzMSAwIFI+Pi9FeHRHU3RhdGU8PC9HUzcgNyAwIFIvR1MyNSAyNSAwIFI+ Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hb IDAgMCA1OTUuMzIgODQxLjY4XSAvQ29udGVudHMgNzcgMCBSL0dyb3VwPDwvVHlwZS9Hcm91 cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZpY2VSR0I+Pi9UYWJzL1MvU3RydWN0UGFyZW50cyAy NT4+DQplbmRvYmoNCjc3IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDU0 MDE+Pg0Kc3RyZWFtDQp4nMVdW4/cxrF+F6D/0DgvZ8fQcnm/BIYBSZYdB05gZ9c5ASQ/cIfc y7FEjpYzkpVfn7r0lbcZ7sxCCKLMksXq6urq6qqvqzsXLx+29zfleiu+/fbi5XZbru/qSry9 uGo3v19cfdnUF7+Ut/dNub1vm4vL3fUWH/21Lqv64bvvxKvvX4tXV8+fXfwQiMIrUnF18/xZ IHz4TyDCIvPSTOR+7EXw5gOQ/XiZidvu+TNf3NJfYSL//PH5s7dnYvW7uPrb82dvgKN48/fX 4mJCuFftdtt+mJbvh7bd9uQLRRB4fuwImKRemsYi8r08JvlcEfBDRRr4oeeHB5GGRewFhUP6 z1VyVq9X5+GZJ366+m3iwyjKPD9yPjyfIo19L0sc0qtVfCb+DQ15QeL7U9/lkRdnB3UjylMv TB3Sd2er8+gs9FdBcBYE71ar7OxidR6fvYRWP+CryivEKogkoR8hIVGEfpDiH/DNeGtxAa3N yoUmNjKEUeQFrpTFRBNJlHtpPtnGx+fPfpVmBz/RNDKRxZkXgnB56AUwMJmXR+Khfv7s/74R DdBe/IJ2+ffXP30v/Iufy+ZWnNXN+Y+vVtLyJB8wMWIUMqOYGIWxxUmbaOh0LoDOFfBxknhF rocZrKi8Rv2+r8VPXmL34VfqxpI2s0GbYCF+4rT5re+/Cr47ppVhz/Ki38rZcR0ZNlGEgyZI eTVMlDX89w512OA/9x/hzx3+wnedWBVnD/AD/3hffyqbrdjCz1Zs4ZPAp+fivlqdJ/STWGzv keSLKLtuhy/w+5LerCUngT/e08tuW69SIDlpf+M0wPm6R6W/ulZODicL4ZNMgNvKReh7aTxh 48GUjQMXkJDY5ONspn1wVngx9jkKvch2Zewu75oVDA96kI+7FQ7PQGXHtB2EBTp1p+19KgsS IA6UzkIQv5hVWjihNOKj5CY2wQLJwzTx/MCV/HtcZDoyuYdVzlrbbMGW6VfbDDp2nAhRUHhR sUx5MRCnhVJe4Cdens1qL5rQHjLKlOjEJ10gepwU5Fdt0WmJBmXdwBQH60MN1s26RiPsBr06 rvkEHkVLzM7WSCyVQBEUOIwYrT9OvSwWvhfn/A9KcfPNQe8Lf+595kW5fg+zC8R2CIIkQEWY 732wyh4FeLFckUgrcyhQmYHFIyuKfEiRaB5S366gsLbH8SwTpQseNHoFQ5al/b6Y99gXl0SK qkmoFZdESTJH47rfBLwQvCTfFRQJdmB8MiTz/pf4JBN8pq0xhWUSHXAQwViTNZJpLTDJdM7F Bap/7CpJsKgnmPbH0JM4JVESW5J/4Nzc4sr5GX61D+jj/sBwUqzb5gYekYe7xSc7elnCRN7i M+X6kPbDKshgTS5xShMtTO4gPKPHdUPsBdFTAFAj3xuKCdbgCwy3T/TpeyT/QnzLoaIO6vkC 0jEl+T5QWkqq6g0J1ZJUTq9a6ofovkC/OoxTangNz0t6TV2DhSPjX/AwsfX2F/wpupZ9Y8RE OA4lhUmoINRXeYtK4wY7gdTNV9FLmuewqFl6kTLVStrNA/SUxxklFqSKkqMNetyQLgT18w41 wGoSG7YZyYY1VOEz+rkuwUreQ1j3Hv9iy+hqCjErNFOlPsdUM1vb+Owr6SxL0L9aSuNx3bSq t1ulL1ZLK0gvgrRWN2q2UYfICOm9ZAJv2+4erG6ru0lvSEcvBJoSK359J2i9pRnGfHZG/6j5 TpQctMPTStxAc6RttERSafd11AcutHDU10xFW4u4ZzEmMEPu56fgnXlJNMJ73RqnuHmvnV4p PQkpWbqR81T6kc4T3+MYgd8V6DVpdFtiIWcRh6U4guBIkGTMiViOWVtU9+LrjGjiYy5l6cVY KSmlFp/Q572HpztIxgv59IVQ4XYHpgyToeMp73gFUkxLmWRFtDfKIdWVuEblirIhl7pVmmL3 REseRKYwEJ74Dd51qrWG1KaU/XVUBnlqOlAZSVfx8G+MT0BfWYmKfANpZmzROt7Kw8wnKx+I xuvhlpJw+LXjRbESWh4dQBCl8VkkYSfI+FtRN9iRa2kROGI4eF9F+xBu+k4X2crk1NoyJEFd VT2ToZRc9e/YNmtp1uh6B0vTVBjBvkB6afEZqOOzHSmlErdm0NmigcaaC19FV4HOu6SueA5B 1pygaVLGVyiH1Aj2SKgMnnvGjnFi8xr/v2wXa7KWxiz0FfZappFCxwqN+Yk2qL/Dp8MgwY1n we6+TpCQFAWmFH0T2xNQVzzkpXeC2RzRmjWU4/HqGKQy2dJUpp9j9ZWWw7zMbGGvVuc5BUra 6eBiN5ndoPmYBES8O4Mvr/4B/7yGj9+taELKBaeEpzBJN7R6ihKteQ1Llgrw4eF6q2MqPSUF ezj6ezTjO6b3GXznZHLNeEdL7KECWwp3QsjIUrlhch6e+GkVSJ1QtlbeI1sOOWRsf7BNTHUi 8mMvSEY6scDepnmniIMMeVvhdc0z61r3uu6bih7IP8ad6ZGjlxCeYAkHtkUeULsjIwGNghSe Mqz2k/ZxVc1xfUPZ0qZFJ9awPbM71MNc35r0KuVHMsdmb0LLE8vAz5t6sJw9jS5igmqcQLlp qFdr1ze/ELo3dztGEvrjaIdsRhc1TljQsNIAhZUy4kzVYmEUQktvK7lQMEnWz+uulOd4MwVf C4nhsPfDFORI/UaxFzstMMzSVC2N9nCgtdUDDeWprFVaTxcsNlNyhZAS+8WIXKOW1cO3ZTMS 357F9PJZgFtCehLxnBU4xn0ixs7S8FEwXiFbt4DSZAYzptcENo4hwvrjSUCYKGbwYMVhGg4m ijk0eJqF7KPUL72ytGv6YRFgR3o0LKmhoXZ6NFKWeSIXEI6jVAPCBXQ1nNqPm9x0ZkCY+CTj fPbiwUnQn/NvcK9ze4+x/hb87JcpH3uS1v3+vCt327uapreC28gfRJMh8emEiQswhcARputQ iN1D2WC5w3pyX/Jx7QZ+DoY7bPbAvUlpP+zlZg1oakeXdwal8HKOjonf9+JgM+Ew2r3TkUAn OrWulxjLVBSlVhgxYHxnhQzk/Qk2ECXHs/DPTgIcjb3kEvBqg/2CF1ppKDcaoV5j3rp+z1nq 3Pr1iI6DuabZAGHgdZxW6vpz+wDrlW/i7fHd2MObDsPAi5ORpifC00WsYyx7GbIeZHxj6BNn 0DjQMnnF4ZIpcKtTXIlxcWLdi25kNk2uphqlOPH44VQrnFC3bCqhcyfOrXjOUw/W904YXFdo oZbhjopMoZ6VbbEyKbC1URYTEotS3KrARoZDjLi35AcxIvpzy+nQidUBlG5acrmp1/dqQ0zO OhCkt99hekxzcDirGcPnCUEdv2urThbXBDKbReqPu1IhcToRMHDUYAeOEQe2u93DU0zwOE17 uRAaiMaKOjLVWx5AnVq7SKIluvXhDh1g2WD+Wwv2TZTjILKscUaTUVDGXu4Uz6ErBL56jXRh uxMrJIl74QHMZ87ytLQmh5ue0FJUZ3PnaPeV5F5YjIhY9XE3RA5okenatQLhrVmt0XyG8bYj eZiZrSMzW++jjuxiHKf9OOiHR2COIc4guUmzbj+sJCCya1TEJI2jFg9qQ23URMNQmegOyR0j Q0Zqa0Ktt/i9DIg0HmA7ffQSyqpxd3giPVugBojdvSwfUcOBBUgyQpIJ2myINFW/xQmaFFkm IbMic36GIVJk7dtDRuDDK3G1fnv29nqi0GhBK5CpB4NGxvL1xZwTH/OhAWcC4ijM++34NtIC dzGeRPwMXsYjrEl08W/aVAvCJEYL/v3o5pIgx5fD5g7OxoPITccxgYTYWuXjlEX2UnJJonJy h8Sks5KJzMt7RJSaSyqTmztEJullTiq5HhAlmpPJ0V2xTWo8w0r2X+qe+m80b7pmvceuuSQs syGhBlwSKcwsjZumR3HkWVl6MuVB4vksndgEhk+8qGwrDiMv7xk0ReFYDYp1U5dTqekj28Wx DMbaHc7RYxvK0WiGDb2i3UaqRKC9t2pP7n+kguFN6LSPpx2mwQiVgsrtCi4nfVIJoyLHNa1X L1fSgQyIYRi2UZHMVtcaUMT1pHLlKUKollx8LAQt86W0zjdmF+tJRckiL8r6s+ShbLoNRGxy 7MTPWLP/hQD4p5UmhaXUkeayXu8eZLoZIbKGR2VIWSgnynX5bvW0MsU5FhtZMv1CG5Wt0k6L YV+LodxfSFlasJennvfggYsxgQ5Ev9gtG/Br0i9PldNyMCqlt4LRgfz9oByC0sBFTLGmACJg ShU2VlIxF53bKBb8j0JVIM5ydoqaIea4WHA8cAbx71BwlAPzRlkcUjcCU052t5NO49F6AxtI okFMRsWEjakcMrUq4ucSNBrKjUBxWVPCQ5l0Pz3j/XJk9/Mlu5rMLTmEbt3JQqS6qTqNQGjN c8YoC4Uml5rH9h19d+H0fVM+cFGukxlbQAAkVbkqyrQxzi8OCPcHdogKdayhqzziMABlK5zl 6x3jMnYlNJcBWjCOhGSn8fZHKwIWi6hng9gTnZsKU0K644dmqlzL4qXhRms6Ck5W1C9O3XUl sKlgJQXYW9u69hk0xbk9+urT6yCjL+xyCQked7JejbbXuw2WFho4bnrgO+lxWNpBQTNhlbpD 8KSROM0V7SfTjMEa5oz18MmUH3Z7EMdH9D0N8EDT3NaBrhT9uFPRzBSKvqD90KcoZdi+VLqF 0nI1jd641/ODtGVPEnsiSdSrMTOP9bq2AU6GxE6u0zjvha5YfHuuq2+x7p2RoBcIK17vDHTb tGJ9hzhPQ2X9gs2j34dOV2NYtsE1wr0qXyqtm8J9lqxYaUFnqwc9OxD44eDAwn0mo4OpQy2M BEiRLSRgUmQJ/OAiGyYLgZ8lzRDy029lGjpZwpqgnyFrgn7eXOGg/yD+CWb8w2uMG9K0yKcQ lAWtJmGCB7WHzR4OoWQuhIK5/R4IRZLMQCgWkxkIRVLNQiiG0xyEIqnmIZQ9rGT/pfIVhJKm /WoHi0BiKDYNS21oFEBi00h55olcGAXLOotCHltDcGHqiH0wVSsj8w1ilFuMliVAeC+A41Iw N/1TbmZEGB3W+5CGIyUI+k7tU2nqxSqEFEqdvu+teDhSFvjCxRQYy39g3D+1ypQN+DG56XYS kUKwomJkjx2b/6C23D5T6Pbwx1RO+kgRgiDGqqqhCAfmpNLGZd3ZrJEXs1mplF/6ldEe9IOA KOgldxxY0U5i/afe7GpwDxss3BwAMPvZzm6PzEHQGFRC1jMItT9Um9NA/SKIddt0+gMdfVOM 15rygLlw6BGaQEze0YQpGTSFp/IYA+3oY5oOYl8z3UALamOVXESqbywwZcqtqZHgaHLqNNOS 3kQRvAxGemPOJbR6C7ZdtyrO7F4MtjOdPdr9ZRWPUDnQ9NJbFrDVZ544nH4h9hXs8DFN+7CB k67q7fidOZKpU0QZsnPbpXWcN7WKzkU/4TyxLsIiwqIa58Qu39awso+UXnOFAFdH8G/qqJWt Mm5kan6FSovu9TGfXgqi6wVM75gJH90R17VdlCEU5nHyKRjmfi/D5Q3zSlc92+dLtXPodjX7 BDTbStgZ61ZtYFsHa+o/eQ5ThZlxacqj9Q6Hc5HEKKqSOQ7tPOFT0idXSkoJwgAn/x9s+w0u +/+iUXm9is3x4xEpdR0cSUlfE96FzpbqSyg9a/plW6UgK9yR4f0/fW/Om/DwECHt6NOH/9H6 sDRoQ0v16DG4I7WUJM6RTDt/upnCAZY0k8Z4k0uvlbeDlYuPYloAbltp21CrQSk+31fmzJcs iOBMmjNwYbav0Lp2+ky68cV7akYeocE47B2D5EVKnlxXE+I/8hzjoKQSXSzaQDtne/acGqI1 Wc8xTSECS5ZDSDXwEplB5w5EBGRopmr152KzcKremnNbKbQq1p8TWmICGJstxgSWNEOYQL+V aUxgCevEx+x0yPvNv3DU0Ve9QUiAHMIUGrCkvSKje94G7R2MBoSBiwag4cBQ6wMOmPH20ABJ og852CQmY5ZM1EEHl4jQAEllHXawiUxezZz0aYU+UaI5WYceHLFN9j3DSvZfKp/PPhjVm75Z BHT2waVhqQ0NH2twaaQ880QuGhAEBYJynKAFGSJAE5NxqjBLZnrEKJ5gtD/ZDEnG/naoCe0p dtx3BOJIGQIqWbJv5aA1hW5Ckw61QIfK/jTjOI8LDnj34knFCwq6RGsZRHDQYY0j5crp9rze 0RHa5u9VQHQH1B0cKUsW905jcUyriiUjFYmJzYpDsNhaideCb3x4WjMLUrrZdCHUg1H5FMjy SHkCvIFqRJwDMRbpOSTGMus6pm6V4+BDiq+Cj7EO9CMr8Bbu3VlWHNzfrqP9nkpULUbZO+ew fEfb0BRguornTeCNzuXZ+yB3k/pNZH5zMeQjego+KRu5KQizK4OP2Huu7RTksaDxEFYMWPWH jR+QtbllyjuzCdq654xpWNgjcPqFIcxLecmKPmif2oXODrawu9YIBraspu7eTOgRY+D7GFQM J+w+OE5BUFp0vQe5q6yt8on0+bGIYOpmpnuPIixXCHr8eCSBVqEozAceQPvaAFHVN7pPjVXb wMUmZjCtaQa/CGQZS2WoJkIfy6CSgQ0V6gyuUcE86tQagHUmH17/sudujiEeJs1FVXmYw1qz E200+bMOqbRWdutUtWBFx2A+4S+JTDyBomB1CecVJaVAdI3FUKa9D3WhLnFvuKzoBI4Pr+kK RqQeFMfs8LaAbs2nDqVs1xotYuyXiXoQD961kc3hStO7Xo8ehLjoBbbXbg3L65cIW+HwU92A OenleFwqKuj7bh5OmrN3JZ05UUfm7Et5rMMphq3gwy4n7y3XM9rx6Gaj0ci1KVnS14T1MPlW 3ValVi7ZpcOwQFn80+0wtthYRXTW7sXa3KjBVYqtubapxO9MGc765OrB/f1wMCPlZkrZEMzb yXvmTjCjcCcvGGn1QLhIRpkKLpoNM6cK/xn8kEIr8GNOaAkXhXSfwTK0aEkrhBb1GpkGi5Zw ZrBowJprRy5hUS6woBhC5kv8P1o4vsEEzw4M2xuO8XLOWKw6GIq3Z34cTqFcS7hHgZeFhwg+ BXIlLshFd2bZGJcFzjDGxRQWxDUGAyU9hMumIYSLiRyAawwqSnqglEuTKD4OvDUKJ00zkh2X Smd0C1RepGMUfjqpmwNIUH2SZEZ/liQEo7nCGBo/3adkSTWrZdMaY21ua4bGT/cNhaSaH4v5 5iyimfYOoyJT/y+4p00+DQplbmRzdHJlYW0NCmVuZG9iag0KNzggMCBvYmoNCjw8L1R5cGUv UGFnZS9QYXJlbnQgMiAwIFIvUmVzb3VyY2VzPDwvRm9udDw8L0YxIDUgMCBSL0YyIDggMCBS L0Y3IDMxIDAgUi9GOCAzNiAwIFI+Pi9FeHRHU3RhdGU8PC9HUzcgNyAwIFIvR1MyNSAyNSAw IFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0gPj4vTWVkaWFC b3hbIDAgMCA1OTUuMzIgODQxLjY4XSAvQ29udGVudHMgNzkgMCBSL0dyb3VwPDwvVHlwZS9H cm91cC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZpY2VSR0I+Pi9UYWJzL1MvU3RydWN0UGFyZW50 cyAyNj4+DQplbmRvYmoNCjc5IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3Ro IDUwMDY+Pg0Kc3RyZWFtDQp4nM1cbZPbthH+7hn/B3yUOj4ewXd2MpmxHSdxp5048XWaGTcf eBLvTs0dKYuSz5df390FQAIkQUE6Ke106ujEBfYF+yx2FxAvX2+2q5tisWXffHP5erstFnfl kn26vKrXv11ePa3Lyw/F7aoqtqu6uvy4u97iVz+WxbLcfPste/PdW/bm6uWLy+85y9nVzcsX nPnwP86CPPWSlGV+7AXs6gFIfviYstvm5Quf3dJfQSz//OHli08zNv+NXf3t5Yt3MBt794+3 7NIi2Jt6u60f7LJ9X9fbgWyce35kyBcnXpJELPS9LCL5Ps24r8kgRgYjI5PUS31zJOsNVKTc Dzw/MEh/mcezcjG/CGYee3/1T9vAKPKyxBh4YSXNvDgzSK/m0Yz9Cow8Hvt9pdpxOffC0E2N PPL83CD992x+Ec4Cf875jPN/z+fp7HJ+Ec1eA9cHfLT0cjbnoST0QyQkisDnCf4BY8a5hT5w swv2+eWLn6WLsMsP6Bz/ePv+O+Zf/r2obtmsrC5+eDM3lh8WMTBWkIehl0csTTuDwXoU1yjp fcnee0nfEpffp4NJstDz426Sb3z/Df92xIH6w3Jj2ITRA5OQhCxhaRfw/zuUtcJ/Vp/hzx1+ wmcNm+ezDXzAP+7LL0W1ZVv4WLMtDOE+fc/wn6/tNAXNczu/yMXTNf6Jc9TbegELW9+zxT1x aLaleDYucpSAS2UW3bR1g49ximucRrAQKQNN04QFPgaMTfnyxb/+wiog1VaXj62unCaIxDyZ Ng8gu5vIDuUUoANfpbHvhTp4BEDvqjmYF332826O5u2U+Zn0eSZ3HmSen5jc2YDJz4bdOBLn ynABOlMwabnAYjmaKFOy00ThIcIHEAaT2BT+O4xtDXrIYjPPhOnWW3BI+lRXA92eK0QYBORG h1gwCnMvay2YZ2i6KQOGFgPiPHm79hnJfIDoURJ6UWCKTnsDmOsGkApOiDYsq0WJvtgMtHom /5jDDnOA5XSTRNIKtJPDRhohCJII3d/3okz8g0Lc/MXpee63zwFEWY+AR7mXZvoEvs97JKBG kCgS9CMemxRoLTR3O0ma59mQJG/lgMgQRT1Jw8yLosk5XEikPcTC0SNYtjSLBgp3FKhwj0gp 1BIRpx6REmeSyAzJcRJ4kYxlPOMet8Aino7IOA3EqfF5JnIrwDM4cBpyXE90S/IxCY3i3haC j2QHWziu8pDdxakZpR4fZbSlLXyeiKSpZCpYVhg2y82JxcDEJ3TT9xTs1GpyjE46u6rcQl7x OL+IZ/Xmd7YsMSG8IQtU+LGhNGM0Hp1MKD/BzVcTSmSq6GjvvzOS05M4QC48bcDVccMXsJT7 /RQuk+n9Xoovt9px+cfKJR7HFG7Ac2ITl7BRFbhDDbH5XJZp7KXhkOXQV5/NKPcCPmS0RSAS Gh/mPAVwrtBhK/q6pDT7xIIEAfeyEUFOrnEQQFWeDxkhLkHFxzniEtHwO6IR8HmD4bdq2hil sBLN3s95RokfQAYxu6Zx9RccSLZbioyQFUxkNlg+YNEBNoU5HwH/cyhLbFg/kdtCBMp1RUkO oSJDSWlN70i18qtI/vFrQBJ+w+obNAvDOF0tVIheQqzKxUgmYnYbxcTM5DUFWRRH1pVHvKCO y4AXjGWGAVkDpAnwXBKeaIrlme0C4SjU7WJdvZ6RIECnUvX6piUQVtAMBJ8EXOjxoka7xLNl R1soC4oKAR9UTKCN+DaFKE3heylIBbVZRvBrGhxT0JRP5Kc0U31ekyV5iO0WzWaL+oGaHiD0 riI9FrSAIk4wWN9k9hNQ4Bq/+x4L7GW92An3r8g7GkaqiKpzh6psRD2fQ1SFB0K76w6cJdUE FVkV54iF/bbgZfRB2Mo7syUyH7NKYzMA/+38mURpGC0hQ7EF8NdrkdogonqIYTR4j7FedUnS QllotyRskqOwonpCcJ1X+STrpVDlVxKPgkKzQksId25YrQLfiHoek+GAUKUCAHwuOqhMAwLI WQmQ+IrGuFMR67zKw3/MhG486jWjK6UCCLYJdrSNyhR42/r6K9xGUjGUYlFB0HiSy7tk6/pe Of3iT1hsqJ/MrK1ey6iFYb0BAai1uai7xaeVE16uBTkiZ+rvu/YJAUEseclwEhELtDCnDCVs IIwKe+rtqVODEMbF+YjKtHr1daEWUov4FNwpOdL3xPMuSdg2Ltow7La7NNjSvCtFSPFgCwb4 DWIWAfFO91T4tGt9svNURrYonrqQdk0L34VqfFKd30V56qWGPd6DsPu2HQomACfhjSR465wb 2RoGC6xr5X1iZdftFlW3eUG9qJVnGGmONl/aTrcBmf4MJ/FjLJc0o4jFvFcZ/AK3znIJq47W WGJSI/2YbLFkuzVBml1rCQbohPG2anfb3rYrcx1bUiBp5V51Vv3jnIZr+g8yNHsK266xkcZS H1dfYOE0W9rdcYHJBOtutJhczEGR+hqpYS4wYwMj1pTP0cQ3Cl64NEuZHKcCl+e1ExSAaT4o /SYQQAdYVAP9ePLazM+wMT2U6eoKzfYBD9UuwYvI/H//iHgWpdcr9gYs9g6fv/sAn16xjz8B HZ7IfXjF6o1MxDTwojNquGXNut15cKu6ERtzuyDnXYMk9fx06KtGbKIybNfGHC1V9k6+DPAV LsNALMfzBdlHpeOFqX5NOnm8oLpNor3vLn0UxXS0BAV+YgTAT5ZzhOMZZdSrHjC6PjWjOPLC ET7D3shz+aRePsKHUgTC3D9PzTFN6PDi/KphSIlGGJFa7FcEl8fjjA71fzsx8ziIvTQYYe58 6pRJcGgHKPHEeRI9njhOaodbT5OIYuowSU1hPUsSMkwcJdlnkFpKc9OjztiaHhoBKmLSSEE7 GuJj0khRJml6R0R+6oVctsABlokltOV7jogmptnbvo9B+yQ1nRh2bMg/MLvMxbkKq2U6w+2Z 5kmECfubxIYaNBPnVUexy3zhEwN29uOq4/hEdFo15LNVGdrDvOuHY8JB5p44rjpKDA41XhA4 qXvCtQxgnxk0xZ9/WPUsmeBJashknlVhjSXODzGjbopbkmh4ZeCZqxGDV4zI4nqCJbjKI6yJ sMFHr3JpGZ02UTgu/1SeCYEj54Pd767tGjRM1MjiFIDSf/E9fQ05sugHYMl4ozpXRpOcGgfb tt1ZUZVTb8Ya5m2bdyRSPE/bMM7I6ANt7WdJRzJKuJelI4ysp2fJWKB4nhCRH8E+6qLsKbgp TwpptMvxmWoAl+QMJUP4xqPHZ22rF7asYa/3Ue/038kC6Uf0S1kcQtGckEN93lEsEB6HHdOz WgJiZmzUqnQsLFoBJ15qnqZeHI6wFH3YUqLX0ixHuxmwNPsUJXbemTj+0k4oVKkdzexl5pHo iTgkXCPauFaZMpRTmTkVU20XKGVS301DuZUr7ESVGYMJfO0YEZJIPwphx15AvWmtA49kSWVg n+NErXQsG6wCh2wcqsAjGYoi8PyKiRpwyKdXA/LJGvA43rIEHPJ2LgF5YNaAMWw+Oe+KQKyA enWgJOkKQZ2mraHaaVQxaFCJelBSaQWhTtSWWmqqtqTrU+WtTF1haAiuCrLJmZQFxFKQBdqF 0FXrnuNog0SJ3JIQI4NEyTJBMlwk241ZUT2C1F5GlXkaRwzKzDxzu7Eqk+Eo78dKqvx2jTh+ HdnpBnwTYptrXC2ExwkoJtcELHZbOg4oRJn0fyBiknuBUVKVX/E4BI+Py+mq+c+WFH+nM9IW Xqqr+XiWIewq9vL/vcR42TYeSoxlsjAqNSioXitkKztsb8jzsUrymYLxgC5qDAU71lZDyEf7 IR9Z5ttv0CDHy2r79oteuSl5ynKzz9QQ3naVWaZ20hoytbPYfSI7xoCVDfdaLAgxaGHWyV7v 5lweK9faeVsprnbQrry4Q0/HclQktOpSGqUk1bJ/8Ui/UFPZLqV1p+LT5cGzTZAFXhAOGxhk iNeYsJOKeNpHAstiyJZsHy9ODuLwEXHKiix33Z4MyytZd/JeRmwc2moVvLiY0p7q1lVxrY7T 6Oibbqdcy1qCqrau5t+2BYaYHM8/p45dz71IsCnERj0rlOsO+sVVFNbJeCsuSVJl/0erkrjm wshXl+pCKFIud3TgTndlht2p56oR+qHH8xE1SnV2211rFD+qEXc16h3euNTuIbW357D0ew2L Yjrnq3OvA2auw1aKcJx6Rza/Y+2FKdWvon+Vp6kulWpeiaP1pH8JAWpmuk0nLvgKLxTevyBm 4mYP2WrdnrrCkLUyV71tY8iCrmQ15zZOFOEi605aLffV/OJWKH4zcre3u1nWwVQhX2C1gBCs 7kgkKphO4lS71Zh2t0bObBm8zG1kSkvRjmovukjxXmlXAMovdD1JeyqimrKpeb9FwF1XtR8O e+HOtGMbIBprG+V48Gd4w3tog9PvIWEOPCInVqMtG5UMUctmMi+x/ZRDFJEqSRNF+AEKyK4N piV6OujUtTmeKfVt+jzt7Y1nMEqx7h1ykrlGP9Ww9TiOFwD9Y4S/e5Mj7TU5/ATzR9XkoAq8 3+QQJG2Tw6BpOwHtNLLJYVLJJoeg6pocBlHbMVBTqdbEgCpvZWqbHKbgqrEwOZO0gFwLsoC2 Ej0K8F1bI8iBBM0oSSZ7RZos+LQnjkYkeU00lCTVdEOp40eW6fHTiAS/ia6T0m6y6zTNTiOa YOdGNfT7zP4KB95/jYJ8fUfkp70oHFjeTQDFZG/AJ/srKBKYPegRD18JkfWFyhPYWXrDfikh 5KzvC8iiEtgSIQ24Xl3fryg7uN0U67snvGrMHunSHbUC7jSqcfGCLML6xeCjJgvxhiW++6F+ HAg8sGIIqUOWmhP91fZajhjclNtt8tkSzUZvgbRFfzS4dxdnWO2jZAmXbN6Qua7FlX9MNynD w+se9IYBLIyfbFKHlEwb0zlIHUy8TsTmi2EIPPIDeIyeyejCq4l5jIkDToybNL4Vpb9H95w3 jXqjaITtDTKp72WBMQAPOgIoz22vp8l9wocxwjY7tmuzHu0Ve+dFfv6bZQjHk1VzhPUtKYBr CC4G7S/6i1Lqhwf1bhQs8yCbFdiDRPcixxRgQs0ALBOHbmoGaeRFeV9NzDlIVTzyxXff+BEE ndCsIS3RJIyp1DGXpcJfL6yW8wusZlCnLas3t3TZqFr9Iao7pSBm8U05D8kOu81K/mohGnHO MZPiu4sU31W1WC0lvzuY955q5er2r+wHmH8Hz+5XVdmwm3rDtsre9+UCOwGwABFegl8UKBkW 3BXKTG2DYPYHfUul6P54FWWQLgSmaJ5lQSLYVlOT1AWUo+9LGQFlgD2kg0FpjHIBpTbAEZTG iD2gNGiv2K+wlh5s0nZcZnh50xi1B5gG7amB6aSqBGZPVQTmr6grAjOe8TznBwAzxg6TMePH knq0faAVqMtmARPfrVpcINV2tyltpotgp417pkNg/bRGMFdO6A0SyMESJRzK0mzLBxjesPfV FqUgqeqqUq99WvSXAFm+Ra3e4rK9xxsmqNF6jb/XFhkMjinUIAf8hnmMrzUzhLPhN4RENY1M WhcAj54+jgE4at9KcQiA9VFOAO4GuAJYH7EPwDqtBDAP/NiK4CgiBOvD9iFYpz05gl10VQg2 dRUIRmUFhGFvzdwhnHCCsD7lT1+UNpsveLpYPtIL01h9wxZPsJFRWr3B255pD+gO+1aKPSOD nXXfAjfo07r4vTqCu9lcvP1xyu+DDDF4qN/ro5z8vhvg6vf6iH1+r9O2fh9H+/xeH7bP73Xa k/u9i67K701dld+Dj0i/58HBfq9P+a7a6jvWDpWAChS+XdCbNVnRUCN9tymqxVzo7bYH8Vj9 hhg2sE3xgNsXFbr40o+9oAmgOMR33Omz2EAT8HRA6wKa0aPfEdDgwWFwMGiMUS6g0QY4gsYY sQc0Bq0CTez7HrfCJg4RNsbAPbAxaE8NGydtJWx62krYkLrHAAcF4OakHzb1QhywRLMl6gA5 HWVYN/LwHfs4G+z/3K4a8YvStthhmETBzuKCI/wtTpsCFZS3NWxXLZHZhpjU1/9Rdd6WkVWX pbhtTX/crNqdjcF4qtJwFgS82tWwVNttaMcTmSpFg5W6OvBAkgcoOb08VL2GFC8MWdYhDkIv DEzp+/gd66YEyWCYC5RHT0vGoAwh8PC8zxjlBOVugCuU9RH7oKzTtlAO7JWb2P+MYfuArNOe HMguuiogm7oqIAd+C+MDeipi/zOmpPJGdClqqobYF8zu7qtyU1yv7rvG7Kps+lfp7ZiN0m6H VYhZ1w2EiMYBBLj3+dycxQUEo78mHgOBePXsoSDQRzmBoBvgCgJ9xD4Q6LQdCLgVA5RYG6P2 4UWn3YcXnfbkeHExi8KLaZYWL922d0CrQ+JFn9IZL7SDNNRm2KwqalK6YQecv91kGzzSkL0L B+DwPMO3ZhtTuADHevbUAw64XhQdiht9kAtsOnpH1OgD9oBGJ+0ws69w0kftwYFOemoYuOgp UWDq2YJgb9HU83x9mtbxhdSPeKKHevxe0ZvXG9Z15XcPeAcmmulq2tIknnmBaTZblQMY7pO6 +Lb1BK7n22C45GDf1ge5+HZH7+jb+oA9vq2Tdr69rxmmj9rj2zrpqX3bRU/p26aerW+3jTAe C992aWVn6OUuJpCA0EmHO8GjMkrx+5zuEhIumgVtAKx5okCOPzFyqAPw19+ZVTTN2f8LA0eh ew0KZW5kc3RyZWFtDQplbmRvYmoNCjgwIDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIg MCBSL1Jlc291cmNlczw8L0ZvbnQ8PC9GMSA1IDAgUi9GMiA4IDAgUi9GOCAzNiAwIFIvRjMg MTAgMCBSL0YxMCA4NiAwIFI+Pi9FeHRHU3RhdGU8PC9HUzcgNyAwIFIvR1MyNSAyNSAwIFI+ Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdlSV0gPj4vQW5ub3RzWyA4 MiAwIFIgODMgMCBSIDg0IDAgUiA4NSAwIFJdIC9NZWRpYUJveFsgMCAwIDU5NS4zMiA4NDEu NjhdIC9Db250ZW50cyA4MSAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5 L0NTL0RldmljZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQYXJlbnRzIDI3Pj4NCmVuZG9iag0KODEg MCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggMzgyND4+DQpzdHJlYW0NCnic 1VxbUyM3Fn6fqvkPerS3lkaXvs6mUsUAk7A1k2HH7FaqSB4a04Az0E3c7U3YX7/nSH2R2sh9 zDIPW6kwGJ+LJJ/v0zlHah8erZvVTb5s2HffHR41Tb68K67Z5eFF9fjr4cXTY3F4nt+uyrxZ VeXhYnPV4J9+LPLrYv399+z9yTF7f/H2zeEHwbIgi9nFzds3gnH4TzCZJUGcsJSHgYJ3HkDs h0XCbuu3bzi71a9k1L784e2byxmb/8ou/v72zSlYZKefjtmhZ3Dvq6apHvzj+1BVzWh8kgkR 8NAZYBQHcRwyxYM01ONzh4CKnajgMuCSJCqzMBCZI/plHs2K5fxAzgJ2dvFPj6JSScCVo3jg Ew15kESO6MU8nLGfwVEgIs59eqkKwoQ0DZXGgYwd0V9m8wM1k3wuxEyIX+bzZHY4PwhnR+D1 Ad+6DjI2F6oV5AoFtYTkIsYXoPO8tzADbzvHhSH2zEcoIcbcj1AIj49IpUGcep38/vbNP9q4 Y4fnGHGfjs9OGD/8mJe3bFaUBz+8n49iXsjnAipJwkAaF4wHHL0tL2eXV55xxXGQhCMtreH7 9BOYgXQULmdnc6lm3tDKeBCPNXzWIXyjdCR7AZGlMLKkDx8KtEZK8a8+4TCE4bjCXuDFMshS V/YLIqmAeF/C/9WDDj18WV7n8LNZ4euqZPODDJZF7FgWCSsZKdqySBAKs/GyzA/S2c+4LjGD oI8w0EMIcjX7qw9WURpEgjZ3FYsgHg3v4xYs0nEUqjgN0pEahPAmv8UVwYViN9WaNQjMO/2y etTLx67xnxu9fuWqwX+AVVl1g79tQ+W5jynmQdj5/DcY29yXxTq/Wt3jR9aaLGqWl9fdGNTs bi64GVZe10VdPxTzeFY2nd+c1U+woHVTPMxxGDCHusn16FEpeI4n3AUJZRao0B0cAfmiRf7N +uD4Rxv5Y7iHiK694W5rkeA+KFDhbmtMwd2WHeCeTmHYVpvCsC376himzLXDsDvXHsNpj2Fp MLy9Bz0DNqHxbJs8xrnhnGBmJc6APd7nOtQh5h9YAabLjY7ydY4zRTFCGEci9q+3J4YlNYYl BtneMWxrkWJ4UKDGsK0xFcO2rBXDgfBGcaR0FNuKU1Fsy756FFNm20WxO1sdxd6UVAXRSKNd GQx5tWfI41iFa60P+YMIJzwd77TthCeYdRsXZf6wKm8JOJGYqwtXmQAVRYRKnCaB3BsqjhYF KpYCESqOxgRUHFkbKnICKo7iBFQc2deGCmm2LVRGsx0IH2qOF1C+iX/H6LeJ/ziBcq1z8ZA3 uHR3RBAICIrItUAAQUgFgYmGfUFga5FAMChQQWBrTIHAlrVBoKZAYCtOgcCWfXUQUGbbgcCd rQUC9T+AwDb6jUCgsmGfuV4tsdOTr59IGIgCpVwDBAxEVAzABsj3x4CtRcLAoEDFgK0xhQFb tsOAL6KlxCLfUcH4CafgYitMwcWWfXW4UBamg4u7MBZcwgEulPqAYxPUsQYgE4iyb4QXHg/7 Uv74eK+XCVfQ1OGqrcOfsOK+N42BgoImWBeVuOYJaIqJaIrSOFDZvmhytChoshSIaHI0JtDk yPY7SuivP0wV7ahNAMSRfW2AkObaAmQ01w4goRjvJgSQmKYYaRnagtv9HKHKjvUarK6LstHz ra5+K5aAnoZdF/USBrRePeqmEba0ij87TNzlKFze6v4TBV5RIrGWMo4RqghaSWlDiSwNeOQa IAAooQIokkGyP4BsLRKABgUqgGyNKQDZsgOA/DtMCyBbbQpAtuyrA4gy1w5A7lx7AA37i9q3 DeWY3G5D5b7TF6G2VqbRm0SO6/IVsfGYm7/g6qzL7f1JkDcoPIfJOjfYCUYf93ld671JN31X S32gR9mVIh5kiWuTAKqUCiqR4WHevqCytUigGhSooLI1pkBlyw6gmjqfcdSmQGXLvjqoKHPt QOXOtQfV1vnMHqCyTX4C3fz+D9xI8nWB2w5rgbFeXW36Uwmm57uVv2G0kyDCo2F3M9vUGqCo Zk2xXv0n745mCPAIJZZAjr0xqgbZaEuWAKXMd0A6glKYRt2+tweUHC0KlCwFIpQcjQkoObI9 lBI+ASVHbQJKjuxrQ4k01xZKo7l2UEp4DyWxL5QckyerGkO6wsHjWaHeWWAj4aY00dgxsV+u alyHh5qtSqbTrTtyvhYmYtjUUOvPdjXB7HAgWt14r3NIqGGFawbVcYxXnf661rnmZo2llTBv wlj1XqZTxJXeiykbmopEwBPXH+Ww0ntPYQxDsJ/tD0NbiwTDQYEKQ1tjCoa2bA/DdBKGttoU DG3ZV4chZa4dDN25djBM+ctPK925FWAlv/eVW+bGEGnAKk0C2GgdWbM2sGCJAdqqHLJIXzaq IBuleQxVEqQjjyXabvQOXa2/4pUBc62hKGtcu4Jy0AosNYoW36YZiTSIQ39k+eAqqHBVMhDJ 3nC1tUhwHRSocLU1puBqyw5wnWqLOGpTcLVlXx2ulLl2cHXn2sN1qy2yB1wdkzrXzMv6sVrj NPt7MutCp6Y+pMCSKuKnFoZ4JuCItjDGLZkE4Wz7A/R6ywBBrug2hEk7PUBRdSZ6zCO7mVyi rvEGlBB65DUld04CGblmvbkzlKEg5MhSaEASaUDBIkV704CjNUUDCXcULmenFwu9XJoOGL6Q M7wIy3i445Q40/dkbTsTyCX77K8qtGmnbmlMg0im8JmIkZt7BAuyQ7OuSl2d4Qu2WN2Wprra aDiZm2pn5c06r02Rt9FVGLxb43CAO04XCPEzrARNX/9vpGBVaRgk3XDOq/vV8gkDVXv9fbNa 68tumrOamt0YJLAletG4MxXlzdDa70kt3zR3hhkgF431bbtVXW+0PETa4+ZqOBBgX9u0+4ma TeOxX9YNe9kl7dujKWrS+VwWyMy1SQGNooIGNuX9905Hi7J3Wgrt3nl6gfnOByRLvRXhb7ob x6KM77iMJGHYrrkp7LiuxZTrHkIcwfPLnLIJyVRiQeK4Ov0TgrUBdl1VZW1ucVasuSvYGfz9 8wmEwOkHH91zFfDRLL1bg7nC48ieVLrS6jPKssFztKGBqO+VkkIZcseeq3USDDuqLi5XEFzn d7pkq+9W4y6LTfmJcs2QbmYARY71vFG/eMzLIfBD/110xdLx3fhunjLBYwd0ZP6+vu1++6If u7hDGsQzSP3jEV69m2d4bz8yP64R0XORmffzTno9Ny+W82T2tScmfAAB310Vc5EYwRuwpv9W tQK38G9vuWpNHHY2UVwTXQTvZOiXwy9C6wyrtM0K0R4X9WUWYbruLM3ts8+hDEvWL2eE/QAB RQrgCXJhzmHd18XbNzd/8VNWTKUsnmIPrh/RPrw1qBJ5a1CY5K1YSH9x3fKWbW6Kt1zXO3kL XQ9b//68ZbsaeOvqvqsR2Kd2p8X80Nx9v4VtHx1ds/O1fkefdnTbna4bztdVUy2rexLV4CNB UTcGkzb8jFkDej4/x4mb1OEdO65MB+y5m+39xFQcZMo1+uzTMuN0lmOwe9V28E7yEt6RkOFI 8X/IO7GmG/Ar4Rc+yTvp/rzjLA2RdzCcIWHseSfKMvjrFO9Qm/MyjrB18xLesVRpvGMpTPNO nPkfQTC845ib4J2R6928A66H29E970CAXFDIJ8NDFMef6Vmf/LTwtc9kHKjI1fG22hTHosaR fZ/X6OGaHUEJUJT6UJaPqoPqhv2kz650RXzNTkvTmjYCmutojAYpWRz3jHYC+Dn66VQ7NFTG tvsUHzWMn7qigS26Gsy0zbsqBBdaU6S28BF/LMzqa7sd8b7TZ2+WzNE0BYYqwpuAzuB9LBuq NEhcURpbyh1PDO5gy1Bgf2YftqyBvd4Ztsxsxgw7wuyoc2BMz4YiIr2hDEO4fJZZG3yE8wZ/ 30WroqXRllglNyottcK7sc7rwlk6Ra3S2yR97tyEc9zunXWkUqvKggyYFZLBjMqsktq5kRJ4 O3wZsw6qRGYdFCaZNZF8xzVnw6y2uSlmdV3vZFZ03TNruHdG57g6KqHmDE1yZi5/fb76rTAB B0BgJ5rTsGljEit9Ccw81wjJoOpPAjU3f9BndTQChLQyGx6MPoPJdXWvTufYaXvU2FbJ2MOR 2MNZ6GE0680Su0jX7BgfbrzaOkRs2VD3lcrhmhntUkwYC1whZ4xE8vL2VnaRF95sa2+Bf0Py ej7ds0nJd69B34GwBnn5Eu5K7JRQTXKXt1YfEZYzrJ00JbIkEOnAU6TKU+5TFreUJRLkQ5dC 96CtQZ3GWoN8S1oLROjnw/545vQYGInLHfeVMqQr284EW7kuhd+ltwRLgjRzzHiPhWBDSiNH VL7DSpbGeAJTQlt5gbzQPgxt2tO1OQBq+ktJqr1+hLO5XZWFvoSETa1t5uBb1BGm2J6zPH7H +Xvx/eRQwygcKXo/hDBKxqLbs6KQsICIE60FWAVNm38gTbarkNf1RiefuVW8T68Bdui4sK0T 1wDTcVfR/y0hcToWPc/XDZPv2BGOGkdsEnJ9PTLXLQjK9RHYI2PlHYKPJaj9KRFCjbJvR91W IhFCL7+DELIk8X3LiQijIEodMz6PSB2R69H7FRdRNBbddQoGnG6LThGSM2UPIe2YckdIhCl3 hGRPua26JOcZhBlUWrDf0fgpw6+scUbfZiuY8/TnxDrLKqv76vaJREI8CoRtlcpBQrh6fgoS 4UhyoflDjfmjoKWDQskgai095GV+i5zbfZEFhXJkgh0hywyVcpQaKfopR8Vj0Y5yFpVPJ43w 8SVbZ3uZdN7tXNw2n3xOOQ4JeYi5qm8CPsLytiTHhCWgWNibsCwlEmH18n7CkpitTWUwlp0p wnBcPk8YF1/0gZj27D3EivGOg23Nyxsx1+FjiQpIZPRxvZAktsiyIHEt2Gxxgan2S9hC6DsH llkqXchopOjnC5mORRfdUJ2C7cKlvNXvm/bKCcytpsxGfyvDS2YTqXCkSDvSh/ojTe1j0O4L gABei2dSy3/hd/pgPZ1f6dahuU7QPLEjPCTJ75/qVc025XWx1pX54vPhGdbCpvQXUchTcn4H 5MO7oZ0tPsPYwNaxLz6BSGTm6HiZkCdjUZFyyBpopyg7vFh09V+pSFevDQplbmRzdHJlYW0N CmVuZG9iag0KODIgMCBvYmoNCjw8L1N1YnR5cGUvTGluay9SZWN0WyAxNjAuOCAzMjUuMjEg Mjk4LjI2IDMzNC40MV0gL0JTPDwvVyAwPj4vRiA0L0E8PC9UeXBlL0FjdGlvbi9TL1VSSS9V UkkoaHR0cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9yZmM1OTAxLykgPj4vU3RydWN0 UGFyZW50IDI4Pj4NCmVuZG9iag0KODMgMCBvYmoNCjw8L1N1YnR5cGUvTGluay9SZWN0WyAx NjAuOCAyODIuNDIgMjk4LjI2IDI5MS42MV0gL0JTPDwvVyAwPj4vRiA0L0E8PC9UeXBlL0Fj dGlvbi9TL1VSSS9VUkkoaHR0cDovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9yZmM2MTIw LykgPj4vU3RydWN0UGFyZW50IDI5Pj4NCmVuZG9iag0KODQgMCBvYmoNCjw8L1N1YnR5cGUv TGluay9SZWN0WyAxNjAuOCAyMzkuNjIgMzAyLjI2IDI0OC44Ml0gL0JTPDwvVyAwPj4vRiA0 L0E8PC9UeXBlL0FjdGlvbi9TL1VSSS9VUkkoaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9y Zy9kb2MvcmZjNjY5OC8pID4+L1N0cnVjdFBhcmVudCAzMD4+DQplbmRvYmoNCjg1IDAgb2Jq DQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsgMTYwLjggMTk2LjgyIDMwMi4yNiAyMDYuMDJdIC9C Uzw8L1cgMD4+L0YgNC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvZG9jL3JmYzcyMDMvKSA+Pi9TdHJ1Y3RQYXJlbnQgMzE+Pg0KZW5k b2JqDQo4NiAwIG9iag0KPDwvVHlwZS9Gb250L1N1YnR5cGUvVHlwZTAvQmFzZUZvbnQvVGlt ZXMjMjBOZXcjMjBSb21hbixJdGFsaWMvRW5jb2RpbmcvSWRlbnRpdHktSC9EZXNjZW5kYW50 Rm9udHMgODcgMCBSL1RvVW5pY29kZSAxNTE4IDAgUj4+DQplbmRvYmoNCjg3IDAgb2JqDQpb IDg4IDAgUl0gDQplbmRvYmoNCjg4IDAgb2JqDQo8PC9CYXNlRm9udC9UaW1lcyMyME5ldyMy MFJvbWFuLEl0YWxpYy9TdWJ0eXBlL0NJREZvbnRUeXBlMi9UeXBlL0ZvbnQvQ0lEVG9HSURN YXAvSWRlbnRpdHkvRFcgMTAwMC9DSURTeXN0ZW1JbmZvIDg5IDAgUi9Gb250RGVzY3JpcHRv ciA5MCAwIFIvVyAxNTIwIDAgUj4+DQplbmRvYmoNCjg5IDAgb2JqDQo8PC9PcmRlcmluZyhJ ZGVudGl0eSkgL1JlZ2lzdHJ5KEFkb2JlKSAvU3VwcGxlbWVudCAwPj4NCmVuZG9iag0KOTAg MCBvYmoNCjw8L1R5cGUvRm9udERlc2NyaXB0b3IvRm9udE5hbWUvVGltZXMjMjBOZXcjMjBS b21hbixJdGFsaWMvRmxhZ3MgMzIvSXRhbGljQW5nbGUgLTE2LjQvQXNjZW50IDg5MS9EZXNj ZW50IC0yMTYvQ2FwSGVpZ2h0IDY5NC9BdmdXaWR0aCA0MDIvTWF4V2lkdGggMTgzMS9Gb250 V2VpZ2h0IDQwMC9YSGVpZ2h0IDI1MC9MZWFkaW5nIDQyL1N0ZW1WIDQwL0ZvbnRCQm94WyAt NDk4IC0yMTYgMTMzMyA2OTRdIC9Gb250RmlsZTIgMTUxOSAwIFI+Pg0KZW5kb2JqDQo5MSAw IG9iag0KPDwvVHlwZS9QYWdlL1BhcmVudCAyIDAgUi9SZXNvdXJjZXM8PC9Gb250PDwvRjEg NSAwIFIvRjIgOCAwIFIvRjggMzYgMCBSL0YxMCA4NiAwIFIvRjMgMTAgMCBSPj4vRXh0R1N0 YXRlPDwvR1M3IDcgMCBSL0dTMjUgMjUgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VC L0ltYWdlQy9JbWFnZUldID4+L0Fubm90c1sgOTMgMCBSIDk0IDAgUiA5NSAwIFIgOTYgMCBS IDk3IDAgUiA5OCAwIFIgOTkgMCBSIDEwMCAwIFJdIC9NZWRpYUJveFsgMCAwIDU5NS4zMiA4 NDEuNjhdIC9Db250ZW50cyA5MiAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJl bmN5L0NTL0RldmljZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQYXJlbnRzIDMyPj4NCmVuZG9iag0K OTIgMCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGggNTE0OD4+DQpzdHJlYW0N CnicpVxbc9tGsn53lf/D1D4RWxKIueDmzcmWLEtep6JYx+Jmc8pOpSCRlJClAAYA5Xh//elu AAQGxIAjbbkki+R0z6376ys4PyuqdJ3cVey77+ZnVZXcPayW7PN8kW9/nS++bVfz6+Q+zZIq zbP5ze62wrf+sUqWq+L779nbd+fs7eL1q/klZzFbrF+/4syDf5yJOHSDkEWe7wq2eIQh729C dl++fuWxe3ol/Obl+9evPs+Y8ytb/PD61QVwYxdX52xuWNjbvKryR/PaLvO8Olgb566ntPX5 gRsEiknPjRSt7/OMi94aakoxQhmEbujplGxA2A7lnnA9oQ395Piz1Z1zKmYu+7D4p4lQKTcK NMJT49DI9SNt6MJRM/YLTORy3/NMdDF3pbTbRqxcL9aGfpk5p3ImPIfzGedfHCeczZ1TNTuD WR/xo6UbM4fLZqAncSCNEB4P8AXQjM8mPZjNvLA/Xr/630ZE2PwahePq/MM75s1/TLJ7Nltl p+/fOsPrF2N3H4bKFfUUzHM9nO3u8+zzrWFdQeCGakBFFKabCWEHQiP4PPvgCDm7wSP5CKcR w2s4o4tzJlQYil+NVxzDgnVGxrsKhBtHw0n56KSLT/hePfcbuBfpnMLFnAxZzy+j4QmKKHZD fzBLts6LR1JGViHjFYjhHfw8ZLnpqiOBV62x2eT33w5XwL3hEhQgSyQ02u887y3//ujiFej0 gNJ4nIqrg7HXRX5fJI+PjpylIHIb3CvI3i65xx2Xh8Jq2kJ7V4HnqudtgQex63GN0iwRoTgY +36XLpMMLweXzKqcJU95usTtPDmn4Wy3yVZFcptuEKhSus10VbI0Y9t68048e6TNNxsvWfVQ 5Lv7h/HdD3esQANFe+ENC1auADw2AI7BrEpxShCkJFuyHcosfHggEwdSGUtX+jp313AqIg4O xlrADDfBzBBbRIBy81xs6VNZYUtHMIEtoSfVMWzpMzqGLfqk49hCk5rOXoZuFOt8TBsVCpTV 18dyBCtugVIhOB9cpz1hH5zTYNZgFYk3iNnCOfX7eGUPQt7w9GxByAusz115h3d00652V6B+ qtk3VOSFjrvpH7tVabMPH2bwxUv24XN/SDmiR2NSxCX6RjXF2Xa7SfEycN3JXvtB6eXhJi32 I3COUJvDcj8iiIaUxnsRIT8Ye50UFeNv2McncInwJoontBOrryYm0o/ATdOZIOqhMuHW8wam QUC3VTmEsxEUVEK50rwBA7AJS2ALAGPFs4FNo7IBth7BNLAFR4BNY3QE2AaTmoEtmAY2jc8R YNPGErApOweMu0IOV3wIbENHzBbYJIRvOntrXJMDwglYC4ZDx1GtIp/gWXAm3Oglq/e9aEBo B2ZBGLtqfw89R7iEpfv6buBDVuK17GrQq++nYMVqs0e+8oHQcGu1WwnOuK8twXK3MvYHhMa7 knHkysE+DVBHQQS+/IpbIA/O6ggDv/PE+sCnLHFPwN15XOdjAXzSFviU/wKPTqOyAr6OYAL4 Yq7CY8DXZ3QM+PRJDcCHk76pw35LkAL7KPwB92ztnEazWkFQQGrv64Ug5bmhxt5a8IMB4YTg x8Ohk66XAep86caDy32mi6ZgIX4wudt+tDkSMtZXLUXnF/yMcR7oLIZ6eBc1HFXf2DtYW1re bfJyV9gEXmCNIJjSeBsDr0gdjLVQU9WqaXl6cTOlply8xD/pUx1TU8z+9QjAezVmbgCZ5XD0 MV3sj11gSFwkgK9LVMUEruWEXbkML61iycY9SJv2z8wfOSahKCbSZvkCGu3FwPKLczLJMNDy aiNOCdjNUOd9XeTbvEwokcDyNbv6Bjv6Afbx80+MLMWX2b8cHtQO7i276ezI3QqMPju7xnzE hxJ/f3EQisiA3iC/Tg+Bk9fkKYYhgkGewpGzaW7AB1s3aswv/mzCkQcQRUqcpBntYV0kZNGr YndX6RpzMHE0nZuUynNlrK/hhAk+xTIe2QuGFUM+ZTV5u9wb4xOAxZc6n7Ms2yVwORt2ibdG BuITXghZjQU7z7M1Ce4KBDdrA5kVCa9FioVPXA2Ahx83y/iBbn2XTR43F2PcIh8T2hq36aOR o1yiAy6oSNNKydWYVvIQI0njgrSjutkmWcfONye+JYuGxYv2HDGfGdJE9fvFffvXJyrHPMBl VXi59GsLr944MSbw/frX709w/xnqKtxzCdeMPy5+kpZo31cOj+E13jwEJchthy6dMW7yafvd qibiJhm5AdfHIm+aPCFEaFby+3aO8vg7iidt4x4+pdUvaS28WR29JeAt3m76AT+7TIsSNkBv nMNuc/gUd7xuc0W49VXzJjHCF7+hv4pJjOb/dqDbnuOSWEwJSPCMUobyOJpR7T7vR4tq3T3v ZQCCJEnn6UmwlX4cw7vF6vWr9V/Nyhlausu+D7GF363oGca4R2pnjHsEn+GqAIjo1wWWmUyW GeLbWA1Ij1jmw2nyx8cmU1W/zNbpPU66I5O9T2NdZLvH2s3qvesaPU7w3+FCjCubwILoRViA HoF8Fhagsr+psSCmHxL/RgcaxYeT4SFEg63ytdpCimAEAhFgxNBbEjsFwZGhJDko7ueTmhMf E04EGgSPHv9awuo9xu0WYQ8l7qa3SfgDFf2JfLFmG/gG7RAPhEjdFmfyZuzI6RCvNFs6NWL8 6QhR09GQNZ2dKVdIBQ7txmy1XUk3jOGIwL0IQRkDz4Ng+Yi2ixdUVX24Qp+/TPE7UkvF7wga jSQP5BzOfULvpRpQHtP7/tiLxQ25fBSas8Un8JqkUZhD1w/tphLSOxgrPd+YO4zsOfv8YCw6 /NxHaTNW4dGXD32d7BmV4cHNhLP/g1OTs7cXn/6GXj3dVRM9p3fJho3H1A2qVkVO0WnJ1vgR uP8X63U/Z1Bj6lNbzrRJN/kQpISa6OCMt3Uq7h16r+tVhkFH67raZKBk6Aa+ztoOuUVbV1wX p+f/sEZuT6CP/3Iv7qsjOPwK6j/c1rGh0YR/qYu/88aH0fwnHLhpzj3cuznzmgeP+0x+c3jY GQEawnGIB0Sy+fGan98aP6z/Wdz8NJTqgNBvP/Qaatf4AvkHDdl8fzS4rrGZW+a4Ra/3ef// bTuFlXcnhPmmDyEVvDt4S7tnW7z3PDf2mQTvjitrvJemxQ1AXkVkTV4C8j1SO5DvEZCmclRV 6c1uMbD8+AscuDETyjkehcbgCNaPTia8FhhQnD/eUqNC8YQv0M2/3awY5ip+2SJeQNALYFKW rZtnMuUc/Rrz2iawQr3Ey1OhdNXzIr6BlzeOF3kT69SaXhpNIXgscX8REwEemM1Y6mPzXjSV dU7kAJbuarACZEG/3O85n1ULbatmX43qN74Zqv5DGxPWjmvjxxouD+t8ob7EbcMD//+7o+oj um8Qh8Sk+akdYUxdIKr8z91+fekkbkzE+SNRYYjVGu3OLXFDhdSSJZRCyLHFDWPIOsQNX6F3 8CLc6EgtcaMjALftZ0c2UeGnhREvBAfnUCc8hhf9scT/bP4WrrXIv2JiZIXSVbBLELS82D0y TI18mZkEP6DgRGMJfhrCnLHgXHtbGskgiWvy07CuMZjsbVJ2Vj0jV+oTQt0fu7RYPbYZjqwi B7jEPCz1D1YPK/YBd1vukqzO2toW/ZQiK1VPf+VgH13dRfeIbLKK5eTnsevdbdcfsvlmPA2P 1LLP1IgykcJB2lgq4RS7cl80X9YeKGE/+phg2+ls6i6V1RDtxtK5sCQ85v40xsAfbcFg7M94 DkWJ2WduQiMlJRb8NDqIE02jIXYYjnYtLY8x+TNpeSC0Cfh/Y3kalG5BdN0H/10H2QOj0Eba t30L1ZNvsgYmTQywN7q38glBqhuGtLFtruMPDGhwISmlwlvLgjas85BN/oGP/fNWS5A8ciXX x+opzl3fsNUmFI1fWac/p8yOMaXU5SRizFlrtzxua0wqEnDCsP7qp02UiF0eMh4HSGCZuBRH c0OticLu4Be6th2ppYnqCAD+rt5dXE5kLjjccqiTWOB8e2baTAi0m6+IZ0mBiUmG71DklywT Qr8Ei11+XeyiymNT8Lqsu4uOX6qiSoY27Qnr2gkuLsiXphdt4gb+fM+uEmwC/pqQGjcKy66o 3pks0b9OaJlW1gWbVrx2dtgPGN+6eocqAADhNekCWNUlJvhhazB5xf6F8+TFv1OkqAey9+Tb 57utSQfBa5Vcn/LE6D56B2PtEFhOJOTMCCyj0A3/K9+/gYqqrbFkTaibNGi7bEjqCtBq1aQ2 x930NnvQ5g02+dYJaJI6KXrX5hyy5me+d+bpI1pKg++tq9/yxOypW5dwaoh73EzBmzT2c4/J dEidC9ppmpGuowoxWdujOgJvMiLjI0B1KFNrBW/Stn8T67k8fBG89Ujt4K1H8Hn2E9Xx9w1N CxaZH00CpBNCJzc+/iSEyyN9rC+NGCqBc6CPPuLh65tIeg8noPBvWJMNBuHMytpHrHZ7BxI7 Hm6oGZO0Zkn6siwZsgEXebHC8fuuJ2J1j3BEOYcTRie1bbOcabJh19Q4eLvp3FBHdYUm85H6 HKyr3Yn6XGGjkX6iuChpB7q+j3Jb031q3eentKSzgUWqE/YXi/hE+K4vdW7jSeKEOgyW7LpI nxJsFJ1OHV+SY08uPZyn0aWmFhZt9n4nyM23sqLY7tHwuM/wUBQl4WtGGBx9LO6TLP1PbWyB o0UoIXyBCKKx+osTgZjUjRB5msGrii0SMJblv42+IvXoaFyM0MWDg7G1oawLWk26fVHszUKJ MaE/owbkmBqQu2JJ1jxHBCf4tDph5/njdke32KTWbI5R9ED0pl8BqCUCToE0h0z6u/QJexHE cBnrnILy2ta3mkONViZFJHY/YmGXQpB6+wnZS/w7atX1rE4AphuGD9MZw7WIGlS1vVhaf2Ov 6qT1h6XEL+71iKmfgkxu4TQptqb2iXFN6QTGwmfDbNeEbYBZcIL7SA6NM9yME3T5uGuUBgpV btt47QadL3p/715YWvaJLOmhZRcKa+3aSXWW3Vypx6KdRtaTSlINMhFlPtZVp9/s87p4ZBjg MyPPvtmurH1QBVo1t7Svax8Wuo/cNf6Rrr5iNZteR05b1THoQSxdX+mnZ7JJCmI9oQ/Fsoxs ncOHZjFtiDslGM9pr/FBSZVJLkxi4YNYDPY17fBxgaaOBwSzQ4dvf9f1IJ9aqm29QttuHRGr l3qFPVI7r7BH8Hn28eo9xp9nN+eo46Q8VyCc5t52fGRE43DEfRubbeBWrdM7DIj7jhSth7cL Ytz12JcZF3Ouvjgw1ibBKgOJjZPa/Ge7KgfbiNHskt3ku+Kuibsbd4XcElxePBt1dWxsJCZB 9z5LG9cnln3cnsJwXWPhsvrUTtCoKWNXd/0onEZp8/DF0fRSK6CBh2DxzLZujcpKNjsCkJb3 eOYfTY0kMVjxAYUxSPEkfkdDfznY1iTqXbw7MxckFD42cLiNY0KvbWNLuXT2Hu13vtsadySk wiKd1Y6waxBwSBv77sxRdj0iiHRyQIyuEz3s00o/REv0ALrsN3bTU+aoK/cP7KxEqV5muL2y bLvJMRIz7bDJfVvtUKG7rQ52WPfMYBv6JT4G3yyaHnXKi6HTPWZRJHdDobM15Yl8uJDhWDsM UCj/hvt3uzRcnXTDetVPbPg8dXdZNSb0WU7lwiNfHxtLnC4UPDJ5UQA6seUE0ouwaqGNNT6N KYV3MNjIGDWN62NFG1ntNiRb1HUw6dpj6mZ4/DYoaJubxvbI+Pko2KeyQsGOwBYF+xTHULA/ drG4vkEHzpywoWBJozkGftrqnwt+NhtpwW9sIydMK9lxG08BIAHCbI0dGu4mXr5vkgQgIFdJ VwVN81250Z8+S9KsV7q0rcEKkGfezlv7IbusWhXrVVqx6yJf7u4qqyfURBC6nq/xs33oPpRD yomH7gPXC/Wx7S2PFHDHny0E2IadYcNgulwV7KaCw0qK5XH4xqBFCX32E9bMj0BndeQc1Ebu v4tlgMvCEpfrZyY0VmaBjbGlRhsbywlMxm/OAOi0Yx5RJ5M21jd2rsbiYLCRceyjYdDGShMm Gz1TfBBqOKPN84bGSssAk3kYv8Az1ahsMLlHoMcxZ+dXZvDEZ1c1yiPYaZylFy0Z27YUhq8a h/Suny9v10v31wZVHgRV0j6ogkMPuT7Jzf6pO9DqZe0Vtn0oBGcJfY2InWIGfme5u6LoYx2Z bY7jg+ABeksaHy2CMvoO2HAdDyht5NT2G4m48l/gO2hUVnLaEegSdDUhphLFtE94TExNk0wG 9U12QZM+PufiGdJHzTza7APp28tMkbalnRLL16AFiSnQCKLh9o0xSQgxyWD7OKO1ePrggg3u aKT3Z+zEpeiZ206chVGcBaW/NDobcbatY3KYWj5fnPtUVuLcEeiSRoW4qxtnynUNkFTjcEyu TbMdl+t2PSB0jWzDMC+mjJWdbNOjRdoK9rK9ZNc4abX3q4qMpNrvYaOVGMURfllUy52cLkRo C8dLeORc9hnscdUkgkrhF4L0SYxOpQqHQ6ezXZOcTbJt+1UjYYRh/zNFu09kI9nd+KZM+xER jKpcdYuOUa69GNGjT3/sC+N6Q2veC5wLS4ldLqJpK62lC7vlKvYOP6SHJteVXV5J0HfF6TuL 6qZvzLaa+v0kCJfPNUJzrx3Hnur+0I9Fig5GVjU24Mc6bHsgbfnaVsDbN9iHbJnilwIlFT7I 9Cd9tRG1Vx1Hb6wBCOPJm79aR7lx/7seuGq+62FZOE0hcz3s6erjeMA1FlON+36oDU1XldFf VBKTgFaMQTtV3BvKuuTpY7oxd3FSNqpPNqkYAqxrrK+ooFpx+y1N5jDFs9wIIEYca0M9z63+ JMmvjBGMoFbtPpUBbf4fbX2dfw0KZW5kc3RyZWFtDQplbmRvYmoNCjkzIDAgb2JqDQo8PC9T dWJ0eXBlL0xpbmsvUmVjdFsgMTYwLjggNTcyLjQgNDAzLjIxIDU4MS42XSAvQlM8PC9XIDA+ Pi9GIDQvQTw8L1R5cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwOi8vanZucnNzLmlzZS5jaHVv LXUuYWMuanAvanRnL2RvYy8yMXRoRmlyc3RDb25mZXJlbmNlX3BhcGVyLnBkZiUzZSkgPj4v U3RydWN0UGFyZW50IDMzPj4NCmVuZG9iag0KOTQgMCBvYmoNCjw8L1N1YnR5cGUvTGluay9S ZWN0WyAxNjAuOCA1NDMuNCAyMzcuNzcgNTUyLjZdIC9CUzw8L1cgMD4+L0YgNC9BPDwvVHlw ZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHBzOi8vY2NlLm1pdHJlLm9yZy8pID4+L1N0cnVjdFBh cmVudCAzND4+DQplbmRvYmoNCjk1IDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsgMTYw LjggNTAwLjYgNTAzLjMzIDUwOS44XSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0aW9u L1MvVVJJL1VSSShodHRwOi8vd3d3LmV0c2kub3JnL2RlbGl2ZXIvZXRzaV90ci8xMDMzMDBf MTAzMzk5LzEwMzMwNS8wMS4wMS4wMV82MC90cl8xMDMzMDV2MDEwMTAxcC5wZGYpID4+L1N0 cnVjdFBhcmVudCAzNT4+DQplbmRvYmoNCjk2IDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVj dFsgMTYwLjggNDcxLjYgNDA5LjY0IDQ4MC44XSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUv QWN0aW9uL1MvVVJJL1VSSShodHRwczovL3d3dy5vYXNpcy1vcGVuLm9yZy9jb21taXR0ZWVz L3RjX2hvbWUucGhwP3dnX2FiYnJldj1jdGkpID4+L1N0cnVjdFBhcmVudCAzNj4+DQplbmRv YmoNCjk3IDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsgMTYwLjggNDI4LjgxIDM2MS44 NCA0MzguMDFdIC9CUzw8L1cgMD4+L0YgNC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0 dHBzOi8vY2FiZm9ydW0ub3JnL2Jhc2VsaW5lLXJlcXVpcmVtZW50cy1kb2N1bWVudHMvKSA+ Pi9TdHJ1Y3RQYXJlbnQgMzc+Pg0KZW5kb2JqDQo5OCAwIG9iag0KPDwvU3VidHlwZS9MaW5r L1JlY3RbIDE2MC44IDM4Ni4wMSAzNzYuNTMgMzk1LjIxXSAvQlM8PC9XIDA+Pi9GIDQvQTw8 L1R5cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwczovL3N0YW5kYXJkcy5pZWVlLm9yZy9kZXZl bG9wL2luZGNvbm4vaWNzZy9tbWRlZi5odG1sKSA+Pi9TdHJ1Y3RQYXJlbnQgMzg+Pg0KZW5k b2JqDQo5OSAwIG9iag0KPDwvU3VidHlwZS9MaW5rL1JlY3RbIDE2MC43NSAzMTEuMDIgMzI2 LjY2IDMyNC44MV0gL0JTPDwvVyAwPj4vRiA0L0E8PC9UeXBlL0FjdGlvbi9TL1VSSS9VUkko aHR0cDovL2NzcmMubmlzdC5nb3YvcHVibGljYXRpb25zL1B1YnNTUHMuaHRtbCkgPj4vU3Ry dWN0UGFyZW50IDM5Pj4NCmVuZG9iag0KMTAwIDAgb2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVj dFsgMzczLjgxIDMxMS4wMiA1MjkuNTEgMzI0LjgxXSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5 cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwczovL3dlYi5udmQubmlzdC5nb3Yvdmlldy84MDAt NTMvaG9tZSkgPj4vU3RydWN0UGFyZW50IDQwPj4NCmVuZG9iag0KMTAxIDAgb2JqDQo8PC9U eXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291cmNlczw8L0ZvbnQ8PC9GMSA1IDAgUi9GMiA4 IDAgUi9GMyAxMCAwIFIvRjggMzYgMCBSL0Y2IDI2IDAgUi9GMTAgODYgMCBSPj4vRXh0R1N0 YXRlPDwvR1M3IDcgMCBSL0dTMjUgMjUgMCBSPj4vUHJvY1NldFsvUERGL1RleHQvSW1hZ2VC L0ltYWdlQy9JbWFnZUldID4+L0Fubm90c1sgMTAzIDAgUiAxMDQgMCBSIDEwNSAwIFIgMTA2 IDAgUiAxMDcgMCBSIDEwOCAwIFIgMTA5IDAgUl0gL01lZGlhQm94WyAwIDAgNTk1LjMyIDg0 MS42OF0gL0NvbnRlbnRzIDEwMiAwIFIvR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJl bmN5L0NTL0RldmljZVJHQj4+L1RhYnMvUy9TdHJ1Y3RQYXJlbnRzIDQxPj4NCmVuZG9iag0K MTAyIDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDI3MzU+Pg0Kc3RyZWFt DQp4nN1a+3PbuBH+3TP+H/Aj2bEgPPjMpOkkjpPmern4YqWTjp3J6EFJbCRSpai75L/vLvgE JVC05zqdNhnbfGCxC2D3228Bjl9mebycznPy/Pn4ZZ5P5+toQe7Hk3T3ZTz5sYvGt9NVnEzz OE3Gd4dZjo/+Gk0XUfbiBXn1+pq8mlxejN9wEtLQI5Pl5QUnDP5zIkKfej4JmEMlvNlCs7d3 PlntLy8YWak74Za3by8v7i1ifyGTny4vbqBHcvP+mowNxr1K8zzdmu17k6Z5xz5BOKfM0Qx0 Pep5DpGMBo6yTzcBBaumnAnKxKCmInQoD7WmH23Xiub2SFiUvJt8MghK6VMmNcGRqanDqO9q TSe2Y5HPoIhylzGTXCCp4w8ahgw8Kjyt6YNlj6QlmM25xfmDbfvW2B451kvQusVXCxoSm8uy IZPYULUQjHt4AzKntTkhaOu1C13sxBIK8DF9Cbk06HBlQL3AqORflxe/ln5Hxrfoce+v370m bPzzNFkRK0pGb1/ZHZ/n4pRD+b5DRaGCMMpQ2/zeup8Z7PI86jsdKSVhWn0fFp9pAvfWHc74 xB4F1jtbSOvzF6Mjcyp1UaPPe4KGwQk1eXaYw5LnhyyCPwsyWWfgfJE9cq0pXOTEHsFav0NP SJZpZnvoHfBEvYyxhzQhEdx83mUYGXC135fPqckdPVjoHsO11bvbTZN6Abl5ASUJug5VDdqT NBRKT/E8W1VXHxVWrXEsOGL1a4dDgHB4hjdjO0Svd63fbcHhl1dcUHyUQsOpajzyrHhvghDh UhG2jTA7g4AICKXeFrXs1JI4VgI/tWqc7hX8VebN0YbU5qG13eJ9jAvWjCkqO9gXYY5Pw0Lm KzzF8ReysLQ+NIRLWk3FutT/F/hRY0edX8uhz8qfYulHnFm/gYY/z2vFcTcNtMNRPCIcHeZT 2VnL1cls06xxvf6COgERDuSuEILYI1l0ebH8kxEmpMmuLjY4LuVBY8xjAKIRHQgQjQDkhynM 9zdcgLVywHVshAgh1RS0pc9hRL+mKzKhV+Rv9ihUHrBIZ1NYeNf6YQsGT2DNVaN/UPIRUQC9 bhmBU2T4K0GxeemM5EOSp5tUwckKX6guyDJFv8zIdf1ohlcoke0j7BM7OGQxOBi8LISO0OPU wCRHFyoG9mEXQTBnUzCqgjEczqaNd6i2xDzFSa7Uu+NkFnSdVUC+heyvKZygkrUa9zWyh3S7 O+RqUOQnG9QfsmS6OZUn9a5l6Ko4aHd9RRZp/Az7HzYP3KduJcsZ5SyU43m6/WeywT7GMzuw vuPYD5BgroAEMOvDHCYhT2cRBvoVAQrgmLDdFQrb2zoGZGZnYMh5wEP94LHpWJMaEm0tAVi5 l7A+n+2Rb72DfOxZ5nQMEKWLngk1XQ0m3sM+B1aMCg+5MUkAhHFdNgUHRV9aFKkYbZ0r7C6j NFkpx0uXBGOr8O5FrNx5XkJ5nmakoBwd1z9K99Q0KkcK6psnwLD07tClD3zqeCf6PUUUvKcQ hZaG/x5R0IZ5hihobf+PiYL/eKKgreVAouAhbIsWUWCM8XNkIRjqvl4AWPQkstASHQhfLYER 6MEpAqnJzY0Ju6Bk88QpTecQrBHQEOzmO2IQepJK1nWlcJP8FmdpslVOmpMHsAmw7gZqSYAn VZDsKqF4GStHqQFKARGk4T3kJEigbzdIPSBl36L/dFNn7Q5eiGik2al6Q3RzrK2pRnGZQ32h yw0As3CoN7gBdcRAMOM9dWsPmjUq/lA0w7CGqYdnavZ3m2nVz7KNODCz4AFH+KMwsIApXiJL vAS18RyTzxQfFniQJqBBtV6UmISIoeBKSUUVxCmZstseDOE9teMxy3JDyrk+hUNBBFYY/nCI KC4hyN0Q/p0DEW4shbp+I0MaiKehSCM6EEUagftiO+JndIJbjNIeHGGiI3oOQjQ1WRntyyUs f8NQCBISpT4u6wVAhnVOVOxnaZ7iJka6IbhbFVTG8tLYB/uKfIL3CZYMRUmyKMAmL2jTHim5 REquOgdejj5LbgCmJLgvuJbSV2RWVcHUFQ9WOUK9UdVQnKge1P7Jfj+IjntCZZ1y/LgLgz1t YSifQPudiQFwQV1fFzayBe5RV+ptVQ1y83HyYJsQULiQBjtSA3dpjAV0L15xF9jjY+DqWYVS Jqg6KEwzTQqHxNjS2jd/knqu1rSGIHQUZVCNjWkJVTV92uzGvcBkrH1OAJNwXcpcba6G4hJ3 cA84FJQBjgzFpaHk3A0V6j0Fl1qiw3CpJQAB8wsEiXJmIyQFXQvPQpKuoWE1qAsXPf89zb7Z 0nxs4AD5DPVuyqIfmTMUd0k8n2JJXfIik5NKAeyF6x1R0rLoOlWb9buSYSUKp8hb9Mr0sDOF tuO5NOyZkp7QflJh5QaScvePjW3VEsd5qCqruoBZKAZZ1zmqVsE+Dw27gInyVLSqmVLviurl dNXUpiCR4j87u4l/pX3cMaoiJZpVX8vaLKrGq8ZTqftW1Vlzu2BORYl2KIUa7lMzLmRJ0MG+ F18eVT15nHJHX7DTAGPY+nI8p9MBeOz5bS3H8zHLaGK9cOYGHCNDQHSDQAFnwVk4G1qsuZ6k 0n0anDWiA+GsEQCwuUWYeG/EshBq247IOSzTum+Q43aDh3ntUoi8TxcH9TQy4VoA2ccfpl4E wVHbowJvDiDa3loybipyKrne1x5x8ADyajRI+JptVewMQzwYAIWQEGXPjPZAobHW64VCV+LW 8H8KCs1cJ3Dbuu//pyATtUCZCTZ160xg4IWxXxu701IS7dtEfdAoHnMg7EhAGUdfQDM0NlIS S0ht6vuBDXzdDYkAQHTdoZtQwljcdoFNOhhJTwK2RnQgsDUC99bna1VivX4DQWncQAeK6gld 7hy6mXQcpyrviEszYEG+1sVzxl7xF2ezFcZTR9KMgzCobtvJOlL15XeErTxK9vFsU5WR5elQ soxXWMAesN7UjqmKBusKRb9t1PN9Tl5jtbpHSM3iXR6n2CwhbyDq0myL53j51TBkEz0Hsz3I JiA++FORLVSbTzW7qXGlJj4lMoSGQuux+0q+0vndFqJoPK92mpaFPX2o0VPeHu8kMYlfEGmT 06CG8QsJ5nWkej7uYeFRWy0SipNbMgXH2OxTMovQ+RJSnN7uMHtiKbK/MkKY7ylK11agPkxR 6fwDTD9Mrjo2urnuhzYeIiXgDqOCG6DtVIzDZPitubu3eMADhns9+AUTlw82XByZf+pcFsA4 lO0OYST4WUtxvkvq7SF1eJakm3T148S3S+xokZ2QBr7W72kkObJIQj3fkTQvtBsctb3bRcWp DtIpRXvmxVDUTZrhkEqwQLhxj9BmyA4VcqSw0ljDEypYHbKp0oAq7ZKCNdCECfg0OiHLRJk3 au6LQ3dYT/Ah5boOui5u3OET8ncM4eL8v58nYhXRtdfs1eyoLadiQKkCJLgraGSXQIL7DDKl 86HH4Y4vcZ/6kcfhmtSQTN4SAGzBE5tbU4EiVYGiCZg6D31g3p22jHnM/C2LS6Xe/Aw70O1+ f3uLIF/t/CYLhL1ssSeIkukB7zE5lS52RXoHKqXAry8HDVRKjzryeKA1grESwdRu9WFWxsza SCmBGg7T7DgcT0G1tneFkjIUZ5gMzMURx9Mv45S33PffM5Vi8g0KZW5kc3RyZWFtDQplbmRv YmoNCjEwMyAwIG9iag0KPDwvU3VidHlwZS9MaW5rL1JlY3RbIDE2MC44IDc2MS45OCA0MDku NjQgNzcxLjE4XSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0aW9uL1MvVVJJL1VSSSho dHRwczovL3d3dy5vYXNpcy1vcGVuLm9yZy9jb21taXR0ZWVzL3RjX2hvbWUucGhwP3dnX2Fi YnJldj1jdGkpID4+L1N0cnVjdFBhcmVudCA0Mj4+DQplbmRvYmoNCjEwNCAwIG9iag0KPDwv U3VidHlwZS9MaW5rL1JlY3RbIDE2MC44IDY4NS41OSA0MDkuNjQgNjk0Ljc5XSAvQlM8PC9X IDA+Pi9GIDQvQTw8L1R5cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwczovL3d3dy5vYXNpcy1v cGVuLm9yZy9jb21taXR0ZWVzL3RjX2hvbWUucGhwP3dnX2FiYnJldj1jdGkpID4+L1N0cnVj dFBhcmVudCA0Mz4+DQplbmRvYmoNCjEwNSAwIG9iag0KPDwvU3VidHlwZS9MaW5rL1JlY3Rb IDE2MC44IDY1Ni41OSAzNjEuMzkgNjY1Ljc5XSAvQlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUv QWN0aW9uL1MvVVJJL1VSSShodHRwczovL3d3dy5nbG9iYWxwbGF0Zm9ybS5vcmcvc3BlY2lm aWNhdGlvbnNkZXZpY2UuYXNwKSA+Pi9TdHJ1Y3RQYXJlbnQgNDQ+Pg0KZW5kb2JqDQoxMDYg MCBvYmoNCjw8L1N1YnR5cGUvTGluay9SZWN0WyAxNjAuOCA2MTMuNzkgMjU3LjMzIDYyMi45 OV0gL0JTPDwvVyAwPj4vRiA0L0E8PC9UeXBlL0FjdGlvbi9TL1VSSS9VUkkoaHR0cDovL3d3 dy51cy1jZXJ0Lmdvdi90bHAvKSA+Pi9TdHJ1Y3RQYXJlbnQgNDU+Pg0KZW5kb2JqDQoxMDcg MCBvYmoNCjw8L1N1YnR5cGUvTGluay9SZWN0WyAxNjAuNzUgNTgwLjE5IDQ2My4xOCA1OTMu OTldIC9CUzw8L1cgMD4+L0YgNC9BPDwvVHlwZS9BY3Rpb24vUy9VUkkvVVJJKGh0dHA6Ly93 d3cudHJ1c3RlZGNvbXB1dGluZ2dyb3VwLm9yZy9kZXZlbG9wZXJzL3RydXN0ZWRfbmV0d29y a19jb21tdW5pY2F0aW9ucykgPj4vU3RydWN0UGFyZW50IDQ2Pj4NCmVuZG9iag0KMTA4IDAg b2JqDQo8PC9TdWJ0eXBlL0xpbmsvUmVjdFsgMTYwLjggNTUxLjIgNDMyLjU1IDU2MC40XSAv QlM8PC9XIDA+Pi9GIDQvQTw8L1R5cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwOi8vd3d3LnRy dXN0ZWRjb21wdXRpbmdncm91cC5vcmcvZGV2ZWxvcGVycy90cnVzdGVkX3BsYXRmb3JtX21v ZHVsZSkgPj4vU3RydWN0UGFyZW50IDQ3Pj4NCmVuZG9iag0KMTA5IDAgb2JqDQo8PC9TdWJ0 eXBlL0xpbmsvUmVjdFsgMTYwLjggNTE3LjYgMzA1LjM3IDUzMS40XSAvQlM8PC9XIDA+Pi9G IDQvQTw8L1R5cGUvQWN0aW9uL1MvVVJJL1VSSShodHRwOi8vc2NhcC5uaXN0Lmdvdi9zcGVj aWZpY2F0aW9ucy94Y2NkZi8pID4+L1N0cnVjdFBhcmVudCA0OD4+DQplbmRvYmoNCjExMCAw IG9iag0KPDwvVHlwZS9QYWdlL1BhcmVudCAyIDAgUi9NZWRpYUJveFsgMCAwIDU5NS4zMiA4 NDEuNjhdIC9SZXNvdXJjZXM8PC9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0lt YWdlSV0gPj4vR3JvdXA8PC9UeXBlL0dyb3VwL1MvVHJhbnNwYXJlbmN5L0NTL0RldmljZVJH Qj4+L1RhYnMvUz4+DQplbmRvYmoNCjExMSAwIG9iag0KPDwvVHlwZS9QYWdlL1BhcmVudCAy IDAgUi9SZXNvdXJjZXM8PC9Gb250PDwvRjEgNSAwIFI+Pi9FeHRHU3RhdGU8PC9HUzcgNyAw IFIvR1MyNSAyNSAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1hZ2VDL0ltYWdl SV0gPj4vTWVkaWFCb3hbIDAgMCA1OTUuMzIgODQxLjY4XSAvQ29udGVudHMgMTEyIDAgUi9H cm91cDw8L1R5cGUvR3JvdXAvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCPj4vVGFicy9T L1N0cnVjdFBhcmVudHMgNDk+Pg0KZW5kb2JqDQoxMTIgMCBvYmoNCjw8L0ZpbHRlci9GbGF0 ZURlY29kZS9MZW5ndGggMjMxPj4NCnN0cmVhbQ0KeJx1jj1vwjAURXdL/g93hKG2Yzk2kRAS CZC2KhIIb4jBBZNmIKbUHfrvGxALH9Gb7tPVuYePT7Heu23EcMjHMbrtl99hzW04brj9O3q+ cFXduFiHhq9+P+P59erdzp9GI+STArmlhM8SZLB7ShKI9hLIzDBtMBAZU7CHtlKuDKofSgSq S5LpNZaUrHvob2DfKZm2NEznBXiHWB5iDIdut1kI8cFtwIS60Us101pBpiyTF71bg29KllcP 8MXZYF68TSD4h2sq9HzzUub9u41EPlswRjGpnkw8wJMu+D1RC6Y6if9+W3BxDQplbmRzdHJl YW0NCmVuZG9iag0KMTEzIDAgb2JqDQo8PC9UeXBlL1BhZ2UvUGFyZW50IDIgMCBSL1Jlc291 cmNlczw8L0ZvbnQ8PC9GMSA1IDAgUi9GMyAxMCAwIFIvRjIgOCAwIFI+Pi9FeHRHU3RhdGU8 PC9HUzcgNyAwIFIvR1MyNSAyNSAwIFI+Pi9Qcm9jU2V0Wy9QREYvVGV4dC9JbWFnZUIvSW1h Z2VDL0ltYWdlSV0gPj4vTWVkaWFCb3hbIDAgMCA1OTUuMzIgODQxLjY4XSAvQ29udGVudHMg MTE0IDAgUi9Hcm91cDw8L1R5cGUvR3JvdXAvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdC Pj4vVGFicy9TL1N0cnVjdFBhcmVudHMgNTA+Pg0KZW5kb2JqDQoxMTQgMCBvYmoNCjw8L0Zp bHRlci9GbGF0ZURlY29kZS9MZW5ndGggNDM3OT4+DQpzdHJlYW0NCnicrV3rc9w2Dv+emfwP /LjbsWWRol53nc7k4abpNY82vmemHzbr9eMukVzvbnO9v/4IkJREShAVxtPxdm1CAAjyB4Ak xJw9uT/cXm22B/btt2dPDofN9mZ3yd6fXbR3v55d/HG3O3u7ub5tNofbtjl7d/xwgD/9sNtc 7u6/+449ff6MPb14/Ojse85qdnH1+BFnqfqPM1GXSVmzKq0TyS4+KZIX70p2vX/8KGXX+JvI za8vHj96v2LrX9nFj48fnStu7PzVM3ZGKPa0PRzaT7Ru37ftwdMtY5wnqXT0k5lMCsGyGpV7 v3q7lqv79Wm2ul3nq+agRHW/sHef17zA74f1qVz9b835anf/caMeaS4HeoM0yz+XSmTV8x/2 77fHj352qWXJk1oyURhjvV+9AEm7Zp2tdr+vebbanCiFypVI1V94MS90wGYsFo3Lzt6CWV89 e/mcpWc/bZprpoSdvni69gaVC8dquUxkxcpyWgCyVlLyIilKVoo0SWsmK5HwjOU84Tm73z1+ 9PdvWKNoBxrwKQ0Mn0IiI675SOQj5YCR1lQwLv0h5kWWCMFKmSZZZdR9d/6LGsaXMLbn79gb Zczv1Siylxd/HfTjZ7TVV0oXhUzyzJV++vBC6kRwV8gFg/n5i+rW+TP18eaV+oCf89fq47n6 eaJ+LtAEb+BP7x5aKZmpJ1ydmCtjahoKM+7oHtQ8K9Q0UzIFS5NSCRaJqFD61Tdds0gKNdkT XkkgEn1zkaSgf/c8fFRyql1I2+4+X1bSCgADpBQFcpikUN0Xjg5pmnm9yKqkGnSj8DiYZoeB 24+OwnRDU0xYAkcSW9Q4pkJ6lrTNUo7bdTc6BiDCp9FqzJG4nqGoqyTlrFATpGBCgMuadgzZ vGNAPoLg03mwketXbqECo6R5IgucoDjnlHPYmQhQrHZ7+MaeUNiIFM1TnkgxIZoAiBLIeZko gxqbScGTspw1miSMhoyE1RwZVV+iuiKdVP2Ncqhot2vwO5vmdn2aqxhZrzYH+HYLgaxtoI21 V2hV+I6R9GbHPrdrbiLvfyxNqRzymleri/VptRo75q/siCiKJMsmOjL2zl8tqU4qPiHp4sEl lTrkLp1Xw/mSmylifIVRAZ1Fr0DnK/pmcMpeO/qKAQN0eS4N+opZEs9XlHlSZwt8RRHwFcBH xvqKospsMCN9xXPSV8SJNr5iLDrsK7TNFviKMuArtOaxvmKs+gvlK3bNbn0qNOQ3yk18BE/Q +4TN/do4DXAE2mHc3auv+Ldmq57Ab3fwBD6r7E/BKVJ/IaqEl8tNPzRp5cFJq0DCqWsm4dQz IOE0R+LBKVcTOl8ApzoAJ+BTRMOp4Ek2j6ZzEk1xknmawmJgJDkMJm2xBWDikyupwWzUmkej yVcdAu/vei0KgXbzET41mjDc7jD+flZULfw6jLF35hEFJgQdGL5tTnoU7j4CUu9uVOCuVzuG Y7JTX5EJCkUQbhHK+rn9Dtp8AnycxGekRTI1+rweWwT7Oe4bJCDQ0rBNo9b19erm+GnNS5Wr sCsk3a4rTduCo6HdSaS6ssphr2Hp3HPmFPfciVaBdCddM+lOegakO5kj8dxJxpOqtmDkSV1Q 2BABf6IYUXzC7iSrAduz/uR70p9ESa5rNaJTksP+RJvM+pM5m1HLHzsdUXM7Gxerbt3JSPXX 4CkacvJHSpMcYuhYGp1txwqSGBdGgqw/OzUODV3WwNPZFGS3hYYWPQN+HJv1KU+NH9tYFzF0 J8rlldMukfYhcb3LeAb7Z4vnmzOPpOdDUAXtQjoFehdiW8GDeM3ag3SPo3dwSbQDmaHw/EeK K6RwOsLzgP8ARtFbAYUaGxHYCnhBOpA40Ta9H4kOexBttCUZCbUospNRqx6dkYx0xxU7xNBN g1ZDHCEs9vt1YfcC2P4PBbr9Ya1Apyjy1Z5tgBqCs4IRPrS7xH2EzQnTX647gOlVQrdwoHk1 gwSoT35oZEYaQ6rMMp+aQ0ugWXrQ1DqQ4b1rJsN7z4AM73MkLjzzqkzKITxrcgu/msenz4mn 473kGYDmdQ7ubxagP1AAjZVtEDqWHUSokThAKG04aqFlZuWQVfVF2muMjrV/ovBwvNRQ7MPW /rhRsNWQ2kDSf8l0EPzYYQ7pOnAqbOplwR+IKkVRWARSCIvui1AJdMaXj4RzrpC6EDNKWIhZ FTqM9e0aYy4BgmzAwiDIIUKUzdN4MCvypMwXZNEicFI2yygMsjJL0nIeZC9JkMWJrku0y1h0 GGNa4II8WlBrDzstB5wiEumx7rh53ejs8toumvVu+O4ysJbes0u7wzUMeYVZ3o9W9iawUYiL 7JooZVKXy4fFMXfmAU7rQOWbfTOVcA4YUBnnLIkHtiyFRj1RM7VmoGYNdY5iJzzwyaf5hKEG x6l8Hmow0D+ScIuSrtBWiSnpYbRpqxm0zZmNStTtjNSKmxm5WHOLtZHmcMS9+aBXdyQKImXK ChZbQWt9vaBcPVZNCJrfxnOzZnQ32tNA+N5/WsuJzBtZ6E11cCp6m+9363H2txDF2+YEdwn3 7VEnArirhqzb606FzSf1qM4GQA8BerTmVM86t4kUonDT+wc3pZknyiuY0htjSt01VL/RrpRO U2JHMdNP+6KX+MzC85laBfSZnQK9y+xalcv0mrXH7B8Hd+iSaIc5Q+H5y7RK6iVbfII6TLIu a45R2GPyAlLAoMf8C+kx48TbRcBIfNhlaoFLEhRq8WQn5IBTTIIy0v3tfavzdQXU7WHdHdKj BTeQsmwQnmoRbzbRmT59c3bN0PxXTjYDX5ot7YgjOyLUGFb58kFwjFt70NI6kOlI10ymIz0D Mh2ZI3HhJVWmxetwOpJRh0tmes/xCYJL1jLJAsvrnyhgxUk253FjyUFcGXnhVCSjVktmNg4Z fXmIGWt+3mCl5m0XiNtGx7oGIzgePr2ESlLIWXCnbH/CtnbV3YVGs1BguB19ozoAR2gnjARV ZDeyNE/yeqIb5MZ8tKAaFhFjQZDSbHByaZcCfYQ8whxp5qtr3FpgOzyku7LzcXurkz3wNLD3 92f0T1s8qcR9QLT9ceue/5mcRruxzq1tIP/5aDcUB0ehZF7ylZOm4knhnAHCpLiDzradX3U8 8iBhwzOIDx8tGZm/RKooRIlVIyMVH9oWQuUeRT1pC0w3R1lkf0SD+0sGT3tlm9qYpj12kWlv k9nLHRz13unRbXB4H3hiV2qRzMMGm4pKmXCjklGBSPj6ViLhGzxOJHxzFF5EykUisgUJXxYo z5xlFI5JeZ3kgZgEg/6KjEtx4nmKVeNj8eHApAUuSPiyQI3mkFNEwjfWHaPN8KSzgoPOwp5z 2iNO5X0Pg8WiKZLAv+PKycHfCesrspDt8bLbsGqQnKHYV68ZvsCgSy+mD2WMKJ10HsyrDyoL bTAI0qEv0k5gIFksH2Nn7Lx6SaMDlU/2zVQ+OWBA5ZOzJB56lXPlg9NIzqk5GCiYREZZ9ImN zEpIL2bh+5qEbqRss1gbyw5jV5utP7Gh7RaomTS6Rx/YjJV/tdF2cxdgFh8K13/C9LIHH+7s YBEU0m8G+YRbcAk7PCr9sIE2sLvjlUsMd43QXYBYZwOK590OVJ+HoeDtrS0a3x4tG3iczmli rSqrFE91l04JZ6i9Wk6jBHl01LeTR0cDFuTR0TyNB3e10kyp2mKnL4GCTmREFYaG0c7zRAbQ /oZEe5xoC/aR6DDYtdGWvEsRKOk0qscWUEyY7W6H2OhXO35U1ju/La6JdNjcIcn+aGFsI7AQ KnX+7YhB9a5biVIAi+yJUMs6mS0fBce6XnGj0YGqfuibqeqHAQOq+mGWxMVWVhXQGE6EZaC4 ERlF73xmdZbIwM7nWwpbkaJNeeNYdBBbxmgLkmAZKG80qscmwWPduyT43i1NsucBDCMqHNCq nPgD4OzffV1gh0Bdcc1gLQ4nHmE6wOa+G6r9MIU2+MXvN+0lGf1iTQHP5ctH0Rkdr2jQqECl uX0zleYOGFBp7iyJh81iSdCTgapBxYV+ETEMzFIFoMAK9WcSmHGiTdAbiw4Ds1gW8QIlg0bv 2Ig3YbPPFjGYX25vbD5o1pAWkX1JRNPv2llCCjeRygpdo73Yyo4BvZI+owMV1PpmKqgNGFBB bZbEA45UqKKqVZ1+BCr6kBH1Yl4YO7JOskCt0S8kduJEw5FDJSZEh7GjjbYEPoFyPqN6NHxG uns7O3250R0AabgmmynIJfETqa0QOUScxZZ2Xkf16vWMDiR+umYSPz0DEj9zJB5+eA2v4Ifx kwdq9ZBR9IIrE2UiAgsu8mKHSNE2KRyJDuNHG20BfvJArZ5RPRo/I90D+Jl5w4PZEyMipcy/ YPUV2y2hUrsqWz4kjqm9Oj2jAwm0rpkEWs+ABNociQs0uECoWrL6ygOFesgofvWV5nDDSvAY YvxK/9eJN+fjY/FBsBnDLViB5YFaPaN69ApspPuSFRjufPSVbv6uIy6f7M0SxWo7LKctl7+G Fds1AdOCLx8Wx9xekZfRgVpS9c3UkmrAgFpSzZJ4gCvzpFoS2AJ1XsgnelElqiwRgUUVeVdT pGizqBqLDmMNbbYkrgVKvIzmsXFtrHoorn2+teHLWXFRcIlUT3CR5OVyyzom8wq3jA5UfOqb qfg0YEDFp1kSDy55tvDdqCJQuoWcog/aRAE3c4UD1N9I0MSJt6AZiQ+DRltuydtRRaCES+se fdY2Vv752kaXDZs9Je8rhdrBHQymEruAm40OtkxJIxBO2eDtY4Y3KkzWdFPgi+xklpXwutTi EXIM79WnaB3Ik6+umTz46hmQ516zJB74Mqy5WXArUKBGBRnNv7wrZrAHevsXD3TlaXv2DxJz cWJ5KuCxsdgw5rTBFkSqIlCbYlSfDQWTuhvIjXS3kFOxCV/ZLRUuTi0w/rM/Ye3dmqdKne5V X2PfT7oqrrVf8ePYwH1iFqoY4jKD1L2+/kM146pue7w3V3rCO4wU9iJ7m9Uy4dXykXJGwKsw MTqQga9rJgNfz4AMfHMkLvZ4XTivHhXkTApUmCAjSTAKxz1ewEszs3HvnxT+IkXbmDcSHcSf MVpftExbLVBfYlTvixWX6m7wN9L9hd1Mbz/oXYu+0kSvxfrFWr/uUnEP/tdc6Tt/SijkLe07 SCpYbpHy2AW33YkufTbFXX1xio6E7K6jbCF8tohq8zYycL7rT9fINV2sZbJKJFU5YZmTh5eU q+kXnj8PIamaHu1m99+5UthYeTIt4ZqXsTyymjxaEk/hnpexJF2hOLxcbnD/pL6vpdnZRc/S SyFitczhUogp+588+FBbYKfSu6xu+BqyBpwB26CmXG9dqaXiDcL52n2vUB9W4418+i2grY6Y 5uCAvngvti+izJIin+jLkrDpVWsZHWxJdeGFzb5Z11QXo7A5YGBKpgs/bM6SeGGzlOBlFqSs gUotZBR99R5Xzi5w9d6/yKgZJ9lsZY4kh4OmNtmSeywDdVpG89jtlZHqIGzNxeqIL8sZu0F2 ib9OXnAJ7yXg3bYAH3z15V6/5wOVJPs7vDyve2dlsBMK4dTfBIWXRFpdoVkMFqaVU709uhiH BGukcWRWQ467dFyd8fIqv4wKVIrbN1Mp7oABleLOknhYzQW82RE+eygDlV/IKPbogRfpl14u ZxRfsPdfBqqvtOaxW/+LVXdU8kqOQAUlnJwUXfPEpMD2dLAuguvVp5r76+NhUnQUvQZp0d8Q /+UkcEu8kaRnAUmDbKZpuMoipLA03U3xkyS2U1MkVZJXlkQKHCGSCEURRBZz/fiQmJslsWxS Z+npjJThQveql5P2jVFE4/k4eTxm536OmHD/cQz81zdgk4aTcx+l/B/OzIN3DQplbmRzdHJl YW0NCmVuZG9iag0KMTE1IDAgb2JqDQo8PC9UaXRsZSj+/wBJAFQAVQAtAFQAIABSAGUAYwAu ACAAWAAuADEANQAwADAAIABBAG0AZQBuAGQAbQBlAG4AdACgADkAIABcKAAwADMALwAyADAA MQA2AFwpACAATwB2AGUAcgB2AGkAZQB3ACAAbwBmACAAYwB5AGIAZQByAHMAZQBjAHUAcgBp AHQAeQAgAGkAbgBmAG8AcgBtAGEAdABpAG8AbgAgAGUAeABjAGgAYQBuAGcAZQAgAEEAbQBl AG4AZABtAGUAbgB0ACAAOQA6ACAAUgBlAHYAaQBzAGUAZAAgAHMAdAByAHUAYwB0AHUAcgBl AGQAIABjAHkAYgBlAHIAcwBlAGMAdQByAGkAdAB5ACAAaQBuAGYAbwByAG0AYQB0AGkAbwBu ACAAZQB4AGMAaABhAG4AZwBlACAAdABlAGMAaABuAGkAcQB1AGUAcwAgKSAvQXV0aG9yKElU VS1UICkgL1N1YmplY3Qo/v8AUwBFAFIASQBFAFMAIABYADoAIABEAEEAVABBACAATgBFAFQA VwBPAFIASwBTACwAIABPAFAARQBOACAAUwBZAFMAVABFAE0AIABDAE8ATQBNAFUATgBJAEMA QQBUAEkATwBOAFMAIABBAE4ARAAgAFMARQBDAFUAUgBJAFQAWQAgAC0AIABDAHkAYgBlAHIA cwBlAGMAdQByAGkAdAB5ACAAaQBuAGYAbwByAG0AYQB0AGkAbwBuACAAZQB4AGMAaABhAG4A ZwBlAKAgEwAgAE8AdgBlAHIAdgBpAGUAdwAgAG8AZgAgAGMAeQBiAGUAcgBzAGUAYwB1AHIA aQB0AHkpIC9LZXl3b3JkcyhYLjE1MDAsWCwxNTAwKSAvQ3JlYXRvcij+/wBNAGkAYwByAG8A cwBvAGYAdACuACAAVwBvAHIAZAAgADIAMAAxADMpIC9DcmVhdGlvbkRhdGUoRDoyMDE2MDUx MjE0MzYyNCswMicwMCcpIC9Nb2REYXRlKEQ6MjAxNjA1MTIxNDM2MjQrMDInMDAnKSAvUHJv ZHVjZXIo/v8ATQBpAGMAcgBvAHMAbwBmAHQArgAgAFcAbwByAGQAIAAyADAAMQAzKSA+Pg0K ZW5kb2JqDQoxMTYgMCBvYmoNCjw8L1R5cGUvT3V0bGluZXMvRmlyc3QgMTE3IDAgUi9MYXN0 IDExOCAwIFI+Pg0KZW5kb2JqDQoxMTcgMCBvYmoNCjw8L1RpdGxlKEFwcGVuZGl4IEkgIFN0 cnVjdHVyZWQgY3liZXJzZWN1cml0eSBpbmZvcm1hdGlvbiBleGNoYW5nZSB0ZWNobmlxdWVz KSAvUGFyZW50IDExNiAwIFIvRGVzdFsgNjAgMCBSL1hZWiA1NCA2MzYgMF0gL05leHQgMTE4 IDAgUj4+DQplbmRvYmoNCjExOCAwIG9iag0KPDwvVGl0bGUoQmlibGlvZ3JhcGh5KSAvUGFy ZW50IDExNiAwIFIvRGVzdFsgNzggMCBSL1hZWiA1NCA0MDQgMF0gL1ByZXYgMTE3IDAgUj4+ DQplbmRvYmoNCjEyOCAwIG9iag0KPDwvVHlwZS9PYmpTdG0vTiA1MDAvRmlyc3QgNDgxMS9G aWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDU5OTQ+Pg0Kc3RyZWFtDQp4nKVdTa8lt3HdB8h/ 6GWyCF6TrOIHYBhIEHsRB7Aw0i4IDNsZCE4UyTDkRf59zuEj513PdFX1fbOYEXX7kvXBqlOH vGxOyvU4j5THoRn/0SOdcqSSjtTwp+Qj54L/nkduDc/lKMLnekjiczmk8nlDd/Qv9dDG5+Wo +JPkPNqJ4cs4GseXfHT2k3T02a8fg/1Ej9EH/iuUzy9AWGJP6Wgoh6oQf+Ivwf/khr90KoDv 6JTAT/g9ylHhpzBG5x+MwU/rFA0xtWMcftrYQyGrc+SKcXpVfvFII+MvxZdHx3cqHHFSjtYj p5OfKBoNY1Shj/Dl2tAYJ4c/cqGaFV8ugyOXI09HwZlZC78zjlypfKNrk05/51apFGR1eCzB k7kPKA4xeQi/AxFjdOp7lHNaMI6SaFdPaHDOWj1KxkSljskq9CEMKIWWwuwiiQ1FA9ql3o6i mY2MRqO5GLnSbZiP0s5OT6BBxQZEdLoFvi69U2g/4Hh8GUbKSTUGIuOkD6GlzHgaDY058jgk 066BqMkYI5/5kEJPnOkQoW8QfCKdjXKIIqzgdTQGGydiDXOeoZO0zE8wcoMamJBDuvARRPTB mcGAA1YwYvTExzkJGp2PyqEMyJzwiEpleF8xK5zPQ0tiI6Mx5/M8VISfIEGEaiBcVZWNdCgj igmilbOXOqIfJmc4VPvJRxi5U42MRyOxARGDJiPj6pnZEDRoMpKtMuIYTJVqIojQaGwwn2gy fF1LZ+M8qtBkpBC8wk8aGlQDUVVr4SOIqDQZ36sN8ZORn7XRZCRa7Y2PMPKgGsivyhzM+F47 aTJysDHUM7K2MUsyEqBRl4wkaplqIK1aETbS0YQmw49NKtXoyHmajJRpMB4NjFypBgK3tZMN iGg0GX8wk2wIGjQZGdeGMEuAFSfVQKIhTdkoRBEIRZz1mRPI3E63ZYRpLyc/aWhQDeRXl8xH Aw2aDB91hSMzEqArTUai9cqEhuDeqAaSqLfGBkR0mgwxvTNokZ590GTk4DgZtPjeOKkGkmgQ CzOCcjBdkMcAOAYtUngUmowcHIVBi4kZQjWQRDCUjXYMpcnQaVQGLVJ4VJqMHByNQYtBR6Ma SKLRGbT4nzFoMoYYg0FLDDpP2kyoQPTzM4DcSciciHAyQYAkbMHugonDTDN0iVZnIaqcE4uV T4EYAD9+xqda2WKlqLCe3kaLGIN0TmeD/SVRRk/8jDJ65Wd8OjJblDYmYBXCvFAr4vwJEwrS EoDW+BQyEnOoJD6lxwBxaJVC1BtsDbagKXC/EPdYLRDOhTAFiOdnfFqFLUqr8AQthQhlC5om 1qSSKaMTEDNlDGpFpAbw8Olgi94g1MN9aBE3M5G8IFGhqPApQZ6eLYVPi7KlrJz0Rpk1tLE1 qy29wSKAAOZnlFGplfBpS2xRWqM3Zt3rhVp1tl4xnKW78qmySlMrVkxMCluNlZzeYNErE9Fn 9WbWF1bEQi+WWUgLtWLdhCC2WJ1llgeOrMIW62ylN1h5gI/8jDIatWL1RODwKaV1eoOFtAzE SgEIoEVvII3BCwqfToZArViKhKW5sHQI0Z/wi1ZliwyBM496xBbLT51sgVq1yR9Otljeld5o kzBkatXZYk1slEEWUhpl9NmDT2d0kt0IuQhjHy3WwzZZBOO5k1MkzmCfxAOjMocRarS8k2TM OZ+8gl6E+WQhjF34EK1ZMskfVFgzJ5MgmyLrQfVAXxZ6ZY6XwZEBfscrqelzPHKYwRxkhurg 7A9SlRPxU5jnlXypMM8raQ8zA7SFEYGR0ILvhBlaGTWEaiQF6y7zvBKx5ZXWJD7lyNrYIldh NRFmaG2sucx4uBTFO022A6/JOWlVa6+8sI7C75H5jMHvCYlOJSUoZDrIRGGeN3ITmeyHhUyY 3S2/Uge0GIXCDG3gC/hscqJO9sCnKMwHkR2tV2pB7qP8HnlRS3xKGQ3e5kyARiEmJU/WRFrB PG8AWrIRUqrMFokTs0eYoZ2IKcz4TiYhzPPOusEcge6ZT8mVGA1CtOggNGiRomkivSG5xASD 1kx2CZnCPO9w28ECDgomkwaxRa7EDO0sgeQdyFnoK8zzPjpbZFQsz4x9lBjyJKLFIJ8VZugg bRBm/GAhmXx4EAGEeT4438RKtOokW+RsiU8rW+RvOgkdxhLm+WikV8zzAfeSjJHcZbaErU5e RhkDI8zKf5IJcnS0WporBDC8zKdkZKShAq+D/smcPbI9zDwJKTjdHIXsrs9ROlv0OGnxSVYu 5MUoatCefVHCyAMnL2dsTCbGKiyk1ok8TUi4EquysEwnoqCQVCfmi2AmMiHkmMyTKY8WR1FG U+coc97aJI2dPYRkcfagBp0+JZHAVGMWxuSLnP3BkQe1Z32HwWxxvXDSa5NOco0kyGm0yItJ zjJZECCI1BJZp5NJEsnAZMkXmW8kF5ma68nxuOqi3qCepJonx6udrck5hd/jeAjyg1iJlpL+ crxBInxOSgqPKfIGYgtbZIwn5kInGU1kvIlLGlIbRjcoK+JRySUK67ue/IyIzIhCHCIGNHE1 xL+VjAQFg62TXBQZpuRPAPM814/gsIh0JQ8pXJFppi4dscKaDj5LOs61KKCPK85OsgvpWibt xZyxorLUktFXMlfaS6ooJJSKzEDtg3d1slhiGng+W/QuyZhQDy0cWeldsjkEMHTBPKGFmVLy MOHsE4EwCYkt9gW/RGvyY8yZCkdG+qCVSZ65GiBlh7M5Mj/junRSPiUlZ21ACzOvOqm0snWS FdO7ZHvKPFBlX1qoXFxggcuWkGpDS52EmutuZZYpGRnXwGiNuWYhAcffcxUzVyXKVa2y5rHO g4wwXpi/lSt8nZybaz1lhlYye2UmVzI+ZYZW1miiHEg6o4mZV5mTOte5nDNGKFqDrcm9uRKa RL9y3pi/FesFrqBI4xG3czGDdOPI/GwwXiYnB3AcjCO0GE3M1ca9BO1zMU3v9snU6V1mdyNz 1T4ZfmVLSPoZTa/0H/2oGdg+l4CdI1P6XLVgyYIWFzutDq7nKhcDtJdY0lj9lDkN50KruUIY jCbmNNKNLXL7k95lTnfugswVbeeyuTKnOxdJrGIkeFi+Mac72U6dSwZWXDJEtDBvldndGfOV +dZpF1kZlha0l5iDRQwWk3MFQWyqzP1ObJoL1j4SW5Q7GhedXEWcc/mZ2YKFlbk/uOlSiQeD q+/KnB5ca1Xm7+CaojK7BxlknesN1uPKfBvE5kq0GIz+Ohco1JesB63BpS3lwvlo8XtwEVqU izJ5EMfAqTJbc9cDEYKA4/qFq1iyWqxsoAsilMT3PH7xi5dv5hbWeXx4+fblm5fv/u/PH1++ /fkvf/3jz7/64eP/vvzmP47zP4+Xb74/Cr/zy1/+/d/d6ZOu+8jq892/Xnaa+2of5s4a/ns5 BKxxxOZ39EHhepeyiKWpLGLAUjaXPcSHa3t1DXHa9oqnu173KYHmaournrj6PnHt3Q56tX6r dS19eBq36z7d11js+ZDkievvE/f+CHq1fqt1rbEbQeO6TzClYkeQuBGUrsEk6HSNJqGSbfmm v9u9suJP7PhTF1zSNSLJ8FVXezo1u/LKezpdA2DQ6Rp7QsvKq0d1eVbtSIom59XzW89rE5pr wjWeaQ1MsONJXTDiSv0aIYJ+3O0/yBWuoylSuC5HVSeq9hDf/vn3P34xyP7+y2+wjHhiglYC 6gKpak9UdUEqXwdoDQCg2rFVXcDJ17EddLqOplDJ5aT6fpSqK5eqjVJ55/J3v//DDx+vkWrX 2pWhr1Vrw+zO7B0q2zBf2q//9P1f//Lx5Z9/+Pkffv3Tj//1Tx8+/vF3H//xuHTfdSXKLgjl 6/p+Jf+Hn77/6Xe/MmRfZ6Uve1Wy/FSndN2puTiVjU5B2reHiPqirws45X0C++kIjAAmb4SR h057jWEEflu501Zo9mQr0ItnsRqdcmCxOALdBVJ9p8DqCMx3Xdzuu7iv7O9rqdKbo4AbVN3o FJDj4QTVcMn4eKfA7FjY77o4nU/4eIXvWCvKURyT/WW3gS8jWMsOJ6yGz6EMcAolOuD0qW/s 5XLfy2NF8FigMYapAc9WeDaL0et0bea+qi3Rhad0jU+xRBuf3vrGXq63vbw8t+2ZR1FsDfzI akYvvwrxqIst0efZ1xAVSkw2RL31jb08nvByW959RQ6eTDA1SG5k5Wsaw9M8vs1OZCUXo/I1 RsUSbYx66xt6Oef7Xk4rhl/tmUedbA3cyMrXjIqnn1ybsxNZ2cWobGBUKNHBqHS7+mV9wssr hvNCjmxXv+xvOudrUpWDndycncjKPjM3MCqU6GBUvl39cr/v5bXVvOyZR+lMDYofWde8Kpeg FhUnsoqLUcXAqFCig1HldvUr6b6X128Cy5559NDWwI2scs2rcglqUXEiy98qLwZGRRLFwahy u/qV+8u+5bltzzyqaWogfmQZvEqCWiROZImLUcXAqFCig1Fyu/qV+yu/5bltzzzaamvgR5bB qySoRepElroYVQyMCiU6GCW3q5/cX/stz2175lFg22Y3ssTgVRrUInUiy98/FwOjQokORunt 6if3137Lc9ueeXTa1KC6kSUGr6pBLapOZFUXo8TAqFCig1H1dvWTJ9Z+dcVwXchRnepX/cgy eFUNalF1Iqu6GCUGRkUSm4NR9f6e5xNrv/WDwbJnHs03NWj+pqfBq1pQi5oTWc3FKDUwKpTo YFS7Xf30ibVfWzHcFnI0p/r5m+lq8KoW1CJnNz13F6PUwKhQooNR7Xb10yfWfmvjftkzX/2w bfYjy+BVPahFzoZ67i5GqYFRoUQHo/rt6qdPrP3W3v2yZ74qY2rgb6mrwatGUIucPfU8XIyq BkaFEh2MGrerX31i7bd275c989UiWwM3sqrBq0ZQi5w99TxcjKoGRgUS+V6ULfF29atPrP3W 7v2yZ76FZWlQ/D31es2ryunXouLsqZfT/83vGqNiiTZGvfWNvXx/7bc8t+2Z76vZGviRdc2r yunXouLsqZfkYlS9xqhYoo1Rb33jn1bvr/2W57Y9880+22Y3sto1ryrJr0XF2VMvycWodo1R sUQbo976xl6+v/Zbntv2zHcgTQ38PfV2zatK9mtRcfbUS3YxqhkYFUp0MCrfrn7t/tpveW7b M98WtTXwI+uaV5Uc1CJnT71k/5CwgVGRxOJgVL5d/dr9td/y3LZnvldrauDvqfdrXlVKUIuc PfVSXIzqBkaFEh2MKrerX7+/9lue2/bMN5BtDfwzL9e8qgQnwouzp16CE+gGRoUSHYwqt6tf v7/2W57b9sx3tW2b/cgyeJUEtcjZUy/iYlQ3MCqU6GCU3K5+/f7ab3lu2zPfajc18PfUu8Gr NKhFzp56URejhoFRoUQHo/R29Rv3137Lc9ue+f6/rYEbWcPgVcEZ7+LsqRf/dPkwMCqSWB2M Co+Tv3n5/tpveW7bM29KMDXw99SHwatqUIucPfVSXYwaBkaFEh2Mqrer33hi7bd275c9804J WwM/sgxeVYNa5Oypl+Yf+TQwKpToYFR94sznE4u/tX2/DJrXb9hG+4c+T4NZtaAaObvqxT+R nk4DpkKRDky1+8c+zyfWf2sHf1k07yoxVfi0r35DBbnoZjhr3vvDe34MqUE9e92Xn/eo2Jo/ 4bx+0c3QnPcF8bYf3gzEe4KMWhFasObA2W1/GyO2ID1RNNZPC8vSebWMrYJ/PNQ4hVuCE+XF OcJe/P32lIyyEYp0AO2JQ+zpibqxTrEvi+Y9PLbVwSl2o3AEh8qLc4y9BMfYk1E5QpEOoD1x jj0/UTnWQfZl0by0yFJBgoPsxllc3mDkWS3OSXYJTrLn68oRi7Sp11vfG46+XzmW87ZF84Yn W4XgLYnrZbkER8vFOcwuwWH2fI1WoUhn512eOM2e728eLudti+Z1WKYK/nH2ZJzIleB0uTjn 2cXfe0/5Gq1ikTZayf0D7Snf3z9cztsWzbvDbBX88DIO5UpwwFycI+3ib7+nYqBVKNJBq/tn 2lO5v4W4nLctmhet2Vb74WWcy5XgjLk4p9rF34FPxUCrUKSDVvePtadyfxdxOW9bNG+lM1Xw z7Un42iuBMfMxTnYLv4mfCoGWoUiHbS6f7I9lfsbict526J5hZ+tQhBe11xLgpPm4pxtF38f PomBVpFIZyNe7h9uT3J/L3E5b1s07zs0VfBPtyfjgK4Eh83FOd4u/lZ8EgOtQpEOWt0/357k /spwOW9bNC+HtFUIwsvgWsF5c3FOuIu/G5/EQKtQpINW94+4J7m/MlzO2xbNmzRtq4PwMrhW cORcnEPuElwSIwZahSIdtLp/yj3p/ZXhct62aF47aqrgH3NPxkldCU6di3POXfw9+aQGWoUi HbS6f9A96RMrw3XSfVk072i1VLhz9UpbV6qsjb51zcB+EX6/qr1fJt6vu+4XMvcrg8d6qe1Y r13tF4P2qyv75Yp9/H8fUN9HqPch330MdR+U3Ef59mGzfRxqH9jZR0r2oYf9s/z+4Xj/tLl/ fNs/D+0fMPYW+94B3luBe6dqb6Tsdf5ehu5V0ibxm2NuCrQr9C4gG992+u3oCKbNCNZrihx2 My4aiboZYO//GrLvWuvPdErv6ZQfblF8qqManYKUXwErK2Bk7fHL4y8an4/56bcqI6cf36P4 rO+NHJbHH63M7u6tik91atdG+r9E9Pd0Gm+X9n3eL5ilBWfy+LvFFzMdzEr/ulnp756VdJ0I Ua9suKq7vcp1r3Hv2r7PeyV/WoYzHcP/PchI11CiOhL9qx+vkyOW2ByJ/lwYmRVKHKZEPf07 Io20DCTqaaeGvL0ecZ1WY6Xmrqyrwi/fbI0Na3waN4xe/gJQH/f3v+jrX/twDU+xRLtYqL+d n6+xIZbYHYn+BSLXuBJKTNY8zi//9l/+7cPLb//w38frNseVgE/b7ebFkK/Z9Dc3Q+qn7et/ /9OP/3Ot2GvgabKhQcNN8DfZ8tDLJxxrC1yTN/uRV7PZN8q8lT07pnek7fnf6hsOcZErX6Oz fjrIb1njIFd2kStfo3MoMTs23rzw8VmJds3T7Na8fI3OsUQrsD/LvGRlXo42Y96ifzz02mqZ mbfOjmtxIP7TKKHscj70ckv5Mmj+wxN2hEde9ep6kHlrlbhiekfanv+t/rVewQU1Rj0IjrZr cWqef5i+GPUglOjZ6F9Ic81RY4lOzQsupLnmt6FEuVnzspV5crvmPfxSpRLWvLUNouLUvHCv +012fegVvA++ao54sx959Stq3vrNaMX0jrQ9/1t9wyFuzStGPZAAR8Spef6N7sWoB5FEdWz0 b1ovBqMOJTo1T92aJwajDiXerHnFyjy9XfMeflFTDWveOjGu1al5ervmSX7o5dc8XTWnehEe efUrat7a8VwxvSNtz/9W/1qv4Foaox4EB9q1OjXPP0IvRj0IJXo2+tfQGIw6lOjUvOAaGoNR RxLN3cfPMk+szGu3a97DL3/awpq3dmi1OTUvvMHlTXZ/6OXXvHWBizpbwrFXv6LmrZ+GVkzv SNvzv9U3HOLWPDHqQQtwpDk1r7s1T416EEl0Nm+1uzVPDUYdSnRqnn/WXQ1GHUq8WfPUyrzw OPan6H/4hVJ7WPPWeWwdTs3rt2uePuywdL/mrV/tdHgRHnn1K2re+hVzxfSOtD3/W/1rvfzL aNSoByPAkeHUPP8ovBr1IJTo2XjrWqOnJTo1z798Rg1GHUjkPwJ4K/OqkXn1vF3zdDz0impe fd3Knv8OoeWSGt7b8kl2PR96+TefrL3F6u1sh179ipq3rj5aMb0jbc//Vt9wiFvz6nU9qKeP I/W0a15Nbs2r1/UglOjs39bk1rx6zahjiXbNq8mtefWaUccSb9a8ZmVeeOr6Lfr1oVdU8+o6 dl2zXfPeRoll14de/j+MuPYWq7OzHXv1/TVvZc+O6R1pe/63+td6Zbfm1et6UHOAI9muedU/ 8V6v60Es0bPRv3DtmlHHEu2aV4MrZ64ZdSjR3LT/LPP6l5n3/3B8mwUNCmVuZHN0cmVhbQ0K ZW5kb2JqDQo2MzYgMCBvYmoNCjw8L1R5cGUvT2JqU3RtL04gNTAwL0ZpcnN0IDQ5NDgvRmls dGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCA1OTc4Pj4NCnN0cmVhbQ0KeJytXc2uNEeR3Y/EO9Qb fPmfGRJigZgRGpCwbO/QLABZCIax0cgseHvOic7sW7e7MrKqzMLu+PpWZETGz4nI6OrqEvPm thLjlhNe6uYDX8Pma8Or30LKWwlhiw6vyW1RKl79lrLH32XLHq8J7FXwmnSpksJWXcBr2WrF 8qlujetirSYFr7JJwb+z27zzEJQaCErMkOzBVqCODw68uYCgcpnKCaTlvPlItTK4kicRQRQo AKV8Vi3wp+LDlgQiqiO7bL5BkdTwJ4F2qWFBgdDUyhYcOEoJW4BCICIISC7QMgRusWQQhe/g 4hj4TgNR+Y7ASh7bxlZhLuhc6hYyDVZhwNz4J6xcVATeKYJ3Ci5uDu9UyGoVGuK/IAG7gE5B Gt+psHvkOwWEkMhb9JmEbDHAL6XBJwEXlgYnxQjpkBcjhWKJmCI0bOBKDVzYacyJXFg5CzSE NSLNX/DnWLl3WCxWGhy2jo37EqzcsCfqHYV7l8RAADuWSI46w63JUSjiA8bgxQICa3DRxDBi SKTQGBtuSxGKVRe3lBw0FLghwSR0VcqRF2PlDKUq/pwYYdVhZS5fYbVUM1eGiIYLq8eCDWap cFUS6FzxXxL4qvq0Zef5pwwCfqi+IGoDuSoIGLJiSxlOBeFANP4Jkc0YqwjbnCgiMEUQcTWA PXsSWDDDwzW0LTNXasCCtHqFRXJNJAIzAxdj9dy4d1yXhXuPWFmEBKzmEDaVrvKeBCzrEXqV dgyBBPwaEBc1MVsL12G+YSuV7kyVBHMDF1Iwwp0E44xqMFto2soQrNwFs64xTxOdB30rg0Co YaKJ9U80H5zGaIDVYAQkGowF9kxjUR+6AdEGgkvA1bp6IkfhPzwJqJIRPxVpVbEN/g//IXIr N8k9VWR3rcK/Q2irvAbrqGLkVMWQaE0VQ6I1J1wZgOKpL5KoBboADm6BLkB0tph0eRAMGyza ksopW8u0MzbQciXht1Zo5waC8VWhXFM1EdPwGwms3GjnRhSjByGmCe2MtBL1IIJJPO3cSDSu 0zYJ1BmZIJHGBINEYAt3K+pB5JckqoEtiXoQ6SmZu4DeUtQSEMFoqkgrUV2QRNKoBsJLmtAk WAdsIACDznleFEkx6pGpgDYEbyWiOuAc/goEdBGp0hzfi7A97AoqBVIE5YQtNc/1ciRFxM5Q uGF174jXTECAt1NXKIzzOq7XEJHN868NO2ue0iSTwspQCzIg23NBOA0yAP30oyOFDcOjoEIm xboACASVSTEU4C8wBDq8kKJRkLfe50gOUgVrIRxIaRhQBhOvRcqgc1qkjJZIUQYrA+KGVOHK LDoOu2laG6H0RpuDyhpWoIIn1UjBUdyzB5aQcqSoFfyPupq4cibFvSVSmWGWWOoKtUqUQXBt iTKYki1RBn1BHUFRK9ZNlAquHEkxoBF1MBBSrbEIRo9ca1opA+zeWE5RJvhXcGidIF6CYuCw kCJXwFHImx0pR4q2L+QotAFkg6LtC9cjzDWW5agBWUg1xhD+81E8r6MMYQwVFmsHGzckGyjG EPRBAWdXgAiFKxlDSGlQjOJKKtJq8B0o4XWQkVImBRkotlgZq4OiVpUySmDGcmVWwlbZGxBI WyPFOCMOgyJCNMpAOoKiDGHssi/ILpGCDAAF12ukaNPGFkNtKqQico3JByorLrAB8aQCKWrF zMuZtoJnQVEr4cqsag0SQQnXI6UIJJTGWBFmcuYK4ihD2Dkxp4tzpAIpaCX0PvodrlxJwU7C 7C4BHhVmNwoUVxFSlRQ7pBSIU56UIhZkoPPCesxutChcOZPKjCG+xyojzO7CCBFmd2HBFeY+ tkEqsuVCXrFVAEXoYk6jFEMGcxp1lhS7zICYEuY0KiSpRIr6MadRwEAxp2tSICWVK6+D9oBn /JU5XdnhCHO6ssIJc7oqLj462Uzs5crcqzCnK/tPYU4jcXgdpDW2fsKcBnyRggyESyZKk6JW zGkABbRnTiPthWDOzlKtRo6M9YV5CQNh58zuxm6PvvONjYkwkxsrnTBXG/FLmNONsSzM0EY9 hBZHWGC/zF+4QgsFKEAm3lOKGhDRtcoIc1rLjDB/hTEpzGkojl0yfyVxb8xpYXFmvQBV+Ffs Q1RTZrewc2IHBaryOv6VWCrEJmGECDNeUIRQkdDWOgd7CptgBCdloC92nrZnZ+vYRjM+QEES MQtNNz0Iu4KqWtdAJe4c8QuKFbJylZxJoYcGwEFGU4oyGuWyvWG/HBxrEfUBBUuINvaMH2mU odGJ7AaMMzqBEaBYaoUU4pN1FFSgVsKzAHtBER4GIrVC/oKiVshI4H4ir+dRgZEjXDkrB+T6 ohyNFGt2I8UGSnhw8FpPnKMQDXqUa5JEMIdUD9g9HAHGoCcSFnGS9BELJ1p/pgVRAGTTC7Bs iFHLvCdJJHCea/GwxuIPMnvtCHiaYUuGd/Vgoz2B52Gnaon3lMZmyrP4QULQCyhNsZCnthA0 CRxyO0RHBHJYHCRDygWS7M1ABh6ZdBewLEhGn8Ouoa7XaytJYjZiA2TSXQQesJLuAkASEMuU 5sjGE6jnuQMnMAIK/Qmyaj9DaVrMHc+vUVEXvQ1ITRSHxUNy2tMgxUFWXaHyFBe05+E5zhPU efgKenjBuzwMx0fLlEgym1wi+bAvcp7HP4pAioAsjwYKZFElEwUXdXHiuuy9PeEnJC3fbCFB Fl0Bu0gKoA64htPko/NKJFla0I6B5FHZExZCDtquZR44Wee1qQo5Rl23kVS/ZR5Nkx68YYyA k4z2cVw3s6SymiAyiKWOR91c5NHogawqjeGbH82hnnO1K3BM9vyIZJ6i8yOS9djrNM6IEKhQ 3BDhoHiWY5oeFUBzgYBQAougIyKUmPUCiCjJP1pMkuwoHFO3ZI0z4kMpugvCQmGjB5LS2J+w CyXJYs3zKXo03QUBoWgR5NwBpMYkk7Q6jTPiBHJBe1ZHUgUz22vQbRIqcAbSd7EuDm20GWGj Jm2JiRYwGVcgEOHMpIbiCkWjj+BQeSoGSWnambPFxMlK84LpX7U34jEMsrQxJVJU4olna4Le 8CEYIhrPHnhXSXm01iADs9ATHxpbaJBCsugFEIyelRcQNZqOR3gIBfQxuz1RA5VM100ks16Q dWihbHyXZw+QXEx7Q0/UaFq6PVGjEalBcrLBXMSyjqToYtgFOglt9kkGFUzUQMWvegQAGVnb OJ4C7LDZ8EQN4cnX81gTUDcpgqiBMqiLYUOisyVPJBB2gTxFkBQ9UFCa9saeqCHaHnnig7Ci gUwbkE2PF5EjGKfWQVih7WOJRzEAGfTkACwBibD5+c+/fKVzMLd9/eWbL9/8/Q/ff/n2n3// 7ss3P/7/P/7043/+7bv/+/LVnzdczwt+g6P1L37xs//oXKFz/fYv3//vG9dvfr/xnIAr8MrB 3df/s30sdbDKWnbYcfnO9dWx4NgF17ngMAR/+6vjNcKUl5O6zvv1IW/o8kPur7W/StfLGwaR 0waJB1yHBgHOAKdqmUhstiWSe2idDK3TeTfWA65jrTlL2HjsxDmDB9Kb6ndnpGSon8+q39IB 16H6nL3ggMnT3MbOl0eQmzsofQdGOKd2dgcSDrgOd6BTH7TTN7XuwZ7dXOvsT2tddlyn8UpG sOlFv/vlf3/95Xd//Ov2UO1QodOBIO1AoSkU5u7CbLjwwrbkwITHUJg7BucORbkZ0LPwaA59 jXgfGmOPitTXSl2vRySO7Ryv3Z76/eGPf/vuaPkkyr5l91g++wfy5tj/nfq/S/937f+Wro4b SN3/Hefm+lDn0PJojiZs1bQypxsU3S2pnwbNVSimtbuKh7z+owBOrdmMaC2nUxed3T22co+t 3mNr99jkEGEeoPdmt5eL/AyGSj2tgHcHek9xqPQ0Kz0NqwHOF6zg/T22XSkqAziOcawnLD/u fLx2XCsdP0oH2NITuPr+Om/jPjLgv3744cfvf/jxMAn6fhYrTCDguOAv2cKxQ2q12SYNUn2C xDGsV6Mk1FEPJ3Be5whxAmC6aveMlO6wdUx+VLLTsu4whTtM8Q5TusOU7zCVO0z1DlO7w8T5 BkDllotvucvf8pe/5TB/y2P+lsv8LZ/5Y6fxhgm7IDwYWBAmxfTZrr8szbszTi4d3IFCszLJ +0BYParbVY/72wr+dIKJdMGuv8apAiv8uRXR4VZEh1sRHW5FdLgV0eFWRIdbMNRrzKOhuVhj rjGFO0xxwfRrbxSZa6LyIRNvXVoXmVcmPyZc3/76MGXDrk17430eHA+7mK7QRNloKVsnTGGh bDIE2lOlmwKLIdBsK+WmwGYIXA0L+1mAx6sLTnycDLr9xrb0BrepJvYc2R8nJe9wsxrquh8d v/Ga4eSPM3ot0YinaMaTP4aDtUQjoOKqKn/4N533b+w1uQ/3+770xsO5JuZY3E/waTEHq8mA i2RH1ATclhKNiEp2RE0QainRiqhV5/Ph33bBv731Sd3PfW5fU55qcuKI2evGAJ0RnGMTE5Oa k71R31960fSc6x0jYtrj0CuvPcfrCh3ynrHB/oODV9HZDJ+x1/TCtED/vI+eV15v73U/XX7h PbPXHAzR9sR2YqCFX7PhV3uoFe4J3A+k3gSeav2uCoxG+KwmlWWcgnZQnxfh/vDTMN/Yld6C Pd/5c1J1BGgTHrPzyXcE6c3g/14lVx9JPS1czlu4j0u7BfR+dX3dz4NfFalnxjxvTN62VjVi qyZLYLspMBsCiyVQbgo0wLeuZuVP3+474ZVza0+Xh/3GtvQ7BFNNmolUfoKNVey9NwOq2qmB 3GWJRjw1M578BB2XEq2AWt3M8eHfC/DYOiy27ufW/dyKsXe79E2wbvFZZW1G7RM7oso9iWJE lJwaal6WaEXU6eq374SX/u3lr38C3Pel37mZ792ELj/BLlnUMjGwS8yICpMuecE1wZmlno/y xS8azfRtzjyZhQneLCS3/YR4yruMjhDPR4d0NH9YcuxLvz810+RU3zw6gX6s7h+gdggboT42 NTGxHYSHTTnvg3dG99ncPgZfee1ouilQ5gK9CWrxnkDvjR0uYyj1GEo7pmSGUPfTMN/YlX5R br7zcU60WtdXHnP0lO8I0u/r/XuVXN129bRwOW9hn7pFc3+t/bXNlbfH4nWivd2dtGDE1qmP YC8LnB/fWzAbMLkpMBvxsOy/hm93/fXSuaGnSx8p9W3pdzvnW7f7rwk2Brs3acGAqmj3XxNw XEmMRjxFu/+aoONSohVQy/7r6d8L8Bg6LPZRYd+Xftd2vne79E2wLi66i2jUvmhHVLkp0Yio ZEfUBKFWEpMVUaer366/Xvo39vIXu5/7De4tGeUv2WfHCXalRS1LBnYlM6LC8WR2LdGIKHvs HSYYtZRoRdTp2hvCef+mjsf9vvm+L/0u+kyTEx1yb8VGwzCKywChEaxjUwsx5t0Xr2bKZvCN SCgvTE+/HHedeR97r7zBtvCn+f4r76kh+yuTPYJun4bsL7znhuwXBX4asr8KPDVkvyowGiZd lrnS0yRd8GHPij5k77vS5yXMd25iUp4wLQpAqYZAM5jKTYFGMNVTTfhFgdUKpmWJG75t533b x/vdfGNX+uyK+c5PNeevTAvwrwbI2NN2P4G1pUQjmuq5JvyqRCuclgVueHd3L/zSvX2w3y04 9qWPEplqshi3T1Cr2R9utGag1mLcnm5KNCKq2RE1waelRCOi2vIDnKd/y3n/9sF+t+DYlz7a ZarJYtw+Qa62OFyLgVyLcXu7KdGIKDnXhF+VaEXUcoAw/Lu7wXjp3z7Y7xYc+9JH7cz3fq45 f+VaHK5ljl18jI8lcdJYLSSKm0eUuHPd8VWJVkSd7qzChdaqj+a7Bce+9NFH873bx71j7BJn dx7i5tgli+H5cXO1lmhElD09D8cYtZTorYg63V2F8+1V99Ww4NiXPopqpsmZA2buB8v+UUxv DUcTMYrNAKURvGOTE5ObI/jRY7UXpucB+/CsIp9G8K+80badz1PeEzbqqh2LtgfofqKvfV+5 fBqgvwo8dXf+VYHREGgWwHhT4Nwjsh6gjy9zph2Tfadn99Mw39iVPkdtvnMTrPKEaVEZPo3P X3jt8Xm5JzAawWRPz+tNgVYwLWvf86EXF3zbIbHPzvuu9Jl2852fuu3qlWlRFT6Nzl95F9/c vynRiKbF6HyCTSuJyQqnZeV7fg07nHdvH513C4596SMGfxKqS0eAXtHimSJhH2TvfC24uhev nRllvjEtUnI/D3/lzWdGmVcF7h+p8SbwzCjzssA4F5hWoFPHdwd2BWVxe3z30zDf2JU+inK+ 8zOjzDemRULuH+/yxntmlHmNqd5haneY5A6Tn6TV0oodDfpkWh6zeH0m6OPViK9ijwgmObvS qGTDryugfUb0HmhXId0fGNQtPPalTzmdaXIGaPvzbyTPN3QSYF/NYA/Ox7TvzV2L3rQa2FUW tWp/L/ubtvaXpibp/7wDfqatgTfVPIj5Sf4vJc7DQRaPC5mAx1JiMySuvtj5kQrtgh8fx99u wbEvfdzuVJNm3uzpJ3D2vAl+AgMtGBLNiAoTKFxKNCKqmREVJlC3lGhE1JN36d/dx/VL//ax Rrfg2Jc+/niuifnFzjDBqI8HiB3vXQzEEPv24Qm+LbgmOLPgmmDFgmuS70ub9KIr3Tt9Vi1i lET7ZvQw6UCWmljxsPpK6kdkyoXI7I1If6pc35c+KvunFOH+ZasOlyOtxiaOl3X27esDXsIr 1zPbD9FcH+v9ITO8uFFM8wydjkWv7TC0m6l+5mbydy77Xmt9OLkh88z95DdkiiHz1C3l12V6 wzduORav79/a1OeZL+LhkR/Djs/NPZ7obpjAbNrzjMv+XF6fF2/INMOr3JZphZc/dZq7LtMM r9UdCE9Xtyuu7je4Dzs+N7fpQ/bn6iye4DXjsj+i10f4GzLtM+EMO9dCrfgKNnzN8Gst1Aqw sLod4ens3Vn0hLf7pH6Y8rm9TX/64KfVgDziJ44Vz1QV+2z6apfFnelpxvZ0xgRkoxV2H49Q mVg1Wpi4eGzLDBSj/dGd/rqEIdQ+Ms5QcS3UCBK3eEjLDBaXQpOFQ0/udaa0Sz4d4fww5XN7 m/4qx1yfxVNcZsD4fIL6DC72z3F557ZPkDNgXLDNoG2t68CUZGHc4i71WZO2lm5V0eXz7Z/h svsq54lwSQP00oibNMpoNsL3DLD25yWNUH9uYrLDU8+BqemVy54W6c/AfMh847YfBTOUOuY+ Y4P9w2DepZ95yk8tr1z2fdz6YzYfMt+47bHvUOqY+9SOqyG92CAzsVNZ+bhYPi42WNyWWSyZ ZhmLt2U2S+YSId6/qKs/sWPHQxkAUQZAlFFY9rexv6lTzXFBnnHZw0H9lSRDphle5bZMK7zs sXq9LdMKr7ocgw5XtyuurgOw6/B5HT7f39T+ro7ZP8mMy5626Q9XzWUu5uuzcrEWasWXPWL3 M/xaCzUDbDlZfH4FMVzy9mgL23B7G27f3+L+bgS7RZ+B28cvRcyMYIGbPW5/np8uss1QaKmr jKnS/vb0t2UW96fP8Ggt3WhKPrjX4VKvhEsbqN9G3Mg4k4sRvmdahjIWqsOsdfSgzYJBsSNx 0oM8PxuYVVkxOiAn9uc+N2Xyh+ymMr09eY+3ZQZrn8swev/GH3+xehFFMqKoPzBnbO7x+3yG Cc48yOOd63lCP84k74ol0wyvcour3ta0DTMZ3b23R/ntrvBPo/wp9zJS5EKk+DGW6wZ9bu7x M4uGCc7NWt/YFjNu/2mW/8Z9btZ6XahxmPL2MN9PsOiEUDPCltP85/fN4hV3j3G+H+N8P8b5 PljYeO6XLt7ZFlNuHyw0WszzZ3C0FmrF2GKeP8OjtVArxtbz/Ke76xV3j3m+H/N8P+b5Phjl 1y+eKTNDuGB/A09/89QQaseY3BZqxVg0YyzMcGwt1Iyx1bctnu7e/6TI2t1xQHccfh8zQf/p 44A3I5wbtb6x2fcH60/RHgj9F3558cUNCmVuZHN0cmVhbQ0KZW5kb2JqDQoxMTQyIDAgb2Jq DQo8PC9UeXBlL09ialN0bS9OIDM4My9GaXJzdCA0MDEwL0ZpbHRlci9GbGF0ZURlY29kZS9M ZW5ndGggNjk2MD4+DQpzdHJlYW0NCnicxV3brmS3cX034H/gHxzeL4BhIIlsOHEsC5KAPBh5 GEkn0kTSjDEeAfbfp6pYi701p0nu3ZokL9Oc07xWrVpFFi/tXHTGGueiNSnxZ6R/CieCccVz Ihkf+K+hGF+bcbYlE0rlr7KJlTMnZ1LkahJV0zhzCianzAlvipOvkilSYYqmevkqm1qlnmZa lK+4+uA4RX+3lXuU+b+RW8lUjbf830yd8/yPy1QsSIczNRtK47L03xjkW0olzzVnajAVbjVT lhy42Uz/5Mb5ClVaZPyF2qjSX+5rlQ5n+qJ5bqOQLKzjWqgqb7mYK9F4J+MhmXjXJB+Jyicu Wy1Jz4lQG6W4carf+CijLIFSlctGKpsK96B64zN311X6tnjuS6U2Sv+WelC91EI9qJV7Tyrw LXC7JE3fGtdMigo2colmKdW4BH0RWDGU8iZQ9zkVKCUiJrUF+ppTmVIsHB5MiF6+rZQqPA6q KiSWhrdUc6qqlJBZ4t5SzZlH5C3VXELjFNVcqElKEXIq98pbaqM2+ZbaaEnKNhMt98o7RylW LUmWUpKPlBIZO5QKJvreg0qpKvmSiUEAQmCIkcfhHX0bk3xLQE29Zmqj95mUEnPgfDTAWBz3 wFPNhUfuPX1brXxLPahSs6c2moySlBJblXzFJMva8qSU5FhWPpARCIC9ryZ5qZnUnbzIhaCS QpR8nqzG8dio0hSL5ItkhzI26lpKVfJRG5lN0BNsU67yLbVW2OQ8VZUKo9iTCaXKlkLoIjNk S/Fkz6kxsj2JPVvLrZHZZismRJmzmDuhkFKMdk/GmLt0yZhzly7ZN6lX/kZ2HUSXpIocGYkM 9Bwr948ayilJfVQ2O8lHbRSROFl3riJxEmcW2/Ikpiy2xSAs1kq+TCnpM3WSFCPGTuzhROIk 7MKqoFSklNRMdl6CYIhAQ2KRfI1SInEy05JE4tRkSUxdnuy8dMSS2EuxnI8UX0qWfNRaFeyS JZfKjOapGIlZvqUetF5zMwQSyUek5tjOPamsOpEQGWf1oo/KlCcSInHWIDWTJdcoEqIh1Jgl XzE1iX2Q/RLoeGxkvzWL7Gn4NUvNZMm1MC2R3ROHeslHbVRBHWWpTVBHTF17T+mfZkUGZN3N SX1k3Y1JgVLVNC/tkqk1/scFaryJTAMBqUW2nkDW3SJLiLjFtMRWFuiLlpg2A4m9ZStlqY0s hEz/bYXZNhAfNMFpIEtuov1Adt4ac2eg7rbGuhQKspZhEphpiRC4HhatdQw3YXvL9EJJz0ke dHDsMASjgcVhAw8sMPfbGLkFsm1KsksJbKVWEBE815tlIGyJNhf5KzdcEnfHiyOyUgNnEPoK jFgrFhYCt9aK/JXZU/xXCEz+jh1JEOcpDijwqIQFKck8LMxLXMveVUYsXqF3XVxUFMF21ypy iuIcs+Rt4v84rzjP3OSv3U/JX6M4EalB/EmVGoT2uauh+4cqeavQs/w1CAPLX4V4G9eQhAFl 8EKpHSRicx0lAr0Ok84A4ppTJwgplsXeuTKh9sz1hG5vUiyLmcmIhZ2qFBOYyzyh83vj/ol7 IjgyNLIgkz1/kLIuSr0CFfbGQVUq9YoWRN0Cq9D4D8y8JAzOxlOEkJzMJaTTUmWR7rHKguA2 8zwo1P6V1XlHkFlNYMIMtWfgGpvIjB01OTfuNfMPeTdughUSXc9A/0SZ3QQea/Q9g0xlGNCB a4xST2AmiZH1L1RMPo4zMGqizHECExY5N8nADXdo8D+xiLWwSmOVYTZurfYM3FpjOUSmnmR7 hsZJHmbk7iUhZBFcctIp4gJCZ89AXyUxn8gmk3qvGfAp8jAFHylZEYHnJA8zsp1QSjJwa4Ub EnKk8UgGblh4LjKxpdrlSdWkxsOMTBXZ9gyJk0VEyzM81zMUTooI2NCzsEbkAWYhl8hUkbuM 2Kay4CEywnLqGQInZZgMzCx4iNxkFjxEpopcegZuTfAQ2f5y7Rm4YcGDTP+K4CFyriJ4iEwV xfUMMv8WOTA/FN8z0FdF8BDZ0EvHFZNNETxEpoqSeobGSZEDW0TJPQM3LHiIMsUXPEQmmyJ4 ELIstWfg1joemB+q7RkKJ2WYzA9V8BCZbGrHA9t17XjgsrXjgaduteOB+aJ2PDDj1I4HZpja 8cB9qh0PzCW144EtuHY8MK10vyfuqHY8MMPUjgfO1ToemEtaxwObf+t4kEl9xwMTSOt4YGJq HQ/c/9bxwFzSOh7Y/FvHA9NK93wydWsdD0xMreOBm2wdD8wlreOBzb91PDCttI4HXh3Yjgde UNiOB14L2I4HXjTYjgdeDdiOB14i2I4HXhnYjgdedNiOB14R2I4HXibYjofGGToeKjfc8dC4 iY4HXlzYjofGrXU8NG6t44HMn2bkPUPipAyTCMS7jgciJi/LEOIOyyuknoFa6+41Wc4QegZq uKMtEYHQXF7k0Hg5JXgIiZvIPQMvt2TO4LkC8V6Ol1Y81SUXRqk+v6I6g6yoyBZpksx6keUW EwgrjKaZJOnMcs2p8kSTF16MKXb8NH3kqR83XHiJR8CkFLuSRkxCU0Ce7PDSmNa0fcJCycZj ZCdKk0BmY0uIpVlg6p6ckklWhyyw2qe/ZNo0mZNpDZEkzdfEW5OEaXImDoushpLUvd/85umz vk635vOnL54+e/ryH399fvri/bufvn7/ux+ef3z6419oxP9pnj77lqa2nOu3v/31r7QYkUUv 9uUn98q5Hgb4fFKaiGLVaHy40bhodJT+4q+v3rwoP0o8/ZE0eSvGwQlt9PP7jRLVUYYhyjG8 HuqY9ofQpvW++uqH57tV25a1Ihs14VC1d0g0TfTxbRq7K3CrheoHEktLbLhJqdg2WkpHaLxo c9lT/3CbYdVmXLUZHm4zLdocpadorIrGeCxVN2BMwGCX4xhcj44tRFBXIkizUjuDTG3RZl7C Kz/aZl7BKy/hVR5ucwmvLfFA1fWSqsE7GTrP0HmOKxHklQjarFTaiaCs2lzCy80IaN/oCl9l TV8z/to2WpYAS2eV7fwVbWe4ggy1F6i9+JUQltzmZuS2KRZnxcJOdgmdXrFRKcvWZ3S0b72u Gm3LRmd8tG202lWj4TRcyhW4FLB+F+UYXt8tmPbnxKREPdfgtYH5MZpN1ffFWzel/uDuFpvQ 1boxP+GbTakJYWxKTaYsm1ITu9yUmpjlptTEnDalJvawKTXxsJtSO3DcL/UQNhQa3WhPo/eR Qv6RQuGRQvGRQumRQvmRQuWRQvWRQu0h5T4GiYcw4WagsCD8mZ/oJdhPBC0mmf78z//2+dOf v/pvU3u79+p29nTd8V6X/v31m+/vD8bpIpV3XYdj+CVjS+cFaRvatkiERSdcPN2JfF/AYS7g fLrucq9LCwEXjK1+nLHV8wJ2CW1nJNqiE/48ytp9AcepgEdXt3V7e69LcwF7jbfw/v3HGJt3 5wWMEI8Oz8iBgUUnTqPM+/sCTnMBnzZRH+51aSFgmGmwH2ds8YKAYT2+ohNu1Ykzs6iLpR5y mP4hj6lurLkHZjbXCvlHCoVJobizrV7i54GyC6XSQ6XyQ6XKQ6XqQ6XaQ6WcfayYe6yYf6xY eKxYvEt7bTjuF9hLO79yq/sujOa0l+BX0sGv/ALsu3ye9iL8SoRfwYaFjxEJOPcI5x5BlhFk iUCAR9DZJ9SM6LM/xsBfinfH6rfhlfuqi3PV7TzWre56r0sL1WHY2X6csbXzqkPIxSP464/R 7hedyKfxO+ZFHwg4TQWcd5PKW93uXpfmAkY4yef8ccbmzws4wxIyLOEY137ZidMo8/eXZX2H 727d5bTx/2zOk/fLsgIzPUaOf8nYLizLMqwH4Wt/DBq+FMJ5lN1flrUyF/BpE/XlXpcWAoaZ HgPOv2RsF5ZliLDr8IwcKp13op5H2f1lWatTAdfTJhrsvS7NBVxhpnXlPs+PLVxYllVYT4WT qysnV0+jLNxflrU2F/BpEw3hXpcWAoaZtpWTuzC2+3MvZ+10cO08etK1wTWgpy3Rc35wFyZf FdRQ4cEb8NSAp7bC03oRVR4qVR8q1R4pFR9ahsaH1qHxoYVonKxE+cD5GhDOAhH3Z1POjqWG Zj3WvoPbrXZ3r1NTuPOBesFVsAdvdKcD54d3fkIVcHJJx9dP8M97cSpGcLFUnI3Y7RjmNuI0 UWicK3Qbdb3Vnu91aq5QRF6DyyuFXhheOa9QnEDT8fX7E48qtE77vjsedev7/WmJs2mumh5Z PWdr9l6v5rpBrDb4sNTN+fG583OT4C1ad0jEVTf87rTKoRv3ZyfO5oWcdyefDtWHe91ayLli gCs6uTTA85Hj4EFmCCGHY/j6ZTfCBcDNqKbM5RzOU/cxUHTr1lzOAVYe0sca4AWyCbCmANYJ S8rbnvE9dKNO5FwXcr5gte1et+ZyxuHhcDw4/YsG+POtro2cYU2hoRt+1Y14Ya7gJnJucznH 81Z7DO7curWQMyw3rrzWpQGG83JGfDUgvhriak527rjPxWI6AXfukY2gi6VGW+ED+ab1Cb9p MUySJ4ftQjqKc158qtVe5OdT3JA2VwACwrLheN75ZfPZrQYdpsXsZtDZL1tdXraIj7cal63u Yi83Uacros6Y2CBSG3Ja9mMJtDwttgNaXgItL8+SlodbLXbZ6nl410syB7wRvA3HI9Av+1GW iGvTYn43+iXiSlq16qZUtG82L5vdrrKG0I8z+b3UCwCOiG4oZdmR9fllPy1XN+OvS9DVJam5 Kavtm12yWtmFPg9ij5fEDowjzhtqWI5/Dbs0LRd341/Crq4d6JTY9s0uia1ugxo3sZcrYq8A OQKkoS59aVvDrk7L7dxaW8KuLanNTblt3+yS29p5b3qc9u/FjuBzQEw8tKU7bUvY+enEre08 W1vCri25zU+5bdcsP0uwavbCfDFcEjtA3pRtol151GiXsPOzSRw/ibAZ/wp20S65zc+47USz K267FT8h9nxB7CrGMbD+fMSqI2vYzeZx0W58W3Qr2EW35DY/47YTza64LW7PYR/E3i6JHSDH efB4PIp9Z/xL2IXZTC66jW+Lbgk7t+S2MOO2E82uuC3u9wmG2McO8SmxY5sg4pR4dCuXGv16 eTqbyUW/8W3RL2Hnl9wWpty2b3bJbdsz2wexX1mhRoTeI86OR79yqdGvYTebyUW/821+CTu/ 5LYw5bZts2HJbduT3AexX1mkRkTiI06Ux7B0qWENu9lMLoadbwtL2IUlt8Upt+2bXXJbOO9S 45VVakRgXgdm5B2hVUeWsIuzmVwMO98Wl7CLS26LU27bN7vktnDepcYrq9SIOH3EYd4Yly41 rmE3ncnFnW+LS9jFJbfFKbftm11yWzzvUuOVVWpE2D7iNHSMS5ea1rCbzuTSzrelJezSOuQ7 5bZ9s0tuSxdivldWqRHnyiOOzce0dKnr3YU0ncntthficnshpiW3pSm3bZvNS267sKuRrqxS I7Y1Io68x7x0qeudhjSdyeWdb1tuNcS85LY05bZ9s0tu2x5AP4j90ioVOxsRB+FjXrrU9WZD ms7k8s63LXcbYllyW5py277ZJbdtj6UfxH5plYrNjYjj8fF4Mv3O+Jewy9OZXNn5tuV+Q1y/ jZKn3LZvdslt28PqN7HnS6tU7G5EHJqPZelS1/sNeTqTqzvfttxviHXJbXnKbftml9y2PcJ+ EPulVSp2NyKO0se6dKnr/YY8ncnVnW9b7jfEuuS2POW2bbNtyW3bs98HsV9apWJ3I+KAfWxL l7reb8jTmVzb+bblfkNsS24rU27bN7vktu2R/5vYy6VVKnY3dGBGXhZddWS9fz+dybWNb+On S+fNJrvktjLltn2zS25r511qubRKxe6GDqw/xzrvyInXp/QIzzhgMk49jJ34sTc8divH/tnY 0THYYzCIehvEYQ0igyNWNaInYz0/VphjzTNm4WNeOGYqw3cONh/8MhA/dLATzH1czGa445Dx Z6/evb9/KEDtAnMfXMrDFAgixQjUWevM2OjE1GComEPBl+ucwqhLN+rsjPoaAzlkVWbWMw9Z 28vaXtbyWQWY9epVVueVtd6s9WbUq3Sb9bJNVtbNioes259Z1ZCVJ3LT+pQussIm675d7toi Ioz6mfQz62fRT+Tr7RZ9i6boRkjpGqNPrUdD9kWfVCkauS9O69HTi0UXxEVBV7UfVf9e9f51 0/qblm960bspfJvW11SPTfXYYLgW1zcsoqo2KEQsFuUWyLc4m2XBsg6nLR0ujTtcmnOYdzgY qcMRAAfrcPCWro7ieHwOFu2wg+1gSg5k7xpqHu/oYt/VNVSIkfKPz2gC97FAER7bhh7S8Ng/ 9LjV4nHJxoNPPPjEg088+MSDTzyipx7HrD3CqD6gQnCOR8zP46ywh+Q9OMeDczws1oNzPKTq 20igCUjDQxoB0giQRoA0AqQR8LBSwLae3jgx8uMZmkCFHuc7AjJjgAGvDwQ8KBBAqgHvCAQE ftTn9He7LROm0t2B3b589/z8+du3758+f/vD859e/ZWVwnmZBp/fyNdG30/uJDic4/j+0+e/ v//j8z9Mwizj91Tfm7fvn58+5X9+9+ab23++pLxfvf370xfPX79/+sPzq2+e3/U0l0H6X9/8 8PrN8xffveJe8h/+6Q3V8Or967dv9P/v3r/+r1eUkP/9x9t333/19u33T5+8/fqnH6lT8pe/ fff8/L6T+Z9eff3u7eH///Id/Xv4/yevX/3w9tvDH7744fU3z4e8vR3K9u27Vz8+/f71tz+9 e9axfvrTj3/7C4nEYUvF6MOOxhtdE5tAoumpyL9DJKlkkqoy8y8NdYYySUtUk9SKGy2OVZ2W FqywRP5FIIUh/+iP6pt8A6bMt2SSZ9YlyT/tA6clT65Lssqb65Js8ui69N7Kq+uS7M+uS9LL u+uSDP3hdUnH/vK6pFN/el3S8uNaWrQYeXxd0vxrJWoR8iNGSuH8/joecJIf+1FhEQXIa+2S 5h8nUajLzzKp8EK6PUQQ8u3OvPzYjl7v5h9awE3k/jNA6nLt7Uap/DCNUpb8lomylvzwidIU P3aPW0P4RRpJyw+cqKqLGTcE+PcbcIo9yi+39LLyGzfpYJty6R/0AlYAKXzwOQ46qsbHREw/ R6hAPxU68EQgCTx5PbhC82HKOD7d5lPbRRwO8APJfjhbwmvEMugXUyctBD4GgOH+QM/weXBw cGvwamBvcLZSNrwVfBRcFPzRwKaSNdwTcOqHOWg+xSxeQIPzAn7xcBd8GTwYHBjcFpwVXp3B EzN4WAbvyuARGdgBXsiBj4NN4PkVuDzYB14NgQeEreCxCzhE2A3eaIB/hA3haQG4S9gTbsTD pvTuuPGwf9UHPCccJy7AwuZwGxfeEz4T9yoDeEN5ER4UFwv1Qp+BQ8VFOL2AZuBfcXErDI7R dlUfesHHwPviYoxeSDFwxnDBatMGDjiAo9SYcDA/DL7S+tRowuAurQ+OBDym9oHztwGcpvp4 +an9qPnkp/ZD7UrPeRocfMTKMECPaldYKOpJOYOjY1g36lEug7NNWEbqWSODwzdYVephGIPT IVhk6mkNg+MLWHPqcQKD/XUsQXW/22ADGCtS3ZA12KHEAlV3DA220LBe1S0tgz0eLF91z8Vg E2Ky5OtkpyF7g5UugrovP7WSD9eHqmwEI2+fH64XtZOqNIRzNJpjEHBAvEEnifyLivqpMxVV WtL1VlJlJTW2pI4wqZKSGltSI0tqZEmVk9TIkionqXKSeqykSklqVAnOUpWR1KiSGlNSY0qq hKTCT0puSY0pqVyTyjWp8SR1LknlmFR+ScGfdNGUlMSSgj8p+PmHAvunrn9VflnXsVnBnpW0 ssoxK8izyi8rWWUFeVaQZ5VjVlBnJaescssK6pef2p6C/fynth/Lg586bjWml58aP1CSzLpz mtW4shrXy/iGfo/4hhpf1i3ArPrPaoRZcZAL4iUqF2yZsTF+/CDJh5+PBk00CKKMWnSm/WAQ pQ/2ciRFkVkUmUWRWRSZRem3BO2kWnhRCy+K1KJILepGiyKt4Cd/pHMKm6LqL2rWRdVbVL1F zbqoWovCpKh5F6XLonApat5FNVtUo0U1WlSDRTVVVENFNVRUI0U1UtXcq2qmIkorg1BMV1VH VTVUlXzVCUxVSVeduFSVdFUOrcqhVSVeVdJVubTqIqOqxKtKuuqCoyoHVJV4VW6taqNVhV3V Jit+ZogHUZVgq2qiqiaqaqKqJqp6t6qBzKoGVtXBVdVIVY1UNdyqNldVI1U1UtW2qtpWVY1U 1UhVW6lqK1U10tSBNbWRpjbSVAlNldBUCc0dCKCpJppqoKkGmmqgeXyvlagGmmqgqQaaaqCp BppqoKkGWjzA5BZS1Mzq4pq6uKYwakqNTTXR1OU11UhTCmyqmabU1/IHoUrVTFMqbeoCm9pI U800ZcGm7NfURppqpimrNWWzppppaitNNdQa8h/mPc4iKmYR/7M47G4RFbMISlgcyLY4kG0R HrOIEVpE5C0CZhZRGIsnLw6xWGQOCMEiWGixdrY4IGixZWERlLVYR1sE3myyx8FhHW3zSIxQ L9rBzoHFetdiwWvxAJ3Fzr7F2tciCmyx+rUI/lqEei0WwBYRXoslsMXmpXYTXRhBXYvgMNTj EHByCNg6OzIjpAyFOSjMQWEOCnNQmIPCxhaKg8JG2MxBYSPg4aCwEepw0JxDdNdBYQ4Kc0ef coipI+wx4h4j4OHSyINaEdNwOF3koNQR1hi7QCOgMYIYH/5uj3EjnjECGiOi8X8X44dI/n8C /eMHBlDcofjtafyxGYDMt0fdx/YAMo/nyLHF4oGb6YaBCuDcrgEq+1989hf1AIi3B2sRc/MA 4uGp1bGLMTKPR0LRVVyGPjxvOXY6kPn2MOPY+0Dm8eoeIHV4dQ+ZsWn1i/ZHVCGHZ8+wEwK4 3Ns2GTsq2MoG39w2Um4vOyEzAHR4jAhNAECH93PG9gsyjydfgAtEhI6vlIwtmpH5GOL8cJ9m /Hls1qAYaCggpIowEZ5vMHhRweCRA4NXBgwu/htcxTe4Cm9wOd3gurjBdW2DC9QGV5rHleJx yXdcux3XXsdFVIOroQZXMw0uSxpcXzS4Pmhwoc/gip3BFTeDS2cG18AMrmEZXIwyuKpkcFXI 4PKOwXUag+ssBhdMDK58GFy5MLgEYXAtweBagMFBfYOj8wZH1w0Okxsc7x7Hq8eB53EEeRwB HodyxzHZcUx1HBwdRznHUcpxuHEcNxzH/cYBvHEkbhxJG4fExrGtcWxqHGQaR4vG0Z5x2GYc fxnHTw67h7/+1f8ANL0uiA0KZW5kc3RyZWFtDQplbmRvYmoNCjE1MDUgMCBvYmoNCjw8L0Zp bHRlci9GbGF0ZURlY29kZS9MZW5ndGggMzM5Pj4NCnN0cmVhbQ0KeJx9UstugzAQvPMVPqaH CPOmEkIKaSJx6EOl/QBiLylSMZYhB/6+ZhclTSLFkpFmd3Z214y7LV9K1Y7M/TC9qGBkTauk gaE/GQHsAMdWOV7CZCvGBeFXdLV2XFtcTcMIXama3sky5n7a5DCaia02sj/Ak+O+GwmmVUe2 +t5WFlcnrX+hAzUy7uQ5k9BYoddav9UdMBfL1qW0+Xac1rbmwviaNDAfsUfDiF7CoGsBplZH cDJuT86yvT25A0re5JeqQyN+aoPswLI59zmyl/iZdREtkMa3xE4XNuWDW1E/RFro5TMKEkRR iCikXOw9bhjGJJESO7hqeLdFSHPFz/9Fg3vRHYnuiV3gQJFH49FDxDsKRhSk9on/eN9oQ7QE a9N5X5/7PqLCQ+QFj/ctqGERE/v6gef/ONvtbBJxMsb6Az2Jxpgt0So421b3eq6a7x+G79l6 DQplbmRzdHJlYW0NCmVuZG9iag0KMTUwNiAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2Rl L0xlbmd0aCA3MzEzNi9MZW5ndGgxIDIyMjYyOD4+DQpzdHJlYW0NCnic7J0JfBT1+f+fmdn7 PrLZJJtkr2xCLhKC3ItsTgJBORIloSgJIYIHJQpYtSpY6xW1aLVWaxW8kBYtm43agP4qta0X KqBW0VpAwQNtK9VqDy3z/3y/GyL0ZcrSH/nl9//l+958P9/rmZlnZmefzJPZ3ZBERBkQDa2u aZw2dYHb9jQp058lynprak1t3SL34lNJ/s46IvnuqbNmNp5xqPeHJF8VI/rJJ1MbT6t63DIr nZSyk4h8F0xvbKpbWnS2DstvwFpzZzQ11n9wz9YLiEbXEFlbZzaWVbibLroe6zJgvnVW9Yym lleu2If1L0F/7Ok1pzSfGl7yHaLY/UTOW9uXtnVeu7p9DEm3YHtyVfuFKwKHyncfJGkjzPVv ntW5eOmv1udIJP3gu0S6UYvblndSBhmxvmYYOBafd/FZGxbdexpJibeIHly4ZNHSiz64Mngn 0ZzxJFUalnS0Lfog27+dSLqBbX8JBlwfp41F/9fo5y1ZuuKiiza5rsG24V/5m+d2XPDNQ3u+ 2ETyii8x1nvesvY2qn3teZLnwb+sLUvbLup0f2TfgeU/wPKBb7Yt7Rid/cdXSP7WI0Sm73Yu W75CzaNF8G88m++8oKNzwnvPWkm6s5fIXkvsudCOn9M2/fY5C+zRzwyZ7DAR3bsv5ylWv3zr qvAXK/55g4MMNnSN3J6BWh88VEtzHfTFin/scVD/TB9mJxuxzqd5pPABmRxURqfjqEWwXYai jJFuIi0ZtD/SjsYKIslaWUdnyS5JK8s6RavRyopmLxWpW+miSu4BaDqlOkAxCgRC2hsO1Umj 9UHp8RhJqqpi6Vu1M9iekkY3QcpObriv/JT2KzV0Ff0L0vk0G3NNKCM1RDdrrqQI7L+JfiPq m+UJpGB8OspBlBKURpQAykKUZpQZKJeizIZtHOV7/7oNhvYZcmhPpxDKdLTDmn1UpFlOQbTr WR/bG63kUBHaIcwV6nNg+4z6LpuHXYjbnY7lltNqzJ+MvhnFpb+RfKjtKG6MZ2E9Gyi5vw2s 1pD6MT/cN9I0tL9AXQdfa1DPgM1MtCejWOF3VJ6gtqPtRHuybgI50bag1GK5v7NlYG+Fj4sw n4a+zGyxXStqH7PFOgu/bt//tyG/SJ1D7UMq4Lj/6cg+jv9mlF8OlT/sHBmqbQsEAoFAIPi/ j7RB3TLUPqSK1vf/j68CgUAwlEikbjGgOEjETYFAIBAIBAKBQCAQCAQCgUAgEAgEAsHgw94H O9Q+CAQCwddjna+XJGkx+xQLqTrdfIP3DMPk3H6m8gmqrbfFMhZOPbmjo70jIxZriRVPmBOr frU61qbS52SgijOn1DfsX9Q0KbFw6qdNZ555ZllodFPb/PZnOlJ25NOULdlHSzbu+vc2k1Je m2CYIR3b5D8wFRwDRJmhdkEgEAgEggERv6UEJxKFFImhVRRJxjVQhvYP5q30N4OKPMagHiIj maAmrmYyq/8kC1mgVq42skLt0C/JQXaok6uLHFA39AtKIyfUQy5oOqVBvdB/UAZ5oJnkhWZx 9VGG+nfKpixoDtdc8kH9lA0NQP9GQcqBhsgPDVMAmgf9K0UoCM2nELSA6wjKUz+nQopAiygf WkwF0BIaoX5GpVQIHUlF0DKu5VSs/oVGUQm0gkqho7meRGXqpzSGyqFjuY6jUdDxVKF+QhNo NHQijYFO4hqlsdDJ0D/TyTQOOoXGQ2M0EVoJPUhVNAlaTVFoDU2G1kI/pjqaAp1KMWg912lU qf6JplMVtIGqoTOoBnoK1ap/pFOpDjqTpkJncZ1N9eofaA5NhzZybaIG6Gk0Q/2ITqdToHO5 NtNMaAvNgs6j2eqH9A2u82kO9AxqhJ5JTeoBWkCnQVvpdGgbzYUuhH5A7dQMXUTzoB30DehZ 0PdpMc2HLqEzoGdzPYcWqO/RudQKPY/aoEu5fpMWqu/SMmqHdtIi6PnUAb2AzlL303JaDF3B dSUtgV5IZ0O/Reeq++girhfTedBLaCn02/RN9R26lOtl1Am9nM6HroK+TavpAugVtBz6HVoB vZJWqnvpu3Qh9Cr6FvRqugh6DXQPXUsXQ6+jb0O7uF5Pl6q76Qa6DHojXQ79Htc1tFr9Pd1E V0Bvpu9Av8/1FroSeit9V32LfkBXQW+jq6E/pGuw1O10LWbv4Pojug56J10P/THdAJu7uN5N N0LX0veg66C/o3voJui9dDP0Pvo+9H7om/QA3QJdT7dCH6TboBugb9BP6IfQn9Lt0I10B8Yf 4vow3YmRn9GPoZu4xukuaDfdre6iBK2F9tA66CN0D/RRuld9nR6j+6A/59pL90M303r1NdrC 9XF6EPoEbYD+F/1E/S39guuTtBG6lR6C/pIeVl+lp7j+in4G/TXFob+BvkJPUzf0GeqBPkuP QJ/j+jw9qr5M2+gx6Av0c+iL1At9iTarO2k7bYHu4LqTHoe+TE+oO+gV+gX0Va7wAvoabVW3 0+v0S+gurm/Qr6Bv0q/Vl+h3XN+i30B/T09Dd9Mz6ou0h56F7qXnoG/T89B3aJv6Au3jup9e gL5LL0Hf4/o+bVe30Qe0A3qAdkI/5PoRvaI+T3+gV6F/pN9C/8T1Y3oNepBeh/6ZdkE/oTeg n9Kb6nP0F/od9DOun9Nb0L/SbvVZ+hvtgf6d6z9oL/QLelt9hr7k+k/aBz1E+6Eqvas+LWL6 MI/pH/GY/hGP6R/ymP4hj+kf8pj+IY/pB3hMP8Bj+gEe0w/wmH6Ax/QDPKYf4DH9AI/pH/CY /gGP6R/wmP4Bj+nv85j+Po/p7/OY/j6P6e/xmP4ej+nv8Zj+Ho/p7/GY/i6P6e/ymP4uj+nv 8pi+n8f0/Tym7+cxfT+P6ft4TN/HY/o+HtP38Zj+Do/p7/CY/g6P6e/wmP42j+lv85j+No/p b/OYvpfH9L08pu/lMX0vj+l7eEzfw2P6Hh7T9/CYvofH9N08pu/mMX33EMb02/ti+hv/UUzf xWP6Lh7Td/GYvovH9F08pu/iMX0Xj+mv85j+Oo/pr/OY/jqP6a/zmP4aj+mv8Zj+Go/pr/GY /lse01/lMf1VHtNf5TH9VR7TX+Ex/RUe01/hMf0VHtNf5jH9ZR7TX+Yx/WUe03fymL6Tx/Sd PKa/zGP6Th7Td/KYvpPH9J08pu/gMX0Hj+k7eEzfwWP6dh7Tt/OYvp3H9O08pr/EY/pLPKa/ xGP6Szymv8Rj+os8pr/IY/qLPKa/wGP6Nh7Tt/GYvo3H9G08pm/jMX0bj+nbeEx/gcf0bTym b+MxfRuP6dt4TH+ex/TneUx/nsf053lMf47H9Od4TH+Ox/TneEx/dhjF9GIR00VMHzYx/Y7/ Vkx/fZBi+iYR0/8HYjoh4pK11ZxuJEXRaNkfaWSNRqdTNIqi60dJft2gQa836HV6g0Zj0JsM BnS0UDOKhjSkIy1Do4W5TjFiMa1Gg54ejZT/QqRJ2VLHrI9hrqS8NsEwQ07dVD94Xgw7JHP6 ULsgEAgEAsGAiCtHwQnEknF0fqX/2vzKaDAY9XqjUaM16i1Go95o0BmMBjOG+/IrHR5f5Vd6 nUaLVM2o1etSdkTkV4L/EY4jvzIMnhfDDtmSMdQuCAQCgUAwIOLKUXACsWaZWH7F8yDkV3qW X2mOyK+SeYyJ51eGI/IrdAzWvvxKT8iokFNhYZZf6YGG9ZBfDcb9K3ZXQeRXgv+Q4zg1RH51 4pCtWUPtgkAgEAgEA5L6dahAcEzsuRYkK1qeBylard6gaFmWdZi+/MpsMpmNBpNZqzMbrWaz 0WwyGM1mGwa17F8SE7fVsvxKr5h5m+VXaKV+/yr1TIxd9WqPYS7yK8EAHMepYRo8L4Ydsj13 qF0QCAQCgWBARH4lOIE4AkflVwajRqfRGPrpz6+QVCGj0uosRpvFYrSYWM9u7s+v2Eey+M0v A/IrLHf8+VXqliK/Evw3EPnVkCA7AkPtgkAgEAgEAyLyK8EJxBmyfpVf6XRGE/IrrbEfbV9+ ZTYjpbJYtHqLyW6xmCzItixmh8VsYvmVkVhKZdAhrdIatFaDEW29Nvn9Fyk7knp+ZaRj51ep 3w0TDDOOI4CaB8+LYYfsDA21CwKBQCAQDIi4chScQNz5diQrOv5JE/aVFGatTntEfpX84guy WqxWs9lm1emtZofVhpYZIy4M6pAYmchgMpoMOphrjBqb0WQy6QxYidVoTP0TLKlnYuyugv4Y 5qlna4JhxnHkV5bB82LYIbvzh9oFgUAgEAgGRORXghOIp8jxVX6l15ssWr1WZ+6n7wvWbTab 3Wqx23UGu8Vlt1vsNjN6bpvdokdiZCYj8iujHmmVzqRzmMwmk96gM5vsJqMxZUdSz6/YXQWR Xwn+Q44jv7IOnhfDDsVTNNQuCAQCgUAwIOLKUXACySh3k05n4J800RgMFpvOoNNb+tEl8xin w+G0W51Og9Fp9zidNqfDYnM4vGgZyEAWMlvwMJgtOp1F52LLGYxYidNiSf0TLKnf6WJ3FQzH MBevEsEAHMcfqOyD58WwQ8koH2oXBAKBQCAYEPE/LwUnEN9YD+n1ffmV0Wi16416g62f5I0t crtcbqfd7TaY3I4Mt9vudtkdbnem2+0wkpFsZLHhgeRMr7ca0thyRpPBZnFbram/wyr1TMyG cqwbY+JVIhiA40i9nYPnxbBD8Y0dahcEAoFAIBgQ8T9ZBCeQnIner/Irk8nuODq/6rtPlOZ2 e1yOtDSTOc2Z5UlzpLkdLo/H5/E4WX5l5/mV1WiFuc2QzvMrM1aSZrOm/g6r1PMrdlfhWPmV eJUIBuA48iv34Hkx7NDkTBxqFwQCgUAgGBBx5Sg4gQRimWQwmHkepDWb7S6DyWB09NOXx6R7 PN40l9drtqa7s71el9fjcqd7c7xet5nM5CCbAw+T3W40OoxeO5Yzm412u9dut6XsSOrf1eZg 1scwT/1zX4JhxnHc2kwbPC+GHZpAbKhdEAgEAoFgQMSVo+AEEqzKOiq/crP8ytlPX37lTU/P SHNlZJit3rScjAxXRrrL4/X6vRlpLL9ykp3nVywdcxozWV5mthidDq/DMRj5FXvXlsivBP8h x5FfeQbPi2GHJlg11C4IBAKBQDAg4spRcAKJTM8ho9HMP8mvtVjcHqPZaHL3Y0y+bS8zM9Pn dWf5zPas9KDP5/Flpnl9vpDPl24hC7nJ4cLD4nIbjS5jDvuwlsVmcrt8LqcjZUdSfyche9fW sd54KF4lggE4jjcAZAyeF8MObWT6ULsgEAgEAsGApP45FYHgmBQ1BclstvFP8htsNk+G2Wa2 ePqxJL+gIteXnZvlzc2xOXIzI7m53lyfNysntyA3N9NGNvKQO83lcVk96RazxxJMT/N47A6L Jy3H4079Eyyp3+lidxVsxzAX/7lIMADHkXr7Bs+LYYe2qGmoXRAIBAKBYEDElaPgBDJyfh5Z LDYXaxvsdk+WxW6xevuxJO8TBXL9weysYNDuCmYXBoNZQX9WTiBQHAxk28lOXvJ409Ld9vR0 iyXdEkpP96Y7XFZvesCbnvonWBwpW3pR7Mf46mzxKhEMwHH8gSpn8LwYduhGzh9qFwQCgUAg GBDxPy8FJ5CKRQVktTp4HmRwOjOzrU6rLbMfW/J0CweDeX5fXp7THc4tycvLzgtm+/PyRubl 5TrJSZmUnpGemW7PzLBYMi2RjKzMTKcbvbwMb3rKjqT+XdiZKA7Hv7cR+ZVgAI4jvwoMmhPD D13FoqF2QSAQCASCAUn9fVQCwTEZe14R2WxOngcZXS5frs1ls/v66btPlJ+XVxDMLShwegoC 5QUFuQV5OcGCgtEFBUEXuchHGT48XFkwz7IXsuVcHrsvq8DnS/0TLK6ULdm7tlzHMBf/GVYw AKl/kQqFBs+LYYd+7HlD7YJAIBAIBAMirhwFJ5CJK0rJbney99yR0e32Be1uuyOnH7uDWxXm FxSF/UWFbm9h6KSiokBRQSBcVDSuqCjsJjflUFYOHq7sbCxqL87Gcm6vIzu7KDs7K2VHUn8n IXvXVtoxzMWrRDAAx3FrMzJ4Xgw79BNXDLULAoFAIBAMiGOoHRD8X6L66pPI6Uzjn+S3pKcH 853pTneoH1fyCyrKSkvLC/PKytOyygqi5eWR8tLIiPLyk8vLR3jJSyHKDeWGctKDIbc75Dop FAyF0rPcoWBZMJD6J1i8KVuyuwrpx3jjofjPsIIBOI43ABQPnhfDDkP11UPtgkAgEAgEAyKu HAUnkIbbJpLbnZHL2tbMzHCRO9Ptye/Hk/wXQGMqKsaOLBozNjNnbGn12LHFYyuKSseOqxs3 dmQWZVE+BfPxyIjAPOKZwJbLzPHkR8ZE8oIpO5KZsmU+sz6GufjPRYIBcKRuWj5YPgxDjA23 DbULAoFAIBAMiLhyFJxAGtdXksfjC7O2LTt7RJnH5/EW9eNN3laaNH5cdPTIaDQ7GK2YHo2W RceNPCkanRmNVmRTNhVRpAgPX2GhN6PQO6UQy2UHvIWFEwtHpP4Oq+yULYtQfMf46uzU74YJ hhmpf5EKjRk8L4Ydpsb1Q+2CQCAQCAQDIq4cBSeQ+b315PXmsntCZPf7R57kzfFmjewnK/kB qqrJk6vGj66qyolUj59TVTW6avLoCVXVc6urxvnJTyOpcCQe/tKRWb7SrDq2nD8va2Rp1cjS ESk7EkjZciSK3//vbVL/3JdgmHEcbwCYNHheDDss83uH2gWBQCAQCAZEXDkKTiCLnj2VMjOD PA9yBoMV4zODmdkV/WQnbyvVV1XXTx5XX+8fUT+ppb5+fH31+Mn19Qvq66MhClEFlVTgERwF 84rsU9lywQKspH50WWnKjoRTtqxACR7jjYep3w0TDDOO4w0AsUFzYvhhXfTsULsgEAgEAsGA iCtHwYlF6SvZJPH+Q+ihJSVIQzcRu7MUQIt9r8Qk+gadQQvoElpHD0uj5HHK5bpYwB3IDIRU lVsWUCW3aPsXiwxmoe474tGOx/2GXV+u+zK+9+69d+3t6Nv6v0XSUb+ZJMtE8r8aYFc0WtYy mS1Wm93hdLnTPOnejMwsX3YO/5QZ5UXyC0YUFhWXlI4sKx9VMfqkMWPHjZ8wcVJ08sm4oq6i mtq6qfXTpjfMOOXUmbNmz2lsOu30uc0t874x/4zUj+k1qRgpXLtRHn3sGKa/PaL9v+5ZiVWd 1hSbcvLk6KSJE8aPGzvmpNEVo8rLRpaWFBcVjijIj+SFQ8GAPzcn25eVmeFNT3O7nA67zWox m4wGvU6rUWSJSmrDda2BeH5rXJMfrq8vZf1wGwbajhhojQcwVHe0TTzQys0CR1vGYHnWv1jG kpaxfkvJEYhStLQkUBsOxF+sCQd6pXmzm9G+sSbcEoj/kbdP4e2beNuKdjCIBQK1GUtqAnGp NVAbr7twSVdtaw1W1202VYerO0ylJdRtMqNpRivuDXd2S96TJd6QvbUTu2UyWOFUPCtcUxvP DNcwD+JKpLZtUXzW7ObaGl8w2FJaEpeq28ML4xSuituLuQlV883EddVxPd9M4Gy2N3R9oLtk a9cNvQ5a2FpsWRRe1Da/Oa60tbBtOIux3Zq495L9GV91sXJXdfM1R876lK7ajLMDrNvVdU0g vm5285GzQaYtLVhHXI7UtXbVYcM34BA2NAawLfmqlua4dBU2GGD7wfYpuXcd4Vo20npOIG4M V4WXdJ3TiicmqytOcy4OJrKyYpvVvZRVG+hqag4H41N84Za2muzuNOqac3FPZiyQefRMaUm3 w5k8rN02e1/DYj2y0dE/x1vcnLUa5vQfV4l5FJ6G0yEeaA/Ak+Yw9mk8k47x1NU+HmagRcJS 8UV4Ps6OG6tbuxwTMe5gy8e1EUc40PUZ4fkP//EPR4+09Y3oIo7PiDXZWdJ/omH+cDteXBwv KmIniL4azyh8PJn3x5SWXNgrx8OdjgAqHD6ahWPb1jKxDAc/GGRP7/W9MVqITnz17OZkP0AL fQmKlRW3xOVWNrP18IznNDaz+vBM/+KtYZzHj/DXtyduyO//sTvS3bVLJsal9H8z3ZGcb2gM N8ye1xyo7WrtO7YNTUf1kvPj++f6WlJyAgc8rongSE0L49SbM6+ZDeBHG6kL157dWo+XGnyM u6ubFZ/ckmzJPoWvCufv/P41s06zha1LE9Hx839Rr96AE5iPSIG6uKO1PqktpmAwxYV61YNs KV59tVjfPsUnFh/dn3RU/yj3LF0KHNbkyw1N87q6TEfN1SFYdXXVhQN1Xa1dbb3q6oXhgCPc tVlpVpq7OmtbDz/9veqW633xuhtasBNLpIk4tWWq6g5L187ujknXNs5r3uxAqL+2qTkhS3J1 a1VLdx7mmjcHEJ/5qMxG2SDrBFiHGiS8KhKygdv7NseIVvNZDR/g/fZeifiY4fCYRO29cnLM cXhMxpgmORbjYwwWKaqbmo88B/gLq4X90XUzNSl/6FGK/FMqPcp+alUO0FrlXdqDoiEHRhxo TUHpRFtF0apblbd7amsrYr2oi0fyOjGisGIzm0hkZVf8l/K2/BB+1/kxsCeR7uMzuxNVVX2N seOTjZ6i0oo9lSZlN32MIiu7lT00IrlUz4iRFQcrrRiQlMvJLknkp3XK7ymOIlNMebMnL79i 7ZPKC5h/XnmOFvHFnktYnRVY4TPKz8lFfuUx5dG+mUd7bM4Kqlyu3IjDthW6A2UvykEUDS1T HqRVKGtQNqFoyA71o5ShzGQjykZlI/x8AMvboWUoy1DWoGhwCH+K8XOZKhuUc3At4FduUG4l D+rrlVt4fT/qLNT3YjwX9T3os3ptX/9O1Gz+R33jd6Cfjvr2vvqHGPehvg19Vv+gr3+hspIv t6KvXqcsT+T6HZW5mA+glKMoaN2K1q04dLeyyx2opFypnMe31I26AvXSZI3DdVkiGObP0WU9 3syKdTikl+HQX4YjdxmO3GWkwdSlh20uTdqUKpfC5lLYXAqbS3FUypXl2N5ydm0IdaAEUBQc 9+U47mw8Dt2KsoOPfxd6E8o61lO+heNYCK+uU85JjPDjJFvcMyFWMeVx5Swc6phyVk9mTsWa r3pGEzsRUdv6ajuz7eCzHT1GCxvt6MnKSdawOrfSprTTt1FkSoPmoZyEUoOiUdoTeWX+Lcqp tNRAMZt/lbxKWaVZpdWU10iuJ5UKmmUgnJIupZSiMCj0L4hK41qNncbVRsVhDBjLjTHjLKN2 mbJKWaMofqVMmaLMVBYo2l51a0I/cTSq2FTdxNE3mdeZ4+at5h1mbVy3VbdDt1d3UKcN6Mp1 Md0sXauuU7dad5Nunc54k+4mvdxq7jSvNisOc8Bcbo6ZZ5m1fr20rvIqZSG/3l6IY7wQr9OF OIoLcfwPKgswHlDORFmAZ2MBDsWZ7FoVSug5UHagvRe1Fj077Oyws2PUjlE7RgnKZmahtKJ0 9s3q+mcOL8PsD7IZlALM2jBqw7HdCz3IWijT0bOiZ0XPCqsd8pfw0AENoMxCUfjYXhSWVHzZ P1feN9+KouPzB7nN4bkYW1b+MtZWsLVQihdK6wqlmwqlWHRKZUUsBHG5XAvCCyILRix4QLMs vCyybMSyBzQzwzMjM0fMfEAzJTwlMmXElAc0ZeGySNmIsgc0/rA/4h/hf0CzZsamGU/O2D5D s2DGshmrZijj8NT1JIrLK3gdirD60URmVsU4e+UkeRN2ZwF0LcoeFIX80DKUKSjLUDTyJqhf fhijD2P0YZqJsgBFiyUeZuEF6u+bY+Nr+RxrsXn5qHkFO/5QYuLomZXTEXIXoKyVWdpYBp2C wqyTrU18PA7dy8dn9tmv4+N+6OFlFAS4eTzMzcPLbx6C/zxagNKJoqXtylz8cpjL1gz1o3Si bELRKPPwmKvMlR/G4yH5IaUkZh3l8Se/A9HlNDgqHbIF54BV2sD1dq7XcZ3CNS9mm279fLr1 F9OtV0+3FqAhj0DKZJVu5RqMmSutj1RaZ1ZaCyutWJuXgmSVPVx1TKWPuJ7KtSSWFrT+PWj9 NGj9c9B6V9B6ftA6OciWy8Zr1yqncTUzlW7jOp1rfszstz7tt871W8f5rZVW6W4JW6cqrrlc fUylTx6x19jJ+Lj0CdVgTVIiWujHr2ReSWoiWonqUCI6FdU/E9G7Uf0jEb3F/4T0d4n/SpM+ T+Tt91d6pL9I0zSs/2lf/WdpGm1EfRD1YtTrKSpFUN+fiF7B7O/D8j9C/14KGZj9PTSLL7dW msbH7+pb7seJkoXY6p2Jkoux1R9RCd/qDxMl+zF6S6LkOlTfT5Sch2pNIsIcPCcRLfJXOqXF lCcz23aKyMyTGX1brMeaz0M9NblwbaKELVXDNtArVSfCo1AVMC+fkMI0i2/OnwjzncyhMF9F NoW50z6K8Nom2bnzVgrx2pAIX4G16B6J7Pf/Nfo423H6TLIn7vbvewL7dzq670jTEhv9Ozez w5Xwby/plSKP+V8KP+7/TV6vdHrCv7Wk14CJJ0t6ZelRfzcOchy2svSYf1PJYv/DYT77QBiz eKrXRkv9d4bn+e+IoJ/wX1HyBHODlmKPT8d0S8nJ/hnRjf66SK+E6VgUG4uZ/BPDF/gnYHh8 rzStZ6N/VF4vc6Uc69j4mL8IW8wPc1dOG7dFHkN6aWWsRL9Cv1B/un62fpJ+tL5UH9Dn6LP1 aQaXwWGwGSwGk8Fg0Bk0BtlAhrRedW+smP0ZJU3nYJVOw1TD2w6ZKfuLC6K+LBlkvHbibqVB bmiskuKuBmpoqoqPK27o1atz4uOLG+KGWd9o7pak77WgF5evxZVkUzNOUDZ0lY/ln5tJksqu utHH6kuvurGlRWqIb22nhoWB+OeN2A8TrqO14aoMSr9wSsYU18nOCXU1XyOtfVr8FRnFR5KR E7+tobE5/tOclngFa6g5LQ3xqSxz3SyfLy+rrdksd7KqpXmzdIl8fu0cNi5dUtPSb0YhuRNm FGUVM+uhEDOjkNTDzWZwM5ymodqa7lAoafSUNI0Z4fR5ihstTq4rD5vAumaxCmZyLuXxdeXJ ucwM50NyZfYjV2Yhyc5XZrcQX1k2M+qORGBSEmEm3eMiMOiOjOPTG7+aDkeS7rRQhG8nIrXw 7UjSVzYjkjY4C/psZANsik8kHVXHYSz1tL21qJ39/aA1XNuB0hq//sIlGfHVCwOB7kVv9f1h Ib91YfsSVrd1xN8Kd9TEF4VrAt1t7V8z3c6m28I13dRe29Tc3R7rqEm0xdpqw201LT3rV1U3 HLWt6/q3Vb3qa1a2iq2smm1rfcPXTDew6fVsWw1sWw1sW+tj6/m2GuZUSQ2zmrsNVNWCBJTX PbLZhNdDqy/YUpXu6DyZvzgmBTMu923REH5tmZG8W8JVcSsKmyqtLK1kU3h1sikb+wtR31TG 5ZOCvi3Shr4pB4ad4Soqpozas2v6f5YvX76ClZUri6ErVmbwsRV40QYbG+J1LJ+NxqO18Vhr TYvEno6VfVQ3xxxPRrdH5WXRVdE10bXRTVHtypUtGHY9GdoekheEloVWhdaE1oY2hXRsYn7z Y7Ho2tDHIWUlziZpBait4dtciRo/rLti5XIGYQPLUZKbK15ZXN1cGaJ2XO1KuDIvJTdKGGU0 SiOKln4FfQVlH8qnKBq6EnoLyn0oPWxEKVVKazPOrmFbbClmQSdDqegpH1Mxvhd121nJunFe sq49NVlHKysyUCemjDZV2nHhLdEW6PMob6J8iPIPFK1SoVTwla9MnrUty2l5sQT3CZ0VTJYX r5CK0ZDY4V6xvLiYWGEnOJ4BmBZLR5/3JC1fSTgUeEJQwYiPLmeLrWT1YdgEQrH2eygzyI+S zTM0Ut9G2Y/ywaHp6pfacyl86Bx1r8Letv9wX2H/GeU2Wkt5dFAaRU/RVkTy9bjUmUW30lTa TpvIRhdL23A0w7jC2IB44UfcryOvpKU76A2aTxfQu7QXWXMD7ZZcWE8tdSJbnKAegDbQtepm WJmomn5GW6TzpEYqQ7teLsGRiNAadSt5aYT6oroLvbvoXSlP7aZ6tN4jJ67OV9HNSKPPoefV L+FpHi2kB6VLpQO4tmql6zUnabrUc2kSPUq/lRrQOoUu1u4yPoqrg5vpPskrbVX3qO/TL/C7 tANr+g5dC48TtFUeqVRr11GA8mkynUptmP02vSG5pVFKTC1Qq9Q7MPogfSIXy08revhRTNNo Ad1I9+BovEb7cSlglsbgCmcjHjulP2l3wbcGWkmX0Gp4vh7LPkSbpVHSKNmL60MZe1hIp2Fu DT2A7ffQDqlBapG2Sr9UHtCWH5qipqke9X1VpSJqhodr6ZfYxl+kcthgC0pIWaHJ1azQVvzz CuzhIvox7aCd8GM3jvtn9DepCI+35cvlVepcdYP6Lnwx4NphPM2mebSMLqRv0b14Vp+iX9Of pS9kIyy3a36jvUR7UP0+jm0+VcH3mbBuxLqvx7OUoF48XsNeOqUA9mK8dKo0R1osrZFuk3ql N6Q3ZJ0cxK/KD5W4sk15SzNWq1UnYk3pLJPHWTKXluAZuBxH+/vY3w30G3pO8kj5Uin26DUs /7k8Sa7B4z55u7xbuUpZo/lSe/WhvYc+OvSF2kV6nGVTcRxW0v+j60vgmyqz9t/lLtlzkzT7 vqdN24QmaWnt0Fs22VtWAa2UooCA0hYFQfioCJZV0FHEZaB+ihvMJ1CBAI7bqCPqjDruzgLj VAW1jt8M4wZNv/PelpH5z+/PS9779iZNzj3POc95znvDjyfBC3/DNrChGC/Cy/BfwfId5Glq oBIN0xytp9PoLLqR3k1fpb/j2rl93Mf8WH4uv0+cW7ih8Hb/+P71ij4RwK44KkVZVAXxMx+i aTHY1wqjHa1Gt6LN6A6Il7tQF+jdPHoOnUTvoT+hrwABhINg83Xw6ddD1G3Ad8C4D+/HL+CX 8Un8F/wtGyQEI0EqSR0ZQUaTBWQDjLvJW+R9coZ66Dzovztg7KZH6EfA0hzXz1fAGMNv4R8T XhcT4hixRfXGhd6+kr5ZfX8uoIKrcGVhZ+GFwuf9M/pXgv1RVIbKwdJOsPI+iMG9MJ6ESDyC XkFvoA8UW/+OCeYh4h04DNFQCqjV4ctBaozFE/FkGNNhXIFnw5iLW/BCGGtxB16Hb8Pr8TZ8 jzJ2wbXtxU/gIzCO4uMw3sOn8Gf4C/x3AkFMKERzlMRJilTDlY4gl5MGMgXGArIURitpJ8sB ocdINzlG3qcWGgW2nUvb6H30f+iL9F36A0e4Ui7F1XIzuAXcbdyb3Nvch9x53s+P4hfyu/kX BbeQFaYLi4RdwlPCGeGCKIiNIFdXi++K/aoosNVv4LoP/9vtppTwJl7GF3E3k1OQFw7aynfi 6eAxgUyjS+gd9Pf8fPwNDeCP8WZ6HV3c/zAdTb6nS/EM8hwOUT9fQ+ejragf7yN/IefI55wV TyNncYK7Ex8lS+kI6OgYr77DWbnb+DOgdD9ANWQNfp68TG+jt/X/CtXwu/Epfjd5GwW408SC TkFWd5J74Zd+R64jW9BMLsufR9eB35/gbwZ/DyMbcQl9l9uNPqVh8g/ornYCa/wWj+Mi5GpS jfcB4/ZhH+rFbagV34NkfAL/CedBEz9OH8MTiA7QOkD0uApk929pEL9LNWgWsxHHiBU3km/I dPqM8BbNQdvzFvo9WoUpTkPsXPxTQDdABtxN4sBpo4BN3sEVyIHuBb4/V3iGMTb/Ib8F4uwh WoqmoDRqIq+jGsiNT2HMRLejCnQcYnAjSpNdaHV/B74GeH8i8CdB0LehFNYCW9rBtrVQL2wk BFw4Bz71e+D/14D1x+Ov0QocgMx6HiU49sxWbhQwUzPw7xYY16Am+OlBdJdwmH8HNWA7Qlyg sBui/I/oaqg5f4XPd6FasG82eogrBasDwMxt8BsPFsYgGcbt6HVM0BqweRjkeSM3Bph3Z/8i uMLroEZNgJp4El3Xfy8aAdhN6b+tfwua0/9Q/1XQqU7tfxz4d3n/IVSJOvlZZAaf5LLAsSfx S1CP/oC3AG+PQR8DH0WxA30B43/A/mH8CbSZ+wC4s65/a/97yAr+CIGHWqCK9qDr0dfgtzH0 eZQpTCIH+0fTVqhQp9Dk/sf6/ViDFvYvAeZ9Bu0VeeCeDuTj90LsbuHmkzTYW4xsOAVnr+L3 INZkeSASPWw7DDhy4kGCT5BngdtE8twhxHN58uzTFGlEtjiMkVMl8M/B8wRRXIzUeDG+GjmS 0re1fbWTpHO1E/tqUR2spQswDUkHTUFTFCbs4dCFAH3+gsyj8xDRz8Pv9/T34FdAOeggThae IE8iJ1L3Py+rK4dmkSzXZ1VsH7HIF8xqXN8bFlQiuSSXfQwdBXvzdOxRvUj1skUL65ysR0jD SbItq5G5753St73nek3m6lQvquutkz4bksZtiuZJ4tEjcZjGctnKTIXNWiRSNgvhEDuDF8Zm CiNSqXruhvL6+nJ44AW0JOeqmzBhvCN5IV1fxk6X1bNvA2yADHsGLNdDzDx4NO981fmdjury /d93h6NZ5ViWzuJ8/5luMBnl+1+VvbBwOmByDYXpOx0WdXYd0Xg2wIXpIcKndYvUZYDjoSKK 4JKe1us1nIFdm83lsps013O/tl+PTNi0we25O7hoFXSe3zb1fTtwmYPX2ldbx1yexG1Ng81N O6bxS642eOmlE7nSRoaWJ6st1YWWKluurLTGVUnDOLLS6ayrqRkyfV7hDzixqlSuuWxI/I7C R6zeTYbnXQpik2W3xtDhW1CpZRelYxeV176q/VB7Rsvp2PUcFajBbnep2cXIGp1OfT3t0E97 hEVKL1g7SRp17cjPUN1EZjFuB2Mtlxq3u9KeLSu7TDEocUsSbEhH7xywYVphHFkNetSCauTw TtNjJnK7bpOJaHapTWgXKC0IBfXjhlCjgIWOomlXsw9s6u2rrZVqWTT0DgHmwU3YGovHSE5C VVZBINYiu4+Q1fdeu+NBXPHtLbsnBV3j1hSWRifMvxNvfhdX4v4bSkZ+Vdj58vtPbX7sfrCh HGyYodhQLUeKuRLVGJ7Ch5vACAsQqloDBgxsc1Ohwzrzkf80AjdZcja7zWyVkJirrDTnsvFy Ur7r2u0PFt787pY9E4PO8av5a0rGz7+rsOK9wmsFfEN01Jd48cvvHdj8KLPgTtIIFekOYNIv 5G3WaRuMV1YeMzzn6h59dMqbrl+P/rPr3dGqKv4yw1BjjeuyWK6qcnRmiqrIK4Wk2qL6ouFF I0rdpaN+5v7ZqEnuSaPmuOeMWulY5lk2YuWYjY7bPRtGbBqzy7HTc8+IXWOedDzq2Tti39jX Yq9VBSaPHVHNVUzIjq7kXMl4xGuXOL9Gj+KVFZwmyfnryleHavP4qBw2ZxtWiwjt0r9nzfrf i++qfK+uLjAhPeHNCW9N4CZsmMoCGFxSK/X19Z3rg9g9d66vtgebzPZqCObqwePFpYIZBDWO /RTNglhZVXlxKYjgy8FUjsfi8IOyVl5dWcWeH0zyKjbYSwbfx4a/5hyhIRF/eU6oKh05PBQs G75+YiY7fuX4Mp9v7LDinxFrJO2O+qzlOv6y0rFRlyeULi52Nw+7rHL8Ld6yMl9w3A1c0aiR LVH4pIqyh0aGKxpiZf5ojddkcxtsw+O+0pKxQ5LVI5YnE1Vea3m6M1MRT0+xSeUeZ5VZV6R3 uo0uazDlLitZixRFto27kvs10qI9sitFUjSgCqi5FArwASGlXYqWaoVmiGxoFicjkcaRBo5a 6FrjIKImM30OKzWdfESrRc085n8FJ9ktEZhp/ChuVmHVCUGbp3HZxTfDx50IkDSRQWG9RfgA weQq3cyBjGk71wT83dOEUr09Uk+TVCud61X+9vU0DaRQ1BTMBU0ZU9AaNBF7wYD/3ojPFXTb 8D+m4P8tGKcU9Ox6bijsw7vQq9CnTJXjs8gs+0s2qrY3O99yUjVGIscZVWZ0xCzrtFyN0eq3 dlipNY9LZK3fOMdIjE7Hg5A8UFeaJvY1MTrvMVfjgZCAJG6zQOpA5sTCoYsADwTEDQva1KKo jZqLhtSMrxy+YHthX2loe6NFry5S12SGjF42Z8FBZt1U3EFmQh9FUZ0cIHyH95rKtTzGyr07 ioiEG3Ez3oG78FtYgAYlexh1cNNmMwf1NbFcTvXCzExJWsANUwnfd57Y72XvfCfUtqWgOLQo KXuQLGiprJZrcmq5LjdHjfeon1IT9QbdQBq0Af2xaxuSjl5aj1BKVsrQi8pcnpLZ+9L+HjIM 8p6iKbIa8a/7oS5izADVE1pECJgN9VELDOyXiwI0TZtpK+2ip6lAT+Bfkte5PF568JTCwueY Q2vrajv58uQa6SVWOEDik2EFayP+kr/jxxn8k6zWjes/Q4/yC5EEPfLxQ3NVgTwWDvG8lR30 elceG2Wz2oVicozIseZYV+x0jIuZ2GnDHGgS10Jr2oV45Iwexz5w7SCaUACa2r6d2DtIhyNW yhNwJBwJRaADBGFJBDHqcXvdPjcVLDFjVBtzOO1OIgQ5UwvyC64WXGSAlU0HqwgOtGC3Ciaz ZG1BTg1MSvVjU4nyKCm51ZI1V0F02G2mIqJQQ5Vkt2UqgA9MWcYHLITIuK03zm5+cPUDG99p efHW618aVd1WeaOvPB2pLq4ZmRuTJbvP4IYp9XteLjz1VeHIPZ++8F3hzMF75rbvx9VnHliW Dv5sauFBwOgbSDgBPGZD98pFsqPZ0eU47eCQQ3aQ5SAjiaHeAp1fPWinLlB0VFmrYB0GgL9H RnwdqDOQGfjvsgEbjdBWY16t0hGKjuPv4OVjZbPBYJRNubRxrXGHscvIGZ324ySCewadm6yd KEHW1iromljCVKN/9l7A/0wmB5nUEs2Yimw2uzWYG0ZyzAHs+r/B44KW2qsKpHmoTSNGXdHh 3G8eOt/ZPtRHolHiHbKK/PHukoDPz+KwFK5xH1yjDy+U14kObbXd4flZ1iHD5GST0WezFYu1 4ljxCVGQA1dys1VX2mc7FqtuNN1oflD7C8N9pv3a/YaT/En7q46P7B85Tgd+4H6wW63Yyzl5 t9Vpc9q9DlFt1zq03qzzcucm+/aA6HASYnc5dU5BT52EFxyM6EULp8+DGWq1XKSr61BjdZ5m ZJ3Eu7Y78R7nU07iPE4z4Lht3ZjofHm8DfSi8EmDZY5lqWWthbPksShb2DdOXCggBzoCtDnQ FSAB5wn8A+SZHsty0RxoQ9eS7eQ58iY5Rf5GVMTpPw4t+7/iuad2IKKbJkJaSSyxevua2kCQ tR0U2NdTjm5X4+fUb6oJamqblewZLHCYVTgiDbzk6TXObU54fpahtlPi17xkeIkJ1/YmQGxA vNJgDqFcFqASxPBg7YPSRsRgBVQ5um/OhdPQgwd233DNnljU+eYDe/+UHvfoD8Nwy5IrRrsw XzgfxcPxriduffSmtmOvvLtjwYL/Plz4Zqg0hO17ToUsnwF4VuAJx5Cm//QhXbWaye9aXXW9 epRmtHZ8iHtTjYuLhxbL2ebsm9nT2e80IsrievXa8KryJyPHIsfLT5afCp+K/qH8i9DZqG6s qjiPt3YnEhLKk57ut9I4nafZw5SXbNiWx3sOe+VkKuvN4xHdkr44cQIvREVITf4qaxsBA7JD wQCQ7D6gw7o83gHnyzrKyI6yrjJSBucPzxHXwrXnyaeyRs7iruzzWQJaGw87KluesxCLM8MI 58y/AFLQ6WWFDaYe6FSAepK97XW9Tb1MPiscVFme8sU0Rk4IBcPBSDAa5AQ+aojFNEAuKa6s BfuMsApq4y1Yoy4X0i3Yr/cytpFqBzdYS26FP0qOtSNoOiyVCucATjYFrOBgkQK1orBPTuGe WDjM8pAhKy6sObj+4SuGH1/T0XpX4ctN81JBp8t0sz1aMv/esMuf3Dkp0LBnzK3NDyzkxm26 Z1HD7Lt3Dzlyy4FbHx8Z95aq+DpBu3tJw/ih3kS9T3P1+oYFax9lHB6AbD0G6GqgY/lATtj0 2IhG6WUjlY24RIetIhAupmpewJxOq0ecTs8JOj1klUc2i6oiUVSpKCcKOhXy67H+BH4QukMt 3iPreSyoVYKg4jmdjjuBx0K+qPB8WatWGyneQ5+ihObxd7ID1ynpZcTNwFenjdQoyCIWnYZL cqitVkGoFhIIlp9JrI+sq06B8qiVeqW+9lpTtUlJmM7yJAf1ii2NRiMwWjuokbZ2bA2bwqBJ cAYOmB47srfvRXLTDXsLEXzujsL9eH4HXXdhK3mobw7jrxaI95X8BBTEPnnEIxw2z/Jd51vL rxXWerdy27xijuSC0+n0wBXBxZ7l/EpPJ9ns2ux5mD6u7gqfDhtRGCtf+rba7KoiqLyUucoU CELJ5QJBl9tDRQfHw9k93YFA0HIcmMRBLTL4FH+CyCfBIKiy43gYcuPLD3eIXSyO8T8hjsNY DjeHSRgS5IcjEukK4iB7E1kdkKUuiUjO0HF8Dz6reKynCWheamLeUUK7B0gH1lBPlYAG1mcs 06kqT/LgLsR+GCAaWd+O20l7YB1eR9YFBGAcRjTAMyOumilrF3NLzdf4WvlWL980C0SWGBQ5 RU8Ll2isweBlShrTlZMKC2dh9QMbrlg/ednKVUvLw654avzEmw7u3nL9M5jjJzx5JL57Y37x kY541dQKT1IKZg+uveW9mjKRGFl0zgQsDkJ0OlACXZBLblIv16wwrFN/FD0bFQSK19BV3Crb BjtXq0oIPA07E06BBuaAlAXuOBKI4VjMCOJsW7cD8UycdBv1GJwrM4xks9aFSuQSIpc0l3SV nC7hSpwDfoenkEWyBCxpi2zZYemyiBZn8U8S5QIIzp5BjaJQBRA6eLWptx3ciH/y5dNawS0Q xYXAH6WeqNrs9fg8RDBF9bGoOgwMIblbUNAAq4gm1oI95kALCulgQhc1CiMNhTKw1UDFi7zO NIopa45UZrBgLfqXx4H86c71jz28OLLjzi1vLFj9xpa5z96Fjd8v7nvDfPnozNgrNm1cE7uC XxjVN/z3bzbNO33gya1PXtWNvUfwmMLMvpGdU5v/Mjz1yK59PwYgCyb099C9kAVa9MIxxPWf 7ra4h/HKzXlYOFWYpyXq4UjWN+u79K/hk+RD/CE5rQeXYi1GellPCc+Bovy57KKkiFLCUT0v X57jP8ECHIRPMIR5Ht93pEuLtU4df5ycQZR8LusQJ3Ey18h1cTz3DPkM6Qb9zrrkHoWuz7EK mpR6kwP6tNOw5qXB4FXfyN8orOfXC9xg4EKFbAc/ggIH+RoEGSfGf0c+KNS24nsKW9rS0zJe fkLsx2e5l93lzVq2x7Ua4m0zxJsTxVAGr5KPz4KWPePPlMSXZlaFOrQdug5Xh3tdtCO2OfOE Y6/rsWi37mnX0diJ+Mual7Uf6G0i0mBBT1zquE1vd0X1UcN4vBXfpt9geAIZLkM1eDwaj8cm 5uAr41dlFqFF+DqyILYovjBzC14dX166OrOd2853iB2qdaZ15u1F2227uJ2qu007zQ/YHo39 Mv7LTJ47ojqr/UJ31nA2fraiWNSr4zWoGg+t4EeqkM4V55RJsitaXODL2MGi99argdfVEPns kYa1BFwsoZycI3KuOdeVO53jcuFn4AkKOVACOaBJ22X7Dju1O7PH8deDxMLk+TmFVHp7zg0o dBbwmHVdEOQVyZQvZLJxKms0yIdBjoveFlxaVNKCys1QEUMclEgfk+NJW1kLSpnKBkJ9MNZZ fWRk08ZQi13Szv9b0x6tHIx1FvkWgR0GqyXe9FDTG0888uqSfQeqJ3x88IUlM1biITfLy+fP 78gNqZzauO36Jetil5N967tmrH/uUPuE3Ys3Tprftv31lXOXzT74/pI1DdetWN6QXZgqfD56 b/OtD6y6Ykz1IuCgyZAJj0NM2FEc6+TMLfGP+A9CH8W5hdxKfo1qlXqF7mb9SsuKwBbVbRaN WrW9mFym4uOOYNzBU1+UQyJ/HM9DDiw/HW+EygbMJKtT0aVRUM7Ix+Ax8MBRW5+225HewRjI hY1HkVkyB8zUnMfXAhsVy8UdxVQubi7uKj5dzBVjxmFBeJmseU5DNM7Ev+mZ3gFB0zfA+nWD 5CQpG5+mAY6qHsCrxB1RmXQxKeqJhWN+fbAFeY2sbVLBKqD1Qe9kgimkjl5KSQwopSbY2e5U 1QDzVw2KGQLshBlAAwgp1LRk3em3i3+xdvsb82955bEVd/35lYeeJRnz8JUTZ90+q35O+X95 ouQmHHnq2j8dPbTlic37zn9SWHnrInJs3aS5f7m5a/c7K2aUsq4buuYd9ADwkR0NP0id7MtI Xv2Cyh3OLmj+ZCTqgNCNshWa6ewOa5eVWJ/BUagbv8dogD3OKdp7cIctiS9ppy2XttbBwR3e 0lT9cHakBwZ67PL6PsvwgdVwVpnuKOyD3vog2BNG82R3MPqCaUHlK8aXQkSnd1usklp3xKFj dhXl6STZ75Md0Ocb1X5o7ivdUo0x6A92BGnwVbczwlp9AI5tY0hK590HVqakHgUnBSrc9m8G 0//P3gZ2DRp/9f+7yUEPygO2yz/++J/bHYT9l1D8AX4x8iA/cRwkCpuasd9HfF4ENQt5/Rgq V9Gz9BNkh4cIDw39RLariMdHjSqPzYv8rbgDE4xVRqJCqToWdL9967epFIs4qbf3669wauCP tKbzpZckeAxJu2W3ymA06iWNT+1vDApWo0VymVxut8fhFYLsK8PRHDt0p2dmlWOyXDkeKh44 HYgNnHb5Bk7bldOHrMpBvleyZPVGLbx5tXGccbQ01tcQnGW8QppeNNO3yLhAWuhbLnVwnYbN xk6p07zJt9H/gPEB6T7TA75jxmPSr1zHfK8bX5Ne9b7m+4PxQ+lL4xnpjO8H4/fSD94ffKVq 43g38UNtAichr8/nURs0brXNY3fbVER0q6ymIrf1Zp9RCkg+jydkkopMrSbM/tmZIU9Oyibi KyLE5/fuRWjAcXl8WNapJCO12mwqlVrlyeMfZbURfofsNcimPEl3N/iwL0++kg0B2dBo+MZA DY8FFm9WotvpguhxuJjgYx0mk8Ywn2PbqLWdhgGd19lkKHckO6F/TDqQ1Iul5/9z7pTWvFQr 1sJfRfj99GWodlB8QVEhXWswx/ZKcQYP7BMowagl9Im+f1wVuqylMH26MzMM/ymMP6xumtp3 dnJ14obPvsKvvN8Q96fEaNToSP+cu+r8ro2T+WiUKw+WzsF6Eun7I6u/IYS4z0B1+FASDSVr 5PRsNNu3CW30bcrc5/pFfL9rf/ys64v45yndULQqvjJzf8V9mb2RJzMfuj6Mf5jQcDV58nm3 cUFlDYsKTyjLjvJfrfZsRg6WwuT0ZSvkcAImtzc7MjIyusn1EX4/8nHm06jIRXBUXyFRq+B2 FflsEVvCmi6vGBUZl70Cz3TOju8kJglJNdPx7EhzTWtNR01XjcqVdlU0IiqJrogv4UxxAqE+ u68hszFyf+SjjBiokWsaa+aRebSZbxaaxeb0cmGZa5m71XdjZFl8VWK9cLv7dt/2TEfNa6mP U19Gfow4Z6mMfrc6GJL8blswnIkgypWiXNIfoaHioaUZWh5K5HJqW3HCbreR8gSLlB2gc1nY 1+SUw3B26Oiuq8+yH7tHjFaOchGcnzDHgzW+tId4pnNJ/9DSIewJaVTOLIPeIgim0xzl2EmN 3pRFHA5wGETc23K0VLBYyPRSndHIZr0e5hDEslEi040B9qNxd3XNM/htFERzsQMYNznpXDJZ O7EXYqevqS3Z1Ma+9zSElp11K4feWdAY17IIbe9VAqx9oFjBQ7llpWyC2AfaOns1252CclWf yoYTDh8WXW6nmwhCLAJFNBNLOGIZnBKHZHDYF8vQLB6SoXF3cQan+fIMinpDGeSroLkM6Eho xmsvKWQDPTm0iLi9vR21t/1LjCC2tTIgO4RwMJepqKpU9sKgGw9WDNxPiNpYbRvQIqJpUIIr GzD00LbRcztOfdrXkZketXvjEzNk3CPzdu5e3XdLdE71XT+f9OLxaxpvbDv87IwXtw+b6SZP +4ZfteHaY9OjleF2uuS/gqVRR+ToivkPGUWxbt3EFY/bzi91P3xzw13T2L8rxmhc/194I3B1 BBN5uNqXwuxeQMq/03if72Hjw+YjxqNmrcoH1kN7dIv1Zts2utn2C7rTtZ+eoGodNXDEO4bO onxKJZkibhDh/GHixvg4ytPxRwL38wkPxXly6rApeUDCUp7WH96u36Mn+jxNyakiNdmPMMYV 0v6nTNhvqjMRk0uGAFTXBhzY6PA7iEMJD8fY6DXzlLqWbGpX9nS/bW8D8djG6lvbuaZzn9X1 fnUOKIfpyZMKvAGrW9CJUVdMG7NFBbe6DOmsMKmcfBnW2PVlTIPgSxVIO/RFlrDidGItMit7 tnaBCweYUDRHmCJhyFVxb/v9wz57qPPjNct7d61/baV/fuGbE4Wnjm0+gut+9fPtJWZ3kUvL Ly5k3jyyqfDuqXzh7zvaHi86/PiPxy+8jqedGGOzuNOs5oehSrKdARtoLyrP0rq13tule6T3 JH65tLyoU9pluc960n3S+66kcpjMRV4fFa2407XRRxIqwe9G0IH43fpg2B50+hMGg544EzYb UnlqG8x4QPClzbKZN+f7/3yE+dA8NsxycVhdDrr/QBi3htkOAw0H7Uo22pVstCvutoMU0EmQ jYJyUnCxk8Lu0NxBDFgu9ikzaMP25LcKKD+lXPXFFPO4fEarFC2K+YyeGdhlhclr8s/Abotz xkX3s5YUMqapLfPviRHgzFZJFIJx8DoCroS8CGdmRGwelgEJnMY/e2H/C4Wb/rB2xhlcUfjd N7OXRauCy+iStYHS6ObCs+8UPn323RYPHo3t2IlHelmsl0A9eBo8nsGVcp2cW+BZ4Xkg/YRj f/pE+nRONcPZKrSKa1Vr1R1Ch7hdtV2tjvjd3mAo6ncng2GVzByiChoMfrVbJTJXBtkZMUiI X3CLHslNcBj0hzeD9ibLUZnEtg/JO1AqSpMQUHu97jMej1el3q9SCfvr2J4iEiWxQaTwXp/J jcp7LS/fX5r0l6XgV5e49gdA0ZxyU/fUxlwrNFU0hyQFKklBRVKgkkLRiAJVRDkZUaCK7M6e PoY7FanKYFKwgpxp6j3X1NMHcDX11ip7x9JXUNHhUFBKO1BlbV8tE4pS71dI+mcSDx4H9/Ob sCnIMiBjCiubiUG2t59R7m1UZegAsf0EIMslWOH9uOTGeFaIRg0G85TphfelxNDPli1MD6tP 3HT+y3Q6GbC7ItPSnNUYt2YqEtfypO9MuPzGQmKeJ5wo1M+O2wOpYWsK+6N2SZ5H2271JaKF DxY3Wo0M0SAgyr4rWoZLDiZSeeyTq6LXVKo5teZAiu5KHk++kvyIvpM8y53VnOfOa9StfKuw FjDu4DuE7YCxStSoS4gY1OnyOCbrVW7R63fbgyEBQGVninm3YFBqp8/vjgXDydKERqXjeAJQ g/vtZSgcQwkpQRIM6Wg8HiM2uyqeTOxHxRgVp6HVaoUOa4cg+EXcIOLnlJbtsFyODAqSBgU0 g4KkIeTzKkh6lZNeBUnv7vL/SLpzkHO17Nap0pMBel83/Qu8gZvZDMLkIHp9F48AYRvbwExi E4MMQCwn4bAJuiogtoz1krp0ET94Hj/83fQGfTSK46NGfqfXBErTQ/qOp6fFHHqNH4KC/q8+ 7Bp17SIA7cvxSwu5hnHRwowFQafZEY0OCayiSwbWhffnzEowvMZAtXkSqk0WN8nTNNzocuKM uxJEckhOEqiUK5srb1a1OlqdN5fscOxwHnAccGrLUsu1nVrqqCx3NVa2Vm7lfsmdruR09Hbt 85V0jApwcfwjZGaohbNK/elW6g/uBgU4Xh4x5P5Su8MREhKl1JAIqXHS79Mxz/sUJ/sE5mRf yGRqNO8wE6O5wUwYd64195s5M8fQMAOB9jytEGiefC9rNbWNMWyM+WMEhNA3ssTeJiax52Nj c9dsHsQKCBHyLJVUoFJQ61HaRYaSdLFSDbJkNpAUJVU0ES+Ol8SpoAMhYgyaLsMBv2QSk5oy pA/DJAUMlyF1XCjD2qihbLCBZspcufGolLCkkqNMerBCBigGmMQeqGQmJidyQSvr8qwm0CFK WWNfU7i4y1rFnQXYp618ttDX2bbzHx3jt9b766cQvXOSt2jZ6U2FFW/cN2P+oXteH7dy6VCL xU2hxE3rmnzTb3/5txcLz98Ti+KN8+uCsVg2en1h7rCaC7/6rvuRX193haPYGs4A8qza/QIy dRReMdARHr1cZk5D0Xz/t4cZItFsvv+CbGbLrBL7WQWirAVeIFvYaQsOKdiFlHwJ5fvPyErC hJQXhlz/x9iXgLdR3fuec2ZGM9pHo22kkaUZ7bYszdiSHMt2ojHZSSAG0iQOmJhLCAFC45iQ ZinFLQkmgUJa9txXSKFAAnklZMMst3GXcNtb+Jr2dqEr4X2UcqG5pL1pLzSx/M45kpPA1973 5E/nnBmNJqNz/tvvv5z0ihhJNuF3K37r+F0ADtxa8buK3z0YY9qng2SyMB0VIjYEqjpFlm9g QPnHP9IG6kQljb+RI/1vc+NtRk4x1w3N3T33+NwTc1nv3MciZkcfHiJMcXYtHo8pES1eiikF LT47pszQ4iim2LSEN6YoWgIrjryWKMeU6VoCz0AimVRmTJ9ut9tQIZ+PRBRB8saRGYdvxaEa N+JD8d3x4/ETcUt8DKlmWJw7OHd8LqPOhXNnp+LlvtJgCZUem3PNb+TcJeLpYZIAJ64bpsKA psI1UBr+q4uCKau07qEggOs8b1MywHTwaebX/rE4aHwFPoU2YDmQMww0iwpvLAhaDWPiVeOK dGhiB/2obeKVhojAn6DZeBKxIfcLuHV1XTAExd6VZx88LyXg12rXXiAzbrrgMiIzithY2khq AsC3zbUa1cIaJR3NzJZD2jWelR1CTEFaXI4pkhYPxRSoJawxxaMlJA8W1IIcQoRqQgKhkhBL vhqKW4eEEeGEwEwK0BD6hEGBWSGMC8cFRmDJZQKlQGFs8qND5Lt4UDObqAFwjTqkjWgnNMbQ +rRBjRnXjmuILMqleCWomMZMv264IaupgK6vAmlT/2Bep1YCbfzU1OFJpVOa+oQ8JeOzD9Ax tWsm32Y8eIYS4D/M7tkSXOFd4UMrg0PBbY7n3OMpTpKhkTJTKCzUJ6qJTlFAjoiBEILI8Jk+ 1OeDvjHGdjiUdVqbImOTf6O/Gw9OHyLzQQamRuYkErdaDcEU7hMeF54XuKPCW8IknjXUmKb3 TR+dpgCdv3DqLWz1n0imxlDbQe3EEwTJvTNAjZKBddh6bMzRyZMD66o99ajblO0ohhWbI+yI dEO7TbGHugHWYz1UzpFI9Trv+ZmznHcaNqIXjdl9nU6gPPMb669eE9Ja1WImmFR0Op9chk7i xA2PfuvLAz1toVjLlR0XLWYeOzencSyv3sRzOhPtN8e2uL7lQmsAvB3cira4Nhibyps7jtpe dgo3AyixswuYBDvQZ9B1aARtN3eiR82DzkOul4svz/yZ8xftTskOGReyIK79bjDa/hjYB3e7 ftwu2AFJAOIcMWvU2QJSULdWrYus94DXSr8Efy65rfaQ3YBlVDQvMvtmPw2fRE+ZR9AR2/6L 3gC/AcfhT9HPmQ/AB/AU/IvtlOPPTjlQDJRK7UZpMXwUPOB8qP3BkrURydB0dzzaE509yw/8 BnIZgMnIgZAiW2ShOa1kujOIiI+JY7QhCHkdXQh9okcxKxYnr1iIltXiekzJavGe3ulKD8ey CuemWjcWUzJaorvUpXRDAOIupw+DkV4AiGNqsVHyGUYJQGepl5ttgN4S2+WEiGyVxPOuIddR F3KleZbnA4HQPrmnuzubzUzv6mpuTu/LyMGgxcJlECf03M+6DENnRzg4xEFuDHWaDtPZ50Qj TrjfCZ1j6GOzVXdTi8pNdYGbagh3HCt7Qo0NZU95OvrYrNmvwh7qWghNuRamTCtsVA2TdAoa DMYauyrWhxM94vm/+gGeoQEdzxVxgZPwp4smN40SpxjuGy4xrKHPe8MaBySWhOEOWDc8c5lp 1Yv5Xv2i/Ex2oH8gR+Kitg454KzaVF+lfWzyxBGxYoquCknxPeCqAHzmAD0aPyCSo/EXcNfw qeVy/fV4B2x40uqBU/j/FOmejmlgGnU9kHMuRFI9VsLTW765dGJLV9FbrrVSlilMfOsC0XRR QW+Nyb5bYfMMpaU9Bv/cOm/1wsBhdKrm3tKPjf2MLKdL8Ee1BZ+wBuNyXbKbK2vXeNdA8cps NJjA1mWgOsf3Eua6ZmzPv4i5TgX7TUUEIlSBCs34UnQ9+hzaoT6q7lVfUh0wPgbvNYuulR2f QVdFEZb1jBYPTFM80+O2mCJqCTWmAgOYgAF/iHhEFEkgRsBstwaNoe+ZeuDvAV6r1UZJxUbP 2iip2B7Trhk4b3zXpdXp0zTpBvPKOwNEWOVoWjG2u4LMp1w7/nRDxVKM1ME+pK0/825xScpP IeyqNUtV0dF+x7X/6wur4ef42s5Up7qeuYnA1xRsMTed3XdFzO8r3FqXRZY/41kx4A/M99wy dAEh6Ao5s+5mdwtr8NJ0OF3vl9fC1fLN+ib5YbhL/6H8K/k9+IHsdMrQFrQYcwymQ+4w5spM wMjIaYOxyJwRDDI50IyPukFXsCKXQ2Wj2r6ofTXYDDbIm0LrjR1gu7zNeBQ8bOwFTxu72/e3 vx78gTze/pvgL+Xj7SeD78vvh060/xX8LfjfRmoenB+coy+H/cEl+o3BjaHX5GPGz+WfG7+X f2+46l5INaaEtXiBShFsJwlaou6X1KgEIWY6gD4ghwAMyTIRHzMM3WfIQUOXdajjZw+GQ6Eg sgoCAIaRyQrGldg2COmFuKpqu7X9GtHFJzSL9pjZDtshIrdwim7V7SEexTaqpPFaEsvpEoKG yQBrHb2GF7TB3HUDikS1ziU04F6mA/m8PYU1/DrMwTSRQdFFn6MK641YkWVPRRalChDkSnBs 8vjhYCVo+Cr11Cr67odYgWmULz/JlcRAh/ACi+CCjyEzZ+K0kuozalljSTLgcy24Ao7AP8J3 4Ii+NBmIpPr0iXFjaSIw8Rf21rMbbou1pFIldZjZsDzblEmd+TVLD8/uOPfBjjN3Yz03+fvJ 9zEiWwgy8Nvmgh0SlO6DEJmLyvchKDUhmEF5b6d3o/cR9BaaRLw3HpdEYuHGNWLhxhmyrgkf WdeEJHkgQnEp7pOkOObQJ0x3Zh+0Wa0QKWFBsjJ0PRzSFR6PKhqiKTIiFmeHPHhxxCkzgwyo s0p8rJl6k6tlsxmqZCOSE82o2esjt/BrmhGH43GMBqj1TyFYnIAxG8UFoew1T0xxbd3KOOen wifw+F2a8lNf65MnRxt5Kxg2V+gS8yTVFgwQ8Zy1SiGpGVZBRVoELpZWgOXSWnCjtFn6Z7gX vgIPSz+Ef4PShwgS5NUPMLZeN5NUxKPJPQejUhURlzmW5hhCvncEE5UZqZDhgUan0O5IqIJt VDJ803RLFSkgVZDox+9QBUOfNw/YK/g2x+vdR4d9FWR6pmT+OdczoSowwGCiKn3Cqkx8msqo S0aBQ8x0QjHwTUJLybNfUtKLMGERQuqe3t3UzS08yzOuKVI5s52ddfZfzhHO87NbvVaAKJbf SGs0FPCC2fawtIffa9srsp+Dm/hReBfPzhScWcD4sxar3EP27kGAERmSKmwyHDO/iaxvuFpW m8wm1OTpIfv9oHpIc36k4ewlbsVLxHW5v9b9i1MZvO1QIZm64bQ37XJ48kCBch76eDwKcHgk 2px5GEK4kQR/HgRZfx5cOFm5L2IGxprFIwKNtNM6iL/TQ9N0JY+YSaOTUIB31DbXPqi9V7vj N0f/+8hnt99788GjH2//LAa9a2s/rf2wthreC3vgzNdfmD+6p/Zq7dDBu2AL7IVXPXcX8e2S yFOOYpZWuPElUMA/9f6usl64VV6vrI98PjtUeDDCb5JfTL6c/bXy68ivkpZQRixk05VUJdOd NQrLMzdkhgojBftrAIYjzZEFkV+Efq1we7Lw35K/DP4q+cvMm9kPkpaImWjKCi4iSuMwpvBa Agtav5YATWprS1O2mliUQIkE72/JBgJ+JPCCBMJi2Aib4aEwF55faPiDQQGahf0F9HhhvHC8 wBRaIVWQkKpCSBUkjLtdlNsaHiuqH12P5Qtj8HMHNeKi+oQd1eC3gUtInCZdj9OkSZym7rCi URmSDlmR6hqU+IqTzcGInMqmm4PpIkxGcJMJtRRhSkkUL/AVz1+MoUEUi59ENxuPqt14CWMA Uj8IyNUTPobhMGHH3N+RsDTicq6AI3A+zsLDb0TSl5QmXsH62adg/Qz/dOQnO3/9/bbh3vLl Tasfnrd1cbEPbandOhLD+rkztp5ZQ0YLDmx++rhrrs329ZFlDy/wEq6oreU2Ya7wgzSYMJtn w2X8g5CxuOBSPFoFN8A74U7wkPCv7t8DK+s2wUWQWSIwD7Nj6LipC4GsyIDoPkEg9ssQGAEs uFwQnEwu3hPz6l50PpOM887PTnFQ1syibLhHdKpO5HbGnMg5P/P3OOgdEgsbwHzUUyU1FnTa TWtaTUXSdofNgSxyKplIJZAl5o/nYZM1jJnHjZu0Bx9qvmge/yrFgTurEHIF8jAh4YbmpE6l pbaQPPhG2g1HrNB0MplpVEARXvMBeI7V6gnxaebOVScf3lF7rfaHVTsXbx6FOyA2WeA2zHub j6y9597PHn71ltGLK//i3v+0Q+WuO3hdV+81UPk2NOBXazfX3vi4dhf7/peerO2vvXhg+/Yn YM9/PT2yaSq6shpzYBaUEDIPJGVCtilKvKNxKG1LH0scyzPzk8/kkRwLFlYlGSu0ptKpuWAZ XIvWJrfALeiW2C3qhvjG1A44qj6Sfw4+l3ox/Wp+Mum3qFvhPcmtmV3Jp+A30NPJ5/NH828a H+Yn804JBGAYSVnMZW1dhS5jVfIG3dYioEgE+mOKW4uDVFYBGIe7MAIn3qOEiVpTyWQcQR9C MLkPqYhvaX6KBhiC5HF5ke/jB3lmJ03fBMq+SGkMfsV0t2ebmiLI7XJhGClINFVhWT1VYfai MtCe19AibBQh7bDYAc2OoY7jHUxHSaCcLdB5EChnC/GAn3K2n570U872P1a+5iUKjz7heRYH iL8pR3ed0OtcrTe4umE8nTwpYrYeGNZzBCWFwuLJKUQEpUpYbkCgHM07bzNkwvf5tmgilson 9CJsi+KmEG8tgkTSUNuLEExRFsb9w/UYHdWvKZo4jnHQqQO+SpbgJB9VmHh46rBYMUQ3VpGw rhmxuZXLaRqkLP8/iQSe4CbYfi7/kedW1x6qlYuqMypG0gvLVDhQ4x3+55tv3Pfkc1Ae3LH2 7HRvxPqdY4/f0XUt2owgrG34pIio7r31trF0bcudyxzoAbjnS7c/7iX+hZHJt1kOy4lOtNQM SQ+2Qjd0IzsD3GwWNHO5RXARsnq6xuAc83hHZ0eYUdgV8orQivAKxcI5ORdoGe9i19vXO9e7 NriHokOxIX3I2C7caR91jrq2ukdze9g9RVFyFp0lZ7mp2FRqKpPQbp5Vo2qsuTlfnAFnoCpr hIyoETO06aXp5XnOeS2L7UucS8UlzUtyTTEYQ0oxVlY6FsuLQ4vD/e1XFa8qXVW+qmP5NBdj tzd77Upzwq52dTcbXcPSsHd78hH+Ef1RY48+nv12y2u58a5TXb5LhU4FrEXK8/BHEMHbYSMy bDrLu9oiStPamBKNvtxEzpRCu3xYePQ4XD6Hw5VztLjYtJV2lgScwAgo28YksiRiDM1ovARh jCQqwIQp6p6jHvSWB6qe5z1veRjPGBp9MbYvmhNJhQa+IPZ4AR4tfFiYxKrNnFs2Cz/CBwwo qAUDKzy28CqcAypwDk00ICJzILcOC8vh06SwYnhiuKLn6rYH1VuNpFwC9111nD/lzaejASiu O9kQrR1Jg/dm0/ZWaxE0u4lS8+KGN/ChLe8oArujNZcRsYpzu5pbUhJWc4JuITRfd+vTZiqX EUOG4QHiL7jWvsp5vXhtjvgLINaxYF09ndphl90V1nBXioabmof9kAZ46nlzwShq5DzWizo8 xSiaSqxOpqdKBUgQgHkuJQ3su2r1XbkZ//Gtuxd8+Gp3KfbdcKiJT6XCyw6vue0r07oytW/c v/DE/16zqTMY1mzYIsqN7r769stmFBfcturmBy7b9ZaVq0Z1+OOvfmVw6/L2Va3R766/Z/FX /70ciumE8mdg22g/tY3+ZHYth8vR8qbl0ZvgTeimppuigq5VtUXaI9zDyh7uaYVHsCkaIJg+ biXSM8HLCRBDolvQxtC46bXCHDCDrqrkxrfrA8+TNGCUNcOClco5KxVpVirnrPFgIJaLEvno It8AUTG6Iro7ykZfRlkQmPyjaSdSMEDlXwDf/aC6cqAeQD09QAReFAtYe5nc4IDdXcITnHtH 7GkE5MjKANNexu+pj96lpg5xw0PxByQngaC+elwmXQ+7XSCHqCOGT3jZr7vTdm/s+sVHsUWu T3ybmOdPrsiWLubTIrew9p3Fya5pZ05PmeKsw+VdcxWcQWbVPnmCewHPagHe8RIwMOxo0UsG zWpL0t5cHIiUspYuy0LLJjebSqQy7Yn2zOzE7MxTGb45U8mgPmO9fYt7V+Zo5qO0pcdVdxXH YkpIi7dQh7GXOAETGJpjPYVSWae1BWO0Px0is4YH71IARwdkBpsJUhOtVsF0VAQTGymCISCB eJE9Ph/RPVQPWaivmIC+utOdPumsalk04JCx29hvnDBYI6bSxVTpYqp0MdW4JN3uhWu90Et1 l9dFPvNGyWfekH76PP4bmPLbkBx7igBzA+edOTTfvhFEw2bogss2vTBNwKyb1rI2D6nNQRZ3 KpNKutQ8ED1pR3Me2m2amMqDrD1FUAWsGz809wcOYF4E6wjLwk95pzNprGs+4e6n/NfQQMyP 4YliX85/2cnXf/euoc4mKT6lxclQ08L7Vm/7ySVY4xB39czYuolfvf7213d9qf8vSLrt0lSq nByeeGHR68MXrz/8JkrdrrZiOpAwKvsm4S4kHbK5LTFUj7YdCsCo6Bxj/s+LrhgK8C5sSJDY V1WcOH58HOokedIhiRoMCPbK3gCk1oRcT4sslutpka067c071ETpv6QzsVMa83LwJfmV8H7t Y57bG9oXfpU7YnmJ557lnrHs5Z/1PxPg/pnf6d4p7Qrs1Lgb/CuD69lNthGNWx5YGuzTrrPc wHNX8v3ClbarXf1+ztT6wGJmKXeFhVO1EtvpnwPmu7iUpZnPCll/NsBhC1IztEHtuMY1HNsR 4NJUWyAcaAkwAd5JfqLiwnqcF2Iu4tOuDogTx44dI65a6tFWTB/goALcflFxuwR8cSwYVWJj k6OmJ8BbVIHnsTXkw9YAZ7EQAi4HgqR8MebGZhZAvMV6JgiDfzACZmBn4FSADbxn+E1/n3+/ /5SfU/2D/iH/iJ/1j6EPjqjaQxrJpsTCYyB0euCdASA3PA60zoDoDtzLdPCPEyjrBTPnX9Si wchmmIh8q02WKm5TqrDEiyBWBMFbwWbjm0e8FVvWS86++YK7MoV6+0mNjZ+UqMMEqW9PZzAx koT3IISNCpsy9815qXJzLZOqsRkxNH8Garm6swD7oal3zeYc3MKUU2u77swX2K8s98USXCpl LSTbbzz7e8azPt9UtmOhQCSRMvk2fxumwAoTrdPeESvsbE77PJj6iIMDZVDEaiisXUJ2AZAQ bLBSpYR4jhRDVouTdwg2K2+zGZYKL7lkb8WB3wohRMFaUkhOIu4juDffw4MOa1m/2NrPLrM+ Y7WkLTmh1Z51ZL3ZcLPSks20dVgq4ZIx1zKLX2Cfpyy2LOOXCf22ZY5l4WXG4rYbLCv5NfbV 4dXKTcUN7AbLBn6DbaN9i2NLeKNyW2Sjequ+jb1H2BG5S7/L2N72Vf5R+/3e++VHw48oD2Qf 1B8w9gjPWp+1Pxveo+yNPNv0jH6QPyi8aBsLHzL+1fhY+Nh+tulj9eLV+nXG6rbtVrZTWRNd G/tsnr2Ov05YbWUWWBfG5mUX6Gy/slS/zGD6+D5huZ1heWDDZlYkoLdEmmNtfMU+Fc5pAlJ3 l2JYI6zdU59ZRRJ4O7QLlYxEyB7TfQ8l/GPHzmXoK2arNRIRrFZbBNtd0agALJgRvGGf4s3q zUpWcuC7ZKJpJVNp61QqY5NDBxW7TR2bXGv6DIFXHXZ7XMFXK+FIJGq12agjTongExG9SRDi xFNr6G0WniefRIw2fNjmlTLZLAb5ANltNkHgrd2PWZ5qw2t2wCy31ZNMadJoOm+UjLaRtp1t zKK2FW2DbUP04ETbqTah7T3hD9bL7crhsP1lpIIw/JtpNx19juMOxvFMV/cYuvFgndFISU9I fEcWJ05TkJKbePccLml4d6cqfCjnnR8It13Ai/+YGS9sedHVI+A/Xuzppw7h+gvLf+KqwDxH GNSXzQac1ShpVAM3MVmyV0EjVDPQD/3xBjs2OLKuHihLejOZdP3vgpMNPk2U+dvKF0V9udqd 2doPa28kazfnHb7Z3fCvcrmzFdrfzqoYxXlDIW8zEpOdpTxkIWptCqSnYw5OlxJbz7zCXHv2 a+yqLwTTqVTKiCe+MMGj0eEr29NepyRY8Knm4u0TMfTB541gVnBRrnZjPP085uoq09rQKB6W lxXM04csXdOyKcLcYtqjgQKbDnWiNAoJFgFU8Yum7BM1I549x+DiJg90hqzpLrgRfE7jpBip BXO5K7roq4i9Zs7sZXoJYdwXS5Q2gI2ezfGh3Ob8rvijiafh0+JebW98b+Lp/F79lcQrqVfS L3ceqX5fPKYcU79fGe/9mfQz9WP7qd6IpIuqFFeTuWxB16eLhmSo3VpHxsjNBRim96q9Ru/x Xva1PFyf/7y+LbddZ2fm+h39GmNNhBKBGdXeBeGZGYvkK8Bk4TrtKe2pAtvgwDgb7jWbPekC 8gCtwCopMhVK2BIWyFQo6c50I6J67FijI5MwpYMWFFQd5jVVF+MeMS5VAcxLVYvIK5awiu+S yWcxE1a7lAoHWYULSbISSsfJXfVpSmc+LopxmPdBmMeSU6JRElX3qape0DyApQ2MVzo7SS5a OBSyWDhhdRVWcwBiiKlCA14FB+EQ3A/H4Ql4CtrgGPqb6Z6lXqGuVBm1HcR3x1F8DH33iNn7 0BRjnR7AUAirsAuTTBqVWgQIUU5yNVjq/4t9Lmzd+NVPHO7Yij6AZ4YUg+IXXDdz2REdNsf1 GQzGOsTCvkFbmVurD/bSWCnE2IdymXtV5oZO1EKipgnRSbzk75leRyUh2ysF/E7MC1TSRoCc Hz8SqMSzAaIZTxwIVMjuwEfsNFiDSPTALlXyglSJq1Klk7jn3ZVMvSOuedyp9S5X72Z8Ur2e e9Vd8/RXANxMVTVMqxfZZBhouaDsoWMahBdoYq+3flX9DIEEzCyY2HTr8omXuyJ+xcob79be yUsdC2uxYmrG0Dxo1v5y8yPXolv6uo3jf2rxOtyFefDtSrJj+eXow9qlh1ZgHQ3t1pQ3GPTM hVfVHujK+NUWJpXixPCyK+EDcPTxa/ERU4ik5tZ+ANs6sn6/6PdAfModvPQGwvdezPd7Ka74 2SEOQIla6HuqZdO4Wr461GewrcEtwU3pTZm7g9szlhAXsiBg+Hl/VjX6DI7j8K/I+hGrARUm +WwmmU0VDGMONI3L4DJ+eXRZts+4xXILf0v2lpYhYwSOWLbyW7MjLSPG4y1PwifRbuN7TT9r OmGo2yyj/GiWgTxSYB0QxtKqEgPZggLq0DAqNynRZFoOBjHM9WHy5wWBsEc8k8VHWTkd1LO8 IWT5TFrmYiIEIBaLEigZDEyluwSm4lBkYLopEoybghVRGInPvUiR5D41Q2ZBcpbVjJExM32Z ocxIZmeGz4yhRw7qhGlCZHuMMMYYPWH5fCLQOb6pbzhUqYyyDVOQbagfKFWmUgcuzBygbaMQ uCvdlakXAtM4JHEAwGGYo34xjohRzAgwSzQNaWRCwg5iF5KOEPQLjspU+R0xCal2wVro0/HG 9N/RPRiqHIe/DIdXXt5TeymSvrx1Ypwg1No9F+kX+9JoVlRfNB0q0NbT1NGBdU1hyTUTE7V9 U3AV9qLOle0JWyrV2pq8urYAPnF1IdIaArRiH7AkCumB6JBkYlRH5vefvOFSp7tTnMVd7L6T 3e580UoqqawpeCmYDS+1rWT/iR/0rmeH+SHvnewd/Ih3L9hre8p5FIzBo7Yxp88tYurjGMbi 4Swk2SZutfmw/WMVBRsE+CzdwMM0i4LNnvB4AMnp5UkFTH1DrcctrCWse6veRV7G62lXRSje K4Qk7ybtpgEa7bgEW/UYVL47QDdAuYTmUU/0iO82Ng6qbyBQDyzWz1zgBsgRA/4QEB0kiYP4 MG1jkx+9UI8SY5mhkdIDRitDLV53C+w6uw21jmwva+aZ/cyq2qVrrin60xFu4RnL0HOW2qMp 9ud6/2Z4BZ7JPbUb0SB3E+DBF03ZJFsfWRmWSzNI5C1pzL/WYDDMENPLLDN1C4whNnRiWpnE 5oaYEYYdYXYyaDcDmVHOsh/CPjSIEFbn1jHYdlD7yXL64+thVZJ8iJ/40voWa/U5qCeQ1/dN 0uimTRoarM2DY7XfwXjtRh4u+pjsXbOgdgNi6HNuNZOmdbcVDVohflILn4ZA5Ng0YqQqXiH8 uBCi/Rau/rCkM6P4YTmVG+JGOHaE28mh3RzkRg3wPEAAP+ersA1oYDEt1cSPSnZKIY9J9w0k TzpwwaM2CiIHvBrdZUpbgJ9zHn7O33E3fVRbZFkJ4OSHtTmsVNtF/veXlwAiGyABNwM6OASv Z+fOk3PiX3rqm3zgG+F7sNKZ37KJ2pzFJAoxf/Iks515HrSD6cz8RiWkWqXZi1WTSBy/whdS gt1OYhPkbAo4inVdJKHPFAPkEnz8O+pkKRKh5CeiqEivLVZ42vN5GshTrfgrhSKIss2tRslh WvFNHWZTE2k9+CPH2ORPzSi5yOFgb5ehTM/K9ApZTEX5nlYW6CerJ7ENPCBVaCbsG/oEWcyf 5t6AOj6gqm18/Le53PfEn75BUhoVc609sqOIpCs6oKTGKiPVPdYjNkbKSbeB24p3grvtd5ct TVKgS6yOVFlrZCG30DJbnR1f2GVWtzcJNhevgvh8uMA23z6/vGDazK7505far7dvs261bbW7 FwfuCKBYdUUVDQpFUOopNOdLr2DY4gAOrMytFUfWXnHQKFhXWcSYABFgMOhgVNptcLCOHpmE 1ZvtlUXyCnmtzOjy7TKSv4DFP/nFRo/Zg/DPHiIbvuTLeN7GmDmmh7UXxvMwP5gCRafDUSrh iT+LV8DymeIr5H90ACnyL7oqIBVLjaR2plgzdSqFRlIwJZKLUq+gmZis/ZheYxX/GLzejCp6 pY03XRWV7+NHeEbk4SkekvLtmTNmfrbudF43PJwj1fA5cYIkjZOajal8s78OYOoi+6GJJ9dV T5L8tJynUuc8va4TDjAOiDXCycZWdtT7PLfcHUlw3mmdHZ3IYhVsArJocTWOLGV7RQWeJm8E SF53zBmB8UQ3V4mATqGkwnLJLkXECHTFcdNl6YkAGvchjuiGp6ulhZS5YY2DNQ9cNwyI1VaV qL2TA1SsteFfWiAmlki7I67KNNVFrCeigVRi6dux1aXaK0H8jhBqD9srNryU07Kkt+Hehnsr 7q3nMh2mXv34d6amdgghBlQ9VGPxB33nqpdJvpuf1qaQahV/PfBDzCla3Y/mfjnZMX3Flmjz D/+49IpqKo30dErf//jmS7sjki3oFh3+nqFVbV3w4dZFs5Z0Ltx6syf0pRtnts3auCS5fVU8 3tpVaC/ll+xsjl2U21b7wR3dPt7Z0/nQrPvhQE+odbAybwXm/Mkzk+8wL3H3ggBIwp/UOf+F KEc4WCS8zPkcQKbpKrKDuEwJozsImZFTdED43EGud5LrHQ45CFhk9RKc5fGZVnyZzw+UlNWu 9SOexieqv83VAxSUT3+bGxdfw0yL4VYDtWDTCDD4Fvh75Dvku1GOS6cAqbGzfEZGhHrJ43x0 iBzjwX++SE45HOmUhwoEzPjjZPRG4997o75DnmJuEtPwG5YjlsP8+zGsbWY6BzrU9K3MBvZO ZpR9mnlO4OfysEvwZZy93qhvlhx0AFYJAFGD556kLUYk+SCW6c9zDPeBI4DFd9LhEJ19ziHn Tic7gpv9TgY4SZjbwMNx53En78Tc/2JP2TmY+s6CRn0gyb2u52hODAzXIzfDVU+wQncmo6yR DamMnU+rTFSFYZscASHZ7ogI+CjGaioM2ZUIaLIoamObgoZ/+ItfxARPayyG+/vh+d1TMG3V UwgyqaLHEzgfPrTA7m27vvyTJ+5+ru+pJW5VjrS4oDdfvLly5de+trJczqK/vvSnH59+cKSr 6/8y9iXgcVRngvWququ6q6u7q+/qs6rVd1dfOlpSWwKVbFkykoUEtmzJRlgBb5gEMpZEuA8r IYQYWKzABmJgkTNJSJZ8MxbGgMyGoCQKR4KCZ4YlITsEJuslENDEkyFsErA8739VLcvs7veN 7Kr36tXd9d/XY558eEtITEyezp7+p6bmF5+bfzbsxTyyF8NQP+YecfTHoxYTqvMPOnROch7h Aaw/5bRyE/HJOA1GWpJQEY9iin/M46VHcOenTwFHiTYymMRj8q2Ody2tEEBZhsz5x90kN/Dq fLGFSsDXC9h3mumIZ7tpm3kbu50bDY9GuCvM15pnqJn4Maxon1Deov632dqG+tAOaSSyJzEh TUSulaYjd7rv8cy6ZqVH0bfoI4kn0A/RC9wLwXctJyO/Uz5AEkv3u3e675LvUmYSpxKcS0Hf P/MWpeBFxgSDilJAgCsYLibiM3GaiotxhYTZT8Zn10X4nYrb45+OvulEzhf8KSsXBY3MW4NG a3fX8Eva4i/LAhoSDgq0UBZJLOgENUnNUvPUIvUWZYUBmnrs6tBtIXo4hOZCKLSABM19ikUU K7K6BGhmNzVsOk5/VXcLQr7p+PTU6anxk1MErFS1a2VlipDuk24Dxfht0cujV0eZ+6II6q9h 3Ghvb0ftpMAFJOYQuxCW+ySwZJ56ylMzi2I9nFdZF86LwFw7hcB3QFdbqOameskSo4AgIWSY tjH9qV/e9vA7CB274+8aCx0xly2ROH/veRd948BlF7a1oEue/DFi3/wlchwcTJfTvmvlWP9l 3/jWR5tKN+C37zlz0mTGFEqmivSAAVvpMsmvyLESASqLDmAE2Cgl6icEy29TiBsH4EkhbhyF HI1H/6TpPhoJzlAiz0A6DjBqSGqT3cRE5NGsDnrE46VS+MMVCgyROIBylfGCDAnjDSxfLBLg hAQc47e92I3PohQbw8Cpkcko0qITUToq2/BlbH5Cw/wmIFj4Cb3QKianE69p2AMGkhw5hrwc O8Ky5RKhasuqTtwg7UcFcvHG+PhyF+SMYwKHceM4VT6z+ERfX0sZUGSjWmqZKN9sutl8p2mm fKS8WOa08kyZpsr+vE8dMY9Ytqv3c9wWDinlNr6P38F/3fSd/OEyt1g+pdKKQinxZzC02zAX 3NypDCmXKp/mr1JuVOaoOeUx7jj3fN6WtngyQrc75unxRTP+7kgs2iPj02ymgo/8anIBFQoy Y5MpW1xQQMBw+yb8M/4jfkb2z/pp/3u5YRYM5dlSC7RP91XZTaVN+w2f2ODK6WmouQp/EMk8 jV8Zk0eR0EdKPEsmQ2nVZMmk0pacQqkmvMpyKQXlzQWlnjsNubvtAOEQ8AMBGuBmSBn5GG7M iKtnKaPOjgPmRNUFbmkDhukXNs303//Wn358wxCmkCHVjlxFZ9wfLtpWT5XYzsvLo5t3z1+1 +4re8z76yU9Q3+B/+6+EUH70xjf6Iq7E1Evolz2TtaG/evGnv8AQDVWmtjHzlJeKMrcYEJ21 +DG/E6C0AOUgjZFt6atoFIIwK5qiRCj+fmaR0EroaC6ISqUoWzjl4iBLl4ZwnGNwNkeoKz6O My2ceY2cgTs/fRqwwdRosxHCABI0yfUDB+Q4AWvMjsvLi2eZcdQ3Qx3G5IipR6qTh9DvqGcX JwGERU7h5jmG4iY4KN9m4u41/Y3pqImBW3H41QAT0wDOXq8cw+8JXfy2GOzhbXHj8MOQwyHH zmXh6vIJ4OLjS+PjapNe1QeDPXG+uPdI48EJasL7GmMOKhEspkVqfi1Sk0kph039LRYZWIRM QCzbQoa35UstYTZoHfVc6t8T2CXtDnGIsbKc1SKYfRewB+i72TuEO8Xbo9+kvyc96XmVft35 K/ED+t8Yj3uCm7BM4rc7YP0h96LzFIc5HWf/Es1YAU9YjCf9rdZeus86JG+nt1svo6fpA54D wUOeb1m/xS9YnrTO8y/Qv6XfEj7gvZYTHFZ4T3D0FLTw20HQ1DzHcreYvFTF74NH9bhr7j2+ /b4535s+k88X/keoSnHmBGYg4Ec7qjvOtC3uGvzGl4QRfBHuZYs/G645/Wiff7//oJ/xf+D1 zkDq2KyFrlgOWt60MKJFs+A3scxb3rKwlsccPhN1AOCKKWjuigNqrDCUQ3QoDuaUAzngSaz4 t3Rsim0yJBesAgyengKxZQpSUFawnE+KDE0DSKnTLvyJsKy9z4dlbVBmIVJlapoo2lR7O+R9 bBo9xsI88lNjRDkg1shpYhfi8N1siZqgFWt2vEDB+6NZMApBAzTiaFjfCuv7jC1e3+L1LSvZ 0hzWmk8M1oKKq2ZXSCgyUs+R0sfGxjxswKifoHMwN3CwVDytx5/8Cu3de8eu24uy76df//Z7 //rUg8+fvgN91ywGL2/ddhvd8fLnP3/59d4D/4zQ6+8h7mePbRhNtmtfwPLQEEUxN5rvplTa YmB3qkj4VVEDtlMkenVYRaKDRRZHDllI5KrbAVlpbkBQh5ugvh7Cyj6j54ZqvCWZigUoyplz LqDwUTcLFYdWFsXFruUVcUVnSosgTi+Jz8O/JZLLZyDyccpJzqHwqVo0xybxlSw5RBARsYCB iMjV5DF+qdkINpJxvP0rIl87HMVCnQW9ASt8++VlPdo5rJ1/l3LIdyjN9DA9wpbg7cztgvlB EyoX98dhMtM5y5z1EfER13zRKrKYTu3J71HpiMVxLGa5twEdi3ELjEWTE7G52HMxOuZKpgJI HcbKbyWfc7tYC8eLGMAX0MVPHMQK7wL94VGUVxeQqNmzOeR2usR7nU6UBGB9YmKihbQbNuht V5feJhtJq/kj8ZZZBwIQ3+OYdCw6TjhYR7DwDMMynBFYpQPl4ArYS0Co7sTN2+Mnp4lttLPz 9HRn12ms2ZaNiGB3KuP1p1O+dMqfjVAZbzKCPhELiIWkdWZLCKdIVJuhFLtePgz4EBGYsObn a/ahRyOp87edfiOX3Rg8enT0yanPjG5oiQWa+2U5XdIi7zNbTz8601BIJrM9l9G7tnQe+ME1 PcX2WDX+OY+n8YrXNm6BmkLnrfYy/xPL5B3UBdQY84D2Rbd/+IH0oVaGKoq76Wvz126jqTxb Yi++SzF1tQ3t3td2TXpyN9Thuy3wJelg9c7zb9t8cODLQ18LfE06NLRgOm4+FjgmvdTy0sDi 7hO739p9anc4pPiaxaq3Vd5t/o6lv7UrTPmZ1nh/mApuckPJJzukz1k9Hq/VMpNC7hTYh9yY D6Xgc3iFLmg1m9vWNZc6knouxaQW0CNPjqozcQjr+LVmh2Pdc/Ej8efiTNw4h7T4lDg+VpNm +1E/1Dju1/BQfwFQp58kiCKL5tlnQfstuOOCMJ4qe2gT2rTANGpCsJ8vB9FwcCZIB5+l/4Fi MXINUp14F89ywYvQRYWCc/AHTAXzuxhe16hBpqLJYgXtqxyszFWYigT8tSIASlSqtRIzsx1t h3ezY2zFnZ8eE72k82tii9muJ3xgRNqekrOIBEP7A6GWg1k0lJ3MLmZPZE1ZBxyZrVv1cedf NDcQjOw1yu7Kbm33Yfybm3fDqRGb0LLbcfD+XtRLrDi9jYofOf2T/lcwsV848wfNRaLDBBAM /OQZ/Qv0s5rnUBfqaqwwwww9zCBIcKDBrPpEMNpCWnxVBm4PYjJ0noZ3ZD6za/cz6Hqs1/GP HwAHG4lKwlrF9GnSWVGnT4rqlJ4lq+oljabEk6SswIq4YjCF028Di+gSoRgfVPSYFuF4fDDm Esdeib8ZpzGfmP5gBYJGYCT1ZgqPTNd9EIYL4mxZOIxxNw7s3LA5WY1EAxIyp1NNjc2NLY0M 250eSpdS+fSO1PYIinTEItRAdVChNqIuhTrP3BWhhouDEepidbuCeqTeCBrJ7IygHTujG8L4 8HAHtbWxX0ED/dVWjd4E1UDPN3VG0IXliyLUttxFCrU5sCmiV26sRz0aq3PnksuTko6A/CTJ cYqwNo0viRhGq6IbbE2nHncbsY/1mEaSEgx6OptIGDqU7n8j/9bqn+qVENrIWWit1CApA8mu 38Lb1e27lg/fNvEj1cGwZsapXte+9O2evoIcr0Qmf37e+L7PPvzRD28fsLmq3J4WtYZ8/Xt7 Woa3Xra5efVP5cqGvc8e+15zy4P/jC7M3Tf2lSXNzFoDId7MbpmcecqbrnldCmdizFb75MVT l9+7s6lVklIbrZfLjXLiUvqOa298ZOfG6Rvndm38+AvNo6lK8vz9W1r8fhNm+pQdE6d/w9pc K33Q4I3Rdg0QV+RdPGGEvJSEbYkEOEpg5QGckMAeRzQ8yQFAKqWBW8owkI63VDNFFDcJAj0S J9eIFyW4RhEcZjCKOx8Sk1WxjmO4877mJEyZXK+IsBbWzWNW68ZLCi9ZvGSoFggGqhI7VrWV yriiBRNYscpl0AVJLQZwm+j6IBFaxaXnm8QlVR9Zxgri0jrdcLTFDShZJWt8x0wLvihc0pXh CfvlCcvlCVvmDUsXGTJsX1J7G4qT4TgZjpPhOH6bU4Ta4M4fjsEO3Pn4adhXLLa3GVybMG2j vwxCF34L3TpGvAtgJS+3a/kq3z6B5WZnypmeaZ9tN823L7afaGdUFg23T7RPwpDWjhSLlIu5 Fhin5moo5mKZ/gY+FxP7E/FcLL3AOLRSopopdbfEqj1IybRS5C2xWOVyiXxQSlpneTTPIyc/ yc/xr/AmHohUqkjFkyW5OFycKE4WTTPF2SI9X0RQomixeKJoKk60PbqfFP7Ti0mABLq+qMQK 5ObXjMr+BnP2hiJmC5sKpyPmYARxlhAXBfZsWMqIYRhqzYAdw9WqZ+YbubA6rybR93o0MlEN IV9Zrx5kaIxocN8Xuy+cDHscfEVbPd+nNfGM3FNp/Gy/r9a7uuG8hFdyyiFf2YHc5ntOX3bj 5h2XaI+tfn+nIkUg50S8EPXcf2m5ZWg1cmlJTiY9fPsO5jxdewTPTCdecRhfbFQDbXhmjlNJ zAiipNSLnYC7PU4sGXGSPBL3SIwVcxBCy62QukicwaAFGu7hnz8FR1vtUp3i485vjhno9lYd 3V57kmCbAuaQwFB8X3w/ZsMN+zAOw4QrRJIlWjtcgG1gPVgafA0T9eVx8Y1xw0Kie2KWMUpg mqlC+f41TLArBAfiZA3XOTYwYHS6u/WOFmxrY0c0MHUdZmm4KUUp8QbOA6/3oRaBM63WZMJO 8MFOA9jbCT7Am+n4IAHiE/zBI0/rKJRMrMMBXcfEz/7Gctey7qwwUCE4m0QTycnkbPJw8lTS rCSHk7QGqyQwzKamFtK2b9DbYkVvEynSaqVgqAUjiKe/wZ6LuTFaZILdSizeIwQFzyx+lRpF NQicx83PWpG1Rlycm4inU3N2VZkrBcEetCclTa1JxG/UuqFlVkLDEpqQJqVZ6bB0SjJLRxNH v6lPTgMTpgAOYNa7ooupmPNCfay1aS6QEe4xpZuF1xeCXYPr1ta1qS8wXOfyHR35fGfHrcHG 7tVNm0phKxcLRbIO5DXfAzs68/mO1fhpZUcNA3KocwR96msFJehMTlL0mctXe9FB80EMtTm0 ZNB5W9ZDlCCPDN/vg2NAoEnHAM+36uD5S82jw6cO2zwM27H2vkpOwZ33ySm480/kFBlOscIp MsXmMgCvQlYDY1425w//XKTKK8tgtRNfWzbAUlXrgKk+j3WXpx4OITaIVPilu9qqdvUoJn+a OqzOqt91fDd6WGUVvDGjMiIeOaEyIUs2o3RnYtmeILwSO+IJWfPBsJITOP8Ccmh2kaIEDt/Z OQchAugKrTOvf2atr8qU1EAghL+vDrXE9AdvitdJWZ5VkFNBMN/GKYVRFGIdXDjzR6wxgm3w aF79+zh8c5LEaHgQVBI0Dg7jwQ/w1xdJ5lxXl45n8+xy+BiBt5XpMSh7Z8wZ4FaNKVD0GiaR mMMZTUWccgTFHGGQclBdf8FsAiswnwCYdS4sf/Mn4CardnaqGDxmXjy8e7QxHgq7PhWXSv6z 0HOQ7M6rnavKx59+7+TGRKLJzu1M7fwqffcDapxAEKJcFGUSMN1rY54z4EcNEfYfJGs9vN6l 53zqofaCHSDAD2ssG7xDYAQ6mqoLCa2ZkowM8YDUzomzRGAoEf5f8gNwlepyQqkuJ5SAksIF SlBah6Rwl0Tkkk1pPhBKZcmNQGT/71haSFNVDHvuViIttLZR6aAg6H4y5jdPWQU7AW/mN4/z LJlqQzWEiNPq4uLiWYeYwaefx1QTwjwbK0akFtCk486aXKPdrIjw//usX+NnbbPCQ84HXQ+5 H5Tnak/wfC1YC+0R97j2yFeJ+1z75Ido63uxFZmesX7B8TzzvPNd+l3niuv3bkuXq0vqktuV rlqvc5q/xmkp03lRSSnpcq0dtYucTxxBF4vbFVNC3Il2Ot8W/yiaL3BtkX9k/RH/v3hzwOoX 5agsb6Y3Olmby+mxh4SoM+aQ2W3MiGmbeUzc7truYYPOaDQmb6PrEYnlVonANBIZPlPFv9HN AhJuwrjBs8GMIOBbG9INMQrGS+BzhG0Qmgkdx52/EDpeKtXaz8o1RKwBeWYZM6A1hx9mN9qI 6ES0y+3xiEE5FAuWsKiSaeBpa4wHSSWTaM2Uu6ux1h6qTNkw3UkqsldBtCJj2bCCaC9CNBT3 kD3IlKGdvChKfBtFBRbQ+9pWSXjZZuNZDPnBoMTbKsKMQJ8S0AnhLYGeFBbBpxMIzElICsk1 VMOiDZUsl6mSWJonCczm4RKaKc2W6NJEe20BXf9E/NG/1oNWpiEbBEuXF4rTUP0BLGjjU+tq Z8GkFp1BeGVQijDgiJ2dJLDRUa8D4dBnuKhJBgdYF551B+xb4jhS32V6Clw+00ZgMDVF6XUB RIw2XqyvyFmseeElqmHAyzpJcOJRW80Gjavm1Bur3kCAw+OuGloXXKiHD7tAZ4GIYBI+yHEe otM012soo/rMS01tZ6UtICRD7/YLlnga3XPx57rfe++yhkoyeP7qpnQ4u/rbYGlwtdSb8Nmc DiXky7uQaL7n46lXe9yC4I3SikKXOl5f/cVN8bKDTyaRzxNoRlesnhhrl1Ay6bIF4hcxG+f6 wq4EUJrzsITlxJTGh75al68CWLwg8pVXYBFn2OcIzUCEZiABxGzDF/47omEIdRFKAEGLuMIX zvz6SeIdNz+LiYMFKohTHqjt5lnzi0N2yxtq05r5TpdJlsCCt05ryHiIlOQlziJwi1MUZ1ju dJsdYSLwULrQI+jEi3R0oUcQAv5zBP8u4jMCmvL0bGAxcCrABIixrLcFWm1DraMFBY7a97YO B5AWGA5MBCYDs4HD+EBOyMW4/gaUi7GZRN1Rjh+JY3kKJe2CcRk93KXa0TIroGEBTQiTwqxw WDglmIWj/nViiy6+d3WeFVSwykzsZ0ROOVc2qUPGTcGWvtWurlLIIUuhrAu5zPd81L2jPUrk EEZ7qE+XngkXYSvMEWon848GFwmMEW1zjNhgAy7yaV0jWyt1el+BDwqfr0JCK+EbV1RylNrY 1ls/qrd+VC+pNwZH9Xb3dZPjugmgdBNA6d7qhbttrZ+3tc5fttYvgDt/0YJw7FYeLrNVJaer 5HS1jcRYwUAbKd3YBrFRJP+vLQIXbiNKMBzaRpP9pLxZm4tcw0Wu4YKAFv0aSsXwf/5Iv4aS J77RhTO/0mxwqEIb+z/GMAr+Un+w3LR5CwhUSt/2EQ2OKY+goZF9I/tHmJEdbF+jlCrYuM6C WY/sKANHGx/HgtXpRfirM7Q1ieucrgHqYE9ZElXSPk+0hDWjtdaJL4+vbuPM3PaRHZzU2Oci EO9SiANVUYkSrJIxta2bbHWTre6t+D1+97TuUh1tAzMCDLfp9gTS+QPZ29Y2uhV4PAxurWMQ 7vyJ7N26dWzUQBzX2lrET04W/AoUeeflri4gyhh65+0D20efo3rPvENtxksZL5Uz7zwZkoIS Vt71v7GwFmnhToz93s/MYBAfA21btaPZMaxUK7mYtEB/fKyhLRdrxB3N1rA1F+vrb3DlYgGs Vx9LqLlYZYGxH0t052K9uKOdnxjJDHZvj430WHJtg1otl7VQXKpvx074MKmCwNs41mTm+nob K1KAH8PSp+hKxisKmlTmYUoxVNWcbbmSmmyvtKHJtvk2ug3G/IM7u5Nbt8qDw4P0zODsIE0N ioP0IISne/0tgxOjYwv0Lsyz9ksLaO/tRCRdi2n5APTyk3rTWQ+7hL8u8n+QMLB6hDG1prHX dfaGpOC0pxLppBCPIIezwZFar7NPQ2YZMaobM54G/h+Ku8FLiFWd4wJn6cjaMLdOoz9Hgm1G w3vdxb9q3nGz74p7Bi6YivvtfOt5q52ejniAN4UzO6pXbqVp34be1catNZs5XhhqrW4rBhsH Vju6mkJEzs04kVel39/rTOf37rl+YGBkw82r1+5Q/FjBD4gJ1zC6c7KkVbfY1NUBovVjrnQx HmvUooW2Vd+u1nAyGe4YQZc+UKjLwwJFMf8HU7Jmeo2SVQklqxB5uFEvemJx+hNAEkqwlYgm cxZCkoxakYQeWPzEvGbkDwufDCfXQzj9YIFOw+F+KkpOjpILRcklojliXcsRwTlXF5BzuohG Oh8aubWYtvFwRo6K0MkKEBJrI9HMGpvsMK0GFEJt0O1tmjXpTDZxoYIeJVYu69VOSaxY7VzR eB39EIGAiLqR7SzZuLTsJ9Z5Yv9uJH3yAI369Z1JC+GeFkIpLIRqWPwk/MJPhvwWGPL7qy1U lBwZJQNRsjNKXpREaNTJRQ6ICRyRy1Vb/qPGNiybbqhq+aqlCvhfqQ5XJ6qT1dmquWhCGunP 4K35KjtfPVGl56toAg8sVpmoxZ+LOXXDWy4XS/Y3WHIxR38imosldMNbYybfXYk19kSoRFMz eeNkIuF0OviAP8nNWtC8BTktk5Y5yysWkwUMb+FcczSZl3PDuQmoAz2Tm83N5xgqJ+ZoUt7K ihE+N9GiG9/U/7jxzS0FGdaUCjKBCDKzkjlUR2N9+oFxkhJAbG//X8sbTDOwbvCsENCMBr5x 78BVit9ha9y42uHRmnlT9+B119ocgIje3kanXMfDlR8N7Oi8efWGnXKQ2NycQ+i6W6a+uBod 90cxpvXtRdu/vSVELBeYaJ9kjmM8c1JRWjAwLYLFQD24kYhzuk4nQjC0EDIB7sBO6GgeGDSR w0yBlMUmpiidM+ohbLrV4WxwhRX2w3EhODkMMBUyeQnEeQWRSHAiEd9MRA6ArskUEwQ9SIKw IgAuzIuouht2s3vGh77jf8r/E/SSdSn6upV1/5ZHW6yb/Tt9t6O7rQecr4c5WWuqmkhwxJyM nve9FKI1GV1gqT+Nm0yGoWL5fwiDogmdgPWwacI0aZo1zZtY0/sw7VCXJsxhFWctLgDigsEw qw7MZ7cNzA9ftOtxIXbB47Lpgot3jT4LkdCUCS/ymUVggZtGv0+FmCbKRHmZpnfFd8PrNjF3 GDtbRasVRd0pR5pORdJ8ik27nF6FiqKQgvxW3JM43PPYRQWFGbzy2QIKFTTjlaEz1/9IJDCG NQx1aNOo5rqGvoa9kb/RcaP7ev810jURy/iYMeGfNSK6amG8+MBRY9MdNWAyMybGMGbRDoC3 1us2HC40deLWK699Zf8rN15xy8vbqldunPvip279TB9z5JE7jtz08cy37/rbW/98XXfXIze/ uPrrwz/+4O4JiL3982o/8wyGtQxVoxsMWMt1kHj7Jj4PDbgDwCPiCVIKk/MQGuxRSLi9Ar6N urxG6K6yFoWrMFnVbXKwoWf0qYs0GxY/SilH6xjLEfuYlSJUmEIYOjGFxZLbCiG454TlLorP Y8JaPie67TjVdObjJwEQm3iASRKixvMdG/DTEbj1EBrpUXQeQKxX/6KFibCm4KOyrCNDoaAD P4wNngYegMToijplRGvRPyeM8B8VoPpWvgOgtSZeIO4WD7hMXy6gjkJXx0Bhd+Gzrs8Wrrbc 4Lqh8CXLt7l3LX+22isdo81jLVe1mLQOVLYw2Zzbg8Wq4JcbPFi4yiSoTHwoE6N6aLeaZUwl sRXBk9AcPFNQcjQ1yvwsT0/wM/wRnuHfU2hiwgsryjCErc7EEYR76iGe5vjEBgjoJcoMSavR Y3mBHIIFNrBmgWUcMPNLpz7lR7nK2S2plrSQrqSqXJOCyna8ara2KqjRVlI+MeUH8SNiEGRS zb616VMJHGbqAkyzf51PwqwTTEiPMgQdGoXSfQeH7rxk6iuTj/W3ZpsCtYFVJdiW8fjERExK oRar43Pb9p5/0SXaaKWcZGrTr93wqau+9OrKQ/t9zuLqu5c2x6D4qa1xL3PZWEVy7F99bF9i w+iFnz7+D1MXSm7wU/Ss9psoDMtRSkWvGrAcShNSmfaRIss+rErHDF3aAToJicw0KrQROcQB RmAix0AFQRL8Yn5GV501kYuyzpg7kZLY3Jjbxjl0uMEg07VeeV4kEKsDzWI4DyQ0nAc4DOcB BkPOUGyHyKAiEbkVKTNcpLXiTPFb2cNFUyVUiXfl29UhUQtp8aH8FnXUORwaiw3Hd+X3qPvE y0KXxfflbxanQvtjU/H96u2h/6w+7Lw/9HDs/vjX84+o3/U/Gvpe5G/V4/4f4Cf4lfq++pGa V4pXp67OHvQ84HnAu1jktnlQg8WBNeiMoUGHJWdMZhKhHILXSqSiEsexjnCYkmUHgF2ZktEs oifQDDqCGGQh+v576UbRN+yjn/O94vu9j/GRSADfpkI9dhLqAp1Wx6f1iRbKRMFe6ToN8Oiu 162WkllPIBlIK1TWg1cpf0JBGS+EUNZtvxALPDXdrkI4sHpWFTdmzzCiJykif7cxrvrkd2AP Zq6UmvtXmzztUa+0+ysX3P73yPvj2kR6Q/W2zN6uycPfvLrjEubIR58ebYqkUqKthkXfq4b+ 8LN3UUpRIsnTZfR3mF//4IfHF5sp3WNMP40hK4uerMdK5gmNZOWAK0OE04wkI0OVX6/5ynW5 Vq5LpDJQIxIhIRPFXCYirEw0XnIgEhnJHwRjrkSlMdg5hjL7MvszTCbLSQKDidUyaLgrWL/9 v6RS8HKJ57p7E3C5ND53n3W/lbbiC0gsflJCKF1Eg4Vn/AshlDJYBABeoUPirWQ5n1tn4RSX SLzV+JoMGdb2YfXN2UQ3OTVac37RxGl5tCePZKByRF/8ciKTUbrTsUwPxdvyLq8iIpMEE4LX RAEJYwxDcVgj3MMijUVsSc6jPOVKyrKsoBllVqEpRcQa4qJyQjErE7lH1zKAdB1v+uTUtFEm cXpl3GVki1LrXE7TWL7DjNPXWo8Lr2tdgTVH6jkGv61X39C2pSWZ2Olz+4oVj33j+atqb0OQ N9sTITnDIx9z5Oc/31TItG725i5dvWBrBgtvST/Rpy4/fF4EBDgML3vPnKT/B4aXRlOLAS+Z ZgIvzRpIZzQivlJEfKXIGQ5ZMgKMZ+LOOvlxAiNtIvW5GzlLxhk3uVUzusGMrjIjc6qMEMpz weti6PIYiqWUEJoITYbokNtGdS2Nj2MZqIxb3IxDaDaACJb7ll9dFl/VOekadDTFnRmLKe+P uUtmOt/I6ZcJugfM6ErzTWbanMpzPTG0N/b5GB1LuW0InvAPWgigxelsbgpZHESLybihyWSa mwyOuaS3SxA3Ow6LuLQ03iUukawrIxMmZy0EC7TbXdJstULWVpO8Y8Ku9EPif0maeY7P8rmJ 5snmmWbW2byAFO0OTC5/Zv+ZYym5lPpF4rXk64W3TW8n3k6+W7C5uwrjhb8u3lI4iA7SB5kZ H8wVOxM5UDxYskOtOJ6xCmyEL7zY8FLCEmH8XnfEHw3mwoVD1kP8Q8p9ifuSNrdqzxb6C0PN e5qvz11f+LLju4kjze8wb0eEnKUxRj1Lx5CMymS6QPUo9WxpAYU0V16KBZ8Nx0JyCIkhBf9y sDP4rB92NrjdyYTdZnJmSGOOoReoUjnfSFHwo4ZuDQYlSODw+svww9IvuxFyQyjS7yHSjPFq tkmYmXvSOetknAuoVQtmQsGSbEGWwlwGTZA0agZyqunMM0ihmpDy+EAdOaAiG1GOTkMU7Jk4 Gh+rlbFcefQMwl0IiTr5AZmglJRuX1eqDUulPNbTknab12631Qu3jemV28anz6ndhrtGlnVJ sdpbKFWfbjmSzcmK6GI52RWPIDZniVAwESPFZc0RVCfsoHtBlYKPuA/FD10fZU3jY2ialGcb 1YJzaI6eY+ZsD9pnfbOh2fBs5FDDA4m5okBKGUyRzJBRzVZOlJN3FR5KPlQwj4+B0OzKKsGa NRusIY2v0XgJ6wG5IeLH52slPFQgi7UmiDF3l0OBFSQVh2ukCdaSelhzQm8EKBbkqRWMajpH 3fq1nG58Cze+hbtWUNxwzinN6cSHOWuMaMf3scMFTmluO76PHR+DF8lFlk+m6J37h/ScPShH tzaNa2BtCl6Y1cvVXE+aSmbWl6KjZ+Pp6y7p3aHIe+792bPXbL8q7gvY4/HII5dt3vmp1V8X iw/d1DrY7BLdAnNk9cX7PttfbM/mSn2X/80th2J8CPXdfc9Ftc2Xzm6o7Zz6esDpkDAN8575 V7rT9EMqjE7XI4ijmhvTsChxodsEYoARfB5k9pCuhzAyTz1aylP3q3vgt9BLj9ksBaffa4LQ YQqxmJOdPrFcXlkyeNgb9Sy8s/QpGNDjB8nat64fBq8nEafqnSDIc8Q9MWlDNmcY+T7jRRd4 EbmdhkER39sWRmaiHJiJMcVMuKDZo5uPWPKkhP956h4+jycaWWdMIXkAXadPjI8visvi0ng9 pgF/1vBxyo4foFuo7UF7aLoresh1KPic7zn/QvCdIDcXRQdCaEgYsu8R9tj/KJlZySdlJMbv k4IhBsHKGz6MGF/FeFqmQtOIFarw0P5XfG8SGes/ecMvUzbw+xUUzDxL5eh8lI5SCJlM5qR3 2IP+nb1vj4+yOPefed+9vHu/ZJO95PaG7G52c9mEbC5sjCRoQMAkIAQE5BbJJhvIjVzAWBF6 EbDHFlutx1JbPH5ab7WKMUQEa7VFT1uL5XOotlbt7ZDWtkCRIlUL2d935n03REt7POf8+vmc P5LJzDzvvM8888wzz8w78+y88+5Io+zY2/1pz6cdS/tVmi5tfdY3b08tDdQPM6w5t4ZtjDzH 3pS9eEL5JQ+3TlA8PgmfnSlfv+Lf8OZ7kqLp+Q4+p6qO8hlXkO0druJfIl342mvRUN5sR0H+ jobIisIvVA+UuMOaFyaOz7v4+MrZ4dCNG6LrNgiJvIzO+cE4ezIKyRPiRfFuEhDKVK3KKOA2 REmdlpvkkPqLgDofknPUFeYJZU+G7OOIPif/9cGZUjdnai0K4BzfNuT0p5aeVk9AZ5KtHl12 sdWkZzvzD7Clp2QkpW8Vsd3jyhT+ZGprhvJlo7eKps6jrtcrryyIktEkmzxWf8ANqgpJkzon Niq/gfFfxWQf/0XMx6dYPiO3qzglKShzzZN1yq8CQSf7FY+hOFO7hBjAdc/pLAhOtfsjsHN7 Iwue5xssoIR8Iob5IH8fpZIWsFWFXMCeD/sLNBWm6twaeX7ufFnrk9IWsZVn3qKcQEG+VEDn 6HOkBtkUyJYO0rn1aUYSCOCRxOpjNZqMJlMef13KSvazw3D66D76Y6qhfIuc0+vzO52L0+5M E3Yg2J8mKmctK2oHpQt+d/uH52nsOyEX2clSqQ8f8uPkGeeTMzW2BSQzy+bIsvmyiN2Rac/O Sn3Ghp9QnfohTnkvKqWHmLfpK/NU7XSw33fFDba8jNwC68Tpki23zG3aXJxVPZ/OWVlX1H1t bJV498VX9/G3ob6746qVd+ygX55TnkkDF7+yY3FVo6BvrhYC7Bc76Ogp6KgsvJA6lc1AfE4d /wqzA16GF8TfPEnYJopTJ0/WleKJUHrJpjbTYzRkSgbDjDzkM7m48deVpnPw9Z/DqRN4Cvq3 zAGZ0TladOlf2Wpc+tZRO3+rrt7gXGpc4bnBK3r5IfeVM9hTqDW90uV1+fINM4x5Dtnp98he 2VdjiBlrnOwDFTW+hdICQ4Nxrmeud4GvU7pP+rLhq769mftmPEIelr5heMD7gO/hzOekA4Yx 45jnae8h3+HM52e86jlvPO/5q69kn4HO4HvM1lfwuGimEueElfiaa5S4oECJ8/OV2OHgcX29 N6vCNuMW0k/7hT7tLfIntbc59sww1EgVxgpPLPMl3fN5P/Ppdxtv9+zyitXO+R4hzePKSSOZ cg5xGh056AU764sNPq/s8XrLlNNIMn0+v0ECJOl1Wo1GwpQszYlpE9H5vCbPQYrH0zojtRv9 xn3GMeNPjFrjNkMmU2J7va70fukZ6RX03m0G75CPHYwgEwP4tTkrDOomdL6HoLySRU+bK4nh eSyXDtLvjNln0B0zFGkAi8VjtrSKPDaweu1FRey7Ymy88F30/JYdZeM55zvF4n7PqcmDbOyn 2Oi662OcZagckLY5NSPgqq+cYXjAKGdY6jB4vf00YoPfxLbl/QqzFCPblmxMi0kypinw6u4H qrxdlDqVJi1NOS4pXzkuiZ9syA5Nc9AnsgrC6a++5pZMMypoUYUrP2vicHjimYxQrqNcvDsQ lPPLJnSCZVa21WAzBQIaR868C6dFbVWp3SCxtXHyhHYUvaVYPKr2lmBejsMqFDMjn5UYgh5J Ewrk6mw6puZ1daWlyhlnqQPOUka9IJ6eDXx3ZBZfUvDQw80KkhJ6ggYNCXHiw8W0mAwFaMA0 FKIhk0K9uLgkLy9Sotql+YFqa+rYVlBemLIdh0s180knPwYkq64yowALTEegQI6si3Qa+iK/ D/w+9F7gvZCZIYykVXK872fmVuRFIuG2qmyvNzcz3x7RGIPZweJgLLjM/ZD7Ic9DQckUqPZX FywijbRJv0C6xj+voCnUFN6t32Hf4fhcYHdod3hHZK/9boYcOGx/JvBM6DuR7we+H3o98Hro WCSXaDV6XbrGbQjoCwwhXbjSfbX9asdi7RL9cs+S8O2mPfbdntu9t+fvDuwO7oi4dxl2uncF RYthJd1q3+rQoE+gNQMBI9WjV9jdjhy7nJ+XI5NwcQ6xGa05tlxvTg6W9TufYhsHDya31dd7 An5Z0ksGvT8ccoXDIWhDoKBMMrgkyYDZiTfdbwy4jMZAvt9f5vG6PB5vOJjvxWId/c+IdjhM T6IT5dCTT+VSm4Nd2YkVcxM8Be12LOBlIrBESoqBgk7qOUw3kgCR6IP1tlA9mPX7Qyb5gi1u xJrqydHnSTycz96aSa/PLF3spfd76be9P/b+EqPeF/2l6N6ZT8u2ALWj0dW3RQKHqZ0ESTp6 uLneWLouSOuDO9i3JunJUcO2glLpELq5hOmUUSYhuiN0hn17FM9+ZA3dr+cG1cVhuoN9fdQe lsP14f3h58PHwvrw+pLJWdMp9ouy13fq4gksejarfRtJPiTgtueED1Mp5lMff/cpO6PYFCt1 KIkCn1LWWZMnmrK9UlJqOJCmpnzscxXZqYrK0Vb8pCRmI6P8y1gHguwTO2xhwl5YSmPjRDb7 ws5k5GLRmRF3LMCidH71ZPqlE9qUkUM9aI0frqgMG6mBRL2m+aIyjljoDjyGj7xY4SnIqKWj 83Nc0rEXXAUxmnd9eOKV8PjEu4GJn2fPqsV4osnJyi2++A791q5at5WdqOa257vSL56lf62S 03KEQMDSeeGPwoKLT4vCgqiFn5JKiPg7jDCzxLPqnNEcNHoqgpoSAlKl7FzFkjS7MIttcSQl OQ5loCktVU5SvKj2feU0xV3OuUa6x7LHusexK7ir4jXTa+6fF/w8arBFgsaAyW/uNw6Zfluu z6qJ2FZVaSJ12jp7nWNWsC4UqyirWWBaZF/kmJezINgYuraivma5d3lgcc2Qfrtpu327Y3vG dveX9Pvs+xwPeQ4Hc6xam93msBXn2nMducVhY9hdWmO01ywzrKpaXJPai+gH38Oz6CxWkS2l tDQSrPAYNSTC6pATyc6ORSI1sdSAVlqqnhDJRrTnlZDV6YEg+qY7I6OgoqLSaDKbox72yThv sKKyIloZcO7JKHVQRyWmpRnm7G3exTk0pzTQm789X8jfk0/zvYFIJBYtORsOF0QXQ9rbKmml VqsPePV6f2XAVVkZMGcUFJRFza5o1IyW9xjM7mhBwGuaVRr0GEVzhb7SlkWzctESpRHWDHiA OxzsqRzRlNCSkpycbKMZU8wDvRk0IxI4SK1PyV7qZeOq2V5Z793v/ZX3jFfDEtjT2HtYqCJR oqcdI5WRAowHT5EojR4WXiAxUiM0PZV39HblANNzbNfqmqLNp7CeUfremtTTlr2wb+fzTX6O JF/YOC9z/iL1OGPbSj0n7SfWMBmf4IJm36pbgxQ7v7TfchKQXrLXWmt3We21244cYdER6Yge kYRU5Rt1/LCT1NZFE/qUke1QfO9pQ8zNrAyA32ZfOUpni1RDlqPOUp9p5wfOPYULDz+H0W2t 07LfNPXs6NMqBtWwqQjicMjGqJ0Zs8UCso098NmpinrWkW3Kp+8suGHhKcw6EZSZdyDNwfKx 7yKxScKIU4kcypQh0xKzQwAOeHe9M2a322IO+OL6dPYxJTYqZCiRkz0K05nt40x9WnqsSkqP hcpcsTC8Q8pgey9BLCMWrnfAp8fKmUfJblY6vHPKpsy//fuoRYR+6AYfhlKGEOXDe+r8RZ82 uWMT85oC/ZSTIqur2Twnkz4Rzss3Zcy5dv6MIK2a6Z+5bNuJlvmxicUl3rT6nXc1lJRMvOrP DK56/vGF112JgSnL7Sm3z0gkNvjSszEseWb0PzRxcHim6Pe7rG73miNHbnB4CgS/X+vK3pq8 0FXNdsRMzBPPYWQqn/ztFLPTokKR3FRAC7KxYuB2XhcbmBwcZAc7jwkcFBhYzsHyg6nFRNGp opNwdaVH16SGLHWkyDEUkWyXQ7i5nJYTJ4aH/JtZGTaXK0pIRXRy0vPWmiNYF/KxQTHR77df 27Li2yQz+R7xJs8QHwZ6o13dAvZNA3sj0Fr0pbCQVhHJaKv6tPY2nWAwaJ2SV/IZily+oMHv 9PuCRbNolbMy8xpnwpAwdnrbfRsyE8U3ScPGYe9W32DmTcW3G2/33kvuNfyr756iw+RYxbgu H3OSoqLiwkIj5TN1L5veF5er0/ugJHt9vrJCowsIxUVFfGJfVIgshT6DxigVI/ZipiHlq1N8 foykFdwWlObHsm0VbrfPy2YLmXuM9JfGM+zH0j7jn4yicRv7NOg6g2jYJrEXIbKLXrOxFxr2 yYK8Z10xLS2uKxaKvdGKR9i2MX7oXX/TiTWbT1w8t4adEnBR3SrWdPFEkfqJ4NR3LKQpT252 /qRj8gDKf/RwppvZ0FD096bifC6um/IyA1vJVlPlRGMz/WZ6SUneL4869NKMIloYCHkM3ol/ qXriuisaq8vyYiFjzjX+ORNP2/K8dncUOlyQXTB3opx+EA45DSYLJuuePGvdhZ7bdjcUF0Yz bLNX7hOeyo3km+1m5QuSYhe0N50+Ul/qlDQezT7NPss+6yOagxr9Pje1uIcsM6sWkxW2xeli psZtTbOt1Syx/VJzzKZXtTJERXeGaBOsWvO1WvoJLV2sXa8VtGVmXYONDtroOluvTbCVCUZS dxGDJA8ufXc9hqUtOW+3z0nPYWYtf325VjtqzDFprDabX9S4RFEjmgSNjZqtbgsrRbNYS7Vl FrPOvs5GbWVUMNoOC7OJlWiE2fXFIo3sQ7Uiiy20zFJv6bOIFl+pu869yC26zRFTJRGo4M1w /5vyCGk+t7npHDuVkn3v6dyaE/YT7Cum/M16FqR4VN/9xdpt17YjHuX78O+qER/6SX8RFml8 3Lcmj9UbMMqLZQj4BhYLAFs9u/JnsL3qb45lxDQhFwN/NuaKafqcDLxzzBnTeNIZ+PZYOkAb Bz96ZC7/HqJ61CW0Jr86L50ff1lVLa42XfiZsH7iJ621aZmakE4kF/fS5s5r3XYT9U78zi8W evPLF04ELvwkv1juYHOqPvqo0C7eT0wk8gzR0UNjRGfhx13SpU8ZvGYLi/Pu+7pyeuelPoEK T3kLh25K3HVXInHXF8X7WcQ8+07iafqixiFYiUiylVMgjYT4tKkjIMeb7edJaVPqCEgHOwKS vrgAPD0jxukftJuIj1xfn0ewYBAoMUqUaOxayVVvGSNiFli02XPtO9gHEWnhAW2N25uZ9Swt JHnkP+iVyiGWTacurkkxfO6U0neJcpwoVeewfGfCpVPJ2CvN9Nn2QKbZZDM6Mx2h2blFsYaN K67QbiqaXVlQKdtsekNtSTQr2N+ypbWeye8F8HqW87qoPtvgxQiltRtcZMxS7+Jcamts7lz3 DrannRY+Zb8MlxfXnLo01Kj9gfGYVll1adfEpa81M1ZPdwR8JrPV5PQxFgtrrt608goxXnpl ZbAyV2GxPCu4mbNIlbc2xSdIBpVTZikX38OfzsMMV3qGXitJHikbS2u9x63u4xem2DCn7uY/ /9Hd/B73h15hJKXRIke07q2jdmVP/1N3eih/b9BbXl7R53nCc8Yjyp7FHqEewXrPnR6NR313 0aO+u+hR313kuQJeX8WlXf4L89MLLHNcOekNFn0G0fN9/hbq5xv8vey9RL7B/07zGbPAdvkL 5hG3ur+fbQY7pRge62qdsQ+/i8heRWR7/Onfef3wE76PvnYoPnG5lw2h84dogD5Mj0PnPd+G zj9NqPgUhteDT2ppKRtXVHWnD0846WkaeFzNo838r/NoMz/Yp229lIeSv5dn/FI5ZOIQnXcp j/Qx8kjkL4ekKXnsHyOPnfzpkD2Vh71xeSs0Lpc011uycuqzG3L0xESzRTYHrc81OipMDo0t u4D409Pz5Fy2A5QuktZJvVJS0kilaCqmUafQI946UkTWrV3jqWt614eSApNHD6gnVl76Ipmy DfPW5rXPXlneUDbDk51eMlO+0mUymKO8wYrS/314T3pm5YyoxRAuvq74TvaCXw1vNPxdobp7 qWvSLaf30teFF8US8RbxEfFVjVXzkNaro7oz+mGpTrpg2Gr8pKnBdIfpz5ecpdr6A9tOLBRD TuK86PK5vpm+zG13f8XzA+9vMTvanFWZfVuukPst+cm8s/lvBV4vMBc8GdLCrYK7KXRT4VDR vxa/FCkty53ZGv1W5dyq+6tfiJ2vOXHlgtkX66NzvnzVS1f/Yl79NZvmf3thS+Ntzf+xeOZ1 pf8Et+af4IZV9+Ml8v/K/XTaTbtpN+3+W+6df4Zbapp20+7/oAssrVu6ctpNu2k37abdtJt2 027aTbtpN+2m3X/bPTntpt20m3b/1xz/7YoSIowi3Ex3EB0NEpH4k3sQViffQBjjYQ0Pa5Oj xEVcCP1EBI4fONkIYxPvIaxJrkZYm2xAuDKZQLiKw6t5OAbMMLEBJ0wcPPQDpxR0RhFWJ9mZ hTEe1vD02mQU4WqUUoq8DSTKMaOgkI3QwUM/0iuR9zaEMdCsRN49CGt5uDr5OKlGrjcQ2kCz mtiBX428DM5O7kWYA8xq0FmNsJxjNiQ3I5zHw/k8bEweRLiEw8s4vJzDKzi8isOrEcZ4WTFi gzRivKwYcXA4GyXGUBYL/TylAfzHQJ+FjeA/Rpbw9GUcXsHD1bhbw2nWgP8GhHZwWwP+GZwN adSAJgv9HLMBtagBTRY2ou414JnByzi8goerQbmWS7KW81kLmtkIHRzOBuVa0GShn6c3oBVq QZOFjSi9FjQZvJTjtHCcFTxcifQFZAG4XUDGyGayDDw/jtCe/ClCB/IuIwtxdxnuNpKVuPsJ hA6Eqzi8isOrObyawwfIAUhsDNyycDkojJHrQWEM+pCA3tYIzxH2dQj2t5GHItfmHH7FYIFY qVOFRdJPfqXCmik4WuKhS1RYR2bQVLqebJnEkUgZeVyFDWQnvUOFLcJewcn6D/+r1DymwpTY NL9WYYHotZUqjN6kzVJhzRQcLTFrl6mwjji0rSqsJ1dM4kjEoxVV2ECu1varsIU2aQ+AMtWI KMusFzisBWzXOzms4+kzOKzn6REOSxyezWGDKkMFVmSowIoMFViRoQJrpuAoMlRgRYYKrMhQ gRUZKrAiQwVWZMhg4xT+TZy3Zg6bp6RbObyWw+zbTVZ9D4fTADv1t3DYNQU/ndNR4Iwp6V6e 9/MczuQ4Cs3sKTi5U2A/x7+Pw4UcfpTDJRw+yGBpCv/SlLLMU9LNqbo8QmRSDonMJBWAWkiC xBE3kV7SAz9IhkkfT7kaV/2AWdiK9E6OEcGdOaQLTiZLkNaB/INkgF/FEceBvQVhGzBbcL+b p8qkGfFWjtWLtFZQknGX3WmFH+RltAGH3esnm5DWS9r/R/x9FLPmv+SDcd5BhlAnVnYNWc5r MaBSlDGeRyCtmYBCoN5JNuBuL+4zDgfxNLkcfjncpXKVUi+VuZgsBaWWy9SqZRJq4PXaCho9 4E4mi1BaOy+d3S2BX4p8jFoXUoZVGfVzqTKqxUhZzvEHebqMsY/Vj0m5B2kyahTDk6wcY2Ev ai9z3hidId6OrFUSahu1c4qDvLXYdR+vcTfuDsKx1pbJjTzvoNpeczHaNkJTlLz9U+70cem1 oZQNnGInl9lWXtYGhJcvV7lmuBtQ3yFeizaO24uwjd/v4y04zLns4Xf7uDwUChtUWkrtmR7L f1PzXi7NYd7SnWhZmWvkjZNlXY6vnr+h/fGldIl622Q793ONGeScb5jU68vXXin9b/m6YooM WE2Uugzy8lI9htFX6tqGlK285r28F16+poqkWz8k1Thv2V41VGqlwEO46uOhzLndMqm5Ch2G 2QWMf9hGj8jlZTMr5JZEXG7q7ekdHO6Ly1f39vf19rcOdvb2ROQ5XV3yks6OxOCAvCQ+EO/f Em+LtHR2xwfk5vhWeUlvd2uP3Dkgt8qD/a1t8e7W/k1yb/vfp5dKrPkojSXxjqGu1v6a5fH+ ASDKlZGZM+VQU+eG/t6B3vbB8KX08nKeF1l5zsVLm1omi2phQUN/69bOng55UXt754a4XCIv HWzt6YoPg6P+zoHenmJ5eeeGwd5+ubG1vy3eMyjPjEXLV/YOyd2tw/LQQFweTKBG7b240zog 98X7uzsHB+Nt8o3DuBOX5y5rnIO7/fyir7+3bWjDoNzZI29NdG5ITMmLuLNnQ9dQG7IO9spt nQN9XSigtacNuTqBsAFYKD4iy6nCe3u6huVQZ1iOd9/Icl2i1ZPCvixLHL2N1bk/PjDYj9pB VFOKR/ZJWldwDkKdKGUw3s0apr8Tpbb1bu3p6m2dWiiYblVYjffLqG8vikI4NNg3NCi3xbcw 4QInEe/q+0iNMBr38n7ZCg3sQQ/oZb2SWqB1G3H9ez4ip+6nxtg2ZewU94pPit8WvwP/jHhI fGwKLYbdOXn9a047/qGy4h+ixulpcjQzNddqrtFciTAG7Fb0FNYHladCgu6n/4bpHhsZ5gC/ Hz2qh9NQ5p4kmQfcy/+JhM2yHIQmk4TP3pqE35ZjKnA3IVdptY24lhU1T/0l8UfqkhMtTc1L ysoI2amu0NiZqfRH9CegthCTyjsIFT4nfJmImD3tBfwV4SuA7xPuA/xV4WuA9wlnAL8jvAf4 fREciE4R8ywxTZwH+BrxWsCN4q2At4vbiSDuEM8Bfle8APiiZgBzm0HNIBE1Q5phwDdrbgb8 Cc0XAH9RcxfguzV3A/6S5kuA79EWE6ot0ZYTURvVRgFXaK8AXKtrIFQ3V4eydI26JsDNuusB r9CtALxSdwPg1bpBwEO6IcBbdFsB36S7jQi6nbpdgHfrbgf8Wf3XCdV/Q/8NIuof1B8APCbN IYJ0lYQZmfRV6TRmXH+SzgF+1wDKhpWGrUQ03GTCTNZkNFmIaLKaQoDDJqwiTRWmhwA/bNoP +EnTC4C/azoC+EXTy4B/ZDpKBNMrprcB/950EumnTGcB/9n0LuDzpvOA/2L6C+D3TO8D/sCE ljUT83cxu/ue+SXA/25+B/BZ85+JYD5nsRFqsVs8RLR4LSvRkhq1PQWSxyWsyFaRqipP1GsJ atQiQVbSCgk1klZJmJ9KrdIGhO1SH8It0jDCm6VbcHe79EmEn5I+hZRPS58G/BlpJ+Bd0u2A Pyv9C+A7ISsmpbOqTARIowhwsQlrcFOZqYzX9w+A/2j6I6/LEYQvml9EjV5CvVgt0hFmWDJQ F7fFDdjD6qXWx0juoc8SbWt/641E3jDc30Vmd/THN5HmRPzGfrK2q3WwBz3bSOiyJQ0ycaHX JCEDDTGpENZAXDaE9xS2DrJMuaZYS1gnryl6FSg1tsyXSYaKIWBVYVNhEXftxLEp3t9DEjzs 4eEgD29mjyCyg4e7eXgnD+/h4aM8fIWHv+ne1L2JnOfhBAupjodWHmbwMEet/+VCgZ1TMiWm qBVbyWkR68GvEbU3o17sO7QO4iRpkEs6auQmHuIlPpJJskg21lm5eCpfPt/l0thKQ/Oh2Ab6 fy8OY7a7GuNXF0a0W8hnyB3kbnIf+Tp5jIySZ8kR8iPyE/ImOUFOknPkAtVQM/XREK2iDbSR ttDVtJ/eQ79GH6SP0zH6HH2JvkJfA2WJUPpZlE4JdTSDR8SZswj7ZhrN3q3EuV1KX5CVdqcV O5W4coUSV40pcfXdSjz3ViWe167E1yxU4uaHiQbCpYvKiQ5ip2s0RAcFouu6lPJbg4wbxB8o 1zcG1bhejceUuO1rHE/TPtb+w/ZftJ9VrjrWdwx27O64T7lKGBM5ifLEPOWqU+rM6izrbFDy b9Sp8Vkl3vQjjiV1Pdh1qOtY12+7LnQ7u0Pds3mqrcffM6unsWd9z2DP7p77evb3HOn5Wc/J XtLr6g311ioc9/EQcUSh2FelxJvtStw/T4kHDil4QxE1ruIaR4d6CLUe4lJaT36I1hN4y7XQ dnoLfUkgQo1wk/Ap4V7uHhAeFg7BHRNOixrRibBW/KJ4r/iS+KYmQzitKdPM0zRqXtHWaxdq B7W3an+m/YXOr1uC0foB3Y90v4F7Wx/R9+kflbKkcqlW2ijdIb0kvSmdNciGmw2jxkLjEeMf TJLJafKYZphWm3aaRk0/NJ0zl5tbzGvNnzE/YP6++QOLxlJlWWG51TJqOWs1W2dbG6zN1i7r 5633QbeZVZLZJJlFktkja5Oj9J3kHvo+/F+TewQKb0i+IRiTo4ItOcpPnhpFzxB5vmxupWQ2 SmahZPZJZp1ktklmmRS5ZZLZJZlVUs8tZMwmySySzB7JrJHMFskskRp+l9khmRWS2SC13AbJ LJDM/sisj8z26OS2O2Z5ZLZAZnVkNkdmcWT2RmZtZLZGZmlkdkZmZWQ2RmZhZPZFZl1ktkVm WbQqlMA/p4SYWRSZPZFZE5ktkVkSmR2RWRGZDZFZEJn9UM2JXMx2yCyHzG7IrIbMvscshsxe yKyFzFbILIXMTsishDallrzMbLXMBm4bVHJGuVWQ2QSZRZDZA5k1kNkCmSVQ4JZAZgfUcjsg swIyG+BCntrIxp7kJ7iVj3Irn4Zb+ZiNj1v4AGuFkmRUqIJvhL9uYrvQArp65DMin5G+Rxrp +xPfQ8tbBTrxPcEHeWmhC19DylHowtegB3uhB3uJyFJx1Y6rdoyT0AdanHyMliQfE7TwhmSu YJz4gWCDz0gOCJCr4E8OkHRgLQSWm0aSUVqaXE5nJjNpFPD7E/tRCkG5+0FhoWCBt4NLJzQw Dd4D74PPTK4VsuFl3CvAdRg1oIwvjNUi16bcj8WJlmED4w1gDCD/VajJVcSKvAPIOwD+RsHf KPgbBX+jwBwA5oPgaVRww3vhc+GD8EVoVR3ovcxK/mipvLVyId9cyGwe6rgeksR8kTJtlafo 8zxVn++DRtwHSm+AjzfAxwD4GKBl8DPho/C8nZKrQasFtPJ5LSzwdvDogM9AK3nAF9oPshpF nQ9CXgOo90EhgOsQfBjXheA7S9XJD8AB41IAB/PAwbz/cUtlJGf+w9YSILPnILPniBG0t4H2 NtDeBtrbQGcbJPsG8LcBaxvwtwFzG/KkNC+D8avytvD/rxZBxm8RB2iOgeYYaI6hjTaC7hho jIHGftRtDDT2g8cx0NkFOi9CumOgwzRhDHTGwO8YMYHKaVA5DirHQeE0KJyGvhwH5nFhBnwQ 12HERcnTxADapwUX6u1B7Ev+DnRPg+7rQj7SQvCF0BLj3+hkSheZHjIOZvB2HeWYx6eUfhyY U0s+rpZ8nOnmxDhGonHySHI7eTR5lIzAU/SivZg9jSUbhTno+fMh+2vhG3HdBN+c3I7R4wfC 9bi3Kjku3JC8V1gHOIF4E+Iu4HbD9yRHiF2oAcbs5IhQjztzObWzoHYW1MZB7SCo/VpYhPTr kKMFeCuTzwprcR3H/W5wYwWF7VMojKg5V03JdRdy7eW5unGvF34zcmahZ3mh096ptQO1PFBD zUgU1NqFecCej/RrEa/E9SrAq1HKWsDrkm3CjYDjgNsRd8AnkHcjOOoGPIR4C/xNKH0YI6GW U20iXuF6xOsQtxKm8XMAzU2OE5MqT1baUdTjLdTjP8H/SV7qDaCyDjJkcuzGOCCBz0+j1uPI +yAwWW2ZfEZS8oFsUrSakj+FJB8ExjjK9vJ2WQfMVsQJ0FXaZQR024WtyKkFNms5hnUWGEe5 rJXUdTwPT4EcR8B1DSjMhldaANqAEpqSnxOaES/CiHYd0lcmu8HXOHqoLUkgdYJ5diNm2o3k UciiZuIDUGgHhYOqNNqF+YgZpUZO7SjKfgvUekFpOyiNTPKxFfmHwYd1ko+5vMbjwH6Zl93C 6gIqTOKb4LsU3QH348jtBSe2JPuFMwpN2AtNeFmltJ3XRtGAcZR/nEtX0YC9XH43Am7j0t4L DWA63i50In0j/CYuz73Qt73CANeGvVO0YYQE0btG0LtGMKaOYEwdQemQBnSR6+HEMDiYCY1g 7evlvawZT6fruR560TbbwYVXWAN9Wzvxa3BjFNYDboW/EX4D8NsQx4HTjrgDPgG4k+tnI7gz grOo0Ae4H34A/ib4YfQHg9qnGifboZFLtA3S3I7SGdW9RK9q673QsBHw1sh5S3Ddx3yDyyyB FqdCN2G//ozxvLdhhsSgmuTDKGEjWnw76IygpMch6cenaH872q8bJWaqdb6LGJGjhWuZoiPb OW/NSF8ELlYmvzCp+UwnR1SN2sxbMVWLRcl5vJ8wzPVIi3NtjxMnJDMOzXgZ3N8LzXgcVBkO 07L1nOpRyPEk79e98NB8YRBpw+gXNnWcG1dznEOOF/kI1Q6dTaAHbUJaF+8zhzDujU/JPY6V hzoOIfdeXl4cHLSr2s3oCxgnvEzPMbdm9VhFGO44T90E7We63AM4NbLp1Z6rYDAqm/CUwB2U OY7WXYur9fDsbjtGmAS4606+Cs7OAuunwHoLs/9HIItVGH1v4HU6qo4VqTGc9aD/RA7Wi/bz MUMA9lnen8wo4UXe29arI3U7nlaMUyUfkyDL9zLDRg1fx1iWqo+C/WsVk9dHqTmvdaoXt/Ja j0+p9U95yRbCZpwONk6rMlrPsb28/aCNwkZ1DOjmfT/KW8A22f+zcZUDz8akS226XdUC1jIP TrZMj9o6OlXrlBGxB7LcnPwBp2tWaYxMkR8bF15UdWGEPQOBvRcSH+EypIxXSLKLp7ehJdcm 70HJo6D/Bko+zen3QuJcc3D33inaOc6llsJgY7M4WbNHQZfN5StxVYl6HkU9j6ojzgh/rguk hFtyCNtxgqe8n7DfYMNwIimF06AVopgTVMLpSDWcnh3sBP2thTOyvQiYZS+DM5OVZBXaYjXb XUAOYP1hJ98jR4iTFtES4qLv0HeIm75L/0I89H36Psmkf6V/JVlYH1OSLWgFLckV9IKFyIJN sJECIUNwk5CQKWSRQiFXyCXFgl/wkxIhIkRIRKgQKkkpVtZzyEyhQZhHYsJ89PZaYaGwmFwp LBVaSIOwXFhB5gmrIN0FQpvQRq4T8MQmS4SEkCBLhY1CH2kRtgg3kRuEncJOslbYLewm6wg1 1Bo+xX4/Jr8gFYRs3AJ/C6GbPIg/Bb8bcA4hm9cD/jy/RzbeDb8X/n74B+Efgx+BPwj/HPD9 iI/A/1D1x9T4NdW/Cf8b1TP4beQpRHxavX6T0PbVSrypDPE51X9AyCY03SYd0qsQm+GdSh4O K55ufjgFC+6OtxNnEicSFxLOeCH3hZ1W7qvizYrvlLlfFS/jvqozyHy8K17IfKJZ9VWdNyd+ 0bmj43TifMe5xIWODxLnEwR0RzsHudd1Cglzp8Txqjp3JMo6XuNeBzzz1PI7jnFfBvgBeI/q U/g5gOHjLR2vMX+Jzzj5f+R9fVBb2ZXn1TMI8WFCyzJNEzdNCK12COPGLI1lmXEoGp4+MAQk QdOYlhQa05ilCZaE0BfS0wdej4d4PRTruFyOy8OwDutyHK+X8Tpej5c4HpalXF5CEw/LEIph PAzrUKzLYVmXhyF77n3vSQ/ZtJ3MbP6ZuvW797z77se555x77n1XH48Dzzfhs6UIaAJMA9RH FQSVHArxmABFHKRHSwmaoSwGf90GdFv4WhtuH9OC66bVL0eLGnhpBnibZltCAAfQFsBJoDHO Ny0QDMDYMLxHqwj462FoY1ggf27cYXmMHm1h0bRCcP9IBgEvv0ksY8AQ0XVDyzToBoPTH6TH IT0e1gNrE7KWIag7xPLD6zasY163vC75Nnnd821nQ1uAI2bg1fwSXUbb4Kt0v3X9dIJo3ZcA TYBprK+w7WRw4G0nl2DL8kfzCQxgPwbOngialggMHHgbUx89SMCXj4YZ7M4ssMHCV4AvV8LN Sd5GLTB2jLANA90suMb2giEF+5IeKYzY8ObrsK0aYKyVgNNQ5wyAt02MoSNpBGF7BXpAcH0V 9IERLn+0liD6Pm/fPIpY+37Bz9TDNcYI0Bi3gL5FeMwhGAZbBhxpO3oWIzy2iH9ir/nyhRhg r5VHigjIfVwW6lYK6kfKs/6F5/uV10cbMY4YjtZiwBwMEeRh30bmVQZBNof7Ry8QcLZ+tO9I BobAhjMJsF/E4OcxBj/foucdjyIO0fn1HCJzn/fNLI+R+cv6BD6dg3HOHZGS8eL0Bfs6cpKA k+HRXt7HwfgxRo+2w/ysapmMyPmzhZbHLQ6YCxi8feeBTvO4OS1cG7h53zH72QRG5H7HAkHY bwCdJ7wOy54vv0QQ7Wei/QY/70tA/oBj2cdyMFrUx/II+HkZtVaExw1zsmMFsAo0+PuO50dy jqEXryNzBXjEiJ47nKyOgZ0eK4zY9LEiuC6KXIfnQAjWAQwvrAMYo8dKWBwRE9wH3WFwcjmm PpJBIP7sIQZvm8eS4DopYuNhf8vvCaLXTm78sGtKJJ+FI/IpuIR8/h0fWxBbgJJjFbEH0FfI p9Q7xJViPUoX14o/Qpnk8+ks8jnxu+RT3j34O4bU/6aeQCvvbMvCf0i2LQ+Jt/2rbYUoZZt/ 2yqSxe6OzUUnYotiv0Dfi/1F7C9E78b+lfiASC4+KP5Q9MfiBvFnoj8RHxUfFf1A/K/FbaIL YovYKrqYGJ8YLxpI/I+Jw6I/S7yR+J9FP0wSJbWL/gMSiZ5QhZEdnzkEOEk+0ULm04AzQOci 9Fk70OfJPWQeAMCuynwVMAy4BRgBjALuQ/l8SCcB0xzmuPQRh8eAJxwwvQZ1FJCuc9ePkaih lU2/cxCh71AcJIBkAOzVv1MKaTogk61DaBaiz26E6Z0oF39rGVWiOtSI2pAdMegk6kcX0BC6 jm6jUTSBZtAy2hBJ0DbzCbPHfMocMPd/chNR5oPm0sMFxudAFZiVh3NMsFk355jzjO3GRaAy zXJjk3EFqFTzLnNW/ThQSWapOc04DxRllpiTjXcQZXpm2jDHGEchD5lWTc+NlyFvzfTY9MR4 Hahl07xp0XgGqAXTQ9Os8QJQ06b7pkkj7MJND0x3TWPGk0BdN42b7hgZoIZMI6Zhox3FQMvL ppnDt6CFp6bFTxIgZ9l0GehrcOfGJ3X1SijtMjGm40bQr6nDZDd5jAf/2aw0lnynA5Fvc4jE XnEPiiffa3iDfCthB9hVmihA3sN7B3SAjBhgF0bQM3CBjqRCWsrlaQFVgFoA7PSNjYAWANic 0QZwARgOx7m0l0Mf4CwHTF8ADHI0j8scrgHANoy3AXcBY9z9uy8g97CdBE9T62F7U8fhwOET hz0c7IBTh/shnIP0FMQXAefIFaZx3M8FfB9yPq5sWoKw8rEBf1MH5P8UIWqV+j/w3Pt/QRcx RBdioos4oosk0MV+tD32QFgjKaCRavSmWA96+SrRyy5xvbgeZYBerqB3Eq+CdrJBO+vovcQN 0FHO77EnESpGNqLrPfBsjBrgSa5hCQBPcA3wpFYHvqQBntY+gae1Ty1IUq+tr/qoD+La+tqP lj89iz/Lp35N/Ro4XaPAF8QqY8F2xTqxDm0D2/sYxYgPgwXGJv4o8UdInPiPif+I4n6nOiLp yg78HfIk0R3wBcgKureC3Xw6R0AdSYFrsB8r2I8V7MUK9mIFe7GCvTSBjVrBNqxgM02lLKwP uHxcbioMkTsDUR95WYCdU0d2Qf4MpFmR/K1wZDdgz2uUKwDAiI8Uk2vCF8E8xxvmBfzUp+CX a8c31WXLLYNOYqA+zeU9/e3RkELaDoNv1/oMUf51RAWo8JixXCP9bwCPCgJy3ZS7Jch96AdS 6pcWndPC1FrqnA6mwWJ0eplGS5MzxLRYWp0nmXZLh/M0Y4P8M5BvdJ5nXDXNzgGGsdidQ8xx i8d5lem1BJzDTJ/lhPMWc9ZyyjnCXICSISjf4RwldUPMILR/H0r2OyeZy0BPQ1/nnHNQ5qLz EXPNcsn5mLkBJZ8wLojnIL7iXGNuW64715m7lpsuihmrOe+SMA8sd1zJzJTlnkvGzFjGoV/G MuFKZ+YtD12ZzKJl1iVnli0LrlzmqWXJlc8843JWXAroZdV1EHImIH4AcSnUmnBpIX7uqmI2 rMhV64+xil0N/gRoXwvtT7gamUVrkquFuWCVutr9KdY0l82fas1wufy7rNkuhqllYyy3z6et OVhi1jzXcShf6OplGq1Frj6ILa4x5u6m2OF6EI4tOMaj8++2el1TzMymOETik64ZZhnieRLP +PdYT5OcM65F5pn1PMQPNsUDrmUSP4XY63pGWovEIRIPuTb8BdYS11l/lsVIuL3qjvErYdTQ QmeWe9V/z6p2XYAxVpKRsiMade/y05YVd5b/kHXYnQDSKIQxuqAkLpPjGgQJsLTBdRloNqfe dY1huNjM0TcgbnbdhjaFcZvrblR8370bNMjaGNGmddK9h7lsnXYXgL7m3ErGVlPpLvbvYu2W G1cz1HVZbxEOR9wpJsh3p/qLrY/ctF9n9boPMfPWx24d2A/YpL8Oa78tYG1210GPT7ClWdcI ve42MmOs1dkoPC6bBGsQz5rPR7F9ft5sSwbOWyx33E1gmeG54zdiK605yUrAJsN6tKXjUdgy 3a14RO4OPCK3PTK6umwY3SNsPzY51qwtl9D5RMvNRP5EvzaF28P02iTuALNhO0joUkJrsWRs VVgyeJb5m4g9t4KUTjANtlr3KX+CrQFL1dZIbKCN2CexClsLSPK29QmWpK0dS9VmI7TL3e/v sDHuc3677bj7ot9j6yVy6MNysJ3FUgL5G4GrC5i2DRL6MtG+w30JeskhtIVYsoHMEQeh19w0 7p3oopDQIUxjb/P5tO2a+wrkN7uvMy7bDfdNZtFc575jqrXddqeaelkrAnuAWWC7SyyKnRHE riAfZgr2VO23sc183Ggbc99jjtseuMfBM4DX8gewf2hPt025J0zEg/lPsCWxB/Ofwr6iPZ3z ZkD7+20zrl7/Ods8mV9EF7ZFTGPPBq2BD/FftC0T+T/F8rc9cz/0X7JtuGf9V8gcaWTnXWeM gE6IyB/7w8+nsefxX+9McS8wNzpT3UvgSSKWfLNzl3vFf6dLgu92JeO7XTJCpxM6k9ByYS1v wJ9qMbqfg6ed8CDg9pznFtD3PCPQI9hw8Di24WAvN9OJd2KttyvXJQv2deW7BoNnOV/EzugQ 0SmRc5eCl/PnQ0R6x7sOOkPBC9jHBge5GU0sFo8O8snooK+74VGDtw9e5vyqgGfOq7AehvAG Mwh7zvqI3h2pkfYdu3CbjizcpvmQR+wf73zoWQtYrEOeJH9B526P1D/RueeTVP/DzgJPGuTs 8WT4H3J3lZ5sv7Kz2JPjn+2kPXn+BXOdp5Bp6TzkKfIvQckSUksNJXWeSv+KWYc121nnMfhX rSOeev/zTqPHHECdTZ7mgLiz1dMWSLLMeizMcmeHxxGQAj9eU22n3RMy9XZ6PCcDaZ0Bz+lA RucJz5lANvTVHMjpPOU57y/mOO/3DATyOs95hgKFnRc9VwNFUHcYfBf4sUCJY7dzMnSRXa06 L3lGA+rOK577gcrO6+7ZgMGsA24vdd70TPqvYDpQ33nHM800Qstz0PI9z6OAuXPc8zjQzK6w 7FrWOeF5Emjj4gJftr/AnubLCVgwV6FLjj2+vNAVR4GvMHTdofQVhW46in0loTsO2qcO3XMc 8lWGxh06nyE04aiD/IcOo68+NMuu0Y4mnzm04Gj1NcPKwu4iyHrt6HDToSVHFpn7Od5LTK/D 7r0CqzPsFoKXWfuBmdILtjHgWgwOOjzOtcBITaXLFZQ4AngWO0742kIrjlM+C3DV73OEVnGb 2B5wm45zzsf+CcdFnzf0HGw47FHZtclxidgSu06xKzLxUY4r2M6h/OWwzQv8idDmHdcjHkDo mR03sTd23CHemHhpxz1Mc57WQjxtrmDWC7y0Y9wX6kGOCd/JHrHQ7zke+k73JDlmfWd6pJ12 33l/AdZdTxrWXU8G7EDw7Bh0jfVk45kbfMatO4VkdoSAqxnhbOqc9ayDZhe6qYADYgnE2LoK uHwSW4e6k/3FnUvdMsgn86hzpTvdv9q52p0Z8HLx8255IGRH3bmBk3Zxdz7MAihP9lSgX3tS tyJw2i7tPhg4Y0/rLg1YbFPdWmjTjvdpOPYX2zO6qwJp9uzuWoax53Q3wLzwdDduig32vO6W wHl7YXd7YIDEQ3gvBzHxyWxsL+q2Ba52nup2gd2WdDOBYbu6+3jglr2yuzcwYjd05wdG7fXd fRAbus8G7tvN3RcCk+F4MDBtb+6+HJizt3VfCzyC+EbgEZ5fgcd2S/ftwBMudnTfDaxxtLd7 LJDGag3G9QD6lXZPBdbtoe6ZIGU/2T1v6rWf7l401drPdC8Dfb77KeweM7D1kjhZQEvsA93P TDaIN3DsjcFa8CYEZewu2j7kTQmmc3K+6k0NZpr7vbuCcvuwNyuYC70fBEne8u4O5neOe/cA zbVD4hFvQVBhH/UqgweBLg6W2u976aDWPuk9FKyyT3t1wVr7nLcu2GB/5DUGG+2PvU3BFvsT b2uw3b7m7Qja8Brht5M14lpXqRd2EbBuUsxUl9bpCN7AO/NgH352CN4m9N2uKrwX6qolu3SP M9R+oavBlRwcw/uiINm9B6e6GoGewbS/v6sF6HmomxxcJNa73NUO685ToSXb2r2nGFuXzdvP MJ0x3nNg1QPcngHmSJcLzxH8bAJ+A54CghtcPuO9yObDqgr5oRhMhxLIk8K8cG/QdRz7n65e 4n9gbwA897ny/dcJfRnToRS8QwilcmvcWe/1UGrXBe/Nj4+T/F04P5RF6N2E3tM16L3DnO26 7L3HXOu6RugbmMZPSaGCrtsuRUjZdZc8KZA9PN5ptFdhew4VYzpEYzo4RehDrJ1b57zjjM16 3jvBzINMMD2A6a5S7Ge6xrCfwbuR9gt4NxLSEfoyoeu6Hngf4p2JdxZ2hrDjDRmxhYeauqa8 C8zlrhnvEuxYtISexzQuHzLi8lCmFD+vdS16V+DJCPxVqBVbfjt+ZpwO3sZ0qEPox8haf5ld 6yO7mpqTmA6RZ6uQvWvZu8pcA/6fg47gGfDzOfy0FdzoehrZw+CnwpAHP3+1V1kLfQh0+swn hnnE0hu+pFAAPBveMwzjPYMjJrKDxR4ydALPr9ApQvdjusZMLOGcI8En9Sd0pfvSQP7nyR6D rAKOFF+G/07PaM9kz31njj2p5wyOmafWId8A+C6Pbyhg6Dzlu+ovdiz4hnty7Otee9DVRXk9 Qcax5LvVk+dY8Y30FFp0vtGeIseq735PSU2RbzI4yO3w63zTPWos+Z5KzM/HNsdz31yPgX3C 5Z5t2afazU+spfxTqhP5Hm1+VuVWcLJ/cIp9j3vqnUm+J/4Vp9S31mNm/ar1vm8dnjJIO3Yp QwXWnWmMpKeZzNlFdibifnvauKdp2BtDDrFkzEmPhfO3YU56HEIPSZ6U5/Ezco+X9WnYY/SE 2Odr1i/huRyy47Wj5yQbszlsL84MlyQoc2YzyT2nWQvBqwbk5DGynvPc6QQ5MXAWOi09A+zp hLOISQcbY88iyFO/s4TJ7Blyqhk59MieORC5sacK7D7T2cyU9twSPlFyNHteAbV6rjormdzP m50GJr9txVnPKILpTjNzsGcY/+MA+fUXEvz6iyK//oqRlEjqUCz5xdcu8ouvr5FffGVL7BIP el/ik/wxKiS/5vqQ/JqrKvEbiXnIkPi/En+FGsgv0Ezk92afQh/5KBv9IUKoFH2C0lEj8qMC 9EcQDOg0+hNUgy6iP0UfoUsQPkZX0DVUj36CbiETGkW/QN9B8+jv0DH092gZdaE19BvULaJE OejfiE6KetE10RnRL9B/Ev1S9Aj9OqY15nP0DzGDMT9Ev4m5HfNT0baY+zFfiOJjlmJ+JXoj Zi12m2hnbHbsu6Kvi0+Kb4veFY+IfyqqE/9M/DNRvXhM/HPRYfFfxYlFR+Li494U/bu4t+My RINxX4vziS7F++KPU7HxfxTfR22P/378OerN+B/EX6G+Gv/j+HHqm/FfxM9Qqvhfxq9R347/ hwQZdRR/kkIFE5MTv0KFEqWJb1LHE+cS/57qTfpu0g+oM0mr20XUX25P355OfbF91/Ysamr7 N7Z/g/rr7bnbc6lZJAK5tJKT0gz8m5mKJg6tCKlOofQKY0VTRWtFR4W9wlMRqDhRcaqiv+Jc xcWKSxVXKq5X3Ky4U3GvYrxiouJhxWzFQsUSlLmCf4NFdIskH0o+RJREK9GS36pJqVwqFyFK QSmQiFJSSkRR36K+hbZRJdSHKIZ8Z0hMVVAVKI6qoWqQhPqIqkfxlIkyoe1UI/UpSibfFkqh Pqc+R29QnVQntNlFudAO8p2hN0He2ShN/HPxz9FbMKZpNEdGRv6tRD2OGtXPNUgj1iRppJo0 TYYmW5OjydMUaoo0JRo15FZqDJp6jVnTrGnTWDQOjVcT0pxUj2tOa85ozqsnNAOaIc1V9UPN sOaWZkQzqrmvntVMaqY1c5pHmsfqBc0TzZpmXb2kpdTjgjDBhYdcmA2HBTZoJeoVbbJ6VSsD KLTp2kytXJurzdce1JZqtdp2bZW2Vj2rbYCSjdoW/BunuH8P0kzdZOf4d+wFqAOsVomcYPMl xM7Lwb6voQqw8J+gSrDvX6Bvo8cQqoiMquO+Hvcu0sW9F/ceqon7Ztw3UW3cH8TtQR/F5cXl oY/jCuMKUX2cMk6JDscVxRWhhjhVnBp9Enc4rgGZ4oxxRoT/s+U8zCQs5SwUixCdDJBxSAdk oiI6hU6ld9FZ9G56D11AK+limqYP0Tq6jjZCfhPdSnfQdrjroQP0CSh3Cuh++hx9kb5EX6Gv 0zfpO/Q9epyeoB/Ss/QCvUSv0Kv0cxVSiVVJKqkqTZWhylblqNSqEsjLoc+p8lSFqiL8ezDJ MUkn+dVfwiZpOSEUoP8B4QP0txAKYdb/HdqHliAo4qriqtD+uJq4GqSMa4prQgeQCGYR+UcT lIPiEKrSAqqQSC+HtBbQgETFFkDbtvyqUn1ylVYvI8B0lT69qlafSWiMBr28qlGfG77Xos8P 3+PL4bqYxvf5e+16RZjG+Tb9wSqXvnRTitvGNAaj1xLw9HF9VfgeD54XvhwGbp+ncZu9cN3L 8YT75a8x8P3XBc+PkK/XBS8jzAOfJ+SDv8/zj/P6OF5xinEWxiqEsL4QmDc8TpxeAB1g+fRx 8ub76OVSrCPhNZZnLVcH84rrDHIpzxvfDi/by/raTTrtE6Q8L9f0DSS9oW8M9xWd4n5w/3zK 886PBbd3W9/yQr2+qH7v6turxvS2qgd6V5jPwaixvIxXfjzCtoXymhJcY/4wT3x6Nuqat0mh LfLj4PNm9EzVvP74Jr3jVLvF+F/Gk/Can198PtTR5bB50emmuov63uoC/Uy1Uj+/Sa+vSHV5 r3d/U7loeb9GSurz19FyjpbFl6VTUdcw7i3TUkEqaEdXyMrpVemX8iUcx8vsjZ9ry/q+qqf6 s4TmU94v83Pwmf5C+N6GfhDbSnWM/rLQX1cn6K9Vp+hvEJnxfEHf1an629W79HeF9ledpR+r 3q1/UL1HPxX2D5w/qC7WL5L5K/QvuD9av0zqHtI/Dds58Fet0z/DIHKrNExU1+k3CG0wPNTV G2axverMhgVds2FJ12ZY0VkMq/ia+HmorysBn8ivQS/TZbRuHNAX56d13kgf4fshw3PdyRr0 gi62ss2zUXP7Vf4q+j4nI93pGrHuTE0SzzeWre58jVQoqzAPVVv4ISxPoyEGI7yu8XbC328y JFS3GlIIOgyp1XbDLuF6Wu0xZG1abwXrbHXAsDt6fas+YdhDdMGDb+eUoYCk/QZl9TlDcfVF A0362QLVlwyHMIgv4/OuGHThOcytpdXXDXXVNw1GoU+rvmNoImO7Z2jdcl3Gtjdu6MDjxWOs njDYw20+NHiE8qqeNQSqFwwnqpcMp6pXDP3Vq4Zz1c8NF3XIcEknNlzRJRmu66SGm7o0w51N awc/94Qpv5ZE++Gt0mj7qopK+Xzs98++xJ62Woui1ySoqyvi7PVl5QTrKSknmMvEXvG8A33z Kdmb4PRV4/wyX4vTC9xeg0/5eaONmkfR6x+/H4FrnXpzGt7bMC+O44X19nX55e6H18rodXWr /Ue0Prm5Fe4P+zSQ93fvfXf8hb0t7m+gJk2XYbinyzaM64ZqMnRXa7I37Rlxuxh4zLit4Zqc 8BzG8hLuj/n5x+9DOH50t2ry8DqhG6kpDM97nD9aU4Tnn7C+7n5NSZi/6LahXd1kjZrUnRbM L4F/4n1ReO+MeZ6rqQzL4lGNgffvusc19WG5cTzrntSYN+2HODnqqRrLJh1j++DXRFxvraZZ t17Thp/iJd+T/FuEEveSfxBaTlxG+F815b/f85XYbeg35BzFRM5RviMeEf9M1E9OUM6SE5QB coIySU5Q/oacoPxtvC9BRpWQc5Fpci7yP8m5yF+Tc5G/Ieciv8LnItvS8bnItt34XGTbN/C5 yLY8fC6ybS880Q6iy5HTA2URUisNynqlWdmsbFNalA7FotKrDClPKk8rzyjPK4uUA4Ah5VXl sFKtvKUcUSxCiVHlfeWkclo5p3ykfKx8olxTrh+gDkgOJB+QHUhXlhzIPCA/kHsg/4BCWXng 4IHSA9oDVfvvKUtIqIRQRIKaBHxVQoBpAD4JkHyMvz8Z9WzrAo10Ix881V6FsJ885yrRz9Ek PMlOQfhD0X8XjaODMRMxX6BifF4FNUWoDhkj481bRVn8SGGczZA2A4XHi3PwmPGoB2DEA9yo Ycww3gEY8SgEL5RyKAcIj03A45vkt2wIrEcOebshUPAsnYO2oVwIMWgPeh/For0oH56vP0AK FA88laLtiIaQjNQQvoK0EFLQIQhvoEr0beC0GumQDGyuDqWSfzpMR3YIX0VeCLsQA+FtdB9C Boz9C/SOKFmUjL5G/m3LGxnr3tRt+WV3y8bKHpRNlc3kKcrmyxbz+vL6ypbLnpY9gzsbeQo6 hk7YW0ynlG3gs4yyu5HTjL3Fe5V76+jisrH9gzRdNoZPNsrG9hrJ6QZ7tpGa95S25z3D5xvQ 2l36RNkMbhXa2hMJ749AOyTsH9w/uLeA7set8AF65cMpqHdur1GVjduCVp7RV6DlLKBnCGYw 74T/jUjYP1j2dG8BjKAV+A6UTdEXYQQeGNelsnm6OK8Pn7KUPaCVGHuLgcc9+MylbAroKXzy UjazV1n2lD5U9hS3BMDywtgA3hJgnADSOj6hSaE7sJyIrKA3jLwNuphewO3yvZAWeQAPGPQS pIvQKiCvb/8g8HUIp/i8B2i6bBmf+uyl358ru6sS0wuqJNw/y4NKSvpPyWP4vjHw2RC9i7aT 0eYTigfksLWh5F3VKOHtBbwsXzWquq+a3MS/APge5lk1rZpTPVI95jkU4mX5OE/1RLUm5D48 CshXPcFaZoH5wLLh+VflaArogrIZVR5dQFCoKgIJT6lKVGp6j6pSZVDVq8xl86pmVZvKQiwb 7FTlUHmhJWhBFVKd3L9M16lOYxlCO2dU57EkVQOqIdVVVQ70CjpUDatuaU9rz6hGtOe1A9oh 7VXtsPaWdkQ7qr2vndROa+e0j3hN4h5UadrHGNon2jWaZmvge9r1coq1H06inORYjYNthXXK 2lXYlsC2yiXlydg6ymXl6fTFvGflmbgF1X11FamB5ZNSNqNR0gWaYg2tObS3WKOjlZo6jRFC kypb0wqhQ1WpKdDYy8Y0HuixEezr0P5BTUBzQnNK0685B/kXNZf2GjVXNNc1NzV3INzTjGsm 6CbNQ82sZkGzpMqGllY0q/tvaJ7TqeCWxNokrVSbRLdq07QZ2mxttuahFnSiuVm2oc3TFmqL tCVatcaurSytx3e0Bm291qxt1rblbWgtWofWm7cIvgdb2xhob101qabUEnXy+yN4Bqpl6nR1 plquzlWnq4bV+by81Ar1QXWpWotHn6fYW0fkTmaPupafReoGdaO6Rd1O5Ao6KVtW29QuNaM+ ru4l6FOfVV9QScGL6MIgulE9Vg+qL6uvqW9EWyp4jToMVj+qOQz1bfVdbDvqMfUDnPI09gXq KfWMel69qF5WP8X8q5+pN8g4eL2Cf9TEaBLwrNSkqB6V3c17hkG0CXanSdXs0mRpdqsZck7s ofdo9pgzsbctl5fnlueXK7Qh7cnyg+WlwPmD/CTwUynl2vKq8loaPN7euvIGkGod8Mp64wBd XN5Y3lLeDi100HXlNi0qd5Uz5cchnynvLe8rPwu5F8oHyy+XXyu/AfadVn67/G75WPmD8qm9 yvKZ8vnyxfLl92+VP8X+D/tcbLvAzbPyDSIT4PtQCustQU4J4Es7DsUcSiBr4ZF/QTuoFtRB zszx/4Kj/ONIBJDlByCcgHAKQj+EcxAuQrgE4QqE6xBuQrgD4V7+8/xxCBMQHkKYhbAAYQnC CoTV/FX8L4MSk8RM/k2xDKlArhpUDvuKCtgdiJEepJcIcv4E/wIkaSnpKeGIfNb1wToSKdoQ KqQgtWzL/2BN0fzBOgegCymAhKXJdTJAJriXLrjHl1tnaXw/fC9TQON6ckBuVJrM0Rj5HHha IbjHg+MlXC6Xaz830ibfJ+FJwA8pJ/8tkB+FaF6+DOkCHgR8hvlIj/AtlFFYVhQ3VgGE9Te1 lc+Vz+d0IIvIW9gH4UMSdZ0cqUN4lUfScDl5VHowSqfClOellEu1L/IQTte5ca1v5mNTO1Uv GUN0v7WABkCjgM/osbyM15fIZ6uU8Jf/JSlnk5tskYrKawG0by2H6PG/kifh/OLnTObmuRdd hqQ2wF3A2Bb6/WdMt5L7a6dRcn5dfb00tb1mKpQxJ6dXpV/ar/wV/HNzrdAFYDiaidhG2JZx 2eOCMr2cnPoUm/31WcAFRdhnhG1jEHA5qu9rgBuA24qIf+Dt8IGCzN9N/gWnU1zdGcXm+TjP AfL23YR0kaPvAO6xtrhvHDABeAiYZa+Jn8f10wVr0OvMyXlF2E8L++Dv71sALL0o6y1t81W2 FuWvXuqXMC8rgFVBPsh23/PNsorm4YW28L1lDvw1byf89VPAMw4b0EeMYtN6ui9BUFa4NmEe UxQvrG/7Ujld8ODb2cWlWYDdgD2KF9YmIfYVsCA2xOcpBfLl1tJ9xQB687j3HWL53acTjDkK uOy+Ona8eIz7jII2mzbLa18roANgB3gAAcAJwClAP+Ac4CLgUtTakbtF+hJdbWmfr+vjJC+3 p992TfpSPqLnsDBN5/Qdlf6TfC3vSwTpC/Nnq/X/VekrxvM78/tla+br6DV3c/+8b6pL3Wz3 fKpAYHdXANeBFgOSuH7XBf1Q3JihLYVUEZnDyYrN+2N+/vF7Y44fRZqCrBOKDEVk3uP8bHb+ CesrcgT8RbcN7SryBHn8fBT6J94XySM8KAoj9xVFEf+uKBHIjeNZoY6yE06OirYoHUsic5HU qwQYFM34e0/k3+7Rv5xnTdFp/G/oKEmUjIoRkp8BnEco+wIL+QCkg5AOAa4ChgG3ACOAUYQy xiC9z2GSy4dyGbcjeCvAliNlp9myOF8+B3jE5T8GPAGs/Q5YZ9vhwbf3HsXy/56EaxvwXvLm slH1iuVSeZo8Q54tz5HnyQvlRfISCGp5JVwbIFTK6yHPTEKzvE1ukTvkXqAr5SH5Sflp+Zl3 F95dkJ/HMU5ZSj5A4qGvtr+1+63d8qvQXr1c/VWbfBjCLfmIIFzF3/V88Zu+5A0PMeTdDjvJ OxxSyTsc3iJvb9hF3tvwNvmObyb5ju8fkHc17CVvaSgg72f4gLyfoZC8mUFB3sywn7yT4Vu/ 9/5EIqmI/dbsLfRNhN6tQ+jNURbvGgFNgNZI3lZ4twNgf41yHgDY37sn2OtsSdT9U69ug8M3 sxezl6PC07daw/QzYX72Bk8LSrw04DfCkW9yI/IGD/bdHbHkm9wJ5Jvc28m7O9LI+zp2kTd1 vE3e0ZFJ3sWRRd7CISdv3thN3rbxDfKejZz/b+2K0FU0HPkM6J1+VJFVsHODDVk6gDJ8VZxF cxQpwd7JOsTf52tAXJdVF84pwGHzfb49vi3cEt8O1wLkpCr5enzP+OSQOgOyEFMXqb8At/5T 6i9RBvXfqEX0dXGXuAt9iL0nKk38SeIIKiNvDkkDSLl3cnwtXD8G6oMfpC5Rt1AsdRvaSid1 8PsZU0nMyUO2ikSyFVLvBzjGb5VBCnRQUGISSXc+2Jkvm96ZnymVTcvmZHM7qZ2UbFL2SPZY 9kS2RsI6aQP/o0YC9UPqh9D3j6gfQc6PqR8jirpOXUfbqD+n/hw4+y/ATSyMaQxJyGgSgLO/ QImJ/xX4S4EZd0I0Rs7udOgN6N2AUGY2IOdLkLflPZGsCFXs3MUGWbIsmad3nth5glyn7EyR 5cpy8TVXahnH7zx554nMJrO9s/bOGi6Hr8N1hQHqk1r5svydAVmVMOC60eVxOWGIvp9JZVJC HjMlmRKeZrlj+ZPZ8HgygS+2/634iYyL6x/ztf7Oukwr0+4MQAktLscG2UHIs++0Q3qQ6BG/ dwmRtxeJ4uvjP0FUvCnejMTxTfFNSBLfHP8Zio8/Gn8UJcZ/N/67KCneEm9F2+Pt8V3oK69t wyLRFdEzom877FuQtOn1kQFeNQO8asbul6CDxY42SFu5tAOJMvC7qepQhdS8Q4LDG8/fXtnR ztIZ0gzp2wtvr0rXpUXSNMix7bBJp3dIpAbpNMDw9uzbs7ieVAylViDANdsGW1+azaVmaKGN pBk72qEtcwS4h4wM6CuDtAuBLbcZOyS4ZdIX3M/IZnmUrmMed9gIjxx/Oxoi/JF6K28/By7X eZ5exg9ug+QbwveLpBlvL0kLpYUZaVCiEJeDdBKQIy3ckb6jEVIv1hL1PQp8NPV96vsonvp/ vJ0JeBVFtseru7r63iSdsBjZjIiIgBJRNgdwQ4zIsOkoMIwiIgLKIsPioCI6yKAiAiIgAgMZ ZNDBoCEiIjq4IQKiIiqgIiqbgIiICupDTN45v25jmHnvzfLe97hf//vkX6dOnTq1dHV1c+8s f5bJzPhNxm+kB/TK6CU94LqM66QHDMwYYnIyhmUMM8fx61O5Wd9kfWOqZx3OOmxq8PtSNf+l Oa6HHJfJMYRZri7/x+RK3mU4N5n5+P1XM4o3DjzTroJeU9NffyulXM+T2eiP0qN9mY8on9Jq U5r+Jmqanm7o6QE9PaSnp+jpGfT0THp6lvT0kSYbS1oHQx0cdTiVsvX3htTzuOxT8PEWvPbM 0HLONz0TzyvqxV57pn3C/Tue/aO6/td+e2ZGEu/4F3/rwY1N/H6pArc+iXdFvecSv4cmnH7r 1/+mz2hvqfHf1iDEksGShyUfSxZLaWzor/y6v/eBUrKwn/M/tOEMs7xCG8bcc2ZBhb4Xc0OS aFTkpibR+In7v4rFP1Ob/020/qtYeGaZeYNVQS393uqc2sZEKzg6R+9n5+ZUy16hR/RGTjU9 y195UXFONUlbEafn1M2pm12SkyepJXKuqzqi1RBsnNNYWf1E7+vnWIs/2UtSxNIxdnJz8rJz VVtLk5IoWS1pXTKuzbhW6jw0Q3pkxu8ydDT809cms4QWTJ5sZq3l6JxdkN0h+7Ls7oI9s/tk 3yCfIXLcJFxB9qjsMcKOktS7sydmT5VjZnah8AXZC/j0RP8ydCt+jrX4k71R8neByBOxcwNy T9G6Sf5eIHaLhCmSOCguy16hIz6jT8ZN/24NM3dzdNZfAswannU069vIj9IiH41y5MiFqSV3 7edGteR8VLifznUkpT4fX/+G2xbV0QNr30runy2W25Pc5/5kqdxO06yXopbR7qi+yHWifA5F +VDDfhk3/AvXD1/W/5uZpeJxWF+/ed1r6rU0K+XvmcewDb3GzGZjj2Fre/WYEwcfw+Z6tcwY +bv7MWymV5n/Z9nmGNZ4oekqf59egfXNt6yzc8u5n1vvH4/wqv58/8+i8Yj/qMzyj/mPycr6 cf9xyVnil0hslvvLTUpi87JJ+6skQhn+W/4GmX/e8d812f4mf5Op5L/vv28q+1v8LaaKv83f JjZ3+jtlznku6zmZc56XVfnxsip/UfqGru0fACeBs/5OfqCCPLWCPL2C/GAiS929rt6VsvbL T+reAK6Td7l+e+MxXIHXQbjgGO5cr638dfAYrrnXWv7aegyX7zWVv9Yew9Xz9J5w6TFcnqfr gnnHcNq6nly/K3KRV5UreEUu8PR9j74VOf0tugrXjJg7ZI5UuGbE3H7zdYVrRsztMvsq9IkG 9HNtf8Pc7TF3+8zdVubuwbISGCIzeOpvWyJj4N+1xNQK/DTkPhXkXhVa64EK8qS/kx+soPNg hbwPVrD5YIWyYnnQMT0glrW+dXlDVO9J4xo3/FlbahffzyouEcw0TlaOmeXsMXNXOM6YVFPT OZwqn5lgQdgzHCOfDiJ3DwtFUm5BWCRyUVgiR5EwReEySVnBp4B8hfJZlnymJp+KFn+yN1Vs jUksaeoyNDStRGwtC1diYUy4VqT1oc42P63H/tnZeYdXjRrqu7HGSQ3dBDmmyDEjkefIMT85 L0zk4uRYyrmzGyOfu8GmroMbIp+WIhe4iSIpN9XNFHmmK5RjpjAz3QJJKeLTlHwT5bMg+Yzh s1Is/WyxZaI1BluxpdjOGCwUCFMkf5VgYYhbJtIKV/Jvrrf/2TvLHK8r0RsuvcY4mVeCzJ8P /t77N0fCV8qvcDRNjpZynC9HgRwdRK/2z0el9eTtHFSTT14QCI4OKgf6L9Nukc9GuLFBw6Bu UNduCZoH44PGckwOpgfJP7s21hTd1smnWvLJU7RrsfiTvWpiq5rYaC6H6rRWC6KltgP5q10w Wzk5twvmBe3+z9ae/1bsrVz3shf8fNg75Kh37KG8f0Dk9snRRY6uyaHylXL0juXsop+PnB7w nfW3osW38f5smVam66+K+JP9XvLpARfK1fFR+fTyl9vIX2IjW9XWQEs/nRLNHv4LyWd28pmn mFicLLJqzRZb4/0lco1dErSU8wtY0LTlIr3gr7O14daJVM9f9/8de35f9UiF1YTuEaZLh5ZG pedz8PkXrix6P+fRmjonry1rWT5Hm2COtPXyMsXdYC9N9aaobI6Ecp/krXS5ignfEqZIsVRX P7tjpnSj5nVbBWtjJ790qNosrQMTal6YQ6ApjTRvOEXzBncgHxK5A6m9whz1DfvG6a/omXC4 2tFSjP6T/ql3uFK2AfsqU6r3tjNIjdcgrDCkHytOAeP1Srx6mA2+A38cMqsA7xByvOrYDfMG yIrQ2wbWBZeDCxT9HmAaHAOy2vQLEgvnYrMhPjTEt9p41ZC2Vn40JbLC8Hcp2gi5PnJ7xYD6 xqsaqa35aTUjUVOd/iC/5ezdDW4Gh2OnkNQ62OmEvA7ciw7RkKu0+WlFk6zZ4lUV67KyErB3 bKdso/qp6B1C7oG8AMxXtD7ycFILwRUwy0ltDzMGXAhOh+8CDgX3guNAygoqg+PxdksS29r0 1Smgvmd6JDUG7EHPUcbEsjsIo5q76Uv0eelpQ9V/d4u2iI4IszWlY3ApuJW8S8Gt5F2q6Nd3 tI7a9OuHXUHda9jt6DnKy0gxIDK9vZfrSw9HVpvCdwUPkWpIzUA+iKypo8k1mtTR8KPRH40n BZoqI6gr5SLHlsm1ErlXrB+0xGd0AkYuM8BKlc1S6Quef33ZV8I8Vlao9SU+S8GtpfqMYCm4 WyMm0StB7qkjjpG7krG/Mpbhe8WzCvNDjdL5jGLmBJUl7/nMDy1hNNc25G3I+ejTUoKxrPr5 SbSnkEtniYO0ZpnTcZQT/KCtzxyVo3OXeSXYIXgY/iCz2XHBt0RAmcOay7wTNlB0uk+23ens Wzvop+ORyDQEc0ETo8ZK5H5gSL+qQR/rCPMD8gPI65EzGfWngNeoV3pPWrbDoM8zLqOMHRrm 0//n0KbI2oJ2qMYkXUfjEE5RdO10Xg3mqKaNFIOW2jdsFPdwbVk3UXkZXyqv1bil9yofTtG+ FOygzxi/EPyzorcZeYOOTW+n4CK5Q/X8DXLNEsvIw8BW4Arl5b5TZO8GcJv/tM66VvFmZexk NHf6T2ou5cXa62oZuZWWbqv5y3TG0Lz2qMx5nv+9N0PHoye9RW7HnhJ5tfcp8g8q+5dQovaW Q/5vNarB6Toze9rubbzfKWPFfy/PXyM287z3yBtjbKcQ3KmaynuTte5yR7gf/n2dz/2qWmuv WGVvnc4S/klaR5VFU3N183XUTNBrkNTrQ/I+JjZr+qt1jpKZ27PNrfb54VauUHaUyra/nakz sL1XcL5q2sdhTnJyXQ7G8XR8mrtAWu3SQAwGnV0nwZrge/BNVPZzwRlORoGL5epO7prDV1R2 vVw70a8T3Cpyw6CzyK0CLeVh10Xkmejcp7Ib7cTPVBcnOu5GJ7F1s1130RmlOvYh/xnB4+wV gle52wVHOye4SlZunj3PXi21+7OV1YIdaP8o8vXu92JhmG0HozieWg+0GpM/2l8I3mM1/ifY ycI/bbV/PmYf1rLsXMFfWblnDfZqLncd0bveLha+nr1B8Gr7vOBCK2PW/w48oCirNfWziq0u zGorvcieqeiNtH/BQ7X5sMY5qGTvE51K9kXR6Wl1NsvVWTHYEbxGe0n/cSPcAJF/R6ud5LRF +gfSW4KX5M7NC3YHy4iP3CUHDd1VtMvVtMhVWjsns58LNFXm26tokYG0iNxh2xddZcEfwBKs LSN1trZ+6lf0gZnk3WPvJsLaT+raYYKddGazzt4peKO7kFaYpLwVO944u0twut0G/4LW3f1V LI+0I9AZQSucpe2YtMVY2kLGo9cj2ENbvKie2BLaQu7b7Qf2WR2/Zet1zOrVwR/G9XcnV4pu yItIbQXTi+vyajQNVwF2B3yDjlHe7EdnMvrXIxcjt2a9cRmjqQu5RusMaW/VFZTfBJtv6Oxn H0a/SZmsHu2jyH9WdE8o2r+ALXRetY+WSt/2xsb+UNafdc1gx2MzU5/pBJUV7fGxfeVL97q1 Mj9/FZRofcPvBDelmmitQ92/GOZ2qBxjqiq8zlSbNNXeDr9AmSAPfpEy3uqgByh9wK+n85Vf j1Y2wbWgpPolzGPPwPyo6L0X53JtVMfpk6WyYL8i16zDqcE6D1OvlazQ6ul6Uq6jUseyyiqX LksYxVqsOSfK2lZqJ1chvcqwbtEoyTVd1+o1WCkdSeWprKmCrC60LME8rncNwP9QLLuK9cwY rvXxdT+EycNOa67soY4F1ZE1RENW6erbRlaw7O6Wsso1RdRiVbLOV/l9cD1Izyldl+SKLcRP DbW3xO9S1AZzE5213Pso47DwKHIVsBqlnAi/CP29TvpMaStFaf1QUUecXMfrwch8aColqMx6 /R0bSW2sq4VYVv2y/fGqQPuPaCLHqT7RC2rBV0buDT6nkdEIl7ZKyQxW+rDKZZekbsMmKwQ3 nZh3Q54FjgM/BJ8F30OnLfI+5HfBU8ABrIczSJ0JMxGZe6sQO+EtMFtBnsbqWBDcCb6ATgBW M95R7onK9hDPmmAl1uTGyJWo7FtSv6I3fpvwuTDCH2VdJytwnpNKP1WMGb0j6KIrN79PMFXG 9ZqUXC9cd8VgJzhC0S9StCcqpmKcBAMGBp1WiiHo8kltA/8S8iD4RegjB5tg5pJ6GOYcLOQi z0S+i9RXYXyY07CZgt8OMx5/+mMN2TWDb0GuuC4L4b+GvwDmMiz0Rj6T1ACmJ8xS5PvAeZTY AP5PMEfQzwQL4G+E3wPeDtMXeSX4FfgdSISD9shD8YdohGiG75Ia17oY+03gO8PfA44CaQX7 AXIZ+AXMRMVM2iujq2Ka1knloTMcZhfMLJjbwDvJS2yDjdT3XsqNS28MfzH8DJiTYTqBq8nb DxwHou/eBAth0AmQy3Zofytbpf3N4JvthuU+ukfh95D7TkUZ6X5rHdduje6QuO6KwU5whKJf pGhPVEzFOAkGDAw6rRRDUPr2YHr1YPrzYPr2YHq7Yj5525DrJeRB5FqENeRgU2wZ/bnoHIY5 h1JykWci30XqqzA+zGlYTsFvhxmPz/0pBdk1g29Brri+C+G/hr8A5jIs9EY+k9QApifMUuT7 wHmU2AD+TzDsNblMsAD+Rvg94O0wfZFXgl+B34G0QtAeeSj+EJMQzfBdUuNaF2O/CXxn+HvA USAtZT9ALgO/iNtOo2pBGbmDmU8GM9sMZuZRnKiambRdRleV07RyKg87w2F2xVFSnUx6SGoW zG3gnZROWwQbic+9+Bl72xj+YvgZMCfDdAJXk7cf8jcZ72lvhyGXexMshEEziOVu7O9dqvOw W6NXbdddMdgJjlD0ixTtiYqpGCfBgAGrO7+VYgi6fFLbwL+EPAh+EfrIwSaYuaQehjkHC7nI M5HvIvVVGB/mNGym4LfDjMef/lhDds3gW5ArrstC+K/hL4C5DAu9kc8kNYDpCbMU+T5wHiU2 gP8TzBH0M8EC+Bvh94C3w/RFZvfDfgV+BxLhoD3yUPwhGiGa4bukxrUuxn4T+M7w94CjQFrB foBcBn4BM1Exk/bK6KqYpnVSeegMh9kFMwvmNvBO8hLbYCP1vZdy49Ibw18MPwPmZJhO4Gry 9gPHgei7N8FCGHSCWO6GvIP9w8vBj1mlT0Y+ys5kZWUC1n4BK4dA1wteyM6tnY/+uDJZfQVP sd5bDc8qzrH2sDyjD05Dbo7OQnB6vKfKztVB9pduIBfvCnhNdAViL+dO4Wz0uRPx9mEtRL6T fcIDpP6ochjvCf8GHfZF/XivOF/tBB/B9KGs5YrBjtJR6hV4VNEvBDewZh5GfBrjldO1k7dA U2VFrfof438cB+68fGLrna2W7Xx0qqHfgfuj+ZQeR/tC4vYesT0F5oF4BxXfPoQ5A8/TtNQ6 vP00vo8jlfW5u5e2uJ7avQE+VVYgqYx9b7OWG7TEwhZKvBU/d+IhfdKnXDtK3/EL2uLDWezs LQB74XlzRb8L8ungOu7Uvke+nJXhQvAAliP4ZdzTDYDfpChX6BncgQ5Ffygeqv7k0nXkVUzD LCvboUi5W8BhpBYoWu6qHLvr/l/VsvXxdjjlDmJ/8gbKXYG1Vcjb0cS+n0c8S2X9q+2lqdOx 8AFlrUZenshqbQk6Y+KnIdg8iifVwCvQHEy0a4HxnXIV/EmRtyd2OsD3BL8HR4J/oce+T4vc CTMAvB98HXwZz6fRXiehuR1mQxJDQcdTD9eD8Z5LHdeTSon6/zwEr8Ma84z3Ktb6Ua+zk+uL yp/D/wrNe2M/sdOUHsh86z8Gw5Ma/2b0ebbimlDKs6S2Ssoi5si3gleBT5JrXHxfic5LWOA5 jnuKEX0WOi+iX5c6NsUycbOfUFZt6rsWrzqiOS8Z9Q/K3Muzm3QJI+UgeB/2N2GHnpDiCU5I bwyO4MkVMDz9kbWm2lzCiM4g9Wwda+E1yUwlpfj30Wc+ofV7M3fxjMbPxs9BpE6iP9yM3FV3 UQKebcmVrr22Mv7Qu/xL8JBnZ34e3/o+l7oTK5sCGUf2JfTr02pr0InH4NMw80i9J2lfLf1i Uh9H8yrq+z54B9gWzWJ0miOvBm9GvyEyz6dCVhTSu7QX7cSfc/D2xeSefSz37PP0vtJ+zX36 HO7cZ3BnXRmmJXfcLblnZ/deNeWePZa5/9UVPm9nyP07qZVA46eRj6LTSUeT3h37I8ED4Apw AtiHJ6H7kFeDSxRtf9CHqYpcDYzAjfCF5N2sdxxi4YjunICHuAcZqbJfFbkqfA0wHz6taCNS 01goBkeDHfQJl/WRS9FpjbwN+Xt92uVPSLXQORD5gKKtBk7Gt+9JXZ1optnhaQHG+i3QV2Yz z182u2vUc+RDyDXcYrAv3l5DLYpAlU1YT3BR7BtMa1Jb6e6Z/ZjI1AguFsZSyn2k9qHc02NP 9D0diZjyG2A+RF6NXIx8P/IavHobuUaqAH90Z9WH2YfmSOrbGqZr7CfyY+TtoM+pbQRzSHdF /ELi0IfIbFP/g/F43jw8VfBa3df1vw+f19me2r2M/Q3or4SZoKl+1fBkytLnIMZ9oKWTax9l 5dMWhv3DXfClxLYUD89CZzTyMPeQ7r66SFsHy7uI1V8o90D8HJ+e8wY9J5N9y06gARexn9lM v4fPPzmQ2Nr72cncQSt4pN6sqfY8apqrLeh1iy2EdbV0mINaI1sQ85rXPsU+6irszILviuWa cS73a/LWxU+13BOd/m6iYCN6wuqgHagWqqssPmuqB1+svPcI+CrYjZ3VA+jXR14N5hHhAJ08 Zaxxk3WuJvVH4vxJIOsxfz55C6hRvE9bEteXvDXBb+BnUYvTkrroO5DbyWvwc2fi7S5GIp6g uZOy8jXOXkvtM95yZYLXnFz3XahoTwt+1Ouy7vLZ+S4lqQPcOyI3IrWuop9DJPcTsd9T7tPE fFQ8funnG+kJfiKnkbUX7WP0LYzHBT1tVzzX0bcXxnMdPfZBZh56jr8F/jPaZU08U+leon81 WBX8htJbaK+W8aK5ltB7a+jzSjsNf9rjT3/8iZCrqTUZlWnGLzMGngyOxx2706PBDtwdf0Le meiX6rMqKet2xiZjJ7xbr3GMrB8pMYVXlvHSQ/1PD1QmtUQZ95FiuFEjGeYwitspppbD7FTZ ZSsGVzC+FqmH9gRspimlgHJztL7p8foei1jOlVz7FWXEadzO07HgzWY8LseTLVjoQd7r4IfD t0FzejxqGEEDQ10VFOh4sVwLbHXif0D35/262k+8WczzHYPHGLnaozqEaqFpMgpU/1p6YD59 +CHsv0xrHnK3ivwWZRnsbFZGria30mM176XkKlJrZat0r9tO02tN0An8FlwPzgG7K7ra4AxF uWLewkhXpik6tRTDUpgirlx74Ssjb0TeQepEcKxiqgvyEFJXxTZ1p92miPb5KgchFurA7wXb a6pcg1S/PqnjaKNbSL0cHAfOV/RXgBsUZZ7PVW9VdkfQOUopLZEfR75JrxSuCDwfPKoYLsXP 01QO9sBHXFMuUpQrhTI1wffgW+muo3iiOIgnUwuDh3SUKdq58E+CfwW/UAyYzVx3PPkDzAie XZrge/FhGxFbQ42qWuk/wUmUdQI7nJWQv0MegJ/NKPdwWF2YC0m9F5vr6Z9Xo7OTGLahdleh k0JnB/X6hpHFE7HgTLdFd4SI1RR0Ouq7E247uaahOVqvYpa3wvxhukMbcO1zjZX3WwUvs5OW Q/y11v20z0utB7FDq/6cQ+uMdnV0paq1dq85Dx3dSeis0XBZmhqO0GtZUOSy0dcX/1ujuVPL En31ZJTtq7tSPKUdoUx4teYKq6rsPlb73gq9pvhFMKMd0WZ8HVDedgwO655PbFOfa4cbVMed R/z38sz9aX1HJXwd/x+m7a6mvr/TZ77+Ua2j+xr7TTRvOAF5m14Bg3rEv63tB4q3dpf9AdT4 PK39IeA5UXAKOlXQeRdso+gXyb2OZ7upb+KhypMUg46KUouLBLeqt34rZWSFdpHukqmfIYw9 Aj6t1lym3SOp/0Hc6mp8JDIan2vIW4Sdw2ART/nn2F8K7olT1U9/DrVuFQzApnqyGPs3ay47 UGvnmihKvawwX8U+83y8bYwaT6mF6o9W+8HZep0N2ic10n2MofC8JxYOoi4rwfOI/1300mLi tjtoJLyvNoN7SB0F3kCPqsebFR20LNeSNm1J3+4UtyZYix47mX7+Kv38duS3VA5K6O0rmCVK 0bwFC81iHfr5RnQ2wJ/Eju4JMI2w9jWl9GPkPkuuo2hewvi9jOvaxdi5JOxFr9BV1oU6sjKZ qTK6ampqkmLaMLvmMaKHK6Z3MT+3At/BwyzVzGSulry1yKsxuY2Rciej7zT6wF6Ye/XZt5Q7 kdGh66g1inYWV5PVump1U5mH7yfy09wrjNNXyNWY+V/lxaz6ipjBZgRal1e1Td24eFZXa4FH n+lLrxhOj9pJT5ukb3C5K3QESb86wqqvH/1Br+Or8T9N6awey741V/IEs7bOz+xujQQPlO3R 9kKeAPZJeN6IAKfEu3bgEvbH+oN+rFkqd5p+a7VjI/iN8D3Iu1l5bx9YSllp5EPIVbmjr4pm Dd6vuAUmjfx5Urrqd0gsqOXW7HaujPdg0SmN79zjNyWwvAjk+az9OPFN8XT4LtzvT2A/aiTW OqC5kdRCfNid7FWq5hLu9H3kNKm7VNN8DjMMH/LiemGzNf7kwDdDfyelZ2KzE3IzyjoZ+X40 d6DpYacb/txM6nnIuTGflKV4kAgUoHMz8lNYWAXOoqxW+oaD3xX9+H2SPFKHYbMnOv1hepC6 Gq+qU1Yx+Aj4Khj3lvrkjWNLrS02vR+x9gk688EC+G7k7cqz8oPgEfxZAH4TtzKalcHFcSnk 2g6uhP+BtzVWI8c7yflo1qO3bIFfzl7xa7xRE7LT+5rmsqehPw2f8S0YgNwI/+uSGrfXfuTf E5OnwSfYiZoN7qN9F6KzC6YU5kCio/oLk361EX1F3vzxV7DDmQbx1v8Mn/chT0Bek8hDGR3z waHYb0/v2khvVH568m5qzLRH1hr1Z/+qGjppZD/Z+1WdHN5S+JxcrfF5SuLtfEbBRkphLMAc iscy8ko0e5C3KtiD1mGXLz1QNVPMD+4jxXCQprpXqNF+xVQbZcK/0C5vg1fQb09QPj2evMTf G0uuNvg8Pe7P4EBafBj+xPvPK/EhHgU1wOpofl/2KPPYHOa6R6mp7nzS1l5H+kkHatcUC72o dUT//JxyS8HNYDH4PpiPhYfI+zL4FiXSM/1LsVakvPjXUJjewS5Fet3IoIvgyzzNfJm9wZd5 jt/IGN5AMSbTFHpFxl07/No+ps51tw4fbLpeP7zfINPrhn59hpuBg6+9aYi5Rf83WrfLC+ro G0NlZfqbgSbDZJkq5jiTrX8JJ/eRohWZSqaqyTU58re+Ga8pplzy9DtbEtk3obFqt1PX9nX0 u11ID5I0Zyqb46+77sahZgx4NzgRnAEWggv7Dh5wvVnSf8CQa81y8IUBQwbcZFaB6waM+O1g swHcLIrXmq3gjsG/vW6w2QseuLFf3wHmEHhkuCR7BuRZlvkZLZK+GKd1cMcwP0ue4U0sic7P mFkB0xUwuwKyd5zYyaqAUYJVTD2Tb5qbc02B6WS6mp6mrxlsbjKj+faF6WaOWWBCfS3ZjCfC nlc1PvPLELrTrt8RLSv0dD2j71h5GevivzPPMvyvl8x5+OtlPpec18bnylF8Pm6e6Mu5el58 rtE2zl9jtpQl9msUJX+/kNSiqhx1KbsS/xe9k+lsDL++6f//f7+VrKCkR3l1/ea2XdDD5JnW pq3pYC6XVUofM9AMN6PMWIncFDPTzDMLTYlZZl4wq816s9l8bHaZ/eaQOSqLoyi1zNjU46kn Us9wLk4t57w49SznktRzcn5CpL9yfiK1gnNx6nnOi1MvcC5JvWh8Ob8kfxWL9sucn0it5Fyc eoXz4tQqziWpV0W7OLVa/los2ms4P5Fay7k49Rrnxal1nEtSr4v24tQb8leJaL/J+YnUes7F qbc4L05t4FySelu0S/4mIvpN57eYMf9URN6h5o+n3k0iszGJzKYkMpuTyLwn5Tyeej+JzwdJ XLYkcfkwicvWJCIfJRH5OInIJ0lEtiUR2U5EdiQR2ZlEZFcSkU+TiOxOIrKHiOxNIvJZEpF9 SUQ+TyKyP4nIF/8gIjNMoXnUFP+3ETmQROTLJCIHk4h8lUTk6yQi3xCRQ0lEDic95tskMt8l kfk+icx/0GOOJPH5IYnP0SQuPyZxKU0iUhZHRCYaIpL24oik/TgiaasRSQdxRNIujkg6jCOS TsURSafjiKQz/oWIrDJvmI1mK//D+2tzRBaYmenMOCLprDgi6SiOSDo7jkg6J45IupJGJF05 jki6ShyRdNU4Iunj4oikc+OIpI/XiKSrxRFJV48jkq4R95h0zTgy6VpxZNInaI9J58XxSZ+Y xKd2Ep+TkricqjVN10nicnISl7pJXE5J4lIvjsu/HJH95RGpn0SkQRKRhklETksicnoSkUZE JD+JyBlJRBonETkzichZSUSaEJGmSUSaJRFpnkSkRRKRs5OI/IKItEwi0iqJSOskIuckPebc JDLn0WPOTyJzQRKZNklkLowjo9/VqX5zBZoqV4LIDJFLQFquBnmmvjlL4lVgupge0Tsy01+U /lUwNXo3kaZFG5EuF25TIk2LNot0MXrvJdK06H0k1fsgkabxfS31TGPTUtqjk+luesusfpO5 w4yPtpSX9GF5SVvLS/qovKSPy0v6pLykbeUlbf+ppGifSJekLxLu80SaFu1Huli4LxLpf/Jo R7lHO8s92lXu0aflHu0u92hPuUd7yz36rNyjA+UefVnu0cFyj74q90jGvtfYaywLmFq+7gGc 4p/CtVhWbtnNWAXcJK02xtT8e5/NbFlfFJvl5h3px997+h0R1bw63ulec+98r703UlduWSuN z3ceBFmvlEurfpL8N0WaibS+XHqrXNpQLr2NpKvDyH9HZX+n4AzS3i3X2lgubUKyUosck+tv Jod6MslXLx5E570KOtV89WmG/6qxojnDf7/c0gfl0pZy6cNyaWu59FG59HG59Em5tA3JSfvn Sp+vaxr6cn3250pZcn32C+W8RjTm+msFC/3t5fl2JPVO+ZP9KdJG8/xHRX+h/7jJ9Iv9YlPJ L/GfNJX9p/ylpqq/zH9O7FtWo7lG13BtWGtVTr4V8WFJWOQvEptLRd/6z/vPy/pMWtufzv/Q 1u+807aXmZ61bKZ+H5f+H3Bzoj/Hn2Nqi40XzUn8j+sL+B/Xan+ItErFkSx+20vE5ndI7cul X5ZLHcqljkiO71usIfcR9cj5Nbm+IcchtA+j+a3OJP7XksPwrXk2vCe829c7A2upts20mXr/ ZCPqIRr2s/BEq73cC08KT9Z8Xg/zmN1n69iGNt82tk3t2XasHWfvtuPtBDvZTrHT7Qw72xba +fZRW2Qft8W2xC6xy+xz9gW70q626+x6+47dbLfYj+0Ou1ts7bcH7EH7tWvo8t157gJ3obvI Xewucb90Hd2l7gr3a3eVu8Zd5653g9xv3Qh3s7vN/d7d6f7g7nL3uHvdfW6Su9894Ka5B91D bpb7o5vr/uQedo+4x9wT7kn3tHvGPedWuJfcKrfWveE2uHfcRvee2+q2uV1ur9vvDrpD7nt3 NDRhEKbDKKwcVg1zwxphrbB2eEp4atggPC1sFJ4Rnhk2CZuFLcJW4TnhBeGF4UXh1eG1Yb9w RNaSrKVZyyI/CqPMKCeqGlWLakW1o7pR/ahhlB+dFTWPWkbnRm2igqh91Cm6LOoa9Yh6Rr2j vtEN0cBIf0lxoU1bXVqcZE+SNmhgGxjfNrKNpA3OsGdIWzexTYyzLWwLE9o77Z0mZf9g/2DS 9i57l8mw99h7TKa9195rsuwkO8lE9n57v8m206T1cuyD9kFTyc6ys0xlO9fONVXsw/ZhU9U+ Yh8xx9nH7GMm1y6yi8zx9gn7hKlmF9vFprp90j5patin7dOmpn3WPmtq2eft8+YE+7J92eTZ V+2r5kT7mn3N1LZv2jfNSfZt+7apYzfZTeZk+4H9wNS1H9mPzCl2u90uPfNT+6k51X5mPzP1 7ef2c9PAfmG/MA3tl/ZLc5r9yn5lTpce0NA0kl6Qb/Ldue5cc4Y7351vGrs2ro0507V1bc1Z rsAVmCaunWtnmrr2rr1p5jq4Dqa56+K6mBbucne5Odt1d93NL9yV7krT0vVyvUwr18f1Ma1d f9ffnOMGyp3LufpdJuY8N9wNN+e7kW6kucCNcqNMG3eHu8NcqN9JYtq6sW6suciNc+NMgbvb 3W0uduPdeNPOTXATzCX6zSamvZvsJptfuiluiungprqppqOb7qabTm6Gm2E66zeamC5utptt LnVz3BxzmSt0heZXbp6bZy7XbzQxV7iFbqHp6h53j5tursSVmO5uqVtqfu2WuWWmh/Tcv5rf uBfdi+Yq94p7xfR0a9wac7V73b1uerm33FvmGve2e9v0du+6d8210q/fM33ch+5Dc537xH1i +rqdbqfp5/a4Paa/+9x9bq53X7ovzQ3uG/eNGeC+c9+Zge4H94MZ5MpcmRkc2tCaG8NUmDJD wqwwy/w2rBRWMkPDKmEVMyw8LjzODA+rh9XNiLBmWNPcFJ4Ynmh+F9YN65qRYb2wnrk5rB/W N7eEDcOG5tbw9PB0MyrMD/PNbWHjsLEZHZ4VnmVuD5uGTc0dYfOwufl92DJsacaErcPW5s7w /PB8MzZsE7Yxfwjbhm3NuLBn2NPcFfYOe5u7w75hX3NPODwcbsZnPZn1pLk366msp8yErGey njH3RXIJNRMjFzkzKcqIMszkKDvKNvdHVaIqZkp0fHS8eSCqGdU0U6MToxPNtOjk6GQzPTo1 OtU8GDWIGpgZUaOokXkoOjM608yMmkXNzKzoF9EvzOzonOgc88fogugCMye6KLrIzI0uiS4x hVHHqKP5U3RpdKmZF10RXWEe/s/2zjuqiaVvwJtsNkBYOgSkFwUEAxtCVVB67yBIUaT3FqlW jIgixYaCYKGIoIKKWPAiYuOKgAXFLgqIgHRBLyKI32ZU5L2vb/vj/e75zvnkuJmZ3Z1sZud5 dn4zh4C6o+5QMeqFekElqA/qAx1F/VF/qBQNRoOhY2goGgqVoeFoOB7/sb/FaQ0sBy+E1WEG PA5nwLvhXLgAPgKXwGVwNXwRroXrcdoa4Gb4HvwQfgK/gF/Db+BeNj/IQngcWYiowBmILeKI uCIrEG9kNRKAhCARSAwShyQh65Fi5BhyAjmFnMV7VA2igtQh15AG5DZyB36Ivz5CniHtSCfy FnmHDCHvkY/IJPKFTCAjZC4yD9yL2JJFYDmyBDmcrI244qlVZD9yENLJfR5/QHCg3CgfKoSK ohKoDKqA0lA6qoXqoQaoEWqGWqF2qBO6HPVAV6K+aCAaiX9WJjAbBMxGAE4jAqfBwGkk4C4E WIsMfMUBfMUJfMUFfEUBvuIGXkKBl3iAl3iBl/iAl/iBlwSAlwSBl4SAl4SBl0SAl6jAS6LA S2LAS/OAl8SBlySAkSSBkaSAkaSBkWSAbWSBbeSAbeSBbRSAbeYD2ywAtlEEtlECtlEGtlkI bKMCbKMKbLMI2IYGPKAGPKAOPIABD9CBBzSABxjAA5rAA1rAAzrAA7rAA3rAA4uBB5YAD+gD DxgADywFHlgGPGAIPGAEPGAMPGACPGAKPGAGPGAOPGABPGAJPGAFPGANPGADPGALPGAHPGAP POAAPOCIjxBkICdAtDNg2QWw7Ar4XQ74dQP8ugN+VwBmPQCznoBZL8CsN2B2JWB2FWDWBzC7 GjDrC5j1A5z6A04DAKeBgNMgwGkw4DQEcBoKOA0DnIYDTiMAp5GA0yjAaTTgNAZwGgvYZOL9 tQeKgeVhFRiDNeEPcCa8B86DD8KF8FG4HD4H18CX4avwTbgRboHvw23wU/gl3AF3w334aGYQ Z/MDzqYqzqYd4oQsRzyQlYgvEoiEIpFILBKPJCMbkBKkDDmJnEaqkUuIKnIFuY78jjQhd+E2 /PUx8hx5hXQhPUg/MoyMIX8gn5EZMpFMJlPIvHAfYkemwvJkSXIEWRvn0ofsTw7mrkFJKCeK ovyoMCqGSqKy6HxUDdVAtdHF6FLUGDVHrVF71Bl1Qz3RVagfGoRG4Z8y+v+p/I+pZPPIADxq Ah61AY86gEddwKMe4HEx4HEJ4FEf8GgAeFwKeFwGeDQEPBoBHo0BjyaAR1PAoxng0RzwaAF4 tAQ8WgEerQGPNoBHW8CjHeDRHvDoAHh0BDw6ARKdAYkugERXQOJywKAbYNAdMLgCMOgBGPQE DHoBBr0BgysBg6sAgz6AwdWAQV/AoB9g0B8wGAAYDAQMBgEGgwGDIYDBUMBgGGAwHDAYARiM BAxGAQaj8biZDP4O42qoGKqALkBXoSaoDXoF9UFj0DSY/wAxD6SCR07akD78Ee+7LHgC36bC k/h2OzyFb7PJ2yEiYkBOwrfLyGvxrRF5Pb41+UUNf4AaPoEaPoMapkEN6aCGZFDDOlDDBlAD HoORN7KPAKlNs6mU2dTm2RRrNrVlNpU6m9r6I8X+65PfU+MghUft+FO/A4KQL8gMRMSfz3g0 ij+j8WAFf05TIE78+RoEvtnQGswNKUKaINLn527B+cXPhPt/pPD+wJ4/uIPnxvFYrR0cxwtv wmnH9317hftBPMiOISAQDRDwM1+zI0Cw+sAJ4upePJqsYM9uEAu/xYnQI24+bt6/W5NgXxN7 1UkeWoS3r+H3GYhmEDG3zM4kdLO/2xCk3s6men6kyInso/9pBP5tzY0AVttQsK6ENxZxFJYg BZNCSKHfV+UI346CIPFbEAR+Px//J16PscRryVwqaZZpEzwEDmIhS7wCLyonEgh0boyLjKjy wkRxBMJ8yRRVMoFEYOkQCaRCF8wJWzSnRLJYOkUS0gc/DpAftAbvvhFQIBSH/1/K/sHk5lRG Ep48co1L3H+m5femjW1v+F/Hct9731/IEmFhLNINjAWfLISJBCJRiIFf4g73/vQSq4GMPnDB OzCe2atl/6YWlgguE15OIgsRl7vQhTABdoZTiOLuuyYkNCo4LjqKzo/xsgs5hDicAwMio6MC 6NKYJLuEIiRiF+rPjF4THRQnaxLNjIlm+saF4mfIYTLs/bCQ2M/9rqGRgTSXON/IGFlHEyNM WpSHrkXHMB26Ll0T0/DEszoYfTaLba7+r1wZD8bN3s8tRLJzcHSmK2ELvmWlo0xCY0ICmbKm LmayZi72i43pxjo0c20dc5q5mYkGfQGm8O0TSf7yE7kEMhNC/QMxFkF+bgsTEAhmEfggvJxC ZBEIUHPDdU65CNoNTcTq6lutbjnJjWlmN/djI3wD9RqeisnL3h2gvpxKjy8xaAjMV3lWJKES flvpcEVg7iW7s7ysm9CWp7u7lMo0h+qk2wRzNE37nnO/Qwg2/cvv7bC+mKejcqW3lyfLYLLs cUseoX/X0QO59aQMH1Mzr0aP5rJYE4Ewv9c9C/qitH57sH0RnP4+2NyXUbBlaXVg+sWy1auy W192O3LpL+PulUx9HNiS29pMPy+PbhrmoPDcMXxrq6cTRr7g0d6ltitU4knikYKXp9SVDQMK oYAvpwqjaq2mfHi5WkmSN6407h0Ja1IOYRwsGRqvP6G2OR8eXoG26Zj7zI96X3V/hMj+QuIS FoELbxEEk8KbVIqXRCUJG1Crck593cFQ+hhbNVCdekJJt88G9CEpBZIYRk0RVtD89MzZPIYy ZDiVMFWteuaGVjUf5so+QIZkh9lgVoUWhWZpJiFxcTGL1dX9mRFqkT/uk5p/dKR6THgou1Q9 hhkdEO8ft0Z99jay7yK4iXivVMMPwVaQOXEwEYSDQCDZYtaY5Y88RkzT//4GiYmJv3qDQOY/ qTkOE2Jf7wISilF+VAlz/glImN1LCG1rGwUZeZJnsDNTwyfb9QIkqrSHt/tfKXRYVbit8oBP bNwyrQUt0ulj3CXr6D28qtkhup9YvM9+kyfMfBC8tEXc76HCZEeZ8+U97bTyIv7eAYu71Dru vYv9rONd2+xPY71i7ioX9mdraMZIDfm61Qy2u9yIqPAuJ5rE5vlG9NTYx6xPcc0s69HtX3vn 6oibCR/Mm964OEYq/5arlP86+lgPtUj+xWLOkyTrvS2+XdPW9GNSH8iV0f42V+0OCpp2HE/7 nXtg4pOqaXNCQcModVRyXDmx8uodhd7UnOtaubIb+kTen+yUi6NarPM787xZNJy//HhH0FIZ zzaZQZnzUrSXEam7cY0N4hpr+6kxAmVR8qknyeuOsR8b7BXyP2ks+b8iCwVM7hv04nP3BwTK uoQGR+G1/hQZpo1p0nU0NTS12CLTxvRms9jmLf8bIvt+OPwPDv+XYtozHa1d2wlfUn5s3lrs +1up+ZQ/danapMWDW4NDtw5UKTrF1z1v4SMLCxyNmHf4qo+da3q3nePTrDtFvqWJQvmSZUM8 cRNlbsl9yhMuD6rW+nd8zMm9OPjM4lOEwfiC7dWXKQ2ksuz1Wy0TJH3NT8y7udYv49p1rRNT K6Ib/Ln3WmGbJda93rTe4ZxFpE+S5OkLE/uFnEcutdrpvV3zytJeX/hELo9eS4ZTp3frktHs 4H5s9XE7z0MmdS8UfrvK98SG/9BBu1Gn4tQT3QfLDB6XjFDELMs/V9mX5vHa1I8Kj0ONZywf e83oPkkXoCG/mRAd5KH9Cyo3aEWlhpyUFdNVnpEs5q8q/SGm1XiLeP8KVHiOrdJnKPR+xTs9 kbd2776Uk1ks5qujiTmxdwuQcF8cNcdM/3x/GBidnUWEVBh0LT0tVUwT09FjaGE0unaQL03T Xxuj+Wn7BdH0AjT86P4BmJaerubfCLBZoK/pwTnqCsJtHTUGlXrJNp8ig7l9E6ADhiuwEFdg mtl/JEC8L+M9Ge/EPpgujUGnaeAPYKBAzzkKtMdwCc5R4NJ/T4H/oO64X/nuWLnL7tdLCDO+ K8meA0Gj6NOJZ6kPISde/tajraLKvZkMXdWnJr/DGfEDjD0fjncFfyG+KJWyNzFbKWH1psOB Orpx5+h2gSZW5dGpY8d9Puaublx3s359QeiQDOva+zvZSTZ+H5/wSD5xEXy833lEq25edqHh 3iJKKY168Lp5HOfAiw9PS620XQUFlsPV66hTFjNTIdNXzby7lgkmM4pHWA2vDOdxDIs0UAo8 EKPj93MPbz4Me01bvxFXQyocLdQzPyc/lZb9hEwtDBcT/swkXeQuyw8YFFjpYGaVtVCcNnX/ ApeLj2ZOB/Xmpf41Wn3uI50D1Btit8jVS+75pnZdME3PKUnDWMhl3HdHv/mO4stQFAejNfqf NecD7EHh2qOYvndsUQBhHhXGG54+DxP9m0Ku2ftCp2Gq37ww/6cXnKOjcTngNyo0KNTfNy5Q 1ig+LiSaGRqXDGSGYboMuoYGXY/BHpVpfM9qsLN/pWf/lcHOMj2852EB9VL5q2VljQ8kuEQs lXgc3dL8vj98JpfK3/F6cdwW8YvqhRqDX19dN7ZXeMSEXmi5U9KbTslafRgNqbCzySqtS7aJ LbDgeP5lwetD8dvvnVhjuunJ5hfjdWPaR297m708XWnQoRySK15Wylzj9l40p/uLVg6z8HGC j3Si2ZatutT7a7yQ34Kds0rPhqo/n8c9syduYVeCumu7MObx6UGW35fm2z7mdMdLSkLdhtg9 5kJ+ZflbOvYGhRoGu+4U6ZK3etu7sZRVEI2LNk8c/Hsf0Pzemxn0VnBCf5gXHW71ylR06Vt7 wnrM/J6Ovu7hc4nepaKHs5oFdrrpX6vg8oEf/jDYKrxFPDE+thmECISvJASD8Zc59vqlSdiy kuIjkfAemIYJkrm+hyYiBBICKsaHv7NlRHYtX1rp9g8Vd+zrzFu9pJwefUz/8lMaNm/2IGEi CZWmQC5QPB7OmEBGf+My3grWakM3pdy3C4SmVTopLvs8uo9ijt9cZoVZYGaFJoVGacv+fZfN 7mbiXZutIGAx1zkWs8RwKc+xmO5/MpBjA2Pyrda/9xeRAHnoLd2kaH56INqwSuN82ACvelS5 1cSAT/yQ7RLaE5NK7pnmdzR6iULLese8FLmVFQbqtr8Vl7sdfBNTW3PuU/J5K+bE0n6jTU2d qGhoc+lBWdpnbsebbndob6wfXI7pLecphkvdOmp22LiP7TM++H58ZPhNmoymfo1b/qiLwlaV oyzJvV05HFJjXfafMoua+oRKd9s3SjzYydynEhtZIP5JctTlcXCL/FdvqTvFmXVKZ5P93UyL ne5MvitZ4dZeQDQzVff58PxUG0sjavroPqHugdDe48WLrjSq8vMGZh948bH4s6AiV6Buzvu1 Mta1rZ1uffeT9ot539ai+rTvlbLKpl2p1DSVHOYXEYdWtmt5yd3Nu8U1vJU30yGSV8jeYP1C y4PM1vGIpmuDMSXue9w35GQVSljCnhP3SoIpcaXaQzR10cYepo7gh+gq/WDWpPPZLAY1UJp3 Rzv/q4AP0XfN2x6Kvku+STr3cGrRa5kdhysoU0JKhpXdk53HN5nXcqy2CFxtaH/GeNB+qDoh +SlFkytSMoUu08Xr2v62aOqtBX9lQN5XR6ra+npEbm3XPiOl0Bt7d+67nfW0QO4Uj/fB0eJT aSFb0DBabUI4JLW/coy67g/qlvmXtt8LK7egq+e/fBNr8ATa6GfRenf77Rqxz7zMrGslBqeJ hmFfQwv2d/GX85/TceR8fMMAY5E5cH+P/PA3NUQT+Fvyr/A3poOPLXBjazEwPba/6SDLwNjZ vy7c/1f2PlIUUfX6heUelfXhavM667reNBxwUnCsvNsuZj+fb7i1rNW2Mg6TFRjgeOS6T8Qq R8J4z6k8b0zxORTet65uMJ2Db4KXlDea3iLTzJi/7dDYh2DJRdPrerdL9ffalxRdU3Bpyvps do/r/qrT988Yk4onj0XsDX6i/NLc5Uza/bfK5mpKFWkOy53RbnjRVNiuXVjUtnEP7NDnjY9z q/vkcjd+eiA0znnRJdL5nNmuI5aQtUWQgNLCoPLc7ofkzdbFk6llAhbCXKwjqUPLk2YI+VKO nFshfsx86OIrBfPamzTXI6elk4zoiS0Fr5ds2VvkSzwvxVM1PVFwlnBX3sb16yRy47os9w97 n8RbpOyf2fuXgfDf2Jt/rr3xEgjbnPdNvpt3YZuzfq3fIv+jvv/17sniT66kFlkXllbarlnx gUNILfD/jPX/rdAdb2v+3B03vGFT7fZ35yoTX9xNdrIjVKnFxXpFokIn715Zt7NGrU2wODPS r8ad2GwvK+R4oH2tYZd77ekV+ZKdUoS0itqksYz7g0sIw11XdlKQxizLrlEXkXaHk3u6e7PC HqVc68kZI6tvhd/tVpkvHzP1x3R30gE1ngmOrpjLYvaHssMpzH01RXoHg2kNTrz9ft7LqHkZ ssu6OMQ1Jlvo1gl0A1Umd2N/jMHXrRSh19cpvtmjT2pEB+wzNjVoqa4qqR+4vIHbeF2bC1Nu GGuqTQr09iKIUoR5HzwXzvuofyloRTVNvXdya1qLk1vfoZiciAo927Y/kutPiK31WzhSXLBQ k5wo7nfbQDpShjXKfWtR7T2T6reTgxvOvzlaHqdVY98QqyComMCt75wZ62luIny5uvqMXXDj EeOvKclyKYdFsKA+Y8FV4o2H5eXum7xTfVf7wbJlUdtTjRRbRRXL+T6e/W4jx14dONS0OLpu s1IcWWA4Qa6+gHVNyfVCVZhBelGC77moIqFj9ScsRgWjv+zQiDg789qpMVPhdlDdIaltggFE A9ppj5013XJvz59p8j+X5Iq0Gak5VuScKU06WV24P1782Z5tQvHy6hrlnFGFXpkL6gtHUpvk Hg9IO9zOH7bqmCAERqdzb2gMbeyJ6i/LvUtf+JW3wcv7qZ1E0dPP6oeXqS2nht8WKvlCZ5Fw hEllRAIBw3H768bLv542+TmJXLj5Jnu49r3/csF0dO4MNX4BP3PcdF5s7l4R9mDwx4kkOi6l osav/uL5tcvCBex0DqtveBEZFnMTC5hzCkp3w1wLVVKUITsoFPKHmFA0mOQOguIgWcgVSoZi 8FwwXu6Lp0Kg5CLFlPn/EFbX5JjoYKZvTEiy+p8eKiQWAdr4YIO4dFB/8cqtOzortQPlRjIu ngjyk9jXLL9PLtYh/1GAk4vmH1JajgdXHDaHAnNH0U+kxVHW23ocLPghz09LrhPKP5unXubs qBs17agdNp83fGnfWMbBfVWuDlUu8D2/ydexHSaR8oGyyrxCUb4i8ddsepDWsWbpk6XtNlfb Epb87thQMzSuKUF89PLIjebpq1kt+xlh5MEX4YN2nDdddyapx47EJ6Hj0dsiVz5KOiDxbLAM M/h8zIeszzgQpa20SbWucJdHarhHZI1PrWjvZVJFwkuJpHdMiePelLRMV/kMiSBRAZXnu1IE w+mF5vJLw4h3Tpfmb/C97P7GbttAdYp1+5siFlEZYxHn/7xHZDqLKIIXCYBemf2XjQJ+vSIx p0+uxMTmdknunysrBPzNZ/cgdD6weqBB19TQYOhq6Hr+XY9MHLFmbljrxNhhWtPnfYe6yS98 xPlPvmb3Fe/oof3yFIfI4Q5XoyRXj7fXNtRnG3sU9Gy+QnU9N2iawuDup/rL7VTf6pSZE6T3 iiVn0tt9kYy2XohfkJZO6dkzfZGxwiTxmFe0okF7+ql4qzBH2aZHIsKXP1z7OOF27HyZ+BBH hjvzGH+VjM7Z4vHDtVfS2lYt5d13beehlntfaF03oyavdGYXGBx5ejtLbauhwu2P07Z+7joR GRb5njtDJqNCKvWn9XIejp7o1UnzKUv368UenXjFSZzROX3kIUvfSE8yOdZG0XaXjNiKLwKG G6P4Fvk1i+/Zrd9PihivG9zwQKO1PsLhHSN+YstuD9GPBh8VPv6u1xXSGuOFXhndsRZh+D2B /gcpsH6cDQplbmRzdHJlYW0NCmVuZG9iag0KMTUwNyAwIG9iag0KWyAwWyA3NzhdICAzWyAy NTBdICA1WyA0MDhdICAxMFsgMTgwIDMzMyAzMzMgNTAwIDU2NCAyNTAgMzMzIDI1MCAyNzgg NTAwIDUwMCA1MDAgNTAwIDUwMCA1MDAgNTAwIDUwMCA1MDAgNTAwIDI3OCAyNzhdICAzNlsg NzIyIDY2NyA2NjcgNzIyIDYxMSA1NTYgNzIyIDcyMiAzMzMgMzg5IDcyMiA2MTEgODg5IDcy MiA3MjIgNTU2IDcyMiA2NjcgNTU2IDYxMSA3MjIgNzIyIDk0NCA3MjIgNzIyIDYxMSAzMzNd ICA2NFsgMzMzXSAgNjZbIDUwMF0gIDY4WyA0NDQgNTAwIDQ0NCA1MDAgNDQ0IDMzMyA1MDAg NTAwIDI3OCAyNzggNTAwIDI3OCA3NzggNTAwIDUwMCA1MDAgNTAwIDMzMyAzODkgMjc4IDUw MCA1MDAgNzIyIDUwMCA1MDAgNDQ0XSAgMTM1WyAzNTBdICAxNzdbIDUwMF0gIDE4MVsgMzMz IDMzM10gXSANCmVuZG9iag0KMTUwOCAwIG9iag0KWyAyNTAgMCA0MDggMCAwIDAgMCAxODAg MzMzIDMzMyA1MDAgNTY0IDI1MCAzMzMgMjUwIDI3OCA1MDAgNTAwIDUwMCA1MDAgNTAwIDUw MCA1MDAgNTAwIDUwMCA1MDAgMjc4IDI3OCAwIDAgMCAwIDAgNzIyIDY2NyA2NjcgNzIyIDYx MSA1NTYgNzIyIDcyMiAzMzMgMzg5IDcyMiA2MTEgODg5IDcyMiA3MjIgNTU2IDcyMiA2Njcg NTU2IDYxMSA3MjIgNzIyIDk0NCA3MjIgNzIyIDYxMSAzMzMgMCAzMzMgMCA1MDAgMCA0NDQg NTAwIDQ0NCA1MDAgNDQ0IDMzMyA1MDAgNTAwIDI3OCAyNzggNTAwIDI3OCA3NzggNTAwIDUw MCA1MDAgNTAwIDMzMyAzODkgMjc4IDUwMCA1MDAgNzIyIDUwMCA1MDAgNDQ0XSANCmVuZG9i ag0KMTUwOSAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAyMjQ+Pg0Kc3Ry ZWFtDQp4nF2QwWrDMAyG734KHdtDcdJdQ2BrGeSwbizbAzi2khkW2SjOIW8/2QsdTGCD/P+f +C196a4d+QT6jYPtMcHoyTEuYWWLMODkSdUVOG/T3pXbziYqLXC/LQnnjsagmgb0u4hL4g0O jy4MeFT6lR2ypwkOn5de+n6N8RtnpASValtwOMqgFxNvZkbQBTt1TnSftpMwf46PLSKcS1// hrHB4RKNRTY0oWoqqRaaZ6lWIbl/+k4No/0ynN1PtbjPVf1Q3Pt75vL37qHsyix5yg5KkBzB E97XFEPMVD4/CUlvKw0KZW5kc3RyZWFtDQplbmRvYmoNCjE1MTAgMCBvYmoNCjw8L0ZpbHRl ci9GbGF0ZURlY29kZS9MZW5ndGggNjQxMjYvTGVuZ3RoMSAyMTE0MTI+Pg0Kc3RyZWFtDQp4 nOydC3xT5f3/v+ec3JOTnCRNkzZtkzTpLenNlJZSoE2vFEqh0KotdtJyqdyEIujU+YPiz2u9 semcsk3x8ptOnaSnmxbw0t3dnIM5N/AywImbOhXmptu8nf/3eU4A2exo/7/21f3geZfv57l9 n+f5npOTk/MkOQE4APCgaKCvrnX2rOhR66cgZPwdIPWVWXX1DcucF8wDvm0KAH/XrJb5rYel qBH4c14AeOSaWa1n1/zkmyuvBUHoBPBePqe1reHC8Eod9t+Po2bMbWttzF99nQagpA5A7Jrf WhRN7rr8fhzLgO1dLbVz265wX/Uh8K0fY7nsnLrm9tZH1zoAYuhjv23phd29z74wdxtwt8aw T3TpJRv9ve/9+RzgHn0EwJDd03vBhSv83R8B99WNANr3Luje0AtJgPG1vo3jSResuaxnh+eF nwP3GMa7vm7FsgsvnZa2LwqwsBy4asOK5d3L3ohO/RIAdyOZfwVWODVJZVj+EZZDKy7ceGnr VdatOPcKgOKXVi+/aO3Hh5WngK/B8Xh5zbql3a1iWRz4XA/ur10Xdl/am7zA+TT2fwP7+9d2 X7g8r/MfNwNffx2AtaZ33YaNSgh+iPH9grT3XrS8d/Xa6Z3AfR3Hd1YDeSy05Qu/fd4j6xbb ZrxvSCG7CeDe10obSPr8bZtDH13/yY0SGErR10j9CZjqA5/Ww7kSfHT9hwclON6SwGwnNWIn NINAK3iQoAjOwb14A85LEIRV/BOgBYN2m7YEB8hSU2E79PAOTsvzBkGv1fKC5hCElWG4lPQy ko5tzbV+wD+/U7v60wauRB/gdseAUxQFez+gnUu2FDS6aVyaOnHCHoIdmvUQh88B2xaipRwv A9RgOYrpIn4a8HhAzUG7Fi2KFiAHGFo92txjfTBfReb4vPEJ2p+CpD0HIpguQPNiPk/zGhTq pkErWkRIhzzih/lCbMvW3wR56JeO5Rb0m5IYI1uzAVZh+xzMF5Mx8RFzYGpFc4w0dyK+Tuwb EW6CeZjOx3Q+xluD9c1YbsDtDPMPKT/FfB3mI7qHYC6pp9u+AXLQ5mGfJoxzAfYjcVRhmxPn tWNahGbHdte/i4ExNjSgHJnsGD4LOUYmOwYGg8FgMBinL9ztyq7JjmG0aP7wfydWBoPBmEw4 UHYZ0CRg500Gg8FgMBgMBoPBYDAYDAaDwWAwGAzGxEO+BzvZMTAYDMbnI3bqOY77qo4WdJjo dXq9TgUrklSvrMZUnXNhpb8cqpLabOJCcFszkq4s/lFtYpS5cz1zPV9Nm1uU+mHpTXOR0lTd 3LP/8ts7P5qAkHWj8MmagHkZpwXcqV2OkTdxUZxx4FlmskNgMBgMBmNE2KsUYzwRQOAIWkHg eLwG8mjfNg/D3w0KGMCofApGMKGaqJrBjGoBi/IJiFStYEW1UZXApnwMdqoOkFCdYFc+giRw oLrAiZoMSahuqh5woaaABzUV9UPwQgpqGqSiplPNgDTlH+CDdFQ/1QBkoGaCDzUIfuXvEIIA ahZkomZDEDUH9W+QCyHUPMhGDUMOagRyUfMhT/kACiCMWggR1CKqxZCvvA9nQQFqFApRS6AI dQoUK3+FUjgLtQyiqFOplkMJ6jQoRa2AMuUvMJ3qDJiKOhPKUSupVkGF8h7EYDpqNdUamIFa CzOVP0MdVKLWQxVqA8RQZ0G1chQaqc6GWtQ5UIfaBPWoc6k2Q4NyBObBLNT5MFt5F1pQj8AC mIP5hdCE2kq1DZpRz4Z5qOfAfOUdOJdqO7SgdsAC1EXQinoe6tvQCW2oX4CzUc+nuhjOVf4E XdCO2g0dqEuoLoVFqMugU3kLlsMXUHuoXgDno66AxagrUd+EVdCNuhqWoK6BpagXor4Ba2EZ 6jroQe2FC5Q/wnrUN+AiWIH5DbASdSPVi2G18ge4BNZg/otwIeYvpXoZrEW9HHpRvwTrldfh Cqr/BRehboINqJthI2ofXKwchi1wCeqV8EXU/6Z6FVyKejVcrrwG18CXUK+leh1cgXo9/Jfy e+iHTag3wGbUG6EP9SbYorwKN1O9Ba5E3QpXoX4ZrlYOwVeo3grXKAfhNrgW81+F61Bvh+ux 5mvQj3oH3IB6J9VtcJNyAL4ON2P+G3AL5r9J9S7Yino3fBl1O3xF+R3cA7ei3gu3od4HX0W9 n+r/wNeUV+BbcAfqA3An6oNUvw3bUB+Crysvw8PwTdRHqH4H7lJegkfhbtQdVONwj/IiDMC9 mJfhPswPUv0u3I/6PfgW6mPwAOrjqPthCB5E3QnfRt1FdTc8rOyDJ+AR1CfhO6hPUX0aHkUd hjjq92FA+S38gOoPQUb9EQyi/hj1N/AT+B7qT+Ex1GfgcdSfUf05DCkvwLOwC/UXsBv1Oaq/ hCeUX8MeeBJ1LzyF+it4WnkenodhzP8avo/5F6j+Bn6AirOh7oMfo+5H/RW8CD9BfQl+ivoy PIP6CvxM2Qu/g5+jHoBnUQ9SPQS/QH0Vfqnsgd/DHtTXqB6Gvaivw69Q/wDPK7+EP8KvUd+A F1DfhN+gvoX6HPwJfov6NuxHfQdeRH2X6hF4SfkFHIWXUf8Mr6C+B79TnoW/wAHM/xUOYv59 qh/Aq6h/g9+j/h1eU34O/6D6IRxG/QheR/0Y/oD6CfxR+Rl8Cm+gKvAmKjuns3M6O6effuf0 b7BzOjunn/bn9PzT8Jx+hJ3T2TmdXaf/B57T903iOR3wjAtilznZCIKgUT9N1mgABI0gnPjk W6O+fWMwGA06ndGoAYPeZDDpMdEZDBa9IfH2jk6n1ek0Or1Go9eYyAfnWq1GrzXQMcad0Yyp mYB5GacF/Ohd9RMXxRkHZ06e7BAYDAaDwRgRduXIGEcsHrq+Uq8k/936yqjXk/WVUW82kvUV wWxg6yvG/zXY+mpS4C2eyQ6BwWAwGIwRYVeOjHFETDX9y/pKo1fBC8zE0WY0Hl9fGXB9ZcAE l1yi8cT6CsFuGo1BXV+R0kStr0Zz1cueJYwREEbvaji1C2OU8GLqZIfAYDAYDMaIsCtHxjhi y7DgskqrXklqtXh8aXGRpIIXmFrVy4yYjGaLDiwmm9liBLPBZDZZTabEKHqD3mDAbhqNUWMh XXW4ujKYDPqJWF+N5qqXPUsYIzCG9ZVx4qI44+BtGZMdAoPBYDAYI6Kd7AAYpxOSn66v1CvJ f7e+spiMFrq+kiy4vrIYTWazzXxsfWUg6yvtv66vDGx9xfgPYwzrK9OpXRijhJf8kx0Cg8Fg MBgjwtZXjHHEnimeWF+Rr/NpdFhSATAm1kdmi8ViNltFXF+ZJYtoJusrkjMnRjEY8Q+76bRG nZV0Neh1RoM4Meur0XyqMBHzMk4L2PpqUuDtmZMdAoPBYDAYI8KuHBnjiDPbBlqtVl0okfWV VqfVmlTwAjOxmhdFq1W02Kx6sFocVpsFrGZRFJ2imBjFZDKajDqTSasza22kK66sTEZcaU3E HSyjuepl70IwRmAMH21aJi6KMw7emT3ZITAYDAaDMSJsfcUYR1xhCddXevVKkvykhVaPiyQV AHPityRsiNUqSXqwW502yQo2i2izJdlsiVHMZpPZpDebyfrKTroaDFjCldZE3MFiPrULW18x RmIM6yvx1C6MUSK4wpMdAoPBYDAYI8J+M5gxjniKnaDT6dUrSXLLlc6g01tUACyJz5/skt0u 2RxOIzglt91pA7tos9vdkj0xikU0i2a9RdQbRL1TtIii2WgQzXZyp9b4M5pPFdizhDECY1h6 207twhglgqd4skNgMBgMBmNE2G8GM8YRb5kL9HqjeiVJbrnSG/UGqwqANbE+cjqSkhx2l8sE LkdKkssOSTZHkjPNmZQYxWqz2CxG0WYw2gzJNqvNZjEbbVYnrrMmIGTrKHzYs4QxAmNYX9lP 7cIYJYK3bLJDYDAYDAZjRNhvBjPGkfQKN1lfSbRAbrnSm/QGmwqALXGvU1KSy+V0JLtN4HGm udwOcEkOV5LX5UqMYpVESTTZJIPJZvBIVkmymE2SNclqnYg7WEbzqQJbXzFGYAxfsHZMXBRn HJr0iskOgcFgMBiMEWG/acUYR/yxFDAYzOqVJLnlymA2GCUVACnx+ZM72e12JXlSzJDq8rlT ksDtcLndfrc7MYrksDqsFslhNNuNXofkwILZIbkl20TcwSKNwoe9C8EYgTGsr5JO7cIYJRp/ bLJDYDAYDAZjRCbiG1eMM5ZATeq/rq/sKgD24+srjyc5KSVVhNRkvyc1CTyOZI/b7/EkRpEc NofNbE+sr+wOh000O+zJkjSa7/KNldF8a4utrxgjMIZb89j6avzQBGomOwQGg8FgMEaEra8Y 40jWnHQwGs3qF/3IT1oYLUaTUwXAmfh+nzfF601xp6eLkJ4S8qa7wevCmiyvNzGK0yW5JNHp MlmcpnSXw+WSrBaXI9XhmIj1lXMUPuxTXsYIjGF95T61C2OUaLPmTHYIDAaDwWCMCPs/WRjj SLgtAGazVb2SJD9pYbaaLS4VAFdifZSRnpGRlhIISBBIy80IpECGOy0jI5zhS4zicjvdTqvL bbF6LJnuJLfbKVmTkzKSXKNZC40V16ld2LOEMRJjuDUvdeKiOOPQhtsmOwQGg8FgMEZkIj4R YJyxFHaGwGKxqVeS5CctLDaL6FYBcCd+SyLgCwR83lDIASFfJBDyQiAVawozA4lRklOSUpKs bo/F5rGEPO6UlCSHzeMOJLsnYn01mk8V2P9cxBiBMXx1NG3iojjj0BV2TnYIDAaDwWCMCPs/ WRjjSHRZDoiiXb2SJLdciXbRmqICkJK41ymUGQoFMnJynJAbKA7lZEAoLRAKRUOhxCgpaclp yVJKmtXuFfPSUtLSXE57WkrIkzKaz5rGSsoofNi7EIwRGMNXR32ndmGMEl102WSHwGAwGAzG iLD/k4UxjpStCYPV6sigBYcDVyYOq82rAuBN/EJ1TignJxTIC7sgHCrJCQcgJwNrSnNyEqN4 0z3pHrs33eZIt0XSU9PTPS5Hujc71TsRd7B4T+3C3oVgjMQYbmANnNqFMUr0ZWsmOwQGg8Fg MEaE/Z8sjHGkYmMB2GxOPy2Qn7SwOW1SugpAeuL7feGccDgnVFDghoKc8nBBCMJ+rKkIhxOj pPtT/alJ6T7J6ZOKfWl+f6rb6UvPS0v3fO6k/zvSR+EjTcC8jNOCMdyaFzq1C2OU6Cs2TnYI DAaDwWCMyETc0cI4Y6m9ZgrY7e4sWkhOBrAn252ZKgCZyapXcUFxcUHelCmpMKWgqnhKHhRn YU1NUXFilMysjKwMd2aWMznoLMvKzMrKSE3OCpwVyMyYgJAzR+HDniWMERjDrXl5ExfFGYeh 9prJDoHBYDAYjBFJnuwAGKcTTbdXgNOZon4QRW65cqY4XdkqANmJe53KSsrKooUVFekwPdpY VlEIZeFoWemc0rLEKFl5gbxASnaeKyXXNSMvKy8vkJ6Sl1Wekz0R37DKHoXPRNz3xTgtGMNX RwsnLoozDmPT7ZMdAoPBYDAYIzKau/sZjFHS+q1qcLm86pVkWhquTNJc7rAKQDjxC2ozymfM mFoSq/ZD9dSWGdUlMKNw6owZrTNmJEYJF2YVZqWFC91pBe7awnBhYZY/rTA8My+cNQEhh0/t wv7nIsZISKN3LZmwIM48TK3fmuwQGAwGg8EYEfabwYxxpHOoEdxun3ol6fPhysTnTi1UAShM /IJaTWVNzcxpsxpD0Djz3JrGaVBTMrOmprOmNjFKYUleSZ6/sCTVV5LaXFJYUpIX8pUU1hUU 5k5AyKP5VIH9z0WMERjDDazlExfFGYelc2iyQ2AwGAwGY0TYbwYzxpFlz8yDlJSAeiUZCACk BFLSoioA0cT3+xprGxtrZzTPy4Hm2vMb582AxnKsWdbYmBglWp5fnp8ZLU8LlKctLI+Wl+fn BMqjs6PR/AkIOToKH/YuBGMEkkbvOnPiojjjEJc9M9khMBgMBoMxIuw3gxnji5CwNOBo+X4s YY57CDRwHZYzQMIaK2RCHpRBBcyGFuiAy2E7fIc7i5+qi/mdioJ+fsiFfJgG1dAEC6H75Hbl tX/6W4p/9xv2fxw/dFdi3n8Dp4PjThzPA/D/7ICboNHSrNkCYJPsDmeSK9ntScHtSvzgYCgr Oyc3LxzJh8Ki4rOiJVBaNrV8WsX0Y19yrKtvmNU4e07T3OZ581sWLGxtO/ucc9s7Fp3X+YX/ 5Q7+ZwSqA6Nx/c1n8v8xj0as5uy2WFXlzBnTK6aVTy2dUhI9q7iosCA/Es7LzcnOCgUzA35f RnqaNzXF4052JTkddslmFS1mk9Gg12k1As9Bfn2wocsfz+6Ka7KDjY0FpBzsxoruz1R0xf1Y 1XCyT9zfRd38J3vG0LPnnzxjqmfsuCcn+WfAjIJ8f33QH3+uLugf4hYtaMf8TXXBDn/8HZpv pvmtNC9iPhDADv56z4o6f5zr8tfHGy5Z0V/fVYfDDZhNtcHa5aaCfBgwmTFrxlzcHewd4NyV HM3w7vqKAR4MIgYVTw3W1cdTgnUkgriQVd+9LN6yoL2+zhsIdBTkx7napcElcQjWxG0R6gK1 dJq4rjaup9P4V5KtgRv8A/nD/TcOSbCkK2JZFlzW3dkeF7o7yBz2CM5bF3dffthzooiDO2rb r/1sq1for/es9JNif/+1/vj2Be2fbQ0Q7ejAMbAvn9XQ1d+AU9+IO7Gp1Y+z8Vd3tMe5q3FK P9kSslXq9i0P1pOarlX+uDFYE1zRv6oLH5rU/jgsvCwgp6bGdiqHILXe39/WHgzEq7zBju66 tIEk6F942WBKzJ9ycktB/oBkV3fsgNWWyFjEz2aWH2+jOepOck0Lj+9ZjkQUnI0HRNy/1I+R tAdxm8qJLC+H/qXl6IZ0cNgrvgwfkZVxY21Xv1RB6kn/uDZLCvr73wc8AoLvvH1yTXeiRpcl vQ8kS46T44cath/LxyOReDhMDhF9LT6mGGMlLZcW5F8yxN8d7JX8mODugxbct90dFUW4+wMB 8gDfMBSDJViI9y1oV8t+WOKVIVYU6YjzXaRl+FiL62zS0nes5Xj3riAeyd+lz29X3JB9/J9N SnbWr6iIc8n/pnm52t7UGmxasKjdX9/fldi3TW0nldT28uNtiVzcWdsuePlEjvcKtBUPys7j zqTQbolrsvCfjh7Uy4b0BjwqaQ3nb4hLXY2qdpgCgVF2GlKOkl40OdEtEWa8InJyefpJ5ZPC s/QLGLAmm29qW9TfbzqprQHPQP39DUF/Q39Xf/eQ0rck6JeC/TuFHCGnv7e+69gjOqTsusEb b7ixAzdiBVeBRysPNQNB7roFAzHuutZF7TslPHNf19Yu8xxf21XTMRDCtvadfjzp0lr+eC0p +UkJmjg80mXeQJu8O2MAfbRVQytoeekQB7TOcKyOg6VDvFon0TqEPNFr29o/+xDS50VHAb5a tfmHNJZBizVKUtnpjg5pzIO5fp+tWtI4oA+NBxtqFdpiNIEqBzGNQ760JDaEyUVqslZNVqlJ W0nsCXScAyXKsMYx6PZESfWgyRLtI6nBSMp2eVFJrNqoscM51M8OrWoqt5TQ5mYyih1mqbWD dfVqrxq1ujLhXFHiqw5h2Y8WQ+tF24F2FE2H0duhCG0rmoKmoSXitxntFrTtaIeILx3NUGKr 9mokbJHotkvgQyvSkNfnLo0Rtz1O1aYx4F4xwHy0uzV60GhMMqzx7cRBhMF6GqkwGCmkqZyb F6UNcmpa9El8pbwTcsCHFZyc7KUtINfUJDJl5WpmMFwQPVht0gAcQeM1oOHwxZ/2GswtjB59 Gsuc8CnYOI7UCh8PSkk4m/DJoM0ZjVVLwj+gBY2HuDAAw2g8rBPeh81oPLrvkAvOIhMJOwZN 1qiE/kfAj9aHJsB2VI6WY2jE/8igM5kM/0fZZqf9DsrFU9TMoOSJtlQnCa9gPD8Tnocg+ITf Y5qB6U8xTcf0J8IzINI47x+0SdE+nO8+dL9PuAyveHzC/wiXQxTTB4VN4KVuL8pWdZ4X5dxw tNokPCBcQV02COthCqZrhNVy1OffLdxPjkfh7UGjmcT3tiy5ok8KbwqrIQm9DqOX22d7UlgL RWhkS4YGjWJ0a7VFGMLNHMLd4sMYObibakx4XsaBcL5vC32QjG17hC3gwvQh4UrZ5RveLfyN un1ARsH57sUjhiSDojU6XG0U7iVHiPAe7vH36Gx/Hcwuj0J1tnAjFKPxuFNfw9xrmJOEdzH3 Lj5M7+JD8y4+NO9iFO/iQQvCO9jyDvoUCQegV3gZtqLdjXkNDnmZjHtwJ82EcqM7hf8SrsA9 Ie3Gfcdh7aZBo5VEdoXscFK3K8gTvOpJYR/MR+Mx+P3kGblut3Az3ZStgx4v6fCCbLTgrvuS +lhgx8vJY/Ck0CdcSffEFroH4k9hEY9/4b9pZ2XQYo9uxke/DYvrUG9B24t2BE2Dbm24DW2w GE1A95ZBqy1q2y0sop1ny9YS35NCI256I91bjbIrk8Y8K5HR2GRvRvQpkoECfBGLaqwanVzk W7BbaMLjZ74wT17mw9gXyDgu6ThvsLwiWrxbmEf3xTzZF1SrZWcKzTTIRvW4qh002UkkddQx IhustDqSeEoK4cEkd9SHx2kF3doSuhqZig/fVHxopuLzpIQ+GNFByYFH/zIhSrcoCl1o29Hi aBp8jKPoHsXHOAqHaI1NKMPNLQMFTcDHtgyOouGpRjgLqtBuQXsa7RCaltZ2ofFYX4wzdKFu ReNxxCIsS6gxtC60PrTtaMNoR9H0sEcowHkK0LsYtQ8tjnYQTYOPVT7GkY9tDsEPnxjIh7yb +TtjFdxm2Mxt5jcLmzWbtZulzXZDrDQrPxpbRaSQSC7K1C5jr7HPKBQbY8YWoyAZ/UZ+SBmW 9RUlmMQcuoqSl5rfav6wWXBM3arbquf3VFs4OxxEO4ImwB5OwpKEJSl2rbCn8mDlkUphT/PB 5iPNwp4DBw8cOSDsKThYcKRAiDV7K6JTF3PruM3cLZzGxxVxVdx8TrNYWCdsFm4RND6hSKjC Y0HTZe4195mFYnPM3GIWJLPfzG81bzfHzcPmvWZtXDes26s7pDuq07bounS9uj7dVt12nc6n L9JX6WM6zdHqWv5l3KnbUeNoPPShbqU5ibYMo+6l5a203IXaS8sx1BaaC6IWkxxaEMd6Cf36 ULeiET9SDqIWkzJaEM/uL2JdL+pWNJ5/MZaWWRyKhXgp5A/xEOKOhri9oUMhPh4aDvHD1RX8 fhrlfoxyP41yP/bcT+fej+NiDi2I0e6jfvvQbx/124d+JPd5dV2ovTQXQ22huSBqMcnx++Tg VFu1m/86jrgY9W60g2gCFKFWoa2jJR/x4L+OGuO3Debk4ws+v03OxnMkJplqkqEmaTQZTEmN Lq628dtwyG045DYchJR8aFWkpAzzd8p1xPdOeaaaVJQcrJ6Kr6IklDthBxoP81Hvprki1Cqa 20F9bMfLcdRDNNeLuv14v8U050M91lfgt+HfnZiz8Zdj7eUxM09/KRQcdoNjiN8lr3T4hvjv yrkSJoNqIpOk2skLuO9F7l2qj1K9m+ptVM+laouZg+I/guKPg+IDQbHaxM+BEFYfpfom1VUx a0h8IyT+JCTeFxLvDYm7udcgExsCsdRM8fVM8XeZ4uOZ4kOZ4q2ZYmemuCBTnJtJhsoFP4h8 OlHufKppMbdf/NgvvuoXn/WLz/jFe/xih1+s8KM79x6+norcN6h+jWrp41NE3xQxfYq4i8cz E3eebAPjbp7nzgNRMMnhSt+QYKQJH5CbszBJk5urMfHKzQsxSZWbL8LEKTff6qs28jZuAC9W fLyVGzCQ1CKHt2CzWU0Mcvh8TLRyeJpviPtUDgcx+UjuScfkQ7knA5MP5J4pmLxPkie4v0AP j8Nwf5Z77sLhubcglwzL/RGy+YcxHZKbq9D7cXV27rtQyWVhNS6rSBTcI3IYg+MelMO5mDwg h0OYfEtN7pPDPkzukXsKMblL7rkVk2/KPYcx2SbnriHj3Qm5dJw7IJumG+RmLzavl5vJCL1y cxEm6+TmUkxWy5XPYbJSrjxMul7ADXB4ZHM9EKaRdss9YWxenNiQL0Aube6EUjryLLmZ7JIG Mki1yNUnNqSOqyXXfFwNN0BHicnhYnSrlMPZmMxU99wMuSeCSbmci/uYmyrn3oV7riwxQR55 fJ7gQhgGGSgohx9GJ5/ck4dJhtxTj4mX9MSgnIlZHVBJg7LLYeIlyWG/7ynODD10RBNkc9se 832C435UOcSdI/s+jA0ZONn3t1xMHvO93bzE96fmIbzi9b2FT+GHH/MdRNcDlZiNmX2vhA/7 Xu7J9P08jB4xr+9n4ULfD7Mv8w3l7vYNNmf4BjCweM8S344eOsKj2dhN9j2YO8Rz2Ht7z1zf HeGI72vZQySGr6DztWQOHOjq8GW+K7O3+C7GQ2Fj8/W+DeF0X2/u+b5VuWQit29leKFvBW7I Bdhnec8Fvu7wrb6uUhrx+eHnfK2ldBuaeugWza6kDY09C30NGAE2VJEGjGA6HpdR7FpYupvs I7xSqR18znf21Cd4fBXm+tAuihXqn9Rv0i/Rt+lr8PUmR5+lD+gz9EkGh0EyWA0Wg8lgMOgM GgNvAAPwSUPKoViEvAWapJNIotMQ1dC8xBMl75biNQnPGXhcaMWdQhPf1FoTnxppGtIrC+Pl kaa4oeW89gGOu7mDa4oPL4WmJf74B63BIc6Eq2BtsIaLO5qgqa3Gg85x/jpcTra1D3EK6XG1 l7y1tBM4Lv/qm7wkbbj6po4OSL6kylPlqLRPa6j7HOlKaH1d5ASeSOSkUnr89qbW9vhD6R3x KMko6R1N8Tzy9tNOfg2/qr5uJ7+aJB3tO7kV/Jr6haSeW1HXgW7TqRtU8qvRDZpJgm58J1QS N6zv/IwbN4DVdQOVlarTfG6AOOGTZj51WqQ61X7WSbiBq6VOtcIN1OkudcIwxoETxkiCbto1 EKYThrVrqJuHuA1kZ+NIPdnEZSCajQ4D2VHavOBEc67a/B21+TukeYjjTrSXZqvR5kI2nSGb z0WfyCSyvOb/oxM3OPOSte3kbcOuYP1ytK74DZes8MT7lvj9A2svSbyfmN21ZOkKknYvj18S XF4XXxus8w/MbP+c5nbSPDNYNwDt9W3tA+2x5XXyzNjM+mB3XcfgvC3l60+a6/rjc5Vv+ZzB tpDByslc89Z/TvN60jyPzLWezLWezDUvNo/O1bSwhmtqaR8wQE1HbaeaDvJmEz5buryBjppk qbeSPnWmBzybvLs0wD0I5khH3BKsiYtopKmguqCaNOFTmjRZyVvDiSbPpukB7y7uwUSThNX2 YA1s9NSvrMN/G5CNGy9GcB9v2KDua4/asDFST9vRYSPmNlLQE/PENtDaRPtGuPgEkYjqCxsi te0Dzc31npV1XryIHyTX3ZGODRCJqBNGIoBz4lbTC/1keqFv1iWX/Kb59eb3m4VheoW/F+0Q vcIfxqv7vWiH8Ao/Qxiu3Ft5qFIYbt7bfAh9D+w9cOiAMFywt+BQgTA1EQGZqoPDCE/8XRzZ cDGpjnB0a+l2k0AwaMyQrT62GzbQho10xyBqPe0awYEix7tHTmQ2qI0X0y5q7YYTxzA2kOE3 Xhz5VxK1eArW3gw+7VxqacJt5P8ZVl5FO4z2xqdzlI+1qyH46SrlkODE03VItQRZcBVe6L0B t8PT8AV4Fq8b67lCaAcN54EUPLFPgybcfW7Q4strLl41NkELuPBc/zonwg44C97iGmALvjjP h2/gdeE8XKRXw5dhOzdLeRO2wK+5lfAw9n6Qi0EOzOUalYOwAFqUxzlyr9h0+Bps46z4YjWX M3FB5QCOsAGuhV3wW1BgEdyh3Y6jtMBCWKs8Dp3wK24Rd56SBrNhLWyCO+AeeBIOc9dxwxqt 0gWlsAQu4vSck8sVrlQehHLtfuP3lB8pe0FC/3tw1Lf5iKZBeRdi8IaGU1bg4eGEEvxbC/fC Y/AK5+FKhVqw4uVnJ+6LK2CHkIsxNsL1uG27uC9xOwSrcj9uzVRYCpvxkLqUG+YD2v3ao8rl 4MDtm4KR9sP98H34IfwJR2vg2oQLP61S5uFrpAEiUI8zXQXXwKO4536Afz/ibFyAm40jf587 wL0qrBX+gCM/AO/AB/B3LpdbyW3iq/grtdFPtijfg2zcwhiOMRvOhTXwCJfNxbjzsO83+C/y m3Cp/JjwiiZXc0QpV34IOsAlOVwJD+F2/RJ+Dfvw8Wrgmrnf8puE/8fXlwBIUVx/16vunu65 e2bnnuk5eq7dnd3ZZe9hl91hDwRkOVTkkJFDQBAjLCIISoIXK6iBeHGokURFDElAuQYvCBI1 iqLRRP9KFBOCMclG/19WNMrOfq96FiV+yWcz1VXd1TVV773fe79XM7PuEdYO3oDzrSILcBW3 ksfIQfI5CKAHEzggDLXQiCu7AQ7DR1ShUTqVm8PtEu4cXDl4F4mgreTIPHzyKnILuY0cIMfJ H8nfSB/48MkqfLINJsJdmCIfpce5KdwM7n4+y9/P7+SP8GcFm3Ck8GbhJEqdjVNNuvHIkflk Fco6j8cL5D3gwA9BHGkEjMWRZsJ8uBE2wn3wCGyH/fASvAGfwKfwL+qhd9J76TP01/Q4fYNT uHKuk3uYO8ZH+Pf4r8XZA0rhUOHTQeNgarB2cOPgg4PvD/ZpWgigxbeRDrSuRWQNrn4juY88 hDLfS14jv0O7+1A7TpHPUAdfgw6tyYszUiEKSajA1U2BqbAC1sM98Ci8CB/BKThLCTVRFY9y 2kDH0hn0Zvp3epYzcFFuJHc9t4n7LfcVv1KowWOnsE/4THdKjEvHzj4w8EGBFBYW7i88MFiP tqhDyytBzNWRdrS5sajluaQHj6VkOVmBMlqFEn8QLWcXeYo8Q14mx1D2x8n75IQ2X3Z8gpro JwOkABT1KYCER3Hu1aiZDrSWWTAPdVs8boCbYR1sxuMB+DH8BOX7JvwW3oIP4U/wOa6J0Eo6 kl6AK5pIL6M5PGbSK+hN9A66F4/X6e/p+/SP9CtO5mxciEtyXdyV3O3cem43t5d7m/sdn+BH 8qP5RfxL/Ju48tHCGGGmcIVwh/AT4RHhiPCKcEoY1N2j+6kur/uLaBAbxIlIS9eJT4jPiCfE QSmJ9tSNsz///wRwD1zGV9GNMEjzuO7n6TLuVXov7Dz/E2RhPc5gLibTee45+tCNG7k/cj+n NxPCd2q3R6AXO0aeJceEt3in8BfyEvWRf6A/vJebTZ/HVNsDDVwzfxt/DL3OSpznI/RDKtJd 2ONvqI2ZZDJ4yf/hLyWfovyPC+tRpqPoB7CTvoipc468Sx6lzxBM6sk8aMTZzSX7yFfkR3CQ C8N+tLsfkDfI38nJ8z54rxpop206D12uG44aOgiTBl+iZYN/Q9R/BLeR97mv0PYvhfFQRbaT P6HWfwd1EOILvJ+8iZ4vSB5Aq/2Y7EEMvsLHEEGfk4NcHZnOn0SdVw38ptApLONugTN0JKrT rXnuCcwbow/ejL6K+VEL2YWWgF5EQ/TfyGugohTf0r1HtpIN5GnOSeLcY3QNHeRe5sPkbnKS G4fvuhr9UwDqcKTvkYW4jvDg6cKjOMJVpIk0wRyYTjrxzmgSHPweznw7+qLs4IzBLcI0IUVe h3HgJIfQe3lQivcL+kIf9tyLOHyfjIY7yJ7CXHIY44oH4lCD1tQnLBc2Cj8T9grPC6/phpHr EbUPoBb/SPoxaoThCpTFX8kXaOvtiJ4KxM9InMVojGFX02ncc6QDfGQJ+sBS9NvtKIPpqMlr cZSbyZ2Ip8cwhrxOPgMZM97nybuIHDfi/Ap8f0n7hsNk1Pq1ZDt6x1tgD16ZS4KkHOX0FVig iS7D92N+9n70s4dxTifIafQcg9q8KqAZ0+RLcawvGJbxHRrIRMwHyOB+ksFI2ckdI38mMYyu 7YjRR/G5WWgbFqKQjPAnoKSiMH6wiS7kngMXRkMLWtUlGNlHQA/OworrGCBOmEDqCxfgaDvR l00UHsPom8LI4KROfoowGef9Hkay18nSwamwVWQIoBBA7QYE9lURkbTvpfCCTsxzUraECPwL HDGI/AtAvJJOeIFyz8JIokclXEo8KflMy0DLeLm/pXughbRhXT6LxbDqiC1ii2MBAZ6cDXOH z2YF8jUJ84fZN2l2Df4ZGPeQ0et+/zm6G5fmo/eQIL17j6IHkue8WZ9tjNu4MbgtSINut8/k GOMjWW+ojhwB0LZwsQ4mqy/ko74KqylkoqY8lGT1h3Sg8yrvHvekcE657r7cqZw9k6rqS8l9 4+WueZ2nc6Ste+B027BqGNU5qnNMJ0QTyWSivq6htsbldIiijmNnXVRl1+DqCjFZVzVj7OiZ NfUBtWPmzI6OmZfDwaU/fe/o5O7LZ44Z98Z7ywpvzuzU7szSNvHe5J7GlZnQ4mZm/VSyO+qo 5FfqCBh4s8VtIyDqLC4LteRhVdbrcIhg613sfthN3T6/oTfMA+/1fTv98fKZXPcAylXu67Fl MmCzZzLshdNH0hnlvp34vzdywxY4powYNd4Da2rmeaa1XnChj74JN12YaZ1yWX3l5YWbYM3U 6uFTLx8WXcDy9IsK8+ndOGs7mZgt7bUcsNJGfjO9V7+DPqYX4AjhTEfMJWaTCftWO6wi25Pm xDy9L6vPyiBfWrL4fmYIub4cWoOMB2nra+sbVk1ykAOnTsTDJtvdLrczQWwyoXcvGNaZqJ5y YV3ufwtPwnhhUbpz5PS7dhVeLLxbyM8bVV8zCf6JCMkCi8xenNs0bW4XZdUGvle43Zq38vfT Lfrt9Ak9j7Mrwdmh1cpieGhWtglsVg4CYDKZq0suWoez69cmpk3yvNmV1Dc04mGTaTKRrHex 2XkXDOtIFicHEwpPFuanu0ZOv3M3DEfedYE2uYK58GzhVwVGmUl7YQs8B7WM+2Vt/6IgajM6 Zh9jMvAXOvMwKmuE2pAVrCM9v7iLTSPXP9CHE+jvA5umRjaFhvq6ZCKqikNWp+lQN3/ZQhHN 0aSkmqfMveDSVb8obKmoefhim14SbTNa2+fetmzDB2wGNbCYrqStiFtf1kTfJ8QngJdnbzZe PiWfJlXduFaI1EfoyoGD9AJYfJw9NX3wY3gc/bSRqHvJGJ2RY+gxhvXVeqr3mhavY0+fRQMk TFJwPiTIqNlzurpmz4Y67dTVNUfb7xn8iLahljjSkFVQ8G2Uc1DMGTgAauR2sUntohX8s11M Bsys2dAtbS29Qjq1Wj6K74GBibYVOtbAIWHRV8uF9cxPjB08xe0TFjDvBWOzXr1fF9LF9WVu 0eN3hp1xT5lelGCFpOTB8JRdSOJpj85sd+c5QzZOsrFEHcmm0ljUNmDRPKIui95xG5NUpd2q hpCZsZ6WDWYwZ0ucdWZvxef/yxZ+JrUUPUfH1KxbzcaSdSobRGWDqGyQxSr0sPRqGnbUKt19 bDPKjTkpdnaz3BT7a2d8hJ334VOz3ENPDVlfx8rsHCgPR0IRqrNaZAvVxaLxKNUZTQaT3iSZ eJ3T5XBRndfj8/g9nI4iAeaB05WnylJUF7Spc0hCxCJQ4p4DpQIWEYsyB6Km5BzicWEtBVjT djtYMfT3F8tvIj3QAw7RQlGdaPOo0sYGZnFulyCzNjNDRKvb5aqtQWhw+zLqtXdfOufHIyoi qdbaN5Ytf626o3CMNyS8TSlv3OewNqVrvOU6uv3V3VevnzQ319mz5ZE/HNzyyE9uf+YEzG2+ Y1jYE31y4NPCyTkXVIebrmO20otB5grUqpvc8iyxwC+gnkjw2H51prhYpDDSrF0R4V+YVLrg MWKFLzCg1RMXpVmLVSKCJJrwYggjcp5DB2SxTLQutu6ycjLCzOuxPE8JkeiLxEPd8KEWoU4x Z5pr6ZYHcixGtdkzn/edhc9TkEuh4dkcuNZaZ6S+tgaRaKtLMBkk4/QB16ju0EBDbMpYn31Y uHaMHf4pLPh65+quini8dNQaeujyqkg4dkrDIK7oQVxRgPwlG7ud/pL+nOOSpvs4ajAajEAE v32ba6+LugIU52QwSoE8zNpvr3LvRrefB/UpsEvMXIzmOinPxfZaBDAhIPuzfiLIAhVO2N+y BuBQAAK+oBXgEAB4lacx39hINJTnetCv9XT3D+ROkba2PrYJki2Rsi5zm5R1W7DwWrEwZzT7 QyF0zBiyV+yh2Sl20s5+WTs/FbC1aX1P2bRww8JOzpaxZ7Ap/4Y5LZKLROqJvb5Ok5VmQCzu 6CCCMmys5Sae/SMsfujmy7dOjjec2Hjlz2aNnVf4OcSvHlmuxlywD9IbF96x1Xw4P+vxMbet O1jYZ091MTlGBv/ErUc5psjxbEi0uq0LUitTtzlvcz1Qcp/rCft219MlxspAW4A6JMgDhh/2 txdR3RHjSD3MwiQuQo+RBH2d+IiEyzHb6jS52p14pq/vz1oEn5k48rRkbxhAMDwN9xEj+PYH i2JGZ3DA9hYpk8toGXMMNqsb3L5KaxCCzD0EvRXnyTyFMu9BL9GPQa9/wJap8vr6Woinrc3X l0rJA6fkU/ZMVa7PnimKC+pb6fnSQn8qMpGRiDrEPjTEYSRIQNXSqdmV0++cEx/90fq7Dky+ 7LobCq8VCj+fkGlPRRT5hcljrzpMd0QjmetaLl5xr/nxHT+/9sI76jOPf//twjuZ0rb0SIv0 8HXT132MgqlFu/wFytNAzGRL1tNmxhweOMJTUW8QJLOJ8JLZbDTmYUZWJuBAFRiRn0hGM/Dk GThLBGKgctYkgSCZzESSJSo9w+lxYBFmZT1VfBtPrXyIp7zPSpiIiNdS9KCnGB3Idfe3aIhr w+h7pmWIv9gzvekUjz7farUWZVMCtbZaZxQJY6QxYqult6668cZCX8E5G7PpQW7h2U3HC29A 9XHqRgvpwoiwRxhHVJiYTVt0oDd4DaWklOMdBqffGeCadGN0BwTOKADSqQCvyFgqPPh4jiuu UsVVquj9gaiyFgD0e+0EWVcePt1vD3OHOIod1T1AeF8etmYN1pJQCS05YTLTPH15D7wpkWeo jqhEgc+zvqw0UdomcZIvJr+5QQWVyUD1Rosy6McocgqNpA/DcD8Csy/Xh/yYgS/r4LIIMS6L eOMYQjmGVQ1xhR4NnDxaLfbgh0DJD4FUO2NXdn7KYdIeSU3ry7GHskGVDaqyQVU2qMoGVbPY Tc3ajcW+qWlDAZfY7G6mDjfaJ+nJwdJcD0S4iMizb0/r+Og5q8S44C7aZSyiipjY3DBv4K+1 MO3pLT8sFLZun9Y6MpWcOHtERSh50bWFbYV+f4MwrlDoNT98ywurP72ptaIp1R7uLJdN11+y +wT7VGgc6u+I5vuTiHG9g4P5ruUuasgPfpl1Ilcu52LOl5xcmySoHk9I0Cecz9FXkE/chzmK HrbuSyRkIoQw0O+VzeoJ5Pwf7SG+Mk+e/mZfMRlgwDU6mCIc3tJzikCcapzjDOMz6P6r+uS+ U5otMovUgnHaHzeUxBIBv+KnOnvckogb1DkQtPnmkLAVa1FjYg74S0JzSMSMBTkXWFPlqZtu IjmMJUh1LVRENlmEN+NLCHl7DHROh70oRJnFV+7Ivvd/EK1QRrZvfvWaV65d/faK9+Gewm+k +nSkMj26IzWmVFgQSP/o+Jag3vGHQ2tPrloH0gOnYN0nA9esz64vFOriix4Fx8JOlGYbSvOA xo9KyeGs38D5uHKO26zfoc/rXzbxnZLgjgqSO5SEZzQJSrB1TzJJmPyyJqtAzO43iVf2Ui+T mr3EVx49YXwTmPDAW/aN8Ip8bSi4FIX377Kr8SX09kjcnLDF/b6AT/FxungibInOIUHZOwcS eqypptAc8NmxiBmS58mvHF9MgJBzo4ts1A3RTCZEu9NBedDIcZGXOGUmxrbtH/f6W6dUb31t 8euLV7z9/dcKV0GZodxT5S2tCSTbU2OSgUDi3vd+GPZ+8Ku1H95we6Hw2O8L1/fR25dM3v/Q lDJXqnl74W8oPi0P/RjOckeQBbtJzUHixcTSay+p040hommM3WjlxugrDjnB6fV8k5L1D5zL bpBhnceLS87nyJdqxHj27M4hrswdmV3kyrMHln7Lmin7w8HCbtRfBLP96uw9qmy0t82Xl8sr or3y2ujPzAdk8X7zHjOFWJQSNRqNGCxGxeCOeBS3UQ96Kil6l82puFCmRHVdG7XK4SiJyBEa idJIpU122GxylEYjtNRidVgsVrrcAhbDKhtEbLKVd0UjNgtK2B21qrFSdP4Ap+SsbOUwFBkM esnqAtfTcDOJQjobDRu81YkliTWJbYk3EicTuricCCeyiYl4ZWNid0Lc8D0UUI+c6/f6ugcw x/K0aQlXW4uPsa4B9P7feBzMyHOZXks6JaEjwrOHVXJHU4xsZDIeIveBfLhY5s5viHJLi9jS MpRXpiCCFuFgWWUEU6hGDG2uYoMRV81okhzHXVKIZAJp/1WFEWMu74I/l8AnoyrV1oEl/glh l44GrnrlDbj51vZUxi9L8bjxigf44V/v+HFZSIjHXXLQXqJv/ye8VajEnCGFurJg5PGTGBkG k7M/2uwG+zz/crq8+nHPzoqng09XHBNPVP6rylAKTTAaxvgn02n+eXQtvbV6B7xU8XbF6eBf 1DPBL9Uvq22jpUQ8EIslLWFFr6rWsOJQo9XxIBcj6XD1sHISD8YC6PAcgXQ8rnfE0k6EQnla kvQSCcthGv7A+5Cd99XGhlmToSRNVlot3praPPB7IiOmelKp8Ww7JneKwbZj6n6SltM03f1J zv9kurtvWj/LgFvkPvayMTh7WakheojroY5wEFG2tDBpM4CnKiNRl0cQ3XE14Y7rEhXxqCtc BSorUmK6CiKeGCuieC1aKZRXIcDllnMuUoN4EeQsUNlXVX9SSRMVqeqMOq1ibcXvRR27NQ0L l1ujkUguv+Hi9RGNW+oEdgUviDab6HDVDrW4Db8av+SGTYWTAxMu7/D7O3N0/SdHlvxw4KMf 9o6+4Na7obFhYu/oqVvp8crsZT/aMndlPNp0Dbfkmowav/ix3Jwt9uyy6dOvbYGBBwvdNQ2N F/RePHNTC2OikwY/EqZgPhsD5SBxDa7ZozfUBfLFs27obMZzdhpWTD69v6Gk27fWdYdvg39d QFpkW2RfaVtpX2d7XLfD/Jj7JferfoPORRIdrpGBNa7b3Gv9twYO8M8EDVWJBaEVuuXm5f61 JU9bxUaLzR5TyHSqABJcB6bS0yNP2OwW4SqFs1zl1MPMKhvYfEsSkLDHrzkINRoZxUxVbzWE DNTQ7fX2M0XvKdb6MEfNncl1n9JcFoLr7/0IpL7+PsJo/IUXr3yyRkL1xlwBndmEipX0op7q /AmzyxAnugAWRo8lTvQ+IQ5FZZYzVUKuhyBf0JJLW5TlSzoGRTvTSqOTufCYFvkYqWWXhCnJ is82/+DtYW0zjj645nfLl37x2P8Udh14FaYd2fDwDG+4ShQWFcrzR+9evung/sLvtixZd92K Rb+EUfkjMONwa6yqlvlKP+KvR8NfCozZGb41KPgoK2RWpFhxZckCz5XxrWX5UuFK20JsbLJt dj1aorvCIoYVoqpSWLGo0UDaaqFqvd9PJHtlwKqEFKq0StUiTBRBXF0xYl/R0/cwCGHOiMKV SUJO0EQ3cciOagfnaECRopD3J7qrHaC1+qYNQQrJf1GwlzPBjo2mZJ+9xFZCdaXJsmR5ktN9 26I6l9Pt9Di9Tl4Xi6fkRBzKWRH1YZEsCbAihddScacaPw9OxTxeQxNr1rK8tXEILAwtbhY4 kYnoohymtm4tj7dpub2/srnNqnd1ZCrpzH/eu++ZGXcfWj/ilulyib/28anXXzRy/uh4POxc yN24oC4Zb59UyB/f8L8PzfSZ+MGvP7gkYbAu3QqdIDy4qiKECCkjhP8K9TEMxmf7XLxXT8O1 1bVLajfW7nC/43jHfdr9hVu/0rDMeWN6HXe3Q1hn2MxtNtzj3MHtMOjCji5ntnZi7UpOMHAG A61lNPVe/kH9o/wv9dsdggmIOMlkelVSxHBY8ahqatKwYR9VKCndJIBXBUUXCStlahR0xCSa iVN2Uqcr5XC6OLfodu2xpz3DSssgbTJ5yqhH0olWcYJI27DYIO4Sj4sfijor22sQa2p3pQ6l aFWqLTUhNTO1OPWD1IbUwykpdYvsWuLa6OJcvmwt1BKrOWSm5tZI2FszZB6acQyBK9fD8uOe pVUs1SnyI7mvr2Uo3mHmrDnWFALv70QeGDqda3KyMBTSUj05/I/0gI0ptNYWTdNocW+CNbli XNMUrfEhVDXDHtZo2n/TMjmRMHXPn11SN3zS83+uiY/4+urK5pjPYhQM/kR7Jb84oSyc1bSV Lwy8+9MfDwxfdm9t4eYlNeHdewuT4k6L6pnP3TjDGUWjKyy+Z02Q/YomjfrdjvqtgEi2W+T1 hgpONY41CjpBZ0AwcAk+YUgYE6YJ3CjDBON8w3LDWoNlVdnG9D5+n+FF/kXDaf604YxwxmCw aOFNCStOVU1MqqjI09LsVUklYZVAYkrWKxImlOIkSl/VKWIwrMTUqCSKCWqaYKYTIHEoDnHf 7jSkCZitlpCFWloVKwmhT2gNBhVvpcNZURqjpVBqMptjDouSYRfipDQeo06pMv0sUCRYI0BE X5lCDbUw/bT0t7Co19KnNUDTqIypPGq1pahXbJ+WT2udhnT1ee47Z4Z15guLKtN0xjB43oZS 4/nIPKeu2uT0pRNM0WjJE4uSbgTjQHNRVQyY/PVllmu/1/JTVNRbDWu+NzDlVzcUZjM4ntMS qxduWHer34o6unjwpC4mXE1q4eqsyyALMS5uKbs+dHvo1tit8bvKbi83RIdilek7saucxa4O rCwQFxhXGFfEDnLP83ndgdiBxIFyQ2d0VFm2vLdsbbmwJbGp/HHdI+IO46/jr5aJYy0elmAu 8UDwZcUzQ2XbRVkHXvmBG2wvK241Wnte+FLJ9OonUsEQyCGz2+NRhfoUZ65X9cQm26itFYK+ eva83iTX1dtLvXX1z8LFqKtr4CTRWAxjL1Z9SE/1GnvRawEtdaale2gTnynHnskAvoh8Lrax bb3i1h5hjriLOeKacLnOakTxx5MxdMJi3BTVx4klIrdDOGSVdeXYMiTNcWINm9uJVKbFO3S3 jMJ+k+NBj+ZwmbqjiRgGPXou5p3TMMY+DIQ2lj8zVdfLJDK0r9Mo3BbvKPQ/vPmVS2a8dtew KxtcXcOi9J4Lm2X9zYWPN/1q8IXGUYAhb96kil/bA9UODIjq0WM7C6//5IXCe+udDvBNrErE 40IoVjK2cHp488Kdi9bvhBrYLksXlmUYY0F+qnMgXjugLWvvUDEPQKaoSKrqYdm/h8nZ0hho Ix7Zs83DMa+ap/9zQK0JK+WqOpzdLsF+w7PYxzo8NHzXcK49rAzHPvtVkY0gfjOCKIvbRA7C ishGiNrCTO1l50Yo00YoC5XtKuOi6KWxT/byaG1YyahRNVLaQRh029jHjOVlZR6Pmw7PZCRJ lKKkXW6n7a011lrAfzPR764mXbO6aLZrYte2rt1dfFe4uOvbaiMy4L+JMsirO0csH4rXS4cC dq7nzLkGOZeEsNKeQQ890KLZRmqoPK+qOWKZ+WL4bwB2siSUKTjy/1z57hO0+rvIpr9mdasR PnR1Ziro0YqWKLZYfaClWKd3FmZ8F+rFemENrPm2dfbWb+vwKCnGYvoP9j0vsj5bGWEKMIQV qqq+sGJXVX9YQVZuDCs2NWq3UQqSz+oP+am/1WhgWvOMiradNEC1IWtYYjhs4GdiQQ3ecITd 9PuVupMRWBI5HKHVkWxkZmRNZDc2dJrcUdApTfapc/JuY3hhfhFpy38XIBMX/cd/Eg+KLf4f JKCtuRiVdBNxpc0w+yAZMXh4j1paN4LN80HZVieBwWysMjaPgTHma8zLSS/ZClvN20bk4TlT 3nygefeIs8S+DSNB2p1uhlbzxVWXNF8FV6YlYmlutlqtzel0VaUVQ5FZ0uKQS1Urw0pihtrY 3KQ06gB5B0LKOSMaCitxNWptgIaqeqXhpSqoSv+6GdKl1mYHjsJ+zsy2pSstZky6zaTZzLbt UMjNbKJNrFKFHNQMRBohf1N1NTYk4tTlFHWSzpcdASMqrXJIpnJraFsQgt6WEc/SS7Q45i36 xp5zFOQ0Sr2lhb3OJdiplNTbnU7lLJhf872YX2u13FBmjcZ+XlI91MjJUovUoqV8Ghlhrg5Y OlarZdeYToOoae0/KHVIp0M7NUUvyE2GP8wbU9880NqRnFH4TY2n88KBS87T9iNdqGwTfLEw 5ZpCbRdMupvrGtj5/cpwPK4LusqXQW954YdX1X3HEhyWiPfKwnTYNLk24TJy6A7LlqNNJDAz MKNNxMmGbMMcWAE3RJck+Y3RjbHtMe5bIIxTixBAz835ozFC4nJ8SXxNfFtciOfhYFYOR0op 4gMkKsV/Sx6CPN2VdX0LFW+iOplNbktyLMUenxvigP39A8gp0MMMtPTnWtgWN5N/amiTgvv/ QcCtUTsMDebar8edJ5u3mjUkeKLeWT1Xb1xYBScKsf+AiG0LMhb9uEe3FfEvLkAJNMCE7NIg 20UyBkEfvCFIq5u6GiY2PU5eJkI80AAryIrACmUt6Q30KluUHcpfla8U05Kmk000ZA+VhBxy TI4LVru1xOogMRLXN+jOdyTp4UpCHZJiaDiDQFVYqVeRY9ye7SBKIIyWXxrwOwIBP2loIKRS CToUJUigQQlwIfCRhnoKNBFXAnabREhjk1/2ga/VcNz4oZEafU0aFwgE67QJNTGGone66pqC odKqNLtnY/fSJ9P0cPqNNE17G5vycMmeCHqiPFTcxkCR0xwRoiK1NMUoHCpI293waBgpomRo h0PqTacEhIXEAMIq534LwDhdbilLcUkPYuC/+3iIYqRwD2HC1XC+lrk3YAktrWiJeb918aw+ 8KVn4DPBPCVXqLZUji81UryZouXwOvd91GrEM+/szedFgL6vU/yxs11z3TVt8TiE6qqMl3HT r6xNxpnPVwY/EjahziPQ85Tdjr76y6fMGXbKrjBl5EDAKgcUxWoeziiAn4VolQ5XRJWFa9e4 oV1C5OQROeAGq6K0Fj//UfwqsVktAIo7glFZJNTtkqx6YDuIZphpBvPqiVGIyrbSAPHDRD8Q /2KEx2p1KAz35FjkZVH4TLHGCPe5+Dv0+Q8WbPevl199lOBFzzmvlEr1yi2rj/bKR4FpgX2o TgZ3Z1Ml9cQqWxvJ0vCSyJrwmsiPyEbrxvDGyF6yN2Lmw3yknE8a1ZJyn07OD172VEk9nrYj F2G/U5IdIMsbYVtgt7w7IBHm1dC1sS/H75Mlh79NZj9l0ds9bUSylLSR/OBnQy2ro82aH/x4 D/bB83tPWdxtxc0s7VvgwJIwEdFsoU4bM4OiZbA9qyQyv3oo0Iei1T1w+NLmiHp20aKucCG0 ZKqSam8Vxp09QC9YlRpO43FjdMKsrzfxC8/+9LqLUMHTr+aeizWoNM5+QIva/UxYRMwkCDuz tQvkBSWbDe/Y3/G+63s38I7ysV0vesSgm3pMbp87kJSTJUlHqc8QZNsgblY4h4i+9bzNKnaW GKzmskyA9QJW2DfB/XSLbot0v2mTeTvdbnpJeEn/ovIOvGM2U16UdHqdwQ1u6ja5zS5FP987 P3C9sMK03Ltc2WTd79mvvOP/TDJearHUE85VL+rtRm/omqmaOSCBz3qJX0YT6c5ywPmqwm1h GrbaQ3ZqR07PMq0exu2z1n/rYGdffWK3+s59X4JR+UmMyrdAUI4rCUdCHxcSXp/HR3VWsz2O cvLHwSlhza3Dms1kiYM5QLGEEoMrTnw8FqlUCx7ffPCQSt0EiHK2K7lX0tkzQn6wP2u0Z6jH njHhi+YH//KULYPJ09/xJLCWOaPH1pPmDDm3tTntm01ONC2IYW4j0kg4mbDJRFBF7bsUzGPY 62XMmt3QCfdterlwT+Hul38MD0DT07MnrJq85cquqXPmPiDMNBWuKfy2UDhaOPvlUTBDGu4Z 938J+RL4Nqqr37kz0mjXjNaZ0TIjzUijZSSNZMmLbMcaZ3VCEpuyJtRN2EJIgNgGEkhKnULC klICbUngpe8R+Mpa2rgYghPaJi2FQh/v4bYfNG2/lrw27Qe0Afoa6AJW3r135JBAf+8rP88d jSU1vvecc//nf/7nfv/rzf9oPvzIdW0GEH4Hn7muQWxYDWbnD0Pvj8Aw/eoBIgG9311PIO// rKs+qILd/AfcB4l/yJa8PUYAN8TqsgwROy0rHhTKlWjJT5RiMTrgJyHgYJMg+dvV4a3hB8JU eIeuAjVqQu2ih3CzbnLIvdpNum9Kq2fk0ijczmJuxIENY/hnEiCzgBrTx6KkBCM8J3AkrQST OpAi8CKHUjpIcCKiitGKtCgt9GIWaJzGASdwxZymfK0iuULmogs+e4r0HQSp5jfuvvg/k77N 27bdQq5p3o4o3o/J3umvb/uuzJP3zewn77lv951oBhFq+CWcQYUoghuMxnmRsch9Icqu8MpZ kUWxRfLFsUtlm5+wEjRrZWlLWb8iuim6Sb5deSX6P5Vp3X5/+N8j/+A/FD6MWHW7e4p87Wk8 x/gGTTO8MepoquFmiB2gqMhBRZHHlS8ppELkY8noVvmYfEKmWHlInpapaRnIXD4mK2q6FJ0C vzM4BYLdVLEUgIuU+FkyKcsQWNkhLAdWmDITeTZP5n/LTVGkEXan0nBTaK2Z2z2E4nRpzgGM FVm4ESJeA+vfZhDHMZsX4RrATC/mQWZ6W+T/6NhwHRVr6sMoSGPkyONdES5kIlMIRkJpQc2m C8G8DjIReNHCRR3keFUnItGPOX9zNU2pSRaapctd1+zueowPhPqAGUSRLOJfLHVLSmJrlXMA 5WuR/QqZgGs9s6S15hs/OHb3VQs+DxYa0VxH87zmWSvqX9oxeM+D5LrmtjNXf/6zW3Zd0ic1 21eEJSpNriPvn/l2dfv6PV9D++i6k0ctSRhp66Bo1PnyBblNSYr2Agdj0+gyz3BakdHYnE+X E1qq0JHv0K7I3ZG7I/94bSp/sBaon2I7FhshYiXTIXWQHY9XIOpZmYhLCQlIU9C6FooriQgb ISOPh3IaY1cZF8PEXDHGspHZmNvDPOx6xvUjhtZyjMuiWNsrlNIecgyC2UMFrOACk4CeAqzh 9Ud6DJen1sPYJQhU4aOnpUpJ6J4C9e+0Yu6x48OIJcHiV5P45+rDo1g7imgSJFlpFQHQPb79 Do2O4TESlItiyHRO1da5rmQ2u25kbs1t1+5lnnQ95/qJ6yeMhxgeXYGg7SjEtgGT+cclOPxf KGjBojJUDlB81Vk9i5opkacpXDqpH7py8d9vW7MpFDf0J9455zPNv71ijJ1fliLd/nS68OE9 I9ura7cdeOiCd56Z26ffFo2IHuv6Zu8Tr169qKjopeS5169de+sT70dSwWyOJI78fvPZ5ZVn 91+09X+seugY6+5PzEGrugR6txt6d4J48gAhw/SLj9RkhCF7WH8tIRvQ5Q7LljK8IcFvbLaP 4BryiTgry45EnIHo9jeRyEdiXLJFskSCZBk7MQLQIucN2W4SUn0Cy4MEP8TfzVN8gpVAQhqS xqW7JYt0EOQJnvz2ZBJtguwHqJTAwh+ULLRS5JneWRZ4lgaGoBOnXC2O8NMcIgahis/qTiWW z1dXXc7N6y7OdJs58yV39F3AqdalzXvGNyT9H779MYS0hLvP3gU2oBkpnzxq/QackRKgjAd5 RpBJ3pmR88oW5cveu5R9yv9STioO3LlLsQDmndQIhLDj4XHugPel7JHsm1mvVQl5WTmRVJVK cqVs+2HyfYV8xLvfS1btNkQxyBKm6vOJUpyQUyYtxHMcgN/pXpdyQMyYGJfAKumkREo3lctG eag8Ut5btpbtSFJM2vpyuaE8yN+kz1I6pmIP7y6jJpY8bgYubTYgycmsg3GqatqbdqXtOpHJ ehQW7i1JR8atE4wML2iKezXzMygojY4B+BNAsJ5ugfpW8MmoZn5mgn1UxoJYDkclW5n8rjLY I3R+YfU1e5ap8eJnwGux+lKfp3Hi5xOrb7kqYpxvXZpOdl83s3b/xuWXfvsImbtoOcOl06VS 4pyZmXf//SndeOlx8r7r6zLAPdIQ3T2FsXv8AKFAq+yOpGrTCqhadodIVgFdHKhzV3KPc1Oc JcxxIV4QUKNdnBBgYA954x633RV3JwUI342pk3caHZyNTtgRMUfabEUOuiQXstJ0lhPgnRCy 22iL2yrADThkt1ptSY+bgLu+A+Zth58tLq4pHBchDoISwYGbDX/CbcBnq93ALcjKVcmdV3+c XGkRYdnMDL8c6eg1bMgm54BE6VwdUQ5ot7CihMqLK/qRM4r5Z5T0b2O9vejHjDzP8gm7rwZR JkToKMDARYIZmGaKx2GepWJeAWtAYN4MAN4P0HpZn1rSnT+nWUw29XPrg+SO8IUJji2BJHCX wwlJWwSXxT2v7cCHJywdz893pNNhJu6vrJ8ZJldcvSQiltw+nEv5T/4fG+LPKiRtTO50/D1H LuavFB7np/iXhLeEt3K2Og9sBY5IEx3EYNuqtqHqepghtLFVVMMaqW6t3l3dW52oOn4IXm37 PfFX4mSb9VrHtcJ12e2OW4S9xKOhCeJ5wsELOWigerVOLE4srIwRY8BBsFG2sZUADkGwORxO QeAjEbuLiEIv/IMFrrdJlHP+uC+RhdkaAT3TzcRZKQJjUyVfjlcMS85CuKZObpvkXU6I/7YY V+agN0ZMsZ69mMsGc7msm3CxMMN2FXkuyPOcw+mwO7O8AO8F2mbL5vLwTXnO7XJa2GxEQEdm 8vR50BVz+VwWnajphhmAq5KQkHjf5bTbHFVkMv1O8D0YYHNkL2HAgNeA9+zJw/tZX41FagTy isnTrQcbT4SfiQgtCzpFW80a0RiyIv8nDMl+hkWdZlsagQFL/f9jY6e/eH/4NkRxofSyFwxr LbPLJxyeWiLbMjuIV4ZHR4mxUdS10LK8U8ZHo50OBOBmhol+G34dCJiW2G57R60F6Xrzgkxz onlXujl3fodBLl2kV4Dzta5SW3+DvGeBGOKLf/uNwnYNQqukUmn3zg8fpNZ9tMtyzqML6XSa zMTVLTPXkOTdGwchegFOWzLEbZz5Arlg5dxYTiexpXrhvnYAWmoD3GP82L/YM8AuFpdIt4F/ zKFznbmuJeAKsKa0ObE5eYO+q/B44lnyQOJQ8mDpYPlg471+X5ANikKZYoAjw+gSiFoknS7r oCJKCW9FZBLeBkvooMHSXlucFsRIXLg7AzJ6Np6pN7rjdSuwxK0ED3iWi/NqAmZhXZXOeFdZ YgiLFV9VocGyWbESFMUK0O/0Ar0v4Q0m4BdX9ITIeoHdeupOFfqhFVlX1b9PorMkbiZUOEqk ZjCCYNS7Miop8LTVbvRPgddalpTfjip4szwOwjonTsycOGGaE663IvPxIu5zVlp0SuuIRC3/ haWYV3DGM6YlUx2GaBVLNyVWYBpefMl6Aw2Q8PMmM7ACgHBLjISJUMoMViaDCjdxANTMbBxD tsMFOjE8mq0b2aiLwcbhwY6Z9YMlm7frxVeHy3qof+ZvK6rzbgCe5qPnuaO1Evmg3F2yLXhs 5zVS9xzw156BXGQtFZ15bUcPtCA6FfF7xc+A9My1uXibCz7xKKWvgAHw4U3eZMyWTqdjYXbt SWLfbR3RUgSaWDTN34TjH9ahLYWZ0EUHiNTJNyeDyYaCuJDHPHUpXeAKfD6lpa1BPihIqXWq ZYf6sPWh1H7rFL8/NaVO6P+ZctSFhYqhXyFepmxSNqZuzNjTlpQ1paoFtdhBdIA2iz2U0vgR ncL7WDgR9y6VtTiIp8R4HKIHz1KFjYEYH43H2CIoqoV4MZVm0iBd5Pggl1Y5Xk2ns7Q1SKdT tBX+qRxRLMbjMdLjtZdhvjoFOiYNK7BOkR7DQaeuk/hBnoQWoxohjrZxLYBBhI3wSHgibAkf JN8kdLjxehh/7agOSjre6TRtWEMdQghknBg+jn7MpBaBDoCZxNvsZgT6Eb4x06MzTGlYO33A uA4bjza7m32aRzzdKmBEMWl068S8VNtVzV+F+zuWztgW4QpR8werlveTO+I9+tD7Jy6KyBfB QOIQ8881Q82pK6unakIsueDJOSCdlgOpe5oNcP+uStQvWNMo6/3syb9Sv6WeJypEL7nECNEs W7ck2Hqb0Tu/9qX2r9r2tFN9CCZffFb7/jr4gu2R4pO9zxZfLB5J/qJ4pP2PRUe7bYFtSWAJ t7j9Qm6N/V5iT/vDYD/Yb3dXbWBr3/2W/1b8esVC9A31XRpe3TfG7QrtAw93HwJH+5z28FDf dT3UgJ0M+UMkroX8iKu/2wPaqna45WiFrFZIa4Vcb/Wb1eeqlKU6p7qselP1y9UHqt+qfq/6 v6u/qR6vukaqoNoTtCftl9uvt1tIe499qX2z/Q77A/ZH7C/Zf2l3uOxR+4idCvrtFO9RJQ1+ Y26N3jNAtu0mhnWd5I2cVmN4iV/Fb+Af4Pfxh3jbG/yf+Y8gjucNL1vjSWgrLqYgFfRCo2Ap zM/NY9JSmky/TRC6o+EYdxxyWBJwIAkHCzOBKfCcwRp9W/tIo291H9n3WAiE0AkVRnYo2zgZ BVGN6GQ7yc42q6Gkaxus71nJstWwDllXWy1WYU7XedBMK9vNGqa27PjoiVHtB8MwYTgxPDyG EvcPUBbXQF2M8PfIMJFkYebEMdbM68aw9mS2OZB92c72ent7kSJ5zNzknnbzcZ4khleYUr6u 7pjiZCkLA8N3Mu1S66pX9ImEO+EQgax0U50iwcY8InDK8NJl6RFbWl0TQbekfADukXifHNUI 1NaUbilf0+1m+wzOCk/pYU0deQtrd3JY45vx0ea7qm3k4m/ePrRuCrRzRrY/H4mpi3sa5429 cs32PZzXGfREomLb+vlDK5039mSSQrFtx+4rB9d/867PrevMxf18SNKylQVLqwO3LBydm9/d vNdIsml+ybyz7gX1RWd3dJaUKLJ77eQxSxRGOI7IgLMNxr/QTnAsRwJe8KUkbgq8Y0QVdRtl E1WXyzvGMKyLIwgWSfptET+qbT91VjsucXf1zKkN5aZzZDln5IZyI7m9uYnc4Zwt5/USjCAJ pJD3+Q0WlFmDHWIPs9OslRWyy0cxD2OK+yFImhSSiHqGaWkCj09xEhLor0BJYl1nh8c0Db81 Z74113pr7rS3fjAbmo6hFF+jvCzcEodbeuy0xWNNp1SkxiZpB9yq0xY5A+JuQSQ8XskJ7xVa zYCIRxSJpF3MnLHGWOM370JDuck64hhJjKd22R+1PmJ/1mK/2b7dQY5bxp3j0nh6l3V3isb0 6Qrga3UAmUsL89SaSYOb9ZG22Q5HsG/jnaufWL35lVuWbqzvkW1OrQq20c6lPdXFlY7MXJhE zcxsHp2+/f5/3lLuuNzy8NmBWJRMz3yjuXpc6Vnc/eTRXwx1o/1q+clj1CoYxRTiL8bV79Mg 5QArHI+IL5AvKEfA2+B3pM1pBwUyH7xAWuO4Qtro2OgcE3cHngw8GZwiDwb3iweVF8RX0z4C hAIE5Y1NE0ehjUyDo4C0gCAgQTIAcy7+PR/w/YlXXbbkgMXFeIFXQ73Hk21CA/cgRx2+GgPA XjABPxHZl34XxggmJsXIWJut9T407s9qtWkbsJlKF2/NJqS67jKl9cOoeRCT4NC1tWXHxjBd c3yU7cVa6OHR+igu6LaarlCfxmga+w+J+vaqs5rzUwJ5U+/XQRnS3Bc2PHd0zZYj93xzQVfP MgfNcVJZrp27uPOsyoV/4T9/I4i8eOiefV9ZWZ+//LKGIFSXPbDtLz1aCfnKIPSVBdBXRIgH NhvKfZ7HPAc8z4Ytfn+nnRBZkeSkosPOPySJLyjmxgr952nwEC3Bm4uetWvb3DA/RUfHGQJ3 Y1IN2uBXEWZGkkf6E5LP4wn0whliwCAgJwAAEd30MjRMQifTsbIIzteQPq2TI/pendQluNMb yF+MEProrJdNsxZWKHV9kT8VRNGcQh/SPjBfHTd5l+MnsOiZxd1/w6bLnHKarJz3BFJpJU3S ftXUZ3rhDqpmiLwHXtK+JITCjJZp0dXQS/LYS/QRz0hgRB7JT+iHdXrEO+7fyI0rI7ktxVu5 HcX7PLvDewqPhL9ZOFjwbmXu8JFoFYdXYO/WTe/WW96tt7wb4DbRYdN5YCLfblIRs4EU+5bS HjBbNVtL3kn9jLYXu5rXL9qwcHLtuWufWTtvbY/DXZ5725L1aT6t14pc9sLl1qUfvnJ1MJmw JJd97fy+vTd/b/e7m2v9ILI+HI/lZ269Kyh9/cHvPKEGdphWQA1DHwsRCdBuXEj7zwoOBzcE 14Yu528M2tLOR8kXyZd9PyV/Sh3xHAn9lfq7xzkeMlugzqfWUBvkTdS4fAt1q/dtz5shR95+ MgzsDoeGzCBhp+zD1kSYAAvDUyD7dFQN2KxTQJx0uxxhfG4TXN2wIci18JUE8iC02NDtcY+k t0Zg0YqvnYjockNeJb8rW+REziS/29iW5+FR9JujWq5hq3FDc5qGObSQbHkgrjqaUvnhDzQN GYummQ0eJ2ZMFHgMsC+PmmUMnxhPm2WMmF8SiUgwLALRFxUBF4KXVhkDlZQ0tMijIGl6o7nj oQX0w/Wz1WadNUQNz5x0rFxwce8lXfLSqRun158/88RdP31HSYeUWrIHvH/wqnPmXRDe88W9 Xzz0Ngi99dCDN0j+6oo9Cuo7JwhqrnU99FDN+KyhAzogpUiGJmwSzdoseY0AIOdjPW63HwZ8 jWXcKcn2ggxSEg19NipFG1FqH4QmberNIVD03lKAb4H7sVNHjWMwNdTf0CkdZmcA68bKQrTG iznZgKN8d07/1RsQor9OELnWpOfd0wxgXp+GEfJ1j8efc7fa1dBo6Lm2WsI97SYhxHCX3Vvd d7v3umlUVlqNb6fd77ltbiGhl3WypP8keRBcBmhUXhpdjoVFMCzCPW702CiEQvjuj+wH2okf aK3jHGZ5qGUz0L+PozCKNCyoUwS3L5hX5OJYj4FcqhNC7z6y3ae0V9sztY+DKIqo5jZFh7hQ NQTeCCbOn/lloz14++3g509v2bRkTm0ObXHD5DdD7qAWzGz6HA/T+BSIlpeSd1yyQL/78Ge7 inM7ko6Yjwk5mXL7vk2XoPM0ljUXUr+GnlQm5hBLwSvG2WnWxTQK6dsctxe/mnvGcsDxVG5/ 6b3U+/Odzqqjna7TPYnlVjt025wjJ3VJA9Kd9u35PY5Hi4/OcxkDqblJT45nCarblgr25Ty6 GyP2CDT2PsNf7zPUTK3PECV4CfG1ch/owz2wfK1virIYoaDZHBfv3O12x3WSMvRKjZqiYoYb WnBlt25boMaZAexq/gYaDSf81yYGwMAA3z11chqHXk836G7jx2wkGJNsQEe7G0UbucJcA34I XpiGPhcwc6W55NyBJIsesvghC0xR0xRlNYJqrQy/iqwBpibVyJqRVLUC+v+T4NOCkc3VCggw M4UNhZ0FaqgwXSALm5ZBuIyRFPTbY71ovdnjw1jRhK8zw6MfQRs5jh8jrgA5cu+MhsW+xxGG bmHioCEla9qK4xqOAC066ADRB//sNJw+FInjUg3G4daJG6dO3kBi7npLIkVoSB2CKx/Yw1EC F652tnFmsRKJQGHQ7jQvZj+lzXxPG7Y0ytyyW69U8r+DnslKgN9waAk9VpzT2fetnw2Orj3v i499YXrlgs/dvO7aW284OjG8pHtosKN3qJi4fk2yvvHfvvQAE72a+vo1lWxHz2VfPcfak0uV yJKx/bwvJSuVC8qlxYIxtuDmcmXvlXe83Hf91L0brnlgsr/84V98Unv1nCXzBJ8YRohqIUFY urDa+40DBH3yvadcdSy50c9qr1kXkuQQUtzYrFY6TKu0hfEQMlGQPKzMFmj/Pu8hLxkFRCAl eafIXxs+OZOSZEV2pCSPosRSUnKK/JVxqZJNSQVFAVH4UYJfY7HJyaTX63HaJQdw5IMBI9nf CBgLFtUCxpz2gDEP/tS74YtyBV4yWXjRivAip+AFWnfAYH21VwOACYBE4NUAyQZAAKVi/sMl IJUmSqReGkEz0deO/pBJ+FV4hN+GR/iFeITfhMdCCY+GFzpHiTBhXD6bwY/gP+y9DNAzhzPT GQo9muzsruER+g4e4T8Kv9URT9YyQnG5CUWQZUELxTVytpU9wZAGEzsU1079r/c0pSoEKBD6 4ccUCl3ArKAmkQe7GliR6Qi6G17UL4FfBcIe+AoGWy/q8vcicbYXWW8y2PhYoDCM4OMY6jGA JutrtesjBZpJTbUOPaBtvtl2OvMZBPDPL9u64MKbctk5TbVN8Pu1aHZpgQn0NNUewZfpg3j9 92fPu+y2vc2vrm+3pVK2ZORy8OB1PcnOBU3XZYJsT6XoRHg9tX9dzY5ULXkILxXrVYSLiBG/ NsLiVh/XYHyEn4hJPtbPxmguJfkRmJQ9KcmHbhQ+JcWew8dV00gBVuuo7aMBbRDAHaP9PqcD zUEMPjVzcYPKud1mt0ae5wz49fg8g+52fLxBQjGP5QhweDT0Yrk2wYGdHMDJILfFEIdEUhJX i3vFCdGiiw1xJ7w5LB4V6fjywzDwwIX7YBgHH3PZYDLe2oEax1tS4k81hp45z3BO1f6VFxnG ypWvlOY1bX1isDTXehV+YBgXNXtmopd2WlIpUuYuJWV4C+ft5I+bC8EM3O1dRIX4DUog3zPE MF8jqmBNeU3luvJ1lR3Bm8s3VybKE5XD1aNVFz790u311YgKWyELKamCUlyvwr8t7/YzFTeN JhGVf+DMockMTVGUEUQ6hUS0HDWiQ9HV0ZHo1qgjOkXZJlVNw/PM/at5frugYW2el61B4zqk HdVgts1qpPZd8nWijfwD3sxZPGunZow91hxFrdjaMJq4461ZGx4lPjlzttl+YPNcoxZh0Oru 9HXi6bzMWLGy0Vi54hWfcO/mLdfPyakFQLKswCVpJ6CAtsC6fkUDzW5jRbP3o67b+z83dtmi Qn+x6GZDdsXny6aDczZwx8m5tYZuS8NYOB/GwltxpfTPxjwyEaofIL/nPUK+Rf7TY407Ii41 Jsuy0hk7z3OZ51rPJt9Wz5ej93h2MbvYxyNPeZ5mjrBvskGSoVhHJOLP+q2t4noSiPlcMFfW gRhnLGl7USoRLhj86CAnp6VUOOVEQWDmhRdeaMy80Dg+2z5U12d6o8a1RIoosSm2VFasDMPG 4zFR9AJAwqvk9LokZzjGSeFcSkrBuEvCbw2xQSkkpSRFUfIpqaQolPUHJMRqh+GnForeIPwg yzCfi8eC8LsYjxiPsYyXBPayRJQIp4P2jjHotO34RSJE6AafSinhkPON8rtlcrwMyhAahuY7 wa8cU2BkMucEzimw7ynvGHsQeAkGiEY4NmQ21m0SRcns1cnn85hAYWGI1HOHc9O5ozlLTtDL 3wUUkSSWg2MtTZFmln3RWU3HZo6dODE880fWpPhHhzH5LyxjT5zgZ44ht8PpMZJyfkLrTPhQ C+vpOufT7rHWGZeDYHxdgSlaxJf5OlvFHMzH2wKtdmJsbpQt9Ek3/sEv5yULBvi33pW3rPmP 7TBZacYT8fyB3mxfM96Kjh9te62/OxpN2dNpqrr1sub3f8TL0Ld5L9cHmJ7HcMw8LUCaXRxk CtoeS8Cw5kfxcbUfTPgBYyVogpWsLM2ytAvCeBwlIZ634igJ4T2LPDyswE/SVicxC8xdKAa6 zBiIhslireZqxUI0GgoMhhMusNMFzBrhFsm/1z/hp3R/w7/Tf9h/1G/1o/dXajU07i+Waj4c CtFWdkYsnBX/m7vNKJZxnTljkx8HvKUfbjwV5qiXLkFhDv71SwmCvh4i5YXkckNaRAK/XzKc YqedCRC9xEIpALfIhTTo6BRSUnCK/MXTcjElZeGNEZT7U1KvIjMpKaAoRgbIKSkzRR55VjF6 QGdK6oH3Rl6Zm5IWKopNLnYkbcAi9ratsYhrnE6LjVhI9/ZkM8GAc8CA6BPD3vNEuUYM7B2Y GDg8YBmAFu9lGIkhmXxEgABFQGjkAeGQ8KpAGcJOgRTeSsr5UhH+qoh/VTxUfLVIGcWdRbL4 FsF0Sp1kZ35uP4bqcbm2uv9oP7m3f6L/cD+lw8t0P9UvLBqYIs+ZTCL4oC3/uK0Cw93emdlx uNf0hlYtDFXDGqh7jT0VM3BLi9nb0kIROIFN6ZVo3OWx0mU1plasJRHQtrgrIgK3R6fbRBB1 i2YaOyuYwF3bi8+90fBLCbsjYRczVsmRzBCJpN0GsBCDMKnC1OqBowMk7U65a25j4HWXddA6 aF/uGHQdHrB2kYP0oPuftAVlYKNjJvUxgA4yieOJnmRDDbgX/X0SQho8QqADM8f3To0+j/kc jvg14zJfM63fs63PwRG9/o7rY20mTskRlxIyuZP/GvqgzLDFYds+ZcAvL7tl+crNyaGvDl18 bTED/bwe9Qe1uHZh0cf1N2OZIhPUo9mk3g5/J+IYQD265dx5556/cmjFHbuaX7yqBhGRNRO9 GHzlpvnJRqPpvDySRl6gVD4DvjJupELSWU3npQ0ah4WrSBaHBROdd0K/0EgLQudvPuOqO2hQ xHz0We1DRWCFyDxNU78kX6dei1Ahuh1idup18EaU9DNeGF01ycsmWW0fc4ixg2gsmJIYE6mr EJ0rshMid4zUEwiphxSI3zVFSSYSDON1CmuslMUWnQKrJqeRCOrkM8b5fDu4kSA02omxeygU ROA9CG2fCYJE8NUgGURAPghBfBCB+KDR3gEvEHsHkW8EEZwPIiQfREg+iJA8GwRBBN8ZqThR JPXiCHQbiN2LLeyOR/glxRaGL7Ywe7GF5YstLI/nhIEYvhhrbTuZjHoKxKtAVw+r0yqltkC8 2gLxqgneUzVVKHwM3jF2Z08D7xqqynxsW9gdW4eKwQ+MQvDee5pC6QwEnzARfGIWwTMIwSdm ETyDeReE4BmE4JlPIniYcI4hRml4DNVbZq35Xxjyp232+YFtSy+6IchCk8y0c6xfi5y/JNPe zLTM88bliy4/q/5Q82tXYQCfFi4Fe6/tTW5puq7ssp1hhq3z+J6FdughkuBcg/9xBGTcwH+B 3at6AGHjVJvD7ooblllu12KoWo2xAEtEMbldPCwyhwYeJutzamg0UlmtdliZVkhCMZTVCrq1 GsoDCqmYYnFj2gVcLW4Pj/Cr0bjf7a25BNSDsvXpTHvXKIqc5uKZLHAr00In9eEjB3vxIuFw OB8k2TSZlsSESNLBQChA0rQajUViQoxCmvIM0meJIOzwiwRvi2eQpjwDRMorgoCTE4mYlcuc dsKelkeFExgMK1lQB4vBYvZGt3WEHnePsyPCVnqneye7VXiJfFFyjttGPCPMOL/TttWzldnJ 25EUdnQFko+3xK+Y4PdzMhaZtI7i68ASNdDc/LOrL9/8i58fe+vV6mLO6xooFcWMJ6imI9Tz X3hzx49vfQhkn38ZaIuW/f4n64cXLRHkOatA8onxeAitYKa5xALfCNN3HVxnCH7djkhDwodo Q9ZHB3QFZlYpROS/Y7hafGErFzOiSnEbZ/P5Yd5Fp1XJRdu8bA7kjGjEXzHXt9Li7iuYNYRe OFSZrpDlilEZqoxULBV/C5Z4/IYblN2Ge8h92D3ttrqF8hkVMrdJjLtbxLj7ExWyFrmP31ox 31ppvbVyeoWsJUk/buZnyCHPYPwTaoEXhbSmxtVMusDnMkAV4SUfKWZANpY+xfRrrXpYT8po LKop6DLOj4vj6njBcl1wXBiJf14ZyYxr24N3KruCu/n7xfvlPalHgo/LT6T2B7+b8s8PAcz6 I9VzelbxfMpDkyHzzKhZFknNhGdPsIH+DPZx5YUzf8KoCdxeqS4+/4rHL7zoW+uWzWvrPP+S DqVWV43L+1c1vzFQ49NpMsmtpn6NssYtAwn95j9su+tPW+TINzbXz/3z/13R8xVkAcuhBSyB FhCH+c2VRtDvX2hnOIKXOJa3iETc3yqHqkr8RYl/QU6pblthm8XFc15mjGV9NobxSRIRZyG4 z/v8p8o4/kE/CXGqP1I2TaHcMoXyqTJOebpMIr0nWZayMKWwY2oRfdQOpu3APlseswt6q5Kj faqUg9EQovIIXPfsxZXPM0ufCc2Kzu5Skwk5QdJ5lU6nXdkMoXgkEXgZzQrvM45UBiS8KRHk bIV/XfrMj1hHXCPpEW2ifLhMQyd2jqsj+f/H3rdAN3Gd6+49MxqNNHqMZVm2ZVsa2/LblowR xhYGC2McCsYQMBQIJhj8xpZkI2PL5AGEEvIooTSleRCapjmEZqUpIYRSSlOaUpq0uTmslCZp mpWwcmkOoYEQQoA8sO6/94xkh5CQc9a5d527lrXX/+9v79nv1+x/5p+tte673A/gBzU73Ls1 v3Qf0PzO/ZLbhOKvc0qVoViqDsXS0a9zcujzwJGXOBPHxzYcVPk0IfZSIEERcJlfT55QV7+n 7ca1rw/OvbXkkSzJPufKySkVSdmelJz6wprKvCmum1b47a5Hbn36B9E7yyf2fD59aXIOzslJ d9+Af4vX/7QjN3Fa+/Cp1787qYzsrGchxAag1wtwnl8v5oqVotUgKQsp3IZF8qVTmtNbpO70 wV631zmBOjMcirdZorY/z2rzSkV4u7i1iBFTjQlecwZyoAJnhuSQCnicZEtORlmPOR1UQEk+ 6sygAkq2y1lAhlVGtr7M7HdUwX0ufWK1uZ1sLVAB78jQm5uQ/iC+GXH45l9t1R7TniCH+eKD fhEVmJOdyUxyYXaWMrSy6B7AS/W5n02TFb1uq8XmPZyFQ7GD/d4sbFgQe+6gCCggSZ45I51U ntZUkZNayJKgpUsCfUFQhFVphn7kpd5kYy9Y1Y8Ak5KVl3LKt17qW+6Xmu6dWjFtqntCg1Zv zLAXJMlYa/BUDGsnFwn63FL2ieM/uHl69bSZtRxvy6pu7n+9olJKS2VhK1g5xGjm2tLtmhx6 5tBJ5jj0URnzpH+pWJokVXOSscAqZRRwvNVmPZpzNPfv0mnpU0lbIOUUVkjlhXeKP8r+kevn 4s+yD4j7skWNQWMUCpIMN4izDLxf9BsYS5kTPcw4MSa7DUyew/+E6rFP9yeihy0e8PB6Pi5K caY+nOa028ntFIJstWP7AbzK70h92PaxxaLJLdJaHLkWUV29/ZYkL76JfHF4Yp/Oyi8gwK/X WZkFykeF9AWeaPYqrizyNNLvg3nuNGGT3ezFHu8c783eoPd27y+9vNciyCQRwpkFyjcNfois oCx7QX7s/R+sGbElIj91PLnRkyUCVoiTZ5rAIneD5wQZNk90JUmGKILfmlktVCVlA7PlgBPq pu6nyMbgYh9ZXWJRM2XlieoJvw7SyFwG8UlNiCYctSEVakNCxN4bT6to8ckiev5iKvbnp0Aj pycAk9KAkW8G/Uabekwjqj5DMnI4HOZqx4Hou88arIoNIYhNPjGkAWm4XyMNbLQtEFbjgIAa B4TSWGNByGEXTUWxrzjoga9mj1+fUO3x68zAlLMhyVFfRUooknNOCRQNpvqxZxUbqgobzpwS 2HqC669+HYCcEtiN5hyIfvQsrFxgn/wVuf+mw7I2IlMtRr3KoZFN5A3IqM9AuPgtDGZLNhv/ AkQ5Z7g8dhwUc785a/IdUwt8VhnnNjVsWTgt5BAzbZlSVskjdaWTqzoeLKn50ffrb0hLsNhS 2N8P/35Lx0RXWmrBn+5Z2LB9bqFYhudu3DipsLTuhq6KeSu7f5ljNmeTNS43+jGznbuCUtED ftN94n0GhjLRgFIP4P3QP5zVyibdwWBeFsm/cLJin67VJJIDP03+DI2432BPwxyHzBqnhtEU JtqSIlZroh9aP1F5cJXl9SQeTjyWyCam2snqorxABhHhQpXyxKqKHmwNTlR95WQT+c6DvkOu wlSBQzkoJik7rgdFFxbyIpIcX3fg7bfNudJUn+PG/YvXJuiHbnumhrsy/OTKK7+70ZOx0nZ4 5eSs7fjT7MVHIqSu1dGT3Dj2CZSFtxGNzcP+XSAHuo65GJ0hzVBo+I6BqzQ8lP7z9APp3Ifa swKTRb4ZyiTMrEGJTo2UyL2jxVEtJo+QsrOV5yYO8tomW8Nr9KmtOlEvoqwsaAAe8YXqvs3B E7GOBzmPB9GOJ6IdT6Q6ngh0PBHoeCLf8USq4+n7GR6beSzz/84ziJd4hicint5FpEUXSHcu VbpzqVKdS5XqiL23ULkMKbtU4Y7Y/lTYVh52Yadrj4vxuEIuxmV1JuGkQjNZaJ6FhE2qbGdS ZTuTkhhdhxJBxDtnwh7TYdMxE2tKzW6IK43QuwR9UzP67cxV72rgNnJm5FQRkCXotoF8DkVP 5KeToi/+5ItXXgEquzy11+lhMXkT2JfzJw/fMW3T/DlrC/Om4FsTC9JcGfkVRCK74iLPBW+d +53mDY/h1UT0urK+xedItM/BF9TnAYkgh52F3k/HG/12C4MYbEEWzJU6FicvTpnr+JXhhOOc Q+sgd3HjBAepeG6601ttm2NbyLNak+DUcsk4OQ02fUqvYI2Tt0lJTtuB6F3+LjNKl9PS0+vM ktVsljBCy8wmQKZ0E0YcL8mwQkhktSTKN4yUlmxOk8wmrEmHG6NWy/PpSEy7JEVKzX7zXDNr bjKdxuQkWnoLkvGjmCGD6d8xi+eSkj1bNcdLS5iWned1+I1mr0Tfv5xwcJID74F6MBmwl2Cf zfz9ghT6+oz0CvlW6krqhaYLKWfi+rmx5+VwiWiBK4+E79So6rpF1zpXMmbRzqMfK/qTHKSw DlJYRkpIr8aEwdg5sddaSa0kYl3eK5qrY9/9LtYQze485SSMmApv7DEyxv8a/mOlnFyCP/Ik pBQ/tHZCSSUuK66oGH4xnfnbHdl2XU5Ogs2R0zb8U+zZUO7MY3Jy+PKNV7LILE+IntTshX4u Zr67z4IScDH5wPcJi9WLWMSJNjFZQhIrcVqP1WPzJFdbq23VyXOsc2xzkhdpFlkWOno0bfoW scOyyrYqucXR5lwjDVlutd2SvNoRkQfz7nM/UPQGfwq9ZzpdfBl9ov9EvGj6vDiX1/Mib+Ik TQLn8Lvnupe7dRgzFktCYiLSS6JTD0KTM4XLw3lF+c485X0QJzh1yYkylCzR5kzOlXOcuf4D 0TXPJrCMfCC62t/pRMVyUXFxnVO2Op1yItIh3smgZU4HOB0cq2Mxu0w5rxTWGcTUJVgAWySO ZThdsSPRghGfIMr4X/LnMiMX5TmLZCf4Jkgc1hfn5aYk63V8Mcsg0U3GfLHyyndihfJqV85U Xu2mpNq9bj9RIII6Mb90Y3dysj2vX3YewCX7/csTQglMwm9wCZKRLqZhprtdF43/jbQutcR9 gFlIR2L8m6he+l1L0+gPW5qUBeOq71vo0OwFpH4qFf+wpdf0VURH7Jc/nyq65tCNfUxF3mUo uuawCNHtgyN6gmhwkAMOVPsybBAqbYK1MhkIx4Yum83GRq8yePNGfe/y5aHMnoyiz72fVuSl jsdvlLrkuzbqHSUe/E6FI2PjoD13Ik5ylxcNf5bOPH1lHrPrYY9sAnnEkrBg+Ie4J2VWAXkL kppsmwXOuTPseS4ORvqEW66kkpHuAfnkHRjpPuaIf1ZexoNOxp4u+RjLEw7sMw6W/trHWkxW Z65zgNluemjcS/idKkHSSoJEpNaUZEFLnp85tXO150Bq0PKp3gm5OZILu1x0S2uudpVnk9ed /nWJqdUPlR8sZ9wl2JPhcBo9GSan0Uf+vt1n1hphYUzNsDtTXSU5Tle5b6Kz/CCP6eqYAjJI SrYzy5k9weN1TnA7TLAUUp6d+hPPUx5mqedezyEP68n4sfkp3yEfu9R3r++Smf2u+U7zT3xs Rp3ZB0uor0R9ggX2i/5NsJH+3yV4fsm6kqdK/lrClWCLMR+mkAYn4RzchzdizV3GPzgvOdlG 5x3OHzp3O7mfGd8yXjSy9+AH8W8w+3fYyy8zOq1Go9Pnt2RXm7HZaPaYfZwTO41Oj9PH+Twl zgyzEQt8HKWWT3Bl86kpWl7/aNXhKqaKvAY2J3irYDKQNtoPW064bfPkVR7Gjr2erRm/xQ5U wgygSaiKqXs28zxZiC+cuXgFdj/Kt4BNXz6CKLmyt7dI+QyH/HqVJzUYBiL0EiYDMrlEsa35 im12UHuvQX3muZi8w4OFnH7CA0lQ5zd9x3OtT3eu/own9tWX35qRojd5zYSZCHMQhtQHrfT9 ya2eppSqqrfJs4ZbPE1FKQBht9urfAJkn1A0vYjpQp1iu6PL/QR+yvmU/GvnX4zvG/WYPMYj 37XHXh5Szec8KjrGv3SfOJFVpphWPcA4eeKoWcYEHmscl+a5cmlyhnzjdA8vJGYWD2+r7e2e /dM5DaUMn+YVNGzqd3LnZpfgWZO7apjJwy//tCiZAWnSlphe9UDrdGMiDFazyzXrJ324cFsN TDNs0UpmSevZXB4oTsrQ5OQwN7TR+8twHXsGZp0Hr3yOvs03EKng6cSkKUQNeiaaaZxhX2xf krbI3WXvSutw35V2IO3FNFN+Yr61AlXY61CdsZ1v17YbHvDsRrvtr6caIVWjx2jwmHiD1skn pdqcSRL5xznOCcJLotNamJSX7yoyeTx19lSr3Z5qMBpTQLIxLiPHzxjJiMv02FNNRgPSJuV5 kItArNHYXaeLtjrMrtOOJCuIGBrejsTl406MOzeOpc8ajdZ87zgYwOYkTxKTBNsFf7KmoEDO 8+bV5rF5L2UWIc0x2NOnlo4b2Uo00NO8m07C1l0ZxX3xrcRsiahhk+GmqH4lk38tENxFypbC pC7QSNUL+4YTqwVJWZfJstykwV+7sjKj/vsnWT2zdSI+P/xq7VQ3/mhcftmjPZPGTcGVbl/t 8Cet46Z3zG+/wVs2GWNBMKek5ZfnMs89MgNWWyYrJTc0vA2n/XhSTjHsJDSTn7kya/iLqsab p/nq/dNyRTGjcDvp+SRYb7uh5y1MIYjFiLWx77Ofs5zxQPSUX5ed42VlewY5M+bUsw6Z2Of8 s1LTvD5mJtPB3s72G+5m7mW3Gz8nWr+z2DpDrfEmdqHhN+yfWS0jQfR+w3mG8QgenZwgWxYa Xjf8h+GSQRAZzpDGWA2cOg/zDYw1Uc/YmVuZu5nnGA1jxBpDkqHf8D3DQYPGwOrZOj1vrMN6 5RQD5SjVJnonTfs1skC/VyboqwVdgiUBqmAwWlqMYeNG4/3Gx437jEeNJ2Gp1BmXKf9ExGDW iHQGq8iYMFsn6g6wuX6jqEcWyQJ7G6znLcQn31iHmP0I663kNTCyYivZL1hhZInCfp1OfxNm +8UCSxFVQZaslcgP63U1iiImSPSTmZy9xn4cf7BJ/qcl0XoAz4qPuN6i2VeosHHhAhETY39K VtRLdgsgOZ45Sw6QbZKqztKzubFydKzynxl9dBU1wmpJJgxZNWG1BPsgub1Tt5Sk2Gbqf2Kv KTH+rw+3HiFpSS9JLyH6NomsyriPSj3qCyoWIurM9A2qXwd7XiYFGCRz9hlyoBkI+kWLMzMn YPLVvDY7ITMJK8fSTvviVYbZ3tzoTc9mE4cZ/+Eni9JtbGP27JVYSvtiX2AbjLboh/gRTmJs sGtN8xuZajSs/EnVzOmxP6mqjv1JFSd9/g6XiR+JQHNSbTEYoxJ60G9951vrQKRnI4kfrQOx XAyJjKLjoKg+ZCmqD2KizasqPdDn2LBCe52W5SPaD2yCqvRVdLGJih5fVXP4qpLD3riSA4hy X9HlwtGDcG/fzpD/9Uz5LWLZV2EirgJ67RkN9kgXlP/bIv+bt33Yhd+CsJISh3vv+nG49z47 rikeiQMb6a+J88lIPmj4IK4biSN8izgCunRQGBVH+to4V+JxJPThQSkWh+iznYOeldGA33UP j/8Oq8+nLMuwFhZkCfG05cec2e5yOP0yL/i15NAqlt1r9NNzFFMzYT1iYcNnLXJkK6dFFaJU ObU0ldWmpmZlktcDy5rONL138mwRtqdIs88UoZRq++wzsISchLLcvIx8jamxxp/Hjy9LssKK PL6MvHGZkJdQTnfD+FzCxI+a/XMmFc1jKyt4kcEpyTV4U+Zd/mOukiVFNUv0ubrps6WpYcsZ Zs3UlCRtDkKoXDU/gxEeN7geP0zNW/gS42RmshPYnVwNd1oznx/Pv0mMdkh7cLQRturu1M8V UwyC4U3jCdPb5vnm+VKT9HbCG5Y/Jb5uHbQOJt1ia7edS96fclvqX+3DaR9/2WQEHQudGlmQ X8/8RVbUVeZ6Jed7uX/Iq8l/pdBS+HHRheIPS37vafa8XvrauD+Pr/Z+NuHSRPf/J+Y7/01m 35gZM2NmzPynzCv/V8ypMTNm/ueZCqYivaJ8zIyZMTNmxsyYGTNjZsyMmTEzZsbMf9o8NmbG zJgZM//TDCI/jBDzNPAQXod4LCMWuaL3AZ8Y/QfwSsp9lFdF9yErssJVF2IpnxjtAF45fBm4 L5oBvCpaC3wx9V9C+VLgBRB+H3AzXC1ACZS7wN9D0/FAOrXAKyn3UV5F+VK4Op6GGU/jjqdx x9O4EyDWAeCVlPsor6J8KfCJEOsfwM0QciKSINZEiEtwBuUuystomFp6tY7yGZTXU/95FC+g IRdSvIjyJdSH1KuS5lKJzNAClZAL8UmgOANCViIXxWXR14HXUp8ZlNdDa1TS9Ctp+pU05UpI sxb5aJo+Wl8fpLkPeALFGdAOPih5BvBaimdQXk/Dz6N4AcWLKF8Kcatoy1fR1KpoO1TR1Kpo CasgNcJrIc0qSI3wehp+HsXz6dVGihdRvBjwd8AgtICWcwFNeQEt5wKa8gJoSeI/g/JZNOQ8 ihsp/y71WUL5TZQvpbwJ+GJI7T7gCcCXULyE4qUUL6WY/OazpxE5YYv8uihn6Uh2UBfBDBKw RcUs6kYnVMyhfHRexeRI63oV86gYt6hYi9bE0xFQKXpaxTq0CW9VsZF5iLGRuUN/E7g9KsbI zP1TxQziNJUqZlG5RlYxh6yaAhVrkEGzUMU8smlWqFiLJsXTEVCKRqtiHZqmGVSxEc/W/AZS xhwLeZm0+SrmkFsrUKwBf712oYo5VKgtp5gHf167TsUcytUup1hL2k27S8XQVtpNFAvgb9C+ omIOFWufplintr+ClfZXsNL+ClbaX8FK+ytYaX8FK+2vYKX9Fay0v4KV9lew0v4E62ndP1Mx qfubFIvgbxHyVcyhMkFpEwMpm7BExVAewUexCfwl4V4Vc6hU6KZYouksUTFJRwmfSNpQOKRi aENhB8VWUh7hXRVDeYQXKE4Cf6tOUjGHvMI5im0kvK5WxRBe56I4lYbvUzGE182jmPxHgF63 S8XQpzqljzJon+5SMelTxd9Jwx9TMQm/h2IX6VPdZyqGPtUp7VZI2kefq2JoHz1PcQlJR9+g YkhH7yZYGNX+wqj2F0bVSxhVL8Oo8IZR4Q2j+sUQ65efIxmVwQgYh7yAGlEHagV7NgqiAFAY RVCI+kwDVx9gwpvBv5OGcMOVqTD2usGeB37tED+MVlNXK9itEHoN8BYI2QjXe6ivjBrAHqCh guDXDCnJcJVcaQYK0zxaIAy51odWgV8Qtf2Xynd1SN91y1EDuBty96GFtPyr1bRkuO+5oZ3G AcqHdDvRSrgahOukbGG4314rfBmYkRyV/EZym4vmo5J4jrMh5Fdr1hhHtbRuA5BaAFpaRnMg 3zZaDnKVaNfPh3gk3W7wiajt1EdblqRaDD4Lafgw9ZdRPW1f0tIB8JOhbpVw7y+D+0MQ9YOb lJKk00/7kvRMh9pPbTTFMO0x4g7RuvfA1TAY0uMyWkHjhtU+mw53oHoYLUrcvlFXQrQdWyCX lTTFTtp6AzSvlcCvna/iJmFXQn37aS1aaNgg8BZ6PQRXlBqQVmlR8+pUU1ippqXUnoxl+Ss1 D9LWjNA+74Q+lumoXBHP61rlCnwl7W/fSiOpt8T7uY+OnTAt+cr42L527ZXcv1quSaPagNRE qUuY5hebNSR9pa4t4DNAax6kM/HaNVVauvlLrdpKezaocqVWCu4HV4hymZZ2TXzkKumQkN0Q 4hv76OdyWek4r9zY0SrPDgaC4UioVZ4W7AsF+5rDncGAW57a3S3P62zvCK+W57Wubu1b09ri buzsaV0tN7QOyPOCPc0BuXO13CyH+5pbWnua+1bJwbavTy/m6bs6jZpgd4tvYWvfagglT3CP Gyfnz+5c2RdcHWwLF4z4l5XRiBCPRps7v4REnN0Yz6yRsNq+5oHOQLs8p62tc2WrXCLPDzcH ulsjUKa+ztXBQLG8sHNlONgn1zf3tbQGwvK4yvFli4P9ck9zRO5f3SqHO6BObUG40rxaDrX2 9XSGw60t8ooIXGmVpy+onwpX+6gj1Bds6V8ZljsD8kBH58qOUXHB7gys7O5vgajhoNzSuTrU DRk0B1ogVicEWAmhIHu3LMcyDwa6I3J+Z4Hc2rOCxBpJKxALfc0i0eAtpM59ravDfVA7aK9R 2UP0eFqTaAnyOyGXcGsP6Zq+Tsi1JTgQ6A42j84UCt2sFLW1T4b6BiEr4P3hUH9YbmldQxoX wnS0doeuqtF17wrEr53ORLLCXi90GPVjI6D3rxuyjc7b64Wqo/mGrxeO3cz+lj3C/g74M9+6 Rp3fqkb1cL0D8BrwIzH6rxvjBrqmrKZ3jjCd49ev5fuwAqxCFyGX9yH29cIvpClfL9QMsLsh xbZvFXouYNIq/bAKK+vs9dtmdEtet5ack5vCTeKmceVcBefnJnOzuMrr5tD4rcfTLFJbPA7w 9UOS0RyC9r5umXECepfNBtf1R0mQ3rea47IjimaiP6Br/1hEpB4jwtEo2ZMiNJt5r45B7BMI 1Wg0IDfOlpVlt6ZFpr8o/FB1dLhxdkNNaSmLNqlPV5ABrJfxcXKOEgiF9yLMfJ95ELEgwTwE +GHmYcA7mB2AH2F2Av4Jcw7wR8xlwJ+yCQizFhZkKTaRrQN8AzsLcD17G+Db2dsRw65jLwD+ hP0C8BVuNezPw1wYsVw/FwE8xA0BXsv9APA27oeA7+fuB/wj7keAt2uKEdaUaMoQqxmvGQ/Y q5kEuIqvRZifzkNefD0/G3AD/13Ai/hFgBfzNwFeyocB9/P9gNfwA4AH+e8hht/E3wl4M38X 4Lu1jyOs/TftvyFWu0v7HOD9wlTECDVEWhIeEc6CdPChcAHwJzpIWbdYN4BY3aAI0qSoF42I FU1iPuACcTxgr/gE4N0iSDDiM+LvAb8gHgH8R/EvgF8W/xdixFfEU4DfFz8A/zPiecAfi58A viheBHxJvAT4svgp4M9E6FkDMrwAEscfDEcB/8nwEeDzho8RY7hgNCNslIwpiDWmGhdDT3Jq fzIok7aw0rZKq6rtCfWaBzVqFKCthEUC1EhYIiwD3CysBN4mhICvESLAh4Rb4OrtwnrgG4QN 4HOHcAfgjQLIbcKdwl2A7xbuAbwV2oq00nm1TRhojSLAxaIH6lIqltL6ngb8L/FftC5HgP/R 8Eeo0VGoF6lFEnCbESRmY7IxGXAKqZdaHz3ajg8hTXNf8wokr4z0daMp7X2tq1BDR+uKPrSs uzkcAHlcj/CCebUyssKsiZJnG0hUkQYZaNsgOlPIcwzjKDcGed4Ud2OYVZBSfeMMGdnUEAxI 9mYVs3BVQgmrWvsCqIPyAOVhyofIlgito3wz5Vsp3075k5S/Qvm7Pat6YK2mfJhwzFNuotxG uYPWn7smZ+J9rdgYakWexJBPUbRQXj3U3kD+lY2UFllQIrRLEtQoGaWgVGRHaSgdkfNxnLDu XDvetfwY8i+cX7LNkP7X2QWw4i2FFa0bVvZb0EZ0L7of7UCPo6fQPnQIHUEvo+PoLXQSfYAu oC8whw3YjvNxOa7F9bgRL8V9eDveiXfhp/F+/Dw+il/Br0HdMcL4bigb2GIYSgi28Yhim3cT GR1haYbSUnKhYnsfV+wJaxS7/LhiT9yr2NN3KHbdRsW+oUOxG44iDhoYz5mLeGhk3JSFeKg2 vvlupRzNtSQ3hFekKO4Vtaq9TLWPK3bLIRqOazvedqrti3ZJcbXf1r6tfVf7QcXVkd9R1TG3 o0VxdeZ2+jobOlco8btcir1KUu3TNJTQfaT7je6zPVyPvae0p65nKfU1B2oCCwNdgdsC2wK7 AgcDrwTeDVwM6oOOYFmwLrhEKXEol3Cw65UUQ42K3etW7L4WxV79hhKuv161G6GFiQ13CV2V bgN5RoPeJv/6vbYYqAzhtS+AXQE0BfCLCN3aALgW7Eaw4f6ydi7QQqClqnuFSh0Q/hWwA0Bh lYZUe51KcMtae69KBG+DOMfBfkB1b0J4Tbpir30T7J0qPQ70JNAe8D8B9n7VfQihDS0qdSG8 IQT2GuJmkgfeiNRFfJF5g0w/Q8keaaE0JbJBpc2U1kX2UtoU2UKov7ifITS4R6VNkVMRb+Ts wNuR+oGTkXkDp8E+F5kXyY/sJTRwMbJo4IvIMhIO6MKgPHCUEPjXg//o/LsolQEm6Qsq5UJ4 QibAhIoBE4qXM3xSoXi5t1CqBazQFkqByC5KYZU20TrtHbxXJSZygNIDEJZQzL0T8M5RbrUd vuJ+/DoUgLI8AHQo/PLgC0BPAt4D9CLgV4DeDL9KidTtBNChyPOU3gNcBjQMaQyPtH9EHz5J qB/aklDEFnlNofDblNIj7xKicQnZSRtDvCywX+g3RdzQP27aBrT/wD5L7Vg/KH0SGvwA4p5X yhPr27it9m2sL+NpxtoU+pumaYW0rKP67uq+HBkDayh9Xd9XAK74xvi3UJoJ7UpoBbQZobmA CXUA7qDjIzZW7lcp5n6I0kLAS68Z/lFKQzB+htTxpNBTlIZUio0x1X+gLbLrWjS4Ddpo25fa 65spFi42J+NjFOpOKD6GAT8wyn319euN4f1Q1yGg4zAuj0O82Ngk9EH44uB5oPh4BXxixN1P +usyUDw8rCnngUaP78ujxneMdtI5suXqdSbCRbYQGnwSyvHkKHds/RmOHCHUXzzUSChel5H1 SXGr8Qc3Ub96uGaiRK+TsBB3z6j4sfzUeUbLDBSRwC2Ncl99XR/5M9CxfjnSQgjm4KOUPot0 EYL2fpfQkEOhkesQF2jIBf5Ao9avzYSGEJQH1sahQmUe07mszrc45X+ZhqpUqlEo7j9DoVFz n6zNZ4dQpIvQqPF4dvTaEPFCXb3hc0MNin298TVkUNa4IUukfiglcgTWp7dgfj4/VDjSzgOv RvxDfGQXoVi+Q6X9pqFydU7TeT1wmNLIvD9M6ep5r64b65+M3EJoxD1wmNBX7jUj149SgrKq tIVQbN6v3x8+R+nQ+hcIDQbWllGKzUu13utfhHgvkrEDdeYhHqzr648ra/36N4FOgPs9oA/g umHEPTJXoIznga6aO9B3WwitfxPKCnRtN5kvyhxYfz7ymkLhtwlFbOsvK9RfSyk9fI5QrF3W D0feJbSBGzhKSQ9YP+K++l6zQYrsJXT1vTNWf9g1iVR+RlRyFqjMrAPJ1otMmgqQb81Usk0E mXY+svMLQbKVqUybRWXLHCoZusl7P+ZDkMUR62SzQLbOY0thfzqeLUcSux5kbqsmH6TnzZoq zV/R9zV/0/wN52he5yfhXH4KPw3fA/JxO/4B38l34kf4VXw33sn38avxo6JO1OHHQH7dh38m 7hd/hZ8wYEMA/xz23eeY8pEdX68PyA97xmNg1wHBHrH3NYRWw86udx7YsKvrXQS0DAh2WL1d qjuk0hoI/xbYtwBtUGmzam9R6X6gh1Qi+FGI8y7Yu1T3/Qh3Fyp27ymwn1JpL9ABoOfB/yzY R1T3nxEa7FNpEOHB28DeSN1JqJjoLaAGtAitoM+81qG7QWLZiXajvSCvHEXH0JsgqwxjAbG9 U3rLemt7K3pn9oDMEToVOtt1IbgC0OnQya5zwRCgE6E3Q+8FGwC9FjoWeiu4FNDLoaPBXV0k xguhQ8EdoeOADoT2BrcFcwE9Hdod3Bz0AtoT2hm8LWgBtCt0fzAclAHtCN0d7AoMA9oWWhdc HjQA2hxaE1wYOA3otlB3sD5wGVAHXK0JnAW0DK5WBE4iLrQv9Fhoa2h3aDvksaP7M/DZHVoO uA2udPfs7kqB0KWhwqA+sBNQbkgeSO9++b9tlGrocyBEnwBh/jb+e0hHn4Uk0CcZiTCuUvAG kCoM6HnoAxSA/g1AX0IdUOAC9BnIYoHPwNYjFASxLAiSLtQeQfso7hSVQF4OuoAKVSpV7XKV qoBqVCJ4BlCDimPUqNISoOVAbUDdKoYxs8auEkjNa4opLl5Vtapm1YxVNaFlqxpCLasawSyh tByuLF/VtqobTB/Yg8BvAyKme9VGwHdTRMxWGg6o/3yn0H+5f7iTPN1LgPY/D+L0BeYTxDCX oC842hc87Qst7QsD9EUlMmomxXtEgh65ESXz86Ff0mi/pPNL+CXIAf3yFHKKT0PvuKB3vkB5 4jD0UeH/w5ww8qMw7Ws3SKKoByS5nm1AIMH1gKTW/h7YIK31gHQW9iGhy9flbw8Br+uqa98b pvI98zHzMZT0InMRYY1P40MMP4+fh1gYe4sRx98EI1Aj/kL8BeLFK+IVpP0vxcGmg/QZQAt6 FXNYj0txDV6O+/Bm/CojMTOZzcwWZh81zzNHmFfBnGL1rMy6wXjZZWwH+zT7FnuR87J6bibX wnVx5zTLNB2abZodmvN8Bd/GD7Ju/jEa3s0f498D84G2XDuo3Su4hCnCDGGN8IDwqnBKx+i8 um26l/U1+rdERpTFXLFYLBdD4kPii+LbBoOhxtBiCBg2G3YZXjZ8ZhSM5cZG45Bxj/G8STD5 TH7TTFOHaYtpB7Q40ZsjWnNEZ45ozFVF9+GPovfhT4E+j97HYCBd9B+MPrqPMUf3QS8RXTod 1W8jmnREj45o0RHdN6JBR/TMiJbZ/ih5XkL0uIiuFdGxItprWjVeLdWbI1pzJB7RmNsfraXh 7/tSeA3VlyPackRXjmjKET05C9XiIlpyEg3bQfXjHERzD4joxxG9NaIbRzTXiKYZ0VojOmtE I47ohMVKaVZSgjoQPTiiBUc0zBwkd8BEB642nsq+eCqLaJlrkUktRy3VJCNlJtpuDqJlCC1C tN2IrpuS/31Uy43ouBENN3O8ZSS1tvF8gYhmG9FrU/LMoBptRJ9tEW3jDOiD/aiX9sGXcyc6 bDNobv+gemv7EfkfM6KFRnTQMHoOys5CLNIO+2gPaZiS6HimHKge6Mbh25nG6HiYg0rpBIgn 4MvoHvzp8HkYDQYGD59n7NGDSAPjowt8DsL46IKx8RcYG39BLPg2gOuf4Ponwowr+h9IT/oU F0fvwiUQUhO9C0ZTJaMf/owxA9mitzPQbxByD6wwsXQSsDvqxB6gcUDjgS6jHijDWcjRAmU4 y0hRJ2OJ7mb+D3nfHxRFluf5KkVARcZhGNumbZu2GRYVsKRt1BrqBzU2g9kFzbiIRVUNMjTN sjQ6tlQVVUX9IusHtOt4nuNxBOEanuF5rGF4BucZLGEYjGMTjq0OYzsObduG46jLOYThchzh Oobc573MLJJqbDti7/afjReffC9fvvd93+/3fb/f9zKpJL8Hq1yCPAN4DXgdtDNxbcXUG2QB syZI+a1GT5T4/AytfotWH4ObdeBmHfkOanvR3wauvgBXX4CrL8DVF2jZC06+4F4BXgXeADKB bGAFsGrqC2gKo8ePLI4GDZdAwyWQ7HNIthqSfY51r2DqEHlTYeElSgsHtS/By5fgpQS82FRq 5GuAt4EnpBUzsAG0tmNeNmDUL7mFAGhwGAfyNkJbXdDWl9BUF5M9E/VvTf0SOmjkfoC6HGAF 6lZOdZHXGIciByXgoAQclICDM+Cg96VzNHfqDEb/bMZcLcYsiPN1+mvzxTG9UZ3NB+1PQPsT 0P4EtD8BjU+YhjORZwMrgFVTnzCbEa3t+/8qvl5kQ9QSB0BtANQGMDMOUBxAzwH0/BTSfIKe n4KzAfT+LXr/Fjr9BL0HwOUAKAyAywGyAFQ+BZVPQeVTUPgUFGivP6Hlp9xyIBtYAaya+pQk cOm48haQA6yc+hPTRy/696J/L/pTq+sFB58zy1uCPBPnK6Z6XzDSG1O/nnWkuYh89xH17pN/ mAqQ41NXSB+A6DLVgxh7ZsrEFU9d4UqnerhNyN9DbkJdGVAOz/nJ899wW1FvwQxYp7q5bSg3 Iv8IeTPabgd2TPWRRZwGLXRTfZwBV95lFMdBbRzU7oNaP6j9kXsf9T9Bj0q0q546y9Xg/ENc 3w6OUkEhoKDQJ/W0KHr9Er16WK/tuPZz4GP0XAoLfhXW+6pSQlB7E9QgHXmbe/f5Z1wJWpcy Ce+DSgMkMnE2jFKD8rapeq4O5Q+nXuUakP8N0IjrTeBoO8oO5E7AhdHdUw0kkVEtI69Cqvvc VpS3ofwz8jZstRild2GrCyS90hGvQJavIMufIMMYRr4CXfZg1G6M0oAR6rFP0U2FIPl99D2G llRiqqM+WUfQj0yrbOoPGLcRLejYr7K52YaWP0PeCLri3FAdXeFa0XMu49LKWo2jBbsCGcpZ De1zn+nzY9BoJa+SFOiuB/z0SDPRw72HUcqmfsGVI39/qhYjX5Fm4j5Xix6vYAYIZoAQrGdk GXAcOtEgDuqmfgAq/aJWnl/BLHwBOSYYRROjegV8fAWq8tz2STyBd9BwY6VIjfHzLpP+Plp/ xniopHKBCtX+R0CzaEuQ5D6T5HXwRX+Z/zYsoweW8ZlEKcCkEi3iPsb/nGmazouNzUsfrOEK V8803wOLoDZ/lPtb1DcBHwHU7n8OtDDr6FFYRx/Jhsf1weP6EE37EE37MDo0AttkdvncDQ7W wDow11hpqefR2dzK7NKEeeoDF2bup0DN1A/BzVtcLaj/DOd1wAe4Xo9ctFUzbNUM7t4Cd2Zw ZwZ3b4EzM7cT2AW0AC7APfVDMk/yMRPkb+BK6RwwjdZDmwGmf8hLkiTL7Ya19YG3jxlvjVO/ or6AFb+UrfvbCf0d8BnWL4JdEi1pEKF0iP4GlIvR992pk9DySYUXNGDutmO01yR5f0nmo0cl szTRcwKMr3LUvw8OqkFN9oAFoN+H1g1o/TGbQVmC97GW/UTyFdgjaz2X+5CkQSv3YRWfgfNu WMVJ0KBtqIXVMqpXoMM/SB7QB731MS+wo94NH1nIvIZRRTSlkaoBttoILxKtjXrSAOLfhKLX feyspHiEnj1srA8xeoNk1ZQuh1jxKrVveCH1IUqN2u0O5D8HPzSqJUkee5+1pT0/woqOKxjn PmayBme1AL3agMjSCC62T/0e3Iyj1R/Q6ivsjv4BslsQea1M6itSjLjPYsR29NrBvOUUixNz 0HKcXaW+swBWeAWjfCppisr+heRhVFO032e0JST6AtzWSJyKOv2j1FKM0PM4C67Inoo4ya7s iMXwP7ARF0JvDdBbA2stxZYYTcpXk+Tn2xmPbzNtL4r5+Os4WwbQ2GORIl4N7GkbLLeWzcKV 2Cx8hLod0mzMlSzsihQ7fsPopkg0+hR6o77/qTTvfXTdQ+seaLqP6U9FecXcNrP6eqaTLoz8 C9D+EiM/Ypbyc2jbLc3g3ymsEPSlCCa3gk1hJy9Ldxy0k3D2Ds7egaxXIOsVKbL0sTWdIwXs dwqEvguFFT6L0F/Sr6DvOJHVSAmwt7exH3gHKZGsQ0oiGwjutUkR0nz29swCsgUphVQTC+bD Rt9vIf8T9xiLyK/JBZKmWqXKI+mq1arV5BXV26q3yRLVP6v+mbyq+j+qSZKh+hfVv5Clqr+o /kJep58AIMu4udxcksklcQvJm9x3uO+QHO4V7hWygnuNW0pWcm9wmSSXy+KySD6XzWWT1dwK bgVRc6u4VWQNl8/lkwJuLfcOXUsQHd7hNnIlRMuVwu8NuBOvIMXcX3OVpJSr4syE5yzQfxlX z9WTLVwD10CquEbodCvXxO0kZs7Jucg2LspFSR3u4TvJB0SV9uh79M2FFNU50kyIvQnYCTgB L+E+uoVcIMQ2QchH5whpeiKCnts7gb3AAZxfkOp6gMPiuf1YDCpvlHBbK0V8dBcYRf0J5I+m 65VQ1n80IeVPZ29fNSzWh27NuM74YDgh8UZ56SNccyIhVZem2yJnMtn7WTs2DusPee1UjkvA MHBDOr8lle8CVA70t0+IbWTdgD5Dkx31T1k915wiysKAPg4yPb4jUWwLsLEpjaZDs4Jdp/S2 VnJftVg8NwV1S63njlDY0uB5IBS1NHvGBGPLLs+4UNriQrkc9U9Q3+B5LlS2+NsSBEtLbdt8 obYljJqGlt1ti4Tmln1ti4VdLQ1tS9Gmq2254GpxteWgL8ofNqJ9vuBvOdi2Vgi3HGnTCLtb wm0GtOnFiPtaTraVfLC5pbfNhHIv6v0tp9s2C10tA21m4WDLYFuNcKRlqK1e6G253NYknER5 J8rX2pzC6ZaRNq8w0HK7TRAGW+6Za4WhlodtncJl9NorXGu513YANY/beoSRlsm2w2gz0nYM NJ+1nRBu27m2PuGePbmtX3hoT207JzzeYmy7IEyi/pLwDG2GQ5w9ve1GKHmLuu1WKBX1d9E+ o200lG7PbHskqO3Z9Ej19uEpe27bhFCKmqeoL/ASwWVf703EMehVCwdnHKPewtgxSI9UulC2 fY+3SOidcdzvLQrl2ru9RmHIfshbGiqQykfZ8bi3XBi0n/JWgo7yeEZxPOu1CM/s59lRLF/0 1obW2696G0I6u86bEspo6WLcXvc2hza2jNBeTqPPHl5s3+hNk2WUJBrz7g7V2dPRstF+07sr xNvHvYmhHXaetRE1IJYrWLmqbSKUabd5lwgW6VgnlZfh2OjNAk3lcYd3JY52xfGJdx9mULQx Npv2594uIexI8B4UHjvme48IhY5F3t6QXbRb+x2vK1Rh96CvH/Luwnw98PpDVZA3HLI5FntP hjyOpd7TwoBjuXcgFKQ2GYrS2d/SjNEHQ3scOZiLXLnsHQrlilYnycVmkHpNYza1z9B+R773 MvzlMkY/Oe07oW5qpaFD4PAaOMyh8+hYS6VwaLwjVCLvbSqR9960dN6HwpDDAPupdJSwmeWp LUnlRqZ/Nr8Ok/ex4Hds9k4KDx1mVq6hZUkz9VQz1MtCR6k9h447mrzPhN2OnT5OmHQ4mVbP emthCTuYfbKywwtNdjkEaDLd0YnybsdeVj7gSw6dcvT4UkNnHId96aGzjmNMD1GqB8cJaKkR tjok9Dr6vINCkaOflc/5MkLnHf2+TNhwri8DliDacwWNKmiDsjgXkIjOxQWUG2GxtHzJ8yR0 0THsy0bZ4MuFNm74CoRBxy3feluy465PZ8t0jFIrcjzyGkNXHROs/JSWRbtyEnjKdRqpQjed ieba0B3HfN9GodaZ4uMRGRC1PrxK48OHVc40X4Utk+q/oZNa15ZaGsE+PEVjRegBi2ZFrDzm XML0L/qUOBdBWqaRrUGgMSQ0rrRM5zJfVeiJM8tnCz23Z1M9O1cyPR+bLtv5af3TeBhOoJEn FHWqfXXh+c5CX6OwT7RkzDV8zVnk2xFe5Gry1UUeu3bSqy6nr+6DzS6vrzGU7BJQP+nqZPV7 vSsjzxxCcGOUa+nyeRBpR3xBcBv2mzAi59+MEWHD0WRYqTl0CJykybbtOuAZj6aK1mvPhfWW or4IUlfQeZTmlOkZFlsK62V6prE3UkijfTiBxthousMAjy4SLZZKF81AFL0UzYT1xiyQRvto thhXKc9U0uBGlHugGb/rMPNfxpvb4lVHn7tr6Vw7EzHX16WIwWaBaUmi6Sz1RcNLW9P9PeFz znLfnpDOWenbH17utPi6wzmoOYQai+8oK9Ortb7j4Xxng+9UeK2z2XcmrHHu8p0VjE6X73z9 bbS8yFpeRUu/73rY4Ayzmd3tuxkusT/w3fngkXOf70HY5OzyjYU3Ow/6xhFF7/meCEPOI77n YbOz159gS7Zf9c+3ZTpP+heFa5yn/YtDqc4B/9JwvXOXf3m4yTnozwnZ0DI/vNM55F8bdjov +zVhr/Oa3xAW0LckZKNxLNwprqHiauUc8ZvDe523/TXhA857Plu4xxn214O3h/6m0HNaDh92 PvbvhL1N+p3hY85nfm/4RCvnF8J9Laf9nUKXuJa1Jvv3hvtbU/0Hwv3uhuD1jgR3c/Bmx3z3 ruCdjkVuV/BBx2K3PzjWsdQdDo53LHfvDj7pyHHvCz7vyHd3tSd0rHUfbJ/foXEfaV/UYXD3 ti/uKBHXaPfJ9qUdJvfp9uXhfGkXwdZrKQ7nUH93D/hyOza7B4N1HWal/VCPg0fA46Lp7iHs B24jMo9Gwi0PqRe7L7fndNS4r7Xnd9S7R9rXdixXxhP37XZNR5P7XruhY6fDTCMq6hFF3Q9p 7EKUo6uwIp7bq6htux+zGKWMV7DzDie18w6v0uZhw4gAoDMdDcTIPJ9GY/ekd7JDcD9TRGY7 9XTIC/t0DzCvP09XYWWU9nDtJR2dnuR2U8dee6MvNxp03ULcu+ZJbd/cccCT3m7u6PFktNeE L9G56zhM567jGGJLmhyNFetONtbrLDleuYswYjNiDrypNcN/OFTRmuk/Fr6A44nwBWZdOtFf cOyjXuPvD9las/3nYvW5/gvhS60F/kvhYRyHcVzvvxG+0arz3wrfat3ovxvuaeX9o9iJsflt rfA/Ct9trfJPhEdbbf6n4UfOtACBDV+l+zR6BP26QGK4prXRuy880bojkBK63moPpIWfOk/i WEOPEdLqCSyJJLYGA8siKeyYRvdyOLKYLB5bo4GsyBJJrj2BlZFlrfsD6kiWc1egMLKytTtQ BP4PBYw4dgdKI+rW9EB5pJAdi1qPBipDBa3HA5aIsfVUoDZSimNDpJT61wePWs8EmiPlrWcD uyKVrecDroil9WLAH6ltvRoIRxrEWYNcu6Gl64F9kebWm4GuyK7WjMDBiKv1TuCI9Zn9TqAX 5QeBkxE/na9ImB13K8rh1rHAaVsBjgM4jgcGweeTwFBkn7iLbn0euBzpEvXsSghcixx0zQ+M hDjXosDt6psY/V7I5loceBg54loaeAytjgUmZWqu5YFnkV5XTpCLnHTlB5Mjp11rg6mRAZcm mB4ZdBmCGZEhV0kwM3LZZQpmR665NgdzIyMuc7AgcttVE1wfucfWiFS6z4nmuo4F+WhBy2Cw Artx3C9g7cDOPLoe68WdqM51AuWNrj7v5Sgv7pdc/Z6xaIXrXFtTNB1txqI6Wh+tonukqI2W Q2NiG1Zfh/px1LN1h1pytFEsuy6A5g7XpWCVcNo1HLTBx/d7T0ftjj66N3CxvQG9N4l66F1A aMxeQH3H3Byrj9L66B5axspO2zxQrln2HaDT4LoVrBOuue6ifQba7AVvo2jfTfcJ0f2u/rZF 4BM7hEih41ywMVpRbfOORApZfTetjx6iu4joUbGN61Fwh7DLNRG0CyOup7TsJrRM75JkG8Yd xNPQDnhlefR4i6VtafSUZNW0fIaWoStFvb0q6BHK3YnBoHAbc+GJFrhTgsG/Oe1Oo3EGOkGc obuRaAbdjUTPsvJ5Vr7oXhKM0p1JcA92hlhBouuphUev2p8H9wth82CwW3isLNP20fW0PdpU 4H6t1L0seEiYVMYrWo5ep+UtB2fU07X+Jlvr77ByNrufuqcsu3qCR4V97qzg8RBH7wGj2fRu K5op7mHcK32N0QdudVtJdIzef0GizOCp0A53YfCMjXcXBU8hxhqDZ6PjiGx0n38Ge4YB7IRj O1h6/xhNZqvbcVZ+QstbKpklVLlLg+eFSXd58GL0AeL2LmFAXAXclcGr4ZrOok5jZ6lnf/uj cI1nT/uocNlZ3l6P1flke1OEOAfbd4Zsnsx2Z8cJV31QF3koHj3Z7d6OPk9uu9DR32Jp7+w4 5ylo39txwbO+/UDHJWmHf6S9p2NYjC2i73t07YdtvHSHK97bine1yjtW8V6V3aV6NrYfi7tX ZSu4h28/0XHDU9HeF2nwVLX3hw0eW/u5jlueuvYL4aeexvZL2KcxOp4d7cMddz329huRZtF/ RU+k43aMSnfT1ObXi5Y8I97GOOl4pIyQdO6E2/QeOZopysUiRrp4fy3GJdGX6QrSMUFXkI4J ydOZD3o8bfUdTz3B9ludRLQQT7T9bmeip7t9ojNFejrBnhh4DnludqaJTyc8R9ufQrfiswh2 1+85LpDOJZ5TQiJGZM8cRL2JTxXEfabnqpDVWai8o5TK4vMK5kGeM0JK5zLPWSGtM8tzXljS udJzUVjWqab/Q4S9G0YU74Zx7N2whGRjspnMZe+DLWXvg73J3gfLSnYme8nq5EDy35FC9q7X j9i7XhULVixQk8oF/2vBn4mNvZ+2jb2N9gF7AplFtISQjeSnJIPUkXaylnyCVEn2kf9ItpDD 5L+QreQYUjU5QU4RC/lHMkC2kSHye/IzcofcJx+TfyJjpJVMkinio1/LIR2q3ao95JSqS/V7 8j9UX6nukf+d0JSwnfwl4WjCfyNTCWcTfqWak3A54XPVvITRhD+rvpswOXeO6vtzs+b+QPVW 4u7Es6ofJA4m/kplTvx14q9VlsSLib9TWRP/kJSo+jBpXtIrqv+U9HrSMtXRpDeTAqpj8wLz otzceZ/M288tnPef5/Vwr8z7+3knuNfm/fd5l7hV8z6fd5P78byv5k1y78/7y/x07m/pbya5 0ILUBd/hwgvSFrzCRRfcXvBP3J6Un6f8PdeVMrFQxX26MGNhBvf5wqULl3PXF65YuIL7cmHu wlzuFlFBL03sN1HL6G+O+KXAciAHyCcZ/HI+h8/n1/Ia3sCX8CZ+M2/ma/h6vonfyTt5Ly+g 1Mnv5Q/wPfxh/hh/gt9J389ic0uSf5T8I8Il88k8e5Mtjcvlcgnh1nPriYrTcBrCcXpOT+Zw Ru5HJIE9VU3kyrgyksRt4baQZG4rZyHzuG3cNrKQq+M+IKnseeoibju3nXyXc3AO0GzlPOR7 7KnqK9B3FlmS+LvE35FXIdMIuc0kS6NvqZl2kzrTbtM+U5fpoOmIqdd0kk/nM0ynTQOmQdOQ 6bLpmmnEdHvTM9M900OcXTY9Nk2aJnmP6RkYSi5LLUsvyyjLLMsuyy0rKFtfpivbWMaXVZRV ldnK6soay3aU2cs8ZcGyaNmesv2mZ9MJ/cSUK6WKWLJLqbvsELCn7ChwvOxU2Zmys2XnkS6W XS27Xnaz7E7ZA7QYKxsve1L2nL4BlfRfoc3FM+yc/teFtWQnrFZD3LB5I7Pz92Dfp0gZLPwf STns+/fkffIQqYLp6CdJbyX9gGxO+qukvyJbklYlrSJVSXlJ+WRrkjpJTaqTCpMKiSVJk6Qh 1qSipCJiS/pxUin5aZI1yUa2JdUk1cBfVOQgPIlqeTmZS8ims8B5CRdZXrSpf9O5TRc2XcJx eNONTbc23d00uunRpolNT3nCJ/IpfBq/hF+26Ryfxa/k1XwhX8Qb+VK+nK/kLXwt38A387t4 F+/nw/xufh/fxR/kj/C9/En+ND+As0F+iL/MX+NH+Nv8Pf4h/5if5J+9x71Hf8OoSv442cHe CZw/Q1tupLXkt0jvkD8hFcLr75N1ZBRpfVJFUgXZkLQlaQvRJNUn1ZMfEhW8aD779fFKkkTI 1rWAhqgsNDcAJUSlv0tUhuY5BVvzLUu3rrUsZ7lc1lhythos+QwllrVbTRYNK9Nrmy0G1o6e y+3oudlSMoNOjcU0gyalQdvUWzbH8iaLOVa/01LDzuWy01LPyvJ1uQ/lR25Hr1H6NKeg1704 9yrGpWUBPHoV7eJB+8WD8qCEPF48ZN6UoLLLepHbyXxRXmTdyPzT+k6JV5pT7IWcStB+MmRa FJQ3KifND2Bsqh/an8ogjyHLTueL8kdp0HPa1iz1oW1l/clzpORRptNjaYrplrbrVOQyL4ct O1l+zOJkfSgtOZfH9saNJ/NO+9H5pfROWLxf698ZN26fRdjab+nces6ydwafStqz8UpzmRc5 NyjOKT/0XNYPlU3O98ad0z6UZ7m97Av0muwbFywHWG6IGyv/BfLL8ubHyS+fyzYkzy3Gqi4Q 6+LzWBs65iVLj3mZ5ZE5yzLxNfv4hrx6/be7PqNdvL6/RV6tU5zH69kQN1/fkDM+lPWQ+4W5 pJd4XVdvFPX0svylepTlUNo+HWfYcjjmazcsx7bespxgZTmX46fsy3ctfbFro5Z+ZiuPLOdm xOEJy4WtTy2XmM5ke8TYZmIZNidabsRkxDVziuWWOc1y17zEMsrq5PiAvuaVlqdmtZUwW5Rt Erm50JpoLrKmmI3WNCaL5FvmUusSiuo667PqRhtH21fvsCVX222p1R5bOrXX6qAtg9ktxqmO 2jKr99iyq/fbcmn/mK3ONscHFH4j1Vd3Y7zL1oNsnEPTY8SuH7UVVB+3rZ8RP0zfYJt743w7 3qbiY0p8XJJ1BDuqPmXTyXxXn7FtrD5r46vP2ypicUjmYW1cHFKsUeZy6zKK2Lon24l0bq60 Zpkt1pUMtVa1ucFaSMc3N1uLGHZZjYyOy1o6Y22ituC3lpvD1krl+mbebbWwNVeG1N68z1rL 6HRZG8wHrc0xe4yD+Yh1F4PMN7WhXquL8XTS6jeftoaZfqS12zxg3S3Tlv3HPGjdx2gNWbvo 3LL5VY5xzXqE2e2ItZfKS2U037aejNG8Zz2t1Jf5oXXA/Ng6aJ60DpmfWS9Xc9Zr1cnWkepU 6+3qdOu96ozNrupM68PqbOvjmA9Te5DnU5nHz3v+S/J4+1obl0v11Tx8oQL8K+1NXifk9VK5 FsWvSbDX6irJXmdrJ69DNLZWKfYKUl5tw34O8y3nbH9H85fJ+U2xlvofL8YSOY/pL36fEb/+ ybLR871xuby3iYtJM/IX8av01wOKeCDNeyz+xK+rL4ob8fNJacvjSz5M9b1Ls8vwtb0t1ctF W1V1rnWSgu1hKOR4L8cGCioztZOrNlvMhykthY/K/hfbG1N+5D0J1onq67Y66u/U79nYN22N 1P+U9Krv2HZ8be+t2HNXP7DZZ+yXpRgVG1+KRbG9M+V5zOZhfgk/rh63BeX7g+ontmhMbxKf 1c9te2Lzpdi7WhbZDs2wWbpGyTpCP0uCbb9lvq2b3sUn/yL5PxCyYA37/0JjC8YI/d+42f+2 z1fmziFT7DnKNvYc5WeJg4m/Vh1gT1C62ROUI+wJyjX2BOWP7AnKn+YF5qdzRvZcZIQ9F/mC PRf5kj0X+SN7LvJn+lxkTgZ9LjInhz4XmbOCPheZo6bPReaswR3tUXJ8+unBhhOkdMOJDX0b +jec23Bhw6UNwxtubLi14e6G0Q2PNkxseKohmkRNiiZNs0SzTJOlWalRawqRijRGTammXFOp sWhqNQ2aZs0ujUvj14Q1uzX7NF2ag5ojml7NSc1pzYBmUDOkuay5phlBPU0DSISlLJboWRcD LQP0SUByNX1TMu7e1oMZ8ZEA7mpPIm1g97ka8jtyDXey15G0qt+oLhFdwnDC58RAn1ehp4qY Sc20vOpLZPm6JeuWrctat3Kdel0h8iKUitYZ15WitnxdJZJlXe26BoZm9ei6Xetc6/w4q8XR vy6MVsvW1TIe68HjK+y3gATWQ//7Sw4Sh3vplWQOyUVKIPlkNZlL1pAC3F+/Q9aTeeBpI1lI SpBSSSnSdwiPtIiYkL5Lysn74PQnZDNJh82ZyWL2n+oyiBPpNeJHWkqCSK+Ty0jLIPvn5A1V qiqVvMn+F5d/WtY18+cUaA3aEq1Ju1lrVu/X1mjrtU3qKu1OrVPr1QraTnWjdq/2gLZHe1h7 TLtYe0Lbp+3XnlOPrdFoLzDkay9ph9XXtTe0t3C8qx1Gq1HtI/UDdbd2AlcaCy+qn2ifqscx jgFtzZSq9ph6bDrpErUXxKS+rr6uS9GlMSpyGhaTbomOaDt1y7SLdUcYrU7dSp1a+xT8GECV wqxtklInS8doAldOoAf8nAMXm9WH0OOpdpEuC9Je0jbpCnVFkP8CBSQygB+jrlS7GeXNunJd JaheYBRkCOCGohO8HVA/YAB1nUVXCy1NYMxhBjoaheGdIV0DpSuPwijKoDwAumbk9ehF0YRR JOh26VyYjxvanYWc9pZumc6vFXRh3W7dPjY+42F1L5NOOTag69Id1J4ovEilhUZpSQaVn/ak LQ36Asbb1zBbvb5At1vPzeBfAXYNPOvX647odfqNMQ4VmK2e1ul5Nl/D8aD1+go2yyIoH1Q3 Ev+6XnX3Go3upO40jhQD0NMFzNzgGhPOhnSXMZ/XtDW6Ed1t7SJYxk5mp8O6e5jDR7Chh7rH 6qPaUd0k06FZ9wwyQJP6ZH2qPl2fgRExh/pMfXZxV/FBfW7xkeLe4pPFp4sHigeLh4ovF18r thSPMEuUZpKOUHy7+B6FPrP4ofaG2INeK35cPMlsR9aorL0mXUpMKqVdSVoofmbkjMnGVGod xvQ1JerxwjFjBrPV3cZM1gO6WbN2TYm2f41G3W3oMRxeozEcMxxTH2Vp3HACMmQa+gz96qP6 bO3wO0PwtUbqb+rrhnOGC4ZLhmHDDe2w4RaiwWLoStDtUx9SH8KVuwYTvHmPYRRUHhkmDCfU Rw1PVz8rJuBtc3FicUpxGrCkeJl6DJTOgWp3cVbxSm1nsbq4UHu4uKjYWFy6Jqe4nF2phL5q ixuKm7WG4l3FrmJ/cRixh1pbyRqNvkpv09fpG+EPidQDcb5Db9d79EHkUf2emKUN6ffru/WH YHH71fsRg2pk79Eflb1If1x/Sn9Gfxa6TaNzot2pP6+/qL+qvw7rpLipv6N/oB9DnLsbA/Nt /bj+if65IcEwP95SEQ1HKejcGBYZFjMsNSyntmPIMeQzG5LLsCLDWoPGYDCUGEyGzTqLwWyo MdSD9z0xCwdFQ5NhJ/VKg9PQpO1DrKToF+3O4DUIhk7DXsMB7QT89imiJV/XRaOtMduYCxQU 7y7eZ1gESzZoTcb1iNqHDaZ3hopH1miQ8o06jDGqfqBLo9FYPW7caOSNFcYqzPp+7SgsZcxo M9YZoW/jDl2R0a4b0Y7q9xs9hgnUBI1R4x7jfsMtY7fxkPGoOoo4VrT6iPG48ZTxDKzkGIu5 F2h0Mp41nmf22s8ivRgpG1Ezpp0wXjReZWvhh/+OdlCNZCd7Zk7/2z1ZrSMqIH21BsmAVLK6 JOdizsXVJqTNSGakmtU1OXdy7qyuR6J1TasPrN65umdF04qm1U4kL5KA1Im0d/XeFZoVGozD JW9LrmX/a/Fd8mPodRN5D/uKMuwOEslfQ3sLoOef0v/1kDKaMs44Yn/rKjpPVHob8ovI6+YU FJ3VVxWdB85KoOWLwFUJ14GbUpleuyO1u6poR88fxNEZi6N5U2ozrsifKOqfS+dSWZsgleXr cp/rinY3Jfo3JYwrxlTKdTWuXTzGZ8HzODx4Qd8Hs2BsljFlnq4qdKOsP6/Iz0tyKnFVAaWM z6X2Mo/XpfPxuDFuSvP1QKJxU2or9zmr6CPPUXx/5Nr5Cj7H43KJF+0iKV+sn7aNs3Fjzzae zPsTqf/SWfrHjatdDuQA+XH8KmnPxuu4gpfZ8geK/Lok24vymxLPcnuZz+fTfGvXxskfr4d4 +ePljs+V/nVTGkuui8/PTo+pxcqq3QscmH1+/5/mL9L7t83j9fxN8/WSnMr90jxOx7KeXpa/ VA/x/Mv0DdNzry0BTFLZpOBDYcvazYo2ZlFP2hr9jDiMfVCVtkk/HTPkeLoTcCpkpDJ7AQHo lOrk+IC+2h7gsD7mizGfPAacAPpmzrG2XwR2V1W6XrG97iRwGhgQbVE3KNkkxsFeqEp3Gbgm ySfb6jf5oqKejVUkjaMYQ76uGwFux83pN9nmy2wtPqbMFpeeiHakuzfNt+4h8BiY1H89LsfH IcV6oT0nIrbuyTFCOtdeAC5JGAZuSOPfknBXojOq6CfbwiNgQj9jfdM+FddcGXJ7HZH0mQik KOSPgy5NRIxv6FG3RJqfZUCWZEPS2q1bOU1bllunlmgVinPL5lc5hlHUla5UlJfKqCtX0Kyc qS+dBagFGoBmYBfgAvxAGNgN7AO64ubkwSz5i+b9Rfm3jXEX9dNrx2xrz4vy2ex1tnaKdXnW /I403/H5y+R7WcyVY8lF/df1N1suy/SyXBGLZs2/7fzEx4MXrZnfdk17oBhf3vNBv5Y9+q/t bZmtPgMOimB7mOVx4yr3gaCv5/TTPvxkpo/K/hfbG4/rY3sSuk7ok0V/p35P2+tTRf9T0tOn T/MXT5vS1Wco5JLoK+OTHItie2fKc6YkK/xYn62P7XH1uQq9SXzqC2axE1zTb9TPtNmLCh3R fusBnb6K/u6J/S988u/nXlO1j/6vdJKiSiUGQvKSgVQgHcgAMgl5sw55NpAr4g0n8gJgPaAT z1ndRuSdUnt+Gq8KyCtE0LJ8nbbNq5Jym1RP0QjsAOyARzoPSuUosAfYD3RLbWSeqiTQsQ5J dI8Cx+N4r3oBThFD7uncgdzB3KHcy7nXckdyb+feQ3qY+zh3MvcZ0uPXGlHHUh6Xl5yXmpee l4Gzx3mZedmvVeTl5hXkrc/T5W3M45FX5FXl2fLq8hrzduRtXLYnz77k+ZLneZ7ch3nB3Iev NeZF86KoVSYP/a3n13/py77/kMC+/PB99oWHxewLD6+ybzssZV91eJ39xjeT/cY3j33JYQ37 hsNa9vWGd9jXGwrZdxvWs+82bGBfbND/m4+nUqWpxF/NDpBVhORmEfLKQRG5KwE1UDhdp4Sy PrdIyo0vaL9ErM8tjetXPn3OrhulcqVIk6Hw6+MBq1adWNUXl/oV5XOK8oUX1M+S6HcL2S+5 Cfu+h/hlj7nsl9zz2S+5F7IveyxhX/NYyr7j8Tr7gkcm+1LHcvaNjmz2XY4c9i2OFewrHCv/ v9FVkZP/l7dzAa+iuvb4nr1n5pyTnISQBBpjDBEQKCIiggIqvqKlCJQiUGopKi8BKSJQtIiK 1lJqBSmKD4r4QuVNygWKiAiIkSoqFxERERFoRIqIioIUk7vWb4YQah+29373m2/+s87aa6+9 9tqvtWfmnGMWH38GVDTJdK6z6djRoMVxWj41rfnp7x9RjgZNVbbBOdH5zfR/pq+GxOG/ldQ7 h/YB/Q9L+5h9Xqb11fYlU2xfthWmQXhTeJO5VGdPU5r5bOYqcxn/K1IgZ278/xynVuf3Jb/M JfZpu9wEdoXoKiRPkUjUBWN/5L9ivPy15HuEf7vQfzBtY9rXkJhlcvNX1bEliwsPlOzOX5C/ WI4tcszKX56/Kr88fz3HRnTo0+QM+4x9Rsqeb+cLZ6FdaKxdZBcZZ5fYJWLZc2JNIHVaZ5LU JkMse95kZr4g9uXIiJvgrePeXTdTW0qXUXZq/r84C/9hmpdfYDrnd5SjIr+iTh85+tfpDz2k zpC83Xm7lc4flD9IP2sa6VaO0ugo2VqytVrO/pNjnxxj5Cg9fmjeE3Qek6t5dBTesbNCJPtE eVS2ZF/JvrzdJZ+JfVbtI3+bksOxfVbSth6zqkYJlvzYU2c4+SqOWSF8tWuHHBUl1Ds/Kceg +DhWh8/yP6Md9V+ZDP9t5KWuSv3U2NTVqWtMmOqf6m+SqYGp60wqNTg12GSmbkjdYNKpEamR Jis1OnWTqfWt+7DnzfMO096jJW4xue2+/Vk8RFbIq+S85punpumZN1Q+d4+u8tmrdxfXzrnn 1N6fuzGva17H4vLc7nlda++vvV8+9ay9oXh77sbcFrndJbVnXs/io3ldcxsW7849KkeL3HRu i9r769ni8tobam8QOTk0n+YWfVviq/ByOwh1MHdL7sC83nJtcezM61pcXi9fcmwQvUdF7mgk V/PEtmPnN2ws3oKN3YUW+/I6igz2yVVsk7TymjYdt0c4sT1aT9Wb2zA61a7cgcXrizfmbqmX FM0HhdNdDilFcmypl507MHd7vRJtJTvRyhxtH7QPmpR92D5sMlI/Tv1YekCfVB/pAf1S/aQH DEkNM9mpG1M3mjz+myo/8/PMz813Mr/I/MIU8O9TJ/1bc1wvObvKOYxZrj7fMbmKdxnOj2e+ +siN4Y0Dz1xeQ66lGai/MVst58ls9Hvp0VbmI8qntGJK038JTtLTDT3dp6eH9PQEPT1FT8+g p2dKTx9tstCkdTDUIaAOp1G2/huRWh6V3QAbb8Zqzwyv5lnTO7a8plxktWc6xLz/xLJ/Vde/ b7dnHoj9PY+y+cdic2ds96oavNdjf9eUWx7bPTzm6e97/2/6jPaWgn9YgxBNBk0emiyaHJqS 6ND/4Q6+aQOlZKI/+5+04QNmWY02jHjLzcwafS/iDYu9UZM3JfbGMd7/lS++TW3+N976e77Q 3wheT1RQqL/7lZ02Jj2Fs3NWMr07vSDb53wivUCv2X7W+OyM9IKspFBRek52TlZZ1njhlWWV ySefoy5YlF0k3ErOpB4najymL0pBUw096d3yabdKa2mCUcllWfrNIJe6NnWt1Hl4Snpk6uep n/O/Yt9ybTKLaMH4yWbmDM7OWS2z2mS1zyoV7JjVNaunHL3l7Cu8llmDsoYJd5CkjsoakzVO zvFZ9wi/ZdYUjo7It0e25nGixmP6BsnnlmhSPT2F7imcNpI2RnTdk/WQcB7KmgHOzNL32Gyq b2rUf1rDjBWcnTOPpm3mNXIezVyVTqatHMl0th7CKc9My96pPLNc+fE1P10oeUr0kBzZ8VEY HZLnKBoHkiPSeExfueqKNAlmI30+lBVtVvI34oywkBoOSA36N9YPK/H/ZmapaBzqv7o7r6XX xqyRzw+dwG3iNWc2u/MEbrHXkDlx6AncfK/QjJPPPU/gZng5fM/yohO4xgtNd/nctAbXmi+J s/Orecdb71+P8Fz7hH1SJJ6yT8ssP9vOlsh6np0nOctsmfhmmV1mEuKb1SZp14qHUvYNu0Hm n432TZNl37JvmVp2i91icuxWu9XUtjvsDtG5y+6SOWd55nKZc56XqLyOROUvSN/Q2P534ETw 4W/Qv6tBT6lB31+DnhrTUnevu3eVxH7N4ro3htfJ66b/03ACr9TrKDz/BN753iXy6cAJvFae viGw7QReM6+lfFp3Aq+hp3vCxSfwijyNCx47gaet68n6XZOX9nJZwWvyfC9DPvWvyTNHPVtj zYh4B82RGmtGxNtnPquxZkS83WZvjT7RmH6u7W+Yuz3mbsvc7WTuHiqRwDCZwRN/2xKpId9o iSk1+PdB961B96nRWr+rQU/8Bj21hszUGnmn1tA5tUZZEX39CT0gorW+9XlDVPekUY2bHJeW 2kX7WcVFghn6C9P6z5kx94S5K5QoP9HSdA77hl3DQXIOEyyR66hwjNDjwkbheKHvCackmocP CX9GOFM4fSVtTlgWLuUYJJ+GiWQj4UVHX46aGo/rGxVOEQ2q6bgelRsnnKWSukJOPdbI8VC4 whyPx77t7LzTq0sN9d1YE1wip+x3AtnfBANjWuakYER8vTmmb4vPu7h2DroG7YOecvYWzJZr 32CQ0MOC/GCU0GOCcXIdL/x7gilCdZW0h4IZwUyOnvKpt0jmCy86unLU1HhcX190qabjelRu mHBmSuocOfUok2N8MOc/jLe/7c4y2+uO90bIfsMEErG4HcdP/RwUn3ge49c6LGdldObI3JOT EfFycuSsK6f01qDh8TPW2dlVuAp/tOAmN8fPETwsuE+OOX6GpIz17/Qz5JggxyS3yb/Iv99v 7rfy2+nh5kSSIts8OlTb32o8rg9doum4Hslb4fYJr52Ue5E/zR2W6+VyPOZf9H8We/5HvrfT xD8tjp/62e488YQv87c7R06ZJ530dtchPpXuIqeMcSe93u4/fupnSe9sh8hxRM5etrm9X3Cs 4HA5mttJdogswqFcJ7m0HLmSutYV2EWySq7kaB5LNtc7VRxD4qOmxmp9qks11dDTXH/7VTgr pdy1rlhwrH3FvuIa2rX/377n31eP1Igm9B5hsnJ4ZbqyPedwOdv/GyuL7uc8WlPn5HVVbarn aONPV6ySmd5bViW0V6FoG/m36bMaOGtU3psss5PQlRrxVMBZU7lJsBiZZpXDoUOVhD6oaCrC yeBB4fQJs7WsUPuVQY8JRyC/iZXDaK/TfatoN2B/4dSv1B3rA6QSbUSxhDdW0SZZdaJoYBq4 kdQ8aFZ17yB0FEVUkKsF/Mngeji9SCUi8dbAYT2LYhmPWNCWQu+AHgfeDTYCiS3tbnBFXGIT opIm2NwE/cWU2wRLmlAjxZnIE7/IqFNcpujuQtth6A7gHiSJasQvkZ21jN4xUc5wZF4BB6Jn MzT//+xaKfplYHOwE9qi+IWoqGoLNFFY1QR0HiVvSdUmrZ2idxC6F/RMsJmis9AjSJ0BrgCL SJ0HPQ6cBd4Pvws4HNwD3gVSlp+jaI4kikC9j3SEHrUu4iRL4K8Ax9GjDioiaYID0BF/Mpwm cIpAzVVB36PPS58crvWin08O8ENCR+JicBs6F4PbwmZKK9pGAX1Ac9lGYR9F5CvQUKF8Qf39 loqIT/+vCDerJwP6p3IEmykmWoCl2g/Bg1oLb7Lm9foEOiL6INMnkgmXKaJnDZJrYkkD3ozH otEX4WR8pXnHoq0AybGkFoRjFTXVlmqq2LkM3EEt1oHwo9KDe7T1w5mq2ddZ5YiiN1ZRfBLp 74/kOkWf+QTJxdKXPXsdvXQ2/t8GLo7p5tDNaaNozgnBMjjMLZW9Ja+p7KClVD7BTBXNVznM TsNBlekDv09VQ/qqzlEFYDG5ipnNiqMZrPJaHeNwdkQakKyIUC3x4j5DH6jA531ohT54fix0 gfpZ+sNBkBbHMwXIF+DVI3hvDf48ErWd9k+xQetbJdGVzIcqI6kRrTHzi7TpF/APwM+DrgA3 Msd+ABb7AwTPx9tNwHzQxFgIDgBDRsdi8AqQe7DB78D+yDRkBusKXq2WGNmdVe00yPOMzugu 2w3XtpYRPV0x8pKOGjdc0etTyXhX3yZL1P/hZMXgcvWwP51caUW/jfrEpaMVRHtOcE/EZ96b pXSwTn2b3KOpIWPW34m316klMtu8Lrir6lPBucxjRUp7zI32YJyq2BaZifRG9HvlcAz9h7VA ZF5n9lMNw8EeSM6EnhTPzMOY/2XFtWPVM+49neHt+sq7oFW+BzXNUTpgpnU3macEl0brJivC GkW3lHLZU/mZSA5SP7v36P9VtHgV/eEA816VzoeVm9T/lZ8xWo3M9F7Vp9q+dm54SPCTxFla 61D3YHODneqTCBO5imGJymiq+1j5dqly/Dvg74JjfG3Hcl92iraL31QxGAJfxo6rpxxvOXS2 om0ayQcXqYzse8Tzqs0Uy/5H5INBon+Vv1S80S+4W+jXlPbLgk6CExSDB1QyeFJp+2tFd1sg 0UuwGs4FiolMJH8A3/h/krzXo3O1f67Qzyrt3gt+K5wcJIeh8yaVT7xOrh9Q4ib0X+HGC17g fiNY391IXrHTBe4OwYuCiwWHOMUyJzZ7M9yTgoed7NHdh26l0Iso5Ut3hnD+BJa4n6se1x6O joJ+7k6x//fuVZFf4X8onJfcPMElbonkneZkrnMPuhmC77iFgj90utc3dgaoO2rjLRANfT2N 2ebap0XmJxJbes5T2t4Ip4Mt15ZV2psE/yEr+r07tBRvMjIz4L+hfJEUDfZeF9Erla+0bQt/ l10KCscvVhRa8+7ydMT9Atp4DVXee1Tb3fsz9G6h91u9PzTSag/50uo6e677SvBU7zHBwd7P BM/GqkZY1cP7gLwfoPMTaFlrbCtvr0ZKyvcmKd+72PrCz0DyEJjvvako0Zna8CYa5lOj3eRa DH8e/FlCt0Jba/uu4FsSP3rmJPxWR/uGX8b80z+4ULClb3WmordMpJVvVr6bp3SYoE8+SJ8c QOpUcDa5bqdPrtE+KT1K+Q2RfB36UfreQCf+8QP7R6HPcldqj9I52fVWy12fIBDc6SQ+d4+7 n+pc4bT1jfY9P3AyY3uMi2ALve4FcJL9XPBN+t579LGJyrfPuscF76G3r3KTRMNJqi14VFH6 oeIu8Ab4U7HhIdXmrVZ52R+pndOdjo417nnRkOUaaysourbuO0J/Dv0j8KjTWe5J94zgH9F5 q3uI0gX9lU5GqD3DvSCz1nSi0Byd/aoKwTYaP0tMIFg5D05zMIyj6weY8V4H32M9epH1ayTr dR+iLMXJUSykkaGsR0QIrL9jSS0A+2iU6I1NtCMiKoLTjqjpALHBJiK9dqxu46CLiL6QZNWr FSwk8ryMaLO1YtUFWK5xNfF81b5416M4Ag7xuaw0uppwB7KSeF7Ka0I0rjXlLqTs2XR14N0R 3UfrjIrkPKOxVh9kLkHzWdDLWXHYZzl2Cj4aHCuX7PfYEehaFrCbsK2RZ1/g0xYhOyx/S7SD UEm3tEp7Wkv09Abbgx+jh12b/yWcMdBL0Lw6ktdVzLGL8aZBb6LEaBf2qMZ1bpWibRetsyqT iHZbp7NWLojyoq0b+nfGkpIrUQ/O3mi/hvxmxaC4cozIP6PoT1e0H4GH6QnPKcp4Vkvu1AjH dtFUbz14jmrwC7V2/tpon6Xy7mN0bkdmpsYzjnZ0X4DngUQg/mnQafYadbB2ARqOYttV+Hmy YmKo1iLor+hvqSolQhBJO1r1+52U9i+hFeaB0U6tFZ58Bclz4GzS5+m2EVYtVbR3Q/8cHAN2 gL8buht9+2tFn7Hm2hOzWTgvEFntivZKYBKfhNJPVeYVepFGFF+jjRjPlivfdiC1lL6xJ9pX ovliJOdxP2EmnLq0V3f0l5O6Fn4hWAL/ajzWNRoFxJBzqr6UXMuwfyvlFpG3PXQ++CWl/CWW GY78cFpZ/VmLWgwAByI/A29PB7dSVm10XoyG3uAXkTba93U8z/MnbzxR30nRCKWUFbTOHizn XkTALiZ4DB/ujO1RSxy5+sK5Q/V49dG8AT0b8B53JAJGt8QEWvrTpEYj0SL/AqnRSN8RxZ/R WKPXvacYcl8lzFZ+uBA9PBOTXqF2bovaF/7JaPs4upOA5XMopRx+Z/QfrPwv42VcrXSyLOrJ IHdFwoNx6YJJZqfEaGweHc0qjMQVYF/t+eHmeDZ4lHbvzSjGw+zdXqFdvmYP+Oe4J6j+SaSO iJA4PI2vjlCvppTYwhbjJa01I1FmAK1pTpQK3YZU7m7Z+9E8DyzCM+eD65AsA6fQXkvg3wkN 3zJjhzNp2bXU4hCWMOtKrP6YYDpYqbO3YlWhoqxiHuvXY4r6v+hVX+ourGo59KeyJ9D9HXs3 6REqnwOWCWYo3zvdqxRMKZol0KeBncEu4CFS14HvwGkJXUu1SSmRzmuwYY+uQYnr1drE6YJP SNt6Vd9TFDu3g2ex6k2CXgo+Ce4BXwK3gG8j+SbYABwJXkfqU9D3QLOah89rjXyNY1OKZol6 xjsNTmewCzvizuAhZNaB73AXoiW0YR9tgkPo/AM03g7rGu8o9+Kq2KlVP8UrBnW3+ympO4lD 1sapl2uuSt7ziZH7mdr3BJeyS9J901BiyJcT0lJBT0V/l2LYVtGdAscoJiZCj1RMwnFw7BwQ +RA62E7qKrApuU4ndSr09ci8BacxnGFwPoKTAd0RegKpkUyk/2LKGoXm/Vg1HnuwKqSsYBJ0 H3K9Buc86EL4g+CcC30l/GfAh+H7aMZCfyX0LOjB4HNgQ2y4BewM512wBTrz0PMOeVsjgzb7 Boht/gGwFDwZybngX+F0A6eD2eiMWuQI9b0R/WeSegX0bFJfhfMVuBY8CZ1YEvSAk4KTD/2S Yibtm+oO0vopekKSUhKkJl5EA761ldDvg5FPHHws9C/BEuT9q0EkHRbaCujl5F2BJD53nyCJ ZkevqNqpPbNqbfQUgLx9daRLXx0C5ujMLJGO9Fu9yxf0VPR3KYZtFd0pcIxiYiL0SMUkHAfH zgGRD6FlFAyl5w9lLAyl/w+lzytnO3lXgU3ReTp5p0Jfj4a34DSGMwzOR3AyoDtCTyA1kolK vxhLRqF5PzaPx1psDikrmATdh1yvwTkPuhD+IDjnQl8J/xnwYfg+mrHQXwk9C3ow+BzYEBtu ATvDeRdsgc489LxD3tbIoM2+AWKbfwAsBU9Gci74VzjdwOlgNjqj9jpCfW9E/5mkXgE9m9RX 4XwFrgVPQieWBD2iNqWNQJmRhjL2hzKPDWV2GsrsNJQZTPkpNOSj7SXFTFo51V3pFH0pRb9K YlUi6kvPqEwmdOJFSqddbCX0+2DkTwef2vmXUAvk/atBJB21sxXQy8m7Aknay32CJJodPcr7 AXHCy8Q2PVmvdxEjtSVeOgUOdwUTE6FHKibhODg2ioiQD6GD7aSuApuS63RSp0Jfj8xbcBrD GQbnIzgZ0B2hJ5AayUT6L6asUWjej1XjsQerQsoKJkGzz/Vfg3MedCH8QXDOhb4S/jPgw/B9 NGOhvxJ6FvRgkL2S3xAbbgE7w3kXbIHOPPS8Q97WyKDNvgFim38ALAVPRnIu+Fc43cDpYDY6 oxY5Qn1vRP+ZpF4BPZvUV+F8BZ6ENmwIesBJwcmHfkkxk5ZNdQdp9xR9IIn+BKmJF9GAV20l 9Ptg5A0Hf1e0L8MG5P2rQSQdtllifrecvCuQxNvuEyTR7OgPEhlKrFJZV+/MS2S4mMhwMZHY IaLBQqLBPRqZKMecr5GhpH5GTLiCyG2C3meAk6EoMeFeYsK9xIR7iQn3EhPuJSbcS0y4l5hw LzHhXmJCpWtFkWdUit9JY2Z9tmVnKLq60BvAReDdit54UtvD2Qo9CWwKpx04C05a0W8Op5y8 lfok2vaSyN3z9kInlZZcirlwSkltBvZRdB0iPtgFbAe2iJ5rK7pW0Dvg79ZnavYwuCjRj2iq hdqj6PfEnt3KF5l+yKjk3Up748HJyDclb3vQgmlSK4ON4K1aC+iD0M00yvXqg81kL6t1uVXr pTKCt1JTpRvFeCsraR3dDWF5ERyjHHtjIPtfvxOetDwlbOb/UDVEFqJhBvR6pV036D9jz+Tw XaxSmQ3UcSupzRJdtGXhlJK6H7oIuhyZzWiYCWdWXJZE4PZzJMuxZEecGtFic9BWrXWXatTt c5fVHlYbXCv8VhfJvdRuRcxXD3ejLXJDjUxKsa1I9di2weO0hebyddR446mRr171CuhLBfSQ jvSctuoZiS5Exs4lb4+gG96+VXe7UdtRr0XIrwcP4ufI8oBynwJ30SI3hbJLtaf6lcpBZh6p ef7PKEXpIiSfU0l3ATIlit4k6KIwJXRUo0ZIvhjVTjX4UbvXQdvL8B8hb8fwe9iv91R7INOU 1Gehx6hOOxAPfx/v3YI3ytFjwE5gW2Q8pb0l4CxwE9iDvtQKmZ8ifwacXFKLgtWCpyjHKwAb UaPG3NOO8sJ3/Xx9Sr4PDaXwS6nFNPSMje1RDSPVfu9hsB44AewRPCQyN8c6VX4XWJ9c5fiw HJ1fw/8ukptply7I3EQ7JuDP5elPY+0Dwblga0X3mPYH5wWrBL9U2l8NfQupPRVtmlL24e05 WpZ7KRo72nP85vSiVtA50XxCf34fmXG0xfvMJFnwx0G3oKf9CnpFNAfCGQqnnT5ldt3ot6OV tr10FNj9jPqSaHal3PsY45ModyCjrwvYl7JmxNp0vJyDnlOV72zU/yn3YPAo470FNujTnEGU btFTRLnJaPagRj7euBuv9lVvJLEkMUNlQmxIWpUJn6NnzldMjlRO4jylgw/BJtRuF/aUoLkv ZXXRyDB5dzhe7xrps3LRqc9JC/HkVPr5CuafNVg1GztHo+Fces7t9IdPkFwMevBv1LHjmBlc R1aHumFj5p+b8YzeT9jHfGv8HzMWpjGuLyCq1/flGikt862gPRO8GU45q8zblPIWnD70wCLw PdVml+HtvcG9Um4nnsy2JVelcmQuvZe7GVr67ZS+V/VULbdbaWWx0B+lGNwJ/Tq4HM4c8AC1 WKHo9pB6m2KiL6krwXz4ncDpYA78y8F7kJ8FPYzUnWjroBGIuzbI11VPab8h/BL426MSoe9S GUuJ7ij0hWjbRupzYDdwFfgZOEnRbgW/r7n8kFKaK4Y+MkfhtIGeBz0lrK8eUAxWgvcphpmK iaex/wKlZR5WHIjMYPADOI/onldsUPy5ot3g/0JnTkU/B/4zimKP4k/AkcwkL2PDRDiGp4e7 fL1LOdKXGTLxYPSmkEZQ/gDKOpP99bnY7EFXQV9AKSPCs4TzNpL3kdoAO2sp2vuhe+LVVWh+ ktp9ivwu5C+H/pHe4wqnEiFcr3N18JbaGbQl9VGs7RGcJDKXwXlH5YPdOsuJ5Wr/dZT4R32+ JhzpvQHrpsx7X0u9vsbDPjafrfOkr+80e+Fd1GUdZd0f6FpfrNqCnYGn+xqeomaAX8AfoTLh YV0f/SPBlcrxJbINz1YMHo3sYQbe6Ibpmhh5WDmJHM0VFjGH71Ntth6SpyiGtTVy9qM1hXq5 UlrkDuQ/iTS7F6l1hvD/pLUQLxUQq3TC8tV6Bxufn0MrV6CnJOhAKyj9Y80VDkJnA+hZWm7w cvRmAq1De/lTaLU2Wgs3l7qUall+qdrgBsApptyRgXD8AMluYF3wBfBKRTuHHjUYyYGqweeO sd8Qnbcq7X0e6NPYzkrLDHNId2qMoyhvC8XgbV9mxeAu1Sme1ycdE5XvJlK7NhGtOt3dYGvK KnW6Pj6M5uvVBjsH7KCtaSdFHP9hrRGlXIaed9HQEw+fgp2GHlIalyit4EaBbbDkr8h/rWUF A3Q196dTYg9yjaQW2VhSGLyhuTRvuIs6HgEZm8GZtN0VtG93X/pYOFpb1v8K/lpwGJ5vzpP0 rtjWhjEyKpo3mPG20+e/Sw//oY4X/01mmL70kG3IP05qHegcRtBW6AHheh37gbbdDMamh+Qv GbMvUspRJH/I/LMOmR9D7wp/L6mLiTpe0JHov6StkLFYc6W6q0zyDMUUPS2xhP62VDH1smKy VDH8gNS5WDtC5TMWI9NdPSAaBBPM9kHT4Gp8In52WfSNu5Ujq4agW8AYZB2XPcuXzGO6znbV qCnYp76S8VjIaqXja6yiWxKUsr68SJyselrjeeOi3vIDvdehO9awDutFZ6Ut66yfr7R/AM4b aJgLTZzp7SbOvIFxNFHfcAu76JMIv4mfLZx7lWOvpsRPKHEQtrE6V+3kfa3DvP01g+eqdas+ 1PkfziLw7piv732NB7+C057UrdCTwKbk3Q+/L/Qs+Gk4vGPmVcLvpejthS6FHoRMLk/AeWbq NVM0G+H0Qk8HZLpET8l5CnYRkjPRMBlt7cAuyLdCvhEya3iK3RPO/XD2Rm+gkbd+LKl52yq6 EugiyjLQNyLTlifUnZBpBX832tZTYrfYkk+xcDheUk4lz8UWUeJedM7C/sloux89r/IOwO3k XRFpQ8ZHf0Hk//j9T7yEztLID9Bzo/f0sK0pmkM4eeDZ5KK+LqCUpyh3F5yboE8F85Asgv8c eAGl0MoebxW6F+NcSiPp4xlXh7wvo//GKtmp2UegR6OhB6lzwWfRMIbUgXDKkSnHBjxsPby3 BJwFboL/U/AMcuXCPwXboram1VxjMPJGByTxoetH3n1R3SnxZbAZeD2SSazi/RBzCH4O+FvK CqK6IHMzegpAA6d+1N/Qk6Ue8Hhia79L6mYkE/TGjeBO3nxorZLuMSz0sPxLvLoa+hZqEfVe RpO3D3oOqXvQkwPnfVJ3UOIMcBzWVkLvBxuBu+FvjmTI2yuW32T0ibDir6LeGPc35WyAbgEu AodS4kEsqQs2jWYM3igoBXuRdwVvIzSL30ZgFKP/MPRhUsfGdka04rR4vGzC5uHYryPLUusw ql00gyGTxMM+LXU3NO2VpPcmmOXCgdAtNDVklDnGkaQqhzknuI0RNIC6lMRz2qe6IyPvaPi8 G2MbYsM0/NAR7A7/XPi3Y/8n4GLsmcuTet708G6kZTtGGPmh6mnm2+nMFU8wi/KeIfY8h+Yz ozkzHvuKS6KxA/4EfAt8D/llWNsp7glPMPMoHiL19ng2Vvoaf7eUMtrXHeg1UQ/kqcFq7tau jp66GhM/Dc4wM7w5Jrh2xLV9TUm/X4wYarpfN2LA9abPoAF9R5ghQ68dNczcrN+B7NGttETf 2Kqq0n+qNCmTaWqbPJOln4SX1Pu1Jm1qmVyTb7Lls37vRVNMNeXpLwXFtDWhcaq3U/cOJfqL QqT7cVpgckydfv1+NtyMA8eD94APgDPAWf2HDr7OLBo4eNi1Zhm4cvCwwaPMWvCVwSNvGGo2 gJtF8FqzDdw59IZ+Q80ecP/PBvQfbA6CR0ZIsmdA3h8xx5H3W/R7n9QhOIFznPJMFpiqgZk1 MFkDs2tgAoz0ZNTAdIy1TUPTzLQy55tS08l0N71NfzPUjDJj+c2P+810M9OE+nqtmWCi7xvl Rlf+j0SuSf1lctnBJBsaff/CS70Sfc5ooSjXx7DXy1geX9dF15z86Jo3WeTl+p2GUb6CjtHn Av1WtegvWBTzy+Na5MpZn7Jr8QsInUxnY/jPV/v//6tqwRDtUV5928pd7vcyRaaducR0NN3M VaavGWJGmDHmTvHcZPOQeczMMmVmqVlpys3rZrPZbnabfeagOSpBYjqx1LjEvMT8xB+5Lkgs 47ow8SzXssRyuc4X6jmu8xMruC5IPM91YWIl17LEC8bKdZV8WiDSq7nOT6zhuiDxIteFibVc yxIvifSChHhWePMSL3Odn1jHdUHiT1wXJl7hWpZ4VaQXJtbLpzKRfo3r/MTrXBck3uC6UGYB vZYl/luky/7GI/r7+jebcd/KIxup+bzEm7FnNsWeeSv2zObYM29LOfMSW2L/vBP7ZWvsl3dj v2yLPfJe7JHtsUfejz2yI/bIB3hkZ+yRXbFHdsce+XPskYrYIx/ikT2xRz6KPbI39shfYo/s iz3y8b/wyANmhnnaLPiHHtkfe+ST2CMHYo98Gnvks9gjn+ORg7FHvoh7zJexZw7Fnjkce+Yr esyR2D9/jf1zNPbL17FfKmOPVEUekYkGjyS9yCNJG3kk6dQjST/ySDKIPJIMI48kE5FHksnI I8nUv+GRtWa92WS28bsCn5kjEgBmJDMijyQzI48k05FHklmRR5LZkUeStdQjyZzII8nakUeS uZFHknmRR5L5kUeSddQjybqRR5LfiTySLIh6TPKkyDPJwsgzyZO1xySLIv8kT4n9Uxz7p17s l9O0psmS2C+nxn6pH/ulQeyXhpFf/m2P7Kv2SKPYI41jjzSJPfLd2CNNY4+cjkeaxR45I/ZI 89gjZ8YeaRF75Cw80jL2yNmxR1rFHmkde+Sc2CPn4pE2sUfaxh5pF3vkvLjHnB975gJ6TPvY MxfGnrko9szFkWf0F2LVblagKbISpM0wWQKSshoUmUamhfir1HQxvdIbZaa/NPlDf0r6zZi6 L70Jqpvw3oqp+9KbhboMubdj6r70FiiVeyem7uNXghqa5qaNtEcn09NcI7P6KHObmZDeWl3S u9Ulbasu6b3qkrZXl/R+dUk7qkv64FhJ6b1CfS95qfD+ElP3pfdBXSa8j2Pqn1m0s9qiXdUW 7a626M/VFlVUW/RhtUV7qi36qNqi/dUWfVJt0YFqiz6ttkjGvtfcay4BTKHV+9MNbAPWYonc ss4mChglrTbOnPRNm800iS8WmGVmo/Tjw57+Mkldr8Rr6rXy2nsdvNEauWWuMZZf2vAzX6ym 1h6j7GtCPQT1ejX1RjW1oZr6byiNDtN2o9J2l+ADpL1ZLbWpmnoLykktsk2+3UwOtWSiVSum IvN2DZm6+v14+4B9yTiRfMBuqdb0TjW1tZp6t5raVk29V01tr6ber6Z2QAXS/vnS5+ubJlbW Z/uIlCXrs50h15dF4hG7TnCG/aA638643gk7yU6WNnrMPi3ys+w8k2EX2AWmli2zfzA59r/s YpNrl9rlot8RjeYbjeEuItbKiX+L83FJmGvnis7FIu/s8/Z5ic+kte39/C6A/tKitr3M9MSy GforcHaanWZOsdPtdFMsOl4w9fie/4V8z1/1D5NWqTmSxW73PdF5CKpDNfX9aqpjNXUFVMCv fBbIPqIhOT8j1+fkOIj0F0h+qTOJ/cweooayXoS/Dsdb3Rk4R7VdhtP7rGmXph4i4T4KT3Ha y72wXniq5vOuMnPcXlfimrhmrrlr6c5xd7q73Hg3wd3tJrnJ7n73gJvmZrgn3NNujpvnFrgy t8gtdcvdSrfGlbtX3Otuo9vstrrtbqerEF373H53wH0WNAmaBRcEFwYXB5cGlwXfC74fXBH8 ILgy+FHwk+DqoF9wXXB9cEMwMrgpuCW4Pbgj+GXwq+DXwW+C3wYTg3uD3wX3BVODB4OHg98H j+gzguCpYHYwP/hDsCT4Y7A8WBGsCtYG64L1wYZgY7ApeDvYFuwIdgd7gn3BgeBgcDg4GprQ D5NhOswJc8P8sCAsDIvDBuFpYePwu+Hp4RnhmeFZ4dlh67BteF54YXhxeGn40/DacEA4MnNR 5uLMpWmbDtMZ6ex0brpuujBdnK6fbpRukm6abpZukW6VbpM+P31RujTdId0p3TXdPd0r3Tt9 Tbp/elB6SHqo+Hi2SzoNLuq5enqfxjU21p3uTpdWOMOdIa19ljvLBK61a21Cd4e7wyTcL90v TdL9yv3KpNyv3a9NhvuN+43JdBPdRJN297p7TZa7T9ov2011U00t97B72OS4R9wjprZ73D1u ct1T7imT52a72SbfzXVzTR033803dd1Ct9B8x/3B/cEU8E3Ek9yz7llT6J53z5uT3Wq32hS5 l9xL5hT3p/9p77yjokj2QF0zPdXATJMcRECQJEimh4yCIkjOQURAyTkMDoiACUZgRQETJgxL FFRMi64BFeNVQFRMGBaVJCgoKCoChtdTrqx3rzf9cd+ed847c+ipqu6p6en+fV9XOKfAGsAU rBlrBopYC9YClLC72F2gjD3AHgAVrA1rA6pYO9ZOxWY31g3UsOfYc6CO9WF9YBr2EnsJNLAB bABoYq+x10CLigENoE3FgQ7QgRbQAujCmXAm0INW0AroQ2toDUg4B84BHGgH7YABdIAOwBA6 QSdgBN2gGzCGXtALmEBf6AtMoT/0B2ZwIVwIzAUr1oDpMBJGghkwluq7WMBEmAgsIQ/ywEyY ClPBLJgBM4AVXAFXgNkwE2YCa8iHfGADs2E2mANzYS6whavhamAH18A1wB7mw3zgAAthIXCE 6+F64AQ3wo3AGRbBIuACt8AtwFWw2g5wg8WwGLjDnXAn8IC74W7gCUtgCfASrM4DvGE1rAY+ sAbWgLmCVXWALzwKj4J58Ff4K/CjYrcOzIf1sB4EwIvwIgiEV+AVsAA2wSawEN6AN0AQbIEt IBjehrdBCBXZrSAUPoKPQBh8Ap+AcNgJO0EE7IE9IBL2wT4QBQfgAIiGQ3AIxMBhOAxi4Rgc A3HwC/wC4nEMx0ACLoQLgUSchbMAFxfHxUESLolLgkU4G2cDHj4JnwSScVlcFqTgCrgCWIyr 4CogFZ+KTwVLBKsvgTRcA9cA6bgWrgUycB1cByzF9XA9sAwncRIsxw1wA7ACN8KNwErcDDcD mfh0fDrIwmfiMwEft8KtwCrcGrcG2XggHghy8GA8GOTi4Xg4+Ann4TywmnWEdQTksWpZtWAN 6zjrOFhLUA9RkE9AAoICQoQQAYWEKCEK1hGShCRYT0wkJoINhCwhCzYSCoQC2EQoE8qgiFAj 1MBmYhoxDWwhNAlNsJXQJrTBNkKf0AfbCUPCEBQTpoQp2EHMIGaAncQsYhbYRdgQNmA3YU/Y g58JZ8IZlBDuhDsoJbwJb1BGzCPmgXIigAgAFUQQEQQqiTAiDOwhoogoUEXEEDGgmogj4sBe ivxnIAlTwbQwEjPC3mL52EZsG7YTK8EqsGrsKHYCO42dwy5hV7Fr2E3sDnYf+w17inVhvYJV hKAm9hZqQm1sLXSFnnAunA8XwBAYAWNgAlwEF8N0uByWwyq4Hx6CtfAk1IZn4QX4N9gIr2N3 qPd78CF8DDvgM/gCvoJv4Hs4Cj/jdBzHmbgY1gtdcWlMBZfH43ETTBkPwsPwKNYJgkEIEwQh QUgRMoQ8oURMJfQIA8KEmE7MJKwJO8KJcCO8CF/Cn1hIhBKRRCL1K7nIbACZjYacRkdOw5DT GMhdEFkLR74SQr4SRr4SQb5iIl+xkJcI5CVR5CUx5CVx5CUJ5CVJ5KUJyEts5CUp5KWJyEvS yEuTkJdkkJdkkZfkkJcmIyPJIyMpICNNQUZSRLZRQrZRRrZRQbZRRbaZimyjhmyjjmwzDdlG A9lGE9lGC9lGG9lGB9lGF3lAD3lAH3mARB7gIA8YIAMYIgMYIQOYIAOYIgOYIQOYIwNMRwaY gQxggQxgiQwwExlgFjKAFTLAbGQAa2QAG2SAOcgAtsgAdsgA9sgADsgAjsgATsgAzsgALsgA rsgAbsgA7lTrQBF4IJY9Eb9eiFlvxKwPYnYuItQXEToPEeqHCJ2PCPVHhAYgQgMRoQsQoQsR oUGIx2DEYwjiMRTxGIZ4DEc8RiAeIxGPUYjHaMRjDOIxFvEYh3iMRzwmIB4TEYNctI5fMqaM aWL6mCE2hK3FNmBbsR3Yz1g5VoXVYsexOqyeiq/LWBN2A7uNtWKPsCdYJ9YjiBiKwSGKQS2K QRfoAX2gHwyEwTAcRsN4mARTYBpcBsvgHrgPHoS/UG4/AbXgGXgeXoYNsBm7Tb3fhQ9gG2yH 3fA5fAlfw3dwBH7CaTjERXBRrAe64BMp+ibjcbgJ9KFSC/FQPBK2s45RjTUhgkWIE2xiEjGZ UCRUCV2CQxgT5oQlMZuwJRwJV8KTmEvMJxYQIUQEkUD9Vt7/J/G/JlHwRDZEPBohHo0Rj6aI RzPEoznicTricQbi0QLxaIl4nIl4nIV4tEI8zkY8WiMebRCPcxCPtohHO8SjPeLRAfHoiHh0 Qjw6Ix5dEI+uiEc3xKM74tED8eiJePRCT1VvRKUPonIuotIXUTkPPUn9EJvzEZv+iM0AxGYg YnMBYnMhYjMIsRmM2AxBbIYiNsMQm+GIzQjEZiRiMwqxGY3YjEFsxiI24xCb8YjNBMRmImKT i9hMQmwuQmzyqP4zjv4LaDAoAzXgV3AONII74DHoBW/ARzQOgvo+QIvqQZkAC+wdFc18bJja ZmMj1HY1NkZtC/HVgA4t8TRqOwvPoLaz8WXU1uYHNbxHNXxANYyiGj6iGvJQDemohqWohuWo Bqovhq8QHIFSK8dTmeOprPEUfzy1ajyVPZ7K+ZYS/O/T31NDKEX13injPAUAfoKfAZ1yA9Ur pfxAdVooRzCBMMV2JFpXcwL4unocg95D9fpqBKMQdMFMhBMaO1IHRmgkQIJ1jSKdqhF78S1F xYxgfKGZyg1Rfbk2dJwYtpLyArXv6zv2AvUXBT0MgPoKNOqTT771F8FdljhL7B/mJgTfLZh9 UgE61PW1+n0kogn1nK+Njyh0CVbWRKnu8dSzbyl8ieDof9kT/zr3RkOzbgSaX6IuFn0Qm8yI YkQzYn6fnaN9PQoAuSvUuxQqBXL1JF+uDhfRynXIHRalCdFL+HI1VFE1nUbjsEgRHGqLYXQ5 CMgQnKmN0xg0vimdxijxJj1Jne9K5MumZMoDC/RyB6EgmXq0xIMIkEL9zRS8SOXvKmNIxWWk hYKdex/TnLpBfHNMi1GSeXYJfyKf5DMuknxsfwlGp9HpbEPqFPO/vOmWmSKtrIJOOJ8UHT9b GqTOawk6TWwuA2fT53pz2KSkICPMZs4LSY6OSYxK4SZyJEgxQaEQW8grIjyBmxjOmULKC0qY 7ImuMWE8bjI3MkXJhstL4vJCUmKoTyiTioL9GFvmj/0+MQkRut4pIQlJSh42s8kpk0Q5xhyS NOWYcYxIQ38qa0pyxrNkVu3/5MxESZZgP4vNcHX38OJMI9W+Zqck2sQkRUfwlOZ42yrZertN NzYzMtW1MzXh6BrZUSemRqp+/UXyP/xF3hG81JiwCJJPU/n+CtMgwPg0cUCVM+l8Gg20c9dO WPIqkvs3lbf7fEbOftC0xN7mPDrm/Kr/vWeg/J7ADUWBNxYFnCw5/OGzbOd+Ruqga2t/4DuH ZdjCLRuuKluvzWiVXN+gvOY4Ju2ndLs3+eZYd8fzRIsFhQ1xkYbZ4RXDwToPhD4IBY2Nnqwb nPVCRVRbZp7zSrnuteubvDsfPI11Xv3CcnJsDBB/V2ih6A8PrcmYnVTRMKY40KnzaeOAbtDq EO1L8sL39u6Aik/7H4MNB1kzzDlmlbZ+rW5+wlzmhOpip1C/j6Xce/c7n+7jbdEXXrbvbpDO 6mttLcdkw8x27OKPRGcQfpXBl4tiwysGbBtHar09jqbrJc1xeqoJuKuU99IFy2GX82ki1BWB pAJ1SRXEGNIMqWeOe5POi1xI7nrz26GIK41Kk0OrwlEMKagyZEjpTClVow8PvOySmC+txlLH arUPXzSuFSd9BAcoMlxJZ9KxxL7ENtcmOiUlabq+fhgvXi/h233SC+Mm6CfFxQhK9ZN43PDF YSnJ+uO3UXAX0U2kolKPOoT0w4UpMCEUotEYLqQT6fAtT9JzLX7/giVLlvzoCyJ4/6LmFJIt OF81BkEyv1WJCf8JSEwQJWslc0SMTmRncZ3agnY/ejCmH1JuHXd/uaPj6NkFp9LOqfg5CZ8z 3AROd5QqN8yiN15J2jy6Pkpcn3DhZxdUCamzRT5zJ3e9tinbZP7bvS4f12Z+9eW8x2J3s0a2 +TUQGkcN43ZZ1ceHXpjWA06NxkfcWBi26/r79dNM2y/PvJMm5l0pLjvHZcHOS32n9tSGBbPb HSwuBiiK3Vi2TtwhNfkT1280n1+rEsEXMis6t2b4MLO8Zgrjon2kInM//TW3ZJXhO71glpHX cHfxaICyYTezSUa9Ndmw17a31eV0ntRFK7tf9wtH2DntjxPbNMfPnP8BZt5zYbdbxjpVGOSE WO/lnxQfzqM01k9p7M4fGqMxddIPtqYv3SN4LAlmyv+ksfT/iSxUSeWv0Mt9vz88Qsk7JiqR qvUPkZEmpBHH1MjAyFggMhPSfDxLZq36vyGy3w/H/snh/1ZMGz9yTerasZMa9+xaykJOVdqN hUnP1Buxv3Wl/+WV7UfUPRefeXhNHJeSrIiX3X0uyNUnr8vV435Bc2lI5RJ2sXzVS9GU4Srf 9F6NYe9bRzLCnr4r2nq8/4H9h3jLIbXVtaeZlxlVhctyHFLlQ+z2yV7KCF17/oLxvjE/7uUw 1iZHMmvy0icrl7kftU8ISpM/9OvwFrbXwMkWV/Pu5McObhZS+7aKml9b69ke2DJjsDDqBRm8 19V/l82ZR6qnzom3Okvs2uk66FmWva9rZ5XlvfIBpoxD9egRt8ptYs71g1JD4Ophh3sBn81a 8yR14SkbursK2KJ2YLlxYnb0fiUZM43P8mUSRyq/iSmYuiKBPwIV+85WeZ+ZnBfqzc8SrmzY cLIov0wmxNSI9BTslmRQvqiwI+f8+f4YkhxBFrK1DDnG5sbapBFpam5oTOpyTCJDdI3CTEjd UJPQSF3zcINQTlg4aWxuZvR3AmyS7G28dVTaj9ZgqmcoLX3SpZipSPp+FaA7SSmwhFJgru1/ JUAqlqlIpoI4iDTTNeToGlAPYKRA/+8U6EZSEvxOgTP/MwX+k7pTfuS7PdXeG57MoH0OWYD7 90UOEveHH2TfBp5iEi0VLZM0evINzbTv2/wNW7u4z3Dj270dUZ/ojyoV3GxsF0x27HzqLj24 Yt3gaslG/oGKsT17g95tDb669FL9sh0xLxX55183F6Y5h75rFZVv9Z5wb4vXgPEZ2cISq02l zEpd6Z0X7FKE+x69vV/paOIzQXIuVrtUesz+81j0x3O2gR2zJqQblg3wLz+2khV6NfEyc8d8 OHvvza27s3ZjAR+dOuX0YI2HvX7+aPr9KUof4JhmnIzUKI9xnFVVHN4vucDd1rFAU0537Oav It5BRkVPpS+dfJFs3DtvoL1P+qLMFbx2xo2Q7I5f5+QVleeSfHia8l3FV98xQwzV5VBrjfNn zQUhezBFNqrnbXqjE06TlcaoC8+RJSf9XaHI+H3h6JLaX70w9Q8veHG5lByoGxUTGRMWkhKh NHtxSjSXF5OSjmRGkmaGHAMDjrmhASUzg9+zBoLsX+nZf2ewX3jzA2XJ8HqF4mAlJevtqd7x Myff415rev0i7vNWaYmnT6anrJI7rl9i0P/l8QVrN9W7PPDIeB4zr/GgkuPbwegaV+eCyjPp zot22As9/KT2ZNfi1Tf2Jc9Z2Zr1aOjMG5OKhkDb3w4dsHyqEb1VrqqSl+z7elJR1yfjIl7J vdSgKUtsV+WYSd9MDoCnorwKKn+J0X8oy/q8MUWzI1Xfp02KnP/hVkHop6aGIDuOx8lp7C4r 8gZPU0JD5Yqpm2WJgeX65lIzPCfQzZevoQUNjju3uof13NINfW1r2VMjDN7ble5uCchX9+7N 2Of0xu6GqYXZ7qNLAisn7S5oklzna3G+RiQIu/3NYAupK+JPigvMwKbRvjAgiVFv39nrhyYR yEpBnMGgIjCXnICL/N41mShYTFBQMdX8HS+jC2r51MJxu62+ZnP7tuAZ1RzuHovT93VJ2fGD pOgMYgoTeIPFVHfGBsz+O5eJ1fCDrXynbe1WY3/Uamd6b57fVUF6fHWZI2lP2pbYlMzOnfWf u2x8N48KbYGCkMV8vrOYA0lJ+TuLmf03DTkBMDZfa/1Hf9FpYL75zJXqdof6uFZHDI7F9onp J1Y7DvcFLX7pMkO31eYA63PTc11Oueq1ZR7bMpUX1Fjqu5wqq/bd2ZlUd+Loh/RjjrzhmS9m r2xsJybFNFXuVNIdZXlc8m3W7XS6dTqpp1q0DKv0fXpijfO8N5utd74eGnjVmatoZHHCt3jQ WzVHq4Ivv6mjSEjhTYfbh/zSxl525Qa3q5NvreNt1lqUsEPug/yg972oaypfAhWay/LPTPsl Pcx3Tpln88jzcj/fth102zn6QW8fHrzDN0j8WLGZ3dUX07O3TOfsVW0JsYjC7Y/elY1OUBeJ MCt6naHoVNfS7tt7M22LTGCDsXRQ2yYFx0LdsweM5si/kpgoBxa0GQcoX992ReRVjli+e4IY 281ymabDTl7LUHzj+f6k8nkb5y0vKiiZ7ID5D98oj2KmVJq81NWfdPUZz3TCW+4Riyj+iNcv BYbSEVPE1rRJPA5/y71ud+f2pOfplxhHb4/pPFFcs7uGOcaeZnWga6R970q7OqFg+4hgK7fD 1v1uL2tT0+8zjUQS5DM5ih1iPm3dpWPd9hIHwrd98ZDWW1YPlTM6Ns+eFnNx07rNDQX3dygf FA3cOVh2MDd6FRGrW5caBxS2HHgjvfS99KqpJ1ffiK225+gX/9a5yLIVrAi1b7m+uuGEzKgY r+B8ueUhulXsl5gdWzokqiWOmnoI37toSfJxIcrfA9/8LR1thPwt/1f4mzSl2haUsY0NSXOB vzkoa0gKsn9dd//f2fvn0vgjTx45bNRaFqcn236mo/Pydk9VjwPX22Tcpoq/aqlqcTmQQipJ 9gnd9dk80bFosvXGg9sCSfWHIK536Zn+PCHxYTHGtsG8a4pNhlN/2vXmbZS8zselPasVXvS4 lZeeV/VuLBi1vSFyc+Ghm4etGWUje+I3RbVq/GbnfTj3ZreGnd60mlz3uV5EF6YzFrt+PZn4 09B8ctfointba3uVt674cIs9JHzcO8HrqO36nx2Ak32k5DTNyOqtXbfxLKeykewqSXspEf7P 2S/npn2mFSt4COcACdLu5fHHqnZ1l3R9fj40JW02Z8m1HU9mrNpUGkI/piB65OPwjl9o11Wc fb6MwIsXlFjf7L2fuiJV/8reP+wI/529Jb63N1UCyKxtX+WbtZ7MKvixfkvDKkL+5+HJl0g/ IF3qVFJ5wCXZ760QWy/i/xnr/0ddd+paS2xdczEQm2PS9vzogSWPrqd7utKO6KUsCkgg2Puv n1267oTenQll+QmhJ+bRm9yU2B7b2zKsOubVHfIrlm9XoOXW1KW9WXuzfwbtVcfZdUx4tcCh Y9B7Ypv7/o1dPQWxdzPPPyt6g+vnYM83aE1VSRp7/7Erbbue6LBQR9JpGbddhXFM3uYTpeY7 o3Qve4q9CA2cJb1trdKsDiE5g5FrHKdUjqU2j3X1RZLllxwm+8kFZkjhYOuJSX1ua1deNtZe WF7fd3o5y3rpHW+e8iuysS4tIjCANokpJXbrodS2dxYnI/1qdfV7RnJyr3n69u5KKoqvMXe5 8z69fp9MRqjmQNkOTSN8iVxog+WUBEX+IOuKTt0Nm9rukf7lxzorqlOMT7hdXqQ6QT2VZeGV v8jfzkbqdG3tYdeoqz9bf8lMV87cPZGM7LWesFDu6m4V5Zs2z7Wf1711uKZz575Bpou6lsPU IP8XvgN7Hm/f1TideyZrWgou+SpVuX4H//w0n1+PxFrmlaaGHE0sZe+p32c/OIH7aY1B/C+f n3hezVdtiDyzS+GnCeF0S91D89ed6FLuPna4Mexomg+8M1vPo6bocGXa/tqSLYvlHmz8ib1Y Rd+gWjixJCBfrb5kILtR+V7fFPeG4leOT4dpEdw81vKrMVefJb6o2nqdo/lF7HJA4H3XyaX3 R/V3z9KbKx3XwC7/xOEzKIQZVXQajaRw++vayz8eNvljELkk65KgufZ7/IpgHOL7EWrqBP7I sThi5Pd7Jwoag98+yOBQUmo7+T7gel95wpdQj8HDI86Wx/dl3CbDv/sIwfElfUq0MjWAK4gB YYAHuGiQOxKkACXgA9JBEpWLospDqFQ0SC9Vz5z6T2H1SU/iRvFCkqLT9f/0UGHwaSDhzQQZ 65+Gti8VjTicJuav+WB4oDx86o2c6p7Y9EuPN6k9ZBULfVZVE91X2T86NlI3pfFaQcb81bU8 7kTJCzdIiyViOxMvG+WcSxe70DS8x/M4u1kEO14e+nBMVt3mtPyl9Q/fu5puMZipubRfXdh/ S7lBAXjx87qpd0tMYkP2N01ah9mP1XcPn1wgLcUMgFw1h9YV+NkDg8f7lrTnM82bJFvtZZU0 nnlxDj5aqatVKNszeDc0c+tQI2vTp+Jmha5eydyWxvYadd+5Hf3ej9Y0Pr44K3W7alRlkcOK M/s3404f6o0V7s3KqbIMZ7LnXkvW1ZgtCa6HhYj4TE9p2pRl3XXhtG8+LOXTNUg+feof9wjn 8OkTqSJJFJWFf1kr4MczEt/F5AJS5vuQZP0xs0Kjvnx8D+SIo9kDA46RgYGhmYGZ/z9EpEhI 7aBEE3tnxsXfJKtj3d6bBxo4/8nXglhxdDO486ZhZcwdleNbJ6j0btHpxmfsNZNXyv+kW69+ oZ+1NMywT97W9WFkn9qTYbPCrI3uSp3Epr3P+/VPPTovc/5le9f0s3cdqm8VuImfVdWqzj06 crkv4LTNoey7vb+EPTtyONRWJFXlb1Vzl029uzJ0/nH6pKI9Z9IrgtzriYlLK+XfZxBDPzXc L1sRvqL9t2OMrnVGz0YiLQy/jMoGVJ2IDuvNd+uMDbjwRLn5/iGTDcF5Dv3HzQyCqnI088Pq 6EqfJdetXSYlIfHcszn8bFP383Mir8U4aySlhgISOuHHJWcHlvp3x/UWv1G7lCkh/3Zjw8vA K0fasp+JqAWtsthUZTYrL+vcw27wfwBaBER1DQplbmRzdHJlYW0NCmVuZG9iag0KMTUxMSAw IG9iag0KWyAwWyA3NzhdICAzWyAyNTBdICAxMVsgMzMzIDMzM10gIDE1WyAyNTAgMzMzIDI1 MCAyNzggNTAwIDUwMCA1MDAgNTAwIDUwMCA1MDAgNTAwXSAgMjhbIDUwMCAzMzNdICAzNlsg NzIyIDY2NyA3MjIgNzIyIDY2NyA2MTEgNzc4IDc3OCAzODldICA0NlsgNzc4IDY2NyA5NDQg NzIyIDc3OCA2MTFdICA1M1sgNzIyIDU1NiA2NjcgNzIyIDcyMiAxMDAwIDcyMiA3MjJdICA2 OFsgNTAwIDU1NiA0NDQgNTU2IDQ0NCAzMzMgNTAwIDU1NiAyNzggMzMzIDU1NiAyNzggODMz IDU1NiA1MDAgNTU2IDU1NiA0NDQgMzg5IDMzMyA1NTYgNTAwIDcyMiA1MDAgNTAwIDQ0NF0g IDE3N1sgNTAwXSBdIA0KZW5kb2JqDQoxNTEyIDAgb2JqDQpbIDI1MCAwIDAgMCAwIDAgMCAw IDMzMyAzMzMgMCAwIDI1MCAzMzMgMjUwIDI3OCA1MDAgNTAwIDUwMCA1MDAgNTAwIDUwMCA1 MDAgMCAwIDUwMCAzMzMgMCAwIDAgMCAwIDAgNzIyIDY2NyA3MjIgNzIyIDY2NyA2MTEgNzc4 IDc3OCAzODkgMCA3NzggNjY3IDk0NCA3MjIgNzc4IDYxMSAwIDcyMiA1NTYgNjY3IDcyMiA3 MjIgMTAwMCA3MjIgNzIyIDAgMCAwIDAgMCAwIDAgNTAwIDU1NiA0NDQgNTU2IDQ0NCAzMzMg NTAwIDU1NiAyNzggMzMzIDU1NiAyNzggODMzIDU1NiA1MDAgNTU2IDU1NiA0NDQgMzg5IDMz MyA1NTYgNTAwIDcyMiA1MDAgNTAwIDQ0NF0gDQplbmRvYmoNCjE1MTMgMCBvYmoNCjw8L0Zp bHRlci9GbGF0ZURlY29kZS9MZW5ndGggMjI0Pj4NCnN0cmVhbQ0KeJxdkMFqwzAMhu9+Ch3b Q3HSXUNgaxnksG4s2wM4tpIZFtkoziFvP9kLHUxgg/z/n/gtfemuHfkE+o2D7THB6MkxLmFl izDg5EnVFThv096V284mKi1wvy0J547GoJoG9LuIS+INDo8uDHhU+pUdsqcJDp+XXvp+jfEb Z6QElWpbcDjKoBcTb2ZG0AU7dU50n7aTMH+Ojy0inEtf/4axweESjUU2NKFqKqkWmmepViG5 f/pODaP9MpzdT7W4z1X9UNz7e+by9+6h7MosecoOSpAcwRPe1xRDzFQ+PwlJbysNCmVuZHN0 cmVhbQ0KZW5kb2JqDQoxNTE0IDAgb2JqDQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3Ro IDYwMTgzL0xlbmd0aDEgMjA2Mjk2Pj4NCnN0cmVhbQ0KeJzsnQl4VNXZx//n3jv7Pslkkswk M5PJAglJIAESQiCTDdCILAmYIEgCRAFF0ID7EmtxiQvWWqrUilst7pOANKAtVK074r5VZXNt q2i/Wvfc7z13Akprvib9mCeP5Pwu53+299z73jt3zpyXmcyAAUgmUdBeU3/U5IW36u+EbP4G SH1zck3tpMu/vuooSJFFgPTw5OnT6s+dffd6SNXDgHtSJ9fPqnq7qnkGpP01gO/6o+sbJi3L XaKn8W/SXtOPaaif0j3n+ueBYuq3tUyrLyxyjjq/g/ZlpP7m6dXHNHx77sRq2v8Iqo+dXTO1 cfq1Sz8DIhsA13ULl7WsuG/h8Cywn9N46dqFZ6wM3uJ/9a9gG2i8vuHEFScte+bspnVgv3iN 6qee1NK2Askw0f78tD/nSaecfeI/8rrOBrtvLrC0a/GiZWf9bv5a6ptZDlZpXNzasuj9puEG gF3Jj7+YGtzFCW9Q/VGqZy5etvKs2dNSaunYi4GRb57cevqpPRejAlLxM2Tz3inLF7Y8esGe hyClOOl6PbSs5awV7jZrDvV9QOODp7Ysa5099dNySGM2AeYpK5a3rVRzsRZSxTe8f8XprSuy Xpm6DezGKYDlD+CPha505umGD33zHeWfGX38MgG37svJ5fkL112Y+tX9357khNFKVZNmz6Hc MLHnWFQ78dX9X53jxMGeXiwu3mKbh1LIWoMEJwoxmx72e+i4HFm+jF0DHYy6dbpi2oEvlsvP 40TJbdRJFr0icZTdyFW346xqzQOiYWp1EBEEgwm6F3tmsGLDRNYVAVNVlfaerXuQnykUfa9L 0riDKSq9ihPwA0h34TyeDtbH4S6qV1K+lY9V2jCL0i5K5ZRmc5vetqmUWijV8zrZbjmwD+Ue nN5rN4fnutnqt1r+OE6kdJNuNm5V9mGDfhyW9R5zW8wOa2nMWv1duJ7sbqT+hdR2U+/YW6g8 l8aN5GXeZrgKKdRmoqSn9uH/em5Km7qn14+jKV2iANMpn0Spjo6ZQHkVpUvZ47iMPa7eSv2U 42I6/qW8nVJNbz6Frslq6q+gcZlUv5jKqeSHnnIHpRClYT90fQX/HfTYfTPYPnwfetwfG2wf BAKBQCAQHLmwDerWwfahv+h8Px5fBQKBYDBhULcaKTkh5k2BQCAQCAQCgUAgEAgEAoFAIBAI BAJB/OGfgx1sHwQCgeCHsc0zMMbu1msVPWUGvcGgJ8BFb6AG6JEFK+HGROj0q/xuP9y6dX6s 3r3WrQ1D9hh9OKe1vmTcu/PGnVaSOaZen+cueez2lx9dGAeX9f2wUeNwXMERAfvPJv+FqeA/ QLPMYLsgEAgEAkGfiFcpweFGhsw4OllmEq2DknV/s2zHF0YVRhjVHphgUr+FGWZSCyykVlhJ bbCR2jV1wE7qhIPURfoN3HCRJsBNmogEUg/p10hCIqkXHtJk0q+QAi+VU5FCZR9SSf2apsFH mg6/+iUCmgaRRhpCgDQDQdIw6RfIRIg0Cxmk2aSfIwdh0mHIJB2ObNJcTfOQo/4TIzCMNF/T AuSSFiKPdCTySUeRfoYiFJAWo5B0NEaq/8AYTcdiFGkJiklLMVr9H4zTtAxjSMdrWo6xpBNQ QjoRpaQVGKf+HRGUkVZiPGkVykmrST9FDSaQ1mIi6SRUqJ9gMiKkU1BJehSqSI/WtA7VpMeg hnQqJqn7caym0zCZdDqmkM7AUerHmKlpPY4mbUCd+hFmYSrpbE2Pw7GkjZim/g1NmE46h/Qj HI8ZVJ6LetJ5aCA9QdP5mKX+Fc2YTdqC40gXkP4FC9FEughzSFtxPOmJmKt+iJM0XYx5pEtw gvoBlqKZyidregpaSJdhAbWfioWkyzVdgUXq+zgNraSn4yTSNk1XYrH6HlZhCekZWEp6Jum7 OAsnk56NZaTn4FTSczU9D8tJz8cK0gtwmvoOLtS0HW2kF2El6U+wSt2Hi3EG6U81XY0z1b24 BGeRXoqzSS/DOaSX41x1DzpwHukVOJ9ariTdg6twAenVuJB0DS4ivYZ0N36Gn5Bei4tJf46f qrtwnaa/wGrStbiU9Je4jHqvJ92FG3A56Tp0qG/jV7iC9EZcSfprTW/C1aTrsYb0ZlxDegvp W7gVPyO9DdeS3o6fk/4G16lv4g78Qv0zfou1pBvwS9I7Nb0L15PejRtI78GvSO/V9D7cSHo/ fk0axU2knaRvoAvrSTfiZtJNuFV9HQ/gNvU1bNb0d7idtBu/Id2CO0i3avogNpA+hDvVV/F7 3EX6B0234W7S7biH9I+4l/Rh3Ef6CO5XX8GjiJL+CZ3qy3hM08fRRfoENqov4UlsIn0KD5A+ jc2kz+B3pDvQTfostpDu1PQ5bCV9Hg+RvoDfqy/iRdIX8BL+QPoytpG+gu3q83hV09fwMOnr eIT0DTxK+mdN38SfSN/CY6Rv43H1OezSdDeeVHdiD54i3YunSfdp+g6eIX0XO0jfw7Ok7+M5 9Vl8oOmHeJ70L3hB3YG/4kXSv2n6EV4i/RivqM9gP14l/UTTT/Ea6d/xOun/4A3Sf2j6Gd5U n8Y/8Rbp53ib9AvSp/AldpF+hd2kX2MP6Teafot96pPowTukKt4lFXN6/Of0T3/kc/pf+z2n f9jHnP7hv83pH/Qxp7//b3P6e/2Y0985OKeffsicvq+POX2fNqfv+7c5fa82p+/93py+V5vT 92pz+t7vzel7/m1O363N6bu1OX33j3BOf32Q5vSXxJwu5vQf3Zz+Y1+n/3jn9L7W6WJOF3P6 D8/pTxwBczpoxoWt2ZJkhCxLiva/NAplsiLL3737LfM3m/U0+fO3xI2QYNAbDUY9rxpgNhgN fFivraLXS5JOMsbKtBMz383hpz/7lOJwXMERwQBuDUP8vBhyMEvSYLsgEAgEAkGfiJWj4DBi TTZRfCUfGl8ZCHAxyHyRyTeTyWggS5BSEVrNws2gWfDPJNMwCs1k3mpQqKYz6XS6OLjcn1Wv HIfjCo4IBjCBGuPnxZBDsiYPtgsCgUAgEPSJWDkKDiO2VDOFVXIsDuLxlUJ8F18pfJFp4B9b oKjKTDefyWAxmXmV4iubwXQwvjL0xleGA/GVQvFVb/x1mBHxleD/wQBuDRFfHT4kW+pguyAQ CAQCQZ+IlaPgMOJIt1BI1fs+E88UnaIYCXAxKvyHhI2ULBazyUI3n9loMVvNoJoZDv5OFvgy NGZrNPL4ysbLOqoZKNKKxwq1P/sUzxJBHwzg1jDHz4shh+RIH2wXBAKBQCDoE7FyFBxGnEEr j69if9N0IL4yEfwdK5NJi68ouoLVSnEV3XwWk81itVC4RdGWw0Jm0CxMRrI1GRXZSPEVjTsQ X8Xj/StTP2zEs0TQByK+GhQkZ3CwXRAIBAKBoE+UwXZAcCThyrBRWKX77tcddHqd7rv4SscX md/FV7pD4isXKR92wJZCLB5f8bLeqJgovjLF4/2r/sRX8fi7L8ERwQAmUEv8vBhySK6MwXZB IBAIBII+EfGV4DCSkG2n+Eofe5/pQHxlIcDFouOLTAtssNttVgf0sFkcNgdVbVYbEmxWKx9m gdlitlj0FrOimBQnFS16s85s4pFWHFzuz6o3Ht9bKDgiGMAEao2fF0MOKSF7sF0QCAQCgaBP RHwlOIx4cp2I/Qo5wT/Opzfo9fynyLXfI7fq+SLTSvGVw2G3kSXsVpfdaYfDbrXDQ0EXH0YW FFJZ9RSOKWbFaaGagaIti8NsiUd81Z9Vr4ivBH0wgAnUFj8vhhyyJ3ewXRAIBAKBoE/EJ58E h5HkkW4Kq4yxOMhopBjLaDDYCHCxUcBl59EVXC6nI4HCFqctwZXghMtpd8HrcDr4MLKlcMtm sNt1eqs+0W6z241Wg93isljj8Q5Af1a9Ir4S9MEAJlBH/LwYcsjJIwfbBYFAIBAI+kTEV4LD iG9sIv/2v9hf8vOP8xlNRqODABcHBVxOWma6kZjodnlghNvhTfC4kOh2JsDvcrv4MG5rdzgM Dodeb9cn8XEmu9FhS7Da4/EOQH9WvSK+EvTBAG4NV/y8GHLIvrGD7YJAIBAIBH0iVo6Cw0ha WRLFV6ZYfGWmzGg2Gp0EuDiNfJHpRAI8ngS3FwYkOL0eL1UTEjxIT0hw82Hc1kG2TqfBYDek 8HFmh9Fp89hs9ji47OyHTTw+lyg4IhjABJoQPy+GHEpa2WC7IBAIBAJBn4j4SnAYCUaSYTJZ Yt8ZwTOTxWRyE+DiNvFFphseeL2exBQKWzxunzeFqp4EL4IeTyIf5uafHnS5zC63weA0+Nwu l8viNLkdXrsjHp+wcvfDRsRXgj4YwE8GJMbPiyGHEowMtgsCgUAgEPRJPH5RSDBkCVWl8Pgq 9ndSfcZXSUhOTkpMpbAlye1LTqVqkicZGd/FV27azO4D8ZXbbXHx+MrhcMbBZRFfCf4fDGAC 9cTPiyGHEqoabBcEAoFAIOgTEV8JDiNZR/thNltifyfFv47CbDWbPQS4eMyg2MqDFPh8Kd40 CltSPAFfGlVTvD5kp3i9fJgHiZ4ETyINM5gSDAE+zuo2e1w+l6s/sdBA6c+qV8RXgj4YwE+y JcfPiyGHLuvowXZBIBAIBII+iccvtgqGLLkNQQqr7LHP8dntFGPZrVYvAS5eCrhS4IUf6en+ 1BCs8HvD6SGq+lPTkevzp/Jh3Nbj9dq8XgrNzJl8nD2RdpKW5InHOwDeftiIXy4S9MEAQm9f /LwYcuhyGwbbBYFAIBAI+kT8z7zgMFIwNwybze7UKvzPpWwOmy2VAJdUG19kpiKAUCjgz6Sw JZCaFcqkasAfQkEg3c+HcVtvaqo9NdVs9pqz+TiH15bqDXm9/YmFBkpqP2xEfCXoA3P/TdPi 58WQQ18wd7BdEAgEAoGgTwawPBAI/hNFi7Jhtztjn+NzuQC7y273E+Dit/NFph8hZGaGAjmw I+QfnplD1VAgE0UUdPFh3DaFbP1+qznFOoyPc6XY/Snh5JSUOLjs74dNPL63UHBEMIAJNBg3 J4Ye+qJFg+2CQCAQCAR9YhlsBwRHEmNPGQ6HwxX7Jmo3hVkOt8ORToBLuoMvMtORiZyczFAu HMhMz8/JpWpmKAdjw+EQH8ZtfWSbnmaz+Wz5aTTO7XOk+XJSff15r2mgpPfDRvwyrKAPBjCB ZsTPiyGHYewpg+2CQCAQCAR9Ij75JDiMlK0cAaczIfZ3UgkUZjkTnM4gAS5BJ19kBpGD3Nyc cD6FLTnBwtx8quZk5qIsKzvMh3HbNLINBm22dNsoPi4hzRlMG+739ee9poES7IeNiK8EfTCA CTQrfl4MOQxlKwfbBYFAIBAI+sQ22A4IjiSqLymisCop9k1pSUkUYyUlJGQR4JJFAVcOLTPz MXJk/vDRSEB+VsnI0VTNHz4SVXn5w/kwbptBtllZDkeGYxwfl5SRkBUqDIZCcXC5P6veeHxv oeCIYAAfHc2LnxdDDmP1JYPtgkAgEAgEfSL+Z15wGKlbWwqPxxv7pjT+51KeFI8nlwCXXA8w ArkowtixRQVl8KAod8LYMqoW5Y9F3ahRBXwYt80m29xclyvbVcHHpWR7crPGZGbF4x2A3H7Y iF8uEvSBs/+mI+PlwxDEVLd2sF0QCAQCgaBPXIPtgOBIov6OifB6U2LflOb3A16/11tAgEuB ly8yC1CC8vKS4kp4UVJQW15J1ZLR5agvHVvMh3Hb3IKC5IICd0KeezIf58/1Fgwfn5szLA4u F/TDJh7fWyg4IhjABDomfl4MOcz1dwy2CwKBQCAQ9In45JPgMDK3u5Z/E3vsc3yBAJAaSE0t JsClOBUYi2JMQFXVhNIpSMWE4rqqKVSdMK4Kx0+cUMqHcduC4mLf6OJET2HiVBo2OlCQWpxf mZ+fHweXi/thI34ZVtAHCf03HR8/L4Yc1rndg+2CQCAQCAR9kjjYDgiOJBY9Uce/iT1Tq/A/ l/KH/P5SAlxK/UAZSlGNKVOqJxwLP6pL66ccS9XqiVOwkIIuPozbFpWWppWUJiUVJTXQsJJQ kb901ORRo0bFweXSftiIX4YV9MEAPjoaiZsTQw/boicG2wWBQCAQCPokabAdEBxhyL3JD6bV X6IaldgbUMD/zzkXQSqZkYHhKKZwawIqUInJOArTMQtzMB/n4Gbcy0ZJJfpIMEFVwb/jbxhG YEyvbTXZ1mEmjiPblkNt1X3/x7aQttuNr30T3X1Tr2/9hOlxcACTJED6VwM6ZUWnFS1WwOF0 uRMSPUlITkn1+dO4/xnIRHbOsOG5dB4FhSNHFRVjzNiSUpSNL9eCyirU1E6aPOWoo+uOmXrs tOkzZtY3zJp9XGPTnOPnzvvvH4sfRNa0sz+mL3+v/KN99CLVsxoqIxUTJ5SPLxtXWjJmdHHR qJGFBfkj8nKHD8vJzsoMZ4SCgfQ0vy81Jdmb5ElMcLucDrvNajGbjAa9TpElhhG14UnNwWh2 c1TJDk+Zks/r4RZqaPleQ3M0SE2TDrWJBps1s+ChlhGyPPFfLCMxy8hBS+YMlqM8f0SwNhyM 7qgJB7vZnBmNVL6qJtwUjH6kladq5Wu0so3KoRANCNYmL64JRllzsDY66YzFHbXNNbS7Tou5 Olzdas4fgU6zhYoWKkW94RWdzDuRaQXJW1vWKcFoI6eiqeGa2mhKuIZ7EJWzalsWRafPaKyt 8YVCTfkjoqx6YXhBFOGqqCNPM0G1dpiovjpq0A4TXMLPBlcEO0ds77iy24kFzXnWReFFLXMb o3JLEz+GK4+OWxP1nvNO8ndV2rm7uvHS7/f65I7a5CVBXu3ouDQYvXlG4/d7Q1ybmmgfNFbK mtTcMYkOfSVdxLr6IB1NWt3UGGWr6ZBBfib8rGLn1xqu5S3NS4NRU7gqvLhjaTM9NKkdUcw8 O9SVmhrZou5Gam2wo6ExHIpW+MJNLTX+zkR0zDx7Y0okmHJoT/6ITqcrdmE77Y7egtX2/ULr wT6tpJnzUt3Mg1eWcY/CR9ENEQ0uDJInjWE6p1IuraXoWFhKZkQTo1HRRfSILImaqps7nGW8 nY+P6rKc4WDHZ6A7IPzR3w5taelt0Wc5PwMv8vvk4K1G/QfK0by8aG4uv0UM1fSYko8TtfqY /BFndEvh8ApnkDK6fJhO17alqayQLn8oxB/gK7ojWECVaPuMxlg9iAW+LkQK85qiUjPv2X6g xzOL97Qf6Dk4vDlMd/Im7cnuiRqzD/5zOJMSaheXRVnS/9HdGuuvqw/XzZjTGKztaO69tnUN h9Ri/aUH+3pL0YTqRtkn9ZYkn6z10k0596AxrzRao0oW/dNrN/WiboOR7kqthQUnRZ3NU2La ZA6F+jmoW/2Ej9Ky74b1uhktyzu0Pv6Q+iHuWTtkcljJluoa5nR0mA/po1stdsCjejO649HQ GApWRzGLnplZ9K9b3V7KU5MvGqFLVs0N6P6LNfVWDzH09ZabCH535o+YRBNdR8ekcHBSR3NH S7faviAcdIY7tkgPSw93rKhtPnDjdKtbr/BFJ13ZRNdqMSujJ4WEqs4wu2xGZ4RdVj+ncYuT XkUua2jskphU3VzV1JlJfY1bgjS5a60Sb+WNvBLkFdQxOskuyajZ+7ZEgHatV9EatPrCbgat zXigjWFhtxRrcx5ok6hNibVFtDYOn2OqGxq/f/doT8mmfGALGuRhG7OTA889JA/HbkqSPLwr Ly2wRc6R07rGByLdcnij21PkqMyXg3TMQk2DpMsp3U9pm8xfZefL6dTuJL2QUjul+ylto/Qc JVqTkPLeIKXllNZT2s175DTZ3xUMOCtz5BQam0Ln4JC92E9JpSQjQFpIaRql+ZTWUFpPSa/Z 8ZbllC6ktI3SJ1pPRPZ2XVtMvnu7rtCyjUtPKdKqLbHq3HladeNxTbF86oxYXnNUzKwsZjZq dKy5oCqW54yI5e6sonaem21F2yuT5CQ6ySRyfAUpkx6FgzEEcLPsQZSSJOt7WyKye2NmdtH6 bbICJksywyIE1O0y67K5iirNkirthxsB6WPpo1iP9NFGu6tofeXR0l7cT2kbJVnaS9seaQ8u lHbza05aQWk9pW2UdlLaT0kv7aZtF21vS2/DIb2FQkoVlOZTWk9pG6X9lAzSW6RO6U0+P2nK yxWUJOlNUqf0ZzqtP5M6pDeo9Ib0Brn2YlfJuKItWiGvsLcQyOoteH29BXdSUbf0QteXw+mO yqZHmu6oB+UMTESxnNGVNSrQLSd3lS8JdEv7NgbzAjdXjpReQpQSX7i+REd+CUFK0yk1U1pB SU+lV6j0CtopXUPpZkpRSnSXkTopBaWnKD1D6RWMpBShNJ2SUXquiw7TLe3syq4KVCZJz0qP w0tXfIf0hJY/Iz2m5U9Lf9LyJylPp/wp6bGu9AAqLdQPGuOk3El5IfXrpD9uzHQH1EqXtI2u XYC0kFIFpWmU5lNaQ0kvbZMyuhYF3LSTB/GUEWTZhQ+1/A7cakRkaSCSXU03YJBLdtkEKpGs D67PliLZa2+gKpfsq6+lEpfsn15JJS7Z51xEJS7Zp5xBJS7Zi5ZSiUv2nPlU4pI9rYFKJN3S Tb/LzAmUTDuZBSsd0pl0lc6kq3QmXaUzoUhn8g1fKty3X3Xl5tIVWxfJG54baN/K2h9i7TNZ +62svZW1X8DaL2Lt5az9BNaex9r9rD2dtUdY+4OslC5FO4tsOqQ6LpLM2p9i7fey9jbWns3a s1h7JmsPspJItxTqOqpYy2q1bGMlf9JRPmEizT4OKURXNET3fIjmhG2kOympWi1CRsGMmHFK Os8zNuZWxOoFZUXLK6dIj9DAR+hheAS7KCn0AD1Ct9EjtJNHaAcO0gpK8yltp7SfkkpJT9YZ 5PgaTR2khZQqKM2ndCGl/ZT0mjv7KUlY3uvi/Zpjhb1OT+M16RHaMmgLSaFImtPvzHNOkdf4 mSOdTUtX06US7TsW4XYZXd3Mtvlz2xef22CqNElXS2uQRg/ENb35mq4v0wLd7Pqu7AcDlR72 S6QrdNexcchmWZSXok2rj4HfyPPR8Et3U17U5Z9Nwxxd2SMCW5mdj9oc+NL/TuBDf7dExQ/8 DwZeDXYrrCvwMrXcvTnwkv/ywJOF3UZqeSi7m1G2NaiZbvGXBu59SjO9iDrWdQUu4NnmwPn+ yYGT/VpHa6zjhDaqRRyBmdlzAlNofzX+BYFIG+1zc6DCf0KgPGY1ho/ZHBhJLuTFirnk7HC/ dtBwurbDWSXdbHFkhGGtodEwzTDWUGQYYQgZAoY0g8+QaHQbnUa70Wo0G41GvVExSkYYE7vV 3ZE8HvEm6p080ytcFa3slLjy4JhPeswo4WhEE+Q6qa6+itVFty9E3YJg9J/14W5mptWKLlzF ou461DVURUvz6roN6sxoSV5d1DD9+MZOxq5uotaodBm9Sjc0djOVN6328bhgCxhzrb7Kx/Nh q69qakJy0hkVyRXuia5xk2p+QJp7Ne87kg8pp0XX1tU3Ru9Ka4oW8YKa1lQX/TkPHLawv7NP amu2sE951tS4RZ7I/l47k7fLE2uamuq62WzNDkH2KdnRHfOpZmekF2Zuh6AxPWa3LmaXRePJ LpNnZGcyIUuzyzKZNDuFcbvOtszams7MTM3GG0SbZtPmDX7f5qksssnK0myS2vGUZvNUUju3 iU7UTPx+Mkn3ayYsFX7NxM9SNZPZ35kU9ppcftDkcu1IMvvOxh+zse0+YGPbTTZ5/aW1Ki+P bRzftHAuD7qaw7WtlJqjV5yxODnaviAY7FzY1BuNZTcvWLiY5y2t0aZwa010Ybgm2Dl+7g90 z+Xd48M1nZhb29DYOTfSWtM1PjK+NtxS07Rx8vTRJYcc6/KDxxo9/Qd2Np3vbDQ/1uSSH+gu 4d2T+bFK+LFK+LEmRyZrx4J2j09v7DSiqonW+Fq+UbKY6X5t9oWaqpKcKyZqN+/4UPIFvq20 WtkAC4U8VgqfbZR4V35lfiXvoucU77LzyLq3K/mC8SHfVraht8tJza5wFfJWrmpbheTaJTWx f20ENa1cxS94TPPa+oL6ailIrmlbCdRFc+vrohW0mu00GKi1mZ9StOxAm8VSS2v7WGMBNZbx Rlk+aMjbynmbydRr+O+P/6revJo/C9qlBzeySDpbibYmOZpe1yDRVNDQG8JspbUUf3loa6IT bGN5rO3APnrdzstDrA5+zgfSylW9pd5rsbI3j42kIW0HLslB+MXKO3jFVtIOoduKFEqput8i Rcnmn11X36f0Ac97lqgf8H6eS3+hia67NwEbcC9bgnuxDQ+zT2jU/RQIbAJfAtXgRpyH63Ap vazNoZbLMZM2HbVfx1LUTSjELfTCdgt2kO1xuABbkcSS1Q9xIVbLL9Ko1bAhA5WYjuW4ih2j rsJc7FIuRgmOwalYwdrVRvVq9Vr1dvwGW+Qn1G9hQSoW0rZD/Vj3mvom8mnEL3ADdrFrTQ8g QkdpJ8tf43Ssk+cpTD1J/Yo8COFM8kHBVOxg26U82nsr3mfJ7Dy5mvZymxpVHyUrP+ZhMdZh KxvDJksh3Vx1qroDSXSMs2ivN6ALm2nrxu/xBrPqPlFvVz9BCkbgKDqfTXiWbZd7vr2op4Ku mI6u0nCMo57l+AMex3MszP4oLddZdUW6iO4c9SUkYhRmkbe/pZHvsc+lC2i7UH5MmaRWwU7X 5Wf8auNP2MNSWSGbxmZLw6Xl0k3y6TDSEUfRtghL6HpfT3t/m26jzZJV2infptytfK1P69mt 2ukRycav8Gv8kdnoTIOsjf2EvcL2SdXSfOlX0l75OuVO5QVDC531CViGq3A3PmduVspmsOPZ YnYeu5T9jN3AdrDn2AdSpdQgnSztlxfLp8m/V6poq1falIt1l+iu0H/Q09jzaM/zPZ+rReol mEH3w0Xk/S9wE53ZFuzE67Ttwl6mYxZmpy3IQmwWO5e2C9hV7Fa2gd3JNtFRnmN72Yf0kvQZ +1qiV1pJL/lo8cOXQGHpdFphXifdKO2k7Tnpb9KXslfOkPPkMXK53CQvJ68ula+h7QF5j5Kq 7FRUus5FurW69boNurt1D+s+0VsNP6HX+Ge+ue3b3G/f7kHPZT1re7p6Nql74KHHkF49KOAq J+9baFtKj/dauuPux4vMStculeWyiewYujLz2VJ2GjuLruRP2Tr2G833+9hDdJVeZfvJZ5vk 13wukMZIVdI02k6QWqXTaDF2rbRJekX6SjbIFtkhe+RcebI8T26VV8pny2vlqPyM/Ja8V/6n /A1tqmJWAkqGkq3kKZOV+coq5SblfeV93Vzd07p39Wb9Mv0l+m79p7SqmWiYbphhmGdYY9hs eMnYTHfnI3gAv/v+/xGz3fJFcq38AK6WipUUCmGepft5PhbJUyW6U6UN7DLpfLZJytSdpR8v jWfH4hMlm671Y9J66Z/SeHkqq2P1WCr1fv5Ln6jcRVm58gg+Uh6ic3uW9nyW3soukPbrreii NdI4Ouaf5JFKnvw03pB3MYNyC/6smJmXfST9Vp5Od8HvlYm6RoTkG3GffBo7Hw9ItYD5a+OV dB8fy+6ieaGBFbEvZJWWwcfSXVQi78PFOFl6DR/R8/gy/JItUk7C1Shm5+F93EHPiuG6U/W5 eg97UlqidEgJbBMk5U46u3Esk8m6RPyUzZPX6fdLr2MVdipmvC3fQ97vlO6Tpyqf6GayxfQM OB+X4DT1Ipyta1ReYCdBZrORpeym2e08uUgJUX4hzSpzaU7bTM/urTQPVMpTqSWZ7pxj6L6Y RTPEOtqup3lCoTtoCT3Hj6NZ7Fls0jdI3ThJZ2c06wDK0z0zMUe9AzeoJ+FU9Vrk03xwqXoe 7XED3sUabGCre87FCgolX6fn9jG6SdJO3SQ1X+qQXpfqpbWHPr50tbNYMv5C231Umah7EB3K q6hHhXql+jLd3cNohr0BC2jB+g6d5cd0hCnydhT3HCt1qpPkFXS+uzBD/a0aYGYsVk/BNDyE 3xh0aDHk0WMcZS/Q+Z6LVmmmulJu7VlC12ENXYUIXa1VNP9cTqthbcLT8bdfDEDIFXJlkdDK Gd8E5e3fRHT4GkFlO39vKUrerqFXGR1MOL9Tz/+jqUuCrlu6P2IxluvNpjKlXF/GWOE7376D im/fq/B1+rXebOqVoDdbnpZNZbpSpRylZCeXS1KQMfa02Wy5KHTL9bTyPdb5j3nlU50fOd+h Xbzj/BgVFVOd375HK9+NOlqYMGe5s7ypadTIBNlV7JLlMcWe90t2jb5tJztFNrHange/+bzn uh07uK8nyBulMzVfLVi1hV4iv9iYkTVa161+EcnIHj7a8r+UfQt8VNW1/t77vJ9zzpn3TDI5 k8ckcXgEEhIGhnKsqPURwQePICMo4ANEQVALgqAiKGKN9vqsVXxVUFEkAUKglVKuz1Jt8eKr KvUiom0sVf7UCpn8194zE6C99/frTTh7rzlnMmfvvb611rfW2QmiCosEuZMgiNrXiixzHEGS nFV9yjKFKMAUvKDha1I+wRyfJdgz7CYc1ec9G6FDTGdbe7NWbzqX7c2i0Vk6qN4sNNh2Mhl6 DGnA6bSfDo9rZG370N0DPx6yu4HrwOFDh/JfFlqajizOn0+mCXuQhUZ5aq0PchVHki2rCzd2 oMdNGXrPlh43L0Gcxbkcx71g/3x1JG0dyfUe6bGO9MDtR2fhdjmcInZTS3NLoyjBd9DC+NP7 f9c6efstC2tHVaVxOn/+dvwdNr/+sPfoO22rHtj2y3xF3j3p/jM9vY7UWURRLYwchY5AfZzD 0Heix7lLzK6+Q52WRcaD8F2nz8eE/Z2GwYS/eD5VJeN9ZoVJzBec4hgpkfmncfqrkN1Um4Lv xlA4FLRI7y2wVpWjahfdsn1y69v58/E+/KftWx9YNfkPR3s//Dr/TV6GUT6X/wTfBhxARedt UgGoz4tdeJyXYhDCKs4ilXDwAonDpRFjwT9eC9a+BnS/RqOwAlAd3m/1gIbQaNoCvnp7qLKG NDSCdgKiVNvc3LJ597iJQzPN3O7d8+5KtUYvvRjueyruIrPIHLCNAV50LpnLkVbcCresQiQm zIU3RPm5d1NM7M9ZB9Dg1p4hDWgeTHJYMngqqcddmzZRHXdDsxJGz6EaL0LoYLOFIb6E+DVw fQ3PRnkkl4N16ikMqns3xTGm3I5kQD8cunAr4vo+2RjIkK6+Tzw3kHmQw4R7nHuJI9wNCAfo I2AM71O5g4gcBL2tg5vzHYvgk7PW4R6roIOVwqB0bom1i+oinQ7iRozXtecnRYW/fB+gdjO+ 7wveFnYAHsrx+JcJtXFPjSV4IZAwjDAYxkGmeyp4Uap8xUY6PYNCug6tTs+hwaD43dDshvnQ GcUL3uLkTzoMnyTSTzoAKGLC115U00T6kRY9gyxdpy091/+Rxz+zU3SjVhnAciNxtV/17UMh OBw4fH37vMt4cSW5Q7vD94YpKJIWIaf7zw2eHT0tfpF/SnBK9IL4bGm2Nt1/dXB2dFp8IblR vEFb5FspPiQ9YL0R+ZDsFfdqH/li/cOdr3jJqqYGBSPFAv/QXmHPR9RJmHDWRbQY35547a4C 6AHvuXnpnuIwcW4eEFO2ixvD0dbmt5zmxqGhkAPgF6sqa1N+K9Q4tNm2UlWVkjh+9p41N2xc 8MNZe554d+G9W9ctXrxu3c2Lz86RPZjHo16Y2pHv+zCfz/9m/UNb8M/zD/71ELC9WV9ftYJi 5VNQ4FHQnYpe8lyO+qzZ/FJyD3lY5l/gsYJEgXCKgHWC31TZ6FU6J4SpH+jq28esG4SvPJsp tIwp1GQKhVX2olRdJZ0w/cR0wQMvKZRWokHALjBkIkS1bpzFt6OCacxLw7oU8xp4Qb0nOPZw BtvUU+ZQLp2sskVRGgZW2EiOdp6656IHPxu8gL/pB4srXjzzzal0blnAsgRzS+DXilhSbMuI +P3ieINCybaZ8LWnWBZIiYCQoBAN0zckEvRqosyEKwmdjjzRRbZ5OlHDYbfCsiEMVYA3GPzu btruRoN76EhH03bXUApe0n9D3XEIu6Gn+GxSus8+T3P8ZHwiQM/Rz94IH01NRdPI+DD1jmwV /6e7UTzT+9G7sZt5zSOFkeI24RVxm/Sa/EaZdJbepl9kztZnmIucRf47ne3O57HP44di+iva Fj+JW2VWuZWwxF9BOiMB+GXoFdBWLKFasii+WRYLlJXF5LIYeAs5VsYZCauLPN0x1sZ2F45s ojNAbDl8mOjq/PAeWG2KdbyN3IJcZOHhnm5vGg1px7VkKeFJN6lGFfielwtgB79yJE3dCziX 3uzont7cftuhmoVmpTkobYKrKXhaVLKA4SiHc9e1tdUEk6kW0Hhz87AmgD5zwmAX4I4hgIkS Lx1rIeGapx7569qHb7r1UbzV/93v9xz50bM7n5ySWL/+1Oz0HTfv+vzy2T99dJX/7Q++Wj/p ue1P33HpEEDKhL4DfAiQksZtRcVp0YhH1z9ShjCFalqHF7i+SjV8ui+hqvXBRBmfqC8T6o0q Q49EIfy5FgW/K6WoFunbU4Op99k9mH4jJzN6NASRHtBfz6vWq07G2pUeSg+qvzrBCBmnGysM /nR7on1DnLsgdLU1KzAjdL2xMLDCWBW4M/6MoQoux3Cj6YbJSxjui6la6KO+bZimnwYe1qnr QT7STZ5GUXKlVwujFGCYhjN/qnutS9wIRbK7TJqfYr4phVHKShEY8eEt9EqqfWCkCw/fGN2D u/FwCCQ7PO24txrQhe97ueSwmBapzzqczhX8Vu9+Ck6Ik1SfBXWCqYICwVrxvDZ/S4j6LKY4 qaVfLOmQKlGiLaqqTE3orLh/9tKXnlzSeG7A0eZ3rZh11epAZ/KrF3/85uzLZ9zanj+499d9 +LbIwys33Lr4icBj5MdLpt+6fLm76bUrNs6Y+uigxC9/siP//w7AwtDYlBR+AT5gQkGzWxGG WRlUt7jMVBPBYJlDoaz5eD5RZpgYSRHwZyxiMYGhgNoc1SKdJ0yydxdojiqu3mG+wcfac2IL y1eVP+B/1v8bfa/+UVxW/BHzlBinNAgNWjfYGQfas/xq0PH73zR9AdMfMH0GqNDz04F45hog QqbPC+LioLb4eLyHqhesznPp8Oyp1rXWUusei7dAiRGmxAhGEStCIiUlRtpdZzsehnz4fkDE 8I3mpv9JmRUnK/O4OnOU8YAO2URzNhyUW6+UB6UFMEzEDJPZJJ4HbOAktYIu/clgkgN9omBA gkiVGv/L4MNX39q5fvXE1XXrfkI+6N0ydvm9O7C84O7Dr/fiZdaqu3Y9+cjGsaND5G8v5G+Y kj/y+9fu3biPsopW0FwQbLIcnYLHFq2ywocrICXncLwu4RnYMMCVxoXKRMBQExjVWNTJMoZh JcIW1WCY2WSYMYxwkQ7sfne39Z8lTeZ6rF05qsmBs6N4jOQFx0THuJOdi9zZ3AxphjzLmeEu kK8vu11eUbZXfjdkSy5d4loa+qhQxQySSkl2QaIXat0qN0kv2HSU4wwC44zjPVOpIsEoldKY gW8N9xy0qWa+xRQJHNqCeAqzOLSFRkyrfYBKNZfAGS80Ojw1fG14aZgPh+i1cIjeLtxFqjvS BRIBcbKnX4lFi2SWCHMsaoyGKGqNbVgCNk2pgyhR43OoA62qRLbVQk0RB05QKXe0IzLgrNkT Th1/GTl1+xWdvTe+s/xP+f0/v/Pg+o97W8b+5Lzrnn7ypkXP8ReasxpaG37w9R+nT8v//Q+r em7G5+DFeN2v1+489nHuubauxx566SVYgEshJoeEZ5GB5nrmLgPz8I/IvMIZiFphA8G8ohvz IbWiSzKWhRCOxHzyfOXPaCzofirhRkN3LV4K5CZqFlFMk8B52dbDPedZRyhboMyVRpeMnSmE EgArZdgi4kSpqtlxWi7lNq3O95zT7NvK3frtnfz361ffn3fyR7s+Wo+/wq89SnPbCwGBUUBg GFWhBoIKGOzUUTwxiIYE4Alk/KBBTjIhCnUJx0goOgUbZambGctN+2j+Q2HoKwV2KrCLvghX So640ru4fvhy1UGdvj3IPjHI4Bs8zmZPpsqUEfTQBLLImLewgYilgYiFgexnzJkK7Fzx/vQc CMe8SnqS3pb+ZJC5syCb6fH5lW4G98KDiwMoHdSCWoaFcH3orNBZqQP6lw2C0oCXoCV4Mb9A nqddp19vLArfhVbh1fwK+RZtub7CuDv8W/tVv1MJlrKxzI3RznUH026gm6Lmk6h3dZSIIB2G sWYQPmGl57+iYKWLXOFZ6fk+zwXbgSzYZ/mIrwvfu3loZP4GSO3g+sbq+cF+yh30giTYPqSf ch8G2z9ccHk9xbnl2OSK6fjw4hcwj3loXlsbTqWGNRXpRilSITjjD5xgLSeaDp419+oDr+z4 avaclXfnj3zwQf7IvZetmH3l7XdefsUdI85qv/CWtetvXfosF69/aNaaDz9dc/mD9QN23bG9 D2G8455f44uuXH7b1Okrlx/ra20f+4tltz63tpRrUUwmwCu+WNS3VgEhoMaGAHCEKZRGAuad IpSC11GNRmymUpsxcTtiD0hrdQmaeY81OdMMoHEYM5pjWMB6MY00lZTk0VXZlc4NZU5kKFsY 0DaFn0W96Mf/2c90TxjE8djpncKCp81Q/L/c9eR7/dOtBp94I69pROzckFd1cWhi1eXc1aE5 sSuqFsWWJFbH7ko8EloX2x77KnTAPeL6R4UeC60PcSPqZ4iklsbdKgBTJOmKbl1irDmVBtky eku8Z1zBJXfSQVR04wzSwCPbJ4fV9gHUT3dSN233Y8n2bGK3p187kQ1RKPWcGDtLbhflIL9v K0bKH5BhTbXU20KPAEyOzVK6FGaQCTIszV0fWnzphUvGNePmbXM2H8PSq/f03LTob0++8CF5 65kFP964bvGSJ/CF1qJrzl36/lw9MmE2lt//FFuP5P87/03+i3zHi69wTT/bvOvR1eByATNb gZ6v4FOsWjcceISAREkhYpbnsljkVZIFXoMIzeiekIu1j3nUfwJbZXpg5uCnNSk4tu7evZtr 27372LO7d8NnX4ef4EfwIvvsM71aQcS8pKAaDtdwRKrhebEGXPrj5G1CyCsCiik4Kk+czFK8 QvED7kRrK1l2rwy4a2p5yWFJGw5+xLHh3Ov04C5Z2/szhv/JED90YQ/gvxIt9waD7uNkcWxx nFwWmxkns/VLTTIZUh/SbI4xSTwqSzyyam0bGfUBnEC0sFiVrExmK9SKbGWlm00mE+iSxDXq JeFZ1dYlLiQ4s6ro+ECbtAQFas3SIlAvKwIdyTK97rcZsc3BF8rlMDiFluYWqtbjbJanLsIk El0w/D5OhIZUbxv+9I3zH4lsjf79rfcwmnzbpOYY6dqNr6p2ZrWOGJl+5rIRVz3e/nBo94df /WLakwvOO3va1fkH6Qr39SIktAndsL4mvmIzNn0QMkhX3zedReE7ZuqExo425vaZCxdYO9hq sK6Qr1SmWXdw7dYbwqviDuuQpclCG55AxllXahusb/VvjW9Nhdd5gzc5TVUEnof8QhYlSQdZ FnUJI0RroD6W27uSHoBLhOPouSA9x7m8HoCfUhKCICdETuwicz0FyfqXHsGEdGMNXJrmObqL ZkrcBeP4t/lPea6dx3wXxp42Tt8hfapz7TrW6WvLJ70tkaXSMolIP/Xtfa+Axygc8C8COIlF LbCzyOhsrGf0fqaeHlqhSgM7XTkowvpCVTWTWWnt2mXu2rVSKPSgtXM2aBeesyFx/uRJnbyP k6VuSH1R33fUTNvwdfNyhYpDFW7EVVyS8ye5VK0ocaTx92TSx8/3/uyJD/DfHj6jsqxR6P7+ DLw9P4ZMxg9svfHuu2i94fK+L4QbAJvlaM+m6WRWOcGFsC/SWshBbyqVXDTUmI7mogXly9Dy 8nb0iPA894yxles0XjPeQfvLvy23TafcLi/nThHr7FPK3IozjQmBicEJ0SuF2eU3OXc5j3AP m4+UrcVPk7X2f5l+FEAxK2DFeFri21iXYW58YF3G8iHMx/0JnYsneMVK+c5GKVo5j1WEU66M ZZ2ORo4mpk8p1KdzrZQ7QVvkjgWQA6mktSigjdfhsMhXVVYDzp1qQHhYSlG8k2DAoS6L79w5 Kv+bz3vy7/3sJXzazj/iASNfadz503X/PWXOgRVPfUbIkL8e/TW+5g+f4/Ev73tr4Jr7nsz/ 9d5t+S9XbadW/RhgfDJg3Adr97k32K3Ap8ll5QlAj20lfEiGISu4giXkiks5k6KyimKEnaHQ DzLoxyrKLZfVptxiYeoIC0ZMKBalvu9kOO7q+3snK0tRGKusNJVLjJwS6S870Up9Uc4VSxVw DGk4baHXzMUlWZQFmZd5MRqJRYioqbpqqJwYDAVC/hAnxrlwEjsmNBG5LIlDqp1EsIrpNP0v mG7BuUY7OTQcCoeAehOTVNUkhxarGsDLk4/hfzw/+ea2BfPPW3Tv7tvzL+PMvc8MOb31wavP W5//rdAdLD/3svzbu57N59ddOnR985DTv/zFgb+fQvfXPgnekT7T19D9XlAUErIsSYjj6UKq SkJDskTRUW45TdJF3Nmu6hpEjRm88m+v2felNTtUWjN95MUFABUXrbU3y3B0eH+6f9HAaYIP hbWDWQeTxeNJvvrYY1z62H9xy4Xu9fnRL+SN9dSKwM3zt8McFHS3l2ZzuEfC/dOAKTzqElcj JKb9G+P2tEKFuWiE+X8ZvjpyygnDP2H8+wsJBI3j/zz2tdzHxz4nG3rH0XGPWN97OYxhDtj+ VrD9Guz3YvFAPEim1eJLZD92uOpqlHTCpAYlCDNOl44BYzGcMDlgtArGqdqaapfjYF610yDb KZD1openMwHhQ6YB5uXj9OfJdctqcW15ylWxykidGk1Nv7jflFut3JHifGDwNAnsTxWy7HWh QpOhqREAegxfFS+LlUXLOFFPWTXBVEVKruFTVTURozyJQj5/Et4c8LsSvKoUapK4TANkB2xo Ekoyiao5+vdHWHqZpo8Osv17UijWUQ4Pq7FP8h6hsDSIgPugz50CDg8OpMXmziVz7sm/s+b9 /OOdHXjcR49jfF/qpeRlm6+9feeNyeErMbn35kM/IKNfwL37rpu/FV/y/l48v/OKrv9omLus 9fzlY+94fFf+u2WXtmAb9PEKQOkWQBGHfruJoobQgnPH8FGs8NzR2FToBzYU+rr6Ql9VU+jL E4U+EisUqk8xrCZXaBdeEkBLEA7vQWvQBsQPRh4ahz5Fh5DguHCyHXHs7RqDX6QIy7+UYPl1 CZZHPKsQSxksn+T3tp3gdk6bMmnjMgiYubZ512V7c6WFpOVvCsJG+5WdNPjAHB8Ar3kBtXac 9xJcZUtGVkbUqsPEZvVMdSK3gnuPk25QP+A+ALdEccOcZZ2wml8lPMd/JQsqj4fxe3n65HKf pzjJJs6lDYSRDj3j0LMd8Fou9jzty1m/o8MJ0fOfeKOicM+amlGyEo2OAmUqqiKrAsfzrqAG BAFeya4kAl8QVRUJhMdE0mQkqxzRMOK7yAjP1yDgNcIGYYewT+CFs2V6TmuQsAvxf4PESV1k hadr7v/VPX1z3D2tpQSiuLbAzef1UHZLMZqlD2KzWXqAXVAKQSvP0EfSPAiSbGXlLBCGCBCG OBCGrYjve394WyHpoi8Odeg2Xa9DXhgE0TLtJtkyrSaFSqoFmClu7GpjkbS0X8yzlUpYtwHR DE+PyngGQPPJ5hCIoYxIl1VzMnJlIMN7gQxd5k01IAYzJ+z0aqMfjOddl0sjSlkoKnASwz/J fmAneR9LvQ+TW/tQ75FDQndvPXmv98VjD5EDX+X5Amr4U9hT7jmejgnPJQQku5SMkWc9n0S4 fzsYHPmXACr+SwA9kCtEgQJ0k0EY3h8Avt+uh1s8hJDog5FYZH+pNiuDbTCXLZuGzfwdGA0I An1MU0cl3aGXBZ/OKQgTWdFMJCtE1UQ6Xs2iY9RgjJvpuzQL0SeFxZl8V5rJsc6THjjSMsro HTusd97ZQWvW6XRBW6j0ALJCYnYqspZjLc9agbUyRVsVlQgLM+BCqX82j3NxlbVSiarLdMEq WLldwLqrOk0+1gg6h7AJQVqGaE0nTj+NCexDtpEJyIG1muAZxXgmlpaffSyiRZn04cGAdfbU NluYTO449or7DOPeUkR8coDEZf4GfYX+OiylfpZ+lo+r52uMAeYk7mL+BuPH5kpD1oggZ4xm cyw5hxsjeXKr8UNTfYg8zD0gPSCv5Z6VRIf4TLNBIGDtRNYNo0GQQZT1C3wXYA/Ivywrqgb+ 0DQtqqdpzjKHON1kLTLwkI2CK3fhIZ6qK6rr6Us1rHXDJE2swRXSBSmD4gMg+uZa2OoiE7a4 wjRhmQAulqztsEeCz4zSp/S5bARwxrICkGP9L/bnIEcYnWVbLUrfMcgcqKGvXMJSBeiGNKDj KcEvkd53FDC4F9KuvSwjOGeDDtfqmPUbfd+9bKr0LNv0afS9uzmZMQckM0YXiC0Zc2gLEzcN hLMDi+baBjkF2CjN/wH+OBRubsFJu8rGVdh+CFfjixtC0WF4Kha25Se8lJ8kdB/95t4fjfsZ d+z7M/i3jg7j9x2lxvgoePoKyonwkpcdjT2G9Qeb5IgeYlXDg16SSjIkZa4kg7uVIfXkZIUn RJFknnNFUSjFIYHClQUooWBJQIS9GINzztWwq43TpmlztWWaoMnAr9gzXwNu9u8RLb5ItP6V W6sjTwhy6RylIRakdCy0WWxPzGhww/T5bmYlzzRUcrRc374t4F9lFxrEnCmlGaCDTtk7IwPT 37H5jIzsDS2IQzMSeFeaDG2Ogji0INKzVYVdEFpVRjIDcPjp68Ob/SCWF8RyEINU/O7lfneL TzAdUGEjBjcGunv0NY50v3YsDwq7hV8Kylp2dBnNZKYDD/xYeBeZKI7e9MbFfDhgBQLxcDzO 8xYf0MJanF8X3my+anLhcCRO3HLPHusfG/Zik4RJykRrvD3VPzk8NTIhNjF+V/hhYkUTHOck NCWYcoEG04SSKkEqsQmJVnHp0ku08EZXXypV/ySqliRzPbFl5bjcl6I6FE9wHdGyUvZXSP9y Jc/detJOBEgB/RZKDuVpssJYXIuFGociu4lACoim4ztw81v4jOc785tfeTvfvfZ1XP7eRzi+ 8Mt7f5d/j7yJ5+Cf78w/88dP82s2vY4n/yr/9/zbuAnHO7D20/znheyP7wV0GyiCNnoDZtqz A+Qc65zAxdbFAV7TE+BhUDhSYP9OSlbpvGWr6HuLfFiOuTEM/2IR4/+aFPxrThM9MYyxOHae NY8tTmtPf1rAkkFKblkql4BEmCSTNsj9WRypv6/16vvavs6/kb8D37T9sdy5Q5bn7xS6TWfm 5jnb8r29L3B49dIptwUNipwnwMbXwypEUCU+5iUdzcROc9nkisvlORWQwLPIwVqJtdUAdqZ4 tpWBCnpJ0EqC09X3WYcTa4L+UEdlbZNNX5fXNlnF3lfs4fr7HeWpwnV4v1Xs6XXvLBBqzLPL znYv1KaUzSm7TvmxudB3u3qH70Fjna/Ld9D8wmdBtHNtX8C2fbZPV5w4ScZCqujQ3Q9CRFFC 4Vg0EaauhG3WCYdRspLpMxLx+Uw5kTIfFUvbhMSSqkTKSyvpPESRzljMudVzq5dVc9WVkX9X x+L/6o+qKDH8p8SvaADR/ZGe4h69oq7TcC2bGcx2KRQ2KQj9+6FO+EJF/u6psufL+KwRtjOC ug08j0UME7xPLJqxwT85cJheWcYCmmdVVsDR73BonCg9Dg+Hwv4qbhABOFUxaLEnC8knyKpd v1305p7WuvHn9h3eOf6aiQOT5/wJP3H7A+c9+FS+Qege+/rCR/eW11Sfd31+Hh6yfPVwTeq9 nmtsWXjmlWzXz5S+L/g/Q7baQIJe7XRuOj+fW8DzNbXDuEzZadxZ0rnlp1eMqT6j9kKuTZpS PrHuTr9ZRZNRut7VJaGmJKRKQm1JqGKqKLy5INSUhFRJqKV50BlUqjNS1aSaq61p9jVVjak5 ffBkd0LV+JqrtVnGbPPywMzIQm2Rsci3xLq+en7NCm6Vdqexyne3dXv1bTX3GQ/4Hggmikxt YDLlxFMxJVWPUwjVxxx+6JAUmgnGZQxcGL8zTuI1IWNgorYG1wghgfqOQq00MVBJJEIc83lp yIpzhQSZdjm2j2FwT+E77g2sqTYNTUiWlSfisiTyHBFxTXUlnBOFRHxgzKOwuwf8UE8IDWTp PouyFnbxODwNz8XtWMRdeIPnH0hvSW8NIz5bSaF6XE9duGmS8fV0aAb9ufrYUJgTTjk0fNNL TgnkTn9J1rmI2kJ0SDH9z7XuBxT1WLScx1x5saBnQS65nzaH6YwAxrRGikGEgIrofqvSF/h8 f0uCNA4t1qOqa9mDL7ZJo1j1CwbCIT7MQCpCPEhN2WJMfX3Jtc9dOG7KyPzV5191xc3f/MdT /1ghdPvWr9vwRGY4/mDSskUrjv78tfy3D+P3rGvunvjD+WNOv6IqfGm65amZ1/56xlW/vcW8 6ye3XDy2sXF23chNN1z/9vwFbK9rA8SGblb9vtMzBJKABUfsD5koXWR+h1uoIW8RXUwG00d+ GG/Cxb1pBz2NuQe56Bu+KaUtn5WcxLGSU8gXCDT9RHnzwydmMHRvsdW7P3fAYjtBCxVA9nAi mLSJP1/Or8rHBWP9+u+/paN9AqJ/JYw2gD7w1JRvEj9JfkPmQxQGIeBQTfxI+Qz+bPkG3y+E gz5JR8TuIts6RSWQIiV+Rvr5GbGKJZ99XhlLL3JuCLuhcSEyLTQ3tCzEhQxW/inRQZW5Q7Xk DtUSUtR+d6jyxZSi4A7Vfneo5oKUnh13h5Aqt1oQ99lCFNgAi3ZplMONdpEFDAMqVHjeafPT ds7IH333d/nv5+48c/2SvZuF7mMvf5w/9tRPsPElN/bYxlc2XbaT7TdFUYSkG2icwx95qXqU suudVCSDmu2M0xw5C51pn+WcGZmEJtqTnIkR6yH5IR8pmnejhWPRdLBJaNLHCGP0c4IXCRfp FwdnCDP02cEFwgL9pqBPCNIsypFB7USmEWY0/aKIz7GHAnEvwfGQq4iSLAsqrIpimD6fHvA7 TjAUjkSCXX3ZDgFFXNrrjk17b3IQqDAS6NZzFMAYRQRZTgQjgWAw4uiKkgg6IDq27vO5lh2w LNtRdDkSFHy2BTqGIQlcxPL5FEWWCYwp4ji2jeRYOByzTlXw+chFOrRBODwk4PM3u7RQH412 4bteLgSpXCza2gupTW8s2hs57/SZYw70x6dSakNjU3EreenhR+uJic7JHWh1pWnt2gVNdldJ OrGBzMcHmY8Nmc9GR6WPlgvpUA2cPIWlQ4j+eYxi8mTCmQ7dEzy6WRVwcl0uiRv9LNlp9DvQ +Rsh4aGPUjB+LH/Ta59Wx4arOPzVH8ZWlQ088Jv8Ndvyb9VK4UD+DcDN6Afv/3M190lvLP+X b+/q5F4Ecp1b7c488+hTgB4FWNJZgB4/2eTVg2eM4pBG6p16/3Dcwg2XhyvDjRHmMKfFrzp+ Ws5yaGMWa1hGsT+xtuVdTYtbbqn8dSO+USMpvl6q004xU04zP0IeodFP/JF8EZ+Tp2iTzYuc K/BMfpY8W7vKnOlczy+SaXy60bnRv4JfJa1S7+e75C3Oq/wb8nv8+/IH5l7nC/6gfNA84AwQ 2U5Z3YaAEKKtJtMWwsR3HVQo4lzTUTBgRVRbpBzooGdSyRIRMZCsEsJSJapjcNUFSOcAzYqC 6Z934sDp+X2mYWDLMmzH79dgzYihcbpf1bBoEb+i+v0uUsAWFY4YhqtzAV3nVEXhOEL8BoQd JA8O4iCg09U9nehdeOoWV21Xd6ic2oW7Nk0ljxMC6XmXp4qdnjXOetviLHiTp7ooGgjuTE5b S38t4zDFbC7yebQn15MDgcE2dxJuVwonQZTuLYMvn4+iMivvOrEroHJXGyNZBd7dX9Zg5Eqj qV00gymxisQzDn0aFs/4Cx1Pt93EM3JlPEN/T2NjGU3Ud3gVZRk/kDAODsMMhbN+JxQeJQNb zXI8SBpNFwc58JlORtPLk6MwKk9mNZVKhEq6Pwzn/GE4RyUC0kl8MI1PkIEFQmRtxLixUAUA qWgSCmnJ619g9cKqIafh2j29vSR9KH9PRXJIMN9OjpFf5e+4fvS4ifj23tZj/yDawGHjEnnM fl0dbOEMsAUdz9osKyM4fiRM7osOJ0yB/YVngsBHoeFoo1COH2GYf98bCQJfB40DUJdPUQeb /JX4SvFK7RORpyASZUkRRUXkFFWnT9tcVQuoqiZyosJR2haiZzmX4AD4M1HXRAxhGWtdJOop qgq4giBtdpGIp+jKBZ66TCWAnE2eoWm6i7gLxpJ7GII2eQp400CJxXsaC9V6MTx/VgzYJLLZ MIuoOlKoF9CtO72F7gCNylmQWb0LXODKQem0DOxcYA+DqbSSPgK2oDlnQxicVRl9+Cvris53 9x1GXN9htkmDsSDM2LvC6rNwAGw+eTlKifnx3wBO2scVaJORvW/9BSfHnf7DS3DZZ71byByu NX/G4sXz2/FLxzp6f0q1VA8MZgPTkv6yY1LY+Qy76Uf4TPlHCqfKmlIKb6aOTANrCR0iU0IE M+/Nju7dVTTx9PM8rDHGvKLysqqmypNNdSr+B4R/F/MQk3i1TitrwrShGu6Anqea9tOz8CNC QhKJpibAuNVteBP9Mwew/HEkNcieTOSz9dEa1mImRoJ4PooalAVB3Gk9DFZKH4dl/z973wIe VXWuvda+X2bf5n5LZpLM5DaRQDIhTIxmg9wRwr0EEkVFlIBCABEVFSqKtyra31ttD6gUL9Vy C4ioNadSWi8UbNEesSgeg1WUyulPaQWSOWt9eyZE7Xn+nuf5/+c5//MwK7Nm7Z299+y91vq+ 9X3ver814090NJrd5pm+Ob1GKwO9G4JDOqj46mZu6FjcAnw7wLplprgog4NFVO4+3B7KMMVQ n8TLqcOD66kdhcUiXwXz1cTRZ37Lhc+80cI+08n+bM7YF144I171AsLZj3vnESPrC8QiYlzj JhpFg0LcRUP7kUgGDWTJhWLcs73zvv996kuPzX7GRbkLUTmqZ86zq2RNrgxp4coKrbIyow32 1UcaKsdUtmltle3avMrZA+/W7qj4kf/x8LOarzw/ZV8G0Sq0tDH0XPmO0Mvlu0P7yn/nO1Qu DffjQmqhW9SIcrvP0i3q6HgyjZZigVgwVVWZznCZqjHc6KrpUktqrjQvtcy1xvWG62vt65RV n9YxZ1Yn0oGaIm/w0oqFFUxFtFpv0u/X1+lZnV+nb9K/0lndlYubOpqPpDph+2i8gg6MLl2g jC9dj7KBncxzO4IPeaNREdGDwmDcjihTaqKsWnGZeRkSQLCSRQlqa+ZcuS8dWzPBUVlL0JlH yjtMUASBPjsp/JHa0aQEX5TIW82JncwsWy+zKX88XjqwdFMpn6GIBPVRiIv33g4oDMoAfFhY kh6Y6cow6zM4E6D3NpReMZAMFlcnXhP2CUxMaBIYQQf3H8RfCILfDyRIAYAaQQcMAOY6hUFD +gWHEAcnZZIuCAzYPgO2sSd15Ai1W7tTeWp6/vgOx73LU9QROPHAZkYdSerQgLtTD6kuXebQ ei5kwP/x+3xef6CklKX8HoetRQ5iG+e81L7plVFLRtfNP3gVrh1x5603FGwOXrv/rjufm2jK geJXooHLdy9srblm3tVPlhbcNm3kz26fsGqCV9fCiaRy7XkXtHQEO+4ZZ182dsDy46dvv2AI PlQeNcvHV4+ePav5gutJj76D9GiKANMYq5X245h3GQm+jh/B802xzTEmFiuO1kaHRRfF1saE Bk+jvzF8sf/icJvUps0w2vyXhNulBdrVxrX+a8NdsfddBwMHQ//u+TLwZeiTgsOxbCwU56uN au9Avsmw+YuNifxc/mDBX7lTpsv06RzRRZEoGacUX1RXg4n9KjZVW52trlQ5h5OhQh9Vg7nJ l5N5FOo49CE1H7alUnI0bT+6x66m7akuxVYt4hzsGJywWjbJMF2Y+Mnr8WZ8HHMx3ISbMYup m0Y7LaZ01QLavTB0FQxuEnbTroKhq1B7qpP2MDjUT78aB2HS3Uu/AocKR9V/w9mhvWIxnSkn e4iLfHYnOD7kz8o48ShkgOhYjDqKSojnQ/zhQsZnopLiMpa4w2dZn+c93bl4y+WbOuzev7z6 ynwmPe2BZc//9Lplz/O7ev56f/P9by7p/ar3vZ/gh1+bds/et/bv2Ut08cTsZ+wxoq/CeGaO 6Z7WbzWwoWI6wbyI6D7OHVXFYJRTse4TJfr0Ijy9CNxK0aRPL0IP33tgj+Pv726roW/KnBwl u3AsepHnosAUz5TAbM/swOPM4+yPtA3mhrBL0kJKOzOPbeevcy3SVmobXdvlHcp2l8vvusP1 CcPqxZcaC41bDdbARMXYNwyEWe/Z5LbWovXoMDpOjHLDUNHZe4ySW0/oEuin4gh5voSaipGR HlO6F20gG1pnNLRJGNpkTNSX2CfimNgkMqIOOLZCDxJBvYqDIundOb+czt463IbFuSXrIKRj SMuxxSdSxxbneQ5Wptps6yZ/gG6QdmvBAYfknoZYuj4kg7Yc27il4KufH+z92+LP73rhj7FN oVtn3vnchtXt9+HbAy/uwwVYeR4zqzY9EZm/4PXfv/dLGGNGkjb7iEikRaMe7Q0Kw2lJLa0N 1/g6b130e8xUZbJ3SvQqZg5/pXyFd3a0K3aAf9dzKHTEc8T7VeCL0BGQPH8slgpTcR0XprIr DmAS2gB/A1OnjWNGaCO9Y6LfU6ZrV2lHhD/5T+ETuol9rK6aBpFIVbQQEUlWDdZS5q2RNM39 FjYt25ptrbSIaNI+4Qio5aaSY8GgRUXVEmgPskBgLQAcaI1bOq1xKz/jaFF4YBjQhpe6E6+J +8SPxKzI0SZqFlmxELoc6Gmx0OmK0GwwLIkw+oihwvTE/uygjvHHevoLHYTVNnYDvEDfZ+WM zpoV1VFdTJSx02B0krs/1XrIlbtvffe69gO3zX64eltP/Pnrlv30mZuWP3HHv9x7+ql1mL17 0lBGPzWScb/95r/uOfj2btpm44gWLSRy5iNtNsUOxFDUR+zYNr5NnqZeyc7nF8pXqpLPiVGG Cui2J9NSQRSiPtzv86e8J8PcIHdDaFB0qHt8eGh0krs1NDl6mfua8GXR5cJy30nmZNBEfmxo gcBEP0VqWH/UWGuuNxnT5CJRRUS7mOdoj81rsy4iDaTeTSIdD3mI9ARs4pz8EaAbzZnmgTDF o9Ao4LfIZZXpzRrWwjFKxkiWpumnPZQOszEc89eaCdFOVKbzLRXv11JRaClHwKLQRhBIQluq v05sS43v6Z5gdhCLu6MPAqJklBy1ubGnozHHDc6FYwIfIS9izvSQVywCdAgXQbSJwF6yq+rP L33e+xX2/vFdrOMznylbb7/i3p6DzCTXkOl3rXgWTw881YljRNm7cHnvh71fm/FNu67GD91x 0dUbiRbxkCZcyf8eBbBmF3plbISqQwNDdmhR6HHXj7VnNSmslWubQ10hLkTrozwcSxdIGusy ogr2MSmvh2MFpKzzYm/WY3OBJIdY5kEMU5zbBg1Jw1RnKhpLr0U4ZFMxCdkaEZOcg1IOzkkx FRxUlXNR/pKbZvDmphmOwrADpAMIfN2ZPQWRPOipYOgVvAsVoZNYQXk/Ji8G4NE0Agf6WJvj ztC4yIzlkLO8piXIoiARC8mU3RFkCUYEE9eyctUqnCJysrjWKqmrpSxkIiZErVGt5qv1lVhb 163zhG9bdnFrZEjN5OH79rE/urdjfnrk99w/UUbOvvzeM3OJRAzrncQeJRJB4wkW2rNVlfdW qUnvxeoIryAXhAqq1FJvVUlGHewdq470ThdnqFerp5S/+vQBJVVlF5ZcWHZx2dqq9VXi4KLB FU1VI9WRRSMqphZNrZgnXlF0RcXsqpVVB8s+K/pzyVdlVsAv+HYyWzrLox4RRhIzjgbCOLIS daH9iJitzM12DR+NGsqI4qhL8ftqk7VKMhjcH8BmwA7MDqwMcFWkyplpVaDWAqDWAn1qLQBq jYZGwd6jjlqjR9FQqZxaC1CjYCxETy01cBIVxxKvGfuMj4yswcWMJqOZDHQgMUaYtq1RDOE6 gMA6YX4G6DYjlKpaWkTVW2pCP/V24pj5LQ3X032SRtR15wIDuh0gtYMMSgFKAAUDssyJB6B6 LlBXawGqXto/rmTuJrXmoqU33xnU8bLNHxy/9p0fvHLjxis/WP+Lo49tvHnFMy/cuPyZGeFJ yZo5M+s334MbDz2K8b2PrjzT/vd9y3/GVr7T9drbr+95nXqjaxBiKUPUiy97CflJx/cF0hBV CuZ1kqtjR7C7NA52NQRC6YBkuSwvy2NkRHnRqyqupGzXDk5nZdwlYz+MMX4bKLnlkHtpE8jU sbCAnAu2nRymx8ng40O0vpc2iUwHGAieo3Re2D65A2gzEwAyD6QHpzf7j/uZRf71/s3+rJ/z M96kQ0kwyT0cp2sdxEnPOUwXdM+eyhN9TtkBkFLHrJToV/cRE0459iBiQCwZMDkn+EZN7Dff C/HmwE5I9bMQYTeshwDmIEUaQDp1QReTuuCKYE0icoko5rMKEaHGQMtyQlutEguaUfBZazpv 6Vr283Gd182f+INGYhL+5cG2DT/uuZR5Ys1NU+67uedlIpN3koZqBO6iiPbal8iD6RM0y2vl 9fJmuUv+SD4ui0iOyYvklfK63K7DclZWYjKxsUSOYWWBvQUjgRc4RRCTPOLWceu5zVwXd5gT urjjHIO4OLefbHGcYysz07i+euOg3jiFfisHmo3LazYuP1fCUSFSaB1yE6Rv195iWOOE1lT/ 1U3aFnekIIiE1MqdnZ2d3Bf79p32caWnDxK1nn2ydxJugGd2o3ftERyf5M/navk7eD4g8bzI cQzHexDWVIb1ujiLV0X6hKogRi1jLdHogQCRSi2pKGtVHFOb1GaVpTQwu54+UY4WBo6CCj6l WgieiYs+lCqBTwKyrYY83heKRvWXapBiyqKdYFIEswM1jac+AZBn+57Pqq1dY0oOO1yXTKNU MpUIlnUxgpweQRf4qPVhJ+6ZzpvQ6Ng7OnuvLh4cqx/cWTv0kTHc5++88/VNj+ljHuRaT6/f PX4OlVfSF9i/U44nc5kdERzbSpguzJRZQ/vf/EmBlV209YT8lL+SL8j5AvCDgDIwjb1eYdxC 3AMo4PFt7jKKCh7vJJ9uHnYANH7cXk32CBzHc0K9PIo0hXCeMkO5nr1OOch+IogbBVwilIpJ KSMMkZu0Zq2FaxFmiC3yzdwN/GPyHuF33HtCt/C5+Dfha8nnVhSeZTmGskNliWzIkpR0OKEs xyUdnqhCOiwnYdIteToxo6pI4XZiw5Z5DtCVYoluFcXBOzAdSstaYgCpScQkia+IcBNqJpJD uqc9CGQfWhw5NFvoycgNGgDcCQSuCQq5tI+LRs3t39bQ1DB32nES5k5TZ5kAxDwNZCjcxeVp opQvKpJmlxpZyHNAnjZOxjF5NcvIQY1SlojvQfo/8ALkqoKMLBUUNFKe59YCSvc8sDUOH1uK HAZAC/DFOlAO1xayXVuLgNq01U8/PtxqAkmUfMCWCz62qHm+GQXl6Fe5D3FY8vrJt3m9jZBR YsXWID35yy0R53Dc1uKgH3TS16GRAiwtEgnFz33e245f+7D3iVv5XWdewZt7l/XMYWI39s6i /fI2ktWDvH6ygwcFBYTp+iEOcTpd53wOHOR8OusoddlJMtwYfIxfx3/Ec80kO86zMX4Rv5LP 8hzR5grDOgqeXgkUvY9YNusQ7iJuJtNf2//9rLYv6KftnbZ27DEpZ4zlp3ez2fyEb053oQnc N3UXVV4UOnLI1hi26IvWzG2dQLt2xlChlNhMJfjXlAZ4Is/qPJFfk+bf7PGqlk5y3Vy3/HHg SJx/lz8ZZwJSvEQORuIyy5YURgUfNSlELJSEQ6ayP4nXJtcnmSTRY3pyrYUtDjy2IHhrANOB x+aFSEpYpYQ+qMWA3wZqzAKAzsrzmaw8L9TaidtsVzC5NoIjcLlI3+UicLkI5dZa9HIRGCUj 4HhHqCzB4Bxx0QtH8shfhF7Pj5jakiTejzDFAJgYovLHgvwVfEf+QOMif24EPpO3kU/YXhiK nabQHZFMJHfi5du+rYEdfKanux9k0w/qIxs9MLvUsdhhdDc5QmwF+sc46C6vp9TrsiLYrfny A3XOdSHt6wOCQwDie2G4Bju6/8D9RM3G9mWPxG5581+e21bSeuGi/9U5Y87Fqxq40ocmXHr5 jF2bdvSUMT9ZcGnDQxt6HmG2Ll8+8UcP9Lyft7k+Jf3Fj2+2PTwreJhnzJ3mJ+yfPMfZkx6B oyq3kXSYG0z8qLk/eDiYDXJxyat7/W5ic2HBryma7tITQbCzgmBzqWBtqWBtqX3WlgpCoBbD EbSGwdpSwdoi2187DaoqOTTupA3qUAWDTsXkT50QpEIXppZX8HiQWRRcH9wc7ApyQZap9flB Nk92WlaOCP4PDS7lWwaX1c/g4nKS2GW7v23ATQhACG3fi0jhCTDCvrGXvJxFuRrpGNxnhfkF S1YkRVRYwSy1BD2CDcWda2QagtJBtTC0cg7F7dfEa5687tDsJyaaSmfl/NFLnuZKH9k0YtH4 mpt7ljB3XHvN0Aff7oEYteHZz7gy0ooaCuH5O3ywkoqHzhaAT0BFcgktheAfblEJuUYJo6Xp Qot0lTBPktJmg7vBXxccYY5zj/OPCLbyrfJks83d5p8cvIa/Rp5jXuO+xj8neD32yQKvzWKn 8lOVWa4F7JX8lcoClxKIcqJFVIY3EQHfJwLdQOxbekkEMCcHBOahVyjkuKBOsH+OLwqFLtuT SKYHihiJphgXWXHQR0RH0P1jKJRAynoCuXTq9rpBnAFrRFFoX4AQclIL+gfBuhTIJpek6oBB g8IUUsgt6ea0nNmRajvZ1o8018czpXgPzBdN4afIl/OXyxwdm+ghHliUAuWWqOjvFA3fcNev PsD+m76456PeYy9tXXPH1m23r9nKeHDZfct6P+7Z+8X3cSHW3n7r7Xd+9dab5IbW9M7jikgL ulEhvty+z2WeZ15gjjO5pvjmOBOLV7hKCmp8NQXDChbF18alhkBDZGxgbKRFmuVqDbRG2qX5 rnnmNYH5ka74772HgofCvy/s9nYXHo5n4/4SLmWmfHVcgzmSG2vONI+oXxT0mqqls/4ohc4F f1RXkR5K7FewqdjKbGWlwsWhCeN2jqTzqTP/qQTzpJ28QdcXCeDA6ArtayVA4FmKPbVMrTuJ 0D9GzPNAudkPKDe/AZSf/DZQDhNZREUCUB4bVR/E30DK80D5t2FywMmtTH+U3JNXqn6fF0Lc yyy2X+ut2dDw4NV37m+/7qObZt4/wNq4bPnPnl66ZEvvPP7VuydNujf76FO9p++5uKHnNLth 7+633n3rzT9QKRzdO489TNrQRFE82L5PZVJMZfB8Zhxzg0to8jWFxoXWFq4v5NOedKSpcLhn eGSKZ0rkCs8VkdmFKwsPCO+6PxU+dx0NmhVMsSvlyzB1rjHMSNdMZh7zvuuD4Cf+z0OfRs4w BuY0bziqirrgjXKk4QJ6LaL4qoFNwzZmGysNrhCAiEJoPQOACKMPiDAAiDAAiDBgIAUowU/r GtYCAQSBHt4E2mOp9V18NQGSDBiECBiE6HcMXwevKyj8JvrwD7DVnhON320Y1IGtHA4+OAc3 fANVrap8ZNqrvV8t/P0tv+p4sqfo+eVLNm5adt1TvfMY6fwJeAAW1/fetvG+UxexL+zd+/qv D7z3azrC3U6aZg9pFQu9YZ9f7cEmh0u4NHcRN4Wbyy3lBNmSZEnWPJasIVbCKogEUuTytRKW iuMe7GGKrf/as++z9f5uW/0GGgEU0TcsCse5F/oZ+RPco3Z/x7nvNttOLKYRnrRqKFcKHDlk vrFGh5CQtsU0Qtfpvg6iJpKB4vYnL5zXNOuSC4cNO/8SbyFX+kTH6Iany0Y1zV7cc4DWQlP2 M3YLqYWBbMC+iSv2FjfIY+XhienFVxavkO+TVyc2en5W9UtWkwPhYGDguKr3AnyEmcYwZg1W gq1Sq9yqtKqtrlatXWqX25V2td3VrnWWdpYZlISZqBicmKm0qHNK55QvLVmaWJn4ofJj14Pl j1Q9NHCD8qzrqbIN5dtKf1XqL89bosX5Qkm+kMgXyh3vMHcMLZTkC4l8oYDSX9yFmZlSWdKl cOF4qY9TBxSEKXRXHKqC2YVQU6g5dGloU2hfSDBCsdDC0EchLha6P8SEXiVt4yP9ArBu20sP N2lIkIn3E0cPmxiiYbd5/WkHA9etNMYDWgsWFDAFUZ/IOVPQAEx8mgcfPrU9tIG56AA1Fsbh RMj2BNM19PRqwGuDTk6lJQRrS4bi9MxQnJ4VAscxBHh3aCcza6uYqCSnbo9m9lfiSvot9IzK PA+9Mi+npHAU1sypDMNXFZVVpmfXdNUwTTUra5gaitsnUNCxd6HLxZ1aJqqdFugNxGFlH3oT 8YQBCtiA2zPiOQ1xyo6D3oCosRzMWPxR3q0NDcqB80TIc6qYLjRoko/FE3JT36lUR2p8P5sY ZsJSdJHADpj6pr4Mpf/Sj77434BjPdll5xWW8N6qUst0mx6TFYq1eATJ5WIE8+eRrNBLNov0 kggqLtFcUoUSweVlsiKkuAiKmQXUznKifiEDWkhlatWqVaifOqL4T1vfYmFlpWUDmLr04Prv 0IpJorEUgIA2bTXuumnF8rrkD/c81jx0SOUDU25+daa12bVk3op2v786svq1R6bP23Pzvvfx BdH5i68cfkFJMFkzZtWEUTeUx1Kjb7oqOLl1cn1JtMCjJGqHrmidue57z1M5TWT/wlTyj6EA +reXkELDfkvTsHzvUFJYGcIIuzQFs8hvyilDIUM3qxpmMSrGmjvpwllRGiGPmC0uEleKa0UO EctpvbhZ7BL3iwKE5eTic05ALxIp8Rimax1/LFfIReycgt5BbTI69lNoJ2eaOValuItpR0E8 eMvcbzmpsDRtT6PZTTX8MUrHoRreqq0133CCEpIBZ+qMzgxY9RadDQCmLmOGL268fEHV6tXb tm/3pMoLn1hnXnjlk8wV92JxQe8P7u354fiqMPj3RJcdpr8YgJtfQmE650Q8dybu8dOgkON2 rdubTnlwQvL4XdjjV4kyt0g1oVp/Mhig7kQYfJUAeCkBN8DyfWSTAKjvQJ9/EvDmAPocGhwA hzNA/RON1kc2gLsCODAhDHgAdU3Cx8PMovD68OZwNsyFXUm5b+Cgq63G5f3yYZmT8wOH3Ddw 5NBoBTBoILIB7gy+iQxgsDwh9A1IgIK+33VCGntgzrKpMZNbXowIUZgzdc3QKLOYLg1BHBHO FUGaZDkQYGXlKoeymJvVLCsFGDAAAgGQINu04t1Lnmo21U7VunbSpPvO7/xx5+hrmuuWMA/2 bPvBoFGTptx/J5M5fZC0Tpii+KR1FHw0xxcI8BJSJAELCuJliccMn4Bov+rUob3mob2ka9DR jt5q5MU6HqNiK6NQ/a5ZGZm4mWmJZgzRdNvIJ859KhTKkAuL0qicZGB3ysXJNPKTjGwdtG8p H5BGcZIZrgpULpcqGVSnjEajlOl4OtMizZDn4rnMPGmevBxdj69nbpCWy9cra/Aa5g72LvFO 6W75J+hR+QHlefSk8ip6UdyivIF+pRxE7ypfok+U0+iEUkUeRwkiv1KOSpV6pRnZiszbbn+a J10lnV/VlTwPfXRETWTbAEI7Ah1K64LuA3OW1grsZXjepVJC0KEUqRvy3pvam0LVlCaegYXM FFGSkrLilWUFsQyTdFjfvKIgxaFwC6Iiswjz1S7sKpZs23ZWAMeR7Ta/kmd4UrLlOGPjYvXo 72hvOhYO9bT1tIWDx7rbcksq9eGKVuabIamUiZjjI519obaWPKXaU4vxz3sX/KI7GQumvnyp 91qutGf1VQunLmPupFi6wwt9kfQON1eQj6t2U8sUtI9DAhNyPsYBWKiUg2gJWrLiLucfXZ26 MylAhlZasmzYViwWIxexhrBgkNrQXAJEnlmY4RTOUnLolKPoLLow3F7zvb3mAQixzvHw4eno iwpDhEigF1dyFQoz1ppl3WexFqyjqOQXWOTyBYuqHTlWlDajBQ5ubb8YS6Q5wSV7hIgccvMc 4gRVVnXJbSIP6xWjUkQtIB5sUqyUUnoa1YkN0vn6cHaUYIvjpXHqRcYoa6x7ljHZPV+cI13l vkG4UVwqvSTsMna4/yqclstVqxyVa2V6uVHmrvYOQfXu66U7pEfZR1xP42eYZ9SNru1oh7BL /w33nvC+/Bn3mfEn9wnhlBxVIV7NBbkpODQ9GNIhd+e6bUTRDc6NLEmUkqKR1Kkbp4ushl1J bWf2PbueaimN9L5K8NU07PUIimqVKilrKjdZabUWWCusuy3FUjjSF2lzOA3z7ZCH6tSJaifo x+ymyRn9yV/E9rIQCiHysqJIxEdRTMsi+n3cNh65ic0yxp6rGHr8dUuU4qLldqd40cvzok7a OanpXk3TJeLupBTJS06n8RE5SUEMFt2cZFguXYPbcxM9TteioaLjNmg8p+I9aWp4tkYJR6y2 Ez9tK/FmBS9UbqVcYWaaLTdbeKF1q0VDZKbZqsnj2YATs0S4nt6OT3pOzgWTKDT+RFtbkNg1 5I8KWVvwH8dG5KTOgvyfCI0QdbORvtfkaK3jNsemzOjU4q4480r2MLFpDyM9u78TDTTibtJH +1YLbBm3OT0FVjLYv0Wk67+RHUVTxm2uBaKSlD28RYw7e925qHMaGLh/BzEFybWJttq/VRxI r7gVDWF2Od/Ud/G+8wJwnpU9vE2Jc3E0JBd3kQszPLDDnUFV5E2nFTxn+csOnk3FDyLSqUIB feIJQIAGW8bicb0v73q2iat99qV1dRfs2NTb+fKzFX8gCubxbutN5tqeR9/ay8w9fZBZsf3M PvqTd2Qc+g+iaUz8x9w45DOwKnCMLDCCRnqkARa5UZ2CTglrSkVeNNzYKA45S11MDGVmGg9z D0uP6T8yuvguoUt8y5AN258Jsx7Zp4XNOtygrsL3qVK1+3tci9iiztAfwY8qj6ovMjtdv1Hf 1N82D7Lvyu9oH5hHFLf7bAyF2zKCmpmPoaAlA2IoFIURvhtDMVcQWCeKQpAhjsIwTBpGYRia 2RdDYSqCwRiKuQftkRkz2RdFsUfDWrJ/IIVgQiCF0uzG7jHaLa5ixbhMkG+xFTIyvGgLE4WV sEzaRbYeZ29hiptJXY6xVuzOrY8NgwUZK8wj5olj34mZGJBqy/XWttyCvDRkAuIkdjs5+RAh dqIx1yk69WBBBsIZ1IKMqziQYcmbbm8typgQP+bL4OKijGxH+5YZaQHQFOaIaNBCgA499XR2 iC3DBl7d+9jHTw2IViW3/aH3AXzPoYMNvZ8z5bj361EDh9We7nX1/BaPbeltI89V1DuJ/TPp I2H8t1wfKVC8Bquy0ZDhFlTBY7uNuGq74rm+EqpOhQ+Fg3vDIZN+gJMOw0ZkmxHFBn2Ia6KZ cu90Y5PC2ppNGiRePjBt0kx0yW6/FnSXqWWuMm2wa7BWpz9mqeXucs9of4u7xdPim+ee55nn u0FYpt1g3ei90Xe7drd1r/tez13eR5Vn1FfMl61d3qPKn7x/1XrMr73ZaGG+R/k9ajTCGcON 1QZrhPpu3wER3H3hZfWG4TKJriSWQ8jr8STdipdsGC6iDJOqQtxgxUMp46pAL4CiZpSpjr4W ZaI7mabtBqkL27uTmWqrTW7bzVzqfs3NuHfiYTsMXIxGRBT6L6gtO+4a6Gp2sRNdWYjQGbat 2iB1wzR1RuIriGIklddD18sjnYiuhRE0T3SH6Kr6x8JB8xiUUJA6DvkeJfWf0qRdKhd7M26z TrRNkGibl5Er+xlSs5/h/rrGm/1wR31GKa7P6ETKtvsyVi6QuYXay3RxGtJ9PGUOy6UewsFy JgxdsL2k+Fbv+VWNowNWKa/2XvPLQ6niWOqTzt4FQxMDV0xP9171rFmeiMw3CrjynseuW7Vi GTP/9G82DWuZQq2ccqJ7DpB+peNNtubeybwhMW5c4wS//NaWSQFfWAgz3b+0x5JCBVMuV5sZ nFHG4JHMSGmM3Gy24qnMVGmmPNFcgK9grpDa5ZvwUukm+R58u3SX/DU+QZeQLMUVUkrOSD+V /oBFKi0vmr40Q9QrMUIO2CXEkWYaZIWRFCWJGTL8MZgun8hcxqfIIyqXachZ+x9G85SuMDux 0UkGQ154mZmFEBIpbAVgfbG2XsdIt/XZ+kr9uM4D1z9B/6UvRcotGG9CuBktRFnEoiDA7yHD XFpE1QZFAXNz1z200J0CRhksXJlqNI8QF/EIkCtzpqap784tc9PRBuYYac3tFbhUoqCMU3sS rUuy9csXaS3SqnQW+OpogSgZOpZ9uNWAuA7n47MXIxlZ8kcuoMbZ1kAG3C7Fn2G85B32n1Us tXVYKHFCPwbXFvnKmQ1LZvQ2s3N6/nXhDe34iwdZSXjw+p5LbpIfJ+2cPYPf5BaSmmJRoW3g Ohr/AfHO8DMl/X9FhcaAcNwS/OYDD9D+sYdkN8Kqp+3bGeoc8JTOCauC80/BNDOKA2WgO48u ftmpOaHCx8+uJ5WHGG3nNywKoNqf4hyrPuciEvf7UzrANTqLHO3pBFILzu7CSfwMpr/DEnwV McxXCDNfENvo+BYeV5vd8LMtdKlT/EyvG/8ZJ3+OnHP4yP/5HD5yah1/2dlzMPqvzjly9ntQ 7y488uw50j9xjoT+tkvqd475T5xjoq92mflzgNdDWsFAE19CDBmIB0iutC7IUc5AAtZYQUsi G9npIWlk+4JpA8UQ00x6OBOjELBlwvrl1GzBRHON79l96SVt1POmfZcHDk0ZpdTUUwcaN9QO e3jM8OLBsfF+pbPh9QlzPI/pE0rauVb40SxfLs1Hr/VLWTwZ0n14C97HiMwRdgp3NT+NnybU iAXiEulV+Q8KD+kCknYoO9R71Htc5a63tQHaXfokkl7XXzc+NEusne4feMo8z3me8x721/nv DRQGCoMXhF4PPxwZ3JcmRiZGXyp4pvD7sdb4+fEjRYeKN5VUlGxP4uStpY+U3Vg+q+KCSqny nqpLq/7jvK4B+wZxNf7aYenB/5+kyf+X0g/PpXPpXDqX/lvphf8n6dfn0rn0PzB9nD5d5zuX zqVz6Vw6l86lc+lcOpfOpXPpXDqX/tup5Vw6l86lc+l/XkJ0NhPhfyf5BLwSCWgqYlEiez/J 67MfkLyR5F7kzV6NEogl+xNkPy03ZDtJ3gjlFnJMAs2EvJXkFcjIFpDcgpxerZqc20lyem41 OZfmjZC3kv215L8fkNzo/TvJLcgT5L91cA915Hia0zuphyPr4fr1yCRXrodvqUcFkNOz6lEN HDMc9oyEfDTkF5PvqkeToTwNytOhPAPKM+FqrSRvINenuUmu00CuT8sFUE6QIxvIlWk+GvZc TGqwgVyTlqdBPgPy1uyfUSPcbSM8VyO52nCSW1AuINdshLttJFej+Wj4L73DRnI1Wp4C+6dC eQYc30LyMWgMueY0uMNpcG8tpHw1yS2Sz4T9M2F/K+xvhf301cD8AtFfHqavdshZaH0FtmiZ QTo6miuz6BL0dq7M9TuGR0FcmSsLSMfDcmURXd53jIQGkis5ZRndjSfmyhrzHKYMY+dVx63+ T96+Bjyqq1p7nXNmn0yYk0BT5K8UpjFNAw0pBIoU+ZBiRERIaRrHZMqX5j+TEPIzOfOTmWEy E3MRMbQYESsiIjdGmouIuYgRI6VIEbBWSlqkBbFQ5O8ipZTSliK5797nTJjW1u97/O7zMc+7 93v2WXvttddae5+fGcDkEjHLr0wuU4LlfZMr9IDlosktcTKMNDba5ColsHtNnkBTBmWsNMry TZMn0hdYpsmTpK+wRmiWLArG0tT9gjPwYepRwVXRflbwBNF+VXAr5wmy4ImmDw1u+NDghg8N bvjQ4JY4GcOHBjd8aHDDhwY3fGhww4cGN3zI+ZA4+23CthTBtbj2ZM4TUgUfxm1LyBb8TvCU hDmCD4+T/5SYr8FHxLWPFn3zBL9LjGXovDtOZnwcTxPyxYJPFLxO8EmChzi3xtlvjRtLi2vX YnN5huyUDY9MoWlg+eSiCtSLqJ7qAJ2aqUG0fB5HbnBelqC9Wkhk4czDVIuPnfLQVoX+OjWJ owrUFZD2oiyH5MPg1ejLZauFTAmgC33lkFmG2k1L0VZPlf+SLR+VnPmhMblFVeQB5+PMJIew rsnsbcc+mAUvTAfLgKZqKsPZepzn1ujYbT9OPhuf22Msgs3/aG3+IMsR9vogXQdL7PQINFeK kfjZScLGemRqtdCfK8640MItbqJMtC0W83WLM9XCf4+h9EC+3LTOjjk8RDNgVyF6enDM/dqM 2iPiwT3uMv1fKWzVRVs9ynLR3iDGaxbx4XrtaHELm7hkmdmnwjwuEZoaxOjLIKWLc7xXqdCh m1GsNedZN2iF0SNmhztOtkF4vhwWl4kxDH/4hN3cIx8/B+OYy5ZhNI/wSLnI0I96gveoFSwD 8hNQ8+wrNe3+eN11/w9zv629fDD2brE+YrGM5fDHzSA2+j/a9dm4GPGZGHPRxXix1cH1G3Mt R4tPzLxerLh/lgklH4p6hYhOvVkaszK4B0cNorQLa72D2Wzo4ZK1kPhnOZT1jD178pRp9nxX hX1RfV293txQYf98vbuh3l2iV9fXZdkfrq2151VXufQme15FU4XbW1Ge9bC7uqTWXt1kL7Hr 7pLyimUl7qX2+spP1hJrnGn0zKuo8tSWuGc6KtxNOG1/MGvKdHvGouoyd31TfaU+4XZ7drbo sSh/UG0+L3LcJb7quir7I5WV1WUV9kn2vPrS6jp7bnWZq762pCnTvrhEd1eXVZfYHyvx1JVD nX3KQzOyC+s99mUlzXZPU4Vdd8H+yvo63a7X28urmxpqcaKkrtze4K5GYxnOVKAuabI3VLiX Vet6Rbm9tBndKuy1GLOOq8AJrsMtWhvc9eWeMt0OO3wuGBI3AurqurJaTzl8Z48ZUV9X22zP qJ5gr1hWCt1x0nX/dHQhXs5n765o4rPkHr49AO8+qOuzYkYZ1RhFr1jGw+Guxqjl9b662vqS 8g87ocSYeoXbjhnVYyiUHr3Bo9vLK7zczZBxVdQ2fNhDWdgr68Ua5LtwHbKd76LNUhIyrAbH F8SOHDv/GHLOWDV8dZQr65WfK79RngV+pexStsbpKhG7Vuz4lNBd8aGxKj6kTeizjLNMsXzZ 8kXL/0L5EKRLsCr4ejOuCi5pu/Qj3LLxXYBfOdxi9+Y6jPtHGriP/1+PH/tHIX6ndAdJA/y3 pLjrWiQ/myo/ZEknmvMa24Vju5HcsT8D+EOfG7j1cN7CvMmTIWXcExJpqK5I70Eb7iDldpLk 1fL3SJHXy+vBvy9/H3yDvAH8B/JG8B/KV8Dfkt8Df1+BBUqKgnsi5U5lHvgXlS+DL1TC4C1K C8lKRLkG/o5yE/zvyi3wAQU2W8jShHsV3aKDeyzN4AFLADxo+RZ4h+Xb4Gsta8G/Y/kO+DqW TRKbyqaRwh5knwGfwT4LPkvNIUn9gopx1YXqIvBc9THwfP4fKqoO9avgBWoBeKH6OPgSVQf3 qB5wr+oD96v/RrK6Qv06+Er1G+CrEjpJSvhxwo9JSehK+AX4TuvDJFvnWnFXZV1uxeysLdYN 4D+wXgZ/03oN/J1EjJJYmOgjJdFvwx2rbYgtiRRbsi0DfIINT2C2abafgG+x/Qx8u+058L22 feDP234P/oLtDyTbXrRdAL9o+xvaL9veBr9muw7+ru1d8Pds8LztfdsN8A8QPEWTtN/iLm6f 9jvwA9pV8Le1ayRr7yQNIynpjqTRpCSNSXLyfzHejLlM9wjPGz43vG36GXPMw4zyrfCbtcCK GVmd1iLwEmsZykprA0qvtRllAN7gfoiibLW2ouVr1q+Bt1lXgH/d+g3wVdZvgq+Br7iXrpo+ keGN+8EzbXhmtU22TRbz/S/wS7ZLYi7Po9yv4f5U+x3mxWcxAuXIpJGYy6ikUeCj+bzM+Qyh dVIfsRJ3SSnZy5rdtTS7yl2xlHJdFaVuKqot0euw+oeQ9JW8HDuetAlrQYY3bCbDs47wDYnV xJ93kuKOJTwzJA8eS1h50LQwf76dRpgSMv8HlE2u4OwwumNphbuOXKKsE6UuygC/OFFElCtF uUaU60TZLcoXRXl62dJlS+m6KG/xUlJFmSzKEaIcZ87/40oZtRxXi79VCNsZf5qDvUMwe008 QcJaSiH+/9B/CjMaSaNoNI2hu2gs3U3jaDyu0h/f7+Pa+JOb5UP1UOj/pHoC7oiXYD+sxa4X ojZqp7W0gTppK+2gPtqH57qX6QSdoUt0jW5KFkmTxkgZ0nQpR1oo5UtLJLfUIa2XNkvdUo+0 S9orHZKOQLOVJGkF8f8pV0qZDBtR3+2CpajtZNT3nDHWQmqbUU+/ZdSfOWzUD2UZ9UwjL6Qv Xjfq+SeN+kt7jfpRO1lkXneTyl/xPBEiFQkklZwxxi/byK0hqdyN4wTUG4328l6jrsgy6qoR Qs5SnVU9t9pRXWMeHau+VEM1w42jmqM1F2tuLU0xjpZGlq5dumVpn9G/NmzUy2qMui5HSFnr x9Vn18+vL6rX61fVb6rfKVqTGjY0bG/Y13Cs4VIjNQ5vzGic1bi4sbzR39huWOuewUvURYY2 d6VRN80xan2HUXsuGnK+IrOuFNkm+Z4kaWiD8FA1nZBUxC1bmiMVSQ1Sq/SCLMvTZLccklfJ a4GNcqfcIx+QL2LpJCt2YIHSoHiVA8oRXCPGWAosbstKy2bLVpbNNikH2CHVrtaoDWqXekJJ TlAThqMHPglzEwoSihLKE7oTzlhnWrda91sPW28kjk3MTpyTWJm4NvH6kGlDemwLbXW2dts6 2yZbt+2MlqLlaA5trXY0iZKGJE1OmpvUkLQ+qTOpJ+nlpOvJ1uTsZD25I7k3+VDyseTTQy1D U4dmDl2AbOdv2/hbs1kDx6W3Bp6S3gc+GHhKloDEgePyEGAozkvinV6ieKfH38o9BPB3evyt HH+fx9/m8Xd5O3GsiPdt/D0b154g3uXd7uMSffh7vJ04axHvvPgbL/6mi7/hsgh7HuJvxQy7 sKKFDPTxN3hcL397N07od4m3d/zdHX9zx9/b8Xdi/J0df2PH39fxt3X8XR1/U5cELTmmlhxo 2QEtO4QW/lZtPtoXQlsef1eGdt6T26mJt2T87R5/T8bf7I3j7y5xhr/Zmy96HBdv8wqEFy5j R4jNir/F4zPjb/DGDQTjxsoxLc0Rb+74ezv+1o6/s5PFO7uddK/w5FNi1J20kO80kOTv5+TB dol+Id67KmK23P/HicmTBorl6cBC4NGBPjl/oA/rYejAePQZjzukTsQ5B3HOQZxz5DEDW+T7 qIAYWo+j9ThaeeR3I/K7SUHr84NHFil74A157MCrctrAQbl94A0aImUNvCE9AEwBpuLsMGAk YAdSgXTgfkgmSpkDr0iToI0NvILsckGrC1pd8giMB59CJzKNj0XDIbsasquhfR40z4PmebC8 G9a4YKMLNrqgZ7WcNLBRTgG/c2CHPAr1GNR3ob4bsA/Mw8xK5QkD80iG3pcw2kvY4XkWI1P/ r+xRuTSXNKW+EZOioWh9Dv2fgo3n4IFzsPMc7DwHyefghXPwwjl5NDAesAPpwATg/oFz/6B3 cPTBOLzyoTioZk7dQD7diPcCyYjJRsRiI91jrhQRZ+TceOTceIxxHFYeh5XjpcnAFGCqyIO+ j3jzOLx5HJaPl9FfHj6QC0/kwqs1wqt3ox6HfcGOc58eWAzvPCXfi7b7qE/OgNwEtE8cyMX1 NmbpMPgd1prZ/9QnxPSjVnw4piPAPz6uzSKuPP964P0eaOyBxh7Y3wOvvwqpHni8B1I98HgP 7glg1/94XqVAkw/j74A2HyLRDY0+2OBD7+Owvhu9j8OejdBwHBp4ZnVDgw+2+aDBB9t8iF43 Mh/ripL+IZs+LpNSP5JNvNcp9DqFXqfQi0fxFKRPQfoUpF9CxP6IHqfQ4xSi9Ef0OiV8dxC9 DqLXQfQ6iF4HMdZB9DyIngfR8yB6HMQuEFv3fM3bPrFfrE+60Q+jHMR9y9ABFRmp0jMDPuoG egb6sXPtHCgWpQ93bTvh8dmUIz88cEH+Ak2S5w/0y18C/zJqvostGuiSc7GTPQr+VbQ5aaRc i3oZZOrAfTSJkuWZaOEa5oueF9CzEz1fQs8L8iM49yiOsRdCwwW5EKgAlsGWT6FnnzwbEnOE hj75C0JLH7T0QYsPWvrE+I/ADkPLamjok4sgVwnUgnNb6oFG8OaBC7jr/Jh5YyQfRvJhlH6M slqeB/vmo/4ytHKNTvAlQBFkngBKwSuASqAKcKGtBvUy1B7UXsAPNEO/Ki+CL3LFTHfJJfCn C8fL4BtZjLcUVg0xPdRveAjnF8Hf+QD36RPIJ5fwygWyml6I+bIfXrggfPkoOPyHK028t42x d+Fpmss8LkYeSYlmjwuGfoDbtNQ4C19dQOxGkk3ELhYBPu4i1I/AJ8ZY/fBHv4gXPIz7+qG3 lmNnWY6dpR87Sz+8u3rQs3Mgddu7cXMV2dBvZkOn0OoUMSzGvLsw7y7Zh7ZmXC2HDtojMhJS MU0LwReJTFhtXlt3iXzisyuGFzEjPGnE7oCeGeiCbV1m5HmO9clzIGlo7YfGTpFXhi2diHwX bFmNqHfJ5UAF2iqFbcVyNWoe+aUi+qvhiS65CfAAXsAPNA+spnR45wq8c2XQO4YVnbDiguml TtNDfSLLc8WaMPz8OMDz739DxvCMTy7G+RJhVadcBl6OugLtlairAJ6T1ahrgKXg9agbADfQ BPgBnp9W06t9YuSF0LhoMMK7oLGPEoRdsZVn2LXLzMh+ZPF8sfZ5Pjtjmc13EL5y8NSGHSUu j/pML+9C7PrNLODxm2rmVbG5D3Qi+0RckPuxaD+CXkbW9SGqI7ltYp3zda2Zkewyc7Uzbo2s NnXzrOo0o3cBT1YlYo8w9qtGzGQoov2SkHkCLcVAichvLi/WKZ+vXCfyvU/sKDrgExb00zD0 xgoD+P5zWwPf0V4SdnKPLR0c09DUCO26uTcNie1N0NRv2tFvauhHb25Dv5CU0adfrNFEc8T+ OHv74na+fm4n5vp43NrWESHbYL8nBq28baHYwc1dEyNhf0J8oWOS2CtKuO/j9oxaUze3Rxat 3JuKGIFr5juONc5GYz4xz9eb3ucSL5lnd330rJi1RUTdFbdDDYmtaeF7nhfC79hjDY+Zs4Hk MEhOheRU6kZ/p7kX3u4xUvQwonQOa8boyX3gMzMsYdBj8dbHbEscjH7Mn7ejHfNlP2bwkbPw 0hPm0TLhvVqsgEaxKkVsuLdj8TevrvWD9sQ8GrM8dpaPJA/ON2Hwind75ynGzlMsrviJ4knh //SUINOD4t0T8d+R8H8hj/i3wxPwUegBfCw0FR8GqQdxT/wZfBLoIZqJ55tZ+Azhv3jAHf5X 8NGokJx45lvCf9tAv8Az1DDah0+KdL80ie6UHpAeoBF4np9KI6W3pLdotPSO9C6Nkd6X3qe7 pQ+kD2icjJtrGi8zmdE9coI8hFJlTU6idHmoPJQy5JHySJogj5ZH00T5Lnks3S+Pl+9B5qbJ aTRZTpfTaYo8QZ5A2fL98v00Vc6Ss2iaPE2G7fJM+WH6jJwjz6PPyfPl+TRXXiAvps/Lj+Fa vEB2yAW0UHYi/x+Ry+VK+qrsQlScco3cQI/LTXIT7j69sp/K5BXyCqqUV8orqUpul9vJRZJa rnbzb8LpJE0jatgAbCbJfQL1FmAb+GnUO4BdwB4T+4EXTBwhanShPgacBM6gz3nUF4ErwHXg JmRkwAokA8OBMYAdSAcy0ecy6mxghjgnua+J85L7BurZQA6wAFgMOEhqQtgblwClRJ4uYCvQ Q5KnF/VuYJ9U0rDZPdNtaQo37HHnVRa5yxsuuhsEbrq9jVb3JvCtjUuaNFGXNmmNl9whYGXD Fvechm3ADvecqsnuOY0vNuU3qO55Dbvc8wZljrkL0DYHbXMM/VVrGjvdRY3d7qKG/e48cf4F 1CdR3x43FMeLGq6gBhpl9EuG7HXgpnsTjjc12t1dwi5eH3NvxRi7cXx4sL7uPipw031C4KL7 NHC+Md19ojETmOE+DZxH/9ONi5tUgRz3jRiPzb2yqGkcR2OgaaLAiqbp8FteY7t7PZ9D43bY uRn27Wyixr6mWdwXMR80XmpyAsV87qaPIQ/9HHb3jZj/YoC/FnIfxvwmdL18W1/DEcz/TJzf 9rgLRNz2w4ZjVesG2z96Ps6P8EkDB+JbFOfr1vjYf4KMt3E45p3sfhJYC76WxwN8vWiPYYwR Hx6neIiYWY24waYes+4149cLW/d9NH6N2YgTj9dsxGi2GSuO7U1tAnb4fDFqDrQ3rWpSOUyZ NQLx7Ty+C4BM5MtmM68RY+g28tth1Gg/gfaUWN6L2iXqGzgehfpJ1Cmx9sY65EcEucERz/Xb HDmUhvyZLNAOfx5z1zR2wHdPA+K4al3jRuTU7VitFOtlCY9B09wYRE7EwHPjNZO/DpyNz73Y OsS64+cuNVXi2Iu6FnA3XnVfbnyvyd94y6yNOPTA/4fEvG6vk8vANZ738Od8+C2XnxfY4J4m 1iTPA9mM8QHEZC/WgVk37GkKi/wXOSnWQSxnCzAer1O5jUY76tjeEJ+zZg7yfESMGnjOiZwy 177+HtcBXMEav+I+r9/Cej8GXDeOPRbMY/HtYyM/PKkCcbkSm5fIBasRd3Fs5cfQHzuWm1I4 ENPpngzMXewJTeHGdk8Wn4tnGuzDOvXMRH2Sz4vvH+5UATlu/4LtuLrYxDenJL4ztYpvSxPF d5rJ4tvMYeJ7zOHiG8y7xHeX94hvLT8tvjFMF9/3ZUHLb+U3ZVxPlPHKeJKVe5R7SFHuUyaQ RblfuZ8SlEnKJGh/QHmAEpUpyhQaokxVppJNeVCZTpoSVf6NkpWvK9+kO5XVylM0SvmW8i26 S/m28h0aq3xX+S6NV76nfI/syveV79M9yg+UH1Kq8iPl3+le5cfKTyhDeUZ5hu5X/kP5D8pU fqr8lCYpP1N+RlnKz5Wf0wPKfyr/SZOVXyi/oCnKL5VfUrbyK+VXNFX5tfJrmqb8RvkNPag8 qzxL05XnlOfoM8rzyvM0QzmovEQPKf3KKzRX+ZPyKn1BOa4cp/nKn5VT9CXlDeUNylX+qvyV HlHOKedosXJB+Rs9qrypvE0OlsEy6XE2i+VQMZvH5lE1m88WUA1byBbSMpbLcqmOLWaLqZ7l sTxqYPksnxqZgznIzQpYATUxJ3OSzpawJeRhRayIvKyYFZOPlbJS8rNyVk7NrJK5KMBqWC0t Z3WsgSLMzXT6GvMyP61gARaib7AwC1M7i7AIrWatrJWeZG2sjZ5iK9gKWsNWspX0LbaKraIO 1s7a6dvsSfYkrWVr2Br6DutgHbSOrWVr6btsHVtHTzN86HtsPVtP69kGtoG+zzayjbSBbWKb 6AdsM9tMG1kn66Qfsi7WRZvYFraFfsS6WTdtZlvZVvp3to1to062nW2nH7Me1kNdbAfbQT9h O9mvaQv7DXuWtrHn2G/p5+x59jvawQ6y39Mv2R/YH2kXe4m9RL9h/ayfdrNX2Cv0LPsT+xPt Ya+yV+k5dpwdp73sz+zP9Fv2F/YX2sdOsVP0PHuDvUH72V/ZX+l37Bw7RwfYBXaBDrL/Yv9F h9jf2N/o9+xN9ia9wN5ib9Ef2NvsbXqRvcPeoT+yd9m7dJi9z96nl9gH7AM6wv7OBqhflVSF jqpMTaBX1UTVRifUJDWJ/qIOVYfS6+od6h10Sr1TvZNOq59SP0VvqCPVkXRGHa3eRX9V71ZT 6byapqbRZTVdTac31Qw1g66oE9WJ9JaaqWbSVTVLzaK31cnqZLqmZqvT6R11hjqDbqgz1c/S B+ps9fP0d3WJukRS1CK1SLKoxWqxxNRStVRScddYJSWo1Wq1ZFOXqrWSprrVJinZlmhLlIbZ fm7rle7QcPsrjdYsmkUao6maKt2lWTWrNFYbog2R7tbwRxqnJWvJ0nhtmDZMsmspWop0jzZc Gy6laiO0EdKntVHaKClNG6ONke7VxmpjpXRtnGaX7tNStTRpopaupUuTtAwtQ8rSJmoTpQe0 TC1TmqxlaVnSFG2yNkvK1mZrc6TPaXO1xdJcLU/Lkx7V8rV8KU9zaA7pMa1AK5DyNafmlL6i LdGWSA6tSCuSvqoVa8VSgVaqlUqFWrlWLjm1Ss0lPa7VaDVSkVar1UpPaHVanVRMkjxDDt++ f67A/WhFKUlVuI+uwD1xRR34ZtQ6EAAiJlYA7SY6iCozUD8NbAQ60Qf33hXdwHZgJ9AH7AUO AC8CLwOvAa8DZ4FL6LMN9VXgPXFOqtohzktVuG+vuIUxLMAQYBgwAu24j68cC6QS1VQCtYCb pBo/6jDQRnfRDJpHi/FkxH+946dWaqd1tAnPqjtoNx2gI3SCztIVuiFZpGRplJQqTZPm8d8T O3c+nursezzDufdx7NzOVc6Tzg3OM2AR5+vODudZMK/zkLPVeRis1vmC0+88Albq3Ol0OV8E K3D2Oouch8BynZud+c4tYDnOTucCJ55WnDOdTzrnOdeCTXaucc5yrgNLd250Zjo7wMY6Q85U 55NgKc5K5yhnLZgVepOddWAjnHlOi7MATHPmF95wOsFk5+zCK84ckgvfc84pPOucB3bZObHw hHMy2BlnZuERZzbYXpw94BwL1uucVbjbOY4shSedCyCxGBKOwmPQYUG5AK2L0eoovOhcAulV hScL1xRi/q7tha8XrnDt/B+7JjLxeyMSvzQyftOTKH5PM1L8GmY0SYhKK56MNcQrk6gUeVSK PCpFHpUij0qRR6XIo9LXTSCXSi+ZQC6VrUQNK0uRP2XInzLkTxnyp2wEgNwpQ+6UIXfLsgDk f9lMYA4wD1gI5AEFce1FQDlQAzQAXiAEtBJV4ZmyCs+TVXierMJzZNUZyizMKMwCpgEzq5IL 5xUuLBxROLYwtfBQYXnhnMKawrzCgsKGQm9hUWEIZWvhSnyeLFxbuL5wE1q6Crfi01PYC767 cF/VgqrFVQ7O+K/I4H/MUL4mv0Oy/C5iYRGxUEUsEkQsNMTiIUTks4MRuQMReZRGqY8hLmNF XO5WnaqTxiMuW8lu24bo3Gv7wPZ3us82gBhN/P84kkRzSBexziLrP48T9gtrgV4QKIgUrCho L+goeLqS/zrFKr8tvw1yXb5OEpvJZpKs5ql5pCD3CsmiPo4MZLaf2n5Kqu2W7RYl/Et9pJTL d/Lf+2vSbsKe44KtrmRgODCG5AhyzWUH0gHkrCvbPJ4BzAZyzOMFJhabMg5gySAkl05y1EIy 9kU5OkTU5CoFHwa+Pw670DYCGGuAtyFF5Wiq0V8gw0SWKT8NwEyjc4B5g/K3bcLe76oDsO+7 AkIHt1n0McclF64DrhVCTo4uNNva/wXg+uF6Og64hrg6hT/k0gjJT6wYBLm6jbZSPvZ2YZuw Txzv/EQY5/t4Lf/Zscq3p2WTPt8TaOlyrGvubdmq53qSW3r0/ObdLb16bvM+nHWiZbdejHKf Xtl8qOWQXqv7Ww6Lll7d3Xy45ajubz7ackIvbj4BGS5/Gn13t5zXw+CXhbZrej5GOa/PB78B ydOQzG8+HyHHFv/GiKq3eZIjmmhJ0Vc1X27p0tc0X4uM0tc1H0a5weNCudkTiIxz7G++EUnT t3gvRybqGwIUmaxvg8w4fYevMjJd34Vylr5HtOz3X4rM1V8IqJH5+pGAhpZjKEc59gdS0GtD YFQkVz8ZGBeZ7jgTSIvk62cCEyNOtKdA8mJgcqRYv4K+leAp4BcD0yO1jmOBWRG3fj0wN0Io 58N++C3i128Gclt6PXIgv2WfxxpwtpwGL8Yc1wW28VnEldsCOwRH6VksWvjsNqB9F+b1D6XH EdgTcXqWBPZjvpWBFyKbUR5pOeS4HjgWGecpDZyEnk8o9T2BM5EtouSSKPXNotyGvmme5EBl JKw7A7Ww1hW4GNnmqUP7Dt0fGlKy2zM84I6QZ0zAj9IaCEMmELgeecETCdyMHPHokNzlaAvK LeeXFgfaIGMXHjB6pQdyI21mS2ZgVWSVJxvlGs+MwBqUswPrIus8OUJnfLkgsAHeWxDYLErO V/ivIt+2+fZEjum79C2Rk572oDWieTqCyZFiz9MYZQdmtCtyRuRbj5jXHsRiSyTFsFDPDVxB 1vH2/Z6NweEtJxzXg2MiFz3ZQTt8uKp5d+SK4xj8f93TGUyP3HQcCWbCe92ce7Zz7jjSvDsq 6zeD2chPHrtjnp3BGVGrpy8wPZrs2QvLezwHkOddYu30el4Mzo4O9/QFc3D25eCCll5E6kxU 9rwWXIy+rwcdkbmes8ElmNEOxyrOkavH9P2eDvAF8Oc+yO+KjFq6jnPPpWAp7LkadGFNbQvW IaY3gzJscwT16BjPcMHfC7wQtcPzudF0x81gIHLGc6u5N5rptQQj0WzvEEShC3xFdIZ3GNfp HRFsj6QZXN8T7EAm8L6zvWODT6OvwVM5d6wLbmzp8WYEO0sOe7OC3S3neT5E073T+Iy8M6Fh K6wqBZ8T3D7I5wV3YmfgvkrDjMCRe+DehZx78wQvwIxOeIugJ8dbDj0iLtEc3Rnsiy7w1gTb 0d4grPUG90bGeUPBPli7LXgAvLV5bGSVd2XwxZZDnhnBl1sOeVcGXhD8NcGxOrxPejpKdmNP aIsu9q4Nvh51eNcHz0aXeDdBf6m+zbEj6vJ2YScZx3ewaLKQrOOjRHX9SPBSNAfr+jx2rSOB ydEcjxWWnPZOE7HIMfnVyCjvVk9ytNTb4/OXpGIVINsdNwPbogHdzfMBPn8v4vT2mn6+Cst3 G5yvQcP/Yp2O8+7j4zr2BFIw60PBW5Ej3sMhC+Z+FDKbENOrJSs9Dv/wyFzvoeW1EdV7Yrk7 UgnuFzws+O32o6EQIqUHJpes1J2hYcicY6ERyJzi0FbM6FiwO5LmO+Lb09rlO9Z8rXXr0mJ+ FfCdXN7W2uO9HOpq7eV7bOtujz3U1dLrO7N8FeIouOM633t9F5evad3nu7J8XWSu77qvrfUQ vBduPcx3/taj2F211hOeHPDT6Lshssd3s/l063m0T2+97O3Fzn8N7ZuRA1uDfa3X/PLyLZEN 3qPw9ia/Fe0mh/3TIxuWFodlZPWRwI7oWd/FsBXjbggnI/NzwsOxY5Tyfcw7LDwG89rDuWNd aCxWMcbi+2coFdl4Apmz23sa16YeT0coo+Wo93QoC1l9PjQNnr8cmhlp814LzWnZ6r0Rmgcv 5YZmRtPht4XIyW2hPOwq8yGZxq8a0YhjVahAtBRFZ0OyPLrCR6EaZPLpUEO03aeGvNEOvlNF n/Zp/tKWQ76UUCiieYtCrfwK5c2A5R0+NbrRNyq0EpLFwb7ITd+4AEU7MeKTiJQ/tLbltC8t tB5XunWhTVhT80OtyIqtoa5ot97Gr6q4BqVFin0TsXdpvsmes8hki74huh2ZfAK70Ba9OLqT 82gfRl8Ib6xpPh/d65se6oke8JSGtkZfhDd6oy9Dz/Toa9g5e6OvY8fATqjv4Xb6wmF72xjM l9rs/vZwelu6vyOc2Zbpfzqc3Zbt3xie0TbD3xme3Tbb3637W2f6t4dz2nL8O8ML2hb4+8KL 2xY79ocuR9L8e8OONof/QOBi2xKs6424Q8D1GnMpCC8B38zXuz8Zsev1vxgu/ZpTd/q2RRfw /Im+h/i6ogt4fMH3huvaSvU9YR37w/5woM3lfzkcgVWvwao6/+uwSvefDQ+P7SGObeEVkZv8 itAWQN8xkTbsqLjaYqx25FUH+B7kFTjPq8geyHRE2oz88R4VXFwffRdxtdrsXRlOjqyK8cCe 1n3eXp573qLw03w34FzfBp4GPRtbrvkvhTvbIh475/qWcGdkundhuDuWn+g7yHV3uKNthdfi vdHWrm/27Ym6/FeXj2vr8KcHt7c97X8vvB05sA07zHD/Ldz57PBtwXUwjceubSOPXVsnXx3G LKJnvZebe7+2hq9c4T1jdZyMpDVbwjuRMzcx0w2+ccHu6Fl9Q6g3esk3C7G4pM/HHVSaby4y 4Sr2n+lR2Ye7weh7WDshnvOh3aLcB5nc0KHoLd/c0KFWC5dHmY9yiGdF6HDJMMjPRHSOhY7y EqtvlM8ZoNZhjiuhEy03eC6hXYzFy9YR+g79InaPYl94sKzU57eONUp9l6ejNRWZfzra6asN nW/NEGWWKKeJ9eIS9ruMTMOIhBHdoWstJ3z+0A2+P/PM9IWXU+scX5ueizLsSysZq59crrbO E2UqLyPTfau+ao06kJnT+Uzhn/8m71ugosquRM+9FPXhZ1kQpBFJUSJNaJomPKgAVpBF3Ri5 VUWIA1UFMbRNiCHEENogvwdI8zGOz/iIIaRjnB7GdozpMcbHIz7DGEPbDo+wXIbQts9HjEHb 8FjGuIjDMC5i4O29773FrWpsO5l5WW+tWWftfXbtu88+++yzzz7nXqq4LfX32sI6nWBJSef2 xt76nZW2xn5Y0bCm2kwvLTYea+zt9Nbfbex9aRE8eb0j3qNviwF/gjdeaWksaYsHDXNtiR27 GrfBSm9pOAl2tuB8dSwg7qyoP/af3+iswjzcWdXYCzLuhgqcWbCzHCyZhN5rpFMZaEuR7alr PN6WDiOF02lnQ+Mpdz/0DvyXDjQWtVk7W90Lra2vCI3d7lOvuPdWwi6Z2HimzdbZuTeiraDz QONQ27bOw43atvRXjjQOtxWB90baSjr7AJd3Hq0vb9sJWaK/bde+eciQnR13G0dbOzsHaI9Y dF9pnu9iTRFwel+ELDEB6zpqb0vnyabY5okuLex0LV1heALvMn0J7wgGGirg6gCe57tikO6K JzpxbyXSuGN2pbgXQKYG+a9E1Y8AXYWZrSu9/kbzYhdDGvhE772E9yBNZjzt7xVaW7ussHZY Z1WDEfqa3zuF9uAa6bI1ngIbCpqSkN+U6uNvI34R0SVId9Y0HG4ef8mC9wudW/eaQX62KQNk yhsewJ41j2OBfQrorp1EQwZGDfVDTfc7J5qygd7VlOc+2LWb+LuQ37WH6CaS2doktB7oam8S 2850nGkS2oaIHgZabBvp6m4qbhsFnAR79DztpyOwy7R2HayfhD33JtE2oi8S3Ut0zd6otiuw p89Abjyhphuugw+TmtwYyQ0DYHN/0442bdcxorcRfRzkJyHHVu6t7jrlPtg22ZXYVA30GeR3 DTXVNmq7Tr2HHib5kaaIthsw7xnuya5RiP8bXVfqd7mvdE2q6BtE30K60wI253bdhShN74wm ugRpzMkK3XUPzydwhrS0hb0yBftaK5wB6tvCuuYaxvFOEM4wtzp2uYeaXutagHV0q+sxnAdu ovzeDpgjf5rOCXs7Oo5BnFzEM8/eDtrRLnbzTfzejm490l1XiI5wLzRq4VST0Xa3O6qppe1e x66mjrY5yIq32hZemWna3/a4w9rT0NPa09ncus/YUdDcsM/Ykw8rqxOiETISxAzeRc5hxu4o b7wCq0mUcHNI+4XuN5qN7Ze6zzZHt+zpPtcc1z7WfaHZ0n61+5J0j9yc3FLUPYZ3mt1X8S6y +1pzWvs1OBVId7h0byvf1aruWOV7VbpLbc5sn/K/V5XuRptz26e7p5rz22e6p5u3tt/vnml2 tj/svt+8vf1R98Nmb/sjaEV6mivalzpimqv2abofYb/dS9RvOvbbo5HvpvHeOR3vnXtC0JIe I1mSvmJJT7Q0CilD4p1yTxzeI/fESePCO3fQTPfXmJewLcT5KO4gPRbcQXqSkdOThmuwJ7q5 Zm91T6as7RjZWbcvpCe3uXNfdGer9HRCemLQfKBxpGdrfQmcc843H94X1+OUn0XQXX9z3z5L z/bmo/uSe7zyMwfym/xUge7fmwf3be2pkZ9aSM8HJFp6XgGturY1D+xL67zYfHJfZtfx5pp9 uT0Vzaf35fdU4X+0oF8dMtWvDnn61aFGX6D3smD6pWEc/dIwgX5pmKhv0LeyF/T79P+FWelX hHb6FWFx6EdC01lJ6L3Q+2wH/fLxRfqd4+egjwyWyD7OGBPYZ1ksq2SvsEz211BKWC/7Bitl A+zvmIedhFLGTrOzrJz9mA2zF9koe4e9xKbZb9jL7P+w+6yRLbBl1sbxXAr7GneQO8TOcv3c O+y/c7/i7rJ/1tRovsz+oDmh+R5b1lzQvMkFaa5o3uYMmlnNb7m1moXgIO5DwYnBm7iN2oPa C9wm7Yj2Tc6rfUv7FleuHdP+gvuM9n/ptNzndQbdOu5bug26eO6ELkG3jztp2GfYzwcb/tpw hA83fNtwlF9n+BvDaX694YeGcf45w9uGKf6Thl8ZFvhPGf4QEsV/Ef/SxHeFRoSu4btDTaHr +P2hvw6d5Q+F1YW9xveH/Us4z/9T+Prw9fzb4RvCN/LXwlPCU/hfhj8f/jx/k3Hglxp6UhqP v9ey9wMcAzgOcIrF2o/Zj9tP2c/Yh+zD9hGgRu1X7JP2G/Zb9rv2e/Y5qBfsjwVe0AsRQpQQ K5iFJPztH80t09v1dsbrRb1Iv5E08al8KmN8Np/NOD6Xz2U8v4XfwoL4At7ONPR9Li3v4l1M x5fypUzPe/hyZuBf5F9k4Xwl/zkWQd/nMvJf5r/M1vJ7+b2gs5FvYZH0fa514O9EFqP9hfYX +Lyf3WC3aGQm/EWkvYpV2qvsNfY6e4O91d5pP2A/bO+zH7UP2E/aT9sH7eftF+2X7eP2Cft1 +037Hfss1A/s8/ZFgQlaIUwwCTFCvJAopAjpglWwCQXCNuCZhCKhRCgXdgq7hN3CHqFJgMO8 fXGlkAyWOWGBislXHsvloNAr9H+CF44BMOG4cAqunQFqSBgWRoR7wqhwBT5NCjeEW8Jd/H2d 7u/Bm9F+cY7/TyGT1UHU5rJmiPkCinMHxPdZ5oII/zErgvh+h32K3YNSTD76tG6jbhPbrntW 9ywr1T2ne465dc/r0phHl65LZ2U6q87KynW5ulz2GZ1NZ2M7dJ/UbWOf1X1Gt4O9qKvQVcB6 4dgxWEnoZQsLpphh9jMAQwDDACPMZp+2z9jv2x/aH9mXBI39kRAiGIVoIU6w2B8KyUKakCnk CvnCVsEJeDuAV6gQqoQaoQ5Kg9AqdAoHhMNCH+CjwoBwEningTconBda7VP2q8JF+1UoY0Bf A3zVftZ+zn7Bfgl/i6h/Wb+Xfm0a4uetZiiZ7OdQsti7UKyw6n/DPsZmoWTrinXFLEdXqitl uboqXRXbzLiw+XD6jzkshekYK4kAiGKcew7qWAAz0AsAj4MySvTuuwQR7nsESEe550pi3Qv0 2ex+XJLk4Ymf6tGXZHgiiI/XkafIKe0UOtsT5dONfGyLgLoUGnUrdJ4nlgCvY439KNcUEDxm uq60Qxr7w1oBEfoT5fFg38VQu8FGrAP1rWaT2jY1PKltIOBYd3iSyC/VnlTf2BW70Ba8jv5R /CquApXQpxqwnQI4FgUU29Bn2A511kKfim+UvtVziDrkMeaHeDL8/Fgs13hdkVdqvFbvyfb5 VtGNdYtsA9Idnjyq93sEn9+VWukbP+N8KrViI/oLx4RjOOQR39NeGZtSH/EUl7zqcZe85tnh Z6d6LIG2igF+UOpYlW04HsV/gbFQqaLVMauXx6D4D3mKjhOeSr8+lDriCeNXxhsRMH7lM8YP 0ko76MutlXiBtU/mDU91yVlPbckjz9mSJc+5J/pltbrlA15/mtyf0k+l7F/Fz7EB8/V+dcvK Z3eYNO4n1T6/BPjabZL89LTaN+/iKrV6HOrYx/qcp96XNy54WkoueTqIVmolJyvrc8yz33ft qucQ9Ytxr+Tra54jJVOeV30+06/EBtXTntd8Y0T5Gc+Jkvsg89Dzhm+dy21KNZ4LpSGeS6RH iUmoS42eMdRRGu256otXpZZzXWmyZ7o0znONfJjiPe9O9150W72X3TbvOOZ1d4F3gnjbvNfd Rd6bJFcCORHzZeAcgw/dMaA/kA/rv3TAu53ivnylD9+c7/TewTH4fP202KsMWNuBMRWYrwLz kuwjtMm9yzur5BD3bu8D9x7vvLvJu+jzldJnYD5W4ma1/SmAX2rxTJGfEdI8M6WZnvvqfao0 1/OwNN/zqHSrZ8lPl7LPApQ6vZrS7d4Qor1eI+25Cih6KrzRVFd540prvJbSOm8yjf8JUNrg TUNQ4q601ZtJdac3V72Xlh7w5pce9m5V7z2lfV4n1UdBB/iR5le9tydJcVB60uvF8dIYT3sr Sge9VdTuvLdG7a/Si9660svehtJxb2vphLez9Lr3QOlN7+HSO96+0lnv0dIH3oHSee/J0kXv 6ffkwtX2PmVPUefhJ9WB8RWoT+HjPlapirfV8n7LKvqVnKicD5R1oqx5vSqWUA5jMV7en/NW aneiNN9K7YOnjfMJudYvltW1sm4iAtZR4P6nyqU0HlXt2/cDcpJf/SR7iwP8GdCfb68M3FcD 61pVvlPXypwo+TpV8vdX6r/Soqw3d3sZw3Xg7i7Tug+WhbmZd5Cgt8yE4DuHK/oU3Whff1mM bw1jP+rzsbL+lLOx3J7yN+wT7mNl8b51j3xYd7j+1Prcx8sSVz17y3rdp8pS/NZhQI5ScpH7 TFm635kIr2FOHCqzlujLbCURZQXu4bJtRKeWFZUklZWU5JWVu0fKdtJnuF4ilO2i63DNfaWs ifggQ7Wsg2hz2W6SGS3bg3fx+q/r/ytjoR+l/1z1u9DfMfyvrUl/2ecrwUFsmZ6jvEjPUV7S jmjf4vroCcqr9ATlOD1BmaQnKLfpCcq7hn0hUXwBPRe5Qc9F/jc9F/klPRe5Tc9FfovPRYJi 8blIUDI+Fwn6CD4XCUrH5yJBH4U72hPsjZWnB1aebbPmWQWraC22uq07rKnWSmu1tdZaD7gF aN7aYd1vPWQ9Yn3VqrdmWF+DKyesb1gjqJwFOGc1A74A5ZJ1zHrVes0akdlpnbJOW2es961R UB5aH1mXPqaxxlIxW5OgFywZpBE/xRJkg2yGFV+hy+nL8PuTAfe2LTAjbWwf3NWegZJD97m5 7BdsEu5kr0H5OPczbpzlaSY0b7N8fF4FLTnmZRWq8ZqZRbYgA/qTRp4hj10ZeYtqzIdgxDje szDON6CcA6lK6wWyEZ/8raNfJDKIniR683My8FIY/n/eVCgalsZeYMHsoywD7q+zWDYzgE0C C2dboUSwbVDWMBGKkTmhrGVF7FNg6afZdhYFMedl0fQfN2NZA5T1rB1KHOuAsoFdgRIPY3+b fZiL4CJYAn07tH1lrIVXgzIKr9rmCq8VThVO5x0unCm8nzW+ZaTwfuHDwkeFS4XXRE3hQzFE NGZ5RaPtrhgtxuXViBbgJec5rYm2e7bHYpqYmTUg5iK2aq0szynmi1uzBvJqbKNWJjoLZ/Ja X6gStxdeLbwqegunSasR9PuKWAd6qGwpsT3OGhcbUItSrEwqWbNiBbRszXM6YlAX0AfEwy9U 5dUAPU0wLVaJNdBeA+O5hr1Q6St8CPYZ0W6wYmpLf14NtDosdhbOiGkgfVQcKLyW50TImgU9 D8WT4unCKWti4ZQ4KJ4vnLbdQw0+WLIyApAXQ0BziHiRtF8Wx7O8tlHRCKNGgN5kmBCvo16l F9KoANiAIN6E+j5oBRD7xAYs6Anxjji7ZUTM3Qw2ipkg90CcBwsXHUzRJoY4tNi/X98AjjCH SYwG78NowUqgFEAOtQQpsutPgWnHMT/7/cBxLGs8a8Bx3HHKccYx5BuvClbjI88xvGK53yiA 7xjBWZYAbcA+fPZfs90Tkx3xea2AEyEqW0nrVOE1R0rWrCPdYc2rc9gKZxwFjm2OoqzxwvsU p8xRUrjkKAepnY5deX1ip2M3zeGiY4+jCT3paHd0Q+xkQuTCHDoOOnohOryOfjHfVedqcLW6 Ol0HXIddfa6jroGsfFe+2Fo44zpJswk9uE67BhEcB10nxVypBV5znX+hgmLH503Jc2KfbRJn fGVORQ3EVh+su1mAeYwt10XXZdI97prIq7PNZdVRrB4V67AF+sZ2z5qYlQ/F63zDeVahqeQ7 z0HspEF9AeASjJ9l9WHZcmbLGeeY86rzmnPKOW1NdM6Af/Kd950PnY+2jG4ZdS6JneKdrIGP 1zr5PKdLsznZFeIyOqtd0a446qHOmuiywOq86EqGWIc+XGkf5/PyHXtoPUHPrkxXrqMXfFf+ 8VrbFVe+a6vLKS66thcuubw4S64KMRNHYpuDGRx1XHFMOm6IXhgVrEDHLYC7jhsOGJl4dHOn z19HHXOOBcdjHH3eYdtjxe+F9528VIuZTr0zwhnljMVVpPA2D4DuRacZwZmU3u5MdWYUPrJq fUBr29HtzIY+C1bygm9eNJDbEGjdO/MABKeY3o6x4yx2uimGZJqi6AYksB3OSsceZ7WjwFnr rHe2ODuc+5XohozqBNlD0sp0HoHs2oqAsynlDifvfNX5mvOEbbRwBqL/YVbfixOYbV3XYR6u u266qlw1rjviVsyHYONDmPtUR0HeUTEZsvNjGBMT87MGpGyM8+OaFY+6LDjzYj70nux64Jp3 LYppRaxIWxRWZBLzX6hwHCyKKYovShS9RSlF6UXWIltRQdG2rPyioqKSovKilMKHeX0wW0bM uZCzITsV7SzahT5Bu4uapEyJEQyzOlq0u2gP7YWf/w90gqpmdfTMHP/vPEtrYBxAVNoeKE1Q 2qHshNIN5WDalbReKP1QUqAcg3IQynEop6Ag7wyUISjDUEqgjEAZTRvF/26pf1G/k/6L5yfY J8GvhbCwg5gLTgda9lfgvVDw82dZJOPCZsMekkX0t66cIcbZbFAPQ10QlJFzJucxwZAMSA8D jMifRwGuyPxJgBsyf0TmjQS0U+hbcq3wJ2W4oqJHVfRdGa7I9Q3VNQXuyddHVbqG5FoB9XiU WrExUN9qNqltU8OT2gYCjnVO7nNBNXbFrhH5+q0AewMhsP8RFQypQLHtrtzuityn4ptJFV+Z wxHVGB8H+FGpJ1XySg3XcnmVb9XXFBugztXLdYTKhqGAvofk+VRqte2jUp0btUr74Ry/MebG ApgBkvzt9BtLoK2BfgisA/sMnAs1qGNWGYPiv7srOnJT36ev1cYfaENgfUs1D0r/Ci+wlmVy MwCyAToA9r+PX/5/qRX/KvWT5usptW/cT6kDfaz46Wm13/oKrCdXsV/Rn5fjWzu5AoAo06JK ThXLucUqGbekn+Jezte5OwAqVT5TxwbOf3WO3zrMrQWoB2hR+V2JlUMAR3J8a9G3Jl+VbXkt xz/XDOf4cl3uWYATEr35MEAfwFGAgRzK65tPyrzTAINy35gTF1aZQ2UMgXzoa3OyNDZ1H8r1 zeelMfjlwKfFWmC+fb98tVpeGpVs2nxxhb/5MsA4wITKV0/KQ8pYV9ufAvi5b8h+RjgHcCHH b5/KvQQwBnA1QNfdFci9BjAl09PS3PhA0TMj1/cBHgI8ksf/BMhdkkCJu80auQ7J8dtLNxsB onP88vTmOLm2yH5MVo1dAfDV5jRpvDjGzZkAuXK7fH9/bd4K4ATYDuAFqACoAqgBqANoAGgF 6PwA8aHeU94vL3/QeFNqZW09ae95Uq3Ojeq1Hlgrc/6k+sYT4Gn9Py33rua/wPWz2v7/tFqV i1at/5T5Uet9wp65av+r1ZOq/lV+9yjzhGvgurQONt8EuANwQIZZCXznVaW9ohtj+UHOyhoe zfE/HyvrTzkby+0xf+M+sXl+xQZae9HS+lPr27yYs/rZW9ZrYzn+6zAgRym5yKbN8T8TTUrr 2Ba2Mj6bSRUXspwtJiBOZH/bEld86Zs39RpAmficx/i9J3rLAvuPc6/J9eJ/4WdhXAS+2CRl BGAU4ArAJMANgFsAdwHuyZ/nABYAHkufn+Nl0Esyz0UARKkgViVjBkgCSAXIkNtnA+TJfOHP ABGgWAVugB2yHZUA1VJfBLXvA/UsP6UppT2lO+VgSu8zLSn9z9RjSelVlWMK9cyRlOMpp545 JF8/DnDmmeKUoZShZxMRYy1Tw9InkDxOcth2JOVUymjKKEhcURV8B4Ppvd/0pTeLaOidIh+i d4dE07tDnqG3hsTR+0I20Hd8zfQd3+fpHSEfpbeDZNJ7QbLovSBWeiNINr0RJIfeBbLlL94f x5k46Vuzw+w5xp6FWHp2IQAey1Ag1ckQN8kQW8kRKoC4Soa4SjbLwMuQJNepK7pIFuY+OVsC 4hesAF6zjD0Vnnu299n+gHLsPZz3569S8I2D9E1uRm+Okd4ZE0zf5A6hb3KH0ztjYug9MXH0 hpgN9G4YM70DxkJvf0miN74k01tePkLvd0n5f6aXY2fY0MrfgDb0MdemqQ3nsWya3uDdNLPp /qaHm+7T50dYEyxtOJ+kSQqRpc4nGZGPJSkaeUkWKEapbJrComhMigONPn2ElyRNip4NXtIQ AjInsR3ypZ43nMcnhzz6WMsP8D+BtP4m/08snv+f/AzbqG3UNjI7Zk8mhP44dIR9gt5YEwNg kt8Fk+Brr4H2J6D9SX6YBfMXQFcstYkDiWjCsj/WpzEOAd/6hBjfZsSyWZ5KIoaZYiZjJtfH W2ot9evj1yeuT1lfBCVmfXrMrfVWANv6gvXbSMer+A1c/nv896DvH/A/AM4P+R8ynh/kB1kQ /yP+R2DZP4I1wTCmMaan0YSAZT9hoaE/BfuMsOIOcGP07G47WwuR3MHYh90SWPav0GqwHFqd D8BZHjKXxWk5b75ruWhOt1zG+pkqy2CC3jL+4WTLBNLK59gUy3WUsWy33ESexWu5g3zzLcss yURYbloqLA+wRlkES5VlntqArKXGsmip28gUoLbpGwsQUCeBd6MWoMQHYJsCYBv0vzFRtnHe cnhjikRvtFpyN9qgv8vUVx/pCZPtOi/b9EBlz3XSXbOx3HJ0Y3psysZ4y8DGbZaTG4uU8T/j BDsaNoZZWjeaaFydMF6FPrAxhuYR3wnG6A1anKHc8FnGG1407GRaQ5WhiukNuwxfYAbDFw1f ZKGGrxi+wsIMewxfZeGGBkMjW/OBY5jjTtM7ycJYA5xbWAJkw4RzMlwAuCQDZLWEqwDXAKYk 2LAL6hmpVkPC/RU6fmoF4DNniSbaZc42Z8dPxETHxyUMrgNqXfG64vh5KBc3RAG1uK7YTJ8T nDHRH94VH7fuHJTihPNmwVyZcACujMePowxILcZErzsHLc7FxMVEx0QnXEw4DNzZmGizEH/H 7F5XHT9h3uED0mk+hBA/GL+IYBbWZZuFhAkfZK8Uycb4B5KN5mJo15IwgHTC+YST5qQEJ1yN k+xD22S7sqF3ETSLaBFol+0B3WjPvHk/2HkZrBhHu+MnpPGDXHVCn7nSXA29Qdv4WdAEdMJR +FRvxveqhPFf5yFH89/mv80M/Hf477AQQ5mhDCKgwlABEfA5w+cgAmoMtSzC8LLhZRZJbz2L Cp0PnWfrQhdCF1gMvdfsmT8px3kBigFqKctZ6Dcm5fRdBpuc+ej9uayFvnHAsa0quQy2C9/O 45PjIBt9FyKah3xE/VNv8dQbvnNXT5HOKNI1FOlainQdRbqBIj2EIj0UIr2BhZMmHAOjMQTT GDaRPf2y3aep743E6ySrOTai4l2V7VbLDZPVHKuTefjfs/4tvkevxzxx1FrSxEgTR5p40hRE mvSkA9/GHPxeG6iXUNIf8URf8PTOL/SGNA+JNMYm2Rd1Ph7PdsizqJbbJftim8z7c2bpafP+ JLv72XmV3RJvmJ1QxZ7Eq5VnUc07Is+iwvv3msMPMgv/lllezRccO8eu0KkgFv/7eNR2H7ii RCixUcVR7qgdgCvh0w7iVROWaBGuilG1UCqj6ukz0qJcOqCIUftlEFUa9VBEAkWfokmtp5Zq vNJC/VdLn3EshpcML8GY6wwQZYa9BoyAD7w3sUGaQfkvm5EVACeZK/I4lALCp3z1cV85FXnG Rw9BAWwaNB021WFRSY6YBgmUz5KmM1SvaDjj0yTpaYgMkzgmL8BlU5XpcuRw5DBi02WMcsPn DdV/7ghNDwDmmcs0Z1owPY7kI/WREZFRgLGOjTRHJhGdGpkBmI/MjswDnjlSiBSBLo50U6kE ydjIaijZcsE2ep/G2sh6wrGRLSCD2vSypg5ZT6VpAa4hR0+tEQS6soNGWGmo/xP2Dx7O/9cp u0rrMAn/fz6XwWWzS/D5VT9uMpdGWbjTjxvPJVIu3+3HjeJiWQd8dvtxQzgj/c4y34/LOC0r gc8pKi7PFuicHeXjrYzt6SvcxB/nXweJv+dPQmb7Pv99OFmf5k9Dy7P8WfDNef4804Fv3mR6 /jJ4yMD/nJ+A/DPJv83C+Xf4d9ga/gZ/gxn5KX6KreWn+WnQ+S7/LuSc4dBhyDk/gVP5h+BU /lOIDTzbf4Pw1wl/5z30N1T0ERXdp6K/JdMwds7MwXg55T2lzxIvhouHT3N+PCOHvd/04+m5 CPg05sdDD3Mw0yoee8SW4NOAH28OvM7BXqTmzbIHtBupedNsBj5V+fGk35kW+/EmKLZsfrwx v71A4o2wUdVcP0v3aDivjHIyRzkZs/Fu2vH8vGqoeY9Xj6j43yS6UkVXqDz/dZXnv7FCyzLf UrX9lkqnRH/Jb9YkGsdioW914n2kNJrkFWmwX7oHRTwIOIQFw2kvxMf1yzdhS4yFa5grnIVr w8MATOEx4fGAsU6Ezynh6VBiwq2AbeEFwN8GxQT8ovASkMCyW64TqZ26xIOcCdpqw/eAjiao USZMvmoDaA8vp2tSa4RyKunhOwHvDN+lOjd80PuZCK6ERrgHxs1MIQBGFcD9hwn8ZrIAQISY 0mQ+yg0EwEm5Pi3TgwCZALkA+dJnYz9zhXSvnV5bDHhm7f21D9c+gnJ/7ZJJE9KNxRSydglr 47a10ybj2hmT0RRtMoL0QyymEJPFZCE5o1SkVopGUzJqBEz6TGmoCzWt6DFlgl7N2ulQEei4 0NSQ3SHHTHGAu0N2/7udeD7obnaHskUYfZeYhaYDWAFsco1QALBNrovkayhXIkM5+LM9NAnG cTA0IzQ7NC9UgCKGFoccDGnHArRItQBSGVCSQt2hO+gzFKiLQRav75CK3GpFY61aH+qSNSl6 skOTQDIJdYU0hfSG9IZWhlZD3R7S+2fen/xZkbsG1qYR8rMRItMIEWqEyDVC5Bohco0QuUaI XGOmLOcEgNOg0QsApyQj5E1jDUCdfK0BAKLWmC8DfM5oZy7d+JqkiH7AqWuyoeRByV4zvUbU jWNZU7xGoDpvTdIaN8i41+xY46bPWGrXVK+pputuqcit/DVmgxTpQ12kaUVPNnwSAfKArtTv 0Q3q7qypBDyuG/yLRy6+j3dRdQLA+x3tUt0f7yrlKTsGynM0e5iDx5azlZwc1K3tBXpGi3M7 oztI2It83QXGadqDb0JmfqDFXWwx6Brjgm9q4S5ZE4t8Q1rQLON0cRoncO5o90OMVAQzbLuM O9wMYpCA/M+JtAvMLNUhjTioGzlB3X+cQhnEmnbk8BdIchEx9AFY83niP0Cs2710HPhNy7Cb B21HzKUu1+BJQXsPse4U4QTilBDuJYz239Tidy/ntGWIdRMk2YM7lHYacL8W7+QydHri7yYZ xAOEWTDenzK8CvJlxKHnCMFDxMG2THOH6Aji3yT51wiTBrmv64TR24vUahFHxBZxFEBfw6tL eYQzCdPd7xLM23Ikal76Fek3aH5KPZ4Dz/xAJwB+nXCfFmaaf5PwA8JTyA9aj3TQCHEmiP45 4RTiPKd5C7BAuFDCyOeWiJ5AzN0j+k3CDYRzJRnSE0Z6tiB/+ff874FjDobRaQ5r4LwcnKqB XV3zO6Q1PyV+I+Lgz2jeAHoJaa4FcVARXf0ucVzB/wjHNhNJcoS/TBoukU4v4XDitJCevyOZ EMKRiHUiaXuXsKT/eNBxHDvhvw2CaA96J3gQPYMcfnvwONB3NRsB/w/kcKkaPIe+gDjISnQS ymtNsoZ/APwW8vl9mg1AfzYI7OH+RZMF9E+o1TcRB3+V6F2EjxH+b4i1FaTnMWLtNPVYi3yN lvj3SHI70THUl5nobpLcrEkmC3Gl/B5x0CRiDXH4l4nuCLqBb0EnyQqSGSd8GjFbz7kxiggb COs5WInLD/gf0X9mScc1y+F90M2g9Wg53udw0zz6YQlx0HpYlxyfjjT/GtE9QdswHoh+QPjX yOFfJzyBHG4D8R8hhqyCv2BaRDpoF+EUujqhicXxSnqQ5k8R/QXCUyQ5TvTrhL2En+MgW/JF ZM9zhHPJWg3R+E4xGJHmLGKib0sctAF6R5kthL3En6O288T5NeLlOU0GeNUZXAv4LK79oC/R jOwla3cR/U2ijyMGmVqKeZDUXEXMv06tUogTi1eDZkmmXuYMUSQPoZdIMow4XYiDv0p0Nskf IewmDSNE1+BV3TqSOUL4I6Thm6RtiTLVMtkWhpjdJp1vkc0tUlyRn7+g+U9A6yjGIoNfBJmP UascaYyEtyFevoMnfP41yvPRy7+n7I3534w0t4Guvo5XeS/R7xA9SPggye+W+Sg/T5x0wgJh 09IO5e4OruKeMknySaQhiVrdI9xIMkuEP0FYund8izC+rQHWET5RhJn+IuDDpOfB0jkcO8nc pD2lDulg6gXkUbIb8zPcS8O8w0qg3Q2x5sNE7yXcQpLVmu+C5GdwF+DcfA7S/Hbw0o/4DsI/ InyXvHEb8F2Kq3AeshDP0WraTvhVijqH5re432veBc7foOYgM+n3Ej2LmJsnzgXidBPejlgT S/wk4pwj/HPCX0IcnEwy3yY6iuizRDeRzkvEcZL8q4TrELNFDT7VHCP8NcRcDNEDiMEqpG8T vkicONLWS5boZQ3IIc18OtGphK8QPk/8PsK7CXcQv4LaMrl3pMlOdpPwG4TnZBnE/YQPEa5F vLyT6CrCNtQTlEmaab64E9TXBI30Gvlhq6RtmXZwiHE8z/wYvbF8FsdF+AFi4GMmGUIM5xDk nKOrFwgLxO8lPI1Y4ySZ7YTNhMMIz5L86yRzh3SOUat5wjGEW0nmIMnXkcxjDeRqLkPzC6D/ ObiG6CXA5mAjRj7GDxeMNBcVHA84NDgMaQ2eI29r8VnKjWA8k9zThpH3RMDP447D1mteAEz7 HdtCtAF3t+XfkIxJ00HySYSR/6+IgXYSjiKcTeecdMIfohPRS4QthC9Dq/MY20DjOznW0R7q DQ5Cj+EZkt2ms9YA4dvSSQxt5pOCKQMEjyHG0x2fhOdVrkKbSngeMXEuoSR3ifiXiD9PnHni zBPnUnAVYjzrcvOIwQZJppfkx4gvaRsjPb0kg717SSZV0k8yvUT3kuZe5LBFGssY4UU6aS9K 1qJ/+C00li2af0WMrQCjhlTqq1fST/acIFwi03i1BCVhN6EcS/a8Tra9jiMCOpVyPo0F+4Iz Qx3Rx9AeyGEQP+zTOPv0l5d7DH8Jy5iVMFprYP9AeC/mseUfQtvvU16NhGwKGpZodyDcS5xF xFyqRON5Hk6z5/Aq0lyqhKUTO7VKpXuBXjq99+K5FzBm2iTk816SmSedFSRTgfcswfSELDgK 9QCuoVxajq1Icp56uUT0UcKXqMejhOdJZwVZOEdXGyVMrRrp6i+pr1+S/bdJ8rakE0/gXIVk J/lnUeLIV/EMP0atxpAPV/OIzqORhuF6/+Mp5Ei9k55UnHE2R60YPQPbSpgt/wxw1PIk4Hji RBEnfvkPcP4fQQ60R3wOMU/P2Xg9WUVPPWGMyEknOlXaPekqPa/k+whPSDs1XW2VRiTtrUT/ EDF4HNbysh0x9IV0LGLQhv02EH6ZcC1iyFc/wxlBy2FeQoim3R8t56tI5jzhXpmWbMaMcYjw DOFJwgOEb1OP1UTfZHSXgTsm+xpH9626Sso25EPKhEzKKvStnueRs/wAOZAZcDXF6PBbK5Pk eYarBrITZSRtDHk+lmaHopoyQy/OHb8F1yyszV7M1dL9snxXK60U9NUx8p4g+7Afz6tEhxPe Qvguefse0QelEwhhL8rDeQOvfkqezX4mP+vmThCHvsXDlUryoAP6QszNE+5FzBaJ/j7hSyST RPgUcVKJDie8hfBd4t/7v+x9d1QVybZ+na5TfQ7QmEBERMSMItggKGBCCSZEBzAzJlBBURQw jteAYcxjGnUcZRjHwCjmnPM45pxzzmKaMcOr+qrnXO+9c++794/3fuu31luz5uvdu3bv2rVr 791V3c0R9DbgBOAzgTQGrQeAQ4Et0MtzyISA0xS4EPgDMB+tZ4Ep4MTB8jjMeJyIEFMU6Bag W4jY4KOWkS/uaz7waikjAsV41yBWP2Ld1RDa1gJDjSfMs5DvQjIE/CPAA8Af5AoTksVxZ28I dAA2AgZhnTAKtArECoqUARYxVi/iLtwUkusFfmpWgJpZMA44D9gT6AtcDxSrVmbwM4Ci6pL8 p6D3AYcJbVjrkk9v0crp/POM380/XRZ35/w81YHjU4E8wpcCDyNuPUDLpwG/A4fDQikjvolI NmjYQ1+B3oL4fwJ6L/gPQR8D/ggUlYpg90fMsF94oOCJ0E+c0csL0MTcGYixmPkY829Z+Ix8 umMJEZaLezfn4BmIGgrMA24HpgHF6o4IeW4V1g/sPfi9gUOBYcCRuP9mA3fzu0BrawDHAwLN twWqwQIVoJkA08FfKtAyWaAJ8go4VshYSlvxvAXyj9HaCpgrkILPboKGBvNZcA5C8xXQ9UEz YFFwQkEPgXwGMB99aUBPtL6EZBvQdkCpuQPk0UodwPmAVl9w7oLzEPQy0I6QLwwcBFSAeRhF FrAPODOAKdAWC4Tl5u5AOWpn4GFwJgE7A72AccB4IMZo7gVLpG21MbqNQLRapf1r0ZoKehf6 dQfdFAjL6S1oCwJnuEB7zJEd5suaCASfzoP+KdDjDX4k+MNw7WLoOQccCw78zzAXynNc64rW RdDQBK3roAF8FgA6G3Rb4D2gDj4ipKCDiEOOPA6V4cChiMwu4hmRaYlaWMSniHx2QKD5tkA1 WKACNOPZoDkd/KUCLZMFmiCvgMMjfA4ifA5ie46IWKlB0JbSUrOgzY+lNkErrSCTK5BCnmEV TaHffBacg+j3Cuj6oBmwKDihoIdAPgOYDws1oCdaX0KyDWg7oNTcAfJopQ7gfECrLzh3wXkI ehloR8gXBg4CKkBUDyUL2AecGcAUaIsFwnJzd6ActTPwMDiTgJ2BXsA4YDwQYzT3giXSttoY 3UYgWq3S/rVoTQW9C/26g24KhOUUVc4cBM5wOZuYtSvAs5gjItAkZ3OpQHugHWbcmgjEtXQe NExBX97gEykPOhIyw9DXYvR7DjgWHMwXw9wpeI5tcUXrImhrgtZ10AA+CwCNZ92sLfAeUAcf cVXQQeyFC1oV8DgviMJddVl+c463gf0EUneBJqBCgMHgtwL+IpBA3gSOGTJ0CvhSvj9aqwJb A0eA/xw0NCg9gXdwbR/QP4BWgFZwskHXBR0CHA7OWOBU4GCgGSh1LgeCbxoD+hNaS4DzEpzX oM+ChjbFAqwDNAEHQqYFsBY4TYA1oa0KsAw4NYByvPbAbuBEAnWgM9AX6AkMhORs4HxouwzE qM0MMhfRuhH0DbQWAr0I+DVaX4CW87VTIJPzgjky+wPrQ/IYNBwAFge/PPi4SjkN7AUMA24B bofMIFw1CZwY0BVAX0Kr5M8FfUKsfHhcxSOuBOYCg4FYFxHJfyWQR1E84k1w5oD+DTJeBb+L 565YN25ArL7F6hFf45hVIFbsFN/9sKXgjMMq8R442AXTeNB90LoY6AZtvwC34U1Wd1y1KH+I 2FmA0xd72xvQUA8YIDgW7NFM5YByX9AWkoXQi/zC5JSw34I9HZPrf1e5X8O+OFwgqyPQrAJX gf8W74nWyeex+Y3Fil2gMkZYRY/L55boKwkYKvuFhgtofSD3g/BhnECai7GcgeQKsSeics8Y AD+gAvCME623Yfk6zMIzWNgeHPBV2M99wlvZrwLNUcB5YhesTECPC6E/AP0ugLyG3jXoHCA1 iKe4/Ca0CzvrXRi1wGLAbcARwAFA3eCfgZ8FzgQnB/QI+C0F+AxPHvBukeKLL7PxZDt/NHb9 C9DvAsyOuPYXw/K+2C1KDWfE7gAYJ5B7UvYiOEcM+TOoZmegU0Z1X0guAL0AIxJ8K3xyQ0ia 68r9CzQkAucDf5XRaMT/AsRGPGZZzmBfjB0+Ryytw7wMwowXAT0RGvbJ3SXkQ+QzGWhwxajT EIFJ8HwaroqU0SKjwsgRO06PFVepeM7AJolW9Rw0dxV6zE+g/xJ6nAyrJgm0Q+xZXwq04LmE usnQMAQzwtGCXbPaUdCMgJ8Dvx2SOtFXltw14znPI4Hm0TJ+YOEujCVUfPnN5DOQVNMVzi8N mTkYiyvoeMzpe4z0CjgLwJmFvu6AEwMfDgP2BLoBo9C6AZI5eF9wDprN0ACfsKOI/BGymsE2 ZDotD6v64S3qBOBPeK/qCfos3rSWA/0BOACtMUALODnAfmppjmXxfrYsOJVAF4OGqeCECySP gTelDOgr0NZdvtsF6njzuxDoBA2vwb8OnGm8dxZrjLN4y+wpkDlD50xj5SZkthnrsXDxFALr 23IGhgtvY43haegR2ATv7pPQoxnadNg2Gv2mAK2CY44CfwMsrAZ+DjS/lt6A5nrAqkCs05QS aJ0LrIWrJoAfyvLEHQf8HeLJkoK1EMH6R2kLfiB6rIJe0sBJgfcKQI+A5CWgoxiFIt+MU4zl pJxffFPhDT1Y5dLqkN8GX/0COhqtjUG7g8Z6lc+U0PkK9FfSq9BcGfa4Slq+kYflp9DjHWAx jHQNZIaCfgYNz9DvJflVADgPIb8G9HU5Lvl+nxUIO42omyjsEbt1GixoOhqaq0HyLWRmgG6L vn6SflbFl0ShaB2C1mjM3RG0OkLDDUmD/w5PJx6D7ihjXtC0F9AC/h6JmIXnoC+DngW8J2Oe ZQr7Bc2WAqfJeBbP/egDyLjDt9vQexY4zsa3EEORNRxN2G1xnaCNrywSRDQaMSkkB8BvY9Aa i15WgHMCiN2KEg7sh/h/jNzBHorGy7nGKEbi2pGg80DnSRrXUvT4EJa8Bk7FvgDRboH9alOB FsQn+xX2LBdoXY3Wb8GvA8SOifaVPoEeWGKBN9QkeBt7BNNQWUnQeyVY0lVqhoZJsH+SrA/q IPhnEOJkIqqToGPUIK7hO8gEM1Gxx4g3U7zmPBP7OCFDbguazzu+LgBGAvG0SvFF6xXExk34 ZJPQo/xg1DfxnuiVOlDoNyqhByqY4M9h4guf39DXLdSQVcBhGNdA2H8I/ikEPuotI0AfcGZD ZgF8clyg2U0gew/ONXAcgEHglAL2l1HKXnH6KTgPgC8gGSWejPE4DIU9g9BvKGppKHrnaMHd gQ1C7w8gEyWQywjaDb6dANwm5HmtGIRrBSYCfQTSBcjZB8DjDPcaJrMb8QzcJtBcATLXQDsI VBcyRItAy0ZESAmMvRVsOAb9/Zm0E1YxmWWi90i0boDOd6DfwZ+oimYFflgO/iGMwl3KY7wf mczZQfiqQVh4AnpmgG4Lr5YSaA6Cta3RegZXZcv7mrxfGNaGYvYHgRb8Rujro6yWUr/hSdHj KNAh0PkRs/YUMt6iR8s30HMF/WYgcs5B5yj0tQO9XwMi78zzgFUwm7UgfwS0l4wiSUPmqtQD nA5JeIxlgka0c686Y/YFpyY4yEF1Beh06EwEbQ/ci9Z2uKo1fF4DeAvjmo98cQenCvAqsBHq QChoE+hC0IwcVHoAP0HDLqlHZhZoT1z1O+g5uCpS3gsEWsZAG+q8JUXaI6s0JKeB8wQ0qjH3 tmjFHcGCuxLbAc0LWGXEc2XcrWIxX5URvZUR7ZWRd9PFcyr0iLukGgc6ArQr+joGy3cCn0B/ Nqz9RdJSD3AX+uoBySBk3ARgihH/oZgdkdfDhQb79oK2my5oawBQQb9YRdj5IpvwTR3DSszy EzS0RKy6gV5q1AeBJiPyOdqnQx7f9Zm7GbEtUGUyxkKRHYJuBn4j9OIvaBXVW+0KDycg2n8V bxzoVXaGYxp8km6ux2kHc46IcPMELonVpumAoHlGTBDP2YDxAk0dMSN1xFXmdOElHrFB4vme WewF0gTHdFb0YkY9N8v7C6r9p2jjfcpIjoVBFzbepODddAHedBSMAqYAW+LZ0WPQk8RbCSFf 8HvBGXCmi7u50KP0E0hdQE8AbgMnGPRZgaZywCPgtEVrDNATnJmgNdDPgAOAOeAfB/0T8Dug DqwEDIdmO8n5dFHc3TC6QaBvQkN3tNYXHL6LEfIdgfngXwd9Q7Qq0oazgjbXAH0CrdWArtD8 Hnwr3lBXBu2FXuJBp0DyNbSFSAuhLQoyG8DB2MkVKQmOI+QnQOcNfLtrkTbLsQuOEgPchvfa 96BhL1rXyFkQ78FNHYFTwelh+ERo84TmCPlWHdc2g7ZnwPrQuRL0WaCj9DPky4EzAnpG49rz 0gNyNtG6BjsyJ8gPBf8t+Lsx6r7S21IPWikwGpwmkpazYHhM6LksotF0UiCfcUG/g7w7WttB Pg5WNUYvjUFLL3lDpimsfSxHhDHOAt8PvRQrqCAQrSFGj4LvDc2bBLJpAs0fRCunK4j6AI6b tETGvPgaQakEDJTxD1rHVwqloa00vlu4KZC6oNUbtGfBNOFz7G0p+FnAHOkZieCMAIbIVqA7 cCZwDSQPwwP1ZNxKe4DPgF2B1yFZTEYOOCmw7TzwsXx6Az1tZFRD5hfgCVx7CeNqCuwIzMMY 70JmIzR/A/4NYJLMaNAJiJOakBwgtQEp/P8OPjku7QT2wFX5oK2g09DXOczsPXGVNUDQFuSp GgcMxdy1Eq0W1Ci1Mr6Ef4J59MC4hsCqWERFIiRRtVSp3wz+c2n5pwHILIF7pM0y0/G8iOKp 1CTonIQszhJxwuthBcRtBVSzCqLyyAoDDEYtGgM9IagPqFHkNjiRRvYJGTtZxwTS7rK+gZ8P vAw8CZ3h+VU5EtC+kBwEa3+QOQUfvsLTy2Ag3rArczDe3+So8W1JZ/Mdbs8Ac7SgEe27sR/p jKfTu/F2z5sQ4xsBe5JlWkpYl7QuXYlnwuC0FBLXI61bL9IxqVvXNNIzpUtGHzJI6G0VE+5J PPido0D8G3/EjjiQosSJOIozzrMS8VdrGilMihFnUoifiy9NRQuxUSbx1xgGrRCVUKE3Kq6x p/gtFrSbjTZGipDiCQm9+5IRwLHAScBZwCxgTmJKcg+ypntyny5kE3BHcp/kDLIPeCg5PTWF nACe44JdyBXgrZTUhBTyAPisd7fEZPIa+D6NN5sIEM/CidmGFJR4OCWsU/+G81fKRPDMWn77 YqDDZ2j9DB0/QwtQ6rH/DDUDi5IKpBoJIHVIOIkicSSeJJIUkkGG4hcCZpJ5ZCFRxWcJZJy0 2VRMHlX5/ZrJKn7TWfzCdgXjOJOIv/w02UcT/AWM/TrYa7I/ZhyvyGMRD3l0WsOv48cSkfLo miT1uO7ifXH9rieM8zvGKMT3RPiCCL9qonCrm4svGSwhOPtf/j0q1lNElKmcEkAjzW2JOwkh DUlTEkPak66kJ0kjQ0gm99xUModkkxyyimwgO8gv5Bg5R66RO+QJeU0+8luHZtlAqCXXstyy EccVlk04rrRsxnGVZQs/LufUVhyXW7bhuMKyHceVlh04rrLsJAo/7uJnK7j0bhyXW/bguMKy F8eVln04rrLs59IrLL/ws5Vc+gCOyy2/4rjCchDHlZZDOK6yHObSKy1H+NkqLn0Ux+WWYziu sBzHcaXlBI6rLCe59Kq/84j4ZfJBZMS/5ZFTGHmu5bThmTOGZ84anjlneOY87yfXcsHwz0XD L5cMv1w2/HLF8MhVwyPXDI9cNzxyw/DITXjkluGR24ZH7hgeuWt45J7hkfvwyAPDIw8Njzwy PPLY8MgTwyNP/xuPzCJZZDFZ8U898szwSJ7hkeeGR14YHnlpeOQVPPLa8MhvRsT8bnjmjeGZ t4Zn3iFi3hv++WD456Phl0+GX/INjxRIj/BCA49YTdIjVkV6xEqFR6xm6RErkx6xqtIjVov0 iNUqPWK1+w88so8cIWfIFe6RR+QleW9STPZWe+kRq4P0iFWTHrE6So9YC0mPWAsLj1iLSI9Y i0qPWItJj1idpEesztIj1uLCI1YX6RFrCekRq6uMGGtJ6Rmrm/SMtZSIGKu79I+1tOEfD8M/ ZQy/VBQjtXoafilr+KWc4Zfyhl8qSL/8xx55YvNIJcMjlQ2PeBkeqWJ4pKrhEW94pJrhER/D I76GR6obHtENj/jBI/6GR2oYHgkwPBJoeKSm4ZFa8EiQ4ZFgwyMhhkdqGxFTx/BMXURMPcMz 9Q3PhBqeaSA9I35bU9iNO9B0fifQSB/x8Ri/G7iTSkTn/gon0aStdppX+jDrF+bp2hmDmqGd BRXDeecMaoZ2nlMRkLtgUDO0i6CE3CWDmoHfV6lAfEkQn48o0pp05lU9gwwj47TLtp6u2Hq6 auvpmq2n67aebth6umnr6dYfPWmPOdXIGsZ5TwxqhvYUVATnPTOof2XRbZtFd2wW3bVZdM9m 0X2bRQ9sFj20WfTIZlGezaLnNote2Cx6abOI577J1+TLFzBuihtfD5ZXyuNezFdujgFYBWQQ 8WtR6t/MFl/90EZEUd6AamyjmtiopjaqGSiG38Bz5WvFCrjyJa56hSteQ/o3SP4uokV5ya8Q 0TKTlPxHX5G5fF2zgmwip3j+vOWZo5lcTJ6mqqYAUz1TY5P43tnssIfr+g7UXhu17w9KOcqp OaCO2ajjNuqEjToJSqxKNeWUoJXbHGeh7bRN6oyNOguKcu8VIs7KOVwhLJmsCCu+hcz5z2Rc FGHTLGU/oVxylnLBpumijbpkoy7bqCs26qqNumajrtuoG6AsfN3sSjz57PmSmqSOwtcGynze 30H0Ol85wKXmK3yloGTx80PgZim/cm6WctOm65bhC4syRZnK4yVbWcwlc5RcYq+sUFaQwsoq ZTUpoqxV1pFiygZlC1/xU6yMnXnUiF9xEeu+IsYvKv7IG5Ypy7jOdVyeKtuV7XytyCNPmYm/ FBe/lyfikN91xL+Rzle+vM4qc5W5pLQyT5lHPLiOnaQM/vK7Pv7yOxS/fEfVr9WxitgtUIru qT21F8+hqAZ9XII+VEtTEfkmtYxaVlhoiifL6CNahnpRb+pL/WlNmklH0zF0HJ1Ap9Bv6Ez6 Lf2OZtEFdDH9mS6jy+lKupqup5vpdrqb7qeH6DF6kp6lF+lVepPe5bqe0Kf0OX3JvFg1VpfV Zw1YGAtnkawJa8qiWQxrzdqzjqwr68F6sVSWzgayr9gwNoJlstFsLBvHJrBJbAqbyqazmWwW m8Pmsnksi2WzhSyH5bJVbB3byLawrWwn28sOsMPsODvJzrAL7DK7zm6zB+wJe85es7fsAytQ qWpRHdTCalHVSS2huqkefNyealm1nFpBraR6qVXVaqqvqqs11EA1SK2t1lcbqGFqvNpZ7aam O6xxWOewQVM0VbPXCmnFNBfNTSujldcqaV5aVa2a5qcFasFaHS1Ui9CaaM21llqc1laL1zpr iZr41Yol1ErFkqMMLcPnoTKtTBTuZW8+Dz7Uh9cHP+pHGA2kgUSlI+lIYqGj6Chi5d4fQ+zo 1/RrYk/H0/HEgU6mk4nGZ+Mb4khn8BksxGflW1KYz8x3pAidT+eTovRH+iMpRhfRRcSJz9TP xJnP1jJSnM/YcuLCZ20lKcFnbjVx5bO3npTkM7iZuPFZ3E5K8ZncTdz5bO4npelBepB40KP0 KCnDZ/Yk8eSze5aU5TN8kZTjs3yVlOczfZNXs7v0LqlIH9KHpBJ9TB+TynzmnxIvmkfzSBX6 gr4gVXkUeBFvHgnVSDVWh9UhPqweq0d8WSgLJdVZQ9aQ6Dw6wokfj5BI4s8as8akBo+UpiSA R0s0CeQRE0Nq8qhpTWrxyGlPgnj0dCTBPIK6khDWnXUntVlPvqOpw/qwPqQuS2NppB4bwAaQ +mwIG0JCeXQNIw14hI0gDXmUZZIwHmmjSTiPtrEkgkfcOBLJo24CacQjbxJpzKNvCmnCI3Aq acqjcDppxiNxJoni0TiLNOcROYdE86icS1rwyJxHWvLozCJf8AjNJjE8SheSWB6pOSSOR2su acUjdhVpzaN2HWnDNrANpK2IXtKOx+9O0oHH8F4Sz+P4APmSx/Jh0pHH83HSicf0SdKZnWan SRd2np0nXXl8XyYJPMavk0Qe57dJN3af3Sfd2WP2mPRgeSyPJLFX7BVJZm/YG9KTx/8H0osV sAKSwvOAkt48FyykD88HB5LKc6Iw6cvzoijpx3PDiaTx/ChB0tWSakmSoZZWS5P+PFfKkQE8 UyqQITxbKpGveMZ4kaE8a6qSv6jiL9qG8ezxJcN5BulkhOqv+pORaoAaQDJ5NgWRUWqIGkJG q/XUemSMGqqGkrFqQ7Uh+ZpnWDwZx7OsMxmvJqqJZIKapqaRiQ6rHVaTSQ5rHdaSyQ7rHdaT KTz7FPINz0CVTOVZaE+m8UwsRKbzbCxGZvCMdCEzeVa6kW81D82DzNLKaeXIbJ6hlcgcnqVe 5DueqVXJXJ6t1cj3mq7pZJ4WoAWQ+VqQFkSyePbWIT/wDA4l2Vq4Fk5+1BprjckCLUqLIj/x jG5JFvKsjiOLeGa3JYt5dseTJTzDO5McnuWJ5Gcthef6Up7tT0g6LUurUJ0G0Fd0Ip1GZ9Pv 6Q/0J7qErqUb6Va6ExXzCD1Bz9AL9DK9QW/T+7xePmFV6CtWhXnTiSyKtWRxrC2LZ51ZIkti Kawvy2CD2FC2gC1mS9kKtobH0mbmzXawPewXdogdo2f48Ry7xK6ym+wue8SesZfsd/ae5auK qqr2qiO9z6LU4rScWkpNUWuyOE51VLuqPdhNh02aWbNqmlZEc9ZcNXfNU6ug+Wo1tFpaba2+ FqY10pppLbQYrbXWXuuoddW6a334WNNQ0whqmgnVTEE1o6hmZlQthnqlolJZUKmsqFR2qFT2 qFQOqEgaKpIjKlIhVKTCqEhFUJGKoiIVQ0VyQkVyRkUqjorkgopUAhXJFRWpJCqSGypSKdQi d9Si0qhFHqhFZVBnPFFnyqLOlEOdKY86UwF1piLqTCXUmcqoM16oM1VQZ6qiznijzlRDnfFB BfBFBaiOCqCjAvihAvijAtRABQhABQhEBaiFChCEChCMChCCClAbFaAOKkBdVIB6qAD1UQFC UQEaoAI0RAUIQwUIRwWIQAWIRAVohArQGBWgCSpAU1SAZqgAUagAzVEBolEBWqACtOS5X4Z8 gVyOQRbHIovjkLmtkLmtkbltkLltka3tkK3tka0dkK3xyNYvka0dka2dkK2dka1dkK1dkZsJ yM1E5GY35GZ35GYP5GYScjMZudkTudkLuZmC3OyN3OyD3ExFbvZFbvZDbqZ9lpvVaY1/mZuH 6XF6mp7nuXkducljyMjNqv92bm5iVdl2tpvtZwfZUXqaH8+yi0ZuPmRP2Qv2G3vHPqkmlal2 ttwsy3OzF3KzLHKzO8/NjX+am/5aTS1Eq6c11CK1plr0/+Xm/+Xm/8e5aTKJf5HanXQk2fwu uo7sIL9id3uPPMdzEuybSVW+j+L7N/obj+VM+objaPqO4zj6geMUdRxRWF11EMf66hCODdSh HMP+RMPv0PAWGt5Dw0doGA8Ng6HhK2j4CzTw/Z86TEiAGm6jRtiokTYq00aNslGjbdQYUNhR a68Erb3+g8OrzQ1C2CeWTxReF/g+kdcGlai8PtgTK8/r7vi716Z4glSJBEBLEYcjPJv5lfTR HxSPC7HbP8rPXvHd21XIFaLDee7zNnmkj7BDFDsKgr2BiV95XewJ8Y7Cih3vfb4bzRXPQJRs uXMkZx0KOxT6hzcXwibxbqocqca9G2o8LziMvewR277/jvj1Q1B3bdS9Pyh1oJD+l3tjvLHB GzkNb5q4q5TntJS5hznJnGy8uTNJKULcxN/zOoNL3HbqmW5bVbuqYxuPfeNosijZmW65nJWj mEx+DrqdyrwLUcWNEb2Lau+tmsymzFqKyZwdq3+hV/uM477AY4Q7qYP/WpCuJJ2kkhTSjWTw /+uJ//SynykzOxd9/zF687rZ/RZXHnbUI7Zkj1El0mtlZxbP1DPNe/VMuiybKiZFcarBTZwY pfbTPKtdrw2DJ+qONmtNjNs1EGbSVmbVSWkV6+ekFxUnVif7Nl3Sk5L79MhI7eNXRC8kmBYn S0y3xN6pfRL9PHR3wbF3Kt48OSEtNT21e4ZnWGpa39S0LhnJ/IqyehnRTp1c/9oel9y7m09s RpfefT1bhjXQPUo4+gX66XotvyC/AN2/PT+tpfvZTvWRa/9HLHPUHUS7g5O5eYuWMX6V9Yry 1KNPWHLfpG5pnuGxEZ4RsdEhtfyDwn3CAgIjfSKDIxr6VdTLyxG5/+mIYrulDUhO6KZnmsp9 7mETIzTTVJhwvr2SaTKR5RMGNHF5f/fc9pZ3PYbrwZ6pmtbqL9W3NvIoHfzerrPudWjDxSZ5 n56fC/ihbftX4RuOBRX54cL88h0/9FyS9T7+UoP+I9w9LnayNr8w6vuNTYefP9yq/Y7qt9rf +GHOXL/VbY69yX29I6fQvFzHy/kxJ+9dY1eGXn5/UG/nFzExoVf9c1Puf3My+m7Wk+0pU+x2 hTUoPaj/o1Hd/ffsf1dyyvory5tt1Vv0zgh/N2Go8z77AT08vio2wL5Oz/Vfr8iq2K4am+dY tNiO+WeaRz1679gu4sCDah9f393t32N3I9ev6awj7+c1X1LfeXQZvci9L0O2etxa1CO8wbHv d+W/vuJSZMaQoJNZM8c3z20TvDshuL4ifmT4p0yTHfcI00tzl5YuZHYxO4/327ssjK7+uHpl y011r39ZrcrWzasQQ6XLm111lxHO5QPeXoyJ7Gv/NPTDgA9rvVftDVxbWI8TAmXMzfVmepPs RtkRY8OSMjL6hlSvnpCW4tv7j3nyTUjtXb1vr2TBrd43LTWxf0JGenXbNIpZxCTyqPTlInpb 1coTkzGLyWSO0pvqjf8415WxdYwOBg4c+GcddEv7F5ozdCdhb0Wzptv/oZJa/y4hqYiSSRP9 m/Z813G5U9SBRwsdT82Y6rbzcMmC0/f3O06fO7dUB882Oa+jBm499V3DKnnOSb0DLAlf1q8d EXdpRpNrs6a+/abzwgebmu0cf/nlvuV5qsNvuVl5AxYvTOrguOb4+ZLLe16rfqb8nWlHnK5v rbOp5p5GP9NG468v9drin9b0+ZypUdq73XW3pJdwehK4+G2Sx4MKVyd8187nXUFGzJyQ7ICU t9+OL3S85uNHA9SETicyGlUtXS5Hj/h6Q7HE4kcdpz7t0G/2jI1OZY71uT/+xLAp7yxNxmX1 cWgdWSzp91rb7b0frA9LmXSv9sM9vtPCItJ3dGvcOfHQ4DXfjLvTsf7L3ft8Pp1sfqxCVqDn 0HHXp1XjZewJL2Nn/lrGTPbVBq84P/irxeKmwc/+vowN/h8pFuX1sjLp3T5vT+zmGZvcow/X +tdCptfUA/xqBfgHBIpCVlMPtp3qI0f9bxQyQ5z+E/H/tjBN/5hac+tNutnrXOTJBV22LIr8 kOBSz/ddo1MHnjw98N3qSl/0337pSGHVuejClJJZuzo1jxt/p3nLC5OP/thl0UCnue5Lnjpm vFnSevADrzexp1YPSbjx28zZG59cbPQ2pe6riuPWbrPfb14yZeiYxgPcu0QuLblvSNeJu/cE Lv3QNnV/gsOMJvrIUl9dHz60xbpGvTsNcl+54c0sp5i8zSebB99Nv9Y4uo7z0tmOwUcmfnEz /mTt51N6PNI7/9y8/fyw7ZfLb9lV+HyzIvPnNX/+xYLRS+/MW1L33E959q6Nc96vjl40p1Cz nc+dX5FfVzU+1yE/6Pz4oj5sS5jSohyZVXH5XwL7jE5a5uka5JXvvqDI6kV/FKbO3CPxf5ao 9PNqlW/v96jS0Xu9D0ybtnnmpAWuXWoF6F+I5qJmXi8WRurhfz8/NXQ/ccqcqtbwCwwO9NYD 9FrBNQJ1H7+a3bv4BCTU1H261uza3Sc40b+rX0KiHhgcFPA3BfBw0QeHTq1zaWs6WMu3hovL 5qi59mX01rIAttB5CczmJXBsxH9UAHks80jmQdxJD/Kp4efjz2/AKIHtPyuB0Tovgp+VwHr/ Xgn8J7oz/qzeLc6JnXa9tim/y5dq+8fdn2sX3lwcfZp8UajIyYUnS3jdn1QjyPtC2C90Yv/H Naa//vlWj0/K5UWlo8MivizV5PaNFi7Ph33zfFzRQ5nLF35Y/HOn32Z3/vWrfTuHfp/8tEzm 7hdHpwxq1vW3847u52OLnZsVkxe4veSU7NAZP9ov8nGZtycyw/r48usLi5rUjCtWtBVd+5XL h0b5H5I+7oqIv1W/2OAaC/Iy918LLWl5Vny//fftWIOfT8zOGplFO3xsetvNl+W2bFR90vvB Fzw837IPVXq5Or9PM290WDI38UnRL1tENJlcxc3nw4kNdrGdAmbecNm3+VF64IM2eTcfu+x1 PaCurX28y+hbG8LHz/xprJ7JtvF6t1DWO/suNSq5YbXm9/dlrhOqh73d9ErjZ7yslmgq6UK5 4/1K6iX+hmlnmxc/H91b1oUKf60LMampvDjwiUrunpzQJaObZ4P+GUmpackZg1HMdD2ohp+/ v19wDbEq8zdO/cXp/8s6+99VsDVp7eJL6ok7S8/t7OnZ8LsBsSn1Sp1LPXL4xaNe+bNdity4 HpIxym1j9Wz/JwXX9jSMLn82jVwObGM//tAKzyavnyflNm82edH2wc36fd/IculTxevz+487 vjQ9fPj5kZdfbX9Zc+HB+IgrK5fXveGVNNttyaK09NYvSsy88ylwZlr2uQGdPAZGjBoT5HIi vQPb0iNm8qI1ydUvlXTIn55R5daA6nFXnfV2b09N7vrp8MFOkX4tN1d2uhOqH0+rUsSr3IFa 0XWz/etOPfpjkDomPrp1pldV5r+x2fkWCfdP+XR9EVH3fq6V/B75Y9bJDpMqxT4YsrTpy8jj teoEZa0bGL+oRNbkw0W/aV1nd65dJ3r6jwrWkXukvV5YVAYnk6nAzHTKD59Vrz+tJKJYlS5s NvMIHKsXU+2MrUlxk5lBMV/+2niK0PLppF/06UoTvr05p3PtHL/UxXW2XfDRS9qEnBWz5mFP Ykl/vp0JIw3+ppYVys3sHNq68uy7FZ0+Vr1pH/ttuzsL9ZayljXRG+kR2WHZDcbW//drma05 jYe2KEGoYnGfVbHGOi/Kn1WxoP9kIScSJkxq/cf6pZhIu+B6wytFrnycGrraf33Px4Wq98lp 8uZxp/5Po2r7nA9b7pB/+KGP30/ljwxtOWdE2S9z61aP2rIgp/W82323blr3dvD6/6rOPKOa 2rI4noROMAZCE4nUAWlpgMgTRAHpxiAxqBQFhNBLxEAoClGw0aRLTxBF6RAlGpBBYSgiXayh CVIFBKSqvOiMI/PGKV9muebb3fuss+5d5/z37+5iTlreO7n/XOuQkITHk4IsWY01MK6B8FTj rUV3jf9Y4RY6VwFhkHnF0nY+xTDrw8LszNtoGS09JiFjzkYhSvUGVTppOJkPPj+MXYmhtY7D Cq5hm7d3x5NSVAN8MqVWpOds+oht8hv28Kf0mFrlSooLwZhu/XR1Iv8ogZ0JOmCMPLH4qrSX ivH9dCMFNjLlMXabrv6wWQ0KcY27/vojfU1EScB1d/KHEBkLVtcQYbwzOFXSvkVb/AQ7CW4e p/GwRMtYegYqJgVwYGvbybWnNwnMREFiDvlAYFj9MBWzLFLXgndr/bR/vm2ibXhybN52M67j yx35RMHAgl3vNZASze9IOiKLfhV6ROrq4cpYTXHXHZArbGj/qUW/dpPeHokJSgM3o2ddfUDm Sk6x4DpMeV/JyOrQ7XMmLL6Tpq4n92HLDaex76vIlBeCWgI+0hFomWEInj1KWx81hZacSt/A iSPC6njkQoZT9it7PE6KT2mJfZEpV7rFPmuOXhrtfl7IU4NF9gLAU0vmxUOXxM8r3r/U4Vlo ikZmvHkboP8ccNbZtKv9UgtTcg1Ciq3P1y8D7fPc8MhMHYYWQhk6OP6+x/ooKi8fh9+z3/kt 7q71jd/Sv4LfKB1ObsEhtrYmSvcrv9HfTE3UV/PXlfv/id65NO+KgddmiaphXohtQ7XDbxuv WyvgStrZkljFrTNdt7qsSgJRssJTfM/wKWLmydsNE0vT7VFKrwBe46G105f5ti5DuNPnLrfJ PNFUvJg9v0iUVv8UOnYJPjmGzafVK9i0xq4d6BDodCzrLDfkpq/e9E4iPt/5xsSmPLpzdKcJ Qrk4+tCRw0IjXOrrngkJKN+LC8dQ2Wtn+9KqxuXSzq50wxb4q218DjMOJOSaASxM3YSVVdwK 00Z6eCMt6KsXbgmbigpQcy+8PxL8BZgBx/FHAaAok/fV/QomrAYNfG7ZjuD96KC2zIE955No TqC78C0Vn5YzK4Ht8pb4jVWex49kwd/pXcQ5kVv/jt4/LYT/gd7QzfTmeACoyPS/wjcyARUZ +3P80lxuOP3P5UmFUkrEaRZ5BSVWp48u8sEQrv831P+vSnfOWUPTrjy25zLexZ5glAS9bqdY HwRWIAID7HyEYEXtD0PjmYheEXqMjzPTFvQEKwvDXWeH7Bu2ZZUdzZAeggOji1nB81c7p/cA Z4YfxgvyNMeaDc/ZiLEPFSWOjMV6Pouof5c8z4uM4pq4pqoo77++9Gkk+DpiyzLfsH+NJDY7 zkuQlMKk6WYRNRqtIZPO9gbi6VdlDYb5pDCrbWgLMlpfjQRunvTX34gShA08EnSKm3vOlJjC Xj3XqK3mmF83VRMONgzttSHJzaBaWcGu9nZACUFRSPcr0fSPevfdjlZpIMdWo6LbrAnj2f7J 3sW6Vr1LlLo7kiHOKrP0TBUt3iAp5xb9HT4y1Dlwkzqrw6hqdHU6/O7bG4WB2kxsY4CCiBIZ rHc4JuC4iZFoTVVV+UFic67hRgRFLiJHDOU2bijiKNWcIy/XaTShNsFaNGtT732BibBSUjVT PHF8kjB7s/96dutvfrWRyoG8wjNkubpMar0y/l6Fp/5lGtmJ4UuD3ay7Yzon4vf5Csa78suA dXOMQotbbTb8osgpkL5G2bF45ojc6N3yVhdGMJ6ndz8CV5xcXhBcVJWXekbqZeJF2Bl5JKaQ 3zfPLuZPdXmzF1rl+qZ2HGrJmDEfXAa6+l0Ghzd7NL/znbyV1o5W2YA02tm/OLid9mINmWOA OCLu1QLL/4ymcnNCmPsWCAhEccLt1+XLP2+b/Ggi50U2fE3X/qZfAS600OYONecDflhgNAS1 eVXsazL4fSM3mgMlvji0eqMe1KB8/kLn4NTsh8ptT5+hTm3aIoQmoPB5qhE7AQcBHgAXAAng 963J7QYIBMgC8AAKwJ9jETl+J86TO4BCU4pQ/JfBiqf4+xFJTv7uFOQffircVCDgolOZ73p8 NTJsFr430JC19aMerFNJi3lwtT4y89rkXyI6tpnzo+4GMcwtkDhdu8EVLrA7+yaPkGXELhzy Tlcd2eXsk8Q3PZn4BqvycpfcEoeYmcrte1qaeizN89ZxPamRggPWZbscQYgHAHBPkUqqzH2l I+4n29VqulNtAwxiH6D929Vimnb8GQ3yQr4a3TF4gL47pJCRMQ3OEu9PLgWUH+pqbtC7NFVs EKjt8Pm2tYueEfEGXH7rxNO6eMH1prOPLMMPY/CNtSh3WWqFfYaYqaescx5YOz4N4dBWcxxi erqbbEktEy4mndE0UwZTuz706TqqlS8p6eV7ywZ9ru4n4GhU0E4UFaT444540VSQGMcl/E2V cb8sC/j5RGKTJh1QkpslCf4xWQFyXv73FR701m/TAwxaC4PR3I3ROf5PilyqFDUkcT1TTuvf 7xEFCKvQHhv84+zjq1ZoJjnKlxeep6tZEacEyYv8HUNmfbggTbAsm/El5eQZ3Y2VUeOWV3p+ zN2sC2txDLrLPrxN1+LzuAYTtVZmv4miwIpShEp/9Z3hAQBRNGCauMrAchuJb2Grp3n7Ch1j PYgK1Xl50gGXXSP57KPx58ZFNUQRpSAp8ZLlAEZD4uW5J9XkvSmEbrrHvTNhIrk7a/UVgfeX e+QHeWYTDBiJnjZAIVzIIsZFtva3NPJKb90peSP8Xl3LnJnS5djTc/c67Xd3nj4fnoI4kNtV MwgnvlNg65wbGE9byHW06N6VMZrg9xoEykYo9BJ9hGhkZYzKErO1r64CKlPxgYBsGtd+d+IT 4HcgNKakDQplbmRzdHJlYW0NCmVuZG9iag0KMTUxNSAwIG9iag0KWyAwWyA3NTBdICAzWyAy NzhdICAxMVsgMzMzIDMzM10gIDE1WyAyNzggMzMzIDI3OCAyNzggNTU2IDU1NiA1NTYgNTU2 XSAgMjRbIDU1NiA1NTYgNTU2IDU1NiA1NTYgMjc4XSAgMzJbIDU4NF0gIDM0WyA1NTZdICAz NlsgNjY3XSAgMzhbIDcyMiA3MjIgNjY3IDYxMSA3NzhdICA0NFsgMjc4XSAgNDZbIDY2NyA1 NTYgODMzIDcyMiA3NzggNjY3XSAgNTNbIDcyMiA2NjcgNjExIDcyMl0gIDU4WyA5NDQgNjY3 IDY2NyA2MTFdICA2NlsgNTU2XSAgNjhbIDU1NiA1NTYgNTAwIDU1NiA1NTYgMjc4IDU1NiA1 NTYgMjIyIDIyMiA1MDAgMjIyIDgzMyA1NTYgNTU2IDU1NiA1NTYgMzMzIDUwMCAyNzggNTU2 IDUwMCA3MjIgNTAwIDUwMCA1MDBdICAxNzdbIDU1Nl0gXSANCmVuZG9iag0KMTUxNiAwIG9i ag0KWyAyNzggMCAwIDAgMCAwIDAgMCAzMzMgMzMzIDAgMCAyNzggMzMzIDI3OCAyNzggNTU2 IDU1NiA1NTYgNTU2IDAgNTU2IDU1NiA1NTYgNTU2IDU1NiAyNzggMCAwIDU4NCAwIDU1NiAw IDY2NyAwIDcyMiA3MjIgNjY3IDYxMSA3NzggMCAyNzggMCA2NjcgNTU2IDgzMyA3MjIgNzc4 IDY2NyAwIDcyMiA2NjcgNjExIDcyMiAwIDk0NCA2NjcgNjY3IDYxMSAwIDAgMCAwIDU1NiAw IDU1NiA1NTYgNTAwIDU1NiA1NTYgMjc4IDU1NiA1NTYgMjIyIDIyMiA1MDAgMjIyIDgzMyA1 NTYgNTU2IDU1NiA1NTYgMzMzIDUwMCAyNzggNTU2IDUwMCA3MjIgNTAwIDUwMCA1MDBdIA0K ZW5kb2JqDQoxNTE3IDAgb2JqDQpbIDI3OCAwIDAgMCAwIDAgMCAwIDAgMCAwIDAgMCAzMzMg Mjc4IDAgNTU2IDU1NiAwIDAgMCA1NTYgMCAwIDAgNTU2IDMzMyAwIDAgMCAwIDAgMCA3MjIg MCAwIDAgMCAwIDAgMCAyNzggMCAwIDAgMCAwIDAgMCAwIDcyMiAwIDYxMSA3MjIgMCAwIDY2 NyAwIDAgMCAwIDAgMCAwIDAgNTU2IDYxMSA1NTYgNjExIDU1NiAzMzMgNjExIDYxMSAyNzgg MCAwIDI3OCA4ODkgNjExIDYxMSAwIDYxMSAzODkgNTU2IDMzMyA2MTEgNTU2IDAgNTU2IDU1 Nl0gDQplbmRvYmoNCjE1MTggMCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGgg MjI0Pj4NCnN0cmVhbQ0KeJxdkMFqwzAMhu9+Ch3bQ3HSXUNgaxnksG4s2wM4tpIZFtkoziFv P9kLHUxgg/z/n/gtfemuHfkE+o2D7THB6MkxLmFlizDg5EnVFThv096V284mKi1wvy0J547G oJoG9LuIS+INDo8uDHhU+pUdsqcJDp+XXvp+jfEbZ6QElWpbcDjKoBcTb2ZG0AU7dU50n7aT MH+Ojy0inEtf/4axweESjUU2NKFqKqkWmmepViG5f/pODaP9MpzdT7W4z1X9UNz7e+by9+6h 7MosecoOSpAcwRPe1xRDzFQ+PwlJbysNCmVuZHN0cmVhbQ0KZW5kb2JqDQoxNTE5IDAgb2Jq DQo8PC9GaWx0ZXIvRmxhdGVEZWNvZGUvTGVuZ3RoIDU2MTU2L0xlbmd0aDEgMTcwMzMyPj4N CnN0cmVhbQ0KeJzsfQl8U1X69nPuvUlu9qRpmrZpm6RpUrrSJkhLobR0AbSyFrVV1LKKOwoq MiK4a3Eb932dUQZU0ha1gAqjzriPo44jOo6gLIqK27gwCr3fe08Kynx+Q/l/05//Due59zxn e99zzj335D1vbtIUDICPSMHchuZDx1zXk5UN6fwlQOa7YxoaR196wWUPgW14AmBrxkyc0Dzx svvuB3tnAXDLy2Oaj6hrfLfuQUjzGgBr1eFTmsdeuuDsz4DoHYD58wnNg2P/cN58PenupF7a JtYfPmXFqRt+T+1dTPmhRzaMaxmfNedSoOxKwH3DjFOnzd2w8JBzwMqWAdL0GWfPDxrMy44C q38ZMN00e+4Jp7Kj114HFrcBhldOmDZvLvwwU3vzqT3XCaecO/uk9smlYE0zgTlD58w8dcG8 0379OVAXBD67fM6saTM337iGxsfO0/ufQwWOcmsO5VdRPm/OqfMXOP5pUKnvFso2nDzrzNNQ 2LMV7DlqX3rolNNnTOv69OUHwLro+jwbTp22YK6zxHom6W8g/eBp006dlVuz7mGwF6k/R2zu 6fPma54VEaqeotfPPXPW3GNPOT8NrPJdwLID+twbKif/fcEx9x7vHPGNmkFdE+4PdD+px6/f sDiyy7D7SstytQySfp1IgmJTqKcRR1mqdhm+n2hZjnSY8BOoFbqM+RNMgcwLJLgwGEfQbX6b +tUhyxXsWhigGm4zxFHMIjw+XL4Hs6UUZpAkg2xQDGZZ2QSLBiyoT/YLTBlXH6RUMOgxXN0z msVNIba2Fmzdxu+o0TMMh+tXCsU4jGUlO+4Ny3GbPJVF8TOguiul5Vpobx7aJ1Q2lPQapWHa WgVYSGGRorcMfamilsKhe+QpPb63nYUU8n6uD2WzdgeF1wxHot3wnPYMpV+n8CfDc7g6qaut l6/S1nDZedpTxuXak4YjteeofiHJvdrbxmvUl0OZh2uo/B1lM4NxOf5J5edQWffP9fuTMZZR GCpfhUqK8ymulYb13K5Ae4HyBdIwtFD+HipPpfQEaj+sy1EYQTI5FJfI2SiUs7UdVD9FLyfZ YrqeMI27m8JUqnvu341B4MBA8/7ZLz2Gn0JfI7/0GAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQE BAQEBAT+G6B/Pv9Lj0FA4OCB+RMTY2z3Vp75liLVrFoIoBMWmM28IsOtui3DLcg0Q7Wo7uFw W1TL8KssXb2tWAJ50fy4xZI1KM3vsqRaLBmWTIt7uNts6Ych96XN/uhXQEBAQEDgYAfbv4jA /0rIkJkOgywziTGkGz61rsdOVYMKk9YD8vCIyf8jtsKq7YYNNmI7ZwfsxE7iXXDBSezmnAIX sYf4B6TCTexFCnEaUol9xN8jHV7iDPiIMzn7ka79E1nIJM6GnzgHWcQBZBMHiXcihBziXASJ wwgR5xF/hwhyiaMIE+dzHoSI9i0KECUu5FyEfOJiDNK+QQkKiEtRSDyYcxmKtK9RzjmGEuI4 SomHYLD2DxyCMuKhnCtQTlyJmPYVhiFOXIUhxMNxCPEIDCWuJv4SI1FBXINK4lpUEY8i/gJ1 GE5cjxHEDagmbiT+HKNRQzwGtcRjOR+KUdpnOAx1xE2oJz4cDcTj0KjtwHiMJp6AMcQTOU/C WO1TTMZhxM2cp6CJ+Agcrn2CIzGO+CjOLZhA3IqJxEdjkvYxjuE8FZOJj0Uz8XGYom3H8TiC uA1HEk/DUcTTiT/CDLQQz8TRxLNwDPFs4g9xAqYSz8GxxCdyPgnHa9twMtqIT8E04lM5n4bp 2lacjhnEczGT+AzMIj4Ts7UtmIcTiOdzPgtziM/GicTn4GRtMxZwPhenEC/EqcS/wmnaBziP 8yLMJT4fZxAvJn4fS3Am8QWYR3wh5hNfhLO0TbgYZxNfgnOIL8UC4suIN+JynEt8BX5F3M55 Kc7T3sOVWER8Fc4nvprzNVii/R3X4gLiX+NC4us4X4+LiG/Axdq7uBGXEN+ES4lvxmWkdQsu p9pbOd+GK4hvx1LiO3AlydzJ+S5cRXw3ria+h/hvuBfXEt+HXxPfj+uIf0P8Dn6L64kfwA3E D+Im4mXEb+N3uJl4OW4hXoFbqfwhzg/jdip5BHcQr+ScwJ3EHbhL24BO3E3chXuIV+Fe4kdx H/FjuJ/4cc7d+A3xajxAvIbzWjyovYUnsIz4SfxO+yueIn4L67CC0uvxEKV/j4cp/TTnZ/AI 8bNYSfwHJLQ38Ud0aH/Bc+gkfh5dxC9wfhGrtDfwEh4jfhmPE7/C+U/o1l7Hq1hN/GfOr2Et 8et4QnsNb+BJ4r9wfhNPUflfsY7Sb2E98Qb8nvhtPE38Dp7R/oy/cX4XzxL/HX8gfg/Paa9i I+dNeJ74fbxA/AFe1P6EzZy34GXirXiFeBvnD/En7RV8hFeJt+PPxB/jNe1lfILXtZfwKd4g 3oG/EH/G+XO8SfwF3iL+kvNX2EDy/8DblP4a7xB/w/lbvEv8Hf6uvYideI/4n8Qv4HtspPQP 2ETpXXifeDc+IO7BZmINW7TnhU0/yG36J9ymf8Jt+sfcpn/MbfrH3KZ/zG36dm7Tt3Obvp3b 9O3cpm/nNn07t+nbuU3fzm36R9ymf8Rt+kfcpn/EbfqH3KZ/yG36h9ymf8ht+jZu07dxm76N 2/Rt3KZv4zZ9K7fpW7lN38pt+lZu07dwm76F2/Qt3KZv4TZ9M7fpm7lN38xt+mZu0z/gNv0D btM/4Db9A27T3+c2/X1u09/nNv19btM3cZu+idv0Tdymb+I2fSO36Ru5Td/IbfpGbtM3cpv+ Hrfp73Gb/t4vaNNv6bXpbwubLmz6f61NLxI2Xdj0g8am3/r/ZdPfEjZ9ANt0kMWF+Qur2QxZ VhT+lEaPZEWWjUYj6IQRvRUmk0mlE4oBRjMlYTIaVaNqMvY+3jEaDUYDqcmyQTaTtlFRZKPB ZDAo/fAsybh/kd5fRxAQEBAQEBD4T0LsrwMUNgv395I+1L/x91SzyWTW/T2ThZLk75nMJsvP +HvGpL9n0HOqwWDohyELf09AQEBAQOCXgdhfByjsVsuP/p7unpG/p5hM5NGZyM3b4++pqtlM ASRnslISKnl/qkXd8+OjJvL/jLLJpMgmhRxDk/5kz2Qkz68//D3T/kXQH88VBQQEBAQEDnaI /XWAwmm3kVOnJH0o3d9TDIqiquTRqeTmofcBndlsITfPCoMJqp2SIO/ParaZ1d5WVNWkmgyq qhhUxULaqtGoqCaLydSXZ3EHCnX/ImI9CggICAgI9APE/jpA4Ur6e0kf6v/p71nMVqvFYtP9 PbOdkuTvmW0Wu+Xn/D1b0t+jnFUV/p6AgICAgMB/EcT+OkDhdtjJ3zP85PmeUTGYzWb+m2lm /i0+gsVitXF/T4XZQUlyAMnfc1jMva2YzSazSmoGg2qwkbbZZDKYyd9T+/LZ64HCvH8R9Mfn yAICAgICAgc7xP46QOFxOcnNMyb9Mj0yGA2GH38pt9ffs9rsDpvNAaMKq4uSsFmsDpvLtucH aS0W1aKSmu7vkRdosZC/Z1Ht/ePv9eVXcMV6FBAQEBAQ+M9D7K8DFN4UF/l7puQzM+7vmQxG q9UKOmHlf7VBIHfPabc7QXK2FErCbrU57W67tbcVq9VsNZOa0WgxOknbqqpGq9lhNvfls9cD hXX/In36G14BAQEBAQGBA4PYXwco0lM9MBpNyWdm+nf2jKrRZLPZQCdsvITgcLrcTqcbqhX2 VErCabO7nank+CVhs1ltVtVmM5msJjdp2yxmk81Knl9fPns9UNj6INMfzxUFBAQEBAQOdoj9 dYDCn+bVf10v+cxM/86eyWxSHQ4H6IRjz38+dbtTUt2uVJhtcKalpLrgdjhTXV5y/JJwOGwO G6mRl6emkrbDalUdNvL8+vIs7kDh6INMfzxXFBAQEBAQONgh9tcBiux0H/l75uSDOv07eyaL SXU6naATTl5CSEnxeFPcXljscKV7vG6kOMnbS0/Z4+85HXanndRUk131kraT/D2n3WO394e/ 59y/iFiPAgICAgIC/QCxvw5QBP0ZUFVL8pmZhdwz1aqaXS4X6ISLf4uPkJrq9aV6fLA6kOL3 +jxIdaX4PBmp7t5WXC6Hy0FqZtVh9pG2y2YzuxypDkdfPns9ULj6INMfnyMLCAgICAgc7BD7 6wBFyJ/5f/t7brcbdML9o7+Xlp7qSYfVSf5eWjr5e+6UdE/mXn/P7Xa6naRmVp3mdNJ22+1m t9Pr3PsFv/8k3PsXEetRQEBAQECgHyD21wGKSCAbZrPVxTP632iYbWaLx+MBnfDwEoLPl+H3 pflhc8EbyPCnwefx+n05Pm9vKx6PK9VFahazy+InbY/DYfG40l2uvnzX7kDh6YNMX36zRUBA QEBAQODAIPbXAYrCcAhWqyP5zMxuB6wOq83r9YJOePlfbRAyM7NyMjNy4PDAF87KyUCm15eT kZvp623F6/V4PaRms3lsOaTtdblsXk8muYH9MGTv/kX69De8AgICAgICAgcGsb8OUJTm58Fm c6TyjNNFd9Jps/t8PtAJH/+rDUJWViCU5Q/BmYrMaCDkR5YvM+TPz8robcXnS/WlkprdnmoP kbYvJcXuS81OTU3phyH79i+C/vgcWUBAQEBA4GCH2F8HKGKF+bDbXclnZi433Um33ZGRkQE6 kcG/xUcIBEJ5gZw8uNOQVRjKy0EgIysvpyDg720lIyMtI82ZkeFwpDnySDvD43FkpAXS0vry 2euBImP/In36zRYBAQEBAQGBA4PYXwcohpYUwuFwJ5+ZpaTQnUxxOP1+P+iEn5cQQqG8/FAw HynpyCnJyw8i5M/JD5aEsntb8fvT/emk5nSmO/NJ2+/1Ov3puenpffns9UDh379In36zRUBA QEBAQODAIPbXAYqqshI4nXv8PQ/dSY/TlZ2dDTqRzf9qgxAO5xeGcwvhyUSwLL8wF+HsYGHu 4HCgt5Xs7MzsTFJzuTJdhaSd7fO5sjMjmZl9+ez1QJG9f5E+/WaLgICAgICAwIHB9UsPQOB/ hvrKIXC7vUkfKi0NcKe5Pbm5uaATubyEUFBQUlZQUIa0HEQqKYmC3EhZQWVBXm8rubk5uTmk 5vHkeMpIOzcz05ObU5KTk9kPQ87tg0x/fI4sICAgICBwsEPsrwMUTSOr4PGkB3kmPYPuZIbH G41GQSei/Ft8hNLS2NDS0qHICKFwJCVRGi0cWjqytLC3lWg0FA2Rmtcb8g4l7Wh2tjcaioVC fXkWd6CI9kGmPz5HFhAQEBAQONgh9tcBiubGUfB6s5IP6vTv7HmzvL7CwkLQiUJkZfGKeLxi RDw+AlkRlDZSEvHC0hHxhnhpbyuFhZHCCKn5fBHfCNIuDAZ9hZGKSCTYD0Mu3L9In/6GV0BA QEBAQODAIPbXAYqp48bC58vJ55mcHLqTAV9maWkp6EQpAslv6FVWVtdVVtYhUID4OEqisjRe V9lUOaS3ldLSgtICUsvMLMisI+3SvLzM0oLqgr0f+P4nUbp/EfTH58gCAgICAgIHO8T+OkAx s3k8MjJyi3gmGAQyQhlZsVgMdCKGUIhXVFfXj62uHotQMSqbKYnqWOXY6knVw3pbicWKY8Wk lpVVnDWWtGP5+Vmx4vri4vx+GHKsDzJZ/dCvgICAgIDAwQ6xvw5cyL0hC4znn6AcpdjTUHAP 5fMQpJSCXBSQr3UIKjEcY3AYJqIVC0niYVYuVcjnBz2aRtJBDEIxhpBUFUbhUByOyZi2r5S2 +WePGXT8xtCz655Nd/WOZL9gRuwVZZIESP8qQJemGHjSatN/UNqd4kn1wpeu/6xLdg6vyItE 8wcVFKK4BIPLymNxHDK0onJY1fARvW00NI4eM/bQw5oOHzd+wsRJk5unHHHkUS2tRx8z9dj/ 8ZT/PGTOHX0RffMn6f/1d6l21JTampHVI4ZXDausOGRIPFZeNri0pLiosGBQfjSSF84NBQM5 2Vn+zIx0X5o31ZPidjkddpvVYlZNRoMiSwzFjeHRbcFEtC2hRMNjx5bo+fA0Kpj2k4K2RJCK Ru8rkwi2cbHgvpK1JDn7XyRrk5K1eyWZKzgCI0qKg43hYOKVhnCwmx09qYXSVzWEW4OJHTw9 jqev5Wk7pUMhUgg2ps9pCCZYW7AxMfrsOe2NbQ3UXIfVUh+un2UpKUaHxUpJK6USvvDcDuYb yXhC8jVWdUhQ7TSoRGa4oTGREW7QR5CQI43TZiYmTmppbPCHQq0lxQlWPyM8PYFwXcJZxEVQ z7tJGOsTJt5N8ET9arA02FG8vv3KbhemtxXZZoZnTpvakpCntep9uIuo34aEb+GW9B+z1HhK fctlP631y+2N6ScG9Wx7+2XBxD2TWn5aG9K5tZXaIF0pMrqtfTR1faU+iemDaSD68PVLSV7U rHCjXtJ2UjBhDteF57Sf1Eb3I7M9gcnnhjozM2tXa5uQ2Rhsn9ISDiVq/OHWaQ1ZHalon3xu V0ZtMGPfmpLiDpc7OZsdDmdvwmb/aWLW3jqe4uJ6qmny3ulk+ojCh9IqSARnBGkkLWG6kEqd ZlWifUYliRFaGWklZtJtODFhrm9rd1Xp5bp+whBxhYPt34Bue3jHp/uWTOstMUZc30BP6otj 7/qi+j3pRFFRorBQXxemerqRNMaRPH9ISfHZ3dJn4bmuIEU0fZjYQmqtVYNpzkMh/a4u7a7F dMoklkxqSeaDmO7vRO3gotaE1KbXrN9T4z1Cr1myp2aveluYlu8q/sr2JtTo3tPpSvM0zqlK sLR/Uz0rWd/UHG6adHRLsLG9rXdum6bsk0vWV+6t600lPPUtsl/qTUl+mdfSSpy6V1jPtNgS SoROI1/JM7tNKi1FXsKCoxOutrFJbrWEQn1U6ta+0LV49KNa7zATVUX75ofvk99neLZ2mQas RKWmKUe3t1v2qRtNZqe9fXQ4OLq9rX1at7ZkejjoCrevlhNyon1uY9ueO9qtrVnqT4y+spUu Yg6rotUqoa4jzC6f1FHLLm8+umW1i+z35VNaOiUm1bfVtXbkUV3L6iAZWl4q7S3Vc0E9hyZG K71TUnmVf3UtsITXKryA52d0M/AydU8Zw4xuKVnm4mWEEn2HmoJRNvkJlFGopXAPhQQFg7Ze XtvV2Bir7aa4qJTHnYMKYqt5RWY0tmSUR16LuymspPAqBYW2vbUIUJDktdJK5CNAwqs70/xc q7uzrq43MbQymegqLIltHGWRu/E5BUnullfTZsa1ugaVxr4Y5aQCfd9/HIyCrIKaf0pehyIu tK4zrzC2Wn5MvqCzKuAc5ZO74JI7EaQwkcJcCpsoGGl0XdhI4XMKGgUFKfKyzg+uCDwl381O ZrdRq7fgepXV2gKLlcUGabG0WJaOXyslwLT1zNeZMTvWra3vmpU5m8a9hM3TC56UL2Y+fUDa emllZ3m8tpuiUh510TzxOJqfjEORZJwV5HFnOCmdEb/nCZqnBIVN0spH5Vo5VEAdfdVVFa2O PSFfqB+oUvFooDYyNZ7TTdc5dSYJfNYVKY2nUla/MSc+JV9Ac9TO2aGXDY659LpJx8Rsejx+ UixXj8eMizn0JkbHLRTVmqNjYimR+hYu1BmL6zqdhfEUXbSiOpaylhqsRlz7utYbqY6nRw45 JuaKRIfEjJHCuI3679Z6avMiJXFb1eB47NbI8siayAsRxRAZSrWxylhGVUFVZZWcHvFRg6sG RSojyhPyBfqBiIpaV8AZ0AcfWBCQrIGyOF3Vl10BftlL9AMBEvIGKo43rTRJxxtXGqXch0je /NBg6vjdWstDgdxYbrhosn5JizsL4jzK1SdlcWdOkFr78PGcongshyZDX2mLHzt8QiwWLY6P smifyYsxjC5sJ8VFFH9MKlXxIGl21YyO5ejx4KpYit5SaZxnaZXy9qNxRc8eetgQPaaJ5FEo nk5RrS07nhsti8Vyo/FK6n9nrSVKnZuj/lCs/SnqismL9QNRurDSQEXAONhYY5TvllZK66RX JeVueaW8Tn5VVk4nqWtkOSAPlmvkCfLxssE56hBpB93c44nvprCRgozBxDUUTue5lbSGGCYQ U4vkOg8mruGpGn0V85rj/6VGf30wuVPulHbQkaCDWqnNrGAoY7VMYgxmRu4L/3ctSHGrtaOs 0q+kMLmadlbNuYKzvzZziP2aIfaLh9jnDLG3DrFPGWIfO8RePMQ+aIh9lEs6hFxUu+TXme3i /AzniZyLazOD9i+C9qeC9huC9nOD9pOC9mlB+/FBe0PQPsrORrJK2FHNuYxzts5s9yrnOCfM 69hujINd7qCp9SIgeTujQwLdUmpntIYitTNnbWBUhmREjsqo1kBhBQWlN5YRUPRyhnLdCrAf EGZHUvxIZ7Qw0M0eTkYr9DZHedkyRHUt9lvksAjFv8EKnr8P5Ty+tze+szN8CqndoUejzOx2 hPVOqIM47+TszmgpVZ/SWX5mYJSbnUx96sVzkMfFGmmJ6HFNr1q4M+euwBMshBxJz2JV9NzA btKPdAa+j3errDPwz7xuaUVn4KNoN6PcVqq7rTOwpZxytdbA5vItgQ/Krwi8Hu2W2GOBP0df CbwS6VZI8PFyLvhIlDfyUA4Vkvxd5ccFbo7eFbg+2XZ7Hhe6iCZzRa0ncCFd0lnhLYG51MzM 8JmB45JNHRvmIzhiG88103gomhDnheOjesOewJjyEwKjoysC9eWvBEaGjwtUBaj8scCwvC2B ijDvqzTM1Qtz6OJoJAXhFYH88hWBIyqeYH+EibVTKKotNS02nWE60TTb1GSqNVWahppKTLmm kClVTVFdqkO1qRZVVY2qokoq1NRubVNtkf7mMdXo0iOjorPC0y5JZ/19Ju0xElMleo+V8MhN UlNzXaKiqKnbpE1OVBY1JcwTj2npYOzqVtaUWD8DTdODiW+bw93MQj6DIVzHEilNaJpSl07C Cely2nyntHQzTde4xK9737SJsdpLrvLrceslV7W2Iu3smvSalJHuYaMbfobaernoR6QX7Yv0 7MRNTc0tieXZrYmYntCyW5sSY5qDU1tWS4ukXzU2rJbO06PWltVstLSocbJezkY3tO4VowV1 HonRoj4vKbYYOboYre7FXOy4pFiAtEksoke62DIEuFiALdPFaJnpch0rAo0NHYEAl1HmYgWX WaHMTcpEuMy2n8gYXNjGZbYZXLw7HxfJyyOR8jxdpCM3jwQ68nJ59aQfq8PJ6kXJ6kW8+rQf q+PJ6uXJ6uVUXfQfwqy6/Uk0nthcx5omtnSoqGslX5XHaa65I/k6cD9avcS/hmXJb8NK7rqF 3u9Zw3WoqUkvco1gg4812hJGKjNR0MWHh9LP969RQFOui9uo2N5bVTKqZJReRctZr3Lo7xx7 q9LPHx6iTpb1Vrmo2E2d0DoubaZ1eXJjorCNonBDK9IbT2ygszeaRzjrrLPmzZt/lg5SiDY3 JarJUe6IRuktX1tDaxG9cWyY/2+uH02JQlKq0ZVMpkZ6C9bQOm9eEdcrKjormaC29eS/Yn6y jIuiaN7ecqa3O09vpYjRlHZr73XlZPFd99GieHq0KL5a+0K+oCMlrgu3snn6+EifWku2MY+3 O0//INRwNYXDEaCQJZ+BdEB7n8JHeug5TNtlIGvcM0f7QB5Jwjf2hiQiWIarmRWLcCEaEcNv 8CJOxlxMwkqMwBfsLYyhuxHBOShALXYjjU3DaNoiC3A1fNqLVHOMtl3aRvbmVlyAr3AW/ooZ +CO5p7exOPJQiZdRrZ0Aj2EDhuJS3Kj9DSZlCH6LDdq7Wg/G4j5sYCNYs7zEMBJHYSHOw5XM xwpZJTsPURrDAjyJ9ZLL/ChstCeOxxS04ASsUnQbZ8BErGRvyvXUUwuWskPYeu0h2oAjpFmC UWyoVKStQQ4KaUsfjhpcghtwC95ipaxaLldWw0fXNA2rmYOlsVy2TrsDATrGYSqN9ErchOV4 CS+xAJsiDZbbDL/r+QgOnE4jXISleBNfMgs7ii2QuuWHe2q0k7Qu7VnSrqB+GsjmLiCpm+nq HsRjWI/f05xsYNlsIruZfabMN8R2X9DzWs8mLU37Ek4a6xGYg9OwGFfQvbkLT+MdbMFOpjCV udnTUpn0juxQ7jL4NGiX8adjgzGKZmsBLsPldKwmjT+wIBvE4mw++6vkkJzSKdL50grpU/kK 8iI2Kx9q9doy7Rma8+0wIUxHFJPpri6iu3YN3buH8AgeRTeex8f4Al/TTJ7ElrIO9ij7TkqV HpbeVHYZNhi+0O7UdsFKsx1BMcroiNMMjsGhNJbTcBvdqRfwCt7F9/ie+dkwdj67jLWzq9mN 7Ca2kX0rXUpO4XvyTfLv6D3l8wpTYspJhqWGTcZJpmk9N/XcpjXR1Xmobf2530iaw1m0FufR mriD5rETj2Mdje07/EDz4qGrzWPD2WS2gJ3HLmDXsHvY29JY6STpdGmuzORsOSzny5crAWWF 8pryjmGhYWlPtKdVK+V7o4VWg/70sYWO4zGbellIx1Kah5V4gu7Wc7Rqt9Nq/gY/UG8S3Wcr 87IQy2eNdBxBd72FHcemsTlsEbufrWDvsM/oHWi6lCtdI90g3S+9Ln0onyFfL98ud8lvyD2K ZrAaYnQ0GVrpelcYvjIeYbzCVGeabnpQfXl34e7nd7/XY+vx9uT3NPdc3LNWa9HO1s7R7tUe 1B7WVmrrex++3oBsWl9BOvJRSq+cJhyO42j8J+MMWpPtuBa/puNBuoYurMKztOJew+t4Dxvp 2IaP6M5+wq/pG+yia0pnYVZO66WCTWXT2Ww2ly3kx4XsFnYru50l2Dq2nr3I3mBvsQ1sEx3f su/YTilF8kiDpQqpQRojTZAmSzOkWdJcenN5i3S79ID0uLRG+gPd5b9Kb0lbpR45i+5EozxW PlY+jmbkXHqrdK/8uPwX+U15g/y+vJPmRqF7FFLCSkSpUk5QLlI2GQbRPM00nGS4m46njVbj SfROqcv4kvEjk9E0yDTWNNH0gKnTpNErZSWuo1fpT0ArbhkrkI6hUcrsGWkVu569InUqOyQH a2ULZUglSjGt8XHYJl0hR9hIeQHz0+v4KhxKXvN5cEh3SmOQ/M7vZHoVx2kdTjG8oXjZg+RL XUre7ES8SuuniWQuxxpEtA1w49fayXiU+egVNUu7lV4LS1gTW0+voROkM6SPlV2yi1bo+/Lb tG620Wt/CLvJ+BKmSkW02qpxN9LofVs+3aVzWVAqxdG4Vb6c7nQIGShUTjGQDWdf0Vua5dJN 0hXSKu0Fcuw+Jbt3tDKGHL5NZPcLyWX5BI/Q2F6U3pCuYI8qRnYvm0BjyJJVWh/PIU+6E7Pk s5giLZH+oWzA29Iw6Wi5mH2llMsyJtJ9ugit7BOm4iF2k7STnPIb2RK6+q3sE2kr5uMfTJN2 y9dIc9jz7DmWJhWxOrkMPdL7bLqkP9f/zOAjN7OCXkdGWlfbpOXybHp78IbhafldZZz8GBT2 FKuQdslBqYGNkyu1HYgYd8r2nje1ejRImnadYt39Oc3OGXhbe1YuUaYph/3w6A+vSj52nXyq oUX7qmeR4SJpJGYbtpuqca5UTxbiVdqLVqKQfS5l0rwHqKSKZsqnXPvDD9IkZEtfsG+wgF1D r448upIpZDlW4gT9vQ7NnZEs9C34nt7VPI1x8llkZx7Ds7TazyPb7pFm0D4zh00m17mUKXw/ uI1Ww5fKiTgXS+j+P0m76QpK5Rh+21OLP5HdO5Jei39jS+lVN1YaprSgmfbSC/mvdkksi+5Q lkF/9ZpQs0piO42mbml2rQcGZacMi0nZyZChGg07JbmbHdZlvu9dcpq+HbF7xHjX1yPG7R6B Gkq7dhGVl4XcIXeEiGUp2BWU1++qNZB9CirraUXepm2U2mlkqWQd6rosMli3vLLW7B3vN+f6 fJn2NfQOzMhyO/EA62anP54+PicjVHdMehF1M27H1zu+3j2+cVbDNtSM2/3tiJryMhYeOrQi pWJoxdB4LM2bajLKRgp60hjO/T+UfAmcFOW1b31V1Ut19VJb7129VHd19/Q+Mz0MzbQzBbiw g4oLYBMXEFwQRgQEBAaQRVC8khAVccUN0aAMA8MAYhLMdnON8ZrkxbyX4HXcohOTGyRXZXru +ap7ADX3vd9jZuqr+rqn66tz/ud/zv9UMfGW4gg0Nt6Y9DaxUtapBhJiw/JRRnFdulxOp8pl NKHn+E7U3jIz786oDR1bqq/v4EdWH9VfS6XLYJU4sPNjsFoOrLtcS6xwIJZjQ37OH6KB3viH uD0cXTKWgpOMF9rHOgwcS4R8PNGL7t5vNvMwaDY3FYHLYgeIX/gG+N6h1/Y3t8DQdSjTwnvD T/1Uv7B0Gq7m7IUNlLkBxAsl+G4sdFYqRAWJI/AVDl+iiYqIXzskd8hW2i5xF0SjCXvce1/1 +pDNJl6SijZY7G1bqSiK3S5pijcaD/mSNzVX/4CSazLtrcmgR07dVf091l/3VidQW6A644jy IZMZIZHhhV60ttuhu+GiboOljelFV/Y4xhq8/JjDJEfUPTLYzw0OcLBs7IsKMsUT8RauVUBu cAPplNBaZVkxueMQ2uk5vGR7X3Um994PNm9BY4agakpG73nh7cHnTx8l0FCkOoEM6ecfe4iB 8/OMyP+T82sWB1g5ZCANPljeR69Mw6s4XfnWMlpdbpeTM5EoAXYSWooopSxrbtjRW52nL8Ow UvwPWEb1WLX60+r/Cm3Z8zY5A5YB6/ikOoQ4yEkSkdeshCR91mFHa+zIzvehOwia7DlEtLNe 54LPa1f/af8Aka90DnA/byyY4EwtxUQcG6BYc43R5JyYjxnpAmVqSzZ03LvhXaWYVAWHucDw rnT7mKYZB5vA9iPQCnIuGoLIC3QT60mIB/6ggfTSC7bhs/RP5vqJ/CBclinSSs5tGPyyAQ1t 2AC/d9HQx7DWbqhygochbh/Yb2QhNO/oYbzW4QUOEB3wm63nhcML6bZyKtXW1t2Gt/CDr/rI 0LuUDaxPERdryjziTuo5AvgWQX6iJJLEuyRiqQrhM6AKLKwPfQrWqJ8B7I9PU+4obzLk0ptW ndAdACmbsg0aryaHDNu+vNzwEr6fvGLoI+rvhvmEAEx3rzalxdUWHmecYBofnBqaFJ7unhme 45rjvi14W+iW8FLHYtcd7tWhleF1rg3u+8I7XA+4Hwvvdj7tetK9N7gvfJg84NzvOuA+Fjwe jolfAHP1onmaz2Lz7u2yIZtXVfZ2Ub+i/kR9Rg1RBsoX74OK1kUMowUWXsGLHugY0FeL7UNC INVshOnErRhJE+DX1dzUOkIU+GKcPNG1b93S2fPKU9ftu3reEzetH7VszaiJM7UL0osv2zDT MP+3H/6kOufBZS3B3370/ofIfu81xVnVk+9Vf/fr+fOStyID1F7swpvAa6vAVVeBFfzELzSf yYeuJOeRS8k7qGM2g5kwc27kdtBmB4B9ZLfZhIyjWTQSGNmHdhMcaSeShBeOfWgQiJlzIIow JzmH4wNESAjouQ+dInyUTWP8fsJgNlkJdIRKQkz5SLY75ECOXiqhsRwKwBwol4Clj0yi98Aq oH7T6XKaew2lT1f6y5+XdX9ypwY22XPpVdyJNC+4Sx6C+3wgfQbSFdAT91pti81XIToRMoKt 3IBQnahaRT0Y4lHFlFCpq6qvBppnWwYH7Zf5Us6I8pGTpOIRX6sNXWqY/9XjN2TUhElVSVYI 5pZR6nhWEqNJa2w22CoMtnoNbCUTPVrkfvNGdpf5+5YXzXutx8191jfMb3gsn1F/pj9xfeam Wat8DGzkBfssIwJopOaUKbeHdhnAiSIlGCk37aIR20uSmpXZ6zB4PR8A8q3W46QbaP4fIL2M UE7IJLlf8IX6oIL8rIaWyf0D3Ol+sAc3WO4Y7Ac7IGwM+M4NfEpwg4j7+StGcuz0qzXGQbF0 iPLTNFGZ0VgA1q5EIi2EOGyIc3wNZ2oa0dpM/niwQtLPTu668b5Z0eYTt699OVRYe6J6GE2/ 7GZ3UkUnEFq2fv76Tdza+19ZffXEJQ/8sfqnC0s4kjSIpPdBQ1sIG5qipe0sWskiB2m2NhMj 6FZ2sWWTYZPxX6k/UBaGZaxzLUss9HQLutGCDFi8u71FI4xaGXaQFbQpbaYIg8lMsUablWSN hMHwgZGVjEbWwjBfWlnJypitrJmxsFabCT9DwDrszBH0ECzESu7uocxmAwGGfVyzWJIWgjYm DTbqCPkcvEySZDfBWCy96MuDLEMQjMHQSyV7GPhohumjHISZRD1Wm83KskeoBoKBz2M11mhP spzRbbRbfnYYCsbz4XkqveIk8uSFUp4b7Nd7NukVf4OJtL7H4ddg+CsM4LI0hnGaGyAgkeah Lnlf99wmcy5tAExvynkwtB3wD0CcTt/e2QmZFpDcbIpSUTHSiigUod6vDj4Ve/qm795cdaWo /PbBw+gBw6Qzd99V/R669V7q1mp1cCPgdDz44zfgD4X4obbQqAglGn4ipnS4YCqHpxkuM04z XWe43ni9qZPuNC42raPXGe82PUA/YHyC3m3soQ+HXatBQAc8gQtNTxk/NxoiHhcVFBAZM3v8 EcVJ0fSXCiHhP/1KUwQdFGhKUewkBWFP+3vRrYfsNsEbDe41HyUZ4Naf6UzHnQaa68flBC7M wAJCDbk4pPH1Y6voU6USnsaB3ElU0mkUMUVMOH0CADAh1tOZG6aamzCW4wmSQ6/nqjdNfGrm 1nk7rrhj6dy2ZDHeMjrpc8qdr87dtc4w6ZnnfBOXvLX13Ycy5UwwF2tuibDMuwdWvTzODjlm CljrY4hqN6y1QLx+GMTJH7WbuJKJv8W6wb3BS3sNo2ylxHjbhMR0NActMiyJrSysRxs862Mb Ulsyj7OP2HYGHonvSD1WeIHbG9gd26PuK7yMjlqP2vq444FPMmHVYyVoyqEP6eAXgiH9hdEW 2Us4OAfp6AMpkERPaayDCTEk423M7aX60H8SfpizdTivdXY5Tzppp68J0Hc2ZQyeriWNwdOV Wt7g60SA7QZmQ65zKbY1fl4FMKIW/kCPbpfJaNQzCp4iu6+d8V8Hd//bcx/N6Pjpg/9y8Lu/ uHXZ4sqM2+SUvOPhTbfdvmsW+Y/5B2ft/vtP7u58Z+6CbRdveO3Zhbcd4NTnF9y4ZNGMsaXp /e2fbFqw4YmF0w/ruXWA9FJboBZwE62HCSNUA4TJ2guDoBcF+5nFDhjgop0hJ+n0em7TSyf9 is4mwvPKhK9V0N24HIafF1Kj2hqgaqC2tKX0qbbBTFuqoQ1Pwhpi1SEyAJqQBU144X5rxAin 1xjCFPlsjRd566sI4ELKQfZoNmu7wxVykS6vcnYtn/bj1eQrsBxcUp2/IDTi29WV0YQO1pbW Vn34piYTKDJzOZFqnzjGs4Da3Far4tu+2lkeG5YcTDPLS6n2MS1j1xaFkcCiQ7sIgr4WanuF UNED2lrKSbhoDxUxK5aoMWayRlE+2hGdGv1OdGF0dXRbdGf0SPTD8Okwa4gYooZYIdKsFGIX yRcpVygL5DnKjbGl0hLleeVt528iv4v+NibGlYJUcDbKdAOR8ecDeZlOaN5RxbgmjiqKalSQ YtEoZEMlbBFY2SJHIr2kX5ugRIKyzCCzzAScfjkQdTqjEUWKRJSoEHUKwVqij6mSGhVFRiEo ORCwWBgzpfAKqRDRiFOK0UK84EROfMucHVV09lJjDkVXK5rXX1Tqc0ov1d5D4BmiPgOSZYxm Qxo3quhAeRDlFJShU3riW6MKEe6jZlKzdB4+VUmDWDmdTp/6IF3B8Af6qODkCF8dmGRAu5Qx w5gxw9qBYmnY8ZxfMcDW/OnZI5OdK5sMXLlsKpd1Gq5gvQMFRSei9JhxNUNRgYsw+GqN1CJI rzNG6ARNh+aZHeLoyezgn1n36AaZYy1c9a4teU+xzFYXshM6F1Gp3dVl6ArDLV89NNWbdMoB VQ2ImdDiF490tHrCOVJVqcpD9JRq9+DHBDX0a8DEYWDyCJEhWtEj2lITlA2kkCl0qB2FqYVZ xZubVzYvKt1b2GF5NPl44WnLDxr2FrrpHstR9XhBvDJzgiaV1mw2I/okWUR+QkaZbDbo80s+ n59pieVzYiqHWnMKUGIur9wPPlNERIpmpTWT9Y1M+n0cwySyTfrdcCuy9qExRIJa02PUeAEn 7de6OQ+MyN1TyhzLvufvpS7S7IIPe/Jl32u+N32UD97Uw7cUfMjXixYfHMn43L6Rlj60GDmH MykOtXQlPRbfXPLBRwb4Dvxb3XE3Hru6kx79+GAWjjW+lK619Sf3D/YDFYJU/fhU58denFPx p0FSximE8HR0wEwFRJj+BXNYDnzT+SZOd3Nl4svJyye+vOTSmVfvL3rV3qEPR46cQUx8OQ2T 7TDZE0tGk0pyJMyiCqxTsxYUZ6lJiZQS8KMvBzRepEknXZNrOFedqz51zhXrVAvFFzpvN29H /SuOf2fP8ZV3zN+9+LIfVB22KYEk70n+PdQ6mT86Wn7zX+/aHBtZferWC3b9bcez4ZwhoU7a PGnJsWzuoVlze2/08Cpp4wPxzVTL/JSaHnyD7Nk8b7H1q1n2o0+u3EJhNb1l6F3Dk8AsCeJ+ LRbjxrJjuWuM89g7LEvZZcGN3Pc53Go/YLU9K/xEII0ORPaiyRpjjm03NyfClLOXFA/xczwM gaOYCu4nN4MGHrM/sRlH6wGpRJzCz0NoQkC7ZGIxoEmlxwMoMDc5d1WNRrGLBtMDpwb6ITQH +zvKA59y/bgg7QSrUdFEjgIzgL1quai12UhHlRjQqhDDaR5PGZ6cG6MNsXG3je3euPe6aR/0 bv19JX9b9dSRZ4eIjX9Bj//7DStHeDyxlOGW6vjbyrMvSly/qv/oD1//5K61+57ZeuaBP6Kn /5qXpDxw7I8JwrAb4slHZIk/HSYCQx9pzTwg5yr/8sSK9NZET9Bok+yyDdApI38gEJSckiQ5 ozlbJodIm1nKJZ0S19BHrSGMNYga+5CbyA+9pjFiaVEe5f1vB/ooRDipiw4IDglJGPU5RnJL uW+hvlOHvAQQh8+R6lDHo8YC1iXNU5K+ifcKkN3kj2tAJzogLQ0M10+eb8qgNCAyTAtOyU7S 34CioSaPwLYxvR0BOEQZK3oFiYh5bNbiv1T//Obgj2xT/UlRjv01UJyEJlffiTgF36hHke3K FdtP/q4FMLi6+rdHNnz14MGrVNLKy6k1VPG61kQqfoa53c8FDcxorYIufvOT97Gefwus7gCr t6I92rOa94CX3ODd4X3GS20KbEx8P/Bg9jn/c9kjdI/QEziUtcwLLA1sJCiDQ3KM91LNmh/K V2fJq4jOdp8fORwEcnAcYcrY7d8xyyY5BgkqV2xtfTUv54zjSPI6g2z03+12/9Un++kMyqhp OUNwXBCSVCymtuYyZM7ucDgzpDsnm2Mjk2qMM+4xaVGhI29CpsAev+b2FP2A7EPyJUX/9tz2 LOxrLl+g+Hj2syyZ9ZXIFyBoX3DsIR7msKtV3dUxFMPvYyV3MQZe68LHOuHF3LEa4Y36GuGl a96P1Qgv1ltDQayOAjxiwosBCM4DwKkPTn2A67/05FNn0un+fCXdP4yFAcx35W8DoqLrws/R 1wb9ldqunu02wfuRXuKk6ykPIlMPRiqq19jRaC39Ndcmvw6naGtEf1sCqqEo+eAjazavyKhb k0L0guvXrhe9/IV3/viTitr11Ue2Kf6k4Ff/EmiZ7LRSb0xXTT5ldOElAzX40eWLqlJ7Jl30 VjtGKz7JvmVvdRMASwg0rKeabijG02r1cC7UEst5BIyoNwBRMwBReTSux6k4+PZGbPz1UM8Y 7E77g/Hn4sfoHv5Q3ITsdgKBvwEvNhvGi0t2y67E/Hz+uqScGMaL0yHJTlpFajAmq4TDEZSD kiwH8zmVzNnsdqdKupxmuZAMyoAVwqSZyF+Z/mQiTYntRLwQ1+LT4ovihrivkXjbgRERhDRo FRxySM7LVJeMZIyEAgNnLoD2XPzKmfOAUIOBXHO/XHe/PEwCMvhf/lbS65wMru886/ry/+R6 4jw/f9vzm8Dzq05ACtTZIv01h9f8/bUOig6Duqd1R+98Yv+dyzri9yUdly48sDTceot1EDzs S4p+9TPZ1zzJSgfmxNnxpeRWAz344YTlVaGcuGBsdd6CmJrEDRZgjYYuqvGGkT5VUKt72pNj JnMWyFbbhk4afgnZagTxY22SCOkkZitJpcbxjTOFG0N3MHfYlqeWpu+2fj90kOhh+pzvWH6b 5P2RgOz3CV7ZV2giWYHng0pEUniHEvH7fHnVQYZA+/dSpGY1NTdvH5Gn7HNUxo+zWD2ZjdhM HAEiH0mwkMkcDXDWBpzNGua2zr1muCf+MWhYyGI41sqfDn5Q0XU81u92HD647PgGCROYhesG DVNGXhKwiUU9VHDUmHCZYKKMoCliJCQ8/a5BPeX9aG6ceemh6s9ff/RHv2iaMfMGpy81O8CS Rcvki718fM49z1d+Wz295nv/Z1336w8sybu80QBkvysmxq5/sPq/P6z+x6vVT4UQqoxLx0Q5 kUBKg39ddU9b4knErH8ZXfCHjqsKojuDI+k1gqDGQSQF0XcPIMVRcuFWjOYQ24mQI0xe4X5Y 7PZTXWFEMpRMMgISPKIsIC+kR97CybzH6w0yFolhLAJPksjMhJIWhvMcJUXCC5FgIUUoFbGy zTNrmPsZA9PlKTH4tkO6BQ+HmlsYLZ4o4n3NnWzpYl5j3mROMn+FdwLsGQ1Cm8HRE2IYNxPS eVQ8j0eBrfTQwFGkORlNYDsYTbLCxmWDjdveoX8yAxTLaEFBP+oOi3jUA46pB5w+7wjq4/5E qfZLzmgH0+Xw1l5kheGxXR+j+nGXxkCUMlpS0l99RSr9k4dganF7Llp1RWL/J0LkXMzqfczO dFr9dgCa4hg2eni60Bfs4Fv26f6MMxL9NOhrmWwlrawWyubVT8LeVlUPsmB+OdV0Y9EXE1UV OaQJa8680RnyRkXwfd/Qu6A4J0FdOHCYIOCirFxHorc20tgE0zm+3UAYEh7aE3tUflQ9oppW hNabH7JSydjI2E0hCutFD0LIQMqIg9hVEjJhMBqDYUUKhxW3n3+ZRQTpb2aZcDKphDnDaqPS iy7WLMa3wuFrw4vCVLiXulhj7Yy03fOiXXOU7Pi8jsCo4lQ7snuTYXc4aSkfpibUnV4vKLE5 T1XQQD93XgIsQ51f+oZt6/asYGGnGxXjBUVqJjQZ62q+3gnVK9B2srVm7AQ5gXSx86bnXmxs GvvefXfcNbGYLfki8XDuhqtGK407IuXrDJNUNP7xwb17Zty57ZZJ5WkjEuFg3O5UMjNXL3iJ JDsD8YIR7PwqqLg82DmJGK2ZET1JUrjCdX98a2Jr8mniEHHQb0okkRlMqAcXz9TjysxIZjMT DSd7kVGLhHMIQgyZk4koQafMDUnGzBF7iCSXDCep5ImU9xjEG0NdRAiEGQKmgTG7zQ16ujlx Ll70ZGOuYd+MPQ3YN9drDXNXrdbAcB2oZZm6ogJhDcUmmPfb9j1/qxcQWB/1QAUktXt7hz7a z5ecuMcLfIKJZT+MtVNUIt9QRwlAtlKjw3qhUdPYzdTeM6J9mj8lhaKfBVsn8RYr2WCuTPEJ DZ/4/Xx5/f3T24uBS3x6x17O3UmVbizEU0hVYw3++8785pqYx+WI+UcEl2Ux2x0jCNMc8EQj Gej2kghhsJWBL65EM4OkoJhb5Ev8F8tXB66S5xEHIr+T/yFbEoGfyOSN8kb5oEzFZZRVICaI AmyCeK/ebE9YMs1NfrnRigIITh6kUTBLFWReiiXkOF2QG0U5bqYaST38y9zg6/D9+uu4Y4Gz iJ47/NpNjVl4J8XQMqXr9XgGflmw8LKghnBdgpBelyBSBsq11FU8XEQ04JcCAX82k4mGglIo FBREMRBXVVkOmBsJiiQJUg4gyhfyNYGiD4Y4QMXTB7CW1vX12OeKut72yEX9ODhKP94vtfj0 itbOF8O+Nb4nQMwfI7cSzWDHyUQGLdbYkMbxxZBmtRVD9Q8I1T8QjxoPnxRa3eTDf1gu1GQp L9RxCEDkBnVehOg9VaPv9EAat2wAayDfMdjqHRyu/jUMuk10zlPrluNejj5jrs/8Ezx+ezvj bIWry3hHwAO+lxXYEHiDkYmbpxUQQhGncZhnMRrrXR+AK4pSZ2sjHaQoHk+0kvesokQ08VYx 0hr+yuWPX+ZhBl+3+CclQ42Zk2c+Tq75z9CI+Wx1NOu/IROOokSkfKnFMOmro/SFqslkm7Lw zNMT0wlJVlUXN+NhSvjqFXrqmcO3qPqtqKbYndTfFY9JxQj+6dC7Rg8guAFdry0xiW4hKY0Q RsUvJi4SLnHOJ5eTT3vY6eJSzwEPtR4hVrDKrC6RGtSk3GAhGdkScPnlAAYT1raIlJwYQqIg iYgQBTUWi7pwanE2sKzFgpFjlkTGJaaSguh0cSgv9lLtmiRprQGQqE3eDk1aJHVJT0i01Etl uxniYax7NNaF3+DCb3BhMIm4sHituyFb1Ec5po+a19fS4ZrqWuO637XPZXCtTjGi2+UWXanz iAsAkz4LFKD89GlcrVb7z0JGD6qOrwPF/P+Jj1ocH0Bhxl4k0vX7ZRWEzmOnuElv8UbRN0rj mv8not3vBYqXWG0sOmC9MJJ3hyPVH8aqF/zN33iNpXolMFiDJMeQLTFjNguO/z3lu36EinkK OZyR/JKvnqLvPNN9bXNcv/doFeTMampfOUuptTvV7xpe1Z/6UIgf9IQVKGTcuEwbBztF76jA KOVC77jARGU6eZX9cukK50x5dnCu8+bAzaGl4orAXaEN0jb5QeP3xF2BnfIB53H5WNBvsptF km8mKF+zmXHj9g1vhaLXql3TYtUumVO0zo3i/wOjeWgtMrqD1qAWouE1Gr9Ga94Wuhe5Dy4C kYvLY65yWnfOx7gfl/54uH/fif2kN8VIGvIsbumMiLkV47lej958oP626c2lg9X57zz673MP VVG4a87xoxOv2f7grH3fWfbUdsMtS95f+U41cmZr/y2vosVfbNRuePfgyZ9u+8PMBfegPb2b f02QQ7+C/Ppf+BleyLBFzWskXeQlkc3q9yKPqM+Yng0fNPVELEYLSmHEfQc0otnTEGmLXGy4 KrlS3U3ujRy09UVeVVmXwpV4xcG1y0mLRU4mWcEF6ZhwB2SCZyEnJ1k26HJDbLgtZjkUzxHm 5lCIJ0iBN1vkqKsh6XZxUdwaopG7O5V8m8Va0E2KB4QuF3L16knZ5XbVkvLa8zSgnpVdtazs qmdlF34oB7KyCxQgnusRSq5hIXhOCQ73ghDuedaEIO52loTSP+0LnWtyl032eoM7TXRWUES/ gwFeSpwFd12pxBN633K4W6mRrrfevLt65sHZD9waH3GjZfB99ubLCyeTpet+0nnRgu65d62+ EKqinnXzfrRcqW67OxVOGVV1/DMUvTUfzRkGX5JnHrhu7lIe3+/Ave2nwGtxohFt0VaZXUyi nBpHTEpNSM8kbiZWEstCy7PfN+7MvpA67D6eOp7jnzUeMJHGgCtwT5aiEo2NtFW0yVaWtsis TwLtF1dUOd5I00FRkkRRguI0SCAJWDOCGvI5X0MOIcJHxq1WliXMSgQRdEZsSkoil8FeC2LD Z4tB7IBAsDaKHhgx0ptRc+PbNHaoRIo9IhYaYl1DiLoMAJeJmsPbLtZFglj3nzjaU8JzB4US SCF9F59FrJ9FfwnO0iUiESOkCQhQbPpm2VY5X04MtwJxrJ3z/7msWceAcLZU05Pl/5UDN+FO QJ3zIpQxUct631D/ptYaSkwiRMD5LWzq8t9PmrbELbuuZwb/zk7wNYjh6IBn4sVW1PfHEz/f d3fh2lvYwau1phd/tmpVOEN+F3HVG6e1pjyCWVUpKy/nl1HNl2VzGlKfv2f97+Xq4u1XG1Xy D8zxbQuXmnH/2g465UrgvzZ0hbZhQ2Ztnpxtm22f7bjZttC+0LGQW2VbY1/jWMl1Zbtyu2yP 2nc5uCSRshWz07PzInOyd5lX2m/P3WPemNqYfcS6076T29H8PPGSdZ99n+NF7pncnvxh9Kr1 qP041507mD+VC7pyl7LTrJfbZmWn541GyS1NsI6zT+DuzhkdWVuONiXlXiqoWZJznNHPIhEn RR5B+E/TlmCSNzUXiwTDpQXLi+FCoUAW4K090c1KeDMInzE9ocjJCBmpZUQ8dHv9RTxqfiVR zEc6Il0RKuK7IP2ioOVahF+Sm1Gb3qDoeZw4CZkAS2Z4I6G5W4g+NIIooxGvrKr3Jyr42ZCB U+kBvUN49riCoYCxMfApp2sk2KndKSYqtyP93pZbbD57Jxg38c67x17rRgx3hfB9Yxeh398A Qk9g59sXKaZ9963fHMr/8oZA7u1nRzaFLhtltPNyKhCfr9BPrJ+/7nKUvnrBL5eX59+e8LVF Qugf4wv3vPjkTReOvPzXcxovnbHtF6xRcZNUsLHaXlaX71wx7eI11XefnDXvhze70o5p4P/7 CcLQhO+CobQWpXDs2YCqe2xIL5MFFipkA7WZDG+OkBwyInSEMhMWIoKLV74U4YgCsQjbjjJr nJ+zAIvXb4AFLP5etEuTCDJyDGSqRRTMPiXp59i3BL0iBlfqYzpXG6MNtTEYLtZKY4+vuMb3 uG8fvs9FBg8p+O6WYpl3Tq6ma65I47tbPT7cmdBLa3fJV+8h4PGQILb7cKVU5/aBdL1TkO4o n8EP+pTLw2yOnyap4KdKTtQfLxmZPoHApYOlb7X/QeXWu7LRqN7vP6+IRVGchaMoQxsXxsWs ct8t1VPN2qU56+B+1jclJedTyHvpkvuvDqiGSdWHpraPVwNnZr7cEG9UVS8/41+oH5dvx8+O vQO16HrwSxO6/DARqsk8/EiPtgB2dkQPWHtsR1z05YbLQottG6K0OWfOl4S2BM0E0gkSGUHw +sMB2U9km2RCJ3AjwwRTWSmVyoYVJSpIkiBIfp8PaJvEDTsHx8eiBiElNCezKYlTNgsa0K6g E7W3HY+ajS8VBE2YJlCcgISj1BSQxIhIgc29LSndd8miPqaz+qgJjaOK4RRK3dnMpNyCGz7b 0kt1vLLwXOlZ8yCCSKroSuVrQmXgG3XnsC75H6m2Lhh5ycPwRQFvJEEJ03YvgYMyjUtP3KWo PfliJ/UuxXBfopaPdaEMysRO1h4PHM7TyEpewF49sUXeqpqsBx68YdfCa6J3Zi+osGgfO2ls U+i7l6z+7JVffsmaQxsDpcWGSSopT5hTDXcltdblz03c9OFS9Ngj+UjeAMJx4q1V5vOPH/1w R9vYzK3o3+bk1QYjKAYC6tCf63FY0TSCISwW3iyZ/caI0clrHCmM5C9wtnlL4VJkHDeJX8Xf JW7j73c+Ku1yHnPa54bmhMld/A/4ozwFCiiqd+KUIh73yy36oc+vH3bnRumjlkm1MA6LzPjC ftlnRibZ7OU9stfBcXpe53gC8RwXjYSlSCTcO7RUEzgiEvZ5vQxjJiMEk+cR30tu2c+tjvRR 7XABY3oIjBhMoxoHhaCD8AI5dBE04VWYXurSV37kGc63kGVPn8J3LOvKIg3a8+vS4v/lYuYG fh3/FL+frz2Ah/TorktPPVz2g6l69SF4tnc4A+dgw9n7KvUOMao9v4hdr6tShFoXmceOi1lI N3vVaNHCTiP5K12OXIcVPWRplFsXLB2kQ/RNVwazZRAYSoNr3pnfkW8tyYXc/iStqrTDd/OT X/0nRPAXQ++a7sP9EHRS440ZZKNZh423iw7JmDPasC+AbPVKiHUU8bHGww6yoYJidRTtGmz0 linbgrtJ2gDbImrwBglvzEEmxIQdqiVryBka86rZmXM2To1MVaYmpqanZmeHZmeX21cqW8Qt 0mPiY9L30vvTfEd2amhqmOpIdKQ7MlSH0qF2xKmOUEe4I0Llsrn/ZuxLoNso733nm5E02jXS SJqRRtJoHY122dbIlizbY8dOvGZzFpzEOJCwhSTgAIWwhjYQYsJS0gBlc7hsl4RAcUjqBChp G7gvpT3lvvL6Ttt72t5zDYW2ful7N9D2Uivv+2Ykxynce+45/vTNjEaj8fy333/7lMcZX86a 5Qmbk3fiTivtd1J6oDcb/HrKBVyc2++KZ0R/nAQ6P2kTcgIu8BAS8oFAJJtxZrMZLhAI5PLO XIDP5a0WS6Qh72xoyJstFoWhLFbII2ZL3sr5/AE+Y8Li6IcrnU69nsQbclnMkLcGOD6jy8GT CKxpmlgzlb0vN43fN9Wg5MJlkycBeYqHxsbTeBLcopgBhZ1Qq8CMnWmCf5CjKgtCG7USwDso rRrdUDb09Y36kYujmV8RMK5PNe2hahClA3McKa9xrMZUiiOrcNRCftLhhFLQpB5R3VwaANdN ZNcaE/ib6coB6wA8pWubHo+ZxkJsyEjAix5ZHM2X9eARo7SyJbh5bm1s+9xaXrOlM1Ku4JDt Bh6ZixKc09pSIZGXa2potVdXVh/E9127JuBLQbdAk26PPvHFxxrvF6j29fzN0MrPQl7sABtk 717Nk5rDGoJ1r6G2hV5qOtak1ev17maWkJB9WWwrdcqefEFGL/B+GcbNslqGYUUxnki4dTot Ca2cJBlEMQH/r+bmuBKhtrkpvy0r5fxZlUjTgJM3lTr8mNVg8VtDbNAfwjIgk0j7M6WiGGN0 uk4ZbjA6LRaWoGlyJ6Dzl9A2x+MRVuuE39gsJTys26DVd8pwE22RWDj2ciQXzmagzYKwLxyy WfUnwe9xD2QFhfQIhFUqIHduRtH480WQe6x3qOZDLYasvfOfEv6zr+AFktJX9JU9lP6O09bT yob6WtGfrge+oHpRKAxoNxPAawgfggQCKHbmAugHhFA3NfAwXTtNiGvC4H3TZd+8o3pwk1Vg 8339prk/mlZGOe9Y9QejDlPAusRYbTOtLi67H0xsbehbbwQfmRflPOyG/3Vnzk5z/dDuWEfu qT5ePVDYtrjME9AF8DmDvjGwuvrOWMBhD9B6Qyym53P7wD6w541hyCf2iJu9pDr14Z1DnIux ONAadtOQV9ZAXsmDO05gWcgR79IlC7DhZsJMmvU2s81is1ps8BLEPnKffp9ln802CSbxSWJS N0lO6p82TpomzZOWSeukbT9taUSFcPrwoeCLmTfxo85jWd2TxGHioIHYCyaIR7NEL7gGbMMJ vQ3qGW8I2iIxn/CLipJRDFI8IvjjITuFacJekbLbA2qJnA1gWISyOSnKhuXzGBYIR5wQ1mAg H7EBTWNDPgIIMhz2iHGoX7wePdY4jX/zOGWw/8+wQfUNytA3wO+VDaEGMUyFQg1K/ktQsSXI qTXI0A08Debg+NiTY9X4csWD6mtrHKTfU7NXysZCLkstYLD/TnRsqgD/o9F5gAJ2jKfAQj2C 1IYaPljoOtb4SKfUyjH4jwG+OXWFERzStzPRSG6k+sbmGOMXlhrn3jWv9mXc4ejN34x3rjCC z8yXWtw+P/7P4JoH4m4/5AO9wRZM3lYtVl+/M88HjWagRMoC2Zshp3x4O9IypJZM+hKbUMws f/4T4vvEXkzAJPALmTUE9SEJ7Aa7kwfA49z+5OPZV5qOp0x5pE0Ys7PjeffzDXgx2R/EzWGP ZLaGxYIVvVeCGx3MMmaMIdrywCzDXbPskU64fyF8IhAA12gw6A3HoJ0wW9zxXKMQc2saXOkm vzBNHJBpLB4NhzFSxDQa3iU4XS4hN33+X44GHB25aSIrW7xeyuQqioKLskyY3waLMA1OoJ9Q xInvCkdcKGOJ6iZlayRWwFyUK+8iHlZKKXdNDUuut/EDWJq4G3NgfgSaCgW/kkUV4gX/rmFp 0n/Wj/sbiy7GVTQ2/nBh+ixVqzk4dXS5iGoNTh2Fzocys7V9V0SdbbXj8Eb8KsxW5teZ+Tzn yNCn51IoVXkOeiGfz85nOanZVB0UpyDiQn7nDLCjAk17Cf6hcm9AndmjMCaEz9RppVEHgzpq h6KpaisHlFesu+QdTDr/IVaAQzz/CRY//0kLqsRTA/WEqrWUQDxTS+c1N9dbZxxKGx7TTIaV 7i/lNBRx/P4P3YRRb7a44p3hnkfaUym36xvblw32bXln/w1Xtq1wRd+Ve6+c7E5v23W4i9g7 t269xUCZDZR/PXv1tlSiYfnA4e6GnVsmwWVbVsn9O3yV1dWpPd3Lnv35v64eRLxXRLynfRBV lAOtTK3ngN4ISMMKbK32TZ9GqIV+0AwNmLdg1wIQibIsxvRYfy+688wQawEhL7BimIjBoyxv sTotFmsoGiiF4hrSMuONmkyWmGi1UGgZKNlGQno/RP6UxHkSkJezb0EmYkAUs8AvSuYV3DYl SsokKBP6eosKWLyFU5YPLH+yEJZp0HosZmEsMeM0zr9eY5i6/zozOwdFfr7ybHa2Q6WvXqUv cJTUAn61JWcPijAqrVfjiJSQpESt3QRFguNAdUvDpESg8IJagaYj8WXvbnxo6fZ909Xf73ls EmpJism4UonNg5e8ff/69tEpQfvg3NDm/kfueLb6/alxDbPT5bU4SOE//tJ8N2h8asPVB1AX WgU++61Q7kVgkRdjqAJARC9ZLA1S8azYjrWDsrY93i7uw+8P7Y0fxp+PHuOPRike8+JejUfr jfOi7h4B3BqfiL8YItxaJWw8ZVe8xym3MkF5lCbF10RchBSyeOzTQPOGP2okYyjVyVEdMbQo VThQisUJE3bGeb0nboEEylk6LMssYxaNzcJbcIs3idbhkgM6+FaHbpluTHedTrNLd1D3Hd0p 3Qc6rc6TSK1R4eN4aujTpVQVzbNK/UkqBSmgZA2pM6OqaR9HEhOCEpOFEvMmdC8+wQJIUkZQ gAfSMFYTDlRVqSS7lb12XKXEhZA8wV394dcenDwMQvdv2yr4EnzCljPSfunyU90rb9w89Nil v7zjpoN7vg3EE+u72tNhMUAHM06Ty+qcuOuJJ668eegKyP9QRDWrIP/nsFbwA/kZMgCcYY+t wwQVpxEOk1ysFIzoxcQWpIJJbmyCu41SgTN6TdcYrzH9xvhrk67Dtcw15lrdpLnwsXC5UJT6 An2tq7N7pEfBk84nXC9ix8G08Zj/jcJRyboKAwIA/y4BMwtPNaLzlQ+1yTGpTY5E4YZPQuWc UUGgtxqB0ZSrCtPg32VBzOZzQxFnUykvcOVixEnQSPYILEfwtOCkaaEpGiRL0+d/ORUolZDm NrGs1URXRIGmsGmCOCq8RpsQZxiL8D4bnymYJowoslOEd77omYJxGiySjcRM7gBGUzROqwqc PgkVeBHygJWDPMDBm+Rkf1SpPYTiyineFtTqZznAeSo0Q1eMjS9dLJVQ9Y7PzH2OohIp6txF yrdjdqF4IlZROniRlNaEFLKOIqf6O07XvVPIRaNIB6d2gB11BQ8Roxo++i9VLF3Dh4pQI3HG lI9gmlXVf/TZDRZHeHm4d78cTgfi37x55cDg+Peeuu2q4lLhchNptrlCjMT1l+6snu3KXg3F 88EvNm8MGB0WdqNr8+35dGnj7b9d07rnxgNg5ZbV6SawIeYWvS6rnYzN3SAvrW783sAy8IN6 H9o4lH0vFsOqctFGmWIsxcY0mJ7S445h/QoDLhqSsRZDa6CX7NP3GXqN6/VrqdWx/Zp/0LxA T2mOxyhU/yK3CZIh7LN36MPQ/dUb9AYth+kNriA2wcl6Y7uF83M5juA4UyTqILVxkylYVhtZ vHGsD0dizVghSa27xOUdVhleaBIVswipH9YrolNDf51Rez+VZBkqVU/N1qiE2ZFY1wA7pkYL DFCxoNompGDsRlSyocwkmg3mdrQ/BWfVIqMQAl2XZ+bvxJ7UoR7kWjT3HHnnut57vuGa/d+P fGsauPdvubJr7cvXn/7W6G23SQ1XfgR2NoZG7mi9wv+H6esOgJYja1qHBze1Jbz2RPO3e5IF 1KldnawuJs5AWV8ErjyBEfB21mU6CPQM6dWpDp3MdDJdJUzj6JHFhBrU8XoiBUyGLz1Q5Htk NxwsHFaq0IOQhUWqhU/MIY2mpxtEZHidyDS4VqaiUUzXdKAtmsGoA1zUYFOqyVFBOTWXqqCH l/sJJ6dC4XicJ/BFXZpIVMPji+JdEHvxcScc8GPq5xdclUZXRVfju8U4TxXLpYb8NF6dYhos 0zghU3lahgJ7pJtn+G5j469q8ndudG52bnZ2Ye0RvAd4M9RMHfUAhHMgQfechs7YHi112lqZ jwLVIZgGPi94IzhCmhzc0IQrgQ5crjg7wuHMuo4QeumR6TrYGlHCumSEqDUHX2g+qqOgogK5 I83qRs3m1oqcauKJYDq+yfHI9r7+a3Zu2FBJ8k0xLuaiSAOdGusPWdtefdU63NWcbi32P9c7 uCEb5eNeg8XT0bhI4nqJ8a7qQPU3z/xmdWfUIwZzYbebtpLQ7S1ee0XyD/gLXUznyC1dIyND mUg+6qFyeitpFKXx1t9D1jhTXaxJQenMYW3YIDDKpUcWPes4RB92P7foyJLvON4JvMkfXWR0 bKG2DOykdg48MfDKgM5us/Ht/c729n6bvb1f0x5ihdKEfppomkpjUM72y3zuvaZomuyJsjaH 3dmL5zR6IV9sD5kj4ICmt8H5NtGI+bA8RMkaokE2JMzlyNZEZ9n3FoRHUPViCahrk1JCKToT xAKVAB8kQOLE0PuDqGUR4dpPIbBF2PZT1NE/o/Ynlko14irSe24WUn8WSm6Jmc+5oewKivkP hC3uDhsS0/pso9oppRSKqpdCQYrWRFOxwgxTa3dUc+aIkBe18TFkPRODgsJAVye9UparSflf oq8ff3eL5Iz2/eDZQtPOTx+4/ceXlFLcndkV39h+919/OrAxMzTSO77/0kXSpm6xGloxXFnz 4kPvD2xtJQauLuZ2X3WVKZim7M6QPSMUpJ6V9w21bpZSowF6STQlriu6Hlz74G8DwaeXb/i3 24YuL1/5zNxNsRtbulLtlw3FF7vNEIEloBZ+BWqEIlgmb3OsItcknksQ1+iuMVwb2BrfadgZ uE24La4fxq4V8GEJIQOJhgMAPJlKpzHaWezJrhOlfHEIRDIor0aazTwXdHJcEEtjxTSfyToz mWykQUNm0kbWxDWLQS6boZwTNLSyR81kLDgNolPmGIfMaxonpoo/yyjetLeQUZMvyuSTlKMQ FShzsqDMsqMsnc2AjKeZYzIM12xsvPdLadihGbTwxyz1+XzVEqqOgwZXu6DRDEVx5nFx3eDu oaD7Df2demvZwHcaIWIrotXRguF6c5EBsOZSFg6IIH59nHa2O8N0rTAPOGriTlywyPU0QL2x W3XEyQhoVnZJCR+p/u74j0fzsu9Wxm6y2EstfHjn2nAsF7nB7XH6Y90j7H1JTn4U9EVSvCPm 0j74Nwk43uhq7rq0Ojqotzos6aW0dFdDLpa+BTw8kHKy7uQO/leLh3+iueV2r6gj4sj2XnL+ EzyrdWMmLAGicpzZXpbcXytLjpTskFKoIWzEDDwR4GYSPaF1ophPDJmx63XTxFOy10yKZps5 YeMDIWcgEOJMgaQYClDMhBsS9A2b4XrCPA2WTBEbbdMg8t3EVkdA5iQlKF1uVdP0kHgBpWQX UjMg80F1j6bdhXzgoQAe8CQDTCBpvPnei7xgVQvLpgCy0AHZYlcj3W6LMtd83BGUbf+YqlFb ofUCYIV9PkvViVureEFSz8hmZ4dFIV+JgdRDm8dsJUa21Sv5lcqYedVML6Dn/LIPdYJK4Eeo 0TXRWm5+z0lbbK5SOdK9obs9UfB8Pchz7h6tu6x2vZarN8wtWmKlnFRmmLl6idQQi60Bp7b7 3D4TolH1+epivF3rgjTKY7877miUbVRBWcqYiyuz7LdIY5ax2HphfXx/XutNgHyPsE7M5fPz xAqZSbPFnLfwMcEZiwnu6XCUssXg/xVrEIUYBWml+EdJ6WECyMRyAifWoiWFU0eXCQBC7clj QmCGLnunCUk2CX9oiDGxhnkRoz7/HKnY0VnF5ak97hSy8vUnDiVq/oHXHrdCQqcFVQ6ju4DD DIdw4UkvfMzgQsEvo1pN1NHZWFwgPBL4hboQSWu5Otfzf/d1dDYE/W6Hx4oTZvOKGzK/DaVC FrvFo3XVVyyp3vi3u//0YVnkc7SN9tImUqvRXPUEgY2bWYGA/q6y3CjUib+DOrEJHJPz5rCz JMkWW0GSXZIkU5LRZDSzJo95JXaP/QWKbGY6pMXMGkbDxTyCN0PUABEP4tAnEXnokkFTDgSn RjQ35puGMMysE41hE1RCHR2fzdZCx6VS7o9Nal1pHN6FBtBOJwsNRDRuB0ATF+N2EQvwFrs1 bzFrTHlzUzU1DXyyS1Qu6WRZPio4o1EBaACmQUCp0R532u1xEIdfbI4D6PrCu2mCt5NyJhIp i1mXEI2BA9542JRKUBavFJjgp8GJ4+xMdNo5I3yPyEEOfAATcQJLgTenGn+WqFU/JFRlrOxC jJioybNiko1lKeEpJBjF71GKHBT1OzP3MerEmJtdSn0MuQQtvjRTX/FFP694oeZV7bH+7xKz X142hDpD6ikUOkevKHiuBKRGFBZTs79ADYALC7JyZK08ou4WxQWCJKDarYst3l+d2fFmi8Mc SUdM4JhxYFvTFcE17mCRpp12ptAa2XZjPsmIo3uvegoM+rSxCNMIVW/ismcGPRYDZRQETVwY 8A/23v1zUbQLw569a0Ot4NGbq09rbrrMQ7NBo8JZy6DevQxylh8k5H4DBhwYD3jZK63CVvnO 8n9lNMagKW+STctNGpO/x7VO9OX9Q8qqeH6Cd7icDofLZnIERJeDunDiVuNJ8Ca8ZFQ2EzEH 5gCnHB84cMc0aJWNAYODcQSMNw9eqHBQe5gckHCMVUnHy4ZGT4cDdUUoyfmYWz1KR1zwaAge RSEZh0xx6vs2T+1TVgYetahnH2NLDtl9cT/FCJidOffH0b9XxJDedZqOnlF7H5WGEJMJfY8R vQCogV+P1Ht1wVeoWzBPt8uqhzy0FRqPUmBseaskNAWBLSSITA46putGnDanPbGGv1cSCuHo 9cShG+wsT8YgJSLnP9Fuh/h2GO+Rd3ugrW7JgBHDevOYZa1zQ8toebT10srqlVfT17i3pHea d7pvTd9S2Uvcn76/snfR08ST1ieLTy96CRy2PNv8cstrpdfKr7W+WjnU/VzPsZbj5eO9sWuL Vzdv6SZWYiPdK1cSe4v3dT/eQ1xRurV4U/m27q/1PlfSiSBWii/Jrb5ulTYUHq4OIHleJa7M Dw9hljIJ+jotxjLABgoNdntnA0kOv4eRTo+HT+ShAOeN5TLf2u5sbW3HerHhXr5vwNnXNyCY +np7oSo0JlZBk93eOtBHhSdCCGd5nLH8NGIQTywhW6WNid8k8MQ0Xjh+XRm8VgZl5Dy5WuWI 1CpzvsJ1raB1uREYY+1HWk+CU1gvTrwxcGTlmT4VkClTRFImXpmOwg8pux51N5lWdmUmVyhc 13e2D+/zrEowrUwfk1h1AaMtrJWDamL23LnZUQpi+NnRcXh8AWabD5Sggrl53KatFw1fAHAz FWrB+meYOi00+WquVeU3uwWitgocWNhc6odzEf0HtpJNwfsljTph6sFhdWJqIC8cphfyOnLi ieKFdeRIR/MC6Md8Cfs1L3TvIvPmDDqKRISeX/wIvPX1tW1j66RyYxez5LlHVizLtjq2Rw06 o9FTagx57lonRHKJ9TxOmMy2ZG7ilmU9jx32ualQrPJ2wXPpt06wpMhbWg3E3mrb5PLbW4Jy Y8OyKmi4rbujq9xZve0uq9VI0ulel7ivMR/JfxN0Xmemoem0pu766LE/4qOXhzgvGz+P3dRc /Tl+3yra4I6YkeTEoXU8AiWnCB5S0W+mhn7lp2rwV59zYxzO5TQryJWGlYEVwZ3gtszewIvx 58WT+EnBtAFsEN8BxDrDusC6oOJsbAmoroZuTXKFtFWAcnOxq5FSPI2M6mlgIJIGWGYyAqBb ocHIBS5HCium+HTGmU5n0qm6u5FJf4W7gei5QeKm8QNT0pkMcjBT0NilFQZPq28qU1mZkI1L 1xyQtGoC04qOhG7K2TRIIwck/Z84IKmh2ZmZc6kv+yBf4YFA5t0BaqxLXeSH/BduCIogjSt2 j/gKj+NLCFU1h/NcB/ns9D1v/tOGxk7/rS7KYLZLHfzocDkbS4dvdHtpX7z/4EiOb3z0eDDi NQcEHWSnEmC+0yVVNlfX91FW2pJcQ99TimeE/E3gkYGk08Nmfvrs6itewHeMM+6QRheF/gaK 8x+FPGPBPNgRuVOPGwidkXiefpU9yE05ptzfY3Xr2RHPPfQ+9gD9NPuCgyzSZc8Sus+zVr/G sYomjWazPWoiCa2WiWpM6PczZAe5a2C4QO5aJD1ETpI46fGin8iQ40oaAZPhe5i8SMLkRjgC ElpNOI/J2EFMi/2QU2N7tbgsCterCx9gHWgJEuVFVRbw0arl8LWYnOLMq7kpB3F0sjpz794j LwNu9+7DL67v3f/njX0P/Blf/mj1l6+8dv9+IL7y6uLRTdX1H4xdBZ5DNdSBaj/xP+BTiKAa PHlgNXjA/LT5iPkti7bkGsAWWxe7epOrdVdYb7Lu9L4intC/lTiRPOO1Lgovx9ZYiTxWCMsY ASzRhkarFXN7mbzbZXXmXZEebhq8JFvFcD4yhEVBTgAYl5smHpDDSDxEzIpFrLxaRSlEjSb4 KZsXeJvQgiHpk8TdGAkZOiuRiK8T6hRXJtkVlEiZl5aRQCaXk9eTB8lTpJY8SbRCRJJ6g4tE ppWKyEbJi5KfSpWlwwd3OH/hrBdwniYv40UVeuXX18yH4tATv/UTNkfNzqlcW89TjWOKW77A XaupciUK/hU4UImH1zJXKq3IWgwNQ/WuatNlk7rcy7x7hurj24laDgu827Pt8MjIndUn/k/j UL7PzRSGDNWEcbQzOsfwQX9he/s1ha1Xrezsa9j6swZi78e7rnxg/F+qJbevWh1k3Lw9FtO0 3EVsHXZyATI+R/eXdxz40ablq//yIvKxM5Da70Nqh7Cc0kPJ6Xxtmf6MRolZj0I0pecK+NfA IfvLjiPhF4Xn44cyh7PH4qYDwlPZwxxxJbhb2Jclej393BpAlDKtucWAyBgzuWKceAwDuWCI MlKmvNEA0IqQwVgqaKfCITabocSQms2ORf1+RH4AeCrkpKhQCuVCzC6T0WCl8mKIojCUewyB +zARCg79DnWWwqldwxIlC3Dw4QKlqjo0yUEvPOaFhGUBi6jNQtjKQtee3ZqnGCpvbDwBPsbq rmGq3uqbGv10QaZDJe/fZZnVGJ29VKPzQvrWspK1Cql6boNRiaqQ9Uu54wvZjOaig3i/esLN OPlGYzVkvJwVGgITu3esWLz5ypOPf23jkg0Mv2Rp6dbq/1uUbxu66Wli7xePLnUzIb1ZKV7o 3gZmv7+0+bmxx8DgluGewev/QV5Z3XByYGn3VWARwvJJKARtkL4J7K9yJw5tYAiOFWA1canh UuPKxCHiFdsh9gWv4R7vAe/5FLFX820NHuB5gPWEfi8m8tgQwJ1BnMdBKGcBFuhty2FnTKcD pAjgSTwfDDmDwVCQN4qhIJU3yIblBsJwEpfRT59MJc4EEVGyTCkoF9oKQTktBeUoHGE4+CA8 4PMXsCDAgpPBd4IfBM8Gzwd10PbddywVZBoH1eWYxmsGamZuRkHpF0ySSh54WIFSC83Rnnq8 FCBfi44R81BHLTKPX4hq1a2McuhaMPLwaw+taAoJYTbDhDQ4qTfZbV5p+LJkIKkLfvtE0OYM uVqIFS1VL0jd3B2PdVUyAZ7W6fVW+fKnuoZ3MHfi27ZmHWbKgOrPZqEn9Tv49PPYd+VoIwBM mKM69CaNjTW5bOW4VjRFbN8miBzoAMvAGPSLp4FGNmbfw/KkNpogPdPQty+43mMZkz9qN+ET 2HsAlaovBwCcsZY/CP42+KcgcVfwIfj8TgU1wYP6snDAO+F5j1XMfgGyfh6OULhwkD3F4uzt DSdBN9iMls77DHE+CjmeGx2dg/puRskaVWZm1Ve16A8xMxERaqFhprYAnPKkInSTu1bdn8Vr 0Q/Ezvjv2mLaq4fa+/wNXx88srv30pAjw8TaYrodmwZHKN/RpgeuC3qtV9lTfmiif3Lvrd35 UKX44MPy1c+GzVnQ/fidq9vFcOXDLdJl92qJeA5y8Cr4DDdp7sYCQHcC00IANw7Rr2wrPa89 i39hJVZzE9jngIj6y9h6K2EL+oP4XZCR8ABmtQGNliQxvy/AAa/PH2C1Hg3QQ5vk8Wg0xH7s IA50tAlCM97tgUrY4+ZFj5vC+2wET+DnCUBsDWKvkbYJ60kAMBI6H2aHWy6WCqfcH7hxt+K5 8qj7ir/Ic1WiRzY38lTdKAroRnpIcRLnPoeqBHF0rQl6fp1CFuKsmTnFc1DqqzBV1ShcrK1U AHVG9QvG1SJuAq3f+FXYKYK0De5c+rT9qVd8lMmTYIdDG1a2lNItwZceM25/ZJ3m7uqfOuam xnx2R8R5lefeZqE5VbwOXxQP3Lwfq1U6nIb8WgGPybv1ZU8Zd0gNSxpWVba4d7pudb/iehf7 D5dhdXZV6xYDMeBaha1zEUWs4sJDYqKEHzaAktAhLhPHxM9cn7s/K5HO1kqFNhiFeEup7Ga0 Ta4KLcS5tmxTUw0Lp8gKpsMIgqcrTpqusFYTR7dBNFyhKeOEYSOBXD6ucoSGGImWWU+Bll0S Ty+jx+iH6ElaS0PvUDY3xTg5C7Kx4AEHp6JhTik88ih576NOlzqnC8oseyJiIc/J3EGO4Dxt Bo6hGfilxpt/OF+fPw+LUeCVQ+v4cLW6ZTS/7lZ9/iHkCc4qZ6Lo/cLe0QWUrXRcyN6pRgQS GBEUAQNVR6mmA7EN62JNJVfN22uFIw9HAI75ZB0gLmRh63SHNL8YPevIeLH5YpCNliAgTr8a t5jsieHAsuHmpnjaQg0c+ujyrJxeG7QbXcl+fmCVXIzlxEvjHldoy+s3dLqJ8blX7ok47PxW 5o5WIR0Jt/T/pfrph3LDwJNAuo4z2wMb3Tc2p3Kx4v3Vt3dHaKbr3/7pF4OIk9KQkyaUWrkv 5M7vAiDKlCTKZjis0gh+CXFc84uQJuFr9fXhREsY6A1GYLZYSZYkQTAK9ZwLkHzQxDtyjg4H 4YB257u2OIswM1JtU0lJ0XCcIJ1lz7N4kJXZXezD7E9ZLesV+Ykg1qdUQpmdUoewTBgT3hE0 wltEBAkxFkSskC0E1esoBsoTS0BbBC++PLgr+HDwIFSlwXxQRitJ4L6j8cZfK4k7hSVmoYDP UEo/lJJzn6vV85+bVdaLA+p6mWqIDxulY0pAj1HrFhFxLmRXFa8aV5RpGoR4mrPrrXewu50h i2m0KZKUKe+Dzzh/FGMHPWVPlhho7x8af3Lp3yZCR3lJDHDe7mSwsaepKTf4q2nmn/GdTzcZ avGiAfjUU+A62cS6PByudxk4PIn83rjZ0r7WO5y8wrsx+VuvNunKcRV3LzfGbUhu57by16Re iL+RMjmUzFW+rOa1skpCCz6mjBpGUd4MqG/KecZX8CbPAMBi4YnYeylBgICf9HGcx8OacEKj 1WntHi7l9fGmnKnDRJhQrF77dRvqoCCaZTP4yDPBft2bmsA+8k7jD8pGbsIXWxYdi+LRaSI3 lfzIp8RvnR1onkpJPiWjmi0WfHJIyvtk33If4TsJqZomWl5XSVSjEMRsc3OzFBxzo5BA9QVg L1oDoEawGTZXi4Wb0EILaSBw6aR2QXcF0gFvcFAEUVRlyl5iUd7FXvKG1WzAiLI06qi6fv0F Y1hLvuJQUQNEZLWKJeam3Qwg1vW8enWbUdPszkYTJVtg7ZZ/bY51Vjelyagt4mnyZwBfceg0 4Eli75zjx0evybnthkjMxafamgqZNfc9V/20BX9jbhAc/vNVQUYXXfRS9cVvhPEXEd54C0rd bkj/xUAvb7IgqEBiZBJrA+1OzA2iWAQgnL7X8xx42XMo+Y9tr3VQvVAwKWZT6IbQGc/7Ia0h Yk6ujBAaj9eLJ5Opdrm9IouhMO718qLsFEW5PQmNp13qmlj8HmZHEJ53lY1GjJTeK8WzWcGk SXraQxOT4Z+G8fAZCz7T8//Z+xboqI4r27p1u1utL0IW+iHJDZaxAFk/xE+WZYFlGbDAMhZC iFb//337ixCfOIRxGEIwg4lDeAwhRMNy9LAeIUQhPIYhPGJjx8GWw/gBdjD2EBsI8SIemzAe /EH9dp17EYI4sWfWrLfeWwvuqlP71j116pxTp+pWVTetg9LDrEEq6S94slQsH4vyz9U33PdI TX1D0eT6+odN6Q3pT6f/JF2XXjCrOv/hA1K26Mp5eE9e6BS/v0j/zeHKBfH5zR/VT8fFio9I 5pU/Xv+ie4b6Y2Paibv6zU/xg2MTxc/WYvyJ9+KNBaC2+rsjZ/gL9J5x4isQw34MWP1vbeg5 9QMzb1V+1vj2u1zj8oomThpRWDIKm8O8MfVt8+8oSB9VOPWeux6wTx03bcyomdst908vHZNX ZjKVFGSk3VGxM79enztnVm6x/O2ampK/X1O5MDOlfMy4jPzkzMKa7w3uevTO3PI5Wd3zyh64 Rxo/+NG86qKcu8eUmXIzx30+7U8ZM6bwEtGztsEmeS16dpp0R8Pi71dJVXm1k5PzC/LH59+f 38v38YMF+0oPVL8kv6Q7ln+sIH326EWj/aNlXVVlRYW+aGJxQVXBSJ34Q9oTSwtHG8dU6Q1J 9GvXxlzd5PXTXspmSSW/nnhP8YgxB6QjDVOrRjakZtWMGHnnSD6yNG1prpgaN+X25PKW3NW5 e3NlU24lyuTc2bXTZv+vqdIDUx+dap0qTz0g39WQrjtfJVY9VWLVQ7+glovJdVNVT9W/Vskt VauruKmqsqqhSq4SU+v061NrpzpwO8XyCDe01D/HHrh2ScyskvozrPRTrIxOS2llpDuqnn9M lOJSjvp1MXWSvTEGDSxp+Mdz1z9bmTJVHqceXj4ytiC9rC4+9bGqVEPGffdUlpTVK4OvvvXf nqm5s2LGuOx04x1GfZJhxNTZtvJpGdNmjpqSLH+71r15MHvW9uZvtpgyR6Zm3DFpzPjq2Q2P vjJovvo/FlXceU9Dsr7CqE8ZO8dRz1f+oNGg/sYG9mH3yDGWLW38aVb6gcS7DVlja2vSxBCV i4HSDWMmywcSlxomjJk8hb8i/Ya/Ip+WP5UNZfJ98uz09rT2dD/3yMt5t/yDtB+k/4j/g5yu TVzpydk5o9JMybk1aXIqF3+OMBeYpzM5NUV8EZcfT5fOYvMm/tbKQGcs/sAAPDhRJO1HYnKS B3W6S9igZz+UkXHpjsrs9KyMOxk/IOU3JEviDxpmyXem4e5nKakp2ALe1ZCRfIBLs3Oyv0f/ cVYWRWlpqQ2jTTUPpEqp3x0lRvHP0bHXOifW/RGvyyt1YntRd+Eafagjq/9NVaa1WZqak5jE kf+J2V4WP/SjLnfEVH0h8xr9EFeGWIZliP/umiEazRDr6wz6Gu0Q980/SLjo+qe56ue5WTL2 DHJD0V31csMoQdTf1Vp0x5hR4rfq6ScIJ0tj6OTxrt38a5hg7/ZNqyi6e+G1pXzf4NnFdxRO LRonx/KvVWbWNA5+WMSP6w2T6G9LfCC9qBvJxe9+FzSk8alM/BGJfN0Dk9V57GNWMVf8dMWY yWN0Iz97W3eX9OJssUJqT1yU3sCILmLfa7i3prCxkKflSinDPlBLKv2iT9RS16f8QvonJn6y 8GGGl0t/kUIfdBXWTs7MknqypMqsnizx2ZouK79Y/Vht2FcUYvGJc89duzDsi53Dj7Ju+tqB 9Ne/QPDGF39xAO+sv/h1AWmwZ7BJOg+bi9n8hgpx5JOTh41XXlFRXl7OCH1qIgcD2ZhVIskj RqPwcLH0dPEPi39SLBcXiz/ZU13R2fnH6uoHJl07Okmq6Dz19sDISSMnVXwrcyLt9iWJjxk7 7Ntr2mAXKpPG5wevfXPwl6urTHn35mdwwyjv/RPuOjumOXW6/O3P/2awzmEqL86lz9qNj01d IT5rr0++i/76VI12PcUSNy5s2b9J1y+k30qDvIrvk+fIp+RTuh36yXT9i/5fDGMMK25cSd80 9iZPTL6QOiL1Wtq+tH3p/RmeDM+IiZkbRq7Nysn6KOujbMMow6jXc47l/izvk4IRo003X4WW osKid+4suPOE6Q9j3h775l19Jd67N49bdM/H4zPHf3fC+okry6aXvXXvd8r3V8QqY1WW6vpJ Zf+fXA//F12/vH3dvm5ft6/b1+3r9nX7un3dvm5ft6/b1+3r//2rZvTt6/Z1+/q/cYk/UM8Y 3wUakVYzg1TAZFaSeItls+yEj5UwGbiETU3sA52e2AZaS7gu8TToIqIdRM2g49mIwaugI4mW gFaQhApIeAN0OupWkIQKSBAl5sQLbBLxTKK6k6juJKo7mU2FfpNR6y3QWqJ1RM2gU6nWVDYC ek5lmURHEi2CJlNZceJroCVUUk2cjYlG0Cais4g2E+d8wgsItxFuJ9xBdc2g06mt6aThdLT1 NOhIwkVoZTraEjwlRKth0XS0VQQ6i2gzlc8nvIBwO1Ez2qqF/oJmwie10F9gIbOW9K+FzBho I5XPIip0riWda0nnWtK2lqTVkbQ68kYdSasjaXUkrY6k1ZG0OpJWR7rVkbQ69jjRVuhZB5kC LwJdAJlFoJnorwWQKXATtF3AHiY6i+gcoo/ASwsgTeBWogvQgwvYQqLtRBcR7SC6mKgZdBH1 4yLqwQ7CHYTNwE+DjgRl7HH5ffofNuJfgKhMEVxMdwJzliZlaVhmUXZWwzpWxi5rWM/ypBYN G1il5NNwEusekmNklWyPhpPZWmmrhtP5Nl4sxgz9m6w7oGGJjdD9UcOcGfQzNCyzafpSDetY jr5Kw3qWprdp2MDy9IqGk9h9Q3KMKB+h4WT2oH6NhtOlufpfQbKkk9FWRlKNhnWsPCmbsJ7K HRoW5TMJG4R/kjZpGD5JihJOovJDGhbl2wkbqfxDDYvy44STNf+rWPW/ilX/q1j1v4pV/6tY 9b+KVf+rWPW/ilX/q1j1v4pV/wucImw0FmpY2Pg54VSUZ2u2pKK8RrMlDeWZxjka1rFK4wTC GSg3GldqWMdKjR2EM0n+Tg1DvvFJwndQ+XENi/K9hLOH+TB7mA9HEf+ghgX/O4RzRHlymYZR npxGOF/ISe7QMOQk1xIeTfxrNSz4PYSLhrVbNKzdO0nOPg0LOZsJl5CcsxoWco4QniDKUzI0 LMo/IHyvkJNSp2HISSGfG4f53zjM/8ZhdhmH2ZU2jD9tGH/asH5Ju94vzzETq0YEVLEaoFbm Y27kc1mEhZG62ApElih5EHdxYEHtKPcTRzmezGAKLhObjzIv6nexJXTnRu4GdzeoC5yteB6i UhObh3wZcUVQZockE56KJ3akLmrDBR7xLM6CKIswz39Kv1s5a79Uj9ngtcMiP3OCu41sWKLJ M+GNWA5fVQGVQrbgiePJEtKvC2/iL+KvxnWjVbXNGy22sMfZvTe1Ohfcf25h6xBqJBuXgTcM j5vYo2jbQzXF03uRHidpYchzo5bqrzh5WEgtQ0kb8XdRuYk1k5+Fx8MoM8G+6VgZVOMtEWFL cS80FXKWUp+KHvJp/eUhiV3Uc+I+SvaH8LQLl+h5E3NQ3S6t7x7Ce6gZUaPWjQ97EiVfutCK kyT6yYPLqC0n6Be3q94LXifsXUpWuIg3Auqi51E8US0QXnFpbfk1CU5Nlmq9iGnTn1keIW+u oH73o59NFJ2Ooba+SK/wn8n+6l66Id011M9xip8u0tw5FONfbL3a+p/rdd8wHwhLVFu6qL3r o0fIV211oWQZWR6hEfnFlqqett/kVTf1bESjqlUqXoq7KFETads9FLmqHMGpgOOv9tFzpurK qhpTq89tmhsJR7pWRN2mByPxaCRu7/JHwuWmGYpimu/3+rqWmOa7l7jj3W5Xeas/5F5imude ZpofCdnDJv8Sk93UFbe73CF7PGiKeP6yvOuFtbfKmN1lV/zO2jZ3fAn4TJPLq6pMpXP9znhk ScTTNf5GeXU1VUVNqtjy+L1q1bmtQw22CtIYty/zh72mRz0ev9Ntutf0eJc9rLhXQK+4f0kk XGZq8zu7InFTsz3ucoe7TFXTJ1Uviiw1hewrTEuXuE1dPtjlieCJfYkp6o6H/F1dbpfJsQJP 3KaHFjTPwNM43UTjEddSZ5fJHzYt8/mdvmF1kfvDTmWpC1W7IiaXf0lUQQP2sAu1/GBwggvN l5tM1xuPhJUVplL/eJM75BC1bsgKX+f+QpWI3SVsjruXdMVhHTw2rHlUH5J1H2lQ6kcrXe6Q 6J64H626IsvCSsQ+vFEobVdVdcdNsDeCpkCXdkWXdplc7m7hXPD43Er0Fou+9A3hRPSqc3w3 Sr6MO0jcK9kf/wPcquwv431kGG+E5pKlX1ZH7pH/Sd4t/0z+R/mnXyr/wf+QnTfeYDHUc38p f6P0GLi7voIWkWFWfnWd3Zihvqq3V+DJV7Pwd9o7+ks10RXoHtQ16Gbopumqv2JPfsUYkSqH PB38UsktLCLZaZYNfwXvhWkF52fvE/oy7oegx0rCdnXPlvjXvl8mxmBW/+J/MhO7nGwmJRJi DcrYXH6hjjM5xqSZen0z7k03ptfZXSZTAv/YA4nB1rnzZotfH16t7v8YSxOZJKSV0m5Pwk5H D5kGvoFJ/O/43zMZu5dtwN/n3wfezrcD/4DvAP4h/3fgq/wq8Cf8GvAgx56BJ+RRTJJz5Fwm y3lyHnC+nA9cIO8G/rH8Y+A9umNYm7+ie4XJuld1bwGf0XsZ1/v0zzNZ/4IBthlGGQqYbBht WAX8DcMPgHcYK6BspXESk401xnnAjxoXAXcYfwN83Pg68P82fgj8kfEK8L8ZPwX+zHgNeDD5 cSYltyYvZHJye/JFWKrTfMBZEVmh6q9qrukMfZYzSb9S/3XgVXpool+NPa2s/5b+26Ab9FtA t+t/CNqj34mnP9L/d9Bd+l0oeU7/HHCffjfwj/U/Ad6r/ynwftgorMvTbOGw4jHg+cYF0LPN 2Eb6Y+dp/JPxT6TzAtC25DZovhD6S5reKcwmFTCdc0VcYQXeuDvIJvjcjjirVexdYdZE9jGK EBExScPuhe3GoXvR5zeecexvk1lK0B0Ps3qijUTniFc7ayHaRjRAdGMoGAqynUT7iPZr+t1K OZ0PiFxGiwZoZGRiV57J0lkGG4F8JMtidyCuR7EclsvyWD4rYKNZ4V+ox1mqiN9b8ruxJm5l ZowdMSc+wdawDWwz286eZbvZPnaIHWWvshPsDDvHLiPyM6RCqUQqk2qkOVJY6pZWSWuljdIW aYfUK+0Ru2wmSQE1UjLfVfOS5Wp+9xw1H7dLze9Zq+Y1F9V88nE1n7KP6WC6dP8h9f4RAzNI It/EDLL4+4n7adxJjzaTlVKLSb1vadZyj5afUPP5h4hP1/py65nWDxfo1LsF8QVrF2xbsEe9 aytsq2xrbGtX7xZmLyxdWLewRa3fnqblV9V80evEZezY3XGk41THpcV8cd7i8sWNVDrCPMFc b55v9phXmjead5r3m4+Z3zFf7jR0FnSWd85UNbZkCIq8RpVoqVNza46a2zRL7AdVPmepllfC wyL3oSPqyTsO9hp65n0pUyqW6qR5kk3qky7yYt7OLXwDri28h/fyA/w1fk7mcqE8Qa6Up8gN ckCOysfkq7osXYsuoFut26Lbrs/Rr9Fv1B/QP2/IMzgMPnmC4Rnw4zIcMbxmOGE4nVSWZEna a8wy5hmrjY3GsHGNsc/4eXJt8q6U6hRzSjzliZT+lDOphtTM1KZUJbU7dV3q4dSzaSlpdWmO tE1ph9MupRvS69I70lenb0vfnb4//WJGRkapXIkoLUm8JX2E9AnSZ4m3uJR4i375yYfIpTPg xD46mxbnyuJcWpxKizNpcSK9PyFOQMS5rTivFafKSVqdN+g0Wq3zBp1DC14dPR3Or6PzZ3H6 LM6exclzlsqD9sU5qzilFCfO4oRVnACLs2ZxwirOmcUZqzivFeer4qxWnC63k3Y+OlceMdSa OFMWLYrTWnGarEp6gc6RxSmyOKcVJ8ji/LidajdipIvTXnFyLE561ZpfozPexi9ou5080ihm B6rl+yu1fFRLnAeL02BxFixOgiW2H2M+lc6DxWmwOAsWJ8HiHFicAoszYHECLM5/xenvfswe nPwkfMTpJFec40rs54ki8nQRa4PNC5HvR9LzexP5fApSM9Jjg1t5a6L51tIEQ+k29OKIwU/h sU+lq6xN+mTwbemzwbe5hFSAFgyIlV7EygBipZcnI2ZSErv5iATeHuIJ7hy4c+AtVQI7JJ7L xjDOCxMn6T5F9IpUBgn3gldPEvahTjvqtPOcxLO8OPE0OJ9FTcjF/OpN7Af/fvB/SypPNEkV iaVSFfJJSFfZfWhzOrRZAm2mQ95+nplo4lmJHn5HYivPQ16AfDTyooSPm/DsHnYfH59ogq9F fCAuv5I2Bk3v34Lrt+D6LbiWgGsJG4HSp1G/Hdq9CO1ehHYvQrsXwfk0tHmR5yLlI92JZEIa hzQeaWLixSG5f9Y609/k5+s+1g/1zSdInyWa0S9YO0jViYOsmCy6edw8DdlvQbu3NN81SZVI N/zXgVZ8kNOLVnzQ4S2ejiR8ODKxAx7wwYdPi36H/56GN1QfYgTxu3EPP/IJaGc04q9Ja7kJ LX8dLX9da/mr9NpbN/VaTmLnX+05Dg8OwHsDLAWyeyG7F7J7IbsXcnrh6wHw94KrF/y94OxF nZTEP8OD/8xG/af1+ms6ZUHaU5C2C9KeQm8sgcSnUPsp1D4Mi7ah9mFotgsSDkPCYfhyGyQ8 BS2fgoSnoOVTfAN6UeJ3Jd4my/ogrw/y+iCrD7L6EEl9iKI+1OvjY5HGJ/pYKjhPgvMkOE+C 8yQ4T4LzJLhOguskWjgJzpNo4aSYrxPfQC95WBGbJGadhJFoM1Yz+xNVvB5rzBmJ8/yhxBt8 VqKfz4YvH0FqBp6b+AafB/sfQ74Q2nckfscXI1mRfEhBpFDiEA8jX5b4HUvjtYlfQ2I+b2CT +AzWDAl7IOHX/FG08BjyhYn3uAXPQ4nf8xWsgmWjRj+vT3yXN4BzRuIgdOhB+z1o/ynUno/a 30HtAdT+W8xVO/giPBMSPJCokKT3eAQpBrwC67K84fZCugd63APrzvMmSJmFfBFSB7AZLVvQ 49bEC9yB8e2GFh5o4cW9L7GFBxK/gvRdfCnKu2H98sTX+IrEHvTXjMR72IfMQvkjSHOh9WNI PsgN4S2j483QZS5ZvA26jmYpQ1aJ0nkJM/xwHu0OoE4/vDhA7SxDfOvxdADavYen7+Hpe3j6 HkuGHTvgpQF4qR+2DEDOt/k8tPIoWngMZYsS/ejPEejVkYlJmuXNqDEZNbZA30OoZRvywNxE ROuVb6CmDe0JT+xHm/vR5n5o8h4sHWAjqHce0qxR+xC+Yxl8MZIVyYZkR/IhBZEURFMY+TK8 GcUcsQ36fAP6NGOuymfPIQL7SLdvIEomkQ4daM+ste1I/Ia7kLuRPJoufpQFoHcQOAQcQVqC tBT33UjLkVYkfsPGorWtWmuT0FK+1pIHXtgD678Gy3+NFr8Li7+LKD6PVnt4p+gh6osebgO2 IzkQzU6UudCqG/ceJC/1VQ+0+RW02QNteqBJD4+CL460BGk5nq1I9KC3a1GjHk/VqLvCZzHx vhV+d1CkiAh0Y7zoodNWxEU/9boPIzCENyYXYxQ8L2JNIlAtatSjRgPkzyCJYqSKUfoGpG5F v+yB1NGIKREH59F+A7hmwPqHqNeoFHFYhN4qQruXYRH6F34Smv6dJnuA4kpERzPVEqN+ALWo jzGbhlAag/R0+Ok8/CQsGICkfor7IMX+ecwE5+GXNwQn78LzZchFJCWjny+T1y0YaaL29Vph lHcR13lYPpLknscYstLYPk/PllG7HUCqhAHoMDBMh4EhaQpJHIAOqrbGoVpWTWsfxdKApqHw luj/m20aGGbT5SHONPYcxesA5A3Q6KUabLw2ivuHWo9pOsNqWLEYyYresCP3IQU1y8LIhY6p mlXnb7GqX0SD5s1XNE8K7ps5+yk+Fc3/131/g7sDda/bbxvmA2HZME+RhQasoSdhr5tPettJ zwGaVdNvjGXwFdN88ekwLX5NXguQBtdb/x1LuilGVB0PUWsrVO9Q3wzc1C/hob6h6ME82/HF /kOMdKBUPPFpJZzaiGEuTPuLPr05UlSPqRG6WPPQrZwRjK/rPWq41Q/aTJMv1mmQMhIl6vxD Mx0iejLewOKcI1ucirESJj4xHo9LxtuvAuv2Sbj04JoM2VNxJbHprBa71zpcKWw2rlT65kca W8Q60A9m8S0O9nPsBzLZC+wo1iETpXtZtlQhVbBcqVqaxPKkj6SPWIH0b9LHbLT0ifQJK5I+ kz5jxZxxid3J9VzPxvAkns7G8hF8BOI3F2v2CbyQF7KJ/E5uYmW8hJewcj6Oj2MVfDwfzyr5 RD6RVfFyXs6qeQ2fLOZWfj+bzB/ATDOdN/JGVsebeBO7n8/CfFfP5/BH2QO8lbeyh3gbb2dN vAM9OJu7MGIe4z702eM8wKOslS/hS9hi3s2XMzNfy9cyK1/H1zGb2FUzO5OyarKegbfSpG3M yVinB0lBilPii32MdRwBXo60SsNrkB9Evh6pBGmTmnd4ht1vQdqOtJOS5LFBVlhLXUgrUb4L +Wrt/noKD0trtXzDLeXDUqsH+TOML5ylybrByzr3IO1DykM6qOmyT33WMU+rE9Z0gV0dwsaX IDMNZVuBX0V6/Zb8TS3/C6lD2PzOsLRPTfAbX7xD03H1kH5DunbMwv1MSuqzNH7U3OZ6U8kx m13vKIVmh+ucMtbsc72vlJrDrg+VcnOX62OlBuWfo9zh5qAr3Ual1rzanaE0mNeivMm8wZ2t NJufcRco881bwdNu3gEJ5eYwykXd9xWL2ew2gfNZ9zjFZe5zlykB8153NaTtd0+DnEPuerTo cDcqUdA50Od5dwvoy+42pdv8mtusPGE+4XYoT5pPQ+Y681m3DxJOQ4eN5gvusLIZPF3KNvMl 90qlx3zZvVrpNV9FyW6UrEXJoHuD0g9pzyjrOnWQeYDoZtCtymFI8ClHO1PcO5SGzkz3s8qx zhx3nxLoLATPts6x7r3K8c5S4FNUcgacPkgod+9XcjprBCW/vdtZ6z6klHc2uJ9X2vH0ZeAm 92vK2M7d7kGlu7Of6AGihz26IXpUULLug85jnhS0e5zoKaJniL7ryVR6QHNALxL+gOgVTyEs +hQyD6jUwogaqOQM0aOesUrAkkY0i2iepxS02FOu1HQ2u08oF807hLaWEk+NcgU+QS3rSu+8 0M7O+e7TsLGdLLUQT52nOZRmmemZH8rqvALOM5ZZnnY8dRFPgDwwn3CUcDfRJ9xnldrOJ4mu I7rRfQF0s/sSnm4jquIe92V4bBvRXkEt8zwW9CDFmKVV9Kalw+NSXBabJ6A0WDzuq0qORYGX Dqhxa5ngqVU+hSYoJ5+fsVR6GkLMMsXTFDJ0ujxRyIx7upXNluWeJxDJiMlQnuj9UHHnZs+T aPe4iDTLKoEtazzrrkedZqPwc7cYNaESEZ+hCej3S4je056NiMyhsROqFFEammJZ79kMv20S /WjpICu2eLYJizw9GDWXPL3XrVNj1bKd4qeferb3BrbsJP/vov7t8OxWmix7IPPoLVh4Zp/w jBhloToRz6GZnbWefrR+0HMAsb3Zcxh2HREx0LnNcxT4JYqHVz3H4Emb8CT69Djw64Tf9JwK zbK84zkTmmc553kXHn6f/CB6v9vyIXkpS3jJ8jF57wzhzz0XlXIr93ygBKxGwhnCA9ZsMato Ud0j+qLzU9EXneUCWwsEptnmXavJcwXlLs+nKB/nZco2a5nXAFztTcOopCiyThOjwFpPEUUj wtoo4grlGClipgq1Wqe5V4Y6LNu9WfDJZW8eZgbMWiGbmB9CHuscb3FIEf4PxYX/Q8vFDBZa JeaK0BrzVm/J4xmE11tbhP+tbTSmNtPophEnZrbQJjGHhLZYzeT/Par/vRNgY6a3UjlmdQg/ w2r42dpyA6MvBD4qMM2H74qZJ7TG6vNOUUqtYW8dZp5e70x4+6iIZGuXd1Zou2NOYJZS6mgR T2/CbYF5wGbCDlHLsifQqpwx7/C2QludtwPa7vWVocUcXzVaRAxHKymGPQ6fGOmOMMX2UPRG p3QGKHqzRH85ukQ/OlaKPnWsFn42XxZ+dqx1G6N1mHVXwnuY+aMzxewanYWIxYhWZyRhXXSe sC7aipg5TDEjrMZsjxGkzquqpaeEztbsQIcWY2c6XYFXr48753zR1xg16GtnO80Y1AtOi5Cp etK62msL7bKt860OP2Nd6/WE9lg3eJXQPusz3njooHWrd3noiHWHd1XoJeuz9LTPuyb0qnWv d33odet+76bQm9ZD3i3w//Pe7aF3rC97d4bOWV/z7gq9bz3h3RP60Hrauy/0sfWs96DypPWC 90joc+sl70thbr3sfTVstF71vh7OsA5631R6bDrvO+FsW4r3XLjAlul9P6TYcrxvhk22Qu+H 4XG2sd6Pw2W2Uu/n4WrrCR8PT7OV+4zheluNLyPcaKv1ZYfn2Bp8BeEWW5PPFG6zNfvGhc30 Ju12uvC2qrXN901TXLZ2X33YYbP4GsM+m8s3Jxy2BXwt4S7gtvBKW9RnDq+2dfsc4bXWCz5f eIPtCV8YUUFvWPVdZnvS1xWqM/f5VobqnIHA66H3ndHAm7ENzu7AO7FnnE8EzsW2Op8MvB/b 4VwX+DD2rHNj4ONYn3Nz4PPYXue2II/td/YEjbFDzt5gRux55+5gduxlekc3OPuDBcpF54Gg SbmirSLofa3Ow84GMd6dh4GbnEcxxneL+AlViviJvSZGXKjS2hYcF3vNeczdEt3eeSpYFjth vhysVnqdx4PToNWpYD20OhNshFbv0nzSTzIvBufETjs/CLbEzg6fUZ1XxNzlpFhysWAbxggj bBCxrb5/XWkCW1jQDJwl4tyVJ+IcsTc0tzjVt+GRW2cDV7GYjekNftRVcmNmVke6Ouu6Jgwb 9ZilYxfELB275KoMOpTNrilBX+wy3j6Y91x1wbCyzTUz2BW76poVXBkbdM0Lro7rRN/FU0Tf xTNdrcIiV8f1kRszC8/Hc6wOMTqo/MD10RRcq5yxbfStDW+1bfZtCO0BfQY0IEaBbZtva3iH rce3I/ysrdf3bLjPttvXF95r6/ftDe+3HfDtDx+yHfYdUhpsR33Ph5+3HfO9HH7Zdtz3Wvg1 2ynfifAJ2xnf6fBp8wXf2fBp27u+C+Gztou+S+ELtg98l8OXbFd8V8OXbZ+KdZqg4at25hsM D9oNfl1EZ0/zp0RS7Fn+zEimRvNAc+zF/pxQnb3EXxjaJWikUKzlQGlOFjQy1j7BPzZSaq/0 l0bK7VP85ZEae52/JvSqfaa/NlJrn+VviDTY5/mbIk3AzZFme6t/vrJRox3+9sh8u81vibTb PX5XxGJX/IGIS6wHIgF73B+NRDW63N8d6dbwKv8TkSc6M/1PQsIa/7rIk/b1/o2RdfZN/s2R jfYt/m2Rzfbt/p7INvtOf68SsO/y7470iP6K9BLdbd/j74/0anSf/0Ck337QfzhywH7Ef1TZ bX/JfyxyWF1Fk1ZH7a/6j0eO2V/3n4oct7/pP9OWYX/H/y5aP+e/GDllf9//QeSM/UP/lci7 9o/9n0LaxyTt8wCLXHTwgCHygcMIfMWREUiLfOrIDmRFmaMgkBc1OEyB4miaY1ygJJrlKAtM iOY5qgOV0WLHtMCUaAm9IzrEOyJqc2wI2JRCxzO0Gsd+IeoROKoQjhNe7tiqroVolY61UHSV wNE1hNcT3kRrJIvAEdprRLdQ+XYRvdGdInojvYR30QqqtbMh4FFqHDsCirLR2hKIK2Mdz9Ka wSLGiKNPrA3E3iS6Bzp0Rfdp5XsDy7XyXVR+kPYvFoGx5sfaIHpEvLOiLzkcYv5x7Kf5B2uD 6KtibRB9nfCbhDeJFUL0HbFCiJ5zHPIci77jeD6wKnqOyt+n8g8Jf0z4c7yz1ijtjpcD65V+ x2uETwgsdkkxLmI4ZnScFvOS46yYl8SqIzpTxHMsQ+BYNuECwibauRx2XMAKrYbmmc2dUYEd lwR2bKA554qYZ8TbAfpjNRIbJ3CsjHC143JgE1YmSmALViZY8UYrRYTHpjmuBrYrLsdgYCfm ap3AzhTCmYFN4Dke2BKb5swR+zVnYWCXcozmq3qarxoJzyHcQrhN4Ojn4l0fstFKZoLAMTPh YsIOgSNj0ad7sNsS7/dtYg8Y84k1QCzsHCvWMM5SsYYRu8JYl9h/RVc5ywP7lKizBmuDU6gr cC3qnrJmizWD45JYMzguiDU/3iliL4AZMhQXYy20ReDYSoFjq0Xvx9Y6mwIHlWOOlsARrK9o j9B5jFYXzYGXlI0uJdgXL3d5gs8qvbbe4IZwnz0r+Ey80GULbo2PtVmCO+KljvpAXaTW0RiY GZ3gigf3LnjdtTy4P17jWhU8FK91rQk+H29wrQ++HNd2x65NwdfizcLn8fk0b7e7tgRPxC3a 3lYdL+p+9ta96mZ1f+raHjx9yy6V3t2uncGzcZdrV/BCPODaE7wUj7r2BS/Hu+1pwatKj+tg cBD7RJLjOqLo4k/Y1yspkXWi3ahNtBtaf9M+GtGOUYkYjj8pNImvU2faG5rENwodotvVmZBW bpvF7ji+mTx8gfbsZ1Sqzkg0iuvEuyO6nd4dl+kNRbv1+JOul9yOeI8mTcRJnetVJTPeKz4d p+9NsWHfm+L0vSmd3qdfxfT0XalC+q7UGPquVIl+u34nq9D/SP9TNoW+B/UgfQ+qxfiosY21 Gj8y/omZ6TtaVkgvYyXsfsZYI+tkBczB/obVsG/jamWb2HfYAtbD/oEtZL24FrHdbC/rYP/I DqLmS+wks7Oz7DyLsd+zS2wZ+5gl2NclLk1g35LWSxvYXmmLdJL9THpbOsf+xD/gH7HP5FJ5 IkvIDfJDkiy3yAulZFmRI9JIeaX8LWmUvEt+TrpL3iu/K90tX5B/L7XLf5D/IHXIH8j/Li2W r+nKJLeuQne/9D3dg7pG6Vndw7ofSb2GHxl2c73hJ4YDPN3wC8MRnmt4wfA6H204afiQTzR8 ksT4w0lyUiF/NGlMUi33G2uMk/k3jdOM9/O//T/cfX98FWeV9zNz505+EiGkESIkkMZI8+KV XtNrijGSSULD/REpm2LM/RUj3Nx7xWxkY6TI0pjNUqQYMW+gEdksixEr0jYvRRYR2crSFilS RESMiEiRjYgs8maRZTHsOd+ZuZmE1Fbdj39sn885z5nznDnPec5zzvM8M71Mki8n/7v8VIpI ccib+VvaIk44XeTyr2TKjxAcIzhJcEbklB8rP1l+pvxc+cXyofJr5cPltzWhqVq6lqlNI8gl KNCKtHmaSyvVNK1aq9Gm8a+pMGPCHrPHhGxvsbfg11+Z8lx5Ls1piVwiJHm+PF/I8gflDwqb rMn8J+n5vaMq+2SfSJIfkx8TyfKH5XqRIoflsJgkN8of4/9PJUfFZPkT8ifEFPlT8qdI56fl 1WIq3ju+nXz5jJhm+53td2I6jemsOI+RZfLvxKq8orF8V/lA+b6quvLD5UfLT5SfLh8sv1B+ ufxq+Y3yW+Ubq0KaUrWsKq5ll/dqM7R8bY7m0IqrvNoCbaHm1ZZodVpIW6ZR2mtt2hqtQ1tf 3q11aT3aVm27trO8T9ut7dH2a4e0I1Xe0UL36SWul/LuROnTS1VL1ZKqFrqPoGp9VRvdtaaq g0pXVU/V1qr9WkvV9vLuKuqhanfVHv5Vk/IqeTN7TAzzb/CLRQtF5HzxOMWzhhj2UOwOCB9F 77dEDcXuj8SHxBUqi+GjR5VFikcsUXyKTzymPKo8KpYqf6XUig8rS5Wl4iNKQAmIeqVBaRB+ pVFpFAHlE0qzCCqfVTpEWOlUOvntrthGWcJezhd2IbRVBGsJOgk2EGwSpVq7tk7bqHVrvVqf 1q/t0ga0fdpB7bB2VDuhndYGtQvaZe0qtd7QbmkjFUpFqtZbMbkim2BGRX7FnApHRXHF/IoF FQsrvBVLKuoqQhXLKuIVLRVtFWsqOqisr+iq6KnYWnGs4kjF/opDFdsrdlbsrtjDvwCzP23/ Mn6/lzrGW49TKRavUXlIvE7FRRn9S/E+MUSlRGlT2sTDymeUz4j5ygZlg3i/kNI3pfOqlC6K RJIQy2WCZCF9oIjqDIIs0NIHLtmmL7vTdJ1hudx0c3ly053ENdGAjKi8PCuajPacaMbyWdEs q2yiLozmoN28JjnUzGPgdgbWZdZzo7MSfKYZTD73bbaZ4IwWAsz7TLu4ZuC2EuqzRB8P+i+j 9krSVTmBPqtN48G0x4Q3uncicEfnwn62zeSZdrEdgagzYTf7xmyzwmLyuxXMMYwHto11cN1o +GgpXXNt+pCvqa/EPJm+4Lk1/WraU2bUxDflx9wXjZYk5pjlSox6qWED29IcLUPdGq2EPr7X rM2++T5zvrg2bTfHstTQY8pXWsZiHePqqHt5e3Tx8nXRpQk7y8aO5R5bzXq87mTLdaPlmv3E Npn1Ysv1xmggES/WWDTHYcZAd7RxeW80mtBp1LBt/PhZ50Q2Wa/NPDTmlvtqytV54+uEDN/b F21efit6dPlI9ETCXyVvoW58i+3j5Sby+x+omwos14vH+X28L/5Q3Tjumsf9RnWypbboaSrS /fRmNebMzAFrbfrBHMd4O/ujrYn1cFd09fKBaDtos+a5M2OKbdsXXZdoOxjdiPk7HO1OrNdH o73LT0T7Ej4z7+Xr09H+5YPRXeBdiA5A/nJ03/Kr0YPLb0QPj8lzisOIEj0dSY0OjllfqI5M jl6IZEcvR2ZEr0byozfQxvJzorcYmkpj15q02HDEER1pqo7dbqqJi6bauMprYlN9PL2pIZ7Z FIlPa1oRz21aGS9oWhUvYhub1tKaaewrY3xEOYyYGD83ndFbibjfMNpHon1TfF7Tlrgrse5M FLNZE8TaG83V+PVqfLvho6Zt8dKmHXHNjMGmZ+LVTc/Fa5r2xmtNX5k2JNYl69pG15HimDLh /mS5jsyPpUYWxCZHFsayI97YjMiSWL51n4rUxeZEQjFHZFmseIwuYz+LxGPzrftbpCW2ILHn W/beSFtsIeo1MW+kI7Yksj5Wl9iHLRDpioUAPbFlka2xOHjbYy2AnbE2rq17aWR3bE1kT6zD uodH9sfWJ3QaY44cinUlgP1CtkWOxHp4vBjjsdhW89wQORnbDt2m/JnYzsi52O7IxdieyFBs f+Ra7FBkOHYkcjt2rEnETjapsTNN6bFzTZmxi+PXwnv2PnNPGb8Ov1E9Lr7MuZ5oL2qaN0G8 vdFeNH5PonjF/WaemDlvPV8Y+ynkLLmc2DNIp1ljX+HazBv5Deo/tNa+Ub7RvCb2u/HX5v5n nkc4d1xj68S+P/fecSTqN5qP8faOm5fEXmnuq+PXB+vabu7T1trMLXn0/AR/W8+PlrppWmwI cCBez/tx4gxuriWmXoKmF+MNY/LXejY2ci9xLjZsaXo5Hmk6Hl/RdCq+MpHrzD8bX8W5Z97f dD6+tulSvHPCc7fZ/5X4hjFn7HFrk7kOJXQwj/PdaOcnbPsL9m8Kkfxh/Cu14eRhwV8zmfUX fq/xpLiL9xdhvL/4qO2y7VdSD95c9OLNxQ68uTiFNxe/wJuL19WvJs2XNbyPOIv3EYN4H3EB 7yOu0JNkv9g1+tT+4BlR/eDwg7edwqk6052ZzmnOXGeBs8g5z+lyljq1B884q501zlpnvbPh wYvOiHOFc6VzlXOts9O5wbnJucW5zbnD+YzzOede5wHni86Xncedpx485zzrPO+85LzivP7g kPOm88575fcmvzfjwXMoQ1TOoFxD4atzAKYJ+Anc/gT+TdjYZ8rV5O2/FU/Q0+RzVB7G8+V8 8QNxip4gT1P5gPQ96Zgos9XaPiwW8Dsgwf+KpE6ERsfrLBL5o6MbHRtGVo+xmaPrpPGtxAg7 qe4EXkn31FPphI0byMa34xdrQhRSkfjvuhOvSPC3XuZSUYRDvIee2x8UTnqufUiUiBSyif8t zUIqGaKaytuEm8pk4aUyRdSID5Glj4olIgvfMMrG1xFyRBuVd4i1VGaIdiozxXEquTT2H4o8 KUPKELOFpC5UvaNjdQnbdH+jP+pv9re6alwu/2p/u6vIpTr6/ev8Gx27/N3E6/X3OQ675vn7 Hev8uxwD/gH/Pv9BV4Gr1n/Yf9R/wn/a0e0q9Q86ThC+4Oj2D7iH/JcdZf6rdN3qv+G/5djo Hwko1E9jYLKrhrX6+/0HR0tgBulBcZXqhbUkSqteAj2BLn93YKt/IHCIdRG9PbDTP0ISja4a BipFeqEeutELFbJiHWk87L/q30dWtDqa6Y4RVxFZudp/2lUUmhUq9DfTaJoxokb/weAzgWXU 42F/a/C54F7SfZQ1mODY5ehm8LONfTROAtbuOxOa65pHMv10LwP3RuDoD+wmr5FesxfWaALb wBA8QHU7aSWgEZSaEFgYqHOp5N1+x4nAnuCp4Fn0PxDYj/5hg8/L/Y/pmyC0NBTw7/Lf4tHS LDFlAnP4TpZsDKTCtntgIn4gNVAcfNFqvxXQRjYHXw4eD8QDbQkLLTARn3mBjsB6q/UmMD+o YZZ1IDu4D9P+gMMlXAWBI4E9hBmOBU6Sl1sDZxzdgXPVWwIXKW5opgPXHP0cGexHmsPWwLBj V+C2vzsogmow3T0UzHQVOHoDjuA0zxX2ZDA3WBAsCs6jHmkOg65gaUBxCUdfuC28JtwRXh/u CveEt4a3h3eGd4f3hPeHD5kziZlaFmhhCLqqD/gH9Tu4LXwkfAyxY3g04T1jtkfnVI8r0wvh k+EzizK8lzk6wudoZD3hIYoK0hAoDl/z69kyQtF0y9FM42h3NIcOUgQcZou5BHpCR72F3sLg vNAJR1+IMja4insMeDnbAjNCg/720IXQZUd36Grohn8gdMvRXx9xFDoK/adDI9V7KcJ7w4or kzJl0D/oygynOjIoa1vDkx3N4ezwjHC2/0Y4Pzwn7AgXk0bVURieT2vHPFemaxrF5mB4gf9o PWemGl4Y9oaX+G+F68Kh8DJ/NBwP9CCeU/1RV0FQC1YHa4K1gexAPmdgIO4/HKwPNgQjgTnB FcGVpr+CqwKHgmuDnYHiQD6tUCfge2QPRZGRRcEN1c8FNwW3sF95Thz9wW3BHcHa4PlACHAp eCV4PXjTv9F/wQQ9t4N3QnIoObA7lDE+Ul0u9xCDPj+BNQyhrFAO51/IGSrh2qQ5ikJlocqQ O7Q41BiKhppDraHVofbQutBGc15pRb0R6g71claG+kL9jgHHRgbMJsVdaFdoIHgptC/kpti4 RbyDfl5lB8MXw8Ph2w0i3BK6QGv1ZYqE5gaVVqd5DemhQUevq4BWrxO8GruHaO6wFgeUwIKG zNCs8IzAEl79Aj0N0x483ZDbUOA/3VBUfaphXkOue8hbWb3CP+gdDG9t4JW/N3S1obRBa6gO zG+oaahtqPf3Vp/CzvbU/46zTnpnehfeKuP/vTwyS0g1k6mmnbom2zb9kZya1EdmERQSzCVw EpQQlBFUErgJWGYxwVKCAEEjQZSgmaCVYDVBO8E6go0E3QS9BH0E/QS7CAYM2EdwkOAwwVGC EwSnCQYJLhBcJrhKcIPgFsFITWq1QpBKMJkgm2AGQT7BHAIHQTHBfIIFBAsJvMZ4nBZbN1ps IKheQlBnsemwDtUhgmUEcYIWgjaCNYbsiGFPx+j9sMOE9QRdBD0EWwm2E+zUx1S9m2CPbkv1 foJDBEd0/1Qf022tPmnY7NT9Xn2G4JwxB1ELbByF6osEQwTXCIYJbuv+5nqRIFCNPsg/i9J1 X2JuTxh623Wfsr8WZRr1NIJcggKCIoJ5BC49PhaV6nph42G9XqTpsbGomqCGoNa4rjf8f2u0 XtRgxMpqfT65Rr/EWxTRY2jRCqOuNcaYr9eLVhpjWzBaL1pFsJagk2ADwSZjDFuMGNhn2HrU sHWbxXbTD+PrSiPWK/XYXLSD4BmC5wj2EhzQr+E/ittFLxK8bOTIZQOWGnFsjvs4wSl9/had NerzFj/w+C8RXCG4boz3plFvM+o7eu2W9fzi2Dfn1p1s4Y2vTZkMgiwCymc353yOHv/uQqOm +XWTb9yU/+4yvWafu8kPbrd+DTkap3vpBDWtDe5G/ZrjxhojZo084j6iRt1s1K1GvdqQozx0 k0/c60b9jNgfGVuzvajLDJ+uNK6NnOFcTYz7TWprrHFt+unNatO/1prjzUvz5aO58tHc+DJ0 e3xGP16KGTfPZbfhU5orN62XbrrXbayXbgaKX/dBPefc5EM36XWfMPxDselmv/B80drpprhz XzXizm2JR7p203rqNvLQbfjOo+hz6knV1wUPxaGX4tr7nN6nx1hrORfZj1x76NpDvvHQ2utx jOahh9ZgD43dS/nhpfzwLNDH6KW88FLseyn2vRT3Xop5L8W5l+LcS3Huvan7AGvm9glykcbg yxk7575Zen8+ilvfXL0PH8WBr2T0Ph/VvsrR/PO5dZ/6WN/ScevXJt1fPopfD63Lvsax/WHN tKxXqMfFCnxEvvFFdf/x2uFr1ufQR7HtWz3qK1+7bkvCBrMvmnsPrfeehTVj9ioP7Wce2m94 3/RQ/nho7j20R3ni+nrkoX3KQ/uUh/YpT4dxz3o9Jz1d+vrl6dGB84j3DM9WI04M8Gw38nej bjP7zEN7l2e3YdsNne+hPcyzX/cT19iTCTy0l3loH/PQHuY5o+8pGAvDRaMe0n3E65mH9isP 7Vce2qe8FNteVd/vvOm6j7yZBkwz/Evz48014pb68NLe5KU1xjtPHwuvrV7eo1pH7/HSXuWl vclbrY+Dc4zPLLyveWmf8tL+4q03ct9YC3EWmqguNNbYufo8vGlNc+tt0Gueg4nWQm9Ez13s Tda9Z6Qmsfdw7V0x9hq1sSZ6ab3zrrLk+vja3IeW6v61XqMO6HN7Tz1u376n5jhfa9SdRt1g zE+X7mfkTfMb5A/V3g01Y/Y/nEMstXeTUW+x8CnPvNtG8+2eenxeWmrYa+6j3Xr8cc3nyHv2 zD79XJmozbV93PkjUdOceHcY59H5esxwvPhO63mJmCB/+ww7OY84Bn1kj49s8PUaMdZszM06 fbw+6t/Xr+vzUV8+rvfp+yvOxeQ730HLuXiBnms+ijEfxZXvhJ4fbAfvsb5BPfcQ0wcNfROc u03dZh6zj3yXjfXrqg68Fvlu6HysQzTvvlvGenVOl+Ec5t/I4Eth4n/HE5WIihY8UfF3l8XM eiHNPCuyZi6lEqDSSCVKpZlKK5XVVNqprKOykUo3lV4qfVT6Z56euYvKAJV9VA7OHJx5mMrR mUf5i2H2v7evoz7soko8Qj5bJDzCJnziUaGKvyLPpJEPg2KqkKSIdAzvPG+Ih4XIKxNi9nWq Kw1wEywmWGrQAYJGgihBM0GrUa+2XLcTrCPYaEA3QS9BH0E/wS6Dz9cDBPsIDhIcpr7vCJGf PK6W9fqNIL+QYO4oQG+fYS/1m091fqUBGeLh3IuzJ+cO5V7LHc69nSdyh/PUvPS8zLxpebl5 BVRy84ry5uW2cMlz5ZXmaXnVeTVE1+bV5zXkRfJWzC6ePWe2g4AK6RgGNR/YO3vJ7LrZdaRz Vd7KvLWz18xum90yO87fzL7396L4wp6Cb+vdh2/oZeMbetPx9bwZ+G7eTPxSdBZ+KfpufCvv QXwlrxjfx3sI38dz4ct4JX+RPiRJlZYgWvaIB4TILSXQDKgmqCGoNWgTNAvUG3XDOL4F3j6f 6ogQOTMMXeNkwdf0vrIvUL2CYKUhW3uPvgdmnpp5dub5mZdmXpl53Sg3Z94xqCsJ6jpRN3Pl 3OSZ13MzcHWd6LO5Wbk5uVkJGRTOX/zWV+DriPp3Ee34rW8qfus7Cd9FnIZvIc7AVxBn4vuH s/Cdw3x84bAQXzWc8z+qSxLPib2j///ivhXCV3q29NLMjtJLXN+3QscouaN06XGi6YrKFcaQ xxVar1O5ZJSzuqRF46g+UIYmix6j1x3gnzV7ntnB78nkLfzNRXm7/B2K2u/KL4lc+RX5srjf 9rzteVGR/J7k94jK5FeST9Aaxl9unEaQaXxVcWbifoXup1VF3ikfEHb5IOnKwT0zSCIb2PBH VpaQsvC9Pvkf8OnP9xB2idJRiak3xJSpt6aOZKVmKQSTqRRnFU+9kZWdNSMrP2sOigMaeqnn FPlr8teo52flZ4nzvPy8kOU98h5hk79NVig0lqMiCaNIIYteFanJ3ye73kZZtF46il1giZhC va4RYv45gotCvOOyDvOHLHCNYNhyfXtUjkB6vxC+qduobJm65R2333F7qouKQeN6i16stLWM l3vDspLKON4McvCEctYyQX8T9T2RDW9i18o/KDPejnGFf3WLb7sKfJlVUtvVvxOy+vfqOqGq G9QNIlndqH5epKhfUL8g0tTN6maRrvaqXxKT1G3qP9A8vtXYlaTd0lXMdxudW8SUjW8NHs4m oNXu4XyCOTrkrNN5XJsw/eYoPOxALT3sFb4poSnrCTqmdEy/THV+gs7HdYd5PX2dQVsgaw3J dFjl9Hp65ej1dDeBk65CqBNA+CrjkpOj+ljOCuP7G9uXxUaiS86Mk020We+n/o6N2lNyjmTa iGvCOd12gtD0vikhkg1N2Uk0XVNbaHq/XiMmPi9vpjl9Wn6aMvxL8pdEqvqE+gRFQKfaSRHw OfVzFAGb1B6RoT6tPi2m4uu7WfjW7tv/qPWsjmAxQTNWtFz8G4R6/D/3UmOVw99OEavxf8Yl sdAi5xQR/qpmQo5OfPKXKYplWn3QP3rLRW/8t0WSEd0C0a0gulVEdxKiOwXRnYroTqPo3iYm QROPQWAMdozhneibvyvLlut958HGVbBaotOtyZNFwLDcKqdbLYlqg/enWPZmY53YbomeEnR/ 70Tfs8BbY9h9wMI7avjbKrfXsDtu8P6cOLmDOJnYdhU6BHRI0CFDhw06kunu/xL8d3vs9/YO /WnJd0h/xh+YvU1ij2X2ZoO3V/RZok7nRQ0/WHkbDT+YvD/fC29lHH+OnybyAn8Z9Th2ff77 aSKdng/S7gB86UXpWnp1eg0glzDXNem1adeIKiJKb6+n0pBeS1QDlXrI1KRHgFdQaTBKEcpY jaY+vYU1WfVodKVBughY75k08VjUJ9Unacxb1C005i+rXybeW96DaNYPYMx48kyj/SUtWfjS 1lPpSushvDVtO+GetJ0Eu8HZk7Y/7RDhPXTVk6iPUMsxlK245nKGuGfQwmW3ReOovj3QpWsy 9ZxLu5g2lHaNdK2n65MAxlQ4y9Wn1K4/dYSphQBfWmbatLTctALCRWnz0lxUSgk04mWmVafV ELeaWmvT6tMaCCJpK4ifmbYSpQjyuZC1lrEaTX3VdJ1JdD30uEAXkZRG1ytJ7yrirEpbC9yZ tgEjXK9u/SP2DM7UM3TfbiMD8/nbX5JTKhGH6bp3DHeO5CA5SXSM4eZKBYKiR6wYw82SckQ7 XS8dw02VJmO9WzCGS6Enaum6yMKVxU1RZlkZ8i1je/MMz5R3yF8hia/K/FXVr8tfp7Pzbnk3 3TkgD5Bv9sv7RRL55rsiWT5CHkqRX5NPijT5lPxDMUn+kfwj8Tb5rHyWnn8H5UExRb4gXyCd r8uv02pzNPkorTav0un7Pjp9f59ig0/vXwT+PPCX7qG/aKG7LXSPhd5s0DR2qVaqpzPeXGPs 94Pn5edkadoYXqXkJp4yhlcqaXR1fQyvWJpPV+fG8OZKTuxMVl6BVISdycqbIbHvt4/h8exK tHZbefx333jXtvIUKZWulll54o4kW3YLnTcsblt2C513Vdyw7BY675K4YomJ+xHnPP8Ca7eE tVvG2m2jtbubdv8eWsGTxs+Euumemei28P8v6PUWutMyW1+00J+/h95skdlsuXezRedmS186 bZFPRAOPNx/P89n4aj+PuGBUWtWt3wLM+2+qsIvpIjXBHbN22WnuM2YI36T4pLj9OONJa+yX 1FnqLPveSXE1Z1KHOota9tJV26QOgvUEbSTVNqmLWnpQ1uC+DipdRonrxarR1MfaoGO9Rc8a tK2f1GO/rhfibZ20fdLOSdvF6Bnsra7OF6VsjJB/tynSKRqVcwZc1CG9m4DWsPQ+8kA1Qfoo KIcIjtD+XJdepxxgnB5XTtkz7BnKjvQ6e3J6iz2DWnbQ1bL0FoI2gmUktSx9DbV0oMRxXwuV NUap04tVo6mPtUFHm0VPHG1t6R3Keb0Qb316V3oPfifzp5yx3+oTZIZUA++tpKgRtsME0VFI p5hJTzYgQwfwKffSaR9Mn2vUToISgy4jqDTonFEoohko6hO+1Gupw7bFqcOES+TrhPtsJWnV tqit0NaXOpxWY1tq60tTmZNWS1Bva7X1k0w/CkmmHSDJQuO6n7RdG6txVB9dky4qUYueEuLS NdGttC9HmEc7bgPtog3/A6fOP8nrqbP0UwWtIICUSwRXdJC7dEB7HdXk/dRmglYDVhu1yWsn oFlJdep6H6Dn9tQS4UtZlbJWGkxZS/iwtDplrTxHOpxySrohDchziHtWukD1JuaknCe4JI3I DnkOfzVTdkDysDRAsg69kLZVYzWO6qNr0kXXN0jPHV0Pta3la9I1knIl5TrzUp4j6iaN8S/m dfxljduWEwS/90seKfv9IMozI+lc/xG7CT+3SZhHXoeP3i1JrMv8H80yngr1c9Ih4L18RiI5 AbyMZUZeJP4WyOu7OvZsqRb4MDj67oc92tjl9f1V3431/Ry78N0B4AZI4txgizDmyCFaBn8d 8BnglWjtQ+sscDYBDzNWvOAfAx4CZz1at+KuS8D4yzR0OoKGu6eZz1gaBl0Huh94LmObDHol WvuAD4KzH63V4LQDPwPcA34NcAvwEHAnMPpSJjMWufZDvP8B71X4GXsLjUCyLUnivz3UnZTN tCoxtl8kfETH6u+AZ7EMtyoh8J9gjl0Gv4M58i+U9xH+GvAv7LuYtj1HrVvA6WdsewH0d3RJ ey0w7cq2Z1iPOGovJZ0fU+hMbdsnX6NY+YK9kujXbC1E/yPTSoH944SPKJ34O0cUIfYsZYix ncZiXwZ8lPnq/2HatoCx8pidTsn2A+AsZ5y0krGaa6d1xi6UfYQ/y/0qA0wri+30lGB/P7R9 g/slecL2HwJ/Gpb8GLa9ZAsR3kZnYfI/xYikrOW/32RbzbTte2yJkmMr5hHZKA+kCzwW6UeM bf/EWP64vYtHbfOwn4FP2ChTbAcg8y7myN/SJcH5PGP7ZNB+4E7gFMZ344jAF+6eIPlv3P0t 4U8iAl9nWvwWtJ9bpd+DfgSST+iSoAXT0rPQsw10D/C2kQBp2A9+IzRsA8bziFQE/fy1CUlC 3snTBFs+hDc677/rJ7pyhO1Uwam/SydBuQVv0K4zVjYytvFfSaaYF18l/LkRflv1A+h/nN/f ixG0vs5YamQ9tmxw9Ddx9fw2THoI8i/rK4PM71eycPbMBZ4D7OSzoNwuvc5eoqcfyfY2Whsl 2yNMy58E/ijwQfDTmZaeBGeD/E3OWRvjT+PeFvB/J/8/YJaXuJXoVwn/DLTP0L+Pvc0abC8z ll/S+5K2sM0S/60UwVg6QmsMceRHeGXg76JIR+QHeP1R6NmDnjb430KNSJ/ildBGo5Aq5Vfo 3gvSj6FBx78E7oM2khH/xXypi/mk4Spaz7I/GdP+dYw5ch77VqelF+iuuxKP/SMyZYT0A+km NHwNMv/Ia5r8U0h+nSSnyy9zRvDfZbN1cv7an1Jk5FcnMqsTmdVGnAJkx8ch+ZJMI7U9APoB G43O9k78ZbfXwPk70IWI+Y8wVu5DLnQh5r+mx7x9L+GLdn5v1sxrGuEBrCfspVXKUqx1Os5B qwNY5ziwHjLdbOsEXg3+Nn4mU1RIMj6q8LuRDqUEHJ1WIamBw3yRxH+hfDHwRuCj9EzBeCN5 LF99jOhTdn7uuM4cwvw3mm7br0PmMvCPGau1vPfh3uvqD3l/VO8HPwY9vDOfs2+H/LfA3wrO v0J+BJxNwCHIcC+HGN8ZwQ6408CUQXfXAu/kDCKcBewEXwDrHHrSvtM/QvvI3VbOypE7jO/G gTVgL/BSyHhHdhAuuEvevjuZs55kGBfg3vOMaUfjqDuObI0C7zfOAExfAO7HSnILOBkY70/k duBKyOAtiVwI2g3sgh48T5M1vPPivY08DxhPibTCML/T4OfihDAHp4g5uFfHuThFzMGZgfER +KQVGHs9jYHw759Bj3haH+mE5GTG5AXSMLKbMckwpxd4CBFbwjsvncsKOXqBTzCmiNKjtx5R p9OLEWN4nwDOFkT7UT1y1JWI2zuQaeBIUBW08l6/Hfg6xwNlSgd634582Qv5bZDcgkzR0Lse 8xryArHNWUY4glZ+Ol9muwHODWQBP2936BzQQs7EWDIxrkzYvI3PIRzPtjLgfcCdwEuAI4zl QtDFwF3AqxkrDtDHQOdAchCcWcDngXvRug20DJk+ZS0kb7Nm0M+ArgPdxli6wBxpGPyTjG0t +l16K+hM3tPlg6DnM7ZF0DrCWPEm0clZKWFs60x6iO0EpwD4IqyazHzCzMkB9kJyCHgH7l3C tHwQ+CTwBubLhbg3B1gDjuOu85C5hLNWH2NbNbBsD7Me8E8C1wHvAT7IrTTq5zHq50Evg4Yw fMUasiF5CZx20NeAXwanUS3geYQfpqsL4Hk+E05mvvIr+P8RtHay/bRn5WFm2bdlsDkTvRSD roTmHt029RLPNfi/gkwX6J+jtTKpEL5lD6yFB8rAbwOeAZypZhB+FvfO0r0BH1ay5epctlNJ se9GdPFJcrL6HcIN0OnALOxjjryB5WleHkLMsJ590NMDD7SpkzA62IOxy/afwJNswwZdA+79 MI9dyQFnEDojxjwm886IUezGXY8gAo/DS0/hHJ4OP9dBvwdn7P8E/i3wM2hNwZlcqJhxzk3b doxxFu6aCslfAdexJbYe8IugvxWSU/heJR38IdZJs4McAWcPS8rfZr50C60tmOUytJ6GhjTY 8AXo/Ch6eRw97oaFGiQjjKU+NZ/wf9rfjtlhmUrI/Awyn4GGd/F5WP7/yN9URE4OcCWwAjwN uAv2/BjydnDaGEvDwM+CMwV4HjhLQf8E8m7QzQo9p8p+0BXAX8FIf27/KOEv4q7PQgZzISfD 2k7WYHsK8uvQ+k8YdadCZ1TbJ0DPw+i+hNbfg5ah7TfAW3CvhNZO4JfQ7yb2gPQq+0euh8wa tJaDbofm5Tpt/y7hqWjNxLq0BRbuAl6h0rOGPAeS0/VRc2zIq1leGrF/g+i54L+HObbZ8Mkq vtf+txzJ9hbgzYxtn1OO0/zez7Sigt4E/t8ArwReZ2QBjzSqzw4ifxsiPMIRTjTnVwuyYB+y oBWtMvLrPPLrmr4KIXfqsJK04K4y5MVuXYP6U2Q96+lk2jYLnJPIx9XItUre72w70O9So1/u 5TR62YN7VxvZzXSRLqOvqOp+XgNB9xh0MuSTkd3sgZ3g9OLeGzqff0dGVjH+CjJ6BUuSPWxb H8a7FDhNX/cwa99FXtzEPCLeUuZwa/Js1qA+yjhpiGXUzyHXPs04GRmdtAL8bJ5NO0ZtW8X2 KPdB/zV4wwdtF/mEkHTEzn/juI6x8ig83w8PP4T8LcBdt+AxP1p/Avxt8J9lLL2AWQiA34ux LNfXYawSyYjPYvT7AnK5HHgWZ73yOLx0C/PbjSwIAX8cd30Dmr3YTyer78I6/C7sGlnQwPST HGnyQvjtQ7h3k7KZ6I/xM5HyAbUK2cqx9xT8qUCyimmx3dbF48LfVs5irOaD3gK8DLgD/Azg lXiKX8JY8QJfZJz0MuizwNtw1y7I7wd2M07OBu1C63XgVdA2xOc322sY0Q7QnYyVtaCHmE+7 ME4awIO49xxkcoBVSBYzprjleXQwbcdzjb2U9z77MsbqSmAV+GeMk+ph82+ZVt7LmFZ7lv8F ZPaD/le9lU+YZNUAWwtcrDzN+whjZTlaHcCPA/vxBmMnLNyBNyfb8RZlk3KLvCFjFH2w8CfY nT9p47dS/wYbnmAN6kfQ7/egTeInHfUTaP0Nc8h7FJP258F5J+zEPNp+Ds33g7MLrQHkiw3j nQP+u4E94DQhg47x2m6/D/acxl3D6LdG+S/q9zu6B5B9t+083lYehXIQkkkKa8CKaj+H3tex jK1I+SzpfxZ94fSuvh96Cu2DhJ/nk4Z6Fpyz3K9qs/ObojLWbO+z879cfg3vmvDOSnkN76Ne YZmkPt6d7dsUegZUHSypbgFOhm3/ApxsKyPOO5m2P8p92c8wnXSM703SmFY/xH3J57GGTwbn UTvP0fPY0Tq4Nelp8DdDZ9z2OR4FbHiRJe0DPGv2n8PCKlj+HbYzaSfGdQn+PMD3yq/YywmP sE/sX4Q2L3aT56H/n2FnL+tUH4adH0P8TIc/PZjZ7/GIbFcYK2WIljK2x3YI/F+C/wO+S/00 dp9/AeciWvuAW8HZCJzNWG5nPWoZ5H+HWHWzTuVntoOE96GXGGP5Gwq/t6m14X0st9oesFdw 7mDuFsAPk3DXPNZsP2Q7wvOFvtaxT2yfwV2/RmysAH0W2jYBvxtj2W+jddKeAj1VWNma2Nu0 NroI1yC747BqE2RKcG8ROP8BG4RygTg/hf7fYETLYWc5Y9tL3Ko8iruGYOdmPgMoW1le/mfl GPFHMN4bbIm6iP1Jz1Z0rxrBSE9D5zrMbDtm8GHbr4kvISPa0NqK1g8heu9HbKwzbCacNIi8 e1VfbZAXDciRLODvI3K8WH/Wgl6rn/lx18uQOYfc3AYNxaD/Te3ndcO+EKdEztMD0PBZyDyH teIXkPykupzoemguxvmkgvcC5TH2fxpWyJQ9LJn0a8Yp5VjhH0ccfpBxagHW8wD4KjBWSPs3 of+vsTa+aKzJpD8Na36KjzlJUeAfQVsdsjIGSx7AmvYkz7Utgpj5a9j8CmRa8FTyK347pDSg l8M40T2JPMXpUX4fn8HkRuMEy2vRZY4W+79jRvz8FkjNZazM5JMk7VBMP45T60OQSWEPUIa6 EcM/J5m/0XcfxEYfTm7HEXUfQ3T9B2NpGG+JM4E3ANcBF+L98AjeAN8GPRf8RuAaxjYZdJ8u j/c/ZyC5Cfi/q/vuuKqR7v3c3ORSRZqgCEixIDWXoqBiQ6qACIgNRTqoFBERLKtiL2BXREXA hoq9i2Vta8MCIrh2ERs2VFwVFX6ZJ/Guu+++7Y/3u5/fh49PTs6cOTPzzMzJJJkbTwFTgLOA ucAN8EnBfoeA0OQTbFoDTU/47AP74UAfPDfOhGU5UrtA30kohaTS8/AsOkbUkCeKvpCFJ+HK kKcSS+k6aGZAU0ksJdbAevKMi89biBYReRH0i1B6OfLuRa610DSQVCofZfWBfU/gQtjsIDIV BW9dRG8EN6CNjUh9gqdqV6CJRSvCkHcSaihw3gaay8Cz0PQCJkNTBPkQsDk0y4F28MaAsa2Q H8OmJeSZ0N+BxgwyekECzmnINMaGJAH2+tA0oZ5l0Pgh1RCyHnkXQG0DJ/GwAcPUPtisg804 eOgH1IO+NzAQ2A0YAIyAB7zpkLgKvQ9EHSTCu4w4+LeEJVokeQK9AeSBgj3k8agVeo26ADwM LBUQNuXCqAMeR16htgeFugl+IA8BdofPYZBXCOMBiLnD9zhJ9UYuZ2jAhmQJUOAkAxiMUlwg NxfmGnLZET4lMqFF0OPZrESw7C+8zRHYEEYObGqJzCCXdDlkFu9ohHpK0Qu3kIoW0Z4o3QKp vwHnA+fBZwLGqhlG6VjIt4EMxjMHuRMwF/azgJNg3wT9DvLcWDIc+AAaDeQdBE1PYCNyWQNv A09hNpnCvoM4R8gsWwGMQqohUnXEmUX8zIelhzi/KjArBT3pCwu0Vxupn4HWwFrY+AA/w3IB fDrBwwDgRlhGwn9fyHHQr0CuYHhuj1r5w0MdLBvgxwr2lbB/AvtOwLbor2Rir5RDZNkHgsw3 gizmiPQD2CghKItC6k3En0zoh6OU8ygds5iqFPWkDonAfdDcBeJdoWQrcAvyXkLdhoPVONjQ yNUEb+sxNkygr2/COzKCfF8jjkG2Jm8PeQ8Eh8LzbMEP5M6oLeaR5LQQ4VHbPkIkh2Un4CLi gWYgT4bNL+TKS98nb2SYEUp5PB4myBYA1wObAwcDSwnKJhOUekFTgVx2BJWikNoS+uPQf4J8 DHIhMAQae1hOh3wBebMgvwLChnmEUk4CR0MTDHkMELkYK8jFBGlbYHdonkIOh7dEaLYD9wLP Ay8BXWEp2EdCcwY4D3n7Qp4BnAXsAP0QlP4rNPXAt8D5QLSdFmrlBDwKrEPqz8A7wK9ouwd8 PgE6Q/8c/rdBMwg24IHlkJqL1I/Ad9AMBy4hKKmCHpZ0LGQhFW1hd0O+Bf1NyOCHaQ0EP6zQ XqQycZBroYd/RhOe0V7mKlLzgMqwOQWZgU0MbNAvsnWQaaAfLME2A0vpbCB6X3oCqAc8BD9o qfQB7OdAswUeZkK/CPgNqbqQwTnbCZYR0LwBNsDGBfI51CoDmk1g2BPyHuRVBQZC0xOyA3Ld gLwY+s2QgyC3gIxWMAOBarDPB36GJgVyKGq1DPbCiPKFbApUgqXADEpnfVA39CaLsSprBRl9 yvSGvAryWViCW9lc6MvhPwAagVvMQaVspIIZ5gPqg1JkmE0seo2dCo0wNtALzD1YIkpIE4C9 gBgh7E7IqA/zBTJaxGyEjBpKHsMSDEsvA18DD8BzF9gj8kjBLeMOVEGq0INC5NGBJhpyV9gI NcHIp9sDZdDLoS8BJqN0wV6YZZh30tPAtUDwJh0FS6F0a3jDOJdhTMowC2QYaQzKYtoC9yFv DWSMH0YDGjBGYwZJhTmL8SndADQH/gQbzHepEFswtmnET+l7oBbwN4KqWwmqoAeVVhNUvo5a YXYz45EKVpUw0mSIiixmCmMMP9VAoeYWQMQZxgh69JQULCmjj5QQ95QEm9tARDlWaAsiG42R TyN+Mi+BaUDUnxFiOK4p0uXI+wvwGlCIIbiCMMJMFOqAUc2uhCyFf1yDpI3QowdpXKGYfkDh eoHRy0yCjAhJwz8VRa53VBh2IFBEw1+VLXgMxTvoFcL7ZWAxecPeiHffjT8Dk4FfYRmEaysl 2lhgx50FLAlmE5RMgqWwk9wD2E30c54iO3WIxh6oKuyjw1uGQWR3GY+9gUfIdZDcs7MhwHME 6a24i88iyIwlKIOGoZDqglQjaB6RfRT89ZTgOYJKRoIHIjNjoRH8YPcFcw+pz4HL4Rk+GQkw D/ouqMkSlHIbendoFgL7QnMIeV1hA1n6G1LXQ68BzXjIyCv9RFApBjZxQD+kKsPbMOBJlG6G 1AvAJOjXAvWAQbBZAZ9zoTkGuQOwDTSxkE8APwCvAjcjb3vYjAI2RymRwE3QoBfo+7DPBlZC g1bTDGw6Qv8CyAJ9gMlIbQnZGK1TB4YCVZE6EalgnkVPsagbAxvGAAi99FfIPkLvk76TZhGU KROkXaAxAu6BvRbsbQmqdiF65RoiK6N/ZcVITYHmCfoCvSnDWFKCHyaIoCp6X2kZ7DEamXfw b4raekDzGNgfHgQGoKEHQT4Ly1zIL6EHh0wJ5DLgG7JSlUYAr2Pv3AGsfldhBTuFIAMNrY5U d6R2JMgKKFjWIvUDsAC5YE83A26F3gOl5MHDU+j7Q7MaOBCaM8jrDRvINI3UndAbQD8dcn9x jU3qkAKbVOBgpOoiNR54GaXbIvUGcCL0W4BmwDDYFML/cmguQHYAWkEzFvIlyBLIt4F7kdce +vHA1iglCbgHGjBMvYB9LrAaGrSa0oSNE/QfgVrAEOAkpLaFbInWtQTGAfWQOhupYF6KfpGi bjRs+Ls5gtBLHkMWPB8HGkHThaAy+khWB0QPMoeQ+hM078A2+ovBSGDzkYqRQzfCmw1KD4Tm LXAY7IUWQcPf8xK5DJabIH+CHpzQ5yDfReoBROzX2Ad1AHeRlsJeKdw/Yo+0FNcLFjuppN2h 9yX3gExbaCYg12748YcmR7AEOkLfBbukqnHPuwf3jxQ83BR2c+E+rha7toYjl5ewkwr22uIO bWNevgHNL40z0MvCc7YZZC2KXaOFsHwHn9qwH42yGhrJXr4n8NkAfALNPrKrnL5FZP4e82fc 3fOyJAW7zZ8gtYigNJB4Y7Ffjp6HPd7YdSbD/nPGQNiZhrq9E/atgXMzPF2UI/UtWMJzJOlq 1LMNLMcL11P0yzVwckaoP+GExf2vtER45omy2pL985J62B9FD+KZpBTP1ug0MS+pSRbqUIt2 TUJb0siTBL6lPEpNIJsSZEaS/fb8nCJ89hafapKaqzcewOgi+Bp38Y+JLKkkKKWxX/dl00vC P+FN6gX2KgkyP5Hdg3zvCEwewLNQkqsE7S2Ht3rUKg/POhrwlOMo+isYddiA1GuoZ3ukDgM/ c0iJVLr4jCgZz4WS8RyGtLcU7e0ErETpxyHXw14bbddDj19Dbccgbz8wNgXe1qDtM9DqmcBw 6DHmJcPBQBLqNg8YgRFyTNh5iLIWoZQJqE+jsDoSnzJhPKPvilDKM/RgjlgiSb2GXk4V9i3D 8lbTb5gvRF6M/sVeaAajUWqJXMNQeilqWAssRek1iCFYlTFoF4vfO0jAsFTYFXkRsp44E4Xo sZhfdWPuK93HONcAmgl1Q4mDCCopC5EB/SJDuW+gwe84GFvIwi8vVjQux3OwUPSd0GovjEny 1OsgajWJzGUqE5rJwnM8sntcakL2k9OG8P+AdiHsCb+nEJ6iN7XFKCJ1WAKbHWjRAWAg+ncf LCMg1wF1hSjEr1jJ98uYyIyU0ZRBbEr0KKptXHRECsWNDk9NpLqTLy/zq+MmHr5Lkh9kGl8n +D2F5j1FJiRTBsC2QOuo0fGxFNmNKgUT5PclJB/zB42EYillSpsyoMwoS37udKF6Uz6UTEJS elLC71mOC0eZJX+UkDe7FNmjKVFJFs5VKvm28+kqT8TzBtE/2XtphnrL8Jt1X8qPbwL5nxvp /5vvVrEj+dZpSsxoR6kHM4gyFFsXSA2hIqiRVAo1gcqk5vD9kEPlU0XULuoA39ZfqCtUJXWP qqFeUvXUV37prs7coaRMOXOduYtjBXMPxxvMfRwrmQf88TovPcTxOn+PRI4VzCMcbzA1OFYy jymaPz7hzyp466c4Xmee4VjBPMfxBlOLYyXzgreuYF7yZzd461c4Xmde41jBvMHxBlOHYyXz lre+wbzjzyp56/c4XmfqcaxgPuB4g/kNx0rmI29d+SdGyFfq0qmp/xEjn9DycuazyEyDyMwX kZmvIjPf+HLKmUaRnyaBF5YSeGElAi8sLTDCSgVGWEZghGUFRliZwAirRBhhlQVGWBWBET7O gBFWTWCEVRcYYZsRRlgNgRG2ucAIqykwwmoJjLDaAiOszr9hZAWVR22idvwzRlhdgRG2hcAI qycwwuoLjLAtBUbYVoQR1kBghG0tjBjWUGTGSGTGWGSmDRkxrInIj6nIj5nIi7nIS1uRkXYi I+1FRjqIjFiIjHQEI5YiI1YiI9YiIzYiI7YiI3b/BSNnqFKqgrqDX3+/oxr4hbQqy4mMyEVG 7EVGHERGHEVGnMBIJ5GRziIjziIjLiIjXURGuoKRbiIjriIj3cUR00NkpqfITC+MmN4iP24i P31EftxFXvqSlrIeIi+eIi9eIi/eIi8+Ai//NSMvFYz4ioz4iYz4i4z0ExkJEBnpD0YCRUaC REaCRUYGiIyEiIwMBCODREYGi4wMERkZKjISKjIyDIwMFxkJExkZITISLo6YCJGZSIyYKJGZ aJGZGJGZWIEZ8r1OUm9cTZfw0V+dSuTDPrmuGFLtKY7nqw/lTw1SieSjezw7XqqnEiVK+irR kNJ5XYwo6avE8tIo2MWJkr5KPCRiN1KU9PEtl7aULR/re/NXlxBqBB/VU6mfqDkqoxQljVaU lKAoKVFRUpKipGRFSWMUJaV8L0llIi8lsPG8bpIo6atMhjSK1/0kSv+qRmMVNUpV1GicokZp ihqNV9QoXVGjDEWNJihqNEVRo6mKGk1T1ChTUSM+tkpsJfyaiDagyc49c5p8k0EimUq1+sda UrnUBn78HqLK+ZH7SUK+GKEnMZFYShwl3SVekjSy6lC+RtH4AgKjXKaQyr9L9GVeyoF0RSFd VUjXFFIZJJpfG6jTJHcO/YjHFUi7rrCqUEg3IEn5UaVB6dKVyHGKxyz6NI/LYVP1g40efYb4 o89SUt5yBX1T4elXhXRLId1WSHcU0l2FdE8h3VdIDyCxfI/r8qPcjLKgL/AlreXLusgf8/jj Od5iLX2exzz6oSJftdhuJTqbXsT3Sj69ibcvoospVXoHvYNqTu+id/Oro730PkqbPkAf4f1L sXbT5WcSWZWRFZWS+A3EAj5hG72N97mPt5fSx8g3CMn6il6GX22TL92R1ZYS74PFupO/ZtC5 dC5lRK+h11DGvI8TVBv8FrsHfovdU1y5KaO2T3lPxWRVR+fjW3ZS6oayk7LjP6znJHw85Nda PA/W/Jqzp9ivl1CPUkX/1JDvR0B6rJCefJek5EuKy/5luyisKyVggP9ncI4/6kJLGZzgMg1K ZCqWs7xmfWwmUaLzMw2KeVURLZHI1TgVGWulIaUNWIoLl6layfhLdmZnWsLkB3H9OesfNIaF xlMNqW7468eH97FUEjWaiuanRzS/LOf/ONMfnDG6NmWbRg91Zj98O2UaQNvYa3YxfXM7P7NF JpfJnOYypdvypbSEpnXIt4zn+8rGqJtY3++KCs/nmilqK+FXOtx4VFM6gJHp0AOC5DqcFjlR 1lEdGD42Lj4xNjUpUa7JaRClko5SYHRUQlJilNyYMyQaVZ0WfvGRKUljk2JSTdySUpKTUsJT 4/kcplwbki7Vafl7enB8QrRNUGp4QrJJgFsvzli/mdxJznGd5c5yR85+CH/amZMrTrlpe/8n NWvGqZF0NR3Gr19AoLwD1044NU50i0+Oi04x6RPkbuIe5N+ls71zHxs3RycPGw8X997ydpy5 0CLDv2xRUHRKWnxkNJcpMfuRYQm/lsyUNKd4vSqdyd+wbJ+X5q3X8LjyWMBj4ymci0mSuvqA yXYlnsZGLg0qIziLiwd+9X7zra7Scd2gIe/7HLjirLnu5lrz4V9Gbs5rCL3Va9xUQ+Nfw5T9 bk5ffdBnStWlAUOO21UPebAuJ1e+e+CVj8X1x4s01hQ3u90YWPbkHntn0u2GC9xgufv8yFE9 KrOfLizzf5z38tjobJWf3XoZpY+rnR5jf+rs51bZ++9s71vC9UtI7fN53iTdM6ppscYTtdNU u43cP3tHXrvB1uyaZlrax9dW+PnWNjQb7H7umfXX+scn7WNPeracLV1R2rDGb3MP3RltOM0n w7qUGFdvjO3T68rqnxvr7+hpLp3gXJa3bK5f8UCXk5EuPWjyUaf1mRIVnhGWM+IpNdJg9Bjd ufLT29yku7/u3hlwyPX+MOuOJYd3YQwZmTMtOb2puuaOn34N9EhWfdXzS9qXvVa7Tjvtbc4F E4M2jB/Xl/PO98x3n+UWl5qa3MXOLjJltG3C936yjUxKsEseFU+0dskpSVHjIlPH2im6kfQi OpEflba8CTdIpsxPTJZVkkgYX86H8/p+ztGzuokFjB8//q8KiE75F55TOR1S33aMOqf63aVU +U8TUkpGyYL59j4jPw/fruN7rnZDs/KliwxOXGrVdP3p2WZLcnNbDzUZWFTvO76kfFXvjm90 4xIclSKH9ejqHnxrqfe9FYs+LRyx4dmhvifm3n53ZvsbmdqH4rw3aZs2xA1ttudqVavtI+/Z VZjXLC7VuV/S7VCnU55bpJ5z72+1OGKf4lOXs8hX/fNJ1yNj9XVeOm36FGf8rO3deasG23xu Sg3M6ZLvOPrT8rkaVzu9qE2TRYZdS/W0NDIr4txnH9COanG52aJXQ8esXHpQp82VxKdzr/2U /VnJe05eolqIh3bcb52PqVo92+82esGTrs9P2S52cx97PNprRNTFjD0L59QM7/Hu5Bmbb2V+ V9rmOZlMmnN/sTUfxl7yYazi9zAmUbXO2FGVMXETuSzwZ38OYxn/k2BhzpkKk97gx/SoaJOg +NhE3uvvgYzrxDnKOzvaOzqRQNaJc1GcctOm/18EMtFc+k/M/21gWvI1qVPJQ+lhi0qPssLw Ixs9vkTqdbf97Fl+7uWrc6t2t+8/7tit0uYyXa0No1vl/RzmFzy3xi/gZtblgvCN43VyDTe/ apb6cXNIxjOLj0HluydEPviwbOXBl796fhrt+r7dnL1HVc8ym7MnzfRKMwz32NrqzISI+SdP OW39MijpbKTaUm9uWuuJ96dM6rfPMyEs3XDngY8rdALfHC7zc3k89p6XfzfdrSubuZTO7/8w tKxrXXZsLTdii9+QtW7Hbpsf+bl5VV/NtWv86voXzthas2aza+X6N6otvYoadvtvzNHoe6JO 9z11fpdX5dBG56q5WjbsETe6nxm1ot32yU6JM+K2mbR0tmg0LNTcvfF7YBrBMxL6VxNV+mO0 alSV17a//CTh3OLFh5ctKGwZ3tmR60+StRg+Xmzw4Pr8uX8cODk5ZXUsHeROLk5WnCPX2cXB ibORd4oJt3GM7MTZRHSKiLFxibKPkEdGcU4uzo5/CICXtJ5dLN+nN0hyobOtg57eYd9c1TZc iBAA+3F8CMznQ+As9/8qAPJjmR/J/CAO45xtHOQ29vwFGCFwyA8h0J/jg+APIbD7fxYC/4nv 1L+Kd5uKghbf7yppDB8mG/Iipk795sdfZ1yn+mtolm0o07d4usDB2eqm2y/S+eNeOCyp31Id +42+vdHI3819WGvvRw/66dX9tLBujtbFzO0bvmzaEvZh5YjzE8+cmLQ6/lWbzJNvL2en9434 UNXMsCpIu3JF4BunY62y83suLVDdaKO35pRHqvKL2/U3N3p3CtbWGiDdO1Hvi2fjl7ivP7uH VvfQznAofJN59l7PVkqvW5xVXT2Y7bXl2sq8aXnSoV99HhnYssUBnnYLGjJuGpt8Yr90HNVS tyGFOai2OTfqpdawfu7eWR0NbL5cO6ASFOa47IHemcO1Y52eDXzz8IXe6ZbnZHu7Xg2fUX2g z9xl62dxmexRPt5tEOKdarhDewOs1uR/DnNhiB6qKkvaz136zjpK0kpPyhMvb8Xp/0GpougX uQ1nJcSFtr/HhcCkJD448B0VHxMfGZ4abdJrXGpcUkp8agaCGcc5O8jt7eUuDmRVZi+e2pPT vzPO/rsItidlcGgrLuqEUe4IE5Peq9KCRndvXZlUeult7ajGlXqaD+53SZ1ucNAu3/5l071T vf3Nb6RQt50Gqs69uMPEu74urtivb9bGYxl9x6z2VLr1rd39tePmXN06ts+Uqmm33x9712nD hVD3Ozu3uz6wiFtpsHljytiQt/rLar45LUvJr0wLMx7vPn2ms961sUPZI7GBWRv3xNvdaqXW uCS1Y3WaXfBdXW7wp/KsiG+XLoR5yAMOd9Cp6cldTemoaWF2rrO/a76966LLBc6ymaH+IZkW lqz9wb5V/SKflttEvHV3fVqsTP3mUZBXNnRB+6BnE7b6vPO42rmbc96+8aEb9fOyLmktDOl2 slglTHr9ewQbzjMyhGtOIoOORNLEsJyUP/wQvf4ykpBgZdScYfgROIvTlqmItyYtJAwLx/zy V6GjiZdvZXL/6+3nLX+YM6JrkTxpU7ejN224VgojXZpRN1algqhx/O2MG9XrD7FMozhzRM+Q Disft9P5avlQNWj54JoNXIAQy7w5T8493y2/16we/3ksUySn8EObhCBEseAfopgXxwflH6KY 83+zkCMTxk3w+o/xi5ZQg126T2nvsfNFUs/d9vtHvtCwSyzy/vgibNwr3642VW7b1RovPbeR rzcvnRSQM9V0WLGrne+RwqKQNY+SSw7t+5Sx3zvlY/faXlMuPlTXj7+0cY2JTYNawJmQyzaP fMqPJj8talYo3Rjy4NC8vgPfLe+95u37N68fzWrj2O1QSG5dkPlMyw2ZhkurlykZvav2/7Sg 4OIznY2L/c+3Ll+YstxyTMJqg0+GdUGVsaVmTaFGlwsXHOuwJyMypE9h/8ufn68fFHJ3Ne3e xy6s/taOikz7xK8bluvUvIh/uqXQ+vh5K02N6OxVtz8UNmi3V4l2XvZ2QhufkrKHIc+upa9o GXrBSS/s7lIj72yb49sd+xi+1mxhQA276zTU9ErOOZXXMzUW9EvQ0PF3ndTRa01K2fvRF0++ TF4/cMnAycuy8lt7SYd8vLo+VjV1Y6dXNnb655+kdNauT9rdLTbzc+CeLAe9aGONeXc170XV J13xqLiu/zzjDLPv+hfr+23m5RWrftHp0HN7zeeHW6Z4lCiN8Iwe0dN/V++X/q/2pmXcVHVU STCcKm9TrRF893HBl8eemtujcpoC9GwnnWBNJ1Qv79Uh/vTShcsvZN1cbbqjWeiausIds+Km q4+0KUkbRRmt2P5Ob+JvetPbHp5zdWSRp9wu986jMa5V1E8RnmVX5lw41LJBIyXr5HrXnXTP kU3xq1dUaxZp7uscoFx52pXLlCnx8fvN9/itF+eI+G34d8RvrjO/tuAjtpMD50LitxynDhw5 /ftu9/9d9F5XMHr3/dteSywnjbJt9fBY9aOzq/qbB2y/crelf9vmr8s2l/luT+VMtF4o3Qhe 3sJ7WeveS3bkhHLtb1Gjnk089nKuUvOPGkxO3dzSNpcc2s5e+64+1tD668Snc4xqn/qvLzhp HnQxq8H9qsq14Tuv7erNFH7eNHppbJXFHY+gXbOuPbbwsO1QPKvfgED1Gqn1l5GLFnGJs98P 5tY2/FS5cu8z05U/fSrXea98MCghcJ/7onVelI9njFaHjjFFK2uuy6b5FH6esVnLU1clc92M VwPSGyW5RgHKMylNzuPVwXvmHiVnbILX7TRO7yUfX7r6ftfpSwvC6f1GzXZ//bh6j+SKWd/g ps/s6VMmat+j9zaekc3/Knr/5Y3wH6K35o/Rm9dQ3LQcIfhOW8RNy/rr8FsQuSH8fz48MzUz tusV+ORv3O47dlC9ko5t9P83Uf8/unXnudZcOe90qLRPp7vP920ff/tKRn8/yW7b1DFDE9R1 tl05PnHhIdsK7cIFCRGHBtKX/E10AlbdndCzemDJzkG5hg+NJLOKS9Lfzb/2sqvkdfXxhars +Syv6rqgFnf7bVtS8zRr5I2pJ58seyezmyl9vtiyrVnyl9++1qSvsm32Uak6+WhL/7XZo1RT lh8qcFkTa3O2v0ZtRGgPvZz5Jj2qlQzsP5fKfdLkrlYpaudrk12bZqrq3D+lGp5dV3VI/4X/ /ClnnayGrz/x4uhktd4TK4JSTF9zF0vSo0OHSvRVdTXKb+nmfOh2OGbQXhu7p59nzirtH/Js bfKy0cUuvhW/ZZzY2nJCRMc3has7OsrGG0RccDVOaJNZp3bOuuSq297Hn19O3v9oQ1Gq0yH/ s2PMtdunqXULXDBmiIeb7tG9e3f5xZ5f17tpaobp1LwWXMyz3trDDc7nmZlec3tu9byk3qvU uuKm/VTf9pZebcOG1Ia82XRv1dqLXZKOTeuQKtN6nWZ6YnXmyQ7BB3aPdJ1bkBa+L7FAZ9OJ rZ512knf5tmP3tN4v//5BeYXYo6tNZqtHUW72uwcvPBQjenj/bsuRu5LD2YretkGFC/btTF9 2978FeMMfl0yW2ecmZ19kXJi/tAF7U7kv5lx0bTyhXG/C7mvvR98lEQnzVWbfD7+/JPE2s0r r8g7NmmcHRp60691wc0Gu7wetgP0Rl3QWf9NnsnwU5jZTEskHD/d/r718l8/Nvn9IXL+tDNk uSaOXxWpXP3HJ9R8BX4/U5NrcD+mtiCLwe8ZGTkflEwnJXUZe1lnvcb4HUefNKRPSFnxJpGL +iGLujyEC863nGpB+VHxVCSVQiXhIXcMlUqZUMFUBpXMn8Xy+nBeiqMyCtpPbftPJ2twRnJS bEp4clyG3Z8uKkymhEqJKWNdE50CnD8+7zuQrrWzXVyfNeuIZbzGntmpk8c0LXl74DF7atKC 5lbpJ0r3P9t3InCRv6vzqV9aJ2T3NvC78z5ifYnShosx2iv2mWVYa0tNcw6u2jrp/lTrc74R 5+5LA9KvvFg81zruW/bCXav1L7W+s/5szMyVTcVaRd2PeppXDouKjw6Y3LlHpIVWj+EHNRsm VJ35cvV59IFFq4Z9U359fleRX8f3mptWes5Z8aBdSXfV7KHLaxOqjg+wmt5afUqus2fJu82b PdP3xF55PS33seWRPi4fQnv3uhIVM+qdprKVmqZ9cO7u+INravK1bm3b3+NAsdsTm2OWZ6Jt mh9ND5UuKXqUvX3XkIsxBZm0BZdJt/29j2TyTLoFr9LCqMz+21YBf/1G4ocxOYxr+eOQVPv9 zYqEL1yRwsqb4+2BvdzR3t7B2b7zkH8Ykdeszll98bcx1w6KfPmyYXaLx9PD6D/FazJWOlZt jnur2cC0Gli0ta/t1TRJuyW3+7/vaMPsWz80qabd1co5xcGbLu5M3mtxvWrWwJhAtc3da66c 0k9/lLqQHcp9rOq1c++JI/VHPn3qzO4uqnL4ObBs+LqHlLPOMtles4RXklbBh8cuPtzjl30h VirnRoUesEo49ep5W59hU6qj1vfrduFuSsCu3CKbXT2b7fpa5b3kjUm+uc3262FHp12fFfZ0 3qr+O8PKL+2+nNQl/8w0G9/3s2dzW3cO4nRT337IL/VpvX/ktFeHZ1Zbep3bcpRyH7SgJmJD we7ns/vtdLE4k7/6rG9xw6L0OxNks676GNeXXclymDhvZTv97v0XjX/i9C5IflrVxT4n1pv6 f1FCIioNCmVuZHN0cmVhbQ0KZW5kb2JqDQoxNTIwIDAgb2JqDQpbIDBbIDc3OF0gIDNbIDI1 MF0gIDExWyAzMzMgMzMzXSAgMTVbIDI1MCAzMzMgMjUwIDI3OCA1MDAgNTAwIDUwMF0gIDIz WyA1MDAgNTAwXSAgMjdbIDUwMF0gIDI5WyAzMzMgMzMzXSAgMzZbIDYxMSA2MTEgNjY3IDcy MiA2MTEgNjExIDcyMl0gIDQ0WyAzMzMgNDQ0XSAgNDdbIDU1NiA4MzMgNjY3IDcyMiA2MTFd ICA1M1sgNjExIDUwMCA1NTYgNzIyIDYxMSA4MzMgNjExIDU1Nl0gIDY4WyA1MDAgNTAwIDQ0 NCA1MDAgNDQ0IDI3OCA1MDAgNTAwIDI3OCAyNzggNDQ0IDI3OCA3MjIgNTAwIDUwMCA1MDAg NTAwIDM4OSAzODkgMjc4IDUwMCA0NDQgNjY3IDQ0NCA0NDQgMzg5XSAgMTc3WyA1MDBdIF0g DQplbmRvYmoNCjE1MjEgMCBvYmoNClsgMjUwIDAgMCAwIDAgMCAwIDAgMzMzIDMzMyAwIDAg MjUwIDMzMyAyNTAgMjc4IDUwMCA1MDAgNTAwIDAgNTAwIDUwMCAwIDAgNTAwIDAgMzMzIDMz MyAwIDAgMCAwIDAgNjExIDYxMSA2NjcgNzIyIDYxMSA2MTEgNzIyIDAgMzMzIDQ0NCAwIDU1 NiA4MzMgNjY3IDcyMiA2MTEgMCA2MTEgNTAwIDU1NiA3MjIgNjExIDgzMyA2MTEgNTU2IDAg MCAwIDAgMCAwIDAgNTAwIDUwMCA0NDQgNTAwIDQ0NCAyNzggNTAwIDUwMCAyNzggMjc4IDQ0 NCAyNzggNzIyIDUwMCA1MDAgNTAwIDUwMCAzODkgMzg5IDI3OCA1MDAgNDQ0IDY2NyA0NDQg NDQ0IDM4OV0gDQplbmRvYmoNCjE1MjIgMCBvYmoNCjw8L0ZpbHRlci9GbGF0ZURlY29kZS9M ZW5ndGggMjMxPj4NCnN0cmVhbQ0KeJxdkM9qwzAMxu9+Ch27Q7Gb7hgMpd0gh/1h2R7AsZXM sNhGcQ55+8lu6WACGz70/cQnyXN36YLPIN8p2h4zjD44wiWuZBEGnHwQBwXO23xT9bezSUIy 3G9LxrkLYxRtC/KDm0umDXYnFwd8EPKNHJIPE+y+zj3rfk3pB2cMGZTQGhyOPOjFpFczI8iK 7TvHfZ+3PTN/js8tITRVH65hbHS4JGORTJhQtIpLQ/vMpQUG96/fXKlhtN+GqvtY3KpRuqjT Y1VPx8reXGVKWfYe0a5EnK5epMYqgXzA+9FSTIUq7xeYwXIPDQplbmRzdHJlYW0NCmVuZG9i ag0KMTUyMyAwIG9iag0KPDwvRmlsdGVyL0ZsYXRlRGVjb2RlL0xlbmd0aCAxMjQ3OC9MZW5n dGgxIDI0NzQ4Pj4NCnN0cmVhbQ0KeJzkfAtcVNX2/9rnnHkwvIb3Gw4M79cM4AOUZBDwhaIC KpglwzDAKDATM4CkmVI+IjO6lt7sIVetm9qtQbOwMq3sebV33speJqmVlpXmNYPzW2fPoIwh F7v3fv738/nvzfmetddee+211157z9lwBiAA4I3AAZ9fMnnix8nJIQAFpQAhZVNLSyaN+Ix5 ASsPotSB6SXq9PLHfxgBQB7D8uzZ+dPKWipv6QGQdOB1Sl+vMyd/q0kCCEMematvtvKJBy6u AIhHfRKu2lxTf8OYkyxAhBbLm2p0FjMEgQv2l4/6lDV1rdVBz6/TAaSUAcgUtVX1i6ZM/f4h ANclaGRtrUFX9cF27R2oOxnlR4kMz07WiOUqLEfX1lsXxZxivgJgsMgcrDPpde/f8u4pgBFY T9rqdYvMTIBUjvRqFOAbdPWGo8oZCwFGngTwzDabLFYhGlC2IFqsNzcazLO3PZKDqr8EYC0g +koCsP7rR4Lme2afk4ehKkxbJj0/Vry/ODFLIgh94+Qn5K5YdKXyYsK73LVvHOLsvh2/pcpP XKrpT49Szn7IBJaWGVCCGmYh9b1kk10Hd4h0YO9yyUZJBhZj7He2E6oZbzdWIiEMkUkZiewK zVA6LY8H7Rn+zDHJmr4JJEPuSl5adqmWOwQ1lPjV4bXt0CN5CnRXavlfTbIwiPlv6WbPQsEf acdVgfE/bcv/L0laDPp/o/l+GSHkvmuYtesHZ/c6lTb8GxYNkq4bupoASyQsi+uZ0G0ikOZ/ ygWQg1zow/3SBVEBCkRXcEV0AzehF9zBHdEDPBA9wVP4DfcQJaIXeCF6gzeiD/gg+oIvoh/4 CxfBn2IABCBiP8KvuCMHIQZDMGIIhAgXIBRCEcMgHDnhiBcgAiIQeeARIyESMQqiEFWgEv4J 0RCNGAOxiLEU4yBOOA/xEI+YAAmIiZCImARJwi+QDMmIKZCKmApqRDVFDWiEc5AGaYjpkI6Y ARnCWRgBI5AeCaOQHgWjEUdTzIRMxCzIEn6GMTAGcSyMRcyGbOEndPs4xHGQg5gDWuFH0CL+ BLmQizgexiPmQR7y8yEfsQAmIE6AicIZmAiTECdRnAyTEafAFMRCKEScClMRp0GR8AMUwXTE 6TADcQbMFL6HmRSLoRixBEoQS6EUcRbMFk7DbJiDOAfKEMugHLGc4lyYK5zC8LwecR7MQ7wB bkS8EeYL38F8qECsAB2iDvFbqIRKpPWgR6yCKuQYoBqxGmoQa6BW+AZqwYhohAWICxBPwkJY iFgHdYj10CCcgAYwIW0CM6IZbkLOTdCI2EjRAhZEK1gRm6BZOA7N0ILYAosQF0ErYivcjHgz LBa+hsUUl8ASxFtgKeJSuBXxVlgm9MAyWI64HNoQ2+A24RjcRvF2uB1xBaxEXAmrEFfBasTV cIfwFdwB7YjtcCfinYhHYQ2sQbwL7kJcC3cLX8Ld0IHYAfcg5x74E9J/gnWI6+BexHsRv4D7 4D7E9bABcQP8Wfgc/gz3I94PGxE3wgOID8CDwmfwIOLn8BA8hPTDsAnpTdCJdCf8BfEvsBlx M2wRPoUtsBVxKzyC+AjFR+GviH+FxxAfg22I22C7cAS2ww7EHfC48Ak8Dn9D+m+In8AT8CTi k2BDtEGX8DF0wU7EnbALcRc8hfgU7BY+gt3wNOLT8AziM9CN2A17EPfAs8I/4Fl4DvE5eB7x edgrHIa98ALiC7APOftgP9L74UXEF+ElxJfgZeFDeBkOIB6AVxBfgVeFD+BVeA3xNXgdOa/D G0i/AW8ivgl/R/w7HEQ8CIcQD8FbiG/BO8L78DbFd+BdxHfhPeE9eA/eR3wfPkD8AD4U3oUP 4TDSh+EjxH8gvgsfwceIH8MniJ/AEeEdOAKfIn4KnyF+Bp8Lb8Pn8CXiF3AU8UvEt+AofIX0 V3AM8Rj0IKcHvkb8Go4jHoeTwiE4Ad8gnqT4DXwrHIRv4TvE7+AU4ik4jXgavkf8Hs4g/gA/ Cn+HM/AT0j9S/Al+Rs7PcBbxLJwT3oRz8AvSv8A/kT4PFxD/Cb8iXkB8A5+nLiJ9EX5D/A16 kdMLfcLr0EcAUSAEUdzb8bnaVSEDwrK/e3K7elIMzpY4la5B33CSy5C1bvYxDC3klP73xuDu JgfmmsbgNjjbeQzy4esbTrqK3xzJ08MFGI5zHb4+j8HZzlZfg0+Gk4Y2T+mpuMYxeA7Odhmi 9G8n9yFrvegYJEMLOaX/F2O4ytw7ko+XKzAS6TWMwWtwtmKI0r+druI3R/LzdQdWIh1ayCn5 Ds52HaL0b6er+M2RAv09gJXKhxZySv6Ds523q2uY1+EknyFrQwKVwMpchhZySoGDs52tvoZ5 HU66it8cKSzECziZi9/w9YUMznZedsrh6xtOChiylg/zAU6uGFrIKYUNzlY6la4hNoeTgoas jQz3xTG4XsMYwgdnK51K/+ExBA9ZG6PyB4mL61UCZLCkGpzt7VS6yub1R9NV/OZIibFBIHH1 uEqADJZiB2c7Wz30IrzmFDlkbWpCKEjdPIYWckoJg7OdrR46gK85RQ9Zm54SDlJ35VUCZLCU Mjjbecu9htgcToofsnZUOg8yD6+44etLH5ztbPXQAXzNKXHI2jEjVSDz9L5KgAyWRg7ODnUq RQxf33BS6pC1edfFg9zLTz18fVf5bSbvVBo6gK85XcVvjlSYnwIuPoFDCzml/MHZzn9ZGDqA rzmNHbK2pDAdFH7BQws5pcLB2c7ReJWF/0fT+CFr55WMBteAsNzh6ysZnO1sddrw9Q0nTR6y tqosG9yCIiYOX1/Z4GyNU2nU8PUNJ03/VwKM4y+Ovva/LxJ8OCFSuPwHSpF75d8kscxyEhh2 0gzOdnbdrOHr+8+krUPWcqAF8VwkRw9xZ6LOTDtTdabxzDFBADjDXy55HnPkF6/0klZbmjPu uuyxY7IyR48ckZGeplGnpiQnJSbEx8XGRKuiIvmI8LDQkOCgwAB/P18fby+lp4e7m6vCRS6T SjiWIZBcoJpQwdtiK2xcrGrSpBSxrNIhQzeAUWHjkTXBWcbGV1Ax3llSi5LVV0hq7ZLaS5JE yWdDdkoyX6DibYfyVXw3mTuzDOm78lXlvO00padRmoulBXcsREZiC74gsDaft5EKvsA2obm2 vaAiH/V1uSryVHkGRUoydClckXRFyhagMneRgHGEEkxAwZguBuTuaJUtWJVfYAtS5Ysm2NiY Al2VbcbMsoL8kMjI8pRkG8nTqyptoBpv80yiIpBHu7FJ82wy2g1vFIcDd/Jdyfvb13QrobIi ya1KVaWbV2ZjdeViH15J2G++LeDmnsDLRVTunVe2amBtCNteEGjkxWJ7+yre1jmzbGBtpIjl 5agD2zIxEyraJ2DXa9CLhSU89sasKC+zkRXYJS+ORByVfXwGVYHIqVjA21xU41W17QsqcG6C 221Q3Bq5MzhYu0f4EoIL+PbSMlWkLSdEVa7LD+3yhfbi1l1BWj7IuSYluUvpZXdsl4eng3Bz H0gYLtVRioqLVGHxJc8S0SLVZIwIG6/n0ZIyFY4pUwRDJrTrM1EMUznBVrYqnBGjzSWvol05 RuSL7W2SGKWKbz8HGAGq06ecOToHRxqjPAciKcbJpVjD+n7alpRkS0wUQ0SWh3OKNo6j5ZEp yc3dTK7KrOTxhu6DGehbXfkYNbo/MlKc4Du7tVCJBduymWX2Mg+VITtBq04qtzEVYs3+/hq/ WWLNsv6aS80rVBjJT9HF7GeTx1768VT6+xTUjrER/yGqDfb6whJV4cy5ZXxBe4XDt4WlTiV7 fealOgdl88krY0MYB8WEsLQWg3LeJWGxUOZm42LwR0qDuqpbJseopBzCT7ApKybZsVwRGTnM Rt3CGbEVvV1u5jDTNibJuTzWqexknls7iwZzsUxh6dz2doVTHS7w8V0qsnpml5asLplbtkeJ z4KrS8t2MoTJqxhf3hWNdWV7eNw6KZe5xBVLvFiCQoIBu5OR06qQPbhFL6O1HGXQsr6bAOXJ +3kE9N2MnaekPEwp0FXqnevLxGGOZWLBRPxRbj7F6RRzKKpFZNQ71RER3Uzqzk7xlrwzLAFv 0VrXo8ERaXHeEdlxYjlAO7YuIeLL7UERR/HaEZcesTo7PeI2vNR4NWNZlIvbnhBhijPVm1aa VnGjwV88HXp7ybXd5NjTs3xdfF1Gd3STfdosWcdeWccuWUeNrKNK1jFH1jFB1jFK1pEq60iS dcTIOqJlvnJvuVLuIXeTK+RyuVTOyRk5yH27hS+1SeJntK9UKd6knIgcpZWMiOLbPBjADJEz MAVsPmwhU1gynhTa9uuhsJK3/VKi6iYKnFmJajyxeRdCYen4QFtmUmG3TCi2jU4qtMlmXF/W RcjacuTamNXo8dKybiKIrBUh4ia6BwgRVtwV4riXl4N/c05gjvc4r6wJ+YNAhQOTLqfApIGp cEbr8xBBmkCGaN0li1gnE7klyO2g3A6R20G5gWG29YUlZbbtYeW2dJEQwsrJrtzd2sXivluh KjDgVWG7s7k20Laskue7tLsdG3JsRaW+VrzrDLbdKkO+TavK57tyFw9SvViszlXld8HigtKy rsVaQ/7OXG1ugUqXX74HikhlV+Jap+7u6O9uDySSyt9r7CaVospEsceitYP0uFasLhJ7XCv2 uFbssUhbRHssMIoTOKOsSw7jy3Gx0/suxlWBc1ERElk+3l9pHkcnZmxk4NKQZznxRT1X3Pvc 8HPUHS+xKiU3JVeswoARqzzEj1hHVeDSsZEhz5LHHFVKZHupxkNSU9IVySImCCww5osXWrJH 2M8s2+kdkZ5UngSSGyBNMhUi8Apl7xVP5MJRx9XTVy6cliwEVd8C4dM48be3Tzkue9LhmetG PLNMgZfgDLxAEmEG7BfeAT2UMS14DpgCd8MzsB8+xyNbFYZ4MFkCvPAgrIFYuA06IYsLFnbD VDgp9wR/PHWOISaQgh/UwMPkU3zUL0QdY/GR9A5oRJyJ/PMkE2sIKOAG7P1eeABegLfgCwhC jalwmMjIeeE5yMOjiR4Wwx74XDJecif4wD3wV9gGL8LXJJVsJd+y3wu7hYPCd9gqAU8oo+B6 8Y0M+BP8BeX+Cn9nVOwWIVhYLDwmvI7n+3zYgaN+EV7Bvn4hPJlN9MyjbGvfr0KDsIM+kfqJ 1mPOxdEUgRUeQcnDcJG4YG7DfTKH0fd5CQHiSsGzdhLaNwvqYSmshrtwFBthEzwJJ0kOqSWH yPeMO7OM2SeZISuSFbns6/1QmCj8Ir41BJFo7RxYCIuw5Z9gHazHln/Bvg5gPgO9ZBQZS8aR yaSY3E1WkkfIP5kk5ghzkfVgPdlktpytYJewX7EX5JLe6X0b+t4RZgiL0Je4HaE/Y9Br+VAK 88AMFmiBJbAMrVuLuQO9twOzDf25D/PL8Bkcw3wcTsIpwhAJjlFBEjFrMI8lWjKFzCLzSQ2x kA3kadJNXiCvkG/JWWYEM4rJYqYzxUwNY2asTAdjY7qYfUwP8zNaOYYtYC3srewO9iX2dfY9 9hOM+imcjjNyTdy9nI37kDvDneX6JCBRYU6V6CSdvZv7CvuuF2KFsUKlcJfQgfkk+jhcfJsJ 4nA8M3BW9eJbNTgqM9yEuRV9twJHtB4eRt+J3nsauuF5jNKXxHco4B34BMf3GXwlviWAzhHH 50ciSQpJQ/9eRyZinovz1EyWkGVkLdmIfu4iuzHvJ5/iKPtwhLOZcuZGpplZwtzFbGAeYPYw +5nDOBMCK8WZCGQnsoXsHPZ69kbWyq5n/8zezz7MbmK72f3sqxzDjeFmcI3cbVwHt5l7knuN e5/7VKKRjJW0Y7ZJdkv2So5LvaUh0hHSEmm3TCpvlZ+Q98EueA26YPeVRyaymihJF/yNnGA5 dhlzkCljXJnDpI17m8ThDGQTkKyFBvgJLQwj7zGjyRxWT+ai/9pINbkeHmJD2c3sFDgoaSAl 7AxSBSXcBvhN8jLoJO3MTpaRtLO95AKzA2phLbOwd5tQTjyghGxlHsWIuQWyIYELhsNMFreH xDAJzD7ZE6QbxsmkbBY7Ru6Jpa3sMTSzRO5JvgUd+xWun6O4toqZR3FPOE4+lU1H63rZJ1Hm FhhHtvZ5wTZJOVNBQpmtZGrvbb0fsQ8Im0iQ+B5xr1dvLpOHETdL2M68AD/Ahr4L3JfwAnME ZuGuoacr5ydcey2408yG3xh3XE8luI+YcW+qweNlDZ6fWYyfsdpwqUyPpz0Jp2dBIZXoWZYJ dpFxegJB8oTMwKQi5dnsab3ZRcpfsqcpe7MhJ7s3W7zSNBlekV4xkV6RNRz8xrP7f9NK4CLw 3H76wq7QA1/hfuoGgTD6GSDuPjKcoW6y9Cn/NKVrcDcJ07opRrincSN85gcZ1gQmKX/p6e3p gZzeX7JziJd3VlaaxkfFxo4cMSojHQ+oMh9fqSrKUbw9tkw6Xq3JlTC5qSm5uSmpuaSGTRrp lzd16tSgxIsvp+bmpqZqtfYXh/H4jPu9DNf9Nu3UTMhkJnG1XDdIUhTZiqmKeYo6xRKFFOQK InNRSGUuEpAzrBvniodgLkwh9VUopIRh2TAFQZKALEzu4iKVoMMU3Yz1KS3HKtz2MTfh08zf cLeTICrIhV2uouOClGd7gk+fDkSPBZ/Oyc7OzlKj2ySrUpNW3XJgVWqgeCPeWWIWf2TZ2fiT poEbyA3EJ4OoSIaPJJKwx7ZV9e6t7X2udgfzaO/tJIfdR+769SnJ1D6LvjfcfuqXvoMjVMPH 2pSJ6jnqZvVKNeepCneJiopQhQdFRaWowuOiohhVuDxKpVSF+0WpeFV4bJSqW7jnmQBQ84Gp anU3MWm1AYG+AQGB/qgzLsAfSX9/dKA6QB3IB6QwqQGEDQr092PUcbEu+KSn/hBKAtICAoL5 1JS4CP6gJ2FEJQqlZ5Am7WBk7m58giqioYNRI8ZPgSH/OEbQcRB9kZ0tYkCWONVeWV6iE7yy nFzT/wSWpiE3RBIv3wD/jAy/yJEZ6aNHjfQaEatSjYwkJNJPFSWT+l1RS9jo3rMhMTM0ffGa 2dH+RXMDcf86RXrIMvWcaP/QmBnq3v2aOSr/3nOc5bdFt0QkxsSM4BvZZmtxzMUjHC381n6J vebiHfaIPsouwB0kAUZDkzb85kSSkBSKm2Yi9jiCDXHPSEkMYYGRaKKiVZ7dJFLr7p8uJ5p0 lWsWOsmtm8ieyVjNn4sNSpfg463WNUUdG5SZdS4ysZY6atrps6eVvad7ikQ3Qc600zmnTyuz s72oiwKyaFzExsXaV4D4KxtcDliMi1VFSf18/QP8RR7Yl8ioAKnIy0hHy1CCdMenrpu9fsve BePTYvy9ghZHq7Xl8xc8faK4uO+bFx7/5sbn33/woQerF9+pjgpm58epblo8sqh5Usq4KI3C c6V3wLTU5Pr6O5qb1xzq++KMzfhGmzT45Wee2ff6xpI/aaKpZ/om4M5pw5UeD49r48O1YX7j 5BASFn29uyws3c+V80gM4Fd7/eLCdhASFM91xGfLXYISuolH11pc+Bgjp3twqMoeHD8OnY7d S9wA8lq1yeFxCt/YGM+YqFif2Bi3+BhwVag8+BgS7osQ5xodQyKVCBHeYTGA0UKSkpTZNG6W L4fJpa1ab//QkNiAmODAsHVcqH/QOrSSoIQou3w07iuqUTSeRju8KqNuZX39Hd6LpfH1ZsQO P6mire3Vr5qvN607OnN88qi0tpJbnlj46DxLesTopvMrtPH5Nczyt2+/bfPSTbs2vBroRa6/ o67wwLZbP64tH/m0uNcS4UvJGkkduEIAPod9pc1ICUwJygkak8bNksfGBAVyoTHro4KsoRHq qIgEtdovIWFygp9nhAv4RbCuMQtjgxbGBnaTcdqQiLDk5NHJbt4ZYlhFgNk7QhqUnmGOFPcc Gki9p2kQ4aJqVgeqsZx9Wnkack7n9HpRjleWWomx1qPsoYGFXh6fmBoWSQIiEyOiISwVQSn3 TgIPhVsS8eWQ8meQ4pOioiE8JTSaeMk8k4i7K4KPxC8JAogf9afd/XbfL8dwVUIkD14U2QE0 kcU6ghZdPBpD9dK+LlnTV9H3CWYd2URiMXdO77u772Lfr313k5uIFB9Pbup7Vx9qnrbgnrsM pW0BZfzji/788iuPLNnIPIqtKkinvZWoBYUb+9Zi44t9a0kj6fKbMWP7pnseqp4btGTVe3tf /kej/aEh3ZGb4cR/I5MHriUz8UPk5/6XM7vij2U6ByOY5ku/vZ4H/b/vF5/VDQ6awc/vFQ6a xR14noPmBshI8FljjYPGz3P4s4OW45mo00G74Llil4NWEB4+cNCukE7OOmg3yGBiHbQ72cCU O2gPSGXPiH+l4HCXBzcunNIS8RtRXCqlpZQ/jtIyyp9CaTml51JafE+um1vgoAm4SUY4aAY8 JFYHzUKxJMpBcwNkJBAoaXPQUlBKNjpoOcRKtjtoFxgvecdBKxit1NtBu0KVvNhBu0G1/GkH 7c70uIQ6aA+Y5waUVgwYo6tov9s8SrsN4HuItFsdpZWi/W5LKO2DtLdbO6V9B8j7UT/Yaf8B /CDa9kFKh9C+7DrDBshEDKCjqbx9vCmU7hZp+QCb5QP0uw3guznsL201G6p1egO/jS+tNfDT TA0mK7L4PFOj2dSosxpNDby5Tp/K5+usuqGEcuvq+GJjTa3VwhcbLIbGZkNVv9yYktb6SlMd P6bZ0GgRZdNSR2v4+GlGfaPJYqq2JhQbaprqdI2zHdUjUzUae5NppZf6QkNNNY06c23rQJaB z2/UtRgbavjp1dVGHEZaVmZWaa3RwlebGqy8HkFnbLDwpcZ6g4UvMrTwxaZ6XQM/sdFgWMjr dWajVVdn4XUNVXydqcXQqNdZDMl8tbGmqdFgZ1fqLEY9b25q0Fub7CO1mmoM1lpDI99itNby Ouykrs6gp1Wmar5eh3UIRr2ujrcYaxrsamoMDYZG5Jib0GUWAz/DyOtrdY06vRUHncrzs5BX bWrkLQarVRyOkxpRgUVvNDRYjThIvsXUuJDydBbafb25DoeHw7WaeGzFW6jvRBc0oZCxgbdY UVrXWEWdYkmttVrNY9TqlpaW1HqHL1NRi7rWWl+nrreKX7pU11vm29Wkitxhtmgx1CHXQJsU TS+dPGFyXm7p5OlF/PQJ/NTJeQVFJQV87sTigoJpBUWl7gp3xbCEyk1N6I5WvgldZL00tTh2 s6Gx3mi1GnCSWunAC2ZNzaVeFAvmRlNVk94qjr+l1qivHdAW78YGfV1TFTZFn1UZLeY67EB0 qbnR6IgbdCjOS3/npoa6Vj7emMAb6ivFVpd1NfRLD2oSFa8SZxQDytpopHEyoHtsfknXWGpB vBF7sRrqxZXVaMReq0wtDXUm3cBO0Wid3VQMQxyvicajqclqbrLyVYZmcSWgTK2hznzFiIac SbGkrsPGDRb7JEIRmKAR6vG8XIdn8lYsVUIrccfPmgVY/kb8LtKl+hKw4r0BqhAboYrdyHax e9l9eO1hn2Ufh1Jsbxa/84T1erzzsA2vUqil9DTUJGqzOqR4yKO6zRR1yDdSCR45ddg+Fal8 ytf9YU254veq8F6MnBpsbQULLRnwbkDZZsSq3+kbgyNtxTFXIk9sPYbKNWKbfr1paN1o0CAV j62NaG0j1ljwqkYtCbSHGmjC1qKnZl/ReiS21mAe2Ms0HN3vx2X3qAl1NdLfaNRi+WpSBuov Ua4Fe2rANjxMR3uqqX0GanUWZOIl+tFIPVFNdVmR0jsoHW1roVqNaJ2B0kV4b6GeM9FYEEcx EfsyYF5IW4vWGWn7OtrCHic8lkzYUhy/KCN6PZn2a6T+aXTo75eupDKivWIUNCFXjzqbnObU Sv1hwHst1cvT8YolnkaKnvqzDuv0A1qJM8NT2+3t6h069dRinvZa4xh5vzViLw20D7uMmVps pjMt+nMGthH7q6WzrKP92WdajF0eZjnkqmlc8rRkpb3aZ+fq1vRbYEGOkVoh1lY7PNNC9S0c IKdz2G0ffT1dQfbZs8+u6DPe0Zeo9XLc9UdBk0OTkXrL4rzSB0SKOLZaOgozrgs15haaU1Gj c1ymOmxRU/l67EuNaEUZHbVMLFlgvpM1qZdk/7N9iBFY55A1DOilCFdIKUyGCXjl4W4h0tOR K66cCYhTKb8AOSWI4n4yEddAAeZplFsK7qCgVzn1oX1OW/He5Jh76yBrzT5bZhor9TR2rXQf EuO/dcA8FWAETcU+L0dQf42Z7jdV2IuearTPWgvtS09XwmD92stGuqrqsG2Vo1d7dFTRejPd s1oHxJbYl/GKXcIeV/Yov3LkokQdpeKxXQLeDXR++/sazK6G3+kevpcua6+6tLLs+4qVWn55 Fxh89EbHrnKlXWMH+EAciX0sVtpf/yeNqN8+1iq6zzXQ/U531ZHaPa1z8qp9DzM58PKuJnrV SvccK9VvwE+h/p3crqeWRrX5X8zRH19J/XVqupvoqUbLFeun/+lAR2X6y0fp04TB6enC4PT8 QPcVLpxL4wq5idx1iFkorcMxit4TLcsVv+9M9yWxlf1/coAQKf5vkEETS98g8wYiCGB/l47Q 8yxeIeLLpY433EOyNW0hmVKXxJWTVp53JzKmsy0kAVkxDCFprhoXqSTJg2WCJaDRSRVJUsKR ttEM4TpLNDM1yQM4oZvDl4WKX2vHPB0D0EI3MAN1/DgxayIHKON835g4Prly6qjDp4QPD49Y dm7nw/F/X9DZ5veFpo09gFdKJ8sQhlFO3Bd03xd3FU/IO3+kfpJ72laN+yVTiQSNWn4nNZKd xUl9mLm5aX4aH7Eg93Gbg4+fhsYGPk9nNqT5arxFtszHNb+psVLX0GzEI0yaJ2pDrsJHWlqr a7Ea0sI0ISLD1cfXzuDzDI30CEIPQmkRmjCxmvXxd1TTU5ZVV28Wn3fzcjXhAe6ajLR0zQgN TXMD3NPEYkZ6xsiskVlzNSUDjJ1Vkhag8bP374EnQWMJnp2S+ckN+tS0JE2CvaOo/graFV/S 31cJnjfxsdUidtpGogZ6hUiAbSOegHwF00YIbHtz59aDh/gnFbfc8fiqpjNPFf34xYue+2p0 e7dUhX7y3IU3M3bcrrmjbOmaIws/G/Ww5753Ty36qeXRpabsfeuedH+29mzdvW/uLU7ZMem6 c09/eMP8EGbTr+qF4VvPb9n4aPDrzNFbpxYf86g4pQ1dusf985zXnvpi1d75Ny9IS2XvX+7z 2ET+rTSL+5yUQ4tGZNznfb/3ns9r1duPH3upfU3iy3dGrqree1vZHFPTvuztsatueFPpl73p 9m9LX1Q0HOh7Zcpne2ReG6KWHBkX9274olOb0t748XhU0JEDuybmbQye3xne0XPjue+X/HjL jkpy97lprp+/EzX7sfsOPbG6+Ynvn3X/uWfax50Xazuf8B27a9WLzzEsBv6W5Uc0yz/SjJDK MWIlEhkhXLwmVhPdX9aQlYGOo4JJbzGn4sndKB5mxbMCjZ0wH0IETq6R4o0hoMkVeRHcGE2m ZlTniM70lRpHc31jnVNrtT1WBoZKXm4qStFIDYvh3DSKfitYucZDZHqKfYmvYkrRQix7cRiZ W4M0Af3xzfq4lZbkYqBlpqSljMy4YlWwy5fDlIUXvi17KT807Y7W+5PW72t7nBwOnXrI1l7W 8IU8YcuNr7+5zucEV+z+w8Q4NWTaet5YV7Txg6hKv/M5oyOnm9OW/Xhn5qpdJ09ugL63Z60v in5vW1zRzU88o8v9OfGtE298fONnzyWtGLf7od0fH50jvPDUK0vPve328JkNfUnvjy0OCcmM O58zBdewoGljTjjWsfs3SWc++ChhdWC6xOXGjc2rr1zH/5WV8fvlqMkcuBznDLNTtSbF3mns v+pUrDM0/ssluXNG/KTP3q+9+fbA/OqmG5Ye6N6kjxWuy3twiVemMmaW5eOmOGNv0R5+3vuK C50hiadnzY7UfRR+pOf5jIWv/fDZltGGtSHr3J4uCZ+3pHrkfEl7QV9z0RclyzYv5x96YvW8 zfLzX2sufB81eup4xVtfvBpx4PCsb5bn7C7ekryd3PzT5u13jezbdPyGBZJN1y08tm/9/r6D FRe0J2Sd+d8tn9nwSOJPT7cr40/f/am0c+WMjYunyN01YW8qH154/puyJ7ht2vt3xp+82//x 7GMlpsL3Rz6021QVtmt98nPXnWj9rv7mC/7HY//25A/3lzyjTb6vu3V73wfFOxKsS8efygrf vMD/ePlz0bUfwbI85aplCx1L8k3N8tf+4JJ0u7QkGTw6ZtgXY7ImURPfGdsZvTLqaovRavm/ as4zrIlsjeMJCR0WCUWqJoCooDCBYFBCE6Qs0kJVikAIUhQivaiQgFSpShchIB0pIkVBITSp igVcgQV3aRZEqYoI3ARQ2VXv3i9799lPeWZOZuacOe/7O///e/LEYz/Odj39eNfTj3aL/5KB DI3/Uwai/pyBtFkO8yUM6GHBcIvnfh0koGXlFn/SnXhQ852enrb5n35ZW9JtlLUDOFsXPAWf JAyfuALnqjh75K5BT/Bk0Pbg/N2XTnJpLHfWpqhCutMNLeijAgvc5gQNBMWkZp2iT4m8r+vk TXzD5tno6PPsdapdGMUj7kOEp79ocU5KQHLF+9i9Z3SlvAS1VAfeVbHDjft9spJJOKcV5geR 77zqmNOfLXGaiKfZytz1pysPCL2b3Rwlss/3oZx3fYKH5dKtiaM8LKLdY4+eoKS0VXgwHDb+ Ym25Dm+THhBeK03Os58feng2x/uME+WKviYgh6jILhOww0g+iymSYAz4ha/SMuD3jFy3VUzE dYAEhVER8HEDARwgCigKgwnnfKi0iJsaUdn6xqBUAhA+5zYrl4iaG8HPnVZbhe/B7YUjDx5E w78UT9eLsFLIHYDQxpd5/tiyWZ5FIoCdG9PE97Ud6+bmCVf18nR0c3fy9KPh4SAaQCIBAL2J BxkAKSOL3Dz8B3r0l0s53R0KYUJhVk9wT2ayrzXwKrsweteJD6uJR3NqVjOy4UpnDbPTs2Nt ZFweHrb3my7x7jAemH19JVQoNjPEobLVxd9OtF8YM8wBTniR1NKw3yEtzVE8tffQvga2KnNx isYki5J80r7CPQcLprSDD4+GcNSlnTKxLSGdJdvs9zn6MvWmvUKagRCSSYw7s3AyXpJvQjEF x21jTo/PFEZjw97nv71M1yb4uMHkSGVEUMOhKePLeqUr+f6nPfXK+LqTmPcgQGZxNk7oOh0Y I8Z0zWL5mgMLU94joqnZ22oFa16iD3Rg8W5pUOJqeU9gf76AuyWms/4dU44IUMlwoaMS7sN1 YWSTGwUAMRcgZtPyEgwlpgHE5KBtFr2Et07uV0UNz3Pf0I1Z6yK7///nj/QXMb5OhcQXrI3R c8l8cm9qwWK/+HDOWdrIZF5l7VKijw+P7Tg0gZh9Z3ZpX1WWZrvd209PuxUUjhceMHZaFTut 3NFdNEx/9ldktGLmNoJz3SpMn8+p8VOv2ijncbj+K7uAsiL+dkn0rv138WRY5C4OXM57Y6El REc/zxy2xFVNhnGFtP3D+MlT7IaLd2aw9+5MtgCf4EjmcOHEvQK6fcJ0uTNBzyE3LeYrfm03 m8Zr38MaV9+E7IGtxfW/Y4o9X5vcWozeN+Y/VuAz6p0F6nVWpjw6EPlcFVYg5yzoPCj32xMh 6FjBEWj7cVl5V10hdrsaluyLj/uMlTV6hEzyCIOwQ2GXvDLzH2VRqdBMFQdlm8LAmTVVvxEk XMw50EJHdth9+7NJEP6nkAAcoOoFFBKNQiFRNAFPRbzMgc9IIOb9UTJwAZwbdoPFzNbDkSoF PKnP2ba+hFDNBiMWb3/azdX+c89YftSzHw1ThvrQb4YpCiA2hiGwtcUevy4+aGrEYN0UwL8l CTuNJEzrJGnuhkfXj6wpGUz7Nz0R27XofR+x1iNhqtd5pYZ0Q85vP6ilgKkP11GTu/iSQumv uJiUzfiRo5qETXtNaruzrbWgcdolJMZIsM7goz04gsL7hOQIUvFVX4DJ6y3jDJ9/VLw1jq4Y wTGKKpxRQWnOu5RqLOz22CHSdZh/h2E1Nu1xTi9XG7/yGYbTs4kI9ROH3zR2pNrDaymoT9nq EwE3hKVr84bnySPpCI5Vc6Sqifz5MvPJsaljfruK30tIcyrL+yodDsx3HDsv4rh94ueEFl91 rCZZPyTiUnrjyYBXzMuhkHOLqWcwkvkOKd0j+3+XpBPgQGnhFzCwspkwIWFxrFs3NfYgOSSw BPV9iH9Ph0P+HXiBMTBvGnAeKl/oIBAQdN2iCv8E5YVy7/ogqWPV7m58fXwxS2I77zJlyYgI 8H+5hJsOyraDBWQE8qLadTWQKsC6LnzWfYcGwPFFYNEDEOrHlrxcxxhu9PkcfW35K1ZW1EMS UinC7kgfU/6SLb5dCvJRXkv1QdXs7uDHo62mRgVV/Pe7J2aylkyrtS5rio0X7hzyf7LI6w8b nIsTnGKyqrwQd+uieZ1Qd+LjxMuy8/HDa+Hp1jraBgfFD8EFjdGfzlnyXGoeEop5Z4vFjDO+ cXjrNxV73wyHT+TTzvIfwdeMiJeutsOq27K7205EEeY6B4tJroxDeP5bBYuhTcyHU2bES5z8 KyiS+eUOO3PLwphckrlqyw+k7qDP4ZLPaSwBlG4jngJ5nXYwoTKz6PEZf87b1hg29MwlSkK4 HvQ4veW9B/2Fz347F++7e/mma24sg6x5hbUEJwdAopelokxwA2MsthpXu2i/Xwfhv6lQ/FuQ 8ZV9B1GyqAM0t4SmaiPqoRztEPD8W8ax2Q75QftfSqIeYpJ8qWX2LGVkuLc4Mbofk7Ezqtkq VMrqXYX7QnFJuHPVQIVIAGt7e65OvLUI18ulBdGMqnlX79K309cw91oaj1kqF1d6yIrn2RFt /ch2867hib2uv97LfHTNkNPb9jYhEk9O4o3ItyL2qjuMD5peVen8NOQtJqUOgMb7zwUkcvaZ C+e80GftCB/K7jdKPdWJ60x1TkuwPqrL+UL6sYWF9Qlsjsf+3LqQI+wX+Xm8u5gG0vIIPC90 p5xWrG64xL7Za4iWj2rT0Oa5bJBSPu947ekw85mTnld9LgpfcEl+NXniSPfziTPsD3GgSwHI lBjWm1x3KnunZ0YQ04U2ttNoNcXmDUlEAidQ30jMN97lKwymn7kUehn16E8L6vEz7Mi5Uvzg 8soPyFdIOysKJZIB4tWg71KE7Hntn+Dft2JBZ8P4qQOHAZUspSxM6KEtxu/05/usOz+CixPt rPTmNrmHNC0BaPFPjX2ZdUOov8WJqgGqgPIXJ0oXKrt1H/nb++Ldv72h5/c8ofyzt4ny6ZYp 3FbGrk4jdO2TlcuPm3SvSxcHGrMPyFR/cJ5gX0YI+CjlOvrfTDwfaTmr1hKcjj8XbmB4lsS9 EOzxNPuuZScd4b74qe31WO7ciMaaMXI32Ssj/oyiYKMpyLTqQ4j4gLXscv8uf+u0gbzl+VlV gRITjetaQ/HyXObM2jNzyLCd9dAYCxge8pLVsJfMFpl65xmloJeJZxeiqtosQuihRahcbudK UdhUIVq5Rs1lFD5zpP586csZkxtkrXr8XSPUs44XDDgog6+rwZpWXforteNhg9dZghaOte4b Gw+0+Hlcxm9a5EIC2/5KA4u2JhVz8+JHPaPSlJ6p05loPyQJ2kXF5j06MBggVv1r4PgHwH8t Y2cRXwDcXxbUPWAkI4R+vdhOW2Y3p54ZgmTbWjmndv3rESvyJ2BrKw8g+vVCKJKat+LDO4x6 PpqDL+59oiWNVsd1rt06CrhvuYQNaQ/YZckHHfjOzjscpPFlr+UHu+5k8SCxH8a255ffIP1Z TUJJYFDntjn37aVdn/yqUstFdCQzUrrD06+D5wMdBYo4ZKsQfc67Y5uU9ZInSnj9elBV0ayN kIOziWKzEOljxBDHOGzYITfD0ZS85tsoC0Vc27KUkbyvCqZU7+NzxqKu15Sy7AcLmgZXw2GY zGRESG+60ZS5vIowOFFUgZNrdUo7g+1JfcPL1E7B4Jr7UYQTs2cX9VlYG3hPDSJE7Psk0YYa JVOaQwnyjdsqigk98WkRNTsf/RwOdFbPNVi8Zmax1w4GTbOMNwu2Ru+cTlEOVJC8L6n72stk 4P6BMWZheKbSrKUVJIKJP4Dg1GmoWEgcPtZYHslf66zfzr0SlZJUc7qPvh4FJZOosogEXv46 YwxIEniKeuoFLbxP/i1Fze+UUtkYmDY6QEelTNYxgG9r7LF+3doBU0PvSws9koO23lMXeBkZ 2n8EoI5T+bsl9GDQbXqpIjVVwxKRQjbA2NJqUv93QsDFSF3rea+UWteKlatuX9qbwy1XFGpM xX2P2tgX6ey+UGVytI9HLSTjI0HVX1OzZTTqcevttTdNj+6tmYGDfSteDiICnVC3VaXzlfxv ymXQX2mp1eNGg8JeKsQUeTlIwryxJqQU6Xs4phsN2Kbhu+9YyCtNdHPzYgMVarYDDBC3VZ2U qzPBZfXoG3C1zOqJ0YaWSTTQor1ydu+siMcIkHldYrIvlA9ZA2+NaDJQU3yFlz3kbAxS0iyK lEg1EgRyX9nbuuWZ1ORJIjhKdIafrgUz5O70ydK9sqArUAXZ/nDJZ3t73LYLyhUn70fkY3Gi q8sHj2dYBQEPjBWny2vmggeH4v4DbgaIGw0KZW5kc3RyZWFtDQplbmRvYmoNCjE1MjQgMCBv YmoNClsgMFsgNjAwXSAgM1sgMjUwXSAgMTY0WyA3OTBdIF0gDQplbmRvYmoNCjE1MjUgMCBv YmoNCjw8L1R5cGUvWFJlZi9TaXplIDE1MjUvV1sgMSA0IDJdIC9Sb290IDEgMCBSL0luZm8g MTE1IDAgUi9JRFs8QTY3NjQyNkFENzM5NjA0MjhDM0VERDhBRENCRTU4NDU+PEE2NzY0MjZB RDczOTYwNDI4QzNFREQ4QURDQkU1ODQ1Pl0gL0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGgg MzA2Mz4+DQpzdHJlYW0NCnicNdp1vBRlH8bhc8MRCQGx9bUVW1GwO7ATsTFQsEGxsLCwGwUB uwsDFRE7QUBsFEHF7g6wlXfOcw38wfV5DmfZ3ZnZ/c5vdxoaqj+zZqX6u0NDQxOXF9Kt0OyO QuuehTbt8W9hrs74otB2WqHdgEL7/Qpzz4FvCx0Ow3mFeZbA4YV53aDjIoXllyn0W71wnNsd f3Nh0B64pHDFglgL7xeuXK4weAU8iimFIQPxcuGqyYWhFxeGnVsY/l/hfnc7cn48X3jg6MKD i2Ji4aH+hVEe9ag3Cg+fURi9Kj4sPHJZYcy4wvid8QpspQkexITXChPHFF7qUZjkcb7ftzB9 cOFX+2HGXk2k5bBCq6cKS/xYWKo8h6xmtXrZ8unapbBlr8LeZWNlH/9Ln1aFvp0KA4cUzh5b GHZDYfiswl0b4OvC3e59xFaYWbjnfNxeuLc7ri/cN6Iw0r2/MKgwtgfcfFzZR3lxaGF8OTAz oQNeLEw8sTCpofD2P4UpZY/lnQsKUz2kqV8Vpj1dePeiwnvr4bfC9DaFDzYufHhI4adXCzNW Qp/CzNbVK6ShobF/DscROBKHVTSc2bAyWqAZ6tv1afpf+pVV9cNgDjRHI9qgJeZEa7TC3GiL udAe7bAA5kEHzI95MR8Ww0JYEItiYSyC/2FZLIHFsTSWxFJYBithOXTEilgeK2AVrIrV0MkW 7Gu1eiHdrdZGZ6yBNdEFa2FDrIt1sD7WwwbYHBtjI2yKTbAZtkFXbIGtsCW2xk7YDttiB2yP HbEbdsHO2BXdUD/3fbAHdsde2BN7oyf2RQ/sj/1wAA7BQTgQvdELB6MP6kP/UByBw3EkjsVR qHdjPxyNY3ASjsdx6I8TcCJOxyk4GQNwKk7DOTgTZ2AgzsLZuAjn4VxcgPNxIQbhElyMy3Ap LsdQXIkrMASDcRWuw3AMwzW4GtfiFtyA63ETbsTNuAu34VbcgdtxJ+7HCNyNe3EP7sPDeAAj 8RAexCg8jkcwGo9iDB7Ds3gST+BpPIVn8CKex3MYixcwDi9jAsbjJUzEJLyJV/EKXsdreANT 8RYmYwrexjv4AO9iGt7He5iOz/ARPsQn+Bif4ht8gc/xFb7E1/gJ3+Fb/IDv8SN+wy/4GTPw K2biH/yB3/EX/sTfhdQdm4V/8Z9/E8XIYGQw+heNi3xGGyODkcHoX/QvwhfBjPBFFKOGkcHI YGQwwhcZjChG8SKDkcEIX2Qw+hepi/BFPiN8EcXoX1Qtghk1jAxGBqN/kbooZbQxahinFRHF iFvqDHaC/kX/InwRt0hkZDD6F/2L8EXcIpGRwehf9C/CF3GLREYGo3/RvwhfxC0SGRmM/kX/ InwRt0hkZDD6F/2L8EUbI3URvghYxC3ilqb+VecMmhNRjBpGN6N/Eb5oXDQu+hfdjAxG+NKU yGYDyulPxeKoj4JDreoDRfiihvVJYkQxSlmf1ERMo4azH7UoRimjVdHGaGO0MdoY+YxERhuj jdG/6F+0MUoZ3YymRtwiilHKqGHENGoYpYwoRikjfFHDSGSkNUoZiYxWRRujjdHGaGPkMxIZ bYw2Rv+if9HGKGV0M5oacYsoRimjhhHTqGGUMqIYpYzwRQ0jkZHWKGUkMloVbYw2RhujjZHP SGS0MdoY/Yv+RRujlNHNaGrELaIYpYwaRkyjhlHKiGKUMsIXNYxERlqjlJHIaFW0MdoYbYw2 Rj4jkdHGaGP0L/oXbYxSRjejqRG3iGKUMmoYMY0aRikjilHKCF/UMBIZaY1SpimR1Wuz7oo2 RhujjdHGyGckMtqYn928Ec1RB+xXq2pSbNa2a5nxqlUzLIKWaIE50Qat0BrtMBfaogPaY24s jHmwEObFApgP82NBLIpVsDKWxFJYGstgWayAjlgOy2NFrIRVsRo6Yw2sjk7ogqaqVe/XR1ut hbWxDtbFelgfG2BDbISNsQk2xWbYHFugK7bDltgGW2FrbIvtsQN2xE7YGbugG3b1xPpZdcdu 2B17YE8ch32wN/bCQdgXPbA/9kNPHIADcQR6oxfqjh2Mw1AH7HAciz44EkehL+onVu+4Y3Ai +uMEHG9L1L9yKk7ByTjJr9R3ew/OxmkYgDNwOs7CmRiIC3EOzsO5OB8X4ApcjItwKS7B5bgM g3A1BuNKXIUhGIahGI6bcS2uwfW4DjfiBtyEEbgVt+AO3IbbcRfuxN14F6NwH+7FSNyPB/EA HsJjeBiPYDTG4FE8hyfwOJ7Ck3gGT+NZTMQLeB7jMBbj8SIm4A1Mwkt4BS/jNbyK1zENk/Em 3sZbeAdTMBXvFVK/m36A6XjfIVy/ir/AR/gQn+BjfIZP8Tl+wFeoy/UNvsZ3+Bbf4zf8hB/x C+qAzUCdrJn4D3/gd/yFP/EP/sa/NoGcpS7eLCvhK8NdhWBGMMtUV6FxEcWoYfQvahj9i0RG BqNq0b+oYfQvEhnFiwxG+MrkVqHF0c0y6lW76nirNaF4ZaqrUMo4149z/UhkBDNKGRWNNkYw o41RykhkVDRKGf2LYEaSo42Rz+hmdDNiGoksw131HLzFRp2ifxHMyGcEM/IZwYx8RjcjgxHM yGdkMPIZ+Yx8Rj6jm9HNCGYEM0oZ7YhERjAjnxG+CGbkM0pZZsMKpYxuRjCjcZHISGREMfIZ UYxgRimjhtHGCGY91UVhI5ERzEhkJLKe8SKR9RlLRDGiWMa5aq/oX1Qmolj3rz4hqN8n6uLN 3o31EVnfXOoikWXGq5DPyGe0MdoYUYzGRRujjRHTSGTUMBIZiYxuRnqif9HGaGPELWoYpYwo RimjhpHWSGQ0LmoYpYyKRikjkdHGaGNEMYoX+Ywolimy2tb11lXDyGBEsYx61a/Um040InVR yihlFDaCGW2M85AIZoQv2hjdjERGNyOREdpIZKQuEhnBjDZGWqON0c0IZhQvEhndjERGaKOU UcooZRnnGvvXA0cUL9oYoY02RjejjdHNCGYkMtoYoY1ERjejlFHKKGWUMhqXOphOQKKUZcar EMWoaJQyGhdRjGBGGyOY9TgXhY1S1kNaRDGCGW2MYEYUo7Bl1Ku2Up0lUSwTX/XDoGmq69iy wfd4ZfCraIZGzOkAO9lqRbRHK7REG7RGW8yFdlgQHTA35sU8mB/zYQEsgYUhbuWTqIpFsBgW xeJYAUtjSSyFZbEMlkNHLI+VsDJWwapYDb7AK4NfxRrojC4w/5XBr6Ku2ilW62BdrIf1sQE2 xEbYGJtgU2yGzbENtsBW6IotsTV2wrbYAdthe+yI3bAzDH5lGqzohu7YB7tjL+wBn1yWwa+i B/bFftjf5jnV6gD0xIE4BgehF3rjYByCQ3EYfL3d4OvtBl9vN8hZmfEq+uIo9MOJOBYn4DgY /Mo0WHEajHoN9XOoXzn1Dh+As3E6zsIZOBMDcSHOwfk4F+fhAlyOi3ApLsYluAxXYxAG4wpc iSEYhqswFMNxDa7FdbgeN0DAyoxXcQdutovrLXEbboGclVGv4k7chftxN+7FCNyD+zASo/EA RuFBPISH8QQewWMYg0fxOJ7Dk3gGT+FpPIvxeB7j8ALGou7YK5iASZiIl/AyXsVrtmB9uL2O N/zQIZX6FfA2JuNNvIX38A6mYBqm4l18jOkwBpaJr+IDfIQv8Sk+wef4DF/ge3yNr/AtvsF3 +BU/4gf8jLpxddX+xEzMwO/4DX9gFv7GX/gX/+A/G3IOCGbqK16UMkoZpYz+pQ5mC0hkJDLa GP2LREYio6lRymhjBDMSGYmMREYiI5HRv0jk7PlPIiOR0cYoXjQ1ShlRjERGMKP2EcUIZrQx ghmFTX0di1JGN6OU0c0IZmQwShndjFJGN1N/YKp/kcjZ06BERjCjlNG/SGQEMxIZwYxSRvii jRHMiGIkMoIZ4Ys2RlMjipHICGaEL9oYTY0oRiJTf1IqfNHGaOrsr/MkMoIZ4YtERlMjkRHM 1KVUvGhjlDKiGImMNubQ6ujd9NZyzrf5Fk0071kuQ2t+4B+FXuUauua9BzXReEC5OqyxZ7ms r/GgcrVdY68dmphjp+cKu+xY6HZLYdfRhe6fNNGi03WFNVoUOpfL5Vp0KdfQtehd3eD/IK7J vQ0KZW5kc3RyZWFtDQplbmRvYmoNCnhyZWYNCjAgMTUyNg0KMDAwMDAwMDExOSA2NTUzNSBm DQowMDAwMDAwMDE3IDAwMDAwIG4NCjAwMDAwMDAxNDMgMDAwMDAgbg0KMDAwMDAwMDMzNyAw MDAwMCBuDQowMDAwMDAwNjc4IDAwMDAwIG4NCjAwMDAwMDI2NTYgMDAwMDAgbg0KMDAwMDAw MjgzMSAwMDAwMCBuDQowMDAwMDAzMDY5IDAwMDAwIG4NCjAwMDAwMDMxMjIgMDAwMDAgbg0K MDAwMDAwMzMwMiAwMDAwMCBuDQowMDAwMDAzNTQ1IDAwMDAwIG4NCjAwMDAwMDM3MDggMDAw MDAgbg0KMDAwMDAwMzkzMyAwMDAwMCBuDQowMDAwMDA0MTAxIDAwMDAwIG4NCjAwMDAwMDQz MzEgMDAwMDAgbg0KMDAwMDAwNDQ1NiAwMDAwMCBuDQowMDAwMDA0NDg2IDAwMDAwIG4NCjAw MDAwMDQ2MzkgMDAwMDAgbg0KMDAwMDAwNDcxMyAwMDAwMCBuDQowMDAwMDA0OTU3IDAwMDAw IG4NCjAwMDAwMDk0OTggMDAwMDAgbg0KMDAwMDAxMDAxOSAwMDAwMCBuDQowMDAwMDI4NzIw IDAwMDAwIG4NCjAwMDAwMjk1NDQgMDAwMDAgbg0KMDAwMDAyOTg1NyAwMDAwMCBuDQowMDAw MDM2OTUwIDAwMDAwIG4NCjAwMDAwMzcwMDQgMDAwMDAgbg0KMDAwMDAzNzE0MyAwMDAwMCBu DQowMDAwMDM3MTczIDAwMDAwIG4NCjAwMDAwMzczNDAgMDAwMDAgbg0KMDAwMDAzNzQxNCAw MDAwMCBuDQowMDAwMDM3NjcyIDAwMDAwIG4NCjAwMDAwMzc4MTYgMDAwMDAgbg0KMDAwMDAz Nzg0NiAwMDAwMCBuDQowMDAwMDM4MDE4IDAwMDAwIG4NCjAwMDAwMzgwOTIgMDAwMDAgbg0K MDAwMDAzODM1NSAwMDAwMCBuDQowMDAwMDM4NTM5IDAwMDAwIG4NCjAwMDAwMzg3ODkgMDAw MDAgbg0KMDAwMDAzOTE2NiAwMDAwMCBuDQowMDAwMDQ0NjQ4IDAwMDAwIG4NCjAwMDAwNDQ4 MjEgMDAwMDAgbg0KMDAwMDA0NDk5NCAwMDAwMCBuDQowMDAwMDQ1MTY3IDAwMDAwIG4NCjAw MDAwNDUzNDAgMDAwMDAgbg0KMDAwMDA0NTUxMyAwMDAwMCBuDQowMDAwMDQ1Njg2IDAwMDAw IG4NCjAwMDAwNDU4NTkgMDAwMDAgbg0KMDAwMDA0NjAzMyAwMDAwMCBuDQowMDAwMDQ2MjA3 IDAwMDAwIG4NCjAwMDAwNDYzODEgMDAwMDAgbg0KMDAwMDA0NjU1OSAwMDAwMCBuDQowMDAw MDQ2NzM0IDAwMDAwIG4NCjAwMDAwNDcwNDUgMDAwMDAgbg0KMDAwMDA1MTAyMyAwMDAwMCBu DQowMDAwMDUxMTQ5IDAwMDAwIG4NCjAwMDAwNTExNzkgMDAwMDAgbg0KMDAwMDA1MTMzMyAw MDAwMCBuDQowMDAwMDUxNDA3IDAwMDAwIG4NCjAwMDAwNTE2MzkgMDAwMDAgbg0KMDAwMDA1 MTgwMyAwMDAwMCBuDQowMDAwMDUyMTA3IDAwMDAwIG4NCjAwMDAwNTY0MjkgMDAwMDAgbg0K MDAwMDA1NjcyMyAwMDAwMCBuDQowMDAwMDYyMjU4IDAwMDAwIG4NCjAwMDAwNjI1NTIgMDAw MDAgbg0KMDAwMDA2NzczNSAwMDAwMCBuDQowMDAwMDY4MDI5IDAwMDAwIG4NCjAwMDAwNzM3 MTEgMDAwMDAgbg0KMDAwMDA3NDAwNSAwMDAwMCBuDQowMDAwMDc3NTUxIDAwMDAwIG4NCjAw MDAwNzc4NTUgMDAwMDAgbg0KMDAwMDA4Mjk5NSAwMDAwMCBuDQowMDAwMDgzMjk5IDAwMDAw IG4NCjAwMDAwODgzNjAgMDAwMDAgbg0KMDAwMDA4ODY2NCAwMDAwMCBuDQowMDAwMDkzMTkz IDAwMDAwIG4NCjAwMDAwOTM0ODcgMDAwMDAgbg0KMDAwMDA5ODk2NCAwMDAwMCBuDQowMDAw MDk5MjY4IDAwMDAwIG4NCjAwMDAxMDQzNTAgMDAwMDAgbg0KMDAwMDEwNDcwMyAwMDAwMCBu DQowMDAwMTA4NjAzIDAwMDAwIG4NCjAwMDAxMDg3NzcgMDAwMDAgbg0KMDAwMDEwODk1MSAw MDAwMCBuDQowMDAwMTA5MTI2IDAwMDAwIG4NCjAwMDAxMDkzMDEgMDAwMDAgbg0KMDAwMDEw OTQ0NyAwMDAwMCBuDQowMDAwMTA5NDc3IDAwMDAwIG4NCjAwMDAxMDk2NTEgMDAwMDAgbg0K MDAwMDEwOTcyNSAwMDAwMCBuDQowMDAwMTA5OTk0IDAwMDAwIG4NCjAwMDAxMTAzNzYgMDAw MDAgbg0KMDAwMDExNTYwMCAwMDAwMCBuDQowMDAwMTE1ODAzIDAwMDAwIG4NCjAwMDAxMTU5 NTcgMDAwMDAgbg0KMDAwMDExNjE3OSAwMDAwMCBuDQowMDAwMTE2Mzc0IDAwMDAwIG4NCjAw MDAxMTY1NjEgMDAwMDAgbg0KMDAwMDExNjc1MyAwMDAwMCBuDQowMDAwMTE2OTM0IDAwMDAw IG4NCjAwMDAxMTcxMTEgMDAwMDAgbg0KMDAwMDExNzUwNCAwMDAwMCBuDQowMDAwMTIwMzE2 IDAwMDAwIG4NCjAwMDAxMjA1MTQgMDAwMDAgbg0KMDAwMDEyMDcxMiAwMDAwMCBuDQowMDAw MTIwOTAyIDAwMDAwIG4NCjAwMDAxMjEwNjQgMDAwMDAgbg0KMDAwMDEyMTI3OCAwMDAwMCBu DQowMDAwMTIxNDgyIDAwMDAwIG4NCjAwMDAxMjE2NTcgMDAwMDAgbg0KMDAwMDEyMTg0NiAw MDAwMCBuDQowMDAwMTIyMTIzIDAwMDAwIG4NCjAwMDAxMjI0MzAgMDAwMDAgbg0KMDAwMDEy MjcyNiAwMDAwMCBuDQowMDAwMTI3MTgyIDAwMDAwIG4NCjAwMDAxMjgwNDIgMDAwMDAgbg0K MDAwMDEyODEwOCAwMDAwMCBuDQowMDAwMTI4MjY2IDAwMDAwIG4NCjAwMDAwMDAxMjAgNjU1 MzUgZg0KMDAwMDAwMDEyMSA2NTUzNSBmDQowMDAwMDAwMTIyIDY1NTM1IGYNCjAwMDAwMDAx MjMgNjU1MzUgZg0KMDAwMDAwMDEyNCA2NTUzNSBmDQowMDAwMDAwMTI1IDY1NTM1IGYNCjAw MDAwMDAxMjYgNjU1MzUgZg0KMDAwMDAwMDEyNyA2NTUzNSBmDQowMDAwMDAwMTI4IDY1NTM1 IGYNCjAwMDAwMDAxMjkgNjU1MzUgZg0KMDAwMDAwMDEzMCA2NTUzNSBmDQowMDAwMDAwMTMx IDY1NTM1IGYNCjAwMDAwMDAxMzIgNjU1MzUgZg0KMDAwMDAwMDEzMyA2NTUzNSBmDQowMDAw MDAwMTM0IDY1NTM1IGYNCjAwMDAwMDAxMzUgNjU1MzUgZg0KMDAwMDAwMDEzNiA2NTUzNSBm DQowMDAwMDAwMTM3IDY1NTM1IGYNCjAwMDAwMDAxMzggNjU1MzUgZg0KMDAwMDAwMDEzOSA2 NTUzNSBmDQowMDAwMDAwMTQwIDY1NTM1IGYNCjAwMDAwMDAxNDEgNjU1MzUgZg0KMDAwMDAw MDE0MiA2NTUzNSBmDQowMDAwMDAwMTQzIDY1NTM1IGYNCjAwMDAwMDAxNDQgNjU1MzUgZg0K MDAwMDAwMDE0NSA2NTUzNSBmDQowMDAwMDAwMTQ2IDY1NTM1IGYNCjAwMDAwMDAxNDcgNjU1 MzUgZg0KMDAwMDAwMDE0OCA2NTUzNSBmDQowMDAwMDAwMTQ5IDY1NTM1IGYNCjAwMDAwMDAx NTAgNjU1MzUgZg0KMDAwMDAwMDE1MSA2NTUzNSBmDQowMDAwMDAwMTUyIDY1NTM1IGYNCjAw MDAwMDAxNTMgNjU1MzUgZg0KMDAwMDAwMDE1NCA2NTUzNSBmDQowMDAwMDAwMTU1IDY1NTM1 IGYNCjAwMDAwMDAxNTYgNjU1MzUgZg0KMDAwMDAwMDE1NyA2NTUzNSBmDQowMDAwMDAwMTU4 IDY1NTM1IGYNCjAwMDAwMDAxNTkgNjU1MzUgZg0KMDAwMDAwMDE2MCA2NTUzNSBmDQowMDAw MDAwMTYxIDY1NTM1IGYNCjAwMDAwMDAxNjIgNjU1MzUgZg0KMDAwMDAwMDE2MyA2NTUzNSBm DQowMDAwMDAwMTY0IDY1NTM1IGYNCjAwMDAwMDAxNjUgNjU1MzUgZg0KMDAwMDAwMDE2NiA2 NTUzNSBmDQowMDAwMDAwMTY3IDY1NTM1IGYNCjAwMDAwMDAxNjggNjU1MzUgZg0KMDAwMDAw MDE2OSA2NTUzNSBmDQowMDAwMDAwMTcwIDY1NTM1IGYNCjAwMDAwMDAxNzEgNjU1MzUgZg0K MDAwMDAwMDE3MiA2NTUzNSBmDQowMDAwMDAwMTczIDY1NTM1IGYNCjAwMDAwMDAxNzQgNjU1 MzUgZg0KMDAwMDAwMDE3NSA2NTUzNSBmDQowMDAwMDAwMTc2IDY1NTM1IGYNCjAwMDAwMDAx NzcgNjU1MzUgZg0KMDAwMDAwMDE3OCA2NTUzNSBmDQowMDAwMDAwMTc5IDY1NTM1IGYNCjAw MDAwMDAxODAgNjU1MzUgZg0KMDAwMDAwMDE4MSA2NTUzNSBmDQowMDAwMDAwMTgyIDY1NTM1 IGYNCjAwMDAwMDAxODMgNjU1MzUgZg0KMDAwMDAwMDE4NCA2NTUzNSBmDQowMDAwMDAwMTg1 IDY1NTM1IGYNCjAwMDAwMDAxODYgNjU1MzUgZg0KMDAwMDAwMDE4NyA2NTUzNSBmDQowMDAw MDAwMTg4IDY1NTM1IGYNCjAwMDAwMDAxODkgNjU1MzUgZg0KMDAwMDAwMDE5MCA2NTUzNSBm DQowMDAwMDAwMTkxIDY1NTM1IGYNCjAwMDAwMDAxOTIgNjU1MzUgZg0KMDAwMDAwMDE5MyA2 NTUzNSBmDQowMDAwMDAwMTk0IDY1NTM1IGYNCjAwMDAwMDAxOTUgNjU1MzUgZg0KMDAwMDAw MDE5NiA2NTUzNSBmDQowMDAwMDAwMTk3IDY1NTM1IGYNCjAwMDAwMDAxOTggNjU1MzUgZg0K MDAwMDAwMDE5OSA2NTUzNSBmDQowMDAwMDAwMjAwIDY1NTM1IGYNCjAwMDAwMDAyMDEgNjU1 MzUgZg0KMDAwMDAwMDIwMiA2NTUzNSBmDQowMDAwMDAwMjAzIDY1NTM1IGYNCjAwMDAwMDAy MDQgNjU1MzUgZg0KMDAwMDAwMDIwNSA2NTUzNSBmDQowMDAwMDAwMjA2IDY1NTM1IGYNCjAw MDAwMDAyMDcgNjU1MzUgZg0KMDAwMDAwMDIwOCA2NTUzNSBmDQowMDAwMDAwMjA5IDY1NTM1 IGYNCjAwMDAwMDAyMTAgNjU1MzUgZg0KMDAwMDAwMDIxMSA2NTUzNSBmDQowMDAwMDAwMjEy IDY1NTM1IGYNCjAwMDAwMDAyMTMgNjU1MzUgZg0KMDAwMDAwMDIxNCA2NTUzNSBmDQowMDAw MDAwMjE1IDY1NTM1IGYNCjAwMDAwMDAyMTYgNjU1MzUgZg0KMDAwMDAwMDIxNyA2NTUzNSBm DQowMDAwMDAwMjE4IDY1NTM1IGYNCjAwMDAwMDAyMTkgNjU1MzUgZg0KMDAwMDAwMDIyMCA2 NTUzNSBmDQowMDAwMDAwMjIxIDY1NTM1IGYNCjAwMDAwMDAyMjIgNjU1MzUgZg0KMDAwMDAw MDIyMyA2NTUzNSBmDQowMDAwMDAwMjI0IDY1NTM1IGYNCjAwMDAwMDAyMjUgNjU1MzUgZg0K MDAwMDAwMDIyNiA2NTUzNSBmDQowMDAwMDAwMjI3IDY1NTM1IGYNCjAwMDAwMDAyMjggNjU1 MzUgZg0KMDAwMDAwMDIyOSA2NTUzNSBmDQowMDAwMDAwMjMwIDY1NTM1IGYNCjAwMDAwMDAy MzEgNjU1MzUgZg0KMDAwMDAwMDIzMiA2NTUzNSBmDQowMDAwMDAwMjMzIDY1NTM1IGYNCjAw MDAwMDAyMzQgNjU1MzUgZg0KMDAwMDAwMDIzNSA2NTUzNSBmDQowMDAwMDAwMjM2IDY1NTM1 IGYNCjAwMDAwMDAyMzcgNjU1MzUgZg0KMDAwMDAwMDIzOCA2NTUzNSBmDQowMDAwMDAwMjM5 IDY1NTM1IGYNCjAwMDAwMDAyNDAgNjU1MzUgZg0KMDAwMDAwMDI0MSA2NTUzNSBmDQowMDAw MDAwMjQyIDY1NTM1IGYNCjAwMDAwMDAyNDMgNjU1MzUgZg0KMDAwMDAwMDI0NCA2NTUzNSBm DQowMDAwMDAwMjQ1IDY1NTM1IGYNCjAwMDAwMDAyNDYgNjU1MzUgZg0KMDAwMDAwMDI0NyA2 NTUzNSBmDQowMDAwMDAwMjQ4IDY1NTM1IGYNCjAwMDAwMDAyNDkgNjU1MzUgZg0KMDAwMDAw MDI1MCA2NTUzNSBmDQowMDAwMDAwMjUxIDY1NTM1IGYNCjAwMDAwMDAyNTIgNjU1MzUgZg0K MDAwMDAwMDI1MyA2NTUzNSBmDQowMDAwMDAwMjU0IDY1NTM1IGYNCjAwMDAwMDAyNTUgNjU1 MzUgZg0KMDAwMDAwMDI1NiA2NTUzNSBmDQowMDAwMDAwMjU3IDY1NTM1IGYNCjAwMDAwMDAy NTggNjU1MzUgZg0KMDAwMDAwMDI1OSA2NTUzNSBmDQowMDAwMDAwMjYwIDY1NTM1IGYNCjAw MDAwMDAyNjEgNjU1MzUgZg0KMDAwMDAwMDI2MiA2NTUzNSBmDQowMDAwMDAwMjYzIDY1NTM1 IGYNCjAwMDAwMDAyNjQgNjU1MzUgZg0KMDAwMDAwMDI2NSA2NTUzNSBmDQowMDAwMDAwMjY2 IDY1NTM1IGYNCjAwMDAwMDAyNjcgNjU1MzUgZg0KMDAwMDAwMDI2OCA2NTUzNSBmDQowMDAw MDAwMjY5IDY1NTM1IGYNCjAwMDAwMDAyNzAgNjU1MzUgZg0KMDAwMDAwMDI3MSA2NTUzNSBm DQowMDAwMDAwMjcyIDY1NTM1IGYNCjAwMDAwMDAyNzMgNjU1MzUgZg0KMDAwMDAwMDI3NCA2 NTUzNSBmDQowMDAwMDAwMjc1IDY1NTM1IGYNCjAwMDAwMDAyNzYgNjU1MzUgZg0KMDAwMDAw MDI3NyA2NTUzNSBmDQowMDAwMDAwMjc4IDY1NTM1IGYNCjAwMDAwMDAyNzkgNjU1MzUgZg0K MDAwMDAwMDI4MCA2NTUzNSBmDQowMDAwMDAwMjgxIDY1NTM1IGYNCjAwMDAwMDAyODIgNjU1 MzUgZg0KMDAwMDAwMDI4MyA2NTUzNSBmDQowMDAwMDAwMjg0IDY1NTM1IGYNCjAwMDAwMDAy ODUgNjU1MzUgZg0KMDAwMDAwMDI4NiA2NTUzNSBmDQowMDAwMDAwMjg3IDY1NTM1IGYNCjAw MDAwMDAyODggNjU1MzUgZg0KMDAwMDAwMDI4OSA2NTUzNSBmDQowMDAwMDAwMjkwIDY1NTM1 IGYNCjAwMDAwMDAyOTEgNjU1MzUgZg0KMDAwMDAwMDI5MiA2NTUzNSBmDQowMDAwMDAwMjkz IDY1NTM1IGYNCjAwMDAwMDAyOTQgNjU1MzUgZg0KMDAwMDAwMDI5NSA2NTUzNSBmDQowMDAw MDAwMjk2IDY1NTM1IGYNCjAwMDAwMDAyOTcgNjU1MzUgZg0KMDAwMDAwMDI5OCA2NTUzNSBm DQowMDAwMDAwMjk5IDY1NTM1IGYNCjAwMDAwMDAzMDAgNjU1MzUgZg0KMDAwMDAwMDMwMSA2 NTUzNSBmDQowMDAwMDAwMzAyIDY1NTM1IGYNCjAwMDAwMDAzMDMgNjU1MzUgZg0KMDAwMDAw MDMwNCA2NTUzNSBmDQowMDAwMDAwMzA1IDY1NTM1IGYNCjAwMDAwMDAzMDYgNjU1MzUgZg0K MDAwMDAwMDMwNyA2NTUzNSBmDQowMDAwMDAwMzA4IDY1NTM1IGYNCjAwMDAwMDAzMDkgNjU1 MzUgZg0KMDAwMDAwMDMxMCA2NTUzNSBmDQowMDAwMDAwMzExIDY1NTM1IGYNCjAwMDAwMDAz MTIgNjU1MzUgZg0KMDAwMDAwMDMxMyA2NTUzNSBmDQowMDAwMDAwMzE0IDY1NTM1IGYNCjAw MDAwMDAzMTUgNjU1MzUgZg0KMDAwMDAwMDMxNiA2NTUzNSBmDQowMDAwMDAwMzE3IDY1NTM1 IGYNCjAwMDAwMDAzMTggNjU1MzUgZg0KMDAwMDAwMDMxOSA2NTUzNSBmDQowMDAwMDAwMzIw IDY1NTM1IGYNCjAwMDAwMDAzMjEgNjU1MzUgZg0KMDAwMDAwMDMyMiA2NTUzNSBmDQowMDAw MDAwMzIzIDY1NTM1IGYNCjAwMDAwMDAzMjQgNjU1MzUgZg0KMDAwMDAwMDMyNSA2NTUzNSBm DQowMDAwMDAwMzI2IDY1NTM1IGYNCjAwMDAwMDAzMjcgNjU1MzUgZg0KMDAwMDAwMDMyOCA2 NTUzNSBmDQowMDAwMDAwMzI5IDY1NTM1IGYNCjAwMDAwMDAzMzAgNjU1MzUgZg0KMDAwMDAw MDMzMSA2NTUzNSBmDQowMDAwMDAwMzMyIDY1NTM1IGYNCjAwMDAwMDAzMzMgNjU1MzUgZg0K MDAwMDAwMDMzNCA2NTUzNSBmDQowMDAwMDAwMzM1IDY1NTM1IGYNCjAwMDAwMDAzMzYgNjU1 MzUgZg0KMDAwMDAwMDMzNyA2NTUzNSBmDQowMDAwMDAwMzM4IDY1NTM1IGYNCjAwMDAwMDAz MzkgNjU1MzUgZg0KMDAwMDAwMDM0MCA2NTUzNSBmDQowMDAwMDAwMzQxIDY1NTM1IGYNCjAw MDAwMDAzNDIgNjU1MzUgZg0KMDAwMDAwMDM0MyA2NTUzNSBmDQowMDAwMDAwMzQ0IDY1NTM1 IGYNCjAwMDAwMDAzNDUgNjU1MzUgZg0KMDAwMDAwMDM0NiA2NTUzNSBmDQowMDAwMDAwMzQ3 IDY1NTM1IGYNCjAwMDAwMDAzNDggNjU1MzUgZg0KMDAwMDAwMDM0OSA2NTUzNSBmDQowMDAw MDAwMzUwIDY1NTM1IGYNCjAwMDAwMDAzNTEgNjU1MzUgZg0KMDAwMDAwMDM1MiA2NTUzNSBm DQowMDAwMDAwMzUzIDY1NTM1IGYNCjAwMDAwMDAzNTQgNjU1MzUgZg0KMDAwMDAwMDM1NSA2 NTUzNSBmDQowMDAwMDAwMzU2IDY1NTM1IGYNCjAwMDAwMDAzNTcgNjU1MzUgZg0KMDAwMDAw MDM1OCA2NTUzNSBmDQowMDAwMDAwMzU5IDY1NTM1IGYNCjAwMDAwMDAzNjAgNjU1MzUgZg0K MDAwMDAwMDM2MSA2NTUzNSBmDQowMDAwMDAwMzYyIDY1NTM1IGYNCjAwMDAwMDAzNjMgNjU1 MzUgZg0KMDAwMDAwMDM2NCA2NTUzNSBmDQowMDAwMDAwMzY1IDY1NTM1IGYNCjAwMDAwMDAz NjYgNjU1MzUgZg0KMDAwMDAwMDM2NyA2NTUzNSBmDQowMDAwMDAwMzY4IDY1NTM1IGYNCjAw MDAwMDAzNjkgNjU1MzUgZg0KMDAwMDAwMDM3MCA2NTUzNSBmDQowMDAwMDAwMzcxIDY1NTM1 IGYNCjAwMDAwMDAzNzIgNjU1MzUgZg0KMDAwMDAwMDM3MyA2NTUzNSBmDQowMDAwMDAwMzc0 IDY1NTM1IGYNCjAwMDAwMDAzNzUgNjU1MzUgZg0KMDAwMDAwMDM3NiA2NTUzNSBmDQowMDAw MDAwMzc3IDY1NTM1IGYNCjAwMDAwMDAzNzggNjU1MzUgZg0KMDAwMDAwMDM3OSA2NTUzNSBm DQowMDAwMDAwMzgwIDY1NTM1IGYNCjAwMDAwMDAzODEgNjU1MzUgZg0KMDAwMDAwMDM4MiA2 NTUzNSBmDQowMDAwMDAwMzgzIDY1NTM1IGYNCjAwMDAwMDAzODQgNjU1MzUgZg0KMDAwMDAw MDM4NSA2NTUzNSBmDQowMDAwMDAwMzg2IDY1NTM1IGYNCjAwMDAwMDAzODcgNjU1MzUgZg0K MDAwMDAwMDM4OCA2NTUzNSBmDQowMDAwMDAwMzg5IDY1NTM1IGYNCjAwMDAwMDAzOTAgNjU1 MzUgZg0KMDAwMDAwMDM5MSA2NTUzNSBmDQowMDAwMDAwMzkyIDY1NTM1IGYNCjAwMDAwMDAz OTMgNjU1MzUgZg0KMDAwMDAwMDM5NCA2NTUzNSBmDQowMDAwMDAwMzk1IDY1NTM1IGYNCjAw MDAwMDAzOTYgNjU1MzUgZg0KMDAwMDAwMDM5NyA2NTUzNSBmDQowMDAwMDAwMzk4IDY1NTM1 IGYNCjAwMDAwMDAzOTkgNjU1MzUgZg0KMDAwMDAwMDQwMCA2NTUzNSBmDQowMDAwMDAwNDAx IDY1NTM1IGYNCjAwMDAwMDA0MDIgNjU1MzUgZg0KMDAwMDAwMDQwMyA2NTUzNSBmDQowMDAw MDAwNDA0IDY1NTM1IGYNCjAwMDAwMDA0MDUgNjU1MzUgZg0KMDAwMDAwMDQwNiA2NTUzNSBm DQowMDAwMDAwNDA3IDY1NTM1IGYNCjAwMDAwMDA0MDggNjU1MzUgZg0KMDAwMDAwMDQwOSA2 NTUzNSBmDQowMDAwMDAwNDEwIDY1NTM1IGYNCjAwMDAwMDA0MTEgNjU1MzUgZg0KMDAwMDAw MDQxMiA2NTUzNSBmDQowMDAwMDAwNDEzIDY1NTM1IGYNCjAwMDAwMDA0MTQgNjU1MzUgZg0K MDAwMDAwMDQxNSA2NTUzNSBmDQowMDAwMDAwNDE2IDY1NTM1IGYNCjAwMDAwMDA0MTcgNjU1 MzUgZg0KMDAwMDAwMDQxOCA2NTUzNSBmDQowMDAwMDAwNDE5IDY1NTM1IGYNCjAwMDAwMDA0 MjAgNjU1MzUgZg0KMDAwMDAwMDQyMSA2NTUzNSBmDQowMDAwMDAwNDIyIDY1NTM1IGYNCjAw MDAwMDA0MjMgNjU1MzUgZg0KMDAwMDAwMDQyNCA2NTUzNSBmDQowMDAwMDAwNDI1IDY1NTM1 IGYNCjAwMDAwMDA0MjYgNjU1MzUgZg0KMDAwMDAwMDQyNyA2NTUzNSBmDQowMDAwMDAwNDI4 IDY1NTM1IGYNCjAwMDAwMDA0MjkgNjU1MzUgZg0KMDAwMDAwMDQzMCA2NTUzNSBmDQowMDAw MDAwNDMxIDY1NTM1IGYNCjAwMDAwMDA0MzIgNjU1MzUgZg0KMDAwMDAwMDQzMyA2NTUzNSBm DQowMDAwMDAwNDM0IDY1NTM1IGYNCjAwMDAwMDA0MzUgNjU1MzUgZg0KMDAwMDAwMDQzNiA2 NTUzNSBmDQowMDAwMDAwNDM3IDY1NTM1IGYNCjAwMDAwMDA0MzggNjU1MzUgZg0KMDAwMDAw MDQzOSA2NTUzNSBmDQowMDAwMDAwNDQwIDY1NTM1IGYNCjAwMDAwMDA0NDEgNjU1MzUgZg0K MDAwMDAwMDQ0MiA2NTUzNSBmDQowMDAwMDAwNDQzIDY1NTM1IGYNCjAwMDAwMDA0NDQgNjU1 MzUgZg0KMDAwMDAwMDQ0NSA2NTUzNSBmDQowMDAwMDAwNDQ2IDY1NTM1IGYNCjAwMDAwMDA0 NDcgNjU1MzUgZg0KMDAwMDAwMDQ0OCA2NTUzNSBmDQowMDAwMDAwNDQ5IDY1NTM1IGYNCjAw MDAwMDA0NTAgNjU1MzUgZg0KMDAwMDAwMDQ1MSA2NTUzNSBmDQowMDAwMDAwNDUyIDY1NTM1 IGYNCjAwMDAwMDA0NTMgNjU1MzUgZg0KMDAwMDAwMDQ1NCA2NTUzNSBmDQowMDAwMDAwNDU1 IDY1NTM1IGYNCjAwMDAwMDA0NTYgNjU1MzUgZg0KMDAwMDAwMDQ1NyA2NTUzNSBmDQowMDAw MDAwNDU4IDY1NTM1IGYNCjAwMDAwMDA0NTkgNjU1MzUgZg0KMDAwMDAwMDQ2MCA2NTUzNSBm DQowMDAwMDAwNDYxIDY1NTM1IGYNCjAwMDAwMDA0NjIgNjU1MzUgZg0KMDAwMDAwMDQ2MyA2 NTUzNSBmDQowMDAwMDAwNDY0IDY1NTM1IGYNCjAwMDAwMDA0NjUgNjU1MzUgZg0KMDAwMDAw MDQ2NiA2NTUzNSBmDQowMDAwMDAwNDY3IDY1NTM1IGYNCjAwMDAwMDA0NjggNjU1MzUgZg0K MDAwMDAwMDQ2OSA2NTUzNSBmDQowMDAwMDAwNDcwIDY1NTM1IGYNCjAwMDAwMDA0NzEgNjU1 MzUgZg0KMDAwMDAwMDQ3MiA2NTUzNSBmDQowMDAwMDAwNDczIDY1NTM1IGYNCjAwMDAwMDA0 NzQgNjU1MzUgZg0KMDAwMDAwMDQ3NSA2NTUzNSBmDQowMDAwMDAwNDc2IDY1NTM1IGYNCjAw MDAwMDA0NzcgNjU1MzUgZg0KMDAwMDAwMDQ3OCA2NTUzNSBmDQowMDAwMDAwNDc5IDY1NTM1 IGYNCjAwMDAwMDA0ODAgNjU1MzUgZg0KMDAwMDAwMDQ4MSA2NTUzNSBmDQowMDAwMDAwNDgy IDY1NTM1IGYNCjAwMDAwMDA0ODMgNjU1MzUgZg0KMDAwMDAwMDQ4NCA2NTUzNSBmDQowMDAw MDAwNDg1IDY1NTM1IGYNCjAwMDAwMDA0ODYgNjU1MzUgZg0KMDAwMDAwMDQ4NyA2NTUzNSBm DQowMDAwMDAwNDg4IDY1NTM1IGYNCjAwMDAwMDA0ODkgNjU1MzUgZg0KMDAwMDAwMDQ5MCA2 NTUzNSBmDQowMDAwMDAwNDkxIDY1NTM1IGYNCjAwMDAwMDA0OTIgNjU1MzUgZg0KMDAwMDAw MDQ5MyA2NTUzNSBmDQowMDAwMDAwNDk0IDY1NTM1IGYNCjAwMDAwMDA0OTUgNjU1MzUgZg0K MDAwMDAwMDQ5NiA2NTUzNSBmDQowMDAwMDAwNDk3IDY1NTM1IGYNCjAwMDAwMDA0OTggNjU1 MzUgZg0KMDAwMDAwMDQ5OSA2NTUzNSBmDQowMDAwMDAwNTAwIDY1NTM1IGYNCjAwMDAwMDA1 MDEgNjU1MzUgZg0KMDAwMDAwMDUwMiA2NTUzNSBmDQowMDAwMDAwNTAzIDY1NTM1IGYNCjAw MDAwMDA1MDQgNjU1MzUgZg0KMDAwMDAwMDUwNSA2NTUzNSBmDQowMDAwMDAwNTA2IDY1NTM1 IGYNCjAwMDAwMDA1MDcgNjU1MzUgZg0KMDAwMDAwMDUwOCA2NTUzNSBmDQowMDAwMDAwNTA5 IDY1NTM1IGYNCjAwMDAwMDA1MTAgNjU1MzUgZg0KMDAwMDAwMDUxMSA2NTUzNSBmDQowMDAw MDAwNTEyIDY1NTM1IGYNCjAwMDAwMDA1MTMgNjU1MzUgZg0KMDAwMDAwMDUxNCA2NTUzNSBm DQowMDAwMDAwNTE1IDY1NTM1IGYNCjAwMDAwMDA1MTYgNjU1MzUgZg0KMDAwMDAwMDUxNyA2 NTUzNSBmDQowMDAwMDAwNTE4IDY1NTM1IGYNCjAwMDAwMDA1MTkgNjU1MzUgZg0KMDAwMDAw MDUyMCA2NTUzNSBmDQowMDAwMDAwNTIxIDY1NTM1IGYNCjAwMDAwMDA1MjIgNjU1MzUgZg0K MDAwMDAwMDUyMyA2NTUzNSBmDQowMDAwMDAwNTI0IDY1NTM1IGYNCjAwMDAwMDA1MjUgNjU1 MzUgZg0KMDAwMDAwMDUyNiA2NTUzNSBmDQowMDAwMDAwNTI3IDY1NTM1IGYNCjAwMDAwMDA1 MjggNjU1MzUgZg0KMDAwMDAwMDUyOSA2NTUzNSBmDQowMDAwMDAwNTMwIDY1NTM1IGYNCjAw MDAwMDA1MzEgNjU1MzUgZg0KMDAwMDAwMDUzMiA2NTUzNSBmDQowMDAwMDAwNTMzIDY1NTM1 IGYNCjAwMDAwMDA1MzQgNjU1MzUgZg0KMDAwMDAwMDUzNSA2NTUzNSBmDQowMDAwMDAwNTM2 IDY1NTM1IGYNCjAwMDAwMDA1MzcgNjU1MzUgZg0KMDAwMDAwMDUzOCA2NTUzNSBmDQowMDAw MDAwNTM5IDY1NTM1IGYNCjAwMDAwMDA1NDAgNjU1MzUgZg0KMDAwMDAwMDU0MSA2NTUzNSBm DQowMDAwMDAwNTQyIDY1NTM1IGYNCjAwMDAwMDA1NDMgNjU1MzUgZg0KMDAwMDAwMDU0NCA2 NTUzNSBmDQowMDAwMDAwNTQ1IDY1NTM1IGYNCjAwMDAwMDA1NDYgNjU1MzUgZg0KMDAwMDAw MDU0NyA2NTUzNSBmDQowMDAwMDAwNTQ4IDY1NTM1IGYNCjAwMDAwMDA1NDkgNjU1MzUgZg0K MDAwMDAwMDU1MCA2NTUzNSBmDQowMDAwMDAwNTUxIDY1NTM1IGYNCjAwMDAwMDA1NTIgNjU1 MzUgZg0KMDAwMDAwMDU1MyA2NTUzNSBmDQowMDAwMDAwNTU0IDY1NTM1IGYNCjAwMDAwMDA1 NTUgNjU1MzUgZg0KMDAwMDAwMDU1NiA2NTUzNSBmDQowMDAwMDAwNTU3IDY1NTM1IGYNCjAw MDAwMDA1NTggNjU1MzUgZg0KMDAwMDAwMDU1OSA2NTUzNSBmDQowMDAwMDAwNTYwIDY1NTM1 IGYNCjAwMDAwMDA1NjEgNjU1MzUgZg0KMDAwMDAwMDU2MiA2NTUzNSBmDQowMDAwMDAwNTYz IDY1NTM1IGYNCjAwMDAwMDA1NjQgNjU1MzUgZg0KMDAwMDAwMDU2NSA2NTUzNSBmDQowMDAw MDAwNTY2IDY1NTM1IGYNCjAwMDAwMDA1NjcgNjU1MzUgZg0KMDAwMDAwMDU2OCA2NTUzNSBm DQowMDAwMDAwNTY5IDY1NTM1IGYNCjAwMDAwMDA1NzAgNjU1MzUgZg0KMDAwMDAwMDU3MSA2 NTUzNSBmDQowMDAwMDAwNTcyIDY1NTM1IGYNCjAwMDAwMDA1NzMgNjU1MzUgZg0KMDAwMDAw MDU3NCA2NTUzNSBmDQowMDAwMDAwNTc1IDY1NTM1IGYNCjAwMDAwMDA1NzYgNjU1MzUgZg0K MDAwMDAwMDU3NyA2NTUzNSBmDQowMDAwMDAwNTc4IDY1NTM1IGYNCjAwMDAwMDA1NzkgNjU1 MzUgZg0KMDAwMDAwMDU4MCA2NTUzNSBmDQowMDAwMDAwNTgxIDY1NTM1IGYNCjAwMDAwMDA1 ODIgNjU1MzUgZg0KMDAwMDAwMDU4MyA2NTUzNSBmDQowMDAwMDAwNTg0IDY1NTM1IGYNCjAw MDAwMDA1ODUgNjU1MzUgZg0KMDAwMDAwMDU4NiA2NTUzNSBmDQowMDAwMDAwNTg3IDY1NTM1 IGYNCjAwMDAwMDA1ODggNjU1MzUgZg0KMDAwMDAwMDU4OSA2NTUzNSBmDQowMDAwMDAwNTkw IDY1NTM1IGYNCjAwMDAwMDA1OTEgNjU1MzUgZg0KMDAwMDAwMDU5MiA2NTUzNSBmDQowMDAw MDAwNTkzIDY1NTM1IGYNCjAwMDAwMDA1OTQgNjU1MzUgZg0KMDAwMDAwMDU5NSA2NTUzNSBm DQowMDAwMDAwNTk2IDY1NTM1IGYNCjAwMDAwMDA1OTcgNjU1MzUgZg0KMDAwMDAwMDU5OCA2 NTUzNSBmDQowMDAwMDAwNTk5IDY1NTM1IGYNCjAwMDAwMDA2MDAgNjU1MzUgZg0KMDAwMDAw MDYwMSA2NTUzNSBmDQowMDAwMDAwNjAyIDY1NTM1IGYNCjAwMDAwMDA2MDMgNjU1MzUgZg0K MDAwMDAwMDYwNCA2NTUzNSBmDQowMDAwMDAwNjA1IDY1NTM1IGYNCjAwMDAwMDA2MDYgNjU1 MzUgZg0KMDAwMDAwMDYwNyA2NTUzNSBmDQowMDAwMDAwNjA4IDY1NTM1IGYNCjAwMDAwMDA2 MDkgNjU1MzUgZg0KMDAwMDAwMDYxMCA2NTUzNSBmDQowMDAwMDAwNjExIDY1NTM1IGYNCjAw MDAwMDA2MTIgNjU1MzUgZg0KMDAwMDAwMDYxMyA2NTUzNSBmDQowMDAwMDAwNjE0IDY1NTM1 IGYNCjAwMDAwMDA2MTUgNjU1MzUgZg0KMDAwMDAwMDYxNiA2NTUzNSBmDQowMDAwMDAwNjE3 IDY1NTM1IGYNCjAwMDAwMDA2MTggNjU1MzUgZg0KMDAwMDAwMDYxOSA2NTUzNSBmDQowMDAw MDAwNjIwIDY1NTM1IGYNCjAwMDAwMDA2MjEgNjU1MzUgZg0KMDAwMDAwMDYyMiA2NTUzNSBm DQowMDAwMDAwNjIzIDY1NTM1IGYNCjAwMDAwMDA2MjQgNjU1MzUgZg0KMDAwMDAwMDYyNSA2 NTUzNSBmDQowMDAwMDAwNjI2IDY1NTM1IGYNCjAwMDAwMDA2MjcgNjU1MzUgZg0KMDAwMDAw MDYyOCA2NTUzNSBmDQowMDAwMDAwNjI5IDY1NTM1IGYNCjAwMDAwMDA2MzAgNjU1MzUgZg0K MDAwMDAwMDYzMSA2NTUzNSBmDQowMDAwMDAwNjMyIDY1NTM1IGYNCjAwMDAwMDA2MzMgNjU1 MzUgZg0KMDAwMDAwMDYzNCA2NTUzNSBmDQowMDAwMDAwNjM1IDY1NTM1IGYNCjAwMDAwMDA2 MzYgNjU1MzUgZg0KMDAwMDAwMDYzNyA2NTUzNSBmDQowMDAwMDAwNjM4IDY1NTM1IGYNCjAw MDAwMDA2MzkgNjU1MzUgZg0KMDAwMDAwMDY0MCA2NTUzNSBmDQowMDAwMDAwNjQxIDY1NTM1 IGYNCjAwMDAwMDA2NDIgNjU1MzUgZg0KMDAwMDAwMDY0MyA2NTUzNSBmDQowMDAwMDAwNjQ0 IDY1NTM1IGYNCjAwMDAwMDA2NDUgNjU1MzUgZg0KMDAwMDAwMDY0NiA2NTUzNSBmDQowMDAw MDAwNjQ3IDY1NTM1IGYNCjAwMDAwMDA2NDggNjU1MzUgZg0KMDAwMDAwMDY0OSA2NTUzNSBm DQowMDAwMDAwNjUwIDY1NTM1IGYNCjAwMDAwMDA2NTEgNjU1MzUgZg0KMDAwMDAwMDY1MiA2 NTUzNSBmDQowMDAwMDAwNjUzIDY1NTM1IGYNCjAwMDAwMDA2NTQgNjU1MzUgZg0KMDAwMDAw MDY1NSA2NTUzNSBmDQowMDAwMDAwNjU2IDY1NTM1IGYNCjAwMDAwMDA2NTcgNjU1MzUgZg0K MDAwMDAwMDY1OCA2NTUzNSBmDQowMDAwMDAwNjU5IDY1NTM1IGYNCjAwMDAwMDA2NjAgNjU1 MzUgZg0KMDAwMDAwMDY2MSA2NTUzNSBmDQowMDAwMDAwNjYyIDY1NTM1IGYNCjAwMDAwMDA2 NjMgNjU1MzUgZg0KMDAwMDAwMDY2NCA2NTUzNSBmDQowMDAwMDAwNjY1IDY1NTM1IGYNCjAw MDAwMDA2NjYgNjU1MzUgZg0KMDAwMDAwMDY2NyA2NTUzNSBmDQowMDAwMDAwNjY4IDY1NTM1 IGYNCjAwMDAwMDA2NjkgNjU1MzUgZg0KMDAwMDAwMDY3MCA2NTUzNSBmDQowMDAwMDAwNjcx IDY1NTM1IGYNCjAwMDAwMDA2NzIgNjU1MzUgZg0KMDAwMDAwMDY3MyA2NTUzNSBmDQowMDAw MDAwNjc0IDY1NTM1IGYNCjAwMDAwMDA2NzUgNjU1MzUgZg0KMDAwMDAwMDY3NiA2NTUzNSBm DQowMDAwMDAwNjc3IDY1NTM1IGYNCjAwMDAwMDA2NzggNjU1MzUgZg0KMDAwMDAwMDY3OSA2 NTUzNSBmDQowMDAwMDAwNjgwIDY1NTM1IGYNCjAwMDAwMDA2ODEgNjU1MzUgZg0KMDAwMDAw MDY4MiA2NTUzNSBmDQowMDAwMDAwNjgzIDY1NTM1IGYNCjAwMDAwMDA2ODQgNjU1MzUgZg0K MDAwMDAwMDY4NSA2NTUzNSBmDQowMDAwMDAwNjg2IDY1NTM1IGYNCjAwMDAwMDA2ODcgNjU1 MzUgZg0KMDAwMDAwMDY4OCA2NTUzNSBmDQowMDAwMDAwNjg5IDY1NTM1IGYNCjAwMDAwMDA2 OTAgNjU1MzUgZg0KMDAwMDAwMDY5MSA2NTUzNSBmDQowMDAwMDAwNjkyIDY1NTM1IGYNCjAw MDAwMDA2OTMgNjU1MzUgZg0KMDAwMDAwMDY5NCA2NTUzNSBmDQowMDAwMDAwNjk1IDY1NTM1 IGYNCjAwMDAwMDA2OTYgNjU1MzUgZg0KMDAwMDAwMDY5NyA2NTUzNSBmDQowMDAwMDAwNjk4 IDY1NTM1IGYNCjAwMDAwMDA2OTkgNjU1MzUgZg0KMDAwMDAwMDcwMCA2NTUzNSBmDQowMDAw MDAwNzAxIDY1NTM1IGYNCjAwMDAwMDA3MDIgNjU1MzUgZg0KMDAwMDAwMDcwMyA2NTUzNSBm DQowMDAwMDAwNzA0IDY1NTM1IGYNCjAwMDAwMDA3MDUgNjU1MzUgZg0KMDAwMDAwMDcwNiA2 NTUzNSBmDQowMDAwMDAwNzA3IDY1NTM1IGYNCjAwMDAwMDA3MDggNjU1MzUgZg0KMDAwMDAw MDcwOSA2NTUzNSBmDQowMDAwMDAwNzEwIDY1NTM1IGYNCjAwMDAwMDA3MTEgNjU1MzUgZg0K MDAwMDAwMDcxMiA2NTUzNSBmDQowMDAwMDAwNzEzIDY1NTM1IGYNCjAwMDAwMDA3MTQgNjU1 MzUgZg0KMDAwMDAwMDcxNSA2NTUzNSBmDQowMDAwMDAwNzE2IDY1NTM1IGYNCjAwMDAwMDA3 MTcgNjU1MzUgZg0KMDAwMDAwMDcxOCA2NTUzNSBmDQowMDAwMDAwNzE5IDY1NTM1IGYNCjAw MDAwMDA3MjAgNjU1MzUgZg0KMDAwMDAwMDcyMSA2NTUzNSBmDQowMDAwMDAwNzIyIDY1NTM1 IGYNCjAwMDAwMDA3MjMgNjU1MzUgZg0KMDAwMDAwMDcyNCA2NTUzNSBmDQowMDAwMDAwNzI1 IDY1NTM1IGYNCjAwMDAwMDA3MjYgNjU1MzUgZg0KMDAwMDAwMDcyNyA2NTUzNSBmDQowMDAw MDAwNzI4IDY1NTM1IGYNCjAwMDAwMDA3MjkgNjU1MzUgZg0KMDAwMDAwMDczMCA2NTUzNSBm DQowMDAwMDAwNzMxIDY1NTM1IGYNCjAwMDAwMDA3MzIgNjU1MzUgZg0KMDAwMDAwMDczMyA2 NTUzNSBmDQowMDAwMDAwNzM0IDY1NTM1IGYNCjAwMDAwMDA3MzUgNjU1MzUgZg0KMDAwMDAw MDczNiA2NTUzNSBmDQowMDAwMDAwNzM3IDY1NTM1IGYNCjAwMDAwMDA3MzggNjU1MzUgZg0K MDAwMDAwMDczOSA2NTUzNSBmDQowMDAwMDAwNzQwIDY1NTM1IGYNCjAwMDAwMDA3NDEgNjU1 MzUgZg0KMDAwMDAwMDc0MiA2NTUzNSBmDQowMDAwMDAwNzQzIDY1NTM1IGYNCjAwMDAwMDA3 NDQgNjU1MzUgZg0KMDAwMDAwMDc0NSA2NTUzNSBmDQowMDAwMDAwNzQ2IDY1NTM1IGYNCjAw MDAwMDA3NDcgNjU1MzUgZg0KMDAwMDAwMDc0OCA2NTUzNSBmDQowMDAwMDAwNzQ5IDY1NTM1 IGYNCjAwMDAwMDA3NTAgNjU1MzUgZg0KMDAwMDAwMDc1MSA2NTUzNSBmDQowMDAwMDAwNzUy IDY1NTM1IGYNCjAwMDAwMDA3NTMgNjU1MzUgZg0KMDAwMDAwMDc1NCA2NTUzNSBmDQowMDAw MDAwNzU1IDY1NTM1IGYNCjAwMDAwMDA3NTYgNjU1MzUgZg0KMDAwMDAwMDc1NyA2NTUzNSBm DQowMDAwMDAwNzU4IDY1NTM1IGYNCjAwMDAwMDA3NTkgNjU1MzUgZg0KMDAwMDAwMDc2MCA2 NTUzNSBmDQowMDAwMDAwNzYxIDY1NTM1IGYNCjAwMDAwMDA3NjIgNjU1MzUgZg0KMDAwMDAw MDc2MyA2NTUzNSBmDQowMDAwMDAwNzY0IDY1NTM1IGYNCjAwMDAwMDA3NjUgNjU1MzUgZg0K MDAwMDAwMDc2NiA2NTUzNSBmDQowMDAwMDAwNzY3IDY1NTM1IGYNCjAwMDAwMDA3NjggNjU1 MzUgZg0KMDAwMDAwMDc2OSA2NTUzNSBmDQowMDAwMDAwNzcwIDY1NTM1IGYNCjAwMDAwMDA3 NzEgNjU1MzUgZg0KMDAwMDAwMDc3MiA2NTUzNSBmDQowMDAwMDAwNzczIDY1NTM1IGYNCjAw MDAwMDA3NzQgNjU1MzUgZg0KMDAwMDAwMDc3NSA2NTUzNSBmDQowMDAwMDAwNzc2IDY1NTM1 IGYNCjAwMDAwMDA3NzcgNjU1MzUgZg0KMDAwMDAwMDc3OCA2NTUzNSBmDQowMDAwMDAwNzc5 IDY1NTM1IGYNCjAwMDAwMDA3ODAgNjU1MzUgZg0KMDAwMDAwMDc4MSA2NTUzNSBmDQowMDAw MDAwNzgyIDY1NTM1IGYNCjAwMDAwMDA3ODMgNjU1MzUgZg0KMDAwMDAwMDc4NCA2NTUzNSBm DQowMDAwMDAwNzg1IDY1NTM1IGYNCjAwMDAwMDA3ODYgNjU1MzUgZg0KMDAwMDAwMDc4NyA2 NTUzNSBmDQowMDAwMDAwNzg4IDY1NTM1IGYNCjAwMDAwMDA3ODkgNjU1MzUgZg0KMDAwMDAw MDc5MCA2NTUzNSBmDQowMDAwMDAwNzkxIDY1NTM1IGYNCjAwMDAwMDA3OTIgNjU1MzUgZg0K MDAwMDAwMDc5MyA2NTUzNSBmDQowMDAwMDAwNzk0IDY1NTM1IGYNCjAwMDAwMDA3OTUgNjU1 MzUgZg0KMDAwMDAwMDc5NiA2NTUzNSBmDQowMDAwMDAwNzk3IDY1NTM1IGYNCjAwMDAwMDA3 OTggNjU1MzUgZg0KMDAwMDAwMDc5OSA2NTUzNSBmDQowMDAwMDAwODAwIDY1NTM1IGYNCjAw MDAwMDA4MDEgNjU1MzUgZg0KMDAwMDAwMDgwMiA2NTUzNSBmDQowMDAwMDAwODAzIDY1NTM1 IGYNCjAwMDAwMDA4MDQgNjU1MzUgZg0KMDAwMDAwMDgwNSA2NTUzNSBmDQowMDAwMDAwODA2 IDY1NTM1IGYNCjAwMDAwMDA4MDcgNjU1MzUgZg0KMDAwMDAwMDgwOCA2NTUzNSBmDQowMDAw MDAwODA5IDY1NTM1IGYNCjAwMDAwMDA4MTAgNjU1MzUgZg0KMDAwMDAwMDgxMSA2NTUzNSBm DQowMDAwMDAwODEyIDY1NTM1IGYNCjAwMDAwMDA4MTMgNjU1MzUgZg0KMDAwMDAwMDgxNCA2 NTUzNSBmDQowMDAwMDAwODE1IDY1NTM1IGYNCjAwMDAwMDA4MTYgNjU1MzUgZg0KMDAwMDAw MDgxNyA2NTUzNSBmDQowMDAwMDAwODE4IDY1NTM1IGYNCjAwMDAwMDA4MTkgNjU1MzUgZg0K MDAwMDAwMDgyMCA2NTUzNSBmDQowMDAwMDAwODIxIDY1NTM1IGYNCjAwMDAwMDA4MjIgNjU1 MzUgZg0KMDAwMDAwMDgyMyA2NTUzNSBmDQowMDAwMDAwODI0IDY1NTM1IGYNCjAwMDAwMDA4 MjUgNjU1MzUgZg0KMDAwMDAwMDgyNiA2NTUzNSBmDQowMDAwMDAwODI3IDY1NTM1IGYNCjAw MDAwMDA4MjggNjU1MzUgZg0KMDAwMDAwMDgyOSA2NTUzNSBmDQowMDAwMDAwODMwIDY1NTM1 IGYNCjAwMDAwMDA4MzEgNjU1MzUgZg0KMDAwMDAwMDgzMiA2NTUzNSBmDQowMDAwMDAwODMz IDY1NTM1IGYNCjAwMDAwMDA4MzQgNjU1MzUgZg0KMDAwMDAwMDgzNSA2NTUzNSBmDQowMDAw MDAwODM2IDY1NTM1IGYNCjAwMDAwMDA4MzcgNjU1MzUgZg0KMDAwMDAwMDgzOCA2NTUzNSBm DQowMDAwMDAwODM5IDY1NTM1IGYNCjAwMDAwMDA4NDAgNjU1MzUgZg0KMDAwMDAwMDg0MSA2 NTUzNSBmDQowMDAwMDAwODQyIDY1NTM1IGYNCjAwMDAwMDA4NDMgNjU1MzUgZg0KMDAwMDAw MDg0NCA2NTUzNSBmDQowMDAwMDAwODQ1IDY1NTM1IGYNCjAwMDAwMDA4NDYgNjU1MzUgZg0K MDAwMDAwMDg0NyA2NTUzNSBmDQowMDAwMDAwODQ4IDY1NTM1IGYNCjAwMDAwMDA4NDkgNjU1 MzUgZg0KMDAwMDAwMDg1MCA2NTUzNSBmDQowMDAwMDAwODUxIDY1NTM1IGYNCjAwMDAwMDA4 NTIgNjU1MzUgZg0KMDAwMDAwMDg1MyA2NTUzNSBmDQowMDAwMDAwODU0IDY1NTM1IGYNCjAw MDAwMDA4NTUgNjU1MzUgZg0KMDAwMDAwMDg1NiA2NTUzNSBmDQowMDAwMDAwODU3IDY1NTM1 IGYNCjAwMDAwMDA4NTggNjU1MzUgZg0KMDAwMDAwMDg1OSA2NTUzNSBmDQowMDAwMDAwODYw IDY1NTM1IGYNCjAwMDAwMDA4NjEgNjU1MzUgZg0KMDAwMDAwMDg2MiA2NTUzNSBmDQowMDAw MDAwODYzIDY1NTM1IGYNCjAwMDAwMDA4NjQgNjU1MzUgZg0KMDAwMDAwMDg2NSA2NTUzNSBm DQowMDAwMDAwODY2IDY1NTM1IGYNCjAwMDAwMDA4NjcgNjU1MzUgZg0KMDAwMDAwMDg2OCA2 NTUzNSBmDQowMDAwMDAwODY5IDY1NTM1IGYNCjAwMDAwMDA4NzAgNjU1MzUgZg0KMDAwMDAw MDg3MSA2NTUzNSBmDQowMDAwMDAwODcyIDY1NTM1IGYNCjAwMDAwMDA4NzMgNjU1MzUgZg0K MDAwMDAwMDg3NCA2NTUzNSBmDQowMDAwMDAwODc1IDY1NTM1IGYNCjAwMDAwMDA4NzYgNjU1 MzUgZg0KMDAwMDAwMDg3NyA2NTUzNSBmDQowMDAwMDAwODc4IDY1NTM1IGYNCjAwMDAwMDA4 NzkgNjU1MzUgZg0KMDAwMDAwMDg4MCA2NTUzNSBmDQowMDAwMDAwODgxIDY1NTM1IGYNCjAw MDAwMDA4ODIgNjU1MzUgZg0KMDAwMDAwMDg4MyA2NTUzNSBmDQowMDAwMDAwODg0IDY1NTM1 IGYNCjAwMDAwMDA4ODUgNjU1MzUgZg0KMDAwMDAwMDg4NiA2NTUzNSBmDQowMDAwMDAwODg3 IDY1NTM1IGYNCjAwMDAwMDA4ODggNjU1MzUgZg0KMDAwMDAwMDg4OSA2NTUzNSBmDQowMDAw MDAwODkwIDY1NTM1IGYNCjAwMDAwMDA4OTEgNjU1MzUgZg0KMDAwMDAwMDg5MiA2NTUzNSBm DQowMDAwMDAwODkzIDY1NTM1IGYNCjAwMDAwMDA4OTQgNjU1MzUgZg0KMDAwMDAwMDg5NSA2 NTUzNSBmDQowMDAwMDAwODk2IDY1NTM1IGYNCjAwMDAwMDA4OTcgNjU1MzUgZg0KMDAwMDAw MDg5OCA2NTUzNSBmDQowMDAwMDAwODk5IDY1NTM1IGYNCjAwMDAwMDA5MDAgNjU1MzUgZg0K MDAwMDAwMDkwMSA2NTUzNSBmDQowMDAwMDAwOTAyIDY1NTM1IGYNCjAwMDAwMDA5MDMgNjU1 MzUgZg0KMDAwMDAwMDkwNCA2NTUzNSBmDQowMDAwMDAwOTA1IDY1NTM1IGYNCjAwMDAwMDA5 MDYgNjU1MzUgZg0KMDAwMDAwMDkwNyA2NTUzNSBmDQowMDAwMDAwOTA4IDY1NTM1IGYNCjAw MDAwMDA5MDkgNjU1MzUgZg0KMDAwMDAwMDkxMCA2NTUzNSBmDQowMDAwMDAwOTExIDY1NTM1 IGYNCjAwMDAwMDA5MTIgNjU1MzUgZg0KMDAwMDAwMDkxMyA2NTUzNSBmDQowMDAwMDAwOTE0 IDY1NTM1IGYNCjAwMDAwMDA5MTUgNjU1MzUgZg0KMDAwMDAwMDkxNiA2NTUzNSBmDQowMDAw MDAwOTE3IDY1NTM1IGYNCjAwMDAwMDA5MTggNjU1MzUgZg0KMDAwMDAwMDkxOSA2NTUzNSBm DQowMDAwMDAwOTIwIDY1NTM1IGYNCjAwMDAwMDA5MjEgNjU1MzUgZg0KMDAwMDAwMDkyMiA2 NTUzNSBmDQowMDAwMDAwOTIzIDY1NTM1IGYNCjAwMDAwMDA5MjQgNjU1MzUgZg0KMDAwMDAw MDkyNSA2NTUzNSBmDQowMDAwMDAwOTI2IDY1NTM1IGYNCjAwMDAwMDA5MjcgNjU1MzUgZg0K MDAwMDAwMDkyOCA2NTUzNSBmDQowMDAwMDAwOTI5IDY1NTM1IGYNCjAwMDAwMDA5MzAgNjU1 MzUgZg0KMDAwMDAwMDkzMSA2NTUzNSBmDQowMDAwMDAwOTMyIDY1NTM1IGYNCjAwMDAwMDA5 MzMgNjU1MzUgZg0KMDAwMDAwMDkzNCA2NTUzNSBmDQowMDAwMDAwOTM1IDY1NTM1IGYNCjAw MDAwMDA5MzYgNjU1MzUgZg0KMDAwMDAwMDkzNyA2NTUzNSBmDQowMDAwMDAwOTM4IDY1NTM1 IGYNCjAwMDAwMDA5MzkgNjU1MzUgZg0KMDAwMDAwMDk0MCA2NTUzNSBmDQowMDAwMDAwOTQx IDY1NTM1IGYNCjAwMDAwMDA5NDIgNjU1MzUgZg0KMDAwMDAwMDk0MyA2NTUzNSBmDQowMDAw MDAwOTQ0IDY1NTM1IGYNCjAwMDAwMDA5NDUgNjU1MzUgZg0KMDAwMDAwMDk0NiA2NTUzNSBm DQowMDAwMDAwOTQ3IDY1NTM1IGYNCjAwMDAwMDA5NDggNjU1MzUgZg0KMDAwMDAwMDk0OSA2 NTUzNSBmDQowMDAwMDAwOTUwIDY1NTM1IGYNCjAwMDAwMDA5NTEgNjU1MzUgZg0KMDAwMDAw MDk1MiA2NTUzNSBmDQowMDAwMDAwOTUzIDY1NTM1IGYNCjAwMDAwMDA5NTQgNjU1MzUgZg0K MDAwMDAwMDk1NSA2NTUzNSBmDQowMDAwMDAwOTU2IDY1NTM1IGYNCjAwMDAwMDA5NTcgNjU1 MzUgZg0KMDAwMDAwMDk1OCA2NTUzNSBmDQowMDAwMDAwOTU5IDY1NTM1IGYNCjAwMDAwMDA5 NjAgNjU1MzUgZg0KMDAwMDAwMDk2MSA2NTUzNSBmDQowMDAwMDAwOTYyIDY1NTM1IGYNCjAw MDAwMDA5NjMgNjU1MzUgZg0KMDAwMDAwMDk2NCA2NTUzNSBmDQowMDAwMDAwOTY1IDY1NTM1 IGYNCjAwMDAwMDA5NjYgNjU1MzUgZg0KMDAwMDAwMDk2NyA2NTUzNSBmDQowMDAwMDAwOTY4 IDY1NTM1IGYNCjAwMDAwMDA5NjkgNjU1MzUgZg0KMDAwMDAwMDk3MCA2NTUzNSBmDQowMDAw MDAwOTcxIDY1NTM1IGYNCjAwMDAwMDA5NzIgNjU1MzUgZg0KMDAwMDAwMDk3MyA2NTUzNSBm DQowMDAwMDAwOTc0IDY1NTM1IGYNCjAwMDAwMDA5NzUgNjU1MzUgZg0KMDAwMDAwMDk3NiA2 NTUzNSBmDQowMDAwMDAwOTc3IDY1NTM1IGYNCjAwMDAwMDA5NzggNjU1MzUgZg0KMDAwMDAw MDk3OSA2NTUzNSBmDQowMDAwMDAwOTgwIDY1NTM1IGYNCjAwMDAwMDA5ODEgNjU1MzUgZg0K MDAwMDAwMDk4MiA2NTUzNSBmDQowMDAwMDAwOTgzIDY1NTM1IGYNCjAwMDAwMDA5ODQgNjU1 MzUgZg0KMDAwMDAwMDk4NSA2NTUzNSBmDQowMDAwMDAwOTg2IDY1NTM1IGYNCjAwMDAwMDA5 ODcgNjU1MzUgZg0KMDAwMDAwMDk4OCA2NTUzNSBmDQowMDAwMDAwOTg5IDY1NTM1IGYNCjAw MDAwMDA5OTAgNjU1MzUgZg0KMDAwMDAwMDk5MSA2NTUzNSBmDQowMDAwMDAwOTkyIDY1NTM1 IGYNCjAwMDAwMDA5OTMgNjU1MzUgZg0KMDAwMDAwMDk5NCA2NTUzNSBmDQowMDAwMDAwOTk1 IDY1NTM1IGYNCjAwMDAwMDA5OTYgNjU1MzUgZg0KMDAwMDAwMDk5NyA2NTUzNSBmDQowMDAw MDAwOTk4IDY1NTM1IGYNCjAwMDAwMDA5OTkgNjU1MzUgZg0KMDAwMDAwMTAwMCA2NTUzNSBm DQowMDAwMDAxMDAxIDY1NTM1IGYNCjAwMDAwMDEwMDIgNjU1MzUgZg0KMDAwMDAwMTAwMyA2 NTUzNSBmDQowMDAwMDAxMDA0IDY1NTM1IGYNCjAwMDAwMDEwMDUgNjU1MzUgZg0KMDAwMDAw MTAwNiA2NTUzNSBmDQowMDAwMDAxMDA3IDY1NTM1IGYNCjAwMDAwMDEwMDggNjU1MzUgZg0K MDAwMDAwMTAwOSA2NTUzNSBmDQowMDAwMDAxMDEwIDY1NTM1IGYNCjAwMDAwMDEwMTEgNjU1 MzUgZg0KMDAwMDAwMTAxMiA2NTUzNSBmDQowMDAwMDAxMDEzIDY1NTM1IGYNCjAwMDAwMDEw MTQgNjU1MzUgZg0KMDAwMDAwMTAxNSA2NTUzNSBmDQowMDAwMDAxMDE2IDY1NTM1IGYNCjAw MDAwMDEwMTcgNjU1MzUgZg0KMDAwMDAwMTAxOCA2NTUzNSBmDQowMDAwMDAxMDE5IDY1NTM1 IGYNCjAwMDAwMDEwMjAgNjU1MzUgZg0KMDAwMDAwMTAyMSA2NTUzNSBmDQowMDAwMDAxMDIy IDY1NTM1IGYNCjAwMDAwMDEwMjMgNjU1MzUgZg0KMDAwMDAwMTAyNCA2NTUzNSBmDQowMDAw MDAxMDI1IDY1NTM1IGYNCjAwMDAwMDEwMjYgNjU1MzUgZg0KMDAwMDAwMTAyNyA2NTUzNSBm DQowMDAwMDAxMDI4IDY1NTM1IGYNCjAwMDAwMDEwMjkgNjU1MzUgZg0KMDAwMDAwMTAzMCA2 NTUzNSBmDQowMDAwMDAxMDMxIDY1NTM1IGYNCjAwMDAwMDEwMzIgNjU1MzUgZg0KMDAwMDAw MTAzMyA2NTUzNSBmDQowMDAwMDAxMDM0IDY1NTM1IGYNCjAwMDAwMDEwMzUgNjU1MzUgZg0K MDAwMDAwMTAzNiA2NTUzNSBmDQowMDAwMDAxMDM3IDY1NTM1IGYNCjAwMDAwMDEwMzggNjU1 MzUgZg0KMDAwMDAwMTAzOSA2NTUzNSBmDQowMDAwMDAxMDQwIDY1NTM1IGYNCjAwMDAwMDEw NDEgNjU1MzUgZg0KMDAwMDAwMTA0MiA2NTUzNSBmDQowMDAwMDAxMDQzIDY1NTM1IGYNCjAw MDAwMDEwNDQgNjU1MzUgZg0KMDAwMDAwMTA0NSA2NTUzNSBmDQowMDAwMDAxMDQ2IDY1NTM1 IGYNCjAwMDAwMDEwNDcgNjU1MzUgZg0KMDAwMDAwMTA0OCA2NTUzNSBmDQowMDAwMDAxMDQ5 IDY1NTM1IGYNCjAwMDAwMDEwNTAgNjU1MzUgZg0KMDAwMDAwMTA1MSA2NTUzNSBmDQowMDAw MDAxMDUyIDY1NTM1IGYNCjAwMDAwMDEwNTMgNjU1MzUgZg0KMDAwMDAwMTA1NCA2NTUzNSBm DQowMDAwMDAxMDU1IDY1NTM1IGYNCjAwMDAwMDEwNTYgNjU1MzUgZg0KMDAwMDAwMTA1NyA2 NTUzNSBmDQowMDAwMDAxMDU4IDY1NTM1IGYNCjAwMDAwMDEwNTkgNjU1MzUgZg0KMDAwMDAw MTA2MCA2NTUzNSBmDQowMDAwMDAxMDYxIDY1NTM1IGYNCjAwMDAwMDEwNjIgNjU1MzUgZg0K MDAwMDAwMTA2MyA2NTUzNSBmDQowMDAwMDAxMDY0IDY1NTM1IGYNCjAwMDAwMDEwNjUgNjU1 MzUgZg0KMDAwMDAwMTA2NiA2NTUzNSBmDQowMDAwMDAxMDY3IDY1NTM1IGYNCjAwMDAwMDEw NjggNjU1MzUgZg0KMDAwMDAwMTA2OSA2NTUzNSBmDQowMDAwMDAxMDcwIDY1NTM1IGYNCjAw MDAwMDEwNzEgNjU1MzUgZg0KMDAwMDAwMTA3MiA2NTUzNSBmDQowMDAwMDAxMDczIDY1NTM1 IGYNCjAwMDAwMDEwNzQgNjU1MzUgZg0KMDAwMDAwMTA3NSA2NTUzNSBmDQowMDAwMDAxMDc2 IDY1NTM1IGYNCjAwMDAwMDEwNzcgNjU1MzUgZg0KMDAwMDAwMTA3OCA2NTUzNSBmDQowMDAw MDAxMDc5IDY1NTM1IGYNCjAwMDAwMDEwODAgNjU1MzUgZg0KMDAwMDAwMTA4MSA2NTUzNSBm DQowMDAwMDAxMDgyIDY1NTM1IGYNCjAwMDAwMDEwODMgNjU1MzUgZg0KMDAwMDAwMTA4NCA2 NTUzNSBmDQowMDAwMDAxMDg1IDY1NTM1IGYNCjAwMDAwMDEwODYgNjU1MzUgZg0KMDAwMDAw MTA4NyA2NTUzNSBmDQowMDAwMDAxMDg4IDY1NTM1IGYNCjAwMDAwMDEwODkgNjU1MzUgZg0K MDAwMDAwMTA5MCA2NTUzNSBmDQowMDAwMDAxMDkxIDY1NTM1IGYNCjAwMDAwMDEwOTIgNjU1 MzUgZg0KMDAwMDAwMTA5MyA2NTUzNSBmDQowMDAwMDAxMDk0IDY1NTM1IGYNCjAwMDAwMDEw OTUgNjU1MzUgZg0KMDAwMDAwMTA5NiA2NTUzNSBmDQowMDAwMDAxMDk3IDY1NTM1IGYNCjAw MDAwMDEwOTggNjU1MzUgZg0KMDAwMDAwMTA5OSA2NTUzNSBmDQowMDAwMDAxMTAwIDY1NTM1 IGYNCjAwMDAwMDExMDEgNjU1MzUgZg0KMDAwMDAwMTEwMiA2NTUzNSBmDQowMDAwMDAxMTAz IDY1NTM1IGYNCjAwMDAwMDExMDQgNjU1MzUgZg0KMDAwMDAwMTEwNSA2NTUzNSBmDQowMDAw MDAxMTA2IDY1NTM1IGYNCjAwMDAwMDExMDcgNjU1MzUgZg0KMDAwMDAwMTEwOCA2NTUzNSBm DQowMDAwMDAxMTA5IDY1NTM1IGYNCjAwMDAwMDExMTAgNjU1MzUgZg0KMDAwMDAwMTExMSA2 NTUzNSBmDQowMDAwMDAxMTEyIDY1NTM1IGYNCjAwMDAwMDExMTMgNjU1MzUgZg0KMDAwMDAw MTExNCA2NTUzNSBmDQowMDAwMDAxMTE1IDY1NTM1IGYNCjAwMDAwMDExMTYgNjU1MzUgZg0K MDAwMDAwMTExNyA2NTUzNSBmDQowMDAwMDAxMTE4IDY1NTM1IGYNCjAwMDAwMDExMTkgNjU1 MzUgZg0KMDAwMDAwMTEyMCA2NTUzNSBmDQowMDAwMDAxMTIxIDY1NTM1IGYNCjAwMDAwMDEx MjIgNjU1MzUgZg0KMDAwMDAwMTEyMyA2NTUzNSBmDQowMDAwMDAxMTI0IDY1NTM1IGYNCjAw MDAwMDExMjUgNjU1MzUgZg0KMDAwMDAwMTEyNiA2NTUzNSBmDQowMDAwMDAxMTI3IDY1NTM1 IGYNCjAwMDAwMDExMjggNjU1MzUgZg0KMDAwMDAwMTEyOSA2NTUzNSBmDQowMDAwMDAxMTMw IDY1NTM1IGYNCjAwMDAwMDExMzEgNjU1MzUgZg0KMDAwMDAwMTEzMiA2NTUzNSBmDQowMDAw MDAxMTMzIDY1NTM1IGYNCjAwMDAwMDExMzQgNjU1MzUgZg0KMDAwMDAwMTEzNSA2NTUzNSBm DQowMDAwMDAxMTM2IDY1NTM1IGYNCjAwMDAwMDExMzcgNjU1MzUgZg0KMDAwMDAwMTEzOCA2 NTUzNSBmDQowMDAwMDAxMTM5IDY1NTM1IGYNCjAwMDAwMDExNDAgNjU1MzUgZg0KMDAwMDAw MTE0MSA2NTUzNSBmDQowMDAwMDAxMTQyIDY1NTM1IGYNCjAwMDAwMDExNDMgNjU1MzUgZg0K MDAwMDAwMTE0NCA2NTUzNSBmDQowMDAwMDAxMTQ1IDY1NTM1IGYNCjAwMDAwMDExNDYgNjU1 MzUgZg0KMDAwMDAwMTE0NyA2NTUzNSBmDQowMDAwMDAxMTQ4IDY1NTM1IGYNCjAwMDAwMDEx NDkgNjU1MzUgZg0KMDAwMDAwMTE1MCA2NTUzNSBmDQowMDAwMDAxMTUxIDY1NTM1IGYNCjAw MDAwMDExNTIgNjU1MzUgZg0KMDAwMDAwMTE1MyA2NTUzNSBmDQowMDAwMDAxMTU0IDY1NTM1 IGYNCjAwMDAwMDExNTUgNjU1MzUgZg0KMDAwMDAwMTE1NiA2NTUzNSBmDQowMDAwMDAxMTU3 IDY1NTM1IGYNCjAwMDAwMDExNTggNjU1MzUgZg0KMDAwMDAwMTE1OSA2NTUzNSBmDQowMDAw MDAxMTYwIDY1NTM1IGYNCjAwMDAwMDExNjEgNjU1MzUgZg0KMDAwMDAwMTE2MiA2NTUzNSBm DQowMDAwMDAxMTYzIDY1NTM1IGYNCjAwMDAwMDExNjQgNjU1MzUgZg0KMDAwMDAwMTE2NSA2 NTUzNSBmDQowMDAwMDAxMTY2IDY1NTM1IGYNCjAwMDAwMDExNjcgNjU1MzUgZg0KMDAwMDAw MTE2OCA2NTUzNSBmDQowMDAwMDAxMTY5IDY1NTM1IGYNCjAwMDAwMDExNzAgNjU1MzUgZg0K MDAwMDAwMTE3MSA2NTUzNSBmDQowMDAwMDAxMTcyIDY1NTM1IGYNCjAwMDAwMDExNzMgNjU1 MzUgZg0KMDAwMDAwMTE3NCA2NTUzNSBmDQowMDAwMDAxMTc1IDY1NTM1IGYNCjAwMDAwMDEx NzYgNjU1MzUgZg0KMDAwMDAwMTE3NyA2NTUzNSBmDQowMDAwMDAxMTc4IDY1NTM1IGYNCjAw MDAwMDExNzkgNjU1MzUgZg0KMDAwMDAwMTE4MCA2NTUzNSBmDQowMDAwMDAxMTgxIDY1NTM1 IGYNCjAwMDAwMDExODIgNjU1MzUgZg0KMDAwMDAwMTE4MyA2NTUzNSBmDQowMDAwMDAxMTg0 IDY1NTM1IGYNCjAwMDAwMDExODUgNjU1MzUgZg0KMDAwMDAwMTE4NiA2NTUzNSBmDQowMDAw MDAxMTg3IDY1NTM1IGYNCjAwMDAwMDExODggNjU1MzUgZg0KMDAwMDAwMTE4OSA2NTUzNSBm DQowMDAwMDAxMTkwIDY1NTM1IGYNCjAwMDAwMDExOTEgNjU1MzUgZg0KMDAwMDAwMTE5MiA2 NTUzNSBmDQowMDAwMDAxMTkzIDY1NTM1IGYNCjAwMDAwMDExOTQgNjU1MzUgZg0KMDAwMDAw MTE5NSA2NTUzNSBmDQowMDAwMDAxMTk2IDY1NTM1IGYNCjAwMDAwMDExOTcgNjU1MzUgZg0K MDAwMDAwMTE5OCA2NTUzNSBmDQowMDAwMDAxMTk5IDY1NTM1IGYNCjAwMDAwMDEyMDAgNjU1 MzUgZg0KMDAwMDAwMTIwMSA2NTUzNSBmDQowMDAwMDAxMjAyIDY1NTM1IGYNCjAwMDAwMDEy MDMgNjU1MzUgZg0KMDAwMDAwMTIwNCA2NTUzNSBmDQowMDAwMDAxMjA1IDY1NTM1IGYNCjAw MDAwMDEyMDYgNjU1MzUgZg0KMDAwMDAwMTIwNyA2NTUzNSBmDQowMDAwMDAxMjA4IDY1NTM1 IGYNCjAwMDAwMDEyMDkgNjU1MzUgZg0KMDAwMDAwMTIxMCA2NTUzNSBmDQowMDAwMDAxMjEx IDY1NTM1IGYNCjAwMDAwMDEyMTIgNjU1MzUgZg0KMDAwMDAwMTIxMyA2NTUzNSBmDQowMDAw MDAxMjE0IDY1NTM1IGYNCjAwMDAwMDEyMTUgNjU1MzUgZg0KMDAwMDAwMTIxNiA2NTUzNSBm DQowMDAwMDAxMjE3IDY1NTM1IGYNCjAwMDAwMDEyMTggNjU1MzUgZg0KMDAwMDAwMTIxOSA2 NTUzNSBmDQowMDAwMDAxMjIwIDY1NTM1IGYNCjAwMDAwMDEyMjEgNjU1MzUgZg0KMDAwMDAw MTIyMiA2NTUzNSBmDQowMDAwMDAxMjIzIDY1NTM1IGYNCjAwMDAwMDEyMjQgNjU1MzUgZg0K MDAwMDAwMTIyNSA2NTUzNSBmDQowMDAwMDAxMjI2IDY1NTM1IGYNCjAwMDAwMDEyMjcgNjU1 MzUgZg0KMDAwMDAwMTIyOCA2NTUzNSBmDQowMDAwMDAxMjI5IDY1NTM1IGYNCjAwMDAwMDEy MzAgNjU1MzUgZg0KMDAwMDAwMTIzMSA2NTUzNSBmDQowMDAwMDAxMjMyIDY1NTM1IGYNCjAw MDAwMDEyMzMgNjU1MzUgZg0KMDAwMDAwMTIzNCA2NTUzNSBmDQowMDAwMDAxMjM1IDY1NTM1 IGYNCjAwMDAwMDEyMzYgNjU1MzUgZg0KMDAwMDAwMTIzNyA2NTUzNSBmDQowMDAwMDAxMjM4 IDY1NTM1IGYNCjAwMDAwMDEyMzkgNjU1MzUgZg0KMDAwMDAwMTI0MCA2NTUzNSBmDQowMDAw MDAxMjQxIDY1NTM1IGYNCjAwMDAwMDEyNDIgNjU1MzUgZg0KMDAwMDAwMTI0MyA2NTUzNSBm DQowMDAwMDAxMjQ0IDY1NTM1IGYNCjAwMDAwMDEyNDUgNjU1MzUgZg0KMDAwMDAwMTI0NiA2 NTUzNSBmDQowMDAwMDAxMjQ3IDY1NTM1IGYNCjAwMDAwMDEyNDggNjU1MzUgZg0KMDAwMDAw MTI0OSA2NTUzNSBmDQowMDAwMDAxMjUwIDY1NTM1IGYNCjAwMDAwMDEyNTEgNjU1MzUgZg0K MDAwMDAwMTI1MiA2NTUzNSBmDQowMDAwMDAxMjUzIDY1NTM1IGYNCjAwMDAwMDEyNTQgNjU1 MzUgZg0KMDAwMDAwMTI1NSA2NTUzNSBmDQowMDAwMDAxMjU2IDY1NTM1IGYNCjAwMDAwMDEy NTcgNjU1MzUgZg0KMDAwMDAwMTI1OCA2NTUzNSBmDQowMDAwMDAxMjU5IDY1NTM1IGYNCjAw MDAwMDEyNjAgNjU1MzUgZg0KMDAwMDAwMTI2MSA2NTUzNSBmDQowMDAwMDAxMjYyIDY1NTM1 IGYNCjAwMDAwMDEyNjMgNjU1MzUgZg0KMDAwMDAwMTI2NCA2NTUzNSBmDQowMDAwMDAxMjY1 IDY1NTM1IGYNCjAwMDAwMDEyNjYgNjU1MzUgZg0KMDAwMDAwMTI2NyA2NTUzNSBmDQowMDAw MDAxMjY4IDY1NTM1IGYNCjAwMDAwMDEyNjkgNjU1MzUgZg0KMDAwMDAwMTI3MCA2NTUzNSBm DQowMDAwMDAxMjcxIDY1NTM1IGYNCjAwMDAwMDEyNzIgNjU1MzUgZg0KMDAwMDAwMTI3MyA2 NTUzNSBmDQowMDAwMDAxMjc0IDY1NTM1IGYNCjAwMDAwMDEyNzUgNjU1MzUgZg0KMDAwMDAw MTI3NiA2NTUzNSBmDQowMDAwMDAxMjc3IDY1NTM1IGYNCjAwMDAwMDEyNzggNjU1MzUgZg0K MDAwMDAwMTI3OSA2NTUzNSBmDQowMDAwMDAxMjgwIDY1NTM1IGYNCjAwMDAwMDEyODEgNjU1 MzUgZg0KMDAwMDAwMTI4MiA2NTUzNSBmDQowMDAwMDAxMjgzIDY1NTM1IGYNCjAwMDAwMDEy ODQgNjU1MzUgZg0KMDAwMDAwMTI4NSA2NTUzNSBmDQowMDAwMDAxMjg2IDY1NTM1IGYNCjAw MDAwMDEyODcgNjU1MzUgZg0KMDAwMDAwMTI4OCA2NTUzNSBmDQowMDAwMDAxMjg5IDY1NTM1 IGYNCjAwMDAwMDEyOTAgNjU1MzUgZg0KMDAwMDAwMTI5MSA2NTUzNSBmDQowMDAwMDAxMjky IDY1NTM1IGYNCjAwMDAwMDEyOTMgNjU1MzUgZg0KMDAwMDAwMTI5NCA2NTUzNSBmDQowMDAw MDAxMjk1IDY1NTM1IGYNCjAwMDAwMDEyOTYgNjU1MzUgZg0KMDAwMDAwMTI5NyA2NTUzNSBm DQowMDAwMDAxMjk4IDY1NTM1IGYNCjAwMDAwMDEyOTkgNjU1MzUgZg0KMDAwMDAwMTMwMCA2 NTUzNSBmDQowMDAwMDAxMzAxIDY1NTM1IGYNCjAwMDAwMDEzMDIgNjU1MzUgZg0KMDAwMDAw MTMwMyA2NTUzNSBmDQowMDAwMDAxMzA0IDY1NTM1IGYNCjAwMDAwMDEzMDUgNjU1MzUgZg0K MDAwMDAwMTMwNiA2NTUzNSBmDQowMDAwMDAxMzA3IDY1NTM1IGYNCjAwMDAwMDEzMDggNjU1 MzUgZg0KMDAwMDAwMTMwOSA2NTUzNSBmDQowMDAwMDAxMzEwIDY1NTM1IGYNCjAwMDAwMDEz MTEgNjU1MzUgZg0KMDAwMDAwMTMxMiA2NTUzNSBmDQowMDAwMDAxMzEzIDY1NTM1IGYNCjAw MDAwMDEzMTQgNjU1MzUgZg0KMDAwMDAwMTMxNSA2NTUzNSBmDQowMDAwMDAxMzE2IDY1NTM1 IGYNCjAwMDAwMDEzMTcgNjU1MzUgZg0KMDAwMDAwMTMxOCA2NTUzNSBmDQowMDAwMDAxMzE5 IDY1NTM1IGYNCjAwMDAwMDEzMjAgNjU1MzUgZg0KMDAwMDAwMTMyMSA2NTUzNSBmDQowMDAw MDAxMzIyIDY1NTM1IGYNCjAwMDAwMDEzMjMgNjU1MzUgZg0KMDAwMDAwMTMyNCA2NTUzNSBm DQowMDAwMDAxMzI1IDY1NTM1IGYNCjAwMDAwMDEzMjYgNjU1MzUgZg0KMDAwMDAwMTMyNyA2 NTUzNSBmDQowMDAwMDAxMzI4IDY1NTM1IGYNCjAwMDAwMDEzMjkgNjU1MzUgZg0KMDAwMDAw MTMzMCA2NTUzNSBmDQowMDAwMDAxMzMxIDY1NTM1IGYNCjAwMDAwMDEzMzIgNjU1MzUgZg0K MDAwMDAwMTMzMyA2NTUzNSBmDQowMDAwMDAxMzM0IDY1NTM1IGYNCjAwMDAwMDEzMzUgNjU1 MzUgZg0KMDAwMDAwMTMzNiA2NTUzNSBmDQowMDAwMDAxMzM3IDY1NTM1IGYNCjAwMDAwMDEz MzggNjU1MzUgZg0KMDAwMDAwMTMzOSA2NTUzNSBmDQowMDAwMDAxMzQwIDY1NTM1IGYNCjAw MDAwMDEzNDEgNjU1MzUgZg0KMDAwMDAwMTM0MiA2NTUzNSBmDQowMDAwMDAxMzQzIDY1NTM1 IGYNCjAwMDAwMDEzNDQgNjU1MzUgZg0KMDAwMDAwMTM0NSA2NTUzNSBmDQowMDAwMDAxMzQ2 IDY1NTM1IGYNCjAwMDAwMDEzNDcgNjU1MzUgZg0KMDAwMDAwMTM0OCA2NTUzNSBmDQowMDAw MDAxMzQ5IDY1NTM1IGYNCjAwMDAwMDEzNTAgNjU1MzUgZg0KMDAwMDAwMTM1MSA2NTUzNSBm DQowMDAwMDAxMzUyIDY1NTM1IGYNCjAwMDAwMDEzNTMgNjU1MzUgZg0KMDAwMDAwMTM1NCA2 NTUzNSBmDQowMDAwMDAxMzU1IDY1NTM1IGYNCjAwMDAwMDEzNTYgNjU1MzUgZg0KMDAwMDAw MTM1NyA2NTUzNSBmDQowMDAwMDAxMzU4IDY1NTM1IGYNCjAwMDAwMDEzNTkgNjU1MzUgZg0K MDAwMDAwMTM2MCA2NTUzNSBmDQowMDAwMDAxMzYxIDY1NTM1IGYNCjAwMDAwMDEzNjIgNjU1 MzUgZg0KMDAwMDAwMTM2MyA2NTUzNSBmDQowMDAwMDAxMzY0IDY1NTM1IGYNCjAwMDAwMDEz NjUgNjU1MzUgZg0KMDAwMDAwMTM2NiA2NTUzNSBmDQowMDAwMDAxMzY3IDY1NTM1IGYNCjAw MDAwMDEzNjggNjU1MzUgZg0KMDAwMDAwMTM2OSA2NTUzNSBmDQowMDAwMDAxMzcwIDY1NTM1 IGYNCjAwMDAwMDEzNzEgNjU1MzUgZg0KMDAwMDAwMTM3MiA2NTUzNSBmDQowMDAwMDAxMzcz IDY1NTM1IGYNCjAwMDAwMDEzNzQgNjU1MzUgZg0KMDAwMDAwMTM3NSA2NTUzNSBmDQowMDAw MDAxMzc2IDY1NTM1IGYNCjAwMDAwMDEzNzcgNjU1MzUgZg0KMDAwMDAwMTM3OCA2NTUzNSBm DQowMDAwMDAxMzc5IDY1NTM1IGYNCjAwMDAwMDEzODAgNjU1MzUgZg0KMDAwMDAwMTM4MSA2 NTUzNSBmDQowMDAwMDAxMzgyIDY1NTM1IGYNCjAwMDAwMDEzODMgNjU1MzUgZg0KMDAwMDAw MTM4NCA2NTUzNSBmDQowMDAwMDAxMzg1IDY1NTM1IGYNCjAwMDAwMDEzODYgNjU1MzUgZg0K MDAwMDAwMTM4NyA2NTUzNSBmDQowMDAwMDAxMzg4IDY1NTM1IGYNCjAwMDAwMDEzODkgNjU1 MzUgZg0KMDAwMDAwMTM5MCA2NTUzNSBmDQowMDAwMDAxMzkxIDY1NTM1IGYNCjAwMDAwMDEz OTIgNjU1MzUgZg0KMDAwMDAwMTM5MyA2NTUzNSBmDQowMDAwMDAxMzk0IDY1NTM1IGYNCjAw MDAwMDEzOTUgNjU1MzUgZg0KMDAwMDAwMTM5NiA2NTUzNSBmDQowMDAwMDAxMzk3IDY1NTM1 IGYNCjAwMDAwMDEzOTggNjU1MzUgZg0KMDAwMDAwMTM5OSA2NTUzNSBmDQowMDAwMDAxNDAw IDY1NTM1IGYNCjAwMDAwMDE0MDEgNjU1MzUgZg0KMDAwMDAwMTQwMiA2NTUzNSBmDQowMDAw MDAxNDAzIDY1NTM1IGYNCjAwMDAwMDE0MDQgNjU1MzUgZg0KMDAwMDAwMTQwNSA2NTUzNSBm DQowMDAwMDAxNDA2IDY1NTM1IGYNCjAwMDAwMDE0MDcgNjU1MzUgZg0KMDAwMDAwMTQwOCA2 NTUzNSBmDQowMDAwMDAxNDA5IDY1NTM1IGYNCjAwMDAwMDE0MTAgNjU1MzUgZg0KMDAwMDAw MTQxMSA2NTUzNSBmDQowMDAwMDAxNDEyIDY1NTM1IGYNCjAwMDAwMDE0MTMgNjU1MzUgZg0K MDAwMDAwMTQxNCA2NTUzNSBmDQowMDAwMDAxNDE1IDY1NTM1IGYNCjAwMDAwMDE0MTYgNjU1 MzUgZg0KMDAwMDAwMTQxNyA2NTUzNSBmDQowMDAwMDAxNDE4IDY1NTM1IGYNCjAwMDAwMDE0 MTkgNjU1MzUgZg0KMDAwMDAwMTQyMCA2NTUzNSBmDQowMDAwMDAxNDIxIDY1NTM1IGYNCjAw MDAwMDE0MjIgNjU1MzUgZg0KMDAwMDAwMTQyMyA2NTUzNSBmDQowMDAwMDAxNDI0IDY1NTM1 IGYNCjAwMDAwMDE0MjUgNjU1MzUgZg0KMDAwMDAwMTQyNiA2NTUzNSBmDQowMDAwMDAxNDI3 IDY1NTM1IGYNCjAwMDAwMDE0MjggNjU1MzUgZg0KMDAwMDAwMTQyOSA2NTUzNSBmDQowMDAw MDAxNDMwIDY1NTM1IGYNCjAwMDAwMDE0MzEgNjU1MzUgZg0KMDAwMDAwMTQzMiA2NTUzNSBm DQowMDAwMDAxNDMzIDY1NTM1IGYNCjAwMDAwMDE0MzQgNjU1MzUgZg0KMDAwMDAwMTQzNSA2 NTUzNSBmDQowMDAwMDAxNDM2IDY1NTM1IGYNCjAwMDAwMDE0MzcgNjU1MzUgZg0KMDAwMDAw MTQzOCA2NTUzNSBmDQowMDAwMDAxNDM5IDY1NTM1IGYNCjAwMDAwMDE0NDAgNjU1MzUgZg0K MDAwMDAwMTQ0MSA2NTUzNSBmDQowMDAwMDAxNDQyIDY1NTM1IGYNCjAwMDAwMDE0NDMgNjU1 MzUgZg0KMDAwMDAwMTQ0NCA2NTUzNSBmDQowMDAwMDAxNDQ1IDY1NTM1IGYNCjAwMDAwMDE0 NDYgNjU1MzUgZg0KMDAwMDAwMTQ0NyA2NTUzNSBmDQowMDAwMDAxNDQ4IDY1NTM1IGYNCjAw MDAwMDE0NDkgNjU1MzUgZg0KMDAwMDAwMTQ1MCA2NTUzNSBmDQowMDAwMDAxNDUxIDY1NTM1 IGYNCjAwMDAwMDE0NTIgNjU1MzUgZg0KMDAwMDAwMTQ1MyA2NTUzNSBmDQowMDAwMDAxNDU0 IDY1NTM1IGYNCjAwMDAwMDE0NTUgNjU1MzUgZg0KMDAwMDAwMTQ1NiA2NTUzNSBmDQowMDAw MDAxNDU3IDY1NTM1IGYNCjAwMDAwMDE0NTggNjU1MzUgZg0KMDAwMDAwMTQ1OSA2NTUzNSBm DQowMDAwMDAxNDYwIDY1NTM1IGYNCjAwMDAwMDE0NjEgNjU1MzUgZg0KMDAwMDAwMTQ2MiA2 NTUzNSBmDQowMDAwMDAxNDYzIDY1NTM1IGYNCjAwMDAwMDE0NjQgNjU1MzUgZg0KMDAwMDAw MTQ2NSA2NTUzNSBmDQowMDAwMDAxNDY2IDY1NTM1IGYNCjAwMDAwMDE0NjcgNjU1MzUgZg0K MDAwMDAwMTQ2OCA2NTUzNSBmDQowMDAwMDAxNDY5IDY1NTM1IGYNCjAwMDAwMDE0NzAgNjU1 MzUgZg0KMDAwMDAwMTQ3MSA2NTUzNSBmDQowMDAwMDAxNDcyIDY1NTM1IGYNCjAwMDAwMDE0 NzMgNjU1MzUgZg0KMDAwMDAwMTQ3NCA2NTUzNSBmDQowMDAwMDAxNDc1IDY1NTM1IGYNCjAw MDAwMDE0NzYgNjU1MzUgZg0KMDAwMDAwMTQ3NyA2NTUzNSBmDQowMDAwMDAxNDc4IDY1NTM1 IGYNCjAwMDAwMDE0NzkgNjU1MzUgZg0KMDAwMDAwMTQ4MCA2NTUzNSBmDQowMDAwMDAxNDgx IDY1NTM1IGYNCjAwMDAwMDE0ODIgNjU1MzUgZg0KMDAwMDAwMTQ4MyA2NTUzNSBmDQowMDAw MDAxNDg0IDY1NTM1IGYNCjAwMDAwMDE0ODUgNjU1MzUgZg0KMDAwMDAwMTQ4NiA2NTUzNSBm DQowMDAwMDAxNDg3IDY1NTM1IGYNCjAwMDAwMDE0ODggNjU1MzUgZg0KMDAwMDAwMTQ4OSA2 NTUzNSBmDQowMDAwMDAxNDkwIDY1NTM1IGYNCjAwMDAwMDE0OTEgNjU1MzUgZg0KMDAwMDAw MTQ5MiA2NTUzNSBmDQowMDAwMDAxNDkzIDY1NTM1IGYNCjAwMDAwMDE0OTQgNjU1MzUgZg0K MDAwMDAwMTQ5NSA2NTUzNSBmDQowMDAwMDAxNDk2IDY1NTM1IGYNCjAwMDAwMDE0OTcgNjU1 MzUgZg0KMDAwMDAwMTQ5OCA2NTUzNSBmDQowMDAwMDAxNDk5IDY1NTM1IGYNCjAwMDAwMDE1 MDAgNjU1MzUgZg0KMDAwMDAwMTUwMSA2NTUzNSBmDQowMDAwMDAxNTAyIDY1NTM1IGYNCjAw MDAwMDE1MDMgNjU1MzUgZg0KMDAwMDAwMTUwNCA2NTUzNSBmDQowMDAwMDAwMDAwIDY1NTM1 IGYNCjAwMDAxNDc2MTkgMDAwMDAgbg0KMDAwMDE0ODAzNSAwMDAwMCBuDQowMDAwMjIxMjY1 IDAwMDAwIG4NCjAwMDAyMjE2ODggMDAwMDAgbg0KMDAwMDIyMjA1MSAwMDAwMCBuDQowMDAw MjIyMzUyIDAwMDAwIG4NCjAwMDAyODY1NzIgMDAwMDAgbg0KMDAwMDI4NjkyNSAwMDAwMCBu DQowMDAwMjg3MjYzIDAwMDAwIG4NCjAwMDAyODc1NjQgMDAwMDAgbg0KMDAwMDM0Nzg0MSAw MDAwMCBuDQowMDAwMzQ4MjM3IDAwMDAwIG4NCjAwMDAzNDg1NzggMDAwMDAgbg0KMDAwMDM0 ODg1MyAwMDAwMCBuDQowMDAwMzQ5MTU0IDAwMDAwIG4NCjAwMDA0MDU0MDQgMDAwMDAgbg0K MDAwMDQwNTc2NiAwMDAwMCBuDQowMDAwNDA2MDk5IDAwMDAwIG4NCjAwMDA0MDY0MDcgMDAw MDAgbg0KMDAwMDQxODk3OCAwMDAwMCBuDQowMDAwNDE5MDMyIDAwMDAwIG4NCnRyYWlsZXIN Cjw8L1NpemUgMTUyNi9Sb290IDEgMCBSL0luZm8gMTE1IDAgUi9JRFs8QTY3NjQyNkFENzM5 NjA0MjhDM0VERDhBRENCRTU4NDU+PEE2NzY0MjZBRDczOTYwNDI4QzNFREQ4QURDQkU1ODQ1 Pl0gPj4NCnN0YXJ0eHJlZg0KNDIyMzAyDQolJUVPRg0KeHJlZg0KMCAwDQp0cmFpbGVyDQo8 PC9TaXplIDE1MjYvUm9vdCAxIDAgUi9JbmZvIDExNSAwIFIvSURbPEE2NzY0MjZBRDczOTYw NDI4QzNFREQ4QURDQkU1ODQ1PjxBNjc2NDI2QUQ3Mzk2MDQyOEMzRUREOEFEQ0JFNTg0NT5d IC9QcmV2IDQyMjMwMi9YUmVmU3RtIDQxOTAzMj4+DQpzdGFydHhyZWYNCjQ1Mjk4NQ0KJSVF T0Y= --------------9E9FBE5BE082F6ACCBF8C3E9-- From nobody Mon Jun 20 16:43:45 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 689EB12D7D4 for ; Mon, 20 Jun 2016 16:43:43 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ta09nyYVAfyp for ; Mon, 20 Jun 2016 16:43:41 -0700 (PDT) Received: from mail-ob0-x22d.google.com (mail-ob0-x22d.google.com [IPv6:2607:f8b0:4003:c01::22d]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 80E7812D0CB for ; Mon, 20 Jun 2016 16:43:41 -0700 (PDT) Received: by mail-ob0-x22d.google.com with SMTP id xn17so1063722obc.0 for ; Mon, 20 Jun 2016 16:43:41 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=Pdc78F7jpOjYfPdwqk/2YdD0Gyx39FW5ms15OVBy9Ag=; b=B3nu3Ow2YHGshFboqjeAGoYWtIrkl9sOipqTg/4aBbIn9DW9nJwJIfqYfcIqhm4eyh lL6zF3Q0FpK3j6PpYM+jG86YOPeTDLdQAQvS3wywmr7ztPFEtW8bpFNJFAvcjPejTeFm 0/cj2ABeoEmelnD8sEo63uEbJkFFsCXA67E6LgYKQF2qASZ/BzJeBC1bo3g/E6LRyaeU B5VzCkreDEpCu9QjOl51cT9u1EaBTmycE3FYMoz85pdt1x5gpUXer9YxX+F1aoOJCPB3 CgaCtcqDP1jV7QeCRwh8VQrNhrniBf8rhwkukfvgecxGSHicgNVxJNtQ+Tv/Kg4SusYK /acw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=Pdc78F7jpOjYfPdwqk/2YdD0Gyx39FW5ms15OVBy9Ag=; b=ObIwjVe8szCKaKvEw0wLMkrQB2aJ4J41h2Bx2g2HQHz/fb+MLP53r9hJIjsCcFKH6f v5CALPcEfW6a5Mf0b0w1z09U8QK/4y5U4bh8u2sBXeoLnJVD5rWq9Kw8MIGkeWMkohPP heLvm/2/p7tV/oIdKuVsUZa6YB8+8xXN/VaMHm6yFSKXIWF13AjtULI5MfAPdSjcHbOT G/ccOml/5TnRKr4+Ml58ODkn7qNJy3h6Be74b9NchOqekeoRYg7rAMZCF8NaXn/nd1Oo FcTjyxx+IwnAFdHbx8wt8CNYqKZ427xZnDSflOt/rgwocAaLs1UmHqw3RzXKE4/TmH6D ijhQ== X-Gm-Message-State: ALyK8tLiwO6PJv+JPnIT9PiFuxPrkbyWNlZZbUL7CzwucTj/3XFd06+Wk+w9wivIieq4yg== X-Received: by 10.157.41.204 with SMTP id g12mr11399492otd.68.1466466220246; Mon, 20 Jun 2016 16:43:40 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id 9sm14479245oth.15.2016.06.20.16.43.37 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 20 Jun 2016 16:43:37 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_3FC67207-0403-4051-8C12-884FF266C537"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Mon, 20 Jun 2016 18:43:32 -0500 Message-Id: <1CCF7D9A-6249-42CD-ACDF-95E6FD262BF1@gmail.com> References: <576805A6.8040609@sit.fraunhofer.de> To: "Haynes, Dan" X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Henk Birkholz , "sacm@ietf.org" Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jun 2016 23:43:43 -0000 --Apple-Mail=_3FC67207-0403-4051-8C12-884FF266C537 Content-Type: multipart/alternative; boundary="Apple-Mail=_05D15273-C9D9-4007-9B4C-2C5967C57BA0" --Apple-Mail=_05D15273-C9D9-4007-9B4C-2C5967C57BA0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=iso-8859-1 > On Jun 20, 2016, at 12:02 PM, Haynes, Dan wrote: >=20 > Henk, I think so. With that said, I think the scanner in the diagram = could be either on/off the endpoint and it could perform = authenticated/unauthenticated scans. I believe you are correct, Danny. --Apple-Mail=_05D15273-C9D9-4007-9B4C-2C5967C57BA0 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=iso-8859-1
On Jun 20, 2016, at 12:02 PM, Haynes, Dan <dhaynes@mitre.org> = wrote:

Henk, I think so.  With that said, I think = the scanner in the diagram could be either on/off the endpoint and it = could perform authenticated/unauthenticated scans. 

I believe you are correct, = Danny.
= --Apple-Mail=_05D15273-C9D9-4007-9B4C-2C5967C57BA0-- --Apple-Mail=_3FC67207-0403-4051-8C12-884FF266C537 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXaH+oAAoJEDEhyx7etgABJUgP/AguIUCbGozrqaixGS/dwIQx MIK8N+NePPpo8LxPcXd9vV051Mb7TUlHY+nzvfyZ/NbLKiAlVdSPGE9kx5xiCi7d LSmMEg4IRaw0jk0HW6C3B9Go89FVNa7advfYWBwYMiIWplOct1tsr4LMssDeJcMe wdAuwyaGW9Ta4oK4mAh61b8Y7bnqiuS9+lO0Y7mzIilriS1Z2xrxiT5579XHN0wK Oqof4VRazAqXAfLj3ljkSCec3iq6jx8Co50xUfWUxgm9RXz2wgBsADyMP3Y3QNPq 1Fb/Ybx5apog0pQLOmledIjnHtABb63bOoBCKaXNxnP2bfWBDALIIvsa3Qqz4w/W kkaCon1QgqaOWNkZYEJBGqtNtFeUf2DTt5ejMmaabHf0QO3FUB/dw/0cAW4ZHDOa MXK1tidRQzy6ZtQZ1/EFF4nm7+ZtmFoN0i9ZYcOtko4mzlMUaD25WGvo0tRY2fRe EPJphNy6Yx7HuAK+kSVptsHjiNB+8OKI1/ZowJfXcUiR3maCD4fzIVSxqnacWpCV FRGyA3PNBaV7RqX5SkFcvoiloK/Xtlo8jPVtn2cLqTch2m4ekFyMrhaWojseYHSN 9XsPu8FurgwYM+zbSKBqeJBfYgMDxwsEt3XldZw/Q+ehwrBNhC4GWU4scv7OmXEG UiqCKaqnRhRzgCyZuJXW =ao+z -----END PGP SIGNATURE----- --Apple-Mail=_3FC67207-0403-4051-8C12-884FF266C537-- From nobody Mon Jun 20 16:49:21 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 1AC4712D6AE for ; Mon, 20 Jun 2016 16:49:20 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jcQuup-XCdjl for ; Mon, 20 Jun 2016 16:49:16 -0700 (PDT) Received: from mail-ob0-x231.google.com (mail-ob0-x231.google.com [IPv6:2607:f8b0:4003:c01::231]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B492F12D68F for ; Mon, 20 Jun 2016 16:49:16 -0700 (PDT) Received: by mail-ob0-x231.google.com with SMTP id xn17so55292obc.0 for ; Mon, 20 Jun 2016 16:49:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=JF7nYbF1egf3WWDteH2kP72wh/yDC8h7imPUjo2tJso=; b=C80G01XWXOQivw6+EqlMV1tQQRvsyYf0SY3vTm27zXgeHW3FHyvYepKlFrZCzEd6JI T6fNcog5IwOEjFAFin+XqfvmVqlsWDnorNWHhdeMYf4APJQlfLPuNAGM0wrYjKv8LKdg 6AuY1dOuAHvAzDiQJFw+KaAc3fQCORh0bTeSIt1Uj7hkSgy/yvvtR2Upart+prwj827/ zrBdAhWGVMxK9SjcpgiD2ADbx/3W/RcIuEgYJ4D25VVD3LL+7qzTXECvu9R4L/hr8sQA NcuNtKSStODvymoHPE1QRy4UuYILB5gvNCBcS/iyi0UFbi/dpQIjD18gn/2YWHikFrAa s7xw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=JF7nYbF1egf3WWDteH2kP72wh/yDC8h7imPUjo2tJso=; b=Er7+fYS3oi2x+UBNUjHtM2iN5DAo5Jz0eD/YlYQoT50KhGW34Y8lPYnjY90M+W6yR9 AU7eK9DVQBwWpsERwQBBIlE9slkULgrAptpLW85lHw5qSkyS+udaTRp6qLk1RESho6d4 DknIFh9pQ0HV1PRvRhbQ+CORQwC+HjYETl9huQY+YncRewZQs/HlU5XU03c1eus1GQgU rJ0IjvNZXUbuvxSD+tlsCBVe6E4oGMyQwFGA0VrduphNYpHJmlbN6Mjm58cYtxgtghPk Jrxq2aCF+RP8YcyUx3VSdt0BmH6WconPCIpxA5qrotBCihIXZyNl3axb+nz/ZuKoI5WS doTw== X-Gm-Message-State: ALyK8tJEDov/YbQpQOViOgywgg/CFocCsT6TDuCLwHOXqpWTzKDPt8AP/ITHks57m5z2wA== X-Received: by 10.157.43.40 with SMTP id o37mr13338595otb.41.1466466555656; Mon, 20 Jun 2016 16:49:15 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id v55sm7956837otv.12.2016.06.20.16.49.13 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 20 Jun 2016 16:49:14 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_52B5721E-DD1A-4F53-AB81-60C22DE081F0"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: <94680da4-b547-6ee8-2510-ea10eb1e02ff@ThreatGuard.com> Date: Mon, 20 Jun 2016 18:49:12 -0500 Message-Id: <1A88355D-CF3B-40B5-A219-094137ABB2B6@gmail.com> References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> <6062111F-9C39-4C7C-B008-F7E23FED40DE@gmail.com> <9904FB1B0159DA42B0B887B7FA8119CA7520D40F@AZ-FFEXMB04.global.avaya.com> <94680da4-b547-6ee8-2510-ea10eb1e02ff@ThreatGuard.com> To: Gunnar Engelbach X-Mailer: Apple Mail (2.3124) Archived-At: Cc: "Dan \(Dan\) Romascanu" , "" , "tony@yaanatech.com" Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jun 2016 23:49:20 -0000 --Apple-Mail=_52B5721E-DD1A-4F53-AB81-60C22DE081F0 Content-Type: multipart/alternative; boundary="Apple-Mail=_090DA297-5C77-4D94-9866-3DC371A3DDF2" --Apple-Mail=_090DA297-5C77-4D94-9866-3DC371A3DDF2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi Gun, I=E2=80=99m going to go out on a limb and say I=E2=80=99m not tracking. = Are you referring to Mike=E2=80=99s inquiry about data formats? If so, = I=E2=80=99m not sure that thread is talking about data models as much as = it is talking about specific formats (i.e. JSON, XML, CBOR, etc.). I agree with you that software identify information is =E2=80=9Cjust a = set of endpoint attributes=E2=80=9D, but I=E2=80=99m not sure that = we=E2=80=99re treating it any differently. Can you explain? Adam > On Jun 18, 2016, at 12:06 PM, Gunnar Engelbach = wrote: >=20 >=20 > While we're on the topic, >=20 > There is an effort in progress to determine a data model for SACM = endpoint collection. Software identity information is just a set of = endpoint attributes. So is there a reason why software identity is = treated differently? >=20 >=20 > --gun >=20 >=20 > On 6/18/2016 5:38 AM, Adam Montville wrote: >> Hi. Because we would like to move our requirements through IESG, I = would like to drive this to ground. There are three things that = we=E2=80=99re talking about doing when it comes to selecting a data = model for software identification: >>=20 >> 1) Extensibility >> 2) Accessibility (not cost prohibitive) >> 3) Completeness >>=20 >> There is a data model requirement for (1) - DM-014 Attribute = Extensibility. There does not seem to be a requirement for = accessibility (2) or completeness (3). >>=20 >> My question is this: Do we need such requirements? >>=20 >> I would assert that we do not. Accessibility is something that we = will always judge by virtue of the fact that we operate within the = culture of the IETF. Completeness is not something we need to put into = the requirements draft by virtue of DM-002 Data Model Structure, which = indicates that a data model can be structured monolithically or composed = of modules/sub-modules=E2=80=94this seems to imply that we could be ok = with =E2=80=9Ccompleteness=E2=80=9D potentially coming from more than = one place. >>=20 >> Thoughts? >>=20 >> Adam >>=20 >>=20 >>> On Jun 13, 2016, at 9:12 AM, Romascanu, Dan (Dan) = > wrote: >>>=20 >>> Re: Requirements =E2=80=93 is this not what = https://da= tatracker.ietf.org/doc/draft-ietf-sacm-requirements/ = is = about? Maybe it needs an update. >>>=20 >>> Regards, >>>=20 >>> Dan >>>=20 >>>=20 >>> From: sacm [mailto:sacm-bounces@ietf.org = ] On Behalf Of Adam Montville >>> Sent: Friday, June 10, 2016 2:25 PM >>> To: Gunnar Engelbach >>> Cc: < sacm@ietf.org >; = tony@yaanatech.com = >>> Subject: Re: [sacm] Call for adoption of = draft-coffin-sacm-nea-swid-patnc as a SACM WG document >>>=20 >>> This seems like a fine approach. >>>=20 >>> As part of that third item, I=E2=80=99d like to get requirements = from our own drafts as well, starting perhaps with the vulnerability = scenario, but also considering our requirements and other drafts. >>>=20 >>>=20 >>>=20 >>> On Jun 9, 2016, at 7:44 PM, Gunnar Engelbach < = gunnar.engelbach@threatguard.com = > wrote: >>>=20 >>>=20 >>>=20 >>> Hey Tony, funny thing that you should say that. You seem to have a = better awareness of the other efforts going on out there than I do, so I = could use your help in identifying other good candidates and what will = be necessary to support as many of them as possible. >>>=20 >>> What I'd really like to do is take a more formal approach -- gather = some requirements and then see from among the existing efforts which is = the best from among those that are good enough. If any. >>>=20 >>> But first is a matter of setting the requirements. Stated = generally, I really only have three: >>>=20 >>> 1) Is extensible -- as a fork outside of the current owner, if = necessary, to be sure it continues to meet SACM needs without relying on = the good graces of the current owner >>>=20 >>> 2) Readily accessible (eg., spec is not cost prohibitive for any = users) >>>=20 >>> 3) The most complete (that is, closest to being able to represent = the other tag types without loss of data or shoe-horning data into = fields that weren't really meant for that type of data) >>>=20 >>>=20 >>> I'm sure Charles, et al, will have other requirements, so feel free = to chime in. However, I think the simpler and more informal we can keep = this list the quicker we can grind through it. >>>=20 >>>=20 >>> --gun >>>=20 >>>=20 >>>=20 >>>=20 >>> On 6/9/2016 2:33 PM, Tony Rutkowski wrote: >>> Hi Adam, >>>=20 >>> A good solution. Charles and Gunnar should also engage >>> in some proactive outreach. Simply stating that "no other >>> solutions to the problem of software identification have >>> been submitted" is preposterous when there are so many >>> out there. IMHO, one of the long-standing problems with >>> SACM is its institutional and participatory insularity in an >>> arena where so many almost identical activities are occurring >>> in other venues where there is far greater industry participation. >>> Ignoring them diminishes the value of whatever SACM >>> accomplishes. >>>=20 >>> --tony >>>=20 >>> On 2016-06-09 3:47 PM, Adam Montville wrote: >>> All: >>>=20 >>> After several on-list discussions, the last virtual interim, and the = discussions surrounding this call for adoption, the chairs acknowledge = that there are some key concerns with this draft, but also see that = there is rough consensus for adoption. We additionally note that no = other solutions to the problem of software identification have been = submitted to the working group [1]. >>>=20 >>> Because the topic of software identification, and SWID in = particular, appears to be a contentious one, we are designating Charles = Schmidt and Gunnar Engelbach as editors of the working group draft [2]. = We believe that Charles and Gunnar will bring the necessary balance to = this draft, so that the key concerns are sufficiently addressed. >>>=20 >>> Kind regards, >>>=20 >>> Adam & Karen >>>=20 >>> [1] This draft adoption does not preclude future alternative = submissions >>> [2] Note that original authors will remain authors, but Charles and = Gunnar will hold the pen. >>>=20 >>>=20 >>> On May 17, 2016, at 11:21 AM, Karen O'Donoghue < = odonoghue@isoc.org = > wrote: >>>=20 >>> Folks, >>>=20 >>> As discussed during our last couple of meetings, this is the = official call for adoption of = https:= //datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ = as = a SACM working group document. >>>=20 >>> Please reply with any comments or concerns along your support of = this action to the mailing list. >>>=20 >>> Thanks, >>> Karen and Adam >>> _______________________________________________ >>> sacm mailing list >>> sacm@ietf.org >>> https://www.ietf.org/mailman/listinfo/sacm = >>>=20 >>>=20 >>>=20 >>>=20 >>> _______________________________________________ >>> sacm mailing list >>> sacm@ietf.org >>> https://www.ietf.org/mailman/listinfo/sacm = >>>=20 >>>=20 >>>=20 >>>=20 >>> _______________________________________________ >>> sacm mailing list >>> sacm@ietf.org >>> https://www.ietf.org/mailman/listinfo/sacm = >>>=20 >>>=20 >>> _______________________________________________ >>> sacm mailing list >>> sacm@ietf.org >>> https://www.ietf.org/mailman/listinfo/sacm = >=20 --Apple-Mail=_090DA297-5C77-4D94-9866-3DC371A3DDF2 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8
Hi Gun,

I=E2=80=99m going to go out on a limb = and say I=E2=80=99m not tracking.  Are you referring to Mike=E2=80=99= s inquiry about data formats?  If so, I=E2=80=99m not sure that = thread is talking about data models as much as it is talking about = specific formats (i.e. JSON, XML, CBOR, etc.).  

I agree with you that = software identify information is =E2=80=9Cjust a set of endpoint = attributes=E2=80=9D, but I=E2=80=99m not sure that we=E2=80=99re = treating it any differently.  Can you explain?

Adam 


On Jun 18, 2016, at 12:06 PM, = Gunnar Engelbach <gunnar.engelbach@threatguard.com> wrote:

=20 =20

While we're on the topic,

There is an effort in progress to determine a data model for SACM endpoint collection.  Software identity information is just a = set of endpoint attributes.  So is there a reason why software = identity is treated differently?


--gun


On 6/18/2016 5:38 AM, Adam Montville wrote:
Hi.  Because we would like to move our requirements through = IESG, I would like to drive this to ground.   There are three = things that we=E2=80=99re talking about doing when it comes to selecting = a data model for software identification:

1) Extensibility
2) Accessibility (not cost prohibitive)
3) Completeness

There is a data model requirement for (1) - DM-014 Attribute Extensibility.  There does not seem to be a requirement for accessibility (2) or completeness (3). =  

My question is this: Do we need such = requirements?

I would assert that we do not.  Accessibility = is something that we will always judge by virtue of the fact that we operate within the culture of the IETF.  Completeness is = not something we need to put into the requirements draft by virtue of DM-002 Data Model Structure, which indicates that a data model can be structured monolithically or composed of modules/sub-modules=E2=80=94this seems to imply that we could be = ok with =E2=80=9Ccompleteness=E2=80=9D potentially coming from more than = one place.  

Thoughts?

Adam


On Jun 13, 2016, at 9:12 AM, Romascanu, Dan (Dan) <dromasca@avaya.com> wrote:

Re: Requirements =E2=80=93 = is this not what ht= tps://datatracker.ietf.org/doc/draft-ietf-sacm-requirements/ is about? Maybe it needs an update.
 
Regards,
 
Dan
 
 
From: sacm [mailto:sacm-bounces@ietf.org] On Behalf = Of Adam Montville
Sent: Friday, June 10, 2016 2:25 PM
To: Gunnar Engelbach
Cc: <sacm@ietf.org>; tony@yaanatech.com
Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document
 
This seems like a fine approach.
 
As part of that third item, I=E2=80=99d like to get requirements from our own drafts as well, starting perhaps with the vulnerability scenario, but also considering our requirements and other drafts.  
 
 
 
On Jun 9, 2016, at 7:44 PM, Gunnar Engelbach <gunnar.engelbach@threatgu= ard.com> wrote:
 


=
Hey Tony, funny thing that you should say that.  You seem to have a = better awareness of the other efforts going on out there than I do, so I could use your help in identifying other good candidates and what will be necessary to support as many of them as possible.

What I'd really like to do is take a more formal approach -- gather some requirements and then see from among the existing efforts which is the best from among those that are good enough.  = If any.

But first is a matter of setting the requirements.  Stated generally, I really only have three:

  1)  Is extensible -- as a = fork outside of the current owner, if necessary, to be sure it continues to meet SACM needs without relying on the good graces of the current owner

  2)  Readily accessible (eg., = spec is not cost prohibitive for any users)

  3)  The most complete (that = is, closest to being able to represent the other tag types without loss of data or shoe-horning data into fields that weren't really meant for that type of data)


I'm sure Charles, et al, will have other requirements, so feel free to chime = in.  However, I think the simpler and more informal we can keep this list the quicker we can grind through it.


--gun



On 6/9/2016 2:33 PM, Tony Rutkowski wrote:

Hi Adam,

A good solution.  Charles and = Gunnar should also engage
in some proactive outreach.  = Simply stating that "no other 
solutions to the problem of software identification have 
been submitted" is preposterous when there are so many
out there.  IMHO, one of the long-standing problems with
SACM is its institutional and participatory insularity in an 
arena where so many almost identical activities are occurring 
in other venues where there is far greater industry participation.
Ignoring them diminishes the value of whatever SACM 
accomplishes.

--tony

On 2016-06-09 3:47 PM, Adam Montville wrote:
All:
 
After several on-list discussions, the last virtual interim, and the discussions surrounding this call for adoption, the chairs acknowledge that there are some key concerns with this draft, but also see that there is rough consensus for adoption.  We additionally note that no other solutions to the problem of software identification have been submitted to the working group [1].
 
Because the = topic of software identification, and SWID in particular, appears to be a contentious one, we are designating Charles Schmidt and Gunnar Engelbach as editors of the working group draft [2].  We believe that Charles and Gunnar will bring the necessary balance to this draft, so that the key concerns are sufficiently addressed.
 
Kind = regards,
 
Adam & = Karen
 
[1] This draft adoption does not preclude future alternative submissions
[2] Note that original authors will remain authors, but Charles and Gunnar will hold the pen.
 
 
On May 17, 2016, at 11:21 AM, Karen O'Donoghue <odonoghue@isoc.org> wrote:
 
Folks, 
 
As discussed during our last couple of meetings, this is the official call for adoption of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/&n= bsp;as a SACM working group document. 
 
Please reply with any comments or concerns along your support of this action to the mailing = list. 
 
Thanks,
Karen and Adam
_______________________________________________
sacm mailing list
= sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm




_______________________________________________
sacm =
mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm




_______________________________________________
sacm mailing =
list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm
 
 
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm



= --Apple-Mail=_090DA297-5C77-4D94-9866-3DC371A3DDF2-- --Apple-Mail=_52B5721E-DD1A-4F53-AB81-60C22DE081F0 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXaID4AAoJEDEhyx7etgAB4kwQAI7dpZ6fuOu/opYf3KsmCDP3 zyJbEEHHRliOHcOU7/LqIA7bdCRV6kT8BFO05WMwnGS8NyfybzaQ1XyX2sfchsbB HniCUug/gCDLxS6NqrbbNNSCEdsUpxZGIxyGIcKZ3yCYiDwVrIN9wNKYjI+b83wB wIV3X/NRob23/VppVlwxGojsBawERe/7BvPubX+VNIQ9aLTuSNR69nqQovAvMZeE F0mB+CsivEAlo74cO/ZlWBxGsv9mhof9ULKwhxxBA8tdUctnlOGbk6/1DNKFq6Rk Q5hnH7BTzNe/V8GOgNfld032jYb8QrnFF2IbYony4FT2bGdBDwJH3eKJYO7y2Xlu 3SFH0X3uZf1Ibo5glv1pECxSEoBrjTrKW0TxO175+1sNAJG73tJq4MzgaSHxCJlB wrjmb/bfUl26fgL1sQFNsh14Mga5CeUOWq8QC0Nw35n7g1mHRfNHbyJgyTDnb+SE v78VvUp7zZlaNklidd5iuS9KhymVxvZsFkB5cy+cM0+uwljBxk3CFOqkf83pV7XK oGY33UuVpVgFkYOn10T14yddIUxQMxOITMz+kKhUSyXh+AhcXk0jl6vaIHuF0HqD ZVbOoBXPaLDzqGf9o7g8f2ignxULuVHie2xaqaPKAzE/7hTveGfQPSUnYCwJtGGX CA4pBMzwSbQH4AKGCfx6 =URd6 -----END PGP SIGNATURE----- --Apple-Mail=_52B5721E-DD1A-4F53-AB81-60C22DE081F0-- From nobody Mon Jun 20 16:49:53 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 36B4E12D7CC for ; Mon, 20 Jun 2016 16:49:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nSM-kidcZ58U for ; Mon, 20 Jun 2016 16:49:49 -0700 (PDT) Received: from mail-ob0-x233.google.com (mail-ob0-x233.google.com [IPv6:2607:f8b0:4003:c01::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 3C9B912D68F for ; Mon, 20 Jun 2016 16:49:49 -0700 (PDT) Received: by mail-ob0-x233.google.com with SMTP id xn17so71376obc.0 for ; Mon, 20 Jun 2016 16:49:49 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=ye7e/Ga5Z/DDTSM/nU9yKCG2dI0rB5gIlSz39rsRcdw=; b=0cG3s+kTZhAtMkLylkefGed5FN/udN3unB+ERMC0SF1B9RroVh4pPsYhYJtth3XYY4 fdjpDEzGzypwZBYyAcyKb1OoUvRfxInlkHmsTszBwyn3lbl91QUvwrQPMpBZmMSFFzP+ /CEckS9jSWENHzGqcdZVCTLtJYdu5fDO9TlqbuH9ZlQ06gXcQndDfy4oD3tf79L6jbqE pro1hpJgd+adzL3stulzRepU338Uwn6oRapos0GZhxo2NKeKKSzxsrg54uf+GadfUHni lHNIJcTHkm4HCvJiPbLBfWA+ZaWFORbdAAoAXd9RogdiWTOdMMMMxi7h8FvxJHR8CV3F eP6Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=ye7e/Ga5Z/DDTSM/nU9yKCG2dI0rB5gIlSz39rsRcdw=; b=M0hulAzst+60fWfmwm+i+L5SwvaJcFMPMOICjONGK6X31d2391Ts13xghrmQzKPKHv 14hC+fJPaZb7Iia2fPGOj6jx1ml6kZZliyPiYEggXx/dbgl69SVRWLL3zr4p/XWLhoRa t5NmsIvd1LWLPx6BgFLLCnu2tInC0BKQoVIV6vuSXDqareMIeysknuM2ge0LqhChDzhZ abPCQZi4o7C/0l5XSqv6koYfADFZsQgR6IFIf7WE81YECHbNJYsXlH6qpUo2Z4jTqYVz zdppBoCAE6N7XpKSJtrfPcY+1beK6O0Qz6Y+JA09DE40oxYfTsZ7bFSz25LD+MR9rizs DBZg== X-Gm-Message-State: ALyK8tKrQaOy6gmHhcY86wfcdV0ee8A28R8hwSgOxAwwpX2PJDbMPDHQ1Zn9TUT09xeb8w== X-Received: by 10.157.3.134 with SMTP id f6mr11587106otf.144.1466466588637; Mon, 20 Jun 2016 16:49:48 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id v55sm7956837otv.12.2016.06.20.16.49.47 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 20 Jun 2016 16:49:47 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_C7FA5262-39D9-416C-9BDC-3D2C28634CE7"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: <75cb4a18-0ee2-dbd7-ce5e-36df09a2f74a@yaanatech.com> Date: Mon, 20 Jun 2016 18:49:46 -0500 Message-Id: <58F0619F-361B-4E80-839B-0D76EBC26736@gmail.com> References: <576805A6.8040609@sit.fraunhofer.de> <75cb4a18-0ee2-dbd7-ce5e-36df09a2f74a@yaanatech.com> To: tony@yaanatech.com X-Mailer: Apple Mail (2.3124) Archived-At: Cc: sacm@ietf.org Subject: Re: [sacm] useful reference listing to SACM related work X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 20 Jun 2016 23:49:51 -0000 --Apple-Mail=_C7FA5262-39D9-416C-9BDC-3D2C28634CE7 Content-Type: multipart/alternative; boundary="Apple-Mail=_BF8945A8-3165-4E5F-9F74-8B1A3C23B8FD" --Apple-Mail=_BF8945A8-3165-4E5F-9F74-8B1A3C23B8FD Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=windows-1252 Thanks, Tony. > On Jun 20, 2016, at 5:34 PM, Tony Rutkowski = wrote: >=20 > This listing is updated every six months. It > is a handy compendium, inter alia, for formal > citations to many SACM related specifications. >=20 > Note the citations to the ITU-T version of OVAL > - X.1526. It is freely available with official > translations into five other languages. > http://www.itu.int/rec/T-REC-X.1526-201401-I = >=20 > The citation to the Critical Security Controls, > ETSI TR 103 305 is to the V5.1 version. The V6.0 > version as well as the various compendiums and > mapping to frameworks and implementations were > adopted last Friday by the TC CYBER Plenary, and > will be published shortly. X.1500 Amd 10 in Sept > will reflect the new version. It will also likely > contain updates for the OASIS STIX, TAXII, and > CybOX specifications, and the new 3GPP Security > Assurance Specification for 3GPP Network Products > (TS 33.116 , TS 33.117, and TS 33.926). >=20 > --tony >=20 >=20 >=20 >=20 >=20 > = ____________________________________= ___________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = --Apple-Mail=_BF8945A8-3165-4E5F-9F74-8B1A3C23B8FD Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=windows-1252 Thanks, Tony.

On Jun 20, 2016, at 5:34 PM, = Tony Rutkowski <tony@yaanatech.com> wrote:

This listing is = updated every six months.  It
is a handy = compendium, inter alia, for formal
citations to many = SACM related specifications.

Note the citations to the ITU-T version of OVAL
-= X.1526.  It is freely available with official
translations into five other languages.
http://www.itu.int/rec/T-REC-X.1526-201401-I

The citation to the Critical Security = Controls,
ETSI TR 103 305 is to the V5.1 version.  = The V6.0
version as well as the various compendiums = and
mapping to frameworks and implementations = were
adopted last Friday by the TC CYBER Plenary, = and
will be published shortly.   X.1500 = Amd 10 in Sept
will reflect the = new version.  It will also likely 
contain updates for the OASIS STIX, TAXII, and
CybOX specifications, and the new 3GPP Security 
Assurance Specification for 3GPP Network Products
(TS 33.116 ,  TS 33.117, and TS 33.926).

--tony 





<T-REC-X.1= 500-201603-I!Amd9!PDF-E.pdf>_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_BF8945A8-3165-4E5F-9F74-8B1A3C23B8FD-- --Apple-Mail=_C7FA5262-39D9-416C-9BDC-3D2C28634CE7 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXaIEbAAoJEDEhyx7etgABDvoP/jqEq/kLTmC2kTQ5+5eEAk89 lfCUWv/zPBcwLBY3zDwEBSC9Eyzp9KHj7kmZuZVejYzmPSbC0PUPhY1fqRPhzQ3I SMWoafwzjPU8/n9J1F547il9Tp8bZq95COsM4c7/lPvmOn/Hv366EzJfKrx/Il/p fwEIfwXQkJ4vp1eo9gK/FaIS+GKiQadjZFLGAxT5390F4mxZp8tnCXjEK/dzRbBA 2PpgdDXR3VKqvE/JaGFhdSU2/LagNabXRVX2Ez4SrpMbq256dlNKcncpFV0z7fq2 DbRFQI73xdwU/DABdSSsOedvt9CQb+5dnZRYLjHLn0iBSUpJNknVqLA3cB/KpeRj y0DXs3QSQUbMjTqmF/ULWL+tbbv8o1055TDjzkioKkOYy6+jq2qrGcmXkUg/xpsO mR1Xu8drO7ZzCAgBWJuJ0KJIuLopf12nj4uJlfXTQ0mtp6veG3gdbSs5qEeyNCRf p1DExkYhl/CVFtDuhMxNFRYB1GbJTTPu1w+Uir0stk0q5wqmjkNv8zOmmDHlGepi lr4lv4xQKm5Wu9wAZj+TyItwtQj63c4D25nUO6qkXww9IBr8RY63ZZUIlgJlIlX1 iviAFSq/ps24Cd/tTOZTHtmf1SWYRwrKZ69nKPClAaA1VeKwHTE6D/Y5QgbhWQPW fB1xxaplu6MAAvGDZO8H =+jZM -----END PGP SIGNATURE----- --Apple-Mail=_C7FA5262-39D9-416C-9BDC-3D2C28634CE7-- From nobody Tue Jun 21 07:57:39 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4C5A212D82F for ; Tue, 21 Jun 2016 07:57:38 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.6 X-Spam-Level: X-Spam-Status: No, score=-2.6 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=threatguard-com.20150623.gappssmtp.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NNqCeZeKOVBo for ; Tue, 21 Jun 2016 07:57:34 -0700 (PDT) Received: from mail-pa0-x22e.google.com (mail-pa0-x22e.google.com [IPv6:2607:f8b0:400e:c03::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 355A312D873 for ; Tue, 21 Jun 2016 07:57:34 -0700 (PDT) Received: by mail-pa0-x22e.google.com with SMTP id bz2so7096877pad.1 for ; Tue, 21 Jun 2016 07:57:34 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=threatguard-com.20150623.gappssmtp.com; s=20150623; h=from:subject:to:references:cc:message-id:date:user-agent :mime-version:in-reply-to; bh=r5pC3e65XdaonYNwVn7DtyoYwmfC5Uqw8kleJRE3yPQ=; b=KhAMsd0QZFq6iF7lmM1QyCNLIpaljrRlGcYq00a+57g9ognWqvU/qDkjbV+ATZ+cb2 ZA3O4ypheRxoCwrxTPOLAigDOTpxj1Zg1u2qK3/Doapw1cfV1MkrBc9RVN0vHcygr5aI /gU0Mvi9Gvq3BoYEGu321Dx9UjmyiRzGuqxRgUmEwl0LL2ql2qwxiSR1EZyGJFjJ+w3C syyoOc2eWYMWWdXy48Y3iLTWO7rSbF7gTM3JPefrSmRbZWWxlWhqzpdlg0JbLxCwSg0f Ab8xz6+Vd7YhlXpcSAjD1OMckOj//AY8dnzvocLjDwA9U7RIn+r+0vsvg8Ly1QoK3uAo cEvg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:to:references:cc:message-id:date :user-agent:mime-version:in-reply-to; bh=r5pC3e65XdaonYNwVn7DtyoYwmfC5Uqw8kleJRE3yPQ=; b=G0tetzxLn9UheKz4Rj0keOViJdKUtAExRYadEgjroVq47J+3AYRa+IhBzcO8JNTPxA Tkriv7nxSRzop5WAdgGYy60SmQNma4yEfv+aoMeGAZg/oFIh95sW9qRv1FIyj8Qb9TW9 P+7hFt8b/Ww0jqGLTlb1S5lJ3JkLncvDrun01TcrTh8f3w0OO2Up68MEJLu1X6rU90Za nfItnM92Sl2aMFVwzKiiqecOJb/0Nndls2foh+tmbRKA96A+leFWsfJs1Z3TwtCG2Xhc cFTsJu8EO69v5UtHKQcnSKqNajqzDaOA/M8ReKl1NjUBoXPFiP/kTIFjZFf/pHuwX8cI 1ADw== X-Gm-Message-State: ALyK8tLn3A4igrSGyMHGjosc4v0i5hIeaytjNMvEe1v1WfOYaastR267WVI8XyxX0J6Qhg== X-Received: by 10.66.86.103 with SMTP id o7mr6818229paz.5.1466521053618; Tue, 21 Jun 2016 07:57:33 -0700 (PDT) Received: from [172.16.1.122] (75-142-12-171.dhcp.mdfd.or.charter.com. [75.142.12.171]) by smtp.gmail.com with ESMTPSA id 75sm66279460pfy.32.2016.06.21.07.57.31 (version=TLSv1/SSLv3 cipher=OTHER); Tue, 21 Jun 2016 07:57:32 -0700 (PDT) From: Gunnar Engelbach X-Google-Original-From: Gunnar Engelbach To: Adam Montville References: <17198AFF-DF5A-46BC-B84A-2AAF1717BD90@isoc.org> <1c99b26c-bdac-5798-1bd9-e957b11ae4bd@yaanatech.com> <6062111F-9C39-4C7C-B008-F7E23FED40DE@gmail.com> <9904FB1B0159DA42B0B887B7FA8119CA7520D40F@AZ-FFEXMB04.global.avaya.com> <94680da4-b547-6ee8-2510-ea10eb1e02ff@ThreatGuard.com> <1A88355D-CF3B-40B5-A219-094137ABB2B6@gmail.com> Message-ID: Date: Tue, 21 Jun 2016 07:57:49 -0700 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Thunderbird/45.1.1 MIME-Version: 1.0 In-Reply-To: <1A88355D-CF3B-40B5-A219-094137ABB2B6@gmail.com> Content-Type: multipart/alternative; boundary="------------171C1387B37606675D4F8F30" Archived-At: Cc: "Dan \(Dan\) Romascanu" , "" , "tony@yaanatech.com" Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Jun 2016 14:57:38 -0000 This is a multi-part message in MIME format. --------------171C1387B37606675D4F8F30 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Nah. The conversation recently about software tags has been about translating the various software tags into a common data model where that data model is, preferably, one of the existing software tags. But that would mean having a data model for endpoint attributes and a separate data model for software tags. As long as the tag information is going to be translated I don't see why it should use a data model that is different than that used for other endpoint attributes. --gun On 6/20/2016 4:49 PM, Adam Montville wrote: > Hi Gun, > > I’m going to go out on a limb and say I’m not tracking. Are you > referring to Mike’s inquiry about data formats? If so, I’m not sure > that thread is talking about data models as much as it is talking > about specific formats (i.e. JSON, XML, CBOR, etc.). > > I agree with you that software identify information is “just a set of > endpoint attributesâ€, but I’m not sure that we’re treating it any > differently. Can you explain? > > Adam > > >> On Jun 18, 2016, at 12:06 PM, Gunnar Engelbach >> > > wrote: >> >> >> While we're on the topic, >> >> There is an effort in progress to determine a data model for SACM >> endpoint collection. Software identity information is just a set of >> endpoint attributes. So is there a reason why software identity is >> treated differently? >> >> >> --gun >> >> >> On 6/18/2016 5:38 AM, Adam Montville wrote: >>> Hi. Because we would like to move our requirements through IESG, I >>> would like to drive this to ground. There are three things that >>> we’re talking about doing when it comes to selecting a data model >>> for software identification: >>> >>> 1) Extensibility >>> 2) Accessibility (not cost prohibitive) >>> 3) Completeness >>> >>> There is a data model requirement for (1) - DM-014 Attribute >>> Extensibility. There does not seem to be a requirement for >>> accessibility (2) or completeness (3). >>> >>> My question is this: Do we need such requirements? >>> >>> I would assert that we do not. Accessibility is something that we >>> will always judge by virtue of the fact that we operate within the >>> culture of the IETF. Completeness is not something we need to put >>> into the requirements draft by virtue of DM-002 Data Model >>> Structure, which indicates that a data model can be structured >>> monolithically or composed of modules/sub-modules—this seems to >>> imply that we could be ok with “completeness†potentially coming >>> from more than one place. >>> >>> Thoughts? >>> >>> Adam >>> >>> >>>> On Jun 13, 2016, at 9:12 AM, Romascanu, Dan (Dan) >>>> > wrote: >>>> >>>> Re: Requirements – is this not >>>> whathttps://datatracker.ietf.org/doc/draft-ietf-sacm-requirements/is >>>> about? Maybe it needs an update. >>>> Regards, >>>> Dan >>>> *From:*sacm [mailto:sacm-bounces@ietf.org]*On Behalf Of*Adam Montville >>>> *Sent:*Friday, June 10, 2016 2:25 PM >>>> *To:*Gunnar Engelbach >>>> *Cc:*;tony@yaanatech.com >>>> *Subject:*Re: [sacm] Call for adoption of >>>> draft-coffin-sacm-nea-swid-patnc as a SACM WG document >>>> This seems like a fine approach. >>>> As part of that third item, I’d like to get requirements from our >>>> own drafts as well, starting perhaps with the vulnerability >>>> scenario, but also considering our requirements and other drafts. >>>> >>>> On Jun 9, 2016, at 7:44 PM, Gunnar Engelbach >>>> wrote: >>>> >>>> >>>> >>>> Hey Tony, funny thing that you should say that. You seem to >>>> have a better awareness of the other efforts going on out there >>>> than I do, so I could use your help in identifying other good >>>> candidates and what will be necessary to support as many of >>>> them as possible. >>>> >>>> What I'd really like to do is take a more formal approach -- >>>> gather some requirements and then see from among the existing >>>> efforts which is the best from among those that are good >>>> enough. If any. >>>> >>>> But first is a matter of setting the requirements. Stated >>>> generally, I really only have three: >>>> >>>> 1) Is extensible -- as a fork outside of the current owner, >>>> if necessary, to be sure it continues to meet SACM needs >>>> without relying on the good graces of the current owner >>>> >>>> 2) Readily accessible (eg., spec is not cost prohibitive for >>>> any users) >>>> >>>> 3) The most complete (that is, closest to being able to >>>> represent the other tag types without loss of data or >>>> shoe-horning data into fields that weren't really meant for >>>> that type of data) >>>> >>>> >>>> I'm sure Charles, et al, will have other requirements, so feel >>>> free to chime in. However, I think the simpler and more >>>> informal we can keep this list the quicker we can grind through it. >>>> >>>> >>>> --gun >>>> >>>> >>>> >>>> On 6/9/2016 2:33 PM, Tony Rutkowski wrote: >>>> >>>> Hi Adam, >>>> >>>> A good solution. Charles and Gunnar should also engage >>>> in some proactive outreach. Simply stating that "no other >>>> solutions to the problem of software identification have >>>> been submitted" is preposterous when there are so many >>>> out there. IMHO, one of the long-standing problems with >>>> SACM is its institutional and participatory insularity in an >>>> arena where so many almost identical activities are occurring >>>> in other venues where there is far greater industry >>>> participation. >>>> Ignoring them diminishes the value of whatever SACM >>>> accomplishes. >>>> >>>> --tony >>>> >>>> On 2016-06-09 3:47 PM, Adam Montville wrote: >>>> >>>> All: >>>> After several on-list discussions, the last virtual >>>> interim, and the discussions surrounding this call for >>>> adoption, the chairs acknowledge that there are some >>>> key concerns with this draft, but also see that there >>>> is rough consensus for adoption. We additionally note >>>> that no other solutions to the problem of software >>>> identification have been submitted to the working group >>>> [1]. >>>> Because the topic of software identification, and SWID >>>> in particular, appears to be a contentious one, we are >>>> designating Charles Schmidt and Gunnar Engelbach as >>>> editors of the working group draft [2]. We believe >>>> that Charles and Gunnar will bring the necessary >>>> balance to this draft, so that the key concerns are >>>> sufficiently addressed. >>>> Kind regards, >>>> Adam & Karen >>>> [1] This draft adoption does not preclude future >>>> alternative submissions >>>> [2] Note that original authors will remain authors, but >>>> Charles and Gunnar will hold the pen. >>>> >>>> On May 17, 2016, at 11:21 AM, Karen O'Donoghue >>>> wrote: >>>> Folks, >>>> As discussed during our last couple of meetings, >>>> this is the official call for adoption of >>>> https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as >>>> a SACM working group document. >>>> Please reply with any comments or concerns along >>>> your support of this action to the mailing list. >>>> Thanks, >>>> Karen and Adam >>>> _______________________________________________ >>>> sacm mailing list >>>> sacm@ietf.org >>>> https://www.ietf.org/mailman/listinfo/sacm >>>> >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> >>>> sacm mailing list >>>> >>>> sacm@ietf.org >>>> >>>> https://www.ietf.org/mailman/listinfo/sacm >>>> >>>> >>>> >>>> >>>> >>>> _______________________________________________ >>>> >>>> sacm mailing list >>>> >>>> sacm@ietf.org >>>> >>>> https://www.ietf.org/mailman/listinfo/sacm >>>> >>>> _______________________________________________ >>>> sacm mailing list >>>> sacm@ietf.org >>>> https://www.ietf.org/mailman/listinfo/sacm >>> >> > --------------171C1387B37606675D4F8F30 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit
Nah.

The conversation recently about software tags has been about translating the various software tags into a common data model where that data model is, preferably, one of the existing software tags.

But that would mean having a data model for endpoint attributes and a separate data model for software tags.  As long as the tag information is going to be translated I don't see why it should use a data model that is different than that used for other endpoint attributes.


--gun



On 6/20/2016 4:49 PM, Adam Montville wrote:
Hi Gun,

I’m going to go out on a limb and say I’m not tracking.  Are you referring to Mike’s inquiry about data formats?  If so, I’m not sure that thread is talking about data models as much as it is talking about specific formats (i.e. JSON, XML, CBOR, etc.).  

I agree with you that software identify information is “just a set of endpoint attributesâ€, but I’m not sure that we’re treating it any differently.  Can you explain?

Adam 


On Jun 18, 2016, at 12:06 PM, Gunnar Engelbach <gunnar.engelbach@threatguard.com> wrote:


While we're on the topic,

There is an effort in progress to determine a data model for SACM endpoint collection.  Software identity information is just a set of endpoint attributes.  So is there a reason why software identity is treated differently?


--gun


On 6/18/2016 5:38 AM, Adam Montville wrote:
Hi.  Because we would like to move our requirements through IESG, I would like to drive this to ground.   There are three things that we’re talking about doing when it comes to selecting a data model for software identification:

1) Extensibility
2) Accessibility (not cost prohibitive)
3) Completeness

There is a data model requirement for (1) - DM-014 Attribute Extensibility.  There does not seem to be a requirement for accessibility (2) or completeness (3).  

My question is this: Do we need such requirements?

I would assert that we do not.  Accessibility is something that we will always judge by virtue of the fact that we operate within the culture of the IETF.  Completeness is not something we need to put into the requirements draft by virtue of DM-002 Data Model Structure, which indicates that a data model can be structured monolithically or composed of modules/sub-modules—this seems to imply that we could be ok with “completeness†potentially coming from more than one place.  

Thoughts?

Adam


On Jun 13, 2016, at 9:12 AM, Romascanu, Dan (Dan) <dromasca@avaya.com> wrote:

Re: Requirements – is this not what https://datatracker.ietf.org/doc/draft-ietf-sacm-requirements/ is about? Maybe it needs an update.
 
Regards,
 
Dan
 
 
From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Adam Montville
Sent: Friday, June 10, 2016 2:25 PM
To: Gunnar Engelbach
Cc: <sacm@ietf.org>; tony@yaanatech.com
Subject: Re: [sacm] Call for adoption of draft-coffin-sacm-nea-swid-patnc as a SACM WG document
 
This seems like a fine approach.
 
As part of that third item, I’d like to get requirements from our own drafts as well, starting perhaps with the vulnerability scenario, but also considering our requirements and other drafts.  
 
 
 
On Jun 9, 2016, at 7:44 PM, Gunnar Engelbach <gunnar.engelbach@threatguard.com> wrote:
 



Hey Tony, funny thing that you should say that.  You seem to have a better awareness of the other efforts going on out there than I do, so I could use your help in identifying other good candidates and what will be necessary to support as many of them as possible.

What I'd really like to do is take a more formal approach -- gather some requirements and then see from among the existing efforts which is the best from among those that are good enough.  If any.

But first is a matter of setting the requirements.  Stated generally, I really only have three:

  1)  Is extensible -- as a fork outside of the current owner, if necessary, to be sure it continues to meet SACM needs without relying on the good graces of the current owner

  2)  Readily accessible (eg., spec is not cost prohibitive for any users)

  3)  The most complete (that is, closest to being able to represent the other tag types without loss of data or shoe-horning data into fields that weren't really meant for that type of data)


I'm sure Charles, et al, will have other requirements, so feel free to chime in.  However, I think the simpler and more informal we can keep this list the quicker we can grind through it.


--gun



On 6/9/2016 2:33 PM, Tony Rutkowski wrote:

Hi Adam,

A good solution.  Charles and Gunnar should also engage
in some proactive outreach.  Simply stating that "no other 
solutions to the problem of software identification have 
been submitted" is preposterous when there are so many
out there.  IMHO, one of the long-standing problems with
SACM is its institutional and participatory insularity in an 
arena where so many almost identical activities are occurring 
in other venues where there is far greater industry participation.
Ignoring them diminishes the value of whatever SACM 
accomplishes.

--tony

On 2016-06-09 3:47 PM, Adam Montville wrote:
All:
 
After several on-list discussions, the last virtual interim, and the discussions surrounding this call for adoption, the chairs acknowledge that there are some key concerns with this draft, but also see that there is rough consensus for adoption.  We additionally note that no other solutions to the problem of software identification have been submitted to the working group [1].
 
Because the topic of software identification, and SWID in particular, appears to be a contentious one, we are designating Charles Schmidt and Gunnar Engelbach as editors of the working group draft [2].  We believe that Charles and Gunnar will bring the necessary balance to this draft, so that the key concerns are sufficiently addressed.
 
Kind regards,
 
Adam & Karen
 
[1] This draft adoption does not preclude future alternative submissions
[2] Note that original authors will remain authors, but Charles and Gunnar will hold the pen.
 
 
On May 17, 2016, at 11:21 AM, Karen O'Donoghue <odonoghue@isoc.org> wrote:
 
Folks, 
 
As discussed during our last couple of meetings, this is the official call for adoption of https://datatracker.ietf.org/doc/draft-coffin-sacm-nea-swid-patnc/ as a SACM working group document. 
 
Please reply with any comments or concerns along your support of this action to the mailing list. 
 
Thanks,
Karen and Adam
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm




_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm




_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm
 
 
_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm




--------------171C1387B37606675D4F8F30-- From nobody Tue Jun 21 10:54:28 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A6E7D12DB90 for ; Tue, 21 Jun 2016 10:54:27 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -3.716 X-Spam-Level: X-Spam-Status: No, score=-3.716 tagged_above=-999 required=5 tests=[BAYES_40=-0.001, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a6tO-tmF3U6N for ; Tue, 21 Jun 2016 10:54:19 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 9B06512DB7F for ; Tue, 21 Jun 2016 10:54:19 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 193CA6C007C for ; Tue, 21 Jun 2016 13:54:19 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 093657BC046 for ; Tue, 21 Jun 2016 13:54:19 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Tue, 21 Jun 2016 13:54:18 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Tue, 21 Jun 2016 13:54:18 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=i+Weg5/7hGwy8/RJOxJ3fEIlAlTYhJI+zfoNQWVmHZs=; b=pkUV8HRRVd8nBKtDxA0h+SA2+dO0fb8T6BjQ5jrxD8d/KleHUl5suEZTyQyxbNLY2eDqkrNEjSEHSReaMlwxetwlobNKK+BFgC7JgPp7BR7VRTfU3CKJKot26Bj6bBtQv0DGZ9UN9st+lXu1UU2PVzTY1t7AP+uezOlXEWm0NC0= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1080.namprd09.prod.outlook.com (10.166.116.12) with Microsoft SMTP Server (TLS) id 15.1.523.12; Tue, 21 Jun 2016 17:54:17 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.015; Tue, 21 Jun 2016 17:54:17 +0000 From: "Haynes, Dan" To: "sacm@ietf.org" Thread-Topic: Question about DM Requirements Thread-Index: AdHL4+wgxazq+QzLQVe22pvEQ/aWnw== Date: Tue, 21 Jun 2016 17:54:17 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.87] x-ms-office365-filtering-correlation-id: 0de197b2-1b52-4565-07c4-08d399fd107f x-microsoft-exchange-diagnostics: 1; BY2PR09MB1080; 6:PXnjmB/cSJCvZ1Q0GqErdrsEmglGdsfN6OE6Mf8kMupeBEUUaKVp8RKt25LhP14zRpPBrvE1lxz7MJb3bzvpP9Xty9+rq2m8T3ChlmvpyMscyDPGQbaqAbXGmV63FMGqZzTzbYGDtBAM07z4fUBrpckzuCMN8mV3lmzvSDmccni0Jx+KAHlCNI1iO0suEUVB3Cu8qcZzjqPxQ1y2vm97q2SSBlBKI4MavZ7LdbZpH88QL1XIstAmne8GT14DxOe5RHJl3EfHBNAvfjkB84oqQelTGuBugj9WUdtz69LEFQ80vYxxqVOJaZSDF1rLGJvPZszEki1+nbm6+m2ydRjlxw==; 5:Jpf+HDs9T4bEPYdH7wGiGRBJdw8fZpkYKFtD59BFW5ySBLVsZvBRulRfFrwikK8YLQuLOwnbkkLNRkysmbQ9cEH/gk9Q9qXc+qvuo3AbwyzS64fnbftm0rHPvLUIxaRsH1fb7ZZfufpRnF1LCRdOXQ==; 24:BV7ZF/A/tUKEU/TAMwYJt6krs7oJjwDYws8E2IQoC5a1Ni2NhrsgYY44w9WHhL5cCiXopCaSMA174gBYzf//dVT2DZuzZh29G540EgMnN9U=; 7:JXzAHscRp3uUw0ubChnKK1vsSbdfKPcAK+OMVHCT1vwywli6UVihLphbDIQfa2hsgTWASs8rVjO7lFDLbUjSql+O4lDAHtpza+HA1RQz6wxRouQrpnrL4fiIhnX3gfCB5K9jqu3G9jmlnkYUBTDMIFbeNPKGByr6kMRwOmevzYBhoWnQ1hanvf6bpmBrg2EL0o7J36pITOkUiWdS0j/xIihc2kkyLVyA9rCGAM8bCgcHEFsl839NwYNXGJ/LJYAb x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1080; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(131327999870524)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026); SRVR:BY2PR09MB1080; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1080; x-forefront-prvs: 098076C36C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(199003)(189002)(10400500002)(81166006)(99286002)(8676002)(81156014)(66066001)(1730700003)(5002640100001)(122556002)(86362001)(3660700001)(74316001)(2501003)(87936001)(15975445007)(19300405004)(2900100001)(16236675004)(97736004)(19580395003)(2351001)(229853001)(68736007)(77096005)(102836003)(105586002)(9686002)(107886002)(110136002)(19625215002)(3280700002)(189998001)(450100001)(54356999)(101416001)(5630700001)(2906002)(8936002)(5640700001)(3480700004)(50986999)(33656002)(106356001)(11100500001)(790700001)(3846002)(92566002)(76576001)(7846002)(7736002)(6116002)(7696003)(5003600100003)(586003); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1080; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB107821EBB3255BF6C6352628A52B0BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jun 2016 17:54:17.0927 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1080 X-OriginatorOrg: mitre.org Archived-At: Subject: [sacm] Question about DM Requirements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Jun 2016 17:54:28 -0000 --_000_BY2PR09MB107821EBB3255BF6C6352628A52B0BY2PR09MB1078namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I was reviewing the DM requirements based on the SWID M&A call for adoption= thread and had some questions. In Section 2 of the Requirements, it says: "Multiple data models, protocols, and transports may be= employed in a SACM environment..." Then DM-001 says: "DM-001 Element Association: The data model MUST contain a data model elem= ent for each information model element (e.g. endpoint, IP address, asset). = In other words, for every item in the information model, there must be an = item in the data model. The data model can also include elements that do n= ot exist in the information model." Does this requirement conflict with the text above in Section 2 by saying t= hat every DM must contain an element for each IM element? That is, each DM= must support the entire IM and it is not possible for a DM to just support= a portion of the IM. Also, DM-002 says: "DM-002 Data Model Structure: The data model can be structured either as o= ne single module or separated into modules and sub-modules that allow for r= eferences between them. The data model structure MAY reflect structure in = the information model, but does not need to. For example, the data model mi= ght use one module to define endpoints, and that module might reference oth= er modules that describe the various assets associated with the endpoint. C= onstraints and interfaces might further be defined to resolve or tolerate a= mbiguity in the references (e.g. same IP address used in two separate netwo= rks)." Is this effectively reiterating that a DM must support everything in the IM= , but, that the DM can choose to break it up into submodules if they so cho= ose? Thanks, Danny --_000_BY2PR09MB107821EBB3255BF6C6352628A52B0BY2PR09MB1078namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I was reviewing the DM= requirements based on the SWID M&A call for adoption thread and had so= me questions.

 

In Section 2 of the Re=
quirements, it says:

         &=
nbsp;          “Multiple data models, protoc=
ols, and transports may be employed in a SACM environment…”
 
Then DM-001 says:=

 
“DM-001  Element Association: The data model MUST contain=
 a data model element for each information model element (e.g. endpoint, IP=
 address, asset).  In other words, for every item in the information m=
odel, there must be an item in the data model.  The data model can als=
o include elements that do not exist in the information model.”<=
/o:p>
 
Does this requirement =
conflict with the text above in Section 2 by saying that every DM must cont=
ain an element for each IM element?  That is, each DM must support the=
 entire IM and it is not possible for a DM to just support a portion of the=
 IM.
 
Also, DM-002 says:
=

“DM-002  Data Model Structure: The data model can be struct=
ured either as one single module or separated into modules and sub-modules =
that allow for references between them.  The data model structure MAY =
reflect structure in the information model, but does not need to. For examp=
le, the data model might use one module to define endpoints, and that modul=
e might reference other modules that describe the various assets associated=
 with the endpoint. Constraints and interfaces might further be defined to =
resolve or tolerate ambiguity in the references (e.g. same IP address used =
in two separate networks).”
 
Is this effectively re=
iterating that a DM must support everything in the IM, but, that the DM can=
 choose to break it up into submodules if they so choose?=

 
Thanks,

Danny
 
--_000_BY2PR09MB107821EBB3255BF6C6352628A52B0BY2PR09MB1078namp_-- From nobody Tue Jun 21 12:07:35 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 390F712DCB7 for ; Tue, 21 Jun 2016 12:07:34 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.689 X-Spam-Level: X-Spam-Status: No, score=-2.689 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CGLeyYPMNSqz for ; Tue, 21 Jun 2016 12:07:32 -0700 (PDT) Received: from mail-ob0-x22f.google.com (mail-ob0-x22f.google.com [IPv6:2607:f8b0:4003:c01::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1C08B12DC7D for ; Tue, 21 Jun 2016 12:07:31 -0700 (PDT) Received: by mail-ob0-x22f.google.com with SMTP id ru5so36278874obc.1 for ; Tue, 21 Jun 2016 12:07:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=Za5MQJMKHfw5y2RaCS1k+JRuWnx1V+u7CVPoMVCkUNQ=; b=mqswvLy8JHdDa2cIRNuRjDk85IQKleZ2HBj3Vh7xaF3KcX/+VzWcBTmlMkLN6QXjfx q46dBJIh+lKwjpNFHKQPfJes+gmnL0vNkwXDBOyfBavDSpks15EM7+oOy/0m2Gl1RTsr iEqmK2sMUUiRAMgqj0IRkdWNNnKItwXa7SaU5eM77FvFM9qGtVJqDv0OVCqkNmw3t/5n BBOGSwtpvSGc2LFVsJ7hm5ntlaUrGEiiqrYNTkgJ9yQCXgy8sE9O+cgyEqwHlra8tL3e oVJGSkpLnY0H0jG+kLhVZ5EsyKI9laQTrP7383GNIuzOyiXeJ19VSUrGBUDzekPxWPbD MBPw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=Za5MQJMKHfw5y2RaCS1k+JRuWnx1V+u7CVPoMVCkUNQ=; b=QpDgnaD7Eg+Plzw4aChXjNUJXqEGRZRFihg+ojeAPzM418vRC8P3IiPJ3OEUtOCDMG Vzoag5m3W4ZqX1QDSQPW+He8sdpa3KEU3upiwauFoRxhM1O4620SwyHcdjDYeAQ4kKTS eDlT7JlQjS5n/NqKlZ0SiYGE/iuaHjwHuNb8luLPX+48VzuV8CvlKzGcb/4hm3xdguEu IKAKBd5NxU5mxRlse6bcR1mOZf62YFQh48vw7gV++9njt45ig1oo8SxrDvV2z07ephz5 XMVtNP0zM9BLhbSdj69EdQkem1ljBYW8xJ4jyCuMzE8F+cW5YDWrhMtgfbe5A6jBMLCr 1K4A== X-Gm-Message-State: ALyK8tI7eOm9CbC9BqwiJpE4GhbHY3r+ir9MUZJTEpyFDbgpus4Z/BKxo+LGdTTJqlbbVx0ofR4SaGKPeeeg9w== X-Received: by 10.157.31.22 with SMTP id x22mr17863531otd.15.1466536050354; Tue, 21 Jun 2016 12:07:30 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.11.240 with HTTP; Tue, 21 Jun 2016 12:07:10 -0700 (PDT) In-Reply-To: References: From: Ira McDonald Date: Tue, 21 Jun 2016 15:07:10 -0400 Message-ID: To: "Haynes, Dan" , Ira McDonald Content-Type: multipart/alternative; boundary=001a1135319e55005c0535ce886b Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Question about DM Requirements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Jun 2016 19:07:34 -0000 --001a1135319e55005c0535ce886b Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Danny, My two cents. A conforming *subset* Data Model should be perfectly acceptable in SACM (e.g., one optimized for roaming mobile devices). That DM-02 statement: "The data model structure MAY reflect structure in the information model, but does not need to." makes me uncomfortable... Changing packaging is OK, but changing the structure (i.e., hierarchy) of the IM sounds wrong to me. Cheers, - Ira Ira McDonald (Musician / Software Architect) Co-Chair - TCG Trusted Mobility Solutions WG Chair - Linux Foundation Open Printing WG Secretary - IEEE-ISTO Printer Working Group Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG IETF Designated Expert - IPP & Printer MIB Blue Roof Music / High North Inc http://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com Winter 579 Park Place Saline, MI 48176 734-944-0094 Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 On Tue, Jun 21, 2016 at 1:54 PM, Haynes, Dan wrote: > I was reviewing the DM requirements based on the SWID M&A call for > adoption thread and had some questions. > > > > In Section 2 of the Requirements, it says: > > =E2=80=9CMultiple data models, protocols, and transpo= rts may be employed in a SACM environment=E2=80=A6=E2=80=9D > > > > Then DM-001 says: > > > > =E2=80=9CDM-001 Element Association: The data model MUST contain a data = model element for each information model element (e.g. endpoint, IP address= , asset). In other words, for every item in the information model, there m= ust be an item in the data model. The data model can also include elements= that do not exist in the information model.=E2=80=9D > > > > Does this requirement conflict with the text above in Section 2 by saying= that every DM must contain an element for each IM element? That is, each = DM must support the entire IM and it is not possible for a DM to just suppo= rt a portion of the IM. > > > > Also, DM-002 says: > > =E2=80=9CDM-002 Data Model Structure: The data model can be structured e= ither as one single module or separated into modules and sub-modules that a= llow for references between them. The data model structure MAY reflect str= ucture in the information model, but does not need to. For example, the dat= a model might use one module to define endpoints, and that module might ref= erence other modules that describe the various assets associated with the e= ndpoint. Constraints and interfaces might further be defined to resolve or = tolerate ambiguity in the references (e.g. same IP address used in two sepa= rate networks).=E2=80=9D > > > > Is this effectively reiterating that a DM must support everything in the = IM, but, that the DM can choose to break it up into submodules if they so c= hoose? > > > > Thanks, > > Danny > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > --001a1135319e55005c0535ce886b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Danny,
=
My two cents.

A conforming *subset* Data Model shoul= d be perfectly acceptable
in SACM (e.g., one optimized for roaming= mobile devices).

That DM-02 statement:

=C2=A0 "The data model structure= MAY reflect structure in the information
=C2=A0 model, but does not ne= ed to."

makes me uncomfortable...

Changing packaging is OK, but changing the structure (i.e., hierarchy)<= br>
of the IM sounds wrong to me.

Cheers,
- Ira<= br>

Ir= a McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobili= ty Solutions WG
Chair - Linux Foundation Open Printing WG
Secretary -= IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Print= ing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue R= oof Music / High North Inc
http://sites.goo= gle.com/site/blueroofmusic
http://sites.= google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
Winter=C2=A0 5= 79 Park Place=C2=A0 Saline, MI=C2=A0 48176=C2=A0 734-944-0094
Summer=C2= =A0 PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434


On Tue, Jun 21, 2016 at 1:54 PM, Haynes, Dan= <dhaynes@mitre.org> wrote:

I was reviewing the DM= requirements based on the SWID M&A call for adoption thread and had so= me questions.

=C2=A0

In Section 2 of the Re=
quirements, it says:

=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =E2=80=9CMultiple data models, pro=
tocols, and transports may be employed in a SACM environment=E2=80=A6=E2=80=
=9D
=C2=A0
Then DM-001 says:
=C2=A0
=E2=80=9CDM-001=C2=A0 Element Association: The data model MUST conta=
in a data model element for each information model element (e.g. endpoint, =
IP address, asset).=C2=A0 In other words, for every item in the information=
 model, there must be an item in the data model.=C2=A0 The data model can a=
lso include elements that do not exist in the information model.=E2=80=9D
=C2=A0
Does this requirement =
conflict with the text above in Section 2 by saying that every DM must cont=
ain an element for each IM element?=C2=A0 That is, each DM must support the=
 entire IM and it is not possible for a DM to just support a portion of the=
 IM.
=C2=A0
Also, DM-002 says:
=

=E2=80=9CDM-002=C2=A0 Data Model Structure: The data model can be stru=
ctured either as one single module or separated into modules and sub-module=
s that allow for references between them.=C2=A0 The data model structure MA=
Y reflect structure in the information model, but does not need to. For exa=
mple, the data model might use one module to define endpoints, and that mod=
ule might reference other modules that describe the various assets associat=
ed with the endpoint. Constraints and interfaces might further be defined t=
o resolve or tolerate ambiguity in the references (e.g. same IP address use=
d in two separate networks).=E2=80=9D
=C2=A0
Is this effectively re=
iterating that a DM must support everything in the IM, but, that the DM can=
 choose to break it up into submodules if they so choose?
=C2=A0
Thanks,

Danny
=C2=A0

_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


--001a1135319e55005c0535ce886b-- From nobody Tue Jun 21 12:31:41 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2E34C12DD59 for ; Tue, 21 Jun 2016 12:31:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.624 X-Spam-Level: X-Spam-Status: No, score=-5.624 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 4ctJY_Kh2-ri for ; Tue, 21 Jun 2016 12:31:38 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 944C212DD55 for ; Tue, 21 Jun 2016 12:31:37 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 18DD78BC114; Tue, 21 Jun 2016 15:31:37 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 097718BC0F8; Tue, 21 Jun 2016 15:31:37 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Tue, 21 Jun 2016 15:31:36 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Tue, 21 Jun 2016 15:31:36 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=CxF3EsJn6Lol+e1jf9raDCY5RNwZ5xrgEt0xWLMeRt8=; b=lGiIQELOkAK8dhSiZfCpBi5gxS2T41COek9ri4CXCOwiWQDplmjMF1sy1h7tpzpSP6/Yekex3NrFamrQ7NVKVI5kbgaA0q2gjf/HAgApG92EkWGAzwwXRoBKs7dwGCkKa40Yvqt4FbjdVIx5sL6ZOulpJu7Yw8qOPY3h2cMvMNQ= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1079.namprd09.prod.outlook.com (10.166.116.11) with Microsoft SMTP Server (TLS) id 15.1.523.12; Tue, 21 Jun 2016 19:31:35 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.015; Tue, 21 Jun 2016 19:31:35 +0000 From: "Haynes, Dan" To: Ira McDonald Thread-Topic: [sacm] Question about DM Requirements Thread-Index: AdHL4+wgxazq+QzLQVe22pvEQ/aWnwADDBMAAAClUlA= Date: Tue, 21 Jun 2016 19:31:35 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.87] x-ms-office365-filtering-correlation-id: 9c035dab-bb45-4bd9-60de-08d39a0aa85f x-microsoft-exchange-diagnostics: 1; BY2PR09MB1079; 6:25aOUpjam++3GktzLPtSBFIlnliW0whe3MZwlrJ6PkbGyW2w9BnGmbng3dPWRCAEISbO3PfdQa77DMR91YUvyR7qvJiRnYfGgdeZcsNUh2VhKvJfdr0MHhoN7DB1X0arfHWFhOtBuPBzjxTk8ULRVGqlTn0zYUXeQrTyHD+5bstjTBVaYWycUpea7x2mHkLD67B5CC3/RTxh8NIH00yqvWR8VcLhwCe5yAZZ66jvYCWABr3+fbXnB9bp9ypzTp2WfUZyZQlhzPMIxphe+a1Y5DFHlANhgqq5NFmyAL0LuCVvDfxOB2dsgqU6NWY7mdvpXfXc1Fk/yu3hAFzhHO04nA==; 5:kPW/fUZVGMCSvlDf16RPEWWTBSCLxHvbbZvj4fXieTxmJ+WLKF2IwSBVCzWxYqjn99DAz1n0HYPprlI80IYaQGQjSfktUmMRD5+e0ua1S9MIOG4efjIT+zHh2IwM+MrvOf67Jk7HeYgnUK1mv5PH9w==; 24:ygrcTXZPVjzFyS+ReIVskRhNi6nPjWNmisXZLVo9s0Aw4LoHux59ypMC+mgdajld1iMhMRtqaRarxHxzBffKXnPH0hM5FxEFf8ul9Ls/z/M=; 7:q6Cm9JVeJIZLI+AnAzUrqYMk+ZWG7WkKTdiOlUo1N90u7n3pI5H5iytlWPrluGdgKqFJGp3FT58ipWsTI6hrySMaTj+wcW8faT9TUvuEJMblWIuoQCq3aoTBF4tlReNErDzK89f+Fo1cJha+JLpKt44RMp0B0O6SWC4pGhpH/NSAEUY/d4zcnW+Fai8dOg/1/Vuh2Eg2PiU8UBXFKGT39i1EqrJwBkTkCsmjx1dmHaTAY2q+h6GBz+Ipt0El/S8y x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1079; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(111039206520245)(131327999870524)(211936372134217)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:BY2PR09MB1079; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1079; x-forefront-prvs: 098076C36C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(199003)(189002)(377454003)(24454002)(51914003)(87936001)(11100500001)(102836003)(4326007)(3846002)(790700001)(586003)(2906002)(66066001)(97736004)(10400500002)(33656002)(110136002)(189998001)(122556002)(6116002)(16236675004)(7736002)(5002640100001)(76176999)(101416001)(76576001)(1411001)(19625215002)(54356999)(50986999)(19580395003)(2950100001)(9326002)(19580405001)(19300405004)(8676002)(7906002)(77096005)(74316001)(19609705001)(106356001)(105586002)(19617315012)(15975445007)(68736007)(8936002)(9686002)(19273905006)(81166006)(81156014)(3280700002)(2900100001)(92566002)(7846002)(3660700001)(86362001)(99286002)(5003600100003)(7696003)(16351025005)(563064011); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1079; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB1078D1C5DC346A1CE3F66ED6A52B0BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 21 Jun 2016 19:31:35.1542 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1079 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Question about DM Requirements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Jun 2016 19:31:40 -0000 --_000_BY2PR09MB1078D1C5DC346A1CE3F66ED6A52B0BY2PR09MB1078namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SGkgSXJhLA0KDQpUaGFua3MgZm9yIHRoZSBmZWVkYmFjayENCg0KQnkg4oCccGFja2FnaW5n4oCd LCBkbyB5b3UgbWVhbiBkYXRhIGZvcm1hdCAoZS5nLiB4bWwsIGNib3IsIGV0Yy4pPw0KDQpBbHNv LCB3aXRoIHJlc3BlY3QgdG8geW91ciBjb25jZXJuIGFib3V0IGNoYW5naW5nIHRoZSDigJxzdHJ1 Y3R1cmXigJ0sIG1heWJlIHdlIHdhbnQgaXQgdG8gc2F5IHNvbWV0aGluZyBsaWtlIHRoZSBETSBt dXN0IG1haW50YWluIHJlbGF0aW9uc2hpcHMgYmV0d2VlbiBpbmZvcm1hdGlvbiBlbGVtZW50cyBp biB0aGUgSU0/DQoNClRoYW5rcywNCg0KRGFubnkNCg0KRnJvbTogSXJhIE1jRG9uYWxkIFttYWls dG86Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb21dDQpTZW50OiBUdWVzZGF5LCBKdW5lIDIxLCAyMDE2 IDM6MDcgUE0NClRvOiBIYXluZXMsIERhbiA8ZGhheW5lc0BtaXRyZS5vcmc+OyBJcmEgTWNEb25h bGQgPGJsdWVyb29mbXVzaWNAZ21haWwuY29tPg0KQ2M6IHNhY21AaWV0Zi5vcmcNClN1YmplY3Q6 IFJlOiBbc2FjbV0gUXVlc3Rpb24gYWJvdXQgRE0gUmVxdWlyZW1lbnRzDQoNCkhpIERhbm55LA0K TXkgdHdvIGNlbnRzLg0KQSBjb25mb3JtaW5nICpzdWJzZXQqIERhdGEgTW9kZWwgc2hvdWxkIGJl IHBlcmZlY3RseSBhY2NlcHRhYmxlDQppbiBTQUNNIChlLmcuLCBvbmUgb3B0aW1pemVkIGZvciBy b2FtaW5nIG1vYmlsZSBkZXZpY2VzKS4NClRoYXQgRE0tMDIgc3RhdGVtZW50Og0KDQogICJUaGUg ZGF0YSBtb2RlbCBzdHJ1Y3R1cmUgTUFZIHJlZmxlY3Qgc3RydWN0dXJlIGluIHRoZSBpbmZvcm1h dGlvbg0KICBtb2RlbCwgYnV0IGRvZXMgbm90IG5lZWQgdG8uIg0KbWFrZXMgbWUgdW5jb21mb3J0 YWJsZS4uLg0KQ2hhbmdpbmcgcGFja2FnaW5nIGlzIE9LLCBidXQgY2hhbmdpbmcgdGhlIHN0cnVj dHVyZSAoaS5lLiwgaGllcmFyY2h5KQ0Kb2YgdGhlIElNIHNvdW5kcyB3cm9uZyB0byBtZS4NCkNo ZWVycywNCi0gSXJhDQoNCklyYSBNY0RvbmFsZCAoTXVzaWNpYW4gLyBTb2Z0d2FyZSBBcmNoaXRl Y3QpDQpDby1DaGFpciAtIFRDRyBUcnVzdGVkIE1vYmlsaXR5IFNvbHV0aW9ucyBXRw0KQ2hhaXIg LSBMaW51eCBGb3VuZGF0aW9uIE9wZW4gUHJpbnRpbmcgV0cNClNlY3JldGFyeSAtIElFRUUtSVNU TyBQcmludGVyIFdvcmtpbmcgR3JvdXANCkNvLUNoYWlyIC0gSUVFRS1JU1RPIFBXRyBJbnRlcm5l dCBQcmludGluZyBQcm90b2NvbCBXRw0KSUVURiBEZXNpZ25hdGVkIEV4cGVydCAtIElQUCAmIFBy aW50ZXIgTUlCDQpCbHVlIFJvb2YgTXVzaWMgLyBIaWdoIE5vcnRoIEluYw0KaHR0cDovL3NpdGVz Lmdvb2dsZS5jb20vc2l0ZS9ibHVlcm9vZm11c2ljDQpodHRwOi8vc2l0ZXMuZ29vZ2xlLmNvbS9z aXRlL2hpZ2hub3J0aGluYw0KbWFpbHRvOiBibHVlcm9vZm11c2ljQGdtYWlsLmNvbTxtYWlsdG86 Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20+DQpXaW50ZXIgIDU3OSBQYXJrIFBsYWNlICBTYWxpbmUs IE1JICA0ODE3NiAgNzM0LTk0NC0wMDk0DQpTdW1tZXIgIFBPIEJveCAyMjEgIEdyYW5kIE1hcmFp cywgTUkgNDk4MzkgIDkwNi00OTQtMjQzNA0KDQpPbiBUdWUsIEp1biAyMSwgMjAxNiBhdCAxOjU0 IFBNLCBIYXluZXMsIERhbiA8ZGhheW5lc0BtaXRyZS5vcmc8bWFpbHRvOmRoYXluZXNAbWl0cmUu b3JnPj4gd3JvdGU6DQpJIHdhcyByZXZpZXdpbmcgdGhlIERNIHJlcXVpcmVtZW50cyBiYXNlZCBv biB0aGUgU1dJRCBNJkEgY2FsbCBmb3IgYWRvcHRpb24gdGhyZWFkIGFuZCBoYWQgc29tZSBxdWVz dGlvbnMuDQoNCg0KSW4gU2VjdGlvbiAyIG9mIHRoZSBSZXF1aXJlbWVudHMsIGl0IHNheXM6DQoN CiAgICAgICAgICAgICAgICAgICAg4oCcTXVsdGlwbGUgZGF0YSBtb2RlbHMsIHByb3RvY29scywg YW5kIHRyYW5zcG9ydHMgbWF5IGJlIGVtcGxveWVkIGluIGEgU0FDTSBlbnZpcm9ubWVudOKApuKA nQ0KDQoNCg0KVGhlbiBETS0wMDEgc2F5czoNCg0KDQoNCuKAnERNLTAwMSAgRWxlbWVudCBBc3Nv Y2lhdGlvbjogVGhlIGRhdGEgbW9kZWwgTVVTVCBjb250YWluIGEgZGF0YSBtb2RlbCBlbGVtZW50 IGZvciBlYWNoIGluZm9ybWF0aW9uIG1vZGVsIGVsZW1lbnQgKGUuZy4gZW5kcG9pbnQsIElQIGFk ZHJlc3MsIGFzc2V0KS4gIEluIG90aGVyIHdvcmRzLCBmb3IgZXZlcnkgaXRlbSBpbiB0aGUgaW5m b3JtYXRpb24gbW9kZWwsIHRoZXJlIG11c3QgYmUgYW4gaXRlbSBpbiB0aGUgZGF0YSBtb2RlbC4g IFRoZSBkYXRhIG1vZGVsIGNhbiBhbHNvIGluY2x1ZGUgZWxlbWVudHMgdGhhdCBkbyBub3QgZXhp c3QgaW4gdGhlIGluZm9ybWF0aW9uIG1vZGVsLuKAnQ0KDQoNCg0KRG9lcyB0aGlzIHJlcXVpcmVt ZW50IGNvbmZsaWN0IHdpdGggdGhlIHRleHQgYWJvdmUgaW4gU2VjdGlvbiAyIGJ5IHNheWluZyB0 aGF0IGV2ZXJ5IERNIG11c3QgY29udGFpbiBhbiBlbGVtZW50IGZvciBlYWNoIElNIGVsZW1lbnQ/ ICBUaGF0IGlzLCBlYWNoIERNIG11c3Qgc3VwcG9ydCB0aGUgZW50aXJlIElNIGFuZCBpdCBpcyBu b3QgcG9zc2libGUgZm9yIGEgRE0gdG8ganVzdCBzdXBwb3J0IGEgcG9ydGlvbiBvZiB0aGUgSU0u DQoNCg0KDQpBbHNvLCBETS0wMDIgc2F5czoNCg0K4oCcRE0tMDAyICBEYXRhIE1vZGVsIFN0cnVj dHVyZTogVGhlIGRhdGEgbW9kZWwgY2FuIGJlIHN0cnVjdHVyZWQgZWl0aGVyIGFzIG9uZSBzaW5n bGUgbW9kdWxlIG9yIHNlcGFyYXRlZCBpbnRvIG1vZHVsZXMgYW5kIHN1Yi1tb2R1bGVzIHRoYXQg YWxsb3cgZm9yIHJlZmVyZW5jZXMgYmV0d2VlbiB0aGVtLiAgVGhlIGRhdGEgbW9kZWwgc3RydWN0 dXJlIE1BWSByZWZsZWN0IHN0cnVjdHVyZSBpbiB0aGUgaW5mb3JtYXRpb24gbW9kZWwsIGJ1dCBk b2VzIG5vdCBuZWVkIHRvLiBGb3IgZXhhbXBsZSwgdGhlIGRhdGEgbW9kZWwgbWlnaHQgdXNlIG9u ZSBtb2R1bGUgdG8gZGVmaW5lIGVuZHBvaW50cywgYW5kIHRoYXQgbW9kdWxlIG1pZ2h0IHJlZmVy ZW5jZSBvdGhlciBtb2R1bGVzIHRoYXQgZGVzY3JpYmUgdGhlIHZhcmlvdXMgYXNzZXRzIGFzc29j aWF0ZWQgd2l0aCB0aGUgZW5kcG9pbnQuIENvbnN0cmFpbnRzIGFuZCBpbnRlcmZhY2VzIG1pZ2h0 IGZ1cnRoZXIgYmUgZGVmaW5lZCB0byByZXNvbHZlIG9yIHRvbGVyYXRlIGFtYmlndWl0eSBpbiB0 aGUgcmVmZXJlbmNlcyAoZS5nLiBzYW1lIElQIGFkZHJlc3MgdXNlZCBpbiB0d28gc2VwYXJhdGUg bmV0d29ya3MpLuKAnQ0KDQoNCg0KSXMgdGhpcyBlZmZlY3RpdmVseSByZWl0ZXJhdGluZyB0aGF0 IGEgRE0gbXVzdCBzdXBwb3J0IGV2ZXJ5dGhpbmcgaW4gdGhlIElNLCBidXQsIHRoYXQgdGhlIERN IGNhbiBjaG9vc2UgdG8gYnJlYWsgaXQgdXAgaW50byBzdWJtb2R1bGVzIGlmIHRoZXkgc28gY2hv b3NlPw0KDQoNCg0KVGhhbmtzLA0KDQpEYW5ueQ0KDQoNCg0KX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX18NCnNhY20gbWFpbGluZyBsaXN0DQpzYWNtQGlldGYu b3JnPG1haWx0bzpzYWNtQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9zYWNtDQoNCg== --_000_BY2PR09MB1078D1C5DC346A1CE3F66ED6A52B0BY2PR09MB1078namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAzIDIgNDt9DQpAZm9udC1m YWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAxNSA1IDIgMiAyIDQgMyAy IDQ7fQ0KQGZvbnQtZmFjZQ0KCXtmb250LWZhbWlseTpDb25zb2xhczsNCglwYW5vc2UtMToyIDEx IDYgOSAyIDIgNCAzIDIgNDt9DQovKiBTdHlsZSBEZWZpbml0aW9ucyAqLw0KcC5Nc29Ob3JtYWws IGxpLk1zb05vcm1hbCwgZGl2Lk1zb05vcm1hbA0KCXttYXJnaW46MGluOw0KCW1hcmdpbi1ib3R0 b206LjAwMDFwdDsNCglmb250LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcg Um9tYW4iLHNlcmlmO30NCmE6bGluaywgc3Bhbi5Nc29IeXBlcmxpbmsNCgl7bXNvLXN0eWxlLXBy aW9yaXR5Ojk5Ow0KCWNvbG9yOmJsdWU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQph OnZpc2l0ZWQsIHNwYW4uTXNvSHlwZXJsaW5rRm9sbG93ZWQNCgl7bXNvLXN0eWxlLXByaW9yaXR5 Ojk5Ow0KCWNvbG9yOnB1cnBsZTsNCgl0ZXh0LWRlY29yYXRpb246dW5kZXJsaW5lO30NCnByZQ0K CXttc28tc3R5bGUtcHJpb3JpdHk6OTk7DQoJbXNvLXN0eWxlLWxpbms6IkhUTUwgUHJlZm9ybWF0 dGVkIENoYXIiOw0KCW1hcmdpbjowaW47DQoJbWFyZ2luLWJvdHRvbTouMDAwMXB0Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7DQoJZm9udC1mYW1pbHk6IkNvdXJpZXIgTmV3Ijt9DQpwLm1zb25vcm1hbDAs IGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1lOm1zb25vcm1h bDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGluOw0KCW1zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250LXNpemU6MTIu MHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNwYW4uSFRNTFBy ZWZvcm1hdHRlZENoYXINCgl7bXNvLXN0eWxlLW5hbWU6IkhUTUwgUHJlZm9ybWF0dGVkIENoYXIi Ow0KCW1zby1zdHlsZS1wcmlvcml0eTo5OTsNCgltc28tc3R5bGUtbGluazoiSFRNTCBQcmVmb3Jt YXR0ZWQiOw0KCWZvbnQtZmFtaWx5OkNvbnNvbGFzO30NCnNwYW4uRW1haWxTdHlsZTIwDQoJe21z by1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQtZmFtaWx5OiJDYWxpYnJpIixzYW5z LXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERlZmF1bHQNCgl7bXNvLXN0eWxlLXR5 cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1mYW1pbHk6IkNhbGlicmkiLHNhbnMtc2VyaWY7fQ0KQHBh Z2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0KCW1hcmdpbjoxLjBpbiAxLjBp biAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3BhZ2U6V29yZFNlY3Rpb24xO30N Ci0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWRlZmF1bHRzIHY6 ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFbZW5kaWZdLS0+PCEtLVtpZiBn dGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0iZWRpdCI+DQo8bzppZG1hcCB2 OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91dD48L3htbD48IVtlbmRpZl0t LT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJibHVlIiB2bGluaz0icHVycGxl Ij4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3Bh biBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7 LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SGkgSXJhLDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48YnI+ DQpUaGFua3MgZm9yIHRoZSBmZWVkYmFjayEmbmJzcDsgPG86cD48L286cD48L3NwYW4+PC9wPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj5CeSDigJxwYWNrYWdpbmfigJ0sIGRvIHlvdSBtZWFuIGRhdGEg Zm9ybWF0IChlLmcuIHhtbCwgY2JvciwgZXRjLik/PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJp Zjtjb2xvcjojMUY0OTdEIj5BbHNvLCB3aXRoIHJlc3BlY3QgdG8geW91ciBjb25jZXJuIGFib3V0 IGNoYW5naW5nIHRoZSDigJxzdHJ1Y3R1cmXigJ0sIG1heWJlIHdlIHdhbnQgaXQgdG8gc2F5IHNv bWV0aGluZyBsaWtlIHRoZSBETSBtdXN0IG1haW50YWluIHJlbGF0aW9uc2hpcHMgYmV0d2VlbiBp bmZvcm1hdGlvbg0KIGVsZW1lbnRzIGluIHRoZSBJTT88bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4m bmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5rcyw8YnI+DQo8YnI+DQpEYW5ueTxvOnA+PC9vOnA+PC9z cGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9u ZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEuNXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQi Pg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFF MSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAwaW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNp emU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IEly YSBNY0RvbmFsZCBbbWFpbHRvOmJsdWVyb29mbXVzaWNAZ21haWwuY29tXQ0KPGJyPg0KPGI+U2Vu dDo8L2I+IFR1ZXNkYXksIEp1bmUgMjEsIDIwMTYgMzowNyBQTTxicj4NCjxiPlRvOjwvYj4gSGF5 bmVzLCBEYW4gJmx0O2RoYXluZXNAbWl0cmUub3JnJmd0OzsgSXJhIE1jRG9uYWxkICZsdDtibHVl cm9vZm11c2ljQGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IHNhY21AaWV0Zi5vcmc8YnI+ DQo8Yj5TdWJqZWN0OjwvYj4gUmU6IFtzYWNtXSBRdWVzdGlvbiBhYm91dCBETSBSZXF1aXJlbWVu dHM8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCI+PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0K PGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5IaSBEYW5ueSw8bzpwPjwvbzpwPjwv cD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIu MHB0Ij5NeSB0d28gY2VudHMuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPkEgY29uZm9ybWluZyAqc3Vic2V0KiBEYXRhIE1vZGVsIHNob3VsZCBiZSBwZXJmZWN0 bHkgYWNjZXB0YWJsZTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs IiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPmluIFNBQ00gKGUuZy4sIG9uZSBvcHRpbWl6 ZWQgZm9yIHJvYW1pbmcgbW9iaWxlIGRldmljZXMpLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPlRoYXQgRE0t MDIgc3RhdGVtZW50Ojxicj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KJm5ic3A7ICZxdW90O1Ro ZSBkYXRhIG1vZGVsIHN0cnVjdHVyZSBNQVkgcmVmbGVjdCBzdHJ1Y3R1cmUgaW4gdGhlIGluZm9y bWF0aW9uIDxicj4NCiZuYnNwOyBtb2RlbCwgYnV0IGRvZXMgbm90IG5lZWQgdG8uJnF1b3Q7PC9z cGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0i bWFyZ2luLWJvdHRvbToxMi4wcHQiPm1ha2VzIG1lIHVuY29tZm9ydGFibGUuLi48bzpwPjwvbzpw PjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+Q2hhbmdpbmcgcGFja2FnaW5nIGlz IE9LLCBidXQgY2hhbmdpbmcgdGhlIHN0cnVjdHVyZSAoaS5lLiwgaGllcmFyY2h5KTxvOnA+PC9v OnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRv bToxMi4wcHQiPm9mIHRoZSBJTSBzb3VuZHMgd3JvbmcgdG8gbWUuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPkNoZWVycyw8bzpwPjwvbzpwPjwvcD4NCjwvZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij4tIEly YTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJy IGNsZWFyPSJhbGwiPg0KPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPklyYSBNY0RvbmFs ZCAoTXVzaWNpYW4gLyBTb2Z0d2FyZSBBcmNoaXRlY3QpPGJyPg0KQ28tQ2hhaXIgLSBUQ0cgVHJ1 c3RlZCBNb2JpbGl0eSBTb2x1dGlvbnMgV0c8YnI+DQpDaGFpciAtIExpbnV4IEZvdW5kYXRpb24g T3BlbiBQcmludGluZyBXRzxicj4NClNlY3JldGFyeSAtIElFRUUtSVNUTyBQcmludGVyIFdvcmtp bmcgR3JvdXA8YnI+DQpDby1DaGFpciAtIElFRUUtSVNUTyBQV0cgSW50ZXJuZXQgUHJpbnRpbmcg UHJvdG9jb2wgV0c8YnI+DQpJRVRGIERlc2lnbmF0ZWQgRXhwZXJ0IC0gSVBQICZhbXA7IFByaW50 ZXIgTUlCPGJyPg0KQmx1ZSBSb29mIE11c2ljIC8gSGlnaCBOb3J0aCBJbmM8YnI+DQo8YSBocmVm PSJodHRwOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2JsdWVyb29mbXVzaWMiIHRhcmdldD0iX2Js YW5rIj48c3BhbiBzdHlsZT0iY29sb3I6IzMzMzNGRiI+aHR0cDovL3NpdGVzLmdvb2dsZS5jb20v c2l0ZS9ibHVlcm9vZm11c2ljPC9zcGFuPjwvYT48YnI+DQo8YSBocmVmPSJodHRwOi8vc2l0ZXMu Z29vZ2xlLmNvbS9zaXRlL2hpZ2hub3J0aGluYyIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxl PSJjb2xvcjojNjYwMENDIj5odHRwOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2hpZ2hub3J0aGlu Yzwvc3Bhbj48L2E+PGJyPg0KbWFpbHRvOiA8YSBocmVmPSJtYWlsdG86Ymx1ZXJvb2ZtdXNpY0Bn bWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5ibHVlcm9vZm11c2ljQGdtYWlsLmNvbTwvYT48YnI+ DQpXaW50ZXImbmJzcDsgNTc5IFBhcmsgUGxhY2UmbmJzcDsgU2FsaW5lLCBNSSZuYnNwOyA0ODE3 NiZuYnNwOyA3MzQtOTQ0LTAwOTQ8YnI+DQpTdW1tZXImbmJzcDsgUE8gQm94IDIyMSZuYnNwOyBH cmFuZCBNYXJhaXMsIE1JIDQ5ODM5Jm5ic3A7IDkwNi00OTQtMjQzNDxvOnA+PC9vOnA+PC9wPg0K PC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4mbmJzcDs8 L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+T24gVHVlLCBKdW4gMjEsIDIw MTYgYXQgMTo1NCBQTSwgSGF5bmVzLCBEYW4gJmx0OzxhIGhyZWY9Im1haWx0bzpkaGF5bmVzQG1p dHJlLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPmRoYXluZXNAbWl0cmUub3JnPC9hPiZndDsgd3JvdGU6 PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxl ZnQ6c29saWQgI0NDQ0NDQyAxLjBwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDYuMHB0O21hcmdpbi1s ZWZ0OjQuOHB0O21hcmdpbi1yaWdodDowaW4iPg0KPGRpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJjb2xvcjojMUY0RTc5Ij5JIHdhcyByZXZpZXdpbmcgdGhl IERNIHJlcXVpcmVtZW50cyBiYXNlZCBvbiB0aGUgU1dJRCBNJmFtcDtBIGNhbGwgZm9yIGFkb3B0 aW9uIHRocmVhZCBhbmQgaGFkIHNvbWUgcXVlc3Rpb25zLjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImNvbG9yOiMxRjRFNzkiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0 Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPkluIFNlY3Rpb24gMiBvZiB0aGUgUmVxdWlyZW1lbnRzLCBpdCBz YXlzOjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNEU3OSI+Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7 Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5i c3A7Jm5ic3A7IDwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPuKAnE11bHRpcGxlIGRhdGEgbW9kZWxz LCBwcm90b2NvbHMsIGFuZCB0cmFuc3BvcnRzIG1heSBiZSBlbXBsb3llZCBpbiBhIFNBQ00gZW52 aXJvbm1lbnTigKbigJ08L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjRFNzkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHByZT48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPlRoZW4gRE0tMDAxIHNheXM6PC9zcGFuPjxvOnA+PC9vOnA+PC9wcmU+ DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0Nh bGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5Ij4mbmJzcDs8L3NwYW4+PG86cD48 L286cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1sZWZ0OjQ1LjhwdCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmIj7igJxETS0wMDEmbmJzcDsgRWxlbWVudCBBc3NvY2lhdGlvbjogVGhlIGRhdGEgbW9kZWwg TVVTVCBjb250YWluIGEgZGF0YSBtb2RlbCBlbGVtZW50IGZvciBlYWNoIGluZm9ybWF0aW9uIG1v ZGVsIGVsZW1lbnQgKGUuZy4gZW5kcG9pbnQsIElQIGFkZHJlc3MsIGFzc2V0KS4mbmJzcDsgSW4g b3RoZXIgd29yZHMsIGZvciBldmVyeSBpdGVtIGluIHRoZSBpbmZvcm1hdGlvbiBtb2RlbCwgdGhl cmUgbXVzdCBiZSBhbiBpdGVtIGluIHRoZSBkYXRhIG1vZGVsLiZuYnNwOyBUaGUgZGF0YSBtb2Rl bCBjYW4gYWxzbyBpbmNsdWRlIGVsZW1lbnRzIHRoYXQgZG8gbm90IGV4aXN0IGluIHRoZSBpbmZv cm1hdGlvbiBtb2RlbC7igJ08L3NwYW4+PG86cD48L286cD48L3ByZT4NCjxwcmU+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmO2NvbG9yOiMxRjRFNzkiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHBy ZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWYiPkRvZXMgdGhpcyByZXF1aXJlbWVudCBjb25mbGljdCB3aXRoIHRo ZSB0ZXh0IGFib3ZlIGluIFNlY3Rpb24gMiBieSBzYXlpbmcgdGhhdCBldmVyeSBETSBtdXN0IGNv bnRhaW4gYW4gZWxlbWVudCBmb3IgZWFjaCBJTSBlbGVtZW50PyZuYnNwOyBUaGF0IGlzLCBlYWNo IERNIG11c3Qgc3VwcG9ydCB0aGUgZW50aXJlIElNIGFuZCBpdCBpcyBub3QgcG9zc2libGUgZm9y IGEgRE0gdG8ganVzdCBzdXBwb3J0IGEgcG9ydGlvbiBvZiB0aGUgSU0uPC9zcGFuPjxvOnA+PC9v OnA+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5Ij4mbmJzcDs8L3Nw YW4+PG86cD48L286cD48L3ByZT4NCjxwcmUgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWYiPkFsc28sIERNLTAwMiBzYXlzOjwvc3Bhbj48bzpwPjwvbzpwPjwvcHJl Pg0KPHByZSBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTox MS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj7igJxETS0w MDImbmJzcDsgRGF0YSBNb2RlbCBTdHJ1Y3R1cmU6IFRoZSBkYXRhIG1vZGVsIGNhbiBiZSBzdHJ1 Y3R1cmVkIGVpdGhlciBhcyBvbmUgc2luZ2xlIG1vZHVsZSBvciBzZXBhcmF0ZWQgaW50byBtb2R1 bGVzIGFuZCBzdWItbW9kdWxlcyB0aGF0IGFsbG93IGZvciByZWZlcmVuY2VzIGJldHdlZW4gdGhl bS4mbmJzcDsgVGhlIGRhdGEgbW9kZWwgc3RydWN0dXJlIE1BWSByZWZsZWN0IHN0cnVjdHVyZSBp biB0aGUgaW5mb3JtYXRpb24gbW9kZWwsIGJ1dCBkb2VzIG5vdCBuZWVkIHRvLiBGb3IgZXhhbXBs ZSwgdGhlIGRhdGEgbW9kZWwgbWlnaHQgdXNlIG9uZSBtb2R1bGUgdG8gZGVmaW5lIGVuZHBvaW50 cywgYW5kIHRoYXQgbW9kdWxlIG1pZ2h0IHJlZmVyZW5jZSBvdGhlciBtb2R1bGVzIHRoYXQgZGVz Y3JpYmUgdGhlIHZhcmlvdXMgYXNzZXRzIGFzc29jaWF0ZWQgd2l0aCB0aGUgZW5kcG9pbnQuIENv bnN0cmFpbnRzIGFuZCBpbnRlcmZhY2VzIG1pZ2h0IGZ1cnRoZXIgYmUgZGVmaW5lZCB0byByZXNv bHZlIG9yIHRvbGVyYXRlIGFtYmlndWl0eSBpbiB0aGUgcmVmZXJlbmNlcyAoZS5nLiBzYW1lIElQ IGFkZHJlc3MgdXNlZCBpbiB0d28gc2VwYXJhdGUgbmV0d29ya3MpLuKAnTwvc3Bhbj48bzpwPjwv bzpwPjwvcHJlPg0KPHByZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWls eTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNEU3OSI+Jm5ic3A7PC9z cGFuPjxvOnA+PC9vOnA+PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+SXMgdGhpcyBlZmZl Y3RpdmVseSByZWl0ZXJhdGluZyB0aGF0IGEgRE0gbXVzdCBzdXBwb3J0IGV2ZXJ5dGhpbmcgaW4g dGhlIElNLCBidXQsIHRoYXQgdGhlIERNIGNhbiBjaG9vc2UgdG8gYnJlYWsgaXQgdXAgaW50byBz dWJtb2R1bGVzIGlmIHRoZXkgc28gY2hvb3NlPzwvc3Bhbj48bzpwPjwvbzpwPjwvcHJlPg0KPHBy ZT48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJp JnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNEU3OSI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+ PC9wcmU+DQo8cHJlPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+VGhhbmtzLDxicj48YnI+RGFubnk8L3NwYW4+ PG86cD48L286cD48L3ByZT4NCjxwcmU+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8L3NwYW4+PG86 cD48L286cD48L3ByZT4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHls ZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPjxicj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fPGJyPg0Kc2FjbSBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVm PSJtYWlsdG86c2FjbUBpZXRmLm9yZyI+c2FjbUBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVmPSJo dHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20iIHRhcmdldD0iX2JsYW5r Ij5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY208L2E+PG86cD48L286 cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+ Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0KPC9odG1s Pg0K --_000_BY2PR09MB1078D1C5DC346A1CE3F66ED6A52B0BY2PR09MB1078namp_-- From nobody Tue Jun 21 15:14:08 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C6CC12DE71 for ; Tue, 21 Jun 2016 15:14:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.698 X-Spam-Level: X-Spam-Status: No, score=-2.698 tagged_above=-999 required=5 tests=[AC_DIV_BONANZA=0.001, BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id t_Z771wowLjw for ; Tue, 21 Jun 2016 15:14:05 -0700 (PDT) Received: from mail-oi0-x22b.google.com (mail-oi0-x22b.google.com [IPv6:2607:f8b0:4003:c06::22b]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D902E12DE6A for ; Tue, 21 Jun 2016 15:14:04 -0700 (PDT) Received: by mail-oi0-x22b.google.com with SMTP id r2so6152071oih.2 for ; Tue, 21 Jun 2016 15:14:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=GTIJ7R1kj8aJuoyKX/EfydCcR0wwxKUotClfLY0Fywg=; b=Gsi3a5KOunfq2RDLblD9+d4HmHHgieIGlC9bgy3ogul611EKJ9K4FmviDN4c1QFZaQ n6JT/nvLDozXrsgV0Rpul4ATgYYl80cBgk1AfQV8rtfMh2I4aCAJ7eGc40YGVN4HtX4M zpLSG686Jdp54CWUXF+WbpQGV6CcWb+iCX52iG9f0FtUHjb4vMX0Swqm5QxA/yDy/aWb ebe2FZuBaXA+jrlEAEjajISNg7qY8Xk63BlkwUO9Nlzo9ugfGmMGN7XbmELBFCnB4tw6 zCjDrhIxuDokpK8ADnYfplzQBMeJzOYXt6oTVf2thtx7SjQbb7yXohndkcy2AdxtvyqD FJ1A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=GTIJ7R1kj8aJuoyKX/EfydCcR0wwxKUotClfLY0Fywg=; b=CTfr4ymmvTqXshOYIAGjAw9INfS6hGf0OLLnsKo3FnWusu/ZHVERdJHHpJDbmgy2gU QF36n2m6VvdH/rzxhEgJrNaSdUm1Kqh/zfC/y69OHKCuag8Qbx8TwDF6gJ5gXhrA1pGj sPT3xhy5OWyDyhudtuZJW0ccICgRFROnHuW7fUbsAVc0DnYogyuNjIFDgYUNnWRCVkwC yoj6Q2JID2ajszyBuddfzTTb86x3oIy25ucVunp4oLWYrIp+nxQ3/iaTFZgDmuY7RffU rosAk2lJznUjjBU4g6zCfpt9ICo5Bz4uZp0weIsPLanG9LbVR28U974IpllkWdug5omm vafg== X-Gm-Message-State: ALyK8tLExlLN5dpI3t3LZP7RnxgmOqAaBcMxm6mTclzghEAuVHKTBMZtZg7f4Z4r8dE2cSx5ahKeEVbXyXH+ww== X-Received: by 10.202.87.147 with SMTP id l141mr420434oib.190.1466547244139; Tue, 21 Jun 2016 15:14:04 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.11.240 with HTTP; Tue, 21 Jun 2016 15:13:44 -0700 (PDT) In-Reply-To: References: From: Ira McDonald Date: Tue, 21 Jun 2016 18:13:44 -0400 Message-ID: To: "Haynes, Dan" , Ira McDonald Content-Type: multipart/alternative; boundary=001a1147d7cc888bfa0535d12321 Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Question about DM Requirements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Jun 2016 22:14:07 -0000 --001a1147d7cc888bfa0535d12321 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Dan, Yes by "packaging" I meant to loosely refer to encoding (XML, JSON, etc.). And I like clarifying that maintaining structure is maintaining relationships (parent/child, dependencies, and others) between info/data elements. Cheers, - Ira Ira McDonald (Musician / Software Architect) Co-Chair - TCG Trusted Mobility Solutions WG Chair - Linux Foundation Open Printing WG Secretary - IEEE-ISTO Printer Working Group Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG IETF Designated Expert - IPP & Printer MIB Blue Roof Music / High North Inc http://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com Winter 579 Park Place Saline, MI 48176 734-944-0094 Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 On Tue, Jun 21, 2016 at 3:31 PM, Haynes, Dan wrote: > Hi Ira, > > > Thanks for the feedback! > > > > By =E2=80=9Cpackaging=E2=80=9D, do you mean data format (e.g. xml, cbor, = etc.)? > > > > Also, with respect to your concern about changing the =E2=80=9Cstructure= =E2=80=9D, maybe > we want it to say something like the DM must maintain relationships betwe= en > information elements in the IM? > > > > Thanks, > > Danny > > > > *From:* Ira McDonald [mailto:blueroofmusic@gmail.com] > *Sent:* Tuesday, June 21, 2016 3:07 PM > *To:* Haynes, Dan ; Ira McDonald < > blueroofmusic@gmail.com> > *Cc:* sacm@ietf.org > *Subject:* Re: [sacm] Question about DM Requirements > > > > Hi Danny, > > My two cents. > > A conforming *subset* Data Model should be perfectly acceptable > > in SACM (e.g., one optimized for roaming mobile devices). > > That DM-02 statement: > > "The data model structure MAY reflect structure in the information > model, but does not need to." > > makes me uncomfortable... > > Changing packaging is OK, but changing the structure (i.e., hierarchy) > > of the IM sounds wrong to me. > > Cheers, > > - Ira > > > Ira McDonald (Musician / Software Architect) > Co-Chair - TCG Trusted Mobility Solutions WG > Chair - Linux Foundation Open Printing WG > Secretary - IEEE-ISTO Printer Working Group > Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > IETF Designated Expert - IPP & Printer MIB > Blue Roof Music / High North Inc > http://sites.google.com/site/blueroofmusic > http://sites.google.com/site/highnorthinc > mailto: blueroofmusic@gmail.com > Winter 579 Park Place Saline, MI 48176 734-944-0094 > Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 > > > > On Tue, Jun 21, 2016 at 1:54 PM, Haynes, Dan wrote: > > I was reviewing the DM requirements based on the SWID M&A call for > adoption thread and had some questions. > > > > In Section 2 of the Requirements, it says: > > =E2=80=9CMultiple data models, protocols, and transpo= rts may be employed in a SACM environment=E2=80=A6=E2=80=9D > > > > Then DM-001 says: > > > > =E2=80=9CDM-001 Element Association: The data model MUST contain a data = model element for each information model element (e.g. endpoint, IP address= , asset). In other words, for every item in the information model, there m= ust be an item in the data model. The data model can also include elements= that do not exist in the information model.=E2=80=9D > > > > Does this requirement conflict with the text above in Section 2 by saying= that every DM must contain an element for each IM element? That is, each = DM must support the entire IM and it is not possible for a DM to just suppo= rt a portion of the IM. > > > > Also, DM-002 says: > > =E2=80=9CDM-002 Data Model Structure: The data model can be structured e= ither as one single module or separated into modules and sub-modules that a= llow for references between them. The data model structure MAY reflect str= ucture in the information model, but does not need to. For example, the dat= a model might use one module to define endpoints, and that module might ref= erence other modules that describe the various assets associated with the e= ndpoint. Constraints and interfaces might further be defined to resolve or = tolerate ambiguity in the references (e.g. same IP address used in two sepa= rate networks).=E2=80=9D > > > > Is this effectively reiterating that a DM must support everything in the = IM, but, that the DM can choose to break it up into submodules if they so c= hoose? > > > > Thanks, > > Danny > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > --001a1147d7cc888bfa0535d12321 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Dan,

Yes by "= ;packaging" I meant to loosely refer to encoding (XML, JSON, etc.).
And I like clarifying that maintaining structure is maintaining = relationships
(parent/child, dependencies, and others) between inf= o/data elements.

Cheers,
- Ira

Ira McDonald (Musician / Softw= are Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Chair - L= inux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working G= roup
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Desi= gnated Expert - IPP & Printer MIB
Blue Roof Music / High North Inchttp://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc=
mailto: blueroofmusic@gmail.com
Winter=C2=A0 579 Park Place=C2=A0 Saline, = MI=C2=A0 48176=C2=A0 734-944-0094
Summer=C2=A0 PO Box 221=C2=A0 Grand Ma= rais, MI 49839=C2=A0 906-494-2434

<= div>

On Tue, Jun 21, 2016 at 3:31 PM, Haynes, Dan= <dhaynes@mitre.org> wrote:

Hi Ira,


Thanks for the feedback!=C2=A0

=C2=A0

By =E2=80=9Cpackaging=E2=80=9D, do yo= u mean data format (e.g. xml, cbor, etc.)?

=C2=A0

Also, with respect to your concern ab= out changing the =E2=80=9Cstructure=E2=80=9D, maybe we want it to say somet= hing like the DM must maintain relationships between information elements in the IM?

=C2=A0

Thanks,

Danny

=C2=A0

From: Ira McDonald [mailto:blueroofmusic@gmail.c= om]
Sent: Tuesday, June 21, 2016 3:07 PM
To: Haynes, Dan <dhaynes@mitre.org>; Ira McDonald <blueroofmusic@gmail.com>
Cc: sacm@ietf.org=
Subject: Re: [sacm] Question about DM Requirements

=C2=A0

Hi Danny,

My two cents.<= u>

A conforming *subset* Data Model should be perfectly= acceptable

in SACM (e.g., one op= timized for roaming mobile devices).

That DM-02 statement:=

=C2=A0 "The data model structure MAY reflect structure in the informat= ion
=C2=A0 model, but does not need to."

makes me uncomfortabl= e...

Changing packaging is OK, but changing the structure= (i.e., hierarchy)

of the IM sounds wron= g to me.

Cheers,

- Ira


Ira McDonald (Musicia= n / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc=
mailto: bluero= ofmusic@gmail.com
Winter=C2=A0 579 Park Place=C2=A0 Saline, MI=C2=A0 48176=C2=A0 734-944-0094<= br> Summer=C2=A0 PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434

=C2=A0

On Tue, Jun 21, 2016 at 1:54 PM, Haynes, Dan <dhaynes@mitre.org&g= t; wrote:

I was reviewing the DM= requirements based on the SWID M&A call for adoption thread and had so= me questions.

=C2=A0

In Section 2 of the Requirements, it s=
ays:
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =E2=80=
=9CMultiple data models, protocols, and transports may be employed in a SAC=
M environment=E2=80=A6=E2=80=9D
=C2=A0
Then DM-001 says:
=C2=A0
=E2=80=9CDM-001=C2=A0 Element Associatio=
n: The data model MUST contain a data model element for each information mo=
del element (e.g. endpoint, IP address, asset).=C2=A0 In other words, for e=
very item in the information model, there must be an item in the data model=
.=C2=A0 The data model can also include elements that do not exist in the i=
nformation model.=E2=80=9D
=C2=A0
Does this requirement conflict with the text above in Section 2 by sa=
ying that every DM must contain an element for each IM element?=C2=A0 That =
is, each DM must support the entire IM and it is not possible for a DM to j=
ust support a portion of the IM.
=C2=A0
Also, DM-002 says:
=E2=80=9CDM-002=C2=A0 Data Model Structure=
: The data model can be structured either as one single module or separated=
 into modules and sub-modules that allow for references between them.=C2=A0=
 The data model structure MAY reflect structure in the information model, b=
ut does not need to. For example, the data model might use one module to de=
fine endpoints, and that module might reference other modules that describe=
 the various assets associated with the endpoint. Constraints and interface=
s might further be defined to resolve or tolerate ambiguity in the referenc=
es (e.g. same IP address used in two separate networks).=E2=80=9D=

=C2=A0
Is this effectively reiterating that a DM must support everything in =
the IM, but, that the DM can choose to break it up into submodules if they =
so choose?
=C2=A0
Thanks,

Danny
=C2=A0


_______________________________________________
sacm mailing list
sacm@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/sacm

=C2=A0


--001a1147d7cc888bfa0535d12321-- From nobody Tue Jun 21 18:29:41 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A955612DAB9 for ; Tue, 21 Jun 2016 18:29:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.899 X-Spam-Level: X-Spam-Status: No, score=-1.899 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id V8_ajK4MFh1p for ; Tue, 21 Jun 2016 18:29:37 -0700 (PDT) Received: from smtp4.pacifier.net (smtp4.pacifier.net [64.255.237.176]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 938CE12D86E for ; Tue, 21 Jun 2016 18:29:37 -0700 (PDT) Received: from hebrews (c-24-21-96-37.hsd1.or.comcast.net [24.21.96.37]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schaad@nwlink.com) by smtp4.pacifier.net (Postfix) with ESMTPSA id AEA5C38EEB; Tue, 21 Jun 2016 18:29:36 -0700 (PDT) From: "Jim Schaad" To: "'Haynes, Dan'" , References: In-Reply-To: Date: Tue, 21 Jun 2016 18:29:36 -0700 Message-ID: <041401d1cc25$8a3217d0$9e964770$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0415_01D1CBEA.DDD47850" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQE6VDCQrLtm/RYKBL20SB1i1Wq+JqEjoT/g Content-Language: en-us Archived-At: Subject: Re: [sacm] Question about DM Requirements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Jun 2016 01:29:40 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0415_01D1CBEA.DDD47850 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Just my $0.02 From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Tuesday, June 21, 2016 10:54 AM To: sacm@ietf.org Subject: [sacm] Question about DM Requirements I was reviewing the DM requirements based on the SWID M&A call for adoption thread and had some questions. In Section 2 of the Requirements, it says: "Multiple data models, protocols, and transports may be employed in a SACM environment." Then DM-001 says: "DM-001 Element Association: The data model MUST contain a data model element for each information model element (e.g. endpoint, IP address, asset). In other words, for every item in the information model, there must be an item in the data model. The data model can also include elements that do not exist in the information model." Does this requirement conflict with the text above in Section 2 by saying that every DM must contain an element for each IM element? That is, each DM must support the entire IM and it is not possible for a DM to just support a portion of the IM. [JLS] I see no conflict here. What the first statement says is that a SACM environment can have Data Model A and Data Model B from different companies as well as Data Model SACM which is the common one that we are defining. Each of those data models needs to be complete relative to the single SACM IM so that it does not matter which DM (of A, B or SACM) my application uses it will be able to get all of the elements in the IM as part of a query. Also, DM-002 says: "DM-002 Data Model Structure: The data model can be structured either as one single module or separated into modules and sub-modules that allow for references between them. The data model structure MAY reflect structure in the information model, but does not need to. For example, the data model might use one module to define endpoints, and that module might reference other modules that describe the various assets associated with the endpoint. Constraints and interfaces might further be defined to resolve or tolerate ambiguity in the references (e.g. same IP address used in two separate networks)." Is this effectively reiterating that a DM must support everything in the IM, but, that the DM can choose to break it up into submodules if they so choose? [JLS] Yes this was the intent that I understood from this. If you are looking at an XML schema as being the data model for Company X, it could publish a top level schema which then allows for sub schemas for different pieces (i.e. end-points, software, users) which are included in the top level schema. There is still are requirement that the entirety of the schema be complete, but it allows for the user schema to be updated to include additional elements that are Company X specific without having to update the entire schema at the same time. It would also allow for both of the sub-schemas for users to be supported at the same time if desired. Jim Thanks, Danny ------=_NextPart_000_0415_01D1CBEA.DDD47850 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Just my $0.02

 

From: sacm = [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, = Dan
Sent: Tuesday, June 21, 2016 10:54 AM
To: = sacm@ietf.org
Subject: [sacm] Question about DM = Requirements

 

I was reviewing the DM requirements based on the = SWID M&A call for adoption thread and had some = questions.

 

In Section 2 of the Requirements, it =
says:
            =
        “Multiple data models, =
protocols, and transports may be employed in a SACM =
environment…”
 
Then DM-001 says:
 
“DM-001  Element Association: The data model MUST contain a =
data model element for each information model element (e.g. endpoint, IP =
address, asset).  In other words, for every item in the information =
model, there must be an item in the data model.  The data model can =
also include elements that do not exist in the information =
model.”
 
Does this requirement conflict with the text above in Section 2 by =
saying that every DM must contain an element for each IM element? =
 That is, each DM must support the entire IM and it is not possible =
for a DM to just support a portion of the =
IM.
 
[JL=
S] I see no conflict here.  What the first statement says is that a =
SACM environment can have Data Model A and Data Model B from different =
companies as well as Data Model SACM which is the common one that we are =
defining.  Each of those data models needs to be complete relative =
to the single SACM IM so that it does not matter which DM (of A, B or =
SACM) my application uses it will be able to get all of the elements in =
the IM as part of a query.
 
Also, DM-002 says:
“DM-002  Data Model Structure: The data model can be =
structured either as one single module or separated into modules and =
sub-modules that allow for references between them.  The data model =
structure MAY reflect structure in the information model, but does not =
need to. For example, the data model might use one module to define =
endpoints, and that module might reference other modules that describe =
the various assets associated with the endpoint. Constraints and =
interfaces might further be defined to resolve or tolerate ambiguity in =
the references (e.g. same IP address used in two separate =
networks).”
 
Is this effectively reiterating that a DM must support everything in =
the IM, but, that the DM can choose to break it up into submodules if =
they so choose?
 
[JL=
S] Yes this was the intent that I understood from this.  If you are =
looking at an XML schema as being the data model for Company X, it could =
publish a top level schema which then allows for sub schemas for =
different pieces (i.e. end-points, software, users) which are included =
in the top level schema.  There is still are requirement that the =
entirety of the schema be complete, but it allows for the user schema to =
be updated to include additional elements that are Company X specific =
without having to update the entire schema at the same time.  It =
would also allow for both of the sub-schemas for users to be supported =
at the same time if desired.
 
Jim=

 
 
Thanks,

Danny
 
------=_NextPart_000_0415_01D1CBEA.DDD47850-- From nobody Wed Jun 22 10:57:08 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 29A0712D9E3 for ; Wed, 22 Jun 2016 10:57:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nvygxHGBnyab for ; Wed, 22 Jun 2016 10:57:03 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id ACE2012D7D3 for ; Wed, 22 Jun 2016 10:57:03 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id DEC5B6C4011; Wed, 22 Jun 2016 13:57:02 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id C90B06C0D25; Wed, 22 Jun 2016 13:57:02 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Wed, 22 Jun 2016 13:57:02 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Wed, 22 Jun 2016 13:57:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=nNeSVLY9IWM+b1qw+sXQ76yTsA0XRlX3sXtlE49qQf0=; b=tuTTHew5SUbkjJaxz/403BUHViI96Z+JGdKVqKk39+IabtIodd+X9QdDpHA8xymXbSzdz9c3nKMOcFzGu1KsO2fxXzFR0ggUeFLxx8NFLJ0uCP9odo2vBbYFE6QEDs1qSbuonTM0DZIv0FrrfBkT1epQpn+ujiTyf1CVMuOKKX4= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) with Microsoft SMTP Server (TLS) id 15.1.523.12; Wed, 22 Jun 2016 17:56:55 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.015; Wed, 22 Jun 2016 17:56:55 +0000 From: "Haynes, Dan" To: Jim Schaad , "sacm@ietf.org" Thread-Topic: [sacm] Question about DM Requirements Thread-Index: AdHL4+wgxazq+QzLQVe22pvEQ/aWnwAQZ0sAABwEjjA= Date: Wed, 22 Jun 2016 17:56:55 +0000 Message-ID: References: <041401d1cc25$8a3217d0$9e964770$@augustcellars.com> In-Reply-To: <041401d1cc25$8a3217d0$9e964770$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.87] x-ms-office365-filtering-correlation-id: 30139124-5f6f-4b29-f41c-08d39ac69960 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1078; 6:DNigD88n9GtKxy2FM0K04tYU17WjhxBxBXoi+pj1dQZvHZmvr9XEpQhQ7Ud+oZGex9LGZr7AZ20NR3oITPEgYio7R9SKtsjdYjePV2A/JqgimLUdeJso5UtDN0yyfr7shEWroNjJi0wA5BX8ZpFcMi0NnjK/Ea6Tbr+yUPguDx7mhxksNulUjZPOka5MFnjRuE2i4bmhDs+j7IRpu5rpiHoVjHstCm7LsuFyeHGW/MvScfi4ygzgMpOtVC9ELcV4ksklDjDZxa6RBeitKsCc8Aof6dLhb/5tju9Cxb4v0ZjQyHUkEgp8cgYWxv5T+z2pY0RMJQPy8qP0pdVMPHtxY9aiLpfMh1Q3auePjHOicgA=; 5:mPNjHdNkDsv9EGo98zb5cdMSTzbsia7TvbNwbX5Lpgd4euw64iBGxrj4VW8Wi/Lwp+m80N7yxXWFYRQXJBBv/P4TrQ6MQLqkRz9j8FyhdAEYD60xxP3t+WtDeZJJGNlM42r1eCFjHuZiKJ+Y9gTOJw==; 24:uwkA6s5aSEnWoFlW0ajL9wimBOpfQuqYT+WqTnNgtu3kkzKF4jcNzBzPEioeTtVIBOlotbz5SZTFyGRsLQoyN9fKFoiVB9Yr5F67HB+WVrM=; 7:t61Ec+G0IkZeHCykFOxcFr8YgXCVPDzp9cj+DcjTpwy8Pw5LyISfz9sGxzv6xuuPvxhSADGDxRxAj1tSjLXMrCwVEMwMd8X1jlwGgluknAS5x7wP+us7oSILloD/HMaEJKNwU66AH9jYAZbJNP28ZYzsycMX6wIUQxhW0ca93fvUfzKWzPNFIfUgphWMy5XtJX2/NlpXq/qIEePARwkzDQNDSGgSd4CswDz2egICZgAoY4aXPXHgekGD5agvXIKx85PjkgKNKDVYdos4xw8b7g== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1078; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(131327999870524)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1078; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1078; x-forefront-prvs: 0981815F2F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(51914003)(189002)(199003)(377454003)(8936002)(19300405004)(2950100001)(3846002)(16236675004)(86362001)(102836003)(92566002)(66066001)(586003)(790700001)(122556002)(50986999)(9686002)(10400500002)(6116002)(11100500001)(2501003)(76176999)(54356999)(3660700001)(105586002)(74316001)(2906002)(76576001)(97736004)(87936001)(5002640100001)(5001770100001)(3280700002)(106356001)(19580395003)(81166006)(19580405001)(107886002)(68736007)(77096005)(5003600100003)(33656002)(15975445007)(101416001)(189998001)(2900100001)(8676002)(81156014)(19625215002)(99286002)(7846002)(7696003)(7736002); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1078; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB10789ACA4F913ACDBD1946DDA52C0BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jun 2016 17:56:55.4009 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1078 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] Question about DM Requirements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Jun 2016 17:57:07 -0000 --_000_BY2PR09MB10789ACA4F913ACDBD1946DDA52C0BY2PR09MB1078namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Thanks for the feedback Ira and Jim. Based on your $0.04 :), I see a coupl= e of approaches that may help things. (1) We could completely overhaul DM-002 such that it simply states how t= he relationships between information model elements MUST be maintained in t= he data model. By removing the text around the DM potentially being a singl= e or multiple modules, I think we would still enable DM designers to make t= hat decision, however, it would now be implied. I guess the question here i= s whether or not that is good enough? Or, do we want a specific requiremen= t around it? (2) Modify DM-002 to remove the part about "reflecting the structure of = the IM" and keep it focused on the DM being able to be a single or multiple= modules. Then, add a new DM requirement around maintaining the relationshi= ps between the information model elements in the data model elements. Do either of these seem to help? Do others, who have not weighed in yet, have thoughts on this thread? Thanks, Danny From: Jim Schaad [mailto:ietf@augustcellars.com] Sent: Tuesday, June 21, 2016 9:30 PM To: Haynes, Dan ; sacm@ietf.org Subject: RE: [sacm] Question about DM Requirements Just my $0.02 From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Tuesday, June 21, 2016 10:54 AM To: sacm@ietf.org Subject: [sacm] Question about DM Requirements I was reviewing the DM requirements based on the SWID M&A call for adoption= thread and had some questions. In Section 2 of the Requirements, it says: "Multiple data models, protocols, and transports may be= employed in a SACM environment..." Then DM-001 says: "DM-001 Element Association: The data model MUST contain a data model elem= ent for each information model element (e.g. endpoint, IP address, asset). = In other words, for every item in the information model, there must be an = item in the data model. The data model can also include elements that do n= ot exist in the information model." Does this requirement conflict with the text above in Section 2 by saying t= hat every DM must contain an element for each IM element? That is, each DM= must support the entire IM and it is not possible for a DM to just support= a portion of the IM. [JLS] I see no conflict here. What the first statement says is that a SACM= environment can have Data Model A and Data Model B from different companie= s as well as Data Model SACM which is the common one that we are defining. = Each of those data models needs to be complete relative to the single SACM= IM so that it does not matter which DM (of A, B or SACM) my application us= es it will be able to get all of the elements in the IM as part of a query. Also, DM-002 says: "DM-002 Data Model Structure: The data model can be structured either as o= ne single module or separated into modules and sub-modules that allow for r= eferences between them. The data model structure MAY reflect structure in = the information model, but does not need to. For example, the data model mi= ght use one module to define endpoints, and that module might reference oth= er modules that describe the various assets associated with the endpoint. C= onstraints and interfaces might further be defined to resolve or tolerate a= mbiguity in the references (e.g. same IP address used in two separate netwo= rks)." Is this effectively reiterating that a DM must support everything in the IM= , but, that the DM can choose to break it up into submodules if they so cho= ose? [JLS] Yes this was the intent that I understood from this. If you are look= ing at an XML schema as being the data model for Company X, it could publis= h a top level schema which then allows for sub schemas for different pieces= (i.e. end-points, software, users) which are included in the top level sch= ema. There is still are requirement that the entirety of the schema be com= plete, but it allows for the user schema to be updated to include additiona= l elements that are Company X specific without having to update the entire = schema at the same time. It would also allow for both of the sub-schemas f= or users to be supported at the same time if desired. Jim Thanks, Danny --_000_BY2PR09MB10789ACA4F913ACDBD1946DDA52C0BY2PR09MB1078namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Thanks for the feedbac= k Ira and Jim.  Based on your $0.04 :), I see a couple of approaches t= hat may help things.

 

(1)&= nbsp;   We could compl= etely overhaul DM-002 such that it simply states how the relationships betw= een information model elements MUST be maintained in the data model. By rem= oving the text around the DM potentially being a single or multiple modules, I think we would still enable DM desig= ners to make that decision, however, it would now be implied. I guess the q= uestion here is whether or not that is good enough?  Or, do we want a = specific requirement around it?

 

(2)&= nbsp;   Modify DM-002 = to remove the part about “reflecting the structure of the IM” a= nd keep it focused on the DM being able to be a single or multiple modules.= Then, add a new DM requirement around maintaining the relationships between the information model elements in the data model= elements.

 

Do either of these see= m to help? 

 

Do others, who have no= t weighed in yet, have thoughts on this thread?

 

Thanks,

Danny

 

 

From: Jim Schaad [mailto:ietf@augustcellars.c= om]
Sent: Tuesday, June 21, 2016 9:30 PM
To: Haynes, Dan <dhaynes@mitre.org>; sacm@ietf.org
Subject: RE: [sacm] Question about DM Requirements

 

Just my $0.02

 

From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan
Sent: Tuesday, June 21, 2016 10:54 AM
To: sacm@ietf.org
Subject: [sacm] Question about DM Requirements

 

I was reviewing the DM= requirements based on the SWID M&A call for adoption thread and had so= me questions.

 

In Section 2 of the Requ=
irements, it says:
         &=
nbsp;          “Multiple=
 data models, protocols, and transports may be employed in a SACM environme=
nt…”
 
Then DM-001 says:
 
“DM-001  Elemen=
t Association: The data model MUST contain a data model element for each in=
formation model element (e.g. endpoint, IP address, asset).  In other =
words, for every item in the information model, there must be an item in th=
e data model.  The data model can also include elements that do not ex=
ist in the information model.”
 
Does this requirement conflict with the text above in S=
ection 2 by saying that every DM must contain an element for each IM elemen=
t?  That is, each DM must support the entire IM and it is not possible=
 for a DM to just support a portion of the IM.
 
[JLS] I see no conflict here.  What the first statemen=
t says is that a SACM environment can have Data Model A and Data Model B fr=
om different companies as well as Data Model SACM which is the common one t=
hat we are defining.  Each of those data models needs to be complete r=
elative to the single SACM IM so that it does not matter which DM (of A, B =
or SACM) my application uses it will be able to get all of the elements in =
the IM as part of a query.
 
Also, DM-002 says:<=
/o:p>
“DM-002  Data Mod=
el Structure: The data model can be structured either as one single module =
or separated into modules and sub-modules that allow for references between=
 them.  The data model structure MAY reflect structure in the informat=
ion model, but does not need to. For example, the data model might use one =
module to define endpoints, and that module might reference other modules t=
hat describe the various assets associated with the endpoint. Constraints a=
nd interfaces might further be defined to resolve or tolerate ambiguity in =
the references (e.g. same IP address used in two separate networks).”=

 
Is this effectively reiterating that a DM must support =
everything in the IM, but, that the DM can choose to break it up into submo=
dules if they so choose?
 
[JLS] Yes this was the intent that I understood from this.&=
nbsp; If you are looking at an XML schema as being the data model for Compa=
ny X, it could publish a top level schema which then allows for sub schemas=
 for different pieces (i.e. end-points, software, users) which are included=
 in the top level schema.  There is still are requirement that the ent=
irety of the schema be complete, but it allows for the user schema to be up=
dated to include additional elements that are Company X specific without ha=
ving to update the entire schema at the same time.  It would also allo=
w for both of the sub-schemas for users to be supported at the same time if=
 desired.
 
Jim
 
 
Thanks,

Danny
 
--_000_BY2PR09MB10789ACA4F913ACDBD1946DDA52C0BY2PR09MB1078namp_-- From nobody Wed Jun 22 11:19:53 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id AD6BF12D824 for ; Wed, 22 Jun 2016 11:19:52 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.961 X-Spam-Level: X-Spam-Status: No, score=-4.961 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TQggcXRTwg3M for ; Wed, 22 Jun 2016 11:19:51 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext3.iad.github.net [192.30.252.194]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6B41812D7E9 for ; Wed, 22 Jun 2016 11:19:50 -0700 (PDT) Date: Wed, 22 Jun 2016 11:19:49 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1466619589; bh=Tg2CXM4o2tRTmV+ztrzZwRz0hYZYMWDziccCEAZlYXM=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=QSEuKqUJ0RxBiXH5GvcvpKyIsHfKF2k0zocUt/nEDzJcbX7Lo6L7+MFJS2rRp7r6u QqoJSg2gWi2cNanT/vtSXG/ZN0F5O3dD4tEq0h6hDMCsSZy6fE525UThtFrhKmnisx ZPA9bl9Mn6qsbNPr8HlRBBZJxetR8sS0uXI7W2x8= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_576ad6c541c93_4e763f85b71e52b81251f"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] Update Appendix E to reference Critical Controls version 6 (#23) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Jun 2016 18:19:53 -0000 ----==_mimepart_576ad6c541c93_4e763f85b71e52b81251f Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit https://www.ietf.org/mail-archive/web/sacm/current/msg04184.html --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/23#issuecomment-227832388 ----==_mimepart_576ad6c541c93_4e763f85b71e52b81251f Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

https://www.ietf.org/mail-archive/web/sacm/current/msg04184.html

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_576ad6c541c93_4e763f85b71e52b81251f-- From nobody Wed Jun 22 11:40:19 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6214B12D5C8 for ; Wed, 22 Jun 2016 11:40:18 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JbDkU7yvwgAb for ; Wed, 22 Jun 2016 11:40:16 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 47B4912D794 for ; Wed, 22 Jun 2016 11:40:16 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id D69ED6C4052; Wed, 22 Jun 2016 14:40:15 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id C2EC76C4062; Wed, 22 Jun 2016 14:40:15 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Wed, 22 Jun 2016 14:40:15 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Wed, 22 Jun 2016 14:40:15 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=M0NNn3vuRJ7Moa36FBdt+42kZgHzBl82VoTRuwmO9iQ=; b=l7dhx4agJ6wxaoi9Jw98bMDnIh7HFNO0l3vTLHGS2R1p9QoS0Tsq3k8FxwCBE8P9jq1rdUvmbKBCi9B/ThwYkzag7E949SZUyDvmj1bDYJQMZ/sDYbBW5HmmzvNkCGqjUPNlSEcXjUmgCG+nEVdkx/8vZ1k9WF2pQ5Iy73YQC4A= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) with Microsoft SMTP Server (TLS) id 15.1.523.12; Wed, 22 Jun 2016 18:40:14 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.015; Wed, 22 Jun 2016 18:40:14 +0000 From: "Haynes, Dan" To: Henk Birkholz , "sacm@ietf.org" Thread-Topic: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 Thread-Index: AdHIkuRuh5CvhlIOStepa2ZMRUUCngAUH7kAAIZNikAAAg9pAABq5kLg Date: Wed, 22 Jun 2016 18:40:13 +0000 Message-ID: References: <576805A6.8040609@sit.fraunhofer.de> In-Reply-To: <576805A6.8040609@sit.fraunhofer.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.87] x-ms-office365-filtering-correlation-id: 3c7c93e4-64de-41d2-5e94-08d39acca624 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1078; 6:1q8vOTewVaYRyWXfqKwzo0D5zfyJg8sWr4GwMV5Qb6Xss0tFV9NSWegTnS9l7y1++tFCcSyOK2xE6j5HybrQKDQ6YSit3ReRDpfYBpjXVfxo5Ez8RF8Nb5XbPEDZ22KuilGH/z3LLyjA/fqGFRdNXHadHqtqe6MqNSRBUDt7A120aNWGcIfZhPvi0/iIGClVL0avEv3FNU7FzGalIgV2qb1Ce1qZ2iFQJVcIExQFFwcXGuRF8IRiHG8W5H9A7UxSRvdwDdLzTIeQ71gTqFLuVDoNc4DSgc8lKqcvn8xlfi1Nl+RFxcMe4kGbte5pNjRYhovJ+mGtasg+wkYy9TSq0R43EGyF3YQNya6ThrT8/PY=; 5:CTKq+2TWwK8SWoSqzlLsLR4S+ZJkllCK0aw4zZ1xP+X5h+mXjvEE2GP9ijm+7u1rq1Um9erDcDW/+2rKGirk7Wjg6hIg65YBv/8er1uVCjs8DxExme/YZcZphaPoKNgJOiN+XewuqxdbgsejDOuCVw==; 24:dSIcn6sXo0SP9PaUYkXxFfjXQxJWJF/v9IbNCXUhXniC6+oPUZALCBejXToH3jhKCN/fLXR+Rup23v+BJoQQz0iUP5u42TaykE9UtUsQFwM=; 7:GaM0lyBLNVrBAG8jOtY1vqij0frx/6gNZwtdeyQ4bYwH7a/1o17QGTRd8l4AaesapFXXbkyW3CTP6hCVn1kAZewqAhq2uD/yYuN1rUNH8vB0eDSmbqaj6XZwIHdLsC7T9MJlGX58UT3TMX/xW29QStnhm2m8XYS+5CRRN8PkGHaedqobbpWhv67cldbb+3UEKLCgCfNlZCFmZLDj8gMyysaLRxqJn+cMkZ72C95LJ4dEOSdHgax/LxPPOHR+9dbqA43Qq1LEn4lF63mGVpt8bg== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1078; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(166708455590820)(192374486261705)(273802758526341); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1078; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1078; x-forefront-prvs: 0981815F2F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(5383002)(199003)(377454003)(13464003)(189002)(24454002)(5002640100001)(3280700002)(5001770100001)(87936001)(15650500001)(2906002)(76576001)(97736004)(74316001)(19580405001)(19580395003)(81166006)(106356001)(105586002)(99286002)(8676002)(81156014)(7846002)(305945005)(7736002)(7696003)(33656002)(77096005)(5003600100003)(15975445007)(107886002)(68736007)(2900100001)(101416001)(189998001)(586003)(50986999)(122556002)(9686002)(66066001)(2950100001)(8936002)(3846002)(102836003)(86362001)(92566002)(93886004)(76176999)(11100500001)(2501003)(3660700001)(54356999)(5890100001)(10400500002)(6116002); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1078; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jun 2016 18:40:13.8427 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1078 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Update Appendix E to Reference CSC v6.0 X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Jun 2016 18:40:18 -0000 Given the feedback, I have pulled these changes into the development draft = of the I-D on GitHub and they will be available in the next revision. Thanks, Danny > -----Original Message----- > From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Henk Birkholz > Sent: Monday, June 20, 2016 11:03 AM > To: sacm@ietf.org > Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #23 - Update > Appendix E to Reference CSC v6.0 >=20 > The changes look fine to me. >=20 > The CSC 4 System Entity Relationship diagram seems to imply the use of a > vulnerability scanner, I think. Could an "SCAP Unauthenticated Vulnerabil= ity > Scanner" be used as an example for a Posture Collector that does not resi= de > on the target endpoint itself? >=20 > Gr=FC=DFe, >=20 > Henk >=20 >=20 > On 06/20/2016 04:04 PM, Haynes, Dan wrote: > > Thanks Adam. Do others have thoughts on these changes? > > > > Thanks, > > > > Danny > > > > *From:*Adam Montville [mailto:adam.w.montville@gmail.com] > > *Sent:* Friday, June 17, 2016 5:59 PM > > *To:* Haynes, Dan > > *Cc:* sacm@ietf.org > > *Subject:* Re: [sacm] Vulnerability Assessment Scenario Issue #23 - > > Update Appendix E to Reference CSC v6.0 > > > > This looks good from my perspective, Danny, thank you. > > > > On Jun 17, 2016, at 7:59 AM, Haynes, Dan > > wrote: > > > > We have a tracker that recommends updating Appendix E to reference > > Critical Security Controls v6.0 instead of v5.1 [1][2]. I went > > through both versions of the document and made the appropriate > > updates to the text (see attached) as some controls have changed or > > have been removed. > > > > Please review the attached changes and let me know if they seem > > reasonable to incorporate into the next revision of the > > Vulnerability Assessment Scenario I-D. > > > > Thanks, > > > > Danny > > > > [1]https://github.com/sacmwg/vulnerability-scenario/issues/23 > > > > [2]https://www.cisecurity.org/critical-controls.cfm > > > > updates.docx>_______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > > > > > > > _______________________________________________ > > sacm mailing list > > sacm@ietf.org > > https://www.ietf.org/mailman/listinfo/sacm > > >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm From nobody Wed Jun 22 12:49:43 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 00AC812D643 for ; Wed, 22 Jun 2016 12:49:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.689 X-Spam-Level: X-Spam-Status: No, score=-2.689 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Fdh5bIfma5zf for ; Wed, 22 Jun 2016 12:49:32 -0700 (PDT) Received: from mail-oi0-x22f.google.com (mail-oi0-x22f.google.com [IPv6:2607:f8b0:4003:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 93E4012D686 for ; Wed, 22 Jun 2016 12:49:32 -0700 (PDT) Received: by mail-oi0-x22f.google.com with SMTP id s66so38300203oif.1 for ; Wed, 22 Jun 2016 12:49:32 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=g1owZaRCYupm2EKcSHGmtfDhlmOwsy1XF90RmLFZ6cc=; b=J3+cliyZpDRZMCPGVvjVlxgQH/gN9fFQnBrVKAffcPc4cLGF63dPbVJvd5GiD0nd0U HFWlvtwliX0mCSoiu8UtpWz3ysyiBi+SEvjUCyvZ2P46Wf/BrDwo9132fo36+XE+8yuX bHz7ptGG0Ob57qhOSeUr+ZZvqw+d6TGMCaTAUENkFUC/C4KG7MisfBMycGge8+GxQ4kk kbUqGwkS/paCMMNzSeM8sxqaS0fI3U+BxDKeFiAj0VhbEScNnRkdodQ65NN3wUHUI4YZ Dox9Mxia9WzTZQrOZ1box0JHy3pLbdHbRUqXhXF65IE7qMy88gQyE/Givn6808H1DRGI M0dw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=g1owZaRCYupm2EKcSHGmtfDhlmOwsy1XF90RmLFZ6cc=; b=imDxw9qPaN47aflNfCWETxUbeh/gLT8gir/nx1kqIKvBoOX+jS8niO5599iJFsFjjq 6FoAdDkAKVLujFzYTFuSI5BrGpo5yg1trLynn/kasbAgksRLwGTmren67uXqWBiUdw6P 5pMpiR3oGSby5XwcJP6ggYDY/O4tS9hUZkATAGbuZ8ftvrTIIm05z8dpwVJOOPPBaKTs TMNXX65atbNswgeikEGMKChljMzcCAD+6gKHsZo08KU90ADNYgqD3BuZYzKhfys1O/s9 UBRyq57PVWUw8qCevQzY3EjX5ZplpY9+rf8pMH8F1M3HLo3wXhlodUucUefOMzkmE04D Q4Mw== X-Gm-Message-State: ALyK8tIW3U9s18ESnU7tH+KktDSEf7zrGS6YYewMhx5COlCvYq/Ffu40lxnO5gU/gjNeDiWhsnXTOWZb1kucpg== X-Received: by 10.157.10.70 with SMTP id 64mr3426030otg.131.1466624971807; Wed, 22 Jun 2016 12:49:31 -0700 (PDT) MIME-Version: 1.0 Received: by 10.157.11.240 with HTTP; Wed, 22 Jun 2016 12:49:12 -0700 (PDT) In-Reply-To: References: <041401d1cc25$8a3217d0$9e964770$@augustcellars.com> From: Ira McDonald Date: Wed, 22 Jun 2016 15:49:12 -0400 Message-ID: To: "Haynes, Dan" , Ira McDonald Content-Type: multipart/alternative; boundary=001a1136e7da76a2570535e33c0b Archived-At: Cc: Jim Schaad , "sacm@ietf.org" Subject: Re: [sacm] Question about DM Requirements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Jun 2016 19:49:42 -0000 --001a1136e7da76a2570535e33c0b Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Danny, I think I prefer (2) simply because I prefer single, small requirements (lots) as opposed to compound requirements (which some of ours currently are, because of their explanatory and exemplary extra sentences). Cheers, - Ira Ira McDonald (Musician / Software Architect) Co-Chair - TCG Trusted Mobility Solutions WG Chair - Linux Foundation Open Printing WG Secretary - IEEE-ISTO Printer Working Group Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG IETF Designated Expert - IPP & Printer MIB Blue Roof Music / High North Inc http://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com Winter 579 Park Place Saline, MI 48176 734-944-0094 Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 On Wed, Jun 22, 2016 at 1:56 PM, Haynes, Dan wrote: > Thanks for the feedback Ira and Jim. Based on your $0.04 :), I see a > couple of approaches that may help things. > > > > (1) We could completely overhaul DM-002 such that it simply states how > the relationships between information model elements MUST be maintained i= n > the data model. By removing the text around the DM potentially being a > single or multiple modules, I think we would still enable DM designers to > make that decision, however, it would now be implied. I guess the questio= n > here is whether or not that is good enough? Or, do we want a specific > requirement around it? > > > > (2) Modify DM-002 to remove the part about =E2=80=9Creflecting the str= ucture > of the IM=E2=80=9D and keep it focused on the DM being able to be a singl= e or > multiple modules. Then, add a new DM requirement around maintaining the > relationships between the information model elements in the data model > elements. > > > > Do either of these seem to help? > > > > Do others, who have not weighed in yet, have thoughts on this thread? > > > > Thanks, > > Danny > > > > > > *From:* Jim Schaad [mailto:ietf@augustcellars.com] > *Sent:* Tuesday, June 21, 2016 9:30 PM > *To:* Haynes, Dan ; sacm@ietf.org > *Subject:* RE: [sacm] Question about DM Requirements > > > > Just my $0.02 > > > > *From:* sacm [mailto:sacm-bounces@ietf.org ] *On > Behalf Of *Haynes, Dan > *Sent:* Tuesday, June 21, 2016 10:54 AM > *To:* sacm@ietf.org > *Subject:* [sacm] Question about DM Requirements > > > > I was reviewing the DM requirements based on the SWID M&A call for > adoption thread and had some questions. > > > > In Section 2 of the Requirements, it says: > > =E2=80=9CMultiple data models, protocols, and transpo= rts may be employed in a SACM environment=E2=80=A6=E2=80=9D > > > > Then DM-001 says: > > > > =E2=80=9CDM-001 Element Association: The data model MUST contain a data = model element for each information model element (e.g. endpoint, IP address= , asset). In other words, for every item in the information model, there m= ust be an item in the data model. The data model can also include elements= that do not exist in the information model.=E2=80=9D > > > > Does this requirement conflict with the text above in Section 2 by saying= that every DM must contain an element for each IM element? That is, each = DM must support the entire IM and it is not possible for a DM to just suppo= rt a portion of the IM. > > > > [JLS] I see no conflict here. What the first statement says is that a SA= CM environment can have Data Model A and Data Model B from different compan= ies as well as Data Model SACM which is the common one that we are defining= . Each of those data models needs to be complete relative to the single SA= CM IM so that it does not matter which DM (of A, B or SACM) my application = uses it will be able to get all of the elements in the IM as part of a quer= y. > > > > Also, DM-002 says: > > =E2=80=9CDM-002 Data Model Structure: The data model can be structured e= ither as one single module or separated into modules and sub-modules that a= llow for references between them. The data model structure MAY reflect str= ucture in the information model, but does not need to. For example, the dat= a model might use one module to define endpoints, and that module might ref= erence other modules that describe the various assets associated with the e= ndpoint. Constraints and interfaces might further be defined to resolve or = tolerate ambiguity in the references (e.g. same IP address used in two sepa= rate networks).=E2=80=9D > > > > Is this effectively reiterating that a DM must support everything in the = IM, but, that the DM can choose to break it up into submodules if they so c= hoose? > > > > [JLS] Yes this was the intent that I understood from this. If you are lo= oking at an XML schema as being the data model for Company X, it could publ= ish a top level schema which then allows for sub schemas for different piec= es (i.e. end-points, software, users) which are included in the top level s= chema. There is still are requirement that the entirety of the schema be c= omplete, but it allows for the user schema to be updated to include additio= nal elements that are Company X specific without having to update the entir= e schema at the same time. It would also allow for both of the sub-schemas= for users to be supported at the same time if desired. > > > > Jim > > > > > > Thanks, > > Danny > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > --001a1136e7da76a2570535e33c0b Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Danny,

I think I = prefer (2) simply because I prefer single, small requirements (lots)
as opposed to compound requirements (which some of ours currently are,
because of their explanatory and exemplary extra sentences).
Cheers,
- Ira

Ira McDonald (Musician / Software Architect)
Co-Ch= air - TCG Trusted Mobility Solutions WG
Chair - Linux Foundation Open Pr= inting WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE= -ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP &am= p; Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.= com
Winter=C2=A0 579 Park Place=C2=A0 Saline, MI=C2=A0 48176=C2=A0 7= 34-944-0094
Summer=C2=A0 PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 9= 06-494-2434

<= div>

On Wed, Jun 22, 2016 at 1:56 PM, Haynes, Dan= <dhaynes@mitre.org> wrote:

Thanks for the feedbac= k Ira and Jim.=C2=A0 Based on your $0.04 :), I see a couple of approaches t= hat may help things.

=C2=A0

(1)=C2=A0=C2=A0=C2=A0 We could complete= ly overhaul DM-002 such that it simply states how the relationships between= information model elements MUST be maintained in the data model. By removi= ng the text around the DM potentially being a single or multiple modules, I think we would still enable DM desig= ners to make that decision, however, it would now be implied. I guess the q= uestion here is whether or not that is good enough?=C2=A0 Or, do we want a = specific requirement around it?

=C2=A0

(2)=C2=A0=C2=A0=C2=A0 Modify DM-002 to = remove the part about =E2=80=9Creflecting the structure of the IM=E2=80=9D = and keep it focused on the DM being able to be a single or multiple modules= . Then, add a new DM requirement around maintaining the relationships between the information model elements in the data model= elements.

=C2=A0

Do either of these see= m to help?=C2=A0

=C2=A0

Do others, who have no= t weighed in yet, have thoughts on this thread?

=C2=A0

Thanks,

Danny

=C2=A0

=C2=A0

From: Jim Schaad [mailto:ietf@augustcellars.com]
Sent: Tuesday, June 21, 2016 9:30 PM
To: Haynes, Dan <dhaynes@mitre.org>; sacm@ietf.org
Subject: RE: [sacm] Question about DM Requirements

=C2=A0

Just my $0.02

=C2=A0

From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan
Sent: Tuesday, June 21, 2016 10:54 AM
To: sacm@ietf.org=
Subject: [sacm] Question about DM Requirements

=C2=A0

I was reviewing the DM= requirements based on the SWID M&A call for adoption thread and had so= me questions.

=C2=A0

In Section 2 of the Requ=
irements, it says:
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=
=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 =E2=80=9CMulti=
ple data models, protocols, and transports may be employed in a SACM enviro=
nment=E2=80=A6=E2=80=9D
=C2=A0
Then DM-001 says:
=C2=A0
=E2=80=9CDM-001=C2=A0 Elem=
ent Association: The data model MUST contain a data model element for each =
information model element (e.g. endpoint, IP address, asset).=C2=A0 In othe=
r words, for every item in the information model, there must be an item in =
the data model.=C2=A0 The data model can also include elements that do not =
exist in the information model.=E2=80=9D
=C2=A0
Does this requirement conflict with the text above in S=
ection 2 by saying that every DM must contain an element for each IM elemen=
t?=C2=A0 That is, each DM must support the entire IM and it is not possible=
 for a DM to just support a portion of the IM.
=C2=A0
[JLS] I see no conflict here.=C2=A0 What the first statemen=
t says is that a SACM environment can have Data Model A and Data Model B fr=
om different companies as well as Data Model SACM which is the common one t=
hat we are defining.=C2=A0 Each of those data models needs to be complete r=
elative to the single SACM IM so that it does not matter which DM (of A, B =
or SACM) my application uses it will be able to get all of the elements in =
the IM as part of a query.
=C2=A0
Also, DM-002 says:
=E2=80=9CDM-002=C2=A0 Data M=
odel Structure: The data model can be structured either as one single modul=
e or separated into modules and sub-modules that allow for references betwe=
en them.=C2=A0 The data model structure MAY reflect structure in the inform=
ation model, but does not need to. For example, the data model might use on=
e module to define endpoints, and that module might reference other modules=
 that describe the various assets associated with the endpoint. Constraints=
 and interfaces might further be defined to resolve or tolerate ambiguity i=
n the references (e.g. same IP address used in two separate networks).=E2=
=80=9D
=C2=A0
Is this effectively reiterating that a DM must support =
everything in the IM, but, that the DM can choose to break it up into submo=
dules if they so choose?
=C2=A0
[JLS] Yes this was the intent that I understood from this.=
=C2=A0 If you are looking at an XML schema as being the data model for Comp=
any X, it could publish a top level schema which then allows for sub schema=
s for different pieces (i.e. end-points, software, users) which are include=
d in the top level schema.=C2=A0 There is still are requirement that the en=
tirety of the schema be complete, but it allows for the user schema to be u=
pdated to include additional elements that are Company X specific without h=
aving to update the entire schema at the same time.=C2=A0 It would also all=
ow for both of the sub-schemas for users to be supported at the same time i=
f desired.
=C2=A0
Jim
=C2=A0
=C2=A0
Thanks,

Danny
=C2=A0

_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


--001a1136e7da76a2570535e33c0b-- From nobody Wed Jun 22 15:32:34 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4A5F812DD9A for ; Wed, 22 Jun 2016 15:32:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7] autolearn=ham autolearn_force=no Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qx4mh38vRRie for ; Wed, 22 Jun 2016 15:32:29 -0700 (PDT) Received: from smtp2.pacifier.net (smtp2.pacifier.net [64.255.237.172]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 49E3712DD7D for ; Wed, 22 Jun 2016 15:32:20 -0700 (PDT) Received: from hebrews (173-8-216-38-Oregon.hfc.comcastbusiness.net [173.8.216.38]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) (Authenticated sender: schaad@nwlink.com) by smtp2.pacifier.net (Postfix) with ESMTPSA id 9358E2CA0B; Wed, 22 Jun 2016 15:32:19 -0700 (PDT) From: "Jim Schaad" To: "'Haynes, Dan'" , References: <041401d1cc25$8a3217d0$9e964770$@augustcellars.com> In-Reply-To: Date: Wed, 22 Jun 2016 15:32:18 -0700 Message-ID: <053501d1ccd5$efbb60b0$cf322210$@augustcellars.com> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0536_01D1CC9B.4360CE70" X-Mailer: Microsoft Outlook 16.0 Thread-Index: AQE6VDCQrLtm/RYKBL20SB1i1Wq+JgIL5SdZAZs2vfuhB78rYA== Content-Language: en-us Archived-At: Subject: Re: [sacm] Question about DM Requirements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Jun 2016 22:32:32 -0000 This is a multipart message in MIME format. ------=_NextPart_000_0536_01D1CC9B.4360CE70 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Wednesday, June 22, 2016 10:57 AM To: Jim Schaad ; sacm@ietf.org Subject: Re: [sacm] Question about DM Requirements Thanks for the feedback Ira and Jim. Based on your $0.04 :), I see a couple of approaches that may help things. [JLS] I am not sure that there is any need to change the requirements unless you believe that the IM/DM which are being proposed as the SACM versions is going to violate the current set of requirements. Are you just having problems understanding what they are saying or do you believe that there is a violation involved? (1) We could completely overhaul DM-002 such that it simply states how the relationships between information model elements MUST be maintained in the data model. By removing the text around the DM potentially being a single or multiple modules, I think we would still enable DM designers to make that decision, however, it would now be implied. I guess the question here is whether or not that is good enough? Or, do we want a specific requirement around it? [JLS] It is not clear to me that we would continue to allow for a DM to be done in pieces or not if this was removed. We have stated explicitly that the IM cannot be done by sub-modules (something I personally believe to be wrong). By default I would expect that people would believe that DMs would need to keep this as well without explicit language. (2) Modify DM-002 to remove the part about "reflecting the structure of the IM" and keep it focused on the DM being able to be a single or multiple modules. Then, add a new DM requirement around maintaining the relationships between the information model elements in the data model elements. [JLS] This makes me a bit worried. What in the structure of the IM would you not want to reflect into the IM? For me the structure of the IM is the relationships between the different elements of the IM. I really do want the DM to reflect that. Do either of these seem to help? Do others, who have not weighed in yet, have thoughts on this thread? Thanks, Danny From: Jim Schaad [mailto:ietf@augustcellars.com] Sent: Tuesday, June 21, 2016 9:30 PM To: Haynes, Dan >; sacm@ietf.org Subject: RE: [sacm] Question about DM Requirements Just my $0.02 From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Tuesday, June 21, 2016 10:54 AM To: sacm@ietf.org Subject: [sacm] Question about DM Requirements I was reviewing the DM requirements based on the SWID M&A call for adoption thread and had some questions. In Section 2 of the Requirements, it says: "Multiple data models, protocols, and transports may be employed in a SACM environment." Then DM-001 says: "DM-001 Element Association: The data model MUST contain a data model element for each information model element (e.g. endpoint, IP address, asset). In other words, for every item in the information model, there must be an item in the data model. The data model can also include elements that do not exist in the information model." Does this requirement conflict with the text above in Section 2 by saying that every DM must contain an element for each IM element? That is, each DM must support the entire IM and it is not possible for a DM to just support a portion of the IM. [JLS] I see no conflict here. What the first statement says is that a SACM environment can have Data Model A and Data Model B from different companies as well as Data Model SACM which is the common one that we are defining. Each of those data models needs to be complete relative to the single SACM IM so that it does not matter which DM (of A, B or SACM) my application uses it will be able to get all of the elements in the IM as part of a query. Also, DM-002 says: "DM-002 Data Model Structure: The data model can be structured either as one single module or separated into modules and sub-modules that allow for references between them. The data model structure MAY reflect structure in the information model, but does not need to. For example, the data model might use one module to define endpoints, and that module might reference other modules that describe the various assets associated with the endpoint. Constraints and interfaces might further be defined to resolve or tolerate ambiguity in the references (e.g. same IP address used in two separate networks)." Is this effectively reiterating that a DM must support everything in the IM, but, that the DM can choose to break it up into submodules if they so choose? [JLS] Yes this was the intent that I understood from this. If you are looking at an XML schema as being the data model for Company X, it could publish a top level schema which then allows for sub schemas for different pieces (i.e. end-points, software, users) which are included in the top level schema. There is still are requirement that the entirety of the schema be complete, but it allows for the user schema to be updated to include additional elements that are Company X specific without having to update the entire schema at the same time. It would also allow for both of the sub-schemas for users to be supported at the same time if desired. Jim Thanks, Danny ------=_NextPart_000_0536_01D1CC9B.4360CE70 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

 

 

From: sacm = [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, = Dan
Sent: Wednesday, June 22, 2016 10:57 AM
To: Jim = Schaad <ietf@augustcellars.com>; sacm@ietf.org
Subject: = Re: [sacm] Question about DM Requirements

 

Thanks for the feedback Ira and Jim.  Based = on your $0.04 :), I see a couple of approaches that may help things. =

[JLS] I am not sure that there is any need to = change the requirements unless you believe that the IM/DM which are = being proposed as the SACM versions is going to violate the current set = of requirements.  Are you just having problems understanding what = they are saying or do you believe that there is a violation = involved?

 

(1)   We could completely overhaul DM-002 such that it = simply states how the relationships between information model elements = MUST be maintained in the data model. By removing the text around the DM = potentially being a single or multiple modules, I think we would still = enable DM designers to make that decision, however, it would now be = implied. I guess the question here is whether or not that is good = enough?  Or, do we want a specific requirement around = it?

[JLS] It is not clear to me that we would = continue to allow for a DM to be done in pieces or not if this was = removed.  We have stated explicitly that the IM cannot be done by = sub-modules (something I personally believe to be wrong).  By = default I would expect that people would believe that DMs would need to = keep this as well without explicit language.

 

(2)   Modify DM-002 to remove the part about = “reflecting the structure of the IM” and keep it focused on = the DM being able to be a single or multiple modules. Then, add a new DM = requirement around maintaining the relationships between the information = model elements in the data model elements.

 

[JLS] This makes me a bit worried.  What = in the structure of the IM would you not want to reflect into the = IM?  For me the structure of the IM is the relationships between = the different elements of the IM.  I really do want the DM to = reflect that.

 

Do either of these seem = to help? 

 

Do others, who have not = weighed in yet, have thoughts on this thread?

 

Thanks,

Danny

 

 

From: Jim = Schaad [mailto:ietf@augustcellars.com]=
Sent: Tuesday, June 21, 2016 9:30 PM
To: Haynes, = Dan <dhaynes@mitre.org>; = sacm@ietf.org
Subject: = RE: [sacm] Question about DM Requirements

 

Just my = $0.02

 

From: sacm = [mailto:sacm-bounces@ietf.org] = On Behalf Of Haynes, Dan
Sent: Tuesday, June 21, 2016 = 10:54 AM
To: sacm@ietf.org
Subject: = [sacm] Question about DM Requirements

 

I was reviewing the DM requirements based on the = SWID M&A call for adoption thread and had some = questions.

 

In Section 2 of the Requirements, it =
says:
            =
        “Multiple data models, =
protocols, and transports may be employed in a SACM =
environment…”
 
Then DM-001 says:
 
“DM-001  Element Association: The data model MUST contain a =
data model element for each information model element (e.g. endpoint, IP =
address, asset).  In other words, for every item in the information =
model, there must be an item in the data model.  The data model can =
also include elements that do not exist in the information =
model.”
 
Does this requirement conflict with the text above in Section 2 by =
saying that every DM must contain an element for each IM element? =
 That is, each DM must support the entire IM and it is not possible =
for a DM to just support a portion of the =
IM.
 
[JL=
S] I see no conflict here.  What the first statement says is that a =
SACM environment can have Data Model A and Data Model B from different =
companies as well as Data Model SACM which is the common one that we are =
defining.  Each of those data models needs to be complete relative =
to the single SACM IM so that it does not matter which DM (of A, B or =
SACM) my application uses it will be able to get all of the elements in =
the IM as part of a query.
 
Also, DM-002 says:
“DM-002  Data Model Structure: The data model can be =
structured either as one single module or separated into modules and =
sub-modules that allow for references between them.  The data model =
structure MAY reflect structure in the information model, but does not =
need to. For example, the data model might use one module to define =
endpoints, and that module might reference other modules that describe =
the various assets associated with the endpoint. Constraints and =
interfaces might further be defined to resolve or tolerate ambiguity in =
the references (e.g. same IP address used in two separate =
networks).”
 
Is this effectively reiterating that a DM must support everything in =
the IM, but, that the DM can choose to break it up into submodules if =
they so choose?
 
[JL=
S] Yes this was the intent that I understood from this.  If you are =
looking at an XML schema as being the data model for Company X, it could =
publish a top level schema which then allows for sub schemas for =
different pieces (i.e. end-points, software, users) which are included =
in the top level schema.  There is still are requirement that the =
entirety of the schema be complete, but it allows for the user schema to =
be updated to include additional elements that are Company X specific =
without having to update the entire schema at the same time.  It =
would also allow for both of the sub-schemas for users to be supported =
at the same time if desired.
 
Jim=

 
 
Thanks,

Danny
 
------=_NextPart_000_0536_01D1CC9B.4360CE70-- From nobody Wed Jun 22 16:48:42 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id CAB3C12D7AC for ; Wed, 22 Jun 2016 16:48:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.615 X-Spam-Level: X-Spam-Status: No, score=-5.615 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426, T_KAM_HTML_FONT_INVALID=0.01] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B_F_zg1wthGs for ; Wed, 22 Jun 2016 16:48:37 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id F0A6112D59D for ; Wed, 22 Jun 2016 16:48:36 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 56EDAABC294; Wed, 22 Jun 2016 19:48:36 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 422FAABC291; Wed, 22 Jun 2016 19:48:36 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Wed, 22 Jun 2016 19:48:35 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Wed, 22 Jun 2016 19:48:35 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=6UEZbr+AfTPHm8CFwt4ibFY8WQ1yv0aGLUSVOxZZPKE=; b=GkRAF4bSyC4Er5uc7xWrz51XW893WvgXrxL3cozzOl13a2lWVwJHBVLl8Srs5GcrK1O49GmtKkPeFMWkWLi53trJMJqXzcFMi2LQUWTQCfEcbX8hd4phMBoDXtCeTfbY7Oic9fHy0cBP5TIELM9//hTT0BZfpHX7PFjfAn3dYKc= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1080.namprd09.prod.outlook.com (10.166.116.12) with Microsoft SMTP Server (TLS) id 15.1.523.12; Wed, 22 Jun 2016 23:48:33 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.015; Wed, 22 Jun 2016 23:48:33 +0000 From: "Haynes, Dan" To: Jim Schaad , "sacm@ietf.org" Thread-Topic: [sacm] Question about DM Requirements Thread-Index: AdHL4+wgxazq+QzLQVe22pvEQ/aWnwAQZ0sAABwEjjAAEBTdAAACAI3w Date: Wed, 22 Jun 2016 23:48:33 +0000 Message-ID: References: <041401d1cc25$8a3217d0$9e964770$@augustcellars.com> <053501d1ccd5$efbb60b0$cf322210$@augustcellars.com> In-Reply-To: <053501d1ccd5$efbb60b0$cf322210$@augustcellars.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.86] x-ms-office365-filtering-correlation-id: 23377582-614c-45b5-7b44-08d39af7b8b2 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1080; 6:oal1Lrw1/pvjjDxO4giZu9yo6VNu/YXKhKm57f0psK6q/wxFJfQijanr83tSJzt08k3jjdUDCpohmz4DhCpYq5c5wvtyEeyf8XHcDeFF+kLzGjqrFdGphUCfaQEH4EjeQgDEXyu4IyzpyO6vxLzjYY6cvlydRoNJB9SInI31QaLvX0C6CMj1IiOsJ+0hUxigmMtPQ3EFxlQOYlihA+5dP2zo9DpN/73tV1cxM/n5S/hOJhzAfsRlAHod/XpAgPSF6qWV9AMDNYE7Hn+KRRaEuQkKhkrF/jHJSftfYH6nk3kUyebpoJTo+0ZbJHKVdUSPX87sTraupWMjuG171KQ/JvJEeExeWa3cyD7SFymwzFc=; 5:06Ow8Y8qi5v6JQK9KzynLHBofDMSqCr0mpksxC8J5D2pS2HLoBr7KN/NtbSxDmiyBN2RISC79Vv7cxpmnViYNtY+4Y3ML/QC7+FDyQmhGAW3uJSZZJObyukfgQJL6763uIteyCmYuT6E1FlUn6Dykw==; 24:TQc7MBCnBEvK8TR0YQpqPrU85vDHxNf3WbawyGABH0tgUWUHkn+4n78TnFZiDTPm14MmNYSMk2CCcXHuGjhyIihcBMCDiTc/w7wvlyiN0EU=; 7:pyvo1CoN8zfYSEee5KULmnP9ZqFbzFQ0HbSULBm8HnJm0DRNbSTbgUDRiLd9X64D3o4VMd3wHtb/zrDV0Pk9A8N6/nsTEkWgrWqqEWPATlWKe/Ftsswk/2bK00ovWNg5kHWRrfBcMGDaC48YP4jG0K0eDvLLW6dDt2oyKbaT9E6FxdwoGnnHTG5+yxIx4QeHhlJ2YPLGab8wKjY9KtWpjOrK5xW6B/7nc4uUcGvAcOx6T0FV6ctNFLnXzY4Ans3H8VnsFa9PSB/6iFzCSbDYbA== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1080; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(131327999870524)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1080; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1080; x-forefront-prvs: 0981815F2F x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(377454003)(51914003)(189002)(199003)(31430400001)(92566002)(6116002)(76576001)(107886002)(19625215002)(3280700002)(189998001)(19580405001)(68736007)(105586002)(77096005)(7846002)(33656002)(106356001)(586003)(93886004)(97736004)(7736002)(2906002)(76176999)(790700001)(19580395003)(3846002)(7696003)(11100500001)(5003600100003)(54356999)(9326002)(102836003)(8936002)(101416001)(50986999)(122556002)(2900100001)(3660700001)(86362001)(74316001)(99286002)(9686002)(10400500002)(5001770100001)(81156014)(8676002)(81166006)(87936001)(2501003)(16236675004)(15975445007)(2950100001)(19300405004)(5002640100001)(66066001); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1080; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB107880B35F3DE81523C164BBA52C0BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jun 2016 23:48:33.2583 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1080 X-OriginatorOrg: mitre.org Archived-At: Subject: Re: [sacm] Question about DM Requirements X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Jun 2016 23:48:41 -0000 --_000_BY2PR09MB107880B35F3DE81523C164BBA52C0BY2PR09MB1078namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Jim, More comments inline. Thanks, Danny From: Jim Schaad [mailto:ietf@augustcellars.com] Sent: Wednesday, June 22, 2016 6:32 PM To: Haynes, Dan ; sacm@ietf.org Subject: RE: [sacm] Question about DM Requirements From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Wednesday, June 22, 2016 10:57 AM To: Jim Schaad >; sac= m@ietf.org Subject: Re: [sacm] Question about DM Requirements Thanks for the feedback Ira and Jim. Based on your $0.04 :), I see a coupl= e of approaches that may help things. [JLS] I am not sure that there is any need to change the requirements unles= s you believe that the IM/DM which are being proposed as the SACM versions = is going to violate the current set of requirements. Are you just having p= roblems understanding what they are saying or do you believe that there is = a violation involved? [danny] I think it is probably more related to my confusion. My original co= nfusion was around the way I interpreted the requirements and whether or no= t we could leverage multiple DMs (e.g. SWID for software, OVAL for configur= ation, something else for hardware, etc.) to satisfy the SACM IM. Also, whe= ther or not that text in Section 2 conflicted with DM-001. (1) We could completely overhaul DM-002 such that it simply states how t= he relationships between information model elements MUST be maintained in t= he data model. By removing the text around the DM potentially being a singl= e or multiple modules, I think we would still enable DM designers to make t= hat decision, however, it would now be implied. I guess the question here i= s whether or not that is good enough? Or, do we want a specific requiremen= t around it? [JLS] It is not clear to me that we would continue to allow for a DM to be = done in pieces or not if this was removed. We have stated explicitly that = the IM cannot be done by sub-modules (something I personally believe to be = wrong). By default I would expect that people would believe that DMs would= need to keep this as well without explicit language. [danny] Agreed, which is why I was unsure if we needed the explicit require= ment or not. In the requirements, it also says: "IM-006 Singularity and Mo= dularity: The SACM information model MUST be singular (i.e. there is only o= ne information model, not multiple alternative information models from whic= h to choose) and MAY be modular (a conjunction of several sub-components) f= or ease of maintenance and extension. For example, endpoint identification= could be an independent sub-component of the information model, to simplif= y updating of endpoint identification attributes." Doesn't this say the IM can be made up of sub-modules :). (2) Modify DM-002 to remove the part about "reflecting the structure of = the IM" and keep it focused on the DM being able to be a single or multiple= modules. Then, add a new DM requirement around maintaining the relationshi= ps between the information model elements in the data model elements. [JLS] This makes me a bit worried. What in the structure of the IM would y= ou not want to reflect into the IM? For me the structure of the IM is the = relationships between the different elements of the IM. I really do want t= he DM to reflect that. [danny] Given the text of the current requirement "The data model can be st= ructured either as one single module or separated into modules and sub-modu= les...", I did not interpret "structure" to mean the relationships between = the information model elements which is also adding to my confusion :). I = simply interpreted it as how the DM is implemented with respect to whether = it is a single module or multiple separate modules. With that said, I also= agree that we want every DM to maintain the relationships between IM eleme= nts. Do either of these seem to help? Do others, who have not weighed in yet, have thoughts on this thread? Thanks, Danny From: Jim Schaad [mailto:ietf@augustcellars.com] Sent: Tuesday, June 21, 2016 9:30 PM To: Haynes, Dan >; sacm@ietf.or= g Subject: RE: [sacm] Question about DM Requirements Just my $0.02 From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan Sent: Tuesday, June 21, 2016 10:54 AM To: sacm@ietf.org Subject: [sacm] Question about DM Requirements I was reviewing the DM requirements based on the SWID M&A call for adoption= thread and had some questions. In Section 2 of the Requirements, it says: "Multiple data models, protocols, and transports may be= employed in a SACM environment..." Then DM-001 says: "DM-001 Element Association: The data model MUST contain a data model elem= ent for each information model element (e.g. endpoint, IP address, asset). = In other words, for every item in the information model, there must be an = item in the data model. The data model can also include elements that do n= ot exist in the information model." Does this requirement conflict with the text above in Section 2 by saying t= hat every DM must contain an element for each IM element? That is, each DM= must support the entire IM and it is not possible for a DM to just support= a portion of the IM. [JLS] I see no conflict here. What the first statement says is that a SACM= environment can have Data Model A and Data Model B from different companie= s as well as Data Model SACM which is the common one that we are defining. = Each of those data models needs to be complete relative to the single SACM= IM so that it does not matter which DM (of A, B or SACM) my application us= es it will be able to get all of the elements in the IM as part of a query. Also, DM-002 says: "DM-002 Data Model Structure: The data model can be structured either as o= ne single module or separated into modules and sub-modules that allow for r= eferences between them. The data model structure MAY reflect structure in = the information model, but does not need to. For example, the data model mi= ght use one module to define endpoints, and that module might reference oth= er modules that describe the various assets associated with the endpoint. C= onstraints and interfaces might further be defined to resolve or tolerate a= mbiguity in the references (e.g. same IP address used in two separate netwo= rks)." Is this effectively reiterating that a DM must support everything in the IM= , but, that the DM can choose to break it up into submodules if they so cho= ose? [JLS] Yes this was the intent that I understood from this. If you are look= ing at an XML schema as being the data model for Company X, it could publis= h a top level schema which then allows for sub schemas for different pieces= (i.e. end-points, software, users) which are included in the top level sch= ema. There is still are requirement that the entirety of the schema be com= plete, but it allows for the user schema to be updated to include additiona= l elements that are Company X specific without having to update the entire = schema at the same time. It would also allow for both of the sub-schemas f= or users to be supported at the same time if desired. Jim Thanks, Danny --_000_BY2PR09MB107880B35F3DE81523C164BBA52C0BY2PR09MB1078namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Jim,

 

More comments inline.<= o:p>

 

Thanks,

Danny

 

From: Jim Schaad [mailto:ietf@augustcellars.c= om]
Sent: Wednesday, June 22, 2016 6:32 PM
To: Haynes, Dan <dhaynes@mitre.org>; sacm@ietf.org
Subject: RE: [sacm] Question about DM Requirements

 

 

 

From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan
Sent: Wednesday, June 22, 2016 10:57 AM
To: Jim Schaad <ietf@au= gustcellars.com>; sacm@ietf.org
Subject: Re: [sacm] Question about DM Requirements

 

Thanks for the feedbac= k Ira and Jim.  Based on your $0.04 :), I see a couple of approaches t= hat may help things.

[JLS] I am not sure th= at there is any need to change the requirements unless you believe that the= IM/DM which are being proposed as the SACM versions is going to violate th= e current set of requirements.  Are you just having problems understanding what they are saying or do you beli= eve that there is a violation involved?

 

[danny] I think = it is probably more related to my confusion. My original confusion was arou= nd the way I interpreted the requirements and whether or not we could lever= age multiple DMs (e.g. SWID for software, OVAL for configuration, something else for hardware, etc.) to satisfy the = SACM IM. Also, whether or not that text in Section 2 conflicted with DM-001= . 

 

(1)&= nbsp;   We could compl= etely overhaul DM-002 such that it simply states how the relationships betw= een information model elements MUST be maintained in the data model. By rem= oving the text around the DM potentially being a single or multiple modules, I think we would still enable DM desig= ners to make that decision, however, it would now be implied. I guess the q= uestion here is whether or not that is good enough?  Or, do we want a = specific requirement around it?

[JLS] It is not clear = to me that we would continue to allow for a DM to be done in pieces or not = if this was removed.  We have stated explicitly that the IM cannot be = done by sub-modules (something I personally believe to be wrong).  By default I would expect that people would be= lieve that DMs would need to keep this as well without explicit language.

&nbs= p;

[danny] Agreed, =
which is why I was unsure if we needed the explicit requirement or not.&nbs=
p; In the requirements, it also says: “IM-006 Singularity and Modula=
rity: The SACM information model MUST be singular (i.e. there is only one i=
nformation model, not multiple alternative information models from which to=
 choose) and MAY be modular (a conjunction of several sub-components) for e=
ase of maintenance and extension.  For example, endpoint identificatio=
n could be an independent sub-component of the information model, to simpli=
fy updating of endpoint identification attributes.=
”
 
Doesn’t th=
is say the IM can be made up of sub-modules :).<=
/o:p>

 

(2)&= nbsp;   Modify DM-002 = to remove the part about “reflecting the structure of the IM” a= nd keep it focused on the DM being able to be a single or multiple modules.= Then, add a new DM requirement around maintaining the relationships between the information model elements in the data model= elements.

 

[JLS] This makes me a = bit worried.  What in the structure of the IM would you not want to re= flect into the IM?  For me the structure of the IM is the relationship= s between the different elements of the IM.  I really do want the DM to reflect that.

 

[danny] Given th= e text of the current requirement “The data model can be structured either as one single module or separate= d into modules and sub-modules...”, I did not interpret “structure” to mean the relationships betw= een the information model elements which is also adding to my confusion :).=   I simply interpreted it as how the DM is implemented with respect to= whether it is a single module or multiple separate modules.  With that said, I also agree that we want every DM to maint= ain the relationships between IM elements.

 

Do either of these see= m to help? 

 

Do others, who have no= t weighed in yet, have thoughts on this thread?

 

Thanks,

Danny

 

 

From: Jim Schaad [mailto:ietf@augustcellars.com]
Sent: Tuesday, June 21, 2016 9:30 PM
To: Haynes, Dan <dhaynes@mit= re.org>; sacm@ietf.org
Subject: RE: [sacm] Question about DM Requirements

 

Just my $0.02

 

From: sacm [mailto:sacm-bounces@ietf.org] On Behalf Of Haynes, Dan
Sent: Tuesday, June 21, 2016 10:54 AM
To: sacm@ietf.org
Subject: [sacm] Question about DM Requirements

 

I was reviewing the DM= requirements based on the SWID M&A call for adoption thread and had so= me questions.

 

In Section 2 of the Requ=
irements, it says:
         &=
nbsp;          “Multiple=
 data models, protocols, and transports may be employed in a SACM environme=
nt…”
 
Then DM-001 says:
 
“DM-001  Elemen=
t Association: The data model MUST contain a data model element for each in=
formation model element (e.g. endpoint, IP address, asset).  In other =
words, for every item in the information model, there must be an item in th=
e data model.  The data model can also include elements that do not ex=
ist in the information model.”
 
Does this requirement conflict with the text above in S=
ection 2 by saying that every DM must contain an element for each IM elemen=
t?  That is, each DM must support the entire IM and it is not possible=
 for a DM to just support a portion of the IM.
 
[JLS] I see no conflict here.  What the first statemen=
t says is that a SACM environment can have Data Model A and Data Model B fr=
om different companies as well as Data Model SACM which is the common one t=
hat we are defining.  Each of those data models needs to be complete r=
elative to the single SACM IM so that it does not matter which DM (of A, B =
or SACM) my application uses it will be able to get all of the elements in =
the IM as part of a query.
 
Also, DM-002 says:<=
/o:p>
“DM-002  Data Mod=
el Structure: The data model can be structured either as one single module =
or separated into modules and sub-modules that allow for references between=
 them.  The data model structure MAY reflect structure in the informat=
ion model, but does not need to. For example, the data model might use one =
module to define endpoints, and that module might reference other modules t=
hat describe the various assets associated with the endpoint. Constraints a=
nd interfaces might further be defined to resolve or tolerate ambiguity in =
the references (e.g. same IP address used in two separate networks).”=

 
Is this effectively reiterating that a DM must support =
everything in the IM, but, that the DM can choose to break it up into submo=
dules if they so choose?
 
[JLS] Yes this was the intent that I understood from this.&=
nbsp; If you are looking at an XML schema as being the data model for Compa=
ny X, it could publish a top level schema which then allows for sub schemas=
 for different pieces (i.e. end-points, software, users) which are included=
 in the top level schema.  There is still are requirement that the ent=
irety of the schema be complete, but it allows for the user schema to be up=
dated to include additional elements that are Company X specific without ha=
ving to update the entire schema at the same time.  It would also allo=
w for both of the sub-schemas for users to be supported at the same time if=
 desired.
 
Jim
 
 
Thanks,

Danny
 
--_000_BY2PR09MB107880B35F3DE81523C164BBA52C0BY2PR09MB1078namp_-- From nobody Fri Jun 24 04:19:58 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 28EAA126579 for ; Fri, 24 Jun 2016 04:19:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i6bnXPrYBCIC for ; Fri, 24 Jun 2016 04:19:52 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 50D6912D5A8 for ; Fri, 24 Jun 2016 04:19:52 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id E90396C019B; Fri, 24 Jun 2016 07:19:51 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id D06666C00D0; Fri, 24 Jun 2016 07:19:51 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Fri, 24 Jun 2016 07:19:51 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Fri, 24 Jun 2016 07:19:51 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=1fqcORmipj035oCNFjEQRTW4MOqrkE6dEFbYJYKbQzM=; b=VnPKNcdyJZveMyJHi0YLCqMmbLdTxklAhLFXu+90j93CKB8U9SgEuky0IIYV8rMBvZTjadHdD3tU0/J71A2guz6BPL8QUzwrVn5NJXyQGI314b49Y+qQ4GIE5TOipe9scNAB4S7eMdgU5GyAQjQ7Ztr677FRC07SeXvMA685Bv0= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1079.namprd09.prod.outlook.com (10.166.116.11) with Microsoft SMTP Server (TLS) id 15.1.523.12; Fri, 24 Jun 2016 11:19:49 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.019; Fri, 24 Jun 2016 11:19:49 +0000 From: "Haynes, Dan" To: Adam Montville , Ira McDonald Thread-Topic: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability Thread-Index: AdGwcFvLuy7EoIEtTYaAcqw7unANPgNvMHSAAHxc8hAAFObXAAHecrngAD5pOoAAIGDrgAAILXcAASCK9UA= Date: Fri, 24 Jun 2016 11:19:49 +0000 Message-ID: References: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.87] x-ms-office365-filtering-correlation-id: bef4be09-71a2-4222-5474-08d39c2174e4 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1079; 6:Q2BMgGnWlTl7g7xW7hOQaGWpi0t6cVL00o7pnUQao25Ddk2LlVtSJTlA0kJG8/l1pg+M01Ydr2asig/ywgrrm9BHUcmHwSRuChGl6GVM0VV/MyjaY9rJORW30CM8smCy81CkolkwXkD5qT7dNYLtAQTdhStNfpT9acnuPZQmQ4f8+u5+RSoV52z0ypP5qhwsZ+AVPY3lDKf1MwTuJRHOccjp5QCJH7SOztwl/jIeohp5CnRZ2CC2+MEO0/ovITdlkecBemWM4ZMtHpOyyROm+TPDqYyEW/POdVTV6tKpnNGE0wxBTtt/fMbSvZ0dkmO+/bfVcoQRLTHPDvonV5Duv/REMPsXOl6UtrIJ1EP9ZGU=; 5:E9YLLF4PN35u3gUJGfOmH7H8Ga/YkkfUDZuCyGcarBTJjKZwqZeuX+QtMVDidpkpl1S5WlWWCMNBMrcgUIQoNW5/f6wfl2euXfAQ5Kl6yZV0sVp8QxXIaW3/qHpUOonh3R1Rd8OSIAJLgS2j2tjxPw==; 24:OKU8x5c1VzE+cV4Elx20aYbIqSFc+jdPs72Uma7TT/Y6Xyys5tuXv4f7CbLuIn1ia9TBPKXc33fchsO+mudB0M8yUdBYTkFBqa7z6M0+VGw=; 7:s7//bhSWfD7XmNT0ZIjlUqAaPNN5g2zZOspMFA4bZO3kzhr8v7xvLjZORI27FxfYLQDaCwbj4wWARwbs09EgGvpNF77nyT2Uc0CxAe0qAKWOz6FnVCLYiwUXea5R8pqPGqL7Axc7pJ6hr85yS0a+MAuaKLETN9na6jqk58wfeLJtP+/IgWU+fmiT1DcVKxOviDLtUMvmTfd8oQK7WeY7EtlQZqZaDW8JGF2J62iOoPVjA3X9ecm6HvkCCSB9rlA/0vCefVd4szm0+6OAKItX3A== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1079; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(120809045254105)(166708455590820)(111039206520245)(211936372134217)(100405760836317)(21748063052155)(211171220733660); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(10201501046)(3002001)(6055026); SRVR:BY2PR09MB1079; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1079; x-forefront-prvs: 0983EAD6B2 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(377454003)(5383002)(57704003)(478694002)(189002)(377424004)(24454002)(13464003)(199003)(76104003)(2906002)(5002640100001)(66066001)(11100500001)(19617315012)(76576001)(77096005)(99286002)(50986999)(54356999)(76176999)(19625215002)(15975445007)(101416001)(9686002)(33656002)(19300405004)(19273905006)(16236675004)(10400500002)(8936002)(87936001)(86362001)(122556002)(105586002)(106356001)(8676002)(97736004)(7696003)(81156014)(3660700001)(81166006)(6116002)(7906003)(92566002)(790700001)(3846002)(102836003)(4326007)(74316001)(19580395003)(68736007)(19580405001)(586003)(3280700002)(5001770100001)(7736002)(5003600100003)(19609705001)(7846002)(189998001)(93886004)(2950100001)(2900100001)(16351025005)(563064011); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1079; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB107887CC0CC80F1687967863A52E0BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jun 2016 11:19:49.3552 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1079 X-OriginatorOrg: mitre.org Archived-At: Cc: Jerome Athias , "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jun 2016 11:19:56 -0000 --_000_BY2PR09MB107887CC0CC80F1687967863A52E0BY2PR09MB1078namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 SSBqdXN0IHJldmlld2VkIHRoZSBsYXRlc3QgdmVyc2lvbiBvZiB0aGUgSS1EIGFuZCBmb3VuZCBv bmx5IG9uZSBvY2N1cnJlbmNlIG9mIOKAnHByZS1hc3Nlc3NtZW504oCdIGluIEFwcGVuZGl4IEku MyB3aGljaCBzYXlzOg0KDQrigJxXaXRoaW4gdGhlIFNBQ00gQXJjaGl0ZWN0dXJlLCB0aGUgYXNz ZXNzbWVudCB0YXNrIHdvdWxkIGJlIGhhbmRsZWQgYnkgdGhlIEV2YWx1YXRvciBjb21wb25lbnQu ICBJZiBwcmUtYXNzZXNzbWVudCBkYXRhIGlzIHVzZWQsIHRoaXMgd291bGQgYmUgc3RvcmVkIG9u IGFuZCBvYnRhaW5lZCBmcm9tIGEgRGF0YSBTdG9yZSBjb21wb25lbnQu4oCdDQoNCkkgdGhpbmsg dGhpcyBjb3VsZCBlYXNpbHkgYmUgcmUtd3JpdHRlbiB0byByZW1vdmUg4oCccHJlLWFzc2Vzc21l bnTigJ0gYW5kIHNheToNCg0K4oCcV2l0aGluIHRoZSBTQUNNIEFyY2hpdGVjdHVyZSwgdGhlIGFz c2Vzc21lbnQgdGFzayB3b3VsZCBiZSBoYW5kbGVkIGJ5IHRoZSBFdmFsdWF0b3IgY29tcG9uZW50 LiBJZiBwcmV2aW91c2x5IGNvbGxlY3RlZCBkYXRhIGlzIHVzZWQsIGl0IHdvdWxkIGJlIG9idGFp bmVkIGZyb20gYSBEYXRhIFN0b3JlIGNvbXBvbmVudC7igJ0NCg0KSSB0aGluayB3ZSBjb3VsZCBh bHNvIHJld3JpdGUgdGhlIGxhdGVzdCByZXZpc2lvbiBvZiB0aGUgdGV4dCAoZnJvbSBteSBKdW4g MTZ0aCBtZXNzYWdlKSB0byByZWFkIGFzIGZvbGxvd3MgKHdoaWNoIGFsc28gbWFrZXMgdXNlIG9m IFNBQ00gdGFza3Mgd2hpY2ggd2FzIHN1Z2dlc3RlZCBhdCB0aGUgbGFzdCB2aXJ0dWFsIGludGVy aW0gbWVldGluZykuDQoNCiJUaGUgY29sbGVjdGlvbiBvZiBhZGRpdGlvbmFsIGVuZHBvaW50IGlu Zm9ybWF0aW9uIGZvciB0aGUgcHVycG9zZSBvZiB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQgZG9l cyBub3QgbmVjZXNzYXJpbHkgbmVlZCB0byBiZSBhIHB1bGwgYnkgdGhlIHZ1bG5lcmFiaWxpdHkg YXNzZXNzbWVudCBjYXBhYmlsaXR5LiAgT3ZlciB0aW1lLCBzb21lIG5ldyBwaWVjZXMgb2YgaW5m b3JtYXRpb24gdGhhdCBhcmUgbmVlZGVkIGR1cmluZyBjb21tb24gdHlwZXMgb2YgYXNzZXNzbWVu dHMgbWlnaHQgYmUgaWRlbnRpZmllZC4gQW4gZW5kcG9pbnQgbWFuYWdlbWVudCBjYXBhYmlsaXR5 IGNhbiBiZSByZWNvbmZpZ3VyZWQgdG8gaGF2ZSB0aGlzIGluZm9ybWF0aW9uIGRlbGl2ZXJlZCBh dXRvbWF0aWNhbGx5LiBUaGlzIGF2b2lkcyB0aGUgbmVlZCB0byB0cmlnZ2VyIGFkZGl0aW9uYWwg Q29sbGVjdGlvbiBUYXNrcyB0byBnYXRoZXIgdGhpcyBpbmZvcm1hdGlvbiBkdXJpbmcgYXNzZXNz bWVudHMsIHN0cmVhbWxpbmluZyB0aGUgYXNzZXNzbWVudCBwcm9jZXNzLiBMaWtld2lzZSwgaXQg bWlnaHQgYmUgb2JzZXJ2ZWQgdGhhdCBjZXJ0YWluIGluZm9ybWF0aW9uIGRlbGl2ZXJlZCBieSBh biBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxpdHkgaXMgcmFyZWx5IHVzZWQuIEluIHRoaXMg Y2FzZSwgaXQgbWlnaHQgYmUgdXNlZnVsIHRvIHJlLWNvbmZpZ3VyZSB0aGUgZW5kcG9pbnQgbWFu YWdlbWVudCBjYXBhYmlsaXR5IHRvIG5vIGxvbmdlciBjb2xsZWN0IHRoaXMgaW5mb3JtYXRpb24g dG8gcmVkdWNlIG5ldHdvcmsgYW5kIHByb2Nlc3Npbmcgb3ZlcmhlYWQuIEluc3RlYWQsIGEgbmV3 IENvbGxlY3Rpb24gVGFzayBjYW4gYmUgdHJpZ2dlcmVkIHRvIGdhdGhlciB0aGlzIGRhdGEgb24g dGhlIHJhcmUgb2NjYXNpb25zIHdoZW4gaXQgaXMgbmVlZGVkLiINCkxldCBtZSBrbm93IHdoYXQg eW91IHRoaW5rIG9mIHRoZXNlIGNoYW5nZXMuICBJZiB0aGV5IHNlZW0gcmVhc29uYWJsZSwgSSBj YW4gaW50ZWdyYXRlIHRoZW0gaW50byB0aGUgbmV4dCByZXZpc2lvbiBvZiB0aGUgSS1EIGFuZCB3 ZSBjYW4gY2xvc2Ugb3V0IHRoaXMgaXNzdWUuDQoNClRoYW5rcywNCg0KRGFubnkNCg0KRnJvbTog QWRhbSBNb250dmlsbGUgW21haWx0bzphZGFtLncubW9udHZpbGxlQGdtYWlsLmNvbV0NClNlbnQ6 IFNhdHVyZGF5LCBKdW5lIDE4LCAyMDE2IDE6MzYgUE0NClRvOiBJcmEgTWNEb25hbGQgPGJsdWVy b29mbXVzaWNAZ21haWwuY29tPg0KQ2M6IEhheW5lcywgRGFuIDxkaGF5bmVzQG1pdHJlLm9yZz47 IEplcm9tZSBBdGhpYXMgPGF0aGlhc2plcm9tZUBnbWFpbC5jb20+OyBzYWNtQGlldGYub3JnDQpT dWJqZWN0OiBSZTogW3NhY21dIEZPUiBSRVZJRVc6IFZ1bG5lcmFiaWxpdHkgQXNzZXNzbWVudCBT Y2VuYXJpbyBJc3N1ZSAjNSAtIENoYW5nZSBEZXRlY3Rpb24gd2l0aCBhbiBFbmRwb2ludCBNYW5h Z2VtZW50IENhcGFiaWxpdHkNCg0KTXkgY29uY2VybiBkb2VzIG5vdCBzdGVtIGZyb20gdXNpbmcg dGhlIHByZWZpeCDigJxwcmXigJ0sIGFzIG11Y2ggYXMgaXQgaXMgYWJvdXQgdGhlIGRlZmluaXRp b24gb2YgdGhlIHRlcm0gYXNzZXNzbWVudCBhbmQgaG93IHdl4oCZcmUgdXNpbmcgcHJlLWFzc2Vz c21lbnQgb2Z0ZW4sIHdoaWNoIHR1cm5zIGludG8g4oCcY29sbGVjdGluZyBiZWZvcmUgdGhlIHBy b2Nlc3Mgb2YgY29sbGVjdGluZ+KAnSwgd2hpY2ggaXMgY29uZnVzaW5nIGF0IGJlc3QuDQoNClRo ZSBzaXR1YXRpb24gd2UgYXJlIGxvb2tpbmcgYXQgZmVlbHMgdmVyeSBtdWNoIGxpa2UgYSBjYWNo ZSBtaXNzLiAgV2UgbG9vayBmb3Igc29tZSBpbmZvcm1hdGlvbiBpbiBvbmUgcGxhY2UgYW5kIGRv buKAmXQgZmluZCBpdCwgc28gd2UgaGF2ZSB0byBnbyBmZXRjaCBpdCBmcm9tIHNvbWV3aGVyZSBl bHNlLg0KDQoNCg0KT24gSnVuIDE4LCAyMDE2LCBhdCA4OjQxIEFNLCBJcmEgTWNEb25hbGQgPGJs dWVyb29mbXVzaWNAZ21haWwuY29tPG1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbT4+IHdy b3RlOg0KDQpIaSwNCg0KSSBzaGFyZSBBZGFtJ3MgZGlzdGFzdGUgZm9yICJwcmUtIiBhbnl0aGlu Zy4NCg0KUGVyaGFwcyAiZXh0ZXJuYWwgY29sbGVjdGlvbiIgLSBkZWZpbmVkIGFzIHNpbXBseSB1 c2luZyBhbnkgbm9uLVNBQ00NCnByb3RvY29sIHRvIGZvcndhcmQgZW5kcG9pbnQgcG9zdHVyZSB0 byBhIFNBQ00gQ29sbGVjdG9yIChpbiB0aGlzIGNhc2UsDQplLmcuLCBhIE5FQSBTZXJ2ZXIpPw0K DQpDaGVlcnMsDQotIElyYQ0KDQoNCklyYSBNY0RvbmFsZCAoTXVzaWNpYW4gLyBTb2Z0d2FyZSBB cmNoaXRlY3QpDQpDby1DaGFpciAtIFRDRyBUcnVzdGVkIE1vYmlsaXR5IFNvbHV0aW9ucyBXRw0K Q2hhaXIgLSBMaW51eCBGb3VuZGF0aW9uIE9wZW4gUHJpbnRpbmcgV0cNClNlY3JldGFyeSAtIElF RUUtSVNUTyBQcmludGVyIFdvcmtpbmcgR3JvdXANCkNvLUNoYWlyIC0gSUVFRS1JU1RPIFBXRyBJ bnRlcm5ldCBQcmludGluZyBQcm90b2NvbCBXRw0KSUVURiBEZXNpZ25hdGVkIEV4cGVydCAtIElQ UCAmIFByaW50ZXIgTUlCDQpCbHVlIFJvb2YgTXVzaWMgLyBIaWdoIE5vcnRoIEluYw0KaHR0cDov L3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9ibHVlcm9vZm11c2ljDQpodHRwOi8vc2l0ZXMuZ29vZ2xl LmNvbS9zaXRlL2hpZ2hub3J0aGluYw0KbWFpbHRvOiBibHVlcm9vZm11c2ljQGdtYWlsLmNvbTxt YWlsdG86Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20+DQpXaW50ZXIgIDU3OSBQYXJrIFBsYWNlICBT YWxpbmUsIE1JICA0ODE3NiAgNzM0LTk0NC0wMDk0DQpTdW1tZXIgIFBPIEJveCAyMjEgIEdyYW5k IE1hcmFpcywgTUkgNDk4MzkgIDkwNi00OTQtMjQzNA0KDQoNCk9uIEZyaSwgSnVuIDE3LCAyMDE2 IGF0IDY6MTQgUE0sIEFkYW0gTW9udHZpbGxlIDxhZGFtLncubW9udHZpbGxlQGdtYWlsLmNvbTxt YWlsdG86YWRhbS53Lm1vbnR2aWxsZUBnbWFpbC5jb20+Pg0Kd3JvdGU6DQoNCg0KSSByZWFsbHkg ZG9u4oCZdCB3YW50IHRvIGJlIHRoZSBvbmUgdG8gYnJpbmcgdGhpcyB1cCwgYnV0IGFyZSB3ZSBm b3JnZXR0aW5nDQpvdXIgZGVmaW5pdGlvbiBvZiDigJxhc3Nlc3NtZW504oCdPyAgV2UgYm9ycm93 LCBhbmQgZXhwYW5kIHVwb24sIHRoZSB0ZXJtIGZyb20NClJGQzUyMDkuICBIZXJl4oCZcyB3aGF0 IG91ciB0ZXJtaW5vbG9neSBkcmFmdCBzYXlzOg0KDQpBc3Nlc3NtZW50OiBEZWZpbmVkIGluIFtS RkM1MjA5XSBhcyDigJx0aGUgcHJvY2VzcyBvZiBjb2xsZWN0aW5nIHBvc3R1cmUgZm9yDQphIHNl dCBvZiBjYXBhYmlsaXRpZXMgb24gdGhlIGVuZHBvaW50IChlLmcuIGhvc3QtYmFzZWQgZmlyZXdh bGwpIHN1Y2ggdGhhdA0KdGhlIGFwcHJvcHJpYXRlIHZhbGlkYXRvcnMgbWF5IGV2YWx1YXRlIHRo ZSBwb3N0dXJlIGFnYWluc3QgY29tcGxpYW5jZQ0KcG9saWN5LuKAnSAgV2l0aGluIFNBQ00gdGhl IHVzZSBvZiB0aGUgdGVybSBpcyBleHBhbmRlZCB0byBzdXBwb3J0IG90aGVyIHVzZXMNCm9mIGNv bGxlY3RlZCBwb3N0dXJlIChlLmcuIHJlcG9ydGluZywgbmV0d29yayBlbmZvcmNlbWVudCwgdnVs bmVyYWJpbGl0eQ0KZGV0ZWN0aW9uLCBsaWNlbnNlIG1hbmFnZW1lbnQpLiAgVGhlIHBocmFzZSDi gJxzZXQgb2YgY2FwYWJpbGl0aWVzIG9uIHRoZQ0KZW5kcG9pbnTigJ0gaW5jbHVkZXM6IGhhcmR3 YXJlIGFuZCBzb2Z0d2FyZSBpbnN0YWxsZWQgb24gdGhlIGVuZHBvaW50Lg0KDQpCdXQsIGluIHRo ZSB0ZXh0IHByb3Bvc2VkLCBhbmQgaW4gZ2VuZXJhbCwgd2UgYXJlIHRhbGtpbmcgYWJvdXQgY29s bGVjdGlvbg0KaW4gdGhlIGNvbnRleHQgb2YgKnByZSotYXNzZXNzbWVudC4gIFNvLCBhIGNvbGxl Y3Rpb24gYmVmb3JlIOKAnHRoZSBwcm9jZXNzDQpvZiBjb2xsZWN0aW5nIHBvc3R1cmXigKbigJ0s IHdoaWNoIHNlZW1zIG9mZiB0byBtZS4NCg0KRG8gd2UgcmVhbGx5IG1lYW4gdG8gc2F5LCBwcmUt ZXZhbHVhdGlvbj8gIE9yLCBkbyB3ZSBuZWVkIOKAnHByZeKAnSBhbnl0aGluZz8NClRoZXJlIGlz IGRhdGEgYXZhaWxhYmxlIGF0IHRoZSB0aW1lIG9mIGV2YWx1YXRpb24gb3IgdGhlcmUgaXMgbm90 LiAgSWYNCnRoZXJlIGlzIG5vdCwgd2UgZ28gZ3JhYiBpdCwgb3IgaW5kaWNhdGUgdGhhdCBpdCBu ZWVkcyB0byBiZSBncmFiYmVkIGR1cmluZw0KdGhlIG5leHQgY29sbGVjdGlvbiBvcHBvcnR1bml0 eSwgYW5kIHdlIGluZGljYXRlIHdoZXRoZXIgaXTigJlzIHNvbWV0aGluZyB3ZQ0KbmVlZCB0byBn cmFiIGFsbCB0aGUgdGltZSwgb3IganVzdCB0aGlzIG9uY2UuDQoNClRob3VnaHRzPw0KDQpBZGFt DQoNCg0KDQpPbiBKdW4gMTYsIDIwMTYsIGF0IDEyOjE1IFBNLCBIYXluZXMsIERhbiA8ZGhheW5l c0BtaXRyZS5vcmc8bWFpbHRvOmRoYXluZXNAbWl0cmUub3JnPj4gd3JvdGU6DQoNCk9mZiBsaXN0 LCBJIHJlY2VpdmVkIGEgc3VnZ2VzdGVkIHVwZGF0ZSB0byB0aGlzIHRleHQgZnJvbSBDaGFybGVz LiAgSSB3YXMNCmhvcGluZyB0byBkaXNjdXNzIGl0IGF0IHllc3RlcmRheeKAmXMgdmlydHVhbCBp bnRlcmltIG1lZXRpbmcsIGhvd2V2ZXIsIEkgcmFuDQpvdXQgb2YgdGltZS4gIEFzIGEgcmVzdWx0 LCBJIHdvdWxkIGxpa2UgdG8gcHJvcG9zZSB0aGUgdXBkYXRlZCB0ZXh0IGFzIGl0DQpzZWVtZWQg Y2xlYXJlciBhbmQgbW9yZSBjb25jaXNlIHRoYW4gd2hhdCBJIGhhZCBwcm9wb3NlZCwgYnV0LCBz YXlzIHRoZQ0Kc2FtZSB0aGluZy4NCg0KVGhlIG5ldyB0ZXh0IHdvdWxkIHJlYWQgYXMgZm9sbG93 cyAoYmFzZWQgb24gdGhlIHVwZGF0ZWQgZHJhZnQgcG9zdGVkIG9uDQo2LzgvMTYgWzFdKS4NCg0K IlN1cHBsZW1lbnRhbCBjb2xsZWN0aW9uIG9mIGVuZHBvaW50IGluZm9ybWF0aW9uIGZvciB0aGUg cHVycG9zZXMgb2bigKZPdmVyDQp0aW1lLCBzb21lIG5ldyBwaWVjZXMgb2YgaW5mb3JtYXRpb24g dGhhdCBhcmUgbmVlZGVkIGR1cmluZyBjb21tb24gdHlwZXMgb2YNCmFzc2Vzc21lbnRzIG1pZ2h0 IGJlIGlkZW50aWZpZWQuIFByZS1hc3Nlc3NtZW50IGNvbGxlY3Rpb24gY2FuIGJlDQpyZWNvbmZp Z3VyZWQgdG8gaGF2ZSB0aGlzIGluZm9ybWF0aW9uIGRlbGl2ZXJlZCBhdXRvbWF0aWNhbGx5LiBU aGlzIGF2b2lkcw0KdGhlIG5lZWQgZm9yIHJlZ3VsYXIgc3VwcGxlbWVudGFsIGNvbGxlY3Rpb25z IHRvIGdhdGhlciB0aGlzIGluZm9ybWF0aW9uDQpkdXJpbmcgYXNzZXNzbWVudHMsIHN0cmVhbWxp bmluZyB0aGUgYXNzZXNzbWVudCBwcm9jZXNzLiBMaWtld2lzZSwgaXQgbWlnaHQNCmJlIG9ic2Vy dmVkIHRoYXQgY2VydGFpbiBpbmZvcm1hdGlvbiBkZWxpdmVyZWQgZHVyaW5nIHByZS1hc3Nlc3Nt ZW50DQpjb2xsZWN0aW9uIGlzIHJhcmVseSB1c2VkLiBJbiB0aGlzIGNhc2UsIGl0IG1pZ2h0IGJl IHVzZWZ1bCB0byBzdG9wDQpwcmUtYXNzZXNzbWVudCBjb2xsZWN0aW9uIG9mIHRoaXMgaW5mb3Jt YXRpb24gdG8gcmVkdWNlIG5ldHdvcmsgYW5kDQpwcm9jZXNzaW5nIG92ZXJoZWFkLiBJbnN0ZWFk LCBzdXBwbGVtZW50YWwgY29sbGVjdGlvbiBjYW4gYmUgdXNlZCB0byBnYXRoZXINCnRoaXMgZGF0 YSBvbiB0aGUgcmFyZSBvY2Nhc2lvbnMgd2hlbiBpdCBpcyBuZWVkZWQuIg0KDQpQbGVhc2UgbGV0 IG1lIGtub3cgeW91ciB0aG91Z2h0cyBvbiB0aGlzIHByb3Bvc2VkIHRleHQgYnkgVHVlc2RheSBK dWx5IDIxDQpzdC4NCg0KVGhhbmtzLA0KDQpEYW5ueQ0KDQpbMV0gaHR0cHM6Ly93d3cuaWV0Zi5v cmcvaWQvZHJhZnQtaWV0Zi1zYWNtLXZ1bG4tc2NlbmFyaW8tMDAudHh0DQoNCg0KDQoqRnJvbToq IEplcm9tZSBBdGhpYXMgW21haWx0bzphdGhpYXNqZXJvbWVAZ21haWwuY29tDQo8YXRoaWFzamVy b21lQGdtYWlsLmNvbTxtYWlsdG86YXRoaWFzamVyb21lQGdtYWlsLmNvbT4+XQ0KKlNlbnQ6KiBU dWVzZGF5LCBKdW5lIDA3LCAyMDE2IDEyOjA4IEFNDQoqVG86KiBIYXluZXMsIERhbiA8ZGhheW5l c0BtaXRyZS5vcmc8bWFpbHRvOmRoYXluZXNAbWl0cmUub3JnPj4NCipDYzoqIHNhY21AaWV0Zi5v cmc8bWFpbHRvOnNhY21AaWV0Zi5vcmc+DQoqU3ViamVjdDoqIFJlOiBbc2FjbV0gRk9SIFJFVklF VzogVnVsbmVyYWJpbGl0eSBBc3Nlc3NtZW50IFNjZW5hcmlvIElzc3VlDQojNSAtIENoYW5nZSBE ZXRlY3Rpb24gd2l0aCBhbiBFbmRwb2ludCBNYW5hZ2VtZW50IENhcGFiaWxpdHkNCg0KVGhpcyBy ZXdyaXRlIGlzIGltaG8gYmV0dGVyDQpUaGFua3MNCg0KT24gVHVlc2RheSwgNyBKdW5lIDIwMTYs IEhheW5lcywgRGFuIDxkaGF5bmVzQG1pdHJlLm9yZzxtYWlsdG86ZGhheW5lc0BtaXRyZS5vcmc+ PiB3cm90ZToNCg0KQmFzZWQgb24gdGhlIGZlZWRiYWNrLCB3b3VsZCB0aGUgZm9sbG93aW5nIHJl d3JpdGUgb2YgdGhlIHBhcmFncmFwaCBoZWxwDQpjbGFyaWZ5IHRoaW5ncz8NCg0KIkluIG1hbnkg Y2FzZXMsIHRoZSBlbmRwb2ludCBpbmZvcm1hdGlvbi4uLlVuZGVyIGNlcnRhaW4gZGVwbG95bWVu dA0Kc2NlbmFyaW9zLCBhcw0KdGhlIHZ1bG5lcmFiaWxpdHkgbWFuYWdlbWVudCBjYXBhYmlsaXR5 IHByb2Nlc3NlcyB2dWxuZXJhYmlsaXR5IGRldGVjdGlvbg0KZGF0YSBvdmVyDQp0aW1lLCB0aGUg ZW5kcG9pbnQgbWFuYWdlbWVudCBjYXBhYmlsaXR5IG1heSBsZWFybiBhYm91dCBhZGRpdGlvbmFs DQpkZXRlY3Rpb24NCmluZm9ybWF0aW9uIHRoYXQgaXQgd2FzIHByZXZpb3VzbHkgbm90IGNvbGxl Y3RpbmcgYW5kIHB1c2ggdGhhdA0KaW5mb3JtYXRpb24gdG8gdGhlDQp2dWxuZXJhYmlsaXR5IG1h bmFnZW1lbnQgY2FwYWJpbGl0eSB3aGVyZSBpdCBjYW4gc3VwcG9ydCBmdXR1cmUNCmFzc2Vzc21l bnRzLiBUaGUNCnB1c2hpbmcgb2YgdGhpcyBkYXRhIG1heSBwb3RlbnRpYWxseSBiZSBkcml2ZW4g Ynkgc29tZSB0cmlnZ2VyIChlLmcuLA0KY2hhbmdlDQppbiBzb2Z0d2FyZSBpbnZlbnRvcnksIHBv bGljeSwgbmV0d29yayBjb25uZWN0aXZpdHkgc3RhdHVzLCBldGMuKS4iDQoNCldoaWxlIHRoaXMg cG90ZW50aWFsbHkgY3JlYXRlcyBhIGNvdXBsaW5nIGJldHdlZW4gdGhlIHZ1bG5lcmFiaWxpdHkN Cm1hbmFnZW1lbnQgY2FwYWJpbGl0eSBhbmQgdGhlIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJp bGl0eSwgYXMgd3JpdHRlbiwgSQ0KdGhpbmsgaXQgd2lsbCBiZSBsZWZ0IHRvIHRoZSBpbXBsZW1l bnRlciBvZiB0aG9zZSBjYXBhYmlsaXRpZXMgdG8gZGVjaWRlLg0KSSB0aGluayB0aGUgcG9pbnQg aXMganVzdCB0aGF0IHlvdSBjb3VsZCBkbyBzb21ldGhpbmcgbGlrZSB0aGlzIHRvIGltcHJvdmUN CnRoZSB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQuDQoNCklmIHdlIHN0aWxsIGRvbid0IGhhdmUg Y29uc2Vuc3VzIG9uIHRoaXMsIGFub3RoZXIgYXBwcm9hY2ggbWlnaHQgYmUgdG8NCmp1c3QgcmVt b3ZlIHRoaXMgdGV4dCBhbGwgdG9nZXRoZXIgYXMgSSBkb24ndCB0aGluayBkb2luZyBzbyB3b3Vs ZCBwcmVjbHVkZQ0KYW4gaW1wbGVtZW50ZXIgZnJvbSBzdXBwb3J0aW5nIGZ1bmN0aW9uYWxpdHkg bGlrZSB0aGlzIGluIHRoZWlyIHByb2R1Y3QuDQoNClRob3VnaHRzPw0KDQpUaGFua3MsDQoNCkRh bm55DQoNCg0KLS0tLS1PcmlnaW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IEplcm9tZSBBdGhpYXMg W21haWx0bzphdGhpYXNqZXJvbWVAZ21haWwuY29tXQ0KU2VudDogU2F0dXJkYXksIEp1bmUgMDQs IDIwMTYgMjo0OSBBTQ0KVG86IEhheW5lcywgRGFuIDxkaGF5bmVzQG1pdHJlLm9yZzxtYWlsdG86 ZGhheW5lc0BtaXRyZS5vcmc+Pg0KQ2M6IHNhY21AaWV0Zi5vcmc8bWFpbHRvOnNhY21AaWV0Zi5v cmc+DQpTdWJqZWN0OiBSZTogW3NhY21dIEZPUiBSRVZJRVc6IFZ1bG5lcmFiaWxpdHkgQXNzZXNz bWVudCBTY2VuYXJpbyBJc3N1ZQ0KIzUNCg0KLSBDaGFuZ2UgRGV0ZWN0aW9uIHdpdGggYW4gRW5k cG9pbnQgTWFuYWdlbWVudCBDYXBhYmlsaXR5DQoNCldoaWxlIHRoZSBzY2VuYXJpbyBwcm92aWRl ZCBieSBBZGFtIGlzIHZhbGlkLCBpZiB5b3VyIGNvbmNlcm4gaXMgdGhhdA0KInRoZQ0KDQppbmZv cm1hdGlvbiBiZXlvbmQgdGhhdCIgd291bGQgYmUgInN1cHBsZW1lbnRhbCBlbmRwb2ludA0KaW5m b3JtYXRpb24iOg0KSSBkb24ndCBzZWUgYSBzY2VuYXJpbyB3aGVyZSBhbiBlbmRwb2ludCBtYW5h Z2VtZW50IGNhcGFiaWxpdHkgd291bGQgaGF2ZQ0KdG8gcHVzaCAtc3VwcGxlbWVudGFsLSBpbmZv cm1hdGlvbiB0byB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nlc3NtZW50DQpjYXBhYmlsaXR5ICh3aGF0 IHdvdWxkIHRoZSB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQgY2FwYWJpbGl0eSBkbyB3aXRoDQon dW5rbm93bicgYWRkaXRpb25hbCBpbmZvcm1hdGlvbikNCg0KU28gSSB0aGluayB0aGUgaXNzdWUg aXMgdG8gY2hhbmdlICJ0aGUgaW5mb3JtYXRpb24gYmV5b25kIHRoYXQiIHRvDQpzb21ldGhpbmcN Cg0KbGlrZSAidGhlIHVwZGF0ZWQgaW5mb3JtYXRpb24iDQoNCg0KDQoyMDE2LTA1LTE4IDE2OjE1 IEdNVCswMzowMCBIYXluZXMsIERhbiA8ZGhheW5lc0BtaXRyZS5vcmc8bWFpbHRvOmRoYXluZXNA bWl0cmUub3JnPj46DQoNCkR1cmluZyB5ZXN0ZXJkYXnigJlzIHZpcnR1YWwgaW50ZXJpbSBtZWV0 aW5nLCB3ZSBkaXNjdXNzZWQgdmFyaW91cyBvcGVuDQppc3N1ZXMgd2l0aCByZXNwZWN0IHRvIHRo ZSBWdWxuZXJhYmlsaXR5IEFzc2Vzc21lbnQgU2NlbmFyaW8gWzFdIGFzIGENCnJlc3VsdCBvZiBm ZWVkYmFjayB0aGF0IHdlIHJlY2VpdmVkIG9uIHRoZSBkcmFmdCB3aGljaCB5b3UgY2FuIHNlZQ0K aGVyZSBbMl1bM10uICBUaGUgc2xpZGXigJlzIGZyb20gdGhlIG1lZXRpbmcgY2FuIGJlIGZvdW5k IGhlcmUgWzRdLg0KDQoNCg0KT25lIGlzc3VlIHRoYXQgd2UgZGlkbuKAmXQgaGF2ZSBhIGNoYW5j ZSB0byBkaXNjdXNzIGJlY2F1c2Ugd2UgcmFuIG91dA0Kb2YgdGltZSB3YXMgd2hldGhlciBvciBu b3QgYW4gZW5kcG9pbnQgbWFuYWdlbWVudCBjYXBhYmlsaXR5IGhhcyB0aGUNCmFiaWxpdHkgdG8g cHVzaCBzdXBwbGVtZW50YWwgZW5kcG9pbnQgaW5mb3JtYXRpb24gdG8gdGhlIHZ1bG5lcmFiaWxp dHkNCmFzc2Vzc21lbnQgY2FwYWJpbGl0eS4gIFRoaXMgcXVlc3Rpb24gY2FtZSBvdXQgb2YgYSBy ZXZpZXcgb2YgdGhlDQpmb2xsb3dpbmcgdGV4dCBmcm9tIHRoZSBWdWxuZXJhYmlsaXR5IEFzc2Vz c21lbnQgU2NlbmFyaW8NCihzcGVjaWZpY2FsbHkgdGhlDQoNCmxhc3Qgc2VudGVuY2UpLg0KDQoN Cg0KDQrigJxJbiBtYW55IGNhc2VzLCB0aGUgZW5kcG9pbnQgaW5mb3JtYXRpb24gbmVlZGVkIHRv IGRldGVybWluZSBhbg0KZW5kcG9pbnTigJlzIHZ1bG5lcmFiaWxpdHkgc3RhdHVzIHdpbGwgaGF2 ZSBiZWVuIHByZXZpb3VzbHkNCg0KY29sbGVjdGVkIGJ5IHRoZSBFbmRwb2ludCBNYW5hZ2VtZW50 IENhcGFiaWxpdHkgYW5kIGF2YWlsYWJsZSBpbiBhDQpSZXBvc2l0b3J5LiBIb3dldmVyLCBpbiBv dGhlciBjYXNlcywgdGhlIG5lY2Vzc2FyeQ0KDQplbmRwb2ludCBpbmZvcm1hdGlvbiB3aWxsIG5v dCBiZSByZWFkaWx5IGF2YWlsYWJsZSBpbiBhIFJlcG9zaXRvcnkgYW5kDQphIHRhcmdldGVkIGNv bGxlY3Rpb24gd2lsbCBiZSBuZWNlc3NhcnkuICBPZiBjb3Vyc2UsDQoNCmFuIGltcGxlbWVudGF0 aW9uIG9mIGFuIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSBtYXkgcHJlZmVyIHRvDQpl bmFibGUgb3BlcmF0b3JzIHRvIHBlcmZvcm0gdGFyZ2V0ZWQgY29sbGVjdGlvbiB1bmRlcg0KDQpj ZXJ0YWluIGNpcmN1bXN0YW5jZXMsIGV2ZW4gd2hlbiBzdWZmaWNpZW50IGluZm9ybWF0aW9uIGNh biBiZQ0KcHJvdmlkZWQgYnkgdGhlIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSAoZS5n LiB0aGVyZQ0KDQptYXkgYmUgZnJlc2huZXNzIHJlcXVpcmVtZW50cyBmb3IgaW5mb3JtYXRpb24p LiBUYXJnZXRlZCBjb2xsZWN0aW9uIG9mDQplbmRwb2ludCBpbmZvcm1hdGlvbiBmb3IgdGhlIHB1 cnBvc2Ugb2YgdnVsbmVyYWJpbGl0eQ0KDQphc3Nlc3NtZW50IGRvZXMgbm90IG5lY2Vzc2FyaWx5 IG5lZWQgdG8gYmUgYSBwdWxsIGJ5IHRoZSB2dWxuZXJhYmlsaXR5DQphc3Nlc3NtZW50IGNhcGFi aWxpdHkuICBVbmRlciBjZXJ0YWluIGRlcGxveW1lbnQNCg0Kc2NlbmFyaW9zLCBvbmNlIHRoZSBu ZWNlc3NhcnkgZGV0ZWN0aW9uIGluZm9ybWF0aW9uIGlzIGtub3duLCB0aGUNCmluZm9ybWF0aW9u IGJleW9uZCB0aGF0IHdoaWNoIGlzIGF2YWlsYWJsZSBpbiB0aGUgZW5kcG9pbnQNCg0KbWFuYWdl bWVudCBjYXBhYmlsaXR5IGNhbiBiZSBwdXNoZWQgdG8gdGhlIHZ1bG5lcmFiaWxpdHkgYXNzZXNz bWVudA0KY2FwYWJpbGl0eSBieSB0aGUgZW5kcG9pbnQgd2hlbmV2ZXIgdGhhdCBpbmZvcm1hdGlv bg0KDQpjaGFuZ2VzLuKAnQ0KDQoNCg0KT3VyIG1haW4gcXVlc3Rpb24gaXMgd2hldGhlciBvciBu b3QgcHVzaGluZyBpbmZvcm1hdGlvbiBmcm9tIHRoZQ0KZW5kcG9pbnQgbWFuYWdlbWVudCBjYXBh YmlsaXR5IHRvIHRoZSB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQNCmNhcGFiaWxpdHkgaXMgYWN0 dWFsbHkgcG9zc2libGUgYmVjYXVzZSBpdCB3b3VsZCBub3QgbmVjZXNzYXJpbHkga25vdw0Kd2hh dCBpbmZvcm1hdGlvbiBpdCBuZWVkcyB0byBwdXNoIHByaW9yIHRvIHRoZSBzZXJ2ZXIgcmVxdWVz dGluZyBpdA0KKGluIHdoaWNoIGNhc2UgaXQgaXMgcHJvYmFibHkgY29uc2lkZXJlZCBhIHB1bGwp PyAgSXMgdGhlcmUgYQ0Kc2l0dWF0aW9uIHdoZXJlIHRoZSBlbmRwb2ludCB3b3VsZCBrbm93LCBp biBhZHZhbmNlLCB3aGF0IGFkZGl0aW9uYWwNCmluZm9ybWF0aW9uIGlzIG5lZWRlZCBmb3IgYW4g YXNzZXNzbWVudCB3aXRob3V0IGEgc2VydmVyIHJlcXVlc3RpbmcgaXQ/DQoNCg0KDQpJZiB5b3Ug aGF2ZSBhbnkgdGhvdWdodHMgb24gdGhpcyBpc3N1ZSwgcGxlYXNlIHByb3ZpZGUgZmVlZGJhY2sg YnkgTWF5DQozMXN0Lg0KDQpXZSBhcmUgcGxhbm5pbmcgdG8gaGF2ZSBhbiB1cGRhdGVkIHZlcnNp b24gb2YgdGhlIHNjZW5hcmlvIGZvciBKdW5lDQo4dGguDQoNCg0KDQoNClRoYW5rcywNCg0KRGFu bnkNCg0KDQoNClsxXSBodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9kcmFmdC1jb2Zm aW4tc2FjbS12dWxuLXNjZW5hcmlvLw0KDQpbMl0gaHR0cHM6Ly9naXRodWIuY29tL3NhY213Zy92 dWxuZXJhYmlsaXR5LXNjZW5hcmlvL3B1bGwvMw0KDQpbM10gaHR0cHM6Ly93d3cuaWV0Zi5vcmcv bWFpbC1hcmNoaXZlL3dlYi9zYWNtL2N1cnJlbnQvbXNnMDM5NTguaHRtbA0KDQpbNF0gaHR0cHM6 Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mvc2xpZGVzLWludGVyaW0tMjAxNi1zYWNtLTMtMS8N Cihsb29rcyBsaWtlIHRoZSBzbGlkZXMgYXJlIG5vdCBhdmFpbGFibGUganVzdCB5ZXQsIGJ1dCwg SSBzdXNwZWN0IHRoZXkNCnNob3VsZCBiZQ0Kc29vbikNCg0KDQoNCg0KX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNhY20gbWFpbGluZyBsaXN0DQpzYWNt QGlldGYub3JnPG1haWx0bzpzYWNtQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bG1hbi9saXN0aW5mby9zYWNtDQoNCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fDQpzYWNtIG1haWxpbmcgbGlzdA0Kc2FjbUBpZXRmLm9yZzxtYWlsdG86c2Fj bUBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2FjbQ0K DQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCnNh Y20gbWFpbGluZyBsaXN0DQpzYWNtQGlldGYub3JnPG1haWx0bzpzYWNtQGlldGYub3JnPg0KaHR0 cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zYWNtDQoNCg== --_000_BY2PR09MB107887CC0CC80F1687967863A52E0BY2PR09MB1078namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1z b25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1l Om1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGlu Ow0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250 LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNw YW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRl ZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1y ZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdE O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFb ZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0i ZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91 dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+SSBqdXN0IHJldmll d2VkIHRoZSBsYXRlc3QgdmVyc2lvbiBvZiB0aGUgSS1EIGFuZCBmb3VuZCBvbmx5IG9uZSBvY2N1 cnJlbmNlIG9mIOKAnHByZS1hc3Nlc3NtZW504oCdIGluIEFwcGVuZGl4IEkuMyB3aGljaCBzYXlz OjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIiBzdHlsZT0ibWFyZ2luLWxlZnQ6LjVpbiI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2Nv bG9yOiMxRjRFNzkiPuKAnFdpdGhpbiB0aGUgU0FDTSBBcmNoaXRlY3R1cmUsIHRoZSBhc3Nlc3Nt ZW50IHRhc2sgd291bGQgYmUgaGFuZGxlZCBieSB0aGUgRXZhbHVhdG9yIGNvbXBvbmVudC4mbmJz cDsgSWYgcHJlLWFzc2Vzc21lbnQgZGF0YSBpcyB1c2VkLCB0aGlzDQogd291bGQgYmUgc3RvcmVk IG9uIGFuZCBvYnRhaW5lZCBmcm9tIGEgRGF0YSBTdG9yZSBjb21wb25lbnQu4oCdPG86cD48L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5JIHRoaW5rIHRoaXMgY291bGQgZWFz aWx5IGJlIHJlLXdyaXR0ZW4gdG8gcmVtb3ZlIOKAnHByZS1hc3Nlc3NtZW504oCdIGFuZCBzYXk6 PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJ0ZXh0LWluZGVudDouNWluIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29s b3I6IzFGNDk3RCI+4oCcV2l0aGluIHRoZSBTQUNNIEFyY2hpdGVjdHVyZSwgdGhlIGFzc2Vzc21l bnQgdGFzayB3b3VsZCBiZSBoYW5kbGVkIGJ5IHRoZSBFdmFsdWF0b3IgY29tcG9uZW50LiBJZiBw cmV2aW91c2x5IGNvbGxlY3RlZCBkYXRhIGlzIHVzZWQsDQogaXQgd291bGQgYmUgb2J0YWluZWQg ZnJvbSBhIERhdGEgU3RvcmUgY29tcG9uZW50LuKAnTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZu YnNwOzwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2Vy aWY7Y29sb3I6IzFGNDk3RCI+SSB0aGluayB3ZSBjb3VsZCBhbHNvIHJld3JpdGUgdGhlIGxhdGVz dCByZXZpc2lvbiBvZiB0aGUgdGV4dA0KPC9zcGFuPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEu MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0 RTc5Ij4oZnJvbSBteSBKdW4gMTY8c3VwPnRoPC9zdXA+IG1lc3NhZ2UpDQo8L3NwYW4+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPnRvIHJlYWQgYXMgZm9sbG93cyAod2hpY2ggYWxzbyBt YWtlcyB1c2Ugb2YgU0FDTSB0YXNrcyB3aGljaCB3YXMgc3VnZ2VzdGVkIGF0IHRoZSBsYXN0IHZp cnR1YWwgaW50ZXJpbSBtZWV0aW5nKS48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286 cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9w LWFsdDowaW47bWFyZ2luLXJpZ2h0OjBpbjttYXJnaW4tYm90dG9tOjEyLjBwdDttYXJnaW4tbGVm dDouNWluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5Ij4mcXVvdDtUaGUgY29sbGVj dGlvbiBvZiBhZGRpdGlvbmFsIGVuZHBvaW50IGluZm9ybWF0aW9uIGZvciB0aGUgcHVycG9zZSBv ZiB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQgZG9lcyBub3QgbmVjZXNzYXJpbHkgbmVlZCB0byBi ZSBhIHB1bGwgYnkgdGhlIHZ1bG5lcmFiaWxpdHkgYXNzZXNzbWVudCBjYXBhYmlsaXR5LiZuYnNw Ow0KIE92ZXIgdGltZSwgc29tZSBuZXcgcGllY2VzIG9mIGluZm9ybWF0aW9uIHRoYXQgYXJlIG5l ZWRlZCBkdXJpbmcgY29tbW9uIHR5cGVzIG9mIGFzc2Vzc21lbnRzIG1pZ2h0IGJlIGlkZW50aWZp ZWQuIEFuIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSBjYW4gYmUgcmVjb25maWd1cmVk IHRvIGhhdmUgdGhpcyBpbmZvcm1hdGlvbiBkZWxpdmVyZWQgYXV0b21hdGljYWxseS4gVGhpcyBh dm9pZHMgdGhlIG5lZWQgdG8gdHJpZ2dlciBhZGRpdGlvbmFsDQogQ29sbGVjdGlvbiBUYXNrcyB0 byBnYXRoZXIgdGhpcyBpbmZvcm1hdGlvbiBkdXJpbmcgYXNzZXNzbWVudHMsIHN0cmVhbWxpbmlu ZyB0aGUgYXNzZXNzbWVudCBwcm9jZXNzLiBMaWtld2lzZSwgaXQgbWlnaHQgYmUgb2JzZXJ2ZWQg dGhhdCBjZXJ0YWluIGluZm9ybWF0aW9uIGRlbGl2ZXJlZCBieSBhbiBlbmRwb2ludCBtYW5hZ2Vt ZW50IGNhcGFiaWxpdHkgaXMgcmFyZWx5IHVzZWQuIEluIHRoaXMgY2FzZSwgaXQgbWlnaHQgYmUg dXNlZnVsIHRvDQogcmUtY29uZmlndXJlIHRoZSBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxp dHkgdG8gbm8gbG9uZ2VyIGNvbGxlY3QgdGhpcyBpbmZvcm1hdGlvbiB0byByZWR1Y2UgbmV0d29y ayBhbmQgcHJvY2Vzc2luZyBvdmVyaGVhZC4gSW5zdGVhZCwgYSBuZXcgQ29sbGVjdGlvbiBUYXNr IGNhbiBiZSB0cmlnZ2VyZWQgdG8gZ2F0aGVyIHRoaXMgZGF0YSBvbiB0aGUgcmFyZSBvY2Nhc2lv bnMgd2hlbiBpdCBpcyBuZWVkZWQuJnF1b3Q7PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPkxldCBtZSBrbm93 IHdoYXQgeW91IHRoaW5rIG9mIHRoZXNlIGNoYW5nZXMuJm5ic3A7IElmIHRoZXkgc2VlbSByZWFz b25hYmxlLCBJIGNhbiBpbnRlZ3JhdGUgdGhlbSBpbnRvIHRoZSBuZXh0IHJldmlzaW9uIG9mIHRo ZSBJLUQgYW5kIHdlIGNhbiBjbG9zZSBvdXQgdGhpcyBpc3N1ZS48bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+ PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4g c3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90Oyxz YW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5rcyw8YnI+DQo8YnI+DQpEYW5ueTwvc3Bhbj48 c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1 b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5i c3A7PC9vOnA+PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0 OnNvbGlkIGJsdWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRp diBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRp bmc6My4wcHQgMGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5z LXNlcmlmIj5Gcm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gQWRhbSBNb250dmlsbGUg W21haWx0bzphZGFtLncubW9udHZpbGxlQGdtYWlsLmNvbV0NCjxicj4NCjxiPlNlbnQ6PC9iPiBT YXR1cmRheSwgSnVuZSAxOCwgMjAxNiAxOjM2IFBNPGJyPg0KPGI+VG86PC9iPiBJcmEgTWNEb25h bGQgJmx0O2JsdWVyb29mbXVzaWNAZ21haWwuY29tJmd0Ozxicj4NCjxiPkNjOjwvYj4gSGF5bmVz LCBEYW4gJmx0O2RoYXluZXNAbWl0cmUub3JnJmd0OzsgSmVyb21lIEF0aGlhcyAmbHQ7YXRoaWFz amVyb21lQGdtYWlsLmNvbSZndDs7IHNhY21AaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0OjwvYj4g UmU6IFtzYWNtXSBGT1IgUkVWSUVXOiBWdWxuZXJhYmlsaXR5IEFzc2Vzc21lbnQgU2NlbmFyaW8g SXNzdWUgIzUgLSBDaGFuZ2UgRGV0ZWN0aW9uIHdpdGggYW4gRW5kcG9pbnQgTWFuYWdlbWVudCBD YXBhYmlsaXR5PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPk15IGNvbmNlcm4gZG9lcyBub3Qgc3RlbSBmcm9tIHVzaW5nIHRoZSBwcmVmaXgg4oCc cHJl4oCdLCBhcyBtdWNoIGFzIGl0IGlzIGFib3V0IHRoZSBkZWZpbml0aW9uIG9mIHRoZSB0ZXJt IGFzc2Vzc21lbnQgYW5kIGhvdyB3ZeKAmXJlIHVzaW5nIHByZS1hc3Nlc3NtZW50IG9mdGVuLCB3 aGljaCB0dXJucyBpbnRvIOKAnGNvbGxlY3RpbmcgYmVmb3JlIHRoZSBwcm9jZXNzIG9mIGNvbGxl Y3RpbmfigJ0sIHdoaWNoIGlzIGNvbmZ1c2luZw0KIGF0IGJlc3QuPG86cD48L286cD48L3A+DQo8 L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4N CjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoZSBzaXR1YXRpb24gd2UgYXJl IGxvb2tpbmcgYXQgZmVlbHMgdmVyeSBtdWNoIGxpa2UgYSBjYWNoZSBtaXNzLiAmbmJzcDtXZSBs b29rIGZvciBzb21lIGluZm9ybWF0aW9uIGluIG9uZSBwbGFjZSBhbmQgZG9u4oCZdCBmaW5kIGl0 LCBzbyB3ZSBoYXZlIHRvIGdvIGZldGNoIGl0IGZyb20gc29tZXdoZXJlIGVsc2UuPG86cD48L286 cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7 PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpw PjwvcD4NCjxkaXY+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t Ym90dG9tOjUuMHB0Ij4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj5PbiBKdW4gMTgsIDIw MTYsIGF0IDg6NDEgQU0sIElyYSBNY0RvbmFsZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJsdWVyb29m bXVzaWNAZ21haWwuY29tIj5ibHVlcm9vZm11c2ljQGdtYWlsLmNvbTwvYT4mZ3Q7IHdyb3RlOjxv OnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwv bzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1z aXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5I aSw8YnI+DQo8YnI+DQpJIHNoYXJlIEFkYW0ncyBkaXN0YXN0ZSBmb3IgJnF1b3Q7cHJlLSZxdW90 OyBhbnl0aGluZy48YnI+DQo8YnI+DQpQZXJoYXBzICZxdW90O2V4dGVybmFsIGNvbGxlY3Rpb24m cXVvdDsgLSBkZWZpbmVkIGFzIHNpbXBseSB1c2luZyBhbnkgbm9uLVNBQ008YnI+DQpwcm90b2Nv bCB0byBmb3J3YXJkIGVuZHBvaW50IHBvc3R1cmUgdG8gYSBTQUNNIENvbGxlY3RvciAoaW4gdGhp cyBjYXNlLDxicj4NCmUuZy4sIGEgTkVBIFNlcnZlcik/PGJyPg0KPGJyPg0KQ2hlZXJzLDxicj4N Ci0gSXJhPGJyPg0KPGJyPg0KPGJyPg0KSXJhIE1jRG9uYWxkIChNdXNpY2lhbiAvIFNvZnR3YXJl IEFyY2hpdGVjdCk8YnI+DQpDby1DaGFpciAtIFRDRyBUcnVzdGVkIE1vYmlsaXR5IFNvbHV0aW9u cyBXRzxicj4NCkNoYWlyIC0gTGludXggRm91bmRhdGlvbiBPcGVuIFByaW50aW5nIFdHPGJyPg0K U2VjcmV0YXJ5IC0gSUVFRS1JU1RPIFByaW50ZXIgV29ya2luZyBHcm91cDxicj4NCkNvLUNoYWly IC0gSUVFRS1JU1RPIFBXRyBJbnRlcm5ldCBQcmludGluZyBQcm90b2NvbCBXRzxicj4NCklFVEYg RGVzaWduYXRlZCBFeHBlcnQgLSBJUFAgJmFtcDsgUHJpbnRlciBNSUI8YnI+DQpCbHVlIFJvb2Yg TXVzaWMgLyBIaWdoIE5vcnRoIEluYzxicj4NCjwvc3Bhbj48YSBocmVmPSJodHRwOi8vc2l0ZXMu Z29vZ2xlLmNvbS9zaXRlL2JsdWVyb29mbXVzaWMiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPmh0dHA6Ly9z aXRlcy5nb29nbGUuY29tL3NpdGUvYmx1ZXJvb2ZtdXNpYzwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZiI+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHA6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUv aGlnaG5vcnRoaW5jIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5odHRwOi8vc2l0ZXMuZ29vZ2xlLmNvbS9z aXRlL2hpZ2hub3J0aGluYzwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KbWFpbHRv OjxzcGFuIGNsYXNzPSJhcHBsZS1jb252ZXJ0ZWQtc3BhY2UiPiZuYnNwOzwvc3Bhbj48L3NwYW4+ PGEgaHJlZj0ibWFpbHRvOmJsdWVyb29mbXVzaWNAZ21haWwuY29tIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlm Ij5ibHVlcm9vZm11c2ljQGdtYWlsLmNvbTwvc3Bhbj48L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJy Pg0KV2ludGVyICZuYnNwOzU3OSBQYXJrIFBsYWNlICZuYnNwO1NhbGluZSwgTUkgJm5ic3A7NDgx NzYgJm5ic3A7NzM0LTk0NC0wMDk0PGJyPg0KU3VtbWVyICZuYnNwO1BPIEJveCAyMjEgJm5ic3A7 R3JhbmQgTWFyYWlzLCBNSSA0OTgzOSAmbmJzcDs5MDYtNDk0LTI0MzQ8YnI+DQo8YnI+DQo8YnI+ DQpPbiBGcmksIEp1biAxNywgMjAxNiBhdCA2OjE0IFBNLCBBZGFtIE1vbnR2aWxsZSAmbHQ7PC9z cGFuPjxhIGhyZWY9Im1haWx0bzphZGFtLncubW9udHZpbGxlQGdtYWlsLmNvbSI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fu cy1zZXJpZiI+YWRhbS53Lm1vbnR2aWxsZUBnbWFpbC5jb208L3NwYW4+PC9hPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPiZndDs8YnI+DQp3cm90ZTo8YnI+DQo8YnIgc3R5bGU9ImZvbnQtdmFyaWFudC1jYXBz OiBub3JtYWw7b3JwaGFuczogYXV0bzt0ZXh0LWFsaWduOnN0YXJ0O3dpZG93czogYXV0bzstd2Vi a2l0LXRleHQtc3Ryb2tlLXdpZHRoOiAwcHg7d29yZC1zcGFjaW5nOjBweCI+DQo8YnI+DQo8L3Nw YW4+PG86cD48L286cD48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDtt YXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJm b250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2Vy aWYiPkkgcmVhbGx5IGRvbuKAmXQgd2FudCB0byBiZSB0aGUgb25lIHRvIGJyaW5nIHRoaXMgdXAs IGJ1dCBhcmUgd2UgZm9yZ2V0dGluZzxicj4NCm91ciBkZWZpbml0aW9uIG9mIOKAnGFzc2Vzc21l bnTigJ0/ICZuYnNwO1dlIGJvcnJvdywgYW5kIGV4cGFuZCB1cG9uLCB0aGUgdGVybSBmcm9tPGJy Pg0KUkZDNTIwOS4gJm5ic3A7SGVyZeKAmXMgd2hhdCBvdXIgdGVybWlub2xvZ3kgZHJhZnQgc2F5 czo8YnI+DQo8YnI+DQpBc3Nlc3NtZW50OiBEZWZpbmVkIGluIFtSRkM1MjA5XSBhcyDigJx0aGUg cHJvY2VzcyBvZiBjb2xsZWN0aW5nIHBvc3R1cmUgZm9yPGJyPg0KYSBzZXQgb2YgY2FwYWJpbGl0 aWVzIG9uIHRoZSBlbmRwb2ludCAoZS5nLiBob3N0LWJhc2VkIGZpcmV3YWxsKSBzdWNoIHRoYXQ8 YnI+DQp0aGUgYXBwcm9wcmlhdGUgdmFsaWRhdG9ycyBtYXkgZXZhbHVhdGUgdGhlIHBvc3R1cmUg YWdhaW5zdCBjb21wbGlhbmNlPGJyPg0KcG9saWN5LuKAnSAmbmJzcDtXaXRoaW4gU0FDTSB0aGUg dXNlIG9mIHRoZSB0ZXJtIGlzIGV4cGFuZGVkIHRvIHN1cHBvcnQgb3RoZXIgdXNlczxicj4NCm9m IGNvbGxlY3RlZCBwb3N0dXJlIChlLmcuIHJlcG9ydGluZywgbmV0d29yayBlbmZvcmNlbWVudCwg dnVsbmVyYWJpbGl0eTxicj4NCmRldGVjdGlvbiwgbGljZW5zZSBtYW5hZ2VtZW50KS4gJm5ic3A7 VGhlIHBocmFzZSDigJxzZXQgb2YgY2FwYWJpbGl0aWVzIG9uIHRoZTxicj4NCmVuZHBvaW504oCd IGluY2x1ZGVzOiBoYXJkd2FyZSBhbmQgc29mdHdhcmUgaW5zdGFsbGVkIG9uIHRoZSBlbmRwb2lu dC48YnI+DQo8YnI+DQpCdXQsIGluIHRoZSB0ZXh0IHByb3Bvc2VkLCBhbmQgaW4gZ2VuZXJhbCwg d2UgYXJlIHRhbGtpbmcgYWJvdXQgY29sbGVjdGlvbjxicj4NCmluIHRoZSBjb250ZXh0IG9mICpw cmUqLWFzc2Vzc21lbnQuICZuYnNwO1NvLCBhIGNvbGxlY3Rpb24gYmVmb3JlIOKAnHRoZSBwcm9j ZXNzPGJyPg0Kb2YgY29sbGVjdGluZyBwb3N0dXJl4oCm4oCdLCB3aGljaCBzZWVtcyBvZmYgdG8g bWUuPGJyPg0KPGJyPg0KRG8gd2UgcmVhbGx5IG1lYW4gdG8gc2F5LCBwcmUtZXZhbHVhdGlvbj8g Jm5ic3A7T3IsIGRvIHdlIG5lZWQg4oCccHJl4oCdIGFueXRoaW5nPzxicj4NClRoZXJlIGlzIGRh dGEgYXZhaWxhYmxlIGF0IHRoZSB0aW1lIG9mIGV2YWx1YXRpb24gb3IgdGhlcmUgaXMgbm90LiAm bmJzcDtJZjxicj4NCnRoZXJlIGlzIG5vdCwgd2UgZ28gZ3JhYiBpdCwgb3IgaW5kaWNhdGUgdGhh dCBpdCBuZWVkcyB0byBiZSBncmFiYmVkIGR1cmluZzxicj4NCnRoZSBuZXh0IGNvbGxlY3Rpb24g b3Bwb3J0dW5pdHksIGFuZCB3ZSBpbmRpY2F0ZSB3aGV0aGVyIGl04oCZcyBzb21ldGhpbmcgd2U8 YnI+DQpuZWVkIHRvIGdyYWIgYWxsIHRoZSB0aW1lLCBvciBqdXN0IHRoaXMgb25jZS48YnI+DQo8 YnI+DQpUaG91Z2h0cz88YnI+DQo8YnI+DQpBZGFtPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KT24g SnVuIDE2LCAyMDE2LCBhdCAxMjoxNSBQTSwgSGF5bmVzLCBEYW4gJmx0OzxhIGhyZWY9Im1haWx0 bzpkaGF5bmVzQG1pdHJlLm9yZyI+ZGhheW5lc0BtaXRyZS5vcmc8L2E+Jmd0OyB3cm90ZTo8YnI+ DQo8YnI+DQpPZmYgbGlzdCwgSSByZWNlaXZlZCBhIHN1Z2dlc3RlZCB1cGRhdGUgdG8gdGhpcyB0 ZXh0IGZyb20gQ2hhcmxlcy4gJm5ic3A7SSB3YXM8YnI+DQpob3BpbmcgdG8gZGlzY3VzcyBpdCBh dCB5ZXN0ZXJkYXnigJlzIHZpcnR1YWwgaW50ZXJpbSBtZWV0aW5nLCBob3dldmVyLCBJIHJhbjxi cj4NCm91dCBvZiB0aW1lLiAmbmJzcDtBcyBhIHJlc3VsdCwgSSB3b3VsZCBsaWtlIHRvIHByb3Bv c2UgdGhlIHVwZGF0ZWQgdGV4dCBhcyBpdDxicj4NCnNlZW1lZCBjbGVhcmVyIGFuZCBtb3JlIGNv bmNpc2UgdGhhbiB3aGF0IEkgaGFkIHByb3Bvc2VkLCBidXQsIHNheXMgdGhlPGJyPg0Kc2FtZSB0 aGluZy48YnI+DQo8YnI+DQpUaGUgbmV3IHRleHQgd291bGQgcmVhZCBhcyBmb2xsb3dzIChiYXNl ZCBvbiB0aGUgdXBkYXRlZCBkcmFmdCBwb3N0ZWQgb248YnI+DQo2LzgvMTYgWzFdKS48YnI+DQo8 YnI+DQomcXVvdDtTdXBwbGVtZW50YWwgY29sbGVjdGlvbiBvZiBlbmRwb2ludCBpbmZvcm1hdGlv biBmb3IgdGhlIHB1cnBvc2VzIG9m4oCmT3Zlcjxicj4NCnRpbWUsIHNvbWUgbmV3IHBpZWNlcyBv ZiBpbmZvcm1hdGlvbiB0aGF0IGFyZSBuZWVkZWQgZHVyaW5nIGNvbW1vbiB0eXBlcyBvZjxicj4N CmFzc2Vzc21lbnRzIG1pZ2h0IGJlIGlkZW50aWZpZWQuIFByZS1hc3Nlc3NtZW50IGNvbGxlY3Rp b24gY2FuIGJlPGJyPg0KcmVjb25maWd1cmVkIHRvIGhhdmUgdGhpcyBpbmZvcm1hdGlvbiBkZWxp dmVyZWQgYXV0b21hdGljYWxseS4gVGhpcyBhdm9pZHM8YnI+DQp0aGUgbmVlZCBmb3IgcmVndWxh ciBzdXBwbGVtZW50YWwgY29sbGVjdGlvbnMgdG8gZ2F0aGVyIHRoaXMgaW5mb3JtYXRpb248YnI+ DQpkdXJpbmcgYXNzZXNzbWVudHMsIHN0cmVhbWxpbmluZyB0aGUgYXNzZXNzbWVudCBwcm9jZXNz LiBMaWtld2lzZSwgaXQgbWlnaHQ8YnI+DQpiZSBvYnNlcnZlZCB0aGF0IGNlcnRhaW4gaW5mb3Jt YXRpb24gZGVsaXZlcmVkIGR1cmluZyBwcmUtYXNzZXNzbWVudDxicj4NCmNvbGxlY3Rpb24gaXMg cmFyZWx5IHVzZWQuIEluIHRoaXMgY2FzZSwgaXQgbWlnaHQgYmUgdXNlZnVsIHRvIHN0b3A8YnI+ DQpwcmUtYXNzZXNzbWVudCBjb2xsZWN0aW9uIG9mIHRoaXMgaW5mb3JtYXRpb24gdG8gcmVkdWNl IG5ldHdvcmsgYW5kPGJyPg0KcHJvY2Vzc2luZyBvdmVyaGVhZC4gSW5zdGVhZCwgc3VwcGxlbWVu dGFsIGNvbGxlY3Rpb24gY2FuIGJlIHVzZWQgdG8gZ2F0aGVyPGJyPg0KdGhpcyBkYXRhIG9uIHRo ZSByYXJlIG9jY2FzaW9ucyB3aGVuIGl0IGlzIG5lZWRlZC4mcXVvdDs8YnI+DQo8YnI+DQpQbGVh c2UgbGV0IG1lIGtub3cgeW91ciB0aG91Z2h0cyBvbiB0aGlzIHByb3Bvc2VkIHRleHQgYnkgVHVl c2RheSBKdWx5IDIxPGJyPg0Kc3QuPGJyPg0KPGJyPg0KVGhhbmtzLDxicj4NCjxicj4NCkRhbm55 PGJyPg0KPGJyPg0KWzFdIDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL2lkL2RyYWZ0LWll dGYtc2FjbS12dWxuLXNjZW5hcmlvLTAwLnR4dCI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWQvZHJh ZnQtaWV0Zi1zYWNtLXZ1bG4tc2NlbmFyaW8tMDAudHh0PC9hPjxicj4NCjxicj4NCjxicj4NCjxi cj4NCipGcm9tOiogSmVyb21lIEF0aGlhcyBbPGEgaHJlZj0ibWFpbHRvOmF0aGlhc2plcm9tZUBn bWFpbC5jb20iPm1haWx0bzphdGhpYXNqZXJvbWVAZ21haWwuY29tPC9hPjxicj4NCiZsdDs8YSBo cmVmPSJtYWlsdG86YXRoaWFzamVyb21lQGdtYWlsLmNvbSI+YXRoaWFzamVyb21lQGdtYWlsLmNv bTwvYT4mZ3Q7XTxicj4NCipTZW50OiogVHVlc2RheSwgSnVuZSAwNywgMjAxNiAxMjowOCBBTTxi cj4NCipUbzoqIEhheW5lcywgRGFuICZsdDs8YSBocmVmPSJtYWlsdG86ZGhheW5lc0BtaXRyZS5v cmciPmRoYXluZXNAbWl0cmUub3JnPC9hPiZndDs8YnI+DQoqQ2M6KiA8YSBocmVmPSJtYWlsdG86 c2FjbUBpZXRmLm9yZyI+c2FjbUBpZXRmLm9yZzwvYT48YnI+DQoqU3ViamVjdDoqIFJlOiBbc2Fj bV0gRk9SIFJFVklFVzogVnVsbmVyYWJpbGl0eSBBc3Nlc3NtZW50IFNjZW5hcmlvIElzc3VlPGJy Pg0KIzUgLSBDaGFuZ2UgRGV0ZWN0aW9uIHdpdGggYW4gRW5kcG9pbnQgTWFuYWdlbWVudCBDYXBh YmlsaXR5PGJyPg0KPGJyPg0KVGhpcyByZXdyaXRlIGlzIGltaG8gYmV0dGVyPGJyPg0KVGhhbmtz PGJyPg0KPGJyPg0KT24gVHVlc2RheSwgNyBKdW5lIDIwMTYsIEhheW5lcywgRGFuICZsdDs8YSBo cmVmPSJtYWlsdG86ZGhheW5lc0BtaXRyZS5vcmciPmRoYXluZXNAbWl0cmUub3JnPC9hPiZndDsg d3JvdGU6PGJyPg0KPGJyPg0KQmFzZWQgb24gdGhlIGZlZWRiYWNrLCB3b3VsZCB0aGUgZm9sbG93 aW5nIHJld3JpdGUgb2YgdGhlIHBhcmFncmFwaCBoZWxwPGJyPg0KY2xhcmlmeSB0aGluZ3M/PGJy Pg0KPGJyPg0KJnF1b3Q7SW4gbWFueSBjYXNlcywgdGhlIGVuZHBvaW50IGluZm9ybWF0aW9uLi4u VW5kZXIgY2VydGFpbiBkZXBsb3ltZW50PGJyPg0Kc2NlbmFyaW9zLCBhczxicj4NCnRoZSB2dWxu ZXJhYmlsaXR5IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSBwcm9jZXNzZXMgdnVsbmVyYWJpbGl0eSBk ZXRlY3Rpb248YnI+DQpkYXRhIG92ZXI8YnI+DQp0aW1lLCB0aGUgZW5kcG9pbnQgbWFuYWdlbWVu dCBjYXBhYmlsaXR5IG1heSBsZWFybiBhYm91dCBhZGRpdGlvbmFsPGJyPg0KZGV0ZWN0aW9uPGJy Pg0KaW5mb3JtYXRpb24gdGhhdCBpdCB3YXMgcHJldmlvdXNseSBub3QgY29sbGVjdGluZyBhbmQg cHVzaCB0aGF0PGJyPg0KaW5mb3JtYXRpb24gdG8gdGhlPGJyPg0KdnVsbmVyYWJpbGl0eSBtYW5h Z2VtZW50IGNhcGFiaWxpdHkgd2hlcmUgaXQgY2FuIHN1cHBvcnQgZnV0dXJlPGJyPg0KYXNzZXNz bWVudHMuIFRoZTxicj4NCnB1c2hpbmcgb2YgdGhpcyBkYXRhIG1heSBwb3RlbnRpYWxseSBiZSBk cml2ZW4gYnkgc29tZSB0cmlnZ2VyIChlLmcuLDxicj4NCmNoYW5nZTxicj4NCmluIHNvZnR3YXJl IGludmVudG9yeSwgcG9saWN5LCBuZXR3b3JrIGNvbm5lY3Rpdml0eSBzdGF0dXMsIGV0Yy4pLiZx dW90Ozxicj4NCjxicj4NCldoaWxlIHRoaXMgcG90ZW50aWFsbHkgY3JlYXRlcyBhIGNvdXBsaW5n IGJldHdlZW4gdGhlIHZ1bG5lcmFiaWxpdHk8YnI+DQptYW5hZ2VtZW50IGNhcGFiaWxpdHkgYW5k IHRoZSBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxpdHksIGFzIHdyaXR0ZW4sIEk8YnI+DQp0 aGluayBpdCB3aWxsIGJlIGxlZnQgdG8gdGhlIGltcGxlbWVudGVyIG9mIHRob3NlIGNhcGFiaWxp dGllcyB0byBkZWNpZGUuPGJyPg0KSSB0aGluayB0aGUgcG9pbnQgaXMganVzdCB0aGF0IHlvdSBj b3VsZCBkbyBzb21ldGhpbmcgbGlrZSB0aGlzIHRvIGltcHJvdmU8YnI+DQp0aGUgdnVsbmVyYWJp bGl0eSBhc3Nlc3NtZW50Ljxicj4NCjxicj4NCklmIHdlIHN0aWxsIGRvbid0IGhhdmUgY29uc2Vu c3VzIG9uIHRoaXMsIGFub3RoZXIgYXBwcm9hY2ggbWlnaHQgYmUgdG88YnI+DQpqdXN0IHJlbW92 ZSB0aGlzIHRleHQgYWxsIHRvZ2V0aGVyIGFzIEkgZG9uJ3QgdGhpbmsgZG9pbmcgc28gd291bGQg cHJlY2x1ZGU8YnI+DQphbiBpbXBsZW1lbnRlciBmcm9tIHN1cHBvcnRpbmcgZnVuY3Rpb25hbGl0 eSBsaWtlIHRoaXMgaW4gdGhlaXIgcHJvZHVjdC48YnI+DQo8YnI+DQpUaG91Z2h0cz88YnI+DQo8 YnI+DQpUaGFua3MsPGJyPg0KPGJyPg0KRGFubnk8YnI+DQo8YnI+DQo8YnI+DQo8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4t Ym90dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPi0t LS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tPGJyPg0KRnJvbTogSmVyb21lIEF0aGlhcyBbPGEgaHJl Zj0ibWFpbHRvOmF0aGlhc2plcm9tZUBnbWFpbC5jb20iPm1haWx0bzphdGhpYXNqZXJvbWVAZ21h aWwuY29tPC9hPl08YnI+DQpTZW50OiBTYXR1cmRheSwgSnVuZSAwNCwgMjAxNiAyOjQ5IEFNPGJy Pg0KVG86IEhheW5lcywgRGFuICZsdDs8YSBocmVmPSJtYWlsdG86ZGhheW5lc0BtaXRyZS5vcmci PmRoYXluZXNAbWl0cmUub3JnPC9hPiZndDs8YnI+DQpDYzogPGEgaHJlZj0ibWFpbHRvOnNhY21A aWV0Zi5vcmciPnNhY21AaWV0Zi5vcmc8L2E+PGJyPg0KU3ViamVjdDogUmU6IFtzYWNtXSBGT1Ig UkVWSUVXOiBWdWxuZXJhYmlsaXR5IEFzc2Vzc21lbnQgU2NlbmFyaW8gSXNzdWU8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90Oyxz YW5zLXNlcmlmIj4jNTxicj4NCjxicj4NCjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1 b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTom cXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+LSBDaGFuZ2UgRGV0ZWN0aW9uIHdpdGgg YW4gRW5kcG9pbnQgTWFuYWdlbWVudCBDYXBhYmlsaXR5PGJyPg0KPGJyPg0KV2hpbGUgdGhlIHNj ZW5hcmlvIHByb3ZpZGVkIGJ5IEFkYW0gaXMgdmFsaWQsIGlmIHlvdXIgY29uY2VybiBpcyB0aGF0 PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRp Y2EmcXVvdDssc2Fucy1zZXJpZiI+JnF1b3Q7dGhlPGJyPg0KPGJyPg0KPG86cD48L286cD48L3Nw YW4+PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRv bTo1LjBwdCI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5pbmZvcm1h dGlvbiBiZXlvbmQgdGhhdCZxdW90OyB3b3VsZCBiZSAmcXVvdDtzdXBwbGVtZW50YWwgZW5kcG9p bnQ8YnI+DQppbmZvcm1hdGlvbiZxdW90Ozo8YnI+DQpJIGRvbid0IHNlZSBhIHNjZW5hcmlvIHdo ZXJlIGFuIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSB3b3VsZCBoYXZlPGJyPg0KdG8g cHVzaCAtc3VwcGxlbWVudGFsLSBpbmZvcm1hdGlvbiB0byB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nl c3NtZW50PGJyPg0KY2FwYWJpbGl0eSAod2hhdCB3b3VsZCB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nl c3NtZW50IGNhcGFiaWxpdHkgZG8gd2l0aDxicj4NCid1bmtub3duJyBhZGRpdGlvbmFsIGluZm9y bWF0aW9uKTxicj4NCjxicj4NClNvIEkgdGhpbmsgdGhlIGlzc3VlIGlzIHRvIGNoYW5nZSAmcXVv dDt0aGUgaW5mb3JtYXRpb24gYmV5b25kIHRoYXQmcXVvdDsgdG88bzpwPjwvbzpwPjwvc3Bhbj48 L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlm Ij5zb21ldGhpbmc8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90 ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1 b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPmxpa2UgJnF1b3Q7dGhlIHVwZGF0ZWQgaW5m b3JtYXRpb24mcXVvdDs8YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQoyMDE2LTA1LTE4IDE2OjE1IEdN VCYjNDM7MDM6MDAgSGF5bmVzLCBEYW4gJmx0OzxhIGhyZWY9Im1haWx0bzpkaGF5bmVzQG1pdHJl Lm9yZyI+ZGhheW5lc0BtaXRyZS5vcmc8L2E+Jmd0Ozo8YnI+DQo8YnI+DQo8bzpwPjwvbzpwPjwv c3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90 dG9tOjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPkR1cmlu ZyB5ZXN0ZXJkYXnigJlzIHZpcnR1YWwgaW50ZXJpbSBtZWV0aW5nLCB3ZSBkaXNjdXNzZWQgdmFy aW91cyBvcGVuPGJyPg0KaXNzdWVzIHdpdGggcmVzcGVjdCB0byB0aGUgVnVsbmVyYWJpbGl0eSBB c3Nlc3NtZW50IFNjZW5hcmlvIFsxXSBhcyBhPGJyPg0KcmVzdWx0IG9mIGZlZWRiYWNrIHRoYXQg d2UgcmVjZWl2ZWQgb24gdGhlIGRyYWZ0IHdoaWNoIHlvdSBjYW4gc2VlPGJyPg0KaGVyZSBbMl1b M10uICZuYnNwO1RoZSBzbGlkZeKAmXMgZnJvbSB0aGUgbWVldGluZyBjYW4gYmUgZm91bmQgaGVy ZSBbNF0uPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KT25lIGlzc3VlIHRoYXQgd2UgZGlkbuKAmXQg aGF2ZSBhIGNoYW5jZSB0byBkaXNjdXNzIGJlY2F1c2Ugd2UgcmFuIG91dDxicj4NCm9mIHRpbWUg d2FzIHdoZXRoZXIgb3Igbm90IGFuIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSBoYXMg dGhlPGJyPg0KYWJpbGl0eSB0byBwdXNoIHN1cHBsZW1lbnRhbCBlbmRwb2ludCBpbmZvcm1hdGlv biB0byB0aGUgdnVsbmVyYWJpbGl0eTxicj4NCmFzc2Vzc21lbnQgY2FwYWJpbGl0eS4gJm5ic3A7 VGhpcyBxdWVzdGlvbiBjYW1lIG91dCBvZiBhIHJldmlldyBvZiB0aGU8YnI+DQpmb2xsb3dpbmcg dGV4dCBmcm9tIHRoZSBWdWxuZXJhYmlsaXR5IEFzc2Vzc21lbnQgU2NlbmFyaW88bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hl bHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4oc3BlY2lmaWNhbGx5IHRoZTxicj4NCjxicj4NCjxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0 O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZiI+bGFzdCBzZW50ZW5jZSkuPGJyPg0KPGJyPg0KPG86cD48L286cD48L3NwYW4+PC9wPg0K PGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQo8YnI+DQo8YnI+ DQrigJxJbiBtYW55IGNhc2VzLCB0aGUgZW5kcG9pbnQgaW5mb3JtYXRpb24gbmVlZGVkIHRvIGRl dGVybWluZSBhbjxicj4NCmVuZHBvaW504oCZcyB2dWxuZXJhYmlsaXR5IHN0YXR1cyB3aWxsIGhh dmUgYmVlbiBwcmV2aW91c2x5PGJyPg0KPGJyPg0KY29sbGVjdGVkIGJ5IHRoZSBFbmRwb2ludCBN YW5hZ2VtZW50IENhcGFiaWxpdHkgYW5kIGF2YWlsYWJsZSBpbiBhPGJyPg0KUmVwb3NpdG9yeS4g SG93ZXZlciwgaW4gb3RoZXIgY2FzZXMsIHRoZSBuZWNlc3Nhcnk8YnI+DQo8YnI+DQplbmRwb2lu dCBpbmZvcm1hdGlvbiB3aWxsIG5vdCBiZSByZWFkaWx5IGF2YWlsYWJsZSBpbiBhIFJlcG9zaXRv cnkgYW5kPGJyPg0KYSB0YXJnZXRlZCBjb2xsZWN0aW9uIHdpbGwgYmUgbmVjZXNzYXJ5LiAmbmJz cDtPZiBjb3Vyc2UsPGJyPg0KPGJyPg0KYW4gaW1wbGVtZW50YXRpb24gb2YgYW4gZW5kcG9pbnQg bWFuYWdlbWVudCBjYXBhYmlsaXR5IG1heSBwcmVmZXIgdG88YnI+DQplbmFibGUgb3BlcmF0b3Jz IHRvIHBlcmZvcm0gdGFyZ2V0ZWQgY29sbGVjdGlvbiB1bmRlcjxicj4NCjxicj4NCmNlcnRhaW4g Y2lyY3Vtc3RhbmNlcywgZXZlbiB3aGVuIHN1ZmZpY2llbnQgaW5mb3JtYXRpb24gY2FuIGJlPGJy Pg0KcHJvdmlkZWQgYnkgdGhlIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSAoZS5nLiB0 aGVyZTxicj4NCjxicj4NCm1heSBiZSBmcmVzaG5lc3MgcmVxdWlyZW1lbnRzIGZvciBpbmZvcm1h dGlvbikuIFRhcmdldGVkIGNvbGxlY3Rpb24gb2Y8YnI+DQplbmRwb2ludCBpbmZvcm1hdGlvbiBm b3IgdGhlIHB1cnBvc2Ugb2YgdnVsbmVyYWJpbGl0eTxicj4NCjxicj4NCmFzc2Vzc21lbnQgZG9l cyBub3QgbmVjZXNzYXJpbHkgbmVlZCB0byBiZSBhIHB1bGwgYnkgdGhlIHZ1bG5lcmFiaWxpdHk8 YnI+DQphc3Nlc3NtZW50IGNhcGFiaWxpdHkuICZuYnNwO1VuZGVyIGNlcnRhaW4gZGVwbG95bWVu dDxicj4NCjxicj4NCnNjZW5hcmlvcywgb25jZSB0aGUgbmVjZXNzYXJ5IGRldGVjdGlvbiBpbmZv cm1hdGlvbiBpcyBrbm93biwgdGhlPGJyPg0KaW5mb3JtYXRpb24gYmV5b25kIHRoYXQgd2hpY2gg aXMgYXZhaWxhYmxlIGluIHRoZSBlbmRwb2ludDxicj4NCjxicj4NCm1hbmFnZW1lbnQgY2FwYWJp bGl0eSBjYW4gYmUgcHVzaGVkIHRvIHRoZSB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQ8YnI+DQpj YXBhYmlsaXR5IGJ5IHRoZSBlbmRwb2ludCB3aGVuZXZlciB0aGF0IGluZm9ybWF0aW9uPGJyPg0K PGJyPg0KY2hhbmdlcy7igJ08YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQpPdXIgbWFpbiBxdWVzdGlv biBpcyB3aGV0aGVyIG9yIG5vdCBwdXNoaW5nIGluZm9ybWF0aW9uIGZyb20gdGhlPGJyPg0KZW5k cG9pbnQgbWFuYWdlbWVudCBjYXBhYmlsaXR5IHRvIHRoZSB2dWxuZXJhYmlsaXR5IGFzc2Vzc21l bnQ8YnI+DQpjYXBhYmlsaXR5IGlzIGFjdHVhbGx5IHBvc3NpYmxlIGJlY2F1c2UgaXQgd291bGQg bm90IG5lY2Vzc2FyaWx5IGtub3c8YnI+DQp3aGF0IGluZm9ybWF0aW9uIGl0IG5lZWRzIHRvIHB1 c2ggcHJpb3IgdG8gdGhlIHNlcnZlciByZXF1ZXN0aW5nIGl0PGJyPg0KKGluIHdoaWNoIGNhc2Ug aXQgaXMgcHJvYmFibHkgY29uc2lkZXJlZCBhIHB1bGwpPyAmbmJzcDtJcyB0aGVyZSBhPGJyPg0K c2l0dWF0aW9uIHdoZXJlIHRoZSBlbmRwb2ludCB3b3VsZCBrbm93LCBpbiBhZHZhbmNlLCB3aGF0 IGFkZGl0aW9uYWw8YnI+DQppbmZvcm1hdGlvbiBpcyBuZWVkZWQgZm9yIGFuIGFzc2Vzc21lbnQg d2l0aG91dCBhIHNlcnZlciByZXF1ZXN0aW5nIGl0Pzxicj4NCjxicj4NCjxicj4NCjxicj4NCklm IHlvdSBoYXZlIGFueSB0aG91Z2h0cyBvbiB0aGlzIGlzc3VlLCBwbGVhc2UgcHJvdmlkZSBmZWVk YmFjayBieSBNYXk8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4zMXN0Ljxicj4NCjxicj4NCjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdp bi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+ V2UgYXJlIHBsYW5uaW5nIHRvIGhhdmUgYW4gdXBkYXRlZCB2ZXJzaW9uIG9mIHRoZSBzY2VuYXJp byBmb3IgSnVuZTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2tx dW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7 Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjh0aC48YnI+DQo8 YnI+DQo8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRv cDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0Ij4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4t dG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5 bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj48YnI+DQo8YnI+DQo8 YnI+DQpUaGFua3MsPGJyPg0KPGJyPg0KRGFubnk8YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQpbMV0g PGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2MvZHJhZnQtY29mZmluLXNh Y20tdnVsbi1zY2VuYXJpby8iPmh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0 LWNvZmZpbi1zYWNtLXZ1bG4tc2NlbmFyaW8vPC9hPjxicj4NCjxicj4NClsyXSA8YSBocmVmPSJo dHRwczovL2dpdGh1Yi5jb20vc2FjbXdnL3Z1bG5lcmFiaWxpdHktc2NlbmFyaW8vcHVsbC8zIj5o dHRwczovL2dpdGh1Yi5jb20vc2FjbXdnL3Z1bG5lcmFiaWxpdHktc2NlbmFyaW8vcHVsbC8zPC9h Pjxicj4NCjxicj4NClszXSA8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsLWFyY2hp dmUvd2ViL3NhY20vY3VycmVudC9tc2cwMzk1OC5odG1sIj5odHRwczovL3d3dy5pZXRmLm9yZy9t YWlsLWFyY2hpdmUvd2ViL3NhY20vY3VycmVudC9tc2cwMzk1OC5odG1sPC9hPjxicj4NCjxicj4N Cls0XSA8YSBocmVmPSJodHRwczovL2RhdGF0cmFja2VyLmlldGYub3JnL2RvYy9zbGlkZXMtaW50 ZXJpbS0yMDE2LXNhY20tMy0xLyI+aHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mvc2xp ZGVzLWludGVyaW0tMjAxNi1zYWNtLTMtMS88L2E+PGJyPg0KKGxvb2tzIGxpa2UgdGhlIHNsaWRl cyBhcmUgbm90IGF2YWlsYWJsZSBqdXN0IHlldCwgYnV0LCBJIHN1c3BlY3QgdGhleTxicj4NCnNo b3VsZCBiZTxicj4NCnNvb24pPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpzYWNtIG1haWxpbmcg bGlzdDxicj4NCjxhIGhyZWY9Im1haWx0bzpzYWNtQGlldGYub3JnIj5zYWNtQGlldGYub3JnPC9h Pjxicj4NCjxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2Fj bSI+aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zYWNtPC9hPjxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJN c29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4NCl9fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fPGJyPg0Kc2FjbSBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBo cmVmPSJtYWlsdG86c2FjbUBpZXRmLm9yZyI+c2FjbUBpZXRmLm9yZzwvYT48YnI+DQo8YSBocmVm PSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20iPmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2FjbTwvYT48YnI+DQo8YnI+DQo8YnI+DQo8YnI+ DQpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXzxicj4NCnNh Y20gbWFpbGluZyBsaXN0PGJyPg0KPGEgaHJlZj0ibWFpbHRvOnNhY21AaWV0Zi5vcmciPnNhY21A aWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9zYWNtIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY208 L2E+PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9w Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvYm9keT4NCjwvaHRtbD4NCg== --_000_BY2PR09MB107887CC0CC80F1687967863A52E0BY2PR09MB1078namp_-- From nobody Fri Jun 24 05:01:29 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 2BA0A12B004 for ; Fri, 24 Jun 2016 05:01:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id thB9HvzwRUCd for ; Fri, 24 Jun 2016 05:01:24 -0700 (PDT) Received: from mail-vk0-x234.google.com (mail-vk0-x234.google.com [IPv6:2607:f8b0:400c:c05::234]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F388412B016 for ; Fri, 24 Jun 2016 05:01:23 -0700 (PDT) Received: by mail-vk0-x234.google.com with SMTP id j2so146954141vkg.2 for ; Fri, 24 Jun 2016 05:01:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=oBYYAWxRU6y9soZBbHC+fyBtq8QGLRNB7r6UE0Rs3IU=; b=XCgwJMVV9tmzTCWTGZVrI0rkFO8TPZZrCskYBm7KIM/tHwcPdeWb8JsYiK3JYAf+a9 TMgL+rsRkjTx3fQE5AWfTbp7oO0hklBTP5Z89uVS5FNP451AFGxL2pzV7YSwCb1AI4Zc WKjakEuBP/Re22CZkhsFScGvJaocIWyFzzewS0CdaSqQM/AJoWBQ2yeSdE8N5z6EQEoX PhtxSv0+PV6jEyC2pdKM2t60xNA521jNVAaZr+WQOUlBf2zH2WyNYbNBNlp5WrMVfB3a IhTz3XzIp+rxkJWIdJh3bimLuOXyQIO9vkLq3aag1DQK2ZeykwdOhc3/ZoiMRFKoHwEr hFXQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:date :message-id:subject:from:to:cc; bh=oBYYAWxRU6y9soZBbHC+fyBtq8QGLRNB7r6UE0Rs3IU=; b=S9QFOh0S7CWmiI2dopvGEpmOrF7GYUNrz3TaVxvysgW9wB8vBzopiydc717bdbEB/f HR3RrZ/p6sAUUUR/jMzgSDMMSc9S55uvfq/EznFabhRvtaQ9LWcYc+VChYL6P2n4/qG+ Bu9ieZlv+aLOBvxV7HLgCDi1M+YWvJIipkmVjE36shP3wureZhVRjkyVn8v9329yl25B fPWdl7geX3c73ZPloIbNpN5LrYNPnm00JUfSRjCr692jvt+Ot7szLHJpCfvQ5BQhNMie AJoeDMUBshsIhbtW5mZ0ZIVOe6uYOVAAiVZD0etkH2uhQEftSTDqztYfovICMDLT+iB4 fOmA== X-Gm-Message-State: ALyK8tLCGUgVsUImLYSaL637U+8qx6Z+kMyBwmeKerXKw8gzL5oNVsOeOW/Dnpv14rVRv5/WyM01EM5Tpkf5cQ== MIME-Version: 1.0 X-Received: by 10.31.14.145 with SMTP id 139mr1941182vko.137.1466769682934; Fri, 24 Jun 2016 05:01:22 -0700 (PDT) Received: by 10.31.13.20 with HTTP; Fri, 24 Jun 2016 05:01:22 -0700 (PDT) In-Reply-To: References: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> Date: Fri, 24 Jun 2016 15:01:22 +0300 Message-ID: From: Jerome Athias To: "Haynes, Dan" Content-Type: multipart/alternative; boundary=001a11457312eb348e053604ed77 Archived-At: Cc: Ira McDonald , Adam Montville , "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jun 2016 12:01:28 -0000 --001a11457312eb348e053604ed77 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Sounds good for me Thank you for your engagement On Friday, 24 June 2016, Haynes, Dan wrote: > I just reviewed the latest version of the I-D and found only one > occurrence of =E2=80=9Cpre-assessment=E2=80=9D in Appendix I.3 which says= : > > > > =E2=80=9CWithin the SACM Architecture, the assessment task would be handl= ed by the > Evaluator component. If pre-assessment data is used, this would be store= d > on and obtained from a Data Store component.=E2=80=9D > > > > I think this could easily be re-written to remove =E2=80=9Cpre-assessment= =E2=80=9D and say: > > > > =E2=80=9CWithin the SACM Architecture, the assessment task would be handl= ed by the > Evaluator component. If previously collected data is used, it would be > obtained from a Data Store component.=E2=80=9D > > > > I think we could also rewrite the latest revision of the text (from my > Jun 16th message) to read as follows (which also makes use of SACM tasks > which was suggested at the last virtual interim meeting). > > > > "The collection of additional endpoint information for the purpose of > vulnerability assessment does not necessarily need to be a pull by the > vulnerability assessment capability. Over time, some new pieces of > information that are needed during common types of assessments might be > identified. An endpoint management capability can be reconfigured to have > this information delivered automatically. This avoids the need to trigger > additional Collection Tasks to gather this information during assessments= , > streamlining the assessment process. Likewise, it might be observed that > certain information delivered by an endpoint management capability is > rarely used. In this case, it might be useful to re-configure the endpoin= t > management capability to no longer collect this information to reduce > network and processing overhead. Instead, a new Collection Task can be > triggered to gather this data on the rare occasions when it is needed." > > Let me know what you think of these changes. If they seem reasonable, I > can integrate them into the next revision of the I-D and we can close out > this issue. > > > > Thanks, > > Danny > > > > *From:* Adam Montville [mailto:adam.w.montville@gmail.com > ] > *Sent:* Saturday, June 18, 2016 1:36 PM > *To:* Ira McDonald > > *Cc:* Haynes, Dan >; Jerome Athias < > athiasjerome@gmail.com > >; sacm@ietf.org > > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > #5 - Change Detection with an Endpoint Management Capability > > > > My concern does not stem from using the prefix =E2=80=9Cpre=E2=80=9D, as = much as it is > about the definition of the term assessment and how we=E2=80=99re using > pre-assessment often, which turns into =E2=80=9Ccollecting before the pro= cess of > collecting=E2=80=9D, which is confusing at best. > > > > The situation we are looking at feels very much like a cache miss. We > look for some information in one place and don=E2=80=99t find it, so we h= ave to go > fetch it from somewhere else. > > > > > > > > On Jun 18, 2016, at 8:41 AM, Ira McDonald > wrote: > > > > Hi, > > I share Adam's distaste for "pre-" anything. > > Perhaps "external collection" - defined as simply using any non-SACM > protocol to forward endpoint posture to a SACM Collector (in this case, > e.g., a NEA Server)? > > Cheers, > - Ira > > > Ira McDonald (Musician / Software Architect) > Co-Chair - TCG Trusted Mobility Solutions WG > Chair - Linux Foundation Open Printing WG > Secretary - IEEE-ISTO Printer Working Group > Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > IETF Designated Expert - IPP & Printer MIB > Blue Roof Music / High North Inc > http://sites.google.com/site/blueroofmusic > http://sites.google.com/site/highnorthinc > mailto: blueroofmusic@gmail.com > > Winter 579 Park Place Saline, MI 48176 734-944-0094 > Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 > > > On Fri, Jun 17, 2016 at 6:14 PM, Adam Montville < > adam.w.montville@gmail.com > > > wrote: > > > I really don=E2=80=99t want to be the one to bring this up, but are we fo= rgetting > our definition of =E2=80=9Cassessment=E2=80=9D? We borrow, and expand up= on, the term from > RFC5209. Here=E2=80=99s what our terminology draft says: > > Assessment: Defined in [RFC5209] as =E2=80=9Cthe process of collecting po= sture for > a set of capabilities on the endpoint (e.g. host-based firewall) such tha= t > the appropriate validators may evaluate the posture against compliance > policy.=E2=80=9D Within SACM the use of the term is expanded to support = other uses > of collected posture (e.g. reporting, network enforcement, vulnerability > detection, license management). The phrase =E2=80=9Cset of capabilities = on the > endpoint=E2=80=9D includes: hardware and software installed on the endpoi= nt. > > But, in the text proposed, and in general, we are talking about collectio= n > in the context of *pre*-assessment. So, a collection before =E2=80=9Cthe= process > of collecting posture=E2=80=A6=E2=80=9D, which seems off to me. > > Do we really mean to say, pre-evaluation? Or, do we need =E2=80=9Cpre=E2= =80=9D anything? > There is data available at the time of evaluation or there is not. If > there is not, we go grab it, or indicate that it needs to be grabbed duri= ng > the next collection opportunity, and we indicate whether it=E2=80=99s som= ething we > need to grab all the time, or just this once. > > Thoughts? > > Adam > > > > On Jun 16, 2016, at 12:15 PM, Haynes, Dan > wrote: > > Off list, I received a suggested update to this text from Charles. I was > hoping to discuss it at yesterday=E2=80=99s virtual interim meeting, howe= ver, I ran > out of time. As a result, I would like to propose the updated text as it > seemed clearer and more concise than what I had proposed, but, says the > same thing. > > The new text would read as follows (based on the updated draft posted on > 6/8/16 [1]). > > "Supplemental collection of endpoint information for the purposes of=E2= =80=A6Over > time, some new pieces of information that are needed during common types = of > assessments might be identified. Pre-assessment collection can be > reconfigured to have this information delivered automatically. This avoid= s > the need for regular supplemental collections to gather this information > during assessments, streamlining the assessment process. Likewise, it mig= ht > be observed that certain information delivered during pre-assessment > collection is rarely used. In this case, it might be useful to stop > pre-assessment collection of this information to reduce network and > processing overhead. Instead, supplemental collection can be used to gath= er > this data on the rare occasions when it is needed." > > Please let me know your thoughts on this proposed text by Tuesday July 21 > st. > > Thanks, > > Danny > > [1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt > > > > *From:* Jerome Athias [mailto:athiasjerome@gmail.com > > >] > *Sent:* Tuesday, June 07, 2016 12:08 AM > *To:* Haynes, Dan > > *Cc:* sacm@ietf.org > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > #5 - Change Detection with an Endpoint Management Capability > > This rewrite is imho better > Thanks > > On Tuesday, 7 June 2016, Haynes, Dan > wrote: > > Based on the feedback, would the following rewrite of the paragraph help > clarify things? > > "In many cases, the endpoint information...Under certain deployment > scenarios, as > the vulnerability management capability processes vulnerability detection > data over > time, the endpoint management capability may learn about additional > detection > information that it was previously not collecting and push that > information to the > vulnerability management capability where it can support future > assessments. The > pushing of this data may potentially be driven by some trigger (e.g., > change > in software inventory, policy, network connectivity status, etc.)." > > While this potentially creates a coupling between the vulnerability > management capability and the endpoint management capability, as written,= I > think it will be left to the implementer of those capabilities to decide. > I think the point is just that you could do something like this to improv= e > the vulnerability assessment. > > If we still don't have consensus on this, another approach might be to > just remove this text all together as I don't think doing so would preclu= de > an implementer from supporting functionality like this in their product. > > Thoughts? > > Thanks, > > Danny > > > -----Original Message----- > From: Jerome Athias [mailto:athiasjerome@gmail.com > ] > Sent: Saturday, June 04, 2016 2:49 AM > To: Haynes, Dan > > Cc: sacm@ietf.org > Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > > #5 > > - Change Detection with an Endpoint Management Capability > > While the scenario provided by Adam is valid, if your concern is that > > "the > > information beyond that" would be "supplemental endpoint > information": > I don't see a scenario where an endpoint management capability would have > to push -supplemental- information to the vulnerability assessment > capability (what would the vulnerability assessment capability do with > 'unknown' additional information) > > So I think the issue is to change "the information beyond that" to > > something > > like "the updated information" > > > > 2016-05-18 16:15 GMT+03:00 Haynes, Dan >: > > During yesterday=E2=80=99s virtual interim meeting, we discussed various = open > issues with respect to the Vulnerability Assessment Scenario [1] as a > result of feedback that we received on the draft which you can see > here [2][3]. The slide=E2=80=99s from the meeting can be found here [4]. > > > > One issue that we didn=E2=80=99t have a chance to discuss because we ran = out > of time was whether or not an endpoint management capability has the > ability to push supplemental endpoint information to the vulnerability > assessment capability. This question came out of a review of the > following text from the Vulnerability Assessment Scenario > > (specifically the > > last sentence). > > > > > =E2=80=9CIn many cases, the endpoint information needed to determine an > endpoint=E2=80=99s vulnerability status will have been previously > > collected by the Endpoint Management Capability and available in a > Repository. However, in other cases, the necessary > > endpoint information will not be readily available in a Repository and > a targeted collection will be necessary. Of course, > > an implementation of an endpoint management capability may prefer to > enable operators to perform targeted collection under > > certain circumstances, even when sufficient information can be > provided by the endpoint management capability (e.g. there > > may be freshness requirements for information). Targeted collection of > endpoint information for the purpose of vulnerability > > assessment does not necessarily need to be a pull by the vulnerability > assessment capability. Under certain deployment > > scenarios, once the necessary detection information is known, the > information beyond that which is available in the endpoint > > management capability can be pushed to the vulnerability assessment > capability by the endpoint whenever that information > > changes.=E2=80=9D > > > > Our main question is whether or not pushing information from the > endpoint management capability to the vulnerability assessment > capability is actually possible because it would not necessarily know > what information it needs to push prior to the server requesting it > (in which case it is probably considered a pull)? Is there a > situation where the endpoint would know, in advance, what additional > information is needed for an assessment without a server requesting it? > > > > If you have any thoughts on this issue, please provide feedback by May > > 31st. > > We are planning to have an updated version of the scenario for June > > 8th. > > > > > Thanks, > > Danny > > > > [1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ > > [2] https://github.com/sacmwg/vulnerability-scenario/pull/3 > > [3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html > > [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ > (looks like the slides are not available just yet, but, I suspect they > should be > soon) > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > --001a11457312eb348e053604ed77 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Sounds good for me
Thank you for your engagement=C2=A0
=
On Friday, 24 June 2016, Haynes, Dan <dhaynes@mitre.org> wrote:

I just reviewed the latest version of= the I-D and found only one occurrence of =E2=80=9Cpre-assessment=E2=80=9D = in Appendix I.3 which says:

=C2=A0

=E2=80=9CW= ithin the SACM Architecture, the assessment task would be handled by the Ev= aluator component.=C2=A0 If pre-assessment data is used, this would be stored on and obtained from a Data Store component.=E2=80=9D

=C2=A0

I think this could easily be re-writt= en to remove =E2=80=9Cpre-assessment=E2=80=9D and say:=

=C2=A0

=E2=80=9CW= ithin the SACM Architecture, the assessment task would be handled by the Ev= aluator component. If previously collected data is used, it would be obtained from a Data Store component.=E2=80=9D

=C2=A0

I think we could also rewrite the lat= est revision of the text (from my Jun 16th message) to read as follows (which also makes use of SACM task= s which was suggested at the last virtual interim meeting).

=C2=A0

"The collection of additional endpoint information for = the purpose of vulnerability assessment does not necessarily need to be a p= ull by the vulnerability assessment capability.=C2=A0 Over time, some new pieces of information that are needed during common ty= pes of assessments might be identified. An endpoint management capability c= an be reconfigured to have this information delivered automatically. This a= voids the need to trigger additional Collection Tasks to gather this information during assessments, streamlini= ng the assessment process. Likewise, it might be observed that certain info= rmation delivered by an endpoint management capability is rarely used. In t= his case, it might be useful to re-configure the endpoint management capability to no longer collect this = information to reduce network and processing overhead. Instead, a new Colle= ction Task can be triggered to gather this data on the rare occasions when = it is needed."

Let me know what you think of these c= hanges.=C2=A0 If they seem reasonable, I can integrate them into the next r= evision of the I-D and we can close out this issue.

=C2=A0

Thanks,

Danny

=C2=A0

From: Adam Montville [mailto:adam.w.montville@gmail.com]
Sent: Saturday, June 18, 2016 1:36 PM
To: Ira McDonald <blueroofmusic@gmail.= com>
Cc: Haynes, Dan <dhaynes@mitre.org>; = Jerome Athias <athiasjerome@gmail.com>;= sacm@ietf.org
Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Is= sue #5 - Change Detection with an Endpoint Management Capability<= /u>

=C2=A0

My concern does not stem from using the prefix =E2= =80=9Cpre=E2=80=9D, as much as it is about the definition of the term asses= sment and how we=E2=80=99re using pre-assessment often, which turns into = =E2=80=9Ccollecting before the process of collecting=E2=80=9D, which is con= fusing at best.

=C2=A0

The situation we are looking at feels very much like= a cache miss.=C2=A0 We look for some information in one place and don=E2= =80=99t find it, so we have to go fetch it from somewhere else.

=C2=A0

=C2=A0

=C2=A0

On Jun 18, 2016, at 8:41 AM, Ira McDonald <blueroofmusic@gmail.com> wrote:

=C2=A0

Hi,

I share Adam's distaste for "pre-" anything.

Perhaps "external collection" - defined as simply using any non-S= ACM
protocol to forward endpoint posture to a SACM Collector (in this case,
e.g., a NEA Server)?

Cheers,
- Ira


Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto:=C2=A0blueroofmusic= @gmail.com
Winter =C2=A0579 Park Place =C2=A0Saline, MI =C2=A048176 =C2=A0734-944-0094=
Summer =C2=A0PO Box 221 =C2=A0Grand Marais, MI 49839 =C2=A0906-494-2434


On Fri, Jun 17, 2016 at 6:14 PM, Adam Montville <adam.w.montville@gmail.com>
wrote:


I really don=E2=80=99t want to be the one to bring= this up, but are we forgetting
our definition of =E2=80=9Cassessment=E2=80=9D?=C2=A0 We borrow, and expand= upon, the term from
RFC5209.=C2=A0 Here=E2=80=99s what our terminology draft says:

Assessment: Defined in [RFC5209] as =E2=80=9Cthe process of collecting post= ure for
a set of capabilities on the endpoint (e.g. host-based firewall) such that<= br> the appropriate validators may evaluate the posture against compliance
policy.=E2=80=9D =C2=A0Within SACM the use of the term is expanded to suppo= rt other uses
of collected posture (e.g. reporting, network enforcement, vulnerability detection, license management).=C2=A0 The phrase =E2=80=9Cset of capabiliti= es on the
endpoint=E2=80=9D includes: hardware and software installed on the endpoint= .

But, in the text proposed, and in general, we are talking about collection<= br> in the context of *pre*-assessment.=C2=A0 So, a collection before =E2=80=9C= the process
of collecting posture=E2=80=A6=E2=80=9D, which seems off to me.

Do we really mean to say, pre-evaluation?=C2=A0 Or, do we need =E2=80=9Cpre= =E2=80=9D anything?
There is data available at the time of evaluation or there is not.=C2=A0 If=
there is not, we go grab it, or indicate that it needs to be grabbed during=
the next collection opportunity, and we indicate whether it=E2=80=99s somet= hing we
need to grab all the time, or just this once.

Thoughts?

Adam



On Jun 16, 2016, at 12:15 PM, Haynes, Dan <dhaynes@= mitre.org> wrote:

Off list, I received a suggested update to this text from Charles.=C2=A0 I = was
hoping to discuss it at yesterday=E2=80=99s virtual interim meeting, howeve= r, I ran
out of time.=C2=A0 As a result, I would like to propose the updated text as= it
seemed clearer and more concise than what I had proposed, but, says the
same thing.

The new text would read as follows (based on the updated draft posted on 6/8/16 [1]).

"Supplemental collection of endpoint information for the purposes of= =E2=80=A6Over
time, some new pieces of information that are needed during common types of=
assessments might be identified. Pre-assessment collection can be
reconfigured to have this information delivered automatically. This avoids<= br> the need for regular supplemental collections to gather this information during assessments, streamlining the assessment process. Likewise, it might=
be observed that certain information delivered during pre-assessment
collection is rarely used. In this case, it might be useful to stop
pre-assessment collection of this information to reduce network and
processing overhead. Instead, supplemental collection can be used to gather=
this data on the rare occasions when it is needed."

Please let me know your thoughts on this proposed text by Tuesday July 21 st.

Thanks,

Danny

[1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-0= 0.txt



*From:* Jerome Athias [mailto:athiasjerome@gmail.= com
<athiasjerome@gmail.com>]
*Sent:* Tuesday, June 07, 2016 12:08 AM
*To:* Haynes, Dan <dhaynes@mitre.org>
*Cc:* sacm@ietf.org
*Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability

This rewrite is imho better
Thanks

On Tuesday, 7 June 2016, Haynes, Dan <dhaynes@mitre= .org> wrote:

Based on the feedback, would the following rewrite of the paragraph help clarify things?

"In many cases, the endpoint information...Under certain deployment scenarios, as
the vulnerability management capability processes vulnerability detection data over
time, the endpoint management capability may learn about additional
detection
information that it was previously not collecting and push that
information to the
vulnerability management capability where it can support future
assessments. The
pushing of this data may potentially be driven by some trigger (e.g.,
change
in software inventory, policy, network connectivity status, etc.)."
While this potentially creates a coupling between the vulnerability
management capability and the endpoint management capability, as written, I=
think it will be left to the implementer of those capabilities to decide. I think the point is just that you could do something like this to improve<= br> the vulnerability assessment.

If we still don't have consensus on this, another approach might be to<= br> just remove this text all together as I don't think doing so would prec= lude
an implementer from supporting functionality like this in their product.
Thoughts?

Thanks,

Danny


-----Original Message-----
From: Jerome Athias [mailto:athiasjerome@gmail.co= m]
Sent: Saturday, June 04, 2016 2:49 AM
To: Haynes, Dan <dhaynes@mitre.org>
Cc: sacm@ietf.org
Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue<= /u>

#5

- Change Detection with an Endpoint Management Cap= ability

While the scenario provided by Adam is valid, if your concern is that

"the

information beyond that" would be "suppl= emental endpoint
information":
I don't see a scenario where an endpoint management capability would ha= ve
to push -supplemental- information to the vulnerability assessment
capability (what would the vulnerability assessment capability do with
'unknown' additional information)

So I think the issue is to change "the information beyond that" t= o

something

like "the updated information"



2016-05-18 16:15 GMT+03:00 Haynes, Dan <dhaynes@mit= re.org>:

During yesterday=E2=80=99s virtual interim meeting= , we discussed various open
issues with respect to the Vulnerability Assessment Scenario [1] as a
result of feedback that we received on the draft which you can see
here [2][3].=C2=A0 The slide=E2=80=99s from the meeting can be found here [= 4].



One issue that we didn=E2=80=99t have a chance to discuss because we ran ou= t
of time was whether or not an endpoint management capability has the
ability to push supplemental endpoint information to the vulnerability
assessment capability.=C2=A0 This question came out of a review of the
following text from the Vulnerability Assessment Scenario

(specifically the

last sentence).




=E2=80=9CIn many cases, the endpoint information needed to determine an
endpoint=E2=80=99s vulnerability status will have been previously

collected by the Endpoint Management Capability and available in a
Repository. However, in other cases, the necessary

endpoint information will not be readily available in a Repository and
a targeted collection will be necessary.=C2=A0 Of course,

an implementation of an endpoint management capability may prefer to
enable operators to perform targeted collection under

certain circumstances, even when sufficient information can be
provided by the endpoint management capability (e.g. there

may be freshness requirements for information). Targeted collection of
endpoint information for the purpose of vulnerability

assessment does not necessarily need to be a pull by the vulnerability
assessment capability.=C2=A0 Under certain deployment

scenarios, once the necessary detection information is known, the
information beyond that which is available in the endpoint

management capability can be pushed to the vulnerability assessment
capability by the endpoint whenever that information

changes.=E2=80=9D



Our main question is whether or not pushing information from the
endpoint management capability to the vulnerability assessment
capability is actually possible because it would not necessarily know
what information it needs to push prior to the server requesting it
(in which case it is probably considered a pull)?=C2=A0 Is there a
situation where the endpoint would know, in advance, what additional
information is needed for an assessment without a server requesting it?



If you have any thoughts on this issue, please provide feedback by May

31st.

We are planning to have an updated version of the = scenario for June

8th.




Thanks,

Danny



[1] https://datatracker.ietf.org/doc/draft-coffin-sacm= -vuln-scenario/

[2] https://github.com/sacmwg/vulnerability-scenario/pull/3<= br>
[3] https://www.ietf.org/mail-archive/web/sacm/current/= msg03958.html

[4] https://datatracker.ietf.org/doc/slides-interim-2016-= sacm-3-1/
(looks like the slides are not available just yet, but, I suspect they
should be
soon)




_______________________________________________
sacm mailing list
sacm@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/sacm


_______________________________________________
sacm mailing list
sacm@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/sacm



_______________________________________________
sacm mailing list
sacm@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/sacm

=C2=A0

--001a11457312eb348e053604ed77-- From nobody Fri Jun 24 05:43:35 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E0B5712D787 for ; Fri, 24 Jun 2016 05:43:33 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nt1VGYKA_xuX for ; Fri, 24 Jun 2016 05:43:28 -0700 (PDT) Received: from mail-io0-x233.google.com (mail-io0-x233.google.com [IPv6:2607:f8b0:4001:c06::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C5E0112D618 for ; Fri, 24 Jun 2016 05:43:27 -0700 (PDT) Received: by mail-io0-x233.google.com with SMTP id s63so94272873ioi.3 for ; Fri, 24 Jun 2016 05:43:27 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=zAI9BO94j3+ZXcIpPfZQ9Qw5E8Khp0sZHugifnp9Toc=; b=UTWq5XU6JjFWzZMMbHk+ShGP3WCAkxaXpPl3HYJ1R7tzxkoA0NkrS921ZsFelbplev yGvUZDdg2ByxLN3lAgKHDvBCzyUFwD4NovVQzYIuV/UkKdbzKf4zqUfE1KuN2MyLJ3OV dY85Ki8UiyNWL5bMeLC4C+MJ6fldPSFACFUUA2M2Du2k5Rv44J0wXNxu5B8TFhzu+c9A 1B80yDH1lyrOWhC2uf5V30JVxQlJ652F/rjq+z9/rBs/3UQpDu8d6PxCHGnIHEKyQdvb 8H6g1tpReFo/nuydLD/vMG9C0FmJ2VKijtoRnXnDOaJJ94pW9DvA27jwUQ5Jn4YOUZB2 9sBA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=zAI9BO94j3+ZXcIpPfZQ9Qw5E8Khp0sZHugifnp9Toc=; b=cwkxOOK01DgcHbebNGa3/6CkVmQbmb2aquL6PlPjiFd8VzTYv2AP7FBSsWlo9Ht6yC aznOvQxO26MuuydwozUm0Scv65pfde92z1ZQdYz5pbGc34TwZ74TPUMlQ7NlsUqLZi72 07HUOJEUH2ft2vkGs4enVispRuSwjd/wOfTI+nbzFgZrLg95L/Wr2/KuayUbw2rsz6za RChuCa/cgOPZPAia+6PtwFu/K2g7n82G/6XWyKJjg5Lpg4lM6ttpBjsfzZON0eL9kZq5 FwKJzcfh+Qbut2XZwK90txcUkk7qI4SXuxaU356Vocp4LdbRMNZyNQRMK8vu1hVs5zNh 0rTw== X-Gm-Message-State: ALyK8tIBLlWIMrH39tkMW7NkYwZmxkLQzediZi8kV2pm8jPE6t+u5Y0yLPCjVr2ytgFx6qIIhA31SykpdHpyYw== X-Received: by 10.107.55.132 with SMTP id e126mr5774535ioa.35.1466772206985; Fri, 24 Jun 2016 05:43:26 -0700 (PDT) MIME-Version: 1.0 Received: by 10.107.201.194 with HTTP; Fri, 24 Jun 2016 05:43:07 -0700 (PDT) In-Reply-To: References: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> From: Ira McDonald Date: Fri, 24 Jun 2016 08:43:07 -0400 Message-ID: To: "Haynes, Dan" , Ira McDonald Content-Type: multipart/alternative; boundary=001a114ab7d65d267f0536058408 Archived-At: Cc: Jerome Athias , Adam Montville , "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jun 2016 12:43:34 -0000 --001a114ab7d65d267f0536058408 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi Danny, +1 Cheers, - Ira Ira McDonald (Musician / Software Architect) Co-Chair - TCG Trusted Mobility Solutions WG Chair - Linux Foundation Open Printing WG Secretary - IEEE-ISTO Printer Working Group Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG IETF Designated Expert - IPP & Printer MIB Blue Roof Music / High North Inc http://sites.google.com/site/blueroofmusic http://sites.google.com/site/highnorthinc mailto: blueroofmusic@gmail.com Winter 579 Park Place Saline, MI 48176 734-944-0094 Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 On Fri, Jun 24, 2016 at 7:19 AM, Haynes, Dan wrote: > I just reviewed the latest version of the I-D and found only one > occurrence of =E2=80=9Cpre-assessment=E2=80=9D in Appendix I.3 which says= : > > > > =E2=80=9CWithin the SACM Architecture, the assessment task would be handl= ed by the > Evaluator component. If pre-assessment data is used, this would be store= d > on and obtained from a Data Store component.=E2=80=9D > > > > I think this could easily be re-written to remove =E2=80=9Cpre-assessment= =E2=80=9D and say: > > > > =E2=80=9CWithin the SACM Architecture, the assessment task would be handl= ed by the > Evaluator component. If previously collected data is used, it would be > obtained from a Data Store component.=E2=80=9D > > > > I think we could also rewrite the latest revision of the text (from my > Jun 16th message) to read as follows (which also makes use of SACM tasks > which was suggested at the last virtual interim meeting). > > > > "The collection of additional endpoint information for the purpose of > vulnerability assessment does not necessarily need to be a pull by the > vulnerability assessment capability. Over time, some new pieces of > information that are needed during common types of assessments might be > identified. An endpoint management capability can be reconfigured to have > this information delivered automatically. This avoids the need to trigger > additional Collection Tasks to gather this information during assessments= , > streamlining the assessment process. Likewise, it might be observed that > certain information delivered by an endpoint management capability is > rarely used. In this case, it might be useful to re-configure the endpoin= t > management capability to no longer collect this information to reduce > network and processing overhead. Instead, a new Collection Task can be > triggered to gather this data on the rare occasions when it is needed." > > Let me know what you think of these changes. If they seem reasonable, I > can integrate them into the next revision of the I-D and we can close out > this issue. > > > > Thanks, > > Danny > > > > *From:* Adam Montville [mailto:adam.w.montville@gmail.com] > *Sent:* Saturday, June 18, 2016 1:36 PM > *To:* Ira McDonald > *Cc:* Haynes, Dan ; Jerome Athias < > athiasjerome@gmail.com>; sacm@ietf.org > > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > #5 - Change Detection with an Endpoint Management Capability > > > > My concern does not stem from using the prefix =E2=80=9Cpre=E2=80=9D, as = much as it is > about the definition of the term assessment and how we=E2=80=99re using > pre-assessment often, which turns into =E2=80=9Ccollecting before the pro= cess of > collecting=E2=80=9D, which is confusing at best. > > > > The situation we are looking at feels very much like a cache miss. We > look for some information in one place and don=E2=80=99t find it, so we h= ave to go > fetch it from somewhere else. > > > > > > > > On Jun 18, 2016, at 8:41 AM, Ira McDonald wrote= : > > > > Hi, > > I share Adam's distaste for "pre-" anything. > > Perhaps "external collection" - defined as simply using any non-SACM > protocol to forward endpoint posture to a SACM Collector (in this case, > e.g., a NEA Server)? > > Cheers, > - Ira > > > Ira McDonald (Musician / Software Architect) > Co-Chair - TCG Trusted Mobility Solutions WG > Chair - Linux Foundation Open Printing WG > Secretary - IEEE-ISTO Printer Working Group > Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > IETF Designated Expert - IPP & Printer MIB > Blue Roof Music / High North Inc > http://sites.google.com/site/blueroofmusic > http://sites.google.com/site/highnorthinc > mailto: blueroofmusic@gmail.com > Winter 579 Park Place Saline, MI 48176 734-944-0094 > Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 > > > On Fri, Jun 17, 2016 at 6:14 PM, Adam Montville < > adam.w.montville@gmail.com> > wrote: > > > I really don=E2=80=99t want to be the one to bring this up, but are we fo= rgetting > our definition of =E2=80=9Cassessment=E2=80=9D? We borrow, and expand up= on, the term from > RFC5209. Here=E2=80=99s what our terminology draft says: > > Assessment: Defined in [RFC5209] as =E2=80=9Cthe process of collecting po= sture for > a set of capabilities on the endpoint (e.g. host-based firewall) such tha= t > the appropriate validators may evaluate the posture against compliance > policy.=E2=80=9D Within SACM the use of the term is expanded to support = other uses > of collected posture (e.g. reporting, network enforcement, vulnerability > detection, license management). The phrase =E2=80=9Cset of capabilities = on the > endpoint=E2=80=9D includes: hardware and software installed on the endpoi= nt. > > But, in the text proposed, and in general, we are talking about collectio= n > in the context of *pre*-assessment. So, a collection before =E2=80=9Cthe= process > of collecting posture=E2=80=A6=E2=80=9D, which seems off to me. > > Do we really mean to say, pre-evaluation? Or, do we need =E2=80=9Cpre=E2= =80=9D anything? > There is data available at the time of evaluation or there is not. If > there is not, we go grab it, or indicate that it needs to be grabbed duri= ng > the next collection opportunity, and we indicate whether it=E2=80=99s som= ething we > need to grab all the time, or just this once. > > Thoughts? > > Adam > > > > On Jun 16, 2016, at 12:15 PM, Haynes, Dan wrote: > > Off list, I received a suggested update to this text from Charles. I was > hoping to discuss it at yesterday=E2=80=99s virtual interim meeting, howe= ver, I ran > out of time. As a result, I would like to propose the updated text as it > seemed clearer and more concise than what I had proposed, but, says the > same thing. > > The new text would read as follows (based on the updated draft posted on > 6/8/16 [1]). > > "Supplemental collection of endpoint information for the purposes of=E2= =80=A6Over > time, some new pieces of information that are needed during common types = of > assessments might be identified. Pre-assessment collection can be > reconfigured to have this information delivered automatically. This avoid= s > the need for regular supplemental collections to gather this information > during assessments, streamlining the assessment process. Likewise, it mig= ht > be observed that certain information delivered during pre-assessment > collection is rarely used. In this case, it might be useful to stop > pre-assessment collection of this information to reduce network and > processing overhead. Instead, supplemental collection can be used to gath= er > this data on the rare occasions when it is needed." > > Please let me know your thoughts on this proposed text by Tuesday July 21 > st. > > Thanks, > > Danny > > [1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt > > > > *From:* Jerome Athias [mailto:athiasjerome@gmail.com > > ] > *Sent:* Tuesday, June 07, 2016 12:08 AM > *To:* Haynes, Dan > *Cc:* sacm@ietf.org > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > #5 - Change Detection with an Endpoint Management Capability > > This rewrite is imho better > Thanks > > On Tuesday, 7 June 2016, Haynes, Dan wrote: > > Based on the feedback, would the following rewrite of the paragraph help > clarify things? > > "In many cases, the endpoint information...Under certain deployment > scenarios, as > the vulnerability management capability processes vulnerability detection > data over > time, the endpoint management capability may learn about additional > detection > information that it was previously not collecting and push that > information to the > vulnerability management capability where it can support future > assessments. The > pushing of this data may potentially be driven by some trigger (e.g., > change > in software inventory, policy, network connectivity status, etc.)." > > While this potentially creates a coupling between the vulnerability > management capability and the endpoint management capability, as written,= I > think it will be left to the implementer of those capabilities to decide. > I think the point is just that you could do something like this to improv= e > the vulnerability assessment. > > If we still don't have consensus on this, another approach might be to > just remove this text all together as I don't think doing so would preclu= de > an implementer from supporting functionality like this in their product. > > Thoughts? > > Thanks, > > Danny > > > -----Original Message----- > From: Jerome Athias [mailto:athiasjerome@gmail.com > ] > Sent: Saturday, June 04, 2016 2:49 AM > To: Haynes, Dan > Cc: sacm@ietf.org > Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue > > #5 > > - Change Detection with an Endpoint Management Capability > > While the scenario provided by Adam is valid, if your concern is that > > "the > > information beyond that" would be "supplemental endpoint > information": > I don't see a scenario where an endpoint management capability would have > to push -supplemental- information to the vulnerability assessment > capability (what would the vulnerability assessment capability do with > 'unknown' additional information) > > So I think the issue is to change "the information beyond that" to > > something > > like "the updated information" > > > > 2016-05-18 16:15 GMT+03:00 Haynes, Dan : > > During yesterday=E2=80=99s virtual interim meeting, we discussed various = open > issues with respect to the Vulnerability Assessment Scenario [1] as a > result of feedback that we received on the draft which you can see > here [2][3]. The slide=E2=80=99s from the meeting can be found here [4]. > > > > One issue that we didn=E2=80=99t have a chance to discuss because we ran = out > of time was whether or not an endpoint management capability has the > ability to push supplemental endpoint information to the vulnerability > assessment capability. This question came out of a review of the > following text from the Vulnerability Assessment Scenario > > (specifically the > > last sentence). > > > > > =E2=80=9CIn many cases, the endpoint information needed to determine an > endpoint=E2=80=99s vulnerability status will have been previously > > collected by the Endpoint Management Capability and available in a > Repository. However, in other cases, the necessary > > endpoint information will not be readily available in a Repository and > a targeted collection will be necessary. Of course, > > an implementation of an endpoint management capability may prefer to > enable operators to perform targeted collection under > > certain circumstances, even when sufficient information can be > provided by the endpoint management capability (e.g. there > > may be freshness requirements for information). Targeted collection of > endpoint information for the purpose of vulnerability > > assessment does not necessarily need to be a pull by the vulnerability > assessment capability. Under certain deployment > > scenarios, once the necessary detection information is known, the > information beyond that which is available in the endpoint > > management capability can be pushed to the vulnerability assessment > capability by the endpoint whenever that information > > changes.=E2=80=9D > > > > Our main question is whether or not pushing information from the > endpoint management capability to the vulnerability assessment > capability is actually possible because it would not necessarily know > what information it needs to push prior to the server requesting it > (in which case it is probably considered a pull)? Is there a > situation where the endpoint would know, in advance, what additional > information is needed for an assessment without a server requesting it? > > > > If you have any thoughts on this issue, please provide feedback by May > > 31st. > > We are planning to have an updated version of the scenario for June > > 8th. > > > > > Thanks, > > Danny > > > > [1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ > > [2] https://github.com/sacmwg/vulnerability-scenario/pull/3 > > [3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html > > [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ > (looks like the slides are not available just yet, but, I suspect they > should be > soon) > > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm > > > --001a114ab7d65d267f0536058408 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Hi Danny,

+1

Cheers,
- Ira


Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted = Mobility Solutions WG
Chair - Linux Foundation Open Printing WG
Secre= tary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet= Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
= Blue Roof Music / High North Inc
http://si= tes.google.com/site/blueroofmusic
http:/= /sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
Winter= =C2=A0 579 Park Place=C2=A0 Saline, MI=C2=A0 48176=C2=A0 734-944-0094
Su= mmer=C2=A0 PO Box 221=C2=A0 Grand Marais, MI 49839=C2=A0 906-494-2434
<= div style=3D"display:inline">

On Fri, Jun 24, 2016 at 7:19 AM, Haynes, Dan= <dhaynes@mitre.org> wrote:

I just reviewed the latest version of= the I-D and found only one occurrence of =E2=80=9Cpre-assessment=E2=80=9D = in Appendix I.3 which says:

=C2=A0

=E2=80=9CW= ithin the SACM Architecture, the assessment task would be handled by the Ev= aluator component.=C2=A0 If pre-assessment data is used, this would be stored on and obtained from a Data Store component.=E2=80=9D

=C2=A0

I think this could easily be re-writt= en to remove =E2=80=9Cpre-assessment=E2=80=9D and say:=

=C2=A0

=E2=80=9CW= ithin the SACM Architecture, the assessment task would be handled by the Ev= aluator component. If previously collected data is used, it would be obtained from a Data Store component.=E2=80=9D

=C2=A0

I think we could also rewrite the lat= est revision of the text (from my Jun 16th message) to read as follows (which also makes use of SACM task= s which was suggested at the last virtual interim meeting).

=C2=A0

"The collection of additional endpoint information for = the purpose of vulnerability assessment does not necessarily need to be a p= ull by the vulnerability assessment capability.=C2=A0 Over time, some new pieces of information that are needed during common ty= pes of assessments might be identified. An endpoint management capability c= an be reconfigured to have this information delivered automatically. This a= voids the need to trigger additional Collection Tasks to gather this information during assessments, streamlini= ng the assessment process. Likewise, it might be observed that certain info= rmation delivered by an endpoint management capability is rarely used. In t= his case, it might be useful to re-configure the endpoint management capability to no longer collect this = information to reduce network and processing overhead. Instead, a new Colle= ction Task can be triggered to gather this data on the rare occasions when = it is needed."

Let me know what you think of these c= hanges.=C2=A0 If they seem reasonable, I can integrate them into the next r= evision of the I-D and we can close out this issue.

=C2=A0

Thanks,

Danny

=C2=A0

From: Adam Montville [mailto:adam.w.montville@g= mail.com]
Sent: Saturday, June 18, 2016 1:36 PM
To: Ira McDonald <blueroofmusic@gmail.com>
Cc: Haynes, Dan <dhaynes@mitre.org>; Jerome Athias <athiasjerome@gmail.com>; sacm@ietf.org


Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Is= sue #5 - Change Detection with an Endpoint Management Capability<= /u>

=C2=A0

My concern does not stem from using the prefix =E2= =80=9Cpre=E2=80=9D, as much as it is about the definition of the term asses= sment and how we=E2=80=99re using pre-assessment often, which turns into = =E2=80=9Ccollecting before the process of collecting=E2=80=9D, which is con= fusing at best.

=C2=A0

The situation we are looking at feels very much like= a cache miss.=C2=A0 We look for some information in one place and don=E2= =80=99t find it, so we have to go fetch it from somewhere else.

=C2=A0

=C2=A0

=C2=A0

On Jun 18, 2016, at 8:41 AM, Ira McDonald <blueroofmusic@gmail.= com> wrote:

=C2=A0

Hi,

I share Adam's distaste for "pre-" anything.

Perhaps "external collection" - defined as simply using any non-S= ACM
protocol to forward endpoint posture to a SACM Collector (in this case,
e.g., a NEA Server)?

Cheers,
- Ira


Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto:=C2=A0blueroofmusic@gmail.com
Winter =C2=A0579 Park Place =C2=A0Saline, MI =C2=A048176 =C2=A0734-944-0094<= br> Summer =C2=A0PO Box 221 =C2=A0Grand Marais, MI 49839 =C2=A0906-494-2434


On Fri, Jun 17, 2016 at 6:14 PM, Adam Montville <adam.w.montville@gmail.co= m>
wrote:


I really don=E2=80=99t want to be the one to bring= this up, but are we forgetting
our definition of =E2=80=9Cassessment=E2=80=9D?=C2=A0 We borrow, and expand= upon, the term from
RFC5209.=C2=A0 Here=E2=80=99s what our terminology draft says:

Assessment: Defined in [RFC5209] as =E2=80=9Cthe process of collecting post= ure for
a set of capabilities on the endpoint (e.g. host-based firewall) such that<= br> the appropriate validators may evaluate the posture against compliance
policy.=E2=80=9D =C2=A0Within SACM the use of the term is expanded to suppo= rt other uses
of collected posture (e.g. reporting, network enforcement, vulnerability detection, license management).=C2=A0 The phrase =E2=80=9Cset of capabiliti= es on the
endpoint=E2=80=9D includes: hardware and software installed on the endpoint= .

But, in the text proposed, and in general, we are talking about collection<= br> in the context of *pre*-assessment.=C2=A0 So, a collection before =E2=80=9C= the process
of collecting posture=E2=80=A6=E2=80=9D, which seems off to me.

Do we really mean to say, pre-evaluation?=C2=A0 Or, do we need =E2=80=9Cpre= =E2=80=9D anything?
There is data available at the time of evaluation or there is not.=C2=A0 If=
there is not, we go grab it, or indicate that it needs to be grabbed during=
the next collection opportunity, and we indicate whether it=E2=80=99s somet= hing we
need to grab all the time, or just this once.

Thoughts?

Adam



On Jun 16, 2016, at 12:15 PM, Haynes, Dan <dhaynes@mitre.org> wrote:

Off list, I received a suggested update to this text from Charles.=C2=A0 I = was
hoping to discuss it at yesterday=E2=80=99s virtual interim meeting, howeve= r, I ran
out of time.=C2=A0 As a result, I would like to propose the updated text as= it
seemed clearer and more concise than what I had proposed, but, says the
same thing.

The new text would read as follows (based on the updated draft posted on 6/8/16 [1]).

"Supplemental collection of endpoint information for the purposes of= =E2=80=A6Over
time, some new pieces of information that are needed during common types of=
assessments might be identified. Pre-assessment collection can be
reconfigured to have this information delivered automatically. This avoids<= br> the need for regular supplemental collections to gather this information during assessments, streamlining the assessment process. Likewise, it might=
be observed that certain information delivered during pre-assessment
collection is rarely used. In this case, it might be useful to stop
pre-assessment collection of this information to reduce network and
processing overhead. Instead, supplemental collection can be used to gather=
this data on the rare occasions when it is needed."

Please let me know your thoughts on this proposed text by Tuesday July 21 st.

Thanks,

Danny

[1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-0= 0.txt



*From:* Jerome Athias [mailto:athiasjerome@gmail.com
<athiasjerom= e@gmail.com>]
*Sent:* Tuesday, June 07, 2016 12:08 AM
*To:* Haynes, Dan <dhaynes@mitre.org>
*Cc:* sacm@ietf.org<= br> *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability

This rewrite is imho better
Thanks

On Tuesday, 7 June 2016, Haynes, Dan <dhaynes@mitre.org> wrote:

Based on the feedback, would the following rewrite of the paragraph help clarify things?

"In many cases, the endpoint information...Under certain deployment scenarios, as
the vulnerability management capability processes vulnerability detection data over
time, the endpoint management capability may learn about additional
detection
information that it was previously not collecting and push that
information to the
vulnerability management capability where it can support future
assessments. The
pushing of this data may potentially be driven by some trigger (e.g.,
change
in software inventory, policy, network connectivity status, etc.)."
While this potentially creates a coupling between the vulnerability
management capability and the endpoint management capability, as written, I=
think it will be left to the implementer of those capabilities to decide. I think the point is just that you could do something like this to improve<= br> the vulnerability assessment.

If we still don't have consensus on this, another approach might be to<= br> just remove this text all together as I don't think doing so would prec= lude
an implementer from supporting functionality like this in their product.
Thoughts?

Thanks,

Danny


-----Original Message-----
From: Jerome Athias [mailto:athiasjerome@gmail.com]
Sent: Saturday, June 04, 2016 2:49 AM
To: Haynes, Dan <= dhaynes@mitre.org>
Cc: sacm@ietf.org Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue<= /u>

#5

- Change Detection with an Endpoint Management Cap= ability

While the scenario provided by Adam is valid, if your concern is that

"the

information beyond that" would be "suppl= emental endpoint
information":
I don't see a scenario where an endpoint management capability would ha= ve
to push -supplemental- information to the vulnerability assessment
capability (what would the vulnerability assessment capability do with
'unknown' additional information)

So I think the issue is to change "the information beyond that" t= o

something

like "the updated information"



2016-05-18 16:15 GMT+03:00 Haynes, Dan <dhaynes@mitre.org>:

During yesterday=E2=80=99s virtual interim meeting= , we discussed various open
issues with respect to the Vulnerability Assessment Scenario [1] as a
result of feedback that we received on the draft which you can see
here [2][3].=C2=A0 The slide=E2=80=99s from the meeting can be found here [= 4].



One issue that we didn=E2=80=99t have a chance to discuss because we ran ou= t
of time was whether or not an endpoint management capability has the
ability to push supplemental endpoint information to the vulnerability
assessment capability.=C2=A0 This question came out of a review of the
following text from the Vulnerability Assessment Scenario

(specifically the

last sentence).




=E2=80=9CIn many cases, the endpoint information needed to determine an
endpoint=E2=80=99s vulnerability status will have been previously

collected by the Endpoint Management Capability and available in a
Repository. However, in other cases, the necessary

endpoint information will not be readily available in a Repository and
a targeted collection will be necessary.=C2=A0 Of course,

an implementation of an endpoint management capability may prefer to
enable operators to perform targeted collection under

certain circumstances, even when sufficient information can be
provided by the endpoint management capability (e.g. there

may be freshness requirements for information). Targeted collection of
endpoint information for the purpose of vulnerability

assessment does not necessarily need to be a pull by the vulnerability
assessment capability.=C2=A0 Under certain deployment

scenarios, once the necessary detection information is known, the
information beyond that which is available in the endpoint

management capability can be pushed to the vulnerability assessment
capability by the endpoint whenever that information

changes.=E2=80=9D



Our main question is whether or not pushing information from the
endpoint management capability to the vulnerability assessment
capability is actually possible because it would not necessarily know
what information it needs to push prior to the server requesting it
(in which case it is probably considered a pull)?=C2=A0 Is there a
situation where the endpoint would know, in advance, what additional
information is needed for an assessment without a server requesting it?



If you have any thoughts on this issue, please provide feedback by May

31st.

We are planning to have an updated version of the = scenario for June

8th.




Thanks,

Danny



[1] https://datatracker.ietf.org/doc/draft-coffin-sacm= -vuln-scenario/

[2] https://github.com/sacmwg/vulnerability-scenario/pull/3<= br>
[3] https://www.ietf.org/mail-archive/web/sacm/current/= msg03958.html

[4] https://datatracker.ietf.org/doc/slides-interim-2016-= sacm-3-1/
(looks like the slides are not available just yet, but, I suspect they
should be
soon)




_______________________________________________
sacm mailing list
sacm@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/sacm


_______________________________________________
sacm mailing list
sacm@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/sacm



_______________________________________________
sacm mailing list
sacm@ietf.org
ht= tps://www.ietf.org/mailman/listinfo/sacm

=C2=A0


--001a114ab7d65d267f0536058408-- From nobody Fri Jun 24 07:08:35 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id E164012DAED for ; Fri, 24 Jun 2016 07:08:32 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id S-jkvw8Nj1Xi for ; Fri, 24 Jun 2016 07:08:30 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 923A412DAC8 for ; Fri, 24 Jun 2016 07:08:30 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 2C3EC6C0334 for ; Fri, 24 Jun 2016 10:08:30 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 941166C067E for ; Fri, 24 Jun 2016 10:08:29 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Fri, 24 Jun 2016 10:08:28 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Fri, 24 Jun 2016 10:08:28 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=n7r0UIie6RaIU7dCZ3nzFxGYmq7Wm2PbgGtl1wfba64=; b=mz5UOuDV7LixRNoRyNRPgSszu36CAIDdZYFjFUZyjrK+njBiDyDvt2v5DA2EQKgShSnIf0cPrhKDEY1ZfdvBXIx0hlJ5YI2hvpbN+8EQS/iqjhFAdgIliOy8CEWP6Ki02RyM9gUo1/bruM+0+WJV2asy/wuw2EK7E9gwq6OQ1Mg= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1077.namprd09.prod.outlook.com (10.166.116.9) with Microsoft SMTP Server (TLS) id 15.1.523.12; Fri, 24 Jun 2016 14:08:26 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.019; Fri, 24 Jun 2016 14:08:26 +0000 From: "Haynes, Dan" To: "sacm@ietf.org" Thread-Topic: Vulnerability Assessment Scenario Issue #18 - Review Appendices and Include References Thread-Index: AdHNhCtvhM838SdJTharv7N+H6TJZg== Date: Fri, 24 Jun 2016 14:08:26 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.87] x-ms-office365-filtering-correlation-id: 415ea1af-e133-4dfe-baf5-08d39c39031f x-microsoft-exchange-diagnostics: 1; BY2PR09MB1077; 6:Dq6MdRBQK69e4dV/Y4MxQzbw5UNthYLJir+YlmdRtDh4W9QXJEwYxQsiF1q55LKQ2qVRkQxdB/k9e6hPneNbhTWNSMP5JFr55tONhQcwf0SvZ2vQoPawy00qeZdVdl2pNF9DKFcwLFjRL10QYGOAaEv3sUUC4H6FWBftIkUJGu9JpzRVfFOeb6qUe+OBMoQOBdGHvkN6CXGjqUMaQPlxeFWAobIgR6/fe4jF/EVsX8JEMIxowkZT+PbFyZzG5cBzvx0CPH+ghh02BkhDp9mgD1Gg3Hie0xOqZWkP/WyHHS06q8poq5j89DEpQpJHbLZCD9EEhOq0hD6WBs0C5PGj0Nxv2ug6p+3SiBiEl44tHXs=; 5:WDWFWfvcxCWKj0EP/GlUnBEDX6sBLiTFECmkAasDrRbS6jIn5zg+ZEovV4eDtk9l+imvnoQc7pPodx649+LztrFo7e7GW4n6w1aNPFd37RinrXGGDeh4IKb3IYJx5na7/eLtHwWQ81xzmWLHXFA8aw==; 24:W0uqZ/jylLTsnl1+VZZV5nDPatCJkjabkOZSmPVdzarBjdZJET+r7hI6O/fDUFbm9bt1lteLFYjPYpCsokjFYuqkBKma9fj31IDWvLOEk/Y=; 7:/oGws7KOBoQSwnh7KnyYZa3r8C/BhJmQoeagNHlOdlygzgym6a4pvmnFQfkxMjzVmtybEWBiiClGrDzO+HCjRJz2rcWPeSq6LBHY9/PTH+M3Rq7BMkgIj1A5oU7IeaHaeVQ+clyoX9tq6WEk3JtLG5ru9qawWCHHyw1BTNmtIZ7QEy5dg4zt/I5RUJ9wGhnbPtua2txjIwME95hm973l7YBT6HJLMm/3djBvkO8KbeOlkRV4h7vyHwditCEsipmuGDFaHQADNwUZunXd4XBZ0w== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1077; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(166708455590820)(192374486261705)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:BY2PR09MB1077; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1077; x-forefront-prvs: 0983EAD6B2 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(199003)(54534003)(189002)(5383002)(8936002)(33656002)(7696003)(7736002)(5003600100003)(450100001)(19625215002)(189998001)(2906002)(19580395003)(101416001)(2900100001)(19617315012)(5640700001)(5630700001)(229853001)(66066001)(2351001)(16236675004)(7846002)(9686002)(87936001)(7906003)(68736007)(2501003)(105586002)(3660700001)(106356001)(5002640100001)(81156014)(5890100001)(99286002)(74316001)(92566002)(81166006)(1730700003)(19300405004)(3280700002)(122556002)(76576001)(86362001)(11100500001)(8676002)(790700001)(99936001)(102836003)(54356999)(77096005)(15975445007)(50986999)(6116002)(110136002)(97736004)(10400500002)(107886002)(586003)(3846002); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1077; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/mixed; boundary="_004_BY2PR09MB1078E65CC09CA073510ADE47A52E0BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Jun 2016 14:08:26.5929 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1077 X-OriginatorOrg: mitre.org Archived-At: Subject: [sacm] Vulnerability Assessment Scenario Issue #18 - Review Appendices and Include References X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jun 2016 14:08:33 -0000 --_004_BY2PR09MB1078E65CC09CA073510ADE47A52E0BY2PR09MB1078namp_ Content-Type: multipart/alternative; boundary="_000_BY2PR09MB1078E65CC09CA073510ADE47A52E0BY2PR09MB1078namp_" --_000_BY2PR09MB1078E65CC09CA073510ADE47A52E0BY2PR09MB1078namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable We have a tracker that recommends reviewing the appendices and adding the a= ppropriate references to them throughout the body of the I-D [1]. Right no= w, the majority of the appendices are not referenced in the body of the I-D= . I went through the body of the I-D and took a pass at referencing appendice= s where I thought it made sense with the exception of "Appendix A - Change = Log". I will move that to a section between "Security Considerations" and = "References". Also, please note that I did not update the appendices so th= ey appear in the order in which they are referenced. I will do that in the= I-D once we agree on the changes that we want to make. Anyways, please review the attached changes and let me know if they seem re= asonable to incorporate into the next revision of the Vulnerability Assessm= ent Scenario I-D. Also, please let me know if you have suggestions for bet= ter places to make the references or if you feel strongly that a particular= appendix is no longer needed. Thanks, Danny [1] https://github.com/sacmwg/vulnerability-scenario/issues/18 --_000_BY2PR09MB1078E65CC09CA073510ADE47A52E0BY2PR09MB1078namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

We have a tracker that recommends reviewing the appe= ndices and adding the appropriate references to them throughout the body of= the I-D [1].  Right now, the majority of the appendices are not refer= enced in the body of the I-D. 

 

I went through the body of the I-D and took a pass a= t referencing appendices where I thought it made sense with the exception o= f “Appendix A - Change Log”.  I will move that to a sectio= n between “Security Considerations” and “References”= ;.  Also, please note that I did not update the appendices so they appea= r in the order in which they are referenced.  I will do that in the I-= D once we agree on the changes that we want to make. 

 

Anyways, please review the attached changes and let = me know if they seem reasonable to incorporate into the next revision of th= e Vulnerability Assessment Scenario I-D.  Also, please let me know if = you have suggestions for better places to make the references or if you feel strongly that a particular appendix = is no longer needed.

 

Thanks,

 

Danny

 

[1] https://github.com/sacmwg/vulnerability-scenario/issues/18

 

--_000_BY2PR09MB1078E65CC09CA073510ADE47A52E0BY2PR09MB1078namp_-- --_004_BY2PR09MB1078E65CC09CA073510ADE47A52E0BY2PR09MB1078namp_ Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document; name="add-vas-references.docx" Content-Description: add-vas-references.docx Content-Disposition: attachment; filename="add-vas-references.docx"; size=37025; creation-date="Thu, 23 Jun 2016 19:41:43 GMT"; modification-date="Fri, 24 Jun 2016 14:06:40 GMT" Content-Transfer-Encoding: base64 UEsDBBQABgAIAAAAIQCsi21mYwEAAJ8FAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIooAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0 lMtqwzAQRfeF/oPRtthKuiilxMmij2UbaPoBijRORPVCo7z+vuM4MaUkMTTJxiDP3HvPCDGD0dqa bAkRtXcl6xc9loGTXmk3K9nX5C1/ZBkm4ZQw3kHJNoBsNLy9GUw2ATAjtcOSzVMKT5yjnIMVWPgA jiqVj1YkOsYZD0J+ixnw+17vgUvvEriUp9qDDQcvUImFSdnrmn43JBEMsuy5aayzSiZCMFqKRHW+ dOpPSr5LKEi57cG5DnhHDYwfTKgrxwN2ug+6mqgVZGMR07uw1MVXPiquvFxYUhanbQ5w+qrSElp9 7Rail4BId25N0Vas0G7Pf5QD08YAXp6i8e2Oh5RIcA2AnXMnwgqmn1ej+GXeCVJR7kRMDVweo7Xu hAjgwzUIGt/O+EQLAJpv/2yIrc2pSOocRx+QFkr8x8z7jVGrc5o2QEz69KNvE8n67PmgXkYK1IFs vl2vwx8AAAD//wMAUEsDBBQABgAIAAAAIQAekRq37wAAAE4CAAALAAgCX3JlbHMvLnJlbHMgogQC KKAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAArJLBasMwDEDvg/2D0b1R2sEYo04vY9DbGNkHCFtJTBPb2GrX/v082NgCXelhR8vS05PQenOc RnXglF3wGpZVDYq9Cdb5XsNb+7x4AJWFvKUxeNZw4gyb5vZm/cojSSnKg4tZFYrPGgaR+IiYzcAT 5SpE9uWnC2kiKc/UYySzo55xVdf3mH4zoJkx1dZqSFt7B6o9Rb6GHbrOGX4KZj+xlzMtkI/C3rJd xFTqk7gyjWop9SwabDAvJZyRYqwKGvC80ep6o7+nxYmFLAmhCYkv+3xmXBJa/ueK5hk/Nu8hWbRf 4W8bnF1B8wEAAP//AwBQSwMEFAAGAAgAAAAhAPmolZ0PAQAAowMAABwACAF3b3JkL19yZWxzL2Rv Y3VtZW50LnhtbC5yZWxzIKIEASigAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArJPLTsMw EEX3SPyDNXvipECFUJ1uEFK3ED7AdSYPkXgse3jk77FaCimUiEWWc62558zCq/V734lX9KElqyBL UhBoDZWtrRU8FfcXNyACa1vqjiwqGDDAOj8/Wz1gpzkuhaZ1QcQWGxQ0zO5WymAa7HVIyKGNLxX5 XnMcfS2dNs+6RrlI06X04w7IjzrFplTgN+UliGJw+J9uqqrW4B2Zlx4tn0DIN9w+InM8LsRa7Wtk BaMwiY0gT4ss5hQJvywOyZRCNqsCDx2OBXbzFH45J57jLn7Td+M+zKYcrv9w6FvjKVDFiaH+Ex+x WfYD65BcN+Lu5yni1ZxXV2S50NuxwVd0kJBHXyv/AAAA//8DAFBLAwQUAAYACAAAACEAb9Cheh9j AAAOsQoAEQAAAHdvcmQvZG9jdW1lbnQueG1s7H3rchtHlub/jdh3yOBGjKUIALxIoi4z5gRFSjY9 lq0R5XbMdDg2ElUJIJtVldWZVYDgX/sa+3r7JHtO1hUgQYKyo5tEflS3SdwKQOb3nVuey7/9+5c0 EXNlnTbZt3uHo4M9obLIxDqbfrv3y+f3w1d7whUyi2ViMvXt3lK5vX8/+Z//498Wb2ITlanKCkGX yNybRR59uzcrivzN/r6LZiqVbpTqyBpnJsUoMum+mUx0pPYXxsb7RweHB/6v3JpIOUfvdyazuXR7 9eWiL9tdLbZyQS/mCz7fj2bSFupLd43De1/kxf7r/VfrF0qvfzWTq4wenBibyoJu2ul+Ku1VmQ/p urks9FgnuljSJQ+Om8uYb/dKm72pLzFsPwq/5E31UepfzSvsNu9bveS83g7/jvtWJfQZTOZmOm/X NP3aq9GDs+Yi89u+xDxNmuct8sPnfwwQ59WudBfc5uPXW5km1Se//YqHB1vsCF+ifcU2H2H1PZtP kkqddW/8VUvTW9zDF/e7wNG1Cxw7db9LvKgvse+WaUeNRT79Y7v8nTVl3l1N/7GrXWRX7bVYXt3j WjVa+gh2f+zDXM5kTlROozcX08xYOU7oE9HeC9o+4XdAMEv2Tkiajk285N+5WLwhaRx/+nbv4ODt q8NXb0/3mrs+2hvuPFcTWSbF9Uc+9u7yV/5o+ZfLZUSfjZ6UaF6ho+cH/Aq+8ankDyjLwuzt81Mj k5EQLEqZXFYv8vfa6jr2PT3q6JXSRZp27cyUVisrflILvt7sNHPX743c6l3+gu53emQuE/osB809 Z3zl3n379fvu19+Df2O5sFxYLizXY1suunnjqvzTP+DiTXFyeXr2QXz9z9lInLFWzPiiRXVpAGSX AHJBy2YzVQzJmJ4UdyNi9ect4WOm9JVyAMgOAySLVcxxg6J0b8RFVnlH5I7K5C6AkAC5jGapjgsA ZEcB8u5Lrq0iYPwgs1LapTgaCPKeXt4FjfrnfCS+l8sMEmRXAcLut19mWsycgKLsXO2d3A2Maz+f Z0p8uPj86R3ZJDYnB5xFEFAD1Nzx88NIvNfF71NlZRIPP0T/IZdADVBz68+5yqUt/HmImdCticqc AmqAmq1+yKb5VSbkWKVkGQE1QA3//NS4TBeZK3RRFopFy6U/jbWxE/RbfFbRLDOJmUJDATXb//xQ Jkv2uY6Bmq9HDZYLywWZdItM8mcJfymTjBypKh1GnDqnnPNm8mWkMmm1gQgKXXHFfJIw1KqYDJ2M 0uGcIDN0NTyGB4dACKQuCFWcnI5dYWWEkxHwAXy4RcF8nmkn2vTkWLnI6rFih1nwoqeyULFQfI6d W+2UYH3TmiggV2BokZ1J2tgcQiZ6mhFIFrqYiWKmKlP2F8LKmaRnj6qzpebpgEx4kCHZ4jwy1Bft CpVFPjhHEkZlcW40gSmVmZwqj6tI5o0DxEG7sZrqDMfXoaHGCxOPkFbz0KIqV/B+rOigWmflHP+l 57TpMyNgJjDMvKulCRkvVtWqivSSnEqSIIUXQBuRA7AEBpaepBBjyTihP6SITDrWWXU36Sj1RaY6 4y26ysyiU1iAS2Bw4SJHGZEu0r9X4Ojjh+2UyCSJiipnqTZqoIz+HMBguXaGXyeXPs+ZRasPPHxQ KTxCUAPUuCtCt1ZJQve4cpzqghWOzsSkTBJSQZXCYf+6CcaAXIGhJbdmrrlDhReyb88+ipevvIHi /3wNQwTSFvy5hT+rgrYKJSyMveLtaI5JPLU4nNA8WbzLprQ3ytKzQLDQ9LN0V+K9saR1n1y8+/z+ 6UiIn0yhCCGyEIZwYsWUG3c4kcqlkIkzItausHpcFlDQwUW2rwkTuW7eNWdmCaGERU1UWstHI+2z AJrAQFMrIzL7SaTUbXZiSb60ldGVsiPOB2taOtET92vE7MPcg7kHYt3T3PMc6slnuqSOBbnWQpIG /6LTMmWp7PQXkdL3meF0OricBvKn2ZYbK1HmMadIDYRVeULPpL8IKGbsTKI4ODNe1iZgT98XdAHk ToUGmkKnigy7Cx+905nMc2tyqyV7CkaUrnMnW2HkCFUTZTljBnAJDC6ceUnoSFicED4i7T1Kldbi hJzLjAGyx/4Eh4AJTVN6vRvtASqw+cCs+x2oLHSSCOWb7XAiyFq3HbhRoBQoRQw4M/nS6ums4Ain hlUCXoAXt6maji9Poqe+iYDgIwLx2ZaOvcDYHyPlyjo+sNUx+Yd6ojlp1SfMg16B4aUtxKIlnhnL BwGnZJh4CLEz6J8ZwxyB2MVyYbmwXFguLNcumQBVP/iBUGQBJKNe24+6D/CtbYBXrAJaAmvM5J3l JSiWOb3N1Mr0spC2qD7eY1sb+oZ/3eYrvsvih/4FTz7KqRKHv8GO20lyjztA5rTRzYPY4t3Z4kS6 4hO37rcqZjK/tUpe+VfdOvWh7fIlmo5eKw/7H/QbhKWE5YJg+rONp9VOP1UF0d9UVPDpcq9OxOe1 tzHKb5z4UU1lAlkUGFo+dnVEn/x8VNoGAopHRjPwFIlvoaHiSZ17XLBsUKrLO050xE38h1zz/pTT UdRkwrLFZF6gcI6cMBPgJTC85OWYkNG20yj6KmhEQiZR0ilh1VyrBQOFbrR5kgBLYGCJpFVcyLwc 1MefTYeesRJLetPmGIytFHpdYXXkx3ZXxc50T67Q7zM41JBRsi5Wzkys6D9pbjKfcE3L7Zu3xGJi Tbr6dJGSJgNoAgONzqKkJJBc6jRPqoyLt5fn4sfKihG81iyDGvHjeyxcKi9uxPMRTJkQ5QyZsVXa jneI+w4SKyQuHPK9F3iaJyskUxZiIa2VGXeyhDUTGl5WZIdvi3ujrBkBGF8PDCzXzvDo5LMcJ74v 8BkvIPw/EAPEYGJsVDCH5OlcRiZXYnTPfyvMWjziRJGT+htt84UeQVrIxq1+BlkYGLmPuAUMjzit BlaC3CA3yL0r5H7GZR08FsO3nncg9+6S+znIHRi5nxO5N87x/GjV0Kq/l9rpQq0SH9R+VBvNyfkg d2jkZnqz392MmhEfusFVu0Pgs24EVxhUvv4P5A6T3Ox3r2rv8954sYve0Bfo7kdslr8AuQMj94u+ 1t5on0OHP3odDnKHR+7j23zu3eH0J+UIkC5Yo5zJjarI0Mj9krb94vSnU04MoU9OHL9v1ByoCQ81 rzg7QkV0ddIG90LO7uiL+hvttqIgAQFyB0bu16wSmljMXO2UiVf3ew/Zyuv+gdzhkfs0z1UW6y/i lPb/bCazqRI/mumdWAFqQkYN4cafzFWA4QEb4pOqCnTE8OBwI1Zg7T0yhQFyh0luPplryH2pecb1 aWxyLuqVTkjx63fiYnhOVD8AvR+zM/cK5A6Q3JwRe5Pm9qP4hpHvijp0MkqH8zKhv+rmeauDUB81 vclEAblB7p115t4yw+nT6aw0pVs7rdsdGvfOHcMwx1uf+/AA5A6V3GcjbhiojT9s2eRpwyx/vJob 5A6X3OdE7nNZSHFaFFaPy0KJqlcDyL0j5D4CuQMjNzHaR8tvJzKo/fij5SB3uJr73YjHB+pp5v1R 3yX1Zz88/N0X7XxH793h86/GXoWWMyEOkeoenuZ+V51zk6+tI5l0SY67w2WOE1qThJ0CBXKHSO6K 3p7gm4LlvRAzUAPUdKjhDInvpY0X3IuYexJfmknhb1xkc4KLobdHz5FHHalBHUuwztz7UT0+8BfH w0Ob+YGbq1lAbpAb5H4c5P6uIfcnbg5mfUOhaq7A2YwYSu89FO/LorS7VOvCIZtAXDxxiNSnYMn9 fae5lTjjgWe7w+EuvBwGkW/6B3KHR27ytFcbAV7ERAI90fWwQxjlO6O5X4PcAZKbg2ktuX360+5Q 98wkST3MLlytXWlukDtEcnO5Ebp87jjtQe4wyc0N+Mn35rnjNbk3KwCQG+QGuR8RubmN76WilY2l Rd3gjvZ9ArnDJDe38UXj3p2mNu3wEWoJgz0Ku6D9v0jzxB9wVx727rD83RfJXy3o/twgd4Ca+2L1 KAzR8h2NloPcQZIbM7ECoD3IHSa5+SgMAbVdD6gdHYLcX09uLBeWC8v1QJZr8eiE85lvXzsQqhAy GXm9W/28+5Jrepb4QWYla9+jAVlhhy97zxC7o5E3WiF/3RHNfPKR6/KOfoOm3UlyjztA5rTRzYPY 4t3Z4kS64pPKYmVVzGR+a5W88q8qTi5oQW2miuE5tyRfEdG+tocDJKIpyl152P/8UCZLFu6o8YSl hOWCYPozQzg+4RFpE7ueNoEQTmjkPi2LmbHum10Ky8YxfUOH8ZZr5EaXVhg6kIWbiMTpJWuSQmd8 ER3T5+f3ll5Ufrv3vVxmyg3Eucz47lgWvE3kdw0PjodHzz8fvH5z+OrNwcF/V9+2D5hXR8+On796 GGLyghtgxqXPOlmXDPTN+UmxSuoFOPwTFuAmepyr5GGtC33lz8Spk8vI5Irvb+7oFofugTyA+IT4 XDMlP8+0E7GJSu8ixj5/Z6x4cGasCqkTFQ+E4hBXbrVTQ5eriJtZCB631+b9wEYJDDWyiyo0IxfF xJpULGY6mgndS/1KDSskVWV2OxHJTIy9jAZgAgJMrF1k5hw/57SikjDSIiKVSwJMlJSxElHikSXM RJCBIgf04N+MFdYkZLoANKFJmSz2W0/wIAUkvdHrRrXOauWOTJypJY4TuTWFiUziX8sQAmgCA02l b2I1V4nJvYbSmXBlnhtbsFxZMVx6imzA48Jz6Z90N2heH798ffrin46Pztk94tdv7eu9evP82Pt6 1cWAsvuijHWZTBKRG+ebr3Y4WsFOf4ee3WuHyBt/fnM44tnx4evXDyMcsWF5njileqV9gkTzapRm vw1WdMvz/L7L8/Lm5Xn96uDw2dsHsTwnqin8uy5Srn1/L0yCgIczSelV+Z1rcnzfNXnxWNekmMmi 1VJF3765c5Fe7h5wTp5u+NaPTVOsh6fvaUusPvIPsyVe3QtRD8mWuHF9tzDw64j2A7Hqugj+60e7 E4+Pq6uVjE3AYjnwfybGkZk3WD9s6p213O+0qd2qzSt1IzQfwPI1ZyvkYfO9f+Co5Z/vNR3e74iM dq06InsQBOuB7yu9v0cLvo1+2S2IfMgS6SQvx9yX8Nqx7gpY7+dB3rzLD2s7i5OB4EhdToYuz638 /foKPF7jT5AVb0ofdHJ8MD3avLP3c34fxc5uWJPvzUKRWh2IqZ6rjFwdJXTKXo/MIsVLtQoFDt7J rHcCuQEbvbW8nyNNa7kpkPCAWPL//s//dRsjlxz0jujvgdAFY47tlZIejXnx2jDM2Sr8mqW7UU+/ eHdwfOSlzbqeXn3kH6en7xcJeEh6epsFvuvM4R+66v9ss6a36/cLbbS77r/Fw5WB/cYo9L+ZWXgx 2DvQ0lNeAx7L7kuIWEMaP59dNfPZFzwiayPX7xaS93XxXxw8rJU9eUdrZk05nYnv7yHYcNZ3LzGF 5dospuyNq/IguMF9mT4rm+rMJGaK7CzQArS45Sx3LfDXa2HWy2N7I1YamuWKPBad8Y4VhtU3SBYY aqofb5Cp2nWVYpLIhTDW/3Y+8aSetD4Qs3oAuw947BsLwAQJmIm2aQWDKlU2MmUSi9wUPCVQJsmS gDJXhBEh47myzodHZFSI62ExICYMEdPGvsTFZzEpM58HKasgkBclwqmIPkKxXO/HCcQEiZgNJoxw My9seNHJdiFgef+5/4ziWroJIBMEZJrUo9UYc6yKqsH1CLD4elhgucLzIWve+BIEch1PBXctYB9h WurYH3XR6nNJg4p94RT4FaTYXRe3N+ttnxzalWYi2hCslm6qb1MVzWSmXepL5TYo7Qo32omSz4fG 8AbCBM1K+sQ362kEqczk1Fdiikjmzb3wAwIFCwsPPjhSQnM8cxUrmusr6SUZR6MqXFWTfeAewD0A uW4hVzsC60Zxyw5CX0hznK8njP1raA9AsiBFciNkhY75jKBYckOW5q7OS6gSaaVzJtKS3EqgJUi0 pKqQHHSoNbTJpob3YyyddlDTUNOg0NZRvK/Q1SBYmEK3ttA6xdx3nDS3U1vRzWtSGqgJEjUrulmM uQvWVFXp3RvjwoBKkFDpnwawKNkU8a2apvmKOmX5Jbxr6IGFw6V+vRjcALgBoM/WbkBHnDfcelA1 5Za+SWUdLvcbNVO+RksKp1a7gAEzwZh0k9YFcHxc0ojgRAkZRcbGvDtVwUBfpwMtQaKlTsSsijcZ Elulg0B9Q32DXLeQ67LM86q5tEyIY0lSOUe19i6ku2I53TxAe9Sm1TSyGwwLUh73vWzfzZ5lciHt VBUtNAZtVlVmCiHnUies3oGYIBHToqQN/N54aDBgBU/WH30QMv5SeaUQlAkUMY3HWMfyxtwgykuU FkFPVq1AV8iixPCDUFWSz/kg26TO8VBFNHoKDwAeAJYLy4XlgiJ74IrszEwm2ustIZNRq9aEePcl 1/Qs8YPMSmmX4mggjg4OX/aecW2y5+OdbrxRyf91m6/4CMYcn3wkp0c8+w2GyU6SO5Gu+EQOCs9v 451+a5W88q8ad1DN6YHmZdj8EDbfjyNWNlPF8NzKSbEivH3nSj5JFZdNY8trPz+UyZLF/jHkxtdD B8uF5QrT5Dx5RhblqXNl6g9Jr82Twj6DFgHSYqO3cSqyMh3TlblXYUcbkZauEGPlQ81VMkJ7VjEp rU9qihLS4BPUN4QGGT7byo3Tbeax40kWDCA/pK4ZHD8CMCB6waPNPOLMk4Yslez1jXxk8QbMAXPA nM3MWeHH4hEHgU+MFwPbfJ9HEPHdsF+9wtiZdMKqSOm5ul6wdGNmK5IcAkxyYKPSJ8Cs5cR7/MjE KhkvyTlRWVN34T0UNKgKESu3lT12IFrpdta0xgZcwoNLM3xBFMYkTkQyEyWfY7jCl+PT/0u3NpUR yIABDiLBAN8VA1yKVMnM16rWqaRLplHvWW29IuRgeBpSJsXMD4HgImdbnQZUOenOpIotLKkTjx4f 7u01JSS1CsCEB5hUxrCYYDGBJ7CYVr/PLlpMqhrRwSyyKlFzudpxFWIwPP1XGUc3mc+cNiEFg6Ot EI5MmhNSuPuHH+aNwR1BYmbz2QfHLWFNwZoCg0Kxpk6TZLetqf4JXjOyqu5vRBrRNaUA9HfbO6Pu fgQ5CNW4qhqFTzjk5xNa/NyzulduHY8CYsJDDNqYwnACW8IznEIKQ3GiAn27uY6VkElyY/CpjkTI DJktAWrBtllUplRM9nVhmobv3krqDG+oS6hL0ArqcpfVZXNqU49E5hi8SEw2HXKnPeEKY7k5iZlA AIanKLerO9iUWAzEhIeYboTOpvkpZI872k+MU4RFBTbBolr9PjtkUfl6q7i0yltUVvUk4MqcE4l+ +QHqSZ8gXAUh5ISQQwaVLrRMeopyjS8643fS8bd7h6/5E9L2zAx95e/lMlNuIM5lxneTAubNPDg8 Hh4cD4+efz54/ebw2ZuDg/+u1qQPq2fHh69fv3rIa/XEKSVO85zoor+It55KqbErpY5P1/lDK/Ww gXEC2we2DyQkMeD5aH1e3GmnJj9aNbTq76V2ulA4rgZlQJlbjIqLXt8xV0Zc6z8pk2RJN/Lc2Kq4 e5NTDnIFhpYmlYxjNX3fhU/EHENoJufKQ2ZiksQseJva+jUNaRwcYGKVJ2apYmF8uqG2BJViYeyV 4GBf/2ide45okjtthiKsXahucMtbu4dk775rsg8+dMPOztrSYHAFXAFXNuuhUzZXbpsW6JPjfYtI n9gz9gnyeUJX8mVkOgPDAoPMaler6nSSQKK+5Crijs2EknqcLSdC6EynZcpT6JH0EB5WZFFYPS4L 5a5PJ3VV/6ue2KmwRPhRriBLV7sZ3QHMBIaZBh/fuLpLECmhStV4+Liu57csRGxSqbOeGQi4BAaX FiOcqE7mSSs7SBWNl/3J6pGyheTC+E4oPZFO5NICNaGhxssPtWae9JDxtBIvkoN1/pi0zPTfS8UK Clj5eqxgubBcWK4HslyLRye4McB189qIXRvg+hwDXHeT3BjTuvNbjDGtDxs6WC4sFwzLFeMpV/SB XcGnX9xo84q3YaWyoMrUWM3u8SkbHH38ItM8QR5PcKjRWZSUsRqIMfe/sIQJU4hEp7o6CRuIi49C xjG9xA3Eh9Oz7sZ7ziYEXgLDy3/SSuqJJnCc+5ML8ZPk4YtP3v/n+U/u6UDQk4e+24rTJuNeddWc BPosjtNQuTc+MBMYZr5LzFhy6vEvVQz6ooeJJ9/9cnHungpjRWRyrXw7Onop1z5V85UdBtmFBhg+ 6CJ8RLLgSraZtLEfPNWelNHlSn6EQONIVSXS9k4+Rtf7ggIzu4+Z+kCsn3lcH51W56j9zI2NmWJA TWCo4X42Kh5UHeVlTpYLeUYkdkSqCum7pj7RIzUShU75XD7NycTxrekjwo6VEDOhASYxkRcuo2oK +d25p/20wjHaMgcYlWGFVBXKyIz+OzW8Fb718qBufsN3kFSxpqQ/lbdr1Fxl/j/FEJgJDDOx1bTx gzb1i5BD1g0jJuoETs/QGQEhX48QLNfuE+pSqfXsiVglomqfcuS3QW7fPuXo5fX2KTch5FwlfOfr o6Pnh88fwgLRd/5MsDrZO2fD9rTxmMVnrsp0gnPXCdS+84zJ3B6/snlJJ1voHr5W137m6PBPWL+H tVDFSdtj5nxdtj74bjIbWMA5oD2dMXRklnKMBbojNOuiGkMLowFGA3jiq7CPrnUdOu+1tr3AjEpQ BpTZRrWskmhDf+jrQTEOkmgT64gPCcGxwEBjVaT0vH9I0+QnkVj+JfcdZOgZeTG43rIKYAkMLNvL FOmcnnIGimxK35qsOIAmMNB0OUiD+sCvOsOzKjdO0x1L8WTjAeBTH5mXC6AmMNSwcKkbOliZufoU R2ckXqRIZTSjPRhyczM/dRUzL4Aar6A4tOqFyZrW6Umhqm8ISSLTGj083N5k9ASkoIRp0vB4OY+F 3lxnn2NAt/vyx0+lqztFWDVRlrVZYYCawFBTT3DeoHa8GOJEyKI3WYCzDbwjxUoNgAkMMH7+CPlE VVXQHaPC19ypwurpVFlgJjDM3NYifAQ0fD0asFy7T54bkk56SRNH/P7bJk0cHrw5OL45aeL5y8Nn Z88exEpsSpq4+RM/tg1dF3d1HsjYmKtU2ivfeKXZXP/tMpnSFf73d+YtOYDV+zZPfpfF3VP9I710 pOd/AjJuSUd6OICpc4tuXu8tc5T8tmxMUnq4UuME6ThQE0jHgTkFnqwJxhfcjaJJct84CwwDEsAb 8GYb/fLrTGUiU4vthrdz5GctIQMECwwxK7MRJpMqCtgbUNxW4vs2IGyRV1EhFVdFkQBMYIBZlSx8 gCW1jxvLPE+W/o/elBZdFeo3t4GWwNDiSNG4CXd6qQ6+s7jy5fnEgTtLVdk5txxuATGBIcYfZmLX v37XsVy7T5LTjSd1dQuTDdL0KdrehAeWrisFq9qFEa5QuXsDHEDGgjababPCj8UjnsBwYjYMHNvw pR7BzIUNm3bffnAQgYFxmttNrjXskimtewyPA9oQzAlFG16szvbdOT3I6s6n9uamDtajKSqIvVEl 6syVk4mOtJ9qXFRniJw/zsPJmhTxzp5qZyMT3acKRlSAiGnECMwmmE1YLiwXlguK64ErLkxj3bw2 Ytemsb7ANNbdJDemse78FmMa68OGDpYLywXDcsV4Wm+F2TTmsCrxQ+7qWaz+rKk6nTQTEevJhGQc TiGDg8tNYz0INb6emnakhgshpbSKkSIFCkYDhcpKHh95rWcmTU0/v76HoJLPeQpTyx8hAZaQwdIM e0aiH6w30CaY1IbTbb7N481saAwh4cyk8HOC58ry9HE+otaZK2SSVOP3UHYGCQgJGKAEfK+T1ark 3ROCS1eotDcFHfIN8g3yLRD5dnlTLGj3ZFzBcxkg4iDiIOK2EXEXGad0L0UkHbeQXMn17gcJM6Xi LkxoufhFyAzsCgwuDTa+cWtRQ5a7JV1QJ4mYybkSY6UyQa+da1O6ZNnlgQMzgWGmLiFp+/V96EpI ug59wreImkud+Ek5fvTSp3b00gigCQw035uFmvMsLkKCIfjYvobqqkxu1FVeCGUG4bvgJA2Pu5Gx JnWzUZRUgka4Ms8TL4Rk0ugmtI0KDzJeVox7ImUkxM8TQkRpfWvDTOi0AUqTgdNrVAe8BIaXm+tf U7lkW3dC70geksq84DE5mcckchzfVzfTAV4Cw8sGPVNN9xORsoUkBRVpG5Up+VBZxDYOWT5kxcwU 1FF4cGkKqleb0lSz/HJr5prDMGhNA8TUiOlpoSdqNB0xMKzyGokQM6GnzjKybMgw/nuprceI4wGR AEpgQOnJk6cj7P7X7z6Wa/fJcrnBbCPv78aQE09qYo2clzY3jrPvwbDAILOxs25slONwZBtj4PgU n6exX0g6WhJqOAiBKTWhQea20ak9w24kxC8r7mKs8sQsYe4HCJlm7LsbCJNFau04pCshXBvXc5WZ ReYPT4CYwBDTR8JYLU1GemcmC7GY6WjG2Fg5KkFYAahZCys0wafSzepJ79upLWAmMMysRyU5gs2H +JW8WYlnzmQ2VZhn+kcgguUKIAxx63j4F/z+8h5DwI9uHg9/fHrw9sXhg1iJLcfD15/4sW3ourir x8P35rof/wlbehPp67nuD2enMdcdc90h3zHXHXYQeNIJxuPRelOs3jj3T8rRdqGiC1wBV7ZuKteL zNiKP5yo6Pi2oguXlT/ePCQTk01BsMAQs9DFrJ95Vq/vQDiO9cmCR3Rbk1vtS2ur84U6KFjIK5XB fIGMWZMx3GFHx0omCZcGGsvjX8jpSQhBlhvOATLQ4mDYV0f+XvL7I/K3S5G/V3/CliLyh8gf5Puj kO+I/MEOAk86wfhyJMTF6U+n4ozkO3kO1stHBPtAD9DjFjXyeaadSFVq2rbdIjO+1ku5gnO1mFNQ MmARlgvLheXCcmG5dskCwHDSzWsjdm046TGGk+4muTGcdOe3GMNJHzZ0sFxYrjANy5NXIz5tjugq xRLRV1AEFNnav/DR19hEpc99qruzOSFFZCwPYrXMozkX6XO9tUyuHP1pTTmdCfTODw4tvLKpLFQs FFt8udXuljrqptGD4NwHrtJP9DRD9/zgUOOTc70fsNd20G/V9Ufj/LDnrkrijXjXgesXh3YfoeHl jNvk74m/fnp/9vL42dFvZN2dskqqMnOr/vmuwU+0Yu6hLWSAeGmBwln+ybLq79Ezawg/70vLTUVT Mmoq/KwoLSAmMMSQiRtZnV9rM1U1Qfc2MA9gk9GVsq7SX6VTkzLpPxuoCQw1rozI66EXsi/UTmH2 oxRae4XEji2zjHeomsSsbdtNBqmSwUFmxW4xdioz/XttqbiZKZO4tV9Y7uTKJl4A+RZ4tGNodhce ZFbd6b6mirmwQHMbqqlykCZ/CBpYrp1h0slrTrxu7LK5Ep94io3iOSRgCBgChtziOUczacl2HWpV TIZORunw4BA5OqHBoPfTxmVPq1A/2x0cvj+jz6yz0pROfDAZjyGkZR+IvbMKQANgJlzM/EXRZyec HI4O9gZtMs8z2KfQvqDQrdqXJK2OZDLklbUmcVC9AYvRMx9G9E1mmnzKVh2zpq3BspLp5FED5Qvl K45J+ULjQuOCN7dp3Jjz04czmblxaZeVx2voIkM+1xumJlbJMJV5TksNTzhswXpfT/jnv5z+yE8A ZsLFDGeW+ES3NhxNoPnAUoUc45/MXKVj+gTkHL+AqoaqBqtuU9UXwxWKLK6XvrpcJUmvvPfxlv+e nI84Ar/VF26LfR9tKXBldvWnecPQCjnuIdPhr7SiqiAdOfI21o8j8aOxKvudOwPsbbDEgJmAMXOT ES6esO31VHzqSRayuyqf777K5AHLz/urioesDEDjcGl8zRAYHj4TTxbGXvEgVwL1lF7ong7EB2mj mW8RAMcJjhPotUU1zF0a4vE4R78J8atMCmVTEhPbfK3HoPcG4ryydenX99Ky/VIYtnavlUhC4IWr IO+ujq2rJQeCaC+Y9zgNDhgv5z9fiMOD0eHL569e7teKYECSJC+60DMAEjBA/iUp/nVWFPmb/f3F YjGyk2ioYvafR8ZO9/kUdJ/uY9j8y7T4VxjbMLbBrDe9yT6nIyHOZjKbKvGjwZxB0AP0YHqMDlte OA7dfFJz7dPShgeHIAlIApJsts5+yXk4WixsW7ZYdTAh165J+W0yffmBXsInce47XXxfjkGxwDCj nSuV+F9Hz8QTtuYdmfNTXczK8Sgy6T6H1RfT/ZVK8mHTjW0fYAkRLG7/6NnTEfYeuhjLheXCcmG5 sFxYLiwXluuhL9fi0dncmGm1eW3Ers20eonk9d0kN2Za7fwWY6bVw4YOlgvLFaZheXI6OuodqV7q LFLiNDY5nxRJ7ir863fiYnguhgcHkDCgDCiz2d/4IGMl5qymS7fShFsmgjOwqwQ4Tbeimm5EMG7H bRyRbbwk3skUJAsNNfSB5jpJVHvK3py6Pt/+0BWoCQw17Sl7fej6HGeuUM+gzG2U+aRSMydFyxlP n38+/1lMrEmrVjo3z3Tl4V8YwBMgUu6f61RL4VeQwpDC4NZt3DpLiDATXcvhWE10pn2nFTMRe+sz afx8onoizR4npaoveSI1JHJoqJmZBU8kWpDDPC11LDlKxS51PUQvFjpzhS09Wvxwzm5wZ2E4oRla PEjMkMiIpLVLYcpCyI0jpK+53ofPABcYfdsZfYfId4bVB3LdSq7qfCkWe4W0U8VnS5FJksq684bd nivzPPHNmTg+3j2I2qNQMdOo4nuEwVF7FDRYSBcjDg5dDKrcSpV+BEYWPgzTeETsOK/OGWcHymRz ZYtV5wkkCww1/QHR3L6nmTpQR2Ei8qSrmdGEGMlAosdF6eQ4UWIMuAR3Pr0aflvZ/8VjbhKpV4c9 b/guj6CqYMPWsTpwMlWcm8R/19KfaQQFAAVwXQF4iX/bwQ08+FAh03jwL+DBAyxbgYU8+Bfw4P/I 3mO5dp8q58o3Kc+U0BOxUCJT7MwbYX2G2w0NvhKTTYf8GuEKY7ma1KxO9gBqAjDgyBbjnolW5cb5 SgTlrh98H9+mq4GZwDBzx8n3MXQ1dDUYdBuDPrQ5532nmTW2E5HMeeoCZ6+JtvPz+eio8qnpNSBX YGi5Ns/3uoJ+CQUNwGyroF9CQUNBg0HMgNPRs16jg37v+GpwZ+SbaVUzg5lVLZnQWh4cAoeYQ3el lESV4WIm3t5dPxPqjo98JOLi3LOwrrF04jlIFhhqOHUEc1YhW8GS21hyGnN921ppJI8xjrUXtz59 nuVtN7uRTBtHu+s8w85J2IJjoYGmKKwel4USn30GngdCW2vbdjZwkL6QviDSndL3Im1qk7z9+u6L 5Dv88Wo7Rvkipsc7I5gZd8F0kwk4Fhhonny0atip46deB4uztqht4Ju6dtr8vOcb8VMxOTc0xLRS 5DTPExIhTYU6CZEOR4O1242ZB7QEhhZYb7DeQJQtiFJZb1zRVllsbLDdEZbUWVUCEZkcx++BClbI VchVLBeWC1L4Hy+FMdNq89qIXZtp9QozrXaT3JhptfNbjJlWDxs6WC4sFwzLm8JB5ObTunILYe5u 5FPXlneFheL28BwyKTDU9COCiBBB1II0W5CmErVedLb1xss2DM995q7XpFcM04VKQS/QC/S6k159 OybWllQTkU2SR1aNyqiTlMxEjKXTkXBLR9wCtYKzX/rNuoRqUk30asIaLBuIXtDpbjpd5uQheo+g L2H7JPM9c32uX+M70AWG3bQRMCwwyHTjDBop2/TJrRQzp/XJeM5TjWKRaFdACEMIg1F32r99Aexd TfYkq3YqLHV7jmd9T5c7C4IFhpimJA5mLiQs+LKthG0jDByxm5WpzNiO1dOMz1GaGkNfx8/i9X3J 7azEr8ZegV6B4QVyFXIVPNnGDskTyX7etYr+3NiimoV3+1n0HigWGGbGKpIlD2MiHetPzCqw+HHI /AhvC635pOR2ViMhLnWqE2mT5YCf6eEGzASGmb0u3tjKloUuZmsPeKdoD1obWhts2kprn5Gc1dPS 1j1aZSanvjOEL9wfS5LST84+nL992rDtUxuEgt4ODTWLmY5mQjuf9PyNq3S3n7HYC1dC9kL2gkXb yN42c2Hvk0lUI2A/lpYkLN1srOT6UaKdTDgdBqPqQkOMT9auzoFY8pJHdJo4w84Qz8chJf6+zOrR 8w1o+EjfGIAGoGlAAwBALYMvd/Z87o8Rj01Uel8oNsqJzNC9licA19wiszfjJKlE/17nhoNjgYGm ngvOPtAdBVcyKWamnM5YMzdwAlwCgwvdiJIyriLfEdllTX95V5Jj3YyZh6qGqgaNbqHRReZZxEmm sa9hlclK7pwzk2IhrR/23gtu9nKaQTFQDBTb0hpuq4SFtKbMeoGrtZIbsoxTeeWDD1GipAXJAkMN Wb16mtUNw7t0utJV85wjY61KZFH176/Bs2zh5Ahf6FEZXDKIKWYiV/SpXcG+NkOjzPTfSzUS4n1p Sf7Y1Fg1ELzsPkdE+lxOXxOaJ1JnwExgmJmZRVWH1sAmWrLd1xM5qVzuTve8k7m0y1WTdcPXeQSd 8jZt6ueZdp7dnHQQCzSmCY7VV5lZJCqeKjGV/uhiYk3qed4NJTnn4RJkY4jPSqKtxh+BCJZr9xn1 Sx6TtV35cJcqoncpluLM0OeIVRUUaQvIvPPGBjn/OTMOhniAzltE5lN1ZPzXT+/PXh4/O/oNMhYy FrS5NZ2rSsLx3mkdIHtreTP+i95S/LzIyGSZ60iJJ2//6+fzp+TV/jrTiRI65Sx2mRUYjxUaZhgI 4m+lKziU4URk+OjiCytnP/tUcwWqH7VXzXIf1a9wM1MmsRhDN4cGGIIJ3WS/mHSzFBxDtcKSWPEV UoADVDSWC8uF5cJyYbl2SPNjeNDmtRG7NjzoNYYH7Sa5MTxo57cYw4MeNnSwXFguGJYrxtMHZaf1 0SC36OX8mb2qfW+X3tklTO8JzsvqPRnSKDC87K21S2xR0mVdEUhclc9nlX8tl85x8dNCiYVEk9rg MNPrHC/HpuTkzhY3/hxMcXanMLYqruS6y2povROcRTxXCerWgzvqmEudyHGihM9EUZ2g4SrLXut5 7jvTCKPxUsiqnysOU0MDDJ+ekvaJB4wI8sA0n8b71EHjpUulgXzrIs4KpifxLxY4OEiFdNkkXZxS KRekjHVhOfuatBW35+HDeYAmMNC4OjgzYEM2tzqlG8lSRFxiWtk16gu/wPH+9CfnZErFTljJcgio CQw1ZM5mbaXKytAyzvjxgobrHGylqxYEEfTO+yMgwXLtDKdOTvOcFLP+It6S4j2jT6Gz0pTOx8q7 JisYfwPegDfb6KKLwsdUyOdx5WSiI82hucJwASXrJZ4hT4tMVnGvmTZppAy8Cgwom7tYrVkweTlO tJuRBcNtS6vYHoJ1ocFlUtXni2imoitaTtLW54b3wpmuaV6dvFxVbBvykmp0NX32gJrAUFPNbyDR sSptUj2dcVCOh4laE5fcI9nXQ3CUplCWPG+UJQYHFpXNtTWZN0nkhOseKn+6qo/p2StVFU2hHPcN Ibe67gg2EJlaADXBoabpKRTJbJNM6YBVHQ/M5FwJk2C4UHAB3qZhIJ8p0i+2Wsp8WJgh189Xjflz WZCVw8LlNKsOlmoBI3AiEBxgfLRWlBmt8MxY3/+ZoGPGzrAG6vDkKzldIZPEt7QRnP/wRbuCdgCY CVQlcbJCZ89yczzrastmo/cNsAQGln60xTdLvG7vziS51PJKZcLPkyHF9MFYZebKIgcmPNnSyBNX u9Fswiy0m5G16xNjxnxUTcYK36xAJEgrASiBAWXL+G6aqliT6Zss/TEA+0tLdrDZjxoBNIGB5sxk k0RH/KHYE6q8HwJOoSNWSVGh5/Q39163ItGp5tAevZ4+TtTII2AmMMykSrLYkAU5QyQ2ZKJs4QZC uVxFZMgkHP43fgZ0PWynZxLHVe4d3OrQQLOXmAUn2BluVLg36GIxdQPxaanjFaR05rAjb7zQMGjC C92lqtAsYa6dDVgVKTJuYK/8AUxguXafQp95wkdTfy7HZs4auOoF6m7MDDKT7nwF7AoNLt+bheIg U3+SXTX3RWZLhkmZeo+SLThW2rUDyaNoka8ZKmhMFJXWCT/+Rc85DOVVNRl6U83ju2pdzaKF718J UwAsgYHl2vBM7yTyEVrTHrWTJKNKf63kgZQ4wg8OM/2Q5cQk7EhWvsBUuWbK5jXJgiO2kBHTBbwH ldDgQ5KYNNSyLiZmvPQES3Ww0rW2wLjn0CBj1aoX5EOb2x2pSJ5p42D4hgaZKrOwS0ecyZjHQM+1 KR2pqrEi56gClYr7R/he+DReOVATnG6KjM2NlTzLLjHZdFgomwpX0F1TxaKnqyBmC3kAjwke03Wt MxCcO9TTWfQa2lFOSiT7JqZPUkC2hIaVCS0iCQlObOZDWlrQSZl4oJCc8cVbfTNnBHx8PT6wXDtD p64lwRmZaR/rM2qQA+QAOTbrmponnBtGKsVEHKCrKsZvD8atGDEgWWCouW6w1oZstqQ7UhUvfWFN Oz9PjEvf36Igw4XxxSPiAZrAQONULtlfFtGMy62yKZ9Hx5zsLlwZzQa+XqLq+qhYvhRqyk/n0orq MBKICQwxfX3jT4dIhDQRN7LxfuIsB8JFQrLIJzv0ZY5vnsMRPaAmMNRUrW7iNkXKGzKl80G5OnWV zR1dtRflWC6JI4Tn4DVgubBcWC7ou8ek7/7IAMIVLbfA/MGH+wWr+YOHBxhAuJvkxgDCnd9iDCB8 2NDBcmG5YFhuivJ31We+4KyJ5P5/9r62u20jSfev9PGXjWclxpKTeDbnrM4osj1R7njia+Vlz83J hybQJHsMoJFugBRz8uNvVTcAAhQlUbIza6If7U4siJQtVT/12lVPaefqhn1N089uVryWhT/B9sHY wGLVb7Xmu58CI4ewrFCWO5Wl7U7hIrRVc2n94NR+l+0NXypULDLMLLVa+ctQcsCJqZnX1MxEqmcz SimYIVeunXfF/A7e4tlycIQBPOAl3uitvfX6vSEPK5YmWyq3/fUwgAegxGZY9huP6sPJJPS5tyug Vo4OL6niURcSNH0vj33vvZGmnaJCv2B0vsgT5Aa4hLGW0K3TIoJJK8NOCE/GXSTqiKIctGREjRkK bBPmYedo1pQEBP/g1q5Sud8DUJaZToJ1CfxzC2vquV91hTgmPsD0WAdXniwg0++ZbGLqVwKHQJdQ stBzZkf1y1+3bAxZH6AmOtc0MCRhGpxck7copiD8cPArZmp1JDKzOm5ZdeGSYrQw4NT78KOHuMav Kcz4dbO65EeDuPfas8wpTz64xSwd3uK/AzoWnStORU6AmQfANGUmMZXBFXuopNol3LK/tZtS+71f 31PiCNREGMANd+74+bFmcTYPG/JgYgjxeL/KhulHp/QdeqZRkYoxlOtcztaOW1nIOS/8ymtXbWqd zUI5clgzk9RuPL3TZ2RVtd3n12n6pKEdEWjHjGxn5eMztpxr/q81pC7c9NVGcU3Fttvii4Jt3KDx HMDaCSWdJsio6zIzuvI+l11wqKxw84r05K/STnVleTQlMSnCtuhMzLVKah/nd1vlG8PCLK9kftSN 6mwLsJxeBF4iwws3OumEDoudUmNb+BYomJV/hWCNwpSU+1pC7M/3iBMA5fFAgbjGr1dX+zMkD1Tp oHMeXSRZvRV03J31HODZOqZHaai9ivRzM0zyoNvj1+2wB7Svwj6E8tuo3Q5+N12I5gjQ2xcnYvpY CXMG4SKckDE1vFk27OhoN0AKtpPOF+Vr7uMCXiLDi19GR8bismiXDkuneIvsprwq01wX2lGqXxku q8q1KJTfFAS0RIaWTRtWd6kX+mt8Y6hfYf6+4NLQtOnh03aApAIGJr6iYrvrMuQjFKMvdRo8ErZF ASk7Q5cJDv/xhw9xjV9XXoU7OyZqCPsbZVVZPa25J8uVKtEznXgC1TbOp/f1N7lzPQE6FhlojN00 8DUFNPEZE3szZ3Omc81czZV56v1y2PBIQv8aOIEthlrdrlYD/VgdclXdkGPpsrV9fq3Dra0fU6ox I+VIRVnb0gRy6ZCrLDVPL/bGRDBXH6di+1HpgAZ1TRip7Q2UqCpBrgL/CDWKxT9ehTvZYXPk6Lxj L5s8Fueimdym/MEl3NflLyHpPSovK99j2hT1YAnj85DsDTNSisxv6260g6HSD6C2N5NJMddLVQAv 8eFlUO9H7ITYCQoTS+x0sZ6qhwwqHeCJVQtekOh332WZnqsiURRB9ZtyeFMekzBXMiH36DC4GGPM pJJFoX+rudGGJ2v8oHRa23Cf02CI8GEsr8UrUgqjfOsNWLljREticgJIrp1iMCR+6JlwkdA/6QJi 2JQwsTBXo0JytlBZiZplnHjpNVzVvK6E+fhSYRVlaX6tpjcv/gpYLMyK03cekk4quKIIwdLQdZBp 8bfDrjSFpzIn25FPAIjHAwLigrggLogL4oLv/9/6AW/1/Vg6eldYNLKloydYOjpO5cbS0dEfMZaO ftrQgbggrjgDy7PzsiTDpK/FSwogX/IMynnbNSR+YNIw2BUoChSlOns5OWE2DqgEVAIq4VXi1syb Wee7wTMRqCdzWTpmnKRP/mXsjWlHOZe8ckoomSzCW6BkkaGm5ZlvGJ6ZhULawHszARhgcaE7t+vO fx4PPgaPd73Wf/pPKFlkqPljWEr6495LAVeqLDuMRtVNg/pev9Th9qr+IV41mzTEZar6jyM6zfNy 9Kc4ptNqKErGfmZwmHCYo1HaPaZhD1xfR3RYgWAPPnHrxA54sMpvQAvLb0d+rFt+85ZTg5n5BEAZ lvXdXCM1Rlsj7u+JO6CTK6qxW5FtO/I54m/E34dsayNw/f7W7w/BM2v7xACHcXCXha60zEYf1/AH n1zQvHfKkdF0sMKwwg8zyYc/WPDZSPT87K1Vx+0RtjXbouofKJQbyt1/GI/X3uD9aRSee8eBQrmh 3NsPvgP8xmtADVCzCwtjYjajX+vCZJnyJDwj9wdQbig3OgeBmkejZlRm/y8jsfZnbeffX3aGdrc8 wvrD+u+08LD+QE0E1j/OoL95+J+dj3AJUO5xKHcqq7FsQDv7vNK5GmonQjvoMUI7oObjoYZNRjdA hpgBqNkbNUKwO93GAjwUUAMPBdR8TFvzrbTpiqlBBme/I7I/pHH1+1cqjWHCYitaQCgB9b6h3iPS ajeilv6zz0d0MDNtc3IhUZjcoY3d/QiTG7XJ9R8hd0P2BtTshRpkb0DNw1Fzn8c9qNul70tlZUWg 2Oe3OuTxAeRuUO59YeLWrlL5FhYQSAA1CCSAGgQSCCQQSEC594EJAgmgJl6XsNmNMXKfAOWGcu+h 3CCWORxVP1OT+eTohgJDuaHct8d7I1fvpbLcDcBaMRYth3JDufdSbv5cJ0rQi+/hEoCafV3C2H1C ppYqG5FHQBsSNP7DNH7kCq9SzYPmCAKh3DG6c1Ulk6c3kQHUADVoDQBqcA+0w7leFq6SWabSkQQM H6s1IHwOlxBjIOHMrPIDoAgkgJoHGJdCegIdoAaoQfgJ1CD8RPiJ8BPKjfATqIFL2NsloDP1xiOU ++MoN8QFcUFcn4i4Vgdnsi/MbKaLI6EqIbNJzz6/ui41vUt8J4ta2rU4PRKnz05e9E34aFz0rUHI LyNx12dv5VyJk9Nf4WlHqdzTDSJLOun2RRzxeI44k656p4pUWZWyNn9jlXzvv4vXqVfKFqo6fmnl jDmoNx9X5xdvxE91VoirRBXSajN42X98V2drNu5fwTo8HjoQF8SFwBLzh5g/hHLHodyYPzw8LYdy Q7n3Uu5SVslCNNNWQA1QsxdqhNCh+eEGMoAaoOYOW7PgCrSfdAFqgJo9UIM+Q6Dm4aj5g2kjC1Ea W7nPXWNBQK0I1NyDmvsTwANa5BKYRe7tRDrwRS5DpUUoAfVGKAHUfDzU3Gc+Qab9KZ4aIj4o974w AZk2UPNg1JiS2YokF0CBGqBmD9SMKpBITF6aQhVVHIHETm2GckO5R6nculiSZhu7hnLveIJyo3B0 ywMKR0DNwLj8wySS84Rte7K7ItF/AokCbM22PYGtAWputzVva1sa50m8YGuAGtgaoOZPsjWDIz/o ZPfC6konMtPVetsAjjDdHVp9uAQoN1wCUPNRXMJrnakR+YX2SjgCl3CzDaL3iB4JKPd4tPoPEPTt eIRyR+25R6PeoG7Y8Qjlhuceh+duSBrG4rfPWJGhx9DjPfT4D+H07+poRPq8srpSEVZcdz9CuaNW bjF6gqVUVor93cjVHe4cGr+nxucm1TOt0m1kADVADfwE/MTNJ2g8yjeHPDC2UMl7V+cjUW2Ub6DH D/LcDevdNjKAGqAGnVhAzUe1NVcLaX1q2VgQtPgANXeiZlSRZqanVtLfMvYOHwQSUG4EEkDNn2hc vq8W9HdvLAgCCaDmHtR0C+BJtPBQQE104edMz2vm2DTFyONPKDeUew/lHtO4sC5mxuYNowua17af oNzILW95QG4J1PRcwl9eXfMma5mJZY1AAqj5OIHE9m6WA440skJZOdVMTLLXb33IeQTiqK0n2DbY tsM1XalyidWeHh/KffMJyh3lVUoqK/mXm8gAaoAapNZAzcezNZfFXLlqRPHESxnJqDBu16Hcd0IE LgGoeThq2GR4G2pmGwsCW/PvQw3EBXFBXJ+IuFYHZ8IvzGymiyOhKiGzSc9av7ouNb1LfCeLWtq1 OD0Sp89OXvTeEQG53y/7/IqHMFD6Vs6VOHn+KzztKJV7ukFkSSfdvogjHs8RZ9JV71SRKqtS1uZv rJLv/XdVZ5cF9zuo6villbOqb6LF1fnFG/FTnRXiKlGFtNoMXvYf39XZmo37V7AOj4cOxAVxIbC8 URt4pzIlb98btvsRtYGIUYM6JFDzcNSwyfgpkDhvLAjqkEANbA1Q8yfYmq7F/MG2Bsvv4kXN4NBX 9/eYf7q/5tmyzoq9fp3DbZu4fHlDo5G2QL0RSgA1H9MpXKmlsn5H8ENtDUKJeFEjrhJjfV0NHgqo gYcCav4sW/OXwZnvCPMPp9v73DnlXK6KatsA3vJrYXgMyj1q5eYbOken5Xh8DIEEULMHahBIADUP Rw2bjBuTAjfNSe8RVXOgZjyxJ8FYduHnyGNPBBJQ7j2UG4EEUPNw1PzRhRFMe7HT1jSRAwIJoGaU gURiskwloIHe/QTlRiBxywMCCaCmF0iQZSyNLiqhU4VAAqjZDzX3+dwRMcUWlZ7pZK+FE2CKxX0g bNuh2zb6kEX6ufGLuRB9AzV7oiYzicwy7mEEaoCa/VAjndPzQqUjqs3wyAACie0nKDcKMrc8oCAD 1IyzRs+kO7xmJVMj9wfB0A/nX1E3g3LvyBK6/b3IEoCa+FwC/fRpnYyl+evsM/cUegw93kuPkRAA NQ9HTe+G9j6jeVjUGXv9NoebE+zhFJASQL1HE9zt/g3/GBXhz2N3xqIlkT+FbYvMtvnDd5WsancD GUANUIM0Caj5eLZmRHFGe2/CocbDIo2DO7ldNyc73ED7hDQpVvX2H765ahsZCCWAmsc6hcO5O0mV S6wuuQ19G8rjSzBv02YoN5QbeQJQ83jUIE84TJeAPAHqvZd6+w/kCUBNpHmCVblKtR9XRZ5w8wnK jTzhlgfkCX8OaiCu8StZ/+MHHvgQJ1934x++Y0L0iMfPq8rqaV0pB72CXkFcEBfEBXFBXBAXxAVx feriWh1cgH5hZjNdHAlVCZlNeqH6q+tS07vEd7KopV2L0yNx+uzkRT+aH0Toq9E1qNNv+Ms+v+Ih DCO+lXPKu774dfD7QLnHotzTDSJLOun2RRzxeI44k656p4pUWZWyNn9jlXzvv6s6uyx43bqqjl9a OasGFZer84s3vtoirhJVSKvN4GX/8V2drdm4fwXr8HjoQFwQV5yB5dl5WZJh0tfiFQWQ55meF76U u9LVQnxfLeivfnWtXcWn8LOx71HZhd5Ab0gDXk1OSGEurK50IjNxpZLabzq/oB/Imgx6Aj2BntyR nf+wUOJCcewrZsaKNgruFOk/HJQLaOlqOUmDhWOWLEPgV6GLJKtT5YRr4dG+5hElRVHnU/phzEzU jpIugCYy0LgmaXZHwpncr1VbLXSyEEzTl5glZ+OEIlEttBOpSWqOfCdsmrQH1Y3VEADN+EHT4sAR LJSQXUI0VdVKKQZL67fIQ3UGRxYpvwK0RIYWqzK1lAQP+jOghowMQ6S1PRNA4vGQgLjGlS/7jJl+ AF3Upna39hFCZaAyUJnbnc6Ti6sL8cXX+6iSD0zebUZHjp6EEBgqFhlmOMPxTANTynmm614Yu7v8 IqQjnHUAy4bMeEDM+BEjk99qbdUR7zIia3LkTUkl31NS5DNjQf9fqBUl0ASgPAymUTJtbEo/TWWA l9gsTKp4peZaLHu+SCsCTju6yFgiDOW60Ln+XXkbtNJFalaUNQEvkeHFlKWxVV2ws/H12qqSyXtl 3eRJuB1oU+ie49ou1gE08YUxviRHWPAdCj4SZljkdIC6zMigyLX7Grh4PC4grvGrkVebyYmQZZmR i6ZwLdjVzuR6QysroSvBy0/DjZqti4JkD+WKDC1WzetMWoreSMQU6ZPxdYn0WGDkpCrTS/p3SwIO 39L+Tq9n2vlaOLASGVa2gv/gpcOtK0GF3lmaIvV3rLcEeEBMZIgZBPQc4GmSb5ESGAgwUyXUtUpq tjmmENLfuDY1z6l0OpQlgJnoMKM6d6P8nevUkJ3pG591Y1UCs2q/SIW7+jhB48tQawbLtpMaQGF1 yCxh0o58JW+qXVI719aClHgbzMAaDVuRqrWSNuO/+EYjH5DweCRAXONXnNDm2uZg0jlSG+56lJU3 rP5ymIIsx12QVklynQvpKAR39AMliitC0LDIILNngN3vNSCzHKqNX8AgwyBDu+7Qrm84hw3Kcio4 S/1i8sLPKuQypXzXOKeZgXG6FitOfOmQ+lpXkQ2HhkUGmXeKYKErYyn/0UXCPRXk1HP5njw5vXGp fe+WSEyWUXpE5jiVlRRyKXXm2TzhxOPDTCa5608WMls77eCV4ZWhLneoy88LnTV2dXNhZci+FqYS c74q97fnimLeisyqr0YvzApqFRlOuuvvEI6tTJ2lfH+VyCyp2eamgrvcfMdFesSdFR5FlamTBd9t 8YgqQBMZaJppQZ1zLyTPEXL7GufM4cp8J6bozTLxNRrAJTK4qCItjeaxns2ET2lNQp/fdh/CrE7k ucjIHAEyEUJmGw+hf9b12mcnfz1qzE2qZNa8Mqj0ATRxxjJrMh7DycL2he62bdMx6gZ3s4BMZJCp lM079oP97gk6MKX0M6GvODrIWJUoggVPGIqVyjL+8yZ6OpR4v2TVXNqU0ybAJTq48BihQsXyQ04e 4hq/onBv/eYC/mbRUqap5Yxxq2jJpak1HxmuEaM0rWvuqG/67DflBXobHaLrlxFC1vhlP2kEYiJD jA/Gcl3puY/lAwNeKatkQbI94mzQ1BVbFZeY0t8zh3xxZex7OPDY0HKlc51Jm61b4/GcuxOCh3Ki VJaTQj4bniv0pUw6iwXzSST+4iQ3KSqXiPogLogLFvzfb8GxZ+4u5zayPXNfYs/cOJUbe+ZGf8TY M/dpQwfigrgQWA6iJ64bhZrAV/2aQG4KHmvgQ8nMnMuPw3HFTQeuAgtgbJjpWq5zxeUiHogKpWge btG8lqMZdzkSM5PUjo/JFOLJaiGrJ7g6jg8wDSCElX6jZbWQhIaFWT0JjLQy3GxsjMpCLnlDkKW/ g/mqNJpTooNM0y7JBFNZtTD1fNGwDplEpTUXPTZXrDyjybDRRWLyUlZ+TJNvSICayFCjtDcwoQ3O sQ0JC6ImQMLjkQBxjV9x/DpQT+Z8tXaVysWrouKmv3cqCxfMC12KVEuupdKflqxzth70smO4IUIn fT9FfAcOoa4TFZqQe81OgExkkPE9KoHyup2mgneGd4bSsAbwkr7TiRDfSpuuOKvh7PjKzCr/cFks yaAa+ifQ7weFgcLsza3nt5Y4M1hdEipPbdzCvHrtIO/M2CPoV2SAaSqULH2/I0tSXEL/4+dF3xi7 1hjrjTFuxneBmcgw019jv89KR86vT8ST1o0zFTYwExlmzutqQUaDd7SwOfmx4Ebr5gsv1VKTB3ri X2GwnAIsAMstYGmzgrCtb3g1HyovDoNk0SGmjWHD8jACRakSPdMJl1v2DHGAmcgw04W0gZu0qigh qisVds4NuQD6tEe1LY3j4JfeDMxEhhmOdVt7Egr6/JWNGdmAaGfSBEaj2ADTBiWbxTGvWi61l2x2 LjZgaomyvA+b0dfNyolEFsBMZJjxNbupEjVPxYcJZtX6HTY5Oi8zxaDyIc0gVgZWIsNK3c+Ndlfs clnIucdLGyaTe/pMTeYTlHvja1zo9ueazInMmPf8xEZmgKQWPE8nQrwxVnG1DzyeUTqjJgXiNR9J UltZqWwtdMruZ7be9DKwzTny7xIZmxgrUjW3SsHGRIcYphpPGnqWwemvDnnFpR42H9zyuxzuhkte f0y/QeY7lGYzTkaWvI2tyVZ8kaSX+iLYjE+zh0WxTVw5ARIejwSIa/yKw13m99Z9tqfAKORmYoym AAAViwwz3RVWS5V5Y7flCTthcdrQF699X0aqyXVbssnAS2R42dR2GBXdGiBTV8dmduw8HaK/r+jd mftLLF9exBbzOFHjnQ5BZ0kZfSDmZe9UKIYSM2tRMuDqkrcENXdfmCv8YKBAXJFFfJehWqZDUcTb 5/uiQUw6xIYYbs6/sd3Gd+5vdiadTELMdzL5gjtv2yqsxjxhdHDxDdel1W5TowuRX6/djTy2tsNb wUJVTIUNuEQGl01n0mTPckR/xh3F3vgQ04T9LnTkT56zw0nVLDTOyh29bV0Trqc2Al4iw0uuqoVJ ucRgpm1/tSmVld4VucCuwdCY8V7r9nnLLAE1kaGGPvfrOri4oAkRTsysyQflTV70EtxQ1/gW8qim MArMxBbL3Frf7Na9tG23E4Dj8eCAuEajS2fnZUlpor4WrycN7/aPjm8XW+JtWFEoChTlnoKu15sn XebcDbi/Na6qKRU678bEvmYeubY+8yP970LSS0+gZJGhpmOD++yXd68vXnz1/PTXpyGLZq5xOkRN Ea2ovSlui77NFKtv3VcSN/nRgaYy3Y2supac8/g9qYOxH86XaiZ6ZbviI+JprTNmjBbTzCQo8MYG mkSWoTGTN1UL8Y3KzMoTQIkp/YMz4eo85wt9Xo1p8qYVhL4/GB/ABdEfxAVxwXb/2203lhze5dZG tuTwKyw5HKdyY8nh6I8YSw4/behAXBAXAsstuoe2pMgVooVZbe2oaHq86MXPjRUyTR3/R/PtuswE /WM1KgMRVh99M0bTs67S7fL0BJCA1YUG3a5BA/1YHTLnhfFcvCaXlRo2AN/yWx0u+8XFQiXvM+0q 8ZOym1Gdz04n9H9PxbF4cl70e+5DZyMWkkSn3PQhxUIREMxcFcrUTlz+QMhYamsK33LmewXWoq50 pn9XYkkpo7HHzY0e+uhjBEywoZLXs7q2aYTkPNNzJtRiQ5O09ifQDyuZLDbd08BMfJjpNcz3CLUC J2g3KsjjXTesz5umrQSoiQ81PTPC/UMeLb6hvuMFafxRs4jQcduaTNVvNQUzAEyEgGlphng3aZax NWGy+8qF/RrbvWlHTDYT+tdaQmugJj7UvHt9ccTNRZTEzhVzm8uGHqTLojK1VJn3XokseE6D6QUp dwrvRtoUIWimimXf38zSkUsOYuGQQPFkqRO+3dEvWgBi4kOM35ncX77C9mSLhFJXeu5hs+GyQkdj pHjpaFOSdjpQXZeEGb7DKMmKMGVKkWS1b5Me4AhoiQ8tFPh2hV7yOe9UmYXjaK6/pI+JezFNs8DF N3TAxsRuY/xE+tAZhaFkyZt7No5o8x2VAWDiA0yg8JJZbsiEqGuZVNk6gMfzbnbbK/vsrphhjx01 l4WrlPR0Kv39lfdeJAAr8WFlU/T1K3r619TBIzUIGsAH4W/kqAkOp/TlFV3MjM0bdtKl1JmHiL84 YECFK4NQ+m29lLEATXygKY1zekoBjMeGIXDYUNlVjgu7FLfY9LiU1k+hAiCPBwjENX59GujH6sD7 BF+qascKgVt+q8PtE6R4vGV7eamWutly5tsEn+9oE1zgqitGN0nekCIo7Ra8SpPzNL85odfuNZVO 8Vn0ur02HRqsJ0BNfKgh29LdiN7d4vXzQvEage7tQEt8aCGRFuRxfSMXJ2kNs3soAciS/C65IFmp ztZsmaCtfZZATSSoyfO60AlPdLTIaa0IGZbviySsAepAQxGMmCo1DOsAltjCmLay2Lgnbs0xha6M 5QZTrg0Va5EsZDGnNzEfPIxLjNUhZVvm98a0dGbErz2i/84Nv0pf1sxSFuKYBjhATHyIMbxS3ocw ZZNVD5uLOwAdibpMvdNq3gi0xIeW/jUFeSB1HQxH2lqSgYtKfUGKCRCBmGgREwByxL5HZuSdGDY8 tsmzu2l/f1poxmh7k8O3OQIcQBNhGBPsRZiAIcBstXGFO/WtraiJKnmPCeASH1w26/ecnhcy45Pg jIjtTWtZelcCFOtszAsGqKI2McKqjFkkBsMw/c4c3aFEOJkrsZJrzw4PzMSHGV01rofrLYNaLqfS 97avAzLxQWZHj3q/7cvvevft6rxzoj/Z0EU7QE18qOEpuz1709lxhQZ3emWAldUh97P4a9d9fp2m kQWKEYVimOm/uMdpid7GDzp+iGv82jIeX8AciG5dJAtrClMP7zXv9goHeHAXJi8zLYtEfc6U5Zuw cbPajrk+LhMKFsMWXhjC+Pzg/1NTK0PT65dt06t2hksZqZCWXGSy1bPmixZoOYoSLU6VMty3dANF uaR0oS4okqJfh6xL07s2CZRTpsi6LwEw8QFm06Pmm+uZyG6ppZCcZFbK5rqqyKQcicysjl2puDlp oeeLY7Y/RbI+Ambiw4wHQMIj9o5QkFHMogSJnk3KO5WbquuPFTLNNaFqpbOMvha6IN3CrICaGC0N b1OtFY9It4Fvj5uhnbAvTaYTvooJSzN7ngu2JkLUMATmzJvpQ1tuLgn10obi27Yw2Viirjdf0r9I XwNq4kMNHf17pUpBNsVPeZli62amUo77Bbq2E/BMxQyXG5cvbgsuW7SIzSonti7egwEzj8cMxAVx QVyfiLhWB2fAsdH5Lt82so3OL7DReZzKjY3Ooz9ibHT+tKEDcUFcCCx3lR+HpYB9SIT91SqMUXxw 6eZKwl4nf53aW+7sa0fOmYS5YtLQEk64KeuWvwozkDGiRvJAiXHM8LEm2zFsBruNOpZw01ANY89p lKAhW+LkMrifPoL48kP74WurMiWdH9nnVh+wUEcOmTtMyW+14pt5nnbjzh7mn25vPDwbEYZnYzUz m5sveoXOzXnLc/uc24DeHEQgMWLGBaoyORsakn7HqVUy61hYE95YGVIoLvcAMvFBZov2g9edElQq nfORNC0+GyTxDDZDCYOzsQczXH7p6Hv7s7Jhen9BAbIoDHeLTTOVk+9K/1X7zh8sCIsSNdtWZdD6 tbE/gWSTYTUXjt6eSTsBXB4PF4hrNNp1dl6Wqkj1tfj7pLmee6d+q7VV3jMLzg4uFtJy7HcsXtee eudnTBdBf6A/rD+3eqfLQD2V0N/vFK+PWxjrA5V+XHMknMnp1TTVnGFTEkXH4LgRPgxwQckiQw1X 7JpFYUrMgrX1o1cryqwp9K268u/MMPkQH1PDoOffUcn34JuPDzXtcPBN//3L5fEADqubTYOuVFnW a4w8YMKJlxOtqiGT6G2/cNcmebBNlMdOJvmx7Z32r0cBAU3ABjsQmR34JQkHf8xaEODx7OTXMGXn gfEjhSIX0iknPvvl3euLF189P/31aReN+GgfoIkMNFb5R19ko0DDs43kci2mPHuZKOe43Z4HvXus zZV07x2XVeZGZjzbC9REhhpvTsJGEopZV9KmE2Dg8RiAuMavMveFpQfF67bdEXu4cfQt5+UNXD+4 Fvxfz6rz5J1vnfBNWp6n/gnGhmNUaO6nKctMt2xL07ri28lUVVJnQlpTU9y94nhqeN/dtd5wxzBQ Ex9qnKqYN4mvtHWRZHWqJpuCMaVnfJl5G2MB8BIfXhp7ceRJl0i23FCjc3Y+sqGwCDaH142uDT1y V4SQ4i3BhrI0QCY+yLxmFxRw48dWmK4tNJcbyzxLvGRSvievlLDvIvNzTtmcSYW6lnmZsQUCauJD jb+czPV8UXH5h93RW6uNJ3JruvaGbklXTmUzb4FAAxglYnLeXuzWruJ2PE22ZjbzqyO7Lr7+Ai8y Mz8HhkB2YAUhrUhBAxghaggonZVZURizWC105ve76WLJXG5zWZFvYoDovM7DaCVHzcYKlyxUjrQp QtT4Zek3suimHyLhRZK2EAtug9DBAGFGLnbIbK/sOvJFGu9/Ep9/cwHHX28ZclW256uAlvjQUlrD F57KtWSzE6Dg8SiAuMavNAP9WOFO69M+ryff1pSvHVMMpeeFSnv8JlVlNXlG5Z6011z0Mn3nUpva kYMEk0mM/tDHSd0U1Xh0fXuQfXSKXpk6YQIiP8C/6QyuXbhfcm0YzCl3qRPodny6nfj0hydp5TTz 3X7qusz8pD9X5gg/IqcnyqDKakE59qsuMwo7PZBOx9juUKSElIWksMC2GTQhZ26VrHyUMMtqJoCg r653RRfATHyYcWxKKJ/OTNMnc8R3Rc3NQIMQCjPIN6WhUz2xutKJ5JLdBICJDzA/Mz9Vc6XIMCGP 4+v/GzPib7Q7urxuNZD/cyHRIhNlqqK62yJj/R5ECn75yihcNGXGvBeZfq+OGi4Rdlvc8OADYDim SK+TmhFbq8ICXp8lNetUL4tuLttz5nkeLKYVCZ0QuCGIMgDe+KAu+k1UUVmZic8aojRP4Ok9lu1Y PJ+yUSLUIGuKNtWe+hbwUHj1bK8BLaZtkgmhsGdKy53Klsoh+sXtE3Tr6x5H0beTZvKwHWQW57y7 D33x0BWIC+KCuCAuiAvigrgQRe6ZoWHh6F3J68gWjv4VC0fHqdxYODr6I8bC0U8bOhAXxBVnYHn2 7eTEN8g1zSyXzYbI0O4CmwIlgZLcnmL84HvM6+mxq1RJOZieFy4Mb/K1WKdUL7VLzFLZ9VH3NWhW ZFBhWmOZUKinf/emNbQLdhD5Qdq52ja/YlrrLOUDm2YmwdaK2DCTyDKMf2vVTop7G+MnyHkTQ+1p B9jWzAhbgf6Wn8ralsZTcQEzkWEmjD21LomX1xmRNv7nqF0Avm6alTc2iZGVASyRgWXTuMMbUose g4AoVOV7CYGJx2MC4hpTnnzaz5NfcovkRejiR6IMLYGWsJY8MlH2yvS2nrZsxMh7kPc0JI1TlUie /A5hbTC2zLNmuMe4P9XQhjIAS2Rg6U01NLyNw0CWie7DHINPoYd2yGHzcnR4ua1Ku12hEzsKdEBL ZGi5syA7KNB1rkpXYlZbZuQDWmILXHoFNT8MtWEJqBbW1PMFL9M1uZ/XZPPSrEtdMxUxnQIAExlg ciWLprQfmF9TbSnI7ZX5d/gpk5emwNRQhM6oWNKxG75HfmucH/4+b6PfLU8VCvw33gXIRAaZn2RW q16h8s4IxukiCZsTcIEYLWJ2XSCWys6MzcmmCF0QVmTmue69LWqXa2wYs7CHN77ANxgYMZVOJwOy I/JChA5txZItEcc6/5Cu8qQkIeLpQh2AJjLQdKFtzz39vdapZC90nvxWa+cZbO7yWQBNZKCRIa/e uB/fyLIBUO8qYFAabmhMgJfI8BIS6kDq6UxO4e26bC6MuisCT2+kbXpcSlutxbyxQROA5fFggbhG o1tn306eU9zGg2ib7Xkve8tpLgvODjAxApWBytzjjsIF9F5NMBzY+C++UxTGqCWuB6JDyz7XjYPO mHaV8qYxBpiJDDPDJbf9HXJ646bva5UBaiJDDTsbphG2wrbepi3sOpkjFUJcB/0JqdAXlAqdlyWH aVjNCtWAatznWvbo/e8ynKPw/H9rPyzfa2GAkkWGmk1jy0++hcFDYp+E6ChsjdO4GooNMq2NCRsv mn3I/oq5qlROORAdC09DKwpzczoP/zZsWY8aMpWsanejhaV2HiuLZnmT51VYSNdfKjtVqgBcIoNL t7ZrgqN//NFDXGPKh7+kfPhKkfxSZho+d46cLtq5oCHQEK8hGIkHWj5G5HHPSPzNiz9MxMeKlQdO xKvhQHxjioCayFDzwd3YqJ5EVz3p5sX2azr4rO2sfSpSq5nAhb4XqIktlBk067drimW2q29/AnQ8 Hh0QF8QFcX0i4lodnKnGdrG7vNjItov9F7aLjVO5sV1s9EeM7WKfNnQgLogLgeUDLr9up+T8bGro PSDLixI03A7M0vX0iU/9I/YnATB7XJpu0bMmngykIWkdbsHptwECL5HhZS+O1ts4O4GW2NzRPhyt d3J2AjKRQWYvjtb7ODuBmpjDGLeDo/Uuzk6gJTa3tLlQZ/OSG7ItrlQJmx2KfFu/1BLoMaaGFHo8 DgPURIaaXZyJN7hbgYrHowLiGo0SnX07+YpJILpRF/FOOToi9MxCP6AfIL8DWj4KWkB+B8w8FDPD PnS58dA2eOj7BmLY7gA0kYEGvHcI6aA7d6c852WpilRfi0vKfC7zMlNsVkOs9upa8heQ/kBXoCvc czk5ISXp7gJ9GrO5zYGWQEugJbdHYz+HCJ0jMN+hfG6Tha5Id2qrArNb6Glu7jdeXTcPjYYZbF2O 7n60vdRyTWfXVInaqZRvQWWWmVUv1/NXo+22uhLcolECpnfH5an9UpWbwlWW8kAPpkx70gNfneyV CUqT6WQ9AVwig0sbyZF5kQUbF6t+q7UNBqa0ZqlTBkdo49lg60isFjrhbnUwY8QGGV0kWU2o0MN+ 9L7hMWRa5DRT3KjjtKtAmRdl5JLXRYMO9Fd8yPlDXONXF+Yqu/r58qV4o5zjGz5OALu+WSdmxoq3 58c//POCiZ2ZkDSl2G5GJ4PaZHymtWufZpTQd+s0OGEzE87MqpXk6Q3vn/2V8obz+/Lqe8AlMrhc tYjYmiD8Qc7FVWNLJkL82IDE97GEr/qaFPASGV4aw7H2FGZZRgE/4YEsTtqzLT4HaI1K12BrKN6X vIsCmIkMM25NWV5+tClSdusEvIvyJUsOYUI/wqZ5BXkB8gIo1j15wfc/nf9DvORg30+/OPHGpCpr y3NOyLDKJfdf9VXfppjX3BRAx2Kzxn4mai1WjIWb1dv+PZGkv16Rk5eesFZboa5Lb7cBmshAs/SD UE1hf2hAAqUxeXJ4bnhu6NMDPfeVj417hE+u0knrxLcULZElru0jBEufSl5OTV2xsW3z6kDI0sR3 XJ5pRp4pKV8LV2vOshDlRYcZitTo0Vftvr/qI+hoU5HZuqQdbCxwdbIAaCIDDcX5l28F12TenF8w oQJDSLmngbDFeNawDj25qiSnloj1EOtBq3z7+yk5YyYW3kzivexthLnc2FeoDFQGKnN3enRh8py0 ZqhPPLFq/ULz11bmamXse/HZxU/vXj/1+84L8T9v/nE8lQ4lqugwk8liXnNzjC9yy4rS6rLy5cz2 xrrlOU2s6joiBoPTwExkmLllYVvX8MCWJcze9NrhE3+N6UGEWgwcOcQFccF8//vNN9Z03eXZxrWm 6/QZ1nSNU7mxpmv0R4w1XZ82dCAuiAuB5fAirG4XoVTGZE74iqIwgZ2jV05KhUsWKpdNY9TKVwbM tJK6gEWKDDMMjUKptOlqtypTS+kJ5zfX6rVTszrb2ezuaccBmtgMzQ2mzgkwAN8MleHr9OcTygIU yS/lMs6Gdh4aAg2BhnwIk1zP7VTSvW8C16kSCwpCeJhzirvQGOPXV/Q9tawoPO245cgGX84EvfO4 Bxo/UqaZO0D5OXD61EMIoIkMNFNOhw1TgjV8EyH55YFea3IhAwnsFb+lBynABA4cWgUqWCDmYyEG VLAAzIMAAypYwOUBcAEVLCDzQMiAChYw2QMmoIJFagh12VtdQAULrOxvWkEFC7jsDZcPoYKVGfYU xxfgP5j6taEC7WpUwEycLqnpkWuujsD9+pGhAXHFkQiA+xWgeRBowP0K0DwYNEtwv8JzQ58+vucG 9yvAch9YwP0KzDwUM+B+BWgeDBpwvyLWg1b9GbGeb+Hd3bDbXdxuWncHrZw+BoSORQaahzTubjdy AiyRgeVhjbs3OzkBmMgA8+DO3baTE0iJDCkP69xFJydSA2jXDe06u5x8QW53w14h3gWiF+gH9AP6 scc1SaMvdzc3sENK6FPfeNZQKQkzg5JFhpohu0kbxSa+35Be83dqTduZppDGLxRxmr6wFlyZ8W1o AE1koJFJwsVu7m5mq3OTlK1ZFDENqAm9zy0pbcAWEunoUNOYkc5sdDDqzVHcdGCEsX+aKmypAWQi 9E61Uzx/sxsdvhfaLciw0AG1xoesTWEAlvgKdVxRYeL0lMsswjWzXC8mzwcAYgPUUcVgyWC8gAkW 5JeUqfSPF7Jw09quj51M8mNDf9UxN3kc+3zpOJdlSQI/fnby6wQ4eTxOIC6IC+KCuODj/h0+Diu/ 7nL/I1v5dYKVX+NUbqz8Gv0RY+XXpw0diAviQmA5iJ7u51yeK94U3/InDS8aYYwig0tbm29WviVJ bcPVoPJXyrYSfw9w2dql8MPCuK5BAaiJDDW5ni+qrg8hN8um0X/nmoQeL057I4QVcTFamor+4iWP DnEfAlM58n4e76UmQAOiOihPdXZeVwtj3X+I83ZwFZoBzYBm3O5WLhbMN2JKnusOdXVoTGQQ4F7H N5c/vHtFALCUs6BrJEYUnD47Fd/UlkQ9r0wh3hmJHCM2DHyjUko20yPx5lyIZycvnj8DBCKDwI9X 5zjzx585xDV+FXmVS519LZLEh8t/y3Vl1cTYOfQGegNxwcx8rGDMyqKi/Fzp9yhjRXf6SMqBAiTl wACSckAASfmHnTnEFU1SPk1CvIysHIoDccHOfHQ7w1s6MuXEVbLIdYqGX+TlyMvjQwHycmAAeXn0 EEBe/kFnDnFFk5cnuQsBMxJzaA7EBUPz0Q3NS1lolYlv5brAdXl0p4+0HChAWg4MIC0HBJCWf9iZ Q1zRpOXpwofLSMqhNxAXxAVxQVwQF8QFcUFcEBfEBXH5f3+nVP7Xf8Bb0zvQ49+V+Y6MHv8U9Pjj VG7Q44/+iEGP/2lDB+KCuBBYDqKn75RzOpHita5+nysrs/T4TfJ/5BpmJjIgvFQlZQF+ObaZ0dNM FQ67r2NDwX/99dkzcSWXnIqg2yZCALyuJuKNkqk6Em+kXWfYTBAfBtBu80FnDnGNX0Wadpt/5TOK m0//Vjg5mZsltAZaA3HByHyslEwudSp+llmlbK4tsrHYAPBPP/UiM3FZuEpXdaU4N7+qKCiXNnWC /hQ/qGRRmMzMUbKJDR4nlKt/U1sla/HS6iXsQ2wA+LvU1UJZN63t/Gg8V/1nbeWBB8D++uLFPr9Y c8EP1KM8gTNH5oDyhJ8G4gRisuoSiL8V2lUoVEB/IC6IC+KCuCAuiAvigrggLogL4oK4IC6IC+KC uCAuiAvigrggLogL4oK4IC6IC+KCuCAuiAvigrggLogL4oK4IC6IC+L6YHE9f/blyesvIa6b4lqB rBFkjZ/gL9iQNT7fTdboVFK97X74PTX8ir5pW5XnV/xjrf77yclpo78L+vzLv37R/Izl/I30sjPl fz95cerfYfV8UXVPU1NVJu8eMzXbvLZgng/bPc6MqXqP87ryj80/lZiMxdEcKr/Hfzk1yd+tTvmv JsvyVlcJ/YTPv2rlFSThP52adO0/oW+pmWfo7P8LAAAA//8DAFBLAwQUAAYACAAAACEAqlIl3yMG AACLGgAAFQAAAHdvcmQvdGhlbWUvdGhlbWUxLnhtbOxZTYsbNxi+F/ofxNwdf834Y4k32GM7abOb hOwmJUd5Rp5RrBkZSd5dEwIlORYKpWnpoYHeeihtAwn0kv6abVPaFPIXqtF4bMmWWdpsYClZw1of z/vq0ftKjzSey1dOEgKOEOOYph2neqniAJQGNMRp1HHuHA5LLQdwAdMQEpqijjNH3Lmy++EHl+GO iFGCgLRP+Q7sOLEQ051ymQeyGfJLdIpS2TemLIFCVllUDhk8ln4TUq5VKo1yAnHqgBQm0u3N8RgH CBxmLp3dwvmAyH+p4FlDQNhB5hoZFgobTqrZF59znzBwBEnHkeOE9PgQnQgHEMiF7Og4FfXnlHcv l5dGRGyx1eyG6m9htzAIJzVlx6LR0tB1PbfRXfpXACI2cYPmoDFoLP0pAAwCOdOci471eu1e31tg NVBetPjuN/v1qoHX/Nc38F0v+xh4BcqL7gZ+OPRXMdRAedGzxKRZ810Dr0B5sbGBb1a6fbdp4BUo JjidbKArXqPuF7NdQsaUXLPC2547bNYW8BWqrK2u3D4V29ZaAu9TNpQAlVwocArEfIrGMJA4HxI8 Yhjs4SiWC28KU8plc6VWGVbq8n/2cVVJRQTuIKhZ500B32jK+AAeMDwVHedj6dXRIG9e/vjm5XNw +ujF6aNfTh8/Pn30s8XqGkwj3er191/8/fRT8Nfz714/+cqO5zr+958+++3XL+1AoQNfff3sjxfP Xn3z+Z8/PLHAuwyOdPghThAHN9AxuE0TOTHLAGjE/p3FYQyxbtFNIw5TmNlY0AMRG+gbc0igBddD ZgTvMikTNuDV2X2D8EHMZgJbgNfjxADuU0p6lFnndD0bS4/CLI3sg7OZjrsN4ZFtbH8tv4PZVK53 bHPpx8igeYvIlMMIpUiArI9OELKY3cPYiOs+DhjldCzAPQx6EFtDcohHxmpaGV3DiczL3EZQ5tuI zf5d0KPE5r6Pjkyk3BWQ2FwiYoTxKpwJmFgZw4ToyD0oYhvJgzkLjIBzITMdIULBIESc22xusrlB 97qUF3va98k8MZFM4IkNuQcp1ZF9OvFjmEytnHEa69iP+EQuUQhuUWElQc0dktVlHmC6Nd13MTLS ffbeviOV1b5Asp4Zs20JRM39OCdjiJTz8pqeJzg9U9zXZN17t7IuhfTVt0/tunshBb3LsHVHrcv4 Nty6ePuUhfjia3cfztJbSG4XC/S9dL+X7v+9dG/bz+cv2CuNVpf44qqu3CRb7+1jTMiBmBO0x5W6 czm9cCgbVUUZLR8TprEsLoYzcBGDqgwYFZ9gER/EcCqHqaoRIr5wHXEwpVyeD6rZ6jvrILNkn4Z5 a7VaPJlKAyhW7fJ8KdrlaSTy1kZz9Qi2dK9qkXpULghktv+GhDaYSaJuIdEsGs8goWZ2LizaFhat zP1WFuprkRW5/wDMftTw3JyRXG+QoDDLU25fZPfcM70tmOa0a5bptTOu55Npg4S23EwS2jKMYYjW m8851+1VSg16WSg2aTRb7yLXmYisaQNJzRo4lnuu7kk3AZx2nLG8GcpiMpX+eKabkERpxwnEItD/ RVmmjIs+5HEOU135/BMsEAMEJ3Kt62kg6YpbtdbM5nhBybUrFy9y6ktPMhqPUSC2tKyqsi93Yu19 S3BWoTNJ+iAOj8GIzNhtKAPlNatZAEPMxTKaIWba4l5FcU2uFlvR+MVstUUhmcZwcaLoYp7DVXlJ R5uHYro+K7O+mMwoypL01qfu2UZZhyaaWw6Q7NS068e7O+Q1VivdN1jl0r2ude1C67adEm9/IGjU VoMZ1DLGFmqrVpPaOV4ItOGWS3PbGXHep8H6qs0OiOJeqWobrybo6L5c+X15XZ0RwRVVdCKfEfzi R+VcCVRroS4nAswY7jgPKl7X9WueX6q0vEHJrbuVUsvr1ktdz6tXB1610u/VHsqgiDipevnYQ/k8 Q+aLNy+qfePtS1Jcsy8FNClTdQ8uK2P19qVa2/72BWAZmQeN2rBdb/capXa9Oyy5/V6r1PYbvVK/ 4Tf7w77vtdrDhw44UmC3W/fdxqBValR9v+Q2Khn9VrvUdGu1rtvstgZu9+Ei1nLmxXcRXsVr9x8A AAD//wMAUEsDBBQABgAIAAAAIQDP5kzZDQQAABMLAAARAAAAd29yZC9zZXR0aW5ncy54bWy0Vttu 2zgQfV9g/8HQ8zqWZEm2hTpFnETbFHFbROkHUBJlE+FFICk7brH/vkNKjJzEW6Rb9CEINWfmzHA4 F797/8joaIelIoIvveDM90aYl6IifLP0vt5n47k3UhrxClHB8dI7YOW9P//zj3f7VGGtQU2NgIKr lJVLb6t1k04mqtxihtSZaDAHsBaSIQ2fcjNhSD60zbgUrEGaFIQSfZiEvp94PY1Yeq3kaU8xZqSU QolaG5NU1DUpcf/PWci3+O1MrkTZMsy19TiRmEIMgqstaZRjY/+XDcCtI9n96BI7Rp3ePvDfcN29 kNWTxVvCMwaNFCVWCh6IURcg4YPj6BXRk+8z8N1f0VKBeeDb03Hk8c8RhK8IEoV/jiLuKSbqwPCj I1L0LSnpoFtSSCS7guvzwcr0ZsOFRAWFcCAvI7jayEbnnUOVfxOCjfZpg2UJTw0tMvO9iQEgwaLO NdIYYNVgSm3PlBQjoN2nG4kYVLuTWBstUflwh3fEtJuyogrXqKX6HhW5Fg3Y7RBcaBb2XsotAhuN Zd6gEhxcCq6loE6vEp+EvoRmkvDWvYVtreGUd20KFhwxuOKz1luLCptgW0ne/hbGwHoP4mOXLx0J GCuSVPjepDbXB4ozCD4n3/AFrz62ShNgtA34CxH8KADMjefPUAz3hwZnGOkW0vSbnNmXyChp1kRK IW94BeXy25yRusYSHBAovzWUD5Fib/P8AaMKpvkv+p0clxHshkq5w50Q2qn6fhwE82DaRWrQAZkC lvXl8QJJgsVifgqJZsH08iTbf/uJr/0kPIkkF/4q7rP4HJmH0yQ6GcEiDKMgOokks8XFyfss5n4w XZ1CVkkYZifZVvNgvrroM93nl6Vmg3yR7mSaZcQ6i0vECknQaG12zMRoFPJhRbjDCwyzDh8jeVs4 cDzuAMUQpRlMEwfYEcPSiqjmCtf2TNdIbgbeXkOelMLk+vjEZYYjln9L0TYdupeo6ZrAqQRR1FsS rm8Jc3LVFrmz4jCdj6CWV5930uZpSA+MUShmO0xukW0Kq4v5+GveNw2VuSl4vEZN0/VNsQmWHiWb rQ5MqWv4quCniP0oNmGPhRYLO8x+oNLcDLT7wyALnexIb+pk00EWOVk0yGIniwdZ4mSJkW1hYknY KA/Qwu5o5LWgVOxx9WHAX4m6JKgtavBVt12gvEQn6NeNGu1S/AjrDFdEwy+8hlQMPcIb+WFizHtt ig6i1c90DWaUm+cMFdLIDY9nxrbEX8Ritl5JoBzzAyuGZXbWBU6JgoHXwN7TQjrsL4sFsV2I+t7s UXjYO1yvkMJVj1WivKnM/u5svs/DZBYtgusx/K3GURxfjVf+LBv72XXmT7Pr6Ho++6fvQvdr9vxf AAAA//8DAFBLAwQUAAYACAAAACEAZsYo/vQBAABIBgAAEgAAAHdvcmQvZm9udFRhYmxlLnhtbMyT 32rbMBSH7wd7B6H7xrLzp42pU7KsgcHYRekeQFHkWMySjI4SJ2+/I9nJxtLQhMGYDUb+Hemz9Jnz +LTXNdlJB8qagqYDRok0wq6V2RT0++vy7oES8NyseW2NLOhBAn2affzw2OalNR4IrjeQa1HQyvsm TxIQldQcBraRBouldZp7fHWbRHP3Y9vcCasb7tVK1cofkoyxCe0x7hqKLUsl5GcrtloaH9cnTtZI tAYq1cCR1l5Da61bN84KCYBn1nXH01yZEyYdnYG0Es6CLf0AD9PvKKJwecriSNe/AOPbANkZYALy NsS4RyRw0HJPiRb5l42xjq9qJOGRCO6KRDCd9T+TtLnhGssLXquVU7HQcGNBpljb8bqgLGNLNsZn uEdsGJ40CRNFxR3IAOkmsi4uuVb14ZhCqwC6QqO8qI75jjsVttaVQG2wsIUVK+gzwytbLmmXpAUd YTBfnJIsfCteaZ8MTwkLiYicbsY0rhKRc5qD30w6A2cmXpWWQL7JlrxYzc0FIxmboIkx+ghmhjcZ cZF7q5Fs/ruRBSb3D6PhmZHp+0Y6zvVGFnbrlHTByQUb92hgGq0EG6ObbGi7lu4tHaXay/V/56Lr E/JVbSp/sVtCj/yrbpmHLWfPf3QL/pNPZz7i6f+yW/oBzH4CAAD//wMAUEsDBBQABgAIAAAAIQCT dtZJGAEAAEACAAAUAAAAd29yZC93ZWJTZXR0aW5ncy54bWyU0cFKAzEQBuC74DuE3Ntsiy2ydFsQ qXgRQX2ANJ1tg5lMyKRu69M7rlURL+0tk2Q+5mdmiz0G9QaZPcVGj4aVVhAdrX3cNPrleTm41oqL jWsbKEKjD8B6Mb+8mHV1B6snKEV+shIlco2u0dtSUm0Muy2g5SEliPLYUkZbpMwbgza/7tLAESZb /MoHXw5mXFVTfWTyKQq1rXdwS26HEEvfbzIEESny1if+1rpTtI7yOmVywCx5MHx5aH38YUZX/yD0 LhNTW4YS5jhRT0n7qOpPGH6ByXnA+B8wZTiPmBwJwweEvVbo6vtNpGxXQSSJpGQq1cN6LiulVDz6 d1hSvsnUMWTzeW1DoO7x4U4K82fv8w8AAAD//wMAUEsDBBQABgAIAAAAIQAR2LaNdAEAAO4CAAAR AAgBZG9jUHJvcHMvY29yZS54bWwgogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM kl1PgzAUhu9N/A+k17IWthBDgCW6LF64xMQZjXe1PdvqoDRtN8a/t8BgEnfh3fl4ztvTt03mpyL3 jqCNKGWKgglBHkhWciG3KXpbL/175BlLJad5KSFFNRg0z25vEqZiVmp40aUCbQUYzylJEzOVop21 KsbYsB0U1EwcIV1zU+qCWpfqLVaU7ekWcEhIhAuwlFNLcSPoq0ERnSU5GyTVQeetAGcYcihAWoOD SYAvrAVdmKsDbecXWQhbK7iK9s2BPhkxgFVVTappi7r9A/yxen5tr+oL2XjFAGUJZ7EVNocswZfQ Rebw9Q3MduUhcTHTQG2psydaSzB33oLKlunrjeN7qKtSc+OmR5nDOBimhbLuHTvtUcHROTV25R52 I4A/1ONj/rabCQ1H0fyLLJi2yJAnZ5e73YB7zp2487LvvE8fF+slykISRD6J/HC2DsJ4RmJCPpv1 RvMXweK8wT8VZzGJxoq9QOfQ+IdmPwAAAP//AwBQSwMEFAAGAAgAAAAhAJ/mlBIqCwAAU3AAAA8A AAB3b3JkL3N0eWxlcy54bWy8nV1z27oRhu870//A0VV7kcjyZ+I5zhnbiWtP4xyfyGmuIRKyUIOE yo/Y7q8vAFIS5CUoLrj1lS1R+wDEixfAgqT02+/PqYx+8bwQKjsbTd7vjSKexSoR2cPZ6Mf91bsP o6goWZYwqTJ+Nnrhxej3T3/9y29Pp0X5InkRaUBWnKbx2WhRlsvT8biIFzxlxXu15Jk+OFd5ykr9 Mn8Ypyx/rJbvYpUuWSlmQoryZby/t3c8ajB5H4qaz0XMP6u4SnlW2vhxzqUmqqxYiGWxoj31oT2p PFnmKuZFoU86lTUvZSJbYyaHAJSKOFeFmpfv9ck0NbIoHT7Zs/+lcgM4wgH2AeC44DjEUYMYFy8p fx5FaXx685CpnM2kJulTinStIgsefdJqJir+zOeskmVhXuZ3efOyeWX/XKmsLKKnU1bEQtzrWmhU KjT1+jwrxEgf4awozwvBWg8uzD+tR+KidN6+EIkYjU2JxX/1wV9Mno3291fvXJoabL0nWfaweo9n 735M3Zo4b80092zE8nfTcxM4bk6s/uuc7vL1K1vwksXClsPmJdcddXK8Z6BSGF/sH31cvfhemRZm VamaQiyg/rvGjkGL6/6re/O0NpU+yudfVfzIk2mpD5yNbFn6zR83d7lQuTbO2eijLVO/OeWpuBZJ wjPng9lCJPzngmc/Cp5s3v/zynb+5o1YVZn+/+BkYnuBLJIvzzFfGivpoxkzmnwzAdJ8uhKbwm34 f1awSaNEW/yCMzOeRJPXCFt9FGLfRBTO2bYzq1fnbj+FKujgrQo6fKuCjt6qoOO3KujkrQr68FYF Wcz/syCRJfy5NiIsBlB3cTxuRHM8ZkNzPF5CczxWQXM8TkBzPB0dzfH0YzTH000RnFLFvl7odPYD T2/v5u6eI8K4u6eEMO7uGSCMu3vAD+PuHt/DuLuH8zDu7tE7jLt7sMZz66VWdKNtlpWDXTZXqsxU yaOSPw+nsUyzbJJFwzOTHs9JTpIAU49szUQ8mBYz+3p3D7EmDZ/PS5PORWoezcVDlevcfGjFefaL S50lRyxJNI8QmPOyyj0tEtKncz7nOc9iTtmx6aAmE4yyKp0R9M0leyBj8Swhbr4VkWRQWHdonT8v jEkEQadOWZyr4VVTjGx8+CqK4W1lINFFJSUnYn2j6WKWNTw3sJjhqYHFDM8MLGZ4YuBoRtVEDY2o pRoaUYM1NKJ2q/snVbs1NKJ2a2hE7dbQhrfbvSilHeLdVcek/97dpVRmW3xwPabiIWN6ATB8umn2 TKM7lrOHnC0XkdmVbse654wt50IlL9E9xZy2JlGt620XudRnLbJqeINu0ajMteYR2WvNIzLYmjfc Yrd6mWwWaNc0+cy0mpWtprWkXqadMlnVC9rhbmPl8B62McCVyAsyG7RjCXrwN7OcNXJSjHybWg6v 2IY13FavRyXS6jVIglpKFT/SDMPXL0ue67TscTDpSkmpnnhCR5yWuar7mmv5fStJL8t/SZcLVgib K20h+k/1qwvq0S1bDj6hO8lERqPbl3cpEzKiW0Fc399+je7V0qSZpmFogBeqLFVKxmx2Av/2k8/+ TlPBc50EZy9EZ3tOtD1kYZeCYJKpSSohIullpsgEyRxqef/kLzPF8oSGdpfz+h6WkhMRpyxd1osO Am/pcfFJjz8EqyHL+xfLhdkXojLVPQnM2TYsqtm/eTx8qPumIpKdoT+q0u4/2qWujabDDV8mbOGG LxGsmnp6MP2X4GS3cMNPdgtHdbKXkhWF8F5CDeZRne6KR32+w5O/hqekyueVpGvAFZCsBVdAsiZU skqzgvKMLY/whC2P+nwJu4zlEWzJWd4/cpGQiWFhVEpYGJUMFkalgYWRCjD8Dh0HNvw2HQc2/F6d Gka0BHBgVP2MdPonusrjwKj6mYVR9TMLo+pnFkbVzw4+R3w+14tguinGQVL1OQdJN9FkJU+XKmf5 CxHyi+QPjGCDtKbd5WpuHm5QWX0TNwHS7FFLwsV2jaMS+SefkVXNsCjrRbAjyqRUimhvbTPh2Mjt e9d2hdknOQZX4U6ymC+UTHjuOSd/rM6Xp/VjGa+rb6vRa9vzq3hYlNF0sd7tdzHHezsjVwn7Vtju Atva/Hj1PEtb2C1PRJWuKgofpjg+6B9se/RW8OHu4M1KYivyqGckLPN4d+RmlbwVedIzEpb5oWek 9elWZJcfPrP8sbUjnHT1n3WO5+l8J129aB3cWmxXR1pHtnXBk65etGWV6DyOzdUCqE4/z/jj+5nH H49xkZ+CsZOf0ttXfkSXwb7zX8LM7JhB05a3vnsCjPt2Ed1r5PyzUvW+/dYFp/4Pdd3ohVNW8KiV c9D/wtXWKONvx97DjR/Re9zxI3oPQH5Er5HIG44akvyU3mOTH9F7kPIj0KMVnBFwoxWMx41WMD5k tIKUkNFqwCrAj+i9HPAj0EaFCLRRB6wU/AiUUUF4kFEhBW1UiEAbFSLQRoULMJxRYTzOqDA+xKiQ EmJUSEEbFSLQRoUItFEhAm1UiEAbNXBt7w0PMiqkoI0KEWijQgTaqHa9OMCoMB5nVBgfYlRICTEq pKCNChFoo0IE2qgQgTYqRKCNChEoo4LwIKNCCtqoEIE2KkSgjVo/ahhuVBiPMyqMDzEqpIQYFVLQ RoUItFEhAm1UiEAbFSLQRoUIlFFBeJBRIQVtVIhAGxUi0Ea1FwsHGBXG44wK40OMCikhRoUUtFEh Am1UiEAbFSLQRoUItFEhAmVUEB5kVEhBGxUi0EaFiK7+2Vyi9N1mP8Hvenrv2O9/6aqp1Hf3UW4X ddAftaqVn9X/WYQLpR6j1gcPD2y+0Q8iZlIou0Xtuazucu0tEagLn39cdj/h49IHfulS8yyEvWYK 4Id9I8GeymFXl3cjQZJ32NXT3Uiw6jzsGn3dSDANHnYNutaXq5tS9HQEgruGGSd44gnvGq2dcNjE XWO0EwhbuGtkdgJhA3eNx07gUWQG59fRRz3b6Xh9fykgdHVHh3DiJ3R1S6jVajiGxugrmp/QVz0/ oa+MfgJKTy8GL6wfhVbYjwqTGtoMK3W4Uf0ErNSQECQ1wIRLDVHBUkNUmNRwYMRKDQlYqcMHZz8h SGqACZcaooKlhqgwqeFUhpUaErBSQwJW6oETshcTLjVEBUsNUWFSw8UdVmpIwEoNCVipISFIaoAJ lxqigqWGqDCpQZaMlhoSsFJDAlZqSAiSGmDCpYaoYKkhqktqu4uyJTVKYScctwhzAnETshOIG5yd wIBsyYkOzJYcQmC2BLVaaY7LllzR/IS+6vkJfWX0E1B6ejF4Yf0otMJ+VJjUuGypTepwo/oJWKlx 2ZJXaly21Ck1LlvqlBqXLfmlxmVLbVLjsqU2qcMHZz8hSGpcttQpNS5b6pQaly35pcZlS21S47Kl Nqlx2VKb1AMnZC8mXGpcttQpNS5b8kuNy5bapMZlS21S47KlNqlx2ZJXaly21Ck1LlvqlBqXLfml xmVLbVLjsqU2qXHZUpvUuGzJKzUuW+qUGpctdUrtyZbGT1s/wGTY9vfN9IfLlyU338HtPDCT1N9B 2lwEtB+8SdY/lGSCTU2i5iepmrdthZsLhnWJNhAWFS90WXHz7UmeoppvQV0/xmO/A/V1wZ6vSrUV 2TTB6tNNk24uhdaf27rs2Vnv0jR5R52tJJ1tVKvmq+DHphvuqqGuz0zWP9ql/7nJEg14an6wqq5p 8sxqlD5+yaW8ZfWn1dL/UcnnZX10smcfmn91fFZ//5s3PrcDhRcw3q5M/bL54TBPe9ffCN9cwfZ2 SeOGlua2t1MMbelN3Vb/FZ/+BwAA//8DAFBLAwQUAAYACAAAACEA9ou6/OgBAAApBgAADwAAAHdv cmQvcGVvcGxlLnhtbKSU246bMBCG7yv1HZCvlxgToIBCVlWjtrne9gG8xgRr8UE2h+TtawiH7a60 Ipsr8GG++e3fM7vHM6+clmrDpMgA2njAoYLInIlTBv7++enGwDE1FjmupKAZuFADHvdfv+w6FKaK SlVRxyKESTtFMlDWtUohNKSkHJsNZ0RLI4t6QySHsigYobCTOoe+h7zhT2lJqDE23w8sWmzAiCPn dbRc484G98AAkhLrmp4XBroZEsIExm9B/P3RpKLCLhZSc1zboT5BjvVLo1zLVbhmz6xi9cUivWjC yAw0WqQjwp2l9CHpVcr4mSL0mrzXkIMkDaeiHjJCTSurQQpTMjXfKf8szS6WE6T96BAtr6Z9nULB fQ/icHVlAa6RP1rJq6vyj4nIW+FIj5gj1kj4P+ekhGMmlsSfuppXl4vC2wD+O0Bk6G2IcERAc+FL aXTqdJ/Lv7Rs1EJj99GO4mVm9f3qBtb4Wl6/YHOfmKcSK1vKnKTHk5AaP1dWkfXesfY5gwNOXyVg P3ZTbaTo11Lc1KW0tf8bXwQ1D84Bi2mTpsY2aHoUhRy22mwty6k+5hn4fgDDXGOu4ycXuaHrIxcl gRdF0XYbu77/DXmeH8Uu2gZJGMRo67tJEoUBgPsdXITMg77H7/8BAAD//wMAUEsDBBQABgAIAAAA IQC9wXVa5QEAAOcDAAAQAAgBZG9jUHJvcHMvYXBwLnhtbCCiBAEooAABAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAJxTTW/bMAy9D9h/MHxvZBv5QqCoGFIMPWxrgbjtWZPpRJgsCRIbNPv1o+3G U7ad5tPjE/34RFL89q0z2QlC1M5u83JW5BlY5RptD9v8qf58s86ziNI20jgL2/wMMb8VHz/wx+A8 BNQQM5KwcZsfEf2GsaiO0Mk4o2NLJ60LnUQKw4G5ttUK7px67cAiq4piyeANwTbQ3PhJMB8VNyf8 X9HGqd5ffK7PnvQEr6HzRiKIb/2fZtY47DibWF47lKbWHYh1RfwU8Ud5gCiqOWcj4i8uNFGsF4sl ZyPmu6MMUiE1UczXq1XBWcLwT94brSRSg8VXrYKLrsXsYXCd9QqcpSmcbrIH9Ro0ngVJpSH/oi15 mBdUe4TkL8hDkP4YRVkOLqeY75U0sKM+iFaaCJz9Jvg9yH7Gj1L3Hk+4OYFCF7Kof9KUqzz7LiP0 3dvmJxm0tJiPaWMwYOMjBlFrNKQ9xQNM01Ks56IcEghcJw7B4IHwtbuhQnxo6W74D7NlanbwMFpN 7KTOLjX+UN25zktLPWYTohb/iE++dnf9jrz38JpMZv+i8bj3UtFUFquqrNItSM74nlhoaKzTVCaC 39Mdgukr0L/2AM0l5++Dfq+ex3cryuWsoG9YpAtHqzA9KPELAAD//wMAUEsBAi0AFAAGAAgAAAAh AKyLbWZjAQAAnwUAABMAAAAAAAAAAAAAAAAAAAAAAFtDb250ZW50X1R5cGVzXS54bWxQSwECLQAU AAYACAAAACEAHpEat+8AAABOAgAACwAAAAAAAAAAAAAAAACcAwAAX3JlbHMvLnJlbHNQSwECLQAU AAYACAAAACEA+aiVnQ8BAACjAwAAHAAAAAAAAAAAAAAAAAC8BgAAd29yZC9fcmVscy9kb2N1bWVu dC54bWwucmVsc1BLAQItABQABgAIAAAAIQBv0KF6H2MAAA6xCgARAAAAAAAAAAAAAAAAAA0JAAB3 b3JkL2RvY3VtZW50LnhtbFBLAQItABQABgAIAAAAIQCqUiXfIwYAAIsaAAAVAAAAAAAAAAAAAAAA AFtsAAB3b3JkL3RoZW1lL3RoZW1lMS54bWxQSwECLQAUAAYACAAAACEAz+ZM2Q0EAAATCwAAEQAA AAAAAAAAAAAAAACxcgAAd29yZC9zZXR0aW5ncy54bWxQSwECLQAUAAYACAAAACEAZsYo/vQBAABI BgAAEgAAAAAAAAAAAAAAAADtdgAAd29yZC9mb250VGFibGUueG1sUEsBAi0AFAAGAAgAAAAhAJN2 1kkYAQAAQAIAABQAAAAAAAAAAAAAAAAAEXkAAHdvcmQvd2ViU2V0dGluZ3MueG1sUEsBAi0AFAAG AAgAAAAhABHYto10AQAA7gIAABEAAAAAAAAAAAAAAAAAW3oAAGRvY1Byb3BzL2NvcmUueG1sUEsB Ai0AFAAGAAgAAAAhAJ/mlBIqCwAAU3AAAA8AAAAAAAAAAAAAAAAABn0AAHdvcmQvc3R5bGVzLnht bFBLAQItABQABgAIAAAAIQD2i7r86AEAACkGAAAPAAAAAAAAAAAAAAAAAF2IAAB3b3JkL3Blb3Bs ZS54bWxQSwECLQAUAAYACAAAACEAvcF1WuUBAADnAwAAEAAAAAAAAAAAAAAAAAByigAAZG9jUHJv cHMvYXBwLnhtbFBLBQYAAAAADAAMAP4CAACNjQAAAAA= --_004_BY2PR09MB1078E65CC09CA073510ADE47A52E0BY2PR09MB1078namp_-- From nobody Fri Jun 24 09:05:52 2016 Return-Path: X-Original-To: sacm@ietf.org Delivered-To: sacm@ietfa.amsl.com Received: from ietfa.amsl.com (localhost [IPv6:::1]) by ietfa.amsl.com (Postfix) with ESMTP id 2006812DCF0; Fri, 24 Jun 2016 09:00:54 -0700 (PDT) MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit From: "\"IETF Secretariat\"" To: , X-Test-IDTracker: no X-IETF-IDTracker: 6.24.0 Auto-Submitted: auto-generated Precedence: bulk Message-ID: <20160624160054.10933.75308.idtracker@ietfa.amsl.com> Date: Fri, 24 Jun 2016 09:00:54 -0700 Archived-At: Cc: Kathleen.Moriarty.ietf@gmail.com, sacm@ietf.org Subject: [sacm] sacm - Requested sessions have been scheduled for IETF 96 X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Jun 2016 16:00:56 -0000 Dear Karen O'Donoghue, The session(s) that you have requested have been scheduled. Below is the scheduled session information followed by the original request. sacm Session 1 (2:30:00) Monday, Morning Session I 1000-1230 Room Name: Charlottenburg II/III size: 175 --------------------------------------------- sacm Session 2 (2:00:00) Friday, Morning Session I 1000-1200 Room Name: Schoeneberg size: 100 --------------------------------------------- Request Information: --------------------------------------------------------- Working Group Name: Security Automation and Continuous Monitoring Area Name: Security Area Session Requester: Karen O'Donoghue Number of Sessions: 2 Length of Session(s): 2.5 Hours, 2 Hours Number of Attendees: 50 Conflicts to Avoid: First Priority: acme anima cfrg core cose dots i2nsf ipsecme jose mile ntp saag tictoc trans Second Priority: radext ace netmod curdle tls oauth Special Requests: We'd ideally like to meet on Monday/Tues and Thurs/Friday. --------------------------------------------------------- From nobody Mon Jun 27 10:19:41 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 3E54412D88B for ; Mon, 27 Jun 2016 10:19:40 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oLTw_rzLw6iA for ; Mon, 27 Jun 2016 10:19:37 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 270DC12D882 for ; Mon, 27 Jun 2016 10:19:36 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 5F2D66C0783 for ; Mon, 27 Jun 2016 13:19:36 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 2E7906C060B for ; Mon, 27 Jun 2016 13:19:36 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Mon, 27 Jun 2016 13:19:35 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Mon, 27 Jun 2016 13:19:35 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=qCIRPSZN/kqXj0gsuCJckGij9r1Zs6lQMkBLSEvE5W8=; b=ZC3OAh64prPDIcd+GW02uy9wqzpElo9jP8mcpMfeGMa229e0K/+V6ApVuXbrGfpRfHJCA0yTfZYsAsqQpREBmpliJst7OQoQ5UstBEwt56MOqYutcvIAKvTfKAtRpQMD9HH+T2yR/EC7DxLwMhZNw/AE0/fofEumqBGoimLHNWs= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1077.namprd09.prod.outlook.com (10.166.116.9) with Microsoft SMTP Server (TLS) id 15.1.523.12; Mon, 27 Jun 2016 17:19:33 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.024; Mon, 27 Jun 2016 17:19:33 +0000 From: "Haynes, Dan" To: "sacm@ietf.org" Thread-Topic: Vulnerability Assessment Scenario Issue #25 - Alignment with SACM Tasks Thread-Index: AdHQmA8vykHLuTQeSb2eWj/W2tADeA== Date: Mon, 27 Jun 2016 17:19:32 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: yes X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.88] x-ms-office365-filtering-correlation-id: 2b3972e8-6ee9-4979-905b-08d39eaf34d4 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1077; 6:vx/lPzHEE3SYoz7aU6IiwAU4ivQxY6s3xjF4mOhrHZWzVCPlMIUojafFav5WB5+7IA1yVdcQkgag6+iHLNzUtZ37QvXrwzBMM6/1K+Wv7Oa03FKgtHiA3D7q/+Dg/gxn/yaSPW+ePj+JX2HOAsHQ4Psle43xtcagJWvU2tFTTRrXvPt6mgn+1S3K4EXIR7PV445XbdM8fEHesLPsJ8MTp0Bidm/Y4XBBDPflTKhNR6XE6ZT51db8NhZeJztw4Cz2t5mzuyLtC7tS8IgkYqogtlu/LJLQ9F3I/fE8jd1mLggVaBJ9X+D3GpA6/YNmI2YWJ8jGlKd1sOX6bJF4jrKi7GdC037zq15nAZuvLKz/x+Y=; 5:AOEuLCoMN2O8AshCOZQSAhMEWgi7fS3xdOkKLEMj4VydsYMIBxuZHw4S5UQZEKzdzOWN/j8AI8UeqL4IzV/oXIJMlcUP4yVu9EhjkMWiRn/gZFWb/6BBBdxj3JI9oRWN2KjcXgGUY/so33Zj2CpLiQ==; 24:pKZwH9dpk37OKlOgjVeggjbyH8hA/Xpr9zOrY9uCNp80H/Rn2qQkV8IrSac2s0Y/MT02YCeU7Ll9f63rJzDl32cVK6qLrS3W33kf9aRwsgg=; 7:Gxt3+aX0Ik/QH940tLHHBB3A6TTkStrf+eZA1J+Slbe8smChXM4Ry3pGeAqFCmN+37m3BGpvaVe3Fk+qxFZNikqBVFuZyAMHFBm2Z3o+jFlY+JKE+s9G4NqQy/2IhKZJ3451gIDqOlpg/rDK67blsxYMrWQu9YkpRHbN6HQpXeD/oBSzr4r8cohXN2mBB86PsLZ/WnHvbuSdXL9c/1aJMobQPMwhqatCa2wxRiaaIUEhDxbO658+indQcIB00SiJ+Nk/qtsNRN8aBEBVUQ/owQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1077; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(166708455590820)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(102415321)(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:BY2PR09MB1077; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1077; x-forefront-prvs: 09860C2161 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(43234003)(5383002)(189002)(199003)(86362001)(76576001)(81156014)(66066001)(3660700001)(81166006)(101416001)(229853001)(97736004)(2501003)(1730700003)(2351001)(5640700001)(74316001)(5890100001)(7696003)(99936001)(105586002)(19300405004)(107886002)(5003600100003)(7736002)(189998001)(7846002)(2906002)(5002640100001)(3280700002)(19580395003)(8676002)(110136002)(33656002)(106356001)(54356999)(50986999)(77096005)(19625215002)(15975445007)(11100500001)(9686002)(16236675004)(99286002)(68736007)(92566002)(87936001)(6116002)(586003)(122556002)(102836003)(3846002)(2900100001)(5630700001)(8936002)(10400500002)(450100001)(790700001); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1077; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/mixed; boundary="_004_BY2PR09MB107852289F0D865A8EAF9287A5210BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Jun 2016 17:19:32.8920 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1077 X-OriginatorOrg: mitre.org Archived-At: Subject: [sacm] Vulnerability Assessment Scenario Issue #25 - Alignment with SACM Tasks X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jun 2016 17:19:40 -0000 --_004_BY2PR09MB107852289F0D865A8EAF9287A5210BY2PR09MB1078namp_ Content-Type: multipart/alternative; boundary="_000_BY2PR09MB107852289F0D865A8EAF9287A5210BY2PR09MB1078namp_" --_000_BY2PR09MB107852289F0D865A8EAF9287A5210BY2PR09MB1078namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Out of the last virtual interim meeting, it was suggested that we better al= ign the Vulnerability Assessment Scenario I-D with the SACM Tasks defined i= n the Terminology I-D [1]. As a result, we added tracker #25 to Vulnerabil= ity-Scenario repository on GitHub [2]. Attached is a first pass at the updates to the Vulnerability Assessment Sce= nario I-D that incorporates SACM Tasks. Please review the attached changes= and let me know if they seem reasonable to incorporate into the next revis= ion of the Vulnerability Assessment Scenario I-D. Also, please let me know= if there is anything I missed or if anything needs further clarification. Thanks, Danny [1] https://www.ietf.org/id/draft-ietf-sacm-terminology-09.txt [2] https://github.com/sacmwg/vulnerability-scenario/issues/25 --_000_BY2PR09MB107852289F0D865A8EAF9287A5210BY2PR09MB1078namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Out of the last virtual interim meeting, it was sugg= ested that we better align the Vulnerability Assessment Scenario I-D with t= he SACM Tasks defined in the Terminology I-D [1].  As a result, we add= ed tracker #25 to Vulnerability-Scenario repository on GitHub  [2].

 

Attached is a first pass at the updates to the Vulne= rability Assessment Scenario I-D that incorporates SACM Tasks.  Please= review the attached changes and let me know if they seem reasonable to inc= orporate into the next revision of the Vulnerability Assessment Scenario I-D.  Also, please let me know if t= here is anything I missed or if anything needs further clarification.<= /o:p>

 

Thanks,

 

Danny

 

[1] https://www.ietf.org/id/draft-ietf-sacm-terminol= ogy-09.txt

[2] https://github.com/sacmwg/vulnerability-scenario= /issues/25

--_000_BY2PR09MB107852289F0D865A8EAF9287A5210BY2PR09MB1078namp_-- --_004_BY2PR09MB107852289F0D865A8EAF9287A5210BY2PR09MB1078namp_ Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document; name="vas-task-edits.docx" Content-Description: vas-task-edits.docx Content-Disposition: attachment; filename="vas-task-edits.docx"; size=51245; creation-date="Mon, 27 Jun 2016 12:12:34 GMT"; modification-date="Mon, 27 Jun 2016 15:34:54 GMT" Content-Transfer-Encoding: base64 UEsDBBQABgAIAAAAIQBMCwvMdgEAALUGAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIooAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0 lctqwzAQRfeF/oPRtthKuiilxMmij2UbaPoBijRORPVCUl5/3/GTUtK4NPHGYM/ce88IMZ7M9lol W/BBWpOTcTYiCRhuhTSrnHwsXtJ7koTIjGDKGsjJAQKZTa+vJouDg5Cg2oScrGN0D5QGvgbNQmYd GKwU1msW8dWvqGP8k62A3o5Gd5RbE8HENJYeZDp5goJtVEye9/i5JvGgAkke68YyKyfMOSU5i1in WyN+pKRNQobKqiespQs32EDo0YSy8ntAo3vDo/FSQDJnPr4yjV10Z72gwvKNRmV22uYIpy0KyaHT l27OWw4h4JlrlXUVzaRp+X/lCPGgIFyeovbtj4cYUTAEQOPci7CD5ftgFN/Me0G41aXJABSt858R qmsuQAyH0ib0IhUYvmBLBZdn6ax7IRxYNwRB7dsbH3EtQv0cnw1R2ZyKxM65ty7gbfD/mLndo6U6 xWkd+ChPr4IuEa3Png+am3Ukm1Y/nekXAAAA//8DAFBLAwQUAAYACAAAACEAHpEat+8AAABOAgAA CwAIAl9yZWxzLy5yZWxzIKIEAiigAAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAKySwWrDMAxA74P9g9G9UdrBGKNOL2PQ2xjZBwhbSUwT29hq 1/79PNjYAl3pYUfL0tOT0HpznEZ14JRd8BqWVQ2KvQnW+V7DW/u8eACVhbylMXjWcOIMm+b2Zv3K I0kpyoOLWRWKzxoGkfiImM3AE+UqRPblpwtpIinP1GMks6OecVXX95h+M6CZMdXWakhbeweqPUW+ hh26zhl+CmY/sZczLZCPwt6yXcRU6pO4Mo1qKfUsGmwwLyWckWKsChrwvNHqeqO/p8WJhSwJoQmJ L/t8ZlwSWv7niuYZPzbvIVm0X+FvG5xdQfMBAAD//wMAUEsDBBQABgAIAAAAIQDB14BaLgEAAKwE AAAcAAgBd29yZC9fcmVscy9kb2N1bWVudC54bWwucmVscyCiBAEooAABAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAKyUy07DMBBF90j8Q+Q9cVKgIFSnG0DqFsoHuPbkIeKH7AGav8e0hKYPLCSy nBn5nuOx5Nl8rdrkHZxvjGYkTzOSgBZGNrpi5GX5eHFLEo9cS94aDYx04Mm8OD+bPUHLMRzydWN9 ElK0Z6RGtHeUelGD4j41FnSYlMYpjqF0FbVcvPIK6CTLptQNM0ixl5ksJCNuIQN/2Vn4S7Ypy0bA vRFvCjSeQFAMZyEEclcBMrIpt808DWGEnna4HNPhA1bPgBgW7Hcmg2ZM5OYXEdUIZ7wpMRVGfTsE dp4fsC0Y2w4WsK1jxMmYV/dH9+47MYV8VAXsWhgKbOoYfjomvjQal3w1fIOfVkzi+p8PH6ZfSv5h jaAlyB3+cBKzuBpzFT34WKVXoHt/TPEJAAD//wMAUEsDBBQABgAIAAAAIQCls8EVDJMAAATBCgAR AAAAd29yZC9kb2N1bWVudC54bWzsfetyq0i25v+JmHfI2H+6KsLWBpLk4jjlE1yr3NNVvc+2azpi OvpHGqUszkagBmRv99PMs8yTTa4EJCRLdsqWu2SR6uptGyEEK791zXX5j//8PsvQPSurtMh/+qSP tE+I5UkxTvO7nz79fhOfO59QVdN8TLMiZz99emTVp/+8/J//4z8eLsZFspixvEb8Enl18TBPfvo0 rev5xefPVTJlM1qNZmlSFlUxqUdJMftcTCZpwj4/FOX4s6HpmvhtXhYJqyr+fQHN72n1qb1c8l3u auOSPvAPwwXNz8mUljX7vrqGvvdFyGf3s7N5odnTRyvmLOdvTopyRmv+Z3n3eUbLb4v5Ob/unNbp bZql9SO/pGZ1lyl++rQo84v2EufLW4GPXDS30v7oPlHKfG/zkbBdDvGNn0uW8Xso8mqazpc0nb32 avzNaXeR++ce4n6Wdec9zHXzbYAIm1VZXVDm9tulnGXNnT9/RV2TWBG4xPITMrew/p3dncxomq++ +FWk6RFXJ/tdwHhyAati+12CtJf4XD3OVqzxML972yr/XBaL+epq6duudpV/W14L5NUe12rR0kdw 9babuZ7SOWflWXJxdZcXJb3N+B3xtUd8+ZBYAQRc8umSS9PbYvwIP+f8DfNiTkt6Nf7pk+F4ETbC 6JM4yiVSDUft9sWPXnDJPf760ydNw5FtOtry0Jdyy8GQTegiq5++86V3SNzFlxJ+VHOa8OfgJ2Up UNMwxSfgj68LeBi6qItPn+HUpMjh9hY0u24+JI6WzXXKmL9b8U/SKkn5CgfFokxZiX5jD3C9qZdX T48m1fohccHqX/yde5rxe9G6IwFcuXfsc/u9n9vngJ9PSYvDyDAJASIq0h6WtEbgeLHnmIq0Byet 5fmupbmBIu3hSWv6gUEcS5H2DaTlf26lyh9+gw8X9eW1F/yKXv8KRigAjZ/DRevm0jtFoBY7tmHq CkynCqYrTrYyZ/U5dyom9cvoWX/5HEtTln5jlQSYbMvEkeEpU+WkwZSP2RhiLfWiukBXeeNRchee Zi+BiQum62Q6S8e1jGQixDdI7CgwnSqYou/ztGQcRCFL2OyWX0p3zxD3T62XgCRe4Qj9Qh9zKcmE zSAgOFaS6VTBBKEQQWZOzDkHFSvv2afLl0H05HUzZejXq5uvEbehynlRCtEmgTA99MM4thTCFMJe fP15hOK0/tcdK2k2Pv81+V/0UQZhQewHsYcVwhTCnn+FjGOmFntexYT/NWF5xSQQpmHiWlhTUVyF MMkXt8H+RjPuYM64JScjw2zsBqbAkkKYQhhCv3Wu41Ve1Wm9qBmIrGuxk1+OK8R/ohuWTPMiK+6k tGSEDd+3YoUwhTC5158XOUO63XieMgjzzZDEHqyrQthrEbbDADGIZ8ahp0h7cNKS0Cdx7CvUDlwu ir2l/73Icu58NqlfyKsqVlXCXbhOWE7LtJAQg4anR5GJlTuqFO0YdpbOU1ZPziuazM7vObzOqxZK 55omgSY7Mgj2DFeh6eCS3yaYYN9VPtepMuqld1vVJU1kdtV0CweaqRsKDAfnM922zZhEKptscArx ZppWaFlmMGZVUqa3DIIXCIg+ozUbIwZ5GPMyrRgC/bg0v2SUY6i5UagpU2twyKIr07yzpxDN0ruc A+ohraeonrLGpP+d4yqg/OxRs4fZnS4BL00LLSckKtNiiPDiMqsSKGLf06pmeSICsFxysXw8L1IO vBnN6R0TGEzovHMaITB7y+7SXCb9wtRj13ANFZQdHMKEkBJoWmo/TlRW1bAea3qw1Ztz2A/g5yzT ykYyEizyQj/UfYWvoeEraqUUN7ZK1qpLrhvpHeWSqRaCbSfKJICFPRxYrqncpcEBqyeB0C0FTPFf KEqK2W2aN4e5nmTf6SzNYYm+5cXDSmlKQcuNIsdRRv3goAVF2zTh+jD9VwOkPtbArkqKLGNJ4zS2 RtieCtEOTc/HgYpFvAVcO/iWhDGJPbVHeap8e3ktahtAvIvAzq9sJuNFE2KRQDeUDfoOLOf7mmVg lZc4OFUpGHCjgo0fqRa3s7QGBZnmaLLIMq4yGwUJ8YsuMCajJx2f+NgkCllDQ9a8LO5T6CYkBL0f fEG2I4wv8asrY2RZoecTz1Vx08NLfEv3Y5tglQ4wOL5cF/ZNWOehKL/BcnRbbIJlIbTTnYyi/I6v DSv5WRKMq7maFodYmfDDsydo9Q3FRcmthB+uopv4xxFCvxU142iiNSo4pkp0B42eKjSjj4hmVYHG aVWX6e2iliqhIXFMuO+toDW4nY4nQopumq7d3mzGEQUiLFmUJWyrLc+SAJgRkzh0sdpKGxzAWoXI 3R8uqtp2b2NaU0j9+sbKEeRfdq0F+YmfW3R9ljFlNV+PdNtSGvHwpqwe2GZkuIq0ypTlpqzgzZ6O 4JdMx2hSlIhyi+N7OlvMQDNU6Xc0488zlcqu8A0SRlqoEDa4/J18LOzUW4YW8zGkGZ6hks0zfib/ jYOquK2KjEGg7PaxNW979knNLyCTf6hZgWlhXxm1gwNYnc4YN1qvRNQ1zel8XhbzMqXgMRVoUa1c 8KWQqzgCJ6yETDIJaGEbG56rihOGBy3IiuZIykBMcSwlqfDC2awVU9whzwFMn8CvgjA/R94d/3w1 +iQBKyP0tMh1VY/Md7BndSOMNbVlMjyO3bYZ95BmGWKikRskSD3p5CbjfBqeZWOsKknfgVmJyZ/G DJV6PVVmvQyK+WOZ3k1riGOnUjYXBwQ3uZQ5/x78ppuOadqqnfKJ8ltGq/ordMAt2fgLvWN+yeg3 8andanPFoT8kPzbtTWHrCd2Uiwo88LHYypyzsoJkhHTMffN0kkISuyjMkWBoEtiWSzSV7Tk4k2xZ dMpJPC1K2GDyuEEm4AaOuDhzLGOEmQGO3ShUSuHwSgHHfmRontqyOzxpbT92vFANx3kH0mqRHkXE UylY72AlGiQ0Ak0lDr4DaX0r1gJdpYqfqil02Yy2OUOMGz3ZaNWEqp0m8OIwgb+D3Y70f8jYRBHW fIzVxuo72EQhcTUvUubmyfLpM3OHlj0IUddvcINHUduVVbYja6CZvmOrLYnD86kdGMSwsZrj9w4i 0CGxbrrKLTxVESjZL6ypZ/tvltSwD96rRBIVDstI4Z8q9Bd2RzMJeYgNzwrdSNktg0PWl1VV21cx WZ0vAweVQFE3Kl0qpdDSsO7bSuwPDkE/tJnlNcgcxlZZ5VmawBiZc+hE8SMk5LDJBGRWkQtBBdmH qJhIYEvTTAP7qt3c8LA1X9xyFC2b59R9Ncg9+S8ZoxVDJbtP2QOAiv+xzFaVAZYd+SZ2VKb94ICV 0JJBG4DHs3bTtOvzdcvQI//SbkMMrCr+ubpMEwBh1bQK4EfmTKp7smU7nueFqh3Y4BDGjahNcRUU Y8b/mc2LXKTTc3KLtk5jNCmL2frpaMa1qYzdFQYO1hy1kz84gKV5ki04oK7T2Txr8j/86xD9pbG6 ENAaZFsn1kTnk2smxBgyR5Kml45jT/fUCMkByi9uojcJRyKI0HcUQSlCaZroiAKzvUEpFosaPdCy pDn0+pUa/h6EgesbgCKFrUFha00miYbkW2XYSAJE2MIuxkTFHd4Coh2mhW+bhumq1NRT5c/LG3qb ie7tARBQMtCne75nqwKBd2A4WydGYAQqgWpwClHn3uF1UswZGr3yfwhhCebVYs12bYEEhbBBIcyA TkIwdbuZi/xuCMO66YcmUWk6g0MYhlICGA8jRiVUr0KYKWOAED2yAkNFvAaHMJNDZOcg2i8lOy/Z PxdpldZsF/rkEIZ9w3ZC1R5neAgDjIEt1g2JQb+uRlkFq1FWb5Zhtk282PdV0vkgEQa22LocC3uT rK56sz22I4zIIMyxHc+OVFxscAgjffm1U10+J83kEGbaQaz5RHXMGRzCrOfssK+s4stYPacjAWEy WfpWEBteEChfcnAIszlErrzfPAhM8zvnQNvXp5RDGDZDPwxVofXwEOZAxJUl/OpcfL0KZRylMnaY HpqEO5MKYUNDmAsyrLPl7xlXjG2Tyxd0494I8yzNsCyVYjg4hHnzOcvH6XfkcawEU5rfMfSX4k4S XfIII8QLHWwrLTk4hHGMiXhYA64KXacwLs0bF3PIWqUVouhvP6Or8xCda9pbZFjgek4cKC05SIRB PKxDWJpzRdkkGjat788T0b7hvKLJ7Bwmc59XbQn4uaaDJuW2nIwM0xzXdw0V0x+ulvQBZvzu0nxR LKrdEYynMkzXJBBmRq4eerpKlR4uwoIRFNSmhXAqX7a+9kZYYNkRCZUMGy7CQo6VkNYUeXU7Yg41 SZwvI0yXQZgTeTgIVMrvAO2wUFj6cmh6PcJIaLieZqkc1xNF2Gv6HS+lWzSCbrTpXS7sMFFq+1cx 2yP6nlaiNcXfivLblvgZ0mWyLgwt9kNL5SYOUbpFTRyDW2ZpQrO10H9dFtmLMVk5hNkO8fWIKOk2 QIQ1GBMok3AyX4sw4nmOEQgkKIQNEmEQLfuFluMHKMGFUtzrYlKLP67yew4t7n3uyH9FUr0RNS3Q NB2r/aTBIWxph8WjtuXm7xW0vu16br68My6HMEuLPdf0VffN4SLs5w5hXyFlvxQZ1k1jgWBKy5p/ 9zmKF/WCSzUw+VfWGdJlov2aY9ihFqiOYcNF2C8rGcZQAG3CVp7lCzJMBmG25+hGgFUG/wDtsF/W a0Su2gFMbZ+6l3SkLMJMx/GJriaDDRNhYOUvESYi/kGRZW37JgmEuRIIM3CgGUEEWFIIGxzCoF73 DVVIUgjTI8c2Q01Z+oNEGNTrcnsMOri2CHtJbu2PMNP2DCfSVLRikAiDWrdrxik7puXzOTxvQJhh RKHmq5j+IBEGtW77Vrf1EGbI5PXorubpxIV1VQgbFMKW0YorjpWr2TwTgbDG6oq+UzjwUiWlFMKw EblRQBTCBijDrtajFfv7klIIIzD9w4lVK/1BIuyNHS3kEBbHQWSpfgPDRBhEK95g6RsyuYmaqYdE 11VnsUEiTEQr3mDpyyDMxn5g+LFC2FsQtp20uhnFuuOqDbnDkxZjVzN8U9X/vgNpg9DDvpqWerIq 50DTxw2Z6eO6r8eYhCq//R20i23pgRsqPj1ZPv13Th8PHdc3VJXAO/CpaTl+YBNVInt40tq+FeiB rkh7qiJw9y7Fop4WZfUn5I3H/Hgl38Fq5R0bEnLRDu3YMZSSfQ/7JQ4C7PsqIfpk7ZflCBkZRnN1 37dClVp6eEbDtqkTN4IHUqQ9RUbbqSVv1sb3diMOoUXamNU0zdj4DDFwMuZlWrFzmCANSeMIelot 980kmNfSDd33sBLlg0MYXe1OdD3QmsnRD9M0maK0t806K8YsQ6zJJ6lQQnN0K6MZLBLroRurUO/g wDVOq6S4h7YdYEgsOJ6W6JnRx+W06SQTKIShkWNa0zP+5n8XJSqLjFVnEgDTPNOM/UABbHjSKx8L mHAocSVIRfZRNWr15lKe0awqWklWwYDpukiKTHwW4CYBMB3bQWTaquRgcABrdN6Y3bOsmAstmeao WsznRVmDvFoztHrK9Awa2XL4wEkSAMMuIVqsK4ANDmCgHmmWoXlRicr0FYSepL912vTxTPyaFRX/ wBnIMRkdGWPNwqpH2vAQNl/cQrWUMOG5ViwWQnBVENYZSQDHjCzD1k1VDPUW4OyQ+robR7quSHuq PHm5MSFZgt1I6HiYy2qFicPvV/ieFeuCBIq0p8huO1Xghh3VKyPoxbcueqN1+DtzVtY0zWHF6gLV U6lIV+T4DlHND4aHsObFoKUsjGMCC4uiSUYfUFGKn2IKRdV21TtD07bZnjDfPxelBLhs1w1CK1LV UAMF1yQtZw1kmtB8UiyyMfcba+gUxF3IRw6qe+jeiOiYe4kVQ+mMX4xb+7kEunQtCkPsq0qooYqu 5S4iurpBk0UuYqm0CWsJEYWqtr/xZmBCAl0cXLFruioLZ6Do2mFyoWoqhBgQndtaHITF4m5907Eu JOCFDWIGoavCpwOFVxeQX4/Gj1nd1KOPZKwrj8ReqPrHvglC20lrYteOI0P53YPjzk2/u+VHse3K 3W0P1Y9z4SvdLdIxBb+JUx+2cdlYJKHIiH4nDmJbTRcaqujfFPnb7Yx6Svvpc3LRHOL7rq35ClpD tSq6bMoZS6Y0T6uZSFHaYWQ0GEsrtKi49LqV8Yps0yB6ZCnFOFCAUfB4Orf7T9UGsmY0p3ciWw4l dN4dlfKHzFjzjWhzMC3hHrhtBrDdqIB14u52LTYdGUohDr2OqxRy4PhHcogMNhhs2njJuUmxbZmq FvJNyNpB2jg0sBGqWb+DY9plH72tIh8cpb6igPhsTyGIz/A1kGBeHMbQOFvlgA1ULXSCHqViukT9 CMVD3aGVtyT2JCERsUhSyl1xGbWAI9ePiMrAHyiyZqymENRpLYoivytgPW5plVYyZoXlYtcIhGmq 8PNa/GwnLdFtK47U6L3hseZ69PUVtoUE45JQM1ybqG2ToQr+1vpcGRJ9ZxOGhq7bEhuaQgJhps1p 4ToqdWCgCFuzJdAtVI3esWZw+87Yv4zgCoLQcSzlbQ8UVv3dIRBRu6L6TUEynDFnJXwEVk2mZpTg 2MK2qwA2UIDtqgyVcYcM249C01NR1rdgZwdbRrHuE1Nt6g6OLdfdoRVDXkC7AAZ9ARJ+RDShaLdP xEJNWT3lt0NRxWoJ1rXdANvcXlX4Gqi5Olm6QhVstXVqIGOIJklRjmF1moKivg0iY1B4sUVM5WoP FVltkjT3oVNINmFyqU8y5ga2tUi3dRW9P7y5gQ3XDYPNQY/YjCNb1+DoXqQNWQYHI9smLlgwfyy9 oTPKw0XKn0d8noqOrj99Cmme8nd+oY85q+AN7kLBt2i6da5Z5wa+0dwLk1xo2v9pvuSPlgir5xA0 fc1z7BYsW1fuCKQNf+gbvrI7ZQ6c2p7TCQ+Awwwspq80v2PXNXS3aehmtAv5ESlweb2YdzMSMy5k uyF2rVlY0+obKPXuDc43y7zATtFvoVVzZKcqxz5xTBdEa08qGJqJDexBxOAkpIJ4kBOQCjBZSUmF HbEz0SsSrBEuDu5YveSJs2U+bF7UiN7TNAMjeG9WsYkXcCNkw+o1Pd+LzRgCJCfBKvB4p8AqUD6s WKVftN2xx3J/bOs+7BnY9Nw55LfDfcMZ/caaGPN+rGJacUDwxiA4TSfE0kTjr5NgFeGPnACrQIRI scqWpOV2T+YWGpUJHbJknR/WPd6qpvWiaRC7H59EUWiSaMMns7TAxi5R7u7+UBayRUG5ZyCJ/MpJ 23UP5rQlox9HL7pUUT5uKbrpUAkihBYR4xVeoMx1/Zix7v6D9vJswkpoTLP+NN2Xd+/2v12Gk6zY jePAV/Mx38JJO0hr+5pmaqofyzuQ1oKMtUhlRB6etMQKLN/X1O7X4Ulr6JqhBZZC7XsIBE8PsKqL eaNBWG6lyh9+g7D9dZiBuVhmYK5lhZoWuLCECkyH5VNicdfNJ0q7nCyf/hsH5pJIt21D5ZW/A5+a pmuYkabyCQ5PWuwHrq2p9uCnKwIxN0+8qlrMRCpPJSHJsBvpvqeplNbDs5uBPdexPNVz+VTZbWcg 10P5QngE0Ml7xY5otqhqdMvE5kOTirfctpssSpEqnGTcOpnIVE9i141jz/YVvIYGL9gSnhdVuqw/ qmAeD4Ct7o98HUmAyHSJqzmOklGHF/+27bm2rYoEh8efkPq3nLss5L9oG0nrCxmx7hNLc8hGIoaC zQE40opgPJKn/J/BcWTRMGWvV8WUVqhkCUvv2dP63a3FEDLDhE3Ht0PbUkHGwSEMNfOERc7RRnmW wBrNSkbHj9z6Z3lXLihcAMmenEHs+hYgSOFqaLh6rrvACnBrzWC7aSsS0LI8x/U8W+WKDBFa3Uwx VBdFVqGE5miRj1lZ1aLzDv//opIa9IojEloRVrvgh7daDZ14xDJUhPZEGTSjVf2VAdexMWQK+NxQ +CY+ta89S9GM0Vx0IWiTSB9h5XpnLavLJVja0D0rsoyN0JARRLYXiqijwt3pKoY1fDxcpDlcJh3D qD/4+i5fu0nUPkMhzeHwRra2faPZF8R9mq0NhNA1HXNwHS8h6mkpBoptsgqnxQZJ1ip/XySJw+nx YUnCJMghZgTsQQ5d304O07f00DpicrDv3MwWpjiXuC/TZa2k9TQ45/KmKdzsmpC/TIS1ethT5hUU plVS3LPyEd3Q6tvLlFkr4zwNtrl8Ymc8fey1qs9T1ie7JMTyKY4vnYRmfFlAB0LDq7LZw25q66pi xiAUQdNM2Jti47E3WID7lJuPu8XE1L3QcV1h2PVMTD20A8+ylIn5/AIBST+yiTmj443QwppcEJ7t PnIBdMXpyIXtDKNBc0dTDf16E8NsJ61FYjMKVARreLLoxWAKa+aKwvKULGP3dH3kiYSi42LINkJD beoPUdE1FtO2KBxkAFIEQFo2vEmK2ZyjClo+PqT1VHLaqG4avhUGKml+iPjanb0AO4TrJtYO3acb mvWk0aCCzwHMCoxjO/Js1Y17iGaFl2VriSDdEOm2CysX91VXjsZ/X/Y5a3u0SjCu6US+63pq817J /U25j0RiOJzPkSWmlrdTUNpojYxVwY1WHAdKLQzSat1r6IRlayTwXGWAHt6CsEzsY4soGT9EC2Ij MAEJWvOyuE/HDFFuXGwLR7T+Js1lsv/MyNNsEqjkoiGK+GVvxJyxMTdK66KbUyXMhZW1up8usIPQ II6pmg0dXhcYgauFhq3YVemCZZA6mdI8rWYQRkRZkd+dQydUVNVFCW2HiomMFvAiEmNTTYcZohaQ K37aVYUgow8M37BDkf6k0DU0dK1GYO6aaciN2Iqvp9Sod9O0ieGoFpHvYFqQ0Akd01EevDItWtNC VCmOFyUTpkXJeiy7NqiOyow21F0DEy1W8BqiEhDZgo2rSSccZdyySOuUZvs6ll5ka7qtsigOL/01 34i92FGh/lNlz0tztDnF1lvJ8y8lOy/ZPxdpldZMqm1cbIVhHKnm/YdnRZtg0/bEfEdF2lNkxZ2a 8qrXD65aJNAiYrLIskf+x3xelE2d/y43SkZ/uthzQ0d5T4NDVpdmAp5439CHwH8FcJvSeybgNSmy rHiAZVpWc6RSGoE4vmd5gYr6Dw5cYzbPikc2RoVIW0pLDqv6oSi/IQj79HcmoQVOyuXZMtNJxurX DJcTYbMOXQHrAKaGjkPf0DUVmT1VnuVWv87t/q48F/26mh8ZLIv1pIS7E2EvVsL98DxoYdvBhgYP pEh7ijy4u0s0mGLPDXYVScGifajIzbgVicHzjMKsvbSeprkE5+rEwFqwOa9Swev04bXeFK7Zg+OA Yt/nLIHu4xxR7Vx6SCNI83S2mKGKQXBfAld24BuxbmyILT00jMDV9x6trXD1cXBF67pMbxc1q54O qK6a9nE9cbYGpbUC731mGOv2DUcZ3lHi7YW2h41jptp9SlHQMBv4QXINQfaZjNsSaEdvjNghcYCP gkA7W4J8OE4Q7V4LxKqae7JpNeUHZOSmHbrEsTdcLosQI45XA3qV3Dw9udnJyD9VqOnOxw28xowT IrRazXCgNRoXM5rmPddNAlqWY2Aj3hwIgl2CQ42sICMJrXZGtBbaRgi79jJ4a09+B7yt5oULk2O/ geHEEmKxuZ4C7r7AXaIVqg+4E7KUeNyIvH3sjEgRMmZlzWG7u3ug6GI6EKXfb8H54XTe5crK272Y a43+pBbT3NHNTeMPHplHvJhnL/f3M9b6+8kJJns7OXwf8xOPmBwdz9+z7FGCMmtN/04FKJff8uIh 72prNxohoquG+/kXPJkb0dKnp9LWWv/to9J2C5H24LoWPwKy8ae+4Vp+h7L5gVOTmzPC2mnP7BGO H9ll+xhOpNuhv1kYE4WGSbDdUeMNZrX4ytOyoXsAXGvCOGQAosYCZxsBsV7Q48dnsLmLFscgrnY8 sPA2KOz5iyzfRZ7+c8EQ9203pdY2hyN0Y99T3ejexIc75Bn2w5hgNdzx8KQ1XZu4uip5fgfS4sgi tq5Q+0bFXG6lyh9+g6APgmIySfMzxEBpjJrsfnhF3+cpVyooZAkTk2919wyBxbA6Rbz+DhMukPkP Ce1CTJ94sal2Lg/Pp1z+GVYUAxEVaU+ST69g4zdn9XlY0km9xoLXXvCrqARA113zsSevPy9yJthX gk8xxnZEfFWVc3g+1Qwbx57ohK5Ie1jSYot4TqQF66Q1dTsyAg1yTRVpT3Q7Y874DVc1pFpBW+dv sAxr9axNGvN6mrzIZ4btuO90Ns+kEuJNX3Nw5Ki+XYNDWJon2WLMztAt9OEqOX6KGmXpLG3Srs7Q 1RdEx2P+keoM/eoFqz9iKPeRwJZuEWwTrPJxB4et/+KUhG2FMQpFigD6jcJ0+R/i/wp/q348Q/zk c9EhrkqLHBrNLvchKqgpg1EuMvjyAhwYobLpBoevn7PilkLN4e9NJHi1j8VB9vPvV2H1IypKlBTz lIlesvyjUMmfL8Dtr2SGpFtYJzEWGSl9cMV+FGh4BRoFrpMDF+SHcCwltIZhPlNajsXw4WWCCb/c At7hAKu4usxo2dt4Ga1Ba21/WUikg2RKHn0igsRu+/6JtSbZkWPjmlZwJKPkbgrAxJwrv0dhnneK LWlKC2GPblVPcYboy3Q6XH7t8aNmMz1hg5eO9Gn2Ho38F3rLF3FGHyFPLeFng8X9IhIapbMfx+wY vnj0SBBz3asqvQPj8GXKvCJf7/h55LIuUMkmTDRa2JK88zJZXpH59lEB86yowD627WMJeS8t1Y8h 3OrLdYtmK9D2ySk8Uctm+RQfxs71smzzWbZtwgWGiQNNNd19DfWBpB/WDWpTzPqdMdqE2iajvl9R t7MyWAJhNtFjx3TVDvrgEAbdv9n4rBkhSOfzspiXKVcWaMZqKqYD/ZCO2AjV6YxVNZ3NfzxrZhEm HGcllRJfxIhCz9xoy2K4oecQsemhwHWi4MqKxufeMLN6Vsu++f7ahW7ssFow/+84IhDPlIEuqrZD wyLN+F9zzkgvm3b7JP0DkfAF2WHa2ZFBjoRIlzcvP/g+yeYfHB2NX/kySYQyPjksRC8/+L6xyg+M ha2ht61E2Tcw+THQELz44I0KHwYaphRGirMy/VfjALxMnH1DcR8DFV9ffvB9g20fAhWXLCnKJ0U2 Tx9+/wCQaW5/eMexfcM+YpYQptTmRsWXspik2ZNZuE8Jta/N+SHY45l2MvQJqYJNmfJMm5nlAx9f 6vKoG0fxUmu0fierW5lpyZoOHZBVpvKrlgZI+mFd1nasYdOjlub837sClkJMRD5DpZhABAfSHJXF gv/KRBYCu2e5+Kc+l8CXYQSh79tqxsng8DUuUw6Ss2UvlCYhAdCVrARZL947kkCT6bpRYIjeCQpN r0XTdtJanuP5oQqMD49RrxlD3DqsKfK6xDJuJt1mrBLWJ19JMZqoyLnVCPXwPZ49r7i5AQlHErxr 2a7jONFGdYkC2AA0AatpmkkNM7T0wPUsF5qlKpC8FiTbSatrmhvEiv9Olv8uzZHxZKBV2Jtde7US 3DKsiG3P1NQghPewtXBseaYaOjQ8VbjOnDsGSz8N5ICznhbjNIEyFAne1RzdCGJL1VkODmAlSxj3 u3s5U13FLlcNv8/FwCF+xrw+ezo5TQJYxPR8TExlnw0OWPKyaplKT7vWaV1NuQTATNtw3EBX8cLB AWxVlXvW5uo16XclmxdVyg88oh925u79KKLU9EECYbYfe4aGlR80OISB0GpmvnCBlFft7keac7FF 0YwmU74G5zCPD4JfG0NFx6xugtgyMoz42HFEh3iFsEEhTKQRCyG1ofl60q0ZB8MlXLE00pJixi0z foJUHwLsWm4gssQUuoaFLmGC3XbGPbe8uhm2Ij+A/92Xa/CjG08gKvtAo9aFFMJiHBJXVeEMDmFt 4/Ydqk+INw41r0ZVMWOoLStvHUpQrBLg0gJCLONJpwsFrpMHF7faYXw7UL+YPMHYyrsUSnTDrazL 9O5uo4p1h/FleC6JQqUeB4evp5KLVhUHHKTJjSSQY1ueQyLVBPtNyNlOWmzyh1XJJQNkyn9Tconp 48iysXK5BwewPZJLsKn5XkBU5O8dBHwUaYZhKQF/qvx3SaDTb5e2u76N7S3NLBQsqxFk+NF2TW4U qDjD4fnRMi0/iiKVvDM4ffi3KctRzh6ecbA3tm83UgYkGFf3fWhoobIABoeuVTrJGaKTSROfWbWJ X3UuFe2Y28Z6XDmwcVPCJgEuzTOIHkUqd2lw4FqXWLC9QVMR/aPzefYoflm1M0Vp0zGq+1sCWWao x7qpb7TnUcg6fWRVXNlVE+jO3Wy35uMm5gAx5lKIJ8gfeWbrQ8aaDQjWAhNwpNA1KHSJbTEJhBBX 8wLXU/GHtyBkh9EQRrbn6srfGRzzeTv3fNp+fjsk+o9y/SI13wyjgChXZ3DAWvVHANPgoUBVzebV hYydads60VwljA4v5y2oa3FUCH947Fj0ws/7dgmW4FmdmJofRBu+oRZFnuNqoiOfAtZpAgtm8Gz0 UKIzTvf1ZLa1vlr7tik1L8iOaTKhRywcHjOBNnnnaZextd6lDRnOEKfKU1oY9o3mXsB/W2nh2prj HTEtWgGzvvm1vRXXy1QTykoSQwYWHfy0Hb3ZXC2O9KOg22U9LYvF3fTlx99/IFOPhcb85PY6+/QF fZ6MLSu2h0KWHRdt+TPfcLF/eZ+KMU7dnysa8yPrtBE5ttKMCZTZMY9lK2WCEPsOOSLK7Gyg+Cy5 Ppg0jvjZixc7Ga74jKx1SH0DBo5nuevLJ377B2jguHnL23yb2A00x1DbE28xQbeT1oxjwyAqPPgm 0h4zgz3nNl41G4WirGBetNvRh5wpo9sOMTR7A11EMwMShKJTs0LXyfqOXPcsJpM0SRnUQq2hZU0R 79OxuzVUd6ji2LR1go+YMBQFq56fYKaAV91W8LRZIR9Pg29mRq1Z2vt0JN+9uNukQWttH8+ad5a0 pFn9UXg5Z1CbRsvHZfnZKrA4KYuZUBa16C4uY8q52HNsC3i+pxH02NNjl0RKIzy7SB9dI3QmhYzN rxHL8eIQIKEM09cCZYdVFhic2SzVK/rwpLUcx4g8V5H28KTlRkKkm5rKfj08aW1bM8JYgwdSpH0t aR+O2UYPCu6J5WeI1Yhmo0Ybwyv6Pk+5kkYhN/Jmt/wbdPcMgT2+OkW8/v6F3jFE/iGhuE0TG1x5 KzAdnk/NSCO6T1Qc9GT59AqqSHJWn4clndRrLHjtBb+KHVZ03fY22uBR/vrzImeCfSX4FJuxzZ0u ZWC/g6liO6Zveqrm9x1I6+rYDnVVGXuqIlC6QXjXeqtkGZSvFE2VSpOi1OwDFxM0TicTVsolupm+ b+BYDJBU0BoUtLYN3eIIm/PjsCIttDiqFiUDVFG0RwMWXcO6G6iO88OD1Vp9BXe6gmI2K/p1mj20 Ldqh8I1cQyKT6aWiKc90PR8rb2DYwOIwSrLFmEkVYBAbe75lqSqBd7BMDZsYvq+M/sGxYwG1dp1F gKpiUj9Au4d7xp+jaSSS5lVNs6yZKLtnbb5l6r4WOspPPzzL2kHEH1gN8hoky8ZpxlD1WNVshmjX gVEmqc2MDIN4jtKhh2dI3Yod27eVrzREhrxeatAaBtjsxZOEeMSwdGV8HZ4nse9jywtV8+fB8eRV DrnfjyihFdTGrCWF92MXOWPjVfSihBJR1BQXvWTahjrxLU+ZtoODVoejP1UbwQyQ/Qt+wTTL0JTe M3TLWI74Z+/TYlFlj6vkUwl82USLdM/2Fb6Ghq+2hmXZF+HXVQ3LqhEvEl0Y72maibFmYqbe1+VM vZEEwLCre5ETqnS/wQHsl+KB3cNARo6agkOt7GvJVcr8Vn0phFteyAR/iGMZkSOA0AOYYYWRFQQr 4EgCrC2ZwIGNm/JXGdQ1J78D6npVIsBA+zRK0C1RI9JcTYF3b+kIc8/oOOXqdKf4E8JxDaFrRVtr jT5kVmxHm48evP5ocm2pzhKcegvDCrsSradj4toCrR6a19p+yNU8mXvVPLmuTjz/GIjWlTlRVC3m 80xoWJrBCTsLoHogEhrytYTqEXytZcYbwNjSdZ3Yx4PQjqRtwd0OCm+F5FozkFdS6GWNcjw0eqZl jwQwRfLyiUm3/ZoYbV/0Y3iOy9YB3FBNK6xbezX2OAGsX7ZdmGWAvVZrLW9ofUBgp/Vmderu8kMB +s/bQ1TEjqzoSb1qqAeOqcFQrUN6eFGkhaYpqHpiHl6PPdcqwl8JwRNQRUhaGa05R6+3kqy9TfYd vP8xrKTtZIfkzXHT4p5m273zPU0rkdg5JDxfdk7RMsrxLJC3P+MRPE59OULorxOU8MuIoS05Smed C9Plj/fGamwqjW3hwIiErm2pePPblMXxQmanLN/eI2lGH2HrYsK/sS44kEScpZizktZFWcGxtpW2 BLYM27F8T7jMPWyZgWuEvqg0Utg6UWytgWNN9QiRsp9lsJ+vE8dEOw7yPKvV+7EnabNqnz6ru4l3 XFSC2NBGY7bt9/rRuGBTQH6YMIWo7cjH/EoJK2ua5ihJy2Qxq2qaJ2ApsnuWo4cpyyV0gG15tmW5 yr4YnA5YddJbb/HP7VNuic/L4j6FFJw3NfrXYt0xdV/VPw4OXT2T9Qc2uhsBiEomzFeOrgk/dcrV IsxD/eciLQWeKphJLwEqrLmhZos5EQpUgwJVT079OJJAio4N7EQexFQVUl6LlO2kJZZBbN/faJpg EBJhLVpG8mRJ2/oGbbB6C73X33lnevfcob03Oe3jySJZOSa2oMP+j7FFTPT2E/5we/hGjBdd2sQS gVj+m7Bm5otyXlSi8H7nQLtxwSpIqVoGJSG3BfKSIcjCdRjlV4GoZWMf7bzMShGO/t//RX+95w9c pzN2hqpiBgHPBzRP4QvgXvq3Wk9pjaDmr02FHnNicWwnTcF3/ThvPrL6pgrN0rtpDbe2mgo9Ql6v Onx7SKm1+ErGmWKS3i2anJQmVRZ8v40WBll633QW5swEBxOaZY8jdANn0vsiHTdzXztKtXku/aXZ SIkRUas7KjLenn5f89i9x+SUq0tGZ5yt4R34rh65ud0KqzVCf0m/sQcxOjutV5QpboU2GTfk7fyn 7Q94CwlLL/csRyVfJQ4NKLcfQYK7eAZI3Vv/av7+ZJHBs5bsfElqmb7o/CN5gbIiBzq2gH9KKXHh 8SIB0tcPRfkNQbpVSw+gVMEfa8qouMmq5r+ccQwDADdTlFpA9DOU1tZHNO1tq07h4VGR8McVI37B 64Sn5mc1uF1X07vEyVY1cMSmyKbt8WQLx947Y2CLxH2V8jwCqr20S3m9f16XvX9Hd2PbCCMxN+AQ 6xJ5VhSK7c9jXgJQkc9QeCty906cHQxy120NWeTuM7/uOeTuvSn8oZG7Y9jByojYF9bC3Rs2rC8l beLnSbu92a/tOfpGPSeO3ci1VmkdB3MG/63Odw9Ce+cEH5Ez2HuMV/q0a5xwEnbI212//TnFD2xH Dza2W0xDs2I9WoH9g3NK85UfnlOcQxjxJ8EpshEOhH5f25gcs3lWPHabRXtxihEHPo5FPmw/Sza2 Pdd0TodT9s6ePk5OOYRbdRKcUrWNtPnjF3nShHd6446WLWb7FlhaoW958ZCLSs/9GQXjKCabfUqs yDMjI4ZOjqfBKK90S4+NUfbOmD5VRvn/7H1rc+TGke1fQcyN2Ct5SU498dBGKAJAAfY4LEsxo7Xu XoXjBogG2dhBA20ATQ4d/vFbWegXyeGoOOzmtbuSHySC76k+mXkqHyf3DeCyuuvadU72dl6XczCJ e2OkX2hBeJaxCCpUSPIHtWPhxyLi8fZS/C9vLF+ZK/hnM5ZD3NlPwlgeV2uWq2G+LrDYcbNnm4qU Mgpzc1vcv9RTnlK2Zxf/6qZyGpf6EC/192VatsECKlIgqzFFl3udbvOiva6Gi2dbhh9kNJO4ke1F 6H3iaAmnIkrgH4RH+/WO4fMm/U9gvV8oClaV90ZBZTneqDR6PwP900xQc0P9Statyf0Pb0zKes+S z5+xOkGqTKTagBFgrgFM3731hWJy9781GJVGeZKa+wCC5GtB8vmjJYG+gaVK4dGeqP197188XKwU 7+4j76tBv1xWktgwlcIk9u4e3gZlnqVpwHDmx7kYeN8u9/IE/WSXMFo8wHOlf/BquiZtPlVAA6KF 4dIopjGLcIeQc+i6rcf5/ljZ+nyh1Xndzrxc9t2yrwvQYp/qIJte0+Jj1dpQMz/MgjiKUM4ffddD 3wWdyPWsgnZ0bxg7aFyGi2Kj0dZD97UNvGjs0zRX8KIivL4WXp8/Wi79jKYpiv6fqOU2xTC+r6D9 o5rBavekr4qP5rv+/yd9UkmzMMW7hHNB4xlJH6Gk4jkFOCBIvhYknz9aokTM2cOuRzza00n6BBee 9y7+c+yl2ldrEtYbH22T5wlYmMg0RsZ1eLPzA1/JPEP1DefCnhnGXVSLbrvJFyZIQWujGkZoGgFb tQmKfkyEoA+1ahFCB7BOQYTiPsU82REcn2JU8gSvmoc/Ws4iESUJXqUOf7QkZkGSPZTjxKM9BGpp opIE03qnewFJu6uruj3zqtErGn0Z2bxln5a1Zkaeqspqcal/A43OPGiF3H2JefsVUlae/1cLTiR9 FeexQv2xw9spi5RPo4ft+Xi0p2On7/Sx9W01nqu+uBrvmeCHOP3BVHm8D+shqgc2qt/+uGorY74W dkplnJPcbHJCMB3WToMgS/2E4L76wx+t4IrH1MyJ4dGepAsML6DwVeqfMt49P1/KwiyUvtnggvg4 sFcTIiDcCPbg0Z6i6X05XzrrytVGQxC0rwev8MoOFBiLHuzTyCHChGrRgGbhvO9W13PPbis9l2ko GCaknEMWnOyiGKuZVwHzXfb18IVxzY16gAfdDzAD3dTXrdVeej8XMhNYvXYPYabr0tyd3mx302/p xU/dMILK6K4F/zsv2wHxPwejN/Fb2ApEyhPElnvYSmEB/Rvv1/d5Gvic/VUz1xjC4tRyOW2mHzZY K+9RWUsx/4CFPKMhzuM5h60tqKAtvDEqx5O68JqGaazlqx5UhxeahE1Yuxc4LdAlwoDkaYTVKufQ pel72dfLR1pL0/48w++9YhyL8mPVD1MMXQt07321BcI4jUIeCZxndA5hw6rUtz/9jXAnHLqr8RYG EIxi/JZfgTr8qjU69ZNeet1vlSmsmlJ5oBKaMJBXQ3g5Ba97PKvrr4u2/vuaWQ3zbtXMtnwL/Nmy 6hvj2Iy+XGvWItgw+yROFeUPNH4QXqcPr/spiP1oabY7wAoHEMex81Iyz7gfp1gOegmMnggALBSZ yjEAnKqFfh9B6/yGc95U3ntY7lzBJk8bfkDiSAqExxEsz09YmgYx9uc6Fxt/LedFrzn8eV2NV+dD US7OCbXpDGN5LpJIIp1yDjJ7b9vcezyVfoBTQTkn1X9z3a661eD90LX12MFiszPvTTqB7cyGZ8VB IAOKBWqX8fWXqoddax69IG/OvD+u9L2PEcpteDrLpUhYjv7p8GxB5j5LBB6ti2xBe3vYgglLHce+ awYbquCHqYxziTo2Lrty/Tvasm4gN5zeXVb9hjoAK1iD6l6noEGXDVEgLBMBE9hvhESh9eQFfWPD DijJ8zSVyC4Pzw4EEVmYmmU/eLRO2eOvM5hzOZ8X7XC56u+mbEKnf8g51JnPF92sas4XxXKpj9o2 y0ACyoIAE1MuO/fnZhl+/Ev8J/gCC3xxQgRPfEAS4stVfEG3lWkq3ZYmNMB+AG/15sz7c3czDdMy QqUNtWDKD+KM4yje4alFoCIuM7PoDY/WKWv99d25utiVKEDdp+7NWjSrDASN4jyUWKxw2s2nxeL8 F32i1ai9+oVhEH+68P7U9VX7d5BTePMEz7DAl3ZMiR+l6Jicxtfn6Kj3DTCLb733ex5Ls4rppmQc mgW8RMZ9PyeY4nIZXo8C3znl3je3Xf8RloYu++5af+Pw7Zn3Q9GXcyMcYUNXaSSU7yfwiiK2vhZb T5ht5EeM5ni07tHV7byP90vRjFW/qGGsR02sQ//vD0UP0WHsgHc8GmW0MFufikARgTU1l0PCb0+8 rqcazzwNSA8QaVNRowlROcF6rdPYUj++8yi5oPqPDt6u3dmZ9lDLcZcOsyrPkjTKBMV0mMtg+rdm /I/5OC6/e/v29vb2or8qz6sZ3JAuuv76LVSH3uqPAcT+7Xr8DxvaKlNBaK6wynh42so4pREJcMLl RC32C8trvo+XS/2Z+pMXX3heapaGe3/qbFbhBTwjSchQq+vwBkk0GWNBiiH0VEPo9/EF3drb4H2o 21KT+lm3BC2lAoZjf/m99+5ceeeE2MRGrnga5RgbD2+KQZYHNEFTdI/N/lDMKu8GBMtWw70Z9aLx IKkz8dlaP5VrMy5gxWy37AZtxJd32p6LhYXx+mFOU4772xxEmP6DbuqmqXQo+H09/mF16dXDsKq8 /yW8b+D2NOjr03U9zleXF2W3eAsFgdvrt/em222qSVTlVCUx+jDnELaRXHxrcDW8Fd9e2HgkFgo/ w71Ix2D2KkxCquAQ8WidMsX31aK70cQAeg9//lH96F313WLqRPy8XDZoD9rqdKWEqBz3hruHKmua 8DAShFaRgIRhJnCN2zEigZT6XxMIXBt7+KP1GQ+TNEX+cvij5TLORIQLbY9wtEEsEpHjGMExUOuz hGYcWfep8qMDbcgL7HSQOMtTgmT7CJyI5gn3KUaXk7XTV9yQx5SUOccs1lHuLr6fJApd4OGP1qeC KCFwcO1UXeDT60ga7fOu6nWKcFZpPlObibTuynvzUNHYKGGv9YzfwHaJ6tOyKerWwi+SnKYZizHx 4BzC5t0taF/fFoN3vapnBTSdQCV7vTJi5tXtMPYrgyyz4ma3/mbsumbwrJLRPuPEzwjiy0l8aVdU Fn1/53UrfRV7chnco4o35RbQCvw8jlAcxkFofXWdg3K7QocfMRJLRNbhGS1LYp6GGd7D3GO0pi9u 5r0Zi/66gtbWsmuaibka0vpmWC2XjRluhja63Se34cHCdIWUmeAJzso7h68NdXhGt9w2PNgAK5VB ylB8yFFgae5g1y4nlcqVkuiADs8dAsJj4StcQOged9jLhhWjSYltbpGQmLi/iRAunV17U/Xjs5eo Ej9Rfi6x6u4cwp5aorrOiJXVMEyb4jS6CgCd/ry3GorLpvIubaDFUl/yJMREmHPQepA2rYdpl3ix qGBGCN5fuyt4fZ699pnFUZ5i4yB6rI3HMi7qSxWi51ynSSZI5OPSPffgtblOy+Ncp2WWJXEUIZd3 E1j6Oi2trtOUKl8JvPO9CCefP9ogSoiKWYZH65oJqspoEraVV195t5XXVnCz7rzeTKXp/23W8sIH gaA2XXt9Dt/jDWPXQ3Nsd2VjvCTO9YFgscc9cmo2q7caSstuMMoI1fC4yu9/iVtY4ItJLlIa4eXH OXz9Rpnft+IWAc8FTTlyiyNwCz9LpQiRWzhnmT9s59r3kxLAMAavLJYgWAuthd5Wak5dsClnob/H wmh9Hog0FliHdQ5Zj9YzPSYUwQsJBWUhlWGC9R8kFPcJRWDXNxhwKeIQxzUOTygYCyKW4vzWyVrm 9/EF2xPB1AzhfXVTm62+07ac0gz1TgvAwFq3RnpOqI1rV3EY0ABeNgTQYW3TZ1REwvyD8GhP0TZ/ qy+nnEhZd2V4/8Pa465MabJC75Sx7rWe1eAJC+PVQTUUGS5Ycw9h0H9jtcjKjwUPQhxkPIJ/51EQ 0cDHZI5z1hfPYBD0wbwx7J+b1cblm7kN8Pm7FUSatg361R2M5Srt8C1sN5ChSFiE1273ADaOfX25 GivvZ9NKaUCzHXbfql4ONhEgyFIRBARJwuEjgGQ0iIXE4HqiBvqFnTC/ERveLTYje4bhZ58K+IBp HNjuNXw305/fXRPAxt+BgReNjVUTEtEUJVDciw3f/NRX5zti8a1hE166nQs9M/pQO16i9m6a8KU2 6+lYGOZERphWdA5dW+8UL5eNdk0bUQrtnHaYO3vwvCG3FsiiVMkgy/HS5ByynsNZhR/IKIsBD4iS r0XJE649kkKGEo/WOQOcmCkMhU5sFMjobySl63Yayiq7pU0TCuOpUinFLU2uOncb386SkEmR4SLV w/t2wQhJUh8lR1317doO9bmCZCFM+5sq5N1v+fjZNq9oYbycitD3kZi5h7B9KvAcdy9o5GcBRcQc 3t1LyVKWJziF7Ki7N+57O0p0t+X1oP3yeDRtstx6rBY2ZksTlqkglYitw/eF5TQMCC5wcNVs9zna rO51KNVGXMz0LzQS5etKUXflXRZDXXrD3aBt1sZkg0jTf4GpVQe52b7OiVdtcvj1/QrjM1gbSUkm kwgzOYd3/1QpFXO8Qh2DEMcqydMYPeDhj1aIIIp8jhXhwx8tCUKON+QTjtsHWrwX2ize82MhaRhi dv3wdhoEqWZECTZSnqydvuLiPRklGkwK+/eOEE9VTngaYxXs8EcrheS+HyFqT9UFPpli+LBs6klh fD9DtZ94MPripgl1UyvSP+B8t83KwinSLOIZjeBFRXg5Ba/dWptNlmqjKT4lQaHftJjdwDa+mdfU w3hhAScWC0rSHGsYhw8ENI1ileYYY52z1KmGsR8ETBkSqoyTghV4/r2i5Poju2ZxC8MNUpqEAcqk uYeuzZTscxpMApaKCOn+Ebw8iSjjJEO676iX31aqoaNkvloULfD5+rqFXsPNiLKRLQEXn69AxdD7 pes/2nD9KEtomCDXdw5bz/DtfkIzFSdYdTq8b6dREqowRZVfBznWsingHv1IwGTZ9eO0c/bLPeNv bEyX+zTzczRd5/B1WZXFChYOak5gOlAnYHm3BUgdrwZ4WfSZX61AxfDC8z7Ui7op+ubuDL7SQNMC X1xlMlYpIAnx5RS+3uxyylufdVuP8wefMBfJNzYsg+UiDCJcFncElkFin5E8wMu5wywj1b6+vl71 a4nyoi2ujTSOUSO5LHSk+Cb9QSXfbqz4/TZ5aMUzsjxQXKFImnMIu53X5Rz2hkJvxv8eJq5h9h7v paRt/D8XoZ9Jjo09h/f/+hIgUoozCQ77/+00wpv3XVNtnPxPq157ef24uS2sP6vNuWhgHMZmy6+U IowZoYgu19A1g6H1qd4I3l/fIuNm6OACCav6NOnIV63JMu4ABu0rXfdMgGVBkvEcAeY8wGzAQjMR qBReIgTL14Ll80crZBKRKMBktXN2uF6lYHanFVMD4qwrV+b+OOuqwWs7/dH+zgzTGpvV9L+FpsSm /vt6Rt7Cdn0/VirMsdLtHMCmBlZzb/wNoZyiGefd6noOTGIDPQtoQcN0olAUzT1o6YeyWc2mSkip OedmHcywKufaTU3Qs6EWlIYRIzlOdR2eWkiRcpb4cIh4tE6Z57vWWCc0ls+M/lnR3OtrHbqr8bbo K1Os3CWw92YerG4FmS+yPEbTPbzp+lToawGm/k/VdL9m/cL+fWGrU+cVfbdq91KRD4RR9N1hUXw0 KaKyqYrewqxZQkgkFbI658KGvhfU1+16Z8euCXY1AOZgBq7vq6YYp6U9a6DdbaE3aCzaSClLEjIZ 4oCNe/i67Ma5t6z0Xz2MkOUAGK3a+m+r6sLz8lWv/Vq/6PrqzINjN11VhenWNuphy6aoWwt8cR4l qaCYUXMOX/PudprO3UCsvAO2u+fKFsWdd1P0dxpvP8/rwUAM+jRmnpVGcBAluaQKb1TOQetj2902 1ey68q4LUz256ruFAdtu6ZWChUQ6gHo/V4WVEilPEh5LzH28CE5PWKrMeRBygUfrmqX+53KmKep0 SfpQlfq3jHde2um/Q9+2DLfdzmCa2xGwWHh33g027JWGMvB5hh21zgFrqppcTpXzX9/nqcYB+6uN n/eTmBJCsVXs8H6exmEmc4GzOM6Z4/t1P5S5Kq6zYEkPL8Z/6V/p/Xjbajp2U5eV903yXz+qbzXl /2VeN5VXL2CwomhHm3WRPssiTjm6e+fwBaDx/ns1jJCDGLyyg+rJJyATZgN6DcPhZqWtNwNJvYv1 dwzzbtXMvEurpWIBZUFmQIDgcgpcGlL6EfIOmksUHiRVe6/X7soMDlpAhyRhkogEC0SHpxQkikmk Qtw945xV/lD11+ubIwixQe7wzSTStiuv7UrkbzzIX+99sYXZBjQNJI8QW85h680DkZktonbZaQ2o YaqR9JX5XmgEhfa828q7LazkxYivMipRF9A9fO1plBaX3QqKa1uMmatPBdU1r+untmLoOJ724A4e VHxvqsZmaoSSXJE0xt4A9xjrTVE3xaW+P5tkabVzYNBfvCdyClOqGyd3eafJrXF8Nndt6auUK4Gd 6s6BCy7XOgLOzgA9s6qvIbFjKmyd8VpTFDRD0VDB1V8E/wNHZnXPljELcoXbJNFrPem1hqpaQAPT ZT32U3/ALzDMC3keC4CJhKcR4RgWnQPYsF6ZcQYkfdnXC/3Q3HklNFdPPKz6BN8wwOuzrynfVtVs 8PoC/JsFwnwV+DElWM92DmGaqrfbzqZ76xAhKW0cGLQv9VO8vNVwslIGCRKS0tCHlxEB9bWA+vzR Um2oNMqwJnn4ow38RMWMohs8/NH6PM+VxDWIxzjaMGZplOLF9lSD94HWIEY2axBFyISOLyjccng7 ZXEYcc6w2eNk7fQV1yD6aZCmGUGnf3g7JXEeccawb/7wR0sl8UNGcHjqZF1gvFxW7az+5CWap6T6 r6jbVbcajOvbScQ8a6kVl0mQJQpeKgTNYe1R33cznzE4RDzaU7THpzU8RlOb70ZvWOnLRVlDO8jY wXAj5AC9woOcclNBtXUjDX87r1qbK4TyQxnm2DzoHKie1gF7kFleri6bephXMyNqO/WT2DSI8IDF RBD0V85B62qa3/fKeVV+1Mep2YXq4LUYup2c4brveZrS7oahXiNxo4BogTCfZpHgISLMOYRNG1G0 S7rvxRb19RwaQWCtct/NVqDMbUY0oNqvr/vLvraa7BSpIkGMLfXuAatqb+q+aw2FKq5gFGOqtU7j PXv8ahoCGqsB9Eq6fqOpdua11a0FwgJJSCIZbmNwEGEbjaSyaJ/yVTsQTq1u8+Km8rrGamVYwDmh KMXnHrK2Uo7Qd6v/ByxrtTwfu3OQQZhWUiyLUbMycFpxOzVUrh2XZ9XdxmPFs5xjTtA5cJluIm/V 6hOed71RHdcw6y6HDqLgDntmGHYYi6YxSkoezB58qodRvwI2jD4PVcoZtuc6GxZhUGDH1UFwsB/W TOzJjIUFsFga8tyPsATnHLD2s1lGrPIxl58XgzcWH6vWM9ucdHD8oeur7qbqrWZVVBQywjAmOuiz Nn5qWKcegHLd1sNcM3kzwHIJrd+aXMHjBDhPR0YbokVowGNURnUPVJZ5+cWimtWa1jd3ptQD98Y7 SErAffLCAmDE5yrxJbbPOgewtGuvmrqEPwpuhNMtUINsrEsIi+VY3+j3YTtA7zX1ooY0q/5+/eeU Gz9ng68wDP0wxPFz5/C1qApwR8WoL4XaHRVN1Y/DmVcNy6rUxKuBEk83wL6Y9aqrPbo/m2bvbFIR gaCZnxLMoDoHsDdNdwsDdh3oeb452+W61uL016t6dg9VO6o/eKt2rG0ImMgYj7IQ4eUcvMBrjTV4 rkf1n74qK03GbPiVCEKZiRwbyF+Cnyc8vx9nIo6RWjhnmj/DtptNS35x2d0AY5ikeIfPdsF1V7t6 m43V0iBgUWAggNByClp/6G4rSPjt772c9iUV7R1AarUwt3Bgp0Ay1pduWLT9nP5oxlisKEff5RzA urJc9YNn1ibVN5ASNNRCk9jrGpbyrbkFuCz4+L00kAWwZB6HCUU5QfeA9WiFr7lYQ/l1o06881AX Uwy918e0smor8WVCmYoxX+gcvvZTzVddA5fv6U50XQ2bXb+PPNYzy7My4kRx1FZ3EF27osbZ5Iyg aDbTUfJuLQIH2NpzWFOhbSeLarP4XlAmJPNx64Zz8Oqr+7dBk5K2K7EVsN5rsCL1UZBQylGHwTl4 Td25u5beeTHzliDe360GHS4vK31JnABYzfbbSoxT22QyLBAWUJELX2JTr4Pxsez6ZdcXsLOy6drr 87HqF94w6g9dV+DSdspvwP7Pnn1zJJFIuGQ47OIctp6IfGce9MntxU39PfoVhcZezcdm+i8ZbXwW k4JlCQcEIa6cwtWVPkTtfGDoAJoB9IFerRoDKu2/zCDoPi27sMAS5cIPmMJq7Euw9MTRkoSkmUKx v1M1053MS6op6E/rvgkLo/OjPM5liI3Nhzc6mcQJYTlmU52LjWv7g/5KHQK7EhKrk7LGl5Oo9wia hfGKOFI8iLCB3DmEPSbua0Lf3ukPLKrZnRnS264+9S5XRl9o1KQMsFgMVjlVkvqx5D4mvZwD2FAB BjS5L+cw5tleQ4/EDAZcvGFVzs/MPNW0kaUCvzVW1/DlMHo1Fb1tuIdPVBBHiC7n0LUf80xlUbum TaZU89c/Q5eOxlCjfZxp1tn3ZUYUDTKxFghjGeOZSjBAOoewScJstm0dNMRrNZhk6rqtHOhZPa0J gny9dnPPTqty7nOacMSXywRs16xq+lM3gbMehtVakKPWf3t3C1un4B2rxbEpDRKB+3/cA1Zf/W1V A4Vv7bqZufBplmOj/IuQ8gR7SDmXeYbtls4Z4SaBCvygr66L3vRZ2uVt1pJfFqYropz5gmPBwzl8 3dTVrbkra8JQdiuQ5tK8dFZfXVW9EYQr7gZDHeArYLHzZsxx6u21IRAsT1SE2hJOM9PNRefvaz2J 9qZrbvSt58HHp95eG4fFMhnHWKF10GHZdVPuQ68r9fvGX1mpDga5CkWMSuLuYWtWQbebPmj9vTDV Yi1av2m6tCmVsSBKc5LiNcm9eGj04CZoTZ1tU0J5gx7QUprknY2mZVtWZ5qVPTcTKOJUhTxB9+Ue vjRpL0H6FJh6t9SgMQ/D3TBWCyPTu1w2dTl5rUm+ZN53q2uzZcOSd0WaeWUxFspeAq6n4kIa+X6E dnv4ow1EQP0wz/FoD360XCmZK4KjlKcabV66YfhXs2CYEpsNw1LKSLIcqfHh7VRmikiKssGna6ev uGE4CNNAYwmb+A9vpyRkUZ6isMoRjlaoNJFBjKL8p+oCLZTTvVuj+dDUH0Ff5LLaFSD0bXheX4M4 8TgvoBp2P/lXtxZ+kaRZpuIA/aJzCAPE7CVXpkH9epiyLF2rsQZFCe+quj3zmu72fCOAbZnSYzzL Q7xkuei5niEnSUSSRdxHmByeO9CMxcwnqIjhnAWCgN3jLgUz2QRt20ZgsTIanQ/E5acvMd9hYbuS ESZjieTUQeow8xYaXNcTuNbtCt5lMVEHA6tZPZQwGfBgBXFtViv+2JY2pRueS5L5Cks3TpLT++vH zKjcsuqhiQFmMGFec6KvsD5qJzBVz/R31Fe1XWcDVQlPEhTtPFWENcUwvtfgAD8EWf2kr4qP5rus rt4PlqcXrf4R/eAtVsO467xZb/7U4fSqK1cDeL+6t8Ee50wwHD5wz7tVV9qLjYaBgQ+7g//2nYYc jD5teNq6r2a7Nv35bTUk5jzgBAmacwAzAtf14FXFUGt4VZ+WTVePJlJC4JxyPTBqURi14qK/rMe+ 6GE/3syuQV4RRQPsTnDPdX2qypVh/ZPM8OXWYYEssXZr1aM89AaMC/1JC2xJQjQry+EVRWw5hS0Y 4alL/WJBYFz7LOgBnNzVf0+k67ovZjCFMd0EoOP0wsphydwPKepbvwRUT9grZTEnHGOBc/b6wV4q vG7LZjWrvAHESdbiXu3sbWdzT5JxGKUR6pC4B7Bp8+4+jgyXMDvozT37UcXbW78Ezxid4iRlkY90 wzl07eNqGjufat8aRZcd7H2etrZs9qh6491Sow7y2isYfbHAFhdRyiWW4NzDllm9qJ3Qu3azPrwY KtjxvMstFrNF3daDvnePHeQUizuvrcxOKgtk+UGcqEghspxD1q77a1tvm1p1zIyextqd97GFnM7l ekSq7u+hrrVxXMJXNAk5bjxwDl6mdLtH4pd9d1PPpqj40h1mgR9JGiPVcppqXVgARVJGFQ+x7v8S oHz+aGmUJEqkmAhzzgazqZAIGorTFtRiHPv6cgWtYMOyKuurujTysJv7jv66XQ/GlK+xsV2p8lhT UwSYc9maftdjuMn3fQPS6aB03dSLGhSux+5bwyOmPan60L+zwBShVAgRYqfE4eMBoZEUMkFO5p65 6pCwuxeeay5/pU995i1X/bKbtJ6ny8BNDaoue+Mf9ppn0o9yGnPsQHEOXVDOXSOn+qTxtOofIaoa S5vLACeJyrSPQgwd3vlDYI1xsaWTzv/DVIq9278HnHuxt5Zg0mxuKKGdx5Tc9NdUi+VoWhbXKSEb 02U6ACQ5Toa76P7B1TcaY43ZKr4Bm4bVPpN4uOGr8K7rm6q1wVYeR5FIMEfkIrbuZaFtSIQfJDFj AWYlDk8i/DiNiYqQRLhIItI7kNEa57AZzywya5r6umpLuFDu91fA2jNY8TIWpfb9g81oli+C0A9C HA13kjxU5byt/7aCngmYWDAjprMViLeZW6TBm8ZS18OOs3YGKhbQRWG3HyhmEUsyVGJ3EVllt9Bg WtRDBcApzbioxlCpf+UwoQtcFKwigfzEdPuZV83SMuNFw9CPI4XR0EVs7fXZrGDmFBSxZ6C3UN2Y 3YvGbZlKmjfvbuEuDUOk5WgTDgllWSgCeDkRWK4Bay22oF2WKbINy641S5W0T1rYXH8CEiUyFVj1 fwl4nnD4nFOSc0xPn6pdfh8vl5VmmJ88deF5Cjon4k3G1PsZZmotDFCmjJIMvfcRDDBIOE9ZjEnm kzVAdUFhnsfS1EiSZDkXqGh5eFPjQejnlOGo56ma2hcl5bYtW96kJLEolgMISOh3/lvT0oc9hcV1 ATuBvKoo59OXWBivyFQeRAEm/ZxD2EZEbi2mBHMsRT9N5NnccPxMCMEivOEc3uuLJElDP0Sv75xN /vv5vbd7j1/63P7Tv1sYL41DlkUpVmedQ9g/pvzW5u0fe5V9/ZCtVR29d7Nq/zFe6qd4PZvg/cMC YSyRhKUpvK6IMLcRtptb1A9GKnStgK8fJz3RabbRfGNrttLYIIwrRYMkf1D4kUHCRewjwlxC2DQ5 a+5D//AeDlzffjerGv1Lao2OyLxG+pWZd/pf+4firoV6typa+LD+fngdCfXPiX/Ogp8p/Y6L7wj5 v9NxfAk+qmrgg5TS2Ff/DKen/80/a8w9cYbv2nqsiwa+fv2Fe7amP/KvCYwJF1Dsm2Dxvhq0RQ92 7oSFoUpCihfhl7iTzx+tzFUa8wgThIc/WpYFKQlylCU5/NH6gUgowbT2yfKLA20tpTZbS4VMkigS 2KV0eDsVYS5YmGK27GTt9BW3lsoo1RGVY1b7CPGUhpQHCW7+OPzRcilYJtIHU980kEykRv0Jj/Zf 2gV+zVKVR0mShw/3vOG9JAmM+LmUJPn+m5/66hw+fkLJkOll3uTs23EfATb5EJ+JPAkfLoMXiQgT P4FLEfoUV9Kr+w9Pew2DCUyt7izu2y96lMuu+7go+o8fxqIfN2cIPZXftcVC/8j/9/suKcqP05+z +eIMdslsvnSC+b8cvu7D65leiQUyCiOBk2TolR49mE7xR597LsI4yUUcPOTSiDDnEZZ2TVOZScWX IkwoGfMME1bOIey12rsIy7OMBJhtdtGH/W7TtfW7z0bJJx6f6cOIn/skRsFo9GFPPrzQh7EgV1GO /RhO+rAnudb64f989vGZPkwEqQqDGBHmIsIgI/V2rBfVfdwcNkpypuLIz5CHYZR86uGlTN9XKRUY JZ30Ybv5jGNGSZ6nlKS4DNRJhHlmCeND3Bw4SoY0FRTV4TBKPvnw0rtkTqMgDlGxxEEf9oein93C YPuN/vmTZ7ofCA8SJYM8UEmIC3NcRNhQd+3bq7pfaJgdL0pSSdM0TvAu6SgP8yYWdkQeRtIoin2F URJ52FMPL+RhgYphHS1mK1z0YT8uq/Wmm41nOgIP48pP8ijAoT03o+RwN4zV4gFuDhslAyaUpLip HaPkkw8vFWdKOE0FQx6GURLejhAlZc4zTmKccsQoufd2yCjp5yrzpUSBORcRtqdJezyECZrxKCdY NXLTh31TXVxfnD1C0SERJoWMaE4wp+8kwm6qHhL7ALHj3SVjEqiEYz7MQYTB+3VZefqTH4+HMBpD voJhlHQzSpp10MeNkiwjfh7iNJubCKtm9bS78Zg8LA3DxM+wA9FNHwZbQb99jKJDIoxwpYIowWyF cwh7rZy+zyKeyxDFz1z0Ye/aYSyapgJd6skzWef0p/etMq6UZ3FEMUo6GSWH7mo0Xa5HjJI8yaIw DbFqdKII+3qVQVCseoyvgzK0KKV5SjF+IkN76uGlvYmQ6mcR9vUgQ4O3IzA0lkQqzHy8ZSJD23s7 aKbM91XCGWAJEeYawl6n6yIKsjTGWV03fdhrdF0wwhMpArxlOomw1+i6oDmTTErUrnMQYctiLOeb svjREObnVIqIooawkz6sni6Tj1B0UB+WxYyHIWb73fRhc1haZ8rix7tLEpmzOMbuV+cQ9mo1cZVz lVHMuDrow35cVq237PpxeDusPdMxpsHzKOVpjjzMSR42NVgPD3BzYKYfqCQPFWAJEeYUwl6tLplm vsgyzFa46MNeZRqcxb6iscLeCiej5GtMg3M/TigjmNN/CcI+f7QyyUhAGVLcwx+tSH1GfYo6LIc/ Wj/KpXYJODR2qiHn+7S7uqpbSFN6RXOxCxfZp2WtQ5CnqrJaXOrfQKMzDxbD3osv3q/QgOpR9leL 6EJJwmLhYy788HbKiYwiJvDycbJ2+k4fW99W47nqiytYJLF7+xCnP3h/WTWt96Gs2qKvu/s2Cm9/ XLWVMV8LOw0CkcaEYu/QEVggjf2cM7zCHf5oSZrGIctSPFoXb8fdEsbbCyjmH7HSSpTMOWAJEeYa wspuseza6skdTp9/fG6GLyVxLFO8ybqIsLq90fDq+ruHKDoowvJQZhHFbhHnEPZadTCeiySMUtRK c5KH/akri2kd8Gd92IM62P6T/XyeyHNGcoFVCvRhTz28VNldCEZ8VBR104f9tOqX3WCEEo7nw3im 4ijF/Sfow556eKEPI3nkSyWwdOegD0v7eqzLoqnHuyP6MOqHvlA+tjSgD3vq4aV3yUgKn+RYiXLQ h+V1U2173iY/9bhtcu/xK/cBSxrxOMIoeaII+0qttFfR6PB5Fmdcoc6Qg97NexWNDiG5CGOcb3cS YWuJjgEgdjSEkSRmKU0wF+sgwob679WZd6vvmtURERaoLJcyxkyZm1FyVoyVCZJH5GE0kZzgpmA3 EbboZvVVvaco+llIvdCH5SRIRYwIQx/2eRA9fnyuDwsp8ZMco6SLCCvnVflxWC2OyvRlRGIaM3hd EWHu+bBX2O4U8CiiAW5GcQ9hr1VPkpwGMQtxRsRNH/ZhXvSG6K890xHqSSJNecoyzIe5iLCmvuwL /dNByupoUZIoGuVBijl9jJJPPby06yIUPExxj6ujUfLHca5/9s4zHSFKUhZSyhX6MAcRtt2vo4/2 iHfJNOM0CtCHuejDrurrFcjxwRjS0RDGcikSiQhzEWF1e9X1i2MjTOYp49THu6RzCHs1ph9kOSMS 5Wgc9GG/yz6BolTReDer4/kwP0lCEuKMiIsIa9qqLy7rp6eQPv/43HxYxoKIBSh95yDCZtVQ9rWR fjoiwmjOogR3aTqJMM907xS/e4yigyIsy4WfZ6j75BzCXovpMxZIGuJ2Chd92Lv2uhpGTxW7Pv0j 5PQJFSGPGPZWoA976uGFPkzEqU8Iaqa4ycOM++qudp7pCD6MRTQkhGBO30mEva+aqnha9+nzj89l +mEqkzjEmW+Mkk89vDBKBiJiQZwhwpz0YX+Zhr53nukIUZKzkKV5itNs6MOeenhpn37ux0RkqL/p pA/bFiaf7cPstesIFXGcYAeimwi7gWVJ79QjUB2S6bMwziU1WEKEnSDCvkZZ7LXipx8qSVSA8dNJ 7/ahuql603TxXO9mHz8lCRgXOOfmJsK8D2XXm0TZ8eKnCH2pTwNr4s4h7NUyZQHncRbB64oIc8yH /S4ehmoYFmah2/Gy/SJJEx992IsQ9vmjZX7CgoxhEvIIRxtGWUQTrIIe/mh9X4RxTLCV9FRDzvdp d3VVt2deNXpFc7ELF9mnZa1DkKeqslpc6t9AozOzkPtefPF+hVSCR/lfLaILSRPCCGq+HcFOZZKl UcSRGp6snb5rochQjeeqL65gqe/u7UOc/uD9BVLEH8qqLfq6u2+j8PbHVVsZ87VhgVmiYol6GseI p2nEWIILk49wtDyLpZI+9vOeqgv8jV64Qb9aA8y9HO12HMR5JAXHmQTnEPZ6HeM0V0xi5HXShz3q GH/spvYev66PRFAlqVBYB3MRYcVr5JCZH2Z+HOItH6PkUw8vjZIkCpOI4w5EB33YJkbCkPtnfdiD TcFfFyV5RgI/lejDXIySZdc0VXlkjQ6uFJcywakXjJJPPby0pzIPFfF5gghzz4dl7WzZ1Zrm17Pq eFGSEi4ymWBLg4MIa8f6qi6PrigaShUGBLMVLvIwzyva2dvOSLsfDWE0oCxPBCLMSYQ1XVk0DQwe HA9hIuN5zAXWJR1EWDEM9XVbzczs3tEQFsR+6Mc43+4ewl7rLkmZkj5j2LbiYpSEzjIQRm6eUOM7 zF0yZyz0Jc63O8nDtjt2jhglSRyGaY7TU04ibNl3s1U5fjN8e0SEcRXmYZghwpCHPfXw0sq3HzJF EsxWOOjDtjn9m1Vj48O+jocxHmYqzjBb4WKUfJX9JzwOqAxirEu6iDBN9cdiXMHC6eMhjEX8f9j7 1t64jWzbv0L4y00ASWGRRRaZDwH4PDFwBpPjzEwOThBcUGRJzWM22eFDcg/uj7+1q0g2JUtJ2Wrl g2onGXta3Zbt4qr9XHvtJBf/IsIwDnvmxQvjMMdNHJL4yN55owj7Gq20/7cWysCDPlkpe8KeLa/0 IzQ/SELq2shNNNN/WpZsVz5G0VkrZQlJQjfAKSQDEfbXbKhzc486Oeo9YoT27IuXdizjKPWdGJ4r IswwG/YXxWFelCdOClhChBmGMPnPq8dhjpM6UeBipG8gwnq+51X92vxq2w9i6qYYh2Ec9tyLl1bK WOzbQYQCgi9B2DOXN2XMcRNM0427vNt//iGJeeT7B1Hv0drIBUfj2NfX08gHnfuaRZQwH2OO899X P3BI4ibobN/qff0hOhx4W9WfrOzKsqKmvm3lBbyvx53193EnvnX2qR5GeAq/dP1HnfvIHN+mKcFu +fnvI3NZlGeU4tG+1fuYXRFxEZO+HuuyaKyfeTnJPTOJ+AP1XaNz/zybhT5hGL+e//55cZh6oY33 763ev2fj13/suLiDU1vWjdW1VnK85v1yOf/P8LIL62Z+klAHyT/GoerXcsbNJZwswOU3q27LZqr4 YA0LlJb3rJuutwqrnaS4fXdjTQPXgJefRlmY2QAkhJdR8BpmbfXhwhq6vRQhu9/V5c6CuaWyuwOu kMCbNe7qwaq6coLY/wqMXS3hB6VcnYAjy4mfYVXHPIAtmBkEhLhVrOnjNR/vOQdgrV5TOMnVjhVt BW/p2K7cdQPHRt1E46DV84bfFQJL4mcFMWG9AE+LUbvSgI/jEwLVfITP+Uv54lyzKMDS4Fu9mbIU IYsR4g9Qt1M3Dc8W7DWuop3TPMxdrEqc/yqyJExIgoJQ5jnJd8nPiUW/17miMuj6cKJoXLxTuYDO 1Y1zP4kyDMKMwxekhZJdfS0SxevjNp7/rApmFYPA4wrE5qiBLOKlbha5KNJjHLKK8vep7vnFvODh QpqnsfgoskilYy3+a/m9Vbc3Xb9XpLJafLWvxJ9m7DSwxdIk8Z0M25DnDzgcmsdxFGHB5/xH6wcu dVIUKH6Fo3WpCGLSEMOYt+pszrQYmOosBvYDO4qZB48QwXTee8oyh/lpjvf0zd7Tv3AxMA1jN0kI +tPz31NCojBwcePQawTYOcmj0Mbi+ls1gc9XXCoOeyqOIJm21vFqLhLkZbwKcmaRK+/rtt7X/+ay JnNft1V3b3U3OpFLElHbCVAIxjhsdYdD149TC8U6SSUax6L8yPvh6p0iuC2t1U3R7zE7RAdgse3E aY6dHvOM16A4IAI3coBAdicAQnvxAOtDIwxVcRy+18GQ6+Z26GJL6/yxhU09h+W4itS86ymv4yWx isOhESGFNXbKtq9mXxr7YrTq0YIlM4pw2k9tK85ey/BnAbVjgsgyj6x1OzVFLyJTccR7EaNWAlSF xA2grOJNfSd+34MAGRCe/y3eb+pBcro0cCX++n7McszhjcPVoyRIRRWKwixgJT556NpKEpafCV51 0EWTxE9j7EEbh64HiQ0Er7U437YSwBHguuYW/8TLCWxZ11qFZC/PHJvrYqhVy1oDX4yEIfVdzLcN xBdfXR6X/OXrTtivrVE7PlAv3JId9Dnyju0EgR8hwAwMu/a8OgKwHjtKGPCp6qGchmEp4nDrJ4XF 4xeM9tA0cb08xkK0cdjiRd/AN/5sPEwDNV7sxixMsTP0EtQ8fbTEjVMaRlgYM+5CqqHMJckphkFc R5i7K0Zp3Dn01EW0McAcXs8L4Rd2hXAE1iD+QCWHUo7Ozc0Tm0YUk6E3Cq+v2RKgGa9uqeLCaahi I9VxF36WpalL4FEj6L4WdE8frUsTZmcOCpYY5y5iSDXVJXQsSCbpJZNpwb6oRFraDUMNKnzXR+se 8lPxkLa3eRQeRsdduMynjodEcOPg9YELCNVj14tssm5LoKGI8GRffBQxifjgXS1HgKyyaxqRbAqX UBVjYRV3Rd1I9Ue9cIRFaRylBEsbxuGrKUQ4K+xW0RyHetCJIrwgSB1XPlPEytdi5ZkoIgxZEuY4 SmXcNfxlVzezbT/11zph49tutG6BMSBJBFzE/qMw7bLIvevuNa6rnTuJH+N4nnmYWlkAKtS876am gnZbWTTlBHa/soCcKEkq1QWQUSTixm4qd9CKAykrDYC5vkvjPELWgHEAm4WC6j3QXUFCCFiHUJNQ zIEn8Sc+XJSykqYBLceOQj/FoRLzoMWXjeZqbF0SBw59V4r//1yX7cqyIuE9hfG60IQXyRLY04SR rHHweowdRaceNmzqS2JfzHas4kUzv/WgRKuBMD9xGQmxzG9s8HUUVumhUtDyxtrwPbGChwdUAh0D FqR2niIjxTx4jbzfr0qNeo2jFXiV+DNp8cwdGtmRi4xN8+DV85ILCIFqkHXPmwZ+/hxpK6Kkb+z5 bdFXkD9qQIuSmKYhRctlILRgvJbrlZodm7h5gCScl6DkmdCB5rYdhiEerXn8JqgiLwySz6vNRVX1 kGY/qjZDnfAIj0yrX82iJHc8LNyYad6PMLkxz3Oc6jfiY+IhDts6jUq1vQvxQ6DkFuhleKETmtpp ZIcZzr4bB7B5sYaISaEuo0LPfT3WtzLLUTsPDsVY7sRRX0giTjeNYMCGsjvo8iF8FseEoTqgefCS JZn7rv8ozNTP9b5uir45LobKBcqN8pyDdeA9JNfwnGAGF+rSGsiy8yBMXQeZXMYhS5zsDjSHStl5 3XcVl7ZKIcvfImvftcD4gufUdLfgMIGTrgEu12O+4zAEl3HgeoI0wscTa2TPwUABB1V1NIAjWMOi oJk1qBNyEZvQlKCelXnguunKaYCzF/H8u/tdMb4D3vIMHqsv5PricVeId3fd/TsVyBcqxl8BqeMb w5gloY37GY1D2K64g0V5vfgaKE3ImEp1ZmH8vxl33XS7m+e8u5JXk/jgpoghonydoD6KAubZ6B2N gxf4w7otu71IDOU0hswaeS0Nl2qiDYA/tTbvSgNLXhxmnoOtsRdh6Zlr6qYsyHM4RDxao66p3P0s pQx/Pg4j31uZSJfGo/WBN6q4s6sPVlUXt32xlzGG2tALVeyRH7RWtudxlAUoeW4etqq6FwFFc1RM L+UAtlsu/0CKdf2wBsAcOwi9ADuW5gGMfyq5It1ArVnYI4tZ38hCNDQ+RFQ78G+hpgiWyiLWpb8O b6/Q0zFgNvFzkmISbhy+wFjBJnHofCxMaJANfUjJ2RdtcSv3+AoMFr2cNwbzpQEtEtMwsNF0mQet 7nosaqUhqs0mvOm7vXKgHcieaODLT1Mv9B2MvYzDl3B04PYscgF1Q2G8qkk+is+5AetH/SsNRLle ljMW4WjjSxD1zNFmSRYHKR7t+Y+WxKEfJB6qd5//aFkYksTxUEXx/EfrszR0sxylBl/BIFDPTmiM VNxXMQgsjjO0tW815jzTKlJPZxUpTe08THBm5TW8S5Qldh6hCXyz9/QvXEXKUofENsN7+gqhis2S 2PXxnr7C0UZ57Eco8fh2TWB2Ra4cEaL8WPTVPQwmQAv75+5mlC/et3e8BdYv12L6Rk5Mgggz3fNf RMfxUjeJ8CK+1Yuoqfwul2wO3YNNm4rauvRrQfV904rTIVH7aZb4LkPemHHgmunSsu8Ba6WLul26 brutQxgWh1CfHMKsRKSBL8eObcfPsYn7RvH1NXsFAEwlUAeEEbs+yqat+FO0Zd0AoT85XvP+Z15O UskDCCnEercEI7DzSAt1KY3SCJ41os4oqxZN406YKFg0Csbrny1Muc1fSPldLXzjO/kOAMv5YmCR iHghxV4ZAmsLrCVnunr3OGZbKJuDlkoFDTIWxjkGY8aha4na1RZuAaADL+ubutzMtf1ZoKaBLxZ4 fpgngCTEl1H4WoN4tY1jHEW6OI38KcbmVuB26g/dAOG++LBO2JW5SUBixJdx+IIYfrFTinEOXzmZ pxPgnkwptaRrHRqSFKclzQPXEkSdFtpmixp3CuYsOQFvkU+WfvRGfL27H6yyaHWMV5jFXuph8GUc vmRV9ZpbE0iEgUOUc93K94Epq/eHRo4wyBDsQR6gE9R7fkBchimjcbiatjni0zXVzXjMnAIIF/kN v7q90ineUxpnUewgKdo4aIHAlxqQ6bpmsJqu+wivwHg9QN0CNJj0+1vXc6i66m6j8EkcMoYtXQMd 4pwKwjLQspz6YuTN0aorcIE3x3UXigzm5QhNYTVgunqr4rc951qCma6TZ3GCiobmoQsWfJWzOmYN I1ajQE3RAJD4zQ1E8Hew1nwO8WXFYpNb6kVdts08O6MIL+Pg9dz88ZWOUfJiErkhouYlqHnmaKM0 TVxcJWrehQQVnT8t2KwykbPyGggL3Ep1ZN3daUFMXUaRCWwcvtZe2bIc4IFyjiKQQNLtzEtjjpKA UtUi1OiFX9DAlkfjMPIIirsbh61TUQYQtG6s7abxsru5HKSCu2x2bJr+slumpCiUcdNAGLPzPHYT iggzr7kB0u19dyfSa7XiBDxkywF2RS9z8GE6wELbucmmrwlJksj2EgcLOOePZmmWxxHzcPrc7Gj2 vSqJzdUM6SP+LNLVGaZxGM1SQrFlZBy6YKbjsz2sG4VIGc1eqniWXFKgTy9l2VprhSbx4sx3I+xy GwctIFD0h74eTrVVFdVu+IUiwqj7h63Klo+wfUYDWpTaxLEZhhvGQetE77rSLPds15trclcjymw3 BRwhuoxC15z+DGpk49KVZslRzq/iN4oJXTxBKlxZ1XoII8SP3dBGPUjz7Je15+Ouq6CUc9Ie7Q68 L6RbHJT6O+Dupm74+vpk9jTg5YUsiEiGk5DGwQs8ongtlz5CDacW4BmUYO22On1aH7kSDmVaqYEt cQyhHRM0XcZha+l5PF+eVi20zfoAHWNFMi+hLMZY/iWAesYPeC4LYxtLh8bdVRW/hhu5DvAGkyKZ bwLY96k1FrfQvPzvv/0n3N99MYrE6udf3qc6cQahDqMRNiuNw5cAzWB9sxvHw/D9d9/x9uq+/lgf eFUXV11/+x28+u79z3//7n2W/F8SMmZ/O7uMZQBCZ0aZpYETZBl6BuPgdeiGQS6rexierhMzf1b0 0Qk7aGznjo0kHgPj2Mfbrpb2h0646rvUsVOCMdX5w1XG8sQPAmSmvNUr+UN0OPC2qj9ZOQSZoH37 zwG4l4v4rVbHOqROkFO8gK9wAUOWRSTFC2icT4S6obyP79bQatVF+6kbxknkitGq1vE9bCddOrz/ FP9LCvHWO43La0fEdVKJJUSYUQhbN4p+8+uHPGG+6/z2reqp8cHai4dYi0jfmqQ7WOKxWaRITi/z Qos/TZLEzV0UgTQPYGq9muS28k8F5I3DZ4oKSxGsBHtlQSH7eqqbCt66brpSh3riUEbtLMX+h3EA K4uDGvWrJfkk5k13L5WSrWvxG95Yw7TfA40aduB2+5msL369Mmo6tsv1Y8/x4IEitIyC1snhgU3a CVw93MI9c5jEm991vVVU1QA/1FDqKhpL/GaTFr4YJSwNcTmIib5RsgFmDjmvHgdaVxrwoT5LoiRA qvhL4PP00bosd8IoxqjVuJvZSbnfbl+A5Fyy4+XHph5G61+8P816fONciX+/tS6td1G7JVcr2pjW 0hRGHHEYIc7EG4cwSTrccQGa7pa3vJsG6/0/BIru6r5rJUlHln+O1jSK4Pbf3LrjbdX1l3MypaWA EpPQSxnmROf3DD4TCaeXYcx2/qNlSZJkvo1He/6j9eLICZwQezRv1ducafesr7N71qYsIK6Necf5 76mdsjQOfTSBb/ae/oW7Z53YzV0/RLre+e+p65I0TgP0p+c/WuLnce7GyGF+qybwDxNjVXopgGo6 LHwHcc439S1I0ULxpVxqMmqBCS/K3WlcT8MqelFCci/G6MVEfG2mOTdStEr9f9XfAB2Ezyoyf5sZ EToIS/M4sClWX0xE2MY8AU1GIkuOe66ig3M9b5Cax+0ATK6i4r9PxajVM6TMd9McKYFGgmvRRoWh saYBKwUru8ZBbR98TNe6ANVLRela1ufoIIy5LgsiFEI2EWEf8uQCODRj0d9yaIEVs/bg2glr+B1v pActixYmx0DDvRffR35aizCeREHoIcCMBNg1h7Pf7rhc1f4fxPmqCQaSLoMl2YJytZxWfB84xAkB R4gu09B1KEaRDm7WWIKderQVoB7rWwmxk1ivLiGQxsS2Ex9nFE3E1qrJWC5aG/zTQeALyFsHYZ1A j7Etm0mylx9gTgdZJA5tz8aw3kRkiaB+JRcJv/eBHxr1OGaOYKFEIk4x2LwKUzYMdG0Xc2yHEg8p bUbbLqkx9dAhLjoQwJ5fneHpV4ydTtAVh07EclzQayK4lEZx0ew7YZr4p6Icm6MCmlyEsADp8zH/ L1Glcih1/BD3cBiJsPftMPJCajRuFIv/vFmkgysn8VNiYzHCRFydivVyMeqWyq284oy2B1D74tDe pmnKfAy8TESYcnoHWb6qW6XnJkWw74q6kXCSzSEAn2oLqZL94im7XgNgtkczn1AcJTARYLMy11Hh qBNA6lVFng9QkBdxVl9dCqTIIVkdfxjlzKUZguklYHr6aP0g9lLGMEky7p52lpXycZbEE0HsouCS 8rt6XoYsZ8rcJ2bKdno9NZewOI2QkGiiDxCmXoQS9bATBl8mQnJX3IYzd10MHJ7FhjJ3oqOMx4NO /dC3UyeOI6Smm4gwYbPWNu0f8+R+2XFYhrZ+XCd+zZmfeg521UxEljjSVjhGyYaDLGjeOaXy8eJw 6DvhBouRrzbskWmrdbyjl6SJm2CGZCjC9vuphfYa5EMKZYt1Egbr722plq+uABMRl3XNeatjugKb pBmuWTU97FrKh7OLBM5S19Zj1wP7F4o67dEqd0V7Kz4EG6p0jBaNYjdNXVzXaCK2DrxfdlHNJms1 T3LZrPjxtoN3xZdrUD9TcdcMMg10MeKGSeQliC4Tw/lSJIky5DrMlYiHLPEVbBfWdKik45w/qBNs EeI5aYRlLhORte1xCC/IPymDVC0W6oGbrGRNDAQb9dHl0sCzGW6aNTOUl2C6AP9XNMJDAsRAQwlE typgyi3bsBXzZCGZq182CHBqAMzPWJwGFKsRRoZdyg6pcSoBrkdcOEUKmJfSqrmYTqSPB1jvqAEt x3Y8L8sx5jIRWqfF60N92xYNPAnIDMGOLRZr0/YRsdnJbGlO7nk0DiM3QRK5wabL6nkDEpQPJqu2 lKV6RZQ1FHtu3RdHqeqvgS9mJwnzXIzsTcRXPc7uD+pZD2rwUH7405kFrcgrDlmGortGwuuJwYQt d66CvYJyRkFtTj2NvqzRmY6DTKnt5DaSyE1EGIyCag4kgPNUUw1Lo1sDXCK4DwOSoLCQieDqrv8X 6F13eiRLN0vdIMoAFAiVr4XKMyaeBjTwcGWeebcQlPuHY1vu+q4FUfWk2x+aumhL/h2Iap7iitPe PFA3eV+KaEKtM9a4uSy2s9wJsIRjopH/H37dF4qp6y1M3XroIN+urKIX9r98RIiTmbUeR8lmLM5J iIbLRGQNHGAAMFrHgfaFiD2nVoQU4q8jrNZMjLtSQl9d26xf0gk4gixnLiY+bxVcTTGMH3hb8Z5X oOQe97z4KH+VJjVOziCAYOFdLfJsyHtG3u/rcRRG7MISafflcODAc9rVt7tLsHhtebzQQJ7nkdQO cZ7ISLMmwVKCLMAgENOI6Itb4ujBiH3g+25c6b5WUe1rgcD7umnE1xRRc9h19zoI84njRQGWDU1E GBxp3U4cRrWXcH+jPbGoAhy6pi6h86F2gG78qo4NI6ETpHmC3tNEhAFcbkF3VQb0wD1RZcR5HVe/ QOpk4dYRhkL8juJrOjbMJhkJMrRhJiJMwOQj5wdL2Co5kNe1jxohIx+AIrCyUr5I98tJo5z6PgZg JkLrs17H8Ahaj6Qy573GYLWkF9XAlxs4qeu78FQRX6bhS+qWPACUjtyXLGHoQCsMaOjh1jojobWS l5TCvSxObPZlS2s1DF0Jw6GV4gcIjB2mZRBei+zrZH6UJgydo5FxF7CWugHG9I7CJj1sEj0n3CQw NouCaW3i9WgYEuajdzQSYMJGDcWdcoFbtEHIX8vphZ43vBjkfAyU9b9UW47YjhMmEVYmTITXH5io 3ycONTGgakKtHlTlljhfjipr74KJMju1Q1xl9RJ8PRPcprFNXA8OEY/2vEfr+JmTsgBRe/6j9Rmj nsOQpfBWHc6ZFokznUXi4i+d2KmL9/QVvEucecK7YN7xZu/pX7hI3MscJ0p9zDLOf0+Z67uxh8Ss Vzhaz3XEfxSpum/VBP5xT3Xta4l3xHMbrM9XwT0rzq6ncwM6JAkSdo3E16C03YTn5dviypad2/Oi WWV2S9iTqtpg4J014EVi6hI3x9aEifB6pDsCC3kFrMZ6D49kJhydUAcD2AC7L5iEZcx3PMdDGSUT 0XVqza9aztvhVzXmvyvuuNV2wHO7bvhe+M/qfyfJQ9JbCUdInjIHFysZibDH1uoBae1k15QyKkDw 1hrEx5uiv9KAFnXthPoJusaXQOuZow1tGhEcn32zt/aH6HDgbVV/sv7jaq4UfeC/T3XPZSRhQZaU 7Ioe4tpLK5+kptAvelNmHkkIISk8MgTPee8lbEigLra0zPOm75VWVym+/8BhEeGu62UQto3ZLqyh 24t3q6qGCoZIPMVjGGA8QY32aVxePwvSKGWoe2kcwoAlMq+R49aNsvhyKO+e95ACjCs96aYDBSZ4 TLOUofzEWHzUWpZAE0ozN8GMwDyELUPtn8cbv76/TK9qPt5cDkW5v+w37/12oT4/hyMaCLPDzKVp jl7SOIT9WiqQXJ6gZJPf1LSeBNE/hfNMioEP1je/fsgT5rvOb9+u/lPGvRoAY7brpszGnpJxAOu5 fCnLY8I1Sl2XfXG0rmHes+TDUPRHObS+EYcei+HjAEWO265oYPZYx4TlSZr6WDYzD2HSTKmlLiIi uy/66konbPfDIMo9nJF6CV6euYpRECWOjz0S465ip9IdeSO3EakFP0qpnHcfJKtAznRI/fZ3uvOy duDZXpxiCGEcqoCWcjg0q9zS9TRCg63iY1E3VtF3kwhW7yGweNjeXRksMOSog7A0s+OcYBZkIsIG PoJwEnRw67ZspopfnWqIIv+BftxzEgA62HKIndAQfaKJ2Jrt0IVUXRJnC7yUeg8OsJj1I5Qtg/Wp x068BMKAVVg/CYiJNEgDXl7gOZQSjGZNhFcOblBhDCiYUgdOzc52PQgtwSLM4qPwjCX4T2HWIpEu dZXFPxX7QwOWTQNhPrMjmniotGQiwmTPbF/f7kao24BL/KmvO6kQN5PqHrrGehx4cyMtm54WISGO HaYuNtHeKLq+Umd1D/ufh+MwAo+uFtbt5kYuvlzpd9vVX8Kw/aIEDMG9tgKvbaWjUujEbuIlKaAM sWeaZROgWu3avQjIdve7upFb5Or2jg9jfVuMwnMCmOr9tFd6OZArdL01lDu+10ksqZc4vuNhYmki wuQa+89qEjMxoIQ1mH1r7YAPUCvD9sViJjSlNMqcFOFlILweL/u6kOUx6QNLWc2A0pnssHXCXfYb f6mBLC9LBbAIBv0mIuvQd9Cf5cOix3ulgRhbwIX5Ma66fAlinj5al6biL4yae+Zdxrmt9u7HSSRE lyKYqG9bXm2UHsexr4XZ58O7pdMm3hbf4q7upkFYfy1NR2r7lARIZDXS2MuAYZ0vgiri2E0l6IHK Ge8TCXEaVD9kWAIN+OShLnWiidiO48RGgJkIMBWMwlBkcd1I+hf/dGjkMDjUagTWrL14JeLZw7gT 2VG2xqlqCYVOIuQnbhgmuNHESIBBsfma7wrh8/ol9xEou+15MUoXeNNMoCcgvnp8ynVq4IuFLkup jUN+JuJrABMlMqGmm3koF9DbmGvQM5qEDxX+sVL0aZGWj3VZQBFHJ3Py0yQNaY6Zk4ng+gWkZed2 GUBKeD21uX01TzImWxW01x058uddoUdBSYPQTzD8MhFgYKaWHkbXywWGIrCHRoZqfzRd99Fq6o/8 YpaxANcJJAEZ3Os4Rzn+7vgILxPhBU2OeQKy52qvr8wW582r79t1xFbKaEsZKFC0UOwBvVp0HoSB g+xMM4P7kx9cI/uSt2NfNNY3s6aY3BUgvWa/Lgz4FoydQJhO9uiGHkmZgwGYiQBbUbVWV+USCoWs bqGaqDBfiortB97c8UEnsiduzMKAugiss/dEbM8Lcofh0b7VO3uS3fnxah71WyaSrQiW7mny76nt hUmE2xxf4Q7SPGZummFV7M3ewR+viKzIz1Wu9/M2OVUH07l8bpK5uFfkNS6fF7q+G8aYdb/Vy/ds 0Co3Gg/T9eUw8sO6gHbZ4L5e1rQeStjCfbxYv6YTstoeoXaM42rGwQpEg4py5H39b2neVS9jhdM/ iv6WP3YB1vVUNxU8sOumK3UUD0ngJMRBfJmHr7I4KGZzzRcStLRdkhwNynyTZN+DDbsROFSCMfDq MPWHTs7hauDLT1OfERvnIY3DlyIyLW4RBOA7q5p94IU1L0I+zh3ak60DFDYawPL8OKI5dmnNA9ap +gebTtoNkd5q+SgbHRr4oTSMAoehislL8PP00TI/SMLYxpji/Edrxw4lPiF4tOc/WsfP3QDb5q9h EPLUTSIfC5Nv1VefaedqoLVzNbYDGkcY+L2CCRQHS+wI51ff7D39C3euUieJ/RC3C77CPSUgE57K Q8SjPe/ROiQKkijDetWbNYE/XjnbHmoKPLVE0bn1mqi+yxLi5Chw/Qq3L8zt2JZ/ITzat3j7vrKJ Ki/pT9P1Ij37FX0uEvm+TbEmZRyy1j4XzLqWBYxNq9aEMvggL9UBgXRLhV9KzBrAcv2EZUh8NBBY Gyr8LIP3sBkByuqK/C7bqw/t26CzgdZJKXN9B7FlHraeYxE9ZoVYT5BCdNxhntPITzHNMQ5Zf0gY ekAKWd1lPVo3Uw+iZRrIsllsh46PfVXzAq0NiUNO5pzG8cdd3023O1j+2e3lUCKYrXll4xHUZcVT 0DFbcZamsYc1RePAtedFO9PUlEBnVfcigN9Q1p7wld3+0LWaayFy281JgmbLPIfY3gmIdMDL/qkb 5OR0tET2j7ylIqt99imdSN7z8iR30HAZB69/Fc3ENwXmP4y4hrotlaz/l5FsWRh5CUHjZRy6niLZ Hnh/0/V7YausuhW4KhopoS5t3LIl4iS7pbU11mFJEsYR6rm9UYB9zVaIWQLJui6GunygjyR8pMBY 3Vt3YPsgavtP8f2l3oiK3dagTce25SwluYs1MONs2xrQb5znf0x1VYCPjMrfp3qQQjZ/5FF1bFvm iP9ceKwIMKMAVqgqxck5ylGUE9g2jaAHxf5ZoUQDW3ZMEzuhSNc2DluqPKE0ToduL4L642FuLa4N IqmIVPfVpYDLeLRuZ9t2pQEslrMsJRFyUF4CrKeP1s3djHiYqr/ZO/vDj1euiEmB6npalJdutre8 byF/0tbUiOM0iTzko5//KtLYDlxCIzxaM+lgWlQwCNrkFz9wEaLxO71GEvVYHGUYmBmHLJ2G9wN+ 2LIR+kQP0wn8aRTkAbaTzMPXw/2726Vw9Sms+DPCmAbCfOKlvk0xAzAOYeDwQNm5t/rF4y1l/aHY a6WPnk/d0A6Q/nX+mJWFdhyFKKj0Zu+lSB+pSB+jwwFCUP3dsDmLAj/FssL5r5wTha4XMrRmxrlC jamhNSu8UK//a5ISjBsij8blZSSNnVAiARFmFMJOVLB/SSKPhI9OEnmhljXWWuvM8pQSgjNE5sFr sV1qGcu86FlSJMaR70XeKB4L6OZxEe7vxfOQH/vStfS2F2XMRz0uA+E1FuM0fEb6mgaJq92820wq e+6KYbuo+JrzVgNaxM4d3/aRGGYctNYNeFcaMHFTP3JIgksfXgKTp4/WicOcpqjZ9GZv4A8/XnlX lvUzF+dXFSL4jIZBBAma9EkSMjd2bQDCXwyP/y8AAAAA///sXWtz28iV/Ssof9lMlaX0u9GuHVca aGBG2XjispyZrU3lA0RCInZAggFAycqv327wJdmypy0B3on6usolEXyJl+fePvfdvv7Pm1fduphV q6vo5lVdrcrvXxCGXuxuvNvU9kKx6ZsXf3QPnTWrvvzQb4r6fPuk4Wr7th1+5Pbezj6z6GZV9f2L tNm0VdlGP5U37vUWetV9enXW3b80vGD3L3vPdVHbvwXtr6Tule9c++Pufe3P9f6ne+Q6usHs1bpo i7P59y+Q0DLVMn4xXHV/u7sqd//cH9B21fydfSCimWTx8MmHS2/bBy6a8rLY1P2n97y9c2n4K7Yi eR6itTcflMr/+x9486qPPizrQcxWmOu27Mr2unzxOoqi94uqi7rNxUnXl+uoqKurlX2Vql9E/aKM TNEX0dvNRV3Nir5qVtHFpqrn7qu6qJvZr+4d+u37fA5ZIkM5FrECZIWGrFmxLi6quupvo4tyVmy6 0kLKga2cDVCal31R1fZ237TFVRk1l1G5mq+batV74IrTDMUy5YCr0HBV9H1bXWz6cmunqlVUrCxy +rJdt5UF2bty3XSVBdXtqTNv5V3r1jU7E+djuSy6JMJguYJD2OH4S5u63lmrHzbVvFjNykjP/rmp LL4+PQ3vWDwPeOFUaJ5r96UCvIKCV1c5HDl8XW/qVdnuT8l52c3aaj0gq1pdNu1yy7n+cLXD3nfR vK2urd2zz/VAGJUZ5YiCAQuPeh3tlmVVxXw+mKuiPhCsO4foqQeSiCXwPEcJIGl0z1vmKM+5Bh4b nJJ+2fPO9pqaLixSZpbdVv/aHQcXjX3MsljZb8JHdwnLE0YMACw4R2k1j5x0LY0o598NNw+oel+0 V2Ufnc2t41RdPj66I5I8j5kGcAUb3aksH93Hd6reUo9NPY8uN601Ym00OxqvLeP9igiPMJpjbuBk DA5b/aJtNleLo/EabNe66brqor7dHX3RsixW3TbE01roddG8ai3p9UCWxIzKlOaArOCORMeylvbM e4hoNct1s3L3na2u7Y+mvX0ZvW26fmPhpff+kge8GEeEZ5gAvEKD13069XIwW58gKPq5qDf3Yotf TbuQMLkmWgDCgqZdx0DietPa43HIoW1zbHu30v7eN9G6bF040cd2pSIXCGNA1uiRHpdP4jrPQLSj ixYrhhKWQXxyAtQSoVgi4Kh5rkfN67S5vKwsWSl7S4+tP7X/l31YW4eqi0w5K5cX9h2wehkRhMXx Ie7f39+64g2s/uFxushUZpJICmCawATmSlMGyb5nq6dnrsRlVfYnpi0u+3s6eK7TN9HPm3oVnc/K VdFWzX0ddf/+vFmVg/p66CmOc5Ux5WADYBpXTxlPKVEpEOwJqEpCeMIwoPa5msDPh/WOFQ4u5LJs 2jLq1uXMhWKi2SGuV+3ies53do87lkl01nP2sIsESW0YFDOHh7AHCmcGCPWLsmqjaxfR86ukoTQW GEM2foKTleVEJBhy0c9VOV//eCqsf6q7ruy6IYnzruzsV+RTzE0oojrLUgDH6HrHc65ZIiH49kz1 ri66/p09/8q2nLtYT9KWxa/Ds36rts2ro8ydosPFd6U9Wctrv6I2gbI4hYBveETscy0Xd8uQfqPN zANfWDILMCh4Dg9f91syiiPXaLdc47d6zpw98wAYRZjohDooAcCCAlhdWNRYNO0Ou23Kvoy6Yln6 OJBc0hznBuKH4xNZkiRM5BocyOeqk6/1em2JbPUhOrN+5NlyXZfOtG95aPahcBd8nEnGSKo5hzTm +Doo8zQnOWSIn68Onp1iq3yHqtvB9TvWQvpon+YpkwZCOeNrH8fUJJgwEG1orPSXrVfjmOhQTKDb 2aLqrU5u2vLlcHlbfrDLsGUfdjd2mtu0PoorUqwoh1Ky4NB1SMF2u/6wizLadOXc1SYXdd3c3PGl h4LlXWbW9fw4BHqACyU0w/Y/gCu45P8xI9svij6al8tm1fWt9bMH4NXVMLdliEDfCdmsm7qa3Z56 QEvEWhodQ7tYcNDas1RrtoqVM1pt+c9N1W4N17ptrqu5A9K2weeIw5fRzaKauR59n0FASMtYUQak Kzh4VatZvbEIqu534d81aI01WcVFXboWnq7q+tKrdZpliRAIQ+t0iExruVntkORVkcS4QjlmUJH0 FKx8hjiwmOdYQqQiODV0YyfPfzkz0Zuy61zW2TnNhw7gLrps2uitPnn/Uxp1vb2vaOeWt17ab8Yn /oxwnKEUQ5A0QPN+aBp3iLLPruZb0tBcRl1z2d8UbhbGwCeGkohN576pIX5z/lef0wBLnFk2CtAK DVrne/R8NBPqfXEVne9s1GkU/W0HqKG+a3t1iA/6YEuj1OILmEZw2NoZpNthGmVdW8fHYsdasvkd mzX4QntjdSi3b6zfY3G4uvLAF6dUUcGgaCs4fHW31jNevjwGl3fn5G5y1BBqdpRrW3tzLOry8Y84 y1ia5O67BFQ9FlUPi1bEEilJYetIcArr/KO//qz/Ehnn9Ay9e130ppmX9T6s2kVFNHe1Acvh6hDZ 3wVhd5kjH8ZBhCA4BcYR3okwdH/eRjcON59G6O/mGAv78qUlJcUwV71qo/LDejg7PAAmKEliYiA1 FBzAroeWz12i575h2k7pt8zjK5kGtp/aHocQtR+faXBhjIwNlJ6EyzTOBx/hzjj1rq9me9LxkQLP irVv2YmSOBYxzPoMDlh3N7QUF82mdwZ/H7fYjiXecVcXKtsNoyjq+jbqNpXzTL0YrKAMGwnjYsLD l2Wh9uYQbf3r+V20vTxGxz4qHLi3NKjbzBY+AMvzLM8V+ODBAcz6O2dvIxcfe6NTN0LHwa3svtuO LW6G+f0HpC3LvnDuuA+PJUwjYQSkvcfnsVQpIk0K/uZz1dbXZ6fEkgc3y+/YhWzuLIY7O9p4D1Vk NMeMEkiJjK+KWGmtceKECKJ9jqr4RZcybZZLq4339dRNAWhdsjLK22JZ3jTtr9Ef0p/f5d85H8C6 B//95i8nF0XnFVpkBGmVwPqb8PBVF6urjSsaG5IeRd+Xy3U/hKz3FRf7bUqztjxU/9wbXOHD0lKk sFDQMBMcvj6zZ/ZQ3OMs1rbn7067zGxIrQ+A84mLSZpwyTP3nQK6gkKXk+x2aVffNHUXDedd1Gx7 S+8YsHnUzRblstilUG4GfDUXfVH5EFtMZYwwh0msweHLwWhVlvNdbU9b1uV1MQz3PQa/Nl15uakf LPkZxrb6GDBjYiEZBF7DM2CfzPw69cELzjPCMMRRn4KXh0VLTZIomkDQa3zRCoRzIzIQ7fiiZSjm kqROiCDacUXLtcIE52BrxxctSg3GFNKBUxiEJFOCQHvCFAaBijTR0MP8bMn6OEvqCPJZUocMpblO obt2fD3FGZEJT6C79Nnq6TdcUieZJEIBC5xATwXjMRUw/n4C0RKJM8oQmMDnawJPqSUo56WV37xo b+/sK/IwaixNMiYI1JOPr3lUKy4kLO97tpr3hOG2d2L+fdH9ustGXpTRoljN3ZyCC5+SCowSnKQf t5vSjNHUGGfxAWHPOCmZ2edsir5pj+Nu7TlwdhndQ87NK9cScvOqsshQAybst7Jo7Cf9sbhdudmR pli5y/Oid9+h5cInSJwQ+R6pV1i9Quh/tqL4EnRMWbuLWYYMY78HydnP/N7i7bUV2slR19wD9vcc FctecU+p3NawrZhcDdxTxfT7kscgieuq2XT17XFYxccmxorg31Ifhr79yg2fKucvvwB/1445Ifzz hMUq/h3B/2FxDbOUfFVh4CkjqMLvRzb96+o+MX74L/1304F/O11+PXAeD5aDjGap0h/FR5mmKZJ3 vihgOc+O5Vg+/HljPnzzwRtzt2VyW+7oitO+aNV/x6ZgW4bphma1zTIqtkt6zt1Hu8NtfUwFNzGO BZSXPMVUPCxalhGT5wZSnsFZ4W+xqofzxKiEQg40OHR9g1U9gucyTQns2QwOXNOv6skEEiQDuxUc tL7Nqh6SZIoCnw0PXpOt6hGMaJ3A9qcgmdZXrurhNFeUCah4egpWHhYt1jwVOcwsCk8Np13VIyRJ aCrBvAdo3ide1YNQkiBDHIgAWkFB6ymreoq69sAWITnjCPpCw8PWI1bz7NavHOKFHvjC2GCtgckG eyzupnfs0qWP3c1DaUwJy8FMPQVGD4uWKZLjmEKQPjgN/Ua7eUiWYkoJhOqDA9g32s3DmKEaDzXW ALCgAHY9/m4exDMt4xSmsY7PNFBOpGECmk3DZRoT7eYRKE0yAxQ2OGB9m908lCAi9NCSAfgKCl/f aDcPwSlCOIcZpMEBbLLdPDzDkmEGgdfxeSw1FHGSA48NkscOpfgPF94figmOJfj3yqwHfuvDZ3GW EsVgiWlwAPuaAvyPi6x9DoUkj7ExMBklOGB9XQH+p1XWPuCKlckUhRxdcOD66gr8fZW1B6qoQSqX EuZkBYeqr6vAf0SVNSNCKJFBKfBToPWwaCVL4oRoYLDPVWtfn50ySxOOIw+jd9sVKh56J1KtZY5h Id34eieoSWKiIZAY3Gl5SLHt9PDLhTzuAJ3ZX4dCz3b3jObSQ3ktFcuZjIGPBYew++Mz92x+NtQC 2/uG3O2uzLOydG1YkttV9sJt5KJkQ9mnz+mQGEkSDNU8wQGsmM1c8sN1NDhr9ul6tt1C04stwrb9 DvsJ81scegUqaKzSWOcwUSc4hO3M08EcHSB3pyfr00PU4vGnpt9uafYxYHGcGpY7IAG8goKXg8+m K13f38NIGvofuoU1WPYL2hs1a8VWjQ+wpDEk4wIKqYMDVlu66Fa5crtw1/YNul2/qTyl98DmDNth XNjZsRDFA1w4SyRS4JSHB66tZfr73O3xOVkUq+5i096edMVsedLYlzpxBU0ng994sizWayvwE4T/ cepzEmYZjxME0YinYOozZ4HEJDYaMrnBqetvT4W8KldDw+52AsF9t93nJDAGx0JBeVOANGPLSLdL UZrZbNNuHe1yCOa0ffTDFlofrb54v2i6QxjRA2FIE665Bq4RHMKW1dWiP0QLl831rtzpwcHTd7rF 9z6TJbg+vANzrDMF+Hqm+KqLrn/nvKG2nLt9r0lbFr8Oz/qSbevtW167kk0XR3Rjndyyp+EM9eGy mGtmUgbO9wRc1p4HWjFo3xpftCRhXKgYPLAJRIsyw5RxHwhE+1jR3vyeS1zGWUWOfVaRM015TGEb 6AR6inDO4vzjLUYg2uejp99wFTnOqCSUA1UZX08Z4wzRHEzg+KIVgsRUwfS052sC9bCOrfuPSO87 iD2MGUWMmziB+vcJSAdRsVApGLPnqnGfjTOlCzfUplm7xv2tA+GhiSTFJlcK3PTg4OIKHd+cvX+X WbC062abtvMhoixPsgRD/jc4xBBEomTTWlFf9c0qetcUPikRnEuRaRjCGR5eknJ+2biB8G90FCEs KfKihggjQqEIPzi4/O1c++ADJxnnkLJ5Ej4eFq0wRqcmg9bZ4FQvWxZV/SqazQa34U/Lqm/L06a9 8tBHmWFlMgl0cHx9ZFjGbrMTiHZ80WaKW88X3N7gTF3SFqs+Shdl9avfdjVCFZcaQpXBIeWxARKW WoKag8MbHmIeGSARMk8ogoh9eGfRowIkKaI4T2G8bnBw8QuQ8CwTuSEQQHsKPj4n2lgzZsAhC071 dgGSi9nWb/i6CImSeUow1MCMr5CUM4kMAdGOL1qEDY5VDHG94GydW5FUl110Plssq7nXcO9MCZQZ 6NsNDiuPjZFQk7JUcXBigkPM42IkDAuDMILdiMHh5VExEmRSgxgE7cODi1+MBBkaZyyGSoen4OMz XFBrqmIOljo41dsXkSy7rePwVUESjrHMSAoWe3yNxKlgShoQ7RTGjpA4Q1CMGJyxM8WqKuvox+J2 5VVGIrXO8yQGhzc4pDy+jIRjhVOIbQeHmMeFSCTiNEYcAvbB4eVRIRKWiTzFEmL2wcHFs88G8Ywn GRw/T8HHw6IlWa60zIALBqd6uxDJfDG4DV8VIKFaJzTHEFcbXx+5UHlqYMDmBKJliSIiMbDwKDhT 9+ey66pZEeVV/6+rsi3q+cmb2X8Vtz7UNGEoEwg8meBAY0qLgX5YvNZc2luX5arz2auGaWq5qnLf EyAmKMSoGKHovLh2A089AyWEkVRwCjPagwNL3p9Gb8piXr6M3hTtbe03058LylKpgB4Ghxe/SAnD RlHNoJf8Kfj4jGi5SrX90CDaQCMl/7u8tP4D+dOqK06vmmuv0z2hQmGodhhfGzE2DGcJpAymEK1O EsyhB3x80SKSZBxnEE0YX7Rcc4UltN9NIFoiTMIwLMWdglQyboxWEJN+rqRypPU5xGd9Ds9VrBiB tNz4eioTGTNtIE3+TPX0C7sUv+ViHY5MykQG81ImIDFGxcJA5HQKEpMkSDAFHWzPlcR8ofPguppH vxS1tZBLS2c8TBxTKE+oguhCcGD5aeg2KOrobNX1Vb/pS5dYP++L1bxo511kf0bvy9li1dTNlU9t htQiTikBuxMclDBCriuhLDaRaatrH7tjGRiNGXWwALAEBZYfiqpflG13sWmvjsl219oSS+mDHJnS LEkhpxoccvxy7oTQGCEO+HgKPh4WLVcSGR5DeDQ41dt3JzgH4/Tm4GD8aVV1vWf2nceJEXkGKeLx 9VIKmQhMgXlPIVpmGJEg2vFFi9I8iU0Kp8n4oiVKJirmINoJUMsVyriG7PsEqCWpzBWMzJlAtCLV SmvmhAiiHVe0jOZCxBhy0eOLlueIUZ5CknB80dI8zrmChZ5TuAxKxhpD3c8UDIGmCUoExBAmMQg4 zQzUukxgEHAWSy7cBwLRjixakyWZgOaIKciXyfIMExDtBKIVKtUG2synEC3VWZ4b4LUT2NpEqVhQ OMbGFy1LEpNqBo1oU4gWCWIYHGMTiFYiinkM3tgEx1jKM2adXRDt+DEEyRNrbiE8M75oEWdYEwpp xwlsLc5VohC4DBMYBEYNzjG4DBMcY9JkHCEnRBDtyLZWJBjlMD51CtTiRFPKQLTji1bkLMutpwui HZ8hMJoTJEG0U4g2TbOUQGHSBMcYi9MMZ2BrJ+C1SUqzFNZtTiBaLFjGEgbe2ATki+lEJdC+NYVo hSSCwTE2gWilkUpxmMk2gWhpyrXiAopAJ0CtJjhVCgbiTmEQGGIpdDtOwWuFoSZn4OhOIFpF4izJ vRgC4jh3vgWI9iPR3jz/+Zf04fmXXTnr3x4+vCdKzu2TPobD1bn7WDfW0SI7DCzs7zxmu8+4vnpT uPfpm7WFJ9m+VnW16A+3Lpq+b5aHm3V5ebxv4fZ8tIebl03T37l5temHm7u3mjW1E6eDZrl9zHB5 3sx+aKv5Dp1vq35m/0Iq9vLeSmL49aKZ3w6/2Kds3P6i1/8nAAAAAP//AwBQSwMEFAAGAAgAAAAh AKKJRXeFAgAAbAcAABEAAAB3b3JkL2NvbW1lbnRzLnhtbKSV32/aMBDH3yftf7D8PEhCgZaooVpJ t/Zh0tR2mrS3q2OIVf+SbUj573cJgdB1qqC8JI7v/Lnv+ezL5dWLkmTFnRdGZzTpx5RwzUwh9CKj vx6/9S4o8QF0AdJontE19/Rq+vnTZZUyoxTXwRNEaJ9WlmW0DMGmUeRZyRX4vhLMGW/moY/OkZnP BeNRZVwRDeIkbkbWGca9x3gz0CvwtMWxl8NohYMKF9fAYcRKcIG/dIzkaMgomkQX/4LU29SM5RqN c+MUBPx0i0iBe17aHnItBPEkpAhrRMbjLcZkdOl02iJ6Oyn1knQjpX1tV7hD4m6W5IYt63o0ESPH JWow2pfC7vZUfZSGxnILWb2XxErJrV9lk+FpByLfVKUDHiK/LaWSG+XvE5P4gIrUiN2KQyS8jrlV okDoLvCHtmZvc5PRcYDBG8DY8+MQoxYR+bXqrkZlF6dV+bszS9vRxGm0O/28Y9X96ghWe1r2T7A/ TcxDCRavsmLp3UIbB08SFWHtCZaPNBUg9S2h066bkioVRUYHFAewDKXBDpCDFlySW1hr7L5oKCAg CAOOe/G4l5w/JqN0MEzj+E9tFVoEARK13+YN2mKsYWrBwR2ik9nkOj8fndNmFptcqGfH43iW31xP agD+DIr7jMbxzfDsbJLspnI+h6UMe5aG/tM1r4ewlphPugKZ0dkmm0ek02h6Ge3cmkeY/hahJKHk 5OHr7AdhRkrO6nZFAvhnInTgC4dJFvXQNI6ecQ1OmC/4JTxhoMnCEKhg3a/xoQnShXBtuP+puudz 7vAvx1tprS9obULTNNGhtXSS6zORegsMd9467rlbcTolr2LXaTbPtpj7Yz/9CwAA//8DAFBLAwQU AAYACAAAACEAqlIl3yMGAACLGgAAFQAAAHdvcmQvdGhlbWUvdGhlbWUxLnhtbOxZTYsbNxi+F/of xNwdf834Y4k32GM7abObhOwmJUd5Rp5RrBkZSd5dEwIlORYKpWnpoYHeeihtAwn0kv6abVPaFPIX qtF4bMmWWdpsYClZw1ofz/vq0ftKjzSey1dOEgKOEOOYph2neqniAJQGNMRp1HHuHA5LLQdwAdMQ EpqijjNH3Lmy++EHl+GOiFGCgLRP+Q7sOLEQ051ymQeyGfJLdIpS2TemLIFCVllUDhk8ln4TUq5V Ko1yAnHqgBQm0u3N8RgHCBxmLp3dwvmAyH+p4FlDQNhB5hoZFgobTqrZF59znzBwBEnHkeOE9PgQ nQgHEMiF7Og4FfXnlHcvl5dGRGyx1eyG6m9htzAIJzVlx6LR0tB1PbfRXfpXACI2cYPmoDFoLP0p AAwCOdOci471eu1e31tgNVBetPjuN/v1qoHX/Nc38F0v+xh4BcqL7gZ+OPRXMdRAedGzxKRZ810D r0B5sbGBb1a6fbdp4BUoJjidbKArXqPuF7NdQsaUXLPC2547bNYW8BWqrK2u3D4V29ZaAu9TNpQA lVwocArEfIrGMJA4HxI8Yhjs4SiWC28KU8plc6VWGVbq8n/2cVVJRQTuIKhZ500B32jK+AAeMDwV Hedj6dXRIG9e/vjm5XNw+ujF6aNfTh8/Pn30s8XqGkwj3er191/8/fRT8Nfz714/+cqO5zr+958+ ++3XL+1AoQNfff3sjxfPXn3z+Z8/PLHAuwyOdPghThAHN9AxuE0TOTHLAGjE/p3FYQyxbtFNIw5T mNlY0AMRG+gbc0igBddDZgTvMikTNuDV2X2D8EHMZgJbgNfjxADuU0p6lFnndD0bS4/CLI3sg7OZ jrsN4ZFtbH8tv4PZVK53bHPpx8igeYvIlMMIpUiArI9OELKY3cPYiOs+DhjldCzAPQx6EFtDcohH xmpaGV3DiczL3EZQ5tuIzf5d0KPE5r6Pjkyk3BWQ2FwiYoTxKpwJmFgZw4ToyD0oYhvJgzkLjIBz ITMdIULBIESc22xusrlB97qUF3va98k8MZFM4IkNuQcp1ZF9OvFjmEytnHEa69iP+EQuUQhuUWEl Qc0dktVlHmC6Nd13MTLSffbeviOV1b5Asp4Zs20JRM39OCdjiJTz8pqeJzg9U9zXZN17t7IuhfTV t0/tunshBb3LsHVHrcv4Nty6ePuUhfjia3cfztJbSG4XC/S9dL+X7v+9dG/bz+cv2CuNVpf44qqu 3CRb7+1jTMiBmBO0x5W6czm9cCgbVUUZLR8TprEsLoYzcBGDqgwYFZ9gER/EcCqHqaoRIr5wHXEw pVyeD6rZ6jvrILNkn4Z5a7VaPJlKAyhW7fJ8KdrlaSTy1kZz9Qi2dK9qkXpULghktv+GhDaYSaJu IdEsGs8goWZ2LizaFhatzP1WFuprkRW5/wDMftTw3JyRXG+QoDDLU25fZPfcM70tmOa0a5bptTOu 55Npg4S23EwS2jKMYYjWm8851+1VSg16WSg2aTRb7yLXmYisaQNJzRo4lnuu7kk3AZx2nLG8Gcpi MpX+eKabkERpxwnEItD/RVmmjIs+5HEOU135/BMsEAMEJ3Kt62kg6YpbtdbM5nhBybUrFy9y6ktP MhqPUSC2tKyqsi93Yu19S3BWoTNJ+iAOj8GIzNhtKAPlNatZAEPMxTKaIWba4l5FcU2uFlvR+MVs tUUhmcZwcaLoYp7DVXlJR5uHYro+K7O+mMwoypL01qfu2UZZhyaaWw6Q7NS068e7O+Q1VivdN1jl 0r2ude1C67adEm9/IGjUVoMZ1DLGFmqrVpPaOV4ItOGWS3PbGXHep8H6qs0OiOJeqWobrybo6L5c +X15XZ0RwRVVdCKfEfziR+VcCVRroS4nAswY7jgPKl7X9WueX6q0vEHJrbuVUsvr1ktdz6tXB161 0u/VHsqgiDipevnYQ/k8Q+aLNy+qfePtS1Jcsy8FNClTdQ8uK2P19qVa2/72BWAZmQeN2rBdb/ca pXa9Oyy5/V6r1PYbvVK/4Tf7w77vtdrDhw44UmC3W/fdxqBValR9v+Q2Khn9VrvUdGu1rtvstgZu 9+Ei1nLmxXcRXsVr9x8AAAD//wMAUEsDBBQABgAIAAAAIQAWqLbY5gQAAA4PAAARAAAAd29yZC9z ZXR0aW5ncy54bWy0V+tu2zYU/j9g72D49xxTEinJRtNC1zVFsg5x+gC0RNtEJFEgaTvusHff0YVx LmyRrmgRoNT5zv1CHr/78FBXkwOTiovmcupcoOmENYUoebO9nH65y2fhdKI0bUpaiYZdTk9MTT+8 //23d8elYloDm5qAikYt6+JyutO6Xc7nqtixmqoL0bIGwI2QNdXwKbfzmsr7fTsrRN1Szde84vo0 dxHyp6MacTndy2Y5qpjVvJBCiY3uRJZis+EFG/8zEvItdgeRVBT7mjW6tziXrAIfRKN2vFVGW/1/ tQG4M0oO3wviUFeG7+igN4R7FLJ8lHiLe51AK0XBlIIC1ZVxkDdnw/iVokfbF2B7DLFXBeIO6k9P PSc/psB9pcBX7MdUkFHFXJ1q9mAUqeotKRmga76WVA4NN+ajLpZX20ZIuq7AHcjLBEKb9N5N30OX fxWinhyXLZMFlBpGxEfTeQdoSYv7W3bg3eionlSyDd1X+o6uV1q0IHWg4FzgjhLFjoKMZnLV0gIK k4hGS1EZvlL8JXQCgyGhbqNEPybn02oYOZBoaA3uPhujG1HCTByXe8nfntdOoLfukKcmXxoScEVI XrK7Lk0rfapYDs6v+FcWNeWnvdIcNPbD9BMefM8B1nSWP0Nh704tyxnVe0jTLzLWVyKveHvDpRTy qimh9L/MGN9smAQDnGp2A+3DpTj2ef7IaAk380/anT9tI7jnS2UOt0Jow4qQlwU4HDu1Q88I8uDP tyIgkmErkqLUt8ukgZvmNsRBjudGVgT+Yas2ACI/tSKRE3mBFUlwhGIb4i4wQdZ4PEScfByRl4gf 49CK+Dh2rBn1ApdEdiT2gsCOJIFHxk56gXyzcl4Oyqx5w5g4xBopjn0ntcpAavwssyHBAuWZ1bdg QTxvYUUyl9i7KkQkxFZtYRjErrWmYUKyhTUHC4fksVVmAVBk7YPIdTzH2olR4CN7PNEC+4k1nihG LrZrS4PIc60I1DS1xhPHHryFViRBsWeNJyFu6FhlEt8PkTWeJPXi0Nrx6SJAoTWeNCK+Z53GDEMb WD3IgoB8A4n8LLV6kKU+Se0yGUqxta9zHDjEsyIhyRM7ApO9sM52nqAssVYuzwkapnE+QHDf1stu O/xbmlP3eE7qQSKh9VpyOrnp9sd5x7GW9zFvDL5msMewp8hqvzbgbDYAqqZVlcN2YYDegXpZctWm bNOfqxsqt2e9I4e0UmGT+fSoq1t8mPxTin07oEdJ2+FRNCwOxqMkb/Q1rw1d7dcrI9XA5vUE2jfl 54Ps83ROD6xV8Lj1y8U17R/Jnpc1sy+rIdlFJVfdA8huaNsO7+h661xOK77daad7+jR8lfAzo/9Y b90Rc3vMHbD+gxZdZMA9Hs4019Ce8HmG5p1p2NDwmUYMjZxpvqH5HW0HG4yseHMPT7o5dvSNqCpx ZOXHM/6KNCRB7WjL0mHbhPYSA2FcP9XksGQPsKqykmv49dbysqYPUCPk9tfTyF3Rk9jrZ7wd1jG3 zzWUVFOzTDwT7lv8hS/dFlxwaMfVqV6fl9uLwfGKK1iAWtiDtZAG+6PHHLwsRXEFkwSnnu7HcUzy YLhpHNLvz/quW7uh7rdsE1PFyhEzomQQ/ceLYi/LIjQjcC/PcJbiWQSv5AwvEhLCS56nfvrvOKTm h+z7/wAAAP//AwBQSwMEFAAGAAgAAAAhABbXEzgdAgAAUwcAABIAAAB3b3JkL2ZvbnRUYWJsZS54 bWzMlN1umzAUgO8n7R0s3zcYQpIGlVRpmkiVpl1s7QM4jgFr2EY2Ccnb79iQ7IdFC5o2DQSCc+wP ++PoPDweZYkO3FihVYrDEcGIK6Z3QuUpfnvd3N1jZGuqdrTUiqf4xC1+XLx/99AkmVa1RTBf2USy FBd1XSVBYFnBJbUjXXEFyUwbSWt4NXkgqfmyr+6YlhWtxVaUoj4FESFT3GHMLRSdZYLxZ832kqva zw8ML4GolS1EZc+05hZao82uMppxa2HPsmx5kgp1wYRxDyQFM9rqrB7BZroVeRRMD4l/kuU3wGQY IOoBppYPQ0w6RGBPkh8xkix5yZU2dFsCCbaEYFXIg/Gi+5moSRSVkF7RUmyN8ImKKm15CLkDLVNM IrIhE7i7MyZjd8eBG8gKaix3kHYgacMZlaI8naO2Eda2iUrUrDjHD9QIt7Q2ZUUOib3dkhSvCRzR ZoPbSJjiGALL1SUSuW/5I+wi40uEuAjznHbE3M9innMZA98MWgM9E69Ccos+8gZ90pKqK0YiMgUT E/DhzIwHGTGeO9RItPzeyAois/t43DMy/72RlnO7kc881xy9vVxR8eQVxN0FMv5ucYSg4oficCrW 8axXHNENKp4HqljpvRHcuPK4YmMGxTD3HlorQwpD6h03v6qMTBz57n8ri65loA8iL+qrjcO1i3/V OJZuydH6p8YB/+Sp58Pv/g8bR/dgF18BAAD//wMAUEsDBBQABgAIAAAAIQCTdtZJGAEAAEACAAAU AAAAd29yZC93ZWJTZXR0aW5ncy54bWyU0cFKAzEQBuC74DuE3Ntsiy2ydFsQqXgRQX2ANJ1tg5lM yKRu69M7rlURL+0tk2Q+5mdmiz0G9QaZPcVGj4aVVhAdrX3cNPrleTm41oqLjWsbKEKjD8B6Mb+8 mHV1B6snKEV+shIlco2u0dtSUm0Muy2g5SEliPLYUkZbpMwbgza/7tLAESZb/MoHXw5mXFVTfWTy KQq1rXdwS26HEEvfbzIEESny1if+1rpTtI7yOmVywCx5MHx5aH38YUZX/yD0LhNTW4YS5jhRT0n7 qOpPGH6ByXnA+B8wZTiPmBwJwweEvVbo6vtNpGxXQSSJpGQq1cN6LiulVDz6d1hSvsnUMWTzeW1D oO7x4U4K82fv8w8AAAD//wMAUEsDBBQABgAIAAAAIQCco8de6AEAAOgDAAAQAAgBZG9jUHJvcHMv YXBwLnhtbCCiBAEooAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxTwW7bMAy9D9g/GLo3 soPMSQpFxZBi6GFbA8Rtz5pMJ8JsSZDYoNnXj7YXT9l2mk+Pj/TTE0mJu7euzU4QonF2w4pZzjKw 2tXGHjbsqfp0s2JZRGVr1ToLG3aGyO7k+3diF5yHgAZiRhI2btgR0d9yHvUROhVnlLaUaVzoFFIY Dtw1jdFw7/RrBxb5PM9LDm8Itob6xk+CbFS8PeH/itZO9/7ic3X2pCdFBZ1vFYL82v/ZzmqHneAT KyqHqq1MB7JYzykxhWKnDhDlvBB8ROLFhTrK1bJcCD5isT2qoDRSF+VivS5zwRNGfPS+NVohdVh+ MTq46BrMHgfbWa8geFoi6Cp70K/B4FmSVBqKz8aSh0VRCj5C8hfUISh/jLIolr3LKRZ7rVrYUiNk o9oIgv8mxAOofsg7ZXqPJ7w9gUYXsmh+0JjnLPumIvTt27CTCkZZZGPZGAy49RGDrAy2pD3FA0zL UmwWshgKCFwXDsHggfC1u+GE+NjQ3fAfZovU7OBhtJrYSZ1dzvhDdes6ryz1mE+IWvw9PvnK3fdL 8quH12Qy+xeDx71XmqbyYVXmy3QLkpzYEws1jXWaykSIB7pDaPsT6F97gPpS83ei36vn8eHKopzl 9A2LdOFoFaYXJX8CAAD//wMAUEsDBBQABgAIAAAAIQAYLI0WhQEAACIDAAARAAgBZG9jUHJvcHMv Y29yZS54bWwgogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMklFPgzAQgN9N/A+k z7LCNqc2jCVqjA+amDij8a2251YHpWlvIv/eAoOJ7sGEh97ddx/ttcniK8+CT7BOFXpO4lFEAtCi kEqv5uRpeROek8Ah15JnhYY5qcCRRXp8lAjDRGHhwRYGLCpwgTdpx4SZkzWiYZQ6sYacu5EntC++ Fzbn6EO7ooaLDV8BHUfRjOaAXHLktBaGpjeSnVKKXmm2NmsEUlDIIAeNjsajmO5ZBJu7gw1N5QeZ K6wMHES7Yk9/OdWDZVmOykmD+v3H9OX+7rE5aqh0PSsBJE2kYKgwgzSh+6Vfue3bBwhs033g18IC x8Kmt7zS4E6Ca64bpsvXE99AVRZWOt89iDwmwQmrDPp7bN2DhKcz7vDeX+y7AnlZDX/zt1x3WPhU 9btILxqiDzvbg1UaQabjKJ6F0SwcR8v4nE1PWRS99s4OSnY3054HZOAnytr5d5XnydX18obsfWfL eMz81/h+9e+F+W7X/zSessl0aOwE7VSHrzr9BgAA//8DAFBLAwQUAAYACAAAACEAD3krl1oMAACl eQAADwAAAHdvcmQvc3R5bGVzLnhtbMSdS3PbOBLH71s134Gl0+whkeVnkhpnynaSjWvz8ETO5gyR kIU1SWhJKrb30y8AQhKoJig22PGebFHqH0B0/xtoPv/48zFLo5+8KIXMz0eTlwejiOexTER+dz76 fvvhxatRVFYsT1gqc34+euLl6M+3v/3tj4c3ZfWU8jJSgLx8k8Xno0VVLd+Mx2W84BkrX8olz9WX c1lkrFIfi7txxor71fJFLLMlq8RMpKJ6Gh8eHJyOLKboQ5HzuYj5OxmvMp5Xxn5c8FQRZV4uxLJc 0x760B5kkSwLGfOyVDudpTUvYyLfYCbHAJSJuJClnFcv1c7YHhmUMp8cmP+ydAs4wQEOAeC05DjE iUWMy6eMP46iLH5zfZfLgs1SRVK7FKleRQY8equ8mcj4HZ+zVVqV+mNxU9iP9pP580HmVRk9vGFl LMSt6oVCZUJRP17kpRipbzgrq4tSsNYvF/qf1m/isnI2X4pEjMa6xfK/6sufLD0fHR6ut1zpHjS2 pSy/W2/j+YvvU7cnzqaZ4p6PWPFieqENx3bH6r/O7i53P5mGlywWph02r7gK1MnpgYamQuvi8OT1 +sO3lR5htqqkbcQA6r8b7BiMuIpfFc3TWlTqWz7/JON7nkwr9cX5yLSlNn6/vimELJRwzkevTZtq 45Rn4qNIEp47P8wXIuE/Fjz/XvJku/2vDyb47YZYrnL1/9HZxERBWibvH2O+1FJS3+ZM++SLNkj1 r1di27gx/88aNrGeaLNfcKbzSTTZRZjuoxCH2qJ09radudrZd/MrVENHz9XQ8XM1dPJcDZ0+V0Nn z9XQq+dqyGB+ZUMiT/hjLUTYDKDu43jUiOZ4xIbmeLSE5nikguZ4lIDmeAIdzfHEMZrjCVMEp5Kx LwqdYD/yRHs3d/8cEcbdPyWEcffPAGHc/Qk/jLs/v4dx96fzMO7+7B3G3Z+s8dx6qRVdK5nl1WCV zaWsclnxqOKPw2ksVyxTZNHw9KTHC5KdJMDUmc1OxINpMTOf90eIEWn4fF7pci6S82gu7laFqs2H dpznP3mqquSIJYniEQILXq0Kz4iExHTB57zgecwpA5sOqivBKF9lM4LYXLI7MhbPE+LhWxNJksIm oFX9vNAiEQRBnbG4kMO7JhlZfvgkyuFjpSHR5SpNORHrC02IGdbw2sBghpcGBjO8MjCY4YWB4zOq IbI0opGyNKIBszSicavjk2rcLI1o3CyNaNwsbfi43YoqNSneXXVM+h+7u0qlPiw+uB9TcZcztQAY Pt3YY6bRDSvYXcGWi0gflW7HuvuMbedSJk/RLcWctiFRretNiFypvRb5aviANmhU4trwiOS14REJ bMMbLrHPapmsF2gfaeqZ6WpWtYrWkHqJdsrSVb2gHa42Vg2PsK0APoiiJJNBO5Yggr/o5ax2J0Xm 2/ZyeMe2rOGy2s1KpN2zSIJepjK+p0nDH5+WvFBl2f1g0geZpvKBJ3TEaVXIOtZcyR8al/SS/Pts uWClMLVSA9F/ql+fUI8+s+XgHbpJmchp/Pb+RcZEGtGtID7efv4U3cqlLjP1wNAAL2VVyYyMaY8E /v6Dz/5O08ELVQTnT0R7e0F0eMjArgTBJFOTZEJEUstMkQuSOdTw/smfZpIVCQ3tpuD1NSwVJyJO WbasFx0E2lJ58UHlH4LVkOH9ixVCHxeiEtUtCcw5bFiuZv/m8fBU90VGJEeGvq4qc/zRLHWNNR1u +DKhgRu+RDDeVNODjl+CnW3ghu9sA0e1s1cpK0vhPYUazKPa3TWPen+HF3+WJ1NZzFcp3QCugWQj uAaSDaFMV1leUu6x4RHusOFR7y9hyBgewSE5w/tHIRIyZxgYlScMjMoNBkblAwMjdcDwK3Qc2PDL dBzY8Gt1ahjREsCBUcUZ6fRPdJbHgVHFmYFRxZmBUcWZgVHF2dG7iM/nahFMN8U4SKqYc5B0E01e 8WwpC1Y8ESHfp/yOERwgrWk3hZzrmxtkXl/ETYDUx6hTwsV2jaNy8g8+I+uaZlH2i+CIKEtTKYmO rW0nHGPZvHZtn5m5k2NwF25SFvOFTBNeePbJb6vq5Wl9W8Zu9003eh32/CTuFlU0XWyO9ruY04O9 luuCvWG2v8G2MT9d38/SZvaZJ2KVrTsKb6Y4PepvbCK6YXy833i7kmhYnvS0hG2e7rfcrpIblmc9 LWGbr3paGp02LLv08I4V962BcNYVP5sazxN8Z11RtDFubbYrkDaWbSF41hVFDalEF3GszxZA7/TT jN++n3j89hgV+SkYOfkpvXXlR3QJ7Bv/KfTMjkmapr3N1RMg75tFdK/M+ddK1sftGyec+t/Uda0W TnnJo1bOUf8TV40s4x/H3unGj+idd/yI3gnIj+iVibzmqJTkp/TOTX5E7yTlR6CzFZwRcNkK2uOy FbQPyVaQEpKtBqwC/IjeywE/Ai1UiEALdcBKwY9ACRWYBwkVUtBChQi0UCECLVS4AMMJFdrjhArt Q4QKKSFChRS0UCECLVSIQAsVItBChQi0UAPX9l7zIKFCClqoEIEWKkSghWrWiwOECu1xQoX2IUKF lBChQgpaqBCBFipEoIUKEWihQgRaqBCBEiowDxIqpKCFChFooUIEWqj1rYbhQoX2OKFC+xChQkqI UCEFLVSIQAsVItBChQi0UCECLVSIQAkVmAcJFVLQQoUItFAhAi1Uc7JwgFChPU6o0D5EqJASIlRI QQsVItBChQi0UCECLVSIQAsVIlBCBeZBQoUUtFAhAi1UiOiKT3uK0neZ/QR/1NN7xX7/U1e2U9/c W7ld1FF/1LpXflb/exEupbyPWm88PDL1Rj+ImKVCmkPUntPqLtdcEoE68fn1qvsOH5c+8KFL9l4I c84UwI/7WoJjKsddIe9agiLvuCvSXUuw6jzuyr6uJZgGj7uSrtHl+qIUNR0B46404xhPPOZd2dox h0PclaMdQzjCXZnZMYQD3JWPHcOTSCfnXeuTnuN0urm+FBC6wtEhnPkJXWEJfbVOx1AYfZ3mJ/T1 np/Q141+AsqfXgzesX4U2sN+VJirocywrg4Xqp+AdTUkBLkaYMJdDVHBroaoMFfDxIh1NSRgXR2e nP2EIFcDTLirISrY1RAV5mo4lWFdDQlYV0MC1tUDJ2QvJtzVEBXsaogKczVc3GFdDQlYV0MC1tWQ EORqgAl3NUQFuxqiwlwNqmS0qyEB62pIwLoaEoJcDTDhroaoYFdDVJerzVGUhqtRHnbMcYswxxA3 ITuGuOTsGAZUS451YLXkEAKrJeirtc9x1ZLrND+hr/f8hL5u9BNQ/vRi8I71o9Ae9qPCXI2rltpc HS5UPwHraly15HU1rlrqdDWuWup0Na5a8rsaVy21uRpXLbW5Ojw5+wlBrsZVS52uxlVLna7GVUt+ V+OqpTZX46qlNlfjqqU2Vw+ckL2YcFfjqqVOV+OqJb+rcdVSm6tx1VKbq3HVUpurcdWS19W4aqnT 1bhqqdPVuGrJ72pctdTmaly11OZqXLXU5mpcteR1Na5a6nQ1rlrqdLWnWho/NF7ApNnm/Wbqx9XT kutncDs3zCT1M0jtSUDzw+tk86Ikbax7EtlXUtnNpsP2hGHdojGETcUL1VZsn57kaco+BXVzG495 Bupuw55HpZqObIdg/Ws7pNtTofXvGqc9O/td6SHv6LNxSecY1V7zdfC1DcN9PVT9maX1S7vUP9d5 ogAP9oVVdU+TR1aj1PdXPE0/s/rXcun/acrnVf3t5MDcNL/z/ax+/pvXvjCJwgsYNztTf7QvDvOM d/1EeHsG2xuSWg0tw20upxg60j1jeNObK5npJwxuLzLY7Vfro/jr4WWqya9a5G5oN+N/cNwUpdDB YqwODiZXxxcHl9Z79iVwm/fRTWxmd99HV29zXivnGZxGLtkdHHMPdMe4mMfstw2Jm2b0QynX2x3u lfLKrxwl8Ko8+3K8482b8tpfjtcyvod2smi8789s2z++jeCLV6XSpUnru+LYHZndUbff14803Y5d 71D0eAHpAURQDhm0zqCc2gfcdcTl+hl4bUMEdj7XI+r7smXYbPu/On7tgM7qfbgqf0W0ubviCzj7 G3/MtWraP27UEecO0K+NP/u0i9ak2HgSRtso+TKiA332jGhfHuq+OrR3dmy+f/V8NOV3kkffr7W5 ebdqc1NcOp93PDWxRUFj+jLb6AJ+d5i7/Dc0vbpxQhzs/6dRX/9Xvv0fAAAA//8DAFBLAwQUAAYA CAAAACEAC0r3B/YBAADABgAADwAAAHdvcmQvcGVvcGxlLnhtbMSVy46bMBSG95X6DsjrEmMCFFDI qGrUNutpH8BjTLAGX2RzSd6+5hamHXVEJouuwNjnO7/9+xx2D2deOS3VhkmRAbTxgEMFkTkTpwz8 +vnNjYFjaixyXElBM3ChBjzsP37YdShMFZWqoo5FCJN2imSgrGuVQmhISTk2G86IlkYW9YZIDmVR MEJhJ3UOfQ95w5vSklBjbL6vWLTYgAlHzutoucadDe6BASQl1jU9Lwx0MySECYz/BvHXW5OKCjtZ SM1xbYf6BDnWz41yLVfhmj2xitUXi/SiGSMz0GiRTgj3KqUPSUcp02OO0GvyjiEHSRpORT1khJpW VoMUpmTqeqb8vTQ7Wc6Q9q1NtLya13UKBfddiMPoygJcI3+yklej8reJyFvhSI+4RqyR8GfOWQnH TCyJ33U0Lw4XhbcB/FeAyNDbEOGEgObCl9Lo1Ok+l79r2aiFxu6jHcXzldX3qxtY0215eYPNfWIe S6xsKXOSHk9CavxUWUXWe8fa5wwOOH2VgP3UTbWRop9LcVOX0tb+AQtGK+cHvgjbd6dlmhrboulR FHJYbPO1LKf6mGfgywEM3xozjh9d5Iauj1yUBF4URdtt7Pr+Z+R5fhS7aBskYRCjre8mSRQGAO53 cJHyT1mjnk+OlfcfRE2D/tez/w0AAP//AwBQSwMEFAAGAAgAAAAhAAmigwqoAQAAzwUAABkAAAB3 b3JkL2NvbW1lbnRzRXh0ZW5kZWQueG1spJRdb4IwFIbvl+w/kN5rwYhOIphMt8XrbT+gliqN9CNt Ef33KwiiMzEgV9CP85y3523PfHFkqXMgSlPBQ+ANXeAQjkVM+S4Evz+fgzfgaIN4jFLBSQhORINF 9Poyzz0/wIIxwo3+ODoWw3WQSxyCxBgZQKhxQhjSQ0axElpszdBuh2K7pZjAXKgYjlzPLf+kEpho bXMuET8gDSocPrajxQrlNrgAjiFOkDLk2DC8zhAfzuDbfxC7P5qQhNvFrVAMGTtUO8iQ2mdyYLkS GbqhKTUni3QnNUaEIFM8qBCDi5QiJDhLqT51hGqT9xyyEjgrHCkzQkVSq0FwnVB5qSl7lmYXkxpy eHSIA0vrfbn0xv0uxOrsSgNsI7+ykqVn5Y+JntvCkQJxiWgj4TZnrYQhypvET5Xmqrie3w0wugNM NOmG8CsE1CfWPI1c7vq5/KVEJhsa7Udb8/2FVfSsDqzqtlzfYN1PzHeCpH3KDAfrHRcKbVKryHrv WPuc0gGneCUguu6otqEWI4kUWse2LS9n76upPwXlbFw2YhfAaA5vu3D0BwAA//8DAFBLAQItABQA BgAIAAAAIQBMCwvMdgEAALUGAAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9UeXBlc10ueG1s UEsBAi0AFAAGAAgAAAAhAB6RGrfvAAAATgIAAAsAAAAAAAAAAAAAAAAArwMAAF9yZWxzLy5yZWxz UEsBAi0AFAAGAAgAAAAhAMHXgFouAQAArAQAABwAAAAAAAAAAAAAAAAAzwYAAHdvcmQvX3JlbHMv ZG9jdW1lbnQueG1sLnJlbHNQSwECLQAUAAYACAAAACEApbPBFQyTAAAEwQoAEQAAAAAAAAAAAAAA AAA/CQAAd29yZC9kb2N1bWVudC54bWxQSwECLQAUAAYACAAAACEAoolFd4UCAABsBwAAEQAAAAAA AAAAAAAAAAB6nAAAd29yZC9jb21tZW50cy54bWxQSwECLQAUAAYACAAAACEAqlIl3yMGAACLGgAA FQAAAAAAAAAAAAAAAAAunwAAd29yZC90aGVtZS90aGVtZTEueG1sUEsBAi0AFAAGAAgAAAAhABao ttjmBAAADg8AABEAAAAAAAAAAAAAAAAAhKUAAHdvcmQvc2V0dGluZ3MueG1sUEsBAi0AFAAGAAgA AAAhABbXEzgdAgAAUwcAABIAAAAAAAAAAAAAAAAAmaoAAHdvcmQvZm9udFRhYmxlLnhtbFBLAQIt ABQABgAIAAAAIQCTdtZJGAEAAEACAAAUAAAAAAAAAAAAAAAAAOasAAB3b3JkL3dlYlNldHRpbmdz LnhtbFBLAQItABQABgAIAAAAIQCco8de6AEAAOgDAAAQAAAAAAAAAAAAAAAAADCuAABkb2NQcm9w cy9hcHAueG1sUEsBAi0AFAAGAAgAAAAhABgsjRaFAQAAIgMAABEAAAAAAAAAAAAAAAAATrEAAGRv Y1Byb3BzL2NvcmUueG1sUEsBAi0AFAAGAAgAAAAhAA95K5daDAAApXkAAA8AAAAAAAAAAAAAAAAA CrQAAHdvcmQvc3R5bGVzLnhtbFBLAQItABQABgAIAAAAIQALSvcH9gEAAMAGAAAPAAAAAAAAAAAA AAAAAJHAAAB3b3JkL3Blb3BsZS54bWxQSwECLQAUAAYACAAAACEACaKDCqgBAADPBQAAGQAAAAAA AAAAAAAAAAC0wgAAd29yZC9jb21tZW50c0V4dGVuZGVkLnhtbFBLBQYAAAAADgAOAIQDAACTxAAA AAA= --_004_BY2PR09MB107852289F0D865A8EAF9287A5210BY2PR09MB1078namp_-- From nobody Mon Jun 27 10:29:16 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 81AA412B02D for ; Mon, 27 Jun 2016 10:29:14 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.942 X-Spam-Level: X-Spam-Status: No, score=-4.942 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_12=2.059, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oWKXzzn6IRig for ; Mon, 27 Jun 2016 10:29:12 -0700 (PDT) Received: from github-smtp2a-ext-cp1-prd.iad.github.net (github-smtp2-ext8.iad.github.net [192.30.252.199]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2753F12D0E4 for ; Mon, 27 Jun 2016 10:29:12 -0700 (PDT) Date: Mon, 27 Jun 2016 10:29:10 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1467048550; bh=WcrUJtnIKRmJQV8+vASgXeXhYmTC3B6v3hUd65HWHwg=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=YNZ6E9e4JmQCSp/k5arbnqXyT0sNbcpp5Z2MrSOjtZZCIXH93l92E9od9X2GtVDqM 4h6hWkgUH8u0aIoy1Kr0p0wHnfzrg3i5AUrGhLeBRIUMlD0OtnRFNV2Fke+UGrJ9bS St5bxoz7eSR/7DRK4bmXEeiU3TNLs97yiu/KVR1U= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_577162663fd5_4a3c3f9ae0cdb29c120443"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] How much specification do we need in the data table? (#21) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jun 2016 17:29:14 -0000 ----==_mimepart_577162663fd5_4a3c3f9ae0cdb29c120443 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit I believe that the more specific details for this would be captured in the IM. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/21#issuecomment-228815297 ----==_mimepart_577162663fd5_4a3c3f9ae0cdb29c120443 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

I believe that the more specific details for this would be captured in the IM.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_577162663fd5_4a3c3f9ae0cdb29c120443-- From nobody Mon Jun 27 10:52:09 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9F41A12D7BC for ; Mon, 27 Jun 2016 10:52:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.455 X-Spam-Level: X-Spam-Status: No, score=-5.455 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_20=1.546, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zAfkrMbh7RSC for ; Mon, 27 Jun 2016 10:52:05 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext6.iad.github.net [192.30.252.197]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B747812D7F5 for ; Mon, 27 Jun 2016 10:52:02 -0700 (PDT) Date: Mon, 27 Jun 2016 10:52:01 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1467049921; bh=AOtb3/cg//R1bkia/OMqL7lwEqNdCSrikFTT8lolF+A=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=cNgHcpSjHayjrdV529H2Qw9mwLhD6bu1yyUZO8aEPqRLG0t6Grk6dSOS1R0YPpOSx wY+bKrsCznQdBtiGU8X3BmwzGrl7M5B3PqePvdf79pqE3K7oS2Q6pCW6LebY/ainmm LdXvGgCp+yW6Pnr1Uauu3nJ+riSdSCtRY2sbyTII= From: Jim Schaad To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_577167c1b786e_e1b3ff99b70b2bc122397"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: jimsch X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] How much specification do we need in the data table? (#21) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jun 2016 17:52:07 -0000 ----==_mimepart_577167c1b786e_e1b3ff99b70b2bc122397 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit I would want this document to be sketchy about the details. I do have some potential problems with the question of should the details be in the IM documentor the SWID document, but given that we have currently stated that the IM is going to a single IM and it will be in a single document then it needs to be in the IM document. (Not a favorite decision of mine.) I think that the SWID document is going to be slightly vague as well given that the final details are going to be in the IM document and that the publishing order may not be totally synchronized (especially if there are updates later). The IM document is going to have to be the final authority. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/issues/21#issuecomment-228822059 ----==_mimepart_577167c1b786e_e1b3ff99b70b2bc122397 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

I would want this document to be sketchy about the details. I do have some potential problems with the question of should the details be in the IM documentor the SWID document, but given that we have currently stated that the IM is going to a single IM and it will be in a single document then it needs to be in the IM document. (Not a favorite decision of mine.)

I think that the SWID document is going to be slightly vague as well given that the final details are going to be in the IM document and that the publishing order may not be totally synchronized (especially if there are updates later). The IM document is going to have to be the final authority.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_577167c1b786e_e1b3ff99b70b2bc122397-- From nobody Mon Jun 27 13:21:39 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 979CF12D8A3 for ; Mon, 27 Jun 2016 13:21:37 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O-qoJOPBVfvY for ; Mon, 27 Jun 2016 13:21:33 -0700 (PDT) Received: from mail-pf0-x235.google.com (mail-pf0-x235.google.com [IPv6:2607:f8b0:400e:c00::235]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 6086112D19F for ; Mon, 27 Jun 2016 13:21:33 -0700 (PDT) Received: by mail-pf0-x235.google.com with SMTP id t190so65014664pfb.3 for ; Mon, 27 Jun 2016 13:21:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=from:subject:date:references:to:message-id:mime-version; bh=h58fR6KlaGQEazjJYyVyCHfURhJ8hHP4Gf2HDmVhihA=; b=Xq4rwbLrP4o5EexgASAd1zsmRMjuvyxNbH6Pbr4i2fZyBdUmA5mk4e1Kb63Acf5wHY Fzl3OFCRODg1GBlCzRS72FpCo5YTqroOZTX/oEsxTDS0aBuMzPkdg7AaD3e191ZzZ83x NOuRgJtk0fEETdWMjN8Z3XDhOgdlJj/11wZ5xUyNEy5vz7jt/hvRRmwm3n6iWKRgOZWV oRLRf1x3LtlWjHV0CaQyLSudkcjaI9GfWH2OjXMpAyMDRmBJhp8l9WOSYDGX/e312VgI db2dWLiVPZ26joJ5ZoKweqVEy/f8fCMUlPlxdKGk85ZY/3Pf3t/UdgjKA8yL04Po5uH0 h5SA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:subject:date:references:to:message-id :mime-version; bh=h58fR6KlaGQEazjJYyVyCHfURhJ8hHP4Gf2HDmVhihA=; b=FjG6pfI/Z9p7Chqurl7MIiY5dGDjD3pwFoomCTC0sKuMs/7+9xl/sDocqFcX47bgn9 OiAWz8Du5IPqeAlzUu9KAjCM6UfhRg3V2FhRVRf+5YpQKsbmMviwYUX8yv8he10RHY8f Je32PHvfqv1ojLLhicmfDi7LSqmh385u+3B9bxtCGg6OyQftbAXXqcejQd4k3tsba7AQ NlvO00UBGbvp8W/wvSbItpEOU3jj17UAUQ+8+YFeEE/PZn3Z3Hk3j6Me038ez7fYkmD2 1hEe9ZUCqtIn8ZV9nWwrISE7//zTUNB2AE2Rhw/2v7TP/TmXX8dICmWZ4zM2N/sjC0Br jH+A== X-Gm-Message-State: ALyK8tLF3w/ro9yocHfadJnQPKuRC/LgTzIulXeuPOVoJ2htgZgcgsBbQospT8u2HCDXbQ== X-Received: by 10.98.86.151 with SMTP id h23mr36552874pfj.137.1467058892771; Mon, 27 Jun 2016 13:21:32 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id w63sm1380853pfi.9.2016.06.27.13.21.30 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 27 Jun 2016 13:21:31 -0700 (PDT) From: Adam Montville X-Pgp-Agent: GPGMail 2.6b2 Content-Type: multipart/signed; boundary="Apple-Mail=_397C540E-2335-4DE8-ADCC-2FB45FD51F97"; protocol="application/pgp-signature"; micalg=pgp-sha512 Date: Mon, 27 Jun 2016 15:21:26 -0500 References: <20160624161511.10833.65850.idtracker@ietfa.amsl.com> To: "" Message-Id: <8070549C-B178-4E28-B4CA-57D28C554542@gmail.com> Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) X-Mailer: Apple Mail (2.3124) Archived-At: Subject: [sacm] Fwd: IETF 96 Final Agenda X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jun 2016 20:21:37 -0000 --Apple-Mail=_397C540E-2335-4DE8-ADCC-2FB45FD51F97 Content-Type: multipart/alternative; boundary="Apple-Mail=_3A1E0165-8BCF-456F-AF12-B3140BE8124E" --Apple-Mail=_3A1E0165-8BCF-456F-AF12-B3140BE8124E Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii FYI. > Begin forwarded message: >=20 > From: IETF Agenda > Subject: IETF 96 Final Agenda > Date: June 24, 2016 at 11:15:11 AM CDT > To: "Working Group Chairs" > Reply-To: IETF Agenda >=20 > Hello Everyone! >=20 > The final agenda is now available. At this point only Area Directors = can submit changes in the form of a swap to agenda@ietf.org. >=20 > https://datatracker.ietf.org/meeting/96/agenda.html > https://datatracker.ietf.org/meeting/96/agenda.txt >=20 > While this is considered the final agenda for printing, changes may be = made to the agenda up until and during the meeting. Updates will be = reflected on the web version of the agenda. >=20 > Information regarding IETF 96 in Berlin can be found here: = http://www.ietf.org/meeting/96/index.html >=20 > Thank you! >=20 > IETF Secretariat >=20 --Apple-Mail=_3A1E0165-8BCF-456F-AF12-B3140BE8124E Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii FYI.

Begin forwarded = message:

From: = IETF Agenda <agenda@ietf.org>
Subject: = IETF 96 Final = Agenda
Date: = June 24, 2016 at 11:15:11 AM = CDT
To: = "Working Group Chairs" <wgchairs@ietf.org>
Reply-To: = IETF Agenda <agenda@ietf.org>

Hello Everyone!

The final agenda = is now available. At this point only Area Directors can submit changes = in the form of a swap to agenda@ietf.org.

https://datatracker.ietf.org/meeting/96/agenda.html
https://datatracker.ietf.org/meeting/96/agenda.txt

While this is considered the final agenda for = printing, changes may be made to the agenda up until and during the = meeting. Updates will be reflected on the web version of the agenda.

Information regarding IETF 96 in Berlin can be = found here: http://www.ietf.org/meeting/96/index.html

Thank you!

IETF Secretariat


= --Apple-Mail=_3A1E0165-8BCF-456F-AF12-B3140BE8124E-- --Apple-Mail=_397C540E-2335-4DE8-ADCC-2FB45FD51F97 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXcYrJAAoJEDEhyx7etgABoncP/jAODeAQCOWs24vLq58Yk+Pe WuOEDHItQmBC2Gl7nDUM7sWqTOk792DFvkhsJ7EY8DmGvy1Uqi8RU2ez/wBgmY/K 1kpyKD9YxUuQq1zKni1KsDO784nHPcx2Et4t3hlFtrvlb918uUQELZYPKTUTg6XQ Q+R5OlOgryxrkQn+96WhU/1VaXAeIAf2M1nPxSJ4BSv9rjY/k57OTwj3pzO3UK5R +v0GDzNvdUMqm0IK9MgrSrY7rr3NMeNs/6x3927kYQFcCyGvQF2Qp0J/9nF1n4dv rAkv/vT2O8W0yG3jL1OcJQUSStNQKGksHY7M2mwqd5rWYPln9onPsu8myaqpqGnu dhyAgAAZ+IoRsrD962NUNEL87spK6EmriOyvNGyupxappF1LhbBmXt/zM1jxAvXb KjmLcGzJl8reDHww+BrKDVEDr304+vv8EmcC/rr4nkgSta3TZD+88DlMowoZd5oa 3IJR/qgy5+N1wPcZJV/DATCL/NVglvhswAqHHl0KdwK3txqPqyJ7WSZtu6uc8Eh/ DuPWBmHSSfrByWoiQOzTKPbb3cljO3fiJ+3LdXXcxbF60jXxvDhlImROJ7JxlbU3 r1rIiEAztlLDiu7KF6fgItopXQSS3JRHdA2tjSmi0Fn4u/WUBo9fKBXKPMnRn6IZ foKRAMxU64UXmJif0qDf =Hwq9 -----END PGP SIGNATURE----- --Apple-Mail=_397C540E-2335-4DE8-ADCC-2FB45FD51F97-- From nobody Mon Jun 27 13:32:08 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C76CE12D8B5 for ; Mon, 27 Jun 2016 13:32:06 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dYAWwZzimERI for ; Mon, 27 Jun 2016 13:32:03 -0700 (PDT) Received: from mail-oi0-x22e.google.com (mail-oi0-x22e.google.com [IPv6:2607:f8b0:4003:c06::22e]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id C429112D8B4 for ; Mon, 27 Jun 2016 13:32:02 -0700 (PDT) Received: by mail-oi0-x22e.google.com with SMTP id f189so216830214oig.3 for ; Mon, 27 Jun 2016 13:32:02 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=PCuwI6Kxkck5+mACpCZ5/6h32Iqp9df/65eYlpQrxqI=; b=GqpZJc1u2cNwwxe6H4XsL32yQsG4JgaqxrFl8pGsIv5d3zEJoR5NR1g6ImV7W37/qr 91HaM0hNxrQ1BBD7J8uD50dVh+GlseRQ8rin9PM7flY2mIk1pZ/kqnBps9FOyL6HPxIp NRuixSagDVhikEeO3O/RQ1GTkUM7mdDYoz1rFRW6SjeXj9Y/gErlNdNJOWTMH+WIUOvh /c8jvsvZg+y3PQHl/Y4dj2g2S4uVRuSrO0mx9cYIn06gN46SV480jScr1IK+InVJ8SO/ TfEfu04IKUHLg+oXb7RDoUtBL3PMtbW0mloEJa9GKgsq1RRIfXg7aWfgOJsenM8SRCxN 2ocA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=PCuwI6Kxkck5+mACpCZ5/6h32Iqp9df/65eYlpQrxqI=; b=IPPSo/6ZVv01/vsFo7e1rfTtR+Iyr2DO52YAMq09fhJr+Wi3fF3x3GWN7sbpzqqr0y is7apbjQ9pX+zGpGkDj4RJrQy8T3UdizienPcqu+0kNY4Pk7diiCH58TgB2DKVkTJQjX QNjU9mj8RFVuoPzQHTyDFEvBdnkVhxyiimEBcjtE7jCzkoUN7wNMrXMY3l6qQ4dFZ1ot +BWDHlik+1J7gy+lhfkn3Fs+ocggCKY4RA0nIxH71Is1skEL8NOxmUMXYn/zN2+bcVNm /rPp7yjmKt5WONSC7BTAvSa0UbLAsjhQ0sJWzeZaInxWa2q+2gGho+5Y51BE2IzOfiyO oAEQ== X-Gm-Message-State: ALyK8tLPgVixZR9hIuKJ0/pTDnOpGq1s7mQpatn02GgTkdyAGhaR3oYi6sWhHFw5mp+P9w== X-Received: by 10.157.46.240 with SMTP id w103mr2094916ota.2.1467059522022; Mon, 27 Jun 2016 13:32:02 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id t17sm9601174ota.14.2016.06.27.13.31.59 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 27 Jun 2016 13:32:00 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_29FBB12A-5A87-4B8F-9225-B2E274C0A8EF"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Mon, 27 Jun 2016 15:31:58 -0500 Message-Id: References: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> To: Ira McDonald X-Mailer: Apple Mail (2.3124) Archived-At: Cc: Jerome Athias , "Haynes, Dan" , "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jun 2016 20:32:07 -0000 --Apple-Mail=_29FBB12A-5A87-4B8F-9225-B2E274C0A8EF Content-Type: multipart/alternative; boundary="Apple-Mail=_55EF6AB5-E3EC-4E17-B79C-1C6DD7C138E0" --Apple-Mail=_55EF6AB5-E3EC-4E17-B79C-1C6DD7C138E0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 +1 (contributor) > On Jun 24, 2016, at 7:43 AM, Ira McDonald = wrote: >=20 > Hi Danny, >=20 > +1 >=20 > Cheers, > - Ira >=20 >=20 > Ira McDonald (Musician / Software Architect) > Co-Chair - TCG Trusted Mobility Solutions WG > Chair - Linux Foundation Open Printing WG > Secretary - IEEE-ISTO Printer Working Group > Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > IETF Designated Expert - IPP & Printer MIB > Blue Roof Music / High North Inc > http://sites.google.com/site/blueroofmusic = > http://sites.google.com/site/highnorthinc = > mailto: blueroofmusic@gmail.com > Winter 579 Park Place Saline, MI 48176 734-944-0094 > Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 >=20 >=20 > On Fri, Jun 24, 2016 at 7:19 AM, Haynes, Dan > wrote: > I just reviewed the latest version of the I-D and found only one = occurrence of =E2=80=9Cpre-assessment=E2=80=9D in Appendix I.3 which = says: >=20 >=20 >=20 > =E2=80=9CWithin the SACM Architecture, the assessment task would be = handled by the Evaluator component. If pre-assessment data is used, = this would be stored on and obtained from a Data Store component.=E2=80=9D= >=20 >=20 >=20 > I think this could easily be re-written to remove =E2=80=9Cpre-assessmen= t=E2=80=9D and say: >=20 >=20 >=20 > =E2=80=9CWithin the SACM Architecture, the assessment task would be = handled by the Evaluator component. If previously collected data is = used, it would be obtained from a Data Store component.=E2=80=9D >=20 >=20 >=20 > I think we could also rewrite the latest revision of the text (from my = Jun 16th message) to read as follows (which also makes use of SACM tasks = which was suggested at the last virtual interim meeting). >=20 >=20 >=20 > "The collection of additional endpoint information for the purpose of = vulnerability assessment does not necessarily need to be a pull by the = vulnerability assessment capability. Over time, some new pieces of = information that are needed during common types of assessments might be = identified. An endpoint management capability can be reconfigured to = have this information delivered automatically. This avoids the need to = trigger additional Collection Tasks to gather this information during = assessments, streamlining the assessment process. Likewise, it might be = observed that certain information delivered by an endpoint management = capability is rarely used. In this case, it might be useful to = re-configure the endpoint management capability to no longer collect = this information to reduce network and processing overhead. Instead, a = new Collection Task can be triggered to gather this data on the rare = occasions when it is needed." >=20 > Let me know what you think of these changes. If they seem reasonable, = I can integrate them into the next revision of the I-D and we can close = out this issue. >=20 >=20 >=20 > Thanks, >=20 > Danny >=20 >=20 >=20 > From: Adam Montville [mailto:adam.w.montville@gmail.com = ] > Sent: Saturday, June 18, 2016 1:36 PM > To: Ira McDonald > > Cc: Haynes, Dan >; Jerome = Athias >; = sacm@ietf.org >=20 > Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario = Issue #5 - Change Detection with an Endpoint Management Capability >=20 >=20 >=20 > My concern does not stem from using the prefix =E2=80=9Cpre=E2=80=9D, = as much as it is about the definition of the term assessment and how = we=E2=80=99re using pre-assessment often, which turns into =E2=80=9Ccollec= ting before the process of collecting=E2=80=9D, which is confusing at = best. >=20 >=20 >=20 > The situation we are looking at feels very much like a cache miss. We = look for some information in one place and don=E2=80=99t find it, so we = have to go fetch it from somewhere else. >=20 >=20 >=20 >=20 >=20 >=20 >=20 > On Jun 18, 2016, at 8:41 AM, Ira McDonald > wrote: >=20 >=20 >=20 > Hi, >=20 > I share Adam's distaste for "pre-" anything. >=20 > Perhaps "external collection" - defined as simply using any non-SACM > protocol to forward endpoint posture to a SACM Collector (in this = case, > e.g., a NEA Server)? >=20 > Cheers, > - Ira >=20 >=20 > Ira McDonald (Musician / Software Architect) > Co-Chair - TCG Trusted Mobility Solutions WG > Chair - Linux Foundation Open Printing WG > Secretary - IEEE-ISTO Printer Working Group > Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG > IETF Designated Expert - IPP & Printer MIB > Blue Roof Music / High North Inc > http://sites.google.com/site/blueroofmusic = > http://sites.google.com/site/highnorthinc = > mailto: blueroofmusic@gmail.com > Winter 579 Park Place Saline, MI 48176 734-944-0094 = > Summer PO Box 221 Grand Marais, MI 49839 906-494-2434 = >=20 >=20 > On Fri, Jun 17, 2016 at 6:14 PM, Adam Montville = > > wrote: >=20 >=20 >=20 > I really don=E2=80=99t want to be the one to bring this up, but are we = forgetting > our definition of =E2=80=9Cassessment=E2=80=9D? We borrow, and expand = upon, the term from > RFC5209. Here=E2=80=99s what our terminology draft says: >=20 > Assessment: Defined in [RFC5209] as =E2=80=9Cthe process of collecting = posture for > a set of capabilities on the endpoint (e.g. host-based firewall) such = that > the appropriate validators may evaluate the posture against compliance > policy.=E2=80=9D Within SACM the use of the term is expanded to = support other uses > of collected posture (e.g. reporting, network enforcement, = vulnerability > detection, license management). The phrase =E2=80=9Cset of = capabilities on the > endpoint=E2=80=9D includes: hardware and software installed on the = endpoint. >=20 > But, in the text proposed, and in general, we are talking about = collection > in the context of *pre*-assessment. So, a collection before =E2=80=9Cth= e process > of collecting posture=E2=80=A6=E2=80=9D, which seems off to me. >=20 > Do we really mean to say, pre-evaluation? Or, do we need =E2=80=9Cpre=E2= =80=9D anything? > There is data available at the time of evaluation or there is not. If > there is not, we go grab it, or indicate that it needs to be grabbed = during > the next collection opportunity, and we indicate whether it=E2=80=99s = something we > need to grab all the time, or just this once. >=20 > Thoughts? >=20 > Adam >=20 >=20 >=20 > On Jun 16, 2016, at 12:15 PM, Haynes, Dan > wrote: >=20 > Off list, I received a suggested update to this text from Charles. I = was > hoping to discuss it at yesterday=E2=80=99s virtual interim meeting, = however, I ran > out of time. As a result, I would like to propose the updated text as = it > seemed clearer and more concise than what I had proposed, but, says = the > same thing. >=20 > The new text would read as follows (based on the updated draft posted = on > 6/8/16 [1]). >=20 > "Supplemental collection of endpoint information for the purposes = of=E2=80=A6Over > time, some new pieces of information that are needed during common = types of > assessments might be identified. Pre-assessment collection can be > reconfigured to have this information delivered automatically. This = avoids > the need for regular supplemental collections to gather this = information > during assessments, streamlining the assessment process. Likewise, it = might > be observed that certain information delivered during pre-assessment > collection is rarely used. In this case, it might be useful to stop > pre-assessment collection of this information to reduce network and > processing overhead. Instead, supplemental collection can be used to = gather > this data on the rare occasions when it is needed." >=20 > Please let me know your thoughts on this proposed text by Tuesday July = 21 > st. >=20 > Thanks, >=20 > Danny >=20 > [1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt = >=20 >=20 >=20 > *From:* Jerome Athias [mailto:athiasjerome@gmail.com = > >] > *Sent:* Tuesday, June 07, 2016 12:08 AM > *To:* Haynes, Dan > > *Cc:* sacm@ietf.org > *Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario = Issue > #5 - Change Detection with an Endpoint Management Capability >=20 > This rewrite is imho better > Thanks >=20 > On Tuesday, 7 June 2016, Haynes, Dan > wrote: >=20 > Based on the feedback, would the following rewrite of the paragraph = help > clarify things? >=20 > "In many cases, the endpoint information...Under certain deployment > scenarios, as > the vulnerability management capability processes vulnerability = detection > data over > time, the endpoint management capability may learn about additional > detection > information that it was previously not collecting and push that > information to the > vulnerability management capability where it can support future > assessments. The > pushing of this data may potentially be driven by some trigger (e.g., > change > in software inventory, policy, network connectivity status, etc.)." >=20 > While this potentially creates a coupling between the vulnerability > management capability and the endpoint management capability, as = written, I > think it will be left to the implementer of those capabilities to = decide. > I think the point is just that you could do something like this to = improve > the vulnerability assessment. >=20 > If we still don't have consensus on this, another approach might be to > just remove this text all together as I don't think doing so would = preclude > an implementer from supporting functionality like this in their = product. >=20 > Thoughts? >=20 > Thanks, >=20 > Danny >=20 >=20 >=20 > -----Original Message----- > From: Jerome Athias [mailto:athiasjerome@gmail.com = ] > Sent: Saturday, June 04, 2016 2:49 AM > To: Haynes, Dan > > Cc: sacm@ietf.org > Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario = Issue >=20 > #5 >=20 >=20 > - Change Detection with an Endpoint Management Capability >=20 > While the scenario provided by Adam is valid, if your concern is that >=20 > "the >=20 >=20 > information beyond that" would be "supplemental endpoint > information": > I don't see a scenario where an endpoint management capability would = have > to push -supplemental- information to the vulnerability assessment > capability (what would the vulnerability assessment capability do with > 'unknown' additional information) >=20 > So I think the issue is to change "the information beyond that" to >=20 > something >=20 >=20 > like "the updated information" >=20 >=20 >=20 > 2016-05-18 16:15 GMT+03:00 Haynes, Dan >: >=20 >=20 > During yesterday=E2=80=99s virtual interim meeting, we discussed = various open > issues with respect to the Vulnerability Assessment Scenario [1] as a > result of feedback that we received on the draft which you can see > here [2][3]. The slide=E2=80=99s from the meeting can be found here = [4]. >=20 >=20 >=20 > One issue that we didn=E2=80=99t have a chance to discuss because we = ran out > of time was whether or not an endpoint management capability has the > ability to push supplemental endpoint information to the vulnerability > assessment capability. This question came out of a review of the > following text from the Vulnerability Assessment Scenario >=20 > (specifically the >=20 >=20 > last sentence). >=20 >=20 >=20 >=20 >=20 > =E2=80=9CIn many cases, the endpoint information needed to determine = an > endpoint=E2=80=99s vulnerability status will have been previously >=20 > collected by the Endpoint Management Capability and available in a > Repository. However, in other cases, the necessary >=20 > endpoint information will not be readily available in a Repository and > a targeted collection will be necessary. Of course, >=20 > an implementation of an endpoint management capability may prefer to > enable operators to perform targeted collection under >=20 > certain circumstances, even when sufficient information can be > provided by the endpoint management capability (e.g. there >=20 > may be freshness requirements for information). Targeted collection of > endpoint information for the purpose of vulnerability >=20 > assessment does not necessarily need to be a pull by the vulnerability > assessment capability. Under certain deployment >=20 > scenarios, once the necessary detection information is known, the > information beyond that which is available in the endpoint >=20 > management capability can be pushed to the vulnerability assessment > capability by the endpoint whenever that information >=20 > changes.=E2=80=9D >=20 >=20 >=20 > Our main question is whether or not pushing information from the > endpoint management capability to the vulnerability assessment > capability is actually possible because it would not necessarily know > what information it needs to push prior to the server requesting it > (in which case it is probably considered a pull)? Is there a > situation where the endpoint would know, in advance, what additional > information is needed for an assessment without a server requesting = it? >=20 >=20 >=20 > If you have any thoughts on this issue, please provide feedback by May >=20 > 31st. >=20 >=20 > We are planning to have an updated version of the scenario for June >=20 > 8th. >=20 >=20 >=20 >=20 >=20 > Thanks, >=20 > Danny >=20 >=20 >=20 > [1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenario/ = >=20 > [2] https://github.com/sacmwg/vulnerability-scenario/pull/3 = >=20 > [3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.html = >=20 > [4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/ = > (looks like the slides are not available just yet, but, I suspect they > should be > soon) >=20 >=20 >=20 >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = >=20 >=20 >=20 > _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = >=20 >=20 >=20 --Apple-Mail=_55EF6AB5-E3EC-4E17-B79C-1C6DD7C138E0 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 +1 (contributor)

On Jun 24, 2016, at 7:43 AM, = Ira McDonald <blueroofmusic@gmail.com> wrote:

Hi Danny,

+1

Cheers,
- Ira


Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
Winter  579 Park Place  Saline, MI  = 48176  734-944-0094
Summer  PO Box 221  = Grand Marais, MI 49839  906-494-2434


On Fri, Jun 24, 2016 at 7:19 = AM, Haynes, Dan <dhaynes@mitre.org> wrote:

I just reviewed the latest version of the I-D and = found only one occurrence of =E2=80=9Cpre-assessment=E2=80=9D in = Appendix I.3 which says:

 

=E2=80=9CWithin the SACM Architecture, the = assessment task would be handled by the Evaluator component.  If = pre-assessment data is used, this would be stored on and obtained from a Data Store component.=E2=80=9D

 

I think this could easily be re-written to remove = =E2=80=9Cpre-assessment=E2=80=9D and say:

 

=E2=80=9CWithin the SACM Architecture, the = assessment task would be handled by the Evaluator component. If = previously collected data is used, it would be obtained from a Data Store component.=E2=80=9D

 

I think we could also rewrite the latest revision = of the text (from my Jun 16th message) to read as follows (which also makes use of SACM = tasks which was suggested at the last virtual interim meeting).

 

"The collection of additional endpoint information = for the purpose of vulnerability assessment does not necessarily need to = be a pull by the vulnerability assessment capability.  Over time, some new pieces of information that are needed during common = types of assessments might be identified. An endpoint management = capability can be reconfigured to have this information delivered = automatically. This avoids the need to trigger additional Collection Tasks to gather this information during assessments, = streamlining the assessment process. Likewise, it might be observed that = certain information delivered by an endpoint management capability is = rarely used. In this case, it might be useful to re-configure the endpoint management capability to no longer collect = this information to reduce network and processing overhead. Instead, a = new Collection Task can be triggered to gather this data on the rare = occasions when it is needed."

Let me know what you think of these changes.  = If they seem reasonable, I can integrate them into the next revision of = the I-D and we can close out this issue.

 

Thanks,

Danny

 

=

From: Adam Montville [mailto:adam.w.montville@gmail.com]
Sent: Saturday, June 18, 2016 1:36 PM
To: Ira McDonald <blueroofmusic@gmail.com>
Cc: Haynes, Dan <dhaynes@mitre.org>; Jerome Athias = <athiasjerome@gmail.com>; sacm@ietf.org


Subject: Re: [sacm] FOR REVIEW: Vulnerability = Assessment Scenario Issue #5 - Change Detection with an Endpoint = Management Capability

 

My concern does not stem from = using the prefix =E2=80=9Cpre=E2=80=9D, as much as it is about the = definition of the term assessment and how we=E2=80=99re using = pre-assessment often, which turns into =E2=80=9Ccollecting before the = process of collecting=E2=80=9D, which is confusing at best.

 

The situation we are looking at = feels very much like a cache miss.  We look for some information in = one place and don=E2=80=99t find it, so we have to go fetch it from = somewhere else.

 

 

 

On Jun 18, 2016, at 8:41 AM, Ira = McDonald <blueroofmusic@gmail.com> wrote:

 

Hi,

I share Adam's distaste for "pre-" anything.

Perhaps "external collection" - defined as simply using any non-SACM
protocol to forward endpoint posture to a SACM Collector (in this = case,
e.g., a NEA Server)?

Cheers,
- Ira


Ira McDonald (Musician / Software Architect)
Co-Chair - TCG Trusted Mobility Solutions WG
Chair - Linux Foundation Open Printing WG
Secretary - IEEE-ISTO Printer Working Group
Co-Chair - IEEE-ISTO PWG Internet Printing Protocol WG
IETF Designated Expert - IPP & Printer MIB
Blue Roof Music / High North Inc
http://sites.google.com/site/blueroofmusic
http://sites.google.com/site/highnorthinc
mailto: blueroofmusic@gmail.com
Winter  579 Park Place  Saline, MI  48176  734-944-0094
Summer  PO Box 221  Grand Marais, MI 49839  906-494-2434


On Fri, Jun 17, 2016 at 6:14 PM, Adam Montville <adam.w.montville@gmail.com>
wrote:


I really don=E2=80=99t want to be the one to bring this up, = but are we forgetting
our definition of =E2=80=9Cassessment=E2=80=9D?  We borrow, and = expand upon, the term from
RFC5209.  Here=E2=80=99s what our terminology draft says:

Assessment: Defined in [RFC5209] as =E2=80=9Cthe process of collecting = posture for
a set of capabilities on the endpoint (e.g. host-based firewall) such = that
the appropriate validators may evaluate the posture against = compliance
policy.=E2=80=9D  Within SACM the use of the term is expanded to = support other uses
of collected posture (e.g. reporting, network enforcement, = vulnerability
detection, license management).  The phrase =E2=80=9Cset of = capabilities on the
endpoint=E2=80=9D includes: hardware and software installed on the = endpoint.

But, in the text proposed, and in general, we are talking about = collection
in the context of *pre*-assessment.  So, a collection before =E2=80=9C= the process
of collecting posture=E2=80=A6=E2=80=9D, which seems off to me.

Do we really mean to say, pre-evaluation?  Or, do we need =E2=80=9Cpr= e=E2=80=9D anything?
There is data available at the time of evaluation or there is not.  = If
there is not, we go grab it, or indicate that it needs to be grabbed = during
the next collection opportunity, and we indicate whether it=E2=80=99s = something we
need to grab all the time, or just this once.

Thoughts?

Adam



On Jun 16, 2016, at 12:15 PM, Haynes, Dan <dhaynes@mitre.org> wrote:

Off list, I received a suggested update to this text from Charles.  = I was
hoping to discuss it at yesterday=E2=80=99s virtual interim meeting, = however, I ran
out of time.  As a result, I would like to propose the updated text = as it
seemed clearer and more concise than what I had proposed, but, says = the
same thing.

The new text would read as follows (based on the updated draft posted = on
6/8/16 [1]).

"Supplemental collection of endpoint information for the purposes = of=E2=80=A6Over
time, some new pieces of information that are needed during common types = of
assessments might be identified. Pre-assessment collection can be
reconfigured to have this information delivered automatically. This = avoids
the need for regular supplemental collections to gather this = information
during assessments, streamlining the assessment process. Likewise, it = might
be observed that certain information delivered during pre-assessment
collection is rarely used. In this case, it might be useful to stop
pre-assessment collection of this information to reduce network and
processing overhead. Instead, supplemental collection can be used to = gather
this data on the rare occasions when it is needed."

Please let me know your thoughts on this proposed text by Tuesday July = 21
st.

Thanks,

Danny

[1] https://www.ietf.org/id/draft-ietf-sacm-vuln-scenario-00.txt



*From:* Jerome Athias [mailto:athiasjerome@gmail.com
<athiasjerome@gmail.com>]
*Sent:* Tuesday, June 07, 2016 12:08 AM
*To:* Haynes, Dan <dhaynes@mitre.org>
*Cc:* sacm@ietf.org
*Subject:* Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario = Issue
#5 - Change Detection with an Endpoint Management Capability

This rewrite is imho better
Thanks

On Tuesday, 7 June 2016, Haynes, Dan <dhaynes@mitre.org> wrote:

Based on the feedback, would the following rewrite of the paragraph = help
clarify things?

"In many cases, the endpoint information...Under certain deployment
scenarios, as
the vulnerability management capability processes vulnerability = detection
data over
time, the endpoint management capability may learn about additional
detection
information that it was previously not collecting and push that
information to the
vulnerability management capability where it can support future
assessments. The
pushing of this data may potentially be driven by some trigger (e.g.,
change
in software inventory, policy, network connectivity status, etc.)."

While this potentially creates a coupling between the vulnerability
management capability and the endpoint management capability, as = written, I
think it will be left to the implementer of those capabilities to = decide.
I think the point is just that you could do something like this to = improve
the vulnerability assessment.

If we still don't have consensus on this, another approach might be = to
just remove this text all together as I don't think doing so would = preclude
an implementer from supporting functionality like this in their = product.

Thoughts?

Thanks,

Danny


-----Original Message-----
From: Jerome Athias [mailto:athiasjerome@gmail.com]
Sent: Saturday, June 04, 2016 2:49 AM
To: Haynes, Dan <dhaynes@mitre.org>
Cc: sacm@ietf.org
Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario = Issue

#5

- Change Detection with an Endpoint Management Capability

While the scenario provided by Adam is valid, if your concern is that

"the

information beyond that" would be "supplemental endpoint
information":
I don't see a scenario where an endpoint management capability would = have
to push -supplemental- information to the vulnerability assessment
capability (what would the vulnerability assessment capability do = with
'unknown' additional information)

So I think the issue is to change "the information beyond that" to

something

like "the updated information"



2016-05-18 16:15 GMT+03:00 Haynes, Dan <dhaynes@mitre.org>:

During yesterday=E2=80=99s virtual interim meeting, we = discussed various open
issues with respect to the Vulnerability Assessment Scenario [1] as a
result of feedback that we received on the draft which you can see
here [2][3].  The slide=E2=80=99s from the meeting can be found = here [4].



One issue that we didn=E2=80=99t have a chance to discuss because we ran = out
of time was whether or not an endpoint management capability has the
ability to push supplemental endpoint information to the = vulnerability
assessment capability.  This question came out of a review of = the
following text from the Vulnerability Assessment Scenario

(specifically the

last sentence).




=E2=80=9CIn many cases, the endpoint information needed to determine = an
endpoint=E2=80=99s vulnerability status will have been previously

collected by the Endpoint Management Capability and available in a
Repository. However, in other cases, the necessary

endpoint information will not be readily available in a Repository = and
a targeted collection will be necessary.  Of course,

an implementation of an endpoint management capability may prefer to
enable operators to perform targeted collection under

certain circumstances, even when sufficient information can be
provided by the endpoint management capability (e.g. there

may be freshness requirements for information). Targeted collection = of
endpoint information for the purpose of vulnerability

assessment does not necessarily need to be a pull by the = vulnerability
assessment capability.  Under certain deployment

scenarios, once the necessary detection information is known, the
information beyond that which is available in the endpoint

management capability can be pushed to the vulnerability assessment
capability by the endpoint whenever that information

changes.=E2=80=9D



Our main question is whether or not pushing information from the
endpoint management capability to the vulnerability assessment
capability is actually possible because it would not necessarily know
what information it needs to push prior to the server requesting it
(in which case it is probably considered a pull)?  Is there a
situation where the endpoint would know, in advance, what additional
information is needed for an assessment without a server requesting = it?



If you have any thoughts on this issue, please provide feedback by May

31st.

We are planning to have an updated version of the scenario = for June

8th.




Thanks,

Danny



[1] https://datatracker.ietf.org/doc/draft-coffin-sacm-vuln-scenari= o/

[2] https://github.com/sacmwg/vulnerability-scenario/pull/3

[3] https://www.ietf.org/mail-archive/web/sacm/current/msg03958.htm= l

[4] https://datatracker.ietf.org/doc/slides-interim-2016-sacm-3-1/<= /a>
(looks like the slides are not available just yet, but, I suspect = they
should be
soon)




_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm


_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm



_______________________________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

 



= --Apple-Mail=_55EF6AB5-E3EC-4E17-B79C-1C6DD7C138E0-- --Apple-Mail=_29FBB12A-5A87-4B8F-9225-B2E274C0A8EF Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXcY0+AAoJEDEhyx7etgAB76kP/0jH8MBRQpH2t2EComIBfz+W BknGWH63F2FAfIFAXtKJTkL5qWxcrFFMXs7s8TU84WgLHzIAxghoSyaoxsmI6hoZ thFjOTB6EYbiqY+BhC5zt59nJ10DZeGMpmTx493hvYprk+8qb9CMl4CakRtbw7pv 7eir7APN/UXVjUwlrbCxCpnGyeCUTrhIYyXSDL2tlRQUCrkkTtMfpd5/w1H+IrZ1 TzrzymzILT6/Olzw1eneXR08QmnCsxLWlzmVqffBbgydMQq9Wm+8bEUfut0W+01r PnKg3QSDw3fSZoA3fbL6sCOVKM/N8CFO5JXl53BPj7yJGLnxYMcCMNtpTjaWHHUd uKIBEqIEh1+Dt79wOcXjmMWVuTuIrFG5yb3RxtzsHOrcLd6ztSpkyj975W8qDbVG cMRgzurBrfj0bXlefBxl7SpimaHo0GvbpIRVkFiSqdNvcgjZY8U/gdRCMG11sd76 hnlENibtWSHLhWoOpMITg5Ul30cILY+K63cIvFmahs1bHtJTUVVpR/YItIk2Dxso 7D2Sy9yyfEX1iYILmROFf7wc/qGBRA0hBaTgGJsGTa3pppnkQRDXtljKceQBUlxr vcNGHT1vcrqPUVYyBzT8dB69M0YwmUneFNETwDKXtTSD6P+4TRDWxFNhujmCJF3j jkXrEp8THEGnTuA5ygok =JgoC -----END PGP SIGNATURE----- --Apple-Mail=_29FBB12A-5A87-4B8F-9225-B2E274C0A8EF-- From nobody Mon Jun 27 13:35:31 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DC36112D8C2 for ; Mon, 27 Jun 2016 13:35:30 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nto-HoPjhnvi for ; Mon, 27 Jun 2016 13:35:28 -0700 (PDT) Received: from mail-oi0-x22f.google.com (mail-oi0-x22f.google.com [IPv6:2607:f8b0:4003:c06::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 52BA912D8BC for ; Mon, 27 Jun 2016 13:35:28 -0700 (PDT) Received: by mail-oi0-x22f.google.com with SMTP id f189so216951479oig.3 for ; Mon, 27 Jun 2016 13:35:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=2DoibSDepL07HxymAmzJwmTEvH/WVjYRIf3HbJfTiTU=; b=yN6Z/tQrgYlxVPEiYphgL45Bpd/gpJx84qAKWTQi4g2sQ4YQkpHhld0brei6mMq5Js bFZXLbfwAeT0uOkS1comrkN4od6IH/ttWqE5wbOtmV6AO6hsG090ncou5p57fgm6ug4q pKPjZ9reaoB6KQWVpfCV0khNC4xosyiGMNkwCuSHfy1UuEWinvMJIJ0yUjZ9Ea2wgEEs LG/Hv999HIlxBfi1o4rXgcb6bKL/4s/lQ6AoyDjYIiw0A+851MPlfrxRJF1xRMQxBmXy 8u3kOLMOGdvjNHoB/hrBg1IZ99bW5oZcTIrjsRmb3rgtXScI0pn3Vd3R8JcOV4ZulpCu x6Og== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=2DoibSDepL07HxymAmzJwmTEvH/WVjYRIf3HbJfTiTU=; b=Y0sSJEAw+k4qz4v/zjgPRP8wBSbJiMw7pMp6qgb/gUydC/eWfcBOSyj8PdyszJrub2 0lphN2rHz9sp0GLYMdyV3dwrzayJDyWI/3taOZruNAtcdndGDo8lvjg+/2goFESWmIIZ wkcNmW7KRfCrgHYmrTRvu+OoQLTNsEWo3wUamHEgR3tgMYY9Tz940+WGUkgFvTonjxHk lBpwyNU4S4R/eThOx5Xu5GudaYaq4cMmwuO2oQeMU1DY8MeoaHeaGIAfQl+7Gg8eX4h/ ZKXeg0wZb9xpMauarCeDt3ZmNctsFVNsIfqtkCcMuO+XbXHIpzck1YTAnDIj2p3/+qQT R80Q== X-Gm-Message-State: ALyK8tIIrUh1Jmg9GheEQ3B8cMLT2Mz5zB7RbSZXqtq4rhy9hGLUpGR29ILhaKUu2ZS03w== X-Received: by 10.157.44.72 with SMTP id f66mr1871841otb.77.1467059727586; Mon, 27 Jun 2016 13:35:27 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id x143sm9503128oix.22.2016.06.27.13.35.26 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 27 Jun 2016 13:35:26 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_0445BD57-884C-44EB-B660-EA729BBA8042"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Mon, 27 Jun 2016 15:35:24 -0500 Message-Id: <4534FC00-A3DE-4DE3-8528-93B362B4C375@gmail.com> References: To: "Haynes, Dan" X-Mailer: Apple Mail (2.3124) Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #18 - Review Appendices and Include References X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jun 2016 20:35:31 -0000 --Apple-Mail=_0445BD57-884C-44EB-B660-EA729BBA8042 Content-Type: multipart/alternative; boundary="Apple-Mail=_49C8AEE7-AEF3-4AFE-BAEE-66C114A9EAF3" --Apple-Mail=_49C8AEE7-AEF3-4AFE-BAEE-66C114A9EAF3 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 This looks good to me, thanks Danny! > On Jun 24, 2016, at 9:08 AM, Haynes, Dan wrote: >=20 > We have a tracker that recommends reviewing the appendices and adding = the appropriate references to them throughout the body of the I-D [1]. = Right now, the majority of the appendices are not referenced in the body = of the I-D. >=20 > I went through the body of the I-D and took a pass at referencing = appendices where I thought it made sense with the exception of = =E2=80=9CAppendix A - Change Log=E2=80=9D. I will move that to a = section between =E2=80=9CSecurity Considerations=E2=80=9D and = =E2=80=9CReferences=E2=80=9D. Also, please note that I did not update = the appendices so they appear in the order in which they are referenced. = I will do that in the I-D once we agree on the changes that we want to = make. >=20 > Anyways, please review the attached changes and let me know if they = seem reasonable to incorporate into the next revision of the = Vulnerability Assessment Scenario I-D. Also, please let me know if you = have suggestions for better places to make the references or if you feel = strongly that a particular appendix is no longer needed. >=20 > Thanks, >=20 > Danny >=20 > [1] https://github.com/sacmwg/vulnerability-scenario/issues/18 = >=20 > = _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = --Apple-Mail=_49C8AEE7-AEF3-4AFE-BAEE-66C114A9EAF3 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 This looks good to me, thanks Danny!

On = Jun 24, 2016, at 9:08 AM, Haynes, Dan <dhaynes@mitre.org> = wrote:

We have a tracker that = recommends reviewing the appendices and adding the appropriate = references to them throughout the body of the I-D [1].  Right now, = the majority of the appendices are not referenced in the body of the = I-D. 
 
I went through the body of the I-D and took a pass at = referencing appendices where I thought it made sense with the exception = of =E2=80=9CAppendix A - Change Log=E2=80=9D.  I will move that to = a section between =E2=80=9CSecurity Considerations=E2=80=9D and = =E2=80=9CReferences=E2=80=9D.  Also, please note that I did not = update the appendices so they appear in the order in which they are = referenced.  I will do that in the I-D once we agree on the changes = that we want to make. 
 
Anyways, please review the attached = changes and let me know if they seem reasonable to incorporate into the = next revision of the Vulnerability Assessment Scenario I-D.  Also, = please let me know if you have suggestions for better places to make the = references or if you feel strongly that a particular appendix is no = longer needed.
 
Thanks,
 
Danny
 
 
<add-vas-r= eferences.docx>_______________________________________________
sacm mailing = list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_49C8AEE7-AEF3-4AFE-BAEE-66C114A9EAF3-- --Apple-Mail=_0445BD57-884C-44EB-B660-EA729BBA8042 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXcY4MAAoJEDEhyx7etgABOi8QAKf4ysGCzBWT1YyYL+59nLeg VOudm0XbZVR/H6TLAH2J58Hiaepv2cbzBLNaalL28wCyMjAMi+JbHvF9tLXr6UoR VZ1bctQ1uANPy9IbpN0P8j6FwrPsHsYNfNZdnkjonZEseDkhxvd39JQqsRNzNbaX g8f1euXYw0+hAEg4u8iteJ+m7MhW4kdCqycYXp2nDgXQvfWRgh7Oy2wV4add8heh UzOICGVEO0AIiLb/Uuu+aty3eKes4VMxPC4OYBRpc9/KxH74r/9s0jsQM9WKbcqX xOmAMkIKTg8fgb43VA4cLV8S7SZmSUgPKL9JvlmcA8Z0KfKR12GPeVl2ditJ+ZTD uMsxtmzU90kAtUPguD/CBLWnS+6NB+GUvrNfwSaeJO+eBQ6GU77MdV5isfR8zxAb FFNjejKNQASxFn/ybpbdDac1rYY1Qb2s5gwKcIi+mKTIZoJVyD9mWwtm3t34B00g czFMcJPQphU+4CktSfU3a65HxphuOHp/mnSU3JZhswkxbgvFXptHajDPVeTUVcEe nEgWqe4yVz8/5kMJhKaIznN3I/dGFaxyNLNdlFYofb9btHjGyAtDQcX6+u6KlfBa 5oo7mQGPj9SIHOpCWlb1CZ5EGDvV5XZCOX932dLY3PkV+8UkVlgZ3gQuwHon3ZBW LDYFLE+Wjc89smqxB6/l =RyS3 -----END PGP SIGNATURE----- --Apple-Mail=_0445BD57-884C-44EB-B660-EA729BBA8042-- From nobody Mon Jun 27 13:40:06 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 6D60812D8D5 for ; Mon, 27 Jun 2016 13:40:05 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.699 X-Spam-Level: X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OweGRFODcVoZ for ; Mon, 27 Jun 2016 13:40:03 -0700 (PDT) Received: from mail-oi0-x22a.google.com (mail-oi0-x22a.google.com [IPv6:2607:f8b0:4003:c06::22a]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 323B612D8CC for ; Mon, 27 Jun 2016 13:40:03 -0700 (PDT) Received: by mail-oi0-x22a.google.com with SMTP id u201so216870506oie.0 for ; Mon, 27 Jun 2016 13:40:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:mime-version:from:in-reply-to:date:cc:message-id:references :to; bh=HRytdegyqLAd1YqFrhA4j7sVMtLRTuaH8bnnCgVJVic=; b=Xzxt1Btw8A3u7GEWKnun6HDaP5fx/iBJGyJNk/H112944m/V5xLvXUplnB0PRi90Oe zfP9gwHgEucBKo514MRJQz7IDTGc6Ma/Y7x4xwcVtkLF+sIW3aHeYTgwuzGhEbOzyKvW E1NHQoBBFvO+WC6O4zfPiZMGV+GGztGBWKIyZkHynfr3nYeCZdLmxSO6CclMgGKtQEFN Dsc4xIAX2er7Lik8+OWSW1EwHiuvnCOUa6oEUmIwB+pCW9nVBKXsHUOBXz3nCuQeOnkd WJuXOeptlfFDHjaRX9dd7RbXJFlcYTeQF2wiNVr7KRG/K+/JIYBpVgnAemf0/HSgYWEH S+og== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:mime-version:from:in-reply-to:date:cc :message-id:references:to; bh=HRytdegyqLAd1YqFrhA4j7sVMtLRTuaH8bnnCgVJVic=; b=GrRQFeBBiE1oJI+WibzUvBWdZbkYQQbWrr+ndwAgfLTvgliLHZt2CaraHoJlgq0Xs3 971nLJ4S+gBO98oqFP877NKA8Bilm6Xp5oQnNawuO6aoTcmgleF1Zie1nqrYsyrvcHqM dVB1poeT8MhOUUF14rnPpcli2CNEC+TzB/anuOJPJefK8ORHqiPqfQcc5nOCj/NNZ2Ax Y5vNJR8ceR05cWP3lFihMZtaEQfYoGk3n9OXj84ki6mhh6eB32jbTFLUST+57CKQlnQD AT6bcOMLYRsE+B6wOM9uh/BQ2bt0S/PtL9hM9iYsO4qtum9QtxRBQkgksrXJUM8besSy Gxjg== X-Gm-Message-State: ALyK8tLEQ6AVuWckJ4g20NLjZrYzhvBXlA+JvLlTtK7jUQNPzmrkBOH/2VfcB11syWSR5Q== X-Received: by 10.202.179.3 with SMTP id c3mr2007192oif.39.1467060001934; Mon, 27 Jun 2016 13:40:01 -0700 (PDT) Received: from adams-mbp.attlocal.net (99-64-100-131.lightspeed.austtx.sbcglobal.net. [99.64.100.131]) by smtp.gmail.com with ESMTPSA id r69sm9622280ota.32.2016.06.27.13.40.00 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Mon, 27 Jun 2016 13:40:01 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 9.3 \(3124\)) Content-Type: multipart/signed; boundary="Apple-Mail=_830DDB55-D73E-4B57-849B-8ACDE35FD6B8"; protocol="application/pgp-signature"; micalg=pgp-sha512 X-Pgp-Agent: GPGMail 2.6b2 From: Adam Montville In-Reply-To: Date: Mon, 27 Jun 2016 15:39:59 -0500 Message-Id: <5832AFB6-D323-438B-B78C-C99CACACE605@gmail.com> References: To: "Haynes, Dan" X-Mailer: Apple Mail (2.3124) Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #25 - Alignment with SACM Tasks X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Jun 2016 20:40:05 -0000 --Apple-Mail=_830DDB55-D73E-4B57-849B-8ACDE35FD6B8 Content-Type: multipart/alternative; boundary="Apple-Mail=_95FDE4E8-9F8C-4878-9A60-F7B2086DE9E1" --Apple-Mail=_95FDE4E8-9F8C-4878-9A60-F7B2086DE9E1 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii I like this, too, Danny, thanks! > On Jun 27, 2016, at 12:19 PM, Haynes, Dan wrote: >=20 > Out of the last virtual interim meeting, it was suggested that we = better align the Vulnerability Assessment Scenario I-D with the SACM = Tasks defined in the Terminology I-D [1]. As a result, we added tracker = #25 to Vulnerability-Scenario repository on GitHub [2]. >=20 > Attached is a first pass at the updates to the Vulnerability = Assessment Scenario I-D that incorporates SACM Tasks. Please review the = attached changes and let me know if they seem reasonable to incorporate = into the next revision of the Vulnerability Assessment Scenario I-D. = Also, please let me know if there is anything I missed or if anything = needs further clarification. >=20 > Thanks, >=20 > Danny >=20 > [1] https://www.ietf.org/id/draft-ietf-sacm-terminology-09.txt = > [2] https://github.com/sacmwg/vulnerability-scenario/issues/25 = _______________________________________________ > sacm mailing list > sacm@ietf.org > https://www.ietf.org/mailman/listinfo/sacm = --Apple-Mail=_95FDE4E8-9F8C-4878-9A60-F7B2086DE9E1 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii I like this, too, Danny, thanks!

On = Jun 27, 2016, at 12:19 PM, Haynes, Dan <dhaynes@mitre.org> = wrote:

Out of the last virtual = interim meeting, it was suggested that we better align the Vulnerability = Assessment Scenario I-D with the SACM Tasks defined in the Terminology = I-D [1].  As a result, we added tracker #25 to = Vulnerability-Scenario repository on GitHub  [2].
 
Attached = is a first pass at the updates to the Vulnerability Assessment Scenario = I-D that incorporates SACM Tasks.  Please review the attached = changes and let me know if they seem reasonable to incorporate into the = next revision of the Vulnerability Assessment Scenario I-D.  Also, = please let me know if there is anything I missed or if anything needs = further clarification.
 
Thanks,
 
Danny
 
[2] https://github.com/sacmwg/vulnerability-scenario/issues/25<= o:p class=3D"">
<vas-task-= edits.docx>_______________________________________________
sacm mailing = list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

= --Apple-Mail=_95FDE4E8-9F8C-4878-9A60-F7B2086DE9E1-- --Apple-Mail=_830DDB55-D73E-4B57-849B-8ACDE35FD6B8 Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename=signature.asc Content-Type: application/pgp-signature; name=signature.asc Content-Description: Message signed with OpenPGP using GPGMail -----BEGIN PGP SIGNATURE----- Comment: GPGTools - https://gpgtools.org iQIcBAEBCgAGBQJXcY8fAAoJEDEhyx7etgAB6SAP/iKRCGjNFpUDdggpU3gfsdvB 5/xnbvOtRqfP8lIC3S5bxhXtM4dJcxRSCCy6c/8bZoWcTN0slq7t1yH/Ic5Rzq0u ftLAHGBHoLM4zmKeZmNtGw6kSHeokcBT7+JZZD32RuJb5fpWlUF3xLvHk6Fgk0lW W8w4cQ/9vlKH0Tfj0i7LPcytGzpboQOuFeKZ6gPy0kpG9eejzR+CpRFBfIJ8nUCs 4HJfzEEbiQ+E+ZTGZF/KRcteuQxbLiPn2WbM6JU5w0B4PllI0+SwZXiOd4YBzTHU ApZdIDZlZI4Gdk8khc1HZXqwct+U/lg3nwrH30j9jHUp2Bva6g1uhR/2I4uEqMqp fwXIztzX9fuW8lNJpVDzsFoSGtiLraLiqxyTt0u/VRuTbnIKu5XFQ2LObJvXDvSy bkSpIciRmNJG6+fajvCx9Hlj/moFiZaZjPpxxIMXyi5eXHnkSrkfpmLIQkIp91yp 7Vjsv5VUkbaGdI/MVgtQCpUAuqe4uX4MU+Bt7NOOGs63APatr/38dM9qkfAwYteJ R8UoD7/m5fd9UjdUpl45xfyoDHnHZxg5nPNTokwCVEq2jRD9CCX/q17nbYDBGz2v B5W77cVS8hLYEyfZ/+zbV/5TjlkI0NfgGWeqfL88BjoSIdQMWlXFXOvcBvhEYNzJ e5sK3F4sLLNfrgHpkQZ2 =NrmM -----END PGP SIGNATURE----- --Apple-Mail=_830DDB55-D73E-4B57-849B-8ACDE35FD6B8-- From nobody Tue Jun 28 05:06:10 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 461D312DE48 for ; Tue, 28 Jun 2016 05:06:07 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OrezAkN1gpc4 for ; Tue, 28 Jun 2016 05:06:04 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id C87D412DE16 for ; Tue, 28 Jun 2016 05:06:03 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 5F94E6C03AE; Tue, 28 Jun 2016 08:06:03 -0400 (EDT) Received: from imshyb02.MITRE.ORG (imshyb02.mitre.org [129.83.29.3]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 3D4BB6C043C; Tue, 28 Jun 2016 08:06:03 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Tue, 28 Jun 2016 08:06:02 -0400 Received: from gcc01-dm2-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Tue, 28 Jun 2016 08:06:02 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=QDmwgNxx2MmsR06UX1KShMDkgXAVw74SMqWwEPflYqw=; b=IWpkXWa6RUJ+lC4aSCGKkdiayrl7dhMF2uoFYoyHkIUF9HZEodkqerFzLLWjRdGu6agTjitnLWod3yAEA+6GGBEwzHlDoEo0uJKihnbPE8TjtFVKCAcBnmgCVIoVaBZ/zgTqa4iVzEfR9zRRp07PE0s9Z8hr76foKlRlbXDuMlw= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1079.namprd09.prod.outlook.com (10.166.116.11) with Microsoft SMTP Server (TLS) id 15.1.523.12; Tue, 28 Jun 2016 12:05:55 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.024; Tue, 28 Jun 2016 12:05:56 +0000 From: "Haynes, Dan" To: Adam Montville , Ira McDonald Thread-Topic: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability Thread-Index: AdGwcFvLuy7EoIEtTYaAcqw7unANPgNvMHSAAHxc8hAAFObXAAHecrngAD5pOoAAIGDrgAAILXcAASCK9UAAAvzEgACnP6gAACCKZiA= Date: Tue, 28 Jun 2016 12:05:55 +0000 Message-ID: References: <69E56E0A-36E1-4529-B192-EDE4AE58E4DD@gmail.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.86] x-ms-office365-filtering-correlation-id: fafa8919-f734-4d82-c9c5-08d39f4c8f6f x-microsoft-exchange-diagnostics: 1; BY2PR09MB1079; 6:nwmx2xpFkhMAdeuvEY6fQwrpO45p0ERfJ6eBiDQf/3TtORFYFRn1RXqLIeN66yIF7bSuUIRNYBGZ9pVDyRRjpjkg65ezPQlYF3FyPvMYbnuQcliDTxMYQ5CzpWJOxA0lw77GXP3/kFDqwaGptwLrdvu6RYdPTalKsUJRkl1HibUaNlXaxUEIg5ZlYCmPiXbs+KbyaoQTbnuuqVa9Z0XLPRLSR89Ld54J5lmqx4sDcUHO5/DPj5a+jm9WCL77bvBEXjtfE/XPUwKC/la8YwDjRJcDzae2HyhRR0gBeVGPo8lbRBTIe0Dz+C5JPyPJeA3kxj6AwWV+QCkee9xNxbd88HIuYfFeMKT9TC6i8gqLpaQ=; 5:1QtwZEitafX4DnTwR7y3uBLxBUnyPy2tZI8M7RIi0LVjjtJHbaVdjj9eEZPuMzfbtN3Eiy5n+Y+V1D7qEv3XSiL4bD2QNIqR9Tfc4hCb7QfK3/PTwe2qzxyI6IYgnIrw+5Qd/9hAeatufXRYte4p+Q==; 24:L+K+mxO00NIIJIxaGaFtBcg9rz7VvgbdqTtvhrgrNvTX8siVlT8n5KPGfhF+D8/OXsm26XUGbeObhKD+m5O7Qmsg7y1IE06bJmob2keW+MU=; 7:1ZzltHgtVqVJS37+n1xO647NM4iBaV4vhAirydlYL1O+tTYyZDCLXxU6MzHoJ4dUbL0B5YqrBYtLWAuemXjNYEwulf0tvqlLhulioD5Lg25E2et4iuHIAtWSxCIX5yNsRaMEr4gSCp228+0JaL24wn9BASMi+yKh81Lt05NmYU6imilSORqKA7qb8HurYijcOmEX0mk+LbFVIDnimEuBh2oELnbYP6LI97WUDU9ySPkzyDDyebdPn6g6+8okCnIlNM0UhFVulJsWt86BwPzW7Q== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1079; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(158342451672863)(120809045254105)(166708455590820)(111039206520245)(211936372134217)(100405760836317)(21748063052155)(211171220733660); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1079; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1079; x-forefront-prvs: 0987ACA2E2 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(76104003)(377424004)(5383002)(189002)(24454002)(51914003)(13464003)(377454003)(199003)(57704003)(478694002)(586003)(87936001)(76576001)(19625215002)(7846002)(68736007)(189998001)(8936002)(77096005)(790700001)(99286002)(101416001)(3846002)(76176999)(33656002)(102836003)(86362001)(19273905006)(2950100001)(2900100001)(19300405004)(122556002)(16236675004)(6116002)(10400500002)(50986999)(5001770100001)(7736002)(97736004)(92566002)(5003600100003)(7696003)(9686002)(7906003)(19580395003)(8676002)(81166006)(81156014)(19609705001)(105586002)(19580405001)(19617315012)(66066001)(74316001)(2906002)(5002640100001)(54356999)(3280700002)(15975445007)(106356001)(93886004)(3660700001)(4326007)(16351025005)(563064011); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1079; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB107882EB6572D4BE51F32C4BA5220BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Jun 2016 12:05:55.9848 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1079 X-OriginatorOrg: mitre.org Archived-At: Cc: Jerome Athias , "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #5 - Change Detection with an Endpoint Management Capability X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 28 Jun 2016 12:06:07 -0000 --_000_BY2PR09MB107882EB6572D4BE51F32C4BA5220BY2PR09MB1078namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB0aGUgZmVlZGJhY2sgSmVyb21lLCBJcmEsIGFuZCBBZGFtIQ0KDQpJZiBhbnlv bmUgZWxzZSBoYXMgdGhvdWdodHMgb24gdGhpcyBjaGFuZ2UsIHBsZWFzZSBsZXQgbWUga25vdy4g IE90aGVyd2lzZSwgYmFzZWQgb24gdGhlIGZlZWRiYWNrIHNvIGZhciwgSSBhbSBwbGFubmluZyB0 byBwdWxsIGluIHRoZSBjaGFuZ2VzIGF0IHRoZSBlbmQgb2YgdGhlIHdlZWsuDQoNClRoYW5rcywN Cg0KRGFubnkNCg0KRnJvbTogQWRhbSBNb250dmlsbGUgW21haWx0bzphZGFtLncubW9udHZpbGxl QGdtYWlsLmNvbV0NClNlbnQ6IE1vbmRheSwgSnVuZSAyNywgMjAxNiA0OjMyIFBNDQpUbzogSXJh IE1jRG9uYWxkIDxibHVlcm9vZm11c2ljQGdtYWlsLmNvbT4NCkNjOiBIYXluZXMsIERhbiA8ZGhh eW5lc0BtaXRyZS5vcmc+OyBKZXJvbWUgQXRoaWFzIDxhdGhpYXNqZXJvbWVAZ21haWwuY29tPjsg c2FjbUBpZXRmLm9yZw0KU3ViamVjdDogUmU6IFtzYWNtXSBGT1IgUkVWSUVXOiBWdWxuZXJhYmls aXR5IEFzc2Vzc21lbnQgU2NlbmFyaW8gSXNzdWUgIzUgLSBDaGFuZ2UgRGV0ZWN0aW9uIHdpdGgg YW4gRW5kcG9pbnQgTWFuYWdlbWVudCBDYXBhYmlsaXR5DQoNCisxIChjb250cmlidXRvcikNCg0K T24gSnVuIDI0LCAyMDE2LCBhdCA3OjQzIEFNLCBJcmEgTWNEb25hbGQgPGJsdWVyb29mbXVzaWNA Z21haWwuY29tPG1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbT4+IHdyb3RlOg0KDQpIaSBE YW5ueSwNCg0KKzENCkNoZWVycywNCi0gSXJhDQoNCklyYSBNY0RvbmFsZCAoTXVzaWNpYW4gLyBT b2Z0d2FyZSBBcmNoaXRlY3QpDQpDby1DaGFpciAtIFRDRyBUcnVzdGVkIE1vYmlsaXR5IFNvbHV0 aW9ucyBXRw0KQ2hhaXIgLSBMaW51eCBGb3VuZGF0aW9uIE9wZW4gUHJpbnRpbmcgV0cNClNlY3Jl dGFyeSAtIElFRUUtSVNUTyBQcmludGVyIFdvcmtpbmcgR3JvdXANCkNvLUNoYWlyIC0gSUVFRS1J U1RPIFBXRyBJbnRlcm5ldCBQcmludGluZyBQcm90b2NvbCBXRw0KSUVURiBEZXNpZ25hdGVkIEV4 cGVydCAtIElQUCAmIFByaW50ZXIgTUlCDQpCbHVlIFJvb2YgTXVzaWMgLyBIaWdoIE5vcnRoIElu Yw0KaHR0cDovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9ibHVlcm9vZm11c2ljDQpodHRwOi8vc2l0 ZXMuZ29vZ2xlLmNvbS9zaXRlL2hpZ2hub3J0aGluYw0KbWFpbHRvOiBibHVlcm9vZm11c2ljQGdt YWlsLmNvbTxtYWlsdG86Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20+DQpXaW50ZXIgIDU3OSBQYXJr IFBsYWNlICBTYWxpbmUsIE1JICA0ODE3NiAgNzM0LTk0NC0wMDk0DQpTdW1tZXIgIFBPIEJveCAy MjEgIEdyYW5kIE1hcmFpcywgTUkgNDk4MzkgIDkwNi00OTQtMjQzNA0KDQpPbiBGcmksIEp1biAy NCwgMjAxNiBhdCA3OjE5IEFNLCBIYXluZXMsIERhbiA8ZGhheW5lc0BtaXRyZS5vcmc8bWFpbHRv OmRoYXluZXNAbWl0cmUub3JnPj4gd3JvdGU6DQpJIGp1c3QgcmV2aWV3ZWQgdGhlIGxhdGVzdCB2 ZXJzaW9uIG9mIHRoZSBJLUQgYW5kIGZvdW5kIG9ubHkgb25lIG9jY3VycmVuY2Ugb2Yg4oCccHJl LWFzc2Vzc21lbnTigJ0gaW4gQXBwZW5kaXggSS4zIHdoaWNoIHNheXM6DQoNCuKAnFdpdGhpbiB0 aGUgU0FDTSBBcmNoaXRlY3R1cmUsIHRoZSBhc3Nlc3NtZW50IHRhc2sgd291bGQgYmUgaGFuZGxl ZCBieSB0aGUgRXZhbHVhdG9yIGNvbXBvbmVudC4gIElmIHByZS1hc3Nlc3NtZW50IGRhdGEgaXMg dXNlZCwgdGhpcyB3b3VsZCBiZSBzdG9yZWQgb24gYW5kIG9idGFpbmVkIGZyb20gYSBEYXRhIFN0 b3JlIGNvbXBvbmVudC7igJ0NCg0KSSB0aGluayB0aGlzIGNvdWxkIGVhc2lseSBiZSByZS13cml0 dGVuIHRvIHJlbW92ZSDigJxwcmUtYXNzZXNzbWVudOKAnSBhbmQgc2F5Og0KDQrigJxXaXRoaW4g dGhlIFNBQ00gQXJjaGl0ZWN0dXJlLCB0aGUgYXNzZXNzbWVudCB0YXNrIHdvdWxkIGJlIGhhbmRs ZWQgYnkgdGhlIEV2YWx1YXRvciBjb21wb25lbnQuIElmIHByZXZpb3VzbHkgY29sbGVjdGVkIGRh dGEgaXMgdXNlZCwgaXQgd291bGQgYmUgb2J0YWluZWQgZnJvbSBhIERhdGEgU3RvcmUgY29tcG9u ZW50LuKAnQ0KDQpJIHRoaW5rIHdlIGNvdWxkIGFsc28gcmV3cml0ZSB0aGUgbGF0ZXN0IHJldmlz aW9uIG9mIHRoZSB0ZXh0IChmcm9tIG15IEp1biAxNnRoIG1lc3NhZ2UpIHRvIHJlYWQgYXMgZm9s bG93cyAod2hpY2ggYWxzbyBtYWtlcyB1c2Ugb2YgU0FDTSB0YXNrcyB3aGljaCB3YXMgc3VnZ2Vz dGVkIGF0IHRoZSBsYXN0IHZpcnR1YWwgaW50ZXJpbSBtZWV0aW5nKS4NCg0KIlRoZSBjb2xsZWN0 aW9uIG9mIGFkZGl0aW9uYWwgZW5kcG9pbnQgaW5mb3JtYXRpb24gZm9yIHRoZSBwdXJwb3NlIG9m IHZ1bG5lcmFiaWxpdHkgYXNzZXNzbWVudCBkb2VzIG5vdCBuZWNlc3NhcmlseSBuZWVkIHRvIGJl IGEgcHVsbCBieSB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nlc3NtZW50IGNhcGFiaWxpdHkuICBPdmVy IHRpbWUsIHNvbWUgbmV3IHBpZWNlcyBvZiBpbmZvcm1hdGlvbiB0aGF0IGFyZSBuZWVkZWQgZHVy aW5nIGNvbW1vbiB0eXBlcyBvZiBhc3Nlc3NtZW50cyBtaWdodCBiZSBpZGVudGlmaWVkLiBBbiBl bmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxpdHkgY2FuIGJlIHJlY29uZmlndXJlZCB0byBoYXZl IHRoaXMgaW5mb3JtYXRpb24gZGVsaXZlcmVkIGF1dG9tYXRpY2FsbHkuIFRoaXMgYXZvaWRzIHRo ZSBuZWVkIHRvIHRyaWdnZXIgYWRkaXRpb25hbCBDb2xsZWN0aW9uIFRhc2tzIHRvIGdhdGhlciB0 aGlzIGluZm9ybWF0aW9uIGR1cmluZyBhc3Nlc3NtZW50cywgc3RyZWFtbGluaW5nIHRoZSBhc3Nl c3NtZW50IHByb2Nlc3MuIExpa2V3aXNlLCBpdCBtaWdodCBiZSBvYnNlcnZlZCB0aGF0IGNlcnRh aW4gaW5mb3JtYXRpb24gZGVsaXZlcmVkIGJ5IGFuIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJp bGl0eSBpcyByYXJlbHkgdXNlZC4gSW4gdGhpcyBjYXNlLCBpdCBtaWdodCBiZSB1c2VmdWwgdG8g cmUtY29uZmlndXJlIHRoZSBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxpdHkgdG8gbm8gbG9u Z2VyIGNvbGxlY3QgdGhpcyBpbmZvcm1hdGlvbiB0byByZWR1Y2UgbmV0d29yayBhbmQgcHJvY2Vz c2luZyBvdmVyaGVhZC4gSW5zdGVhZCwgYSBuZXcgQ29sbGVjdGlvbiBUYXNrIGNhbiBiZSB0cmln Z2VyZWQgdG8gZ2F0aGVyIHRoaXMgZGF0YSBvbiB0aGUgcmFyZSBvY2Nhc2lvbnMgd2hlbiBpdCBp cyBuZWVkZWQuIg0KTGV0IG1lIGtub3cgd2hhdCB5b3UgdGhpbmsgb2YgdGhlc2UgY2hhbmdlcy4g IElmIHRoZXkgc2VlbSByZWFzb25hYmxlLCBJIGNhbiBpbnRlZ3JhdGUgdGhlbSBpbnRvIHRoZSBu ZXh0IHJldmlzaW9uIG9mIHRoZSBJLUQgYW5kIHdlIGNhbiBjbG9zZSBvdXQgdGhpcyBpc3N1ZS4N Cg0KVGhhbmtzLA0KDQpEYW5ueQ0KDQpGcm9tOiBBZGFtIE1vbnR2aWxsZSBbbWFpbHRvOmFkYW0u dy5tb250dmlsbGVAZ21haWwuY29tPG1haWx0bzphZGFtLncubW9udHZpbGxlQGdtYWlsLmNvbT5d DQpTZW50OiBTYXR1cmRheSwgSnVuZSAxOCwgMjAxNiAxOjM2IFBNDQpUbzogSXJhIE1jRG9uYWxk IDxibHVlcm9vZm11c2ljQGdtYWlsLmNvbTxtYWlsdG86Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb20+ Pg0KQ2M6IEhheW5lcywgRGFuIDxkaGF5bmVzQG1pdHJlLm9yZzxtYWlsdG86ZGhheW5lc0BtaXRy ZS5vcmc+PjsgSmVyb21lIEF0aGlhcyA8YXRoaWFzamVyb21lQGdtYWlsLmNvbTxtYWlsdG86YXRo aWFzamVyb21lQGdtYWlsLmNvbT4+OyBzYWNtQGlldGYub3JnPG1haWx0bzpzYWNtQGlldGYub3Jn Pg0KDQpTdWJqZWN0OiBSZTogW3NhY21dIEZPUiBSRVZJRVc6IFZ1bG5lcmFiaWxpdHkgQXNzZXNz bWVudCBTY2VuYXJpbyBJc3N1ZSAjNSAtIENoYW5nZSBEZXRlY3Rpb24gd2l0aCBhbiBFbmRwb2lu dCBNYW5hZ2VtZW50IENhcGFiaWxpdHkNCg0KDQpNeSBjb25jZXJuIGRvZXMgbm90IHN0ZW0gZnJv bSB1c2luZyB0aGUgcHJlZml4IOKAnHByZeKAnSwgYXMgbXVjaCBhcyBpdCBpcyBhYm91dCB0aGUg ZGVmaW5pdGlvbiBvZiB0aGUgdGVybSBhc3Nlc3NtZW50IGFuZCBob3cgd2XigJlyZSB1c2luZyBw cmUtYXNzZXNzbWVudCBvZnRlbiwgd2hpY2ggdHVybnMgaW50byDigJxjb2xsZWN0aW5nIGJlZm9y ZSB0aGUgcHJvY2VzcyBvZiBjb2xsZWN0aW5n4oCdLCB3aGljaCBpcyBjb25mdXNpbmcgYXQgYmVz dC4NCg0KVGhlIHNpdHVhdGlvbiB3ZSBhcmUgbG9va2luZyBhdCBmZWVscyB2ZXJ5IG11Y2ggbGlr ZSBhIGNhY2hlIG1pc3MuICBXZSBsb29rIGZvciBzb21lIGluZm9ybWF0aW9uIGluIG9uZSBwbGFj ZSBhbmQgZG9u4oCZdCBmaW5kIGl0LCBzbyB3ZSBoYXZlIHRvIGdvIGZldGNoIGl0IGZyb20gc29t ZXdoZXJlIGVsc2UuDQoNCg0KDQpPbiBKdW4gMTgsIDIwMTYsIGF0IDg6NDEgQU0sIElyYSBNY0Rv bmFsZCA8Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb208bWFpbHRvOmJsdWVyb29mbXVzaWNAZ21haWwu Y29tPj4gd3JvdGU6DQoNCkhpLA0KDQpJIHNoYXJlIEFkYW0ncyBkaXN0YXN0ZSBmb3IgInByZS0i IGFueXRoaW5nLg0KDQpQZXJoYXBzICJleHRlcm5hbCBjb2xsZWN0aW9uIiAtIGRlZmluZWQgYXMg c2ltcGx5IHVzaW5nIGFueSBub24tU0FDTQ0KcHJvdG9jb2wgdG8gZm9yd2FyZCBlbmRwb2ludCBw b3N0dXJlIHRvIGEgU0FDTSBDb2xsZWN0b3IgKGluIHRoaXMgY2FzZSwNCmUuZy4sIGEgTkVBIFNl cnZlcik/DQoNCkNoZWVycywNCi0gSXJhDQoNCg0KSXJhIE1jRG9uYWxkIChNdXNpY2lhbiAvIFNv ZnR3YXJlIEFyY2hpdGVjdCkNCkNvLUNoYWlyIC0gVENHIFRydXN0ZWQgTW9iaWxpdHkgU29sdXRp b25zIFdHDQpDaGFpciAtIExpbnV4IEZvdW5kYXRpb24gT3BlbiBQcmludGluZyBXRw0KU2VjcmV0 YXJ5IC0gSUVFRS1JU1RPIFByaW50ZXIgV29ya2luZyBHcm91cA0KQ28tQ2hhaXIgLSBJRUVFLUlT VE8gUFdHIEludGVybmV0IFByaW50aW5nIFByb3RvY29sIFdHDQpJRVRGIERlc2lnbmF0ZWQgRXhw ZXJ0IC0gSVBQICYgUHJpbnRlciBNSUINCkJsdWUgUm9vZiBNdXNpYyAvIEhpZ2ggTm9ydGggSW5j DQpodHRwOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2JsdWVyb29mbXVzaWMNCmh0dHA6Ly9zaXRl cy5nb29nbGUuY29tL3NpdGUvaGlnaG5vcnRoaW5jDQptYWlsdG86IGJsdWVyb29mbXVzaWNAZ21h aWwuY29tPG1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbT4NCldpbnRlciAgNTc5IFBhcmsg UGxhY2UgIFNhbGluZSwgTUkgIDQ4MTc2ICA3MzQtOTQ0LTAwOTQ8dGVsOjczNC05NDQtMDA5ND4N ClN1bW1lciAgUE8gQm94IDIyMSAgR3JhbmQgTWFyYWlzLCBNSSA0OTgzOSAgOTA2LTQ5NC0yNDM0 PHRlbDo5MDYtNDk0LTI0MzQ+DQoNCg0KT24gRnJpLCBKdW4gMTcsIDIwMTYgYXQgNjoxNCBQTSwg QWRhbSBNb250dmlsbGUgPGFkYW0udy5tb250dmlsbGVAZ21haWwuY29tPG1haWx0bzphZGFtLncu bW9udHZpbGxlQGdtYWlsLmNvbT4+DQp3cm90ZToNCg0KSSByZWFsbHkgZG9u4oCZdCB3YW50IHRv IGJlIHRoZSBvbmUgdG8gYnJpbmcgdGhpcyB1cCwgYnV0IGFyZSB3ZSBmb3JnZXR0aW5nDQpvdXIg ZGVmaW5pdGlvbiBvZiDigJxhc3Nlc3NtZW504oCdPyAgV2UgYm9ycm93LCBhbmQgZXhwYW5kIHVw b24sIHRoZSB0ZXJtIGZyb20NClJGQzUyMDkuICBIZXJl4oCZcyB3aGF0IG91ciB0ZXJtaW5vbG9n eSBkcmFmdCBzYXlzOg0KDQpBc3Nlc3NtZW50OiBEZWZpbmVkIGluIFtSRkM1MjA5XSBhcyDigJx0 aGUgcHJvY2VzcyBvZiBjb2xsZWN0aW5nIHBvc3R1cmUgZm9yDQphIHNldCBvZiBjYXBhYmlsaXRp ZXMgb24gdGhlIGVuZHBvaW50IChlLmcuIGhvc3QtYmFzZWQgZmlyZXdhbGwpIHN1Y2ggdGhhdA0K dGhlIGFwcHJvcHJpYXRlIHZhbGlkYXRvcnMgbWF5IGV2YWx1YXRlIHRoZSBwb3N0dXJlIGFnYWlu c3QgY29tcGxpYW5jZQ0KcG9saWN5LuKAnSAgV2l0aGluIFNBQ00gdGhlIHVzZSBvZiB0aGUgdGVy bSBpcyBleHBhbmRlZCB0byBzdXBwb3J0IG90aGVyIHVzZXMNCm9mIGNvbGxlY3RlZCBwb3N0dXJl IChlLmcuIHJlcG9ydGluZywgbmV0d29yayBlbmZvcmNlbWVudCwgdnVsbmVyYWJpbGl0eQ0KZGV0 ZWN0aW9uLCBsaWNlbnNlIG1hbmFnZW1lbnQpLiAgVGhlIHBocmFzZSDigJxzZXQgb2YgY2FwYWJp bGl0aWVzIG9uIHRoZQ0KZW5kcG9pbnTigJ0gaW5jbHVkZXM6IGhhcmR3YXJlIGFuZCBzb2Z0d2Fy ZSBpbnN0YWxsZWQgb24gdGhlIGVuZHBvaW50Lg0KDQpCdXQsIGluIHRoZSB0ZXh0IHByb3Bvc2Vk LCBhbmQgaW4gZ2VuZXJhbCwgd2UgYXJlIHRhbGtpbmcgYWJvdXQgY29sbGVjdGlvbg0KaW4gdGhl IGNvbnRleHQgb2YgKnByZSotYXNzZXNzbWVudC4gIFNvLCBhIGNvbGxlY3Rpb24gYmVmb3JlIOKA nHRoZSBwcm9jZXNzDQpvZiBjb2xsZWN0aW5nIHBvc3R1cmXigKbigJ0sIHdoaWNoIHNlZW1zIG9m ZiB0byBtZS4NCg0KRG8gd2UgcmVhbGx5IG1lYW4gdG8gc2F5LCBwcmUtZXZhbHVhdGlvbj8gIE9y LCBkbyB3ZSBuZWVkIOKAnHByZeKAnSBhbnl0aGluZz8NClRoZXJlIGlzIGRhdGEgYXZhaWxhYmxl IGF0IHRoZSB0aW1lIG9mIGV2YWx1YXRpb24gb3IgdGhlcmUgaXMgbm90LiAgSWYNCnRoZXJlIGlz IG5vdCwgd2UgZ28gZ3JhYiBpdCwgb3IgaW5kaWNhdGUgdGhhdCBpdCBuZWVkcyB0byBiZSBncmFi YmVkIGR1cmluZw0KdGhlIG5leHQgY29sbGVjdGlvbiBvcHBvcnR1bml0eSwgYW5kIHdlIGluZGlj YXRlIHdoZXRoZXIgaXTigJlzIHNvbWV0aGluZyB3ZQ0KbmVlZCB0byBncmFiIGFsbCB0aGUgdGlt ZSwgb3IganVzdCB0aGlzIG9uY2UuDQoNClRob3VnaHRzPw0KDQpBZGFtDQoNCg0KDQpPbiBKdW4g MTYsIDIwMTYsIGF0IDEyOjE1IFBNLCBIYXluZXMsIERhbiA8ZGhheW5lc0BtaXRyZS5vcmc8bWFp bHRvOmRoYXluZXNAbWl0cmUub3JnPj4gd3JvdGU6DQoNCk9mZiBsaXN0LCBJIHJlY2VpdmVkIGEg c3VnZ2VzdGVkIHVwZGF0ZSB0byB0aGlzIHRleHQgZnJvbSBDaGFybGVzLiAgSSB3YXMNCmhvcGlu ZyB0byBkaXNjdXNzIGl0IGF0IHllc3RlcmRheeKAmXMgdmlydHVhbCBpbnRlcmltIG1lZXRpbmcs IGhvd2V2ZXIsIEkgcmFuDQpvdXQgb2YgdGltZS4gIEFzIGEgcmVzdWx0LCBJIHdvdWxkIGxpa2Ug dG8gcHJvcG9zZSB0aGUgdXBkYXRlZCB0ZXh0IGFzIGl0DQpzZWVtZWQgY2xlYXJlciBhbmQgbW9y ZSBjb25jaXNlIHRoYW4gd2hhdCBJIGhhZCBwcm9wb3NlZCwgYnV0LCBzYXlzIHRoZQ0Kc2FtZSB0 aGluZy4NCg0KVGhlIG5ldyB0ZXh0IHdvdWxkIHJlYWQgYXMgZm9sbG93cyAoYmFzZWQgb24gdGhl IHVwZGF0ZWQgZHJhZnQgcG9zdGVkIG9uDQo2LzgvMTYgWzFdKS4NCg0KIlN1cHBsZW1lbnRhbCBj b2xsZWN0aW9uIG9mIGVuZHBvaW50IGluZm9ybWF0aW9uIGZvciB0aGUgcHVycG9zZXMgb2bigKZP dmVyDQp0aW1lLCBzb21lIG5ldyBwaWVjZXMgb2YgaW5mb3JtYXRpb24gdGhhdCBhcmUgbmVlZGVk IGR1cmluZyBjb21tb24gdHlwZXMgb2YNCmFzc2Vzc21lbnRzIG1pZ2h0IGJlIGlkZW50aWZpZWQu IFByZS1hc3Nlc3NtZW50IGNvbGxlY3Rpb24gY2FuIGJlDQpyZWNvbmZpZ3VyZWQgdG8gaGF2ZSB0 aGlzIGluZm9ybWF0aW9uIGRlbGl2ZXJlZCBhdXRvbWF0aWNhbGx5LiBUaGlzIGF2b2lkcw0KdGhl IG5lZWQgZm9yIHJlZ3VsYXIgc3VwcGxlbWVudGFsIGNvbGxlY3Rpb25zIHRvIGdhdGhlciB0aGlz IGluZm9ybWF0aW9uDQpkdXJpbmcgYXNzZXNzbWVudHMsIHN0cmVhbWxpbmluZyB0aGUgYXNzZXNz bWVudCBwcm9jZXNzLiBMaWtld2lzZSwgaXQgbWlnaHQNCmJlIG9ic2VydmVkIHRoYXQgY2VydGFp biBpbmZvcm1hdGlvbiBkZWxpdmVyZWQgZHVyaW5nIHByZS1hc3Nlc3NtZW50DQpjb2xsZWN0aW9u IGlzIHJhcmVseSB1c2VkLiBJbiB0aGlzIGNhc2UsIGl0IG1pZ2h0IGJlIHVzZWZ1bCB0byBzdG9w DQpwcmUtYXNzZXNzbWVudCBjb2xsZWN0aW9uIG9mIHRoaXMgaW5mb3JtYXRpb24gdG8gcmVkdWNl IG5ldHdvcmsgYW5kDQpwcm9jZXNzaW5nIG92ZXJoZWFkLiBJbnN0ZWFkLCBzdXBwbGVtZW50YWwg Y29sbGVjdGlvbiBjYW4gYmUgdXNlZCB0byBnYXRoZXINCnRoaXMgZGF0YSBvbiB0aGUgcmFyZSBv Y2Nhc2lvbnMgd2hlbiBpdCBpcyBuZWVkZWQuIg0KDQpQbGVhc2UgbGV0IG1lIGtub3cgeW91ciB0 aG91Z2h0cyBvbiB0aGlzIHByb3Bvc2VkIHRleHQgYnkgVHVlc2RheSBKdWx5IDIxDQpzdC4NCg0K VGhhbmtzLA0KDQpEYW5ueQ0KDQpbMV0gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvaWQvZHJhZnQtaWV0 Zi1zYWNtLXZ1bG4tc2NlbmFyaW8tMDAudHh0DQoNCg0KDQoqRnJvbToqIEplcm9tZSBBdGhpYXMg W21haWx0bzphdGhpYXNqZXJvbWVAZ21haWwuY29tDQo8YXRoaWFzamVyb21lQGdtYWlsLmNvbTxt YWlsdG86YXRoaWFzamVyb21lQGdtYWlsLmNvbT4+XQ0KKlNlbnQ6KiBUdWVzZGF5LCBKdW5lIDA3 LCAyMDE2IDEyOjA4IEFNDQoqVG86KiBIYXluZXMsIERhbiA8ZGhheW5lc0BtaXRyZS5vcmc8bWFp bHRvOmRoYXluZXNAbWl0cmUub3JnPj4NCipDYzoqIHNhY21AaWV0Zi5vcmc8bWFpbHRvOnNhY21A aWV0Zi5vcmc+DQoqU3ViamVjdDoqIFJlOiBbc2FjbV0gRk9SIFJFVklFVzogVnVsbmVyYWJpbGl0 eSBBc3Nlc3NtZW50IFNjZW5hcmlvIElzc3VlDQojNSAtIENoYW5nZSBEZXRlY3Rpb24gd2l0aCBh biBFbmRwb2ludCBNYW5hZ2VtZW50IENhcGFiaWxpdHkNCg0KVGhpcyByZXdyaXRlIGlzIGltaG8g YmV0dGVyDQpUaGFua3MNCg0KT24gVHVlc2RheSwgNyBKdW5lIDIwMTYsIEhheW5lcywgRGFuIDxk aGF5bmVzQG1pdHJlLm9yZzxtYWlsdG86ZGhheW5lc0BtaXRyZS5vcmc+PiB3cm90ZToNCg0KQmFz ZWQgb24gdGhlIGZlZWRiYWNrLCB3b3VsZCB0aGUgZm9sbG93aW5nIHJld3JpdGUgb2YgdGhlIHBh cmFncmFwaCBoZWxwDQpjbGFyaWZ5IHRoaW5ncz8NCg0KIkluIG1hbnkgY2FzZXMsIHRoZSBlbmRw b2ludCBpbmZvcm1hdGlvbi4uLlVuZGVyIGNlcnRhaW4gZGVwbG95bWVudA0Kc2NlbmFyaW9zLCBh cw0KdGhlIHZ1bG5lcmFiaWxpdHkgbWFuYWdlbWVudCBjYXBhYmlsaXR5IHByb2Nlc3NlcyB2dWxu ZXJhYmlsaXR5IGRldGVjdGlvbg0KZGF0YSBvdmVyDQp0aW1lLCB0aGUgZW5kcG9pbnQgbWFuYWdl bWVudCBjYXBhYmlsaXR5IG1heSBsZWFybiBhYm91dCBhZGRpdGlvbmFsDQpkZXRlY3Rpb24NCmlu Zm9ybWF0aW9uIHRoYXQgaXQgd2FzIHByZXZpb3VzbHkgbm90IGNvbGxlY3RpbmcgYW5kIHB1c2gg dGhhdA0KaW5mb3JtYXRpb24gdG8gdGhlDQp2dWxuZXJhYmlsaXR5IG1hbmFnZW1lbnQgY2FwYWJp bGl0eSB3aGVyZSBpdCBjYW4gc3VwcG9ydCBmdXR1cmUNCmFzc2Vzc21lbnRzLiBUaGUNCnB1c2hp bmcgb2YgdGhpcyBkYXRhIG1heSBwb3RlbnRpYWxseSBiZSBkcml2ZW4gYnkgc29tZSB0cmlnZ2Vy IChlLmcuLA0KY2hhbmdlDQppbiBzb2Z0d2FyZSBpbnZlbnRvcnksIHBvbGljeSwgbmV0d29yayBj b25uZWN0aXZpdHkgc3RhdHVzLCBldGMuKS4iDQoNCldoaWxlIHRoaXMgcG90ZW50aWFsbHkgY3Jl YXRlcyBhIGNvdXBsaW5nIGJldHdlZW4gdGhlIHZ1bG5lcmFiaWxpdHkNCm1hbmFnZW1lbnQgY2Fw YWJpbGl0eSBhbmQgdGhlIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSwgYXMgd3JpdHRl biwgSQ0KdGhpbmsgaXQgd2lsbCBiZSBsZWZ0IHRvIHRoZSBpbXBsZW1lbnRlciBvZiB0aG9zZSBj YXBhYmlsaXRpZXMgdG8gZGVjaWRlLg0KSSB0aGluayB0aGUgcG9pbnQgaXMganVzdCB0aGF0IHlv dSBjb3VsZCBkbyBzb21ldGhpbmcgbGlrZSB0aGlzIHRvIGltcHJvdmUNCnRoZSB2dWxuZXJhYmls aXR5IGFzc2Vzc21lbnQuDQoNCklmIHdlIHN0aWxsIGRvbid0IGhhdmUgY29uc2Vuc3VzIG9uIHRo aXMsIGFub3RoZXIgYXBwcm9hY2ggbWlnaHQgYmUgdG8NCmp1c3QgcmVtb3ZlIHRoaXMgdGV4dCBh bGwgdG9nZXRoZXIgYXMgSSBkb24ndCB0aGluayBkb2luZyBzbyB3b3VsZCBwcmVjbHVkZQ0KYW4g aW1wbGVtZW50ZXIgZnJvbSBzdXBwb3J0aW5nIGZ1bmN0aW9uYWxpdHkgbGlrZSB0aGlzIGluIHRo ZWlyIHByb2R1Y3QuDQoNClRob3VnaHRzPw0KDQpUaGFua3MsDQoNCkRhbm55DQoNCi0tLS0tT3Jp Z2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBKZXJvbWUgQXRoaWFzIFttYWlsdG86YXRoaWFzamVy b21lQGdtYWlsLmNvbV0NClNlbnQ6IFNhdHVyZGF5LCBKdW5lIDA0LCAyMDE2IDI6NDkgQU0NClRv OiBIYXluZXMsIERhbiA8ZGhheW5lc0BtaXRyZS5vcmc8bWFpbHRvOmRoYXluZXNAbWl0cmUub3Jn Pj4NCkNjOiBzYWNtQGlldGYub3JnPG1haWx0bzpzYWNtQGlldGYub3JnPg0KU3ViamVjdDogUmU6 IFtzYWNtXSBGT1IgUkVWSUVXOiBWdWxuZXJhYmlsaXR5IEFzc2Vzc21lbnQgU2NlbmFyaW8gSXNz dWUNCiM1DQotIENoYW5nZSBEZXRlY3Rpb24gd2l0aCBhbiBFbmRwb2ludCBNYW5hZ2VtZW50IENh cGFiaWxpdHkNCg0KV2hpbGUgdGhlIHNjZW5hcmlvIHByb3ZpZGVkIGJ5IEFkYW0gaXMgdmFsaWQs IGlmIHlvdXIgY29uY2VybiBpcyB0aGF0DQoidGhlDQppbmZvcm1hdGlvbiBiZXlvbmQgdGhhdCIg d291bGQgYmUgInN1cHBsZW1lbnRhbCBlbmRwb2ludA0KaW5mb3JtYXRpb24iOg0KSSBkb24ndCBz ZWUgYSBzY2VuYXJpbyB3aGVyZSBhbiBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxpdHkgd291 bGQgaGF2ZQ0KdG8gcHVzaCAtc3VwcGxlbWVudGFsLSBpbmZvcm1hdGlvbiB0byB0aGUgdnVsbmVy YWJpbGl0eSBhc3Nlc3NtZW50DQpjYXBhYmlsaXR5ICh3aGF0IHdvdWxkIHRoZSB2dWxuZXJhYmls aXR5IGFzc2Vzc21lbnQgY2FwYWJpbGl0eSBkbyB3aXRoDQondW5rbm93bicgYWRkaXRpb25hbCBp bmZvcm1hdGlvbikNCg0KU28gSSB0aGluayB0aGUgaXNzdWUgaXMgdG8gY2hhbmdlICJ0aGUgaW5m b3JtYXRpb24gYmV5b25kIHRoYXQiIHRvDQpzb21ldGhpbmcNCmxpa2UgInRoZSB1cGRhdGVkIGlu Zm9ybWF0aW9uIg0KDQoNCg0KMjAxNi0wNS0xOCAxNjoxNSBHTVQrMDM6MDAgSGF5bmVzLCBEYW4g PGRoYXluZXNAbWl0cmUub3JnPG1haWx0bzpkaGF5bmVzQG1pdHJlLm9yZz4+Og0KRHVyaW5nIHll c3RlcmRheeKAmXMgdmlydHVhbCBpbnRlcmltIG1lZXRpbmcsIHdlIGRpc2N1c3NlZCB2YXJpb3Vz IG9wZW4NCmlzc3VlcyB3aXRoIHJlc3BlY3QgdG8gdGhlIFZ1bG5lcmFiaWxpdHkgQXNzZXNzbWVu dCBTY2VuYXJpbyBbMV0gYXMgYQ0KcmVzdWx0IG9mIGZlZWRiYWNrIHRoYXQgd2UgcmVjZWl2ZWQg b24gdGhlIGRyYWZ0IHdoaWNoIHlvdSBjYW4gc2VlDQpoZXJlIFsyXVszXS4gIFRoZSBzbGlkZeKA mXMgZnJvbSB0aGUgbWVldGluZyBjYW4gYmUgZm91bmQgaGVyZSBbNF0uDQoNCg0KDQpPbmUgaXNz dWUgdGhhdCB3ZSBkaWRu4oCZdCBoYXZlIGEgY2hhbmNlIHRvIGRpc2N1c3MgYmVjYXVzZSB3ZSBy YW4gb3V0DQpvZiB0aW1lIHdhcyB3aGV0aGVyIG9yIG5vdCBhbiBlbmRwb2ludCBtYW5hZ2VtZW50 IGNhcGFiaWxpdHkgaGFzIHRoZQ0KYWJpbGl0eSB0byBwdXNoIHN1cHBsZW1lbnRhbCBlbmRwb2lu dCBpbmZvcm1hdGlvbiB0byB0aGUgdnVsbmVyYWJpbGl0eQ0KYXNzZXNzbWVudCBjYXBhYmlsaXR5 LiAgVGhpcyBxdWVzdGlvbiBjYW1lIG91dCBvZiBhIHJldmlldyBvZiB0aGUNCmZvbGxvd2luZyB0 ZXh0IGZyb20gdGhlIFZ1bG5lcmFiaWxpdHkgQXNzZXNzbWVudCBTY2VuYXJpbw0KKHNwZWNpZmlj YWxseSB0aGUNCmxhc3Qgc2VudGVuY2UpLg0KDQoNCg0K4oCcSW4gbWFueSBjYXNlcywgdGhlIGVu ZHBvaW50IGluZm9ybWF0aW9uIG5lZWRlZCB0byBkZXRlcm1pbmUgYW4NCmVuZHBvaW504oCZcyB2 dWxuZXJhYmlsaXR5IHN0YXR1cyB3aWxsIGhhdmUgYmVlbiBwcmV2aW91c2x5DQoNCmNvbGxlY3Rl ZCBieSB0aGUgRW5kcG9pbnQgTWFuYWdlbWVudCBDYXBhYmlsaXR5IGFuZCBhdmFpbGFibGUgaW4g YQ0KUmVwb3NpdG9yeS4gSG93ZXZlciwgaW4gb3RoZXIgY2FzZXMsIHRoZSBuZWNlc3NhcnkNCg0K ZW5kcG9pbnQgaW5mb3JtYXRpb24gd2lsbCBub3QgYmUgcmVhZGlseSBhdmFpbGFibGUgaW4gYSBS ZXBvc2l0b3J5IGFuZA0KYSB0YXJnZXRlZCBjb2xsZWN0aW9uIHdpbGwgYmUgbmVjZXNzYXJ5LiAg T2YgY291cnNlLA0KDQphbiBpbXBsZW1lbnRhdGlvbiBvZiBhbiBlbmRwb2ludCBtYW5hZ2VtZW50 IGNhcGFiaWxpdHkgbWF5IHByZWZlciB0bw0KZW5hYmxlIG9wZXJhdG9ycyB0byBwZXJmb3JtIHRh cmdldGVkIGNvbGxlY3Rpb24gdW5kZXINCg0KY2VydGFpbiBjaXJjdW1zdGFuY2VzLCBldmVuIHdo ZW4gc3VmZmljaWVudCBpbmZvcm1hdGlvbiBjYW4gYmUNCnByb3ZpZGVkIGJ5IHRoZSBlbmRwb2lu dCBtYW5hZ2VtZW50IGNhcGFiaWxpdHkgKGUuZy4gdGhlcmUNCg0KbWF5IGJlIGZyZXNobmVzcyBy ZXF1aXJlbWVudHMgZm9yIGluZm9ybWF0aW9uKS4gVGFyZ2V0ZWQgY29sbGVjdGlvbiBvZg0KZW5k cG9pbnQgaW5mb3JtYXRpb24gZm9yIHRoZSBwdXJwb3NlIG9mIHZ1bG5lcmFiaWxpdHkNCg0KYXNz ZXNzbWVudCBkb2VzIG5vdCBuZWNlc3NhcmlseSBuZWVkIHRvIGJlIGEgcHVsbCBieSB0aGUgdnVs bmVyYWJpbGl0eQ0KYXNzZXNzbWVudCBjYXBhYmlsaXR5LiAgVW5kZXIgY2VydGFpbiBkZXBsb3lt ZW50DQoNCnNjZW5hcmlvcywgb25jZSB0aGUgbmVjZXNzYXJ5IGRldGVjdGlvbiBpbmZvcm1hdGlv biBpcyBrbm93biwgdGhlDQppbmZvcm1hdGlvbiBiZXlvbmQgdGhhdCB3aGljaCBpcyBhdmFpbGFi bGUgaW4gdGhlIGVuZHBvaW50DQoNCm1hbmFnZW1lbnQgY2FwYWJpbGl0eSBjYW4gYmUgcHVzaGVk IHRvIHRoZSB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQNCmNhcGFiaWxpdHkgYnkgdGhlIGVuZHBv aW50IHdoZW5ldmVyIHRoYXQgaW5mb3JtYXRpb24NCg0KY2hhbmdlcy7igJ0NCg0KDQoNCk91ciBt YWluIHF1ZXN0aW9uIGlzIHdoZXRoZXIgb3Igbm90IHB1c2hpbmcgaW5mb3JtYXRpb24gZnJvbSB0 aGUNCmVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSB0byB0aGUgdnVsbmVyYWJpbGl0eSBh c3Nlc3NtZW50DQpjYXBhYmlsaXR5IGlzIGFjdHVhbGx5IHBvc3NpYmxlIGJlY2F1c2UgaXQgd291 bGQgbm90IG5lY2Vzc2FyaWx5IGtub3cNCndoYXQgaW5mb3JtYXRpb24gaXQgbmVlZHMgdG8gcHVz aCBwcmlvciB0byB0aGUgc2VydmVyIHJlcXVlc3RpbmcgaXQNCihpbiB3aGljaCBjYXNlIGl0IGlz IHByb2JhYmx5IGNvbnNpZGVyZWQgYSBwdWxsKT8gIElzIHRoZXJlIGENCnNpdHVhdGlvbiB3aGVy ZSB0aGUgZW5kcG9pbnQgd291bGQga25vdywgaW4gYWR2YW5jZSwgd2hhdCBhZGRpdGlvbmFsDQpp bmZvcm1hdGlvbiBpcyBuZWVkZWQgZm9yIGFuIGFzc2Vzc21lbnQgd2l0aG91dCBhIHNlcnZlciBy ZXF1ZXN0aW5nIGl0Pw0KDQoNCg0KSWYgeW91IGhhdmUgYW55IHRob3VnaHRzIG9uIHRoaXMgaXNz dWUsIHBsZWFzZSBwcm92aWRlIGZlZWRiYWNrIGJ5IE1heQ0KMzFzdC4NCldlIGFyZSBwbGFubmlu ZyB0byBoYXZlIGFuIHVwZGF0ZWQgdmVyc2lvbiBvZiB0aGUgc2NlbmFyaW8gZm9yIEp1bmUNCjh0 aC4NCg0KDQoNClRoYW5rcywNCg0KRGFubnkNCg0KDQoNClsxXSBodHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC1jb2ZmaW4tc2FjbS12dWxuLXNjZW5hcmlvLw0KDQpbMl0gaHR0 cHM6Ly9naXRodWIuY29tL3NhY213Zy92dWxuZXJhYmlsaXR5LXNjZW5hcmlvL3B1bGwvMw0KDQpb M10gaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9zYWNtL2N1cnJlbnQvbXNn MDM5NTguaHRtbA0KDQpbNF0gaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mvc2xpZGVz LWludGVyaW0tMjAxNi1zYWNtLTMtMS8NCihsb29rcyBsaWtlIHRoZSBzbGlkZXMgYXJlIG5vdCBh dmFpbGFibGUganVzdCB5ZXQsIGJ1dCwgSSBzdXNwZWN0IHRoZXkNCnNob3VsZCBiZQ0Kc29vbikN Cg0KDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18N CnNhY20gbWFpbGluZyBsaXN0DQpzYWNtQGlldGYub3JnPG1haWx0bzpzYWNtQGlldGYub3JnPg0K aHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zYWNtDQoNCl9fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fDQpzYWNtIG1haWxpbmcgbGlzdA0K c2FjbUBpZXRmLm9yZzxtYWlsdG86c2FjbUBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3Jn L21haWxtYW4vbGlzdGluZm8vc2FjbQ0KDQoNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX18NCnNhY20gbWFpbGluZyBsaXN0DQpzYWNtQGlldGYub3JnPG1h aWx0bzpzYWNtQGlldGYub3JnPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5m by9zYWNtDQoNCg0KDQo= --_000_BY2PR09MB107882EB6572D4BE51F32C4BA5220BY2PR09MB1078namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1z b25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1l Om1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGlu Ow0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250 LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNw YW4uRW1haWxTdHlsZTE4DQoJe21zby1zdHlsZS10eXBlOnBlcnNvbmFsLXJlcGx5Ow0KCWZvbnQt ZmFtaWx5OiJDYWxpYnJpIixzYW5zLXNlcmlmOw0KCWNvbG9yOiMxRjQ5N0Q7fQ0KLk1zb0NocERl ZmF1bHQNCgl7bXNvLXN0eWxlLXR5cGU6ZXhwb3J0LW9ubHk7DQoJZm9udC1zaXplOjEwLjBwdDt9 DQpAcGFnZSBXb3JkU2VjdGlvbjENCgl7c2l6ZTo4LjVpbiAxMS4waW47DQoJbWFyZ2luOjEuMGlu IDEuMGluIDEuMGluIDEuMGluO30NCmRpdi5Xb3JkU2VjdGlvbjENCgl7cGFnZTpXb3JkU2VjdGlv bjE7fQ0KLS0+PC9zdHlsZT48IS0tW2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlZGVmYXVs dHMgdjpleHQ9ImVkaXQiIHNwaWRtYXg9IjEwMjYiIC8+DQo8L3htbD48IVtlbmRpZl0tLT48IS0t W2lmIGd0ZSBtc28gOV0+PHhtbD4NCjxvOnNoYXBlbGF5b3V0IHY6ZXh0PSJlZGl0Ij4NCjxvOmlk bWFwIHY6ZXh0PSJlZGl0IiBkYXRhPSIxIiAvPg0KPC9vOnNoYXBlbGF5b3V0PjwveG1sPjwhW2Vu ZGlmXS0tPg0KPC9oZWFkPg0KPGJvZHkgbGFuZz0iRU4tVVMiIGxpbms9ImJsdWUiIHZsaW5rPSJw dXJwbGUiPg0KPGRpdiBjbGFzcz0iV29yZFNlY3Rpb24xIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkm cXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5UaGFua3MgZm9yIHRoZSBmZWVkYmFjayBK ZXJvbWUsIElyYSwgYW5kIEFkYW0hPG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjoj MUY0OTdEIj5JZiBhbnlvbmUgZWxzZSBoYXMgdGhvdWdodHMgb24gdGhpcyBjaGFuZ2UsIHBsZWFz ZSBsZXQgbWUga25vdy4mbmJzcDsgT3RoZXJ3aXNlLCBiYXNlZCBvbiB0aGUgZmVlZGJhY2sgc28g ZmFyLCBJIGFtIHBsYW5uaW5nIHRvIHB1bGwgaW4gdGhlIGNoYW5nZXMgYXQgdGhlIGVuZCBvZiB0 aGUNCiB3ZWVrLjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bhbj48L3A+ DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250 LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+VGhh bmtzLDxicj4NCjxicj4NCkRhbm55PG86cD48L286cD48L3NwYW4+PC9wPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPjxvOnA+Jm5ic3A7PC9vOnA+ PC9zcGFuPjwvcD4NCjxkaXYgc3R5bGU9ImJvcmRlcjpub25lO2JvcmRlci1sZWZ0OnNvbGlkIGJs dWUgMS41cHQ7cGFkZGluZzowaW4gMGluIDBpbiA0LjBwdCI+DQo8ZGl2Pg0KPGRpdiBzdHlsZT0i Ym9yZGVyOm5vbmU7Ym9yZGVyLXRvcDpzb2xpZCAjRTFFMUUxIDEuMHB0O3BhZGRpbmc6My4wcHQg MGluIDBpbiAwaW4iPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGI+PHNwYW4gc3R5bGU9ImZvbnQt c2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5G cm9tOjwvc3Bhbj48L2I+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6 JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4gQWRhbSBNb250dmlsbGUgW21haWx0bzph ZGFtLncubW9udHZpbGxlQGdtYWlsLmNvbV0NCjxicj4NCjxiPlNlbnQ6PC9iPiBNb25kYXksIEp1 bmUgMjcsIDIwMTYgNDozMiBQTTxicj4NCjxiPlRvOjwvYj4gSXJhIE1jRG9uYWxkICZsdDtibHVl cm9vZm11c2ljQGdtYWlsLmNvbSZndDs8YnI+DQo8Yj5DYzo8L2I+IEhheW5lcywgRGFuICZsdDtk aGF5bmVzQG1pdHJlLm9yZyZndDs7IEplcm9tZSBBdGhpYXMgJmx0O2F0aGlhc2plcm9tZUBnbWFp bC5jb20mZ3Q7OyBzYWNtQGlldGYub3JnPGJyPg0KPGI+U3ViamVjdDo8L2I+IFJlOiBbc2FjbV0g Rk9SIFJFVklFVzogVnVsbmVyYWJpbGl0eSBBc3Nlc3NtZW50IFNjZW5hcmlvIElzc3VlICM1IC0g Q2hhbmdlIERldGVjdGlvbiB3aXRoIGFuIEVuZHBvaW50IE1hbmFnZW1lbnQgQ2FwYWJpbGl0eTxv OnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFs Ij48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPiYjNDM7MSAoY29u dHJpYnV0b3IpPG86cD48L286cD48L3A+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6 NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ T24gSnVuIDI0LCAyMDE2LCBhdCA3OjQzIEFNLCBJcmEgTWNEb25hbGQgJmx0OzxhIGhyZWY9Im1h aWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbSI+Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb208L2E+ Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+ PG86cD4mbmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1hcmdpbi1ib3R0b206MTIuMHB0Ij5IaSBEYW5ueSw8YnI+ DQo8YnI+DQomIzQzOzE8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1h bCI+Q2hlZXJzLDxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBz dHlsZT0ibWFyZ2luLWJvdHRvbToxMi4wcHQiPi0gSXJhPG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48YnIgY2xlYXI9ImFsbCI+DQo8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJt YXJnaW4tYm90dG9tOjEyLjBwdCI+SXJhIE1jRG9uYWxkIChNdXNpY2lhbiAvIFNvZnR3YXJlIEFy Y2hpdGVjdCk8YnI+DQpDby1DaGFpciAtIFRDRyBUcnVzdGVkIE1vYmlsaXR5IFNvbHV0aW9ucyBX Rzxicj4NCkNoYWlyIC0gTGludXggRm91bmRhdGlvbiBPcGVuIFByaW50aW5nIFdHPGJyPg0KU2Vj cmV0YXJ5IC0gSUVFRS1JU1RPIFByaW50ZXIgV29ya2luZyBHcm91cDxicj4NCkNvLUNoYWlyIC0g SUVFRS1JU1RPIFBXRyBJbnRlcm5ldCBQcmludGluZyBQcm90b2NvbCBXRzxicj4NCklFVEYgRGVz aWduYXRlZCBFeHBlcnQgLSBJUFAgJmFtcDsgUHJpbnRlciBNSUI8YnI+DQpCbHVlIFJvb2YgTXVz aWMgLyBIaWdoIE5vcnRoIEluYzxicj4NCjxhIGhyZWY9Imh0dHA6Ly9zaXRlcy5nb29nbGUuY29t L3NpdGUvYmx1ZXJvb2ZtdXNpYyIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxlPSJjb2xvcjoj MzMzM0ZGIj5odHRwOi8vc2l0ZXMuZ29vZ2xlLmNvbS9zaXRlL2JsdWVyb29mbXVzaWM8L3NwYW4+ PC9hPjxicj4NCjxhIGhyZWY9Imh0dHA6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvaGlnaG5vcnRo aW5jIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9ImNvbG9yOiM2NjAwQ0MiPmh0dHA6Ly9z aXRlcy5nb29nbGUuY29tL3NpdGUvaGlnaG5vcnRoaW5jPC9zcGFuPjwvYT48YnI+DQptYWlsdG86 IDxhIGhyZWY9Im1haWx0bzpibHVlcm9vZm11c2ljQGdtYWlsLmNvbSIgdGFyZ2V0PSJfYmxhbmsi PmJsdWVyb29mbXVzaWNAZ21haWwuY29tPC9hPjxicj4NCldpbnRlciZuYnNwOyA1NzkgUGFyayBQ bGFjZSZuYnNwOyBTYWxpbmUsIE1JJm5ic3A7IDQ4MTc2Jm5ic3A7IDczNC05NDQtMDA5NDxicj4N ClN1bW1lciZuYnNwOyBQTyBCb3ggMjIxJm5ic3A7IEdyYW5kIE1hcmFpcywgTUkgNDk4MzkmbmJz cDsgOTA2LTQ5NC0yNDM0PG86cD48L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj5PbiBGcmksIEp1biAyNCwgMjAxNiBhdCA3OjE5IEFNLCBIYXluZXMsIERh biAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRoYXluZXNAbWl0cmUub3JnIiB0YXJnZXQ9Il9ibGFuayI+ ZGhheW5lc0BtaXRyZS5vcmc8L2E+Jmd0OyB3cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1 b3RlIHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCAjQ0NDQ0NDIDEuMHB0O3Bh ZGRpbmc6MGluIDBpbiAwaW4gNi4wcHQ7bWFyZ2luLWxlZnQ6NC44cHQ7bWFyZ2luLXJpZ2h0OjBp biI+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2lu LXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZv bnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlm O2NvbG9yOiMxRjQ5N0QiPkkganVzdCByZXZpZXdlZCB0aGUgbGF0ZXN0IHZlcnNpb24gb2YgdGhl IEktRCBhbmQgZm91bmQgb25seSBvbmUgb2NjdXJyZW5jZSBvZiDigJxwcmUtYXNzZXNzbWVudOKA nSBpbg0KIEFwcGVuZGl4IEkuMyB3aGljaCBzYXlzOjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxw IGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFy Z2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1m YW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNw Ozwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28t bWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0bzttYXJnaW4tbGVm dDouNWluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5Ij7igJxXaXRoaW4gdGhlIFNB Q00gQXJjaGl0ZWN0dXJlLCB0aGUgYXNzZXNzbWVudCB0YXNrIHdvdWxkIGJlIGhhbmRsZWQgYnkg dGhlIEV2YWx1YXRvciBjb21wb25lbnQuJm5ic3A7IElmIHByZS1hc3Nlc3NtZW50IGRhdGEgaXMg dXNlZCwgdGhpcyB3b3VsZCBiZSBzdG9yZWQgb24gYW5kIG9idGFpbmVkIGZyb20gYSBEYXRhIFN0 b3JlDQogY29tcG9uZW50LuKAnTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29O b3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1h bHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7 Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpw PjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1h bHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6 ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9y OiMxRjQ5N0QiPkkgdGhpbmsgdGhpcyBjb3VsZCBlYXNpbHkgYmUgcmUtd3JpdHRlbiB0byByZW1v dmUg4oCccHJlLWFzc2Vzc21lbnTigJ0gYW5kIHNheTo8L3NwYW4+PG86cD48L286cD48L3A+DQo8 cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1h cmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJz cDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG87dGV4dC1pbmRl bnQ6LjVpbiI+DQo8c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVv dDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+4oCcV2l0aGluIHRoZSBT QUNNIEFyY2hpdGVjdHVyZSwgdGhlIGFzc2Vzc21lbnQgdGFzayB3b3VsZCBiZSBoYW5kbGVkIGJ5 IHRoZSBFdmFsdWF0b3IgY29tcG9uZW50LiBJZiBwcmV2aW91c2x5IGNvbGxlY3RlZCBkYXRhIGlz IHVzZWQsIGl0IHdvdWxkIGJlIG9idGFpbmVkIGZyb20gYSBEYXRhIFN0b3JlIGNvbXBvbmVudC7i gJ08L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNv LW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0 eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fu cy1zZXJpZjtjb2xvcjojMUY0OTdEIj4mbmJzcDs8L3NwYW4+PG86cD48L286cD48L3A+DQo8cCBj bGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdp bi1ib3R0b20tYWx0OmF1dG8iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFt aWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj5JIHRoaW5r IHdlIGNvdWxkIGFsc28gcmV3cml0ZSB0aGUgbGF0ZXN0IHJldmlzaW9uIG9mIHRoZSB0ZXh0DQo8 L3NwYW4+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2Fs aWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjRFNzkiPihmcm9tIG15IEp1biAxNjxzdXA+ dGg8L3N1cD4gbWVzc2FnZSkNCjwvc3Bhbj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+ dG8gcmVhZCBhcyBmb2xsb3dzICh3aGljaCBhbHNvIG1ha2VzIHVzZSBvZiBTQUNNIHRhc2tzIHdo aWNoIHdhcyBzdWdnZXN0ZWQgYXQgdGhlIGxhc3QgdmlydHVhbCBpbnRlcmltIG1lZXRpbmcpLjwv c3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFy Z2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNl cmlmO2NvbG9yOiMxRjQ5N0QiPiZuYnNwOzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxwIGNsYXNz PSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttYXJnaW4tYm90dG9t OjEyLjBwdDttYXJnaW4tbGVmdDouNWluIj4NCjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0 O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0RTc5 Ij4mcXVvdDtUaGUgY29sbGVjdGlvbiBvZiBhZGRpdGlvbmFsIGVuZHBvaW50IGluZm9ybWF0aW9u IGZvciB0aGUgcHVycG9zZSBvZiB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQgZG9lcyBub3QgbmVj ZXNzYXJpbHkgbmVlZCB0byBiZSBhIHB1bGwgYnkgdGhlIHZ1bG5lcmFiaWxpdHkgYXNzZXNzbWVu dCBjYXBhYmlsaXR5LiZuYnNwOw0KIE92ZXIgdGltZSwgc29tZSBuZXcgcGllY2VzIG9mIGluZm9y bWF0aW9uIHRoYXQgYXJlIG5lZWRlZCBkdXJpbmcgY29tbW9uIHR5cGVzIG9mIGFzc2Vzc21lbnRz IG1pZ2h0IGJlIGlkZW50aWZpZWQuIEFuIGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSBj YW4gYmUgcmVjb25maWd1cmVkIHRvIGhhdmUgdGhpcyBpbmZvcm1hdGlvbiBkZWxpdmVyZWQgYXV0 b21hdGljYWxseS4gVGhpcyBhdm9pZHMgdGhlIG5lZWQgdG8gdHJpZ2dlciBhZGRpdGlvbmFsDQog Q29sbGVjdGlvbiBUYXNrcyB0byBnYXRoZXIgdGhpcyBpbmZvcm1hdGlvbiBkdXJpbmcgYXNzZXNz bWVudHMsIHN0cmVhbWxpbmluZyB0aGUgYXNzZXNzbWVudCBwcm9jZXNzLiBMaWtld2lzZSwgaXQg bWlnaHQgYmUgb2JzZXJ2ZWQgdGhhdCBjZXJ0YWluIGluZm9ybWF0aW9uIGRlbGl2ZXJlZCBieSBh biBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxpdHkgaXMgcmFyZWx5IHVzZWQuIEluIHRoaXMg Y2FzZSwgaXQgbWlnaHQgYmUgdXNlZnVsIHRvDQogcmUtY29uZmlndXJlIHRoZSBlbmRwb2ludCBt YW5hZ2VtZW50IGNhcGFiaWxpdHkgdG8gbm8gbG9uZ2VyIGNvbGxlY3QgdGhpcyBpbmZvcm1hdGlv biB0byByZWR1Y2UgbmV0d29yayBhbmQgcHJvY2Vzc2luZyBvdmVyaGVhZC4gSW5zdGVhZCwgYSBu ZXcgQ29sbGVjdGlvbiBUYXNrIGNhbiBiZSB0cmlnZ2VyZWQgdG8gZ2F0aGVyIHRoaXMgZGF0YSBv biB0aGUgcmFyZSBvY2Nhc2lvbnMgd2hlbiBpdCBpcyBuZWVkZWQuJnF1b3Q7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFs dDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXpl OjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6 IzFGNDk3RCI+TGV0IG1lIGtub3cgd2hhdCB5b3UgdGhpbmsgb2YgdGhlc2UgY2hhbmdlcy4mbmJz cDsgSWYgdGhleSBzZWVtIHJlYXNvbmFibGUsIEkgY2FuIGludGVncmF0ZSB0aGVtIGludG8gdGhl DQogbmV4dCByZXZpc2lvbiBvZiB0aGUgSS1EIGFuZCB3ZSBjYW4gY2xvc2Ugb3V0IHRoaXMgaXNz dWUuPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJn aW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZh bWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+VGhhbmtz LDxicj4NCjxicj4NCkRhbm55PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPHAgY2xhc3M9Ik1zb05v cm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFs dDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+Jm5ic3A7PC9zcGFuPjxvOnA+ PC9vOnA+PC9wPg0KPGRpdiBzdHlsZT0iYm9yZGVyOm5vbmU7Ym9yZGVyLWxlZnQ6c29saWQgYmx1 ZSAxLjVwdDtwYWRkaW5nOjBpbiAwaW4gMGluIDQuMHB0Ij4NCjxkaXY+DQo8ZGl2IHN0eWxlPSJi b3JkZXI6bm9uZTtib3JkZXItdG9wOnNvbGlkICNFMUUxRTEgMS4wcHQ7cGFkZGluZzozLjBwdCAw aW4gMGluIDBpbiI+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPjxiPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+ RnJvbTo8L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IEFkYW0gTW9udHZpbGxlIFttYWlsdG86 PGEgaHJlZj0ibWFpbHRvOmFkYW0udy5tb250dmlsbGVAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFu ayI+YWRhbS53Lm1vbnR2aWxsZUBnbWFpbC5jb208L2E+XQ0KPGJyPg0KPGI+U2VudDo8L2I+IFNh dHVyZGF5LCBKdW5lIDE4LCAyMDE2IDE6MzYgUE08YnI+DQo8Yj5Ubzo8L2I+IElyYSBNY0RvbmFs ZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJsdWVyb29mbXVzaWNAZ21haWwuY29tIiB0YXJnZXQ9Il9i bGFuayI+Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb208L2E+Jmd0Ozxicj4NCjxiPkNjOjwvYj4gSGF5 bmVzLCBEYW4gJmx0OzxhIGhyZWY9Im1haWx0bzpkaGF5bmVzQG1pdHJlLm9yZyIgdGFyZ2V0PSJf YmxhbmsiPmRoYXluZXNAbWl0cmUub3JnPC9hPiZndDs7IEplcm9tZSBBdGhpYXMgJmx0OzxhIGhy ZWY9Im1haWx0bzphdGhpYXNqZXJvbWVAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+YXRoaWFz amVyb21lQGdtYWlsLmNvbTwvYT4mZ3Q7Ow0KPGEgaHJlZj0ibWFpbHRvOnNhY21AaWV0Zi5vcmci IHRhcmdldD0iX2JsYW5rIj5zYWNtQGlldGYub3JnPC9hPjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PGJyPg0KPGI+U3ViamVjdDo8L2I+ IFJlOiBbc2FjbV0gRk9SIFJFVklFVzogVnVsbmVyYWJpbGl0eSBBc3Nlc3NtZW50IFNjZW5hcmlv IElzc3VlICM1IC0gQ2hhbmdlIERldGVjdGlvbiB3aXRoIGFuIEVuZHBvaW50IE1hbmFnZW1lbnQg Q2FwYWJpbGl0eTxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rp dj4NCjxkaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4t dG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpw PjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20tYWx0OmF1dG8iPk15IGNvbmNlcm4gZG9lcyBub3Qg c3RlbSBmcm9tIHVzaW5nIHRoZSBwcmVmaXgg4oCccHJl4oCdLCBhcyBtdWNoIGFzIGl0IGlzIGFi b3V0IHRoZSBkZWZpbml0aW9uIG9mIHRoZSB0ZXJtIGFzc2Vzc21lbnQgYW5kIGhvdyB3ZeKAmXJl IHVzaW5nIHByZS1hc3Nlc3NtZW50IG9mdGVuLCB3aGljaCB0dXJucyBpbnRvIOKAnGNvbGxlY3Rp bmcNCiBiZWZvcmUgdGhlIHByb2Nlc3Mgb2YgY29sbGVjdGluZ+KAnSwgd2hpY2ggaXMgY29uZnVz aW5nIGF0IGJlc3QuPG86cD48L286cD48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bXNvLW1hcmdpbi1ib3R0b20t YWx0OmF1dG8iPiZuYnNwOzxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj5UaGUgc2l0dWF0aW9uIHdlIGFyZSBsb29raW5nIGF0IGZlZWxzIHZlcnkg bXVjaCBsaWtlIGEgY2FjaGUgbWlzcy4mbmJzcDsgV2UgbG9vayBmb3Igc29tZSBpbmZvcm1hdGlv biBpbiBvbmUgcGxhY2UgYW5kIGRvbuKAmXQgZmluZCBpdCwgc28gd2UgaGF2ZSB0byBnbyBmZXRj aCBpdCBmcm9tIHNvbWV3aGVyZSBlbHNlLjxvOnA+PC9vOnA+PC9wPg0KPC9kaXY+DQo8ZGl2Pg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPGRp dj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt c28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8L2Rpdj4N CjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28t bWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48L3A+DQo8ZGl2Pg0KPGJs b2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1LjBwdCI+DQo8 ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRv O21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj5PbiBKdW4gMTgsIDIwMTYsIGF0IDg6NDEgQU0s IElyYSBNY0RvbmFsZCAmbHQ7PGEgaHJlZj0ibWFpbHRvOmJsdWVyb29mbXVzaWNAZ21haWwuY29t IiB0YXJnZXQ9Il9ibGFuayI+Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb208L2E+Jmd0OyB3cm90ZTo8 bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj4mbmJzcDs8bzpw PjwvbzpwPjwvcD4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdp bi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNp emU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPkhp LDxicj4NCjxicj4NCkkgc2hhcmUgQWRhbSdzIGRpc3Rhc3RlIGZvciAmcXVvdDtwcmUtJnF1b3Q7 IGFueXRoaW5nLjxicj4NCjxicj4NClBlcmhhcHMgJnF1b3Q7ZXh0ZXJuYWwgY29sbGVjdGlvbiZx dW90OyAtIGRlZmluZWQgYXMgc2ltcGx5IHVzaW5nIGFueSBub24tU0FDTTxicj4NCnByb3RvY29s IHRvIGZvcndhcmQgZW5kcG9pbnQgcG9zdHVyZSB0byBhIFNBQ00gQ29sbGVjdG9yIChpbiB0aGlz IGNhc2UsPGJyPg0KZS5nLiwgYSBORUEgU2VydmVyKT88YnI+DQo8YnI+DQpDaGVlcnMsPGJyPg0K LSBJcmE8YnI+DQo8YnI+DQo8YnI+DQpJcmEgTWNEb25hbGQgKE11c2ljaWFuIC8gU29mdHdhcmUg QXJjaGl0ZWN0KTxicj4NCkNvLUNoYWlyIC0gVENHIFRydXN0ZWQgTW9iaWxpdHkgU29sdXRpb25z IFdHPGJyPg0KQ2hhaXIgLSBMaW51eCBGb3VuZGF0aW9uIE9wZW4gUHJpbnRpbmcgV0c8YnI+DQpT ZWNyZXRhcnkgLSBJRUVFLUlTVE8gUHJpbnRlciBXb3JraW5nIEdyb3VwPGJyPg0KQ28tQ2hhaXIg LSBJRUVFLUlTVE8gUFdHIEludGVybmV0IFByaW50aW5nIFByb3RvY29sIFdHPGJyPg0KSUVURiBE ZXNpZ25hdGVkIEV4cGVydCAtIElQUCAmYW1wOyBQcmludGVyIE1JQjxicj4NCkJsdWUgUm9vZiBN dXNpYyAvIEhpZ2ggTm9ydGggSW5jPGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHA6Ly9zaXRlcy5n b29nbGUuY29tL3NpdGUvYmx1ZXJvb2ZtdXNpYyIgdGFyZ2V0PSJfYmxhbmsiPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPmh0dHA6Ly9zaXRlcy5nb29nbGUuY29tL3NpdGUvYmx1ZXJvb2ZtdXNpYzwvc3Bhbj48 L2E+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRp Y2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KPC9zcGFuPjxhIGhyZWY9Imh0dHA6Ly9zaXRlcy5n b29nbGUuY29tL3NpdGUvaGlnaG5vcnRoaW5jIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZiI+aHR0cDovL3NpdGVzLmdvb2dsZS5jb20vc2l0ZS9oaWdobm9ydGhpbmM8L3NwYW4+PC9h PjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNh JnF1b3Q7LHNhbnMtc2VyaWYiPjxicj4NCm1haWx0bzombmJzcDs8L3NwYW4+PGEgaHJlZj0ibWFp bHRvOmJsdWVyb29mbXVzaWNAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZiI+Ymx1ZXJvb2ZtdXNpY0BnbWFpbC5jb208L3NwYW4+PC9hPjxzcGFuIHN0eWxlPSJmb250 LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYi Pjxicj4NCldpbnRlciAmbmJzcDs1NzkgUGFyayBQbGFjZSAmbmJzcDtTYWxpbmUsIE1JICZuYnNw OzQ4MTc2ICZuYnNwOzxhIGhyZWY9InRlbDo3MzQtOTQ0LTAwOTQiIHRhcmdldD0iX2JsYW5rIj43 MzQtOTQ0LTAwOTQ8L2E+PGJyPg0KU3VtbWVyICZuYnNwO1BPIEJveCAyMjEgJm5ic3A7R3JhbmQg TWFyYWlzLCBNSSA0OTgzOSAmbmJzcDs8YSBocmVmPSJ0ZWw6OTA2LTQ5NC0yNDM0IiB0YXJnZXQ9 Il9ibGFuayI+OTA2LTQ5NC0yNDM0PC9hPjxicj4NCjxicj4NCjxicj4NCk9uIEZyaSwgSnVuIDE3 LCAyMDE2IGF0IDY6MTQgUE0sIEFkYW0gTW9udHZpbGxlICZsdDs8L3NwYW4+PGEgaHJlZj0ibWFp bHRvOmFkYW0udy5tb250dmlsbGVAZ21haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+PHNwYW4gc3R5 bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fu cy1zZXJpZiI+YWRhbS53Lm1vbnR2aWxsZUBnbWFpbC5jb208L3NwYW4+PC9hPjxzcGFuIHN0eWxl PSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMt c2VyaWYiPiZndDs8YnI+DQp3cm90ZTo8YnI+DQo8YnI+DQo8L3NwYW4+PG86cD48L286cD48L3A+ DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUuMHB0 Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bztt YXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZh bWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+SSByZWFsbHkgZG9u4oCZdCB3 YW50IHRvIGJlIHRoZSBvbmUgdG8gYnJpbmcgdGhpcyB1cCwgYnV0IGFyZSB3ZSBmb3JnZXR0aW5n PGJyPg0Kb3VyIGRlZmluaXRpb24gb2Yg4oCcYXNzZXNzbWVudOKAnT8mbmJzcDsgV2UgYm9ycm93 LCBhbmQgZXhwYW5kIHVwb24sIHRoZSB0ZXJtIGZyb208YnI+DQpSRkM1MjA5LiZuYnNwOyBIZXJl 4oCZcyB3aGF0IG91ciB0ZXJtaW5vbG9neSBkcmFmdCBzYXlzOjxicj4NCjxicj4NCkFzc2Vzc21l bnQ6IERlZmluZWQgaW4gW1JGQzUyMDldIGFzIOKAnHRoZSBwcm9jZXNzIG9mIGNvbGxlY3Rpbmcg cG9zdHVyZSBmb3I8YnI+DQphIHNldCBvZiBjYXBhYmlsaXRpZXMgb24gdGhlIGVuZHBvaW50IChl LmcuIGhvc3QtYmFzZWQgZmlyZXdhbGwpIHN1Y2ggdGhhdDxicj4NCnRoZSBhcHByb3ByaWF0ZSB2 YWxpZGF0b3JzIG1heSBldmFsdWF0ZSB0aGUgcG9zdHVyZSBhZ2FpbnN0IGNvbXBsaWFuY2U8YnI+ DQpwb2xpY3ku4oCdICZuYnNwO1dpdGhpbiBTQUNNIHRoZSB1c2Ugb2YgdGhlIHRlcm0gaXMgZXhw YW5kZWQgdG8gc3VwcG9ydCBvdGhlciB1c2VzPGJyPg0Kb2YgY29sbGVjdGVkIHBvc3R1cmUgKGUu Zy4gcmVwb3J0aW5nLCBuZXR3b3JrIGVuZm9yY2VtZW50LCB2dWxuZXJhYmlsaXR5PGJyPg0KZGV0 ZWN0aW9uLCBsaWNlbnNlIG1hbmFnZW1lbnQpLiZuYnNwOyBUaGUgcGhyYXNlIOKAnHNldCBvZiBj YXBhYmlsaXRpZXMgb24gdGhlPGJyPg0KZW5kcG9pbnTigJ0gaW5jbHVkZXM6IGhhcmR3YXJlIGFu ZCBzb2Z0d2FyZSBpbnN0YWxsZWQgb24gdGhlIGVuZHBvaW50Ljxicj4NCjxicj4NCkJ1dCwgaW4g dGhlIHRleHQgcHJvcG9zZWQsIGFuZCBpbiBnZW5lcmFsLCB3ZSBhcmUgdGFsa2luZyBhYm91dCBj b2xsZWN0aW9uPGJyPg0KaW4gdGhlIGNvbnRleHQgb2YgKnByZSotYXNzZXNzbWVudC4mbmJzcDsg U28sIGEgY29sbGVjdGlvbiBiZWZvcmUg4oCcdGhlIHByb2Nlc3M8YnI+DQpvZiBjb2xsZWN0aW5n IHBvc3R1cmXigKbigJ0sIHdoaWNoIHNlZW1zIG9mZiB0byBtZS48YnI+DQo8YnI+DQpEbyB3ZSBy ZWFsbHkgbWVhbiB0byBzYXksIHByZS1ldmFsdWF0aW9uPyZuYnNwOyBPciwgZG8gd2UgbmVlZCDi gJxwcmXigJ0gYW55dGhpbmc/PGJyPg0KVGhlcmUgaXMgZGF0YSBhdmFpbGFibGUgYXQgdGhlIHRp bWUgb2YgZXZhbHVhdGlvbiBvciB0aGVyZSBpcyBub3QuJm5ic3A7IElmPGJyPg0KdGhlcmUgaXMg bm90LCB3ZSBnbyBncmFiIGl0LCBvciBpbmRpY2F0ZSB0aGF0IGl0IG5lZWRzIHRvIGJlIGdyYWJi ZWQgZHVyaW5nPGJyPg0KdGhlIG5leHQgY29sbGVjdGlvbiBvcHBvcnR1bml0eSwgYW5kIHdlIGlu ZGljYXRlIHdoZXRoZXIgaXTigJlzIHNvbWV0aGluZyB3ZTxicj4NCm5lZWQgdG8gZ3JhYiBhbGwg dGhlIHRpbWUsIG9yIGp1c3QgdGhpcyBvbmNlLjxicj4NCjxicj4NClRob3VnaHRzPzxicj4NCjxi cj4NCkFkYW08YnI+DQo8YnI+DQo8YnI+DQo8YnI+DQpPbiBKdW4gMTYsIDIwMTYsIGF0IDEyOjE1 IFBNLCBIYXluZXMsIERhbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRoYXluZXNAbWl0cmUub3JnIiB0 YXJnZXQ9Il9ibGFuayI+ZGhheW5lc0BtaXRyZS5vcmc8L2E+Jmd0OyB3cm90ZTo8YnI+DQo8YnI+ DQpPZmYgbGlzdCwgSSByZWNlaXZlZCBhIHN1Z2dlc3RlZCB1cGRhdGUgdG8gdGhpcyB0ZXh0IGZy b20gQ2hhcmxlcy4mbmJzcDsgSSB3YXM8YnI+DQpob3BpbmcgdG8gZGlzY3VzcyBpdCBhdCB5ZXN0 ZXJkYXnigJlzIHZpcnR1YWwgaW50ZXJpbSBtZWV0aW5nLCBob3dldmVyLCBJIHJhbjxicj4NCm91 dCBvZiB0aW1lLiZuYnNwOyBBcyBhIHJlc3VsdCwgSSB3b3VsZCBsaWtlIHRvIHByb3Bvc2UgdGhl IHVwZGF0ZWQgdGV4dCBhcyBpdDxicj4NCnNlZW1lZCBjbGVhcmVyIGFuZCBtb3JlIGNvbmNpc2Ug dGhhbiB3aGF0IEkgaGFkIHByb3Bvc2VkLCBidXQsIHNheXMgdGhlPGJyPg0Kc2FtZSB0aGluZy48 YnI+DQo8YnI+DQpUaGUgbmV3IHRleHQgd291bGQgcmVhZCBhcyBmb2xsb3dzIChiYXNlZCBvbiB0 aGUgdXBkYXRlZCBkcmFmdCBwb3N0ZWQgb248YnI+DQo2LzgvMTYgWzFdKS48YnI+DQo8YnI+DQom cXVvdDtTdXBwbGVtZW50YWwgY29sbGVjdGlvbiBvZiBlbmRwb2ludCBpbmZvcm1hdGlvbiBmb3Ig dGhlIHB1cnBvc2VzIG9m4oCmT3Zlcjxicj4NCnRpbWUsIHNvbWUgbmV3IHBpZWNlcyBvZiBpbmZv cm1hdGlvbiB0aGF0IGFyZSBuZWVkZWQgZHVyaW5nIGNvbW1vbiB0eXBlcyBvZjxicj4NCmFzc2Vz c21lbnRzIG1pZ2h0IGJlIGlkZW50aWZpZWQuIFByZS1hc3Nlc3NtZW50IGNvbGxlY3Rpb24gY2Fu IGJlPGJyPg0KcmVjb25maWd1cmVkIHRvIGhhdmUgdGhpcyBpbmZvcm1hdGlvbiBkZWxpdmVyZWQg YXV0b21hdGljYWxseS4gVGhpcyBhdm9pZHM8YnI+DQp0aGUgbmVlZCBmb3IgcmVndWxhciBzdXBw bGVtZW50YWwgY29sbGVjdGlvbnMgdG8gZ2F0aGVyIHRoaXMgaW5mb3JtYXRpb248YnI+DQpkdXJp bmcgYXNzZXNzbWVudHMsIHN0cmVhbWxpbmluZyB0aGUgYXNzZXNzbWVudCBwcm9jZXNzLiBMaWtl d2lzZSwgaXQgbWlnaHQ8YnI+DQpiZSBvYnNlcnZlZCB0aGF0IGNlcnRhaW4gaW5mb3JtYXRpb24g ZGVsaXZlcmVkIGR1cmluZyBwcmUtYXNzZXNzbWVudDxicj4NCmNvbGxlY3Rpb24gaXMgcmFyZWx5 IHVzZWQuIEluIHRoaXMgY2FzZSwgaXQgbWlnaHQgYmUgdXNlZnVsIHRvIHN0b3A8YnI+DQpwcmUt YXNzZXNzbWVudCBjb2xsZWN0aW9uIG9mIHRoaXMgaW5mb3JtYXRpb24gdG8gcmVkdWNlIG5ldHdv cmsgYW5kPGJyPg0KcHJvY2Vzc2luZyBvdmVyaGVhZC4gSW5zdGVhZCwgc3VwcGxlbWVudGFsIGNv bGxlY3Rpb24gY2FuIGJlIHVzZWQgdG8gZ2F0aGVyPGJyPg0KdGhpcyBkYXRhIG9uIHRoZSByYXJl IG9jY2FzaW9ucyB3aGVuIGl0IGlzIG5lZWRlZC4mcXVvdDs8YnI+DQo8YnI+DQpQbGVhc2UgbGV0 IG1lIGtub3cgeW91ciB0aG91Z2h0cyBvbiB0aGlzIHByb3Bvc2VkIHRleHQgYnkgVHVlc2RheSBK dWx5IDIxPGJyPg0Kc3QuPGJyPg0KPGJyPg0KVGhhbmtzLDxicj4NCjxicj4NCkRhbm55PGJyPg0K PGJyPg0KWzFdIDxhIGhyZWY9Imh0dHBzOi8vd3d3LmlldGYub3JnL2lkL2RyYWZ0LWlldGYtc2Fj bS12dWxuLXNjZW5hcmlvLTAwLnR4dCIgdGFyZ2V0PSJfYmxhbmsiPg0KaHR0cHM6Ly93d3cuaWV0 Zi5vcmcvaWQvZHJhZnQtaWV0Zi1zYWNtLXZ1bG4tc2NlbmFyaW8tMDAudHh0PC9hPjxicj4NCjxi cj4NCjxicj4NCjxicj4NCipGcm9tOiogSmVyb21lIEF0aGlhcyBbPGEgaHJlZj0ibWFpbHRvOmF0 aGlhc2plcm9tZUBnbWFpbC5jb20iIHRhcmdldD0iX2JsYW5rIj5tYWlsdG86YXRoaWFzamVyb21l QGdtYWlsLmNvbTwvYT48YnI+DQombHQ7PGEgaHJlZj0ibWFpbHRvOmF0aGlhc2plcm9tZUBnbWFp bC5jb20iIHRhcmdldD0iX2JsYW5rIj5hdGhpYXNqZXJvbWVAZ21haWwuY29tPC9hPiZndDtdPGJy Pg0KKlNlbnQ6KiBUdWVzZGF5LCBKdW5lIDA3LCAyMDE2IDEyOjA4IEFNPGJyPg0KKlRvOiogSGF5 bmVzLCBEYW4gJmx0OzxhIGhyZWY9Im1haWx0bzpkaGF5bmVzQG1pdHJlLm9yZyIgdGFyZ2V0PSJf YmxhbmsiPmRoYXluZXNAbWl0cmUub3JnPC9hPiZndDs8YnI+DQoqQ2M6KiA8YSBocmVmPSJtYWls dG86c2FjbUBpZXRmLm9yZyIgdGFyZ2V0PSJfYmxhbmsiPnNhY21AaWV0Zi5vcmc8L2E+PGJyPg0K KlN1YmplY3Q6KiBSZTogW3NhY21dIEZPUiBSRVZJRVc6IFZ1bG5lcmFiaWxpdHkgQXNzZXNzbWVu dCBTY2VuYXJpbyBJc3N1ZTxicj4NCiM1IC0gQ2hhbmdlIERldGVjdGlvbiB3aXRoIGFuIEVuZHBv aW50IE1hbmFnZW1lbnQgQ2FwYWJpbGl0eTxicj4NCjxicj4NClRoaXMgcmV3cml0ZSBpcyBpbWhv IGJldHRlcjxicj4NClRoYW5rczxicj4NCjxicj4NCk9uIFR1ZXNkYXksIDcgSnVuZSAyMDE2LCBI YXluZXMsIERhbiAmbHQ7PGEgaHJlZj0ibWFpbHRvOmRoYXluZXNAbWl0cmUub3JnIiB0YXJnZXQ9 Il9ibGFuayI+ZGhheW5lc0BtaXRyZS5vcmc8L2E+Jmd0OyB3cm90ZTo8YnI+DQo8YnI+DQpCYXNl ZCBvbiB0aGUgZmVlZGJhY2ssIHdvdWxkIHRoZSBmb2xsb3dpbmcgcmV3cml0ZSBvZiB0aGUgcGFy YWdyYXBoIGhlbHA8YnI+DQpjbGFyaWZ5IHRoaW5ncz88YnI+DQo8YnI+DQomcXVvdDtJbiBtYW55 IGNhc2VzLCB0aGUgZW5kcG9pbnQgaW5mb3JtYXRpb24uLi5VbmRlciBjZXJ0YWluIGRlcGxveW1l bnQ8YnI+DQpzY2VuYXJpb3MsIGFzPGJyPg0KdGhlIHZ1bG5lcmFiaWxpdHkgbWFuYWdlbWVudCBj YXBhYmlsaXR5IHByb2Nlc3NlcyB2dWxuZXJhYmlsaXR5IGRldGVjdGlvbjxicj4NCmRhdGEgb3Zl cjxicj4NCnRpbWUsIHRoZSBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxpdHkgbWF5IGxlYXJu IGFib3V0IGFkZGl0aW9uYWw8YnI+DQpkZXRlY3Rpb248YnI+DQppbmZvcm1hdGlvbiB0aGF0IGl0 IHdhcyBwcmV2aW91c2x5IG5vdCBjb2xsZWN0aW5nIGFuZCBwdXNoIHRoYXQ8YnI+DQppbmZvcm1h dGlvbiB0byB0aGU8YnI+DQp2dWxuZXJhYmlsaXR5IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSB3aGVy ZSBpdCBjYW4gc3VwcG9ydCBmdXR1cmU8YnI+DQphc3Nlc3NtZW50cy4gVGhlPGJyPg0KcHVzaGlu ZyBvZiB0aGlzIGRhdGEgbWF5IHBvdGVudGlhbGx5IGJlIGRyaXZlbiBieSBzb21lIHRyaWdnZXIg KGUuZy4sPGJyPg0KY2hhbmdlPGJyPg0KaW4gc29mdHdhcmUgaW52ZW50b3J5LCBwb2xpY3ksIG5l dHdvcmsgY29ubmVjdGl2aXR5IHN0YXR1cywgZXRjLikuJnF1b3Q7PGJyPg0KPGJyPg0KV2hpbGUg dGhpcyBwb3RlbnRpYWxseSBjcmVhdGVzIGEgY291cGxpbmcgYmV0d2VlbiB0aGUgdnVsbmVyYWJp bGl0eTxicj4NCm1hbmFnZW1lbnQgY2FwYWJpbGl0eSBhbmQgdGhlIGVuZHBvaW50IG1hbmFnZW1l bnQgY2FwYWJpbGl0eSwgYXMgd3JpdHRlbiwgSTxicj4NCnRoaW5rIGl0IHdpbGwgYmUgbGVmdCB0 byB0aGUgaW1wbGVtZW50ZXIgb2YgdGhvc2UgY2FwYWJpbGl0aWVzIHRvIGRlY2lkZS48YnI+DQpJ IHRoaW5rIHRoZSBwb2ludCBpcyBqdXN0IHRoYXQgeW91IGNvdWxkIGRvIHNvbWV0aGluZyBsaWtl IHRoaXMgdG8gaW1wcm92ZTxicj4NCnRoZSB2dWxuZXJhYmlsaXR5IGFzc2Vzc21lbnQuPGJyPg0K PGJyPg0KSWYgd2Ugc3RpbGwgZG9uJ3QgaGF2ZSBjb25zZW5zdXMgb24gdGhpcywgYW5vdGhlciBh cHByb2FjaCBtaWdodCBiZSB0bzxicj4NCmp1c3QgcmVtb3ZlIHRoaXMgdGV4dCBhbGwgdG9nZXRo ZXIgYXMgSSBkb24ndCB0aGluayBkb2luZyBzbyB3b3VsZCBwcmVjbHVkZTxicj4NCmFuIGltcGxl bWVudGVyIGZyb20gc3VwcG9ydGluZyBmdW5jdGlvbmFsaXR5IGxpa2UgdGhpcyBpbiB0aGVpciBw cm9kdWN0Ljxicj4NCjxicj4NClRob3VnaHRzPzxicj4NCjxicj4NClRoYW5rcyw8YnI+DQo8YnI+ DQpEYW5ueTxicj4NCjxicj4NCjwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0 eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90dG9t LWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4tLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLTxi cj4NCkZyb206IEplcm9tZSBBdGhpYXMgWzxhIGhyZWY9Im1haWx0bzphdGhpYXNqZXJvbWVAZ21h aWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+bWFpbHRvOmF0aGlhc2plcm9tZUBnbWFpbC5jb208L2E+ XTxicj4NClNlbnQ6IFNhdHVyZGF5LCBKdW5lIDA0LCAyMDE2IDI6NDkgQU08YnI+DQpUbzogSGF5 bmVzLCBEYW4gJmx0OzxhIGhyZWY9Im1haWx0bzpkaGF5bmVzQG1pdHJlLm9yZyIgdGFyZ2V0PSJf YmxhbmsiPmRoYXluZXNAbWl0cmUub3JnPC9hPiZndDs8YnI+DQpDYzogPGEgaHJlZj0ibWFpbHRv OnNhY21AaWV0Zi5vcmciIHRhcmdldD0iX2JsYW5rIj5zYWNtQGlldGYub3JnPC9hPjxicj4NClN1 YmplY3Q6IFJlOiBbc2FjbV0gRk9SIFJFVklFVzogVnVsbmVyYWJpbGl0eSBBc3Nlc3NtZW50IFNj ZW5hcmlvIElzc3VlPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xh c3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0 b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4jNTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxi bG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1t YXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQt ZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4tIENoYW5nZSBEZXRlY3Rp b24gd2l0aCBhbiBFbmRwb2ludCBNYW5hZ2VtZW50IENhcGFiaWxpdHk8YnI+DQo8YnI+DQpXaGls ZSB0aGUgc2NlbmFyaW8gcHJvdmlkZWQgYnkgQWRhbSBpcyB2YWxpZCwgaWYgeW91ciBjb25jZXJu IGlzIHRoYXQ8L3NwYW4+PG86cD48L286cD48L3A+DQo8L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0i TXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3AtYWx0OmF1dG87bWFyZ2luLWJvdHRvbTox Mi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4wcHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVs dmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPiZxdW90O3RoZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4N CjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQi Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21z by1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2Zv bnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5pbmZvcm1hdGlvbiBi ZXlvbmQgdGhhdCZxdW90OyB3b3VsZCBiZSAmcXVvdDtzdXBwbGVtZW50YWwgZW5kcG9pbnQ8YnI+ DQppbmZvcm1hdGlvbiZxdW90Ozo8YnI+DQpJIGRvbid0IHNlZSBhIHNjZW5hcmlvIHdoZXJlIGFu IGVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSB3b3VsZCBoYXZlPGJyPg0KdG8gcHVzaCAt c3VwcGxlbWVudGFsLSBpbmZvcm1hdGlvbiB0byB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nlc3NtZW50 PGJyPg0KY2FwYWJpbGl0eSAod2hhdCB3b3VsZCB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nlc3NtZW50 IGNhcGFiaWxpdHkgZG8gd2l0aDxicj4NCid1bmtub3duJyBhZGRpdGlvbmFsIGluZm9ybWF0aW9u KTxicj4NCjxicj4NClNvIEkgdGhpbmsgdGhlIGlzc3VlIGlzIHRvIGNoYW5nZSAmcXVvdDt0aGUg aW5mb3JtYXRpb24gYmV5b25kIHRoYXQmcXVvdDsgdG88L3NwYW4+PG86cD48L286cD48L3A+DQo8 L2Jsb2NrcXVvdGU+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIiBzdHlsZT0ibXNvLW1hcmdpbi10b3At YWx0OmF1dG87bWFyZ2luLWJvdHRvbToxMi4wcHQiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6OS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7SGVsdmV0aWNhJnF1b3Q7LHNhbnMtc2VyaWYiPnNvbWV0aGlu Zzwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUu MHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1z by1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNl cmlmIj5saWtlICZxdW90O3RoZSB1cGRhdGVkIGluZm9ybWF0aW9uJnF1b3Q7PGJyPg0KPGJyPg0K PGJyPg0KPGJyPg0KMjAxNi0wNS0xOCAxNjoxNSBHTVQmIzQzOzAzOjAwIEhheW5lcywgRGFuICZs dDs8YSBocmVmPSJtYWlsdG86ZGhheW5lc0BtaXRyZS5vcmciIHRhcmdldD0iX2JsYW5rIj5kaGF5 bmVzQG1pdHJlLm9yZzwvYT4mZ3Q7Ojwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3Rl IHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9 Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21zby1tYXJnaW4tYm90 dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5EdXJpbmcgeWVzdGVyZGF54oCZcyB2aXJ0 dWFsIGludGVyaW0gbWVldGluZywgd2UgZGlzY3Vzc2VkIHZhcmlvdXMgb3Blbjxicj4NCmlzc3Vl cyB3aXRoIHJlc3BlY3QgdG8gdGhlIFZ1bG5lcmFiaWxpdHkgQXNzZXNzbWVudCBTY2VuYXJpbyBb MV0gYXMgYTxicj4NCnJlc3VsdCBvZiBmZWVkYmFjayB0aGF0IHdlIHJlY2VpdmVkIG9uIHRoZSBk cmFmdCB3aGljaCB5b3UgY2FuIHNlZTxicj4NCmhlcmUgWzJdWzNdLiZuYnNwOyBUaGUgc2xpZGXi gJlzIGZyb20gdGhlIG1lZXRpbmcgY2FuIGJlIGZvdW5kIGhlcmUgWzRdLjxicj4NCjxicj4NCjxi cj4NCjxicj4NCk9uZSBpc3N1ZSB0aGF0IHdlIGRpZG7igJl0IGhhdmUgYSBjaGFuY2UgdG8gZGlz Y3VzcyBiZWNhdXNlIHdlIHJhbiBvdXQ8YnI+DQpvZiB0aW1lIHdhcyB3aGV0aGVyIG9yIG5vdCBh biBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxpdHkgaGFzIHRoZTxicj4NCmFiaWxpdHkgdG8g cHVzaCBzdXBwbGVtZW50YWwgZW5kcG9pbnQgaW5mb3JtYXRpb24gdG8gdGhlIHZ1bG5lcmFiaWxp dHk8YnI+DQphc3Nlc3NtZW50IGNhcGFiaWxpdHkuJm5ic3A7IFRoaXMgcXVlc3Rpb24gY2FtZSBv dXQgb2YgYSByZXZpZXcgb2YgdGhlPGJyPg0KZm9sbG93aW5nIHRleHQgZnJvbSB0aGUgVnVsbmVy YWJpbGl0eSBBc3Nlc3NtZW50IFNjZW5hcmlvPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9j a3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1t YXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9u dC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlm Ij4oc3BlY2lmaWNhbGx5IHRoZTwvc3Bhbj48bzpwPjwvbzpwPjwvcD4NCjxibG9ja3F1b3RlIHN0 eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPHAgY2xhc3M9Ik1z b05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdpbi1ib3R0b206MTIu MHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZl dGljYSZxdW90OyxzYW5zLXNlcmlmIj5sYXN0IHNlbnRlbmNlKS48L3NwYW4+PG86cD48L286cD48 L3A+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9tOjUu MHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0 bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBw dDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KPGJy Pg0KPGJyPg0K4oCcSW4gbWFueSBjYXNlcywgdGhlIGVuZHBvaW50IGluZm9ybWF0aW9uIG5lZWRl ZCB0byBkZXRlcm1pbmUgYW48YnI+DQplbmRwb2ludOKAmXMgdnVsbmVyYWJpbGl0eSBzdGF0dXMg d2lsbCBoYXZlIGJlZW4gcHJldmlvdXNseTxicj4NCjxicj4NCmNvbGxlY3RlZCBieSB0aGUgRW5k cG9pbnQgTWFuYWdlbWVudCBDYXBhYmlsaXR5IGFuZCBhdmFpbGFibGUgaW4gYTxicj4NClJlcG9z aXRvcnkuIEhvd2V2ZXIsIGluIG90aGVyIGNhc2VzLCB0aGUgbmVjZXNzYXJ5PGJyPg0KPGJyPg0K ZW5kcG9pbnQgaW5mb3JtYXRpb24gd2lsbCBub3QgYmUgcmVhZGlseSBhdmFpbGFibGUgaW4gYSBS ZXBvc2l0b3J5IGFuZDxicj4NCmEgdGFyZ2V0ZWQgY29sbGVjdGlvbiB3aWxsIGJlIG5lY2Vzc2Fy eS4mbmJzcDsgT2YgY291cnNlLDxicj4NCjxicj4NCmFuIGltcGxlbWVudGF0aW9uIG9mIGFuIGVu ZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSBtYXkgcHJlZmVyIHRvPGJyPg0KZW5hYmxlIG9w ZXJhdG9ycyB0byBwZXJmb3JtIHRhcmdldGVkIGNvbGxlY3Rpb24gdW5kZXI8YnI+DQo8YnI+DQpj ZXJ0YWluIGNpcmN1bXN0YW5jZXMsIGV2ZW4gd2hlbiBzdWZmaWNpZW50IGluZm9ybWF0aW9uIGNh biBiZTxicj4NCnByb3ZpZGVkIGJ5IHRoZSBlbmRwb2ludCBtYW5hZ2VtZW50IGNhcGFiaWxpdHkg KGUuZy4gdGhlcmU8YnI+DQo8YnI+DQptYXkgYmUgZnJlc2huZXNzIHJlcXVpcmVtZW50cyBmb3Ig aW5mb3JtYXRpb24pLiBUYXJnZXRlZCBjb2xsZWN0aW9uIG9mPGJyPg0KZW5kcG9pbnQgaW5mb3Jt YXRpb24gZm9yIHRoZSBwdXJwb3NlIG9mIHZ1bG5lcmFiaWxpdHk8YnI+DQo8YnI+DQphc3Nlc3Nt ZW50IGRvZXMgbm90IG5lY2Vzc2FyaWx5IG5lZWQgdG8gYmUgYSBwdWxsIGJ5IHRoZSB2dWxuZXJh YmlsaXR5PGJyPg0KYXNzZXNzbWVudCBjYXBhYmlsaXR5LiZuYnNwOyBVbmRlciBjZXJ0YWluIGRl cGxveW1lbnQ8YnI+DQo8YnI+DQpzY2VuYXJpb3MsIG9uY2UgdGhlIG5lY2Vzc2FyeSBkZXRlY3Rp b24gaW5mb3JtYXRpb24gaXMga25vd24sIHRoZTxicj4NCmluZm9ybWF0aW9uIGJleW9uZCB0aGF0 IHdoaWNoIGlzIGF2YWlsYWJsZSBpbiB0aGUgZW5kcG9pbnQ8YnI+DQo8YnI+DQptYW5hZ2VtZW50 IGNhcGFiaWxpdHkgY2FuIGJlIHB1c2hlZCB0byB0aGUgdnVsbmVyYWJpbGl0eSBhc3Nlc3NtZW50 PGJyPg0KY2FwYWJpbGl0eSBieSB0aGUgZW5kcG9pbnQgd2hlbmV2ZXIgdGhhdCBpbmZvcm1hdGlv bjxicj4NCjxicj4NCmNoYW5nZXMu4oCdPGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KT3VyIG1haW4g cXVlc3Rpb24gaXMgd2hldGhlciBvciBub3QgcHVzaGluZyBpbmZvcm1hdGlvbiBmcm9tIHRoZTxi cj4NCmVuZHBvaW50IG1hbmFnZW1lbnQgY2FwYWJpbGl0eSB0byB0aGUgdnVsbmVyYWJpbGl0eSBh c3Nlc3NtZW50PGJyPg0KY2FwYWJpbGl0eSBpcyBhY3R1YWxseSBwb3NzaWJsZSBiZWNhdXNlIGl0 IHdvdWxkIG5vdCBuZWNlc3NhcmlseSBrbm93PGJyPg0Kd2hhdCBpbmZvcm1hdGlvbiBpdCBuZWVk cyB0byBwdXNoIHByaW9yIHRvIHRoZSBzZXJ2ZXIgcmVxdWVzdGluZyBpdDxicj4NCihpbiB3aGlj aCBjYXNlIGl0IGlzIHByb2JhYmx5IGNvbnNpZGVyZWQgYSBwdWxsKT8mbmJzcDsgSXMgdGhlcmUg YTxicj4NCnNpdHVhdGlvbiB3aGVyZSB0aGUgZW5kcG9pbnQgd291bGQga25vdywgaW4gYWR2YW5j ZSwgd2hhdCBhZGRpdGlvbmFsPGJyPg0KaW5mb3JtYXRpb24gaXMgbmVlZGVkIGZvciBhbiBhc3Nl c3NtZW50IHdpdGhvdXQgYSBzZXJ2ZXIgcmVxdWVzdGluZyBpdD88YnI+DQo8YnI+DQo8YnI+DQo8 YnI+DQpJZiB5b3UgaGF2ZSBhbnkgdGhvdWdodHMgb24gdGhpcyBpc3N1ZSwgcGxlYXNlIHByb3Zp ZGUgZmVlZGJhY2sgYnkgTWF5PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdp bi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj4zMXN0Ljwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJnaW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206 NS4wcHQiPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDph dXRvO21zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjku MHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj5XZSBhcmUg cGxhbm5pbmcgdG8gaGF2ZSBhbiB1cGRhdGVkIHZlcnNpb24gb2YgdGhlIHNjZW5hcmlvIGZvciBK dW5lPC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9ibG9ja3F1b3RlPg0K PHAgY2xhc3M9Ik1zb05vcm1hbCIgc3R5bGU9Im1zby1tYXJnaW4tdG9wLWFsdDphdXRvO21hcmdp bi1ib3R0b206MTIuMHB0Ij48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5 OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmIj44dGguPC9zcGFuPjxvOnA+PC9vOnA+ PC9wPg0KPGJsb2NrcXVvdGUgc3R5bGU9Im1hcmdpbi10b3A6NS4wcHQ7bWFyZ2luLWJvdHRvbTo1 LjBwdCI+DQo8YmxvY2txdW90ZSBzdHlsZT0ibWFyZ2luLXRvcDo1LjBwdDttYXJnaW4tYm90dG9t OjUuMHB0Ij4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6 YXV0bzttYXJnaW4tYm90dG9tOjEyLjBwdCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KPGJyPg0K PGJyPg0KVGhhbmtzLDxicj4NCjxicj4NCkRhbm55PGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KWzFd IDxhIGhyZWY9Imh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWNvZmZpbi1z YWNtLXZ1bG4tc2NlbmFyaW8vIiB0YXJnZXQ9Il9ibGFuayI+DQpodHRwczovL2RhdGF0cmFja2Vy LmlldGYub3JnL2RvYy9kcmFmdC1jb2ZmaW4tc2FjbS12dWxuLXNjZW5hcmlvLzwvYT48YnI+DQo8 YnI+DQpbMl0gPGEgaHJlZj0iaHR0cHM6Ly9naXRodWIuY29tL3NhY213Zy92dWxuZXJhYmlsaXR5 LXNjZW5hcmlvL3B1bGwvMyIgdGFyZ2V0PSJfYmxhbmsiPg0KaHR0cHM6Ly9naXRodWIuY29tL3Nh Y213Zy92dWxuZXJhYmlsaXR5LXNjZW5hcmlvL3B1bGwvMzwvYT48YnI+DQo8YnI+DQpbM10gPGEg aHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbC1hcmNoaXZlL3dlYi9zYWNtL2N1cnJlbnQv bXNnMDM5NTguaHRtbCIgdGFyZ2V0PSJfYmxhbmsiPg0KaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFp bC1hcmNoaXZlL3dlYi9zYWNtL2N1cnJlbnQvbXNnMDM5NTguaHRtbDwvYT48YnI+DQo8YnI+DQpb NF0gPGEgaHJlZj0iaHR0cHM6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy9kb2Mvc2xpZGVzLWludGVy aW0tMjAxNi1zYWNtLTMtMS8iIHRhcmdldD0iX2JsYW5rIj4NCmh0dHBzOi8vZGF0YXRyYWNrZXIu aWV0Zi5vcmcvZG9jL3NsaWRlcy1pbnRlcmltLTIwMTYtc2FjbS0zLTEvPC9hPjxicj4NCihsb29r cyBsaWtlIHRoZSBzbGlkZXMgYXJlIG5vdCBhdmFpbGFibGUganVzdCB5ZXQsIGJ1dCwgSSBzdXNw ZWN0IHRoZXk8YnI+DQpzaG91bGQgYmU8YnI+DQpzb29uKTxicj4NCjxicj4NCjxicj4NCjxicj4N Cjxicj4NCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fPGJy Pg0Kc2FjbSBtYWlsaW5nIGxpc3Q8YnI+DQo8YSBocmVmPSJtYWlsdG86c2FjbUBpZXRmLm9yZyIg dGFyZ2V0PSJfYmxhbmsiPnNhY21AaWV0Zi5vcmc8L2E+PGJyPg0KPGEgaHJlZj0iaHR0cHM6Ly93 d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zYWNtIiB0YXJnZXQ9Il9ibGFuayI+aHR0cHM6 Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9saXN0aW5mby9zYWNtPC9hPjwvc3Bhbj48bzpwPjwvbzpw PjwvcD4NCjwvYmxvY2txdW90ZT4NCjwvYmxvY2txdW90ZT4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi IHN0eWxlPSJtc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0 byI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRp Y2EmcXVvdDssc2Fucy1zZXJpZiI+PGJyPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX188YnI+DQpzYWNtIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1h aWx0bzpzYWNtQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+c2FjbUBpZXRmLm9yZzwvYT48YnI+ DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20iIHRh cmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY208 L2E+PGJyPg0KPGJyPg0KPGJyPg0KPGJyPg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX188YnI+DQpzYWNtIG1haWxpbmcgbGlzdDxicj4NCjxhIGhyZWY9Im1h aWx0bzpzYWNtQGlldGYub3JnIiB0YXJnZXQ9Il9ibGFuayI+c2FjbUBpZXRmLm9yZzwvYT48YnI+ DQo8YSBocmVmPSJodHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY20iIHRh cmdldD0iX2JsYW5rIj5odHRwczovL3d3dy5pZXRmLm9yZy9tYWlsbWFuL2xpc3RpbmZvL3NhY208 L2E+PC9zcGFuPjxvOnA+PC9vOnA+PC9wPg0KPC9ibG9ja3F1b3RlPg0KPC9kaXY+DQo8L2Jsb2Nr cXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiIHN0eWxlPSJtc28tbWFyZ2luLXRv cC1hbHQ6YXV0bzttc28tbWFyZ2luLWJvdHRvbS1hbHQ6YXV0byI+Jm5ic3A7PG86cD48L286cD48 L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ibG9ja3F1b3Rl Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvcD4NCjwv ZGl2Pg0KPC9kaXY+DQo8L2Jsb2NrcXVvdGU+DQo8L2Rpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwi PjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPC9kaXY+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9ib2R5Pg0K PC9odG1sPg0K --_000_BY2PR09MB107882EB6572D4BE51F32C4BA5220BY2PR09MB1078namp_-- From nobody Wed Jun 29 06:37:56 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 9EA0C12D87C for ; Wed, 29 Jun 2016 06:37:55 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pBscXI4qY0Dt for ; Wed, 29 Jun 2016 06:37:53 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id A5C1112DC41 for ; Wed, 29 Jun 2016 06:37:51 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 323AA6C0A6B; Wed, 29 Jun 2016 09:37:51 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 1EE1D6C04AC; Wed, 29 Jun 2016 09:37:51 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Wed, 29 Jun 2016 09:37:50 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Wed, 29 Jun 2016 09:37:50 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=i7oeZiKtJlW3prCg2blZ6KdRl/aDvBXOY/c2TfHYwFg=; b=k1kIQAKK46ZaOvcetnU5381Vjajr4HtlEaJ2HU1vtPZNOk4pEOZ8Cx8YK4m/b/D3sKnanLfaVgnd5Hmf0oIZ9p7BpqTnA3wRnDiHcwyH+jOlMJ01jQacYKgxFUHMEhbU/KEDg5KczYK2GvlYjeMvXjiYHEeSU8oLIIGGe0KsEDo= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1080.namprd09.prod.outlook.com (10.166.116.12) with Microsoft SMTP Server (TLS) id 15.1.523.12; Wed, 29 Jun 2016 13:37:44 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.024; Wed, 29 Jun 2016 13:37:44 +0000 From: "Haynes, Dan" To: Adam Montville Thread-Topic: [sacm] Vulnerability Assessment Scenario Issue #18 - Review Appendices and Include References Thread-Index: AdHNhCtvhM838SdJTharv7N+H6TJZgDL0LwAAFXgeuA= Date: Wed, 29 Jun 2016 13:37:43 +0000 Message-ID: References: <4534FC00-A3DE-4DE3-8528-93B362B4C375@gmail.com> In-Reply-To: <4534FC00-A3DE-4DE3-8528-93B362B4C375@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.88] x-ms-office365-filtering-correlation-id: 1b9756c2-a110-4c2c-80bc-08d3a0228cf0 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1080; 6:EyQP4aw7V0UVVfzRtKaAXQTT8u9TJnsvokKLcQ4UdnxCf5VlkT0x9Fm9RhiCZ6bafrvU/OYkX5fSJBtp4s73yOWvxy4YFDMGl7Ogd/u0YJYzfQFQy/ii+wfU+PXBses2IS9SnLbLH0QUeJPNlAqVHZLFjbnCAIzCTWz7nMJwWzbTLcJX6WqGK4m+CnwpKeY8ufJ4wG4/lOlMkimfZeySBqPrhYJzdwr+rrJxfvqhfGWXIElaoriYwSr8y3wTv8ZGUjreA0a63rIV0w4vfsFiU2Krgw1/1W12vldrW3hepcJffF1ltVqApxjdp9ihPW2dsaW5R3nb7bRQY/xOVgvNSN5CCTN64uEkAcORC4r4Ap8=; 5:gBTgD4Y1C+IOI+Mo3JHryWUtK2rEIfBjUmL44wQ61fdsficnVJQJs1zXUXqg4aPFVSQmkdj+Xte+WgwbsGr8kjZdBsx1VV0P+8CmPurA7RAsi62sU0z1D5rkxz9Wd5/18TpGOOwW11WIAXT3eUFWFQ==; 24:Ll77naG+CzSBZRvCVb8wwhQ9YzLCQ1PI5Qq5zn1P93Qovnbj3SQO9SNuJlfDI/tgktahL0ganR6KY+mMDw+xTb9jNPnc+Hn+cdQwtMm+YWg=; 7:Kt6t8lGyhPRnS3K/+8OvBCPBca9zOa3KAsegXHRMsFz95cvG8JYDZCzizzOzzAeRXTPtGT8GV7SIKJyXM8sKLmoO90GveD9JT0aogXC8024007kWjJWhmQ09xG9lXzUYVXK55DtKvuR/2yeArFHeM9xhKH2WmUzq+Mzih3GAzpDAwC+prNytPiCg1VEnNN+jk45Lvu9oLjAXizOWy05+odw6Jbbw+zfKPEvho4yzaVmfs8eiLE9xL34jXtW004rRCxA3NjVxjnzaPK6zZ5t6sQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1080; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(166708455590820)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1080; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1080; x-forefront-prvs: 09888BC01D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(5383002)(189002)(199003)(377454003)(54534003)(24454002)(51914003)(5890100001)(92566002)(19617315012)(105586002)(97736004)(7696003)(76576001)(50986999)(66066001)(11100500001)(54356999)(790700001)(19609705001)(19580405001)(586003)(19580395003)(7846002)(6116002)(3846002)(102836003)(81156014)(2906002)(81166006)(15975445007)(8936002)(87936001)(7736002)(7906003)(5003600100003)(106356001)(68736007)(76176999)(9686002)(8676002)(3280700002)(4326007)(3660700001)(19625215002)(5002640100001)(10400500002)(19300405004)(101416001)(110136002)(99286002)(189998001)(2950100001)(77096005)(2900100001)(122556002)(74316001)(33656002)(86362001)(16236675004); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1080; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB1078CFE8510FE55B2AD9A578A5230BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jun 2016 13:37:43.9813 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1080 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #18 - Review Appendices and Include References X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jun 2016 13:37:55 -0000 --_000_BY2PR09MB1078CFE8510FE55B2AD9A578A5230BY2PR09MB1078namp_ Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 VGhhbmtzIGZvciB0aGUgZmVlZGJhY2sgQWRhbSENCg0KSWYgYW55b25lIGVsc2UgaGFzIHRob3Vn aHRzIG9uIHRoZXNlIHByb3Bvc2VkIGNoYW5nZXMsIHBsZWFzZSBsZXQgbWUga25vdyBpbiB0aGUg bmV4dCBkYXkgb3IgdHdvLiAgT3RoZXJ3aXNlLCBJIHBsYW4gdG8gcHVsbCBpbiB0aGVzZSBjaGFu Z2VzIGF0IHRoZSBlbmQgb2YgdGhlIHdlZWsuDQoNClRoYW5rcywNCg0KRGFubnkNCg0KRnJvbTog QWRhbSBNb250dmlsbGUgW21haWx0bzphZGFtLncubW9udHZpbGxlQGdtYWlsLmNvbV0NClNlbnQ6 IE1vbmRheSwgSnVuZSAyNywgMjAxNiA0OjM1IFBNDQpUbzogSGF5bmVzLCBEYW4gPGRoYXluZXNA bWl0cmUub3JnPg0KQ2M6IHNhY21AaWV0Zi5vcmcNClN1YmplY3Q6IFJlOiBbc2FjbV0gVnVsbmVy YWJpbGl0eSBBc3Nlc3NtZW50IFNjZW5hcmlvIElzc3VlICMxOCAtIFJldmlldyBBcHBlbmRpY2Vz IGFuZCBJbmNsdWRlIFJlZmVyZW5jZXMNCg0KVGhpcyBsb29rcyBnb29kIHRvIG1lLCB0aGFua3Mg RGFubnkhDQoNCk9uIEp1biAyNCwgMjAxNiwgYXQgOTowOCBBTSwgSGF5bmVzLCBEYW4gPGRoYXlu ZXNAbWl0cmUub3JnPG1haWx0bzpkaGF5bmVzQG1pdHJlLm9yZz4+IHdyb3RlOg0KDQpXZSBoYXZl IGEgdHJhY2tlciB0aGF0IHJlY29tbWVuZHMgcmV2aWV3aW5nIHRoZSBhcHBlbmRpY2VzIGFuZCBh ZGRpbmcgdGhlIGFwcHJvcHJpYXRlIHJlZmVyZW5jZXMgdG8gdGhlbSB0aHJvdWdob3V0IHRoZSBi b2R5IG9mIHRoZSBJLUQgWzFdLiAgUmlnaHQgbm93LCB0aGUgbWFqb3JpdHkgb2YgdGhlIGFwcGVu ZGljZXMgYXJlIG5vdCByZWZlcmVuY2VkIGluIHRoZSBib2R5IG9mIHRoZSBJLUQuDQoNCkkgd2Vu dCB0aHJvdWdoIHRoZSBib2R5IG9mIHRoZSBJLUQgYW5kIHRvb2sgYSBwYXNzIGF0IHJlZmVyZW5j aW5nIGFwcGVuZGljZXMgd2hlcmUgSSB0aG91Z2h0IGl0IG1hZGUgc2Vuc2Ugd2l0aCB0aGUgZXhj ZXB0aW9uIG9mIOKAnEFwcGVuZGl4IEEgLSBDaGFuZ2UgTG9n4oCdLiAgSSB3aWxsIG1vdmUgdGhh dCB0byBhIHNlY3Rpb24gYmV0d2VlbiDigJxTZWN1cml0eSBDb25zaWRlcmF0aW9uc+KAnSBhbmQg 4oCcUmVmZXJlbmNlc+KAnS4gIEFsc28sIHBsZWFzZSBub3RlIHRoYXQgSSBkaWQgbm90IHVwZGF0 ZSB0aGUgYXBwZW5kaWNlcyBzbyB0aGV5IGFwcGVhciBpbiB0aGUgb3JkZXIgaW4gd2hpY2ggdGhl eSBhcmUgcmVmZXJlbmNlZC4gIEkgd2lsbCBkbyB0aGF0IGluIHRoZSBJLUQgb25jZSB3ZSBhZ3Jl ZSBvbiB0aGUgY2hhbmdlcyB0aGF0IHdlIHdhbnQgdG8gbWFrZS4NCg0KQW55d2F5cywgcGxlYXNl IHJldmlldyB0aGUgYXR0YWNoZWQgY2hhbmdlcyBhbmQgbGV0IG1lIGtub3cgaWYgdGhleSBzZWVt IHJlYXNvbmFibGUgdG8gaW5jb3Jwb3JhdGUgaW50byB0aGUgbmV4dCByZXZpc2lvbiBvZiB0aGUg VnVsbmVyYWJpbGl0eSBBc3Nlc3NtZW50IFNjZW5hcmlvIEktRC4gIEFsc28sIHBsZWFzZSBsZXQg bWUga25vdyBpZiB5b3UgaGF2ZSBzdWdnZXN0aW9ucyBmb3IgYmV0dGVyIHBsYWNlcyB0byBtYWtl IHRoZSByZWZlcmVuY2VzIG9yIGlmIHlvdSBmZWVsIHN0cm9uZ2x5IHRoYXQgYSBwYXJ0aWN1bGFy IGFwcGVuZGl4IGlzIG5vIGxvbmdlciBuZWVkZWQuDQoNClRoYW5rcywNCg0KRGFubnkNCg0KWzFd IGh0dHBzOi8vZ2l0aHViLmNvbS9zYWNtd2cvdnVsbmVyYWJpbGl0eS1zY2VuYXJpby9pc3N1ZXMv MTgNCg0KPGFkZC12YXMtcmVmZXJlbmNlcy5kb2N4Pl9fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fDQpzYWNtIG1haWxpbmcgbGlzdA0Kc2FjbUBpZXRmLm9yZzxt YWlsdG86c2FjbUBpZXRmLm9yZz4NCmh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4vbGlzdGlu Zm8vc2FjbQ0KDQo= --_000_BY2PR09MB1078CFE8510FE55B2AD9A578A5230BY2PR09MB1078namp_ Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 PGh0bWwgeG1sbnM6dj0idXJuOnNjaGVtYXMtbWljcm9zb2Z0LWNvbTp2bWwiIHhtbG5zOm89InVy bjpzY2hlbWFzLW1pY3Jvc29mdC1jb206b2ZmaWNlOm9mZmljZSIgeG1sbnM6dz0idXJuOnNjaGVt YXMtbWljcm9zb2Z0LWNvbTpvZmZpY2U6d29yZCIgeG1sbnM6bT0iaHR0cDovL3NjaGVtYXMubWlj cm9zb2Z0LmNvbS9vZmZpY2UvMjAwNC8xMi9vbW1sIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcv VFIvUkVDLWh0bWw0MCI+DQo8aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIg Y29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxtZXRhIG5hbWU9IkdlbmVyYXRv ciIgY29udGVudD0iTWljcm9zb2Z0IFdvcmQgMTUgKGZpbHRlcmVkIG1lZGl1bSkiPg0KPHN0eWxl PjwhLS0NCi8qIEZvbnQgRGVmaW5pdGlvbnMgKi8NCkBmb250LWZhY2UNCgl7Zm9udC1mYW1pbHk6 SGVsdmV0aWNhOw0KCXBhbm9zZS0xOjIgMTEgNiA0IDIgMiAyIDIgMiA0O30NCkBmb250LWZhY2UN Cgl7Zm9udC1mYW1pbHk6IkNhbWJyaWEgTWF0aCI7DQoJcGFub3NlLTE6MiA0IDUgMyA1IDQgNiAz IDIgNDt9DQpAZm9udC1mYWNlDQoJe2ZvbnQtZmFtaWx5OkNhbGlicmk7DQoJcGFub3NlLTE6MiAx NSA1IDIgMiAyIDQgMyAyIDQ7fQ0KLyogU3R5bGUgRGVmaW5pdGlvbnMgKi8NCnAuTXNvTm9ybWFs LCBsaS5Nc29Ob3JtYWwsIGRpdi5Nc29Ob3JtYWwNCgl7bWFyZ2luOjBpbjsNCgltYXJnaW4tYm90 dG9tOi4wMDAxcHQ7DQoJZm9udC1zaXplOjEyLjBwdDsNCglmb250LWZhbWlseToiVGltZXMgTmV3 IFJvbWFuIixzZXJpZjt9DQphOmxpbmssIHNwYW4uTXNvSHlwZXJsaW5rDQoJe21zby1zdHlsZS1w cmlvcml0eTo5OTsNCgljb2xvcjpibHVlOw0KCXRleHQtZGVjb3JhdGlvbjp1bmRlcmxpbmU7fQ0K YTp2aXNpdGVkLCBzcGFuLk1zb0h5cGVybGlua0ZvbGxvd2VkDQoJe21zby1zdHlsZS1wcmlvcml0 eTo5OTsNCgljb2xvcjpwdXJwbGU7DQoJdGV4dC1kZWNvcmF0aW9uOnVuZGVybGluZTt9DQpwLm1z b25vcm1hbDAsIGxpLm1zb25vcm1hbDAsIGRpdi5tc29ub3JtYWwwDQoJe21zby1zdHlsZS1uYW1l Om1zb25vcm1hbDsNCgltc28tbWFyZ2luLXRvcC1hbHQ6YXV0bzsNCgltYXJnaW4tcmlnaHQ6MGlu Ow0KCW1zby1tYXJnaW4tYm90dG9tLWFsdDphdXRvOw0KCW1hcmdpbi1sZWZ0OjBpbjsNCglmb250 LXNpemU6MTIuMHB0Ow0KCWZvbnQtZmFtaWx5OiJUaW1lcyBOZXcgUm9tYW4iLHNlcmlmO30NCnNw YW4uYXBwbGUtY29udmVydGVkLXNwYWNlDQoJe21zby1zdHlsZS1uYW1lOmFwcGxlLWNvbnZlcnRl ZC1zcGFjZTt9DQpzcGFuLkVtYWlsU3R5bGUxOQ0KCXttc28tc3R5bGUtdHlwZTpwZXJzb25hbC1y ZXBseTsNCglmb250LWZhbWlseToiQ2FsaWJyaSIsc2Fucy1zZXJpZjsNCgljb2xvcjojMUY0OTdE O30NCi5Nc29DaHBEZWZhdWx0DQoJe21zby1zdHlsZS10eXBlOmV4cG9ydC1vbmx5Ow0KCWZvbnQt c2l6ZToxMC4wcHQ7fQ0KQHBhZ2UgV29yZFNlY3Rpb24xDQoJe3NpemU6OC41aW4gMTEuMGluOw0K CW1hcmdpbjoxLjBpbiAxLjBpbiAxLjBpbiAxLjBpbjt9DQpkaXYuV29yZFNlY3Rpb24xDQoJe3Bh Z2U6V29yZFNlY3Rpb24xO30NCi0tPjwvc3R5bGU+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8 bzpzaGFwZWRlZmF1bHRzIHY6ZXh0PSJlZGl0IiBzcGlkbWF4PSIxMDI2IiAvPg0KPC94bWw+PCFb ZW5kaWZdLS0+PCEtLVtpZiBndGUgbXNvIDldPjx4bWw+DQo8bzpzaGFwZWxheW91dCB2OmV4dD0i ZWRpdCI+DQo8bzppZG1hcCB2OmV4dD0iZWRpdCIgZGF0YT0iMSIgLz4NCjwvbzpzaGFwZWxheW91 dD48L3htbD48IVtlbmRpZl0tLT4NCjwvaGVhZD4NCjxib2R5IGxhbmc9IkVOLVVTIiBsaW5rPSJi bHVlIiB2bGluaz0icHVycGxlIj4NCjxkaXYgY2xhc3M9IldvcmRTZWN0aW9uMSI+DQo8cCBjbGFz cz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTom cXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+VGhhbmtzIGZvciB0 aGUgZmVlZGJhY2sgQWRhbSE8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9y bWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxp YnJpJnF1b3Q7LHNhbnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3Nw YW4+PC9wPg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5 N0QiPklmIGFueW9uZSBlbHNlIGhhcyB0aG91Z2h0cyBvbiB0aGVzZSBwcm9wb3NlZCBjaGFuZ2Vz LCBwbGVhc2UgbGV0IG1lIGtub3cgaW4gdGhlIG5leHQgZGF5IG9yIHR3by4gJm5ic3A7T3RoZXJ3 aXNlLCBJIHBsYW4gdG8gcHVsbCBpbiB0aGVzZSBjaGFuZ2VzIGF0IHRoZSBlbmQgb2YgdGhlDQog d2Vlay48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWY7Y29sb3I6IzFGNDk3RCI+PG86cD4mbmJzcDs8L286cD48L3NwYW4+PC9wPg0KPHAg Y2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9udC1mYW1p bHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiMxRjQ5N0QiPlRoYW5rcyw8 YnI+DQo8YnI+DQpEYW5ueTxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZjtjb2xvcjojMUY0OTdEIj48bzpwPiZuYnNwOzwvbzpwPjwvc3Bh bj48L3A+DQo8ZGl2IHN0eWxlPSJib3JkZXI6bm9uZTtib3JkZXItbGVmdDpzb2xpZCBibHVlIDEu NXB0O3BhZGRpbmc6MGluIDBpbiAwaW4gNC4wcHQiPg0KPGRpdj4NCjxkaXYgc3R5bGU9ImJvcmRl cjpub25lO2JvcmRlci10b3A6c29saWQgI0UxRTFFMSAxLjBwdDtwYWRkaW5nOjMuMHB0IDBpbiAw aW4gMGluIj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+RnJvbTo8 L3NwYW4+PC9iPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90 O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+IEFkYW0gTW9udHZpbGxlIFttYWlsdG86YWRhbS53 Lm1vbnR2aWxsZUBnbWFpbC5jb21dDQo8YnI+DQo8Yj5TZW50OjwvYj4gTW9uZGF5LCBKdW5lIDI3 LCAyMDE2IDQ6MzUgUE08YnI+DQo8Yj5Ubzo8L2I+IEhheW5lcywgRGFuICZsdDtkaGF5bmVzQG1p dHJlLm9yZyZndDs8YnI+DQo8Yj5DYzo8L2I+IHNhY21AaWV0Zi5vcmc8YnI+DQo8Yj5TdWJqZWN0 OjwvYj4gUmU6IFtzYWNtXSBWdWxuZXJhYmlsaXR5IEFzc2Vzc21lbnQgU2NlbmFyaW8gSXNzdWUg IzE4IC0gUmV2aWV3IEFwcGVuZGljZXMgYW5kIEluY2x1ZGUgUmVmZXJlbmNlczxvOnA+PC9vOnA+ PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48bzpwPiZu YnNwOzwvbzpwPjwvcD4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPlRoaXMgbG9va3MgZ29vZCB0byBt ZSwgdGhhbmtzIERhbm55ITxvOnA+PC9vOnA+PC9wPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxvOnA+Jm5ic3A7PC9vOnA+PC9wPg0KPGRpdj4NCjxibG9ja3F1b3RlIHN0eWxlPSJtYXJn aW4tdG9wOjUuMHB0O21hcmdpbi1ib3R0b206NS4wcHQiPg0KPGRpdj4NCjxwIGNsYXNzPSJNc29O b3JtYWwiPk9uIEp1biAyNCwgMjAxNiwgYXQgOTowOCBBTSwgSGF5bmVzLCBEYW4gJmx0OzxhIGhy ZWY9Im1haWx0bzpkaGF5bmVzQG1pdHJlLm9yZyI+ZGhheW5lc0BtaXRyZS5vcmc8L2E+Jmd0OyB3 cm90ZTo8bzpwPjwvbzpwPjwvcD4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86cD4m bmJzcDs8L286cD48L3A+DQo8ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+V2UgaGF2ZSBhIHRyYWNrZXIgdGhhdCByZWNvbW1lbmRzIHJldmlld2luZyB0 aGUgYXBwZW5kaWNlcyBhbmQgYWRkaW5nIHRoZSBhcHByb3ByaWF0ZSByZWZlcmVuY2VzIHRvIHRo ZW0gdGhyb3VnaG91dCB0aGUgYm9keSBvZiB0aGUgSS1EIFsxXS4mbmJzcDsgUmlnaHQgbm93LCB0 aGUgbWFqb3JpdHkgb2YgdGhlDQogYXBwZW5kaWNlcyBhcmUgbm90IHJlZmVyZW5jZWQgaW4gdGhl IGJvZHkgb2YgdGhlIEktRC4mbmJzcDs8bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxk aXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtm b250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9v OnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFu IHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDss c2Fucy1zZXJpZiI+SSB3ZW50IHRocm91Z2ggdGhlIGJvZHkgb2YgdGhlIEktRCBhbmQgdG9vayBh IHBhc3MgYXQgcmVmZXJlbmNpbmcgYXBwZW5kaWNlcyB3aGVyZSBJIHRob3VnaHQgaXQgbWFkZSBz ZW5zZSB3aXRoIHRoZSBleGNlcHRpb24gb2Yg4oCcQXBwZW5kaXggQSAtIENoYW5nZSBMb2figJ0u ICZuYnNwO0kgd2lsbCBtb3ZlIHRoYXQNCiB0byBhIHNlY3Rpb24gYmV0d2VlbiDigJxTZWN1cml0 eSBDb25zaWRlcmF0aW9uc+KAnSBhbmQg4oCcUmVmZXJlbmNlc+KAnS4gJm5ic3A7QWxzbywgcGxl YXNlIG5vdGUgdGhhdCBJIGRpZCBub3QgdXBkYXRlIHRoZSBhcHBlbmRpY2VzIHNvIHRoZXkgYXBw ZWFyIGluIHRoZSBvcmRlciBpbiB3aGljaCB0aGV5IGFyZSByZWZlcmVuY2VkLiZuYnNwOyBJIHdp bGwgZG8gdGhhdCBpbiB0aGUgSS1EIG9uY2Ugd2UgYWdyZWUgb24gdGhlIGNoYW5nZXMgdGhhdCB3 ZSB3YW50IHRvIG1ha2UuJm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj4mbmJzcDs8bzpwPjwvbzpw Pjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj48c3BhbiBz dHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtDYWxpYnJpJnF1b3Q7LHNh bnMtc2VyaWYiPkFueXdheXMsIHBsZWFzZSByZXZpZXcgdGhlIGF0dGFjaGVkIGNoYW5nZXMgYW5k IGxldCBtZSBrbm93IGlmIHRoZXkgc2VlbSByZWFzb25hYmxlIHRvIGluY29ycG9yYXRlIGludG8g dGhlIG5leHQgcmV2aXNpb24gb2YgdGhlIFZ1bG5lcmFiaWxpdHkgQXNzZXNzbWVudCBTY2VuYXJp byBJLUQuJm5ic3A7IEFsc28sDQogcGxlYXNlIGxldCBtZSBrbm93IGlmIHlvdSBoYXZlIHN1Z2dl c3Rpb25zIGZvciBiZXR0ZXIgcGxhY2VzIHRvIG1ha2UgdGhlIHJlZmVyZW5jZXMgb3IgaWYgeW91 IGZlZWwgc3Ryb25nbHkgdGhhdCBhIHBhcnRpY3VsYXIgYXBwZW5kaXggaXMgbm8gbG9uZ2VyIG5l ZWRlZC48bzpwPjwvbzpwPjwvc3Bhbj48L3A+DQo8L2Rpdj4NCjxkaXY+DQo8cCBjbGFzcz0iTXNv Tm9ybWFsIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjExLjBwdDtmb250LWZhbWlseTomcXVvdDtD YWxpYnJpJnF1b3Q7LHNhbnMtc2VyaWYiPiZuYnNwOzxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+VGhhbmtz LDxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3Jt YWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGli cmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+ DQo8ZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4w cHQ7Zm9udC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5EYW5ueTxvOnA+ PC9vOnA+PC9zcGFuPjwvcD4NCjwvZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxz cGFuIHN0eWxlPSJmb250LXNpemU6MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVv dDssc2Fucy1zZXJpZiI+Jm5ic3A7PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8ZGl2 Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZToxMS4wcHQ7Zm9u dC1mYW1pbHk6JnF1b3Q7Q2FsaWJyaSZxdW90OyxzYW5zLXNlcmlmIj5bMV08c3BhbiBjbGFzcz0i YXBwbGUtY29udmVydGVkLXNwYWNlIj4mbmJzcDs8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly9naXRo dWIuY29tL3NhY213Zy92dWxuZXJhYmlsaXR5LXNjZW5hcmlvL2lzc3Vlcy8xOCI+PHNwYW4gc3R5 bGU9ImNvbG9yOiM5NTRGNzIiPmh0dHBzOi8vZ2l0aHViLmNvbS9zYWNtd2cvdnVsbmVyYWJpbGl0 eS1zY2VuYXJpby9pc3N1ZXMvMTg8L3NwYW4+PC9hPjxvOnA+PC9vOnA+PC9zcGFuPjwvcD4NCjwv ZGl2Pg0KPGRpdj4NCjxwIGNsYXNzPSJNc29Ob3JtYWwiPjxzcGFuIHN0eWxlPSJmb250LXNpemU6 MTEuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0NhbGlicmkmcXVvdDssc2Fucy1zZXJpZiI+Jm5ic3A7 PG86cD48L286cD48L3NwYW4+PC9wPg0KPC9kaXY+DQo8cCBjbGFzcz0iTXNvTm9ybWFsIj4mbHQ7 YWRkLXZhcy1yZWZlcmVuY2VzLmRvY3gmZ3Q7PHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTo5LjBwdDtm b250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1zZXJpZiI+X19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX188YnI+DQpzYWNtIG1haWxpbmcgbGlz dDxicj4NCjwvc3Bhbj48YSBocmVmPSJtYWlsdG86c2FjbUBpZXRmLm9yZyI+PHNwYW4gc3R5bGU9 ImZvbnQtc2l6ZTo5LjBwdDtmb250LWZhbWlseTomcXVvdDtIZWx2ZXRpY2EmcXVvdDssc2Fucy1z ZXJpZjtjb2xvcjojOTU0RjcyIj5zYWNtQGlldGYub3JnPC9zcGFuPjwvYT48c3BhbiBzdHlsZT0i Zm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZxdW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNl cmlmIj48YnI+DQo8L3NwYW4+PGEgaHJlZj0iaHR0cHM6Ly93d3cuaWV0Zi5vcmcvbWFpbG1hbi9s aXN0aW5mby9zYWNtIj48c3BhbiBzdHlsZT0iZm9udC1zaXplOjkuMHB0O2ZvbnQtZmFtaWx5OiZx dW90O0hlbHZldGljYSZxdW90OyxzYW5zLXNlcmlmO2NvbG9yOiM5NTRGNzIiPmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vc2FjbTwvc3Bhbj48L2E+PG86cD48L286cD48L3A+ DQo8L2Rpdj4NCjwvYmxvY2txdW90ZT4NCjwvZGl2Pg0KPHAgY2xhc3M9Ik1zb05vcm1hbCI+PG86 cD4mbmJzcDs8L286cD48L3A+DQo8L2Rpdj4NCjwvZGl2Pg0KPC9kaXY+DQo8L2JvZHk+DQo8L2h0 bWw+DQo= --_000_BY2PR09MB1078CFE8510FE55B2AD9A578A5230BY2PR09MB1078namp_-- From nobody Wed Jun 29 06:38:10 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id A184812D103 for ; Wed, 29 Jun 2016 06:38:09 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.625 X-Spam-Level: X-Spam-Status: No, score=-5.625 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wWrLwe9IN9pQ for ; Wed, 29 Jun 2016 06:38:02 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id A59AC12DE5D for ; Wed, 29 Jun 2016 06:37:58 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 5AB2F6C0A7F; Wed, 29 Jun 2016 09:37:58 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 493636C0A7E; Wed, 29 Jun 2016 09:37:58 -0400 (EDT) Received: from imshyb01.MITRE.ORG (129.83.29.2) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Wed, 29 Jun 2016 09:37:57 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Wed, 29 Jun 2016 09:37:57 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=5Go9DWC5ZPI+wQAk2Ljgxxs9mAq30NoRf8qyi8XhYKs=; b=DYYwK2rC+DdICnmflD1E38n+2oXiwR2DlBNUxayufovISLhMtw1qlJTotMQRqcarW8BphPerHXKdDh8Mytx8mt+Z08xWSygTjAG/001mLw7GQt3XifDz6uqUvcYR3Eph/170sHZHgRWia4p7/q6LwKYhElOsdbrFT9BEoQ6jWk4= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1080.namprd09.prod.outlook.com (10.166.116.12) with Microsoft SMTP Server (TLS) id 15.1.523.12; Wed, 29 Jun 2016 13:37:56 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.024; Wed, 29 Jun 2016 13:37:56 +0000 From: "Haynes, Dan" To: Adam Montville Thread-Topic: [sacm] Vulnerability Assessment Scenario Issue #25 - Alignment with SACM Tasks Thread-Index: AdHQmA8vykHLuTQeSb2eWj/W2tADeAAHAMaAAFXWHEA= Date: Wed, 29 Jun 2016 13:37:56 +0000 Message-ID: References: <5832AFB6-D323-438B-B78C-C99CACACE605@gmail.com> In-Reply-To: <5832AFB6-D323-438B-B78C-C99CACACE605@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.88] x-ms-office365-filtering-correlation-id: f1a23e0d-415d-4ef5-7c2d-08d3a0229443 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1080; 6:dGbjfwU1H5PgAPhC6g1gx5XWyw0HGf5ru1B6u3V6D+SqwMzhRDOPWdtS9PXogPydmOk5Y16BJ4KIyNAAJPtFBl4bMTga7ZnSTGRYUEN532ej+amjUIcn4vSeftUE/zKNnfismi4PC/7pOfa5ci8xvXlcyjszuaZjqZycchuggUGcngWaCnm5UTzPknrlWJPrBHG/Rrn3WmAoiJ/T/WT0tUwcPfWay9KXwEkW7MH9kmwIRR1awbt8pv9ngvdgODEM33L801kSM+yHWXzIsQEJD5rHYXBl61mU999yzAk4u5pU2tGWGlLnSt+j8XzVFqul9Iz54Edo8n8kZDGr4sKUm8Od6SpGANZ1ukjWEE/rIWo=; 5:uoSWtRF+KL/LPKzNuDpbtcHW7WQDzmLYWDPxI8hlIM/OxWkiNgJdz+M6qlJLTYGNpkpuaGBt0WTdERQk0YaDYFzI3g4rXlP7lSX3CPt+q0x1CI040EWBORtro/ERUmNhXh/ffzrIEy1/xjWb1QgJdw==; 24:m2wE5eAuWutqdhbHN7dDiEvkchJiX4tV6iZXhp5eWTv8U+0T1bX0EYiiFAns/+zMlKlcliLki/6C57yvTr+kEh1kJeugrxVW5mMvJ9aCnaY=; 7:MzTyQohO1q9a6urxWpIj2fthORK85jcrTP/WbiBmdaTFlKbE9zTL8ohHEYtS0u8XQwNfOGQMpawP45P3Ctvo9lZzf3uZ84p4JgguODdiWl2Z2bAaxOKxMvPCPBS0OdSgMGyvDI5GrwYv5Sew1Agcoi3NbNpA7yt1pAiq8dnt1tEyOMxcWVDIzlkqRpb2FnevLmma62dntfHrFVwJdqnclAL0I+lUTYgB6RFPzyuZ9f7ueku/A6wPN45qiP5ttkKQ3CBPXL6hJk/pUqQ+QfZzXQ== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1080; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(166708455590820)(21748063052155); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(5005006)(8121501046)(3002001)(10201501046)(6055026); SRVR:BY2PR09MB1080; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1080; x-forefront-prvs: 09888BC01D x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(7916002)(5383002)(189002)(199003)(377454003)(43784003)(43234003)(24454002)(5890100001)(92566002)(19617315012)(105586002)(97736004)(7696003)(76576001)(50986999)(66066001)(11100500001)(54356999)(790700001)(19609705001)(19580405001)(586003)(19580395003)(7846002)(6116002)(3846002)(102836003)(81156014)(2906002)(81166006)(15975445007)(8936002)(87936001)(7736002)(7906003)(5003600100003)(106356001)(68736007)(76176999)(9686002)(8676002)(3280700002)(4326007)(3660700001)(19625215002)(5002640100001)(10400500002)(19300405004)(101416001)(110136002)(99286002)(189998001)(2950100001)(77096005)(2900100001)(122556002)(74316001)(33656002)(86362001)(16236675004); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1080; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: multipart/alternative; boundary="_000_BY2PR09MB107833EDB02F967AF5C5B193A5230BY2PR09MB1078namp_" MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jun 2016 13:37:56.3342 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1080 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #25 - Alignment with SACM Tasks X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Jun 2016 13:38:09 -0000 --_000_BY2PR09MB107833EDB02F967AF5C5B193A5230BY2PR09MB1078namp_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Thanks again for the feedback Adam! If anyone else has thoughts on these proposed changes, please let me know i= n the next day or two. Otherwise, I plan to pull in these changes at the e= nd of the week. Thanks, Danny From: Adam Montville [mailto:adam.w.montville@gmail.com] Sent: Monday, June 27, 2016 4:40 PM To: Haynes, Dan Cc: sacm@ietf.org Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #25 - Alignment= with SACM Tasks I like this, too, Danny, thanks! On Jun 27, 2016, at 12:19 PM, Haynes, Dan > wrote: Out of the last virtual interim meeting, it was suggested that we better al= ign the Vulnerability Assessment Scenario I-D with the SACM Tasks defined i= n the Terminology I-D [1]. As a result, we added tracker #25 to Vulnerabil= ity-Scenario repository on GitHub [2]. Attached is a first pass at the updates to the Vulnerability Assessment Sce= nario I-D that incorporates SACM Tasks. Please review the attached changes= and let me know if they seem reasonable to incorporate into the next revis= ion of the Vulnerability Assessment Scenario I-D. Also, please let me know= if there is anything I missed or if anything needs further clarification. Thanks, Danny [1] https://www.ietf.org/id/draft-ietf-sacm-terminology-09.txt [2] https://github.com/sacmwg/vulnerability-scenario/issues/25 _______________________________________________ sacm mailing list sacm@ietf.org https://www.ietf.org/mailman/listinfo/sacm --_000_BY2PR09MB107833EDB02F967AF5C5B193A5230BY2PR09MB1078namp_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Thanks again for the feedback Adam!

 

If anyone else has thoughts on these = proposed changes, please let me know in the next day or two.  Otherwis= e, I plan to pull in these changes at the end of the week.

 

Thanks,

Danny

 

 

From: Adam Montville [mailto:adam.w.= montville@gmail.com]
Sent: Monday, June 27, 2016 4:40 PM
To: Haynes, Dan <dhaynes@mitre.org>
Cc: sacm@ietf.org
Subject: Re: [sacm] Vulnerability Assessment Scenario Issue #25 - Al= ignment with SACM Tasks

 

I like this, too, Danny, thanks!

 

On Jun 27, 2016, at 12:19 PM, Haynes, Dan <dhaynes@mitre.org> wrote:<= /p>

 

Out of the last virtual interim meeting, it was sug= gested that we better align the Vulnerability Assessment Scenario I-D with = the SACM Tasks defined in the Terminology I-D [1].  As a result, we added tracker #25 to Vulnerability-Scenario rep= ository on GitHub  [2].

 

Attached is a first pass at the updates to the Vuln= erability Assessment Scenario I-D that incorporates SACM Tasks.  Pleas= e review the attached changes and let me know if they seem reasonable to incorporate into the next revision of the Vulnerability= Assessment Scenario I-D.  Also, please let me know if there is anythi= ng I missed or if anything needs further clarification.

 

Thanks,

 

Danny

 

<vas-task-edits.docx>_______________________= ________________________
sacm mailing list
sacm@ietf.org
https://www.ietf.org/mailman/listinfo/sacm

 

--_000_BY2PR09MB107833EDB02F967AF5C5B193A5230BY2PR09MB1078namp_-- From nobody Thu Jun 30 12:39:56 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id C92A512D558 for ; Thu, 30 Jun 2016 12:39:54 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.909 X-Spam-Level: X-Spam-Status: No, score=-5.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_IMAGE_ONLY_16=1.092, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H2=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=github.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7ofs5gv-PLco for ; Thu, 30 Jun 2016 12:39:53 -0700 (PDT) Received: from github-smtp2b-ext-cp1-prd.iad.github.net (github-smtp2-ext2.iad.github.net [192.30.252.193]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 1CB4012D5B5 for ; Thu, 30 Jun 2016 12:39:53 -0700 (PDT) Date: Thu, 30 Jun 2016 12:39:51 -0700 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=github.com; s=pf2014; t=1467315591; bh=uUq/voTQyODcnGNdRBfBfu+oW1cC8NPBgLLKZtU+uO4=; h=From:Reply-To:To:Cc:In-Reply-To:References:Subject:List-ID: List-Archive:List-Post:List-Unsubscribe:From; b=KdiDrp/EIlX3aVsH1RLZSOVSnTtLhZUdYxccKCzBcQYu2cUxf15Wy6KitETZumma4 2NonibZCZtykrwgkqsIPAY7FuqpYuc/XnxQnYe/t3+CmXV/Rw4oobTnzhsh+efqAUD 1XPFzWKNgo8/Gs76x5X5QcD9VEU5Jyg/RiXfSDB0= From: Danny Haynes To: sacmwg/vulnerability-scenario Message-ID: In-Reply-To: References: Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="--==_mimepart_57757587d4d49_26cd3fc79eebb2c06734e"; charset=UTF-8 Content-Transfer-Encoding: 7bit Precedence: list X-GitHub-Sender: djhaynes X-GitHub-Recipient: sacm X-Auto-Response-Suppress: All X-GitHub-Recipient-Address: sacm@ietf.org Archived-At: Subject: Re: [sacm] [sacmwg/vulnerability-scenario] closes #25. (eecd152) X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Reply-To: sacmwg/vulnerability-scenario List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jun 2016 19:39:55 -0000 ----==_mimepart_57757587d4d49_26cd3fc79eebb2c06734e Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Also, closes #12. --- You are receiving this because you are subscribed to this thread. Reply to this email directly or view it on GitHub: https://github.com/sacmwg/vulnerability-scenario/commit/eecd152a0a32ff52335ef64579b7f40096cd3095#commitcomment-18085417 ----==_mimepart_57757587d4d49_26cd3fc79eebb2c06734e Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit

Also, closes #12.

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub, or mute the thread.

----==_mimepart_57757587d4d49_26cd3fc79eebb2c06734e-- From nobody Thu Jun 30 13:16:41 2016 Return-Path: X-Original-To: sacm@ietfa.amsl.com Delivered-To: sacm@ietfa.amsl.com Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 168BD12D0ED for ; Thu, 30 Jun 2016 13:16:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.626 X-Spam-Level: X-Spam-Status: No, score=-5.626 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-1.426] autolearn=ham autolearn_force=no Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=mitre.onmicrosoft.com Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WalgqXapJLJY for ; Thu, 30 Jun 2016 13:16:36 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (smtpvmsrv1.mitre.org [192.52.194.136]) by ietfa.amsl.com (Postfix) with ESMTP id 647CB12B01C for ; Thu, 30 Jun 2016 13:16:36 -0700 (PDT) Received: from smtpvmsrv1.mitre.org (localhost.localdomain [127.0.0.1]) by localhost (Postfix) with SMTP id 516746C06C4; Thu, 30 Jun 2016 16:16:35 -0400 (EDT) Received: from imshyb01.MITRE.ORG (imshyb01.mitre.org [129.83.29.2]) by smtpvmsrv1.mitre.org (Postfix) with ESMTP id 429D96C02FC; Thu, 30 Jun 2016 16:16:35 -0400 (EDT) Received: from imshyb02.MITRE.ORG (129.83.29.3) by imshyb01.MITRE.ORG (129.83.29.2) with Microsoft SMTP Server (TLS) id 15.0.1130.7; Thu, 30 Jun 2016 16:16:34 -0400 Received: from gcc01-CY1-obe.outbound.protection.outlook.com (10.140.19.249) by imshyb02.MITRE.ORG (129.83.29.3) with Microsoft SMTP Server (TLS) id 15.0.1130.7 via Frontend Transport; Thu, 30 Jun 2016 16:16:34 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mitre.onmicrosoft.com; s=selector1-mitre-org; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=DjuH6RcjbunbGcKProsfvX2YawdfK+mKCJL1gn0kovE=; b=uDHSoGFexThztLruaMK92I1pNKIGE6ds/7SaNi89/+PthJMlWzMuCe+8D+vQSxvL2eiAg1TPXafjOCfXEuRt77lV61f1AhIw72mTu1YRyj8m4tglChItvW7JjUfUbBgUadH6HlrsM9Tq9EkuRg1jPHrdSPrs9Nsj7P7OuFGCMB0= Received: from BY2PR09MB1078.namprd09.prod.outlook.com (10.166.116.10) by BY2PR09MB1077.namprd09.prod.outlook.com (10.166.116.9) with Microsoft SMTP Server (TLS) id 15.1.523.12; Thu, 30 Jun 2016 20:16:28 +0000 Received: from BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) by BY2PR09MB1078.namprd09.prod.outlook.com ([10.166.116.10]) with mapi id 15.01.0523.024; Thu, 30 Jun 2016 20:16:28 +0000 From: "Haynes, Dan" To: Jerome Athias Thread-Topic: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #1 - Managing Terminology Thread-Index: AdGwZ0CBNxGcgzSeTTCG3Pz7mH3peQBw8vKAAOGJYjABcVqTUACVaOWAAKQu1aABNm1cgAN1C0qg Date: Thu, 30 Jun 2016 20:16:28 +0000 Message-ID: References: <5751D73F.3060000@sit.fraunhofer.de> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=dhaynes@mitre.org; x-originating-ip: [192.160.51.89] x-ms-office365-filtering-correlation-id: 0a865b49-d927-4735-c8f2-08d3a1236b62 x-microsoft-exchange-diagnostics: 1; BY2PR09MB1077; 6:zY5e0CPInSdQjT22BrqCjpReFGs2+tI8hbSW+bTma3f+h0LWfwqDHWgjAwllxll6+f9vgCLe5SLOK+QD8zeQNLnSX5n1J71Et+lwpGC8hytza/7ugVm3reJA5HOd7xE85ZvnJoNDKFwunew+AqgIN/6M2aP72v24tY2P1OfatGl9+5okmzILiTD4PkbZUBBG5w3T1ecFTjLsyWucviPEB6MHybG5AkREhunpACEBhwbuYJo73SzPPp9OlWDjah1sxxIkYF0WuXV4FVQ4CGPlLyfSlOFO6KJc1C9E9OvRA7ImwT+GdCF8C81oXL3xKoQajuRwrAqMxni7Uzj1nYMOrwZB4GjgtchH/hfYcPw/BgI=; 5:0bZRLGiYyNrgY76lX5Z3cu/D8smhQsybgzrhQ2oJDM2fOPLFpytaKdJz7fmV4EeAo58alf+0fbl8Uf4ZSEJOI5QDYgfpOadWPt7pe3Cf/rU4hl3eD3s9KT7VkmBBsyI3wZbz42V7GpEyMKk/odFOJw==; 24:rhnRpgEKR1ccVJZK2oeqEHD8o0ViPwPSvC0NKb86fYetgZzd2xejpTBshw3usI6bbBBAxdU0sedRmbjsVH+9YinGKM1JEZgLAQ9GuWEwnQw=; 7:PTNWn7RmmTx9+SurQW2PF6iNDtjxZhpzyMsefIqgB8J0M/z+UbR9XSg7vXTPzc3UDI7yUDyMmcK51I/YXtkHkWr6btgKvKBJ5GMX2Mcna+WsyX4XjbBA5+nKFoJrm/Wy466LytKDzu76nKSVNrR6Vc6CvY/2d4OFNDukRu9H8z2rWO6hPhlHdCxmBldxYcg/fAl4r4NklWSCaxAqTEhSo2VfLmDlQXdzrpfXfrtz4j9nyaNdcp5Hc656RlP06LpEx2T/QkNR7ZR2ZXn86pY2og== x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BY2PR09MB1077; x-microsoft-antispam-prvs: x-exchange-antispam-report-test: UriScan:(120809045254105)(192374486261705)(271806183753584)(100405760836317); x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(601004)(2401047)(8121501046)(5005006)(10201501046)(3002001)(6055026); SRVR:BY2PR09MB1077; BCL:0; PCL:0; RULEID:; SRVR:BY2PR09MB1077; x-forefront-prvs: 0989A7979C x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(7916002)(51694002)(189002)(377454003)(5383002)(13464003)(52564003)(199003)(101416001)(189998001)(10400500002)(586003)(105586002)(5002640100001)(110136002)(86362001)(50986999)(106356001)(76576001)(3280700002)(3660700001)(102836003)(97736004)(122556002)(8676002)(19580395003)(19580405001)(3846002)(81156014)(81166006)(6116002)(54356999)(76176999)(1411001)(4326007)(2906002)(9686002)(68736007)(99286002)(7846002)(15975445007)(7696003)(93886004)(8936002)(11100500001)(33656002)(92566002)(2900100001)(2950100001)(305945005)(87936001)(77096005)(5003600100003)(66066001)(7736002)(74316002)(17413003); DIR:OUT; SFP:1101; SCL:1; SRVR:BY2PR09MB1077; H:BY2PR09MB1078.namprd09.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; LANG:en; received-spf: None (protection.outlook.com: mitre.org does not designate permitted sender hosts) spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 X-MS-Exchange-CrossTenant-originalarrivaltime: 30 Jun 2016 20:16:28.3672 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: c620dc48-1d50-4952-8b39-df4d54d74d82 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BY2PR09MB1077 X-OriginatorOrg: mitre.org Archived-At: Cc: "sacm@ietf.org" Subject: Re: [sacm] FOR REVIEW: Vulnerability Assessment Scenario Issue #1 - Managing Terminology X-BeenThere: sacm@ietf.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: SACM WG mail list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Jun 2016 20:16:39 -0000 SSBqdXN0IHdhbnRlZCB0byBmb2xsb3cgb24gdGhpcyB0aHJlYWQuICBCYXNlZCBvbiB0aGUgNi8x NSB2aXJ0dWFsIGludGVyaW0gbWVldGluZyBbMV0sIHRoZXJlIHNlZW1lZCB0byBiZSBjb25zZW5z dXMgdGhhdCB3ZSB3b3VsZCBsZWF2ZSB0aGUgdGVybXMgZnJvbSB0aGUgVnVsbmVyYWJpbGl0eSBB c3Nlc3NtZW50IFNjZW5hcmlvIEktRCBbMl0gYXMgd2VsbCBhcyBpbmNsdWRlIHRoZW0gaW4gdGhl IFRlcm1pbm9sb2d5IEktRCBbM10uICBUaGUgcmVhc29uaW5nIGJlaGluZCB0aGlzIHdhczoNCg0K IDEpIFRlcm1zIHdvdWxkIGJlIGluY2x1ZGVkIGluIHRoZSBWdWxuZXJhYmlsaXR5IEFzc2Vzc21l bnQgU2NlbmFyaW8gSS1EIGZvciBpbXByb3ZlZC1yZWFkYWJpbGl0eSAoZG9uJ3QgbmVlZCB0byBr ZWVwIGxvb2tpbmcgYXQgVGVybWlub2xvZ3kgSS1EIHRvIGtub3cgd2hhdCB0aGUgdGVybXMgbWVh bikNCiAyKSBUZXJtcyB3b3VsZCBiZSBpbmNsdWRlZCBpbiB0aGUgVGVybWlub2xvZ3kgSS1EIHRv IGNhcHR1cmUgdGhlIFdHJ3MgdGhpbmtpbmcgYXQgYSBzcGVjaWZpYyBwb2ludCBpbiB0aW1lIGFz IHdlbGwgYXMgZW5hYmxlIHRoZSB1c2Ugb2YgdGhlIHRlcm1zIGluIG90aGVyIEktRHMgd2hlcmUg YXBwcm9wcmlhdGUNCg0KRG9lcyB0aGlzIGFwcHJvYWNoIHJlYXNvbmFibGUgdG8gb3RoZXJzPyAg QXJlIHRoZXJlIGFueSBtYWpvciBvYmplY3Rpb25zPyAgUGxlYXNlIGxldCBtZSBrbm93IGJ5IG5l eHQgV2VkbmVzZGF5IEp1bHkgNnRoLg0KDQpUaGFua3MsDQoNCkRhbm55DQoNClsxXSBodHRwczov L3d3dy5pZXRmLm9yZy9wcm9jZWVkaW5ncy9pbnRlcmltLTIwMTYtc2FjbS0wNC9taW51dGVzL21p bnV0ZXMtaW50ZXJpbS0yMDE2LXNhY20tNA0KWzJdIGh0dHBzOi8vZGF0YXRyYWNrZXIuaWV0Zi5v cmcvZG9jL2RyYWZ0LWlldGYtc2FjbS12dWxuLXNjZW5hcmlvLw0KWzNdIGh0dHBzOi8vZGF0YXRy YWNrZXIuaWV0Zi5vcmcvZG9jL2RyYWZ0LWlldGYtc2FjbS10ZXJtaW5vbG9neS8NCg0KPiAtLS0t LU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBKZXJvbWUgQXRoaWFzIFttYWlsdG86YXRo aWFzamVyb21lQGdtYWlsLmNvbV0NCj4gU2VudDogTW9uZGF5LCBKdW5lIDEzLCAyMDE2IDE6NDUg QU0NCj4gVG86IEhheW5lcywgRGFuIDxkaGF5bmVzQG1pdHJlLm9yZz4NCj4gQ2M6IHNhY21AaWV0 Zi5vcmcNCj4gU3ViamVjdDogUmU6IFtzYWNtXSBGT1IgUkVWSUVXOiBWdWxuZXJhYmlsaXR5IEFz c2Vzc21lbnQgU2NlbmFyaW8gSXNzdWUgIzENCj4gLSBNYW5hZ2luZyBUZXJtaW5vbG9neQ0KPiAN Cj4gSGksDQo+IA0KPiA3KSAiV29ya2Zsb3cgb3IgcHJvY2VzcyBlbmdpbmUiIHdvdWxkLCBJTUhP LCBiZSBJVElMIGNvbXBsaWFudA0KPiANCj4gDQo+ICJNb3JlIGxpa2VseSB0aGV5IHdvdWxkIGJl IHVzaW5nIHRoZSBDcml0aWNhbCBTZWN1cml0eSBDb250cm9scyBmcmFtZXdvcmsuIg0KPiBSaWdo dCwgSSB1bmRlcnN0YW5kIHRoaXMgc3RhdGVtZW50IGluIGEgbWF0dXJpdHkgbGV2ZWwgY29udGV4 dCwgZXRjLg0KPiAoSSBhcHByZWNpYXRlIGEgbG90IHRoZSBDU0MsIGFuZCBpdHMgdXNhZ2UgaW4g U0FDTSkgSSdtIGp1c3QgdGhpbmtpbmcgYWJvdXQNCj4gcHJvdmlkaW5nIG1ldHJpY3MgZnJvbSBT QUNNICh0byBiZSBhbGlnbmVkIHdpdGggc3RyYXRlZ2ljIGxldmVscykgQnV0IEkgZG9uJ3QNCj4g d2FudCB0byBhZGQgJ2NvbXBsZXhpdHknDQo+IA0KPiBSZWdhcmRzDQo=