Is getting hotter and hotter. I should drink more water....
I hope for some rain to come.
- wong chee tat :)
Wednesday, April 2, 2014
Gift pack for babies born next year to celebrate S’pore’s 50th birthday
Gift pack for babies born next year to celebrate S’pore’s 50th birthday
BY JOY FANG
PUBLISHED: APRIL 2, 6:20 AM(PAGE 1 OF 1) - PAGINATE
SINGAPORE — With ideas from the public pouring in on ways to celebrate the 50th anniversary of the Republic’s independence, it was announced yesterday that all Singaporean babies born next year, including those born overseas, will receive a gift pack from the Government that could consist of practical and commemorative items.
The National Population and Talent Division (NPTD), which will fund the Jubilee Baby Gift, is calling for suggestions on the items to be included in the gift pack. It has ruled out giving cash handouts, as parents of newborns already receive monetary incentives under the existing Marriage and Parenthood Package.
There could be about five to 10 items and the idea is to make the gift pack “a meaningful, significant (and) tangible keepsake with heritage value”, the NPTD said. Among the gift ideas thrown up at a focus group discussion yesterday were a chain with a key, baby shoes and bibs, while Minister in the Prime Minister’s Office Grace Fu suggested a sarong with a national flag motif, which she felt is practical — parents can use it to carry their child or during breastfeeding — and signifies a parental bond.
Separately, the two-month call for celebration ideas from the public — which ended on March 23 — has garnered a wide range of suggestions including organising a local music festival, reviving the Kallang Roar at the new National Stadium and holding nationwide quizzes on the Republic’s history.
A spokesman for the Singapore50 (SG50) Programme Office Secretariat said it is looking through all the ideas submitted via the various platforms to see how they can be incorporated into the celebration plans under the respective SG50 committees.
To date, the secretariat has also received almost 60 formal applications to tap the SG50 Celebration Fund, which was set up to seek and support meaningful ground-up initiatives. The applications ranged from charity and volunteerism initiatives to music and visual arts platforms. Applications for the fund are open until Aug 31 next year.
Speaking at the focus group discussion, Ms Fu described the gift pack as the nation’s little birthday surprise. “As we celebrate Singapore’s past and honour the contributions of our pioneer generation, we also set our sights on the future ... our Golden Jubilee babies symbolise our hopes and aspirations for the Singapore of tomorrow,” she said.
The public can submit ideas through the Jubilee Baby Gift’s microsite (http://www.nptd.gov.sg/jubilee) or at feedback booths islandwide until April 15. The first two booths will be set up at Jurong Point on April 5 and 6, and at VivoCity on April 12 and 13.
Singaporeans can also register their interest to participate in focus groups on what to include in the gift pack by emailing outreach@reach.gov.sg.
Between April 18 and May 15, the suggestions will be collated and curated in consultation with a five-member advisory panel comprising people-sector and community representatives. The panel, which will advise on the suitability of the items and the design, will be chaired by Ms Anita Fam, who serves on the council of Families for Life.
During this period, the public can vote on the shortlisted items.
Responding to TODAY’s queries, an NPTD spokesperson said: “We envision the gift to consist of a small package of items that newborns in 2015 could use in their early years. It would also have commemorative elements and serve as a token from our current generation to the next.”
She added: “As parents of Singaporean newborns already receive a cash gift under the existing Marriage and Parenthood Package, there is no intention to have a cash gift as one of the items.”
The budget for the gift pack will be finalised after the public engagement efforts are completed.
There were 32,000 citizen births last year and the NPTD expects the figure to remain about the same next year, although it is hoping for more.
“I don’t think parents would have children just for the gifts, but I think if we can all celebrate family and newborns, we hope it would encourage more to think about having their own family,” said Ms Fu.
(PAGE 1 OF 1) - PAGINATE
- wong chee tat :)
BY JOY FANG
PUBLISHED: APRIL 2, 6:20 AM(PAGE 1 OF 1) - PAGINATE
SINGAPORE — With ideas from the public pouring in on ways to celebrate the 50th anniversary of the Republic’s independence, it was announced yesterday that all Singaporean babies born next year, including those born overseas, will receive a gift pack from the Government that could consist of practical and commemorative items.
The National Population and Talent Division (NPTD), which will fund the Jubilee Baby Gift, is calling for suggestions on the items to be included in the gift pack. It has ruled out giving cash handouts, as parents of newborns already receive monetary incentives under the existing Marriage and Parenthood Package.
There could be about five to 10 items and the idea is to make the gift pack “a meaningful, significant (and) tangible keepsake with heritage value”, the NPTD said. Among the gift ideas thrown up at a focus group discussion yesterday were a chain with a key, baby shoes and bibs, while Minister in the Prime Minister’s Office Grace Fu suggested a sarong with a national flag motif, which she felt is practical — parents can use it to carry their child or during breastfeeding — and signifies a parental bond.
Separately, the two-month call for celebration ideas from the public — which ended on March 23 — has garnered a wide range of suggestions including organising a local music festival, reviving the Kallang Roar at the new National Stadium and holding nationwide quizzes on the Republic’s history.
A spokesman for the Singapore50 (SG50) Programme Office Secretariat said it is looking through all the ideas submitted via the various platforms to see how they can be incorporated into the celebration plans under the respective SG50 committees.
To date, the secretariat has also received almost 60 formal applications to tap the SG50 Celebration Fund, which was set up to seek and support meaningful ground-up initiatives. The applications ranged from charity and volunteerism initiatives to music and visual arts platforms. Applications for the fund are open until Aug 31 next year.
Speaking at the focus group discussion, Ms Fu described the gift pack as the nation’s little birthday surprise. “As we celebrate Singapore’s past and honour the contributions of our pioneer generation, we also set our sights on the future ... our Golden Jubilee babies symbolise our hopes and aspirations for the Singapore of tomorrow,” she said.
The public can submit ideas through the Jubilee Baby Gift’s microsite (http://www.nptd.gov.sg/jubilee) or at feedback booths islandwide until April 15. The first two booths will be set up at Jurong Point on April 5 and 6, and at VivoCity on April 12 and 13.
Singaporeans can also register their interest to participate in focus groups on what to include in the gift pack by emailing outreach@reach.gov.sg.
Between April 18 and May 15, the suggestions will be collated and curated in consultation with a five-member advisory panel comprising people-sector and community representatives. The panel, which will advise on the suitability of the items and the design, will be chaired by Ms Anita Fam, who serves on the council of Families for Life.
During this period, the public can vote on the shortlisted items.
Responding to TODAY’s queries, an NPTD spokesperson said: “We envision the gift to consist of a small package of items that newborns in 2015 could use in their early years. It would also have commemorative elements and serve as a token from our current generation to the next.”
She added: “As parents of Singaporean newborns already receive a cash gift under the existing Marriage and Parenthood Package, there is no intention to have a cash gift as one of the items.”
The budget for the gift pack will be finalised after the public engagement efforts are completed.
There were 32,000 citizen births last year and the NPTD expects the figure to remain about the same next year, although it is hoping for more.
“I don’t think parents would have children just for the gifts, but I think if we can all celebrate family and newborns, we hope it would encourage more to think about having their own family,” said Ms Fu.
(PAGE 1 OF 1) - PAGINATE
- wong chee tat :)
SingPost fined S$30,000 for mail loss incident
SingPost fined S$30,000 for mail loss incident
400-500 pieces of mail were lost in incident due to postwoman not having a lock for her mail trolley
BY KOK XING HUI
PUBLISHED: APRIL 2, 5:31 PM
SINGAPORE — SingPost has been issued a fine of S$30,000 by the Infocomm Development Authority for a breach in its mail security last September when an entire bag of 400-500 mail pieces meant for six HDB blocks in Woodlands were lost by a postwoman.
The postwoman had left a trolley of mail unattended but hidden behind wood debris at the corner of a void deck while she went to a washroom across the road. She did not take the mail trolley with her as it was raining, and she did not want to get the mail wet.
When she returned after 10 minutes, the mail was gone. SingPost then lodged a police report and performed searches at the surrounding area for four days but the mail was not recovered.
The mail loss was a breach of SingPost’s Public Postal License which states that it should establish, maintain and comply with appropriate measures and procedures to ensure that the risk of loss, theft and damage to letters is minimised.
IDA said in a statement that at the time of the incident, SingPost had no issued any lock or chain for trolleys used by its postmen which increased the risk of mail being stolen. IDA investigations also found that the nylon bags used by postmen were only slightly water-resistant.
SingPost has since issued water-resistant trolley bags that can be locked and standard bicycles with lockable boxes to its postmen.
The last IDA fine to SingPost was S$10,000 levied in June last year for not meeting quality of service standards in mail delivery time.
This story was powered by a Samsung tablet
- wong chee tat :)
400-500 pieces of mail were lost in incident due to postwoman not having a lock for her mail trolley
BY KOK XING HUI
PUBLISHED: APRIL 2, 5:31 PM
SINGAPORE — SingPost has been issued a fine of S$30,000 by the Infocomm Development Authority for a breach in its mail security last September when an entire bag of 400-500 mail pieces meant for six HDB blocks in Woodlands were lost by a postwoman.
The postwoman had left a trolley of mail unattended but hidden behind wood debris at the corner of a void deck while she went to a washroom across the road. She did not take the mail trolley with her as it was raining, and she did not want to get the mail wet.
When she returned after 10 minutes, the mail was gone. SingPost then lodged a police report and performed searches at the surrounding area for four days but the mail was not recovered.
The mail loss was a breach of SingPost’s Public Postal License which states that it should establish, maintain and comply with appropriate measures and procedures to ensure that the risk of loss, theft and damage to letters is minimised.
IDA said in a statement that at the time of the incident, SingPost had no issued any lock or chain for trolleys used by its postmen which increased the risk of mail being stolen. IDA investigations also found that the nylon bags used by postmen were only slightly water-resistant.
SingPost has since issued water-resistant trolley bags that can be locked and standard bicycles with lockable boxes to its postmen.
The last IDA fine to SingPost was S$10,000 levied in June last year for not meeting quality of service standards in mail delivery time.
This story was powered by a Samsung tablet
- wong chee tat :)
Microsoft Security Bulletin Summary for March 2014
Microsoft Security Bulletin Summary for March 2014
- wong chee tat :)
Microsoft Security Bulletin Summary for March 2014
Published:
Version: 1.0
This bulletin summary lists security bulletins released for March 2014.
With the release of the security bulletins for March 2014, this bulletin summary replaces the bulletin advance notification originally issued March 6, 2014. For more information about the bulletin advance notification service, see Microsoft Security Bulletin Advance Notification.
For information about how to receive automatic notifications whenever Microsoft security bulletins are issued, visit Microsoft Technical Security Notifications.
Microsoft is hosting a webcast to address customer questions on these bulletins on March 12, 2014, at 11:00 AM Pacific Time (US & Canada). Register now for the March Security Bulletin Webcast.
Microsoft also provides information to help customers prioritize monthly security updates with any non-security updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.
Bulletin Information
Executive Summaries
The following table summarizes the security bulletins for this month in order of severity.
For details on affected software, see the next section, Affected Software.
| Bulletin ID | Bulletin Title and Executive Summary | Maximum Severity Rating and Vulnerability Impact | Restart Requirement | Affected Software |
|---|---|---|---|---|
| MS14-012 | Cumulative Security Update for Internet Explorer (2925418) This security update resolves one publicly disclosed vulnerability and seventeen privately reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker who successfully exploited these vulnerabilities could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. | Critical Remote Code Execution | Requires restart | Microsoft Windows, Internet Explorer |
| MS14-013 | Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2929961) This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a specially crafted image file. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. | Critical Remote Code Execution | May require restart | Microsoft Windows |
| MS14-015 | Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2930275) This security update resolves one publicly disclosed vulnerability and one privately reported vulnerability in Microsoft Windows. The more severe of these vulnerabilities could allow elevation of privilege if an attacker logs on to the system and runs a specially crafted application. An attacker must have valid logon credentials and be able to log on locally to exploit these vulnerabilities. | Important Elevation of Privilege | Requires restart | Microsoft Windows |
| MS14-016 | Vulnerability in Security Account Manager Remote (SAMR) Protocol Could Allow Security Feature Bypass (2934418) This security update resolves one privately reported vulnerability in Microsoft Windows. The vulnerability could allow security feature bypass if an attacker makes multiple attempts to match passwords to a username. | Important Security Feature Bypass | Requires restart | Microsoft Windows |
| MS14-014 | Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677) This security update resolves a privately reported vulnerability in Microsoft Silverlight. The vulnerability could allow security feature bypass if an attacker hosts a website that contains specially crafted Silverlight content that is designed to exploit the vulnerability, and then convinces a user to view the website. In all cases, however, an attacker would have no way to force users to visit a website. Instead, an attacker would have to convince users to visit a website, typically by getting them to click a link in an email message or in an Instant Messenger message that takes them to the attacker's website. It could also be possible to display specially crafted web content by using banner advertisements or by using other methods to deliver web content to affected systems. | Important Security Feature Bypass | Does not require restart | Microsoft Silverlight |
Exploitability Index
Affected Software
Detection and Deployment Tools and Guidance
Other Information
Microsoft Windows Malicious Software Removal Tool
For the bulletin release that occurs on the second Tuesday of each month, Microsoft has released an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services, and the Download Center. No updated version of the Microsoft Windows Malicious Software Removal Tool is available for out-of-band security bulletin releases.
Non-Security Updates on MU, WU, and WSUS
For information about non-security releases on Windows Update and Microsoft Update, please see:
- Microsoft Knowledge Base Article 894199: Description of Software Update Services and Windows Server Update Services changes in content. Includes all Windows content.
- Updates from Past Months for Windows Server Update Services. Displays all new, revised, and rereleased updates for Microsoft products other than Microsoft Windows.
Microsoft Active Protections Program (MAPP)
To improve security protections for customers, Microsoft provides vulnerability information to major security software providers in advance of each monthly security update release. Security software providers can then use this vulnerability information to provide updated protections to customers via their security software or devices, such as antivirus, network-based intrusion detection systems, or host-based intrusion prevention systems. To determine whether active protections are available from security software providers, please visit the active protections websites provided by program partners listed in Microsoft Active Protections Program (MAPP) Partners.
Security Strategies and Community
Update Management Strategies
Security Guidance for Update Management provides additional information about Microsoft’s best-practice recommendations for applying security updates.
Obtaining Other Security Updates
Updates for other security issues are available from the following locations:
- Security updates are available from Microsoft Download Center. You can find them most easily by doing a keyword search for "security update".
- Updates for consumer platforms are available from Microsoft Update.
- You can obtain the security updates offered this month on Windows Update, from Download Center on Security and Critical Releases ISO CD Image files. For more information, seeMicrosoft Knowledge Base Article 913086.
IT Pro Security Community
Learn to improve security and optimize your IT infrastructure, and participate with other IT Pros on security topics in IT Pro Security Community.
Acknowledgments
Microsoft thanks the following for working with us to help protect customers:
MS14-012
- lokihardt@ASRT, working with HP's Zero Day Initiative, for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0297)
- Amol Naik, working with VeriSign iDefense Labs, for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0297)
- lokihardt@ASRT, working with HP's Zero Day Initiative, for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0298)
- Jose A. Vazquez of Yenteasy - Security Research, working with HP's Zero Day Initiative, for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0299)
- Bo Qu of Palo Alto Networks for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0302)
- Bo Qu of Palo Alto Networks for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0303)
- Hui Gao of Palo Alto Networks for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0304)
- Tianfang Guo of Palo Alto Networks for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0305)
- Jason Kratzer, working with VeriSign iDefense Labs, for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0306)
- Jason Kratzer, working with HP's Zero Day Initiative, for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0307)
- lokihardt@ASRT, working with HP's Zero Day Initiative, for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0308)
- Amol Naik, working with VeriSign iDefense Labs, for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0309)
- Scott Bell of Security-Assessment.com for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0311)
- Yujie Wen of Qihoo for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0311)
- Simon Zuckerbraun, working with HP's Zero Day Initiative, for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0312)
- Omair, working with HP's Zero Day Initiative, for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0313)
- Bo Qu of Palo Alto Networks for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0314)
- Zhibin Hu of Qihoo for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0314)
- Anil Aphale for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0314)
- Bo Qu of Palo Alto Networks for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0321)
- Yujie Wen of Qihoo for reporting the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0321)
- FireEye, Inc. for working with us on the Internet Explorer Memory Corruption Vulnerability (CVE-2014-0322)
For MS14-013
- An anonymous researcher, working with VeriSign iDefense Labs, for reporting the DirectShow Memory Corruption Vulnerability (CVE-2014-0301)
For MS14-014
- NSFOCUS Information Technology Co., Ltd. for reporting the Silverlight DEP/ASLR Bypass Vulnerability (CVE-2014-0319)
For MS14-015
- Alexander Chizhov for working with us on the Win32k Information Disclosure Vulnerability (CVE-2014-0323)
For MS14-016
- Andrew Bartlett of the Samba Team and Catalyst IT for reporting the SAMR Security Feature Bypass Vulnerability (CVE-2014-0317)
Support
- The affected software listed has been tested to determine which versions are affected. Other versions are past their support life cycle. To determine the support life cycle for your software version, visit Microsoft Support Lifecycle.
- Security solutions for IT professionals: TechNet Security Troubleshooting and Support
- Help protect your computer that is running Windows from viruses and malware: Virus Solution and Security Center
- Local support according to your country: International Support
Disclaimer
The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Revisions
- V1.0 (March 11, 2014): Bulletin Summary published.
- wong chee tat :)
Subscribe to:
Posts (Atom)