From markcarl@sac.sfbay.sun.com Tue Nov 4 05:14:42 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA4DEfs3014487 for ; Tue, 4 Nov 2008 05:14:42 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mA4DEdUX027337; Tue, 4 Nov 2008 13:14:41 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9T000018SFSW00@nwk-avmta-1.sfbay.Sun.COM>; Tue, 04 Nov 2008 05:14:39 -0800 (PST) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9T00K0L8SFX2D0@nwk-avmta-1.sfbay.Sun.COM>; Tue, 04 Nov 2008 05:14:39 -0800 (PST) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mA4DEbJY037163; Tue, 04 Nov 2008 05:14:37 -0800 (PST) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA4DEa73014482; Tue, 04 Nov 2008 05:14:36 -0800 (PST) Received: (from markcarl@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id mA4DEa19014478; Tue, 04 Nov 2008 05:14:36 -0800 (PST) Date: Tue, 04 Nov 2008 05:14:36 -0800 (PST) From: Mark Carlson Subject: Areca Backup [LSARC/2008/681 Self Review] To: LSARC-ext@sun.com Cc: David.Zhang@sun.com Message-id: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 4175 I am sponsoring this case for David Zhang. I have marked it closed approved automatic based on the checklist in the case directory. -- mark Template Version: @(#)sac_nextcase %I% %G% SMI This information is Copyright 2008 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Areca Backup 1.2. Name of Document Author/Supplier: Author: David Zhang 1.3 Date of This Document: 04 November, 2008 2. Project Summary 2.1. Project Description This project introduces the package of Areca Backup 6.0.7 into the SFW consolidation. 4. Technical Description Areca (http://areca.sourceforge.net/) is a file backup tool. It supports data compression & encryption, incremental backup, file history explorer and many other features. Areca Backup also includes a transaction mechanism which guarantees your backups' integrity. It is released under the General Public License Version2 (GPLv2). Backup Engine Features : * Archives compression (Zip & Zip64 format) * Archives encryption (Triple DES & AES encryption algorithm) * Storage on local hard drive, network drive, USB key, FTP / FTPs server (with implicit and explicit SSL / TLS) * Source file filters (by extension, subdirectory, regular expression, size, date, status, with AND/OR operators) * Incremental, differential and full backup support * Archives merges / deletion : You can merge contiguous archives in one single archive or safely delete your latest archives. * As of date recovery : Areca allows you to recover your archives (or single files) as of a specific date. * Transaction mechanism : All critical processes (such as backups or merges) support a transaction mechanism (with commit / rollback management) which guarantees your backups' integrity. * Backup reports : Areca generates backup reports that can be stored on your disk or sent by email. * Post backup scripts : Areca can launch shell scripts after backup. * Files permissions and symbolic links backup. (Linux only) * Support for delta backup (store only the modified parts of the files - not the whole files) Graphical User Interface : * Archives content explorer. (including a 'find file in archives' feature) * Archive description : A manifest is associated to each archive, which contains various information such as author, title, date, description, and some technical data. * File history explorer : Areca keeps track of your file's history (creation / modifications / deletion) over your archives. * Backup simulation : useful to check wether a backup is necessary * User's actions history : Areca keeps an history of all user's actions (archives deletion, merges, backups, recoveries). Command-Line Interface : * Areca comes with a command-line interface which can be used for backup automation. 5. Interfaces Exported interface Classification Interface type =============================== ============== ============== SUNWareca Uncommitted Package name /usr/bin/areca Uncommitted Command The following additional installed files are not interface. /usr/share/areca/areca.sh /usr/share/areca/check_version.sh /usr/share/areca/readme.txt /usr/share/areca/bin/decrypt.sh /usr/share/areca/bin/dezip.sh /usr/share/areca/bin/run_gui.sh /usr/share/areca/bin/run_tui.sh /usr/share/areca/lib/activation.jar /usr/share/areca/lib/areca.jar /usr/share/areca/lib/commons-net-1.4.1.jar /usr/share/areca/lib/jakarta-oro-2.0.8.jar /usr/share/areca/lib/local_policy.jar /usr/share/areca/lib/mail.jar /usr/share/areca/lib/swt.jar /usr/share/areca/doc/index.html /usr/share/areca/help/advanced_encryption_howto.txt /usr/share/areca/help/help.txt /usr/share/areca/icons /usr/share/areca/config/Main.xml /usr/share/areca/config/fwk.properties /usr/share/areca/plugins /usr/share/areca/license/license.txt /usr/share/areca/translations 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: SFW 6.5. ARC review type: Automatic 6.6. ARC Exposure: open From Darren.Moffat@sun.com Tue Nov 4 06:15:00 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA4EExIe016711 for ; Tue, 4 Nov 2008 06:15:00 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mA4EEurJ028263 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 4 Nov 2008 14:14:58 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9T0071LBKX3R00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 04 Nov 2008 06:14:57 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9T001X0BKVGL70@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 04 Nov 2008 06:14:55 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe3.eu.sun.com [192.18.6.12]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA4EEscb019025 for ; Tue, 04 Nov 2008 14:14:54 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9T00A019MJRZ00@fe-emea-10.sun.com> (original mail from Darren.Moffat@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Tue, 04 Nov 2008 14:14:54 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9T003JNBK3QC80@fe-emea-10.sun.com>; Tue, 04 Nov 2008 14:14:28 +0000 (GMT) Date: Tue, 04 Nov 2008 14:14:27 +0000 From: Darren J Moffat Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> Sender: Darren.Moffat@sun.com To: Mark Carlson Cc: LSARC-ext@sun.com, David.Zhang@sun.com Message-id: <491058C3.4010405@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 2700 Mark Carlson wrote: > I am sponsoring this case for David Zhang. I have marked it closed approved automatic based on the checklist in the case directory. I don't believe this qualifies as closed approved automatic please set a timer. > It is released under the General Public License Version2 (GPLv2). > > Backup Engine Features : > * Archives compression (Zip & Zip64 format) > * Archives encryption (Triple DES & AES encryption algorithm) What modes of the encryption algorithms are used ? The mode of a crypto algorithm is important, some include an integrity check but most require the use of a separate keyed message digest (such as HMAC-SHA256) to protect against cipher text modification. For example AES_CBC mode is not sufficient to protect against cipher text modification for large amounts of data. A mode like AES_CCM or AES_GCM is better since they include a MAC but they expand the size of each output ciphertext block (between 4 and 16 bytes). The are other modes like XTS that are non expanding. This quote from the FAQ concerns me deeply: "As this encryption key is stored in the backup target, you will never be prompted for it again : Areca will transparently use it to encrypt / decrypt these archives" So how is key management done ? Where are they keys stored and generated ? There is information in the answer to "[Q] What is the difference in the XML configuration file between AES and AES_HASH (or DESEde and DESEde_HASH) ?" that makes me very concerned. The method described there for generating a key from a passphrase is NOT secure and is subject to rainbow table attacks since the hash (MD5) of the password does not appear to be salted - this hasn't actually fixed the problem they appear to think it has. What crypto library is used ? I assume since Areca is written in Java it is just using the JCE but I'd like this confirmed. > * Files permissions and symbolic links backup. (Linux only) Why is this Linux only ? To me this is not acceptable, this makes it totally useless for Solaris backup if it can't do a simple thing like this. What about ACLs on UFS and ZFS ? What about extended attribute files (ZFS and UFS) ? What about system attribute files (ZFS only) ? For this to be included in Solaris it needs to be actually useful as a Backup program that means it needs to be able to actually backup the content we can create on Solaris without loss. Without support for file permissions, links, ACLs and extended attributes I can not approve of this case being integrated into Solaris - particularly since the bundled tar & cpio archivers already support that. Does this work with NDMP ? -- Darren J Moffat From Mark.Carlson@Sun.COM Tue Nov 4 06:32:10 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA4EWAY1017058 for ; Tue, 4 Nov 2008 06:32:10 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA4EWAae026193 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 4 Nov 2008 06:32:10 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9T0000NCDKAM00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 04 Nov 2008 06:32:08 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9T00I2PCDJ5G90@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 04 Nov 2008 06:32:07 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA4EW7s9019080 for ; Tue, 04 Nov 2008 14:32:07 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9T00B01CBGUX00@mail-amer.sun.com> (original mail from Mark.Carlson@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Tue, 04 Nov 2008 07:32:07 -0700 (MST) Received: from Macintosh-252.local ([129.150.35.91]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9T002PUCDG7130@mail-amer.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Tue, 04 Nov 2008 07:32:05 -0700 (MST) Date: Tue, 04 Nov 2008 07:32:03 -0700 From: "Mark A. Carlson" Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491058C3.4010405@Sun.COM> Sender: Mark.Carlson@Sun.COM To: Darren J Moffat Cc: LSARC-ext@Sun.COM, David.Zhang@Sun.COM Message-id: <49105CE3.8050306@sun.com> MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_Ea2m3+lTHXmKuuy6ddBfZg)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (Macintosh/20080914) Status: RO Content-Length: 1455 This is a multi-part message in MIME format. --Boundary_(ID_Ea2m3+lTHXmKuuy6ddBfZg) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Darren J Moffat wrote: > Mark Carlson wrote: > > >> I am sponsoring this case for David Zhang. I have marked it closed approved automatic based on the checklist in the case directory. >> > > I don't believe this qualifies as closed approved automatic please set a > timer. > I have have set the timer to expire on 11 November 2008. -- mark --Boundary_(ID_Ea2m3+lTHXmKuuy6ddBfZg) Content-type: text/html; charset=ISO-8859-1 Content-transfer-encoding: 7BIT

Darren J Moffat wrote: 
Mark Carlson wrote:

  
I am sponsoring this case for David Zhang. I have marked it closed approved automatic based on the checklist in the case directory.
    

I don't believe this qualifies as closed approved automatic please set a 
timer.
I have have set the timer to expire on 11 November 2008.

-- mark
--Boundary_(ID_Ea2m3+lTHXmKuuy6ddBfZg)-- From Alan.Coopersmith@sun.com Tue Nov 4 08:09:34 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA4G9YZH019126 for ; Tue, 4 Nov 2008 08:09:34 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA4G9YC1015413 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 4 Nov 2008 08:09:34 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9T00A03GVWSY00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 04 Nov 2008 09:09:32 -0700 (MST) Received: from sca-es-mail-1.sun.com ([192.18.43.132]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9T00A2YGVV6710@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 04 Nov 2008 09:09:31 -0700 (MST) Received: from fe-sfbay-10.sun.com ([192.18.43.129]) by sca-es-mail-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA4G9V33001001 for ; Tue, 04 Nov 2008 08:09:31 -0800 (PST) Received: from conversion-daemon.fe-sfbay-10.sun.com by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9T00L01GQKY700@fe-sfbay-10.sun.com> (original mail from Alan.Coopersmith@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Tue, 04 Nov 2008 08:09:31 -0800 (PST) Received: from [10.6.102.118] by fe-sfbay-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9T00DIAGVNEGF0@fe-sfbay-10.sun.com>; Tue, 04 Nov 2008 08:09:23 -0800 (PST) Date: Tue, 04 Nov 2008 08:09:23 -0800 From: Alan Coopersmith Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> Sender: Alan.Coopersmith@sun.com To: Mark Carlson Cc: LSARC-ext@sun.com, David.Zhang@sun.com Message-id: <491073B3.1060808@sun.com> MIME-version: 1.0 Content-type: text/plain; charset=UTF-8 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Enigmail-Version: 0.95.1 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.6 (X11/20071119) Status: RO Content-Length: 246 > /usr/share/areca/lib/swt.jar Why isn't this using the shared swt delivered by LSARC/2008/462 instead of its own private copy? -- -Alan Coopersmith- alan.coopersmith@sun.com Sun Microsystems, Inc. - X Window System Engineering From Mark.Carlson@sun.com Tue Nov 4 09:03:57 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA4H3vVT020772 for ; Tue, 4 Nov 2008 09:03:57 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA4H3tix012077 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 4 Nov 2008 09:03:56 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9T00011JEJO900@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 04 Nov 2008 09:03:55 -0800 (PST) Received: from brmea-mail-3.sun.com ([192.18.98.34]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9T00JH4JEF5XC0@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 04 Nov 2008 09:03:51 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA4H3pF6020071 for ; Tue, 04 Nov 2008 17:03:51 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9T00A01IY5IL00@mail-amer.sun.com> (original mail from Mark.Carlson@Sun.COM) for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Tue, 04 Nov 2008 10:03:51 -0700 (MST) Received: from Macintosh-252.local ([129.150.35.91]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9T005UWJE0JC40@mail-amer.sun.com>; Tue, 04 Nov 2008 10:03:38 -0700 (MST) Date: Tue, 04 Nov 2008 10:03:35 -0700 From: "Mark A. Carlson" Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491073B3.1060808@sun.com> Sender: Mark.Carlson@sun.com To: Alan Coopersmith Cc: Mark Carlson , LSARC-ext@sun.com, David.Zhang@sun.com Message-id: <49108067.2010102@sun.com> MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_5durpJ0g5Lq09hEdAzXELA)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491073B3.1060808@sun.com> User-Agent: Thunderbird 2.0.0.17 (Macintosh/20080914) Status: RO Content-Length: 1122 This is a multi-part message in MIME format. --Boundary_(ID_5durpJ0g5Lq09hEdAzXELA) Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 7BIT It should/shall. -- mark Alan Coopersmith wrote: >> /usr/share/areca/lib/swt.jar >> > > Why isn't this using the shared swt delivered by LSARC/2008/462 > instead of its own private copy? > > --Boundary_(ID_5durpJ0g5Lq09hEdAzXELA) Content-type: text/html; charset=UTF-8 Content-transfer-encoding: 7BIT It should/shall.

-- mark

Alan Coopersmith wrote: 
	/usr/share/areca/lib/swt.jar
    

Why isn't this using the shared swt delivered by LSARC/2008/462
instead of its own private copy?
--Boundary_(ID_5durpJ0g5Lq09hEdAzXELA)-- From David.Zhang@sun.com Wed Nov 5 01:57:26 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA59vBn1014489 for ; Wed, 5 Nov 2008 01:57:25 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mA59utvU005305; Wed, 5 Nov 2008 17:57:00 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9U00L19UAZJK00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 02:56:59 -0700 (MST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9U00C21UAYZJ70@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 02:56:58 -0700 (MST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA59uvln023667; Wed, 05 Nov 2008 09:56:57 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9U00401T10WM00@fe-emea-09.sun.com> (original mail from David.Zhang@Sun.COM); Wed, 05 Nov 2008 09:56:57 +0000 (GMT) Received: from [129.158.144.53] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9U00INXUA6CQ50@fe-emea-09.sun.com>; Wed, 05 Nov 2008 09:56:38 +0000 (GMT) Date: Wed, 05 Nov 2008 17:54:06 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491073B3.1060808@sun.com> Sender: David.Zhang@sun.com To: Alan Coopersmith Cc: Mark Carlson , LSARC-ext@sun.com, scsifma-gz@sun.com Message-id: <49116D3E.6040603@Sun.COM> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_DwC4V4AmVPsD3UgQLDTjeg)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491073B3.1060808@sun.com> User-Agent: Thunderbird 2.0.0.17 (X11/20081014) Status: RO Content-Length: 1763 This is a multi-part message in MIME format. --Boundary_(ID_DwC4V4AmVPsD3UgQLDTjeg) Content-type: multipart/alternative; boundary="Boundary_(ID_rZlaTw1Z1vYgDzUk3naimA)" --Boundary_(ID_rZlaTw1Z1vYgDzUk3naimA) Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 7BIT On 11/05/08 00:09, Alan Coopersmith wrote: >> /usr/share/areca/lib/swt.jar >> > > Why isn't this using the shared swt delivered by LSARC/2008/462 > instead of its own private copy? > > I will switch to SUNWswt package and add package dependency on that package. David --Boundary_(ID_rZlaTw1Z1vYgDzUk3naimA) Content-type: text/html; charset=UTF-8 Content-transfer-encoding: 7BIT On 11/05/08 00:09, Alan Coopersmith wrote: 
	/usr/share/areca/lib/swt.jar
    

Why isn't this using the shared swt delivered by LSARC/2008/462
instead of its own private copy?
I will switch to SUNWswt package and add package dependency on that package.

David

--Boundary_(ID_rZlaTw1Z1vYgDzUk3naimA)-- --Boundary_(ID_DwC4V4AmVPsD3UgQLDTjeg) Content-type: text/x-vcard; name=David_Zhang.vcf; charset=utf-8 Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=David_Zhang.vcf begin:vcard fn:David Zhang n:Zhang;David email;internet:David.Zhang@Sun.COM tel;work:84341 version:2.1 end:vcard --Boundary_(ID_DwC4V4AmVPsD3UgQLDTjeg)-- From David.Zhang@sun.com Wed Nov 5 02:20:42 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5AKb1P016885 for ; Wed, 5 Nov 2008 02:20:41 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mA5AKXLK014392; Wed, 5 Nov 2008 10:20:37 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9U0040BVEBN300@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 02:20:35 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9U00IKIVE9BRD0@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 02:20:34 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA5AKXT6029839; Wed, 05 Nov 2008 10:20:33 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9U00E01URWA600@fe-emea-10.sun.com> (original mail from David.Zhang@Sun.COM); Wed, 05 Nov 2008 10:20:33 +0000 (GMT) Received: from [129.158.144.53] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9U00MKPVDIGY50@fe-emea-10.sun.com>; Wed, 05 Nov 2008 10:20:10 +0000 (GMT) Date: Wed, 05 Nov 2008 18:17:43 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491058C3.4010405@Sun.COM> Sender: David.Zhang@sun.com To: Darren J Moffat Cc: Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <491172C7.9000501@Sun.COM> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_0gPNNWnsPYWpuBF1WTUP1Q)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (X11/20081014) Status: RO Content-Length: 5757 This is a multi-part message in MIME format. --Boundary_(ID_0gPNNWnsPYWpuBF1WTUP1Q) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Hi Darren, Thank you for your kind comments. On 11/04/08 22:14, Darren J Moffat wrote: > Mark Carlson wrote: > >> I am sponsoring this case for David Zhang. I have marked it closed >> approved automatic based on the checklist in the case directory. > > I don't believe this qualifies as closed approved automatic please set > a timer. > >> It is released under the General Public License Version2 (GPLv2). >> >> Backup Engine Features : >> * Archives compression (Zip & Zip64 format) >> * Archives encryption (Triple DES & AES encryption algorithm) > > What modes of the encryption algorithms are used ? > It is using CBC. > The mode of a crypto algorithm is important, some include an integrity > check but most require the use of a separate keyed message digest > (such as HMAC-SHA256) to protect against cipher text modification. For > example AES_CBC mode is not sufficient to protect against cipher text > modification for large amounts of data. A mode like AES_CCM or > AES_GCM is better since they include a MAC but they expand the size of > each output ciphertext block (between 4 and 16 bytes). The are other > modes like XTS that are non expanding. > > > > This quote from the FAQ concerns me deeply: "As this encryption key is > stored in the backup target, you will never be prompted for it again : > Areca will transparently use it to encrypt / decrypt these archives" > > So how is key management done ? > Where are they keys stored and generated ? > By searching the code... look like ... I need to check the source code deeply to answer this specific question. The document of Areca has not give us a clear answer. public static final String KEYCONV_RAW = "RAW"; public static final String KEYCONV_HASH = "HASH"; public static final String KEYCONV_OLD = "OLD"; // Triple DES 192 registerTripleDesConfiguration(24, "DESede", KEYCONV_OLD); registerTripleDesConfiguration(24, "DESede_HASH", KEYCONV_HASH); registerTripleDesConfiguration(24, "DESede_RAW", KEYCONV_RAW); // AES 128 registerAESConfiguration(16, "AES", KEYCONV_OLD); registerAESConfiguration(16, "AES_HASH", KEYCONV_HASH); registerAESConfiguration(16, "AES_RAW", KEYCONV_RAW); // AES 256 registerAESConfiguration(32, "AES256_HASH", KEYCONV_HASH); registerAESConfiguration(32, "AES256_RAW", KEYCONV_RAW); The author is using 'final String' as the key. > There is information in the answer to "[Q] What is the difference in > the XML configuration file between AES and AES_HASH (or DESEde and > DESEde_HASH) ?" that makes me very concerned. > > The method described there for generating a key from a passphrase is > NOT secure and is subject to rainbow table attacks since the hash > (MD5) of the password does not appear to be salted - this hasn't > actually fixed the problem they appear to think it has. I think so. It is not so secure. > > > What crypto library is used ? I assume since Areca is written in Java > it is just using the JCE but I'd like this confirmed. > By looking at the source code of areca. It is using javax.crypto.* which means JCE (Java Cryptographic Extension) framework. In com.application.areca.impl.EncryptionConfiguration.java import javax.crypto.Cipher; import javax.crypto.spec.IvParameterSpec; import javax.crypto.spec.SecretKeySpec; And the code follows standard coding standard of javadoc http://java.sun.com/javase/6/docs/api/javax/crypto/Cipher.html > > > * Files permissions and symbolic links backup. (Linux only) > > Why is this Linux only ? I think the author means (unix only), since Solaris is not as popular as Linux today. He is just willing to support Windows and Linux, but as he mentioned in "http://sourceforge.net/projects/areca/" project page, it is developed with OS independent language (Java). I have also searched code of this project, the author is using Java common API to get file permission, user and group message for Unix system. > To me this is not acceptable, this makes it totally useless for > Solaris backup if it can't do a simple thing like this. It is not a system wide backup tool, it could be suitable for a file or a folder from which user want to backup his movie/file/data. It is widely used and quite active, I usually get over 20 emails per week from it's discussion group. Linux people can use it to backup and restore their files and people keep asking questions for this project. > > What about ACLs on UFS and ZFS ? > What about extended attribute files (ZFS and UFS) ? > What about system attribute files (ZFS only) ? It's not supported, except file permission, user and group on Unix. I think the reason is Linux platform does not have ZFS. It works well on personal backup but may not suitable for system backup. > > For this to be included in Solaris it needs to be actually useful as a > Backup program that means it needs to be able to actually backup the > content we can create on Solaris without loss. Without support for > file permissions, links, ACLs and extended attributes I can not > approve of this case being integrated into Solaris - particularly > since the bundled tar & cpio archivers already support that. > > Does this work with NDMP ? It does not support NDMP. Regards, David --Boundary_(ID_0gPNNWnsPYWpuBF1WTUP1Q) Content-type: text/x-vcard; name=David_Zhang.vcf; charset=utf-8 Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=David_Zhang.vcf begin:vcard fn:David Zhang n:Zhang;David email;internet:David.Zhang@Sun.COM tel;work:84341 version:2.1 end:vcard --Boundary_(ID_0gPNNWnsPYWpuBF1WTUP1Q)-- From David.Zhang@Sun.COM Wed Nov 5 02:24:10 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5AO5Aq017410 for ; Wed, 5 Nov 2008 02:24:05 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mA5ANeMl017690; Wed, 5 Nov 2008 18:23:54 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9U0000NVJSTL00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 03:23:52 -0700 (MST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9U00CB4VJQZ680@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 03:23:51 -0700 (MST) Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA5ANomm028033; Wed, 05 Nov 2008 10:23:50 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9U00E01URWA600@fe-emea-10.sun.com> (original mail from David.Zhang@Sun.COM); Wed, 05 Nov 2008 10:23:50 +0000 (GMT) Received: from [129.158.144.53] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9U00MSTVJ6GY50@fe-emea-10.sun.com>; Wed, 05 Nov 2008 10:23:34 +0000 (GMT) Date: Wed, 05 Nov 2008 18:21:07 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491058C3.4010405@Sun.COM> Sender: David.Zhang@Sun.COM To: Darren J Moffat Cc: Mark Carlson , LSARC-ext@Sun.COM, scsifma-gz@Sun.COM Message-id: <49117393.2090408@Sun.COM> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_PuwijP0EzlaUsLjtw0nDlg)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (X11/20081014) Status: RO Content-Length: 5751 This is a multi-part message in MIME format. --Boundary_(ID_PuwijP0EzlaUsLjtw0nDlg) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Hi Darren, Thank you for your kind comments. On 11/04/08 22:14, Darren J Moffat wrote: > Mark Carlson wrote: > >> I am sponsoring this case for David Zhang. I have marked it closed >> approved automatic based on the checklist in the case directory. > > I don't believe this qualifies as closed approved automatic please set > a timer. > >> It is released under the General Public License Version2 (GPLv2). >> >> Backup Engine Features : >> * Archives compression (Zip & Zip64 format) >> * Archives encryption (Triple DES & AES encryption algorithm) > > What modes of the encryption algorithms are used ? > It is using CBC. > The mode of a crypto algorithm is important, some include an integrity > check but most require the use of a separate keyed message digest > (such as HMAC-SHA256) to protect against cipher text modification. For > example AES_CBC mode is not sufficient to protect against cipher text > modification for large amounts of data. A mode like AES_CCM or > AES_GCM is better since they include a MAC but they expand the size of > each output ciphertext block (between 4 and 16 bytes). The are other > modes like XTS that are non expanding. > > > > This quote from the FAQ concerns me deeply: "As this encryption key is > stored in the backup target, you will never be prompted for it again : > Areca will transparently use it to encrypt / decrypt these archives" > > So how is key management done ? > Where are they keys stored and generated ? > By searching the code... look like ... I need to check the source code deeply to answer this specific question. The document of Areca has not give us a clear answer. public static final String KEYCONV_RAW = "RAW"; public static final String KEYCONV_HASH = "HASH"; public static final String KEYCONV_OLD = "OLD"; // Triple DES 192 registerTripleDesConfiguration(24, "DESede", KEYCONV_OLD); registerTripleDesConfiguration(24, "DESede_HASH", KEYCONV_HASH); registerTripleDesConfiguration(24, "DESede_RAW", KEYCONV_RAW); // AES 128 registerAESConfiguration(16, "AES", KEYCONV_OLD); registerAESConfiguration(16, "AES_HASH", KEYCONV_HASH); registerAESConfiguration(16, "AES_RAW", KEYCONV_RAW); // AES 256 registerAESConfiguration(32, "AES256_HASH", KEYCONV_HASH); registerAESConfiguration(32, "AES256_RAW", KEYCONV_RAW); The author is using 'final String' as the key. > There is information in the answer to "[Q] What is the difference in > the XML configuration file between AES and AES_HASH (or DESEde and > DESEde_HASH) ?" that makes me very concerned. > > The method described there for generating a key from a passphrase is > NOT secure and is subject to rainbow table attacks since the hash > (MD5) of the password does not appear to be salted - this hasn't > actually fixed the problem they appear to think it has. I think so. It is not so secure. > > > What crypto library is used ? I assume since Areca is written in Java > it is just using the JCE but I'd like this confirmed. > By looking at the source code of areca. It is using javax.crypto.* which means JCE (Java Cryptographic Extension) framework. In com.application.areca.impl.EncryptionConfiguration.java import javax.crypto.Cipher; import javax.crypto.spec.IvParameterSpec; import javax.crypto.spec.SecretKeySpec; And the code follows standard coding standard of javadoc http://java.sun.com/javase/6/docs/api/javax/crypto/Cipher.html > > > * Files permissions and symbolic links backup. (Linux only) > > Why is this Linux only ? I think the author means (unix only), since Solaris is not as popular as Linux today. He is just willing to support Windows and Linux, but as he mentioned in "http://sourceforge.net/projects/areca/" project page, it is developed with OS independent language (Java). I have also searched code of this project, the author is using Java common API to get file permission, user and group message for Unix system. > To me this is not acceptable, this makes it totally useless for > Solaris backup if it can't do a simple thing like this. It is not a system wide backup tool, it could be suitable for a file or a folder from which user want to backup his movie/file/data. It is widely used and quite active, I usually get over 20 emails per week from it's discussion group. Linux people can use it to backup and restore their files and people keep asking questions for this project. > > What about ACLs on UFS and ZFS ? > What about extended attribute files (ZFS and UFS) ? > What about system attribute files (ZFS only) ? It's not supported, except file permission, user and group on Unix. I think the reason is Linux platform does not have ZFS. It works well on personal backup but may not suitable for system backup. > > For this to be included in Solaris it needs to be actually useful as a > Backup program that means it needs to be able to actually backup the > content we can create on Solaris without loss. Without support for > file permissions, links, ACLs and extended attributes I can not > approve of this case being integrated into Solaris - particularly > since the bundled tar & cpio archivers already support that. > > Does this work with NDMP ? It does not support NDMP. Regards, David --Boundary_(ID_PuwijP0EzlaUsLjtw0nDlg) Content-type: text/x-vcard; name=David_Zhang.vcf; charset=utf-8 Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=David_Zhang.vcf begin:vcard fn:David Zhang n:Zhang;David email;internet:David.Zhang@Sun.COM tel;work:84341 version:2.1 end:vcard --Boundary_(ID_PuwijP0EzlaUsLjtw0nDlg)-- From Darren.Moffat@sun.com Wed Nov 5 02:44:17 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5AiHiZ020032 for ; Wed, 5 Nov 2008 02:44:17 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mA5AiBYk024162; Wed, 5 Nov 2008 10:44:16 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9U00605WHR1T00@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 02:44:15 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9U005D0WHPSA00@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 02:44:14 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA5AiDu8001251; Wed, 05 Nov 2008 10:44:13 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9U00E01URWA600@fe-emea-10.sun.com> (original mail from Darren.Moffat@Sun.COM); Wed, 05 Nov 2008 10:44:13 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9U00M2PWHNGY70@fe-emea-10.sun.com>; Wed, 05 Nov 2008 10:44:12 +0000 (GMT) Date: Wed, 05 Nov 2008 10:44:11 +0000 From: Darren J Moffat Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491172C7.9000501@Sun.COM> Sender: Darren.Moffat@sun.com To: David Zhang Cc: Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <491178FB.8020200@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 901 Given the unsafe nature of the crypto in this project and the fact that it does not support ZFS ACLs or attributes I see no point in integrating this into OpenSolaris/Solaris. It would in my opinion be more harmful to have it than not have it. It also provides a false sense of security due to the weak way that the passphrases are turned into encryption keys (ie there is no salting so no protection against brute force key attack). For personal backups it would be safer to use tar and if encryption is needed then the encrypt(1) and mac(1) commands can be used for to provide safer (than what this case provides) encrypted versions of the tar files using a documented and committed format. Instead of this project maybe we should build a simple personal backup tool around the clis we already have in OpenSolaris. I do not approve of this case being integrated. -- Darren J Moffat From Mark.Carlson@sun.com Wed Nov 5 04:21:53 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5CLqh3006226 for ; Wed, 5 Nov 2008 04:21:52 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mA5CLbp0003588; Wed, 5 Nov 2008 20:21:51 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00A0310D0M00@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 04:21:49 -0800 (PST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V005Q410CS250@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 04:21:48 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5CLms2021524; Wed, 05 Nov 2008 12:21:48 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V00K010ZIYM00@mail-amer.sun.com> (original mail from Mark.Carlson@Sun.COM); Wed, 05 Nov 2008 05:21:48 -0700 (MST) Received: from Macintosh-252.local ([69.89.172.90]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V0007R10BUA50@mail-amer.sun.com>; Wed, 05 Nov 2008 05:21:48 -0700 (MST) Date: Wed, 05 Nov 2008 05:21:46 -0700 From: "Mark A. Carlson" Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491178FB.8020200@Sun.COM> Sender: Mark.Carlson@sun.com To: Darren J Moffat Cc: David Zhang , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <49118FDA.6080808@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (Macintosh/20080914) Status: RO Content-Length: 1509 Darren, This case is to provide familiarity to Linux users coming to OpenSolaris and wanting to have the utilities here that they have in Linux. Once they are comfortable and discover some of the superior tools that OpenSolaris has that might be more appropriate, they will convert to those. But if they need to learn all new tools when they first get here, they will not stay. Darren J Moffat wrote: > Given the unsafe nature of the crypto in this project and the fact that > it does not support ZFS ACLs or attributes I see no point in integrating > this into OpenSolaris/Solaris. See above. It's not a competition for only the best tool to be chosen for OpenSolaris, but more a matter of many tools, some good, some much better. > It would in my opinion be more harmful > to have it than not have it. It also provides a false sense of security > due to the weak way that the passphrases are turned into encryption keys > (ie there is no salting so no protection against brute force key attack). > > For personal backups it would be safer to use tar and if encryption is > needed then the encrypt(1) and mac(1) commands can be used for to > provide safer (than what this case provides) encrypted versions of the > tar files using a documented and committed format. Instead of this > project maybe we should build a simple personal backup tool around the > clis we already have in OpenSolaris. > There are better tools, but that is not a reason to reject familiarity cases,. -- mark From David.Zhang@sun.com Wed Nov 5 04:30:57 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5CUtuN006274 for ; Wed, 5 Nov 2008 04:30:55 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mA5CUpc2008059; Wed, 5 Nov 2008 20:30:53 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00A031FF1Z00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 05:30:52 -0700 (MST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CAP1FDZ7E0@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 05:30:51 -0700 (MST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5CUn3B005939; Wed, 05 Nov 2008 12:30:49 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0K9V0060117PI400@mail-apac.sun.com> (original mail from David.Zhang@Sun.COM); Wed, 05 Nov 2008 20:30:48 +0800 (SGT) Received: from [192.168.1.2] ([221.218.121.36]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0K9V00I3L1EW5X62@mail-apac.sun.com>; Wed, 05 Nov 2008 20:30:48 +0800 (SGT) Date: Wed, 05 Nov 2008 20:30:29 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <49117393.2090408@Sun.COM> Sender: David.Zhang@sun.com To: Darren J Moffat Cc: Mark Carlson , LSARC-ext@sun.com, scsifma-gz@sun.com Message-id: <491191E5.2090307@Sun.COM> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_yTykCTJDBxvi6T4wvZX91g)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <49117393.2090408@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) Status: RO Content-Length: 136565 This is a multi-part message in MIME format. --Boundary_(ID_yTykCTJDBxvi6T4wvZX91g) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Additionally, please see how many emails I got from the community via attachment. I can not change your decide, however the fact of open our solaris is to let people use it and get more useful tool instead of developing it by ourselves. David > >> To me this is not acceptable, this makes it totally useless for >> Solaris backup if it can't do a simple thing like this. > It is not a system wide backup tool, it could be suitable for a file or > a folder from which user want to backup his movie/file/data. > It is widely used and quite active, I usually get over 20 emails per > week from it's discussion group. > Linux people can use it to backup and restore their files and people > keep asking questions for this project. >> >> What about ACLs on UFS and ZFS ? >> What about extended attribute files (ZFS and UFS) ? >> What about system attribute files (ZFS only) ? > It's not supported, except file permission, user and group on Unix. > I think the reason is Linux platform does not have ZFS. It works well on > personal backup but may not suitable for system backup. >> >> For this to be included in Solaris it needs to be actually useful as >> a Backup program that means it needs to be able to actually backup >> the content we can create on Solaris without loss. Without support >> for file permissions, links, ACLs and extended attributes I can not >> approve of this case being integrated into Solaris - particularly >> since the bundled tar & cpio archivers already support that. >> >> Does this work with NDMP ? > It does not support NDMP. > > Regards, > David > > --Boundary_(ID_yTykCTJDBxvi6T4wvZX91g) Content-type: image/gif; name=areca.GIF Content-transfer-encoding: BASE64 Content-disposition: inline; filename=areca.GIF R0lGODlhBATmAvcAAAAAAIAAAACAAICAAAAAgIAAgACAgICAgMDAwP8AAAD/AP// AAAA//8A/wD//////wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMwAAZgAA mQAAzAAA/wAzAAAzMwAzZgAzmQAzzAAz/wBmAABmMwBmZgBmmQBmzABm/wCZAACZ MwCZZgCZmQCZzACZ/wDMAADMMwDMZgDMmQDMzADM/wD/AAD/MwD/ZgD/mQD/zAD/ /zMAADMAMzMAZjMAmTMAzDMA/zMzADMzMzMzZjMzmTMzzDMz/zNmADNmMzNmZjNm mTNmzDNm/zOZADOZMzOZZjOZmTOZzDOZ/zPMADPMMzPMZjPMmTPMzDPM/zP/ADP/ MzP/ZjP/mTP/zDP//2YAAGYAM2YAZmYAmWYAzGYA/2YzAGYzM2YzZmYzmWYzzGYz /2ZmAGZmM2ZmZmZmmWZmzGZm/2aZAGaZM2aZZmaZmWaZzGaZ/2bMAGbMM2bMZmbM mWbMzGbM/2b/AGb/M2b/Zmb/mWb/zGb//5kAAJkAM5kAZpkAmZkAzJkA/5kzAJkz M5kzZpkzmZkzzJkz/5lmAJlmM5lmZplmmZlmzJlm/5mZAJmZM5mZZpmZmZmZzJmZ /5nMAJnMM5nMZpnMmZnMzJnM/5n/AJn/M5n/Zpn/mZn/zJn//8wAAMwAM8wAZswA mcwAzMwA/8wzAMwzM8wzZswzmcwzzMwz/8xmAMxmM8xmZsxmmcxmzMxm/8yZAMyZ M8yZZsyZmcyZzMyZ/8zMAMzMM8zMZszMmczMzMzM/8z/AMz/M8z/Zsz/mcz/zMz/ //8AAP8AM/8AZv8Amf8AzP8A//8zAP8zM/8zZv8zmf8zzP8z//9mAP9mM/9mZv9m mf9mzP9m//+ZAP+ZM/+ZZv+Zmf+ZzP+Z///MAP/MM//MZv/Mmf/MzP/M////AP// M///Zv//mf//zP///yH5BAEAABAALAAAAAAEBOYCAAj/ALe9oJKCysCCBw0SVIhw YcKHDiM2nMiwIkSKFy1K1IhxY8aPHkN2HMmxJEiSJ02KVIlyZcqXLmO2nMmyJkya N23K1IlzZ86fPoP2HMqzKFCiR40KVYp0adKnTqM2ncq06j8t1f5l3fqPmtavWb1y zeoH7FdqqaZQmaJF7RQ/Zbl6vYOvWTy7eO/qZRavr994fP/25Zu3ML4p/w5qgaHl Bayu26hF3hZ2suTKki9D9qpZbNeznz1nnhz2LOXPlUun3kyadWfLsEerhoy59ejX sl1HDr0ZtW/RoGcDr43btuXgv0Pv5tybefHOyJ0vV87ZcrXqma93zZfvH75/3Yf/ /z4tmnz085hd675NnXdm9+jhl2YunDzs+cmdu8+nnxr3z9/5F5532w0YIH/uTYfd dpwh6F922EV2nYQQMmjhgxc6qGGDHGbYIYYgbrhffw6GVuKHJpL44Ynw9cebcCKG qOJnA7poY3LCvYjjjuLpl2NpA+IHoo7OsQhcg0LG56N8I3o4Yj6wXFdNlNRMKSWV VlaJJZX/IBbhe7ctZ5kfxG2D2D9ofvYPFWFW00czzRgT55xyGhOPncb4McWefuTp Vp93BlonnXBOUY2VL8CQ6IRaSpndlldG2mijUVZqpaWYXqppppxOSU2ln3qqiqeg jgpLqLDAosqnqk6pKqumvv+aaqyrqtLqrLC6auuuqvbK66++BgvssMIWO6yu1OyK rLKzGpvqs81G6yyxwBoCSyGwWKvttdl2a4gq2H6rLbjZkkvttOieu2uyr/6qyq7m qmLtu9i+O68qqaj6rr75vgtvv+kGrK7Avdbbra3hesutuPrWK2/D+t4b7sPfOiyx v+NOnLG84HJcSMcfVwyyxyN/bHLJI4t8ssrkisywyy13/HLMGZdb88wGz3vwzjr3 3KvOAw+87cYnF10ywUEjrXTS5zZb7dK9Smsrrs/C+imqV58KqtZYryp1sE5DzXSv 1WixDWoKapV2NbuVJVZkaa3V1lpUlIUY28zRxQyhdvL/hWc8Z3YpSuBTCBro3oMa c9g/lRq0mNakRg455F5HXjnXXid7deacb755quyeuu7YpItteumon646sTkXXCzA vH6M8L4mX4uy0SYbknshuusuc7Cw9xq8rcPDUvzxBd+uPMsho8y8v82HvPD0BvOK PLCp7Jv97Nh2b3v3D9eOu/JF+8777uSD3Pv56Y+/+/rwnx///PLXHz+499v/Pvv1 t0++7daSngDDR8AAdithCDygAof2vZLRrxC8+wME18cthL3ugtjDIPBWp7qEbcuD PysW0EI4sLBNLWooJJbPznU94O0rdi8sWJe64qgaVumGNryOH3BYJS+lyStdosYU /3h4nTs0gxmiMIYxmKHEJTYRHn76jA/f0kQmKtGKS0xiM4bYq0QlikISUpUW/vCH VPghX5KqIZZwCKlJZWlTcOyUHCXXNTqaqo6TS5bkbsVHWulKV8+iVSABOatYmNCQ wkLkrxQZSEbO6o+PjGQfB1krzVXykuxK3bBeyEl4fcteGPOYrzLJQU0qbIU8I+HO eDVC1GXylaaMZQzhRUt9eTJiuHyZtyjGsZmJi5e/bF4we0kymAmzmMQ8JsyG+ctm EvNen/SXNP1FwofZC5dJa2UphWXNXUYvZbPcpiYZuStyqsqRk4wkKWPZqmPVSlR2 pOMcMaVHXDFLnOi6Spj2Gf+b47jNMlRIk0BnOIXY/IMudWKiQvEERSgObqBTSOKd GurEOC20GUxg3JQW05hKFaMY1NDCHYixhRtsQQv2qAcqtrYprLE0jyytHOdAN1PR fa5W+GSnTnPK052e65POiuY3jdk+85kvnD5VmvvAOVSZObWpTQWqVPeFShX+jKrQ wypRt/pUZH5zqWD1n/uMij7+kRV/ZT2rWdPKVrSK9a1Gex5XoepVrNpqqpu8K8lw R1ZD/KF3f61eTweb1MKeDpaBJGxQkaqqLpGKGpDl2qkimzXIQnaHV4Psmdayp64M kQqTzawRjZHEUJDWGKZVYjGaWAw9dUWIflitalnbRNP/atFQ7PIiDKxUjHf4QhPE WAYMDKE7LfDDHsxo4xshNc84Ondyl3IpPEWHLEl6rY+5sid2rbu5ZWH3njil1TpP B0jwZldW31Vs6aCZS14qs6sMMyzqgGkzbFrzvqjMryrlGzD93hWbB+sme3FmM1Hi 7JlOZWYy6zrXvcL3wXRtsDOFWS6NVbi+vqzvNTccYP+uUnUDhrDz1EtidZVXsdr1 Yx7v+NLo3lG8JlTsNrSQrHxlTwt0c0uOz2g8fFGDCtWwMb7YNMM1eWWIU+ixjanB hGZsYhOaeDKUf6EJKlu5yncg8o/v8AtfXPnKUJayJoyR0UopqqPUYEYxlvEOZbxD /xNU2AIstnDSetQjX5qLUuf07Dmb+jnPgN4zYsNb4kLz99CKNZjsKgjArq4Mrmhd H8g2SDzhWbrSmDbepTWdaYCF9dMMFvFWAWi72VkQWAN0WaMj7OhWg/rVtztqWdXH VkmvNdKBjfRaba3WXsP61+mTq/NE/bsBmnrVRY0gYP3K7NoRT3ubBpi0o03tThta eLRL3qk5ze3iIfrb2mb0ogsRxI9lrxCBGyiapoCvjqnCD6o6tyq8dKYh/liI8s5e KuAgik3AIcyUALiVKfGLO9jbslPgMsGrHPAoN9zfmxAFEz5lK91G5qPvYPMy4BEK 3jWCC1tYhj2WocZqvLtKhf9AAQpS4cY5Uuq5MEdBks9opXnvsFJ+QAHoQCVz6q7Y jlPQualUzm7jBR0FKoZFz1UOyT7+UeUqZrp1m570qlMdFvC2utJlTryjC9K6W5+3 zrk+raNzXeWqZO8ftICCvyZzZzEG99P+S/dU1l3u115v2qvJ3g3TN8OAf2aBlxnq 9xoeweNqJob/jl/79t3uH8b72ELMam1KPoWETKfTpw72uENNapCsp3SbK8d6purq nJ/k2PRp6YNb9vV+wPSPt4FpIruFxkIUYrepAQcnS3kTvwC+8INfjCxblk2QpQKX f0H84f9+E8wo80YZ45hqBJfNxHhHMbRgAzGIYQvMGHn/PWBKhT9Q4w8rV8XKYSpP y7k00J8TncrPX3Rbof8P8U6/sNBeOqj3SuVIhy8AiC7+xzT8FywFSGIJSCwASC8D ODYqZwhoB1SspH4owGq4A3V8dTKXdy5LJWEJhkwKNkx6VYI8w1jVQlVXZYKHB4Jf BWnAtoEO1FblQ4O+5lY1OIMwuINxRWxRRTImKFUruFjPU2uB1WwomHdKaIIdKCyD dm3jNktBpG9DxnKQZYVoIUTttj07tIXz9nqvxydUKDt20G9PFmXPZ2WbQAVWqHz2 lhbAV2VxKGZSJnHXUXGKsltp1ltuphYwsAU4sAUwQAh2RnKTon6XhQLXgQJAVilS /8d0KmdGSbZ1hUAmxqNyf+AqOYcCNAcLfwBaaKd0tuIpbGcrnJgqm0hzkfgH7DYq hUAF6xdvQWd+W6crKucHmQgX/peK2AJ1B7grOfd/sfeJFmiBDQh1WqAF2JIK6Md1 xYhj9cKKxehdKleJ7AaAOjcttwhvuoh0nsh2H7N1A+iLY+eNbMeJ1XOAEliOWuAH 1tKMvION8oJunAgujCgvOZeEkkdf1xR42vSPIrSE6OJhK8R4N+Nei2dhhLeQPlh4 DgmCIyiCInhhBOaPAEaQAWlYlFdXuCOQkndiiEY1m4dHo4dH6SVIhlUNN8crfpBj c+MWf/Ar1QBkv4J8YKh7w//Ce04WCpvAk8WwCcawCT9ZDL9QfHNzB8UnN0gplEwZ lEPZk5uAURoFC44DA6cSCu+QfcRwBymgCXewBTEAA1MwcsvAZ1GSj9WAdmmpc5oD ddRAjqmQCjL3litXY0iXcoXwY1PDdSlnRvyHAlrgK+rXkutHBf5ydm0nl0l2f3J5 bit3f7DQjrxyi1qgCu2Idob5LogZdsECmeiHiyu3iQUDmFsXe4D5bt2zdG2nfuyG l6I5LJGYckm2gMVCmZYpmox5gbsil2WEduSoCpnJms0TgR1TjdX4MTnnB3iZcneJ foXAdlpgCGxHRm03Qi1kPRqEnSbYLzzYkC5YV8cGVNX/QzsENDsB9JANGYPdCVY3 qD+65jtHuGvy2Z5qtZ5v9Z34WWzFVGr8KU0vmINHGKDEFUPXuWnaSWkI2oTHRk2L dqCSN15416C0E0TUtD099mwY2mNYlyzP1hZ74hZiqD0vZAfN0G88aaJAyZRD+QtO WZRCyaIq2pRQ2W+igApchIdfRA2ioAkZ9w7o8A7pAA9TIIhTEA32UAyMsoiKKERL KnVK+qRqiXZBZyVBFyWnaHKp0BaKWKVpmWRrOTlyeYF6hC/n+JZJRpdYp4hKB2Sw OCr1+AdZNyW+qH7FqCrPWaW+qaaC2XaeqHNBpwqxUIB6kip/iQKGpApwCnVVaoGw /7AnhOqNggR1a8moKHlOYYd0mIp0wThvoGUrVGCYlzp2RVcIWfqL2HiN5TgvsKgq qmktQWctgPktH1qZ+nhtBelhrOSRHGR5GRkst8p37RViiddLg4d4xtqCCzZhCIas iudMiadh/MiPHbZ3c7eEwLSs4MSrCmos5gSoJpR5lapT6KRiovdSqAJz9FQqqKd5 4eos22BG0yV6LzZdZcM48hqv80pddjANtoVatUVbqyVbxhCwA0tbStSvWpQKdzCV HFV9f7AJWvlmU+BFU0AMKQVv54p2aLqxVqpzXzp/W0eXXoON85dy8EaOyTJ/lOor B2iyxVionEmOrKpzEjSZK/8HmDercylXmTJLm2KndDwrdPyHl6bojVCnfhKUp0VL qb/IskJbjgNjnOCotJwJmYwagWiHfkH7X8RZtOvIMSR7gRo4tiigO8xZmQ0qkEUY bN7pbsgmMkFoV+WSV6sktwqGgej5n/b5afRpg36Lg327t4KLt/m5aHg1t5GHbDIo P/FJXLq6rXVHgR4ZaDSlhJ8UGXsCWUkKIWB0Q5FBJp27uaELIXdADXByunCyN3ZB GICxF667unACGKjbDKkgcZaFo7sVJaLwC9nHZnuSAnfwDscVCqkgKWynQ03aiHKq ppDosXlKpR7riMy7pc7rvIYJT25ZiyErqVC3qYzYqEb/C2/756eqybRQ27S2knPT Cb5Lq3SxN7Pw638yy6h/ypnAIr+ZioCmSr6zqalCm2Tq16mhOsArW8BUawhtOi7E +arqF53z5qHNA7nc9KwZ5nd9J2C9qq0khpEcdsHCungHGcISWbh5W8JcFZEMSWEV k5AgDK2/GrnUmrjzRcEiFlePS2Ked2jnxTnx2mLq6nPodWhwQwUvWcS3d8Ryg8Rv ocR6ksRr0cRMMAVRPMVSXMVMcAdTjMVSrMVXnMVU/MV3sLCRNSVn5hifsm++4AtZ ucYip31swlJoiX7Zc4E2FXRxibIWuLH2eMc7ZMdhusfNyKqB+SsH6Mfzm7WJmX59 /wmZCdi9q4l2L3CBzHm1+bubDYioFxjIsGgw+Ct2mAy1Yeecrzm+8QupzuLIMYnI SYuc+hemoSp2EFSN+xKBtmOcd/lu1YmOGuicbBd70/mZK4Og02ZtxNxt0ZZV6hlW JHyezMyfihZuqda2eru2ycyDgeue2Jw/2tw/3IyDtDa4kCZshAtfzkye5kk+fSWg fxWT3yJt0FbMw2zM8GyghRaFx2Yw8fxtEDpYipZtqrAbP8IjSjLQAd0jBC3QFNdF eSghqjAKcNBl6dBb2fdRZ7q5b6m5zMlyWdKoJ6uIUUq+l5IWb+EqbEGPU4JurEmo O+cpPUdxasGKKGCmhDqJa/83BdkzJWkxRqqyqMtbDXgZdpwK00rXv/a70/WoKtKo qACIqvD7ijat1EaN1IZJdjLJvQFYj6jHdD8tqZ9o0zM9jkiHp63IFoG8K4tayryy dpwIq2Vrpy8NLmqBj2UrWDncUybnqzGMqzfchAAJwxbseMEKwsSqrISdrIaNwiFo kRb514wNeVW116lU2OizLcrCK3UtX+Ca2alHrqPiU1QXeizWfqTnYnukdZsH2cfy LI7ST5x7G5Ey2pzSsJZiRkxACZTgC7dNCQaHRuk6RtFlrsDtfmYZOpQrOq+ydhIs SwDcK0EnWPI1Bfi3s6g9LaHEhEN4tw7Gtxz4uPcpzdj/StiIK4TW/VMqGLcpbMKu Bs5jtbjX3N40qN7dmZ+IrUyIW4EpqFfUnM5kNd2X1zO12oFP2N97vVxpNFme8nqV 0i4KHl6IpVtJii94sBBqIb4EXiWI2nLomuGwTSpnRJIwtl0g3q47Raszq5wkVom3 qJlhm9z49KsHJtkcw+K3VMEGeZExnKsS3NeObeP9iJAV6ePu9d2GPc5Ejp7zPdg0 Q5FA/qwdfOP79eR3BzU0fHgdKeOEBZLqxSoJfl0/XJI/fJL8zUFrtNpaMrphJNpe PiVVuWLXwoypgC0xJV2X02fw92eCNjXEPTph7qD0nGl87ud9zm1/LuiB7m0EU6CA /57ovyOe5Nlgr9ae2JZBkp6ghY7M3V3k+FnOLBhO9kxqmO7dj1bN7PnotTafH9O4 +9NXt8Y/8A1ryyxi5om4aXvO642oy7bO5hPplJ7ohM7riN7rHCQ9OjPrwK7PeH55 xJ7snL7sqPbfebZcaY45UGNxnktEEELmOUREysVcGt7twe1zJNnlX75Il73npdSt 3RrmL3ytzkqsMt548bXjUT7v5j55GUytGPzX8SV4zlqs7c6sRj7Cxjqsix2tTD6t fo3XfB2sHOk78W7lTDOump1T3arZ0e7t5bquX1fviVU51W4drZ2kG44psv1c5+rD aP7toSJT8VfclEtoEM/xMf8vS3EbuVlFVKTuzc6thMD26nRV8yf4U9dtt1rl3Y7e 6t9c66vu3oD7t6uO9D346ZVH9OMd3tn9zQKqbNIz8xtc3qid5zJPWCef4Vqy8pa0 4A2eh2/0KAXe9hg+8ug69uwH7h9e99UF5lyf92HvM4GnMaGmwXg3YS3c2I/HwTfs X/neeD1Ow4yv5EcO4yQc6uj9g+f94yHswjye+IYvSwSf3jas96C/NHdPrihP994V +rGE7SEf8ir/UmU893SeOezH8n5mcrG/c/E3SjNl5fHc+9Umz8Dv+8U8btAcbsJf 7Bp0/Mq/abKjn81MVzGo6pM2z9QP/PiMbaLOVNq/zJr/7szQ3Ohvm56eD/XozN6p fv64Rj+qfs1JT/7jI86TX0Ddr7dGeOvMZi3LX/35H/yFvk3G5v0AoQpWIVUCU8Ey iFChQIYLHTaE+JBaRIoPLSbECOugwEIKCXL0WHBgSJAcRW7UqBBlQ5QrEU6kBqua TGozY9qUCeumTp0VK76AAVRnNWpbYlSBYVTp0aQxliJdahSqU6pTnza9GpWpVqtV sXrl+lWq2K1Ux4ZFa7ZsVrVdz7Yl63YtWLhp2d6li/et3rl78/71G7jvYLmF4x62 C5gw4rqN+RpOLBiyY8WTHzO+HHmxZsuVMXvm/Fmy6M2UR4dGbbp0ZtWdT7cm7Xq1 /9MqSmvT1vo6d2u1Z2/rBg0792EtMLS8+Jdc+XLmzZ0/hx5d+nTq1a1fx55d+3bu 3b1/Bx9e/Hjy5c2fR59e/Xr27d2/hx9f/vz0QIHSx59f/37+/f3/BzBAAQcksEAD D0TwQCpeKG65apx7sLkImZvQQQgvlBBDCjW0MEMPN/ywQxBHFLFE5So8kcMUQ1yR xBZNTA7FGFWckcUaXbwRxn9k3JHGHm38EccgdeSxSB+NBBJJIZUk8kgnk3xyySib hLJKKa2k8kots+TyRS9z/HLIMJkcc8oysTxzyzS7BLNNMd0kE07lqEkllTeDtA+G BPfks08//wQ0UEEHJbRQQ/8PVY+aKfywU7rijkM0UkknpbRSSy/FNFNNN62OTjtT 8WOKVOicgprn8pwOBehUVY7VVZ9zNbtYY02OVRRuvfVVWL+jtVZcf+211eiCpQ5Y YJsjlrlkk63O1VyFhVZX55jFjlZjmcV2u2N/9fVZarPlNFxxxyW33PVAHfWfOqtJ BYVFnwvqOFNvnHdHVqlh9UFVbZ2wXn3/wZdbgPOds0V//9nXWIARtjc5fOlluBqF /z3YYYOv/bXfiAuuEQVTVZ3QWY6DrJhhiG90VeMY7xV44JNJbjFlhj/GFeGaNQb5 2B5VLblnm6/90eMT711RaKBrHVllmEGe2dZaP4Z5ZaT/Z+R5Y4tfVjrrpLe+Omqv te4a7IWx5nrsr8v2meyw0Ta4bbXNFjvts9emG26235Y7brfntrvuvO/m+2+/99Yb b8IBLzzwwwc3/GVQ/aCm3lSmQAHyFlGdFuNnGXaaWKeR1e5zYbnVGXSTTdd2X2QV 3vX0qV23btbMWTdd9tevw3g51TnX1XbYZYWVdtRvJ75Z0k//HFxrozW3eeefh/75 yJsTCLpHkQtyQomlDlpf2iNEAXztox3/xn8lPjr8FstXH+HyG85+/RR3b797+V/f Hn7x74+fafeLPp/VdjbA98nMfPJjWgIb1r767e9/+CPYASV4Ou1FsIHkqxX73rfB /2jx62fXGp8CQza0CXKwhPwzYfxOuEIVtjCFL0RhDFkIwxnK0IU2pOENa7hDHfYw hz/EYRB5CMQhCtGHRiTiEYu4RCXuaHrvo4Yf/BA/zElrVrv7XQdbF7tcBUt1R9Md 85QVuvRprle+W161Ptgy0XlRjGHU1ht5Z0U4Fg93wSvdGPW4R+ORrmYmSx7q0mjH 6BXSkIdEJJ88VS/m+OFWU2TOgopjqgdRcmESo6TQKqm+TFrSk5wEViVn1iNPkpKU 6gPar/C1SVGycmDH6qQpW3nJV2pyYJgkIC1LWTVc9vKWupQlLZm2yl8GbGLCPOXN FsZLYM7SjLzUZK5mSUxj3v+qlbYs5TRNycxYunKXuuTkKbU5zl+qzpI5gxo1cwm0 bjbTndl8ZzDhOU951pOc9LynPeOZT37u05/4/Kc+ATpQgRa0nwQ9qEEDmlCGLtSh CH2oQiE6UYlWtKEUvWg9VVGnmgCTcpWbZRVfdcY1/rGOnlNjzb4IrYS5kZBZTJXw SorSMJJUjVrk47S2CNNijTF3m8Pp7aglHc/J9I0u5WLuuhXIPQ6Sp4mEalSlOlX3 TA86jHLO9US5jR6JUnVbVd8mufogsJJVaGMdIFq32tVlovKYt9oGrnCp1rOGdWFj Dada78pWfNHVVFw15z/iSta9DpN3ZTWlXv86QKiZdbH/gVXsxhD7r8hWlrGC3dhX R+lXwdpVVXhdK2EXK1rMGha0d7XrYxOb2s6S1rKOzewy7UVZ1ipQtWLlK2Zdm9vX Jpa3v91tcH0r3NAO17jFRe5eiavc4zI3uaNtLnSfq9voUne6vb0ucKuLXed2V7re tS54uftd8oa3vOM1b3rRu17tZne5522veOML3/ditpRcvW+PUMXV5vD3dP51FWCZ A2A5xrW/zvEv5wz8RW+1yqb/HWOClSPh5ACWdrYqXYJZxd/dEbjCCEYWh+voKwpj Fnke7uyBVaw7AZtMwLYqscgqLLsS1xiOADajiaeGYh6DuHat4nDpAvw6FGj4w7Sy //GKl5PkAfu4yUqesJOXLOUoQ/nDVtbxlLHMZC0/2ctdBnOVvyzmMF95zGYuc5bJ vGY0s1nNbYbzm+XMZTfTOc52njOV76znPG+Zz3gG9J8FDbBRLdZh06NwvF6Azy5i M5y+/KY6valQa3aRd1AzljZ5prB0WtSfw3z0JR3tTItG85zbLKY8QalMSTs0gY/2 WPiwiepqhpObFb11AFvdzlYb9qCo/Jm9RJhqVxq2armOaEaVnWxmY7TZnnZ2tKE9 7WVLu9rUfva1tZ1tblu729j2drh7pJNUEGV6kSt0MEU6YZN2tsE9VpaNkaznIl9R xFGet+soXGRBP5Pdx4qxlP83zOc2eitXQT54hEGc7zOneMD+rnKs9h1of7fbVzpV 8sD9DK2AX1zNn/WxxAfd8EBvnOQjT3PJT27ylKO8zi7fM8tfLvOYr9zmLad5n28+ 853XHOc91/nPhc7zofscYNXA77mtOmCt5pawsyTt02kpWllvy+lXjzrWg5l1iaEv lLbk+tbFDvWxyxZjXZ962S0ZdrK3nXMKY5rb1652tsq9q1X/+tztLnW9p93uLf36 3rUueLa/PdOs5Xvd/b74vjde8Y5PfOQHz/jHV17yhYf85DOPectrvvOcvzzdQ094 0Xt+9JQ//eZLD3rTt571r1997Ek/e9S7XvYLQ3dHHb//3xb5d0K+F/Pvez/8GwHf zMIvPvGDZHwdI3/5ynd+9IM//eNTv/nWZ372oY/97Vff+9f/vvaTP/7nk1/64e8+ +NUv/vK3//zrTz/73y9/7pu//u6///zjv3/7o7//8P8/+vM//BtA/QtA/iNAAExA AVRAA1xABHTACMy/CSxACmxAC2Q+auCv85MkGBC3bfvAbwNBcCPBETRBEUTBEFTB EkxBFlzBE3zBFoRBF6TBGbRBGcTBGNTBGsxBHtzBG3S2KpLACiTCCyxCBkRCCMRA JTxCJjTCJ0zCA5TCB5zCIYRCJ4xCKtRCK8xCLsTCL6zCJQzDJhzDKyzDLhTDLUxD /y88QzBUQzJ8QzOMQzSEQy5suh/sQSD0wT3Uwz7Mwz/Ew0DkQ0AcREH0Q0MkxEMs xEVUxEZMxEdExEisqDyhk8ipxNzDxEvUxELbREvkxE/0xFDMRFAcRVHsxFJExVNU RVJcRVNkxVd0xVhMRVicRVlsxVrExVvURVrcRVvkxV/0xWDMRWAcRmHsxWJExmNU RmJcRmNkxmd0xmhMRmicRmlsxmrExmvURmrcRmvkxm/0xnDMRnAcR3FUNFNBR9xT x3Rkx3V0x3aEx3eUx3ikx3m0x3rEx3vUx3zkx330x34EyH8UyIAkyIE0yIJEyINU yIRkyIV0yIaEyIeUyIikyP+JtMiKxMiL1MiM5MiN9MiOBMmPdEfe4yq0KknqOkmT xCyVPMkHSckeeUmXXEmYnEmZbMmZZEmUrEmcpMmbjEmetEmd9Mmd/MmiJMqjHMqk FMqlzMmm7EmmfEqnDEqpBMqqNEqlpMqrhMqpjMqu5MqvtEqk3MqwxEqvJMux1Mqs FEu1LEuwTEuzfEu3XEu4nEu5bMuzZEu0rEu8pMu7jEu+tEu99Mu9/MvCJMzDHMzE FMzFzEupvMOCooZXkKIsyAIXoExCGBVHlETNZERI7MzN9EzOFM3QJE3QNM3PRM3R PE3VTM3SbM3TRBWZlLqxogZCsM1XeIXI0QZ0I4QsKIT/V2ArvZLN4FQ84Qyv4SQs 41TO4mTO2WxO4nTO6ITO6UzO56xO6bxO6qRJ7NxO7UTO7szO8ATP8fzO8jzO81xO 7jTP9PRO9LRO8nRP9YzP9mRP8VzP97xP+axP+NzP/KRP/JxP+wxQ/gTQ/hxQ/xRQ A1XQAmVQ/WzQ/3TQCIXQCU3QB61QCb1QCu3AUkK3jVKFQuhNjsLNVHgFEh2V3CQE KaoTD00FFnXRFoXRF5XRGKXRjdKJ18RR1tRR19zR1eTRH/XRIM1RIB1SIe3RIkXS Iz1B3nPJyNmGmkgF24xMOilR3KxSE43MVNCCyCGKJ+3SmtBAMPXSMP3SMiXTMx3T /2rITpUcTjbVyTbtTjeV0zilUzi10zfF0zm9Uz3N0zrt0z31Uz4V1EAlVEA11D9F 1EE9VEVN1EJt1EV1VEaV1EilVEi11EfF1Em9VE3N1Ert1E31VE4V1VAlVVA11U9F 1VE9VVX91MckClXgUlAhBColUUKoUlut1StNhSzITS61RHMDU18V1mAlVmA11sih iSQlUiVd1mY1UmdV1meV1milVmadVmutVmhlzdjckW2gCXa5TRN9BVy90nEtV9zM gqGwRJjoCUuE1XaNnHf1VaKgVzCtV6JQPKnT13zl1331134F2H8V2IB1olE5CIOt xINNWDrRiIVVWIR92IRtWP+InViJhViGvdiINdiK3diM5ViMddiP1ViQpViPNdmQ PdmSRdmVVdmWtViWfVmX7ViYnVmZJdmYxdmazdmb1dme5dmfHdmgFdmhTdmdFdqi 9dmjpVmgJdqlVVqbfVqjbVqonVqpLdp9TdqqzVqkZVqujdqtdVqt7dqw9Vqx/VqM rbtzfNJ/gFUo9QNbxcy4jdK5ldu6rZPedNd1XVdg3dt1bVub0FvAXVeAWdswJVx0 LNzERdzFPdzGNdzHVVzHjVzIZVzKldzKjdxGMZt64dyR4dxCCMnQFUnRJd3RNd3S Rd3TVd3UZd3Vdd3WrcdUmFxV6JrOrV3PVQ4teN3dhV3/3n3HdDFcbrVXOoFbcy1e uI1S41XecSUEL/3W4b1X6EVTMaXeMh3Y6yVYf82HviOr7c1eguXegGWk7ygEqjLf 80Xf9A2PjpI6zRWP8lVfAbGTp7tDX4WFLIhS28zfuLVNvO1f/e3fKMVfc+MJS9QJ ZDXgBI7XeS1We1WFbagkCCbcCK6kWACELsCBLuCCQ3jgaogFGZBgDaTgCZ5gZ6AE SnAGEhZhajjhZlDhEIbhERbhf1iGekBcGY5hwrWT8c2OeQFddbSYdAzizQVidxzi zhViI1bidjzigkliJl7iIobiKZbiKn5iKybiK9biLOZiJO5iJ/7iJhbjKN5iLzZj /zA+4zGm4jJG4zZWYyxOYzIOYzmO4zWeYzuuYzh2YzreYzyuEz5+4x2O4Rv9By7w gjI45ERG5EVOZOYYX93NYzZ+Y0kG5ErG4z7W40m+Yzimkw89t+TQCRgWXnoN4FIG YCn9B234X/6F21k91mF95eFl4OiNXvA9BBwYgxwYg13OYEOIhQzGXrKqBkrgBlzA hRR+OhYeB2MO3+v1h2jgB3uwh2bOVx7uji2I32zW5m3OlEtcX6xVDhygkV+QDvjl 5vaYCFjYhljwVlhVjvntqg0lYDrJgv99W9u8594EToB5hS9I0f7N53StCXmF1YLO W4Nu17bl0gM21gP21TGFaP9YAARczuCKxmAMHgMcgOjqnV5KwIViRuExZWFjxgVK cFKO3mgzrYZlkGZ+iAYbTunp7VLNtV1Hdo7P7d2c9l2d5umd9umeBuqfFuqgDsgp qkSJLLfppV2A4YIT4QIZiAGorgJDiBBcwN3kgOSh1mqivkd39uBYiIWCQEdYhejY /NJXwN9VXuUs4Fy1VuukjmWl+9W5ZuA05eiAveWM5mCiiAVDyOVd7oJgJiVj7oaS RmYWzgVjNmnBfrpnjubHlmZqTubxMOdztuzLxmwEsap0+Q72ZSvNbeodiQFVmBBV 4AI9+Qdyjo7KzuzymAnBWufYdmd1qbvr0cC/fdt6rmf/29RtfVYOtO7N/u3t3q6J doVX3IMJhIaJBq7XYfVSpAvTJ/1lDDYEMvVgih4DGVDTJ+XumoDu7t5uE1Zskx5p xa6J7n5u9Pbu7qYGlq4He4gG+HZpmI7u9a5vdjGbf+CG/eZvbpgOH+ZcoamXTatj o8FkSqZik7rkI3YaBB8lTY7kTcaXANfiWIPwAxeaIP6jSyZwCfdwCv/wA38l2Rpw AX8aK85wYJkXXElHVaqlTXNxY7IYBWfxOcmVCI/jqvFiV6EZHq/xpVrxW2nxG6+l IdfxDdeZBefjo04OyInHC5fd+7aJ5Gjqahjt8Z0Qq65pU8nqdNSCQuhyEe/crL7w /zK35Ew+cwdX84VJhVv46tiOBfyOCfvehjyB4HoV7v71Z97m3N62zT0Pbt6mV4Uu YE+ac4fuCVqW3i4lKwlGugcBBC7AAap29A/O6Izmgkfv1kbn9E0HmBMmaY82b00n dUc3dbJqb3t472X4B3+oB2iuBxv29FJH9Wnh71zp7/5uDt0dsakZKkBaDxnjlZvC D6fyKfJ4sF9/KfRQ9jhCHpaSI91J9qCKdmFvIyKDdvHAFjTCduKRsW/PdmD3dvLw FI5ajnLn7B7udKTTXHE2hCqQDtWGDtb+B3Om9+y49/hVBXZm523wd39f6vl19HOc CZsY7uDW7X2OzINn+N5k6/+ZeAmDTrcwrUSDltfiXuiMH96YlvRJh+gVgGociAGR j+mSF1NVAHWP9mg4OGkzNXlzq+GXXgZ/wK9oiG+bl2k0pemC4W/l2G9V6Xmcxr1Y g/HjEfKBSScD77SaYUeiH3F0tLSml/obJ3JjgvpOm3CkDzZMM3GmL/J1rPoan3Cq P7a2yvqAIXEBF3u15/ohv3oiL/seH/qiP/u1R/t4jPumOfq6P/K9d/q7//qkv3qt z3u8N3GsT/t21HF1XHzB1/oWT3zG13u2D/vAUvxRknrJP3sSb5rBj3u2H6XFb3yH dHLoMBVzL8ik3uilpoamPm3poAQsDvPZX5gv73Iw/2H/LgfdH85q29/q3w/IVABr sPZ32N7hUSnroNATNQ3Ty/Rn3f4CXv1tysyC6Lf+6q/n5+/NLr34Q0c0gFHgiRjT dvkV5AdTgJWBjFbT72XsT6eEXFD59W9/onBve2D15XD1euCHWJdsa/b5/QaIf9y4 ofgnkKDBhP8KKfyHoqBDgxAnTmxYMaLEjBoTPpR4kWJDjBxBYoRYcqPIgiZJXjyJ 0uVKjzJhzvyoMWbKmjd1Wtxok+bNig+HquRoFOdPpCx9Hu1pMiJFok0VPqXqsePV qlWN5uyZcavDlktLqiT6FKxIrlKZdkWqluvLkHLnNkxF1yC1VNTuphpqVyG1av8E /xP+9/cfl39bttz99yth34eHGSqkHJKxQcyWKXPmnDkh5saiR5Mubfq06WqwYsXa ti0hrL2GB9OupgWGlhfVtgUOTCNLli+/h2c5nCoL8eTIvwAHDqsatbzUVOWFRV2v 4OjXp1fvDT0yCuyBn+/uzbtaeRzqyZ+ndr489Pft5ZsPjB4OJUq48ruvj36+fe1V o0w90dSzjD+vCfYaNQUWuEx/8QUYmF17WZjQXgMNVBA1GppkYSEXUgPRiHtNZOI/ KF54YkQqonAhXim+KJGFM3LYolEwzlgijSn6yKGNGEIlJI83AolXkBmt6COKSs7o UI0u1qjkjzLC2OKTQUrpI/+UVmK445dNVjkilSzyGOOUL6qpIpZUsnmkl2TiuBKY SF55o2xMytjllHrKyaOcRobJZZxh4dmjiSTqeeiWgVaJJqGHuololjVileiHQ8m2 o5Y48kmoiESCqmeKftAlnah55hWeqobRB11sKXKxjQwxNIYLk33p5aMWhPa6lxaF /BpiipT9+k+vC4EIbLEgQtrqlaE+myq101rrZ7XYXiuttj4W8ocqrLmWInUGxSZh NS/AoO428FHDHLzByfvFK5DFe++88kJXDXX9cqcKeoPx+++/+/amq3fmEdbuYAxz gYMMsey2MMUNVzyxxRlDB8d+HefnjMYMYzwyb/WYvEz/QnaEsjKDDi4TMMmE5UnX hgnVfJlXQOH0VleGhrSzWDnDBfRQO1lFJ1ZuGZ0W00q3xZZWPhX99NJsvbRW1C5p jdaQRRma9NU8t4X1V1YJLVdLcTEd11loD52zUEKTvTTXam8FVtBUb2312qjNlZdc qI52GGAXb3MYDv/UGhJ6Af+i6l+yWWbQ5AtRnpBnlyuWULKdBVu536GLPjrpDd0z yh+FPOcaLLEaZNfIVLxwm3fPBffb7cAJV5yPqeyeO/DCgRGYKtZVt52F0qVi/PLU PTfed8+rZjD1CRsSAw5cVA9dLAlv733C1OCX3/j5UQIw+N/vO80yyiSYYijMMGPH /z8Mth+d+hRiq+qGeX7IJLGi5CUgvWlRAxwTk8AEKE4VUIAiYuABt3SooiywgRAU 1JIyiCUHaumCBizSmDzYqDiBCU8iDKEFo2QWAq6pUwKcIApJyCYOPjBURjILpjoy QwTW8IM40mAFeQhBDWLwhGUhChALtcMXxhCEjeoUBvcnxVBRMUW7agg1TFXFLeop Fd8rFzUSc4gYqAIwW4BBDP7wD1xx8VjMutCwloUsXjWrjnGcIh65qMc88nGPfuzj FP1xD3uEwg8hSoUqqCMi6lBPXeqiTX8Kka8vUHJe9TLIK+5VSUrCixD78ldsALYw UHInlABCV4T2ErOGqeJhOP8AhMauxwVViKyWhpMZx8gHnfzshxIgWyUweUPL+v0j FPe4Ryhe85o/2DJk0LmLhjR0ELpUTmljoZvYskY1rPStZx/5idnIArVseiVvQPPm TqxpTp7lzW1hMRo42+lOdOqMnNhMSdvORpd8hnOcfAvbP+kEN57s7S7ahIs/C+q0 dtatdITD0ENRE5hmHiYx1bBCDGIREjI6JkYhoQboQiNS0GjOciYtROZGWrqVsrSl dxlkMVBhKr7Y8ja58V4h8KXTS/4jk5PM1yuIR7B+QWeoBNML9LwnPfAJKDCAwAH2 ZvkcQwACezEwhH8S1tSilg8O0dmGKniZH1oytazVMAT/bbYRCpUxI61/MKt3KkQq GZlFI9Ailp32FJYRFeUhaWLT136kw5IIkE8dARLZzgTBd8KJgIhibAN9hiS/UipT lDXspgD1NUuRcLL4pGwUKavYJcXIryQarGkttVgFCimKfD0tZ1Wb1z9xSrQ+WyCk /hctL02qrphKoG3/51vJfg1pe+oUY/W6wKLtVkyvTdpabnuVFQ32tdQ14aU81S1u cTdXGMqTXJs7qgulYqvUiFUY8VKFGKziNQapRhrXiEc38kpYegqWG4UVQGQxhFjH wu9cuyteaI23wAQ+cLYEbOAEC9IexTCGH57Z3HNFyJEw4E2KihocTnKYkoSgJE8z /9lheH0BDLDgTSlTDDBSOo87cDVYu3gT44W5Bz2uhCrE1KMeQJyYZDWuZY2rkUtK eBVjzhArJVQpYx/PeDDDfI3K1qrMf6ixPE228jNbmizTNNSlc+myS8Hs5TGTucxm PjOa06zmNbO5zaipUF5S8Zcrhi4wDfsx4hLSrqquYAsx2MJfHickj4KOpaFxM6LR DFNm+GFmcynvyNZ10309jxCT3OQm60UNS5O40xGOjl781S/jiXqo00vqqU9t3u09 DHvqsaoh0Je/7alifF71XirMd+tZe4+Z5VmrlMvzVl5XI7wBHvQU9/tHRgHyj1VE YrOjbUNpU9vZ1b62tbON7f9ta7vb3P62t8MN7nGLu9zkvrac023FRiMV3V+0UGKw KBdKzJfc+qWvufN9bn378Q+hEIUf0DtF8ezLwhY7Tyo+rPAvfFgRDP+Cwwnxikwu fOEOx19sopPx8xZ14887L8iDnEoA1WbGtoyxKgzBBS7EgAuAkNjBY3blGOe6yCYX zJFtTrGZT6xdqiiEKsD1B0MI/VvfOnnMHE26Qie66U5/OtSjLvWpU73qVn9zdOpC Z79NdOeHKUMZvpCIL4Q9EWAXO9m/8Ji7MP3qblczLFIRYdJAesY2fYFSq/HhET+8 4n1/OCUdHiLVkNqopT48pROP6vQxntiNT58i1Rf5xzv/vvK43i6yEaysYw84wZxf 8LY+r3nMdz70pSc96FE/egWvXvSePz3rX5/62Jt+9q6vfethf3vVyz73ttc98H8v fN8Tv/ee9yL4BK7vY+He+M1/Pu+hT/voU3/60qJwwdd1YYz1hhpgiDjEH64IQoy/ /BAnhMUZLr2lcjx8Sy2qrFMJ497EPD49R8+PJ2b/Ge9f//lvV/8B4P/h380FIAHe nwEm4AAq3egc2ts9IARGoAROIAVWoAUi2lchYESVTttdoAeWGaTZn+zQzvwRXhaY ASelH/qB34eBQfiBgRfFxvIg0gyqQg3eYNzZYNxhnOKl2vstXg/Wzvb8YKoJYd4d /yH1EKESDiET4poO0mAO4iAUTuETVqEUWmEUZiEVXiEXaiEWbqEXdiEYjuEXlqEY mmEYpiEZniEbqiEarqEbtiEczuEb1qEc2mEc5iEd3iEf6iEe7qEf9iEgDuIfFqIg GqIWDiEiEuIhNmIgPiIjQuIiTuIdopqF3VyK8AYsQJwiOFz5kR8ofmInRhzyCeB8 EKDCoJIppmIqxdzNveL9waIsxiItzqIt1iIu3qIu5iIv7qIv9iIw/qIwBiMxDqMx FiMyHqMyJiMzLqMzNiM0PqM0RiM1TqM1ViM2XqM2ZiM3bqM3diM4fqPd4QbeVc95 tM73dSL5nZ8ociIp+mAPrv9fPM4jqpGH5d0j5eUjPu6jPvYjP/6jPwYkQA6kQBYk QR6kQSYkQi6kQjYkQz6kQ0YkRE6kRFYkRV6kRWYkRm6kRnbk9liY/f2HeyXECr6C IpjkK0jcSS5CLSyCwwWV0/kfAMpk45hiTR7gf+AkTeZkSO6kT9okTwbZT+okUA5l TxYlUhKlUh7lUgplUjIlVDplU87kU0plVFLlVN7kVWqlVXYlVm5lUH6lV3KlWJYl WZ5lWKKlUY5lWrblWpqlW1YlXL6lWsplXWZlXOIlXeYlWO6lX9olX7LlX+olYA5m XxYmYhKmYh7mYgpmYjImU0raC8hjPRabJJHfxGkDNWj/g0syHCGcC2XCY2WOpmiW ZmieJj2aZmqiJmmypmq25mrGJmzO5mvWpmvepmzaZm7iJm3ypm725m4GJ3AO528W p28ep3AaZ3IiJ3Eyp3I253JGJ3RO53NWp3Nep3RaZ3ZiJ3Vyp3Z2Z/axi1bqH3la JhjsnWe2zleS53q253i6J0+y53vOZ3zCp3zWJ33ep37aJ3/mZ3/iJ4Dup38OaID+ p4AWKIEeqIIaKIMmaIMiKIQuqINOaIQ+qIRWKIVeqIZaKIdmaIdiKIhuqIeOaIh+ qIiWKImeqIqaKIumaIsG6N2Bp4x+J416p41uJ47O6I3qaI7WaI/uqI/yqJAGKZEC /6mR/iiSDumRKmmSFmmTLqmTMqmURimV4qaFSQeoRQeWbilScamWdimYfqmYZimZ emmZhumZjqmZrimasqmatimcvqmcpimdummdxumdzqmd7ime8qme9img/qmg5imh +mmhBuqhDqqhLiqiMqqiNiqkPqqkJiqlOmqlRuqlTqqlbiqmcqqmdiqofqqoZiqp emqphiqpjiAM8Nu+tSqrvqqrxiqszqqs1iqt3qqt5iqu7qqu9iqv/qqvBiuwDquw FiuxHquPgKRONo5QMutMOmvjQGu09qS0RmuzLiu2Umu2Xqu2diu3fuuzbmu4euu4 guu0kuu5muu0qqu1lqu7pv/ru65rvLYrvNarvNorvd6rvuYrv1arv4orvv4ruu6r wLJrwc7rwQYswBLswvZrwyYsww6sw0osxE6swT4sxlJsxl6sxnYsx34swm5syHrs yIKswpLsyZpsxLLr3T2HPLps4sEs9Mjs9NAszL4sPNpszcZszvYszv4szwLtzPps 0Bbt0ArtziLtzRpt0jLt0h6t0+4s1E5t01Lt01Yt1l6t1kpt1nLt1uos2BKt1Xot 2Yat0pat2Hat2Ubt2o5t26pt2n5t3KLt2b6t3Nbt3Not3bJt3vYt3v4t3wKu2/pt 4Bbu4Aou3CLu3Rpu4jLu4o4tSNrHvuAfs1Yu5V7u5Gb/ruRuruVqbudyLuaCrueG 7ueWLume7uimruiurumqbuuyLurCruvG7uvWLu3e7uzmruzuru3qbu/yLu4Cr+8G 7+8WL/Ee7/Amr/Aur/Eqb/MyL/JCr/NG7/NWL/Ve7/Rmr/Rur/Vqb/dyL/bah2Qu Lfk2bfmer/mmL/qur/q2L/u+r/vGL/zOr/zWL/3er/3mL/7ur/72L//+r/8GMAAP sAAXMAEfsAEnMAIvsAI3MAM/sANHMARPsARXMAVf8PRcYsqWLAdvsAevbAeD8Adb bAiT8AhX7M4mEiL9gXqesMi6MMqKsAyb8Ayj8AvX8A3TsA7bcAzvcA7zsMr6cA8D /3EJEzEMB7ER4/AQ/zATL7ETI3ETQ/ETt6xqxIIhXDEWAwwGb3E1+MEUMMEUNBrU cvH/ss+B2MMy1MM0cBwZR7BcxFqsWbActzEdz7Ed1zEe37Ee5zEf77Ef9zEg/7Eg B3IdR+5ZNUQ1xIKshe/3Nu8UcAwu4AIcMAEceBEjX3LuooxCDJI0NDImC28ZhQRa NUIcf7Ine68ppzIqrzL4svIptzIsv7Isq3Is0/Isu7It5zIu73It8/It9zIwW66q uqwhaGXKYTEy80vNosBzAAwKpHA1PDPMqgIzT88KSbMyu2w1azE0xx0K4AccwIE4 hPNDNHPTOvPOlnMKE8X0cP8zNmsxO1Pz0nIzLNRDP/hDP+SzP0jDGadxGjNDO1vz Cq3zzT5E02LzNEdzN6dwKCvEWblH0JnzPCt0QsPsM9NzO1dzQiM0RS+zOwf0RIf0 Qlf0SIN0SUv0SWdzSmM0SpO0S5v0S7c0TM+0TNe0Ssf0TdN0Tts0S++0T/c0UJ+z UIs0Tgc1Ueu0Ua/0UCv1UfP0Uhf1UyN1VDt1U//0VFt1VSc1VGf1VWu1VHM1WDO1 WG91umhf46AVLYbEKtijfVQzejwzetjjM69QW7M1XNu1WWSuXH8zN1CCL+RHLngx LojuQBv0W+e1XjPrXTcOXFczO08P5UaDPyyDPdiDPvf/Q0jYQ1wr9mZHc1vntTrj n0HDAlxL7nOsEFs3TjO/ccqtwh9AduZes1vLtmErtGd39G3P9WMr9DV3bmp3dmJj 7m/Dtmn7tnEL93EHt3IXN3I393KrdnIz93MDt3RXN3Q7t3VT93VPN3Fvd3Z3t3aH N3iP93CXd3R7N3qLt3ljd3qT93mr93u7N3vD93zLN3ev933HN35/9363d3/Td37X 93/bN3/rN7NSMSwUcyIvOFVtwVr/RzGTr2yrhkYvs0UPdEFjM0dbdF/gwkCE8197 OJHFYDpT+Gmn74aXeEGfuIabr2Wj8TtQ9j3kM43f88ssbW9r84mTdvnO9UFTdIWT /29D10bNsrD5BjmQpziPmziQX7g6IzQ7tzghDzKVT7mVVzmWX7mWZzmXb7mXdzmY PwdITtU2tIbEUFW4OLjEVMMqALc9kjZwwzVsyzmcQ7ZbR3Nj4zZsnzYc+EJfawgk DwQu0DljA3ln0/abv3Wig7ae2yOC5HNlL8M7WHaN94M9JHo0v/liZ3qeb3Zo3/mO 4zmmw3ZDT9nCvLabN/qm7zl0Y/NbF/qr+7inW7Nts3qq37qt5/qo7/p28zqu+7qu 97qw//qwBzuxH7uxJzuwL3uxMzuyO7uyN7u0P/u0Rzu1X7u1Zzu0b3u1czu2e7u2 d7u4f/u4hzu5n7u5G7tkav+xIbCGxKwCILS7KqzCFrD5Wam0OjvzUDQzM5uFPOM5 beO7QXMzwUdzKsABN0iyh+MCE6CAHyz8HUh0Ye87vpu0O7Mzaf87Ohd8M0eDpS+D pdsDMUy6pZf8jSszbRv0ClHzUGR0qBe8j6M0wYfyzu0GLBg5x0+4vvf2R7/8UMCz xlM4y/u7xRe9zBu9SnN80iO90jc90z/90Uf90ku901M91E891ld91l+91nc913+9 1Yf91ou915M92I892pd92p+92rc927+92cf92su929M93M893tc91ivrWZX5gr+c xKjCy6GHgs86Y594rBe6q+e5PR62rG93tKIAE1ACN0z//odPcircgSTD9uEnPuev erTWeejX+uOPPshL+qTzAz+kfj/wA6Sfa50TeuTTuuy/eq3jOW/LOefzi54RU8+h +nbLvu6Tx/DPPoVPa7/rdssftu1Pa+NDPvQD9+jD/rnuvvRHv/Vn//NfP/drf/Vv v/dTv/g7//eX//hPP/mfP/aDP/ubf/q/P/rH//q7v/x3f/urv/3T//zjf/jD//77 P0BUqwZLYEGBBA0eTKhwIcKEDg1CLCiR4cOFAy9SxNgwY0eOHy2CjOgxZMmRIieS PGkyJcqDWmBoeUEQlqFYsVbhNLRllSFAgHBWM4SRJgqa1VAMNKoU1tKmTzGikDpV /+pRglSnEo3alBI3XLgoweFGKawfFH6sYk26VqlaqlaRan0qFSlWuLCi2eNX7x0x e/bq+dVrr98yuXXVXrVrdKlbqnWLFk16V1W1f5arbcsca1usP3eZap0cevRdxmmr OlWdOvFh0K9dx4Y9W3Zt2rdt58a9W3dv3r99Bwc+XHhx4seNJ0e+XHlz5s+dR4c+ XXp10C9gYMc4NGfPLYe4ALKZM9ZQ0QVHJxW49nFp9elTjl6vVSEKF125eZ3CxI+f SlJSgQuppiZbS0CnNiJqqfriYgsqhQhapp+/7HlHGcDeeYcfvfiJxqHI4roqKsga PKy0jdyCMME//tnmsss00/+smj9SOsoxBgmc6qiDEORRMaxGhEq9w1T8kD4ikRQw ySOVbJLJJ3dcMkonp4QyQSqvtNLIKrnMssstvQwTzDFrFLNMMos8U8002ZTSzDax RNNNOeNcc04764RTSzz31PNLPv/08807BaWzT0IRzVNKKl6AqbKaVOlpJ0NsMqSn 8mIBpJpHN2VMlaU+JSjUTTEatTL2HOzUQbpELRWpVFJhQiyv+OPU1hHZSpXT0W4V sdWmTG3MVVGXsccdYvhyp1hi3qkHsMKGbZCupB5FIVRrPXWVvV87BRbUaFVJBbMY Y6mmXFg+I/VXa7VVd1p14b321m27dfdUbLntNV5w+c3/t999/Q0Y4IH1LfhfgwVG mOCDGU644YUdjhjiiRWu+GGLJcaY4os5zrjjjT0OGeSRNS75Y5NFRpnkk1lO+WHs tBPIpkNi4eIQmnGOhebyjEwNxxDja+tdurKsqqUrY82PEk2mMLKi93xV70Opj27q 6faUqijCfph1VhlnLaQQMIawNnrAEN8LGiGis47rbK1nbBHGzDbbhkan3UZxbcXw JppAFOmVL++/8S686sPhTjxLxQ1nHPHFIW888sclr5zyyx3PfHLNLecc881B7zz0 z0UvnfTTPU99dNVNZx311WFvPfbXZa+ddtphkklUSzHNabxYVMEpli3AbYyuam2d /6pXVqd9zOJUpugKFzimaPjdU+HNKnnHpDJVaGqHLfavDcenkHzDCj7++LqC/XHf bXWst1dxyTXX3Jv+SD9FYEtdjNeohEUt/zHGaEZT2QFbtjKXLVCBDUQgAx/owARG kIITtCAELyhBDG5Qgx2sIAc/6MEMhtBgMIPBdgCxhZ2kcIUq3EIKVXGUc2llhjI8 TA0xgkOC6NB+cDkXNchyFh4O8YZF9KERaVhEVCwDFEx0YhOhyERmHJGKSayiDa+Y Q62waBsxqlu57qbFLO4QiVi04hnNmEYxonGNaiTjGHvIxjfKMY5urGMb8ThHOxIR jnykox/3WMY83lGPgwSkIf8FWUhFEpKRh1ykIxuZyEj2UZKQtGQlMUlJTf4xk5zc ZCA/ichQPrKTe8yOTCqTSlepslWsJJUrVXkrWL5ylfua5S1tmUtZ6rKWu/RlL4HZ Sl4K85fEDCYti4nMPyyTmc1kJi6TGctjStOY1UTmNGlpTWpeU5vZ5OY3txlOb4oT mtgsZzfPCc5xrjOd5BymOtvJzne6M5ryrGc88TlPe5pTn/m8Zz8B+k+B8nOg6Awo QRFq0ILC86AKTWg1THg71010dhS1nUUlWlGNXnSjGeXoRz0aUoyOtKMkBalJRVpS lZ50pSll6UtdGlOUzrSlNIWpTWW60dzNRIQgHOFPfRr/1J4OlYRAJapRiyrUpB5V qUh1alOhylSpLpWqT52qVasa1axeFYMRJeUoJ+lJsYJyrKIs61fPGlayrtWsbEWr W9XaVrm+da5xpetd7ZrXS4J1r2ntK1z/WtfA4nWwei2lYA9L2MQalq+LLexjHRvZ xk52rIxy1DWlmVnMblazneXsZz0bWtCOVrSlJe1pTZta1K5Wta1l7WtdG1vYzla2 taXtbW2bW9zuVre95e1vfRtc4A5XuMUl7nGNm1zkLrcyJvzHc10E3efKTbrVpe51 o4vd6WaXu9v1rnW7C97vale85SXvecOL3vGml73rda952wvf96pXvvWl733ji9/5 /+aXv/v1r337C+D/6lfABSbwgQOM4AEnmMELdrCBGwzhBytYwhWm8IUjjOEJc5d7 Hfbwh0EcYhGPmMQlNrFadmoZarxoxSpm8YtdHON/tHjGMK6xjGmcYxvrGMc79nGP gXxjIfN4yD8ucpCJnGQjKxnJS3Zyk6F8ZCkzecpPrnKUqZxlK2sZy1v2cpfBfGUx c3nMXy5zmMmcZjOrGc1rdnOb4XxmObN5zm+us4tRoAI975nPffbznwEdaEEPmtCF NvShEZ3oPqPAuZZx0aNfBGkXOVpuk6603CgN6Uxj+tKWlnSkL71pT4e606DWdKlF bWpOfzrVrUb1q1kNa1LHmv/Ws7b1qWuN61uvetej1vWveQ1sXweb2MM2tqqP7epc FxvZzVZ2r50ta2FHe9nJljaznz3tbGP72tauNrWhvW1vh7vb4NZ2ucVtbm5/O93t Rne386xoec+b3vW2970FjYJTvoDO/bazv+MM8DsPXOAF//fBA45wgivc4Al3+MIf 3nCIT1ziFWf4xSOOcYpr3OIZD3K8VZCCPYtczyQP+chRXvKUn1zlLWf5y00e85XL 3OU0h/nMcV7znN9c5z1nOaOzA4MND93CGTY60TVcdKQfXelNT/rTmQ71pU/d6VG3 OtWlXnWsX13rXc/617kO9q2PHcAgx/fZ0Z52tc8bBSn/fpGMMSPkuNN47m+3cd3j Dve7713vfZc73//ud7oDfvCCt7vh8x54xRd+8YdvfOIZH3nHSx7yk7d85TFvd8pr /vKczzzePR960I+e8J0nPeJFX/rPqz71qD/941sP+9dvfvamZ33tV+/62+9e972X Pe9/73vaA3/4hjf72pGffOWnHejYKfWnof986Uef+tO3fvWxf33tZ5/72/d+98H/ ffGHn/zjN3/50X9+9aef/et3f/vbTw1qEIQa1ai//Olvf/vPX//35//99y///E8A A7D/ChAA8c8AExAB/6//GnAAFfABD9ABCXABKTACK1ACLRACGTADPRADQbADQ/AC /0WwBEnwBDkQBScwBVlwBV0Q/7ZhxcDv+JavBm3wBgcNBSwLBjpu4zzOB7shF7qB HNTBGPDhB3swCTluCZGQCX3wCZWwCaVwyuyvxp5rxa5wurDQCrlwC71QC8EwC8Ww C8OQDMfwC8+wDNHQDNlwDd1QDeEwDeWwDeOQDufwDe+wDvHQDvlwD/1QDwFRIMgM 5GyuEHfOEH0OEXluERWxEQ/xERMREn/OuaqrGyzxEr3hEjUxE8XO68Iuu7ohEy9x EzqxFD+R7EwRFU/RE1WxFVnxFdVrC6drFmmxFm3xFnExF3VxF3mxF33xF4ExGIVx GImxGI3xGJERF6OLv2gQB/+d8RlrsO1i4gVkTAg18RovMRd+oRmcMAqFrBnWgRzI ARjEUR2O4QiH7BpzQRS8sR278R2n0B3jER6hkB47ThaTMR/1cR/5sR/9ERnx4R6a ZRneYRnqgSAHsiAPMkMW0iARsiEXMiEdkiEJciIlMiIh8iErEiM3UiMV0iMdsh7u YbpgocyaERpRMiXxrfmEbtM24RcqARu74Q5EYRNEgR2fy93YrdJkshvUgcZ2EtLk YR168hLJAR847Rp/QRTeLSjJzSmnTSpYTSqesirP7dGoIRWyElaqkgu6wEVwgAu2 QSzXzSrL8irNctzQci3Psi3V0i3V7dhKch9hpS7t8i7/8TIv9XIv+bIv/fIvATMw BXMwCbMw+/K57sEe/MEf/mExGdMxG3MxI/MxJRMyLbMyMZMyNXMyOfMyN9MzOzMz O/MvrlDcTlIlUTM1D03fGoXfdiwrf0ETcyEXtFL+VowayAEbrdEo8cHffiEXcOES cSEX4KAZ/C03d3M2ZzM4NdEYbiw3LxEO5K/IpsAPpkBcbsw6+2PItDMVYEw7bxM8 OY4qdUwq5HHGyJPFuPI2s3LHuEAGuIDGZOBF5tMy6jM+7TE/53E/6xEJsfAP8/C5 vPMfCbRADfRAi1Er/2EZ/IEa/AEfGvRBIxRCHZRCJbRCJzRDMXRDL7RDLfRDNdRD /0MURDkURKehHp6rJKOMECXRESPxRRmxRWUURl00RmlUz1hyv6AzFLsBGLqLKHnU EkUxFHNhE7gRvIY0SYdwC5uhGS4xFNhxC/FBHtRBHXhUHNdBHrArH6AzE3+BEqAU FUShGUThN0XxF6aLHEQxF0JBBr+rP7YzuqgBTlOBu+bUOgc0u6rTD6jBRfpjClpR Kr+LKmGxuwQVuqaTFtuTu7oAuhq1RR51GyI1Ul0xFQu1UlfRUmORHwcUQT31U0EV QQe0HhyzVE31VFE1VVV1VVm1VV11Vd+huphRNWm1Vg1NGmUi98bhGo1BxkQhFDbh GilhE+AASqez7oxhEyhBNv+HlRJQ4TZn7BLv4Fj/YUeLUh7iTjY34Q6M0zZvsxl2 kymrYUfXsf5srDr39EXQdTvj7k+t01xVTDyrQTtzT/Ho4h/uFSvwlSr2dSpehCpW TF8Dll8LD0j6lSotwzu/MCvpjgtizGG5ICzhU2L/AQdmzGH/YWLx0z4jNvg8tvg+ 1vaET2RDtl5B9mRJlvLwERk7NVRd9mVhlhgHlEHvwR9q9mZtNmdxdmd1tmd59md9 NmiBdmiFtmh/FkX/QUVL7zRttWlpNUezDx+stRv69NKoAUi74RfsoEmn000/Tf52 1RK5tTYv7RJxchvwQTZhcluNoRJ2sxlcBGu7wSanE/r/0vYSV2xHK8E4nw9Oq3PF UsFv61Ru5nRP/cA7Ie1PqzZd2Y8qt4EqBVVQHxcFWsRxHVdupNJyKTdyUSD6ONdF JLdFVlZAL40LSrdFyHIsH40sTVdSV9dFWrdiKy0VqEA7a7cQ3i934U93eXd3fVf8 RtcYWzZmibd4jXcWR5VolddomXd5nbd5oZdnYxVGto9pnfZ6U1IHG4UHnYwarhEX zLXF1EEIi3RaV8wYZPIXwvcyyMEa23THpLX+8GE34YBuvTUVgtUSj2FcrfEXzHfK 0DcIRYF/LXETvLPH1vU6A3dd/eDGoOdwxbPFIlhe74xgyfOCKXdgNfhgNzcp9rUu /y4DYYcMg9Ezg19EYWvsNrGzxTb2Yu2TPmG4GvDTYldsPqkhYt8TY1sMeqigOlmE P8+TyCw24xpYHnEgCf9TC4NwHIIzF8YBQP9heI93iqn4UxVUQqahH+6hH7J4i7uY i7UYjL04jL+4jMn4jMc4jcV4jc1YjduYjdGYjadXaamMRW/0jm00j2t0j2dUj/sY EXPUvuJhE9HURfLBSr2hSKNUbgL4EsHUTZ9LTQvYvcw2b6OzW7cwuqw0CNNWFCmh bt0La0lRkmcSC8MLT+GUTvtjcJ8rXQOXT7MLTqsWTpGOKkC3c/d1cqmLUCEXlzOX cnWZlylXuz43l7dLQb8Qcf+3a1IdtZkh9blM9x/IUpphF71o93AxNZstNrssFry6 OcJwILxYmbpwoJsr9pvXC50rNr3MucG22b2C9x+cuBumy4nneRyc2BalOBkbOBf7 ORn3uYoFOheT12e12KB/9qB3VqF1lqFv1qFtFqK3OKEpGqEtenotA7+sF3s5Ggdx lRrLrJEnWWotUZG79jLkoaQF2DZZbGqLUmypwRkcGSeJzEktURQ0cROgFcgG2RLb FDpxgabPtT+ogYGLml2jGE/lD11ZTF7pdeHM81/5VV/z1YOpGgU2WGBhDGFF2F8B 96QBV0EfFj5djIZld8VoGGPrM2PpE4d5LBV+uD/lWoj/X2SIi8ysw8yuaayBZayc Vaycr+yIL0OwcQwH4Iywjyye5Rmf65me5TkI9fkWX/mfgTGg+zmgafGfNbsWKXug PRsXZ/YeJlq0tZi0RXuLpQK1RTu1saIfsMK0Vzu1XZsqSHsqSru1Y1u2ZfsepKK0 R/u3fRtpS1LLNrqjjVv5cjTdYrM5obMSDJhaXWRXKwEYJvnUXPql2fFu55Ybf027 RSFsu6ESzLXWdvQOqtUSf+GAUW2Vt+GVAbVwB7caJtu9/YC7/0FxXSRddbLSLpct 39LSQne/yTas/TsuDXy/CxzBuc1i37kayjmcW+TB33kbHhzSHrzSIDzT4hvDKdzB /ykcLAeb1cIZwsESsEu8nC3cxCPcr+WmwUttLnHRnhd7uhg7smsRs32xs6drQHXc Fjf7uXQcxz/7s5M3jCfayI28t22btVEgyZuct59ci3ubt6EcyaEcBSZ6ypUcy6W8 ylGby488zJF8ese714r7uNGc+fZNzXZTpYdVK2XMSYvUprtBvVtsR4m1Eob1DrY1 FO4gfuW8Gz5ZyQL9Dnr6po1Mpi2REtgROgfdx9I1K6/T/iL9qBPYqf92xiiYzUTY GwGWgzvdyfAyiPVzro1Mr1nMsGXXMoaYsAXbrGG9yIr4xRhcdlsdrY8MsWns1gcb 131d1akB2IH9NfPQiYPzCv+XeA33Wce3E8j7uYGffTtTObOhnZadnbPvO9s1O9qb fci9XUBXbBnuQRoSc9zLndztwdylQhqmgt2xXCrSndzXHcrR/crVHQXq3d2hPN3h fd9TO97pPTH/3dwBvuDHfY6tzI79GI/5mOH/+OEdPuIDmcA6GROLNJO3KzeX0nst 0Tmvi5TN11trrJIrvs7fa5AzsdEvERiQMr1IOgh1+h94NObLa5WvcEDvdHBT2V2t /R/2dJatM5svdeg1NVONfsHUWcIjHLq62ZybProgfJ2/a5yhHsQp/Lmefrza+ZwB W3axHuurXnatXuzh+b7yWW66YRzYy7IDl3SzfceT2u3/gXy6KJvH6f7th9c79T6K 557vO1XIv914R5UwCH9CDL/w7UHJXXu2E58qGn8qEH+2m/zx4Z3xe5vyUYAwKp/w 3SLyPd/wY7WLyi7NSf8GP9pk325qjXR9MePQ1ZFax3UUB+/OYZrj0Xun3067Nx4f wLsbuDHGDjkbn9v+XnJaMy/S3+6oiziCL+OBFRbTtXNdURb1qT/2pt/6Uzb7qx/3 sH/7ic/u8FrVHRzXWX3GxF/V7RrVE4+vwX+wyx+txV/uhj39zR8z0L+ue939VQ+s UziFIRtaAYLaP4EEB/5L9S+hwoX//DT04wdhw1QOHSa0mFDiwYUWNSKESJFhxYYk /w9CHHmRocqVLFu6fAkzpsyZLlMJXGbP3j1pOe/l1MlTpz0URKURRZGzaE+iOpn6 XEr0nlOeR6sOPQo06k+pSH1GDfoUaM+f9QTC+lcNrcG0bA2iUAE3rty5dOvavYs3 r969fPv6/TsXxQsYg/9tM4z4sOLEiNV1e/xYFLXFix/n+lUJM2RRifORg7xpMuPD 4yILjAe5Gzl8jPGhhmyHGkFgqVWTU0fuM+RKm2wKPFyQcmKQwqn5mZJqW6opERkb hygQ4hTRzKWfnC48++jt2rtz/+49PPjx4suTP28+Pfr14XFQxgEfh2H38xXHXxw/ MX3KyUfvr4+YfNoJGOB9//8QiCB8+sGH33i/GQQcYrmMM+GE21CI2IO/acQSQhx2 tFFGHCmEUYgYoaSShxtJVKJHKZlIU4wyzkhjjQhRU89P/Qi1Y047+tTPUUEStSOR QjF1FZBD2TPkVT5e1SNTRDLVZJFJMkkljzpqac87hlWT3luAjUlmmWaeiSZeKFDx ghYwCJQWnGvNCWc8uUCGi2R0/rNON7lsIkozqTRzZy65CJTanamRMxA+tfnZzTH/ GAOZouT8Qk6hj/0CRzMFVdNMJZXWdhkcovjGZze/qBOnWnJGF1Kr1TxXEUR7RuQH NdVQlOtAIJ3E66d7yjpssa+6iiyxxyqbrLHNLusss9L/RksttHDiYC2y8mU7LbfV Pgtut+Ea5JC3csonbrrfqisbQdsU5C68A71rULwhigQSibY+hCK/Jf0r4okX7Tvi iwNXxCuJL5ZYY8MOPxyjTf/gFJQ9FV+cFFIZZ4xVVUhdfBRVViFpFFJInhzyVUEh afFPGOckzTtmjSunmCqkEBfOcOl8c84+7/xzz0APLXTRPB8dNNJEK2100k4v/XTT UE8ttGCEwaDQNvQkdBjXWSu0jjeQjcNZ14jh89k4oQn0j6NiN4N2oRT6SeEvnMU9 d4W/TDPQL4o+6ucmayPmdSrAUOI3ZpvYIYpkD/6Dmje5oNK1OpZ7jTnhmpvN+deZ /3f+ueebZ23ggaCPHnp+oSck3+oHtr6NgqdzDrvos9tue+2fy/767K23vnnp9Lnu O/G4G4886sp33V/ysTt//PLR3x4chNZrmGH2wHEIcffefw9++OAjtE2O/PyE/vno 56T++u2nvz778dvz/k/1yx///fTPrz8/XurqPJulaYAELKAByYQCN2nhBexyVZ8q pac4PXBskoqTbioxkGY0boMc9NQ/moEKDm5QNgOhRuMosQkUovAOpyKhtajRDEEJ ql3CopSfJFMNdcBJhzTrYQN/SCccxEmI69rTtg5kLCJaS0ECgY+5hIgtHxaxic5y IloU1C0lukqJRETXFKVoLv8wihGIYSTjGKMlG3pNxl5rnBcb1agc8clxjnSs4xwl hpOcRMMeOdqjHvloDz8GEpCC3GMff2LIQf7xkItU5CAZ+UhHJrKQhERkJfk4mbOE UYAH7KQnP1lAqxUmLcIhJWPS4pjUhIIxgAvNP+QRD910Axj4kJe8zGZLtUSIhu1C jCkX80uFBPMwaQHGJjpFDVZZTh7bUAcxtzNMXZ4SmtQsZTUDJM3YETM+AuLmNAl0 mG7apxrefGaD5IPO+aQFnGpJ5zYZ9LpuwpOc9gmngbhpTW26B4r2gQ8p6ePFemaT PuSEpz0TJM75GNSX1wRmQxmaz2lG1KEThahEL0pRjFr/dDGarJdHcwnSgXDPjiQt qUlPqpAb5QiQOVkpS1/q0piSZaYtpSlMbSrTmur0pjvN6Uv/B8CKboOToCyqUY+a FxQQZoFlzBTg7pQbTM3qDpu4QyioegfZZKo0lQKGsMr4RTMqi4TA+Ic64tEMs4Z1 rWCFVn6oSA0urrOdyYriEOeKV7sOC1tQjGtej3XEbWnxiOS8FlyR6NeBdHFc6Uzn qxZbWG0ZMYh4NQhhkRhZsbL1jG3lrGfZlcY1vmtW7yqtrkS7RtKKdqQoba1rX9sw m1QDJzjJUW3tcdvcAlK3tt2tb3sLXNz+VrjB5S1xj2vc5MpsG2dRl82YBt2oRZdq /9OVmnWri13pape6263aYAqTvG6I7THjFS9kxCaKXXoUHxpsBqDeKxroyVd68+Wc OszaTPxOb7/15a/yfhdObD5vPpkDXoAHPGADiw7ASEyw57gJUMIND4msY13XInxg 3QWvwqZjXX4cjLkJX/jCH+6dQhREYArTd8W366+LWezfFsPYa1/9rEhTgeMc63jH PO6xj38M5CALechELrKRj4zkJP8YLV2yKfpc+uT5QdnJVN5plOM3ZStXmafzCiBS vwzmMCcQBgtsC7HaIhtAWXXNVRXFmkOBQ7WcuV40bBaa5WznPM95z3O6s5nXwiq0 8PDPcvIzngut5z4nGtF3vf9iXtkSRS9edq5UpDRmtegQNEPWrlick6QdTVdIN/rT 5IR0pdEisbYI9q+gXvWhiVjqS5tazlqMtasNjetF45nPjFY0r3ft62D3etjAJjah 0RJa0yobtctuNrOf7exoQ3va0q42ta9t7Wxje9va7ja3v71s3NZjGe94x7jfsYxz m5vc6Sb3utGt7nO3u9zyjje77Q1vd9db3/fmd77p3W+A14MZpW2uroka5oQrfICi xJp6COLCiFdPPRRnj8UrrhjLOfPiHMc4eAykTYXKbj//wQ/vDkpyAfWnQSwHUMsz DM8PgzyeGG6wiR3ynpyLPKHs7CfJfS7PlP9c5B4vesf/j270pG/njUx3o9PbCHU4 Nj3qU5f6061O9atXfeta73rWv471sHMd7GMXu9fNTvazl33tam/718GEHoQvfO50 98ua2vQmG3dWs3vfLN/1Dvi/N7rv3Ep1tWrt97VmOvGEDzzjHd94wT8+TtSAxbtC q1rMr1Hzl0/t5j3f+dF+XvShP23pMw/6dpFe9aZnPepXz3nXj771sa996m0P+9vr Pve8p/3ufd/71wN/+MIv/uyNf/rjK7/zJHRud7PL3ehf9/nUlz70p2/9nzU8xtx/ sYy/3/0Zix/83g8/+VVH/vFzn0Dlb7/63Z/++Jt//vCn//thvA3Tzmr/nue/6P1/ /1oAyH+qNYD913oF+H8HGIAGSIALmIANKIAOuIAQqIARaIEViIEUqIEMyIEP2IET +IEICIIeSIIjaIIiiIISmIIRGGNyV3cvCIN0MWZlNnk1GHk2CHk5KHk3yIM6iIM7 6IM9CIRD+INFKIRGGIRJSIRHyIRKiIRL6ITH4oIxSIUvuH3RhIUPZU4atYUZ5YUb BYZdGIbZNIZZKFRkKIZpiIZraIZcyIZa+IZn2IZfqIZzWIZwaId1iId7KId86IZ5 GId/6Id0GIiECIiHOIh32IeLKIiMaIiJqIeOqIiNSImPKImRWImTSIdTWIWdqHBK 1SYv0IRQSIpPaIqjeIpRqP+KpYiKrbiKqciKr+iKsUiLsGiLs3iLr/hc1Yd9vXh9 v8iLwJh9wyg121d/x3h/8oeMypiM9seMz+iM0biM0tiM02iN1YiN0HiN2piN1MiN 3+iN4biN4tiN4+h9nOiJ6YhUM8hAh1Zs73hs8eiO8phrv0aPunaP9jiP+1iPwgaP /IiPAKmP/WhsAumP+XiQBlmQBPmPDImQCxmQDqmQDRmRFTmQFpmQEqmRGAmRF+mR GcmRFPmRHQmSIymSJYmSJKmSJ7mSD/kP6KiOMflJ26d0NYl0N2mTOYmTO6mTPcmT P+mTQQmUQymURUmUR2mUSYmUS6mUTcmUT9mUMCmTUxn/SmziJriIlbKolbWYlVy5 lbnolWEJlmPZlWT5lWWJlmeplmK5i8QojL4YjHHplnIJl0NjjBlCDaoAC3rJl3vp l30JmH8pmIFJmINpmIWJmIepmInJmIvpmI0JmXtJQuZYjjAmG6lgmJgZmJopmJzZ l57pl6Cpl6IJC6RpmpmJmpuZmp25mp/ZmqH5mqP5lyQEjpRZm5V5m7lJjrppm7vp m70JnMkolVRJnGfCjq1SeZMBJso5L8u5DXHynKUFnc45ndLZnNapnNgZncyZndy5 nc95nd5JneEJnt1Znt9ZneKpneNpnulZnqpQY2LZhMnJUG3xTPYJbPcpTX+mn6bE /5/5CaD/KaB41p/1uZ8EGqAIOqD4OaD0KZ9raZYPKqERSqFpOaGuOJzFqaGAcYWG 0XzA9mchCqIjKqIlSqInaqIpiqIrqqItuqKygYiXWIiaGIa0mYmYaIk3OqM4SqM8 6qM7WkIyGqM6OqQ5aqQ9CqRFiqRK+qNMmqSQ+KRCCqVOSqVTqoUZuqFZuhegyFRq kRzUKZ1h2p5iip5kCqZjiqZlmqZnqqZtyqZvaqZxuqZyGp0IMVaFoAp4qqd5yqd7 6qd9Cqh/KqiBSqiD2lFp8aW7Bp5mtqhy1qhs8ahoEalgEqKTaqmViqmKmqmMuqmO 2qmQ+qmSWqk3AqEWWqGliv+qF5qqp6qq09KWdQmrbymrdDmrcxl9d8lcW+ifFrWr usqrv+qrwXqgwtqrw2qsxYqswHqsyoqsZ6E5s2J5lBqd0kqt02qt1Yqt16qt2Uqt eZk1lgeV4eqU43px4BqcvImbv5mu56qu6Oqu7Qqv7OplWkqvaHKcXmqd0sqc+rqo 6Cmq+eqv/AqqADueAvuv+xqwCVuwCkuwDYuwCwuxpWWnrpKXEbh6DXixqYexCpix HVt5HTWxLiqyLEqyI2uyJYuyJ6uyeDaxLTmRLgmzLyuzG2mSMUuzKcmSOWuzIbmz NTuzPPuzPnuzLsuQWFqvRysXNGkYsLCyTZuyT+u0UQv/tVALrouhCnS6nKlQCFjL tXPqte9StVUbpURqpVJqtmR7trkqrmtLrm3Ltm/rtnELt3OblEaLtEh7d1eJr3D6 tXzrpl37t30LuH5LuINruNnZsmihl6TFtA4IC4XgB5DLuAjYuP5XuaZ3uZPruAVY DYWwt80pqqBLqaJ7nqBKutMZug97uquruq3br6g7uq5rurKbuq/LuraLsKTaqqzK u6bqu6vqLV50LuOyeL/LLOUCRoiHiq9aq7FKq89rq85rq7gKrgt6oAyqoNmLvdt7 vd27q9z7vd5roOFLvuNrvgVKTM5qNskhWtVKDanwB3mptWEqsNaanfWLv2Wqr+pb /71le0paQAVoK8BH2qT+uxi6ohizgobmuq4N/K7y6sDxGsHAiWKvszshhmC2IxG0 A08XnGK82TwfbHNew34ObLd3W6/3KhDsG7jbcAmeMAedMAeeILg13MKFa8M4fMOH u8OTobsDAZ8WSw2QC6N56gcbWw1/UAinJbka68QeS4CkaqeTSgUwwCZVHLqcqqhW rMVtEbl/gBaFoMSRG6qj28WeqqlpfMamu8ZZjMZtAQtbQAWnRQV/EK0sC7x5vLvG 27uv6E+KdVmH1SqBjCzIO3jKi1hOWLyJnFlroVcYisKRvKXfhTWkxLQs6gnVUA3O 8AyXAEBSC8pT2xZikAakTP/KPjAGYiAGXDAGoezKl7wYqUBaZwq/k1kNqjC/7SnG 0anEOqzDeakYsGysVkyswIrFwgrGhwHGYJysxezMy/rMzQzN06zJVfAHVVAN1ozN uiq2BZy2S2rA4PzN3jzA4lzO5EzAbLhP+rROIydzsdPOBEJKK3dF71FQ7rzO8bRz 7cQ7u0IFx+EH/+y5itEf/8Ry90Rz5rQcAQ3Q5NOjJyzJG8qlori3XDsH+cDJztAJ V5vDPOzLHi0GbOOp28AFafTRHT2niXvLmasrj5srzjoQt9zE1VC5fhC/NP0HfzAr Od3EkMvTsMDTTGzTOh2Aleu5iFq6oEsNWDwZVrzUafH/AlU8x895xVgT1Vb8AknN nTq9xEk91A2h0wMR1M/p02nx1dQw1p171mld1kqt1W+NuuLp1rNCBXL8B3Mc13HE x3utx328x6rYWEgUWJgl2IUtyCQxyJ6WyOk0V4P9aYS8K1OgBczBzOTiaRCWWXyV 2a+y0FNQx2vFvNArvaPdvKUt2kpDveDrS56QD5ucD53wyeKLvgmq2rNtveErBiuh GGJgcOVr29or27umvimlre970yuBy1tLrfArxsy9K3/wnPC7DX8gy9Nd3dTdudCd 3cXNvxVFBVRASt8NwNJEBVqwDcdsGONdDePthf1B3UoMTO5tGIWwKwS9DfSNGMmc /03Jgd/3rRzExN/pXKUJvAXXDHcUxcAPPMELruANLsEObo0Yhk4jBjsTjk74lDUb bGGk02GmU+Edvk9cc+Ea/M8awTy0Q8I0F9gcRjgL7dD1BdERXZz3itRfe9EZ7QlX i8MooMMo4NGl5eNeiwqgcArTwAWwsAqGEAuqoMnRiS0n3cNRHrJALIGQKzG6/cUE qMRMrNNbnsRLvMtDDN1ivg1fLMZdfYBSrMZowSbgycWSasVx/g9XDd7/wMXb8OZs jN9mvOfTHcZmPd1nDsZkHMbMTNZKPOjgucyQK8b/0MtuzMZvLOmRzsZLfddyHNuj q9JBi7M92+mcTrRAO7Q6C//qpD7qnu6y6BJphM3Yhd3qiGbIhE1Fj01XtH5qVmRm 8Atsi2dppVZrUNRoaKa1pR7jMk6VSstcbGy71ZDJm1wNsG3Gr1sVL7nsy87jWUwU kkoU0V4NPH7t3C6qzAA398AMW0DTX5N/1RDS4LntaPHt1a7s8Z7Fy97NB0Gm7/sR f+AQmImZJoGeuwwm2A3wu7zlgT4ZWx7mbQrMSyvNxMzmAZwW3x3xdf7dxHzM6O2f Bc1QlX3facHMW9vfutToygzypETfW4tqHQ9RI0/NzOryxJTNBq7NcOef9S63N0+3 OY/zO39xJZfP+lRP6zx09s0YCOJyP4/0Iaf0Nlce9Lz/9O7k6gJGlMVu7DKZt3mH 1HwrwzCM0c9ACls/BwjcnTwunSgguD4Optv+LkQRp2gvp6hADOlgDPcwDcuQCoBg CEm+5EteDSWtnGwPJm6P0lEOJiq9uJnEf6pgEp5bmnvZEAho06eV02V+05Hf00c8 xEfs5Yg/gUdt73kdJ0yN51NdDW1e+lkd+lZd51Ed12GtnF3duczpB2R98A0BnrMf J67v57hv+2Bc+7zP+2gN+nNN/HJt/O9y13S8BYqfu37t/Hz919H/eJel6n/MTbN+ RX8sJ4scz5YVH0PE2N/P6vrcQLEuvF3ERFD0Vj74XNZsCO+tCjn9B++f0/T/B/EP /7+GIBemHb38T9qnDRAqVKB4AaPgP4TbYFXbVu0fQ4cQ/1Hz5OxfvmrOnmnsRI1a w4cNUUhkiMLkyIcnIaocuQ1FyGojZcZ0eDIlTZAkQfIp9usdvInLVMVyuA2mGFgh X6IQWdJkU5c3YU7VGTHn1WpJ/xlFmGrbx48Qt6X6V0gV2YXUHKYSy5Baqj8Nt/0p 9JHuH7Zz8+JlyFfvXbliqWlVaLTow62IqVApSgVG4mqLHWvZJpnKQy2XI2uG/O8u 3IdwCx2u5tXz1tGeC/1BjdcoXtYOP78WLXt1a9OkOxvejZj3b9/BD6s1nFX4Vlhc EydEuNy5cujNozOn/lz69f/q061nx77du3bw3cNzJ/9d/Pny482nR7/evXr47eOn J7sex/z38rviV45DP/v0UBBIIFUMoaIKGKgYcMEFFaziQLMYlHBCCiu08EIMM9Rw Qw4XREELGLR4wSFq/vEqrK/kQjGVTjRyxhlSkJlDFVVSdMslG79qiRqZwkKBxxuZ YipIHIVUsUgcUVSyoWI0KYYYj/yx55Q/ADEklqFqxIE4IH9EsqQkWxryq1Sm8GMK LcyM60Y2c/yIrBJJVEUtOr+q5q1/zlKlueb8sBOsO/8UtE5CAy0UUETthNNEqrBq 1CpIH5W0qkkdpfRSS0HyM1JMOc3UU1ArDZUsEhGLcyL/U1MtdVVUWT31VVVblRVW V2OldVZbc611V1x5vfVXXXsVFlhfgyV2WGOTLXZZZJkF1o9m//HPWWWjhZZaEnHA NlpYBRxQlQ4XrOKPcMs191x0052QIIMeK2qhwAITg6FYYjHEE1KeQSaZJ+qVK4bA WhJrTCFPMnKlMVcCEyeDaRI4XrGmaVKUVPahpx97lkmFKLliQUquIWcyWGSH2yrT Dyr8KARilttaKDGj2FqSoULyhKU+Pv+Y2c0j29z55yOpqRG5iI4rmrejEUu6aN2W Vrozp6M2emrbYqMa6quRzvrpprfOyiiwgwv7sLFh7q3ssIFD22yyz3Zb7bfFjrtt /7jrlttuuu/WO2++zcbb770B7zvtwAkfnG3BEzdcccQXd7xxyNeWfG7GJ//7ccu9 FSiVKlR4cAsYJFzswc4HpAJcC0tfjEFyVYCh9AFhF2iL2BWMfYtCbDe9ENoZPNBA 33V3vZBxhe8dht4tpAJ4BqvY4g/h1zVIxFNlHrSaHmJZKJZGuMgjxicMYUT7bWLB QZVAR0L0xzt/9JJO9j+SSVD12Rcy/ZhcMnR/QKcJRYpiuKMe0MAYlQyRpVhwwSPt U8v9mFKn+c2PUCf7A/+ulyhStUoVacnKnbJiFj1tMBWw2KAWPMhBFJ5QhWpJIQtX 2EEXqqVma+nZRGo4MxuyKf+HNtphWHoIEhwG8YZD1KEQi0hEHhoxiUj0oRAXta1j RbFaUoTiFK1YRSxy64pazCIVufhFL4Zxi2Ls4hjNWMaaDCgF4NrgYKiQAoH8IXSp 8AjqPLeFcalRj55DHSx0B0ehpQAuKoDj5koHR7jAsUCFVEFdUrEFRqrgLbBoHSFV 8AdKtq6QflRjFfbEOYGkgArUgCQpLRlKPY5SZ7RjpM4SucdTsusgCYEXpBoihliU r3z2ykMeDnEIXTIkBsRZmFJA9g+CRUVhyoRKRGbSlGfaUifUWAYxluEOi/XjHsso hL88lpySKGUmN8FRTSAWGq9UJTAwCQxhmpNOnvmsZ/H/pCfQ5HnPrxAmOccBjm76 2Rt/8lOgASUoQA36T4QO9KAKTWhBEbpPAOUnovz5j0QtStGJVhSjF9VoRzP6UY6C dKMj9WhITUpSkYpHcypQBRX+QCNyeQQhtKNGXQ60z8rYcUKMIVAlBeKQKqRCp5KU HSZVwNMFUQN6zQNXFbbBoGrkTkKq8KnnYCE7FRiChC29kCl1xiBKRm9dIBJR0U5U jTbdoF7VqBf3uGCIK+WyrTeoEYoMBiQdOeWBMXnKXh+YJLSW02BIUovPAvsR/1lT gASc0h8OGAsrcGlHT+GRSXxUWC+55bAq2qxmDZtBOS1EtB0cbWlJe1rTpha1q1Wt /2oXRSogOsqHEpltbCNVWxLJVre33e1UcJtD3/aWtsK1bXB5e1zjMopVRTsVc7km K+cyDbqxiu7Tmktd7C43u9PVbne5+93reje84H3ueM1bXvRK97zqTa9121td+G53 ve5lb33pe9/4ive98t2vfu2bX1SttKmjpGNzqCEQlwqtRAgh11IpdDoFcdJ0QnVs VVWRPIFQAwaGSAWD2PJIBtVUqb4TmoXFquGpUkOsvuOqJ4VHx0FaSJaPAVstISaG RtTrFnK1lzd3Ocy2tEzIQSbykI1c5Ig96ZrZzFg3YwEIFCH5yFOWsssIx5bWslbL Webylrc8NIV0TcxYG7PWyv/8XDOTWc1pZjOa3SzdNsP5zU+Ls9JwCjjC5RnPe9Zz n/n8Zz8HGtCDFnShCX1oQyca0YtWdKMZ/WhHRxrSk5Z0pRG90lQoiDV8+ofu9sQn anRuqCTuaYirIDRDmNrDMA0x8ZiKyVRLyBChXhBVm3dVCRkVQyo+ajUYdBasrosK LwBR9VYY5i3AtRHjGx8sYtHsZzdCDFxA30daGOYYYhuG2k4LtwN1bXAfeyGJvWY9 lOEPaqAiBluIbLiz7e5tw7vbHMxgnGhEwmpsUN/43re+801CgKOv3/wOOMH7/e+D DxwWNUUMPO1Zz3k+XOIRpzg+J27xikMc4xvXuFyeCMb/M4IcjSInORlLHnKTpxzl Kx+5ylvO8pO/nFeaWyOC+cTVQn6awbarJCMLOcotMCZ0oaSCH7fgmVOqAJSnrMJE ULk5VSQokgfeAiz0mKBRKmiTf8zw0E/JYVj6XOls7DAjYyz2p89YOjYOMhfEcAMu 3ODtXIhB3Olud/RVmcp713vf4yUxxfqjH/+YhkcGw3fE+91l1UlFKgrheFU83iyS jzzkKX95y2d+8pqv/OY933nQPx6T+27oQh3KUNSfXvWmZ33pXZ/61vOz4AOn/ext X3vc3173uef97n3fe+D/XvjBJ/7wjV985B9f+cln/vKd33zoP//53xGwgqiQwWAv /5jWBLpQIRbu4G8d1da1Dvb4FzTrEccu0yxl0AHTP6A/YPiormZqhq4vNKwaIthj DdGIUOWVefu2O1GwOSlAAlQwaxPABFxAbGvAAGTAB3RABZRACKyGxLIHe+iHaUCF CuxACvzACAxBAfw4oTkiE1yiE2wiJrItFGxBFUxBFnxBF4xBGswtGLTBGcRBGdzB GvwhHexBJeLBHxxCHyzCIATCFSTCI1TCJDTCJlxCJ7zBKMzBKRTCKkRCKYRCLXxC LszCLqTCLfTCG1y4XBGwBfkD6KkqAnke23GpFVMXOIxDOTQXtXsXwWCZKJunOwyy PGyTPYyXPsyRPxxEPZQLif/BQFAgBFHwCDxsRD50RECERIh4mbDZE+m6xOfCRE3M RE7cRE/sRFD8RFEMRVIcRVMsRVQ8RVVMRVZcRVdsRVh8RVmMRVqcRVusRVy8RV3M RV7cRV/kRLKoG0xTnchbMU/SqdMxnaNaxs6xPmZcRmdsRmj0nGl0kGqkRme0xmzE xmmUxmi8Rm98xm0MR23sxmkcEBSYnhcwti5rRy9zR3h8R3nMsmlYhj7gAzvoAyyb R36MR9dSlTnJuIvruIEsSIE8SI4zyIRESIJkSIVsyIWMSIicyIesSIe8SIm0yIzE SIrkSI3syI0MSZAcyY8sSY+MOPQRFpqLOkJyDOH5uQT/ebo8QjCqqsmXukmbzEmc 3Emd7Eme/EmfDEqgHEqhLEqixMlCUjtaoheWyaUgc8p4gUqxkMqOaUqrfMqrjMqs nErO8oiFw0qw1Mqw5Mqx7Bh3Qog9eb3VU8vYW0vYY0u4fEu5dEu6bEu7jMu6xMu7 nMu9zEu+1EvA/EvB9EvC7EvDDMzCRMzDHMzFLKi0VCny+zVr47Cv2L7YsSNpzExx 5EbNLMfO5MzN/EzRDM3N/EbPfEaBGM3TFJ4P6T+z6kfY9MfYnE3ZrE3anE3QmoiU 3EN2wi0e4k3grKHg1KHh/E3hPE7iRE7jTE7mXE7n9E3oxIrnlM7otKXq7E3qzE7r /9RO7NxO7+xO8CzO6xRP7iTP7zTP8FTO8VTP8mTP83TP9GzO9ZTP9qTP97TP+JzO +9TP/JxP/pzE86q+M5wTMvyHhfMI1pG/OVxQdXFGDXHQc1G7GksOoqDQr6nQ8rlQ DbVQDs3QDsVQEN1QDx3REP1QES1REj1RFTVRFk3RFkVREL0zo7DEXqzRX7xRG81R HN1RHe1RHv1RHw1SIB1SIS1SIj1SIwVGPlspNDSds2g81niLxzO/S1LDBjGECsOq 58FSAxkXqtK/BqkCLq1SLq2wLjXTLPWdmyzT/XOpmzmLsKoQLxWqEfoD2EFDLOUq GRu2Yms47cmKP3U20QpUQv8dVEMF1EMVVERdVEVt1EJl1Ed11ESNVEqdVEuF1EuV VExd1Hp7iIAUSZMUSXAiyZME1VIlVVM1VbA41VDtuFFtVVhlVVkNyUBJVVS91Vi1 1VzF1VnlVbdIyVuhuTyCo8soEZlClTr6Oq57uktCywXJOQaLI4eQKqbbk86BAWN1 qWQTGhXYghKJP51RqkiqAtl4kDnRpDgiodVZjA06pE4SmnU9HXElkGhFu1gqiFlC DqKQKw3lVwv11wwF2H1NUYFlK4I92BAtWIVF2H5l2H912ICF2IFN2LPMEzqbM6k5 Mznb2Ivd2JxYM4z1mo4d2YwFWY4t2TpD2ZDVWJIFiZT/FVmVPVmq2YaXZdmYJVmY zVmb1VmQva6aNVmc3VmhBdqbLVqe/VmkXVmiPVqlTbPHzI6V8qQB0QpO47Q2XDo5 LZEKmQhP+4dY+7UOmx0TEZewLRHYkQ2w+gfY2RM7mjUr3RMLQ7pcyzebOzAMac2y +r9N1VS+rdS99du+zVTAHVzBLdy/Ndy+JUH08VXGnbhVBVXGaNxeVUhCmIbJvVxd xVyeeVzJzVzP7Vw36SzQ3VXS1dzS/dzT1TgyrJWVckOBqIsteJ4Fs1N5TZ5Rm5A7 eUO1aJA8mRBVgJ2jGyrbIQvduYyhYg3hyd1mtVJ6TZ6j+9pcQ7qms9sLqUPk2J4/ /61QtsreDqqX7ele7sXe7xVftgLf8d3e8/Xe8iVf7VXf9g1f9F3f+H3f9IVf9zVf +b1f9u1eSkwMGkXSHUWrXOQdtUhSJCUEQkgKAC7Fj11gWWxgA45gB+4vCa7gCb5g C+7RYLyblWKpNvw14dEd3MGQUfqHreU1BCuR6JFa0xnbCUmK5Gk6X6s1tV0QsniQ 3bUQrvWcHK6QO3mQHa5edawe7YkFOtWTI05iJF5iJW5iJn5iJ45iKJ5iKa5iKn5i P0iFLN5iP9hiLdbiLv5iLvbiMaajIu7UfFNIVfCDP/CT1H24V/XIuKA2061jiyOE aiAEh7PjhuTcgvQFZhjdef+K44ysBrcjZEHmONxJNkaeNT4Oi1pNZEl+40euZNSd XGCNFZrznD+w12fVIzS016lTMXtF0K9z4ZxLnhRoOlWw15rROoFwOlQiC69bI7Vl DXIR5WbVNLlNulb6h6CTZV0eCHx9DFryXqqtWmVeZmZuZmd+ZmiOZmmGZpyZZmre GO2p2MeUWbjACygthC6eArYI2qUVWoZoWq6pmW3wVqMd2qSV2TEjBKMghFN5Z3JG WgFu539Ih3FohntG543N53KGjG0QgzEwaEy0Z302M0NAiIjwg5pS6JxNCol2Z4D+ Z3ge6IrW6Ite6I5m2ozmjad9jg4OqjakkWQVl295Q3H/0VoKkeUWRmHxk52mC9vU nNoajqPepeHkKeESZl74M1BJ6mUKYQ1YeAyZrhC89b+1OGNrfmqojmqpnmo+gRaq ZmY/cGrmWlyJs2o6QThYmAIuccgdOcnkqMgKerYurTpbHRNKvhNCyIIsIIQyeAV8 IIRXsGQbyawcQeSLEwdfQAdqwAdKPuue8YdlWAZlSGx/oJnYnRNDFgNDOAS3e+uG PDpYyGw/eoi6eOSxvmTQnmS9tmzSxsjVda8O9uDUJFAUo4LnyWzrA2qoSuqkmmEa Lt7j7d3YHt5OiyNTtuHeFtuY+geve7A88ekLMV5ypV4ZK2aYyeysSOarnm7qrm5p /65m6zYR0ZLRPPmUqdCCMG48lQlnscYKg5GUIZmK9O6Uhyhg9q6K0eAefzEKQ+CC SGkY716mUHnv/M4JBJ4IbaAGRVAESKCGBAaJkenv/c6Ul6iKwAIVMQiDt5s7uYuB TfCFdPCFePAFqhisBf/w9vaUZeAHaSBxfngHtcClWNgCVXC7oVgFMRAD4jAJhFFw Ublxkmjo5oAFPwBvLSAmmDhvkkCJIQ+V35IIGk+JBrfxIV9ySBEYgcFxJs9vIo8m KQdx/sbyKddyLr/yStngPEttxxqQULO1TUMIux1zEnbpCQnioLY6AsGq6dWT306K m3GI290T/cMLpVKQidi/Bf85ugMzCkCPnYco1kJHRz7FVj91NuzObkiPdOqGlgXj NOXgk0vvjqrWag26OGrQAhtSiw0yBHFmRCKRn3ji68tiyBq5JzTwgRgXA1jnAror Omm7dRxjBIUwBDbJLFWnuL9KVVmP8VefNjHAATGIgT9YBAFXhDJwdmh/hSxY9dDG qyUxbHnqAV43MAMVhcAmBnFABV9ohr3e1VZ3k2WQBmmIBnW3B1A4hRioBkOI3bey l2OnER35K8sabbnAbFiAK4DXgro6En3vOLfuGVNPdYIpa4mkcZ4JdtFuk2Sqdn6n eF3NZFbZ5KOqJNf2COxmJdQZ5gwjZVgy5VF+IwjzOVb/PirkodaacR6yaCmxI4v4 i13TcWldNt6hrmVYeozfNfmwEwil1NdsrtrGe3RJT3qlV2akp25szuzqsEQFZw06 wrc/iAWx5hQiVyaV4HqHPwmRSHIHxxRcqtrywaMxaIS0T/tDUPtt4HWrWHK5fwq+ MombgPIsb5Syt/R/sJdXqIUBf/bAhwRFyAI6CqcmFxNk4npzqntzanAPp4p8thSk 0PGtsBdf+Il02IR0EId0iBNmqomud3xksnuxx4oHn4plEDzWv4d+kAYuOHtqq5dp M/XFXwqvV3zEH30TOROUOZO8+HDLf4h8i4Uf13pnKhmZAHvS1wkFZvDbX3zSFxIl /4/y3XcmGmcJ0Yd85i99J+99M0kZcc5yvEcJm6AJ6bf+kxH/LN5yL897+Hf/+I+U kYaO1GapO1VmXsMLDTk1E35pgKBGRQXBgqr+/VGxRVXBglX+pWpYpSCsfxOpHFQ1 sOHBLQ0LVvvn8ePHP/9gqaCGkGTJfwJdbmRZEIUWGFpehFSZKhasWKn+AXU5ZehQ lUGPIk2qdCnTpk6fQo2q1I/UqkD98PTp8l9OVdW2Udv2NexYsWC3afnnp1oqVar+ qPKjyizZbSjooqiGguzevHvF9h2bF+zgumFhnS07VkysRiH/bWMUKxajGFS4jMFx A8YWHIfGxDKEV/DXu6Xtnv+9qzp14lRT/LyeoqVQ4trUxMByDDQyT0NbXpVRlCUL jSxfFH3JUoiaYBTO/fKl5pzwab2G/Zr+a52u2bmKa9/4Z4hL2MlbfC2zhwvdu3q+ mKeevn0+9b93pX8/bFvssmnSpNkTzX/RwPCPKlyoEsuBW8CCWHTQQQcYfvVFZ9Yf WsSWSn7cjeXHFic12GA1qmDIIWqnORfWaijuNxZ8ho0WWGD1ZVchaSdqdyJq9+1o 1mowfvUHbLBp2GKLM/7Y43Y8juUabLMZCWSUJkpZJZVXbpjllFoCCYtKOXG1FQos YWRQUhoRlMpEMpFUjUAyMcfSQ9SogOZHHzLE0k8bUaH/UkINmRQToCuxqYJJE5n0 J5uJUuFSoTO9AEOkYW4jIk9HDUVFKrBNYZRVnwZlEqhH/TSqqRBB9RwKVaUCSzU8 hbQNZAaa9ZWttdZK1XKwaPgHLJ3eautgKKq6Y7Gm2VVssGLBt+xXYvzTyBhfxbLN ZGL4VoUYY8RATSqFbDEGaLeqKmy5w/rFYrCpUDFkKrguC6201FobyxaGBPdFIalQ kwVyWfBLLq7Irtjjisf6mLCz1ThbK7TbGILbNqoY4os99tRTTz/2pFOXwAQD9hyO 1cHbLK7L+AOgNPyszMqHI1YDCxcLeTyykiMPpiqyX206RZENL+uHIbuFyXC7iAWr /yy6egnLNLwmNpydujfrPDBgJDvN9NJb74xrzz8/HTXO52qdda1Ovgt02Gur3Tbb b7sdN9xP/yRrrLPaJdMfhhDU6FFUbATXow31+Q+bMLEU0h/sktRoRCxVpKhJ1XzU kZxuPgrWQFVQQ2ehnVfR6JuPoiDpTV9ClFWpEA0V1JBRFeLHH6KOSjtSfxQSVOxT IXSqqVQd5alRewUlfPHHX6V6mF+qwlxYzoPlZvRhNbpWW28ZMsVc0DN3n5t9Pf+9 dOGPL7703EvvFfnTPxxxgpN5BgvfMHCBg/qweCaa83vpFb33KkrPL4QpH/lcQ4U/ TC+BzhMDc9w3mVjcQAxbEP8OLLYHhuEsh3z8e95fxrdB8IFwf+MbIAnR56DzoTA8 PTEEDgxhCBj8Qhr+sEc/qHGPZXQOhR7kIAHBZxfzrU99ClzGPaQhoAEto0AJWtAW 7sU9+4ivg1C8Twd1uI3FrQ994fND7PwgOy+CEYzo+98PAeg91VjReTnMovmo2MMR whGFOvNh9/xXxh+e0X8bTCAWFZjG84Gvf3kJHxrRmMVUIFCLfmQjIxfpSEVC8o+N jOQk0+iVrYApJGMiSAoK0kk1dbJwnftDKFHiyVNysiGdo0InOQkDgnQulak0CTX+ 1EoVpOAhqrjlLXM3kFZWJE+f/McrZYlLk2yBl55EZiv/E2XMZq5kTsZsSCtREKlJ 7aYnPKkIUFyzOmr4DCq58x1QbHeUQtBucUwZJzmtsrqlrCopz3HKTrZJNKAcxFlc gZdJdqUhrACrVlxZ2j9AtiqD7pNg+wwWw+C1T2hVSxViWEUsuEBRayGoCt2yFTXG 4CofJfRqA81aukTqLFWkTaDx+ke1VjHRiq7ChV/YAln+0QeANSuktipowlbVtKvp 6KAK42mwuNLQnQbrYbGgKBdi4Jt4+COq/oBH5xYKUoSqK2cqFctRrYqylYGVH8v4 kLVeZdYtWC0k6iLqidhqGqsi1aHrUutWVGJXavhBpcMCatlGOiy4TgywatWRJoPq /1axsJVpIX0rSRubl5GCVJ+SlWutHls2oCp0skXV7FY3S1nPgrazoo1raEk7WsTe 6iCyuidkNiknVawJBnSqwp+osabBEYRzxGzIFv7kKDkBRVAOgUhJJlKR26rAb7e1 nEyaN5KW8I0jtZQTNfIkOkHNjiQ0sQlOwrSTnqzOSUERr2uI0qnbJQWd7FRvOdUC FPbGDp1IoUqievcP9vYOeO2sin6NB5R4bqWgw/PvVrAC3qK5xCu2aahhqpEW67kF LnKhS0NVxZzSTGdCIuuefZzDYApvj8JjacQ2JmYImVlBQQ8kD7u2x7AxpHRCKiJM ipLl4aB+eCw5jl5+SDwxVf/IrAoKYsQWCNGtCxMiYDymzpI3XBjU1FFFz6GPhUU8 MSvX5UMV/EpPCuEbfFDDH/eghqua42G9bBjNHuYfFXVcFhcr5hT+AdARkxiUwcJi IYnh3402LKEKZ3jHF17wd9bSOS91jl+KnvCgkRXlHVU4ZIL+aINvdOEO54XKGfYR g3OW4elkeso/JFamCW3qStem1Nm5sYyf7OZTYznWr0Y1rWW95FrP2taDxvWtxeIl BIPJtSxZ3EDgstzn4lYFDzkJFUL3h+mKCtkcyRNJKiKQ0G2BX8r2E3Zd4hHdMk5v 1IhucmHAL0U1xBDVhcFGYNA8cpfqD6Gj7egaYk1JFUj/VpVyVYMw5TNvDaVU5T1v UnAnqvUi5Sfyve9R0nlOhis84Qxn536j8k6lxHOeAAawUloVM8TgjVZyqwZV+MWr avgqoCOf28iP+rShwWIVIYnFVyB2LcQgzSzqXrnZBMbzl59E5iytuQsLwYWcM+zn Smd5rVzuLENUQ+j6Fo9vDHHkt3Vt6W5q2ClSxjKW2WMZHtpCFZpIdi6EwWRaZ3rc +NW5tysaKNTQgtrZPjfv2H3tes873/fu974D/u+C30bdQq5vYbPEEKnorbwH8pZk FwQjbWlLIVDKkCpM3k53IjegMl/5VpEdLm1B7gHfQlvLh45NVSgEr1AKi0Ig9yOY /299q2BfkGxbnvKP1y4VXlAT1H1XK8UzL1Fc9xqnmER2uANe7Gbn3qs0PFTRty/z le9ec1bcKVSxa13FVFfwuYR43FeJrAyslUwCWXquYs76K7X1tIQPyNmby/pjpv6t t7/++cf//dnff7b83/o1gvzslKyEhSHEAuccBv8toP81oP0BkANWCv/snwTqX/8N INSh1j7diwJCoPtZIAOC4Ade4ANWIAnyH/2JoKscXbVkEsRki/qgIPv9RQmO4Am2 n4ZY4CkU0RGF3TIowzIQAx80TxGu0Q0GYBKaoBIi4QL6gbdAYSpI4RRuigziIBPa 4PqJyBJyYRN6YRauYBiG4P8YzmAZXmEXgiEZnuEXiqEZYmEbrmEauiEaXhLqoI5r KRMnLQ4uEcTu8eEzodIfCmIeDmIgEuIhGmIiAqIsDcRGIGLkJRc1KWIhqsC9YRNk aFO/BY8fbMqmeBHyNEXuXBzChdf02dd7tReqkCLDZZ/FPcXGFVRQcFxS1JMmrpbI sRwiTeHyeVHdDV7b+KLO0dysEE2JGQIg1MwvBh6uIGDNBYW+bcMWIOMyKqOzBKOt iEEE3UBTccE2xkA3NtU1UmPJcN0ynII5oiMf9IE68oE4VmPedWIYhVFsuOMy4t07 4uM45uM+6mM/KqNqPeMzIp7ewFafoBvkIWRCKuRCMmT/Q7LJdt0EmATfxSUFFbRO VNCX9OlXRqYiKnok9EXfRubXRyJcK4Jk941fQT2HSsxTSnKf+f2EHTYPCNJkBVbX TRoh9FRgTfYfTzagT7qfCv4kLIgBFxRlUdYPFyhlFXCBFZBZT+5kVELlVA4lVVbK URqlUuKAUnIBU5KHVFZlWAIlWI6l9OjgWOJkWuZkWYolWe6fUNKkEcolTlqlW9bl XbalWuplW+LlWHoJWwKmXfLlYAZmXwpmYRLmYSqmYTJmYjamT/5aJolJsuGecDnk ZWJmZmom5FligcSKpXBTU8CGpyiFeqXTwiEEfDWcfDnceCHFOBlc7ohiR7amSfJL /4DhJoHp5vF4i6vASsiF2LIkY23cynAa59Mcp3CWTHLGDJk5p5dAZ+cg53QqZ3Xi SnJeJ7w0Z3Ryp3R+R3FSZ3ZaJ3iOJ13UHXaSp3iqZ3qyJ4eYDHpCTXx+p3wSJ33C 53ziZ33mJ3wG53raZ3i2534C6H+Wp4AWqH4i6H0m6IAaqH82aIAuqHUW3t0c3mZa 6IViaIbiVun43gsAn/I8BWma5IiSqGii5Im6JIp2H0wuD1ekH7/ZH4zKaIzS6Iza aI3i6I3qqP1B3Y76aI4C6Y8KaZAS6ZAaaZEi6ZHOaI8maZMqqZNWA5M+6ZRCKZVa aZUmqYhc6ZZiKZd6aZeC6f+XimmYJmkdtqgmTeIjUuKaqmmbpumbLiKbwqmcxqmb VuI1FUg2TYYmlmif+qk72eGsBKoBtiihgokB1iI33eI9moUL4oqj3gqkNurTSCq9 LEulWgul0tyjUmqnXqqncuqnimqokmqkgqqpjiqqluqkpiqrhupHWeqqxqqq0qqr 1uqsbiqm6uqp2mqvzqqvZmqr/uqwBqusFuutXpmwHiuw7qqyNquxPiuyRiuz8iqx Tqu1VuuyYquzZqukAiRr5Y2Giuu4kutlQmR3hcRE/um6squJpui7quj44ZXy0FV1 jem9kim+6mu+8uu++mu/Auy/CmzAEuzAGmzBIuzBKmz/wkYmgrFkuUJsxEqsTHQm 3mhpaLZrxrbrbcJrx6IoPkghv4Hc1HkFYtCcycZMWaHsyqpsy56sy6bsy8pszNIs y86szdYszOLszupsz96sz+bszwpt0BItzw6t0RYt0CLt0ipt0x6t0ybt00pt1FIt 006t1VYt1GLt1mpt116t12bt14pt2JIt144t1hbe1FXoxLJt244rCvTe73mX6rhe 5k0e7eUe3t6t3dZt7vWt3ert3+Yt37YK4QZu4fot4gKu4fItJzpuPELu40pu5EJu TxwY+lluzMBK5nLu5nouv32u5oLu6Ipu6XYu6Z6u6YZu6rLu6rou6r6u6sLu7Mpu /+22Lu3eru3Gbu7y7u76Lu7+ru4C7/AKb/H2LvEer/EGb/Iy7/I6L/I+r/JC7/RK b/U2L/Veb8yYqWTi4ZzaKZ2C7/eKr/eSb52W7x9WrJ7Cyp6+yvq6r2++b/vC7/zK b/2y7/3GL/7Sr/7ab/767/7+76vc5KG9XfMQcOcYsHMi8NshWg7tqaIGxVzMbLVM MMxSMM1eMMpmcFltMM118KtYcAhX8AhjsAiXMAlrsAmnMApzsAq3MAt7sAvHMAyD MA1/8A3LcA2f8A6vMA+/sA/PMBDrcA8T8Q8XcRAf8RAb8RIjMRMrcRND8RNLMQ7b cA5TsRBfcRJnsRNvcRR38f8UW7ELfysxtpbbmvEZa+a5SmRWWC4bu3Ebw/Eby3Ec 0/Ec23Ed4/Ed63Ee8/Ee+3Efx+TyvGj0Zm8hE/IhYy8iW68iG3IiO/IiP3IjQ/Ik S3IlM/IlRzImU7ImW3Ime/Imf7LlNmygDiQam/Ipkw6eUoqlhC77Zq4rx+8rt/Is ky4s068s1zItl64t1y8u77Iu+3Iwx/L6ugpwrq/93S8yH/P+KrNvNrNZMXM02+8z n+w0S3MyX/MyW/M2YzM3a3M3g/M3i7MzZzM5e7M5hzM6jzM0nzM7p7M7r3M1v7M8 xzM123M5w7M663M+8zM977M/9/M9tzNAE7RAz7NB1zP/Phe0QiP0Pzd0QDN0RA+0 PU+o4ZUyKmN0Rlei6XiodzWIivVEgoR0Vog0SJt0SaM0Sav0SLP0Sa+0S7d0Ssf0 S8s0TNt0TeM0Tes0S3vLmXrLNCgaUP90UBP1UBt1Kgg1Uhe1Uh91Ujv1Uj91U0P1 VEt1VTP1VUc1VlO1Vlt1Vnv1Vn91V4P1WIt1WXP1WYc1WpO1Wpt1Wrv1Wr91W8P1 XMt1XbP1Xcc1XtO1Xtt1Xvv1Xv91X4O1ZN7h+Y6v+SJ2+Br2Yif2YVNi+kLGiAQw /1L2ZFs2AGN2/2Z2ZW/2ZWv2Z3M2aPvEat0iRYKKiErFY2jsarO2U6h2a8N2bMv2 /2nPdm3bttzVNmrfdva9AhnfYrhqdHBntBoXjbf8Le0h994et3IrbnIv93M3N3M7 d3RD93Rbt3Rjd3Vnd3Qzh8OSGbBt4GDRlXh3t3iD93iL3Hmr93iH90Ktd9G0N1LB N3rLt3mzN33Hd37j936rdz65932/t33Pd4D/94AD+IEbeIIL+IIXOIPXd4ND+INL uH4TuISXt4JHOIUjuINrOIZPOH9veIaDuIeHd06F+IdXeHxfuHl7iYBXBIqfeIdz +Ii7CerUa0EJd46jcsWqreH5eI8D+Y8LeZAT+ZAbeZEj+ZEreZIz+ZLPSsDMCltI ISdO+RRShd3MSkVg+ZZTSv+XN5SXR3mYc/ndkLmYg/mYm3mZo/man3mbq7mbp3mc j/lXwDmbv/mdy3md6zme23me8/me+3mg9/mgAzqav7igF3qi//miIzqjE7qjJ7qW K3qjB/qhbznKTSFAxkp3rzleUfqjfzqqEPlF63ipQyzc+p5snSkmsXqgEvaqu3qr w/qsv3qty7qtx3qu0/qt87qu4zqtVxdihcX2dV9OaIhLmGdOmMWmaIEfaIGC1VRY BCeyKwa1J4a1RzuHYLuwazuQbLuyV7u3i3u3k3u4l/u1w8hBjLu5szu6n3u2tzu8 u3u8czu9g/u847u863u95zu/7/u9//u3U7t3Cvy69zv/wPt7wiP8whf8uyt8w9s7 xKP7izy8wQf8uhM8WeAVfGzK8yAW3tVFIaDThciFxF+8wzM8NUyDrXdvYzO2Yrt8 zMP8zDu2nUL2bwckuOa8b+88zuv8z/M80Pt80BP90Bt9zyO90Cd90e88v2z5bS7F T5Q56sjK7ICRkBz7lnN6mOjMpIP613t92EP62EPG1seKqpz5Y9nNXdS52ot9qJM9 2Mf928s93Ge5mKP9m69K3fM93fv93JM91Xt93rM9pEv6pj9hBekEw0R5WFDKFSFS 83Ei4Ns9mve20ZO6qWu+hhK3r/f6rnt+6IP+6P966X++6Ys+6oO+t9QGsfuX0yvG /1/yjLM/oYM5O7QvO4fkiJVwCZZsye/zPvD7fvATv+/HmIQoTKoNv4k42vL3/vML P/QXv/Q7f/Rb//SDBaUlf/NbWvVj//d7f/hT//hviexfP/KTzPdrv5v4ASxw0b6w BchfWV1MgZB0UbNrgfif//NX1atn/uYDhAqBAwkWNHgQYUKFCxkqRPECBsR/1f5t q3iRokWNEy9uzNiR40aLHz2CHGkyJEiSGFGuPCkyZUmYLmOynNkS582NqWBRrLat Wqp/Q4kW9TMRKFJVSKv98fMUqh+nSX9Wo1YVKQqm/1Bs01oNRdifWsOKpXrWJ9qt WNmqbZsW7lq3c+O+lVsX7f/Vs1+povDpF/BXv1zDZg3r9TBexXcZ23VMtzHkx4sn R6YsGTNFVWj9Ju0KVmxZimUtl658OrPp1Kgvp13KWi7fv6BFI/68dbNPan6oFSpE LVWqbX6AUu3J9GkqP6n+OC0EG/rqbUJfdkTREHt27du5d/f+vSCKiFpeUONoniL6 f+rZn3ef/v36+O3h15dvn/59/fn5z/eP/7/9AuwPQKuE+4ma4QQcCjgEi6NGFQe1 8IMK3qqZcMIEHRROw22oKeuzxFDQcMTDQuwQxQdVdJBFD1d0scUUY3xRRhhtrBFH GlXkUMWwOvzMK8QS7IpIF4scK8gcZ1zyRh2ZVLLJJ53/jJJKKK2c8koWYUmxKxI/ RBCwIY2sEssypTyTTDSzjBLEEWmMME0yfSwOyC+DRFLLDv+AxY9C+CRuuRYPdLGQ CZtLRYs/ElyTUTM9nKZArgZKYdJKBaL0UktVwHRTTTn91NNQMx21U1JBNVXUUlU9 ddVUWX1VoIcigoEoi4ay9aJba91V115z/RXXYHkFdlhhfTWW2GOLXVbZZpN9Ftlo ieKJLaGKuvZA3Kh6aipqnHpqreOwum2srMwNsdzoWlNtXXXZNU1cztAFCrDZAhOt s9nedZdf6dr1d1+AoxOKrcHSBdGridr8l+GAG+6XYdEYy81hpkSsKt+FzyI4qeWA /wP0ObR6OouKPQU+ed1XoL0OvJZdfhnmmB3SAgbyfIrvZvVy5mjnm+3rmWf9gB4a 56J/NlpopHVWOuijnU46PeBsPIrBa/9JRcYti8PQQq4FXdFNMMX2MMwkO2tUTUfR jnPtGgetsUgxgSyyziTpVBvvtPVmO2++924bSzh/fLBssOys++++AU+ccTaVVGVx G+O2u8s3HXRqNz+qeWpGHhH0Qwu/RV+cmqXhY1nm1FVfnXWDZJUIpth/LWq3PvyY wlqri5Kdd5R6/9334IEfXvjiiQc+FTiryl134qoqbtBq/iQu8z+iB2rk54HE884g 592+uOfFD5/88c0vH/3z1f9Pn/313Q8/+7sxBmuswOilP2P678+3/f7f/99/AQTg AAVYQAIS8Hr601+IjpQ/Az7wgBCUYAQROEH57Y97CuTfT96muc0NR3PpU15xVMEb C1KwgNTxHepa10IXvnA7KKDCC2hGIP2chBqv8EMf+oAKH07BPL8yD64iZUMjDgiJ RUyigJTYRCYysTfVQNDm5FO1aU1xUYKzSqFAR6GneEiKYCwEGMG0KCmOyCq2IduQ zngVM2KRjGB8oxzj6MY6pvEqcMwjHfdoxz7iMYx+DCQg9ThIM3IIkCBalInAgpix WKU2H/IRaARZSEvy0ZB3nGMlMXlJTn6SkJ0UJSg3GUr/UmpSk5AbJIim6KPAQNIs p/xjKWmJylnaMpO31GUueelJU2INl75kpVdocxhJohGLqrSK87YxoUs+Z45TgFww R2lKa9ayj5B6IupghSpvtuqb3QTnOMVZTledM5zoBOfraOUsZP1jGj08RT/s0Y97 hAIVpdPd7pgFrX5Ky527ioE/A1pQgh4UoFcbYVD2OZQETqd80/tDbsq30BNeFIUZ xShGLUrBDW5UoyEF6UhFWtJtjNGkKSXpSlW6voe2NIAoBUqgONe+jiqHpRtVWbRY CEOf/hSoKKCZzZ7YHqJQo4fSUCo/pGGPUIRiCrypSdXSEwNamQcGNzhiNbQ6oBg4 /5FWXN1qUZc4VrP2Zhs9+cly2Kocty5HrWk1UFx7kiC6pjGu0JTrT+q6V7naNYx9 vStg+YrXwBq2sIT9q18Fe1jFNjaxjEXsYgcr2cem8TmRrexmOwNZyjrWsqHdLGhH q1nSnta0qf2saj3b2sm69rKxZSwwS7ta28JWtKi97Wt5K9va4va3vd2rKoCr2+Ky lrbVKGFUfVuNMTZ2N8fdbXNZi1h9AqinQNXudlXHzppUZyNDQUUopEHPfpTXHvZY hjTswLyirCQGN8jIDWgFXpuoBCcDlQl+LVLf7/6XJgHOCX8JvF+LJE+kMj1gR3MK Uwc3WIQPljCEJ1xhChdHwf8XtvCGNXzSDr8vwwNkMIcjqEKXZJe7KVaxd8RDw/KU FZ5+CMU0yqtUe0RjGdGQRijuEMSV1CcG1PhqkL+6HqsGeSJIvmqRhQwDJMPHyU6u BpEpEmX5LLmqTkYPlf9hZbPC2In08Zb0yNwTM5cZzWeGhZ/S3GY1N8XNcX7znOVc Zzrf2c55xvOe9VznP/SZz4EG9KAFXWhCH9rQiUa0namlaEcv+tGRhvSkzcxmSV9a eo0e9J8x3Wk9azM/3FSnOdNZanKOGtWmJvWpVR0riEjEoBbRRipE4Y97pLcf/OBH NHZtD2bYrqG4otVAiV2RG9zq2F0eyg0sot9kb+PZRBn/6FCy6qt2MvsfzkY2tZM9 bYT+E9yxnlYqCPFWt5a7rctBt7nX3dZ2n9vc6o43uef9bnmnm974tne+2V1vf+v7 3/0G+MAFXnB3B/zgBE+4weGt8IYz/N4Q5/fCKf7wikf84hO3+MYxznGNdxzkHxf5 vkmOcI+X3OEhR7nEV57xlp/c5CqP+chn/nKZp5zmy1HhsVC8Yp//fGY1e4HPoCaf 6dxhGv7ox9L50Y9lpFe9zLgDEIlCkaHkrMhh7WpYlS3kKk9k6/S1qtCYXOQqi/3r Yu2y2LHMkayaruhwl3vT4k53CFmNalWsonsb2ne//x3w+9RKUQYfeMMfHvENLUzf /xcP+DaRpfBDAdG12iT5wk9e8I9vfGE4H3nLk+bvlSeK5i9f+c1DHvOJV/3q/Q56 wnge8a5/vdUGv/jGc8Xyubd95Hevu9Mr/vSlhz3rGf97why/98f3u1sLsZxC/ENR xJd+Q81TfflYv/pbsrukgN597x/Eu8f7hx9EwYx7mH/pUL+nMYyxCSbgw2owcXZ/ ja0RbEPbv/W9P0r0m+2L9H/+lA3a5M8k7m//xA8BjecilgJb+i7vpq/4dk8CIS/3 Xo8sPu8CTS/4hK/2QC/1RC/1Ro80NLADXW/yQBD4PJADPxD1ZE/5KtACRS8GXfAF U1DzdG8ES/DxRPAGIdAHE//vBFVwAodPBCkP9o6Q9yqw82BQ+Zbw84rQ9yjQAqfw B4svCqmwCYmQKFTBephjGxRlN4II8MSwCvfJ+qyoAXmn576PDVVMhmgIBsbqH0Rh E+IhHkQhFO4BHuBhGZah/TjhGOKgx/5BG4giH97jyYwsy7qqyspuEblOPaQsEaNM yRTRyLIqrJ4M7a6MrMIMzJiIAY3C6PTuasrwCqGQCXvv9iiQ87IQB18RFY3QFZMv FTsQFp1QCS8w83KwCHdwBmvRF2cP+JBvBUPQCGlxBoWQF3lQBk3RGWlvCp1QGrXw 9moQ9whvFaFwAmlPBSXvBY2RGL0xCJ+RG8tRGDFQC8f/rfk25zf6JPBKR5/I8aiu jx6xL0K2KdVYTR9XjR/zsR9bDSBZzbvEzQ82AR7+gf30sBiKQRPiYROO4Rg44Q6C Ldy+Tdwu8tv6DyMTiiOHJRSnpe/4zhRXkfdMsBtHLxylUBVJUAeZUSVbkCSxMRdn sSR1zwZhEPNkj/RKEBWD0CRhUSaPsRg3UAZ38PeCUR7J0RbDkSmrMShj8Rpl0Rtn EhmrkgmvUhpnMimxUviC0imvJSgABWuaz/DOcCv1jgyvZSl4qg3bEuiESug8cRtE 4Q7UAR+MQRTu8hcoYRPWARADMS+rbh49kTA70TC/rDAR8zDP4yOH4igsIi1LMSlj /xIbt7EGWTEDlxIXmREDaRIopVIrp/EybZEIc/AnkZL0OpMrn3InuZEGK3MpcZAk ezAZv/IsfRAJPdManxIrTzEqV7IWgdEFZ/MEzXErKVM1XTEkNUcqMgfx4nErsa8e r0/7sMstr9MNX43rdAIkaM0Y7vI74+EXfqEOK+EO70AUhkXAuNPA7qs97Qs+AWzA 3lM+2dM977MxJXOfHvAZkZM1S4/wblEzpdA4m/IlrXEzk080KbMVM48piTEEx/E/ hZIFP1MryxEpObMXNxMd0/E2iS83gfNBoTIbtbH2vPJATXQ0L/QbdZE35dH4NpRF rYaKgMM5P1T1zFIMxdDETP9iDbETSFmnxchjrLahGe7gO5khL41hL3/BGABRFJgg FQ6RiD5RMa/USrM0MZMoP48iMtdDJEdSGbFwNG3PQZWTJZMTBHNSQtuUNFlwQYcR FzsvQmmzRYUSJ9+0QB0UGdHxFIkSHHF0+nKTCkVUQ7HQ8z4QT5NTQ5HTGI9yT/tT GRc0UIuihD5HCwQ18aSTGqjOHiNF1ALyH/fRH0tVVE2VVEdlIL+NGjbBGPyhGcJz PH8hHjhBHjgBD750IyuyI3fVVy0SWBMqP8PUoTT1B5sRR23TWK8QWStTJvv0CZ/1 Jy0UREsSQCfUNV9zWTVVWRUv9LYVXMN1KLQAcsBFXP//jgynIKqsZi2L5UeDFF5j Bi6Jimjg4x/wAUnxwSHxQR32kv2AISKnwOp8pV6Vjejm7mC3L2EXNmgQtmEV9mEZ tmDlrkvnra3OFWMPr1IzlmM71mM/1vFUz0OjEmRLdvp2Y11NtmqqT13dCvuq82Hf NV5nFjzCTwEhMxSWVFbHcx2AwS+pbigKUVd+5wB9p2iP5wb6LwGX9mablnjyU2Wj Vmqnlmqr1mqvFmuzlviqLzmwBjpLUQ1pVmxT5w1rqKyoAT3tcBPwoRj8lRMAceqo YUvEEIf846oCBBLLKuu0dDG31G/vA2q1VnAHl3AL13APF3EPl1OnE0JAFVVHFXIf /1dyT5VyS2VVe5Uu9VVWN4FWOaEZ4kAUroJgrgVX4iu+bCVpkzZXUpfbTjfb6KtW UldYtA1YUpfYYBfZXPcfmC3Zskojg5VX+ylwE5d4i9d4jxd5k1d5/W5HG6pdeW5s o/dl5nXoFnMo6LIZ8GFt+5USnBQv78APpmEamgFraOc8HNFgDZYRt44TscoS80PK 0td957fr0Dd+uS5v//ZKh3d5+9d//xeAA1iAz3JxORVm20NmpVeBE8K71hMkgKPH YtUOZ9UY7sD8pgGfTgEVcge+OCIAuYr+QtgA58v+/Gsj9G8AQ2KE68//KOKDUzer 4tOB6XOG/4F/BxiHc1iHd/+Yh/tXR+exWOEzgReYiAliSF/ME6dBFPAgc5nUVSWS GWyNGeZJGpjBPOAPyLaMftvO69IXf93jbqtKjPXji9PuySqRfscYS/22YvHtYnsY juNYjueYjnG0gOvxHkNtclOVjyO3cv24j9HpcivSoehSFPwAD8D3DvzBH6YBFcrL H6Qh6YbFd7Ftd1EXdavt/7DNdInCd5OFdS3Z2LZtlI1Nd0XZdDkZeH8VV4ZVV/Wz jrV2YzHWNmc58LoVN0tzZAN4ZHc5lpX3lS11ZYqYmBuCeiXWPapmJKjhkKdgFJwh FTYYFRxZkh35H/yhYc2OaZD5aRx2YiH2m7m57sT57q7/Je+kE5aV0parVVuP05fd GVxjFDR9MwYND5chkENr+VrPshrvufUSdfhakvLUlAbBcU2/clqh8kPZVDb9uWrv +GXnbohXjAqmgAqK+Ttslnj2Cf6IgpGvGZ6AQ2gJkGlL2mlP2qRTGiWG1QHh2aW3 1aFf2ljl+UXnGVrPFEZ1GacF1STfOQqtFRqVcypFlEEBGkVdkweTmlv1VEF9Wmp/ 2GpUKHYmmrv8QBncgR6w2hTuYCH8wB3wYAroYQowumzjkG/XuG/TGq3X+qy1tEun 0+qI9ViRsKmRTzUZGjZtsp7JdK8LtZ0X2lpJk6At859NdCV1siazcAN1k077eUCJ /5pNt9Eym3X1fFKgKZtEj7BAB1SoZbEqY1NAGztcRXtGnfFr5RGiry+P4yNUA/mP Q8UO6EETpiAFUmAKrpq2QyWsp6AJ7KAJABm4J3eQWTl4idu4Vxm5ezW5tzCqQ9Kd T5JSE/RNl1G0IfuoDXW0A7oFdTNSs5W6MTNPYTNEa7KuP3s1l7BP5/RAbxoIo3G9 QXueEfQYAzQ0XxO679uzT1RCl1UCxTs6STEpm3efnhdYqBqowtoOOoVSUmAZ3EEg 8EAF/qAPoOrB3eEOUgAPKMWiVSAUJrwgdojCsfOY1bqt9bfESdzEU/ww39osQfK5 KRUoiVO6Y3y6EbuhORSmA/+bQI0SoBHbUWESvO9UReuZOFU0vXsavVNUA2XUQPGZ KvV0NzN7oI3zWkWTnqX1vE+0s3m6K4ecHOExmH8wtbOvPwz8p/pAGWq7IHb7DpQh FNxhGZSBHkBBBXb7tsd6zuc8zulBw696GUBhzi/aLRt4Pu9Thgv90O0z0QvM0OuT 0RedhhG9Jli6ofhzMt+bxl+0qIUcx588vnPcyPc5OKMcNPM5RVe0yYvc0xEUv5Nc QO/UugcVQ6FcWR17yks91K9SoV/dJRu0pm9T1bf8GcO8CqFa73pUJMzcp0BhGTiF INwBqujBFHL7DsT6Dix8t1UAqxf82kOBwZUhtxH8Oo//mK1VvNxRHN3PvdxZnCNo R67FlLF3PLFj0VCxO9WN+lyNT71tGr5909SFetOx28qtHFtd3bqPktadWvBm/dWd 0tZRcsgTm+A9M9bDm1C5PL9LW3DHfD1W2z5aO7j/WBlAQc1HhR7s4M5r27bBPayZ IOVPXuVT4ORvuxjsoA9sHtAXfI9DfriX+7iVG+iL2+eHPuiHgtL36d3xGU5XsEx1 kEDvWsf9dOAjW1xlvOkve531fRyb0er91L1z0TQROuqncVKfcLL7XWTNEa9NfbGn 8lB7nAOzFezjfkIvPlmXHEJjmmqJ3YaHuQ2poA/43CDwANvFeiDYvPDx3NsHAtrD /1oZ4nwZTCHOVeX7RjycIxbzL1/ztznzOX/zuxmcPV9p3rqhkn559V5qUT+7r1yd f7m7W+9bXZ+HOV5uJdot8UAZ+sDZVSDnU14gqMAd1NXawV3m7aDkZz73F9y2aXv3 u0+jURr6VVr6o5/6pz8BhzU4dM6tsj+H1/lqvT/f4R7YFb770x72ZX/20VJ3pNpH r/PNi2GsVQAPTMHws10gEH/qDB/aOWX/i2H/VQAg+tCboqKgwYMIEypcyLBhQRRU XmiBQe1ftX+pVGXcCGujRo0dP3L0OFIkSJInTaYKSZKlSJclW6JcORNmSpkqbdLM WbOnSIv/KlZT9a+o0aNIk/8qXcq0qdOnUKNKnUq1qtWrWLNq3cq1q9evYMOKHUu2 rNmxFdMGXauWmqqLQtdeRGEwRd27Be3mxatCb1++fgMDLthHGT3DypRNSZFiimK9 VBRPGTjF3WJ6dhgXxJwCRWF67jjbFby39F/TpE+rTk0axQsYr41ug3W2tu3bUGn/ 22aUKO7fwIMLH068uPHjyJMrX+60YlHnSonyLjp9N12H2LNrZ5jizpTFqxGO/jte 8Ojvd8ZvX89+IYqJWl7Axci8PvNUcoP6ts+/v///AAYo4IAE1tcWWwhSA0tcDP5z XXsQRpgXY5rxJV5pfilEYYYSduiQa7DBANRsBZYYFiz/F/HG234mtujiizDGKOOM ND6l1nNGQYcfbynuZp2HQAYp5JBEIoQCbPHFhV+NTCqF33xDNSnllFRWaeWVYClY 3XIHdqkflPk9yNpgqJEZXplonqnmmGmyuaaZbsb50GuxUacbljPqVh2LRaXiRyqA BuonoHgWauihiCZKHDWB/gEdl1BJJ5tsDxZp6aWYZvoeDPFddNGSipr4JFBuJeVH gmvRByAKLrLKlKtiwdqUrEbRmpStReGqlK65zrqrU7zWCuyvxB4VLJW8HhsqcRql sk011PixJXJedrkgUJ6uVWmm3Hbr7XogxqbinVSpEssqsZiLrrrL1gaLij7yidGj /0idWpyyDtaKwr74Hhcsrf1C5Sq/++ZKMMHCHmysvrAezO+ts/77q8LCGmyrxAAP /HDFG1d8b8dWAYyUxrKSzPCtBaPccMoMa6xviRs37CDITYXEaDXVpEIvtan2fNSO PsK7zbbfFm200RBJRBFQoE5FzSpVVKFCDDBIHUMVsezcLlijCiXvqQdepCpx+A48 8qq+jsXq2r0uLDLLMutq9swQv5rvrhfT3Xa+/yIMccZ7/322xSzbFnDExr7tMdu9 yrz44Hx7fDffKxcYd9uON6XKH6kU4sfm2zjKXLUJvpVfXGLCqXqbq7/J+uuur/Yd FXLCXvtp4Ypop1XVQF3FFv9R/x616VuTpWdvSTWd/Fl+z2wy4zHfHf3DcFdvsvMt W4z32gWn3Dz103dMM7CMT+6w4xRLLj32he+tOK7tS9984JMHPjf0hKfPvfjU0888 5Ps7lsjUtz7zGfBx9aNfyRIWucMxh22ZO1a0AFWI0FGjGn7Q2lI0KBbocFBS1KFU t5ZBj2Io5B3uCIUKQhEaeoDmMHhACAuX4RAqmAI0KlyIH1zIIRXgITR2mYwLQ9OH oxkJPvJZi/KiYghVwAB4W3ji72BgCEMUjyz4YdDXEISUJYYlc417mQEhiLkClq98 CWRgGBW4sPVd7nFnhJz/sndAMlIOjAF8IxoJlzjMFa7/ffuTXB5b9r0wRvCMZNTj HM0SvTWmsY2CBKD7tDcyuMkxgZezI8wMlrj4Ja9zfsBgKAtRiKhQ45Qc/Arp2nIt MFWEaEUCxWGagBA8GCYzdhiId76TGFoaJDHK8OVCNDGQwhRRIZNRRig4ZBh3NIYe mlhME3JpByMaJHcjIldUtrGKLXDBm1sQAzi58IdViE1gV5QKioL2D3l50Sj2Kgv6 +jdJQ5rxngqrXifjmD77lfGNk4yj8wY4MTiKsXH0/KPbAnnJ+iUrjQGUHyQJyEBE cs+hDdzn3ILDT4qqb4GRHGNIH0lQOt7PRJVDIFNyFso/UeMP8bSRz8xyo57pyEc9 /1IRLIm0DMPk8JfFSGEKWAieIA6kIFSYTAre8VOF9LQv9LjDQn64DMscZDKhoMdQ 3UEeFYBimQX5Qx9CQRBvHUkiL1BSVWJhCEDEABBbgKtc32qIWFQSfumMStcsssW4 HIVR/3OkQEWKv8i5EW8vA+geJ3pSgBJWjZhcivfEp72Sde+wgrwoRIclWYhe1mwg vev7FvjZhdLspMLp6CLZqNIyChaSeZvoR11LINK2Vimeq4YWMuiHmELllLZZJVtM 16C5tO52fgGFMnL5oMmggDO5rFAKCtMEvShDEylg7mAmY4depmYy3NVLCq5bmOxi xpcbcgwwoRk75OIFm7ujSv9d47oFQ/wBrm0FBNbkJbe85iaERXFnU975FcUe8LED Re1gMWpg9PkTs4YNqEhd+9ACHta2kR0pAQXYWTZu9MHFOtvbPpxR25IYN6q1sGxB GlsDI5DE/V2x5Qa30WBhMCipEKV/Uom86vh4p0PqaWXAqoJlqFCoM1TGMkzRUyL/ MD1D7mFBfngY8Chkh3eIbkF2OIXoTuGGoDEFWQtSj8eoYDJS5damOsW0qlRxKLGg L1zhXMW6+e173vPooUYFly0yhcBewfNkHZrnR94Te4jm32QXvbjLulHRCJZfodNW 48p2MsIY3TAh5zfHkvYvtCS92Pmgp0lEtrGftRG0QEX/vbIaI8yyrVYZx149v5Ia uj/5TNj4kAKLUD7LD1rYMaqsFZdsvbJboFjGdK1KBcukADMqoGYf7DBtIdtFuVPw jjKsmpBiKGPa0GzMMa86kCa4ow/XVnYfuMqYKfRBE9vGTLPRrZkpVFfNdBLRuKoC CLauQhWqiOsfVGGIf68CEHaG7Kpvfah3sVPATPFtrMDCabI4UDkkSxaLKarQhj4l tpI8cB87jM7bOgzE/3Fghf07nG1QQRXRkriBbOokdgoNyEJaMlSryWS7INnZ5HmH KTYTmqJDGyHNBitWn1pLd6SHqOBVwR206geCnOeGUT+IlImUtImolSqAaGITAT52 /4ITHOE0VviBL06lvUapXoP6k9wHFVjLeZLleK/RxVeed+D0urcAEm5aiEsqoKTO dq1TLmNyORkmMAa6WtUMYxIzVGVsKAWKVw14KaReevtl88/uLigYU97M92XZTfj2 eEBBu+O6XgXw3Y02oQIIg9deFbAouNhX8YeEvzaC6TxegPtO/OIb//jIlymOlgJC H1EH50F6agqaTY+h+3yZLPQOHqbgB4HYAavlySqRDUKPd5TVllVGCJbtIhCn2yW6 d3DHMsrqB3cUIwUkTE8Vsrr1Ia05iRUBaEsRdqoQdoBQgG2FgHWWdr/HMQxnKFlE KvKSfBRYgRZ4gVgieEHRSv+n4yDIpmzsZ2YqAHmh0UzLZV4oUCEFoQyjV0vNdBjo 1kvkBh6RYXmE4UzThRigUQwpiH8vuBj9FyTYlCKz9xTBc4RIGDx3NUaQJnKhsk7w MoEYOIVUWIVWGHg0t3z0wSM2B31BwiHm0VXl0VVapxpa5x1ieCFhaBrZ9h3lgR7q oSlIklZtdoW44XZSaId6uId82IdZMmyl40qG93rtVRfidXqBIV6XN4akoYKKuCFk mIanZ4gTcnmnAYnuhXiwl2+yUYR++BXC106fOIqkWIqmuEGR4nyqODTW1IquWCT/ ly0CeIpVwWf6YSpxl4t/Qou82Iu+WDwaqCDFVnhe+Ir/xniM7sGJ+/aLWuFwUZg8 HCRz8kRyD5h8iyVbU1E2nKVn1RgyHhVjq2U3eicVbMeMM+dBNSc0QVOMyNiOyNh1 S/Mp5pgVeGgqqAIXs0hxGoZX4ZhO16hhH8dqnHY+IcZHIANq+WNJq4VH2OiEIodq 3RiQp5U2lORHCHk9iHZJfHdaMZNSuPZqunZ3LRKMhAcmh1eImoiSKpmJK0mILMkm sUciVIEP/vAPsRALt9AIbNUI5mSKoQhxS5GPXEGQs2WQu8Zyg5SQItlZBOUySrlp jaRJEGZPkhZRT1mUA5WVlQVImrYVbKeQEyZRbqN2I8dJiFVPAeWRaINaESkg6Mh8 /6soQu44l3R5ELGoRFSxDPHQDPFgRZ3YTnZFihHYZ/ZYU84hlIFGLBDJjf5IT3J0 OFJ5MiKGaY/5afukNwh1Z2a5WXZWcViZYZypFe9DkQ4WcrS1YKwFYgxpT/9YH6B1 Wx3EY14RjBzYIOxYl7j5LUMoe1QhCs3QDNQgDT4mNrAQmJ8IhfGyPBFnON1jaxlz lHgXSLB2kKNmlhg5WETZWq+JYaTmaPdzSJr1mQl2aZ3mSeUoWpolMfVkWYy1nub5 mLA1UonUlsbhlHxEUzNVFoaZI0YBNDn1I+04GUYnf2WVm9Z0VklSh1KBCqLgB9MQ DczQI/vhl59Yj/XSgc+BmP9e2Whs2ZDE15z/5JkhhlcM1Z4OSJ6mBmP5Y5CqKZkn ZmgvCkEdJ5qmWSylGZ8nGmEgt5CXaVK05R9qCUaxCVxnQZKCaFwp+ZJkEhl98B1M MAWyxAQuOaVJSqUoGZOe2BSowAzvYA/1YA+ycZOwcAheeZ5W8pPKGZQoFpr2s5gf Ko70yXGayT7js0f4AzigOUAXyaaE5pmLNZ8eShVNSZo5qp0S5j+21pB7qmK4RpZx ehWyOZup6GNyiYxRNx6mUA96UQVjdQdScxDb5wcqUAXnpwLdRwVIFQp3IKoHQQV3 EAp9gKoGMQWw2lSueJfyWBWo4G1eGqEWUQ3FyQUqo43//ZgotlgqF6qF/fkb/Mhx j7osC+am2ziWaCSkkIVQGYmWV6liOyqejuRxU/msdfNiNnqiwJejqAmamSZj7Aqk p6atMEKbwzgft9ktzQaEBrFui7FuLLhtradeoAFMObhuA4F5h7FtikEYiaFcytB6 sqRklGeM2LSMuroMXfql8FINFAqb42qmU+KMydlFTSGNaoOZqTmWx2enOCqoBWWn tVadmJk38bOoe8qVikpSnKmiG4qjrOai5JloP1un1sOhByWeHms48SmiLrKfy6OO OuWOWTeruiRUfRFUBFF9UCZLQ5dLprAY2ZawjaFkKfBDYJUCVnuplXF/rwiPX2cV /1nAq/UgDdXwLNsgrPDZnVuJkYpioUcBNvy5rMzzR3jUaieXsqhmrSU3mSY7o9lY mYDEUIVUkTFblqPmkdRpsszKslFxtPN4HEbagUjaklWKJpFRVEilGMpFbaqLGdS1 IZS3btX1eKAwbdMWCqi7XLRLTeamDE8KiaL7u3qBpVghBoTQpf7QD9uQvNVApncr sxybKGjaRYLyJ4KioZ17vYeyd+SIvS/yltERl88HtUd1ENFVVUt2vsqkZQahcwLh F+4gdOirbObLZEomZt2RbIiRHmuLRPNhvUfBBYdACPAwDajgLHNrt+05nWvHuTEy mLfIvRAcwRLcvYDISsWlLf/u2Gz6+0ugoALE1IOMcQcoUBlWVoM5WCEsmF6L8cGa McIjnBmjsW1B2C27KZNWcZONgArSwAenMLfVgHYJbFAKxMAugpwrMsFInMRKzB9M 2zP+2YXiawfaNwVVBWXyF8PK0BfbRlahcENbq1X5ihmLEX/LVBnK1hfvkMVo5rUR e6tz2LZutg03aQiNwAh0uwUdi5bpSsQtwrdL/MeAHMi18bkXfJJKOrqRcRiKDAr4 6hiLfG+VB4OKV15+kUuI4XmObBigcG+WfLCOF4eHfKWcGF83rHuGIAaHkF8be599 Wq0l+oQAJoqCPMu0XMtbEanN92N0yYgIkW3qUbZ94Q7/HRyHebFLcejLq+Ed+jvD asa/CkrLx5qHtjzN1Jx3pzQtySGv2EKMu0whkyge3qwCBPod1mYahqiClYjOlri2 ysibtgyyRyy9gwIo1Osn1XzP+HwljELPkRocTfwzNreOBrodeHBDoWEKGzzQEcK2 zzzLflwUfqsW+MicQ9k3S8ENGJ3RGr3RHN3RHv3RIL3RsXKeg/YxtvyV8+gnqrAN pyQto1PBw3WkHji6wGulibiIoZzTNv1eo+zOtRy9P8NB/nsVMJtgJ+emIHoUGf0f HF3RhWvUFNOceDaerKxqdLSZmym4j6s/l6tR0PmRQvsqCkxjXU3W1iOQcAqR/FNJ /4wEPx3J1tLKaytBDYUwtzozc8qKFLlcqQqdHcTc1+1xlwE4zQ6MrH3LRaky1FUR 1Xi6uNkJldzQIiEd0iuKufq0aWKtN4O22S5T0pUrmZrNntbplBxZlgOylGKdUh3n 2TM72qE9cuaplktYkV9dpqLGSZBW0gP2J57TOf8gOpAieLXJzYBd3GbFiUQ4zUYs ywC9nIFr1FCp1UJ7MBidKB991lwtuXB925yN26Rtn5QL3o+d1Y2NuQEiuJST2a69 YbItlkmN3nQztFjdR4tmlRZ32/ENPu99LKpQCP39BxYULf2cn2TRxDfFhTdn3Aou h2gFx9tUnLEwGzcZC4yQLv8WPooP/Q9+Ox8ZGrh3Np1TndQritGojSwUw9FFDaK5 PZDf/dpaua3kjdWXLblbHdf8kU/go94ujknw3Wij/bjeja2snFiglePy5NZ5RmtU PWCghEGO4gel9FuoNMgwPXgybcg7TdM6reVZXtOlIbxUYZxNsQqjCNSAq6apluLZ KWgvQ+K1bSWfXRQbzZH9JNU93t35HeOxLUZ3jt+WLdq1BegiedlgGd4A1NngveRi adp57t58fJawTWpBbt5IwVLb4FKeIxU1VaSTOinhu+CgznXOnKtTEeEjIhtyJccY vs2GDU9/29went1PDdWWxQ32nShq7jwind9ALuLwvd//Ow7sMe7Yai3bPX7agq5x fI64M+4+iD7fRTvrxA6SbH3kKIPb167bQdlST06yGzTgWqHN2UKvoV7uQtjONiwV Yo4UB4hwq7yH8MzcZ64U3l5gRj7pfT4ytn7riKLkRG6Wc47kwr7sr83aj03oQdri 833sApLvM6vaH6bbjIvndyfiLu7w127t+P6n6WljYKMz9twf/7ysTgug5n7yEMLQ pK7uKQJwbnFKq1Bw1PDuShuoW5Phfqusir3Ya17ezf4Ptk6n0Nrz1W4xTb3x0P3i Vp3xPfrijn3VLyvt553sf37WH6VoQrr0PdrnQI7tRT/SBn9ids7fvhYtwSbyVf4l /6A7017e9lvu9l2+5WA+FVkaQquscn1n5n0yYBSt7V+v6EDP9Ioy8ILfkayy67dR 4pIF6NnI+HqnvYvduVoAc4D3H96bFHv96Si/+dsh2GOj7jySES9PFCly97KmlW9u rKfzNbqYiy9S3fPY0fls83DauPMYc/VOLdW7+4AijIVH7pwf/NhRw3W/FGRe8vBC 85OWYiy33NLMJJGNxCA9+9Qfr/TSIKf0xAku/NzvHm/c0FDRCD689hprN7n2rf6V 4VMS/bXs0dX//v8RgWkBLSz98p9z5XGf/1y+/3C//3MvFQBh6N+2gQUJHvwH6N9C hgxR/HvYMCJEig0tXsSYUf/jRo4dPX68CGshwYWqQJ5EmVLlP24rXb6EGVPmTI7c bN5sSVPnTp49ff4EGlToUKIWU12k9i8pNaapTJIsOBKFCqpVrV7FmlXrVq5dvX4F G1bs2KsotMDQ8qLav7VHURqCC8iQXC6GuADaAuiuxocT+zqsWFSwzKNr11IzOVix TcWNHT++iFNyzo+TLV/GnFnzZsuQPX8GHVq0RrdKlVZj2pRaKlhJDbM1PZXsbNq1 bd/GzRXFCxi8DYocikK4X+EL/RqfOBo0LIQEEyvXSRn6dOoxMUeu7nFzdu7dR1Or tnZ6aYZLU68+2tyg7Nzt3b+HXxsFlRdnXf8j712/0ML/pqs9Z8iPVAQkcEAD92Ns PwUX1KgzBkG67EEJJwSJGgH/+ANA0Y5aSqnzELNQlcNgu4+9FKo6kaoUVVixRRRf VBFGFmV0MUYbZ7yxRhx31LFHGn/MEUgegdytNxgY2gY4CpdcCTioNMQvqYzy+6k4 lCRDbiMrmZRpy5Ss9NKxMLncCSfRkgMJTTL3sxA8pVIRbzTyOgQvNaeiwnMb9uLj s08/4TMLLbVMo3JNQy/ikEQo/TBNStO2KbSn4SYlTjjJiqM0I0zVPPQkSodz6NNJ s/w0VIhGRW5LVE9VFVRTJSIO1jBFDdXLWWlVzkxNV30VI1tdlSjV5MasaFVeheWr /1ZOgb01KGJRbTZTj9pMJZWk/nB0w0ZPO89a1u4DF6I/xyW3XLGK9G2tJDtlNyR1 C4Iy0oUYFUraWSn7tVSLcG23I3vRbFVWYC/aNMtTDz4YzL4iUphfZhkeNlaEG943 4ux07dXTgBE2zmCK9/V4YYND9hXikWtFOVWgBib5YZE51qjNP6qF01ro3HLUPDvT g625Pc0FOuhyUegtrfvk7ZfL/lxbdFtwkaZpU2NR4EZfYccUldikK2bVZas/Lhlm Uk1WeGKTxR65bGVZ5rjZjC++CWZM0e5V7Y65Pvnusu02u221o4VYak51wppsUEfl GyMLYfGjEGoKgZOKODliiv+oRHW2M8QRNxc3SM+H/NzH0IUUHXTTS0eddNVHVwHd I0dSciV1fLlna+icZCjejaDu8t+FbnJY5HwFt50v39d+OOFWF2b575cbjljaus9O O3pYK7YaQeCZfzlsku9OOW+Joce7YIqc5xrMrukmfFlXuVeebUSpmbmaAf/xA8qM OhyKvBF1vhNUBPgzoRXQgO4JVFpewzuO4EMcvohH8bT1GsRchF6mMQpRslYp6U0t VtmTIPa+xq+r/aprFmuZ4apHt42ZMG9+w9sLvVMcLMlwhW3zntjG9zyA8epsiTPf DwcXNTXtLYU2RJIf/LAaP1TDD3+oUGr6Vx5uZe5bsKH/YOcOuEUuyoc3vjlI7FSC j1+kQxz/8EcIPcMcg/xDdxq5oLOCd8LoSW99x1JjCQOWPeJdz3xyU6HyVmi3FtaR bRvLmNa48yucDLGQgCGYxCDZt8QlMlN8o1URhziTwpEqkn3byMzo54dtKDEl2QIK lTCHnjb6rIuvhCVY5lMfGBztJfjwRTp8gY5/pKMZeXTM0tjStKQQJFsM7BJn4uZC HR5OfmpEnMUw2T2B8bB81nQeCR95MvSJD4ULYibV4hbDv10PhpOkJPXSh8JpmkqT cnQn2T5ZyYYwjilNNGV1Lueh86hCc/4BqIlWd7qBpo51BD2oQRG6UIXWyHVIEuNJ /3CZjnS844zpGIdioNiRjZIJdyVB1O6Esr0O9tCczWQV+0KYtbcNr5N7+9fyOJhD ZdXUkjZdH/IUmZ1wLsxMHjyOwHDaQ5lGsp3IOuncYiip9wWOYfPEo0UsBJt86rMh dEJNU56CJCQRMJZf/WoCB5UUZGKkjMt4BzHUQY0HRrBkO01JR+cVoEJ0VK5AwUFe 8woSHJwkUYdpGlQy6JNxBtGRRIWrSldqzV3JSmWQSWxj3/YRZnbKSxjzlUo2CUzF ONFxWogjdfZZJyu2hkSn9SpYVcvFh6oroiCp6D3eMQ6KvuMdxchsTwrRkD/s9h92 XYhvhdLXlBD3I7B4l3MQVf8tATGXZqGdSYI4O13q2m6I4wTZl6oLGlUUYgrQHc9C csbPpvAsuQNJ7WrVKzSi1ecFtlyJL+pBjXoUox7K6Icy0pHboVJMa8LF328XAtwB D8W4C9HrP/aq4AQzuK/GPXBDhPkfyGB3uxfGsAQxm2EO92S0H7JW/jhXooKWOKEm ZiiKG6piFrfui68byGs/kg57+MMe9ahHP2yM27eCD2DFAh9vGbJR3xJYwMNtMHGV rGCGPLjJT8bIR93oGOl22MpX7tSGsbxlvzbkf/wMIFelsl4yb1GsC3QJM+yBD39I wx9sLoZbkxVUxOkNI8Kta57npefgGtgiS2YyhJn85Aj/SxiLStFfUKrMZUY3WkJa dnSk8UNF0qrmiq8ZUXrLvOk+PTSML0mHP0Q9ajnPGTDHeWpghDzYVR85KBEGtJMR POhZF5ohbERIogkrHUn32tfcgfSvO6xK8rJSPQfRNKeVjUD62Ac2Zc3INPxBjWnj wyN/6Riq7XwRABe4IXG8q09gPetAE/rPIt2crsvEa2G3292jCfa7Ofvhfv4zXGsR 6In1neJ9r7jfLeY3Qh8KOw02taipHlx+8CxXaL9Er3uNtYMhLGiNSDleNDMQxhvO EnbL2+Mff0y8QZ60OTUqq6vZ6ki6umyW++nMhBLTTMKtkZk/xtZQJg1AK2gRRvHv /1EN7/jIdxLV0WiN6NSJ7EuSDprNcly6TRf6hEZ78tWsxrQj1mLLtd6e1sY45jL3 SM1tvpGb3/q8b8wIeDOy6DQdPSZ2FMzS4fkYRC71k2vDu1HlrlmoK73vioS7SodH MKSeDHiFP7omi2rUlvb9JMqEvIPIhDNKd8u8rUz21jUvy6K999lRL8qEibmtwyAz 6Nd2vN89s/cqpZ4ndT8pTbsp2Xq5/kt/PyzfdxgsUB7SJjCVodsMy/jHpjQlmtHY 2HovzslIiN6ZE7HOYZPvgPu7+gC3fvaxT6QXQxT0RLF4SHNek9OjXu9HdCpSb2XE Exb+ajZ1e8GFmjDEGxzqhf+E6cBceFRu/kWp0MI25ROcmWo/EVK/9EOWqDIhaiIn dXqnF4qIBBk+7PEmuzOsPiI/kXMJDKQnp6shlUCln/Afp9GqPFm5zUNB2ni5tvi+ KaKgphEv8WuQtwNA5Ysfasq/4YsmG9w/bLI9n3gW+AE+mtqVS1IhQmInp8LBaCKe HPQj4QmkCew/AQwkJDLCP7o7UFI14xOfUPk9BAwW/oPA57kjNZE8IASbAoQQDSwP KeIPSqM6b7m6Q0uKzEvBOyyL7vu0l4AFp4CcjDCMbQjEQWQLQSxEQqwGQ0zEyQEm XIMXGcQItfsdTtpBQbJEQKrEI0ohHzKcTFw9Q/IbT1T/w5waJCPUQpearNhDpCF8 QkscQMY6wB0slcpaKthLKupxn5Z6larRwmLJxdiLJ72JwDOMO+YxJ9ZjCJHzuaAg NhDjmWOzQzyUxllyNhY8pdRojdbwJ1UwLSRJRGrYBnAEx28Mx3IkR3EUxHJEx+oS PQt6FAxaiEhhOxpMJxsEpFqsQla8JpRiut2DvR70lw8yKSRsRSS6xxvCQj3ywX0U KsDBR+O5RYj8ni28oUkCk5aYpmNxGxHSDGRkKlLswCvRssqZIjr5EH+KvnvTIu37 t5a8PpdkyZcEnYHzupTwJ6cJx/+InUU8xJ7kyZ9UxKB8DeoKP1bDiEIpP9Ubwj+i /0WAfCSHvESDLMZXYUqTosqm26OBxMUknMKbQkgG/B597MVgLEivlD2BzMJyuspE OkaMVKe1ZL7Ic0uK9EhKpMKJpAliTKWrMjk7Sbk8iUZycQd66AOsqAJ6oIcpUAFT oIfBREx3WAbFtAo7oAdTkEareDmyUomZ6S3OrKtU6MyGMMfRHEfSTMfSRM10ZEed C6wpsYh59DuvwbvBa7/1c0AAdKblM7jPQEVUzKnAS0slvMFvgiFTnE1J+s1f7Cbj pM3aFM7k/MVSNEDEm06QNEC5vBQm1L8PykIxaaqxeSaeYEOYmLpusTqVrMNYakxl WBGq0AR6UIYpSIFliM8puP+DKZgCyGxPZVAGeghMZeu6ddlM+iHQP4CFLegui0BE ofRJRdyCBZ0cBuo2CkGuNkK7SGyIpOyXukS6H6S76GzBgNSuEQ3RxoBNwojBGHTG gjgvPYklyHSHUGhPegCFxFQBUFiGE9HRUHAHq/ADd5gCZSiG9rzD9jKaz1MJbQQR Q4AFQ+BGiwjHLaACKd0CdLRSdSxHKsDSdfS2Lp0XI8Orh+OrLks3CzKQAimQZASm +HsQNg0N2yzRa9OsOY1TKjtRl3g+1UjJ08K37YNJqqAHO+DPFEiRPojP+EwBZQAF Qq0KUGBPRhXSFDDUJojJSvVTmhRQm5wyk0iFbRCR/Nj/BkPcAkMMVUIs1UP8g1Pl SaiwKwC7K7HTibIju5MoyuOr01vF1VztlztNiRE0SZQzwTGDpRidAhtVASogVhvt T1OgT/qsB8lUgWJVzBSghzu4zNY5CwVC0pTIxtTYRlXQEHOsUkGs0gfdhinVUnBE 13OlUnJMRC91NfCSRJqANYhTsiSDOJzLoBdcCQ3V1X8F2ICdDl4FidJYijg8z0PL NPW0gxRw1BOhzBQIUvmkzz6wA4s1VGVAgROhT/zEgxolUhT0tJrs1U11I0+1HwUt RCpY2T8ASpYdVcN4ULaYWZ78h24rjTyTqwnlCTEdtCUTNIqjNYtwROVSCX8V2KRV /9qlFQyC7YhmtLxWWo8XldE7cAdrJcxotVFm1VEWyU8ZRdbGFNsYDVnNo8Za2laU sJZuhQVYANdw/cZxpQZzVdd2ldIsTcd0Lce5ajUjg9WZGLefpTVZq7WcK1NbZdrE VdzFLQqkzblf9VZ749OV9NOXDFRCVdQ+cAdKndhEXVRGZZHL1YRHJdREZc8/RV2Z TBFMlbGnnTKRUAWU7TaejNl/qN3bFVWXdVlB3N2hVDiGwDPgHa5zE9ygbQjCDQmV AynEZdzmdd7nhQnHPUq+PFi/DFb0otoTKVay1VrFNAUgvc/7XAYgpdbC7FrKLEw8 zMxJUwlrOY9sTFDRHMdxrf8G+rXf0tRSvdXbd3U1vg0w/51XwCVeoDW34xUpcFmU M1VgAZFe6HXgB27eBs4grDLPS5O+//yTQJ2RGt3YFMADRKVPse1PRNVc+dzPHFXf 7nOtlUgFna0rDPlDL1vZGV7EP9gCKbVdHK5fmSXELg3NAaurITMwMY04n2UwfXUX C4VEC5JgCMapDi1CD22XjYSOH5RiJ8YOFk7RRolagmhRDPaTro0RF+naMp6Rsi3b rTNSz7NGoNjSN77SOH5jIf6IvxUMWZXVSTvcb3MaEmni2wtPGgzklbni9oEs5ARG fPQa9xnkwQBOIkTGwAO8OiI8UmSh+iucTFZCxWu8T0T/n0f+jD/O06rbU86hPkv9 UzEG3dJlZRVJETJW3cplSdYVClUlVQa1ZXXB5Ybg2SX2DDzmiFplCKT54+SrvU98 00KGCVs0SIBUrJBUDGju5NvTvbWEpGyq5KXkSmueLJcJn8YAvtnLFQn2VS4GVgE6 wWtV57LI1kFp458wTXeN53kuzdXkV56johQt5rY7v3pEwBqcv//DTcQiQDeduwP0 xcVzU/zrxMoSZ2cGSfsLy++ERX+OxWwCQ1X0v9zDywdEGyEay2AUQx50Jg415KmR SpkgSeb9CIOtIkubwywC43VmuZHN1J+A0AbNaaBkxDwq2ikzyiwm5O90RSHkSuY0 /2qSPsaF7MewqcSETEURyk1BIkhrNs6Jtsd6LOoy7MomjEIozGqp5mraIyQK1MWJ DsKvTuQgGmtk5sJR9IllvJIuk6piqxapRTaa1uvWaTa0fWefOE0sPUfTRMfBBkd7 9o/RM6YMDY6nZmpMnGpNTCdOBM/Iduv3k6mEtCPKruyCqer3a2agwkKMLiHIFutz 0kHugWqznGRujs5Zgcu39EpadEW89M5vluaYOA+XcNxRRkkRkb4+TV1UjuXhluVL 7T6Cw+LkxZMLFerG1uqqBEan9MfBEUuTJqLYnmbbziHNhsUFROR12m7dfMvmrEBN 9GyrPMuoRu2gasDsim7r3v/mj57F7gRnSubungjBxytY6n3pMFNe7N3rdV7fjVPc v0I0d1zs15xKbT6n85bs637slJa/CFfvkA5OlPrs5dNo24bof7xwCHdw75ZI6Xzv iVlqttTug0zvipweulRm1SvI3AYNpC3P0kLPrBvwaVRhkl1us1PioGZwOZJNzMbv q0bovDNFjA4c3gRF3xxorNyh3NzsbxrAgzQbibbk3gxxfrxoIbLshwxroEKniFaV 6sQjgObsiPTo+3ZsuL4Yj6A8Fe3inpnaHb/WNYavHx9mPh09pNjnNcFu5Rj0oghC Jin0aLY9K+bzkUrKUQ4x4FbJUz5u47b04sZ0g6LlRl//CGGOx+bSOAYOdAoxaAUp 9ct2PwlJdEemU5SIcU6vCZFiiC+zXnQWVjyfxnZGM1jvD8A6WlgH9mBn2tNz6Uqr OguWaVy/TJtuXQj+aXWbQWGX9mnHVWJHCrt+RsxT9mns6z1v9Hb8dWoX93GPuqDz bck15UrPdHUn7nZfnU3ndE9/vFEn93q3d2Ayd/+uNAAHzG1XX12HOZSIBS44BII3 BMHKVQTfOd6+94Z3eC7ruBuH6RyfaX8HqwBt9ow4hII/hEA4BECIBYCt0Fxbrowz eehy2odX+ZXf1emFx1W6ay/WdosX2c7z9o/geILX+ZwveHcL3JDa4wDp49JbO3pX /9pTv+8oNvVXL/HuYHSWh5DphVw9lfTJpfRLFx34TN8ZJeERhk960ASqUFQYMVR2 N3vPgXeQAIRVOIRVMAS2d3u4N4RDUHp/oSwGWTDiReJbC/B42e943AijB2VBXnVj dvJDjuqd8k04Z3xDJmTKOqxD4uhUT2jivOYin7/MV0AQ92SQHnxgc/mFoPUStHUB f6XBVAasKAbEVMw+SMzwLdbU51qroII7oIc01roVZN+TiAWZ933YeC3X+zu8t7Wf 31dFccctlhKoSfmmbz1UR/wPTfxNcmbFZ3qOKHz7dv5ERr3du/yQKSL0nu/4Jj4u bOTHp2qQfpCIh8MKjmnUUv/PGm1Yq3CHYuh6Vk6B9/Rc0KUKzeV/kQWIFzAE/ttW ENa/hAoXMlQY61+1WA8bFmyIgiKKjAkzavzHcWNHjxo/irxI8STKlCpX4kjY0iWO mDBlUoRl8OY/VQ1TpfSz8h83bj9PhlTI0WTHkReRkjwKkqFTkR5BNiVpNGpJpkWH cuVaNOpIqiaziv0ZMmnVrGOlXn3K1i1cqUuXlpW7UKlcrGCxXkWLti5Zvm3bzkV5 luldi2O3TmWL9y3Uwn/vrs1bVnDXzCuVHo6rmSu1zyqF7mwYmhpq1Kl44myNQgXs 2LJn065t+/Zsd6FMvUsRu4+yKfSmqLBDz3fsUO5UmFr/hhw2lT7HcVOvbv26dRRU XmiBEbraP56ZY1XbZihW6POqYiHUCdWi0cZTK2+UL5++6PxDX/JX2PLlPwAyxBN4 37m3kE+hGRSaQuL9FNRnRyFmWV6PucXZYxg6Vhhkf3mIn375MVYhhxZGtpmEJUo2 YYcTStjiR07JiBhfeGWo4oaU6WjZhztiNKOJJ164WGRrbbWYi1ZRRiOLSj6VVGAg hqiZX0uOOCVDqTGIJVAn8XTaP1qipgo1fqhSIERhpvkabM+5GdubbcI5p5x1qhAn PXZMERxyee45RQp9uDMFE1NMAVwoKCijDD2MMupOoyn4FueddFZqJ6WZWqoppnSi /yAQQQltg1BmCG0Ty4ELnQrfe/URaWSMiXnGJa0u2Rqgf7je2hCpBiWUakIOUiTs g6R19WKPFMIYI6xPIulsjUzOWKt+X00rVpAv9tUstMzmGJe2kCnmY2fKErZitzda ie2K1846GFxXvjWZffAeOZi6P+54ZGUZDklthEhyKy+XYNZq7IALgUlNNamlopOv FYnKJnYVW6xbCsuYAlsowQlHnHSQ0tNoMb6ZUs8Ud6ScMijTWfwyzC+j0J0WL6BJ 7E/kxWLIIQidBwuq/xjCqqzzxUekq0W/C7BoMTn9X64ACrjQl2lSA+w/Pi1YmmYQ Uoljsi0K+W+5QeLLIbxMH//7rLL87iulvWg7G2+z5RLF7bxMKpZijm6L6+7cPoor uN3j/luf4X+f/W3ijIPLN30Eqz02WYdPHuaWXCJMtZqnNewwNanA8p2aaFIcM+q0 5anCxyko00cKd/AJnKR3poCCpMqAYrukgS73XOrBC//pQDCkOapmQ59nSCOtFdQI Rq0anTTi01cf3+X6CQi1rVKfBAt4OGGNM4L5ee0V2Ho/TnnYYQeeLdzZj91+vwPH n/ffOK7vuLXksm32t9znuHOdyG9LE1vg/Heht6XNfvzTW7L696TGyY+C+ZJcBbuG EvFs6TRaWk1FwleRbZxOeKnDGHOWYRzffKw405lUbJr/Azwq3MFlJrxhzFAwkJqR jnwqIdM2wCNEiARRaHer0n2GhETOZLBpC+GP02YytQZZDSJYSxBFQheioGyuSIf5 oon24q11LUsrNkpSVe4nP2uNEVt1CZdh/jctOEqQRHJDFtveiJ/J8PFabBTYjdKo FX3FLX9gxN62Enm9yjFSkX4B5PzoQrkmbktdcKTkFjfYOcx9sExnKh0oKcapS5Fy lKaETZ4kRQVG2UFSfwqUMmpXJ93VDjm0g2GnclnKTfFSl6esE/FCdRDNiOEQhjim MQ1RzGPyDJPOfCZDeqWQ8aXEh13jIjRDhMFsimab3JzkAb8pzgx6U2leGSc60/nN /y5yTiFo8mDoIKaQiJEQh8FDoQqWMRwWDkcF0gFeDJ0jGxra0J4GzQ7NbJYma6qz oeMkkNWumAo/TLSiFKUowLDp0L2pcaMpwYxH+VVOj5J0KB2V3rFKqtKVfoad7ezc 51QTutGlaYihKeFBKybLSSGnd7yrjU9lE9ScErU2wTTeTUjF0qVm0CYjzEk6NcrU qVK1qla9KlazutLzaTJLnFQNa556E5wWNXgALStaUacd7nhnoVp9q2ggaiCHchWu dr0rXvOq171u1KWlWZiYyGQmNBHWI73cpS8P+0vEMnaxjlUsZBMr2UsddZ5K5Stf pfkrj0oVs579LGhDK9rP+v+VawlZWEwfJrHV1jOtrn0tbI2a0JvRqhmjGEU8RpvN qhUIaw2tq26DK9zhEre42QNuNTfJsE6KjnTONWxsoyvdslY2fJfVD26d4Y9mIMO4 FQTfU31LVy6W1rvmPS960+vZ8g7rtAqBJ1hDKFayTre+9oWZDrnzgh5iKRXxOE08 mpFb9VJLrlZsyEUtqmBxkhe5BH4whCMs4WyS9zNVg69MBwtK0okyso318GMnG+IP ixjEJgYmqIwnquv+RBWHeDEgAMEFZDgjH/i4Bz78MYoJT0mzUB1Q5hL22wrzOI4j feaVQFpkJ6FojREqckkb3FkLL+SdnFQtPedJ3/tyucv/t5kZDGo2RIae5BBcMLOZ uTCKfFTjGc4I044zc9JF6haivUXwezcZngpeciVE/qiS1zjnyx2ZWoUTXOPC1Wda lZPJ5Lwf5AbdQCabUZGy0oujDUjGRqrFM4VeWx87nUEps5fK7l0u6Jpb0ypu2cuu dnVlk6qZQBwCEC8+BA5orLBm/GhEg5b0XZ0qPtNSxCfZ+3RD/gxOTCIbYM3G0qHT lugkCRp9wIZ2R6NtlrIZiWwsakwE6weryKnPcEykyuR6FOqWkrrdDgYYzjAMQueN 9dX2vjds1tod/mamiA+hhjFH4cFORO+jci6ugatxReWmac/HJneow5IV8tJLj+AW /6O4D8lpJI+bRoDB+LbP9iElSbDif4QkjzoOGALahZEgl3PFI5mWwRWyQ+Myubdn ZUC3JVlac3k2+lz+7WKV+r1BntyFvzomTxaWwycmMdRHLPWnT73EVq/sipMXRIls YxWrAAQyRhH2ghcJcYJ0JJSuzVQfU7OrhN7L+35+x4tgE4/d6tu3w01zjuvLj3JD dK/9TqHC9bGNeJ9bGOVYwEoLUNpNDnnO946/eZWdcYrfeP7iZsb6TRBwakOiG7tS dIWpqYLCQq3D5CkqLeO79V4Gs5jVRGaKxMIgDwliRJY3NKJFT5LW832/JH9X3oZp 4QZ76dvHaMk8qgUFnaVfuv8cGGl0njxvnqcjyZ81fXpVP5wj91biF6cj7tvdSiqP luNrni9CWr7vTVpczDMfxwc2xXKfFxgDi/UZLZleuTEN3Uw9l+m4HgHaV3UNU2YY QkRwnSoEUSOsx+6hVCLJHfAlUWCEFngNm5CdhLE92uG1Dd6ARN2VW+NFXvrxnQlq WvwlDvxYXt0wn7n9XYrUkclNn6c50Np4n+KtIN3Ei/v5YOQxhqbdXN4F37IxmsrZ H0M0WIgcndpwUJ6Jybwdzwi1WgFeYU7lFw+51XiExr/V3j8gRESQHSLRhRH+XhKp 3VQlnPE13HvNXq0sXwLVEVxolIUIkBwCHjRx2+RNWjj/9SDPNQkO0mHjxRwfFtKh ldyvDV0kxd3gHKL0uQgDxd/Opc/+INIJYtviKaFCjJ46JZ2YAKCGCSB0RR3VnaLV mWIqVp0qkhjWIWBXGMKpcN0hzGLtRaAEvkoaHg0vUs9nsR2xBSPTKJpVlJ8eGZ5H 2GHHbd7gMWNJiFP1dR/GQZocgR/6ISLgFN66LcnK4Y80CtIiZiIkXl8xFqMXWVrG WRo6zhymDSG5pVv5YQh+vJtKCYuVpR5rsR4W7mNawZ5CgQccMoQC/sNDRAR4FCQu nuMFPqMFgpwaMpWdFR+euR1p+RXQOdRFUpKvPSSUwRyVPFlHZsaUUZWDeA5z0dQQ /w0gP64kUcUaLHIFMyUTFyCTIaxCQoZkVwhbRYzPalBUT67GROmWVAUaVhGlOokU R+KkWYDkwSnlg8BVvCndFNKbFboeHkwBFcTWFFylAW7HvnGhU34TG0IZPYalWZ7l WZYlRCpXYDHdhq0JKrYipzRKH9iJCjQKoOxJo5CMUPXSKhFH1OnOnQDHXioDFfhG y2iCpbCSXPbSKyIPWkITMHakWkamZV6md0kZXp0eTOFjlk2Mq0GKMtBGMYwMcbiD O0yKcpTMdYTCWd2GDIUCPbgm6yzDoOQTpAAUFdADPpmQP9IWZlIS8V2NUlZmcB4n cubVSG6m/50kKd6Uq9FDy/+0kmy4QzF4zD5NSh+AAnIcih1kZW0YigpkJRXYQR9Q AXjOxjJwJyg4R++4jh2oACgog3UCjzJoQiq9Jn6l2PGwWHIyTQbuZFga538WqIFu lSdiFRSe2geFlQjVm5fpBm88h+x8zB3U52ykABWYAj00hzvE0my0kDvYpsbwZm20 Z8a4wx28ScaYgnIApgr4waD05vDs0H6B5YHCWxUpXFomaI7+KJBS0nLyFShKoVuS YoetYlz2iZ7wCSo1KaAQ5qJ8p28YBxNIShMoA20ix1+mQKM0gaQwQX7CCS0xwaI0 ijLEJ2IqAwqMKSiUzJgqKYoVj2UFKbVMJtX4JFD+ZED/jhaB2imgBuoWKZto2SNb xlM+gmaEuqbGcAx2EkcKpEzH8GYx3GUoVEqkwihsiOiWWipAKYNAxY4dLMOj+EE+ bcw/sU4/zaZ+4tds4WhXAGAqyKoW/WhEEidDYNHCBAuE/elGGSU0ggiwfpajOVtS qgSwHetbEapwlWSY/N+sqlpKqklVvlYqtdDrRCqf4AHvpIByyA7sAM8MqaiXthKT yhJsrGekHmbt7Al7xtKewI66liu6Bo9LQma/2QQ1sAe/As1EHKhOGsT4OGFCdGDy ZeQRZaSPIuyUMGzAnCDBOOwfciMKQt62eV7QqaPZlaMQflymJeGmCYa2DKF+PB87 /1JgXkWlFIYVVYYmbTbHCqnqFLwoDH3MO2xMbBRDfMoGpz4HjaaQl+4ODMlQo6rA t5KrCvxs6uhbWwHkZzCCTpBJA57JmfwrkoXWWOYqw4GHw70dnylrQvypxIoI2H4N xMLN2Dba2JrUSR2ZtqHI5W2sI2KP3lHsAyWQkJwbQ5YscKkbtQ3foaaGYH0Ski6p 4d6lua5Sfv5JmzrpnsSScdhBE/iTk3Ipn4wpvboJLUUumLpQK81n7aBp78RpY86p MOFrVxSkqggoC5KhiGDg6m3WBrbXw3FUzlVa5SDlBIkaVgQFMT5SsJKRxLUj7iJr NfpcCP4uBCUhZliSxwIvzP8VL5CcIQvCneQdIp2t38XNrQKZi/fCH7M8W2VqCCcy DcHqaBQ+q2fOkz52GT7ZJqDILOug5sh06Iq60Mj8bM/Gxs/KkD/xJgCraaNWaT/5 htKq1auGRp8uBPgooM5IhEQcAvvtEbRh7Ya14dEtcDdZ7/KFnx3hXR4WBTeoDwBV 7Pgp399lYiXJIflN4vIi0AAFkiWyH9sSIeDJCx/y4OSdReVxn/iBVA7jn6jBX5QM RbvV8N4O8eTwn/yAIrQG4I5S66u5SVC9Zwo0QcrgTi3FzhSAab12K0B98U9lKqDs 1E6VUqvKDH9a12eoLvsaxE1OzyAx5NmhWzdm1oP+GPL/TeTDofAHltHczSHyGgmE yGMK7+EyWh8yYh8NUiC69CEIWyMMG6L+NJ8h/VEjgZHc6ZyUBPEBYe8eVfIOMiL2 bmIZya3wMWvGJrEOF0zpNbF7MajDOOh88SOLkpKctGoaUwcMUYpdGpQW3qjTJk81 KKC/9mscS1IFIg0aJgYze1bWlg/pKIwGa9MM32EIIhA2462OjLAMli3Zgq+0KeLj ee/6kTNSXiP9uYsKMqLxHg7G1kv3am8jUp4N2/MHCmHcmjIdyvOV+CoNY9rETglq ZFCRdtIoRnGSli5Ds6JDH25DR9Zj+udKuPHqwXHBmWEvdhrSyAgmYhaeUhFFVpve /xEe54mzCQbOCMtf8KbgSZdvIwZiD6J0/qkf3mwz4bgzoNlfCc9fEKYwJLrwAqG0 Potz3XoaBQGFj9JwMw70WrrToWIZ+yoqS1Y1Dv0mrA6FAgICBHc1IyRz0ujiIol1 M3/WrS7cSA8j8VbSsriR7p4yR5dIIYtRS7t1IucusHKbNWZf/o0sKUMvNprfMbot IG2yHX/y5Rnj8z6z0PFwyFIax6IRyo3zuDAhl9igPKZsFD6xtK4adFo1aA8Pf8qa ZthEeYxQEJkH2UlcWS/zRoPzRgWsHos0B55XoQF0E60tPDK1oCb1ZjDlVGnmf6ps g4pVFYY2cquVVzZt13YFV///DL8yAnuAtRKJ3GLf8V5Fs0IkGHdXlHEN60kMKTeB d11jd29/tEkB9zi5m2XbauAuXUIX1kI/tJxGdH3Tt30j1kR/xiqkdgilNiA4G4GF NKDi9l6xN4Ib+HmDFqktOO2emvqqhuqxVrUmt4XLBlYr8GcAgiHMpIfLGCBsQYAb GoENp3gFqXivV4oT3VI7OLUkOIzHOIK7+Eo4sXNG8WdfuI5TxwGiLo1zRYAK7I+v eFY1eEa1+I+LZHsnuUctaOcUt0HkcWvtOJUblY3yG5MPhXbTuCoj6BE3kYIbqIzL eJavJWAhNOEqNETjN5uvuZtfHX9mXZn/BIEz+Zejk5H/4zmS4ySZz3mzVllUTzg9 VXiVhzZWD7OfJ5dNSVR3J5iDhznfdvmQ7bl5JXiiR5izoppMdbZNlWKhf/q9UvSl J4RsDyxKGGw69dzdrDpnjbmrs/fXWizRPV5Rv/PDil/0msSrl3O6qfeoG7RpSCXL 1vKnFzvTYnlmwEMxvMOyNzuz24N7ExYGb1g1B8wM3nNSh68mkzdckWwcqlHPwdEI chQxKnF1p8ukXXvlyPjMsW08y3rzXnerrLVCTpI+t7tTb3DHRjJsc9NBC+6Rqvl9 v3l+t/nAH/x+a8Y9vAPDN7zDv8M95GidM1S1b7CR3SAIAnW76JZu+7StVy9FjKRi /5PvCm9kH87gYmimk2C2pL2t8e4zteFcPuNgX9gt+AqxWu/PBfU7NHGmSUp4ohYE odubH2BlsX9ZAjc3167EMrwDNdyYPSx700v9Uh4rz1PS1EwRrzrXtMdyxVv7x5Y7 NqM8uxTrXU0v8mps6H0f2gor3/xIhZG9+Zm8qlMyRwg3JEeJy7M67+r0DncbPwP+ Uf8xyX4f5hlrzQtdvudHQfcf6qUaSr7l0JcVb9al6gTHeD5Ko1zqdVCBO6Rndayn 5++laEqndPX4ZZ3H+SoEw/uDQvTDw78D3/ueuf82U9EEQ2T99+Rx29W2B7b1NuO0 8h6+XaFzJXOyI9q9us/0M//yDcWJ7N2/uvTH/UtfMk6v8uDXs2Mnvg/D88qTYPWT TREn39HMcehdzvFlj5PLGy27Rmg2CmlCymn2xp2s5i4nx/3HBoqqzB3I5srcL0Co EDiQYEGDBxESRAHjhZYX1P5V+5fqX8V/hgypMiTRYseKxN4Ve8fM3z9/IkUS82gR BQqW/1y+XDlzZkyaN3Hm1KkTB46ZPjsCXUlRIsRqqlb6+Wd0qUVqFHdGzdmyItWO LV1StVoV61aYXbuyBItValmzZ8t6tao1a8y1YeG6bcv1K12aXq/aVCt3ZUtuf7nZ 5PqXbN6xetsWxnvY42LBX+OKNbv1bV3LNRHbhYnZMmX/yXUrG8Z7WbNYxXZHo9Wp FfXe0qpzUpMNEbZUihBxz5adipofVUUjNpWIYmCK4scFGk+OXIXy5sydRxdIDxQ9 OymcKwulbAoTelOwY+8DSvmUPnaoSBfIxDgVgXb6uF+eXBn58H2Uhcc+/zl/9f0B /E85FF5gCAaLtoGlI0NWwQgjBWd65517KJywIgklrKmqDQV7DDLTTJPLw9pI/Kki oXrq6cQUaYJwG4uQ8ggqmmYscbW58oIMx8ooOwyxyGwMUsjPWgONr9ByNJIuJPsa UcfCimwMLMCoJAzKJC9jq7PHfORLStHGIjKqHpf0krMoN2tyS5nWZBJLMUl7zcPU /4YsMy4y46zTKT1p7Ai43J5C6sWKBv1nG+ISSlTRRQ9yZzt3nLujnim+u4OeYpxL jgpT6FFmGXfqyVQFSqdQwZ1l6FmGU3oO8tQ5O+gRldFZGUVBCxgckkiiGjUyBBBD tuDCkJlAog2fYuL559h3VOprw806hOslvdKElk89gcrWIp9Q7FPXpWLsSKmKaOuo xmtFkxKsNZXkiizX3kRX3qmiLbNNMz/Tsl068yRtr7DU1DLM1PB8kl117VUTTBz7 xQlPffXFMrR693UrSYidjNgxhdmEc0gmefSS33mvnRG3anTjLRVYmPoWIkRpjVlm 66bgTjmabcaPnlPRMw5W8P9SaMIdTAmiwp07UtgZaEqvK2gZ+wTqwx0AZa7aIAIN NNRQCCtiECNhy/WoGJEs9CcdfP55J51iNEwzq6vUZevdaZ0kuSxt/+m225lgedHv f8K16FyPxrXb43xF3jExgOMc2fB5gRQ48Svd7fFdxs/8Ukw3u0wX84MrLm3dtwBm XG40pXpYxIgrD7FjHV1/NnbY427Nci655JjPzydevO7H6xwc0N0o+tt4mK1OHiFH U1BVoO2mILU580LhdGgV6AnluRSiL0h65p8DnyBTllGOCktlVb5qFKhoCAamanQQ EI5o8iUdZvAhJll4jPmnmXR80SRpdagxBYSb7BwHvJX/pIhFetuWt4QTuIoopVxh G9zufKSwf5kuM6BrmAJBGKQEpm5OFCOhwyynucmI6DVnUZ3dRmjAyYSQhjW0IYlu 0xTdyEYVvfmNcIAIMwFBh4j+KWJ/rMO976TAHX3gHndQUCr9FIM7TUSBcsLTHyrY LInGSdp1olOf/agAP/sZohHRGKAiYq1ACOLaRVYRNpqkIx0V8cc7/IfHY9VRhtYi 4AGtxaGO/e6GQsnbIU+ESEV6xEUwGkoqIJkKP0Qykje05CUxucJMblKFJIthiQh5 F7SEkpOlNKWQaoSbpaBsN4JCEIKQpz5ZmioUxiFfH2I1qu+Ewh3geQ6p3GEKghSj /w/e+w4tnSO+gZDPfLBK3yxnZStcvQA4NaJfTohxv3/AIx3UiEcx8DGNdDQLkH4s p7tA1DrKcdKQ2WJR3t45FCBSQ4KYrNJfTplPfe6Tn/305z8Bys8cnixlT2FZcJjy MmhC0zrNMVoX8QDFTpVqVMrID6zsUCqp+XIgRgNPQ28GRoI8bYxSG+NCY8bGA0kk QWiJRzbHVoy1FQOmyQpoQGHBUq3V84b4vOlPgRpUoQ6VqEXFJFQquJSUFS84x0Op LMX3KV9KbwrvcMfO6GEKpKnAUldVpkC+V8uBfFUFoCifQKiAy2c+NSELachDgnPB ncRjE5vQxF3tqolN2NSop/8kSgTt6dO+DpawhTXsYRHbz4EqtaC+KUoqgDOcI55R jWmk7Bj140X9NIEJU7iiGaM4hSZkMTqZXU4WT3tS0k6WtZZFjkrdmFjENrIiPAUe YGSbW93ulre99S1OBvenVmqNCqko1KHYmlwierEgzEXIWpXLVmnmKq6/Lepfi2Jb uwnWut317nfB21vZFIqTM4reFPyAXoqo7KDVSC9kmxLL6M6XvvW1Gmz99sbw/rNv WntRPSM5SUgKWJI24u5+EZxgBS84n08ZsByPapFJPmWHDtYaeovrN/nal8Md9rBA 2Oc++DFYsQiNSD0pqEOEylUqBwaq4z7JT43h62OJ+6D/mza3urtkjGGi4/GNaBhj 1ZDSWSTmkyRVsQ3Z+IG8EVblk+npw6JoAb1TgK8QW1tZLV82y1x27Ze33GUxfxm2 hNKvkUtJW8ANBcKCg42Ld3y71c25cj8S8uHidWfgZbBdfY7baPi8rnsJUNAhKiHt DH0lydmZX4C+nL+ITEIguTBagG7dpQ/IQUc3enZ1llOkRaiYI33uJrBYGTUKUY1t 8KaU5p2kgFPmSiqkd5KG2vCHcZ3rp06Xmk1hMZovmcPsJkXF5KrIr28C5x2jrnG4 62O10kJIPdtQcgl7EuU4N7pRF6nRv0OS3BzDu8XFmWAj4jOeSVSwaHdQLdzGl41B /0bjKMHrdOh8XMjYlUBJpqIQkyzEP/7Q5hvmENa8oUY12GuU9GohxbfW9cMhvr4C tZGlZwZ2JnPq3zXLCCeFi4qyb9K7TjY703ODnbbprM7S+a7Tl1755UBd53UmmuTN Zsy1SU1obN/8Q6QOdL0Trekw0XzkoTY0syX27oApfdANm/GhEXfymcNw3Ej3iCoK gfU/bCPgvRH4TL4evJVA2cIvUq9/HR5xta8dIW51yIgvbsq/GgXF83QKsjsCchTa zs6zK52SeixyfEcdY52kt+JaSC8/I4x1mJa54mAebXKHe+gw3+DkHq07lWeuxoSX N5G+jbCDsVvHZ1oLpJ0NGv+pg1DUldY3v/3g3oD74d870Y3dcoheP+wekhR27FJm HcQxhxnMXib+8Y2f/OErfz5l3lrcTalmAAN3J3q/0c5HvrG5sObwCWMdvnunaIoV /oOm77HOMXducJNu6CjkOcq3vXNxG0zmeZr6hzgvpBfiGPRmMjfiEWjb7G9OWujy noX/qA7/rM5PJGkbJqzfpEKVcE9wDE42GCsVXImpCCXt2K4D2Y7XvgXvoA+EsAtc iM3YOC4nrO+E8iz1JGP73qb7Qqf7Ci/eLgYAY6xzQi4x0E8GaS6BdJDoHg9KgE7z cG7T6sYG9WT/Pk8zQm/pnNDzPg0z5g9OoI71qs6DhiL/9vxg9jzO9sJuSExGxXbD oFrGxDjQA9Xw4fDr+UZwk/rrb6bvJr7QI3xqBYFs8GrwSLxv/ATw++LvD2HwBvMN 1AZv2XwuC48wXcpvCHEn/e7kz1yv8rRNcyivCuuECa2t/1CDECfGE9/NBQsxz4xQ XsDPxm7CvZZCZepwk4SHsYhH45xqDWmxA0PsVuDuDSMssuouqdyMJrhhJXBrhW7H 74iQCHeQ/NbPdU6R7yCv9ESOBRuvdiCtz9SN/oDw3FBnxoLO0QRo8a5x8RpxyEjP 0yjP76gR0R6x7xamGh2vcUrRFEXNThxHFWJPyfxAC/ZpsSqsh34voYIDy4pv+Qhy /yANEvkKEiHJbOIOxMwsKXe6y5AWqSOkT55uQq6CERjx8N5yzrrIZGTErx170Obo ZWAm0RIFrf3yzwkrTYWOcdogJ+agLXV0sUS0wB9bsbw64slYKVC0hlBgqRaFUu1A 0NdGqYMmr21ex7BUZIE8QiLdLKFQbN9ejSoHBw+HsSa1citNcZS8kivRojd2r8R4 sqBOzcSAIw2Hci2VC7YqbicbpFcAARDOLBzPqciWsrCa8in5km906r9IJCNbDCwJ szAN8zBtBKn2ZIcgSWv+0tbYMjI9zO3galc8IiN+hQsAYQs0JAar5Y8M4wBbT5AU MKDwBp6akoEgiO5qQzDLwv81ETM2ZXM2D5MfGVPK7E6yDpL5FLI3efM3ExI4VcD5 WqojtsFrfOWapsWcZMdgqOVtSBNaLEao8MaBEolvgLK23mw7abM7vfM7L86ayHC4 jisoJfM86asoLdMjGgRYhqVtphM6X+c5P9M50a2fqvOB9kaeXEa7dAI2XxM8BXRA CbS7xvDgzLK9giMt0bNB25Ih/evMqMEQxMAQBC4+o7M561M+5VNDYdKGGEhFrHMi LSIOd0o1ADRAC3RFWbRFy+LglDOTXpExmcp4INNBcXShbvF9qmslfgUQQk6GCBCQ PDM6O1RD/amdFIlbHmgm5u7EksIqq7LWUlRFXdS77in/S7VUS6+0S190kv7gD/yz hmxTN/zxhwBSN30zONl0N9t0Td20+SDUIVfiOGN0PpeyhOJzND/zQ0E0KFYkNeOJ kbJz48zl61KhSs1C7/w08e7Tt2ASAQ3nnuqEUr2rUVfjKwnU6x7rTgduJ3WoJzHw J0kVuXL0VNWnKCFCrsZUlAhU2EyQcIqtKVZNURfV/QqtS5aRMzDVqNRPV+nxI4XO GLciS2sO9dbxJakEElXyn0ySHBmx5IrRgIY1HfEyL4+x6GAjETPvBTty7PzAwSAi 4FqNDHuSws4ysuILVdn1viD0LfWvQDNODi0SGIekSlPSBS9vnXjOI1fOJScxCXEQ //GookowL1dfiBPbBDDUrVdDyC6vL+pkQg//iGIJUfPK7UfSCZRo7F9ARFKdIlz/ IJIQLgxDSDGNjUYdUxbVsl1dFsQY4u161EtV40mPgtieLDi4QQRbLEXXj9GYlV+1 8bd+thtJT2AHcE1wSxk/L2EfDwr/gUrc8afkbAGzhOlyBGTczcesTfwOjf0QTf9E 8U4A8CZ6AxZoD9Ugiwo8dexMNkjKdDZ44x/REibeVDjhNG/xdm/HjDgtjmajoiJT cCZ2tlLRz8far9qO7ltzixIXRlgV0PJSby2shO8eF2C5FnGjhGEL7aY08cbK0UOj sU8tFxQ55Dm/1mImzeiocf/cdhW4qGFkEU4pfCMqJJBkxJPsRrU8N/BlfVdR1HMi ALdmFzRWxWVPLCIYebZnqTBx3+8lvZVxdSsIh7ZfXzdLlrXpIJdjlDBpvw0FllYm M+lzu01iZ7IP2cRiwaTkRBNqUZF1EXFrG9EBw1WSZC8CZ2MCU/ZcE654GfR3Afhq IDS/zuIe+EEaDvgeSqJFTRQwBzfvJkhPfPZ5r+1xXS9s/dV5Kzh6nY0bs3cG/a9s nRbn3BcpCSOoyBdp0eT/Rk8KnS5gN/hpr5BjFS91HdUiRjZ2mWwszeJtE3PsYLHs ZPFGA7iIh7N9cHFmpUIaokEapMEemtiHY9Nme1FrqEH/MJd3MAmtGrv3HKW3cbs1 dLy1eeeiSlyYaa03dN1Rff1lI0sphZN23ky3M+aYTgAx+zJjhmtD+/jwS0AWbZfM vXLSyXRoh85UXZlCIPX2bhk5ThfZkdXDb8+CGe7BiaWhkuHhki25HwRUcM1FGH/R cCXxGuGF5MI4gxHW8Dq3TKSWEqcVgwvwJU3oal95Ed14fEO3EqPVdNKRl3dZaLt3 CpckHiktck7Dj6W3N4KDh/MplUJVbl2pUE3ViANYVYXXLKQBH/yBGvxBm7nZm/1B GgQUVumJ2ArFNbNYi7O2CW0uG8OL/DiPT5M3K2MSWh912YjEVn1VJsVXfLnSvQqB /xoYTqDMNUHTdF2puZrf1Q3LQhr8wR764R4ieqIhupI7+TEBbMAgiRsIbJADc3jl RWoZ7JY9V1PTgkWxDr1KrClSdqlWdhYT+ncpMxeXmBr6AaKl4ab7Iadxmgo3FttI jIpVcFJBWoJJurv0uaiVGi3itgzpVl0VmW8huZEfuaqFU5Kx2R/6YaK3WqK7+h7w kkPr84a/y5PtdbuW2sCSesGOOq3d+pMt4k8uMJpLtWVj+jyDN53/gZJvmh8g2h78 uq+ZwWE2dGLPd79KsJxxYq2DpK3d2rH3C7LfWqkPlH/N0H8R+q5ftg2LsyxO4aFv 2h7+WrRverBdlT5J059lq/+BDZVwFUiyAZeewZKxJ3uyZ9SlbVTDNNt3d5Smo4IZ nji47UG4nzgUXLWwT/f+vEuoky2EZLu2RTo2Ybu2u7Spo+yphW+qtduqqVqqHxmr PXunnbiSh7uSndi0+wi1oU21E8usjy2SOJqSGnNSp9s7n3s2aZu6i9qZCYo8X6l3 d9tlrVmvUSEUTqEPTsHAEVzBTwEVrhW51zuo56kXuSGpVg2E7rtL65usw2vDMciT TFq/DYcfLTtd7c6uA3wo3ZKhY1KegZrB5vVEUzBFPVpsoSTDW3Ac4def4M8lGHaQ vvhRHXaVa+yU06Jy5TEZjXxMLphaZbnIqjVac9ynhRn/g6Y1ZJT7p1C2kOWWqR5z mlP8VGdaiUXczXgRZyt8nvSa0hbbVqF3z9gbCzXHp47ZarU1XvaYnfP8zoEsavP7 KBWPw+PMfN1GENlXjJnNawfd3kqz80B4FPvKuucWTes2qrv70rfbuzUdxOaUxcu8 ItxbeKt0zTWJEDm3doxZYDDNmFUObJ2zlpM8L/AJ3NYb85jR1l+O0d4x/Njxi8+R doLZStgv5dTR8nbw6LRQYdsNmUVHfu2YYTamhGm9ntd5hNFFinHIT8bTJ3mXiMM8 R/P60zmuP4ktGCGM1NdN8Hw8MOAmMgBxD+eYJdFXHFvcKgSL+7zWG10jmMcY0T3o /46ZfB5LOM9mnWANvZTxWXtVuIVDk+ELMWPlHc/3ZfViHXFOcl5uD3cXs8QV1GXs 9tvFfIA9/dNZG8AUtcZDLfMg5t63tpSxvNcFvoLV3WF3Yko+ktEf/t1hfn1f3gDN sfXW8c+QtfSscN0NPlgDT9rKUVKdloWfUOETvuh5dU8Ffc+Tzg8xnqU13iOGR4hz G8VBXg17m8w/nbnFJc1fxILgHOp/nNld3taLnRsv1tXvdUsNNo9zDH03yHOWXgAx Fu6DvN9zHo+rAsnh/U1grO9vuOmnPgqd/ccIf5TPl+Yjf9X1PEgscALJbjYOOTc/ nrszHdNBf/TPCLylwoAROP+nrzTUE/Ui156NoxYK3z5zvRcp522W887udT8PRaac LHbfO1jx6b3mED4HoT2E/54u2P3REV/pz/j8rrYTn785Yf8Qoz3pJj/Ojz3HR/e6 QLW/uf2/vT3s0XPAz8KJodiSsb02JxyUmyyU0QVhVV4w6BljdN7xXhnoBxYmdP/P az7XAQLFv4ECB/4rSBCFQoQLFSZ06PCgwIYGFz6M2LBgRoMSOV6caFFiRI8kNz78 WBEhR5MUD3Lj1hGjxpY0R5ZkOBOlTZE4R6rkmdKnx5ZAh4aU6TNkyqU/O5J8CjUq T4gbZU6VijWr1q1cB6b6Rw0s2GrUylJLdRZW2Gpi2Yb/RaEirty5dOvavYs3r969 fPv6/QuYLooXMAj/Y7sNVteBzKRJs+f4cWTI9xZbvow5s+atsBD/2/ZPFUmYUf1s Ps31perVrFu7fg07tmzXqGvbvi11J+7dK5tafsl7s+6svokHP448uXLeX8UODGu2 bKqvoD2D3gY3sPbt3Lt7/54XRWEtL9b+a95VGjV/69uzfy9tufz5i7+6PSzaI7dU fvj7798ffQIuNtyABh6IFVEIZlbgb6QtuNJlxSUIYYUWXvjUV9CBFd1Z1Pihyn0i HiRXCiWeGJeJKaKogootsuhijDDOuGKNL9ooI4403shjjj3u6GOQcQ1WGAwGJWZZ /3z99HPPkkw6eU9lGE5pm2KfGZQfRw9SyWWXXn4JJmrAhUlmmWZaiN5hYkEnnWig DfTmZ9mBR2eddt7JHQpawEAeW2yluZU0+PRjD6H9SGNoofHd1FNQvZ1Jn31qUpPl QFtCimmmmm6625icfgpqqCShBx1ZZqGVilpq+inWnHi+CmusdxJp2HVWpudPk00W qiuTi0ZI0EEVCRsssaLuBst1V1b6z6XHPgtttGE6K2211i4I6JrRTXelste5Kmu4 4o67FwpUvLCnedlmxcw0/NjDjzTvxjvvMrkZO9GwE17blaRrMUstvwIPTHBtnhaM cMKbaahtdKp8GGJbEs8ppP+OFv94ccUYb6xxx0B+nDHIGNNqJJy3cnWKP/asTOi7 hK7MTFQa6auvUgpjZWWcAN/Mc88+GxTwz0IrnOaG1Jh6lptHHgkuuU4/La6efL5w 37pYMbPyY1lDxvUpUDFEc7BgD+0Rw24BDOB/apPNdtuQHux23NUyXOq2aZmHN4lQ 7833qySrieRip2QjmWP3TCZNzCUBKyzYY7vdWbehaXmeVKbJLaqCXRaoeZkNyrxv VHAzGDpqpT91OubXNhfWcxyeSh3g3Tbdd+22AyYeuuWpabVUqPRxCvDCB0+810Md L3bYxrbtL36Um2b0pL3fZhJv1Qv4OX3ZJ5fU1/vaVP3/9UslhNn2TnVlPlSjJ1hV 6jf1pttMScV/UVBNdU5U5yKNz/9yNZEvvlDR7XWngtiIzEMxkXksZAzkmAIf2MAF OjCCQyKMYUwmH5bMz1FyyxmWKDe96dUmfcJxX3BIyD0T7qZ7qPueSqxyvhb2D32n QyH5NLO+3OBEQiwE3w2pcsNiWQWGP3xhTojIwf2dJINHBEkRoZWm+7ApaVeCE9Nu h8Us9kVqfeKd6sIkqbM9zyCtc44ITXe/ozSRWDVBYlEggpKi2K8n8lOh9Yw4xPrp UX/vK+IQFQS+nMQwkOP7HxDtp8c5IrJ+fwSg5hbCDZCEbn4wbFAPX/g+JArykJxz /+Kj3MhJi/AxhXJ0I2/KIh9SjcVuqTIPq96ixVjKUjAWNJKtvgimZEmuUjCZ3uWQ o0FHOvKQT2zfMD0ZykfFZI0WGg5VktlJ4mQEmU4kIiGdYsw5QrOaRixkN2O4zE9u kprKXM3nLonNCaGzWBy0pjcTaZQgng9/yASKDdG4xDgiZ0PLydYUpRM7b8lplgSV FRXkclC9mAtdMFAXLr/UvGrw8h/Qu1IZK6ecbG6zf9McJDPTOZVvPlOUdjwhHonZ 0Z1cD5A7TCk55Rk+FzJljcScpyCfeJVAolOTgsxhEBsJTmWClJ3i/Ok7TRlNnM5U iDdlYhKHepzo9HNNBCzLw/9AdEA1JZCCXJ2gVyUIVgh+VawV+xsGH9olDw5koiHU HjmB6tF4HnWH4ZRhXWeIoJ3SlaNN9d5Si2pTwAZVqNvsKP94Ksy7lpKZ15SJauwK UlMe9qa+SSY7garS4jT2pKLso1MXCdV9ppIjRkNaKpRmRTjRrqCs9c5BE6oC2NqF i1QTyxnRaiCzgWWipgHNRb3i1sh+9Jp8Taxw4wlXeS5IrzPcrDT/+lcW4pS4ga1k X9dZzI/WFbMivamzmKvYn25SmZbtbmgzC07EAtCzGf1JeUsKUaoejZWqyupqW4vf cP0NMSfbyj0gE697+AO3uImcsrJEGl+2Vyn5o4hO6+j/yUU+GMLbpbASl8tZj6oR Kdu7JEmvUtxjRjiwi1WuEh/Z4A2/tH02G6pNLrXObII2f0ah5LDgR8caf9iwKGYK e1Po4Ca2WICuc12HuFUdyWEnvwZFqJPjAtsoPzm2U5atXaSs0PHs7k9JikZkvPxb AmsmoggeSEVJchay3TNMa85rZeFrrTYDLWhauWdJ4SxmTg2wQx7CqsQQSNZAdzWs gxb0WAtdI7N+pr9aYcbhKCMNeEjj0YjK82XUOjlLeaU/0+m0f257rVFyStRTyqyc q3XqOZdPQqy2NMKiKN82VXHWS2YylKks5dc6Wde35jWuqdxrYP8618LWNbHnYuzw /+ypi1xejKDegw9ow8fV9VnVboFG7Wxru0J03ra3t6LK+Rawlda+z31tjW46/e2W zs7Vk3j1pMN9G2cCLfO8743vTuV731jxZ1WRrOSBYhHLxa6ywW+N8IInnOAMP7jC H05wwZwrXV50NjUMhShFGUpxjJs3mbHN75CLvCvdHrm399yhq0Ysb2zZ6qFfTmiY GzrmNIegogOHqyU1SedQklLHv41pe5t86ETXUsmLnueircm0qKX1ucdF7KjvuuC+ TnawpX71qWN92Fqf+myXXduwgJojjm5ZoeB1dn5w3FH50rZuKQVypMt95EefO1r3 jDQPkdu+6e6732oJOEZnJf9lZ2fZys6+9svimWwGXhbIO83pT/PH7pQXc90rrzrW kfHfsbOOwJ3W8IU7PPQQHz3Xq3B604t+9cIWjJYdupjGcE0ys7dHKBZH1Gx/XNMU la/0ML/gxbfXe6kuoWWKT8PNvAT5FDo+8L2Ecrv5meV6kzmirY99jcGq5ha7ueCx copDQdpwkkk8voCe2kw3yythNsjYNRNA28Tff8IfYf1Jh1cTC5XEx6+hHZm/FSjl QhThU+yDY7iXYveTSPpzTqAFP811fwGoRiIWLbBmNLIWJxn4dN+xdVbHdVmXdQeF eiJIZSOoAiaIgiWogiTIgie4gi5Ydb8Ggq03JGDHKu//NxCoEArEs4PA04OngAq4 tzy6Z21wx3u/VEatg4M8RH8QAoDG52b5N1ghNoXPZYXJNx81VWc4UYAtRFc+dFyD lF3KNWTvFFQMtkGfBUTWBUWbJ27ScTfl1ip+d2WqV3qsR3qkp26Ax25NGIE+o0sH 9niWM3w6NoZ1tEfuNYEWhmJoyGEV8mDrtViPeIWUOFLfJF6JqFhtpIiOmGPcBWKK NIHhFGRVSEnAIVmZKIbI1VTjFFqqeGEQmE4jlRqzYYuv8YV/GBXtxxxoxnkB9y2x kod2CFsmqGvG+ILHmHrJhowtqIzMSIxTJnEMBXvPdxm7t369Fxa+xRFL2H+jWFgj //ZHH7ZMGxVXFVaF2PNm9qRd+0d8pUiKlMVZG1VT2PWK9bhiLzVdbxVhWkhYM7F8 +qeKQvGAUJWL8DRZYoNHmTQz8PgUrSF/8tMaZYgbUqUc0WcWKpdVLTdzHdlAdFgX 3Od91ogZQTeIUeGN32iOAohj+Ghc42gzMOmPBzJhNuWQ+iRH1WVM1oSJ9CiOB2mG MlZi6BiU/KiToHNUqKhOQDmEiUWQYRg/CniGiohNSgWRd/RUCsEaosWLu6F0dYOB S6Na4eKBZSmDv5aCLZiWMMiWa+mWL/iWanmWZulrckFbVUOS1/hn+fEgveUc3Rhc oChd6WVe4NVHWviE8HeQg/95jh3WUlTJk/8oXIY1kIWpXQ3mlOaFjixpSYspEAHp V0q1ju40hlPJKC02YXBkdKvRhDOWE6y5G6g0VaVFX9QHS/k1jHgYjbrJm3dIg+UC ePyVl5bReKDBl+5HiFlolHdFXY3Zj+1ojlI4IIaJXmaoQ9CVmVT4XmTIlFD5ky6m j+B5XN3TmXNFEKqRRkFJXiu2nq/If+KZkCiwlYl5nYDlRrCJKZpnZNvSeUq2gYCR m6UHjQOKlstYoAT6jAeqoAkaoLKVO+RRjcMJbpPiPNmojU+RZkBmYzpxUhxqiBrG YdzkR0gBiRlWk29EaiS2kywlmUMZlYjYkorEjiMqSdX/aV3kuGNLWZSidDAJeGOu +ZQLOGT/M1nV2SyPJVf0B4+XKBX4SSYYCYfTR6EceX3cxyNQE4NZSnW/2ReENpIS yhUmaaFtNTT06YS6SEo/9ixmqqaKeaRccWcYgqT84qRdYoENc1q0dkV00oFzCZd/ KpeB2paAOqiCGpeFiqh0CWx3WXFgqhVhdG0WmjaT6h8/k6KZcqnN1IloeiFsmqSm Y3R11moIUqcFU6po4oZ5hyr1VYTVVzsNanrJJqtcN6u1Squ+GXF8sW6L5qicUW+8 16vBOm+XZyZzOjSneiD+dmQB5Z/gAavB1oxsyaDJSK3OWIIwgHpVgK0nuK3amq3b /zqt1mqtvUkFC0VxzSasKDmlx5mu7aptXTgtyMo2W4kgUEopBvRnWuWR2Mcdtuqv t/qvAXuWgFFWgHdW7koSYkqsCMuw87qwB0Ib1Eav8/GVqxSW6Vdr/dp1M3ioHUuo 3sqt3yqyIYutVOCt2FqyIwuyK/uxfzqDr8WoYtewZbOXwDqzN/tQD5scEctvxooc eFebUzqHfPOsAGu0AksFMCCrSjtsTPuv5KqrwcmrOPsPxZlpOku1WUswWGsbV0lt R8MWizGxXllkDQNQV+J5GRsYRRuu0lqtIQu3K9utKFsFJpuyd1u33mq3eYu3Jhu3 Tvu2yIiHD7plGIWzu9eXav9DqVrLuKbKtaNxiz6bbR+SCn/wB8witpK7MLEmfSsn tC5npT6isVIHA0drukh7ul63FwVbJEfyfe6qsO7XlSnpfMJxL3IDX4+jPemaOpFr i5T3IdTgW6kQtsr3uDRrEFL0OnmagXvqF1q6dR5rqCQrsn2bt3trstmrt9fLvdrr vXzLvd3asnIJgoyKrjcLqUbYl25oRhkUitMUZJyTe2xTo3TEY/oEoxfmiFkphAvZ ko2STyHFqRjyOJN0u5YChvt7YwpckDWGk7DoqcbhhZmYqcE7HWHxB13pIKgRbqoa h6xibuICq6ibtK/ltCdswikcW9irrVTAwkrrtyUcWyj/bLqsFx58OLU4G4iON6bJ yT3zhDxEVb+Lk6kD049BvDyd9TVCpDxt1zgLHFKH9aNJfFnnl3sD3Kk/asChacVP nDxV7DhTrLvnJ1OwqI6oUzM+Nr9o5gfU8AedVg1ogRuayxXKyp/A+Hl9wbaBa6By u73WC8jdK8jfS8jhC75zi4zRKrjFZq4N1ajou67AWlEbEra0iz74K0lJPGIKqZpl isn7U8DqNL9OTMpWPMZVLMQBVMpXzC8FnE+i5spNucoz88VUzMTHI8ps9MRYLMFB nC+/3MVQ8SGw4AeFQA2FQLxUULxYIZtbAa9QYa8ama9Umn07AqCpS8Iom7QjqM12 /+vCdfvNSqvN4KrN2NylKPKlOpx+7Gq4GZJR+hshwHzLHerFQpPJQrzLUKyi6QXG C5yavizGP0fL+EKZcZbPZDzF/avPC03LY4OaCz2LUtmQ9TydxJc8v0yR3ejGqGIa ILIV/ERyD1uxb8i8YpnHdQi9G4uoHlu94PvCgwzTVVC3WyDTVLAF2UvTM13TNw3T 1hu34+uCvRaz7Tyzb8fOkzwq7utgNFPKPXkSvIwpNYrQTvwRmBQTjBPGtezQaIzK +CzGDIbEqHbQVZHQAH3LqYwR/XzFGe1eyNPQa+y+Cv3Wp+wR2+AHbVwIflANfvAH XGGRmXt5QDturJo3/6kdI/+MzYD7WnvbzdvrwoUM2T19sjKMujZMS60rnFRrteys YEpaz/KjySuly1ANKZ3l0J082m7d1Qit1QytxV9NY1w9hKTthGNt1kuMynSty6zd lHA92/+727SN2wA912XtEW/sxn5g17/k18b7qGX7T2fRn95yX3uMoIGLyIEc2d7L 0zaN09890+Dt3eFN3trr0yDbtotcrq/3yEUdyZIqMaRlyZc80Ltty2s90fRr3/Zt 1aN51mr92Zwck6/Nyr193769pgQe4L0dy/WN1QBeWa6tu5jU1jQJLFndxFJBzGWh 13dNqt1mr2ghpSMCuobGFykdsOTMzSPozS9t0zAMzi//Hs7h7NItTM62WroeiBcq ks43G7vApa6evcodZ9X+jOAKY9plTeGyDMZtlERlmEYAXODB9L/CvVywLWGM0k4y GqQMzFFPrlLxHNbKGcoOLtVS8SFq4uEQ4lN3OkUljbG0o6hSN71yebLZ+r0pC9nd zec4TdNU8Afe/QdbQNODXuiEXgWIbtM7vdPbnbc/XeeLaoPt3bDpe9RSMd9wutph naJW7jmbTuR7lYW1a9wHfOSWSiCaTnl7bcxawNxsDs2pGrQgPLR8GqtHS8PbfIIt 3r3f7L0ufNPB7t3CTuzDbuww7c03XsMPV0Gt24c+/qtjOh2RR+2Na+2f8n+qTnmq //AHU/Dq3OYsdgw7eKy2uGpw1+2M2V3jen69fV7eOV0Ff5Do8Y7o8l7o827v9C7v gV7o4p3ThZyycJveuNbIEereIsLO167wC2+NlxLN+Ep9Jd5VJ27OJmzjLZy9M57x 313s7/7dNG7sN+3rfLvNip26N9y6B+vj62yzDO/yL490WzLSTKenY/myfhrpbtmt Lu7Y7e7v2RvoMm3o8U70+170RQ/oVOAHSb/v9f7n//7vghzwLFvnQ53plWfULQ/z W8/1+zYmgg2He5evhp0Xw5jixwjjdzvyG+/zN83vxv72wh7oj/3YS1/s3S31GB+t tip6+5XDPu55Cd/1g0/43v/WS9D9i0lG3eYOrQaaoCvL83vu7zJN9G5/9IFu9IOO +Ui/9J0P6PH++U0v7OWd94ydyKdHuAZf6e99vIXv+q/fM/vBuQU04hMjVtd8UDkO sCqe9hqv9z9f7EEP995N93Tf56P/0uDqtrqm+3Vplwb79zP74+cReZ7GabCP/dkf +xyhvKfSdBqI81sqvW1Jtyws+R4f3paf+frO/prP/ty+9IEe/6F/+fRO01Bf08h+ 58qfluZL1KsPENX+CaSm6t9Bbgf9/KPG0GHDf6kOTqRY0eJFjBk1buTY0eNHkCFF WkRRcuRJjigullSJMmRLlytjeoQ5M2ZNkTg16rTZ0+f/T6BBhUZM+LAaNaTUUimF 1VDgU4coVEylWtWqCipUs07dilWr16xhscIISxZGFSpVyKZli5ZKWyp+4lLZQtdu 3T9U8u7V25fvXj9y38r927fuYbtoFcNV+7asWMhgv6J4AaPyv22YYQ3l3NkzUFiZ Rf8ziPDg0owLP7PkiZJ1a6GwP7+cPbEmT9i3WQeV7Tql7ZMqe1fsDdP4Rtm6bx9k adsk8H/NmT+nKJ04devVjW+vnfP58d3dZ6cqOrFhUqSpJI5mL7Xr+69Zq0iWT1/F fPln76c9y3/x4rrQCtCuvar4w8AtDlQQQQUTdPCPBxP8I5W5CEvQQAwX1HCLLaoY /7DD/9rqTy0SJcMPKxSoeEELGJyKSDwYYxRPIoIGKu2fohY6zyGBXvRsuOBkBFJG ksRbrkiMjhxqSNqQm4lJ6DI6jjknk5wyOuDAi1K4LKPEksrqugRTO+fKJHInMVu6 8syfJEroPPQKosYPVWq0MzqqUshzz6v6vCoyQMHS7y23+CPUMcHuUjQvvAh0tENG qzDEMccMfDQxTAf87yxOqRjUvsiqoswyGCbaZjM2U1UVJVQzO+hGHH3ESKIfSfqu SzW/u/U6Nb8ML7vpsNMVSiKVozLX7ZD9DTrphMtOyWOxVFbaMH2Nzrpmgb122mm3 9dZZYakLlksuvQ3WXJnG7P82vCS3HFNMa7+k9t0pe4323XjJlXdVmcqVl9iTIPqM 1jeNSioVg1zFzFSpuJJsqhMj9kri+uYrUbERR8yUrQEZ9UuvDC+EcGSRIxz5DwX9 SlAvkzN0GcLDqhBQZsb8S+s+/ShGgUUtXqiRVn6DFnpWHhmCFUcdHaoI6M6ahddZ erPcDTx75933X6wBLrbfqv0lDrnXssaa3mynU/far63V8t59ldSXbbHZdlvartv2 Msy317467bFxqjteX8U9F0y9/SacWq27y1U7wYVCbzyH3jzqYKZctBxPP79yeHOv HA4UMrNIXCvEQ9GSizBHC1Pd0gbzSvT0vt4qsDDEGtX/VMTGbv7cvlEvE+jUoYMX /h9Yfl/4aBzLs0i12vx1fuxxvY47a3bPDjvxGJVzfmpejfUSXJOej7pa6KVH3Grw xTc7erqbm7tw8t/eNvz4282be3z5rpf8+Q+Xu/76rSlf/hMed9zVmR1BjiFFgdPB 1jOQhYnGPZozkX1OJBaL4cxinAqRgDj2QbR47C8ra53JTIayvqAOda5jGck0xLqQ IcaDHbSZ6C54HxRYpmcuYtrwfMgmGvEIeQvhBjd6ZJ4e1gp+azJcAN2VG3jlb3hX Ut/49sY3q/3PimezXpH0pTcukslwTeyiFrsowLn1a15kTM4BBcisMtoNX/BzDv6q /za05VDxM0ipjUTOw404KWVOdSqaixqmAj1lTpGe8woMQCUo/BhKkh780KUidUm6 MGhlh6LUYBzjwkx6rJKUpEvGSuSpG4rFkWLpXakOArwfxvJMrZoI8oBWRFyexkjT qyIYefk0Aj4PezDSYzEBKCW84eqAc1ym+foGzDeiT5rvA+YTyyfHK4aRjrhxoxSf acZv0jFqZBRaE/8mS48wrRqAfEh6EmYqhllwYvOsTz3vc88OagxAILzLy0JWQhee MC8hnAsLVbcFQ6BMQi70Z4MaNTMabsqGZNkZDHoGlSSiU6OdCSJBhogRXBaxadgK l9eydcfBaW9wgFvXMJvHOP+ThmtcVSLcraqnvV7uSn9cdBrZklXTn6JNfNXrX0yD 2rid1rGOKEVXT+e3OJ8qlVdbkin/pOfSJeGvfVgdGtAaYkT0LCUVTYEgVBpyyM6l FT6M3J2nHoOVScLlULX72Or2UjIWJsqTsDudH1yohZFl6GN0lWHNctcYsowlMq2M IKo2+tjOhCaCpLFIRieimpBCNieaDVLwuMnZJWmUWEziKmhNK6MkFjFO6plse+4Z mVS+1kQ542AN9cnPDkHKQy8TmSYDWggUrrBCdf1DQhMK3IAy9IUbghTHaHY7EtUQ hypiEQ9Pe12XBNEpQ0yFH7r7Xe961yK5xC7jyksTpLL/yW/pPe9HtDXFzdKkvfMN nh/bSQ1AyolOdzLkIvvU1kciNpKFyh1dSSnCUIIMZnPpZIP1UlyFJtdkCX7oxgob XQE/MiuMfaVj6fvhitDyVT4RKYhNfGIUp1jFK/4h03YEVncu7JXxtCfFZBuxnNk2 oiD0EIcY9GMJkyyhKDNoQY38B+9CeMhKhjDKkGvC5cawLxDNpERrWNGLOsSyLDat fT0KFOVxWcxjJnOZzVxm+57nKPkVK1n5G521qjU+oEos6DBcKbgQNnV1bSFgV6ZX BnfSyUQ+WZAnnDK+6Bm6IiIUfRLL2N95+MyaLd5kkTeTME9a05vmdKc9nSpaCQy/ /6t9oPEkWEHYQlKD+8HwbWeIqQNBioT/9HOhCc26I/slycAFrnEh3GsiIzfCDwLs yxSMoAqPEnf+yeGKXmDdT2tUuzYSSomjfW1sZ1vb267sQxYY1kG+WSBo9ZNY2Krh QXVqkjBQ9KISPLIH58XBiBqMIRZ6byJDGcoU3hgpZzi6scSWw5rh9vBETNmhWLvg C2d4wx1+XnWys4EIk3HFtzFBG+N4ojsOkbJhxluAPijCKFQdcX19ciajHGVLHvKD gNxQHy8YRIZtC5Z9BsEtPxxGHTXa8sD7c/GCROE6J3rRjX70nZuniJNLT+XKCsGz xhnAb3Xr6DRWOra8Rc8Inv9dgmpNb9hRitBjJzvZ9R1YRA/W3YteTKMbowLGikbS SO+OZEdjS4EtbyRDpztv2Ju9lfydX6W9CRZ/SNq+s5hgDGRIWB/IHsxIJbYa16Ap a9jvfl4S5skdOZGHy5fApCLlo0e5yv8g7OQ2lLe6fTV0z5KiFbUI54lPup0+uiPL 5XwjfLeS4F9C1KaJdpd382bbSPrelWKHqlJyX0+GSc6RhM03UgUq9QMXVMND0fr9 Q9v68KhT8NHXTfdNiirCXUgIklvD6y8LgUfnGAMrCjFcJ6GDGvw6OnVeQksuNL7P zm9Rwi1FIZT3Q6WxGDhYor3aODhb0gjd4wjyapfYEBL/4VMc/iG+74Ej+fI+KmoN 6Ju+zsLA+HINPfofYwKn7vO+61gm6jGTckqTMCov8jAPg4kxhblBjKOnVcMYHrw8 ZYuZKEM7KOu84OIzPygEVSA9CEvC0lNCXxu0IHu5BZG11mMMm/sZBewOL+u5ikga UdMlm8gswzMXLeEWnZKqcvmVxmGXk5Il70nDqkI+q0op7rMipvJA/9mfvdEJNrSp lBoWmLqXk7KXNvS9EpRDbcqfoYojPsQiaMnAaJGfApKm4vMJPvoMkcI9phOksbqc GkkR9nM0DLK6tsuzS5k/PrurP6g1wAK7gio7QjuuseM/swsyBbvFRFs7u8C63PED /xiANILLwtmotLvrttQICjEkQ2i6I6ppvmOpGzSCpgr8GvDLpuK4HmWKwXrBFgmE Rg28QOh5RjvcQ6lhxGkiIAn8JWTiKf1Rvr5BKnJ6xKspwyzCIxUEvqBIIM4QqVCj QVJbGFOLPFTbQR2rmR/kkGODtw1ZRUNzssDItZVjMmBLKCYcvYn8tSY7PUKDsn9K SFyrQsVoth2aPWEcGKijti5Ev4NQis6IQGGqJvZho2uSvifSqlhSqWShn0C0vjzi nhKcqUpMG2/MQ50EIK0qKfMRp5fERsBJx2b8u0M8JkKEybvRPuL7FXR8wXsUQUtM in2ciDRrPHDbL/Qbt3Nbpf9QNEACJMB2C0DbMQzWETkqmAJPkp2NzLeIzMuMtDe8 1D+FXJnmessAJKUtsLq1/MXKuIwOK8nPYEBjJBpMLKKXBCfoU8psmp6gDJoTnMdj Ssd6VJ8jiSb7kT44JKpGNMEV/EDLpMdqYaqkqsd1/CZsmkoU5EzP/CwNJLyfyCMW 5Iy8Q0awpAg1owamo7gbpDF8qrwe5Dh++jghbB3fGkIIGbIU8gslrEhVKASKXEIn HL2x8z/l+icMyS0BrIIrJEnG5AyeKwi9W8nHnA2XVMc4MkctGkrYhC/6zCLRzEDW DEc9BEe4+UlydCK4Qc2d2kz5ScOgRFApikrbHKDajMf/zrzAD1QVc4pBzVK4sAyk NnMRs4IzdKO6dSvFfXrLRjmov0ouV/QDLeC1skO5i2Q5WLzLQxMs2jEMHCUwuIi7 YEzPobC743nP9hwp6nBJZ/zDOzxDNfzPlnLDQPQeMkREOXKam5pD0pyq2YTE7nnH ojw+F+S+N+wpMV3QneRGLFVG9kHT5FvDqvqXYRGXyvSso6xDzso0PvpC3GNJyDu1 i8mxVqOhg9St5Tq7LXgykkGuz7POJtxOlMvORu1OQjNUjoTOFyqsD4G96kJPHw2K aauG26PB4DyTZFwNFtNNn8DNMjPVWgEJxNvUOuU9pfAu9ZDV71IPhBE3EJ26gAu4 /0opQAtbO8CsP1V8kLegS3rTi0LYPyKTUWBr1r3Et2GzxZQJTBytpAFZSypAwLlz VZtwzKWx1VoFV34Z1d30vfaSUsAzrzNTVc4AmFblVnSKQIz4Qox4pxl7pRzaoD+9 vH2qQlmjVJHrv3xrOdSDSIT6A+zkToo0BIrUToR12Ipc1GWdWIFtGbQTLJA8z4Z4 QHgNiS1kz+si144dWZIt2b3jPYvAPW/DPTdDP1B0K1HkoPcjUVOkq78wEFZsSCSL C2P1pEidWGeFUYxcMhedUWIbma9LO7e0C7nQUWBMQJNllYC8NNMS2ai9WqzVtpDa Wq7tWq9F2YzQR3p9kcwIyP+LYzXL27EfJJDd+kud/c6C5SvrLIiIRVgmy068tVtG vVuNNL2fbUi8wsWPERCRfDZNzVqQ6FSqxS6rRVzHfVwU41pVUVnKNRpcfVl0ww91 O6y1iD9UbK4gi9ZNcjC/KghYQJi97FslBDa9TNa+rFhQCkxLMVH469W30FbIBQlv jVx5zV3fLa+vDV7hHV7iLV7jPV7kTV7hFZ7frFeLYxjGcDVT9FdkAzmBSl29TCi5 LZAkRDKUET3s1E4kNARVIF/yHV+8hViF9U7sBU+XQzs+C5DzFAiO/d31XFwQ29rf 3d9qU97kjVqkUJihqVzKbdkPfdk6q63Dkqualb/U8Tr/F7pLCQa0vfKruiqE041Y JFxfWTS9J6zFszO2XJTbAeFRqOXfiwDSzLClWbVVWmUexu1dFJ5hCJRhGv4IpZjV 5uUXsb2Ix2utfOVXgxRA3RJU643g1mWyvDqyCemtkUmFaoCFJCxfvDXf9HVUveVb if1b0b1Y+G0dusBU2aPfG/bhk/RUvVNZgqhfCxU6/U2VNgqtZRlDOr7MOq5EmPBf Pd5jPu5jP5ZcVnUvx+0uVdgGpPADAebhlV3kgrhc0Km6AbPdrHNgwnzgYX3dhZq3 T7IkutgCVfhkvd1gQ3BYXwtaig1YQp0dTq6L13EM3C3jELtXhKMI1IBM9eqInByS /64lJjQB0M4izdfgRpp001zWluSoieDFmypdKa78TGQJTcFh199D115m5paCZuzb vqdiZjA1oJusRnxM4U4shGrYhloeYIXwA0G6xBE7TnwVYpDMFBCJNZDzrRd1Qgve XgU7oZb7ZCq24vOlYiRU3701hIeMyFI+ZbzEKxu1UY2VFVjWJcv5VHpl43bFZWY6 2a/ljWrmaAVNJoT4Y5EOszVMQV/qHm5ar+K7qqWSZpoKjp+czF9ioqp8zRZUQfxc Iwz1Ye8qhJ7+hz/Y4VTBvSmYgu9iWU+MirDwj829ugZeWrsK2GBLXcEwVn3+i1pz EOPa4LwdZaHtYJTJ57iAxf99K7nCgJ28eNptvWFiDNKl0QgYzqo4pB9uub5nhJo1 NUOVKF7zcp9nViqs7EMo6dKWRoESe+Y4bZ8U7E1J/FKgiubsa01BjB423OaZck1S 5SnBc1CQhlBKZMfLpKbGvsnP7o30/YNtCOo5EeqLYO18VJqiVg2BKTUglt5+lWe8 aNtZa52sRr2JVbmHRGtds7V8Eza6RV/k7moODuu/kMiNlNQU7UhEK1xoi2hdsr00 PsmVtOgQHCMzocepDO8owkM6Kl6ZFpto9GUwhSPD7hUzvWvlc29bgVNCpG9qdEf4 LmZ3TNAy4Q7+pk1ezs90kU112W9mgWyiRHBrGm0fgir/oHTAVPDpaijdI/SIx9mj lZ0CyiWkpE6RdBsww5Qkz3Vg+hNY7B0uShEMC/beFjKZsSouURZli8TIJbYQTFZR akWwRrndxHSlHrXu3Q1VW77ox76mSByg8J4aby4qqQGW0AzpkVZwL7ImhOhJnYRT ZUaXq1TvpGTyxT5NNdoeqOFNozpDC7SecE7ELM1DqqRTmwZKACftrQzKauiubfAu avBpHFaa2XDtWnred1bb5oy5mBPP0J3O335YityCwGDxv/Arv7pnRIcFKQbof67i hs10SPfeSN/iJptUhh6Z+YXoiL7fIW1e7o4+aUzEvJns+xSWmY5NJB/vbJyXkdZf /2NRUGgJnzt8aWqcb52WRzcnl57UT8vOTQqcz2pmUqMUcC5vUKHMzFXhzZ1eGj+Y 8KAOjJBgZ88g4JU14JNEgTvjRTyrZJutq+i0NRm1N+He3k2nURcSKyYcaOX+apIr qEgvu0lNRX434bWmYRWeZSG/iLieQAOdyevbFfneIplexCk9ePSuJsz2bPmmdgnd 8jv2pmhEKWHXeM408y9KpokPPvrETT2USZYKx24q0JpWb82MdpWviAlnCLEqeM76 4faguVGqXnr24nQHz+tk7k2vq3yfxeLSaoSldAy2dHpXdL7ldL+q2w8+1C52YiAT 4+q2bsXNbvcceLnOSbN5Q/+PzxdAbKpBTD7APhzBjvgit2M2r75cxya5L/BgBnMK 7Wu5xw0+rHs4PMc5H+Yzh3P8pj6nAmZmbNMvPaplbvnDm9M0f5VrN2QWjSVvxz0O P2M429xevVYHbst3k06KFWvAqPEV98sHUQVYQELUHWWpn3FViIvSh919E8xVztYe N5V/n+EgB8Mhl+NTpWabcOnMTnMsj/kvR5JApmNmtxVZf2k0utJmtsfkx+is1QLz 0/bzsleLS5F4/hBC/1cgk86DHbS97d58P39Hf3eUaX1DgGLUf/9Lt2J6D2gkVIXu 8l4lzEv3bUgGeehUH2SA+EftXzWBqv4hTOgn1cKGDB//JowocSLFiglRWMyocSNH jig+dgwpciTJkiZPokypciXLlhExjoTp0SXNmjZZUvOj8ybNgT4T/hz4D9bAgkUF /kNRBQYVKlWcQm36dAsVqlarYqX6B+vWP1X+aPmzRSzZsWb//DH0pxBaKn/8vI0L F65bt3PRslWLFu8WVX5VwSqkKpWqtIL/qCqkdnHaxrDadt279yxlsF4t1+2aeTOK FzA8E/y3DRbP0qZPr4RVcJvof4BTwXodGxZs2bZpz66N+7bu3rl/8wa+e7jv4MaJ Cy+O/Ljy5smfM4e+fLrz6NapS6+O/br27tm/cwe/fbz38ObJiy+P/rz69unfs4e/ /35+99arW29DgXUqVKpPxWpVxRZfbRHgZWOFdRZaCrKVV2ODMRQXWnOlMiFZFP5R IWMbEgWYh4OpYkhiIRZGomCHvfYVXI0x5qBabJVFFloJxujWV1+h8JkWLxyVCmo/ AhmkRT4aFdpRRxqZZJFLIsUkkk4q2aSUT04ZJZVXWpkllFtWySWWXmrZpZhfjhkm mWeamSaYa5bJJppuqtmmnG/OGSedd9qZJ5x71sknnn7q2aegf0qpn1NMHSoVDFcx mpWjVn3l1liSxjjWgmipQoVOXd11V12bzvViY3j9QQ1ggp1qyGGqFsaqYS8WAgtX bl1aa6VkVTWpVrM22tlnMP8kNJqQwxKLGmmtIcRassEyu6yzyEKrbLTNTvustNdS i6212XK7rbfVgqttuN2O+62455KLrrnpsruuu+XCq65o1KQCW7P0qjLQtfSmIlS8 7f77rrwDA0ywwAUjfLDCATNscMMJP7yww+fqx5/FuQ4IIIEZj0XgrZLtpReLD0q2 YoUnZ2jhXignplZhpvoVm6mz+SWizSTefCJtF6K14ch6bQH0ZLee5TEKWsCwY0EF +Vis00+3RGSUS0tJ9VFWh4Y11UxqnXXVU4PNddhfi1022WdfPXbaZq+Nttdsv+32 1nJ73bbdcd89d95149233l4XYmoqc5dKG9aBDwb334v/881414+r7Xfjk0OuOOWR O4755ZZXTnfne38ueeiZc6556EpB9ZRUj7K+a6NEwx4yZJ3KVTvtKbeall+6nRrz ia3+vipiFdLlxxYwXlqZ8pZNqplmV/kKGmvCQl299STBMj1+22vfPfffex8++OOL Xz7555ufPvrrq98++++7Hz/888tfP/3wU0ONsN3nX81B/OuPNPYb4P0IaMACIvCA CkwgAxfowAZCsH368U9WNnYjjmVMQB6rTPJI5bPFFCJCJksZyk52FxIiRjCpMARs DCGzfMEwNibC2QxFlJixwCVoP9shyDpYmRuRBUdUeAHSenS9IyIxI1IjFBMD1URA /0FxUE6cYhSfKMUqUvGKUkQIkqQlNi5m0YpiDCMZsWhGLY7xjGlEYxm1aKilrK5R cmxdpDJGKQ7KSC0Rskvt1pKyQtDlQmwpUQoHExiazeZ3hgEeI0NYF63spRDLOwul Kum6RzoqesBK1rGS6ElPHmtiEBOlxEZpylKiMmKqJOUqT9nKVLIylq6UJSxnacta 4vKVuqTlLm/Zy1xeq2L7EVCBLKixY3YsdmJx0Q4LI6ESZqheKawQ8lKhQhB5iGbV UE2HZHizb5IIMB3c4Qd7aCnYecxoSFMaUpr2yXdez0dHMiRhYFNP2tAzn/bUJz73 6c9+AvSeAuXnQP9Z0IASNP+hBlUoQhfq0IZC9KASZehEH1rRiFI0oxbVKEY36tGO gvSiIuXoSD9a0pCSNKUmVSlKV+rSlsL0pDJl6UxfiiXUUXCOOnVUV75CIzz6EWR8 PGGFClPUDK3oLSW6Z+88RA1YIHKRqGqZIp3nR+QtUzKVoZGNnIfJXWkyNNSDJ1mf pprtqWIbS1MrQdhaDbfCda1ybetc31rXuNI1r3bVK1736te+AvauguXrYP9a2MAS NrGGVSxiF+vYxkL2sJJl7GQfW9nIUjazltUsZjfr2c6C9rKi5exoP1va0JI2taZV LWof6yPW3Gd6E9QggGyEQdt67KdEQ1459dipCqGFZfX/TEyEMqTCF84MMNx8anJh IaJYfWh31Bhn7nzGTBgtT7fNA2KOiMij0LizrOIV0hIJkq9t6C+96F2vetvL3ve6 N77wna9860vf+9o3v/jdr377y9//+jfAAB6wgAtM4AMbOMEIXrCCG8zgBzs4whCe sIQrTOELW9hUXELBTjtMx65MMo97Kcym+GgXlg2vMDBayB9eiMh8dWhmOkNVYEBU KsjUJXd82bEPcYWrS26lV54BDSfHa+QghTIh/8PrNpjs5Lk2GcpPzmuUqTzlvVYZ y1dma5a5vOXVfFk0Ye4ymKVsZiufWctp9vKay4zmN6sZzmyWs5vjbOc537nOeN6z /577LOY2/5nOgc7zoPlcaD+T+dCKTjSjx+xoQDca0o8WdKQpPWlCVzrO/8vWBCWF QWMWM4jK1GHPmpkW4EromYjZ3V/qqRai9I8a23xqbKqRXlv778UvNtXQqhAil5Gs nCA75/LSSZajJe0FVAvvkZt9E6kZRRVv1d+01breamP72tqm9ratze1vezvc2Qb3 uMXd7XKj+9zqJve6zc3ud7s73umG97zl3e564/ve+qb3vu3N73/7O+D5BvjABd7v giP84Aon+MINzvCHOzziCYc4wonSNw63LuOv6+odP9ZDvdBuqIMkzGv+ojtTMZco UAWMrPOXv2zyLma10Uuk1v8iKp8NG3ab8apXwzq9Tjo76DTJHlpba/TTIp21SV8t 04+u9Kc3felOjzrUp251qWO96lmnOtevrvWvd33rXv/sa8GnlGPSNtRpv8wGK4Xd UpfTmSzuY3BJjnIYDgblsEav3m0tEFs3F4bJfarIyEKYkbWMhz3s8Q9FrR8iwsCI Qp981JR03mqrF/Pdzvx8NQ9uzrvX8+EG/XtFb/rOoz70qS/96knv+s3D/vOxH/3s T6/627Me96+XPe9p33vb5z74u/c98YE/fOPXvvXJ1/3yhd/84yv/99Ev/vSRL33m X9/52Yc+9qmvYTFh3MMeDnLNl1erFwUy/SCuOzbx6Rf/6Lpc1jF2uUBkHLNs4p2S Y6muH0Ulo/9T0o9hUpBhUlgVGeUhYEokGUIcRNiB3dhBoNhJ4ANOoANaYARSYAZe YAVi4AZqYAeCIAeK4AdO1qZZC4d9GjKlYIgRm8jEHVuYTFIl1Vqgit4xV8zkD3oh RcvtYP0JnrR1iP8wRiTVmIgQhmIgRrCNSlARG+wk01ggGzsNxEvVVEzR1BVSIRZa oUNNibQ13MRJ3BeKIcWNYRiS4RmaYRqC4RqWIRuioRuqYRvK4RvOYRzS4R3aYR7C 4R4enMVBSfhpHOsQYE+tn3ZJhv/Rzu2U2v25XAzli080Yv7U38vRDK3BkNCEhR88 /4arEJKDOMjQbJWP7dyshFVs2cf3mCJsoeIqek8qitX2uGIssiIszqL2yGIr1uIp 4uIu0qL2pNUIemAwhiAJEqMwAuMwGmMxIuMyHmMzKqMzJmM0LmPZpaJ+eMVtXaPH dFWI+VCDIJ6FyOBboBpw+QELyYzLAd7gBIVA6GBQzIxq0J9fLKFSvd+IHB5j8B+p /J9W3UpX4YiOfJcatdEaEeRAGuSSnFeGYdhCKmRDMuRDOmREQuRESmRFUuRFWmRG YuRGamRHIpi0gZ/4fVhVlN/64ZGlZIrtcApezF0S+gVz5c/KSWL8uWNMwmQjqtjs /AWK7NAn2koA6oqufBVWGP/gLxklLyGlLyXluyyZpDmlpT0lpl2aoWUaVU4lol3l omVlVWJlVFqlV3YlVIqlVIKlVpYlV5rlWH6lWoYlWbJlWrplXK6lXLblXNqlm5lg tKAgqHHMgTjhZACNC37jXsggy4TQibjMI/ZgTC5mY66jrJXcyBAGzbQaiaRQb80j 4/mlOiUb6XiO6YBm6YjmZ44m6IQmaRoEH+KhauphHbLma7pmbK6mbLbmbNpmbeIm bN6mbuYmbfLmb/bh3QDi+JGkSZKFIVKGg/jBUNnOUdlYiSgm/cHaYs6ky00nJaaM IVBIyR1hiQiPYC7eWYRFzY0iAfpcBKHnA6lnerKn+fz/4jPCpzRCIzPGJ33KZ33O Z37i537eZ3/a539KXdmFz9mp3Wb+ZROaBW/tEKgQZnAZlzUZUsnFCjw6ZoXGJK7J H748SA3CnD2OCBLi4+KB4oFexuMV0UGykUCqaIqy6JtcXvXBaPdZn/dpH41yX43O aI7GKI7u6I366PMB6fYFqY0OqY7KaI8WKZIK6ZISKZMaKY8eaZRC6ZT+qJMqqfeB JJXgVCBCCvmtX8eZnyFoypgu50qO0FL5jiFd5yTu4EwiBazR5D3iTr/0zuGNyMj4 JAD2owASIPQM2SYdpVIKKjANqlE2IIDyJ6L6p34uaqIyqqJC6qNKqqNSaqPeZ14G /1OoPaFfciMAYteGCMZclJiZssxf2CAM+d1jWuhibpMMXVP2xBj+fah3Apt1LYjQ aCZnSiGKFuSK9mqLhpEX7qZvEuuwGmtvHitwJmuxImuzKquzMuuzSmu0Uutu+mGV AGKfFifHHSeJKkimLGe4kmlmzMUgrRpyoaqqqqubDgSrkRxUJVea2imINgZWaWYA lmddlGIuSgtK3GIvAqwt8usrCiwvFmzA6iLCqqLBJuzBssZ7WmqkVqrERuykVuzE WizFamzGcizGPiA1co81rh2YelxyggxjpMK4xkVm4JBkQKhToSP9qeuqQqLgTWes 7sasJiGwXddPjmgAchdA0v+JRXRCExit0cpBRvgqrzLt0iKkR0ItR0pt1FLt1Fpt 1WLt1Wpt1nLt1nptQ2ZplAznSBaIcbIgpozrcjaFuO4KYY7cS8ps/NGsY9qgTeLs cCnSEPpsiPHKUFJFUTrMRDjBKFBDPlSDMzSBRixloBJq4zJMU74lWkruVlLuWVZu 5F4uXcLlXW5uXXpu54Lu5Fru6GIu6Wqu6JZu6p5u5nIu6q4u6WJqsOylqJ3trdou 3D2IqNpFmbJsqrGI3fHgzAqvhbYjht4dZSLmzipeYN4r7f5BFCrb5iCFRcjBKACF E+SDRWjNDYxO3cTA1tyAaZam6Jym+KKmhlUrtC7r+qr/b/tOK/u+r/umb/zS7/za L/zerxpeK9aMLZBto7eSComlrcqSq4iNHLvO7fDWJOB1SGV+58jkXHaJWr5uxXm6 T0KMghPMgRxwcCdwsBx48AZvcCdEhPgAiwHdwPSkcHuy8HqKD8RurMde7AzHMA13 rA3LcA3r8A3v8AcKaMgaW9udZFko6IYQT5m27AnZjoImxjkm8BM/5qw5Iogkb+IJ WyQ1b+OZaOTFSUIgLgfjgRzkgRh/sAdzcB40gfUmhJN8r5TAQAwAS1HAcRsfBbAU hB3/wxvHMUHM8R7rsZHM8a8KsuVZqZRWaZMi8pMesiInqSE3MpU+8iJfKSMXMiRX /7IkO/IlR/Ima3InJ/Ikg3Imf7IoT1vYMkn/8kpJkixQbYW4riRz3o6D2KPcKnAC 0+TKUfGdtki9rgWC6txl9K15/inEjIIc4EEnHDMIg3Aye7AlyMEckHAJM0sMgMsm rbC13ECyZPM/UDNCWLOyXHNrUPM2bPPimjPAHCoPq3MOrzMOu3MPv3M7w/M8y7Mz xm6yzG7teqrt+owq6EQBE9WDphjJtd8jpioUJ7AUI1J3PlfiWTEEMyGukij0wokX K7McNMEYd3AcGEIjNAIgcLAag9GShG+SwMANvLFRwHGXhC8dwzFKtzEey/RLFwVK Ny2weomwyi/+8vRO+3T99v80UP90/gp1URP1UQf1/F4rkmQrT9WcT5FoyYirK9+O cw7PbqBcyyFwLT9mdUZXjc0r/+2yvf7lePKcvg7zv2oPA3bwKGTvPyizJRjCJExC I3TwGn/PCYtzaIxza+i19gBLX1NzbK1wNaywXv81NxNswzL2wirsYju2wzI2DNcz O1t2PF82PWd2ZWN2Z2u2Z18WyHaPyPolchLxON3cFpTpP6ski50MU9VtOyI0V0vx 8e6Oq84QEop1UCXP24ViMnXXjgwtQiBuNCfEB3/wGHeCExi3lfRxTAdyHq80lOzx HUd3NfQxUugxdFc3Tnv3lyTk14p315L3eJt3eaP3eav/d3qz93q7d3qZcqHoVB2V 5NlaylSPaSurnx+Yaz7BGC3PtoXGX213aHc+cJ76MlAOYt8CLjpzcETkAwc7gzOU MR5As0Scs8KEc4Yz7uOGLut+ruu2Loh/uOmOuImHOImLeIqjeImr7om/OIvHuIu/ 7oyvOI3DeI275T2LBodx6qgxr1jg3O4CtDjizmEyosvJNlcHuE8YryPidkPrNjnJ jp6GGEVLr7/8A4XLQb9wcBNUrzPkweEu9xiLdJaTb2m+dPeyefmm+fnqtFEn9ZwP NZ3LeZ3j+Z3rOVLnOZ/v+Wrub5KggLa27VMDcFusLQGrJApFaFazKZNDeqzdYG48 /+cDl1p4diu+nrUFrw9xI3cHy0E+OEFIUwOXG7cLt3Cqo7p7fnarc7arb3asg7as w/qs2zoI/vBoG5s+myzcDfBqywU0Qajd/Xd6Nfls890PUnrw8F8+MiEACxHkDfeW Z7QyKzc1FDMHOwG2N0FzO+133/Qg+48nU/IoW7K5Y/K5l/u6h7K6t3u6wzsno7u8 szspvzu93zu55/u867u93158HwUqM0p9/2VTTEFTJDrv8m4foRgjwimk2zJN2vZO 6nISIvjP9qP//u0wL0wxMzMzO0M+ZHuEX7g0Oy6Ho3yhSks60/qru3zLw/ytv7zM x3yt23xB8Hh+bKoQ6+mCfP/qqOR3frN2y67MyijGVNXGUy35sasrri0XlNejgdcq D5Ha8eTqsa1T9KJJQpCCtXu9hId8GINwRPwqHjMRHUeJ2ZsJ2n/7lcS5n8O9ncd9 n8t93dP93f853s993v/mUgv6VRC6oZv2WRx84astwuP3SobFhPR30kMixK/ry1ki pdcpreJpZpY1MG96Wg8sF3UwM5PxHIx6Hmxw9eJ196D0DcRA6kd2YxPECks2Octi X0d2YefiYOf1wKr1ZN98zc9879N88AP/8P9+8ftwY5N2bkW12/36AHcFjRSmcTU6 5Cc0ZLrYh9SGzjo0lYOib8eIWf+jd037P2T7GZMxqMv/wag3t5bEQBN1N5Wo/ZK0 f5a8P/tfCduD+7jnjz9QgzZQA/8DBDVq/qhpGyjwoEGCAgkqRNjwIMOCERNShLiw IsaLDydq7MjRocSQGUFa/CjS5MiNKD2qPEmSZcmWKWnOtCkTZ0ydMHmu7PnSZ1Cg Q10WrZnzp9GbO4UqRdr0KFOiUZNShbq0KtarT6dq7crVpapq/6j9G1t2LIotVNa2 Zft2S5U/VP5smVsXr129VPjynULl79++fP28vevnD2I/qf6oSgUrFTVYCMtWJnvZ cmbMmynDgqUKMqxCjlUVMjT6z2lDqVkXYv0Htt3YefHStWsY91oUL2Dw/vd72+9/ /8GBCycu/Lcc5Ms7OVtuHPrvGNBj3Jj+G4b1G8eJa5/evTp27cGrwxB+ffj58b+1 F6+O3rx06+m/R09fHP99/dyFq3r+H8AABRyQwAINPBDBBBVckMEGHXwQwgglnJDC Ci28EMMMNdyQQwn94w84teLCSy69aDNxtthWu2uKwlyk4sXECkuMxj8Yu3E00MSi phrNfOQMyB+p2QaWajzT8TNVDFGSydEMWa00KFlb8bXXZDuRRLxQ0AIGLV4YC8zL wjxrwjDRMisGMs0byzxq0kSTTDbN+mfNG8C8oaw16bxszTfP1LPOO8+U000547Rz zkETndNMRhcdkyz/OpyU0v9KLb0U00w13ZTTTj39FFQEJ3OUTLXgys0wuUr8Qwss /SoMsFhb7CtGuhRLjDFVGktFFVUkE4gsYIUMktjKBPosSdNGW3Y111ZrFrY/XMPS xGr/kIuubN3arTfzgvs2PXDBRW5YzZATN9x/6ttmu+HarW9dd79t19s92Z03u+rI S/deeenUrt5836Wv3eDqRRdhfhVOWNJQHX4Y4oglnpjiii2+uNNUFh4OhVVVpRav 2fSa1q4Wp5jrxRn9SBmxaG/c1TFqfC2SxyFrLhZnIXuUOTQnm4yysSmFfjZakkG2 Vi4UqHiByzOdfnS5coFELk4x8ZwTUDTRulpNPsny883/rA99us09CxVzT0NjcNpP qJ+u+m20324Y47rtvhvvvPXem2++xZJ7TlPdGpwtbEe07S4T/ZoisFhhfDzlbGt0 TVfHIJP512OFzZkzyoLtTOZeKzdNaGevtBb12mo7nHBufcsPRP0gjD0+gmt/r138 ct89O/febW/P/ATuLl/bb5COvd7p28++2J23j+6+pZ+e+uqtvx57vT9sXkSPjw4Z /C1WfBwPyM2X0VZcbbRxNF51xNxXhDiXWucij4SMyScbI53o/otWMUUgW9WWuvQl wMHtP2X5jQIvs8AEug2CZ2kbAil4QAvGDYMRvKAGM1hBp0UveyEU4QhJWEITnhA5 /6NCoOC0daq7YAsvrbKWX2Tlh8aZb0bpa9nLKvcY93lmc8ai3+eICDodkSZo0KLS tEQGMhmy6lpzIdxcXKcndI0FXRDCYrq2CK4uqmtOV1TYF4NDxjBycYxpFOMa0chG L6oxPSBE4RzpWEc73hGPGtJYGfmltCiuqlWrSl0TbxM5Q9pqZTV6WSraRxr3yaxH 88uZkQSyjZpR0legecyydOU/JbaGkNFKXSCjiILeeKmDG/QgB1m5SleqEpaplGUr Y9lKOeYRl7nU5S55WcK/xY2FhGuL4WB4G9o0DpmOI8z5dEi5oFVuV8KiTBCDFESE zOxXmURWI1NDOtOJ8nuIK/+cFE+1Ld68jnmwa9461dnOdL7zee6MJzzZSU951nOe 87xlL/nZT3/+E6Cd2h7supel1KEofKs5ZOTQR6Mdsi9XvMpRr6g5RCERKZs9qgY2 kSS60gDNk1Za0em+N0AueQlSiqpao1JKKrSx1FEqfSnUYFpTmt50pTidaU55ulOf ylRmARXqUIlaVKMySIUx/UcwUfVC2jzRRIGxoawAM1VmOtShL6PcY+InTSEWETNe DZZnCoEsJPEKrR8dmrRCOcosVcEt5NTNOQ+2sYTd1a55xete9dpXvv7Vr4EFLF73 eVTDHhaxib3jHhfWsbd+j5DOgtysGLqy8ylmkeuLaOb/IskjmknSRzx7XyZFiz+f MWutWGorbUo0IqUxDQazfKVsazlbWtIWt7fVrW3jVFjFSowac9ECA39LoODC4JYv oEJxf6NcCQlEuMRl7sR+CTWmCtNwxkTdVJN5w0MeBquYbQw2Nfe+aX5OWDubZmlz JJpeuRc1p+kkKAtxUNXdhnXlfEsV8dnfe/7XngHOp38FTOABA/jA//DtdEFVGuFQ ARYCMhJzC7Hc50iKL7+VlBYsDCFVdJgK0mXwwwa6n4LaRZAgC2BqqIAHk5Xvu5bF KmxaBhtGxmxmGvUsJG1GFksGyZJBthkmk9TRZP0MNSAVWl2MtlrvbWELBERpbamc /1veVnm3WL6ylWO54BFzihowGIuBlsZcGHRYOGfGDpoNq2Y6sVlCZf5yxJL6NBbK dZyIe+ITY2PVvpiMqpS9Kl1gVlbSlhd/XS3LZL5a3mtmU3Td/GiS4wtKaNUXS3uO IqriSgX+mhHUcHyjG9MTalLz8dRnHHUbWb1qV5da1LBO9Re9POdMVThAwYXwb6hw ZjSnonbI/Y1oQvzg+PSa1zCAzHOowZcI/wPYaZbUh4v9H2IzENnSEvE/rm3sf2i7 P3zZNrcrrEC+uJnXvV5utgvBwG7/RhVn1hi8e71tvmxD28Ftd7hj+5uN8mXe8aZC w1LRa18Jh5HN7vCH+x0pgP8/B9n/iHi2QXjudZsH3PSutsSVPW+FP/tcwrb1wxhL Rj9+TLuQjRZsYDQFGOPwsi66FWI2ebkcM3pnh1YvJUOLTftlMzRLOu2k1eo/Zy3Z vjO8lmtP+QIuPz3LUN9y1Kk+dVfWeuSWkjOzY9tsc9eO3pUZuIJDTA2nN9fCzv2H ckUcZoEU+8Ni90/BeXT25cCi7HZn+9r/cOG8K3DvL+g7tENcDbun8O9of47aleuf FxQi7GYvSypeQBa6kF0gDUfOmfM0dhgEvOz9LkSbqFAIylu+74UgDgwGH/cwW9j1 oic95JHD+LQPXPKLv73jaU93wwO+2m73+nJeEJmsO6z/ulW7bjmLmbgTBRr6UoV5 YUb30dH+ajJozVw2M4fejsJvm0WPb6U/6RpMr5YuxMRz6+hq4AjDgkjcjj/83z9/ +9cf//LPP/3133/+///+/C8AAXD/BtAACxABBTD/Cgzejs9huoTXOMzCcE3i5i3D lmPX8I7efkMLaI/DONDCPvA55oLXLPD9JjAEaQ85PowDPTAE4YwF/6EDQZAG/4EC Z3A5YhAHRRA5RNAHYS8Fv00L5u03Ro/XVPDBLGziJvDYIG8uiJBViHCBqqHg4oMC I+4K++4JAeQHa7BVnqMLZRAFW7AGv00JpfAPxs0BNaXEuOPEoijpVm6kDKHFZuXl /xjqcRpqMXpF6D6Dx4wk5yjqs2yGxzgDkyhpMiZDm3xmSRoRyUKqf8QHgL4HxbTk pAzIpnoKqFxqE1vKE5XqEzPxpziRFENRpzoRFFPRTLBuDTkk2h6s8jiO12Ix4pDj D8yD9dZMF99sF9ENOdTtzGLxFulk8M7MGOHMzZLRwnyxF5fRGdfsGJ9DGXdx856R F69RzaphLlivLJQrGpfDzdQuHIFxuaqhMLhRG5cmDS1PY8Tx9qBxaZZrG85xHaux GakxzaxRGb3RGjlO3WLxGlvxU5KqUZaPnJwKoUykCmTFxQKNuwYjZZ6pfULjfY6k h/zQMnAOIXbGIo3shyRqvv+kJKSYCNPsi5TgyoVOhb8GS7BakiVf0iVjEiZnMiZZ USAzZPh2kQTpRFKYkew+TFJe8fJkkShr0RZhcODGzgbB7jmEcvAmjimh7die8tis MCqRwymTDeKqUiulktcGL1hKzwbh7BeV0CyLkCwzj/beDvIu8AKvcAyZLcyQsCi5 UuLA0tvqsgijshZ38iYlhrEQxrEqMQ5XLjampeVczIbucPqyBTGI7vo4yr0iI34w g+csSSByzqzA76wmDUo4iXSUzH/ywmjsy3teq2mqTstWU+pYUzVb08ps8i8vxDXE Lj6Er9qMcoGCUYHwTiDsbi5+8x257u0G7/Xsju7Wji7/MS/31m44Ee83gU/xCK8b l9P19A7ObG86fTP3VKHymq3v4o5OpPAer1E8P88rwdM7Uc8MMw8I3TPsxjM9h1I4 gtPsdu/3dG861S45H286yaLr6NMnZ/NSkg9tlm9wssv5FIdxos9BaWXgWIM02our koRXxutyHK2rGI293quRuIlojk5EpUU2ShJkxCm/hMnT2g/BDMxFWxRGGVBGE4xG X/SdZJNAK0Q0YGA0yCXj2HErtYBcXGPMfsNGqEEEL5DrtIBuek1IhQPvNC9qalM4 kjQtiTQJyzBKx40aqLQMf9E/LpAHu/QPilThiJDaimQr060ryQ7CxuxMF+jhjLTd /5SUVxSuPzhMTQF0CP+jMfBUDCUO5DDQP6wUSp2tStEszJj0F68yRymlDY1DLeCQ Ug9qpBBzMV9M0L7rcURnSX4oMi2UokhLEf+QZgDxfoysox5xfz4TEq2kycIHS1pL ygwINl8TV63ONXX1VuEGRx8VVCpsOWlTLIF1QdROQgbUWEWozhblzvQLIWMohgCj IZHpIaVKMAgjFT6zh6zPvUBjVxINf9DKDzmKZz50QtVKrUb0k2DD/FbLRJ4o/dZv v9rP1FpN1vAV1fRV1fL11fb1X/sVYP2VYAfWYAUWYe81OH51WTelS6ngOHCywiK2 YQNk36pBKePMUSv2ekquj//mFZBULHwylWRdblOnDyQbSZOQpULTijLhB8cwJxGB rlda9shAcyTX6ugMYQtKkxKh6GNMiWnO7pUkhFdzdVeTtlcPiGE51lKUqx41BGrV 0GkXiPKogDwhBFmrNnsM9EwQFC6ar1pkpUEZJzDKNvoec3+6tdCQSFciKtEukqvg R7SiBDSrr5uUqET31l3jEEXVT7/4K0Znx0ZrNEYNd0YL10ablmsb13EfF/ngaVJT DHXmcDZMtmQV82RjJDR7ZaJANVk+IxUeiTJJ4/toRmbNikk8N39YVTXWKqTqwnJ/ 1kRq1RTJZDlsaEBa5DlEERVhSk9+9xSxZnhvdxSNV3j/z4JxIZd5m9d5OYQgnZVe N21BaaMOA61aayiZ/OBZKO2jUpbobGQUHEluzcp8QQNdvZeTdLZoepataBeKKhGG JKdeu6UlkUMIdkB/95d/9xcJiCth6momCyY9DoaAB+uAbUcmF5gll/e3UKCoIJhC JHhCKNhALPg3MPg/NFhBOBhDJNiDPSWEGQSEAWSEO3jOArOPnkzl9EJzX1hTF8oP qu9u04qT0Gp0yZdcv4+0tIl1he6jHHF9RRN2h2Zk4BVkULPfivY32EAH9veJ9TeK d2CKdQAJqEZuJgjLykaCuia3uNhr8kRpkRYtHNiOUACN0/iEi2uNE6SNLYSC33g5 /+Q4QNpYjR2Ejjc4jUW4QE44jy+Ywbw2cFR0LaQo5WwDMMpWkbuLqriXrYgGb9U1 yRZjfEd3fb7XW5FkotaWk+WrdOgrDv120+JCRQVXRoXAD5gtgVJBCJaDP+oDONZD Pr5DlnNnebqDeI7HXfRFPXjZPdLpBpSHXf7hd9ADcRPMjPHojxFrmQWkmR8kjhfk mYXDjqm5QaZ5qayZU6rZmS8Em3kpUkOEMEU2gGIYc8/ZkCRUWZjEhkUnfSPKMZyh vUSnXDkzSRwRn4PYM5OoiHNWdgModUyqgGxLOPyAGlLBZIyvMhDahiIjlYXjbbjm a7o4bbLYUKzmT8xCos/mbP/EBqMj6GqyQ4yXVpaS+Y4weI+fI5qzOYPRWJtLeI61 ealcOoNfeqbneI9TuqUtWKd7mqZ3Oo5/Gqd/uqdrmqXvWKV1eqajmaaV+qWdeqkh GKlZeqmTWqh9+qpTeqWRY6urmpqzuqmBmquhequxmqeFWo+NmqpzmqzDeq3dmqrH OqjRuqanWrGatVQ6LUHjl6+7K3sD469hpPyCJlc4GZpKQ5HeF2bWlkLTdfzwNmcv LZQzTXUMJyU/LdaIQwim4B9WxrMhurNl7h+mIAj8TWHqajrGgpZRLZjnoxoS2IDL aD7Io7VXW6PRRYA1ujzcZYuy42AVtmD71aTPmKtlWqb/YXqlkXuD19qmjZqumdu5 m9u4Yxq6u1qtYfqooxu6i1u7j7qsVfq6wTu8s9uEp5u8z5upl3u847q7lbu9xZu9 0Xu9y7u6qdu+pfq9sZu75Zu6v3mXPFZcTo5SoQqcCumcNddFMNd8RFJCGRuTL5RJ NGsxLtlzLZRlL/yH9dnB+eeTjW5K3Fe1nOiP/kBoUYmWfoMGbEjFTWbFW7xFaEA4 4GaC1kZrzKbGq4HGwZijbVxtyCaMF6Vs2gRsLhotaPxor46N95uD8du5kRq/mTym v7u+1bu6nfyshxq7Qdiuxzu5s5nJrbvKtVqu6TrL4bvLb5rK57rMtxvKx3zM1ZzL /+Ncrb8arNdcjf2Yy3mayrUbpeNbzuNbvzWsgsC2kA+ZbM8W0RP5huTwkdnqsCWN k8MrMUzvsNEVJC/Uk191sE10smeIdSzbnOy3RYWABvo3CPpXf0+df2mgtNUJd2jZ l/8F1oOZPUDEOwjGmG9dPGL9ON7jPm59mHfZlo+ZwIa7jvR8zq35zIv7yZdbypf9 vqUbp8f6zwM92uu72bf7uJM9rkd4zZVc2slcuu1825d8zjV42d2bv/d726e8j+cb rtmdvFH6ud0d3bk9scKZY8bZWgD6Dw48hluMfPKQn4GG6IA4w5dEszQrw+f5fPV5 6ICY0jQd6WZXEmUVaSxxoP9VcVH+QQiEAAmEgA1AXuRJfuRD/uRLvpU5XhNLkeWP 9+WTF+Z91+V919jpCNn9vNvXG8yNO93xnc3nm73J/b2vXcqD3ujD3by/vd3Pm9t/ 3t7lvemh/syhXuqpvum527qtnbnV/cvTXOid3r/vKHpLZXr17JgY0q+7a2VCtJ+F BpoMYeYcanRu7IbJl7EpfmcVG36thcDnF89WMrCCoA2QYOQL//ANXwgQf/EVvw1K myYjn4EnX/IrP46SXK7rWMmv2rynW6mdnL7ZnKhH/6xJf65NGKvBPezLmqiHWr17 3qWr/rlZH67hvPN3fqfdXKzXfcv9HPSvm/PNXKuz2qr/27v29fjoj5vri0qFA5yF SWpk6jBzA14xYYSfIXmd1ZnoliWzcOTBS+PhOUnisd9/iNifq8Vn4zBpliY1i1YI 0NgPQh6hzZb+p4CVkcAP0Hjlj3yM+Z+kcxUgVP0bSLCgwYMIEypcyLChw4cQI0qE iGKixYsMK2LcyLGjx48ENYLcKHJkwZIhTapcybKly4Sqqv2j9k8mTZkotlDRyXMn lT8/twD9U4XKlKNGkR6dkpSpUz9+/vwx9KfQ1KpXrVLdenVrIVVRw/4Jm+rrH1Vm 0apNa9ZQIapascLNelVqIaF4/+Tdq7dvUKBbqgD+6bMnihcwEBPctrjxQMYoxOn7 /4ekDYrLmDOjaCPknz5xIhk/dvxPdGnSplOjXj269WnXqmGzfk07du3ZtgW+3M27 90WUvkleDk68OEnjBzG/BD4cufPn0CEKtL0tJ9G+fKUKlTrFzxQ83b+HB++9PBWo qq6mp4qWPVv3qgypSkUtVao/96Xqx382VXxVAH7l31cAyiffV2+dlWB7CrLX1YNc 6UVVX9rpxxdfggmFghYwaPGCTTXNFOJNIv6zA1R+vKDZipihuMNAJMY44owg1iii jTLiSOONPObY444+BgnkkDriqFt0SCap5JJMNunkk1BGKWVLsAiZk0+ACaZFX1sK 5RR4RoUpnphG+UFFXFLNpf+mXGwa4p9UYsU5VprqKbgeW+vRtWZcVvVZ4YVcBipU l0MJVhiWVByWGAwhMuZoo6cxtsOklFZq6aWTQvqoTI8yxmmkmp726aagelpqqDGE amqnqrY6qqinvroqqK8eOeWtuOaq66689urrryalAmunKPwkWIbYUQiUd+SJx+x4 3Z3nR55cUVsnV26pRRacc4p11lkHriUuggxa62BcXKFbV3bJbtduoMf+gUJiHgpp 4z9CTKoDpfvqy++/O3QGZAwwELwjo0X+qGPBPhbMcE0x2DtTDAlLbDGRCt9oK7Ac d+zxxyCHLPLICMWU8ZU96eTXdVSIqdTLToX5U4V16cn/prpgQTVUVD/xjN63qfhx X3pqQWgzn1NtZ5WF7wL619OBDZayT4oqJptsKOxwGaUsbj3p1imslipjY+Nm9mhj 3wCb2qWxzejVp5UNN3Vn3zY3QRuTrPfefPft99+ANzQdatYh6+7hfzireLN4nNed H9he2+Dk7X0l335Cc8ttVJt3K9XQ4Ya74OiRm9vVFhOiTrOygOaF7IYdfhiijTKB +A8KNOSuOw/5CsF7wDzorrtGtd94Q+030MTo8iLCcAPCz1McovMIz578P9WDWD2j 1BD8/Ijey0S99A4bXzDtOxZPovqzpz9i3oHHL//89NdvP3FVtg8iClJjydeYSzEK /5hi9rgJ6SdydEqX0TwnJ8KY6YGEWVYEORe5NUUIK0v7U9MElawtxasKPelf1RjF qhKeBgVTEJ4KVzi8KVTEhCTEXttIeAOyRaqGbbOhCbdxg7R1Coc81OE/fJhDGTIm hjTc4amUyMQl/gN+94uiFKdIxSrST1g7RIHhlFWhxUHrWeUxmoNKl6BqmcVznQsL is7TM53JiXNrKZ0Y58i0LSyNXa17l2CK9QIOXUwmt7vMFCDiwubgyHvbmx7ESOQw g4lPejEinwwZ6b2bRKwm1+PeJCHJSZsY7I8ZA+VNoGjFUprylKhMZZNM5iOUIWpl LQugLJVSpuwY8JY3s9mc2P/ouZ5JEIIQlKAwH4SmqijtmHXcYF6gZqioHWpqI6zb NupDTfpYs5rYvCZ9ZCO3tj2Gban65tVwiLa41YZtpgmnDP9BThyW7Z20eZvd5km3 uw2ElKrMpz73yc9+SmRwsClcsv7EuPDc4YvnmWO11EM6OyFoTppj4FjMNNE2vhE9 71GoQlWnlzsyTYN5FMrrOOShis3oIzm6nvaa17zvVSN63KvkwQxWPeX1qJMTcx4l H6lJ6mFMlD99nz+HStSiGjWf+dORK4ciFAcS0CgHJdMUPrqfquryaFKJ4JZ86UA2 AtOrYB0KVjPoJ4+CdIOE8mChBtM/lSUKMYqRVas6Itf/usbqrqyya17xSiu+kmqv gO1rYP96Gnwe9bCITaxiO4ZFVRXrOhgCz0ELCsap1iyBbfqWHN1jCG9JVCxtDKvP eAm5B6VHXRbUpR3PetY8Gus68+rjC0D5EZPaNpRBvS1QdZtb3NrWsIsNrnCHS9zn sHJHrnSrTppCBSbArCl+yCPNcEkn1I5lgsLkJVi/yt2ZIe0udkFmazcItaY6MzBT gyZc5VlPekrzvfZ0b3zbS1/4yve+7QVucffL3/769yIArY11+EIFyiruoGGk7hzz xGD1hOuNn62ohKESWoiWS6MVXCBHERfSviBrpLErHvpGzCP2ibjE7iPx+lKMYhXr /6/FMF6xi08s4xi/uMbU0O9/d8zjHvc3qe2jCf8Q5Z2DwiyqBGzcu6x6wJpFTl3Z HYp2u0tl7y4QK1Qdbx4JFa/XPpMwhlmvE5tI5jGbucxoPrOa08zmNbv5UTr2sZzn TOehNraEWvRwkacwWYPyeXEz20+Gx2haCCGosxGO01crGszMmXHQGMbyXjzaYddB FrZU6CMMduvbTnP6070FNW9H7WkaxbnOqE61qqV4XBtdCShLibWsn9sdQK1uOwre U126ml2KcpXKpS2mIZCZFy2/62l+OW8zv6zeRdm3vvN9trSjTW38Ttva91y1trfN 7SgGODXWcdxBx/1nAyu5yf+QznCDOXtGCM9saAvCD+ekwuB4p1ujd0ydWZWpRw/r ZQuwK2mpSS3qgRu84AgPtcJtcupuO/zhEM8VkGV0JQE6JdYDFJOSpcvkJgs7l4jm dc90TXKPO1nSyaw0Bwnl5fOC+cvR1KtgZ07Ymg+L5je3+ax07iq/5vznOwd6zwf7 xIgb/ehIz1VjZVWsypr7z9HdNwYjbTprFQ2NQyv0ZrVuNOuqi9IdNTZfuLwyEO6R XrNd+MHVnnCCs/3tbv9t0udO97pDp9U8QuHFj+Lcvcc6uhu8dZrc1WQ6GV6XpVXg mqp78sOD15j87jCym0n59DL7rc6uNrSxzfnNe/7an9f/fN0abvfSm/70D/n2YlD4 9D5TdF251ui6NUv7yv3n0JST3Oxnf+/Ysy7lkfe3SP8dcNmZOMj/EJbyk8/85Tu/ +dB/vvSjT/3pW7/62L++9rPP/e3j+MakR734x496ILMPBeA58t5bFvxid9yAmMXl va0bf3RfVj8ZbP+7CLXM6xwrhF8mQmLWZgT4ZgZYgAh4gAqYgHBGfg74gBBIEHdW Kij0LOS2Z9gBdoRXf/dmdeRSCLAAIJOzUFtHgpEWIUqzOijnfio3fPGyBVHDR34E d2sXdzV4g22Hg3AXfhHYgz6YanhHInrXXDBzFDCof4I3XYhzctkyFaoAC2xyeL53 /1lL+HstuDJNlWyUlyWWZ3nRJHpg2HmgN4ZhGHpi6Bo8+INquIb/pXqPwXp/Rm4H ZSH7tlpSeIKF9h8GoocXRmi7Jzm99yBhJyHaUYfAl0cf9m8ZAnAkJTs5+Ig0CIk2 KImhlIZseImYuFgTNyN6dxRGthSAx3/81nGkaFXwMRVtcXIf93GlmGX6N3bwImVs FYCXF3M+F3S4OHQ4l4syx3O9KHS/yIu3qIs2Z4mZeIzI6E9LR4Fx6GcD1S5Sl1rS mFm3V41lBIjEhIdeVzMaqIGH+AeimIUvqDJmJy9oR4noGInqOInr6FvGmIzwGI+m FIQh0omyBnjIloUdloS/x/+EbZEgrMiNVTiQr3hsWJglCHl5XXgoX4hfd5ACLmQU qIAKzSAKqHAH4yYForCRd9AHfDdIZxiSZjiSZCiSeCOPKJmSRuWGpYFCCPZnVDWQ sReIJsiHouOH2EiTkUaIPEmQVzh8MLiIi1h8NHZjgXQZTLCRzBAKqGAHUiAFd8AE UCkKUCkFLiQFFXF8Wsli31eUXol8X7mVMwaWZCmWMTYfsOAfqZCWaKmWbLmWbhmX bTmXcEmXb3mXclmXeomXdpmXfLmXfhmYfTmYgEmYf3mYglmYiomYhpmYjLmYjhmZ jTmZkEmZj3mZklmZmomZlpmZnLmZnhmanTmaoEman3n/mqJZmqqJmpb5fehHQPsX fCrYilWleOSSWfJHm/vxkwWpVl0mZVPTVjA3gGvmQlPABBVZkaJwB6HADKjAkaIQ ClQpBc5llQy4gEYERNh5ndy5nd7ZneD5neIZnuQ5nuZZnuh5nuqZnuy5nu7ZnvD5 nvIZn+jpkjBpbCBlXTqpbqlIaCa4n3RhVd3IWgX5Qf5WjkEpL5k2g7eFlMxgkagQ CnYgCveAD9NgoffADEt5ByjABFIpBUQSPQlTU9ODSAMjPjPSSONTIyqlg+z4oi4a o+kIozMqo+1Yozh6ozpKoztqozz6oz4apDkKpEMqpGpnj0e4E/rIVEjYj05qcovX /3hJE5PfyJtLukzKJpwLuZANSV8udAfOOZF2EAr34A/48A/+4A9leg/3EArHOQVS 0AfjJBrkdE5rczdpw02v0U4kWYYl2acm6aeCGqiECqiG+qeIOqiHqqiJWqiNuqiO yqiSGqmUCqmW+qi44ZJ/sZtUWoj2B6BkxFm0B6pXlm/4V3h26JPBl4hAGTUJCoNE WWpIKQp9EAoYyQxsaqZmig9sGg/MIJUoBKIp1TCfZKIrFUk6hUk2NayKhKJE2qNF Gq3QOq3PWq1Gaq3Siq3Ueq3cmq3duq3eGq7gyons9xMsdx1qFY7PqJsd5ycld3i6 yYIFmRdpVXZr1XKHIpxaiv95cXWLLtQHy8mcZBoPuooPasqrGcqhbypXNOQ8R3Qa NCQrz9NDtIJDEXsqMRREmER0wsixxAiMwxiMH9uxuziyJiuyKBuyKuuxKcuyK1uy LQuzL+uLMwuyLnuzMouzNKuzNpuzPruzP9uzQDu0Qlu0JEu0R2u0J0uBf8FhVjiI tYmbUqufXPdkXXdlBpR/eDGgS1aQr4UsX/tvxhKD59hbghSVdmAHuJqr1KCrbAoP 99AHSMkEJ8pS3dNIzsojJFoNBFOseRtJNRIxkDSu2lq432q44oq4hHu4jJu4jbu4 jhu5kDu5imutr7YTW5iPTUqQSZhBCkYhj+ekVkpeB4n/uQmpXAqZumGWefj1r3Zw B1IgnfFQoQZbuxnqq8xwGCg0pwPhTnb6u3QavEPkTbfRTYzSTZc6qaZRH0LTvEHz vM4bvbAQvdBbvdR7vTmWvaqgvdy7vd7bveD7veIbvuQ7vuZbvuh7vuqbvuy7vu7b vvD7vvIbv/Q7v/Zbv/h7v/qbv/y7v/7bvwD8vwIcwAQ8wAZcwDkGC3MzYM8ok9ox k3hIqhLceBuWOqlDpbY2FoVAFmGxwWMRNBpMFq/KiCFWljMCka/LBGn7oKJgDGya oRp6DxD6pSCqlcaKPTL1UiSaPTnlUpkElseToiY8lmbZlUMcY0FjEcLiEUuskk78 /8RPIiyuKYtNy0FXqEHseqp+ksVWNboqR3aGMicxQQ3TVA1kTA1mnMZnrMbUIDQM SZxkxmcYmba26gd90AzxgA/NoJwUygzNwGfGcAf0OZ+EHJ5+cBEK7BGHDMWM3MjR kchZxHF4BLpMNsGWjG/5mcld22E00cki4smgPBPTNBNtrIgKqmmgBJVMEJVgig+4 2gz3MA0w3AdgKsMAew92QLmPW7m+1cQS4csbAcyOPMzE/BLCkjA5sWz3WroFyY9V iH+cK7r6V8WuVboutwV+YMZljMbcrMbe3M1t/MasS1938LqvOwW52qv+kMd5zKZ+ TKERqryYKs/0TBuLPBGJ3P8R91zM/NzPIwHJhJPBh2OqdlF4TBjBo4rQkOa5ntqT hih4F1IIoTzRn1zRNBFdQ9mIvBW7aetcuJqmsHwPs2uh/gAPD/rOd7DLKi25NiHM D+HSSuzPMj3TwYxbKBPGg7Jy85plUVrQXIzBO62u9IquLAOcfrDN26zGSc3N2yyA zhaMfVCrd7CcIz276uwP/8CmG7nHABuzSLu0PJu0Yg3Wp7HPBoEiCZHPEogibM3W Lm3Wc1cIA/EHCQHTB0HXHGHXESHXzoHXBaHXNI1YAM106orFA5V/Bp0mCEK1hGYV 1rKNVrsfhXBGW6vJqCOveJEeGzTRowzKnf3ZUVGOsVX/L701BbbKDGkrCsxgDM1A phqKq7JsDLSaClPwunXL0nqry6K2TTBCEG0MFTTR2wPRxMH9QFDxOMbtB8FdIoAt JX79EFFBEM/NG3wtER7s19N91wuB3R2R3cHh3RNR3dK9JOId2BxzzCejXDjNpD8J CyG4BUVHDR/lINtreNQwbFR6HxIN0X0h1wKRHpL3B/I9eUPxhJibMtkMztVAHwpe JQoezqtrNfi1nKhgDBLaDGvbpswwuxuuoajgByg0pnrKQyM+vIcaA3VKHW4zz5QK 1wSB1gih1gPR1jQOFQgB11ah3/ghgVVREPxR3v/A3T7eEMKc3XyNFfexEEk+18QB /94LId54DeQGIeXjzeQcQeW94eQRYeRLouXmrSsAHVACbSEWbNAGtL0zIRBUEeTU EIJ/kJY2IeBOWA2GAAsgaAj37RY5huYAEh8C7uchCIXscd+qsA1b8ITDJh9uHh9b IN+wcOjf4uaHHhMA3i6pACI0kTNm/MlAQQ2hjNHEp9FHTBO03Acb2gf3gOFr68qq 7pxSucopbWJBPGItWsRGWTwxFZaTdOujzuu2rustfRA1buN/XSLDfeyk/Mkubdfl Xd3OThBQHuQvXuUK4QdWURAb3OzQ/hB0HeXQ3uMIURX37Nfjfu1z3Sczju5BvsFP nhDePhDqPu4GgUH/kO3Pnf/tCOEn017v2w7v4D7l4I7d+L7u/y7dA48VCTHw527t 387uwm7u687w4Q7x8p7uAi/x9P7lwCLFRsk/v7lFQq1MgQ7fqJNja1kNdJ0eQW4I /4Dn8+HyaCzXCOLpVTLZ9U4NMk/pObYdN08g9b3n/7AFKN/tbC7f8r3gIei9Y1sY Ca7G5uHpZlweTc/NTq0YaEbLEYradzC7xhAPeWwMrK3H93BQ1RkKMFREPOSwE5sq DUuxjrL2cfM9PyREP6T2OtRDct82KD7ITQTXw27WMv4Pyk1NhM/gLu7iVg7vU574 /K74vkz0/Z7v2j3kc63fDCHXS/zujU/50s58it/5nf//7KDv5Yxf7KG/7Uce7tSu +UAu5Klv5VgOzK/f+U3c+qvf7qOP7Juv+ptv+7AvgYnP+qWv8b0C0HjWOlxLeIhd 0Cz/D7BAFZ4u7VPxRHQtLFfR8vVe50dPE3J9FmScCm7C739ObzNRDQKRY6QsFGyu CiQf5NUAgjTPGHqRY8mCLJ08TdMk9Z6+LFNfxlGRoACBgsoLLTCo/av272DChQoR /pNiR0qoPn2YiIoXzxg8ZsaY3WsWL9QdJlNQSLnzsCG1GAlhIIyxsqXCmS9dIryx MOa/lytVxug5U2dDmzt78qTJUOVSpU0dOvUJlenTVAf/OfSTVeuUrA6vplr6r6pD /2rUtolFOPbqQrBX3br98zbuWz9XC9G16/au27py3/7t+3bv1cB/5/7lm3du4MJ2 /fz5M/juYciFHhNO/E9yY8T/Dhu+uhg059BwTf97HJmz5NKeT1/uHBmvZr2tXYO2 /Rmu6ry9Kce2LBrz3+CyFe8OPhx1787NnT+HHl36dOrVrV/Hnl37du7cwUpNiGJL lT9Uxpf/syX9evXt2b933/5fe2qp4t7f4tnQP1XUIP+hpj9VAJxMQP8ADHALVWDp 748F1SuEmi0C9Mw+BtP7h4oDXQMwlQYLyU+9Bc0jcQvz/CirmrKoqQYWP7ii4kU/ NGRxRRVnNNFEFF6AgUe3zv+6Csh/hNzGj4gmkmIKJu5hkpl4mmHyHlFIMmkKO5oJ 8sd/YhjyhiBv4PKsMLfs8surXrqKyzO9HPJHNrkcM0035fznBiDtvOoGNNvMsk8+ /yRSSz8D9ZM0wrrqDBbEUKyvLK0YJc3Q25j7yja0Kozss7ak2/S0SmN7rq37Pr3U L8RGtZRUUQ0bDNTO9pqrU83+kNXT30p19TZYPZ21Ofs+vZU13CbVrdRVWxPW1Ns2 rbVYDnlVNdXupqW2WmuvxTZbbblTFNAfxYNvvf/SKwSyLQz5r1zI0F33v/3QNeQg VTjcr5pRywKrrbLqPWg/VQSsRkVDJgsQ3f4KAWveBv//gSUhBxl2LT9D6v1XUYXD rSJCFRXamBoZY/RDxY5VLPK8LbZAoSAtXgDvKYemuGMKKZJE4SR87vEHH3ymaeYO kphAQck+UooqJ6SIwmkho48KiiGhkl6KaZdZUqpppG6qeuqpotK6Za5XGssnj7NS 6qCDwDJbobbAKtKPVOpqdOpaaxOMbtqYS3ZS5U5FrNXP8uY7tF2lzftvuoNdNDPA 6l7u7t/6atVuYW9l/G7I7aaUOGTpZqxvyQPXlXPFPyfWc0oN9+00v7dlvXXXX4c9 du+6dkg8Kv4g7/bcw42Pd/gMcW9cdyuDTBV1ARyw3XHLZbdc9cZ9HsRxVWlPFS3m /xN+3Nv/MGT79Uq8/cQWU7RRlY9ThAX9ssrLkYode7SpzbPOSmj+IS3yeSQlUbjj ZnziEYUdjGEHkpCEgH2on/yQsg08xUBP8gPTAvHEwPrpKYLVANMEH3IWGETwJfZj YAcZKCacOPCDPImg/RKoQgXSr4UbVOAK2yTDxghJK3+yCiyEdBBGVYUaWtCKo7wy umHpxTiCO6KsADc3+5QLVk1ElWCO2BzJUKZcVKSV5qSYrCp65oqYk0u5NjU4L8YK jHaJImV+dSonumWMmUJj5OIoOVrNZTBMtOMU5dJEI66xjHj8IuDmWLmvHJGLdpRd IhW5SEY2MjvdciEIU+a79v+oKz7HW97wiMc87nWSk/DKFLo0g65PerKTmzQXuVIZ vPV4pnevDJcWwlUjkdnIY1pYES1r5DHcnQcFPVrZ16aCEiYU0yL7458UinmPUADt DgRkQkS2Nk2vUXMn1cSm1o6STWFyk5pdCxtZxJm2tKGNLAAiC4vQUo0IjXNujpyO HOE5T9jJU1v2pGc+9blPfvbTn776pnhydx7zkAeWB6VkQlO5UHE1FKEP/V5E1XO7 iRKUoN9rX0ZPRI309aejHG3UR0UaIByR6H0+GpSghjSlkYSCInegyIvu0AdmTGkK QxOFKPogBVGk1Kfe+ikDHUgooBaVqHc6qkqTGlSlNrX/UG6xyhCjOtVuRdVtWnnb oxA1REn906tfrZazrsVHsJbVrGdFa1qhA0mlgguh5mLX89LDrk6CUnl1xSso9ZpX vt6VrnEFLEPlOtj3rDKh6qmCD3e5WBWRz7Es8oPJUKYylj3EKQm57FQw67LNNqSz ltVsaDM7Ws6KtrSk9axpU4ta0LJ2swwJJznHKU5zyta2szXbO9W6W9721re/BW5w g2vO19YOPbsjj0H/IEuINtd3gj1sdCHK3Pfobj3IxSiJ2FciFHk0QCD1bnjBy9Ht 6ohHPgLhC9O7XvW2l73vdW984Ttf+daXvve1b3sZhVv+grS//01bV4U7YAIX2MAH /0ZwghHD1vW6VaGqbGimsnc8UJayXXvd610zKbwtWLKw4TKsc3uXXFqtqD9lSV9Z TgxSFa/oMScjj0AIYpBvdpN2NsZxjXXsTR7feMc+7nFU3lYWhRB5RUU2G5F9iGQm H9nJRlaRbhU8ZSpX2cpXxnK2vkO7mnXZy18Gc5jFPGYyl9nMZ0Zzmseclaqkws31 ebOb2xxnOXMFzOfd01KN6tQ9M9XPfQa0ngXN50H/udBieVuir6poRl/VRY2G9KIl rejvGsjSlcb0pTWdaU5v2tOdBvWnRR1qUo/a1KVG9alVnWpWr9rVrYb1q2Uda1rP 2ta1xvWtdZ1rXu/a170uNf9bDU1oYg/b2IEuNrKPfRY5N9vZz3a2sIdE2SD/OMfV xjaQtX3tbVvb2/j6blX6I+5GjbtR5EZ3uNVtbnNn2d3vhne85Y1lbtfb29m2N77v 3W194xmGLEyvDCMZwxcK/N8zLHjCA65wgi/c4Q2HOMAjjvCHS9ziFJ/4wC+ucYxv /OAcB/nHRW5wkjPc4yWveMdVHnKUZ3zkJl/5y1POcpjTfOYyd3nLT15znO/85jqP OdBtnnOeC73nQS960n+udKIv3elNh7rPo470p0vd6lSf+tA3DswX5JvfX/d62Pct dn2XHexjR7vZyX52taed7W9fe9zdLve21x3uc8e73en/fne9553vf9974P0u+L4X HvBT8feyk31oxi/e8YqHvLIl3/jIU37yj7985TFvec5v3vOaB33mRd/50JN+9J8/ felRb3rWr971qod96mXf+tjTfvabpzZoV3ta3u/e963tPfB/X9zh6174xyc+8o2f fOYv3/mfbT70n69a5Uvf+tSPPvan79rtBz/73L8++LUffu93v/jkP//41S9+9pcf /dVfv/vjn/7201/+9Yc//r9/f/7b3//57z8A/L/9G0DzE8ADJEAENMDkwzNoc8AH hMAIlMAJpMAKtMALxMAM1MAN5MAO9MAPBMEQFMERJMESdEA4M8EUVMFmQ8EVLMEW /3TBGJTBGaTBGrTBG6RBFByIgpi3HvTBHwRCqApCxIiq3SrCIUTCJOSnqEq8f8AH t3jCq4hCJ4TCKpRCK6TCK9TCLOTCKfRCLPzCLQzDLgTDMhRDMyTDM1TDNGTDMXRD NHzDNYzDNoTDOpRDO6TDO9TDPOTDOfRDPPzDPQzEPgTEQlwLQyREQUTEQWTEKjyI RlTESEzEIYLEVoHESbzETFzETYzEu9gLTZREUMREO7REThzFUCzDJxTFf6CsQ7yt VwSwWITFWZTFWqTFW7TFXMTFXdTFXuTFX/TFYATGYRTGYiTGYzTGZPxFI1PGZkTG Z0wnXHRFZxRGZgTG64HGbP+kRm3kxtm6HmzcxnCUrWnwh4OQBnswm3u4RnFkx7SZ BoewB3RUCHUMRn+Lqim8RyHcwnw8xH3EQn6kRH3kQoAkyH80SH9EyIE8SIVMSHxc SIdsSIGESIakyIm0SInEyH6syIwMSI28SI/kyIKMSJAkyY40SZHcyJJEyY88yYcM SZecRpZcyZccyZasyZlUSYHkx/9Rh55Uh3h4Qpy0yZRsyUekyYH8xKOUSZgcyqW8 SaYUyqiEQk98C6ckSql8Sin0h3oox3qgh5y5B3toSqhKypzMyquESiu8h3pwQq90 Qnu4h7RUiCjkumnsxrtsx7zEy73Uy77ky7/0y8AEzMH/HCdrPLdzizPEbDPFPEw5 a8zEnLPFjMzHlEwUpMzLXExyskayiIdxUAfPBE11MAbB7K/NNJtXMIMyGIQsyILY YkXSJMzYTMZvhE1nrAdlsAd6oIdlqAd3KMdcBEfZvEt6cIfcpId4VAZ8QMYmrEq3 QAEsrMrnfE7opM4tbE7EmMLr/IvsrE4u1M7v7E7utM7w7Azx9E7yxM7yVM/0ZM/t XE/3bE/wHM/5PE/6NM/7fE/5rM/9xM/4RE/4BFD97M8A/U8Bfc98TAVtqIV4K0Kj /IvO/EkohFB1IFD7zM//JEhF0IEgAAJXyIIacAFCcNBSTM8v887pHNC3mM4KRYEU /y3QF7VQ/5xPqgRQMovRCuXP97yHfsCZetAHevhRr6yHeORKA72b8RyzHJVRJSXQ KNnKHw1SehhSe3gHf7jRv2hFcSqz2XpOakAB4axNMBXTMCXTMTXTMkXTbDRMSFjQ IXqLI9TIN+0MOHVTgZRTIpzTPMXT2trMf4BQ8cSHnoyH/+pSsvhSLq0ZQ62ZWTTN L9ABIHjURPgCGqABF2hNhwhOLe0yLzWbQ91SWASzThWzWTxUUS3VTR0nVCVGt3Ez hMFF2nxFT1UIWY1VclJVVVXUUsUtfwBS3aQHfthR4xRSXszU2yrUW9TVTjVV28JV 2+LVH9VNYO0HYS1OYvQ3fP9EUX1s0X8gM6xEy7O0ynBVynE1y281V3EtV3Qdy3Ql 13V1V29VV3htV3ll13p9V0ccolSohQU9034tso/EB880z6sQWJNM1Cw8WC5c0ek8 VG69yLRZC0LQgYklAzJIBC/YAUp1ARRxwr0AyIXl1pDVwoYlyoPFh+mE10S1im3l 1oOQTm2NQpK1ysaIG5WkUZDsUoa9CpmFqkSN2ZV9wpcdWaDNyHvoVX+4B36oBx4V 0rhMV489SJa1yYRdWZB9TmyVQpT9R6PVB65cS3pgWikNSpgksgyZMbvkVjAz1LQ5 1jR1W3+F27eV27il27mVRWtMBUWohVzi2771278F3MD/FdzBJVy/5VPZMoYIdY7O jAdjDVll1dWcVdbHBTDDpAEduFwdIANE8ILL1dixKNa1nVVOTVZaFV1RHd1k1cUv jdzamdVFPd3RlcWs4lghjBtYhFXcotXdtVVOdV2Xfd3S7d3+8sqt9FUpXUtlmAY3 cxtaDF3ZatvJhVzoPVXYlV7ZfcXi9UpfrYe1fId7YFXXhMUmHMQVPdmdNUVRVN/0 ZV9UdN9ThN/1fV/5jd/2rd/5tV/6pV8ErQVFQLJcajIjE+AkI+AALuAnO+ABNuAF 9tv/vUIHvYp4oFAiXJFAneA0lNqgJcOrDdnzTdgxzEdCwAIa8IKJ1YFHwFgamNQa /7gcMPSykH3ZmJVhO+yykbVRNjRfFM3WLTRfQAwnPL0qqwhDGh1DhtXg88VhKNTh NezhM/QHpF3LfbiHffBVKp5WZugUjzFDEqVCMbtDDkZfMN7gPkRae6gHYNVNKtbN K87inppDVoSBlUFbUq1hybXbusXjO9bjPObjPd5GvFWESCjcQSbkQjbkwT1ccSrY r5Cz2vXMOabc65VeTzVd27LGLHABSjXhMphUzMXkLDiI58Ve1vVd4DXl/tpU1WVb W2zdU2bWYVSLvyDgRoEbb3zNWn3cSk5VW7Ve3b1Ff2AGr9SHeDxe3VyGt5Flauip 2xLlVXZlX15bVY7dV8QHM/8GUnvgh2KmByymWS2mRXtU4m7tYOn0UnCdV7k813M2 Z3ul13tdZ3dOZ3ZG53idZ3WOZ3im53du54KEYH1dhMD9XwQG4AYm6L4N6AEeaIMu aMOdKn38zDd9s7foyYrUWvTVSJB12J3lZy6cAkqdVEctAxOeVBqQAoUoyyGyWpFN 27R94YYMM6xFSzBuWKnNx0KtSeZ1jlm2j025x5tVSKEVWZquQptmWZ49RDEuyGoG W+PUh2hABTdrDjgjMnw8aX6caZbMYYumyBVdydzkB3uAVix2s4QgQjdrhoaeyzMh iBeYY132XTvu47j2Y7mm67m267p2MrUJgjKozL5uzL//9uvABuzBFuzCJuz6iEZx Slx8PMKAVQdQ3eXIfuvfxa1LzuTM7eSJ1VhQvmVoBt5CfdlnxmVJPlVkdeZIlmzs na0ftssViUxklq3cZdZjfeHRptzonWZppgaj1U1e3c13SrI249i0aWbVxu3hddna 9mzVJifjBFtjrhXNFO7xhR/11FknZFjp1GCRddErhVEmNVIc7W7w/u7xNu8L9e70 Jm/1Pu8lbW/xRu/1lu/3Du/6Lu/4vshUSE3XPuT+9u//bhRwk9PslOBBXVzFrU+p RV/u5ODrRmLtDGGPNuESxtyR7gNKYfCDfdmids4BTdRtTVjs/gsFx8Kstuj7xOj7 /5QynUZM8fRpHobOHR5xFc3a+Fxi+NxKNd7RbaZTV3QxK+RiGndOC13RKyzyBI/Z 7+yHevDKfeiHftjm55jluhjYLIVeypZcWQ3tu+ZyvO7yL/fyMFdGvN1rwwa3Mw/w NFesNedvNGdzN29zNY/zwk7stAnUcRjYO1dO/oreVmbpXGVUzbxszCV0z63UVwhl Pi9tGMby1OblVB1V5mbuZtXdXr4tWTkLFveQZqtl4u7s2fbiUs5tS6903XaIaTDa eriqPM2lcUs0TyfV0xZ1SZZ0UL/F3FR1ZMbTXJqz5p2ta+1ZmfYyJAbeoDVqfLbn fL7nfa5nedbnZkd2Z192aP9n9me39mm/dmV/2HxlgzJIcwAH93BHZHxhSQm+4Kr8 TAOv9nSGWLW57I9WYY0V0Y7NyZqJWZNNUko00Zju4mh3Z8cc6CKTzEdzm3306Zru yGNfd5ash31AhZw+6DYzHyGGWhvOd20/ZybvKSkvsvRJBVioChSJwrLdQTQR85MH 85RH+ZVXeXHE2zLg6zgX95mf+cXsdNP8h54cB6B0Qp70TLo1TUJAgUqlVKK3VFjv clOPzXNjMzmzDErD3U//8mmoh3cA7sYyN2jD1Jan+mPe9f99bTn79erG37K/37PX 3/xVe7NPe7Zfe7R/+7aHe7enez5EUEXw39tC272fLb7/ly2/FyfA38W2GNsxNPfP 9Mmdr/tLJMhUyGQXwALID9ER1U65t/y4r8OycIapJsW7ufzFh0u0OMJZBrePD3lq iEIu/vz7DX0E+YuyUbdNNx/otPKWZ/nbt/3cx/3dL0zZmrTfj7TgB/7hF/7iJ/7j ZzTNhEWeRPxm2HOgf0WPyQIpyII+2Mzi5v26lu0u/01qEOvwVSyPHxs/eHpRYEbs 9+NpkIbXRhDXfhvLYLP9ki1wzvZkt39px3j8v39/X/j973/9B4h//6gJ/IevIEGB BwUmNIiw4MKBEB8qpOiQ4USMFTVelLjRY8eGEUVaHJkRpMmPJDmmDCmxJcySMlnO /0RZc6VNmjpBNsRZ8GfOoDiHniRKMOZOaoVUFm3K9KlLqEiFOo1qdSpRqUuXVsXa 9eZXmgcJ1jNIzU+qtGpvcvUqFezbpE792WMoSu3arNQWwnih5QVGgoIlDi5M+LDh xIgXK27M+LHjyJAnS65M+bLlzJg3a+7M+bPn0KBHiy5N+nRpaqZXo26dWbXr2KFh i9Yi+zbr3Lgf27at+/duy76DE4/sT/eLvjCAfvwZ0TnzjtCZPz85HWj15ta3a+8u nft379nDkx9vPvp56ujXq2+Pnf1799fng08f/z598fDzl99f379+8v0nYFz4DWhg gAj2R+CCD9nH34MHQljThP8MRphghQpe2GCGHUr4IYYgcijihiUCOGKIKaIokBYw /BUdjDHKOCONNdp4I4456rgjjz36+COQQQo5JJFFGnkkkkkquSSTTTr5JJRRSjkl lVXKmFxyU2i5JZddcokCmCmg8EIKVGhRSCGqFGKIFn+9gIKYYno5J5112nknnnnq uSefffr5J6CBCjoooYUaeiiiiSq6KKONOvoopJFKOimllVp6KaZzUuEXDKlQ4ymo n4oaalpagomCi7AItg01rP5TTSxbwAAnmFOkNSqupOa6q6698vqrr8ECO6ywxRJ7 rLHJIrusss0y+6yz0UI7rbTVUnuttdliu6223XL7rbf/4YI7rrjlknuuuemiu666 7YqKJQzMpmLqFC8UUs1A1KgKC7/6wlaNIS9MgYKWt7p78LmqwKIwwws7rHAh7EqM MMUTW1wxxhdrnDHH6P7hB8gfhwyyHyKXTLLJKaO88sgtn+yyyjCz/DLNMdc8s805 47yzzCF3/PPGQQM9NLUt/pWKKmolndbSSKdSyMBwwrBvKrCkebWaWauiGjWb1opX 02ErPTbTZDtdNtpnqy122myvbbbbSy9VGTWGxA033m3n/bbeffP9991+Bw743oMb XjjigidOuOKNM/744Y5HDvnik1teOeaSZ064H4VSoSnoXn4ueuhdjm566Vyernrq G1uuPihamstO+eyX17657bTrnjvvuPuONrwBAQA7 --Boundary_(ID_yTykCTJDBxvi6T4wvZX91g)-- From Bart.Blanquart@sun.com Wed Nov 5 04:42:55 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5CgtVk006507 for ; Wed, 5 Nov 2008 04:42:55 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5CgsS4047090; Wed, 5 Nov 2008 05:42:54 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00D0X1ZISV00@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 04:42:54 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CUF1ZHFQ10@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 04:42:54 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA5Cgq48020644; Wed, 05 Nov 2008 12:42:52 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V00F010I48800@fe-emea-09.sun.com> (original mail from Bart.Blanquart@Sun.COM); Wed, 05 Nov 2008 12:42:52 +0000 (GMT) Received: from [129.159.234.4] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V007NX1YUG100@fe-emea-09.sun.com>; Wed, 05 Nov 2008 12:42:31 +0000 (GMT) Date: Wed, 05 Nov 2008 13:42:30 +0100 From: Bart Blanquart Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <49118FDA.6080808@sun.com> Sender: Bart.Blanquart@sun.com To: "Mark A. Carlson" Cc: Darren J Moffat , David Zhang , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Reply-to: Bart.Blanquart@sun.com Message-id: <491194B6.70209@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> User-Agent: Thunderbird 2.0.0.14 (X11/20080505) Status: RO Content-Length: 231 On 11/05/08 13:21, Mark A. Carlson wrote: > But if they need to learn all new tools when they first get here, they > will not stay. If the tools they rely on don't work then somehow I don't think they'll be happy, either. Bart From David.Zhang@Sun.COM Wed Nov 5 04:49:10 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5Cn9AP006544 for ; Wed, 5 Nov 2008 04:49:10 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5Cn9NC049829; Wed, 5 Nov 2008 05:49:09 -0700 (MST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00B0329XCB00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 05:49:09 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CF629WZJF0@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 05:49:09 -0700 (MST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5Cn7Hk007494; Wed, 05 Nov 2008 12:49:07 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0K9V00I0125GJF00@mail-apac.sun.com> (original mail from David.Zhang@Sun.COM); Wed, 05 Nov 2008 20:49:07 +0800 (SGT) Received: from [129.150.144.39] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0K9V00C6529TWDZL@mail-apac.sun.com>; Wed, 05 Nov 2008 20:49:07 +0800 (SGT) Date: Wed, 05 Nov 2008 20:49:06 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491194B6.70209@Sun.COM> Sender: David.Zhang@Sun.COM To: BART.BLANQUART@Sun.COM Cc: "Mark A. Carlson" , Darren J Moffat , Mark Carlson , LSARC-ext@Sun.COM, scisfma-gz@Sun.COM Message-id: <49119642.4070504@Sun.COM> MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_DSvH7sXNkQMk4TdtBYLPAQ)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491194B6.70209@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) Status: RO Content-Length: 1977 This is a multi-part message in MIME format. --Boundary_(ID_DSvH7sXNkQMk4TdtBYLPAQ) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Bart Blanquart ??: > On 11/05/08 13:21, Mark A. Carlson wrote: > >> But if they need to learn all new tools when they first get here, they >> will not stay. > > If the tools they rely on don't work then somehow I don't think > they'll be happy, either. Based on our testing, the tools *can work well* on Solaris. It has some features which need to be enhanced, it just like our project. There is no project which is prefect done. For a personal tool of backup, it restores users data correctly with correct permission. We can enable/disable the encryption also. > > Bart --Boundary_(ID_DSvH7sXNkQMk4TdtBYLPAQ) Content-type: text/html; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Bart Blanquart 写道:
On 11/05/08 13:21, Mark A. Carlson wrote:

But if they need to learn all new tools when they first get here, they
will not stay.

If the tools they rely on don't work then somehow I don't think they'll be happy, either.
Based on our testing, the tools can work well on Solaris.

It has some features which need to be enhanced, it just like our project. There is no project which is prefect done.
For a personal tool of backup, it restores users data correctly with correct permission. We can enable/disable the encryption also.

Bart

--Boundary_(ID_DSvH7sXNkQMk4TdtBYLPAQ)-- From Grant.Zhang@sun.com Wed Nov 5 04:51:51 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5Cpps5006565 for ; Wed, 5 Nov 2008 04:51:51 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5Cpos3015786; Wed, 5 Nov 2008 04:51:51 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00B012EEKR00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 05:51:50 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CET2ECZ7F0@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 05:51:49 -0700 (MST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5CpmaU007590; Wed, 05 Nov 2008 12:51:48 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0K9V00G012A79200@mail-apac.sun.com> (original mail from Grant.Zhang@Sun.COM); Wed, 05 Nov 2008 20:51:48 +0800 (SGT) Received: from grant.local ([123.119.34.46]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0K9V00I4M2E35XA2@mail-apac.sun.com>; Wed, 05 Nov 2008 20:51:48 +0800 (SGT) Date: Wed, 05 Nov 2008 20:51:35 +0800 From: Grant Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <49118FDA.6080808@sun.com> Sender: Grant.Zhang@sun.com To: "Mark A. Carlson" Cc: Darren J Moffat , David Zhang , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <491196D7.907@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> User-Agent: Thunderbird 2.0.0.17 (Macintosh/20080914) Status: RO Content-Length: 2299 I agree with Mark. The point of porting many FOSS packages into Open Solaris is to make people comfortable enough in using the very same tools in Open Solaris. Back to this case, Areca is a backup utility, not a crypto utility. Encryption is just one feature provided by Areca, although as you observed, not very strong encryption. It is possible to use Areca to back up the files totally unencrypted, which is not uncommon in personal backup space. For folks with strong security needs, encrypt(1) or mac(1) can still be used on the backups. Areca is an active project and a lot of people are using it on Windows and Linux. Please don't reject it so we have one less choice on OpenSolaris. Thanks, Grant Mark A. Carlson wrote: > Darren, > > This case is to provide familiarity to Linux users coming to OpenSolaris > and wanting to have the utilities here that they have in Linux. Once they > are comfortable and discover some of the superior tools that OpenSolaris > has that might be more appropriate, they will convert to those. > > But if they need to learn all new tools when they first get here, they > will not stay. > > Darren J Moffat wrote: >> Given the unsafe nature of the crypto in this project and the fact >> that it does not support ZFS ACLs or attributes I see no point in >> integrating this into OpenSolaris/Solaris. > See above. It's not a competition for only the best tool to be chosen > for OpenSolaris, but more > a matter of many tools, some good, some much better. >> It would in my opinion be more harmful to have it than not have it. >> It also provides a false sense of security due to the weak way that >> the passphrases are turned into encryption keys (ie there is no >> salting so no protection against brute force key attack). >> >> For personal backups it would be safer to use tar and if encryption >> is needed then the encrypt(1) and mac(1) commands can be used for to >> provide safer (than what this case provides) encrypted versions of >> the tar files using a documented and committed format. Instead of >> this project maybe we should build a simple personal backup tool >> around the clis we already have in OpenSolaris. >> > There are better tools, but that is not a reason to reject familiarity > cases,. > > -- mark From Darren.Moffat@sun.com Wed Nov 5 04:57:24 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5CvNhj006942 for ; Wed, 5 Nov 2008 04:57:24 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mA5CvDhJ018581; Wed, 5 Nov 2008 20:57:23 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00F0R2NLCI00@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 04:57:21 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CS82NJFN40@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 04:57:20 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA5CvJCY023075; Wed, 05 Nov 2008 12:57:19 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V001011XG1800@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM); Wed, 05 Nov 2008 12:57:19 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V007KG2NGG110@fe-emea-09.sun.com>; Wed, 05 Nov 2008 12:57:17 +0000 (GMT) Date: Wed, 05 Nov 2008 12:57:16 +0000 From: Darren J Moffat Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <49118FDA.6080808@sun.com> Sender: Darren.Moffat@sun.com To: "Mark A. Carlson" Cc: David Zhang , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <4911982C.4000906@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 2604 Mark A. Carlson wrote: > Darren, > > This case is to provide familiarity to Linux users coming to OpenSolaris > and wanting to have the utilities here that they have in Linux. Once they > are comfortable and discover some of the superior tools that OpenSolaris > has that might be more appropriate, they will convert to those. Or the will continue to use tools with weak crypto that doesn't actually backup their data and whey will have a bad experience of that tool on OpenSolaris and blame OpenSolaris not the tool. > But if they need to learn all new tools when they first get here, they > will not stay. > > Darren J Moffat wrote: >> Given the unsafe nature of the crypto in this project and the fact >> that it does not support ZFS ACLs or attributes I see no point in >> integrating this into OpenSolaris/Solaris. > See above. It's not a competition for only the best tool to be chosen > for OpenSolaris, but more > a matter of many tools, some good, some much better. >> It would in my opinion be more harmful to have it than not have it. >> It also provides a false sense of security due to the weak way that >> the passphrases are turned into encryption keys (ie there is no >> salting so no protection against brute force key attack). >> >> For personal backups it would be safer to use tar and if encryption is >> needed then the encrypt(1) and mac(1) commands can be used for to >> provide safer (than what this case provides) encrypted versions of the >> tar files using a documented and committed format. Instead of this >> project maybe we should build a simple personal backup tool around the >> clis we already have in OpenSolaris. >> > There are better tools, but that is not a reason to reject familiarity > cases,. It is for me, this is *my* opinion and I don't think this case should be integrated for the reasons I've stated. The project team wanting to integrate this case can work upstream to get the issues fixed. The data loss because it can't backup ACLs, and other ZFS functionality I can not live with. This won't reflect badly on this tool, in some peoples eyes it will reflect badly on ZFS or badly on the integration we have done with this tool into OpenSolaris. If necessary I'll pull the derail lever and call for a vote, I'm happy to write the opinion text to formally state my opinion but I'd rather that the project team attempted to work with upstream developers to resolve the issues first. These are security issues and security issues don't get to be brushed under the carpet for familiarity cases. -- Darren J Moffat From James.McPherson@sun.com Wed Nov 5 04:58:32 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5CwWa2007011 for ; Wed, 5 Nov 2008 04:58:32 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5CwW18017802; Wed, 5 Nov 2008 04:58:32 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00C032PJ0X00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 05:58:31 -0700 (MST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CC82PIZGE0@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 05:58:30 -0700 (MST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5CwUkq007091; Wed, 05 Nov 2008 12:58:30 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V005012JB4N00@mail-amer.sun.com> (original mail from James.McPherson@Sun.COM); Wed, 05 Nov 2008 05:58:30 -0700 (MST) Received: from [192.168.1.10] ([220.157.71.44]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V004IR2OVVA60@mail-amer.sun.com>; Wed, 05 Nov 2008 05:58:12 -0700 (MST) Date: Wed, 05 Nov 2008 22:58:05 +1000 From: "James C. McPherson" Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491196D7.907@sun.com> Sender: James.McPherson@sun.com To: Grant Zhang Cc: "Mark A. Carlson" , Mark Carlson , scisfma-gz@sun.com, LSARC-ext@sun.com, David Zhang Reply-to: James.McPherson@sun.com Message-id: <4911985D.8030904@Sun.COM> Organization: Sun Microsystems MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> User-Agent: Thunderbird 2.0.0.17 (X11/20081014) Status: RO Content-Length: 1340 Grant Zhang wrote: > I agree with Mark. The point of porting many FOSS packages into Open > Solaris is to make people comfortable enough in using the very same > tools in Open Solaris. > > Back to this case, Areca is a backup utility, not a crypto utility. > Encryption is just one feature provided by Areca, although as you > observed, not very strong encryption. It is possible to use Areca to > back up the files totally unencrypted, which is not uncommon in personal > backup space. For folks with strong security needs, encrypt(1) or mac(1) > can still be used on the backups. > > Areca is an active project and a lot of people are using it on Windows > and Linux. Please don't reject it so we have one less choice on OpenSolaris. Please don't try to ignore the valid architectural and security concerns which Darren and others have raised already. If this Areca backup util is to be integrated, then its crypto support should Do The Right Thing in OpenSolaris rather than merely assume that whatever is being done elsewhere is preferable. Oh, and has anybody informed the Areca project group that their name conflicts with that of a company (Areca Technologies Ltd of Taiwan) ? James C. McPherson -- Senior Kernel Software Engineer, Solaris Sun Microsystems http://blogs.sun.com/jmcp http://www.jmcp.homeunix.com/blog From Darren.Moffat@sun.com Wed Nov 5 05:04:16 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5D4Gkd007398 for ; Wed, 5 Nov 2008 05:04:16 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5D4FOb029092; Wed, 5 Nov 2008 05:04:16 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00B0R2Z3RD00@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 05:04:15 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V005N92Z1SB70@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 05:04:14 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA5D4DJH022802; Wed, 05 Nov 2008 13:04:13 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V0000122U2I00@fe-emea-10.sun.com> (original mail from Darren.Moffat@Sun.COM); Wed, 05 Nov 2008 13:04:13 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V00MY02YZGYE0@fe-emea-10.sun.com>; Wed, 05 Nov 2008 13:04:12 +0000 (GMT) Date: Wed, 05 Nov 2008 13:04:11 +0000 From: Darren J Moffat Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <49119642.4070504@Sun.COM> Sender: Darren.Moffat@sun.com To: David Zhang Cc: Bart.Blanquart@sun.com, "Mark A. Carlson" , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <491199CB.3060907@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491194B6.70209@Sun.COM> <49119642.4070504@Sun.COM> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 860 David Zhang wrote: > Bart Blanquart ??: >> On 11/05/08 13:21, Mark A. Carlson wrote: >> >>> But if they need to learn all new tools when they first get here, they >>> will not stay. >> >> If the tools they rely on don't work then somehow I don't think >> they'll be happy, either. > Based on our testing, the tools *can work well* on Solaris. > > It has some features which need to be enhanced, it just like our > project. There is no project which is prefect done. > For a personal tool of backup, it restores users data correctly with > correct permission. We can enable/disable the encryption also. Unless it supports ACLs it does NOT restore data with the correct permissions and that is a security bug and is not correct. Unless it provides backup/restore for extended attributes that is *data loss* and that is unforgivable. -- Darren J Moffat From David.Zhang@sun.com Wed Nov 5 05:04:21 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5D4LmX007417 for ; Wed, 5 Nov 2008 05:04:21 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5D4L0U029126; Wed, 5 Nov 2008 05:04:21 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00B092Z8RK00@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 05:04:20 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V005GR2Z6SA70@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 05:04:19 -0800 (PST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5D4ICj007911; Wed, 05 Nov 2008 13:04:18 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0K9V001012UKB800@mail-apac.sun.com> (original mail from David.Zhang@Sun.COM); Wed, 05 Nov 2008 21:04:18 +0800 (SGT) Received: from [129.150.144.39] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0K9V00CBI2YZWD2M@mail-apac.sun.com>; Wed, 05 Nov 2008 21:04:18 +0800 (SGT) Date: Wed, 05 Nov 2008 21:04:12 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <4911985D.8030904@Sun.COM> Sender: David.Zhang@sun.com To: James.McPherson@sun.com Cc: Grant Zhang , "Mark A. Carlson" , Mark Carlson , scisfma-gz@sun.com, LSARC-ext@sun.com Message-id: <491199CC.3010208@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 8BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> <4911985D.8030904@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) Status: RO Content-Length: 1454 James C. McPherson 写é“: > Grant Zhang wrote: >> I agree with Mark. The point of porting many FOSS packages into Open >> Solaris is to make people comfortable enough in using the very same >> tools in Open Solaris. >> >> Back to this case, Areca is a backup utility, not a crypto utility. >> Encryption is just one feature provided by Areca, although as you >> observed, not very strong encryption. It is possible to use Areca to >> back up the files totally unencrypted, which is not uncommon in >> personal backup space. For folks with strong security needs, >> encrypt(1) or mac(1) can still be used on the backups. >> >> Areca is an active project and a lot of people are using it on >> Windows and Linux. Please don't reject it so we have one less choice >> on OpenSolaris. > > Please don't try to ignore the valid architectural > and security concerns which Darren and others have > raised already. > > If this Areca backup util is to be integrated, then > its crypto support should Do The Right Thing in OpenSolaris > rather than merely assume that whatever is being done > elsewhere is preferable. > > Oh, and has anybody informed the Areca project group that > their name conflicts with that of a company (Areca Technologies > Ltd of Taiwan) ? This is not the case. David > > > > James C. McPherson > -- > Senior Kernel Software Engineer, Solaris > Sun Microsystems > http://blogs.sun.com/jmcp http://www.jmcp.homeunix.com/blog From Darren.Moffat@sun.com Wed Nov 5 05:07:56 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5D7uQu007776 for ; Wed, 5 Nov 2008 05:07:56 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5D7tre000166; Wed, 5 Nov 2008 05:07:56 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00C0D357OF00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 06:07:55 -0700 (MST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00C7Y356FM00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 06:07:54 -0700 (MST) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA5D7rdF024495; Wed, 05 Nov 2008 13:07:53 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V00J012X4CB00@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM); Wed, 05 Nov 2008 13:07:53 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V0078N34SG120@fe-emea-09.sun.com>; Wed, 05 Nov 2008 13:07:41 +0000 (GMT) Date: Wed, 05 Nov 2008 13:07:39 +0000 From: Darren J Moffat Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491196D7.907@sun.com> Sender: Darren.Moffat@sun.com To: Grant Zhang Cc: "Mark A. Carlson" , David Zhang , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <49119A9B.2060909@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 1416 Grant Zhang wrote: > I agree with Mark. The point of porting many FOSS packages into Open > Solaris is to make people comfortable enough in using the very same > tools in Open Solaris. > > Back to this case, Areca is a backup utility, not a crypto utility. > Encryption is just one feature provided by Areca, although as you > observed, not very strong encryption. It is possible to use Areca to > back up the files totally unencrypted, which is not uncommon in personal > backup space. For folks with strong security needs, encrypt(1) or mac(1) > can still be used on the backups. Backup utilities need to backup *ALL* the data and *ALL* the permissions. If extended attribtues are not able to be included then that is not *ALL* the data, if ACLs are not included then that is not *ALL* the permissions. > Areca is an active project and a lot of people are using it on Windows > and Linux. Please don't reject it so we have one less choice on > OpenSolaris. Maybe on Windows and Linux it is sufficient but on OpenSolaris there *WILL* be data loss and possibly security issues on restore due to a lack of ACLs. There are still unanswered technical questions on the password/key management as well. I am very close to derailing this case and voting deny so that an opinion can be written however that is just my vote and the case could still get approved if that happens. -- Darren J Moffat From David.Zhang@sun.com Wed Nov 5 05:10:49 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5DAmWU007948 for ; Wed, 5 Nov 2008 05:10:49 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mA5DAluD002251; Wed, 5 Nov 2008 13:10:47 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00G0D39ZPU00@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 05:10:47 -0800 (PST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CJE39XFO50@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 05:10:46 -0800 (PST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5DAj2s008123; Wed, 05 Nov 2008 13:10:45 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0K9V00301329AZ00@mail-apac.sun.com> (original mail from David.Zhang@Sun.COM); Wed, 05 Nov 2008 21:10:45 +0800 (SGT) Received: from [129.150.144.39] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0K9V00C4539VWD3M@mail-apac.sun.com>; Wed, 05 Nov 2008 21:10:45 +0800 (SGT) Date: Wed, 05 Nov 2008 21:10:44 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <4911982C.4000906@Sun.COM> Sender: David.Zhang@sun.com To: Darren J Moffat Cc: "Mark A. Carlson" , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <49119B54.9000703@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 8BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <4911982C.4000906@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) Status: RO Content-Length: 3065 Darren J Moffat 写é“: > Mark A. Carlson wrote: >> Darren, >> >> This case is to provide familiarity to Linux users coming to OpenSolaris >> and wanting to have the utilities here that they have in Linux. Once >> they >> are comfortable and discover some of the superior tools that OpenSolaris >> has that might be more appropriate, they will convert to those. > > Or the will continue to use tools with weak crypto that doesn't > actually backup their data There might be too concepts, one is backup correctly, two is to have crypto correctly. The tool does it well. > and whey will have a bad experience of that tool on OpenSolaris and > blame OpenSolaris not the tool. > If I were a software administrator, I would not think in that way. I will shot email to ask the author of this tool to enhance it. I need Solaris, I would also like to search more useful tools. But if I can not find, I will use the existing tools which I am pretty familiar with. >> But if they need to learn all new tools when they first get here, they >> will not stay. >> >> Darren J Moffat wrote: >>> Given the unsafe nature of the crypto in this project and the fact >>> that it does not support ZFS ACLs or attributes I see no point in >>> integrating this into OpenSolaris/Solaris. >> See above. It's not a competition for only the best tool to be chosen >> for OpenSolaris, but more >> a matter of many tools, some good, some much better. >>> It would in my opinion be more harmful to have it than not have it. >>> It also provides a false sense of security due to the weak way that >>> the passphrases are turned into encryption keys (ie there is no >>> salting so no protection against brute force key attack). >>> >>> For personal backups it would be safer to use tar and if encryption >>> is needed then the encrypt(1) and mac(1) commands can be used for to >>> provide safer (than what this case provides) encrypted versions of >>> the tar files using a documented and committed format. Instead of >>> this project maybe we should build a simple personal backup tool >>> around the clis we already have in OpenSolaris. >> There are better tools, but that is not a reason to reject >> familiarity cases,. > > It is for me, this is *my* opinion and I don't think this case should > be integrated for the reasons I've stated. > > The project team wanting to integrate this case can work upstream to > get the issues fixed. The data loss because it can't backup ACLs, and > other ZFS functionality I can not live with. This won't reflect badly > on this tool, in some peoples eyes it will reflect badly on ZFS or > badly on the integration we have done with this tool into OpenSolaris. > > If necessary I'll pull the derail lever and call for a vote, I'm happy > to write the opinion text to formally state my opinion but I'd rather > that the project team attempted to work with upstream developers to > resolve the issues first. > > These are security issues and security issues don't get to be brushed > under the carpet for familiarity cases. > From David.Zhang@sun.com Wed Nov 5 05:19:25 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5DJPpN008052 for ; Wed, 5 Nov 2008 05:19:25 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5DJJ4c003789; Wed, 5 Nov 2008 05:19:25 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00D053ODIB00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 06:19:25 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CVX3OBG000@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 06:19:24 -0700 (MST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5DJNxf008299; Wed, 05 Nov 2008 13:19:23 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0K9V006013JZXA00@mail-apac.sun.com> (original mail from David.Zhang@Sun.COM); Wed, 05 Nov 2008 21:19:23 +0800 (SGT) Received: from [129.150.144.39] by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0K9V00CSB3O7WD4M@mail-apac.sun.com>; Wed, 05 Nov 2008 21:19:21 +0800 (SGT) Date: Wed, 05 Nov 2008 21:19:20 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <49119A9B.2060909@Sun.COM> Sender: David.Zhang@sun.com To: Darren J Moffat Cc: Grant Zhang , "Mark A. Carlson" , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <49119D58.3000308@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 8BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> <49119A9B.2060909@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) Status: RO Content-Length: 1615 Darren J Moffat 写é“: > Grant Zhang wrote: >> I agree with Mark. The point of porting many FOSS packages into Open >> Solaris is to make people comfortable enough in using the very same >> tools in Open Solaris. >> >> Back to this case, Areca is a backup utility, not a crypto utility. >> Encryption is just one feature provided by Areca, although as you >> observed, not very strong encryption. It is possible to use Areca to >> back up the files totally unencrypted, which is not uncommon in >> personal backup space. For folks with strong security needs, >> encrypt(1) or mac(1) can still be used on the backups. > > Backup utilities need to backup *ALL* the data and *ALL* the > permissions. If extended attribtues are not able to be included then > that is not *ALL* the data, if ACLs are not included then that is not > *ALL* the permissions. What if I shoot a CR to the author to let him imporove it for Solaris or for all Unix platform. I think that could be also a issue for Linux. David > >> Areca is an active project and a lot of people are using it on >> Windows and Linux. Please don't reject it so we have one less choice >> on OpenSolaris. > > Maybe on Windows and Linux it is sufficient but on OpenSolaris there > *WILL* be data loss and possibly security issues on restore due to a > lack of ACLs. > > There are still unanswered technical questions on the password/key > management as well. > > I am very close to derailing this case and voting deny so that an > opinion can be written however that is just my vote and the case could > still get approved if that happens. > From Bart.Blanquart@sun.com Wed Nov 5 05:24:01 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5DO0h8008134 for ; Wed, 5 Nov 2008 05:24:00 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mA5DNemo028838; Wed, 5 Nov 2008 21:23:59 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00I0N3VX5M00@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 05:23:57 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CVE3VWFN80@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 05:23:57 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA5DNuNb026766; Wed, 05 Nov 2008 13:23:56 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V001013DL0D00@fe-emea-10.sun.com> (original mail from Bart.Blanquart@Sun.COM); Wed, 05 Nov 2008 13:23:56 +0000 (GMT) Received: from [129.159.234.4] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V00FTH3VETN00@fe-emea-10.sun.com>; Wed, 05 Nov 2008 13:23:39 +0000 (GMT) Date: Wed, 05 Nov 2008 14:23:37 +0100 From: Bart Blanquart Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <491199CC.3010208@Sun.COM> Sender: Bart.Blanquart@sun.com To: David Zhang Cc: James.McPherson@sun.com, Grant Zhang , "Mark A. Carlson" , Mark Carlson , scisfma-gz@sun.com, LSARC-ext@sun.com Reply-to: Bart.Blanquart@sun.com Message-id: <49119E59.9000505@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> <4911985D.8030904@Sun.COM> <491199CC.3010208@Sun.COM> User-Agent: Thunderbird 2.0.0.14 (X11/20080505) Status: RO Content-Length: 751 On 11/05/08 14:04, David Zhang wrote: >> Oh, and has anybody informed the Areca project group that >> their name conflicts with that of a company (Areca Technologies >> Ltd of Taiwan) ? > This is not the case. It is not the case that the name is used twice? The existence of both http://www.areca.com.tw/ and http://areca.sourceforge.net/ belies that. Or, it is not the case that the project group has been informed? In that case it might be a good idea to do so. Or, it is not the case that there's a naming conflict? The name is used twice, in a similar sector (IT, storage), so there seems to be a naming collision at the very least. Both the team and the company may not find this problematic, but that is not clear right now. Bart From Sebastien.Roy@sun.com Wed Nov 5 05:31:33 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5DVXn9008220 for ; Wed, 5 Nov 2008 05:31:33 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5DVWf2008403; Wed, 5 Nov 2008 05:31:32 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00E0Z48KF700@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 06:31:32 -0700 (MST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CEI48JFS10@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 06:31:31 -0700 (MST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5DVVRS012327; Wed, 05 Nov 2008 13:31:31 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V007013ZETT00@mail-amer.sun.com> (original mail from Sebastien.Roy@Sun.COM); Wed, 05 Nov 2008 06:31:31 -0700 (MST) Received: from [192.168.1.2] ([71.174.191.231]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V0011W47Y2N70@mail-amer.sun.com>; Wed, 05 Nov 2008 06:31:11 -0700 (MST) Date: Wed, 05 Nov 2008 08:31:09 -0500 From: Sebastien Roy Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <49119E59.9000505@Sun.COM> Sender: Sebastien.Roy@sun.com To: Bart.Blanquart@sun.com Cc: David Zhang , "Mark A. Carlson" , LSARC-ext@sun.com, Mark Carlson , scisfma-gz@sun.com, Grant Zhang Message-id: <1225891869.21979.20.camel@seb> Organization: Sun Microsystems MIME-version: 1.0 X-Mailer: Evolution 2.23.92 Content-type: text/plain; charset=UTF-8 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> <4911985D.8030904@Sun.COM> <491199CC.3010208@Sun.COM> <49119E59.9000505@Sun.COM> Status: RO Content-Length: 435 On Wed, 2008-11-05 at 14:23 +0100, Bart Blanquart wrote: > On 11/05/08 14:04, David Zhang wrote: > > >> Oh, and has anybody informed the Areca project group that > >> their name conflicts with that of a company (Areca Technologies > >> Ltd of Taiwan) ? > > This is not the case. > > It is not the case that the name is used twice? This is not related to the architecture of the case. Please take this discussion elsewhere. -Seb From grant.zhang@sun.com Wed Nov 5 06:15:52 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5EFqT0010006 for ; Wed, 5 Nov 2008 06:15:52 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5EFmTu022872; Wed, 5 Nov 2008 06:15:52 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00H0L6AEJ200@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 07:15:50 -0700 (MST) Received: from sineb-mail-2.sun.com ([192.18.19.7]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CJN6ADFQ40@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 07:15:50 -0700 (MST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5EFmfN009691; Wed, 05 Nov 2008 14:15:48 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0K9V0020169UVJ00@mail-apac.sun.com> (original mail from Grant.Zhang@Sun.COM); Wed, 05 Nov 2008 22:15:48 +0800 (SGT) Received: from grant.local ([123.119.34.46]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0K9V00I6F6A15XQ2@mail-apac.sun.com>; Wed, 05 Nov 2008 22:15:48 +0800 (SGT) Date: Wed, 05 Nov 2008 22:15:36 +0800 From: Grant Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <49119A9B.2060909@Sun.COM> Sender: grant.zhang@sun.com To: Darren J Moffat Cc: "Mark A. Carlson" , David Zhang , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <4911AA88.6080006@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> <49119A9B.2060909@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (Macintosh/20080914) Status: RO Content-Length: 1817 Darren J Moffat wrote: > Grant Zhang wrote: >> I agree with Mark. The point of porting many FOSS packages into Open >> Solaris is to make people comfortable enough in using the very same >> tools in Open Solaris. >> >> Back to this case, Areca is a backup utility, not a crypto utility. >> Encryption is just one feature provided by Areca, although as you >> observed, not very strong encryption. It is possible to use Areca to >> back up the files totally unencrypted, which is not uncommon in >> personal backup space. For folks with strong security needs, >> encrypt(1) or mac(1) can still be used on the backups. > > Backup utilities need to backup *ALL* the data and *ALL* the > permissions. If extended attribtues are not able to be included then > that is not *ALL* the data, if ACLs are not included then that is not > *ALL* the permissions. Today's Areca does not support extended attributes and ACLs. Adding those is beyond the scope of porting though. It is up to the LSARC members to decide whether this limitation outweighs Areca's benefits. > >> Areca is an active project and a lot of people are using it on >> Windows and Linux. Please don't reject it so we have one less choice >> on OpenSolaris. > > Maybe on Windows and Linux it is sufficient but on OpenSolaris there > *WILL* be data loss and possibly security issues on restore due to a > lack of ACLs. > > There are still unanswered technical questions on the password/key > management as well. The project documents do not seem to contain the answers so we need to dive into code. We will report back what we find. > > I am very close to derailing this case and voting deny so that an > opinion can be written however that is just my vote and the case could > still get approved if that happens. > OK, thanks for the info. From Darren.Moffat@sun.com Wed Nov 5 06:17:35 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5EHYgZ010073 for ; Wed, 5 Nov 2008 06:17:34 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mA5EHUh4005480; Wed, 5 Nov 2008 14:17:33 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V0000R6D8FN00@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 06:17:32 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00MYQ6D3T200@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 06:17:30 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe3.eu.sun.com [192.18.6.12]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mA5EHR6s003643; Wed, 05 Nov 2008 14:17:27 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V00D014EBBR00@fe-emea-10.sun.com> (original mail from Darren.Moffat@Sun.COM); Wed, 05 Nov 2008 14:17:27 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V00F0Y6CKTN40@fe-emea-10.sun.com>; Wed, 05 Nov 2008 14:17:09 +0000 (GMT) Date: Wed, 05 Nov 2008 14:17:08 +0000 From: Darren J Moffat Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <49119D58.3000308@Sun.COM> Sender: Darren.Moffat@sun.com To: David Zhang Cc: Grant Zhang , "Mark A. Carlson" , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <4911AAE4.6000705@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=UTF-8 Content-transfer-encoding: 8BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> <49119A9B.2060909@Sun.COM> <49119D58.3000308@Sun.COM> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 1451 David Zhang wrote: > Darren J Moffat 写é“: >> Grant Zhang wrote: >>> I agree with Mark. The point of porting many FOSS packages into Open >>> Solaris is to make people comfortable enough in using the very same >>> tools in Open Solaris. >>> >>> Back to this case, Areca is a backup utility, not a crypto utility. >>> Encryption is just one feature provided by Areca, although as you >>> observed, not very strong encryption. It is possible to use Areca to >>> back up the files totally unencrypted, which is not uncommon in >>> personal backup space. For folks with strong security needs, >>> encrypt(1) or mac(1) can still be used on the backups. >> >> Backup utilities need to backup *ALL* the data and *ALL* the >> permissions. If extended attribtues are not able to be included then >> that is not *ALL* the data, if ACLs are not included then that is not >> *ALL* the permissions. > > What if I shoot a CR to the author to let him imporove it for Solaris or > for all Unix platform. I think that could be also a issue for Linux. The crypto issues are likely common to all platforms. The issue of lack of support for ZFS ACLs and extended attributes doesn't apply to Linux because ZFS doesn't really exist there (yes I know about the FUSE support but lets not turn this into a debate about why ZFS doesn't exist *in* Linux). Does the product properly support ACLs and named streams from NTFS on Windows ? -- Darren J Moffat From Mark.Carlson@Sun.COM Wed Nov 5 06:22:23 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5EMN60010359 for ; Wed, 5 Nov 2008 06:22:23 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5EMLts019878; Wed, 5 Nov 2008 06:22:23 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V000156LAXP00@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 06:22:22 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00M466L9T910@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 06:22:22 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5EMLAM005908; Wed, 05 Nov 2008 14:22:21 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V009016HI8400@mail-amer.sun.com> (original mail from Mark.Carlson@Sun.COM); Wed, 05 Nov 2008 07:22:21 -0700 (MST) Received: from Macintosh-252.local ([69.89.172.90]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V000916L8Q890@mail-amer.sun.com>; Wed, 05 Nov 2008 07:22:21 -0700 (MST) Date: Wed, 05 Nov 2008 07:22:20 -0700 From: "Mark A. Carlson" Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <4911AA88.6080006@sun.com> Sender: Mark.Carlson@Sun.COM To: Grant Zhang Cc: Darren J Moffat , David Zhang , Mark Carlson , LSARC-ext@Sun.COM, scisfma-gz@Sun.COM Message-id: <4911AC1C.4070906@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> <49119A9B.2060909@Sun.COM> <4911AA88.6080006@sun.com> User-Agent: Thunderbird 2.0.0.17 (Macintosh/20080914) Status: RO Content-Length: 2326 Grant, I think we need to document the limitations and direct the Areca user to the better tools that we have available that they may not be familiar with, along with the reasons why. If the limitations exist on other platforms/filesystems as well, they may be OK with those limitations if this is the best choice for that platform. This gives them the familiarity, yet nudges them towards the tools that will work better for them. -- mark Grant Zhang wrote: > Darren J Moffat wrote: >> Grant Zhang wrote: >>> I agree with Mark. The point of porting many FOSS packages into Open >>> Solaris is to make people comfortable enough in using the very same >>> tools in Open Solaris. >>> >>> Back to this case, Areca is a backup utility, not a crypto utility. >>> Encryption is just one feature provided by Areca, although as you >>> observed, not very strong encryption. It is possible to use Areca to >>> back up the files totally unencrypted, which is not uncommon in >>> personal backup space. For folks with strong security needs, >>> encrypt(1) or mac(1) can still be used on the backups. >> >> Backup utilities need to backup *ALL* the data and *ALL* the >> permissions. If extended attribtues are not able to be included then >> that is not *ALL* the data, if ACLs are not included then that is not >> *ALL* the permissions. > Today's Areca does not support extended attributes and ACLs. Adding > those is beyond the scope of porting though. It is up to the LSARC > members to decide whether this limitation outweighs Areca's benefits. >> >>> Areca is an active project and a lot of people are using it on >>> Windows and Linux. Please don't reject it so we have one less choice >>> on OpenSolaris. >> >> Maybe on Windows and Linux it is sufficient but on OpenSolaris there >> *WILL* be data loss and possibly security issues on restore due to a >> lack of ACLs. >> >> There are still unanswered technical questions on the password/key >> management as well. > The project documents do not seem to contain the answers so we need to > dive into code. We will report back what we find. >> >> I am very close to derailing this case and voting deny so that an >> opinion can be written however that is just my vote and the case >> could still get approved if that happens. >> > OK, thanks for the info. From Grant.Zhang@sun.com Wed Nov 5 06:31:27 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5EVRK8010732 for ; Wed, 5 Nov 2008 06:31:27 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5EVKF9023828; Wed, 5 Nov 2008 06:31:27 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00I0J70FLH00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 07:31:27 -0700 (MST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00CPQ70DFZ40@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 07:31:26 -0700 (MST) Received: from fe-apac-05.sun.com (fe-apac-05.sun.com [192.18.19.176] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5EVOdC009296; Wed, 05 Nov 2008 14:31:24 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0K9V00801709E300@mail-apac.sun.com> (original mail from Grant.Zhang@Sun.COM); Wed, 05 Nov 2008 22:31:24 +0800 (SGT) Received: from grant.local ([123.119.34.46]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0K9V00I617045XU2@mail-apac.sun.com>; Wed, 05 Nov 2008 22:31:24 +0800 (SGT) Date: Wed, 05 Nov 2008 22:31:15 +0800 From: Grant Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <4911AC1C.4070906@sun.com> Sender: Grant.Zhang@sun.com To: "Mark A. Carlson" Cc: Darren J Moffat , David Zhang , Mark Carlson , LSARC-ext@sun.com, scisfma-gz@sun.com Message-id: <4911AE33.9030808@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> <49119A9B.2060909@Sun.COM> <4911AA88.6080006@sun.com> <4911AC1C.4070906@sun.com> User-Agent: Thunderbird 2.0.0.17 (Macintosh/20080914) Status: RO Content-Length: 2486 Sounds good to me. We probably need Darren's help on the security part. Mark A. Carlson wrote: > Grant, > > I think we need to document the limitations and direct the Areca > user to the better tools that we have available that they may not > be familiar with, along with the reasons why. If the limitations > exist on other platforms/filesystems as well, they may be OK with > those limitations if this is the best choice for that platform. > > This gives them the familiarity, yet nudges them towards the tools > that will work better for them. > > -- mark > > Grant Zhang wrote: >> Darren J Moffat wrote: >>> Grant Zhang wrote: >>>> I agree with Mark. The point of porting many FOSS packages into >>>> Open Solaris is to make people comfortable enough in using the very >>>> same tools in Open Solaris. >>>> >>>> Back to this case, Areca is a backup utility, not a crypto utility. >>>> Encryption is just one feature provided by Areca, although as you >>>> observed, not very strong encryption. It is possible to use Areca >>>> to back up the files totally unencrypted, which is not uncommon in >>>> personal backup space. For folks with strong security needs, >>>> encrypt(1) or mac(1) can still be used on the backups. >>> >>> Backup utilities need to backup *ALL* the data and *ALL* the >>> permissions. If extended attribtues are not able to be included >>> then that is not *ALL* the data, if ACLs are not included then that >>> is not *ALL* the permissions. >> Today's Areca does not support extended attributes and ACLs. Adding >> those is beyond the scope of porting though. It is up to the LSARC >> members to decide whether this limitation outweighs Areca's benefits. >>> >>>> Areca is an active project and a lot of people are using it on >>>> Windows and Linux. Please don't reject it so we have one less >>>> choice on OpenSolaris. >>> >>> Maybe on Windows and Linux it is sufficient but on OpenSolaris there >>> *WILL* be data loss and possibly security issues on restore due to a >>> lack of ACLs. >>> >>> There are still unanswered technical questions on the password/key >>> management as well. >> The project documents do not seem to contain the answers so we need >> to dive into code. We will report back what we find. >>> >>> I am very close to derailing this case and voting deny so that an >>> opinion can be written however that is just my vote and the case >>> could still get approved if that happens. >>> >> OK, thanks for the info. From carlsonj@phorcys.east.sun.com Wed Nov 5 07:15:32 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5FFWsv011632 for ; Wed, 5 Nov 2008 07:15:32 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5FFQRO045630; Wed, 5 Nov 2008 08:15:28 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00G0191SJP00@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 07:15:28 -0800 (PST) Received: from phorcys.east.sun.com ([129.148.174.143]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V00G2691R3Y20@nwk-avmta-2.sfbay.sun.com>; Wed, 05 Nov 2008 07:15:27 -0800 (PST) Received: from phorcys.east.sun.com (localhost [127.0.0.1]) by phorcys.east.sun.com (8.14.3+Sun/8.14.3) with ESMTP id mA5FFQpA011420; Wed, 05 Nov 2008 10:15:26 -0500 (EST) Received: (from carlsonj@localhost) by phorcys.east.sun.com (8.14.3+Sun/8.14.3/Submit) id mA5FFQAr011417; Wed, 05 Nov 2008 10:15:26 -0500 (EST) Date: Wed, 05 Nov 2008 10:15:25 -0500 From: James Carlson Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <4911AA88.6080006@sun.com> To: Grant Zhang Cc: Darren J Moffat , Mark Carlson , "Mark A. Carlson" , LSARC-ext@sun.com, David Zhang , scisfma-gz@sun.com Message-id: <18705.47245.978412.494576@gargle.gargle.HOWL> MIME-version: 1.0 X-Mailer: VM 7.01 under Emacs 21.3.1 Content-type: text/plain; charset=us-ascii Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491058C3.4010405@Sun.COM> <491172C7.9000501@Sun.COM> <491178FB.8020200@Sun.COM> <49118FDA.6080808@sun.com> <491196D7.907@sun.com> <49119A9B.2060909@Sun.COM> <4911AA88.6080006@sun.com> Status: RO Content-Length: 1696 Grant Zhang writes: > Darren J Moffat wrote: > > Backup utilities need to backup *ALL* the data and *ALL* the > > permissions. If extended attribtues are not able to be included then > > that is not *ALL* the data, if ACLs are not included then that is not > > *ALL* the permissions. > Today's Areca does not support extended attributes and ACLs. Adding > those is beyond the scope of porting though. It is up to the LSARC > members to decide whether this limitation outweighs Areca's benefits. I disagree on multiple grounds. First, the larger effort to bring in more FOSS to Solaris is not supposed to be a dump job: it's not as simple as "make install" and then run away. It has to work right on Solaris, or there's no point to the integration, and in this case, Darren's right that it does *not* work right because it fails to support important OS features. They're not "optional." Yes, that means that porting in some things is harder than others. Yes, it means that you may need to work with the upstream or even (in some cases) fork the source to get there. That's part of building a system, rather than just dumping a bunch of binaries on a customer. Secondly, I don't think a fast-track is really the right place to deal with something that requires members to weigh in, because we don't actually vote on fast-tracks. The qualifying factors for fast-tracks are that they're obvious and non-controversial. This is neither. It needs to be derailed. -- James Carlson, Solaris Networking Sun Microsystems / 35 Network Drive 71.232W Vox +1 781 442 2084 MS UBUR02-212 / Burlington MA 01803-2757 42.496N Fax +1 781 442 1677 From John.Fischer@sun.com Wed Nov 5 09:30:31 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA5HUV1S015998 for ; Wed, 5 Nov 2008 09:30:31 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mA5HUUrJ026983; Wed, 5 Nov 2008 09:30:31 -0800 (PST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V0074XFAUCN00@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 10:30:30 -0700 (MST) Received: from brmea-mail-3.sun.com ([192.18.98.34]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V003SUFAUXDA0@brm-avmta-1.central.sun.com>; Wed, 05 Nov 2008 10:30:30 -0700 (MST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-3.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA5HUUjD001077; Wed, 05 Nov 2008 17:30:30 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0K9V00G01EZB7100@mail-amer.sun.com> (original mail from John.Fischer@Sun.COM); Wed, 05 Nov 2008 10:30:30 -0700 (MST) Received: from 129.145.154.66 ([129.145.154.66]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0K9V0015DFALLZ90@mail-amer.sun.com>; Wed, 05 Nov 2008 10:30:26 -0700 (MST) Date: Wed, 05 Nov 2008 09:30:21 -0800 From: John Fischer Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <49116D3E.6040603@Sun.COM> Sender: John.Fischer@sun.com To: David Zhang Cc: John Fischer , Alan Coopersmith , Mark Carlson , LSARC-ext@sun.com, scsifma-gz@sun.com Reply-to: John.Fischer@sun.com Message-id: <1225906220.49887.107.camel@sr1-umpk-16> MIME-version: 1.0 X-Mailer: Ximian Evolution 1.4.6.301 Content-type: text/plain; charset=ASCII Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491073B3.1060808@sun.com> <49116D3E.6040603@Sun.COM> Status: RO Content-Length: 420 David, Do you require a specific version of SWT? Thanks, John On Wed, 2008-11-05 at 01:54, David Zhang wrote: > On 11/05/08 00:09, Alan Coopersmith wrote: > > > /usr/share/areca/lib/swt.jar > > > > > Why isn't this using the shared swt delivered by LSARC/2008/462 > > instead of its own private copy? > > > > > I will switch to SUNWswt package and add package dependency on that > package. > > David > From David.Zhang@sun.com Wed Nov 5 16:37:15 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mA60bEIi001391 for ; Wed, 5 Nov 2008 16:37:14 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mA60bB6Y027706; Thu, 6 Nov 2008 00:37:13 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0K9V00G0BZ1ZYW00@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 16:37:11 -0800 (PST) Received: from sineb-mail-1.sun.com ([192.18.19.6]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0K9V0078HZ1XCD40@nwk-avmta-1.sfbay.Sun.COM>; Wed, 05 Nov 2008 16:37:10 -0800 (PST) Received: from fe-apac-06.sun.com (fe-apac-06.sun.com [192.18.19.177] (may be forged)) by sineb-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mA60b99A022085; Thu, 06 Nov 2008 00:37:09 +0000 (GMT) Received: from conversion-daemon.mail-apac.sun.com by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) id <0K9V00101YZK5500@mail-apac.sun.com> (original mail from David.Zhang@Sun.COM); Thu, 06 Nov 2008 08:37:09 +0800 (SGT) Received: from [192.168.1.2] ([221.218.125.193]) by mail-apac.sun.com (Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006)) with ESMTPSA id <0K9V004F2Z1U46V2@mail-apac.sun.com>; Thu, 06 Nov 2008 08:37:08 +0800 (SGT) Date: Thu, 06 Nov 2008 08:37:08 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <1225906220.49887.107.camel@sr1-umpk-16> Sender: David.Zhang@sun.com To: John.Fischer@sun.com Cc: Alan Coopersmith , Mark Carlson , LSARC-ext@sun.com, scsifma-gz@sun.com Message-id: <49123C34.4020909@Sun.COM> MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_sQhB9k+FkFjYfLQAislPbw)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <491073B3.1060808@sun.com> <49116D3E.6040603@Sun.COM> <1225906220.49887.107.camel@sr1-umpk-16> User-Agent: Thunderbird 2.0.0.17 (Windows/20080914) Status: RO Content-Length: 2349 This is a multi-part message in MIME format. --Boundary_(ID_sQhB9k+FkFjYfLQAislPbw) Content-type: text/plain; charset=GB2312 Content-transfer-encoding: 8BIT John Fischer дµÀ: > David, > > Do you require a specific version of SWT? > No, the LSARC/2008/462's version is fine. I will make sure there is no regression with that version, if the package is still available for porting. Thank you for your notify. David > Thanks, > > John > > On Wed, 2008-11-05 at 01:54, David Zhang wrote: > >> On 11/05/08 00:09, Alan Coopersmith wrote: >> >>>> /usr/share/areca/lib/swt.jar >>>> >>>> >>> Why isn't this using the shared swt delivered by LSARC/2008/462 >>> instead of its own private copy? >>> >>> >>> >> I will switch to SUNWswt package and add package dependency on that >> package. >> >> David >> >> > > --Boundary_(ID_sQhB9k+FkFjYfLQAislPbw) Content-type: text/html; charset=GB2312 Content-transfer-encoding: 8BIT John Fischer дµÀ: 
David,

Do you require a specific version of SWT?
No, the LSARC/2008/462's version is fine. I will make sure there is no regression with that version, if the package is still available for porting.

Thank you for your notify.

David
Thanks,

John

On Wed, 2008-11-05 at 01:54, David Zhang wrote:
  
On 11/05/08 00:09, Alan Coopersmith wrote: 
    
	/usr/share/areca/lib/swt.jar
    
        
Why isn't this using the shared swt delivered by LSARC/2008/462
instead of its own private copy?

  
      
I will switch to SUNWswt package and add package dependency on that
package.

David

--Boundary_(ID_sQhB9k+FkFjYfLQAislPbw)-- From David.Zhang@sun.com Sun Nov 9 21:11:37 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca.SFBay.Sun.COM [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mAA5BbUO027098 for ; Sun, 9 Nov 2008 21:11:37 -0800 (PST) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mAA5Bapa015900 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Sun, 9 Nov 2008 21:11:37 -0800 (PST) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KA300303QFDLJ00@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Sun, 09 Nov 2008 21:11:37 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KA300KTXQFBRY40@nwk-avmta-2.sfbay.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Sun, 09 Nov 2008 21:11:36 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mAA5BYuQ025069 for ; Mon, 10 Nov 2008 05:11:35 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KA300301QEPAQ00@fe-emea-10.sun.com> (original mail from David.Zhang@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Mon, 10 Nov 2008 05:11:34 +0000 (GMT) Received: from [129.158.144.53] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KA3006TJQF6ZI10@fe-emea-10.sun.com>; Mon, 10 Nov 2008 05:11:34 +0000 (GMT) Date: Mon, 10 Nov 2008 13:09:05 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Self Review] In-reply-to: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> Sender: David.Zhang@sun.com To: Mark Carlson Cc: LSARC-ext@sun.com Message-id: <4917C1F1.3050408@Sun.COM> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_jQBNTJI49R66ZwDM5A2eEw)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.17 (X11/20081014) Status: RO Content-Length: 15185 This is a multi-part message in MIME format. --Boundary_(ID_jQBNTJI49R66ZwDM5A2eEw) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT I am uploading the updated case materials, including fast-track, review comments and action items. AIs & Review comments: http://fogbroom.prc/bjroot/users/yz203490/FOSS/areca_LSARC_comments.txt Updated fast-track: http://fogbroom.prc/bjroot/users/yz203490/FOSS/areca-fasttrack.txt Regards, David On 11/04/08 21:14, Mark Carlson wrote: > I am sponsoring this case for David Zhang. I have marked it closed approved automatic based on the checklist in the case directory. > > -- mark > > Template Version: @(#)sac_nextcase %I% %G% SMI > This information is Copyright 2008 Sun Microsystems > 1. Introduction > 1.1. Project/Component Working Name: > Areca Backup > 1.2. Name of Document Author/Supplier: > Author: David Zhang > 1.3 Date of This Document: > 04 November, 2008 > > 2. Project Summary > 2.1. Project Description > > This project introduces the package of Areca Backup > 6.0.7 into the SFW consolidation. > > 4. Technical Description > > Areca (http://areca.sourceforge.net/) is a file backup tool. > It supports data compression & encryption, incremental backup, > file history explorer and many other features. Areca Backup > also includes a transaction mechanism which guarantees your > backups' integrity. > > It is released under the General Public License Version2 (GPLv2). > > Backup Engine Features : > * Archives compression (Zip & Zip64 format) > * Archives encryption (Triple DES & AES encryption algorithm) > * Storage on local hard drive, network drive, USB key, > FTP / FTPs server (with implicit and explicit SSL / TLS) > * Source file filters (by extension, subdirectory, regular > expression, size, date, status, with AND/OR operators) > * Incremental, differential and full backup support > * Archives merges / deletion : You can merge contiguous archives > in one single archive or safely delete your latest archives. > * As of date recovery : Areca allows you to recover your archives > (or single files) as of a specific date. > * Transaction mechanism : All critical processes > (such as backups or merges) support a transaction mechanism > (with commit / rollback management) which guarantees your backups' > integrity. > * Backup reports : Areca generates backup reports that can be stored > on your disk or sent by email. > * Post backup scripts : Areca can launch shell scripts after backup. > * Files permissions and symbolic links backup. (Linux only) > * Support for delta backup (store only the modified parts of the files > - not the whole files) > > Graphical User Interface : > > * Archives content explorer. > (including a 'find file in archives' feature) > * Archive description : A manifest is associated to each archive, > which contains various information such as author, title, date, > description, and some technical data. > * File history explorer : Areca keeps track of your file's history > (creation / modifications / deletion) over your archives. > * Backup simulation : useful to check wether a backup is necessary > * User's actions history : Areca keeps an history of all user's actions > (archives deletion, merges, backups, recoveries). > > Command-Line Interface : > > * Areca comes with a command-line interface which can be used for backup automation. > > 5. Interfaces > > Exported interface Classification Interface type > =============================== ============== ============== > SUNWareca Uncommitted Package name > /usr/bin/areca Uncommitted Command > > The following additional installed files are not interface. > > /usr/share/areca/areca.sh > /usr/share/areca/check_version.sh > /usr/share/areca/readme.txt > /usr/share/areca/bin/decrypt.sh > /usr/share/areca/bin/dezip.sh > /usr/share/areca/bin/run_gui.sh > /usr/share/areca/bin/run_tui.sh > /usr/share/areca/lib/activation.jar > /usr/share/areca/lib/areca.jar > /usr/share/areca/lib/commons-net-1.4.1.jar > /usr/share/areca/lib/jakarta-oro-2.0.8.jar > /usr/share/areca/lib/local_policy.jar > /usr/share/areca/lib/mail.jar > /usr/share/areca/lib/swt.jar > /usr/share/areca/doc/index.html > /usr/share/areca/help/advanced_encryption_howto.txt > /usr/share/areca/help/help.txt > /usr/share/areca/icons > /usr/share/areca/config/Main.xml > /usr/share/areca/config/fwk.properties > /usr/share/areca/plugins > /usr/share/areca/license/license.txt > /usr/share/areca/translations > > 6. Resources and Schedule > 6.4. Steering Committee requested information > 6.4.1. Consolidation C-team Name: > SFW > 6.5. ARC review type: Automatic > 6.6. ARC Exposure: open > --Boundary_(ID_jQBNTJI49R66ZwDM5A2eEw) Content-type: text/plain; name=areca-fasttrack.txt Content-transfer-encoding: 7BIT Content-disposition: inline; filename=areca-fasttrack.txt Template Version: @(#)sac_nextcase 1.64 07/13/07 SMI This information is Copyright 2008 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Areca Backup 1.2. Name of Document Author/Supplier: Author: David Zhang 1.3 Date of This Document: 10 November, 2008 2. Project Summary 2.1. Project Description This project introduces the package of Areca Backup 6.0.7 into the SFW consolidation. 4. Technical Description Areca (http://areca.sourceforge.net/) is a file backup tool. It supports data compression & encryption, incremental backup, file history explorer and many other features. Areca Backup also includes a transaction mechanism which guarantees your backups' integrity. It is released under the General Public License Version2 (GPLv2). Backup Engine Features : * Archives compression (Zip & Zip64 format) * Archives encryption (Triple DES & AES encryption algorithm) * Storage on local hard drive, network drive, USB key, FTP / FTPs server (with implicit and explicit SSL / TLS) * Source file filters (by extension, subdirectory, regular expression, size, date, status, with AND/OR operators) * Incremental, differential and full backup support * Archives merges / deletion : You can merge contiguous archives in one single archive or safely delete your latest archives. * As of date recovery : Areca allows you to recover your archives (or single files) as of a specific date. * Transaction mechanism : All critical processes (such as backups or merges) support a transaction mechanism (with commit / rollback management) which guarantees your backups' integrity. * Backup reports : Areca generates backup reports that can be stored on your disk or sent by email. * Post backup scripts : Areca can launch shell scripts after backup. * Files permissions and symbolic links backup. (Unix) * Support for delta backup (store only the modified parts of the files - not the whole files) Graphical User Interface : * Archives content explorer. (including a 'find file in archives' feature) * Archive description : A manifest is associated to each archive, which contains various information such as author, title, date, description, and some technical data. * File history explorer : Areca keeps track of your file's history (creation / modifications / deletion) over your archives. * Backup simulation : useful to check wether a backup is necessary * User's actions history : Areca keeps an history of all user's actions (archives deletion, merges, backups, recoveries). Command-Line Interface : * Areca comes with a command-line interface which can be used for backup automation. 5. Interfaces Exported interface Classification Interface type =============================== ============== ============== SUNWareca Uncommitted Package name /usr/bin/areca Uncommitted Command The following additional installed files are not interface. /usr/share/areca/areca.sh /usr/share/areca/check_version.sh /usr/share/areca/readme.txt /usr/share/areca/bin/decrypt.sh /usr/share/areca/bin/dezip.sh /usr/share/areca/bin/run_gui.sh /usr/share/areca/bin/run_tui.sh /usr/share/areca/lib/activation.jar /usr/share/areca/lib/areca.jar /usr/share/areca/lib/commons-net-1.4.1.jar /usr/share/areca/lib/jakarta-oro-2.0.8.jar /usr/share/areca/lib/local_policy.jar /usr/share/areca/lib/mail.jar /usr/share/areca/doc/index.html /usr/share/areca/help/advanced_encryption_howto.txt /usr/share/areca/help/help.txt /usr/share/areca/icons /usr/share/areca/config/Main.xml /usr/share/areca/config/fwk.properties /usr/share/areca/plugins /usr/share/areca/license/license.txt /usr/share/areca/translations 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: SFW 6.5. ARC review type: Automatic 6.6. ARC Exposure: open --Boundary_(ID_jQBNTJI49R66ZwDM5A2eEw) Content-type: text/plain; name=areca_LSARC_comments.txt Content-transfer-encoding: 7BIT Content-disposition: inline; filename=areca_LSARC_comments.txt [ AI Lists: ] * ACL * Extended attributes * Good-enough encryption * Password and key management We filled a bug to the community, we would like to find out if they need a contribution agreement to accept our changes. http://sourceforge.net/tracker/index.php?func=detail&aid=2232982&group_id=171505&atid=858191 [ LSARC review Comments: ] Alan.Coopersmith@Sun.COM ===================== > /usr/share/areca/lib/swt.jar Q0) Why isn't this using the shared swt delivered by LSARC/2008/462 instead of its own private copy? A0] That's great, if we could share this library. Contact with the owner of swt LSARC, we should add dependency to SUNWswt packages. Darren.Moffat@Sun.COM ===================== Q1) What modes of the encryption algorithms are used ? A1] By looking at the source code of areca. It is using javax.crypto.* which means JCE. In com.application.areca.impl.EncryptionConfiguration.java import javax.crypto.Cipher; import javax.crypto.spec.IvParameterSpec; import javax.crypto.spec.SecretKeySpec; And the code follows standard coding standard of javadoc http://java.sun.com/javase/6/docs/api/javax/crypto/Cipher.html Darren.Moffat@Sun.COM ===================== The mode of a crypto algorithm is important, some include an integrity check but most require the use of a separate keyed message digest (such as HMAC-SHA256) to protect against cipher text modification. For example AES_CBC mode is not sufficient to protect against cipher text modification for large amounts of data. A mode like AES_CCM or AES_GCM is better since they include a MAC but they expand the size of each output ciphertext block (between 4 and 16 bytes). The are other modes like XTS that are non expanding. This quote from the FAQ concerns me deeply: "As this encryption key is stored in the backup target, you will never be prompted for it again : Areca will transparently use it to encrypt / decrypt these archives" ===================== Q2) So how is key management done ? Q3) Where are they keys stored and generated ? A2|3] By searching the code... look like ... public static final String KEYCONV_RAW = "RAW"; public static final String KEYCONV_HASH = "HASH"; public static final String KEYCONV_OLD = "OLD"; // Triple DES 192 registerTripleDesConfiguration(24, "DESede", KEYCONV_OLD); registerTripleDesConfiguration(24, "DESede_HASH", KEYCONV_HASH); registerTripleDesConfiguration(24, "DESede_RAW", KEYCONV_RAW); // AES 128 registerAESConfiguration(16, "AES", KEYCONV_OLD); registerAESConfiguration(16, "AES_HASH", KEYCONV_HASH); registerAESConfiguration(16, "AES_RAW", KEYCONV_RAW); // AES 256 registerAESConfiguration(32, "AES256_HASH", KEYCONV_HASH); registerAESConfiguration(32, "AES256_RAW", KEYCONV_RAW); The author is using 'final String' as the key. Darren.Moffat@Sun.COM ===================== There is information in the answer to "[Q] What is the difference in the XML configuration file between AES and AES_HASH (or DESEde and DESEde_HASH) ?" that makes me very concerned. The method described there for generating a key from a passphrase is NOT secure and is subject to rainbow table attacks since the hash (MD5) of the password does not appear to be salted - this hasn't actually fixed the problem they appear to think it has. ===================== Q4) What crypto library is used ? I assume since Areca is written in Java it is just using the JCE but I'd like this confirmed. A4] JCE (Java Cryptographic Extension) framework. http://java.sun.com/javase/6/docs/api/javax/crypto/Cipher.html Darren.Moffat@Sun.COM ===================== > * Files permissions and symbolic links backup. (Linux only) ===================== Q5) Why is this Linux only ? A6] I think the author means (unix only), since Solaris is not as popular as Linux today. He is just willing to support Windows and Linux, but as he mentioned in "http://sourceforge.net/projects/areca/" project page, it is developed with OS independent language (Java). And, looking through his code in FileSystemManager.java if (! file.exists()) { return false; } else { return ! getAbsolutePath(file).equals(getCanonicalPath(file)); } If the java code is compatible with Solaris/Linux/Windows/OS2 or any other systems. It should support Soarlis as well. I have tested the Areca, it works. Darren.Moffat@Sun.COM ===================== To me this is not acceptable, this makes it totally useless for Solaris backup if it can't do a simple thing like this. What about ACLs on UFS and ZFS ? What about extended attribute files (ZFS and UFS) ? What about system attribute files (ZFS only) ? For this to be included in Solaris it needs to be actually useful as a Backup program that means it needs to be able to actually backup the content we can create on Solaris without loss. Without support for file permissions, links, ACLs and extended attributes I can not approve of this case being integrated into Solaris - particularly since the bundled tar & cpio archivers already support that. ===================== Q6) Does this work with NDMP ? A6] By searching the following wiki and looking through his code. There is no NDMP staff. NDMP was co-invented by NetAPP and EMC. Maybe, we could ask the author to support that in the future? However, the Q10 in ndmp.org tell us there is a NDMPcopy tool. http://en.wikipedia.org/wiki/NDMP http://www.ndmp.org/info/faq.shtml --Boundary_(ID_jQBNTJI49R66ZwDM5A2eEw) Content-type: text/x-vcard; name=David_Zhang.vcf; charset=utf-8 Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=David_Zhang.vcf begin:vcard fn:David Zhang n:Zhang;David email;internet:David.Zhang@Sun.COM tel;work:84341 version:2.1 end:vcard --Boundary_(ID_jQBNTJI49R66ZwDM5A2eEw)-- From Mark.Carlson@sun.com Wed Nov 12 18:04:32 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mAD24VN0014355 for ; Wed, 12 Nov 2008 18:04:32 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mAD24TeE007894 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 13 Nov 2008 10:04:30 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KA900C051RGOT00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Wed, 12 Nov 2008 19:04:28 -0700 (MST) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KA90094N1RGPB20@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Wed, 12 Nov 2008 19:04:28 -0700 (MST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mAD24S4D011846 for ; Thu, 13 Nov 2008 02:04:28 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KA900H011Q3EP00@mail-amer.sun.com> (original mail from Mark.Carlson@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Wed, 12 Nov 2008 19:04:28 -0700 (MST) Received: from Macintosh-252.local ([129.150.32.155]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KA900LQ21RBV2F0@mail-amer.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Wed, 12 Nov 2008 19:04:24 -0700 (MST) Date: Wed, 12 Nov 2008 19:04:22 -0700 From: "Mark A. Carlson" Subject: Re: Areca Backup [LSARC/2008/681 Fast Track] In-reply-to: <4917C1F1.3050408@Sun.COM> Sender: Mark.Carlson@sun.com To: LSARC-ext@sun.com Message-id: <491B8B26.8030403@sun.com> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <4917C1F1.3050408@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (Macintosh/20080914) Status: RO Content-Length: 132 I have extended the timer on this case until 18 November 2008 in anticipation of updated materials from the project team. -- mark From Darren.Moffat@sun.com Thu Nov 13 01:42:49 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mAD9gnJU027560 for ; Thu, 13 Nov 2008 01:42:49 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mAD9gl4W015433 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 13 Nov 2008 02:42:49 -0700 (MST) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KA900217MZD9U00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu, 13 Nov 2008 02:42:49 -0700 (MST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KA900AIAMZCNHA0@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Thu, 13 Nov 2008 02:42:48 -0700 (MST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mAD9gldV011783 for ; Thu, 13 Nov 2008 09:42:47 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KA900101K3BG700@fe-emea-10.sun.com> (original mail from Darren.Moffat@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Thu, 13 Nov 2008 09:42:47 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KA900ICSMZ18EC0@fe-emea-10.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Thu, 13 Nov 2008 09:42:38 +0000 (GMT) Date: Thu, 13 Nov 2008 09:42:36 +0000 From: Darren J Moffat Subject: Re: Areca Backup [LSARC/2008/681 Fast Track] In-reply-to: <491B8B26.8030403@sun.com> Sender: Darren.Moffat@sun.com To: "Mark A. Carlson" Cc: LSARC-ext@sun.com Message-id: <491BF68C.4040805@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <4917C1F1.3050408@Sun.COM> <491B8B26.8030403@sun.com> User-Agent: Thunderbird 2.0.0.16 (X11/20080922) Status: RO Content-Length: 333 Mark A. Carlson wrote: > I have extended the timer on this case until 18 November 2008 in > anticipation > of updated materials from the project team. If we don't have updated materials to review the correct status is "waiting need spec". The timer is then started from the point that the new spec arrives. -- Darren J Moffat From Mark.Carlson@sun.com Fri Nov 14 06:05:18 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mAEE5H7c002714 for ; Fri, 14 Nov 2008 06:05:17 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mAEE5DA0001229 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Fri, 14 Nov 2008 22:05:16 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KAB0061VTSQHU00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Fri, 14 Nov 2008 06:05:14 -0800 (PST) Received: from brmea-mail-1.sun.com ([192.18.98.31]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KAB00A6ATSPEN80@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Fri, 14 Nov 2008 06:05:13 -0800 (PST) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-1.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mAEE5CRS015766 for ; Fri, 14 Nov 2008 14:05:12 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KAB00H01TJ6LZ00@mail-amer.sun.com> (original mail from Mark.Carlson@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Fri, 14 Nov 2008 07:05:12 -0700 (MST) Received: from Macintosh-252.local ([129.150.33.206]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KAB007SMTS28840@mail-amer.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Fri, 14 Nov 2008 07:04:52 -0700 (MST) Date: Fri, 14 Nov 2008 07:04:48 -0700 From: "Mark A. Carlson" Subject: Re: Areca Backup [LSARC/2008/681 Fast Track] In-reply-to: <491BF68C.4040805@Sun.COM> Sender: Mark.Carlson@sun.com To: Darren J Moffat Cc: LSARC-ext@sun.com Message-id: <491D8580.1010106@sun.com> MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_o6MDz8G4cj9RBF+wXWwozQ)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <4917C1F1.3050408@Sun.COM> <491B8B26.8030403@sun.com> <491BF68C.4040805@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (Macintosh/20080914) Status: RO Content-Length: 1580 This is a multi-part message in MIME format. --Boundary_(ID_o6MDz8G4cj9RBF+wXWwozQ) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Agree. The case status now reflects this. -- mark Darren J Moffat wrote: > Mark A. Carlson wrote: > >> I have extended the timer on this case until 18 November 2008 in >> anticipation >> of updated materials from the project team. >> > > If we don't have updated materials to review the correct status is > "waiting need spec". The timer is then started from the point that the > new spec arrives. > > --Boundary_(ID_o6MDz8G4cj9RBF+wXWwozQ) Content-type: text/html; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Agree. The case status now reflects this.

-- mark

Darren J Moffat wrote: 
Mark A. Carlson wrote:
  
I have extended the timer on this case until 18 November 2008 in 
anticipation
of updated materials from the project team.
    

If we don't have updated materials to review the correct status is 
"waiting need spec".  The timer is then started from the point that the 
new spec arrives.
--Boundary_(ID_o6MDz8G4cj9RBF+wXWwozQ)-- From Mark.Carlson@sun.com Fri Dec 12 12:28:16 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBCKSFRl005369 for ; Fri, 12 Dec 2008 12:28:15 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mBCKSDZO018930 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Sat, 13 Dec 2008 04:28:14 +0800 (SGT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KBS00H036707J00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Fri, 12 Dec 2008 12:28:12 -0800 (PST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KBS0020W66ZGKF0@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Fri, 12 Dec 2008 12:28:12 -0800 (PST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id mBCKSBDG003808 for ; Fri, 12 Dec 2008 20:28:11 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KBS00I015JLFO00@mail-amer.sun.com> (original mail from Mark.Carlson@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Fri, 12 Dec 2008 13:28:04 -0700 (MST) Received: from boulder-dhcp-218.Central.Sun.COM ([172.20.24.218]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KBS00CK966MT180@mail-amer.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Fri, 12 Dec 2008 13:27:58 -0700 (MST) Date: Fri, 12 Dec 2008 13:27:56 -0700 From: "Mark A. Carlson" Subject: Areca Backup [LSARC/2008/681 Fast Track] In-reply-to: <491D8580.1010106@sun.com> Sender: Mark.Carlson@sun.com To: LSARC-ext@sun.com Cc: Darren J Moffat Message-id: <4942C94C.3020500@sun.com> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_Uvk4tp+dopXSlO5gTEZUTw)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <4917C1F1.3050408@Sun.COM> <491B8B26.8030403@sun.com> <491BF68C.4040805@Sun.COM> <491D8580.1010106@sun.com> User-Agent: Thunderbird 2.0.0.18 (Macintosh/20081105) Status: RO Content-Length: 6427 This is a multi-part message in MIME format. --Boundary_(ID_Uvk4tp+dopXSlO5gTEZUTw) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT I have restarted the timer on this case. It times out 12/19/2008 The project team has agreed to support ZFS features and use the latest encryption from the upstream community. The enclosed additional specifications are also in the case directory. -- mark --Boundary_(ID_Uvk4tp+dopXSlO5gTEZUTw) Content-type: text/plain; name=Areca_opensolaris.txt Content-transfer-encoding: 7BIT Content-disposition: inline; filename=Areca_opensolaris.txt Specification of enhancing Areca backup to support filesystem ACL and extended attributes 1. Overview For a backup tool, it should be able to record/restore ALL the data with ALL the permissions. If extended attribtues are not able to be included then that is not ALL the data, if ACLs are not included then that is not ALL the permissions. 2. Requirement Specification R-1: Backup ACL, including ZFS ACL if it has. R-2: Backup extended attributes, including ZFS extended attributes if it has. 3. High Level Design 3.1 Issues The existing Areca backup tool was developed by Java, it is using Java IO API to copy files from source to destination. Current architecture can recognize what platform is (Windows, Unix); and if it is Unix system, the Areca will just restore owner, group and basic permissions by running Unix command 'chown' and 'chmod'. It does not record any ACL and extended attribute information. 3.2 Possible Solution 3.2.1 Using existing tools On Solaris, user can use getfacl(1)/setfacl(1) to record ACL permissions; However, user has to use openat() programming API to interoperate with file system, see fsattr(5). Solaris has cpio(1), tar(1) and pax(1) archive tools; they all support ACL and extended attributes. User can use one of these 3 tools to backup data. On Linux, GNU cpio, tar and pax are also available. However, GNU pax is not officially released. Advantage: Less code change. Disadvantage: Lower performance, platform restriction (sort of hard-code). 3.2.2 Using programming API Java Native Interface can let Java Code to call C programming interface. On Solaris, the cpio.h(3HEAD) is available and stable; on Linux the corresponding header file is also available. Using JNI to record/restore IO in stead of using Java IO on Unix (Solaris/Linux) can resolve the issue permanently. Advantage: Higher performance, independent of system tools/packages Disadvantage: More code change. 3.3 Design Specification Due to the analyzing above, I would like to chose 3.2.2 as the total solution for this backup tool. There are areas which need to be enhanced to support R-1 and R-2. 3.1 Can distinguish Solaris, Linux and Windows Areca will use different IO APIs for these different platforms. Areca needs to make sure R-1 and R-2 can be recorded on Solaris. 3.2 JNI programming code for Solaris cpio.h Using Java Native Interface to include cpio.h to support ACL and extended attribute backup. 4. Design Limitation It is hard to sync ACL, extend attributes definition among Windows, Linux and Solaris. It is even harder to sync them between FreeBSD and other Unix platform. This phase only support OpenSolaris. If there are requirements for any other system, like Linux, windowsNT, MacOS, using JNI to swith IO API should be applicable. --Boundary_(ID_Uvk4tp+dopXSlO5gTEZUTw) Content-type: text/plain; name=Areca_encryption.txt Content-transfer-encoding: 7BIT Content-disposition: inline; filename=Areca_encryption.txt http://sourceforge.net/forum/forum.php?thread_id=2648774&forum_id=587585 2) About encryption : Areca uses AES128 & 256 (if supported by your VM). TripleDES is deprecated (and its support will be completely removed in the next version of Areca). The encryption key can be : * Either a "raw" list of bytes entered by the user in an hexadecimal form ("RAW" mode), which will be used without any modification by Areca. In this configuration, the user is totally free and can use any key derivation algorithm to generate his key. * Either a passphrase entered by the user ("HASH" mode), which will be processed by a hash algorithm to derive the encryption key. No salt is added. I've read your comments about the possibilities of "rainbow attacks", and i agree : if the user's passphrase is weak, his archives will be vulnerable to dictionnary attacks in general (but his archives will be safe if he used a sophisticated enough passphrase). That's why encryption will be modified in version 6.1 (coming next week) : instead of simple hash algorithms, PBKDF2 will be used to derive the encryption key. The number of iterations (about 100000) will be configurable in Areca's properties file (so the value can be modified by the system administrator). In addition, a "static" salt will be added : this "salt" will be configurable in Areca's properties file, but it will be the same for every target. I'm aware that this salting method is not the best (it would be better to integrate dynamic salt - for instance by derivating the salt from the target's properties - or a random salt - stored somewhere on the system) but it adds some complexity and uncertainty for the attacker. 3) About key management : This has been already discussed in the forum, and there is a dedicated paragraph in Areca's user manual (see http://areca.sourceforge.net/documentation.php#tocHelp23). The default use case for encryption is as follows : * The user runs Areca on his own computer, to backup local files * The archives are stored at a remote location (using ftp or other protocols) which can be accessed by untrusted users (for instance the system administrator of the remote computer) That's why the encryption key is stored in the target's configuration (which stays on the local computer) : i assume that the local computer is protected against unauthorized accesses (which is the responsability of the user), and that only the remote archives have to be protected against unauthorized accesses. Best regards, Olivier PETRUCCI 2008-12-06 --Boundary_(ID_Uvk4tp+dopXSlO5gTEZUTw)-- From gww@eng.sun.com Fri Dec 12 18:59:38 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBD2xbhW028568 for ; Fri, 12 Dec 2008 18:59:38 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id mBD2xPEX007379 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Sat, 13 Dec 2008 10:59:36 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KBS00C01OBBGO00@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 12 Dec 2008 19:59:35 -0700 (MST) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KBS000EUOBALEF0@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@sun.com); Fri, 12 Dec 2008 19:59:34 -0700 (MST) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mBD2xWsX000061; Fri, 12 Dec 2008 18:59:32 -0800 (PST) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id mBD2xU95008520; Fri, 12 Dec 2008 18:59:30 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id mBD2xUZf008519; Fri, 12 Dec 2008 18:59:30 -0800 (PST) Date: Fri, 12 Dec 2008 18:59:30 -0800 (PST) From: Gary Winiger Subject: Re: Areca Backup [LSARC/2008/681 Fast Track] To: LSARC-ext@sun.com, Mark.Carlson@sun.com Cc: Darren.Moffat@sun.com Message-id: <200812130259.mBD2xUZf008519@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-Sun-Charset: US-ASCII X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 276 Mark, > I have restarted the timer on this case. It times out 12/19/2008 Darren's traveling in the land of OZ, some work some Holiday. Since he was one of the primary commentors, perhaps it would be good to ensure that you get a +1 from him before closing this. Gary.. From Darren.Moffat@sun.com Mon Dec 15 14:45:02 2008 Received: from newsunmail1brm.central.sun.com (newsunmail1brm.Central.Sun.COM [129.147.62.245]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBFMj2MO028125 for ; Mon, 15 Dec 2008 14:45:02 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by newsunmail1brm.central.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id mBFMj1mv036582 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Mon, 15 Dec 2008 15:45:01 -0700 (MST) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KBX00201WIYHL00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Mon, 15 Dec 2008 14:44:58 -0800 (PST) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KBX0027IWIX5600@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Mon, 15 Dec 2008 14:44:58 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mBFMivC0024125 for ; Mon, 15 Dec 2008 22:44:57 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KBX00I01WEHYV00@fe-emea-10.sun.com> (original mail from Darren.Moffat@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Mon, 15 Dec 2008 22:44:57 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KBX0015MWIWJ620@fe-emea-10.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Mon, 15 Dec 2008 22:44:57 +0000 (GMT) Date: Mon, 15 Dec 2008 22:44:56 +0000 From: Darren J Moffat Subject: Re: Areca Backup [LSARC/2008/681 Fast Track] In-reply-to: <4942C94C.3020500@sun.com> Sender: Darren.Moffat@sun.com To: "Mark A. Carlson" Cc: LSARC-ext@sun.com Message-id: <4946DDE8.3090709@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <4917C1F1.3050408@Sun.COM> <491B8B26.8030403@sun.com> <491BF68C.4040805@Sun.COM> <491D8580.1010106@sun.com> <4942C94C.3020500@sun.com> User-Agent: Thunderbird 2.0.0.17 (X11/20081104) Status: RO Content-Length: 440 I'm almost happy with the response to the encryption part, I don't understand why the upstream developer chooses to use weak salt selection though and this really needs to be fixed - why is it so hard to use /dev/random for the salt and store it with the backup files ? I don't understand what is happening for ACL and extended attributes, is the case saying that the backups are really going to be cpio archives ? -- Darren J Moffat From David.Zhang@sun.com Wed Dec 17 17:28:52 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id mBI1Spqd027750 for ; Wed, 17 Dec 2008 17:28:52 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id mBI1SlPk020398 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Thu, 18 Dec 2008 01:28:51 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KC100M09TG0WI00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Wed, 17 Dec 2008 17:28:48 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KC100L2BTFZX930@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Wed, 17 Dec 2008 17:28:48 -0800 (PST) Received: from fe-emea-09.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id mBI1SlhT011052 for ; Thu, 18 Dec 2008 01:28:47 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KC100201T850B00@fe-emea-09.sun.com> (original mail from David.Zhang@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Thu, 18 Dec 2008 01:28:47 +0000 (GMT) Received: from [129.158.144.53] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KC100M3GTFVTU10@fe-emea-09.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Thu, 18 Dec 2008 01:28:47 +0000 (GMT) Date: Thu, 18 Dec 2008 09:26:16 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Fast Track] In-reply-to: <4946DDE8.3090709@Sun.COM> Sender: David.Zhang@sun.com To: Darren J Moffat Cc: "Mark A. Carlson" , LSARC-ext@sun.com Message-id: <4949A6B8.2090300@Sun.COM> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_XE18cLgjdI49k5qZkVG3Sg)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <4917C1F1.3050408@Sun.COM> <491B8B26.8030403@sun.com> <491BF68C.4040805@Sun.COM> <491D8580.1010106@sun.com> <4942C94C.3020500@sun.com> <4946DDE8.3090709@Sun.COM> User-Agent: Thunderbird 2.0.0.17 (X11/20081014) Status: RO Content-Length: 2798 This is a multi-part message in MIME format. --Boundary_(ID_XE18cLgjdI49k5qZkVG3Sg) Content-type: multipart/alternative; boundary="Boundary_(ID_Soui8u3XexdwnqFPNLA13w)" --Boundary_(ID_Soui8u3XexdwnqFPNLA13w) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT On 12/16/08 06:44, Darren J Moffat wrote: > I'm almost happy with the response to the encryption part, I don't > understand why the upstream developer chooses to use weak salt > selection though and this really needs to be fixed - why is it so hard > to use /dev/random for the salt and store it with the backup files ? We accept the change to use /dev/random for the salt and will work with the upstream community. > > I don't understand what is happening for ACL and extended attributes, > is the case saying that the backups are really going to be cpio > archives ? No, this is an approach that mimics what cpio does. -- David > > -- > Darren J Moffat > --Boundary_(ID_Soui8u3XexdwnqFPNLA13w) Content-type: text/html; charset=ISO-8859-1 Content-transfer-encoding: 7BIT On 12/16/08 06:44, Darren J Moffat wrote:
I'm almost happy with the response to the encryption part, I don't understand why the upstream developer chooses to use weak salt selection though and this really needs to be fixed - why is it so hard to use /dev/random for the salt and store it with the backup files ?
We accept the change to use /dev/random for the salt and will work with the upstream community.

I don't understand what is happening for ACL and extended attributes, is the case saying that the backups are really going to be cpio archives ?
No, this is an approach that mimics what cpio does.

--
David

--
Darren J Moffat


--Boundary_(ID_Soui8u3XexdwnqFPNLA13w)-- --Boundary_(ID_XE18cLgjdI49k5qZkVG3Sg) Content-type: text/x-vcard; name=David_Zhang.vcf; charset=utf-8 Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=David_Zhang.vcf begin:vcard fn:David Zhang n:Zhang;David email;internet:David.Zhang@Sun.COM tel;work:84341 version:2.1 end:vcard --Boundary_(ID_XE18cLgjdI49k5qZkVG3Sg)-- From Mark.Carlson@sun.com Tue Jan 6 10:08:54 2009 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n06I8q4o027643 for ; Tue, 6 Jan 2009 10:08:53 -0800 (PST) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id n06I8gh6012589 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Wed, 7 Jan 2009 02:08:52 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD200307AEPZ700@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 06 Jan 2009 11:08:49 -0700 (MST) Received: from brmea-mail-4.sun.com ([192.18.98.36]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD200IOCAEPXQ80@brm-avmta-1.central.sun.com> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 06 Jan 2009 11:08:49 -0700 (MST) Received: from fe-amer-09.sun.com ([192.18.109.79]) by brmea-mail-4.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n06I8nY1021730 for ; Tue, 06 Jan 2009 18:08:49 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KD2008019331P00@mail-amer.sun.com> (original mail from Mark.Carlson@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Tue, 06 Jan 2009 11:08:49 -0700 (MST) Received: from boulder-dhcp-225.Central.Sun.COM ([172.20.24.225]) by mail-amer.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KD200GFJAE6J810@mail-amer.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Tue, 06 Jan 2009 11:08:30 -0700 (MST) Date: Tue, 06 Jan 2009 11:08:26 -0700 From: "Mark A. Carlson" Subject: Re: Areca Backup [LSARC/2008/681 Fast Track] In-reply-to: <4949A6B8.2090300@Sun.COM> Sender: Mark.Carlson@sun.com To: LSARC-ext@sun.com Cc: David Zhang , Darren J Moffat Message-id: <49639E1A.5090809@sun.com> MIME-version: 1.0 Content-type: multipart/alternative; boundary="Boundary_(ID_V6PJV4Bww96vdcQw6xGbxA)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <4917C1F1.3050408@Sun.COM> <491B8B26.8030403@sun.com> <491BF68C.4040805@Sun.COM> <491D8580.1010106@sun.com> <4942C94C.3020500@sun.com> <4946DDE8.3090709@Sun.COM> <4949A6B8.2090300@Sun.COM> User-Agent: Thunderbird 2.0.0.19 (Macintosh/20081209) Status: RO Content-Length: 2959 This is a multi-part message in MIME format. --Boundary_(ID_V6PJV4Bww96vdcQw6xGbxA) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT This case was approved at LSARC today. -- mark David Zhang wrote: > On 12/16/08 06:44, Darren J Moffat wrote: >> I'm almost happy with the response to the encryption part, I don't >> understand why the upstream developer chooses to use weak salt >> selection though and this really needs to be fixed - why is it so >> hard to use /dev/random for the salt and store it with the backup >> files ? > We accept the change to use /dev/random for the salt and will work > with the upstream community. >> >> I don't understand what is happening for ACL and extended attributes, >> is the case saying that the backups are really going to be cpio >> archives ? > No, this is an approach that mimics what cpio does. > > -- > David >> >> -- >> Darren J Moffat >> > > _______________________________________________ > opensolaris-arc mailing list > opensolaris-arc@opensolaris.org > --Boundary_(ID_V6PJV4Bww96vdcQw6xGbxA) Content-type: text/html; charset=ISO-8859-1 Content-transfer-encoding: 7BIT This case was approved at LSARC today.

-- mark

David Zhang wrote:
On 12/16/08 06:44, Darren J Moffat wrote:
I'm almost happy with the response to the encryption part, I don't understand why the upstream developer chooses to use weak salt selection though and this really needs to be fixed - why is it so hard to use /dev/random for the salt and store it with the backup files ?
We accept the change to use /dev/random for the salt and will work with the upstream community.

I don't understand what is happening for ACL and extended attributes, is the case saying that the backups are really going to be cpio archives ?
No, this is an approach that mimics what cpio does.

--
David

--
Darren J Moffat 


_______________________________________________
opensolaris-arc mailing list
opensolaris-arc@opensolaris.org
--Boundary_(ID_V6PJV4Bww96vdcQw6xGbxA)-- From David.Zhang@sun.com Tue Jan 6 15:48:47 2009 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n06Nmk91025660 for ; Tue, 6 Jan 2009 15:48:47 -0800 (PST) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id n06NmfYM029757 for <@sunmail2sca.sfbay.sun.com:LSARC-ext@sun.com>; Tue, 6 Jan 2009 23:48:46 GMT Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KD200L05Q59OL00@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 06 Jan 2009 15:48:45 -0800 (PST) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KD2004UNQ58D7B0@nwk-avmta-1.sfbay.Sun.COM> for LSARC-ext@sun.com (ORCPT LSARC-ext@Sun.COM); Tue, 06 Jan 2009 15:48:45 -0800 (PST) Received: from fe-emea-10.sun.com (gmp-eb-lb-1-fe3.eu.sun.com [192.18.6.10]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id n06NmhO0026821 for ; Tue, 06 Jan 2009 23:48:43 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0KD200G01Q1JLL00@fe-emea-10.sun.com> (original mail from David.Zhang@Sun.COM) for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Tue, 06 Jan 2009 23:48:43 +0000 (GMT) Received: from [10.13.49.167] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0KD2004O9Q53QV00@fe-emea-10.sun.com> for LSARC-ext@Sun.COM (ORCPT LSARC-ext@Sun.COM); Tue, 06 Jan 2009 23:48:43 +0000 (GMT) Date: Wed, 07 Jan 2009 07:53:53 +0800 From: David Zhang Subject: Re: Areca Backup [LSARC/2008/681 Fast Track] In-reply-to: <49639E1A.5090809@sun.com> Sender: David.Zhang@sun.com To: "Mark A. Carlson" Cc: LSARC-ext@sun.com, Darren J Moffat Message-id: <4963EF11.7060707@Sun.COM> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_ggHm8JvGyFm7H8CznqYd8w)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <4917C1F1.3050408@Sun.COM> <491B8B26.8030403@sun.com> <491BF68C.4040805@Sun.COM> <491D8580.1010106@sun.com> <4942C94C.3020500@sun.com> <4946DDE8.3090709@Sun.COM> <4949A6B8.2090300@Sun.COM> <49639E1A.5090809@sun.com> User-Agent: Thunderbird 2.0.0.17 (X11/20081119) Status: RO Content-Length: 3903 This is a multi-part message in MIME format. --Boundary_(ID_ggHm8JvGyFm7H8CznqYd8w) Content-type: multipart/alternative; boundary="Boundary_(ID_jMxjh65kAUiBokwZ+ffqMg)" --Boundary_(ID_jMxjh65kAUiBokwZ+ffqMg) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Hi Mark and Darren, Thanks for helping on this. David On 01/07/09 02:08, Mark A. Carlson wrote: > This case was approved at LSARC today. > > -- mark > > David Zhang wrote: >> On 12/16/08 06:44, Darren J Moffat wrote: >>> I'm almost happy with the response to the encryption part, I don't >>> understand why the upstream developer chooses to use weak salt >>> selection though and this really needs to be fixed - why is it so >>> hard to use /dev/random for the salt and store it with the backup >>> files ? >> We accept the change to use /dev/random for the salt and will work >> with the upstream community. >>> >>> I don't understand what is happening for ACL and extended >>> attributes, is the case saying that the backups are really going to >>> be cpio archives ? >> No, this is an approach that mimics what cpio does. >> >> -- >> David >>> >>> -- >>> Darren J Moffat >>> >> >> _______________________________________________ >> opensolaris-arc mailing list >> opensolaris-arc@opensolaris.org >> --Boundary_(ID_jMxjh65kAUiBokwZ+ffqMg) Content-type: text/html; charset=ISO-8859-1 Content-transfer-encoding: 7BIT Hi Mark and Darren,

Thanks for helping on this.

David
On 01/07/09 02:08, Mark A. Carlson wrote:
This case was approved at LSARC today.

-- mark

David Zhang wrote:
On 12/16/08 06:44, Darren J Moffat wrote:
I'm almost happy with the response to the encryption part, I don't understand why the upstream developer chooses to use weak salt selection though and this really needs to be fixed - why is it so hard to use /dev/random for the salt and store it with the backup files ?
We accept the change to use /dev/random for the salt and will work with the upstream community.

I don't understand what is happening for ACL and extended attributes, is the case saying that the backups are really going to be cpio archives ?
No, this is an approach that mimics what cpio does.

--
David

--
Darren J Moffat 


_______________________________________________
opensolaris-arc mailing list
opensolaris-arc@opensolaris.org

--Boundary_(ID_jMxjh65kAUiBokwZ+ffqMg)-- --Boundary_(ID_ggHm8JvGyFm7H8CznqYd8w) Content-type: text/x-vcard; name=David_Zhang.vcf; charset=utf-8 Content-transfer-encoding: 7BIT Content-disposition: attachment; filename=David_Zhang.vcf begin:vcard fn:David Zhang n:Zhang;David email;internet:David.Zhang@Sun.COM tel;work:84341 version:2.1 end:vcard --Boundary_(ID_ggHm8JvGyFm7H8CznqYd8w)-- From Mark.Carlson@sun.com Thu Apr 30 07:31:20 2009 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id n3UEVKmh014708 for ; Thu, 30 Apr 2009 07:31:20 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id n3UEVKCG001690 for <@sunmail2sca.sfbay.sun.com:lsarc-ext@sun.com>; Thu, 30 Apr 2009 07:31:20 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0KIX00C0N4C79300@nwk-avmta-2.sfbay.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 30 Apr 2009 07:31:19 -0700 (PDT) Received: from brmea-mail-2.sun.com ([192.18.98.43]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0KIX005OQ4C6DJ70@nwk-avmta-2.sfbay.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 30 Apr 2009 07:31:18 -0700 (PDT) Received: from fe-amer-10.sun.com ([192.18.109.80]) by brmea-mail-2.sun.com (8.13.6+Sun/8.12.9) with ESMTP id n3UEVHWN000033 for ; Thu, 30 Apr 2009 14:31:17 +0000 (GMT) Received: from conversion-daemon.mail-amer.sun.com by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009)) id <0KIX0050041E3800@mail-amer.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 30 Apr 2009 08:31:17 -0600 (MDT) Received: from Macintosh-335.local ([unknown] [129.150.35.46]) by mail-amer.sun.com (Sun Java(tm) System Messaging Server 7.0-5.01 64bit (built Feb 19 2009)) with ESMTPSA id <0KIX00DV44BY7540@mail-amer.sun.com> for lsarc-ext@sun.com (ORCPT lsarc-ext@sun.com); Thu, 30 Apr 2009 08:31:11 -0600 (MDT) Date: Thu, 30 Apr 2009 08:31:10 -0600 From: "Mark A. Carlson" Subject: Areca Backup Update [LSARC/2008/681 Self Approved] In-reply-to: <49639E1A.5090809@sun.com> Sender: Mark.Carlson@sun.com To: lsarc-ext@sun.com Cc: David Zhang Message-id: <49F9B62E.2000604@sun.com> MIME-version: 1.0 Content-type: multipart/mixed; boundary="Boundary_(ID_jHuQ9OK4ZAY/E3kFV6C+6w)" X-PMX-Version: 5.4.1.325704 References: <200811041314.mA4DEa19014478@sac.sfbay.sun.com> <4917C1F1.3050408@Sun.COM> <491B8B26.8030403@sun.com> <491BF68C.4040805@Sun.COM> <491D8580.1010106@sun.com> <4942C94C.3020500@sun.com> <4946DDE8.3090709@Sun.COM> <4949A6B8.2090300@Sun.COM> <49639E1A.5090809@sun.com> User-Agent: Thunderbird 2.0.0.21 (Macintosh/20090302) Status: RO Content-Length: 4899 This is a multi-part message in MIME format. --Boundary_(ID_jHuQ9OK4ZAY/E3kFV6C+6w) Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT The project team has updated this case to Version 7.1. I have marked this as a self review, but am happy to start a timer if a member so desires. The updated proposal is enclosed and is also in the case directory. The diff from the previous version: $ diff areca-fasttrack.txt areca-fasttrack-7.1.txt 9c9 < 10 November, 2008 --- > 24 April, 2009 15c15 < 6.0.7 into the SFW consolidation. --- > 7.1 into the SFW consolidation. -- mark --Boundary_(ID_jHuQ9OK4ZAY/E3kFV6C+6w) Content-type: text/plain; name=areca-fasttrack-7.1.txt Content-transfer-encoding: 7BIT Content-disposition: inline; filename=areca-fasttrack-7.1.txt Template Version: @(#)sac_nextcase 1.64 07/13/07 SMI This information is Copyright 2008 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: Areca Backup 1.2. Name of Document Author/Supplier: Author: David Zhang 1.3 Date of This Document: 24 Aprial, 2009 2. Project Summary 2.1. Project Description This project introduces the package of Areca Backup 7.1 into the SFW consolidation. 4. Technical Description Areca (http://areca.sourceforge.net/) is a file backup tool. It supports data compression & encryption, incremental backup, file history explorer and many other features. Areca Backup also includes a transaction mechanism which guarantees your backups' integrity. It is released under the General Public License Version2 (GPLv2). Backup Engine Features : * Archives compression (Zip & Zip64 format) * Archives encryption (Triple DES & AES encryption algorithm) * Storage on local hard drive, network drive, USB key, FTP / FTPs server (with implicit and explicit SSL / TLS) * Source file filters (by extension, subdirectory, regular expression, size, date, status, with AND/OR operators) * Incremental, differential and full backup support * Archives merges / deletion : You can merge contiguous archives in one single archive or safely delete your latest archives. * As of date recovery : Areca allows you to recover your archives (or single files) as of a specific date. * Transaction mechanism : All critical processes (such as backups or merges) support a transaction mechanism (with commit / rollback management) which guarantees your backups' integrity. * Backup reports : Areca generates backup reports that can be stored on your disk or sent by email. * Post backup scripts : Areca can launch shell scripts after backup. * Files permissions and symbolic links backup. (Unix) * Support for delta backup (store only the modified parts of the files - not the whole files) Graphical User Interface : * Archives content explorer. (including a 'find file in archives' feature) * Archive description : A manifest is associated to each archive, which contains various information such as author, title, date, description, and some technical data. * File history explorer : Areca keeps track of your file's history (creation / modifications / deletion) over your archives. * Backup simulation : useful to check wether a backup is necessary * User's actions history : Areca keeps an history of all user's actions (archives deletion, merges, backups, recoveries). Command-Line Interface : * Areca comes with a command-line interface which can be used for backup automation. 5. Interfaces Exported interface Classification Interface type =============================== ============== ============== SUNWareca Uncommitted Package name /usr/bin/areca Uncommitted Command The following additional installed files are not interface. /usr/share/areca/areca.sh /usr/share/areca/check_version.sh /usr/share/areca/readme.txt /usr/share/areca/bin/decrypt.sh /usr/share/areca/bin/dezip.sh /usr/share/areca/bin/run_gui.sh /usr/share/areca/bin/run_tui.sh /usr/share/areca/lib/activation.jar /usr/share/areca/lib/areca.jar /usr/share/areca/lib/commons-net-1.4.1.jar /usr/share/areca/lib/jakarta-oro-2.0.8.jar /usr/share/areca/lib/local_policy.jar /usr/share/areca/lib/mail.jar /usr/share/areca/doc/index.html /usr/share/areca/help/advanced_encryption_howto.txt /usr/share/areca/help/help.txt /usr/share/areca/icons /usr/share/areca/config/Main.xml /usr/share/areca/config/fwk.properties /usr/share/areca/plugins /usr/share/areca/license/license.txt /usr/share/areca/translations 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: SFW 6.5. ARC review type: Automatic 6.6. ARC Exposure: open --Boundary_(ID_jHuQ9OK4ZAY/E3kFV6C+6w)--