From ebd82a1f22c85a274e51e2be736094511ac3da30 Mon Sep 17 00:00:00 2001 From: Peter Gerwinski <peter.gerwinski@hs-bochum.de> Date: Tue, 1 Oct 2024 20:14:50 +0200 Subject: [PATCH] Notizen 18.1.2024 --- 20240118/dbs-20240118.pdf | Bin 173925 -> 173917 bytes 20240118/dbs-20240118.tex | 5 +++-- 20240118/onion-routing.txt | 44 +++++++++++++++++++++++++++++++++++++ 20240118/xss.txt | 17 ++++++++++++++ 4 files changed, 64 insertions(+), 2 deletions(-) create mode 100644 20240118/onion-routing.txt create mode 100644 20240118/xss.txt diff --git a/20240118/dbs-20240118.pdf b/20240118/dbs-20240118.pdf index d1e36e8ca9bb4d888ac85240828244e16e49a081..8947b920550e48e337a962cc1c561db61925a81a 100644 GIT binary patch delta 10137 zcmaEQj_d9@t_>3xF<Tm%O&9cH6rH?s5r2K|>h0SC+Ah6h;FO7~DsU)_5o*81CsJ2? zecK$3m5mH(x14oczrEXc_o`hcXP2PkZ|jugB?dtf^#{2eV+>`AIwKAkq;jRQ^_KVj z7y6a1yiDk3dx}u1;jI{}%*jEDoB9pbv|bDI+vRd1;4gQU^XmNxPY)L?|KDls!urg~ z&_t%*`OoPc!6HeXEJ;jmY8MLH_Eql=OuQ60C2r=G_Zt;Hh`mg;<a}*jS@bYFKWS5^ zC)fYuA3k$ChIW`->(YFvw21MVi}EoMzAddT(Qi$JbdEITdc0A6`C|@y(j?tWH@v3b zpJuVjvz1|6lr~cvXG5~gBB#Sq50_}H`&|CFZjQ+1jQS_sj~;f<_B{Wd^X*f$&((7( z%<Y8b&ZzF$WAgX)jg;-4v*K0%o({Yxw<^4q<I~9<t3GaA>-5A+<`+Zd#Jj(3y=*p% zt=GD}Jo8g^?90Uo<_874LKB*gZ)bY$Wy6~H<Kv3@f-glCCRYxaY}MV!YZd<Bh|glB znaeL;v1m>7e)cmnuU@C{fv|>~R7-^SY!x2HfK75DJo@XmFSVC>9iX_1$%kXB;DIfB zkH~2WKH%1Sx@*$k%gy(;yS{Ngv_NLXhe;oIthC{=$;@6qE9}bkUB4DJWz<X(5?(mX zZe#lF`cv`O4?OtceYT(drGIhYyY}N}_MXx|Xn1jT%*S(oi+D|R?g!L7t$%z%MLPQK z@>|CF&yAKpSRS)W$Ey6Mslklpl@pIF`?mG&QFDvO8m-J~99cX?+G0hje4D#u->>Vg zoa1_Z@{ybsFIK&orchFPeW6QY+RA{WTa{@tUsosZNfLRk^FHtJRliIN$*DPWUd^$L z`P#hu<{6P`%Ec=-@7i?k55u--Htx%p>Yv(}UpD_@o-*U|vAceptp}vtfB*hdUtq2f zDz#?++|8Y<>n0q@4AI$SuHatn9I(Lc^Km_n^DF*@$ExW}oEn+GBP925^11`z!FTS@ zdb27=r{P?bb@%gzhZF9%DK+OF*uj+k^y%Fc(U(USYwWHP6*;ycPpYF}w_KWP!2H9d zK4M4f|IYex@50RoQo=W?3tF;w*v6k(u>6>cLQAN;#pPF_%4y=i*o}M3o?pn3*N^`y zHFfXQbE{f&^cj~~zVXVKE+WSJt=P|{Dsr1^$h0-N*@>!34{ongTzVysIb+@u^Yd<L zLcZPX?=NnebMW%Dj)v1rPqSrpr!%-aa4nGBVtVLTh#gl|m$SuxhR=FE|2AtaJ7ZRV zyXdlqK<)SNGs-p!Xa8=Rx=1VL(6X||2^*q!b8DU|Y)MXvj`LJ&Tz~&^ky3P^-Za_6 zhnn4$ef__`yqvy7lKY&6@GQ-PEs2L7J(|hEXRkIlIVj1)aOI3|(>zb}%=0+DrpTu- zZSDJnRhQc|&(3-7Bl+y*Ib;9wM$W!{({@;$-BO?Al(cHw4l4^+g;q^Ag(<?a%|C8c zrI|b^ILl)&Q(*?9M)wJ}e{-&!IW+(9f>!(fpJM-Pq`VJIO`0}o!@9>dlkc!Uo6!4U zn&J`>uJB&%50=e556^SP7@kayQI7AgWLuD+#Ov{KL$Ov#2Q#}ezmQD^#|HksNzUt> z5}XwF@o?{`pPtbWo4J5v!4ajZ4Lp@hsuiVSB`oi3+il<NRokX=d5*Gf%KC$XR&26I zCdimv3emf;QFXC`Nr1XR?t?CYj0bNORC6clKV74{QLEz(LsVdz?1~c`t~0WDT{ydw zJuZe<iTf4HrUM)=7$VN~Y+9zQ;<ZrFg`xdoh^)q838QH%7S%g<vUDC<D6rsWg(Lri z^U|jz|2a8KS|T$`bAhb(0!6PYi;R}AiA<FV4sDzfxKk%#f%3(TUydxk(6offUhXlI z!rJdmE=O`Ed|`2Y`b09Q_yWs3i)Sj!xH>L)`ui*J=z1niFqj%G(aD#kx+VQwRuz*y z-%~NRIwlG66GvE;t)rvsb?g#8c7Mq|^(g(#!Pl9FGCjg_FWcXIe0;9?yM{sCJKN_q z^JlfpQZ$Xt;>u#XvgAt7>c+&>Kl8HvuBU(X^h~V};hnO5`R9x6bE6sDoLp9QerlLy ze&x?TiQ4U-{;&LWf45$<b<(NVGj<wo-BT2I%xb0E=3j3Y%&PAEzQS&srBG;nN}ht@ z+U17otM<RV71#V?d)HR|D?Y0tGFvrPC;4iXdG9&7cB7Ku&9ptwuf7rbaoi~SY01-_ zJ!Wfper-QKVdDPAr$%!Fud0M5MYbyJcXOD2=6~e$E25VlD!tj0^{l(%B}<6Px|OHO zo_=EYWNs=q7fI54TNr!xGS@YsQ%j>hOLx@I3e)p{wK`?r7Q3*$>x+MGn?AdDNlsHm z@Xr_5oX=1EvP#u-mDr^%dDHKT{hBrP%c^zlM(a0M#Vvn(f9m$e9m@`de+i8~_xD$~ z*6RH$-tj%ZT_^DD=h>BiZ}oiWD{GkZc5_8~zy@b7C$aqfK0;#eOMhp~U-no@Qrz+z zlkw@lD*nssBlS;ann&1G&XnQb<$tMo$Ku>gn<_*#Z*iXLD6?!|BfS6YuE%p?UGBTf z6wN=VU&gz1a`%bfTQVbR44Oav*;7#%P{Lgj|9)@EqoNYS=KcTvweRdGJA9*QTI2D{ z4-4j9vD#LbmYwS|d*LiyLld9P&7Rw*8<@`CbX~VgMS3&$v1j!!(pwsHCq!-9*nHt! zoJvo``hGjry*Dqs>-d&o%)eXt&E|^KZPS<TZC=7~qT>BcJ`b;R?^n&c9=`hd)4!qm z_vHG6yB_IhfA2fTa>YL8KuFZaAD**h)o)r$J#YWG{^RN&nt2<vZB=S)PkCDi7QTsC zdZ?Vyx;nL{Wiqdytl6g<N9*Ov8d9r54&?s%olql{pPxI`@zL8jLyzMh9seBvr}tNG zj>u7!|Ehhzo0D$Xc2&*ymwW2@&GO`;$13x_On#GNaL%9o<Hx{%0tduZA6)%Z6nUx4 zcV|NWdwq@lp;nER8~b9Mob?i!ixxh95TkFrw*BT}g=+!*yb}*6%Bs&;VG|iy&wTO1 zO_q2+$uPn5KQrH3yjr?A!c$!T)Dm5jmrA{xXFn2@l`iz?lkvECL*bFZcBT!RH*e0E z^vu=X`%`^;;H<BYA8(m{d~c>(&+&>M8Ix3nKgiD&S^Us8K|De5SAdp_#id7UB`zu! zyS_=+dOvr`O9TCzbLaTH_@4NMb%%Y-1G|6q6E0^-Of*=WXSZ{gmveXMu2pY!<r~bl zNk{(u$QRe~@ROyT<ik(1`!-i_yxzmc5*~h^`OEfGwe?>+9e=r}zr3_2?@w;m=7<Tu zva6OV{YVph)7JIi)`wlIK7QA6+S9zHHRAPa4VTBCJ^r)hEm2x@R64u#@$P&1r=|WY zJmo(7X(w;})bra{cKp9qeS&wA&g^WLyo}xxW}D(~{`h^W?r;9ioK<mo9$z>0zIyuK z?d$8}HM16lOAGDITAaMJPN{FURoM51$qQ2_KQVI(v!6I&YvzPCSKB<U?P5LYE%jeO zMf#q~&HSz>7uueD5T1A^WYf(llYFIB^%MWd_qG>>ai!*^6qihXew}x6*<&3>)5(fA zL?&;4timHQF-xGnR^QUOd&%+1&mU{lTT8F?`&Xg%W&d44!HN4hv=+rm^-j-o3JP-n zw`i-d)S5ecmbRM|$v@?ht!tXfzg>NKc#m6)f-+0s#kX8s7gXlCNO7J~KK0PAvLxE2 z{utB7n|D0q=7-<!I&^LKny51zeb>v(mU|tYpMK{^nYpskxB4gLJ|9<Y`nk_1z5edM zPtEmp^WqAHBvVwT?s>0#vBO(5aMi>qhb$}GJGo|A?PX$Mozh@%(OI_s{E7yLRY$Eh zdq;13`0~f)M*{uaKMLb_?6*4~BK-4??)%eAqxb2&UZox~Z)@LIp5iPeFO{Gp*5{YR ztWD!NzHQCtoQ-Wc+h*<Y63tI!{4~3<+r}^J`+likW|MiJ3fCuZvn^gI>bZAY0i!{w z!>?TKLP-w&+f&{<St_&b>Xul3IW2Yerj(6kQqzCmP5Qed-jp-)z0Qh^txf;dZx&nd z_I&JT^8;6o@V}IOyvJwr7VYfkk`*EQVy!xxo=>sUo6D>!pA(jAJli^9Zd~VrC09H? zPyE>*$8^F}VIhxDR?6$Y^-Fj)ILwMPHhvX)xJ2TG^)DUG89uWVXDBwg&#V2Y^l;C_ zwz~$Bl8ZuiC2fDPaG9fjdymR`83wB@V(&WJt2S5X+*n&V;e*BY%){Al7w6jNo$`FX z(yT*TO0OkIQLv3Mu2CoPfNp2~ES@=mO*;gfZ_f6A{<y7aZx=`Bh9Z9rv&ecgJ}*mY zk1wmlzO{Ha=*gduFy(aMO!PLMP+_0Bs59_%qC&)E<M4}D)@6q;FACnB^laS;t}v^6 zCv0Z_w@OyKmlN*z?4gXHQd>@##XreM&R;$(ocH14zlu*h7HZnlx2?*3smQMKbn3cW zybtC^@7sRh&2GOV$BUB1UkioZ?^~eZZuKT&pS;FTyQWv(ddoPy97Wx>E#vgkR&l)U z@aUg{;>19oZbnDL40#8u&=Wt_s?AK3$_TUkwklcb?)}MbZ&d4Tyn|M}h+vR!@fKfZ z;w3Ss{D(x&`b8$EER1SI?znDaD$IIrf7?cXQr_<UXVy<vI_aF#&O7JplJw5zgAQ&I z&b+*hr$d74x#s!Uw+q)4FM2n7Mw*_Zz~d?n$0f&386WA`Eyb{R+U~fbOXaHq132nG z**GZA;pjN+;LYK3_4AR|dd>R<mIfF3vplL_*)QK~AX0hxhJ&gbYv7N$N3I8#B)(QT ztu6nia$eq@PQ}&NTXospt7PL<eC4vl|NmQf@BN>JpFeH8ZqlG_VPzrRz36(qgVhYP z<y-GvcNN@gWIA_VWqRVjltpv-)W35(PF&=kCtfQn-zb$m`>9=i{A|ffVRiK)pL%x2 zZ*BikG;^tJw_R${OdDRG%AjSTK@~H4a+qdJeWS70`pwUo*A{*-=>BnWo&9myw#Xid z7rC2W?Y|eZpH*e0OVh^sgDEGzomTfZ@A~>>owVA|viFZ;Z{<z6`r~NE^4FdcGJ7{j zNPKM7neFtBd2!aJ^;thkRHpT03&{Pm;0aaVHT&<Syr6kJ2PU5J_^q%eZu8D?`4%O$ zldr4ZUT|&y`cv?{O!~{8r$sN;G-t2BA3Nc*^OU=%6&x0*6}*4n#I#H=fvIWA$EjDB zyZG$8*jV$A`CL-*=E)DQ3r~LhLWj`|Tz09vL@K*FmmHrQ@=~*Y^Tk(Z-}krt+ib0* z^hw;&b&L1nkC#e4yk4D%-%{q(JoWYUFB9C}EuORRvHylo|DK&ask&HD@dSrsNXh0V zCX-I}iEd1vJBoG$%iR^ZD8JDm$IN`v@${?P7j5{ew_41&>G9UNXIBP&d@gCe@$T7< zj=%Chb%Xb;%GsxX`R07{{eKqJ&sU#5$AwMOQ}z9C50ghhu2Zs9mKONkOIp;l%ukQe zfl*b#=S#rxcw;Sv30WJ@y}2|kx5Db*7K>w#nd)wczgvIa_^OLt`RU(9FQ@6B+VzTa z>hiV8wuk4;>JaJ_`FPG)Gkmq=;f=blZKBsG&R(mwKImw4M8lu72TJ{uZ~a~0wvTsm z^(*0e#oP0CUFcd87rldFhLu9?9j6$!L#NH2-VQj|(RkOj=W^!eO}>$vBCLB)|IOQ2 zcVqpmmNn&KAzPvx|6h;fzVPk&x}VYsS&x2ynN}FLEb`XWt)F>pwBq&Wx*RO_+OIR0 zS@nG`wCsxMf|gzUNM+Yu)UxYF`Io>TgPA7I2F@(~HoqUa9;#I4-JNJ;<g&8lXx>F< z-{yIIlAdvv3?&)5cZ9!xP5XXfL-c2bhlP2U+pgbozx{WIruy9Fw-oX+b_jU2x=659 zux@H$+^+I3)2P6W^N|xz>U#URz2+iwLR~ysrdB&`JULnJnN<C5PhsDlC_d(cv*zsT zT2>aj+iL3UTcXD0u3;N4eRO+v^Urlj<Bw^(xs3RqcL*4!Y(Dhyyny_ocK*@>?!O;D zkSy>C)5{ILeaV^6<CJ#nR`vtY+iTJrZ<f#P=zn@k@0#kGeR7V0eK)*+)-8DQn`4#! z&KYVNtf3M&XQ^qdoxl>ytk}7Gaf^$ap)MQC(S+X&msUC*lQ%tSa``~o)a3P6%P#&c zo_yn(YW-rB)~-I*4~{!Z61^6;IPO1uJfT`_Y2dMm4;Mc;w^_6!*!us?XO$C6j{kM7 zn=0Zdmt>u@;QHiws(ozCl8HQ~CM<fvzO~{uGwb+dYc2<V_w_NJuFz3vJ4GQV`Ke^m zkyze_d8cFjEnk95sr!|33kCgHj-)1lN~y<3S~cqtrBpn)l-j(p(W{4R(Fg0!^~+z} zx#l@7-0sF^o4Y&uAf=S<-oEpb)%dq|*Vo6tFW>ia&yJV5QU^r0@SQuh=*3%m1zDfj zd27Fy2D-GXKim8D=Zl%om%d+dvf9vo$3?#hlheBvcw7{h)2x-1Z?FRuR@>|2XIowl ztBd)xW>@^y-nyM<F7;*d-;7ghU#R7OYKs>a|I&%R40|TYzAfinIKNspsQ+`9{QqB@ z?-f2c+R=DVZS}v`U$15#nC7J-@tgflTaNwRxw{J2E-$~k;p}#6`S+K~4zD}r?`9qA ze`ta2;iQBk;+t}~cJlXZKDlqz!^?uPM(aWxD;%B}9C(pu=d(Mr%80?;Mfq*>hAQbx zd*u{G3_auW?f=c+VpHd;JS)H8tznb*;XgCl-%S-t2oc`#{d^GPX6XV}$5TIUy%ttd zyU*=->_6Mn9}N#drPSuYcgbN)X5ezF{%AzB|6>c0y652)_k=PH_8t4?@tYxP#?>?H z%GfUK<M}Mmb=yrP)7+E&V*LK&8*i(rvM^5lwy?0^QSsk%<$ekoZ5+R9T)u^IX}5lj zzoFQn&XcVt7|atqZNaHUFE4&qZ~wPlG`RDSt5N4F$y@h#$yiOz5YdbJ?YwvHY3HaD z6aLq0uFv?co?*G$&T8iap1`i&DIp7AYpNVzou|~RD%impG1K8X>n}miIY*995fG}4 zUz(bH`sAXBbyCqs?bq+$bFpPIx8uZvYKfgMRxOw6c2PX0;iu5E_Mf!V)dj02b00X? zAi(A{<0bdcutt8PQ>RL|{SlEjUaEYJ%Xa4kPOlAtG4-d{39#N&;c4;M!|5W)$CDk( z#hmv$>U>VB`e&nMDp6C7qpOZ?zLPfjrxjau&b5@yVL8Vuyb=`IoE4lHRBqn1S}-eE zXT`g@lG~?BuknpPnSXDaxAp0)6K``_mqlLi`Mt1SakUrkO5qz4F1-i1&T#4p3I#ha z=FdNw<A3G4&Dz)XYv!HV%Utkz!p#Y9XO_<9+O&TMYiVF!_lC~`vrmMT+o^JW3h+x# zTU27yzIl?%kI=mSrkPsJQ`6ov7yF->dG=Lm+GmC*Vz-q}alJoOyLpApjz4vI=?we) z83oSIm{o8_^zG`O)-sH0a#o8prd8eFEk40(>Jg`|e=GUI*tsTVaqX$+O1zS=h%@8q z<7Jths?Ys%7B6;n<SmijI(_{v&)I1vB|SxJrpWNk6=-&EQ0`&-z2#8UCO^-fo5v%X zp3a-c+s<hwVs%VXP3pknuiMT|f7|&vJ7eqa>kkaY-)7H}Hqq>>`_rOc{^2*1!t)K^ zFYJqUm~h||OI~patM1NR)x#{iCfDCOd0Xvj&5w=;3bp!Ie<qoEUGd>kh_PMseC7}D zX3eYqkNo)~zH~N3yeb!~4fi;m*ki%>In{peL$8p3c5CIk51BP`G%&Bd|6e_<?|Fi9 zdH(gSXB)X+natNcwEOIy4Ns5%6}yr(-Jq4xEBb9V&w6#wl4ltr)tC0{vHBVnb2DG6 z{*4CbPN_dH&d+&1|FY8Aa;A5ie(l?ow<crzznC+Z6oh<Ow#8jt|IY2P<RdO=hi|iu zU1Z|RT5WdN<$J%dn#zBn=z7_uw9AV^^b2?IIcfgnZNlD}h7nI3tBS*~T+MnNI5W@c zi~03<@zP?MV<#W4*Ar8#iZKg#rM4<Y;__3Q&CM(7TUJi(IB56d`V*V;Z;q6)Uh6kF zD{@e9fsw$|B;h=LdwHcQwS!0YnB3rbS+~xcEqr&8eiEPKYPlHCrB~;c|2XBBu&?G# zW|g9CR03D(L-pkm4QH4FqEdV(w|cS8seHLTI>v9gug9X*hZ){|eRa=q^Bl9pGnW)5 zNDD;#s5IZrexY8!ZRgS28!s6q3AH^;TYRZ^?$+=R+G$K#3Db6+ylHiu`Td(qc0U+D zIVn9noSvc7=Erc>i)lxN!*yPhJK>=WH711_7h)wFl|uE4?*6hb&DojtY+H`e0lw(+ z%O7UFk}KtYR=eoS?Yl}JmS{h|vapbK^TjOhECa{eRtJo-ul23nRsTj*?(eCf`p?y7 zrSEP%w$GU-o>^%TKl9L(kKdPW&{hudl)rK>{rR1@%My7j_rA{iZS((CoY^bmsWa4m z)!LP(+C2A`KR)48E<68GsVIe-@LGxg?+;wde);Z!R1J&MRgr7!`h_@x4P7=GDXLGI z7ht)Hf$h$JhWa8+2S|@|dU*j8Z~IeE#_dl%nK;}TEkTX9`n%E5#kaQ!)qP)oAlX{B zo5exELH)91{A829;=)N*rGFi~x14pGCer0~>EEx<x*lE%sg}!fm!6cIsl=i8{nuNj z1qtg^xF!1wU6|4jx~wUj=2LWV(FD&{@6?M+ZW{*AI>Fn$_Rviu*^66~Zmr;5XSq4y zglS)Zw29KOofC8x75mi7E)bjJk#ub7>w|)kuQm#(tYn`v)v^EKkyAMZ<${;Rf7}o- zVXK*=kv!wUmE?uHI&=gV2^K4*C^enBQ=}&HT!(3G&<g{pw6>b&=nGjNgcLp2ENE9U zQIUvd7N1~sZIPqYfh0|qik1(4Dlas@tngSUxR|lh%Rth5tD;kuKyt^_`nD$rUud-W zv-V$T2w&)N#Q7D+#f}b_%^nimUl(Spyv%HMb1~^~ICHkGA>xM0#pdItJmOE{7CY!T z<UF*AI3L2{<PzFySjxfnyYq;HtA^%*7*F1rlZ-_<HwwC2D1UKsFlM#AD6ehPE&Rj7 z>Y*2x6T^|iu3p|d{2w{`+D+i%t)Ia4MN9ijTf_H921}x+HF9<^PK$6}(qSRsa_q3h z+JvSK6=OZQ2dQ()9|{R8FA@n&KB3R`gKO<wfexD{ksymkiy{G;EMJbljiD8y_xYF? zx-zt|wC&{KY<a=#<RBh2U-iMkl7vaY^7B|b7V&n^uHfny+Ooib=Uv8;3s)}K^49+m zYGIT*-5^k4zJX=CO62QFp3`_5LROxrVA{~*y!qn`!Q_MIDlE?Rt9ja|PH9>n`N2rD z%S8U*(|1Mhy+8g~;n5|sZ~>p#n|^oJ!-o&r9bzz*xoH=Z`FdMH)YRMu++Bgcx8FZt zBmcesQq$Z8J9nRNGJiR}Y3?JjOyNC0(<e=0su$PPG}F2iXxN(Ub@1Tp603Pn|CYSc zYJ6Qak8e{-^&i$hPBkeyRcs6bQC}XY8r<W!_vB>8t1Grl-9eoy?CH<v2I;HUi2JNy zvOISD{r{9*%LTL-E`4k|i?^NI_q}_L*CUH}3!j;E?$2~_STFP86!#(C=ij@h#&wB) zD)rsiwR=bX|FR?YJAQACDB90={Yl+f>mC2k9l388`sc@w!s?C>I_d3k;bkxMZZ7<P z`Ax*)<7bPUW|XS7ylnayE%d)ZZu@Du>-;Z1CS;pPO;)h(KhQZl_wvz|%V#W3KKRW- ze#uWxP9Fbe^@E8Unz_&H_wzhn_pnLuyFv7mg>O84&ZUZcOFC0uVi@{1aUa{V3u$Fx z4cP?~dhJ-E`{gVp4~FeOacuDejf&sDG-d5$#g3-@$`;_cbnp2aXEVj->c@YS7OYMX zcRW>hcb4dM1C7~fnmo6CR-OL*CjR=x**$u7ZGpa9X6RkmrTy`{k?z73^7}1*&tBx* zZ@>4@qDJXbV?9SUjdwM?^XtoYvfXZ9anR)Ow~wCLJ6Y{=zts2o-%j1I@&410HKD(* zwb~21<^H*-_4nb2=asYW3EZ*LDOdkj7iJvC6J7jTqsaU1E2kZ-rLJPTS-;!1*&Lj% zCi%rE)mHJTteRxG`oDQ@P1deQblg?q+$W01O<aCG<-5iwvsaO4xO(4R)Yj9i_wA39 zh@7KT+b{LM&`j@=Yp?we@3v3+E@f8H>mGl3wVpZQ%l37T?L5}aKX*^mAZe#ocWG$q z#ibYS&HQnD$p<Orr0L3wu8Rs@K6<iT^<RE>R{PSskGO->#Gg<8^QdR;8BwmX%l?t} zwSOyaU!1RTvig#1lbzGac|~hC{V#cZWYM&G%`BHw3zq*mw$x-<dgM>pd#@I6eK#}u zQrXWH1sBCOU2CsexXdxN@11T_@zWhY7s<U-Ho3+cwCi*3i{$T%!WJL9=or3{nLSpp zKgj#n)Kd+s%eEGLJkvBU%52v;>o04p54qkhTz6Zgvrdr9xm?ZibNZ@goucorpC8(A z>1bhWw|aej3;)kWm8=Oz75`odle=sGFZg<K#9i)(kF+~~-aqaYeI@p}I{TgW|5si< zZ~l|r{``35ub=KSi%OfqPns{+x$OVAZ~m0h>e48osr71SSNgW+GtPa<e*RaSX5^yd z^;#uTKVJS5Sn%(n{gauiZr$hq{kF?5Z#i>~@0At5V;jPYRpsipzLss^2v{4qkS)Si zFJQmD(S^Ua88)_s=LTz*&VB6i_U~)ufU1wrTH@>t#5M29Cfp5rzAG@<@c*)#Px7qZ zKEJs{;`!6BiAAl}`txM+{}%o@eeUzy#ouj?%uOsZObzth6npNlx#872TefhzUrGr{ z*wudY{T6@Yyxva#4U>K5EvdhGH1%MT@MV!rd$xP#yEQL&H9GSvdU1DRmt2XA=*z3t zGdenpzlN{~uv$;|?DKr>ujBEl=8t80dDH3~liB}bR&Ac&*xI2~-}T@0cUgbE{k>|= z-{1PeXNy1FkXJvctD)rKO>xsR+_sN13UVaGuPsaT+;8Apbbkxy+TgaAm4(ylV?)Bv z1;m*3_UxAUS@HbCkC(*~l_gs)dHkpjR)`SuHeb6YJ;^8Vlat5v)y@{%g<kH^YIu1( z(kO*d=g9XPn{S!#%v}F6>HXxn+s}XdK6h{0)SatLrneh*N%ZXBzSnL2mhDDc5+`!) zj`;HI!-KP{nK!*?)7f&u$w~8h#IKjqn*;9E8*y{q(_Zkai8Vdq*fNnVCg+baKbrRJ z<$}y*FOr^pK7Rh*-uuOAuSCO&Sk7skvv_;tlABG()Uu^hD~(S4I=LY;csW<`kKeby zw^#3%NefTk{POe17YUzBs|=%4=Q_x!wgt>cs$ia~v3g#iSLS^SEzRrKrS|tM@~d9< zRw3}kUyp+NX<zJp+E0Eda#h=OV6S`3Ij^fLx%O85%z6Ky_G!mrmcAQu{Oqe`7OLK! zvc*x4M>S2b&T-MjyTz@$=j?8}=M(py>)mfB&xgO0x>;|ZQ{Js}<M3yliepX8Ed8wd z3wIV@7W7Fu7%jFZ`JlW+>jMk1FOdww39%>5JlvU|pD6y5T2fzgXz%BbI_04Z=6e5U z#w=47d+_YO&W{ILhef$B7@u-msokDz<^O7n();DXRp+@)HYIfJ{~}yCBQ5?z=rP_& z-KTAi79UM7VAzw!{Of4mtj2%F+zvnax&IxFpSAr}!17bSUVYtdfB(%d!#$j5X0iD# z)@XaWE=Ip?kEHXxo`o@?DfLsuofM-L??l~r<6bPUyx_3ap<mUqH=pb6&<{KQ-Cz7s z%0Z!vcBdz5Wd^Ewlm;&4Xt*HHuj%pk<JHhjOk!70Os{*%KY6v8SDRdr-lacUlDy~I zE=Mm;TliAO;d**;@9L8UY>)cw4#X^SeidotD;}=ey}L2rOlrx`E%xUMe_sx--yl&g zB^)pNUS580M)Jgj%|iWcA3UN9oQw5sg66Ih%*=CI(tpsB;rWZ|mk-y4hDa%_O8B&u z=@Lt0yu+&pqHkYJ5nNbc!d!TE#a{DQ&A&Ok-lRQ$zD2s>-s$-Ufr%9zrk7=IUi#I1 zOiRUW6I)_xUT*Z-3RVLquhy*g4P3dYo9d^W41TonNZQom)U+v{o~t{Jz9+qWD7*PU z*~|UG8#gRmEq?aX28mGVsfSj%1x4&NnKI}4!hL2(CNHfpyWDm8#I+O2=GGZcjP~}e z%NEK#`9VwlZ{L$}`Cp=kS2u0>^dZ3Qvo*i}^3yx5|G(Vy#zkh^!r;pE%)*;zN^kYY z|Ert$^m2XEr!Kap<|SFecmADVJNop>+wc3g72Q$UyZ1{rcepv{^LcMp?0)mDYmIL7 z_EdM?hj+x+@9NIiop9??ZnV{LnVhK=7h`LxO)pPc|6@{(|E_J^4+C$+R%G{HoVJ(6 z(r@d%&9N2RPQQB;uE&0>OXpyJ)~gu)*Q*1MX2&heWW5-<acceL&)br`Z+!XtnCp;@ z%^ydRXw&C8+G+XgXH*Cr&70M*WlHzYwNocQGdp$B|JmiE{I?5RZ_oYM^X;_K>UpWm zQu7{9nyvZ%_NODOW7GHC5_7fYJYDR0cJ*17J-;|-hkMxXoz1t$s5AWivx?Bfimj8@ z{kLEC&%O88e1=zRUw&<SS#?-1OWgEPtJu|hhpYZa?R~lO-szzC3s%%`-yi06HcaP7 znDp=0wx_<zF<1SmSN+2EV0vKzlkoP{bC{Bu*bEI#4GoPa2k47)8<`jw8d`t_wwujo zdcfjlXy|6(Z0Km=YG`0!Vrgz+=457JXm0FcVC(`?=w_#2Ls&`dWW{}Q%w`slRZR7& zlf85N0!7@u@B3$0e|7n_#cPA2&Ii2;T$}a!`-*+ufg)Es6^%PP1(_$#n4vIRK`GJU z$blmcE-orcy-S3IU6j~_*p4`?dTku}^W44XcdF0rd_5~NOUtm^Y=h{Q*^$?-m~3+7 zJHc9cV8$G??flz&ugsY7{H&6t$APFU)+Le(to3F=vpr8S-CQs=YSt9yB1iVEH9>L# zua+!ZsP<a(?v*W0`bq2)7cFxaZBoi&z4B#SQh?LiNwc;Ea-CXnHTbe$dUH{h_R5zW zq6vJabDfvZ;eHl)*|Ox%&jmsuJAZzDnVnU!CVN%sW}~H28w7Nc-U=4<B$`Gryt?!5 zOV%f&4L9CCtLNl>eK07jXVSEWsR^PP46hFqZU5cBCCN16a98sK0}HQQ)*CFd?#TIM zeyZBQn8SEBuRrSQ4W6io-Thm5x9qg7Tdj9#$?b!F6AG(8dG@|dV1L25`_8;;D=)H^ zH8Wm#{q0SMRP6%!H>}Nh`s-F0vV3b`PPp;*>Jq727wWc|xjkyAe<`@#{OPNr7he<? zXv>w(wphk?ecm%Ar^ANZPfod1Xz=dj($hT5-iPkm&A&W>UtU5mN4dag)7^dl0>r;E zsXJRe+g&Rk%ACub>-<l2*Wa8#=Pso*j~zkV<GHU)n7sM!ziSyC*@3KDcmBP|ZoT5X zW5(mSdPmbIT~PsV@71}P#&Fl~Ja&`muoItd+4(>As!Fc17krBn4VgY@P1{+%_xhfv z48=}f52H+WeD_&#o8ubO8tx}uYTy6GzfuZU2v-O<+0FkqjCrS1QE7u;L*hh63z5SN z6PXSti62;aVBw20`MS04Uw6#6T7Ttr-N!XS^MCK{_xk%zf4?U0j{3?KCNDbw|2GtI zo+pwv<y*z2Uw)bE)z$sAdp~#2R=>VpYNdckV^RQ<m*Y(J>v=xscb8uO$JjY*h0b)F R<xC2kW)@tks;>TSTmYAoe1HG| delta 10109 zcmcb6j_c_;t_>3xF<V$#PV;3Ho4jffUwvlu-mR@hQ~cOH9$dK8JXxd9`_YnZ%&qbF zx9YO1nkq6Hzg3*3R9$}GYq$Sy7T1mikC`_a21#i4>`!P_cxNb6&^hD0L8_dWsg(Sj z|EgckyZNXZ@t;)jQr@z&<f6(`))O{O3xuMgcV-AHI$u4%p2zkdtG4_v_PhRb6txV* z<(%vP8osID_+ErHLa1>@!$i(2^B2B9mpJ2fih!EARiX8n?{ia)wA38Gs&%)oD^jzX z`@*8U{)_#7fsjs*#HWV-H#%1Iiw1TW_Jsy0F6vFoViZd_c#XC1QA*9(T0_t2o+&Ne z{@fx@mu%s0yp}OPk?DfO^c(7Xf-FvccKx>QcJHH_dMUmbM;V(vb4%{@1^6us-hQ~V z__fi)12KnAPkg7RH22<7&obe1_vST~i{rLBiX7_S$R&R}vpuIXSX@E>GW&Mt&c)Zi zt+si6TIJu~btT$2cnd-*XH;%7I$F-SUG1aHj(^8DzdLzT`vEHtcT$t<8<z9ac3ik@ z(Er@i;%ZpZj43zk|1Zc6mg!@kH1U@R`;@R{204xDs}D9meEM@+(FzY?{=k(53bvbB zXP7;|5$wrSb8u-)cu`H|rJvh+Vl0e2IJD+e*sLq&XZD}<MtiyHSJQR-G*q+ZyA<vz zc`AJS_MhT^x7ezl$7|Kuc-Fm26y(2sX74He1xl(<PU+v<6~C=<*3<gzF8x}W7Zu7^ zVpqxhEz=WU995|k_5H@B`?J*}<=l6D+H&)t`HqJfj>qrB7!;`sZBq5SJW2Mw_)i<J z!$(!FNo(Em+9k>n8fJCi@~M=DBU|1UZ`@)Z_egbign4E4!LXeo9BY=Wsm+>en)7w< z@0&i)+vJT;Y}8u4E=Imdx3x9%VSUlGmoKG%af|k?YL0&tcC+PxboAffZ|VzfES|v; zXnn_O=8ad?g;QF78r3pqnS5<ra%1_uZJ!eQ&(w!%CU*4v4q%ya>BQ~U<2jA%t?GAN ze(8HLjA5?nH__h>iA<A!wS6mJ)ur3GdQrvoOi$~J3O@N}3uV5py%03xz(ejG9)B2k z>(eisPI@GK=oJ5&%%7{ojJfYlp6S$HoKbW>e7)7yQ|A_++f<s(XSdAa2(yWnoY<8& z&rH>oBt>~Sr?Mu`(x?#;{E&N-BPdIP^Oo4lGnX6ZwOsyl@>i&samB0`EN<Ky@vl{O zvRE*kWBh$8CUA}S(`&zlw|(aK&?wO6O3h0tE-BjVwCt!^eRT0<H<7yU>u<PMINbWZ zbaJ9vjFYjhfY7Z>ZpmYXEy+pI>r^HmSpUBKiOaS{F*??5hkQ0gy`5(}{e8`DtL%f4 z=}yL~GYotpY;1%NKAi9Qe8!X+K|Wf`_NHDkY8HGsBeYNR+?ublI;FP^md^Y<NAs}F z-pXe$bqx+)ye{Owd}dg^kB81xF@N@@21_;^Il%eU<@kYp+vZ8~mhVVovzw_fqcK=) z8t)g&l`~uI+C8~z<zDN4sWh1;6W$fcb!b=LXP+YZ8O|n6(QK20G;B=geK;@a!cpt@ zpwm_Ev((3`HO2*8N|zW!_$`;$v>Oz}8U69(H(`3hEXLgz!OG9GtzmjvJ>z>J{SUF3 z4<r~mODD0O7EpKXU;b3KWUBiD#`kfDv-M^^oAZDvib;*d{KbT38G}nfdKVV@6f&%2 zDrLId_DNkKd4ZT>W_PQ|=4~zO6gE6u*D!;R$-;3e-!vx1KLJY_^vyTutZ)`#5be1V z!E@Oy@~)uJ$_pFR797YpB{U<EhqK;0<znKz8Z*9~3}=pUOEuW#Yoxv4W^@!P&WLER z4pZ=N(okjXRjBL|2@cz;oVeubfu4ruYXNDF8n0PCidAX+b#mta$g7fM<{{-6WSPl! zbq>QGrkLU*wv0knDg3em&fbfpG;%(u3G6dwRQ71yd?aqiqdCj(GTJg0a538+?5IC? zO{|+g;*V18>`gx;t3Oml@vuK`asQ=Q{b$GL2ev{z_21_e@ALO{Iy+&Oo++y-b5>B+ zv8zWm2-Tf8UH*LYuSH8H*{@PNb^Y?sH;2#Z^0_&=ta|yB(KLU>&)SQ>@|OM&Ub??L zmZkj0l<SJc$r+VP_iQN*I-B<Oy5rVwm+mkAb*KKBL&(IPj7PS}9g|t{Z&`75ulxSc z6}1b~f^K?g_is9NZHd$NFXlV1hN&ps-tv7<RIJs%jXhzOv6*^neYG3^y){dDlJBsS zCq2Z}Q#2y1azecG0`DjP*95=ndQouk?VhY>vnyUQgs7}Ld8%ybCw5NemU45IB)_+X zbI)ErwN`b8cm2+1<_xB5L*`v6KUtGqyQV7s`IlUOb7{|;C69cUE{-<0{k|kTcV*z# ziOWiNzA?Le{mqi_QoAXIbFV(O%B>H(_w0zN<i11eZ<W2f&cA9+UBKPkbKCzaoOwLk z`S;e$hq9p!bKY*QNDtWHY~&=Azu!kl?0xC)jQPtRD@lr5W;M=yQeQV|`Q<g!pM>yE zQ`VpS*zvn(6<=wHns)bMk3dxo<yA#|k?M7`OOIRb-ms6~dWl_gTnO*dN!+J@hnVQ_ zor$Tei`!$Nv5R%r`tNZ@g_gS|4#wC2KOEz7)xhh*r4JQWGUuA3+^?NaS=+lpV%13@ zr^6=JGfJvCgEy;I-(BRf$#8eQL(aRuJO&GR1H4Vj5^mk>Zb*Fn_2Tj+=Cg0f2KJg= z-eB!C_o(*9y*h7YRaocre4qE0Vaby}>)uq>npVf%i~siM?MDk$?SDq)?_c;i{5{M% z-%C@>-gEO~m1_6Te+>Sa)`{95<<2_p{As;=;lc_17Ftm&19%^<OQ=y<!FJv1(Te&; ze(QqNst||lKfe=dr1JA~r<y%_8)xWo{G;Qa<Nx&j+FNLLdH(a3`ObcHL$%0PyZJV! zCci13<a*rG=B4`0n+bE~^F4aJ_>bbBxRi$Q)0<O0Z<^k0x^ypIp-#KF;God!4XP$L zgv<_z?czQ6(r9tj3|`iaY?V13a~7QL?6SE#wSG;f&D}M;c5{r@IL-Tf`Cj1_Z}*Lp z^x~FyMqgjjZL%(}%e^G~h^%E1gX?0uBf7P$$IqQRx5#sr_+Ooq|7G1Wul4s|j+6Vo zOj1!U`NKsOZ?yyVR+?^yt3SjtxPEY6De%y(+gUK7JG9n5xbnS<Z+m6uyC*45|K;7{ zAAE1;-rrwu|744_o6DIMv;Eh-yL2IG`Z}%Z(?9RKl_~GGzjtu0T}<EOZb3c!mpi)J zH=Hw6*s-gM@4|Ym?|(0<v%F-VyEJ(7t`FNi&m}p%I{wAW^TSz{8@#Fqw;n7FefWN6 zOU3bv`eoU*vaK04axae`=uL6iVzDtyeBbMu=&&E`p79yW&ga%^)b8_j`?GzWqB+N= zoOgmd7uqV_zEGF?@V)o%ult{FI$5<-@!Dy#HPin~Ut8b5F>6v>ZpW8Zy!}&ubsFS- zinz<(-#X2A!fk=bzb-D<mN9M$lV*y1EvBHa`Nz2-r$RVozvcvI=?RDZS&Al~Obhlg z%bl^O<wL!YXOR%37Mfi3*pktF^2a+OlTSQW;gOk`B~V|hZ|U5<<k;jNk2UI}rPuoX zvk>@o|6NDNiFg*#i)OvYyv-FgS1Q+Eyv4~ImUr)xv((Q1qPB1L2T!%%o_tx`P1$LJ zVAF~hWvr|jLjFp<EYAd=7A&{frMt*Jx$#C$o=X4u)%mW8uXDq6(^!sYTh9(&`sloI zUefNlf`Y&8KUpuU2)$VozHIaUy!xMx_4fYjEjoFOCVAcaJ~89S(k_jw9$pXU>^bbh z>N_`%v4P3UVaAJvef!fx92Bl5&Aqu)_x6X9Kbaf*kF);SqJ1ZRe)_7;ns?L6pI*|9 zpH_NRSnGV$@v1gUQ$bZB%|~<7gVu!^w<SkktK1ghY!>Ysx3o(>k@3^)#%>$Gtnd4! zewj^{dn#NX{H@}dllG*l+=omFuNuDGRz8xduqP*YANSK9i5GfFbNpsc%{?{g=&j6{ zciXzZUe3F!lCpQ}f<;%ke(gUO)v(Qe``P;p!NT@S%6mQ=oxQYf&D`_{fj`S$s&LH< z{<WioZ%WOE$geYQ-eG+G#fwFCsoSjnGxcAD9M&;%rcMY@j(%USp6lSaVWM-VyS|`b zSL43L?4AcxF7X`X5w!XArdyozd9TTvwv#6WmR=Iw?aFV;TV<7^Qu&nO!osZu{x(-; zzYRW|cec6Z_)cHxxNP~{--W?`R{mQZ?_4NQoWj*<!1IACg_AkY^Uvj!2R%YZS|v{1 ztFe+d7kLxv;?Xj-+G*p-$+KTe@%;7__U(z{V?H=*&d$jPUrW|MD-=zUJ13}^bRw<w z@q9%)7k>FylJal+)6X{~Zz{@MeQTOrkwZ}2%T;$7?(KY9&3$IyTbCLg^RkV4iC^Dx zbQK-xd-}U^(tG6<`<^7tS|AdVn36qf!4@Z>5?+;e--U!Ek8Y6=5NZC#xFoo>=YH0t z%w>&fQ<K+QExY))cGY>4$&(}BDAqepa&kS+^g|(Lm%-A&Ll5>GKAuo5x-{_E#D|L? z=xq}12)6!z^I7G@lG}e%>*k7h$|YInJXoV{>-~n8&FGLsRt87RvRS`^KcxJ!obzC| zaOwRcCdHgh64#wMl}y9tDZ1Uc%J5?Aov)K7?+fm2a{4j(xt!EP7l#<OC?|zge8S?( z>T3=^J>X)$Lh<d&|8u?_3V7n1%sf>>)a7BhP`v-e*0qy$*4J!!Ub(AKy=_gL_%<1t zm!&lmO)6K!{@LALwf$@Rxzo4fE;Foq@Zv#^PFLK2#+M1V=3J|a7kB+~>Pkt~v$?H5 zH+Pm<&AFq`;@Ty*Gxkeq4NKOV+-bk})aIsnME?w|KVkeV@2cFR)2Y+Sbbie_nfl4b z;Hl@#FwcjHMw>Vj!Zt1b@@~WP^r-eje{~+Y@BSyVT|Uh)X~FiBtNvFN{}r3CM2Pd) zKi0{LxAo`S+|{^td3WB7C%5<ZmuK#F40|lTc<ws&#DXt}k`j)HZ_44?$=$Q+<hoT4 zFHejxTIX2t<FUb<uorpXymx!vWG{HI`|<RNj~re0+7;*9a=7|Ty1w=1zQ%8_KP%6( zJa_3~wdlo~=Ir%XV<&vBopQHYfnmN{!TbCMCN@0<#-=GBU9T>8@!5B#vF0Ch*8ZZY zlkdN<XS4tpNyaacilojZ$0jGg)U4ln@zvS)?oR)2$_fhp>|UUBYuUw$msTpOrBC#u ztQQ_U^)<W7L-~8)xeE`~BP#1ZKYKFiVuwIVi-Oj!NJqw5M<#nHH&(h>-qGyO>w3{2 zp<p&!`sCxyuc8BQRLu_UmOS|J*12aPD}Q|MnSCQK-Q~!?{y)<+<3i2uPks63{OtI; z3-#wGd;2Lh_bi$8y;eo4aHW!$>7*bF^?buX$6)p83=0~B1k|clJYFv;D&Vm-BE2m0 zw3&@;eU!|jLPq;{T;H!hpP8jJfA`baoh7HmQ)9ojoVt8%<Ge&aUzbjou8QX~r>wr( z^YF&B(s{bqCY%kM9KP}qdql&Zv<FK4lW+Z9-?oo;a@Q;2dc$gq(uJa)d$$!Z8k9Qx z`oT~r$)SIHO1`tDGFzFrq2Kber_54MCcQP$E5Cj8SK;<7p-uOq0xo8;{*6!9b+|qM z_Otwkm7VV|M<1)4nU)!T?VRz46*YTHgjmmO{@ql<H)YTE$gdM_-eG+GBnVa{eLyaf z)SyKYJGe-yb?=|lbaIJglcZ9`lbhoDLg%D2Z}3i@sOYs+yR2I-OX^F>36D>w7#BEa zKb*H?z4`6qZFgs}bM_a{HrsQ}?$*2GzLqa-uCf(6A8rlMQaNOBKzo8J&kog({*xPx zy#&OQG^+o;%-OT>!5Sqer8ReiyL{`X^)?5cV-woDs@3+P(1O$KMsB`L0ZunA@u=MM zot2SvrAUI~+LJ4xCR<<My1Metm31?AYHw<q+GlQb{@MO>Gdj)rS1Wuj=;IJ{Hq(~* z&+}2S>PJ9z%@+G_^B9k(JiQdQRoC`O!;(FhLaQ0}l%6gZn^Aka^GC$Gw@I;wUcD9+ zd1~FUcglNquYLUseogAmYzhi!owzo$=@OUc1=9&TtUWwZL@p;e1n_L*SD34n@+WYz zk1=mfnB})s$x?UiC%<^6S}&uj8B(Itz<+2dcd(Qy&o5a!w%eOEdX4&c<XOw-t#z1l z>*sm1^W96V-|2r^y~N{_!0kllz4N~46dFjJ;7DGvP_bZU)~nqQPJStV@nCk}uKc7~ zJ6RliUN2;sD5ZT~K>1x3!<U$MRi`}ngG;V+pBZ`!loa%sqn#91^`Vwr^>aZb*V$ui zT83I3hu*8~o42SqT0JuEXTteUC6BEjCD)cOR(AfgY_912yIZ^W_OE51A1&LS$q;_Q z%0jw((f0ohB?h^>w%)t$D)@H(jPKW;FHWB~eP6TM`=d4Q-K-t`=4m!5xyDy4`BGZL z@C#Ic-Knq3edZJWv+(5RS9w>>emynvwqABOy?W-G_Ek2Tm$fu)rns3ge();Wa^JM2 z?p>*e?HTR5Kd;YMwKs|@vsKMr^K1R}@b!$*S`!oA$QMX&`dd=|>e$wK_eu|&-G5iJ z$NM(#ZYg`ow<Wfm&EI&s8wKM}Y|?z9XK+q!_o_C3_mY!4!q^@%PCU%8c=u0(x63l+ z4@`XD*X-8CF8KA^qH1F&jigC??uGra&$O(wR-Tn#@OEOO_u)Si+TZ009S9cQ@x4Eg zF<JToi{q&un_demsl{_T9{bN`)mndev-i8QFeXa_P}x;~G{QIkwuQjn=iw{NB{L)@ z3At`MASaYF$#r*k?&Ji0U;ZxV+fFJswNLUsir?R_mg~K4je`6Exg0H%^fu$q&(3O? z%wRLwVY8@O`|zm^|GH(RTsYOWgczsKF__0Pl~c|Aex2a2`(cM%9_(ikcQobwwtd~N zB|@S<^q0;FNPqsywm$y^^Y@A8F1+)Pu-t8FwX>t*fW$>71Iar+6Bwi`#59yLWIjk} z_cza0`XR?Psi#kJsmY&hKBtdOd0e?M!fct;-yJ{yoYI~Xb42HYi@Htc?PoKU3YD18 zNqPz#+xj>9RLc65lerTXyK}Y+t=sLjFYJS3OXSW|V)NaO$E=#Le(JoK`VJM3j%gEx za#e+HE|KwKxyiEV3)A1Qr78z<ufLkP@=Qfop9Jspr&p$&`(R>zvtpanLp!zXO)sNz zUw`UJS~yEVz>cBm-Md@KR!J&ptCWpvu6qbC-R)LaT)x}r@*20i_gXP$4;Z~}`!{oq z*UfZ2wJ3I<<1UY^?x}jY`)vMjINPZHcHmc4|JPQlj~hQ{kdrfhyxG>YELiFHXX_c< z#lb)39-qkPTlzjoX<~bk(IYFL<Hjerq$Y{)wB<-sGo9GApZAQcYP#BL@tG%WCtSbL zcX&;Ko{h=pQ;nzJK2PKNQ2VLDqTs5E(!`Wl<NAD;M{$BDI|2%Vgj6fE*ZOgMxvM=z zpk7S<x1pfPe1CSuyx?<__Hs`<yv-zFUPpY+#@Ng+S8SIHP84KXCm{H?TUn}yW%-K8 zfd6$GHxhV@)I4;)*{qtqC6mqgsIq6qn)peYa?OWZY-X%t{@yKU7Z88^LYr~&J!xyj z1C4?_D|OfFToZb3p7Hi}GN%-O=<8&zg>vHV_v`B)Os}r7Tf9Q)jqSSgVjfBtwGJlB z#U!&tY+qM*=w4>7YF_sQW~E65+^e>Euy@uvDOB~IyO90dfl1_eU>$?PduJoho`_ZE zlYF92&N8;#I_G6ZT9Ne09YyCe|AvSx`*?);oN3<w`4hM7>FT{RZ(a7}=IU1_^UwXg znHDzV)8o3+(e=^dGk%3US+ky_Pu;U3EpxWTq<y>WO2c##bEJMLyu6w9|3%8V&!@L| ze4g9%drjSn9@*q;(e>w+uMF?hUSzHFTD*M!L!N~NrW5|Y;t4!`K3BEBY@LDXu9&Ax zTW)OKx#i{-mz$n<^zt8xR#tD1Y$(=w6r0w#ZPn|i*A^Sy^<jz6t+$_l{p?2h`2PJj zB3^vRytv>>X~a!~W!;f!Re_zFGmq`9{l5NV<-D02Gqu;uH?S4GCm0|Za`VQI<Eu}9 z@0jPuarHcJQ0+E;)A09M(eICHI9*uf9vzff`d((AS@N09{<7ZZm$)y?U959wiCNde z%?w`MYch@ES00#oxo-Q>rzw|y)T`XG`tl%7S6;{DwCCgFR;;ZP+YTK%d;KP}gZ=yG zV!xGE+IV>J+&_D4iEMFp`h({k$5%9FW~rAZ%YNUp*}M8Z_j%*aBi&*5S^E40jy5vv zQ0iY7eQvUNC_~&OB}FSM8`o2QPi}p!&$?N3^Ni2UlmmS6TQ7f@^h&OT`@ML`s_VP! zT|at9A7APESm^M@BJZpjH+<hF&NS6N9hUp;ll|W_LEk@An{9kI>#@DhJn_t*b^D4u zCHn78JG6~2UNttrdj8tt^4V=ypMPDq`|amH-PJc2oR^4=Ty*bQarAM;_+1umr?$)9 z5nr9(SkeF6;LrVzwbu{XJ-q#!!zq*}`?fpdp(!(ju610oQ}3B;V3@(c{I1^MxWljM z2Ynbt+HZR@Zolox#O@Am<B8TsX9wT55dU{>{e|OqZz^t6IX$V&%KGrux6>|h@4c|8 z#-Nii-+7XipZ@RH_n)6ATV%m`)S;^KxW%;8mof8;Rc<zEpL9BwJZIv8Py@m27}d!! z8#Gda9)?AVyevF3W!bZ~qhSxTX7;^^Gt9lhc70Byz!RzT6}()6k7GQ<E}Aam+EOnz zXV#G(@9<{hO(Dq#J%V^Ow40?4cTTza;GNns`3oBrZ%JGzT+@@-6x`eTLTS?#fz}zp z&T2{>XLQq@3ePER3FQ)Xb3QvEzo2`Y)E1WxwXlHY9ITv&t{q@e>D#I?f#pI37o(Ko z8ez^?tx}?zB1s|#{5jQ<SDLwauqyFvyChI=uOZvIVdVost_@l&ofRIUid=%G7j=Y= zIn|ty@_e;6pkoEEjX?2c#RFnio>vy^ZhO>pCR;>`+hm)8+?I4L7w3x5R>M#Zw!bSo z8#@Go8g@*QvQbUf5=v6;D`<V)+K|Fkw8$>(MK|{gk6jP^xSSYn9Cq>Yp5eb}v6{3; zE7Poct}9yFU)mbJJ~CM1KCO{MidknPo3~)0LdTT$q9{jJLC>@~_70~lULR6XYjZ!j z`q+e6kq@F#yA>Z)T4<`2GZm&NNL-mE@QHc#2CX_-HYaX&4o;q8Ng<9v_Lc>)9;MS7 z*snHv`jx)m7I2jo<G;uq%NZr0z*Z`f<dOAaCR<%S=OKpPR0oa~(iu(eleUx|RPknV zSQWCwhB4yU!kZNz8a5`R-;jUizIe%OBd&wfbt>kGxX$8FC@SCmeQ8BSh>9y$cmON+ zxAx|yg~c2A%^i5I=g2SHQW|No@|4jB)`KhlT#r|n$G_V>^PpeAoxAA=SAX$7==ZT> z31?ib>{68juJv9`yj>*$J&7|W6@D<1<yWsXm)-62VAZ^3dv$Kg)iLfBXzy`7&cNW* z&9{c-ko3XTHj+JacepDAa!q`);LV!gQ%`5SZ{kQ*aR2e+ZuK&2u6;sLR#DBK`|T%x z$?NsKY0+nW!t!(P{?+am;w&FbHE)qV_x_po-Ur%8UeBr#-ER25{;bshN6)S&9sFYz zGx?`!e&WAq^MC&qKKgz9`|a8t>4sKcb}e$=-pTjZd2w>Dn0Ys2;x$o$WxU7oZ~PG7 zvLklOj(zUk?9t5!CrI2}$?kV2XLg>S?ZFspu^j%-akJ(N9R6TZAtJ+Oz2o4Y*Hcp7 zh@F!xWZcdGBmlNh%|^<zHu;=xz>o@Fa=WvZpKu3%%o`M`O@*9VP{1#?Qfb1XRe zny%~1U;cSJHL&McJ)5Kc+nRHBDat`RjL+yZ?cy$bxa7_GwVs8Xt(yv`Ic+?<WS8yv zf5oD6FFtrwu3_3Qc9|_|d+wjjKHeu@A3uNYpX&R7@5jR<ObQmSJFYs5vCI1Yq2=|l zXAXX|D>68{p|<8yR9>6E^xyc$m$ymgyz#db&0eyv^r3%Cpm6;bul@FaDyJ<oXE853 z{Z{(F&1%W>?Jop&Ui~_$(@gh@bFh8q-KO7s&hs8{Pv)tbxk+yNC$Y&rx6S{}bZd&P zJfc&j66ZciJZ{qR>nY_PpUhrGoZ;$ycR^cEv);EoP9ic!skU9_f1#1irN}<}AMS0R z<SWW-BF{Yj@@hS6!k6#o9@}|L^H0y`me@FB>d{@BHf2oC$iMsJcgqJU+az(@Mc1DS zUOskWd+wj)$ywb?@4jJ=aT9;O_|K!Bxjw91WtaUU&1-)a+}>&*IH`QeXBJtflYK=? zH~lMld_-w_y{4ASsRhga99?U&EIIP0^t~4sqRP+k-ri;zVxi3)dD?laz-0wv_wuxZ zJBzN=gncjP=q+uW@~&#~w~f_-t0z8wv1Ip+#^!e&ZknpKON|z+iq)I*b>`OPlX|B` zw*T5?JZGxx(_KDuUUUaY?9%=?^V>?lODAmC|87lG?Owb~%=;f#J^Rh1e|!hJoPS*j zoA;J~|MeoS)!7GQYLpG?_pIOIdatys=)m6pi}~#3pWL^ywe~xF-v0E2)y#Xi_GO+n z`eQQhhhyaQ@OIU$pVq5bPJQ{sbb)s5hc)x3&QZ<!6Sr{k0sim58NRNsn~=IHr{4UH zxv|yExqcT+FUH)<XWlbQ>*5OE`u7Yj4Ou;0rUzaXHop2hv2osgmJZWBS#!PCy_QkW zdaeK6A@k^K=BmF3=CoE+H*Dpeo4WW|&OhJHC-0WrIlDQ~@XYDoho5ly&$G3<S5^Jv z__@n(7nj={nOs+7m=<_5W%r!+{G?SoGc$$zmYiI1poG8se&O`AJ5s{)6VxSby*78( zpKdy;woEhSXU^n%J#78mOXinuXA}P`V!FaY>(XlT072pBtHN0XSgogf_IbX}*YWsN z^TV>-ziD-jf#m<VuFdlsTRN2LyZ-C`E$jbpcdwf7@3+42)#4Ag<ke5=YAAX5QvB>n z@v2i7A6P7piCEpH`q#(wWbIYAEq*VTKR+5-7Fd7R(zVcfeaaoTlkL{+$NT3yom{+l zs@I`=vzg9qirAHzYAc%jY0`72U9oQut(?YjJe1GJ-fxl}_X5Sb_IcO#o%;N1mf0`6 zTa|xP>hHhI4qLg}tF%%=xzq8d_3P{}UbWh;&rO07rF-LK<@Qt+I!MI|w~7UNXgrni zwy(_<IVJ5@uXwPUHDvzA2Rx^5Oqnz7+06~^S1#GSJ-b@-){38B9!@rY|835!s@7>T zeVe<C{j4``5&XVrY3$0>d0#f=U7CM=WoVn_pWk11AKq)vw|VvElRsV-6m0luw0Fju zOMVCXg`71)3~TtNdaRyT<dqq3>7{wPxOcwW#O1bE%LFvO)Tvl_*YA=)_BW+wr;<?Q zgL}$)ZcDSKw#M1iZz}(=&ge)WlXDLL@4caI7bfL;-BJ*56WYvSuXypryP1dX`uRHM zt4*KX^m|)C(2s35k`8X$d_s@=+lBe8{t*QX&o@4>R4GrhYU<LdINM~dQ_&sB(U$Bu zoi%{**3^{dk_*LcHpk=Lo~zf}Sj+nrO=tb^;M40DMzR|i`2VLKWS=g%E}~(UqnSsn zmCU8mkap2Xd)dp?aSJB0CjVJFzvGa_@22^e@*l*+Jk$IoI^U7;!>lhay6;*z|30td zaC*JY5B~bhdncUN8olnGo_}xut*^BevNKG1=eSMeKOMVs9{<lhAoO&V%4(Z>aju&M z53l*8-=F<kf>HL`!)yDq&)b!rtKD{M|NFV!lO;VXe(SieSmG+FaMf2-iNUG-hPrxb zdwBRsu80uj_+LwJ`>&g&@v_=ur^n~jDHp6?_viP_nz<yHLAU>zRQTe5EWP%>7>XPD z)}^1cn0t4sN*?>ZlMALld;HGe_+$V32a@XVWckz-?y0Z&vZm9u>8zKH)FI{EgS=<w ze(<Q=<+fxe-$XmM<qUHcz2Dis+bw7&b0F*FeANk+0zWvHl*L{A;`dUp==dJxX+5{9 zoAp-kD;&uytMl8<_+sxLPGQlu-x0>X6Lr_xXRL8bQppwwdv$Hs)uwO;<pm)t$~abE z2xIe>thZ5>^Uet~40m&roU&z>Mza1ixqF7(Im`Y<t8z>4sxh1|m$vv-%(4wxdKzou zB)raLhwGPq%s4pzbK=p=l-b?M=GHU1Q>$cSpR3%O^f1-$SKpI#`CnZRQyrr!D>N4W zoZG(q^3fY}>vrjAKWxuE5n>k^5p(Xi)!XCx`{Pr7?pRR2V^QM+g_WmRwr`JIze8sC z-+$i5$4l?b_TH~nTq;}q?qlDr&w1-k%-T~rx!mOVoZoLktH1TK22I|bTl9QJ^V%f+ zTbuLOrAhq}jeqdI@Os%X8?M{N`D+Yk?GaZvu6ezB7q@@;&3S)MJ#`44!1^Q5Z|<qY zT0^aRUt^QC3Q^qKimK}GiR3WO-d7vrG-Fr${qBU-&*u0Zd~=pn_`A}LQsD`01%~@K z7F@dHV(}}*ZeHz;KJ7d2c+|JViv@mFd42JN%=9ZhKkrNvk9%wN_^O=dEzgL!)7SRg z@;R{D|HdAtUoYRLJecaWr^@{JYM#TZr<VNvZ}`<d>&kzYfPCNe=04Y@!*1(z2%cZE z;+x#H-`8LH`hSg^R>ki6_iml$^jT|WTwH7R?Rxc;*S2g|{?@DB;(7pT!3%F+IEN{j ziOs;$#N5Dma)7=#w~>i~p`is>V7tzIrUxv}E|$j5u14l&=8l$*7S5J#=7vsghUSJY z1|}v(ZswLIb_zCxluY+u!lcY-GSNY_UUsr~PEVpp+xeecm%91h&eXiMYfF@F*Q)B! z(2K8ftBUvEj^N~umX=l$O4M!-iAYd9;-sXc)Y04FYOeHXQbY%<;>HQHp5L{p-2c7i z|C#@_pL=FL^;Jo`$Y$19W_)`7iG>V4Y{3qS24>68y!|Vxyw>9k_wvayDhp<=>oDPb z(pYa=a@phO0){P@mU>J+D6(N@p4LhMjnWI5E6@I#B4=g0Q2!CHQoo=4RJNlft|h;= z2?cnCdoI6zqQPiamDS!%%NdT_Tm0N-aB96M;hS3|Hp6#$@rxhD4yr4PK0n`?omI6W zdsX3PqotJzb`b|QvmZ>Hb~Qn7Me**dtIqN+xR(27NBy*~34;DI3c4)b2ZAoJgf+Qs z-<@2QBpGo|xcXpSK}Vip1b5V(cYiND3r#S+!EtS;ZN!>`RT~=9%O`DXFx%elZ|XWL z#QFxG)m^#0R}-{vuvIxuzdgB#ch^C_39Pkw=YN^JU}sKX;n}s<V*Nn@3AWt_SKNL* zUFt<^*~ct*4;h2{t;gT`?pr2fwUz%x7ypjE(ia-C{R;&bJ{8>lG2YAlprOBBY`SEG z(7SIxw@mx<p;7Q)HjAHI<L&MKvlhiYNbxwnGS7aK)PmdvxhM8-xqV)ZcZo()Tg&Mk ze>JZ<_)XjW_jE>Qb|7oouD^d*`n^(&3E6Rdeqeh{AoHrbxBXWf-a4T^dycMw&Xa(( z)z2++9ha<N-sP#M^NnFo7u)xD`nRrg7^p81S?4;r`aQdEctcu4X=BXANApU3Cu&d7 zo}hhg=kq#0p`z9&w|J}=+FaESER<mF5RnjzWoTz=Uv#{-Bu4(~>$+E)g697|%I)>{ zUHLw3-W~gYt({W(|5rrj1>yV4O!S|4M&%vZpuSdqs+)~vW!OuJ`ohmoZuu%Nbu`pq nT&lo)%4TPk_4fD2YJc-D`mn5Oy2)}T1x|AdE>%@me>W}w=Q}f7 diff --git a/20240118/dbs-20240118.tex b/20240118/dbs-20240118.tex index 90f8557..c64e8e7 100644 --- a/20240118/dbs-20240118.tex +++ b/20240118/dbs-20240118.tex @@ -75,6 +75,7 @@ \end{itemize} \item[\textbf{6}] \textbf{Netzwerksicherheit} \item[\textbf{7}] \textbf{Verfügbarkeit} + \item[\textbf{8}] \textbf{Datenschutz} \end{itemize} \vfilll @@ -322,7 +323,7 @@ als symmetrische Verschlüsselung \arrowitem \newterm{hybride Verschlüsselung}: nur Schlüsselaustausch asymmetrisch,\\ - eigentliche Vrschlüsselung symmetrisch + eigentliche Verschlüsselung symmetrisch \end{itemize} \end{frame} @@ -452,7 +453,7 @@ Klassisch schwierige Probleme werden einfacher. \item Beispiel: Primfaktorzerlegung: - $\mathcal{O}\bigl((\log n)^3\bigr)$ + $\mathcal{O}(n^3)$ statt $\mathcal{O}\bigl(2^{\sqrt{n\log n}}\bigr)$ \item Problem für asymmetrische Verschlüsselungsalgorithmen,\\ diff --git a/20240118/onion-routing.txt b/20240118/onion-routing.txt new file mode 100644 index 0000000..cba2b7e --- /dev/null +++ b/20240118/onion-routing.txt @@ -0,0 +1,44 @@ +Client IP: 10.238.3.4 + + - wählt Route durch mehrere Anonymisierungsstellen, typischerweise 3 + - erste Ziel-Adresse: 172.16.45.55 + - zweite Ziel-Adresse: 172.31.3.17 (verschlüsselt) + - dritte Ziel-Adresse: 192.168.117.12 (zweifach verschlüsselt) + - vierte und echte Ziel-Adresse: 192.168.42.1 (dreifach verschlüsselt) + - verschlüsselt für Anonymisierungsstelle 1: + - echte Absender-Adresse: 10.238.3.4 (verschlüsselt) + - Anonymisierungsstelle 2 + +Anonymisierungsstelle 1, IP: 172.16.45.55 + + - kennt echte Absender-Adresse, verschlüsselt sie neu, + so daß Anonymisierungsstelle 2 sie nicht mehr lesen kann + - entschlüsselt zweite Ziel-Adresse + - kennt nicht die dritte Ziel-Adresse + +Anonymisierungsstelle 2, IP: 172.31.3.17 + + - kennt Absender: Anonymisierungsstelle 1 + - entschlüsselt dritte Ziel-Adresse + - kennt nicht die vierte Ziel-Adresse + +Anonymisierungsstelle 3, IP: 192.168.117.12 + + - kennt Absender: Anonymisierungsstelle 2 + - entschlüsselt vierte Ziel-Adresse + +Server IP: 192.168.42.1 <-- 10.238.3.4 + +--> Jede Anonymisierungsstelle kennt nur die Vorgänger- und Nachfolger-Adresse, + nicht jedoch Absender und Empfänger (bis auf Eintritts- und Austrittsknoten). + + +Andere Möglichkeit: Server und Client "treffen sich" im Tor-Netzwerk + bei einer Anonymisierungsstelle (Tor-Adressen) + + +Vorteile: + - Demokratie wahren in restriktiven Regimes (Dissidenten) + - Mißstände melden (Whistleblower) +Nachteile: + - Mißbrauch durch Verbrechen diff --git a/20240118/xss.txt b/20240118/xss.txt new file mode 100644 index 0000000..ac392ed --- /dev/null +++ b/20240118/xss.txt @@ -0,0 +1,17 @@ +<img src="https://anderer-webshop.example.de?article=teures_geraet&sofortkauf=yes"/> + +Cross-Site-Scripting: + - Benutzer ist bereits an einem Server angemeldet + - Angreifer bringt benutzer dazu, manipulierte URL aufzurufen + - Anmeldedaten sind bereits im Browser hinterlegt + --> manipulierte URL kann ohne neue Authentifizierung aktiv werden (z.B. Dinge einkaufen) + +--> Angreifer läßt Benutzer in seinem Namen Befehle für Angreifer ausführen + + +Gegenmaßnahmen: + - aktuelle Browser + - Benutzer schulen ("Nicht auf alles draufklicken!") + - keine GET-Requests benutzen (Parameter nicht in URL kodieren), + sondern POST-Requests (Parameter über HTTP-Verbindung senden) + - In Cookies immer "same site" hinterlegen! -- GitLab