The unique thing about today. . .

How to use a Cisco ASA as a sniffer.

noreply@blogger.com (C Hill) — Mon, 23 Nov 2009 23:50:00 +0000

Today I learned a cool firewall trick. If you're not technical, you can stop reading right here, just trust me that it's nerdcool.

You can use a Cisco ASA as a sniffer, and it will display the captured traffic in a format you can open in a packet analyzer.

First, create an access list to define the interesting traffic, like IP traffic from 192.168.1.1 to 192.168.2.2, for example:

access-list sniffer permit ip host 192.168.1.1 host 192.168.2.2

Second, start the capture on the interface where the traffic passes:

capture testcap access-list sniffer interface inside

Be sure ADSM is installed, and "http server enable" is in your config, and http and https are allowed in your interface ACL to allow you to access it. If you already use the ADSM you’re already set up. If ASDM is running, you can now browse to the results.

https://securityappliance-ip-address/capture/capture_name

Put /pcap on the end if you want a version of the capture to load into ethereal or packetbuilder or some other packet analyzer.

Use the no syntax to stop the capture:

no capture testcap

Note that hackers could use this feature to PWN your servers or capture sensitive info, so be sure your ASDM interface on your ASA is locked down pretty good. Enjoy.

Some technical mumbo jumbo. It's what I do.

noreply@blogger.com (C Hill) — Tue, 17 Nov 2009 22:11:00 +0000

For my job, I was calculating the maximum latency for TCP connections from a server running Windows Server at 10 Gigabits/s. It is 0.52ms. If the latency is any greater than that, a TCP connection can’t fully use a pipe that big. The rules of TCP were written for sharing a big network among a lot of hosts, not fully utilizing the big dedicated pipes you might find in a data center environment or a high speed WAN.

Windows Server 8 has RFC 1323 RWIN scaling, which increases the speed for higher latencies (LFN problem solved). This only works if the machine on the other end of the TCP connection is also using RWIN scaling. If not, the connection might actually be slower than without scaling, because the scaling factor is being ignored. Windows XP does not have it (unless you install service packs and do the registry tweaks). Windows 7 and Vista do. Linux kernels after 2.6.8 have it enabled by default. This is a bigger issue now that more machines will have the feature than not, and the data center pipes are getting larger, but many WAN connections are not. It is also an issue because some firewalls manipulate these values and cause performance problems. Other performance issues have arisen because now TCP doesn't share the bandwidth very well and can fill up network links that previously ran without congestion.

SSL MITM vulnerability revealed.

noreply@blogger.com (C Hill) — Thu, 05 Nov 2009 21:36:00 +0000

Some security analysts in Overland Park found a vulnerability in *every* SSL implementation. http://www.phonefactor.com/sslgap/ We'll be patching that for months to come. Job security! But scary for internet users. That little lock in the corner of your browser means just a little bit less, until it's fixed on every secure server on the Internet. Wow!

First Day

noreply@blogger.com (C Hill) — Fri, 09 Oct 2009 23:08:00 +0000

When you start a new job, and there's this massive knowledge transfer, and you *know* you're not going to remember everything or everyone's name. It's a bit intimidating. I'm taking notes.

New toy.

noreply@blogger.com (C Hill) — Mon, 28 Sep 2009 06:33:00 +0000

Well, I finally got fed up with my good ol' dinosaur HTC Pocket PC phone. The battery is giving out, it's getting long in the tooth, some of the keys on the keyboard are starting to flake out, and the Sprint service centers stopped restocking the batteries. The closest store which has one is in Blue Springs, which isn't that far, but there's more. I was on the phone with Sprint tech support over a messaging issue, and they said the problem is probably device related. I hopped on Craigslist to see what a newer, but used, smart phone goes for. I'm carrier agnostic, although my name is in the hat for a Sprint job. The G1 phones are still high, iPhones are still kinda high, the Palm Pre is steep. The RIM Blackberry is obtuse after having a nice sized touch screen and slide out keyboard. The same goes for the new Motorola phones. I found the Sprint Mogul for $80. I called, then I met the guy at the Sprint store and got my number switched to the Mogul. It's very much like what I'm used to. Windows Mobile 6.1 is alright. I was hoping it was upgraded to 6.5. Over lunch, I setup my gmail. Later, I got m.google.com setup as my Exchange server in Active Sync, so I could get my contacts and calendar entries onto it from Google, too. Sprint's Vision Services setup software doesn't do that for you. Only a few contacts appeared. I found out the hard way that I had only ever been synchronizing my Google calendar, not my contacts. When I got home, I connected the old device to the wifi and pushed the contacts to my gmail account, then did a pull from the new device. It worked. I didn't have to install any crazy software. 573 contacts transferred. Names, numbers, email addresses, you name it. Done. Complete. Finito.

As soon as I connected the new device to my home PC, it grabbed my browser favorites and Outlook/Google tasks, and prompted me to setup Media Player Sync with the new device. Once I did, it pushed a gig of music onto my new device. The adapter to connect it to my Jeep stereo is a different shape than the old one, so I have to spend $7 for a new one. This smart phone already does more, takes better pics and video, has a better keyboard, and is smaller and thinner. I need to see if I can get my tasks over the air from Google, too. I think I would still be fighting with entering all my contacts, calendar entries, tasks, email, and browser favorites if I had gotten an iPhone. And I think the whole mess would have been difficult if I didn't have everything sync'd up with my Google account. There's a beta Google Sync app for it, but I think I'll wait for the release. Outlook connects to gmail okay without it. Maybe, if I install the beta, it will get my tasks over the air, finally. Next, I need to figure out the GPS stuff, and get a new version of Tom Tom. After I install a Nintendo or Sega emulator, I'll be playing video games on it, just like the old device. Although, now I tend to look at Twitter and Facebook before breaking out the games, if at all.

New phone: http://www.engadget.com/media/2007/06/sprintmogul.jpg

Critique My Resume

noreply@blogger.com (C Hill) — Tue, 22 Sep 2009 12:41:00 +0000

Today, I'm meeting with a recruiter in Corporate Woods at 10. My resume seems to be working for getting me interviews. I've done a few over the phone. I learned that my Cisco certifications expired in July, though. I'll be a test taking machine for a while to get them renewed. Those Cisco money grubbers have raised the test prices. Ouch.

The resume probably needs some additional improvement. I'm accepting input, so leave a comment. Please send your critiques and job leads or ideas. Or, feel free to email me.

MY RESUME:

H. Charles Hill, Jr.
4209 Arlington Ave.
Kansas City, MO 64133
816-651-1900
Charles.Hill@gmail.com

Objective:

Degrees and Certifications:
Received a Bachelor of Science Degree in Computer Science from Oklahoma Christian University of Science and Arts in May 1993.
Cisco Certified Network Associate (CCNA) certification.
Currently enrolled in Keller Graduate School to receive a Masters of Information Systems Management in 2010.

Key Skills:
• Highly experienced in IP routing and switching using Cisco and Juniper routers, switches, and firewalls.
• Very familiar with routing protocols including BGP, OSPF, and RIP. Also familiar with IS-IS and EIGRP.
• Familiar with VLAN switching protocols including VTP, STP, ISL, and 802.1q.
• Experienced in Unix shell scripting, Perl, and CGI, in addition to C programming on a variety of Unix platforms.
• Familiar with Linux, Solaris 8/9/10, BSD, Windows 2000/XP and other operating systems as well as PC and Sun hardware.
• Experienced in database application development using FoxPro, Access, and MySQL.
• Developed and maintained web interfaces using Perl, and PHP.
• Performed network support for SAP BASIS infrastructure, including saprouter connectivity and security.
• Excellent written and verbal communication skills.

Work History:
Dec. 2006 - Present Capgemini, Network Engineer III
• Conducted site surveys and generated network documentation for existing enterprise networks.
• Configured firewall instances on a 6500 platform with a PIX firewall service module to secure corporate servers in a virtualized data center environment.
• Led a team of engineers during a large WAN deployment.
• Set up WAN routers in a fault tolerant manner and recommended network enhancements.
• Created exhaustive network design documents and participated in multi-day white board sessions with network architects.
• Supported a virtualized MPLS network with BGP and LDP.
• BASIS network support for an SAP implementation, including EDI and security.

Sept. 2006 - Dec. 2006 Sprint Nextel, Network Control Technician II
• Performed network monitoring, troubleshooting, and trouble ticket management using the Clarify ticketing system.
• Tested network functionality and customer experience at regular intervals.
• Facilitated conference calls between various fix agents to keep the nationwide wireless data network functioning as expected.
• Met short-fused event notification and trouble ticketing requirements in a fast-paced environment.

March. 1999 – May 2006 Time Warner Cable / Road Runner, Sr. Network Engineer
• Assisted with the deployment, quality assurance testing, and launch of the earliest DOCSIS networks in eight different Time Warner division networks made up of Cisco routers and switches which now reliably carry over a million users’ internet and phone traffic.
• Assisted with the deployment, testing, and launch of VoIP services in five Time Warner division networks across the region, including the installation of Cisco BTS gear, softswitches, session border controllers for SIP, and others.
• Worked with a quality team of engineers who performed scheduled deployments and maintenance on a region-wide network consisting of hundreds of routers, switches and WAN connections among cities in the Central and Mid-Atlantic regions, including SONET (POS, DPT/SRP), T-carrier (HDLC/T3), and DWDM WAN technologies.
• Performed BGP load balancing for several OC48 (and smaller) connections, a regional iBGP mesh, and several regional autonomous systems.
• Regularly made BGP adjustments to shift hundreds of megabits of internet traffic to avoid network congestion, meet contractual obligations with other internet backbone providers, and mitigate customer impacting outage situations.
• Was selected to serve on the Governance Committee in the Broadband Network Services Division and used my familiarity with all aspects of successful internet service provision to help develop tools and standards which were further improved and used company-wide with great success.
• Developed quality PERL and PHP network troubleshooting tools with web interfaces which are easy for customer service representatives to use on an Apache/Solaris platform.
• Helped build a regional DWDM ring using Cisco ONS15454 equipment and dark fiber.
• Gained a thorough knowledge of PIX 535, PIX 515 and Juniper 208 firewall configuration and troubleshooting.
• Built VPNs using PPTP, IPSec, and various authentication and key exchange protocols.
• Performed server load balancing in a data center environment for various web and mail servers using Cisco Local Director, Cisco SLB, and F5 Networks BigIP solutions.
• Received Foundstone Ultimate Hacking training for improving network security through penetration testing.
• Assisted with law enforcement cooperation projects involving Fiducianet/Neustar to implement wiretap capabilities and respond quickly to FBI and Secret Service subpoenas to intercept data and voice traffic.
• Quickly responded to, troubleshot, and isolated complex, potentially service affecting conditions that require a broad and in-depth level of technical knowledge.
• Partnered with peers and technical support organizations to manage trouble events, develop technical solutions, and restore services, while updating the Remedy ticketing system to communicate the progress in a timely fashion.
• Developed network design improvements, submitted purchase order requests, created yearly budget forecasts for network growth, and helped evaluate new technologies and features for continuous network improvement and fault tolerance.

Sept. 1995 – Feb. 1999 PSINet, Sr. Network Engineer
• Installed and tested new DSL, Frame Relay, T1, DS3, BRI, PRI, and other telecommunication services.
• Installed, maintained, and managed large modem pools, network access servers, Cisco and 3Com routers, and WAN connections in several cities across the Central U.S.
• Became familiar with all aspects of successful internet service provision, having started in a sales/customer service role to eventually help build and maintain a large-scale ISP network from the ground up.

Aug. 1994 - Sept. 1995 Winslow Associates, Programmer/Technician
• Performed network maintenance in a Novell LAN environment.
• Completed various programming tasks on a DOS/Windows/Novell and FoxPro platform.
• Set up an online service for clients to transmit specifications for their orders.

They're like Lego's for building a real house.

noreply@blogger.com (C Hill) — Thu, 03 Sep 2009 03:56:00 +0000

The Germans have created a system of ecologically friendly non-toxic building blocks for making houses by stacking the interlocking blocks on a slab. I think it's fascinating. The resulting houses are hurricane proof and very well insulated.

http://www.hib-system.com/

I think I like this idea better than the whole yurt thing.

39

noreply@blogger.com (C Hill) — Wed, 26 Aug 2009 18:11:00 +0000

Today, I'm wearing a Hawaiian shirt, at the behest of the "Scene Team", which is the group here in the office who plans the mandatory fun. Luau lunch is a hit with me. Hula hoops, a hula dance contest, and free barbecue. That's entertainment.

It's been a while since I posted anything here. I had a birthday in the meantime. I don't FEEL 39. A week ago, I was sick on my birthday, recovering from a sore throat and a recurring fever. Now, I'm over it, and my birthday has passed. Still not feeling 39. I scored two goals in a very competitive hockey game last night. I tipped one in from a pass to the front of the net from the other winger. The other goal was a soft goal between the goalie's skate and the post.

I spent the previous weekend in Texas at my brother's house for the celebration of the niece's birthday. That involved assisting with the assembly of a trampoline, eating cake in a windy park, and having a blast hanging out with the folks and some screaming 7 year old girls. I'd say that was the highlight of my month. I savored the irony of a group of 7 year old girls hitting a Hannah Montana piñata.

Clean Energy Bill

noreply@blogger.com (C Hill) — Thu, 02 Jul 2009 22:36:00 +0000

I'm packing my bags (read: waiting for the dryer to stop) to spend a weekend with my folks and relax a bit. Given this space on the Internets where I can write just about anything I want, and usually choose to write nothing, today I decided to write something. I read a big chunk of the Clean Energy Bill which passed the House this past week. There are a few things I like about it, but only if they are suggestions.

There are provisions in there which say every house and building must be inspected for energy efficiency and labeled in some public way and filed with the title/deed. The Federal Government will give favor to "Superefficient Best In Class" appliances. Did GE purchase the Democratic Party or what? What the heck is a Smart Grid Dishwasher going to do for me, and why do I have to buy one? There are even standards for spas in this bill!

Also, why do government agencies automatically get free installation of net metering (where the meter spins backward if you're generating more power than you're using if you have solar panels or a windmill) and not everyone else? Why is it that we are punishing the oil, gas, and coal industries? Why does Congress get to write permission slips to polluters and auction them off? What in the Constitution gives them that power? The more of this I read the sicker I get. Why would any intelligent person vote for these things? Maybe none did.

Wouldn't it be enough to just cut the oil and gas subsidies and tax breaks (like the $4 billion break the Republicans gave to Exxon), and let clean energy alternatives compete on their own merit? Why do we have to swing the pendulum to the other extreme? Why can't we just create a level playing field?

If I could put a windmill and a solar panel on my house and run my appliances on that, I would, if it wasn't so cost prohibitive. I get the feeling that the purpose of this bill is to make buying power from a utility so cost prohibitive, I can't afford to NOT get solar panels and windmills.

To be honest, I think that the price of those things is coming down. Natural market forces would see them come into play in good time, when they're ready. Instead, we're all going to be punished for having found coal-fired electricity and gasoline powered transportation the norm by no choice of our own. And because the party in power is not the party of Exxon and Chevron, the refineries in the US will be taxed out of business. Our fuel will not be refined in our own country. How does that improve our reliance on foreign sources of energy?

I heard one theory this week that city folk tend to be Democrats. A future of electric cars and road taxes by the mile to replace the lost revenue of gasoline tax prohibits country living (Republican tendencies). I seriously don't think the jackholes who wrote this legislation are thinking that strategically. I think it's simply to very forcibly break down the oil and gas industries who support the Republicans, and they're using global warming pseudoscience to perpetrate a giant fraud. We don't really need this. And we really don't need it in these economic times. Would I drive an electric car if I could afford one? Probably so. They're quiet and fast and maintenance free. Would it be the most affordable mode of transportation? If the government didn't subsidize gas and oil and defend gas and oil interests abroad, probably so. I believe that people do deserve a choice. Neither the Republican defense of gas and oil interests at the expense of everyone, nor this Democrat plan to punish gas, oil, and coal at the expense of everyone is moral or right.

Smart grid? Open communication protocols to signal cheapest times to run appliances? I like it, but does it need to be forced down our throats at our own expense by GE and the Democrat controlled Legislative and Executive branches? No way.

Shame on the Oklahoma Highway Patrol

noreply@blogger.com (C Hill) — Mon, 15 Jun 2009 06:16:00 +0000

Wow. I can't believe this situation. (Contains strong language.)

What he said!

noreply@blogger.com (C Hill) — Mon, 01 Jun 2009 02:21:00 +0000

I'm a bigger and bigger fan of Peter Schiff every time I hear him speak. I agree with everything he says here about what needs to happen. After being part of a Libertarian force in a Republican caucus in 2008, and then part of the MoGOP convention, I know it's possible.

Neglected blogs, landlord blues, & thieving housemates.

noreply@blogger.com (C Hill) — Wed, 13 May 2009 17:37:00 +0000

It's been a few weeks since I put anything here, and it's mainly because I've been working through my lunch hour and trying to get enough sleep.

In the meantime, a semester ended and a new one began. So, I have a new batch of students in the Cisco Switching and Wireless class.

Also, I've been through a round of mortgage loan modifications and refinances to get lower payments on the rental properties, and move any missed payments to the end of the loan. So, with the foreclosure threat gone, I have focused on getting properties back into saleable/rentable condition. Not cheap. Not fun. I have one rented, one sold, one foreclosed (short sale failed, old house, needed to go), and one vacant while I'm slowly rehabbing it.

I also caught the folks who rent my basement stealing from me. That was a major downer. I lost my temper, but I got more than a confession, I got a pawn receipt. I asked them to move out in the next month, no matter what. Now, I'm in a dilemma. Do I press charges? Do I accept the pleas of apology, not press charges, and just go pay the pawn broker to get my stuff back until they can repay me? How frustrating is that?

If I tell the pawn shop folks the whole story, they'll press felony charges whether I do or not. Anyway, I hate to see a grown man cry, like when I threatened to call the police yesterday. He has a one year old child. What's the right thing? I don't want to send a desperate man to jail over a few hundred dollars, which he spent on diapers, formula, and birthday gifts for his one year old kid. Did he learn a lesson from being caught? Hard to say.

If only it was that easy.

noreply@blogger.com (C Hill) — Wed, 22 Apr 2009 14:23:00 +0000

Best Tea Party Speech!

noreply@blogger.com (C Hill) — Tue, 21 Apr 2009 00:37:00 +0000

Kansas City Tea Party

noreply@blogger.com (C Hill) — Thu, 16 Apr 2009 01:52:00 +0000

DSC00621
Originally uploaded by chillkc

I went to the Kansas City Tea Party to protest overtaxing and overspending by the Federal Government. It was actually very inspiring. The speakers were good, the signs were pithy, and the weather was perfection, sunny and 70.

Confused Socialists

noreply@blogger.com (C Hill) — Tue, 14 Apr 2009 05:33:00 +0000

Socialism confuses the distinction between government and society. Every time we object to a thing being done by government, the socialists conclude that we object to its being done at all. We disapprove of state education. Then the socialists say that we are opposed to any education. We object to a state religion. Then the socialists say that we want no religion at all. We object to a state-enforced equality. Then they say that we are against equality. It is as if the socialists were to accuse us of not wanting persons to eat because we do not want the state to raise grain.

Frederic Bastiat, The Law, 1850

Hockey.

noreply@blogger.com (C Hill) — Mon, 13 Apr 2009 17:43:00 +0000

I am playing ice hockey Tuesday AND Thursday night this week. I am happy about this. That is all.

I like Chris Cornell's work.

noreply@blogger.com (C Hill) — Thu, 02 Apr 2009 05:34:00 +0000

Chris Cornell's new album, Scream, doesn't sound like Audioslave, Soundgarden, or Temple of the Dog, but I approve!

Streaming audio of Scream here.

April fools?

noreply@blogger.com (C Hill) — Wed, 01 Apr 2009 04:42:00 +0000

Tomorrow is virus day in my profession. All the hidden undiscovered virus/worm bombs tend to go off on April 1. I just count on something strange happening in the network.

We went from the Bush frying pan to the Obama fire, and all the anti-Bush countdown clocks have just made way for the anti-Obama countdown clocks. I'm adding one to my blog right now.

Meanwhile, here's a video that I think gets it right. We've been moving to the left, but now we're moving to the left much faster. It's time to reassert the Constitution and get back to the proper levels of government.

Militia Indicators.

noreply@blogger.com (C Hill) — Thu, 19 Mar 2009 04:30:00 +0000

I had no idea I had anything in common with militia members. There's a document recently distributed by the Missouri Information Analysis Center called "The Modern Militia Movement" which lists the indicators of militia involvement for the awareness of Missouri law enforcement. I match the description on about 10% of the items. The other 90% includes some hillbilly extremist nuttiness. Some of the points of view listed are exactly the things I learned in civics class in junior high school. Also listed are a series of conspiracy theories, most of which are easily discredited, and others which are difficult to discredit. Some of the indicators include bumper stickers, one of which I had on my Jeep for probably six months. Two of the political candidates and one of the political movements, I fully supported in the previous election and beyond. One, I voted for in the primaries, and one I voted for in the general election. Do I have even a remote urge to join a militia? No. I just found it interesting that I couldn't completely dodge all the indicators of belonging to a militia movement. I just hope I don't get "profiled" by police.

And to completely change the subject, in Florida they're taping magnets to the heads of crocodiles to keep them from finding their way home after they're relocated. The theory is that crocs can sense magnetic north. I wonder if this is working?

AIG Bonuses Protected by Obama's Own Law.

noreply@blogger.com (C Hill) — Wed, 18 Mar 2009 02:14:00 +0000

I found this news item to be the most ironic thing I've seen all day.

It was discovered that Obama granted AIG a free legal pass to give high bonuses because of the following stipulation in Obama’s stimulus bill he personally orchestrated and signed into law:

From page H1412 of the Final Stimulus Bill, “SEC. 111. EXECUTIVE COMPENSATION AND CORPORATE GOVERNANCE:

“(iii) The prohibition required under clause (i) shall not be construed to prohibit any bonus payment required to be paid pursuant to a written employment contract executed on or before February 11, 2009, as such valid employment contracts are determined by the Secretary or the designee of the Secretary.”

This amendment provides an exception for contractually obligated bonuses agreed on before Feb. 11, 2009, which exempts the very AIG bonuses Obama is condemning every single chance he gets. The amendment is in the final version and is law.

All of Obama's complaining about how these AIG bonuses need to be looked at and prevented in the future ring hollow now.

"This is a corporation that finds itself in financial distress due to recklessness and greed," Obama told a group of small business owners.

"I mean, how do they justify this outrage to the taxpayers who are keeping the company afloat?"

And now for the second most ironic thing I saw today:

Wildlife thrives at Chernobyl

Translate servre error

noreply@blogger.com (C Hill) — Sun, 15 Mar 2009 04:50:00 +0000

I got a good laugh out of this one, so I thought I'd share. Sometimes technology is not the answer.

The Progressive Quiz

noreply@blogger.com (C Hill) — Sun, 15 Mar 2009 03:43:00 +0000

I took the Progressive Quiz and got 107/400, which makes me "very conservative". How about you? I'd love to see your comments. -CH

(Inter)national Defense Budget

noreply@blogger.com (C Hill) — Thu, 05 Mar 2009 02:46:00 +0000

One thing that is striking about the U.S. national budget is the amount that we spend on defense. Not our own defense, but the defense of some pretty rich countries who simply would rather freeload. Why is it that while our country is going beyond broke, but into multiple trillions of dollars into debt, are we still defending other sovereign nations which are capable and financially able to defend themselves? Like Afghanistan, Albania, Algeria, Antigua, Argentina, Australia, Austria, Azerbaijan, Bahamas, Bahrain, Bangladesh, Barbados, Belgium, Belize, Bolivia, Bosnia and Herzegovina, Botswana, Brazil, Bulgaria, Burma, Burundi, Cambodia, Cameroon, Canada, Chad, Chile, China, Colombia, Congo, Costa Rica, Cote D’lvoire, Cuba, Cyprus, Czech Republic, Denmark, Djibouti, Dominican Republic, East Timor, Ecuador, Egypt, El Salvador, Eritrea, Estonia, Ethiopia, Fiji, Finland, France, Georgia, Germany, Ghana, Greece, Guatemala, Guinea, Haiti, Honduras, Hungary, Iceland, India, Indonesia, Iraq, Ireland, Israel, Italy, Jamaica, Japan, Jordan, Kazakhstan, Kenya, Kuwait, Kyrgyzstan, Laos, Latvia, Lebanon, Liberia, Lithuania, Luxembourg, Macedonia, Madagascar, Malawi, Malaysia, Mali, Malta, Mexico, Mongolia, Morocco, Mozambique, Nepal, Netherlands, New Zealand, Nicaragua, Niger, Nigeria, North Korea, Norway, Oman, Pakistan, Paraguay, Peru, Philippines, Poland, Portugal, Qatar, Romania, Russia, Saudi Arabia, Senegal, Serbia and Montenegro, Sierra Leone, Singapore, Slovenia, Spain, South Africa, South Korea, Sri Lanka, Suriname, Sweden, Switzerland, Syria, Tanzania, Thailand, Togo, Trinidad and Tobago, Tunisia, Turkey, Turkmenistan, Uganda, Ukraine, United Arab Emirates, United Kingdom, Uruguay, Venezuela, Vietnam, Yemen, Zambia, and Zimbabwe, just to name them all. Let's sell them the gear and come on home. If they object, offer them a spot as the 51st state. They can pay a piece of our Federal taxes.

Obama, not qualified since birth!,

noreply@blogger.com (C Hill) — Wed, 04 Mar 2009 02:31:00 +0000

Interesting comments followed my posting of the video where Dr. Alan Keyes was critical of Barack Obama, refusing to even call him the President because he has paid to suppress his birth certificate in the state of Hawaii, probably because he was born in Kenya to a mother who was too young to transmit U.S. citizenship. If it comes to light that this is true, the Democrats face an immense embarrassment. Obama would be deposed. The document posted on Obama's website purporting to be his birth certificate only certifies that Hawaii has the original and that it is real. For some reason the original long form with the doctor's signature, footprint, and place of birth has been suppressed. I agree with Keyes that many in the military probably need to ensure that their Commander in Chief is bona fide before taking any orders from him.

Barack Obama is not legally a U.S. Natural-born citizen according to the law on the books at the time of his birth, which falls between “December 24, 1952 to November 13, 1986. Presidential office requires a natural-born citizen if the child was not born to two U.S. Citizen parents, which of course is what exempts John McCain though he was born in the Panama Canal. US Law very clearly stipulates: “…If only one parent was a U.S. Citizen at the time of your birth, that parent must have resided in the United States for at least ten years, at least five of which had to be after the age of 16.” Barack Obama’s father was not a U.S. Citizen and Obama’s mother was only 18 when Obama was born, which means though she had been a U.S. Citizen for 10 years, (or citizen perhaps because of Hawaii being a territory) the mother fails the test for being so for at least 5 years **prior to** Barack Obama’s birth, but *after* age 16. It doesn’t matter *after* . In essence, she was not old enough to qualify her son for automatic U.S. Citizenship. At most, there were only 2 years elapsed since his mother turned 16 at the time of Barack Obama’s birth when she was 18 in Hawaii. His mother would have needed to have been 16+5= 21 years old, at the time of Barack Obama’s birth for him to have been a natural-born citizen. As aforementioned, she was a young college student at the time and was not. Barack Obama was already 3 years old at that time his mother would have needed to have waited to have him as the only U.S. Citizen parent. Obama instead should have been naturalized, but even then, that would still disqualify him from holding the office

*** Naturalized citizens are ineligible to hold the office of President. *** Though Barack Obama was sent back to Hawaii at age 10, all the other info does not matter because his mother is the one who needed to have been a U.S. Citizen for 10 years prior to his birth on August 4, 1961, with 5 of those years being after age 16. Further, Obama may have had to have remained in the country for some time to protect any citizenship he would have had, rather than living in Indonesia.

According to FindLaw.com, which is cited by Geraghty, the requirements that were in force from Dec. 24, 1952 to Nov. 13, 1986, encompassing the time of Obama's birth, state, "If only one parent was a U.S. citizen at the time of your birth, that parent must have resided in the United States for at least 10 years, at least five of which had to be after the age of 16."

And from another source:

There are two types of certificates. The one that has been “released” wouldn’t even get you into Little League in this country, let alone be sufficient proof of “natural born” citizenship. However, even if he had been born here, when he went to Indonesia, they did not allow dual citizenship and he would have had to relinquish his U.S. citizenship–-which, according to documents in evidence, his family did–-on his behalf. He used an Indonesian passport to go to Pakistan in the early 80’s and has never been “naturalized” since returning to the U.S. His Kenyan grandmother is videotaped stating she was in the delivery room when O was born in Kenya.

Okay, I'm taking this with a grain of salt, but I haven't seen his original birth certificate either.

The other interesting comment was that Obama's fiercest critics are black conservatives.

Here's one implying that Obama has more in common with Hitler than Rush Limbaugh does, and that Rush Limbaugh's message is reflective of Malcolm X's message. Wow!

And Al Sonja Schmidt made a few clever jokes at a recent Spendulus protest in Santa Monica.

For the full Santa Monica tea party protest article, click here.

And one last fiscally conservative gem: