The Girl Scout Militia

NTLMv2 Client-side

2012-03-07T12:05:00.003-05:00

In my last post I had successfully used the Http "Negotiate" authentication mechanism to send a Kerberos ticket, which allowed me to login to the domain as my user to access a protected resource. However, to do that I had to enable the AllowTgtSessionKey registry entry in Windows 7, which weakened the security posture.

I fiddled with the JRE's implementation of NtlmV2, which we have to use since our lmcompatibility level will be 4, but could not get it to work for some reason. I tried tracking that down but gave up. The only other solution was to go native. For this, there is a package called JNA.

There is a some coverage on the internet of server-based NTLMv2 using JNA (Waffle), but it didn't touch much on client connections. I tried modifying some of Waffle's code to do what I wanted, but it seemed like the variables were all set up to use Negotiate, and it wasn't really getting me anywhere.

I realize this isn't the prettiest code, but it's what I finally came up with, and works for authenticating via NTLMv2 with default credentials (SSO, no username/password). I achieved this by investigating more of what the JRE was doing in NTLMAuthSequence.c as well as another project (JavaSVN), both of which I used to reverse engineer the below client solution.

This does not maintain a connection, it simply performs a one-time handshake, sending all 3 NTLM message types for NTLMv2, and retrieves a cookie value used in later web service calls...

private HttpCookie doWin7NTLM() throws IOException, GSSException, EncryptorException, NTLMEngineException {

String securityPackage = "NTLM";

// client credentials handle

DefaultHttpClient httpclient;

Sspi.CredHandle cred = new Sspi.CredHandle();

Sspi.TimeStamp ltime = new Sspi.TimeStamp();

Sspi.CtxtHandle ctx = new Sspi.CtxtHandle();

// Grab the initial default client credentials handle

int rc = Secur32.INSTANCE.AcquireCredentialsHandle(null,

securityPackage, new NativeLong(Sspi.SECPKG_CRED_OUTBOUND), null,

Pointer.NULL, null, null,

cred, ltime);

if (rc != W32Errors.SEC_I_CONTINUE_NEEDED && rc != W32Errors.SEC_E_OK){

throw new Win32Exception(rc);

}

Sspi.SecBufferDesc outBuffDesc = new Sspi.SecBufferDesc();

Sspi.SecBuffer.ByReference outBuff = new Sspi.SecBuffer.ByReference();

outBuff.cbBuffer = new NativeLong(512);

outBuff.BufferType = new NativeLong(Sspi.SECBUFFER_TOKEN);

outBuff.pvBuffer = new Memory(512);

outBuff.write();

outBuffDesc.ulVersion = new NativeLong(0);

outBuffDesc.cBuffers = new NativeLong(1);

outBuffDesc.pBuffers = (Sspi.SecBuffer.ByReference[])outBuff.toArray(1);

outBuffDesc.write();

NativeLongByReference attr = new NativeLongByReference();

// Use the default credentials handle to generate an NTLMv2 Type 1 Message (just workstation/domain name)

rc = Secur32.INSTANCE.InitializeSecurityContext(cred, null,

null, new NativeLong(0), new NativeLong(0),

new NativeLong(Sspi.SECURITY_NATIVE_DREP), null, new NativeLong(0), ctx, outBuffDesc,

attr, null);

if (rc != W32Errors.SEC_I_CONTINUE_NEEDED && rc != W32Errors.SEC_E_OK){

throw new Win32Exception(rc);

}

// Read buffer containing NTLM Type 1 message data

byte[] result = null;

outBuffDesc.read();

outBuff.read();

if (outBuff.cbBuffer.intValue() > 0) {

result = outBuff.pvBuffer.getByteArray(0, outBuff.cbBuffer.intValue());

}

freeWin7Mem(null, null, outBuffDesc);

//Send NTLM type 1 message to server

httpclient = new DefaultHttpClient();

HttpContext localContext = new BasicHttpContext();

HttpGet request = new HttpGet(clientXmlProperties.getProperty(IWA_SERVER_URL));

request.setHeader("Connection", "keep-alive");

request.setHeader("Authorization", securityPackage + " " + new String(Base64.encodeBase64(result)));

HttpResponse response = httpclient.execute(request, localContext);

//Receive the NTLM type 2 message from the server

String continueToken = response.getFirstHeader("WWW-Authenticate").getValue().substring(securityPackage.length() + 1);

if (continueToken != null)

{

byte[] continueTokenBytes = Base64.decodeBase64(continueToken.getBytes());

Sspi.SecBuffer.ByReference inBuff = new Sspi.SecBuffer.ByReference();

inBuff.cbBuffer = new NativeLong(continueTokenBytes.length);

inBuff.BufferType = new NativeLong(Sspi.SECBUFFER_TOKEN);

inBuff.pvBuffer = new Memory(continueTokenBytes.length);

inBuff.pvBuffer.write(0, continueTokenBytes, 0, continueTokenBytes.length);

inBuff.write();

Sspi.SecBufferDesc inBuffDesc = new Sspi.SecBufferDesc();

inBuffDesc.ulVersion = new NativeLong(0);

inBuffDesc.cBuffers = new NativeLong(1);

inBuffDesc.pBuffers = (Sspi.SecBuffer.ByReference[])inBuff.toArray(1);

inBuffDesc.write();

outBuffDesc = new Sspi.SecBufferDesc();

outBuff = new Sspi.SecBuffer.ByReference();

outBuff.cbBuffer = new NativeLong(1024);

outBuff.BufferType = new NativeLong(Sspi.SECBUFFER_TOKEN);

outBuff.pvBuffer = new Memory(1024);

outBuff.write();

outBuffDesc.ulVersion = new NativeLong(0);

outBuffDesc.cBuffers = new NativeLong(1);

outBuffDesc.pBuffers = (Sspi.SecBuffer.ByReference[])outBuff.toArray(1);

outBuffDesc.write();

attr = new NativeLongByReference();

//Use the received type 2 message to generate the type 3 message which hopefully the server will accept

rc = Secur32.INSTANCE.InitializeSecurityContext(cred, ctx.isNull() ? null : ctx,

null, new NativeLong(0), new NativeLong(0),

new NativeLong(Sspi.SECURITY_NATIVE_DREP), inBuffDesc, new NativeLong(0), ctx, outBuffDesc,

attr, null);

if (rc != W32Errors.SEC_I_CONTINUE_NEEDED && rc != W32Errors.SEC_E_OK){

throw new Win32Exception(rc);

}

//Grab the data from the native call (i.e. the NTLM type 3 message)

byte[] finalResult = null;

outBuffDesc.read();

outBuff.read();

if (outBuff.cbBuffer.intValue() > 0) {

finalResult = outBuff.pvBuffer.getByteArray(0, outBuff.cbBuffer.intValue());

}

freeWin7Mem(null, null, inBuffDesc);

freeWin7Mem(cred, ctx, outBuffDesc);

//Prepare the outgoing NTLM type 3 message in the request header

request.setHeader("Authorization", securityPackage + " " + new String(Base64.encodeBase64(finalResult)));

//Clear data out of httpclient so we can re-use the connection

HttpEntity fakeEntity = response.getEntity();

if (fakeEntity != null) {

InputStream instream = fakeEntity.getContent();

BufferedReader reader = new BufferedReader(

new InputStreamReader(instream));

// do something useful with the response

System.out.println(reader.readLine());

instream.close();

}

//Send the NTLM type 3 message

httpclient.execute(request, localContext);

}

return getCookie(httpclient);

}

private void freeWin7Mem(Sspi.CredHandle credHand, Sspi.CtxtHandle ctxHandle, Sspi.SecBufferDesc outBuff) {

if (null != credHand) {

Secur32.INSTANCE.FreeCredentialsHandle(credHand);

credHand = null;

}

Secur32.INSTANCE.FreeContextBuffer(outBuff.getPointer());

if (null != ctxHandle) {

Secur32.INSTANCE.DeleteSecurityContext(ctxHandle);

ctxHandle = null;

}

private HttpCookie getCookie(DefaultHttpClient httpClient) throws IOException {

HttpCookie wamCookie = null;

List cookies = httpClient.getCookieStore().getCookies();

for (Cookie cookie : cookies)

{

if (cookie.getName().equalsIgnoreCase(SECURE_COOKIE_NAME))

{

wamCookie = new HttpCookie(cookie.getName(), cookie.getValue());

wamCookie.setMaxAge(CLIENT_EXPIRATION_TIME);

wamCookie.setComment(String.valueOf(new Date()));

}

return wamCookie;

}

Windows 7 Negotiate/Kerberos

2012-02-28T13:13:00.004-05:00

The company I work for had been having issues getting NTLM authentication to work between a Windows 7 client PC, domain servers, and CXF web services. In the end I got it working through HTTP Negotiate Auth and a registry setting, below is the paragraph I sent as an explanation:

With Windows 7 and changing the lmcompatibility level to 4 on the client (Clients use NTLMV2 for auth and NTLMv2 session security if server accepts, Domain controller refuses LM auth responses but accepts NTLM and NTLMv2 -- http://technet.microsoft.com/en-us/library/cc960646.aspx), the client and server were no longer accepting LM authentication. Kerberos is preferred to NTLM, and since when LM was disabled the servers responded with HTTP 401 errors indicating that the only allowable mechanisms were NTLM and Negotiate (NTLM or Kerberos -- http://docs.oracle.com/javase/6/docs/technotes/guides/net/http-auth.html), it was decided to use Negotiate with Kerberos, since that is what the below Linux code was already doing. On windows this required an extra registry setting "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters\AllowTgtSessionKey", a REG_DWORD set to 1 -- http://support.microsoft.com/kb/837361, along with the regular Kerberos config files (krb5.conf and login.conf).

Wow

2011-07-09T14:57:00.002-04:00

it's been a little while since I've posted. Lots of things change, still loving life and doing it in Illinois. This year has been flying by, and I'm about to turn 31. I have a wonderful family and 4 beautiful nieces (about to have another niece/nephew, holidays are getting crowded :)).

Just bought a 2005 Honda Repsol CBR 1000RR. It's a lot of fun. I think mostly I put what I'd put here on facebook posts now. Do people still blog?

Today's Interesting News

2009-09-30T12:17:00.001-04:00

Someone very hungry.

Somebody with a weird fetish.

Somebody who is avoiding being hungry, and winning himself a 14" TV set.

Well there you go.

Christian Sexuality and Relevance to Marriage

2009-08-10T12:44:00.003-04:00

I know not all of the people who read this blog share the same opinion with me, but I felt like sharing an article I recently read discussing the battle of sexuality with the norms of society in postponing marriage.

I come from a family where all of the siblings have married pretty early in their lives (I think the earliest has been 20), and where all of the siblings are Christian. One of them even a pastor. Another hoping to be a family counselor. I, as most Christians, experience seasons where I feel closer to our savior/creator than others, but also those seasons where I am in the word often and thinking intently of his plan for us.

In any case, here is the article, I enjoyed a lot of it, and like how he ended it.

Interesting News of the Day

2009-07-17T15:42:00.002-04:00

How much was that ball Dwight?

Best way to defend yourself from a mountain lion?

I Think We're Born Naked

2009-06-16T09:41:00.001-04:00

I am sorry, I hate the idea of celebrities, but this is freaking ridiculous. Mother Teresa?

Say What?

2009-04-22T21:20:00.002-04:00

I dare you to read this article, give yourself a minute, and then spell it correctly :).

Also, I have been spending time trying to refinance the house, and ever since college I have found this calculator very handy, it even lets you print out the amortization schedule.

In other news, second try this weekend to set up a playground set with my brother Chadwick for little Addison, Sophie, and upcoming niece Ruby Anne. Last weekend got a little tiring with an overnight lockin with the middle-schoolers from the Moundford Free Methodist Church, and Chadwick and I got to the morning and decided that tiredness along with the weather dictated that we give it another shot this weekend, so wish us well.

Peace.

Funny News

2009-04-08T13:43:00.003-04:00

There seems to be a lot of weird or funny news going on today...here are some samples..

Crazy Deer

How to clean with gasoline

Want to get Deported? Are you gay?

How to discipline children riding your bus

The views expressed here do not necessarily represent those of Larry.

Update

2009-04-07T09:26:00.002-04:00

Well, I have been praying for peace around the world, even though I have not had time to update the blog on the specific countries. I will always continue to pray that the oppressed will find freedom. It is almost the end of Lent, and time to celebrate Good Friday.

The basement is still flooded :(. I have not had time to stay home to watch a waterproofing company take care of the problem yet, so I shop vac everyday. That has become a very exciting ritual :). The special exit pump wore out today, but Home Depot exchanged it for a new one, so my back is spared yet again :).

Staci blew me away in our bracket pool this year, and like most years, it comes down to who picks the right champion. My hat's off to the 4 of 6 people in our bracket that chose UNC to win it all. I just didn't want them to :). So, she gets a Papa Murphy's pizza of her choosing (I know, we don't bet big :) ), and a special little trophy thing in her Yahoo profile :).

The whole family is coming down for Easter this weekend, besides Darin, Cassie, and Mady, who I am sure would want to be here, but since Mady just came along, we will see them soon enough :). It should be a great time, with great food prepared by the culinary delights of Ms. Staci.

My new job is going well, adjusting to the smaller office of it all. It is great being so close to home, and cutting back at least an hour of my day. Staci and I also joined a local gym (Club Fitness, which was running a deal where it was $500 for 3 years).

Peace out holmes.

Pray for Somalia

2009-02-27T23:15:00.002-05:00

So we probably all remember when Clinton and the U.N. tried to give aid to Somalia because of the civil war that it was experiencing in the 90's. What we all might not know, or have shown to us each day is that that civil war is still ongoing, and that Somalia is an impoverished country overrun by different ethnic groups, and run by warlords.

We hear about the different ships that the pirates take over each month. Those cruise ships or tankers, or whatever that are unlucky and unskilled enough to get taken over by somalian pirates usually payoff their captors so that they can continue on their way, and that just prolongs the conflict because it funds the pirates and different warring factions.

May God help these people sort out their problems and give them some sort of national pride to unite on, and help them focus on how to treat their fellow citizens well.

Pray for Darfur

2009-02-26T09:07:00.003-05:00

Apparently the war in Darfur stems from decades of drought and over-population in the Darfur region of Sudan, with some of the reasoning also being that the Arab-dominated government of Sudan has been treating non-Arabs in the country in a discriminatory fashion.

That has caused some to rebel against the government, which started around 2003-2004 to bomb the villages where the rebels have been believed to be coming from, as well as raping their women, killing most everyone, and burning down the villages.

The war has thus become genocidal in nature, with the tribes being attacked by the government, and only slight rebel efforts to fight back. The UN will not label it as a genocide, despite mass murders and rapes, because the 'intent' of genocide seems to be missing. Some sort of limited peace was reached in late 2006, but the conflict continues.

Please pray for Darfur, that all people can live together in unity and not oppress each other when given the opportunity.

Pray for the Congo

2009-02-25T08:59:00.002-05:00

As I pray for these conflicts, I will try to go from the conflicts with the highest current casualty or death count to the lowest, so please bear with me if I make a mistake.

Today I am praying for the Congo. The fight is similar as that portrayed in Hotel Rwanda, however this conflict is newer, and stems from an old general leaving the government with some troops to hole up in Eastern Congo, where he tries (or at least says he is trying) to prevent genocide over the ethnic Tutsis there.

There was a brief peace agreement reached in January 2008, but it was shaky because not all of the parties involved in the conflict took part in the agreement, and later the war erupted again. However, recently Laurent Nkunda, the leader of the rebel forces which protect Tutsis was captured (January 2009), so the end of at least the open war may be imminent.

Please pray that the war will end and that both the Tutsis and Hutus can live in peace once it is over.

Lent '09

2009-02-23T13:40:00.004-05:00

This year for Lent, I'm going to do something different. Normally it is giving up something near and dear to me, so as to be closer to god. I remember giving up chocolate chip cookies (not sure how that applies) in high school, and more recently giving up TV or video games.

Another alternative for Lent is to actively do something to draw you closer to God. While doing devotions and reading the Bible daily are very good goals and something I want to do in life eventually, right now (and I'm talking the actual 40 days of lent) I have to be realistic and say that I honestly do not have the time, and the things taking up my time are all immovable, without a complete and disrupting life change (changing careers, dropping out of school, not finding a job, etc.).

Instead, what I've decided to do for Lent this year is to actively pray for peace, for all of God's children. Normally I'm not even the most peace-prone person, but I believe our country and our world are headed in divisive directions at the moment, and I don't understand it all. I want to try to understand the conflicts of all of the world's peoples, and pray for them to reach a peace in respect to each of those individual conflicts. I think God would want people to live in peace, and out of peace have a foundation for finding common ground in a relationship with him (some may disagree).

So it will be that I will try to learn about the various conflicts on earth (in Afghanistan, Darfur, Somalia, Iraq, Georgia, Chechnya, Israel/Palestine, Congo, etc.), and pray for each of them individually and for us as a race. I will utilize prayer by speaking directly to God, and seek personal peace as well. This is a very different theme for me.

Recent Events

2009-02-23T10:18:00.003-05:00

Just got back from a nice weekend with the brother/sister-in-law (Chad and Sarah) and my beautiful nieces' (Addison and Sophie) house. We were there celebrating my niece Sophie's 1st birthday, and she had a fun party Saturday afternoon. The weekend was full of eating, playing Phase 10 & euchre, and talking.

My other brother Brady was also there to celebrate, it's always nice to get a chance to hang out with him as well.

Yesterday, after getting over an upset stomach, Staci and I drove back home to O'Fallon, did our Sunday ritual of grocery shopping, and I finished my homework for this week as she helped do the laundry.

Recent books that I'm reading or have read include Outliers by Malcolm Gladwell, A Thousand Splendid Suns by Khaled Hosseini, Dreams From My Father by Barack Obama, and The Last Lecture by Randy Pausch. I have also just requested The Shack by William Young, because of the endorsement it received by my brother and trying to stay up on things. All of this would not be possible without the invention of CD-based audiobooks, which are my constant companions during my commute. Beyond these, I plan on trying to make it through most of the top 10 books from 2008 recommended by Amazon as soon as I get the chance. I haven't read anything besides school required reading for years, so this is a good change.

All of the rest of my time is spent doing things. I am really into time management these days, and my weeks consist of working, sleeping, job hunt, school, basement, and keeping all of my interpersonal relationships in order. Honestly I can't wait for 3 of these things to be over (school, basement, and the job hunt). Mainly the job hunt though, because then the others will be made easier.

This post has been a bunch of logical statements because right now my mind is in a zone :). I swear my next post will probably make less sense. Have a great Monday!

Wazzup NOW?

2009-02-12T14:48:00.002-05:00

I know some of you probably expect me to blog about the crappy economy (personal situation), or wet basements (personal situation), or maybe even Obama's stimulus plan for our nation. But I think today I'll take it in a different direction completely.

I saw this article today and it kind of upset me, but not as it might some. I think that parents allowing a child to sample alcohol in the confines of their own home is not so bad as long as it is under a good deal of supervision (i.e. not letting them go drive somewhere, etc). However, in this article, all the mom is getting charged with is giving alcohol to a minor and reckless conduct. Hello, the FREAKING kid killed somebody! That is moronic. I can't believe all this lady is facing is a possible year and jail and some fines. That is definitely coming close to being an accomplice to manslaughter.

Anyways, to touch on wet basements. If you own a Ridgid wet dry vac, and have a LOT of water to vacuum, the pump is TOTALLY worth the $40 it costs to hook it up to a hose. However, the real solution (which costs $7K), may or may not be worth it, dependent upon if you have a job or not.

New Prez

2009-01-20T13:16:00.002-05:00

Word up to our new prez, Mr. BARACK!

Seriously, you gave a good speech, and we all know that the 'flub' of the oath was really just you taking in the moment (which would have been huge for anyone).

Congratulations are definitely in order, although I'm sure a lot of press time in the next week is going to go to Lowery's words:

“We ask you to help us work for that day when black will not be asked to give back, when brown can stick around, when yellow will be mellow, when the red man can get ahead, man, and when white will embrace what is right,” Lowery prayed.

Of course we as white people should and will embrace what is right, just like everyone else :).

Communism

2009-01-08T13:53:00.002-05:00

So after my favorite presidential candidate Mike Huckabee dropped out of the race, I found myself supporting Barack Obama for president.

I know our economy needs (or thinks it needs) stimulating, but doesn't spending a trillion dollars of deficit for the foreseeable future kind of make you think we live in a Quote-unquote Communist state, however unofficially? Giving these amounts of money to the entire nation certainly does seem like a re-distribution of wealth, especially when it is happening pre-emptively.

Oh well.

Nice kidneys, can I touch them?

2009-01-08T13:50:00.002-05:00

I'm sure some of you have heard about this, where a man is trying to get his divorcing wife to settle $1.5 million for a kidney he donated to her a few years ago.

I see a different angle on this. I know that in China and other shady places around the globe, people can go to sleep one day, and wake up the next in a bathtub with a few of their organs removed, while certain people collect the profits. What I think this may lead to is Chinese (or other place) mail-order brides, who come over to the United States at the behest of some really rich single person in need of an organ, donate it to that person, and then collect their fee in the divorce through a big hush-hush settlement. Scary future...

2nd Amendment

2008-12-04T09:17:00.002-05:00

This past fall I decided that it was time for me to join the ranks of those permitted to bear arms. In Illinois, state law dictates that you must possess a FOID card in order to purchase a firearm. I applied for mine back in September, and recently received it. I also attended and passed hunter's safety (50 hicks and me out in New Baden, IL, most of them under the age of 13).

I purchased a firearm to make my home safer (argue what you may), but now it seems like even the elderly are able to do that, but this time, via a prescription from their doctor. I'm sorry, but this is pretty scary, and even makes me upset somewhat that insurance can be used for that purpose.

Happy Thursday :).

Gas @ 1.39

2008-11-26T09:20:00.003-05:00

On the way to my school, I drive on a less than desirable street Grand Blvd., south from I-70. I lock my doors immediately when I know I'll be driving any distance on it, and luckily I'm only on it for 2 and a half miles.

However, it also has the cheapest freakin' gas in the bi-state area around St. Louis. Prices are consistently 10 cents cheaper than anywhere else in St. Louis, and they're often 25 to 30 cents cheaper than what I can get on the Illinois side. However, often I do not believe the risk premium of stepping out of my car to pump the cheaper gas is worth the dollar savings I'd make in filling my little tank up.

That is, until yesterday. If you're like me, and you've been watching gas prices fall for the past month and a half, you have to wonder when it's all going to end, and we'll reach the end of the valley. I have to believe that time is coming soon. I've noticed the price decreases at least slowing down a little bit (instead of 20 cents a week, they might be 10 cents now). The price yesterday at the BP I filled up at stood at $1.39, so I had to do it. I don't know when they will ever be that low again, and since it stands at a cheaper price than it was even 10 years ago, I think the historical significance of that choice far outweighs any potential risk on my life I incurred by stopping to get gas there.

Prices might keep falling, and if so I'll keep reveling in that, but seriously, it is getting a lot easier to get around town.

P.S. Don't worry, not only does the BP have the cheapest gas, it's also the most well-lit gas station along the dangerous part of the road. So, either I'll be safer, or the bad guys will have an easier time trying to snuff me out because they'll be able to aim better.

Post-Election Living

2008-11-07T09:59:00.004-05:00

I'm pretty sure everyone is excited that Barack Obama is going to be our next president. Before you express objection to that, the reason I said it was that now we do not have to watch 24/7 political coverage telling us why this candidate or that is better on this topic or that anymore.

Instead, we get to enjoy the fall, which I feel that God has sort of postponed for us this year, so that we could fully enjoy it after the election ;). The colors around here are just starting to peak, and the weather is starting to turn. I heard on the radio this morning our low tonight is 35. WHOO HOO! 30'S!

So kick back with some cider and a loved one, and enjoy the indoor living you'll get to do for the next 4 or 5 months. Try to get outdoors to see the colors and enjoy a couple of activities, but rest up :). I know I'll be enjoying all the family time and otherwise taking part in things I really enjoy doing.

Cruise!

2008-11-03T14:58:00.004-05:00

Well I'm back from my cruise with Staci and my parents. We had a great time, even if the weather did not cooperate. We were able to stop in Cozumel and ride a scooter around the island, allowing us to visit desolate beaches, margarita stands without any electricity, and a hidden tequila factory for some creamy tequila! (That should be good for winter-time hot cocoa or something).

We also visited Jamaica and hiked Dunn River Falls! That was pretty awesome, and had a great time doing it.

As for our time on the boat, we ate a TON, enjoying it immensely. I probably had sushi about 4 times, which was pretty good. As a family we collected 4 different ships on a stick, from 4 trivia contests (note we were 4 for 4, we thought about taking our previous trophies to our next trivia events, but didn't feel like scaring the competition that much). After that we decided that 4 was enough since we couldn't lose and felt bad for everyone else that was stick-less.

The water was pretty choppy, and the wind was crazy. The sun that we actually received was only shone upon us on Friday afternoon, and we soaked it up like crazy while we could.

It's sad to be back, but we can look forward to having plenty of fun vacations in the future! :). Come by and we can show you our souvenir cup collection sometime....

Sunday School

2008-11-03T14:53:00.002-05:00

Since when did going to Sunday School become an endorsement of the Republican party only? I love going to church, and I really enjoy the people I've come into contact with through my Sunday School, but man do they over-politicize this political season. I am definitely in the pro-life camp, but it's as if that stance is the only one that matters in the coming election, and is the only one that has the ethics of God in mind.

I even have fellow Christians telling me that the 'socialistic' ways of Obama wanting to give money from the rich to the poor is ungodly.

I think we pick too few social issues to determine our candidate, and are willfully choosing to remain ignorant by trying to label one candidate or another as more in line with our beliefs, basically forcing square pegs into round holes.

I am no longer calling myself a republican nor a democrat. I am definitely a Christian, but loving all of God's children I can vote for whomever will do the best for them as a whole.

Michigan, how I feel for you...

2008-10-20T12:35:00.000-04:00

Michigan, you know I love you. I'd love to live there if you had the jobs that keep me gainfully employed, but alas you don't. Chicken and the egg?

For a humorous/scary/wtf way to end an article, please see the last paragraph.