Archives June 2017

Friday, September 23, 2005

On the corner of Golden Gate Ave. and Jones St. in the Tenderloin, San Francisco, right next to the Civic Center you can see a throng of low-income and homeless people lining up outside of St. Anthony’s Dining Room hall which opens up it’s doors everyday at 11:30 a.m. Volunteers dressed in St. Anthony Foundation shirts help keep the lines moving as hundreds of homeless and low income people shuffle their way towards the dining hall underneath the watchful eyes of a small statue of St. Francis of Assisi.

“There’s a lot of people who go hungry out here and it ain’t right.” says Jimmy Scott, a slightly brawny 44-year-old black man who has been living homeless in San Francisco for the past three years. “There are families out here with kids and everything and they have to walk around all night just to stay awake so they don’t get hurt or killed…Right here in the U.S. this is going on…it ain’t right.”

The dining hall, which has been open for the past 54 years, is owned by the St. Anthony Foundation which helps low income and homeless people and families in the Civic Center, Tenderloin, and SOMA areas with clothing, shelter, food, drug rehabilitation, and many other services. St. Anthony’s administrative offices are found at 121 Golden Gate Ave. with the majority of the foundation’s buildings on Golden Gate Ave. and Jones St.

“We are right in the heart of the homeless population of San Francisco,” says Barry Stenger, 55, who’s been working for the St. Anthony Foundation for one year, and is the Director of Development and Communications, “and people are pushed here because of the economic forces of San Francisco because it’s hard to be upper middle class in San Francisco.”

According to the San Francisco Chamber of Commerce, “San Francisco’s cost of living remains one of the highest in the country” with the average household income in San Francisco being around $76,400 and the average price of housing being $543,000. Average household income for the United States in 2002, according to the U.S. Census Bureau, was $42,409 and the average price of housing for the United States according to the National Association of Realtors was $185,200 in 2004.

“We served our 32 millionth meal on Tuesday,” said Stenger, “and we serve 2,500 meals a day. Some of our people who work here actually get served [food] here because they spend all their money towards rent and medical costs.”

The St. Anthony Foundation was started by Fr. Alfred Boeddeker in 1950 one year after Fr. Boeddeker became pastor of St. Boniface church on Golden Gate St. where he was baptized as a child. During his lifetime, according to the foundation’s website, he was referred to as the “Patron St. of the Tenderloin” and had Boeddeker park named after him because of his, and his foundation’s, achievements with helping out the homeless and low income community.

“[St. Anthony’s] is a good thing,” said Jimmy Scott, “they provide a good service and they feed people and they clothe them and provide furniture when you get housing and give you groceries when you have AIDS. It’s a good little organization.”

“Our dining room is open 365 days a year.” Said Stenger. “Our other facilities are open seven days a week. We have a residence for senior women and our [free medical] clinic is open five days a week and we also have a furniture and clothing store. We have 12 programs all together.”

Some of those programs are the Father Alfred Center which provides 61 men two programs for getting out of drug and alcohol abuse, the Employment Program/Learning Center which helps participants in educational and employment opportunities and provides each one with a personal staff advisor, and a Senior Outreach and Support Services center which states its mission is to “promote independence, self determination, and alleviate isolation” for seniors who are 60 and older.

A few homeless people who were interviewed complained that St. Anthony’s had some staff who were rude and that they were kicked out of the dining hall; other homeless within the area refuted those claims saying St. Anthony’s has nice staff and only kicks people out who cause trouble.

“It’s a good place and good people. Everybody is so kind and so respectful and everything is under control.” Said John Henderson, a tall and skinny 57-year-old homeless black man who has only been living in San Francisco for close to two months because he recently moved there from Phoenix, Arizona. “It’s pretty cool because they’re under control because yesterday I saw at Glide [Memorial Church which also has services for the poor and low income] and they were handing out food boxes and people were just rushing in and the woman in charge there was freaking out and so she just sat down. That would never happen at St. Anthony’s.”

“And they clean too!” Henderson said laughing with a grin on his face referring to the fact that there are no drugs allowed in the premises. “Not that Glide ain’t clean if you know what I mean.”

“We [also] have a whole division that deals with justice education and advocacy to change the system that brings people to our doorstep.” Said Stenger. “We hear a lot of appreciation from the people we serve. We get a lot of testimony from our clients who have become clean and sober. Sometimes we have to push them a little to get them out the door because they love the [foundation] so much because it has changed their lives.”

Monday, October 11, 2010

Wikinews interviewed author Amy Scobee about her book Scientology – Abuse at the Top, and asked her about her experiences working as an executive within the organization. Scobee joined the organization at age 14, and worked at Scientology’s international management headquarters for several years before leaving in 2005. She served as a Scientology executive in multiple high-ranking positions, working out of the international headquarters of Scientology known as “Gold Base”, located in Gilman Hot Springs near Hemet, California.

Friday, September 23, 2005

On the corner of Golden Gate Ave. and Jones St. in the Tenderloin, San Francisco, right next to the Civic Center you can see a throng of low-income and homeless people lining up outside of St. Anthony’s Dining Room hall which opens up it’s doors everyday at 11:30 a.m. Volunteers dressed in St. Anthony Foundation shirts help keep the lines moving as hundreds of homeless and low income people shuffle their way towards the dining hall underneath the watchful eyes of a small statue of St. Francis of Assisi.

“There’s a lot of people who go hungry out here and it ain’t right.” says Jimmy Scott, a slightly brawny 44-year-old black man who has been living homeless in San Francisco for the past three years. “There are families out here with kids and everything and they have to walk around all night just to stay awake so they don’t get hurt or killed…Right here in the U.S. this is going on…it ain’t right.”

The dining hall, which has been open for the past 54 years, is owned by the St. Anthony Foundation which helps low income and homeless people and families in the Civic Center, Tenderloin, and SOMA areas with clothing, shelter, food, drug rehabilitation, and many other services. St. Anthony’s administrative offices are found at 121 Golden Gate Ave. with the majority of the foundation’s buildings on Golden Gate Ave. and Jones St.

“We are right in the heart of the homeless population of San Francisco,” says Barry Stenger, 55, who’s been working for the St. Anthony Foundation for one year, and is the Director of Development and Communications, “and people are pushed here because of the economic forces of San Francisco because it’s hard to be upper middle class in San Francisco.”

According to the San Francisco Chamber of Commerce, “San Francisco’s cost of living remains one of the highest in the country” with the average household income in San Francisco being around $76,400 and the average price of housing being $543,000. Average household income for the United States in 2002, according to the U.S. Census Bureau, was $42,409 and the average price of housing for the United States according to the National Association of Realtors was $185,200 in 2004.

“We served our 32 millionth meal on Tuesday,” said Stenger, “and we serve 2,500 meals a day. Some of our people who work here actually get served [food] here because they spend all their money towards rent and medical costs.”

The St. Anthony Foundation was started by Fr. Alfred Boeddeker in 1950 one year after Fr. Boeddeker became pastor of St. Boniface church on Golden Gate St. where he was baptized as a child. During his lifetime, according to the foundation’s website, he was referred to as the “Patron St. of the Tenderloin” and had Boeddeker park named after him because of his, and his foundation’s, achievements with helping out the homeless and low income community.

“[St. Anthony’s] is a good thing,” said Jimmy Scott, “they provide a good service and they feed people and they clothe them and provide furniture when you get housing and give you groceries when you have AIDS. It’s a good little organization.”

“Our dining room is open 365 days a year.” Said Stenger. “Our other facilities are open seven days a week. We have a residence for senior women and our [free medical] clinic is open five days a week and we also have a furniture and clothing store. We have 12 programs all together.”

Some of those programs are the Father Alfred Center which provides 61 men two programs for getting out of drug and alcohol abuse, the Employment Program/Learning Center which helps participants in educational and employment opportunities and provides each one with a personal staff advisor, and a Senior Outreach and Support Services center which states its mission is to “promote independence, self determination, and alleviate isolation” for seniors who are 60 and older.

A few homeless people who were interviewed complained that St. Anthony’s had some staff who were rude and that they were kicked out of the dining hall; other homeless within the area refuted those claims saying St. Anthony’s has nice staff and only kicks people out who cause trouble.

“It’s a good place and good people. Everybody is so kind and so respectful and everything is under control.” Said John Henderson, a tall and skinny 57-year-old homeless black man who has only been living in San Francisco for close to two months because he recently moved there from Phoenix, Arizona. “It’s pretty cool because they’re under control because yesterday I saw at Glide [Memorial Church which also has services for the poor and low income] and they were handing out food boxes and people were just rushing in and the woman in charge there was freaking out and so she just sat down. That would never happen at St. Anthony’s.”

“And they clean too!” Henderson said laughing with a grin on his face referring to the fact that there are no drugs allowed in the premises. “Not that Glide ain’t clean if you know what I mean.”

“We [also] have a whole division that deals with justice education and advocacy to change the system that brings people to our doorstep.” Said Stenger. “We hear a lot of appreciation from the people we serve. We get a lot of testimony from our clients who have become clean and sober. Sometimes we have to push them a little to get them out the door because they love the [foundation] so much because it has changed their lives.”

[edit]

Friday, May 16, 2008

A major security hole was discovered in the pseudo-random number generator (PRNG) of the Debian version of OpenSSL. OpenSSL is one of the most used cryptographic software, that allows the creation of secure network connections with the protocols called SSL and TLS. It is included in many popular computer programs, like the Mozilla Firefox web browser and the Apache web server. Debian is one of the most used GNU/Linux distributions, on which are based other distributions, like Ubuntu and Knoppix. The problem affects all the Debian-based distributions that were used to create cryptographic keys since the September 17, 2006. The bug was discovered by Luciano Bello, an argentine Debian package maintainer, and was announced on May 13, 2008.

This vulnerability was caused by the removal of two lines of code from the original version of the OpenSSL library. These lines were used to gather some entropy data by the library, needed to seed the PRNG used to create private keys, on which the secure connections are based. Without this entropy, the only dynamic data used was the PID of the software. Under Linux the PID can be a number between 1 and 32,768, that is a too small range of values if used to seed the PRNG and will cause the generation of predictable numbers. Therefore any key generated can be predictable, with only 32,767 possible keys for a given architecture and key length, and the secrecy of the network connections created with those keys is fully compromised.

These lines were removed as “suggested” by two audit tools (Valgrind and Purify) used to find vulnerabilities in the software distributed by Debian. These tools warned the Debian maintainers that some data was used before its initialization, that normally can lead to a security bug, but this time it was not the case, as the OpenSSL developers wrote on March 13, 2003. Anyway this change was erroneously applied on September 17, 2006, when the OpenSSL Debian version 0.9.8c-1 was released to the public.

Even though the Debian maintainer responsible for this software released a patch to fix this bug on May 8, 2008, the impact may be severe. In fact OpenSSL is commonly used in software to protect the passwords, to offer privacy and security. Any private key created with this version of OpenSSL is weak and must be replaced, included the session keys that are created and used only temporary. This means that any data encrypted with these keys can be decrypted without a big deal, even if these keys are used (but not created) with a version of the library not affected, like the ones included in other operating systems.

For example any web server running under any operating system may use a weak key created on a vulnerable Debian-based system. Any encrypted connection (HTTPS) to this web server established by any browser can be decrypted. This may be a serious problem for sites that requires a secure connection, like banks or private web sites. Also, if some encrypted connection was recorded in the past, it can be decrypted in the same way.

Another serious problem is for the network security software, like OpenSSH and OpenVPN, that are used to encrypt the traffic to protect passwords and grant the access to an administrative console or a private network protected by firewalls. This may allows hackers to gain unwanted access to private computers, networks or data traveled over the network, even if a not affected version of OpenSSL was used.

The same behavior can be applied to any software or protocol that use SSL, like POP3S, SSMTP, FTPS, if used with a weak key. This is the case of Tor, software used to offer strong anonymity on the TCP/IP, where about 300 of 1,500-2,000 nodes used a weak key. With 15-20% of weak Tor nodes, there is a probability of 0.34-0.8% circa to build a circuit that has all tree nodes weak, resulting in a full loss of anonymity. Also the case of only one weak node begin used may facilitate some types of attack to the anonymity. The Tor hidden services, a sort of anonymous public servers, are affected too. However the issue was speedly addressed on May 14, 2008.

The same problem also interested anonymous remailers like Mixmaster and Mixminion, that use OpenSSL to create the remailer keys for the servers and the nym keys for the clients. Although currently there is no official announcement, at least two remailer changed their keys because were weak.

Friday, May 16, 2008

A major security hole was discovered in the pseudo-random number generator (PRNG) of the Debian version of OpenSSL. OpenSSL is one of the most used cryptographic software, that allows the creation of secure network connections with the protocols called SSL and TLS. It is included in many popular computer programs, like the Mozilla Firefox web browser and the Apache web server. Debian is one of the most used GNU/Linux distributions, on which are based other distributions, like Ubuntu and Knoppix. The problem affects all the Debian-based distributions that were used to create cryptographic keys since the September 17, 2006. The bug was discovered by Luciano Bello, an argentine Debian package maintainer, and was announced on May 13, 2008.

This vulnerability was caused by the removal of two lines of code from the original version of the OpenSSL library. These lines were used to gather some entropy data by the library, needed to seed the PRNG used to create private keys, on which the secure connections are based. Without this entropy, the only dynamic data used was the PID of the software. Under Linux the PID can be a number between 1 and 32,768, that is a too small range of values if used to seed the PRNG and will cause the generation of predictable numbers. Therefore any key generated can be predictable, with only 32,767 possible keys for a given architecture and key length, and the secrecy of the network connections created with those keys is fully compromised.

These lines were removed as “suggested” by two audit tools (Valgrind and Purify) used to find vulnerabilities in the software distributed by Debian. These tools warned the Debian maintainers that some data was used before its initialization, that normally can lead to a security bug, but this time it was not the case, as the OpenSSL developers wrote on March 13, 2003. Anyway this change was erroneously applied on September 17, 2006, when the OpenSSL Debian version 0.9.8c-1 was released to the public.

Even though the Debian maintainer responsible for this software released a patch to fix this bug on May 8, 2008, the impact may be severe. In fact OpenSSL is commonly used in software to protect the passwords, to offer privacy and security. Any private key created with this version of OpenSSL is weak and must be replaced, included the session keys that are created and used only temporary. This means that any data encrypted with these keys can be decrypted without a big deal, even if these keys are used (but not created) with a version of the library not affected, like the ones included in other operating systems.

For example any web server running under any operating system may use a weak key created on a vulnerable Debian-based system. Any encrypted connection (HTTPS) to this web server established by any browser can be decrypted. This may be a serious problem for sites that requires a secure connection, like banks or private web sites. Also, if some encrypted connection was recorded in the past, it can be decrypted in the same way.

Another serious problem is for the network security software, like OpenSSH and OpenVPN, that are used to encrypt the traffic to protect passwords and grant the access to an administrative console or a private network protected by firewalls. This may allows hackers to gain unwanted access to private computers, networks or data traveled over the network, even if a not affected version of OpenSSL was used.

The same behavior can be applied to any software or protocol that use SSL, like POP3S, SSMTP, FTPS, if used with a weak key. This is the case of Tor, software used to offer strong anonymity on the TCP/IP, where about 300 of 1,500-2,000 nodes used a weak key. With 15-20% of weak Tor nodes, there is a probability of 0.34-0.8% circa to build a circuit that has all tree nodes weak, resulting in a full loss of anonymity. Also the case of only one weak node begin used may facilitate some types of attack to the anonymity. The Tor hidden services, a sort of anonymous public servers, are affected too. However the issue was speedly addressed on May 14, 2008.

The same problem also interested anonymous remailers like Mixmaster and Mixminion, that use OpenSSL to create the remailer keys for the servers and the nym keys for the clients. Although currently there is no official announcement, at least two remailer changed their keys because were weak.