Latest trial of the One Laptop Per Child running in India; Uruguay orders 100,000 machines

Thursday, November 8, 2007

India is the latest of the countries where the One Laptop Per Child (OLPC) experiment has started. Children from the village of Khairat were given the opportunity to learn how to use the XO laptop. During the last year XO was distributed to children from Arahuay in Peru, Ban Samkha in Thailand, Cardal in Uruguay and Galadima in Nigeria. The OLPC team are, in their reports on the startup of the trials, delighted with how the laptop has improved access to information and ability to carry out educational activities. Thailand’s The Nation has praised the project, describing the children as “enthusiastic” and keen to attend school with their laptops.

Recent good news for the project sees Uruguay having ordered 100,000 of the machines which are to be given to children aged six to twelve. Should all go according to plan a further 300,000 machines will be purchased by 2009 to give one to every child in the country. As the first to order, Uruguay chose the OLPC XO laptop over its rival from Intel, the Classmate PC. In parallel with the delivery of the laptops network connectivity will be provided to schools involved in the project.

The remainder of this article is based on Carla G. Munroy’s Khairat Chronicle, which is available from the OLPC Wiki. Additional sources are listed at the end.

Wednesday, August 13, 2008 File:Flag of Hezbollah.svg

On Tuesday, Israeli Defense Minister Ehud Barak told troops training in the Golan Heights that Hezbollah and Syria are strengthening and that the delicate balance that Israel has had with the Lebanese militant group since the end of the Second Lebanon War is threatened.

“The other side is getting stronger. It is not a coincidence that we are holding a large-scale intensive exercise here in the Golan,” said Barak. “We’re following closely the violations of the [regional] equilibrium by Hezbollah and Syria, and the strengthening beyond the fence.”

Later, Barak told Israeli television that the Second Lebanon War “turned out into a major launching pad to upgrade Hezbollah’s power.” Barak also criticized the former Israeli prime minister Ariel Sharon and the Israeli government for not acting wisely “by not responding to Hezbollah’s growing capabilities/”

These statements follow a move by the Israeli Security Council, which last week decided to hold the Lebanese government responsible for any attacks that Hezbollah creates.

Sunday, December 26, 2004

Indian Ocean – The death toll continues to grow and millions face a homeless life in the new year as coastal communities in south Asia struggle against continued aftershocks and flooding caused by the largest earthquake to strike the planet in more than a generation.

The magnitude 9.0 undersea megathrust earthquake struck off the western coast of Sumatra, Indonesia on December 26, 2004, at 00:58:50 UTC (or 07:58:50 local time in Jakarta and Bangkok).

The earthquake was the strongest in the world since the 9.2-magnitude Good Friday Earthquake which struck Alaska, USA in 1964, and the fourth largest since 1900. More than 140,000 deaths[1] were caused by resulting tsunami, which in Thailand were up to 10 meters (33 feet) tall, and struck within three hours of the initial event.

Multiple tsunamis struck and ravaged coastal regions all over the Indian Ocean, devastating regions including the Indonesian province of Aceh, the coast of Sri Lanka, coastal areas of the Indian state of Tamil Nadu, the resort island of Phuket, Thailand, and even as far away as Somalia, 4,100 km (2,500 mi) west of the epicenter.

While the earthquake and the tsunamis are no longer ongoing (other than aftershocks), the humanitarian and economic crisis generated by the disaster is still ongoing. This report will attempt to cover the crisis as it continues to develop.

Thursday, August 2, 2007

The Interstate 35W Mississippi River eight-lane bridge in Minneapolis, Minnesota has collapsed on both sides of the highway over the Mississippi River during rush hour.

Previous reports indicated at least nine people had died, but Minneapolis police revised this to four during a 7:30 a.m. (local time) press conference. Tim Dolan, the Minneapolis Police Chief later stated that “several [adding to the four] people are confirmed dead at the scene,” but would not elaborate on how many. At least 79 have been injured and at least 8 are still missing, still believed to be in the rubble.

The road was busy with bumper-to-bumper traffic in four lanes when the entire 1907 foot (581 m) steel arch bridge collapsed. At least 50 cars were traveling on the bridge, including a school bus. The Red Cross said that 60 children were aboard a school bus, and that ten of those were admitted to a hospital.

The entire length of the bridge over the river collapsed at 6:05 p.m. CDT (UTC-5). The bridge, built in 1967, cleared the water level by 64 feet; the deck surface and pavement were considerably higher.

Reports say that people may be trapped in the water. Further, “many voids may contain survivors, but we cannot search those voids until it’s safe,” said Jim Clack, Minneapolis Fire Chief, during a press conference.

“One has died from drowning,” said a doctor from the medical center during an 8:00 pm press conference, who also said that so far 22 are in “yellow condition” and at least six are in “critical condition.”

Minneapolis officials have stated during an earlier press conference that “people are being sent downtown and all survivors are off the bridge. We are seeking help from the Red Cross.” and “[…]at least 60 children are receiving trauma care some with severe injures, some with minor injuries.”

Most of the injured have been received by Hennepin County Medical Center in downtown Minneapolis for medical treatment. Area hospitals are requesting all off duty staff and all Minneapolis ambulances to report. Residents are being encouraged to stay away from the area to let emergency crews do their work.

It is not known what caused the collapse, but there was construction being performed on the bridge’s road surface which included the use of jackhammers and the FBI has ruled out terrorism.

“Although it is much too early to make any determination of the cause, we have no reason at this time to believe there is any nexus to terrorism,” said Paul McCabe, an FBI spokesman.

In 2001 a stress inspection was done and Minnesota Department of Transportation stated that the bridge “should not have any problems with fatigue cracking in the foreseeable future.”

Typically an eight-lane bridge, the bridge was reduced to four lanes (two in each direction) during the current construction. The Minnesota Department of Transportation (Mn/DOT) had just announced overnight lane reductions on the bridge to one lane in each direction for the late evening hours of July 31 and August 1.

Thursday, April 26, 2012

Former President of Liberia Charles Taylor was today found guilty of aiding and abetting war crimes by the Special Court for Sierra Leone in The Hague, Netherlands. Taylor was acquitted of actually ordering the offences or being part of a joint enterprise to conduct them.

The eleven-count indictment produced a four-year trial that heard allegations of rape, murder, sexual slavery, cannibalism, arms dealing, “blood” diamond trade, and use of child soldiers. Prosecution witnesses totalled 94 whilst the defence had 21 including the accused. Taylor spent his seven months of evidence claiming he was a peacemaker.

The allegations date to civil war in Sierra Leone, which ran from 1991 to 2002. Taylor, who had been a warlord since the ’80s, backed the rebel Revolutionary United Front (RUF). Taylor was elected Liberian president in 1997 after a different civil war concluded.

Six years later he was ousted when an arrest warrant was issued and fled to Nigeria. He was arrested there in 2006 whilst again trying to flee. Taylor, who had been facing a rebellion against him since 1999 in Liberia, had received training from Libyan ruler Colonel Muammar Gaddafi’s regime.

Testimony included claims that Taylor-backed fighters adorned roads with human intestines and ate human flesh. One claimed to have seen Taylor himself eat human liver, something Taylor denied. One described asking RUF rebels to sever his only hand in exchange for his young son’s life.

Further allegations said teenage children were involved in the fighting and that Taylor sold illegally mined diamonds to finance arms purchases for the RUF. Western celebrities Naomi Campbell, a model, and Mia Farrow, an actress, described an incident at a charity dinner held by Nelson Mandella, then South Africa’s head, in 1997. Campbell and Farrow said Taylor gifted Campbell a number of diamonds. Taylor is claimed to have ordered seizure of Sierra Leone’s diamond deposits by RUF soldiers.

It was claimed in court that child soldiers were used in conflict, as diamond mine guards, and to carry out amputations. Allegations of forced amputation were made.

The court, which has spent a year considering its verdicts, unanimously found Taylor guilty. It ruled Taylor knew at least from 1997 the full extent of RUF activities in Sierra Leone, and that he helped bankroll activities dealing in blood diamonds. A judge said more than a thousand youngsters had ‘RUF’ carved into their skin to prevent escape. From the moment he receives the full judgement Taylor has two weeks in which to file an appeal.

Human Rights Watch and Amnesty International welcomed the verdict, which is the first conviction of a head of state before an international court since the Nuremburg trials prosecuted Nazi leaders after World War Two. Karl Dönitz was convicted after he took brief control of Germany in the aftermath of Adolf Hitler’s suicide.

Former President of Yugoslavia Slobodan Milosevic faced trial but died before a judgement was handed down. Laurent Gbagbo, once Presldent of the Ivory Coast, is in custody at The Hague awaiting trial before the International Criminal Court. Taylor joins eight other Special Court convicts, all of whom are from Sierra Leone. He is the first African ruler to appear in The Hague.

The Special Court was formed jointly by Sierra Leone’s present administration and the United Nations.

The Netherlands agreed the process could be held there on the condition Taylor did not serve sentence there if convicted. He is expected to be sent to the UK, where Foreign Office has promised to uphold an agreement to imprison him there made by ex-Foreign Secretary Margaret Beckett.

Friday, May 16, 2008

A major security hole was discovered in the pseudo-random number generator (PRNG) of the Debian version of OpenSSL. OpenSSL is one of the most used cryptographic software, that allows the creation of secure network connections with the protocols called SSL and TLS. It is included in many popular computer programs, like the Mozilla Firefox web browser and the Apache web server. Debian is one of the most used GNU/Linux distributions, on which are based other distributions, like Ubuntu and Knoppix. The problem affects all the Debian-based distributions that were used to create cryptographic keys since the September 17, 2006. The bug was discovered by Luciano Bello, an argentine Debian package maintainer, and was announced on May 13, 2008.

This vulnerability was caused by the removal of two lines of code from the original version of the OpenSSL library. These lines were used to gather some entropy data by the library, needed to seed the PRNG used to create private keys, on which the secure connections are based. Without this entropy, the only dynamic data used was the PID of the software. Under Linux the PID can be a number between 1 and 32,768, that is a too small range of values if used to seed the PRNG and will cause the generation of predictable numbers. Therefore any key generated can be predictable, with only 32,767 possible keys for a given architecture and key length, and the secrecy of the network connections created with those keys is fully compromised.

These lines were removed as “suggested” by two audit tools (Valgrind and Purify) used to find vulnerabilities in the software distributed by Debian. These tools warned the Debian maintainers that some data was used before its initialization, that normally can lead to a security bug, but this time it was not the case, as the OpenSSL developers wrote on March 13, 2003. Anyway this change was erroneously applied on September 17, 2006, when the OpenSSL Debian version 0.9.8c-1 was released to the public.

Even though the Debian maintainer responsible for this software released a patch to fix this bug on May 8, 2008, the impact may be severe. In fact OpenSSL is commonly used in software to protect the passwords, to offer privacy and security. Any private key created with this version of OpenSSL is weak and must be replaced, included the session keys that are created and used only temporary. This means that any data encrypted with these keys can be decrypted without a big deal, even if these keys are used (but not created) with a version of the library not affected, like the ones included in other operating systems.

For example any web server running under any operating system may use a weak key created on a vulnerable Debian-based system. Any encrypted connection (HTTPS) to this web server established by any browser can be decrypted. This may be a serious problem for sites that requires a secure connection, like banks or private web sites. Also, if some encrypted connection was recorded in the past, it can be decrypted in the same way.

Another serious problem is for the network security software, like OpenSSH and OpenVPN, that are used to encrypt the traffic to protect passwords and grant the access to an administrative console or a private network protected by firewalls. This may allows hackers to gain unwanted access to private computers, networks or data traveled over the network, even if a not affected version of OpenSSL was used.

The same behavior can be applied to any software or protocol that use SSL, like POP3S, SSMTP, FTPS, if used with a weak key. This is the case of Tor, software used to offer strong anonymity on the TCP/IP, where about 300 of 1,500-2,000 nodes used a weak key. With 15-20% of weak Tor nodes, there is a probability of 0.34-0.8% circa to build a circuit that has all tree nodes weak, resulting in a full loss of anonymity. Also the case of only one weak node begin used may facilitate some types of attack to the anonymity. The Tor hidden services, a sort of anonymous public servers, are affected too. However the issue was speedly addressed on May 14, 2008.

The same problem also interested anonymous remailers like Mixmaster and Mixminion, that use OpenSSL to create the remailer keys for the servers and the nym keys for the clients. Although currently there is no official announcement, at least two remailer changed their keys because were weak.