text:
draft-ietf-oauth-dyn-reg-07.txt
OAuth Working Group J. Richer, Ed. OAuth Working Group J. Richer, Ed.
Internet-Draft The MITRE Corporation Internet-Draft The MITRE Corporation
Intended status: Standards Track J. Bradley Intended status: Standards Track J. Bradley
Expires: August 25, 2013 Ping Identity Expires: September 19, 2013 Ping Identity
M. Jones M.B. Jones
Microsoft Microsoft
M. Machulak M. Machulak
Newcastle University Newcastle University
OAuth Dynamic Client Registration Protocol OAuth 2.0 Dynamic Client Registration Protocol
draft-ietf-oauth-dyn-reg-07 draft-ietf-oauth-dyn-reg-08
This specification defines an endpoint and protocol for dynamic This specification defines an endpoint and protocol for dynamic
registration of OAuth Clients at an Authorization Server. registration of OAuth 2.0 Clients at an Authorization Server and
methods for the dynamically registered client to manage its
This Internet-Draft is submitted in full conformance with the This Internet-Draft is submitted in full conformance with the
provisions of BCP 78 and BCP 79. provisions of BCP 78 and BCP 79.
Internet-Drafts are working documents of the Internet Engineering Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF). Note that other groups may also distribute Task Force (IETF). Note that other groups may also distribute
working documents as Internet-Drafts. The list of current Internet- working documents as Internet-Drafts. The list of current Internet-
Drafts is at http://datatracker.ietf.org/drafts/current/. Drafts is at http://datatracker.ietf.org/drafts/current/.
time. It is inappropriate to use Internet-Drafts as reference time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress." material or to cite them other than as "work in progress."
This Internet-Draft will expire on August 25, 2013. This Internet-Draft will expire on September 19, 2013.
Copyright Notice Copyright Notice
Copyright (c) 2013 IETF Trust and the persons identified as the Copyright (c) 2013 IETF Trust and the persons identified as the
document authors. All rights reserved. document authors. All rights reserved.
This document is subject to BCP 78 and the IETF Trust's Legal This document is subject to BCP 78 and the IETF Trust's Legal
Provisions Relating to IETF Documents Provisions Relating to IETF Documents
(http://trustee.ietf.org/license-info) in effect on the date of (http://trustee.ietf.org/license-info) in effect on the date of
publication of this document. Please review these documents publication of this document. Please review these documents
carefully, as they describe your rights and restrictions with respect carefully, as they describe your rights and restrictions with respect
to this document. Code Components extracted from this document must to this document. Code Components extracted from this document must
include Simplified BSD License text as described in Section 4.e of include Simplified BSD License text as described in Section 4.e of
the Trust Legal Provisions and are provided without warranty as the Trust Legal Provisions and are provided without warranty as
described in the Simplified BSD License. described in the Simplified BSD License.
1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 3 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . 2
1.1. Notational Conventions . . . . . . . . . . . . . . . . . . 3 1.1. Notational Conventions . . . . . . . . . . . . . . . . . 3
1.2. Terminology . . . . . . . . . . . . . . . . . . . . . . . 3 1.2. Terminology . . . . . . . . . . . . . . . . . . . . . . . 3
2. Client Metadata . . . . . . . . . . . . . . . . . . . . . . . 4 2. Client Metadata . . . . . . . . . . . . . . . . . . . . . . . 4
3. Client Registration Endpoint . . . . . . . . . . . . . . . . . 7 2.1. Relationship Between Grant Types and Response Types . . . 7
3.1. Client Registration Request . . . . . . . . . . . . . . . 8 3. Client Registration Endpoint . . . . . . . . . . . . . . . . 7
3.2. Client Registration Response . . . . . . . . . . . . . . . 9 3.1. Client Registration Request . . . . . . . . . . . . . . . 8
4. Client Configuration Endpoint . . . . . . . . . . . . . . . . 9 3.2. Client Registration Response . . . . . . . . . . . . . . 9
4.1. Forming the Client Configuration Endpoint URL . . . . . . 9 4. Client Configuration Endpoint . . . . . . . . . . . . . . . . 9
4.2. Client Read Request . . . . . . . . . . . . . . . . . . . 10 4.1. Forming the Client Configuration Endpoint URL . . . . . . 10
4.3. Client Update Request . . . . . . . . . . . . . . . . . . 10 4.2. Client Read Request . . . . . . . . . . . . . . . . . . . 10
4.4. Client Delete Request . . . . . . . . . . . . . . . . . . 12 4.3. Client Update Request . . . . . . . . . . . . . . . . . . 11
5. Responses . . . . . . . . . . . . . . . . . . . . . . . . . . 13 4.4. Client Delete Request . . . . . . . . . . . . . . . . . . 12
5.1. Client Information Response . . . . . . . . . . . . . . . 13 5. Responses . . . . . . . . . . . . . . . . . . . . . . . . . . 14
5.2. Client Registration Error Response . . . . . . . . . . . . 15 5.1. Client Information Response . . . . . . . . . . . . . . . 14
6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 16 5.2. Client Registration Error Response . . . . . . . . . . . 15
7. Security Considerations . . . . . . . . . . . . . . . . . . . 16 6. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 16
8. Normative References . . . . . . . . . . . . . . . . . . . . . 17 7. Security Considerations . . . . . . . . . . . . . . . . . . . 16
Appendix A. Acknowledgments . . . . . . . . . . . . . . . . . . . 18 8. Normative References . . . . . . . . . . . . . . . . . . . . 18
Appendix B. Document History . . . . . . . . . . . . . . . . . . 18 Appendix A. Acknowledgments . . . . . . . . . . . . . . . . . . 18
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 20 Appendix B. Document History . . . . . . . . . . . . . . . . . . 19
Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . 21
1. Introduction 1. Introduction
In some use-case scenarios, it is desirable or necessary to allow In some use-case scenarios, it is desirable or necessary to allow
OAuth clients to obtain authorization from an OAuth authorization OAuth 2.0 clients to obtain authorization from an OAuth 2.0
server without requiring the two parties to interact beforehand. authorization server without requiring the two parties to interact
Nevertheless, in order for the authorization server to accurately and beforehand. Nevertheless, in order for the authorization server to
securely represent to end-users which client is seeking authorization accurately and securely represent to end-users which client is
to access the end-user's resources, a method for automatic and unique seeking authorization to access the end-user's resources, a method
registration of clients is needed. The OAuth2 authorization for automatic and unique registration of clients is needed. The
framework does not define how the relationship between the Client and OAuth 2.0 authorization framework does not define how the
the Authorization Server is initialized, or how a given client is relationship between the Client and the Authorization Server is
assigned a unique Client Identifier. Historically, this has happened initialized, or how a given client is assigned a unique Client
out-of-band from the OAuth protocol. This draft provides a mechanism Identifier. Historically, this has happened out-of-band from the
for a client to register itself with the Authorization Server, which OAuth 2.0 protocol. This draft provides a mechanism for a client to
can be used to dynamically provision a Client Identifier, and register itself with the Authorization Server, which can be used to
optionally a Client Secret. dynamically provision a Client Identifier, and optionally a Client
As part of the registration process, this specification also defines As part of the registration process, this specification also defines
a mechanism for the client to present the Authorization Server with a a mechanism for the client to present the Authorization Server with a
set of metadata, such as a display name and icon to be presented to set of metadata, such as a display name and icon to be presented to
the user during the authorization step. This draft also provides a the user during the authorization step. This draft also provides a
mechanism for the Client to read and update this information after mechanism for the Client to read and update this information after
the initial registration action. the initial registration action.
1.1. Notational Conventions 1.1. Notational Conventions
skipping to change at page 4, line 37
Authorization Server MUST ignore any additional parameters sent by Authorization Server MUST ignore any additional parameters sent by
the Client that it does not understand. the Client that it does not understand.
[[ Editor's note: normative language in the table below is meant to [[ Editor's note: normative language in the table below is meant to
apply to the *client* when sending the request. The paragraph above apply to the *client* when sending the request. The paragraph above
is meant to say that the server must at least accept all parameters is meant to say that the server must at least accept all parameters
and not fail with an error at an unknown parameter, especially if and not fail with an error at an unknown parameter, especially if
it's in the list below. Also, extensions need to explicitly call out it's in the list below. Also, extensions need to explicitly call out
if they're not going to do something with one of these basic if they're not going to do something with one of these basic
parameters instead of just ignoring their existence. This is meant parameters instead of just ignoring their existence. This is meant
to be the *minimum set* of parameters for interoperability. ]] to be the *minimum set* of parameters for interoperability. ]]
redirect_uris redirect_uris
RECOMMENDED. Array of redirect URIs for use in the Authorization RECOMMENDED. Array of redirect URIs for use in the Authorization
Code and Implicit grant types. An Authorization Server SHOULD Code and Implicit grant types. An Authorization Server SHOULD
require registration of valid redirect URIs for all clients that require registration of valid redirect URIs for all clients that
use these grant types in order to protect against token and use these grant types in order to protect against token and
credential theft attacks. credential theft attacks.
client_name client_name
RECOMMENDED. Human-readable name of the Client to be presented to RECOMMENDED. Human-readable name of the Client to be presented to
to the End-User if it is given. to the End-User if it is given.
token_endpoint_auth_method token_endpoint_auth_method
OPTIONAL. The requested authentication type for the Token OPTIONAL. The requested authentication type for the Token
Endpoint. Valid values are: Endpoint. Valid values are:
* "none": this is a public client as defined in OAuth 2.0 and * "none": this is a public client as defined in OAuth 2.0 and
does not have a client secret does not have a client secret
* "client_secret_post": the client uses the HTTP POST parameters * "client_secret_post": the client uses the HTTP POST parameters
defined in OAuth2.0 section 2.3.1 defined in OAuth 2.0 section 2.3.1
* "client_secret_basic": the client uses HTTP Basic defined in * "client_secret_basic": the client uses HTTP Basic defined in
OAuth 2.0 section 2.3.1 OAuth 2.0 section 2.3.1
* "client_secret_jwt": the client uses the JWT Assertion profile * "client_secret_jwt": the client uses the JWT Assertion profile
with a symmetric secret issued by the server with a symmetric secret issued by the server
* "private_key_jwt": the client uses the JWT Assertion profile * "private_key_jwt": the client uses the JWT Assertion profile
with its own private key with its own private key
Other authentication methods may be defined by extension. If Other authentication methods may be defined by extension. If
unspecified or omitted, the default is "client_secret_basic", unspecified or omitted, the default is "client_secret_basic",
denoting HTTP Basic Authentication Scheme as specified in Section denoting HTTP Basic Authentication Scheme as specified in
2.3.1 of OAuth 2.0. Section 2.3.1 of OAuth 2.0.
scope scope
OPTIONAL. Space separated list of scope values (as described in OPTIONAL. Space separated list of scope values (as described in
OAuth 2.0 Section 3.3 [RFC6749]) that the client is declaring that OAuth 2.0 Section 3.3 [RFC6749]) that the client is declaring that
it may use when requesting access tokens. If omitted, an it may use when requesting access tokens. If omitted, an
Authorization Server MAY register a Client with a default set of Authorization Server MAY register a Client with a default set of
scopes. scopes.
grant_type grant_types
OPTIONAL. Array of grant types that a client may use. These OPTIONAL. Array of OAuth 2.0 grant types that the Client may use.
grant types are defined as follows: These grant types are defined as follows:
* "authorization_code": The Authorization Code Grant described in * "authorization_code": The Authorization Code Grant described in
OAuth2 Section 4.1. OAuth 2.0 Section 4.1.
* "implicit": The Implicit Grant described in OAuth2 Section 4.2. * "implicit": The Implicit Grant described in OAuth 2.0
* "password": The Resource Owner Password Credentials Grant * "password": The Resource Owner Password Credentials Grant
described in OAuth2 Section 4.3 described in OAuth 2.0 Section 4.3
* "client_credentials": The Client Credentials Grant described in * "client_credentials": The Client Credentials Grant described in
OAuth2 Section 4.4 OAuth 2.0 Section 4.4
* "refresh_token": The Refresh Token Grant described in OAuth2 * "refresh_token": The Refresh Token Grant described in OAuth 2.0
Section 6. Section 6.
* "urn:ietf:params:oauth:grant-type:jwt-bearer": The JWT Bearer
grant type defined in OAuth JWT Bearer Token Profiles
[OAuth.JWT].
* "urn:ietf:params:oauth:grant-type:saml2-bearer": The SAML 2
Bearer grant type defined in OAuth SAML 2 Bearer Token Profiles
[OAuth.SAML2].
Authorization Servers MAY allow for other values as defined in Authorization Servers MAY allow for other values as defined in
grant type extensions to OAuth2. The extension process is grant type extensions to OAuth 2.0. The extension process is
described in OAuth2 Section 2.5, and the value of this parameter described in OAuth 2.0 Section 2.5, and the value of this
MUST be the same as the value of the "grant_type" parameter parameter MUST be the same as the value of the "grant_type"
defined in the extension. parameter passed to the Token Endpoint defined in the extension.
response_types
OPTIONAL. Array of the OAuth 2.0 response types that the Client
may use. These response types are defined as follows:
* "code": The Authorization Code response described in OAuth 2.0
* "token": The Implicit response described in OAuth 2.0
Authorization Servers MAY allow for other values as defined in
response type extensions to OAuth 2.0. The extension process is
described in OAuth 2.0 Section 2.5, and the value of this
parameter MUST be the same as the value of the "response_type"
parameter passed to the Authorization Endpoint defined in the
extension.
policy_uri policy_uri
OPTIONAL. A URL location that the Client provides to the End-User OPTIONAL. A URL location that the Client provides to the End-User
to read about the how the profile data will be used. The to read about the how the profile data will be used. The
Authorization Server SHOULD display this URL to the End-User if it Authorization Server SHOULD display this URL to the End-User if it
is given. is given.
jwk_uri jwks_uri
OPTIONAL. URL for the Client's JSON Web Key [JWK] document that OPTIONAL. URL for the Client's JSON Web Key Set [JWK] document
is used for signing requests, such as requests to the Token that is used for signing requests, such as requests to the Token
Endpoint using the "private_key_jwt" assertion client credential. Endpoint using the "private_key_jwt" assertion client credential.
If the Client registers both "x509_uri" and "jwk_uri", the keys The keys MAY also be used for higher level protocols that require
contained in both formats MUST be the same. signing or encryption.
jwk_encryption_uri 2.1. Relationship Between Grant Types and Response Types
OPTIONAL. URL for the Client's JSON Web Key [JWK] that the server
can use to encrypt responses to the Client. If the Client
registers both "jwk_encryption_uri" and "x509_encryption_uri", the
keys contained in both formats MUST be the same.
x509_uri The "grant_types" and "response_types" values described above are
OPTIONAL. URL for the Client's PEM encoded X.509 Certificate or partially orthogonal, as they refer to arguments passed to different
Certificate chain that is used for signing requests, such as endpoints in the OAuth protocol. However, they are related in that
requests to the Token Endpoint using the "private_key_jwt" the "grant_types" available to a client influence the
assertion client credential. If the Client registers both "response_types" that the client is allowed to use, and vice versa.
"x509_uri" and "jwk_uri", the keys contained in both formats MUST For instance, a "grant_types" value that includes
be the same. "authorization_code" implies a "response_types" value that includes
code, as both values are defined as part of the OAuth 2.0
Authorization Code Grant. As such, a server supporting these fields
SHOULD take steps to ensure that a client cannot register itself into
an inconsistent state.
x509_encryption_uri The correlation between the two fields is listed in the table below.
OPTIONAL. URL for the Client's PEM encoded X.509 Certificate or
Certificate chain that the server can use to encrypt responses to +-----------------------------------------------+-------------------+
the Client. If the Client registers both "jwk_encryption_uri" and | grant_types value includes: | response_types |
"x509_encryption_uri", the keys contained in both formats MUST be | | value includes: |
the same. +-----------------------------------------------+-------------------+
| authorization_code | code |
| implicit | token |
| password | (none) |
| client_credentials | (none) |
| refresh_token | (none) |
| urn:ietf:params:oauth:grant-type:jwt-bearer | (none) |
+-----------------------------------------------+-------------------+
Extensions and profiles of this specification that introduce new
values to either the "grant_types" or "response_types" parameter MUST
document all correspondences between the parameter types.
3. Client Registration Endpoint 3. Client Registration Endpoint
The Client Registration Endpoint is an OAuth 2.0 Endpoint defined in The Client Registration Endpoint is an OAuth 2.0 Endpoint defined in
this document that is designed to allow a Client to register itself this document that is designed to allow a Client to register itself
with the Authorization Server. The Client Registration Endpoint MUST with the Authorization Server. The Client Registration Endpoint MUST
accept HTTP POST messages with request parameters encoded in the accept HTTP POST messages with request parameters encoded in the
entity body using the "application/json" format. The Client entity body using the "application/json" format. The Client
Registration Endpoint MUST be protected by a transport-layer security Registration Endpoint MUST be protected by a transport-layer security
mechanism, and the server MUST support TLS 1.2 RFC 5246 [RFC5246] mechanism, and the server MUST support TLS 1.2 RFC 5246 [RFC5246] and
and/or TLS 1.0 [RFC2246] and MAY support additional transport-layer /or TLS 1.0 [RFC2246] and MAY support additional transport-layer
mechanisms meeting its security requirements. When using TLS, the mechanisms meeting its security requirements. When using TLS, the
Client MUST perform a TLS/SSL server certificate check, per RFC 6125 Client MUST perform a TLS/SSL server certificate check, per RFC 6125
[RFC6125]. [RFC6125].
The Client Registration Endpoint MAY accept an initial authorization The Client Registration Endpoint MAY accept an initial authorization
credential in the form of an OAuth 2.0 [RFC6749] access token in credential in the form of an OAuth 2.0 [RFC6749] access token in
order to limit registration to only previously authorized parties. order to limit registration to only previously authorized parties.
The method by which this access token is obtained by the registrant The method by which this access token is obtained by the registrant
is generally out-of-band and is out of scope of this specification. is generally out-of-band and is out of scope of this specification.
Identifier, optionally assigns a Client Secret, and associates the Identifier, optionally assigns a Client Secret, and associates the
metadata given in the request with the issued Client Identifier. The metadata given in the request with the issued Client Identifier. The
request includes any parameters described in Client Metadata request includes any parameters described in Client Metadata
(Section 2) that the client wishes to specify for itself during the (Section 2) that the client wishes to specify for itself during the
registration. The Authorization Server MAY provision default values registration. The Authorization Server MAY provision default values
for any items omitted in the Client Metadata. for any items omitted in the Client Metadata.
The Client sends an HTTP POST to the Client Registration Endpoint The Client sends an HTTP POST to the Client Registration Endpoint
with a content type of "application/json". The HTTP Entity Payload with a content type of "application/json". The HTTP Entity Payload
is a JSON [RFC4627] document consisting of a JSON object and all is a JSON [RFC4627] document consisting of a JSON object and all
parameters as top- level members of that JSON object. parameters as top-level members of that JSON object.
For example, a client could send the following registration request For example, a client could send the following registration request
to the Client Registration Endpoint: to the Client Registration Endpoint:
Following is a non-normative example request (with line wraps for Following is a non-normative example request (with line wraps for
display purposes only): display purposes only):
POST /register HTTP/1.1 POST /register HTTP/1.1
Content-Type: application/json Content-Type: application/json
Accept: application/json Accept: application/json
skipping to change at page 10, line 22
construct this URL from component pieces. construct this URL from component pieces.
Depending on deployment characteristics, the Client Configuration Depending on deployment characteristics, the Client Configuration
Endpoint URL may take any number of forms. It is RECOMMENDED that Endpoint URL may take any number of forms. It is RECOMMENDED that
this endpoint URL be formed through the use of a server-constructed this endpoint URL be formed through the use of a server-constructed
URL string which combines the Client Registration Endpoint's URL and URL string which combines the Client Registration Endpoint's URL and
the issued client_id for this Client, with the latter as either a the issued client_id for this Client, with the latter as either a
path parameter or a query parameter. For example, a Client with the path parameter or a query parameter. For example, a Client with the
Client ID "s6BhdRkqt3" could be given a Client Configuration Endpoint Client ID "s6BhdRkqt3" could be given a Client Configuration Endpoint
URL of "https://server.example.com/register/s6BhdRkqt3" (path URL of "https://server.example.com/register/s6BhdRkqt3" (path
parameter) or of parameter) or of "https://server.example.com/
"https://server.example.com/register?client_id=s6BhdRkqt3" (query register?client_id=s6BhdRkqt3" (query parameter). In both of these
parameter). In both of these cases, the client simply follows the cases, the client simply follows the URL as given.
URL as given.
These common patterns can help the Server to more easily determine These common patterns can help the Server to more easily determine
the client to which the request pertains, which MUST be matched the client to which the request pertains, which MUST be matched
against the client to which the Registration Access Token was issued. against the client to which the Registration Access Token was issued.
If desired, the server MAY simply return the Client Registration If desired, the server MAY simply return the Client Registration
Endpoint URL as the Client Configuration Endpoint URL and change Endpoint URL as the Client Configuration Endpoint URL and change
behavior based on the authentication context provided by the behavior based on the authentication context provided by the
Registration Access Token. Registration Access Token.
4.2. Client Read Request 4.2. Client Read Request
(Section 2) as returned to the Client from a previous register, read, (Section 2) as returned to the Client from a previous register, read,
or update operation. The Client MUST NOT include the or update operation. The Client MUST NOT include the
"registration_access_token", "registration_client_uri", "expires_at", "registration_access_token", "registration_client_uri", "expires_at",
or "issued_at" fields described in Client Information Response or "issued_at" fields described in Client Information Response
(Section 5.1). (Section 5.1).
Valid values of Client Metadata fields in this request MUST replace, Valid values of Client Metadata fields in this request MUST replace,
not augment, the values previously associated with this Client. not augment, the values previously associated with this Client.
Omitted fields MUST be treated as null or empty values by the server. Omitted fields MUST be treated as null or empty values by the server.
The Client MUST include its client_id field in the request, and it The Client MUST include its "client_id" field in the request, and it
MUST be the same as its currently-issued Client Identifier. If the MUST be the same as its currently-issued Client Identifier. If the
client includes its client_secret in the request, then it MUST match client includes the "client_secret" field in the request, the value
the currently-issued client_secret for that Client. The client MUST of this field MUST match the currently-issued Client Secret for that
NOT be allowed to overwrite its existing client_secret with its own Client. The Client MUST NOT be allowed to overwrite its existing
value. Client Secret with its own chosen value.
For all metadata fields, the Authorization Server MAY replace any For all metadata fields, the Authorization Server MAY replace any
invalid values with suitable default values, and it MUST return any invalid values with suitable default values, and it MUST return any
such fields to the Client in the response. such fields to the Client in the response.
For example, a client could send the following request to the Client For example, a client could send the following request to the Client
Registration Endpoint to update the client registration in the above Registration Endpoint to update the client registration in the above
example: example with new information:
PUT /register/s6BhdRkqt3 HTTP/1.1 PUT /register/s6BhdRkqt3 HTTP/1.1
Host: server.example.com Host: server.example.com
Authorization: Bearer reg-23410913-abewfq.123483 Authorization: Bearer reg-23410913-abewfq.123483
{ {
"client_id":"s6BhdRkqt3", "client_id":"s6BhdRkqt3",
"client_secret": "cf136dc3c1fc93f31185e5885805d", "client_secret": "cf136dc3c1fc93f31185e5885805d",
"redirect_uris":["https://client.example.org/callback", "redirect_uris":["https://client.example.org/callback",
"https://client.example.org/alt"], "https://client.example.org/alt"],
"scope": "read write dolphin", "scope": "read write dolphin",
"grant_type": ["authorization_code", "refresh_token"] "grant_types": ["authorization_code", "refresh_token"]
"token_endpoint_auth_method": "client_secret_basic", "token_endpoint_auth_method": "client_secret_basic",
"jwk_uri": "https://client.example.org/my_rsa_public_key.jwk" "jwk_uri": "https://client.example.org/my_rsa_public_key.jwk"
"client_name":"My New Example", "client_name":"My New Example",
"logo_uri":"https://client.example.org/newlogo.png" "logo_uri":"https://client.example.org/newlogo.png"
Upon successful update, the Authorization Server responds with an Upon successful update, the Authorization Server responds with an
HTTP 200 OK Message with content type "application/json" and a HTTP 200 OK Message with content type "application/json" and a
payload as described in Client Information Response (Section 5.1). payload as described in Client Information Response (Section 5.1).
The Authorization Server MAY include a new Client Secret and/or The Authorization Server MAY include a new Client Secret and/or
If the Client attempts to set an invalid metadata field and the If the Client attempts to set an invalid metadata field and the
Authorization Server does not set a default value, the Authorization Authorization Server does not set a default value, the Authorization
Server responds with an error as described in Client Registration Server responds with an error as described in Client Registration
Error Response (Section 5.2). Error Response (Section 5.2).
4.4. Client Delete Request 4.4. Client Delete Request
[[ Editor's note: The utility and nature of this function are still [[ Editor's note: The utility and nature of this function are still
under active discussion. This is a proposed set of functionality under active discussion. This is a proposed set of functionality
that a server MAY choose to implement, else give a 405 response to that a server MAY choose to implement, else give a 405 response to
any client that tries, if it can't support it. ]] any client that tries, if it can't support it. ]]
In order to deprovision itself on the Authorization Server, the In order to deprovision itself on the Authorization Server, the
Client makes an HTTP DELETE request to the Client Configuration Client makes an HTTP DELETE request to the Client Configuration
Endpoint. This request is authenticated by the Registration Access Endpoint. This request is authenticated by the Registration Access
Token issued to the client. Token issued to the client.
DELETE /register/s6BhdRkqt3 HTTP/1.1 DELETE /register/s6BhdRkqt3 HTTP/1.1
A successful delete action will invalidate the client_id, A successful delete action will invalidate the client_id,
client_secret, and registration_access_token for this client, thereby client_secret, and registration_access_token for this client, thereby
preventing the client_id from being used at either the Authorization preventing the client_id from being used at either the Authorization
Endpoint or Token Endpoint of the Authorization Server. The Endpoint or Token Endpoint of the Authorization Server. The
Authorization Server SHOULD immediately invalidate all existing Authorization Server SHOULD immediately invalidate all existing
"registration_access_token": "reg-23410913-abewfq.123483", "registration_access_token": "reg-23410913-abewfq.123483",
"registration_client_uri": "registration_client_uri":
"https://server.example.com/register/s6BhdRkqt3", "https://server.example.com/register/s6BhdRkqt3",
"expires_at":2893276800 "expires_at":2893276800
"https://client.example.org/callback2"] "https://client.example.org/callback2"]
"logo_uri": "https://client.example.org/logo.png", "logo_uri": "https://client.example.org/logo.png",
5.2. Client Registration Error Response 5.2. Client Registration Error Response
When an OAuth error condition occurs, such as the client presenting When an OAuth 2.0 error condition occurs, such as the client
an invalid Registration Access Token, the Authorization Server presenting an invalid Registration Access Token, the Authorization
returns an Error Response as defined in Section 5.2 of the OAuth 2.0 Server returns an Error Response as defined in Section 5.2 of the
specification. OAuth 2.0 specification.
When a registration error condition occurs, the Authorization Server When a registration error condition occurs, the Authorization Server
returns an HTTP 400 status code with content type "application/json" returns an HTTP 400 status code with content type "application/json"
consisting of a JSON object [RFC4627] describing the error in the consisting of a JSON object [RFC4627] describing the error in the
response body. response body.
The JSON object contains two members: The JSON object contains two members:
error error
The error code, a single ASCII string. The error code, a single ASCII string.
"error_description":"The redirect URI of http://sketchy.example.com "error_description":"The redirect URI of http://sketchy.example.com
is not allowed for this server." is not allowed for this server."
6. IANA Considerations 6. IANA Considerations
This document makes no requests of IANA. This document makes no requests of IANA.
7. Security Considerations 7. Security Considerations
[[ Editor's note: Following are some security considerations taken
from the UMA and OpenID Connect source drafts. These need to be
massaged into a properly generic set of considerations. ]]
Since requests to the Client Registration Endpoint result in the Since requests to the Client Registration Endpoint result in the
transmission of clear-text credentials (in the HTTP request and transmission of clear-text credentials (in the HTTP request and
response), the server MUST require the use of a transport-layer response), the server MUST require the use of a transport-layer
security mechanism when sending requests to the Registration security mechanism when sending requests to the Registration
Endpoint. The server MUST support TLS 1.2 RFC 5246 [RFC5246] and/or Endpoint. The server MUST support TLS 1.2 RFC 5246 [RFC5246] and/or
TLS 1.0 [RFC2246] and MAY support additional transport-layer TLS 1.0 [RFC2246] and MAY support additional transport-layer
As this endpoint is an OAuth2 Protected Resource, requests to the As this endpoint is an OAuth 2.0 Protected Resource, requests to the
Registration Endpoint SHOULD have some rate limiting on failures to Registration Endpoint SHOULD have some rate limiting on failures to
prevent the Registration Access Token from being disclosed though prevent the Registration Access Token from being disclosed though
repeated access attempts. repeated access attempts.
The authorization server MUST treat all client metadata as self- The authorization server MUST treat all client metadata as self-
asserted. A rogue Client might use the name and logo for the asserted. A rogue Client might use the name and logo for the
legitimate Client, which it is trying to impersonate. An legitimate Client, which it is trying to impersonate. An
Authorization Server needs to take steps to mitigate this phishing Authorization Server needs to take steps to mitigate this phishing
risk, since the logo could confuse users into thinking they're risk, since the logo could confuse users into thinking they're
logging in to the legitimate Client. For instance, an Authorization logging in to the legitimate Client. For instance, an Authorization
skipping to change at page 18, line 7
If a Client is deprovisioned from a server, any outstanding If a Client is deprovisioned from a server, any outstanding
Registration Access Tokens for that client MUST be invalidated at the Registration Access Tokens for that client MUST be invalidated at the
same time. Otherwise, this can lead to an inconsistent state wherein same time. Otherwise, this can lead to an inconsistent state wherein
a Client could make requests to the Client Configuration Endpoint a Client could make requests to the Client Configuration Endpoint
where the authentication would succeed but the action would fail where the authentication would succeed but the action would fail
because the Client is no longer valid. because the Client is no longer valid.
8. Normative References 8. Normative References
[JWK] Jones, M., "JSON Web Key (JWK)", May 2012. [JWK] Jones, M.B., "JSON Web Key (JWK)", May 2012.
[OAuth.JWT]
Jones, M.B., Campbell, B., and C. Mortimore, "JSON Web
Token (JWT) Bearer Token Profiles for OAuth 2.0", draft-
ietf-oauth-jwt-bearer (work in progress), December 2012.
[OAuth.SAML2]
Campbell, B. and C. Mortimore, "JSON Web Token (JWT)
Bearer Token Profiles for OAuth 2.0", draft-ietf-oauth-
saml2-bearer (work in progress), December 2012.
[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate
Requirement Levels", BCP 14, RFC 2119, March 1997. Requirement Levels", BCP 14, RFC 2119, March 1997.
[RFC2246] Dierks, T. and C. Allen, "The TLS Protocol Version 1.0", [RFC2246] Dierks, T. and C. Allen, "The TLS Protocol Version 1.0",
RFC 2246, January 1999. RFC 2246, January 1999.
[RFC2616] Fielding, R., Gettys, J., Mogul, J., Frystyk, H., [RFC2616] Fielding, R., Gettys, J., Mogul, J., Frystyk, H.,
Masinter, L., Leach, P., and T. Berners-Lee, "Hypertext Masinter, L., Leach, P., and T. Berners-Lee, "Hypertext
Transfer Protocol -- HTTP/1.1", RFC 2616, June 1999. Transfer Protocol -- HTTP/1.1", RFC 2616, June 1999.
[RFC5246] Dierks, T. and E. Rescorla, "The Transport Layer Security [RFC5246] Dierks, T. and E. Rescorla, "The Transport Layer Security
(TLS) Protocol Version 1.2", RFC 5246, August 2008. (TLS) Protocol Version 1.2", RFC 5246, August 2008.
[RFC6125] Saint-Andre, P. and J. Hodges, "Representation and [RFC6125] Saint-Andre, P. and J. Hodges, "Representation and
Verification of Domain-Based Application Service Identity Verification of Domain-Based Application Service Identity
within Internet Public Key Infrastructure Using X.509 within Internet Public Key Infrastructure Using X.509
(PKIX) Certificates in the Context of Transport Layer (PKIX) Certificates in the Context of Transport Layer
Security (TLS)", RFC 6125, March 2011. Security (TLS)", RFC 6125, March 2011.
[RFC6749] Hardt, D., "The OAuth 2.0 Authorization Framework", [RFC6749] Hardt, D., "The OAuth 2.0 Authorization Framework", RFC
RFC 6749, October 2012. 6749, October 2012.
[RFC6750] Jones, M. and D. Hardt, "The OAuth 2.0 Authorization [RFC6750] Jones, M. and D. Hardt, "The OAuth 2.0 Authorization
Framework: Bearer Token Usage", RFC 6750, October 2012. Framework: Bearer Token Usage", RFC 6750, October 2012.
Appendix A. Acknowledgments Appendix A. Acknowledgments
The authors thank the OAuth Working Group, the User-Managed Access The authors thank the OAuth Working Group, the User-Managed Access
Working Group, and the OpenID Connect Working Group participants for Working Group, and the OpenID Connect Working Group participants for
their input to this document. In particular, the following their input to this document. In particular, the following
individuals have been instrumental in their review and contribution individuals have been instrumental in their review and contribution
to various versions of this document: Amanda Anganes, Tim Bray, to various versions of this document: Amanda Anganes, Tim Bray,
Domenico Catalano, George Fletcher, Torsten Lodderstedt, Eve Maler, Domenico Catalano, George Fletcher, Torsten Lodderstedt, Eve Maler,
Thomas Hardjono, Nat Sakimura, and Christian Scholz. Thomas Hardjono, Nat Sakimura, and Christian Scholz.
Appendix B. Document History Appendix B. Document History
[[ to be removed by the RFC editor before publication as an RFC ]] [[ to be removed by the RFC editor before publication as an RFC ]]
o Collapsed jwk_uri, jwk_encryption_uri, x509_uri, and
x509_encryption_uri into a single jwks_uri parameter
o Renamed grant_type to grant_types since it's a plural value
o Formalized name of "OAuth 2.0" throughout document
o Added JWT Bearer Assertion and SAML 2 Bearer Assertion to example
grant types
o Added response_types parameter and explanatory text on its use
with and relationship to grant_types
o Changed registration_access_url to registration_client_uri o Changed registration_access_url to registration_client_uri
o Fixed missing text in 5.1 o Fixed missing text in 5.1
o Added Pragma: no-cache to examples o Added Pragma: no-cache to examples
o Changed "no such client" error to 403 o Changed "no such client" error to 403
o Changed to form-paramter inputs to endpoint o Changed to form-paramter inputs to endpoint
o Removed pull-based registration o Removed pull-based registration
o Imported original UMA draft specification o Imported original UMA draft specification
Authors' Addresses Authors' Addresses
Justin Richer (editor) Justin Richer (editor)
The MITRE Corporation The MITRE Corporation
Email: jricher@mitre.org Email: jricher@mitre.org
John Bradley John Bradley
Ping Identity Ping Identity
Email: ve7jtb@ve7jtb.com Email: ve7jtb@ve7jtb.com
Michael B. Jones Michael B. Jones
Email: mbj@microsoft.com Email: mbj@microsoft.com
End of changes. 45 change blocks.
115 lines changed or deleted
172 lines changed or added
This html diff was produced by rfcdiff 1.41. The latest version is available from http://tools.ietf.org/tools/rfcdiff/


text:
Purdue Women's Basketball
Boilers Back On Track: Purdue 82, Miami (OH) 76.
Purdue secures back-to-back wins.
By dubjell6 Dec 19, 2021, 4:14pm EST
Share All sharing options for: Boilers Back On Track: Purdue 82, Miami (OH) 76.
Nikos Frazier / Journal & Courier / USA TODAY NETWORK
Purdue returned following a week-long break to earn an 80-70 win over Miami (OH) inside Mackey Arena on Sunday.
It wasn't the prettiest win by any means, but the Boilermakers were able to get the job done against a lower-level team at home.
Purdue had many opportunities early on to put the Redhawks away, but couldn't put together runs as consistently as they should have. The Boilermakers struggled mightily during a back and forth first half, shooting just 2-14 from three-point range. We have seen this many times already this season, when Purdue isn't hitting their three-point shots they are extremely vulnerable.
Despite the poor shooting from deep, the Boilermakers locked up Miami in the second quarter allowing just 10 points to hold an 11 point lead at halftime. Purdue was gifted with a poor offensive team today, as they could have gotten blown out if this were a fellow Big Ten squad.
The second half saw the roles flip for the most part, with Miami making up ground in the third quarter. The Boilermakers looked like they were going to let this one slip away when Miami cut the lead to 57-58 at the 8:24 mark of the fourth quarter. From that point on, Purdue got things going offensively and was able to put the pressure on to sneak out of Mackey with a win.
Katie Gearlds did get some solid performances all around this afternoon in the midst of an odd game. Cassidy Hardin and Abbey Ellis both had 15 points apiece to lead the way for the Boilermakers. The duo combined for an average shooting output of 10-24 on-field goals, but Ellis added in 4 rebounds and 3 assists on her end.
With Madison Layden struggling with her shot, Purdue will need to lean on both of these girls to be the go-to options offensively.
Jeanae Terry put on another tremendous showcase this afternoon as well. She posted a triple-double with 11 points, 12 rebounds, and 10 assists, which has become the type of performance this team expects out of her. Her triple-double was the third in Purdue history as well.
After a 100+ point outburst in their last game, this matchup was a bit of a letdown as Purdue should've handled Miami with ease. As we will continue to say throughout the season, this turnaround is a process and will have highlight moments and poor performances as well. At the end of the day, a win is a win, so this team will take this and move on.
With today's win, Purdue now moves to 8-4 on the season. They have one last non-conference game on the books against North Alabama before starting the grueling Big Ten schedule on December 30th. The Boilermakers will host North Alabama on Tuesday at 11:00 a.m. inside Mackey Arena on B1G+.

redpajama_set_name: RedPajamaCommonCrawl


text:
The Unavailable Father: Seven Ways Women Can Understand, Heal, and Cope with a Broken Father-Daughter Relationship
Problems between fathers and daughters can damage a young girl's identity, convince her she's unlovable or without worth, and send her into unhealthy adult relationships. This groundbreaking book includes in-depth stories and case histories of a broad spectrum of women over twenty-five who have recovered and flourished in their professional and personal lives despite the lack of a father's recognition and affection. The author outlines basic strategies to overcome the void left by an abusive, absent, alcoholic, mentally ill, irresponsible, selfish, or unloving father.
Praise for "The Unavailable Father"
"This important work should be read by fathers and future fathers, as well as their daughters. There is no member of the human family who would not learn something essential from reading "The Unavailable Father."" –Kati Marton, journalist, author, and former chairwoman of the International Women's Health Coalition
"Finally, a smart, accessible book that explains why so many women make the wrong decisions when it comes to men, relationships, career: the unavailable father." –Alexandra Penney, former editor-in-chief, Self magazine; author, "The Baglady Papers"
"These stories are eye-opening, informative, heart-rending–and yet, with her blueprints for how to heal, Sarah Simms Rosenthal gives us hope." –Linda Fairstein, former prosecutor and author of the Alex Cooper crime novels
"Many women will recognize their own fathers and will be reminded, as I was, that the shortcomings that defined their sense of self were their fathers' and not their own." –Mary A. Fischer, journalist and author of the memoir "Stealing Love"
The Unavailable Father: Seven Ways Women Can Understand, Heal, and Cope with a Broken Father-Daughter Relationship quantity
SKU: 9.78047E 12 Categories: Culture, Feminine Perspective, Social Science, Women, Womens Tags: Daughters, Dysfunctional families, Family & Relationships, Fathers, Fathers and daughters, General, Personal Growth, Psychology, Self-Help
Strategies for overcoming a damaged father/daughter relationship
Problems between fathers and daughters can damage a young girl's identity, convince her she's unloveable or without worth, and send her into unhealthy adult relationships. This groundbreaking book includes in-depth stories and case histories of a broad spectrum of women over 25 who have recovered and flourished in their professional and personal lives despite the lack of a father's recognition and affection. While the legacy of pain that these fathers leave is deep, there is much that can be done to alleviate and even conquer it. Using these women's stories as well as her insights from her private practice, the author outlines basic strategies to overcome the void left by an abusive, absent, alcoholic, mentally ill, irresponsible, selfish, or unloving father. Written by Sarah Simms Rosenthal who has a thriving practice in New York City Reveals how to understand the truth about your childhood Includes strategies for discovering and analyzing past adult relationship mistakes–both personal and professional Offers successful techniques for establishing new patterns of behavior
The women whose stories are told in "The Unavailable Father" have learned to recognize and change the patterns instigated by their dysfunctional fathers and have moved forward, fulfilled.
Be the first to review "The Unavailable Father: Seven Ways Women Can Understand, Heal, and Cope with a Broken Father-Daughter Relationship" Cancel reply
Women of Faith Study Bible-NIV
God's Words of Life for Women


text:
Remembering Troy Davis
By Innocence Staff
Troy Anthony Davis entering Chatham County Superior Court during his trial on his Aug. 22, 1991. (Image: AP Photo/Savannah Morning News)
On Sept. 21, 2011 the State of Georgia likely murdered an innocent person—Troy Davis who maintained his innocence in the murder of a police officer. A year later, Davis' sister vowed to abolish the death penalty.
Speaking to the Guardian, Kimberly Davis said that her family was still determined to clear his name. Seven of the nine witnesses who identified Davis as the shooter have recanted their testimony.
"They insisted on executing an innocent man despite so much doubt around the case. If those seven witnesses were credible enough to put my brother on death row, then why weren't they credible when they recanted?" Davis said.
"My brother was murdered by the state of Georgia. For the Troy Davises who came before him, and the Troy Davises who will come after him, we want to stop the killing of innocent men," Davis said.
Shortly before Davis' death, the Innocence Project sent a letter to the Georgia Board of Pardons and Paroles to commute Troy Davis' death sentence to life due to serious questions about his guilt. A group of organizations and activists delivered a petition with more than 660,000 signatures calling on the Board of Pardons and Paroles to stop Davis' execution. In a three to two vote, the members of the Board ultimately rejected the clemency bid.
"The struggle for justice doesn't end with me. This struggle is for all the Troy Davises who came before me and all the ones who will come after me … I will not stop fighting until I've taken my last breath." Troy Davis
Kathleen Fout says:
November 9, 2020 at 3:31 pm ●
Troy Davis execution is a travesty. It saddens me that in 2020 people are willing to steal the life of an innocent man and then murder him. May God grant his soul peace and comfort in heaven.
Michael La Riviere says:
December 26, 2019 at 12:45 am ●
When I read or hear more of these cases it more than moves me it generates an outcry for justice that screams revenge. I am confounded that black people in the U.S. have not declared war upon the U.S. establishment. For those of you who have not risen from the depths of oblivion and the hidden truths of U.S. crimes against humanity, war crimes and genocide around the world, I say you owe it to yourself to know that your government at the federal, state, and municipal levels are saturated in criminal activity beyond your wildest imagination. Edward Snowden has only revealed the smallest amount of the real evidence to illustrate that truth. Only the naive, gullible and too young to be anything other than the epitome of innocence are believers in the USA being a wonderful and great country…actually it is – for the select few! The U.S. justice system is rigged as are many of its institutions – but not only against blacks. If you are poor, disenfranchised, or a person of colour in the U.S. you are a target for blame for all the wrongs which the select few calculatingly promote through malicious blogs, advertising and campaigning during elections.
The USA is believed to be the most corrupt government in the western alliance and maybe the world. Yes, more corrupt than China and Russia combined. The USA also stands for being the most untrustworthy country in the world having successfully overthrown more than 40 countries the majority of which were democracies with legitimate governments and the U.S. replaced them with dictatorships who serve the US 1%. The U.S. has attempted to overthrow more than 70 countries around the world, most of which were democratically elected and posed no threat to anyone, least of all the USA. While the U.S. government supports capitalist multinational corporations that steal other country's wealth by buying off foreign governments to do so, millions around the world have died and continue to suffer, including the minorities in the U.S. such as blacks, Hispanics, Indigenous the disenfranchised and the poor so the rich and wealthy can continue their exploits preying on the disadvantaged. What is confounding to me is that the very same people that are targets and victims of your policies are also completely ignorant of your government's dirty deeds and crimes and dwell in this place of oblivion without the faintest clue that the devil that created their lives of misery are the people they are supporting politically. One thing I am obligated to give you credit for is you have done an exemplary job of keeping your minions drowning in propaganda and keeping them ignorant of these heinous crimes your government commits daily around the world and at home.
No one can trust the USA – not Americans, not so called allies and especially not Canada but all these countries must walk a delicate line. Why? Because the USA is the most powerful military country in the world and they have crazy people behind the controls of WMDs. It isn't Iraq, Afghanistan or Iran we have to watch, it is the U.S. government and especially the Republican governments at all three levels.
Michael La Riviere
April Myrick says:
October 28, 2020 at 1:22 pm (EDIT)
Show more responses 7


text:
The man who serves up little smiles in Iraq's refugee camp
A popsicle and a smile might not be a substitute for a psychologist, but it makes the conditions more bearable for IDP children.
by Tanya Goudsouzian
Ibrahim 'the candy man' is seen as a big brother for many of the internally displaced children [Lara Fatah/Al Jazeera]
Sulaimania, Iraq - It's recess at the makeshift school in the Ashti camp for internally displaced people and Haidar Ibrahim is ready to receive his throng of little customers.
On the outskirts of Sulaimania in Iraq's Kurdistan region, in a small shack right across the narrow dirt road from the school, customers pour out like clockwork every day.
Around here, he is known as Ashti camp's candy man. His shack is filled with all sorts of brightly coloured, tooth-decaying sweets, popsicles, chips, popcorn and drinks. It's a business, yes - but he admits, this is something more than a job. It's a service that serves up endless smiles.
Internally displaced children at the Ashti camp on the outskirts of Sulaimania, in northern Iraq [Tanya Goudsouzian]
"These children come to see me at recess every day for a snack or a drink, and some others come from the opposite end of the camp because they know there's a guy here who will be kind to them, and smile at them," he says. "All the way here for a smile, can you imagine?"
There are 8,000 children among the 2,800 internally displaced families that live here. And many bear the scars of trauma - some have gone mute, others have recurring nightmares.
At 26 years old, Ibrahim is seen as a "big brother" for many of these children and like them, his journey here has been difficult.
A member of the predominately Kurdish Shabak community, he fled his hometown of Bashiqa, in Mosul, in the summer of 2014, soon after the Islamic State of Iraq and the Levant (ISIL) group declared its self-styled caliphate there. The Shabak people are an ethno-religious group, most of whom follow Shabakism, a variation of Shia Islam. The size of Iraq's Shabak population is unclear, with estimates ranging between 130,000 and 500,000.
For Iraq's Kurds, it's not about independence any more
"My town is about a half hour from Mosul," he recounts. "We heard ISIL entered the city, but we stayed for about 10 days. When we realised the situation would get worse, not better, we left."
At the candy shack, among the smiles and sweets, he sees the children are suffering.
"Some Shabak people stayed behind, they were pragmatic and they collaborated," he says. "The rest of us left."
Ibrahim and his brother owned an aluminum factory in Bashiqa. He says he watches television these days "nearly 24 hours" to see if he can make out the factory in the news reports: "Is it still standing or have they destroyed it? I don't know."
He says he heard that his town has recently been liberated by the Peshmerga, but he won't move back there with his wife and four children until he is assured there is security.
"When it is secure, why not? I'll go back," he says. But for now, he is living at the camp. "It's better here in the camp than living under ISIL."
Ibrahim and his brother opened their candy shack about a year ago, when they moved to the Ashti camp from another settlement for the internally displaced.
At the candy shack, among the smiles and sweets, he sees that the children are suffering.
"They like to talk, but they don't share their feelings, or their problems," he says. "They come, they laugh a bit and they buy sweets with the little pocket money their parents can afford to give them."
Some are polite, he says, while others have stolen from him: "I'm tough with the thieves, but not too tough."
Ibrahim's little shack of sweets complements the efforts of local NGOs implementing a range of psycho-social programmes to address the children's traumas, whether these are art workshops or music lessons.
A popsicle and a smile might not be a substitute for a psychologist, but it certainly makes the conditions more bearable for the camp's children who repeatedly say they miss home.
Follow Tanya Goudsouzian on Twitter: @tgoudsouzian
Tanya Goudsouzian
Tanya Goudsouzian is a media professional with extensive experience in post-conflict countries.
@ tgoudsouzian
Battle for Mosul
Ghana gas station blasts kill at least seven
Trump on North Korea: 'Only one thing will work'
Qatar condemns deadly attack on Saudi palace in Jeddah
Gunman killed after attack near Saudi palace in Jeddah


text:
Latin American Protest Songs: New Song of Chile and Cuba
Designed by: Kait LaPorte
Students will learn about the music of the New Song movement by engaging with the melodies, rhythms, and lyrics of four selections from the Cancion Protesta: Protest Songs of Latin America album. This will teach them about the role music can play in social protest, as well as the specific historical, political, and cultural contexts of the songs.
Suggested Grade Levels: 9–12, college/university
Countries: Chile and Cuba
Region: Latin America
Culture Group: Latin American
Genre: Nueva canción and nueva trova
Instruments: Voice and guitar
Co-Curricular Areas: History, social studies, political science
National Standards: 1, 2, 6, 7, 8, 9
Actively listen to four songs
Discuss the environment in which this album was recorded and the overarching genre of New Song, as well as the cultural and political specificities of Chile and Cuba
Tap rhythms
Conduct beats
Sing and gesture the shape of melodies
Listen for instrumentation
Identify musical similarities and differences between nueva canción and nueva trova
Read the lyrics of the songs and discuss their meanings
Musical selections from Cancion Protesta: Protest Songs of Latin America on Paredon Records
Video: "Nueva Canción"
Maps and images of Chile and Cuba
Images of Violeta Parra and Varadero Beach
Lesson Segments:
"Coplas del Pajarito" (National Standards 1, 6, 8, 9)
"Me Gustan los Estudiantes" (National Standards 1, 6, 9)
"Por la Vida" (National Standards 1, 2, 6, 9)
"Varadero" (National Standards 6, 7)
Lesson 1: "Coplas del Pajarito"
Locate Chile on a map of South America.
Discuss the significance of the 1967 meeting of protest musicians from many different countries during which this album was recorded.
Introduce the concept of New Song, the genre of protest songs that comprises this album. This was a musical movement that began with the folkloric efforts of musicians such as Violeta Parra (Chile) and Mercedes Sosa (Argentina), who incorporated regional folk musical elements in their songs.
Watch the "Nueva Canción" video for further context.
"Coplas del Pajarito (The Little Bird's Complaint)" from Cancion Protesta: Protest Songs of Latin America (1970) | PAR01001
Listen to "Coplas del Pajarito."
Tap what feels like the strong beat.
Lift a hand along with each chord change in the guitar part (note: the chord changes triply as often during the chorus than during the verses).
Ask: What form is the song in? (Verse and chorus.)
Gesture the shape of the melody with your index finger.
Sing along with the melody.
Lift a hand along with the chord change while singing the melody, then ask the students if that changed their sense of where the beat was.
Read/summarize the English translation of the lyrics:
THE LITTLE BIRD'S COMPLAINT
Up in the branch of a cactus,
A little bird was complaining:
Everyone wants to be rulers,
Rulers with chains and with shackles.
Oh yes, oh no, dear little bird of my heart!
Oh yes, oh no, little bird so full of pain.
Latin American brothers,
Lift up our heads and be proud.
And let's demand from "the man"
All of our promises filled!
Our lands are not so poor!
But they come here from far away,
And leave us without a penny!
When a poor person asks for help,
They deny it on the spot.
They tell him so many stories
That he goes away thinking he's happy.
And if there's taxes to pay,
They send first to the poor.
The rich man is so very busy,
Hiding his dough under cover.
The nation demands of its sons
Respect and prudent wisdom.
The sons give back to their country
Governors with very thick skins.
The little bird sings no more.
From looking at so much injustice,
His little throat has gone dry!
Lesson 2: "Me Gustan los Estudiantes"
Discuss the Parra family.
The Parra family was known for its artistic and folkloric efforts. Violeta Parra, mother of Angel Parra (who recorded this song) is lauded as having been at the forefront of nueva canción Chilena, a musical style that fused highly developed artistry with political messages on behalf of the common people.
Violeta's children (including Angel and Isabela, who each contributed recordings to this album) carried on her tradition and often sing her songs, one of which is "Me Gustan los Estudiantes."
Violeta's brother, Nicanor, was also a well-known academic poet.
"Me Gustan los Estudiantes (I Love the Students)"
from Cancion Protesta: Protest Songs of Latin America (1970) | PAR01001
Listen to "Me Gustan los Estudiantes."
Conduct along with the recording in the time signature to which you feel most inclined.
Ask students to identify the time signature of the song.
Using an index finger, trace the shape of the melody.
Ask the students to reflect on what they just heard and gestured. Did the melody make large leaps in pitch (i.e., are there many large intervals), or did the pitch seem to move up or down in relatively small intervals?
Sing along with the melody while conducting the time signature identified by the students.
Ask the students which form the song is in.
I LOVE THE STUDENTS
I love the students,
Garden of joys,
Birds that do not fear
Either beasts nor police,
Nor frightened by bullets
Or packs of barking dogs,
Caramba, that's a great thing.
Long live astronomy!
Who roar like the winds
When you stuff their ears
With talks of cassocks or regiments!
They are like birds,
Free as the elements!
Long live experiments!
because they are the yeast
Of the bread that comes from the oven
Full of wholesome flavor
For the mouth of the poor
Who eats in bitterness.
Caramba, what a great things.
Long live literature!
Who are ready for a fight
If you try to say it's wheat
Knowing perfectly well it's chaff,
And who don't act deaf and dub
If you lay your cards on the table.
Caramba, that's a great thing!
Long live the books of law!
Lesson 3: "Por la Vida"
Locate Cuba on a map. Compare that location to that of Chile, and acknowledge the geographic reach of the New Song movement.
Discuss the role of Cuba and Fidel Castro in the organization of the environment from whence this album came. Tell the students that the gathering where this album was recorded occurred in 1967, when Fidel Castro organized several events that ran parallel to each other that brought together a multitude of artists and activists to exchange ideas and creative work.
These events were hosted by Cuba, and the main event was called OLAS, which is both an acronym for Organization of Latin American Solidarity as well as the word for "waves" in Spanish.
The artists who attended this musical gathering were from as far away as Italy, Tanzania, and Australia, as well as from various parts of Latin America. The CD, however, contains only recordings by artists from Latin America, including those from Uruguay, Peru, and Argentina, in addition to those from Cuba and Chile mentioned in this exercise.
OLAS was created in response to the Vietnam War.
"Por La Vida (For Life)"
Listen to "Por la Vida."
Clap on the offbeat guitar chords while paying attention to the song's tempo.
Ask students to reflect on what they have just clapped. Did the offbeat guitar chords always occur in the same rhythmic pattern? Did the tempo of the song stay consistent throughout?
Gesture the shape of the bass line played by the guitar.
Sing the bass line on a doo and clap the offbeat guitar chords.
Sing the vocal melody on a nah.
Now divide the class in two parts, asking one half to sing the vocal melody while the other half sings the guitar part and claps the offbeat guitar chords (each in the respective vocables assigned in the earlier steps).
Read the English translation to the song (see below) and ask students to summarize the general message based on what they've just heard.
Ask: Do you feel that the stylistic elements of the song match the message you have just described? Which elements are those?
It would be absurd and without reason
Not to know what to do with our joys,
To grip them in our hands,
And to go on walking with them
Through life, through life.
It woudl be stupid and criminal
To turn our backs on those who struggle every day,
Not to give them a hand,
But to go on shielded with it,
And I'll only tell you
How the great marjority thinks here,
About the question of these times:
If we are just like you,
And you aren't able to be happy,
What's the use of all our joys,
Joys, joys?
It would be absurd and criminal
Not to help you with more force every day,
Not to place ourselves at your side,
Nor to struggle here, with you
For life, for life,
Lesson 4: "Varadero"
Discuss the significance of Varadero Beach.
Varadero Beach was where these musicians gathered in 1967.
This recording, along with two others, was created while the group of musicians sat by the shore.
This song was recorded by Carlos Puebla who, in addition to being a musician, also served in the army.
"Varadero" is a song of celebration about how the beach shifted from being accessible solely to rich white tourists to now being available to the common people, such as the musicians on this album.
In light of this information, read the English translation of the lyrics:
"Varadero (Now It's Time for You and Me)"
Do you remember when Varadero
Was for the rich, nobody else,
And when the beach, on the beautiful beach,
The people were not able to even set foot?
That was in the hands of the "Misters"
And English was just about the only language.
Until one day the fun and games were cut off,
And ever since, Varadero belongs to the people!
And now, yes, and now yes,
Now Varader is for you and for me! (2x)
Now Varadero is no longer
The place where nearly always English was heard,
The grand palace of the great lord
Is enjoyed now by the worker.
And where Mr. DuPont used to live,
Now lives the cane-cutter José Ramón!
(repeat first verse and chorus)
Listen to "Varadero."
Keep the beat by stepping from left to right.
Continue stepping to the beat while gesturing the direction of the guitar chords with your shoulders (i.e., when the chord moves up, so do your shoulders). This can be somewhat stylized or dancelike.
Sing the guitar part while maintaining the beat by stepping from left to right.
Sing the melody to the chorus.
Sing the melody of the verses.
Divide the class in half, asking everyone to continue stepping to the beat while one half of the class sings the verses and the other sings the chorus.
Play "Coplas del Pajarito" and "Me Gustan los Estudiantes" again, asking students to take note of the stylistic elements of the song. For instance, what is the instrumentation? The language of the lyrics?
Remind students of the messages found in each of the lyrics. Are they similar? If so, how?
Ask students what makes each song different from the other. For example, if they had to take a listening quiz on both of these, what stands out to them as that which would make them remember the context and qualities of each song?
Now play "Por la Vida" again. Ask students how the song is similar to the two from Chile. Is the language the same? The instrumentation? The tempo?
Ask students what makes "Por la Vida" different from the two songs from Chile. Again, how might they remember the specificities of the song?
Remind the students of the message of "Por la Vida." How is it similar to or different from the two Chilean songs?
Play "Varadero" again. Ask students if it is similar to "Por la Vida" stylistically, and if so, how? How is it different?
Finally, ask students to reflect on all the pieces. What is common between all four? Are the messages similar? Are all the songs of similar tempo and instrumentation? Which song do the students feel stands out as being the most different from the others, and why?
Cancion Protesta: Protest Songs of Latin America
Coplas del Pajarito (The Little Bird's Complaint)
Anthology of Central and South American Indian Music
Cook's Tour of Stereo
Sacred Rhythms of Cuban Santería
African and Afro-American Drums


text:
Drake Revealed as Co-Writer on New Kanye Song, JAY-Z Credited on New Pusha-T Album
On the song "Yikes" from Kanye West's new album, Drake has been revealed as a lyricist and composer. There are 11 credited lyricists on "Yikes" in total. The lyricists credited are Ayub Ogada, Mike Dean, and James Mbarack Achieng. Pie'rre Bourne and Apex Martin have been newly credited as producers.
On Pusha-T's recently released Daytona album, JAY-Z is credited as a composer and lyricist on "The Games We Play" and "Infrared." Pusha-T interpolates JAY-Z's songs "Politics As Usual" and "The Prelude."
Does anyone fully write their own lyrics anymore? But hey, they aren't ghost writers if they're credited.
Previous Lil Boosie Supports Kim Kardashian and Trump's Prison Reform
Next Beyoncé and Jay-Z Drop Joint Album 'Everything Is Love' — Listen Now!


text:
Trailer (1) | Demo (1)
Multiwinia: Survival of the Flattest
Developer: Introversion Software
Publisher: Introversion Software
Introversion announces the release of Multiwinia: Survival of the Flattest, the fourth standalone game from this independent developer. Here's how they describe the game: "Multiwinia: Survival of the Flattest is Introversion's fourth stand-alone title. With a choice of six action-packed multiplayer game modes, and 40 unique maps set in one of the most beautiful, retro-arcade inspired game environs ever created, Multiwinia promises to be the ultimate homage to the halcyon days of gaming. Challenge your opponent to a game of stick-man slaughter, and watch digital-war unfold, as your Multiwinian army struggles to complete a chosen task faster and better than your rival's. It's fast, it's furious, and only the flattest will survive!"
Multiwinia: Survival of the Flattest - Comedic Spoof Trailer
Multiwinia: Survival of the Flattest Demo
Added: 2008-09-19 | Size: 48.92 Mb | Downloads: 1,864


text:
Blog of a Bookaholic
Stacking the Shelves - Haul of Epic Proportions!!
These are the books I've received over the last two weeks and I am SO excited! I also made a whole reading plan of books I'm going to read this month, but then...the library happened. I got to dance early so went to the library with my two friends, and they had gotten books I'd been wanting to read FOREVER and...I just couldn't say no! :P
And I just want to say thank you to Evie from Bookish for being one of the most kindest and awesomest people out there! xxx
*click on book cover to add to Goodreads page*
Physical Books To Review:
FANGIRL WITH ME. THE MORTAL INSTRUMENTS TO REVIEW. I CAN'T EVEN. And I got my second copy of Clockwork Princess which I loved reading! It's nice having two copies but will probably donate to my library :') Anyway, back to FANGIRLING! *spazzy panda dances*
E-galleys To Review
Library Books
Bought Books:
Saw The Luxe series at a charity store in near-perfect conditions so I had to buy them! I have the second BZRK book to review so I was glad I got the first one for so cheap! :D
The Nowhere Emporium by Ross Mackenzie was utterly magical and completely brilliant
Title: The Nowhere Emporium Series: N/A Author: Ross Mackenzie Genre: Middle-Grade, Fantasy Publication: March 5th 2015, Kelpies Pages: 280 Pages, Paperback Source: Thank you to Netgalley for sending me this book in exchange for an honest review! Rating: 4.5/5 cupcakes! When the mysterious Nowhere Emporium arrives in Glasgow, orphan Daniel Holmes stumbles upon it quite by accident. Before long, the 'shop from nowhere' -- and its owner, Mr Silver -- draw Daniel into a breathtaking world of magic and enchantment. Recruited as Mr Silver's apprentice, Daniel learns the secrets of the Emporium's vast labyrinth of passageways and rooms -- rooms that contain wonders beyond anything Daniel has ever imagined. But when Mr Silver disappears, and a shadow from the past threatens everything, the Emporium and all its wonders begin to crumble. Can Daniel save his home, and his new friends, before the Nowhere Emporium is destroyed forever? Would you like
Every Breath by Nicholas Sparks Review - The first Nicholas Sparks book I didn't like??
Title: Every Breath Author: Nicholas Sparks Series: N/A Publication: October 16th, Grand Central Publishing Pages: 320 Pages, Paperback Source: Library Rating: 3/5 cupcakes! #1 New York Times bestselling author Nicholas Sparks returns with a story about a chance encounter that becomes a touchstone for two vastly different individuals -- transcending decades, continents, and the bittersweet workings of fate. Hope Anderson is at a crossroads. At thirty-six, she's been dating her boyfriend, an orthopedic surgeon, for six years. With no wedding plans in sight, and her father recently diagnosed with ALS, she decides to use a week at her family's cottage in Sunset Beach, North Carolina, to ready the house for sale and mull over some difficult decisions about her future. Tru Walls has never visited North Carolina but is summoned to Sunset Beach by a letter from a man claiming to be his father. A safari guide, born and raised in Zimbabwe, Tru hopes to unravel some o
Two by Two by Nicholas Sparks was a stunning read
Title: Two by Two Series: N/A Author: Nicholas Sparks Genre: Adult Fiction, Women's Fiction, Romance Publication: October 4 th 2016, Sphere Pages: 496 pages, Hardcover Source: Library #1 New York Times bestselling author Nicholas Sparks returns with an emotionally powerful story of unconditional love, its challenges, its risks and most of all, its rewards. At 32, Russell Green has it all: a stunning wife, a lovable six year-old daughter, a successful career as an advertising executive and an expansive home in Charlotte. He is living the dream, and his marriage to the bewitching Vivian is the center of that. But underneath the shiny surface of this perfect existence, fault lines are beginning to appear...and no one is more surprised than Russ when he finds every aspect of the life he took for granted turned upside down. In a matter of months, Russ finds himself without a job or wife, caring for his young daughter while struggling to adapt to a new and baffl
Backgrounds and header made by me


text:
Apple Stops Signing iOS 9.2.1 so You Can No Longer Downgrade from iOS 9.3
Posted by Killian Bell on Apr 06, 2016 in iOS, iOS 9.2.1, iOS 9.3.4, iOS 9.3.3, iOS 9.3.2, iOS 9.3.1, iOS 9.3, Top Stories
Apple has stopped signing iOS 9.2.1 — its last iOS 9.2 update — preventing users from downgrading from iOS 9.3 and above. The move comes less than three weeks after Apple made its first iOS 9.3 update available to the public.
IPSW.me, a website that provides real-time signing status for Apple's firmware files, confirms that iOS 9.2.1 is no longer being approved by the company. This means that attempting to downgrade to it from a more recent release will simply throw up an error.
Of course, this isn't exactly bad news for jailbreakers, since there was no jailbreak for iOS 9.2.1 anyway. Apple patched two exploits that were being used with earlier versions of iOS 9 when it rolled out its iOS 9.1 release.
It doesn't really matter if you're running iOS 9.2.1 or a version of iOS 9.3, then. In fact, it seems there's a greater chance we'll see a jailbreak for iOS 9.3 at the moment, since that's what hackers are focusing their efforts on. Some have already jailbroken most versions of the software.
The only real reason to downgrade to iOS 9.2.1, then, is if it happened to run better than iOS 9.3 on your device. Unfortunately, that's no longer an option now. If you have iOS 9.2.1 and you're happy with it, then, you might want to think twice about upgrading.
You should also remembering that restoring your iOS device will also force an upgrade now that iOS 9.2.1 is not available.
Don't forget to join our Facebook Fan page, follow us on Twitter, add us to your circles on Google+, subscribe to our RSS feed or our Daily Newsletter for the latest updates on the iOS 9.3 jailbreak.


text:
Plaid Cymru announce Carrie Harper as choice to fight the Alyn & Deeside by-election
Published: Wednesday, Jan 3rd, 2018
NOTE: This content is old - Published: Wednesday, Jan 3rd, 2018.
Plaid Cymru have announced this evening that Carrie Harper has been chosen to fight the Alyn & Deeside by-election for the party.
Ms Harper who sites on Wrexham council and represents the Queensway ward said her party's campaign would 'focus on the way Welsh Labour was failing the NHS locally and the need to protect local communities from developers intent on building thousands of homes on greenfield sites'.
Cllr Harper who lives in Wrexham said: "This is a by-election that we all wish wasn't needed and my first thoughts are with the family of Carl Sargeant.
"Our campaign as a party will be to highlight the problems facing the NHS in Wales. Alyn and Deeside along with many other parts of Wales is seeing a crisis in GP practices, huge delays in getting treatment for orthopaedic and other services as well as long queues at A&E.
"Betsi Cadwaladr health board is running a huge deficit, despite being under the direct control of the Welsh Labour Government for the past 30 months with no prospect of improvement. GPs in Deeside as elsewhere are under pressure because of a failure to invest properly in a long-term training and recruitment programme that means this part of Wales has failed to keep pace with retirements.
"Plaid Cymru's solution, which we've been advocating for the past four years, is to train and recruit 1,000 extra doctors. There is no quick fix but the failure of the ruling Labour party to take action has led to this worsening crisis. If we keep voting the same way, we'll get the same results and nobody wants that."
Cllr Harper was involved in a campaign to keep maternity services in north Wales and challenged the then health minister Lesley Griffiths on the downgrading of special care baby units in Wrexham and Ysbyty Glan Clwyd.
She said: "I'm asking the people of Alyn and Deeside to put their faith in someone who will challenge the political establishment parties in Cardiff and London, who will stand up for local interests and defend our communities from the very worst that those parties are throwing at us."
"Flintshire is also facing the challenge of large-scale housing developments on greenfield sites. This is down to the Welsh Government imposing unreasonable housing targets on local councils. This has seen neighbouring Denbighshire and Wrexham councils being forced to increase the numbers of houses as a result and developers taking advantage.
"In many communities, developers are now applying to build hundreds of new houses on greenfield sites and my concern is that we're losing good farmland for commuter estates without having the necessary infrastructure to cope – our roads are congested, our schools are full and health and social services are pushed to the limit."
Llyr Gruffydd, Plaid Cymru's North Wales AM, said: "Carrie Harper has my full support as a campaigner with a proven track record in terms of fighting for better health services and for communities. We're all aware that the local health services face huge challenges due to Welsh Labour's failure to run Betsi Cadwaladr Health Board. The people of Alyn and Deeside deserve better than that."
She also won the backing of North Wales Police and Crime Commissioner Arfon Jones: "Carrie is a tireless campaigner who I've worked alongside over many years. She will be a strong voice for the people of Alyn and Deeside, who have the opportunity to send a clear message to Carwyn Jones down in Cardiff Bay that we must change direction."


text:
Home News Dubai Top 5 Reasons to Visit Dubai Safari
Dubai Lifestyle at a Glance
Top 5 Reasons to Visit Dubai Safari
As visitors and residents make the most of the outdoor season in the UAE, Dubai Safari invites guests to spend an unforgettable weekend at the new attraction that is home to the largest and most diverse array of animals in the country.
From enjoying a closer look at more than 250 species and gaining a deeper appreciation of wildlife diversity to creating happy memories of a unique family adventure – every trip to Dubai Safari promises an enjoyable experience for visitors of all ages
Here, we highlight five reasons why Dubai Safari should top your list of weekend plans:
Watch wildlife up-close at the UAE's largest drive-through animal exhibits
Enjoy a ride through the enchanting Safari Village in a comfortable bus, as you discover wildlife in their natural behaviors. Find predatory cats relaxing against cooling rocks at the UAE's only drive-through tiger exhibits, or Nile crocodiles lazing in the sun at the world's first drive-through crocodile exhibit. Meet the king of the jungle at the UAE's largest drive-through lion exhibit, or find hippos making a splash in the water at the UAE's only drive-through hippo exhibit. Along the way, say hello to the UAE's largest troop of baboons and other members of the Dubai Safari family, including giraffes, zebras, peacocks, antelopes, and many more. At the African Village, step into a fascinating world of birds, as you enter the UAE's largest walk-through aviary, and don't forget to catch at a glimpse of the moon bear when stopping by the Asian Village.
Meet a diverse mix of Arabian, African and Asian animals in one place
Come face-to-face with alluring desert animals such as the UAE's national animal Arabian oryx, in addition to the gazelle, ibex, Arabian wolf, ostrich, saiga antelope and mouflon at the Arabian Village. Watch gorillas, chimpanzees, monkeys, lemurs, the pygmy hippo, mandrill, duiker, okapi, bongo, African lions, and greater and lesser flamingos monkeying around at the park's African Village. Discover a treasure of rare Asian species at the Asian Village, including the Indian one-horned rhino, moon bears and gibbons.
Snake along at the Reptile House
A visit to Dubai Safari is incomplete without a stopover at the Reptile House located in the African Village. Learn about a wide variety of poisonous, non-poisonous, and endangered species of snakes, lizards, vipers and pythons, including the desert monitor, false-horned viper and Oman carpet viper, and many others.
Enjoy family moments with your children at the Kids Farm
Young animal-lovers can look forward to petting their favorite domestic animals at the Kids Farm, which offers an excellent learning environment for the little ones, as they enjoy playtime with ponies, goats, rabbits, turtles and more. A dedicated and friendly staff closely monitors their interaction with these kids-friendly animals to ensure a safe experience for the whole family.
Enjoy a picnic with friends at the Wadi Area
Visitors looking to catch up with friends and family can host a fun-filled picnic at Dubai Safari's Al Wadi Area – a large stretch of green space offering a safe and relaxing atmosphere for the kids to run around while parents relax in the open field filled with soothing sounds of flowing water. A variety of food trucks dotting the whole park offer ample choice in refreshments and light bites to fuel the experience.
Located in Al Warqaa 5 district across Dubai's Dragon Mart off the Dubai-Hatta Highway. Dubai Safari is open daily from 9am to 7pm daily including weekends.
Dubai Safari
Ramadan in Dubai Weekly Activities
Westlife's 'Twenty Tour' Comes to Coca-cola Arena, Dubai
Emirates Holidays Launches New Travel Collection for 2019 – 2021


text:
Dark TIFF. Films reviewed: We Are Never Alone, Manchester by the Sea, The Fixer PLUS Pop VR at #TIFF16 and FIVARS
Posted in Czech Republic, Drama, Family, Journalism, Movies, Romania, Sex Trade, US by CulturalMining.com on September 9, 2016
https://danielgarber.files.wordpress.com/2016/09/garber-september-9-16-review.mp3
Take a trip down to King street between Spadina and University and you'll see TIFF, the Toronto International Film Festival, in full swing, with celebrities everywhere and free concerts and events. Featured this year for the first time are movies not from Hollywood, nor India's Bollywood, but from Nollywood, Nigeria's thriving movie industry. Another new attraction at TIFF is POP VR, short films and documentaries shot in 3-d, and 360: movies you watch all around you. Using special headgear, earphones and a smartphone attached to the front, you can see things like a cartoon about aliens, a doc about a feminist movement in India to enter sacred temples, and a Cirque de Soleil performance that puts you right in the middle of a Chinese sword fight! VR is still developing, but it's a force to be reckoned with. This week I'm talking about three great dark movies playing now at TIFF. There's a Czech village purple with paranoia, a man in New England with a dark history, and some yellow journalism in Romania.
We Are Never Alone
Dir: Petr Vacla
Two families live in a remote small town in the Czech Republic built around a fortress-like prison. One is headed by a burly single dad (Miroslav Hanus), a prison guard, with a small son. He believes minorities and ex-cons are out to get him, and is writing a rightwing nationalist manifesto to rid the country of subversives and Roma. He longs to see those strong Czech bridges and dams being built again and the factories producing more widgets. In another family, a hypochondriac dad (Karl Roden) spends his time trying to photograph his back with a cellphone. He desperately seeks evidence of cancer. His wife (Lenka Vlasakova) stares longingly out the window all day of a roadside convenience store where she works.
Meanwhile a swarthy part-time pimp and his stand-offish junkie girlfriend drive around in a broken down red cart purchasing garish gifts. But things go really wrong when the two paranoid men meet, and begin to blend their strange theories and conspiracies. And unbeknownst to them both, their young sons are gaslighting their dads, trying to drive them crazy, by secretly leaving increasingly large dead animals on their own doorsteps. Things start to spiral into increasingly awfulness as the three groups interact.
We are Never Alone is a dark story of nationalism, paranoia and apathy win modern-day Czech Republic. It has great acting, an unpredictable plot, and, thankfully, an underlying streak of absurdist comedy that lets usavoid the dread of the characters' lives.
Dir: Kenneth Lonergan
Lee Chandler (Casey Affleck) is a handyman who lives alone in Quincy, just outside Boston. But he's called back to his hometown in Manchester, when his divorced brother John dies. It's up to him to inform his nephew Patrick that his dad is dead. Patrick (Lucas Hedges) is 16 years old, on the school hockey team and in a band. Lee and Casey were always been close, until something terrible happened, and Lee left town. Now, suddenly and against his wishes, he finds himself Patrick's de facto dad. It's written in his brother's will. He doesn't know how to
raise a teen. He did have kids once, but that was a long time ago.
At first he acts like Chris's buddy – lets him drink, take girls home, say or do whatever he likes. But gradually reality sets in and Lee realizes he has to do the right thing: either raise him properly or find someone else who can. Trouble is Lee's reputation is dirt in this town, and no one will hire him. Ghosts of his past keep popping up, like Randi, his ex-alcoholic, ex-wife (Michelle Williams).
Although this may sounds like a typical movie, it's not. The form, emotions and acting set it apart. It's edited in a chop-up style, with flashbacks coming unannounced right after a scene set in the present. So you have to pay attention. Emotionally, it's a devastating tearjerker, as the hidden past is gradually revealed. The whole film is exquisitely structured, with certain scenes repeated but with new, subtle variations and revelations. And the acting – especially Casey Affleck and Lucas Hedges – is just so good. Oscar good. Great movie.
The Fixer (Fixeur)
Dir: Adrian Sitaru
Radu (Tudor Istodar) is a journalist living in Bucharest with his wife and small son, He comes across an exclusive news story – a real scoop. A young woman named Anca (Diana Spatarescu)
has escaped from her Parisian pimp and made her way back to a small town in northern Romania. If they can track her down, a first hand interview could expose the huge network of underage trafficking across Europe. Agence France Press sends their trip TV reporters to capture her on film, telling her story. But that's easier said than done. Radu has to call in favours, smoothe out troubles, and serve as translator, guide and journalist for Axel (Mehdi Nebbou) the French reporter. He is stymied by local thugs, a recalcitrant mother superior sheltering the girl in a nunnery, and even Anca herself, who doesn't trust the French reporters. And as the story develops he starts to wonder: do journalists want to expose stories for the public good… or merely to boost their ratings?
The Fixer is another shocking movie. Like many Romanian movies it is hyper-realistic and slow to develop, but when it does — wow! It slams you and makes you question what you thought was happening. Distinctive cinematography, and again, great acting, The Fixer is a potent indictment of investigative journalism.
We are Never Alone, The Fixer, and Manchester by the Sea are all playing at TIFF. Go to tiff.net for more information. And for another view of augmented and virtual reality, check out fivars, another Toronto VR festival that takes beyond where Pokemon-go can go. Go to fivars.net for details.
This is Daniel Garber at the Movies, each Friday morning, on CIUT 89.5 FM and on my website, culturalmining.com
Tagged with: Adrian Sitaru, Casey Affleck, Kenneth Lonergan, Manchester by the Sea, Petr Vacla, The Fixer, TIFF16, We Are Never Alone
« Sand and snow. Films reviewed: A Tale of Love and Darkness, In Order of Disappearance
Daniel Garber talks to director Mahmoud Sabbagh and stars Hisham Fageeh and Fatima Al Banawi about Barakah meets Barakah at #TIFF16 »


text:
Yes! Elusive John Fullbright Announces New Album, "Liar"
photo: Jackson Adair
John Fullbright was the well-beloved songwriting wunderkind nominated for a Grammy who we all thought was the bright future of Americana, who then turned elusive performer only a few knew exactly what happened to. But now the early member of the Turnpike Troubadours is back after an eight year hiatus of releasing songs and touring significantly under the "John Fullbright" name with a new release coming September 30th called Liar.
Though John Fullbright has been a favorite subject of "Where Are They Now?" inquiries, he hasn't been completely in hibernation. Just ask the folks in the Tulsa, Oklahoma music scene, where Fullbright has been lugging around an electric piano from stages small to smaller, playing sometimes under his own name, and performing regularly in the bands of others, finding his musical muse decidedly outside of the national spotlight, and just having fun singing and performing songs no matter who wrote them.
But he couldn't stay out of the national spotlight forever, so he's finally re-emerging, but with a very Tulsa-centric approach since that's where he's found his musical comfort zone. The new album was recorded at Steve and Charlene Ripley's farm-to-studio compound in northeastern Oklahoma shortly after Steve's passing, with Fullbright and Charlene acting as producers. They also brought in famous Tulsa musicians Jesse Aycock, Aaron Boehler, Paul Wilkes, Stephen Lee, and Paddy Ryan as the album's wrecking crew.
"It was such a collaborative thing with some really cool voices," says Fullbright. "It's just like playing music in Tulsa. Everybody kind of does whatever they do, and it works … It's been a process of learning how to be in a community of musicians and less focusing on the lone, depressed songwriter … just playing something that has a beat and is really fun. That's not to say there are no songs on this record where I depart from that, because there are, but there's also a band with an opinion. And that part is new to me."
John Fullbright's last album Songs from 2014 most certainly had its moments, but you could tell the songwriting process had gotten into his head a bit. Sometimes early success—like Fullbright enjoyed with his 2012 album From The Ground Up—is not the slingshot for a career, but can scuttle things, especially for songwriters who want to remain grounded, and are keenly self-aware.
"What rules didn't I have?" Fullbright says about his former songwriting self. "Even like, how many syllables were in a line, I had arbitrary rules for. So much of that has gone out the door, and I'm so much happier. It's really just the idea that you don't have to do this by yourself. It's so much more fun to collaborate."
You can hear that newfound freedom in the opening single for the album "Paranoid Heart." It starts off like a sweet acoustic singer/songwriter tune, but blossoms into a full-blown folk rock song. Those who have seen John Fullbright perform during the last eight years can attest to the passion and soul he brings to performances. He's no coffee shop songwriter, at least not anymore.
Liar will come highly anticipated by John Fullbright fans old an new, and is now available for pre-order.
1. Bearden, 1645
2. Paranoid Heart
4. The Liar
5. Unlocked Doors
6. Where We Belong
7. Social Skills
8. Lucky
9. Blameless
10. Poster Child
11. Safe To Say
12. Gasoline
© 2022 Saving Country Music
Aaron Boehler, Jesse Aycock, John Fullbright, Paddy Ryan, Paul Wilkes, Stephen Lee, The Liar
CountryKnight
I hope he didn't pay money for that publicity shot.
Maybe Jamey Johnson will be next. Or Hank III.
Eric (Waitin' in the Weeds)
Haha…it looks like a still from a documentary where the neighbor is being interviewed about some murder that took place next door.
This is simply excellent news. I've missed John Fulbright. About 3 years ago, shortly before the start of the pandemic, I was lucky enough to see him tour with Patty Griffin. Their solo sets were outstanding and I loved their duet on I Shall Be Released. The sound is not great, but check them out together: https://youtu.be/O533pEeYkcU
FRICK YEA! This is awesome news. So happy to see that his incredible level of talent is not wasted any longer.
Jake Cutter
July 22, 2022 @ 12:04 pm
So pumped! I saw him when he did the Tulsa revue with a bunch of the Tulsa artists and it was great but have been waiting a long time for a new album and a headlining show!
Di Harris
Love to watch him play the piano/keyboard(s).
Very gifted.
Ive seen him perform an hour and a half, in a listening room kinda place, and he was very intense. A lotta weeper tunes, definitely gotta be in the mood for that kinda thing. Kinda music that i kick back with some good bourbon. I saw him another time at a festival and not sure it resonated with the big crowd in the hot sun. Hes a songwriter first, musician second, but high energy stuff isnt his forte. Is he talented? Definitely. I have no doubt this album is gonna be pretty good.
Hank Charles
Admittedly haven't really listened to Fullbright in forever, though "Moving" remains a go to, drunken belt along.
I do like the single though.
Will have to go back and listen to his older stuff. Not familiar with his catalog, but not really a fan of this first single. Just not my style, I suppose. Little too rock and roll-ish to me. Almost gives me Springsteen vibes after one listen.
Springsteen would dribble a basketball through a minefield just to hear Fulbright fart through a walkie-talkie.
Sir Adam the Great
Well, praise the Lord and pass the ammunition!
Do you know how many times I've listened to "Songs"? A metric boatload.
DenverMike
Been waiting for social skills to be released. Looking forward to this. Hopefully there will be a vinyl pressing.
3 songs into this album and it's the Album of the Year without question. Nothing else has even come remotely close. Game set match.