technology:http

’Fort Trump’: Donald Trump proposes US military base in Poland http...
▻https://diasp.eu/p/7738649

’Fort Trump’: Donald Trump proposes US military base in Poland ▻https://www.theguardian.com/world/2018/sep/18/fort-trump-us-military-base-poland-russia #Poland #DonaldTrump #Russia #USnews #Europe #Worldnews

Child drownings in Germany linked to parents’ phone ‘fixation’ http...
▻https://diasp.eu/p/7575637

Child drownings in Germany linked to parents’ phone ‘fixation’ ▻https://www.theguardian.com/lifeandstyle/2018/aug/15/parents-fixated-by-phones-linked-to-child-drownings-in-germany #Germany #Swimming #Technology #Europe #Worldnews #Smartphones #Mobilephones #Telecoms

Keep Your Logs Close And Your Code Closer
▻https://hackernoon.com/keep-your-logs-close-and-your-code-closer-9cc25bf9d413?source=rss----3a8

https://cdn-images-1.medium.com/max/1010/1*qaUPNEbqVtB1244OKb_Rhg.png

Lets talk about web applications and #logging. For most people, when talking about log analysis or log events, the Apache log format is the first that comes to mind as a good example of a log event. But is Apache log content enough to understand what is going on in your system? Let’s take a closer look.Custom output of Apache access logWhen sending an ordinary GET request to your web server, everything seems perfect. For the following requestGET /index.php?page_id=1 HTTP/1.1Host: www.unionselect1.euYou will see a proper event description in the Apache access log:423.619.551.990 — — [06/Jul/2018:14:31:52 +0300] "GET /index.php?page_id=1 HTTP/1.1" 200 795 "-" "-"At first this looks quite good: you have the timestamp, IP address that the request originated from, (...)

#php #log-analysis #security #attacking-logs

GRPC BFF for #swift iOS App
▻https://hackernoon.com/grpc-bff-for-swift-ios-app-efdd52df7ce2?source=rss----3a8144eabfe3---4

https://cdn-images-1.medium.com/max/1024/1*vpu1C2hxzZbeFrMbU1vSSQ.png

Using gRPC (with HTTP/2 Stream) for Mobile-Backend networking to optimize UX responsiveness / reactiveness and simplify Mobile App development without touching your backend REST Api.gRPC Mobile BFFThis tutorial is focused on how Backend For Frontend (BFF) design patternrepresent Mobile App developer “Best Friend Forever” and in particular how different technology could help implementing the best BFF that will result on best reactiveness and responsiveness for Mobile Apps.Generally speaking BFF goal is to simplify client app development time decoupling “service API” calls, potentially reducing the number of calls and sharing eventually some logic across different client implementations optimizing in general Networking and Data transformation while adding shared capability for data Joining, (...)

#react

Why Bluzelle is Different
▻https://hackernoon.com/why-bluzelle-is-different-6fb98f9ddc84?source=rss----3a8144eabfe3---4

https://cdn-images-1.medium.com/max/1024/0*Cz2NssUAIhKWGD8u.png

We frequently get asked how Bluzelle is different from a number of data storage solutions, including but not limited to Filecoin, Storj, Sia, and IPFS. The comparison is not ideal because, though all of these services can be used to store information, they answer different problems. For example, bitcoin itself can be used to store data, but using it as the data storage for a database would result in a comically slow and expensive application. For a more realistic example, consider IPFS: it can in theory be used to store data, but it provides no guarantee about how long the data will be available unless you’re hosting it yourself. IPFS is more about addressing and transporting data. It can be thought of as a transport protocol somewhere between bittorrent and HTTP.To answer the question, (...)

#blockchain

Liste des types MIME communs - HTTP | MDN
▻https://developer.mozilla.org/fr/docs/Web/HTTP/Basics_of_HTTP/MIME_types/Complete_list_of_MIME_types

#mime-type #response_header

Mock it until you have it
▻https://hackernoon.com/mock-it-until-you-have-it-c0785d327476?source=rss----3a8144eabfe3---4

https://cdn-images-1.medium.com/max/1024/1*xVvP9PrhFcmhMbQVjYa6hw.jpeg

Photo by rawpixel on UnsplashMock the HTTP and HTTPS websites and REST APIs so that you don’t depend on these services or internet while working on any related #development or automated testing.When developing a new client facing application either desktop, web or mobile, on of the biggest challenge is availability of right web services of API which might be part of your own server or some other third party web services if you are integrating your application to third party system. This problem also arises if application and the web services which are required to be consumed are being developed in parallel due to unavoidable situations.This problem is not just limited to development, its also a challenge in automated/manual testing. Any testing is only useful if its reliable. Having this (...)

#automation-testing #api-integration #mobile-app-development #mocking

dredd: Language-agnostic HTTP API Testing Framework
▻https://github.com/apiaryio/dredd

“Dredd is a language-agnostic command-line tool for validating API description document against backend implementation of the API.”

#API_test_HTTP_clevermarks

healthchecks.io - Monitor Cron Jobs. Get #Notified When Your #Cron Jobs Fail
▻https://healthchecks.io

Make a HTTP GET request to this address from your cron job, daemon, script or long running task. When this address is not requested for a set time period, you will get alerted. Below are snippets that are ready to be copy/pasted into your own scripts.

https://healthchecks.io/static/img/my_checks.png https://healthchecks.io/static/img/period_grace.png https://healthchecks.io/static/img/cron.png https://healthchecks.io/static/img/channels.png

sources dispo ici : ▻https://github.com/healthchecks/healthchecks
une instance ouverte par ici : ▻https://ping.hostux.info

As Google and AWS kill domain fronting, users must find a new way to fight censorship - TechRepublic
▻https://www.techrepublic.com/article/as-google-and-aws-kill-domain-fronting-users-must-find-a-new-way-to-fi

Google and Amazon have both made technical changes to stop the practice of domain fronting, which Signal uses to circumvent censorship in certain countries.
The technique has also been used by a Russian state-sponsored attack group.

Recent changes in the software stack of Google App Engine broke a technique called “domain fronting,” which had been used most notably by the privacy-focused messaging service Signal. The app had used the technique since 2016 to allow users in Egypt, Oman, Qatar, and the United Arab Emirates to continue using the app, despite apparent attempts to block Signal.

Blocking-resistant communication through domain fronting
▻https://www.bamsoftware.com/papers/fronting

Abstract

We describe “domain fronting,” a versatile censorship circumvention technique that hides the remote endpoint of a communication. Domain fronting works at the application layer, using HTTPS, to communicate with a forbidden host while appearing to communicate with some other host, permitted by the censor. The key idea is the use of different domain names at different layers of communication. One domain appears on the “outside” of an HTTPS request—in the DNS request and TLS Server Name Indication—while another domain appears on the “inside”—in the HTTP Host header, invisible to the censor under HTTPS encryption. A censor, unable to distinguish fronted and non-fronted traffic to a domain, must choose between allowing circumvention traffic and blocking the domain entirely, which results in expensive collateral damage. Domain fronting is easy to deploy and use and does not require special cooperation by network intermediaries. We identify a number of hard-to-block web services, such as content delivery networks, that support domain-fronted connections and are useful for censorship circumvention. Domain fronting, in various forms, is now a circumvention workhorse. We describe several months of deployment experience in the Tor, Lantern, and Psiphon circumvention systems, whose domain-fronting transports now connect thousands of users daily and transfer many terabytes per month.

#internet #censure

Create a private local #docker registry
▻https://hackernoon.com/create-a-private-local-docker-registry-5c79ce912620?source=rss----3a8144

On your machines inside a VPN, there are use-cases where a private docker registry is handy especially if you want to have a customized image built for your stack.The caveat is that docker automatically assumes that all your connections are encrypted via https . And that means you need to have domain to encrypt your traffic on https protocol. This guide will help you setup a regisry without having a DNS and a valid SSL/TLS Certificate:Question:Ahm.. Ken there is already a Tutorial on docker official docs about creating a private registryDeploy a registry serverAnswer:The docker official docs are a good enough starting point when you want to learn the basics and the theory. However you will need to dig around if you want to make it registry work without a proper SSL Certificate and (...)

#ssl-certificate #docker-registry #ubuntu #linux

How to Migrate a #go API to #serverless (in under 10 mins)
▻https://hackernoon.com/how-to-migrate-a-go-api-to-serverless-in-under-10-mins-e27b8a31202e?sour

I’m going to step you through the process converting an existing Go API to serverless and deploying it to to #aws Lambda & API Gateway with AWS Severless Application Model (SAM). The whole process should take under 10 minutes. Let’s get started!1. SetupOur example API uses the HttpRouter package so let’s install that first.$ go get github.com/julienschmidt/httprouterWe have a single HTTP handler defined that will return a 200 HTTP response with the body ok.# handlers.gopackage mainimport "net/http"func HealthHandler(w http.ResponseWriter, r *http.Request) w.WriteHeader(http.StatusOK) w.Write([]byte("ok"))Our entrypoint to the application, the main function, attaches the HealthHandler to the /healthz route and listens for HTTP requests on port 8080.# (...)

#devops #programming

Deploy your Flask API to any #serverless Cloud Platform using this Simple Pattern
▻https://hackernoon.com/deploy-your-flask-api-to-any-serverless-cloud-platform-using-this-simple

I’m going to demonstrate how to make a Flask app serverless without locking you into any tooling or cloud platforms. It doesn’t require any application code changes or serverless frameworks so you can continue to develop locally like you always have.Ideally you should re-architect your application into small discrete functions to take full advantage of serverless. However, if you want to migrate a legacy application or just a quick way to get started with serverless then this is a good approach to take.Create Flask ApplicationWe are going to create a Flask application for Python3.6+.SetupFirst create a virtual environment and install dependencies.$ python3 -m venv env $ source env/bin/activate$ pip install flask flask-lambda-python36 http-promptApplication CodeAdd the code below which (...)

#development #programming #python #aws-lambda

Open source isn’t the community you think it is | ITworld
▻https://www.itworld.com/article/3268001/open-source-tools/open-source-isnt-the-community-you-think-it-is.html

https://images.techhive.com/images/article/2017/03/6554314981_7f95641814_o-100714680-large.3x2.jpg

Name your favorite open source project, and the odds are good—very good—that a small handful of contributors account for the vast majority of significant development thereof. The odds are just as good that most of those contributors work for just one or a few vendors. Such is open source today, and such has been open source for the past 20 years.

So, does that mean open source is really just commercial software by another name?
[ Community: Who really contributes to open source. | Celebration: 20 years of open source: Its world-changing history. | Contrarian: 20 years on, open source hasn’t changed the world as promised. ]

No, it does not. But it means the popular stereotype of a broad community coming together to create software is a myth. The reality of open source is different than the myth, but still a good, positive alternative to commercial software.
Why only a few vendor-paid developers do almost all the work

Thirteen years ago, I dug into academic research that showed how Mozilla’s Firefox browser and the Apache HTTP Server were both developed by a small cadre of core contributors. While the population of contributors broadened with things like bug fixes, the central development work for these and virtually all other projects was done by a talented group of core committers.

Today, an analysis from Redmonk’s Fintan Ryan on projects housed under the Cloud Native Computing Foundation shows nothing has changed. Kubernetes is the most famous CNCF tenant, with Google and Red Hat contributing the lion’s share of code, but the other, lesser-known CNCF projects follow this same pattern. Indeed, perhaps the only real surprise in this fact of concentrated contributions is that the pattern has remained constant for so long.

Look at any CNCF project, Ryan has shown, and you’ll see that virtually all of its contributions come from fewer than ten people. In fact, if you drill down deeper, you see that most work is done by just two people on any given project.

As Ryan has written:

It is fair to say that for almost all of the projects in the CNCF, specific vendors account for most of the development work being done.

This is not to say that this is a bad thing—it is not; it is just a statement of reality. While the broad community around the projects may be large, the number of significant core contributors is relatively small, and the number of truly independent contributors is smaller still. This pattern is common across many open source projects.

Not just “many” open source projects—all of them. I can’t think of a significant counterexample. For big, diverse projects like Linux, if you peel away the overall wrapping and count contributors for the subprojects, you see the same phenomenon: A few developers, nearly all of them employed by vendors, generate a huge percentage of core contributions.

But if you step back, you realize it could only be thus. After all, anysoftware project degrades in efficiency the more bodies you throw at it (as Fred Brooks’s seminal book The Mythical Man Month anticipated).

As for why most of these developers would be funded by vendors, that’s easy to explain, too: Developers have rent to pay, too, and they can only afford to heavily contribute if they are paid to do so. Companies, pursuing their corporate self-interest, employ developers to work on projects that help their business.

Smart vendors understand how to use this to their advantage. Red Hat, for example, devoted part of its most recent earnings call to tout its Kubernetes contributions (second only to Google). As CEO Jim Whitehurst argued, those contributions let Red Hat both influence Kubernetes’s roadmap as well as better support its customers. Contributions, in short, give it a competitive advantage in selling Kubernetes.
What “community” really means for open source

So, is “community,” that mythical beast that powers all open source, just a chimera?

The easy answer is “no.” That’s also the hard answer. Open source has always functioned this way.

The interesting thing is just how strongly the central “rules” of open source engagement have persisted, even as open source has become standard operating procedure for a huge swath of software development, whether done by vendors or enterprises building software to suit their internal needs.

While it may seem that such an open source contribution model that depends on just a few core contributors for so much of the code wouldn’t be sustainable, the opposite is true. Each vendor can take particular interest in just a few projects, committing code to those, while “free riding” on other projects for which it derives less strategic value. In this way, open source persists, even if it’s not nearly as “open” as proponents sometimes suggest.

Is open source then any different from a proprietary product? After all, both can be categorized by contributions by very few, or even just one, vendor.

Yes, open source is different. Indeed, the difference is profound. In a proprietary product, all the engagement is dictated by one vendor. In an open source project, especially as licensed under a permissive license like Apache 2.0, there’s always the option for a new developer or vendor to barge in and upset that balance. Kubernetes is a great example: Google started as the sole contributor but Red Hat (and others) quickly followed.

No, this doesn’t help the casual corporate contributor that wants influence without making a sacrifice of code, but it does indicate that it’s possible to have an impact on an open source project in ways that proprietary products don’t afford.

In short, there’s little to fear and much to celebrate in how open source works. Indeed, it is precisely this self-interested seeking of individual corporate (or personal) benefit that should keep open source flowering for decades to come.

As should be evident 20 years into open source’s rise, the model works at both the community level and at the vendor level. Will it work for another 20? Yes.

This story, “Open source isn’t the community you think it is” was originally published by InfoWorld.

#Logiciels_libres #Communs #Communautés

ZUCKERBERG HITS USERS WITH THE HARD TRUTH : YOU AGREED TO THIS (http...
▻https://diasp.eu/p/6983007

ZUCKERBERG HITS USERS WITH THE HARD TRUTH : YOU AGREED TO THIS #facebook #privacy

Intercepting HTTP requests from #electron apps with #postman
▻https://hackernoon.com/intercepting-http-requests-from-electron-apps-with-postman-6edc011b0c12?

https://cdn-images-1.medium.com/max/1024/1*5M2sPkeaWNiPIz-lUgH4rg.png

Not all APIs are documented. In a recent project — VSCodeThemes, I set out to scrape the Visual Studio Marketplace without an official API.Using Chrome’s network inspector and capturing requests made from the #vscode desktop app, I was able reverse engineer the marketplace API.This post will cover how you can use Postman to intercept HTTP requests from Electron applications with only a few clicks.Start Postman’s proxyThis first thing you’re going to do is open Postman. If you don’t have it you can download it from here.Once it’s opened, configuring Postman’s #proxy server is as simple as clicking on the Satellite icon.Click the Satellite icon to configure the proxy server.Using the defaults will start the proxy server on port 5555 and log all output to history. Click the Connect button to start the (...)

#reverse-engineering

HTTP Status Codes you probably haven’t heard of
▻https://hackernoon.com/http-status-codes-you-probably-havent-heard-of-edf780a9f391?source=rss--

https://cdn-images-1.medium.com/max/1024/1*Ehz2uGXNdRTqbTrkHb7sNQ.jpeg

And might not often see in the wild.A colleague of mine stumbled upon a HTTP status code that the team wasn’t sure of: 207. When I took a look I stumbled across a few others I hadn’t really been made aware of throughout my 4 year developer career.Lets go through some interesting codes…207: Multi-StatusA status code sent to represent information about multiple resources where appropriate.Imagine you have an aggregation layer that might make calls against multiple APIs to collate & process the data and return a JSON payload. If one of the calls succeeds and several others fail what’s the #api to do?It’s not a 4xx, the resource was found; it’s not a 300, there’s no redirect; it’s not a 5xx, the aggregation server didn’t fail to handle something and explode so it’s technically a 200 in the eyes (...)

#programming #https #web-development #http-status-code

REST is not the Best for Micro-Services #grpc and #docker makes a compelling case
▻https://hackernoon.com/rest-in-peace-grpc-for-micro-service-and-grpc-for-the-web-a-how-to-908cc

For quite a long time, when Service Oriented Architecture (SOA) and WebService were the talk of the tech town, most of the software systems were built using SOAP and related WSDL technology. I was involved in multiple projects built using SOAP technology. I started first dabbling with REST when faced with the need to create a quick prototype north bound/external interface for a system.I, like many others, fell in love with REST immediately ;more so after reading more about it, in the jewel of a paper (Architectural Styles and the Design of Network-based Software Architectures,) by Roy Fielding -principal author of HTTP protocol and consequently founder of the World Wide Web based on the internet. Soon along came JSON; and REST and JSON quickly replaced the cumbersome inefficient SOAP (...)

#grpc-web #microservices

Using SSE Instead Of WebSockets For Unidirectional Data Flow Over HTTP/2
▻https://www.smashingmagazine.com/2018/02/sse-websockets-data-flow-http2

“When it comes to data delivery from the server to the client, we are limited to two general approaches: client pull or server push. As a simple example with any web application, the client is the web browser. When the website in your browser is asking the server for data, this is called client pull. The reverse, when the server is proactively pushing updates to your website, it is called server push.”

#ServerSentEvents_push_server_client_communication_HTTP2_WebSocket_clevermarks

Everything you need to know about HTTP security headers
▻https://blog.appcanary.com/2017/http-security-headers.html#referrer-policy

Some physicists 28 years ago needed a way to easily share experimental data and thus the web was born. This was generally considered to be a good move. Unfortunately, everything physicists touch — from trigonometry to the strong nuclear force — eventually becomes weaponized and so too has the Hypertext Transfer Protocol. What can be attacked must be defended, and since tradition requires all security features to be a bolted-on afterthought, things… got a little complicated. This article explains what secure headers are and how to implement these headers in Rails, Django, Express.js, Go, Nginx, Apache and Varnish. Please note that some headers may be best configured in on your HTTP servers, while others should be set on the application layer. Use your own discretion here. You can test (...)

“Sites log your keystrokes and mouse movements in real time, before you click submit.”
▻https://arstechnica.com/tech-policy/2017/11/an-alarming-number-of-sites-employ-privacy-invading-session-replay-scri

Another example: the account page for clothing store Bonobos leaked full credit card details—character by character as they were typed—to FullStory. Adding insult to injury, Yandex, Hotjar, and Smartlook all offer dashboards that use unencrypted HTTP when subscribing publishers replay visitor sessions, even when the original sessions were protected by HTTPS.

#privacy

GNU Terry Pratchett
▻http://www.gnuterrypratchett.com/index.php

In Terry Pratchett’s Discworld series, the clacks are a series of semaphore towers loosely based on the concept of the telegraph. Invented by an artificer named Robert Dearheart, the towers could send messages “at the speed of light” using standardized codes. Three of these codes are of particular import:

G: send the message on
N: do not log the message
U: turn the message around at the end of the line and send it back again

When Dearheart’s son John died due to an accident while working on a clacks tower, Dearheart inserted John’s name into the overhead of the clacks with a “GNU” in front of it as a way to memorialize his son forever (or for at least as long as the clacks are standing.)

#terry_pratchett #discworld #sémaphores

The 80/20 Guide to ES2015 Generators
▻http://es2015generators.com

“The notion of generators is a groundbreaking new feature in ES2015, one of the few that isn’t trivial to implement using the old ES5 spec. Generators help you write asynchronous code without callbacks, calculate the billionth Fibonacci number without blocking the event loop, and write web servers that actually know when they’re done writing the HTTP response.”

#ES2015_JavaScript_Generator

Comment le nouvel algorithme de Google détruit la presse progressiste aux Etats-Unis

Une lettre du boss de Alternet dans le cadre d’une demande de soutien. Un tableau des plus significatif :

https://s3.amazonaws.com/s3.alternet.org/images/AlterNet_Traffic_Data.png

et pour les lecteurs pressés cette phrase des plus claire :

So the reality we face is that two companies, Google and Facebook—which are not media companies, which do not have editors, or fact checkers, which do no investigative reporting—are deciding what people should read, based on a failure to understand how media and journalism function.

La lettre dans son intégralité.

Dear AlterNet Reader:

The story I am going to share with you is very disconcerting for independent media and America’s future, and frankly it is unprecedented in AlterNet’s history.

It is hard to imagine anything scarier than Donald Trump’s presidency. But this problem is actually bigger than Trump, and it is a situation that certainly helps him.

This story affects you too, in ways you may not fully be aware of—in fact it affects our whole media system and the future of democracy, and that is not an exaggeration.

We have not yet gone public with our own story. I wanted you, and the rest of our supportive community, to know the details first. We are going to need your help.

The New Media Monopoly Is Badly Hurting Progressive and Independent News

The story is about monopoly on steroids. It is about the extreme and unconstrained power of Google and Facebook, and how it is affecting what you read, hear and see. It is about how these two companies are undermining progressive news sources, especially AlterNet.

In June, Google announced major changes in their algorithm designed to combat fake news. Ben Gomes, the company’s vice president for engineering, stated in April that Google’s update of its search engine would block access to “offensive" sites, while working to surface more “authoritative content.”

This seemed like a good idea. Fighting fake news, which Trump often uses, is an important goal that we share.

But little did we know that Google had decided, perhaps with bad advice or wrong-headed thinking, that media like AlterNet—dedicated to fighting white supremacy, misogyny, racism, Donald Trump, and fake news—would be clobbered by Google in their clumsy attempt to address hate speech and fake news.

The Numbers Are Striking

We have had years of consistent search traffic averaging 2.7 million unique visitors a month, over the past two and a half years. But since the June Google announcement, AlterNet’s search traffic plummeted by 40 percent—a loss of an average of 1.2 million people every month who are no longer reading AlterNet stories.

AlterNet is not alone. Dozens of progressive and radical websites have reported marked declines in their traffic. But AlterNet ranks at the top in terms of audience loss because we have a deep archive by producing thousands of news articles for 20 years. And we get substantial traffic overall—typically among the top five indy sites.

So the reality we face is that two companies, Google and Facebook—which are not media companies, which do not have editors, or fact checkers, which do no investigative reporting—are deciding what people should read, based on a failure to understand how media and journalism function.

The Harvey and Irma of Journalism

Britain’s famed journalist Sir Harold Evans described Facebook and Google as “the Harvey and Irma of journalism—and democracy”:

“Whatever else they do, the electronic duopoly deprive millions of information and argument as surely as the series of super storms deprive millions of light, power, home and hearth.

“The climate change deniers will go on calling the link between hurricanes and greenhouse gases a ‘hoax’… but no one can deny the devastating effect of Facebook and Google on the viability of news organizations to investigate complexity and resist suppression.”

The Google Hit Goes Right to Our Bottom Line

We need your help because we are going to take a financial hit over the coming months.

Why? Because Google’s undermining of progressive journalism means we have lost a major chunk of audience and as a result are looking at big potential losses in ad revenue.

AlterNet’s long-term success is based on our balanced economic model. We get roughly half of our revenue from advertising and half from contributions from readers and supporters like you, as well as a handful of foundations. But now 40 percent of our traffic, earned over many years, has disappeared due to Google’s arbitrary tactics.

We need to stay strong, keep our great staff, and fight Donald Trump and his cult of core supporters.

We are proud to have never made a desperate appeal for money. We were pleased that we didn’t harass you with fundraising pitches every day for months. We had a very healthy balance, and our financial supporters contributed exactly what we needed each year. But now, due to media monopoly on steroids, we are very concerned.

Can you rededicate yourself to AlterNet and its mission of producing important and powerful independent journalism?

This fall fundraising campaign is necessary; we need to bolster our finances and prepare to pivot AlterNet so it can survive and continue to be read by a huge audience of millions, without having to rely on Facebook and Google to do it. That means we need to rely on you—will you help?

Warmly,

Don Hazen
Executive Editor, AlterNet

P.S.: Your contribution today is 100% tax-deductible.

AlterNet | 1881 Harmon St. | Berkeley, CA 94703

Re: Colonia Dignidad - Opfer bis heute | ARTE MEDIATHEK | ARTE http...
▻https://diasp.eu/p/5964789

Re: Colonia Dignidad - Opfer bis heute | ARTE MEDIATHEK | ARTE ▻https://www.arte.tv/de/videos/072509-009-A/re-colonia-dignidad