Archive for July, 2020

This Week In Security: Iran’s ITG18, ProcMon For Linux, And Garbage Collection Fail – Hackaday

Even top-tier security professionals make catastrophic mistakes, and this time it was the operators at Irans ITG18. Were once again talking about the strange shadowy world of state sponsored hacking. This story comes from the IBM X-Force Incident Response Intelligence Services (IRIS). I suspect a Deadpool fan must work at IBM, but thats beside the point.

A server suspected to be used by ITG18 was incorrectly configured, and when data and training videos were stored there, that data was publicly accessible. Among the captured data was records of compromised accounts belonging to US and Greek military personnel.

The training videos also contained a few interesting tidbits. If a targeted account used two factor authentication, the attacker was to make a note and give up on gaining access to that account. If a Google account was breached, the practice was to start with Google Takeout, the service from Google that allows downloading all the data Google has collected related to that account. Yoiks.

Weve covered many kernel level exploits in this column, but never have we covered a guide quite like the one just published by Secfault Security. They attempt to bridge the gap between being a developer and an exploit author, walking us through the process of building an actual working exploit PoC based on a Google Project Zero write-up.

Microsoft is continuing to develop their Linux presence, this time by re-engineering Process Monitor as ProcMon for Linux. A bit of history, Process Monitor is part of the Sysinternals suite, originally developed by [Bryce Cogswell] and [Mark Russinovich], founders of Winternals. Incidentally, they also broke the Sony BMG rootkit story, using sysinternals tools. Less than a year after that story broke, Winternals was acquired by Microsoft, and while [Cogswell] has moved on, [Russonovich] has stayed with Microsoft, and is now the CTO of Azure.

ProcMon is written in C++, and released under the MIT license. It keeps track of the system calls happening on machine in real time, giving a detailed look at the activity of the system. Its useful for security, debugging, and troubleshooting performance issues. All in all, its a really handy tool, and should be a useful part of the sysadmins toolbox. The source is available under an OSI approved license, so the various distros should pick up and package ProcMon before long.

Windows Server supports a couple of ways to run processes in containers: HyperV containers, and Windows Server Containers. Its fairly widely accepted that virtualization based containerization provides a more secure isolation. That is, if a virtualized container is compromised, is far more difficult for an attacker to migrate out and attack the host machine, as compared to a kernel based containerization.

The news is a new way to escape a Windows Server Container. While not encountered as often as on a Linux machine, Windows does support symbolic links. Reading through the deep dive also makes it clear how much modern Windows machines are becoming POSIX machines with a Windows compatibility layer on top. For example, the C: directory is actually a global symlink to DeviceHarddiskVolumeX.

If a containerized process could create a global symlink, AKA one that pointed to the root directory, then the container escape would be trivial. As expected, the container security controls dont allow the isolated processes to create such a symlink during runtime. That said, there is a particular function that can be abused to create the global symlink. The specific function parameters have yet to be disclosed, in order to make in-the-wild exploitation just a bit more difficult.

The story of a security audit on a website caught my eye this week, put together by [Maxwell Dulin]. The password reset form is the focus here, and it has a few problems. The first one is a common flaw: the password reset form verifies whether a given email address is in the system. Its not the worst flaw, but it does give an attacker information he can guess email addresses, and gets confirmation when there is an account with that address.

The next flaw is a subtle one, the contents of the password reset email are generated using the host sent in the HTTP request. That normally works as expected: A user goes to ourwebsite.com/reset, inputs their email address, and submits the form to generate a password reset request. They get an email with a link back to ourwebsite.com that allows the password reset. An attacker, however, can send a malicious HTTP request to the password reset form, using someone elses address, and manipulate the Host value. The reset email now points to the injected host. If the user clicks the link in the email, the magic value is sent to host specified by the attacker, who can then go reset the users password.

The last flaw [Maxwell] found was the worst of the bunch. The reset token is confirmed when the user first clicks the link sent via email, but it isnt confirmed when the password is actually updated. You could create your own account, go through the password reset process, and then change the password reset form to point at another users account. Because the back-end sees you as already authenticated, it dutifully sets the new password, even if the account specified isnt yours.

None of us will likely use the little website that this audit was performed on, but the steps described and problems to look for are a good guide for anyone needing doing the same.

CVE-20191367 is an older bug at this point, found being exploited in the wild in 2019, and given a full write-up by Confiant. Its yet another vulnerability in Internet Explorers jscript engine. For a very brief review, jscript.dll is the deprecated IE implementation of Javascript. Its no longer the default implementation, but can be requested by a web page for compatibility purposes. It appears that jscript.dll is only accessible in Internet Explorer, and neither iteration of Edge support the legacy implementation at all.

This vuln was being actively used by state actors and was a watering hole style attack, where simply visiting the malicious site was enough to compromise. The next page of the write-up goes into the technical details. This is a class of vulnerability that we havent covered before. Its a use-after-free in a garbage collected language.

Garbage collection is the alternative to manually freeing memory when finished with it. One of the advantages is that it is supposed to make use-after-free bugs a thing of the past, so whats going on here? The garbage collection code in jscript.dll doesnt properly track the reference count in certain situations. This bug specifically deals with the Array.sort() callback function. Arguments to that function arent properly tracked, so the JS instance can be manipulated such that a GC sweep frees an object that will be later accessed.

For the exploit and further analysis of how this flaw was used in the wild, check out part 2 and part 3 of the full write-up.

See the article here:
This Week In Security: Iran's ITG18, ProcMon For Linux, And Garbage Collection Fail - Hackaday

Meet the Iranian-Jewish ‘progressive prosecutor’ vying to be Manhattan’s next district attorney – JTA News – Jewish Telegraphic Agency

(JTA) Shootings are up in New York City. So are anti-Semitic incidents. And federal law enforcement is recasting itself as an adversary, not an ally, to local authorities.

That is the climate in which Tali Farhadian Weinstein seeks to become Manhattans top prosecutor.

Farhadian Weinstein, 44, stepped into the citys crowded district attorneys race last week with a vision for progressive prosecution or what she says is applying the office as a lever to both improve public safety and increase equity.

Pursuing cases that dont advance public safety and that might actually perpetuate injustice instead, like racial disparities or criminalized poverty, those are things that we should stand down from, Farhadian Weinstein told the Jewish Telegraphic Agency.

A former general counsel to the Brooklyn district attorney, Farhadian Weinstein came to the United States as a child from Iran, via Israel, after the Iranian revolution and now lives on the Upper East Side with her husband, hedge fund founder Boaz Weinstein, and their three children. A Rhodes Scholar, her resume includes clerkships with U.S. Supreme Court Justice Sandra Day OConnor and others. Former U.S. Attorney General Eric Holder, with whom Farhadian Weinstein worked at the Department of Justice, narrated a video announcing her campaign. The election is next year.

Farhadian Weinstein said the Trump administrations move to crack down on unrest in cities presents a vexing inversion of the role that that federal law enforcement has traditionally played.

I think its important to remember why the founders thought that the police power and law enforcement of this kind should belong to the states, she said. I think that was so that people themselves could decide in their own communities what laws do we enforce and in what circumstances and I think thats at the heart of what it means to be a progressive prosecutor.

We spoke with Farhadian Weinstein about her vision for the role, what she might do as district attorney to combat anti-Semitism and her very Jewish thesis topic.

This interview has been edited for length and clarity.

JTA: Youve called yourself a progressive prosecutor. What does that mean to you?

Farhadian Weinstein: Its two things, one is to make sure that at every step of the way were being fair to everybody with whom were interacting, whether they are the defendant or the witness or the victim. And second, and I think this is the more expansive idea, we, progressive prosecutors, have a more meaningful understanding of what public safety is and we have to check ourselves that everything we do advances public safety rather than takes away from it.

It means understanding that incarceration should be a last resort and only used when it advances public safety. Pursuing cases that dont advance public safety and that might actually perpetuate injustice instead, like racial disparities or criminalized poverty, those are things that we should stand down from. And instead we should be using our resources to actually bring the cases that matter and to protect vulnerable people, which is why were in this job to begin with.

What would you say are the cases that matter?

I think that gun violence is obviously on a lot of peoples minds because of what were seeing around New York City. (The city has recorded a spike in shootings, including several of children, in recent weeks.) I think that gender-based violence, which is often really just violence against women, is something we should be investigating and prosecuting more vigorously than we have, and by that I mean sexual assault and domestic violence. The Manhattan district attorneys office has a tradition that goes back to Bob Morgenthau of prosecuting from the streets to the suites, so the cheating and stealing that affects the lives of the people who live here.

Yesterday, Donald Trump spoke with New York Gov. Andrew Cuomo and the two reportedly agreed that federal troops would not be sent to New York City. How would you approach the idea of federal troops being sent to New York City as district attorney?

Theres still a lot about this that is unknown and developing and also unprecedented so I think a lot of people are trying to figure out, is this legal? That has to be the first question, and for me, is it advisable, is it good policy, even if it is legal? And I think why its challenging is that its an inversion of how we usually think about why federal forces would go into a city to confront a situation thats being run by state or local officers. This is very much not Little Rock in 1957 or integrating the University of Alabama in 1963 where the feds are the good guys.

I think this is all new, were processing this idea, in blue states in particular, that we now have to push back at the idea that the federal government is bringing justice rather than state and local governments.

When I think about what am I trying to do as a local prosecutor, as Manhattan district attorney, I think its important to remember why the founders thought that the police power and law enforcement of this kind should belong to the states. I think that was so that people themselves could decide in their own communities what laws do we enforce and in what circumstances and I think thats at the heart of what it means to be a progressive prosecutor. Around New York, local prosecutors dont really prosecute misdemeanor simple marijuana possession even though that law is on the books. Theres a reason for the constitutional order that we have.

At the very moment that people are saying we dont have enough trust in law enforcement and there isnt enough accountability when police officers break the law, youre making both of those things worse. And its bad for public safety when people dont trust law enforcement. Its also bad for public safety to pull these people [federal officers] away from their mission.

Where do you come down on the conversation about defunding or reforming the New York Police Department?

Ive said before that I dont particularly care for the word defund the police because I find it inflammatory and not solution-oriented. But I do think its great that we are engaged in the conversation about what we want from law enforcement and how we think the police should be doing what I just described about progressive prosecution to make sure that everything that happens is to further public safety and nothing else.

Its interesting to me because some of the themes that are now being talked about in the context of police reform are things that weve been working on all of these years on the side of prosecution. Minimizing contacts between law enforcement and people and understanding that those are traumatic and should be a last resort, bringing other competencies into the work. In local district attorneys offices, we have social workers, counselors. You dont learn everything you need in order to do that job of delivering public safety to communities from going to law school. And likewise now, were really having this conversation now of who should really respond with the police, instead of the police, whatever the case may be. So I think that the conversation is great and Im quite hopeful about it.

What do you think you can do in furthering that conversation about reform from the perch of the district attorneys office?

Some of that has to come from within the police do not report to the DA; its the mayors responsibility. But we work alongside the police, obviously the police make arrests and we process them. You could use different words to describe that relationship depending on the issue theres negotiation, theres cooperation, theres consultation. So there are pushes and pulls that happen between us in deciding what are the cases we should be bringing and what are the cases we should not be bringing. I also think that DAs in any area of legislation having to do with criminal justice are an important voice and so, for example, a number of the district attorneys in the state and in the city were longtime advocates for repealing 50-a. I was in favor of repeal and Im glad that it happened. (Section 50-a was a rule that kept personnel files for police officers confidential. It was repealed last month by the New York State Legislature.)

Our job is to prosecute everybody without fear or favor, no matter who they are, no matter what uniform they wear. So when police officers break the law, they have to be held accountable just like everybody else. And in Brooklyn, I started our standalone law enforcement accountability bureau and I supervised it. We investigated and prosecuted police officers.

How would you use the role of Manhattan district attorney to fight anti-Semitism in New York City?

It requires a multifaceted response of which law enforcement is one very important part. We have a hate crime statute and I would enforce it vigorously. I was just on the New York State Bar task force on domestic terrorism and hate crimes. We thought about this a lot because there has obviously been such a horrible surge in anti-Semitism in New York City and around the state over the past year.

The statute at this point makes it possible to sentence somebody to some kind of education program as well, and I think thats something that we need to look at a little more closely, whether we could be doing more of that. Because you need to respond to the crime when it happens and you need to also think about what is the root cause, why is this happening, why are people so hateful towards each other, and I think we need to come at it from both ends. District attorneys offices have traditionally taken a role, and I think this is terrific, in going out into communities and talking about the law and the underlying reasons for the law. So theres an education component, too.

Do you have some thoughts about why theres been this uptick in anti-Semitic incidents in New York City in recent years?

One thing that we have seen in law enforcement is that the internet definitely makes things worse because people can find like minded haters for whatever the target of your hate is and it can fester and foment. Thats something to think about that I think needs a law enforcement response. Why anti-Semitism in particular? its important to say that other kinds of hate have also been on the rise. Weve seen terrible hate towards Asian Americans, particularly tied to COVID, hate crimes against LGBTQ people and hate against African-Americans, all of these things sort of come together, I think.

How do you think about balancing calls for bail reform with the difficulties that has posed in preventing incidents of anti-Semitism in New York City?

The thing about bail reform is its about balancing different values and different concerns. I have largely been an advocate for bail reform, because I think the fundamental goals of bail reform have been right. So I think, first of all, we should always be really careful when were taking somebodys liberty away before trial, before theyve been convicted of anything and in our system theyre presumed innocent, as they should be. I also think its undeniable that over time in New York, Black and brown people in particular and poor people were incarcerated pre-trial at astonishing, shocking and really unacceptable rates. And I should say, in Brooklyn, we had managed to really bring those numbers down before the law changed. And I also find cash bail deeply troubling, the idea that theres a connection between a persons liberty and how much money they have and that there should be a price on liberty at all.

It continues to concern me that New York is the only state that does not allow for dangerousness to be a consideration in deciding what should happen to people before trial. Taking that off the table makes it harder to achieve the kind of balance that youre asking me about, to make sure that in every single case are we putting public safety into that equation.

Do you think the bail reform that was passed in New York State went too far?

The bail reform in both of its iterations is not the ideal situation that Ive described in which you would have eliminated cash bail completely, we still have cash bail for qualifying offenses, but on the other hand allowed for a small number of people to be detained because of dangerousness before trial. I think conceptually, its not the approach I would have taken though it accomplished what it set out to accomplish in part, which is to reduce the number of people held before trial and which I think is a good goal.

What is something about you that people might find surprising?

Ive spent a lot of time in Israel: I have a ton of family there, because many of the Jews of Iran went to Israel at various points and wound up staying. Ive taken my girls to Israel I think three times, and I spent a lot of time in high school when I went on the Bronfman Youth fellowship.

I ended up doing my thesis at Oxford about a certain strand of Israeli literature, the literature of Jews from the Arab world, like A.B. Yehoshua and Sami Michael. Where I grew up was a predominantly Ashkenazi community. Where I went to school, we were among very few families that were not Ashkenazi. My husbands mother was born in the Warsaw Ghetto but she grew up in Israel. So some of it was personal because I was trying to understand the coming together of Ashkenazi and Mizrahi Jews in different places around the world. Id been studying Arabic for some time, and I was interested in the politics of that literature because they were describing a different origin story and a different experience of what it meant to be Israeli.

How does your own story of coming to this country as an immigrant inform the way you would approach the job of district attorney?

Being an immigrant has affected me, its an outlook that stays with you forever and in my case, I think, has helped me do this work because its helped me bring a kind of empathy to this work. Its the commonality of the experience of having been vulnerable, of having come here with an ambition to be free and to live in safety and to understand in a really visceral and personal way what it means to yearn for those things. And those are the very things we are supposed to be delivering in a job like this one, fairness and safety privileges that in other parts of the world, people dont get to experience.

Youre talking about immigrants who are coming here from Central America and South America and who are waiting right now at our borders. I see myself in them.

What do you think about when you hear Donald Trump speaking negatively about immigration and Iran, two different things that you know personally on a different level?

I feel pretty much horrified by anything and everything that he says, the fomenting of hate, the attempts to divide. I think the commonality that I just described is I think very different from the way hes described America coming together.

I think thats also a very Jewish idea to hold onto the fact that all of us were strangers in a strange land at some point and even when youre past that, as I am in many ways now, I think our tradition tells us to remember that because it is a source of empathy and ultimately, justice, to see that in others and to draw on that collective experience even if it was not a personal experience.

Read the original:
Meet the Iranian-Jewish 'progressive prosecutor' vying to be Manhattan's next district attorney - JTA News - Jewish Telegraphic Agency

Doctors Calling for Medical Disparities to be Part of Black Lives Matter Movement – Alabama News Network

Posted: Jul 22, 2020 1:53 PM CDT

by Alabama News Network Staff

As the nation puts a spotlight on problems plaguing Black communities, some families and doctors are calling for medical disparities to be part of the Black Lives Matter conversation.

African American women are three to four times more likely to die due to pregnancy complications, says Dr. Emmary Butler, an OBGYN in Indiana. Dr. Butler, as well as many doctors and families, says its a systemic problem that must be fixed.

Conditions like pulmonary embolism, preeclampsia, and hypertension are avoidable if treated early in pregnancy, but Black mothers are dying from these problems.

Dr. Butler says, African Americans are more often not insured or they have poor access to quality care. However, these same studies also show that even with these resources, African Americans are not receiving the standard of care. Advocate for yourself, advocate for your family members, if you feel that youre having medical issues, please sound an alarm until someone actually listens.

Bruce McIntyre is a single father raising his three-month-old son Elias. His girlfriend Amber Isaac died during an emergency C-section in April. All I can do is think about Amber while Im with him, you know, he has her smile, her eyes, and it just kills me sometimes when I just stare at him because I think about what should have been.

The 26-year-old mothers death in a New York City hospital came just days after she tweeted that she was not receiving proper care. McIntyre calls it neglect. Amber developed a serious complication during pregnancy, but McIntyre says doctors didnt catch it until it was too late.

McIntyre is taking action. I cant sit around. Amber would not want me to sit around, he says. Hes organizing a march to raise awareness and hopefully save lives.

Read more:
Doctors Calling for Medical Disparities to be Part of Black Lives Matter Movement - Alabama News Network

Don’t Exploit ‘Black Lives Matter’ – UT News – UT News | The University of Texas at Austin

President Donald Trump recently called Black Lives Matter a symbol of hate in response to New York Citys plan to paint Black Lives Matter on Fifth Avenue. Many view this as Trumps latest attempt to exploit racial tensions in order to appeal to his base.

But he isnt the only one. Walmart recently received backlash for selling T-shirts that included the phrases All Lives Matter, Blue Lives Matter, Irish Lives Matter and Homeless Lives Matter.

It is curious why such a simple, affirmative and humane phrase would become so emotionally provocative and politically divisive.

The exploitation of Black Lives Matter, whether for political or economic gain, is another manifestation of what Black studies scholar kihana ross argues is anti-Blackness, societys disdain, disregard and disgust for Black existence.

The Black Lives Matter phrase is intended to affirm the humanity of all Black people in the midst of deadly oppression in a country where long-standing racial disparities would suggest that Black lives really have not mattered. Take for example the following health and criminal justice data:

African Americans have the highest mortality rate for all cancers combined compared with all races, are 50 percent more likely to have a stroke compared with whites, and are twice as likely to die from diabetes as whites. African Americans have more than twice the infant mortality rate as whites, and Black mothers are more than twice as likely as white mothers to receive late or no prenatal care.

When it comes to criminal justice disparities, young unarmed nonsuicidal male victims of fatal use of force are 13 times more likely to be Black than white. Nearly half of the people serving life sentences are African American, and Black people make up 42% of death row inmates while making up 12% of the population.

These racial disparities and many more exist across education, housing, wealth and poverty. So it should be understandable that the phrase Black Lives Matter is said with such urgency. This is why it is so disturbing when certain elected leaders refuse to even say the words.

When Vice President Mike Pence was asked why he wont say Black Lives Matter, he indicated that he disagrees with what he characterizes as the radical left agenda, insisting he believes that all lives matter. In his mind, simply saying Black Lives Matter is a tacit endorsement of rioting and looting, rather than acknowledgement of the racism and anti-Blackness inherent in the lived experiences of Black people.

Pences rationalization is unconvincing given that Mitt Romney, a Republican, is willing to march with protesters and say Black Lives Matter. Sadly, the politicization of the words Black Lives Matter has even reached children.

As my 11-year-old was grieving after watching the video of the police officer with his knee pressed into the neck of George Floyd, we had to have the talk one of the most emotional conversations a Black father could have with his Black son. Later, while playing the video game Fortnite with his white friends, one of them mentioned that there were protests on Fortnite related to George Floyds murder. When my son said that Black Lives Matter, one of his friends countered by saying, All Lives Matter. For reasons that my son was not able to fully articulate, his friends words upset him very much.

After helping him to understand why he was feeling upset, my wife contacted his friends parents to express our anger and disappointment that their son would say this to our son. The parents were mortified, and after talking with their son, they wanted to talk with us. They apologized and explained that they had never said those words to their son, and when talking with him, it became apparent that he did not understand how those words could serve to negate or minimize the message of Black Lives Matter.

While a childs utterance of All Lives Matter may likely be uttered in youthful naivete, I do not extend the same considerations to corporations such as Walmart or politicians such as Pence. The refusal to even say the words Black Lives Matter is a blatant disregard of the pain experienced by Black people and suggests a racial skepticism that will never heal the racial divisions in this country.

Kevin Cokley is the Oscar and Anne Mauzy Regents Professor of Educational Research and Development, professor of African and African Diaspora Studies, and director of the Institute for Urban Policy Research and Analysis at The University of Texas at Austin. He is also a Distinguished Psychologist member of the Association of Black Psychologists.

A version of this op-ed appeared in USA Today.

Read the original:
Don't Exploit 'Black Lives Matter' - UT News - UT News | The University of Texas at Austin

After being told to remove her "Black Lives Matter" face mask, Whole Foods employee quits in protest. – Berkeleyside

A protester holds up a sign at a demonstration against Whole Foods Markets clothing policy. outside Whole Foods on Gilman Street in Berkeley on July 17, 2020. Photo: Nancy Rubin

About 200 people gathered at the intersection of Gilman and Ninth streets Friday afternoon to protest a Whole Foods Market policy of not letting employees wear masks or T-shirts reading Black Lives Matter.

They came out to support Jordan Baker, who wore a Black Lives Matter face mask to work at the Gilman Street Whole Foods on July 15 and was asked to remove it within five minutes of arriving at work, according to her Instagram account.

I honestly dont want to work for a company who only supports a movement when it makes them look good, or makes them money, she wrote.

Her post was liked more than 40,000 times and many people at the rally said they had seen it and had turned up to support her.

Baker declined to talk to Berkeleyside during the rally. She said she has quit her job at Whole Foods.

The companys dress policy prohibits workers from wearing clothing with visible slogans, according to a spokesperson who sent the following statement:

In order to operate in a customer-focused environment, all Team Members must comply with our longstanding company dress code, which prohibits clothing with visible slogans, messages, logos or advertising that are not company-related, reads the statement. Team Members with face masks that do not comply with dress code are always offered new face masks. Team Members are unable to work until they comply with dress code.

But a woman who works at the Gilman store disputed that characterization. She said people wear clothing with slogans all the time and management does nothing about it. It was only when Baker wore a Black Lives Matter mask that they complained.

I wear logos every day and its never a problem, she said.

The woman, who did not want to give her name, said workers at the Gilman store are upset about the company policy. A number have quit. The woman, who has worked there for about a year, said she intended to quit soon. Others at the rally said word about what happened to Baker had spread among workers at the Berkeley and Oakland stores.

This is not the first large company to run into trouble when its employees wanted to wear Black Lives Matter merchandise. Starbucks, after tweeting on June 1 that it stood in solidarity with our Black partners, customers and communities, told its employees they could not wear BLM merchandise because its dress code, like Whole Foods, prohibited political or religious slogans, according to Buzz Feed. Starbucks later reversed its position.

The crowd, which started gathering at 3 p.m., soon swelled to more than 200. Protesters stood on the sidewalk and hoisted signs in the air. Many cars and trucks tooted horns in solidarity.

One woman, who used to work at the Whole Foods in Oakland, said the corporation was hypocritical because it said it supports social justice issues and has no tolerance for racism. But when an employee wears a Black Lives Matter face mask, she is told those words are prohibited.

Its tone-deaf, she said. Its super inconsiderate. Theyre performative. Its lip service.

A number of people at the rally said the concept of Black Lives Matter was no longer controversial after the mass movements prompted by the police killing of George Floyd, but instead expressed a demand for basic human rights.

This is not a political issue, the woman said. It is a human rights issue. This is not a controversial statement. Its a human rights statement.

Others at the rally said they were there to demand societal changes.

What I like to see is people participating, making social change, said Michael Ware, who works down the street at Berkeleys transfer station. Its our time, not only for Blacks but for whites to come together. This is an opportunity to unite for the better of all people.

The rally didnt seem to affect Whole Foods business much. As cars tried to turn into the parking lot, protesters would plead with the drivers to go elsewhere. A few turned around.

Inside, people continued with their shopping, seemingly unaware of the protest outside. However, three young women walked around the store and stopped customers to suggest they leave. They stopped this reporter and explained that Amazon was the true owner of Whole Foods, that it didnt pay its employees well, and that is a corrupt company. They encouraged customers to shop at Berkeleys independent markets, including Berkeley Bowl, Monterey Market and the Berkeley Natural Food Company.

The rest is here:
After being told to remove her "Black Lives Matter" face mask, Whole Foods employee quits in protest. - Berkeleyside