Well thanks for everybody for coming out for this talk. Um the FTC is kind of the it's it's the federal agency everybody can actually love. Yeah? Uh the FTC has been doing really cool stuff and um they're here to give everybody some really good news um and talk about some new programs that they've got going on. So let's give them uh give them our support and uh give them a big round of applause. Awesome PowerPoint but uh it's not coming up right now so maybe it'll come on during our presentation. Um if if you could see it right now it would say that the title of our talk is research on the machines. Uh help the FTC protect privacy and security of consumers. Um and then the next slide would say uh who we are but we'll just cover that. I'm Carol McSweeney. I'm a federal trade commissioner. Um I'm an attorney um and I'm really interested in protecting consumer privacy and data security. And I'm Lori Craner. I'm the chief technologist at the FTC. I've been there uh since January and I've been doing a lot of security and privacy related work. So the machines um you know estimates vary. I I see these wide range of different statistics. It looks like we have about 25 million connected devices right now and we're on our way to about 50 billion consumer facing connected devices in 2020. Um you know some people call this the internet of things. I think that term is a little bit overused. I think it's internet of a lot of stuff um but really what's going on here is that we are connecting ourselves and the stuff in our lives in new and exciting ways. That's bringing a huge amount of innovation to consumers and we want to make sure that consumers get the advantage of it but I don't need to tell anybody in the room that it's also creating a huge amount of insecurity for consumers and raising a lot of privacy issues. So uh one of the things that's all that's also happening and we saw this on display terrifically yesterday in the DARPA competition is that the machines are getting smarter as well. So at the FTC we're really worried about trying to protect consumers in this increasingly interconnected environment. One of the things that we're very focused on is the potential security and privacy risk to consumers. And I'd also note that I think uh increasingly consumers themselves are very very concerned about trusting these devices. So we see some survey data that really indicates, oh slide! Yes! It says you're going to slide ahead of where I am. There we go. Machines, right? Okay. Um and and so we see some consumer survey data that really indicates um that consumers themselves are maybe not adopting some of these new technologies because they're worried about the security of them. Uh you know I've been attending DEF CON for the last three years and I I see a lot of really creative, really interesting work presented here and I think you know consumers are right to be a little bit concerned about the security of these devices. So we're starting to see that reflected as well. Um so what we're going to cover today um is really how we're trying to approach this challenge of protecting consumers in this environment. Um it's easy to sort of adopt this attitude of like abandon all hope ye who enter here. There's like no way we're ever going to fix this. It's just a disaster for privacy and security. But I really prefer to approach this issue using the teachings of another great master. There is do or do not. There is no try, right? So I we're going to talk a little bit about the do part of this and what we are trying to do at the FTC today. Uh so quick overview um we can go. Oh right. I'm sorry. Issues of the day. Um we also um in addition to bringing a bunch of enforcement cases are also really trying to focus on the broader policy debate. And we're going to talk about how we need your help. We're going to talk about some of the events that we're holding and some of the ways that you can help us. So how do we respond to the rise of the machines when the machines are everywhere? Well the FTC and and we we're using its acronym the federal trade commission um actually has almost nothing to do with trade policy. Thank God and everything to do with being a consumer protection and competition enforcer. So primarily what we do is bring cases against companies. These are civil cases. It means we sue people. We get settlements. We put them under order and then we uh operate and make sure they comply with the orders that we put put them under. That's really different than other parts of the government that are more focused on writing rules or regulations which isn't so much what we do with the exception of uh writing rules about children's privacy online under the COPPA Act. So we uh primarily bring cases involving privacy and data security and by last count we've actually brought more than 400 of these cases since we began bringing privacy related cases almost 25 years ago. So it's not a new issue for us the federal trade commission. We do it by by using two authorities in the FTC Act. Uh first we look at whether a practice is unfair and it can be unfair legally if it's uh going to create a substantial injury to consumers. It's not avoidable reasonably avoidable by them and not outweighed by some other pro competitive or consumer benefit. Or we bring cases in situations where something has happened that has deceived consumers in a meaningful and material way. And and so those are the two primary ways in which we have really engaged in an active enforcement mission to protect consumer privacy and data security. So what does this mean? Example. Yes um so we're going to tell you about a few cases here. Uh so Facebook uh had had settings for users to control their privacy settings and they promised that if you limited access to some of the personal information you posted that um that it would not be viewed by by people that you did not grant access to it wouldn't be shared with um third parties. And they also said that if you uh deleted your account then the photos that you had posted would no longer be accessible. But as it turned out that some of the information people posted was accessible to other people in third parties beyond the settings that they had set. And some of the photos were accessible even after people deleted their accounts. It was deceptive and it also turned out that uh we brought an unfairness count in that case because some of the data that had been designated private uh Facebook sort of retroactively changed how it was handled and made it public. And we said wow that's super unfair. Again consumers can't avoid that and it can cause them a real harm. So that's that's the legal theory for that kind of case. So uh in the case of Google they had promised people that their Gmail contacts wouldn't be used for anything other than as part of Gmail. However when they launched their new Buzz uh social media service they populated Buzz with the Google contacts uh from Gmail. Um and uh and so that exposed people's contact information um on Google Buzz. Yeah actually a broader case as well involving a number of accounts but mostly they're all deception based um uh um accounts there. So the misreps are you are you're uh sharing information under one set of terms but actually they don't live up to that set of terms so that's that's a misrep case misrepresentation case for us it's deceptive to the consumers. So and I guess I should note here as well that that was these are um cases from like 2011 they're a little bit older but this was the first case where the FTC remedy actually requires comprehensive privacy policy be implemented by the company and the result of these cases are orders that are we call them consent orders resolving the claims um that put these companies under 20 year orders and then we go back every couple of years and look at how they're doing also gives us an additional um a way in which to make sure they're complying with the orders uh because sometimes uh things happen and uh if they are in violation of the order they're in contempt of it we can then uh penalize them monetarily which can be meaningful in some cases. So Snapchat uh had promised that the images that you send on Snapchat would disappear after a short period of time and that if somebody tried to take take a screenshot of them you would get a notification but actually there were a number of ways that you could save a Snapchat image um and you could also circumvent the notification feature. Yeah so it doesn't disappear deceptive. Pretty simple. So um Wyndham the hotel chain had three data breaches that unfairly exposed consumers payment card information. They had a number of security failures that led to these data breaches including uh storing payment card information in the clear and not patching and not monitoring their systems for malware. Yeah so this is an important case because actually we proceeded using our unfairness authority saying the data security practices were unfair to consumers. Uh Wyndham disagreed with us. We engaged in extensive litigation and this year uh we won at the circuit court level the use of our authority to bring data security cases to protect consumers. So that's a really important validation of the Federal Trade Commission being in this space and using our authorities. Okay Oracle provided a Java update to correct important security flaws and they promised consumers that if they installed this update they would be safe and secure. However the installer did not automatically remove all of the old versions of Java leaving users vulnerable. Uh again um an important data security case and I and I think we'll transition now into uh another really important data security area for us and that's the internet of things stop. Yeah so uh ASIS made uh routers and they promised consumers that their routers would protect consumers local networks. However the routers were vulnerable to an exploit that can provided complete access to a consumers connected storage devices without needing any credentials. They also did not address security flaws in a timely manner which allowed attackers to change router security configuration without a consumers knowledge. And I just note here I mean routers are just an incredibly important feature of protecting all the connected devices that you might have on your home network. So making sure that the companies that are making claims about the security of them are actually making valid claims is really really important. So I think this was a super important case. Another feature of it was um and we've seen this in a couple of our other enforcement actions configuration of encryption whether it was properly used and properly configured or not and when it's not uh we've actually brought cases as well. So Fandango is a is another one of those. Uh there's several other examples that we could we could use but for the sake of time I think we'll just say these are examples of how we use our authority and we thought they were important to share so that as we have a conversation about how we can work with you to help bring cases you understand the kind of legal lease that goes along with them. Uh so how do we bring cases? Well uh we rely on researchers and research so that's going to be an important part of our talk today. We also read media reports and find those very interesting a lot of the time. Um and we actually get uh cases through consumer complaints and other complaints that are filed with us. Uh we have a whole network actually it's called the Sentinel network and it helps us bring in complaint data from consumers also from state law enforcement agencies from better business bureaus and from a variety of places. This network actually works for our whole mission. A bulk of what we do is also protect consumers from scams and frauds and things that are very low tech uh but I but it has a has a tech component of it as well. So you know I think uh we've been spending the first part of our talk talking about enforcement. It is one of the most important things that the FTC does but we're really mindful that all of this amazing connectivity in consumers lives um is raising a host of issues that are that go far beyond simply whether the security practices are unfair to them or whether they're being deceived about what the products are actually doing. So the FTC is not just an enforcer it's also kind of an advocate and we're trying to work with other government agencies and with other communities to make sure that we're we're putting in place the strongest possible policies and responses both to help keep consumers informed but make improvements to our laws as well so that as all of this great tech kind of cascades over us in our daily lives um we have better and stronger protections for consumers. So I'm going to talk about an example of uh of something that we worked on and this started with a personal incident that happened to me uh shortly after I started working for the FTC my mobile phone account was hijacked and I discovered this when my phone stopped working and on the same day my husband's phone stopped working and we called our carrier and um our carrier said oh is that your new iPhones that stopped working and we said we don't have new iPhones and they said well in our database it says you have new iPhones uh so they sent us to the phone store to get new SIM cards and eventually um uh they figured out that there had been fraud on our account it turns out that somebody went into a phone store with a fake ID claimed to be me asked to upgrade the phones um and the phone company uh happily gave them two new brand new iPhones uh charged them to my account and put our phone numbers on them uh so uh when this happened to me I cleaned cleaned up the mess but I was really interested in how often does this happen to other people and what could be done to prevent this uh so I talked to all of the major carriers about what they were doing uh to prevent it um and uh and the type of authentication uh procedures that they're using uh they they are relying mostly on that driver's license um and uh a phone store employee who's not necessarily well trained in how to spot fake IDs. I looked at our consumer sentinel um database to uh try to understand how often this was happening. Now uh consumer sentinel you know gets all these reports that the people send in um and in this case these are mostly reports that come in through identitytheft.gov and we know that this is just the tip of the iceberg because most people don't even know that they can submit their identity theft complaints we're trying to get the word out so tell your friends um but we we we expect that this is um only maybe 1% or so of the total identity thefts that are happening we see. So I went back through this data and if you look three years ago in a typical month say January 2013 we got about a thousand reports of this mobile phone hijacking or a similar thing called sim swap um so we had about a thousand reports and that made up about 3% of all of our identity theft reports that month um then we looked three years later and we find 2600 reports and that is about 6% of all identity theft reports that month. So we're definitely seeing a trend here of this becoming an increasing a large problem uh I also did a lot of looking for media reports and saw that there were um a lot of reports of people having similar things happen to them. Uh perhaps even worse uh besides just using this to get free phones some of the attackers are using this to get access to the victim's phone number so that they can intercept their two-factor authentication uh so shortly after this happened to me it happened to Duree McKesson who is a well known Black Lives Matter activist he has something like 400,000 Twitter followers and somebody wanted to get into his Twitter account so they could tweet as him um and this is something that is becoming increasingly common um I understand that in Europe uh they're doing this to get access to people's bank accounts and um and the attackers are successfully able to get in and actually clean out people's bank accounts. So is it any wonder that consumers have trust and security issues? Uh I will note that our consumer consumer sentinel data that complaint data that we've been talking about reflects that identity theft is the number one consumer complaint for the last five years we get hundreds of thousands of these complaints so it's not just this kind of spoofing but it's a wider problem as well uh it doesn't show any signs not surprisingly of of lessening unfortunately um so obviously there's a huge amount of defenseless data out there we have this alphabet soup approach to our privacy protections in the US many of you in this room are probably familiar with it it uh it's like the the the TL you know DR version of this is like FTC act FERPA, COPPA, HIPPA, Communications Act, GLB uh state laws right but there's no comprehensive privacy law there's no uh comprehensive data security law so that's the the atmosphere that we're we're operating in which is why uh the FTC doesn't just do enforcement it does a tremendous amount of education convening and trying to work broadly uh to address these issues one of the initiatives that we've had in the last year is something called start with security uh which is really trying to get our message out about what good security practices look like I probably don't need to tell anybody in this room that a lot of the consumer facing technology uh um is pretty porous and and um in fact many of the people who are creating it probably have no idea uh what starting with security actually looks like so we're trying to get that message out as broadly as we possibly can some of the the biggest problems we're continuing to see are ignored reports of vulnerabilities uh slow response time to vulnerability reports lack of data minimization where appropriate uh failure to store passwords um securely lack of training of employees lack of proper configuration um you know so we continue to see a host of problems uh in that space as well we're also trying to increase our in-house capabilities and our in-house expertise um to understand how the technology is working and to be a better environment for uh people like you to bring research to us um so actually we have some of our awesome office of technology research and investigation folks here today uh Joe and Erin if you want to raise your hand um and if you want to do like shirts like this yeah yeah so shirts like this you want to do an IOT deep dive uh Joe and I are actually going to be an IOT village later on uh this afternoon at four o'clock so we would love to talk to you then and also hear of any issues and research that you've you've already been doing in the IOT space uh so we also have um an internship program and we're trying to bring more technologists in through that as well uh one of the uh things that uh the office of technology OTEC uh is doing is they are putting together a fall technology series um and so we have coming up in September a workshop on ransomware in October we have a workshop on drones and December a workshop on smart TVs uh there's information about all of these workshops on our website we're very interested if you have expertise in these areas you have research reports anything you'd like to share with us there's information on how you can share that with us either before or after the workshops uh if you're in the DC area please come uh the workshops are free and open to the public if you're not in the DC area um or even if you are you're welcome to watch our um live webcast of the workshops um and the videos will also be archived uh so these are our good ways for us to uh collect information on these topics focused on the security and privacy issues and to better understand what consumer protection issues uh there are in these spaces another workshop we have coming up and this is one that I've been working a lot on is putting disclosures to the test uh so my interest in this started when I was doing work on privacy policies which are a type of consumer disclosure uh but I realized that there are a lot of other types of disclosures um which the FTC is interested in which have some of the same problems that privacy policies do as far as being long and hard to understand and we would really like them to be more effective and so uh the purpose of this workshop is to bring in researchers who do usability user studies and evaluate disclosures to try to figure out how to make them actually communicate well with consumers and so uh we'll be hearing from uh people who have done work on privacy notices but also nutrition labels and drug facts and all sorts of other types of disclosures I thought this was covered so incredibly well this morning by Sarah and Mudge and they're talk about the cyber independent testing lab that they're putting together this need to have consumers have more transparency so that they can make educated choices about the products that they're buying the software that they're buying the apps that they're buying and just to understand what some of the risks might be associated with them so we're trying to really um improve and increase and expand our knowledge of about the kind of communications that work with consumers and are effective with them oh privacy con too so this is our second annual privacy con this year this is also a forum for researchers especially researchers are doing privacy research to come presented to us um we had an incredibly successful first privacy con last year we're going to do it again this year um and I first of all learned a huge amount which was great um it definitely affects our enforcement but it also I think really affects the broader policy discussion that we're having on privacy in the country as well so that's coming up in January there will be information about how to participate um that is actually currently on our website it's currently on our website and we are seeking research papers uh in the privacy area right now um the deadline I believe is in October sometime uh so definitely um think about submitting things and think about uh coming or tuning in um this should be a really great event so research uh this talk talking about the research with wishlist that Laurie has been putting together which I'm really excited about because I feel like sometimes we have a very abstract conversation about what it is that would really help us to understand better with the academic community with the researcher community so this is our attempt um and it's going to be uh uh an attempt that we keep pursuing right to sort of refine the kinds of issues that we think are really going to be helpful to us to understand and to really solicit research um and in academia and elsewhere for for uh these kinds of topics um we also are going to make sure that we have time for questions too so I'll okay yeah yeah yeah so I I spent some time working with the OTEC folks and we went and talked to people in every division of the agency about their research needs um so that we could then go out and talk to researchers about ways you might be able to help us um I don't have time to go through the entire wish list but we're going to focus on some of the security and privacy items here um so we're very interested in research on how to assess the risks um that are posed by breaches and vulnerabilities you know we we know that there are risks um but we want to look at exactly what metrics can we use to assess them um we also are very interested in protecting consumers from ransomware from malvertizing and and other risks and so um we're interested in research that helps us protect consumers um we're also interested in being able to trace exposed data to specific breaches and we're looking for research to help us do that uh we're looking at research that is at the intersection of economics and security how can we make certain types of attacks less profitable and therefore less um less desirable for an attacker to pursue um and then we're also very interested in protecting consumers from fraud and so we're interested in ways that we can automate the process of spotting fraud um detecting fraud quickly um IOT devices is an emerging area um and we're very interested in in research related to that um we would like to help IOT device manufacturers and platforms have better security and so we're very interested in research along those lines um we're also interested in defensive measures so that if there is a problem with an IOT device it won't compromise the entire network other emerging trends um uh there are increasing uh devices that have sensors in them including devices for children Barbie dolls that talk to you and things like that uh we're very interested in how to prevent these devices from compromising consumer privacy and children's privacy um we're very interested in how to isolate critical systems for example in connected cars um bots that's a new thing um increasingly we have uh bots other artificial intelligence um and when consumers interact with these bots we wonder do they even know that they are interacting with a machine um and so we want research on how consumers can uh become aware of that and what they know about this um virtual reality is a new area that uh we're we've seen a lot of progress in lately a lot more consumer devices available in the virtual reality space and there hasn't been a whole lot of discussion of the security and privacy issues you know it's fun it's entertaining but we want to stay out ahead of that and try to make sure that we protect consumers as well um new tools and techniques uh we're very interested in a variety of different types of tools uh we're interested in hearing about tools that consumers can use to control their personal information and especially across context as personal information is now increasingly shared across context your phone versus you know shares with your tv and whatnot um we're also um uh interested in tools that help consumers observe what data their devices are sharing um we are interested in uh tools that allow us to analyze apps and to understand the type of data that they are sharing and um and are associating with third-party libraries um we're interested in algorithms that are used um uh to make decisions about people and may actually um either on purpose or inadvertently discriminate against people uh we're interested in identifying when cross-device tracking is occurring um and we're interested in tools that will help us identify vulnerabilities in iot devices and money many more this is uh just a quick sampling of some of the research areas that we're interested in and that you'll we hope you will come talk to us about uh if you have insights um so what happens if you do um uh come talk to us about it um so uh our otek folks um will take a look at the research uh that we receive they will look um across the agency to find um people for whom this is relevant and try to direct that to them so that we can see if it's going to be um of use uh to to the work that we're doing or whether we should start a new project in an area that somebody brings something to our attention um sometimes you bring something to us and then we actually end up bringing a case so it can result in uh in a lawsuit against a company as well um that's happened uh some of the time so actually segue as well into the we want you slide the creepy uncle sam um you know I think what we're trying to really uh if you have one take away from this talk make clear here is that uh we actually can't solve all of the challenges that are going to be confronting consumers in a hyper connected environment without a lot of partnership particularly with the security researcher community so we're trying to do the most that we can do to try to uh develop those partnerships and have it inform not only our enforcement mission but also the the research that we do the studies that we conduct the workshops that we conduct and the ways in which the FTC tries to actually make sure that um policymakers and others in the broader space are seeing these issues that might harm consumers yeah so um we have set up the email address research at ftc.gov uh please use that to send us research and that will uh be examined by our folks in Otec um and uh for pointers to all of the workshops that I mentioned and all the other things uh that I've talked about here please take a look at ftc.gov slash tech that that's the tech blog um lots of other interesting stuff there too so check it out uh I think we're ready for questions yeah and you can follow us on twitter too you're at lori tweet I yeah I'm at lori tweet and I'm at T. McSweeney ftc so uh thank you alright so we have we left plenty of extra time for questions so we'd love to field some questions and um and I think we have like what five or ten minutes hi uh great brief you mentioned discriminatory algorithms that you are concerned about we know what in the news I think it was uh two or three months ago with Facebook and their news feed there's also been recently in the other the other uh major social media site twitter banning people because they did a bad movie review of uh a ghost buster uh movie and they had their account ban of uh a uh from Breitbart News it was Milo uh also there's been uh other censorship against a talk show host for mentioning repeating what happened in Germany I won't mention religion because I don't want to be censored here uh an attack that he lost his um Facebook account what are you doing for situations like that or is that in your um swarm lanes thanks so some of that um raises a host of really interesting sort of broader first amendment concerns um you know I think one of the things that we're trying to really focus on when we're thinking about algorithms and data and especially like machine learning on top of all of that is the extent to which uh choices are being curated and offered to consumers in such a way that might limit their choice or even result in a disparate impact on them so one of the things that we haven't really gone into yet is the extent to which those algorithms are are kind of manipulating the the overall news that they're getting which is I think your question um but but we are interested in the extent to which um it might be impacting the credit offerings that consumers are getting the housing offerings employment offerings some of those core economic choices now we do have laws on the books uh comfortingly civil rights laws equal opportunity laws right that already protect people in the brick and mortar world from this kind of discrimination but one of the things that is really hard in the increasingly digital world is figuring out when that's even happening at all um and that's some of the work that we really need help with right now I heard a lot of emphasis in this presentation on on regulation basically or actions against companies and consumers but I feel that more and more government is becoming a service or consumers and it used to be you go into an office and deal with someone and that was a real interaction but now the services are so broad and dynamic because government is trying to offer electronic services on the forefront and I'd argue that they're not necessarily the most expert at it and data breaches and such these are all things that apply to this to government as much as they do as private companies so what's your regulatory or or involvement with government services yeah well uh we are the government but we don't actually regulate the other parts of the government so that's actually good for us because that's as you point out a big challenge I mean I think you see this administration taking action to really try to improve both the privacy and security talent and policies throughout the government so the question for people in the back was you know what are you doing FTC about the government and its problems and the short answer is we're focused on protecting consumers but you know I think we are collaborating with the other parts of the government we have our own chief privacy officer our own chief security officer we're very mindful of of these issues um and I and I think one of the other things that you really see happening in this administration is um uh government wide emphasis on bringing technologists into government that's something the FTC has been a real leader on we actually have been doing this for a number of years because what we recognize is that when we're dealing with protecting consumers in an increasingly digital world we need technologists to help us understand what is even happening in that world which is why we have people like Lori uh but why we've also expanded to develop an entire office that is staffed by researchers and technologists as well I think we need to grow those resources uh but we need to do it throughout the government as well and when we're having big debates like encryption debates we need to make sure that technologists are at the table for those debates because uh a lot of the time the policy talk in Washington isn't so well informed probably no one here is surprised to hear that yeah and there is now a government wide privacy council which the FTC participates in actively and is helping to educate other agencies early in your talk you mentioned about Google and Facebook and how they were you caught them for something changing their end user agreement in these ULAs it often says that we can change the ULAs terms anytime we want to so then how can you kind of accuse them of unfairness if a user has agreed to these terms yeah so this is a great question the question is if you have a user agreement that covers everything um how can you then come back and bring a deception case about about something that's sort of covered in the 60 90 page user agreement well the answer is context matters and I think what we're trying to make very clear in our FTC enforcement is if users share information under one set of rules and in a way that makes sense given the kind of stuff they're doing with an app right then uh then you know that's covered by the user agreement if if you do something that's super tricky right are really impossible for consumers to figure out or you change how that information is being handled without really giving them a clear explanation of what those changes are or if you set up your thing to defeat what their settings were to begin with right that's a case we just brought called inmobi uh that that we actually can bring a deception case in that situation last fall you had a workshop about cross-device tracking yeah and I know you sent some warning letters to developers this spring uh that we're using a tool kit that might be used for cross-device tracking what additional is it seems like this is an area that is probably going to grow rather than shrink uh is there additional activity going on at FTC to continue to track this and what are you doing in the future yeah so thank you this is a question about cross-device tracking which is an issue that we're definitely trying to understand a lot more clearly uh it's already informed a little bit our enforcement efforts right so the inmobi case which I was just talking about is a case where a mobile ad company that is um incredibly widely used um company that said it would only track if you opted in and in fact it tracked whether or not um opt-ins were set and had really created a whole system to kind of go around the opt-in to begin with in order to track consumers using uh geolocation and other things so we said that's that's that's unfair and deceptive um we also you noted the silver push letter so the silver push technology which um for those of you that didn't see our letter because I get it we're you know out there in Washington um we issued a warning letter to app developers saying that if you installed silver push which is a piece of software that can monitor device microphones and listen to the audio beacons that are coming off of advertisements on tv so basically um is a technology that allows them to gather what someone's uh viewing habits are based on uh what their telephone microphone is picking up from these audio beacons that are embedded in the advertisements we said that we were uh very skeptical um that that this kind of technology should be included in apps so I think that should serve as a pretty uh bright line warning letter that we're worried that consumers really don't have adequate notice and transparency about what that tech is we're also looking at many of the ways in which people are being passively uh I I could say surveilled it's a bit loaded but passively uh having information gathered about them uh last year we brought a case called NOMI which was a company that was um tracking people's locations and retail locations and they said they would offer an opt out in retail locations but they didn't in fact uh compel the retailers using the technology to offer the opt out so there was no opt out and there's no way a consumer can know that's happening really unless you have some kind of uh clear notice that it's occurring and some kind of choice um so there we said look if you're gonna say you're gonna offer an opt out you have to really have privacy law in this country so there's nothing that says that that kind of thing uh can't happen without uh consumers choosing or having a choice about it so um it's a it's an area that we're continuing to monitor very carefully. Spring morning off of the uh the previous questions about consumer privacy and the transparency that goes on between other government agencies um is your commitment to transparency uh documented if say an exploit is discovered and say do you want me to take this one probably go for it so um we are a civil enforcement agency and um I could imagine that there would be situations in which uh we wouldn't be in that in that dialogue um for a variety of reasons um if if something is disclosed to us uh we what we then do is try to understand whether um we have enough facts to actually bring a case using our existing authorities about um the practices that led to uh especially if it's exploited or whether um in some cases we have brought cases win uh something was disclosed and then um the recipient of that didn't really react at all right so if you don't have a mature disclosure program in your company to receive exploits and respond to them that can be a factor in our analysis about whether you have any data security practices in your company but I'm not really answering like your direct question um which is which is the broader like national security question because we're a little bit less the broader civil liberties question as well too because what if I discover an exploit and then I get slapped with a notice to not mention it because the government wants to use it for something else what's my protection or the protection of consumers so this is an area of maturity of our laws in the U.S. and how we're handling it because the FTC thinks that we need to have really good clear partnerships with security researchers so that people who are doing the work on behalf of consumers to help us understand how the technology is actually working um are able to do that work without you know fear of reprisals now understand this is a balancing act right that there are bad actors out there conversation that we need to have and the FTC maybe not all of the FTC I'll say at this point I'm speaking on behalf of myself right you know I think some of us really feel strongly that we need to modernize how we're handling computer fraud and abuse act and some other things so that we can have a more mature system in place for handling how research is handled and how exploits are handled when they're disclosed Hi it's great that the FTC trying to get ahead of privacy risks in IoT and virtual reality which are new technologies but can you talk more about what you're doing with routers I know about the ASUS case but routers are so important to consumers many of them don't realize it it's the gateway into their private networks and where everything shared and the practices the security practices with router vendor or router vendors have been so bad for so long and many of the same vendors are now doing as well so what are you doing there to convince vendors to improve those practices that have been going on for so many years so for starters we're bringing cases I don't want to talk about any pending cases but I would say that we take we take the security of routers and the claims being made around them very very seriously and are taking a careful look I don't know if you want to add to that yeah all right well I think we're out of time again if there's one takeaway it's that we really want to forge a good partnership we want to hear from you we want to participate with you if you think there are things that we're missing we would love to hear about it and add it to our call to research list so thank you for your attendance and time and happy DEF CON this is awesome yeah thanks for coming


I'm not getting into the past history of slums where I feel that housing has been addressed as the issue and at the end of the day we wound up creating vertical or concrete slums and the overall sustainability has not been achieved including in my opinion the present SRA rules which allow for housing but which do not account for the other requirements which is the the sustainability issues which I will bring. I think we'll bring the slide straight to just just move fast so that I have more time on the yeah this is the way the present slum scheme is being implemented throughout Mumbai and which is definitely going to create vertical slums in my opinion if you have almost one lakh and fifty thousand or two hundred and fifty thousand or two hundred thousand homes being built like this and this is in Dharavi. Fortunately the government has decided not to go ahead with this kind of development anymore. Don't go that fast. Go back one slide please. Detailed plain table surveys have been undertaken and which demonstrates the next slide. How many homes are above 225? 225 is like the magic number because the government says that they'll give only 225 square feet space to the slum dwellers so we've defined how many fall within that how many are higher how many are lower etc. To understand the complexity again and this is the encroached the hatch line that you see is the encroached portion which is all slums and you'll find that even areas which were originally reserved for gardens playgrounds etc. are all still encroached and there's a negligible amount of space open left move and right now the existing conditions is per capita is as you see in white for buildable reservations and unbuildable reservations and you'll find that the blue is what we are proposing which is significantly higher per capita than what exists already. We'll move on. Now we proposed instead a master plan. We have limitations because we cannot get rid of the existing structures. We have to retain whatever were the existing reservations then we have to also ensure that we do not move slum dwellers from one sector to another so there are a lot of interactions that we took which brought about the limitations and finally we arrived at the plan where essentially we are saying sustainability to us is providing high quality of facilities for health for income for knowledge for environment and for socio-cultural development and we've coined the word called hikes for all of this five and we are essentially saying that mainstream people and slum dwellers must share these amenities so that at some point of time the most important thing is we have to integrate slum dwellers with mainstream as I feel that we've been fortunate I've been fortunate. Move on please. We find that in this it's a win-win for all because the slum dwellers get better quality housing with high quality of infrastructure the government gets all of this for free and in fact the developer pays apart from that the government will also get a premium for the first time in slum projects so a liability has been converted into an asset and future taxes etc. The citizens now get a brand new suburb which they have not been able to use service providers we are bringing in public-private partnership even in service providers political leadership obviously benefits because their vote bank remains intact and the developers benefit because they have already made project in that so unless you have a win-win situation projects I don't believe can take off. We have been accused of not providing enough information this is the kind of 16 different agencies that we've had to get our project wetted through and I wish I could have described this in detail and these are the kind of pamphlets 60,000 of these five five hundred of these and about 30 40 of these posters have been distributed and more than 200 meetings within Dharavi with the slum dwellers to interact with them and of course the international and the local media has played a vital role in not only informing the local people but also the international community and the project status is that we're ready to go we are finally we have the final short listing of 26 bidders which might further get shortlisted and within a week or 10 days that will be clear and we have major service partners in doctors and educators in businessmen this is going to be the first eco housing criteria suburb in India working closely with USAID cultural complexes etc the most important thing is mainstream people and slum dwellers will be using similar facilities side-by-side with the slum dwellers will not be paying for it and the mainstream people will in fact be paying for it I wish I had more time thank you


ITTT has been in business since 1997, graduating over 107,000 people worldwide with TEFL and TSOL qualifications during that time. We strive to be the best TEFL and TSOL provider on the market and continuously improve and expand our course selection. We offer three types of courses, online, in-class, and combined. Online courses. We offer a number of different online course formats, all available with or without tutor support. Our 60-hour courses offer an introduction to TEFL and TSOL and are ideal for individuals who are looking for short-term teaching work or volunteer opportunities around the world. 120-hour courses have become a standard course format in the worldwide EFL industry. The ITTT 120-hour courses provide trainees with a solid foundation of teaching English as a foreign language, covering a variety of topics such as teaching methodologies, lesson planning, and English grammar. The 250-hour Diploma Course is an advanced level course for teachers who are already qualified and possess a certificate of at least 100 hours of study. It involves a more detailed approach to teaching methodologies, skills and techniques, and allows graduates to apply for higher job positions in teaching worldwide. The 50-hour Teaching Business English and Teaching English to Young Learners courses are specialized courses that prepare teachers for teaching English as a foreign language in these specialized fields. Business English and Young Learners are among the most common types of teaching fields in EFL around the globe, and these qualifications will give graduates a distinct advantage over others applying for the same position. The 220-hour Master Package consists of three components, the 120-hour Online Course, plus the 250-hour Specialization courses in Teaching Business English and Teaching English to Young Learners. It is the perfect foundation for new teachers aiming for a successful career in teaching English abroad. The 470-hour Professional Package goes even further and consists of all three components as the 220-hour Master Package, plus the Advanced Level 250-hour Diploma Course. The 470-hour Professional Package is the highest-value TEFL and TESOL course package for teachers available, allowing you to enter the EFL job market in a better position from the start and command a higher salary than many other new teachers. Our 30-hour and 50-hour Observed Teaching Practice courses are ideal for teachers who have gained an online qualification but would like to add practical teaching experience. The OTP courses are done remotely, from anywhere in the world, and involve the videoing of English lessons followed by evaluation and feedback from our professional teacher training staff in-class courses. Our in-class courses consist of four weeks of TEFL and TESOL training at one of over 25 training centers worldwide. The concepts covered are broadly similar to the 120-hour Online Course. The most important aspect of the course is the practical teaching sessions to local English learners at the training center. These sessions are observed by teacher trainers and then analyzed with the trainee. This course is ideal for individuals who already know where they would like to teach, to gain local experience, and to be able to look for a job already in the country, though in-class graduates are qualified to teach worldwide. Combined Courses Our combined courses include the benefits of both the online courses and the in-class course. Course takers first complete the 120-hour online course remotely and then join a worldwide training center for five to ten days of practical teaching sessions. If you are not sure which course is right for you, please visit our website www.teflcourse.net or contact us via email at courses at tesol-tefl.com


If you could 1v1 anybody in the NBA history, who would it be? I'll probably go to Guard 2, probably Allen Iverson, probably a legend guy. Dream 101 in the prime, me and my dad.


Hey there! Today I'm going to go over what the schedule looks like in the When I Work mobile app. Let's get started! Go ahead and log into the When I Work mobile app using your email and password. Tap Schedule to open up your schedule. From here, you can toggle between my shifts, all shifts, and open shifts. Tap a shift to view all the details for that shift, including the date, time, location, position, any assigned tasks, and see who else is scheduled to be working at that same time. If you need to confirm a shift, tap Confirm Shift at the bottom of the app. Tap Open Shifts to view all the open shifts available, as well as take an open shift if it fits into your schedule. That's it! Check out our Help Center for more videos and articles on how to use When I Work at help.wheniwork.com


A servant will be raised after death from his grave according to his he'a, how he was in prayer. من السكون والطمانينة To what degree were they present in their prayer and such that they had stillness and tranquility in their prayer. و تكون راحة في الموقف على قضر راحته وتنعهم بالصلاة. So imagine يوم القيام which is subjectively from two light rakhats to 50,000 years people experience it somewhere in that realm is that your raha your repose your repose on the day of judgments will be according to that your repose in prayer in other words that the more that we have تنعهم that we actually enjoy praying the more that we find pleasure in praying the more that we are comfortable praying the more that we that have presence of heart in our prayer that will directly translate on يوم القيامة to how it is that we experience that day the more repose we have in prayer the more repose on يوم القيامة is that the more that we enjoy our prayers the less that we'll fear on يوم القيامة rakhats It directly relates to how we are in prayer. What are we in a manhallah and a behoorah? This is a mokoof that meaning that is narrated by one of the Sahaba by That Abu Harira anyone who says will a God's Sadaq. So he's told the truth and then he quotes the meaning of a hadith The hadith in Sahi Muslim you've asked for the abden. I don't know about it Every server will be raised according to how it is that they died Right their state up when they died will be how they're raised and so that if we Love prayer and enjoy prayer and start to find the halawa in the sweetness of prayer and find pleasure in the prayer The way we experience يوم القيامة is going to be very different Then the way we've experienced it where we to have been deficient in that


Hey everybody, welcome back to Magic orthodoxy, my name is David and this is the Magic Review. Hey, today we're going to look at Project Ultima from Andrew Herring and Feel Astonished Live. What is Project Ultima? Basically it's an entire DVD that's filled with some flourishes, some controls, and a few tricks. You want to see what it looks like? This is it. This DVD is the debut based out of South Africa. All right, so a couple questions we always ask about all of our Magic Reviews and the first of which is what is in the box? What's in the box? You're going to get a DVD. DVD is an hour and 28 minutes long. The effects, controls, tricks on this DVD, they're all done with cards.  Okay, so what's included on this DVD? The first one is a little flourish. It's called Ultimate Aces. It's a straight forward four ace card reveal, kind of like a little flourish, comes out of a shuffle deck. The four ace is just spring forward. It's pretty cool. Kind of looks like Lee Asher's Thunderbird, but more spread out and with the rest of a deck. Then Andrew Herring goes into a series of effects and tricks all based around the Glimmer Switch. There's a Glimmer Switch, a Glimmer Change, a Glimmer Control, and then a Multi-Glimmer. And that included in that is a little Q&A session he does with theory about this Glimmer Control. Basically what it is, is it's a card control for bringing a return card back to the top. I would offer that this would be a really cool control if you're doing the ambitious card routine. It looks like a move you would do in the ambitious card. Andrew teaches this either as a straightforward invisible change or a face-up switch. I didn't really think the face-up switch was as convincing, but that's just me. And Andrew teaches this completely with either one card or four cards. Another thing he has on here is something called the Ninja Grab. It's kind of a control where you're able to lose the card in the deck and then with nothing in your hands, you kind of place your hand over the top of the deck and then you immediately spring the selected card back out again.  It's pretty cool. There's another little card routine in here called Are You Sure? and they also include the little Q&A at the end of it.  Kind of reminded me a little bit of David Blaine's In the Hand two-card monitor, but Andrew's is a cute little take on it. There's another effect on here called 321. It also has a little theory Q&A attachment at the end of it. 321 is one of those tricks where you take two cards and then you combine them together and it becomes a third card. 321, you know, 1 plus 2 equals 3. Yeah, so it uses a very familiar slight that if you're already doing card magic, you probably already know. Kind of seems similar to those effects where you take two cards and paste them into one, but it's in reverse, like where you split a card, kind of. It's one of those type tricks. And then Andrew Herring offers a whole bunch of different flourishes and cuts and little things of fancy for you to review. All right, so what's the overall quality and production value of the DVD? It's got really flashy menus, got very bright backgrounds. There's a lot of German techno throughout the entire thing. If you like techno or house music, this is full of lots of different music, lots of different songs. The filming and the audio feels a little amateurish, but I think that's just because this is Phil Estanage Live's first attempt and it is a good first attempt. All right, positives. What are some of the positives to Project Ultima? I like the amount of work that you're getting on this DVD. You're certainly getting a very ambitious amount of things to learn and things to look at. There's certainly a lot of material here. You're getting a lot of bags for your buck. Andrew Herring is a very skilled cardist. He's very good at flourishing, very good at controls. You're going to see a lot of those in the DVD. Sometimes you're just watching him show off and perform at just a little side. I would argue that these submissions on this, they're not necessarily easy. I don't think they're easy. I think that they'll take a bit of practice, but positive. I think there's something here for everyone. All right, so negatives. What are the negatives to Project Ultima? Like we say around here, there's negatives to everything. These are just the negatives that I see.  On this DVD, there are no live performances, so you don't get to see how any of these tricks work out with a spectator or how they would work in the real world. There's also no audio instruction whatsoever. There's no on-screen instruction, and then when Andrew is actually going through the effect, it's all done with panamine against the techno music. There's no audio at all. I felt a little disconnected with that. There were even some moments, even in the explanation, where because I hadn't seen it performed live, I had no idea what he was trying to tell me. In one of the explanations, I was completely lost, and I felt like it was something I would have to watch over and over again if I really wanted to get the gist of it. I think the little Q&A theory sessions are meant to supplant or replace the fact that there's no audio, and so I think that he what he subtracts, he tries to add back in, but I don't know that it works as well. I would have appreciated audio instruction as well as visual. All right, so is it with your money? It's $35. $35 and you are getting, like I said, just an insane amount of teaching, an hour and a half worth of magic. I do think it's definitely worth your money, and who would like this? I think anybody who's into cardistry, people who don't like fancy cousin flourishes. I think if you do the ambitious card and there's always new ways that you want to control a card back to the top, I think Project Ultima might be something you'd like to pick up. All right, so that is Project Ultima from Andrew Herring and Feel Us On Us Live. We'd like to thank Murphy's Magic for providing this for us so that we could review it for you. And if you'd like to purchase your own, you can find it at your favorite Murphy's Magic dealer. Thanks. Bye.


An INDC is a term that's been coined in the, I think it was in Warsaw at our conference of the parties there a few years ago, it's an intended nationally determined contribution. These are the sum total of the efforts of each party to contribute to the solution, to contribute to trying to meet the objective of the convention. And the objective of the convention I should just say is to stabilize concentrations of greenhouse gases in the atmosphere at a level that would prevent dangerous human interference with the climate system. More recently as Ahmed pointed out in his answer to your first question, parties believe that we need to remain below 2 degrees or below 1.5 degrees C centigrade of temperature rise in order to avoid the most severe impacts.


Good evening everyone. I am so sorry that I couldn't be with you tonight for the second annual conference of the Foundation for Psycho-Cultural Research at UCLA. But I want to thank you for giving me a chance to address you. The work that FPR and all of you are involved in is crucial to the health and well-being of Americans and people around the world. And I'm pleased that FPR has convened this conference to explore the interaction of childhood social experiences and neurobiology.  I'm particularly impressed by the extraordinary group of internationally recognized researchers and scholars gathered here today. From such a broad range of professional disciplines, including anthropology, psychology, neuroscience, linguistic psychiatry and education. I would like to send my special thanks to Rob Lemelson for both his commitment to FPR and for his inspiring work around the world. I would also like to thank the National Institute of Child Health and Human Development for their recognition of the importance of this event through their support and sponsorship. Since 2000, the FPR Center for Culture, Brain and Development at UCLA has been a valuable source of interdisciplinary research, education and training. Focused on how culture, social relations and the science of the brain impact the development of individuals throughout their lives. I share a deep passion for the work of FPR and the scholarly efforts that are highlighted here at this event. I have dedicated much of my life to advocating for the health and well-being of children and families. In the aftermath of the recent tsunami disaster and in our post-911 world, we have become all too aware of the devastating consequences that traumatic experiences can have. Children are especially at risk when they endure terrible traumas including abuse, neglect, bullying and other man-made as well as natural disasters. Whether it be trauma on an individual and family level or large-scale mass devastation, we know that such experiences can leave irreparable and lasting effects on young people. That's why your work is extremely important as we try to find more effective ways to understand, assess and assist children and families at risk. So I would like to thank FPR and all of you here tonight for your contributions through science, education and training. As I've said before, I believe it does take a village and I'm grateful to call all of you neighbors as we work together to promote the health and resilience of children and families here in the United States and around the world. I hope you have a wonderful evening and God bless you and your work. Thank you and good night.