Well, hello everyone and welcome back. This is our unit 3 review video for marketing management If you haven't seen the other videos in this series, feel free to check them out. There should be a link to a playlist below And if you have any questions as we're going along, please leave them in the chat or leave a comment down below if you're watching later But for now, I think we'll just get started here. We have some people waiting in the chat So I'll just hand it over and I'll get out of the way Thank you, Mike. So welcome back everyone to unit 3 for the review for marketing management And today we're going to explore Excuse me segmentation targeting and positioning So let's get right to it So these are the unit 3 learning objectives. We're going to look at the different ways in which Markets are segmented We're going to look at how to identify a target market the target market of a firm's offerings We're going to explain the concept concept of product positioning and we're also going to talk about the importance of branding And as I've done with every session and I just would like to Reinforce it is why do we have learning objectives and and the reason is because each learning objective ties back directly to the course material And to the content that we explore throughout the Throughout the course The assessments are tied directly to each learning objective and of course Understanding the elements of a learning objective can help you with test preparation Now as Mike mentioned, if you have any questions feel free to put them into type them in at any given point and we will have A designated breaks throughout the court throughout the review rather for your questions So feel free to put them in at any time So to begin these are the topics that we're going to review In in unit 3 and as I mentioned earlier, we're going to talk about segmentation positioning What makes a market attractive to a particular company? We'll look at target market selection Branding as I mentioned and many of the aspects that help companies By their target markets which include demographics and psychographics We'll talk about positioning Value proposition which is so important as well as brand equity So the first learning objective is to describe the different methods of market segmentation And the topics that we will explore for this learning Learning objective include the benefits of targeting and segmenting markets The factors associated with geographic segmentation How organizations use demographic data for market segmentation How they use psychographic data to enhance the demographic segmentation And we'll talk about those elements specifically and the factors associated with behavioral segmentation So you can see that there are many different ways That markets can be segmented and we will in this unit and in this learning outcome explore those So the first thing is let's talk about targeting and segmenting markets And what this does is it enables companies to better adapt their offerings Expand their customer base and also help companies avoid direct competition with other companies Sometimes companies will use targeting and segmenting markets to remarket some of their older items Also create new offerings companies are always coming out with new products Targeting and segmenting also can help companies to determine how they're going to best spend their marketing dollars So they might reallocate them. They might add some new elements to the marketing mix And targeting and segmenting those markets will help identify those factors They can also look at ways to retain their customers and also identify early adopters And when we talk about early adopters, we're talking about the segment Of the of the marketplace of people that will be the first ones To use a particular product or service when it comes out. So these are the the benefits of targeting and segmenting markets So let's let's move on to talk to talk about geographic segmentation And what this really does is basically divide a market based on location So gathering information based on where a customer is located Then marketers companies can use a process called geocoding and identify Segments of the marketplace in a particular area. So it helps identify where customers are clustered to understand the The characteristics of people within a particular area and help to develop very specific targeted marketing activities And as we move forward with with this with this unit We'll look at how all of the different elements of segmentation work together. So if we think about And in a little in a little bit we'll look we'll look at demographics But if you look at geographic segmentation Think about the different lifestyles that people have in different parts of the country or different parts of the world Do they live in? Small villages do they live in in highly densely populated cities? What's the weather like in those particular areas? And if we think about all of those factors people that that live in varied locations We'll be making different purchase decisions. And so it's important to understand the characteristics Of geographic segmentation and how that will influence what we buy what we do where we go and how we think So if we move on to demographic segmentation, which is a very basic way Excuse me of segmenting a marketplace and and I'm sorry, my question. Oh, yeah, I just wanted to say real quick to everyone I'm I'm getting a little bit of audio trouble on youtube. So if that's happening for you We're working on it on the back end If we but it's it's it's everything says i'm streaming fine So i'm trying to figure out what's going on for everyone if there's a problem. Don't worry. This is being recorded So there will be a link below if any little just little words here and there But I think we're good enough to keep going. But if anyone's having any trouble, don't worry This is being archived in case you're having any trouble with getting to us right now Okay, so my gosh, I can continue. Yeah, we're perfectly fine to keep going. Okay, great. All right. Thanks. Uh, so Okay, demographic segmentation so demographic segmentation Uh encompasses Factors that we can measure They're very specific We can we can gather the data and we could measure so we can we can determine the ages Of people within a certain segment of the marketplace. We can determine gender and income We can measure family size education Marital status occupation religion and so on and all the factors that that if we had If when we're gathering the information we have a multiple choice question Though those can be checked off and we can calculate those those those factors But the the aspect of demographic segmentation Which makes it not stand alone is that just because people might be In the same age group or at the same income level or the same education level They still might not be making the same purchase decisions And they may not be living the same kinds of lifestyles And so this is where if we go back to the to the previous topic of geographic segmentation Right You know at this point early on we can see how Demographic factors as well as geographic factors can help Identify very specific segments of the marketplace that might have different needs or different preferences than other groups Now if we Add that to psychographic data and psychographic data Is describes a target market I'm sorry Mike. Did you hear something? Yeah, I think I think I mean we're gonna have to bring the stream down for a second I can't I can't hear it and I I'm not entirely sure why But uh everyone will be back for just a second. I'm gonna try something on the back end We're gonna pause it here. We'll be back in just a second Uh, I do not have a sorry we don't have a Good maintenance graphic Hello everyone, uh, we're back. Uh, sorry about that. Um, hopefully everything else Will be back good in the archive. If not, I'll make sure there's links in the bottom to alternate versions to make sure Everything's good. I think what we should do is just probably just restart at this slide and keep going Sure That's all right Um, Mike, I just want to say we have another little little glitch perhaps as I hear an echo when I speak Okay I'm sure I can solve that for you and just let me see if it's still there. Um, okay. I think it's corrected itself Okay, okay. All right. Sorry everyone All right, so where were we? Okay psychographic data and demographic segmentation. So the previous slide we talked about demographic data, which are Elements that we can measure and that we can specifically identify But psychographic data Describes a target market it encompasses things like lifestyles values and attitudes of consumer groups Which can't be measured in the same way that demographic data can be measured, but also is very essential for For segmentation. So for example When I spoke earlier about how you can take demographic information and geographic information And put that together to identify a segment of the population now add in the lifestyles of those people and their values and their attitudes and and the and the People that you will identify within your group will now change So It's important to to recognize that because all of these factors impact the way people will make their decisions And one of the tools that marketers use is something called valves v. A ls which stands for values attitudes and lifestyles and Marketers use this tool to identify different consumer groups And within those consumer groups, there are different There are different characteristics and different behaviors and the groups have been identified as innovators thinkers achievers experiences experiencers believers strivers makers and survivors and each of these different Groups that have been identified have specific characteristics that marketers to use when it comes time to develop to Identifying a segment of the marketplace and then from there developing marketing strategies That will be most effective at reaching those consumers now Let's talk about behavioral segmentation and what this encompasses is how we act towards a product We use products in different ways. So the first aspect could possibly be benefits Started to promote suntan lotion use at other times of the year Uh in addition to that. I'm sorry Do you mind I know this is do you want to reschedule this? Hey everyone, uh So we're gonna have to call this one right now But we are gonna put I will put a link to the full video in the comment section below this in the description I'll put it on our youtube homepage and I'll make sure that if you have a sailor academy Your email is connected to sailor academy for this course that that link is sent out to you I'm sorry. I do not know what is going on with youtube right now because of course as I'm telling you this It is going out to youtube perfectly But if you guys want to leave now, uh, that's great We're gonna finish up and I'll make sure that a good version is on youtube as soon as possible after this So I'll just I'll hand it back over. We'll restart this slide and we'll just we'll go through regardless of the technical difficulties On everyone else's end with my apologies Let's review behavioral segmentation and this really focuses on how consumers act toward a product And one of these is is benefit segmentation and this really talks about The benefits that that consumers seek when they're using a product or service Usage refers to how often a product is used And this can also help marketers identify new ways that consumers can utilize a brand and and I'd like to use the example of suntan lotion Because traditionally suntan lotion is something that we use when we go to the beach when we're at the pool Perhaps when we're out hiking And generally associated with the summertime But there have been marketing campaigns To promote suntan lotion usage at other times of the year So for example, if you're a winter sport enthusiast and you're out skiing or snowboarding the sun is out And you can get a sun a sunburn as well. So uh a way for suntan lotion companies to increase usage frequencies to promote other ways that we can use the product Additionally Uh This helps to generate brand loyalty Companies look at the different occasions that we look that we might use Different products or services. So all of these relate to the behaviors the ways in which we look at at products And when we use them and how we use them and this helps with developing marketing strategies So if you have questions, please make sure that you Send them to us and we will be sure to get back to you with the answers at a later date The next learning outcome is to identify the target markets of a firm's offerings And the things that we look at are the factors that make a target market attractive to an organization As well as how companies determine the number of targets, excuse me the number of markets They will seek to target So let's look at what makes a target market attractive So the first thing is the size of the market if if a market isn't large enough To produce Enough profit. There's really no reason to go after it So that's an important thing to look at is the overall in general size of market You also want to look at the segment growth to see whether or not there's a future In this market and whether or not future sales are possible There has to be room also in the marketplace for a new competitor So you could be going into a marketplace But if it's really saturated and there's really no room for a new competitor that might not be a place to go When there's limited competition in a product category firms can dominate a marketplace by charging higher prices Even offering perhaps inferior goods and blocking access to the market Also, there might be barriers to accessibility that could include things like geography politics technology social factors Also, let's look at costs. So for example, if you have the desire to Enter a marketplace with a new airline perhaps There's going to be a lot of barriers to entry. So there's the things to consider When moving into its accompanies needs to also have the resources to compete So let's say if you go decide that you're going into the airline industry Tremendous resources would be needed A lot of certainly technology, but also political and legal factors might be essential to achieving success So these are some of the things that that companies look at, you know, limited competition again growth Market size resources technology is their room for another player in that industry So let's look at How companies determine the number of markets to target And this we call multi-segment marketing. So not not All companies will go after one specific segment of the marketplace They might be multiple segments of the marketplace that couldn't meet the criteria And make it attractive enough for a company to to enter that segment and see profitability so, uh, let's look at, um concentrated marketing strategy where, um, there's very little competition Um, they go after a particular marketplace, but, um, really seek to dominate that marketplace. And if we look at, for example, Signet jewelers, right? They have a multi-segment marketing strategy, but it's concentrated It's all in jewelry and they have various jewelry stores that will address the needs of people at different economic levels Different income levels different needs different styles and different preferences Uh, they don't face necessarily much competition from smaller own shops, but they diversify and that makes it More appealing for them and certainly more, um, more profitable So in the concentrated marketing strategy, which is can be an element of a multi-segment marketing strategy companies will select Will choose a select group of consumers But it can be risky because if there's a decline in the need for that product Then they don't have any other other opportunities, which is why the multi-segment marketing strategy can be appealing Now if you're going after a niche marketing strategy This will focus on an even smaller segment of the marketplace where the company is looking to gain a large share of a small marketplace So we might we might look at you know high end luxury vehicles as very niche marketing Now micro targeting has really come under a lot of scrutiny for violating consumer privacy and ethics as well Since this really involves gaining very specific details that individuals consumers lifestyles habits and purchases So it's one thing to gather demographic information about a group of consumers or geographic information or psychographic information about a group of consumers But if you're gathering information about a specific consumer That's really bordering on the lines of of you know being unethical, so it's it's not really a good strategy to take Um, and it's also as a consumer You know, we're looking at this as as marketers But also as consumers to be aware of this strategy and know that it's not really a good way to go So as you process all of this information think about any questions that you might have and as we said Please make sure you you post them and we will get back to you as soon as possible with the answers So let's move on to product positioning and we'll talk about different positioning Elements the first is what is head-to-head positioning? We'll talk about the role of a unique value proposition We'll talk about why companies reposition their their brands, but also some of the risks of that repositioning So let's talk about head-to-head positioning, which is exactly what it sounds like its direct competition with another brand in the same product category And this is really when a brand will seek to to differentiate themselves from the competition And and create a way for consumers to receive their brand in a more favorable way Um This helps to again as I said how a brand is Differentiated how the consumer perceives the brand and we'll again like all of these factors lead to marketing strategies So let's talk about the value proposition value proposition It focuses on how a product or service is different from the competition and this is really where you want to Enable the customer to the consumer to answer the question for you to answer the the consumer's question So what? What's in it for me? Why is your product better than somebody else's and this is where you need to make sure you understand your consumer's Needs and what they care about You need to have a good understanding of what you do really well But it's also important to understand what your competition does really well Because the unique value proposition is where all of those elements converge and why you stand out What makes you better than somebody else and that gives the consumer a reason for buying your product or service So let's talk about repositioning repositioning is when you take your brand and you create a new image Around the brand and how your consumer and how the consumers will feel about that brand So why do we do this? This generally helps to generate new opportunities Sometimes we reposition as a response to what the competition is doing Sometimes we do this to address market changes And sometimes we do this to address internal changes. So for example A change in competition and market changes. Let's look at the The growth and popularity of electric vehicles This has been something that that really was kind of started slowly and now there's almost no Auto company that doesn't have an electric vehicle in their in their line of offerings So they're they're addressing that that was repositioned to address competition Certainly with the with with tesla and some of the other major companies Really starting to you know tesla changed the the entire world of electric vehicles But the market's changing consumers are demanding changes people consumers are looking for more sustainable options They're looking to use less fossil fuels and so on so all of these things are are kind of combined again to to To to help companies decide whether or not they should reposition a product And sometimes there are internal changes like new new technologies And new approaches that companies seek to seek to follow So let's look at some of the repositioning risks So Repositioning can bring new life to a brand but it should be based on facts It should be based on what's going on in the marketplace It should be based on what's going on with competition It shouldn't be based on emotions where people within an organization say I think I feel like we should you know We feel like we should be doing things It should be based on on solid information and if you reposition a brand in a way that isn't addressing Market needs you can lose customer confidence in your brand in your products And by doing so you can also miss out on some of the things that are important to your customers And in the marketplace You want to make sure that you don't over promise You don't want to confuse the consumer the consumer you don't want to confuse your customer about what your product stands for So when you seek to reposition it's important to make sure you're doing it for the right reasons and in the right way Again, any questions feel free to Share them on the board and we will respond to you as soon as possible For the last learning outcome for unit three we're going to describe the importance of branding We'll talk about the definition of branding how a company can achieve successful branding and the benefits of strong brands equity And we hear the term brand all the time. What does it mean to be a brand? Well a brand is anything that's associated with a particular product or service the name the term the sign the logo Anything that differentiates one offering from another and you know, if we think about and then we've talked about this before You know the Nike swoosh or the or the mcdonalds golden arches all of those things help to Create branding for that particular company The the goal of branding is to encourage consumers to identify also not just the logo or the Or the trade or the excuse me the logo or the symbol or the sign But also the different traits that are associated with a particular product And by doing so this helps consumers develop an emotional connection and relationship with that particular product So branding how is branding achieved? So branding is achieved through all of the different aspects of marketing Advertising public relations direct marketing all of the messaging all of the communication When we talk about the four piece price place promotion and product. This is the the promotion part That's how branding is achieved. We have marketing. We have advertising We connect with the with the public and we connect with consumers in a way that generates awareness And by generating awareness We lead to higher sales We build trust between The consumer and and the product and the company Also helps to simplify the marketing process If you have a brand that's that has strong brand equity and we'll talk about this in a moment Strong brand awareness your marketing activities are easier You could just put out that logo and consumers will automatically know what you're offering So it really helps to simplify the marketing process Changes the nature of the marketing messaging in a way that connects with consumers You're able to build those relationships And as such you're reaching your target markets And and I think at this point you can see how all of these factors relate back to the to the Things we talked about earlier about market segmentation And that when you are putting all of this together, you're reaching the appropriate target markets in an effective way So let's let's finish this out by talking about strong brand equity And and brand equity is is really defined by having a well-known brand name When you have strong brand equity Consumers tend to believe that your product is of high quality, which will lead to higher sales and also Psychologists have done some studies and and and recognize that consumers believe that a strong brand name Equates to product quality And companies use this information to develop pricing structures They know that they can then charge higher prices for their products with strong brand equity And it could include The evaluation of brand equity can include changes in market share It can lead to higher profit margins. It can lead to greater Logo recognition consumer perception Of that brand tends to be higher and consumers have a tendency to have greater brand knowledge So all of those factors Are associated with strong brand equity and why it's important to to do whatever is possible to generate that strong brand equity But it's also important to recognize that companies need to be able to support that with a quality product and so Strong brand equity is only as good as the product delivers if you deliver on your promises You will be sure to generate even stronger brand equity leading again to higher to higher sales and profits And that concludes unit three Again, we're happy to answer any questions that you have at any point and feel free to submit them And we'll be sure to get back to back to you with our answers. Thank you Awesome. Thank you. Um Well, thank you anyone who who joined. I don't know. Uh, sorry for all the technical difficulties. Um We haven't dropped the frame since I said, let's give up on trying so who knows of So we'll go back watch this. Uh, we'll definitely make sure to put Um, a better version that fixes any of the problems that might have been happening on the front end up there If you have any questions, leave a comment down below on this video or on that video and we'll answer any questions you've had. Um, and we uh, next week we'll have, um, another video on, uh, marketing management. So thanks everybody Bye. Bye. Thank you


今天一程主要是因为他介绍了什么叫AirGaffer的奥特兰的环境然后我们说去AirGaffer的一些文章包括像KuberSpray 还有穆斯瑞然后最后去完成了戴明信换 可能一下去管理KuberSpray最后我们用这些图标去完成一些负责因为我们看一下KuberSpray 还有AirGaffer的奥特兰一般的话我们大同的就是什么是AirGaffer Offline EnvironmentsIn Offline就是我们普通人的理解的话应该就是大同的都是AirGaffer这种So for the AirGaffer NetworkIt's like a private network and we develop a online environmentFor some governments, large corporationsIn China or private usersThey want to protect the users' privacyOr they are already maintaining their own infrastructureand city and also they have some cost considerationsand they don't have public cloudSo how the CoupeADMSo how the CoupeADM supporting AirGaffer and Offline installerThere's something we need to pay attention tofor the CoupeADM images listWe can use the image repositoryto configure the CoupeADM imagesand also another point is about the version of the CoupeADMFor some large corporationsthey might customize their own KAS versionwhich might differ from the community versionIn this case the CoupeADM would not supportSo if you have a CoupeADMyou can customize itThere should be some waysSo we can use the CoupeADMconfig mapand the version must be like v1.11.10or v1.12.1So the CoupeADM check will not have errorsWhen we run the CoupeADMwe have some performance testslike CosLandor ApiVirus checkand alsoWe have this two methodfor the CoupeADM version of deploymentand another thing is the deployment of ETCD versionbecause it will affect the upstream of the CoupeADMbecause large corporationsthey need to publish their ownin order to solve their own problemsSo this is based on the feedbackfrom the CoupeADM 2018and supported the version 1.13So we can use the CoupeADMspecify the versionCoupeADM在v1.12修補了在off-line和aircraftin version 1.12CoupeADMhas solved the offline and aircraftsupporting issueslike version checkSo this is for the version check issueand another is for thefix offline and aircraftsupportingit's about the optimization of the usagesometimes we have some interruptionsor interruptionor interruptionSo the CoupeADMcan help to fix this problemSo with the supportyou can help youto overcome this interruptionand also it can help yousome kind of problemsCoupeADMconvenienceaircraft and offlineSo here on this slidewe can haveus on the CoupeADM installSo in the private environmentonly on or two machinesthat can access to the network其他器材在研发器上使用的方法我们需要东西可以把研发器和研发器和研发器和研发器我们可以把材料和研发器和研发器然后带到路楼到领域然后带到路楼到领域然后带到路楼然后在第一个研发器我们可以使用一个一个空置的研发器然后强盖 check然后然后我们会有强盖的全壶全壶然后我们会使用强盖的全壶然后可以使用强盖的全壶然后我们会使用强盖的全壶所以如果我们想调整一下,或者调整一下,我们可以使用Kubadium来调整一下。所以,其實如果我們來看這個程式,有很多不同的雜誌,例如Cuban DM,Intel Configure,Cast Configure,Cuban Editor Configure,他們會用來作整個規定,特別是Cast Configure,它是非常困難的,如果你想去修補,儲存,Cast Configure,會有網絡,ETCD,API,API Survey Schedule,Control Manager,一些規定,如果在整個程式上,你必須保持,我試過,它有三百個規定,所以,很難保持,尤其是,你必須很難找到一些改善的方式,所以,我們有修補的方式,其實,例如,PIA,Cuba Spray,Cuba DM,共用一層,所以,用CAP,還有,還有,還有,還有,用Cuba Spray,用Cuba Spray,用Cuba Spray,用Cuba Spray,用Cuba Spray,用Cuba Cluster, So,用Cuba��b 1960度打發,用Cuba Registry,用Cuba Spray,用Cuba 計劃,用Cuba DM,AV2、AV3、2B1版本Cube3支持所有的版本所以可以更新CPU的功能非常簡單我们来看一下HARBORHARBOR就是是一个信任的键盘它是键盘的键盘它是键盘的键盘Mission is to provide cloud-native environmentsthe ability to confidently manage and serve container imagesSo, HUB architectureActually, we just care how it is usedlike use home chart or .comuse to install HUBand how to push the mirrors into the HUBor how to through your CRCD pipelineto push your mirrors into the HUBwe only care for this processtypical use casesfor example, image consistency through software life cycleand shipping images in binary formatimage replication unlocks interesting deployment architectauthenticationand the vulnerability scanningfor example, this wayto shipping binaries in production environmentmaybe we want to cloneKubernetes in-houseso we can use Kubernetesthen push it to depth registryand then push it to HUB mirrorand then put it in tester registryand finally into staging registrythen finally into productionand kubesprayis ais a cluster life cycles projectto create, configure and manage Kubernetesclustersit provides optional additive functionalityon top of core Kubernetesand kubespray is a cluster life cycle managerit's flexible and composableand it is production readyand it's ensemble basedone package based componentmulti arc community driven since 2015and the base of kuba dmsince 2018and certified Kubernetes installerso the deployment workflowyou check what system i useand then to pre-install steplike check the firewalls etcand checkdockerscheck to do some pre-install stepsandand then install dockerinstalletcdinstallmasterinstallmenuand configure networkpluginand based on your own needyou can put some add-onslike dashboardor storage pluginsand high availabilityso etcdit provides native supportfor all clients to connectto all etcd instancesAPS serverit is foryou can use local lbas well asexternal lbincluding cloud lb or f5andcube3 also provideslocal lblike njx proxywhich is a stack reportin Kubernetes clusterlocal lb architectyou can seenjxhaproxyand convert ittoand become highly availableso for this architectit's more economicalcost efficientif you use f5or cloud lbthey are allcharge basedit provides also youa lot of user optionsincludingosnetworkand kubernetes featurescontainer engineand deployment modeso this is off-line optionsnextkubernetes off-line optionsbut it's binariesif it's binaryit's exchanged intoit's changed into your own urlor your on-premise urland also imagesyou can use in dockerit supports the HTTPSand the system packagesit supportsyour own resource for dockerinstallmentand ham chartsso this linkgive you the specificconfigures for off-line optionsand for air gap optionsfor examplekubernetespushmanicpushmanicif this environmentis only accessed by one machinethen we can configuredownload localhostso the truth to make localhostdownload delegatethis can be usefuldownloads cannot access external addressesyou can also downloadcontainer imagesand the binaries only onceand then push them to the cluster nodesbut this comes with two conditionsone isyou have to pre-configure dockerandyou should also boost dockerin advanceand also have cache functionsit canthe imagesthe images are storedat your local storageso if you call a masterit will copy from the localhostit also guaranteeit can also be storedin caching cloudifyou can use the images in cloudor binaries to upgradeso it'ssome of its specificconfigurement so you can trywe also add apia to testbecauseyou know there's an OVH company in Francean OpenStack-based companyand provide us this environmentso one member of our communityalso did a test on thatyou can check it outLGRAPLGAPyou should have itsothat's for the coop3'sLGAPand offline configurationthere's also some praxmoorlike a coop3 does not supportand only supportspart of the software packageinstallif you're interestedyou can check onlineand the communitygrew very fastwe have 6,400 stars2,600 perksover 4,400 commitsand 450 contributorsso you canyou can contact uswith these contactslike a coop3 chinaso if you're interestedyou can add my i2d switchnextI will talk about how toset up a coop3in an air gapoffline environmentin combination of harborto manage your Kubernetes clusteroffcourse you have tobe readybecause have a support offline installso you caninstall offlineyou can collect imagesand publish imagesor through cipeplineto push imagesto the fieldand coop3you only 3 stepsinstallrequirements.txtand modify the roast downloadimages registryso basically your hub addressand then installkubernetes clustersand add private registry optionsand I saidthat you have alsoconvired some offline optionswhich model you chooselifecycleof cluster operationshere it isyou have thesefor example clusterinstall or reconfigurea clusterreconfigure into a clusterscale master scale nodeandand also update a newand also you can gracefullyrolling upgrade to a new versionwith upgrade cluster.ymland also scaleis to add a nodeto an existing clusterand the remove nodeis to remove a particular nodeand the resetis uninstallan entire clusterwe can specifya kubernetes versionand then we canadd upregister is non-securedurland alsonowand then you canuse the msql toscale nodeas simpleand shownon the slide is tell you how tofigure itor scale masterhas twoscenarioyou canuselocal lbfor local lbyou need to usefor any m to generatescenificate for each nodeand also you need to updateand just processconfigurationfor each calculation nodeand to direct the trafficto the newgeneratedmaster nodebut for the externallb is much simplerand for different versionsso when you usedifferent versionsyou need to pay attentionto whether it can generatescenificatefor the scale masterand for upgradeclusterfor exampleyou want to upgrade to weave1.13you just need to upgrade the versionsupport otherlbdmaster equivalentnetworkso you can have a stepupgradetodecreasethe consistency of the failurefor the full cluster upgradeby stepupgrade is much saferand remove nodeand uninstall clusterremove node is very simpleuninstall is also very simpleusers set the ymltodelete the whole clusterthank you very muchany questionsI want toumwhen you usescenificateso when you need toincludeadm processfor generate unionsscenificateso i want toadd one layer of lbso we need to give thescenificate to the lbit should providelike a vip or lbso it's like only two dependence后来我们用的是we usescenificateto solve thisto solve thisscenificatebut another cheaperlow balancewe usevipwe uselbdbdbdbdbdso you are already createdthis is the final nodefrom company have three masterfor each nodeyou run acouple appand vip ison one of the three nodesso you have the vipreadyyou can routeto the three masterit means kubadmyou can write the vipto the control planeparameter of the kubadmany can achieve the systemlow balancecoups ratio also supportsthati'll be gently toconfiguring the lbipagent and portyou can just go backtake a shotfor upgradewe have a updatefor upgradeif we want to roll backwe also use the same scriptwould you mean by roll backfor exampleupgrade we find someproblem with the versionwe want to roll back to the older versionyou can use thecluster againsokubadm supports the rollbackwe have an automaticbackup to theatcd to rollbackyou also have the automaticrollback of the backupset shotwell you can have a trynot very surebut i know hookstree supportdownloadif for wadm supportthis then hookstree will also supportokwe mentionedoffline download localhostthere are some questionscan you repeat iti didn't quite understandyou need to pay attention totwo problemsyou need tobarrow dockerand deployment decision makingyou have to install the dockerstart dockerand then you canstart the upgradeif you want to download localhosthow can we install the dockeron theon deployed machineyou can have a pre-deploymentfor example you can write aasphal sampleto install the dockerin the offline environmentor you can use tux to tryi use hookstreeto download localhostto deployi found that in the target machinewe can use hookstreeto install the dockerbutwhy we need the dockeron deployedon deployedtopic machinebecauseyou need to sync the imageto each nodeand alsoyou need to execute thedocker nodeso it's theoryeven though the dockermachine is offlinewe canusedelegate the machineto install the dockeron deployed machinewell i don't think it's supported nowwe can usevmvmletalor ps fileto install dockerby defaultfor integrate a vm modeltoin callingcallingthe dockerby defaultso you can try this tooso afterwe deployed hookstreehow can wetest thefunction of the deployedclusters any best practicecrups break壮如果品牌成功,也许CoopSpray能够发出一些评测程序还有搜索的订阅那么多少人在做评测程序?我没有这种数据但是很多人,例如,在商务院的文化中他们也有一个互联网组织的他们也有一个他们也有一个他们也有一个他们也有一个他们也有一个他们也有一个他们也有一个他们也有一个謝謝


Okay. We will have this talk now about OpenBGP, Discussion and Skillshare. This is part of the Getting Involved in Debian track. And the speaker is Daniel Kangilmore. So, Daniel, please. Hello. So, my hope is that this is going to be more of a discussion than a presentation. I don't actually have slides, because I wanted to just actually hear what people are working on, what their workflow is, and make sure that we can figure out sort of best practices, ways to do this. What I have up on here is the Gabi notes for this session. Sorry about that. So, this is... Sorry, let me show you where it is. If you go to gabi.debian.org within debconf12buff, there's an OpenBGP Skillshare. This is a Gabi document, so I invite people to edit it. And if someone wants to try to take some notes as people throw out ideas, it would be great if this document could end up actually containing the good ideas from you guys, because I have some ideas about how to use OpenBGP, but I'm sure that everybody else here has other ideas, and the more we can learn from each other, the better. So, also, if you have any questions, or if you want to... I really do mean that this is not going to be just me rambling at you. I'm hoping that we have a discussion, so please sing out. There's a microphone here, and Gunnar has a microphone. Right, so we have two microphones, so either just come up to the mic, raise your hand, and Gunnar will dance it over to you. So I just wanted to make sure that we're sort of all on the same page here about why OpenBGP is important for Debian and important for network communication. So I'm just going to skim through some of these ideas quickly, but if you have questions about them, or if you think that I'm wrong, or that these topics are wrong, or you're not sure, we should talk about those too, because it's a complicated topic. But basically at its core, the OpenBGP certificates are about identity. And the reason that identity is important is because it gives you a baseline that you can then use for confidentiality and for integrity. So why do I say that identity is a baseline for those things? So confidentiality, should we need it, doesn't make any sense if you don't know who you're communicating with? That is, I can't send a confidential communication to an unknown party, because it doesn't ensure that it's private to the unknown party. So identity, I need to know the identity of the party to whom I'm corresponding, or with whom I'm corresponding, in order to ensure that it's a private communication. And integrity is based on the idea that it comes from someone that you know. And here I'm editing the Gaby session as we speak, because the other big thing, and we'll see this a lot in Debian, is reputation. So once you've proven who you are, you can use that as a baseline to say, well, this is the person, I am the person who did these 10 things in the past, and you can judge me by that. And that reputation will help you to find your way into doing the things that you like to do in Debian. So where do we use OpenBGP within Debian? Someone just pasted their password onto line 42 there. You probably want to change your password. So, let's see, let's fix that up here, sorry. So where do we use OpenBGP in Debian? We use it to sign mails to the mailing list sometimes, some of us do, not everyone does, it's not necessary to do that, but we do, some people. We use it for voting, so if you're a Debian developer, whether uploading or not, you participate in the votes that happen, and those all happen via OpenBGP signed mail. There are some password resets and things for Debian machinery that require OpenBGP signed mail. You use it to sign if you're an uploader, you would use it to sign files that are part of package descriptions. I don't know, can people see the text up here? I don't know if this is... But so there's a bunch of different things that we use it for, and we also use it for system infrastructure, so this is how we make sure that our packages are coming from Debian. And that's a system key, it's a key that's maintained by the FTP masters that signs the archive so that you can ensure when you're fetching packages over the network that what you're getting is something that's from Debian. So there's a lot of places that we use it, there are probably many more. Do other people have thoughts about ways that are not mentioned here? Ways that we use it? Well, only worth mentioning, I think, while most of the keys are owned or related to a person, and I think that will be most of your talk, we have some keys also related to roles or to processes. Right, and the archive signing key is a great example for one of those keys. So... I may have missed this actually when I came in, but Debian specifically do use it for identifying new people into Debian. So we have someone who's already trusted as part of Debian and has to have signed a new key that gets introduced, whether that's a new maintainer or a new Debian developer. So we use it for the whole web of trust is actually something we intrinsically use to introduce new people as well as to trust the key material involved. Right, right. So just to give some... What I'm hoping that we can do here in the next 40 minutes or however much we've got, yeah, about 40 minutes, is that we can share some of the ways that we use OpenPGP here and if you've got good workflows that you think might be useful and configurations that might be handy or you have some concerns about the way that you think people are using them, I would just be nice to share those tricks and maybe folks can come away with this with a document that recommends some ideas that people might like. But to give some background on that, I just wanted to make sure that we're all on the same page when we're talking about these keys. So this is just a bit of vocabulary stuff here. I don't know, let's put that in the middle of the screen there. This certificate structure section here in particular. When we say an OpenPGP key, we're talking about actually a bunch of stuff. In general, we're probably talking about the public key material and the names associated with it and the signatures that have been made that say, yes, this name belongs to that key. And so the actual structure... So I've got it drawn up here in sort of a tree diagram. This is one person's OpenPGP certificate. And so up at the top there, the primary key is the sort of core that anchors the entire OpenPGP certificate. And on that primary key, you can see here because I've got a star, that means there are zero or more direct key signatures. Most people don't have those direct key signatures, so we can ignore them for right now. If you ignore that and look down on the next line there, every primary key has to have at least one user ID or more. That's what that plus is for. And then the user ID itself is signed. So what you can note here is that the signature on the user ID actually signs the user ID with the primary key. So it's a signature over all that material. And so when people talk about their key ID, they're talking about an identifier that identifies the primary key. And then because these signatures are present, you can figure out which user IDs are associated with it. So that's the way that it's structured. And a lot of people get the term key ID confused with user ID. And if we can keep the term straight, I think it's going to be more helpful when we're talking. So for example, this here, that's my user ID. And this here is my key ID. Or actually this is my full fingerprint. The full fingerprint is relatively long. When you ask for someone's key ID, they'll usually show you something short like this. Just this last chunk here. Is this visible to folks in the back? Okay. So this key ID, this short key ID, people will often use that to refer to a key. That's a bad idea. That's easily spoofable. Unfortunately, Ashish left us today. He went off to another conference. But Ashish is known for having generated a new key that matches the same key ID as his old key. So you can do that. I've done that on this crappy ancient laptop in a couple of hours. So. Well, for the Debian key ring, we use not the eight last digits as you did, but the last 15, 16 digits. So, well, everything that consists of getting a digest is potentially spoofable. But what's your opinion on getting 16 digits? So 16 digits is 64 bits. These are hex digits. So a brute force search over that space would be roughly two to the 64th operations. And that's pushing it right now. There are known collisions of the 64 bit key IDs in the global PGP Web of Trust. Right. Well, certainly for v3 keys, in fact, it's trivial to create the collision with version three keys. So I should probably adjust this to say openPGP v4 because we really need to stop using openPGP v3. It made me very happy. What's that? We did. Debian stopped using it several years ago, and it made me very happy. Yeah. And actually that move is a great move because, and this is another situation where Debian is important, that move has actually helped to convince the GPG maintainers to drop support. And I think it will be the next release of GPG where you won't actually be able to import a v3 key, so you won't run into those kind of collisions. I really think that we should be using the full fingerprint for everything, but GPG's key database doesn't do that. So we're stuck at the moment where, at the mercy of the tools, if only it was free software that someone could be convinced to fix. Yeah, well GPG made the move of changing to using full fingerprint prints for returning keys, which then broke key servers that did not parse full fingerprint prints. They seem to have just assumed that the world is SKS. So let's not always trust new PG to do the right thing. No, I agree with you. GPG is not always doing the right thing, and I'm saying that we as Debian can give guidance to GPG in terms of what needs to be done, and they seem to accept that. So the other thing to note, I don't know, for those of you who are new to Debian or who haven't looked at the OpenPGP space a lot, Debian is the group of Debian developers and ex-Debian developers and Debian maintainers is the largest group of people actively using OpenPGP certification in a coherent way. And so we actually have a fair amount of sway over what can happen in that space. So I want to follow up on something that Noodle said, especially in the context of what you just said, Daniel, and that is there are alternatives to popular programs like SSH, like Mosh, and I'm wondering how feasible is it to imagine an alternative to GPG that implements PGP? So there is actually, I believe it's, I can't remember the license it's under, it uses OpenSSL, so it's tainted by whatever the association was with that, that the... So the UK domain registry, NOMINET, actually, I believe they still, they've got another system now in place as well, but originally, like if you look back 10 years ago and more, NOMINET used PGP signatures across all of their meals. So every single NOMINET member of which were at least 500 had a PGP key and was using it commercially day to day, and they signed all... any domain that had a .UK ending on it was registered using a PGP signed meal. No, they didn't do Web of Trust things on it, I know that they're technical guys, then sponsored the development of this library which does exist and was written by... Ben Laury. Ben Laury, I couldn't remember which of the lauries it was. I've... looked at it, I must confess I was put off by the licensing which then meant that I couldn't do whatever I was working on. I had the same experience, by the way, I tried to package it and decided that I didn't want to introduce another cryptographic dependency on open SSI licensing. I think having diversity and implementations is always a good thing. I think that GPG actually gets pretty much all of it right. I would have some objections to some of the things they do and some of the ways they work, but in general I think it's a reasonably good implementation. It might be nice to have a library that was easily usable by other projects that would then let you hook in and even do things like tie into Perl rather. I mean almost everything I've seen ties into the GPG code whether it's calling GPG correctly or they've now brought some more of it out into libraries I think. I can talk to some of that if you want. I've not played with it. I mean I have written PGP parsing code that doesn't do any of the crypto stuff and I have some of that that I've used in writing a key server that doesn't do any of the crypto stuff and I think the crypto stuff is actually where the interesting bit is. There's two bits about that. One of which is how much traction would it get and second of all is it needs all of the audits. If you're writing it from scratch it needs to be written by people who are trusted and have other people to look at it and it would take a long time to get to that and I'm not sure we need that at this point in time. OpenSSH came about because SSH was private. The V2 stuff was not available for non-commercial use. It was a use case why we had OpenSSH. LSH as far as I can tell doesn't really exist anymore. I know that there's been some good stuff that's come out of LSH but it never really went anywhere. Let me actually mention that. One of the good things that came out of the LSH development was the Nettle cryptographic library and Nettle actually does have some OpenPGP parsing code. So anyone who's interested in writing and thinking about trying to write an additional OpenPGP implementation will be able to start with the Nettle library and try to either add to that or build on top of that. So I do think that we should have another implementation in particular because of the lack of a library interface to GPG. I would just like to make a motion right here. Right now I know there's a lot of interest and I am interested in following this discussion as planned as part of this like tutorial track and ask you to request an event to continue discussing this which is quite important for us. Sure. And if we can figure out a time to have a further discussion I'll try to announce that and maybe put it into the same document in Gabi so you can check back to see if it got scheduled. So the basic idea is that we've got whoever put sub keys in on line 59 is absolutely correct. I'm not sure why I didn't put the sub keys in there that totally needs to be in there and it should have each sub key. I'm not going to do fancy unicode line drawings on that but each sub key should have a binding signature. Someone wants to hook those up. The sub keys should come directly off of the primary key sorry that's off the top of the screen here. Each primary key can have zero or more sub keys and the sub keys should have basically one binding signature each sub key. So yes so what's happening here someone's got some nice unicode chaps so the binding signature is a signature on a sub key that binds it to the primary key so the key material in the sub key is the same kind of key material that you'd have in a primary key so for example it might be an RSA key but it might have different properties than the primary signature it might be a different size it might be marked to say this key is to be used to encrypt mail rather than to sign things but how do you know that it belongs to the same person? The way that you know is that the primary key has signed over that sub key and itself the sub key belongs to me and you can then infer that it's associated with the user ID that's also associated with the primary key. That actually brings up a question I was having in terms of what's recommended best practice with the primary key always be the signing key and should you only make it a signing key not an encrypting key? So you're asking questions about the key usage and the OpenPGP standard defines a bunch of different possible key usages and here I want to introduce a bit of terminology that I didn't write down here either, very sloppy of me so I would like to distinguish between signing and certification and so when I say signing I do my best to say signing only when we're making a signature over regular data so this is data that's coming from me I'm putting my stamp on this data and when I say certification I mean I am making some kind of OpenPGP signature that is a certification binds a key to an identity or a key to another key or something like that but it's working within that framework and that's different from me signing my email so with that distinction between certification and signing there's a separate and distinct key usage that is certification that's distinct from data signatures your primary key is guaranteed by the structure of this whole thing to be a certifying key it has to be able to certify or else you couldn't make the signatures that bind user IDs and sub-keys to it so you're guaranteed that that's certification and then yes I do recommend that you have a separate sub-key for encryption and then there's a question about how you want to deal with signing you can either go ahead and sign with your primary key or you can make a separate sub-key for signing maybe we can discuss that I'm going to get into the idea of separate sub-keys for signing shortly but yes I recommend that you do not use a single primary key for all purposes and the reason for that is because there are certain kinds of attacks where someone might be able to convince you to do something with your key that they could then replay in another domain so if you have a key that you generally use for one thing, keep using it for that one thing and mark it so that it doesn't, it can't be used for these other things and sub-keys are designed specifically for that kind of a use case to separate it out and say okay this key is going to do this stuff and don't trust it if you see it over here so okay so the core of this stuff is asymmetric encryption which means that your key has some secret material that you and only you control and then there's public material that everyone in the world has to know about so I wanted to talk a little bit about the public key material right now because there are some surprising properties that people don't expect I'm not going to go into the cryptographic part of it for the public key material which is everything that we saw and that whole certificate all of that stuff is public the secret key material doesn't even show up there so what we have is we have a key server network that distributes keys all around the world relatively rapidly and anyone can access it and it's all public and that's using we access it using HKP noodles just mentioned that people tend to think that it's all SKS which is one implementation which we have in Debian right now but it's not all SKS there are other key servers including Onak and PKS but the majority of it right now is SKS so there's a surprising characteristics about this key server network one thing is that when you inject if you upload your public key to one of the key servers within a couple of hours almost all the key servers all around the globe will have that key all of that entire certificate will be published globally and once you publish it there are no take backs any data once put in the key server network is permanently in the key server network so if you don't want this to be public don't put it in the key server network you can't take it out so a consequence of this because the open PGP certificates are certified by other certificates so you've got potential for mapping of a social graph there are a lot of people who are uncomfortable with that so there will be a key signing here at this conference haven't announced exactly when it's going to be I'm hoping that it will be Thursday evening but you can also sign keys with anyone at any time including during this conference even if it's not at the larger key signing event so but that means that say I've signed Gunnar's key if Gunnar uploads his open PGP certificate to the key server network it now has a signature over his user ID and his key that's made by my key so now anyone who wants to can fetch that information off the public key server network and say ah DKG has met Gunnar and they now know that there's been an interaction between us so this allows someone who's interested to look at the map of the sort of social graph that says who has met who and because a lot of people are unwilling to sign keys unless it's someone who they know personally it might even be implied that it's not just who has met who but who actually knows who so we're starting to get to the point where if you look at it you might say oh well this is actually like a whole Facebook friends graph and well what can you do with that well there's a lot of insidious things that someone who's who you don't like might be able to do figure out who your friends are and figure out where you live and where you've been and there's all kinds of stuff so some people are a little bit nervous about the fact that there's a potential for some kind of social graph mapping I'd like to emphasize that if you just sign people's keys after having met and identified them that's the only thing it needs to say it doesn't need to be these are my friends it just needs to be I've identified this person and if you do that I think the social graph mapping becomes significantly less damaging and certainly less damaging than for example the information that is actually contained in your Facebook friends graph or the information that lists the all of the emails that you've sent or something do you want to just send to the microphone I think the mic is being turned on okay let's write this one yes there's there's parts within Knoopici about where you can put on it's called a trust level that you can set but that part will never be exported to the key service so if you set a trust level on someone it will not be exported to the key service that's right so yeah more vocabulary that I feel like I should have written down here because I've tried to distinguish certification versus signing and so let me add a bit of other vocab which is I think trust levels are like falling out of favor they were asked by default some years ago and now they're no no Rhonda's talking about this is where we need a vocabulary disambiguation because even the GPG documentation was fuzzy about this until about a year ago when I sent them some patches so so let's say I have a key and the key claims that it belongs gonna I'm using you as an example I've been doing this sorry I hope you're okay with me using you as an example so let's say I have a key and the key has a user ID attached to it that says Gunnar Wolf well who can make a key that says Gunnar Wolf yes you can you all can it's not hard to make a key and claim whatever you like so I have this key and I have to decide is this actually a key that belongs to Gunnar well the way to do that is that I can go physically talk to Gunnar and he'll tell me yes it's this key so this is a key this is basically what's happening when we do a key signing so once I've confirmed with Gunnar that it's his key I believe that key is I'm going to say I'm going to use the term valid so I believe that that key belongs to the person who is identified by the user ID associated with it so just to clarify that what you're really signing is the fingerprint you're not signing any of the UIDs you are actually signing the user ID so what you're signing is you're signing the primary key which you've interpreted based on the fingerprint and the user ID associated with that so you're actually and I'm going to use the term binding again you're actually binding that user ID to that primary key you're saying I believe that these things go together and making a cryptographic certification that no one but you can make and if you have a certificate that has two user IDs in it like mine has several user IDs because I'm both DKG at 5thForceman.net and DKG at Debian.org so you wouldn't need you wouldn't need to but you could certify both of those things or you could decide I don't know whether he's actually DKG at Debian.org or I think he's actually not but I do know that he's DKG at 5thForceman.net and you can certify the one user ID and not certify the other it's all within your control to do that so but what I was just saying so I've gotten this key I've looked at its fingerprint I've talked to Gunnar it has Gunnar's user ID on it the fingerprint checks out I now believe that key is valid so I believe this key belongs to Gunnar I can now make a certification about that and I can even send that certification to Gunnar or I can publish it to the public key server network to tell other people I believe this key belongs to Gunnar that's all about validity but I can now also say in GPG I trust the person who holds this key and I trust them is limited in scope GPG doesn't care about whether you trust them to feed your children GPG doesn't care about whether you trust them to cook good food GPG doesn't even care about whether you trust them to write good software the trust they're talking about is very narrow and it says I trust the person who holds this key to make good identifications that is their certifications that are made on other keys are I'm going to consider those things acceptable so then if Gunnar meets noodles Gunnar checks out the key with noodles Gunnar makes a certification for noodles and publishes that well I might now take that certification and say the certification was made by Gunnar therefore I now believe that that key is in fact noodles key so that's a valid key that I now believe is valid because I trust Gunnar so when Rhonda was talking about setting trust levels in a key you're not publishing your trust levels the trust levels are something that GPG keeps to itself and it knows, you've told it this is a person who I think makes good certifications this is a person who I think does not make good certifications and by default it assumes that you're not willing to rely on anybody's certifications so when you hear trust that means am I willing to accept certifications by this person and when you hear validity that means do I believe this key belongs to the person whose name is associated with it do you want to try that microphone or try Gunnar it works now you can revoke your key by publishing the revocation certificate but how would you revoke trust let me add revocation because that's another one that I should have put in here and I'll put it in my handwriting in green here so that it looks like I thought of it well revocation is a public statement it says either this key is not valid anymore when you revoke your key or when you revoke your user ID it says this user ID is no longer associated with me I used to work at foocorp.com and I no longer do so I'm going to revoke that user ID so these are public statements but trust is not a public thing you're not publishing your trust levels so to revoke your trust just means changing your trust and you'd set that in the same way that you would use GPG to change to set the trust so you'd say GPG edit key and then the identity that you're going to be editing the key for and then you'd say trust and it would say what's your new trust decision and so if you had previously said I trust Gunnar fully and then you discovered that actually Gunnar tends to sign keys immediately after the wine and cheese party then you might go in and say okay I'm going to drop the trust level and his certifications back down to zero because he's probably full of wine and cheese and that's not a good time to be thinking about what you're doing by the way I don't think he has ever done that so today is a good moment to find out right yeah lots of different things that we could be covering here so let me try to hit a couple of other details that people might be interested in and then I'd like we're kind of running close on time already so we've talked a lot about the public key handling another question might be about how we handle secret keys your secret key material really does need to stay secret to you if anyone else learns your secret key material they can impersonate you on the network if they can impersonate you that violates the identity thing that we're trying to build out which means that they can damage your reputation they can receive confidential messages that were intended for you they can masquerade as you when talking to someone else it violates a whole bunch they can upload packages as you if you're a Debian developer which then hurts everybody else in the distribution including all of our users and all of the derivatives so keeping your secret key material secret is actually really critically important also really critically important is making sure that you still have access to your secret key material so not only should no one else have access to it you need to be able to have access to it if you lose the laptop that it was on because it got it was out in the rain and it got soaked you now don't have an identity to be able to connect back into the web of trust so you'll have to rebuild it again so managing your secret key material carefully is a pretty critically important thing and there's a lot of people who have different interesting strategies to do that including things like keeping your primary key offline so that it's available and having sub-keys to do all of your regular work you can use smart cards as somebody noted up there and there are other approaches that you can that you can use Gunnar you're standing with a mic and you have so I wanted to point out that there's some things to think about there for managing the secret keys and then there are some suggestions sort of technical suggestions about key size ciphers to use and things like that that I'm not going to I think get into too much detail I can yeah I'm just curious how many people in this room either use offline primary keys or don't have the primary keys on their laptop but only sub-keys so not very many people but let me just point out here there's a confirmation bias in the people who are interested in these questions being in this room and that was less than 25% of the people in this room I think so very few people are currently doing that I'm not currently doing it even though right now I think I probably should be trying to sort out soon and how many people are using smart cards but basically you can have a smart card soon external device where you store the private key and the idea is that as it is an external device it cannot be accessed so your key cannot be stolen from the by breaking into your computer and any signing will actually not be done by the computer but by the card itself right so I I actually used to carry a smart card for some secret key material that happened to not be open PGP secret key material it was RSA keys for other purposes and I carried it for about four years and I'm no longer carry it so I'll just say why I decided that the trade-off was worth it at the time which is the stuff that you described and after four years I've now decided that I don't think it's worth it for me one is that smart cards if you use them every day and you carry them every day they will fail they're cheap crappy hardware and they don't have really a long insertion life and if you use it regularly it's likely to fail the second reason and when it fails then you have to dig out a key from backup or whatever and the second reason that I don't use it anymore is because I've been reading about different kinds of attacks on smart cards and there actually are cryptographic attacks on smart cards that make it sound like you might be able to extract the key from the card itself which is like the absolute worst thing that you're not supposed to be able to do so there are I think they have a lot of advantages I think they also have some disadvantages and I'm not sure I'm not convinced enough by the hardware vendors that the key promises they offer are going to be maintained unfortunately we have a question on IRC from somebody who is very far away in the Central American country by the pool I have a question how is the normal approach to use when you notice that the user has several keys and has no longer access to those keys personally I ask if they just lost their secret key and if they confirmed I decide not to sign any new key since I feel they will not take a good care of their private data okay so part of the thing about OpenPGP certifications is that these are subjective questions right is this person who they say they are do they really have control of their key and it's sort of up to you to figure out what you what your signing parameters are so I don't think I can answer that for anyone else I personally would not make that decision I would sign it what I would probably do is I would probably sign their key and I would probably set an expiration date on my certification so I would say I believe this is their key but it's probably only going to be their key for about a year and if in nine months they're still using it maybe I'll make another certification for another year but that way I don't have to think about it I can just say it's probably about a year long and we'll see where they're at so it's a soft expiration yeah if you look at the certifications that I've made you'll see there are lots of there are lots of expirations in them not just because I think people are necessarily going to be lazy but because I don't know what the future is going to be like would you take the opportunity to educate them about revocation certificates yes so if you lose control of your key or if an adversary or someone unknown gains access to your key what can you do if you still have your key you can generate a revocation certificate right then and say this key is no longer valid publish it to the key server network using the same mechanism and all of the key server network will propagate it and anyone who fetches your key again will get that revocation certificate and say oh this is no longer the right key if you do not still have access to your key for example if you stored the key only on your laptop and your laptop was stolen then you don't have a way to publish that revocation certificate and that means that in the future your key will always be published and it's out there with no revocation so what you can do is you can create a revocation certificate and store it you can put it on a USB key you can print it out on paper and if you should you have to use it you can type it in you'll make a revocation certificate and just store it for safe keeping so that when you lose your key you can revoke it don't give anyone else access to that revocation certificate because if they have it then they can publish it themselves but a very good thing to do as soon as you make your first key make a revocation certificate store it somewhere that someone else that no one else can get it to get access to it there's one other option you can actually allow other keys to revoke your key so I use it for example I have another key I use not for Debian but for something else which my Debian key can actually revoke so I don't need to keep a revocation certificate for the other key because your other key can revoke it and you can also do that with a friend so you actually really do trust you can create this kind of revocation certificate that says if this person says that my keys or my certifications are no good then believe them but you have to keep in mind that you cannot revoke the revoke grant right yep sorry for the screensaver there so we are really short on time here and I feel like we haven't gotten through even a quarter of what we could talk about I'm going to mention a couple things since key server access potentially leaks who you're communicating with some people don't like to use HKP which is the key server access protocol the HTTP key server protocol so you can actually use HKPS which is HKP over transport layer security that's in newer versions of GPG you need to have the GPG-CURL package installed on your machine to be able to do it and you'll need to set which certificate authorities you're willing to sign so here's an example here I've got keys.mayfirst.org and I've got a copy of the certificate authority that I think is going to sign it this is in there's other leakage that can happen here but keys can embed what key server they should be updated from so that every time you look at them GPG goes out and fetches from there that's kind of a phone home feature which is a little bit creepy but by default it's set to true so I've got key server options in GPG.conf again key server options no honor key server URL I've got showUID validity turned on and verify options and list options so that whenever I see a key I can I'll also see the key there'll be the key in the user ID and GPG will always show me what it thinks I believe about the validity of that user ID so just by adding showUID validity to those it's useful I only make certifications using a strong digest SHA 512 and when I make new keys I prefer to make them these are the digest that I publish about what I use I also do key ID format 0x long so that I never see 8 character key IDs anymore I just see 16 character key IDs if you just drop that one line near GPG.conf it'll let you, it'll move you away from having an obvious interface that just suggests that you use 8 characters which we know to be trivially compromisable that would be probably a good default to add to the package I've been pushing upstream to try to try to change this key ID format default and they haven't done it yet but I think pushing for that and pushing for the removal of the v3 keys they've opted to go for the removal of the v3 keys which is a stronger win so I'm happy with that for now but we also could change defaults within Debian there's also an open bug I think in GPG suggesting that we set some of these as defaults okay the time is up so we're going to end shortly and I don't know maybe people who are within Debian who are interested should talk about whether we're willing to diverge from upstream GPG on the defaults if we think they're not moving in the direction that we want so there's a lot more discussion to be had and I'm sorry that it was more me talking at you than I wanted it to be but if you find me or any of the other people around at the conference and you've got questions about it or other ideas I hope that you'll take the time to stop and have a discussion I would be happy to talk about it more one last question we need to give our video team crew a break between talks so thank you all for coming and yeah I hope your key management goes well thank you Daniel as he said the amount of information we can continue digging in this subject is huge I hope well there was something in this talk for everybody for every level


First question comes from Carl. Carl, can you explain the cryptography employed in the Bitcoin network and digital signatures in a little more detail, please? Alright, Carl. Challenge accepted. I'll give it my best. The cryptography employed primarily in Bitcoin, and in fact, in almost all of the other cryptocurrencies based on a field of mathematics called elliptic curve cryptography. Elliptic curve cryptography has been chosen for this task because in the field of elliptic curve, basic arithmetic works almost the same as arithmetic in the real numbers or the integers, with one important catch. Addition and multiplication work exactly the same as normal arithmetic, but there is no subtraction or division. If you multiply two numbers together, you can easily get the product of those numbers, but if you try to divide, you cannot do that. The only way to do division is to try all possible factors, a brute force search, and that is the basis on which elliptic curve cryptography operates. This is effectively a one-way function, and this type of one-way function is used in many different ways in cryptography. You might be thinking, how is it possible to create a one-way function? I think one of the best examples I've seen, and you can see this online in a YouTube video, in fact, is comparing this to mixing paints. Let's say I take a blue color and a yellow color. Is it easy to mix those two colors together? Very easy to mix them together. I can mix them together, and it will produce some shade of green. If I show you that shade of green, can you tell exactly which two shades of blue and yellow I use to produce it? The truth is you can't. If you've ever tried to paint your house and gone to the store and said, can you make me the exact same color as I have on my walls, you will quickly discover that people have difficulty doing that. They don't know which paints you mixed exactly to produce that color. The elliptic curve works in a very similar way. Digital signatures use some of the tricks of addition and multiplication, knowing that division is impossible, to produce a proof that the person who has created the digital signature had possession of the private key, but without revealing that private key. When you produce a digital signature, you are generating a number. That number is the result of multiplying and adding together a random number and your private key, and producing a new number, which we can prove by comparing it to the public key. It was produced by the private key, but we don't know what the private key is. That little trick is how you do digital signatures. The digital signature allows you to prove that you know the private key, and anyone who has the public key can check that it is a signature produced related to that public key, so they know it's from that private key, but they don't know what the private key is. That proof of knowledge, knowing what the private key is without revealing the private key, is the essence of digital signatures. The specific algorithm that's used, called ECDSA, or Elliptic Curve Digital Signature Algorithm, is detailed in a bunch of different places. You can also find it in chapter six of Mastering Bitcoin. On the GitHub repository, for example, if you go and look under the section for ECDSA math, you will find a brief description of the formula that's used. Specifically, in order to create a digital signature, first we create a random number. We use that random number, which is called the ephemeral private key, to produce a point on the Elliptic Curve by multiplying it with a generator point. We then take the x-value of that, add to it our known private key, and multiply that by our known private key, and then we add that to the hash of the message, which produces a specific value that we use as part of our signature. It's better to look at the equation to understand how that works. If you don't understand the equation, it doesn't matter. The important thing to realize is this. A private key is a number, a public key is a point on the Elliptic Curve that's produced by multiplying, that private key number with a specific other point called the generator point. As long as you know the private key, you can create the public key. If you know the public key, you cannot figure out what the private key is. So that's how the security of this system works.


We move straight to our discussion tonight where we are talking about the county governance and fund a usage where we saw the radio of 176 workers in this county government and I'm speaking to my guest here, she's a lawyer, Jerusa Michael and Thomas Omao, political scientists want to know whether the move was okay and should other county governments adopt the same thing and indeed if the whole country would adopt that system of reducing the numbers of workers, good evening ladies and gentlemen. Good to have you. Now I want to get your views, how do you feel the message, how do you appreciate or how do you feel the move by governor and director to 276 workers in this county government. I'll begin with you Jerusa. Okay, so first of all I think the issue of redundancy in Kenya is something that we really experienced especially in the past year and this year.  We've seen Stanbik, we've seen Telkom Kenya, we've seen Portland cement and so when in 2020 we work up again and it's government institutions now, it's the county. That is sucking employees on account of redundancy. Then I think it's a little bit shocking first of all considering it's county government, it's a government institution and in as much as the law provides that the wage bill should be capped at 35%. Several, it's not just the county government of Laikipia, I think there are so many, most of the counties and the national government at large, the wage bill is high. We all know the wage bill is high but who was sucked the messengers, you know switchboard operators and those law income earning people. Are those people the ones who are raising this wage bill? Is it going to have a very different impact? Who are getting the huge salaries? Who is pocketing that money that is coming up to 58% or I think it's 56-58% of the wage bill? I think those are the issues that we need to consider because we know in Kenya we have this. I think statistics show that we have 80% of Kenyans earning very little money and then we have millions and billions of money with a little 10% or 20%. I think it's even 10%. So I think in as much as it's supposed to be compliant with the law as the governor and county government puts it, there is so much that needs to go into that. Now Thomas you saw a similar thing being done by Nairobi Governor Sonko and now it is in Likipia and many people will say like she has mentioned these are the people. We would want to know who are these people that were sucked, are they the lowly paid and are they the majority and if they are, was the move okay? How do you feel about that? Thank you Hilary. For most I say that I respect the opinion of my sister Jerusha on the same of what she has actually said. But Hilary I can actually attest that I was going through the county public service audit report by the Likipia county, the chairperson of the county public service board. There is a madama Mumbimuago. With respect to this report she said that we have people in the county in Likipia county who actually had no proper academic papers. They had no proper academic qualifications to hold fierce positions and aside with respect to her she said that these people should be laid off. Namba 2, we find that Likipia county spends up to 180.8 million per month. That is just on recurrent expenditure. That is on salaries and such a stuff. We find that there is a lot of money my friend comparing what does the law say. For instance look at the public finance management of 2012. It says that the wage bill should not go beyond that 5%. That is in terms of maybe salaries and such. But we find that in Likipia county it was up to 50%. It was not good. In fact the governor should actually explain that even in court. It is not good to hire a lot of people maybe due to political patronage or due to such. So in my opinion I think other governors should follow suit. Let them follow the law and those people should be actually employed. Instead of employing a lot of people who do nothing and with no meaningful employment in the county. That is my opinion Hillary. All right now Jerusalem with Likipia county giving an example spending 190.8 million shillings on wage bill. I'm sure other larger counties in this country spends a whole lot. But also we're talking about the county funds allocation. The claiming they need more money to the machinani. That has been their call. Actually even as we speak the COG were meeting because they haven't been investing the money they want. The money has not been dispassed to the counties. But also looking into matters of employment. Those were people who were taking Unga back home every day. But now they will not. We also looking at how funds is how money is being used in the counties. Do you think it is the wage bill that was being misappropriated other than the projects that have been done in the counties. Okay first of all let me respond to my friend here Thomas. My issue is not that it's not the right thing to you know we know the law the law provides for 35% it is clear. In fact and I think one thing that I've seen from the process. They have tried to follow the law because the law that governs lane of employees on account of redundancy. First of all you need to look at section 40 of the employment act whereby you notify at least if there's a trade union. They are notified at least one month before or if the person is not a member of a trade union then they should be notified at least one month before or given one month salary in lieu of notice. And also severance pay, severance pay at least 15 days a year for all the years served. And from what I had they are going to give these people a good compensation package. So I hope they have negotiated those terms because if they've negotiated and this consent by those people then the process is going to be a little bit you know smooth. But if those steps are not taken and if there are terms, if there are grounds you know for lane of these people which for redundancy it should be okay technology has rendered you useless in the company. There's need to lower the cost. You know it's the things they were quoting yes. So I must say they have really tried and in as much as we know that yesterday I think there's a... I think the senator for Lakeipia County was talking about how they are going to someone the governor and question how these people who arrived at and everything. So that's actually my point how they arrived at these people. Why is it that I think... It's a big number. Yes it's a big number and for me it's the law earning people. The people who salary probably will be around 20,000. I don't think a messenger will be earning so much from the government and I don't think that number of people and considering Lakeipia County has around 3,000 and something employees. So 176 who are lowly paid how much difference is it making. I think those are the statistics that we need to be shown first of all. And also okay now let's go back to the wage. It has been now your question now the wage bill and if the wages are the funds that are being given are being used for wages more than the allocation of resources and projects. Yes I think a staggering 58% is a lot of money for salaries only and I think even nationally a lot of money is used to pay people. I think what should be regulated I think that that step that was taken was not really the best step to be taken in my opinion. I think first of all we need to look at how much is everyone earning. Can we according to the budget we have the resources we have and the amount of money that we have been allocated. What does the governor, the deputy governor, the county executive directors and everything. Let it be reasonable amount that of course it should be reasonable amount. When I say reasonable you know what I mean reasonable amount should be paid to the workers not dismissing people not laying off people. For me it is not the solution and yes more money needs to be taken to projects, county projects you know that's a good thing. But let it be done in the right way let it be not be done by affecting other people but you know you sacrifice some group of people who don't have say so that you say okay we are doing projects we are doing this we are doing this. What about slashing your salaries you are earning a lot of money that money is on top there yes so that's exactly my opinion today. Thomas what would you weigh in into this was it a good move to sacrifice those people who are earning lowly and the money that they are asking to the counties taken to the wages other than the projects. And maybe as you respond to that should also the national government embrace this we have parallel programs with people our offices that perform almost the same job. Should they merge or maybe we should have them cut the salaries. Okay thank you thank you Hilary. I'd like to say something we had someone with the name Immanuel Kanta he talked about self interest. Immanuel Kanta is the major proponent of the idealist theory that is in international relations he talked about the consequential theory of ethical lewism. With respect to this scholar people tend to do something that has self interest at the expense of the general at the expense of the public interest. What am I trying to say? Hilary I can say that we have a lot of resources we have a lot of resources both at the county level and at the national level. What we need to do is what we call financial prudence. How can we manage these little resources that we have? Like for instance you find that people accumulating wealth for their self gain and their self interest at the expense of the general public. For instance for the case of Likipia County. I was trying to go through that report by the chairperson of the County Public Service Board. And I'll advise my friend to go through that report. This report actually did not cut across the lowly paid individuals. This report cut across the board because with respect to the chairperson she was trying to see maybe for instance you find that there is someone who is maybe working in the office of the governor. And if you try to ask such a person the kind of roles and duties that such a person does the person can't explain clearly. For instance you can find that someone is a personal assistant in the office of the governor. What are your roles? Are they clearly stipulated? What are your academic qualifications towards such a position? You find such individuals could not actually explain such. So you should also say that there are those people who perform nearly the same roles. So is there a need of having like 10 people performing the same role in the same department? No.  So in my opinion I can say that we need to have what we call financial prudence. Let's try to make use of the little resources that we have. And the rest of the resources should go to the development process, the development agenda. That is what I can say. Just a quick follow up. Just to get it clear. The report was saying people were working there and the questions were raised on what you do and your qualifications. Then the biggest question would be how did they find themselves there? Who employed them in the first place? What I can say is that we have got to call political patronage. From the class of political science, political patronage is the process of giving job opportunities or giving certain favors to those people who may be supported during the political process. So in most cases you will find that some of these people never went to school. Like when I was going through that report Madam Mumbi was saying that up to 200 people had no academic qualifications, had no academic papers. How do you find yourself in an office without proper academic papers? That is political patronage. So in my opinion I think other governors should embrace this. We have very many young Kenyans outside here who are actually employed hundreds of thousands of them. So why employ someone with no proper academic qualifications? So I think what played a major role is what we call political patronage. And that is what's actually killing our development agenda. It's what's killing our economy in the country. Because we find people with no qualifications get offices, which is not good. All right. Jerrisha, you seem to want to respond to that. Okay, so basically I think he has told me to go and read the report. I have gone through the report actually and what you are saying is true. Yes, the report cut across what it was done by the county public audit committee. And what I am trying to say is this actually you've said it's 200 people, it's 242. 242 is the exact amount of the number of people who did not have academic credentials. And you find that in fact they said that around 100 and something were from the water department only and others health workers and out of those 242 it's 176 have been laid out. What is that number? For me what I'm questioning is the integrity of the process. I am not supporting the idea that the wedge bill should be high and people should be working when they do not have papers and that kind of thing. If you have noticed I am questioning the integrity of the process. How they arrived to that number. How they arrived to that number. Why is it only this 176 and yet if you look at that you will find that it's 242 that cut across board. And even when the report was being released you find that most affected people and you will support me in that. The highest number of affected people are messengers, switchboard operators and that kind of people who apparently they were saying that we have technology now, we can share files electronically, we don't need messengers, we don't need this kind of people but you find that they did not say anything like the people, some of the people have been laid off, there is nothing like you know there are too many executive directors here, there are too many of these, you know the high positions. And the assistance. Yes, in the number of people who are laid off, yes the report touches on them but the number of people, the people, the 176 you will find that most of them are these people who really actually don't really matter, don't carry so much of the wage bill in the county. All right, we are running out of time actually, I have less than four minutes. As we talk about our governance, in reference with what happened in Likipia would we say other county governments they are okay, is there something that we expect from them, should they take the same move or what should be regulated in terms even of low getting to lay off some employees and what should be done and also are they in a state to say we are fine, we are spending okay as we wind up. Okay, as I said earlier Hilary, the major problem that we have in our counties is financial imprudence. I'll give three examples. We have the county of Amigori, we have the county of Kisumu, we have the county of Asiya. These are the counties that we find that the finance departments got touched by fire. How did those fires go to those places and not other departments? You find that it's because that they want to destroy maybe some facts and figures maybe so that they cannot be questioned when they got the Senate Commit of Public Accounts Committee. So when they are questioned about how they spend their finances, the ostensible reason they give is that maybe the receipts and also just have were panned down. So what I'm trying to say is that the major, major problem that we have in our counties is financial imprudence. This is why counties should employ competent people, competent characters to lead various departments of the counties. As I said, another challenge that we are facing is political patronage. Hillary, you find an unqualified person is employed. So these are groups who don't actually deliver. So in my own opinion I think that the governors should take a broader step to ensure that those people are employed, are competent, they are qualified so that they can deliver and make use of the little resources that they have. That is what I can say. All right, Jeruso, what would you say? For me what I can say is that what the county government should be doing is looking at where exactly the wage bill goes up. So let there be fair administrative action at call 47 of the constitution of Kenya. Let the people who are going to be laid off if any be accorded fair hearing, let the right procedure be followed. Let us see integrity in the procedure that is followed in arriving at any decision. Yes, there could be and there are actually in almost every county people who are working without papers but who employed them. There is a contract and in law when you bridge a contract you will face the consequences. The employment act is clear. So if there is someone who is employed there, they might have been employed without papers. What was the contract saying? If the job position said you bring this paper in this and that is what they had, they didn't have others. Yes, it was political patronage. They got in through other dubious means but let the procedure be followed in laying these people off. It means going to disciplinary hearing or something of the sorts just following the right procedures and telling, asking you how did you get here. The person who got that person there should also be called to task and explain how did you hire this person. It's not like working up and just sending people off because they do not have papers. How did they get there? Who got them there? What did they present to the officer? Was there fraud? If there was fraud, let them be held accountable. Was there an officer who just sneaked them in? Let them be held accountable. Every person should be held accountable for their actions. Critics would ask maybe the house is being cleaned because there could be a probe coming soon because of corruption. So these people maybe would have tried to snitch out of what happened and how they found themselves there. Are there as many things for coming and sharing your opinion? Apparently we are out of time and I'm sure we would have talked more about this in particular topic. They have been my guest, Thomas Omao political analyst and our scientist and the address of Michael Alloia. Now coming up next is Waimashariki. I'm sure DJ Tesca and Ken Relbisi are very much ready for you. Thank you so much for keeping us company. I'll be seeing you again next week on Monday. Good night. My name is Dereva Hillary. Goodbye.