So let's go ahead and get started. My presentation from printer to phone, leveraging multi-function printers during penetration testing. A little bit about myself. My name is Darryl Highland. I also go by the handle %X. I live in a Dayton, Ohio area. I've been in IT for about 18 years. Ten of those in security and three of those as a pen tester. I remember the FUSA's in that team.  Okay, I've been, this is my third time speaking at DEF CON and this is always fun. I always have a ball being here. So let's go ahead and get started. I do have a guy showing up with a 50 foot, because I don't know if anyone's seen me speak before, but tether me on a five foot rope can be dangerous. So the agenda for days presentation is multi-function printer features. We're going to quickly go over some of the features and functions you typically see in multi-function printers that we want to attack or steal information from. Second, we have a single one slide on multi-function printer security. From there we're going to go to attacking multi-function printer devices and leveraging those attacks during penetration testing. And at the end we'll go ahead and conclude with development of an automated harvesting tool. Okay, I guess we can get started again. So let's go ahead and move into this. Let's start off by talking about multi-function printer features. I don't like that happening. There we go. Okay, I don't know how many people have actually logged on to the Web interface on a multi-function printer, but that's generally what we're going to be talking about today. And there's a wealth of features and functions that can be pulled, information can be pulled out of that. An example here is scan the file functionality. The ability to walk up to that multi-function printer in scan data or scan something and actually have it store it on a Microsoft file server or on a FTP server. Also scan the e-mail, the ability to scan stuff and have it go out in e-mail. So these have to be able to integrate into those services, SMTP server, SMB authentication on to Windows devices, such stuff like that. Also one big one is LDAP authentication. The ability to go up to that device, authenticate yourself to that printer and then have that printer give you specific features or functions associated directly with you. Also system logs. A lot of us overlook what kind of information that exists in system logs on these devices. And it could be a wealth of information. An example would be color printers a lot of times have chargeback functions. So they have to be able to log who's actually used in the printer. So a lot of times it'll log usernames. That can be stripped off these printers and used. And of course remote functionality with the new cloud concepts coming out there. We're seeing more and more stuff roll into this area. So that's an interesting one. And of course backup and cloning. The ability to back up the entire configuration of the device. So if an attacker can pull the backup and cloning information and then strip it apart offline he can pull that information in one fell swoop. So the next thing I want to get into is multifunction printer security. So we have one slide. Four steps to security failure on a multifunction device. Pretty straightforward. What do we do? We roll these things in. We power them up. We integrate these into the business system. So they connect to our SMTP. They connect to our Microsoft Active Directory environment. They connect to FTP servers. And then the third thing what do we do? We set no passwords on these. Or we leave them at the factory default password settings. So I have a question for you. So we can qualify there. So quantify this. How many people in here their company requires you to set a complex password on all multifunction printers that are deployed within your organization. So raise your hands. So everyone else look around the room. That's probably the typical amount that I see. Nobody is doing this. And of course the last one on this list is no patch management. So if there is a bug or a vulnerability that exists in these printers, we're not putting patches on these to fix those problems. So let's roll into the fun stuff. Attacking multifunction printer devices. So why do we want to attack multifunction printer devices? Besides it being fun as hell. Basically to gather information as an attacker. We can gather this information and use it to escalate our rights into other core systems within your environment. So when are we going to typically do this? An example would be if you expose it to the internet. And I know everyone's thinking why would anyone expose a printer to the internet? Well go out to Google when you get a chance and type in there and try to pull out some printer information and you'll find there's literally thousands hundreds and thousands of printers out on the internet that are exposed out there. And probably half of them have no password set or default factory passwords. The other example is once somebody gains a foothold into your environment. Whether it's an internal user, a disgruntled employee, or an external attacker who has gained access to your environment. Earlier this year I was on Paul.com episode 237 where we were talking about this. And Paul made a real interesting point about this. And that is the fact that this vector falls underneath the radar screen. No one's monitoring it. Paying attention to it. No one's logging or doing any auditing against anyone quarrying information from your printer. It's totally ignored. So if an attacker gets a foothold he can quarry your printers well below the radar screen through the web interface and potentially pull information that he could use to log on to your Active Directory environment without anyone ever knowing. So that's a real concern. So how are we going to do this? Obviously leveraging default passwords to get into the printer to start with. We've seen all the hands that were raised so we know that no one's changing these passwords. Second is access bypass attacks. And that's an attack against a printer where they have set a password but you found a way to bypass all the security on the device and gain access to that printer. Third one, information leakages. Once we gain access to that printer, how do we extract some of that data? Do these printers leak that information? Fourth one on their forceful browsing. If you know what the URL you want to get access to, forget about the password you need to get to it with. You just enter that URL and the printer gives you access. And of course backup and cloning functions. The ability to pull all those backups or clones offline and pull the information out of those. And the last one on here is a passback attack. Typically to be able to trick that printer into sending the information to you. We're going to go into some detail in that toward the end of this presentation. So the first one I want to talk about is the bypass attack. This is the ability to bypass the authentication on device by passing various forms of data in the actual URL. We've got two examples we're going to show today and that's the Toshiba and HP. So on the Toshiba, if you look at this URL this would give us access to the scan the file configuration page on that printer. If you enter this URL in the Toshiba is going to take you or redirect you to a logon page. If you happen to know the default password which is 1-2-3-4-5-6 Okay, so that's the default password. So you know what it is for all the E studio Toshiba? Okay. It should be easy for you to remember then. So if they've actually changed the password how do we get into this device? Well there's a little trick with this particular device. I don't know if you've noticed there. It's an extra slash. Put the extra slash in between top access and administrator and so goes your security and now you're into the configuration page. So the second example and this is an HP office jet device. A lot of you guys probably have these sitting in your home right now. The reason why I mention this is it's a really good example of a bypass attack. Plus as a pentester I've been noticing a large number of these showing up on corporate networks. There's small devices less than a couple hundred dollars and we find them actually be used in manager's offices so they don't have to walk down the hallway to get their print job or do little copies and scan stuff and they're cheap. So if you actually try to get to a fax address book on one of these devices and authentication has been enabled it's going to prompt you to log on. So we have a little demo where we can actually show this taking place. So if we go up to the setting part of this and we click on setting and authentication is required it's actually going to prompt you for a username and password and this is my printer and I actually forgot the password like years ago. So you go ahead hit cancel and you get to the URL up here where the actual fax address is at and what you do is you actually copy it and you paste it back in there so we actually have what says page equals, page equals fax address book one. By adding that extra page equals we can bypass the security and get to the configurations on the device. So the next area we want to delve into is information leakage. Now that we've gained access to a device because of default passwords or by bypassing the actual security on the device how can we pull information from this device? So the first one we're going to look at is information leakage on an HP device. This is a gig I did it's probably about a year and a half ago. Turned out they had actually exposed this printer to the internet. And besides stealing all their faxes off the device as you notice that the email settings on this points to one of the employees that's taking care of the device is Gmail account. So as an attacker it would be really nice if you could get the password for their Gmail account because then you could use it to carry out other attacks against them or social engineering attacks.  Well that's not always the case especially when we're dealing with embedded devices like multifunction printers. So the big thing here is if you have Firefox you can right click on that field and go show properties. If we expand that up we see that it is basically a plain text password in there. So the next device we move on to is the Toshiba. So if we know the password or in the case of Toshiba bypass the actual password on the device and we want to go to the SMB settings on this device the Samba settings and take a close look at what we have up there. I mean really close look. We have it set up to log on to the domain and guess what the log on name is administrator. So wouldn't it be sweet if we right clicked on that and we got the password. Pretty much game over at that point and remember this is all underneath the radar screen no one ever knows. You're not generating any noise you're just logging on with a web browser to a printer right clicking and viewing the source and now this device is giving up your domain admin password. So the next one I want to move on to is forceful browsing attacks. Basically with a forceful browsing attack it's a concept of if you know the URL that you want to get to in spite of the security of the device you just type in the URL and you go to it. One of the things I've noticed over many years of looking at embedded devices and multifunction printers is a lot of times they will properly handle security on file extensions that are standard like .cgi.htm.html but if it's a non-standard type file extension on a lot of printers and a lot of embedded devices you can actually just query for that and it will give it to you without any requirement for authentication. So what we want to look at is the Canon. What's interesting about the Canon printer we're going to be looking at the address books on this device. Canon printers and a lot of other devices the address books contain more than what you typically expect an address book to contain or they can. We normally expect to see user name, email address phone number, typical stuff like that, maybe some facts information. Well it turns out on this particular device there's a lot more information so let's look into forceful browsing gaining access to that. Again the extensions on this device are the files we're after .ldif or .abk. Very non-standard file extension so maybe that plays a role in why we can get access to it. The image runner actually has 11 address books or up to 11 address books that you can query on it. So if you type in this URL you should be able to extract it but first thing you got to do is you have to have a valid cookie to be able to do this. So if you just type in this URL and point it to your image runner it's going to fail because you don't have a valid cookie. Now I didn't say authenticated cookie I said a valid cookie. So if you hit the home page on the printer it will give you a valid cookie. And then enter this in and it will give you the first address book. If you increment the AID up one through 11 you can get each and every one of the address books. The data that typically comes off the address books is in plain text. Also a quick note, early this year I had mentioned that I thought this was patched in a lot of devices because I was getting failures on a number of occasions. Well I started analyzing a number of image runner devices and I noticed that these two models here, these product name IR3580 and IR4080 are the only two that I can find that this fails on. It works on all the others that have this address best book functionality. Not that there may not be a way to get around on these devices but this method fails on them. But it doesn't fail on all the other ones. So let's look at this data. So we pull the address book we can quickly see that URL information, a username and a password can actually be pulled out of the address book. So what are we looking at? This device is actually configured so you can walk up to the printer and do a scan job after you authenticate yourself as D. Smith. And what it will do is it will do the scan job and it will save it on your workstation. That URL happens to be his workstation. I've also seen these configured to point to actual file servers. But predominantly I see it pointing to the individual's workstation. So he can do a scan job and it shows up on his workstation. So now I have the password to his workstation so I can log on. Well if they screwed that up and they actually created the username of Canon as an administrator on his local workstation, the next step is I'm admin on his workstation which we've done before. At that point I can extract the hashes associated with all the users on the device, particularly the administrator account, and use that to break in on every other machine on the network that actually has the same administrator password. So the next thing we want to delve into is backups and cloning. Backups, the purpose of backups and cloning is ability one to make a backup if you configuration of your device which is very important if you need to fix it or rebuild it or whatever the case may be. Xerox really does what they call cloning. It gives them the ability to roll out multiple systems.  So you can pull a clone off one device is configured and deploy it across all these different devices and configure. It's really nice process. So the whole idea of this is if this contains information that we could use to attack you then of course we can log on, pull this and we'll all we have user names and passwords. So let's look at the first one. This is a Lexmark. The settings import, export, export setting file functionality and this export file is all in plain text. So we easily go to this page import, export. We click export setting file and we're able to extract this and as you see plain text passwords are actually stored in this file. The interesting thing about this device, this particular device that I tested was that they've done a really good job of not having information linkages. So when you go to the configuration pages you can't extract the passwords out of the source code. So they've made an attempt to actually secure the device from that level but yet have made it possible for you to actually pull all of the configurations including user names and passwords off the device in a backup file. The next one we want to delve into is the Xerox. Fairly simple if you go to log on to Xerox work center and what's the password for a Xerox work center? I don't know if I heard it but it's 1111. That seems to be the normal for the work centers. User name is admin. So we get to this you go to the Xerox work center general setup under properties go to cloning and we have all these settings that you can select to extract the cloning data you click on that and you get a cloning.dlm file and you right click on this and you can save this. So what is a dlm file? So let's go ahead and show you before we do that the previous example with the Lexmark we noticed that exports everything out in plain text. Xerox used to do that to fix that problem. So the newer stuff the outputs of the dlm is actually the passwords in encrypted. So we're going to show you the older stuff the newer stuff some conversation around that and where we're going with that and how to get access to the dlm data. Everyone see that good? Everyone see that? That shouldn't be let's see.  So I really didn't know what the format of this was so I spent some time on the internet searching around and I search and I search and I search and I finally found a message board out of Norway all written in Bork Bork which I couldn't read but I knew they were talking about this so I actually got a translator online and basically the just was and it was between two Xerox employees thank you that this is nothing but a tar ball so if that's the case let's just get rid of this header maybe I need to need how to spell dlm there we go okay they were able to extract it so it was a tar ball the item of interest in this particular extract is under data so if we search down through there and obviously you can see it's the entire configuration mostly in plain text go down through here looking at all the passwords there's one and there's one down here so we instantly find that the LDAP password is like milk dead so we're able to extract the data now this is what they were doing several years ago they've actually fixed this which is a good thing and that's what this is all about anyway it's about security not insecurity so I like to see companies moving in the right direction so let's go ahead and look at the other example so we can see what it is we've already extracted that so and as you can see it's some kind of encryption and I have to admit the first time I saw this I thought oh it's just an md5 hash or something like that but the truth is remember this is the LDAP password so it has to be some form of encryption and coding we haven't cracked this yet so I'm just throwing it out there so you can see this and see where we're thinking we're moving forward this has to be some kind of encoding or encryption of the password it's 32 characters hex we also know that it's a clone so this has to be have the same keys or the same encryption process on every one of that brand of printer the clone wouldn't work so we know that much so it's consistently reused research I've done so far up to this point leads me to believe that the cloning process isn't the part that's encrypting this that more than likely the encryption mechanism of this is actually being maintained within the Postgres database that these devices use using some type of Postgres encryption and that's where it's being handled so that's where we're at on that right now so as we move forward anyone interested in helping me with this down the road shoot me an email definitely open to getting some assistance okay the next area we want to get into is the pass back attack this is something I've just been working on I don't know over the last four or five months and it's kind of cool and kind of fun at least I think it is so the whole idea of a pass back attack is an attack where we trick the multifunctional printer into communicating to us the attacker versus his configured service as the example a number of printers we found have a test function on them so if you go to the LDAP configurations on certain printers you can hit a test button and it will test the actual authentication of LDAP to the configured LDAP server and there are some other services that do this also so the whole gist of this attack starts out with the attacker hits the test button on the printer the printer authenticates to the LDAP server the attacker changes the LDAP IP address hits the test button the printer nicely authenticates to the attacker giving us the ability to capture all the authentication data so let's start with a couple of examples the first one we're not going to get into a whole lot of detail but the second one we're going to show you a lot of detail it turns out here on this sharp printer if we look at each one of these possible settings on the configuration page every one of those is passed from client side when you hit the test button so they are you have the ability to alter those from the client side versus server side the sharp printer has the ability to do this on LDAP and SMTP and like I said the attacker can send all of these fields except the password field password field stored on the printer so if you can tell the printer to test this using what you have stored on the printer as the password you get the plain text password these are the three fields on the sharp printer that we want to alter the server IP address the auth type because remember it may be configured to do NTLM or Kerberos but during the test function you can say let's just do it in plain text that way you capture it back and here is the screen for the sharp for the SMTP settings also so the next we want to get into we're going to show a little more detail is the actual rightco printer and the rightco printer very similar to the sharp printer easily to trick into doing this so if we look at the configurations of course we have the server IP address we have the port number because if you're attacking this device and they have filters between you and him that particular port may not make it back to you so if you can alter that you can get it to go across any filtering they may have and of course the authentication type as you see each we have set their clear text digest or Kerberos and you have the ability client side to alter those during the test function so this happens to be the test CGI that you post the data to do so what's follows next is an eye chart so this is the data that actually gets posted to that URL up there the area in red if it's altered will typically reconfigure the printer which is not what you want to do the area in black is what's used by the test function and does not alter the printer's configuration the blue areas are the things that I like to alter to carry out this particular attack and we also have a video demo of this I want to show you real quick so it's really really simple in this you go up the right hand corner on the right code page and you click log on this password is really easy to remember it's blank enter the username and now you log on to the device once you're logged on to the right code printer it gives you a lot more features and you can go to the configuration page under the configuration page you have the default settings and one we're interested here is the LDAP settings as you can see there's only one LDAP server configured on this so what you want to do is you want to actually check that box and go ahead and open it up so you can see the configurations and here we see all the different configurations that are available on this particular device that we want to screw with so to carry out this attack we want to set up a net cat listening port 1389 so we fire that up we also want to set up a proxy server to grab the content coming from your web browser here I'm using burp but you can easily use paros proxy also and then we go back to the configurations we go down to the start for the test function and we click start go back to the paros or burp proxy and you can see that iChart that I showed you earlier it captured all that data and I gradually go through here and highlight different parts of that or interest and I'm not sure if you can actually see any of that out there and the area you don't want to screw with because you will reconfigure their printer you don't want to have to go back and change it so what we want to do is the attacker it's fairly simple we want to change the IP address so it's no longer pointing to the LDAP server and we want to change the port so it's pointing to us on 1389 so our net cat listener can grab it and of course if we want to we want to alter the auth type if needed so we sent that and if you notice we have a connection coming from that printer to our net cat so our net cat has actually got a connection with the printer speed this up a little bit because it took about 45 seconds to run through but you'll see here real quickly after about 45 seconds the printer nicely passes us the username and the password in plain text so if you have access to the dark or the Ryco printers and they are configured and you want to gather information off of it and these devices don't have a whole lot of leakage problems other than this one here you can carry out this pass back attack by altering capturing the data that you send to the test function telling the printer to instead of communicating the test function to its actual LDAP server I want you to communicate back to me the attacker and I want you to authenticate to me in plain text giving me the username and password gives you the ability to strip the password off the printer okay the next thing we want to move into is actual the tool so we started developing this tool a while back and it's called PREDA PREDA is latin for plunder, spoils of war, booty, thief and that's what its purpose is its purpose is to go to typically the web interfaces on your multifunction printers using weak passwords, vulnerabilities and what other methods we can put together to strip this data that can be used to attack other key systems within your environment the present version we actually do have one module that a guy's been working with me on that doesn't use the web interface it actually uses RSH it turns out that the RSH on the printer was an easier method for getting the logs off then going through the web interface it was easier to parse it gave it to us in a cleaner fashion so we go ahead and just pull it that way and then parse the logs that way versus the web interface so we do have one module that goes outside the web part the present version is actually written in purl version 1.2.beta we have 17 modules so far extracting data from plus different printer models cannons HP, Lexmark, Ryco, Sharp, Toshiba and Xerox printers simple how the tool works it's made up of four pieces you have the parada.pl which is a dispatcher you have individual modules designed to go against certain model types you feed it a target file list or target list of all the IPs or printers that you want to run this attack against and you have a data file which does fingerprint printing. The data file this is a structure of the data file there's four plus fields in the data file the first field nothing more than a sequence number the second and third field is the method we use for finger printing and the way that works is it pulls the second field looks at the title page of the multifunction printer the third field looks at the server type and that works probably about 80-85% of the time on printing specific models or model series and then fields 4, 5, 6 and continuing out there the actual modules that are actually used to launch the attacks with so generally the tool syntax is parada.pl the target file the TCP port you want to go to whether it's 80, 4, 4, 3, 80, 80, 8,000 and then also the project name what you want to call the project so that creates a folder project name creates a folder and the output file is a log file that's generated so all the data this thing gathers writes it into the project folder and also the output log file writes what's taking place and in some of the modules where it extracts specific passwords out it will write it into the output log so this query is the printers in the target list if a match is found the data the device is attacked the information is pulled and stored in this method here where do we see parada going moving forward in the future the goal here is as we mentioned with the Xerox the password encryption part of that so we have an ongoing project there to evaluate that and see if we can figure that out also a number of other printers have actually started the backup clone files that it generates are all encrypted but the fact is that you enter the password to do the encryption so it's just a matter of figuring out what encryption they have you have the password you can easily decrypt it so probably analyzing that and trying to find various methods to do that once we find those for the different models we'll build modules to pull the encrypted file and decrypt it and save it for you we also have talked about actually working on migrating this code over to Ruby right now I'm kind of holding off on that and we're going to stick with working in pearl and the main thing is I want to see this project go to critical mass right now we have 17 modules 40 plus different printer device models we go to but the thing is I want the tool to be a valid usable tool for pentesters so we're looking for people to jump in add value to this let's work on actually growing this if it reads critical mass where it becomes a real valid tool used by enough people then we'll go ahead and reanalyze it is pearl the best option is Ruby a better option could it be incorporated into other tools or could it be you know written in python so right now we're going to stick with the pearl and move forward from there also we've been looking at developing other modules besides just printers multifunction printer devices there's all kinds of embedded devices sitting on our network everything from UPS's, sand systems, cameras every one of these devices we as pentesters have actually found usable data that can be extracted from these devices so the goal was to expand this project also to actually include all of those type of devices also and I plan on releasing probably about a half dozen or more modules that go against this network appliances next month when I present this in Bangalore India and I think that pretty much covers it looks like I went a little fast today and we got a minute here let's uh I got a couple t-shirts to give away people like t-shirts right we have the bufasnet t-shirts and the thing is you have to answer the question so real quick it's fairly easy what's the default password you have to raise your hand because obviously everyone's going to say what's the default password for most work central printers gentlemen back there in the blue shirt right here I have an extra large here you can take one of these and I think the other one's a 2x also one more okay what's the default password for a Toshiba e studio printer no that's it looks like you got stuck with a 2x I'm sorry so if anyone has any questions we'll be over in the question and answer room 2 and please come on over and we'll discuss this further and I hope to hear some input from everybody catch you later


Are you a communist? The School of Communism is taking place in London from the 10th to the 12th of November. Capitalism is in its deepest ever crisis and we are building a revolutionary party to overthrow it. It's the duty of communists to educate ourselves. That's why Revolution Festival 2023 will be discussing what genuine communist ideas mean, how Marx became a communist, why Mao wasn't a communist, and also the lessons of the Soviet economy and the attempts to plan production along socialist lines. We'll be discussing history, both the triumphs and also the tragedies. We'll be discussing contemporary events like the situation in the Middle East with Israel-Palestine, like the situation in West Africa with French imperialism, and also the crisis of capitalism that's racking the world economy today. And we'll be discussing why institutions like parliament are a complete sham under bourgeois democracy. There's going to be a thousand communists there for the whole weekend from all over the world and they will be concretely discussing and sharing ideas on how we can build the IMT. So book your place at the School of Communism. See you there comrades.


A fiery horse with a speed of light, a cloud of dust, and the hearty high of silver, the Lone Ranger. In the early days of the West, the Lone Ranger rode to the length and breadth of seven states, in the cause of justice. His courage and daring were only matched by his sense of fair play, and he believed the new territory should offer a new start in life to everyone. The man who deserved a second chance could always be sure the masked riders helped. Return with us now to those thrilling days of yesteryear. From out of the past come the thundering hoofbeats of the great horse Silver. The Lone Ranger rides again.   Go on, get out. Get out and stay out. I don't want to ever see your face in here again. Oh gee, Mr. Robbins, I wasn't doing you no harm. I just wanted to set you some of the vegetables and things I've been raising. I don't want any. I don't do business with folks I can't trust. Now clear out. Well, listen, Mr. Robbins, I never had nothing to do with Mr. Bulo robbing the bank. Last to share. I ain't taking no chances. There's the door. Pest me once more and it's a tall I boat you'll be getting. Young man, don't you be wasting my time. But ma'am, these are things I've raised myself that I'll set you real cheap. Cheap? When you're as likely as not to steal something by I'm a bank. Young man, that ain't my idea of a bargain. Now there's the door. Don't slam it behind you. And if you want my advice, young fella, you'll get out of Laramie and keep traveling till you get to a place where folks don't know you. But whatever you do, don't come back here. But listen, all right, you think you got me licked, don't you? Well, you ain't. I'll show you. I'll show all of you. I'm just as good as anybody else and someday I'll prove it. Later that day, two men rained in before a small cabin about five miles from town. Whoa, boy. Whoa, whoa, whoa. Billy! You know home, Billy? Nice place he's got. Shucks. Billy's a real hard worker. Billy! Sure. Afternoon, young fella. Now, you recollect Walt here, don't you? He's been away from Laramie for a spell, but you ought to know him. Uh-huh. Howdy. Glad to see you again, kid. Well, Billy, you needn't stand blockin' the door there like we was a couple of crooks. Or ain't you going to invite us in?  I guess. What's the matter? Mind a down in the mouth, Bob? I guess.  Used to be you could find a grin for me summers. Ain't you and me friends no more? I don't guess I got no friends no more. Settin' the masked man and the tonto. Hey, you do sound real mournful. Sheriff, I reckon we didn't get here none too soon. Kid, sure is blue. Don't you think we better tell him what we come for? Ah, seems as if. Look, Billy, I don't aim to pretend none. I know what's bobbin' you just as well as you do. You'd think I'd been convicted of somethin'. Sure, son, I savvy. But that's the way folks act sometimes. They don't stop to figure things out like you and me. They just take a quick look at the appearances of things, then take a quicker jump to a full conclusion. And someone has to suffer for it. In this case, that's someone being you. You wait. I'll show him. Aim to stay on here? Gosh, I gotta do something, don't I? Well, Billy, most any other time, I'd agree with you. I'd say stick and fight it out till folks come around to seein' things straight. I'm gonna. I said most any other time, I'd tell you that. But this time I can't. There ain't any special use of fightin' when there ain't any chance of you winnin'. Huh?  In the first place, there's Blackie.  Hold on, hold on, now, Billy. I ain't sayin' anything special again him, though there ain't no use to nigh, and he was a crook. But anyhow, folks are bound to win.  And a lot of them don't realize you never know he was crooked till just there at the last. They figure maybe you helped him some. I'd even had folks accuse me of goin' easy with ya. Hidein' things I knew, cause we was friendly. Uh-huh, I know. Then after Blackie died, Mr. Bulo took in, and his bank was robbed. Of course, the masked man proved Mr. Bulo was just usin' ya for his own crooked schemes, and the same was brought out in court. But like all us, there's folks that can't believe the plain truth when they're told it. They got the kind of natures that all the time have to be suspicionin' things. They wouldn't be happy if they won't. So there ya are.  You mean even you want me to leave? For your own good. Shucks, you could start in again somewhere else where nobody knows about ya. Tell ya what I'll do. I got a good friend over in the panhandle, fella named Scott, owns quite a spread. I'll give ya no point. I won't leave, I won't. Sheriff's givin' ya good advice, kid, and if you're afraid to pull stakes cause ya short a cash wire, reckon I can help ya out some. Take this place of yours. It ain't worth a great deal, but it's worth somethin'. Don't know what I could do with it, but I'd be willing to give ya a couple hundred for it. I don't know what to do. That's a mighty nice offer for Walt to make, Billy. He's only doin' it to help ya. I've never lived anywhere but Laramie to remember. After you'd got used to it in the panhandle, you'd probably like it twice as good. Maybe. Well, what do you think? Could I think it over for a bit? Do I have to decide right now? Why, of course not. Take all the time you want. Take a week or two if you'd rather. Don't make no difference to me. Come on, Sheriff. Let's be gettin' back. See ya later, Billy.  Uh-huh. And say, kid, I'm stayin' with my folks in town. I hear you've been raisin' tatas and stuff and nobody's been buyin'. Why don't you come round to our place? We'll buy some. Would ya? Would ya, honest? Sure thing, Bob. We'll be lookin' for ya. I'll be there tomorrow. Gee, maybe I can sell them not so as I can buy some things I've been needin'. Billy. It's the masked man. Oh, gee, I thought you'd left. I don't know how we're goin' for a while, Billy, but we came back again to see how you were doing. I was at the window here while the sheriff and that other fellow were inside. Did you hear what they said? Wasn't that one fella swell? Did you hear him say as folks advise and things offin' me? I did, Billy. Maybe if they buyin' and find out I can be trusted, maybe others'll do the same. Leavein', you mean? Yes. Are you? Gosh, I don't know. Don't seem right somehow, and yet... No one ever wanna fight by running away from it, Billy. But the sheriff said... That you couldn't win. I know I heard him. And I know he's your friend. But even the advice of friends can be mistaken. Then you think I should stay? You want to? Oh, gosh, yes. I don't wanna go. I'd a heat brother stay here. All right, stay then. Stay, Billy, Tonto and I will fight on your side. We'll fight until you win. Oh, golly, I... You just bet I'll stay. Good boy. Shake on it. Now then, it's a bargain. But what do we do? I have an idea. I wanna talk over with Tonto. I'll tell you about it later. Oh, swell. Bye. Returning to the camp he shared with Tonto, the vast man spoke of the plan he had mentioned to Billy. Although Billy's difficult, he lies in the fact that people refused to believe he could be involved in so much trouble without being partly to blame. Not right. But there's something been overlooked, something we could turn to Billy's advantage. What that? Like he carried out his robberies for years. He was a thief long before he took Billy under his care and remained a thief afterwards, although he kept it from the boy. He couldn't have spent all the money he stole, especially during the last years of his career. Oh, not fine money. That's exactly what I'm getting at. No money was found. Blackie must have hidden it. That money could be found, and if it were Billy who voluntarily turned it over to the law, then no one could suspect him of dishonesty. We'll stay out of the picture. We let it be thought that only Billy knew of the money's existence. Therefore, he could have kept it if he had chosen. Not a good idea. The question, of course, is to find where Blackie is hidden the money. That'd be heap hard. Perhaps. It may not prove as difficult, however, as it seems at first thought. What do you mean? I believe someone else has thought of the same thing. Someone who wants that hidden money for himself. You know, fella? I'm not mistaken. I do. And it may be that he knows where the money is. In which case, we'll let him show us whether he's willing or not. Early the next morning, Billy acted on Walt's invitation and loading his small cart with vegetables drove to town. There, while Walt stood by, he displayed his wares to Walt's mother who bought generously. My, this is fine lettuce. And these turnips, ain't it just dandy? I'm awful glad you like them, ma'am. Can I sell you anything else? I'd like to buy more, but I'm afraid that'll be all I can use for now. Just take him on into the house, Billy, and come back and I'll pay you. In the kitchen, ma'am? Right on the table. Yes, ma'am.  Indeed he isn't. He's a regular little gentleman and should think of him at his age. Just 14 or 15, ain't it? Well, should think of a boy of 14 having the gumption to make his own way like this. I vowed there ain't many that'll do it. I took a liking to the kid the minute I saw him. You can tell him to call around regular. Save me a lot of fetchin' from the store. I put him where you said, ma'am, and thanks a heap for buyin' from me. He's that sick's child.  You've done me one. Vegetables like you gotta be a real treat. Yeah, Billy. Oh, thanks. Thanks ever so much. Well, it says you can come around some more. Maybe in a day or two again, huh? I sure will. Gee, business is pickin' up right smart.   I got my grocery money in the kitchen, son. I'll pay you back. Oh, you don't have to do that, ma'am. Indeed I do. What would your pa say if he found out I let you pay for vitals when you come to visit us? I'd never hear the last of it. How much was it? No, just 50 cents. Well, I... Well... I declare... Huh? What's the matter? My money's gone. No. I had close to 50 dollars right here in this jar. But where could it have got to? Look, ma'am, you must have put it somewhere else and forgot it. I never did. It wasn't an hour ago. I counted it after payin' that fella for the cordwood. After I counted it, I put it right back. It's been took some time between then and now. That's the same as saying I took it. I never said no such thing.  Shucks, no. Paul went down to the harness shop right after breakfast. The fella delivered the cordwood and that's all there's been around. Well, that's funny. Of course, somebody could have sneaked in here some time maybe. With me in the kitchen the whole time? I ain't been out of it until just now, when that boy... Huh? That boy... He'd come in here to leave what I bought of him. No, no, wait, Ma. It's nothing. It was him. It had to be him. Well, you shouldn't say a thing like that unless you're sure of it. I am sure of it. I'm as sure as if I'd seen him with my own eyes, the thief. And after you've been so good to him, too... What are you doing? I'm getting my hat and coat. That's what. This little wretch. Lansage should do a body of kindness and that's what you get for it. You stay here and watch things while I'm out. Where are you going? To see the sheriff. He can get my money back or buy some duration. I'll know the reason why. But... The curtain falls on the first act of our Lone Ranger story. Before the next exciting scenes, please permit us to pause for just a few moments. Now to continue our story. Billy drove home, and unaware of the trouble brewing in town, went to work straightening up the cabin. Shortly afterward, he heard some horsemen stopping outside and... Gosh, what's that? What? I don't think you've done it, but you better clear out. Just as sure as sin, they'll pit it on you. You won't have a chance. Right after you left this morning, Ma found a grocery money gone. Of course, I knew she was mistaken, but she's bound you on it, and she's gone to the sheriff. He'll be out here most any time now, so you'd better be gone when he comes. I never stole nothing. Honest, I never. I tell you, I don't think you did. Shucks, I was your friend from the first one. I can tell by looking at him whether a fella's square or not. I figure you are. But what I figure don't count. Listen, don't waste no time. I come to warn you to see that you had a fair chance to get away. Look, here's more than $100. These friends of mine come along to witness this. Take the cash for your place here and then beat it. You're buying my place? You hear them, didn't you, kid? Better take it, bub, and thank your lucky stars. Billy, I ain't got no more use for this place than I got for an extra foot. All I'm doing is for us to see that you have cash enough to get away from here. I've taken Vamos Pronto. But if I'm selling, won't there be no papers to sign her? Not an area one. That's why my friends come along. With them to testify you sold out willing, it'll be a deal. Now, you take this cash and... One moment. Billy, don't accept that money. Don't slap, brother, unless you want to make a gunfight out of this. Don't shoot, please, don't shoot. The mask man's my friend. What kind of a friend for a kid to have? Well, it looks as though he needs one. Walt, if you want this place, you can have it for $500. What's that? Gosh, wait, you don't savvy. He ain't buying because he wants it. Walt's my friend, too. He's just doing it to help me. Yes, and let him help you $500 worth. I ain't got that much. If I did, it's five times what the place is worth. How much have you? Just what research? How much have you? That's my business. Ain't the kid got something to say about this? Of course, but I think he'll do what I tell him. Billy, are you going to let this mask country boss you around? Gosh, I... I don't know what... Yes, I am. He's been my friend for longer than anybody else around here, and I'll do anything he says, no matter what. Well, Walt, I... Well, all I got with me is $300. Then hand it over. But, gee, mister, I don't want to cheat him. He's right about the place not being worth over $100. Take the money. Well, but... I shouldn't pay it. I only give it... I think you'd have been willing to pay five times as much if it had been necessary, Walt. The deal's finished. Clear out. Clear out. Come on, Walt. The place is yours. That's what you wanted, ain't it? Yeah. Well, I'll remember how you held me up when I was just doing your favor, kid. Don't think I won't. Gosh, masked man. I don't feel as if I should have... Taken the money? Yeah. I don't let it worry you. No matter what Walt said, he didn't buy this place as a favor to you. I'll tell you... Hey, look at there! There comes a share for the whole pack of pellets. Then I'm leaving. But Billy... Huh? I haven't time to explain, but it was planned for the stolen money to be found on your place. It won't be. Tell the truth that you weren't to blame for the theft, and nothing can be done to you. No one saw you take the money, and as long as the money can't be found here, you're safe. You better hurry. There they come. Right. Yep. Come on, Silver. Come on, old fellow. Thought Oh was waiting for the Lone Ranger some distance from Billy's cabinet. Oh, Silver. Hold on. Hold on. What? What happened? Take this. It's cash. Silver and bills. The money's supposed to have been stolen from Walt's mother. I found it where I thought I would. Hidden in Billy's wagon. Him not put cash there? No, he must have. He didn't. Walt did. He must have placed it there this morning when Billy called it his home. Oh. The share's at Billy's place now. No doubt he'll search it, but he'll find nothing. Him see you go? Yes, but that's all right. Maybe Lohman think boy give you cash. The hide for him? Huh? He won't huddle for a very good reason. And what that? You're taking that money to town and making it look as though it was free at all. Me not savvy. Listen, I'll explain. Although the sheriff returned to Laramie with word that nothing had been found in Billy's cabin that would justify arresting the boy, the townspeople were not satisfied. The sheriff's partiality for the youngster was well known, and there were many who believed that if he had performed his duty honestly, Billy would have gone to jail. Fellers! I don't care if the sheriff does say search that place from top to bottom. I don't care if he swears to it a dozen times over. I'm here to say if he didn't find the cash, it was cause he didn't want her. The pity the law can't protect us from a thieving boy. That's all I have to say.  I told you so. Don't you recollect me telling her to you? Why, I was just seeing the other day to miss Hawkins. I tell you the rest of it can do as you like. But me, I'm calling on the sheriff. I'm gonna find out for myself if he's willing to do his duty. If he ain't, then there's just one thing to do. Run that kid out of the county yourself. But that night, the masked man and Billy knelt behind a clump of bushes not far from the cabin. They watched three men digging by a lantern light. Now do you understand why Walt was so anxious to help you, Billy? He was after Blackie's case. Right. Somehow he learned where it was. Perhaps he knew Blackie at one time or another. Perhaps he spied on him. Anyhow, that doesn't matter. The point is, Walt wasn't interested in you in the least. He only wanted you out of the way. Gee. Be careful. Don't let them hear you. I won't. Remember what you're to do? Uh-huh. Just as soon as they've dug to where the cash is, you're gonna get them to chase me. Right. Uh-huh. And then when they can't see me, I'm gonna run over there and grab the cash myself. That'll help you. He's over there beyond them. Well, then I'm to get to my heart. And ride as fast as you can for town. I'll most likely be there ahead of you. Uh-huh. But there's something I don't see. Yes. Why don't you just hold them up and take the cash now? You're taking that money, Billy. Here. And you're turning it over to the law. Uh-huh. When questions are asked, you're going to be able to answer honestly without involving Tattoo and me. Walt may suspect that I drew him away for a purpose. But he'll be in no position to say so. Well, then I beg you. There's no more time for talk now, Billy. I think they're nearly finished. I'll have to get back to Silver. When the time comes, move fast. Yeah. That's the gate. Can't be much further. I don't think Blackie will stay here forever. That's the gate. Can't be much further. I don't think Blackie will stay here forever. That's just about what he did, figure. This he buried here is all cash he hid away when he first met the kid. He never planned on using it unless there was a bad need for it. Well, come on. Let's keep going. Yeah. Well, somebody should ride by and see us out here with this lantern. Might get too dull going. Curious. Big faster. Yeah. Come on. Hurry up. Take it over. We struck something. It's the box he put the cash in. Keep on going. Well, from the size of it, there must be a plenty there. There is. Told you I heard Blackie vote you had over 20,000 in a way, didn't I? That's it. It's clear. Come on, then. Give me a hand. We'll carry it to the cabinet. Who's there? Hey, somebody's shooting at us. There he is over there. Come on. Grab your gun. Bring it on. No. Come on. That same evening, the citizens of Laramie call on the sheriff at his office to demand action. You tell that kid to clear out, Sheriff, or we will. How do we know who he'll be stealing from next? It might be most any of us. And likely when it happens, he'll have another slick story to get him out of it. Hold on! Listen to me, folks. You're getting things all twisted. You're saying Billy's a crook, and I know Dogg on well he ain't.  Then you ain't going to do nothing about it, is that it, Sheriff? If you want to put plain, that's it. Then we will. Who's with me? Who will come along to tell that young coyote to clear out? I will. Good. He's just a kid, but a kid can steal like anybody else. Come on. We'll chuck the kid. Don't say where you are. Hey, a mask, man. Not a one of you leaves this office. Sheriff, it's a crook arrest him. If he was a crook, I'd say trying to arrest him right now would be pretty risky business. And I just so happen to know he ain't one. I've met this one right before. You see, folks, the Sheriff ain't only sticking up for that kid, but he's starting with outlaws as well. I'm not an outlaw. I'm here only to prevent your making a mistake. You're not going to get a chance to harm Billy until you've learned he's not the thief you think him. We know all we need to know about Billy. Why, it's under... Careful. Come on. There's enough of us here. Let's rush him. The first man moves, stops led. Sheriff, Sheriff. Hey, there's Walt Small. Let her through. Ma'am, what business you got here? She can tell you about the kid. It was her he stole at $50 from. But he didn't. That's why I've come. I've made a terrible mistake. I've found the money. It was in Mr. Owens' basket. I don't recollect putting it there, but I must have even forgot about it. Oh, Sheriff, I'm so sorry. I never meant to accuse a boy without being sure. Well, folks, how do you like that? Now what have you got to say? How do we know it ain't a trick? How do we know the kid didn't sneak back there with the cash just because he knew this time he was caught and was going to be run out of town? Why not let him answer that himself? Huh? He just rode up. He's coming in here. Hey, what's that box he's carrying? Sheriff, you take this. I'm turning it over to you. What is it? Why don't you look inside? Yeah. Stand back, folks. Don't keep proud of me. Well, I'll be... By golly, there must be thousands there. Make it come proud. The kid's running. Whoa, up, folks. Whoa. Let the kid tell it for himself. All right, Billy. Now, where'd this box come from and who's it belonged to? I don't know who it belongs to, Sheriff. Honest, I don't. It's cash black he must have stole. It was found very near the cabin, so I brought it here to you. You brought it to me when you might have made off with it. But it was stole. It don't belong to me. Gee, I don't want it if it's been stolen. Well, then, you there. You were talking the loudest against him. What do you say now? Well, maybe I could have been mistaken. Maybe? Well, it was then. Is that what you want me to say? Yes, to think of anybody choosing to give up all that cash. And we called the boy a thief. I was the worst of all, I reckon. If it hadn't been for me, all his trouble wouldn't have started. Young man, I'm right. Sorry. Ah, that's all right. Now, perhaps you people won't be so ready to judge before you know the facts. Perhaps you'll be ready to use charity instead of criticism. Billy has fought against odds to make a place for himself here. And yet, instead of helping him, every one of you, with the exception of the sheriff, has treated him like a convicted thief. And me for one.  Kid, as far as I'm concerned, you're all right. Yes, sir. You doggone fools. It took the masked man to show you what I knowed all the time. I don't know. Silver. The story you have just heard is a copyrighted feature of the Lone Ranger Incorporated.


Welcome back. I hope after going through the first video and the reading materials, you're already familiar with what HP is as well as its advantages and limitations. In this video and the next, we will briefly look at how HP has been used to date and introduce you to two examples of using HP to analyze land use tradeoffs. And a lot of the experiences shared in this virtual training are drawn from those two examples. As mentioned in previous video, HP has been widely used in complex decision-making processes covering a wide range of sectors and topics, including house, company resolution, government policy design, marketing banking, corporate social responsibilities, supply chain management, technology selection, and many others. Since sustainable development issues like sustainable land use inherently involves multiple competing objectives, it's not surprising that HP has also been used extensively to look at sustainable development issues including nature conservation, sustainable forest management, environmental impact evaluation, and sustainable land uses. I won't be able to give a detailed example here, but you can find some selected examples in the reading materials. And I encourage everyone to do some research yourself on the topics you're interested in to find out more about existing research on various topics using HP. For land use decisions, broadly speaking, there are two ways to use HP. The first option is to use some parts of the HP process to identify criteria considered or drivers of land use decisions and their relative importance. As you will remember, the first stage of HP are to clarify what land use decisions you're trying to make. For example, you're trying to decide whether and where to expand your agricultural land, or maybe you're trying to select the best conservation strategy. Once the final aim is clear, we then identify the criteria and the sub criteria that will be used to make such a decision, as well as their relative importance to the decision makers. Different stakeholders or land managers may consider different criteria and sub criteria, and will have different preferences and priorities. If you're interested to understand better those differences and how trade-offs among different criteria managed, you can use the first stage of HP as a framework to engage stakeholders to investigate and understand better those drivers of decisions. In the reading materials, you can find some examples on how HP was used to identify criteria and drivers of decisions. We will also provide an example in this training module of using HP to understand how different agricultural land managers managed trade-offs in their land use decision making in the Sentinel project. But more commonly, researchers have been using the whole process of HP to support making a land use decision, and you can find a lot more published research articles on fully applied HP. To support land use decisions, HP has been used to identify risks and vulnerabilities, for example, vulnerability to climate change, assessing environmental impacts of land use and assess different land use strategies, alternatives, and scenarios. It's often combined with other methods and tools, for example, geographic information systems, also known as GIS. In the reading materials, we have included some selected open access examples, but there are probably hundreds more you can find, especially if you have access to page journals and publications. We will also provide an example from New Zealand in this training module on how HP can be used to support land use decision that involves trade-offs across different criteria. In the rest of the video, I will briefly introduce you to an example of using HP to understand how different agriculture land managers manage trade-offs in their land expansion decisions in Ghana and Zambia. In many African countries, rapid population growth and persistent low agriculture land productivity have been driving the loss of forest and biodiversity and the ecosystem services they provide. There is an urgent need to manage the trade-offs and strike a balance between increasing food production to meet rising food demand and reduce poverty while conserving nature. To do so, policymakers and researchers must engage managers of agriculture land and understand better how to incentivize and support them to manage environmental, social, and economic trade-offs in their land use decisions. It's also important to note that there are many different land manager types in Africa. Well, the majority are smallholder individual farmers, there are also increasing number of farmers cooperatives, local and international companies, as well as public agencies and nonprofit organizations who are managing agriculture land. They all may have different preferences and different decision-making processes, but there is currently little research to understand the drivers of their decisions. HP was used as a methodology in Ghana and Zambia to fill this research gap as part of the Sentinel project. You can find more information about the Sentinel project by visiting the link shown at the bottom of the slide. Here I want to briefly explain why we choose the HP as a methodology and how we applied it in our research to provide you with some inspirations and background information before you start module 203. We will read where we will refer back to this particular research as well as the research down in New Zealand and which Professor Renwick will introduce in the next video. We choose a HP as a methodology to use and develop this particular training course for in the Sentinel project because we are looking for tools to help map drivers of decisions which can specifically investigate and understand better trade-offs in decision-making. As mentioned before, those trade-offs and decision-making processes are not so well understood, but are really important for the future of sustainable land use in Africa. We're also working across an interdisciplinary team based in the UK and Africa with limited time and budget and we're like to find a tool that's easy to use. In addition, we're keen to develop applied research that can provide practical insights and it can be done participatory to help engage a wide range of key stakeholders like farmers, NGOs, government and the private sector. To recall the key advantages of HP explained in the earlier video, HP is very good match that meets all those needs. So how did we use HP in our research? Because in this research we aim to understand the drivers of decisions and the trade-offs in land use decision-making. So it's the part of the HP process to identify criteria and sub-criteria are also referred to as domain and sub-domains in this virtual training. We only did pairwise comparison of the criteria and interview different landowners to help identify the sub-criteria, but we did not do pairwise comparison amongst those sub-criteria identified. To limit pairwise comparison to criteria or domain level as we will talk about in module two because that the researchers who led the research in Ghana and Zambia are from very diverse background and never used HP before. They helped try an early version of this training module to learn HP and providing valuable inputs which has shaped this training module. Since it is the first time applying HP it's important to keep the process as simple and straightforward as possible. At the same time it's also important to keep the process simple and straightforward for the diverse land managers they interview, which includes individual farmers, government officials, business managers and cooperative managers. They all have very different level of education expertise. As mentioned in an early video, doing pairwise comparison for too many criteria can take a long time so we want to ensure we don't tire those key stakeholders out in the interviews. And we also want to make sure we have time to explore the specifics of what drives their land use decision and get important qualitative information from them to better understand how they manage land use trade-offs. The main limitation of such an approach is that it only reviews limited information about important trade-offs amongst the sub-criteria and only offers glimpses of preferences of a decision maker. For example, a land manager may consider many environmental factors under environment criteria including climate change, forest cover and soil suitability. While pairwise comparison at the criteria level may tell you that environmental issues are far more important for the land managers than economic issues, we wouldn't necessarily have investigated which of those three environmental factors are the most important drivers of land use decisions. But such approach also has its advantages. First and foremost, as mentioned, the interview process can be easier to manage, especially you're new to AHP and you want to engage a large number of diverse stakeholders, but have limited time as you don't need to do too many pairwise comparison, which can be time consuming. Especially if you structure interview questions well, you can still review many useful qualitative and quantitative information on the sub-criteria that land managers consider when making their decisions. For example, you could compare the diversity of factors considered by different land managers. You can see the example on the bottom right of this slide on how you may be able to do that. You can also identify common criteria or common drivers among different land managers, which can be helpful to identify the most effective policy measures and incentives that can influence different types of land managers. You can also get other qualitative information that can help you inform your research and review useful practical insights. For example, land use decision making process that are used to manage those trade-offs. The insights generated from the research can be very useful for other researchers, or at least two of your research, where you can use the sub-criteria identified through participatory approach as a foundation for four AHP applications. So if you're just traveling AHP for the first time, have limited resources and time, or is investigating a new topic where there's not that much information on sub-criteria yet, this approach is worth considering. This approach adopted by Sentinel, which also will be referenced in the rest of the virtual training, so you can learn more about its contrast with other type of use of AHP. In the next video, you will learn about a complementary example of how AHP is applied in New Zealand to understand land use trade-offs and support land use decision making. See you there.


Good evening everyone. Hello. How are you? This is actually my first time at an ethereum meet-up. I've been interested and involved in ethereum since the very beginning actually since two weeks before the very beginning because Vitalik sent me the white paper and He asked me for comments So I probably Called him told him exactly why it wouldn't work and then he explained to me why I was wrong and As is usually the case with Vitalik. He has this very annoying tendency of being right So I got really excited about ethereum and I've been involved since then Before we get started This is my new book the Internet of money. It was published 10 days ago my first book is mastering Bitcoin and And it is a book about how Bitcoin works and how blockchains work in general This book is a collection of my talks and it's about why this technology Matters and most of the ideas apply very much to any Open public decentralized Borderless permissionless blockchain whether that's Bitcoin ethereum or any of the other several hundred Systems that exist out there if you're at all interested. I have a few copies with me I'll be selling them after the event and signing them if you want All right, so let's get started The title of this talk is the lion and the shark Some people have called me a Bitcoin maximalist. I am not a Bitcoin maximalist I'm Interested in the possibility of open public borderless the centralized permissionless blockchains and disrupting everything and in that space I think there is Plenty of space for many different approaches to many different problems So the first question you have to ask is well, what is ethereum and perhaps what is Bitcoin and How do the two compare? So Let's see what Google has to say So I type into Google ethereum is and Google suggests as the first search ethereum is Dead now the good news is ethereum is not alone in that because if you type Bitcoin is Google suggests Bitcoin is dead So already we see that these two systems share one thing in common They are consistently underestimated. I call them zombie currencies Even after the double tap as You're walking out of the supermarket. You just looted during the zombie apocalypse. You hear behind you Because as always the zombie refuses to die if you actually do the search ethereum is you get the definition which is on the ethereum website and Oh, now it's refreshed on me ethereum is a decentralized platform for applications That run exactly as programmed without any chance of fraud censorship or third-party interference if you type in Bitcoin is You get the title of Soto Shinakamoto's white paper that says Bitcoin is a system of peer-to-peer electronic cash and so now we have to ask Are these What they say they are is ethereum in fact what it says on the website is Bitcoin what it says in the white paper and And by asking that question we have to look at the inescapable conclusion That what the founder wants something to be is Not always what that thing is and that shouldn't be surprising Because that applies to every technology and the more disruptive it is The less a founder or inventor is able to predict What it will end up being how it will evolve what? fitness it will find for what applications the internet is a military network designed to allow the continuity of data routing in the case of a targeted strategic nuclear attack against the United States or The world's single largest repository of cat videos DARPA did not set out To create the world's largest single repository of cat videos Tim Berners-Lee designed the web to be a mechanism for physicists to be able to exchange knowledge papers data and images between research institutions Not to post photos of what they just ate or To use just the right camera angle with just the right pouty duck face look To impress everyone in the world simultaneously unintended consequences Are part of technology technology is a tool and as a tool it doesn't exist in the vacuum it's dropped into a society and Society decides how every person uses that tool in a very decentralized manner and As you use the tool You change the tool Your interaction with technology changes its nature it molds to become what you want it to be That is true of centralized technologies It is ten times as true of decentralized open systems Where innovation does not require permission Where the development is guided by consensus in an open system? It is Absolutely naive to assume that just because the founder thinks this is what it will be That's what it will be and it turns out that Ethereum is not a system of applications that's run Exactly as written without third-party interference censorship, etc. Etc.  They limit things. They are trade-offs. They are inherently trade-offs and The reason I'm using the lion and the shark as an example is because I think that is one way to look at these systems of Blockchains that we have Ethereum and Bitcoin when comparing them if Ethereum is a shark it is The apex predator within its own environment It's a fast swimmer. It can breathe under water. It eats anything that bothers it If Bitcoin is a lion it rules the land But it doesn't swim very well, and you can never really put these two apex predators in a ring together and Say let the best one win Because the outcome is decided Entirely by whether you fill that fighting ring with water or not Fitness for purpose is something that is decided through this evolutionary process in a marketplace There is no such thing as best In evolutionary terms fitness does not mean the strongest It means the one that has the best adaptation for its environment. And so then the question becomes what is the environment? For Ethereum, what is the environment for Bitcoin? What applications are the ones? That are most suited to be solved with something like Ethereum and what applications are the ones that are most suited to be solved by Bitcoin Or any of the other systems out there And necessarily some choices have consequences I'm not a maximalist because I think maximalism is both counterproductive and hubris It assumes that you have Not just control over outcomes, but even the ability to foresee the outcome in the future I Can't make predictions about what's going to happen in this space three months out Because it changes too fast So what is Ethereum best suited for? Ethereum has made some very specific trade-offs and these were not accidental. They were very deliberate It is a Turing complete language which offers enormous flexibility in programming and brings Ethereum applications very close to the actual platform Bitcoin is not Turing complete And that's not an accident. It's not Turing complete for a very specific purpose It's designed to be extremely limited in its flexibility in order to deliver very very robust security because simplicity is a fundamental security practice and If you choose to do things in a very simple way to make them very robustly secure You necessarily close the door on billions of applications that we've never thought of that you do not have the flexibility to do And if you choose to create the flexibility to do those applications You're also signing up for much more rapid pace of development but also For much more complexity, which means many more bugs Many more unexpected conditions Many more unpredictable and unintended consequences one Necessitates the other if they're a maximalist will say if they're him can do Everything that Bitcoin does comma Expect except for Robust security and sound money and that's okay Because to make that choice to do sound money and robust security you necessarily make it very difficult to build decentralized applications Ethereum and Bitcoin have launched themselves on different paths those paths do not cross Bitcoin cannot do many of the things that Ethereum does Ethereum cannot do many of the things that Bitcoin does But they can both do Something miraculous They can reorder the fundamental institutions of society Around network set centric systems of organization instead of institutions They can create opportunities for permission without for innovation without permission For anyone to construct applications Where the minimum required market audience size is two and that's it If I have an app and I have somebody else who wants to run that app We have a network on Ethereum or Bitcoin. We can run an application We don't have to ask for anybody's permission and that is a magical thing It's an amazing thing and what it's doing in both cases is creating this exponential Explosion of innovation that we've never seen and It's going to affect some societal institutions and structures that have remained unchanged Since the beginning of the industrial revolution and that is the unique promise. I Am not a Bitcoin maximalist. I Am not an Ethereum of maximalists. I am a maximalist for open borderless decentralized permissionless systems that allow us to solve problems in society with technology That is open for everyone. I think that is a magical recipe And it doesn't matter whether you try to solve them in Ethereum or try to solve them in Bitcoin or what you think Bitcoin is or what you think your theorem is because you don't get to decide and Even Vitalik doesn't get to decide The market decides and if you wanted a system where the founder decides We already have those They're called hierarchical institutions. Our society is run by them if you want a system where There is no possibility for evolution into uncharted territory there is no possibility for change with unintended consequences then You appoint a dictator they make all of the choices things are much more simple The outcomes are predictable Economic exclusion human misery poverty the loss of freedom Predictable outcomes. However, some will benefit tremendously from these systems but in engaging in this particular system in signing up to play in The sandbox of Ethereum or Bitcoin You are saying I don't know what will happen because I'm not in charge and even better Nobody knows what will happen because no one is in charge because these systems have been unleashed Into a sea of creativity Where the markets will decide what applications they think are best and Maybe it will work and maybe it won't and in the end These things will fall into a niche where they fit perfectly for a very special set of applications and We have no idea What these will be Celebrate the line Celebrate the shark they're both kings of their own unique Environmental niche. Thank you