Welcome church family and welcome to our moments with Pastor David and Marie and again It's always good to have you both joining with us. So welcome. It's good to be here. Thank you So how you guys have been joining our time together? I mean, I know pastor our time together. You always love. Oh, it's the best You know and the church is enjoying this is an enjoying enjoying our time together hearing your hearts and Hearing you share about marriage and so it's been good. I mean, I've enjoyed this time Yeah, I like it. I'm pretty sure I'm speaking for both of us. We we enjoy it We enjoy getting together. It's something that when we do our marriage couples retreats and sometimes other things that we do We like to answer questions, it's I like the conversational aspect of that just to kind of share off the cuff impromptu Marie is especially gifted at that and and I enjoy I enjoy that very much. So, no, it's been a blessing for us It's been fun hearing your heart hearing you shed light on both Husband and the and I was gonna say the husband in the bride the victim in the bride And so but it's been great, you know church as we've been going through this We'll be starting a series on actually song of Solomon And so I'm interested to hear that and the teachings and your insight into marriage and how that builds into the relationship but you know, I do want to acknowledge those who who may be watching who are maybe not married or or single and Wondering how does this apply to me? How does this apply to us? I'm single or am I ever gonna get married? And so You know some of the questions I want to ask today for you both is What were some of the tools as Christians and and it would be for some of those who may be waiting on the Lord for For their companion or for their husband or for the wife. What were some of the tools that? You guys both used looking back in your marriage that would attribute to where your marriage is at today You know, I might have mentioned this I'm pretty sure I did earlier in one of the other conversations we had John But neither Marie nor I are are of the nature and feel that we have sure-fired methodologies Formulae for people to have a good relationship. I Suspect that when you read the Bible you see certain things within scripture that teaches us what we should be as Christians individually and I've always focused more on on those things and I'm not really a very good and Advising other people as it pertains to Using this particular methodology or whatever neither one of us are comfortable with that I Have found that in our our dating and marriage That the dating was only the prelude to a real life together because In dating you discover some things, but you don't discover that many things and so if you're not If you're not What's the word You're not really Preparing your own heart for for Marriage, I don't know that dating is going to be the answer anyway Sometimes I think people date and waste their time dating thinking that that person they're with is going to change or become different And and also I'm not real good neither Marie and I And I know I speak for us In this have ever been the type that think that We can advise people how to date what to do on dates and all of that. I don't do that but if a person's pursuing the Lord and Are grounded. I think that they will do those things that they see scripture teaches them in terms of personal relationships with loving and sacrificing in and All those courtesies and things you find in scripture and you learn how to apply Principles as it relates to conversing and correcting and and Morality within the confines of dating all of those things are in scripture So if somebody wants to be successful in their dating and into their marriage They need to first and foremost concentrate on their personal walk with Christ And if they're going to church and they're growing in the knowledge of the word and They're serving and doing those things that disciples do and you meet somebody who? Also does that you have a very good chance of having a very good marriage but if you kind of are still growing up and still learning how to How to walk with God and I'll don't don't expect to have some Extremely tight great dating into marriage relationship because if you're not growing When you get married it actually will go down and not up. Did you know that? I mean when you're dating you put on your best face most of the time, right? And and you show yourself to be what you potentially can be and sometimes You're not really those things that you're acting like you are and so the girl speaking from a man's perspective begins to think you're one way when in fact You're a hunter and she's the prey and you're simply acting out what you think she wants and Then the ring goes on the finger and the vows are made and then you go back to what you were so if a guy is dating and he wants to have a Good marriage he has to have a good walk with God first and foremost and the same would work with the woman if the woman Is walking with the Lord? She's not going to be seduced by some some guy who is a deceiver some guy who's pretending She'll pick it up because she'll see he doesn't serve She'll see that he doesn't go to church when she doesn't go that he doesn't worship when people are singing that he doesn't Want a fellowship after church or she'll pick up phoniness in the way that he acts and She'll say that's not what he's like when we're alone. She'll pick those things up if she's wise and if she's covering her Dating relationship with prayer and she's applying God's word and she begins to Consider her own walk and begins to say to herself. I was closer to God without this guy than I am now with him Well, those are the warning signs that she should be Heeding and he should do the same if you are not closer to the Lord as a result of being with this person And that's not a good person for you at least at this moment So you can make some changes and you can say, you know what baby? We need to get in the word together We need to pray together. We need to attend church together serve together. We need to make this into something that is real Or let it go downhill, you know, and then you end up in a relationship that that doesn't blossom. It's real simple to us That's kind of how we think Yeah, that's interesting, you know, even when I was thinking from our last our last meeting Our last time that we were together. I've been thinking about during the week Okay, what are some things that we're talking about what we're gonna talk about what really fascinated me about and what has been Hopefully you guys can share some light on this is you guys come from two different backgrounds Right, I think yeah, oh, yeah, absolutely but being able to come from those two backgrounds and Using the things that as you mentioned pastor being equipped in the word spending time in prayer Even if we're to speak to those who are maybe thinking about getting married or those who are engaged those differences I Guess I can say those differences don't make a difference when you're in the word, right? You know, again, I'm doing all the talking do you want to say something? Well, I I think sometimes people can Be in the word but not obey the word You know as well. I think for for one thing I think that for me My parents had a good marriage My mom was a quiet. She was a quiet woman, but strong. She was strong at the same time. I And She was she was a good. She was a good wife. I Had that you know, that was a I had that I had that In my you know, she you know to follow after my mom was very very good a good wife and a good woman And and she was a cook, you know, she she still is she still So I have to and my dad was a good man he worked So Marie you're able to glean from these things that you saw in your home as parents To really influence and to guide you in your marriage with pastor David And pastor with you would would you use your parents as a model or the way they Already differences that Because what I'm trying to point out here is is has there been a contrast between The way that you both grew up and in terms when you guys started Dating and new or not dating what that you guys were going to get married. How were you able to? Either bring those differences together or Put those differences aside and say, okay, we're gonna focus on the Lord What were those differences like, you know, sometimes when When you're determining who you want to be with There are positive things that you got from your family from your upbringing that That you expect to be part of your relationship And then there are the things that you would never want to have as part of your relationship things that you saw that you would never want to have as part of what makes you and Your wife a married couple and so that's just the way life is John As you know, you saw good things in your dad mom that you said those things are natural good They bless my heart and you saw other things that you said, well, that won't be part of what I want to be You may not have said that Openly you didn't say it.  My mom Loved her kids, you know, she was a non-believer my mom dealt with with illnesses and and medications that sometimes when before she got saved when she on occasion would drink something that the meds would work with the medications with the alcohol in such a way that she'd become angry and abusive and and all but that was on occasion not always and so when I met Marie I Saw the good things that my mom that my mom had my Marie Had a sweetness about her. My mom could have Marie was very warm and my mom could be Marie is very hospitable, you know, very welcoming Very oriented towards serving and wanting to make sure you're comfortable She had those kinds of things even when she and I got married because she never had cooked a meal for somebody in her life Until she and I got married. I'm the first person who ever was the guinea pig for her food You know, she's an excellent cook and I love her cooking She learned to cook by talking to grandma and her mom and even my mom on occasion We kind of help, you know, that's what older women used to do is to help the younger women to be a housewife that we Paul told Titus For the older women who train the young women to how to love their husband and how to care for the home Well, that's that was traditional and so that's part of Marie and so there were things about her I'll give an example that that are that there were part of my upbringing is to this day Even just yesterday and she doesn't she won't even know this So I'll say it even just yesterday. She makes our dinner for me and even though it's just Marie and me in the house She still stands by the stove.  Yeah, so there are things like that that that I saw that were good And then there are things that reads not like my mom was that I also saw that was good my mom was quicker to to argue who her point or to She could get angry very easily at times and Marie If we ever which we don't but if I ever want to argue I have to start the fight I have to You know, she won't she doesn't she doesn't do that. She just doesn't never has John She is easy-going that doesn't mean that she doesn't have a strong will and doesn't mean that she doesn't have her opinions She just has learned over time that there's a proper moment that she can share with me in our relationship she's learned my timetable and When it's when it's the best time to say what she has on her mind and she's chosen to do that for for many years now So we don't we don't you know, we're just talking about this the other day We really we don't we don't really argue and fight, you know There are times when we don't agree with each other. Thank God for that But we it's not so big an issue that it makes a problem for us, you know, because I'm kind of easy-going in 99% of the time, you know, and so she's very easy-going and so it just worked and so I Guess I guess to briefly summarize all of that is Both of us and I think you just said this You know, we didn't have perfect parents, but we had committed parents Marie Marie's mama and dad, you know, I loved her dad. Yeah, I loved her dad and I love her mama and Marie loved my dad and put up with my mom no, she loved my mom and That made that made the big difference and it still does Listen a Christian marriage is just two Christians living for Christ. That's what it is And you know, you can buy your men are from Mars and women from Venus or whatever those books You can buy all the ones you want to buy and and and and you know men like this and women like that And I think there are general truths and all of that You know, but when it comes down to it, you know, you make a decision and that's what we did And we knew that we're moving in in this direction Very early in in our in our dating relationship. I I didn't have a romantic love for Marie. You know, um I didn't have that what I had with Marie Marie that became our foundation john Is I had an affection and a friendship for her That made me want to be with her all the time That's that's how it was It wasn't that I had this this desire for her as a woman As much as I had a desire for her as a person um And that's what I've always had for her and I I didn't really ever have that sense of Of a real fact that I've I've got a very beautiful wife. I never thought of it that way. She doesn't feel that way but she is she's a beautiful woman and I I just never saw that that's not what attracted me But attracted me to Marie was her heart Was her kindness or gentleness or You know her she made me feel like a like a hero and a superstar and she always has you know and And my ego just gets you know flattered by her and uh, it's just that's just you know When when you have somebody who who treats you And looks at you the way this girl has always looked at me It challenges you I've said this already, but I want to be worthy of this person's admiration. I I don't want to be um Someone disappointing her I don't want to disappoint her And I live up to her expectations. I try to And I think that's been really an important thing in our relationship You know when I look at it from uh From a biblical standpoint I I You know a lot of people look at your both your marriage as a as a model because of Of where you guys are at now the way you both love one another and love the lord And pastors mentioned many times how Marie just makes you a better person You know and uh, and I think about when like when Nehemiah was they were rebuilding the wall And uh, and I've been thinking about this as we've been preparing for this week How one time and and we still do this in our marriages how in one hand they had a A tool a trial to compete to complete the wall And on the other hand they had a weapon to safeguard their Safeguard their work and I started thinking about that in the context of marriage How we must do the do the same thing You know pastor you mentioned just a few moments ago that Your attraction to Marie was as a person instead of as a woman And do you think it can be dangerous if men have that mentality? I'm just going to love her because she's a woman and and we mentioned the the conqueror thing earlier Where it just becomes more of a a physical thing No god created, uh man to I guess with eyes, you know, he he didn't make us blind You know, he created us with eyes and When god brought eve to adam And he saw her He said oh, you know that in the original language, it's he breaks into into song and You know, this is oh finally it's an oh finally expression like someone like me And I I can't help but believe in some could disagree and i'm fine with that of course, but To see her for the first time Just there was a visual Kind of snapping to consciousness You know and I I think that Part of and it's a natural thing and a good thing is to be attracted There's you know, you're attracted to your girl And I was attracted to mine But the the the more important thing Is to be attracted to something that that lasts, you know, um You know, we're told that beauty beauty is is something that That on the physical outside is is a temporary reality But but a heart But the heart It is something that grows and it becomes even more beautiful And and and you know this and I do too, you know, I get you know, I'm sentimental I'm you know, everybody knows that about me. I pretend I'm not to myself But everybody knows that I have a sentimentality about me and Mr So Marie Marie can tell you this my my daughter-in-law the other day Mike harina Um said I want you to see something She goes I think you might laugh at it, but I don't know because she's still learning me And so remember she showed us a picture of that old couple She shows me a picture of an old couple. I forget the exact Picture itself. I don't want to do dishonor to to To The picture that she showed me, but it was an older couple and it's an older man showing affection to his his wife And I tear it off thinking of it That's us That's us You know you When you when you think that at one time She and I could run together We played racket ball together and We were I was athletic, you know and marie's too And we would walk and run and we would we were In you know young, you know, but we're not anymore, but I'm happier now Then I've ever been Because I don't need to do those things anymore. Not that they're not good and I wish I could sometimes John there there are things that that I tell marie that about us That I think are the the things I've learned and we've learned I speak for us because Because I know we've talked about these. I'm just exposing what we talk about to you right now But we are you know for me I get sentimental forgive me I I have to be with her I have to This makes me whole This makes me whole I don't forgive the emotion. I didn't expect it. I'm serious. It just comes out because I'm opening my heart but I'm happiest When she's around me always I've had friends who hey, let's go you want to do this or he He doesn't go because his wife and they'll say that to me But they don't realize that My place of comfort and peace You know outside of my obvious walk with god and my ministry or that's where I get my peace But my happiness is really being on a couch Looking over towards my girl And knowing that she's with me That that's when I'm at most peace john is When I'm with her holding on to her that's a fact That's a fact. I don't need anything else. I really don't I don't need anything else. I have what I need And so I think that's biblical. I feel You know when adam said finally flesh of my flesh bone of my bones.  No. Was it was it immediate in god's way of seeing things? Yes, you know, there is the there is the now He sees it as already But there was a process Where she and I had to learn each other. It's true. We came from similar backgrounds, but different backgrounds at the same time. So Yeah, I really had to I you know for for example, I When we were dating I invited my two roommates to go to the show with us you know and And I when they showed up he wasn't too happy You know and I didn't ask him.  I was always the more the merrier You know, so hey, you want to come? Hey, you want to come to that kind of thing? I had to really learn that You know at times when he doesn't want anybody. It's just him and me You know together and I I've done a pretty good job of that. Yeah, I've finally learned it Yes, I'm dying I mean, but those are the things you don't you you find out about each other and I did quickly quickly found out about that one But um, yeah, and I I probably could have invited a lot of people over the house too Well, we did actually in the early years especially because we ministered a lot to to the younger younger Christians in our fellowship It was a it was a young adults Yeah, young adults and it was it was actually a very a joy of our hearts and we were blessed. I'm blessed by by being Being able to to minister and to be with them and you know and bring them into the home as well Marie when pastor just sharing in Genesis about the cleaving together from a woman's perspective How would you Share that to maybe somebody who's going to get married or somebody who's thinking about getting married From your point of view of what cleaving means to your husband Well, I think first of all when you get married. I think that you have to remember that He's the one you're to minister to first and foremost. I think sometimes you can You can bring other people into your family, you know without Asking him if they can come over or whatever and You know, I think those kind of things show who you know He if if he wants somebody to come over that's fine. But if they if he rather just sit there with you and just you and him Fellowship with one another, but he's a man should always be first And I would serve my husband first too. They should be served first And and I I think you should never Be Rude to your husband I think there comes a time maybe, you know, you know, if you have a problem With your husband, then maybe you gotta seek counsel or or discuss it between you Before you seek counsel and work those things out. I think we all kind of disagree We all have differences and we come from different families. So there's It's like iron sharpening iron and I think that's the thing that It comes with time too The more you spend time together with your husband, the more you know him And then you you know the desires of his heart And I think it's easier to minister in that manner to to your husband. You you need to As well study your husband nobody likes and what he doesn't and Encourage them a woman needs to be an encouragement encouragement of the man Not tearing him down even you know because They have a lot of stresses. They're the workers that go home. They leave the home and go to work and and maybe some of the wives do too but Even so we need to encourage our husbands and thanks them for For putting food on the table. Thank them that we're together. Thank them for the children We have together and You know it it is a time in my life where I'm really enjoying This time, you know as we're older, you know, it's just I feel more relaxed, you know, and That's because we're on tranquilizer No, it's just because that is not the true at all.  I've never been and never will be but But you know to but women ought to encourage their husbands and and the things of the lord And I don't and when I say the things of the lord, I I'm not necessarily saying you got to um, you may be living with a non-believer and keep And keep telling him things about having to go to church you need to go to church You need to put him and get him and put him in your prayers Begin with prayer if you're having a you know, if you've married a non-believer Pray for his salvation pray that we come to the lord and be the kind of wife Show him how much you love and then appreciate him what he does it comes home From work and and feeds the family I think if you show him that you're grateful He's gonna want to be with you and and and and you may be able to win him over to the lord through those some of those Things like you know, just in and encouraging him Um verbally, you know, every man needs to be encouraged, you know, this is my man Nobody can have him You know, I mean, but every every every man needs to be encouraged You know, even if a woman says well, I don't know how what I can encourage him for or there's nothing to encourage him Find something you can find something And encourage him but they need to know that you're behind them and that you love them And this is forever Because when the kids are gone It's only you and him Finally We've got quite a few grand babies now. How many grand babies do you guys have now? Nine right? Is it nine? I think we have uh 11 all together. Oh my oops You know to have been grafted in and nine have been born to us. Yeah It's cool seeing them come around here and visit you guys the love you guys have for them You know pastor, uh And our last message you we were uh You were teaching our last message and obviously we're staff comes and watches the uh is attendance for pastors teachings and uh I know sometimes when you're teach I picked up on something you did and it really gave me some insight on How much you're attentive to marie? and so you're around the pulpit and uh Marie came in and right away I saw you When you saw her and that spoke to me that really spoke to me because the way you see people come in and out all the time Right? They're getting up during my service and stuff this time This time you locked in and I saw that and I saw you I saw you and it and it really spoke to me to see that When we're in israel, I would watch and you always knew where marie was at Yeah, and uh and pastor always tell me Uh, you'd go with some of the girls and watch marie's gonna look for me and sure enough You look from and you'd you you would spot them quick And I watch those things and and those are things again that I enjoy seeing because it it speaks those actions speak louder than words and it gives me a little glimpse of the the trial in one hand Building and building your marriage and the sword in the other protecting it. My father my father was a one woman man which to me was an unbelievable example and I was with my dad when I was Probably in my early early teens my dad and he had a friend and his friend And my dad and I went to the store together went drove to the store And I'll never forget this john how As we were driving my My dad's friend turned to my dad and spoke to him now my father um I'd say my father was a handsome handsome man my my father had My father was a handsome man and um My my dad's friend turned to him and I'm sitting in the back seat and he Said something to my dad about some good-looking woman. I guess in a car next to us And he said he said frank, you know Check her out.   I don't want to look at this woman Those are the little things in my dad That I learned as a as a boy that my dad didn't look at other women My dad's especially aware of where he's at and his son's in the car and he's going to be a good example That was my dad See, so I grew up with that I grew up with with a man who You know, my dad took an early retirement because my mother was crippled my mom had such physical melodies Lupus and on things You know that was she was in pain so So bad for so long my dad took an early retirement to care for her and He'd never complained. Did you ever hear my dad? My dad never complained About his lot in life how he had a sick wife from the time my mom was 24 years old She was sick all his married life until my father died at 74 and um Just to show you one more thing about him and what I learned from him My mama said to me when dad was in the hospital when he died he was he was on his deathbed and My mama said to me they won't let me go into the room with your dad We're at the hospital and I said Really why? Because my dad had had a heart attack She said because the minute I step in the room his heart starts beating too fast And they said it's not good for his heart just walking in the room. That's how I am Just walking in the room Her heart just beats so she literally is my heartbeat She literally like my dad My mama was my dad's heartbeat John To the end That's what you see God put that love in my heart God did But I had a good example with my father And I've tried with my boys To be a good example of a man who loves his wife I have and I would think that they could both say That my dad's been a good example The way my dad was to me And I think that's part of being a husband is Is to love That woman and and somebody once said do your children a favor love their mother You know because my boys watched and they saw a faithful man A man who worked long hours a man who Lived as a man. They they've seen that in me The way I saw that in my dad The way I saw that my dad was 65 when he retired He wouldn't have he would have kept working He would get up at three in the morning every day Monday through Friday three in the morning He'd go to work. He'd come home at three in the afternoon A long day for a man his age and he was you know, he was tired And he'd come home and take care of a woman who needed his care And he did that He did that until he couldn't do it anymore john and then he went home to be with jesus So I learned that And I would like to say that's That's the man that I Our lives have been very blessed I knew what I needed And instead he gave her me That's you're so bad You're so bad Well, you guys I want to thank you guys that that was a I thought a powerful time sharing Here in your heart You can't script that actually in my little prop notes. It says cry right here Let it flow Thank you guys so much that was so encouraging to hear and for those who've been watching I I hope you enjoy our time together and is there anything you guys like to say to our church I'd like to say how much we love and miss our church. Yes, and we are praying every day That we'll be able to reconvene to assemble once again But until that moment Marie and I Come on on sundays the church doesn't know this some found out Uh now we're letting them know but yeah, we come out on sunday. I'm their second service And we are there a second service and And just love to see them when they drive by so I can say hi to them, you know and Tell them how much we love them and miss them and And I'll I'll be there on sunday and I'll be there. I'm there every sunday. Marie and I are there every sunday Second service, especially sometimes we've been there first but second service And if anybody wants to come and say hi to us We miss them and we would love we would love to see them and and god knows that It isn't too long from now that we're going to be able to come back on a sunday morning a wednesday and We're going to be able to celebrate in our our first sunday together again. We're going to do our Easter service You know a resurrection service And it's going to be a lot of worship and praise and joy and tears and And all of that so until that moment, you know, it'd be a blessing if they came to say hi to us On sunday and if not We are praying for for our church and I know that many are praying for us And so Marie and I you know We together we we we love our church. We may not know every single person and we don't And I don't know that it's possible this side of heaven But we do love Our people very much and I think Many know that so we miss them And uh look forward to seeing them again. Can't wait can't wait to see you guys We love you Thank you guys and uh join us again next week for moments with pastor david and marie Uh on behalf of our our time together I love you guys miss you and look forward to having you joining with you guys soon. God bless you guys


Since IOM, please. Excellencies distinguished delegates, I'm making this statement on behalf of the Director General of IOM, Antonio Vitrino. Universal health coverage will not be universal unless health services coverage and financial protection measures in all countries progressively include migrants, especially those marginalized or in situations of vulnerability. For over six decades, the IOM has been your privileged and trusted partner around the world to serve health needs of migrants and communities at the frontline. Together we have been reaching and empowering those furthest behind within and across borders along the humanitarian development continuum. IOM welcomes the approval of this landmark political declaration on UHC and its explicit mention of the particular needs of migrants and recognition of critical migration-related issues such as complex emergencies, climate change and international migration of health workers, among others. The inclusive achievement of UHC will require investment in primary healthcare that is accessible for migrants and recognition of migrants' roles as co-developers and providers of people-centered and equitable health services in countries of origin and destination. This UHC declaration joins the 2030 Agenda, the global compact for safe, orderly and regular migration and the migration-relevant WHO frameworks and action plans to create mutually reinforcing cooperation frameworks that can catalyze policy and programmatic coherence on migration health. As the UN's related agency responsible for migration and secretariat and coordinator of the UN Migration Network, IOM stands ready to leverage the full potential of cross-agency cooperation in partnership with our member states, UN partners and other stakeholders, including migrants themselves. Leave no migrant behind. Thank you very much.


It is running. All right. Hello and welcome to Become a Cyber Security Ninja. Session 10, we are here. We started in January. It is now the very end of May. Well, not very end, we got one more day. But you made it, this is it. And today we're just gonna do a quick wrap up and then launch into our quiz. I think that this will take around a half an hour as these usually have, if it runs a little long, I apologize. But we have 20 total questions to get through. Each question is going to be worth five points. These will be done live in the webinar. So we'll do these all as polls and you'll just answer them in the poll and then we'll call the scores when we're all done. I won't be able to tell you live how you did, but we will within a day or two get back to you and I'll give the answers at the end of each one after we've gone through the answers. You will get all the live answers so you'll know how you did. And you can email me if you think we didn't get it. If you get 80% or better, 80 points or more, you will get a cybersecurity Ninja certificate, a framed cybersecurity Ninja certificate with the name on it from Roundtable Technology. And if you ace this quiz, you will get a $50 Amazon gift certificate and there are no limits on that. If you all ace it, you will all get that. And if no one aces it, then we will probably give one at least to the top three people who score on this. And we'll do it that way if it turns out to be too hard. And without further ado, I think we'll launch into this. Oops, let me get on my right screen here, and that'll probably help. So the Ninja plan, here we are, I'm not gonna take too much time on this except to just celebrate the fact that we are at the end. We have made it through this thing. I, of course, am Josh McCuskey of Roundtable Technology, Roundtable Technology helps nonprofits and small businesses throughout New York and Maine and really all over the country and the world with all kinds of technology issues, including of course, cybersecurity. Our learning objectives today wrap up of the course, certification quiz and celebrate. These, of course, we'll just have one little quick cartoon. I think I showed this before one of the other sessions, but I actually don't recall. These are bad security tips. These are from XKCD. And I've been using, showing this at some of the live trainings that I've been doing. I've just had this sitting on the screen while we're waiting to start at some of the live like cybersecurity or cybersecurity wearing classes that I teach. And it's enjoyable watching people get these really puzzled looks on their face. And then about maybe a third to a half of a typical 50 person audience gets the joke and starts laughing. And the other just look increasingly concerned as they think that these are actually the tips that I'm about to walk them through. It's kind of a mean way to start, I suppose, but there it is. Okay, here's the way we're gonna do this. I have these little summary slides of each session that we did. We'll just show it, talk about it for a minute and then we'll have either two or three questions on each session that we went through. Session one, we covered threat modeling and risk assessment. And we talked about how to perform a basic risk assessment. We talked about how to understand and think about different type of risks that you may have. We talked about thinking about your organization's security posture, meaning are you a really, really secure aware organization? Do you have a lot of security concerns or are you kind of generally pretty mellow and pretty chill and kind of things that are somewhere in between? And one of the really key questions around cybersecurity as you identify your risks and think about what it would take to mitigate how much effort are you and your organization willing to expend to protect information that you have? And with that, we're gonna go ahead and have our first question. And here we go. All right, so the first one is, according to the Electronic Frontier Foundation, I apologize, we'll have these in shorthand. We have 128 character limits here in GoToWebinar. Which of the questions below are good questions to ask when doing threat modeling? And you can pick any or all of these.  So please go ahead and submit your answer. I would say go ahead and ask questions if you have them. But of course we can't answer questions until after we close the poll. And not quite everybody here has having submitted an answer yet. So we'll wait just a little bit longer and see if everybody can get their answers in. I feel that at some point I'll have to set a time limit on this and I'll leave these open just for a little bit of time. So we'll go about five more seconds on this one. And then I'm going to close this up. According to the EHF, do we have a firewall? What do we want to protect? How much effort can we expend to protect information? Are we being paranoid? How much expertise do we have? I'm going to close this down in three, two, one and here we go. And I'm going to go ahead and share the results of what people answered. And the two answers that are 100% are in fact the two correct answers for how to do how the Electronic Frontier Foundation again does threat modeling, which we did talk about in this first webinar. How much expertise do we have? It's certainly a reasonable question to be asking as is do we have a firewall? But those are not specifically questions that are involved in threat modeling because expertise is more what do we have in terms of resources and safeguards? Same with firewall, what do we have in terms of safeguards? So those are not part of threat modeling. So if you answered that, that's incorrect. But those of you who said, what do we want to protect and how much effort can we expend? Those are correct answers. On to the next one, increase, oh, I'm sorry, we have a little bit of a typo there. It should say increased security results in decreased convenience. Think about that statement and select one of the following. That statement is always true. That statement is always false. That statement is usually true. That statement is usually false. Or that statement is never true. You get to pick one of those answers. Increased security results in decreased convenience. Think about which of those you agree with. That statement's always true. That statement is always false. That statement is usually true. That statement is usually false. And that statement is never true. And we'll leave that open for just a couple of more seconds as people go ahead and select their answers. And we're gonna close it in three, two, and one. And we'll share the results. So we had a bit of a spread here, but most people did get the correct answer here, which is that statement is usually true. Increasing security usually, but not always, results in decreasing convenience. And when you think about security for an organization or an individual, generally you're making trade-offs between convenience and security, not always. And anytime you can increase security and either have a neutral impact on convenience or even improve convenience, which can actually be done in some cases. That's a huge win. But usually you're trading some convenience or increase security. And obviously, these are based on the things that we've taught over the course of the Ninja series. And these are based on what we think are the right answers to these based on everything that we've read and studied and cybersecurity experts that we've talked to. But if you have a strong disagreement about one of these, by all means share that with us, we certainly wanna get increased stuff. All right, so we're gonna go on to another question around threat modeling. This is our, I think we may have one more here actually, which of the organizational qualities below tend to increase cybersecurity risk? So which of the organizational qualities below tends to increase cybersecurity risk? A shoot the messenger culture, limited transparency within the organization. So a secretive or not sharing culture, open communications about observed risks, security awareness training, highly restrictive technology, e.g., no one is allowed to work remotely. So which of these organizational qualities tend to increase cybersecurity risk? And think very hard about this. And one of these, I'm gonna go ahead and give hints, which I probably shouldn't do. One of these is not real intuitive, but I do, we talked about it in the Ninja classes at least a couple of different times. We'll leave this open for just a few more seconds here. We'll give it maybe five more seconds as people are faking hard about this.  Leave this open for just a few more seconds here. Three, two, one. I'm gonna close that poll. We'll share the results for that one. All right, so we got a bit of a spread here. Everybody with the exception of one person agrees with, or exception of a few people, I'm sorry, agree with Shoot the Messenger as a, something that increases that's absolutely true. Limited transparency is also a correct answer here. Open communication about observed risks decreases risk. That's a good thing if you're trying to improve cybersecurity. Security awareness training is a good thing tends to decrease cybersecurity risk. And that last one was probably the one I would say is counterintuitive. That does tend to increase cybersecurity risk because when you have highly restrictive technology, and this is true all the way up to the US government, that you have what's called shadow IT, where if you don't allow people to use services that they need to perform their job functions, then they will operate outside of your technical controls, outside of your technology infrastructure, and that introduces risk. And for that reason, highly restrictive technology environments generally do increase cybersecurity risk, which is very, not very, but somewhat counterintuitive. So the correct answers here were Shoot the Messenger, limited transparency, and highly restrictive technology. Those were the correct answers. Last one in this area of risk assessment. This is a really important area. This is generally the first thing that we start about. And that's why we have a lot of questions here. What are three ways to categorize information from a cybersecurity standpoint? And some of the responses here I just want to say are not necessarily wrong, but if you attended the cybersecurity ninja training, one of these should look familiar to you and should be a clear, correct answer for you. And so we'll wait to see if people identify that. And there's definitely one answer we're looking for here. And that's pretty straightforward. When we talk about cybersecurity and categorizing information, private to protected and public, high, medium, low, confidentiality, integrity, and availability retain, replicate, and remove in use at rest and in transit. Which of these is the correct answer? Looks like we've got everybody in, great. And we're going to close that poll and we'll share the results. The correct answer was that middle one, confidentiality, integrity, and availability. These other ways are not horrible ways to categorize information, private, protected, public, in use, at rest, in transit. That's actually in relation to encryption as the term that's used when you're talking about encryption of data. But for categorizing from a cybersecurity standpoint, confidentiality, how bad would it be if this information was exposed to someone who wasn't supposed to see it? Integrity, how bad would it be if we lost this information or if the information was changed and we didn't know about it? And availability, how bad would it be if the information was not available to us for some period of time, 24 or 48 hours, couldn't be accessed? Those are those questions. And thank you so much. So got some correct answers. We'll see if anybody's acing it so far, but certainly the majority of people are getting the correct answers for all of these. The next session was session two, basic network security. Talk about if you have a network, many organizations in their operating environments where they don't have a network or they're totally distributed, meaning there is no office or they're in a WeWork or some other co-working location where you actually can still have your own firewall and that's still not a bad idea. But certainly for the majority of organizations that have a network, good idea to have a firewall. If you have a firewall, it's good to have unified threat management. It's good to keep things up to date in terms of your switches, your firewalls, things like that. When I do my cybersecurity assessments, we run vulnerability scans. That is huge. I have yet to find a network that's got all their firewalls, all the switches, all the wireless access points up to date. And that means there's no vulnerabilities on all of those devices. Make your wireless access, your Wi-Fi secure and reliable, perform those vulnerability scans to tell you what's there. An antivirus is okay. We're not opposed to it, but it is by no means a cure-all for your cybersecurity concerns. It has to be in conjunction with lots of other things. And with that, on we go with the quiz. So we're definitely gonna run past 2.30, looking at the pace we're going, but we'll try to keep it rolling here. Unified threat management is, and you can select any or all of these, is a firewall, is a service that runs on some firewalls, can protect networks from intrusion malware or other threats, is a good idea for protecting a network, is too expensive for any small organization to purchase. We'll leave this open for a few more seconds and let people get their answers in. We don't have a lot of answers yet, so I'll keep this open for a bit. And Ben, can you be a favor and just keep an eye on the questions? I've got it between launching the polls and moving the slides. I've got a lot of things. So if anyone comes into the questions, can you flag that for me? I can. All right, thanks. And we'll leave this open for just another moment and let's show the results. Okay, we are a good job here. Is a service that runs on some firewalls is correct? Can protect networks from intrusion malware or other threats is correct? And is a good idea for protecting a network is correct? And no one picked the wrong answers there, which is a firewall and is too expensive. It looks like a couple of people missed the, is a good idea for protecting a network, which was one of the correct answers. But good job on that one, everybody. Next one, which of the options below is the most secure type of encryption for a wireless access point or WAP? Which of the options below is the most secure type of encryption for a wireless access point or WAP? So like one of the following. WEP, WPA, WPA2PSK with AES encryption, two factor encryption, public private key encryption. And let's see what people want to answer to this. We'll keep this open for a little bit longer. Which of the options is the most secure type of encryption for a wireless access point? Give you just a few more seconds on this one. Three, two, one. The vast majority of us got the correct answer, which is WPA2PSK AES encryption. Two factor encryption is unfortunately not a type of, a way at least currently that you can encrypt a wireless network. There's no such thing to the best of my knowledge as two factor encryption. If anyone else knows of a something that goes by two factor encryption, by all means let me know. And WEP and WPA are weaker forms of wireless encryption and public private key encryption is a very strong form of encryption, but not something that you can use on a wireless network. Again, to the best of my knowledge. Next question, a vulnerability scan is, we can select all that apply here. It is a type of penetration test. It is a scan of a network or system for known vulnerabilities. It is a good monthly or quarterly practice. Something it's best to do by yourself. It is too expensive for small organizations to perform. It is a type of penetration test. It is a scan of a network or system for known vulnerabilities, a good monthly or quarterly practice, something it's best to do by yourself. Too expensive for small organizations to perform. We'll leave this open for three, two, one. And let's go ahead and show the results for that one. Okay, yeah, this is a common mistake. A penetration test is a different kind of activity and we have a resource, I believe we provided on this on the differences between vulnerability tests and penetration tests. Penetration test is a much more intrusive and active thing, also more expensive. A vulnerability scan can be done as part of a penetration test, but it's not a type of penetration test. That is a different kind of test and a scan, but it is a scan of a network or system for known vulnerabilities. It is a good monthly or quarterly practice. It is not something it's best to do by yourself. It's definitely good to work with a third party and it is definitely not too expensive. It is typically a hundred or a few hundred dollars per year to do vulnerability scanning, especially for smaller organizations. And I think our next question, yep, our next question relates to our next topic. So let's go ahead. Your past session three, we talked about passwords with the session, your passwords are broken. And the key success factors there, passphrases are very useful, especially when you can't use things like two-factor authentication or password managers to manage your password. If it's something you actually do have to remember, for whatever reason, a passphrase, meaning a long, fully punctuated English sentence or phrase is a really good thing to use as a password. Two-F-A, two-factor authentication on everything you can use it on, using password managers and or single sign-on. And please don't share passwords in plain text, meaning don't email them to people, don't text them to people, don't write them on post-its and hand them to people that it's not a good practice. And we're gonna give you a couple of ninja questions on passwords, it's a fun one. Which of the following passwords is the most secure? There is, by the way, you're welcome to, after the quiz, go ahead and pop these into any password strength checker. If you're not sure that I've given you the right answer, that's what I did. And if you disagree with my answer, then you absolutely should do that. So which is the strongest password, the most secure password? I like cookies. This very complex U, ampersand, percent sign, four, capital M, small z, et cetera. You should pick me because I am the right answer. One, two, three, four, five, six, A, B, C, D, lowercase e, capital F, or password. Which of these is the correct? Everybody's put in an answer, good for you. And we're gonna close that and share the results. The correct answer, we lost a lot of you on this one. I had a feeling that was gonna happen. The correct one, and we just talked about passphrases, is you should pick me because I am the right answer. And the biggest reason why that's the best password is because it is by far the longest password that is there. Overdouble the length of any of the other passwords that are there, and length is a tremendously important factor in password complexity, and all those spaces in there, qualify as special characters in terms of how password generators work, the period operates as a special character. And you are welcome to take those two passwords, the one that most people go to on this question, and the other one and put them into these password string checkers. Sorry about that, but yeah, passphrases are really good in that way. All right, and here's our next question. What type of authentication is considered most secure by cybersecurity professionals? What's type? So I say which, that probably should have been which type. Which type of authentication is considered most secure by cybersecurity professionals? A password with 16 character alphanumeric minimum, SMS based or text based, two-factor authentication, touch ID or a fingerprint, authenticator based, two-factor authentication, meaning two-factor authentication using an authenticator app, or a password that expires every 48 hours, of course you'd have put in a new password, every 48 hours you have to do a new password. I'm sure everybody would just love that. I think Ben will implement that for round table starting tomorrow. That'll go over well. All right, everybody's answered that one. I'm pretty sure the support team would be at my door with pitchforks. Yeah, exactly. The majority of people did get this one correct. Good job, authenticator based, two-factor authentication is the correct answer here. SMS based would be a very close follow up here, but is a bit weaker than authenticator based app because of the relative ease of intercepting text messages and or spoofing phones for text messaging and that can be a vulnerability there. So the authenticator based app is the best of those. And I think we are on to encryption. Session four, the at pound dollar signs of encryption to ensure privacy, encryption must be implemented properly. Very important, encryption is really, really secure if implemented properly, but that can be a big if. To ensure privacy, it's got to be used in a disciplined manner, meaning I can't email a sensitive document using all my encryption once and then email it two hours later, not using encryption now. That's obviously not going to help me, and encryption will keep it from being shared in that one place but not in the other. And weaknesses in other areas, e.g. my endpoint, my computer is completely owned by some other party then whatever encryption I have on that computer isn't gonna help me a whole heck of a lot because this person can get whatever they want straight from my computer behind the encryption. And that can cause problems. And let's go ahead and get into our encryption questions. We're almost halfway through here in terms of the numbers of questions, everybody. Encryption is, select one or more of the following, a way of sharing information securely, a way of enhancing personal privacy, easy to defeat even if well-implemented, too complicated for use by regular people, a useful tool that significantly degrades system performance. Read this again, encryption is, a way of sharing information securely, a way of enhancing personal privacy, easy to defeat even if well-implemented, too complicated for use by regular people, a useful tool that significantly degrades system performance. Leave that open for just three more seconds, three, two, one. Let's go ahead and share the results here. A way of sharing information securely, absolutely correct. A way of enhancing personal privacy, absolutely the correct answer. The other three are all not true. It is not easy to defeat if well-implemented. It is not too complicated for use by regular people, although that's probably the most subjective answer there, but hopefully we've demonstrated that it can be used by regular people, and it is a useful tool, and in most cases does not degrade at all system performance, and no cases that I know of today significantly degrade system performance. That is a misconception of encryption that we attempted to overcome in our encryption session, but obviously did not 100% overcome, which is okay. Next question. Encrypting mobile devices, select one or more of the following, is easy and usually requires toggling just one-cent settings, makes them run much more slowly.  It was a little hit there from my last one. Protects all information, even if the device is not password protected. Sorry for all that shortening there, but we're limiting the character. Encryption protects all information, even if the device is not password protected, is a good idea for most people and makes them water resistant. Doesn't encrypting your mobile device make it water resistant? This is a question. I'm hoping that our ninjas, prospective ninjas are not spending too much time thinking about. We'll leave this open for three more seconds. Three, two up, everybody's in, and let's share the results there. Is easy and usually requires toggling just one setting, that is true. We showed that for iPhones, androids, most laptops, it's usually just the toggle sweating, the toggle sweating, toggle setting, and a restart and you're all good. It does not make them run much more slowly. Here's one, it will not protect the information if the device is not password protected. It will not protect your information if the device is not password protected because the lack of password protection on a device makes it easy to defeat the encryption. That would be a really good example of how encryption not properly implemented is easy to defeat. However, if you did have a strong password on your mobile device and it was encrypted, it would be incredibly difficult to defeat. It's definitely a good idea for most people. I'm really glad to see everybody answering that one and glad that no one thought it added water resistance to a mobile device. The fifth session, session five on the move. We talked about when you're working remotely, when you're traveling, when you're doing all of these things, this is where we started to have these slides for those of you who are in multiple sessions or all of our sessions where we had the things, our experienced ninjas already know. So using two-factor authentication already makes you a lot better when you're moving around. Encrypting your devices already makes you a lot safer. Keeping your devices up to date is another important one. Password protecting your devices is really important. If you have an unlimited data plan or have enough data that it's not a cost problem using your mobile data plan, instead of tethering to your mobile device, instead of using public Wi-Fi is a good idea. You can also use a VPN or a virtual private network. And you can also consider MDM or mobile device management solutions if your organization can support those. Let's go with some of our questions around. Mobile working, virtual private networking is a good way to improve security when using public Wi-Fi. It's too difficult for most people to use. It's a useful tool for working remotely. It's used primarily by cyber criminals. It's a guaranteed way to hide your identity online. Virtual private networking is a good way to improve security when using public Wi-Fi. Too difficult for most people to use. A useful tool for working remotely used primarily by cyber criminals. A guaranteed way to hide your identity online. And we'll close that up. Realize that I'm reading all of these out loud that if there was anyone that was a really experienced like SAT study person who did SAT tutoring, like the way that I've praised a lot of these responses is a dead giveaway. Or maybe not a dead giveaway, but a giveaway for someone. Okay, good way to improve security when using public Wi-Fi, absolutely correct. Too difficult for most people to use. False, excellent. Useful tool for working remotely. 100% of people got that, great. And used primarily by cyber criminals, not true. Guaranteed way to hide your identity online. That's where that phrasing comes in. It is a way that you can hide your identity online. Absolutely not a guaranteed way though. You can certainly use a VPN and still expose your identity online in all sorts of ways. So it's not a guaranteed way. But other than that, everybody, great job on that one. Okay, I think that takes us to our next slide. Key success factors, gone fishing and ransomware. The key success factors here is train your staff, train your people, have security awareness training, teach people about fishing and social engineering and those kinds of things. And then because we go to ransomware here, best practice for ransomware, backups, backups, cloud-based backups tend to trump other types of backups in terms of being protected against ransomware. And other best practices, patch management, account hygiene, network security, access controls. Incidentally, every single one of these things would have been really helpful defenses against the wanna cry malware that went around. If you did all of these things well, it's almost impossible that you would have been compromised by wanna cry. And you'd be very protective, especially the patch management since they were all known vulnerabilities. And train your people, then you wouldn't have had the fishing come in the first place. That's all good stuff. All right, so let's launch our question here. Which qualities are signs of possible social engineering? Select all that apply. Initiation, emoticons, urgency, empathy, fear. Which qualities are signs of possible social engineering? And select the correct ones here. Initiation, emoticons, urgency, empathy, fear. Which ones do we think are the correct ones here? We'll leave this open for a little bit more. I see people kind of thinkin' through it. Initiation, emoticons, urgency, empathy, fear. Which are signs of possible engineering, social engineering? Leave this open for three more seconds. Two, one, and let's take a look. A bit all over the map here. Initiation is definitely a sign of possible social engineering.  They initiate the interaction. That is a sign. Emoticons are not a sign of possible social engineering. Conceivable they could be, but not in, when we talked about it, we had some specific things. Urgency is very much a sign. You must do this now. You must change your password now. You must do this within 24 hours. I need the password reset right now. I'm out with the client. Empathy is not a sign of social engineering. Having empathy for you. Not typically a sign of social engineering. However, fear very much a sign of social engineering. Someone trying to cause fear saying, if you do not do this, this bad thing will happen to you or to me or to our organization is very much part of social engineering. So the correct answer there were initiation, urgency, and fear, emoticons and empathy were not signs of social engineering there. Next question, successful phishing attacks can result in which of the following? Select any of these. Malware installation, theft of money and or information, breach of passwords, identity theft, unauthorized access to systems. Successful phishing attacks can result in which of the following? Malware installation, theft of money and or information, breach of passwords, identity theft, unauthorized access to systems. We'll leave this open for five more seconds. Four, three, two, one. And we're gonna close that up and we'll share the results there. All right, malware installation, all of these were correct. All of these are things that can happen as a result of phishing attacks. So if you click on a link or download or open the document, it can install malware. If you get phished into giving away your credit card number or get phished into wiring some money out, that can result in theft of money and or information. If you get phished into giving away W-2s, if you get phished into logging on to a fraudulent site, that's gonna give away your password. If you get phished out of your social security number and your W-2 and other things, that can actually result in identity theft. And if you get phished out of your passwords and other confidential information, that can obviously result in unauthorized access to systems as can malware that gets installed as rolls of phishing. So all of those are correct. Onward, session seven, a little privacy please. So this is a little bit of a slight, ever so slight detour from cybersecurity strictly and talking more about privacy. And with privacy, we talked about understanding what you're sharing. We talked about sharing thoughtfully. We talked about limiting the metadata that you share. We talked about using two-factor authentication, encrypting, browsing with Tor, using a virtual private network, getting active, meaning advocating for things like net neutrality, if digital privacy is something that is important to you. And this is the one area where we sort of advocated for certain kinds of, I guess I'll say social action in the sense that if digital privacy is important, some of the laws impact how easy or how difficult it is for you to have privacy. And then of course staying informed about all the different ways in which your privacy can be compromised. And on that note, we're gonna launch into, this may be my favorite question in the whole quiz, which of the following does Facebook know about you if you use Facebook regularly? Which of the following does Facebook, I mean, I should probably, I think we have probably here, so I'll say, not definitively, but which of the following does Facebook probably know about you if you use Facebook regularly? So does it know your political affiliation?  Does it know your intelligence relative to others? Does it know your marital status? And does it know your gender? Which of the following does Facebook know about you? Again, does Facebook probably know about you? I think we had to drop the word probably if you use Facebook regularly. Which of the following does Facebook probably know about you? We'll leave this open for three more seconds. Two, one, closing it up. And it is all of those things. And I showed, I believe each of these when we did this session. And it will have a, if you use Facebook regularly, then it will have, they will have a very strong sense of how you relate on all of these things. Next one, examples of metadata would be. This might be the hardest question in the entire quiz. So this will be the one where I think folks may struggle, but we'll see how everybody does. Examples of metadata would be, select all that apply, the type of phone used to take a photograph, the content of a Microsoft Word document, a recording of a phone call, the date and time a Facebook post was put online, the time and duration of a phone call. Examples of metadata would be, the type of phone used to take a photo, the content of a Microsoft Word document, a recording of a phone call, date and time a Facebook post was put online, the time and duration of a phone call. We just open for four more seconds. Three, two, one, closing that one up. Let's share the results. The correct answers are, number one, the type of phone used to take a photo. And the easiest definition of metadata is data about data. The content of a Microsoft Word document, that is the data, that is not data about the data, that is not metadata. A recording of a phone call again is data, not data about the data. The date and time a Facebook post was put online, that is metadata and the time and duration of a phone call is metadata. The three ones are a type of phone used to take a photo, the date and time a Facebook post was put online, time and duration of a phone call, those are all examples of metadata. And then the next one, which of the following tools would be most useful for anonymous web browsing? Which of the following tools would be most useful for anonymous web, oh, I think I skipped one. I assume this is still part of privacy, but this is actually tools, that's okay. We'll answer it now. Which of the following tools would be most useful for anonymous web browsing? Incognito mode in Google Chrome, a virtual private network. Duck duck go, tour, pretty good privacy. We'll leave this open for three more seconds. This is one where you either know the answer or you don't, I think, two, one, zero, closing in up. The correct answer there was tour. Those of you who grabbed tour, that's a good one. That is, again, the way that for us to trade the most useful for anonymous web browsing if you really did want to say anonymous tour would definitely be your best chance at staying anonymous doing web browsing. And that is the correct answer there. And so I jumped the gun a little bit. I should have jumped to this slide, which was session eight, your Ninja Toolkit. And the key success factor is there, where first of all, select your tool thoughtfully. There's not necessarily any kind of single arbiter of all the tools to say this is the best one.  There are lots and lots of tools available and definitely take advantage of the ones that are out there. Implementation matters a lot with cybersecurity. We talked about that around encryption. But when you're using these tools, if you're not using them correctly, they're not going to do what you're hoping they're gonna do. Implementation matters a lot. Rapidly changing landscape, constantly new tools, constantly new services online and staying informed through newsletters, podcasts, webinars, we've provided some links of our favorites in there. That is one of the key ways that I am able to stay informed is, for me it's not a crazy amount. I probably do an hour or two of reading and listening stuff like that at minimum a week. Maybe that sounds like a ton of people on cybersecurity, but it's not a huge commitment if you want to stay up to date on these things. And the next question, and we are down to three more questions everybody. We are almost there. Which of the following tools would be most useful for private messaging? Which of the following tools would be most useful for private messaging? So select one of the following. Facebook Messenger, WeChat, Signal, Skype, Snapchat. Which of the following tools would be most useful for private messaging? We'll leave this open for three more seconds. It's another one we either know this or you don't. Three, two, one. And the answer was Signal. Those of you who picked Signal, that would be the best tool. The, I specifically did not put, that's what I'm thinking of now. WhatsApp in here, which does have encrypted messaging. And is that the one I'm thinking of Ben? I'm thinking of the wrong one. No, WhatsApp. There is a messaging app. Go ahead. I think you're thinking of WhatsApp. WhatsApp. Okay, so I'm thinking of one. The concern is that Facebook has access to the data. That's right. Correct. Yeah, yeah. The encryption of WhatsApp, of WhatsApp messaging is considered pretty good. And actually they use the Signal encryption with the same technology. Because it's owned by a third party company that we have some concerns about, that's why that's a little bit less. But I didn't include that in here because I didn't want there to be any confusion because that would have been an acceptable answer, I think as well. But Signal is definitely unquestionably, I think, superior to all of these for private messaging. And with that, we go into our last session, other than this one, which was what now, internet response planning. And we have the factors for success there. Our plan, do incident response planning have a plan, right? If you do have an incident, make sure you understand to declare that you're having an incident. Hey, we are declaring this is an emergency. And we are now implementing and activating our incident response plan that hopefully we have, contain, meaning stop whatever bad thing is happening and contain it as much as you can. Communicate, and that really wraps around the whole thing. Communicate clearly with everybody, with all the stakeholders throughout the whole process. And when it's all done and the dust is settled, what have we learned? What are we going to change? What can we do differently? How could we have done better at this? And with that, we'll go into our last two questions. What are some good ways to increase the likelihood of discovering a security breach? Check all that applies. A little bit tricky. What are some good ways to increase the likelihood of discovering a breach? A high volume of administrative alerts. Encouraging a see something, say something culture. A low volume of administrative alerts. Reviewing monitors to see what normal activity looks like. A shoot the messenger culture. That's a little bit tricky. I'll give people a few seconds to think about this one. A high volume of administrative alerts. Encouraging a see something, say something culture. A low volume of administrative alerts. Reviewing monitors to see what normal activities looks like. And a shoot the messenger culture. We'll leave this open for three more seconds. Two, one, and closing the poll. High volume of administrative alerts. That's really the biggest reason why this was a tricky one. And when we taught this class, we talked about that having a really large volume of alerts, a poor signal to noise ratio, so to speak, makes it very hard to interpret the signals amongst all the noise. And a high volume of administrative alerts. So I'm getting 50 alerts a day. I'm probably gonna start ignoring all of them. So a low volume of administrative alerts is better because you're only getting alerts that you actually have the bandwidth to pay attention to and you're less likely to start ignoring things. See something, say something culture as much as we New Yorkers make fun of that phrase. That is in fact, a really useful thing to have in your sort of culture. We talked about that before with the opposite of issues in messenger culture, which is not a correct answer here. And reviewing monitors to see what normal activity looks like is a great idea if you have the capacity to do that. And those are all the correct answers. The correct answers here are encouraging to see something, say something culture. Low volume of administrative alerts, reviewing monitors to see what normal activity looks like, those middle three. And with that, our last question. Which choice below reflects the best approach to incident response? Select one of the following. Planning, declaration, containment, communication and learning, response, remediation and resumption of normal state. Ensuring an incident never happens in the first place. We wish, that would be a great one. All hands on deck, primary alternates, contingency, emergency, pace, the famous pace acronym. I'm sure we're all familiar with. Which choice below reflects the best approach to incident response? Planning, declaration, containment, communication and learning, response, remediation and resumption of normal state. Ensuring an incident never happens in the first place. All hands on deck, primary, alternate, contingency, emergency, pace. We'll leave this open for another three seconds. Two, one. Closing that up. And almost everybody got that one. Planning, declaration, containment, communication and learning, that would be the correct answer. And the other ones, certainly ensuring an incident never happens in the first place would be great if it were possible. But it is, by all accounts, not possible to stop. And that's one of the things we've talked about. You can't eliminate risk. Risk is always going to be there. And that is the end of our quiz. And that was 20 questions. And we have all of your answers in our go-to webinar response. So we will be able to see who aced it and who got 80% or more. And we will follow up with emails for those of you who are due a certificate and or an Amazon gift card. And again, if multiple people aced it, they'll all get that gift card. If no one aced it, then I think we'll do the top three. We'll get a $50 Amazon gift certificate. And I have to think about what I'm gonna do if no one got 80% whether you get a certificate or not. But what I think that we will do, and this is what we'll talk about in a little bit, is at our ninja site, ninja.rtt.nyc, we will post this last session. And we have a Google quiz version of the same thing. And for those of you who attended, we'll give you a special link to that. And if you wanna retake it and try to get it, then I think we'll be happy to give you a certificate once you get the correct answers in our online quiz. So if you feel like retaking that, retaking this to get your certificate, I think we'll offer that out. And with that, we'll wrap up and do some Q and A. And I just wanted to tell everyone, I have not, by the way, for those of you who attended other webinars, I believe that we have not a single animated gift in any of our cybersecurity ninja ones. And that was really something that I was trying to do because they're just so silly, but I couldn't resist destroying one at the end here. And I wanna say a bonus gift, and this is for everybody, regardless of how you do it in the quiz, if you want your own personalized gift, go ahead and send me a head shot or just tell me, hey, just use my head shot on LinkedIn.  That's actually when I'm not listening to Cybersecurity Podcasts, that I'm making gifts. That's just how I roll. And Q and A for everybody. All right, we have some questions. One from Roberta, how did, well, this is great. Thank you, Roberta. How to get a quote from Roundtable to review our system. That's super easy, just email us. So go ahead and email me, Joshua at roundtabletechnology.com. You can go to our website. We have a contact us form and just ask and we will be delighted to follow up with you and talk to you about getting some cybersecurity help. That obviously is one of the things. And we, another thank you so much. Clear an example why a fundraiser should not be in charge of cybersecurity is an Excel techie. I'm very hopeful despite my test score. I'm sorry that you didn't get a strong test. I did, just so everybody knows, I, and Ben can attest to this. I ran this by a couple of my colleagues and also some people outside to get feedback on other questions were too hard, whether people thought the answers were misleading or deliberately. And the feedback I got was, that it was about right. Just so everybody knows, Ben taking it blind without being able to go to the internet and do research. He squeaked by with 80. So he was able to get the security certificate. Or in fact, actually even attending the first two webinars. The first two sessions, yep, yep. And he actually gave me feedback on the questions that I changed where he thought it was a little bit misleading and I did change it based on that feedback form. And so we tried to make this as fair as possible.  We want to make sure you actually know your stuff. And so we wanted to make it difficult enough that it would demonstrate to us that you really did have a good knowledge. And for those of you who struggled with it, my apologies, but like I said, well, we'll give you another shot at it. And thank you so much. All of you who've attended these and been here for this whole session, we really, really appreciate it. It's great. And this has been a lot of fun teaching it. And thanks so much to Ben for being here with all except for the first two sessions. And if there's no other questions, I think we're all set. And wow, that's it. Bye everybody. This was fun. Out we go.


I'm Mike Holmes and my family and I are passionate about finding the right products for the right job. That's why we partnered up with Scotch Guard Protector by 3M and Atlas Roofing.  Choose high-quality products to make sure the roof is installed right. And that includes protecting against black streaks caused by algae. That hurts your curb appeal.  Michael and I have been working together for many, many years. If you know us, you know we like to have fun. We created an online contest and asked you guys to submit photos of your ugly roofs that had black streaks. And we received tons of submissions in the photos of roofs with black streaks. It's really a problem. Follow Michael and Sherry as they work with Atlas contractors to help two families take on black streaks. I'm heading to Collierville, Tennessee to meet with my homeowner Donna to help fix her roof. And I've always loved New Orleans. But when I saw Carl's video, I knew this was the perfect opportunity to head down. Over one million roofs have been protected by Atlas Shingles with Scotch Guard Protector. This is a look at two of them. Watch us as we help 18 roofing and Pelican roofing take down a streaky roof and install Atlas Shingles with Scotch Guard Protector by 3M. This is Roof and Ride. Help me, Holmes. Help me. We're going to replace this unsightly streaky roof with new shingles. I'm having deja vu. Ooh, I like it. All right, let's do it. Let's get started. Well, it's looking good. How cool is that? That's pretty sweet. Carl's going to be very happy. She's going to love that. I can't wait to see his reaction. This is a big day. Wow, it looks so good.


Together with Taproot, this would mean a significant reduction of the on-chain size of lightning transactions and a significant increase in privacy. All of which is great news for everyone. Hey, folks. I'm Adam B. Levine, and this is Speaking of Bitcoin. As always, I'm joined by the other host of the show, Stephanie Murphy. Hi. Andreas Antonopoulos. Hello. And Jonathan Mohan. Hey, hey. So a couple of episodes ago, we dug into Taproot, the much-anticipated Bitcoin improvement proposal that rolls up Schnorr signatures and a few other seemingly small but collectively major changes to the way that the Bitcoin protocol works. Well, just a couple of months later, we've seen some pretty major moves. Andreas, you've been watching this one pretty closely. What's going on here? Well, at first, things got very, very significantly derailed after what was seemingly a minor point about activation parameters became a huge protracted debate with no compromise. And I started feeling like we're seeing a repeat of Segwit and a very big delay in activation. But now things are back on track. A couple of months back, the original plan proposed was to do a modified BIP 8 activation. And then there was one parameter of that activation, which was whether at the end of the activation period, if the miners voted for or not, whether to lock it in regardless, meaning whether to do effectively a flag day at the end of the voting period. So the way activation works, you start with a proposal, in this case, the TAPRID proposal, and then miners have a period of time to vote by indicating that in the blocks that they mine, and if the voting exceeds a certain threshold that it gets locked in. In the past, that became problematic because the miners got to veto certain features, as happened in Segwit. Then a different way was proposed for TAPRID, which included a flag day activation. Many features in Bitcoin have been implemented this way, where simply on a certain date, once that date passes, or once that block height passes, the feature is activated. The miners don't get to say no. And this was a compromise, where the miners get to say yes early, but if they don't say yes by a certain date, it activates anyway. And the question was, how would that be locked in? And then the compensation derailed. A lot of people were worried that the miners might attempt to veto this again, or to try to extract some kind of concession or something like that. And they wanted to preemptively force the miners' hands and not give them too much power. And others were like, that's unnecessary. If we have the developers preemptively forcing the miners' hand, that gives too much power to the developers. And we went back into the exact same thing that happened during the scaling debates, where it became a question of not what should the decision be, but who should have the power to make a decision. That's when I started feeling like, not again. Yeah, I can imagine. But I mean, it is a kind of important decision. And certainly, I think that we've seen the pendulum swing on this, where it felt like on the early days, developers had sort of the kind of philosophical leader, right? But they weren't the ones that did it. It still relied on action coming from the miners. And then there were perceptions certainly that miners had too much or abused what power they did have. And so things kind of swung back towards the developers. And now we're kind of in this oddly tense spot. I mean, Andreas, is there really anyone who disagrees with that? Is there a concern that the miners will actually reject this, not because of the power dynamic, but because they actually don't like the sort of protocol change that's proposed here? No, not really. I think, first of all, because there have been various forms of polls that have been applied. Now, of course, if you have no skin in the game and you're not activating the actual feature, you can lie when asked whether you would vote for it or not. But so far, more than 95% of the hash rate had agreed to a modified BPAT activation. And there was some disagreement over whether at the end of it it should be locked in or not. Most of the miners did not want to be forced to lock it in for obvious reasons. But there wasn't any concern that TAPRIT was in any way controversial among the miners or that the miners objected to it in any way. Then again, no one thought Segwit was controversial. And that was part of the debate, which is, well, no one thought Segwit was controversial because at the time that we were debating Segwit, we didn't know about ASIC boost and some of the political games that were happening behind the scenes to boost the hash rate of some ASIC manufacturers. Okay, so now that we are where we are, and it feels like there's sort of broad consensus and we have this mechanism that's in place, talk to us a little bit more about that. Has it actually been decided on or does it just now look like there's consensus, but we're still waiting for a moment? So the logjam was broken by a new proposal, and this new proposal was a concept called a speedy trial approach, which is basically fail fast and fail early. Let's give the miners a chance to simply say yes and do it very, very quickly. And if it works, great, we're ready. And if it doesn't, then we can find a different activation mechanism to do afterwards after we've done the speedy trial. So rather than say a two year process where at the end of the miners tried to veto it, we would be left with nothing. This approach says, give the miners a chance to just say yes, but let's do it by August very, very fast. And if they say yes, we activate in November. If they don't activate by August, then we can try other methods afterwards, after August to approach this differently. So the parameters for this are as follows. The start time is April 24, and the end of the voting period is August 11. Anytime after April 24, which is just two days from this recording, but nothing actually has to happen by then, anytime after that, if in any two week period, which is the difficulty retargeting period, 90% of the blocks mined, meaning 1,815 out of 2016 blocks in that period indicates support for TAPRT, then the feature activates. And if by August 11, that threshold has not been exceeded not once in any difficulty period, then the feature failed. If it's activated before August 11, then it goes into activation at a specific block height, and that's been agreed as block 709632, which is estimated to be somewhere around November 2021. So we have a voting period April to August. And if in any part of that voting period, in any two-week length of that, 90% of the miners are signaling support for TAPRT, then in November of 2021, it turns on on Mainnet and can be used by everyone. And if it fails, but will know by August 11th, and then we can try something else. So this is called speedy trial. It is a pull request for Bitcoin Core, and it is currently supported very strongly by the vast majority of core contributors. And it's expected to enter into the 021 pre-release version of Bitcoin Core, so that users and of course, miners can start deploying that version of Bitcoin Core within the next few weeks. So I have a couple of questions. One is that, as we talked about before, once TAPRT gets activated, or once we see the activation of this proposal, it could mean that there's more privacy available in Bitcoin, also more grouping transactions, and it could lower transaction fees and save some space as well. But regular people maybe won't see those benefits right away, because wallet software still has to integrate this just like it did with SegWit. That's correct. However, keep in mind that TAPRT-capable code, Snore signatures-capable code has been part of Bitcoin Core for testing purposes for almost a year now, and the code has been in various stages of testing and review for almost three years now. So this is the end of a long process. Now, it won't exist in wallets quite yet, but you're going to start seeing it implemented in places where the need for some of these improvements are greatest. I'm most excited about what this can do for the Lightning Network, where the efficiencies are huge, and we might also see it in areas where we need more privacy, such as perhaps various privacy mixing technologies or privacy-focused wallets. Okay, so it could be actually accessible to most people in a limited format earlier than it takes for every wallet to catch up. That's correct. In Lightning, in fact, there's been a parallel proposal to be able to upgrade payment channels to use a new form of script called a point-timelocked contract or PTLC that replaces hash-timelocked contracts or HDLCs, and together with TAPRIT, this would mean a significant reduction of the on-chain size of Lightning transactions and a significant increase in privacy, all of which is great news for everyone, really. If you make Lightning more efficient and if you make Lightning more private, it means even more optimization at every layer. That's probably going to get implemented faster than some of the other areas we'll see. But then again, one of the reasons that we want the voting to be done by August, but the feature doesn't get activated until November is so that the various developers have plenty of time to put the feature into their code and test it extensively if they haven't done so already. So I really look speedy trial and it's not even because I think it'll activate, but if everyone's presenting as if they have no problem with it, I think that speedy trial is just a good test for actual activation because it'll give you a year to know who didn't say yes, and then you can discuss with them why they didn't say yes and sort of force the issue of potential drama now rather than wait a year and discover what it is. Because if everyone's saying there's no issue with it, then there really shouldn't be an issue with enabling it through speedy trial versus waiting a year for no reason. Yeah, that's exactly the case. And really, I mean, this is not even three and a half months. So it's one of those fail fast, fail early type solutions. And on the one side, from a practical perspective, it allows us to test the waters. And from a different perspective, it's a put your money where your mouth is. And if you really meant what you said that you support it, now we're going to put that to the test because you haven't allowed us to prove it in a block. And we'll know exactly who does and doesn't support it because obviously, this is going to be a public vote. It's going to be right there in the coin based transaction of a block that's mined. And we'll know precisely which mining pool supported which independent miners supported. I also really like it just in terms of the direction forward for medical consensus, because I feel like one of the things I dislike most about the direction of Bitcoin is just how conservative the development team has gotten to the point where I think it's calcified too much. And I think that anything that's a feature update to medical consensus where you can fail quickly, but harmlessly, that pushes the needle towards feature upgrades is like, I think one of the most sorely missing things that Bitcoin needs to reverse calcification because it's way too young to be the amount of calcified that it's become. And so I really wish that things like speedy trial where failure is an acceptable outcome and nothing is harmed by it is really the direction that medical consensus goes when making these types of decisions. Yeah, I mean, that's a very good point. So from that perspective, maybe we should rename it from speedy trial to CLR or Drano. Oh, I get it. For those who don't know, CLR is a chemical used to remove calcium from pipes. Okay. So I mean, the good part here is that it feels like we're going to get an answer on this relatively quickly. And once we've got that answer, then we'll go into kind of this longer period of time that Stephanie was talking about where ultimately, although it's now in the protocol, well, in order for us to actually use it and for it to be really useful to the protocol, it needs to get implemented in all of these different places that aren't at the protocol level, but are at individual application level. Now, last time we were talking about Segwit, I mean, it took a lot of these exchanges and wallet service providers a long time. Certainly there were enthusiastic ones who kind of jumped on it. I feel like there's some that still aren't Segwit. This is what I'm saying. Yep. So like, is that just normal for like Bitcoin updates and upgrades moving forward is that we'll get like this initial chunk of implementation from like the really ideological or really kind of committed users of it. And then there's like this really long tail that might take like five or 10 years maybe before it really rolls out comprehensively. That's just internet infrastructure and technology. I mean, now that Bitcoin is a trillion dollar economy, a trillion dollar industry that's a consumer facing product. I think it's fair to look at comparable technologies and deployment rollouts there. So if you look at IEEE, look at every time IEEE has a codified standard like USB 3, and then look at just how quickly or slowly it takes to promulgate that out to the edge of actual consumer adoption. And the more Bitcoin gets to be in market's cap in adoption, like just because you come to a feature update doesn't mean the next day everyone's using it. And I don't see two years from feature upgrade to mass adoption in deployment as a bad thing that's actually rapidly adopted in terms of like banking standards or electronic standards. Yeah, there's a big difference between protocol level features and user interface or frontside application features in terms of the calcification or protocol ossification we were talking about earlier, which is that on the back end everybody has to be in lockstep. We're talking about consensus code. We're talking about critical infrastructure. It requires a lot of different constituencies to agree. And that's moving fast, or at least faster than it was a few months ago when it seemed to be a bit stuck. But once that's in place, you don't need lockstep agreement anymore. Those who need it will use it, and they don't have to wait for everybody else to implement it in order to use it. Now, we're not going to get all of the privacy benefits. We're not going to get all of the fee optimization benefits if half the wallet's out there can't send to an address. However, keep in mind the address format isn't changing really here. We've got essentially the same address style as segue addresses. And that was a pretty big front end change, which required a lot of work on the user interface. This isn't such a big change for most wallets to be able to support at least sending, even if they don't do native tapered themselves. And for those who need it, like the Lightning Network, well, that can go ahead and happen very, very fast in the Lightning Network without being affected by what other wallets are doing. So with the economy of this size, with the range of applications and use cases we have, it's normal to not expect everybody to value these capabilities the same and to have the same urgency. But one of the things this does point to is that, as I've said before, and I've said pretty strongly, wallet development and maintenance, ongoing maintenance is still a problem. It's underfunded, it's difficult to monetize, and it's the slowest moving part of the infrastructure. And that's where the bottlenecks move eventually. Okay. So one other element just before we wrap this up, we've talked about taproot in the context of kind of privacy and obfuscation on the blockchain. And that's something that, again, as we're moving into this period of time where it feels like Bitcoin is going to become more or Bitcoin company, I should say, are going to become more regulated. I mean, we flat out know that the big exchanges out there feel like they cannot just send to any address. They have to send to addresses and they have to be receiving coins that they feel like they can trace provenance on in order to do their sort of compliance diligence. Now, taproot makes that potentially a lot harder for them.  Will they actually fight this? And will they push back against this sort of potentially privacy enhancing technology making its way into the protocol in a way that could make their business more difficult? I'm curious if we're still concerned about that, or if we think that this is now happening so fast that maybe it doesn't matter, and we slide in under the wire before perhaps some of these more controversial elements become really recognized. I don't know where the controversy around taproot activation would be other than from potentially a regulator. And I don't know if a regulator would have any issues if that would move any sort of mining signaling related consideration. So the reason why Segwit was such a big deal was that it was proper Bitcoin consensus that had the issue that were particular miners. I don't know if a secondary group having concern would translate then to minor concern in the same way that Segwit so directly did. So I just like everyone's very cautious.   It's just everyone's still kind of in shell shock. I like to think of taproot as the Luke Jr. of upgrades. People like to complain and say that it is kind of controversial, but at the end of the day they have no problem with it and it's rather useful. Well like I said folks this is a topic that we'll be watching it's another kind of milestone in a somewhat long path but it's pretty good sign and looks like with this speedy trial approach we're going to get to see in real life whether or not this thing is controversial or not. So best case scenario it goes in and we get to start seeing that adoption curve. First case scenario then we figure out you know that it turns out that it was actually controversial and people just didn't want to talk about that until now. So I think that wraps it up for us on this episode of Speaking of Bitcoin. Today's episode featured Andreas Antonopoulos, Stephanie Murphy, Jonathan Mohan and Adam B. Levine. This episode was edited by Jonas and featured music by Jared Rubens. You can send us an email at adam at speakingofbitcoin.show and leave us a review on your favorite podcast player if you like what we're doing. Until next time, we'll see you then.