Welcome, and thank you for joining us for today's TechSoup for Libraries webinar. Today's topic is Protecting Patron Privacy in Public Libraries. My name is Crystal and I'll be your host. Patron Privacy is of critical importance to libraries. It's included in the American Library Association's Code of Ethics and the Library Bill of Rights. As technology changes rapidly, libraries and librarians are working hard to keep up with digital security issues to better protect the privacy of their users. But this is not an easy task. Today we have two guests joining us to help us sort out some of these issues and share examples of solutions. We will focus on public access technology and focus on other related areas as well. Before we begin, I have just a few announcements. We will be using the ReadyTalk platform for our meeting today. Please use the chat in the lower left corner to send questions and comments to the presenters. We will be tracking your questions throughout the webinar and will answer them at the designated Q&A section after each presenter. All of your chat comments will only come to the presenters, but if you have comments or ideas to share, we will forward them back out to the entire group. You don't need to raise your hand to ask a question. Simply type it into the chat box. Should you get disconnected during the webinar, you can reconnect using the same link in your confirmation email. You should be hearing the conference audio through your computer speakers, but if your audio connection is unclear, you can dial in using the phone number in your confirmation email or that we've shared here in the chat. If you're having technical issues, please send us a chat message and we will try to assist you. This webinar is being recorded and will be archived on the TechSoup website. If you're called away from the webinar or if you have connection issues, you can watch a full recording of this webinar later. You will receive an archive email within a few days that will include a link to the recording, the PowerPoint slides, and any additional links or resources shared during the session. If you're tweeting this webinar, please use the hashtag TS4LIBS. We have someone from TechSoup live tweeting this event, so please join us in the conversation there. TechSoup Global is dedicated to serving the world's nonprofit organizations and libraries. TechSoup was founded in 1987 with a global network of partners. We connect libraries and nonprofits to technology, resources, and support so that you can operate at your full potential, more effectively deliver your programs and services, and better achieve your missions. TechSoup has helped to distribute over 14 million software and hardware donations to date through our product donation program. We offer a wide range of software, hardware, and services that are both cost-effective and environmentally friendly. For more information about TechSoup product donations or services, please visit TechSoup.org and click on Get Products and Services. For today's webinar, we're joined by two guests. First up, we have Bill Buddington from the Electronic Frontier Foundation, the EFF. Bill will talk about digital security issues that impact patron privacy in public libraries, and will share tools and information from EFF that can be useful for libraries. Then we'll hear from Chuck McAndrew, the IT librarian at the Lebanon Public Libraries in New Hampshire. He will share examples of actions he has taken at this small library to better protect patron privacy and to teach library users how to better protect their own privacy. My name is Crystal Schimpf, and I'll be your host for today's webinar. Assisting us with chat, we have Becky Wiegand, and on Twitter we have Molly Bacon, both joining us from the TechSoup team. We'll have time again for Q&A after each presenter, and we'll be tracking your questions throughout. Please share your questions in the chat as they arise. And lastly, we will be sending out an archive that will have all of the links shared during the session today, so you can expect that in your email within a few days. All right, well, without further ado, I think it's time for me to hand things over to Bill so he can talk to us about digital privacy and security. Bill? Hi there. Thanks for joining me. I'm having some technical difficulties right now actually. So one thing that I couldn't do is, Crystal, if you can advance my slides, and I can pull up a parallel set of slides on my side. Sorry, just one second. Thanks for bearing with us everyone as we sort out this technical difficulty. We'll get started in just a moment. Okay, so thanks so much for joining me in this Digital Privacy and Security Library Edition. Next slide. Who am I, and why should you listen to me? My name is Bill Buddington. I am a security technologist and security engineer at the Electronic Frontier Foundation. I advise lawyers and activists on technical matters as my primary day job. Next slide. What is EFF? EFF is the Electronic Frontier Foundation. We are a member-supported nonprofit, and we've been fighting for 26 years to promote privacy and civil liberties in the digital world. We do this with a three-pronged attack. We have technologists on staff. We have lawyers, and we also have activists. And using these three different teams at EFF, we have that mission of supporting your civil liberties in the digital world. So next slide. What is privacy and security, and why is it important for librarians? Well, I'd like to start with this quote from Robert G. Vosper, who was the head of the American Library Association. The library is an open sanctuary. It is devoted to individual intellectual inquiry and contemplation. Its function is to provide free access to ideas and information. It is a hidden for privacy source of both cultural and intellectual assessments for the individual reader. And so I think that this really kind of drives home the point of why privacy is important for librarians. And I think most librarians actually understand this. It's not a controversial idea. It's something that is expected as a librarian when you're going into a profession. Next slide. Also, libraries are really seen as these sanctuaries. Whether it's actually true or not, most people go into libraries and they kind of feel this solace. They actually feel like they are being protected in some degree from the outside world. And they can kind of pursue their intellectual freedom and desires in a way that's protected, in a way that's free. And so, yeah, libraries are kind of seen as these sanctuaries. To bring it to the current day, they are seen as sanctuaries, especially for at-risk communities. Next slide. But why security? Why is security important as well? Next slide. Well, to answer that question, we need to take a detour through the Internet. Next slide. Yes, the Internet. Next slide. So when most people think about the Internet, they think of an email and they send an email. And so we have these two figures, Alice and Bob. And Alice wants to send an email to Bob. Next slide. And it looks like from Alice's perspective that that email is going directly to the inbox of Bob. Next slide. But in actuality, there are a number of intermediaries between the connection of Alice and Bob, primarily the email service providers and the Internet service providers. Next slide. And also, three-letter agencies such as ENSA that has control or has special hardware that they can install on backbone and privilege network nodes. Next slide. So in addition, you also have eavesdroppers which can possibly be snooping on the connection either in the home or cafe that Alice is connecting from, or in Bob's home or cafe or wherever they are connecting from. Next slide. With the help of next slide encryption, we can actually make this connection much more secure and that people can actually be insured that the communications that they are sending are not interceptable and not readable. Next slide. What is encryption? Well, encryption scrambles the message content so that it's not readable from anyone that's sitting on the network in the middle of Alice and Bob. It also to note still has metadata. That's everything that isn't the direct contents of that message. So next slide. What is metadata? Next slide. In this example, metadata is the time that that email is sent, the subject line, the time received, the name of the sender, the name of the recipient. All that data is still accessible even if encryption is used. Next slide. So for HTTBS, HTTBS is basically web encryption. And the contents for HTTBS, what's actually encrypted is what exact page you're accessing. For instance, if you are accessing example.com slash sumpath, the sumpath part of that URL of that website, that's the encrypted part. The username and password, if you're logging into a site, that's also encrypted if you're using HTTBS. And also if you're logging into a session, say facebook.com, if you are posting content, that's also encrypted. What's not encrypted is the metadata. What domain you're on, for instance, if you're on bing.com, that's not encrypted. That can be seen. What time you accessed it, and your location data, for instance, your IP address. So your IP address is this unique identifier that's linked to your location. So you can see here by this graph, in the first instance, next slide, what is encrypted, and what's plainly visible from HTTBS and non-HTPS connections. Next slide. Here you can see that there's this green lock, and that indicates that you're actually using an HTTPS connection. And that way you can be ensured that your connection on the web is encrypted. Next slide. We develop at EFF a product called HTTPS everywhere. And what this does is it ensures that if a website offers HTTPS and an unencrypted connection that you're actually using the encrypted connection to that website, you're actually using the best security for that website that is available. Next slide. This is a downloadable browser extension that's available for both Firefox and Chrome. And you can install it on both your own computer and also the patrons' computers that are public stations at your library. Next slide. So why is security important for librarians? This article by the American Libraries Magazine kind of drives home why it's important, and also some of the failures of libraries to actually deploy good HTTPS. Next slide. Their findings are that without encryption, the content that patrons search for, view, or download is easily intercepted. These online streams of communication deserve the same protections granted to circulation records, but few libraries are taking even minimal steps to encrypt this data. So you can see that this is something that encryption, HTTPS specifically, is something that really is important for, and should be granted the same kind of level as circulation records. Next slide. Their findings continue that out of the top 124 American Research Libraries, only 13% of them are actually using HTTPS. Next bullet point. And out of the 25 largest public libraries that they surveyed, only 2 of them, 8%, were using HTTPS on their main websites, and only 28% defaulted HTTPS for search activity. Next slide. So they conclude that we could better attribute this gap in deploying HTTPS to an awareness or lack of expertise in reconfiguring implementations, which basically means that there's not enough staff, and there's not enough people with a skill level to really make it viable for these libraries to deploy HTTPS. Next slide. This is really troubling. Next slide. So why is it troubling? Who cares if HTTPS is on sites? Next slide. Well, we know that the NSA is compromising cloud services. This slide was revealed in the Snowden revelations, and what it shows is that the NSA is actually intercepting the background communications of Google and trying to site it off data of users of Google services. Next slide. We know that the NSA is undermining encryption. They have, for instance, paid $10 million to RSA to essentially privilege a weakened encryption that was called a cipher, which is a way that encryption is performed, and privilege that in the Cypher Suite that NSA, sorry, the RSA provides. Next slide. So we know that the FBI has amended patron records as well. This is a case where in Connecticut, the libraries were, their service providers were basically issued national security letters. The ACLU challenged that, and that's why we're able to talk about it, because national security letters under the Patriot Act are accompanied by gag orders, so you can't even talk about them unless you are combating and winning those cases. So this is something that's really troubling that patron records are actually being requested by the governments, by the FBI in this case. Next slide, and they're being requested over. Next slide, and over again, these two cases were brought against the FBI-demanded records of the Internet Archive, which is the online digital archive. And what they were doing was they were saying in 2007, we want your records. EFF challenged that, and we were able to talk about it in 2007. The latest case in 2016, just last year, the NSL was accompanied by information that instructed how to challenge the NSL, but that was faulty information. They were giving out information how to challenge the NSL that was actually erroneous and misleading, and so we challenged that and kept them to stop that as well. Next slide, so why aren't more libraries' websites offering HTTPS? Well, traditionally, obtaining a certificate which you need to provide HTTPS is pretty hard, and installing that HTTPS certificate once you get it is also really hard. Next slide, so HTTPS certificates also cost money. They have traditionally not been free, and there's no reason why security shouldn't be anything but free. For certificate authorities which issue HTTPS certificates, these are automated systems that cost pennies to issue a single certificate, and there's no reason why. They should cost $10 a pop for every website that you want to encrypt. Next slide, well, introducing CERTBOT. Next slide, CERTBOT is a project of the Electronic Frontier Foundation in collaboration with other organizations, and what it does is it's bullet point automatically issues HTTPS certificates, bullet point and configures your software to use them, so it's not actually hard to deploy. Bullet point, for free. Next slide, so it's important to note here that HTTPS provides security but does not protect privacy. Next slide, your data is big money. This is a graphic that shows when you access the New York Times where your data is actually being delivered. It doesn't just go to the New York Times. It goes to dozens of other organizations, and that's because when you access the New York Times it's pulling in resources from other organizations, maybe ad networks, maybe fonts that are included in other places that New York Times itself doesn't host. So these are actually all places where your data is being delivered when you access the New York Times website. Next slide, and that's delivered to bullet point. Advertisers to market your products at you. For instance, there have been notable instances of differential pricing. If you live closer to a Walmart, for instance, then a website that's trying to sell you things that are also available at that Walmart will have a lower price than if you live very far from a Walmart. And there's also these diploma mills which market typically at low income people to attend universities that grant diplomas that aren't really worth the paper they're printed on. So bullet point, web trackers also do big data analysis on you. And they do that without your consent. No one actually is displayed a warning that's saying, hey look, your data is going to X, Y, and Z places. There are regulations in the European Union, but not here. There's not any federal data protection regime in the US. Next bullet point, sorry, next slide. So there was this August 2016 study of web trackers, next slide, and they found that bullet point at least 75% of the top 500 internet sites contain trackers. And this is us from bullet point, less than 5% in 1998. So we've seen a real, real increase in the amount of sites that are actually performing web tracking that are siphoning off your data as you browse the web. Next slide. The findings continue that the number of trackers have increased, as well as the ability of the trackers to actually employ technologies that track you, and the complexity of those trackers. This is all kind of increased, and this is a really troubling dynamic. Next slide. So enter Privacy Badger. Next slide. Privacy Badger is an extension that's developed at EFF. It's also like HTTPS everywhere, a downloadable browser extension that's available for Firefox and Chrome browser. And what it does, next slide, is bullet point. It tells sites that you do not wish to be tracked. Bullet point, it looks for third parties as you browse the web, and bullet point, if a third party is seen on several different domains, bullet point, and it appears to be tracking you, bullet point, then it gets blocked. So it looks for these different tracking mechanisms that trackers use, and it tries to determine if it's a tracker or not that's doing it, and it blocks them if it is. Next slide. This is Privacy Badger in action. You can see that some websites are blocked because they look like trackers and other websites are allowed. Next slide. So what this all really comes down to is a question of user education. Unfortunately, users aren't really aware of what is happening with their data. Bullet point, generally users don't really know the risks to their privacy and security when they browse the web, when they access the Internet. Bullet point, there are often vested interests that are actively trying to subvert knowledge about how users can protect themselves. I mean, in the case of HTTPS, it might be a government, but in the case of browsing with Privacy, then it's these trackers or ad agencies. Bullet point, and there's this difficult task of actually raising awareness and letting users know that their privacy is at risk. So what librarians can do is they can kind of let their patrons know about these risks, perhaps the home page for their public computers can be something that includes text about how their privacy is being affected. Next slide. And one of our resources at EFF is ssd.ef.org, which is the last resource here. And that explains a lot more info about how users can protect themselves and how you can help your patrons know and yourself get informed about these risks. And I also have the resources here for additional information in the presentation. Thanks very much. Great. Thanks, Bill. And thanks for bearing with us with those technical difficulties. I think we got through everything okay, so thanks for working with me on that. We've got some great questions that have come in. And before we get to those, I just want to say thanks for sharing all of this. I mean, this is an information-rich presentation that you've just given with lots of links and lots of resources. And I just want to remind everyone who's joined us that we are going to be sharing those links in the archive. And I know there were lots of articles that were referenced, and those will also be included so you can go and follow up with those later on. We did get one question about sharing the name of that study. And I think I know which one this is, and I'm just going to go back to it. Well, and actually I'll see if I can find it in a moment. We'll go back to that one that had this study. But Bill, we've been getting some good questions from participants. And so I'm going to go through as many as we can in the few minutes we have before Chuck's presentation. And one of those questions is, does Certbot rely on the Let's Encrypt certificates? And could you talk a little bit more about that? Right. So Certbot is what's called the client side of the dynamic duo of Let's Encrypt and Certbot. So the Let's Encrypt is what's called the server side. So Let's Encrypt acts as the issuing body. Let's Encrypt software runs on not your own computer that you want to get a certificate for a website that you own, but it runs as the issuer on the Internet so that you request certificates from it. So Let's Encrypt is basically, yeah, Let's Encrypt works with Certbot to issue certificates. And they're kind of part and parcel of the same overall thing. Great. And another related question, and I think that you answered this. It came in early on, but I want to make sure we get this really clear. Is there a cost to going to HTTPS versus HTTP? And I think you shared an option with us that was either free or very low cost. Right. So with Certbot, if you download Certbot and the link I have at the end of my presentation has where you can actually download a Certbot software, that's absolutely free. There's no cost for HTTPS deployment other than the cost that it takes to have assistant men run this software. And traditionally, that's been a very high bar. The assistant men that wanted to deploy certificates, it took them, and it took actually security researchers and experts hours often to get it right. And what Certbot does is it takes on a very hands-on approach and deploys the certificates for you. So you don't have to worry about all the configuration options. Great. Now we have a question about HTTPS everywhere. What browsers does that work for? And I'm just going to go back to the slide where we talked about that. Sure. So HTTPS everywhere is what I do at EFF. It's my primary job at EFF is to maintain that browser extension. Currently it is supported in Firefox and in Chrome browser, also in Chromium if you use Chromium which is the free version or free software version of Chrome browser, and also in Opera browser if you use that. Great. And then I guess I'm just trying to go through a couple of quick questions here. We've got some big questions which we'll try to save for later on once we've heard from Chuck as well. But a question about Privacy Badger. Is Privacy Badger free? Yes. All the tools to protect your users that I've listened to this presentation are absolutely free. So Certbot is free and so is HTTPS everywhere and Privacy Badger. Great. Thanks for clarifying that. I know we kind of went through each one individually as those questions came in. And then we've got a question about the difference between the browser option to deny tracking and Privacy Badger. So maybe you could talk a little bit about that and this might be our last question before we move on. Sure. So what browsers are they doing early, I believe it's either early this decade or last decade, is they started delivering this little flag to websites that you access. That says that you do not wish to be tracked. And that's something that is great but it also isn't really enforceable. We send it with Privacy Badger. We actually set that flag to say, hey, Browser, you should send this to websites that I'm accessing that I do not consent to being tracked. But it's not an enforceable mechanism. That's called Do Not Track. The Do Not Track flag. There's also Do Not Track policy that is different that we at EFF have formulated. And that is something that says that if websites say that they are not going to track users, promise not to track users, and post a privacy policy that actually puts in writing that effect that they're not going to track those users, then with Privacy Badger we will selectively unblock those sites that have that privacy policy that promise not to track users. So it's a little tricky, but so there's the Do Not Track policy and the Do Not Track flag. Great. Well thanks for clarifying the difference between those. I'm just going to get back to this slide one last time to let everybody know that I know we had some other questions come in and we haven't had a chance to get to all of them. We'll try to bring Bill back at the end to answer a few more of your questions. And we will follow up via email with anything that we weren't able to answer live today, so don't be discouraged if you ask a question. We haven't gotten to it yet. We'll have other opportunities to do that. But we have another guest and we want to hear from him as well. So at this point I want to welcome Chuck again joining us from the Lebanon Public Libraries in New Hampshire. And Chuck is going to talk to us about what he has done in his library. So Chuck, I'll hand it over to you now and let me know if you need me to advance your slides. I understand you're having the same technical issue. Thanks, Crystal. So my name is Chuck McAndrew. I'm the IT Librarian at the Lebanon Public Libraries in Lebanon, New Hampshire. And Bill gave you a really good overview of the higher level stuff, the way that traffic goes over the Internet. And so what I wanted to do today is give some practical tips, something you can take home and implement in your library right now or today. And it's stuff that we've done in our library and we found worked well. But before I do that, I just wanted to add a plug for Certbot. That's what we use in our library. It is very good. And not only that, I've also pushed our ILS vendor to implement it. And they recently announced they're putting it in place for all their customers. So all their customers now will have HTTPS by default because of Certbot. It's very easy to use. So go ahead and next slide please, Crystal. So I am from the Lebanon Public Libraries. We're about halfway up the state of New Hampshire right on the Vermont border. We're kind of in the middle of nowhere. We think we're a big library for the area. We have about 14,000 people which is big for the area, but I know nationally that's not too huge. But we do a lot for privacy, patron privacy in our library. And if we can do it, so can you. Next slide please. So the first thing I want to talk about is Wi-Fi because a lot of times you see open Wi-Fi in libraries and that's fine. But there are some things you should be aware of when you have open Wi-Fi. So open Wi-Fi is the best for convenience. People can just walk in and click on the Wi-Fi and don't need to worry about a password or anything. And it actually promotes access in that when the library is closed or someone doesn't even want to come through the doors of the library, they can use that Wi-Fi. But it's unencrypted. So the connection between the computer and the wireless access point is not encrypted which potentially allows for snooping and man-in-the-middle attacks. And a man-in-the-middle attack is where someone else pretends to be the website that you're trying to connect to. Now if you have an end-to-end encryption system in place like HTTPS, this is not a huge deal. But if you're connecting to an unencrypted connection then basically anyone on that network can see everything you do. So essentially what we're doing by having open Wi-Fi is replacing the responsibility for security on the patron rather than on the library. Most of our patrons in our library are not extremely tech-savvy. So the more we can do to help them out with privacy and the more we can do to build secure private systems that they can use, the better we're doing as librarians. Next slide please. So an alternative is to have secured Wi-Fi. This is Wi-Fi with a password. The pros is it's an encrypted connection. It is the best for privacy and security. It can limit access though and it's not as convenient. Just as a note, please don't use web encryption. Only use WPA2. Web is broken. You can crack it really quickly with just a normal laptop. Now you can try publicly posting the password. You'll see this a lot of times like in coffee shops and stuff. And that is one way to reduce the convenience concerns here. But it doesn't allow that 24-hour access to your library Wi-Fi and stuff which to me is actually a big service. I know there have been times when I've traveled on road trips and stuff and I've been able to pull into a library's parking lot and use their Wi-Fi even when they're closed. And that was hugely handy. Next slide please. So there's compromises. One is to have both a secured and an open network. And the other compromise is to broadcast a secured network with the password in the name. At our library we do both. This is actually a screenshot from my laptop of our library Wi-Fi networks. So we have library guest which is unsecured. It's open and anyone can use it. And then we have library guest password is LibLibrary. And that is just what it sounds like. It's a guest network with the password right in the name. So anyone looking at that knows what the password is. And then we have library staff because you should never have your library staff using the same network as your library guests which gets more into the infrastructure side of things. But this is a big problem that I see with a lot of libraries. You really want to segregate that out because library staff is dealing with a lot of sensitive patron data that is protected by law in most cases. And so you don't want to have random people able to snoop on your staff network. Next slide please. So those are kind of some of the considerations that go into Wi-Fi selection. You can see we hedged our bets and did all of the above. Now I'm going to talk a little bit about public computers and how we can protect patron's privacy using our public computers. This is not exhaustive I teach an online privacy course at my library. It's two hours sessions and there's five sessions in the course and I consider that kind of just an introduction. So 30 minutes of talking on a webinar is not enough to go into this. So these are just what I would consider very basic things that everyone should be implementing. I'll also note that in the links we've included at the end of this presentation the American Library Association has recently released some checklists of things that libraries should be doing. Take a look at those checklists and run through them for your library. They're very good and they're much more exhausted than this. So public computers keep them up to date. This is the number one thing you can do for security on your computers at home, your patron computers, your staff computers, any computers. Most exploits, most hacks are on vulnerabilities that have already been fixed. Software companies these days are actually pretty good about getting fixes out pretty quickly and a lot of security researchers will notify the software company about a vulnerability before they release it publicly. But the software companies all they can do is release the fix. If you don't update then that's actually on you. You also want to make sure your rollback software doesn't rollback your updates. So if you're using something like Deep Freeze you have to make sure it unfreezes for updates. Otherwise you can install your updates but it's going to roll them back. Automatically installing security updates is a very good thing because it makes sure they get done. You don't have to add it to your schedule. It's not another thing you have to do. There's a little bit of potential for breaking something with automatic updates but most people in libraries who I've seen don't go to the trouble of testing updates before they apply them anyway. So you might as well have them automatically installed. Next slide please. So the next thing, and this is very important for public privacy not in the sense that someone is going to be snooping on them over the Internet but in the sense that the next person who sits down at the computer after them might see something. Restore your computers to a known good state between patrons. I've gone in libraries and seen credit card applications and saved on those computers. You have to wipe out everything the patron does between users. Otherwise it doesn't matter whether you have the most secure connection in the world. The next person who sits down can see everything they did. So if you're using Windows computers having some kind of rollback software such as Deep Freeze, Deep Freeze is just the one I've heard of the most, is really important if you're using something like Chromebooks or Chromeboxes, Chrome OS, this actually comes built into it. You just need a Google domain and you use public sessions. If you're doing something oddball like we do at my library and you're using an open source operating system like Linux then there's actually a script that I wrote that accomplishes this. But regardless of what system you're using, it can be done on all of them. Just make sure that you have a strategy for ensuring that every patient who sits down has a known good situation. This also prevents tampering with the system like installing malicious software such as Keyloggers. There was an article that came out last year about a university library where there were some, I think it was 30 or 40 Keyloggers installed on library computers. So everything that anyone was sitting down and typing into those computers was logged. If you're restoring this system to a known good state and the patrons don't have administrative privileges which is another important point, then anything malicious they try to do should be undone. Next slide please. There's also a lot of tweaks you can make to your browser settings. This example that I have up here is from Google Chrome, but the same all the major browsers allow this. Either have the browser not remember history or open and incognito mode. And what that does is it ensures that nothing is retained between browser sessions. So even if the patron doesn't log out, as long as they close that browser window then it's not going to remember stuff on the browser window. Now that doesn't help if they download something, but it's a good step. And you may say, well I have this rollback software so I don't need to do this. The fact is that none of these are perfect solutions so having a defense in depth where you have multiple layers of security is the way to go. So have it not remember history. Do not have it remember form data. Definitely do not have it remember passwords. And more on the Internet privacy side of things. Set your plugins to click to play.  So you want the patron to have control over whether that runs or not. And finally disable third party cookies. All this is done through the settings. The details of it vary by which browser. So just do a quick online search for all of these for whatever your browser of choice is and you can figure out how to do it. Next slide please. So Bill talked about two of the three plugins that we install on all our public computers already, HTTPS everywhere, and Privacy Badger, both very good plugins. And like I say, I put them on all my public computers. And then the third one I install is Ublock Origin. And what Ublock Origin is, it's an ad blocker. Now there's some debate about ad blockers because a lot of sites on the Internet use ad revenue to keep going. And some people feel that there's kind of an implicit contract.  You should look at their ads. And I can certainly understand that. I have a lot of sympathy for that. However, the problem is that it's not just that ads are annoying. Ads are frequently malicious. And this is even true or especially true on big well-known websites. These websites do not have the time, money, or staff to really vet every ad. So what they do is they contract it out to third-party advertising companies. And all of the major websites have had cases of malicious advertising showing up on their website.  So until they figure out a better way to ensure that their ads are actually safe, I think that it is just common sense that anyone going on the Internet does in fact block ads by default. Now UBlock Origin provides a very easy way to disable it if you do want to see ads on a site or if it's necessary to see ads for the site to work properly, just like Privacy Badger and HTTPS everywhere are very easy to disable. Some of these may interfere with the functionality of some websites. And that's actually okay in my view because often the functionality they are interfering with is not functionality you want. It doesn't benefit your patrons. But there are times when it will prevent the patron from doing what they want. So it's important that your staff know how to disable them. So if a website is not working properly, you can try disabling it. But we want on by default. We want safe by default to ensure that our patrons when they sit down at a library, we can't guarantee they have a completely safe or completely private experience. But what we can do is we can take care of the low hanging fruit. We can take care of the easy stuff. If someone is being tracked by the NSA, probably not much we do on our public computers is going to help them. But we can prevent the script kitties from being able to figure out what they are doing. Next slide please. And the final thing I would say for public computers is install the Tor browser. So if you aren't familiar with Tor, what Tor is, it's a strong anonymity product. And what it does is it encrypts your traffic and it severs the link between the sender and the receiver. So it does this by bouncing it through three voluntarily operated relays. Your computer will connect to what's called a guard relay. And then the guard relay will bounce it to a middle relay. The middle relay has no idea who you are, where the traffic came from. It has no idea where the traffic is going. All it knows is the two other relays it's talking to. The traffic is then sent to what's known as an exit relay which is what goes out and talks to the website. The website sees this traffic as coming from the exit relay rather than from your computer. Tor also will create a new circuit for every separate domain and every separate tab within the browser. So that means if you are on Twitter and on Google in two separate tabs, Twitter may think you are connecting from the Netherlands and Google may think you are connecting from Canada. This prevents cross-site tracking which Bill talked about a little bit earlier which is becoming more and more of an issue. These trackers because so many sites have them, they will follow you across sites which can give them a whole lot of insight into your behavior that you may not want them to have. So the Tor browser is basically a modified version of Firefox that runs everything through the Tor network. Again, this is a screenshot from our public computers at our library. By providing access to the Tor browser you are giving your patrons strong privacy and anonymity. But you are not requiring it. You still offer the other browsers. You are just giving them the option. Now some libraries may have issue with this if they are required to filter their Internet. So one solution that we have kind of come up with when talking to people who are in that situation is you can actually install the Tor browser to a thumb drive. You don't have to install it to the computer. You can put it on a thumb drive and it will run just fine. So you can put the Tor browser on thumb drives and make that available to patrons. That will allow you to still filter your Internet but have the possibility of using the Tor browser for patrons who want it and who aren't subject to filtering like adults. So I would recommend that every library have the Tor browser available to their patrons. It is free. It runs on every major operating system. And it's relatively easy to use. Not only are you offering the technical benefits of the encryption and the anonymity but it's also a great way to raise to start conversations about digital privacy. Once we installed it on our computers and put up signs explaining what it is I've had a lot of patrons come up and start talking to me about these issues. And it's a great way to start an education initiative with patrons. Once they started talking about that, they started asking for classes on how to stay safer online. And that led to our, we call it online self-defense which I shamelessly stole from the EFF with their surveillance self-defense because I thought it was such a cool name. And you can see the link on the slide there, leblibrary.com slash online dash self-defense. That's my entire curriculum. And you can now note the slides and all my notes. So feel free to use it in your library by the way. And there's the ALA Privacy Checklist, the Library Freedom Project. If you don't know about Library Freedom Project, Allison McCrena is awesome and she will come to your area and teach you how to do all this stuff. San Jose Public has an awesome privacy program as well as well as the Electronic Frontier Foundation. So that is all I have today. All right, Chuck, thank you for again a very information-rich presentation. And again just to let everybody know, we are going to share the slides and all of these links in the archive. And you will get that in the email, in your email that you used to register for this webinar. So that will be coming within a few days. Now we've gotten a lot of questions, Chuck. People want to know more details about some of the things you're doing. So I'm going to see how many of these we can get to in the short period of time that we have. And I know Bill's been responding to some of those extra questions in chat so we'll let him keep working on that and if we have time we'll bring him back. But we got some questions just to go back to what you were talking about early on with the Wi-Fi network. We got one question that said, and I think this is a good one, so when you broadcast your password as you showed over the Wi-Fi network, can't you still get man in the middle, MITM attacks? And I'm just going to go back to this slide where you talked about this. That's a good question. And the answer is no, because the password is not the important part. The encryption is the important part. So the secured network basically creates an encrypted connection between the wireless access point and the computer. The password is not the encryption key. So each individual client, each individual computer will have its own one-time use encryption key that secures that session. So every time you connect it basically generates a new encryption key. And that's what prevents the snooping and that's what prevents the man in the middle attack. It's basically the same thing that's going on with HTTPS. Great. And we got another question and I feel like the answer may be similar but correct me if I'm wrong. So on Wi-Fi if everyone shares the same login, can they use that to decrypt all the traffic if we all have the same password? Do we all have the same key? And the answer is no, you don't have the same key. So the password is just essentially to authenticate yourself to the network, but then your computer and the wireless access point negotiate a key. If you want to know more about how the encryption works the Khan Academy has an excellent series on YouTube it's called Gambling with Secrets. I haven't included that link but I can find it real quick. And it is really great for understanding how encryption works including these, how do you negotiate a key without having a shared key to start with. And Chuck if you share that with me then we'll try to include that in the archive. So yeah, that would be a great additional resource to add. All right, we got a question now moving on to restoring the PCs to their known good state. And someone said to restore our public PCs to a known good state requires a reboot. So would rebooting so often decrease the life of the PC? It should not, it especially wouldn't if you had a solid state hard drive. But no, it should not significantly impact the life of the computer. And of course many of the things that you are talking about here are related to kind of the back end IT function of the computers. And so you do a lot of that in-house as your role as IT librarian. But we got a question for those who maybe don't have that same relationship with their IT department. All of our computers are maintained through the IT department at the city and we don't have a lot of control over these issues. So do you have any suggestions for how to convince the city of the importance? So that is actually where my library was a few years ago. And they hired an IT librarian specifically to change that. So that is one option is to bring it in-house. A lot of IT departments, especially like municipal IT departments don't really have a good understanding about the IT needs of libraries because what we do tends to be very different than what other city departments do. So you either need to be able to communicate with the IT department in a way they understand your needs, which of course involves understanding your IT needs. So you need a base level of understanding yourself so you can talk to them and communicate. Or you need to train or hire someone on staff who has this understanding and either can do it themselves or can communicate. So it will involve either staff training, professional development, or it will involve actually hiring someone who already has those skills. But I would say if you look at what public libraries especially do today, the technology side is as important as books are, if not much more important. And we never think twice about hiring a cataloger or hiring someone to do collection development. But a lot of libraries bulk at hiring someone with IT skills. And I think that just needs to change in libraries. This is a mindset that hasn't kept up with the reality of what we do. All right. Great. Thanks for answering that question. Now we're still getting a lot of good questions coming in. And I want to just assure everybody that if we don't have time for them today, we'll get to them via email later on. But I have one last question. Actually this came on early on. Chuck, I'm going to have you answer it first. And then Bill, if you have any last comments, we'll have time for that as well just a minute or two, whether it's to answer this question or just to add anything else in. But this question actually gets a little bit at some of the – and we didn't talk about this a whole lot, but about the concept of collecting library patron data, whether this is from the ILS or the public computers, the types of data you might be collecting to make customer service decisions and to market services better to patrons. And Chuck, I don't know if in your library you had any conversations around this, but it certainly revolves around this patron privacy issue. So Chuck, if you have just some brief words on that to share from your perspective in the IT or your perspective as a librarian, and then we'll bounce it over to Bill. Sure. First I would say check your local laws because every state has patron privacy laws regarding what library information can and cannot be used for what purposes. Now using patron information to better market your library services, I would say typically what we would look for is just making it an opt-in rather than an opt-out. That is you don't just send out mass emails to everyone who has a library card, but you can ask them when they sign up for a card, would you like to be included in our emails? Our children's librarian actually collects email addresses from parents so she can let them know about upcoming children's events. And that's an opt-in model. And I think that's perfectly fine because that's patrons actually saying yes, we would like to participate in this. Yes, we would like to have our information used for these purposes. And you also have to have a good well thought out privacy policy saying what you will and will not use the information for and make sure you hold yourself and your staff to it. Great. And just one more bit from – check that was a thank you for sharing your perspective on that from your library. This is also something that is included in the American Library Association's statements on patron privacy and collection of patron data. And those are links we will also be sharing in the archives and it's a part of the new checklist that we talked about as well. So it is included the recommendations from the American Library Association and Lita are going to be included in the archive. Bill, we have just one minute if you're still on the line and you have any last words you want to share whether it's on that question or something else, come on and let us know. Yeah, I mean the only other thing that I had to add to that and Dr. Really did that question due diligence is to make sure that the patrons themselves are aware of any information that they're giving out and have links to learn more. You know, user education again is really important and if the patrons don't know where that information is being delivered and how it's being dealt with then they can't really have any objective assessment of whether or not they'd like to opt in or opt out. Great. All right. Well, thank you Bill. Thank you Chuck for sharing all of this today. I'm afraid that's all that we have time for but it sure has been information rich hour. We'll follow up on those unanswered questions soon via email. I did want to let you all know about some upcoming webinars that might be of interest including one on the 28th of March about technology donations through TechSoup, one on Disaster Prep and Recovery on April 4th, and one on digital storytelling for libraries on April 26th. Save the date for that one. Also please visit us at TechSoupforLibraries.org where we've got blog posts and webinar archives and all sorts of other information that is library specific for you. And that's all. We just want to give one last word of thanks to ReadyTalk, our webinar sponsor for today, and thanks to all of you for joining us. Have a great day.


This trustee August is hotter than ever at Appalachian Wireless, as they are slashing all normal contract pricing on all smartphones by 50% when you sign up for service. Better service, bigger saving, serving you for the last 25 years at Appalachian Wireless. We want to start young with kids learning their fruits and their vegetables and their good food and eating good local food and we feel like this is a really good way to do it. We've had a lot of kids come today, we've made some balloons, we've done some coloring, we have some prizes and we also have kids who are spending their own money at the market and we find that it's very important. We actually at the health department partnered with Appalachian Roots and the farmers market to educate children on the 521.0 program to increase more fruits and vegetables to or less hours of TV a week and then one hour physical activity every day and no sugary drinks. As we leave the Floyd County Farmers Market we head a little south on US 23 where the folks at the Pikeville Farmers Market were doing much of the same, promoting local agribusiness and getting the kids involved as well. It's really important for our girls to learn what kind of fruits and vegetables are out there and healthy eating and I think a farmers market is just a place to learn such a thing. Girls are really excited about the cornmeal, apparently it's certain people's favorite food is cornbread so they're very excited to see how it's made.


Contribution of motor vehicle, boat or airplane. See I gave away my airplane. So if you deduct more than $500 for a contribution of a motor vehicle, boat or airplane, you must also attach a statement from the charitable organization. The organization may use form a 1098C to provide the required information. If your total deduction is over $5,000, $500 for certain contributions of clothing and household items discussed next, you may also have to get appraisals of the value of the donated property. You can see publication 8283 and its instructions for details there. Contributions of clothing and household items, the common contribution right here. The deduction for these contributions will be allowed only if the items are in good used condition or better. However, this rule doesn't apply to contributions of any single item for which a deduction of more than $500 is claimed and for which you include a qualified appraisal and form 8283 for your tax return. So oftentimes when you're giving clothing, you're not going to have it appraised, right? The people that you're giving these household goods to and whatnot are going to tell, say, hey, yeah, I got this bag of stuff, right? And they might give some broad description of the stuff they got, but they're not going to try to value the stuff. Typically is the general rule. So then that leaves you hanging in terms of how you're going to value this thing. So record keeping. If you gave property, you should keep a receipt and written statement from the organization you gave the property to or a reliable written record that shows the organization's name and address to date, location of the gift and description of the property. For each gift of property, you should also keep reliable written records that include how you figure the property's value at the time you gave it. If the value was determined by an appraisal, keep a signed copy of the appraisal. So I gave my best guess, right? So there's different methods we can use, which we'll see when we look at the software example most likely, like a thrift shop method or something. So the cost of other basis of property, if you must reduce it by an ordinary income or capital gain that would have resulted in the property had been sold at its fair market value, how you figure your deduction, if you choose to reduce your deduction by gifts of capital gain property and any conditions attached to the gift. So if the gift of property is $250 or more, you must also have a contemporaneous written acknowledgments from the charity. See gifts of $250 or more earlier for more information. Form 8283 doesn't satisfy the contemporaneous written acknowledgement requirement and a contemporaneous written acknowledgement isn't a substitute for the other records you may need to keep if you give property. So if your total deduction for gifts of property is over $500, you give less than your entire interest in the property or you made a qualified conservation contribution, your record should contain additional information for that. You can see publication 526 for more details. Line 13, carryover from prior years. So we saw that if there was a limit on how much you can deduct, then you might be able to carry that over. If there was a limit in the prior year, in this case 2021, that would carry over into the current year possibly. If you have a carryover situation, if you have a more complex return, complex return often being defined in part by having a schedule A itemized deductions, I would recommend if having a new client putting the information into the prior year return, even if they're even if you didn't do the prior year return, which might cost more but also it helps you with the rollovers and carryovers and that kind of stuff. So carryover from prior year. You may have contributions that you couldn't deduct in an earlier year because they exceeded the limit on the amount you could deduct. In most cases, you have five years to use contributions that were limited in an earlier year. So carryover amounts from contributions made in 2020 or 2021 are subject to 60% limitation. If you deduct those amounts in 2022, after applying those limits, enter the amount of your carryover that you are allowed to deduct this year, you can see publication 526 for details. Usually that's a fairly straightforward situation.


Hi everyone, Joe for Jasper's casewrakes.com here with 2022, a painy, clearly donorous football. One box, random division break number 12, got an early bird thing going on here if you're one of the first five, got a chance to win an extra spot, so let's do that first. There's the first five right there, Sean, Terry, Matt, good luck, let's see who wins that extra spot after 12, six and a six, 12 times. One, two, three, four, five, six, seven, eight, nine, ten, eleven, and twelfth and final time. After 12, congrats to Sean, you're going to get that extra spot. Thanks for being an early bird. Now let's take all of your names here, let's randomize you a NFL division. And six and a one, seven times for names and divisions, one, two, three, four, five, six, and once more, seventh and final time, Terry down to Sean, and then six and a one, seven times for the divisions, one, two, three, four, five, six, and a one, seventh and final time. The AFC South down to the NFC North, all right, Terry, AFC South, Matt, NFC East, Terry, AFC East, Sean with that extra spot, the NFC West, and the AFC West, Matt, you got the AFC North, NFC South, and Sean with the NFC North. We're going to alphabetize by division, and we'll pause the video for a little bit. When we come back, we're going to see if there's any trades, then we'll have that quick little one box break. Stick around, BRB. All right, welcome back, everybody. No trades happen, so TWC, trade window closed, thanks for spending a bit of your Monday night with us. We've got Eagles in Seattle, they're up seven-nothing, but Seattle is driving down the field. Here's 20-22 clearly Donners, good luck, can't get a false start there, Seattle. Where the auto spot, is that the auto spot on it? Leave the autograph back there, do that last. All right, I like the design of this. Here's John Mechie, the third, 85 out of 99. That will be for the AFC South, that's going to be for Terry. Got a Damien Pierce and Alec Pierce right next to each other. There's Mike Singletary, there's Bears Gear, nice Aiden Hutchinson rookie card, and we've got a Dalvin Cook, and that Donner is 1992 designing, 18 out of 25, it's NFC North, that's going to be for Sean Murphy, Derek Stingley Jr., and Jameson Williams, the Aiden Hutchinson NFC North for Sean. All right, let's see who the auto is going to be. And Gino Smith is, is Alec Pierce, 35 out of 175, that's your rated rookie autograph, that's going to go to the AFC South, Terry, for the AFC South, that's a moment this season. A couple more cards sitting back there, we've got Aromio Dobbs and an Isaiah Spiller, no Brock Purdy's, but we've got another one box break loaded up on jaspyscasebreaks.com, another divisional break. If you want to keep hunting with me, I'm down. I'm Joe, I'll see you next time for the next one.


everyone. I am Ibelda from the campaign product team and here with me today is Elan DeFried, our Senior Product Manager and our Product Ambassadors, Mohamed Bashinda for Arabic, George Shafadoub for French, and Antonita Van Gogh for Swahili. We have different language support available for live interpretations and our slides will be available in Arabic, French, and Swahili text. Today we will share what kind of work is being undertaken by the foundation product team and how communities can benefit from these new campaign projects and we hope for you to learn more about the newly developed feature of the event center which is the event registration system and we also hope to gather feedback from you and how to further improve the registration tool so it can be potentially incorporated into our later releases. Next slide. Just a brief background, the campaign product team is a software and product development team focused on building tools for campaign organizers. Our main goal is to build and improve the features in the campaign's ecosystem. For experienced organizers we want to simplify their workflows and provide more powerful tools and for new organizers we want to make it easier to become effective and long-term organizers. We hope that we will see more campaign organizers, campaign participants, campaign events, and campaign contributions with higher retention rates for organizers and higher retention rates for participants. Next. A very vital part of our team is our product ambassadors. They help us conduct multilingual outreach as we wanted to focus both on language and region. Organizers around the movement speak a diverse range of languages and some do not speak English. Campaign events are also in a range of languages. Some organizers have open felt overlooked by WMF, especially the non-English speakers. So it is our team's goals together with the product ambassadors to share our vision widely, gather and receive feedback from organizers in these local communities, and also to recruit testers for our first project and create a community of organizers who we can collaborate with over time. Our vision in general is to build a robust long-term support for Wikimedia campaign events. To make this possible, we plan to build the event center. This platform will focus on improving and simplifying workflows related to top pain points in organizing and event participation. This platform will have an organizer side and a participant side. The organizer side will provide the tools and resources that organizers need to create and manage impactful event campaigns. The participant side will provide the guidance and support that any participants will need to meaningfully engage in any Wikimedia campaigns. Overall, this platform will be a modular, which means the features can be separated and recombined based on the special needs of a wiki or a community. Also, extensible, which means that features can be added over time by our team, other teams or any volunteer developers. And for our first priority, to improve the organizing experience, we work on the on wiki registration for events, the event registration tool. And for organizer, we hope that this new feature, the campaign organizers will same time. They will no longer need to develop any alternative registration solutions, and they will be able to collect better data on campaign participants, their needs and respecting their participants' privacy. Also on the participant side, campaign participants will be able to join campaigns with minimal effort. And their first point of contact in the campaign will be fun and inspiring. We hope that participation for events around the movement will be easy, even if you're just a new editor. So I will give the floor to Alana for the demonstration. Everyone, my name's Alana. I'm the product manager for the campaigns team. Before I get started, I'll give a little more background also on these slides. As you see the multi lingual, these slides came from a previous office hours that we had. And they include the languages that we have product ambassadors on our team represented. So you'll see that they're in English, French, Arabic, and Swahili. We also have some of the ambassadors in the chat giving a little more context and other languages as well.  So feel free to join along with me, if you would like, and try out some of these yourself. So I'm going to be alternating between these slides and doing a live demo. But one thing I should share is this, what I'm demoing today is what we call V zero. So we call it V zero because it's very new. There's a lot of things we still want to do to improve it. There's also some of these improvements are features others are smaller things like, you know, bug fixes and things like that. But the reason why we built this early version called V zero is we wanted to get feedback early on. So we know what's working for people, what isn't and we can incorporate that in our next version, which we're calling V one. And we'll talk more about the one at the end of the presentation, but I'll first demo what we have today. So as a starting point, V zero is on beta wiki or the beta cluster. It's not on any live wikis yet. That's because again, we want to get feedback, we want to learn more before we think about deploying to any live wikis. So as a first step, if you want to go along with me, you would go to this URL, and I'll show how it works right here. So if you already have an account on the beta cluster, that's great. Otherwise, you can go ahead and create one. I'll share the URL in our chat for anyone who wants to join along with me. So if you're creating an account, and again, you need to create an account because your normal wikimedia account, let's say wikipedia or any other live projects wouldn't necessarily work in this case. So I'm just going to create a test account. And then I'll create password right now. So again, feel free to join me. And now the account has been created. So the steps I just went through again, where you go to beta wiki, you create a test account. So once you've done that, and also by the way, I should mention, if anyone's following following along with me, and they want me to slow down because they need to complete a step first, feel free to let me know the chat. I see don't know how to use the link can't copy neither. Maybe perhaps someone who's an ambassador, or who's a part of our team can provide a bit more context in the chat about how people in the call can create account on the beta cluster. So once you have created an account, I'll show the next step now. So we want to create an event page. So what is an event page event pages have existed for a long time, this is my new concept, right? So what's different here is you want to create an event page in the event namespace. So any wiki that would have the campaign events extension. So in this case, beta cluster wiki has the campaign events extension able would have the event namespace. Now, the reason why it's useful to create the event in the event namespace is we then know that this is an event page that separate separate from say an article page or user page. It gives us that specific identification. So the way you do that is you type in event colon and the name of your event in the search bar. So just like how you create any other wiki page, you can search for the page see that's a red link and then click on it in order to be able to make it an event page. So I'll demo this right now. And again, feel free to join me. So let's say I'm and I live in Brooklyn. So let's say I want to do an editathon of Brooklyn, you'll call it Brooklyn editathon. Click this red link here. And now I'm going to create a back page just like I would any other that page. So in real life, of course, if this wasn't a demo, there'll probably a lot of time and effort that I put into making my back page look correct. But because this is just a demo, I want to do a really quick event page that might write something like please join this editathon that focuses on the history of Brooklyn, New York. Okay, so now I can publish the page. And this is what brings us to the next step. So I see one question in the chat, how do I edit the events name? So basically, you create the name of your event. So it's in the event namespace, so you do event colon, but after the colon is any name that you want, of course, if there's a name that's already been used on the wiki, just like any other page, you wouldn't want to use that again. So you would pick a new event name. So for example, let's say you want your name to your vet name to be called women's history editathon 2022. It'll be event colon women's history editathon 2022. Okay, so now we've gone through the steps of add content to the event page and publish the event page. So the next thing I want to talk about is enabling registration. So when you're on the event page, there's two primary ways to enable registration, which I'll show right now. The reason why I can enable registration, the event page is I'm the organizer, I created the event. So in order to enable registration and enable registration means that there's going to be this header that allows people who are prospective participants to join the event. So I could do that in two ways. Way one, which I'll show right now is the pop up that you click on the event page. So you'll see a pop up it says enable registration. You can dismiss the pop up if you don't want to. But if you dismiss it, there's a second way, which I will also show. So now let's go back to the event page. So I can either click here, where it says enable registration. And it brings me to a form. Or if I dismissed it, I always have this option here, enable registration, which will bring me to the same place. So now let's talk about the next step, which is adding, adding basic information about the event. So the next step is to fill out the form with event information. When complete, click enable registration, and then it's recommended to review your changes just to make sure that everything looks alright. So I should also explain that this first part where you add information about the event, since it's a V zero, it's very basic information you add. But we know in the future that organizers will probably like to have a more complex or sophisticated way to talk about their event. So we'll be thinking about ways to improve this experience in the future as well. But for V zero, this is what we have. So let's say so ready has a name of my event. And that's because of course I went from the event page directly to the form. So let's say we have I want the event to be on September 1. And let's say I want it to end on September 6. And let's say I wanted to go from 14 or 2pm. You'll probably see the Z here. So this is another this is an example of something you want to fix in the next version. So right now for V zero because we wanted to build a very basic first version, you can just create events in UTC, which are currently represented as the media wiki. But our goal is to fix this in the future. So the organizer can pick their time zone that they want for the event. It doesn't have to be UTC. And Z would not be represented. And still it would show UTC. But for now, this is what we have. You can choose if it's an online event, an in person event or hybrid online and in person. I'll choose this so you can see both options. So meeting URL. This would be something like if there's a zoom or Google Hangout meeting. This is where you can specify it. You can have the country. This is also something we want to improve in the future with how you add the address. But for V zero, this is how it works. So maybe I'll say it's at 500. Jimmy Road. And then here I can do the group chat. So this could be something like if there's a telegram or WhatsApp or any other sort of, you know, off wiki chat, this is where you could specify it. And both a meeting URL and group chat invite would be something that's viewed to people once they register as participants. Before that, they can't see it. So then you click enable registration. Okay, so now registration is enabled. Participants can now register on the event page. So I saw one message say my voice is muted. I hope I people can hear me okay. If other people cannot hear me, please let us know in the chat so I can fix that. So basically you see the top here. It says online and in person event. It lets us know the date and time so far. Nobody has registered for the event yet. If I click more details, it can also show the location. Since I'm the organizer, I see the link for the video call. Now what I'm going to do is I'm gonna go the other side and show how someone can join event as a participant. Now if you're following along, if you want to join an event as a participant, there's a few ways you could do that. You can of course join my event and I'll share the URL. But you can also search for many other events by going to special all pages. And then after that, you want to look for pages that are in the event namespace. So there's many events you can also search by going like this. But the idea is you basically want to search for an event that you did not create an enable registration for so you can be a participant. So what I'm going to do now is I'm going to share a different window where I am a different user. So I'm registering for this event. So I am now going to say share this. So what I'll do actually instead, since I think I chose the wrong one, is maybe I'll just choose and what I'll do is I'll choose an event that I just did not create myself and see if I can one of them has registration enabled. Yep. Okay, so for this one right here, I can register for the event. And now I'm listed as a participant. So Tommy 456, that is me. Now I can also choose to leave the event by clicking on the trash can right here. And then I have no longer remember the event. Someone else joined very cool. But if I ever want to join again, but before I join again, let me demo how the join link doesn't show if I'm not registered. So when I click more details, I need to register it says here to view the event link, right? Now when I register again, I can see that the link is right here. Okay, so to go over the steps again for anyone who's following along to join as a participant, you can search for events by either clicking event colon and the search bar and a lot of events will come up. You can also go to special all pages, which gives you access to all the events. If you look in the event name space in your search, then you want to go to the event page and click register for event, which will automatically register you. Then the next step, which I also demoed is canceling registration as a participant.  If you want to register again, it's as simple as clicking register for event. So I just demoed how a participant removed themselves. Now I'm going to show how an organizer would remove a participant. So sometimes organizers want to remove participants. Maybe it's a trust and safety issue. So for example, maybe someone who joined events is someone that the organizer knows has caused issues in the past, and they think it's not a wise decision for trust and safety reasons for this person to attend, maybe the person's having trouble removing themselves and they ask the organizer to do it for them. Whatever the reason may be, we wanted to give the organizers that power to make that decision. So the way you do that as an organizer is there's instead of register for event, there's a button that says manage event. So you click on the button that says manage event. Then you'll see a view of the participants who registered for your event. You can select one, you can select some, you can select all and from there you choose to remove them. So I'll demo that right now. So let's see if anyone has joined my Brooklyn event. If not, then I'll have. Oh, many people have. Amazing.  So I click manage event. And I'll remove the melda. So to do that, I can click her name. I could click all, but I don't want to do that. I just want to remove one. So to do that, I click here, and I remove. And the participant is now removed from the event. So another thing you can do as an organizer is edit the registration information. So for example, maybe I added some incorrect information into the registration. Question, what if the participant still shows up? That's always a risk potentially. So I think that'd be interesting discussion for us to talk about afterward because I think there's a lot of ways to think about that. So please hold that question and let's see if we have time. So to edit the registration information, I'll show there's two main ways to get to edit, but one way from here. So is I go to edit. Another way is I have my events list. See these dots, you can click here and also go to edit event. So the my events would be a list of all the events you have organized. So here, let's say it's not 500 Jimmy Road, I made a mistake, it's 550 Jimmy Road. So I can just make the change. And then I click edit registration. Now I can go back to the event page. And I see it is now 550 Jimmy Road. Question. So only the participants see the list. No, for v zero, we have it very basic in that organizers and participants and just the general public of anyone who's on wiki pages can see the list of people who joined and that's inspired by a lot of on wiki registration now, where you can see who joined events. But we also do know that some organizers are interested in confidential registration. So that means that someone registers for an event and only the organizers see them. For that, that's something we're planning to look into for later release. But it's not something that's currently available in this version. So that's edit. Now let's go to open and close registration. So when you create or when you enable registration on event page, it's automatically open. But perhaps you want to close an event registration. So maybe, you know, there's a certain number of people you want to register reach the capacity, whatever it may be, when you close registration, that means new people can't register. So the people who register in the past, the registration is preserved, but new people can't come and join. If you close that registration, you can open it again. But it's your it's your choice, but you really so I'll show now how to close. And so you can go to my events or edit. And then if you go through my events, you click the three dots, and you'll see if it's a closed event, you'll see open registration. And if it's an open event, you'll see closed registration. You can also do it through edit. So I'll show both versions. So let's go back to manage event. So we saw here is dots, you can choose here to close an event or open. Similarly, if you go to edit, event status is open, you can change it to closed. If it's closed, that means that the registration header at the top that says register will no longer appear to participants. So feel free to also go back to my web page. And if you haven't registered already, if you'll see you no longer can. Okay, so now delete registration. So delete registration is very simple for V zero. So I'm not going to complete the deletion process because right now we only have the ability to delete registration, but we haven't built in the ability yet to restore it. And I don't want to delete this because I've been using this to teach you all how the product works. So I think it's more useful to keep it up, but I'll show how you go about it do it.  And that will go ahead and delete it. So if I wanted to I click delete event, I'm going to cancel I'm not going to confirm this. But if I truly wanted to delete, I would click delete. So those are the basics of V zero and how it works. We are also though very aware of the fact that V zero is just the beginning, there's a lot more we want to build for event registration, and there's a lot more we want to build for events in general, beyond registration. So Melda now is going to talk about some of our future plans, and then we'll open it up to questions. And thank you all. Right. Thank you, Alana. So what's next from our team? Coming in in October on Metawiki, organizers can message their participants via email or their talk pages. Also integration with programs and events dashboard and support for multiple organizers for one event. Also coming in in January on also on Metawiki, registration for some events, for example, events that are still location, we're in events that has in person gathering or virtual participation, also confidential registration, where in participants, participations of volunteers can only be seen by organizers, not by everyone who joined the event. And also optional questions that an organizer can ask participants, for example, organizers can send questions to their participants during their registration. Also, for our next steps, first, you will love if you can test the event registration feature on Metawiki, share your feedback on our channels, you may use our talk pages on Metawiki or the feedback form that we're going to share in the chat. You can also subscribe to our newsletter to receive updates on our projects and any announcement on testing and version improvements. Also, you may join our telegram group, which is a community of Wikimedia organizers. So now we are going to answer your questions. I'm here, do I see your hand up or is that just it looks like your hands up? Yes, this is my hand up. Hi, excellent presentation. Thank you. You mentioned at some point that it's possible to see a list of events on special old pages, which makes sense because these are just pages. Is it also possible to see all the available events on something like a calendar grid? Great question. So this is actually a future project plan for us. So after we do the event registration project, we want to do what we're just calling now the event page creation project. So right now, for some organizers, they already have workflows in place for how to create event pages and feel rather comfortable with it. For others, it's a lot of work and a lot of maintenance. So we would like to just tell you so with that form, you can add some basic information for registration. You can think about it as sort of an extension of that you add more information that is, you know, I think useful for you to share for participants and then it can generate an event page without you having to do stuff with like wiki text or templates or whatever yourself. So what we imagine the future is when you're creating the event page, or if you're not using event creation tool, there can be other ways to do it. But there's a way to specify if you want your event page to end up on a future calendar of events. So you don't have to say manually create some sort of calendar yourself. There'd be some sort of infrastructure that we create the future around that counter. That's in the future. So we don't know a lot of the details yet. But what we imagine and we hope is that make it easier for people to find out about what's going on at any time. And they can even apply search filters for things like topic area or location. So they can find events that really excite them. I think Natasha is tracing her hand. Yeah. Will it be maybe you answered the question already, but I have trouble understanding when it's people speak very, very fast. So would it be linked to the events dashboard? Eventually or not? Another great question. So this is actually our plan for the next release. So we have another release that we're planning for roughly in October. We don't know the exact date because we just started this phase of the project. And of course, with software development, there's always unknowns. So it's often hard to say the early stages, but we're planning for roughly October. And for this release, we want to have integration with the programs and events dashboard. And we're actually working directly with Sage Ross from Wiki Education to make this possible. So what we want is that if you as an organizer have created a dashboard instance, and you also are using our registration tool, if anyone registers for your event as a participant or username can be automatically pushed to that dashboard event. So you wouldn't need to manually add the username to yourself or have the participants during the event add the names. So in short, yes, this is in our plans in the next few months. Great. Thank you. You're welcome. Techno, you can raise your question and then it'll go as your questions on the chat. Would you like to ask your question? If not, maybe we can go to Gilbert. You see his hands up as well. Thank you, Rana. Just to say thank you for having think about this system because it is very easy and because previously we have been answering two questions of participants asking, please check if I've been registered and when we are organizing things, we have to check for messages and the answer and the check. And sometimes it was difficult to check how to see if someone had registered. But for now it is easy just for a click. You see if you are registered and if for the second time you register, you click and you are informed that you are already a participant. You can't register for a second time. Just to say thank you. Thank you for having think about the system. Great. Well, thank you so much for sharing that. It's really appreciated. And that also reminds me what you said we heard from other organizers when we were doing research before this project began, which is that some organizers that use some tools, especially the tools where someone registers, but it's a private list that's not publicly shared. People don't remember sometimes that they've registered. So they'll contact the organizers and then the organizers have extra work of essentially letting them know or not if they've registered already. So this takes away some of that burden hopefully. So it's great to hear from you that you feel like it would. Very great. Thank you. One question on the chat from John. Will these replace the events in diff? Okay, so the diff calendar. Yeah, the diff calendar. So overall with all our tools, I don't think we're aiming to replace anything. We understand that Wikimedia is a super complex ecosystem that has a lot of decentralized ways of managing things and determining what's best for different communities and different needs. So that's not our goal to replace the diff calendar. We our goal is though to work really closely with organizers, especially organizers that currently feel like a lot of the existing workflows aren't working for them and find solutions that can give them meaningful improvements. So they feel like they can lead more impactful campaigns and so that they can do more of the work of actually organizing rather than dealing with technical hurdles. So when we do have the calendar project in the future, we'll also look into how we can complement whatever we do with what exists rather than trying to replace anything. And so I guess two, if any of you have any thoughts or feedback around what would be the most useful way to provide some sort of calendar support, feel free even if we're not on that stage yet of doing the work ourselves because we didn't launch the project. Feel free to share it because the earlier we get feedback, the earlier we can start thinking through some of these complexities. I think we have one very good question on either, but a future version include a functionality where you can have the event details sent to your email or added to your calendar. Yeah, it's a great question. So maybe, yeah, so another thing coming in October, we made this slide very shortened, but there's some more features actually that we're planning in the new release. And another one is confirmation email. So right now it's very simple. You register as a participant and that's it. You don't really get a confirmation email. But we know this is really important. So for the next release, what we're looking into now is after the participant registers, if they have an email address associated with their account and they don't have anything in preferences where they said they don't want to be emailed, so they allow email, then we will have an automatic email sent to the participant. The organizer doesn't have to do anything and will have all that information event details sent to the participant so they can easily access it at any time through their email. I also see a question in the chat. Do you also plan to add a feature for newbies to create a wiki account through the registration tool? So yeah, so right now let's say you want to join an event and you aren't logged in or you don't have an account yet. The way it works is you can still see the register for event button. It's not that the call to registration is only for logged in users. In order to complete registration we have you log in. Right now it takes you to the log in or sign up page and then after you do that it'll bring you back to the event page so you can easily sign up. But one thing we could consider in the future is ways we can improve that intermediary step when someone is either logging in or signing up to make it just more user-friendly. So let's say I want to sign up for you know the Brooklyn edit-a-thon. Maybe there can be some sort of text that says in order to complete your process of joining the Brooklyn edit-a-thon you know please create a wiki account and maybe there's even some sort of image or graphic that's like the logo for the event so the user can really recognize okay I need to complete the process. We haven't done that yet but please feel free to also share any suggestions for how you think we could make the initial account creation process more encouraging for newbies because a high priority for us is we don't want people to essentially drop out because they have to log in or sign up. We want them to complete the process so anything you think can make that more possible or encourage people to do those last steps we really want to hear it. Another question. What is the expected time to start using the event planner? For that I think it's sent the event calendar. Unfortunately it's too early for us to say so if I gave a date it would probably be wrong. So I think what's better is to join our channels and our various modes of communication so when we do have a better timeline we can share that with you. So ways you can stay informed about our teamwork is you can join our subscription list. We send messages. They're usually bulk. We try to send a few things all at once about things that the team has going on every now and then via mass message so be on your user talk page about team updates. You can also watch our team page on Meadowickey and if you do that that's I think the best way to stay informed about the work we're doing. I should also mention we have a telegram group that's multi-lingual that's for organizers. It's not only a place for people to come together who are organizers who want to share resources but it's also a place where we'll be sharing product updates as well and you can directly talk to us as well as our product ambassadors who are available for French, Arabic or Swahili as well as of course English for any questions you may have. Someone asked for sharing links in the ether pad. Looks like I saw Melda nodding so I guess that's coming up. Let's see if there's anything else. We already shared the links in the ether pad and also subscribers please. And I saw that accurate well back. I loved the new innovation about the registration tools. Thank you so much. Natasha a very interesting tool for you a organizing editathons. So everyone who is sharing feedback we would love to hear from more from you essentially the feedback form. So I'll show you how the feedback form works as well. We want to know what's working what's not working because this is really the beginning it's not the end so if there's things you don't like we want to know so we can find ways to improve it. So this link right here which you can also see the slides and I'll share again the chat is a multilingual feedback form you pick your language and then there's questions that you can answer some of the questions are things like what do you like what do you not like would you use this and here's the link again and I will register for your oh so Natasha the link you sent is in your event page this is um it's kind of more like you could think about as your folder or organizer of your events. So your event page instead of saying special my events it would have the name of your event so if you send the link of your event page I will register for your event as a participant. Okay so why doesn't it show? Another thing you can do is what I wanted to you can also go if you forgot the name you can go under user contributions and you should be able to find your event page. Its event is said again that's the name of the I just put a person's plain name in the event yeah thank you thank you so much. Oh I see it's the name of the event. Okay okay you're now of two participants. Great so now I can remove one of them. Thank you no problem um someone asked how can I get the tool so right now it's available for everyone in testing in the beta cluster but in the future we want of course for this to be a live wiki not just on the beta cluster um so we're aiming to release it on meta wiki first. There are a few reasons why but one of the main ones is it's really great for event organizing there's already a lot of event pages on meta wiki it's a multilingual wiki so that could be a great place for you to test our v1 that we'll be releasing in the next few months. If you would like to be one of v1 testers you can also let us know now in the chat you can contact us later you can reach out to us in telegram and we can give you more updates on v1 and how that will work. Thank you ever so much I'm going to use that for sure. That's great to hear and another comment that I'll read out loud, Mian, I love that we think about events at all because today they're either manual wiki text or off wiki but it'll be great if we were collaborating on one tool I think WMDE is investing in Diff. Well this is really great to know this is also really aligned with our vision is that um there's some stuff that currently exists for edits on wiki but of course that really is more geared to people who feel really comfortable creating and managing events on wiki or people who are especially interested in targeting participants who are experienced themselves but we're seeing that there's a lot of organizing activity that's already going on off wiki either due to maybe the organizer feeling more comfortable in those spaces or them feeling like participants can't easily onboard to on wiki flows and processes so our hope is if we simplify these experiences then more people can do the organizing and their event work on wiki which is better of course for the movement as a whole and as for again the calendar part that's something that we can totally explore and work out together in the future so it's good to hear about how WMDE is thinking about it as well and we've also been talking with WMDE in our current work so with event registration even we've already been talking with WMDE so we'll continue that collaboration with also the new tools we build and we only a few minutes left we have four minutes left so people of any last questions please please share them if not I guess we can wrap things up and so thank you so much for joining our session we really see this again as the beginning of us creating and improving a lot of tools so we strongly encourage you to join us in this process join our subscription list join our telegram group share feedback in the google form or on the top page and reach out to any of us in the team we would love to hear from you and thank you so much for coming to our session I guess goodbye thanks everyone


A Fawkes Autonomy Prime, X-Wing partner for autonomous flight demonstration. A Fawkes Autonomy Prime partner X-Wing incorporated monitors an autonomous flight from their ground control station, at McClellan Airfield in Sacramento, California, January 29, 2024. A Fawkes, the innovation arm of the Department of the Air Force, has awarded X-Wing two small business innovation research contracts, a Phase II in March 2023 to conduct autonomous flight trials, and optimize the technology for future missions, and a Phase III in December 2023 to demonstrate the capability, in an operationally relevant environment. X-Wing's autonomous flight technology allows its aircraft to taxi, take off, fly to a destination, avoid airborne and ground threats, and land, without any human input. Flare. Touchdown.