Welcome to the Q&A. We have 30 minutes of questions and we have a lot of them so I won't go into too much of an introduction but I'll still introduce Guillaume who was doing the workshop on the fleet and OS Query. So Guillaume is the head of security at Fleet Device Management, the company behind the open-source fleet management platform for managing and using the OS Query. While he prefers working in startups he's been working in security forever in organizations of all types and prefers working at the bright side of things and things that work instead of repeating 30 year old best practices that never have. Alright so the first question and most of voted is I think mostly for Caspian. What is the impact on mental health of accumulating incident response and what can be done to better handle it? That's a great question. So it kind of depends on what the level of incident response people are working at and how often they're dealing with it but in a lot of cases your first incident is going to be stressful. If you're dealing with a lot of incidents it's going to be stressful and sometimes you're going to see things that you absolutely do not want to see, hear things you don't want to hear and experiencing things you know that you won't want to be there for. So I think the mental health impacts can be kind of high and it's important both for employers and people running security teams and managers to understand that the folks that they're putting on the line to do this actually do you know experience that and to have that awareness and have that support in place when it's possible. Alright thanks. Any tips for capturing momentum after an incident to get to get better practices in place so like input post incident? Oh my god are these all for me? I feel really special right now. Yeah a couple one post incident basically take what you've learned from the incident it's gonna make a huge difference if you can say okay you know let's not waste this incident let's learn something and let's build from there and in terms of capturing momentum from the teams like it also kind of goes back to a mental health thing right you've basically got knocked down you have to get up again oh wait that wasn't yeah I was gonna go on with this song but it's not a great situation and a lot of times you know you can use the incident as a rallying point for people but the most I think the most important point is to not point fingers you know to not turn this into a situation we're like yeah so-and-so is responsible for this so they should you know they should get fired or demoted or whatever that's not something you should ever do in these situations. Yeah I think we this the blue teams in general they we have a reputation of pointing fingers that maybe we shouldn't be doing or maybe we don't do it but I think people external to the the security people they they see security as pointing fingers and it's bad for the the business or the industry as a whole. Yeah and I think so I've worked with Guillaume in the past in a couple of in a really fun role at a former employer and I've heard a lot of his stories of kind of like losing it and getting angry but being positive and I think that's actually kind of important in these situations like be angry at the incident not at the individual. I think to add on to some of what you're saying about you know not blaming a particular person or etc like Google has a culture on SREs of blameless postmortems after an incident happens yeah and I think as much as possible that that also applies to security like something bad happens document what you should have done instead there's something that's critical that you absolutely have to go fix and it's not someone's fault that I don't know the alert system failed or whatever right. There's nothing more there's nothing I'll get a proof of concept built faster than some terrible all hands-on deck like security something happening right I wouldn't point to specific things but over the past few years like you could imagine those moments where it's like everybody stop what you're doing we're working on this one thing like those are often times where you end up getting to proof of concept the things that you wanted to all along and you know suddenly it's running on every machine and you're like okay maybe we could do more of that and that's a much easier place when you've kind of proven that out out of panic and then going from the the proof of concept to actually implementing correctly is another topic but it's really complicated as well. I have a question for either Eric Ormea so you talked about the security keys and web app and so it's a fairly new technology but the technology is there it works and I think that the adoption is quite slow and my question is I think I think people a lot of people even security people are not aware of the benefits so the biggest one being it's basically unfishable so how do we speed up this process of getting people to know it exists it's very good you should you should get to that at some point. I would say that I have a much easier job because I work in a corporate environment where you can sort of just say like hey we're going to use these like you know we start enumerating all the places where we don't use them we have exception processes for that but if you look at like what the Fido Alliance is trying to do they're trying to get the whole world to get on to that and you've seen things like their white papers of trying to have even like soft Fido tokens that you can move around between devices and back up to your like cloud right so I think that these are kind of two different topics right like a corporate entity is going to have all of their weird little things that you're going to have to know that okay this doesn't use web often or it wasn't used to security key to get the entire world to use security is key is something I'm dramatically under prepared to speak about yeah. I'll add a couple things one is that your SSO probably has a control that says something like require security keys so yeah you just like prep your your employees to be ready for that and send them all security keys and all that kind of stuff explain that you can put multiple credentials on the same key like that they don't that they can have lots of keys they all work like all that kind of stuff so you need to spend the money up front on those keys and flip that switch but that's absolutely something at an enterprise can do the other thing I will say is I think some of it's going to be forced on us in a good way so GitHub announced a couple months ago that they're going to force all developers to have 2FA not security keys but just 2FA baby steps I think in 2024 or 2023 I got an email it's time it's like really really time like I'm shocked this hasn't happened before but a lot more people are going to just start using second factors and security keys and adoption will continue and about a get up I think I think they said that I think 15% of the users have 2FA which I thought was really low because their developers they they're closer to security than most people and they should be aware of the benefits of it but I don't know the 15% but the last public number I saw was 11% of projects that have over a hundred developers have developers who use security keys or sorry use 2FA because I don't think GitHub tracks which ones which that you're from that they publish yeah all right question for Yuri can you successfully distinguish obfuscated JavaScripts from minified ones because I think minified JavaScript is pretty common in in the web as a whole because it reduces payload size and there are lots of benefits so how does your your model do with that yeah it's a great question so let me first explain a few words for those who are not sure what are the differences so unification means that you do not intend to hide the code but rather compact it so usually the purpose of minification to make the code run faster and and then it just changes the names of variables mostly and like compresses the code to be on a single line so as you one of the examples I showed was indeed me minified so in our case first of all the minification of itself we didn't see an interesting cause to distinguish between the cases so from our point of view minification is just clear text and and this is why we did so so I did try to create a model that do a multi-class classification like three classes minified clear text and obfuscated and I didn't see that these model performs better but but again the point of view was to distinguish ultimately between obfuscated and clear text and this is why so in this case it didn't work better than that but in general to sum up it's possible to to you know spot minification by machine learning very similarly to what I described before in my in my presentation and if you really want to then just you know just use a minifier create the data the data set as you like and just run a similar model and I guess it will work thanks question for I guess anybody that work in incident response or in a blue team given an incident have you ever considered letting the threat actor operate in the hopes of capturing more tools and tradecraft is there someone who has a story to share about that can you talk about the story I don't have a lot of stories to share about that that I can talk about but I that is definitely a thing people do yes I I mean I currently work at a place that mostly handles ransomware incidents so tools and tradecraft we have a really big Intel team for that we've got you know we're basically that's what we do but yes I have seen that done the game that you're playing with that is a dangerous one because you are basically saying let's let this roll out further and you're doing that hopefully with legal oversight because there are a lot of questions that are going to be asked after the fact if you basically let any threat actor wander around in your network and start messing with things yeah and it's a big it's a big gamble because I guess one one of the good reasons you would want to do that is if you if you suspect the threat actor has many footholds you want to identify them before before notifying the threat actor that you're on to them so it's a it's a really tricky questions and I don't think you can have a general answer it really gonna depend incident on incident no I I mean really this comes down to a visibility piece again and this is one of the things that I think a lot of blue teams struggle with is kind of being able to see as much as they can on the network and you know there's also the controls which I know you guys were talking about because I got to see that so there are elements of this where we're only just now getting to the point where we have the technology to maybe see this as well as you want to but there's a lot of resistance to putting that in in places all right question for Guillaume at what size of company does something like OSQ query and fleet I guess start to make sense I would say if you're if you're remote and you have computers that are owned by the company as opposed to BYOD like 50 people 30 people 50 people probably starts to make sense I think as soon as you start having enough systems that you're wondering what's happening on them right so if you if you're like a dentist office and you've got three computers and it probably doesn't make sense but you don't need to have a thousand definitely under a hundred makes sense and is there would there be an upper bound like if we have 60,000 machines is it too much or should we go another solution no I mean the thing with with OSQ query is there's like 300 different types 300 different tables with data that you can get from some of them can be extremely generate a lot of data for example there's a table that will tell you about every single connection that's established if you run that on a Linux server that's a load balancer and and like you're you're on the internet and you get a billion connections every like it's probably not the right tool but I've seen a lot of deployments with you know 100 200 300,000 servers and it scales really well it's more about where do you put the data after but it lets you be very precise about what you're collecting you don't have to grab everything and then decide what you're going to do with the data later right you can decide okay we have a new use case we need this table we're going to collect that every 15 minutes every hour every week and then start using it so it's not the same type of you know let's grab everything and figure out what we want to do with it later which can be very expensive I guess you know whoever sells a license based on how much you can index or sells hard drives loves that model but we don't think that's the right model in most cases especially if it's a big environment thanks Maya or Eric I guess what level of logging do you think it should be in place for each level of zero trust so I guess this references risk-based access I mean I don't know exactly where but it but like I think the a lot of what we were trying to explain in the talk is that this is so complicated and like logging when you talk about logging is not one thing right like device logging endpoint you know with like stuff like or you know and yes like OS query which is kind of logging but kind of not visibly these hard yeah and yeah so I don't know if I have a great answer of like what you should log I mean experience wise there's also this kind of weird interaction between like you need different kinds of logs now right because you're not just gonna have all of your things on the corporate infrastructure and you can do that right where you can you know say oh yeah here's all the IPs that came in and out so I would say that logging is just like another one of these wonderful challenges that you'll experience and is not really a good answer I mean log everything I mean is it a question is there an answer to response where you you had too many logs like absolutely and the thing is like I will always say log everything like it is we have too many logs sometimes that takes us a little bit of time there are really good data engineering tools are really good databases for this stuff so if you've got the right tooling in place it's not a problem I have been in places where you know I keep making this joke about grep like it I've done it it sucks and it takes a long time but I too many logs operationally as a problem too many logs in terms of an investigation never is there's there's there's no such thing as too much evidence grip is the best tool ever I also say to like logging like on traffic on the network is maybe a little less interesting than like I have an application proxy and it knows exactly who is connecting and what device they're coming from and so you know I don't think it's a matter of like more logging or less logging it's like sometimes you just get better quality logs out of these kind of solutions too I will add on to that I feel like a lot of people have built these like proxies or load balancer proxies whatever they happen to be and they're like wow now that all my traffic goes through here I'm gonna do all kinds of other stuff to it too and you're like that's not that wasn't the point like you can solve that problem in other ways it's harder but that's not you solve the problem in the same way because you really had someone to put the logging I mean if what you what you really need at the end of the day is going to be some sort of audit log of like this user accesses application at this time and did these things and there's lots of ways to do that it happens to be easy with a proxy but there's lots of ways to do that for Yuri have you found that a lot of non-malicious JavaScript is obfuscated to for interdictural property reasons so do you have like numbers or something you said it's a valid use case but how how widespread is it do you know you mean the the intellectual property thing so I think in one of the papers the www 19 they really did a deep analysis of of the distributions of JavaScripts in terms of what happened there for our data in imperva and as I mentioned it wasn't really feasible to tag tag it manually so we use some some heuristics just just to test the model but it's not it's not something that we can you know accomplish in any way if we have just an example like almost half half of hundred thousand scripts as a test set I have no way to take security research I mean we have many but I can't really ask them to tag to tag it and to say which one are by chance you know intellectual property so obfuscation type yeah you would have to reverse them and then steal their intellectual property or something like that about machine learning in security we have a comment here it seems that everyone wants to use machine learning for stuff like ID system security is it worth it or can can it be just a waste instead of boring things like good logs so I'm gonna rephrase it where do you think machine learning fits into security as a whole as an industry as a as a part of doing business yeah it's a good question so so generally if you ask data scientist what is machine learning good for something he will tell that most probably yeah it is it's very good so so I think there are many applications for machine learning today as you know the algorithms become more more sophisticated and more more libraries you can just download and easily use and then you don't really need to understand the inner working of the models so but indeed there are cases where you don't you cannot use machine learning let's maybe talk about this negative a negative example so when when can't we use so there are some cases that we don't have enough data and there are cases where the data is too dirty so you need to make you know to it always starts with the data when we look on the data we can see if it has to be cleaned if we have enough of it if we have a very unbalanced data set so these are maybe like the corner cases where if you just taken out of the box algorithm and apply it on on on such data and you maybe come up with something strange so there is no you cannot really replace this pipeline of of gathering the data and a good amount of it if you want to solve like anomaly detection and you have 10 examples then you know you don't have to use machine learning so that's I think my take on this as a rule of thumb I'll add on to that because I think the we talked a little bit like risk-based access I think people like oh yeah you can just decide whether or not someone can have access to this application and just use spring to some ML on top and like it's exactly what you're saying that like anomaly detection is a great example that's actually kind of bad for machine learning right like if machine learning is good at a couple things one of the things that's really good at this sorting things into two categories A and B that works well if A and B both have lots of data if you only have 10 examples of attrition attempts to your system like you just can't train a model on that right it's not possible and so something like risk-based access you don't want to put that in front of a user who's gonna like get even more upset if they can't access their email or do their job or whatever it happens to be like sometimes you can do some of that stuff after the fact to like look at logs but even then like you don't have enough data to train a model if there's just nothing to go on yeah I think this thinking comes from the fact that a lot of security people have very little experience in machine learning and they they they either go to the side of ML can't do anything or ML can solve everything and it's a we need to talk more to data scientists about about this stuff so so so we can know that ML can do this but it can't do that and just trying to maintain even getting your signals to fire in a big system like I talked about the the quality of you know stuff you get from an operating system even just ensuring you're like like I do a lot of development where you have like nice hermetic tests and you can say like you know does this run if I run it against other system like a big corporate infrastructure you're not really gonna have and test very often and you know signals rot pretty quickly so even just getting signals to fire that's like before you even can take that structured data and do machine learning on it that's already a hard enough problem right but but I still think that we don't need to discourage people from from doing machine learning I think that it's on the country so I encourage everyone to you know download some some libraries to be proficient with pandas and scikit learn and stuff like that and you can see many many examples when you can do really cool things pretty easily and I think that will help you to understand what machine learning is good at and what's not really and it's much better than you know just like using buzzwords as Maya said just sprinkling them that's a great advice even though it's spooky I don't want to pip install scikit learn just you just have to wait a little bit right yeah it's kind of a big package all right probably last question maybe another one after that I need to ask as I saw on the on the Twitter two weeks ago interview questions for a suck analyst role and the interview questions were like you see on the windows even like even ID 46 24 what do you do what what does this indicate or you see error code windows 11701 what is it and I thought this was really you didn't know what these things mean oh come on I I've been I've been working two years in a second I would Google these questions I actually if someone asked me this in an interview for this role I would probably walk away from the interview so so I have actually asked that in interviews but it's usually what's your favorite event code not you know you see this and then what do you do because it's not fun to put people on the spot and I think I didn't mention it was for a junior analyst role so so yeah so my question would be for for blue team roles what would be or analysis role or IR roles stuff that requires analysis and deep technical knowledge sometimes what would be your your your good interview questions I love that you're all looking at me now 46 24 really honestly it's yeah I'm gonna stall and give you all some time so a couple things that are bad with that interview question is it has specific knowledge that someone has to already know which is bullshit it doesn't show that the employer is like willing to train you on the job or like help you learn anything again which is bullshit and like the only like we literally went to trivia I don't know two weeks ago in one of the trivia categories this is EFF trivia so like take that with the great assault one of the categories was like CLI commands for deprecated systems and like I think our team got every question but that was embarrassing and I contributed nothing to that absolutely nothing to that anyways so I stalled now you have some interview questions to me it's more about the process that someone's going to follow to get more information right so okay so what would you do if you saw that like even if you told me well I'm going to Google the event codes obviously that's what someone's gonna do that's that's a good answer but then maybe I'll tell you what the event code means where are you gonna find more information about that and then I feel like even questions around networking sometimes can be useful just to know if someone has like a decent understanding of how networks work and it doesn't have to be like oh calculate the subnet of whatever you've got three seconds that doesn't really matter here's an IP packet what did the check some yeah exactly but it's more about just like the basics and then you're you're curious and your process for getting down to finding it is good like troubleshooting is the same thing right like if you just want to troubleshoot something you need to eliminate theories until you get to what's the thing that's broken and when you're investigating it's it's pretty similar so to me I'd rather hire someone with less experience that seems to know how to look for things and come up with theories and look at that then someone who can recite Windows event IDs by heart so yeah I agree completely with this because typically if I'm doing this if I'm running the IR team or the sock I'm not gonna be looking for somebody who is gonna be able to calculate packets like this is what Google is for right you know the skill testing questions are nice process is more interesting so don't you know don't be able to answer things by heart but understand how you're working I also say as when we do a lot of interviews for my employer like we this this sounds like advice that you be giving to like somebody who's newer but like we've read your resume who we know about what level you're supposed to be we've assigned someone to you who we like knows a little bit about that domain so they're like there to have a conversation with you so I think the biggest advice for that is just like if you put something on your resume please be ready to talk about it because weirdly that's like how we determine how we're gonna have a conversation with you to figure out all these things of like you know okay here's what you know but like you know are you interested in this or you know are you clever if like we give you these two pieces of information and you know something about this domain like you know can you put that together and yeah in one of my first interview for an internship when I was in the university I someone asked me about a personal project I put on my resume and I was like Pikachu face surprised and I was glad someone I was really talk about it but I didn't expect someone to to to ask questions about about all the aspects of my resume but it makes sense once you're you're you're used to interviews so this is all the time that we have so thanks everyone for the great community session and we'll see you tomorrow


Dr. Burke, welcome back. How are you? Good. Thank you. Thanks again for having me. So Dr. Burke, Judas is a figure that seems to get a lot of press, for lack of a better term, in apocryphal literature. One of the earliest that of Papias in his Exposition 4 discusses the death of Judas. It's just completely wild. Like he swells up like a garbage pill kid, essentially in verses in one of the recensions. So I don't know if you could just discuss those two recensions and are these the earliest examples besides the ones we have in Acts and Matthew regarding the death of Judas? I'll back up just a little bit. The version that you read is included in one of my books, The New Testament, Monokinonical Scriptures, Volume 1. The whole goal of this series is to present texts that people are not as aware of. Most people know Gospel of Thomas and Gospel of Mary and so on. But here was this story about the death of Judas that most people aren't aware of and I really wanted to include it in there. And you mentioned that Acts and Matthew have their own versions of the death of Judas. So already in The New Testament we have two separate versions of the story. And to have a third is quite interesting I think and it's a quite early one. Papias was writing around the middle of the second century, early second century maybe. We don't have the full text of Papias' work expositional on the sayings of the Lord, but we have quotations from it. And one of the things that Papias says is how much he values our early transmitted story. So he knows people who knew the Apostle. So he prefers those kinds of traditions over written traditions. So there's a bit of romanticism about Papias that he knows things that nobody else was aware of and the more material we can kind of pluck from our sources by Papias the better. So here we have this story and it's only again it's a quoted piece. It's found in commentary on scriptures. So someone quotes it in connection with the New Testament stories. And yeah it's a really interesting little story.  Judas kind of swells up and various body parts swell up as well and kind of explode. It's more original or truthful than the one we find in New Testament. I don't know if any of them are really truthful necessarily. They're they're almost caricatures, right? Any story is a you know the one thing that we know of the earliest about Judas is Paul mentions that Jesus on the night was betrayed or handed over. That's all Paul knew. And then when we get to the gospels we get this story kind of fleshed out. We don't know if that fleshing out by Matthew and the book of Acts or have any historical value at all. So I don't know. I'm not saying that Papias is any better necessarily than those. But it certainly is interesting and it follows a certain convention of that we see in other writings of the time where a person who's particularly vile their evil nature eats away at them from inside. We usually see okay so the story follows a convention that we see usually associated with tyrants so bad kings like Herod or King Agrippa or others where they meet their end usually by being kind of eaten away from the inside by worms or something like that. And the story of Judas is similar. It just shows you how a character who is so evil on the outside and does some terrible things they meet their justified end and it's from rotting from within and that's what we see in the Judas story. So very early on you have conflicting accounts of how Judas passed and it kind of culminates in these stories right and Papias and then Matthew and Luke and like you say Paul is the earliest account of Jesus being betrayed. But then we get a little bit later like centuries down the line and we have something which I found fascinating this text in your in your volume more New Testament apocrypha called the legend of the 30 pieces of silver. It's a really trippy story of the coins are very interesting in this story they almost function as like a monkey's paw or the lament configuration of you've ever seen the Hellraiser movies like it's just like this cursed object that changes hands through time and space and nothing good can come of it. It's kind of like in the heavy metal movie if you've seen that like the orb it goes it goes everywhere. Yeah it's it's interesting. So I was wondering what your further thoughts on the legend of the 30 pieces of silver are. I came across this text like I started an interest in it when I saw a reference to it in a manuscript catalog. So I was working on a particular manuscript and this this particular text was listed in there too and I hadn't seen it before and I have a blog it's called Apocryphicity and early on in the in the creation of this blog so years ago I had mentioned to it I mentioned the text and asked you know does anyone know anything about this text and a guy in Slovakia named Slavinia Cieplo you said I know a little bit about that and so the two started this working relationship on the text and we put together a critical edition of the Syriac tradition which had never been really worked on before. So I'm quite connected with this text and it's it's not very long it it's relatively short and it does tell this story of of where these silver pieces came from and how they intersect with various moments in biblical history so it's a bit of like a forest gump of these these these silver pieces so wherever there's some reference to money in biblical story if it's Joseph being purchased by I think it's Midianites his brothers sell him and so they get monies that that money that was the 30 silver pieces or Nebuchadnezzar is purchasing is plundering the temple he well he plunders those 30 silver pieces from there as well so they intersect in various ways until they finally come to to Judas well they come to the Jewish authorities first and then they pay Judas for betraying Jesus Jesus with these 30 pieces so yeah it really does intersects in various places in history. One of the the most interesting aspects of it to me is its connection to to actual coins that were collected by people in medieval times people you know like today they like to be connected with history in a very tactile way so they they they will purchase relics of some kind and these were actually gold coins so they had to be kind of a special explanation for how the silver coins became gold but you could purchase these these these Judas pennies and the text then will function as a kind of a a certificate of authority of authenticity should say for these coins because you can say well check out my coins and let me tell you the story because they they came originally from Terra who gave them to Abraham who gave them to so-and-so and so-and-so to Jews and now I have them and so you'll become part of that story right so I think that that that interplay between text and and coins is really interesting. Really an interesting aspect of the 30 pieces is over but also a lot of apocryphal text if I'm not mistaken have this kind of function in a way like your pieces of the True Cross and how the True Cross got this place for that place things like that so it's very interesting these origin stories of these important relics in the lore of the people around around it so they come full circle and this was another really interesting text the medieval life of Judas so I found this really really mind-blowing because Judas is almost portrayed like a tragic Greek anti-hero in some ways at certain aspects so I was wondering if you could further elaborate on just what that text is and your thoughts on it. Very popular text it's there's lots and lots of copies in lots and lots of languages but it's not often placed in collections of apocryphal text because it's it's relatively late it's maybe 9th century 10th century something like that most apocrypha collections tend to focus on the first three centuries that's why the more New Testament apocrypha series that I'm working with is trying to redress that by saying you know let's look at some text from from other time periods so we included this in I think the second volume of this series tells the story of the birth of Judas he's born to I think it's a wealthy man and the man receives a vision that this child will be the death of him in some way so he abandons the child but at first he marks up his ankle so he'll know to recognize him later on so there's a there's kind of an injury to the ankle and then he gets picked up by someone later on he grows up into the court of King Herod he ends up accidentally unbeknownst to him killing his father and then marrying his mother so it's a famous edifice story from as you say Greek tragedy and then it's discovered what happened and as a result though you know you know the story is not you know Judas is evil because he did these things it's he's a tragic character like you said and you feel a bit of sympathy for him to some extent and in various apocryphal texts we we see these kinds of efforts to not redeem Judas so much as try to understand him or try to find some sympathy for him right and this is one of those examples and there's a there's a another text called the Acts of Andrew and Paul and at one point in this Paul talks about going down to hell just like Jesus did and he meets Judas and Judas is all alone he's the last one there because of course he's not redeemed everyone else gets to go to heaven but Judas stays in hell but you do feel a bit of sympathy for the character because we hear of his efforts to try and get forgiveness from Jesus and one of the ways he did it was well at one point in the text Judas is like well I need to talk to Jesus I need to get forgiveness but he's on trial right now so what am I going to do I know I'll kill myself and then I'll meet him in the underworld and then I'll ask him for forgiveness so he's kind of this resourceful character in a way and a bit again a bit sympathetic he's eager for the forgiveness but of course Jesus doesn't forgive and so he remains in hell forever you know something like Nico Kazanzakis Kazanzakis yeah sorry similar names you know with the last temptation of Christ you know whether it be the book or the movie you know you have people still striving to kind of understand who he was not necessarily always sympathize with him and try to rehabilitate his character but to give him some depth you know maybe he's there are some ways we're we're uncomfortable but he is in a way relatable to you know some of our feelings so and you see that even in things like Dante you know Dante's treatment of Judas and the divine comedy trilogy you know people are just trying to understand this character and I think this kind of goes to my next question about a text that isn't necessarily apocryphal but it is a non-canonical text gospel of Judas is it fair to say that this is yet another like more lore in other in other words circulating among communities about Judas you know I'm not sure we can say how widespread that lore was compared to something like life of Judas or you know papias discussion of him but I was just wondering what do you think about Judas that's portrayed there versus what we see in these apocryphal texts you know about this gospel of Judas in history because it's mentioned by a church writer named Eusebius around 180 so it makes it fairly early mid second century and he talks about it as connected to a particular group called the Canites and you know describes a little bit so we know this text existed then because it matches the Irenaeus's description but we have this one copy of it and we only just found it so yet and so certainly not it seems widespread in antiquity and it didn't survive antiquity except for this one copy and it's an in-coptic so it's not the original language original language would have been Greek so yeah compared to like life of Judas or the silver pieces which have lots and lots of manuscripts and lots of different languages this is our only example of this one text and it's certainly unorthodox it's got some ideas in there that that mainstream Christianity would be quite uncomfortable with but as the story goes it's presented at I think it's the last supper so it's before Jesus died and Jesus is with the disciples with the apostles and Judas is there too but it portrays the apostles in a very negative way Jesus laughs at them at one point because he says they are worshiping the wrong god they think they're worshiping the real god but in this the system behind this text which is a Gnostic system there are two gods there's a god of this world who's an evil entity sometimes called Ealdibath or Sackles and then there's the true god which is where who Jesus is affiliated with he comes from that true god to come down to earth and tell people about their true origins that they should be up there in the heavens with the real god with the good god the apostles are are worshiping sacrificing so the sense that they're doing Jewish ritual practices as naturally they would to this earthly god and Jesus says you're all wrong Judas though seems to understand that that is not kosher like this is not the not the right thing so he asks Jesus for more teaching so Jesus gives him a whole bunch of cosmological information about how the universe was created and who the true god is and who who the lower god is and in the process says again some more nasty things about the apostles so what does this say about communities it seems to be a reflection of a Christian group or an expression of a Christian group that's at odds to some extent with Orthodox Christianity mainstream Christianity which is represented by the apostles and probably by the texts that are starting to become quite popular that will become the New Testament and our our writer has decided to use Judas as a foil for these and they say and they have Judas be the one who knows who Jesus is as opposed to the apostles as representatives of mainstream Christianity now when this text was discovered though the original editors of it the translators editors of it said here we have this text where Judas is presented as a hero he's the guy who knows everything right the other apostles don't and Jesus even praises him for for the role he has to play which is to betray him and thus make you know the providential history take its course but later editors said no no no that's not what the text says at all so on one particular part where it says where Jesus is talking to Judas and he says look at the apostles they're terrible you will surpass them well the original editor just said clearly he's a hero the new editor said no no no you read that wrong it what it really says is look at those those apostles they're terrible you will surpass them in your villainy because you are going to betray me so that we have these competing interpretations of the text here so it's good to know both of them get a sense of what we think this text is really saying and of course it the text when it was published made a big sensation so you have these very upset conservative television hosts saying are you saying this text says Judas was a hero and it's like no no no no we don't really think that at all and even so it's a text that says that doesn't mean that the real Judas was a hero we always be very careful that whatever we have in these texts are just the expression of the writers we don't know how they intersect with history at all but again it's a great little window into this conflict in the second century between Christian groups have different ideas about who Jesus was and about how God relates to humans and so they they they fight with one another through texts by choosing a certain apostle to be their champion and look and and having a main conflict with other apostles that they portray in as negative a light as possible so it's a lot of fun working with texts that do that kind of thing the whole hubbub about gospel of Judas and Judas was a hero and just remember recalling that and then reading Brackie's commentary on gospel of Judas now it's kind of like yeah they really fumbled but in a in a way it's very interesting because it's it's exactly what we're talking about right people are kind of seeing what they want to see and interpreting the character how they want to see it so very fascinating now I just want to shout call back to your point about last temptation of Christ and that that scene with Judas and so here we have Jesus agonizing about what what his role is and he's going to have to die and he's talking to Judas and Judas has to betray him and Jesus says to him yeah you you got the hard job you know so the betrayal is a harder job than dying in a horrible way and this is part of this nuanced view of Judas that that that's quite modern or we think it's quite modern but again we have these texts throughout history where people are still are struggling with the Judas character but what what to do with him and so it's not not as modern a pursuit as we might have thought but it people it just shows you how people really like to play with this character and I think because of thinking about themselves you know you know Judas yes he did this horrible horrible thing but we all do horrible things and and maybe if Judas is not so horrible maybe I'm not so horrible either right and if you really if you watch that movie it's almost like Judas has to really steer the ship at many times it's really interesting Jesus very very much waivers many times in that movie and Judas is the one who has to keep him going and it's just just an amazing like I love every like iteration of every character like I love Harry Dean Stan and as Paul there I love like Harvey Kai tells Judas everybody's so great that movie but did you have anything you wanted to plug before we go live to two kind of big projects that that I like to make people aware of that's my pocket from more non-canonical scriptures where the which is a collections of texts which we don't normally see in a pocket for collections these are texts that I have never been published before or haven't been looked at for quite some time so we have new manuscripts and new understandings of them and so we have two volumes that have been out and we have the third volume which is out any day now so maybe out by the time people are listening to this and information about those books are on my website which is Tony Burke dot ca so you can look there and you'll see you know the the table of contents and some preview material and if you're interested in grabbing a copy of that it'd be great and the other major work that's kind of a public outreach project is under the auspices of a group called Nascow the North American Society for the Study of Christian Apocryphal Literature and we're a group of scholars who of course work in the field and organization has a website just nascow.com and one of the things on that website is something called the eclavus and this is a big bibliographical resource for our Christian Apocryphal texts there's a 250 entries on there now probably another 100 left to go each dedicated to a particular text and you just click on one let's say the life of Judas it'll give you a summary of the text it'll give you lists of manuscripts links to manuscript images links to online scholarship and a list of non-online scholarship a whole bunch of other resources so it's free and it's open access and it's the great introductions to these texts and like I said there's hundreds of them so this will keep you very busy if you get a chance to take a look at it. As always it's been a pleasure having you on the show Dr Burke and you have a pleasant evening thank you


My name is Jian Qingjiang, and I'm from Nanan Cloud. And I will represent Jun Yuhe from Intel and Liang Zhang from China Tower to have this sharing. And the name is called China Tower's Edge Computing Solution based on Intel service and Stalix. We divided the whole sharing to four parts. And the first part is Nanan Cloud introduction. We have founded since 1912. And we have 200 staff in Shanghai, Beijing, et cetera. And we are the gold member of OpenStack Foundation. And we are the OpenStack CoA partner. And before that, and we are also the contributor to we contributes codes to some open source, like Kubernetes, SAP, and OpenDelight, and so on. Our advantage is we as a top two OpenStack community contributes. And we also have a member of Stalix Technical Committee of Edge Computing. And the second part is Edge Computing scenarios and the China Tower demand. Because traffic trains in the intelligent area of IoT, the traffic trains from MB to GB to TB level sensor flow and the ZB level network traffic. And the traffic, 50% traffic is from IoT device. And 79% IoT traffic gateway access, besides 40% IoT traffic, should be processed in the Edge. So with soaring traffic, we need Edge Computing strongly. And I also try to claim the main driving force of Edge Computing. I put this to four parts. And the first part is bandwidth pressure. Because TB level data cannot be uploaded to cloud for processing due to efficient bandwidth or high cost. And the second part is real time. The IoT environment requires local computing to improve analysis and operation efficiency. The third part is high security. When the network is interrupt, IoT devices can be independent and autonomous. They can be descent cities to data. And the last one is smart management. Because mass equipment and branches need to be unified and simple. So with remote management to reduce costs and increase efficiency should be a convenient. And the Edge Computing model, we think the structure should be like device access, nearest calculation, and services. Device access provides the equipment access tool to convince equipment of virus protocols and data commands provided by virus manufacturers into standard unified equipment models. And the devices can be from factory traffic, building, home, like this. And the nearest calculation on the certain resources equipment are calculated near the Edge. And the calculation will not be terminated when the network is interrupt. And we think Edge node contains device connection, function, calculation, and stream computing, and local cache. And the Edge node can connect IoT devices to Edge computing nodes quickly and safely. And the data can be processed quickly and in real time on the Edge, thereby greatly reducing latency. And the service is open up or think the service capabilities of the cloud. Next one, we add the introduction to China Tower. Because we have a project with Intel and China Tower. We put the starting X platform in China Tower's environment and with Intel service. So China Tower is a very large scale communications infrastructure. And China Tower is jointly founded by China Mobile, China Unicom, China Telecom, et cetera. And China Tower can have more than 1.9 million station states. So this large scale infrastructure is very suitable for Edge computing. And China Tower have machine room resource advantage. Because the China Tower site covers all over the country covering a variety of ground things with flexible equipment, mounting heights, and ample installation space, which is especially suitable for customs with large scale network construction needs. And China Tower, they are currently 1 million, have near 1 million compute rooms where there are communication towers. And the compute rooms are gently equipped near the tower. And each tower's distance between station sites is in the urban is 200 to 500 meters. And in rural area is 1 to 2 kilograms, kilometers. And travels, virus, things such as cities, countries, towns, rural areas, parks, et cetera. And the power resources advantage of China Tower is each state have a complete AC and DC power supply capability, including mains, battery parks, diesel generators, new area and other security methods to ensure continuous, safe, and stable power supply for equipment and worry free. And the advantage of China Tower's communication resource is each state have a complete. And the advantage of China Tower's communication resource is China Tower co-located with the operator's communication space to station, with unique wide and wireless communication condition. And we can rely on China Tower and China Tower can provide a reliable data return channel. And China towers also have flexible service advantage. And China Tower can provide a resource service, integration service, and data service, information service. So with China Tower, all these advantages we cooperate with China Tower. And China Tower's these advantages is very suitable for edge computing scenario. And the description of Nanan Cloud and Intel capability is China Tower has very much number of towers and the machine rooms. And China Tower plans to open the machine room resource to OTT vendors. And currently we have done technical tests with leading vendors, OTT manufacturers. And Nanan Cloud's study edge computing technology basically meets the needs of the tower involving center edge architecture security strategy called platform unified orchestration remote management monitoring, et cetera. And the second is the tower use Intel service and they use cloud computing technology to isolate different OTT vendors. And the pilot is mainly based on the machine rooms of the provincial company of the hardware environment. So through the environment of edge computing suits in each province, the whole country use a central node for management. The third part is introduction to Stalix technical capabilities. Stalix is a new top-level OpenStack Foundation pilot project to provide high performance low latency and high availability software states for edge cloud applications. Stalix provides major distributed infrastructure cloud technology for edge computing scenarios. And Stalix is very suit for transportation, energy, manufacture, et cetera, scenarios. And with Stalix central edge architecture, Stalix can directly provide geography, distributed multi-region deployment. And the central cloud provides unified orchestration and synonymous configuration capabilities. And Stalix provides geography, distributed edge cloud on demand, scale, configuration capabilities. And this is Stalix architecture. And Stalix with low latency Linux and contains OpenStack to provide VM and contains Kubernetes to provide to use Docker technical to provide the containers. And Stalix have host management, software management, configuration management, and service management. And the configuration management is Stalix installation automatically discover edge nodes. And the Stalix node configuration can remote to modify the remote edge nodes. And Stalix can discover remote resources. And the software management is Stalix can automatically deploy software updates to increasing security and the new features. And the Stalix integrated end-to-end rowing update solution. And Stalix also can support hot patch and the remote required patch at the same time. And Stalix can manage all software updates. And Stalix can have fault management. And Stalix can collect the fault message from edge node and can show in the central cloud. So the administrator don't need to access each edge cloud. We just the administrator just can check the horizon in the central cloud. So it's very convenient. The last part is the project technical structure introduction. These two pictures is the actual environment of Shanghai Tower deployment. And we put Stalix in the China Tower's machine room. And we put the edge cloud exactly the edge cloud in the Tower machine room. And so the device can access the resource with the near distance. So it can reduce latency. And this picture is the physical architecture of Shanghai Tower deployment. We have put three edge nodes in the whole environment. And there is the application on the edge node. And we have open stack in each edge node. In the central node, we have a CMP platform to manage the whole central cloud and edge cloud. And this server is deployed the management node. This management node can collect the information from the edge node. Thanks for your time. Any questions?


Hey, this is John from Blackstar. I'm here in our studio spending some time with the ID core amplifier I'm gonna show you some of my favorite sounds and settings you can get out of this amp


Hi, this is Dr. Ruscio and let's discuss if prebiotics can help with weight loss. Now what are prebiotics firstly? Prebiotics are compounds that feed our intestinal bacteria. So they're food for probiotics, you could almost say. So they feed the bacteria in our gut. And one of the reasons why prebiotics are attractive is because prebiotics help to feed the gut bacteria which then produce these compounds known as short chain fatty acids. And short chain fatty acids can be anti-inflammatory and help to repair your gut, your gut lining. So theoretically there's a lot of appeal in trying to increase the production of short chain fatty acids. But it's important especially as a healthcare consumer to realize that just because something can be good when we look at it under a microscope doesn't necessarily mean that the intervention that facilitates that compound is going to be helpful in a human. And short chain fatty acids and prebiotics actually illustrate what I think is an important example of that. Now interestingly in obese subjects and people who are significantly overweight, often times high levels of short chain fatty acids are reported. So that would be a little bit counterintuitive where you would think that high levels of this compound would be good. Even illustrating a concept that just because something is shown to be beneficial in this sense doesn't mean that more and more and more of that compound is better. So more is clearly not better being in a, you know, your physiological sweet spot zone is often times the best spot to be in. So this connects us to a current study that, and I'll put the abstract up here on the screen, essentially took a group of obese subjects and gave them prebiotics. And they actually saw the levels of short chain fatty acids decrease. This is very counterintuitive. You would think short chain fatty acids are fed by prebiotics. So how is it that when we give obese subjects prebiotics, the short chain fatty acids don't go up. They actually go down. Well perhaps what's happening here is the prebiotics are feeding good bacteria and as the good bacteria grow more, they're kind of policing out and crowding out some bad bacteria or some imbalanced bacteria. And when all these changes occur, the colony in the gut becomes more balanced and therefore we see more appropriate levels of short chain fatty acids. So it's not just about always trying to increase the levels. We have to decrease the levels and to think about this more globally, just because something is good in a small amount doesn't mean more is better, more is better, more is better. So in this case, prebiotics were given to obese subjects and their short chain fatty acids which are anti-inflammatory but also high in obese subjects came down even though prebiotics feed short chain fatty acids. So when we zoom way out, what does this really translate to in terms of effect? Well the fasting or the insulin levels in these obese subjects who received the prebiotic supplementation improved. Now if we look at this, it would be very simple to conclude that perhaps prebiotics would be healthy for weight loss. Even more so if you get roped into thinking mechanistically that prebiotics help increase in some cases short chain fatty acids and short chain fatty acids are healthy for the gut and I've heard that leaky gut can cause weight gain then prebiotics can probably help with my weight gain through repairing the gut. That theory is attractive but when we look at the clinical trials with prebiotics supplementation for weight loss, the best results that we see are about 2.3 pounds of weight loss and this is an overweight subjects. So that's something, right, but the effect size is fairly small. So the reason why I make this cautious commentary is because with the interest in the gut, which is great because I definitely believe the importance of the gut deserves attention but you have to be careful because you'll be bombarded with all these different media claims about the next weight loss cure or the next leaky gut miracle or what have you and it's just important that we contextualize that while prebiotics can do some interesting things, it doesn't appear that they cause a major or significant impact on your weight. Again, remembering that the best trial, at least to date, using prebiotics has shown about 2.3 pounds of weight loss. It's also important to keep in mind that sometimes you may hear estimates of prebiotics being able to produce a significantly higher amount of weight loss than 2.3 pounds. However, and here's where the devil is in the details, these are often times in studies where people go on a prebiotic supplement, change their diet, and start an exercise program. So if you say people lost 10 pounds when they went on a prebiotic, but you don't mention that they also changed their diet and started exercising, then you can't truthfully say that the prebiotic caused 10 pounds of weight loss. So just a few important notes for you as a healthcare consumer to be aware of that, well, yes, prebiotics may have a favorable impact on short chain of fatty acids and how those can be helpful for the gut. It doesn't necessarily mean that prebiotics are going to be hugely impactful for weight loss. Certainly something that has a time and a place prebiotics that is. But be cautious if you're getting room to think that prebiotics are going to have an appreciable effect on your weight loss. Okay, this is Dr. Ruscio and I hope this information helps you get healthy and get back to your life. Thanks.


Hello friends, I am Sanjay Gupta. In this video, I am going to demonstrate you how you can print reverse of natural number using recursion in C. Before starting, you can subscribe my YouTube channel by clicking on the link which is available at bottom right corner of this video. You can download my app Techimage that is containing various programming related material available on Google Play. You can connect with me by following these details which are available in front of you. Now, I am going to discuss a code with you which will demonstrate you how you can print reverse of natural numbers using recursion in C. The objective is written in first statement with the help of comment. Then I have included a header file. Then a function is declared void reverse int. Its return type is void. That means it will not return any value and it will receive an integer as input. Then main function which is containing two variables n and s. Then printf and scanf is available. Printf will print enter value of n on console and the entered value will be received by scanf and that number will be stored inside n. Then at line number 9 you can see a function call is available that is reverse of n. So this n will be passed inside the definition. And return 0 because return type of main is integer. That's why return 0 is available. After completion of main, this definition is for reverse function and this function is a recursive function because it is called again inside its definition. You can see here this is the calling statement and this complete block from line number 12 to 22 is function definition. So whenever we call a function inside its definition that function becomes recursive function. It is containing a base condition which is n equals to 0. If condition is true then return will terminate the recursive calling. Otherwise else will be executed which is displaying value of n on console and return statement is calling reverse of n minus 1. So each time n is decremented by 1 and it is called again reverse function and the decremented value will be printed on console. So this is the complete code which will display reverse of natural numbers on console. Now I am going to execute this code. I am entering 10. You can see 10, 9, 8, 7, 6, 5, 4, 3, 2 and 1. These values are displayed on console as reverse of natural number. So with the help of this demonstration I hope you have understood how you can implement a program using recursive and C to display reverse of natural numbers. If you want to watch more programming related videos you can subscribe my YouTube channel. Thank you for watching this video.


To begin this event with may now call upon Dr. Anurag Batra chairman editor-in-chief of exchange for media group and BW business world on stage, please and The applause can go on my friends. Come on. Thank you Sacrifice the lunch and he was polishing off on his presentation Mr. Shamsingh Anya was an investment banker Chairman of in our capital partner novel all my editorial colleagues from business world in exchange for media and industry leaders I Said mr. Sushant you but says a special person to do this for many many years in in in media We've worked with professionals and leaders from the media industry and that's good That's not a bad thing But if you look at some of the media companies that have grown and they have grown and transformed and they've grown at a scale That wasn't envisaged when those companies existed Was because they got leaders from outside the media industry and again a lot of people have a my friend Suresh is there a lot of people have a different point of view on that But my personal point of view is when me and now and I'm it started exchange for media We didn't come from the media industry. I and now I did what most Indians do before they do anything We went to an engineering school Then we went to a business school and we didn't start exchange for media to build a media company We wanted to build a marketplace for media advertising communication and we tried that for about three and a half year We were ahead of time because we started it in 2001 the reason I'm saying because we were outside as we had no clue We had no limits on ourselves. We just keep kept doing what Kept coming along and opportunity That were thrown our way So in that sense the point I'm trying to make is you looked at the AV of the Viacom group the Viacom 18 media group Mr. Watts who comes from Leavers has been at the helm of fairs for more than seven years and I think he's just getting started and his own while the team today is Transforming transforming businesses in the digital age His team is Harmonizing kiosk in a new world order that could be the billboard in every media company Especially our office because we in the media industry are dealing with challenges that are unprecedented technology challenges audience challenges cost pressures being futuristic The entrepreneurial opportunities is throwing for colleagues in the business which creates its own turnover. So really He has transformed the business grown the business and is now harmonizing his own business in a way That the 800 million people that Viacom 18 media group reaches out to are able to enjoy New worlds. So I hope when you listen to him You will get something that has a structured perspective has the benefit of experience That comes from building a large media company that he's built and third Being futuristic and thinking five to ten years ahead because the kind of background He has he has been trained to do that since I am now a part of the ecosystem I don't want to keep a long presentation But I have two slides to show and these are you know, I got them on a WhatsApp from a friend two different friends and Ravneeth the first one, you know Because you can't talk of marketing audiences without talking of digital They're kind of synonymous and I got this yesterday. They said the old saying of seven sins When it's applied to the marketing world and you know The seven sins in digital world are accomplished lust is accomplished to tinder. I'm not a tinder I must neither in Star Wars nor is novel I can talk about them Gluttony, I don't need it. I am not on yeah, you know, but I have other ways to fulfill that Greed LinkedIn, I am on LinkedIn, but I'll tell you my being on lingers and nothing to do with greed It's you know, I will you know, it's it's a daily activity for me to put thoughts because I get feedback from the community that it helps them. It helps me certainly So I do it as a way of giving back But I understand what it's trying to say Sloth, which is Netflix. I wouldn't call it sloth. I would have called it something else But because it's trying to put it in the context rat twitter that I definitely agree An envy is facebook, you know, everybody's life on facebook is like you know, Donald Trump's life or whoever's life you like, you know run we Life or Shahrukh's life and pride is Instagram. I've recently gone on to Instagram And you know, I'm trying to be Instagram friendly. I also got another WhatsApp needs the second And you know in an increasingly digital world The fact that we are doing this conference face to face the fact that you're in the room And we keep talking about this impact of technology and what machine learning and artificial artificial intelligence will do to our business But the human touch Will always have a premium and it'll always stay You know the value of being able to have a conversation or kill somebody Not literally kill but kill in a conversation You can't get that on I mean twitter cannot give you that experience but the more We are connected The word I came across recently Jomo The joy of missing out feeling content with staying in and disconnecting as a form of self care And its end to name is FOMO. So really we live in a very paradoxical world. We want Jomo and we want FOMO so Marketing today has become about dealing with paradoxes. I want to end by saying I've given this example in the past and I would like to give it as my parting example I'm a student of marketing. So I don't know enough. I'm learning. I like that song called higher ground from ub 40 the more I know the less I know Um I want to say that the stereotypes are changing. There is a new normal And though it's a now our 18 month old movie. I'll refer to oceans hate. It is a all women's cast When we watched oceans 11 and ocean 13 we could have never imagined of a Ocean franchise having all women cast so the the role models are changing um What consumers and citizen and individuals Are looking up to is changing So really marketers have to keep pace and nobody knows Enough. I think we love live in a world where nobody knows enough And we're constantly being bombarded with content. So increasingly brands play a larger role I would like to say that a world where there's so much uncertainty. There's so much flux Uh brands Continue to be the guiding force Today when you talk to millenials and young leaders, uh, they not only talk of their families their grandfather father mother But they talk about their experiences and their interfaces of brand some of those experiences and interfacing are Defining moments of these millenials life. So in this increasingly connected digital Paradoxical world brands show the way because leaders are failing. Thank you.


The learners, we shall take up the part 2 of your unit that is on industrial policies. This is a part of your business environment course and the industrial policies we have been discussing in the previous part, we discuss about the mixed economy, liberalisation etcetera. And in this part, we shall take up 3 learning objectives. One is to outline the evolution of industrial policies in India, to outline the industrial policies liberalisation 1948 to 1991, to explain the pieces of new industrial policy NEP 1991. In the previous video also, I told you that from the beginning of 1990s, there have been certain changes in the industrial policies, the way business are conducted in our country. And we got independence in 1947, 1948 the first industrial policy liberalisation were made, till 1991 a series of industrial policy liberalisation were made. And in order to understand the present day functioning of the industries, we need to understand the historical context, to that extent we should be clear about the evolution of industrial policies in our country. Because what we are experiencing today is not the turn out of some overnight measures, it is all are accumulated effects of the different policies that our successive governments have taken over the last few decades. So it is all started from 1948, when India got independence in 1947, before that we were under the British regime. So when we were under the British regime, the things were a bit different. As we all know, Mahatma Gandhi propounded that Swaraj, we need to be self-sufficient and in order to do that, we need to be with our small cottage industries, handloom industries, handicraft, all this. With the advent of British rule in India, Indian industries faced threats. Earlier our Indian exporters exported spices, textiles, we were doing lot many things. But when British came to India, our Indian industries started facing threats. Industrial revolution in England, Manchester, textile industries, so they had enormous production that needs to be sold. So where it needs to be sold? They were in charge of the territories, in charge of the colonies. So India became a colony. So those products which came out because of the industrial revolution in England and at the same time their trade policy, that they will make all these things available at the same time, they will not promote, they will not create a congenial environment for the Indian industries on this paved the industrialization in pre-independence era. But post-independence, India adopted the industrial policy resolutions on 6th April 1948. My dear learners, the way as we are living as on today, we are having lot many products which are made available by our industries. Think about the situation at the time of independence. British left us, we did not have many industries. So we need to adopt the industrial policy resolutions. So 1948, the first industrial policy resolutions were adopted. And because of this, the country was in a position to have various procedures, principles, rules, regulations for controlling industrial enterprises. We discussed in part one of this video about the mixed economy and this got reflected in the industrial policies. So 1948 contemplated a mixed economy, that there will be share of public sector as well as private sector. Both will co-exist. 1948 exclusive government monopoly and unregulated private enterprises. The private enterprises will have to be regulated. And suppose railways, defense, etc., government will have that. Majority say 1956, another set of industrial policy resolutions came out and that was mostly concerned about new classification of industries for state and private sectors by developing schedules. Certain schedules were developed and certain of those schedules, certain items were reserved for small industries and certain items were reserved for foreign investment. So this was a landmark thing in 1956 industrial policy resolutions. 1977 another development took place. So development of small-scale industrial sector, areas for large-scale sector, for capital goods, high technology industries, etc., came in. 1980s reaffirming fate in MRTP and FARA, de-reserving items from SSI. So in 1980 some major development took place in terms of creating the pathways for liberalization, which started in early 1990s. So during the tenure of Rajiv Gandhi government, there were the banks, the private sector banks came in. Computerizations were highly propounded despite the hostility, despite the protests by the bank unions. So these were some of the things which started taking place in 1980s. And then in 1991 to respond to the call of the liberalization on 24th July 1991, then by the Narasimha Rao government, when Dr. Manmohan Singh was the finance minister, the new industrial policy 1991, that came into being. So evolution of industrial licensing, India was earlier known as license raj. So licensing, there were loss of ease. It was not that difficult. Earlier suppose there were bazaar scooters, like they will have to have a license of manufacturing 5000 scooters only. Now that if the market can absorb, they can manufacture 50000 also, something of that sort. So earlier the capacity was defined. Now that it has to respond to the market forces. Policy regarding public sector list reduced to 8 from 17. So that is the DCDO link. Foreign technology and investment and encouragement, that was another feature of 1991 industrial policy. Removal of mandatory convertible clause banks had the right to convert low amount into equity. Earlier they were not having that privilege. Market friendly and entrepreneurial family, the economy becoming more and more of market friendly and entrepreneurial family. And first real end of license permit raj. Earlier suppose the cement factory, the tons will be specified this much tons only. Now that you can have your own size provided market can absorb it, provided you can sell it. So that is the spirit of revitalization, that is the spirit of privatization, that is the spirit of globalization, which where the major officials which were incorporated into the policy framework of 1991. So thank you. We shall cover the remaining two learning objectives in part three of the video. Thank you.


Okay, we're back here live in New York City. This is siliconangle.com and wikibond.org's coverage, exclusive coverage of HP Moonshot where the game is changing at the server, data center, cloud mobile and social and inflection point where the transformation to a new modern era is occurring and HP is leading the charge. I'm John Furrier with SiliconANGLE. I'm joined by co-host. I'm Dave Vellante at wikibond.org and we're here with Lakshmi Mandiam, who's with ARM. She's the director of server and ecosystems and Mark Andreessen I think said software is eating the world, open source software is eating the software world and ARM is eating everything else. You guys have just been smoking hot company, created unreal innovation and welcome to the queue. Thank you. Thank you for having us. Yeah, so we were here at 2011, the original Moonshot announcement and you guys kind of got this whole thing started with HP. So a lot has happened since then. Yeah. We'll update on ARM and we'll get into some of what you're doing. It's actually been a really exciting period from the server program perspective. I mean, think about, you know, fourth quarter 2011, it wasn't that long ago, even though we feel like it was long, it was only about 14 months and we've seen this groundswell in terms of ARM and servers. So it was exciting for me personally today watching three of our partners talking about server cartridges for the Moonshot program. I think originally Calzada was the one that was announced but we've had TI, Applied Micro and Calzada and I think the beauty of it was that each of them brings their own special sauce to the equation and I think that's what this whole launch to me has been about in terms of people thinking about the server and the data center paradigm completely differently and how can innovation occur on, I think you talked about workload specific optimizations, heterogeneous processing, all of the elements that ARM and partners are used to doing in other spheres of operation are now coming to the server. I think that's great. Our colleague David Flora, of course he's from England, he calls it horses for courses. That's right. I've heard that a lot at work. And so we see, is this the end of the one size fits all kind of vanilla server world? I think it's certainly a step in that direction. I mean, if you think about the real world challenges that people are facing, you know, they cannot afford to waste even a single watt in terms of trying to sustain generic general purpose processing. And I think the benefit of the ARM architecture is you kind of get the benefits of standardization and being able to run generic workloads, but you also get the benefit of heterogeneous processing and specialization, for example, applied micro talking about their networking and connectivity background, TI talking about their DSP and signal processing background, and of course, Calzada talking about integration of storage fabric and ethernet switching and all these kinds of things. And there are other partners that are part of the Pathfinder ecosystem that were mentioned like, you know, Marvell, for example, has expertise in storage. And so there's a whole bunch of different partners that have expertise in these various domains. And now as we're seeing this application convergence happening, they're able to bring those, that expertise to bear and take advantage of standard ARM server platforms with that special sauce. And I think that's what's going to make the world of difference. So oftentimes when you see a new market emerging, it's highly integrated. This one seems to be starting off disintegrated and very specialized. Now perhaps, you know, in mobile, it started out fairly integrated. So this is a natural outgrowth of that trend, and can the market support that much disintegration? Well, I think that, you know, where there is a need, I think, you know, and I don't think of ARM as only playing in the specialized parts of that equation. I just think the new normal is going to be more integration. And so I think ARM is just very well positioned in terms of the partnerships that we have, the processor technology that we're bringing to bear. And it's not just about processor, it's also about process technology as well. So, you know, we have multiple FAB partners that are talking about 16 nanometer and below FinFET designs. And so I think it's the entire ecosystem of innovation that's come into play. And I mean, we talked today, I mean, there are other partners that have announced 16 core ARM-based designs that are going into networking and other applications. So I think you'll just, you'll start to see more and more deployment of the ARM architecture pervasively in enterprise spaces, not just the servers. Yeah, so when did this all take us back to sort of the inside baseball many, many years ago when ARM said, all right, we're really doing well and, you know, the smartphone space. And, but we see a much broader application for this.  It's kind of interesting. It's a bit of a combination of both, you know. So we've, I think, really the server activity probably started about four to five years ago. And we actually had an OEM that called us and said, you know what? I'm running out of power. I'm running out of space.  But it wasn't catastrophic because, you know, it's an ARM-based server. And so mobile and having that power envelope really helps. Well, or else. But essentially, you know, having the battery operated, you know, philosophy in terms of your design just naturally leads to more energy efficiency. But also in terms of having to navigate down the cost curve and have more and more integration, you know, that helps as well. And so really I think, you know, I think Dave talked about it this morning about how the ecosystem is now being driven by mobile and tablets. And so, you know, we've had people that have called us and said, you know, how do we take advantage of the power efficiency, the integration and the cost curve? And I think just the intellectual capital in terms of people investing in the ARM architecture from, you know, your software engineers that are developing on the ARM architecture.  That's just, the numbers are astounding. It is astounding. It's a volume game. And also it gives you advanced visibility into the software innovations that are going on. So can you talk about the software activities that are going on in the ecosystem? Absolutely. So if we think about where, you know, we have gotten traction just specifically from the service space, it's really been around open source. And I think back in, I want to say it was 2011, we had partners, you know, running Ubuntu, you know, Canonical announced a commercial deployment of Ubuntu and long term support for Ubuntu. And so has Red Hat has also demonstrated. And so what we're seeing is that that kind of open system innovation has been occurring. And I'm actually invested in a not-for-profit company called Lanaro, which is focused on Linux innovation. And this is a great example of our business model because it's arm and partners collaborating together, sharing engineering resources to drive innovation. And so last fall we announced the Lanaro Enterprise Group. And this was focused on server software. And HP is a member of that. And so, you know, we had 14 companies that were part of that, HP, Facebook and others. And so you can see this kind of collaboration trying to accelerate time to market. And I think Dave talked about how now with this new Pathfinder ecosystem that they have, they expect to be able to get things three times faster than they could historically. And this is again an example of where they're not reliant on historical cadences or limitations in terms of the ecosystem to be able to drive innovation. Yeah, so HP, obviously, leader here out in front, but presumably you're getting inquiries from other large OEMs. There's definitely a number of servers that have been announced based on the arm architecture. There's been a commercial rollout of a storage server based on the arm architecture. So there's quite a bit of activity that's ongoing. And I think, you know, we've had our partners, Calzada and TI and others, that have systems out there now. And of course, Applied Micro is also bringing out the 64-bit system. And I think you'll start to see more and more partners come out in terms of their solutions based on 64-bit architecture. And I think you'll see. We had Ian Ferguson on our last moon shot, just to get some of the video here. But, you know, take us through from that time 14 months ago to today, and also talk about the software market that's changed. Obviously, we don't want the software to find data center. The servers are a big part of that, the programmability, some of the efficiencies in management, all that good stuff. What's happening now? Where's the demand that you see in the marketplace that's you guys are addressing? Can you talk about some of those key changes that's happened since 14 months ago and kind of where is it going in the next couple years? Yeah, so I talked about having Oracle, for example, announcing Java support for 32-bit ARM processors. And last year, they mentioned at TechCon, which is our show, that they would support 64-bit. And so you're starting to see workloads like Hadoop and other things that are dependent on open source and Java, for example, being run now on the ARM architecture. And so we're starting to see a number of different workloads. I think earlier today, several people talked about tuning their workloads specifically and even looking at how they can optimize their workloads. So we see that pervasively in storage servers, data analytics, content delivery networks, all of these different areas. And the main driver is energy? Well, actually, it's not just energy. It's really around total cost of ownership. So when I say that, OPEX is one aspect of it, which is the energy. But it's also around performance density. And I think today, they talked about how they want to achieve greater and greater performance density. So it's really about saving floor space, saving facilities, power and cooling, saving cost of acquisition in terms of reducing the number of components, increased reliability because you're not now dependent on one server now. So I think it's all of these. Yeah, we have people on Twitter basically saying, that's all gray, but that's not software-defined servers. Right. What is software-defined servers? I think people are defining what software-defined servers are. It's not defined yet. So it's software-led. That's what we always say. So it's not yet defined. And I think the beauty of software-defined is at the end of the day, the end user is going to drive what is software-defined, right? And that's driven by the apps. Yeah, it's driven by the applications. It's driven by the kind of workloads. Well, you know, when I come back to the hyperscale space, and to me, those guys are software-defined because they just want to commoditize the infrastructure and they want to automate everything. Exactly. No humans. I would consider that software-defined, and I would consider the traditional enterprises, anything but that. So now there's aspects of that that they want to get to. And I think a portion of the enterprise, you know, will. But it's going to take some time. And then, of course, the other thing is they're going to have to rely on either suppliers like HP or Oracle or whomever, software companies to deliver that, or they're going to go to the cloud. Right. Talk about how you see those two, or do you see those two worlds, that hyperscale world and the traditional enterprise coming together, are they going to blend? Are they going to stay quite distinct for some time? I think it depends. You should be an analyst, by the way. No. Okay. Okay. But it does depend, right? Are you hired? No. We are, actually. So. We're looking for a software-defined. We need more time. So, so I actually think that, you know, long-term people can't ignore this trend, right?  And if you think about cost of, you know, for a small, medium business, you know, is it going to be cheaper for them to deploy on the cloud or deploy on their own enterprise? So I think enterprises will have to start looking at how, because I'm sure CIOs are going to say, why can't I go and deploy on Cloud Service X? You know, what benefit are you bringing for me? And so I think enterprises will have to respond to either rethink the way they're doing business as an enterprise, or think about options where maybe some workloads go to the cloud, some stay in-house. So I think there's going to be a shift in the way people are thinking about how to solve these challenges. And the innovation, this is what I love so much about ARM, is because the innovation is all coming from consumer. It's coming from the web-scale giants. And their harbingers, they're showing the traditional data center. It's not only the CIOs. I'd say it's the CEO who's saying, why am I a Facebook at home so easy? My Gmail is so easy. Why is it my Enterprise IT? We understand why. It's like the user experience. You hit the nail on the head, right? So I'm used to using my tablet, my mobile device. I'm able to drag and drop things and make things easier. So in the end of the day, I want that experience everywhere. And that experience today is on ARM. Right. And I think that's why it makes it easier for people to think about duplicating that in other areas. So do you think we'll see that experience in the traditional data center over the next decade? I hope so. I hope so too. I mean, the complexity in the back end is still very high, but from a user standpoint, you guys are at the heart of that. Exactly. And I think, again, this fundamental shift of always on, always connected today. We've all been on Twitter all day. Right? I mean, that's just the way life is now. And I think people are starting to look at economies of scale in terms of making that experience better for people. An utilization too that's come up too. I was having the ability to have low power, high performance, variable based workload management. It's really orchestration is key. It's key. And I think this big debate about, again, the many, I think Carl Freund talked about it earlier, you know, having many nodes that deliver, it's really about performance per watt for the end user. It's not about anything else. Yeah, it's going to be funny.  I think telematics, all those technology at the edge of the network is producing data. It's connected. It's amazing. And this is an obvious path. Yeah. And I mean, other markets are doing it, for example, base stations, which used to have many, many complex processors are now going to a base station on the chip. We've had server on a chip from some of the ARM partners that talk today. So I think that's just, it is SOC, and how do you innovate in the SOC to deliver the best performance per watt or best performance per dollar, whatever your metric is, and I think ARM, because of the breadth that we have, can compete on any of those vectors. Yeah. And the metrics are changing. I want to talk about competition a little bit, because you guys are obviously very disruptive. And of course, we've seen, John and I are a little older, and we've seen all kinds of disruptions over the years, but the guys who got disrupted in the 80s and 90s were kind of dumb and arrogant, and the guys that are being disrupted now aren't, and they have a lot of money, and they have a lot of resources. So talk about the competitive dynamic that you're seeing today, and how does ARM stay ahead? How does it compete with the big whales? You know, at ARM we have a really, our whole business model, and I think this is what is really well aligned to what HB was announcing today. It's really about partnership and ecosystem. And so when you think about ARM, it's not ARM, it's ARM and partners, which actually we have a thousand connected community partners. So it's ARM and partners. And so I think the other aspect of it is, because of the way the IP is developed, and the way we have a very long-term view. So things that I'm working on, I'm really looking at 2015, 2016. I'm talking to people about their plans for 2015, 2016. So you really have a long-term view in terms of where people are going, and you can predict trends and innovation. And I think we view our success as our partner's success as well. So it's not just a single entity ARM, it's ARM and partners. If you think about where people can optimize, so people like Calzada, for example, are optimizing on performance with a balanced I.O. and Applied Micro has said, hey, we're going to go after the super high-end. So if you think about... You're specializing in use cases that they can really get a position in and grow. Right, exactly. And so we scale.  So I think it's the scale and the ability to pick your optimization points. So it's not just a single entity. It's many working together and collaborating. And I think that's what the difference is. Yeah, and you guys are in it for the long run. Yes. I would say, I mean, you're pretty much at these levels, I would say pretty much acquisition-proof. Not that there's been a lot of speculation there, but one never knows. But no, seriously, I mean, you're trying to be one of the next big whales, right? Absolutely. With a little bit more speed, I presume. Oh, yeah, definitely.  Less power. Definitely less power. Fast swimming whales. Maybe like a sleek eel. How about that? How about we go with a sleek eel or something like that? No, but jokes apart, I think we're definitely focused on the long term. And if you think about it, you know, we're still shipping our Arm7, which was invented in 1993 or something still in pretty high volume. So, you know, the reason that people look at Arm also is because they view us as being a long-term strategic partner. And I think that's fundamental to the way we operate. All right. Good. Exciting stuff. Huge volumes. Big disruption. Lakshmi, thanks very much for coming on theCUBE and sharing your thoughts with us. Yeah, thank you for having me. I really appreciate it. Okay, we'll be right back with more great action here and wind down and get all the action from H.P. Moonshot, right handed down, John Furrier with Dave Vellante here. It's looking at you. We'll be right back with our next guest after this short break. Thank you.