Chrome 50 adds support for payloads and push messages and adds new features to notifications. You can preload important resources with the link rel preload tag and the canvas element gets an upgrade. Let's dive in and see what's new for developers in Chrome 50. Push notifications allow you to trigger system level notifications in the same way that native applications do. In Chrome 50, you can now include an encrypted data payload with the push, eliminating the need for the service worker to fetch the data needed for the notification. And it's already supported by Firefox using the web push API. You can now dismiss notifications across devices when closed by the user on one device and you have more control over how notifications look and behave. You can set icons on actions, set custom timestamps and even specify whether the device should vibrate or make a sound. Have you ever wanted to let the browser know about an important font, script or other resource that will be needed later without delaying the onload event? Chrome now supports the link rel preload tag, a W3C draft spec that allows you to tell the browser which resources should be preemptively downloaded and can reduce the time to get real content on screen. Link rel preload replaces link rel sub-resource, which had a number of bugs and drawbacks and wasn't supported by other browsers. The canvas element now supports the to blob method, which means instead of manipulating base 64 encoded strings that you get from two data URL, you can now work with the encoded binary data directly. It's smaller and tends to fit more use cases than a data URI. Not only can you more easily upload them to your server or store them in index DB for later use, you can draw the image blobs to another canvas context with a create image bitmap API supported today in Chrome and Firefox. One other quick note, the geolocation APIs are now only accessible when served from a secure origin. These are just a few of the changes in Chrome 50 for developers. Check the description for more details and be sure to like and subscribe. I'm Pete LaPage and as soon as Chrome 51 is released, I'll be right here to tell you what's new in Chrome.


Mae nesaf dr Samir Puri. Mae'r lectoraeth i ddechrau a ddechrau ar Llywodraeth King's College London. Mae gennym eu ddweud o'r rheswerth. Mae'r ddechrau yn ymgyrch ymddiadau, a'r ddweud o'r ddechrau yn ymgyrchau arall, ac yn ymgyrch ymddiadau. Mae'r ddechrau'r ddechrau ar gyfer maesidau a'r ddechrau arall. Mae'n bwysig o'r ddechrau ar y ddechrau. Mae'n ddweud o'r ddechrau ar y ddechrau ar y ddechrau grips o yelledau dopech gennym. The result is the practical experience in Islam around the war in the city in Ukraine, which I bring to direct on my research and my teaching in contemporary warfare, and I've got some experience working across experienced of Think on terrorism for the British government and I bring those experiences to teaching I can plug in the research and the work that King's does back to the departments I've worked in, but I can also provide a conduit, if you like, between the academic research and some of the practical responses to these problems as they're unfolding in the world today. One very recent example is a piece of work I've just finished for the Commonwealth Secretariat and that was to write a countering violent extremism strategy for the Commonwealth which is entering this particular space for the very first time. Policy-making bodies such as the Commonwealth never want to reinvent the wheel. They want to understand what's already been done, the hard-won lessons that previous generations of people have already accumulated in a difficult area such as countering terrorism. So I was able to bring some of the latest research, including research that's being conducted at King's to be able to inform the strategy writing process. My book, which I published in 2016, is called Fighting and Negotiating with Armed Groups, the difficulty of securing strategic outcomes. This book asks one very simple question which is quite relevant for a number of conflicts as they're unfolding around the world today. That question is how do governments manage security measures that they are bringing to bear on the problem with the possible political strategies that they're also exploring? For example, if you're engaging in negotiation with an armed group, there's a likelihood of needing to keep on security measures, military tactics, intelligence and policing and so on. Over the course of 10 case studies I examine the different ways in which governments around the world have dealt with this particular challenge, regardless of whether they're pushing for a military solution or a negotiative settlement. There's likely to be a mix of both approaches in any particular scenario.


I think all of us, we can agree that we don't want to get discriminated by our privacy decisions. So will our next speaker, Kirill, tell us about the toll of personal privacy in 2018. Please welcome Kirill Soloviyovs and give him a warm applause. Privacy is dead. We hear that a lot recently. Some of us, especially people here at this event today, may think those are just bad guys, those are just naysayers saying what they want to be true. But aren't we fooling ourselves? Maybe privacy is actually dead. If we look at new products, new ideas appearing on the market, what we mostly see is that none of the products take security into account. Like, look at this nice tweet from, it's a valid account, the real one, People's Daily China from this year. What else can surveillance cameras do in classroom other than exams and provision? And they actually have this great system that they're really excited about, where, you know, they take a look at how students study. Here's a Chinese classroom in question. And normal, usual classroom, except of course we have a camera. We have a set of cameras set up in there. And how the system works is that teacher gets this automatic view of students sitting, studying how many students are there, are they paying attention, are they bored, are they happy, are they afraid? So imagine being in a classroom and not doing your homework.  You don't want to be cold, you don't want to be asked to report on your homework. Teacher immediately sees that. And of course if you're sleeping after a party. I mean, there is a good intention behind that. Making systems more effective. Not only this example here, other examples as well. But privacy is what's always at stake. And privacy is what's never thought about enough in my opinion. But okay, if you look at the examples I've given, you know, that's just China being China. Europe doesn't do that for sure, right? Well, I thought that as well until I decided to take a look deeper and to make this presentation to share the state of the privacy with you. So let's look at visas. I travel a lot, but I try to avoid some territories. I try to avoid some countries because I don't feel particularly comfortable with a foreign government holding my biometrics. So that's why I've never been to the U.S. I just can't trust the government, let alone the president. That's there right now. But I just can't trust the government that wants all your 10 finger friends when you enter the country.  Anyway, speaking of Europe. So I thought it's just something that U.S. does maybe some other countries. Japan, but Japan I think only does one finger or two fingers. However, what I learned is that for many different countries, many nationals coming to Europe, coming into Schengen, the process is quite similar. Before making this presentation, I never thought about the fact that those people also need to give their fingerprints to come into Europe, come into Schengen. So we aren't much better in that regard than the other countries. Okay, but you know, once again, as Europeans, and most of you here are Europeans, we may say it's not our problem, even though that's not a good thing to say, still. You know, we don't have to deal with that. But passports, we do have to have a passport, especially if you want to travel, right? So I'm going to tell you about Latvia. That's where I come from. So originally, of course, passports didn't have any biometric data in them, the classical good old passports. Then maybe 10 years ago, a change happened. And the government started requiring you to give up your fingerprint to sort inside a passport. Even though I'm a privacy zealot, I think that's a good thing, right? Because passport forgery and terrorism migration around the world where terrorists try to infiltrate different countries and bomb a building, let's say, that's something that is not a good thing, right? So passport, as long as the fingerprint is inside the passport, in a secure container, that's okay with me. But the thing is, so I made my passport, I got it. But the thing is, I had a suspicion that what they're actually doing is they are also storing the fingerprint in a database. So I asked around. Most countries in Europe have this equivalent of the US Freedom of Information Act, which allows you to ask what your government is doing with data. So I asked around and they said, yeah, yeah, we are actually also storing the hash of the fingerprint centrally in a database, not only your passport. I told them, hey, but that's illegal. You can't do that. And then they drafted the law. So we were having this conversation over postal mail for like two or three months and while we were doing that, they were quickly, really in a fast pace, making a law saying that they can't do that, that they can actually store the hash of the fingerprint. But turns out they are now storing the whole fingerprint, even though that's not what they promised. So, you know, it's not that simple. It's not that easy. It's probably even here in Europe. Of course, banks. Anyone here doesn't have or doesn't use at least monthly a banking card? Three people, four, okay. Four people and me. That's five people here in this quite large crowd. So you should realize, yeah, applause to the four people, of course. You should realize, of course, and I think you know that, you know where you shop. They know what you buy. If it's a large product, they can distinguish it by the price, right? You go to an car dealership and they know if you buy the premium model or the lower end model, right? Anyway, then of course we have online profiling. It's a thing all over the world. It's borderless. It doesn't matter if you're in Europe, if you're the US, you get profiled. Even if you don't have a Facebook account. Well, but luckily for us here in Europe, EU has fixed that quite some time ago. EU fixed that in May 2011. So what they did, they said users have to be notified of cookies. So that fixes it, right? Well, not really. But then seven years later, May, they love May for some reason. EU fixed that in May 2013, right? GDPR. Now we're safe, huh? Now we get this notice in addition to the previous notice. So, you know, we're trying to fix that really hard. It's not working yet. I do hope that the low, loud cases that are coming where big corporations will get sued for large amount of money will actually bring changes to that. But for now, we are still fighting a bit. Then we have CCTV. And there's one country in Europe that we still have this year that really loves their CCTV. And here are some actual posters, actual photos of actual posters. I mean, I could have taken the poster pictures and put it nicely, but I just want you to believe that it's a real photo. That's a real poster put up by the government in the UK. So they have this nice poster saying secure beneath the watchful eyes, right? Then they have this poster saying more CCTV means more security for you. And, of course, my favorite also, we are watching you. Okay, this one isn't real. I removed a couple of words from there, but it's basically what it says anyway, right? We're watching out for you. So that's what's happening. And they're selling CCTV as if it's some kind of great feature for you. Okay. But it doesn't really matter because everyone knows that privacy is for criminals, right? We don't need privacy if we have nothing to hide. Well, if you think that you should have that come placed in every room of your house and then we'll see what you think about that. Really, in fact, privacy is power. And this is a nice article from Politico Middle of this year. And it's quite a short one, but I want to share some key insights of what privacy is. Because people here at 35C3 almost all of us would agree that privacy is important. But when challenged by a guy who says that, can we really explain why is it important? So here this article tries to do that. It's been published one day before GDPR came into force. So this says, privacy is power dynamics between the individual, the state, and the market. Meaning that privacy is your lever that you can use when big corporations try to use you as an object. Then we have, as recent scandals have illustrated so vividly, privacy is also about the autonomy, dignity, and self-determination of people.  And finally, the third one. Data protection must seek to mitigate the inherent power imbalances between people and those that collect process and profit of their data. We didn't want the web to become what it has become today. We just didn't imagine 20 years ago that not paying for content online would bring the web 2.0, 3.0, whatever that we have now. We just couldn't have imagined that. We wanted to save five euros a month to be abused by data providers. Now, I will talk about some personal privacy choices that I've made during the past years while fighting for privacy. The turning point in my life was that I was using Facebook back then, and the turning point was that people kept tagging me. Yeah, I know it's bad, but it seemed like a reasonable thing to do. Anyone use Facebook here, by the way? No? Oh, man, half. Good luck with that. Anyway, so I was using Facebook back then, and the turning point for me was people were putting my information up without my permission. They would take a photo of me, or we would take a group photo, and they would put it on Facebook, as it's something natural to do, and they would tag me. I couldn't control it, I couldn't really live with that, so what I did was... I just stopped doing that. Anyway, so the next couple slides, or next 10 slides, let's say so, are going to be about my personal privacy choices that I've made. Some of those slides will have a red line going all over the slide. That means I have considered that privacy choice, but I haven't made it because of the cost of that choice. So my first choice, as you can see, it happened quite a long time ago, was the operating system for my computer. I was using Windows 98, which was the latest from Microsoft at that time, and then I moved to Ubuntu Linux.  So as soon as you were searching for some files in your laptop, it would send your search up to the cloud. Let's say you were typing secret protocol from meeting two days ago here, and that would go up to the cloud, that text. So I switched to Linux Mint. It's not a big deal, it's not a big cost. I get slightly slower software upgrades because it's a derivative, a clone of Ubuntu, meaning that software updates are delayed by a couple days, maybe a couple hours. So that's nothing big, right? Then browsing habits. I was surfing with JavaScript and with Adobe Flash allowed, and now I surf without JavaScript with some exceptions, and, of course, no Flash. So what I get is that's how a page looks like to me when I want to open some pages. I want to shout out to Hetty, who was the previous presenter here for including this JavaScript thingy, JavaScript notifications page. You can take a look about how to use no-script tags in this presentation from CCC from two years ago. It's a short one, a lightning talk. But I get blank pages all the time, so I have a limited ability to choose my shopping provider that I want to buy stuff from. Then I'm going to show you a small video here. So this is me going to Google Recapture Test, filling a form and checking a checkbook that I'm not a bot. So what happens here? I'm asked to identify some straight signs. I do that a couple of times, but then I do it a bit more and a bit more. So it's not a joke. Even though it's... Okay, now roads. Even though it's recording, this is how life is for me on the Internet. It's... Even if I go to a regular page and, you know... Road signs are usually on the road, right? So if I see a road sign, it's... Okay, so click verify once there are none left. So, okay, done, right? But no, not for Google, not enough. So this is how it works through a story. This is how it works for me every day on the Internet when I just want to post a form. So it's a bit hard, right? So I was accepting and honoring all cookies before, and now I only accept temporarily first-party cookies. And big tracking giants do not like that, so they make my life difficult. I think I'm a bot. I don't have any Internet history, so I'll say it with me. It does take some time, but the funny thing about this is usually it takes just one minute, not two minutes of this video here. But... Oh, so... Here's a street sign, right? But it's a poster, so probably not a street sign. It's... But it was the first attempt at recording the screencast. The first attempt I got this here. And do you have to actually click the ones that are just part of a sign or not? How does that work? Anyway, it should be over soon. I should be over to submit the form fairly soon. Just some more street signs, and I think we're done. I hope they're not using that for self-driving cars. That would be terrible, because it sure seems... Oh, yes. So, hooray. We managed, yeah. We managed to submit. And once again, through story, maybe not two minutes, but one minute, that's how I submit forms online. That's how my life is. I spend a lot of time there. Luckily, I'm a poor user, so I make up some of that time typing fast. Then, emailing. I used to use HTML emails. Anyone have heard or have used HTML emails here? Maybe using still? Yeah? Most of you, right? Anyone not using HTML emails? Wow! Half and half, right? Great.   Why don't you have, like, a header at the beginning of email? Why don't you use lime and pink colors in your text? What's wrong with you? So, well, they hate me, but that's okay. That's a minor price to pay. Problematic thing is emailing. So, I used to simply use a public email service. Now I use my own domain. I've been using my own domain for 20 years now, I think. 15 years. 15 years. But Gmail users never get my first email. I have configured all the obligatory RFCs for my email domain. Gmail users never get my first email. Never send spam. IP address has been the same for the 15 years. No one knows that since, you know, good old times when you could get an IP address that's not been used, IP address that's not been used. Anyway, it always goes on this spam.  You have an email. Then using my phone. So, this is a thing. I had Siemens 665. That was my first phone with the color screen. It was a feature phone, Java. And then I moved to Nokia 3330. It's a real thing. I did that. I had it for, like, until five years ago. Then I moved to iPhone. My first cost was that I couldn't get properly encrypted communications. All I have on that phone is a mild assurance that people are not eavesdropping on my communications in the room. But when I actually call someone, I cannot get proper encryption. It does the old standard, right, AFI-1. It doesn't support AFI-3. So, that is a bit problematic. That's why I actually have moved away from this solution and just use it as a secondary phone and use my iPhone to communicate in an encrypted manner. Then, of course, if you have iPhone, you have mobile apps. Five years ago, I was just getting my first one, so I didn't have a smartphone back then. And what I do, I manage my permissions carefully. I do not give GPS permissions, I do not allow them to access contacts. I do not allow them to access microphone or camera. So, that means I'm fairly safe as long as I trust the operating system. The thing is, many apps will either not work without giving them enough permissions or will work badly. So, I'm forced to use WhatsApp. Don't say, don't boom me, but I'm forced to use WhatsApp on apps. And, of course, I'm not giving it my contact permissions. So, how do I start the chat? I go to my iPhone dialer, the classical one. I dial the phone number, the country code, I dial it, I drop it, I got recent calls. I hold button on call. WhatsApp appears, I press WhatsApp, I call on WhatsApp, I put that down. I go to WhatsApp recent calls, then I take the entry, then I start the chat. Yeah, there you go, you can do that as well. So, yeah, that's how it works. But some apps don't work at all. Like, we have these taxi apps, like Uber, back in Latvia, and I was trying out a new app, a new taxi app that's just coming to market. I was going to a conference, so I was going to the airport to fly away. I installed the app. I didn't provide any data. Didn't give it any permissions, no GPS nothing. I draw there. I see the driver of the taxi app. So, yeah, I'm going to go to the airport. I have five stars, which is the maximum for the ride. I do the same. I turn my phone off because I was flying outside EU, and I come back a couple of days later. I turn my phone on to order a taxi back home from the airport. Message greets me that your next taxi ride may happen no sooner than December 31st, 2022. Social networking. As you know, I was using Facebook. I was using IRC. Nothing wrong with IRC, of course, but it's a bit hard to use in 2018. So I'm using XMPP, wire, Twitter, stuff like that. The problem here, the cost is limited to social circle and social exclusion. I have to pay for my choices with less people in my life. I can communicate to just some amount of people, not the whole circle of friends. For example, me and my friends, we're planning a New Year's party for the 31st, back in Riga. The thing is, it was being planned on Facebook and I'm not on Facebook. And I was the one that wanted that party the most and it's not going to happen because I'm not on Facebook, everyone else was like, let's just not do anything this year. It has actual real-life consequences. Resocializing, right? So after being put in this situation where my social circle shrinks rapidly and persistently, I decided I need to resocialize. So I installed all the apps, all the communication apps, like, for example, Telegram here. What I do is, I buy a phone number. I come to a conference in Germany or in Serbia. I buy a phone number, like a prepaid card, I register it and, you know, because they are asking for a phone number, except wire, which doesn't ask. So the problem is that your accounts can be taken over when someone else gets that phone number. The good thing that I learned making the presentation is you can actually use Telegram to take over your account unless they know the five, six-digit or a passcode for your account. So that's my solution there. This is actually quite good. Then other people's apps. So people keep giving away my information to different companies even though I haven't authorized them to. Well, the obvious solution here would, of course, be to have private caller ID or maybe take them to court, but you wouldn't want to be taking them to court. So I haven't really implemented this either, even though I do have private caller ID, the problem is it's not enough. So you do have to actually threaten to take your friends to court, which I'm not doing. I'm not that bad of a guy. Well, you know, Facebook still knows your phone number because your friends have given it to them. Same for me. So I think in a photo, I really enjoyed that. Well, when all the Facebook saga happened, my personal one, not one of the large screws that they've had this year. So I decided, you know, the easiest thing, since you cannot really be suing your friends, you can just not be in a photo. So that's what I do. I try to avoid photos because it's much easier to do that than to control whether your friends will think it's appropriate to put the photo on Facebook or on Instagram or whatever, right? So now I'm just taking the photos. I'm always a photographer. If you're at a party and you need a photo taken, I want to take your photo. Obligatory GDPR slide is 2018, so GDPR is the hot stuff right now. Companies were mishandling my data all the time before. Luckily for me, I come from Latvia and we've had a GDPR local national alternative for the past 15 years. Actually, when GDPR came, it only changed two things in Latvia. The fines got really, really big and it's not that easy to compel government to work with you to protect your data because GDPR has specific exclusions as long as the government publishes a law saying that it's legal that we mishandle your data, they can do that. Our previous legal framework in Latvia didn't allow that. I actually got a senior police employee fined 300 euros because I sent them a data request saying, hey, I'd like to know what the police knows about me, which was perfectly fine under our national legislation. And they said I'm going to get a letter like one paragraph.   So I went to court. I won. There were fines around 300 euros. Turns out they had to. Now with GDPR, they will not have to do that because they mixed up the provision, right? The thing is, if my company is compelled to give some data about employee, for example, to the police , I can't tell them that I gave it to the police. But at that moment there was no exception for the police itself. So employee could still go to the police and ask what data you have about me. Anyway, so now we have GDPR, which is cool. And now what we have is companies are lying to me that they are not mishandling my data. I ask them, hey, have you mishandled my data? They say nope and delete the data quickly. But they are lying to me that they are not mishandling my data. They are lying to me that they are not mishandling my data. So the cost here is, of course, I take a lot of time. I'm not a lawyer, but life has turned out in such a way that I like or, well, I've learned to like to write legal documents. So I sit and write lots of letters. Just coming to a conference, a different one in Riga airport, they confiscated 30 cents. So what I did, I wrote them a letter saying that, you know, I need you to pay me back 30 cents and 140 euros for writing the letter. And please donate that to some fund in my name. They said no. So I just got the answer a week ago. We will have to see about that anyway. So I get lots of you don't have anything better to do. Questions, right? You just got this company because they have mishandled your data and they're surprised to see you. They're not used to spamming people. They're not used to spamming people and then having victims of the spam show up in their office. But that's what I do. And they're really surprised. So, you know, then visitors. So I sometimes have friends over. I do have friends and I sometimes have friends over. And what happened once, a guy comes into the party and he pulls out his phone and so he asks him what's the name of your Foursquare thingy. And I don't know what he's talking about. Apparently he wanted to check into my home so other people can see that he's at my home. I explained to him that, you know, I don't have that stuff. He said no problem. I'll take care of that. And he started making the checking point for my home. And then we came to an agreement that he registers the point 400 meters away from where I was. And what I do now is I only have like a close, trusted circle of friends, like 10 people that I invite to my home. This is of course a problem because every time I go abroad I bring the national drink back so it just piles up. And I need to get a larger flat now. Loyalty cards. I've used to give my real information to the companies when using loyalty cards. I still do that. The thing is, I can't tell about Germany, but back in Latvia it's not a crime. It's not a criminal crime to do that unless it's not government. As long as you give fake data to a company and you aren't gaining benefits you're not entitled to, that way it's perfectly fine. I was actually a victim of a data leak. My name and surname got leaked in one of them. I was smart enough to give them all the other data wrong, but now I don't even give them my real name and surname. So that's what I do. The problem here is that if something happens and I want to request what happened to my data, I cannot because I'm not John Dole. I'm Kiddles and the name on the file is different one. We had paper based discount tickets and four students. I was a student. I had a paper based discount ticket like that. This is 14 let's, it's about 20 euros and you could write a whole month. Then they created this thing, this is an RFID card. So now if you don't want to get tracked, you have to use paper based one-trip tickets without discount and if you don't want to get tracked, you don't want to get tracked. So that's the difference. It's 6.5 times more than actually having the discount. So it's actually a huge cost to bear. And to make matters worse, what they do, what the company, the local government company does, they actually publish paper based tickets. But we managed me and some other guys managed to correlate, we managed to actually take the public database and put name and surname to each of the entries. So it's not, this is my solution. Two euros per trip. If I had that, I would pay 30 cents per trip right now. So it costs a lot. Now it's convenient when it works if it doesn't too bad, but there are some countries that don't even accept cash proper. That's in some cases. Many countries would not accept a 20 or 50 or larger euro bill to buy a transfer ticket, but they do accept cards. So that is why I actually have prepaid cards. I pay cash and I use prepaid cards a lot. So one of this is my gold customer status is unusable. So the bank that I've used a lot, now I lost the status actually because I don't use it almost at all. They decided to give me gold customer status either because of the amount of the transactions or the amount of money. So I come to the bank and one of the privileges of gold customer is you can skip the line. So there's this thing. And I go to the nice lady that's working over there and say I'm a gold customer, I need to skip the line. She says sure, just take your card and swipe it at the device. I don't have a card with you. I just have the account. She says sorry, then you're going to have to send in line. So there are some small hiccups, right? But booking flights and hotels is of the most cases. I never managed to rent a car, but I think it should be doable. There are some companies that will take a cash deposit, a large cash deposit. And the local Uber taxify in Latvia blocks all my cards. As soon as I have the card, I just block it. So we're currently in the legal process of fighting them about this. Last thing they requested is that I send them a taxi. I tell them if I wanted to do that, I'd go on Instagram. So we are still fighting over that. Then CCTVs. Obviously, CCTVs are everywhere. You cannot walk in a major city from point A to point B or inside a major store without being filmed. Obvious solution is to wear a mask. Now it could work. I mean I've done that to some extent because I ride a motorcycle and I have to wear a mask to keep myself warm. So when I take my helmet off, I leave the mask on because it's still cold. Some people don't like that. Security guards look at you funny. Sometimes they ask you why you're wearing a mask. You told them because I'm cold. Then they go away. Sometimes they ask you to go away. I wasn't wearing a mask in the first place. I went to the shop with my huge luggage and I asked the security guard at the door, can I leave this here while I go deeper into the shop? And the reply surprised me. He says, you can't leave it here, but could you please open it up. We need to take a look. It was the last day of the trip I was going to the shop. Thank you. I left the shop so security guards have a job to do, but daily, of course, you would not be wearing a mask. It's socially super unacceptable. Additionally, multiple countries have implemented bands on wearing a mask. Unfortunately for me, people like me, and the people directly affected, this is because of some fear that, you know, we are all going to start looking differently than we are right now. And people like me are also affected by that to a lesser extent, of course. Then biometric passports. I already told a small story about how biometric passports came to be in Latvia, but I did try to avoid giving my fingerprints. Now, not giving your fingerprints would, of course, be in Latvia. So me and my nice, my friend who recently got a PhD at MIT, now he's in the US, when biometric passports were created in Latvia, we decided we don't want to give up our fingerprints. So we had this strategic meeting. We came to the meeting, we were sitting and thinking, how do we get the new passports without giving up our fingerprint? I opened it and we took the top two. He took the top one idea, I took the top two idea. What he did when getting his passport, applying for his passport, he asked a friendly doctor to bandage both his hands like that from here to here and went to get the passports. What I did, which was top two in our ranking, was I decided to imitate a painting of my friend. So I mixed Cyanochrelate, which is a base component of Superglue, with blackmarkering. And then I just dumped all my fingers in there because the scanners in Latvia are optical, which means it just takes a picture basically and then processes it. Well, it worked for him. He got his passport, even though now he lives in the US and he doesn't have a passport. So I went off. I come back in five days. Apparently, employees are more sensitive towards people who have medical condition instead of people who work with color a lot. So, finally, creating photocopies of my IDs. I used to reply to the request. Can we copy your passport, sir? No, I just say nope, nope, nope, nope. You cannot copy my passport. And it has some consequences. So I cannot use Revolute N26 or for some reason Taxify, which is the Uber clone, because they require you to send this picture and the copy of the passport. Luckily, it's illegal to copy a passport in Latvia unless it's done by a bank or by a university, which is a strange list of exceptions. People are getting annoyed. So there are some really nice people, genuinely nice people, and their boss just told them you need to copy the ID of the customer. And you don't want to have this conflict, but you don't feel comfortable giving them copy of your passport, right? Because the thing with the passport copy is there are some people who would indiscriminately allow you to do things just with a copy. They would just allow you to take a loan with a copy even though it's a reality. Once, in Belgium, I had to call the cops. So I was checking into a hotel in Belgium, I gave them my ID and I explained how important it is that the ID is not being copied. And I verified and the clerk said, yes, we will not copy your ID. So I give the ID that he types, types, types on the laptop, on the computer, and he grabs my ID by his keyboard and runs, running to the back room to copy it. I calmly take my phone, call the cops. My ID was stolen. Can you help me out?  Since then I carry my ID on a leash. So when I'm checking in, I have a leash, a strong one, so it saves some time when you don't have to call the cops.  So the thing is banks are an exception and they can copy your ID. But my bank decided they want to scan my ID. You might say I'm being petty, right? What's the difference? But the difference for me is, on a photo copy I can write with a marker, this has been handed into bank 1, 2, 3. On a scan I cannot do that. So since they insisted on scanning my ID, we spent 3 hours. So I arrived at the bank 10 minutes before closing time because it was a relatively simple operation. But we spent 3 hours, so 2 hours in a bit after the closing time working with them to resolve the situation because I really needed to do the operation that they had to pay my taxes. It was a large sum, so I had to increase the account limit. So privacy is not dead. But privacy is dying. We have to do something about it in order for it not to die completely. So the final tally is socially, if you want to provide enough privacy to yourself, you will have some communication challenges. It will be harder for you to communicate with your friends. Your friends and society as a whole may disapprove of what you are doing and how you are handling the situation. Your social circle will be not as large as it can be. Financially, you will have limited choices online. So you will only have some shops that work with your JavaScript. You will have limited lists of hotels that do not ask for a card to book it. And travel will be limited to the companies that either accept a friend's card for their travel or accept a bank transfer. Your transportation cost may increase up to sevenfold. Technologically, you will need much more time to do the same things as a normal person. You will also not get to use the new technology at the rate as your peers will be able to do that. You will probably not be part of the Internet of Things craze, which is a good thing, but still for some it may be a cost to bear if they decide to go this way.  And you will, of course, not have international travel if you don't have your passport. By the way, if you're not accessing your own data, I know that at CCC usually there is a stand where you can make unofficial 35C3 ID using whatever name you like. I think it's highly illegal, but there is a stand in case you want to take a look at how the process happens. So finally, privacy is priceless and we need to do something about preventing it and preventing it from dying. There are couple things that we can do. First of all, we can contact legislators and explain to them regularly how important privacy is to us. I know that many of skilled people in IT are working in social communication matters. That is because they have dedicated their life working in IT, working to raise their experience in IT to a high level. So if you can't lobby, you can complain on social media. That's easy. Just keep mentioning all the important guys. Or you can watch my presentation on my website over there. If you're developing a system, you should make sure to develop privacy-conscious systems. You should make sure that the systems take privacy into account. If you're not a developer, demand that your developers do that. Ask them that you need the system to respect privacy. Refuse to use a system that's not designed for privacy. You should not be complicit. For yourself, you have to ask for your privacy to be respected. And finally, remember that doing all that will make you an example to others. And that will allow you to lead by example and save privacy for all of us. Thank you.


The first item on our agenda this evening is a food truck license application, but the applicant is not here. So we're going to skip over that and hope that that person shows up. And if they don't, then maybe we'll deal with that next week. So then let's do other things. Untimed items. Mr. Wald has for us a proclamation for the Amherst Historical Society's 110th anniversary. You wanna tell us anything about that or read it or anything? It's interesting, we often think about the historical site that has also long been here, so it's been here 110 years as of this week. And one of the founders, of course, was Mabel Loomis Tau, who's a distinguished writer in her time and also is an acquaintance of Austin Dickinson's, associated with the DAR chapter and so forth. So the Society wanted to, in an effort to increasingly to call attention to itself and its role in the community, thought a proclamation might be appropriate to do that. It's outlawing some of its contributions. They hopefully will honor them. Oh, we got a couple minutes. Would you like to read it? Whereas the Amherst Historical Society was chartered by the Commonwealth of Massachusetts 110 years ago on May 28th, 1903. And whereas the Society has operated the Simeon Strong House at 70 Amherst Street in Amherst as a museum ever since. And whereas many members of the community have supported the Society with volunteer efforts and contributions over the years. And whereas the Society has benefited the community by collecting, preserving, and interpreting objects from Amherst's past. And whereas the Society has opened the Simeon Strong House to the public to connect people to the town of Amherst, its history and its culture. And whereas the Society speaks for the preservation of the historic features of the town's buildings in the United States. And whereas the Society educates visitors, residents, and school groups about the town's heritage. Now, therefore, we just select four to the town of Amherst, hereby congratulate the Amherst Historical Society upon its 100th and 10th year anniversary. Given that Amherst is 29th, May 25th. Thank you very much. Questions or comments about the proclamation? And Mr. Hayden, how would you like to make the motion? I would like to move our congratulations to the American Historical Society on its 110th birthday and let this proclamation in fact be ours. Thank you. Mr. Wilde, would you like to second that? Second. And for discussion, no favor say aye. Aye. Thank you. That is unanimous, three in favor, two absent. Okay, let's do the change of manager for Bertucci's. Bertucci's restaurant is having a change of manager and as we've mentioned before, liquor licenses are extremely specific and anytime you have a change to the liquor license at all that needs to come before the select board for approval, yet there is a threshold for things that do or do not require a public hearing. This is not one of the things that requires a public hearing and the select board decided not long ago that if it doesn't require a public hearing, we also don't require them to come before us. So this is a technicality of all technicalities. As Ms. Brewer likes to point out, this has already been approved by the police chief. So this is just here for us to make this final approval of the change. So Mr. Hayden would like to make that. I would move to approve the application of Bertucci's restaurant corporation doing business as Bertucci's brick oven restaurant for a change of manager from Robert E. Wombolt, I guess, yeah, I guess Wombolt to Sean C. Jones. They hold the ABCC license number 002400063, contingent on the chief of police review and approval, which we know we have. I thought we already had that. If we don't, we will before it goes out of school. My understanding as of earlier today was that we were waiting on that. So this was just to be safe. Very good. I understand. Thank you. All right. Mr. Walden, would you like to second that motion? All right. And then further discussion. All in favor say aye. Aye. Aye, that's unanimous, three in favor, two absent. Do they still do the Thursday night fundraisers? Do you support? Tuesdays. Tuesdays, actually. Yes, gosh, I hope so. All right, we've done that. We've done change of manager. I don't have many motions. So we might as well talk about the upcoming meeting schedule. You have on your desks a calendar, which has in red proposed meeting dates. The most complicated part of this is June, because obviously we don't know when town meeting is gonna end. So I'm predicting that town meeting will end on the 10th, but I don't know if that's true. Mr. President, do you like telling me the 10th? It's conceivable it could end the third. It will all depend on what happens tonight. So we'll know much more. What I'm proposing is that we approve both meetings on the 10th and the 24th. It's conceivable that if we end on the third, that we can get all of the stuff done that we need to get done on the 10th and then not have to meet the 24th, but not necessarily. So we kind of need both of those. We have, so Mr. Wild is gonna miss the 10th, unfortunately. The 17th, Mr. Moussanti believes he would miss. We really can't have much of a meeting without Mr. Moussanti. And both Mr. Stein and Mr. Wild will miss the 24th. So we're in kind of tough shape for June and I will try and accommodate all of that as we deal with, as we kind of distribute the agenda items, hopefully making the big agenda items for July 29th when we expect to have a full compliment of select board members. So 10th and the 24th in June, I'm proposing the 29th of July. That takes into account everybody's vacation schedules as they submitted to me. Last year we met only once in July and once in August plus the evaluation meeting. So this mirrors last year's meeting schedule. Our July meeting last year was kind of more in the middle of the month, but I don't think it necessarily makes a difference when we meet, especially since the 29th, we could have all of us, which would be good. So, and we usually don't do September at the same time we do these, but I particularly wanted to get on folks calendars September 30th because the Kanagasaki mayor is going to be here then. So the Kanagasaki sister city committee has requested that we hold a meeting on that night so that those folks can be there, be part of our meeting. So that was kind of a fixed date that we wanted to help plan around. So the other meeting I propose in September is the 16th. We know that, and we did this last year, but that by having an abbreviated summer schedule, we recognize the fact that that might call for quickie meetings we call to deal with a parking request or a special liquor license that might come in between meetings. But summer is kind of a blessedly quiet time and we have been doing this together as a group for several years and we do kind of have down what our summer looks like. So, and the main thing that we're doing during that time is the town manager evaluation process, plus of course everything else that comes up in the meantime, but typically that's not too much. So the dates are as proposed June 10th, June 24th, July 29th, August 19th and 26th and September 16th and 30th. Anybody have any issues, questions about this? No. Mr. Hayden, would you like to make a motion? Can I just move to approve those dates? You can. Mr. Wilde, would you second that? All right. All in favor say aye. Aye. Aye, and that is unanimous three to zero to absent. All right, let's see. Recent food truck issues. I've got that on there just for, because this was an open issue at a meeting a couple of weeks ago when the chamber's request came in for the taste of Amherst. As we were considering the request, Ms. Brewer brought up the fact that the letter asked whether or not food trucks could be prohibited from parking the perimeter of the common during that time. And we were kind of in full town meeting mode and I said, do you know what? Just deal with the parking part of it. We'll put that off for future consideration. In the meantime, we realized that in fact, they did reserve the perimeter of the common anyway. So anybody who reserves that parking, that parking is not open to anyone. So that was, the chamber was looking for clarity on the fact, just confirmation essentially that since they have reserved that parking that it is not open to food trucks during that time. So hence that is true. So just so folks know that is the closure on that issue. We also had an issue last week with a vendor who wanted to move during the fair, a sidewalk vendor, the Hall of Truck wanted to move during the fair to a different location, one of the approved sidewalk locations. And there had initially been some confusion in his discussions with the office. He knew he had to ask, but he thought he got permission from the office. Office staff thought that the regulations allowed him to move to a different place. They don't actually do that. The sidewalk ones all say that the location will be specifically approved by the select board. So if he needed a change of location, then he needs to come and ask us for that. So that was then confirmed with him. I followed up with him when we talked about that. So just so folks know that's kind of the status of things. We were supposed to have tonight our very first food truck license application under the new regulations, but either that applicant is lost or we had a miscommunication. So we'll see if we can reschedule that. Any questions or comments from anybody about food truck issues? Just one quick. I want to note that regarding the food truck and the taste of Amherst, that section three, part A one, that says on street lunch carts may use any of these locations and move freely among them. So it's not that we're prohibiting the lunch truck from operating just from parking in a reserve place. That's correct. And part of the regulations is that no one is guaranteed a spot.  If you want a really permanent location, then you would get a storefront. I mean, that's the way it works. And we may not have understood that now. Right. So we're all kind of working through this. These are new rules for the town, a new food trend for the community. So we're working through the details of this and the interpretations of it. And so I think we're doing okay. Any other questions or comments about food trucks? Okay. Then logistical issues related to town meeting. We have not been formally notified about any motions under the different articles. Mr. Wild had mentioned to me that he's heard of a potential motion to refer article 42, which is the Echo Village article because we don't have a formal request to would we want to prefer, would we want to take a formal position or would we want to just not since we don't have a request at the select board's consideration. Mr. Aten. I'm going to make a suggestion that we not, for two reasons. One is we're not all here. And second that a referral really, it's a kind of a town meeting request. And I think we can go on record saying we'd accept it. Just not recommended or not. Not have a position. Not take a position on it. So how about that? Okay. Mr. Wild. I think I'm not sure if it came to the other committees either it's just that there was some talk about that. And I might say. Okay. That's right. That's correct. I might say that sort of as a follow-on of the comments I made when we first heard that article one was brought to us that I think I'd welcome it as well so we can do some things that I think would help it. Other logistical issues for town meeting. Ms. Stein, as we know is not here. She has sent in two minority reports, asked me to read those. Those are for part C of article 24, the CPA article that will begin our considerations tonight. It will start with part B. But so her minority report is for part C. Additionally, article 43 she has a minority report on. So I will be reading those on her behalf. Just point of information for folks. So we recognize that tonight is the 29th. Monday is the third. We do not have the auditorium reserved for Wednesday. So if town meeting continues, of course, it will continue beyond tonight. That would be on Monday the third. It would then, if it continues again, if, might not, but if it continues again, it would continue to Monday the 10th. Now, we don't even wanna go there, but if it continued beyond that, we also don't have Wednesday the 12th. These are times that the auditorium was previously reserved for end of year school activities. So the next couple of dates as are noted at the bottom of your agenda. It's the third, the 10th, the 17th, and the 19th. So by the 19th, we have a Wednesday reserved again, but so help us if we're still doing this on the 19th. But you never know. So these things take as long as they need to take. Any other questions, comments, or issues regarding town meeting logistics? Mr. President. Just an update. The CPA committee was meeting this afternoon at 5.30. I don't have an update from that meeting yet, but they were going to be informed by Dave Zomac that he will be recommending to the CPA committee to reduce the CPA request for Article 24C, which is the Southeast Street property, from 125,000 down to 60,000. And that's because of expected proceeds from selling a couple of the lots, two of the seven parcels within that property, which has the effect of lowering the CPA match needed to effectuate preserving the property. So he's hopeful that CPA will, committee will endorse that recommendation and then work it into a motion this evening. We'll find out, I don't know. Soon, yeah. Very good. All right, any other town meeting logistics or last minute issues to know about? All right, any key information updates from town manager? No, I just wanted to let you know, town council at my request is continuing to review the Chapter 61 purchase and sale letter of revised version that was submitted at the end of April. Related to the Coles property in North Amherst. We continue to be of the opinion that the revised purchase and sale does not constitute a bonafide offer. And we are in consultation with council for the property owner to see what, if any, resolution there might be. But I just want to give you that kind of big picture. And I think at the appropriate time during the discussion of Article 43, I would relay that information to town meeting members. Okay, questions or comments about that? Anything else, Mr. Vicente, that you want us to know? No, I think we're in control. Okay, key information updates from select board members. Anything? No basis? All right, and since we don't have a lunch cart license applicant and we don't have any other business and we didn't bring our harmonicas. I would move to adjourn. And without objections, meeting adjourns at 6.27 p.m. And we will meet again. We will be meeting on Monday the 3rd. We will have a select board meeting in this room at six o'clock. So six o'clock on the 3rd, see you then. Thank you.


Welcome. This is documentation office hours for the Jenkins project. It's the 15th of April, 2022. Thanks for being here. So, topics I've got on the agenda news, and then a discussion with Sahitya on where do we want to put the upgrade instructions, then a brief status report on she code Africa. On Google summer of code, and nothing to say on open PRs, Meg. Sorry, I still have any other topics we need to put on the agenda. No need to apologize. That looks good to me. Okay. Sahitya, anything else that you want to add to the agenda other than the upgrade question. No, I think this is pretty much. All right, well so then, then let's let's go through it by way of news we've got the LTS 2.332.3 release is coming. I think it's about two weeks, approximately. And so I volunteered us to do a change law, the change log and upgrade guide, and discussed it today in European docs office hours with the release lead, Alexander brand us, and he was great with us being the doing the update. So, or doing the change log. The other piece is that localization is improving significantly. Thanks to a donation by crowd and enterprise. They are a translation translation support software. And they've granted us an open source license. And Alex brand us has been showing us how to use it. And it's working very, very smoothly it's much easier to use than than the much better than the existing way of doing localization uses a web user interface has translation dictionaries. It offers machine generated translations as suggestions, then you get to choose pick and choose which one you want more than one versus the other. Cool. All right, and Gavin welcome and Kristen welcome are there any we've gotten. I have one quick question about the LTS this is the one where the agent to controller filter is no longer configurable from the UI. No, I think we did that when it's already the dot one it was it was out a while ago so this one is a minor change on the change log and upgrade guide. Okay, just going to say that's covered in the PR the security stuff. I don't know what they did because it kind of remind it required a little bit of restructuring to get it so got it. We're going to have fun probably merging so so okay. Okay, upgrade instructions. All right, so, so he has interested in working on this issue. Yeah, and I raised the open question. So what we've got is is our install guide doesn't have any instructions on how to perform an upgrade. And that's, that's a glaring gap, and we've had several examples of people who were using the wrong techniques to do upgrades. So we really should give hints about the right technique that went on Windows, please use the Windows installer to do upgrades when on Linux please use the Linux package manager to upgrade if you installed with the Linux package manager. However, the complication here and this is why I brought it to Docs office hours is where do we put it. So, so here's the here's the question to you as a group, we could put it in installing Jenkins. We all right let's put it this way we could put it at the top level. In installing Jenkins we could have an upgrading Jenkins with sub sub sections for Docker for Linux, etc. That would probably give us the deepest coverage of it in terms of expressing how to do each of those. We could instead add it as a an addendum as additional information on each of the installing because installing an upgrade or sort of tied to each other opinions, comments, guidance. So your second option this this section would be installing and upgrading Jenkins. Yeah, we could. Yeah, basically, that's a good way of phrasing it we could, we could rename installing to be installing and upgrading. I would really like to see if we if we combined it just to be able to when you're searching for or you're looking at it going to the handbook like if I was a new user and I clicked on it, I would be like where's the upgrade. I wouldn't necessarily know to go to look at the sub page underneath installing if it wasn't. What is what's on the installing both so than the installing page for all of you, it needs an intro that points to what's in here and tells you what you need. Well and and we would put it as a top level to take that. Yeah, there's installing on Linux Mac OS etc accessing the container post install setup wizard we would put another top level section here upgrading Docker upgrading to new versions of Jenkins and Docker. Likewise for Linux we would add probably for each Debian fedora red hat etc upgrading as a sub bullet there. Not much to say on war files but conceptually, and then for windows it would certainly be, I would assume there would be before the troubleshooting. After the post install setup wizard. Does that does that seem okay to everybody if we do it as installing I see is because the method you choose to install Jenkins is going to affect your upgrade options when the time comes. Yes, I'm thinking when I'm deciding how I'm going to install I might like to know that that if you do this you're only going to be able to upgrade but in this way or whatever. And that is that is certainly correct. You're right by choosing a particular upgrade install method, you have chosen your upgrade method. Yes. Okay. Does it work for you so let's go back and look at it wait a minute let's let's play the other one. What I see also is so you're going to add it's going to be Docker and then upgrading Docker and installing Docker upgrading Docker installing Kubernetes or installing on Kubernetes. Right. Okay, so it's not well see installing on Docker. This one is each of these has complexities right so the Kubernetes page, there would need to be an upgrade section for installing Jenkins with helm installing Jenkins with YAML and installing with the operator. Well, initially they'll, they won't exist right right you will create upgrade sections, I assume one at a time and a poll requested a time with the first target being Linux. For me that's the one where the most people have made mistakes. Okay. So, and so he did does that work okay for you if you focus first on. Okay. Now my slight concern is that this is a pretty long list under installing Jenkins now. And we're talking about potentially making it twice as long. No no no because the content would be inside this Linux page. So we aren't doubling this. Oh, well I thought you said we're going to have installing on Docker or installing on Linux upgrading on Linux. Well, so was it going to be inside the table of contents here over on the right. Okay, so the table contents on the left stays the way it is. At least that was my assumption is we keep the, the, the contents list on the left exactly as it is so when I navigate on the left, I choose my platform. Okay. And then the details of that platform are entirely in this table of contents on the right. Okay. Yeah, I was trying to figure out some way that we could break that. But what's the old rule of seven that a list shouldn't have more than seven items you need to then break it up and subdivide and we're already nine. So, okay, so that goes away. There has been a number of people who have attempted to upgrade inside a Docker as well. So we don't need a full section but it would be nice to have a big warning that says, don't do that. Right, right. Yeah. I don't you were a fun person Gavin I guess you're not. I'm fun, but I have to support those people who do that. That's not fun.  Yes. Okay. I stopped. I think Mark's still being polite about it but I've stopped being as polite about it. Well, and Gavin's right we have had users who said, Hey, I replaced the war file inside my Docker image. Why isn't it behaving the way I expected. And the answer is because that's not how you do upgrades in Docker images right that's the wrong way to do. You read that you're like, Why, why would you do that. What would ever possess you to do that. You know what, I can see the logic to it. I actually can. Oh yeah. You're not a super Docker, you know, and we forget some I'm, you know, I'm looking at another docs and we forget that not everybody knows this stuff intuitively so right now, which is why we want to write an upgrade section. Yeah, I totally get the why they can do it but you're sitting there like, you have to go out of your way to try and do this this is a lot of work and you somehow manage to do it and then it breaks. I actually get that far. Actually, there is something though if I'm running Jenkins and Docker now, and I want to upgrade. I make a new Docker container which is a fresh install. Now I keep from losing all my Jenkins stuff by using a volume. Yeah. Okay, but this accessing the Jenkins home directory talks about how you do that you use, use a volume. So, there's, there's a sense that I say once I install software, I'm never going to reinstall it I will just keep upgrading it because I want to keep on my stuff.  Yeah, okay. The strange thing is we haven't had anyone complain that their configuration gone away in Docker. They have repeatedly had the issue in helm, but that's in communities but that's a different issue. Right. Right. So, so it's, yeah, good point. So I'm taking from this that the decision would be step one in the installing Jenkins on Linux page underneath the Debbie and Ubuntu LTS weekly install Java, then a separate a new section that you're upgrading and it tells them app get update app get upgrade or this upgrade I forget which one it is but it'll be the the correct thing for that platform and that's the upgrade instructions. And it may also have words that say do not do it this other way, the wrong way. You can even do it positively. Um, but it's going to mean now the tape be so the section becomes installing and upgrading Jenkins. Right, so this thing would get renamed from installing Jenkins to installing and upgrading Jenkins. And then I was thinking we have to do the others but no we, we don't have to make install and upgrading on Linux we don't have to make them all because we've made the whole section yeah. Right because the section still is Linux. Right. And I actually, I think it would be nice. Um, while you're at it so you take a look at the, the index file for this whole section. And you might, I don't know maybe that's just me but I like if I open that give me a little tour, a very high level what's here what where do I want to go for this. Oh, you're saying in this on this page. Yeah, some more some more guidance. Right, I don't know. Worth considering it. Maybe it may be sometimes I like links to other the other sections but you know, you could group it. Okay, and it might be you decide that what's here is perfectly fine I'm not saying it's not I haven't really looked at that carefully. Alright so I think I'm ready to record the decision the decision is rename installing Jenkins. In order to make it fit on a single line it may need to just be installing and upgrading. We may need to drop the word Jenkins from that. I don't know why we're using install I wish we could just install and upgrade to but apparently that's not the style. Oh well but it's a good question. Why not. If we switched from install switch to to install and upgrade it will better it will fit better. Yes. The only section with Jenkins right could it just be install slash upgrade or install and upgrade. We've got my favorite that's using Jenkins. Yeah it's like we got it in a couple of but I think what Meg was also saying is that there's a lot of ink. Yeah, so we would be the only one. But we could start fixing but managing Jenkins is too long. So cutting a, you know, we cut to that securing. Right. Yeah. Just before I go back to starting dinner. I want to avoid someone saying run this upgrade. I put in chat but it's it's essentially it will tell you to upgrade your entire system every package you have on there. So don't recommend people do that because they could have side effects just tell them the APT install Jenkins again, because that'll grab the newest version and update it. Oh, so you're saying see and I actually have strong preference to always upgrade everything. Interesting. You and individuals totally agree with us as a community telling someone to upgrade their entire system and install all new packages, not a favor of. I see okay so so the goal is to guide them to upgrade only the Jenkins package with the package manager. And failing that use upgrade not this upgrade because this upgrade will upgrade things that are less safe and it will just do more safer ones, but I would say just specifically target, like upgrading Jenkins. Got it. Okay, good point. All right. Yeah, that could be nice wisdom to put in the index file. Yeah, I mean, those are good little like thought bubbles or side notes but I wouldn't like say hey, do the whole thing. The next thing you know you have someone running sent to us, you know, 6.3 for some reason, and then we tell them to run upgrade and they, for some reason upgrade to send to a seven and break everything you know we don't ever get in that situation where we're like, but I follow your instructions and now you broke everything fix it for us. You know, right. But that's the place where you can say because just sharing the understanding that it's not a don't do it there are times when you might want to upgrade individual packages. I would definitely not say don't do it this way but this is just like to maybe even just a sentence of to only upgrade Jenkins make sure you run this command or something like that just put a prefix in to make sure that they understand. They can upgrade however they want but this is our suggestion. Right, but and you're mentioned to have, because if I get upgrading I might decide hey it's a good. I think I've seen that someplace. It's I'm upgrading any how let's upgrade my operating system. A lot of time I've seen people recommend don't upgrade a whole bunch of stuff at once take one. Yeah, that's definitely my recommendation but not my so do what I say don't do what I do because I will update everything constantly all the time in one large batch, but I don't recommend it to anyone. So this is just the thing I mean because a phrase that I've I've gotten into stuff to where I've been between two sets of people who feel avidly that you must do it this way and you must not do it that way. Yeah. And so you can say something. Some people say such and such other people, you know, positive that something else. It can all be written and I think it makes for a much better documentation it's a better experience for the users they learn something. I agree. My concern there is that I don't want to be like giving them one to Tibet and not enough information and then get them in trouble. So if we said hey, you know, do a PT install Jenkins that'll give you the newest version to do upgrade all your packages follows about to guide or as follows digital version guide that actually has in full detail with descriptions and that way you know you don't duplicating you're not maintaining because we have a lot of documentation Jenkins and I don't want to do like a half as job and get someone in trouble. Yeah, but I'm not writing the documentation so I'm just throwing out the notes and not I'm not telling you to do it this way. Yeah. Great. Anything else on this particular question. Does he like he sees a good path for no comfortable. No, no, no. I think this is pretty much good. Okay, so add, add the upgrade sections upgrade section to each location and and for so start small. Add to just one Linux and submit the PR so don't don't delay submitting it let's get little little steps and each step that way we can tune and refine and be sure we've got agreement on. Yeah, that's the right thing to do. Yeah. Great. Thank you. All right. Anything else on upgrade instructions and I want to ask one question that this page is written in MD file or HTML. So while adding this documentation so it would be helpful for me. It's actually written in ASCII doc so it's it's a markup language. Okay, it's got interesting similarities to mark down, but isn't marked down so yeah you'll be able to find it. The way you can find it say, say actually is go to the page. I'm going to zoom in here so it's visible so this one. And then at the bottom of the page. This page takes you right to the location in the source files. Okay, so so that gives you a place where you can make now. I'm not sure I would I would not recommend doing your editing in the GitHub editor. But this at least takes you to the location so that you can make those change, you know where to go in your local copy of it. And now if you need to get a development environment set up refer to John Mark Mason's tutorial in an old Docs office hour doc old Docs office hours on get pod.io for Jenkins.io dev. So he gives a nice tutorial that lets you use somebody else's computer to do the development with inside of a visual studio ID or anything else. No. Okay great well thank you for being willing to contribute we look forward seeing pull requests. That's great. So I think you had arrived and you're as you would arrive with any topics you needed to add to the agenda, before I just continue running through the agenda. Nothing from my side I was just wondering what about the upgrade guide that you mentioned on good channel. So, oh, that was this topic. The change the for the new and the new LTS. Oh, sorry. Yeah, and we talked I discussed it with the release lead during the Docs office hours Europe time, and it's a fairly small thing, maybe six or seven changes is all the upgrade guide has is a no no relevant topics for upgrade. So, I'll draft it and I'll copy each of you and invite you to review it. Sounds good. So nothing else from my side. Okay, great. Thank you. I just showed up cuz I'm free and tell your message in my case seven has come. All right, well thanks for being here. Okay, so she called Africa contribute on has started the screenshot update project. The inclusive naming project, both could you could benefit from help from the Docs office hours from Docs. However, it means we those that help is needed during Africa, Africa working hours and end of day and and for people in India that's that's really a tough time. So, I'm the night. Yeah, pretty much. So it's 1030 11pm typically your time. What sort of help do you need. Well, so on the screenshot update project what they're doing right now to get started is they're looking through the documentation finding the locations where screenshots need to be updated. And, and I expect they'll then run into bumps where, hey, how do I get Jenkins into this state so I can see this screen. What are the, what are the steps I need to do to make it get there. And that kind of coaching will be basic Jenkins user coaching how do you do this to get there. Inclusive naming project this one is about them looking for the words master slave white list and black list and removing those in places where it's safe. And there the challenge is we've got to be sure we coach them away from places that are unsafe. There are APIs for instance that use the word slave that simply cannot be changed. Right there they're not we're not ready to embark on that. I've given them guidance to say look first do HTML files, you can almost always make a safe change in an HTML file. Second, jelly files you can mostly do jelly files safely. Third strings inside Java files but there you've got to be extra careful. So there it's it's mostly coaching about what things not to attempt to modify. If they want to help getting Jenkins in a current in a specific state, and no one else is available. They could post in the forums and I can give it a help I'm just not up for joining another slack. Okay, that's, that's okay good. And I like the form a little bit better because it's big in public so that if we later need to be like hey how did we get there it's recorded. But you say you're not willing to join slack so so that probably locks you out because in Africa I've had real difficulty getting them connected to get her and using it consistently. I was thinking that the forums, but yeah I just like I can help if they got stuck and no one else can answer then yeah they can jump in the farms in my hours are usually not the best for them but they could you know if they're stuck they can do that. But yeah I can't commit to many times or periods or something like that. Good. Okay I see your point it's that they could use community dot Jenkins that IO forums. Yeah, to ask a question and that then has the benefit. Yeah, very good okay so that's one we can refer them to. It's a good fallback. Yeah fallback is the right word. Yeah, if they can't, you know if if they aren't getting fast response. That's the best thing in the slack channel and the slack channel. I like that very good, because what that really does is broadens the question to a larger group. Excellent. Okay good suggestion and the concept of asynchronous communication. Right. Yep. Which we all need to be better at but especially if you're living in a area that doesn't have a huge tech community so. Okay the pipeline help project this is the same project as last year. Trying to learn from our experiences. So it's fewer fewer people more mentors per person. Sorry the banging you here is my niece, or is my granddaughter. I wondered if you had company for the week. Hello. What's your name mark. This is Jordan. Hi Jordan. You can't hear anybody but me. Go find grandma sweetie grandpa just broke something. Somebody. Okay, sorry. So back to the back to the topic that's what I get for playing when I should have been working. Do we have the owners of the plugins tuned in. We do not have them anymore tuned in than before. We've got more plugin owners because our adoption rate is going up, but but we'll still have to do the same negotiation to try to get things merged. Cool. Yeah, sorry. Just fewer fewer contributors instead of five contributors on this project we only have to. Okay. Also the officers are weekly or bi weekly. Now they are once a week. And we may, we may switch to twice a week when the project starts right now we're in community bonding. So we're in the period where they become familiar with the project they do some small prototypes but they haven't actually started the work. Any other questions on she called Africa. Is it going well. I think they're okay with it and I think they're, they're not, they're not grumbling badly. Any other questions or topics for she called Africa. Not really it just I can try joining the meeting, provide the help if I can. Okay. Yes, that's all. So I'll, I'll add you as an invite, invite to the meetings to the calendar events, and you're welcome to drop in if you can do Raj and if you can't understood. Yes, thanks a lot. Oh, and, and Meg, congratulations, will you have a project manager as well. And she's doing doing good stuff already. So the proposal we had to ask for a project manager we got one fabulous. Yeah, so and it's, it's working well. Great. Okay. Next topic was Google summer of code. And I'm sorry to say that I still haven't done my reviews so I am now overdue. But due date is still April 19 others I think have done theirs but I'm the I'm the terrible one here and haven't done mine yet.  Exactly. That's the question. Any other topics. I'm, I'm going to leave the hot one off open PRs because I don't have any kind of a good story to tell there any other topics before we close. No, nothing from my side. My main one was to remind you for a reviewing, but that's fine. Oh, reviewing for GSOC. Yes, fine. Very good. I appreciate that you Raj. Thanks very much. Yeah, that's all right, then let's call an end to today's session. A recording should be available in 24 to 48 hours. Thanks everybody much appreciated for taking the time to be with us. Thank you.


You may remember a piece that I used in my 2019 YouTube intro video.  It never got done until today. The prospect of continuing with this drawing was daunting in the first place because I had no idea what colors that I had used, a zero clue. I also have a different style now than I had back in 2019. I mean, everything's different. I have a different pencil sharpener. Like I'm going to be using my long point pencils for this. So I sharpened all the colors that I had picked out. This pencil sharpener gives them that long point. It looks like it's eating the pencil, but it's actually just making that long point. It's eating the wood. It's not shaving off of that pencil tip. So I've got them all set aside in a cup so that I continue with the same colors. I knew this was going to take me a long time to do. And it ended up taking about five days of working 12 to 14 hours a day on it. That's crazy. I know it's ridiculous, but that's one of the reasons why I hadn't worked on it in all this time because I knew how much longer it was going to take. And the only way I was going to get to pieces like this was going to be to adapt my YouTube schedule. So thank you for being tolerant of me changing the way that I'm doing my YouTube. So it's going to give me space to do projects like this because I have the time to give to it. And fortunately, this was something I had a little extra time because I was on sabbatical and could really dive into this one and really work on it. The style that you could see between the old and the new is those two flowers. The left flower is what both flowers looked like when I got back to this drawing. The right has some of my pencil work in it. And there were some areas where I already had some work done, like these leaves in the earlier portion of the drawing were very graphical this way. It's not how I would draw them right now. That's just not the way I would do it, but I decided to follow along with that and add some other things to it like cast shadows. There's a lesson in the recent convincing shadows class that I just launched, I think it was two months ago, about cast shadows and the power that they have in a drawing to convince somebody that you know what you're doing, because even though I don't have the reference for these leaves and for this bud and for these roses, I'm imagining where those roses might be dropping a shadow onto the bud. And I'm making the shadow go up and down with the surface of that bud so that it follows along with that contour of the shape. And even though I have no idea if that's right, I have no idea if that's the way it should be. It starts to fool your eye into thinking that it works. Now the most difficult part of this entire thing was by far that background. That took me the most time, partially because I was trying to match color. And that alone was impossible. I could not find a combination that worked the same as the colors that I had started out with in the earlier part of the drawing. It was just not going to ever match with just one pencil. So it was apparently a couple of pencils. So here you can see I have a couple of yellow greens in some areas that I'm coloring with right now. I had other colors that were more of a blue-green color. And in that upper right corner, you can see more of that bluish. And then down in here, I used a blue there. It was a blue violet, but it looked when it mixed with the green like it has some reddishness in it. So it was almost a brown color. What I opted to do was just let all those colors move back and forth between each other because I couldn't make one consistent color for the whole thing. Since I didn't know where I'd started, I had no idea where I was headed. So I will be adding some bokeh to the background so that I can make it look like I intended to do all of that. So there you go. But you'll notice that the colors that I'm using here are similar to the ones that I used in Monday's video. If you saw that one, it was all about bokeh backgrounds. And I used a lot of golds and purples together in watercolor, in Copic, in colored pencils, so that I ended up getting some neutrals. When you're shading yellows, you can use oranges to make some of those shadings. You can use some of the browns. But boy, does purple add a richness that nothing else can add, whether you're going with really pale, soft kind of purples or really rich, deep, bluish ones, play around with which ones start to push the image back further and which ones pull it forward. Because there's different points in here where I let the rose have more life to it because I added more of a pinkish purple versus a bluish purple. But you don't know that until you try it. So keep a scrap sheet with you and try out the colors and see how they're going to work together because any combination of colors is going to act differently. As I worked through the rose, I ended up leaving less and less of the white on the edges of the rose petals because I really liked it better that way. The second flower, I'm not going to color here. It is on the patron extended video. So if you'd like to become a patron, there is a link in the doobly-do. You can see the longer video. And I will be putting extended cuts of my Friday videos on Patreon. So you can always go see those if you become one. All right, next up, I'm forming my kneaded eraser into a tool that I can use. And you can stretch these, squish them, pull them, twist them, do all kinds of things to them. And they are self-cleaning, basically. I wanted it nice and soft so that I could make some bokeh eraser backgrounds. And I took a piece of glassine and punched some circles out of it so I could create some bokeh circles and just use that as a mask. Normally, I use the glassine paper under my hand when I'm working on a piece like this so that I don't end up smooshing the pencil with my hand or get any of the oils from my skin onto the surface of the paper. And then using a stick eraser is another way to try to get more of the small details or to refine some of the edges of the circle because this circle mask that I made was not perfect. It was helpful, but it wasn't going to give me real sharp edges all the time, so some of those I refined with the stick eraser. I just added some real pale stuff in the background. And that is my dusting brush that has become my friend as I've been working on more and more pencil work. The dusting brush helped to keep my surface clean of all that excess pencil powder. And I've also used the mask to create some negative drawing in a bokeh fashion. So I'm drawing around the shapes so I can make the shapes behind darker instead of making them all lighter. So you can work both directions with having a little mask like that on hand. I am super tickled with this drawing and not just to say, hey, it's a great drawing, but because I can see my journey in it. I know where the pieces of 2019 me are and where the remnants have been taken over by new me and my new style. And it's really interesting to see that journey and you may not notice it, but I know exactly where that is. If you love these roses as much as I do, you could own the original at sandielknockfinart.com while it's still there. Society Six has prints of this. And if you wanna see the extended version with that second rose, everything else that was cut out of this video for YouTube purposes, it's for patrons. And on Monday, I did three different ways to do Boca in color pencil, watercolor and Copic. During the week, I did other things on social media only.  I'll tell you what they were, which sites they were on. So you don't have to follow everywhere. On Fridays, you can just catch up on everything you might have missed because I was experimenting with Boca and having way too much fun. Thank you so much for visiting. Thank you for smashing the like button and I will see you again on Monday. Take care.


Digital smile design in DSD is a revolutionary new technology that allows dentists to quickly create accurate prototypes of a patient's desired smile. DSD also reduces the amount of time spent on data processing, allowing dentists to focus more on providing quality care. With DSD, patients can now expect faster and more accurate results from their dental treatments. This article was authored by LK Erickova, V.D. Borisov, and A.D. Sepitov.