Hey everyone, it's Gabrielle with Oxmer Auto Group. So I am here today at Oxmer Toyota. I have Chuck here with me Hey, yeah, so you guys we have the 2020. This is the Toyota RAV4 now This is the hybrid this one's the XLE in its all-wheel drive, but on the hybrid is new And it is an amazing vehicle. So Chuck tell everybody about this. Yes So everything on the 2019 RAV4 is a complete redesign brand new This is a 2020 and it's the hybrid version as you mentioned, right? Right. And so these things are selling like hotcakes They're very very popular right now these safety systems on this is unmatched What do you hear about the power and everything but the safety systems Toyota Safety Sense P? It's the 2.0 version.  So it has that with pedestrian low light pedestrian bicyclist detection So it's an enhanced version of the original Toyota Safety Sense P You also have lane departure alert with lane tracing assist So late departure alert beeps if you hit your solid or dotted line on the road when you're going to 32 miles an hour faster The track lane tracing assist when you're in dynamic radar cruise control So you set cruise control you're driving down the highway And it's slowing you down a predetermined distance between you in the car in front of you It's also following that car reading the lines and keeping you centered in your lane So you actually feel the steering wheel responding. It's a great thing especially for long trips. I drove one of these About five hours I touched the pedal maybe four times because the dynamic radar cruise control and it just kind of guided me the entire way It was awesome. So really cool safety features road sign detection auto high beams on these LED lights So at night your lights automatically come on when it gets dark rainy day like this when there's no Headlights or taillights in front of you. It's going to kick on your high beams You don't have to think about it. You never have to touch the lights on this So it's really really cool, and then I want to talk a little bit about the power So this is the hybrid version and the reason you get the hybrid is because Fuel efficiency so this one gets 40 miles to the gallon right which is awesome Regular XLE gets 29 which is still good for an SUV, but the gas model 29 versus 40 on this one And here's the kicker. Here's what they did with this engine and the hybrid system This has more horsepower it's 219 versus 203 on the gas So you're getting better fuel efficiency and better horsepower with this hybrid system. That's crazy and a four-cylinder It's awesome It is and then everything else that you love about Toyotas with the crumple zones and the TNGA platform the gel-mounted engine all the Clear containers so you can see where your fluid is easy to get to the oil to check that What's one thing that you don't see? I'm not sure. I've never really looked under. Well, you don't see the battery You can see the starter battery or the hybrid battery in there as well these orange things are how you know that it's a hybrid Don't ever touch the orange ones. Don't touch the orange. Okay, good to know. I know you go into engines You start pulling stuff and yeah, so don't do that on the hybrid. Okay, this thing's very technologically advanced And so Great new comfort features here. This is the power seat in the XLE One of the things that Toyota really wanted to do they did to this like national survey about what? Consumers are concerned about they found out seat comfort is like the number one concern over safety over performance everything else So they did the performance the safety everything else. They also made it one of the most comfortable seats out there So I've ridden in these they are fantastically comfortable very intuitive the power seat and all that feels fantastic You've got that big back seat back there 6040 splits so you can have you know car seat there and then also load stuff up back here So in the previous hybrids There was like a little bump back here right to make room for the hybrid Battery engine drive system all that now you don't lose any of that cargo space So just it's smooth. You can lay these down tons of cargo space back here This one comes with a tonneau cover and then I want to go inside and show you some of the cool features They updated the radio as well in 2019 and so we'll go take a look at that. All right sounds good So on this car this particular package this has the cold weather package Which I'm really happy about right now even though I haven't turned my seat warmer on but it has a seat warmer Even with the cloth seats. This also has a heated steering wheel. So right here at the 10 to 2 position It's actually warm and feels fantastic. I like this more than the seat warmer personally, but this is very very cool It also has a cool feature where underneath the windshield wiper blades There's a heating element you can turn that on to actually defrost the blades and not just the windshield as well So that cold weather package is super handy, especially if you're in You know place like here where it gets cold in the winter time also Apple CarPlay is now standard In the 2020s and I want to show you this also has Android Auto I just happen to have an iPhone so we're gonna just show that so this is the home screen of the regular radio And when you go to Apple CarPlay It's your phone. So these are my apps. There's my phone messages. You can go to Amazon Maps or not Amazon, but Apple Maps Google Maps Waze if you have that All those interact with Your radio here so you can have Waze actually up on your radio, which is really cool Then your home button come back here also your music. So I have Amazon music I listened to podcast on Stitcher. The now playing is your current On your phone, whatever was playing last if you have Spotify if you have Pandora iHeart radio any app that plays music like that That's compatible with Apple CarPlay will pop up here and you can actually interact with it So see You play your favorites and your podcast and your list and I can show you all those because it could be embarrassing But it's your phone and it's very intuitive. So it looks like your phone It's just a fantastic feature you plug it in down here to this main USB and your phone charges while you're able to use it So you have navigation built in all your presets, you know Because everybody uses their phone for navigation pretty much anymore So all that set up and you have it just built right in here. We can see it here You don't have to look at your phone You don't have to get one of those mounts that you know plugs up here. It's all Integrated with the radio, which is really cool. The other thing I want to point out When we go to source on every 2020 in the RAV4 you get XM radio for trial period So every car now comes with XM radio in the 2020 RAV4 family, which is fantastic I don't know what was on here last pit bull so just other things that RAV4 this thing is built to drive and it's built to go a long distance with that 40 miles to the gallon and that Horsepower you can get in put in your XM station and just listen as you drive across the country I mean this thing's fantastic. This is meant to be driven. There's also some cool features down here You have eco mode Sport mode so you can change the way that the car shifts So if you say I don't like saving fuel even though I bought a hybrid I want more power even though it's 219 horsepower You can switch it to sport mode and it'll change the way that the car shifts so that you get You know a little bit more power you can change it back to eco normal EV mode So if you live in a city and you're only going a couple blocks You can force it in the EV mode if you have a not high enough charge and it will drive just using the hybrid battery system So it's limited miles limited speed But if you're just going a couple blocks you can force that if you have a high enough charge and get to places without the gas Engine ever kicking on you also have a trail button, which is a really cool feature So on this one every single you have all wheel drive right so it's sending power to all four tires Now if you were in a situation where the road is bumpy, you know You're a little bit sketched out about you know You feel the car slipping a little bit you can put it into trail mode and what it's going to do is it uses the all-wheel-drive system It uses the traction control it uses the brake system that we have in the star safety system and the driving system It will send power to the wheels that have traction So if one you know misses because of a pothole it can send power to the places that it does have traction Which is a really cool feature You don't want to be in it all the time because you're where the components out But it's a great way to get you know got it out roads something like that that you're trying to get down Cool little feature to have and then one of my favorite features Probably said that a bunch of times, but this really is a cool one. It's got electronic parking brake, right? So you have the e-brake here and then you have the hold button here And so when you get in the car you put your seatbelt on you push the hold button and then what you will see I don't know if you could see here Get that out of the way All right, so this green light down here let you know that the whole System is activated. Okay, and so I'm going to put the car in drive And you'll notice this yellow hold the word hold appears right I have my foot on the brake cars and drive I could take my foot off the brake and it's going to sit here and hold me into place So when you get to a red light or a stop sign you take your foot off the brake It's going to hold you in place. All you have to do is hit the gas and you're going to take off Right, so you don't have to put the car in park anything like that just a lot of great little intuitive features like this dual air control in this one as well, so automatically set the temperature 70 Driver passenger can have different temperatures yet sink and it always defaults back to the driver so Tons of comfort tons of convenience tons of power tons of gas savings and then tons of technology as well So really cool stuff. You also have some connected features in here as well So up here you have your SOS if you pull that down a little SOS button So you have a year subscription of this where you push that and it automatically contacts emergency services if you were to get into an Issue where you needed emergency services. Also if you get into a wreck where an airbag deploys It will automatically send your location to emergency services so they can come find you I remember I was presenting one of these to somebody that was a first responder and said oh, this is going to be fantastic He's like you don't know how many calls we get where they're like this car went down a ditch And we don't know where it is it rolled off the road. We can't find it This is going to help with that also if this car is ever stolen This system is how you can track it sends the exact location of the police. They go get your car back So really cool features built into this car technology Style everything about it's just awesome We hope you liked the walk around on the brand new 2020 Toyota RAV4 hybrid if you guys have any questions, please feel free to let us know So the best phone number it's<PHONE_NUMBER> You can also visit our website at oxmer toyota comm thanks guys, and we look forward to seeing you all soon. Bye


Good day fellow investor. Last week I released a video that explained how I think that Berkshire Headway is a better long-term buy-and-forget investment than the SAP 500. The video was pretty popular and there were many comments and I found one recurring theme among all the comments and that was fear about what will happen to Berkshire after Buffett. Of course, nobody knows what will happen after Buffett, so this is an uncertainty and investors hate uncertainties. Be it of any kind positive negative, if it's an uncertainty, investors hate it and are a bit wary about investing. I looked a bit around online and I haven't found a concise analysis about what will happen to Berkshire when Buffett leaves. To keep our karma positive, I'm not gonna talk about Buffett dying, I'm going to talk about Buffett moving to another job. Let's imagine that Bill Gates offered him the chief executive position on the project where he will have to develop the new virtual reality bridge game for senior US citizens. That's a job I think Buffett would love and might leave Berkshire for such a position. I think we all wish many decades of a healthy life to Warren Buffett. I'll do a concise analysis about what will happen. First we'll look at the businesses Berkshire owns, what's the current impact Buffett has on those businesses by comparing Berkshire's business margins with the competition. I look a bit at the ownership of Berkshire, what can change and whether Berkshire will pay a dividend in the future or everything will stay as is. So let's start with Berlington, Berkshire's railway business. If we take a look at Berlington's revenue and compare it to Union Pacific we can see that over the last eight years since Berkshire took over the company there isn't any significant difference. They almost match. This means that Buffett's impact didn't make miracles on Berlington. We can also check the CapEx spend also similar Berlington and Union Pacific. So the cash spending investment is similar. So Buffett's contribution to current operations are minimal. His main contribution to Berkshire was that he was ready to buy Berlington in 2010 when the stock price and other valuations were cheap in comparison to its long-term value in relation to the US economy. Thus Buffett's impact on business operations is minimal. His added value to Berkshire is as a capital allocator. This is the first important thing to understand. Apart from railways, the second largest part of Berkshire's earnings comes from utilities. So to see whether there is some kind of Buffett's direct guru magic touch on earnings, the best way is to compare Berkshire Hathaway's energy earnings with those other similar operators. A look at revenues will show us that net after-tax margins for Berkshire energy have been 10.6% in 2014, 11.6% in 2015 and 12.8% in 2016. A quick look at random competitors shows that Consolidated Edison had a net margin of 10.8% in 2016. DTE Energy had a net margin of 9%. Duke Energy had a net profit margin of 9.4%. So Berkshire Energy has a higher margin, but that is just due to the fact that Berkshire Energy does not pay out dividend, they reinvest the cash, thus have much lower interest costs than competitors. As you can see in this table retained earnings are 100% at Berkshire Hathaway Energy. All other competitors pay out more than 50% of their earnings, thus their debt levels is also higher. Of the previously mentioned Edison, DTE Energy, Duke Energy, 70% of their assets is financed by debt and just 32% of Berkshire Hathaway Energy is financed by debt. That's a huge difference. So the strength in Berkshire's utility business is the same as with the whole of Berkshire. They keep the cash, reinvest as we have seen net margins are 12% on capital, so very good reinvestment returns and thus it's just about capital and location. Going on to the insurance business Buffett always is very complimentary when we talk about Ajit Jain, the head of Berkshire reinsurance. And Buffett says that he has probably made more money for Berkshire Hathaway than Buffett himself. So with insurance also everything is set in place, Berkshire has huge capital that allows it to do deals that other reinsurance can't. Thus the power of Berkshire is not so much related to Buffett but to the capital and AAA ratings it has. On top of the previously discussed there are many many subsidiaries at Berkshire, stocks, stock positions and it's simply impossible for Buffett to have an impact on those companies. All these companies are good, wonderful businesses as Buffett would call them and they operate as a single unit, thus not affected by Buffett. So all the companies under Berkshire's umbrella have been working pretty well before they got owned by Berkshire, are currently operating well and will probably do so in the future. So the only issue related to Berkshire is future capital and location. And that's not so difficult to do because Berkshire Hathaway has clear criteria that a person that will succeed Buffett has to follow. So Berkshire is interested in large purchases, at least 75 million of pre-tax earnings, consistent earning power, so they need stable long-term businesses, good returns on equity with little or no depth, management in place, this is the main focus, good management that knows what's in doing and is coherent to Berkshire's policies. A simple business and an offering price that is a good price for Berkshire to pay. And the offering price is something that makes the job for Buffett's successor even easier. Buffett has achieved returns of 20%, but due to Berkshire's size, even Buffett and Munger have been saying how their target returns are not 20% now, but 10%. If you look at the latest acquisition, store capital, the adjusted funds yield is about 8% on Buffett's purchase with the expected growth of 5%, the long-term return on that investment will be around 10%. So the successor doesn't need to do 20%. Everybody will be happy with 10%. The difference is huge and much easier to achieve. So the test for new management isn't as difficult as it has been for Buffett in the previous 53 years. Thus, since present management took over. What's also very important to see is who will make the decisions after Buffett, that therefore we have to look at ownership and at whether Berkshire will pay dividends and do more buybacks in the future. So let's start with Berkshire's stock. There are two classes of shares. One Berkshire, A stock equals 1500 Berkshire, B stocks. However, the only difference is in the voting power. You need 10,000 Berkshire, B stocks to get one Berkshire, A vote. This structure allows Buffett to have 32% of voting rights, even if he owns just 18% of the company. Buffett's successors will have 42% of votes and they need just 18% of voting rights to reach 50%. So to control the company. So it's very unlikely that there will be any significant changes in Berkshire because I think 50% of the voting rights are owned by people who want to see shareholder creation by reinvestment and the growth of Berkshire. However, just for the sake of this video, let's imagine that Berkshire pays a dividend and spends its money on buybacks. So the average SAP 500 company distributes about 100% of earnings to shareholders and it's therefore valued at a price earnings ratio of around 25 alongside the dividend yield of 2%. So Berkshire's net trailing income is 22 billion with the 1.6 million shares outstanding adjusted for A and B. The market capitalization is 422 billion. So Berkshire would need just 8.4 billion to pay out a dividend equal to the SAP 500. Just the cash on Berkshire's balance sheet would be enough for 11 years of dividends. In addition, if Berkshire would spend the remaining available earnings on buybacks, it would have 14.1 billion to do so. So it could buy 3.3% of the company. So we have 11 years of dividends already there plus another 2% dividend coming from earnings and the possibility that Berkshire buys back 3.3% of its own stock per year thus lowers the amount of stock available for 33% in the next 10 years. If the company's management would decide to do so, Berkshire's stock price would go to the moon because the buybacks, dividends and cash amounts plus the potential debt like Apple is doing to pay dividends would simply make Berkshire a cash cow for shareholders. Thus, the share price would probably go much higher than current levels. So the conclusion is pretty simple. Yes, there is uncertainty about Berkshire Hathaway's future and future management, but the uncertainty is divided on two positives. Either Berkshire continues as is, thus creating shareholder value over the long term by reinvesting earnings or Berkshire decides to stop being Berkshire and pay out huge dividends and do huge buybacks. Both scenarios would reward current shareholders. This one for the long term and in this case the stock price would shoot up and long term shareholders could get out at a premium. So I will finish by quoting Buffett. His karma is a bit negative on this, but he's perhaps more realistic. If I die tonight, I think the stock would go up tomorrow. This is what he said after the last shareholder meeting. Just a quick note, other comments have been worried about what will happen to Berkshire if an autonomous driving takes over in GEICO's policies and insurance business. A look at what's going on in Berkshire Insurance will show you that the just 21% of Berkshire's insurance profits comes from GEICO or just 2% of total Berkshire profits and GEICO is just 18% of the float. Thus also there are no worries about the impact of autonomous driving on Berkshire's insurance business. I know this will create an extreme debate, so I'm looking forward to your comments. I'm learning a lot from your comments, so please leave them below and I'll see you in the next video.


Why is change in life so difficult when I was younger I was excited by change I looked forward to it as happy when it happened as I'm growing older I try to avoid it as much as possible and not able to cope when it happens all depends who is initiating the change Maybe but is there something like an appropriate response to change? one reason why change is becoming difficult as you get older is You have found cocoons of comfort There are many comfort zones you created any disturbance of that you're disturbed now When you were young you were not looking for comfort. You were looking for life Now you're not looking for life. You're looking for comfort safety See when you were 16 18 you had wild dreams as to what you want to do with your life By the time you became 25 You cut down all the frills and thought this is all not practical. I am becoming practical now All that you happen is you are becoming a coward But you said I'm becoming practical and cut down many things and said if I get a job if I earn my living This this this is okay By the time you're 35 you're thinking if I don't get into any trouble. That's enough You're not looking forward into anything great happening if I don't get into trouble. That's enough But that's when you start getting into trouble so You are not looking at life with zest. You're looking at life as safety The more security oriented you are the more disturbed you will be with every chain that happens in your life The essence of physical existence is change. Isn't it? Isn't it so? Everything is changing. Is there anything that's not changing? Everything in the existence is changing. Isn't it the physical existence is constantly changing the very essence of physical reality is change Nothing is constant Even the so-called static states or dynamic in nature everything is changing So if you resist change you're resisting life if you want an unchanging life There's one beautiful place Where it's nothing changes. That's your grave either You must go to your grave or you must get enlightened if you don't want change Then somewhere inside everything is same But otherwise as long as you're a part of the physical process of the existence Everything is changed. There is nothing that is not changing See this moment you're inhaling next moment you're exhaling it's change, isn't it? If you don't want change you stop it So when you resist change, you must understand you're resisting the very process of life Not just your life. You're resisting the very fundamental process of life Invariably you will invite all kinds of suffering If you're living and you want to be dead You will ask for trouble. Isn't it?  Isn't it so at least be efficient.  Is it still water in it? Okay So you need to understand this once you resist change you're resisting the whole process of life and you will create unnecessary suffering So once you resist change depression is a natural process Frustration when change happens frustration depression frustration and depression are On a certain day the devil Decided to retire Because he's retiring He decided to put all the tools of his trade for a garage sale So he opened up discount sale all the devil's tools There's a huge rush There are all kinds of things anger hatred jealousy this one that one everything on the table all of you people went and bought it up in no time Everything was sold out in the first hour all his tools The whole humanity has bought it isn't it But he had still one more bag and What's your name leaner leaner went and asked the devil. What's in that bag? Isn't that for sale? He said no no these are the price tools Just as so viniers I want to keep them because they have worked best to do my job Lena said no I wanted please Won't you sell that? The devil said no no no these two tools that I have in this bag They work so wonderfully well In my whole career That I would like to keep them as my souvenirs Once Lena said many other people joined behind her and please put it on sale put it on sale put it on sale Then they Devil pulled out and said okay, if you're giving a good price, let me put it on sale Then it pulled out frustration and depression and put it on table These two are the best of the devil's tools if you want to destroy your life Frustration you start with frustration develop into depression You're there There's nothing worse than that You'll work against yourself and the moment you resist change Frustration is natural Once frustration comes it will naturally evolve into depression so You put it on sale


Thank you very much everyone for coming. Thank you very much to DEF CON for having me. This is a nice big crowd and so I'm really grateful for this opportunity. This presentation is on protecting data with short lived encryption keys and hardware root of trust. My name is Dan Griffin. I'm the president of JW Secure. We're a Seattle-based consulting company that specializes in custom security software development. Today, JW Secure released a tool for experimenting with short lived encryption keys and a white paper discussing secure time and mobile computing. The tool and white paper are linked in blog posts that we put out this morning and the URL of my blog is on the slide. This presentation will talk about the context of that work including why we need high assurance data protection. What are the foundations for achieving it and how it can be undermined? General Alexander, the head of the national security agency, was at DEF CON last year to give a recruiting talk. Did everyone go to that? All right. Did everyone sign up? Are there any feds in the room right now? I actually don't see any hands. I guess General Alexander's message was a little too controversial for DEF CON, which is saying something. In other more open and accepting venues, the NSA has discussed the need to be proactive about secure mobile computing. Does that strike anybody else's hypocritical? All right. But the big takeaway for the rest of us is that the NSA is working on mechanisms for trusting their content from the cloud to mobile devices. They've stated as much. So there must be ways that the rest of us can do the same thing. Let's review the checkered history of mobile devices. When laptop computers first appeared, they were awkward and obviously from the early 80s. Early PDAs were also awkward, although I think the trio was kind of cute. Now half the people sitting at Starbucks are on a laptop and everyone has a smart phone. And now that we can work and play in the digital world anywhere and at any time, we actually do. But as work moves to less secure computing platforms, hackers like Lisbeth here have a rich new world of opportunities. After all, hackers and spies are just like everyone else. They look for the maximum return for the minimum investment. So their focus is now on mobile devices. What can be done about this? The first thing we want to do is define some characteristics of a trustworthy machine. But if there's one thing we learned from Terminator 1 and 2, it's that machines are sometimes trustworthy and sometimes not. Likewise, people talk about identifying the person in an internet transaction. But it's not a person. It's a machine and it may or may not be properly expressing the user's intentions. Given all of that, how can we be sure that a remote party is telling the truth? Desktop PCs and laptops can be configured to be secure. And users can be trained. Some of this applies to phones and tablets and some of it doesn't. For example, it's hard enough to enforce complex password policy when users have full-size keyboards. But on phones, the keyboard experience is built around autocomplete. And it's not consistent across apps or devices. Likewise, many mobile platforms still lack the system level extensibility required by the good third party antivirus systems. Still, mobile devices have lots of untapped functionality that can be used for increasing security. So let's see how to use it. Relatively low root-kit risk is perhaps the only aspect of the phone that is still more secure than the typical PC, at least for now. But application level attacks have become much more prevalent. When a mobile app or game costs 99 cents or less, you can bet that zero attention has been paid to security in that supply chain. You get what you pay for. And in mobile, there's a whole new range of risks from geolocation to remote theft of data, remote theft of service, including by the telcos. In short, it remains difficult to get the device to reliably report on its current state. And that presents a risk both to back-end services and to sensitive data. To get reliable information from the device, we need to get an authenticated report from a tamper-resistant root of trust. This is the purpose of the trusted platform module, or TPM. The TPM is a crypto processor typically implemented as a tamper-resistant chip on the motherboard or as a secure execution environment in system on a chip firmware. The latter is becoming the norm. Device integrity is the point of the exercise. But how can that help protect the stuff that the user and the custodian of the data care about? First, we want to measure that the device is running the way that it's supposed to be running. That's the first consideration. The second consideration is that we want to ensure that only on a compliant device can I decrypt sensitive data and only while the device remains compliant. By issuing encrypted content bound to a specific TPM and to a specific state of that device as reflected in the TPM, we can really lock down the lifetime of that content. So how can we determine if the device is telling the truth about its state given the risk posed by installing bad apps, if not root kits? Remote attestation uses the TPM, root of trust to determine if the firmware, boot loader and operating system are known good. I talked about remote attestation in detail in my DEFCON presentation last year. I'm not going to go into as much detail this time. You guys probably know DEFCON takes really high quality videos of these talks, so they're all available. What this means is that determining the health of a mobile user device requires some infrastructure and it requires a little cryptographic dance, but it's achievable. Nevertheless, I'm not suggesting that these techniques be applied to every internet transaction. They're too heavy weight for that. But for securing high value data on consumer class devices that are sometimes disconnected, this is currently the best foundation we have. So let's dig in. With measure boot, starting with the BIOS, before each component in the boot chain is loaded, the previous component computes its hash on disk and sticks that hash in the TPM platform configuration registers or PCRs. After boot, a boot log can be retrieved from the TPM. The log includes the boot image hashes that I just talked about. It also includes some code signing information as in who signed the binary. And it also includes other boot metadata, for example, was disk encryption used to unlock the boot volume. Importantly, the TPM can sign that boot log with a special purpose key that you can, of course, downstream determine if you trust or not. The server can then issue content decryption or authorization keys bound to those measurements. Sorry. The server encrypts the key to the manufacturer endorsement key, and that endorsement key is unique to each TPM. So when the device state changes, the measurements change, and the TPM will refuse to use that encrypted key thereafter. So we have a pretty powerful mechanism here. Let's see how to wire it together. Trust starts with the TPM and the key distributed with it. As I mentioned, this key is set by the manufacturer or the OEM, along with a PKI certificate that's signed by that manufacturer. And there's a pretty short list. So if you keep that set of issuing certificates, you can determine across a variety of devices whether you trust that chain. Thus, the TPM is as protected as any hardware or firmware can be. In other words, electron microscopes are a problem, as is an insecure supply chain. Importantly, TPM 2.0 includes a secure monotonically increasing counter. This at least is a more secure option than the standard PC real time clock is when it comes to enforcing policies that are time sensitive. For example, they need to start now, they need to end at a certain time, they have a limited window, they can only be run once, various combinations of all those things. This counter on the TPM is the foundation of our work on short-lived keys. Once the client device has received a measurement bound key from the remote attestation service, how can we use that key? Well, consider that constant reauthorization is expensive and that users hate it. Kerberos, for example, uses a token that is good for, say, eight hours and Kerberos has been able to mitigate some of the burden of reauthorization that way. The point is that this validity period is a policy setting that can be ratcheted down for the truly paranoid or increased for a better user experience. Why not use the same technique to protect mobile data? So, again, for gory detail of how to implement a data loss prevention or a digital rights management solution, using TPM measurement bound keys, please see the white paper that I mentioned at the beginning of this talk. To run your TPM through its paces, please check out the timed key tool that I mentioned as well. I'll warn you that currently the prerequisites for running that tool are relatively steep because unless you have a system on a chip based Windows 8 tablet or laptop from the past couple of months, you probably do not have a TPM 2.0 system, which I admit is a little lame, but bear with me. Obviously, this is a particular concern if you're planning on building solutions based on that capability like my company is. But we believe that it will make sense in the near term and especially for small high value deployments. Also, if you're serious about developing custom TPM middleware, you'll want to join the trusted computing group and specifically the TPM sub group because that's how you can download their full TPM simulator reference implementation. So that will save you months of engineering. But as an additional warning, the ability to download that code requires a premium level membership because they know the value that they're giving you. So you won't be able to do that. You won't want to do that as an individual unless you're a developer. My blog provides a trace of running the time key demo using this tool. These traces are sufficiently verbose to allow you to infer the TPM command sequence. In summary, you can use the first three commands listed on the slide to do the following sequence. And you can do other things as well as you can see, there are a variety of commands, but let me run through what we consider to be the default case. First, you use the tool to create a 2048 bit RSA key and you specify policy to limit the lifetime of that key to 60 seconds. Note that another major improvement in TPM 2.0 is that it supports both elliptic curve and symmetric cryptography. So that raises some very interesting scenarios around of course using smaller keys, but also in particular doing data streaming. The caveat being the TPMs are not fast. But there's some opportunities there. Anyway, TPM 1.2 only supports RSA. And TPM 1.2 does not support the time bound keys thing. So again, this tool is not going to run on a 1.2 device. The next step then is running the tool to encrypt some sample data. And third, still within that 60 second window, decrypt some data. Finally, after 60 seconds, do the decryption again, you'll get the expected failure saying that your key is out of policy. With these capabilities in mind, again, how can we use measurement bound keys to protect mobile data in the real world? Consider data access by trusted insiders. In this case, we want to ensure that only users with trusted client machines and encrypted disks can download sensitive files from the document repository, say such as SharePoint or box.com. By using platform attestation to enforce pin protected disk encryption, hardware identity, and a limited key lifetime, we decrease the chance that the data can be recovered from a lost or stolen device. And arguably, we decrease the chance that the data can be stolen even with the device still in the hands of the user.  The BIOS integrity measurements, or BIM model, was published by the National Institute of Standards and Technology to protect computers from rootkits. BIM basically boils down to measured boot plus TPM remote platform attestation. In other words, BIM is the NIST model for everything we've just been discussing. Based on this, my company implemented a solution called BHT, or BIOS integrity measurements heuristics tool for DARPA cyber fast track last year. We included this data flow diagram along with a threat model as part of that deliverable. And we like it for obvious shock and awe purposes. Looking at the diagram, security increases from the left where you have the user, to the right where we have the TPM route of trust provisioned by the manufacturer. So, insecure, more secure. Note that as only the two rings on the right, the TPM and the supply chain that we're depending upon for measuring the trustworthiness of the device.  Given that assumption, two other questions arise. First, can you trust your supply chain? And two, are your adversaries sufficiently well funded to attack the TPM directly? We believe that properly engineered middleware can significantly narrow the window attack on mobile data. But there's nothing that middleware can do if your chipset is owned. And in order for users to be able to interact with plain text data within the allowed policy window, there is necessarily an increased risk of attack during that time. In any case, remember that the goal is to prevent the device from lying about its integrity. TPM 1.2 is widely available on PCs, but to date not widely used. As a result, the user experience around initialization and provisioning is quite poor. And this can necessitate shortcuts when you're trying to deploy a solution based on these capabilities in a typical heterogeneous environment. And of course shortcuts are the enemy of security. This problem is essentially solved in the latest hardware. So hopefully adoption of TPM 2.0 will continue to increase. As I've mentioned a couple of times, we recommend that measured boot be used to enforce disk encryption, if possible, as part of any data loss prevention solution. But on windows, that combination pretty much implies that you're going to be using their BitLocker feature. BitLocker has been the subject of a number of published attacks. Nevertheless, when properly configured, we think it's good protection. Note that for other TPM based encryption solutions, such as those you might implement using this measurement based keys capability, many of the same types of attacks may apply. So you need to do your research and do what you can to prevent exposure, reduce exposure of your keys in main memory. This gets back to the streaming opportunity I talked about before. That could be a really compelling way to mitigate the exposure of keys in main memory at the risk of trying to figure out the throughput you're going to want to get to make streaming interesting today. Can you decrypt HD content fast enough on a TPM? I don't know. But when somebody figures out, that's going to be cool. Looking forward from my perspective as a security software integrator, there are three points to consider. Intel has excellent developer support for the technologies we've been discussing, particularly on the Atom chipset. But will their mobile platform adoption strategy for Atom be successful? ARM has been slower to embrace TPM, presumably because no consumer cares. But if Intel makes TPM a differentiator, will ARM respond? I think they would. I hope they would. Finally, can software companies successfully integrate these capabilities in a way that is both secure and usable, that being the usual tradeoff? Either way, as I've demonstrated, short-lived keys are a great tool for mobile data protection. And support for TPM 2.0 is increasing. So learn to trust machines if only for short periods of time. Thanks. I'd love tons of time for questions if anybody has any. Yeah, the question was about, I mentioned a prerequisite that our current demo tool depends on TPM 2.0 as well as 32-bit windows, the point being that that's a rare combination these days. Yes, the one test device we've been able to get our hands on is the Acer Iconia, the new one, Acer Iconia W3, which happens to only be 32-bit. That is not going to be the norm, I can guarantee. If anybody else has questions, you're invited to use the mic. Or I can repeat it. Okay, I'll go to the Q&A room, which is down the hall. Thanks, guys.


Was Elvis in a Memphis hospital for exhaustion when Altamont and the Sharon Tate killings happen? This is one of the film's odder constructions. In the movie, Elvis is recuperating in a Memphis hotel for exhaustion when he hears a news report about the Altamont Rock concert outside Livermore, California, at which four people died. Someone else in the room is reading a newspaper whose headline says, Sharon Tate and four others have been murdered, victims of the Manson family massacre in Los Angeles. Colonel Parker uses those events as a sign that the world is a dangerous place and Elvis should not travel outside of the US. However, that's interesting since they were deaths on American soil. The timing is suspect. Elvis was in and out of Memphis hospitals for the last several years of his life, but there don't seem to be any records of him being in one on December 1969 when Altamont took place. And Sharon Tate was murdered by the Manson family in August 1969, so that would have to have been a four-month old newspaper article about the Tate murders, which seems to be unlikely reading material.