for River Monsters, season three, episode one is coming at you.  This is actually season three, year three of fishing for river monsters. If you guys are new to this series, be sure to smash that subscribe button, hit the notification bell, and also hit that like button so you stay in tune with the series. If you guys like this series, let's get this series to five or get this video to 5,000 likes and we'll do another one. I'm out here with my boy, Delton. He's wrapping his lucky hat that he got on kickinthebest.com. If you guys wanna go check out the merch, also Big Bass Energy on today, as you guys can tell, got the hoodie. If you guys wanna check him out, it really supports me. I appreciate it. Delton's got his Big Bass Energy shirt on and we're hunting for those river monsters today. If you guys are wondering what is searching for river monsters, it's where I go out on the river, whether it's the Savannah River or the Ogichi River and I go on a hunt for those giant river fish and that is what we're gonna be doing. This is episode one. It's gonna be killer. We're out here today on the beautiful, beautiful, beautiful Savannah River, as you guys can tell. It is very cold this morning. What is it, 32? 33, 33. 33, 33. It is very cold this morning. As you guys can tell, we're back in a little lake right here. Sun's right there and just beautiful. Look at all the leaves that are coming down. You know, this fall time and look at all the leaves on the water. So we're gonna be searching today. This is about the whole process of us finding these big fish, everything that we're doing. I'm gonna be talking to the camera, talking about the baits that we're throwing. I mean, if I catch a fish, I'm gonna explain why and that's kinda what we're gonna do. If you guys want me to add something more to this series, let me know.  There's a big mixture of fishing here and there's also a bunch of different species that you guys will see but let's go ahead and hop into it. So if you guys are wondering what I'm throwing today, the combo that I'm using is a Pro TI by Luz. I also have some of my mock combos over there that I use on the regular but what I've been using for my slow-moving baits recently since this rod is very sensitive is the Pro TI on the Pro TI reel. If you guys are wondering what pound test, 17 pound fluorocarbon. I really like that stuff, especially when flipping around some of this thick cover.  If you guys are wondering about the bait today, this is very important. So I got two different baits that I'm gonna be throwing but the rig that I'm throwing is a basic Texas rig right here. And as you guys can tell, this is a four-ot EWG hook. This is actually by six cents. You guys can get 10% off if you guys are curious and for the weight, this is actually a 516-ounce tungsten thanks to Delton because I totally forgot my lead weights today and if you guys are wondering why I only use lead weights on the river, you're gonna find out today. You will find out because it's pretty sad, man. I don't like spending that much on the tungsten because the river sometimes take them from you if you know what I'm saying. Now I'm not just talking about trees in the bottom. I'm talking about some river monsters in here. So that is the setup that I'm throwing. If you guys are wondering about the bait, I'm gonna be using the Stroker Crawl by six cents and also the Prawn by six cents as well. And I'm gonna be using both of these in black and blue. I'm probably gonna start off with the Stroker Crawl. I really enjoyed that one. This is the Prawn that I have on right now. I have yet to catch a fish on this bad boy but we're going to today, 100%. It is gonna happen. You guys are wondering, this is the packaging right here and this is the new Prawn, guys. I mean, I am excited to throw it. But like I said, we're gonna start with the Stroker Crawl and if we need to, we'll switch over to this bad boy. But he's looking pretty hot and that is in black and blue. If you guys are wondering why we're using black and blue, Delton's showing the water. Honestly, this water doesn't look as dirty as a lot of the water in the river but for the most part, the whole river is usually muddy. So yeah, depending on what lakes we go in slash creeks, on the water clarity will change. Also the water temperature is gonna be a main player today that we're gonna have to focus in on. One thing I would actually like to say as well is this is right after this is a postal cold front day. Right after a cold front, you guys know the fishing's gonna be really tough. So we're probably gonna be throwing this Texas rig around a lot today. Looking for those fish that are a little bit slower because of that front coming in. But without further ado, let's hop into this Delton. Fish bump them out of there, man. Yes, sir. Oh no, they'll hit it. They'll hammer it. I mean, they put up a good fight. Oh, there he is. Oh, he spit it out. What was that? Dude, that might have been a mudfish as I was just talking about it. It just took off to the left and it was gone. Yeah, this might be like in these cold fronts. It might be where we got a hook set right away. Sometimes they hit it one hard time and then they're gone.  It might be a mudfish. I can't tell if he's a bass or what. Dude, he's a bass. Dude, that's not a bad one. Are you kidding me?  Right here on the Stroker Crawl by six cents. Right there, black and blue in this muddy water. Cold front conditions. Got my boy, Dylan, with me today and we are about to rack him up. We've had three bites already, guys. In these cold fronts, this is what usually happens. In these cold front conditions, these post-frontal conditions, what happens is when they bite that bait, they're either biting it really soft, you have to let them eat it for a while or they hammer it in these post-frontal conditions and you gotta get them when they hammer it and he just about jerked the rod out of my hand. I thought he was a mudfish and that is a beautiful river bass to start off today, Dylan. Right there, brother. That's our first fish. We're gonna put him in the live bowl. We're gonna get pictures at the end and we'll release all the fish back in the water. But let's get it, baby. Yeah, bro. That's a good sign, brother. We'll save that. 2017, there he is.  That actually felt like a dang good one. That felt like a decent one, right there. Dang it. Right, there he is. Broke me off, mudfish. That's all I was talking about, bro. How am I dang half to buy you a whole pack of tongues? Look at that. See how clean it is? Like a razor cut it. I felt it to me, he just go. If you guys are wondering what hook I'm actually tying on, Delton, long story short. I usually don't use tungsten weights out here, but I totally forgot to look for some of my lead weights before we came out here. So we're using Delton's expensive tungsten weights, of course. But if you guys are wondering about the hooks I'm using, I've been talking about them recently. And it's the Stout Wygap hooks. It's like a basic EWG by six cents. And if you guys wanna check these out, get 10% off you can. But I'm serious when I say this. These are some of the sharpest hooks I've ever used. I know you can tell in some of my videos just me getting the fish off the hook, sometimes a pain in the butt, but I've been enjoying these a lot. I don't have any bend in them. Look how strong these hooks are. No bend in them at all. And I've had a lot of luck with them recently, except for a mudfish, turn them up. What'd you do, Delton? Let me see if I got some secret juice in here real quick. So I'm gonna throw the prawn now. I was throwing the Stroker Crawl. And that's what I've been throwing. I haven't really gave the prawn a good try yet. So we're gonna give this man a little shot. Same color, black or blue, blue flake. And this dirty water out here, that is the best. I start off with a Stroker Crawl, but this time, like in a cold front, you see how it's not as much movement as like a little, see like with that. Yeah, see how much movement that has? This'll be a little bit better on today. When the bite's tough. Oh, God! Bro, that felt heavy as heck too. I mean, just like, this is how they're eating it. It was exactly what I said. Remember when we pulled up, I was like, dude, they're gonna hit it one hard time and then it's gonna spit it out. Guys, I'm gonna have this prawn on for about what? Not even two minutes? Not even two minutes, cast up on that tree and you just slammered it. I'm just glad we're getting bites on a cold front. Oh my gosh! You kidding me, dude? Did you see my line run? I didn't. Caught a huge mudfish on a frog. Oh, what is going on, dude? I just reeled it in and he just stopped me from reeling it. I don't understand. Oh, there he is. Yo, oh, it's a bass, yeah. Right up on that tree. Yo, it's not a bad one at all. River bass, God. Guys, I put this prawn on, that's dealt. How many bites have I had in the last five minutes? Five, six? That's no exaggeration, guys. The prawn, what I was talking about, instead of the stroker crawl, which has a little bit more movement, it's a little more subtle.  I just had a bite reeling in, and he goes, how are you getting that many bites? And I threw it up on that tree and he bit it again. I think you should put one on, dude. I'm serious, put the same exact right there. I got three packs of them today, so we're good. Look at that beautiful river bass. That is crazy, guys. Right here, usually a cold front, you can get the bites, but we're getting a lot of bites right now. But you just gotta get them when they bite it. That's pretty bass. Dude, this is insane. This is insane. I've never in my life seen the crawl killing it so good, man. I mean, come on, man. 10%, listen. I don't say this much. I want you guys to go give this a try, because I'm actually kind of curious now. It made the world of it, I mean, you're watching it, dude. Did not make the world of a difference right when we put that on? It's so weird, I'm curious. If you guys have tough conditions where you're at right now, if you're having trouble catching fish, if you guys want to try this out, go try it out and DM me on Instagram. I'm very curious about this, because I just don't know. They're just smacking it.  Beautiful fish, dude. Look at the colors on them. Beautiful. So I love about this river bass right there. Third one today, baby, already. On the prong, black and blue, 10% off, down below deltons, gotcha? Yeah. Co-deltons? Co-deltons. Get them. You got them? No. I got one. Yep, they are back here. Look how small he is. Little twinkie. You are not going in the box.  So you had to bite at the same time? Yep. And he was running towards me, so I couldn't freaking reel fast enough. Look at that guy. That's a little pretty. Look at the colors on that fish. Do you know how fast this is in? This is an 8-1 to 1-0 ratio, and I couldn't keep up with them. And you couldn't keep up with them. That's crazy we had to bite at the same exact time. But I had a double of delton, dang it. You see that cypress tree? Throw up on it. Nothing? Nothing. All right, throw up in that shade right there. Over in me. Right there? Right there? On the yellow tree? Yep. Let's sit there. I'll just dead stick it. Oh, you got him, don't you? Yeah, delton, there you go. Come on, boy. Yep. Oh, there you go. Right there, delton. You got your first boat fish and your first river bass ever. Let's go, boy. I think the lucky hat helped you lay on that one. Lucky hat, man. It's the lucky hat, man. He's right over there in that shade, man. Yes, sir. Let's go do this, your first fish. Your first river fish ever. I know you wish you was just like a 10-pounder. I know, right? That would have been awesome. Come on. Yep. Oh, gosh. Big one. Something decent, dude. Yeah, something big. Oh, it's a pickerel. What? It's a pickerel. You feel big, no wonder. It's a big pickerel. You ever seen one? No, I've never seen one. Your first time ever seen one? There ain't many out here. I'll get them. Right here, so you can grab them right there. Parallels them. Okay, well, I think you like, well, why you call this fish? Give me a man, what are you doing? Oh. Give me a, oh. What are you doing? Well, that's why he's keeping it.  Oh, he's gone. Yep. Well, it's in his belly now. Really, dude? I tried to help you, and he just swallowed that curl. That was very interesting, right there. He was just like, I want it, I want it now. Dude, it just started to slowly go down. And then all of a sudden that last gulp, dude, he was just going down his gulp, and I was like, all right, man, just go and keep it, you can. One thing I noticed in this creek right here is the water temp is actually 52 degrees. Everywhere else that I've been today has been 57, 58. And with that being said, I think this fish, the reason that they're not really biting here is because the water temp is so low. So what we're gonna do is we're gonna go back to the other spot. This has been a long morning. We started off honestly amazing, had a ton of bites, it was really good. Me and Dell are back here, we were getting them left and right, and now it's just kind of dead. So what we ended up doing, the tides rose now. This morning it was low tide. So the bite might be a little bit more tough. I like it when it's low tide, this fish push up against that cover. They lock on it really well, and it's easier to target them when it's on low tide in my opinion. So we ended up coming back to this first spot that we hit, and we're gonna be going down this bank and also that bank, throwing these crawls on these laydowns to see if we can produce some more bites, and see if these fish are still locked in here. With this tide rising right now, these fish probably went from being out here by the main river, all the way back in the cut. So that's something that we might check as well. But we're gonna throw around here, we'll keep you guys updated. Holy cow, down there. How big? Oh, there you go. Let's get it. Dude, he felt like I'm freaking five. The river fish fight hard, don't they? That's a good sign, man. On a moving bait, you know, chasing Chad. This time of year, fish eating bait. You know, we've been throwing crawls all day and we just couldn't get any more bites.  And then, like what we said, coming back here, you know, the tide's coming up, we're coming back in the back of this creek. And that's usually what those fish do when they position up. Solid little two-pounder, man. Good job, brother. Lucky hat, baby, look at that. Go cop the merch, man. Oh! Yeah, what's that? Look at that, big bass energy, boys. What they gotta do, Dalton. What they gotta do? Kickin'theirbass.com, click on the apparel. There he is. Dude! Bro. Oh, it's a mudfish. Bro. I wouldn't even net him.  You talk about a fight. You talk about me trying to get that guy out of that tree. Y'all thought I had about 10 pounder for a minute there. Oh, he's barely hooked, too.  That was fun. It's a bass. He ain't bad. He was in that, oh, that was like, almost that was the biggest one today. Or he's at least as big as your chatter bit, or, yeah. I crawled right over that tree, man, and he grabbed it. If you guys would like to come along the next adventure of searching for river monsters, be sure to smash that subscribe button, hit the notification bell, and also hit that like button, and we're gonna catch you next time, Dalton. Say peace. Peace. Peace.


Now I know a lot of you out there are what I'd call brand loyal. I see a lot of posts on social media where they'll display that loyalty of their full bag, whether it be tailor-made, Callaway, right through the bag from putter through to driver. And I love to see that kind of commitment to a brand, but the question is, if you stay committed to just one brand only, is that the really best way to put your bag together? Go ball. Go ball. This could be good. It could be good. Oh and got a little friendly bounce as well. It should still come into shot. That were right on the flag, but the start of this video can only be in one place because if I want to go one brand through the bag, then what I realized in making this video that has to be one part that is imperative, I won't move because the most important thing for me is my irons. So I just hit the Mizuno Pro 221 iron. It is without doubt my favorite iron on the market right now. So I'd have no problem with being my start-off place with irons in the bag and mix that Mizuno Pro range. And I'm into Mizuno, but the problem is can I carry it right through the bag? Right, before we go any further, one quick question for you. If you were to be loyal to just one brand only, then what brand would that be? Comments down below. Now the next thing for me which would be a key factor after the irons would then be what I would do in terms of putter because I realize again that's a majorly important piece of the jigsaw for me. And what they did this year again really surprised me with this m-craft range of putters that they released. Again forge, milled face, as everything with Mizuno all about feel and it's just such a nice putter. There's a few different models in the range and if I'm honest with you I just really didn't see this one coming. Turn, turn, almost. But it's so soft in the way it feels like I said a couple of different styles to choose from them. The other interesting bit for me is these options. You get a little bit of a weight kit with it. So again you can choose to customize the putter's head weight that suits your requirements. So again I've got irons in the bag, I've now got putter in the bag and I'm more than happy so far with my one brand bag. So easy to pick up, sit on the flag. Next up would be wedges and I'm sort of doing this in the preference of where I see the bag that sits in terms of what what's important to me and wedges again are really really important. Scoring part of the game. They've got two wedges that I would choose from in terms of models. T-22 is absolutely gorgeous. I just played a 60 degree wedge there in the copper denim finish which is gorgeous. Two other finishes in that range but then I'd also not dismiss the ES-21 wedges either which again more of a sort of game improvement. Iron bit of bulk and mass but again forged. And I suppose what I'm learning is the key to all this is the feel and sound out of every one of these clubs we've played so far. So wedges, putter and the irons all forged, all feel fantastic and all are performing incredibly well. Mizuno are doing so well this year right now but there's a big problem still yet to come. So we're sorted we've gone putter through two. I think maybe I'll be carrying a five iron then I'll be looking to go into hybrids and I've got to say one of my favorite hybrids available right now again was the the GPX Fly High. They're incredibly good looking from above in terms of the crown. I love the way it sits. It's fairly neat and small profile really suits my eye but ultimately it performs really well. So I have no problem in going like I said from my longest iron in the bag. I'm moving on into a Mizuno hybrid.  I think we just about got there as well. That's hybrid done. We've now got just a couple of clubs and that'd be fairway woods. Maybe a long driving iron and maybe the driver and there's still a big problem yet to finish this bag off but the way them clouds are looking I think I'll nip back inside. We'll get back in the studio and we'll finish that video off in the wall but don't go anywhere because I need to tell you about the big problem with Mizuno through the bag. This thing doesn't have go you know because it's now on into the top end of the bag and this is the new Mizuno Fly High whether it's 2021 or 2022. I'm not sure but it's a Mizuno Pro range and first of all just take a bit of a glance at it. It's in this black finish which again is so easy on the eye. I think what they've done this year with this whole Mizuno Pro range I've kind of raved about it as you well know but again they've just got a great feeling long iron replacements and to have this little bit of bulk and mass like I said for me to be hitting what this is the two iron and for me to be able to hit that off of a tight lie on the mat here piercing both like it is such a good option and I have no problem with continually my Mizuno through the bag with a two iron three iron maybe and then it's into the fairway woods and I think this is one of the changes that they made this year which was again a massive move forward for me. I've always questioned the fact that everything about Mizuno for me I just think of irons that's my automatic thought process and I think that's the problem they've got to overcome and they've got to make fairways or woods that are appealing to the masses and just as popular let's say as what the irons are and in the fairway woods I think they managed to do that and again from a looks perspective superb performance wise this club is actually in my bag it's a five wood and it absolutely goes out like a rocket to be honest with you it's this club where it's really replaced my sort of three wood in terms of why I've got a five wood in the bag because it's so so powerful off the face real fast ball speeds again real piercing ball flight so at this stage I'm all the way up to my fairway woods and I'm more than happy to be gaming that full bag of Mizuno's so I've referred consistently throughout this video so maybe one big problem and that big problem is at the top end of the bag and it's the driver because it's for me still the one thing that they haven't got quite right at Mizuno and whilst they've made massive advancements in terms of where they sit right now with their driver and there's probably three or four models is the right now that you could choose from neither of them really make me want to put one in the bag so they've still got that one step further before I could consider being a one brand man but right now I would say Mizuno are the closest to it in terms of hitting right the very top marks for me right throughout the bag where we started with that putter into wedges into irons without doubt then into the long irons and the hybrids then maybe even those fairway would sneak in like I said but the driver would still be that final issue they've not quite conquered yet but I fully expect that to change into next year and we'll see how Mizuno continue to be one of the fourth right brands in this industry and are producing some amazing equipment right now right as ever as the rain comes down outside here at Cardin Park I'm going to call it a day thank you for watching comments down below don't forget the question I asked you earlier on in the video about your brand loyalty hit that like button if you enjoyed today's video and subscribe if you don't already I want to see a little bit more of that content that we're making it I'll making this one mentioned if you do subscribe I've never mentioned about hitting that notifications bell a lot of people do ask in their videos but I would urge you to check that notifications bell is switched on and you get a little bit of a reminder each time that we post a video that's that the we've put something new and exciting to watch on the channel right that's my appeals over I'm done I'll see you all soon bye


I'm gonna cut straight to the chase on this one. TikTok openly allows the distribution of soft core child pornography with no repercussion. I don't make dead serious videos very often, so I hope you guys will dial in for this one. Just watch this TikTok as my premise. Yes, come to the room. Yes, I'm gonna be her butt.  Now obviously it's concerning that a 13 year old girl could be on TikTok doing that, but that is not even close to the worst of this stuff. And to be honest with you, I can't really show any examples and I'm sure I'm gonna have to blur most of this because the content that is widely available and incredibly easy to find on TikTok is so vulgar that I would be banned from YouTube if I showed you it.  It is no mystery at all that the sexualization of women on TikTok is what runs the app.  And I want to be clear, this is not their fault. Addison Rae's an adult. She's beyond successful making the stuff that she makes and that is totally fine. However, the two problems that arise from that. So number one, all the miners on this app see the success that people have by making these dance videos where they are more or less degraded, but the bigger issue is that TikTok allows it. And to be frank, allows is not even the correct word. The correct word is encourages. Now I really can't show much here. Here's an account with half a million followers. The age is in the bio and it is significantly less than 18. Almost every single video has over 100,000 views. This one in particular has 6 million and every video is the exact same thing. It's just a very, very, very low cut shirt. And how do I describe this? Just bouncing her tits. Every single comment references how the person will be saving the video and using it for later. Here's a top comment. Hopefully you can take that implication on your own. And as much as I think it's irresponsible that she would post this content, she's very young, clearly very impressionable. But on top of that, it's really not her fault. TikTok should not allow this. TikTok is entirely to blame for this. So it's not enough to say that it's slipping through the cracks because so many people post videos to TikTok. How could they manage this? This is a booming account and it's being pushed onto 4U pages everywhere. This is a crude joke, but I made it in all seriousness. If I was a convicted pedophile, I would be having a field day. Let me put it this way. If you think that I'm being too harsh or that I'm body-shaming, for example. If any of these videos of minors on TikTok were found on a convicted pedophile's phone, would you be comfortable with that? Is it illegal for them to have those videos? Because I don't think this is the girl's fault and quite frankly, I wouldn't think it's the pedophile's fault either because the girl is allowed to post it with no repercussions and the pedophiles allowed to download TikTok and save any video they want. The same as me and you can. To make matters worse, all the minors that post these videos always have a link to their Instagram and their bio. Now again, in the hypothetical situation where I'm a pedophile, all I have to do, click on their Instagram. Now I know this girl's first name, last name and location.  And a quick note to those in the crowd who will say, oh, it's the parent's fault. Yes, in the perfect world, we would all have the nuclear family, but we all know that's not real. I'm sure more than half you who are watching this don't have the perfect family life. And for that reason it is TikTok's burden to ensure the safety of the people that they allow to use its app. And the reason they don't is because they make a hell of a lot more money by allowing everyone on this app to do whatever they want. So my concluding note would be this, we always make the joke, you know, oh, I don't want to have a daughter after watching TikTok. Well, if my daughter at the age of 12 can make a TikTok and post to this massive public forum, a video of her sexualizing her body and that video gets pushed to the masses because TikTok's algorithm favors content like that. And now my daughter's full name and location are available to anyone with bad intentions. Yes, I do not want to have a daughter. All right, boys. I'm interested to hear what you guys have to say about this. So let me know. Peace out.


Okay. All right. Welcome back everyone. Hope you had a good lunch. Did anyone go into town or stay here? Anyway, okay. I'm just going to give a quick introduction to this new initiative that was launched last year. It's called Open Source Science. It lives at NumFocus, which was mentioned earlier as a nonprofit in the U.S. That is the home to many well-known multi-Python projects, including Jupiter, and pandas, and NumPy, and SciPy. The goal behind this initiative is to accelerate scientific research by improving the way open source software gets done in science.  This is me. I'm at IBM Research. I do community. You can connect with me on LinkedIn if you'd like. So, big picture. We're facing some pretty pressing issues as a planet, as a society, including climate and diseases and many other things. And we're going to need a lot of science over the next few years, if not decades. And without a really more robust, much more robust infrastructure and foundation of open source, it's going to be much harder to make progress. And some of the challenges that we're facing include this phenomenon that people are constantly reinventing the wheel, solving the same challenges over and over. Another challenge is that we are seeing people build cool software that then just dies on the vine in some, you know, abandoned GitHub repo. There's not just in science, but in science in particular, lots of challenges around sustainability and funding of open source projects. We see that often people don't have a consistent way of getting trained and on-boarded into doing good open source. Unlike in the private sector where the people developing open source are usually software people, in science, it's usually science people. And they can have a hard time making this part of their career paths. We see gaps between domain experts and people with the computer science and software engineering skills. And the question becomes, how do you bridge those gaps? It still can be hard to pitch open source to the people that hold the purse strings. Overall, we see a lot of incentives misaligned, visa-visi, you know, ideal open source culture, and I'm sure there are many more. And so what this open source science initiative tries to do is improve things by bringing together scientists and open source developers and other stakeholders to share those practices, to identify common pain points, and to explore solutions together. So as I mentioned, we're an unfocused program launched last July. And how we work is we've set up a number of interest groups. We have three domain-specific groups, chemistry, material science, and climate sustainability, and then very soon also on life sciences and health care. And because it sits under an unfocus, anyone can suggest additional groups that should be added to the mix. We also have a couple of horizontal groups one is focused on the question of reproducible science and the other is building a map that will let you explore the interrelations between existing tools and the published research and the people involved behind both. The map of science is a pretty cool project. We're starting to actually do some prototyping and this is some data we collected at a recent conference in Greece where we just show orange here are the projects that are used by these the people attending this conference and then blue are the contributors on GitHub and GitLab. I'm just starting to see some very basic non-earth-shattering yet, but interesting relations between those projects. So you could imagine if you were to start a new science initiative, you could maybe maybe want to talk to some of the people that are involved in several of these open source projects. Other events, other activities that we do, we do events. In person we are starting to do virtual meetups probably later this year as well as new content that we're starting to publish focusing on learning about these various projects and how they operate. And so that is a very high level intro and the reason we're interested to be here is because AI of course has come up many times in these domains that we cover, including generative AI. And as I mentioned earlier, we're very interested in connecting this emerging community with the latest trends and skills in open source generative AI and to bridge those two worlds. That was a quick intro. Any questions? If you're interested, you can follow us. We're on LinkedIn, we have a newsletter, there's a website, open source.science, and expect to hear some things emerge over the next few months as people bring up these AI topics in the interest groups. I'll ask a question. Sure. Because you guys have not been there but Tim was there and I think it's really interesting. So I guess kind of what is the most typical friction points you see between scientists and open source people and how can we as developers here at the most, how can we help scientists advance solve these problems? What's a good way for people here to engage and help scientists? So one point of friction is definitely the skill gap. So you have people developing code I call them science people versus software people but of course it's a simplification but who are developing code for the purpose of let's say publishing a paper or getting a PhD. But then not having the time and resources to really make sure the code can live on in some or is set up in a way that could be for it to be continued to add value in some community or in collaboration with others beyond the publishing date of that paper. And so really trying to attract not just scientists but also people who have the software engineering, the coding skills to share their best practices and help scientists you know overcome their challenges. There are, we also are looking for examples of where people in the field are innovating and trying to find new ways of doing things. So there's with regard to managing the skill gap between or this this gap between the domain experts and the people understand software there are different approaches emerging and we're looking to you know highlight success stories and and share insights that people gather from these experiments whether it's like upskilling scientists of some degrees or putting people in the middle that can kind of mediate between those those two groups right some cases they're called research software engineers whether it's standing up a new unit at a university that can have software engineering jobs to help you know certain projects advance. So we're interested in bringing together those experiments hopefully successful experiments. Thank you. I just have a few feedback. I think I think uh scientists kind of a application you need a lot of domain knowledge for most of the software engineer they probably either forgot a long time or they did not actually um focus on that because every software engineer is very busy for their current job and things like that so I don't know I mean maybe school academic is probably having more people I mean student interest to gain to the scientific unless uh unless the software engineer is focused on this vertical area certainly they will yeah that's that's exactly the challenge right so so either you try to get the scientists to become more of a of someone who can do software things or you bring in people who understand software but then they have to first understand what the science wants to accomplish like in the specific domain right so it's not an easy easy fix but yeah so with this initiative we're trying to bring these two worlds together right so open source culture and and science and uh we'll see how that goes anyway and we just wanted to mention here because I think we're going to see more things come out specifically with regard to open source AI because that's we see that kind of starting to gain more traction yeah the I think the focus of a lot of these tools is AI so like scientists who do material science they look how can generate if I generate new materials people who do cancer treatment look how can we make new drugs and understand what's going on right so like it's it's a lot of it is AI so in scientists generally across the disciplines they want AI it's a life hate relation but they doubt it can help because like they have all the knowledge right so it's a very interesting tension they want the AI to help them but they're afraid is gonna first of all is going to waste their time right now it's very inefficient and second like nobody knows what's going to happen if they actually AI starts to behave like a scientist right so I think it's everywhere because the board so it's very very urgent all right that was it


It's Hopalong Cassidy. With action and suspense out of the Old West comes the most famous hero of them all, Hopalong Cassidy, starring William Boyd. The ring of the Silver Spurs heralds the most amazing man ever to ride the prairies of the early West, Hopalong Cassidy. This famous hero thrills his 60 million fans with action and dangerous adventure. In the role of Hopalong Cassidy is the popular star of the motion picture series William Boyd and appearing as that laughable old character, California, is Andy Clyde. Now to our story, the man who made Willie Wurl. Hoppy Spurs at the moment are jingling down the boardwalk of Mescalero, heading for the Dusty Little Town's biggest attraction, Frenchie Laverne's Big Casino Dance Hall. For something new has been added, a troop of traveling actors who have brought new excitement to Mescalero's nightlife. Hoppy walks in, looking around, trying to spot California in the crowd milling about the place. Hey, California!  Now, California! Come on in to the exacting dudes in regular circus. They're over there near the runway. See? Hanging around Frenchie's gal, Dixie. Come on, I'll introduce you. Will you let go of my arm? I didn't come here to see any show. Show? They ain't given no show. They're given autographs. Autographs? Sure! The leading man for the next play, that young caller standing by, Dixie. He's been writing his name on pieces of paper and pasting them out. What for? Look, California, I'm getting dark circles under my disposition. Well, but isn't Hopalong Cassidy? Dixie's waving at you. Hoppy, come over here. Drew, I want you to meet the best-looking, most famous cowboy in these parts. Hopalong Cassidy himself. Hoppy, this is Drew Mansfield of the Avon players. Aye, a pleasure, I'm sure. Hoppy's the one who should be given out autographs. Ho-ho-ho-ho! Well, I'm meanin'. Why not? Here's my pen, Mr. Cassidy. Do you mind? Yes, I do. Come on, California. Oh, go on, Hoppy!  He was Hoppy for me. I want it. Okay, okay, if you want to be foolish. He's doin' it. There! Thank you, dear. How about a seat? Hey, wait a minute! Hey, uh, Hoppy, Hoppy, wait for me. Where are you going? Say, what's the rush now? Hold on, uh, shucks. Dixie didn't mean no harm. You're gonna see her in the professor's show next week? The professor? Sure. Stratford Bardwell, he calls himself. The boss actor. A skinny old goat and velvet pants.  Friends, he told him he couldn't use the opera house unless Dixie was playing, uh, uh, Julie Ed. Julie Ed? You don't mean... Oh, no. Ho-ho-ho! Not Romeo and Juliet! Yeah, yeah, come to think of it, that's what I hear them call it. Uh, by some fella named, uh, Willie, uh... William Shakespeare. Yeah, that's right. How do you know? Ha-ha-ha-ha! Shakespeare and Mascallero! Cassidy! Huh? Who's that? Oh, Joe Gregory. Hi. I didn't see you there in the dark. I... What's the matter? I kind of figured you'd be dropping around here. I've been thinking over what you told me yesterday in the hills. I told you. Think I didn't recognize you, huh, Cassidy? Just because you wrapped your bandana around your face? Now, hold on. Well, I'd recognize your voice anywhere. Or you've been wearing the same clothes and riding the same white horse.  I don't know what you're talking about. Why, this coyote's been eating local weed.  You don't even remember telling me to leave my money at the foot of Red Macy, either, do you? I never figured you was the kind of tribe Blackmail, Cassidy. Blackmail? I've been going straight for a long time trying to make good ramrod in the flying X, and... Now, just because of you and your threads... I... I... I... Gregory's here. You take care of him, California. I'm going after that shootin' ombré. Now back to Hopalong, Cassidy, and our story, The Man Who Made Willy World. When Joe Gregory stops Hopalong outside Frenchie Laverne's dance hall and accuses him of Blackmail, a shot rings out some distance away and Joe falls, badly wounded. Hoppy leaps on his horse and goes after the gunman while California carries Joe to Doc Radcliffe's place nearby. California is returning to the Hitchin' Rail in front of the dance hall as Hoppy returns from the chase. Hoppy, did you hit the snake? Ah, no, I doubled back. How's Gregory? He's hurt mighty bad, Doc Search. You mean you let that dry gulcher get plum away? No, I wounded him before I lost him in the darkness, hurt him yelp. And I found this on the ground where he dropped it, a carbine. Hmm, that's a mighty fancy shootin' iron, all engraved. There, look at here. Yeah, I already noticed that, California. There's only one man I know who owns a custom-built carbine like that. Who? Frenchie Laverne. Why, the pole cat. Why did he want a Bushwack Joe Gregory-ish pole? I said it was Frenchie's gun. I didn't get close enough to tell who it was. It could have been Frenchie, but if it wasn't, he might be able to tell us who's been using these guns lately. Come on. Hey, hey, hey, where are you going? Frenchie's office is inside here above the dance hall. I know, but the way I'm feelin' right now, I'd rather drop in unannounced. Come on, the back stairway is around this way. See anybody in that window? No, the room's empty. Try the door. It ain't locked. Good. We're goin' in. The chump and the bullfrogs. This here's the most elegant room I ever seen. Look at all them leather chairs, the purdy pictures, and the doodads on the wall. Yeah, mighty fancy, all right. I'll just leave the carbine on the desk, right beside that roll of bandages. Yes, sir. You must have got that bullet hole plugged up right here in Frenchie's office. See, look at this here box full of bottles of medicine. Yeah, Frenchie's emergency kit. He's got everything in there. Yes, sir. Idle, dean, car, bollock, clove, clove. Watch this. Floral hydrate. What kind of medicine's that? That stuff is medicine the same way a blackjack is. That's the technical name for knockout drops. Yeah, what's it doing here? What are you doing here? Frenchie. That's the question, gentlemen. We're waiting for you, Laverne, and returning something I think belongs to you, that carbine. Oh, I see. Thank you, I'm glad you recognized it. Do sit down. I'll stand if you don't mind. I don't mind. What's troubling you? You see this sleeve? Your sleeve? Oh, you mean that hole in it? Two holes. One where the bullet went in and the other where it came out.  Take it easy, California. I wasn't hit.  The man who fired that shot from your gun was standing directly behind me. All he could see was my back. The bullet passed between my arm and body. Jump, Frenchie. Harsher, Frenchie. It must have been you he was shooting at, not Greger. Exactly. You seem to be in good shape, Frenchie. So I know the man I winged out there wasn't you.  You can be sure of that. No, you'd hire somebody else to do it for you, wouldn't you? Come, let's not be offensive. Remember, I had every excuse to kill you just a few seconds ago when I found you prowling around here. Legally, you are burglous. However, I changed my mind.  I admit nothing. But if you're interested, there are six of them on guard outside the door, I just entered. I see. And I don't suppose you have any idea how these bandages come to be on your desk. No idea. I've been out all evening. Oh, really, Cassidy, you're coming here like this.   Hey, Cassidy, I'll catch you in on everything. Good night, Frenchie. That's your answer. Yeah, and if you're thinking of calling in your men who are waiting outside the door, forget it. Not that door. Nothing is going to happen to you in here. Well, we'll keep the herd up here on high ground for a couple of weeks, California. The grass is better. Yeah. Looks like the boys are having trouble. Yeah, that bunch of way ahead there is trying to run down the bluff below ground again. I've pulled it. Way down there past the foot of the bluff, those two riders. Well, I'll be darned. Ain't that Dixie in the paint? Yeah, and a man on a white horse. Can't recognize him from this far off. Look at him riding hand in hand there. Now they're stopping, huh? Hey, he's a kissin'er. What do you know? Must be Frenchie Laverne. It'd better be Laverne. If it isn't, Dixie's not going to have trouble. There he goes, riding off by himself. Oh, I see. Just leaving her there. Maybe Aunt Laverne and whoever it is don't want to be seen riding back into town with Dixie. Hey, hop, hop, hop. Hop here. Looks like that bunch is trying to stamp feet over the bluff. They're only heading up, turn them. They can over there, run down the girl. Sure. I'd better go hit her off. Fun a minute, Miss Renee. Not long, what's the matter? The boys are trying to head off to stampede down that bluff. Well, sounds like they've got everything under control now. But you'd better wait a while. I didn't know any of you boys were working cattle up there. If they stampede down that bluff, they're liable to.  Oh, you'll be all right. Oh. You saw him? Well, I saw somebody. Hoppy. Yeah? You saw? My eyes aren't too sharp, Miss Renee. Can I depend on that? Of course. It's none of my business. Well, if you and Laverne want to go riding together, what's wrong with it?  Why is she lots of things? So what? I don't know a Frenchie Laverne a thing. Not a thing. Why should he? Hoppy, don't call me Miss Renee. We're friends. We are, aren't we? Of course. What's bothering you, Miss Renee? Laverne. I hate him. I wish I'd never laid eyes on him. I wish I'd never come here. I hate it.  Well, why don't you leave if you feel that way about it? If I only could, if I only. Laverne can't keep you here. No. No? Of course not. Hey, it looks like California's heading this way with. Where? Oh, I'd better be gone. Bye. Hey, Hoppy. Hi, Hoppy. Well, I see you brought company with you, California. Hi, Chef. Hi. This is a surprise. I figured it might be. This plain old fool says he's going to arrest you. What? Kind of hot for a joke, isn't it? It ain't no joke, Cassidy. You're under arrest. What for? Blackmail and extortion, among other things. I've been trying to tell the old warra- Hold on, California. Who says I blackmailed him? Three ranchers in the territory who've had the gumption to come to the law about it. How many's keeping their mouths shut? I wouldn't be known. I never would have thought this a U-hop along. No, sir, I never would. Blackmail's a college game. I agree. What evidence have you got? Plenty, among other things. The blackmail note to old man Jenkins, the boss of the 10-star spread, threatening to tell his wife about that gal in Aveline if he don't pay off. He's going to deny you signed this. Go on, take a good look. Sure does look like my signature, all right. That's a fair fact. That's not enough, Cassidy. There's one other charge. It happens that Joe Gregory died this morning. I'm charging you with murder. Now back to Hop along Cassidy and the man who made Willie Whirl. Arrested on a charge of blackmail and murder, Hoppy is locked up in jail at Mescalero to await trial. It's a little after high noon, and the sun beats down on the adobe calaboos, making the sheriff mighty uncomfortable as he waits for the jailer to come and take over. I sure wish that jailer'd hurry back from dinner. It's so dagblasted hot in here. Howdy, Sheriff. California. If you want to see your pal, he's in that third cell over there. Hey, what's that you got? Oh, buckets of suds from the bar room across the street. I thought Hoppy might like something to cool off with. Howdy, Hoppy, I brought you something. So I heard. You know I don't drink that stuff. Why couldn't you have brought me some sarsaparilla or just plain water? Well, if you don't want it, I might as well toss it out into the street. I ain't thirsty myself, and uh. Hey, hold up there a minute, California. Spilling that beer on a day like this would be plumb sinful. If he don't want it, I sure can use it. Yeah, sure, Sheriff. I didn't think of offering it to you. Now go ahead and drink it if you want. Thanks. Eh. Good, eh? Oh, it sure hits the spot. That's fine. Say, is that a checkerboard you got here? Sure, drag up a chair. I'll beat you out of really play checkers. You teach me, eh?  Just as soon as I finish this. Eh. I wish it had held more just a quarter. Which color pieces you like? White or black? Oh, don't make much difference, I reckon. I'll beat you either way. Well, I'll take the white. Set them up. Sure is hot.  Yeah, it sure does. Funny, I feel so... What? They matter, Sheriff. I don't know. My eyes, I can't tell the black pieces on the white. Don't. Hey, what happened? What's wrong with the sheriff? Hold your horses while I find these keys. There. What happened? What did you do? Oh, that beer.  That's crazy, huh? And you took those knockout drops from Frenchies' office. Yeah, I figured they might come in handy sometime. Now we get a chance to track down the pole cat who's doing you dirt. Evening, Laverne. Oh, crawling up my back steps again, eh, Cassidy? I noticed the door was open. Yes, I was cooling off. Sit down. I'd talk better standing. Drink? No? I hear you don't mind serving drinks. The whole town's talking about that Mickey you fixed for the sheriff. But they're not laughing, Cassidy. Joe Gregory was a good man. The boys don't like his being murdered. If you come here looking for protection. I don't need protection, Laverne. All I need is evidence on who really killed him. And you are the one who can supply it. What kind of evidence would you like? The truth, that your gunman missed me and killed Gregory by mistake.  Do you really expect me to admit that? No, Cassidy, you should have known better than to reject my offer. Now you can stew in your own juice.  Nearly all these black male victims were threatened with a revelation of information which only you might have. Either that or... Or what? Or someone working for you. One of those dance hall girls, for instance, whose job includes making the customers buy drinks. A girl might do quite a job getting some of the boys drunk enough to blab all their troubles and secrets and then pass on the information to a confederate who might make use of it. Really building up a case for yourself, aren't you, Cassidy? All you have to do is find the confederate. It could be you. Nice try, but it won't work. I didn't say it was you. I just said it could be. Could be almost any man One of those girls might go for. A girl who'd help that ombre make a fast dollar in the hope that they both might be able to pull out of here in style. What are you getting at? I'm just reaching Laverne, trying to find an answer. You see, I don't like being framed. You don't, eh? If you were innocent, you might help me. Get out. I will, but think it over, Laverne. Think it over. I don't want anything here but this table. I know. I don't want to wake this table boy sleeping there. Remember, I'm a wanted character. What you looking at? Is the horse's leg hurt? Oh, not bad. It just looked like it. Oh, it's nothing. Let's go on in. I still don't know why we... Dixie Renne and those actors are rehearsing inside. I want a word with her. I don't want to hear it. I don't want to hear it. I don't want to hear it. I don't want to hear it. I don't want a word with her. This door and back is the only one that's open. Come on. Come on. It's dark. Let's get her away and watch the stage. He just says scars that never felt a wound. But soft. What light through yonder window breaks? It is the east. No, no, no. Off our feet. Thanks, Professor. That sounded perfectly fine. What's wrong with it? What is wrong, she asks. You can be forgiven, Miss Renne.  But Mansfield, he's supposed to be a professional. I resent that. You do. And what of the bard? What of Shakespeare? He is whirling in his grave. You won't do Mansfield. Miss Renne, I plead with you. Who is going to play Romeo? And if you don't like it. I submit my resignation immediately. But immediately. Well, goodbye. Oh, this is too much. Too much. Back here in the shadows, California. For bard, well, who have directed Edwin Booth cannot possibly stomach this amateur. Don't mind him, Dixie. He's a temperamental old cuss. And what of the bard? What of Shakespeare? He is whirling in his grave. Hey, man. Hey, listen to Mansfield imitate the professor. That grew Mansfield's short, can he? Yeah, he sure can. And this is one performance I won't forget.  The rehearsal's over. We don't have to be quiet no more. He's gone. Huh? The staple boy's gone. I say he's gone. Yeah, so he is. I only hope he didn't need to go after that. That's just what he did. Oh, the sheriff. Old beer, huh? It's about time you learned that this town don't take to escaped murderers. Let me have those guns. But if you'll just wait until the actors come out from the rehearsal, I think I can find out who's responsible. I ain't waiting for nothing. Get on your horses and no funny stuff. Look, they're coming out now. If I can just... These guns in your ribs say you get moving toward the jailhouse. But there'll be more trouble. Not if I can't... Ah! What in blazes? It's French. I'll blade your last love scene with Dixie. Drop that gun, Frenchie. Ah! What's going on? Quiet! Quiet, everybody! Quiet! Look, I had to do it. He was going to kill me. I saw it all. Be quiet. He's dead. Frenchie is dead. I'll handle this. Now let me see. I guess he is. All right, get back, folks. I didn't want to kill him. The sheriff saw it all, Drew. It was the only thing you could do. Can I up here, sir? You be quiet, Cassidy. So plain much happening. I don't know what to do first. You stay right here where I can keep an eye on you. Don't you think you'd better tend to Drew's wound first? You hurt. No. No, not at all. Let me see there. Did Frenchie wing you? No, nothing. Nothing, I tell you. I'll take Dixie home now and get her away from all this. Sheriff, are you going to stand here and let the blackmailer murder a getaway? I sure ain't. I'm taking you in right now. I'm talking about Drew Mansfield. He killed Joe Greger and he's been impersonating me. Why, you dirty. Why, autumn? If you're so innocent, why don't you let us tend to your arm?  For a man who's not wounded, there's sure a lot of blood dripping down your sleeve. Here, let me cut the sleeve open with my knife. No! What's the matter, Drew? What have you got up your sleeve? Now back to hop along, Cassidy. Why couldn't you leave me alone, Cassidy? Sure, let you get away and then I'd take the ramp for all you've been doing. Well, if this ain't the dag blamest thing I ever seen. Drew has on another suit of clothes under his regular ones. Yeah, and that underneath suit of clothes is just like hoppy. You're all trying to frame him. I tell you, Frenchie was a guilty man. That's not very sporting of you, Miss Renee. Trying to pin Gill on your dead boyfriend. I've never forgotten that autograph you asked me for and then turned it into a blackmail note.  He was tired of your two timings. I realized it was Drew that you met in the canyon. That day he was riding a white horse with black stockings. But the night when I was in the stables, I noticed his horse had his black stockings painted over with white calcum. Well, I'll be darned. That's what you stop to look at. Yeah. He made his horse look all white like topper. Then he could pretend he was you. This is the dirtiest flame up I've ever seen. There's not a word of truth to any of it. Those protests seem a little feeble, Drew. Hop along. Kind of looks like I owe you an apology. All right, come along, Drew Manfield. You've played your last trick, Steve. Very golly, Hoppy. How do you always figure these things out? I knew I was right when I heard Drew impersonate the professor tonight. He could impersonate me just as well. I understand about that and about the horse, but how in turn nation did you ever guess that Drew had done another suit underneath these regular clothes? Well, I noticed that his clothes seemed awfully bulky. Too much so for this hot weather. So I deduced that he had double dressed. Huh? Double dressed? That's a term actors use. They can quickly take off the top layer and have another complete suit underneath. Well, how did you know? Ha, ha, ha. I once played both the angel and the devil in a Sunday school play. Oh, Hoppy. Yeah! Ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha, ha. Goodbye from Hop along Cassidy and California. These partners will be riding out again soon into a threatening episode of Range War, and we hope you'll be with us. Hop along Cassidy, starring William Boyd, is transcribed and produced in the West by Walter White Jr., the man who made Willie Whirl was written by Irvin Ashkenazi. All stories are based upon the characters created by Clarence E. Mulford. This is a Commodore production.


Yeah, so this talk is actually about some work that started in the academic world. We wanted to make some, or looked at how to make DAA on TPM to probably secure. Then we thought, since we looked at a real world crypto scheme, it's actually, it would be nice if we can now get the probably secure version back into the real world. And this talk is basically about the journey that we took with this work. So let's start with this direct anonymous attestation and TPM actually is. So TPM stands for Trusted Platform Module, and it's a secure crypto processor, some small piece of hardware that can securely create and use cryptographic keys. And the idea of the TPM is that it's embedded in a larger system called the host. It could be a computer or a smartphone, and is meant to monitor and measure the host. So it can, for instance, make attestations then of what software is running on the host. Is the host really using keys that are stored on the TPM? And the idea is that the TPM then serves as a root of trust. So you cannot secure the entire phone, but if you have some trusted chip that tells you that everything on the phone is actually okay, you somehow convince that the entire phone actually does now. Things in a secure manner as well. And while you can make those hardware-based attestations with standard certificates and standard signatures, just let the TPM sign whatever its measures from the host. The problem with that would be that then all the hardware-based attestations would be fully linkable and reveal the identity of the TPM. And that actually would be really bad for privacy because all of your, yeah, all the time that you want to use hardware-based attestation, you're linkable and all the things can be put together. So actually that kind of raised some loud concerns of the privacy community. And the good thing is here that this time the concerns were actually heard and acknowledged. And so what then the TCG, that it has a computing group that standardized those TPM does is they went for a protocol that is called Direct Anonymous Attestation and was developed exactly for the purpose. And this DA protocol basically makes those attestations but in an anonymous way. So the verifier is still convinced that it sees an attestation from a certified TPM but without learning which concrete TPM has made the attestation. And the attestations are really fully unlinkable unless the host decides otherwise. So the host can make those attestations or signatures with respect to pseudonym. And he can choose to reuse the pseudonym but by default they will be fully unlinkable. Okay, and the first protocol, as I said, was actually done as a joint cooperation of privacy group, cryptographers and security experts when these TPM chips came out. The first protocol was then proposed by Brickle, Kaminich and Shen in 2004 and was adopted by the TCG and standardized and the TPM wanted two specifications also later on in ISO. And the first scheme is based on RSA but in the newer version and the TPM 2.0 specification they went to elliptic curve and pairing based schemes for efficiency. And the newer TPM interfaces actually also have a really nice design whereas the first TPM spec was really hard-coded for that one particular protocol, the new one offers very flexible APIs and actually supports many different DA protocols. And some of the protocols also have been ISO standardized. And this is not just some theoretical concept and some kind of specs that nobody uses but actually TPMs or chips with such TPM support have been sold more than 500 million times. So it's really one of the most kind of complicated protocols with your knowledge proofs and everything that is quite widespread in the real world. And I would say that the interest is actually kind of growing nowadays because we see more and more applications what you want to do, for instance, secure authentication with mobile devices or secure measurements with IoT things where it's hard to, as I said, secure the entire device but you can put some trusted chip in there and then bootstrap the security from there. And in fact also the most kind of recent advances in trusted hardware, the SGX platform from Intel also uses a DA variant which is called enhanced privacy ID or EPID for the defective standard of authentication of SGX enabled devices. Okay, so that is a very kind of short intro what this DA and TPM is. And as we heard a couple of times at the conference already it's nice if those things in the real world are actually provably secure. And that means that we should have a formal security model that really defines what the adversary's capabilities are and what he's supposed to do or not supposed to do, for instance, what is actually unfortunately anonymity linkable and linkability formally mean. And then if we have such a security model the scheme, the cryptographic scheme should be proven secure in that model because it tells us that there's no attack strategy in the model. And then finally, because we wanna have real world security we should have a secure implementation of the protocol that has been proven secure. Okay, so let's see where we are in this roadmap now 12 years after the DA was invented. And actually it had a pretty good start because as I said that was developed by cryptographers from the beginning so they made protocol coming together with the formal security model and they proved the scheme secure in the model. However, the scheme was not, the formal model was not kind of complete enough that it was missing some features and functionality. In particular, it was missing the capability to actually output signatures to the verifier which might sound a bit weird, but basically verification was modeled as an interactive process. But that means that in practice you are not allowed to work with signatures, you're not allowed to store them and to maybe re-variate them, send them forward because then you step outside of the security model and the approval security guarantees will not hold anymore. So that was kind of a significant limitation and in the follow-up paper by Chen Marseille and Smart they tried to overcome the limitation by, in that, so it's an ideal world definition actually in the ideal functionality then they output concrete signature values to the verifier. Unfortunately this was done in a too simplistic way. Namely they modeled signatures as being truly random values to model that signatures are not allowed to reveal anything about the signer's identity. But that is in fact way too strong because a signature is not a random value if you have a key you can distinguish it clearly from a random value. So actually this model was now way too strong, it could not be realized by any construction. But actually dealing with cryptographic values and the assimilation-based definitions is some inherent kind of struggle. So when the work on formal models for DAA continued they went to the more established game-based definitions. But unfortunately the first definition in that world was having the exact opposite problem. It's too weak. It allows totally forgible schemes to be proven secure. And that means that even if you have now security proof in that model it doesn't mean anything because you can also prove a broken scheme to be secure. And then there was some other follow-up work where it added some extension and also used it for instance for the enhanced privacy ID scheme for SGX but they were all built on the initial scheme and the initial model and that means they all inherited this unforgibility flaw. Then there was a paper by Bernard Allaware where they discuss all these flaws and the existing models and try now to kind of solve it by presenting a very extensive set of different properties, I think eight or nine properties in total. But unfortunately they did that not for real DAA but for pre-DAA. And in pre-DAA the TPM and the host are considered to be one party. And that means that they share the same corruption status so either they're both honest or they're both corrupt. But that means it does not capture the most interesting case namely that you have a corrupt host with an honest TPM when then you want to bootstrap security but you have to assume that both are honest which kind of renders the use of TPM basically useless. So interestingly despite being DAA there for 12 years being 500 million ships and there's quite a line of work on formal security there was not a single security definition that actually was achievable and defined the security properties that we wanted. So we gave it a shot and hopefully got it correct this time. We went for a security model in the UC framework. I will not go into any details but we did model TPM and host as separate parties. And given that we are in the ideal world we also had to output signatures as concrete values to make it usable in practice. And we did it by not modeling the signature as random but creating signatures for random keys because by that you can prove that it doesn't get any information about the identity as input and cannot have anything in the output. So that's the idea of the model. Okay so finally we can make a check mark after step one we have a security model now. And now the task is to find a cryptographic protocol that is probably secure in that model. And the DBA protocols actually all work kind of with a similar structure. The TPM first generates a secret attestation key and then gets a blind signature on that key by the issuer, it could be TPM manufacturer or some other entity. And it's crucial of course that the issuer does the signature or the membership credential in the blind way. And then if the TPM wants to make some attestations it basically proves that it signs a message with the secret key and it holds a membership credential on that key. But it does it in a zero knowledge way so without leaking any information about the key or the credential that it holds on that key. And the different DBA protocols and mainly differ on the signature scheme that is used by the issuer to give you that blind membership credential on the blind key. And the most recent TPM specifications said uses protocols that are based on elliptic curves and pairings. I said the TPI offers very generic APIs so actually there are a lot of different protocols out there that kind of fits the structure. And the work can be basically split in two lines of work and one is based on Kamenshezianskaya signatures or on the all LRSW assumption or on BBS plus signatures and the QSTH assumption. So what we did and some of them also kind of iso-standardized, I mentioned there. What we did is then we looked of course at these protocols and tried to find out if we can prove them secure in our formal model. It turns out not. They're actually kind of really insecure or they cannot be proven secure by some inherent issues. In particular the scheme that is iso-standardized and based on LRSW has a kind of a tiny flaw. It allows a very trivial credential that is valid for any attestation key to be accepted by a verifier. So that's pretty bad. So what we then did is we proposed also two new protocols based on LRSW and QSTH and prove them secure in our model. And they're basically as efficient as existing ones because they are pretty much, they're very similar to the previous schemes but we only had to fix details at some few checks, at some extra proofs and added a few elements but it doesn't kind of impact the efficiency and a big deal. Okay, but that's good now, right? We have now finally also a secure protocol for DAA that is proven to be secure. We just need now a secure implementation of it. And as I mentioned, our protocol is efficient. So in particular actually the TPM part was really lightweight. We kind of make sure that this is the way we do it and then we should be done, right? You just implement it and we have a secure implementation. And with that mindset, we then got in contact with the TCG, the Tastered Computing Group that standardizes those TPMs and ask them, okay, that would be actually really nice if they could now implement or support our proven secure versions of the DAA. When there was the moment when we realized that our understanding of the real world and the real real world are not actually fully the same. Because what we did and also what all the previous work in DAA did is they simply treated the TPM as a lightweight device. So you can, it shouldn't do anything kind of really hard but you can put any code on it as long as it doesn't kind of require a lot of computations. But in the real, real world, the TPM is a piece of hardware that you can only access by a few and limited APIs. So in order to be supported by the TPM it actually should be able to work with those APIs that are standardized. Okay, so then we had a look on how those TPM interfaces actually look and that's a very high level, very simplistic kind of representation of the APIs. But the basic idea is that they can generate arbitrary signature proofs of knowledge and in a proof of knowledge you have the prover, the TPM of that case holds some secret key and I want to prove that it really has a secret key. And the way it does it is first sends a random value, G to the R to the verifier, then it gets a challenge for an unknown interactive signature proof of knowledge. It will hash the T values of the random element from before and the message that is supposed to be signed and then compute the final value, the S, which is R plus C times the secret key and then the verifier can check if this is really correct. And it's known that those proofs are unfortable and zero knowledge. And the TPM interfaces basically kind of give you an interface for all the different steps in the protocol. So you can create keys, you have a commit interface that gives you the some G to the R, you have a hash where you can get the challenge and finally have a sign interface where you can give this input a hash and the pointer to the randomness of the first step and you can get at output the S value. And you can already see a difference in those two things and that's actually where the power of the API comes from namely in the commit interface you can get a give an arbitrary point to generate this input and you can get those proofs for arbitrary group elements. I said that's where the flexibility comes from and unfortunately our protocols or unfortunately they are not compatible with those interfaces so they cannot be bootstrapped from that. But actually for a pretty good reason, namely our protocols were designed in a way that they do not require the TPM to be a static TPM on Oracle as the previous protocols did. But because the earlier protocols required static TPM on Oracle, TPM is one. And we now see why this is actually kind of a bad idea. The static TPM on Oracle means that you can get the TPM to compute values P to the SK for arbitrary points P and it's not kind of very immediate by one interface call but you can make three calls and compute it as shown on the slide. And it's really for arbitrary points. And the problem with that is that now corrupt host can actually make these points in a special way so it can first call P for P being G to the SK. Then it will get G to the SK to the SK. Then it takes that point again and issues that as a point P and then it will get G to the SK to the SK to the SK and on. So it will kind of get more and more kind of these tuples. And it was shown that if you have a long sequence of those values, actually computing the discrete logarithm is much simpler than if you would just have the value G to the SK. It can in fact reduce the security for a 256 bit curve from 128 to 85 bit security. So these interfaces that give you such a static Diffie-Hellman oracle kind of a really bad design and should be fixed anyway. So then the TCG asks us, okay, now if we have Google secure protocols that do not require the TPM to be a static Diffie-Hellman oracle anymore, how should they then look like? And then to answer the question we actually built up and worked by Seattle who have shown that in the DA protocols, the generators often have a very specific form and leave out the form of P equals G to the Y. Now the discrete logarithm is known to the issuer. That's the secret key of the issuer. And the good thing is if the point P has such a format cannot be used for these kind of attack things that I've shown you earlier. So if we just can be sure that the TPM only receives points of that structure, we can actually securely use those points. And then the idea is to let the issue prove that he has chosen P to that particular form and that's your knowledge proof. So basically he can compute P to the SK himself by simply taking the public key of the TPM and raising it to the discrete logarithm of the point that he wants to use now in the zero-knowledge proof. And the suggestion by Xied Al is to then use one new interface, a bind interface that takes the generated P and then also K and the zero-knowledge proof that allows the TPM to verify that P is really chosen in that particular form. And then the PPM is opposed to store the P as a clear point that the proof is correct and only use in the commit interface those clear points. And yeah, that works for this at all points that have this particular structure, but and that is sufficient for a basic DAA, but as soon as you wanna do some more extensions, so in particular signature-based revocation, then the streak wouldn't work because what we have in signature-based revocation is that the TPM has to get or will get random points as input that were generated by other users and it gets it at the moment of attestation. So when he gets it, there is no one there who can make those proofs anymore because they were not generated by the one who wants to see the proof. But as for that particular protocol, the point has to be just random. There's actually kind of a simpler fix. We can just instead of giving the commit interface the point as direct input, we give him some string and let the TPM derive the point as the hash of that string because also then we're sure that the P cannot be G to the SK, et cetera. So this was kind of our first proposal to the TCG that for the new revised TPM interface that that get rid of the static default hameler protocol. And we thought it's not too bad. I mean, it's just some more lines. But then we learned, well, this is actually bad because it's a major revision to the TPM. Adding new TPM commands is a big deal because not only because you have a large consortium that all have to agree on that, but also because the TPM is really bounded in terms of memory and that's really costly. And also actually storing the point P because it had to be associated to the key would be a change to the key structure which is also kind of a significant modification. But I said actually the second suggestion that we make or part of this commit to interface, that would be okay. So, but it would only be okay if without interfaces we can support everything that was there before. Because also what we actually have done now with this first proposal is we kind of gave now dedicated interfaces for every protocol which destroys the nice design of the TPM interfaces. So, the good thing was now we had some TPM interfaces to work with that did not require or that they're not impose a static Diffie-Hellman Oracle. But the bad news was that one strain of work, all the LRSW based schemes would not work with these interfaces because they heavily relied on generators that had this special structure for the issuance protocol. So, we had to go basically back to the whiteboard and started kind of the work again. And to be honest, our own surprise, we actually get it to work but we had to go quite down in the crypto layer. So, really had to change the way in these Kamenyshe-Lyanska signatures, the issue parameters are chosen and how the issuance protocol is done and basically put the values a bit upside down. But you were able to do that and also prove that scheme then secure and the standard assumptions. Okay, so then we're done, right? We have a revised TPM interface that do not require static Diffie-Hellman Oracle and we have approval of secure protocol. Well, we're not really done because the only thing that we have shown so far is that we have approval of secure protocol and we can get it to work with those interfaces but we haven't shown that actually now the instantiation with those interfaces, so the orchestration of that gives us a secure protocol. So, in particular, what still should be shown and approved with secure manner is that the TPM-based contribution, so the TPM-based signature approval of knowledge is unforgible and anonymous. And then there were kind of bad news again. The interfaces in particular, the initial interfaces that are standardized in TPM 2.0 do not allow such proofs. You cannot prove that the TPM-based SPKs are unforgible. And the problem is that in order to do so, you have to program the random oracle. So, in particular, you can only simulate the sign interface if you program the random oracle for that hash value to a special point. Yeah, it's a bit tricky. And in order to do so, you really have to know which hash is used in that final command. And here it's not possible because the host has full access to all the different APIs and can make many hash calls using particularly the same T value. So you have no clue when to program the random oracle such that you can't simulate these interfaces. The good thing is the fix that was proposed by Xe et al is actually very simple. Namely to just add a nonce and a hash on the sign interface and hash the hash again together with the nonce. Because then in the security proof, we can make sure that you can program the random oracle in the moment when the signature should be created. So, we're done now, right? Well, of course not. It's not that simple. Because now this fix by Xe et al allows you to prove affordability, but it's actually bad for privacy. Because now we introduced on a very low level a subliminal channel. This nonce and that is chosen by the TPM is a part of the final signature. And now you do not really know is the end really random or is it just looking random and maybe it's an encryption of my identity or even my secret key. And you cannot randomize it on any higher layer of the protocol. So no matter how good your protocol is, if you have the nonce chosen in that way, you'll never be sure if it cannot contain any identifying information. So we proposed a fix to the fix. It basically is that instead of using a nonce only by the TPM, we use a nonce to which the host and the TPM contributed. And it looks a bit complicated but the idea is basically just that we have to make sure that the nonces are not depending on each other. So the TPM has to commit to its nonce first before it gets the nonce from the host and also the host is not allowed to see the nonce before it chooses his one. But then we are actually really done. So with those interfaces we could prove that we cannot only just bootstrap the protocol from it but we can actually do it in a secure way. So the signature proofs of knowledge generated with these interfaces are infortable and anonymous. We do not contain any subliminal channel. Okay, so we're finally done with our roadmap or let's say we're in the progress of being done with the roadmap because of course getting those changes into the real world is a kind of a long and slow process. So some of those changes have been accepted and under review and hopefully will be accepted soon. And the next step is of course that we continue to work with the TCG to make sure that the order, hopefully make sure that the TPM interfaces are revised and we're also actually in contact with ISO and with Intel to make sure that other specifications of the protocol that are flawed are fixed as well. And we also made a kind of phyto-key attestation using DAA that yeah, I can talk offline if you're interested. And as a conclusion for how to get provost security in the real world, well first it comes in really handy if provost secure crypto and the real world are actually compatible. And it's kind of really hard to get that I think in the first step on the first version but it's good then if you follow the process into the real world because it very likely will require changes to the model or to the protocol. And if you wanna make sure that those changes are done in a provost secure way, you better be there to make those things. And ideally, of course provost security should be there from the beginning to make sure that the standards and everything is correct because now we have ISO standards that are flawed, we have TPM interfaces that have the static TPM on Oracle, et cetera. But to be honest, we actually had a lot of security proofs here from the start. It was just that the proofs were pretty often wrong or models that were not kind of complete. So I think we also have to rethink the way of how we review those provost security proofs but that's a very long discussion. And yeah, finally, of course it takes or yeah, of course, but it takes often way longer than I want to expect. And in particular, it's not such a kind of sequential type of work that make a security proof, a scheme and implement. It's actually kind of way more interactive back and forth than, yeah, in theory. Okay, but that's it. Thanks. So we have time for one question. So sorry, Nigel, we'll have to sit down. All right. I just would like to point out a bit of history in that the ISO and TCG were told that the CPS 10 thing that they standardized was insecure before they started standardizing it. Okay. In addition, TCG was told that its API did give them a static Diffie-Hellman Oracle and it would reduce the security of their things and they chose to ignore the experts. But I mean, they wanted to have, I guess, flexible or they wanted to have support for different protocols. And it was also this time that said they will only make the change for the APIs if we can show them that they can support the different protocols. So basically, without giving them the second step of the answer, they would sue. I mean, we still don't know if they will change it but we have to help them to keep it as functional as working as with the bad TPMs, basically. I'm going to claim Nigel didn't actually ask a question. Were you trying to ask something?  Yeah, yeah. No, I really did want to ask that one. Because we're behind schedule. Okay. So anyway, let's thank Anya again.


7 Mistakes You Need To Avoid In Your 20s Your 20s is a time of self-discovery, a time when you make certain big decisions that will have great impact in the future, for instance, career choice, financial status, and stability. The good thing about this is that it is a time in your life where you are allowed to make mistakes while trying to figure out what you want to achieve with your life because you can recover easily from most of those inevitable mistakes. Your 20s are also a time to experiment, fail, and then eventually succeed. But for this to happen, certain poor decisions have lasting effects that can affect us badly and certain mistakes you must avoid. As much as it is a time to explore and discover oneself, knowing certain things and restraining from some other things will go a long way in determining the kind of future you want for yourself. In this video, we will be sharing with you 7 Mistakes You Need To Avoid In Your 20s. If you're new here, consider subscribing so that you won't miss other interesting videos like this. 1. Peer Pressure Imagine a group of friends who spend most of their teenage years together, and then school, job, and family came along, making a huge difference between how they now see themselves. At this stage, they begin to compare themselves to their friends, and getting carried away working tirelessly just to meet up with their friends and make sure they get everything their friends have no matter what it takes to achieve that. Also, thanks to the internet, everyone is trying to impress their online friends. In fact, not only are they trying to impress them, they try to pass a message that they are bigger than the rest of them, always trying to portray a perfect life. The truth is that no one has everything completely figured out. Even your friend that looks perfect still has some unveiling to do, and still hopes to achieve one thing or the other, and still views the rest of the world has to be better in certain areas.  Why not spend the rest of your life in pursuit of true happiness in that case? 2. Poor Save In Habit According to a recent study from Bankrate, out of 1,003 participants, it was discovered that 69% of them between the ages of 18 to 29 had no retirement savings at all, mostly because the idea of retirement seems far away. The best time to imbibe a saving culture is when you are in your 20s with very little responsibilities to shoulder and fewer financial commitments. When you start saving early, you'll have mastered the art of saving before you get too involved with so many financial commitments and use it as an excuse not to save. 3. Undefined Goals Most people do not know what they want to do with their lives. They don't know the career path to choose, and for those in their 20s, it can be quite challenging, especially because this is a phase of transitioning from a teenager to an adult. Before now, all the big decisions that involved your life were made by your parents and guardians. Now, however, you have to make these decisions yourself. Even though you are going to discover a lot as your journey, it is still important to set defined goals that will help guide you and make wise choices. You can start by reading about these things and acquiring skills that can help you develop yourself better. 4. Stick into Wrong Relationships The people you hang around will determine the future you will have if you constantly hang around sad people and people that indulge in self-pity all day, all year, it will soon become your reality as well. Also, don't fall into the trap of thinking that you are still young and you've got a lot of time on your hands, so you can do whatever you like. Spend all your time hanging out and partying with people and don't have a vision for your life. You shouldn't also not stick to a bad relationship because of the money, sex and other benefits you may be receiving at the time because in the end, you'll find out that you've wasted the reasonable time of your life doing nothing useful. 5. Thinking That Education and Talent Are the Only Ingredients for Success Success requires more than education and talent. It requires hard work, diligence, commitment, consistency, self-improvement and growth. And also learning from your mistakes. Calvin Coolidge, an American politician and lawyer who served as a 30th President of the United States, said that nothing in this world can take the place of persistence. Talent will not. Nothing is more common than on successful men with talent. Genius will not. Unrewarded genius is almost a proverb. Education will not. The world is full of educated derelicts. Persistence and determination alone are omnipotent. Don't sit back and expect things to fall in place because you have one of the best certificates in the world and talent to back it up. No, it's a mistake that might cost you a lifetime to fix. So, start now, learn, improve yourself, work hard and commit to success. 6. Trying to Please Everyone Don't fall in the trap of thinking that you have to please everyone.  Not everyone will like you, no matter what you do.  Live to satisfy yourself alone. 7. Not paying attention to your health Take care of your health.  Because your success or failure depends heavily on it. Beth Burrs said self-care equals success.  Also according to Eva Longoria, an American actress, producer and businesswoman, your body is a vehicle of your emotions and a vehicle of feelings and a vehicle of whatever you need to get done in life. And you've got to take care of that vehicle. Avoiding these mistakes will help build growth mentally and develop right habits for success. Thank you very much for watching our videos. We'd like to give you another interesting video for you to enjoy next. But before then, our team will be very happy if you can like this video and share it with your friends on social media. If you're new here, don't forget to subscribe so you won't miss other interesting videos like this. Look at your screen now to see two other videos we handpicked for you to enjoy next. We love you.


Nothing humanizes quite like sweaty armpits on the subway. In the summer as we cram our bodies against each other in pursuit of time saved, our sweat mingles. The perspiration flows unbidden and I look into my neighbor's eyes together our bodies crave moisture and our stench rises. Sweat is the common denominator of our personhood. We need the same things. We desire the same relief. We are refined by an incline of degrees to two panting people clinging to a pole with sweaty armpits.