And the House of Representatives has initiated a constitutional review process to address security concerns following the Kourigas school abduction and Gonningorah abduction. Speaker Targidine Vaz expressed solidarity with Kadena State Governor Ubala, stating that kidnapping in Kadena is under control and ready to collaborate with the state to rescue the abducted victims. The 360 members of the fence assembly are in Kadena to express solidarity. Here are security, which is the number one area that if you don't get it right, other economic developments may not actually follow. House of Representatives is going to organize a national legislative security summit immediately after Salla to discuss with all political stakeholders in the country on ways and means we can be able to come up with measures that will show lasting peace in the country. We can share the Kadena State perspective on this insecurity issue. Of course, Kadena State is a major victim of insecurity in the North, and we believe that what we hear from you and what the ideas and advices you give will go a long way in giving us the kind of responses we need to bring on board to ensure that Nigeria becomes a safer place. Here announced that the House has initiated a constitution review program focusing on security and the establishment of state's police to tackle national security challenges. The unfortunate incident of the last few weeks. The incident that met a force in the kidnapping of more than 250 people in the local government. And just recently I was told, another 60 is one people from the local government. This is something that the House has received with very, very big shock. We thought we have seen the end of this kidnapping in Kadena State only for it to rear back in a very devastating manner like the one we have. We just want to assure you that we are very disturbed and we are very concerned about what has happened and that the House is more than ready to partner with you in every way possible. Ensuring that the victims of these two incidences are rescued back in regards to security. We know some states in the country have already started advocating for state police and other security outfits that can only be possible or realized if the constitution of the country is amended to provide for such kind of thing. If Kadena State is one of those states that is aspiring for that so we want to let you know that the opportunity has unfolded itself. Kadena Governor Ubersani praised the House of Representatives leadership for their foresight and creating states' police to address security issues. The House plans a national security legislative summit after Ramadan to re-engage stakeholders on lasting peace. We must work toward the creation of state police in Nigeria. As we are speaking, the number of the entire military in Nigeria are less than 200,000 and we are a country of over 200 million. For me, I believe we are like a boost of ground and if we want to address the issue of insecurity in Nigeria we must revisit the issue of state police. In the recent weeks, a lot of people have been bringing issues of doubts but I believe most of those comments by Nigerians who are apprehensive about the creation of state police is out of ignorance and lack of knowledge. To believe the National Assembly is the only institution that can be able to put in an amendment that can be able to help us to come with the state police that can be regulated, can be controlled just like in many other developed societies around the world. I want to urge the House of Representatives to revisit the issue of state police.


Dzień dobry, jestem Adam i pracuję w Oracle, moją sekundę. Uwielbiam biologię. Nie mogę zacząć teraz, ale... To jest basically my introductions. Tak, więc uwielbiam biologię, uwielbiam algorytmy i datastructures, które są wtedy używane przez mySQL, żeby wprowadzić... ...geometrical computation, kiedy nazywa się... SQL, MMM, SFA, feature, sd, interseks, czy coś takiego. I internalnie mySQL nazywa się boost geometry functions. Tylko po prostu. Boxy i punkty. Polygony są 2D. Ligeria pozwala... Wydaje mi się, że interfejstwo pozwala, aby się rozwiązać w ten sposób, ale jeszcze nie jesteśmy. Dzień dobry, jestem Adam. Dzień dobry. Myślę, że to jest gometrii RTRI. For those of you who don't know, those geometry is C++ library, part of boost C++ libraries. And we provide primitives, algorithms, and special index for you to use in your C++ codes. And library is used by mySQL for GIS features. features. The Ertree is a self-balanced tree, which is used for spatial searching and KNN searching. And there are various balancing algorithms or various ways how the Ertree can be created. When you are putting elements one by one, then tree is balancing itself. And there are also class of algorithms which are used to create the Ertree from a number of elements at once. And this is called packing or bulk insertion algorithms. And the specific features of boost geometry implementations are listed on the slide. So the class is in boost geometry index namespace. It allows you to store your own user-defined types. By default it supports any type adapted to point, box or segment concept from boost geometry library. And also supports pairs and tuples. There are three balancing algorithms. I'll show them later. The size of a node is defined by the numbers of objects, starting a node, as opposed to, let's say, database implementations of the Ertree, where the size of a node is defined by the page size. And it allows you to perform advanced queries. I also show them later what that means and iterative queries. So here are the examples of internal structures of the Ertree created in different ways. Linear quadratic and R star 3 versions are the ones created using balancing algorithm. And packing is the packing algorithm we use. It's a version of STR algorithm. It's a sort by recursive variation. And as you can see, the internal structures are different. Some of them will be better for searching, because in some of them there is more overlap of the nodes. Some of them have big nodes. Some of them have smaller nodes. The less overlap, the less number of nodes, and the smaller nodes are better for searching later. But how you can expect, it takes more time to create a better structure of the Ertree. So these are the times. In general, the more time you spend on creation, the less time you spend on searching. So there's a trade-off. Depending on your application, you have to choose one or the other. The tree created with packing algorithm is the best in all situations, but on the other hand you have to know all of the elements in front of the creation. And there is also one more decision you have to make before creating the Ertree, which is the size of the nodes. Size of the nodes, the number of elements stored in the node, which will be influenced by your knowledge about the domain you're working with, and specifically about the kind of data you're working with. So for non-overlapping elements, the tree will behave differently. Here are times of creation for number of elements stored in a node. So here is nothing interesting, maybe just that the creation of the tree is longer for all algorithms when there is overlap. But if you see the searching, then here we have something interesting. It seems that for overlapping nodes, for overlapping elements, if you have too small number of elements stored in a node, then you increase the time of search. So the more overlap you have in your data, the bigger the node should be, basically. Later we can talk about it after the talk, why that is. By overlapping, I mean physically overlapping. In 2D, for instance, if you have big objects overlapping each other, or you have objects in higher dimensions, then there is more probability that they will overlap. Ok, now a few examples. I'm using the data from this website. So here are the includes and some namespaces I'll be using in the code. The second one is only if you clone the repository from GitHub, because it's a part of the code which we call extensions. But it's only for loading a shapefile. These are basic definitions of types I'll be using. In this geometry, the default way of defining the coordinate systems that are used in data are part of a point type. So here we can create a type capable of storing cartesian points, spherical points i geographic points. I'll be using the last one in the examples. There are other ways how we can affect the algorithms and also use different spheroids and things like that. But for time being, let's assume that when I'm using geographic points it's WGS84 and I'm calculating stuff on the surface of ellipsoid. So we are not doing any projections, we are on the surface of ellipsoid. Which is good for a class of problems that are global, where you cannot choose the best projection and you just want to stay. You could approximate the globe with a sphere, but here I'm showing the geographic no, how to deal with geographic data. So for this you will need for loading the data I'm showing you will need the extensions, but you can do it however you like. You can write your own shape file importer or fill the data, whatever you like. And the first example will be to find points which are near another set of points basically. So this is the data from this website. One is populated places which are defined like a point representing a place where at least 1000 people live or something like that and the green dots are airports. So I'm searching whether or not some airports are near the populated places like that. And by small area I mean a box. So here is a naif example which has quadratic complexity and what I'm doing is I'm iterating over all the places, then all of the airports and I'm checking if an airport is covered by a box, the small box I created and then I'm printing a result. So I'll show the timings later for the other algorithm, but as you may expect quadratic complexity we can do better. So for this purpose we create R3. Storing points and this will be R star variant storing four elements per node and I'm calling insert for all of the airports which forces the RT2 balancing algorithm instead of packing because I'm inserting one by one and then I'm iterating over all of the places and performing a query passing covered by predicate to the query function of the RT and taking the result as an output iterator which in this case is back insert iterator. But we can do better because we know the data up front. So I'm creating the same RT but using packing algorithm and for this purpose I'm passing the iterators to the range into the constructor of the RT. So here we have all the RT created. R3 created with packing algorithm which should be faster and then I'm using query iterators instead of query function which iterates over lazily iterates over the results so we can for instance stop it at some point if like. And if you prefer working with ranges instead of iterators then the RT also supports it so I'm just passing range of elements which are then stored in the RT using packing algorithm and then instead of standard for each I'm using range-based for loop and for that I'm creating a range a queried range using range adapter similar to boost range adapters So what's the red now is a range representing a pair of iterators basically just as it was on the previous slide and here is my result so some pairs of points which are close to each other. So the next example which will be more interesting maybe so now I'm traveling Seisman and I want to go through all of the airports on the world as fast as possible So classic problem again so this is my initial preparation where I have airports I'll be storing the result in a line string containing geographic points and I also need helper structure for to-store flags whether or not I visited an airport or not here is one of the possible solutions which is the classic one which is called greedy heuristic so basically I'm choosing the closest airport from a starting point from that I'm choosing the closest airport again and again and again and I'm doing it until I have all of the airports so until I have all of the airports I'm checking all of the airports checking the ones which are not visited calculating the distance is picking the smallest one and then when I have the smallest one then I'm adding it to the solution but again the previous algorithm has quadratic complexity so we can do better and here I'm using the entry for that I'm storing a pair of my point and an index I need an index to in order to access the flags visited flags so I'm storing a pair this works by default and I could create a vector of pairs first but I decide to do it on the fly using boost range adapters so here I'm creating a range representing first transforming indexing airports with an index starting from zero range of indexed airports into range of pairs this is what you can do with boost range adapters so I have all of the data needed in my entry and then I'm doing again the same until I have all of the all of the points I'm performing query but this time I'm not traversing all of the all of the airports to search for for the closest point but using the entry for that and I'm passing the nearest predicate and I need so I need the nearest point one nearest point which also satisfies this condition that it is not visited and then I have one in the result as output iterator I'm simply passing the pointer and I'm putting the result in the root line string and setting the flag and that's it and this is my result so traveling salesman went through all of the airports at some point traversing the anti meridian so the daytime change line so this looks good and the whole route is like 400,000 km long and this is some benchmark of both algorithms, the one with quadratic complexity is gray and as you can see the solution using R3 is guiding better and that's it from me thank you and there are three minutes we have some time left let's say about three minutes for questions any questions that you want to throw at him hi do you have any questions for you that you want to sort of ask the crowd what do you want from them how can they help you probably to check out the boost geometry try to do something interesting with it like if you have a problem to solve just consider trying boost geometry and and then maybe share feedback there is one question or two questions could you speak up a little bit please so we are talking about this one okay okay yes so the objects representing the internal nodes of the tree are in fact boxes or rectangles however in leaf nodes so at the lowest level I can store various things and I've chosen to allow to store simple geometries like points boxes or segments so because otherwise you'd be forced to for instance represent a point as a box and then you have a duplication of data basically so this is why it is possible in boost to just store points and the tree is parameterized like it allows you to pass data type or vario type in compile time as a template argument sorry no no no it's only a matter of storing data in leaf nodes we can talk about it more because unfortunately


We'll get started here. So we have a longtime friend of both the Khan and of all of us here that graciously agreed to get this event kicked off and started in the most appropriate way. We've got Simple Nomad here talking about the enemy within, so please welcome him to the TourKhan stage. Thank you, thank you. I appreciate that. This is not my first TourKhan. This is not my first TourKhan as a keynote. I was here at, I think the first time I attended was at TourKhan 2, and that was kind of weird because it was, you know, David's mom running the show for as near as I could tell.  He looked 12, okay? It was really bizarre, just like, wait, you're the guy running this conference? This is nuts. But anyway, so the talk today is called the enemy within, and I'm not going to specify at every moment what the enemy actually is. I'm going to leave that as an exercise for you guys to do. Anyway, like I said, I've been here a number of conferences. You know what was weird? I think my favorite, one of my favorite ones I did was probably a TourKhan 3. I keynoted at that, and on September 7th, 2001, I flew out of Logan Airport to head home after a week of meetings, and the following Tuesday was September 11th, and right after that was TourKhan, and it was kind of a weird thing because, you know, I, for four days they had, you know, all air traffic was shut down, and I created quite a scenario to be able to, you know, just even getting on the plane, you know, everyone thought I was nuts for getting on a plane, which I was thinking, that's got to be the safest thing to do right now is fly because they already did that thing with the planes, but nonetheless I was worried I wasn't even going to be able to get out here at all because I didn't know how long flights are going to be down, but I did get out here, and it was about a week or so after they started flying again when they had TourKhan 3, so that was a really weird, really weird conference to attend. Some of you probably know me as Mark, and that's fine, I don't hide behind my hacker handle anymore because at the time when I originally started doing this, you know, I was basically afraid of large corporations and the government, and large corporations and the government know all about me now, so I, you know, I do go by my real name at times. My current employer, I work at Duo Security as a researcher, we're the multi-factor authentication vendor that doesn't suck, that's about, there's my sales pitch for you, and in a couple of weeks or so I'm going to become a Cisco employee since Cisco is in the process of purchasing Duo, lock, stock, and barrel, and that should be fine, I'm actually looking forward to it. I do want to cover, because it's kind of relative to the discussion, places that I've worked previously, probably the most interesting one there, I mean I've worked for very large corporations, but probably the most interesting one would be the one on the end, their MITRE, they only have, I don't know, if you, they do more than that list of CVEs by the way, they do a whole lot of stuff, but they only have one customer and that's the US government, and I don't know how I ended up with the security clearance, it make no sense to me, I've been investigated by two different agencies at least three different times that I'm aware of. The last time, and it's been quite a while since I did this, but the last time I tried the Freedom of Information Act, my own FBI file, it was turned down for, I forget the, whatever the generic reason was, it's just like, you know, for national security purposes or something like that, they weren't going to give me my own file, but what that means is that they have an open case on you, so, you know, that was, oh, that's great, but somehow I got a security clearance, and probably because of, and this is just a few of the examples of why I was under investigation at those times, is there's any representatives from these fine companies, sorry, you know, but it happened a long time ago, seven to ten years ago, at least depending upon your, you know, jurisdiction, so, but nonetheless, it just secured your shit, sorry, all right. What I'm going to talk to you today is about us living on the edge of society, okay, and I think I'm pretty much talking to everyone in the room when I'm talking about this. There's a lot of you here go back and forth between a black hat and white hat, and in between, and it's really not a matter of hat color anymore, really. It's just kind of a way of thinking, kind of wondering around through society. Now there's, picture this as being society, okay, and this is hopefully a diagram that everyone can wrap their heads around, where society's in the middle, and it's moving in some direction at all times and everything, and there's probably some normals here in the room, but probably not a lot. If you need some examples of normals, I think there's another conference or something going on just down the, by the bathrooms, and I've already heard, overheard conversations, and they're kind of flipped out that we're here, and that's typical. That's fine, that's fine. We'll deal with it. Now see, because we're not quite in the middle where all the normals stay. We're a little bit further out, but because that's in the direction of where the edge is, of course those normals are just going to think that we're the crazies, and of course there's a whole thing with the crazies, because the crazies are always looking in, and they're seeing the normals, and they're just saying, those people are crazy, all right? So it's kind of the exact same thinking. The problem is, is this isn't actually a very, very good diagram that illustrates the true nature of this edge out there where, say, the crazies live. It's a little, a little more fluid, a little more nasty out there at times. There's things that happen out there on the edges that create ripples that get in sometimes to the normals, and we're going to cover some of those ripples that have come in. And where does that leave us? And I'd say most of us in this room. I mean, I'm sure there's probably a few crazies, I can tell. They're the ones that are shaking their hands and going, no, I don't know what he's talking about. And there may actually even be some normals who are thinking, boy, I sure came to the wrong place, but most of us in this room, we're kind of in-between, and a lot of us are able to wander back and forth between the normal world and the crazy world, and that kind of works to our advantage, right? We're able to kind of move back and forth. That's kind of become second nature to us, that kind of switching of the hats. Anyway, to kind of move forward and illustrate some of these things, I'm going to cover three things. I'm going to talk a little bit about the past. Of course, I'll cover the present, and I've got to get into that scary future thing.  Now in the past, there were things, there were events that happened, and these are kind of those ripples at the edge in some cases, where the normals found out about it, and they're just like, oh, holy shit, this is bad. Twenty years ago, back when DEF CON, or DEF CON, TURCON was first starting, DEF CON had been around for a while. You had the rise of DDOS. Now, I don't think I need to explain to anyone in the room here with gray hair, but just for the rest of you, there was a time back in the day when Amazon only sold books. Isn't that weird? They only sold books, and there would be these denial of service attacks against these places and including Amazon, and you couldn't buy a book for like an hour, okay? It made national news, people were going crazy, and all of us hacker types that were around at the time, a lot of us got, you know, interviewed about it, and they were talking, says, you know, and I remember I had one reporter that said to me specifically, said, you know, all these denial of service attacks that are going on, he goes, can you put it into perspective for my readers? And I was like, okay, well, there are people that are starving in foreign countries, there are people that are being repressed by their governments, there's injustices right and left, and I can't buy a book on Amazon for an hour.  Now, not surprisingly, oh, yeah. Not surprisingly, they didn't use that quote, so. But nonetheless, you just had this event, and there's another thing that was actually interesting about this event, and that was that it was a really good example of an amplification style of attack where you had an individual who could actually do something and influence, I mean, an individual with, you know, seemingly easy to obtain skills be able to influence things at a large scale level, okay, before it required, you know, armies and stuff like that. But now you just got this person is able to, you know, flex their muscle and do something like that. So that was kind of an interesting one. The weaponization of cyber.  Cyber was a really good shorthand for making that conversation go a little bit quicker and putting them on the right part of the map so that they kind of understood. I mean, marketing people got a hold of it and went nuts with it, and then the rest of us that had been using it looked stupid, and that was a shame, but, and I get that. That's fine, but, you know, words are words, whatever, but using the, just referring to it as the weaponization of cyber, and this is originally where we report things on bug track back then. We were, we come up with a proof of concept, and even if that proof of concept only worked one in four times, it was still considered, you know, that was, okay, well, that's, that's a viable thing. However, you weaponize it where you make it to where it works every time, and there is no, like, glitch or anything, it just works clean and no, and no one notices, you know, maybe whatever program you were trying to launch, it goes ahead and launches, and everything looks normal to the end user. That's what I'm talking about as far as weaponization goes. That became a valuable commodity. You had people that are riding these bugs, and we can, you know, whatever on the whole, you know, those bug bounty program things. This is, besides that, there, I have friends, there's one guy in particular, he's a friend of mine, that he operates a bug broker business, and all he does is take weaponized vulnerabilities turned into weapons, and then sells, helps set up sales between these, you know, between the people that write the stuff and the people that are going to use it for whatever purpose. As you can imagine, the U.S. government is a good customer of his, and as well as other various organizations, and the guy is making a mint. He really is. He is doing very, very well for himself, and you can pass whatever judgment you want on that, but it's, the guy's making money, and even though I might say that's a terrible, terrible thing to do, there is a part of me that's jealous that I didn't think of it first, okay? I can't help but think that. He's like, wow, he can retire at age younger than I. So, but that's the thing that's actually occurred, you know, in the recent past, and the other one is that's really kind of influencing how things are heading now is the death of the perimeter. I had my questions about the perimeter 20 years ago, and in presentations probably from this stage, so to speak, at TourCon in the early aughts, I said that, I originally was saying that the perimeter wasn't dead, it just smelled funny, but now it was, at least by 15 years ago it was dead.  So, what really killed the perimeter?  I know that it might, where I work now, and most of the places where you work, if you're at your computer, it's a laptop, it's not a desktop system, because they don't want you hauling your desktop system to and from work, you know, and they do want you to work at home or whatever. And a lot of us travel. Wi-Fi, which as we all know is the single most horrid thing ever invented on the planet. Wi-Fi, that thing's terrible, that's just causing nothing but problems for all of us, and then, of course, smartphones, that was the other thing that helped really kill the perimeter. People started bringing these things to work, they knew what the work Wi-Fi password was, they'd go ahead and, you know, just get them on the corporate network, they don't care, they want to be able to get to their data wherever it is. So, essentially what it was, was mobility that killed the perimeter. And that's kind of the reality of where we are today. Now, where we're kind of heading, and this is also kind of where we are in a way, so this is kind of present and near future. Infrastructure changes are continuing to occur and by that I'm referring to the main one we're seeing is the cloud.  Back then, mainframes, they had mainframes, they had time sharing and dumb terminals and if you wanted to use those mainframes, you were having to pay for your storage and your access and all that other kind of stuff. Sure, things shifted as we got stronger out on the edge of the networks with the desktop systems and we started using servers as opposed to mainframes because we had these powerful machines and now everything is kind of going back the way it was with the cloud infrastructure where you're paying for storage and bandwidth and computing power just like you did way back in the day. Same economic model is just scaled a lot better. Okay, but we've got that now. Smart cars.  Okay, because, and this is, I don't know if this is a uniquely American thing, but you're just taught that you're the best at whatever it is you're doing. I am willing to admit, and my wife will back me up on this that I am a shitty driver. Okay? I really am. I'm a bad driver.  I want a smart car. This is going to be a thing that's going to be good for me. I want, if they say, oh, because I live in the Dallas area and if they say, oh, we need you in the Austin office tomorrow for meetings it would be nice to be able to say, okay, fine. I set my alarm for 5 a.m. I get up, I go lie down in the back seat of my car and say, drive to Austin and I'm going to sleep in the back seat and let my car drive me there and just tell the car to wake me up when we get to Round Rock so I can stop at a Starbucks and try to be awake for the first meeting. That's, you know, that's what I want. That's how I see the future heading. I want that. We can't have flying cars, so I'll accept this instead. I'll get more work done and sleep more or whatever. But this is kind of, we're kind of getting there, people. We really are.  That always happens at the beginning of everything. But eventually we'll all be riding around smart cars and stuff. And of course smart homes.  And now we get mad when it doesn't work, right, because we're put this, you know, essentially a bugging device in our house. I know I got three of them. Okay, you know, and that's what it's doing. You know, it's just funny that we're, but this is how things are kind of heading.  I'm getting to a point with where I'm heading with this. You all probably have Bluetooth scanners on your phone and scan stuff, right? Some of you do. Anyway, just look to see what's in the world around you. If you look closely, it's kind of small, but in the upper left-hand corner there, I'm in airplane mode because I'm on an airplane. And, you know, it's the usual cast of characters, a lot of Apple watches and the Apple stuff's really kind of out there in the Bluetooth world. And there's a few devices down there. I think the one and the surge at the bottom, those are some type of fitness trackers and whatnot, but the top one, the top one, that's the one that really got my attention. Callie's hearing aids. What in the hell is that? Alright. So naturally, I connect to Callie's hearing aids to poke around and explore. They have the same security that you have with the headphones. So I could have very easily Callie. This is God. Give the guy in 24D all your money. Whatever. I mean just, you know, that's, this thing's nuts. So I started looking and I did a little bit of poking around into this and talk about a nice little glimpse of the future. This is, this is kind of, there's a couple of companies that have gone out of business. I can't remember if resound who's the people that made Callie's stuff. A couple of companies have already gone out of business. It's been small companies that have been making these hearing aid type things. They're called hearables, okay? Because that's a cool and fancy term. Instead of wearables, these are hearables. Now what they do is not only they function as hearing aids, a little later I didn't get a capture of it I should have. All of a sudden Callie's iPad appeared on the Bluetooth scanner and Callie started watching a movie without getting out headphones. That's because her hearing aids were paired to her iPad and she was sitting there watching a movie or something on there. I know because she's on the same row as I am on the other side of the aisle. I'm just fascinated by this. After landing and kind of doing some exploring, there's a couple of companies that have been doing this kind of thing. They had all kinds of features that they were wanting to put into these hearables. Have you ever been to the doctor and they stick that thing in your ear to take your temperature? Why they do that there? Because there's veins in there that are real close to the surface and they get a really accurate reading of what your temperature is. You put in these hearables in each ear and you could do really cool things with it. Not only get like someone's temperature, you can get in heart rate and all that kind of stuff. You can get oxygen level. You can do a full EKG of a person. If someone has a heart murmur it can detect that kind of stuff. That's the kind of technology that they're working on. Like I said, these two companies, the main proponents that were doing this, they had both gone under because they were small companies and they were having issues with things like battery power. They couldn't get these things to last more than five hours and whatnot. But the thing is this is the direction that this thing is kind of heading. Both of these companies, one of them had a working version of this actually, the hearable, it could hear something in a foreign language and do translation into English into your ear.  That's wicked cool. That's really neat. And so you start thinking about that and just like, well, okay, the companies went under. But there are three companies that are working on this stuff now including one of them who's bought a company that does the translation stuff with this in mind. And those three companies are Apple, Google, and Amazon. So this thing is coming. I don't know if that's all public knowledge. Oh, never mind. It's just some three large companies. But nonetheless, I mean this, I think it is public knowledge actually. But this is kind of the direction that's heading. And you can see the problem that they're facing and that is they need massive computing power right there in the ear. Okay. And because they've got either they're going to have to use that massive computing power to facilitate communication with the router that we apparently all carry. Here's my router. Here Apple makes my router. I don't know about you. But that's essentially what this thing is. It's a router for all your devices and stuff for your little personal pseudo cloud that you walk around with constantly. But that, yeah, so that's how things are heading. So we're getting into kind of this future-ish area. I want to talk about a few things else that's going to kind of influence this to a certain degree. I probably should check my time. I did decent on time considering. First thing I want to talk about, this is a problem that I have. Because I mentioned the quote on the Amazon book thing that they didn't use. And I'm not talking when I say bad journalism.  No, I'm talking specifically things that affect our industry where you've got these clickbait things where they focus on the worst possible scenario. This seeps into your consciousness and begins to affect your ability to do proper risk assessment. Whether you want it to or not. In many cases it's because you're trying to appease someone that's one, two, three, four levels higher than you that's at your company that's saying, hey, are we vulnerable to this thing I read about in People Magazine or whatever the hell they read it in. Because it made it into mainstream or something, they start flipping out about this kind of stuff.  Nothing but get worse. A quick example of this. There was some articles, I've seen articles on this where they talk and this whole industry has popped up from this by the way of RFID protection devices.   This is not something to where someone's going to walk up behind you with a Proxmark 3 and hold it up to your butt or to your purse or to your wallet or whatever and all of a sudden they have your credit card. There's no one in this room unless they were involved in playing with this stuff back at the beginning before credit cards had this kind of stuff and had decent encryption have had their credit cards absconded with this.  Not like they do in Europe. Looking at that RFID stuff and I've looked at it and I've tested it. There's people that are making a fortune selling these sleeves and stuff to help protect you from bad guys in this one scenario that is not going to happen.  Particularly I did a test on this for a duo and actually put out a video on it. It's a few search for duo RFID and one of my names you'll probably find it. I ended up, you could do the same thing as a Chipotle wrapper for God's sake. It's just as good. It meets government standards. By the way there is a government standard for testing RFID blocking technology and I'm not kidding. There are some dangers like is anyone staying in the hotel here? You get one of those nice cards that's to scan to get into your room. Those kind of things, those can be probably duplicated with someone with a Proxmark 3. I believe someone's doing a talk tomorrow on hotel stuff. Maybe they'll cover that kind of thing there. This is going to be a problem. It's a problem now and it's going to continue with overreactive legislation. I want to touch on the concept of cyber insurance. Have you heard about cyber insurance? I see a few people nodding their head with sad looks on their faces. This is horrid. This is absolutely horrid in many ways. I just want to just look at the things I've talked about. Clickbait headlines that influence people. Remember when the loft testified before Congress and they go up there and you read the transcript and it's all this stuff that they're talking about and it's all detailed and it's like wow they're really representing. What were the headlines out of that? We can take the internet down in 30 minutes. That's it. That's what they reported. That's what made it into the press. They take the internet down in 30 minutes. They left out all the other stuff because that's the clickbait headline that all the major things are going. That's the kind of things that's going to drive these legislative decisions and you're going to have cyber insurance these lobbyists are going to be influencing this thing. Think about what the insurance companies have done to affect things like your homeowner's insurance and particularly your car insurance. It is illegal to drive without car insurance.  Damn so anyway I want to have your things IOT now this is I think a quarter to a third of the talks here at the con are on IOT in some form or fashion. This thing is going to continue to evolve and it's going to become a launch platform for other targets. Think about it in terms like this as far as instead of getting specific about a particular target think about like this. There are devices out there like the hearing aid thing. The hearables. Where you need to have massive computing power out there somewhere that's going to be doing let's say you have a camera device out there and it's taking pictures and it's going to transmit all this video data back to the cloud and then stuff's going to be churned on it and it's going to make a decision based on that data which is ultimately probably a yes or a no it's okay so if this thing is only periodically on the network it makes sense to push down some computing power to allow it to go ahead and make that yes or no decision there on the edge out there in the middle of some field or some you know monitoring thing that is doing and then shove the yes or no answer back up to the cloud much more efficient that complicates things when you start thinking about you know DDOS ransomware depending upon what these things do or just altering the data that's on them I'm not talking about DDOS against these devices or these or I am talking about DDOS against these devices I'm not talking about using these devices in a DDOS attack if they're only on the network every once in a while it doesn't make any sense but depending upon what these things do that could be fairly serious you know or you know monitoring a water supply or something like that and they got you know an automated boat that goes around and picks up data from sensors because they're only online every once in a while being able to effect that kind of output that's that's interesting the other one is not only that deals with IOT is that IOT is becoming IIOT industrial Internet of Things it's all just becoming I okay this shit was going to be everywhere in everything and that's just the way it is when you bought a television you know when I was a little kid back when you know everything ran on coal you know including the Internet you know television was like you know 3 feet by 4 feet by 4 feet you know just this massive giant box that had to sit on the floor because it was so big if you wanted a big screen and then they came out with flat screen TVs and they differentiated between them by saying these are flat screen TVs now they're just TVs and yeah these are now they're not smartphones anymore they're just phones which you know most of us don't actually have always conversations on them it's all electronic stuff and everything and that's just kind of the way it is and I mean yeah it's stupid where you have like you know there's smart toasters and smart this or that but you know eventually you know you're not going to be able to buy a toaster that isn't capable of printing weather reports on your toast in the morning okay you know you're not going to be able to do that those will just become toasters and the old ones will become antiques but yeah security issues are not going to help this whole situation at all now there are things that do help multi factor authentication patching only allowing trusted users and devices only to access company access these are things we all know without you have to do it without a perimeter so that whole zero trust networking thing that for some reason is now the rage with marketing but by the way it does work I mean stuff does work and you know for the most part I mean there's we're getting there with it but the main point of this with this stuff you know beginning to come into fruition is that I really think that multi factor authentication is going to kill the password the password is the single most laughable security thing that we've come up with as an industry it was originally meant to tell the difference in a time-sharing system between Alice and Bob so that Alice couldn't get on there and print things off in Bob's name and it gets billed to Bob's department because Alice's department was out of credits so to protect the accounts they put on passwords there have been countless presentations at security conferences talking about passwords and you know how to break them how to get a hold of them all this stuff that's the prized possession passwords we're already at the point how many people here use something like you know LastPass or you know OnePass or whatever it is yeah and you have it generate this massive password you don't even know what that thing is if someone held a gun to your head you're not going to be able to answer them and tell them no I don't know what the password is because this big thing generated and stored it for me I didn't even look at it when it was generated you know we're already at the point where we don't even know our own passwords okay so if you can do this whole thing with a combination of you know AEP you know a push authorization and a biometric there's your two factor right there you're meeting the standards and you're not using a password passwords going to die soon okay and I mean it's weird too because I mean I work at a company whose whole premise is built on the fact that passwords suck you know I work for a company that does that second factor and that's weird we even have a few customers who I can't name that in certain cases they don't even use the first factor they just use the second factor for authentication so that's where we're heading alright we're going to start getting stranger here the merging of human and machine we're already a part of this all of us are you don't even probably think about it but right now a lot of you probably have your phone in your pocket and when your phone buzzes a lot of times you can tell by the type of business that it gives you whether you've got a missed phone call a notification of some time you can tell the difference between them okay I've certainly gotten used to this you know this Apple Watch you know and I can identify about you know three or four different types of you know with the haptic feedback sensor you know you can get shirts now there's none that have come around that everyday consumers are typically buying yet but you can get shirts that have haptic feedback sensors put in there they're mainly intended right now for athletes you know to make sure that when they're working out they're really exercising properly it's giving them immediate feedback to make sure that their muscles are being exercised properly and what not so imagine taking something like that and then having that on and tying in your alerts and things about your environment into that shirt and you're walking around and you're able to you know interact in a completely and uniquely different way I mean you can get simple and just say you know a tap on the shoulder means one thing a tap on the shoulder means another you know a slide up your spine means a system your manager's been compromised I mean you can get creative with it but you know nonetheless I mean this kind of stuff is there but we're heading that direction okay and this is a kind of a big one for me and that is that there is no difference between the real world and the digital world not anymore there used to be and you can deny it all you want but we have become there's like this melding of our online personas and our real persona one influences the other we can try to present a different face online but I can't think of how many times I've had to present a different face in real life at like say Thanksgiving dinner something like that same thing we're just doing it's just the same thing there is no difference whatsoever all right now think about this as a template and we're talking about this thing like an example of Cali's hearing aids let's try and apply this to something else that doesn't exist yet but that could and this will be kind of a stretch but I just want you to hear me out I want you to think about a smart gun all right now your first thing is you're going to have military application of this because I don't know about you but you know after playing things like Call of Duty, Fortnite, Halo, especially the ones that take place in the future like some of the versions of Call of Duty and Halo why isn't it tied biometrically to the guy so that if he drops it then his enemy can't pick it up and you know what I mean it just makes sense that if you tied it biometrically to a person you know keep someone else from using the gun you know you could eliminate gun safes because the only person that could pull it out of the gun safe is that person that's biometrically linked to it you know that might I know that there's people that are on both sides of this whole gun debate but that kind of answers a lot of the issues for both sides to some degree now don't start shouting out but what about you know some edge case I don't give a shit that's not what I'm talking about I'm just talking about using this as an example okay there is and you can apply this to you know all kinds of different things I'm just using a gun as an example but it was you know the military I would think would develop this first because they're the ones who are you know they don't want to you know the military has some great new weapon and you know the military is going in and doing some you know really massive invasion they don't want an enemy to pick up their brand new cool killer weapon and then use it against them that would be wrong that would kind of you know that would be a bad thing for them and it makes sense you know just they lock it into the thing in the carrier while they're on their way to fight their fight and biometrically it's only that one soldier that can pull that thing back out of there after it's charged up and whatnot and it's also providing all kinds of interesting likes you know various pieces of telemetry and you know performance and all these other kinds of things can get fed back to headquarters or to even the manufacturer just to let them know that you know something needs to be fixed or repaired or or whatnot needs a firmware update or automatically post pictures to Instagram whatever the hell they had of these things I don't know you know and just so you know I mean just be a little bit of why I picked guns is because I have this weird fascination with them and I grew up around them all the time because I grew up in Oklahoma and my high school in the suburban area my high school they had people that drove to school that had gun racks in the back window of their pickup trucks with guns in them and it was not a big deal a friend of mine actually had one in a bag and had gone into the school with it and got caught and the vice principal came out says now you know the rules we're gonna walk right back out and I don't care if you're going out to so-and-so's ranch after work or after school we're gonna walk out there that parking lot you're gonna lock that gun in that trunk where it needs to be and that's what happened and the news wasn't involved it was a different time and I mean just you know this is just the way things were and I was around it all the time and this never purchased a gun and still don't own one and mainly it's out of paranoia because I keep thinking at some point I'm gonna get busted do we lose the screen over there or is it just not been on oh okay well sorry about that but I've never had a gun because I thought well if the feds come in and they bust me they're gonna get me not only for hacking but they're also if they find a gun they're gonna say possession of a firearm during commission of a felony and then have a 20 year charge now they're not gonna take that to trial okay they'll be part of the plea agreement where they've they've tacked on and I'm being dead serious on this folks okay where they've tacked on you know 15-20 charges and then they say okay well we'll take away all but three charges so you're not gonna be in jail for 20 years you know that's a real thing and the last time I heard about this being used you remember Tommy Chong was selling Chong's bongs you know one of the first things they did when they raided his place they were looking for a gun so they could tack on that that crime onto there because that way they could get him to go ahead and take the agreement now you can go ahead and by the way if you're gonna go ahead and fight that kind of stuff feel free you know to go ahead and try and fight the government they have a about a 95% conviction rate something to keep in mind anyway that's about that happy stuff I want you to consider a few things and these are things that have to do with doing risk assessment alright now everyone in this room has probably done risk assessment at some point and this is where we get into the real kind of enemy that exists I would imagine that there's some people that I'm not gonna have you put up hands because I might immediately end up embarrassing you inadvertently and I don't want to do that but I would imagine a lot of you have taken steps in your lives to make sure that you're not murdered okay I'm just I'm just gonna guess alright you don't have to raise your hands if you're preparing not to be murdered but the thing is is that statistically you are more likely to commit suicide than you are to be murdered so are you actively trying to make sure you don't commit suicide more because that's more likely when you're thinking about your own mortality and you're making assessments on how you might die when you do things like saying well I'm not gonna take that airplane because terrorists flew it into a building or whatever or you know you're gonna get in your car where you got a 65 times greater chance of you know being injured or whatever it is whatever the exact number is I mean that's the thing the number one killer in this country is heart disease people are actually actively trying to prevent themselves from dying of a freaking heart attack versus some other a few brave souls are raising their hands most of them have gray or hair like myself but you know something you young ins should probably pay attention to but none the less I mean these are the things we're not we're assessing the wrong the wrong things half the time this effects your thinking when you start thinking about when you're being inundated with things like bad headlines you're being you know all these examples of and then cultural norms that's the thing we've you know we've walked back and forth between those crazies and the normals we can take a little bit of different perspective on this and get a little bit better sense of what actually could happen versus what other people tell us are gonna happen so I mean kind of you know in closing on this I just want you to think about that just when you're doing that risk assessment thing we've got one other thing like when we're talking about you know having these things pushed out to the edge and they've got this massive computing power that are on there you know the camera looking at the you know water supplier whatever those types of things we have to take into account where they fit in the really big picture within our society 80% of us in the United States live in a more suburban environment very few live outside of that so if shit happens you know some type of cyber disruption happens or just even just even natural disasters to a degree as well but you know where there's no power or no whatever just for even for short periods it's extraordinarily disruptive and so as we're pushing this technology out we have to kind of keep that kind of thinking in mind so anyway that's pretty much the end of my talk proper I was going to take time for questions I know that they're running behind I can give them 10 minutes back so really if you've got questions or anything just you can reach me at these couple of email addresses I'm simple nomad on twitter and also they'll probably be I'm hoping at some point the gnome at sysco.com added to that as well and I'm going to be unfortunately due to my scheduling I'm not going to be able to be here tomorrow but I will be here for the remainder of the day and hanging around the conference so if you got any questions or comments or anything you want to talk hit me up anyway it's great coming back here and doing a keynote I love this conference it's always a lot of fun so thank you very much appreciate it


The Chicano the Mexican American the Mexican movements of people, you know, they are very very connected to resistance In our history for hundreds of years and so it only makes sense that there's a big demo That that that does have that does have a connection with the people of Palestine and there's nothing wrong with that You can you can you can have a connection with the people and still address the you know, all the other complicated They're used to this thing they're used to American culture which has no empathy at all at least in previous generations for that community So they're used to putting whatever they want garbage and movies, you know, the Arab terrorists and there being no resistance They're used to it. They're not used to or any of their audience being sympathetic to this community They don't know what to do. Yeah, or any discourse camera where where people like you and me bring up Hey, but what about this?  She was the one that spoke out saying it's okay to have Pete You know, we don't need to have shade racism. We need to have a you know You remember the whole thing when she was confronted with that by that activist who was saying, you know there's not enough In her movie right and and she while while the Asian director said I'm so sorry, please forgive me Well, everyone everyone apologized, right and she didn't and she confronted it She's that's not right at that time the right wing grooves.  I'm pretty conservative. I'm a religious guy pretty conservative guy Politically, I'm libertarian, which is really shocking in Hollywood, right? I know I am I'm not I'm not I'm very anti-Marxist and I'm very pro-Palestine, right from the property ultra-religious beliefs from the property rights perspective as a libertarian, which is you know, somebody You know, somebody can't just steal your house without compensating for you I mean, that's a libertarian perspective if you steal the whole country without addressing it There's a libertarian argument that that's wrong that's a right-wing argument and and yet I was put into our cameras a Marxist No, I'm not actually because of my sympathies But that's the the bifurcated conversation on this topic that Melissa disrupted. Yeah Yeah, and so and as a result we are at this place, right where Hollywood is confused It's scared of this community. It needs it. It sees it as the demographic future But on a deeper political thing this whole Latinx thing also Reveals something that frightens sort of the Hollywood Marxist that our right-wing friends are upset about right? Which is that the the argument is you know, the whole argument is they're bringing in all these You know illegals from Latin America and they're gonna vote Democratic and they're gonna vote them and they're like well, but these guys are Coming in from from the Latino countries who are actually socially conservative So they're actually really more on closer to you see a voting in that direction, right? So now you've got Hollywood realizing that and suddenly becoming concerned We've been championing this community thinking it's gonna vote culturally on with us and doesn't seem to be doing that And right-wingers don't know what to do with it Because they frankly all them really are racists and they don't they don't really like a conservative Latino either It's a lack of understanding and that's the thing is that is that if if you don't understand it from the get-go and You have a very narrow world worldview of Even what it means to be an American Then when shit like this comes up It's very difficult to have a to have a real civil discord and real real conversation about things without yelling Right, there's you know, it's it's like it's like someone growing up in Southern, California and Loving the food, but not understanding the damn fucking thing about You know the history the people It's so it's so it's it's both ignorant and elitist and arrogant at the same all all in one and That's that's that's just the construct of how it's been But listen, I'm we're all maneuvering. We're none of us are victims here We're kicking ass and we're we want part of the American dream as well. So Yeah, man