When we go to write out the values for our convolution result, we can do this pairwise multiplication and summation explicitly. We can write it out the long way. So let's start by jumping kind of into the middle. We'll look at y of p. So our result at the position p. This means that our kernel fully overlaps the signal x. So it goes from minus p to plus p, and each one of those aligns with one element of the signal. And in addition, we know that the very tail end, after we've flipped it, the very left hand side of that flipped kernel, is w sub p. We know that lines up exactly with the first value of our signal, x sub 0. And we know that because we're calculating y sub p, the convolution at position p. So by counting down from p to 0, we're counting our weights from 0 up to p. And so we know that our first element is x sub 0 y sub p. And then we just step counting up on our x's and down on our w's because our w has been reversed, our kernel has been reversed. So we have x sub 1 times w of p minus 1. And we keep going until we get to the center of our kernel, which is x sub p times w sub 0. And then we keep going until we get to the far end of our kernel, which is x sub 2 times p w sub minus p. You can see there's a little typo here where I repeat the x sub p w sub 0. That shouldn't be there. I'll change that. But this shows going all the way from, counting from w p to w minus p, and from x sub 0 to x sub 2 p. So this is a full, fully overlapped, a fully valid convolution. As we step backward from here toward y sub p minus 1, y sub p minus 2, all the way back to y sub 2, y sub 1, y sub 0, we get to a condition where our kernel does not completely overlap our signal. Some of it's dangling off to the side. The way we handle that mathematically is we pretend that our signal extends out further, but that all of those values are 0. But what that means is that we can safely ignore them in our equations because 0 times each of the weights in our kernel is going to be 0. And so we can always start with, for y sub 0, we can just start right in the middle of our kernel and say it's x sub 0 times w sub 0. And we can count up on our x index, down on our w index, because our kernel has been flipped, x sub 1 times w minus 1, x sub 2 times w sub minus 2, all the way out to x sub p times w sub minus p. Then when we go to our next position, y sub 1, our next output value, we just shift all of our weights by 1. But now we can include the w sub 1 times x sub 0 and then move to x sub 1 times w sub 0 and count all the way up to x sub p plus 1 and w sub minus p. And we step through until we're completely overlapped at y sub p. And then we keep going. We just increment our x index by 1 every time we increment our y index by 1 and run that sliding dot product step by step all the way across. And when we get to the far end, we do the same thing that we did at the beginning. Any portion of the kernel that extends past the end of the signal just gets treated like it's lined up with zeros. So each of those kernel elements get multiplied by zero, so we can ignore them. And then we keep going until that center element on the kernel is lined up with the last element in our output array, y sub m. And then that's our last value.


and i'm not on about the round up you know the the commonly available stuff you know by the time you put on your goggles your mask your gloves you know you think well what the hell is in this and that's just on a on a domestic sort of basis right if people want to get more information you can search barry quinn on socials but there's a bit of a curveball uh in that you spelled your first name a little bit different than people might presume so it's not b a r r why it's b a r r i e yeah but it's port new market garden is all my socials right you know and and just go to port new market garden okay right anything you want to add barry um uh i just i just this is something i've been very passionate about again and i love spread and i really want to thank you for bringing me on here because um you know the people that are making the decisions like in europe and that are powerful people and they're in powerful positions and although they're making these decisions they're not always right and you you would know this greg they're not always right and so i think it's up to people like yourself and people like yourself too to to that are in positions where we can speak to a wider audience and we can make a create awareness and make it aware that this is uh something that we can change and hopefully we can make a change for the better and if you glance over uh the arguments that are made how they're being pitched where they're being pitched and then you look at the court cases and how they're being settled and what what's being said if you do a deep dive into it a little bit you don't even have to go too deep it just feel very reminiscent of cigarettes uh and other things like that you know um where people are saying right we can get another 10 years out of this and then we'll get out all right so people just need to be careful and as always stay informed barry thank you very much for your time thank you great barry queen owner of port new market garden if you want more information port new market garden now uh the figures i'm quoting were figures that were published late 2022 in terms of the council's purchasing of pesticides and on other chemicals we'll make an inquiry to find out if that's changed a lot i don't want to do the council to service if they've changed their uh if they change their practices i'll give that equal platform as well but that's off the back of the concerns there hi greg can you recommend an organic weed killer that works please i can't but i know our fantastic listeners on the night till noon show can so what uh and i would be really interested in this as well i don't like using i don't like the weed killer i just don't like using i don't like it around the house um i don't like spraying it so what what is a good way to suppress kill weeds that is organic and works now the thing is everything takes time like weed killer takes a couple of weeks to work doesn't it but is there an organic alternative a listener wants to know i ain't gonna lie i want to know let us know 086 60 25 000 the county's number one talk show the night till noon show on highland radio this week's show is brought to you by the highland hoolie in saloo join us this september in the sunny saloo for a week of live entertainment with ireland's leading country artist dinner each evening and plenty of crack sun saloo and you this september for booking information go to the outlet on highlandradial.com across a wide range of categories the 2024.ie digital town awards are a chance to showcase your town's digital project apply now at digitaltownawards.ie brought to you by .ie ireland's national domain registry terms and conditions applied enhance your skills with syftec's part funded training programs at syftec we provide courses including first aid roadworks people moving and handling confined spaces electrophusion and machinery training for ireland and uk sites also online programs such as water hygiene construction supervisors safety reps and much more if you have a group for training syftec will go to you contact syftec today at syftec.ie and take the first step towards upskilling and safety compliance join me marty frill this and every friday night from eight for rocking hits on highland radio in association with arena seven letter kenny if you're celebrating a birthday or a work night out arena seven entertainment complex has it all check out arena seven dot ie discover comfort with eye heating and cooling your trusted heat pump engineers and mitzvah be she approved service providers in dunny gall we design install and maintain cutting-edge heating systems build a lasting relationship with us through annual service and comprehensive after sales contact us for a free consultation on low-cost low-carbon heating solutions visit eye heating and cooling dot ie today join homeland and uterus animal feeds for their future of farming 2024 and the dunny gall sales awards evening on wednesday 7th of february and 8 p.m. in the monteregal hotel letter kenny learned from industry experts on the evening including finn barrow reagan from the department of agriculture connor brown from the icbf adam woods from the iberish farmers journal and guest judge andrew right better known as farm theory na on youtube and tech talk for more information visit homeland dot ie okay you welcome back to the program we welcome on to it now kathy good morning kathy listening perhaps listening perhaps to that last conversation with interest yeah i was um listening to it and i heard about the spraying and all and um i was diagnosed last year in july with a thing called harry sale leukemia and it was something it was a bit of a shock and it was something i didn't know much about and when i looked up how did i get this and it's not hereditary or that type of thing but some of the research would suggest there's been nothing you know concrete but it would suggest that it may be caused by pesticides or sprays or that type of thing can you tell us a bit and i found uh sorry go i'll just we'll get to the can you tell us a little bit more about the condition as you say it's very rare i hadn't heard of it before either or have you not no harry sale leukemia no not happened harry sale leukemia is um my white blood cell count had been low for a good number of years certainly since 2019 it was going down pretty rapid and then um i had headaches um a lot of pain muscle tiredness uh a lot of different stuff going on and my white blood cell count was very low then uh about a year and a half ago i got this purple sort of a blotchy rash on my face and um i didn't pay much heed so it was spot through whatever but eventually i went to the doctor and it was got to be rosacea um i got cream for it and it got worse it got actually pretty painful so then i was on iver mechton and i can't remember the name of the antibiotic and it took most for three months and it certainly it done healed the rash a bit or whatever but it didn't totally go away then last year in may i got my blood stone again after the three months of the treatment for my face up and my blood cell my white blood cell count had dropped dramatically that my immune system was very low so i was a what the hematologist on a thursday i was in on a Monday morning for a bone marrow biopsy at the ricketing hospital and two weeks later i got my diagnosis of harry cell leukemia it's where these cells um they're a clone cell they overproduce themselves open the bone marrow and then they crowd out to production of good cells that makes sense they're invasive cells really effectively yeah okay yeah they're a clone they're they're a clone type um you know i i'm a great one for reading and to stuff and researching and looking and checking out or whatever but basically they're a clone cell and they take over where the good your your good cells are produced in your bone marrow and all like that and then they crowded out in the rhythm so eventually then i had treatment at the end of september then i got uterine accepted i was allergic to some of the drugs that i just gave them afterwards and i'm still trying to recover and like lots of people you know you want to know where did this come from uh you know could it could could my children be affected or my sisters or brothers or whatever it might be so we try and find out and and the first thing that seems to be suggested is that it has been linked to uh exposure to chemicals and you would have used it's not it's not saying for definite there's no definite reason there's no definite cause or no definite reason why but there's a suggestion there of it and growing up on a farm i would have been exposed to chemicals um like there was even stuff they used to put on potatoes you know to stop them budding you know so it would last longer that's a chemical um myself i would have used uh different wheat chillers round up and no different stuff you wouldn't have thought or whatever um you know we didn't protect ourselves you know we didn't put on a mask put on gloves i'd be very conscious now i'd wear gloves if they constantly wash my hands i would wear a mask even if i was super me care to watch it you know about and healing and healing that stuff and i found it very interesting the way that yeah the the do spray along the roads and the paths and all that and you'd be out walking or whatever and you just don't think but that's bound to linger in the air for a certain amount of time yeah and again for me you just have to be extra careful now and this is a condition that you will live with for the rest of your life um it's it develops slowly but there are effective treatments is that the situation kathy uh well it developed very slowly with me and i've had my treatment was five days of planter being um and my uh my immune system was totally depleted or whatever like that and my face and praying or whatever like that and i would have great faith and i would be praying very hard to the police spirit and all like that yeah that i would get um remission um and the doctor explained to me the last day that it was i'm having a bone marrow biopsy now and April again to um see if it's gone but he said even what's that because it can't be found you know even if it's not found in April and my bone marrow or whatever the couldn't say for deaf and that it's not that it's eradicated i guess you yes one of those things that can come back again you know if there's a slight difference yeah has the has your symptoms eased somewhat though um the headaches aren't as bad but um the treatment then has its own yeah effects or whatever um you know nerve pain bone pain sleepless nights anxiety everything else that sort of goes with it um i joined in a group there's a heresial leukemia support group or whatever and like every other support group there's a lot of positivity to be taken there's a lot of learning from reading stuff on it and then there's all the negative side of it as well or whatever i would debate sometimes is it good to join the scripture or not because you know but i think there's a lot of great people but i think you've got your opinions too Kathy you sound like a person that has so but yeah i know what you mean yeah it's like everything and then people have their own takes and what have you but listen fingers crossed for April and things going forward Kathy i hope you get good news and i hope you're yeah um i also thought different times maybe protecting yourself as well i'm sure there must be other people in donnie gall who've had a diagnosis of heresial leukemia um you know it would be nice just to you know to put a facer to talk to someone who may have this heresial leukemia to see how other people got on like well listen they can contact us and we can check with them and and and if you just want to make contact with each other we've done a lot of sort of awareness campaigns on many many different things and it may well have come up but i just don't remember heresial leukemia coming up it is pretty rare but if you're happy enough we will invite anyone who who's interested to contact us and we can try and find a way for for you to connect with them if that's what both parties want if that would be useful for you Kathy yeah i find that it's pretty rare but sometimes um things aren't as rare it's just that you know nobody um highlights it or there's no awareness off of it or whatever and we were speaking we were doing more people than we know about yeah last week we were speaking about a condition and the person with it uh adison's disease actually it is uh the person with it yeah was of the opinion there was only two people in donnie gall with it and i think by the time the interview had ended uh it was like there was about 10 people who'd said they had it in donnie gall so i i imagine it's probably going to be quite similar with heresial leukemia yeah you know just to say uh how the treatment go for you or what worked for you you know um there's learning from each other and they're the best learning i think you get it from from people who understand you they've been through stuff themselves exactly because no matter how sympathetic and and carrying those around us are sometimes it's someone who's lived it and knows exactly what's going on that that that you can get a bit of comfort from all right kathie as i say best of luck with april and beyond uh and uh thanks very much for your faith and what hafi you work out good news and we appreciate your time yeah thank you very much and i did find it interesting today um and i just uh the awareness around the pesticide and stuff like that kind of things with the stuff out there um just awareness um i think helps too for sure and actually really useful to get uh some information on that condition thank you so much indeed kathie uh a caller says it is some of the safest because it kills green plant it comes into contact with and does not leech okay uh glyphosate uh glyphosate glyphosate is probably says that it's the safest herbicide available when used correctly and like any other chemicals it is it's improper use which leads to problems with its use okay indeed thank you um caroline on facebook uh in terms of sort of natural ways to kill weeds um pour one gallon of white vinegar into a bucket five percent household white vinegar is fine add one cup of table salt stir in one tablespoon of liquid dishwashing soap blend all thoroughly and then follow funnel the weed killer into a plastic spray bottle pretty good weed killer they say so i presume caroline you've used that how long does it take to work and what have you and is it is it useful sort of for the weeds on the driveways and what and stuff right um the main ingredient in glyphosate is isopropylamine salt which is an organic compound and a mine i mean sorry about my pronunciation of some of this stuff which is a type of ammonia uh glyphosate is absorbed into the plant and is deactivated on contact with soil so does not leech it is a contact herbicide indeed but could there be cross contamination walking through um or touching it after it's been sprayed i'm texting from australia i spent christmas with my sister and her family in donagol great thank you childhood lies when i was 12 i bought a hamster with my confirmation money named him hammy was mad about him one morning i woke up and hammy wasn't in his cage i was devastated went off to school when i came home hammy was back uh in his cage my father told me he had found him in a cupboard near the kitchen while i was at school for years i mean up to my trip to donagol i believed that hammy had been found and put back it never dawned on me that hammy wasn't actually hammy but a complete new hamster we laughed so much about this over christmas i've just turned 50 so clearly i'm a bit thick please say hi to my lovely sister mary and our family from helen in walla gong walla gong south new south wales um actually that reminds me when we were younger pestered uh pestered mom and dad for a budgie eventually we got a budgie and it was in a cage downstairs and um it's kind of it's wonderful and terrible at the same time but we spent so much time trying to get it to speak i'm not sure budgies can speak or whatever but anyway that that didn't work but we'd get up early and gadan gadan uh it feels like i'm doing that with hudson now but we'd get down early and try and teach the budgie to speak but anyway that's that's not the really story but older brother i think it was an older brother um do you know those little eggs that you get at easter time the little hard shelled eggs the tiny little eggs well they thought it would be funny to put a couple of these eggs in the cage and uh we went down and so excited that the budgie had laid eggs never thought how that would be physically possible if there was only one budgie in there anyway but for a couple of days was waiting on these little these little easter eggs to to hatch and then i think someone took one out and ate it or something and it was devastating uh funny but it took a couple of days to get over that was a bad prank uh but fun at the same time interesting to look back on and paul hammy there there's a hammy one and hammy two this time it's personal anyway any more stories like that from your childhood share them up to us on 08 660 25 000 i made that story about the eggs and the budgie sound really sad it wasn't sad it was hilarious it was funny and we've laughed about it many times since but anyway that's the kind of prank big brothers can be responsible for watch the show live now on youtube facebook and at highlandradio.com this week's show is brought to you by the Highland Hoolian Saloo join us this september in the sunny saloo for a week of live entertainment with ireland's leading country artist dinner each evening and plenty of crack sun saloo and you this september for booking information go to the outlet on highlandradio.com are you graduating this year venture has opportunities for ambitious graduates from the northwest region to join its financial services graduate program 2024 and with offices located in both letter kenny and dairy london dairy you can build a successful career as a financial analyst right here on your doorstep want to work with the world's leading investment banks join the multi-award wedding team at venture and become the future of financial services visit venture.com forward slash grad to apply applications close February 12th uno dose trace ahain adoa tree one two three the orona the ateka and the terraco three great suvs from seat and when you order now you can enjoy three years free tire insurance and three years roadside assistance plus three flexible payment options to purchase your new seat visit seat.ie to discover even more of our fantastic offers great things come in threes at dmg motors dunny gold town and while i have three seconds allow me to say that yes terms and conditions apply do you need a uk address save hundreds of euros on custom charges shopping online with spacehop dairy we provide a full virtual address mailbox service for all your business and personal use save hundreds possibly thousands on custom charges with spacehop dairy call<PHONE_NUMBER>7 or online spacehopdairy.com for more details connect hearing is open for free hearing tests our audiologist is available monday to friday for wax removal services at our letter kidney clinic in the courtyard shopping center we also offer a home visit for those who aren't able to visit us our hearing is our social sense are you finding hearing more of a challenge call urshula today on 07491 13296 to make an appointment good hearing helps us to connect to our family friends and loved ones connect hearing connecting you to life business matters in association with the faculty of business at atu dunny gold for a career in financial governance consider the level 9 ma in governance and it in financial services starting in january contact the exec ed coordinator on 9186206 or email donald dot hanigan at atu.ie all right you're very welcome back to the program and we welcome into studio now chris ashmore we're going to be talking about the business matters podcast shortly digital first content dfc you can download it stream it listen to it right now on our website highlandradio.com chris good morning to you good morning greg interesting actually to hear this first item of news before we get into the podcast dunny gold's most popular car by mate mudlin color for the first month of this year yes i've been delving into the stats from the society of the arish motor industry and well first of all new car sales in dunny gold registrations in january amounted to 763 for the month so that's 16 up on last year so that's that's a good figure the garages will be pleased with that and nationally it's up about 15 so we're pretty much in kilture with the national figure although the national figure is actually slightly below the pre-covid level so still a little bit of catch up but yes now dunny gold first month of the year of 2024 the best selling brand was toyota who had 17 percent of the market followed by kia and then we had hyunday third full scota was fourth and puja was fifth i can make up the top 12 if you want well we'll stick it at that okay and then now the actual most popular model of car registered in dunny gold in january was the kia sportage 67 of them in america they call them the kia sportage oh really yeah why do you call it the sportage i really don't know yeah it's called the sportage in sportage right okay and then we had the toyota rav 4 with 31 and the puja 3008 with so the top three selling cars are all suvs which is kind of interesting it shows the way things have gone yeah and five of the top ten models were toyota which is significant and and just uh you know you might want to know that 32 percent of those registered in january were petrol 27 diesel and 24 hybrid petrol electric which is sort of the the big growth area because we're seeing not that many pure electric in dunny gold because the hybrid electric gives you that little bit of option and there's the mild diesel uh hybrid as well which i don't think goes into not as many and electric vehicles percentage wise sort of standalone electric vehicles the standalone ones at about seven percent so it's not that yeah now color is interesting gray the most popular choice now when they say gray that takes in silver so silver gray 36 percent of all new registration so right next to it no white stroke ivory okay 18 percent and then black 16 percent right that cars are all to keep clean yeah just staying on that a listener says i got my renewal in for my private van it was 644 euro when i rang up the company the best they could do was 600 euro so i said i'll get back to you so i did an online quote for the same company it came back at 490 euro so i rang up and told the lady the story after she put me on hold for 28 minutes i got it for 477 euro uh just to say patience pays off so they went from 644 the renewal down to 477 with the same bloody company but anyway okay right um big plans in falcara yes uh good news story uh was reported in the business post uh a falcara based tech company called calcius uh set to invest in the region of five million euro in an expansion program that will lead to around 30 new jobs now they manufacture wireless temperature monitoring systems so a lot of these are for food display and for storage they signed a deal with tesco last year supplying 112 tesco stores so somebody somewhere can see what the temperature is of all the units so uh they've a number of new products coming on stream in early 2025 so they're expanding rapidly so uh a great little success story there brilliant stuff and units of housing next 88 for letter kenny yeah plans and the pipeline for the construction of 72 houses and 16 apartments in the creve smith area of letter kenny and this follows on from an application some years ago so uh the updated one is uh from george dardy construction limited it's currently with dunagall kenny council but that's quite a significant number 72 houses and 16 apartments in the planning process all right and the dunagall women in business network they have a workshop upcoming they do indeed wednesday the 21st of february and uh it's a workshop all about numbers uh things that will be discussed will be uh should you register for tax they learn about uh vat how to minimize your tax liability uh all sorts of things like that and it'll be led by risa feeney who's the founder and ceo of accountant online it's a full day workshop so uh you'll find more details on that on the dunagall women in business facebook page or indeed on their website as well brilliant stuff okay let's get down to the uh business of the podcast who's your guest this week chris i guess this week is a young woman called hannah van der volt who came to dunagall three years ago from south africa initially planning to stay just one year her husband uh got a job here and uh one year became two two years became three and uh just before christmas in october in fact she went into business herself and opened her bloom of coffee shop in letter kenny so a nice little journey from south africa to letter kenny so the initial plan was to come here for one year my husband got a job offer in letter kenny and we said we are young we don't have kids so paid so um we're gonna see hard guys and um one year sent into two and two turned into three and now we are here um and later kenny has been really good very welcoming to us so we are happy to be here so my husband came on a critical skills permit so i was allowed to work start working immediately um and i said i want to work in a coffee shop i like hospitality i want to see what the culture is how the people are um just to get to know the people and the community and i got a job in another coffee shop in town um where i started working and i said to the to the owner one day i want to open my own coffee shop uh it's the plan to open a coffee shop one day um not the intent maybe not letter kenny and it just happened okay what an interesting story and you can hear much more of it uh in the full podcast available for you right now on our website highland radio dot com you can choose to download or stream it from that platform and it should also be up on Spotify or iTunes right now as well and broadcast of course live uh although prerecorded but broadcast uh on the airwaves on sunday chris that's right on sunday after the six o'clock news and you can contact me at business matters at highland radio dot com chris thank you very much indeed that is chris ashmore there and we'll be back with more in the nine till noon show after these this week's show is brought to you by the highland hoolie in saloo join us this september in the sunny saloo for a week of live entertainment with ireland's leading country artists dinner each evening and plenty of crack sun saloo and you this september for booking information go to the outlet on highland radio dot com traditional irish folk in balaban to kill kenny's come to jackson's hotel balba fe on friday 16th of february and and kerchkey door on saturday 17th of february tickets are 20 euro each and available from event bright and from hotel reception for day-to-day health care needs generations have trusted the experienced staff at mickey's chemist letter kenny from coughs and coals to aches and pains from vitamin supplements to first aid essentials mickey's have what you need when you need it with a full prescription service available daily mickey's chemist main street letter kenny for health care help and advice you can always trust let's hear the real to snag heron fabric world made out dairy biggest ever winter sale now on on trend and in stock curtain and upholstery fabrics all on sale over 3000 meters now half price or less free curtain design ready make curtains up to half price and lining from one pound with fabulous rates on the euro in store at fabric world made out dairy across ireland more than 1.6 million homes farms and businesses have been upgraded to a smart electricity meter and esb networks is continuing the rollout of smart measures in your area connecting more of us to a cleaner electric future one of the benefits of your smart measure is being able to find out more about your daily usage regardless of who your electricity supplier is get started by signing up today for your online account visit esb networks dot ie esb networks energizing your everything highland radio weather updates brought to you by grant building a new home choose grants a triple plus rated air owner air to water heat pump and you flex under floor heating visit grant dot ie okay drying calm for the rest of today with hazy uh high hazy sunshine for much of the day cold with highest temperatures of just four or five degrees in light northeast breezes now we received correspondent from a listener and the the whole letter is uh on our social media i can't go through it all now because time wouldn't permit but it reads as follows to begin with i know that you've helped others before and given them right resources and advice to help i'm at my wit's end i'm the eldest in my family and unfortunately never met the right person to settle down with that is until two years ago i've been dating my partner for two years and it's all going smoothly my mother's in the late 17s and relies on me a lot i've always been a mommy's girl and always felt that we've an unbreakable bond my mother's health has deteriorated in recent years as i live closest i'm tasked with minding her i enjoy her company but my god it is tough now that she's started to doubt has become frail and forgetful and just generally needs more help i have three other siblings one who lives a 15 minute drive away but is very preoccupied with his job so he makes excuses that he's too busy to take mom for a driver or even just take her to the shop for the essentials i find this behavior to be totally selfish my other sibling lives in gallway with three young children so i understand it would be difficult for them to care for month for mom due to the distance my other sibling lives an hour's drive away but also has a young family managing family life can be tough not only though would a monthly visit help mom but grandchildren love their grandparents i feel that my sister is making them miss out by not bringing them to visit mom i've cared for and visited mom for years uh the most four years as i'm the most readily available with the lease equipment out of all of my siblings why does the responsibility of caring for a parent always fall on one person any advice uh and i've kind of skipped through some of that but i hope the correspondent understands it is a familiar story a lot of people out there will go you know what that's very similar to my experience beth Fitzpatrick is a psychotherapist and has accepted our invite to come on and talk about this as i say beth good morning to you and not an unfamiliar story i would say one that an awful lot of people listening can relate to that's right greg and you know in our service like in cromland we see a lot of people that are in the cut in the same situation and basically i know you're stuck for time and come up to news probably seven minutes i'll take my time to help this lady yeah she's you know she's really really a beautiful person listen reading her letter she's a beautiful person she has been so good to her mother and she's not even being too hard on her siblings but the thing is people will take as long as you give it's not because they're bad i was taught that a long time ago so it's up to her to say look um i love you ma'am but i might be able to come every day and it's when we continue to do something people expect it's not that our siblings are bad they're just used to her doing it so it's like saying to them you know something i can't do this all the time i'm going to need some help i can't do it alone it you can never make somebody do something so it's not to lose faith with them and to say look i can't have you asked for help if i say to my family look i need some help with this i i can't do it can you help me they it works better than say oh you'd never help me and you know it's like saying the right words so how do you overcome though the argument well i live far away i've got young kids it's hard for me to get up and down or the other siblings saying well i'm really busy you know you've gotten old kids and you live right beside mom i mean you have to you have to stand up for yourself and and look after your own health and mental well-being don't you yeah no i agree with you but but even in our lives she said even a phone call and she's also right then grandchildren need our grandparents i mean i'm a grandmother myself and i know it's so good for them to see a different part and it's like saying and all she wants even a phone call if i'm doing that living all the way i mean i think she's been so so reasonable i think this lady deserves a huge medal i mean for what she's done but she at some stage it's as long as i remember years ago when i used to do things for everything for my children and then we learned this theory of taking care of myself as well so i said i'm sorry for continuing to do this i'm not going to do it anymore unlike they didn't it was only i changed by her change and she can help and it's only little steps like maybe saying to our sister i'm not going to be there this Saturday i'm hoping one of yous will step up and you suggest a whatsapp group a whatsapp group would be a way of communicating a whatsapp group would be she might have that already but put the mother under whatsapp group and not the mother just to create them because i do that we're all my siblings and i mean i often have that my mother is well past now but like that we all took days that we could go in even if we lived far and it's like it's not this woman has four children you know it's not like she has only one she has four and it's like we all if i can get away with it if i know somebody who's doing it all the time it's easy for me to sit back and say that's your job i can't do that so but that might not be more you're saying that might not be motivated by badness that might might be just sir mary's opposite mom she can look yeah she can do she can do everything she can do everything she and they will lie you know say for example you're giving somebody something every week and they they take a program to that it's going to be there it's like the same thing you go to see somebody every day they just and if you don't turn up they're going to be an eye that you but it's like saying to mum i know i've always done it but i do have a life as well and i'm not going to make it every day and the mother might be demanding because she's learned at the same time wouldn't it be lovely if one of the one of them went up with the children even say i'll do on a saturday i'll do this even every other saturday she's only looking for them to come up once a month i mean my god this girl is so patient you know i'd be looking for a lot more than once a month you know one of them is only an hour away 15 minutes away one is away what would what but say for instance three minutes away it's so to employ that advice and hopefully it would would resonate beth um there are also and people do be reluctant to to bring in outside help that's not family but there are services there in the meantime in an interim that could give this brilliant daughter a little bit of time to herself a bit of rest i have had so many people in access counseling where we are over the years help them to stand back and learn them that it's not their fault that they've done this she's a she's a caring type she's a fourth child usually the fourth child takes on everything but it's too much for them it's too much and they need to let go and say look i know i've done it and and she also adores our mother you can see that but it's about standing back and saying i can't do it every day and i don't think she could meet somebody yeah and in challenging that beth she shouldn't feel guilty or selfish for thinking those thoughts you know what i would do i would stand any guilt she feels on a very slow boat to china yeah i agree i agree because i think you can have a conflict of emotions there can't you i shouldn't feel like yeah you can and the guilt and guilt is not a bad thing it can teach us right from wrong you can teach us you know it's a normal it's a very normal feeling but when she feels that guilt just say no i'm letting it go i'm letting it go with love i love my mom i've done so much mom i can't do it every day i know i'm always there and even though our mother is though it looks like she can look and also look out for outside help like what's in the community if they're neighbors if they're people that can pop in if they're meals on wheels if they're like help from the local community yeah you know the local resources there's some of brilliant advice in there but i think this is actually especially given the reaction is something we're going to have to dedicate actually quite a bit more time to because there's an awful lot in here and an awful lot of people in the same boat i think for now you've given our listeners some really encouraging words and some really good advice and something to work with beth and i would love to follow this up with you at a later date but for now have a wonderful day and thank you so much beth that's awful because i couldn't get to you sooner thank you beth fits patrick there akhola says my story exactly no recognition from the government either whatsoever and another the moral of this story is very common i can look after five growing up but five cannot look after the one when they get older all right on that note and that's something we'll probably return to keep your texts and calls coming in by the way the lines remain open have a wonderful wednesday back tomorrow at nine john bresens up


Tom here for more systems and I want to talk about the differences between PF Sense CE and PF Sense Plus and answer the question that's in the title how much does it cost and it's free for home, free for lab, which means it's free for your home lab and that has been the case since it was released. I wanted to bring this up and put it right here in the front of the video because the question comes up a lot on forums and YouTube comments when people contact us well I was gonna run PF Sense Plus but I didn't have a Neck 8 device so I thought I couldn't. Now if you get a Neck 8 device it is free if you want to run it on your own device you have to load PF Sense CE and then move over to and get the license for a subscription but that subscription is free as I said for both home and for your lab for PF Sense Plus. Now there are some differences we're gonna talk about in a moment one of the primary ones is the support you will get with PF Sense Plus. PF Sense CE the community edition is just a project that has support you can find in the forum. Now let's get to the details of exactly what's different because I put a chart together to make this clear and you can find a link to this down below this is in my forums and we're gonna start that this is July of 2023 which means we have PF Sense CE 2.7.0 that's been released and PF Sense Plus 2305.1 they're both based on the same FreeBSD 14 PHP version 8.2 they both have ZFS support I want to highlight that because a feature that is not in PF Sense CE is boot environments but that doesn't mean it's not based on ZFS. The ZFS part is important that you install it with ZFS you can't do an in place like you have to erase it essentially reload it and then use ZFS because if you're coming from an older version where this wasn't available or you use the default installer of a previous version it would have been a different file system so that does require replacement on there now the cost I've left a link here so you can go right to their page where you can get a subscription if you are running this on your own hardware for the PF Sense CE you're gonna want to download CE and move over to Plus if that's your goal to get to that version and there's a few reasons you might want to do that obviously can purchase support is a big one the project maintainer for both of these is Nekate the documentation maintainer for both of these is Nekate and Nekate has some notes throughout their documentation as I was reading it I went through to make sure that these were correct as of July 2023 on the differences of what features you get if you decide to go to the Plus version besides the option for support the boot environments is my favorite so I put it at the top but QAT crypto open VPN DCO for data channel offload which is a beta feature open VPN client import this is an import tool to import instead of having to mainly set things up AWS VPN wizard IPsec export Apple profile IPsec export Windows PowerShell these are some extra export profiles are in there and then that's it they do not limit and this is the other confusion I want to make sure just to line it all up here any other features that are available in PF Sense so you can have PF Sense Plus or PF Sense CE and use high availability VLAN support open VPN wire guard L2TP on and on all the way down it's just green checkboxes all the way down that's why I put the red X's up here to show the difference and that's all this is this is the differences right here in July of 2023 for those wondering and to clarify that question now one more difference that's worth noting is that PF Sense CE has a longer release cycle than PF Sense Plus you're going to get more frequent updates with plus to the base OS but just because there has not been an update does not mean there is a security flaw this is something that is debated way too much in forms where people say well I haven't seen an update therefore there must be some unknown flaws that just aren't being disclosed to us and because they're building it on common open source tools you can look up the versions on there and because neck gate is very careful about what does or does not go into either one of these with PF Sense CE or PF Sense Plus you will find that they are very on top of security and some security notices that may be applied to BSD may not apply to PF Sense if they don't put that package in there so this is something to consider and neck eight does have a history of when there's a problem updating that module or doing a point release to address a major security concern you can go back through their history and see they have been very on top of any problem that's been found with the tooling that they have on there and getting that patch rather quickly nonetheless which one are you going to choose PF Sense Plus PF Sense CE leave your comments down below I'm always curious and like and subscribe if you want to see some more content head over to my forums for a more in depth discussion on this and other topics and see in the next video. Thanks.


Let's get started, folks. I'm Ken Klingenstein. I do middleware work for Internet too. I get to live on the frontier, got to do the frontier one other time at Internet one, and riding the exponential is always fun. So we'll talk a little bit about some of that stuff. I sure welcome that if you have any questions, barbs, whatever, you just run to the microphone and yell out point of order in classic Don Juan fashion, and we'll take it from there. We're going to talk about things identity, social, federated, scholarly, et cetera. So without any ado, I'm going to begin with a quick social identity update. I got one slide, but it's really chewy. And then I'll move into federated identity. I got graphics and the other kinds of stuff. I've been gifted with a NIST grant over the last few years to do some work with the federal government in this space. I played the White House last week just not far from here. I believe Darth Vader was in the audience, and we'll talk a little bit about some of the aspects associated with that. We'll go into some scholarly identity stuff. We've had some conversations in the last few days with Orchid, and I have some actual questions to ask you folks. And then we'll end with collaboration platforms, which are the orchestration of collaboration tools into an integrated access and identity management framework. And again, interrupt whenever you'd like. So social identity update. We all have our Gmail and Yahoo accounts. And in fact, in the U.S., this stuff is reaching saturation. Notice that the focus of service to the consumer continues, but it's really that you are the product that Google wants. And be very clear about that. It's you. And so they will be harvesting all your information, as you well know. And I'll talk a little bit about some of those activities when we talk about a privacy manager. But interestingly, about three or four years ago, when the Feds were ramping up an identity initiative, Google and Yahoo and Microsoft all lined up to be certified as LOA-1 for federal applications, allowing you to use your Gmail account to check your social security balance, for example, or to book campgrounds in the National Park Service. And they went through a process and they all got certified. They're up for a renewal. None of them has shown up at the door. Have they given up? Or is the federal government not a particularly attractive relying party? Is it a particularly demanding relying party? And so Google wants nothing to do with that. I don't know the answer, but it is striking that these companies that were lined up are now not lined up anymore. They're dropping their certifications or at least they haven't renewed them. And I think it's partially around if you serve federal government sites, you may have to meet federal standards for privacy. And they don't have an interest in doing that. In fact, if we're going to infringe on the terms and conditions that Google puts up there or Yahoo puts up there, those terms and conditions are their business and they're not about to change those. And there's a wonderful movie out there that some of you may have seen on terms and conditions that is very compelling. If you haven't seen the movie and you don't have 90 minutes, there's a 30 minute South Park episode, which is the distillation, but it's essentially the same activity that the character in South Park loses their identity to whoever they've clicked through on that agreement and can't get it back. So this is consumer as a service, not consumer. Serving the consumer, it's using the consumer. There's a protocol evolution happening underneath, OpenID Connect. And some of you may know that terminology. There is standard processes that are moving at a fairly slow but steady rate to begin to make OpenID Connect as rich as SAML. And in doing so, they're making it as complicated as SAML. So if you've been following the OpenID story, it was, oh, nice idea to use SAML, federalistas. But my God, this is really hard. We can make it simpler. Well, it turns out if you're trying to solve the problems we were trying to solve, you can't make it simpler. And so courtesy of our dear departed colleague when we were doing SAML, we took six months out in the beginning of the process to make sure that we couldn't make it simpler. And I had coding money and I'm going, Bob, Bob, we want a code. And after six months, we had convinced ourselves that this is as simple as you can make it and still meet the use cases we were trying to satisfy. So the problem with moving slowly and moving with an increasingly complicated standard is that some of those social companies aren't moving along with it. So Facebook has said, my God, what we're doing is good enough. Our business is not on the authentication process. Our business is in harvesting your data. And so it's not going to be the uniform market that we wanted to. And a lot of this is around the OAuth mechanism for non-web-based apps. And basically, phones have changed the name of the game. And I'll come back and talk about that. But for so long, those of us who were purists in the middleware business said, oh, my God, we can't put a client on the desktop. How would you begin to maintain that? Along comes telephones. My God, it's all clients on that little desktop. And so suddenly we're going to be the same kind of slobs that everybody else are and put clients on the desktop. It's the way of the world. The FIDO Alliance is a group of social identity providers that are promoting multi-factor authentication. Multi-factor authentication is really important. I'll come back to this in a bit. But with the rise of really good phishing, the only alternative left is MFA. And we're not going to get away from really good phishing. In fact, it's getting better and better as we speak. Notice that in typical identity landscape, there are two things we worry about. Is it really you? And then how is your active authentication? Well, social IDPs don't even worry about, is it really you? Just the active authentication. And so how do they know that it's really you or the same person coming back each time? I've seen the Google matrix. Over 100 factors go into figuring out if the person sitting at the keyboard someplace is really the same person who was sitting at the keyboard 10 days ago. And so we've all traveled overseas. We've all had little prompts from Google going, hmm, what are you doing in England? And you have to go through one of your security questions, et cetera. That's part of their massive algorithm that they apply in this space. That massive algorithm is harvesting your privacy left and right, not the subject of this conversation. But basically the relying party is deciding whether or not what they're offering is so risky that they have to worry about who you are. The Yahoo email address issue opened up massive eyes. If you're not familiar, Yahoo decided to recycle email addresses, which means recycling authentication names. And they'll send, if an account's been dormant for six months, they'll reassign it. They may send an email note to that dormant account. But this changed everything. For all of us who were going to say, social identity is a real good bootstrap answer to lots of issues, suddenly we don't know if it's the same person knocking on the door. And I was with the feds when this got announced. The feds had no influence over getting Yahoo to change their policy. It's all about business for Yahoo. And so it is as it is, and we're left with sweeping up over after the fact that norm at gmail.com may in six months be somebody else other than trustee old norm. So it goes. The NSA revelations are changing international marketplaces. I don't need to say much about that, but there's not a single service provider out there be it Amazon web services, Google, et cetera, that isn't scurrying to figure out how they're going to deal with the NSA blowback. Typically they're doing it by setting up centers in other countries, but as you've probably followed the lines between those centers in the other countries and Google's massive data center in many places in the U.S. are also being tapped. So there is no security there. And I don't think U.S. companies can escape this trap. So totally changed everything. Thank you, Ed. So getting into the federated space, we've been doing R&E federations now since about 2003 and they've caught on. So worldwide they're now in most places. I'll leave it to the reader to try to figure out what preserving privacy means in China. I don't have an answer to that, but there is a Chinese federation. We build these privacy managers. I presume they don't get deployed in some locations. So it goes. In Europe, we've got almost 100% coverage there. R&E federations. In some of these countries it's coverage of the entire population. You can't get welfare in Denmark unless you have a federated account. It's a nice efficiency. They're going to put the money, your welfare check, directly into the bank. So about five or six years ago there was a solicitation done by the Danish government on providing federated identity to all the citizens. Some small company won. The next day it was bought by a bank. So it goes. But in fact federated identity has really good traction out there. In common is our own local federation. We've been in business now for about eight or nine years. Got 400 plus universities. Over 600 participants. Growth is continuing very nicely. We've had the traditional areas of collaboration support and access to shared content, etc. Many of you may recall that SHIB was designed one of the key use cases. Two of the three use cases were library focused. Pivotal in what we were doing. There's lots of new services out there and these new services are echoes of what we hope to promulgate into the world at large. I'll come back and talk about that. And we're certified for government business. There is no whole lot of government business out there at this point, however. There's the growth curve for in common. Again, the exponential in the number of service providers. That IDP list is going to have a stair step of about 2000 coming next year when OCLC rolls out software that's going to have SHIB IDP baked into it and then every public library that's running that can also be an identity provider inside in common. This graph will become incredibly meaningless in a year or two as we do interfederation and we won't be able to count things the same way. So I'm using the graph while I can because the technology will undermine it if we're good. So, U.S. government efforts. There are two efforts underway by the U.S. government. The first is FICAM and it's been around for about seven or eight years. It's classic identity services for government. It's growing pretty slowly, but it is growing. It includes a high assurance PIV cards. There may be some federal employees here that have those cards. Thankfully none of us do. There is PKI. There's federated identity. There's gateways. It's a mix of technologies. It provides the LOA certifications that motivate in common assurance programs. Research.gov is accessible through this mechanism and so I submit my NSF grants using my federated identity using this vehicle. NSTIC is the next generation stuff. It's next generation services, privacy, etc. It has distinct government and pilot efforts and the scoping is a finesse. A very tricky finesse. So the federal government can only really control access to federal sites. But they want to affect the entire marketplace including Google. Similarly, the U.S. government is just in the U.S. But they want to affect the entire globe. So there's a couple of finesses going on in this space. Those finesses have intermittent success. Like I said, Google isn't really playing much anymore. Microsoft still shows Yahoo has never been there. I can go through the litany of players out there. They it's tough leading those cats of companies when they don't have a whole lot of business motivation to play. About two years ago the NSTIC effort issued a set of grants. This is the list of grants from the first year, first round. I want to call attention to two, I'll call attention to three grants here. Multifactor, mobile authentication. I'm going to give you this example only because I can't think of a single use of it, which is five factor authentication. So factor one is username and password. Factor two is an SMS message comes back to my phone and I type that pin in. Factor three is my voice recognition. So there's a secure app on the phone, I speak into the phone, it doesn't match and says, whoa, we got three factor authentication. So I put the phone around and I take a picture of myself and it does facial recognition. And now we can say, hey, we got four factor authentication. Do you really need that? And then factor five turns out to be geolocation, which is where is the cell phone right now? Is it an implausible location? I assume there's some very key constituency that needs five factor authentication. So I want to call attention to the starred application up there, the commercial open source ID verification. This one's going to hit you where you live. This is verifying attributes on a per attribute basis. So today if I'm a company selling on the web and I want to know, gee, shipping address, hmm, you know all this information, is it really valid? My only recourse is to go to one of the eqfacts, one of the credit card companies pay about $10 and get a credit report. How about if I could say somebody just filled out a web form and they did a shipping address. I want to know if this shipping address is plausibly attached to this particular user and instead of going to Experian for $10, I'm going to go to that market for verification over there and I'm going to say who's going to bid on who can verify that address. Who's going to bid? Well, U.S. Postal Service will bid. Google is going to bid. Experian noticing that their business model is about to get destroyed is now selling per attribute little tapas as it were versus the whole credit report. Just they recognize their business is about to get loaded. So price points, typical price point about a dollar to verify a postal address. Hey, that's a lot less than that credit report, especially if I'm doing it in the hundreds of thousands. Oh, somebody has it for a dollar and a quarter. Will I get better verification? We don't know. There's no standards on that verification back end piece. It's just price points. So you as a consumer say, hey, I'll pay a dollar and a quarter and get a stronger binding of address to user. Why is this relevant to us? We're part of this pilot. They want us to sell studentness. Is somebody a student? So they can get a discount at Under Armour. They can get software from Microsoft. Lots of places will give software discounts or freebies based upon being a student. There's a lot of precious possible data on studentness. So they would like in common to step up and say, yeah, we'll do a studentness service. In common has a tough issue here. We're not doing anything in this process, right?  So I'm supposed to pass it to you. We'll see how this goes. But we're being asked, now interestingly, these companies can join in common and get all the verification they want for free. My guess is that about a third of the assertions being passed in our landscape today are nothing, but the anonymous person that you're asking about is a student. And so studentness is the best item up there. The two stars is scalable privacy. It's the grant that we were awarded and I'll get to that in a second. They just awarded some new grants and I'm not going to dive into them, but you can see trust frameworks are really important. I'll talk about trust frameworks in a few minutes. But the interesting one in that list is PRIVO. It's a minor's trust mark. It's an interesting company. Needs to decompose their business model. But copper compliance, Child Online Privacy Protection Act is very important stuff. It turns out to be fairly global. In that no other countries have evolved the case law and regulations around this kind of act. So many other countries refer to copper as their benchmark, which is a goodness. Copper is very interesting stuff. It's been a couple of years by the Federal Trade Commission. The latest revision is that if you're under 13 and you want to go to a chat room you have to have the option of releasing a non-personally identifiable name. So I'm working with PRIVO and I'm going, how are we going to do this? Whereas those of us who are middleware geeks go, oh, we're going to release give the users the ability to set their display name and they can release that attribute. If you're under 13 you can't put pictures online that are personally identifiable. It's an interesting set of regulations. I like it because it's fairly demanding. I like it because it's very analogous to what we've been doing in the R&E space, but in a very different quadrant and they have all the same information. So, on to the grant that we have, Scalable Privacy. We picked the prism before the Federal Government began to use prism as a code name for a bad thing. And so, oops. It's a two-plus year grant to Internet 2 and in common. I tap a lot of the expertise from the campuses that come to CNI. There are several focal points that we're working on. I'm going to go through what we did with that in case you're interested. So, what we're trying to deliver, we're beginning with promotion of two-factor authentication. Good privacy begins with good security. Critical. And if you're not doing MFA, my gosh, you need to be doing MFA. And I'll come back in a second for the leverage between MFA and Federated Identity. The Department of Energy requires you to specify your citizenship in order to use supercomputers. How is that verified? It's a self-asserted value that you provide for your citizenship. Self-asserted. I think I'm Cambodian today. Trusted metadata approaches. And I'll come back and talk about that. I think the one issue of interest to this crowd would be the next-generation privacy manager.  We are very parsimonious in what attributes we release from our campuses to relying parties. That causes a lot of problems because we're not releasing sufficient attributes for access control. I'll contrast that with the consumer marketplace where Lord, I have a slide on that. So, we're beginning to do a privacy manager that will put the attribute release in the hands of the end user, and then we're looking at anonymous credentials, and I'll come back and talk about that. MFA. There's just a lot of attack vectors that MFA is the best solution for. A lot of second factor alternatives are now available. USB devices, NFC devices, cell phones, et cetera. And we can manage most of these. And then lastly, coupling federated identity and MFA is extremely powerful. So, I was at a cloud identity summit in July with Amazon. And Amazon proudly announced that Amazon Web Services now has multi-factor authentication. So that you can use two factors to log into Amazon. And I said, that's wonderful. I have hundreds of users on my campuses. They already have second factors. Oh no, no, we're shipping out new tokens to everybody. At which point I went, wait, the users, you know, your users of AWS are generally enterprise centric. They often have second factors. And the second, oh, I know what you're up to, Amazon. You're trying to sell suspenders to hold all of those second factors. And I went over to Amazon's retail site. This was during the presentation.  Several ready-made to hold all of those second factor devices. You don't want that. You want a single second factor and federated identity. And in the underlying party, no, we've had a rigorous two-factor authentication. Oh, a five factor if you want to go that way into the space. It's a wonderful leverage. We need to get to this place. I won't mention that. I won't mention. We're doing two efforts here in this space. We've got about 2 million users now across 40 some odd campuses. Moving the needle, it's important. We're discovering lots of tough issues here. Accessibility support. Accessibility is a major part of our proposal. How do we make accessible second factors? Furper issues. So if I'm going to use Duo and I want my second factor to be my cell phone, I go to Duo and I give them my cell phone. Whoa, is that Furper issues? I don't know. We're worrying about that. Cloud authenticators and DDoS attacks. So courtesy of MIT, we've discovered that on occasion, there were DDoS attacks onto your campus. If you move basic authentication out to the cloud as several campuses are doing, and then you get a DDoS attack, you do not get to the applications out there in the cloud, you can't authenticate anymore for local campus applications. Do you really want to give up that vulnerability?  Alternative strategies when multi-factor tokens aren't available. The students on a dig in Tanzania, the doctors in a shielded room, second factors not working. What do you do? This turns out to be a real problem with MFA. Not a reason not to do MFA by any means, because there's evil out there, but something to compensate for and build policy around. And we've had a set of campuses now develop compensatory policies in this space. And then lastly, returns on investment. We're delivering some important software along the way. I just mentioned this in passing. In case you have a geek back in IT who wants to know when is SHIB going to do MFA well? It does MFA well. When is CAS going to do it? We got it. And then we're doing an open-source client certificate activity. Citizen-centric attribute deliverables. We've built a schema catalog. We've done some annotation of use cases. We've done a cookbook to serve citizens. Any Rod Serling fans out there? Thank you. To serve mankind being one of the legendary shows of all time. We're going to be a little bit more benign, I hope, in this process. We're doing a lot of stuff with GPII. I'll get to that in a second. And we're doing a privacy manager. If you're not familiar with GPII, get to be familiar with GPII. Global, publicly inclusive infrastructure. It's accessibility support done right. Where there's a set of attributes that control the presentation of information to you. And you can do that for any device without configuration. You can do this in ways that are privacy-preserving, saying, I'd like the job postings to recognize that I'm colorblind and be displayed in every fashion. But you don't need to know yet that I'm not ambulatory during the interview process. I want to be able to control that. We can do that. A lot of the stuff is standardized through some ITU schema. I have those listed up there. And we've got some pilot applications going on there. The GPII stuff is not only for those with physical disabilities, but for those with cognitive disabilities which comes back to this community because seemingly content providers are very comfortable providing information in a compensatory fashion for physical disabilities such as colorblindness, Namious Greenreader. If we ask them to reformat content for cognitive disabilities, because frequently one of the impacts of a cognitive disability is I can't do depth-first search. I want to be restructured. Publishers seem to balk at that one and I don't know why, but we're having a tough time convincing them to refactor content. Even as this group that's doing this out of Toronto and out of the University of Wisconsin and a few other places are building tools to automatically refactor the content for different kinds of compensatory aids. But look at this stuff. I believe it's the future of accessibility. So we're going to continue to work in this. So here's the slide. We're running a social disarmament gateway. We're getting to see what social identity sites release to us. And what we're discovering is that it's promiscuous. My God, they release a lot of attributes. I don't need those attributes. I don't want to know those attributes, but they just release them. It's arbitrary. They change what they're going to release on the basis of I don't know what Marisa's mood is that morning kind of thing, but Yahoo will change what attributes they're going to release. And now, as I mentioned with Yahoo, the attributes may not even have any persistent value. That makes it really tricky. Name is a really difficult field. Stay tuned to this. The federal government is about to mandate legal names in order to make their online services work. By the way, if you don't know, one of the 15 problems healthcare.gov had in opening up its doors was that they did a really stupid SAML configuration for the audience field, and so all kinds of commercial SAML software broke.  So the stuff's in deployment and you get the, so the federal government needs to know your name. How's it going to find your name? How's it going to believe that name? But they really want to know your name for online transactions. And so they've come to us and they say, well, how are you going to solve this problem? That's an international set of issues. One of our prime examples is what we call the Spanish surname problem. People of Spanish descent may have into first name, last name boxes. Well, it turns out that that's very country dependent. So how am I going to solve this globally in terms of that packing problem? Interesting stuff. We're going to be doing some usability. Let me get on to the privacy manager. Here's the privacy manager work. It's being done by the Center for Usable Privacy and Security at Carnegie Mellon. Best in the biz. It's going to help users manage the release of attributes. And we have excellent research that shows that over 90% of the users of social sites do not know what attributes are being released or how to control them. When I spoke to the researchers at Carnegie Mellon a couple of months ago and I said, by the way, I need a speaker from, I'm going to be out in Silicon Valley, I need a speaker in usability. Where should I get one? They said, go to Google. And I said, but didn't your research show that 90% of users of Google don't know how to use it? And the answer was, yeah, those people are really good. So Google's business model is to make sure you don't know how to manage your attribute release. No offense to Google, it's their business. So we're going through some key design considerations. Perhaps the hardest part in this issue is informed consent. It's not enough to do consent. And if you look at it like the Google release page for attributes, it's all or nothing. And there's no information about what these fields are or what the values of those fields are. Compare that to this screen, which is what the Carnegie Mellon people have developed. A couple of things to note. Pretty clear on what's being released, the value of what's being released is displayed. So you can say, that's not right and maybe correct it. And it's granular. Controls over each attribute. And perhaps most importantly is that little blue i dot which is tell me more. It's the informed consent button. Where can informed consent go? Well, it can go and reach into the SAML metadata from the Federation and say, this is a research and scholarship application. We've vetted it. It's asking for the minimum set of attributes it needs. We've made sure they dispose of those attributes properly. Go forth, release and prosper. That same i button can go to a reputation system. What are my friends released to this site? It can go to an institutional repository that says, your university recommends that you release these attributes. So that little i button is a door into a whole lot of informed consent in the background. Very different than the experiences you have on Google and Yahoo. This is kind of the information that can pop up in that process about the site that you're visiting. And it has some implications about metadata that we're passing around in the Federation. And I won't go into this for the interest of time. Enough stuff. One thing that we're starting to do here is roll this out to campuses. And so a few of the campuses in this room, I'm talking to you, Orrin. I'm talking to you, the University of Washington and a few other places. We're going to be asking to participate in something about deploying this. Right now we're calling this Lifestyles of the Attribute Rich in Privacy Names. But what we're trying to do is get privacy managers into the hands of end users. We're trying to get some normalization of attributes out there. And we're trying to look at some anonymous credential use and international privacy laws. So for those of you who have international campuses, you're befuddled about, oh, my god, whose attribute release policy applies when the students from Dubai, the websites in the U.S. and the identity provider is the University of Chicago. Yeah. So those international privacy laws are getting very confounding. We're going to step into that swamp. So along the way, one of the things the N-Stick process decided to do was to sell trust marks. It needs a business model. The federal government funding for this runs out in six months. It was a two-year grant. So what are they going to do? They're going to sell trust marks. Do you know what a trust mark is, federal government? Oh, probably not, but we can sell a lot of them. And so out of that experience I built a periodic table of trust elements. The website has the periodic table in it and out of that we built trust marks and those trust marks of importance in the world and we're doing a minus trust mark and a few others. Enough said on that. So where's the puck going? If we're successful, there shouldn't be federation in two years. There should just be inter-federation just as there is the internet. So the steady state here is inter-federated identity and that's why the chart I talked about earlier of growth is going to become vacuous because we're not going to have a crisply defined federation. We should have a large mass of community doing consistent approaches to federated identity. We need to do federation inter-federation across countries. All those countries that I showed on the earlier map of R&E federations want to work together? How are we going to make that happen? We're going to do inter-federation between sectors. K-12 federation is starting to run in this country. Very exciting work. How does that relate to in common? Healthcare, et cetera. Doctors are a thrill, you know that, but a doctor can belong to a hospital and have a hospital identity and then walk across the street to the medical school with a doctor. Now, that's supposed to be tethered to both locations and both models. We need to make that inter-federation work. We're doing the technologies now to make this work. Those are relatively straightforward. For those of you who go back to the early days of the internet, we used to do Etsy hosts for all of the machines on the internet when we could list them all on the internet. Nice work underway, internationally done. Policy issues, well, this is going to be trickier. For example, right now Europe has drafted a policy that says if a user located, let's say in Spain is using a site at the University of Chicago and the University of Chicago spills attributes that the user is given on the floor and the user wants relief. They will be able to sue in Spain. So I hope the University of Chicago has lots of lawyers well-versed on the laws of Spain, Belgium, France, Japan, etc. It's a difficult task and so one of the things we're trying to do is modify this code of conduct. Much as Safe Harbor handles lots of international issues internationally. So the social disarmament gateway again we're doing big business in this space right now if you have a let's say Carnegie Mellon University and you want parents to be able to look at the bills of their student how can they do that? Well you can give the parents accounts, oh my god you don't want to do that.  You could ask the student to loan the parents their account. Neither you nor the student wants to do that or you can say parents use your Google account and come in through the gateway and that's what many universities are doing. Again we're doing this it's very handy for extended populations. It's showing lots of issues. I talked about the course grain research release. I talked about the promiscuous attribute release what's in the name LOA mapping. Lots of hard issues we're working through them. Scholarly identity all in two minutes. So we're doing lots of categorization to get the right attributes to be released by campuses to scholarly sites. There's a wonderful activity called CI logon out of Argon labs that converts regular federated identities into certificates for use in the grids. And then finally we're starting conversations with ORCID about putting the ORCID identifier into edgy person and we had a great core with Jeff builder and Laura earlier this week. Lots of interesting issues came out of it and they don't seem to have made the slide deck which is kind of okay. Last thing is collaboration platforms . It's not about identity. Having just talked about it for 48 minutes it's not about identity. It's about access control. We're building access control federations. That's really the business. I don't want to know your identity unless I have to. But identity is not privacy preserving etc. So we're really into attributes and access control and we're building collaboration platforms that take all of your favorite tools and domesticate them to a consistent open standards approach to access control. We're trying to leverage we will leverage your federated identity but we'll also give you the ability to create attributes. We're going to stick every possible application we can think of into a different regime. And this is being done in many other countries along the way. And what it looks like is a model like this. So you as a federated user just use your federated identity to get to all of those applications in red and hundreds more that are domesticated and maybe you'll get in because of the identity maybe you'll get in because the right attribute was released that said you're a citizen of so and so or you're a student enrolled in a certain course. But all of that stuff will work for the access control and then you might be the czar of the collaboration. So you want to determine which groups can access this instrument or reset this instrument. So then you take that blue line and you come around and use open tools that we developed over the last few years to do group memberships create groups put groups within groups etc. take people out of groups and then all of that group stuff is used to do the access control for all the applications sitting in the red. So take a ways. Moving the needle on MFA really important work. Attributes are the key and it's already a mess. Watching what goes through the social disarmament gateway what Yahoo thinks your name is. Whoa, that's not really your name is it? The same with phone numbers lots of stuff out there. We're researching what it takes to put informed into consent and trying to deploy it. I didn't cover anonymous credentials much but it's interesting stuff. It's a technology that's been out there for a while and it gives us one of the standards that the federal government holds us to which is unobservability. So if I'm dealing with classic federated identity I can protect your identity as an IDP. I can just release attributes I can release opaque identifiers but I know what you're doing. I'm releasing attributes. The only technology that gives me unobservability so that not even the IDP knows is these anonymous credentials. How might they be used in our community? One very interesting idea is that you get an e-diploma which is an anonymous credential. And then if some place wants to know whether or not you graduated Brown they can query the credential they get back a yes no answer or you graduate of Brown and Brown doesn't know who asked. Brown wasn't involved in the transaction. Interesting. That's what we're trying to do. Social identity has its virtues in its perils. Collaboration platforms are the access management part of IAM and they're coming along. And lastly we're moving towards inter federated identity and I can handle questions. Thanks a lot.


It's been a great experience. I mean, this experience is like what I looked for coming into the NBA, like one of my wishes just to be around great players like Hall of Famers and great teammates and stuff like that. So it's been great.


Hey, everybody, Bob Trossett here alongside Coach Kuhn after a 13 to 11 victory over Lynchburg. Coach LaCrosse is obviously a game of runs. I think today is the perfect example of it. What do you take away from today? Well, I can tell you right now that Lynchburg is a formidable opponent. Their record doesn't really indicate how good they are. I think they're a great group, well-coached, scrappy group. For our group, I think we had to really grid it out today, grind it out, and showed some poise down the end. It was a little scattered, certainly throughout the game. Don't think we played our best, but hopefully we can regroup and come back tomorrow with a better effort. Yeah, it just seemed like every time you guys went on a run, they responded. But that also tells you something about your team, too, I'm sure. And what would that be? That we can handle some adversity. I mean, it was a tight game all day. We talked about it coming down here. This is a grind. Two days of LaCrosse against great opponents is a grind. You really have to just be gutsy. They had some key fast breaks and late in the game, and our guys hustled from behind and checked the ball out of their stick. And the effort was there. I said earlier that maybe we need a better effort. That's not the case. I think we just need to play a little more clean. The effort was definitely there for us. When you're top dog, you know that everybody's coming and gunning for you 100%. What do you tell the guys on how to handle that, in terms of logistically, practice-wise, and just mentally, too? We try not to look too much into that. In terms of being the top dog or number one or whatever you want to call it, we just got to focus on ourselves and make sure that we're sharp. We're thinking the game. We're working hard, stuff like that. And hopefully, things will fall into place. But it's the elephant in the room, for sure. I mean, it's certainly there. The guys know that.  And usually, things will work out. But good leadership is very important as well. At times today, we're a little bit jittery. A couple of our guys on the offensive end were not really settling us down well enough. So we need some better leadership. How about the Mustang Classic itself? It's the annual tournament. Obviously, a lot of competition. What do you take away from something like this? It's a lot of fun. Coming down here, I think the guys may have been a little too amped up. Certainly, at the beginning of the game, we talked about coming down and trying to go 2-0 and how difficult that is. And proving to people that we belong at the top. Coming down here, that's tough. I think I'm going to watch a little bit of this next game. Tomorrow's going to be an even tougher game, probably, with Amherst. They are very talented. Well, Coach, thanks for your time. Best of luck the rest of the way. Thank you very much. He's Coach Kuhn. I'm Bob Trossett saying so long from day one, game two of four here at the Mustang Classic.