Hey, it's nice to see everybody My name is Carissa, and I'm from Oakland, California. It's not as sunny as you think And you can find me on Twitter, okay distribute So I'm gonna today. I'm gonna talk about the web of commons So let's play a game if you guys ready to play a game. I know it's 9 30 in the morning But we are like get ready. So two people are accused of a crime Neither of them did it, of course, but just in case they have a pact that they'll never confess But a cop comes in and separates them With the goal to try and get a confession out of them So you can actually map this game into outcomes if one of them defects and confesses They will get out of jail free and the other will serve 20 years if they both defect and Oops, we both tried to get over on each other they get five years And if they both stay silent they get one year So the ideal scenario that Optimizes for the lowest amount of jail time is for both of them to keep their pact right to have cooperation with each other However, because defection results in a better payoff. It's actually more likely to happen than cooperating It's a dominant strategy. So the dilemma the prisoner's dilemma then is that mutual cooperation is better But less likely to happen So this is an economic theory that is applied to a lot of environmental Phenomenon for example climate change or overfishing right so people take More than they give and they don't cooperate. So the common pool recess we resource depletes over time The proposed solution which has been the proposed solution since probably the 18th century is called enclosure literally creating fences around the land and Giving property ownership to certain people and they it was thought that this was the only way to protect places It was thought that only that isolated autonomous of individuals will always choose the path that's best for themselves To get out of jail quickly So in 1968 Garrett Harden who is the famous person who came up with this tragedy of the commons Said freedom in the commons brings ruin to all and this was the prevailing theory for a long time until 2009 When Eleanor Ostrom was the first woman to win a Nobel Prize in economics She For over 40 years. She studied this concept and proved that Harden Exaggerated the problems involved in managing a commons. She asked the question. What if we aren't isolated autonomous individuals? What if we have the ability to mutually cooperate? She came up with rules and norms that people use to sustain their mutual cooperation over time And she did this by studying real people in real places. So for example, this is her in Nepal in 1993 Where she studied irrigation management systems and she did this all over the place She did this in Guatemala Turkey Kenya she even went to Los Angeles in Chicago and looked at policing as a commons and saw how cops might be able to Mutually cooperate. So Instead of thinking about people as rational actors We're actually thinking of people as irrational managers together So what does that have to do with the internet? In 2011 she published a book with Charlotte Hess called understanding knowledge as a commons So what is knowledge right so in the digital world? We're talking about libraries online classes open source wikis. We have this The digital artifacts that we see online can be managed as a commons They are all used by and benefit a wide community largely for free and it costs close to nothing to share remix and copy their contents However, they can be polluted for example by actors that aren't doing right by the community So looking at knowledge as a commons as a shared resource if we're looking at it as what it actually is It allows us to really understand its possibilities and also what threatens it So what threatens digital knowledge today? So if we think about managing these commons as a blueprint There's like a blueprint for managing them and the resources knowledge We're actually more likely to see many communities Managing themselves rather than one monolithic community that manages the whole web or something like that. So Today what I'm going to talk about is our work on These particular areas public data scientific articles Scientific data and libraries and how we can apply commons theory to these kinds of things Along with decentralized technology So I work with Code for science and society. I co-founded this nonprofit We're funded by the Knight and the Sloan Foundation. I Founded it with this guy Max Ogden and This guy Matias Boos And We help we make tools that help scientists share data. That's our primary concern, although Your developers and you might find the tools underneath to be very interesting for things that you're doing So most recently we've been talking about scientific scientific data as a commons and it's a really good use case for commons So let me give an example of what's actually happening today Who's familiar at Elsevier and J store you guys familiar okay, not super many of you These are journals and Sort of publishing companies There's a lot of them, but basically they take public information information that was public Either funded by the public or otherwise generated by researchers and lamps and they literally build walled gardens around them There's paywalls They literally build fences. It's like what we were talking about earlier with enclosure They're literally doing the same thing. They're building a fence around the digital knowledge that you have to pay money to get access to This means that certain people with power can profit from it and it reduces everyone's ability to use it And it prevents innovation and it prevents the spread of knowledge. So this is a bad thing. We don't like this In the web of commons in a different kind of world You might see that users are in control and would be trusted to self-govern and manage this data together rather than giving it all to one company and So I want to return to Eleanor Ostrom and see how we can use the eight principles of common pool resource management that she Created this sort of algorithm for creating commons and how we can apply that to scientific articles and data So one of the first rules is you need to define clear community and resource boundaries So in this case the community is researchers librarians universities and labs and the resource that we're looking at is scientific data and code We're really focusing here on data because it's Really large and really difficult to store and nobody really wants to touch it It's a really expensive thing to manage. So we've been really tasked with this in particular And you want to match the usage rules to local needs and conditions? So that means we've been working with real users. So we've been working with the University of California Berkeley along with other places To try and make sure that this is all working together So one of the biggest problems they have is they have a server and This everybody comes to the server to try and get the data And if you only have one server for hundreds of terabytes of data bad things happen, right? So what we're trying to do is get away from these centralized and enclosed services We don't want to recreate the problem that is existing now. We want to have something that's decentralized. So We want to have something That doesn't have this 404 problem I don't know if you're going to understand the 404 problem But basically most of scientific research has a problem where it cannot Link back to the data that it was using And a lot of this is because of HTTP Literally if the server changes or you lose access to your Google Drive or something Then the links all entirely break if a grad student moves on or something like that So we're really interested in using a decentralized service that has content address ability where the link doesn't change over time But wait a second. Don't they have a good reason for enclosure like don't don't wait Don't we want to like have good control over copyright like why are we trying to? Decentralize and give away everything away for free So copyright in this case at least it means that the public pays twice So the public is funding the research and then they have to pay again to get access to it It doesn't really make sense, especially if we're able to reduce the cost of distribution to zero, which I'm going to try and do Another rationale given is that it's really expensive. So It's really expensive to host all this data and give it away, which is really true I mean, it is expensive to manage and maintain Databases and these kinds of things But we try to reduce that cost as low as possible by using a distributed network Kind of similar to BitTorrent So as more people come and download the articles and data and the more people that have it the faster and cheaper it gets rather than the more expensive and slower So the great thing about BitTorrent and compared to centralized services is that it's distributed like I just said It's also massively adopted and simple so you can build a client on top of BitTorrent They're future proof links. So if I link to something in BitTorrent, it's probably never the link will never change Even if it changes servers, the problem is is it scales really poorly Files cannot be updated and it's not really secure. So I can look and see everything that you're downloading all the time Psyhub has been and other kinds of places have been using tools like BitTorrent and there's been a lot of Debate about whether this is ethical or not to use a peer-to-peer or other kind of technology to get around copyright But the dream is and this is the dream that we're trying to do in practice And legally with the cooperation of universities We're working with the University of California And we want to turn their previously siloed servers I mean right now every university has a big server farm that isn't used like it's like 50% used or like maybe even like You know, there's only like 10 gigabytes on there 400 terabyte drives. So There's a lot of unused space So what happened if we connect these Siloed servers and we build them into a distributed network a Commons where they share their resources and you look at storage and bandwidth as a resource that should be shared and Mutually cooperated as a Commons rather than a competitive Commodity like it is today So going back to Ostrom we want to make sure that those affected by the rules can participate in modifying the rules So digital libraries will handle the power structures here. So we're working with the California digital library We want to make sure that rulemaking rights of community members are respected by outside authorities So in this case outside authorities are governments and corporations. We want to make sure that the universities are autonomous and are able to Manage their own data without interference one of the things that happened in Turkey recently is that there's been people who Haven't been able to say what they want to say in universities and they get Censored or even kicked out of their jobs for criticizing the government and it's even happening in the United States And other places around the world So we want to make sure that governments and corporations don't really have an ability to affect science science should be separate from these So what we want to do is the main rule that we're trying to optimize for when we're talking about Rulemaking rights is how do we have rules that keep the data online? So one of the biggest problems with BitTorrent, I know none of you have used BitTorrent before of course, but One of the biggest problems with BitTorrent is when there aren't any peers online, right? You see this awesome thing that you want to download and It's not there and this is Something that we really need to prevent from happening in this case because If there aren't any stable interested peers in the case of scientific data It's equivalent to a forest fire. It's completely disastrous and it's not it's not something we want So we want to develop a system carried about by community members for monitoring for monitoring members behavior So what do I mean by behavior? What are we monitoring members behavior? like we want to see who is doing their part to back up data and if One of the universities or some other partner who's downloading data Can't keep that data online then we need to be able to monitor that over time For example, we can detect how many copies are available in different places just like BitTorrent and compute the health of it For example, if we have data hosted at the Internet Archive The University of Pennsylvania and UC Berkeley. It's probably really healthy and has a low probability of ever going offline These are groups would also be considered members of a community that governs it And this is a lot more safe than say having like a hundred laptops, right? So you by able to like by being able to see who's hosting the data through IP addresses and that sort of thing You can make sure that the data is going to stay off online And We want to use graduated graduated sanctions for this so we might have like a score for how healthy the data is So for example, if one of them continuously keeps going offline We might start marking this university as less stable for example or something like that And we also want to provide means for dispute resolution. I don't really talk about that We build responsibility of governing the commons resource in a nested tiers from lowest level up to the Entire connected system. So that means we involve everyone so something that we've been building for this case is that by involving everyone we mean that anyone should have the permission to download the data and Reupload it so in this case users own the data It's very secure So unlike bit torrent people can't just sniff your network and see what you're reading Files can also be updated over time. So I'm going to talk about that in a little bit How do we keep contra content address ability but also update the files? Files can be updated, which is really important in science because often there are Retractions or problems and you have to go back and like edit some part of it So we keep it up to date and you can also see back in time like when the scientific article was Use what kind of data they used So it's really simple you just take a man line tool and we also have a desktop app You just type that share and the path to your data and it creates a link This is actually a public key that References your data on the network and you can give this public key to someone else and They just clone it and then they get access to the data They're connected to other people in the network through DHT, which is we're actually using the BitTorrent the same one that BitTorrent uses DNS we also have a DNS server that can connect people or you can connect to people over LAN And it just connects the computers together and figures that out. It's using a Special kind of key though, so we're not using to keep things secure. We're not using this key We're actually computing something called the discovery key, which is the hash of this key So only peers at the original link can compute this discovery key and find each other on the network So this means that universities can even share private data between them or people can share private data between you and Data that isn't yet available to the public won't be visible So it means that people sniffing in the network don't know what you're sharing and downloading unlike BitTorrent So this link never changes even as files are updated and You can verify the hash of the file system at specific versions and go back in time This is really good for what I was talking about before which is one in five articles suffers from reference rot Which is in insane right like out of one of five articles in science that are supposed to last forever You can't get the original data that they were looking at or link that they were linking to So how are we doing this? I'm gonna start getting a little technical So prepare yourself We're using append only logs It's a list that Only ever gets appended to So you append items to the list and so why are we using append only logs? It's in a simple data structure. It's immutable There's some sort of logical ordering to it And it's really easy to digest an index if you go on to our github and start looking poking around at the code You'll notice it's pretty easy to get started building your own application How can we share append only logs though? Over a peer-to-peer network where we don't necessarily trust people so people with laptops could be downloading this data and Like re-hosting it on the network. We have to make sure that This data is secure and that people aren't tampering with it So we use Merkel trees It's just a tree that verifies data and it's unrelated to Angela Merkel. Just Just to make sure it's clear So when you add data to dat you get this hash And it starts computing a tree where each root hash can verify all the hashes underneath of it and then the data below So as these trees get built up, it's really nice as you can verify all the data So if Alice wants to share a certain piece of data with Bob We wanted to make sure that this was really easy to do if I have a 300 terabyte Scientific data journal thing. I don't want to have to share 300 terabytes with you Right. I might just want to share one little piece. Maybe you want to file or a half a file And this is a really important part of this So Alice only to do this Alice only needs to share these intermediate hashes Not all the data and not all the hashes and Bob can recreate the tree from those hashes and Verify that she has the right root hash. So this is only this is only log in time. She's pretty nice But how do we do this in real time? So that can update data over time and maintains history. This is for static data what I just showed you When we start changing data Every time we append data the root hash Changes so in bit torrent Every time you append data or change the data you have to create a whole entirely new torrent network, right? We don't really want to do that. So what we're trying to do is maintain the peers that we've always had So crypto to the rescue We generate a key pair So as long as Bob trusts the public key, which is the link but we can as people add data to the Structure they sign it with their secret key Which verifies that the data has been added by the right person So as they're checking the root hash signatures, they just have to use the public key that they were given to verify those signatures Right now dad is only one writer, but there's a new Library called hyper DB, which I'll show you a link to and I'll tweet it later That has multiple writers and it's pretty experimental But you can start today with one writer So how do we turn append only logs into a file sharing tool because that's what we're really talking about Scientific data is files websites are just files. Most of what we do is just files So if we take a file and we cut it into pieces, we just insert each piece into the log It's pretty simple, right? The thing that's tricky about it is where do you slice so different kinds of binary files? Might want different kinds or might need different kinds of slices We also insert the file name and file metadata in another log So you can just grab the entire metadata of the data set and Without even grabbing any of the content This is unlike git like git forces you to download all the metadata and all the data at once because it stores the data in the Tree and we separate these so it makes it a lot more efficient and malleable you can read more about our paper Online my debt project org just take a look One of the coolest use cases that we've done recently is work with data work with the California digital library To back up data from data gov So when all the data is deleted from the US government website, we will still have a copy available on that So don't worry So when we downloaded this data we saw that most of that data is actually It's actually HTML. So if you look at the top, right? Most of this is like ordered by frequency most of the data is HTML It's not it's not like CSV files or zip files So most of the data is actually just links to web pages that also linked to the data so We need a lot of help, right? There's a lot of Data on the web that might go offline tomorrow And we need to make sure that that data is available forever, right? so we've been starting to download this data and Put it on our website. We have a registry where people can upload data Publish data under their name like github And so we have a California campaign finance data We have the backup of open data released before it was deleted this year By President Trump and then the names registry which is You know, it's a lot of cool data that we're trying to keep alive Someone built and this is his name is Richard Smith Una He built a distributed science journal called science fair with that so My use case around commons in science can also be applied to a lot of different applications So this is just one application that was built with that where you can search for a particular article and Go and get that article from the decentralized web. So wouldn't it be really cool if people had a decentralized peer-to-peer application where they could publish Their data and publish their articles scientific articles Without permission and anyone could get can get those articles You really actually have a host list journal, which is really cheap to maintain This is kind of the dream of of this app There's also another app built on that called beaker, which is a distributed web browser. It was built by paul frezzi and they Basically, it's just a fork of chromium where you can go to dat colon slash slash your link and then you can get The website that's hosted there. You can even have a DNS record That points to the dat URL so people that go to the the host list website on their chrome or firefox Can still see the website But then you can if they go to it in beaker and use dat colon use HTTP host list website It'll use the peer-to-peer version So there's lots of other community built Things here so we have ingestdb, which is a peer-to-peer database So you can actually use sequel commands on top of a database and that's peer-to-peer Beaker browser talked about that fair analytics is like a peer-to-peer analytics server. That's like Google like a replacement for Google analytics or one of these centralized services. So Check out fair analytics. It's actually really cool and really modular This is osm P2P DB, which is an open-street map editor That's peer-to-peer as people edit different people edit the the map You can see the history of the map and get it over peer-to-peer network There's also dat pki, which is a public key infrastructure for dat. That's how you can Create friends and contacts over dat and publish a list of dats and stuff like that so you can take a look at what we've built on our github and Hyperdrive and hyper DB are the two underlying JavaScript modules that really manage a lot of The more complicated stuff the merkle dags and stuff that we're talking about here And if you wanted to play around with that and node, please go ahead and build your own app So let's take a step back because I'm gonna wrap up here in a minute, but maybe One of you is asking right now So why aren't you using like blockchain or like aetherium or like doing some ICO and like, you know Why aren't you being all with all the cool kids? So I have to take you back to the beginning of the web And what really inspires me and inspires us on our team Some of the most fundamental people this is on the left. This is Tim Berners-Lee He invented www and then on the right this guy's meant surf and he invented TCP IP They came from research labs And look, that's me. I'm at the decentralized web conference. The Internet Archive was pretty fun They gave away their protocols for free to the public Simply as products of scientific inquiry there was no like profit motive Their only judge was science not profit So with a commons approach to the decentralized web the most ideal approach is guided from where we came I'm excited about creating protocols that are easy to use and develop with and extend without asking for permission I Don't want to have to pay money if I don't have to And I believe that some of the best tools aren't created for the market at all They're funded by donation built for the public good and given away for free So these protocols that I want to build should be I want to optimize for science and Collaboration rather than optimizing for profit So today we look at the decentralized landscape. This is the decentralized web conference last year So look at the decentralized landscape in the context of what people were doing back in the day and wonder if we're continuing their legacy 1.6 billion dollars 1.6 billion were invested in ICO's initial coin offerings in 2016 alone So this is like a huge growing Way to raise money and to to build applications. I mean Almost all of the money is going there, right? So why aren't we doing one of these? Why aren't we doing an ICO? If you really look at what they propose Many only offer siloed internets that are privatized with money being invested into coins That may or may not even ever be available in production So you're putting a lot of money into faith into, you know, a small team that has a lot of control over Over the coin and how it operates Web of commons is not blockchain We're not blockchains in bitcoins assume that I don't trust anyone in the network and This is pretty much the opposite of what we're assuming with the web of commons Everyone in the network is trusted and those who aren't following the rules are kicked out What we're trying to do with that is build tools for the common good That can also be used for other fun things and Use sound technology So decentralization I believe is not just a technological problem. It is also a human one. We have a lot of work to do So if you want to donate we're Donate that that project org we're a 501c3 so you can get a tax deductible Donation if you want and Don't forget to check out our stuff online and build something with that So thank you Find me on Twitter I'll be tweeting those links. I found that really interesting. Thank you I also thought the live captioning on there was absolutely amazing. This is going to New York and back I'm being live captioned by a person there in real time, which is pretty mind-blowing There were a few questions. I think you answered one of them just Which was is that similar to IPFS? Which is the interplanetary file system, but I think you just answered that one Don't know if you have anything else you want to add on that That is similar to IPFS in its construction and kind of but it's different in its goals, I guess. Yeah, yeah A question by Isaac, which was I share your dreams But what if I want to be published and say one of Elsevier's journals Where they make you grant all the rights to them. What happens then? Sorry, so if you get published by Elsevier, they make you grant all of the rights to them Could they still use could you still use this? How does that limit it so? Scientific researchers already have this little loophole when they give away their copyright, which is that they can Publish their pre-print, which is a slightly modified version of the one that they do in copyright And they can publish that pre-print on like a university server or on their public website So they could probably use their pre-print, which probably only has like one word that's different Right. Okay. Yeah, and that counts Glen asked How do you protect copyright files? How do you make sure someone doesn't upload a game of thrown episode to this? I mean, you can use that for anything. I mean, that's that's kind of the great thing about it Yeah But it the way we've built it is optimized for data sharing And we don't condone or support any illegal activities. Nice and Someone else James asked the public keys for trust relationships need to be shared over some other medium Do you have a preferred way of that happening? Sharing links over preferred medium. Yeah Right now we have a website that you can go to and log in and publish links with short links short names So you can say have an account like in GitHub and then create a short link for your data set And people can also go and view that so we go to dat project org you can log in and publish a data set But you can also create a DNS record for it like I was saying before so it's just an HTTP Website that has a dat compatible Link to it inside there. So either one I think is a good way Okay, but I mean if you wanted to keep things really private and share data You could also share the link over something like signal or some encrypted channel Which would mean that the link in the data that you share is entirely private. Okay, great. I think that's it. Thank you very much Thanks


I'm here at the 2017 NCHA Ferturity and I have Jim Ware, owner of Triangle Horse Sales and just a wealth of knowledge in all things horses. Jim, what did you think of tonight? It's exciting and you know so coincidental, so much is going on here that's never ever happened before. Let me tell you, my involvement in this is that Don Ham and I, we agent a lot of big horse deals and have for a long, long time. And so this horse was available back in May and I came in one day and watched Austin work him and Don had told me what a great horse he was and he had a customer and a personal friend that wanted a Ferturity prospect and so you know I thought well this is a no-brainer after watching this coat. He was just special, really special and so Austin put so much faith in this horse and Austin and I are some combination of Don and Austin and I, you know we sold and kind of brought you a highbrow CD and bet he's a cat, a Bama cat and so our relationship with Austin runs deep. And so this horse is something that you know we're all really proud of for that reason but the thing that's so unusual and so different about this horse is that Billy Wolfe, the owner of this horse, has never owned a cutting horse in his life and last night, Saturday night prior to the semifinals or after, truly after Austin worked in the semifinals last night, that's the first time that he had ever seen this horse before. He never even seen him before. Jilly Shepard walked him in here last night and he had never met Austin before, talked to him on the phone but had never met him. So it's like a success story that you know I've been keeping up with this a long, long time. You haven't come across one like this? I don't know that I've ever known of a story quite like this before where the owner of the horse just met the horse and strainer the night before and comes back and wins the NCAA fraternity so it's a big deal. And it's a cool story of faith and you know your friends have got a lot of knowledge in the industry. Oh it is, it is, he did put a lot of faith, particularly into Don. I want to give Don most of the credit here and of course Austin, it's a no-brainer to give him the credit and I mean yeah, I can't say enough about Austin. He's, you know, he's extraordinary. The Derby, the Worlds and the Ferturity all in one year and the second Ferturity in ten years. Yeah, it's unbelievable and to work with him, the way we work with him almost on a weekly basis, talk to him back and forth. We keep colts and training and other things and you know I can't, as there's no way I can compliment him, his family, all his whole program, his help, everybody. It's unbelievable. He's Austin as far as I'm concerned and everybody else. I mean it's just that way with me so, and I've known him since he was a child and I just, I can't say enough good about him. Okay, then you better give us a hint what's going to be the next sire on the scene. Ha ha, Hottish, Dusty. Dusty Adams. Hi Dusty, how are you? How are you? Good. Tell us about Hottish. Hottish is a part of our family, nine-year-old stud that we buy as a yearling and this is a very special horse. Had a few in there tonight. Had two in there tonight, we're very grateful. Our jockies did a great job and represented their colts and our stallion very well. And what's going to stand out about Hottish, do you think? Just I think the look of the colts, you know, just confirmationally and the style that they work at Cal, they have a lot of extra stuff to them, a lot of big moves, a lot like their daddy and I think they're all unique and I think that's how he was. Let me say this about it. It's truly unique for a first year sire to sire the NCHA Open for Trinity Champion and he had finalists in all the other divisions and had another really good gilding with Jody Gallion in the top five and so Hottish is on his way to becoming a big, big, big-time sire.  And I think too that since Hottish apart, so is his dam, he's out of stylish play, Lena, she's one of the greatest mayors ever, one of the greatest producers ever and that's just, that blood's strong and so it proved it here tonight. This young man's in the driver's seat for a long time with his stag and I can... Well, it'll be fun to watch. Yes ma'am. It's been a great ride. Hottish has taken us to places we never thought we would go. You heard it here folks. Good tip there. Thank you. Thanks guys.


Hello. My name is Julian Richards. I'm Director of the UK's Archaeology Data Service, the National Repository for Digital Data Generated in the course of Archaeological Fieldwork and Research in the UK. I'd like to provide our perspective on the principles of the manifesto, manifesto, and especially the recommendation for regional archive hubs. We have a particular interest in principle 3.5, improving information management, although of course this links with all the other principles. Firstly, some brief background about the ADS. We were established in 1996. We're based at the University of York. They're a national organisation. We currently have around 20 staff. We are a core trust seal accredited digital repository, and we hold some 35 terabytes of data, and this comprises 1.4 million records for the archaeology of the UK, including over 2,500 rich digital data archives, and now over 75,000 unpublished fieldwork reports at the former Grey Literature. The key development for digital archiving in archaeology in recent years is the creation by CIFA with historical and support of the Dig Digital recommendations. These emphasise the importance of the fair principles that data should be findable, accessible, interoperable and reusable. The guidelines describe the steps to creating a fair digital archive and stress the importance of depositing data with a trusted digital repository, in other words one which holds the core trust seal. I'd suggest that with the implementation enforcement of the guidelines, UK archaeology is on the way to solving the digital archive crisis. Now regional archive hubs are clearly the appropriate response to the physical archive crisis, but the aim of my comment is to emphasise that they are not appropriate for digital archiving, where critical mass of expertise that can only be sustainable at their national level is essential, and joined up access to data can also only be done nationally. The manifesto rightly states that comparative research is facilitated by consistency of approach to managing the data generated from fieldwork and held in legacy records, from geospatial referencing of interventions to the ordering and curation of the archive. Its sustainability depends on technical resilience, how the data are held and managed, and the resilience of the organisation responsible. Now this is even more true of digital archives where data standards and common vocabularies are essential to synthetic research. Nothing highlights the problems of achieving this more than soodling. Currently, German is largest infrastructure project comprising some 720 kilometres of new energy cables running north south across multiple German states. A great archaeological opportunity, but unfortunately each state has its own archival standards, leading to a fragmented archive, difficulty of finding information from along the route, and great difficulty for synthetic research. In contrast, positive contrast, ADS is working with High Speed 2 to create a single integrated digital archive along the full route by High Speed 2, crossing multiple counties and regions, and adopting a consistent approach to data standards and data archiving. The objectives for the digital archive to preserve the data into the long term obviously so that it remains accessible for use, but also to ensure that appropriate selection criteria are used consistently along the route, making and ensuring that the data is findable, accessible, interoperable and reusable, to ensuring that all digital data accompanied by consistent and high quality metadata, and then to effectively link all relevant and appropriate historic environmental digital data to the appropriate physical archive repository. And overall we believe this will provide a valuable digital resource that enables onward innovation and creativity for research, learning and engagement. Just to give you a bit more detail, so each individual site and intervention along the route will have its own individual data collection, but these will be cross-searchable along the route by various criteria. By what we call curated collections, they can also be explored by period or by theme. They can also be grouped together according to various criteria, here an example with archives selected for teaching, either at Key Stage 1, 2, or indeed at higher education level. I would argue more generally that the digital provides the blue that can join the physical. It can provide the pointers from the digital index data, the metadata, linking the textual reports and the underpinning digital data and catalogs, and linking these to the physical archive, in turn making them more visible and accessible. This is already achievable more widely via the latest version of OASIS, and here we highlight the same reporting archaeological investigations and linking research outputs and archives. And indeed OASIS now has an archives module to allow field workers to document the physical archive, specify what it contains, and for museums to also access OASIS, adding accession numbers and tracking the process of deposition. The new OASIS dashboard allows organisations and heritage managers to track the quantity and nature of fieldwork, the activity types, the reason for the investigations, and to monitor the deposition of archives, both physical and digital. In short, in England, the digital infrastructure is ready to support the development of regional archive hubs, providing the digital glue to facilitate a joined up approach and making a positive future for English archaeology. Thank you very much.


Hello, Sunday DEF CON attendees. Thank you for coming out this afternoon, and James and I are going to be talking about your mind, about are your thoughts really protected. There's new technology we're going to be talking about that's going to put into question some Fourth Amendment search and seizure procedures. Can everyone hear me or I'm going to speak louder? All right.  You'll like it. Please note, neither of us are speaking for our employers. We promise we won't break the world, but don't blame them. My name is Tiffany Rad. I'm a college professor and adjunct professor at the University of Southern Maine. I teach in the computer science department and soon I'll be also teaching cybercrimes classes at the law school. I teach technology and law classes because I think it's important that the lawyers talk with people in tech and tech talk with the lawyers because that's how better policy is going to be made. I'm also the founder of Hack Me, Maine's only hacker space, which is still virtual at the moment, but we're working on it. Hi. I'm James Arlen, better known as Mercurial and I promise I won't use the game show voice today. I'm a part-time security consultant. I'm a part-time CISO. I'm a part-time stringer for Liquid Matrix. I'm a full-time awesome dude. I need you to understand that I am just the security guy here, not the lawyer. Also, I happened to found a hacker space. Hacker space people kind of glom up together. We need you to understand for a minute, for purposes of this talk, data and documents are sometimes, but not always used interchangeably. In some cases, they each have different legal meanings but not always. For the purposes of this talk, data is the lowest level of abstraction. It looks like ones and zeros. Document is a bounded representation, a tokenization of a physical document held in data form. The other thing we need you to understand is that there's more than one kind of legal person. There's the kind of legal persons that are made of meat and there are the kinds of legal persons that are made of documents, people and corporate persons. They each have rights. In some cases, they're similar. It's really hard to put a corporation in jail, so generally the agents of the corporation will do that. Agents can speak on behalf of a corporation that has no voice of its own. We're talking about data and documents either in transit or as they have stopped where they are going and are stored on a server. So storage communications, we're talking about the ECPA for that one and within transit, they have different warrant requirements for accessing data, if it's stopped or if it's still moving. The Fourth Amendment is, I think one of my favorites of the Constitution because it's search and seizure. I know next door they're talking about search and seizure for laptops. We're talking also about that subject, not exclusively at laptops coming through customs or crossing borders. But we're talking about when Fourth Amendment rights should be challenged and changes in legislation that are going to I believe need to take place as technology is changing. I'm not suggesting we change the Fourth Amendment, but there should be some legislation. We'll discuss later in the presentation that with some new cameras, we're going to be discussing their fast cameras that the Homeland Security Department's putting out in the next couple of years. You need to understand that the sanctity of your person is not absolute. The Fourth Amendment has exceptions. A few of them are the Transportation Security Administration, which writes a blanket exception for what it pleases. There are also Terry stops, warrants and third party permission to search. We're talking about Fourth Amendment rights. There where your stuff is, it changes the way the Fourth Amendment acts. The Fourth Amendment doesn't protect your stuff, it protects you, the person. So when we talk about plain sight, for instance, that's if you have a computer or for instance a weapon lying in the backseat of your car. If you're pulled over for a traffic light violation, a light out and the officer happens to see that laying in your backseat, that's in plain sight, that is something that you can't say that that is private. Things are a little bit different if you have things locked in your glove compartment, it requires a little bit more of a belief that there could be some contraband or some illegal activities going on that relate to those storage facilities in the car. When we talk about computers, we'll be talking a little bit more about where the data is, different types of devices and how that applies. All right, we're talking about, I gave a presentation yesterday about car computers and of all these things, this is something that I find interesting is that when you purchase a car and for that matter when you purchase a computer, you don't own that completely outright. You license it. See, we all work with computers. We know we have licenses with software, but do you know that the software in your car is also something that you license? You don't have a right to open it up to take it out, change it, the way that it's protected presently with the way the car and computers and software set up. You don't have a right to do that. That belongs to the car manufacturer who may have licensed that from a third party who wrote the software. But there are devices on cars that are post 1999 that store what they call near events such as if an airbag deploys, the computer knows that. But it doesn't just know that, it knows how fast you're going with that airbag deployed and it also knows how hard you break or perhaps more telling if you did not break at all. A warrant is required for police officers if they want to get that information to walk up with a small PDA and they download that from your car's computer. You yourself are not permitted under the, actually it's copyright law.  But this is, when we're talking about medical devices like implantable blood glucose, insulin pumps, heart monitors, I mean these types of things also require a warrant to remove information that is stored about your biometrics, your body. That is personal information. You do have a reasonable right to privacy for those devices. But as some of the devices do transmit data, some of the, especially some of the companies I've looked at with medical devices, sometimes that connection's secure, sometimes it is not. So we need to think about privacy and also security for those connections because it is personally identifying information. The fifth amendment is you can't be forced to incriminate yourself. I was working on a case recently about, let's just say there was someone who wrote an interesting piece of software that that software proved that an IP or MAC address may not be exactly who it looks like it could be. That is going to possibly affect a cybercrime's case that's ongoing in Maine right now. And what can't be done is that if you're on the stand and if you're not, if you're just, for instance, in this case it's someone who would have information that could affect the case. You cannot be forced to incriminate yourself. Unless there's a few exceptions like if you have a grand jury, if you're in front of a grand jury, it's a thing that's a little bit different with that. But we're just talking generally for cases you, your thoughts and your ideas as it relates to this talk are private short of something like grand jury or court order. So we need to think about the different ways the law treats data. For now, as we walk you through a series of interesting ideas, I need you to keep in mind that we're talking about data that is stored. It is not moving, it's staying still. That really, really matters. It's a very, very big distinction in law. So in the first case, it's 2009, I'm feeling kind of cloud-tastic. I'm going to store some documents in Google Docs. All right, I'm the prosecutor in this case. Jamie, I'm Marcus Sacks. Do you think that you're going to prevent me from finding that data that you're hiding in the cloud? It's in the cloud. If you are technically trying to hide that information, I will find that. But I have appropriate warrants that I can get to get that information out of the cloud. It may be more difficult, and especially if the pieces of information are stored over countries' borders. As if the U.S. has shares information, such as like I don't think Afghanistan or Iraq would be very friendly with some of our requests. But that is information that we can find. So if you think you are hiding your stuff from me, I will find that. Do you mean the cloud failed me? Yeah. Are you going to tell that to Chris Hoff? I'm scared of Chris Hoff. Okay, fine. It's not a document stored in Google Docs. It's data, and I've backed it up with Amazon S3 because that'll keep it safe. So you think the difference between data and document means that I'm not going to be able to piece together that information that you've split into ones and zeros. Technically, I'm going to find that stuff. I don't trust the cloud. I'm going to put the data on a rented server that I'm keeping on an ISP in the United States of America. So just because you're moving that data outside of your house, do you actually think it's going to be more difficult for me to go to that place where you've rented space and you have your server for me to get access to it properly with a warrant? Actually, they might turn it over more quickly than you would if it was in your house. You're not helping. I'm going to own the server because then they have no rights over it. It's mine. That doesn't change my answer. I'm going to put it back in my house.  You may not turn them over as quickly as a third party would, but I'm still going to get those servers, Jamie. I'm going to carry it around with me everywhere I go and I'm going to hug it and pet it and keep it safe. So you're putting it on your body. Let's say if you have it in your pocket, you have a cell phone and I want to get that. If I have a reasonable expectation or a reasonable belief that I need to stop you, stop and frisk, if there is something in your pocket that I think might be worthy of investigation relating to the reason why I stopped you, I'm still going to ask you for that. I'm getting an uncomfortable feeling. I'm going to keep it on a phone because telecommunications devices are different from computers under US law. Telecommunication devices, that smartphone you have is a computer. If it's stored there, it's the same warrant. I'm just going to keep it on a microSD card. I'm going to keep it really close and safe. Then I'm not going to have fun going looking for that one. I'm going to use encryption. That's a great one right there. I'm going to use ROT 13 because it always works. I think that might only work if you claim that's your anti-circumvention measure under the Digital Millennium Copyright Act. Then if that is broken, then it triggers DMCA and that's the weak security that you're talking about. You think that the DMCA is going to create better security for your products or can it protect you from me, the Fed? Yes. I might have a little bit more challenge having you turn over the key. But recent cases in Vermont, for instance, the Chow porn case, it took a while to litigate this case but a defendant was required actually by the court to turn over his key. However, there are other cases where they've requested and required the key such as with the World Trade Center bombs accused of bombing the World Trade Center during the first attack when they bombed the parking garage. He never turned over the key and they're still trying to break the encryption on that laptop. As far as I know from people working on that, it hasn't been broken yet. OK, I'll use real encryption this time because apparently the DMCA isn't going to help me out. Well, recent cases suggest that I'm still going to be able to get you to turn over that key. I am Bruce Schneier. You know what? I'm sorry, Jamie, but you are not Bruce Schneier. Bruce Schneier gets a get out of jail free card because he does security research. I do security research. I present it at Blackhound and DovCon. You try some of the research he's done through TSA. I'm sorry, but that's not going to work for you. Fine. I'm going to keep my data moving. I am going to spin it around the world in a never ending circle of data goodness. It will be a halo over our heads. What some people have done. And it is, it can be legal if it's done properly, but you can do what's called a jurisdiction hopping. As long as you're not trying to obstruct justice, if you do want to store different parts of your data in different countries, once was Havenco, but now that's unfortunately folded. If you want to put in offshore platforms, it is going to be more difficult for people to get for the feds if they do a proper word and all that to get that data, especially when you're dealing with other jurisdictions. But it's still as possible. And I remember having some discussions when Havenco, just to let you know that I'm sorry, I'll explain that, there was a offshore platform that claimed that they had jurisdiction that were off the coast of the UK. They claimed that they were an entity of separate country and that if they ever were served with a subpoena warrant, they would totally disregard that. The jurisdiction question for Havenco and Sealand was, in my opinion, has never quite been settled. But it is possible. It's complicated to get that data because they also had a internet connection that went just right under the ocean to the UK. There are a lot of ways that with a proper warrant that that information that's being transmitted through there could have been intercepted and illegally intercepted. I don't feel better. Here's the thing, though. We've been talking about data, and the name of the talk is your mind. It's important that you understand data constructs because, in large part, your brain is just a data storage and manipulation device. We need to sort of tease apart how you store and manipulate data that's related to your mind. I just want you to think, though, briefly about the idea of personal notes and effects. The question is that we're addressing also is if you take your pertinent ideas, which you're thinking right now, and either because you have short-term memory and you can't remember them, if you put them on any type of external computer or data device, what would it take for proper warrants to get access to that data? And that's one of the things we're considering. And we'll go a little further at the end of the presentation and talk about some new technology that they actually claim is a pre-crime detector. And it reads your pre-crime thoughts. It's true. So 200 and something years ago, your personal effects or those notes that you wrote yourself could fit into a briefcase. And it was maybe a couple of hundred sheets of paper. You can fit the Library of Congress in a briefcase now. Keep that in mind. So it's the 1990s. Everything is awesome. And we've got our first PDAs. We're keeping names, addresses, phone numbers, relationships, aspirations, stuff that is definitely PII. Is this thoughts and memories? Is this personal notes and effects? It's kind of an interesting question. Just sort of puzzle on that. In the early OOs, we got ourselves a connected PDA. So now you're starting to see things like Blackberries and other sorts of devices that have a replicated copy. So there's the copy you're carrying with you and there's another copy on a server somewhere which you don't control. You might be storing personal stuff on your BlackBerry or other iPhone-ish kind of device. Does a corporation have any rights to that? It's your memory. What if it's not just to remember something but rather to do something? You know, a cron job or a Google search alert. Now we're starting to talk less about the information and more about the I need to do something. It's starting to look like agency. When you switch from remember something to remember to do something, you get pretty quickly to make a decision for me. This is how corporations work. The corporate person requires that its agents, its officers and directors make decisions on its behalf. Right now, my computer makes decisions for me. If I get a meeting request that meets certain criteria, it will be accepted or denied by the computer without me ever having to see it through the magic of Microsoft Outlook. The computer's making a promise that I'll show up to that meeting at that time in that place. And it's making that promise for me. It's actually setting up a contract between me and the person who's requesting the meeting that says, I agree. Is it OK for a computer to be making a contract? One of the questions we had with a legal agent is can a computer become a legal agent? And we started talking about this and as it relates to storage of information and is it alive, so to speak. When I was at Carnegie Mellon, we had an interesting project that we discussed with some CS majors that were there. And it was, this was before I went to law school, so probably some of the stuff would have been a little bit dubious now that I know, but we were trying to get a social security number and get a computer to vote. And we were thinking, well, it's a cognitive device. It can be an agent, but it was a project we never actually took to fruition. We were just thinking about it. Can a computer be alive? Not just in the sense of AI, but in the sense of voting, online voting, or online voting, e-voting, and getting a bank account, managing that bank account, making just simple communications and contracts that would be akin to a person, and now with virtual worlds online. And helpers, like my former students, a World of Warcraft helper, is it, who's controlling that? Who is contractually responsible for that helper? So, how are you related to your computer? It becomes a very complex question. It seems very simple, but it's really not. How much of my computer do I really own, like the computer part? Similar to the car computer we were talking about, and your ownership of the car, you own the plastic, maybe the stuff in the LCD, the keys, anything that is software, and some of the firmware as well. You don't own that. It's licensed to you. Okay, and with data storage, it is probably not easy either. Well, with data storage, you own the information that's coming in and out of there, but as for the physical device, you like the box. Okay, you might own the physical box, but the rest is going to be licensed, and you own your communications. Except for the FCC and stuff. You can see this gets depressing fast. So, if it's possible to own a computer, but not really, I mean, I can own a carrot, but I can't own a computer. Who really owns my computer? Well, it depends on the operating system you use. Is it Linux, or is it something else? Actually, when you use Linux, you're still using, you still are licensing. You don't own that code either, I'm just checking. So, if it's not mine, how can it make decisions for me? I mean, I don't even have control over it. I kind of own my kid more than I own my computer. Last law, and contract law has struggled with this. The shrink wrap licensing, for instance, is a difficult problem because it used to, I don't do it as much as they used to, I believe, but when you buy a box with some software in it, you rip open the shrink wrap, and you've just agreed to the license just by cutting the plastic. And in contract law, you need to have something called the meeting of the minds where both parties understand the contractual provisions and both agree to it. That's complicated with the shrink wrap license. And similar to when you purchased a computer, we were talking, Jamie and I were talking about that, how the software, you may not know everything it's doing, but you've agreed to a lot of the terms on that, either for online stuff and end user licensing agreement, or the software licensing for your operating system. That's the difference between explicit, we're talking about explicit or implied contracts. This was the example I mentioned to you about. At Carnegie Mellon, we tried to make a computer legally alive, and theoretically, we thought it might be possible, but legally very complicated. So what does it take to become a legal agent for yourself or others? At least in the corporate law, you can be an agent for your corporation and make contracts, decisions, sign anything for your company. You can set up a bank account if you are an agent. In fact, for any company, you need to have a legal agent in that state in which you are doing business. So, our question was, for a computer to do that when it makes agreements online, is that something that makes it more legally alive? So if you think about the idea of sort of a cognitive ladder, that at some point, a computer's going to be smart enough or capable enough that it can do things for you, it can become legally mature. We've already got a set of cases that describe legal maturity. This is stuff that has been well understood. In a lot of ways, a legally immature person is a lot like a child. We need to understand at what point do children become adults. And we looked up the age of majority. At the age to get married, for instance, criminal responsibility. At what time, in some states, you can go to war, but they don't give you enough responsibility to drink alcohol. But we talked about these, and in tort law, when accidents occur, children at times can be held to an adult standard if they're operating machinery or a boat or a car, for instance. And an accident occurs. They won't always look at the child as, this is a 10-year-old child, the 10-year-old child's mental facilities. If it's involved something, machinery, or as we were discussing in relation to this talk, a computer, is that different. And I do know under cybercrime, a lot of cybercrime laws and cases. Now, you can't get out of saying, I was 17 when I hacked that site, I'm not an adult, you can't charge me, because the courts look at us with, as having special skills, these special skills are akin to, for instance, a child operating a car, is that they will hold us to a higher legal standard because of our technical abilities. And in fact, knowing a lot more, I'm not saying ignorance is the list per se, but knowing a lot more can be a little bit more difficult in court to explain that you didn't know what you were doing technically when you did that. So that's why we're talking about ages in relation to also with computers. I have a seven-year-old, I don't want her making decisions for me, she's not an adult, and I really don't want her driving my car. The other place where the laws really looked at this stuff is legal maturity for mentally handicapped adults. Can Eliza and Rain Man get along? Might be fun. Can these cognitive agents represent your thoughts? And should the thoughts in your mind, for instance, relate to a computer being that where your mind is a type of computing machine, should it have the same protections as computers do for search and seizure? What happens when you can move memory out of your head and into a device? Science fiction is awesome, except you're probably doing it today. I don't keep track of phone numbers. I can't. I don't keep track of dates. I have no idea what I'm doing next Thursday, but my little friend knows. Would you let me borrow your phone at DefCon? I'm one of those Twitter people. You may know me from the Twitter.  Can you ever really take back what you put out there on the Twitter? And likewise, if you think, I know most people in this room probably know this, but anything you put out on Twitter is public. It's your broadcasting, where you are, your GPS locations at times. You don't have an expectation of privacy because you are saying your thoughts are, I am here in this talk at DefCon in track two or three. Actually, I don't know where I am now. I guess my GPS would give that away. But the question is, do you have an expectation of privacy? No, if you're tweeting about this, it's public, and anyone can look at that. And they don't need a warrant to be able to read your Twitter feed if you've made it public. Protected updates aren't. I'm also a super hipster. I use cloud memory. My information is available to me wherever I am, whatever device I'm using. That makes it equally available to anyone else. Want to go really sci-fi? What about prosthetic memory? This is Johnny Mnemonic happening for real. This is out of Microsoft's research labs in Cambridge, and this is about four years old. And almost nobody I talk to knows about this device. This is the Microsoft Sensecam. It is a research prosthetic for Alzheimer's patients. It records low-grade stop-motion stills of everything that's going on until you're standing in front of somebody, in which case it switches to high-grade video. It also records all of the audio from your day. It's used as a reference device, so Alzheimer's patients can review what happened during their day. Many of you may or may not have gone to school and know that if you review your notes, you remember more from them.  There are people who are walking around wearing these pendants. If I was to be walking around wearing one of these pendants, I'd like to know whether or not that pendant was subpoenaable, or whether or not the licensing agreement that I have with Microsoft means they would give it away. We make a choice to use some of these devices, and some of these devices make our lives easier. Some of them we have to question and reasonable expectation of privacy. And we're gonna be talking a little bit about surveillance cameras now, and yeah, a little bit later. A little bit later. Okay. So sometimes we make choices to put our information out there, and sometimes our information is put out there for us. Tiffany was talking earlier about the idea that medical prosthetics include logging capabilities. If you were a black hat last year, you learned a little bit about automatic defibrillators. Insulin, drug pumps, Caesar detection and control. They're all vulnerable to subpoena. Was your heart racing at the time that the crime was committed? Was your heart not beating at the time the crime was committed? There's a, we'll put up the links at each of our sites, but there's a very complex paper that was written for forensic pathologists describing how to correctly remove these devices for subsequent examination, for determining things like exact time of death and exact circumstances of death, where they don't actually have to do it the old biological way. They can just sit at a computer and double click something. Now we can talk about. Now we talk about cameras. Someone who's been doing this for a long time, and I like a lot of Canadians, so I follow Steve Mann's work. I don't know if any of you remember him, but he started at an MIT, and he's been, back then, I guess it was almost 15 years ago, he'd wear a big CRT, actually wear it on his body and had a camera on his head. He made a point to, he was bringing awareness about surveillance, part of what his message was, that anyone can be, if you're in public, if you think you have a reasonable expectation of privacy when you're out in Times Square, walking around and there are all these surveillance cameras, you do not. You are in public. Your image is being captured by these cameras, and it's not just on public property. If you are in Walmart, for instance, and Steve Mann did a really interesting project on this about five years ago, he walked into Walmart wearing his camera, and his wife did as well, but hers was more concealed, so she captured all this on video. They walked into Walmart and the manager came out and said, you can't record anything that's going on in here. This is our property. You are here in Walmart. You're giving, we don't give you permission to do this. You're recording me. I haven't given you permission, but the way it works, I know at least under US law, is that Walmart, it's not going to imply type of contract. When you're in Walmart, you can't tell them. I want to shop here, but I don't want you taking my video to determine which end caps need to be stocked or what information that I'm leaving or what books I'm reading while I'm walking around. They do not, from what I understand from a case study I did in Walmart, they do not associate that with your personal identifying information. However, if you are on video and you are purchasing something with a credit card, that type of information, if for instance a guy was buying matches and gasoline and lighter fluid, something that had to store, and he used one of those shoppers cards where you, I live in Maine, we have Shaw's, you get a little bit off if you use your shoppers card. So when you do that and you look at your receipt of how much you saved that day, you need to ask yourself, was my privacy and everything I purchased worth $5.33 that day. That is their information while you're in their store. Homeland Security has a new camera and this is one of the things that we talked about, we wrote about in our white paper for Black Hat.  And on their website, I actually, these are images, fair use of these images that I have borrowed from the Homeland Security website. They have licensed images from the movie Minority Report and some of the caption was, look what we can do now with new technology, suggesting that we can do Minority Report as type of research and technology right now. What's interesting about the FAST camera, if you look in the, it's quite complicated camera. Right now, the prototype is huge. It's the size of a trailer and they did a task project on this where they paid 200 volunteers to walk through a trailer in Maryland about, I think it was about six months ago. The FAST camera not only records pupil dilation, contraction, I mean it looks at your eyes, it determines your heart rate, your blood pressure, if you're sweating, it looks for other types of biometric information that you're giving out and one of the most interesting I found was it has a pheromone detector on it. I never believed in all those perfumes that like, oh, by this perfume it has the opposite sex or same sex pheromone, whichever you would prefer to attract that type of mate. But actually Homeland Security is using pheromone detectors to determine if you are, if you are leaving pheromones in for instance airport security that would suggest that you have criminal thoughts. The point of this camera is so TSA can stop you before you pass your security if someone has criminal intentions, they wanna stop it before that. So not only were we talking earlier about the idea that you may be choosing to externalize some things that should be protected thought within your head, sometimes those things are externalized for you, here we're talking about broadcast reception. So you may no longer have the opportunity to keep thoughts inside your head, those thoughts are being extracted at a distance. So we talked about when you're thinking things which is private and you have a reasonable expectation of privacy to sit there and think, then you put those thoughts and memories on devices or tweet them. And now we're talking about you just standing in public and these cameras are making, the sensors are revealing things about your thoughts potentially. And one of the other questions that we have when we have to think about these new surveillance cameras is where's the data being stored, for how long is it being stored and is there any way that we can access the information that's being stored about us? And there's a pretty large facility in West Virginia that I believe is almost builder it is right now, but that's where a lot of their biometric data is going. And one of the other things that we did research on was okay, where else are they using biometric data to determine pre-crime? And it's here in Las Vegas, in fact. I don't think it's at this casino because I have not seen it, but there are casino workers that if you work at that casino, you must agree to wear a little collar, a bracelet or something on your ankle or on your arm. And it checks heart rate. It's being monitored via RFID so a pit boss could look down. If someone has a high heart rate, they will determine either if a crime is being committed, such as if their table's being held up or someone's cheating, or if the dealer is thinking about cheating, a cheating the casino. We're in an interesting place where these things are moving from fantasy to reality. This is the 15 year sci-fi cycle. It takes about 15 years for something that is absolutely out there in science fiction to get turned into a bleeding edge product and about five years after that, everybody's carrying one around with them. Are we in the kind of place where we're okay with that? If you can use my thoughts against me, that's kind of out of my control, but what if my thoughts conspire against me? What if your software mistakenly miscomprehends what's going on? Say I'm just really, really warm or I'm kind of jittery because I'm in front of 600, 700 people? It's not like there's ever been bad software, right? And nobody's ever tried to exploit software holes to cause negative things to occur. And since my computer's doing stuff for me, and laws can be changed. But you cannot be, if you already are being prosecuted for a crime, if laws are changed they can't retroactively like add 10 years to your sentence. So that's the only caveat for that. The minor caveat? What do we do? Oh, sorry, we're gonna tell you what to do.  And I am a lawyer, but I am not your lawyer. I had to throw it out, it's always my disclaimer, sorry. If you follow the advice, you might still be screwed. Practical measures. These are the things that you can do in cases where you're choosing to externalize thoughts. When you wanna write down notes, things to remember, things to do. Remember, anytime you write down that to-do list, you're creating a paper trail for somebody else to use against you. Try and keep your information in your home. There's a slightly higher bar of entry. Use encryption. Simultaneously, keep the tinfoil hat in the drawer. Don't use too much encryption. Guess what? True crypt hidden partitions are findable. Don't give them a reason to look real hard. The closer you look to innocent, the more likely it is that they'll believe you're innocent. Store your data where it's not easy to subpoena. Haven Coe would have been a good place, but put it in a bank vault in Aruba, see how that helps. Make really good friends with Richard Branson. And that applies as long as you're not obstructing justice. If you are trying to hide data for an ongoing investigation, do not contact C-Land. The best advice is simple awareness. Your mind and your memory are not necessarily your own. This is changing right now. We're not entirely in charge of the changes. We're asking you to engage with the general public, legislation, vendors, help them understand for the last 15 years, we've been building technology like crazy little rabbits and waiting for the legislation to catch up. It never does. This is a case where we need to have the legislation framework ready for when the technology gets there. Because let me tell you, if we're learning about it, it's in a lab somewhere doing the next generation thing. We're just unaware of it. So what we've told you about isn't what's current. It's stuff that's old enough we were able to find out about it. And if we in this room know about it, that means that law and some legislatures are probably about 10 years behind. So if you care about these issues, I would recommend that you make wise choices when you're selecting lawmakers. Influence them. Tell them what your opinions are about this. We made a big deal in Maine about the Real ID Act and while their Maine is still gonna go Real ID Act, we were one of the few states that did hold out. I told all my students, contact the senator. Even if you're four against a Real ID actor or cameras such as this and how the data will be stored, tell them about it and support EFF. So if you're inspired by Carrie Underwood's Before He Cheats, watch to see if there's a camera around. This was taken by a Google van driving by. All of these pictures were. Was that malicious or was she falling down? If you happen to be in the range of a fast camera.  These guys were not. And remember that you never wanna be in a database forever as a world champion sword fighter. There's one in every crowd. We have brief time for Q and A, thank you. We also have lots of time in our room. Right in the middle, stand up. Okay, so the question was, are there some cases of protected agency where an individual can operate on behalf of but it be protected in a way that is legal proof? I give it to the lawyer. Legal proof or you were asking, I think more so similar to it for an agent of a corporation. I am saying that whatever rights that corporation has, especially if it's a land lease contract, you as an agent would have rights to make that contract. And I'm not saying that it's subpoena or warrant proof, but however that corporation stands, you stand as that. Yeah, that's right. Okay, I understand. His question is, if one of the agents is an attorney, is it different than just between two people who are not attorneys? Yes, there is an attorney client privilege and it takes a grand jury or it's very strong court order to break that. So if you are telling your attorney about your secrets about some super badass encryption you have going on, they are not, if someone just comes and says law enforcement does, I wanna know about that, that attorney has very specific rules they must follow about how much information they can give and when, depending on the investigation. But that is stronger protection than just between two individuals who are not, or one is not a licensed attorney. Green shirt? You've got a great answer for this one. Okay, so the question is, how come the Fifth Amendment does not protect me from giving out my encryption keys? We had, we were asked this in Black Hat as well. This is a very good question. The case in Vermont that I was talking about was in regard to the defendant said, hey, those are my keys, it's my speech, so to speak. So I can't be forced to incriminate myself by turning over those keys. Well, the way that the court looked at it, the keys are a tool, this is a tool. The Fifth Amendment protects you, the person. So you, they can ask you questions about the keys, but the court did give an order to turn over those keys, otherwise it was obstruction of justice for when they did do the forensics on the computer. They needed to open it up to see what was in it. So it's a tool. So I was gonna say now, so explaining that, look, think very carefully about what the key related to your computer means. The key is not speech. The key is not incrimination. The key is exactly the same as if you had a house with a very, very complex locking system and they had a warrant to get into that house. They can require you to help them open the door. It's just that simple. In Canada, we've got this very awesome thing called at the queen's pleasure, which means they will keep you in jail until the queen decides to let you out. You will give up those keys. I saw a bunch of hands over on this side. We've got a question. Middle back. Okay, so the question slash statement was give them disinformation. Don't always shop under your own information. Share who's information you're shopping under so that you can get awesome weirdness to happen. I like awesome weirdness. I feel kind of bad for the BI guys, though. Blue. So he's just saying that apparently PCI doesn't work. They're tracking you by your credit card numbers too. Question in the front, we've got two minutes so it's gotta be fast. Okay, let me rephrase that. The question is more about some legislation in Maine and I'll just briefly address that because that doesn't directly relate to specifically what we're talking about, but there is a pre-crime bill as it's being coined that Senator Maine suggested. And she was also on the Homeland Security Committee. She was the director, I think the director of it. She wanted to use filters to determine what people are talking about online. And I'm not talking about carnivore echelon but it's just when people use particular things in chat rooms, she wanted to be able to get that information and use it against people. That did not pass. That legislation did not pass, so. I don't believe it's before Congress this session. I think that bill is, I mean, if anyone wants to talk to me, I think we need to move on. I was just gonna say, we're about to move into the challenging question room. Q&A room, which is all nice and close and sweaty. And we'll take your question first in the Q&A room. Thank you. Thank you.


Most big backs do great things. Most big backs are viewed and play often as battering rams. And Derek doesn't really play like that. Can you talk to that idea that he's kind of a different guy as a big back and maybe how his durability benefits from him not being the battering ram type? Well, he's obviously, as you all know, he's incredibly talented, you know. And I think Joe jokingly said, but if you ask him, I think he thinks he's a little scat back anyways.  And then obviously he has the ability to make people miss and then the speed to run away from people. So he's got a lot of, like I said, he's incredibly talented and skilled in many ways. You know, I wish I could explain it other than genetics. He's got great DNA. He's an awfully big target. Would you say he takes a few hits considering the size of the target?  He's taken only a few, you know, for the size of it is, I would agree with that. And I think some of it, as we continue to coach him about getting his pad level down, you know, he goes through the line of scrimmage, but where he protects himself is as he gets through the line of scrimmage and contact is imminent. He does a pretty good job of getting his shoulder square to the line of scrimmage and then getting his pads down. And so, although he's taking hits, sometimes they're hitting the top of the shoulder pads, you know, or, you know, there's not a lot of body to hit, you know, where it's hard is if he gets caught going through the line of scrimmage before he can get his shoulder square and now he gets hit from the side or, you know, someone as he's falling, someone can get a shot on him. But he does a good job of protecting himself by getting his pads down most of the time. Jim. Tony, I hope you're doing well. I guess one thing that we've all discovered and certainly you know it better than anyone is just how he kind of beats himself up if he does anything wrong. He goes for over 250. He goes for 250 Sunday. He clips his 2,000. He seemed like he was upset over the fumble. Are there times when you have to kind of tell him, hey, lighten up a little bit or can you ever get through him there when he tries to be a perfectionist? Both.  Than anybody else because he is such a perfectionist. So there's a time when when he makes a mistake and, you know, sometimes I think some of it is learning the guy and there's some mistakes that I can get after him pretty good and deal with it. And then there are times when I know I can I can make the point, but then let him be and he'll be just fine. But Derek is very respectful. He's very receptive. He listens to whether it be raves or myself or art. Whenever you give him a coaching point, he may be upset with himself. He'll listen, he'll hear you. And then he'll go and then he'll go on about his business. And then, you know, he comes back from it, but he's just so competitive and and wants to be perfect.   Teresa. That said, Tony, he's had a lot of carries and, you know, he you ask him about it and he almost takes offense. Do you have to monitor those at all or you just keep keep handing him the ball as long as he keeps running this way. You know, that's that's you obviously as a coach, you worry about it. But if you ask him, he says, this is what he gets paid to do. This is why he trains the way he trains in the off season. And we all know that, you know, there are guys that they can handle and guys that can't. But to this point, he's he's proven to us that he's durable and that we can count on him. And certainly he's a guy that when games get tight. He's proven that he can be counted on and he wants to be in there and he wants to do whatever he can do to help this team wins and win. And so it's hard, it's hard to take. It's hard for me or Braves are to take a guy off the field that is as valuable to this team as he is. So do you worry about it? You know, I wouldn't say worry about it. Is it in the back of your mind? Sure, you'd like to just take something off him.  He enjoys helping his team in whatever way that he can. Because, you know, if we were throwing the ball 50 times and that was the way we had to do it to win, he'd be in there. He'd want to be in there doing the same thing in past protection if that's what it took to win. So we'll just keep our aura, keep designing them and we'll keep running them. I'm running short on time, but I'm going to try to get to everybody. So quick questions here, John. Tony's similar lines, but in terms of the number of carries for him, it seems like during the season, the regular season, you guys would try and conserve a little bit, you know, maybe thinking to games down the line. I wonder if there's less of that thought process in the playoffs because you never know if you've got a game next week. You know, obviously during the season, if you can do the regular season as much as we could, but you know, you love to monitor it. And I kind of try to keep track of, you know, during the game of where he is in terms of carries, but you know, just he's a professional and he wants to be in there. And if he can help us win the game, then that's what we have to do to win, then that's what we'll have to do. And Robbie, I know you say you're short on time. I'll stay in extra five minutes if you need me to. Okay. I've got to keep. I don't have to. Okay. Okay. Okay. Okay. Okay. Okay. Okay. With Derek and this whole theme of the carries, you know, the high volume, how much do you think about just what's available to you guys now as far as medicine is concerned and and just just rehab, just that whole concept. You know, I don't get into that. You know, again, it's a little bit different because these guys are professionals so they all have their own routines and they all have their own time that they spend with with our trainers and with Frank and the weight room staff. So I don't get involved in that they I coach them when they show up, you know what they do in with the trainers and the strength staff that that's on them as professionals. So we encourage it and hey man take care of your body make sure you get some extra rehab make sure you're doing the things that you know recover ribs make sure that they get time and a schedule to do recovery and things like that. So it's my job just to trust whatever Frank and Todd tells him to do that they're doing it and doing it the correct way and they'll have themselves from a physical standpoint, ready to play on Sundays and it's our job to make sure from a mental perspective that they're sharp and ready to go on Sunday. Appreciate it. Director. I remember about a year ago you talked about Derek and sort of his progress in terms of reading things going when to hit when to stay patient things like that and how that, you know, helped his production. Anything this year that he's added or improved on on that front or any other front that's you know helped him be even more productive.  The old line tight ends blocking the line of scrimmage and then I think I was special place in my heart for receiver the coach receivers for so long that a lot of times they're left out of it when people talk about running but a lot of those long runs because the receivers are downfield doing such an excellent job blocking and certainly Cory and AJ, you know, and those other guys get a lot of recognition for catching ball but they also do a outstanding job blocking down the field so give those guys all credit but Derek's also, you know, he's just he's more comfortable, you know, and I think it's like anything else the more you do stuff the more you see it. It becomes a little bit more like second nature to you and I just think it's kind of the evolution I think he's seeing things and he's able to anticipate things a little bit quicker. So it's allowing him to make quicker decisions and maybe sometimes squeak through things that, you know, a year ago he may have been a step late but because of his size able to make it through. You know, because of his size whereas now he's getting there and maybe hitting it a step quicker because he's more comfortable and he's seeing things a little faster. Terry last one. In the middle of the season Ryan Tannehill told us that, you know, Derek's carries and numbers were down a little bit by design just because it was unsustainable. What was Derek's approach during that time because I know he's a guy that wants the ball as much as possible to help the team and how much did that pay off down the stretch run by being able to use him more. He is the ultimate team player so if he didn't like it he's not going to say anything anyways. But, you know, he wants he's competitive so he wants to be out there but once he realizes that okay, we got to give you a break we got to we got to help you. He understands, you know, and, and he then cheers he cheers on and coaches whoever's out there to try to try to help them. And he and he knows that when we get in crunch time. And, you know, even if it was early in the game we were trying to get somebody in it so that in a second half of games that he would he would be a little fresher so he understands it he's an ultimate team player and he'll do whatever we ask him to do do whatever Coach Braves and I would ask him to do. If it means helping us team win. We're in here jammer each other. I am and I don't know, Tony I bounce back and forth but how much pride I don't know if you answered the ship how much pride did you take and stand there go over 2000 yards and now being able to say you coached a 2000 yard rusher. I was just excited is just, you know, it's one of those things that we're winning as an organization so that makes it even it makes it even better. You know, that everyone gets to share in this moment and everyone on this team at some point in their career, or when they're done will be able to say they took part of being on a team with, you know, AJ going over 1000 yards as a receiver, Ryan's accomplishment throwing the ball John news leading touchdown catch tight ends and touchdown catches to Derek running for 2000 yards just been, you know, to see Darren Bates and Malcolm and all those guys on defense Jeff Simmons and all those guys excited. I mean it's just, it's fun to be a part of this organization and it's fun to be a part of such a historic thing and maybe I won't quite understand it or really appreciate until we're out of the moment, but I'm extremely excited for Derek the old line and the guys on the offense that are all that have all taken part in this.  No sir, are you an agent and maybe you can talk to Braves and John for me.