Over the past few weeks, an old controversy between Lebanon and Israel over the use of off-shore gas fields has broken out once again. This was sparked by Israel sending a European vessel to develop the Karish gas field, which according to Lebanon, isn't disputed waters. The countries have been engaged in a long deadlock over their exclusive economic zones where they conduct commercial activities. The political crisis in Lebanon over the years has also contributed to this issue as has the US backing of Israel. What are the key issues in this dispute? What are the positions of Israel and Lebanon? What results have the negotiations yielded? Rania Khalik of Breakthrough News explains. So there's this risk of a major escalation between the Lebanese and the Israelis over the anticipated Israeli explanation and what are disputed waters off the coast. You know, obviously these two countries share a coast and they're Mediterranean because they border each other. So there's this impending crisis, but really to understand how it happened, it's important to understand why the Lebanese adopted what's called line 29 and why it was important. So there are these promising gas fields in the Mediterranean off the coast. Israel is already exploiting some of these gas fields in undisputed waters. And of course, Lebanon, particularly now that it is suffering this horrible economic collapse and an energy crisis is very eager to exploit the potential resources in its waters. But first, the border has to be demarcated. So Lebanon doesn't recognize Israel, obviously, and is technically in a state of war with Israel, which means the dispute over the line of whose, you know, whose water, which waters belong to Lebanon, which area belongs to Israel. That dispute can't be resolved in the way that most maritime borders are demarcated because these countries don't have a diplomatic relationship. They don't communicate. So the Israelis and Lebanese delegations, they do actually meet by the border, but they don't talk directly because of their enemy status towards each other. So there's an American mediator between them as well as as UN observers. So over 10 years ago, it's important to understand that a very weak and at the time, pro Saudi Lebanese government submitted to the UN its position on the border, which gave Israel everything it wanted. It's actually kind of shocking. It's almost it's actually treacherous what this government demanded or, you know, didn't demand. And that was under the leadership of Fuad Senyura. Then a couple of years ago, a Lebanese lawyer who's an expert in this stuff, who happens to be an expert in this stuff, he pointed out to the government of Lebanon that international law and actually recent presidents gave Lebanon significantly more than its previous and incompetent government had requested. So the new line that this this international like law expert was suggesting to the government is called line 29. So prior to the Lebanese preparing to change their demand to line 29, the talks had been frozen for years. The two sides like weren't speaking on this at all. And then suddenly a couple of weeks before Lebanon officially corrected their position to accept line 29 as the line that they're going to demand. The Americans and the Israelis got interested in talking again and negotiations were restarted. So there was a deal basically precooked between the Lebanese and Israeli negotiators that was actually interestingly enough ruined by the American mediator at the time. And so there was this actually after this one disastrous meeting in 2021, the American mediator got busy and then ultimately ended up moving to Qatar. That's beside the point. But then a new American mediator was appointed by the Biden administration and his name is almost Hochstein. So the problem with this guy is that on top of being American, he also is actually Israeli and has served in the Israeli military prior to joining the US government. So this is who the Biden administration appointed to be the American mediator between the Israelis and the Lebanese. So it's a little bit weird, right? So Hochstein came to Lebanon and he made an offer that nobody in Lebanon could accept, which included, you know, sharing a gas field with Israel. It looked like a really sneaky way actually to normalize relations between Lebanon and Israel, which is what everyone suspected was happening with this American mediation effort as they were trying to use it as a way to push normalization between these two countries. So some Lebanese politicians that they can't say no to the US, they fear the consequences. And at the same time, they but at the same time, they can't accept this offer from the US because it's just completely unacceptable. I mean, unacceptable, like even to pro-Western elements in Lebanon, like if they were to accept this deal, it would be seen as treachery, as treasonous. So Hochstein also started his line from the land at a point that was advocated by the Israelis, which would have met compromising on the land boundary established 100 years ago, something called the Pallet-Nukom line. And on the land, you know, on the land, the boundaries like already established. The Lebanese argument is actually grounded in international law. It is this Pallet-Nukom line. And if you started on another point on the shore, which is different than the land, then this agreement on the land or this agreement on the shore can be used by the Israelis for other locations on what, you know, we still have 13 disputed points on land by the Israelis against Lebanon, saying it's their land. So Israel's claim is based on this tiny island called Tachelet and its impact or effect, right? So the issue is the effect of this island, like, does the island have full effect or zero effect on how you like on how you delineate the line for, you know, which side belongs to who? And this, of course, depends on the island. So if you give the island what's called full effect, you get the line the Americans and Israelis want, which is deep into Lebanese waters. If you ignore this island, you get line 29, which is what the Lebanese are now demanding. So the criteria to decide if this island has full effect or not is the impact of the island on the line. And I know this is getting really technical, but it's important. If the impact, though, this is under like the international law, if the impact of the island is disproportionate on the line compared to the size of the island, then it's like disregarded. So this tiny island that I mentioned is basically it's a tiny rock. It's like not even an island. It's literally 20 meters wide. The Israeli and Americans claim that its impact is 1,800 square kilometers. So because of this tiny rock, they want Lebanon to lose 1,800 kilometers of this like, you know, this land in the sea. OK, this is like a blatant disproportionate effect. No question like international law allows Lebanon to literally disregard it. And this was actually confirmed in the last judgment of the International Court of Justice in a case between Somalia and Kenya. When this like tiny Somali, when these tiny Somali islands were disregarded and those islands were literally the same size and same location vis-a-vis the coast, like the the Teclitz Island I'm talking about, literally one kilometer from the coast. So the Lebanese have a very, very strong case for this line 29. So the alternative is to give an island what's called half effect or partial effect. And these are also solutions like international case law. It's always zero, full or half effect when it comes to these islands. And half effect is always given to like very big islands that are inhabited and have like people living on them, which is not the case for this island off the coast of Lebanon. And even the half effect in this case should not apply because of how small and insignificant this island is. But let's suppose for pragmatic reasons or because there's like black mail and Lebanon needs the energy and electricity. So maybe they're willing to accept less than what they're entitled to, which is I think what the Americans are betting on. They can accept half effect and it's still a huge compromises, but you know, compromise, but that's grounded in international law. So Lebanon at the moment has no government. It's in a caretaker capacity because there was elections and like the new parliament hasn't elected a new prime minister yet. So there's no decision making processes right now. Nothing like Lebanon is essentially like a failed state at the moment. And the army doesn't have the means to defend Lebanese sovereignty. It never has. You know, it's it perp intentionally kept a week like that by the Americans in Western countries that literally like send it aid. But Lebanon does have Hisbola, which views itself as the protector of Lebanese sovereignty and has been quietly observing the Lebanese government's behavior on this issue and has recently made its position quite clear. So they know that Israel has no reason to make concessions or give Lebanon more than what Hodgstein proposed when it's facing this weak Lebanese government that's intimidated by the Americans, you know, who are constantly threatening sanctions and are sanctioning Lebanon to some degree. But the oil and gas exploration is carried out by private companies. And we all know that capital is a coward and the companies will won't start exploring or extracting until the surrounding conditions are stable and peaceful to some degree. Like even big companies are sensitive to destabilization. You don't need to look any further than the Tamar field and Chevron. And during the last Gaza war in May 2021 of last year, Chevron had to shut it down for two weeks because of the threat from Hamas. And the Tamar field is very far from Gaza and Hamas doesn't actually have missiles good enough to even reach it. You know, so but they still shut it down because any sign of destabilization and these companies get very scared. So Israel shouldn't look at Lebanon and get greedy when they see leaders who don't defend Lebanon's rights because his Bullah will take action if it thinks that Lebanese politicians are selling out Lebanese rights. And, you know, in the past had Bullah had said what we accept whatever the state decides. But then after what Hassan Nasrallah said a few months ago and actually he's set to speak on this issue again this week about a disputed area and Israel shouldn't think that it'll be able to work in disputed area before a solution is found. And then in May, Nasrallah made it very clear that he won't accept Israel exploring in disputed areas. So the question actually becomes like, will his Bullah allow activities in this disputed area? Israel really shouldn't think that private companies will be able to work freely in disputed areas before a settlement is reached. His Bullah is not going to allow it. They know how to make threats credible. This is not the Lebanon of the 1960s. Lebanese officials of course are very sensitive to American pressure and the threat of sanctions but his Bullah is not sensitive to those things. His Bullah has made it clear they want there to be a maritime border agreement but they will not accept an unfair one imposed by the U.S. and Israel at the expense of Lebanese interests. And they also acknowledge that there will be a compromise in the end of course. And they've reminded their interlocutors that they have ways of preventing any exploration or extraction by Israel if the deal is perceived to be at the expense of Lebanese rights. They would however, I know this for a fact, they would accept the formula I described before. So the point of all this is to say the region, it's moving towards de-escalation. And we've talked about that before on this program. And actors like his Bullah are busy with the internal problems of their country. They're busy with economic collapse and providing for their community. So there is actually a chance to close the maritime border issue in a satisfactory way and then move on to the land border in fact and remove a major part of the conflict from the equation. And again, like the most reasonable solution is accepting this half effect that I mentioned because Lebanon is weak, it needs the economic boost and it ends up with one gas field called Kana going fully to the Lebanese side and then one called Karish going fully to the Israeli side. And so that's certainly possible but it also depends on if the Americans choose to act as spoilers. And of course right now, you see Israel really taking this silly move of sending this like Greek ship to the coast that provoked, attempting to provoke his Bullah over the weekend which is what Hassan Isra'la is gonna be speaking on. But regardless, at the end of the day, this could go either way, it could either escalate a situation in a very serious way or it actually, there is an opportunity should the Americans care enough to not get in the way of it. There is an opportunity to de-escalate. Amos Hochstein is supposed to come to Lebanon soon. So it's yet to be seen like how the Americans will play it.


Did I just say the pants are coming? No, I said the pants is coming. That is the PANCE Physician Assistant Certification Exam. Now this is the big daddy of all the tests that you will ever take, not really in PA school, at the end of PA school to see if everything that you've done in PA school was worth it and you can actually practice like a big girl or a big boy PA. It is a huge test. Five hours and really interlates more like six hours because it's 300 questions broken up into five 60 question 60 minute blocks. Hence the five hours and then on top of that you get 15 minutes to kind of just get acquainted with the test initially and then 45 minutes of breaks. So essentially you're there for six hours if you take the full a lot of time. Now with that being said a lot of fear can creep in, anxiety can creep in and we all know that fear can be the killer of dreams and we don't want your dreams of being a PA kill, right? So in this video I'm gonna be giving you three tips that I think that you can use to help you not only pass this exam but any high-stake exam that you may be taking from primary school to post- graduate school. So let's get into it right now.  So I'm back with another video for you guys. If you're new to my channel take a look around if you like what you see go ahead and subscribe. So we talked about fear and the pants and high-stake exams just in the beginning of the video and that it's true right? You know fear can squash like your dreams okay and so we don't want that. We don't want our dreams like going off to waste because we were fearful of something and so there are things that we can do to help us pass these exams, pass these things that are like high-stake exams that determine a large part of our grade or a large part of our future. Now what I'm gonna say is nothing novel okay and it's actually pretty simple and usually the things in life that help you succeed really are. It's like hard work and dedication right you know and that's not really my tips here okay so you still gotta watch till the end of the video but essentially that's what it is. Hard work and dedication is what is gonna help you succeed. Obviously there are a lot of things here and there that add to that but that's that's the foundation of it and what I'm gonna be giving you is basically the foundation of things that I've used and other people that have succeeded in other various areas of their life what they've used and then you can build on that to help you not only pass the pants but pass any exam that you will be taking throughout your life. So the first thing that you should do is plan for it make a schedule. I saw this really good video done by Ross review and it was talking about visualizing the exam you know and for those of us that are visual people this is great and I will link the video here in the video she talks about how what you should do is see your test date okay so if your test date is three months away or three days away see that test date see how you're going to dress on that test date eat on that test date those the things that you you are visualizing okay this test date write it down on a physical calendar so that you can see it and even cross it off as you get closer to it and visualize that exam and so that's where the dedication and the diligence comes in but you have to do your part to make sure you visualize it okay so be sure to check that video out because they have a lot of other tips in there apart from the three that I'm going to give you that will help you just do well on test day. The next thing that I think you should do in terms of passing or acing any high stick exam is studying right study duh okay and so for me when I when I visualized it I guess you could say and I planned for it and I made a schedule and I studied um I also tested myself and so I know when you think study or just like okay like yeah you're looking at um you know what what is osmosis or something if you're in biology right um you're looking at these various different things like what is the the best treatment for this particular disease the disease process if you're in med school or PA school so you're looking at this and you're studying right you're thinking you're studying but what I realized is that I needed to kind of study in threes and there were different ways that I I had to study okay and so in those ways of studying I I not only like studied the material that I had but I made sure that I tested myself on the material I made sure I listened to the material either through youtube videos or recordings that I had from PA school and then on top of that I made sure that I taught somebody else now obviously like my husband he is not in a PA profession at all but he's who I had and so I gave him the book with essentially like the answers and I taught him um about a particular disease process and it worked really well because when you're able when you know the material well enough to teach it to somebody else uh for them to actually understand then you know you know the material okay you are good so first thing was to plan and visualize the exam the second thing was to study um study in threes visually audibly and vocally by speaking and teaching somebody else and then the last thing that you should do when preparing for a high-stake exam is stick to the plan when you're planning for these high-stake exams sticking to the plan is key now you can't be looking at your friends and what they're doing over there and how they study in and being like oh that's always going to work for me okay and if you see me as a friend all right cool what I'm saying may not necessarily work for you but that's why I say all the time I'm just a girl on you know YouTube you take this advice with a grain of salt um but this is what worked for me and I've seen this work for others and you may have to adjust it in some ways so that it works perfectly for you but that is okay what I'm trying to give you here is the foundation the foundation of how to study okay and so sometimes you may be looking at your friend and you're like okay they get to go out they going to have fun um and I'm here stuck stuck studying let me go you know hang out and see what they do um and that may not be for you okay that's not necessarily going to work for you and I had to I had to realize that mpa school mpa school had to pull back and be like yo that's not for me I got to go and make sure that I know the material first before I'm able to do the third aspect of how I study best which is teaching others and so because of that I had to say all right I'm gonna come back in a day or two after I've gotten this downpack we can kick through these questions um and then go from there and that is what I realized that worked best for me and so you have to realize what works best for you and you have to stick to the plan okay so let's teach you recap the top three things that you should be doing uh in my opinion at least is visualizing the exam planning for it the second thing that you should be doing is studying novel thought I need to study but you should be studying and then the third thing that you should be doing is sticking to the plan really really simple not anything novel at all but how you incorporate that to your study habit that is where the work begins all right thank you guys uh if you have any other comments or questions for me I'll leave them in the comment section below if you already haven't done so go ahead and like this video and subscribe to my channel follow me on instagram at a down in the pa and on instagram at get that so university thank you guys so much for watching I will talk to you guys next time bye


Right, good afternoon, folks. Welcome. My name's Tim. I'm head of research at Port Kais and my colleague Mike Helped me on this piece of research. So he's gonna be chipping in where he feels I've missed things And I'm gonna be making sure he doesn't get sidetracked by the cats as you'll see later in this presentation So what this topic is what this talks gonna be about what we tested how we tested it what we found and why it's bad So what we actually tested was an off-the-shelf device from a company over in the states a time server it's fair to say that Historically the people who is testing it for might have just installed an MPP package on their system But the way the way they come here is restructured. They no longer have that capability. So they decided they'd buy one Probably not the best decision they ever made and we'll discuss wine a little bit All of these bugs have been disclosed to the vendor In fact the vendor is currently awaiting a conference call with us to discuss What they do next because they eventually Failed to get back to us and we've been forced to publish them.  Yeah So who would buy a time server? Well, you can see a good list there that's actually taken directly from the vendor's website Unfortunately, we can't tell you who we were testing for But if you think about it anybody that needs to have accurate time whether that's for trading defense Medical purposes, whatever it is the ultimately they need to know that the clocks that they're using for their systems are correct So the attack surface of the device we looked at if you imagine it was a typical 1u system It had USB. It had serial. I had network ports It has some buttons on the front which would quite interesting It had a management network. It had a production network and it has some authorized applications that would allow you to configure the time server Probably I'd say the management interfaces weren't exactly required But if you're buying somebody off the shelf these days people expect to have a fluffy interface So in terms of physical attack surface what we looked at first of all we looked at USB That had a number of interesting properties. It took updates It allowed configurations to occur And it potentially could be used for peripherals if you think about it. It's as you can see there Montevista Linux Ultimately, it's just a standard USB implementation on Linux so physical we looked at What the serial devices were doing at boot time and whether they allowed console access We didn't see anything particularly interesting during boot We have seen devices where for example it's leaked information that allowed us to ascertain how the SLR implementation is functioning And indeed on one particular system We actually managed to see the seat that was being used to see the SLR Which was kind of quite useful when we came to exploit it in this instance. Nothing particularly interesting during boot In terms of console access there was some however In terms of network access there were two ports LAN 1 and LAN 2 LAN 1. I think was the External port and LAN 2 was the management port Different services on both sides. That was actually quite good I mean typically we often see that the same services are present on all interfaces for once They'd actually locked it down. We'll discuss what the attack surface actually looked like in a couple of slides time But it was better than we'd have expected So physical buttons Most devices one you have type will have some kind of buttons on the front Even if it's just to allow you to see the time or to locate the device etc In this particular instance, it gave us the ability to change some settings make backups And indeed it had the property whereby you could set a pin which would lock lock it Unfortunately, that was a kind of a case of it was almost like a physical lock If you didn't remember to lock it it wasn't locked And as you can see based from the configuration dumps because it wasn't locks on the device We were looking at we're actually able to extract the pin which obviously meant that we could then play with play with the interface a bit more detail So logical there was a web interface, which I think Mike's going to talk about in a second There was SSH there was SNMP and it was Postgres Postgres is particularly interesting and Michael explained why in a second Yeah, if you wouldn't necessarily expected to see Postgres listening on the network It's somewhat inadvisable. However in this particular case it was there Yeah, so on the management network there was a web interface as you often find That's what it looks like Like something from the 1990s. We have to blame Jacob Stanzer for this. He's clearly very proud of it His name is everywhere The source code of every page built in credentials as well. We'll come across those later But yeah, that's a rough thing of what it looks like if you go on showdown you can find a few of them about but don't do that Yeah, so it was really good it was fantastic that's that's what we've got there all of these were trivial to exploit There was literally no mitigation against anything So yeah, the list to be honest who cares there's unauthenticated remote route there There's proof of concept on our site or which is literally just a curl command So if you come across one just you're on it. You've done it owned moved on Yeah, it was a little bit of my first PHP application, which is a bit of a shame for a device that ultimately only has one function to tell the time Yeah, semi-colon ID. Oh SSH The SSH implementation was slightly different from what you may have expected if you played around with the UNIX box in the past They had a customized shell But it turns out having done a little bit of digging into how the shell binary works that we could get into an engineering mode And in fact if you see the screen, I'm not sure that you will be able to but essentially we've highlighted There's actually command injection into the into the shell So the shell has a lockdown set of commands you're allowed to run It does include copy so it's not very well locked down But it does have copy but the way that it constructs for example the copy command the way it constructs the IF config Etc. Etc. Etc. Etc means that if you pass in a pass in a semi-colon and a value of your choice you can trivially get command execution and From that you can actually get root because the sudo configuration is itself pretty terrible Copy is allowed to be run as root and it doesn't require a password You know ultimately from a command interface, I guess you might expect that Bear in mind that the back configuration was being applied to the web server perhaps It's difficult. They wanted to run things as root and the moment you want to run things as root You're pretty much boned. So this is the shell breakout. We were talking about so root and engineering That was the bit we extracted from IDA. That was the bit that allowed us to get into the engineering mode Sys took us into a menu that was the system commands as you can see we've got both CP and IF config Both of those ultimately if you have a semi-colon and then slash bin slash batch or wherever Will allow you to execute commands of your choice Yeah, I'm looking at SNMP. There wasn't any right access but with public you could just pull off anything you liked So there's lots of lovely information Kind of a useful attempt to exploit it I don't think we looked as if there were any custom MIPS we couldn't find any or certainly not any that were of any real interest It's something that if you're looking at Embedded devices you could probably be looking for because quite often you'll find that they have features that are part of the standard OID set So we mentioned the Postgres was available over the network And it became a Parry why once we'd compromised the device and we've got the ability to look at things in a bit more detail It turns out that part of the management interface for the web Actually use the Java app look to draw some pretty charts that demonstrated what the statistics on the device will like it Give a moment in time Turns out if you do compile the Java app look the credentials were in there In fact Jake and Sanders credentials were in there and it turns out that it was directly connected back over Postgres, I mean you've got a perfectly good web server. You know, why would you want to use it? Interestingly they also did have another database server on there. They also firebird on there They clearly weren't people that were thinking about minimizing their attack surface in any way shape or form, but um, yeah a Lesson about how not to do things So next we come to NTP. NTP was the only service that was actually listing on the production network That's quite good. I suppose Turns out late NTP really only have one thing to do right make sure that can't be used for denial of service that you can't essentially Send it send in a packet to it, which it then then it then mirrors off to your original target Turns out in this case, they've got that run You know, this is basically what I want one a one if you're running an NTP server You should be aware of this and they've left them on less command enabled So it's safe to say we own the box We own the box pretty quickly We actually got into the box in the first instance through the original dumping of the configuration from the buttons on the front From that we essentially got a copy of ETC, which is how it backs up the configuration We modified that and then re-uploaded it I think it's really worse be stick pointing out the default credentials and their web interface Yeah, the password was already in my John profile I'm don't think this is the first time these have been owned Um, so yeah, so we got it. We got into it fairly trivially And we started to have a look at how the OS have been configured As I said, it was Montevideo Linux at the base But obviously they've done quite a lot of tweaking to make it how they wanted it for an NTP server And we found two good instances of interesting bugs at a Unix level Firstly, we found world-rightable files So that anybody that had access that shell user even if they couldn't get through soon as I could have they could potentially written written files And we found obviously the insecure pseudo configuration itself, which allowed us to Break out and get through I guess Ultimately who cares which I guess is probably the most important bit of this The client clearly cares Perhaps not as much as we'd have expected because their intention is actually not to plug the management interface in at all So they weren't too fast about the web server because yeah, they're never gonna have it physically connected to any copper All of us this particular device whilst I can't say who it was for I can at least say that it was being used to synchronize Domestic devices across the UK So ultimately you can imagine that it if those devices are time sensitive that they need a clock Possibly having an inaccurate clock across the entire UK may have some implications And finally this guy so this guy appears on a mailing list that I'm a member of There may be people up that here at EMF camp will know this main list But anyway, there's a discussion about what would be a good NTP server to to use for an ISP and someone mentioned Symmetricom Curiously, they didn't have good words to say about it We can certainly agree with them. We had the device randomly reboot three or four times Whilst we're working on it for no no apparent reason not even the case that we were necessarily doing anything offensive It did just seem to like to reboot Yeah, there we go Any questions? Did we open the box up? No, unfortunately our client wasn't willing to let us open the box They were intending to put this on the network as I say they have intended not to put the management interface on anyway So they they wouldn't let us open it up. Had they done so we probably would have gone after the usual things But it was ultimately just a PC. So it's gonna be the same attack surfaces. You'd find in your desktop or your laptop So probably not as interesting as it might have been if it had been for example armor mips So the question was does this represent state of art in the time server arena? Well, I think state of art in your time server arena is probably just to install your own time server Red Hat or Debbie and or whatever else In terms of embedded devices, I think it's pretty representative of the kinds of things we see Most of the stuff we do is for large commercial Clients or large governmental clients So most of the stuff we see is quite big eye and embedded stuff You know, maybe fridge-sized devices on common for us to look at and I think yeah The vulnerabilities will vary between vendors and devices depending on the function, but ultimately they'll all have similar kinds of bugs No more questions. Well, thank you very much. Enjoy the rest of the AMF camp


that Michael Brown namespace lockdown. We're good. All right, the most important piece of infrastructure is hosts. So a big part of React is creating this ring and need a few hosts to create that ring. And that ring is simply just made up of partitions. So you break up that ring into partitions and then React spreads those partitions evenly amongst the hosts. So for instance, I can't cover it a little bit. But if you have 128 partitions and eight hosts, you'll end up with 16 partitions per host. All right, so now we have a ring. We have partitions. What's happening with your data behind the scenes? So by default, the default value is to replicate each piece of data that we store three times. And that ensures the resiliency throughout the cluster. So if Brad's walking by our server rack, stills a big gulp on one of our React hosts. It goes down. The cluster still functions. And it's with no manual intervention. You can access all this data through HTTP or Google Protocol Buffers, which are pretty cool. Another huge feature that we really enjoy and use a lot of is the Post Commit Hook, which allows you to integrate a function into the React database. And whenever you store a record on a particular bucket, you can fire that function. So how we use that is we use the Post Commit Hook to send data to the mirror, which is our whitelisting application, and then the Kafka. All right, so you're still not impressed? You want a little bit more. All right, so React is multi-cluster, as Niaja mentioned. Going in between and moving data from different locations is not a problem. So think of your data as lettuce, iceberg lettuce. So there's two ways that React manages this. One is real-time replication. The other is full sync replication. So real-time replication is the process of just moving new changes in data to a new cluster. This is really nice. This is how you ensure data is synchronous across all the clusters. The other type is full sync replication. This is the historical data that you want to transfer. And we initially, when we first set this up, we used it as a way to provide disaster recovery scenarios.  And so if anything should happen, we're safe. Great high availability. The other great thing about full sync replication is it can go multiple ways. So you can have a data center in California, Virginia, and Europe all sharing, all actively writing to each other. And data is here. So are we in sync? That's actually 98 degrees. But and I'm just here to say, in React, we trust. Oh.


Hello, thank you for joining me today. I'm out for a walk in the Warwickshire Countryside. I'm just walking along this country lane and what we're going to do in today's video We're going to go and have a look at the longest cast-iron aqueduct there is and it also happens to go Not only over a railway, but also over a Disused railway so it should be quite exciting. Oh, and we're expecting a steam train. So it's going to be quite a fun video Here it is. That is the Edstone aqueduct You can see it's stretching across the valley takes the strapped upon Avon canal over well There's a river just here on the other side of the road. We'll have a look as soon as this cast bust It's a tributary of the river And then it just takes the canal over the wider valley. So if we have a look here Here's our first bit of water in the video There you go. I can't see this river has a name if you're local and you know do you tell me that It's rather much just a tributary of the river on As we can see the aqueducts fairly obvious not so obvious, but just along here Along is the track bed of the old old sister branch. So a railway line run along there, but it's been closed quite a while now So what we're going to do will go up onto the aqueduct We should be able to see the railway track bed should be a bit more obvious when we're up then as I said There's also a current railway line running underneath it That is the North War actually a line-to-line from Stratford upon Avon up towards Tisley Which does have quite a few steam trains on them on most of them are run by vintage trains today steam train is The railway touring companies Stratford flyer and it's going to be making its return journey back to Manchester expecting to see a flight in five So Under the aqueducts see it above us. We've got to go up Here we go up These steps and then we're going to cross it. So I'm really quite excited It's really quite an interesting thing to do.  Let's go across it already. You're looking quite exciting because The path dips down to the bottom of the app So you're gonna have the water at a different level. So nearly always when you walk beside canals This is how you walk by canals even on aqueducts Interesting that there's a plaque here from the transport trust the Edstone aqueduct Yes, it said it Opened in 1816 Let's go across the aqueduct It's really quite exciting. It just madly stretches out over the valley There are a couple of other aqueducts on on this canal, but I don't think they're quite as impressive as this look at it now this is Having the water like I say the water is in a trough. So it feels like You know, it feels like I could get a remote control boat and In here, I don't know if you're supposed to well, there's not many barges about so Probably could get away with it whether you're supposed to or not. I don't know but it does sound like fun. It just Feels sort of surreal walking with water at this level next to you It just doesn't sort of feel normal. So that is the road, which we've just walked along beside as I said, there's a river Down there also says stream. It seems to be an unnamed stream down below us now this here When these trees are this is the track bed of the old old sister branch. So that's closed and then Through the trees we can see some rail lines Now as we step out to be above the railway lines, interestingly Gives the impression Well, as you can see the track split Don't think there was ever a station here. I think it's purely the Yeah, you can just see show you this way You can just see There is a brick pillar there. So I just don't like putting a camera too close to the edge because if I drop it I probably won't ever get it back So there is a brick pillar basically right between the two rail lines. So that is why Yeah, we That is why the tracks split slightly Apparently below here. There's a pipe And steam locomotives Used to sometimes take on water from the canal above I don't suppose they still can whether the pipe still there or not It'd be interesting to have seen a cabaret of this line and you might be able to see it but and They used to take water and allegedly A fish once found its way down and into the boiler of the steam locomotives There was that Thomas the tank engine story called Thomas goes fishing where he always said he wanted to go fishing and they The water pump was out of water. So when they were stopped on a viaduct over a river They they used a bucket to get fish and then suddenly Thomas. I remember the lines Thomas felt a pain in his boiler and then they stopped and discovered There were fish blocking the feed pipe and the driver and fireman Had a nice Picnic supper of fish and chips whether that happened here. I don't know but that's possibly where the Revendor We've got the name from right. I'm going to wait here and see this steam train pass through So following the steam train there we have the class 172s always quite novel, isn't it seeing trains Pass underneath water because wherever you go on a train you quite often look down over water But we can't really look up to water but it's just novel seeing trains pass underneath water Up there. There's the junction with the other line the line runs across there To Hatton so the steam train used that line to turn on the Hatton triangle If you want to see the rest of what the steam train was doing today have a look at Lincoln's screen now I was chasing the steam train so I saw it in a few locations We now seem to be we're now going over this driveway And up which is just here I can see a lock further along I believe at the next step product Towards Woodson Whirlburn because it's a great night next railway station that way I don't know if I'm going to do that today spring day see the daffodils All right, let's just look at that looking back such a great view if Maybe one day I could see the steam train here The problem is in the summer all of those trees will be grown up and you wouldn't really see it if they cut all those trees down Um, that would look fantastic. It'd be a really great place to stand here And watch the steam train pass by and you'd actually you know get it going under the water. So that that's all quite exciting and what we got Not sure if that is a footpath One thing is if we go down here Um, we should be able to get a good look at the aqueduct even if I can't go anywhere when I get to So it's fantastic I've been to other aqueducts in the past. Um, one of my favourites the pontisacchi aqueduct I did want to do a video where I walked across that aqueduct and I've never held my camera so hard Did that one so we come down to here and here we are with a fantastic view of the edstone aqueduct I hope you enjoyed this video. Thank you very much for watching Please do feel free to like share comment and subscribe and from the edstone aqueduct


effectual marketing. So here we would see that what is this effectual marketing approach and how it differentiates itself from the traditional marketing. Market and product boundaries challenged by new technologies and it discovered the new delineation. The existing market, through the traditional approach we study, but in effectual marketing we have to keep in mind that the new technology has come and the new products are coming based on that technology and then more will come. So that will disturb the existing nomenclature of the market. Now the boundaries of that product and now the infrastructure of that market will probably change. Priorities will change, choices will change, and it is also possible that the existing market, the products market will change. And there is a new technology, for example, VCRs were there, then DVD players came, so now where are they? So that had been completely changed, people are the same, market is the same, but all the flow of the market has been changed, so the product competing with each other, they left it and instead of that technology based new products came. So that discovered the new delineation, new techniques and new segments, which new technology will come, it will create new segments. So the effectual marketing has to keep in mind that the market for a specific solution is going to be revolutionized because new solution is coming through the new technology. So what is the focus? Focus is getting established, the product we are bringing through that product we can establish ourselves in the market. And the emphasis is explore and build sport, that you explore your market through your product, send it to people, educate people and support them in adopting that product, educate them. Then develop a network and infrastructure, so the related boss are peripheries, you are bringing a new product, there can be a lot of things related to that, there is after sale, there is installation, so you will focus on all those things and develop a network and infrastructure. What type of tools effectual marketing would be using, that it will probe the market, that the market is prepared to adopt a new technology, missionary selling of technology and applications, although new technology is always very costly, but if you see that it will be difficult to sell it, so sometimes this technology or application can be freely used for customers. Why? Because once the customer adopts a new technology or a new application then he becomes used to. So that particular new technology, new service, new application the difference is known from those applications that he was already using. Then the barriers between infrastructure, mindset, and convenience are also involved in effectual marketing. And what are the mode? Mode could be effectuation, effectuation means you bring a product, try the product, improve the product, try it again, so on a gradual basis, finding out the market, launching your product, updating it, upgrading it, and then bringing into the market again and again. Repetition and constant leveraging of opportunities in the environment and accept coincidence. Because the market is always dynamic, you accept the new products as you like, and you live in the sense that the market is your technology-based product, and if you don't get profit in short run, or you are not able to sell your product, you may let them use it because when they would use it, you can charge them later on, or you can get it sponsored from other companies who are interested to communicate with the customers using your technology, your product, your service.


Hey, welcome back everybody. Jeff Frick here with theCUBE. We are live in Moscone Center with 40,000 security experts at the RSA conference. The biggest conference of its size. One of the biggest tech conferences in the industry. Second, maybe only the Salesforce and Oracle. So there's a lot of people here, a lot of action. We're excited to be joined by the president of RSA, Rohit Guy. Welcome. Thank you, thank you. So first thing, kind of impressions of the show. We were here briefly last year. This thing was 34,000. This year they're saying it's 40,000. Yeah, look, RSA has the great burden and privilege of bringing the cybersecurity community together. And it's a true testimonial to the caliber of the people that this year we are able to attract 40,000 people. We have almost 500 plus, 550 something, I believe, vendors and exhibitors. And the level of the conversation in terms of the CISOs from different countries, the CISOs from all the mega corporations, public sector participants, the entire gamut of cybersecurity stakeholders are here today. Yeah, it's an interesting kind of take because on one hand you think there's so many people. But as a few people have mentioned earlier, really they're all here. So on the grand scheme of things, it's not that many people. It's really this group of people and they all know each other. People are all giving each other hugs as they're walking up and down the booth. So this really is it. This is a community and it's a tight knit community. It's all the good guys assembling together to figure out what to do about the bad guys. I know, just hope they all don't go to the bad side at the same time, we'll be in trouble. One of the things that comes up over and over at tech conferences specifically and here too is the ecosystem. Nobody can do it alone. You've got to have an ecosystem and there's a lot of conversations about sharing information more broadly, more automated, faster, really an important part of the strategy to fight the bad guys. Absolutely, in fact that was a recurring theme from all the keynote speakers this morning, the notion of working together. The only shot we have of beating the bad guys is if you collaborate and share the information that we have and go at it together. So the ecosystem is super important to your point. Yeah, so what are some of the kind of, for the people that aren't here, kind of the key theme, some of the big announcements that RSA is making. I know the press release feed is full this morning but what are you guys excited about for this year? What I'm most excited about is a new approach and here's the way I tee it up. You know, the bad guys are getting really good, right? Every company is going digital and digital companies are really juicy targets. We don't have enough good guys to fight on our behalf, enough trained good guys, which means you have to bring technology to assist you. So all the things like advanced artificial intelligence, machine learning, data science, all those things are great capabilities but the reality is we have to realize the bad guys have all the same technology that we do. So it's not a technology problem anymore. We have to play to our strengths, play to our advantage. So this new approach, we call it business driven security which means take the security incidents and apply business context to it, enabling customers to take command of their cyber risk and secure and protect what matters most. So it's a sense of prioritization and if we do that successfully, then we are able to keep the bad guys, they're already inside the door, but we can curtail the damage and we can detect the breaches and respond in a much more expedient manner. Right, always the problems with an arms race, right? Both people have to save them out of weapons. So it's how do you use those weapons? It's how do you use the weapons? More effectively. Absolutely and the context is super important. If you can apply business context to the way you apply that information and those tools, that's how you win. Now another thing that keeps coming up is kind of state sponsored threats which are different than maybe kind of commercially or just kind of activists. That's really changing the game because the resources behind those folks significantly bigger. Indeed, so there's new kind of bad guys like the nation state threat actors and their objectives are totally different, right? Their objective is not just to steal data but to tamper with data and change the conversations as we saw in the case of the election, Lucia, the presidential elections, by tampering data you can actually shift conversations and influence outcomes. So it's a whole new ball game in terms of the new types of threats and new types of threat actors like nation states who are getting into the game. Yeah, I thought one of the interesting points that came up earlier in the keynote today was I think they called it salting or spiking the algorithm with intentional bad data to send the algorithm on a path in which it really shouldn't go. Exactly, exactly. And the way you respond to that is again back to my point around business driven security. If you have data and if you understand the business context around how that data ought to be used then you're able to protect it and secure it and make sure it doesn't get weaponized or used against you. Right, right. Another theme that came up in another session I attended is kind of the unique role that companies are in versus the government. Because even if there is state sponsored issues going on because many of the companies are saying included operate globally across a number of geos, they potentially have even more data, different data to fight the threat than any one government does on its own. Indeed, and this is where sharing of information is vital. And along those lines, RSA is excited to announce this year that we've joined the Cyber Threat Alliance which is a consortium of private companies who have decided that it's not the threat intel data, it's how you use it that's going to be the differentiating factor. So in the spirit and way of working together we are sharing threat data with each other so that we can respond to the bad guys. Right, so give me the last word. It's February 14th, Happy Valentine's Day. Started the new year. What are some of your priorities as you look down the other road? What are we going to be talking about a year from now? It's things that are on your plate that you're really thinking about. So in the way of Valentine's Day I totally love cybersecurity, let me say that. And in terms of what we're looking forward to look, RSA is in the game to innovate and set the table and set the agenda for the cybersecurity market. We play the role of bringing the cybersecurity community together, but it's our innovation along the axis of business-driven security. We want to take that conversation, drive that into the industry because we believe without that we don't have a shot at meeting the bad guys. All right, well we're all rooting for you. And everybody else in this building. All right, I'm Jeff, you're watching theCUBE live from RSA 2017 in downtown San Francisco. Thanks for watching. Thank you.


going to be discussing here at a high level. Dr. Wang. Okay, yes, thank you very much, Daniel, for the introduction and thanks Dave and everyone for organizing this meeting. So it's my pleasure to share some of my research visiting for the tolerance protocols and in particular impossible to apply this to published fabrics. Can you guys see my screen? Okay, thank you very much, okay. So I will talk about, so my presentation will be a briefly three parts, what's BFT introduction, and then I will talk about some industry popular, the most popular deployed the BFT protocols for Ethereum and Polkadot, HTTTC. And then I will talk about why we design BDOS and how can we, what kind of implementation we have and how can we apply this to published fabrics, okay. So that's my three part. I will break briefly about this, but I will not go into details. I think I'm sure all of you know that the BFT protocol for computer science was introduced in 1980s for distributed computer system or for tolerance computing, okay. It's a traditional, a business agreement, it's a traditional process of the protocols in military protocols in 2000 years ago, but right now we apply that to computer science, okay. So theoretically after the 1980s introduction to computer science, we know that if there are two bad guys, of course they are malicious, they can't do all things, try to crash the protocol. If there are two bad guys, we have to have a 3T plus one total number of participants to make a thing that we can defeat this T bad guy. So we get a rich consensus. But the most important, these theoretical results, but the most important things about this assumption is that we assume that they are, for every two participants, they have a direct communication channel as the added channel has to be reliable. So that's a very, very strong requirement. Many people when you talk about BFT protocols, they overlook those important things because a communication channel, if not reliable is a synchronous, some things really bad things could happen. I will show you some examples about this theorem. So that's important, okay. So that means if we try to design a BFT protocol, we have to think about the assumption about the communication channel. In particular for Hyperledge Fabrica, we think about the communication channel as an interlet. An interlet is not 100% reliable, okay. So interlet is an open network. The derived service attack, message reordering attack, all these kinds of things could happen. As a consequence, of course, some message gets dropped and some message could get reordered. That's very important. Reordering means if I deliver a message before you, post a message before you, but the interlet could make your message to arrive first. And that totally difference could just crash the BFT protocols. So now we think about, of course, we wanted to design some BFT protocol and we wanted to assume that we use the interlet, okay. What's the model for the interlet? So we can think about two kinds of model for interlet. The first kind is called a synchronous network. That means every person tried to broadcasting his message until the other guy received. But then, of course, we do not guarantee when the message received. If I send you an email today, you may receive that tomorrow or you may receive that in next year. That's all possible, okay. So we assume that interlet will delete. So that's a synchronous network model. That's of course, it's based on assumptions. If our protocol could be secure in a synchronous network, that's perfectly okay because the only assumption we make is that if I send a message, you will receive that. I do not care when you receive that. One year later or two years later, that's fine. But that's too strange. So now we think about a model that is very hard to design a protocol that's secure in a synchronous network. So now we think about a partial synchronous network. So that's a common some model that most people will take if you try to design a secure network protocol or based on interlet. That means that our interlet could be very bad for some time period for five seconds or for five minutes. We do not know when the little work will be good. And then after that, little work will be good for some time period. We do not know how long it will be good. But anyway, so we assume that our interlet is performed in such kind of a scenarios. The little work is becoming very bad. Your message is getting lost. Everything is getting lost. As then it become good. As then it become bad again, it become good. So we wanted to design a PFD protocol that should be secure in this kind of network environment, okay? So that's a bad good, bad good. That's alternative environment. So also of course, if we design a consensus protocol, we have to require three requirements. Safety. Safety means no fork. If you talk about consensus or public fabric, a blockchain, that means we assume that no fork will ever happen, okay? We do not want to have a fork over the blockchain. Our leaflets, the second protocol is called requirements called leaflets or accumulations. That basically means we next block will be produced at some time. We do not want a data log. A data log means the blockchain will stop at certain point.  We do not want that happen. So we want to make sure that the protocol will continue. If late work become good at some point, the next block will be continually because it should be produced. That's the basic requirement. Long trivial, the third property of the long trivial means you can always produce the empty block. So without a content, that's trivial. But we want a blockchain that has a consensus that means the next block will be produced at some time and that block is not empty and also no fork shows up. That's the requirements for us to design BFT protocol or consensus for the blockchain. Of course, we assume that these kinds, three kinds of things will happen if late work become good and late work become bad in some points, okay? Oh, what's that? No, I think some guy tried to control a screen. That's something, is something wrong? Okay, so, okay, so, okay, I'm sorry. So someone tried to control a screen, okay? So let's talk about some protocols like this. We know that Ethereum has converted to proof of stake just in this year. And they use the BFT protocol to capture friendly finality gadget, FFT, okay? Essentially, they're based on a block. So the block is of course, everyone can produce these kinds of blocks, like forks. Forks, all these kinds of tree will happen. But we want to make sure the consensus layer want to make sure choose the one path. Our blockchain will only one path. In order to achieve that, so everyone who has a host, they can try to vote, okay? And vote means you cannot vote in this area. So if this is the next block, you cannot vote this and vote this. If you vote that, you will be slashed. Your stake will be taken back. And you cannot vote this. If you can vote this, and you can vote this as a straight subset, you cannot do that. That's only two requirements. As in this Ethereum blockchain, you do not, it's invalid vote. Any other kind of vote will be valid. Or you are not allowed to do this kind of vote. If you do vote this, your deposit will be slashed, okay? So that's formally the specific part in this way.  And we want to vote to find the one, the valid block chains we want this. In order for this chain to be valid from all the folks, we have a super majority vote. Super majority vote means if we have a 3T plus one participants, you have, we have to obtain 2T plus one vote for every name, okay? So that's it. So that's a very simple PISAT-info tolerance protocol for Ethereum. But the important things as I've mentioned, there are some things I'm using in that kind of protocols. There is no specific network assignments. What kind of, no specific little assignments, okay? So what's the little models that you want to talk about? They want to be asynchronous, but that's not happening, okay? So anyway, so there are some kinds of things. There are many, many things that are not, they are not available there as a missing there.  And my only assumption that in order for me, if we want to, if we want to attack this protocol, how can we do it? The only assumption I will make is that I can choose a message delivery system. That means essentially, assume that I'm the guy can provide internet service to, for some, for US government, for, I'm not US government, for US customers. And I have access to infrastructure. I can read all the message. If your message posted early, but I can make that your message appear in a second. If I can only do that kind of reordering, I can make the Ethereum just completely crash. Crash means didn't lock. How can I do that? So assume that A is the last finalized block. So that means it's finalized already. And then we try to, B is also the next block, okay? No, if I got some, because everyone tried to produce blocks, and C and D are two partition blocks that have been produced after B. So that means that to be full. As the committee needed to reward, which one, the BC we should take or BD we'll take. But the bad guy, because it controls the network environment, I can arrange C and D to be delivered at a different time to different nodes. That's our assumption. The bad guy controls the message to deliver the audio system. If I can control that, I can make that cheap. The C will arrive, cheap good guys first. And the D will arrive at a cheap plus one good guys. And then the bad guy will run deliver. At the end, so we will, C will get a cheap plus one volts. A D will get a cheap plus one volts. That means no one can make a decision on that. No, that means they have to continue again. And then it means that C and D, E is produced at next block of C and F is produced at next block of C. Again, I can arrange E at F to be delivered to the nodes at different times. After that, I will get that E and D will arrive. This kind of process can continue forever and no one who knows the Ethereum network can never produce next block. That means they don't, okay? So that means on this assumption. So we want a good BFG protocol should not allow this kind of things happen because we can assume that the bad guys can do all kinds of things, okay? So because the FFG is not perfect for Ethereum, they are trying to develop a next generation of the consensus protocols for the Ethereum block chains. And that's called the cast the friendly binary consensus or FBC. I will not go into details on this, but the idea is simple. If I receive some kind of message, I will not make a decision. I think which block has high probability to be finalized in next, as they avoid. I think I have a function called prediction function or score function. Then I try to vote for the next block and then after this kind of vote, I can make a decision. This is my estimate for next block, okay? If I think zero has high probability as one, I will vote for zero. If one has high probability, I will vote for one. So that's the next potential generation for the... So next potential generation for the... Can you hear? I think something's wrong, right? No? Can you try to share? No, who can hear you? You can hear me, right? Yeah, you're... Okay, okay. I see, I'll close off. I'll turn. Can you share your screen? Oh, okay. My screen is shared. Yeah, can you try to share your screen again? Oh, why is the block, someone keep me out, right? Okay, yeah, thank you. Okay, so essentially in the next generation of the Ethereum BFT protocol, they think, oh, why is there something? Okay. So essentially, if you think, oh, I think someone controls my screen, right? Okay, so, okay, anyway. So if this happens, we try to see that they will predict A or they will predict based on the prediction, I would vote for zero or one. That's as they... After some kind of decision, they will make a decision which one they will use for the next final block. But we can show that I easily see that I can show that if you can do a message reordering on the infrastructure level, try to reorder the message that has been produced for the Ethereum network. So essentially reordering means if the next block is produced, different people produce different blocks. And then we try to... I can schedule which block to arrive to reach which person first or second. If I can do that, I can show a similar attack that Ethereum can never reach the next block, can never produce the next block. So we have tried, based on this, that means it's not secure. We have designed some kind of protocols based on blockchain reliable protocols in the network. We show that this could be achieved, could be make the Ethereum block secure if they want to use our strategy to do that. But that's not to some extent. They have a different network model. I will not go into that. And I have done some analysis on many, many different protocols for the blockchain in the cryptocurrency in particular. So I'm sure the ground part as a polka dot is a lot of popular cryptocurrency we know as their PFT protocol is ground part. And they use different models to define that. I will not go into the details of the protocol, but I can share you that I have two kinds of attacks. I can do a similar attack by reordering message. If the two blocks are produced for next partition block, I can make that one block arrive at certain person at first or so one protocol reach another person some other nodes first. If I can try to do a schedule on that, I can make sure that the ground part will never produce the next block as they did not there. So I have two kinds of attacks I will not go into details, okay? So now let's talk about, so that's the different things I saw that if you try to analyze many of the cryptocurrency or blockchain consensus protocol, you will find out you can notch a lot of attacks and it certainly means they will not reach the three requirements, safety combination of these kinds of properties. So we want to make sure why we do not use these best practices in the academic to try to design a protocol that is theoretically secure and I have a mathematical proof, no matter what kind of attack you do, you can reordering the message on the interlator, you can do any kind of attacks. I can still, the only requirements for my protocol to work is that interlator will be good at some period and will be bad at some period. So if the interlator becomes synchronized at some period for some time period, our protocol will work. So that's only requirements that we have and all other things could be mathematically be proven that are secure. So let me try to talk about BTOS protocol. BTOS protocol is essentially it's a blockchain version of the DLS protocol. DLS, I'm sure I'm not, you may or may not know that DLS is one of the first protocol in our history based on the partial synchronized networks. It was designed by three persons, DLS and three laters, okay? That's they got a lot of the tuning award as some of some research. So these are just a blockchain version of the most famous DLS protocol. So I will wish I'm introducing to the half-legged fabric, okay? So first I want to just to give an example use this example to show how BTOS protocol works.  But I think if you can understand my, this four notes examples, you will understand how BTOS works, okay? So we have assumed that the four guys, of course this kills each of this bad guy but of course it's a bad guy, only he knows he's bad guy. No one else knows that. In the first round, I assume that the mini is a lead dog. We have a lead rotation dog. Everyone will send the mini, what kind of block they have.  This guy, Miki said, okay, I have a B3. As this kills agency dog, I have a B4. I need a mini C-dog, I have a B3. And because no one, you said that B3 get the two volts, B4 get them two volts. That means there's no super majority. I said, okay, Miki said, okay, I cannot reach an agreement. I cannot make a decision on the consensus. So, but the best block I have is B4. So I put post message, broadcast message called B4 to everyone, okay? So that's all I can do. I cannot make a decision, but I know from my knowledge right now, I know that B4 is the best block we can work on. After that, because the meeting's job is done, so this B4 message becomes a leader, okay? Then I mean everything, a voting process will restart. So everyone we are seeing that here's the best block to the B4 message, okay? So Miki has B4, a B4 message has B4, and Miki has a B4. And then of course, this guy, always a bad guy. He tried to use all the products. He tried to send B5, no. But this time, he got three good messages. That's the super majority, okay? Three B4s. So even B5 is much better than B4, but we want to reach agreement on the majority. Well, we do not care about this best block there. So that means because, okay, the big message said, okay, I found a super majority agreement on B4. So he asked everyone to knock that. On knock that, you can always think about this. In our real society, we all think let me put this B4 on ballot. So let's put on ballot means in next step, you cannot vote anything outside the ballot. You can only vote the blocks are put on the ballot, okay? That B4, knock that. After knock, that means let's work on this ballot system model. B4, everyone will commit or something, okay? So these good guys will commit B4, B4, B4. But this is bad guy, he will commit something different, B3. But anyway, for this, because everyone can get a super majority for B3 or B4 are committed, okay? That means the baby master is a good, good guy. We have very, very good news. So B4 has been unanimously, not unanimously, has been approved by the super majority. So that means your broadcast decide B4. That means B4 will be our official next block. So that's how the system works. Now we say that if we have three participants, we cannot reach agreement, okay? Again, we have three participants, the baby master, this is a better guy become leader, okay? Everyone said, I give B3, I get B4. He said, I have a B3, B4. And then he said, okay, please knock this, let's put B3 on the ballot. He will tell us this guy put B4 on the ballot. He will send a different message to different guys. So that means he will think he will take on vote before B3, but he will meet for B3 before baby master. But he will vote for both B3 and B4 at the same time.  After that, he said ask the Mickey to decide on B3 and ask baby master to decide before because he can't decide both these things. And as you know that if we have only three participants, obviously, so this better guy can make the system work in such a way that Mickey and baby master, they are all good guys. But they agree, they think the next official block will be he will think B3 and he will think B4. That essentially means the system will not work. The system will not work. And we call the fall, that means the system does not work. So theoretically, so we have a very detailed implementation level description of the videos protocol. I will not go into details, but the principle is very similar to what I have described here, but it's mainly some things that try to glue this kind of details, mathematical details. We have to describe that in the mathematical detail and try to give a mathematical proof. So if you have an interest, you try to read the papers, but I will also go into detail about the description of the protocol. Next minute, let me try to do some kind of comparison analysis, compare our protocol with other protocols somewhere over here. PPFT, I tend to mean the liberal BFT, all the hot stuff, the liberal BFT is related to hot stuff, you know that. So we know that this method means this is a communication method we have done. And how many rounds do we have? You know that PPFT of course is that means, so this is a leader broadcast. So what's every step, who do you want? So this is a simple called the leader broadcast. This means all participants send a message to the leader. Leader try to hear, to hear you give the air. So that's how you use this symbol. And this means everyone try to broadcast. Everyone want to try to broadcast to everyone. So this is essentially PPFT, you see that it means first the leader broadcast, and then everyone broadcast, everyone broadcast. That's three steps, that's PPFT. And message communication tune plus, tune plus, tune square plus n, and n is a number of participants. And awesome to gain from me name. So this is 10 minute PPFT, similar to PPFT, but just a little different because this is a, you see that this is a reduce, this is a, there are some differences, PPFT. A liberal BFT or hot stuff, there are same steps. So it's not, so you can think of that as a mesh network. This is a star network. Star network means only a leader broadcast everyone send the message to leader. Is do we do not have one everyone broadcast to everyone? Because everyone broadcast to everyone, we will get a n square message communications. That's a lot. So that's why we, for this liberal PPFT or hot stuff PPFT or BDRS, we reduce the message communication by avoiding this everyone broadcast to everyone, okay? But we have four steps, but the liberal PPFT has seven steps. So that's an advantage of this. Of course, liberal PPFT, they try to achieve some kind of pipeline protocols. That may or may not happen or may not help. It really depends on people to compare that, okay? What's our advantage? But at least we can do that in four steps. We think that's a good luck. Our experiment, experience shows that that's good luck indeed, okay? So we have implemented this in the, using a good language or good program language. And the code will be available from micro GitHub or from the habillage lab, BDRS, lab of the GitHub, okay? So we have implemented different attack scenarios, message reordering, all different kind of attack scenarios and also delete the message. Some people do not malicious attack all these kinds of things. And our simulation says that with our simulation, we have done this in the Linux machines with 64 gigabytes of RAM as this kind of things. This is the configuration, it's called configurations. We know that if we have 20 nodes, it has 1.48 seconds to reach agreement. If we have 100 nodes, we need four seconds, 4.7 seconds to reach agreement. I can tell you that essentially, so that's important comparison to this. So why pipeline we may or may not work from Libre BFT that's advantage or not? Because the reason that we found out for the 4.7 seconds essentially, the major cost comes from the signature verification, okay? So it's not really about BFT protocol itself, DNA. The major complication comes from signature verification. No matter which protocol you use, the signature verification has to be done. So that's the major cost. But if we do not think about the message verification part, all the consensus can be done in one second. So that's, I think it's a very important if we try to deploy this in a blockchain, it's very important to say that what's the practical environment and what's the most expensive part and so that, okay? So, and also, so not the next, so we have, so this is a code has been, BDRS code, core consensus code has been tested and tried very carefully. So everything works perfectly, okay? So we wanted to show that, how can we try to integrate this into habliage, okay? There are two particular ways because right now the habliage fabric uses a raft consensus, okay? So we think about one particular easy solution could be, we try to repact the BDRS implementation to provide all the interface that the raft has such that it's easily or seamlessly to integrate habliage with BDRS. But that may not be the best solution. I think the best solution could be, we try to approach to, we try to directly try to write some interface to interface habliage fabric with BDRS, okay? So that's a petition of two, okay? So we want, right now we are looking for some volunteers who can contribute any kind of contribution strong welcome. So we can work on this as soon as possible, okay? So if you wanted to know the reference, I have all the reference available from the, that's the paper that you need. I think we have shared with you as this is a 2019 version of this early version of this, as they get hab implementation there, okay? So that's my discussion here. Certainly I wanted to emphasize that we have developed the BDRS protocol. That's, it's a blockchain version based on most famous DLS protocol. DLS protocol is the first ever protocol in our academic history that has been produced for the partial synchronous networks by three guys, bigger guys. I think it's three of the DLS, two of them has got plenty of water, okay? So it's a very good protocol, but we try to revise that to the blockchain so that it works with the blockchain. And it has a mathematical proof it works perfectly. And also our implementation experience shows that it's robust against all different attack scenarios. Protocol itself is a very good reliable, but the only expensive part is very significant verification. But for all kinds of consensus protocols, we have to think about, significant verification is mandatory. And it depends on how many nodes we have. Even if we have 100 nodes to do the consensus, we can reach a great, produced every block in five seconds, okay? In a very, very, our little simulation, we assume that traffic is from your pink country to US all across the globe, okay? So we delay all the delay model we build, okay? Okay, so that's all my presentation. Thank you very much. I think the next perhaps Ahmed will present and after that we can go to QACS or Daniel. So what's your? Yeah, thank you, Dr. Wang. Appreciate your presentation. I guess we'll save the Q&A at the end of this event and we'll pass the floor over to Ahmed. But before I do that, I do want to apologize to everyone about what happened earlier. This is the first time that it has actually ever happened to a hyper ledger event. David and I just spoke about it and it has not happened to us before and we're embarrassed about it that it happened but we'll take extra precautionary measures to make sure it doesn't happen again. So with that said, let me go ahead and go ahead and take some controls here. I'm going to make sure that no one is able to start their video and also going to make sure that no one can unmute themselves except for the presenter. So just give me one second here and I'll go ahead and do that. Ahmed, are you able to unmute yourself? Go ahead. Yeah. All right, floor is yours. Appreciate that. Thank you so much. We'll start quickly as we run out of the time. But to continue on the title of this presentation which is VFT consensus for blockchains and hyper ledger fabric, basically it's mean DLS for blockchains and DLS protocol for hyper ledger fabric. So in order to do that, let me just like to use the production relic for myself. My name is Ahmed Saleh. As Daniel said, I'm a senior sort of NGN3 tech lead with a whole delays. Also, I'm a PhD student working with Dr. Yong Wang at the University of North Carolina, Charlotte. Let's have some hands on cards. Run the protocol. I have all the commands that you need to run the protocol or for PDLS as standalone. We'll take more advanced work later on. So I already called the codes. Let me see the time. Yeah, I'm not gonna call it again. So basically I called it a work space. I bought it within the CMD and MuCon. Then we'll start just like spending some machine here. And we see how they communicate. So MuCon. If you wanna see how you can run the protocol, you can just pass the help flag to see the available commands and parameters that you can pass. For myself here, I'm just gonna pass the ID. I'll start with ID zero. And I will pass the lesson to specify the part that I want the protocol to run on. Let's just say zero. In the meantime, I wanna spend another machine. Sometimes when they get bashed, like it's not allow you to write, just like type preset to reset the session. Now, it's all the issue. It's recently, it's happened to me. Let's see one, let's see one, let's just say this one. Spend another machine about a click. You'll notice here, once you spend the machine, another second machine, the first machine, knowledge that also the new node is notifying you that it's joining the network. That's my share of the quick. I can share with you guys later on how we can contribute and make that success. So now we have like four machines spinning on that network, communicating among each other using the PDLS network. We'll see the rounds going on. Here's another test that we can run. But for the time being, I was planning to present it, but you already have it on the slide. Any other data they will share with you. Just go to the root folder of the consensus and you spend that comment. We'll keep them though, sure running while I'm continuing on the presentation. We'll be here real quick. Now I'm gonna talk about the BFT consensus for blockchains in general. We do have some implementation called PDLS chain. The code is in the PDLS organization which is far from Dr. Yong Wang as we create some organization for the PDLS itself. So people can far, can contribute. Also I put the implementation for you guys to give it a try. Basically it's on Gath network which is the implementation of the Ethereum network by default that count is locked. I put some various way to unlock that count using Gath or using the web three. I'm gonna jump to the second part which is the main purpose of this demo if we can get that success. So give it a try on Hyperledger Fabric to integrate the PDLS protocol. For us, David, after the real share, the PLS already being hosted on the Hyperledger lab. We contribute, there is, I create a couple of forks, the expected repos from Fabric that we think that we need to touch to integrate the PDLS to Hyperledger Fabric. Also there is a session open for the Fabric project on PDLS. And there's also a couple of issues that we believe this is like what we are really need to do as initial steps to integrate the PDLS Fabric. Discussion please feel free to add your awareness if you think what route that we need to take if you have the expertise on raft on Fabric, that will be awesome. The default of branch of the Fabric that get worked from Hyperledger Fabric which is 2.3, I name it's PLS release 2.3. Also there is another branch based on 2.4 since we have the getaway over there like I just like when I say take a step on the back to give it a try on 2.3 first. Discussion is up and running, issues bored also for you guys to pick or to add or responsibility. It's open so you can fork it on submit your requests. Also we do have PLS since this community call which is every other Thursday, the next one will be on 22nd. Go through the link on the chat. There's also Discord channel for PDLS on the Hyperledger Discord server as well. Let me send the link the chat for people for their concern to join the community call. And of course like you can contact me I will through also my contact information. So whoever like having the expertise and passion to contribute that project are welcome, everybody like really good opportunity. My email, my GitHub account, my LinkedIn account. I'm gonna hand the podium to Daniel to wrap up the sessions. Any question regarding PDLS, we're glad to have Professor Hongguang here. And thank you Hyperledger for your attention. Appreciate your attendance. Great. Thank you, Ahmed, appreciate it. For anyone who is wanting a copy of the presentation, please reach out to me directly and I can send you a copy over email, the PDF version of it. We're gonna open the floor up, we have about 10 minutes. We're gonna open the floor up to all the participants for any questions that they might have.  So yeah, please go ahead and jump in, ask your questions away. I know that there were some questions on the chat. So please go and verbally speak up if you want. Yes, thank you, Daniel. I saw a question, I think Peter has asked about how we try to scale to 1,000 nodes. We have nodes to be honest, but we can't, obviously we can't try that, but we, because we do all the simulation on a powerful computer, we have not done that. But you are welcome, we can do that, thank you. Okay, any other questions out there? Thank you, Larry, Taco raises his hand. Some question, can I unmute to him? I think there was a pretty good comment up there too from a Taco One player, or a Player One Taco. So let me go ahead and read this real quick. When there is a fall from communicator, is there a mechanism that either removes that communicator for an ever-increasing time in parentheses, resulting in some penalty, or slashing or even reducing the weight of that communication results? Not looking at the fact that leader is a bad actor. How does your system allow one agent to commit or transmit slash lot more than one choice at a time? Would it not be better if the system only allows one choice, even if it is the wrong one? Yes, I think so some of the, so of course we assume that the leader could be better guys, of course. If the leader is a better guy, no agreement would be reached, we have some, so that's interesting thing I can talk about is some academic papers, some discussion of PFT protocol. They talk about the wrong synchronization. They just assume the wrong synchronization is trivial. It's easy free, but if you check the liberal PFT, when they try to implement as a whole to stop liberal PFT, they find it's very challenging to do wrong synchronization. To be honest, the wrong synchronization is a lot of PFT protocols. So that means we have to make sure our implementation addresses the challenges, that you are right and so leader is bad. So he will be, after some wrong synchronization, after some time delay, he will fail and then we will transfer to the next leader. We assume that some leader will be good. It's always possible the leader is bad. And we assume that consecutive leader one, leader two, leader three, that could all be bad. And we hope that when the leader five is a good guy, a leader work is good, at that moment they will reach agreement. And we have a mathematical proof we can achieve that. Thank you for that. There's another question here. How many transactions per second did you observe when running performance evaluation? Do you have a formula for scaled time? Those are two set of questions. Yes, that's a transaction per second. That's a different topic because we only think about the consensus, okay? So if you try to talk about design block chain, the transact, or you can see that the transaction could be in which layer, layer two or layer one, and all you can see for that or not. So we do a lot of exactly see that, we do a lot of claim the transaction per second because it really depends on the block size and the computing power to verify all this block. So it's a, for different block chains that have different systems for that. But we can see that if we have, my picture show you that if we have 10 nodes and 100 nodes, that's how much time we can reach agreement. We assume that the transaction is verified by the block, by the block producers, okay? So, but I also also want to make sure to say that it's also where it depends on the signature verification process. Our experiment show that it's the most expensive part for the delay is not about the transaction. It's about the signature verify. If you have 1000 nodes, you have to verify 1000 signatures. How much tickets for you to do that? That's essentially the major bottlenecks for you to produce the consensus. So the consensus is not really from the block chain, BDOS protocol itself is, if the larger population it is, it comes from, you have, no matter which BDOS protocol you use, you have to verify all the signatures. That's, you cannot avoid that. So it depends on how fast your signature scheme it is. Thank you. Great, thank you so much. Any other questions? I guess we have one more question here. But you had a slide about integrating the library into fabric. So did you have any performance evaluation of the fabric integration or not? Not yet. We have a plan to integrate into your fabric here, but it's not functional yet. So we were not able to test that yet. Thank you. This is a contribution that we are willing from you Yakov to contribute to get that evaluation on the order of service. This was a good event. Any other questions? I feel like this question's kind of slowed down a little bit. Oh, okay. There's another question here from player one taco. Have you thought of multi-layer transactions, settlement separate from execution with a consensus finalized as block seal? Yes. That's a perfect, that's a very good question indeed. So I think so that really depends on the blockchain design. I think that we were thinking about consensus as what you have mentioned as a time at block sale. So that was, I think there are some cryptocurrency blockchains that are trying to do that. The data availability to separate the data availability at consensus. The role of consensus is essentially just to be a timestamp or a sale on the blocks. So in that case, because block transactions are at different layers. So it's only things are BTO as consensus protocol. The only time you need, how often you can finalize a block depends on how fast that you can verify all this 100 or 1000 signatures. So if you can verify signatures, the BTO as protocol itself takes minimal time in that part, thank you. Okay. Great. Is it okay if I ask him to contact me, Phil? Dr. Wang. Okay. There's some people trying to see if they can contact you directly. Is that okay? Can I provide your contact information? Sure. Feel free to share our information and information if someone want to volunteer to contribute. Thank you very much. Okay. I will provide your information separately to these members. Okay. Another question here, since we got a few more minutes, would it be possible to generate a master signature that would be generated when 1000 signatures and use that to speed zone transactions? Speed zone transactions equals a city and parentheses zone. Yes, that's, it really depends on what kind of crypto signatures we want to use. There are some very efficient ones, but it may not be popularly accepted by the community. So we, for the community, for hyperlinked fabric, I think we have already some kind of signature schemes right now. So we have to use that, unless we can change it to a different signature scheme. So, but the faster signature scheme, the better, okay, reduce that. But I think even right now, if I'm not sure of the hyperlinked fabric, normally we need homely blocks, homely nodes to do the consensus. If 100 is a bigger, is a normal size, I think five seconds. This scheme, that's fine. So, yeah, thank you. Oh, Moco, some are asking about similar to the Moco root tree. Yeah, that's good points also indeed. So, yeah, that's good. We have tried to do that, but the details can't be implemented, can't be optimized. If we want to use kind of pipeline ideas, that's what you're talking about in Moco root trees. In that case, my experience, let me share my experience, okay. My experience is that depending on this, so how often does the hyperlinked fabric have produced a fork? If the fork is produced very infrequently, then the Moco tree that come to the logic or pipeline could significantly improve the performance, the delay. So that means significantly. But if the fork is produced more frequently, the pipeline technology or Moco tree may not help because you have to deal with all these kind of forks. That pipeline will waste a lot of your time in implementation. Thank you. One last here. I read a paper about scaling that forgets about branches on a merkle. So that is that it is there, not explored by other nodes unless it is needed. Sort of like hidden map. Yeah, that's always possible. We have a lot of time on that around knowing that PTOA's protocol implemented. That's implementation-specific, optimization technology for the PTOA's. We have a lot to try that, but that's certainly be very important. If you like, we can contribute, we can have a discussion sometimes we can think about that work. Thank you very much. If you have more interesting, continue that kind of implementation with me. I think that I will post my contact information and also talk about the contact information. We can have some meetings, separate meetings to discuss specifically for that. Thank you. Okay. Well, we're right at the thought. Thank you everyone for joining. Appreciate all the good conversations, good input, feedback, and the questions. So it looks like everyone really enjoyed the event today. Thank you again to both speakers here, Dr. Wang and Ahmed. Thank you so much. And we will connect with you again next time. And Ahmed, Dr. Wang, you'd like to connect with you after the event. So there should be an invite coming your way shortly. Thank you very much. Thank you, Daniel, for organizing this. And thanks for all the audience who come to participate in this meeting. Thank you everyone. Thank you. Yeah. Thank you. Thank you. Thank you. All right, bye.