Hello there, real ones know what to comment. Welcome to the crib. So what's up guys? Welcome to my Brooklyn studio If you guys don't know who I am. My name is Johnny Ty. I'm a fashion content creator on YouTube and let's show you guys the place Okay, so here's the entryway as you can see life of a sneaker head slash fashion content creators a ridiculous amount of sneakers and I don't recommend it but This is the entryway. This is right here. It's actually the bathroom I'll show you guys that later because nobody cares about the bathroom. Here we go with the Coat rack there was a coat rack here But we threw it out and then we drilled into the wall because I learned how to Fix the holes fix drywall. I did some adult stuff But um, this is just a hand of coats the bags over here. We have the shelf as you can see This is these are all my stuffed animals I'm just kidding. These are all my girls. Yeah, these are my girlfriend's stuffed animals She grew up with these and they're very sentimental to her. She has her own dedicated space for these Um This is actually for my knees. I'm bringing it to you my my niece in Colorado. I shouldn't have dropped that Here's a soka. So I can see what's up So on the show if there's like little trinkets and stuff just so I can look like I know interior design There's like a jar of rocks that we got in Pennsylvania from a farm trip photos We've got the Dr. Dre album. This is actually my skateboard. You guys don't know I skateboard as well I'm not very good. We have a lot of cleaning stuff as well And here is all the camera gear Tripods mic stands camera bags and stuff like that on the bottom is all of a soka stuff So normally these are her toys all this would be spread out everywhere throughout the house But yeah, this is a no shoes house as you guys know if you guys see me Asian households No, she's no shoes in there So we have baby wipes for a soka whenever we go take her out for a walk whenever she comes back We just wipe her paws Okay, so welcome to the living room area This is a studio. So the whole place is my living room technically. This is a table I actually found this on the street right down the street actually some probably rich person Just didn't want this one man's trash is another man's treasure. So this is actually really cool This is a table you get at like West Elm or something like that you lift it up And now you have somewhat of a desk and a eating area. So we technically don't have a dining table This is our dining table slash coffee table And yeah, we got coasters handles and stuff like that this tables actually has some wear and tear You know, I think it gives a character and this table was free. It probably like $300 or so So we got lucky with that. This is the couch touch. We've got it on Amazon pretty cheap We do plan on upgrading whenever we move to a better place So we're gonna get a better couch than this class. It's whatever man's a studio So these right here are just some skateboards hung up on the wall.  Make sure it can hold three pounds or so. Got a fortune deck. That's Brett Conte's skate brand We got a DJK Bruce Lee collaboration deck pretty dope collab.  We've got this from Ikea. I know interior design Anyways, okay, so over in this corner. I have a little beer carts This is rose that I'm never gonna drink, but if I have guests over I'll throw in the the freezer It'll be good have some more plants these two plants actually got for my friend Dan Shout out to Dan. We got a pathos and we got a monstera and then over here We have the ZZ plants if you guys live in New York I definitely recommend the sill any plant that you want and they have really cool nice design pots as well So you're mainly paying for the pot You're mainly paying for the pot this beer cart I got from Amazon as well. This is very cheap It's just a metal construction with four wood plies I got a little nice mint-ish color. Just add some color to the space the ZZ plants Just standing on a chair stool from an old piece of furniture. I had so yeah when I filmed this I had a lot of caffeine already and I just forgot a few things So I forgot to mention my Chicago wall art Chicago is one of my favorite cities I already live in New York City, which is my favorite city And I don't need a bunch of New York City wall art when I have it as my backyard And I'm actually gonna visit there this month and the framed graduation album I got this album specifically because the artist Takashi Mirakami is a great artist His work is just awesome and then the album itself got me through a lot of the rough days You know days I almost ended up homeless people not believing in me with this whole YouTube thing So can't tell me nothing got me through a lot of those obstacles And that's what makes this place more suited towards me and feels like home And if you're looking to step up your interior design game Definitely check out Skillshare the sponsor of today's video Skillshare is an online learning community where millions of creative and curious individuals come together to learn something new Expand their knowledge You really could learn almost anything that you want I know you guys would probably like photography, graphic design, entrepreneurship But I want to recommend you guys this interior design class by Emily Henderson And no joke I watched this class many times before moving into here And this place has gone through many many iterations and I think I did a pretty good job But if interior design is not for you there are plenty of other classes on productivity Or let's just say you want to be a youtuber definitely check out Marquez Brownlee's class on YouTube success This is where Marquez shows what goes on behind the scenes of his YouTube process And it was actually very helpful and actually helped me with my YouTube process It's one of the best classes on there and they're all under 60 minutes All you have to do is click that link in the description that is for the first 1000 of you guys In which you will get one month free of Skillshare's premium membership So thank you Skillshare for sponsoring this video back to the apartment Here's the entertainment center nice and pretty This is where I watch all my shows better call Saul Jackie Chan movies and all that good stuff Nothing really much to explain. It's just the TV and stuff This TV is from Best Buy this thing right here a TV stand what you call it It's from West Elm No it's not I can't afford that Wayfair it's from Wayfair Why did I say West Elm? Probably because I dream of getting a Furniture from there Here we go into the kitchen area ish area We have this shelf that I got from Amazon as well They didn't have an IKEA these are they normally have the callix shelf They just didn't have any stop and they haven't had stock in med long There's just a cube shelf it's meant to divide the space Which is why we got this right here is the nightstand bed nightstand I guess we charge our phone and stuff right here It's the same beer cart it's just a different color Always have some protection protection in case someone breaks in Likelihood to break into the space is probably not gonna happen But I'm always prepared I am always prepared Like I said I'm always prepared I got flashlights Blind people and stuff like that I'm prepared man I have another plant right here this is the parlor palm This was my first plant in this place that I almost killed a lot of it died I did not know what I was doing it's coming back to life now Here is the mirror Most New Yorkers have the big old IKEA mirror I couldn't find that they didn't have it at IKEA So we opted for this smaller one from Amazon This is the walking closet I'm not gonna show you guys what's in there right now Because it's a mess because I was filming videos So I'm gonna clean it up and I'm gonna replace the My talking right now with some nice beautiful b-roll As you can see on the right side is all my clothes I am a fashion influencer So I do take up most of the space even though typically it's the other way around It's pretty deep it's pretty deep walking closets And we got luck with this place I just sold this uh to get this apartment But I just show you guys the bedroom area Come follow me follow me follow me So this is technically the bedroom area You guys might be wondering what is this This is actually another closet Because I think this is really weird but this is just how New York works You're limited on space you gotta kind of compromise This closet just holds all the stuff we barely even use So it has like our suitcases for whenever we travel We got extra shoeboxes in there Cleaning supplies that we probably won't ever touch For maybe once a month or so So it's not a big deal we just pull out the bed And then we can get inside and get our stuff But yeah you know how you have like a miscellaneous drawer We just throw a bunch of stuff in it That's what that is it's a miscellaneous closet That freed up the space for us to put our bed right here So it's quite cozy Lower ceilings up here and over here So it's a lot more cosier And I feel like we utilize the space pretty decently Again that might be a little bit weird for you guys Especially those y'all that live in Texas That can get a beautiful mansion for $2,300 a month We got some fairy lights just surrounding this area Just to make it a little bit more cozy And then we clip some of the pictures That actually you know print out of a Fuji film camera We just clipped it on there Makes us feel a little bit more personal Welcome to the kitchen area slash my office This right here is a little island that we got from Amazon I think you guys can kind of see a reoccurring theme This is just a little island that's movable We might adjust it to this way It changes all the time But there's drawers Vertical storage is a priority It's a must in New York City To maximize the space that you have Vertical storage is the best thing you can do Takes up little space But you got vertical space So that's how New York was built anyways You know skyscrapers and all that We have the dish rack slash dishwasher Apparently a dishwasher is a luxury in New York I don't know what a dishwasher is My family's always used this thing as a dish rack So I call it a dish rack But I actually got some dishwashing soap Because I thought we might as well Get our money's worth with this place So we're going to start utilizing that We got a pretty It's not a small fridge Because it's quite tall Because most fridges are like this tall But they're wide So I think it kind of balances out And here is the kitchen area Where we cook and stuff like that We got coffee stuff This is where my viet's known The cafe Souda We got a French press right here You don't want to see what's in the sink This is the sink right here Welcome to the stove cooking area This is my this is my my jam Got a wok Got to do some stir fry This actually has a pretty nice burner So this is perfect to use a wok Wish was on the far right side You know oven man We got the oven right here And then we got the little spice rack right here My knives and just a bunch of Asian sauces Because I do a lot of cooking The cabinets are a slow closing cabinet So they don't make a loud sound Unless you slam it Same with the drawers They are also soft closing as well And that's the kitchen area Mainly up top There's some technically not supposed to be storage That's where the lights are But we store some stuff in there New York living I got some instant fove Got the S tier adult cereal And then in this little corner We just keep our bags and stuff like this Because we do order groceries For delivery because we're bougie like that We order groceries it comes in bags And we just use those bags as extra trash Or recycling Over here is where the cube shelf is Not every space is utilized in the cube shelf So if you guys have any recommendations On what I should put on there That'd be great Up top you have some books You have a Cantonese book Because I was trying to pick up Cantonese again Because I forgot my native tongue Here's my electric scooter as well I actually mounted a phone mount So I can navigate easier I don't ever have to take the subway again So it was like $4.90 And a monthly subway pass is $1.27 a month After 4 months this pays for itself And this is my little desk area office space area Slash kitchen eating area This desk actually was given to me By my old roommate FrubleAesthetic Big shout out to the homie Very nice desk Very big for this place But I'm not gonna say no to a free desk My girl and I hung up some threading right here We just hung some more polaroid pictures that we took Got a kendama for entertainment Let's see if I can do it First track First track We got a lamp right here This has the RGB Philips Hue light So I can set the mood More shelving For some more pictures I got some Bruce Lee stickers That came from the Bruce Lee skateboard If you guys are wondering what my office setup looks like This is the Keychron K2 Mechanical keyboard I got the Logitech mouse So I can marshal some people on Valorant And I got a PS5 controller But no PS5 It's just an LG monitor This is a Windows laptop On a laptop cooler I got the road mic for some clean audio And here's my little herb garden My basil is actually growing Everything else is kind of dying So also you guys are probably wondering Where is the washer and dryer? We don't have one Alright, it's a luxury to have one We don't have one But we do have a laundry right down the hall And there's one in every floor So we can wash our clothes Why does it have to be a luxury To get a washer, dryer, and unit? Okay, so welcome to the bathroom guys Let's hope you get to be in this part of the video Actually, not that bad for a New York City bathroom I've been in smaller bathrooms It's a pretty nice sink It's quite modern This is actually an old building That was renovated recently Curran, we got from Amazon The shower Kind of a, I guess I want to see that Nice sink Medicine cabinet Plenty of mirrors It's a pretty solid bathroom Very luxurious It feels like a hotel I got some wall art right here Just to bring back the nature feel Because I am from New Mexico So I wanted some nature inside the bathroom And then for the sink, they have two drawers They're actually soft closing as well There's a little bit of a gap Between the sink and this wall right here And the tub So I bought a cart I measured it out I bought a cart So it fit perfectly right in here And there's just more vertical storage Yeah guys, that's pretty much the place This light isn't always right here I'm using it to light up the place Because the sun is setting But that's pretty much the place We do pay $2,300 a month For this 500 square foot studio And we did move in during the pandemic So I think originally this place was like $3,200 Pre-pandemic Which is a little bit ridiculous But mid-pandemic We got a lot of months off So don't expect this pricing Whenever things get a lot better After the pandemic So I might jump up a little bit But I love this neighborhood I used to live here When I first started the channel And I was broke, hungry and depressed Very sad days But now it's as good to see the support from you guys I'm able to get a pretty nice place And it's all thanks to y'all And this place also has quite a lot of amenities I'll show B-roll of the place We got a rooftop We got some conference rooms We have a gym as well And that is my Brooklyn apartment tour Hope you guys found this insightful If you guys are ever moving to New York City You guys can follow me on Instagram And TikTok at Fly With Johnny Tye And until then, stay fly, deuces


Thanks everybody. Our next speaker is Hari Hersty. He's a subject matter expert and co-founder of Nordic Innovation Labs and one of the foremost election security experts in the world. So let's give it up for Hari. All right. Thank you for having me. First I want to tell the village is extremely busy. We are under one hour 40 minutes from opening the doors, which in reality means less than one hour starting people pouring in. We first had the first two hacks. We are right now seeing an extensive progress in three other things. So I don't think we get to early dinner time before those are complete. It's amazing progress. And one thing which is interesting is that people who haven't been part of the studies have never seen the machines. They don't know what we did. And hence they don't have the same tunnel vision as the people who have been ten years looking in the days. So they have a completely new approach. And if somebody would be educating them, they probably don't try it, but there's nobody telling that. So that's why they make a good success in completely new ways and completely new approaches. What was interesting was that the first hack was a professor from Denmark who was able to take control remotely over Wi-Fi, the wind vote voting machine on operating system level, able to speak directly with a common line to the operating system, able to unrestrictly go where the voter data is, et cetera, et cetera. So it was absolutely totally penetrated. Very interesting, very interesting how quickly it happened from the point of you have never seen the machine to the place when you are, okay, proof of concept IV. Anyway, this talk was kind of having a different, the hacker perspective. I don't know when it happened, but I'm going to give the speech which I wanted to give, which is to tell about what has happened since 2005 today. What are the lessons learned? And it also is a speech which I want to underline that don't make any assumptions, because most likely the assumptions you make are going to be wrong if you are a security researcher. And my statement from 2005 is still true. If I wouldn't have seen this with my own eyes, I don't think somebody would be able to convince me. These things are just a designs which, there was never a prime time of this kind of designs, so they should have never been in the market in the first place. So it's a sad state of affairs. So first of all who I am and why I'm talking about this, I have been starting hacking election machines against actually my intention in 2005 and what happened to me was I was for over a year tried to be convinced that I should take a look into election machines. I said no. I said no again until I decided that I want to get rid of the people who are asking me to vote the hacking machines by setting an impossible set of rules. And then my impossible set of rules were met by Ion Chanso from Tallahassee, Florida. He invited me over, he invited me to take a look into the machines and the rest of the history. We discovered a vulnerability in design. It's not a bug. It's a vulnerability in design which allows you to pre-stack the electric pallet box and gives you a capability of arbitrarily shift the outcome of the election. And the interesting feature of the voting machine is that the actual evidence how much it was shifted is self-destroying evidence in the normal course of the voting machine software. So you don't need to, as a attacker, worry about erasing the forensic evidence. The machine will do that for you. I participated in three government sanctioned studies in the United States. Everrest is, while it's old and should have been long, long time ago replaced by a New York study. It's still the most comprehensive study. It took the California top-to-bottom review, verified all the findings of California top-to-bottom review, and then added some new information. The redacted report is 316 pages. Wonderful bedtime reading. There is a, the report actually describes every vulnerability found. But the redacted version is the actual, some of the vulnerabilities are too dangerous. So the actual cookbook, a recipe, how it works, that is redacted. So you know there's vulnerability. You just, the report doesn't tell in the most dangerous one how to access that vulnerability. And after that I have been doing a studies around the world. We are actually going to have a little bit of, in this presentation, experiences from Estonia, which Estonia has always referred. Why can we do internet voting? Because Estonia can. The truth is Estonia can not either, but they just marketed the way. So we will have a little bit of a look in that. This talk is not about the last presidential election, but in the last presidential election I participated in number of lawsuits in the recount effort, testifying about the vulnerabilities of the machines, etc. So again this closer. I have only interest in security. I have, I'm not American citizen. I cannot vote. So I have no stick in this game. I have, I'm not talking about any specific election. These all vulnerabilities, all the things we are discussing has been used. They have been exploited, exploitable in number of elections. In case of Estonia I think the number is nine elections. In US God knows how many because these machines are used in number of jurisdictions where for example in New Jersey you can have 250 elections a year because of all the local elections. So we don't even know how many elections these have been potentially affecting the United States. So verifiability, transparency, integrity, security, those are my interests, not the politics or discussion about if an adversary number one, two, did anything. So first of all what we are not going to talk about. We are going to have a presentation at four by Matt Place. Matt is going to give you a demonstration with the real machine, the punch card machine which started this mess in 2000 election in Florida. So he will show the actual machine. He will allow probably you to vote and he will tell you the actual story what is, what has been here, missed in a week, why this guy became the icon of year 2000 in count with trying to see the pregnant and hanging and pimpled sheds on the ballot. Again, how we got here, 2005 was the default machines had, California Doctor of Review, Ohio. There those are the white independent studies. There's a lot of studies which are not independent which are paid studies or they are, the researchers are not independent. Those are different kind studies, the independent studies are when we have, when the study is made for without any links or connection to the vendors or a stakeholders in that, other than the government or the state or in some cases a lawsuit. Estonia study is important for the perspective of internet voting. It's very interesting to have the number in 2016, 52 different models of voting machines were used in the US elections. The normal statement has been always to say that US election machinery and infrastructure is product by diversity. The argument is because there's so many different kind of machines, there's so many different deployments, that is product, there's no single point of failure. First of all, from Attacker's point of view, it doesn't work that way. Attacker needs to know only for few machines and then you can choose where you attack based on what you know. So the diversity actually is giving you a wider range of surfaces and it gives you an easier way to find where your skills meet your targets. So diversity to a certain extent is good but it is not a, it's a false sense of security to say diversity itself is giving you a security in that sense. The other thing is the diversity itself is also undermined by a thing which is right now coming motor service and it's the service companies and we will have a slides later about service companies. In number of states, a huge amount of jurisdiction is actually programmed and run by very small number of service companies which are not certified, they are not cataloged, they have various of practices in security level. We will have a little bit more discussion about that. Anyway, here we have a little bit of pictures of what has happened to the voting machines in the previous studies, replacing operating system, replacing firmware, doing everything what Attacker would do. So theory of election is simple, this is actually putting a little bit of reference to what David Jefferson and Barbara Simons were talking, we all think this is what elections should look like. We will take a vote and you add it to the candidate and that is what people think election machines are and voting infrastructure, that is far from the truth. That is actually the real election systems, this is only the election part. The site here is a heart in the civic infrastructure, the site on this site is ESNS, those are two major manufacturers of voting machine technology in the United States. This is what the actual architectural overview is. Humongous and complex and this doesn't even touch the other areas, which is the election management part, the voter registration, e-poll books, yada, yada, yada. It is very important to understand that when we looked at what the reports of the recent adversary attacks, they didn't go after the election machines. They went after the backend infrastructure, they went at the backend network, the back office. That was the target. Why attacking the voting machine when you can scratch your belly and send a couple of poisonous word documents and get your access that way to the backend network? So we have been looking this area and this is the voting technology everybody recognizes, but the actual infrastructure is way larger and David Jefferson and Barbara Simons covered that in 10 a.m., so there will be a recording. You can see the recording and get yourself familiarized with that part of the structure. So when we now look at the voting machine and voting depilation system, what do we have learned? First of all, what the systems look like? This is a one major vendor in the United States. This is the complexity of the code. The election management system. Scripts, Kobo, visual basic. What could possibly go wrong with that and how modern it is? But if you look at the numbers of, these are not numbers of code lines, comment lines. This is the actual active comment lines of the source code. These are humongously complex systems and one would argue, and I think it's a right argument, unnecessarily complex. But elections are more complex than people think and especially new legislation like a rank voting is adding complexity because the new laws allow new methods of voting and you have to accommodate that. But just by looking that and looking how much assembler code we have here, how much we have a raw sea, how much we have, I would say, obsolete things like Kobo, you know, this is a humongously expensive system to maintain and when it's expensive system to maintain with that amount of code, bad things will happen. Just to make sure that we understand that they are not alone. This is not a manufacturer yet it's more C++. No Kobo, I think that's a plus. But again, the management system over 100,000 lines of code, the voting terminal boot loader alone 72,000 lines of code and remember these are not including your operating system, they are not including your driver code. There is a millions and millions of lines of dependencies which come into place and especially driver codes which are normally running in the kernel mode. If you don't know what they are you don't know what your system is doing. So this is just to underline what is the third vendor, more C++ but still when you look at the numbers of code, humongous, they don't run in the voting terminal standard operating system, they actually have a home baked operating system. That number of lines is just the application, the operating system itself which doesn't need to be certified under the theory that it's not vote acting. Humongous code, this is just to tell you, if you try to understand these systems by a pure source code audit, you will discover something but that is not enough, you are not going to be ever able to establish a sufficient amount of trust to the system integrated, sufficient amount of trust to the system performance and error-free producing by just looking the source code. You have to go to a fully integrated system end to end where you have the operating system where you have everything coming from drivers, everything and then you test it as a whole. Otherwise you are missing a huge part of the whole infrastructure. Now if we compare that to what we have found here, and this is kind of a scary list of things. First of all, hardwired PIN codes. We are talking about voting terminals where a supervisor PIN code is either hardwired as the only code or there's a secondary code which is hardwired so even if the election supervisor changes their PIN code, there is another code which the election supervisor doesn't know which can be used to log in. Hardwired encryption keys. We have a lot of documentation that this has been across many of the vendors, some of the vendors have get rid of that. Very bad practice and the other practice is file starting with the negative encryption keys. I think that's very good for a key management perspective. If your threat model is that you lose your key, now it's very convenient, the key is always there but it also renders the whole encryption meaningless. It's then purely advertising and decorative. We have a lot of variations of that where the key itself is artificially mangled so that the entropy is lost. We talk about a keys where key strength is 16 or 24 bits, which means that your pocket calculator can crack it in a matter of seconds. Even when you start with strong key, the norm of ways, you make the binary key to be converted to base 64 and then you truncate the base 64, now you're done and your entropy is gone. Again, marketing statement, everything is encrypted, technically means, it's true but when you look the meaning, is the encryption done meaningful way? Not at all. So don't assume when you're told that it's encrypted, that it's encrypted in a meaningful way. Hardware secondary passwords. There's one vendor which their system has a secondary password called idiots. That's a wonderful idea.  What it means is really scary because now the system locks that that person came in and if something is done wrong, there's now a log entry about the wrong, as a real person would have been, the correct person would have been logged in. So it's a bad practice but also it is telling something about the attitude if you choose hardwired password be idiots. Hardwired Wi-Fi passwords, that's bad but also it doesn't matter because they use the Wi-Fi privacy which is old standard and crackable in two and a half minutes anyway, so why not hardwired them? The real question would be and discussion would be why Wi-Fi? But that's another story. When we look the newer generation of machines, a interesting choice of words has been started to be used because modeming where modems were connected to Y line were in some parts of US and earlier everywhere accepted as a way of transferring unofficial results. Now the wording has been changed to wireless modems and the wireless modems happens to be connecting to Verizon or Sprint network. So it's not any more that way of modem as we think but just to make it more interesting, a couple of recent studies, public documents have been discovered when the vendors have been demonstrating the systems and the demonstration have failed and the vendor has been explaining why it failed by telling the voting machine had wrong IP address and the file will describe configuration script have a typo. It doesn't mean it's internet but it means that it use IP addresses and goes while it over telecoms network so we don't know what it is. This is not the statement saying they are connected directly to internet, it's just saying that we are discovering things which are raising interesting questions and at one point of time somebody independently should take a look and take a look in the system. Interesting fallback scenarios.  When it tries to eject you just keep your finger there and there were a number of machines where previously when it panicked it bumped you to vote election supervisor mode with no pin code or nothing. I mean obviously it's a supervisor who has to clear the jam but it is a maybe not well thought through procedure. Another thing which is found in number of manufacturers none of these are actually don't think about that I don't say name name a name of a vendor because there's only a vendor this applies to. It's more that these are seen out in a while in more than one place. Secret functionals activated with the hidden registry keys. In many cases the registry is actually made to be remote registry so inside of the election supervisors closed network you can remotely trigger the keys and now the election software whether it's the central tabulator canvassing software whatever part of the complex backend system new features pop up. Again slightly problematic for my auditor point of view when you're auditing software and the features you are auditing are you don't know all the features because they only become active or in case of one vendor this is the one vendor where it actually dynamically deloads and reloads a DLL so the actual library is not even in the memory until the keys is there. And a lot of weird misconception like CRC considered as a cryptographically safe algorithm. It doesn't make any sense but it is a common term and especially 16 which is not really even giving you a sufficient protection against a non-malicious hardware errors and non-malicious storage errors. These are just a examples and the important thing here is these are not bugs. These are not buffer overflows these are not mistakes by made by the programmer these are not mistakes these are a features which have been designed and programmed on purpose. We have a lot of bugs these are different category because they are not bugs. If we look the same on on side of hardware and firmware we see a old technology which is a RAM, a removable RAM card which actually blocks in the mathematical executable memory. How you can edit a how you can audit ever a system where removable media becomes part of your execution RAM. You don't. Anyway that is a design still in use in the United States and it's it makes it pretty unauditable. Custom operating system I mentioned before that there are benefactors who have in their terminal most of the machines are windows and some of the new ones are Linux but there are still manufacturers who have a completely custom made operating systems or no operating system at all. We had a found a custom operating system where there's a remote control features which means that inside of the election precinct network you can remotely control the voting terminal as if there would be a voter. You can click up and down and you can click the candidate name and you say I vote and that all can be done remotely over the the precinct network. Again not a design feature which thankfully is being fixed by a physical protections. Live open ports which are accessible for voter in booth. The interesting thing about secret ballot is you are in the booth alone and nobody's supposed to look over your shoulder and if you then have a serial port which is connected to the computer inside of the voting terminal live and you can plug something in your convenience of your booth and talk with the computer that's generally speaking bad idea but it's all kinds of ports we are talking serial ports we are talking USB ports we are talking about a potentially mountable device because the smart card stand is another thing which people don't necessarily know that the smart card standard which is commonly used in your prepaid telephone card your credit card that standard actually has an opportunity to have a file system it's not very big file system not a small file system. Now if the smart card reader as a certain ATM manufacturer did is a USB device which is very common in this environment and in Windows you have auto mount and auto execution on now you plug your smart card and it takes their auto run the bad and runs it. In this example line one thing which is recently has become a more known and understood problem in the voter registration system and e-poll books people are using driving license and driving license barcodes as the way to register yourself in and I know this is shocking but I have heard a story that some underage kids might have a false ID's. I know it's shocking but that seems to happen. However that means that you can have a rogue barcode and what has been discovered is first of all a lot of these barcode readers they read more standards than the standard you're done actually you cannot even limit the number of standards they read. Second thing is they are keyboard emulators. Keyboard emulator means that you can emulate operating system commands like command R to have your command line and type in the command line invisibly. Very convenient it also works in a point of sale system in supermarkets. The other thing which it can do is if you don't have a sanitize input which seems to be also thought that obviously we all know what the barcode is so you don't have to sanitize it a sequel inject directly from the barcode. It actually a funny story is not election story but the one guy in Poland figured out that sequel inject is possible in your license plate so he made the license plate which was as wide as a car which was sequel inject and deliberately throw through the red light cameras and speed cameras and he just happened to know what is the name of the number of the table you have to drop so if you ever read XKCD, read a little bobby tables, little bobby tables on license plate is a real thing. The same thing about the registration system e-poll books it's something which is right now thankfully it's this year a lot of the jurisdictions are looking to buy e-poll books this is now flagged. You have to make sure that you are responsible in a way you treat unreliable input which is the driving license because they happen to have false ones. Now internet voting side, the reason I'm talking about Estonia for a while here is because Estonia election, internet voting system is open source so I can actually show a couple of code snippets. When we look at the Norwegian internet voting stop trial which stopped this is a miniscule comparing the size of that code. We had the Washington DC mock election which was hacked by Alex Halderman and East team, way much bigger code. When we look what is Estonia internet voting system which is considered in a common knowledge as the gold standard which it truthfully is not what it looks like. It's 16,000 lines of code and really we don't have to worry about counting the comment lines separately because there's no comments it's actually code which is uncommented completely. Well not completely but very little. So it's 61% python, it's 37% C++ and then shell scripts and various of shell scripts. It is really looking like a code trial. There is no docs, no harness, no test modules, no description of the protocol obviously you can learn the protocol by reading the source code and the documentation itself is interesting because almost all the comments which are here are actually from a borrowed code so when they have cut and pasted a part of code from other source the accidentally the comments kept in. And when you look at the lifted code so the borrowed code there is a undocumented code from GNU which is a open source license requiring you to commit back the changes. It's a in a sense which Joe would be telling and Candace Hawkeye it's a legal virus in a sense. Shouldn't be undocumented that's a violation of terms and the other code is that there's no attribution of source, no version, no authorship, no license so there's a lot of code which is coming from somewhere and there's it's not acknowledge where the code comes from. I would say this is a high school project with a teacher who is very relaxed but it's not much better than that. It's nasty thing to say but it's true. So when they publish the code this is what I want to show. A security feature and the actual code when it was publishing GitHub says to do implement security checks as a verifying core size of the encrypt vote returns okay. No test was ever programmed and this when this code was published it had been used in seven real elections. Now obviously it was slightly embarrassing when this was made publicly known and so they fix it. I'm not making this up. This is actually the next comment to GitHub they removed the comment lines because there was too much information anyway. So again if a voting system is not having the security check obviously it will not tell you that there's a problem so everything will go fine. I don't think this is a proper and prudent way of programming an election system but people make different choices. Again in the real world you wouldn't never ever believe in any system even including your point of cell system a super market or your calculator that a key feature year of the year of the year is missing and just to do. There's a lot of other features there. One thing what I want to underline this is the example is from Estonia because I can show the code. This is not unique. When you go and look the other vendors in America who are serving internationally you see the same thing. You see key features which somebody was too busy ten years ago to code and nobody has had time ever since because it's working and obviously if you add that feature you might start to have problems so this is better. Less complaints. Now Estonia also is interesting example because they do publish a video. This is their government assurance how the system works. They publish everything from the system being set up to election being run, the daily logings in the system while the election is live. Everything is published as a video by the government. There would be a lot of things I can tell about. We actually went Alex Haldeman, Margaret McAlpine, the University of Michigan team three people and two people from Google. We actually flew to Estonia to witness because you are allowed to in person also to see the operations on daily basis. First of all because Estonia system is widely open source in Anna Arbor in University of Michigan, Alex Haldeman, his team built a own Estonia.  Which means that you can take the binary code given to you as the voting software and you can run it against a virtual Estonia which is your Estonia hence you can try your things safely and you are not playing against a real system. The videos were actually very nice because when Anna Arbor was building a copy of Estonia they didn't know what everything means in Estonia and as a result every name of computer every sticker was copied and when Estonia was about how you knew this. Well we don't know what that word means but we put the sticker because you have the sticker and so that's how it was copied. Anyway this evidence is interesting because this is from the video where they sign cryptographic sign the client software the citizens will be using for casting their votes. So there's this video the video goes on and eventually there comes a signature and hash and now as a voter you can verify your binary to be the real binary by because you can compare to the video and they made a big thing that this computer where they are doing the sign this computer has never been connected to internet. That is a statement they make. So let's take a closer look. So we have a micro torrent, we have the turn of it and poker game. Online poker. So I think the statement this has never been connected to internet maybe they're enthusiastic and they want to install all this software which is not going to use and they wonder why it doesn't use. The statement might be false. I don't know which way. Anyway operational security and I'm using Estonia as a I could use many other jurisdictions in the US. I'm just showing that a lot of times these statements we have as humans we are trust based animals. If somebody tells us sky is blue we probably take it as a face value we don't check if somebody says in a video in official evidence provided by government this connected this computer has never been connected to internet. Very few people actually go and start checking. But the evidence is there that something is well maybe that's offline poker stars online. Who knows. I was talking before about we've come back to US about the small companies which are helping local governments to run election. This is an actual website. This screenshot was taken I think three weeks ago. It's not from yesterday. I don't have any believe that election source has changed it. This is a actual company selling election services. First of all this is a blow up from here. Our election coding services saves you time and effort. If you would be running a national security level service where agency would you buy your coding services from website looking like that. The answer is yes. They do buy. That's why they advertise. This is a not embarrassing example and I don't want to embarrass an election source. They are not worse or particularly bad. But the whole concept is elections are actually that's the different pictures. There's also state money and maintenance services. But these kind of companies are selling their services and they are not certified. If this is a Joe's election services who will ever check who Joe is. Who owns Joe's services. How Joe is employing his people. How Joe is vetting his employees. What are the different stakeholders in Joe's company. What? Oh microphone. Anyway so this was just an example what kind of companies and what kind of marketing methods actually appeal a real election official election officials to use their services. On the same website when you go to the production side they have the new tag here which is everything you need to secure election like seals. So they sell locks they sell seals. All kind of things. And the one in the corner this this looks very interesting. It's a red and it's it is the the great seal of state of Michigan. This is actually the paper seal they use in election. This is my hand. I used my own credit card. My personal credit card and I ordered them. They were four and a half dollars each. So you don't need to forge a seal. You can just buy them. Election officials always make the correct statement. A physical protection is protecting the machine. When you talk about computer systems the rule of the time is if you can physically access it the game is over. So you have to have physical access. A lot of the security studies have greatly improved the amount of secure physical security around the election machines. Great job done. More job needs to be done. However that's not a problem if you can actually buy the original seals. And you don't need to even forge them. All right. Again this is a machine which is in the hacking village. It's the I've a chronic. It has the security feature. You have a special cartridge. The machine only activates when the cartridge is present. The cartridge has a secret ingredient which no human can get access. It's called magnet. So when you have a magnet the magnet actually activates the system. And the device is using infrared to communicate the ballot style and also to do the tally business also vote accurate application. So instead of using that device you can use poundpile. Again when you look and it's actually very interesting. I have a lot of people who are not election security experts. They think when they specialize device they have never seen before which has a weird shaped slot which you put. They think it's secure because something they have never seen. It's not common. And because it's a magic. There's no connectors. It's smooth aside. There's nothing metallic. Because it's over. People have a false sense of security. It's safe. Reality is a magnet and mobile phone or poundpile. That's how you talk with. Again never make assumption. When you see a machine never make assumption that you know how it works or the people who tell how it works would know how it works. And that's why we have the village. This is just a very quickly top line one line per huge topics. Every single line would have been an hour presentation on its own. But to give you an idea of why it's important that we take a look, fresh look, we analyze, we get the facts straight. And only people who are educated and know the facts can make an intellectual decisions and right choices. One more thing about seals. Yet another seal example. This is a debold acu vote, a precinct based scanner, tamper evidence seal, protecting the memory card so that nobody can tamper with that. But if you take a look side, you see, hey, there's two screws. We have been recommending to put some seals to that screws because they didn't. And if you take them out, you take that out. Now you can get to the memory card without breaking the seal. Seals, I have a number of pictures from Estonia where they have sealed the racks of the servers and the seal didn't go from the door to the rim. So you can just open the door. The seal is not broken. Anyway, that's a brief thing about keeping your mind open and when you analyze the systems, when something is presented to you and you want to make certain that you understand if it's secure or not, you don't need to have any special skills. You need to take a look and use common sense. If somebody says this is a tamper evidence seal, see where the seal is connected.  Think about this is, I think one of the most important things I have been saying generally about hacking and security. Hacking is not an intellectual challenge. Movies and everybody tells hacker men are wise and cunning and smart. No, that's not the thing. Hackers want to steal your stuff. There's no style points. They look if there's a door. Oh, you have a door. That's great. Do you have a lock? Oh, you have a lock. Great. Let me go around the building to see if you have backdoor and do you have locks in the windows. And it's all about how you achieve your goal as a criminal, not if you have style points because the best crime is a crime which was never discovered. So you don't even get to brag about it. Thank you. So the question is, is the newer version of the software is the box becoming less prevalent? And the answer was that when you go across the US and you see the systems which are used, a lot of times there has been no software upgrade since this discovery. So it's still the same. About the newer systems, most of the newer systems have never been independently verified. So we don't have data one way or another. So the answer to that is the legal question and that was Joe Hall and Candice who should be answering that. The my answer is there's volunteer standards. And since they are volunteer, they are volunteer. I would also point out that the FEC, David, when was FEC regulation? 2002. FEC. 2002. And then the EAC, VSS, 2005, they both have a ban to use assembler language. And those machines had been certified and you see the assembler language there. So the E80s, the independent task authorities have not been, maybe they haven't considered that to be that important, but the systems which have been certified voluntarily but certified still don't necessarily meet the standard set. Anything else? Okay. I'm out of time. Oh, I think I actually went to YouTube live. I think I actually went to YouTube live. I thought one person there was already posting it as live stream. So it should be there. Okay. Thank you.


Way too much energy right now. It's dark out. You'll almost never see it be dark out I just have manic energy right now. All I want to do is play campus legends. This is episode number 7 right? Yeah, this is episode number 7 I have not played as the corn huskers the Sooners the Longhorns or the Ducks and today I'm gonna go with Nebraska. I was almost brought I was this close to saving Nebraska for last Okay, think they're the worst but they have a mon green my first memory of a mon green was Madden mobile 15 He had a Thanksgiving card him and Barry Sanders And I think it was Tony Romo all had Thanksgiving cards and if you pull a Romo your life was horrible He's Romo's worth nothing. Mon Green and Barry were worth so much that card art was sick that card gives me so much Nostalgia we don't Oh our kicker is Brett Maher, let's go. Yeah, that's a that's a fun fact boys A lot of people think my last name is pronounced meager because everyone calls me Papa Meigs It's not it's Maher a lot of you probably already know that because a lot of you are diehards And I love you boys forever, but you know not everybody knows this stuff. So Nebraska defense. We got will Compton Nadamikin Sue I kind of forgot about that Lavante David Chris Jones. Oh and Prince of Okamura I think we have a better defense than offense. We're going up against Joe burrow and the 99 overall Odell that Odell is a demon We have to be very careful not to run into that thing.  We almost get it taking that back. Let's go though out to the 49 99 overall of Mon Green 94 speed 92 string 96 acceleration and we are in the run heavy play books. We're gonna have all the run plays We're literally just gonna bury him right here home team has improved blocking That's the first piece on the momentum legend.   The counter is so open. I'm on green He's running through grand outfit. Dude an LSU has amazing safeties. I don't think I'm on green in the end of the day He's gonna care though. All right, let's see if we can get him involved in a passing game I think our quarterback is Tony. Is it Tony Frazier? I'm on green. We're gonna playmaker you buddy He's there. We're gonna get around this for sure I have a feeling he's gonna have all our yards.  We definitely don't have hold the line, but oh, we're not gonna need it Oh, we that was so unlucky. That was a good animation from the detaclin. I'm surprised. I'm on green Didn't just power through in six to seven lots of scoring real quick Oh, what? Buster Maro just did some of the weirdest moves I've ever seen but it worked so all right Let's just use our Levante David and be smart here. Yeah play action for sure. I'm on our beat Oh Not believe he just tried that. Oh, I might have accidentally just blitz Joe Hayden I did I got to get over to Odell myself Just the case big hit. He does not deserve me four for four one twenty seven in a touchdown I'll say that much. Could this actually be the run. He's been faking the run a lot here I don't think he'll actually run it Okay, okay. Oh, that's Odell So fast can't even get to him and he's got hold the line enabled again Six to fourteen Nebraska's not looking good right now, bro Also a huge shout out to case to five for sponsoring today's video case to find makes amazing iPhone cases This case came from case to five. It goes hard. Just got back from a festival in Michigan I got so many compliments on it. There's slim and protective as you can see here. There's some incredible designs I actually got two more and I customized them. I want to show you I customize this Honolulu one right there It says Papa Meeks. I love it. I got this Milan one as well It's got my name on it and Milan's are my favorite place in the world So I just thought that was so sick and the big kicker is this is actually an impact case Which makes this thing six point six feet drop test approved my previous case that was not with case defy It's dog water. I hated that case. My phone's kind of scuffed up from it, but just to show you daddy, baby I'm confident boom as you can see nothing new booby still on there also made with 50 percent recycled materials And an anti-microbial coating to eliminate 99% of bacteria that's gonna be sticking on your phone case I get that this is sponsored. I got to say good things whatever, but I genuinely love their cases I will never not use a case defy case probably for the rest of my life It's also a really good gift for friends and family So go to case defy comm forward slash MMG to get 15% off your order case defy Thank you response and guys enjoy the rest of the video Wow, he's pulling a D lineman off. Don't mind if I do I'll get free 12 yards down the field For a mine green.    All right. Good catch. Good catch. I kind of needed to rack that but that was a great play I don't know about this run play, but we got to try it right boys. Yep That's what I'm on green is for oh still on his feet got swept up. I don't really know how that happened All right, I'm gonna try and hit him on green again. Although. I feel like clave on chase on it's gonna just laser to him He does.  It's an interception. Oh, this is gonna be a tough one to come back from I can't go out, bro ounce for burrow. We'd love to see that throws Big hit. Damn. I thought that was a bumble. This is play action. Oh, let's just blitz get over get though Compton fourth and ten. Can he hit this field goal?  I hope he shanks it. Oh, he called the timeout I think he knows he can't hit it. That's the only reason he'd do that right there All right, we're gonna run nickel because we know he's passing here We also know he's gonna scramble get to the QB Let's go wait, that's in bounce. Are you kidding? That's so lucky. I have no idea what just happened I don't have anything to say about that Mine! Exactly what he was looking at. We lurked it. Let's get down the field now He's gonna pull his man off of where Amon Green is running. We love to see that That was the glitchiest tackle animation ever. It literally sucked me into that. Yes, sir. Yes, sir So money. Oh, he made a great move, dude I was trying to get to the outside and run that to the end zone. All right That guy's probably not the move here, but I'm going with it anyway, and the edge is kind of there low-key He dives early.  He's gonna be blitzing around the sides, but we're in Oh, I hate that animation too, bro. That animation where you grab your linemen.  What are you doing? How did he miss that? Oh my god, he's gonna have a field goal. Oh Let's go. We sacked Burrow. That's huge. Compton is a beast, bro He just heaves it up and that's our ball. Briggs has got it and we're getting the ball half here Dude, that was so dumb of him. He lost crazy momentum for doing that. This whole game He's had the momentum and by throwing that interception and moved it in my favor You think that Amon Green wheel route will be open? I think it's it's sketchy, but definitely possible.  I hit the wrong button. Thank God for animating. I was supposed to throw that to B I don't know why This is why I don't record late, bro. My brain stopped working already That's my boy! Stop lightening my 99 overall up, I'm pissed. Eight rushes, 97 yards, though Still having a hell of a game. All right, we're gonna go with the read option I'm probably not gonna actually read this and just straight up hand it off. There's some weird animations today Oh, his users trying to get to it. Can he guard it? Okay. Yeah, that's that's great. I'm not actually I'm not actually there yet All right, awesome. That's perfect. Thank you so much Let's go. We got the 2.2 and now we have hold the line. That was a really important phone call But I have to play Madden still. Come on.  I knew it. Oh Big hit though. Oh Come on He's good at switching it up. I'll say that. Let's go. We got a sack though. Everything was clamped. Wait. I'm a Gamora Oh, man could have had redemption. I think it's just play action. It's not just get to him. Oh, that's a stop Oh, oh, he ran this last time, bro He did this last time makes a juke and he's into the end zone on fourth down again. He converted.  He's so open What a play a laser from Tommy Frazier, bro. I have no idea who you are Yes, he's there, baby. That's exactly what we need. Get through it, baby Get through it. I'm on with six tigers on him. Let's you tie the tigers Why am I questioning that is it both Clemson and LSU are the tigers? LSU Tigers. What's Clemson? They're also the tigers. That's so lame Let's go the draw play. He's in I'm hitting Rivera. If not Rivera, I gotta hit a man green underneath him Let's see it. Rivera Doesn't matter who I am, bro. We gotta go undefeated. Why is open V is open. Oh, not anymore Is that roughing the pastor on my huge interception?  Oh, he didn't get it You're lost in Russia's 125 yards and three touchdowns for this demon right here. I don't think he's gonna call Oh, I was sitting here thinking Nebraska was gonna be this bum team And I I wasn't gonna have that much fun And that was literally the best game of campus legends.   Even though your whole state is literally just corn. I love you boys Thank you for watching this one was sick, and I'll see you in the next one. Peace


From Miami Beach, Florida, it's theCUBE, covering Acronis Global Cyber Summit 2019. Brought to you by Acronis. Hello everyone, welcome to theCUBE coverage here in Miami Beach, the Fontainebleau Hotel for the Acronis Global Cyber Summit 2019. Two days of coverage. We're here getting all the action on what's going on in cyber, how tools and platforms are developing, the new model of cybersecurity. Acronis are leader fast growing, rapidly growing now back in the here in the United States. And globally, we're here with William Toll, head of product marketing at Acronis. Thanks for coming on, appreciate it. Well thanks John, I'm excited you're here. So we were briefed on kind of the news, but you guys had more news here. First of all, great keynotes and then special guests, Shark Tank on as well. That's right. Great event, but you had some news. That's right. Slip by me, you guys were holding it back. Yeah, sure, so we've opened our APIs and that's enabling a whole ecosystem to build on top of our cyber protection solutions. So you guys have a platform, infrastructure platform, and then suite asserts from backup all the way through, you know, protection and all that good stuff as well as partners, a lot of channel action. Platforms are the mode, you guys have been rapidly growing 16 plus years. Yeah, and now with the opening of our APIs, we're opening the possibility for even more innovation from third parties, from ISVs, from managed service providers, from developers that want to build on our platform and deliver their solutions to our ecosystem.  You guys do a great job and have a track record. Got the APIs, but you also have SDKs of variety of different layers. So the APIs are going to bring out more goodness for developers. You guys, I heard a rumor, is it true that you guys are launching a developer network? That's right. So the Acronis Developer Network actually launches today here at the show and we're inviting developers. So that's official. That's official. Okay. And they can go to developers.acronis.com and when they go in there, they will find a whole platform where they can gain access to forums, documentation and blogs and all of our software development kits as well as a sandbox. So developers can get access to the platform and start developing within minutes. So what's the attraction for ISVs and developers?  What is your pitch to developers? Why would they be attracted to your APIs and developer resources? Sure, it's simple. Our ecosystem. We have over 50,000 IT channel partners and they're active in small businesses. Over 500,000 business customers and 5 million end customers all can benefit from the solutions that they bring to our cyber cloud solutions portal. What type of solutions are available on the platform today? So there are solutions that integrate PSA tools, professional services automation, RMM tools, tools for managing cloud, tools for managing SaaS applications. For example, one of our partners manages Office 365 accounts. And if you put yourselves in the shoes of a system administrator who's managing multiple SaaS applications, now they can all be managed in the Acronis platform, leverage our user experience UI SDK and have a seamless experience for that administrator to manage everything, to have the same group policies across all of their customers. You guys have had success with ISV's channel as a channel, as a channel in general, but ISV's and managed service providers, MSPs, managed service providers. What's the dynamic between ISV's and MSPs? Could you unpack that? Sure, so a lot of MSPs depend on certain solutions. One of our partners is Connectwise. Connectwise is here. They're exhibiting one of the sponsors at this show. And they're a leader in providing management solutions for MSPs to manage all of their customers, right? And then all the end points. So if I participate in the developer network, is that where I get the APIs? How does someone get the access to these APIs? So you visit developer.acronis.com, you gain access to all the APIs, the documentation. We have libraries that'll be supporting six languages, including C-sharp, Python, Java. They can come in, gain access to the documentation and start building, there's a sandbox where they can test their code. There's SDKs, there's examples that are pre-built and documentation and guides on how to use those SDKs. So customers, your end customers or your channel and customer's customer, do they get the benefits of the ISV stuff in there? So in other words, does the developer network have a marketplace where ISVs can push their solutions in there? Also launching today, we have the Acronis CyberCloud Solutions Portal. And inside there, there's already 30 integrations that we've worked over the years to build using that same set of APIs and SDKs. Okay, so just to get the hard news straight, opening up the APIs, Acronis Developer Network launched today and Cloud Solutions Portal. That's right, Acronis CyberCloud Solutions Portal. And inside there, there's documentation on all the different solutions that are available today. What's been the feedback so far on those? It's been great. If we think about all the solutions that we've already integrated, we have hundreds of managed service providers using just one solution that we've already integrated. William, we were talking before we came on camera about kind of the old days, business business for a long time. I mean, just theCUBE, we've been documenting the IT transformation with the Cloud in 10 years. Well, I've been in this in 30 years. The ways have come and gone and we talk to C-Sells all the time now and the number one constant pattern that emerges is they don't want another tool. That's right, that's right. They want to consolidate, they're looking for tools, don't get me wrong, they're looking for a fit, but they're looking for a cohesive platform. One that's horizontally scalable, that enables them to either take advantage of a suite of services or a few. That's right. This is a trend. Do you agree with that? What's your take on it? I totally agree with that. It makes it much easier to deal with provisioning, user management and billing. Think about a managed service provider and all of their customers, they need that one tool. It makes their lives so much easier. And of course, an event would not be the same if we didn't have some sort of machine learning involved. How much has machine learning been focused for you guys and what's been some of the innovations that come from some of the machine learning that you guys have done? Artificial intelligence is critical today, right? It's how we're able to offer some really top rated ransomware protection, anti-malware protection. We could not do that without artificial intelligence. All right, final question for you. What's the top story of the show this week? If you had to kind of boil it down high order bit for the folks that couldn't make it watching this video, what's the top story that they should pay attention to? Top story is that Acronis is leading the effort in cyber protection and it's a revolution, right? We're taking data protection with cybersecurity to create cyber protection. Bringing that all together really democratizes a lot of enterprise IT and makes it accessible to a wider market. You know, we've always said on the queue, go back and look at the tapes. It's a data problem. That's right. Data protection, cyber protection, all about to work hand in hand. Acronis, everything we do is about data. We protect data from loss. We protect data from theft and we protect data from manipulation. It's so critical today. How many customers do you guys have? I saw some stats out there. You guys were founded in 2003 in Singapore. Second headquarters in Switzerland, 2008 global company, 1400 employees in 32 offices. Nice origination story there. Not a Johnny Kim lately.  What's the numbers? So, 5 million end customers, 500,000 business customers, 50,000 IT channel partners. Congratulations. Yeah, thanks. Well done. Thanks for having us here at Miami Beach. Thanks. Not a bad venue. As I said on Twitter just a minute ago. Great place. Thanks for having us. Appreciate it. Mr. Cube, coverage here at Miami Beach at the Fronkin Blue Hotel for the cyber, global cybersecurity summit here with the pronus. I'm John Furrier. Back with more coverage after this short break.


which are WordPress, but basically ask anything about WordPress, agency, work, products, product development, Google, things like that. Very mind, everything they say is based on their own personal opinion, it's not on their companies, so just to make sure that everyone's got the same page. I think you're wrong here and wait a minute. And then I think it's too nearly too. Thank you. You're welcome. Thank you. All right, so I'm gonna introduce myself, I'm the moderator. I'm sort of a hands in, my fingers in many pies, I used to be a developer, I'm now doing regional role with sales and accounting, accounts, so in accounting. And what else do I do? Oh, I do community work too. So I'm gonna ask them a bunch of hard questions if you're the guys don't ask anything. So I'm gonna get everyone to introduce themselves, they only have one mic, so bear with that. Asif, yeah. My name is Asif, I'm CEO of WeDevs, it's a WordPress product company. We created several WordPress plugin serving in a lot of different other functions. And I work very closely in content and content distribution. I spoke about like why the spread and everything matters. And I'm personally working with the WordPress ecosystem for almost 13 years. I started using WordPress since 2004. And I love these conversations, like what we as a plugin business people or plugin developers feel is what this is going in which direction and what we will see in 2018 after Gutenberg. And also maybe the future lies in 2020 or even beyond. Thank you. Thank you. My name is Zion, I wrote you as PHP expert from Singapore. Hi, my name is Zion. As you said, I'm from Singapore. I'm a Zen certified engineer. So I currently a senior software engineer at the startup. We kind of do like mobile apps for clients such as Kofu or Bundonki. So I dabble a bit with other languages like a bit of Android, a little bit of Java, Ruby, but mainly PHP. So WordPress I use mostly on a personal basis. Some years back when I was doing freelancing, I used WordPress for my clients as well. Next, we have Moriyama Mayuko from Japan. Hello. I'm my own Moriyama and I'm a freelance web developer and I work by myself. She does a lot of community work like mentor's work camps. She helps meet up, survive and grow into something bigger. She travels around Asia to make sure that everyone gets to help the deserve as much as from the foundation as possible. Did I get it? Thank you. Yeah. Thank you. So Jenny. Hi guys, I'm Jenny. I think among all the other people here, I'm probably the most beginner when it comes to WordPress. So personally, I'm a blogger as well. I like to blog about my travel journey and I just recently moved to WordPress. But I know that's not interesting. But professionally, I work for Google. I work with a lot of web publishers, particularly for actually for the whole Southeast Asia, but particularly for Indonesian Philippines. And if I can say 70% of my publishers are using WordPress. So yeah, that's me and WordPress. It's your choice. Thank you. Thank you. I guess that leaves me. That leaves me. Just listen to her, I guess. I'm a former freelancer. I was gonna say reformed freelancer. I've been working with WordPress basically since 2008. And I built a lot of websites and now I help other people build Red Splice as a project manager for Human Made. That's a lovely description. So they're here to answer any of your questions about agency, products, WordPress, maybe how Google works with WordPress, how PHP handles WordPress, definitely development to products, to community staff, well from the hard topics to the user topics. And project management, definitely. So if you've got questions about a JavaScript that might work too, within WordPress. So, anyone has got any questions? Yeah. There's a mic coming to you. Hello everyone. Is it on? Not yet. Hello. So I want to ask that for a blog to be very famous and to earn money, should it be a business blog only? Or it can be like a story, poems or a philosophical kind of a blog? I don't want to answer that question. So can I repeat, your main goal is revenue, is that true? Yeah, I mean so, if it has to get famous and well noted. So there's a lot of pathways that you can do. When if your goal is revenue, there are certain, depending on the pathway that you want, some publisher they look for niche topic. They are currently underserved. So in the way that they don't really have much competitor, they have the market share for that topic. And then we'll be even a plus if that topic is the kind of topic that is bidded by the advertiser. And you can make significant amount of money out of that. And there's also publishers that write out of their hobby. So because their quality content, even though the topic, even though the vertical is, has a lot of competitors, but because the fact that they're passionate about it, they are an expert on the topic, people still choose for that website. And there's also people who wants to easily get a lot of page views. So even though that topic probably are not bidded by the advertiser that much, so it depends on what you like and what you think is your strength. If you feel that your strength is building exposure, then getting a lot of page view to get a lot of revenue, probably the good pathway. But if you think that your strength is a certain particular topic that maybe quite niche, still create for it anyway, because there might not be much competition, people are looking for it, there's a demand for it. And even best, maybe advertiser actually bidding for it. So I hope that answer your questions. Okay, thanks a lot. Welcome. Follow up answer? Yeah. So let me talk from the content perspective. Just two weeks ago in Wartcam, Ahmedabad, I had this session. Actually the title of the talk, people will explain the title of the topic was like, we all say the content is the king, but if you don't know the distribution, you will not actually reach anywhere. So content is very important, it's very creative, it could go to a long length, but at the same time you need to understand your demography, you need to do everything right in terms of the description. So you could create your first blog post, know what you will read it if you don't distribute it properly. And there are so many lies, there are so many wrong information online about SEO. So that's very important to getting found online. So the important part will be like, instead of trying to cheat Google to rank better in search, it's very important to do it properly. So you could really write for normal people, not for the boards, not for the Google board and other things. So that will be the main goal. I have a question with Rajini. Can you please help me with this question? You know, look into Google AdWords, right? You're able to see the CPM rate and all the demand. That is a good, like, because the lady asked us, asking how to get famous and revenue. Is that a good data source or to check whether the topic on niche? Because you know your Google Ad was quite powerful and they've got the niche here, they've got the keywords. So do you recommend that to check for the niche, to research on the niche that we should go into? You think Google AdWords for AdSense? When you, I think it's a reverse way of, like, you check the demand for. Well, if you have an AdWords account, you can always do that or you can even use the Google Keyword Planner that I think our friends from Damien, Damien Oh was sharing. But in case you were wondering, is there like any tool to specifically looking at the RPM? We will say no, because the reason why its demands and supply is the one that determine the revenue per impressions, right? So if we state A, currently there is no demand and people hear about it and then people write about it, suddenly supply increase, it's just like stock market, the price will decrease. So that's why it is something that is really dynamic, I would say. So again, one thing that I will emphasize and one thing that maybe I really like about Damien Oh's presentation is that first, always focus about the users and then write something that you're really passionate about, not for the short term, but for the long term. Because if you're always looking for the content that has a high RPM, it takes some time for you to create that content to get the traffic. And then maybe if let's say the RPM happened to drop, you haven't get the yield yet, you won't receive anything. So always have the right motivation first. Thank you. I have a second question for, I have a second question for Dee, who is also expert in the project management. How do I utilize Google Apps for like outsourcing, offshore outsourcing? This is a more direct, more targeted question. Do you think a Google Apps, no G Suite, right? There's a Google G Suite. Have you experienced in outsourcing offshore with G Suite? Do you think it works? Have I experienced outsourcing using G Suite? Yes, Google. No. What software do you use for, don't mind you share, what software do you recommend for your projects? Okay, now that's a question I can answer. It varies from project to project. So for some clients, we're using Jira, which is, so we're working at an enterprise level and that Jira is great, but it's huge and heavy and difficult to configure and kind of a pain. So it does all of the things that we need it to do. It's just difficult to get there. So next level down, we use Zen Hub, which is if we're working on a software project and we're using a repo in GitHub, Zen Hub is a layer over the top of that that helps add project management tools and that's really, really useful. It's free if you're doing it on an open source project, you pay per user if you're doing it on a private repo. But that's really, really helpful and in terms of using Kanban boards and all that kind of stuff, Zen Hub's got you covered. And the third one that I also use is Asana. That is free for a small, small agencies. You can invite clients into that so they can actually, you can use it as an issue tracker. You can, they can actually use boards because we use Kanban and Scrum boards to manage visually your projects. So those are the three, Jira, Zen Hub, Asana. There are so many out there, you just often have to find the one that works for you but those three are really good places to start. So I'm gonna ask a question to Zion. So I've seen that WordPress is not viewed as the best software. Even by the people who are writing PHP where WordPress is strongly based on. So how does the PHP community view WordPress in Singapore, Zion? You know the answer. Yeah. I'm gonna ask him. I don't really have a concrete answer to this. So we know that WordPress powers about 27% of the websites in the world. And what problem is we do not know how the distribution is like. Is it mostly in the US or in Europe or in Southeast Asia? For example, in Japan it's quite easy to check the stats because you probably use Japanese translation and you'll be easy to check. Okay, so many users, so many WordPress sites in Japan but also in Singapore. Now in Singapore, unfortunately, probably there's kind of mentality where you want cheap, good, fast. So in hot game we call it IPI-CIO. So basically sometimes we have more users and probably developers or want to be developers, probably some second-school kids say, okay, let me just download WordPress and I will set it up and then, okay, I'll set it up for client and I'll earn my pocket allowance. So the WordPress is intimately linked to PHP. So let me talk about PHP also. In developers eyes, PHP, since I have a bad impression, when you mention PHP WordPress, people say, yeah, no good. This is because PHP and WordPress is easy to pick up. Now let me give you an analogy. Give a ballpoint pen versus a Chinese calligraphy pen. Brush, brush. Now ballpoint pen is very easy to use. If you pick it up, you'll start writing. Anyone can do it, even a two-year-old kid. But the two-year-old kid handwriting will look terrible but there are some people who can actually use a pen to create artwork like Zentangle so they can create masterful or masterpieces. Whereas for a Chinese calligraphy brush, by the time you can even manage to write legibly, you'll look as if it has a certain sense of quality. So people say, oh, this is a very good instrument I should learn calligraphy brush, but if the person using the brush doesn't upgrade himself, doesn't continue to improve or learn, his standard will stay there. Whereas a person using a ballpoint pen, if he continues to improve himself and to pick out new skills, new design patterns, and to learn from others, his penmanship will look much more better than the person using the brush. So, and the question is if in, let's say in your childhood years, you are told that you had to use a calligraphy brush to pick out writing instead of a ballpoint pen. How many of you will actually give up? So it is a question actually, because PHP and WordPress is so easy to pick up and everyone's picking it up, so they are varying standards of quality. So it leads to this impression say, oh, so many PHP websites, PHP powers about 82% of the websites in the world, but some of them got vulnerable attacks, but we do not know the developers behind them. So the key thing is actually a programming tool like PHP, CMS at WordPress is ultimately a tool. The key thing is about problem solving, solving a problem, so you choose the correct tool. So actually the question how the local PHP developers are thinking about WordPress is, yeah, they are just using it, I would think superficially, no one is actually doing like deep work, or like the US, the United States, the White House, they are using WordPress to power their website, not so for the Singapore government. You don't really see a big WordPress agency in Singapore actually serving enterprises, or then like probably freelancers and probably small companies. Ah, okay, no, his company is quite good, yes. Okay, yeah, but that's a great answer, lovely. Okay, so this one is gonna be a longer question, sorry, go ahead. I have a question for Jenny. Yeah, so this is on AMB. It's all gonna be about SEO, right? Yeah, so I know that Google is increasingly integrating the AMP with the search results, right? So basically the sites are opening up within a Google shell by default, and you will have to make an extra click to go to the website itself. Is that a way to, because I know Google does it, you don't have a control over when Google does it to your website, is there a way to opt out of it, meaning that not open inside the shell but open your website instead? Is there a way to do it? So first thing first, let's take a step back and see why is that done so. So the reason why it's open on Google shell because it's enabled the AMP catch to happen, so it makes the website to launch almost instantly when user click on the Google search result. And of course, as a developer, you have the right to remove it. All you need to do is that, you just need to break the link between Canonical with the AMP HTML but I strongly not recommending it because it defeated the purpose of you having an AMP website. And also just want to highlight, just in case you are not aware, even though they go to the Google shell, actually publishers have the credit to that traffic. And then you can still see the analytics content if you use AMP dash analytics, just less a normal thing that you see on Google analytics. And then also, actually there's a lot of feedbacks from you guys as well to make it easier to go into the Canonical page instead of the AMP page. And in fact, Google has been doing a lot of adjustment to that since January 2017. If you share the page, you can quickly go to the Canonical page. And if you're sharing that page to your messengers, to your email, the one that's being shared is actually the Canonical page instead of the AMP page. So to wrap up, it's possible to do that. You just need to remove the link between AMP and the Canonical, but it will defeat the purpose. I hope that answered the questions. Thank you. So my turn, right? So I want to know a little bit about the WordPress communities in the various countries. I purposely make sure there's Japanese, Blangaday, Singapore. Well, she was born in Indonesia, and Australia. Yeah. So, okay. So tell us a little bit about the WordPress communities in your country, starting from Mayoko, but this is a long topic. I want it in 10 sentences or less. Tell me, tell us a little bit about the WordPress communities in your country. Is it a question? Yeah, there's no question. Just tell me. Yeah. Community? Yeah, how would you describe the Japanese community? The French community? Yes. Yes. Where can I start? I already talked today, but we started translation of WordPress over 10 years ago. I didn't, I didn't started WordPress at that time, but I heard the story, and they started first word camps like to Sazang 8, I think. And we had word camps this year, and there was 800 people. And yeah, so community is... Thousand, I think? Eh? Thousand. Yeah, Tokyo, yeah. And Kyoto also had word camps, and I heard 350 or something. So yeah, we have two word camps this year, and in this room, I can see a lot of book authors and plug-in authors. They also come to this word camp. So yeah, our community has a lot of, yeah. How many percent of websites WordPress in Japan? Yes. I saw their stats about CMS website, which use Japanese. They use 80% WordPress, yes. So it's a lot, and... It's basically our base in Asia, WordPress. And whole WordPress user, 6% use Japanese version. So yeah, it's... Can we just say thank you to the definition of WordPress? Yeah. Yes, yeah.  And every country and every word camp, we create one based on the local city. So the one this time we have, well, it's based on our theme, which is towards the future. So it's a Roboto Wapu, so we've got a sticker. And they have made a Kenshin Wapu, well, Makawapu and so on. But the designer came from Japan, the first ever, the original Wapu, yeah. Cool. What about you, Asif? 10 sentences or less. Bangladesh has a very big WordPress community. I remember like in back in 2014, Wadcam San Francisco, I spoke about our community and why I am involved in WordPress that much. In that time I shared an stat that in 2014, only in August, there was over 40,000 WordPress programmer only from Bangladesh. So WordPress is extremely popular in Bangladesh. If you ask me the same question, like how many percent is, I would say probably over 90%. We have successfully popularized WordPress in Bangladesh. We have successful WordPress meetup groups. In some of our meetup, we have like over 400 people. And because our venue could not support that, so we had to limit in 150 or something, we have not had any Wadcams yet. We are trying to work on that. I applied for almost four years ago. We have some issues and going back and forth. I hope like it will happen very soon, maybe in 2018. Yeah, they're all helping. And we have a lot of like plug-in developers and especially theme developers, developing themes in theme forest. And there's a good analysis like in the US, if you go to a bank, if you ask a banker like, do you know WordPress? Most of the people will not. But in Dhaka, if you go to an educated person who understand web, if you ask him, do you know WordPress? They will know, yeah, I know WordPress. If I want to make a blog, I will make it to WordPress. So WordPress is very popular in Bangladesh. And we are looking forward to have a good Wadcams in the future as well. Awesome. That's pretty cool. You should teach us. Yeah, actually the organizer of the WordPress Singapore Meetup is standing at the workshop. You will actually be answered the question better. So actually I attended, started at 10 meetups about two years ago when I was doing freelancing. And I also started helping out with engineers.hg, our, also in guys who are recording the work cam this year. So sometimes I had to record the WordPress Meetup. So compared to the other 10 meetups in Singapore, WordPress Meetup actually has a kind of good mix of developers and what we call lay people, non techies. So yeah, some people who are starting their blogs, who are going to do business, you want to do e-commerce, you want to find out more about WordPress. So usually the numbers, think about 20, 20 plus, is that correct? Yeah, yeah it's nothing, so it should be correct. Oh, sorry? The numbers usually about 20 plus, right? Or 20? Well, I'll say 30 is a nice number. The biggest we had was 80 for Meetup. But that's because it's SEO related. Yes. All right. Thank you. Yeah, I'm nervous now because I will be very honest with you guys, this is the first work cam I ever attended. Yeah. So I did mention to you guys that I moved to WordPress recently. Do you want to know why? So in a Google's perspective, I just had AMP Roadshow Indonesia where there's a lot of website owners. When we asked who use WordPress, 50% raised their hand. So that's like a benchmark. And then I personally work with AdSense Publisher, meaning that publisher that monetized their content with Google AdSense. And about 70% of my publisher actually using WordPress. And that motivated me to move to WordPress. Nice. And did you move from blogger? Confidential. Because that would be tricky. Oh, I work for Google, but I don't blog on blogger. No, I work for Google, but I use Macbook. I'm a New Zealander and I live in Australia, but I've lived there for so long and most of my WordPressing has happened in Australia. The WordPress community, much like the population of Australia is actually not huge and is spread around the main centers. So we have WordPress meetups in all of the main centers, Sydney, Brisbane, Melbourne, where I live, God, Adelaide and Perth. And we have at least one or two word camps every year. Next year, I believe there are gonna be word camps in both Sydney and Brisbane. We keep getting some pressure to have a word camp in Melbourne. If you wanna help me organize that, go right ahead, because I'm not gonna organize it on my own. So, and there are WordPressers, it gets competed a lot with by Adobe in Australia, I think, in a lot of cases, certainly at the kind of scale that we're operating it. So, yeah, but the community itself is really active and engaged. We have about 2,500 people on our mailing list in Melbourne, but the number of people that show up to a meetup varies between kind of 50 to 60 month by month. Thank you. Yeah, so we got two, we got actually no time, but I'm gonna take two more questions from the crowd. You just have lesser time to eat, but I bet most of you are very full from lunch, so I think we'll find that. So, anyone wants to ask any questions? Preferably not SEO related. Yes. This is probably for Xion, Xion. Okay, WordPress started when PHP was version four point something, and then it got stuck with version 5.6 for a few years, and recently people have been, we have seen increased adoption of version seven. How would this affect WordPress users and also developers, and how will it affect the near future of WordPress? Okay, talking about PHP 7, so WordPress has kept itself up today, so moving to PHP 7 would be no problem. PHP 7 versus PHP 5.6 itself has a two times increase, even let's say just by changing the PHP version, you're not changing your code, you're just changing the PHP version, your code will run at least two times faster. This has been tested even in WordPress, even at Magento or other popular CMS systems. So for PHP 7 by itself comes with a lot of nice new features, error reporting, and catching of errors, syntax parsing. So actually, a lot of vulnerabilities have been patched, of course, it's still ongoing. So one thing is PHP is here to stay. If you get a domain hosting, let's say, with our own domain name, let's say, WorkCam.com, you can't default with the LAMSTEP, Linux, Apache, MySQL, and PHP, and that doesn't cause anything extra for you to upload PHP file or set up WordPress. So going in the future, actually, this is good. There was some time where people think that PHP is dying, so even Facebook came up with a new HVVM for PHP to kind of, because they find PHP insufficient, but with PHP 7, now Facebook says that, okay, HVVM, we can kind of retire it, we probably use it internally, so some of the features have already been merged in PHP 7, so it's a good way forward. So WordPress is based on PHP, and of course, this will be WordPress in the future as well, thanks. Yeah, so I'd like to add a little bit of that at the WordPress.org level. So we have been engaging the web posts around the world to make sure they upgrade from 5.5, 5.6, or worse, to 7. Honestly, there's no reason not to upgrade, because WordPress is incredibly backwards compatible, and when we do patch, we make sure it still somehow works for older PHP versions. And if you're still on 5.5.5, that's not supported anymore, it's insecure. If you're on 5.6, that's almost gonna be not supported, so. So yeah, it should move to 7. Like, you know, you update your apps, right? Update everything, yeah. So, should I not update everything? No, no, no, I would say that I've gone from 7. something to 7.7, and the site breaks. 7.1? I can't, whatever, so I've gone from one to the other, so I'm on 7. And I go to the next one, and my site won't load, so I'm like... Probably one of the bad plugins. Well, it's a thing or a plugin, so then you have to kind of do all that. So, what I'm saying is, don't do it live. Yes, good. Do it, do it, do it. Yes, we should upgrade, but don't do it live, do it in staging before you actually go there. Agreed, very strongly. So, last question. All right, then I get to ask mine. So, tough one. Where do you think WordPress will be in 2020? I want a one-liner, I want a big paragraph. Everyone give me a one-liner. Who's ready to speak? The dashboard will be customized. People will create, and like Team Developer will create their own dashboard, so it will not look like WordPress. The team will be almost plugin, or like it will be more like base builders. So, what piece will be very different in 2020? Awesome.  Okay, my answer will definitely be the WordPress REST API. It opens up a lot of new possibilities. So, right now as a developer, instead of coming out with my own custom database, my own custom CMS to power my new mobile app. So, right now I can just write an Android app and iOS app that actually is reading off the WordPress REST API. In fact, actually there's an app on App Store called Nomad Base. So, first version was done using React.js, and the second version was done using React Native, and they are actually calling the WordPress REST API. So, it's running a WordPress backend. So, you don't need a techie guy to run SQL statements to key in data into a database. You can have your marketing personnel just going to the super user-friendly interface in WordPress, key in your data, and it automatically appears in your app. Simple and easy. Thank you for advertising my product. Yeah. Yeah. You actually have to do it in a circle? Yes. I made them do it. Okay, but I didn't want to explain what Nomad Base is.  It's not for dating, right? It's just to meet working friends. Okay. There it is. Just in one, two, three, four. I was thinking, 2020 WordPress? Yes. Okay. From translation view? Sure. There are a lot of, like 10 years ago, nobody considered about translation, but now we have a lot of language, like 180 something, I forgot, but maybe, maybe. I'm not sure. Google is, please. So, yeah. So, yeah. Now, most theme or plugin is not translated yet, but we want to translate 100% then for most language, then so, you know, for people who don't speak English, it's more than English speaker in the world. So, if we want to make WordPress barrier-free, so we have to do that, I think. Nice. So, you think that 2020 translations would be close to 100% and like a Japanese person, instead of downloading the 10 teams that are translated, you can download 5,000 teams that are on WordPress.org. Big job, depending on you. And I think we have Jenny and Dee. I think in 2020, I see huge potential for WordPress to scale because I see a lot of entrepreneurs, content creators that are currently offline, especially in emerging market, they start to look into Go Online. I see WordPress as a huge potential to enable them to do that easily. Thank you. That's a really good way of looking at it. I see, because so much of what I do is at enterprise level, I see there being more events and things happening for WordPress at enterprise level, not just smaller, medium business. So, I'm hopeful that in the next couple of years, certainly locally in our kind of regions, not just in the US, we'll see more and more conversation happening there and see more and more adoption of WordPress at enterprise. Nice. That'd be great. Yeah, in the US, they have a work camp for publishers. Maybe one year, we'll do it like a work camp for banks, publishers and so on. That'll be super awesome. Cool. So, that's all for the AMA. They are still around, catch them and ask them anything. Try not to, you know, about WordPress. It's not just all about SEO. All right, so thank you for attending. I'm gonna hand it back to Xiao. And thank you, speakers. Thank you, Dee. Thank you, Jenny, Zion, Asif and Michael. Okay, so right now we'll go for tea break. We'll come...