Welcome back to kind of getting TV the only place on YouTube. We're all geek culture collides. I'm Shannon and today on the show We're taking a look at the pop television. I love Lucy number 654 and 655. This is Lucy and Ricky All right, so first things first. Let's go ahead and take a look at the packaging As you can see we got both Lucy and Ricky here very nice pink border with the I love Lucy logo you got Lucy in her housewife's clothing there and Ricky in his performer clothing there Usually when he was wearing that hat and banging on the bongos he was usually performing Babalu or Cuban Pete One of those songs there were there weren't too many songs. He actually performed In that hat and with the bongos Usually He more or less saying most of just saying most of the time But being in the hat and with the bongos, you know, he's singing one of those two songs more than likely On the sides here nice little display sides. I'm not gonna go over too much because you got to see See the packaging in the Display part of the video very nice pink background though on the back as You can see you got Lucy and Ricky in pop form and then Lucy and Ricky in real life with the I love Lucy logo 654 is Lucy 655 is Ricky and 656 is Lucy in the chocolate factory These are my wife's pops She said she didn't really care for the chocolate factory episode I'm I feel the same way. It's That episode is very Overdone It's not as funny as People make it out to me because it's so over portrayed So with that being said let's move on to the clamshells Real quick As you can see there are the clamshells. They do come With snaps They aren't just hanging there loose And in this display portion of the video. I did not have Ricky's Display base on him. I actually didn't even really notice he came with the display base Until I looked at the packages But yes, both figures do come with display bases So yeah, very nice the clamshells My wife and I are both in the box collectors She's only really got one pop that she took that she took out of the box and that was her 11th doctor from the doctor who series mainly because that was her very first pop that I'd gotten her and She didn't think to keep it in the box for display. She didn't realize you could display them in the box So but anyway, let's go ahead and take a look at Ricky and Lucy but Ricky I Grew up on I love Lucy. We've got three seasons of the I love Lucy TV series on DVD I Got him for my wife a few years ago for Christmas I always watched the reruns on Fox in the mornings if I stayed home from school or whatever Or if I had the day off from work, I would always watch it on Fox. I think it was on around noon So But anyway, here you have Lucy and Ricky. Let's go ahead and Move the camera down a little bit. There we go As you can see Lucy has Some nice blush on her cheeks I think I Could be wrong They missed an opportunity here To make these pops Gray scale Just like the series. I know you can get the series in color now whatever, but It was best in black and white But still very nice her red hair Really shines on this figure. It's actually more of an orange-ish color though I don't I never really quite understood Why they call it red hair Even with me the people say I have a red beard But it's not really red it's more of an orange-ish color But I digress anyway, you got the nice little bandana in the back of her hair Nice dress with the apron Holding her hand out to the side I'm not sure why she you know, maybe is I don't know type deal Anyway, very nice figure the paint quality on this is very nice the detail on this on the dress and on the apron It's very nice almost no Paint bleeding that I can see The rosy red cheeks they got her lipstick on it's very unusual for pops to have mouths But this one looks really good The fingernails are painted nicely. They even added her wedding band and Her pearls there Very nice and as I said both figures do come with display stands Here's Ricky as you'll notice they Kept on they put his wedding ring on there also nice Got the strap for his bongos Nice detail on the bongo He has his pocket square in his pocket Almost no paint bleeding that I can see Very nice figure Love it I Tell you if my wife wouldn't have bought these actually I bought them for her if my wife wouldn't have got these I would have probably got them for myself Great-looking vinyl figures Funko did a great job with these characters. I highly recommend picking them up If you're an I love Lucy fan if you're a classic TV fan if you're just a Funko pop fan I highly recommend picking these guys up So anyway, that's it for come again TV today. Hope you guys enjoyed this video This will be one of the last Funko pop reviews. I do Especially this year From now on after The beginning of 2019. I'll only be doing them on a rare basis. I won't be doing really individual pops. I'll be doing more of a Multiple pop review type deal if I have individual pops that aren't a part of a or that I don't have like Multiples for that line or whatever then I'll do a single video dedicated to them But I'll put up multiple videos one day out of the month. Just flood my youtube channel with it It won't be on a regular basis like it has been in fact This is the first pop review I've done for the month in November and November is almost over with Hope you guys had a happy Thanksgiving Take care if you enjoyed this video make sure you hit the subscribe button right there So you stay up to date on all things geek culture Also, make sure you check out one of these two playlists on the side For videos just like the one you just watched I'm Shannon for come again TV the only place on YouTube.


Hello and welcome to the Tealia Carrier and Internet Society September virtual roundtable, cyber attacks and how the right network can be your best defense. I'm your host, Laura Nolan, and joining me today are Matias Friedstrom, Chief evangelist at Tealia Carrier, and Andre Robachevsky, Senior Director of Technology Programs at the Internet Society. I'm going to welcome our panelists in just a moment, but first, a few housekeeping notes before we get started. We want to make sure this virtual roundtable is as interactive as possible. So please add any questions that you might have into the Q&A box. If you have any other comments, please feel free to add them into the chat box and we'll take a look for them. I'd also like to address to address all the questions at the end of the hour. Now, if you don't have time to get to your questions, our panelists will follow up with you directly. Also, I'd like to take a moment to now to ask the panelists to introduce themselves so if each of you could give a brief introduction and explain your role and the role your company plays in the industry as it relates to today's topic. So let's start with you Matias. Thank you Laura for having me. I'm Matias Friedstrom. I'm currently the Chief evangelist at Tealia Carrier. I used to be the CTO for many, many years but have the last couple of years spent my time as the Chief evangelist, really trying to understand what the market needs from carriers, service providers like us, and also what we need to do to please the market really. So security is dear to my heart and I'm really curious to be here and discuss with you. Wonderful. Andre, how about you? Yes, I'm Andre Rovachevsky, Senior Director for Technology Programs at the Internet Society. Internet Society is a mission driven organization, global organizations driving for the open globally connected secure network to transport the Internet for everyone. And I've been in the Internet industry for almost 30 years from building networks to dealing with techno policy issues, but I'm by nature a technologist. My main focus on Internet infrastructure security resilience, particularly working on issues that border with governance and policy. I'm just at the birth of the industry led initiative, supported by the Internet Society called mutually agreed norms for routing security manners, something that is very much relevant to the topic we're discussing today. Wonderful. Great to know both of you and we've got a lot to cover today. So let's jump right into our first question. Can you define cyber attacks and the different aspects of Internet security apps versus network security. So Andre I'd like to toss that one to you first. Thank you, Laura. Well, let me start that to saying the Internet is a very complex ecosystem. It's a network of network and there indeed numerous facets of security. Internet architecture is based on their layered model when underlying layers provide common functionality for upper layers. Think of like a network function responsible for moving packets from one point to another, while application layer is mostly concerned about exchanging structured data between two or more applications. This is of course a simplification to think of the Internet as a layer cake, but it gives an idea. What that means is that applications can be developed without much concern for the underlying network technology and networks can be deployed and operate across different media like DSL or fiber or satellite. But there is no security layer there. And that is for the reason because for each of those components for each of those layers, threat and risk assessment should be performed separately and security solutions should be developed. This is why for each of those technology building blocks that ITF is developing ITF stands for the Internet engineering task force one of the main standard development organizations for the core Internet standards. There is a special section in each of the specifications called security considerations. That is what in security jargon called security defense and death. Well case in point illustrating these complex dependencies and the need for security solutions for each of the component is an incident that happened a couple of years ago, which resulted in emptying Ethereum crypto wallets. The attack involved route hijacking to enable impersonation of the main name system resolution to enable reelection to fake version of the website might either wallet. And it demonstrated vulnerability at each layer was exploited, including social engineering when users were sort of tricked into fake website certificates accepting them and leading to the fake website. So if you ask me versus network I would say both are important. But because that the security gaps and cool infrastructure provide broader platform for launching attacks, and even second venting highly security solutions I would say probably that will be requires more focus, and it actually more challenging. Mattassi would you like to weigh in on this too. I think Andrew covered it really well I think you know there are many different ways of cyber attacks. I think we will discuss quite a few of them here as we as a carrier is obviously more focused on the network side of this. But of course any cyber attack can happen both on the application occasion layer and network layer they're both important in combination. So I have you on the hot seat let me start with this next question with you. How does cyber attacks happen and then what is the market saying our cyber attacks becoming more common. Yeah I think that's a good question really and of course there are many many different cyber attacks as Andre talked about you know you can attack the applications you can attack. And then phishing emails and there are many ways of it. I would much sort of focus on the network side because that's where we are strong and that's where we believe we can add some value here and on the network side I would argue that the DDoS attacks are by far the most important ones to stop and where most attacks are DDoS attacks for those people that don't really know are coming in two ways really. One of them is sort of the persistent low intensity attack where you by attacking one target with question after question could be very small questions but you're just sending a question a question and you never really answer and at sort of at the end of the day the server gives up because they've been asked and it's overloaded in terms of memory and so on. And the other one is really where you collect a lot of sites on the internet and you attack one site with large volumes, you just pour on data into one site causing that site to pretty much go down. So those are really the two ones in the DDoS and if you ask me what if these are common you know we did a survey right before the summer this year among 400 enterprises both in US and in Europe and 78% of the companies we surveyed said that they had been attacked more than 100 times already this year and 68% of them said that they've been under DDoS attacks so I would say yes these attacks are very common. We also asked them you know if they've seen an increase during the pandemic and actually half of them said they have seen an increase. Some of them said they hadn't seen an increase but more almost almost half of them said they've seen an increase. So, yeah, this is a big problem for the internet and something we all need to work about to get out. Wow, those are some shocking statistics I appreciate you sharing with us today. So we're going to start now to talk more about when those cyber attacks happen so what happens when they're successful and I do break through, and why are they successful Andre can you start with that. Well, Matthias already mentioned types of attack that happen and yes if we look at infrastructure denial of service attacks are most common and quite easy to mount in fact. So let me sort of reflect a little bit on why those attacks are successful. And I think success of those attacks is mostly linked to the challenge of addressing security gaps in the internet infrastructure. So while many of the vulnerabilities and even technology solutions are known for decades, little is done to close them down. And one of the main reasons are negative externalities so called when course of security gaps are not incurred by negligent entities, when the cost of the damages occurring from those attacks are not incurred by the tackle facility. Well, I take one example that very close to my heart is routing security, and in fact security of your own network depends on actions or in action, if you will buy other network operators they about 70,000 network operators in autonomous system in the global system. So there is a huge dependency and the huge externality where if I do nothing, I do not make my security of my network significantly bad worse but at the same time I'm not contributing to the global routing security. The same applies to open resolvers like those are the launch pads for many of denial of service attack volumetric attacks, and people operating those resolvers do not care they're negligent, but they do not suffer from those denial of service attacks. The same applies to other types of, you know, denial of service that amplifies networks allowing spoof traffic, one of the curse of the Internet is that routing or forwarding traffic doesn't depend on the source IP address. It's pretty much like in post office, when you send a mail, your return address only matters when mail cannot be delivered or you need someone to reply back to you. The same is here but that creates an opportunity to mount reflection and amplification denial of service attacks. Those who allow networks that allow spoof traffic, again do not suffer from those denial of service attack, but they are facilitating those. So let's disconnect I think it makes securing Internet infrastructure so challenging. We've heard already about just the impact and the large numbers of folks in the marketplace being victimized, you know, by cyber threats and cyber attacks and then the impact that it's causing businesses and companies. So is network security prioritized or overlooked by the market. Matthias, can you start with that. I think that's a good question. I don't think it's overlooked and obviously it's becoming more common in news on TV and other media where they talk about these attacks I think more and more people are aware of this happening. But I still think many enterprises out there are still believing that you know, really as Andre said you know if we if we don't do anything let's keep our fingers crossed that nothing will happen. In our survey when we asked them you know about 50% of them said that they are they are aware of what what service providers could do for them and where they could get help. But there is still half of them that didn't really have a good view of their protection so I think you know there are many many things enterprises can do much better here. I think some of them really get it. And I think the more they read about it the more they are aware of the problems that this has if they are not protected. So I would say it's absolutely not overlooked, but it's also an area where I think each and every one of them can improve because there is many more things you can do. Instead of just keeping your fingers crossed and hope that the attack will go to your neighbor and not to you. So, I don't think it's overlooked, but it can be much better. Andre, what do you think. I largely agree with what Matias said, and another thing that I would like to mention that some of the those attacks or some of the security measures they have not a very strong business case and that's exactly what I just mentioned about those externalities that the are caused of not doing something a note sort of buried by the by the negligent party. So the, there is also no, no one play alone can close those vulnerabilities in such a decentralized and distributed system at the internet. This is a situation that is called in no social science a collective action problem. Everyone is striving understands that they're better off with a more secure infrastructure, but due to conflicting priorities and this displacement of incentives, the organizations are very difficult to mobilize for the necessary that collective action and common goal is hard to achieve. I mean, look how some of the security technologies are not very easily deployed internet wide, how long it takes to security solutions to diffuse through the global internet. And that's partly because there is sort of not a very clear business case. It's not like in in sort of, you know, pre internet security paradigm where you can build walls and secure your little fortress. This is not possible anymore you're in open ocean, and you need to work together with other entities. Related to this, I'd like to mention an initial initiative called mutually agreed norms for routing security already mentioned my introduction, which is the acronym is manners. So we're looking for that was with good manners that is supported by the internet society. It aims to overcome this collective action problem right just outlined by developing common operational security practices into norms and building grown community that can demonstrate adherence to those norms. So that's one of the approaches that we're promoting at the internet society, and that's something that can stimulate or mobilize community for long term solutions. So deeper down we talked about is network security prioritized or overlooked, but are people even aware of the role of the network in preventing malicious attacks and then would that change that priority. Matias I'd like to start with you on this one. That's a really good question and I think you know sometimes. When we talk to enterprise it seems like they only think about their own premises and how to make sure that their own users have strong passwords and and they have a nice firewall at the sort of entrance of the building. That's it so I sometimes feel that many enterprises don't really understand that there's a way you can, you can work with your service provider and they can actually be your first line of defense and I'm pretty sure there's a lot of things we as a service provider can take away so that the enterprises never really see that type of traffic. Well, you're very right that many of them are are feeling you know as long as we have a nice firewall that's going to stop everything from entering our network and then we're safe. I actually think there is a lot of things the service providers can do here and really it's as Andrew said, the internet is something it's around 70,000 active networks out there. There are simply no rules on internet really because it's a trust based network, everyone has to trust trust each other, and of course 70,000 different people networks trusting each other. That's difficult, I think manners is a really good initiative. We're obviously part of that we want to make the public internet much, a much better place and much more safe. But I think you know many enterprises needs to start to think about the network as well. If we can stop at least half of the attacks before they even reach the enterprise, it's going to be much more easier for them to handle their security and sometimes I feel, as long as they believe they have a nice firewall they're safe. That's not the case. That's not going to help you. There are many ways for crooks and criminals to come around that so so combination of on premises or in the cloud security and network security is a must in the future. Well, the only thing I can add is that a few years ago we conducted a study together with analyst company 451 research, and we looked how sort of the attitude towards routing security in particular from enterprise level. And what we found is that one of the most challenging things in it security for enterprise is selection of their service providers and especially in connectivity providers. One of the challenges and security is the ability or rather lack of to signal your security posture. So when an enterprise selects a provider, it's like, well, how do we know that you provide this extra security things. So we were thinking that menace and still think that menace can add this signaling mechanism. One of the main concerns, and that was very surprising from this survey is that enterprise were very concerned next to denial of service attacks for traffic hijacking that their sensitive information can leak and take unusual routes on the internet and therefore being subject to surveillance for instance. And I think they did also discover that enterprise do not clearly realize the role of their service or connectivity provider can play in securing that particular part. So that was quite revealing and that's why we think that menace can help also service providers to signal their security posture to their potential customers. So now that we've talked about recognizing the role of the network in helping combat cyber attacks. What are the best ways to ensure maximum network security. And I know this could be just an open field try to narrow this down but from your perspective, Andre, what do you think. Well I have to start that security is not a state. It's a process right if you treat security as a state and you would go and patch your software and you think you're secure. You may be disillusioned a few moments after right so you need to have a process that continuous improvement continuous security. So, another thing to consider that the level of security we need to achieve and maintain should reduce the risk to a successful attack an acceptable level right. We, you know, maximum security may not be cost efficient that may not even be needed. But what we're striving for is that risk is at this acceptable level right that doesn't mean that we take it easy and relax on the country it means our job of security professionals It also means that in such a system is the Internet, we need to continuously do this risk assessment understand new vulnerabilities and strive for collaboration. We shouldn't forget that such independent and hyper connected system as the Internet security is essentially a collaborative activity. Efforts, in my opinion should be focused on supporting this collaboration of facilitating it, such as improving information sharing transparency accountability, this sort of stuff. Matthias, I'd like to ask you that same question. You know, is there a way that you think that we could ensure maximum network security. Yeah, no, I really agree with Andre. It's not an end state. It's a process and something that everyone needs to work on we need to improve ourselves every day. But I think it's really, as Andre said, it's a combination of an ecosystem there and I think that's where people have struggled. I think people felt, you know, in the past you bought your security from a security company. And then you felt safe, you know, I have I have everything I need from this fantastic security company and I should be fine now. I think in the future when both security companies are moving their stuff into the cloud to be even more efficient. And people are using public Internet much more for connecting various remote sites and so on, instead of having secure MPLS routes in the network. I think that the future networking is is much more about a collaboration between. Yeah, your service provider connectivity provider that I represent security companies, then obviously Internet societies that Andre represents who knows this and can guide people and then of enterprise people themselves and I think the future is much more collaboration, sharing of information, looking at you know okay we've seen this type of attack right now what can we do to do to mitigate that type of attack. I think the days when you bought your entire security solution from a security companies over. Everyone needs to do much more these days and that's where a combination of a number of companies is a must for an enterprise you can't just buy it from from one, and we don't tell anyone that we are the complete security package either we are not. We are one part of it, and we can fix the network part, or at least do do as good as we can for the network part but it's a combination of of an ecosystem that's needed in the future really. I want to remind our viewers, if you have a question for our panelists or a comment, feel free to put your question in the Q amp a box, or just comment in the chat and we will get to that we're going to get to some audience questions in just a moment. We're going to continue our discussion but I just wanted to do a quick reminder for those who might have joined us late. So let me throw it back to you Matias. So we're talking about the future you mentioned what we're, what we may try to expect, I guess from some of these cyber attacks, and the collaboration aspect which is so key. Can we get this under control, or will it just continue to be so rampant. What are your thoughts on that for the future. I know I think that's the million dollar question, it's a good question and I would love to say yes we can get them all under control and I really believe so. But we really need to work together and I'm pretty sure crooks and criminals are not sitting back, they're probably inventing new ways of doing these type of attacks we've seen ransomware attacks have been increased and then obviously that's when a lot of money is involved. If you can shut down a competitor that's, that's also something where there's a lot of money involved so I really hope that the entire industry are coming together to fight these type of security threats. I'm pretty sure they will never go away. Hopefully over time we can control them so much, but in some way it's always down to this sort of. Yeah, very last point the weakest link is always the weakest link and if not everyone is stepping up and behaving well. There are ways of getting into networks I think you know, if we can really get everyone to understand that a combination of everything. We have multiple systems providers suppliers. I think that's what we need. I'm sure there will be cyber threats in the future as well, but hopefully we can keep them under control. I really believe so. I hope so. Andre, how about you. I'd like to share my tears hope and think that yes we need to continue our efforts. I think what we see also that this culture of security and collaboration is building up at least in our experience with the menace effort there is much more awareness of roles and responsibilities of individual players or network operators in this ecosystem. I think a known building is very important because that makes sort of undesired behavior or not not not meeting certain security standards not just a matter of certification or being subjected to government regulation, but it's a social acceptably to behave other way. And as you know, like a lot of things in the Internet are done on interconnection which is collaboration, essentially, right so this peer pressure and social acceptance plays probably even bigger role than any regulatory intervention or something like this so I really hope that we as an industry can come together or continue coming together discuss this and sort of, you know, police ourselves and make the Internet safer please. We also need to look at security in perspective right. We can just say well security is getting worse, we also need to look at the benefits right, we also need to normalize those attacks by the size of the Internet by the benefits it brings. So, I'm not saying that the pictures is is is bright, but I'm saying that that needs to be taken the perspective. Last thing is I that also depends on the changes in the Internet architecture, some of the trends which may not be necessarily very positive, but they can contribute positively to security as well. For instance, you know that cloud and content comes closer to end users to customers to edge networks. So the link, what Mattias mentioned the link or number of links between your source and destination. It actually becomes short in the Internet Internet becomes a bit flatter, and that makes security slightly less challenging or slightly more easier, because you need to coordinate need to collaborate with less amount of parties than maybe before. But that also has side effects I mean the Internet is getting more centralized, less distributed, and that causes other problems, maybe not necessarily related to security. So that's my again, not having crystal ball. Some deliberations. Thank you Andre. Well, there is a lot to consider as you've been talking about from you know watching market trends and collaboration and you know and protecting protecting the enterprise so where does someone start and how do they learn more. You know, I think, if I start there, I think there is a lot to learn. You can always obviously call your service provider connectivity provider and ask them how do they take care of their network and how do we ensure that no one can enter our network and that any malicious traffic that we can see on the network is thrown away I think that's a good start. But then there is, there is a lot of written material out there there is a lot of guidance I think companies like the one Andre represents are a good source of information, you can just call them, ask them you know where should we start you know how do we start here. I think there are now many good examples of companies that's turned around this in their advantage and went from a very insecure company to a very secure company.  I think older people like myself, you know, I remember the old days when cyber threats didn't even exist. But I think everyone that comes from university right now are much more aware of this. Probably much, sometimes much more happy to click on things on the internet as well which is dangerous but I think you know the way and the more educated people that's going to come out the more educated everyone will be so. You know, for an enterprise I think they should really start by. There is a lot of material out there there's a lot of things you can read about there's a lot of good examples of what companies have done so don't be afraid of contacting your service provider or whoever and start your journey. Andre what do you think I know you're doing a lot of great work with the internet society so where can folks start their journey to learn more and really be involved in in protecting their data. Well, I mentioned this manners and apologies for repeating this sort of shameless plug, but our website of this initiative contains a lot of useful information so that would be a good place to start and manners applies not only to service providers but to companies that operate is like tell a carrier, but also to enterprises, and I would say enterprise of course they have to clean up their backyard they need to take security or elevate security importance in their own priority list. But also, we need to think how to engage how to make market forces work in our favor. So I think the impact sort of selection of your connectivity provider. It's a two way thing, right. If you put security requirements as one of the essential components, you make your choice not only price, not only maybe throughput, but also on how well your partner can be a security partner in this game. So realizing that I think can can help us to overcome this, you know, disconnect this externalities that I was mentioning before. Wonderful. Well, we do have a few questions from the audience that we're going to send to our panelists in just a moment we've received those in our Q&A box. And if you have any additional questions while we're answering these, please feel free to type them in the Q&A box. And we'll get to those with as much time as we have left and if we don't get to those we'll get to our panelists to follow up with you directly. And the first question we received from the audience is, could you speak about what steps Tilia Carrier and Internet Society are taking to do their part in keeping the Internet safe? Andre, I know that you talked a lot about manners and we're going to we'll probably circle back to you in a moment, but Matias, let's start with you first on this question. Yeah, yeah, right. No, we're actually, I think we're trying to step up and I know that this year we have sold more of our DDoS service than ever before and I think that's important. I think many more companies are realizing how important that is. And of course we need to improve that service as well. So practically a DDoS service that we are doing is looking for anomalies in the traffic pattern that we see in our network and the more traffic we have, the more we can learn from. But we also need to have many more scrubbing centers so we can take away the absolute largest DDoS attacks to protect our customers and so on. That's one thing we can do. Then there's of course a lot of other things we can do around our network making sure that no one else can enter our network and no one else can access the routers and the equipment we have and so on. So I would say this year we've put extra focus on security and that's just going to continue into next year. But as a network provider, we're absolutely mostly focused on the network itself and that's where the DDoS attacks is the ones we need to take away. If we can help the world by taking them away, we've done a big job for the internet to be much safer place. Andre, how about you? You want to address this question, the audience question about what the internet society and Tilia is doing to keep the internet safe. So at the beginning I mentioned our mission and our mission is for open global connected secure and trustworthy internet for everyone. And in the last two things secure and trustworthy, we have two main projects for many years running focusing on those areas. We're not a network operator.  So one project that I've mentioned many times is MANS, Mutually Grid Gnomes for Outing Security. And the internet society is acting sort of as secretariat, although this is a really industry led initiative with telecarrier and other leading operators being part of it and guiding and driving this effort. Another effort is encryption. So we are promoting end to end encryption and we are trying to sort of criticize proposals that try to undermine end to end encryption. And that's back to your question whether application is more important than network. And I said all is important. And this is case in point where you need to secure your infrastructure, but also you need to secure your communication, sort of on application layer, right? What could have been done without encryption, for instance, whether end to end encryption. So those are two main pieces that internet society is contributing in the area of security. Okay, we do have another question from the audience. This one says, what types of cyber attacks do you think are going to be most common in the future? I know that, Andre, you don't have that crystal ball like you mentioned, but do you have any thoughts to weigh in on what would be the most common cyber attacks that, you know, is that they may develop and evolve over time and how we can prepare for them. So what do you think? I think, in my opinion, the cheapest ones are volumetric denial of service attacks and that sort of extortion and stuff like this, right? They can be very powerful and especially with, we know that Internet of Things and other connected devices they're exploding in numbers, right? And they're not always as secure as we wish. So they provide a huge launch path for those types of attacks. And I think the growth of more sophisticated attacks, we should expect, that's probably not something that we as sort of infrastructure providers can really do, but this, you know, advanced persistent threats, attacks on national binational states, which create very sophisticated things. And the danger of this, that those things may spill over, they may reach this sort of, you know, common market, if you will. And we saw this as well, that those sort of weapons can get into hands of just, you know, simple hackers and be used. So I would watch this trend very carefully as well. Matthias, what do you think? What types of cyber attacks do you think will be most common in the future? I think that's a good question and I'm almost afraid that we, if we would redo this webinar in three years' time, we would talk about things that we don't even know about today. Because it's really, as Andre said, the people are very creative out there and there are many interesting objects online that people will still find and still be sort of interested in attacking.  I think they will continue to be, to be big. Hopefully, someday people will be smart enough not to not to do that, but I'm just afraid that that's it's such a simple thing. You almost make an email look like another email and you get some, some people to click on them. I'm just afraid that that's just going to continue, but it's really, as Andre said, you know, if everything becomes online, then there's some really scary stuff like weapons that can be reached above all. And yeah, I hope that's not going to happen, but I'm afraid that might be the next target for these crazy people. So we have time for one more question and I think this will might go to you Andre, but also, Matthias, if you want to weigh in as well but I know Andre mentioned the 451 research that was provided and a survey, and a lot of research that went into at the research society regarding cyber attacks and someone who joined wanted to know where they could access that information. I know we talked about, you know, how to get in touch with you but more specifically that specific research or just information where can they find that. So the simplest way is to go to the menace website it's manners.org. And there is a tab resources and you can find different presentations and papers and this report I mentioned as well. And this reports that has two parts. It has a looked at the service providers the transit operators are what menace means for them, and also what menace could mean for enterprises. So yeah, please and if you have more questions you can always reach me. Can you guys go the telecarrier website or where would you like to point some of our viewers and in finding more. Yeah, no, obviously the telecarrier website have a lot of we have a knowledge hub there where you can the report I referred to earlier in this conversation is of course downloadable at that point and and hopefully you can get some other stuff there. You can get some guidance but you can of course always contact us and we can guide you as well in terms of that but that security report is very interesting in in terms of how enterprises see the the future of security. So please come. Okay, well thank you very much. Mattias and Andre for your time today a great conversation we appreciate you being here. Thank you very much. Thank you for having me thank you. Thank you viewers for joining us be sure to look out for our next virtual roundtable, and be sure to visit our YouTube channel to catch the recording of this and all of our past virtual events.


Ssssssssssss... ...that's drunk! Here's a fun and really simple Super Famicom game that never left Japan. Getu Kotsu Dangan Jidoshakesen, Battle Mobile, and I'll just be calling it Battle Mobile for this video since it's just a wee bit easier for me. As you can see, this is a Top Town Spy Hunter-style game, made by System Sakum, in June in 1993, but I should mention that despite the similar gameplay and viewpoint this This is a standalone game that has nothing to do with the Spy Hunter series, and this game is English friendly. No Japanese text to translate here, so you can play this one as is. Battle Mobile also has a bit of a goofy attack mechanic. Instead of firing weapons at enemies, you use your car itself, pressing the B button to dash your car into other vehicles. It seems kinda strange at first, but it does work pretty well since you can do it in pretty much any direction. You also have airborne enemies to contend with, and you use the Y button to fire an unlimited number of missiles all over the place. You're given a shield, which you can activate with the A button, and you have plenty of opportunities to pick up more shields, as well as other items like rocket upgrades and, most importantly, extra energy. That's the other weird thing about this game, your health meter is always decreasing, serving almost like a time limit. The enemies themselves don't do damage, but walls and projectiles certainly do. It's kind of a strange balance that can feel a little odd at first, but once you get the hang of it, this game can be pretty exhilarating. You get three lives and three continues to get through five levels, with no saves or passwords here, and that's not a problem at all since this game is pretty short. And when you lose a life, you immediately respawn right where you left off, with almost zero delay. But when you use a continue, you start at the beginning of the level. The name of the game here is Survival. With your energy constantly decreasing, the idea here is not only to avoid taking damage, but to keep a constant look out for extra energy that'll be occasionally floating around the screen. If you make it a priority to keep picking those up as you progress, you should have no trouble finishing this game on normal difficulty. But if you play this game on hardest, there's fewer of those items around, and, uh, you also die in like one or two hits.  But normal difficulty presents plenty of a challenge as it is. The first two levels are pretty easy, and not very long, but once level three starts, suddenly you're dealing with ice and snow, and seemingly twice as many enemies, both on the ground and in the air, with your car zipping around so fast, it's hard to keep track of everything going on. As limited as this game is, it still does just enough to make this one still worth playing. The music is solid, the graphics have lots of nice touches, like this first level here where the road is all torn up Mad Max style. It reminds me of Springtime in Minnesota. There's also a story here, but there's hardly any Japanese text. It's all told through still shots. In Spring of 2029, a couple people get married, drive off into the middle of nowhere, and they're convertible.  Apparently, the gang resents this newlywed couple's happiness and blew up their car, which kills the bride. A year later, our hero eventually binges all the Mad Max movies and decides to cosplay as Max, with the first victim of his vengeance being the sleeves on his leather jacket. But yeah, Battle Mobile is a short and very simple play through. You just ram your car into other stuff and collect energy, so you don't die too often. The difficulty really gets cranked up as you play along, and some of the tracks can get tricky as well. But this game is two-player co-op, as you can see, so at least you'll have an extra player to help you out. Even though you're traversing vertically the entire time, there's still plenty of stuff on the track to avoid, and some of the bosses really get tough too, although some of them are, yeah, pretty easy. If you dig arcade-style vertical shooters like this, or if you enjoyed Spy Hunter or Super Spy Hunter, then I'd recommend checking this one out any way you can. Alright, I want to thank you for watching, and I hope you have a great rest of your day.


We hope you all look forward to how Pokemon games will continue to evolve. Yes We've shared with you today the latest information about a variety of our games, but to wrap things up We'd like to end this presentation by sharing one more video Come on one more video this is gotta be gen 9 Come on What is this? Oh my gosh, what is this?  Is this gen 9? No, wait, that's is that game Freaks office? No, that's game Freaks office. That's not detected. This is game Freaks office that hallway What is going on now? He's gonna see something in there that we haven't seen. Oh My god, it's gonna be gen 9. It's freaking gen 9, baby. What is this wait? No, wait, what it what where are we? What's going on I? See webs I see I see things Coffee time Lights He's just warped to a whole new area. Oh my god. What is it? Oh? What is this? Oh my god. Oh my god. It's gotta be. Oh Look at it. Oh Psyducks. Oh, oh my god. It's like it's like a hybrid of me and me out walking down an alleyway. Oh My gosh It's oh, it's beautiful This is beautiful Blissey's in town. Oh the texture is all different to on the Pokemon.  That was the typings on the ground This is what's a waterish town. Is this Italy? I Don't know what's going on it almost looks like the Pokemon snap with legends Arceus That's an old land. I have an old land. I have one. It's I got one too What is it? The title reveals are coming orders. It's a grass cat a crocodile fire and a water duck Pokemon Scarlett what Pokemon Violet and Scarlett. He's almost seem like fan made titles. What? What Pokemon Scarlett and Violet gen 9? What late 2022 oh my god, it's a holiday release. Oh My gosh, there is no way that just happened Pokemon Scarlett and Pokemon Violet What that direct is over? Wow, goodbye everybody. I am pumped Wow


Auzbillahim Nishwari Ta'ala jeem, Bismillahir Rahmanir Rahim. Very venerable and respected audience. We are going to talk about code of ethics. These are one of the, another aspect of the ethics, that how we do follow sort of ethics and how to conduct over activities according to the particular set pattern. So code of conduct or code of ethics, for this it is very important because we can centralize and establish discipline for the maintenance of all sort of ethics. For this any organization, the people, the persons, those who are working in that, even the children, working in the organization in which they are being taken care. So that organization establishes code of ethics for which all sort of ethics are taken care of. For this all persons are responsible and accountable, including all professionals, including teachers, including children, or stakeholders are aware about that. And after that we have to follow them and if someone deviate, then there is a mechanism of accountability devised. This may, we see that there are certain principles those are being followed in which the code of ethics is very dive deeper and see the things very minutely, so that to establish a good discipline. Or this may, keeping in view the basic thing of children is about their safety, their interest, safety of interest, and there are certain conflicts that arises time to time among the children. The teachers, the school is intended to do something other than the interest, then they are bound that they to take care of the interest of the children. What the interest of the children is and why it is established, it is all due to the children's activities, the way the children are living in the environment, the way they are living in the culture, the way we make the culture better, we are responsible for it. So we are to take care about the interest of the children because basically all activities based on it care what they are thinking about and how they are prone to do or around whatever is going on that is becoming the need of the child. So we to be very careful about those needs and also the arisen interest of the children. And if you think about the purpose of the code of ethics is established definitely to establish a behavior. Behavior in a way that we are in a line and a set up pattern principles to establish behavior. If we do, that will be established. Otherwise we cannot mark any, identify anything, any wrong thing that is going on. So we will count with the help of all those ethics code of ethics and a pattern that we are checking. And in any organization when the things are going to be established prevailing, so in that it is very obvious for all sort of principles those are being observed by the organization and also the participants also the staff members, they are all bound that they take care of all those principles and establish. Or they are all accountable at the same time. Or it may cause basically code of interest how they to interact with each other, how they to maintain their behavior in the classroom situation or also take care of the values of the society and moralities those are being established in the society and also be in the organization. And organization take care of all those interest and values that are being established and going on in the culture and the context. Employees of the organization or other professionals of the organization are also bound to keep an eye on those moral values or moralities those are going on in the society around they to aware about it and make aware the children and make a code of conduct and help them in establishing and streamlining all those code of conduct. Basically, standard has been set if standard once has been set others are accountable every person sees it, is aware of it and makes a code of conduct. And with the help of all these standards we can establish and we can discipline ourselves. Thank you very much for being a good listener.


The auction that we're attending today, right over there, is where corporations are gathering together to buy up public lands that are supposed to be held for public good. We want to tell the Bureau of Land Management to stop leasing public lands to these dirty energy corporations that drill and crack for gas and oil. There's a lot of refineries, there's a lot of pollution due to the expansion of all of these oil and gas developments. Right now there's people all across the country, not just here in Colorado, not just in Nevada, but all across the country and all across the world that's watching what we're going to be doing and seeing how we're going to act on climate change. So we're calling on President Obama to stop these kind of public auctions and keep our public lands out of the hands of the fossil fuel industry. On Saturday there's going to be another opportunity to tell the community, to tell the rest of the world that we care about this and that this as well.


تشرف بالاشتغالي بالعلم ولا تبغي به ما عشت يا دا دا دا لا وياله من شراف عظيمي فعن أن يكون العطاة جنونا جدا سيكون الثلاثة انه السؤال is about the ruling of the one who repents from lying توبة الكديمي، كانوا يلعبون ويسيحون فأم تابع من الكديم على رسول الله؟  الكنيب هل أنت معي؟ ما هو هذا؟ الكنيب هو أول كريتسيسيسيسيسي أول ما الذي شيخ رحم الله يتكلم هو أتهمة بالكنيب ماذا يعني أتهمة بالكنيب؟ أتهمة في العربية لنوستيكية يعني أنها مجموعة لتكلم شخصاً من شخصاً لذلك أولاً تهمة بالكنيب is from the word وهم وهم تاة in the word وهمة تاهم مبدلة تاة got exchanged to a wow كما أبدلت في تقم تخم the way that تخم يقالوا أوهمته وتهمته أتخلت عليه تهمة when you suspect a person's truthfulness that's what it means تهمة means this شككت في الصدق I have a doubt in his truthfulness is it true about this? ابن حد رحم الله he defines it in his moushah he defines it he says in his moushah تهمة الراوي بالكنيب بألا يرى ذلك الحديث إلا من جهتي it is that the hadith is not found except in his direction it's only from his direction and it goes against what ويكون مخالفاً لقواعد المعلومة and it goes against the known principles وكذا من عرف بالكنيب في كلامه العادي and also the person who is known to lie in his normal speech he's never been found to lie about the prophet you know sometimes some people lie in their day to day life but do they lie about the prophet? not necessarily but the scholars will tell you تهمة الراوي بالكنيب تهمة الراوي بالكنيب okay so how many reasons? two reasons the first one is what that the hadith لا يُروا ذلك حد حديث إلا من جهتي that the hadith is not narrated except from him and it goes against what ويكون مخالفاً لقواعد المعلومة and that goes against the principles that are well known that's first the second one is يُعُرَّفَ that he's known the narrator بالكنيب he's known to lie في كلامه العادي in his normal speech he lies لكن لم يطرمينه الكذب في الحديث النبوي but it hasn't become apparent him lying about the messenger صلى الله عليه وسلم if a person who is then suspected ومن يتوهي مراوي بالكنيب ترك حديثه his hadith is left his hadith is left the person who is suspected of being what? a person who is suspected of having to إذا حوالي حديث which he's unique at not unique but he's singular in we just finished up one of the criticism that can be put to a narrator we finished sorry we finished two الكذب and a tumor to be a liar to be a liar or to be suspected of lying the third one إن شاء الله that we're going to go to that the sheikh mentions is what does فحش القلط mean? it means we're doing in the order of the sheikh رحمة الله عليه وسلم the sheikh after that he says لكذب الراوي أو تهمته بذلك أو فحش غلطه so فحش الغلط means what? فحش الغلط it means كثرته when the mistakes become too much in the Arabic language the word فحش is used كل شيء إن جاء وزحده anything that passes its limits in the Arabic language is called فحش so that means بأن يكون غالط الراوي that the mistakes of the narrator أكثر من صوابه أو يتساويانه it is that his mistakes are more than that which he correct the correct things that he comes with or they're the same if they're the same it's too good فحش الغلط so what he does right and what he does wrong they're the same فحش الغلط or he gets more wrong than he gets what than that which he gets right and then that which he gets right or they're both the same or they're both the same so at this point let's call it don't take it خطيب البغداد narrated from his own chain of narration to سفيانة ثوري that he said ليس يكاد يلفت من الغلط أحد إذا كان الغالب على الرجالهم فوحفظ وإن غالب وإن كان الغالب وعلي الغالط وترك that سفيانة ثوري لحمه الله he said that it's close that nobody is safe from doing mistakes غلط is mischievous everyone is going to bound to do it ولي ذاك يبنو تايمون even further he said فلا يسلم ومنه أكثر الناس the majority of the people are not safe from doing shortcomings he said even the companions did it يبنو تايمون he said بالف الصحابة even the companions من قد يغلط وحيانا وفي من بعدهم the companions some of them did mistakes then those who came after him are bound to do it do you not do you not have seen those have you guys not seen the book where عائشة استدراكات عائشة على بعض الصحابة عائشة catching out some of the companions mistakes and saying he got it wrong he got it wrong now سلف sometimes used to use the word كذب فولان فولان said a lie so they said if you just call each other I mean كذب فولان فولان said a lie that doesn't mean he lied in the sense where we would understand it it means he got it wrong or what he stated is the opposite to the reality and I mentioned that before when I was talking about كذب but but وإذا كاثر غلط وراوي تورك حديثه if his mistakes become too much his حديث is left his حديث عبد رحمان بن مهدي said لا يترك حديث رجل a narration of a man or an individual is not left إلا رجل المتهمن except a person who is suspected of lying أو رجل أن الغالب عليه الغلط or an individual who the majority of his narrations are mistakes that person is left the fourth is ابن حجر I mentioned الغفلة heedlessness the fourth one is الغفلة heedlessness يقال غفل الرجل عن الشيء يغفل غفولا فوغافل ورجل مغفل the person is called a مغفل a heedless person in the Arabic language is لا فط نتا لهم anyone who does it he is not alert he is not alert is called a person who is غافل also his حديث is not taken technically what does it mean غيبة الشيء عبال الإنسان وعدم تذكره له it is that something is absent from the person's mind and عدم تذكره له and that he is not remembering it and that he is not remembering it ابن تايميا mentions seven things that cause غفلة heedlessness the first one is الإشتغاله عن هذا الشأني بغيري ككثيرا من أهل زود والعبادة becoming busy in other than the field of حديث being busy with other things like عبادة you know a person who does a lot of عبادة وزاهد he is a غافل a lot of the time they fall into غفلة the second one is ألخلو عن معرفة هذا الشأن the second one is to be an individual who who has no understanding of this field of this field of the حديث الخلو to be عن معرفة هذا الشأن in knowing this field the person is absent from knowing this field ثري التحديث من الحب فلايسة كل أحد يضمضوا ذلك the second one is to narrate from your memory he listens to the kanaka if a person is always narrated from their memory because now everybody is on point when it comes to memory غفلة can come because of memory ثور أن يدخل في حديثه he is somebody to put into his حديث ما ليس منه that which is not from it ويزوروا عليه and it forged against him so he listens comes from it fifth أن يركنا إلى الطلبة فيحدث بما يضنوا أنه من حديثه for him to lean towards the students he leans towards the students and he narrates that which he assumes that is from his narration to do Irsal which we took Mursal to do Irsal seventh is التحديثه is to narrate من كتاب from a book لإن كان that is possible اختلافه differences in it so what can save a person from what can save a person from this to be a غافلة is that he is a half متقن he is a half of memory is on point so all these seven problems don't occur it all occurs because of the memory of the individual نعم so the other ones that we mentioned غافلة and فحش الغلط are both what dogged are you with me and the other three are what is the عدالة تهما تب الكديب I'm sorry the other two تهما تب الكديب and كديب and تهما تب الكديب is عدالة his reliability is right فحش الغلط is what he is dogged and also الغافلة is his dogged his memory number five الفسق فسق the word فسق in Arabic means الخروج the word in Arabic فسق means خروج like for example you say فسقت الرطبة من قشريها لخروجها من I peeled I took the bone out so you say فسقت الرطبة I took the seed from the from the date that's what the word means why is the catholic called فسق because the خروج he left عما ألزمه العقل that which the the genuine mind of a person who is upon فترة should be in وقترت الفترة السريمة and the basic instincts will necessitate he left it that is one God he's the only one that created this whole universe he deserves the عقل shows that he clearly shows it correct he left it he left the basic instincts فسق الله says ومن كفرة بعد ذلك فولاقة هم الفاسقون ومن كفرة بعد ذلك فولاقة هم الفاسقون أفى من كان مؤمنا كما كان فاسقا لا يستوون so كفار فاسق also فاسق is sometimes used for a person major and minor it can also be called minor which is what ولا تقبلوا لهم شهادة and أبداء don't take those people's witnessing وفأولاقة هم الفاسقون the people who are what who accuse a woman of that which she's free from what's the ruling what is the ruling regarding the حديث of a فاسق الفاسق is man the فاسق first of all is two types a فاسق is two types you have to know it okay what is the ruling of رواية الفاسق the narration of a فاسق the first one is called the first type is الفاسق المتأول the فاسق which is متأول متأول meaning he has a interpretation and this is the people of innovation هم طوائف المبتدعة this is the innovators this is the it's the innovators number two number two is الفاسق غير المتأول it is the فاسق that doesn't have no interpretation who doesn't have no interpretation the second type which is the one that we're dealing here right now the one that we're dealing here in فاسق he's not meant by the first one he's meant by the second one who's that type who has no interpretation it is the one who's leaving واجبات due to his own whims and desires you see or he's doing حرام ها he's doing drink in خمر he's committed zina he's doing no interpretation he knows it's حرام the علماء they agree on the second one اتفاق على عدّمه قبولي رواية that his narration is accepted because the narration from the Prophet ﷺ is أمانة and it's a religion with him والفسق يُقطُل الإحتمان الكديم الفاسق على رسول الله because there's a possibility my liar brother the messenger صلى الله عليه وسلم ولذلك ابن العربي the great scholar ابن العربي the great scholar العربي if you guys hear المعرف بالألف واللام it's a great scholar but if you hear with the نكرا with not elephant land it's the زنديق the kafر مجرم one محدين العربي this one's not it's a great Maliki scholar ابن العربي الماليكي it's المنثبة فسقه anyone who's fisk becomes a parent it's clear بطى لقوله his speech is nullified في الأخباري in terms of in terms of information in terms of narration which he informs إجمع by way of consent there's no Khilaf in that لأن الخبر أمانة because the information the news something that's entrusted والفسق قرينة ترطيلها and fisk is a thing that nullifies it for us it nullifies it for us الشيخ العلام محمد الأمين الشرقية when it came to the آية يا أيها الذين آمنوا إن جاءكم فاسقوا بنبأ فتا بيانو he said هي تدل على عدم تصديق الفاسق في خبري في داخل على عدم تصديق ليس بالفاسق الفاسق the fact not to believe him في خبري خبرية فصح فالبركوت وصلحة بالفاسق في موضع داخل بنهي عن شهادة الفاسق وداخل فاسق وفاسق فالفاسق وذلك في قولي أهل و لا أقبلك and do not accept شهادة أبدا. Do not accept a witness in whatsoever, ever, forever. وأولاك هم الفاسقون من يفاسقون. Those فاسقون don't take the witness in. ولا خلافة. There is no dispute. And it's agreement. بين العلماء amongst the scholars في ردي شهادة الفاسق. To reject the witnessing of the فاسق. و عدم قبول خبره. And not to accept his information that he transmits. أبو حاتب ابنو حبان البوشتي رحم الله has a book called المجروحين What's his book called المجروحين What's his book called المجروحين أربك the criticized ones So you just wrote a book on those people who criticized He mentioned that in his Kitab He says it's very good for you guys to read the introduction He talks about the signs of Hadith very good Especially those who are criticized And he mentions in that book of his He says المعلق بالفسق والسفة وإن كان صدوقا في روايتي A person who has fisq Connected to him Attached him And dimwitness وإن كان صدوقا في روايتي Even if he's truthfulness in his narration He's a fasik Even if he's truthful He drinks camera and does everything Even if he's truthfulness in his narration And he says He's a fasik Because the fasik doesn't have justice He's not justice He has no justice That's what's missing And justice doesn't have And justice doesn't have a crime And justice cannot be criticism


You know I've been here at the ANU for some 20 years and really it's been some of the best time of my life. The ANU is at a juncture in its life where it can get better or it can get worse and I think that I really want to make sure that the ANU becomes one of the absolute greatest universities. I have a vision to make that happen and I really want to give back to the university that has given so much to me. In 1946 the nation had a vision for the ANU which was to bring world-class research to the nation and of course in 2015 we find that ANU has indeed done that but we have the opportunity going forward to make the research even better, even more world-class. But of course research is not the only thing we do. We have a world-class education program here where we have undergraduates and post graduates and higher degree students. What I want to see us is being seen like for example an Ivy League school or an Oxbridge school as being the best place in the world to get your education. We're almost there, we're going to get all the way there in the next few years. Finally we have external engagement. The university creates all this knowledge and we want to share it. We want to share it with businesses, we want to share it with the policy, with the government and we want to share with our alumni and have the alumni be able to see what we're doing and then for us to see what our alumni are doing so that way both our students and our researchers can really get that whole world appreciation of how we're contributing. So I'll be commencing as Vice Chancellor in the beginning of 2016 and the early part of the new year. Ian and I have had a for a long time a good close working relationship and during this time I'm going to take the opportunity to learn a lot from him and during that time you can expect Ian to have my full and unwavering support. These are very exciting times for the ANU and I'm really certain that the students, the staff, the alumni of the Canberra community are going to share the absolute delight that we on the University Council have in Brian Schmidt accepting our offer to become the next Vice Chancellor. We had a really outstanding field of international and Australian candidates from which to choose from this position. We could have chosen an absolutely first class university manager. We had plenty of those in the field and what we've chosen is a first class leader. Brian's vision, vitality, global stature, communication skills, they're going to take ANU to places it's never been before.


Welcome to InterGioTV here at InterGio 2018 in Frankfurt. Joining me now is Eduardo Falcon, Vice President, Executive Vice President, General Manager of Topcom Positioning Group worldwide. Nice to see you again here in our studio. Welcome to Frankfurt. Nice to see you again. Nice to see you every year. We have to discuss a couple of topics of the industry and especially about Topcom. First of all, can you describe the current pressures on infrastructure across Europe? For sure. You know, ultimately everything that is happening in Europe, there is an expansion on the data management and everything that is related to infrastructure and technology. In Topcom, we defined that as the intersection of infrastructure and technology event. In Europe, particularly, what we are finding and fighting actually is an aging infrastructure. We need to work on that. I mean, every country is investing heavily into that. And of course, for the industry, it's a great market for us to expand. So ultimately, we are expanding all the customer base as we move forward in Europe. So what measures do you think need to be implemented to help meet this demand? I think that we are working as manufacturers in expanding everything as related to data management and data automation actually on the field and in the neighboring areas. So it is critical that we have an integration of sensors, right? And we are working hard on that. The answer for actually budgets that are shrinking is the increase of technology and the development of new technology that can allow us to do more with less, actually be more productive. That's actually the key for Topcom. Can you tell us about any big infrastructure projects Topcom is working on? Sure. We work actually, we sell products to customers that are working in major projects globally. Examples of those are the Grand Paris Metro. These are four lines that are being extended until the year 2030. And Topcom is there doing monitoring, actually, all the monitoring system. Same thing, the LA Metro, same issue or same type of technology. We just started working with them for the monitoring side. So, again, monitoring the infrastructure that are being created or the ones that are being maintained are critical at this stage in the way that the infrastructure is developing worldwide. Do you expect to see the adoption of emerging technologies for the development of new infrastructure? Sure. So, today, again, it's a mix of sensors that are taking place and actually the products that before were part of the desktop solutions for us are migrating into the instruments. Really, what we are seeing is a motion not only to improve workflows and manage data but also to do quality control in real time. That is key, actually, for the kind of development that we are doing today and the ones that are going to be part of this central part of the industry as we move forward. One more question. You are operating worldwide. You are responsible looking to the states on the one hand and Europe on the other hand and the other parts of the world. How is the market growing different ways? The market in general have grown for us. I mean, our market share have grown dramatically last year. Different, more than double, almost triple, actually, the industry size for the development last year. But, again, the market is a solid market in all China, Asia, in general.com and Tokyo are very strong. Europe is developing any markets here quickly and that's one of the reasons why our expansion on global basis. And America is solid. It has been actually increasing its steady growth, actually, in the last two, three years. So, you know, we are enjoying a good many years of development in general because I think that is key, this issue of the infrastructure intersecting the technology. You know, you need to be able to create more productivity and that is something that cannot be avoided. Other markets like Latin America, we are very strong there. Lots of changes also because all the situations, the fights against corruption and so forth that create actually more need for better workflows and more efficiency. People need to compete more aggressively for their contracts. So, that's really where we are seeing a healthy situation on global basis. So, enjoying the GEO at Frankfurt, which is hopefully a good place for you. Great. Thank you very much. Thank you.


if you don't have a solid routine as an autistic person, what you're doing, you need that, that's going to make life so much, so much more easy, it might make it a little bit more boring. I, I, I, I guess I understand. Obviously you can have aspects of your life where you can set a time, can set time aside to be impulsive and to do whatever during your week, during your day, if you really want to.  We really don't like uncertainty as entity causes us a lot of stress in comparison to most people. Everyone experiences it to some degree, but for us, it can just hit just a little bit harder.


It's the last weekend's impressive victory over pressing off and is it simple enough to say just are you looking for same again for the players this weekend? Well the highlight of the performance was the work ethic of the site and we'll need to reproduce that. But again it's going to be nothing less than that. We'll be good enough because it's going to go themselves at a great win. They'll be coming with renewed confidence and we've got to be ready to go toe to toe with them tomorrow and we don't know how they're going to play because they've changed the system. We've had a few players sent off over the last couple of weeks so we've got to concentrate and we have to concentrate on what we feel we need to do to get the result in this game. Talking of same again, I suppose there is that temptation to play the same 11 that started last Saturday but if you, I want you to change, you've got obviously the likes of Gareth Earl, James Hanson, Billy Knot, Alan Sheehan on the bench. There is options there. Should you choose to use them? Well Hanson in particular, you know, probably needed this week on the training ground. Both trained well, both pushing for a starting place and that's a decision we'll have to make. And as you might, Yates had a slight short as your first time this season. He had it in the press the game early on. How was he looking at it? Yeah, missed the part of the week but he's been back training. He doesn't want to miss any games, especially the waste play.


Good morning, everybody. The next 35 minutes are going to be devoted to Chrome OS hardware backed security and verified boot. To remind you a little bit what was touched in the previous presentation, there are some principles on which Chrome was built. And security is definitely one of them. The same applies to Chrome OS. There is no such definitive source as there is for Chrome, like Go Chrome. But there are a couple of those. And I look at both. And in both cases, we also have three to four principles that Chrome OS is built on. And for some reason, we've dropped stability from what Chrome does. We added smartness, but security is there. So apparently, security is still an important feature of Chrome OS. And basically, in this talk, we're going to dive a little bit deeper into how it is achieved. So a few disclaimers before we start. First, it will mostly be focused on the traditional security aspects, such as using cryptography for protecting user data and such. Not on other features, which also contribute greatly to security, such as the ability to auto-update Chrome OS reboot quickly, which, as you might guess, is very important for keeping users up to date and fixing all the exploits quickly. But we're not talking about that. We're talking about mostly cryptography. And more than that, we're talking about how we use hardware to ensure the right level of security. And again, even though it is about cryptography, it is not the Crypto 101. It is not information security 101. It is not the trusted platform ID 101. So if you knew that, there are better experts and those are separate talks, which require much more than 30, 45 minutes. And since we have this limited time span, this talk will be oversimplified. I will try to be conceptually correct, but I will kind of skim over some details because going into too much details will just overcomplicate things. Also, there will be more talks today, which will also touch on things like biometrics, which is also ways how hardware is used to provide security and do user authentication on Chrome OS. So if you're interested in that, please listen to those talks as well. What Chrome OS needs to do to provide another level of security for its users? First off, it needs to make sure that whatever is booted on the device is a verified trusted image. Verified boot, which we'll touch on later, is the ability of Chrome OS devices to check that it only boots properly signed Chrome OS images, that it prevents running old images with known vulnerabilities, for example, and with all that, that it provides recovery in the cases where those preconditions are not met. Next thing, policy enforcements. So as it was just touched in the previous talk, Chromebooks are very popular in the educational space and among enterprises. So enforcing policies, such as, for example, preventing users going into a special development mode where they can run whatever on their devices, is an important feature of Chrome OS. So policy enforcement is there, and we need to somehow deal with that. Well, the next one is obvious is user authentication. So whenever a user touches a Chromebook, we need to understand who they are and only give them access to their data. Also, we need to authenticate the user through various means, because currently, the users are using Chromebooks on tablets, which we're entering passwords is not very convenient. So we allow pins, we allow secure cards, we allow other methods of authentication, and all that should be handled by Chrome OS. System and user data protection. So obviously, even if you lose your Chromebooks, you should be reasonably sure that your data cannot be stolen by whoever finds this device. So even when a user is not there, the data should be protected and the Chrome OS should prevent attackers from stealing your data if they somehow get access to your hard drive for your device. Next thing is, well, besides the operating system itself with all those user authentication and authorization requirements, there are also applications which run on top, and they have their own security needs. So they need to have some place where they can put, for example, their cryptography keys that they use to sign communications with their servers or encrypt communications with their servers. And they need to have a secure place to put all those keys in on the device. And, again, Chrome OS provides this to them. And the last, probably not least of the features that I want to touch here is remote authentication. The ability of Chrome OS to prove to remote servers what they're actually talking to a Chrome OS device in a modern app, a Chrome OS device of a specific identity, like a specific Chrome OS device, if it's important for them, Chrome OS for a specific type if it's important for them, and Chrome OS in a specific state, such as, for example, running a signed verified image if it is important for those services. So all this is remote authentication. And that's the last feature that we're going to touch here. So how Chrome OS does it? We're all here at Google. We know how Google does it, right? No. In our case, it's not machine learning. It's the hardware root of trust. And the hardware root of trust is basically a separate hardware component sitting on the device which is separate from the main CPU, separate from the main memory, disk and flash available to the main CPU, which can encapsulate secrets. It provides a novel-tell storage for those secrets which can perform crypt operations in a way which is tied to this device, so they can only perform on this device on this module, and which can prove its identity to the rest of the system or to other servers out there. And there is another specification that defines that type of devices as the trusted platform module devices defined by trusted computing group. And for many years, Chromebooks contained TPMs, trusted platform modules, I guess, in them to perform to provide this hardware root of trust, capability, and to root all the secrets that Chrome OS uses inside them. Recently, we've started doing even better. So about two, maybe a little bit more years ago, yeah, two and a half years ago. More in Chromebooks started using Google-specific chips for this purpose, which are currently known under the Titan name. They used to be known under H1 name. This is a special security chip built by Google, which also provides the hardware root of trust functionality. But compared to third-party TPMs, we have certain advantages that we can use for Chrome OS purposes. And they're obvious, because it's the Google design and Google-provided chip. It has full control over the firmware that runs on those chips. It's actually open-sourced, at least 99% of it is open-sourced. So we know what goes in there. We can quickly, well, we can prevent any third-party exploits to go into there. When we find bugs, we can make sure that the fixes are made quickly and efficiently, so that the same way, if issues are found in Chrome OS in the next update to get them fixed, the same way, if issues are found in this root of trust firmware on the next update, we'll get them fixed. And it also allows for extensibility. So even though for legacy reasons, those chips started with providing a subset of trusted platform module commands, which can be sent by Chrome OS, nowadays they do more than that. So they also serve as a second-party authentication devices with a separate set of commands that they provide. They also provide special capabilities for users who need to log in with pins. And at the same time, you need to make sure that nobody can just guess through all the combinations of a five-digit pin and log in there very quickly. So all those things were added on top of a limited subset of TPM commands that Chrome OS uses. So I haven't said that. So I've said that Chrome OS root of trust is rooted in this hardware module, which is true for many cases, but not for all of them. And you may see a couple of cases in the next of this presentation. I will not be able to talk about all the features that I listed before, but I will touch a few of them. I will start with verified boot. And this is the one to remind, again, when we want to boot only properly signed Chrome OS images and we want to prevent rollback to images with no vulnerabilities. So it actually, from the hardware root of trust point of view, it uses a couple of interesting features provided by this hardware root of trust. One of them is so-called platform configuration registers.  But instead of, and it allows you to read this data, but instead of a write operation, it provides a special extend operation into there, which actually relies on using hashes like SHA-256, SHA-512, if you know, cryptography basics, which are the important thing about them is they are like one-way functions. So if you know the original data, it's very easy to calculate the result of applying this function of applying the SHA hash to this data. But going back is, let's say, impossible. What you can do with those platform configuration registers is to extend it, which means you provide some value and what it does, it takes the previous value stored in this register, takes the value that you provided, combine them, and then calculates the hash of them and stores them back into this register. This way, if you know what extend operations were performed or you think you know what extend operations were performed, you can always verify that. You can, by hand, outside of the hardware root of trust, you can recalculate all those hashes. That's a simple operation. You can always do that. And then read the PCR register and compare what you calculated with what's stored there. This way, you will know that the list of operations that you think were performed is actually the list of operations that this hardware root of trust, the hardware security model saw. This platform configuration register feature will be used by verified boot and by other features used by Chrome OS. Anyways, I think I will continue. The second feature is Nononotel RAM, provided by TPMs or security chips. So as I said, the hardware root of trust provides us a way to store data on a separate hardware module in a way that can only authorize access to this data. So what that means is those chips provide region of memory, nonvolatile memory, that somebody can serve data in. And those who serve data, they define special region spaces called there. And they provide special attributes for those spaces, which tell that only somebody who provides a certain password can read from this data. Or only if the device in a specific state, such as one of the PCR registers, contains a certain value, you can read the data from there or write data from there. And more and more and more and more. Only once after reboot or only before you call a certain lock function and all that. So those RAM spaces allow us to provide and authorize access to the data stored on the TPM or security module chip. So now let's see what a verified boot actually does. So at the high level, it's a pretty simple thing. There are several parts of the software and firmware that run on the Chrome OS device. We'll start with the read-only firmware, which sits in a read-only space and protected by a special write protection flag, which you can only get access, either if you get the physical access to the device or through a hardware route of trust or through a security chip. This read-only firmware then verifies the read-write firmware, the read-write part of the firmware. And it gets its image, it verifies its signature, it checks that the signature matches the key that it has, and only if it matches, then it boots it. Read-write part of the firmware does the same with kernel. Kernel does the same with the root file system that it uses. So in this chain, every previous stage verifies the next stage, and only if all stages are verified, we boot all the weights of the kernel and we run the separation system. Digging a little bit deeper. Again, we don't have much time. So there is a special block in Flash that stores the root key, which is used to verify the read-write firmware. And it is write protected. So nobody can override it without special access to the device. The RO firmware gets this flag, then it decides on which of the two versions. And we need to be able to update the read-write part of the firmware in the field. Like with every auto update we should get for your Chrome OS, you may get an auto update for your read-write part of the firmware as well. It has two slots where those RW parts are stored. It picks the one with the highest version, and it also checks if the version is not lower than the minimal version it accepts. It verifies the signature. It boots it. Same with the OS image and kernel. There are two kernel partitions, kernel A and kernel B. Read-write firmware checks which one is newer. Again, verifies that the image version is higher than the known good threshold that is provided somewhere for this RW firmware, gets the root file system for the same kernel, and boots that, and so on and so forth. What it allows us to do is to have several modes in which Chrome OS boots. And the one where Chrome OS devices are most typically booted in is the verified normal mode, where all those stages are performed, and all those checks are performed. And if something doesn't check out, if, for example, the read-only firmware is not able to find the signed read-write firmware on the disk, it will not be able to boot it, and it will go into recovery mode, which will allow you to recover the device from this unportioned state. Same thing will happen if there are some hardware issues during the boot process. Now, in addition to that, we allow the users of Chromebooks to get a better access to their device. If they want to experiment, if they need to run something special, if they want to run a different operating system on this device, after all, it's their device if it is their device. They can enter a special developer mode. It can allow you to boot a different image. Then set special flags in Flash that allow you to boot from USB in addition to that. How you do that, well, you go to recovery mode. If you remember, if there is an error, if we are not able to boot a properly signed image, we go into recovery mode. You could also trigger go into recovery mode manually if you want to, if you need to recover, or if you need to switch to boot in developer mode. And in this case, it's the read-only part of the firmware that recognizes this request to go into recovery, which will not boot a read-write part of the firmware, but instead will boot the specially signed recovery kernel images only. And those recovery images will be able to update the operating system image running on your device. Why do we need a special mode for that? Because normally, if you remember what I told about the use of the secure module, we have PCR registers, and we have envirom spaces. And envirom spaces are used to store those minimal threshold versions of firmware and the Chrome OS kernel, which are allowed to boot on those devices. These are those entire old back features that we have. So if we know that versions up to a certain one has an issue, it has some non-vulnerability. The key was vulnerable or something like that. We can set this threshold and will not be able to boot this version. And those versions are stored in TPM or secure chip envirom. And before booting the read-write, like when RO boots read-write part of the firmware, it locks this envirom from overriding by any subsequent software that runs on this device. Same thing when read-write part of the firmware boots the kernel, it locks first the envirom space, which defines the kernel version from being updated until the device is rebooted. So in recovery mode, we don't lock those spaces. We'll let the recovery image, especially signed recovery image, to overwrite them if needed. We let the recovery image do other things on the device. We don't lock the device from this image. And that allows you to do certain things and allows you to restore it to good state. So this is how it worked. In addition to that, as a part of this whole process, the firmware sets the state in which it booted. Was it the recovery mode? Was it the development mode? Was it the normal mode? Into one of the PCR registers that we talked about. And this way, the software that runs after that will be able to verify in which mode this device was booted. And this way, the software that runs after that will be able to protect their data from which they use, again, a hardware root of trust to store from being read in the wrong mode. For example, if they have a key which they want to use to, say, decrypt the user data, only one device is booted in normal mode, they can create this key on the TPM side and tie it to a specific value of this PCR0 register. And only if when they're verified in the normal mode, this key will work and will allow to decrypt user data. If we boot in the developer mode, no. This key will not work. You will not be able to decrypt. So that's very quickly what the verified boot is. Now, the core of Chromo Security user authentication, data protection. And again, it's pretty simple in terms of what it needs to do. It needs to check user passwords or other forms of authentication and then provide access to the user data only if the right authentication was provided. How does it do it? So it encrypts user data and encrypts it with user-specific keys. And I'll describe how exactly it does it in a moment. It also encrypts certain system data. For example, all the system logs are stored on a specially encrypted partition encrypted with a system-level key because those logs may include some of your PI data just by chance. It may include some IP addresses that you accessed. It may include some other information that can be used to determine what you were doing on this device or what this device is. This way, we protect those system-level data as well in case somebody grabs your Chromebook and that gets access to the disk. But user data is also protected with user keys. And for that, we use hardware-bound keys. Basically, those are the keys which are stored inside the TPM, inside the security chip. Does anybody here know what cryptographic keys are and how they're used? Do we need any refreshers? Do we need any refreshers? Or can I? I expect we can continue. So basically, a crypto key is something that allows you, that has two parts, private and public part, if we are talking about asymmetric keys. And that's what I'm talking about here. And only a certain entity knows the private part and everybody else knows the public part. And that allows you to do two things, depending on if you're talking about signing keys or decryption keys. Like anybody with decryption keys, anybody using the public key can encrypt the data, but only the party that knows the private key that can decrypt this data. With signing, it's the opposite. Anybody who only the party that knows the private key can sign this data, meaning that it can attach a signature to the data that it sends. And the users of this data will be able to, anybody who has the public key, will be able to verify the validity, the authenticity of this data by checking the signature and verifying that it matches what they can see with the public key. So with hardware rule of trust, we can put those keys into the separate hardware components in the secure module. So basically, we can ask the secure module to generate a new keeper consisting of private public parts. And at this point, it's stored only on this secure module. Nobody else can see it. It just generated it and provided some handle to use it. Then we can ask it to sign with this key, for example. And again, this private key never leaves the hardware chip. You provide the data, you get back the signature. Or you can ask to decrypt it with this private part. Or you can ask it to get back the public part to you so you can provide it to other users who need to validate your signatures or who need to encrypt the data so you can decrypt it. So that's, in essence, what those keys are. And again, as with NVRAM spaces in TPMs and secure chips, those keys have attributes assigned to them, which allow you to provide certain requirements for who can use those keys. Only those who know the password, only in a specific device state, as I already mentioned above. Many more other authentication policies are available up there. But again, we're not going into too many details here. So how do we use those keys? For example, for user data, every home directory for user on Chrome OS is stored in an encrypted file on the file system. When a user logs in, this file is mounted as a partition, as a home directory for this user. The key which is used to decrypt this file when mounting it is a software key. It's self-stored on disk in an encrypted format. The key to encrypt this key is provided by the firmware and by the user password. So let me go into a little bit more details. It will be more clear from this point on. So let's say we have this encrypted user directory. When the user first logs in, it has an empty directory and we create a random key which encrypts it. It's completely random. It's not tied to any TPM. It's not tied to anything. Then we use this key to encrypt the user data. Now we have the encrypted user file, which we will be able to decrypt with this key. On this slide, you will see the vault key set is what we use to encrypt and decrypt the user home directory. And we use the vault key set key, VKK, in the second part, in the lower part of the slide, to encrypt or decrypt this encrypted vault key set, this vault key set, and store it in encrypted form on disk. So we have this random key that encrypts user data. Now we generate yet another key, another random key, which encrypts that key in turn. And then we send this key through a couple of operations. First, we send it through, we encrypt it with a TPM key. So this hardware back key, we encrypt that key with it, and we get a new blob of data basically out of it. And then, again, we encrypt it with a user password. There actually is something derived from user passwords. So when the user types in their password, we, again, through a number of hashes and key derivation functions, generate the key in a deterministic way so that every time the user types this password, the same key will be generated out of that. And we use this key as a second stage to now encrypt the blob, which came out of the TPM, and then store this file on disk, this blob on disk. So when the user logs in, they provide their password, this key is generated, we read the file, the encrypted vault key set, key file from disk, we apply this key to it, we get the value. We then send this blob to a security chip, decrypt with it, get another key, and then we apply that key to a file on disk where the vault key set is stored, and this vault key set and then applied to the user home directory. So that's a rough idea how encrypting user data here works. What it allows us to do. First it allows us to tie encrypting user data to this device. So only when they have access to this TPM, you will be able to decrypt the blob which came from the encrypt vault key set key. And it also allows you to tie it to user passwords. So only somebody who knows the user password will be able to send this key for this whole sequence and get the mounted partition at the end. So this way, if somebody steals your device, they will not be able to do it, or if somebody copies your data to a different computer and then throws like machine power in order to cycle for all the possible passwords, they will not be able to do that because they will actually, it's not the password that they need to crack. They also need to crack the key which is stored in the TPM which is a much harder thing to do. So this is what we do. Of course in reality, it is much more complex. And I will scheme over those things I guess since we're running out of time. So these are the three schemes which are used in Chrome OS in reality. And they're more complicated because you need to worry about multiple things including what if your TPM has a backdoor, including many other things. So we need to balance protection from the TPM and with the TPM. And just, but basically it's the same idea and I will not go through this list at the moment. So why this complicated scheme? Why we have like those two levels? Like the second level is more or less clear. So we need to protect both with the security chip and with the user password. But why do we need to generate the intermediate key and then encrypt it with another key? The reason is because we can have multiple authorizations for the same user. It can be a password, it can be a pin and it can be something else. This way we generate a single key that encrypts a user directory but we can have a multiple secondary keys which encrypt that key. And one of them can go through a password, one of them can go through some other form of authorization like a pin that the user provides. And again, those things that we should have described here those are just for password. For pins, a different workflow is used for smart cards a different workflow is used. But eventually they get to the same key which is then applied to the user directory and allows to mount.


50 billion devices connected by 2030. 180 zettabytes created by 2025. More than 7,700 satellites currently in Earth's orbit. What can we do? We build open source software to solve infrastructure problems. We create diverse, inclusive, sustainable communities. We meet locally, regionally, globally. We collaborate without boundaries. We're open-infra. Thousands of deployments across every industry.  With one mission. Build the next decade of open infrastructure.