Kama iya sumumiskiya, tenya dambi? Na wujataka kuspekin tanze? Just no. There are 13-year-olds at 12-year-olds somewhere who want more, the Holy Spirit want to speak in time. Let this be a challenge to you. Anyway, it is finished, guys. Before Jesus gave up his soul, he said it is finished. Now, we want to dive into this discussion. For you, Pastor D, it is finished. Uda kakutu elia, zia from what point? Let us just go with the flow with you. For me, it is finished, even from that zone. It is finished. Sometime when we talk about salvation, we always think umi fanya dambi, us juli kwan na nini, umi smok, umi stio, umi... Sorry. I was raised from a Christian family, but even for me, the Adamic scene, it was finished on the cross for me. I did not have the opportunity to rave and do all that when I was growing up. But even for me, there, it is finished. God took my scene, the Adamic scene and nailed it on the cross. So it is finished from there. When we are talking about it is finished when that is John 1930, after Jesus took the cup, the wine that he was given. When he said it is finished, for now the English looks like it is past tense. But the original, a little bit of Greek. A little bit of it. So it is perfect that it is finished in the past, it is finished now, it is finished in the present. So it is not like it is finished that after that when Jesus died, say now it is finished, the work of redemption. The work of redemption, then the work of redeeming man now and in the future it is finished. So it is a perfect thing that Christ Jesus did for us when he said it is finished. So it is finished. From the day Adam and Eve fell and were kicked out of the Garden of Eden, God began, God just began the journey to reconciling one to himself. That's why it's a manga in Old Testament. Apu Jesus ako konfield kido koko. You can tell Jesus crushed in some characters. I know my favorite, Anapunga moses. Because I connect so much with moses and Jesus. They have a lot of similarities. You can tell right. Most of them are from Egypt to the promised land. Kuna wile God anapunga from this part to this part. There's a lot of similarity. There's the character states also understanding the redeemer, the power redeemer, the redemption work. All that is in there. Old Testament. But now revealed in a little sense how much was it in the New Testament. Now, the power of the cross. How is it connected to salvation? I don't want to say that I'm alive. I tried. I tried bad. So skillet when you put it in a salvation was so excited. Person I was like, wow, that is such a good feeling. We jump in from one club to another. You're not satisfied. But the moment Jesus comes in, it's totally different. It is finished. How is that connected to someone? Let's imagine you're talking to someone like me. In Genesis 3, when we read about the serpent and the seed of the woman, the Bible says he will crash his bruises here then he will crash his head. That is the redeeming work of salvation even for you Mary before Wanzekurev in that garden of Eden. I tried. I did driving Kiddogo after family on a scare site after that. But it was the work that he did. He started in Genesis 3 after the fall of man. He started that. Like you say, Moses is a type that he did that in the Old Testament, but in the New Testament Christ is coming to continue and to finish the work that we see in the Old Testament. So in the New Testament when he bore our sin Isaiah 53 talks about him coming, he bore our sin and he nailed it on the cross and for that we are healed. The process that he began in Old Testament is still doing it even right now.  What he was talking about in the Old Testament is still doing it in the New Testament. So by the time he is coming to the cross he knew that he came for the mankind mankind. For the sins of Adamic the sins that we are doing now and the sins that we will do in the future. So when he said it is finished and nailed it on the cross it is true that he bore our infamity, our pain and our shame. Complete salvation here on earth and the life to come that is eternity. It is finished in Manishi Ilefankana Elisha something like continuous. It is a continuous thing. And that brings us now even to the blood of Jesus. We don't see this years on the blood of Jesus just to understand it. Because the blood of us was not enough now we needed the blood of Jesus. Yes. In the Old Testament we used to do sacrifice and they used to have a priest like Aaron was a priest every once a year they used to do atonement so we come with our sacrifice but we like it used to have the tabana court the outer court the holy place then there is holy of holies I know if maybe you have not known maybe in Sierra we used to do that even if you are not born again those of us who did Sierra that the priest was the only person who was allowed to go to the holy of holies and the holy of holies it was only him and he used to go once a year for the atonement tying the robe on his leg and his robe used to have belts he used to do the sacrifice he used to do the sacrifice he used to do the sacrifice he used to go once a year for the robe but that was in the Old Testament now in Hebrews 4 we are being introduced to Jesus who is the highest priest he went into the holy of holies and now when we say it is finished Mark 15 where the curtain of the temple was torn when he said it is finished now both the gods and the sheep that people used to do in the Old for their sins to be atoned it is now different because we have the highest priest who has gone into the most holy place and when the curtain was torn into pieces we have now direct access to God we don't have to I am just imagining how much we needed to to have kwa kwa kwa kwa kwa kwa kwa na pesa sae na in our times because every time unachanga unendaku for your sins to be atoned but for now we have the highest priest who is Jesus Christ and he has gone into the holy of holies and when we need the blood of the gods and sheep he is blood so when we also say it is finished it is finished so say so pesa sae but it is not it is not like in this year it is not about now sacrificing for what Jesus already did for us on the cross so when we say it is finished even for that it is finished we need to sacrifice but because Jesus became the perfect sacrifice for us on the cross and the blood does not expire just imagine the blood of Jesus because he is bulls and gods and whatever he doesn't expire imagine you kiss someone and you don't know what to do and you don't know what to do that's too much work so Jesus just simplified for us now we have direct access access anytime now we enter bodily but hey you don't know what to do see woga because I know now because of the sacrifice he did on the cross being the perfect sacrifice now it tells us enter bodily into the throne room so that you may obtain mass in time of need if you don't know what to do you may say I don't know what to do at the bodily go ahead I come I go to kiyoma I come boldly because you told us you come boldly because if it crush was tempted it's good to know the word of God it's really good that the blood doesn't expire you go to him bodily now there are three statements I did a little research now these three statements now explain it is finished the sentence was fully served sorry? the sentence was fully served the depth was fully paid I don't know what to do I don't know what to do and the battle was fully won I'm like hey you don't know okay whichever and then I got it so when we said it was fully paid it is not like Jesus paid the devil he does not have authority over us when Jesus paid when he went to the cross now I have paid the devil now I have redeemed my people back to him it is a perfect sacrifice there is no payment that the devil could get from Jesus for our redemption it is just to redeem people back to himself his people back to himself that's why we say because the songwriter say seen demanded justice because because you have seen I have done this the sentence is I need to be there is need for justice but this does not mean that I go now this justice is being this fine is paid to the devil no no it is not paid to the devil no God became the perfect sacrifice because when you do something like you see in the courtroom you are expected to be jailed but this is not the same they see the Adamic scene that made me wanted to be killed to be killed eternally in this physical body but even internally but Jesus became the perfect sacrifice so that he paid the debt to redeem me back to God my Denia Dambi Imi Lipua to live in that confidence that God has already made me whole he paid everything just sometimes when we the enemy keeps reminding us he gives us guilt keeps reminding us oh you did you did not you did this or you did not do this but God became the perfect sacrifice this is not biblical it's just a quote and I think people think it's Bible when the enemy reminds you of your past you remind him of your of his future his future is hell place of torment he reminds me of the things I did in the past but the perfect sacrifice of Jesus he said it is finished and he has paid he bought it on the cross I am free I am free indeed because of what he did for me on the cross yes maybe someone is trying to ask how can I also get this freedom now speak to that person where here accepting Jesus Christ is the only way Jesus became a sacrifice on the cross so that he can reconcile man back to God he is the only way and the bridge to heaven for you to accept Jesus Christ it's just asking him to come into your heart and if you are here and you are listening and you are convicted because Jesus came this Easter we are celebrating the resurrection of Jesus Christ in our lives I want to invite you you can just say this after me if you want to accept Jesus Christ to be your Lord and Savior say Lord Jesus I know I am a sinner in need of your grace today Lord I accept you I denounce the enemy and his work from today I am born again Holy Spirit feel me and teach me your ways in Jesus name we pray amen guys if you made up prayer a big big big congratulations to you you made the right decision it's the same as you laugh never be the same again because you say Christ first loved you now for you now deciding for he deciding that he comes into your life that is a very big step major step the best decision made in your life so far since 2022 since 2023 januari ya or since beginning of your life this is the best decision and you will never regret this guys I know you are wondering now I have made the decision what next it's very easy look for a bible teacher church be careful don't land in a cult yes that teaches bible strictly bible doctrines are bible too everything about Jesus and everything that is in the bible that is the church to go to near you now if you are anywhere or how you can reach the guys let her share we have two or three questions you need to ask her just DM her you want to ask her you want to ask her everywhere across all social media Facebook, Instagram just ask her if you need to ask her I will install it I will do it because she will ask you just ask her if you need to ask her if you want to ask her if you need to ask her if you need to ask her they usually have questions but it's an amazing decision you guys have made and also Pasi any final words that you would like to share if you need to ask her I am sure there is something burning in your heart share with us as celebrating Easter especially the resurrection there are things which are dead in our lives they are dead careers they are dead relationships godly relationships they are dead projects so I was being reminded that even as Christ resurrected he is able to resurrect things in our life we read in Fast Corinthians 15 there that when you are talking about this resurrection because he resurrected if he did not resurrect then our message will be useless we should not be celebrating Easter if we know that Christ did not resurrect so Paul talks about it and it has resonated with me that god wants to resurrect things in our lives our career our families our relationships our project he wants to resurrect things in our lives some of the gifts that we have or we are not aware that we have even those of us he wants to resurrect them so the resurrected Christ is still alive and we talked about the blood that never loses his power even today the blood of Jesus Christ is able and alive to resurrect every death thing and God wants to give us a new chance Lord I thank you that even as we celebrate your resurrection any death thing in our lives Lord I pray that you shall come to life in the name of Jesus Christ I pray for awakening realization of the things that you already took hold of us on the cross when it is said it is finished Lord some of us have been stuck in places and we do not know how to go about it Lord I pray that as we celebrate Easter you who is the resurrection and life that you will bring life Lord to every death situation in our families in our careers in our education in our relationship we walk with you that is dead I pray that we shall come back to life in the mighty name of Jesus because you are alive and you are alive indeed in Jesus name we pray amen amen and the church and the church umeniamadze na karibu di ku kwa ni kwa na ulikuna nika notes kwa na kwa na thank you so much I am very sure our viewers have been blessed and also learning when you are doing the introduction and saying that people need this to know deep stuff of course the real stuff it is finished then after it is finished what was finished we are climaxing it Jesus resurrected and he is still alive and we will revive every dead thing in our lives in metekiyosana we are praying for some things stagnant maybe they were dead do you know what was done maybe it was moved maybe there was a hospital maybe it could be dead but now during this season I have that revelation that it can come back to life thank you so much thank you thank you for study we honor you for your presence bless you to me say across all social media platform if you have any question follow up discussion across kitaka I just want you to say I just want you to say we are going to take a quick break and then we will be back thank you thank you so much for watching we are going to take a quick break


The staff prog and it is everyone instantly up to full. Nice time. Actually, you know, I think I did. Now that you mentioned it, I think I did see that on Twitter. Yeah, I think I did see the. That staff prog was, I think that that staff prog was about 4 million HPS. Like 4 million HP in one globe, in less than a global. So we have production letting us know the realities of life at the studio. Good, nice. Yeah, we've got the big, we have approval for the foods good, yeah? Check out method channel thumbnail. What's this? I think Svan is leaking their strants. Let's try and make sense of it. How to kill Ash Vein? Is that? OK, so. Svan is pointing at Ash. How to kill Ash Vein? So we've got Ash there. How to kill Ash Vein? We have Ash Bringer. OK, so we've got Ash Bringer. Ash Bringer, OK. Then we have three bubbles. Equals M2 squared. OK, is that how that works? Yeah, three bubbles right for the bubbles that the players get put into, right? Sure, you're right. The right is those down, right? OK, so these three bubbles, OK. What's the next step? We've got to, yes. Need more rats. Right. That's true, I mean, I only care about strength, but you can see on you, you care more about the physique, the six pack. Yes, eight pack, eight pack. Oh, you have eight pack? Eight pack, yes. Did you get a tattoo done? No, I mean, it's just, it's how the light hits the body and it just, it's like the natural shadows that occur. OK, I got it. The natural shadows. It's crazy. That's true. The physique in you is just... Thank you.  Thank you. Well, that's what it is, you know. I've heard that before. Yeah, many times. Many times as well. That's just how it is. That's just life. And it's 2019. It must be rough to get that a lot of girl and a male attention every day. Yes, yes. Male attention, female attention. Most, yeah, a lot of attention, I would say. Yeah, everything in between as well. Do you enjoy it or is it too much sometimes? It's a lot of pressure, you know, just every day, it's just every direction, you know, everywhere I look.  Oh, like S-Fan, do the flick. Oh, look at those pecs. Like boom, boom, boom. It's fine, but I'm not an object.  Oh, I feel bad for you. It must be super rough. Thank you. Okay. Thank you. Yeah. I think I'll recover. The goal is 20K. If we hit 20K, how do you feel about this? If we hit 20K, Gingy and myself and Skow, we'll do a workout stream. Would you be up for that? I would be super up for that. I think that's something, good idea. We gotta make sure Skow's up for it too. As long as I can touch your abs while you're doing sit-ups. Of course, yeah, that would be the- That's my only request. For activation purposes.  Right. I wanna learn your technique. Yeah, I think that's important. I think that's what everybody wants to see. There's nothing sexual about it? No, it's purely training. It's just like man-to-man. It's a platonic relationship. Feeling each other's muscles, there's nothing wrong with that. If you just get to know Esfan a little bit and learn his techniques, you could get the sexiest eight-pack as well. True. That's absolutely true. So I'm gonna have a workout DVD coming out very soon. What's your workout DVD gonna be called? Becoming the Bull. Yeah, that's a great name. An Esfan story. An Esfan story. Yeah. Do you wanna know where my name Esfan comes from? No, tell me. Maybe someday I will. Yeah. I can't wait for that day. It'll be really good. I know. It's gonna be the highlight of my life, I think. It will be, I know, it will be. I literally tried so hard to not laugh. If I can't ask, $5, can we get a Peckflex duel? Between Gingy and Esfan. Let's see it. Ready? Yeah. See, you have a, look. Yeah, I think that was pretty good. That was pretty good. That was pretty good. That was pretty good. Guys, hello, hello. I am Esfan.  And I play Red Paladin. So that is why I am cosplaying today with my lawbringer suit. Yes, I have a tier one, eight out of eight full set tier one lawbringer. We're talking about a little bit of vanilla rating and I am wearing the molten core tier set. So yeah, that is what I'm doing. The deal was, the deal was that if I wear a banana suit, somebody would donate $1,500. And I said, you know what? If somebody brings me a banana suit, I will wear it on stream tomorrow, I promise.  Out of the blue, he's like, yeah, I just kind of had it. And I was like, well, frick. Esfan, I hear you like kids. I do. That's great. Yep. They make great gold farmers. They do. Dad gamers, that's some advice for you. Look, if you don't have a kid, it's okay. You can adopt. You can teach them how to farm gold, get an early start on their gaming career. You know, they can farm consumes, farm mats, really, really good idea for one of our classic WoW comes out. I'm just going to let you know that's a free tip, that's free advice. Kids are great. I have a question for you guys. How does it feel to sit here and be able to raise this much money and help children all around the world? Oh, it's great. Yeah. It's great. I mean, really, like, you know, we want the kids to farm for us and we want to farm for the kids.  That's just how it goes, right? Banana eating. Wait, what? That's cannibalism. What are you doing? Stop it. Genocide. That's my, that's my people. That's a tier one paladin. Save the children, for those of you who don't know, work in 120 different countries around the world and it is the 100th anniversary of the organization this year. True. So, big pog. Pog. Big pog. $1,000 can help construct a village school, giving the gift of education to children who might not be able to access it otherwise. So you know what that means? 40,000 can help with 40 villagers. Yeah. You see that? That's the vanilla brain in action, guys. Believe it or not, yes. If 1,000 can do one, then 40 can do 40. Do you know what a $1 donation can do? What? It can build one 1,000th of a village. One 1,000th of a village for $1. Very good. Look at that. Well, $1 can actually give treatment against pneumonia to four kids, which is, how do you say it in English? Good. Yeah, it's good. There is a $100 donation from Ludie66. Ludie66, thank you for the $100. Thank you so much. Thank you so much. Somebody else said, look, they're going to donate $50 to my stream if I put a shoe on my head. How about this, I'll do you one better. If you donate $50 to save the children, I'll put a shoe on my head right now. I got the shoe. He's got the head. True. I think Soda Poppin' has one. Yeah, he does. There it is. He's in a Nash Bringer. Full screen. OK. He has one, too. Who? There it is. OK. I mean, yeah, I think you can get this somewhere. Can we have, oh, there it is. That's a real shoe. It's not fake. That's a legendary shoe next to a legendary weapon. There it is. There you go. They're going to go on, and it's past one. That camera angle is great. There it is. Yeah, I can smell that, too. Yeah, it's a nice one. Looks like Skow can smell it. Yeah, I was going, hey, Skow, you want a whiff, dude? Skow, you want a whiff? Yeah, he's really enjoying it, dude. It's not so bad. It looks tasty. I should have that. Performing at your peak. Very good. Oh, I can also perform at my peak performance levels with a performance drink. Thank you very much. Very nice. Very nice. Look at that. Delicious. Actually, I haven't drank it yet. I can't say that yet. I kept reading the script before I sipped. Delicious. Very good. I very much enjoy runtime.gg performance drinks with Jinseng, El Carnitine, and BCAAs. Thank you, runtime.gg, for sponsoring this event. Can you hold the sign up a bit higher so I can read it next time? Thank you. Something else that's there is wiping in game and wiping in real life. So I don't know if this is going to happen. This is totally unconfirmed. But maybe a bidet sponsor is on the table. Yeah, that's right. There might be a bidet sponsorship on the table. So that way, Method will no longer wipe in real life. And that way, hopefully, they won't wipe in game either. Perfect. Perfect. That's the goal. That's the goal. I've got to say, that's what I love about Europe. Yeah. That was really, really fantastic. Yeah, you just grab that hose and let it rip.  I don't feel very good, though. You said you don't feel good? No, it's fine. It's probably from something else. I think I'm dehydrated, though. No, dude, honestly, your voice sounds kind of exhausted. OK, yeah, both OK. Exhausted and sexy.


Thank You mayor van der steen members of the common council administrator wolf and guests in 2019 the city of sheboygan contracted clifton larson allen to perform an operational assessment of the finance department and Earlier this year they presented their findings this evening the deputy finance director teridui and myself are here to provide you an update on the progress made on those items Some of the focus areas of improvement which assisted us in creating our priorities And were included policies and procedures Which these were fairly non-existent or those that we did have were quite outdated when we began Internal controls these relate primarily to our setups and structure and tend to be key risk areas As well as staffing and tools the resources which are key in accomplishing all of these improvements The tools tend to be software related Now what I will do is I'll hand it off to our deputy director teridui as she speaks in more detail about some of these items I'm going to start off by going over some of the items that we have completed so far First off, we've been working on those procedures that Marty just mentioned that were identified in the CLA assessment to date we have created 70 written procedures and Those are needed so that staff can be cross-trained And we've been able to create some efficiencies as those procedures have been reviewed and a new set of eyes get to look at them that can lead to questions investigation and then we've been able to Make some of our processes more streamlined as The check run process being revised and is an example of that Next we've looked at all of the position purposes and the finance department We've updated those while creating the account in three position purpose. So we've shifted some of the responsibilities between The position purposes. So that's why these tenured staff will be using the written procedures now because they're gonna have to learn Processes that they hadn't been doing In their previous own time here with the city Also, it was identified that a journal entry approval process needed to be created And that was mainly for a separation to keep a segregation of duties So right now I am approving the accountants journal entries and the director is approving my journal entries We've also worked on Expanding our P card program and we've closed some of the store charge accounts Because the process of reconciling and tracking those expenditures was very inefficient So we've created an Excel spreadsheet That is able to improve the departmental and summary tracking So we have other staff that are working on improving that process still to make it work even better Then we have hired the accountant three position Because the finance department it needs more horsepower as Tad Mentions to address the items in the CLA assessment our audit findings and also to prepare for strapped staff transitions as we have Some very tenured staff that will be looking at retirement over the next coming years We've also been providing Munis training to the library and municipal court staff so that they're able to perform Daily receding which helps maintain that segregation of duties and Then lastly we've been working on the budget book spreadsheet So there's a word in Excel component that we've merged for each of the orgs and all the files have been Uniformly formatted and that allows for us to be able to make mass changes to the files Such as this year we had added some accounts and we're able to do that addition in one Well swoop instead of having to go into each of those documents to do that Then I'm going to move on to our items that are in progress So we're currently reviewing the procurement investments and capital asset and depreciation Policies and we're viewing those and updating them Earlier this year Marty and I had attended a sieve mick training on Writing policies and procedures where we were given a recommended Policy template from sieve mick and we intend to implement and use that template Also a very important process that we're working on right now is a cash and bank reconciliation The development of a full reconciliation process is critical so that we can start to have a month Then close which has not been happening in the past We've been able to make some small changes that have made a big impact on Streamlining that process and I've been working with our consultant to fully establish the process and document the procedure Next we've been doing vendor Cleanup our system has many vendors that are duplicated for various reasons The IT department was able to extract the vendor list into Excel And then one of our accountants determined the vendors that need to be updated vendors that can be merged and Verify 1099 filing requirements. We were also able to delete several hundred vendors that had no activity Next is the purchase order process We have created a centralized city purchasing email So that we're not using an individual's email because when there's staff turnover then you're you're left with the problem of having to Get those emails forwarded And we'll also be working on merging vendors and then creating unique PO addresses Which will improve our process and allow for more PO's to be sent automatically and electronically Next is the sidewalk assessment process and conversion from AS 400. We're working collaboratively with the DPW and We just recently met with them to identify a timeline of when assessment details are needed from DPW for the finance department To bill out the assessment Allow time for payments and payment plans to be set up before that's being put on to the tax roll and And lastly the electronic file organization as COVID hit and people were working from home It was called attention to the fact that we really need to be able to Find files efficiently and clean up our naming conventions of folders and files. So we're actively working on Working on cleaning that up I'll hand it back to Marty Thank you, Tara. Definitely some progress being made there But I'm sure your next question is what's next Certainly we had some already pre-identified focus areas to take as our next steps As Tara had mentioned one of those key steps is to test and review those procedures that were created When you create 70 brand new procedures you're bound to find some tweaks and modifications that are necessary and our newly hired account in three is going to be Performing some shadowing of the co-workers within the department and as they perform the tasks She can review the written procedure and identify areas that either are missed omitted Incorrect or even possibly recommend some some modifications for more efficiencies We'll also be putting some greater emphasis to our AS 400 to munis conversion That's definitely something that I know many of you have already heard about Some of the steps that have been taken as we've identified what we call our munis super users Those super users will be forming teams and certainly in finance. We have several super users identified Those super users will dig into the munis modules that are necessary For in continuing the improvements. We've identified certain key areas that the munis modules need to be Converted from the AS 400 and into munis those would include loans special assessments capital assets Personal property and then there are also others out there Certainly those align well with some of the other items that we've talked about with our policies and Procedures so these these tend to be linked together which then Continues a unified approach of completing a full task As we work through many of these new module setups We'll also be looking at correct mapping of accounts in the background And while we do that we can review and look for opportunities to modify our fund structure and chart of accounts Those various improvements include merging of funds Currently we've identified several areas of fund cleanup where we have for example tax incremental districts We have debt service and capital funds and we're looking to merge that into one tax incremental district fund that will Minimize the cost Transferring and or adjustments made between funds. It also keeps a cleaner Full picture of each tax incremental district This was something that we did have a phone conversation with our auditors to kind of vet the pros and cons of that they actually Have you can do it either way, but they they certainly see it more often with it being a single fund rather than split between the two Also while we're reviewing some of those objects Within the funds each of the funds or accounts as we like to call them We're going to be reviewing for any redundancy so that we can clean up and remove some Maybe not as useful accounts, but also be able to identify areas where we're missing some some key and Intuitive type accounts that will help department heads as they code their expenses We also will be looking at some of the account structure setups such as how we utilize our due-to-do from accounts Sometimes the software we found Has a better purpose for certain types of accounts the way that they were structured than how we've been using them So it'll create a more effective and efficient Workflow as well as month-end and year-end close We're also going to be working collaboratively with our IT department regarding munis user role setups This really gets at the internal controls and enhances and improves our Approval process both on transactional basis, but also when creating new funds new accounts and transactions or even new vendors on our next slide It's key to have all of these initiatives But in order to show progress and keep tabs on all of these you certainly have to have a good tracking mechanism in place Following the CLA assessment There was a summary document that was built with key areas of Assignments of who the staff member is to lead the project Who's all involved? What are the? Other departments involved what are the key deadlines both from a start or a starting point and a deadline To complete the project this this document is being currently merged with a previously Defined and built action plan for the department as well as staff task workloads the staff task the Staff task workloads also will then be able to have Identified procedures linked to it so that we can follow through where the previous procedures were were built As Sarah had mentioned a lot of the procedures that were created Definitely have to be in a workable system and so we also will be building a table of contents and a Structure so that we can find these Whether you're the primary staff member or a cross-train staff member so some organization of these procedures will be key and then we'll also be looking to Provide quarterly updates at our finance and personnel committee And then also be able to come back to the Common Council with any updates and questions So with that I guess I turn it back over to the mayor if there are any questions this evening for us


Hello, and welcome to theCUBE's presentation of the AWS Startup Showcase. Data as Code is the theme. This is season two, episode two of the ongoing series covering the exciting startups from the AWS ecosystem. We talk about data analytics. I'm your host, John Furrier of theCUBE, and we have Javier de La Torre, who's the founder and chief strategy officer of CARTO, which is doing some amazing innovation around geographic information systems, or GIS. Javier, welcome to theCUBE for this showcase. Thank you. Thank you for having me. So, you know, one of the things that you guys are bringing to the table is spatial analytics. Data that now moves into spatial relations, which is, you know, we know about geofencing, you're seeing more data coming from satellites, ground stations, you name it, things are coming into the market from a data perspective that's across the board. And geo is one of them, GIS systems. This is what you guys are doing, the rise of SQL in particular with spatial. This is a huge new benefit to the world. Can you take a minute to explain what CARTO is doing and what spatial SQL is? Sure. Yeah, so like you said, like data, obviously we know it's growing very fast and it's going to now be leveraged by many organizations in many different ways. But there's one part of data we call one dimension that is location. We like to say that everything happens somewhere. So therefore everything can be analyzed and understood based on the location. So we like to put an example, if all your neighbors get an alarm in their homes, the likelihood that you will get an alarm increases, right? So that's obvious. We are all affected by our surroundings. What is spatial analytics, this type of analytics does is try to uncover those spatial relations so that you can model, you can predict where something is going to happen or you're like, or optimize it, you know, like where else you want it to happen, right? So that's at the core of it. Now, this is something that as an industry has been done for many years, like the GIS or geographic information systems have existed for a long time. But now, and this is what CARTO really brings to the table, we're looking at really democratizing it so that it's in the hands of any analyst. Not our vision is that you don't need to go five years to a geography school to be able to do this type of a spatial analysis. And the way that we want to make that happen is what we call with the rise of a spatial SQL. We add these capabilities around a spatial analytics based on the language that is very, very popular for analysts, which is SQL. So what we do is enables you to do this spatial analysis on top of the well-known and well-used SQL analytics. It's interesting, the cloud native and the cloud scale wave, and now data as code has shown that the old school, the old guard, the old way of doing things. You mentioned data warehousing, okay, as one, BI tools in particular have always been limited. And the scope of the limitation was the environment was different. You have to have domain expertise, rich knowledge of the syntax. Usually it's for an application developer, not for like real time and building it into the CICD pipeline, or just from a workflow standpoint, making it available, the so-called democratization. This is where this connects. And so I got to ask you, what are you most excited about in the innovations at Carto? Can you share some of the things that people might know about or might not know about that's happening at Carto that takes advantage of this cloud native way because companies are now on this bandwagon? Yeah, no, it is. And cloud native analytics is probably the most disruptive kind of trend that we've seen over the few years. In our particular space, on a spacial, it has tremendous effects on the way that we provide our service. So I like to highlight four main reasons why cloud analytics, cloud native is super important to us. So the first one is obviously it's scalability. The working with the sizes of data that we work now in terms of location was just not possible before. So for someone that is performing now analysis on an autonomous car, or you're like, there has any kind of a sensorized GPS on a device and it's collecting billions, hundreds of billions of points. If you want to do analysis on that type of data, cloud native allows you to do that in a scalable way. But it also is very cost-effective. That is very something that you'll see very quickly when your data grows a lot, which is that this computing storage separation, the idea that is to store your data at cloud prices and then use them with these data warehouses that we were describing makes for a very, very cost-effective solution. But then there is other two, obviously one of them being SQL and the spacial SQL that means, we like to say that SQL is becoming the lingua franca for analytics. So it's used by many products that you can connect through the usage of SQL. But I think you're like, you're coming towards, what I think is even more interesting. It's like in the cloud, the concept like we all are serving the, we are all living in the same infrastructure enables us that we can distribute spacial datasets to a customer that they can join it on their database on SQL without having to move the data from one another, like in the case of Redshift on Amazon Redshift, the carto connects and using something called a spectrum, we can connect live to data that is stored on S3. I think that is going to disrupt a lot the way that we think about data distributions and how cost-effective it is. I think it has a lot of your potential on it. And in that sense, what Cartu is providing on top of it in the format of formats like Parquet which is a very popular big data format, we're adding geo-parquet. We are specializing in this big data technology for doing the spacial analysis. And that to me, it is very exciting because it's putting some of the best tools at the hands of doing the spacial analytics for something that we were not able to do before. So to me, this is one area that I'm very, very excited about. And that's, I want to back up for a second. So you mentioned Parquet and the standards around that format. And also you mentioned Redshift. So let me get this right. So you're saying that you can connect into Redshift. So I'm a customer and I have Redshift, I'm using it, I got my S3 I'm using Redshift for analyst. You're saying you can plug right in to Redshift. Yes. And this is a very, very, very important part because what Cartu does is leverage Redshift computing infrastructure to essentially do all the analysis. So what we do is we bring a spacial analysis where the data is where Redshift is versus in the past, what we will do is take the data where the analysis was. And that's it, it's at the core of cloud native. Yeah, this is really where I see the exciting shift where data as code now becomes a reality is that you bring the, it's a redefined architecture. The script is flipped. The architecture has been redefined. You're making the data move to the environments that needs to move when it has to. If it doesn't have to move, you bring compute to it. So you're seeing new kinds of use cases. So I have to ask you on the use cases and examples for Cartu AWS customers with spacial analytics, what are some of the examples on how your clients are using cloud native spacial analytics or Cartu? So one, for example, that we've seen a lot on the AWS ecosystem obviously because of its reach and its position, we work together with another service in the AWS ecosystem called Amazon location. So that actually provides you access to maps and SDKs for navigation. So imagine that you are like a company like that is delivering food or any other goods in the city. You have like hundreds or thousands of drivers around the city moving, doing all these deliveries. And each of these drivers, they have an app and they are collecting actively their location, their position, right? So you get all the data and then it gets stored on something like a Redshift data cluster and there's different architectures in there. But now you essentially have like a full log of the activity that is happening on the ground from your business. So what Cartu does on top of that data is you connect your data into Cartu and now you can do analysis, for example, for finding out where you should maybe place another distribution center for optimizing your delivering routes. Or like if you're on the restaurant business where you might want to add a new dark kitchen, right? So all this type of analysis based on since I know what you're doing in your operations, I can post analyze the data and then provide you a different way that you can think about serving and solving your operation. So that's an example of a great use case that we're seeing right now. So talk to me about the traditional BI tools out there because you mentioned earlier they lack the specific capabilities. You guys bring that to the table. What about the scalability limitations? Can you talk about where that is? Is there limitations there? Obviously, if they don't have the capabilities they can't scale, that's one. But as you start plugging into Redshift scale and performance matters, what's the issue there? Can you unpack that a little bit real quick? Yeah, it goes back to the peculiarities of the spatial data, location data. Like in the use case, like I was describing you very quickly are going to end up with really a lot of your like terabytes if not terabytes of data very quickly if you start integrating all this data because it gets created by sensors. So volumes in our world, that tends to grow a lot. Now, so when you work with BI, with BI tools there's two things that you have to take in consideration. BI tools are great for seeing things. Like for example, if all you want to see is where your customers are, a BI tool is great. Seeing, creating a map and seeing your customers that's totally in the world of BI. But if you want to understand why your customers are there or where else could they be, you're going to need to perform what we call a spatial analysis. You're going to have to create a spatial model. You're going to have to, and for that BI tools will not give you that. That's one side. The other talks about the volumes that I was describing. Most of these BI tools can handle certain aggregations. Like for example, if you are reading if you're connecting your, let's say 10 billion dataset to a BI tool, the BI tool will do some aggregations because you cannot display 10,000 rows on a BI tool. And that's okay to get aggregations and that works. But when it comes to a map, you can not aggregate the data on the map. You actually want to see all the data on the map. And that's what Carto provides you. It allows you to make maps that sees all the data not just aggregated by county or by all other public area. You see all your data on the map. You know, it's interesting is that location based service has been around for a long time. You know, when mobile started even hitting the scene, you saw it get better mashups, Google maps, all this Google API mashups, things like that. You know, developers are used to it but they could never get to the promised land on the big data side because they just didn't have the compute. But now you add in geo fencing, geo information. You now have access to this new edge like data, right? So I have to ask you on the mobile side, are you guys working with any 5G or edge providers? Because I can almost imagine that the spatial equation gets more complicated and more data full. When you start blowing out edge data, like with 5G and you got more things happening at the edge, it's only going to fill in more data points. Can you share how that use case is going with mobile, mobile carriers or 5G? Yeah, it's totally the case. Well, first, even before we are there, we're actually helping a lot of tokens on actually planning the 5G deployment. Where do you place your antennas is a very, very important topic when you're like talking about 5G. Because you know, like 5G networks require a lot of density. There's a lot about like, okay, where do I start deploying my infrastructure to ensure the customers, you know, like, have the best service in the places where I wanna go first. You mean like the RF maps? Like, understanding how RF propagates? Well, that's one signal, but the other is like, imagine that your token is more interested on, you know, like on, let's say, on a certain color consumer profile. Like, you know, like young people, you know, that are using one type of service. Well, we know where these demographics color lives. So you might want to start color deploying your 5G in those areas, right? Versus if you go to more color commercial and more color residential areas, there might be other demographics. So there's one part around market analysis. Then the second part is, once these 5G networks are in place, you're right, I mean, one of the promises that they call like these new technologies give us is because the network is much smarter, you can have all these edge cases. There's much more location that data that can be collected. So what we see now is a rise of, on the amount of what we call telemetry. That for example, the IoT space can make around location. And that's now enabled because of 5G. So I think 5G is going to be one of those trends that are going to make like more and more data coming into, I mean, more location data available for analysis. So how does that, I mean, this is a great conversation because everyone can realize they're at a stadium and they see the multiple bars but they can't get banned with. So you either got to get a backhaul problem or not enough signal. Everyone knows when they're driving their car. They know they can relate to the consumer side of it. So I get how the spatial data grows. What's the impact to CARTA and specifically the cloud because if you have more data coming in, you need the actionable insight. So I can see there the use case. Oh, put the antenna here. That's an actionable business decision. More content, more revenue, more happy customers. But where else is the impact to you guys and the spatial piece of it? Yeah. Well, I mean, like there's many, many factors, right? So one of them, for example, on the, on the technical one of the things where we realize impact is that it gives the visibility to the operator, for example, around the quality of service. Like, okay, it's my, are my customers getting the quality of services where I want? Or like you said, like if there's now suddenly a concert, the quality of service in one particular area is dropping very fast. So the idea of like being able to now in real time kind of like detect location issues. Like I'm having an issue in this place. That means that then now I can act, I can drive a van there, put more capacity, et cetera. So I think the biggest impact that we are seeing and we're going to see on the upcoming years is that, you know, like more and more use cases going towards real time.  I'm going to look at, you know, like how I could do better next time towards a more of like an industry where hard to ourselves, we are embedded in more real time type of, you know, like analytics where it's, okay, if this happens, then do that, right? So it's going to be more personalized at the level that like in a co-collect environment, it has to be part of a full-collect pipeline, kind of like type of analysis that it's already programmatically prepared to act on real time. That's great. And it's good segue to my next question. As more and more companies adopt cloud native analytics, what trends are you seeing out of the key to watch? Obviously you're seeing more developers coming on site on the scene, open source is growing. What's the big cloud native analytics trends for Carto and Geographic information? Yeah. So I think we were talking before the cloud native, now it's unstoppable. But one of the things that we are seeing that still needs to be developed and we are seeing now progress is around a standardization, for example, around like data sets that are provided by different providers. What I mean with that is like, you as an organization, you're going to be responsible for your data lake that you create on your cloud, right? On S3 or in, you know, I can, and then you're going to have a computing engine like Redshift and you're going to have all that set up. But then you also going to have to think about like, okay, how do I ingest data from third party providers that are important for my analysis? So for example, Carto provides a lot of demographics, human mobility, we aggregate them, we clean up and prepare a lot of spatial data so that we can enrich your business. So for us, how we deliver that into your cloud native solution is a very important factor. And we haven't seen yet enough standardization around that. And that's one of the things what we are pushing, you know, with the concept of geo-parquet of you and standardizing that body. That's one. Then there is another, this is more what I'd like to say that, you know, we are helping companies figure out their own geographies. What we mean by that is like most companies, when they start thinking about like, how they interact on the space, on the location, some of them will work like by seed codes and other by cities, they organize their operations based on a geography, you know, or technically what we call a geographic support system. Well, nowadays like the most advanced companies are defining their geographies in a continuous spectrum. What we call global grid system or spatial indexes that allows them to understand the business not just as a set of regions, but as a continuous space. And that is now possible because of the technologies that we are introducing around spatial indexes at the cloud native infrastructure. And it provides a great way to match data resources and operate at the scale. To me, those two trends are gonna be like very, very important on because of the capabilities that cloud native brings to our spatial industry. So it changes the operation. So it's data as ops, data as code is data ops. Like infrastructure as code means cloud DevOps. So I got to ask you, because that's cool. Spatial index is a whole nother way to think of it. Rather than you go hyper local, super local, you get local zones for AWS and regions. Things are getting down to the granularity of levels. I see that. So I have to ask you, what does data as code mean to you? And what does it mean to character? Because you're kind of teasing it this new way because it's redefining the operations, the data operations, data engineering. So data as code is real. What does that mean to you? No, I think we already seen it happening to me and to Cartu, what I will describe data as code is when an organization has moved from doing analysis after the fact, you know, where they're like post like analysis in a way to where they actually kind of put in analytics on their operational cycle. So then they need to really code it. They need to make those, these analysis, put them and insert them into the boot, into the architecture bus, if you want to say of the organization. So if I get a customer and happens to be in this location, I'm going to trigger that. And then this is going to do that. Or if this happens, I'm going to need to open up. And this is where if an organization is going to react in the more real time and we know that organizations need to travel that direction, the only way that they can make that happen is if they operationalize analytics on their daily operations. And that can only happen with data as code. And that's interesting. Look at ML Ops, AI Ops, people talk about that. This is data. So in developers meets operations, that's the cloud, data meets code, that's operations, that's data business. You got it. Add to that the spatial with Cartu and we got it. Because every piece of data now is important and the spatial is key. Real quick, before we close out, what is the index thing? Explain the benefit real quick of a spatial index. Yes, so the spatial index is, well, everybody can understand how we organize societies politically, right? Our countries, you have like states and then you have like counties and you have all these different kind of what we call administrative boundaries, right? That's a way that we organize information too, right? A spatial index is when you divide the world not in administrative boundaries, but you actually make a grid. Imagine that you just actually make a grid of the world, right? And you make that grid so that in every cell, you can then split it into, let's say for example, four more cells. So you now have like an organization, you can just split the world in a grid that you can have multiple resolutions. Think like Google Maps. When you see the entire world, but you can zoom in and you end up seeing like one particular place. So that's one thing. So what a spatial index allows you is to technically put your location not based on a coordinate, but actually on one grid place, on an index. And we use that then later to correlate, let's say your data with someone else data, because we can use what we call is a spatial indexes to do joins very, very fast. And we can do a lot of operations with it. So it is a new way to do computing, spatial computing based on this type of indexes. But for more than anything for an organization, what a spatial index allows is that you don't need to work on zip codes or in boundaries, on artificial boundaries. I mean, your customer doesn't change because it goes from this place to the road to the other side of the road. It's the same place. It's an arbitrary location. It's a spatial index. Break out all of that.  It's like the forest and the trees and the bark of the tree. You can see everything. Good way of looking at it. Great to have you on and in real quick closing, give a quick plug for the company. Summarize what you do, what you look into, how many people you got when you're hiring, what's the key goals for the company? Yes, sure. So Carto is a company now, we're around 200 people. Our vision is that a spatial analytics is something that every organizations will do. So we really try to enable organizations with the best data and analysis around a spatial and we do all that cloud native on top of your data warehouse. So what we are really enabling these organizations is to take that cloud native approach that they're already embracing it also to a spatial analysis. I'll be a founder, chief strategist, Carto. Great to have you on data as code. All data is real, all data has impact, operational impact with data is the new big trend. Thanks for coming on and sharing the company story and all your key innovations. Thank you. Thanks to you. Okay, this is the startup showcase data as code. Season two, episode two of the ongoing series. Every episode will explore new topics and new exciting companies pioneering this next cloud native wave of innovation. I'm John Furrier, host of theCUBE. Thanks for watching.


I'll be quite frank with you. We changed what we were going to do on account that we thought that the house manager's presentation was well done. Watching the impeachment proceedings for Donald Trump, particularly whether or not the Senate will vote to convict him, it is a little bit bittersweet. And what I mean by that is, it needs to happen. I think it's important because you can't just allow a president to get away with whatever he wants because he's a lame duck president and he'll be out of power. I mean, if you incite an insurrection, you should be held accountable. Otherwise, future presidents during their lame duck sessions will be tyrants. So, you know, there needs to be accountability. It's important. But at the same time, what are the odds that he actually gets convicted? I think very, very low. Now, I am pleasantly surprised that the Senate, a majority of them, including some Republicans, voted that it is constitutionally permissible to impeach a president who is no longer in power. That's something that is good to see. However, I wish that they were actually less afraid of their base and would just vote based on whether or not they think he's guilty, objectively speaking, because if you follow the facts, if you listen to the argument that the Democrats are making in favor of Trump's impeachment, I just I don't think you can be against it. I think that Jamie Raskin is doing a phenomenal job here. Having said that, though, Trump's lawyers, on the other hand, are not doing so well, to say the least. I'll be quite frank with you. We changed what we were going to do on account that we thought that the House Manager's presentation was well done. We are generally a social people. We enjoy being around one another. Centers of the United States. They're not ordinary people. And boy, this is a diverse group. We still know what records are, right? On the thing you put the needle down on and play. I worked in this building 40 years ago. I got lost then and I still do. I represent the great state of Bill in the Blank. I saw a headline representative so and so seeks to walk back comments about. I forget what it was, something that bothered her. I don't want to steal the thunder from the other lawyers, but Nebraska, you're going to hear, is quite a judicial thinking place. If the individual state legislators, legislators didn't adopt the Constitution, we would not have it. The floodgates will open. So I was going to say originally it will release the whirlwind. But I subsequently learned since I got here that that particular phrase has already been taken. So I figured I'd better change it to floodgates.  But I have no idea what they thought they were doing. That was the worst opening statement I have ever heard yesterday.   So this headline from the New York Times basically says it all. Meandering performance by defense lawyers enrages Trump. The former president was particularly angry at Bruce Elcaster, Jr., one of his lawyers for acknowledging the effectiveness of the House Democrats presentation. And that right there, it honestly like it made my jaw drop when I heard him say that.  In what reality does it benefit you to acknowledge how persuasive the prosecution is? Like, who does this? I don't know why he thought this was a good idea. He's correct because they are persuasive. Nonetheless, Trump's response is hilarious to me. So Maggie Haberman of the New York Times writes on the first day of his second impeachment trial, former president Donald J. Trump was mostly hidden from view on Tuesday at Mar-Lago. His private club in Palm Beach, Florida, moving from the new office that aid set up to his private quarters outside the main building. Mr. Trump was said to have meetings that were put on his calendar to coincide with his defense team's presentation and keep him occupied. But he still managed to catch two of his lawyers, Bruce Elcaster, Jr. and David I. Shown on television. And he did not like what he saw, according to two people briefed on his reaction. Mr. Castor, the first to speak, delivered a rambling almost somnambulant defense of the former president for nearly an hour. Mr. Trump, who often leaves the television on in the background, even when he is holding meetings, was furious. People familiar with his reaction said, on a scale of one to 10, with 10 being the angriest, Mr. Trump was an eight, one person familiar with his reaction said. And while he was heartened that his other lawyer, Mr. Shown, gave a more spirited performance. Mr. Trump ended the day frustrated and irate. The people familiar with his reaction said, I think that this is hilarious. I don't feel bad about laughing at Donald Trump's frustration and pain because this is really needed. Like he is a spoiled child who was never disciplined for his bad behavior. So for the first time, perhaps in his entire life in his 70s, he is seeing consequences for his action. And it's just some consequences. Odds are he won't actually be convicted, but just the mere fact that there's a question that he might be convicted. That alone is too much for him to bear. So he throws temper tantrums. He freaks out. He loses it. He can't handle not getting his way. He is like the caricature of like that spoiled, rich rat, that elitist prick, that snob that everyone hates.  Like deep down, I think that they know that what Trump did was wrong, impeachable, but they're not going to vote that way because they're afraid of the base. And when it comes to Ted Cruz and Josh Hawley, I was going to say Todd Hawley. When it comes to Ted Cruz and Josh Hawley, they know that legally they could be held accountable as well. So they're not going to, you know, hold Trump accountable. But, you know, it's sad. I think that if you got Republicans off the record, if the vote was anonymous, then we know that they would most likely vote to convict Donald Trump.  But most of them would. However, I do think that it's important for transparency sick in a democracy that they do have an open vote. It's just sad that that acts as a deterrent and it makes them not want to do the right thing and incentivizes bad behavior because they know that their base is absolutely crazy. I mean, look at the way that Lindsey Graham, like Trump's number one bootlicker, was shunned by Trump's base. Look at how they turned on Mitch McConnell immediately when he acknowledged that Joe Biden was the rightful winner. So nobody wants to face that wrath. Nobody wants to pay the political price to go against Donald Trump. And as a result, once again, he'll get away with it. And he is most likely not going to be convicted. I think they're going to vote to acquit. But if I'm proven wrong, I'll be pleasantly surprised, but I'm not going to get my hopes up because this is America and we never punish bad behavior when it comes to elites. We reward it. Do not hit the notification bell, either. Mike treats me so unfairly.


All right. Thank you. I really think Sam. I mean he Like the question. This is exactly the perfect setup for this This is ongoing work. I mean not ongoing. I mean it's gonna be presented that CCS. It's on e-print it's exactly to tackle some of the problems or the issues that were brought up and All the points that he pointed out clearly has a lot of experience actually digging deeper into these protocols and implementing them I Claim that hopefully what you get out of this talk that you would be forced to do these things if you use an interactive theorem Prover or computer aided verification for your protocols. All right So what this talk is not about there are no new protocols no hardness assumptions or I'm not also talking about UC yet We're doing game-based Verification sort of modeling also and we're also not what I'm not talking about having the computer find the protocol Approve for you. This is basically if you have a specific protocol and approve for it and you want to get high confidence in it and Also, what I want to hopefully you get out of this talk is that if you've been through the trouble of actually verifying it in a formal Model, I'm like a theorem prover You have to do a little bit of work and you will get an executable out of it that is correctly constructed Okay Just a regulatory slide on NPC Protocol that allows a bunch of mistrusting parties typically software to compute a function under private input Historically semi-honest passive honest, but curious the model that cares more about privacy and the active one or the malicious one Is where you basically can have cheating and arbitrary deviation from the protocol? I'm not gonna go through this. I mean this crowd doesn't need it But the reason why I just want if anybody doesn't know a secret sharing is you have the share and reconstruct protocol is because I want to show you actually formalizing it in easy crypt and show you I want you to walk away to basically the message is that this is possible like MPC I consider it as advanced cryptographic Protocol and primitive and it's not that straightforward to implement Especially once you get to the malicious and active setting and also adaptive adversaries One more thing I'm gonna talk about is okay over a long period of time If you have things are secret shared then mobile adversary can basically collect all shares This has been handled in the literature before in the Proactive setting where you basically are going to move sort of your you're moving the polynomials that you're sharing with over time So that somebody that is comp trying to compromise and get all the shares over times your resetting parties and Starting them from scratch. They need to recover their shares from the existing polynomial. So you cannot stitch things together And this is very basic. I just want you to be aware of this because I will show you formalism that actually influence this stuff All right, okay, so The reason what I'm saying MPC starts to become much more complex is once you start to worry about dynamic groups and things like proactive security very quickly you'll find that your MPC protocol has seven eight or nine sub protocols and That's why you see and composability is very important, but that's at the protocol design. What about the software? This is non trivial so just when you refresh shares the standard trick is if you basically had multiple shares on a Polynomial everybody gets the evaluation of the polynomial So a simple way to refresh it is be a sorry to refresh is generate a polynomial that evaluates to zeros That's the green one at where the secrets are share it again Everybody deletes their own their old shares. So basically what you get is a new sharing of the same secret when you recover share is basically when Party leaves the protocol and comes up again. You need to give it doesn't have any state. You need to give it existing shares so This is very basic MPC has been known since 88 BGW is one of the most fundamental protocol This is an interesting fact. There once no fully specified proof till 2011 and Once you get and I highly I mean, this is very appreciated that the work that I sure oven lindle go through to Specify everything in detail and have a full proof That's a long time. Okay, and when you look at that paper, that's like an 87 page paper 84 pages of it is about passive and static Static active when you start to get into adaptive Malicious adversaries and also Composability There's a lot of other papers that you need to refer to in theorems. This is highly non-trivial So actually even implementing something for adaptive active adversaries. I don't know if anybody did it But it's whatever happened is non-trip So basically why worry about verifying MPC because one it provides an existing proof that you can tackle in Computative verification complex protocols and then people now are talking about zero knowledge more for encryption I think we're ready to actually verify these in interactive theorem Provers They're becoming increasingly relevant in blockchain settings and not only that honestly if you were at the talk yesterday The blockchain Dalia Malki mentioned this protocol This is a consensus protocol Zizipa that was written in 2007 and 10 years later They found that the life-ness and safety conditions were violated in very simple scenarios 10 years to do that And this is something that doesn't even worry about Confidentiality and privacy of inputs MPC is way more complicated. So I'm not saying that the MPC protocols have issues in them. I'm saying this is like higher confidence Level of confidence. That's just not there yet And if we if we go there to build infrastructure that should last for decades I think this is the best way to go to get that level of confidence All right, there's already been some workshops and people talking There's some funding programs about so there is interest in the community of sort of merging Cryptography and the PL community and get formal verification. It's just that so far They talk I've been to that workshop. It was very useful different languages and it's it's unclear How soon we can sort of sort of merge both and hopefully this work provides evidence that it's gonna happen soon And people can build on it All right, so my opinion is that and just gonna mention it here And this is the end of the fluffy stuff It's all gonna be more technical from now is that when you talk about formal verification Don't only talk about the specification of the protocol might as well get executable software that is correctly constructed because what you what I learned in the last year going through that exercise is That you're almost 80% of the way through when you use one of the theorem Provers to actually formalize any protocol All right, so easy crypt in a nutshell if you haven't heard about it It's an interactive theorem Prover that basically allows you it has a probabilistic language that allows you to describe a lot of the Primitives and the constructions we use in papers so that you can sample from random distribution can be hooked to interactive theorem Prover and SMT This is satisfiable modulo theory solvers To automate the proofs This is following the construction of it the architecture is following some work from Bilari That basically is proposing to verify crypto protocol as good code-based sort of objects Typically you would describe a construction or a protocol as a module some some global variables and procedures and definitions And then there's multiple levels at which you would verify something like this So for instance like take a gamma textbook a gamma I mean if you write an easy crib as you would write it in your paper you have three function three Procedures algorithms key generation encrypt and decrypt And they have already operators to sample randomly from Let's say a group of a specific order So this is not far away from how you would write in tech your your protocol So what I'm advocating is if you write this first and then extract from it tech, which is actually possible I think that's the right way to do it So what we did in this paper, which we presented at CCS is we did the following we Defined abstract definition for a lot of the primitives that you would have an MPC not OT I mean, I think that should be done But what we did is we did secret sharing a lot of variations of secret chain your standard Shamir one based on polynomial additive gradual We did MPC an abstract definition and then we proved some compositions theorem at that abstract level then basically what you do is for each abstract primitive you need to have a Instantiation of it, which is like in Shamir's case basically you select a polynomial of a specific degree over a field and then you prove equivalence of the abstract definition and the actual instantiation of the primitive and then basically you would Prove security this equivalence you can extract from the specification. You have a security game also and then you basically Prove you have to specify the proof in easy crypt and I'll show you examples of this It's not gonna stay that high level. It's just I want you to walk away with the overall sort of mental map of what happens So we have game-based security definition for each of the primitives We code the actual proofs and verify them in easy crypt But that's only half the story or like two-thirds of the story The interesting thing that we observed is the language of easy crypt is very close to a language called YML Which you can automatically extract from it O camel, which is executable in a verified way exactly the question That was raised before before I walked on the stage. I think this is possible and I think this is how things should be done because Expecting software developers to learn cryptography. It's just not gonna happen The cryptographers also are not going to write the code So it's much easier if the protocol designer uses a tool like this and then you get the whole thing automated and again in a Verifiable way. All right, so this is not happening in vacuum I mean in the last several years have been a lot of interesting efforts sort of slowly making progress towards this but till this paper nobody has verified a generic MPC protocol for end parties for the active setting active adversaries and Had the whole proof in easy crypt and also nobody had extracted Software from that proof Specification or that formalism that is actually executable and that's what we have in in our paper previous work has looked at like The sv-17 private counter-trivial, that's a protocol for three parties That is basically counting the number of records that match a certain query in a database and they only did it for the passive model in CCS 17 They did it for yaw two-party computation global circuits But also only for passive and they did extract executable software and then finally in 18 HK plus they they did it for a protocol by Uli Maurer That's very simple the beauty of that protocol is it's not only for threshold adversary structures for general adversary structures But there's a catch here that the protocol they didn't have the whole proof actually formalized in easy crypt If you read the paper carefully you find that they did At some point prove that the protocol satisfies some properties and then they have a manual step where they say oh if these Properties are satisfied they're a protocol then you have a simulator, but it was never really coded in easy crypt I think it's doable. They just didn't and they also didn't bother Extracting executable software from the formalism in easy crypt So okay, so I've been talking now about these abstract definitions So this would be for instance an example of an abstract definition of secret chair, okay? The same way you would define it in a paper right when you start Writing about let's say I'm going to use secret sharing you define you have a definition that says secret sharing Which is essentially what matters is what's in the red box? There are two algorithms share and reconstruct takes an input some randomness a secret and outputs some shares and the Reconstruct takes the shares and outputs some I mean all this code is in the paper and we have it on also on github So I mean the link I'm happy to turn it or see people taking pictures It's all open source So basically this is you're not really specifying how you're going to share or reconstruct So you do this once the the good thing about this working at the abstract level is you do it once and then later on Every time you instantiated using a different. I know mathematical structure. I mean now you can do additive sharing or Using polynomials. It doesn't matter. It still will satisfy these two conditions Sorry, I mean these two definitions then you can also do it. I mean we did it all this code is there for Verifiable secret sharing now similar the way you would Implement in C++ or any other object oriented language where you inherit a class and then overload for instance some of the members We're doing here the same thing now the the share and reconstruct operations are a little bit more involved because it's verifiable when you can do the same thing for This is now not this is not the abstract definition anymore now that we have the abstract definition This is the concrete implementation of secret sharing that's following Shamir basically What this map says is basically saying you you take some randomness and a secret of type secret T Which you define up there and then you evaluate a polynomial Using that secret as the the free term and the randomness. I mean if you were here on the talk before I think it was Was it was talking about the IETF standardization process to be a last signature at some point he said You might make the the sampling of the the the keys I think make it deterministic and pass it a random Randomness and don't verify and don't don't sort of explicitly say how that randomness You should be chosen this issue actually encountered that when we're trying to formalize this We realize that it's easier to pass the randomness as sort of like the polynomial Typically when you write a secret sharing sort of like on paper or so you you say, okay I'm going to select random coefficients and then put the secret in the free term and that determines the polynomial here What I'm saying is the randomness you're gonna pass me is going to be a random polynomial With a zero free term and I'm then adding to it the actual secret so that it's in the free term and then share it What I've found is when you try to formalize things There are multiple ways to do to do the formalism and each one can make your life later on easier or harder There's no right answer. It's really up to your experience and your your taste So we have the same thing for instance This would be additive secret sharing a concrete implementation of it that satisfies that abstract definition And then we have the same thing like commitment scheme Peterson and Feldman and then What we have in the paper is at the abstract level We're we're proving that if you combine a primitive that satisfies the honest but curious definition for basically that the shares are independent of the secret and and then with a Commitment scheme then you get for a viable secret chair again this is proven at the abstract level and This framework basically anytime you instantiate any of these primitive using a concrete mathematical structure That protocol will inherit the composition proofs that you did at the abstract level So that's actually very useful because these compositions you prove once I mean, this is not you see composition. This is composition in series So we did the same thing for MPC. Just this is an abstract definition of what could be an MPC protocol I mean again, this is very high-level. It's like you have inputs You have players you have ideas of players you have phases you have an output phase Doesn't say anything and we think of this as sort of the ideal function out But then you have to instantiate this actually using concrete protocols and and we have also because we're Initially when we started we're very ambitious we wanted to actually do a proactive protocol for dynamic groups and This honest majority that didn't happen. We settled for just honest majority and proactive, but no dynamic groups yet so we have some some Composition theorems on in the proactive setting that are formalized at the abstract level All right This for instance would be the recover protocol that I tried briefly to describe earlier in using just curves for MPC when you have proactive MPC when you have basically a Party that has been reset and it's trying to join the MPC again And it needs to get a the shares How do you give it the shares what I showed you before that every party would generate a random polynomial with zero at that Index of that share this this basically is the protocol how you'd implemented in easy crib All right, so so far that I'm talking only about abstract definitions and concrete Instantiation then there's the proof. How does a proof in easy crib look like well? I mean the proof script will basically be a bunch of definitions at the beginning you're importing the modules the abstract definitions You want to satisfy in the concrete instantiations and then you're defining the type of the adversary We're defining here an oracle because in the security game you have to allow the adversary to query the share functionality with any secrets that it wants and the game that you're the security Game that you have is basically similar to how you would define security of an encryption scheme is Come up with two messages and then encrypt them and you should distinguish We're doing the same thing here for the semi honest model with secret sharing It just doesn't fit here. So this is how it looks like basically you generate two secrets or it could be two lists of secrets You you have the adversary choose one flip a bit you send them the shares of one of them The adversary can then query an oracle on sharing on any any secret they want to get the shares for and at the end They should have guess a bit and you basically in easy crib because you can compare to probabilistic distributions you compare if the two bits are Similarly distributed or not. I mean depending on if you want to have a statistical Lee secure or a perfect security or Computational you can do all this in easy crib. So we've done all of this for this is the list of primitives and proofs We have so there's like 30 files was was a lot of definitions in the semi honest and the malicious use cases All right. So as I said, this is only half the story that you basically wrote the abstract definitions and the concrete instantiations in easy crypt and you wrote the proofs and verified them The interesting thing is that we found that the easy crypt language is very similar to yml And I think this is not an accident I think yml is a framework used for the deductive verification And I think the easy crib people when they developed that they were inspired by or Affected by that language. So it turns out that you can actually easily translate from easy crib to yml And then if I know if you've heard about okamal or not before it's a language that's been around for a while It's very heavily used in the verification and pl community and it's really Designed for safety. So what we basically did is We wrote a small tool that translates from an easy crypt specification of a protocol to a yml Specification of that protocol and then once you're in yml You have the all the power of the y3 framework. There's a lot of tools that can Verify yml code and that can also extract code from yml to other languages So there's already work that extract. Oh camel that the tool is verified Like a verified tool that would translate yml to O camel and O camel is already executable There's also some tools online that claim to translate from yml to C Haven't tried. I mean we tried them, but they didn't work. They're also not claimed to be verified PVS is the proof verification system, which is the interactive theorem prover of SRI. It's been around for 20 years The language in PVS is very close to yml So you can easily translate from yml We haven't done it yet to pvs and my colleagues have a pvs to see translator So so I think it's it's very plausible that in the next year or so somebody can write a tool that Translates from yml to C and or like we will maybe do it from pvs and then you can get a C implementation So now the interesting thing when we did this. Oh, this is just showing you how closely similar I mean like the languages are so on the right here would be the easy crypt I mean part of the easy crypt code for additive gradual sharing Sorry gradual sharing is basically you take a secret you share it Additively and then take each of the summons the additive share and share it using Shamir sharing The reason why we use that is because it's used in some protocols for mixed adversaries that basically if you were at the talk yesterday from Dalia You can have these trade-offs between how many passive party how many parties are corrupted passively and actively and it's sort of a dial So you look at the protocols that do this they use the notion of gradual sharing with a different Polynom increasing the degree of polynomials for the different shares The additive shares so on the left. This is the easy crypt code For a gradual sharing scheme and on the middle. That's the yml code and on the right the OCaml code They're very similar if you mean if you can see sort of a bunch of variables and then let's for instance here You're defining in yml a function when you say let's very similar to easy crypt in OCaml It's a little bit different. So I mean Basically even I want to show you that languages are not far and that's why we have verified tools to translate from each to the other So then the question is that code that you extract which is executable. How bad is the performance? So I think it's a little bit unfair to expect that you would compare this against sort of an optimized tool So what we do is we take charm, which is a Python based framework and we it has its own secret sharing class So we compare against what's there for different field sizes different number of parties and It's not that bad. I mean listen This is something that you get within a minute once you write things in easy crypt People spend months and years optimizing implementation. So I think it's it's it's premature to say we expect the same level of Performance, but there's nothing that precludes was from also implementing a lot of the optimizations that people do in easy crypt And getting similar performance. So in some of the cases actually one thing I'm gonna point out is when you look at charm sharing and reconstructing and then our extracted code so it reconstructing in charm for 15 parties. Sorry, there's a The second row and extracted that should be 15 15 party. It takes two millisecond to reconstruct It took us six millisecond and to share 23 and one out the reason why we're faster in sharing and not reconstructing is because We actually needed to implement in easy crypt a library for evaluating polynomials and doing the interpolation And that's what we're actually synthesizing in OCaml and that's what we're using for interpolate If you take that part out and let's say replace it by NTL a C-based implementation for as a lot of Algorithms that you would need it will be much faster The point is that NTL is not verified Whereas the OCaml code here is is formally verified because the tool is formally verified that extracts So so this area there's a lot of research to be done here on optimizing I think there is hope I mean in the next five years Even if you have I think 20 percent 30 percent overhead it might be worth it For the increased confidence you have in the correctness of the software Anyway, what's missing what we haven't done and yeah, we're working on some of this But please if you're interested in this area be glad to see people working in it is adaptive active adversaries you see Verifying the underlying broadcast protocol for instance. Nobody has done this before The underlying implementations of fields groups and all these things nobody has done a verified implementation of this as far as I know Recently there's been some project like project Everest or ever crypt Using this as the underlying Primitives for an extracted MPC code would be would be an interesting avenue. Nobody has done this before Comparing against sort of more optimized protocols and implementations I think if you start to look now at optimizing what we have implemented an easy script We might that would be a fair comparison, but so far it was really all the basic stuff just wasn't there So I mean it took us a lot of time to implement the very basic libraries and building blocks and then translating to see OCaml's performance is not bad. I personally think I mean you're not gonna get much more out of C But the memory footprint of OCaml is bad because OCaml doesn't release memory. So It's not gonna scale at some point. So there is need to also work in C. I think anyway, and obviously the future work is basically addressing these things and There are other interactive theorem prover other than easy crypt easy crypt is really focused for cryptography So like things like cock is a bell and pvs if you now want to start also reasoning about like this MPC software it's gonna be sitting either in a virtual machine or like Container or something like that. I mean if you people are starting to talk about not starting It's been around for a while verified microkernel if you've ever heard of SEL 4 I mean ultimately what you want to verify everything end to end Then so SEL 4 for instance is verified in Isabel if you want to verify the composition of both of those two things You need to do the work. We've done like an easy crypt in Isabel and it's in principle doable It's just takes was gonna take a lot of effort Which is good. I mean there's a lot of research To be done. Anyway, whenever I talk to people about this kind of work and this sort of approach These are the questions I or objections I often get and I just want to put it out there because honestly I don't think these are valid objections. I was like, oh, what if your security definition or abstract definition of implementation is wrong? I mean you have the same issue with papers. There's nothing different I just took it and implemented the just a little bit more rigorous formalism what if The computer checked proof has a problem. It's exactly the same as you have it in a paper You can always if you find the bug if it's nothing fundamental you can fix it and within a couple of minutes of Worst-case hours you verify the whole pipeline What if there's a bug in the verification or since it's a stool chain easy crypt and easy crypt is a big computer trust the computer base that you're sorry trust the code base that you're trusting fair enough But easy crypt has been around for ten years a lot of people are using it Eventually, I think bugs will be discovered and if you really want to go there You can the same way you in a programming language You design a new programming language or the first ones you bootstrap a compiler You can do the same thing like I can imagine a verified Interactive theorem prover like easy crypt that is you start with a very small kernel that you have enough confidence in it manually and you bootstrap things and that's how people did things was compilers And what if the use tool I've had that discussion actually I just added this today because I had in the discussion in the morning What if I spend if I'm a student I spend six months nine months learning easy crypt and that goes away after two years I mean first of all I am not involved at all in easy crypt I am not I have zero interest in easy crypt But I think they did a great job and it has matured a lot over the last ten years I think anybody if you told anybody ten years ago, I'm gonna verify something like bgw for active adversaries with a computer They probably would have dismissed it. We've done it Okay There's no reason not to take this approach moving forward Because if things get more complicated and more automated We need we need that level of rigor. It takes time. Yes, but it's worth it and also if In my experience same thing was programming languages The first one you learn will take you longer But then once you've learned it the second and the third one will be much much quicker if you learn one of the Theorem Provers and sort of use it as an extra verification step in your work If if for some reason you need to switch to another one It's not gonna be that much time to learn and pick up the other one and if you're a student that's starting and expecting to have a 30 40 year career in design in as a cryptographer. I think it's worth it because You might not use it on every paper, but every once in a while you need that Anyway, I'll leave you hopefully with these conclusions that one computer aided verification and automated verified synthesis of software for cryptographic protocols complex ones is achievable today And I think they go hand-in-hand. I mean verification by itself is important but if you've done 85% of the work, why don't you just do that extra part and it's reasonably low performance now to Given that it's automatically synthesized code and that is you have a much higher degree of confidence in its correctness And there's a lot more research to be done And yeah, was that I'm happy to take any questions. I hope I hope that this is something expose you to something new today Couple quick things I might have misunderstood but I think maybe on slide 49 or 50 did something about There's no formally verified field arithmetic implementations I didn't say I said we didn't use one. Oh, I see I see I didn't say there's Because certainly there's a bunch of sure. No, I said in our work with no, no, okay. I know there is it's just No, I was just trying to okay. Yeah, the actual question I have is this In a lot of these it seems like I've been following this work and related work because it's extremely interesting It seems like there's on the one hand getting correct by construction software is excellent on the other hand like one of the reasons When we implement something in C for example, one of the reasons that we do that is not just because we want it to be fast but because in some sense like Maybe the compiler gets out of the way a little more than the OCaml compiler does which I mean kind of sounds like a joke because of course you always fight the C compiler when you try to write code in it, but specifically If I'm trying to write constant timecode I have basically no prayer as far as I can tell of doing that in OCaml I could probably get that done or at least you know if I know what compiler I'm targeting I could probably get that done in C. So it seems like maybe there's a little gap right between on the one hand correct software But it's in OCaml and on the other hand what I maybe want is really like Software in C that's constant time and maybe I can examine the you know internet the IR or the assembly afterwards How do you see how how will we close that gap fair enough? Are you worried because of leakage resilience and I'm constant time? for example, yes, I Think if you want to do that, I don't think easy crypt in its current format has to do that I think you would need to move to something like cock or Isabel and I'm not very familiar with that that area of research Some of my colleagues actually have been working on a sort of these constant time implementations I Don't have an answer. I haven't looked at it. I don't think there is We're required a lot of work. It would require probably like I can imagine it as I said if you move to pvs Which is very close to IML you can extract C from it and pvs is based on higher order It's very generic. You can start reasoning about these constant time. It's just nobody has done it yet Okay, I'll tell you what we did honestly we did OCaml because at some point it was just two of us It's a lot of work and this is excellent. It's great. It's just like of course as you said there's there's tons more work to do And I'm worried about one thing. I'm sure everyone else is worried about, you know, ten other things But yeah, so this is a good answer. I really appreciate it. Thank you. Thank you It's more common on the question does now so I mean you mentioned ever crypt I mean one of their motivations is to get Software down all the way down. There's a team in Taiwan very fine the assembly level So there is other works in high assurance cryptographic engineering It just has to interface some question to you You mentioned a whole bunch of Shamir things and I see like sharing and re-sharing and well reconstruction But is your protocol taking into account that you don't actually have to reconstruct it? I mean, do you have for instance a Diffie-Hallman where you never? Reconstruct the share, but you just apply it using the shares I'm sorry. So I mean like when you when you do secret sharing and you want to run Diffie-Hallman Okay, you don't have to recover the secret.  I mean we're composing these I Mean you can just share and just up Are you asking? I mean, but I mean do you have the functionality to do Diffie-Hallman? Without ever reconstructing we don't we haven't implemented anything in the film I think other people implemented the because I mean that's that's what would really interest me because I mean once you Have recovered the share. It's gone. I mean if if you're a malicious Member gets this in the combined share or you assume that the combination takes place somewhere else I mean in your model are you assuming where we're doing NPC So we're take everyone would be would share their inputs and you're computing a circuit as additions or multiplications You can leave the the result secret shared without reconstructing So you can leave it without reconstructing. I mean so when you say reconstruct you reconstructing the result of the computation Yes, you're not saying you reconstructing the shami a secret. No, no, no, no, no, no, no, yes Reconstructing the result of the computation. Okay, yeah, and then I'm happy