With Chief Petty Officer selection boards just around the corner, sailors are reminded to ensure their official military personnel file, or OMPF, is current and accurate. Force Master Chief John Porte discusses the information found at an OMPF. Your education level is right across the top. It shows me your surface warfare, air warfare, naval air crewmen, whatever your qualifications are. It shows me your NECs, shows me your awards. So right from there I have a snapshot of the person that I'm getting ready to look at. At that point, the selection board then goes on and begins to review all the documentation that supports that cover sheet. Sailors can review their OMPF online by visiting bol.navy.mil and selecting the OMPF My Record link under the application menu. Candidates may submit any missing, new or additional information to be considered via letter to the board. These letters must be received by Navy Personnel Command Customer Service Center by April 22 for full-time support and May 28 for the active component board. So from the service members' perspective, I need to know that the paper's right because they're not going to see me. They don't see a picture. They don't have a member of my command speaking on my behalf. All they have is paper. That service record is you in front of the selection board. The full-time support E7 selection board is scheduled to convene May 13 and the active component selection board is scheduled to convene June 17. The active component chief petty officer board is the largest selection board conducted in the Navy and typically lasts four weeks. For more information, see navadmin294-12 at npc.navy.mil. From the DefenseMedia Activity, I'm petty officer Amara Timberlake.


Hello everyone. Before we start, I want to ask you, this is above, so the idea is that you will have to speak. Please, when you have to speak, raise your hand, we will give you a microphone, look at the camera and then start speaking. Well, now I would like to present to Paul Weiss. He will present us bits from new maintainers and users. Paul? Okay. Firstly, I'm a little bit unprepared, so yeah. The full results will be released on Daven Development announced when they're done. Some of the issues that users and new contributors have brought up have been addressed since the surveys were sent out and responses gathered. So, what basically I'll be talking about, what I did, the user survey results, the new maintainer survey results, whether I'm going to do it in the future and then we'll open up for discussion. So, basically I did two freeform surveys, one of Debian users and another of Debian new contributors, the new maintainers, application managers, people doing sponsoring, people having their packages sponsored. The survey was specifically freeform, so people could answer however they felt, but I did mention a list of questions that people might like to respond with answers to. How many of you saw the surveys? Few. Okay. I specifically asked people if they wanted their comments published and or if they wanted them attributed to them. A lot of them said they prefer them to be anonymous, but said that was fine to publish them. The user survey was advertised on Debian user on forums.debian.net and also on IRC a few times. The new contributors survey was advertised on Debian mentors, new mate and IRC. Both of them were also advertised on Linux Weekly News. Had a couple of contributors advertising at them on language specific user lists. That was the user one. Okay. So basically what I did is I sent out surveys and sent out reminders occasionally. I replied to the males in batches as they came in, clarifying things, informing people of in-progress solutions to the issues that they found, counted some misconceptions. The analysis of the results was done during debcamp and debconf, which is why I'm a little bit unprepared. So basically what I did is reread all the emails, form sections based on the common answers, filled them with summaries of what people have said about the sections and some statistics as well. So the reason I did the survey was to connect personally with users, connect developers to the wider user community, to gather information about how Debian is used and the variety of locations and things that is done with it, to gather information about how our users contribute to Debian, to gather suggestions and concerns from users, to inform the user base of things happening within the development community and to encourage, most importantly, to encourage users to become more closely involved in Debian. Because of the volume of the results, the user survey results are a fair bit longer. And finally, thanks to Kibbe, Micah and Barry DeFries for helping with the wording of the initial surveys. Now I'll go on to the results of the user survey. So we had about 216 emails. Some of those were mine and most of them were from people responding. Had two translators and overall 98 people responded. So it's not a huge sample size but that's what you get. So most of the people were happy with Debian. Some of them didn't mention this or I wasn't able to infer whether they were happy with Debian from their answer. And there were a few hostile users. Okay, so start off with some locations where Debian is used. So we've got Bird Island on near South Georgia in the South Atlantic near Antarctica on a research station. Another one that was mentioned was Las Tarinas in the Dominican Republic. That's a net cafe. There are a few home users in Sao Paulo, Brazil, Santiago, Chile, Hamilton in Canada. And then there are some university users in near Madrid, in Spain, in Australia and in Estonia. And there's a software company in Italy that's using Debian and the president of a lug in Cape Town, South Africa mentioned using Debian. So some of the projects that these users wanted to advertise tell us about. Firstly, the one terabyte disk-grade machine that backs up 70 notebooks of a company's executives. The next one's the Antarctic Research Station. That was the one that I found most interesting myself. You can get a link off me afterwards and read the email. Another one was a luggers developing a Debian-based robot. Sounds pretty interesting. There's another one, T-Cos is a thin client generation system like LTSP and similar things. Another one was there's a cluster for computer-based ecological monitoring at the City of Newcastle in Australia. There's another cluster. 5,000 CPU cores, one petabyte worth of storage that is used for the search for gravitational waves physics research. Another one that was the Debian blog DebianCuba.cu and a bioinformatics software company wanted to mention the Plone 4 Bio project. So what kind of users is Debian supporting? So three users mentioned that we're supporting their software development. Two were general scientific research. Two were chemistry research. One was talking about computing research. Another home user was doing genealogy research with Debian. Specifically mentioned the GeneWeb package. There was the physics cluster. There was a geoinformatics guy. There were two bioinformatics users. One NecFA, two music studios. Three users mentioned using it in an educational setting. There was one journalist. There was one NGO in Brazil and of the males that I analyzed there were 17 mentioning using Debian in employment or business. So some of the examples of install types. Three embedded, 11 laptops, 28, I mean 11 people mentioned installing on laptops, 28 on desktops, nine workstations, 21 servers, four clusters. These were for ecological monitoring, modeling, the physics research cluster, and computational chemistry cluster and bioinformatics. There was one classroom mentioned running Debian, one data center and one house. The house was controlled with Debian. So what architectures do our users mention? Most of them didn't mention any architecture. Five mentioned i3, d6, four AMD64, one PowerPC and one Spark. Most people are using Edge. A few people specifically mentioned using CID or Leni. There's one old Woody server and a couple of Sarge machines. Most users didn't mention Popcon. One guy didn't know about it and isn't going to install it. Three didn't have it installed and might install it in the future. A couple of them don't have it installed because they don't like reporting information to external organizations. And nine people had it installed. So what do people like about Debian? So at deep package aptitude, a lot of people like the installer, especially the net installer. One person mentioned that Debian was a romantic. They like that it's non-commercial and not corporate. They like the sysadmin tools. They like the community and the support, the IC lists, forums, documentation. One user specifically mentioned they love man pages. People like the philosophy behind Debian. They like our stability, reliability and the quality. Some people like the constantly rolling aspect of testing. People like the arch support. People like that it's the original project. People like that it's an international project. They like the large variety of software. They like that it's officially supported by HP. They like the Debian logo branding. They like our sane attitudes. They like our decision making processes. They like our strict policies. They like the security support for stable. They like software redundancy that you can get several different programs that do the same thing. They like our long release cycles. They also don't like our long release cycles. They like FAI. Some things that people specifically dislike or issues they identified. The daylight saving switches apparently seem to cause a struggle. Flame wars. Some people said it was hard to contribute. Some people said it wasn't easy to find out how to contribute. Some people don't like that we have to comply with software patent stuff. Some people said the BTS was frustrating for new users. As we heard earlier that the Debian webpage needs a visual refresh. Some people don't like the slow releases. Some people mentioned our arguments with upstreams as something they don't like. Another person mentioned they don't like us removing offensive packages like hot babe and similar ones. They don't like that bugs take a long time to deal with to be dealt with. They don't like that because Debian is so large that it's hard to find information about what you're looking for because there is so much of it. They don't like a relative lack of marketing. They don't like that sometimes orphan packages don't get picked up. They don't like irresponsible maintainers going MIA. They don't like over integration. Like being able to remove one piece of software from KDE for example. They don't like the inconsistency in packaging tools like for example Python support and Python central but two tools doing the same thing. And some don't like that it's hard to configure Debian for older machines with less resources. So some wish lists. Revive DWN which has been done pretty much. Keep on going. Don't be adversely affected by Ubuntu. Have a more often updated stable release. Ice Weasel 3 done. More desktop polish. Different release cycles for server and desktop. Better how tos for creating packages. PDF editor. Clone for total commander. Backports. Support for specific enterprise hardware like LSI cards. One guy mentioned they need a basic replacement for a basic sound editor for like Cool Edit or Sound Forge. Some people wanted a better minimal Debian. One guy wanted sysv in it. They want better VM support. And some people want world peace. Some people want to remove the need for a local MTA. Users want backports to be more official. I'm not sure how maybe merge them into FTP master or something somehow. They want the etch-and-a-half project to become more to happen for every release. And they want us to support old stable until stable becomes old stable. So Sarge into Lenny. They want us to be able to skip from Sarge to Lenny. That sort of thing. So what are you what are the respondents used from outside Debian? Debian multimedia.org for all those patented codecs. Cinderella. DVD rip. TT which is a command line time tracker written in Perl. Flock which is a web browser. The Apache Condor project. Plane 3 isn't available in etch. So they were using it from outside Debian. Mod Security which is going to be back in Debian soon I think. Zed which is a text editor that was removed back in the Sarge days I think because it was abandoned upstream. Webmin. Probably shouldn't be using that. AVI Demux and Transcode. Okay. So most people didn't mention DebConf at all. Or one guys is coming to DebConf who's an Argentinian. Francisco Albani if you're here. You're here. Okay. And one guy was friends with several Debian UK developers and supplies them with beer often. So how long have people been using Debian? Okay. 99, 2000 since Potato using SID since 2003. Since Slink was released. Since Potato was released for about a year since Sarge. Since the days of seven Floppy's Netinst which was way before my time. Five years, two years, ten years. Since 1998. Since 2002. Most users didn't mention any contributions to Debian but some did and they contribute documentation. They sell services built with Debian. They run Debian mirrors. They promote Debian. They send patches to Debian. They file bugs. They participate in the forums. They buy CDs from Debian developers. They donate to money. Money to Debian. They donate to upstreams. They use a free software friendly ISP. They wear Debian t-shirts and they serve tea to their guests in Debian mugs. So some barriers to contribution for our users. One guy specifically mentioned that we need an analysis and appraisal of what it takes to become a DD in terms of time. That it's not easy to find out how to help. One guy wanted better mentorship to being a DD. Perhaps something before the NM stage and wanted the process to be shorter. So what does Debian mean to people? Quality software by the people for the people. The best destroyer around. Stability. It just rocks. I love Debian. Okay some quotes. Never sell out to the blue meanies. Speaking of working, I'd better do some. I'm not sure if I've had enough coffee to write properly yet. Wearing Debian feels macho and geeky without getting too slacky. Freedom from the shackles of the Microsoft monster has never been so sweet. Okay now the NM survey had about 31 emails. 26 people responded. Most of them were NMs. A few less people just before the NM stage were a few DMs. There was one recent Debian developer and a couple of application managers. One of the NMs had abandoned the process after one year of waiting for an application manager. Several of them are now DDs. Some of the locations mentioned were Tokyo, Austria, Thailand. Some of the issues they mentioned. Firstly most of these have actually been solved or are in the process of being solved with the new additions to dam and front desk. Okay one guy mentioned that the NM process for non-packages packages isn't as clear as it is for the majority of applicants. A common issue was the lack of time on the part of the new maintainer. One guy mentioned that Debian at least ISC isn't a very welcoming place. A common problem is that Debian developers are just often too busy and there are not enough of them. So it's hard to find a sponsor. Some people found the process really slow especially at the dam stage and there wasn't any feedback during that time. It appeared to me that NMs are generally undervaluing themselves and some of them are not being proactive about the NM process chasing down the application manager when they haven't replied for a month and that sort of thing. Some people said NM was too bureaucratic. Some people found that sponsors aren't up to the task of reviewing specialized packages so they tend to get dropped on the floor. People worried about the size of the dam queue quite a bit. Apparently AMs occasionally disappear. Some people said it was hard to know how long NM will take. A couple of reasons for not joining NM were that at this stage they felt their contributions through sponsorship were the best way to contribute. One guy said he was waiting until he felt ready for it. Some general comments. NM is a big learning process for most people and they found it really helpful. People like being sponsored because they know their work is reviewed and therefore what gets into Debin is actually good. Some people applied too early. Some people were overjoyed at reading their NM report being posted. Some people don't need the new DM process because they've got responsive sponsors and they are in packages teams like Debin Perl and Debin Games. There is a level of pride in being part of Debin and having a Debin account. Some people said that Debin DM wasn't so useful to them because the low number of non-commented packages that are uploaded only once or twice. One person said that not all teams are good places to work. One sponsor said that there are many more uploads to sponsor than time and it's hard to prioritise them so they prioritise by whether they know the person needing sponsoring. One person said that the DM feels like a workaround but still liked it. One of the AMs said that philosophy and procedures checks are a little bit lightweight. I got the impression that the NM quality varies quite a bit between applicant. The AMs both learnt from the process too. Apparently the impact of DM on Debin is as yet unknown. Personally I think that's correct. Ungo mentioned that 70% of his NM process was waiting. Apparently the front desk is quick though and during this waiting the motivation is generally minimised by good sponsors and support from people around them. Some teams, people involved in the games team, the Debin med team, Pearl team, some goals that people had to do GNOME 1 porting and removal. Improved Debin with respect to bioinformatics, packaging squirrel mail plugins, regularly fixed RC bugs, take care of their packages well, help out with sites and math packages, getting NetConf released, working on the herd, joining a core team like Security or the Colonel. Some general wishlist suggestions. Improved the NM bus factor. I think this has improved since survey. Added lots of practical things to the process. What kind of involvement these people have in Debin, they participate in bug squashing parties in packaging teams, moving stuff to main like Alpine, adopting orphan packages, defining policy and tool change for smaller subsystems in areas like the D-language or Yorick, to reintroduce removed packages. So some of the motivations that people have for contributed Debin, so they use Debin and they feel the need to give back to the committee. One guy said that packaging stuff can be addictive. Some people, one guy actually likes to read flame wars and he also wanted to see how a project can work without continuity leadership. So the future of the survey, obviously I'll be posting the final summaries to Debin develop announce and I'm not sure whether I'll do it again. Maybe and if more people are interested in helping then I probably would. After that, after next year I don't think I'll do it again. It's a lot of reading and I'll probably hand it off to the press team or maybe the DPL would like to take it up. Okay and now I'll open it up for discussion. Any questions, comments, anyone? I'm not sure if the Debin team knows this but over the past year the Cacha Federal Bank in Brazil that runs the lottery system is using Debin and over 17,000 lottery machines and to run their lottery system. By bringing to the development in-house instead of using a proprietary out-of-house system vendor they were able to reduce the time of inventing a new lottery game from 10 months to three weeks.  You can talk about anything you want to about using the lotteries and stuff like that but it also helps to fund their social security system and their educational branch. Okay. But you know this is one of the things where I tell people that it's not necessarily the price of the software that makes good software. It's what you can do with it and it's what the value of the software is and the value of that particular software to Cacha Federal was multiple hundreds of millions of dollars. Of course it'd be nice if they contributed that to Debin. Thanks for that. It was very interesting. I mostly agree about the comments you made about the user and the enemy server. This all sounds very true. As if you could you say that anything has happened since the survey that people might have noticed there was something wrong they could immediately or easily fix and that is on the way now or what has already happened? I mentioned each and a half quite a bit. I mentioned the possibility of constantly usable testing and the releasing testing and I mentioned the I think I mentioned the additions to front desk and dam once or twice. Can't really think of anything else at the moment. Well I was thinking of the other way around points raised by users that we could maybe easily fix now not something that was ongoing and appreciated by users. To remind myself of what I talked about there aren't really any that are easy or any that I can think of that are easy how to to fix them. What was this NM bus factor thing you were talking about? That sounded interesting. Interesting it was basically that at the time there was only one person processing accounts and I think that was Elmo at the time that the survey was carried out. It was about the process not about people feeling like being proud of being in NM so that's that would be another bus factor. Was it about that people would feel proud about the bus factor of being in NM or there was the other way around of people doing the process from the back end. Just looking at the current NM figures it actually looks like there's only about four people waiting for dam and the huge stopping point at the moment is getting an AM assigned. So that's actually something that developers can do. You can sign up you can be in AM. You can help work out that backlog that's not relying on one person. There are templates available and I did it in the past and I'm thinking I should probably start again given that's where the problem is. So if you're worried about getting new people in you can make a difference. Definitely. Myself. Okay. I don't know if this is correct for this is a special talk but you were saying what people like and what people don't like about Debian and now this is a particular case in my Linux user group down in Bayer Blanca. Since the beginning of Ubuntu and Kubuntu people started to say okay I can get a special cd and install genome and a special cd and install kd and when I said okay why don't you try Debian just because I love Debian. They told me oh no because if I choose just the desktop they will install me both of them and I don't want both of them. So I said okay go to the console. No why should I have to go to the console. That's that's one that particular thing is why most of them ended up in Ubuntu or in Kubuntu. I just wanted to share it. I don't know if it is the proper place but well since you are all here I guess it's a good time to say it. I am not true but I think the installer installs known by default so you don't get kd long. I have no idea I am always installing using Deep Bootstrap. In fact for your users to install Debian you have three first cds each of which has a different desktop environment. So you can install have one cd for installing genome one cd for installing kd one cd for installing xfsc or you can just scrap it all and do it by yourself. Okay so why doesn't that is being published bearing with green and flashing lights in the main web page. I guess it should be the the way hey start here. Perhaps that's not the idea. But that's the contents of the first cd but do they actually get during installation a screen that lets them choose. I want to restore genome. So they don't see that choice. I'm really not into desktop so I have seen that. I mean you were asking me so I am answering but I mean if you just want to get the Debian default install that it will be known and forget about it. If you want to install a Debian system which has by default a different desktop then it's also there. You get the proper cd to do the installation you want and it's not widely advertised because well well I think I am not into any of those teams that if you if users don't have to do to take a choice it's bothersome to present it to them so just install the default. If users are looking more into I don't like genome okay they can go and search for something else that's it. Wouldn't it be possible to make the choice if you choose desktop environment that there's another question which asks you I want to use GNOME I want to use KDE or something like that and just leave the default to GNOME. Is this a GNOME versus KDE flame war session or is this a talk about the new maintainer process and survey of users? So we had in one of the earlier talks today we were talking it was actually in our DPL's session this morning and the discussion afterwards we're talking about the fact that part of what makes this whole thing work is for each of you who are involved in the project in some way to feel empowered to do something and so if there is something that bothers you about the way the current installation process works or the choices that are available go investigate it and propose a specific change preferably in the form of a source code patch to something along the way that that will carry a whole lot more weight than saying hey you know couldn't we do this couldn't we do that the answer is well yes we could do many different things but the people who are currently working on it are either satisfied with the way it is now or they have some plans that they will work on when they get to it if you don't like it then do something about it that's how this project works. Yeah on this particular from in fact in the in lieu of anybody else with any other points I believe that the where we've got to today is we want to minimize the number of questions that people have asked you on the install so people given the default either CD number one or DVD number one will get known by default just because we need to make a choice it's not necessarily the choice that we you know that we decide we like know more than KDE we just we have to make a choice the there is support already on the on the first dvd for whichever desktop you want you can specify it but it's done by a boot command line there is still plenty of scope for discussion as Bdell said discussion and or changes if people would like the behavior to change anybody else okay moving on to something else um how many people here are AMs hands up and how many of those have actually active and have have been through an M with with new maintainers in the last 12 months cool okay thank you very much to those people please can we give them a round of applause it's it's one of the best things that people can do to get new people into dabion and if anybody else is interested please really sign up it is one of the places where we've got huge amounts of work to do and not enough people and it's a really high-profile job it's a place where you can get to interact with some really enthusiastic fresh people who want to do everything they can the longer we leave people stuck in this queue this is where they lose their motivation and their enthusiasm the more we can we can pick them and steal that enthusiasm the better i'd just like to add that it's also a very interesting way to learn about interesting things in the project because you get into contact with people who are actually doing other things than you are in a very interesting way you get to learn things that you even didn't know existed before and it's a very very nice way to learn the project as a debion developer thank you yeah sorry yeah um on nm stuff firstly one thing is that lots of people do complain about the length of time they're in nm but for a big percentage of those they've also introduced big delays into the system themselves i mean as an am you it's not a tall rare to have three months six months a year go by before the applicant actually gets around to answering some questions and obviously you can hassle them but it's that's up to them if they don't want to do it um the same applicants though well kind of justifiably but would kind of justifiably feel annoyed if you then take six months to get back to them whether they question whether that answers right or not and as as the applicant obviously you want the you want to get a response back quickly but equally there is some give and take there i mean um and the other another thing is that although a lot of applicants in principle would like to have a more hands-on active process of trying out like building new packages and so on rather than answering boring questions that when people have tried this or at least if people try this as a kind of exercise rather than just working on the packages already working on it to ends up generally taking more time and can actually be quite frustrating to work on some some package you're not really interested in or to build artificially some package that's not really going to be used um whereas i mean if if you actually already know the Debian system even though answering the question is maybe a waste of time if you actually have been working on packaging already probably it won't actually take you very long the people who it takes a long time for the ones you haven't who don't actually have the knowledge yet that they will need in the end anyway so you were talking about that's loud you were talking about these delays between uh between caused by the applicants so by the way i'm in nm and my am is he uh mark if he's here great yeah well no he's been fine he has been fine um but anyway you were talking about these delays and it's sometimes he sometimes is the applicant sometimes it's the am's are there any data on the on the latencies like are we recording these roundtrip times effectively yes uh anybody who wants who i guess has access to the maintainer uh mailboxes can tell it's pretty obvious especially because what usually happens is there's an inactive and the main am sends pings or vice versa i mean i've been in both cases depending on what i'm doing so that's usually how you can tell if you really care another thing that you can look at is the last status um it's the last status has the fact that the am has pinged then then you know too what's going on uh so uh so i've been trading mails with mark for the past six months or something um it's when you say the if the last status of the am is pinged is that recorded in the nm cgi's or uh and i guess i what i'm really interested in would be if actually these mails were logged and we could just like see you know over the past 20 nm applicants what even just the date headers were logged date and from just to get those roundtrip times to get a sense of who's who's delaying and how much on which side you'd put them on a web page and unamized or maybe not and then say oh this is you know clearly am's need to this am needs to improve his job or yeah problem though too is the ams i mean ams are often overworked because they're usually the people who we basically take on as many people as we can possibly handle because we know that there's always people waiting um so you can't really use the data to recriminate the am because but the most important thing is to try to identify ams who are not keeping up but as far as the last status thing anytime an am touches any field well actually anybody touches any field in the database it automatically updates when it was last touch and a classic thing most ams try to anyway anytime the senate has been a while back and forth they'll update the little comment field which coincidentally updates the status field so if that's happened then you know that it's not the am that's causing the delay i'd like also to add that um well figuring out which ams are inactive is from the job it's our job so if um if there's something going on and your am isn't replying just mail from this that's what we're for um i mean every am is a person people can get busy can have a problem that's not a serious issue as long as we deal with it and um getting data and putting that online somewhere and somehow incriminating these people isn't really a good thing to do right i can i can appreciate not wanting to incriminate people um i guess even if and i totally understand that everyone's busy including me which is why right now i haven't replied in a month um since i'm here or something but um anyway so but even if you totally anonymize the data and just say for these for this pair of am anonymous am comma nm um if you could show dds hey look the average round trip time between these males is three months uh across the board wouldn't maybe that would encourage more than used to be ams okay i don't think so it seems that there are now much more effective ways for people to participate kind of before they get all the way through nm with sponsorship and team formation and so on is there is there been any kind of study on how that's changed people's willingness to participate willingness to engage just the dynamic of all of this um well most users didn't mention any of that sort of stuff the few nms that that did said that they're um they really enjoyed working in teams because of the support from their fellow developers um yeah there wasn't much information in the in the responses because there were so few about teams seems seems like a seems like a really positive positive thing to keep people engaged i wonder if there's any indication that it's sort of raising people's motivational levels to stay engaged through the through the nm process i can report anecdotally that certainly in a couple of instances i know it has encouraged people to apply to go through the maintainership process which they have seen around them being applied quite quickly and and that everything seems to be moving so yeah i i think that it has made a change having the alternative approaches i think nowadays most people are getting their motivation from being part of some packaging or other team so there's really quite some people who are active in some team and then eventually will apply for nm and then have enough experience to be able to go through and have proven to be enthusiastic about it yeah what i also found from the team survey that i did um admittedly this is completely out of total i've not done thorough analysis of this um but the larger teams with a good number of nms involved as well as the dds those um those nms were all seeming to get through the nm process that much faster um you know they've got ready sponsors around to prepare to upload the work for them they've already got a very good view of how you know day to day debbie and packaging is going without necessarily having to work it all out for themselves from scratch they've got you know a large amount of support around it's probably it well there's no probably about it for me it's clearly the best way for people to get into debbie in these days um to go with the fact of course that you know um the teams are clearly the you know the new way that most of our packaging is being done um everybody wins okay uh we're running out of time so let's cut it short if you would like to read some of the stuff that i've written in the survey results and um ask me any questions see me afterwards and uh thanks for everyone who sent me an email


This study investigated the effects of waterlogging at different growth stages on the photosynthesis enzyme activity, chlorophyll content, malandialdehyde, MDA, content, photosynthetic parameters, dry matter accumulation, and grain yield of two sorghum hybrid varieties, genuoliang-01, Jn-01, and genes R31, Jz-31. The study found that waterlogging had a negative effect on sorghum growth, with the greatest damage occurring when plants were waterlogged during their early developmental stages. This suggests that it is important to select appropriate genotypes and implement proper management strategies to reduce the risk of waterlogging-induced crop losses. This article was authored by Rui Deng Zhong, Zhong Xiaoyu, Xiaofei Chen, and others.


Hello, hello everyone. So I have not much time because I have a really big number of slides So I will go really fast about me. I'm Emmanuel most of the time. I'm writing I'm in a company writing a software called Pasek which has absolutely nothing to do with the company doing gaming We choose the name at the same time. So yeah, that's kind of thing happen. Anyway So if you're interesting in really secure open source software with end-to-end encryption You should check a look. It's in Python. All the source code is there. It's funny Anyway, I'm going to talk to you about something totally unrelated Which is voting. So I'm not an expert in voting in any way, but I talk a lot with researchers And so basically what I understood is when you're using when you're talking about voting system There is multiple property that you have to evaluate For instance, the most common one is the ballot secrecy So you're voting of course your vote must be secret, but there is other things for instance You should not be able to To prove that you voted for somebody because otherwise you could go and ask for and get money From someone else because you voted for the right guy or maybe you could get your leg broken because you voted for the wrong guy Something else is what they call auditability. So basically you need to be able to do The ballot counting and the ballot counting it's better if there is a lot of different party involved for doing the ballot counting All this kind of thing and anyway online voting is I mean the funny thing is all those property. They are not perfect when you do physical voting But it's kind of work. There is issue, but it's okay with online voting. It makes things really really really complicated Basically because here we can see there is a like a little Billy He's a kid and he understands what he's doing just by voting But he put a physical proof of what he want what he wants to vote inside this ballot box But on the other hand there is a server for online voting and nobody has any idea what's going on And at the end of the election you have absolutely no physical proof of what happened So if somebody is not happy with the election, it's pretty hard to tell what you should do Anyway, so in France we have something which is called the Kneel, which is a National Commission of Informatics. I mean it's the translation in Wikipedia. I don't think it's right but anyway, so basically it's the people who deal with with sorry data privacy and So there really is this thing if you're not French speaker This is a really long title, but basically it is some recommendation for online voting so what you should if you want to make a online voting what you should or should not do and Basically what they say is they are not really I don't say it's it's the best idea to do to the online voting for political election and The most important part of this thing. It's it's only a recommendation So basically the Kneel say yeah, you should do that, but if you don't do that, there is no legal implication So basically it means that if you want to make online voting in France there is for what I understand there is no Legal obligation of anything you can just develop your software and it's okay So now we are going to talk about a company which is called Neovot This call is be this company is basically the main actor in in France for online voting So they I guess they got a lot of clients with COVID-19 because plenty of people now want to vote online they work for the university plenty of company, etc and Yeah, sorry there They have Used the software has been used for the political election for the primary party election So that's when I start knowing them So if we talk about the solution the software The main issue with the software is it's a total black box. So there is no documentation or white paper nothing What you see here is basically the only thing on the website which talk A bit about what they do, but it's the only thing you have so it's very few of course you cannot see the source code And as I said, yeah, there is a multiple primary party who hold some primary election and So all those election we are done with Neovot on the internet Yeah, so spoiler alert I voted for the green party and so I got interested in the thing and so I started the The software how it works, etc And so I wanted to write an article I talk about all my finding to Neovot as I consider it wasn't a real finding and Yeah, I just was nagging about the thing that I didn't find anything interesting So anyway, I met in Cablancha, which is a French researcher she works at CNRS and so together with Dora and Juliet we wrote a paper that got a raise last month in in conference in France and so Neovot Don't seem to be really happy about it because they try to to console the talk at the conference with legal action So that didn't work, but yeah Anyway, so I have to to be faster because otherwise you won't see the fun part So I voted for I said for the primary for the green party. So basically how it works you You go on the website You you do some stuff like you choose a password then you go on the website for voting and You use your cell phone with pink code for vote, etc I won't go any detail if you were more interested in these things There is another talk another paper. Sorry about that. It's in French if you don't read French, sorry So at the end of the voting you have this thing which so it says on the last screen which said, oh, you voted So we have a really white screen. So when I took the screenshot, yeah, that's it And so if you don't see there is this weird thing at the middle, which is a bit red orange Which they call Proof of vote and so they said okay, you voted and now there is this proof of vote Keep it it's personal if you want to check that your vote have been Really easy inside the box. Everything is right. You should use that. So okay, but There was not much information about that So I asked me about how it works and they told me that you have to wait for the end of the election And then you will have the stuff so I went for the end of the election and then here's the result screen from the end of the election and You see there is this so they give you a website and they say, okay You can verify your your vote going to this website and using this password So the website is here. So it's a different website On the website you put the address of the server you voted on You put the password you push your proof of vote and after that you you hit validate and it crashed Sorry, so yeah, it crashed and in fact it time out and so you have to retry and then retry and then retry and after some time It finally works and so here you have the things so they say everything is fine The green box is a thing. Yeah, your proof of vote proof of vote is working And if you see the result, it's the same that on Wikipedia. It's the official one. So, okay everything fine Yeah, there is one thing funny that I saw when I did that is there is this link for the source code so I click it I got a PHP script which is a source code and So it's really great because it means that you can run the source code the PHP script on your own computer You don't have to trust the website for doing the check. So yeah, good So here is an example. I'm sorry on the code is copyrighted I guess so I cannot show everything but I can show the little extract as a script is like four thousand five hundred lines And so here is the for instance the code for the Error handling for the error we saw So we have the ballot counting the bad counting take a lot of time because there is encryption etc. Whatever So we have this written code is your written code is 98 then you store the stuff on the cache And then you have this written code which is one and your point which in 40 plus written code divided by 1,000 but if your case is 2 3 5 and 6 but not for then your code is 6 your point 28 plus written code Delayed by 1000 and you have a break to which is a piece pre-intriction to say you have to go outside of two loops Okay fine enough so now What does this script do so it go it goes on the website it download two archives It decrypt just archive with the password and then you check your bad But your proof of vote and it comes about okay, so first thing we are going to see is This proof of vote what is made of so here is typically the proof of vote It's a base 64 of something which is encrypted with a yes So symmetric encryption Yeah, that's secretive encryption with hard-coded key. So the key is inside the script I Asked a new vote about that and they say it's fine. There is no security issue because it's not for security. It's for padding So let's talk about padding because you know a yes.  What do you do you do padding? So in Aes there is this thing which is to call pkcs 7 which do the padding so the question is Why not using pkcs 7 instead of using just a yes for doing the padding? It would be much more efficient and they won't look suspicious as the sewing an article it key and anyway, what for because The proof of vote why it should have to be at this site We don't know because there is no documentation and sorry anyway all the data for all the generated the And proof of vote are all the same side. So Get again anyway So what's inside of this proof of vote? It's five shower 512 ashes So each one of them are for one vote. So there is like five votes in this proof of vote So why is it so what is it for that? It's because The idea is what I told you before When you got one proof of vote, you shouldn't be able to show for who you voted for So there is your vote inside the proof of vote and for all the votes So you should not be able to say for who you voted for You know the funny thing is of course, there is no crypto signature, which mean we can We can do funny stuff going to see so anyway the format just really fast as you see on the We have my cursor. Yeah here you have All the the shower ashes you have some random parts the header and so the idea is they do CRC so ridden and see control so they do a checksum and so for doing this checksum they use this this variable this constant which is called paper and the funny thing is they concatenate it and It's PHP. So maybe you don't see but this is a string but this is bytes in fact and so this looks like Exile a single String but it's used directly here as bytes. So that concatenate bytes which only contain exactly a small character It's a bit weird, but I think there's forget something here Anyway, so you have your redundancy control you concatenate with the rest of the thing you do as you a yes And you got your proof of vote. So it's really simple.  So here is mine because it's a Python conference. So you should see some Python So here you see I just generated a random shower 512 screw ashes And so if you do this you go on the website and it doesn't work. I mean Neovot's website says your proof of vote is wrong. So so far so good I mean, maybe we don't go really far with this but in fact we do Because what we are doing here is we are provided a fake proof of vote and we are checking it against the genuine ballot box But Neovot has no way to know if it's not the other way around maybe we have a genuine a real proof of vote and the ballot box has been tampered and On the two sides, it's always the same check that is done and there is no way to know which one is which So what does it mean is anyone can generate? proof of vote and claim that his proof of vote doesn't check with the ballot box and hence the election was rigged and The other funny thing is anyone with a valid proof of vote who sees an organizer saying oh my proof of vote doesn't work Something is fishy The organizer can tell them you're the one who generate a fake proof of vote You fake news anyway So now for a real case studies Green Party election. There was the person who arrived last he really couldn't believe it So he said this is not right the election might have been rigged and so he went into justice for for this and Yeah, nothing could be proved. So yeah, I just just lost this thing the funny thing is so there is this quote from a Researcher which is called a Chantal anger Which is specialized in electronic voting and So the idea is the electronic voting industry Basically what they say is electronic voting works great because nobody ever say that there is an actual dispute There is issue and why is it so it's simple because there is no way to prove There is something which went wrong So if you have physical evidence of the votes It's much simpler to show something fishy is and if everything happened on the computer So anyway, now we are going to see the voting website. I showed you before so basically it's like every Website so it minified. It's like that. Anyway, so you can earn unminified it and You have all those variable You see that they have weird name that get changed every time you reload the page. Okay, but some of them are not Minified are not really well named they stay there so we can do a bit of Google search and GitHub search and then we find a library which is called asm crypto So it might be the one they use in the website and it is of course Here you can see asm script on one side the code from me about on the other. So it's pretty similar Now for the bad news is asm script all hasn't been modified since September 2020 of who there is no security audit So it doesn't seem the best library to do a really sensitive thing But there is one thing that then add up It's as we will see you've got to use one type of encryption, which is areas Pkss blah blah blah anyway, and this Precise algorithm is not supported by asm crypto the library. So They don't use asm crypto they use an unmerged pull request of asm crypto Yeah, so here is for instance one part of the code. So Same thing you see the new about code the asm crypto pull request and so same code So let's talk a bit about ANSI. So ANSI in France is the people which are Responsible to say what you should and should not do in term of computing security. So they are really really great guy Who give really good advice when they say something you should listen to them And what they say is you must really please use major library library that have written by experts and You use library with security support It's really important because it's really simple to have something which is broken in security in cryptography That you don't know that is broken So anyway, let's talk about the ballot box format As you saw in the in the result page So the website you put it for there is this password that is provided and so with the password you supposed to decrypt the The two archive one is a ballot box and another is ballot key and if you decrypt ballot key on the windows There is an error if you better if you decrypt not ballot key, but ballot box on Linux. There is an error So why is it so? someone knows Little advice tip. Yeah Do you see it? Do you see it? Okay. Yeah, of course. So, yeah The trouble is if you do if you use your archive is a zip format on zip format They don't they don't specify what will be the encoding So if you use a unique code characters the encoding depend of your system if your line looks it will be utf-8 if you're on windows it most likely will be ISO and So, yeah, it's yeah, it's not great Anyway, the PHP script he has to open both archive. So how does it work? They try They try to put encryption on top of it and they try to put the other encryption I mean, sorry the other encoding on top of it and After three try they should be fine enough So, yeah, I wouldn't have done that this way Especially if you control the generation of the archive the reading of the archive Yeah Anyway, so maybe you're thinking like oh, it's not big deal. It's small thing. It's not real security issue So, yeah, but it's not like that I mean, I was talking to you about the knil and their recommendation in their recommendation What they say is it's important for third-party people to be able to read the ballot box It's important for third-party people to write Independent software that could help checking the ballot box and so basically that's what I'm doing and For the presidential election new vote was used by seven hundred thousand voters and basically From what I understand. I'm the only guy working writing a third party tools for this So please can we have like standard format something that make it? simpler for people like me to write things that check Because on the all the work I've done for sorry all the work I've done here on this thing This encoding issue is that's things that took me the most time. So, yeah, it could have been really avoided please Anyway So, yeah, one more thing. I told you first There was no absolutely no source code from the robot and then I told you there is this a little source code you can download And it's because yes since Last time I mean since the Green Party election and since I've sent them the fact that all the the finding I had they removed the possibility to download the code great transparency Anyway, what's in the archive? So there is this first archive which is about key export Which contain RSA key so private key for doing decryption The file is a dot p.m. Which is a standard format for AS key, but it doesn't contain p.m. Key So a little digression. What is p.m. When you want to store? So basically in every say your key your key is a really big number if you want to store it You sort it in a format or in the format So which is called asn1 So, okay, anyway, and this format you encode it inside in a binary format, which is called the year But given this format is binary. It's not really convenient So basically what you do is you put a header you put a footer you do Base64 encoding and here it is you've got your p.m. Key and what you about does is they add another layer of base 64 Encoding because why not and so it makes me a bit more complicated for me for people like me writing supply tools anyway So next thing what's in the archive? You have so this is all the archives about box export one What you have here is a multiple file, which are not really interesting like the name of the election Something like that and you have those two folder each folder is a round of the election So this election there was two rounds. That was there. That's why there is two folder If we have a look at what's inside one of the folder There is this thing which is this file which is called object names which contain the ID of each candidate and the name of the candidate So you see here is the second round. So there is a two candidate and the the white vote And after that there is this confirm which is another five which contain the type of election If it's if you have to vote for one person or multiple person and finally there is a More interesting part which is this third file, which is called bad data and it contained one line per vote that happened And we're going to see what it contained So what you see here is there is the first part and the second part is a Shara 512 of the third part. So the second part is the thing we saw in the in the proof of vote The first part it's RSA encrypted and it contains on the right side random things and On the left side it contains the ID of the candidate which has been voted for Now little discretion because I said the thing is encrypted with RSA But you all know of course that you should never do Textbook RSA. So you should not just use RSA. You should always use RSA with padding And so there is different type of padding And basically there is a new Chinese one which is a OIP and PSS and there is the older one which is called because yes one which is used by Neovot and What say and see about this is basically it's obsolete. So you shouldn't use it for newer software Okay, and so how it does it works because yes, you have When you encrypt something with RSA your the thing you encrypt might be the same side of the key So in case here, it's three thousand seven to seventy two bits And so with pkcs one you have a header you have random stuff Which is a cryptographically secure random bytes and you have your message your message is what we saw the funny thing is The thing on the right which is supposed to be random It's not Cryptographically secure. It's just it's much less random that Cryptographically secure thing It's easy to see it's because here you see this is bytes still this is bytes and you see there is only printable characters so basically what they do they get they take Good randomly secure bytes and they do some kind of cooking to turn them into something printable I don't know why they need something printable, but anyway, and so it makes things less less random so basically what they're doing is they're replacing the cryptographically secure random bytes from the pkcs padding by something which is less random I Don't know why they do this, but Not a great idea. I guess But it's not Security issue because pkcs is is well made and there must be at the very least eight Cryptographically secure random bytes, but anyway, it's still weird Oh, I'm already there and now I can start to slow down Because I thought it would be much faster must slower anyway So we are going to to have a bit of fun so the The ballot box we saw there is no signature on it We also saw that they gave us the RSA private key to do the decryption We know all the vote ashes because there are inside The ballot box and there are the one which are used inside the proof of vote so called proof of vote So we can try to to temper with the ballot box Yeah, so first thing we can do is you know, there is this file Which is called object name where we saw with the idea of the candidate and the name of the candidate So really basic thing we can do is just modify this file So we switch the name and we saw what happened And so if we generate a new ballot box and we Provided to the official website that do the check and you use the the proof of vote Regular one you see that everything is considered as valid. So it's fine except as are now It's a wrong candidate. That's a one so it's a really really basic attack, but it works and so The thing is the the very practical thing about this attack is you don't have to be a computing engineer You don't have to do fancy thing You just have to open a zip archive modify two names close the zip archive and that's it You're done. So it's really incredible Incredibly simple to do that if you're a voter It's really hard to see that something wrong went because you have your proof of vote But remember the proof of what doesn't contain only the vote for who you voted for it contains also also votes. So You cannot see that you voted for the wrong person because the idea has been switched I Guess it's not really practical because what Neovot can do is Take this file, which is the file containing The link between the ID and the name of the candidate and they came just to share it and Share it before the election with all the different parties say, okay, this idea is going to be this candidate So if you do that, it's really simple to see that's there a switch that happened I don't know if they either do any check but I suppose they do because There is no documentation about what they do, of course So let's try something a bit more complicated which is Given we have the private key the private RSA key. We also have the public one And so if we have the public RSA key we can do encryption And so we can start encrypting our own new ballot We can generate new about as much as we want So, yeah, we just have your ballot box or archive and we put plenty of new about box just enough So that there is a difference of one vote before between the two candidates and so now the wrong candidate has win So it works again of course this attack is much more visible because The issue as we saw here is the number of ballots has changed because we have generated plenty of new ballots So if you look at all the people that were supposed to vote and all the ballots at the end You see the number is different. So it's really easy to spot It's a funny attack and now for the third attack, there is this file Of course, you saw it. Of course, you were wondering what it was and we're going to talk about this file So the name is extra ashes What does this file do it's simple when the script is checking for the ashes in your proof of vote first thing you do is go inside this file and it removes the The ashes from your proof of vote which are inside this file So basically this fight is saying, okay this prove this ashes. Yeah, don't don't take care Don't care about it. Just just drop it So my guess is why they do this is because When you are the very first person that go to vote On the Neovot server, there is no other vote But Neovot server has to send you back your the five ash The five ashes to generate the proof of vote And so what the Neovot server does is it generate four random ashes Stores them in extra ashes and so return you the ashes Anyway, so the funny thing is now what can we do is Generate fake ballots like we do in the second attack. We put the fake ballots inside the file With all the ballots, but now we have too much ballots inside the file So we remove some of the of the genuine Ballot from the ballot box for the data file And all those All those ballots that have been removed you can take their ashes And you put the ashes inside the extra ashes that CSV file. I mean there was 24 There was 24 ashes in extra ashes Now there is something like 5000 or 10,000. What's the difference? Who knows But the good thing is now you you totally Change the result of the election. So everything's fine. Now Still you have a difference of two votes between the first and the second one And uh, yeah, everything is fine because you have the right name or vote You have checked everything everybody has a valid proof of vote Everything appear like it should but the only difference is you have too much ashes in extra ashes But nobody knows what this file does. So Who can say it's wrong or right to have 57 or 24 anyway Yeah, so as I said All the votes all the proof of vote have valid If you are an organizer, you you just cannot Know that if this attack if this attack happened, you cannot have any way to to check So, yeah If you wonder of course, uh, given our I give those information to neovot they answered They say that All my attack are not I'm not adding the official neovot server Of course, I'm doing this stuff on local on my computer. I write my scripts And so they said It's misleading what I'm saying because uh, I could not change the result of the election because I could only change a file on my computer and the only source of truth is The archive which is on the the website on the voting website, which is hosted by neovot So I'm totally agree with them on this What does it mean is as long as you trust the archive that is on the neovot server Then the transparency script that you should run not to trust neovot is working fine Fair enough Yeah, so, uh, I have time we can say What we saw today. So there is this string versus byte Just mismanagement that remember us when we were doing python 2 but Hey 2021 2022 now Anyway, there is this encoding issues. There is this, uh, symmetric encryption used as padding stuff Uh, this random, uh bytes which are not cryptographically secure random bytes, but which are added for god knows why The use of legacy padding Of course, my favorite one the use of asm crypto full request for doing cryptography uh and the fact that We saw that when you do, uh, the The ballot box is a proof of vote checking on the website the website crashes But why it crashes? It's because you have a lot a lot a lot of erasar decryption to do And uh, it's costly, but what it means if if you are in an election like, uh, What is what I show an election with like 100,000 people if you have one people that want to check his vote The website is already done So it's like People they are Supposed I mean you you give them to to say, uh, you should check your your vote, but if they try to do it Uh, things are crashing if you are not working great Uh, for instance in uh in the green parties They were talking about this proof of vote and where you can uh do the check for the next election for the The left wing party Primary party election They didn't talk at all about this voting proof the fact the fact you can check on the website So when you end up voting, they say oh, you can uh, check your vote at the end with this thing And after that at the end of the election, they don't give any information where you can do the check And nobody seems to complain because nobody understand, uh, how online voting works so It's not really great for from us. Yeah Uh, so anyway, if you're curious and you want to see uh Mickey Mouse Win the election you can trade yourself I have put everything on github So you can just download the box. Try change the thing. You can check against the the real Verify website As you can see I had to change the password from the original archive because I couldn't in python put The right password with all this encoding weirdness And it's because the zip module in python doesn't support encrypted archive anyway So I talked to you about the cnrs publication in in algotel If you're french-speaking, it's great But if you're an english speaker, it's not great But don't worry. There is a new conference coming which is in austria And uh, there is a paper and this paper is in english and if you want to to write the Anomalyze the pre-print you can it's still done by uh, anchor Which I've done an incredible job on this So if you're austrian you should check it And I think I'm done Yeah, thank you very much amalia for this very interesting talk And it's always great to see that somebody looks at the security and then it's just surprised and presents this to us Because normally you would just trust these systems Or just expect them to be trustworthy without having to check it yourself. We have time for some questions So it's other questions from the audience if you have a question about the security of the Uh online voting you can get quickly to the microphone here in front And ask a question and I see somebody already coming so Hello, please ask your question Hi, thank you for the very informative talk. I was just interested. Did you manage to gain interest for some like interested actors like from the I don't know. I don't want to say government but people who are in charge actually of making such systems Uh, yeah, so as I told you, uh from From what I understand from a legal point of view, uh What neovot is doing is fine. I mean, uh, they cannot be Don't quote of me on this because I'm basically the man in the street when I'm seeing that but what I understand is They cannot be a suit or anything for what they're doing. I guess, uh, but Anyway, uh, I think my finding are interesting So, uh, I send them to neovot so they can react and after that because they didn't react I send also them to the knil I told to you about and the nc. So the guy which are responsible to say what you should and should and do In security, uh, so now they know They do something or not. It's what they want Uh, and anyway, we are doing a publication with the with the cnrs with anchor So, uh, that's the most we can do Thank you. Thank you very much. The next question, please Hi, thanks for the interesting talk. Uh, I just wanted to ask a simple question What is your background? What did you study to be able to understand all of this? Uh, so I'm mostly doing, uh software development And what I do is what I show you on the very first slide that you should go check Anyway, uh, so it's like I'm using crypto, but I'm not a mathematician I'm not developing crypto. I stay as far away as I can from crypto because I'm just Want to have a well thought api like if you do crypto, you should use the Lip sodium if you know it, it's basically the good way to do crypto And so I'm just a regular computing engineer. I'm just curious and uh, so you you saw On the pie on the on the page when you check the the votes there was you can download the source code So you get triggers you download your reader card you say, um, I could And then you just follow the flow of the script and and you see what happened and the sad thing about that is are they so Now they removed the download the source code So imagine if they're from the beginning haven't put this download source code Uh, I would not be here talking about this. They could get away with it I mean that All the all the things that's uh inside this conference Nobody we could know because everything is closed Thanks Oh next question, please Hello, thanks for the talk. It was really cool to see that. Uh, I'm french too, so I can relate Do you know of any trustworthy state of the art system that could Be trusted by government and citizens from online voting and which is hopefully open source and transparent and everything Yeah basically, I mean basically, uh, when you're talking about online voting you already I mean you already too far If you want to do voting, uh, I mean there is two ways to do voting. There is one way which is Uh, you care about secrecy and then you have to do physical voting and the other thing is you don't care about secrecy I mean it's possible. Uh, if you if you're voting for something that is not really important You can say okay, let's vote and we can all be clear about it We just raise a hand or we vote online on the poll software or anything I mean, it's uh, it's a legitimate use case and at least It's really clear that the thing is open If you do online voting, it's like of a grayish thing So for instance, I was talking about one researcher Chantal Unger, she she does a lot of research on this thing and what he understood. She told me I understood that so I'm not an expert Is When there is a switch People were using physical Physical voting and then the switch for online or electronic voting People are not voting the same there is more people voting before that when you have to do something physical Maybe people are lazy. They don't go there. They are more people voting Most of the time it's because even if it's electronic voting people have to go to the company to vote So of course you don't say oh no, I'm not going I'm going to have a cigarette. No you go with everybody And the other thing is When they vote they vote differently because when you are in a company and you have You have your political opinion. So you want to vote for something But you know the the election is held by the company and you don't know how much you can trust the computer The software the etc etc and start you start by going a bit like Yeah, yeah, maybe it's just easier to to temper a bit what I think and Be sure I won't lose my job something like that So yeah, if you want to do good voting, just do physical voting Okay, we have time for one quick more question. Please ask the question. Hi. Great talk. Thanks Quick question. I'm a data engineer. So in my job, I have access to really big databases I see your personal data and my company trusts me not to do anything illegal with it. Yeah, or else I go to jail How much do you trust the newer vote developers? To you know respect an election and not skew the votes Is there any way to know that the current people who ran for the election did not did or did not actually win? Yeah, your question is kind of the The complot theory or something like that I would say that As long as there is no proof You don't have to You don't want to put a shadow and say yeah, they may be doing the maybe not. No, I mean What I believe is they're honest They they don't want to to temper the the election and it would be really foolish to do that Of course, because it's not I mean they are making money with this software So they don't want to to kill the milking cow So I'm pretty sure they are doing an honest job. They don't try to change thing or anything, but It's not I mean there is so many layers so many different people who can do something. I mean if tomorrow There is a I don't know insert a big country with hackers That understand that there is this software which is more and more used for do for doing voting Maybe it's interesting to put enough energy in the hacking this thing and they go inside the server and They they understand how to rewrite the zip archive with these encoding issues To change the vote about box and now they've changed the election and no one can know anything about it Or maybe later on you realize that oh this election there was a hacking things and maybe the election the result has changed And what can you do or maybe there is nothing that happened? I mean everything is fine, but just you have a like a donald trump. He has said the election is rigged And uh, how can you prove the election is not rigged given everything is done on a computer? You don't have a lot of physical evidence so Even if every day everybody is perfectly honest. It's still an issue Thank you. Okay. Thank you very much for all the questions and thanks again for the talk So let's have another round of applause for for emanio


Recent advancements in near-infrared, NIR, are absorbing organic nanoparticles, owners, have enabled new applications in biomedical imaging and phototherapeutic treatments. These owners consist of small molecules or conjugated polymers and are capable of deepening penetration and improving contrast in tissues due to their lowered absorption and scattering of NIRI light. Despite their potential advantages, biocompatibility and degradability remain key issues for their clinical translation. This article was authored by Wei Xia, Fu Lijiao, Jin Hongzu, and others.


U.S. calls on Armenia to reach final agreement with Azerbaijan for peace. The United States calls on Armenia to reach final agreement with Azerbaijan. James O'Brien, Assistant Secretary of State for European and Eurasian Affairs, told reporters while speaking about the results of the trilateral meeting between the Armenian Prime Minister, the U.S. Secretary of State, and the President of the European Commission in Brussels. The meeting was about the reforms in Armenia, but we certainly encouraged it to continue on the path to peace and to try to reach a final agreement with Azerbaijan, O'Brien noted. According to him, the normalization of Armenian-Azerbaijani relations is the best way to ensure regional security and prosperity. In particular, it will open new trade routes from the Mediterranean region to Central Asia. It should be noted that the Armenian-Azerbaijani border has experienced the most peaceful period in the last six months. Currently, Armenia and Azerbaijan are closer to peace than ever before. However, meeting between the United States, the European Union, and Armenia shows that the West is not sincere about regional peace and that it is trying to create new dividing lines and overlapping spheres of influence in the region. Because this meeting was prepared in a non-transparent manner, regional inclusiveness and character were not taken into account. Before the meeting, Secretary of State Antony Blinken called the President of Azerbaijan Ilham Aliyev and tried to explain the situation. In a telephone conversation with the President, Blinken said that this meeting was not against Azerbaijan but was dedicated to the development of trade relations with Armenia. But any economic challenge of Paris, Washington and Brussels to Armenia cannot provide an opportunity for Armenians comparable to the Moscow market. Currently Armenian products, capital and, most importantly, labour have free access to the Russian market. The number of Armenians living in Russia is more than Armenians living in Armenia. Russian companies are the beneficiaries of Yerevan's main economic and transport infrastructure. The West, which is well aware of the history and complexity of relations between Armenia and Russia, does not see any prospects for economic cooperation with Armenia. The main goal is to open a new front against Russia in Armenia after Ukraine. This as creating a new source of conflict in the region and preparing Armenia for revenge against Azerbaijan. Russian control over Crimea, Sevastopol in question. Recently Russian Defense Minister Sergei Shoigu has presented the new heads of the Russian Navy, Northern and Black Sea fleets. Crimea.relie media outlet. Actually, the admirals appointed to these posts were already acting as commanders, but Moscow preferred not to inform about Vladimir Putin's personnel decisions. It is noted that the very fact of the total change of fleet commanders is evidence that the Russian Navy has demonstrated its inefficiency and lack of modernity during the Russian-Ukraine War. One of the main narratives of Putin's aggression, control over Crimea and Sevastopol has been questioned. The importance of the Black Sea fleet staying in Sevastopol has always been one of the main political objectives of the Russian Federation, not only in Putin's time, but also under Yeltsin. Sevastopol was perceived as the main base to dominate the entire Black Sea. However, the first major war has already demonstrated the failure of these plans. The Black Sea fleet was not capable of interfering with Ukrainian trade and Sevastopol was constantly being hit by airstrikes, so much so that the Black Sea fleet headquarters and other facilities had been turned from offices into targets. Russia has had to relocate part of its fleet urgently to an obviously unprepared bay in Novorossiysk and re-establish a reserve fleet in Ochamchera in occupied Abkhazia. It is clear that the responsibility in this situation should have been placed on the heads of the Russian Navy and Black Sea fleet, and not on Putin, with his Blitzkrieg plans and lack of understanding of how the world has changed, and this is despite the fact that in the past, the Russian Black Sea fleet could only fight against the weak, but when it was rebuffed, it went down safely. But as we know, Russian leaders have a peculiar relationship with history, Crimea.relieses. It is noted that the question now is what tasks Putin will set before the new commander of the Russian Navy, Alexander Moiseev, and new commander of the Russian Black Sea fleet, Sergei Pinchuk. Will he demand to preserve at least what is left, or to restore the fleet's capabilities in the Black Sea, block trade routes and intensify strikes on Odessa, Ismail, and other Ukrainian ports? Knowing Putin's megalomania, Crimea.relieses lean towards the second option, and this means that the Russian Black Sea fleet will continue to look for trouble and lose ships, especially since the new scapegoats, who will be responsible for Putin's further disappointments, have already been appointed. Russia threatened to burn NATO military bases, Kremlin declared direct confrontation with alliance. Russia and NATO are now in direct confrontation, the Kremlin has declared. On the day the US-led military alliance celebrates its 75th anniversary, as NATO leaders and diplomats gathered for a ceremony in Brussels marking 75 years of the security block, Kremlin spokesman Dmitry Peskov told reporters in Moscow, in fact relations have now slipped to the level of direct confrontation. NATO was already involved in the conflict surrounding Ukraine and continues to move towards our borders and expand its military infrastructure towards our borders. He said, Russian Foreign Minister Sergey Lavrov said that Western countries are trying to compel all NATO member states to sign up for providing obligatory aid to Ukraine just so long as Kiev keeps up its fight against Russia. Now they want to turn voluntary military aid to Ukraine into mandatory military aid under NATO auspices to force all NATO members to sign up for the obligatory provision of funds and weapons to the Kiev regime through heavy-handed disciplinary measures just so that it can continue to fight Russia. The top diplomat said at a meeting with foreign ambassadors on a potential settlement in Ukraine. Bases of the North Atlantic Alliance in Ukraine, if any, are ever deployed to the former Soviet Republic, will be Russia's legitimate target and will burn. Russian Deputy Foreign Minister Alexander Grushko told, these bases will burn. There once was the Yavarovsky training ground on Ukrainian soil where NATO had been training its troops. That target was absolutely legitimate. The Russian diplomat said when asked how Russia would react, were the North Atlantic Alliance to resume training troops in Ukraine or deploying repair centres there at Kiev's request. Russian President Vladimir Putin said earlier that today, the military potential and capabilities of almost all major NATO countries are being actively used against Russia. Russian Defence Minister Sergei Shoigu emphasised that Moscow was fighting not so much with the Ukrainian military as with the collective West.


You could have just pretended.  I haven't taken it out Stop it Today we're reacting to something. I hope so. This is a reaction channel Today we're reacting to some dino jankies. Dino James. You don't say Do you remember dino James? I do. Yeah, we've reacted a couple of us. Couple of us stuff This one's called unstoppable That's what my colon is Sorry Dino James is known for his amazing and mostly motivational lyrics and his songs like the ones you've watched Mirage nidar and about his dog Hancock, which was so good. So So I'm expecting the exact same amount of brilliancy and beautifulness Brilliancy, I like it. It's a word. Here we go Oh Please Don't worry Hmm I'm not sure if it's real or fake. Is it real? Yes, it's real. What's the matter? It's just that I'm not sure if it's real or fake. Yes, but the girl is sitting in front of you. What? It's real. Haha. It's real. Nice. Nice. Nice. It's real. It's real. It's real. Till the time I'm on my hit. Thank you. Thank you. Oh, I came. I like Dino James very much. I like that. At least from what we've heard, he likes to do stories about different things. And the song got really about at least, oh, I think one was about, I can't remember. But they're mostly not about him. He's using himself to tell this story of this woman who is a bigger woman and she's struggling to get into shape. And it's a struggle for a lot of people, especially in America. And I believe you've said for a long time that's one of your most inspiring things is somebody who's really out of weight and struggling but working really hard to get to where they need to. I've, if I see somebody jogging who's out of shape, I have my natural instinct. My kids can vouch for it. We'd be in the car and I'd see somebody jogging who's really out of shape and just panting and they're barely even at a walking pace. But they're pushing. It makes me clench a fist and scream and go, yes. And someone who's of her physique at the gym, that's a freaking warrior because it is so hard on so many levels to even walk into a gym when you're not in shape. Everything inside, when you work out all the time, your body craves it. You want the gym. It's not a sacrifice to go to the gym. When you're out with lockdown, I haven't been able to go to the gym like I want to. Thankfully, Scott has let me go and use his gym. But I miss being in that atmosphere. And I remember during the lockdown, I went like three months without working out. And getting back into it at three months, the mindset is really hard. When you're like that, maybe haven't worked out. Everybody's looking at you. You feel embarrassed. Your body's saying no. Your mind is saying no. The willpower it takes to do that. And do it. And I guess that was the trigger for her that made her finally say enough is enough. I was glad to see this wasn't about the guy at the end. Oh, yeah. You know, this was for her that she was alone in the gym. Nobody, her trainer wasn't there. She just did the thing and the lights went out and she was in the gym. That it wasn't about, I'm going to do this to get the guy. It was about, you know what? I'm not healthy. I'm going to take control of my health. I'm going to do what I've been wanting to do for a while. That's the reason you go and do that because there's a lot of people that size that couldn't just go to a gym and work out and don't go to a gym and work out or start a workout program if you haven't worked out without consulting a doctor. It's just great message. Great message. I like the line. I like the line in it that said, what was it? I think it was like, have some, have respect for yourself. Become a rebel, I think. Yeah. I'm always for being a rebel. Yeah.  Some people have hyperactive thyroid. Some people have many reasons why they can't get into a physical shape that they want to be. Guys, I think if you all know this, the natural condition of human beings is not to look like what you see on the covers of magazines and on Instagram posts by celebrities that are sponsored.  And when you do have the power, do it. I really liked, especially like the verses. Those were really, really good lyrics. Yeah. I like, I like him a lot. I like what he chooses to make songs about. It's not about bitches in the club. Yeah. It's about actual storytelling. Right. And that's unfortunately, I'm sure it's in India, but especially in America, a lot of just rap, that's what it is. Yeah. It's club music and, you know, that's the thing. Yeah, there's always a place for that. There's a place for that. And that's all you do. Yeah. It becomes a one string guitar. Yeah, absolutely. Yeah. Yeah, this was great. Let us know more about Dino James. We should react to down below another independent artist we can react to. Let us know down below. I have a video of Dino, Dina. Dina, Dina, Dina, Dina. Dina, Dina, Dina, Dina. There's a lot of free music.