Hey friends today, we are hanging out in Disney's Hollywood Studios It has been slow in the parks this past week So I wanted to come out and check on some of the wait times and then also There's tons of new food that I haven't gotten the chance to try yet So I figured we come on out ride some rides eat some food and have a beautiful Hollywood Studios kind of day Anywho's let's go do this We are heading into the second week of May and the temperature out right now is 93 degrees. It's definitely starting to feel hot again in Florida It has been beautiful weather for like the past month And this is the first time that it's jumped up to the 90s and it takes a little bit to get used to you know I mean it takes a little bit to get back in the Florida flow of things the Florida flow of things. I like that One of the things I've been wanting to do at Hollywood Studios is watch the Beauty and the Beast musical But I always miss it because it ends at like five o'clock and I think we're in time for the last show So we're gonna make our way over there first My favorite thing about the Beauty and the Beast musical is probably Chip and Mrs. Potts They are so cool. I love their costumes And I can't wait to show you a lot of people don't even know that there's a Beauty and the Beast musical over here Like I said, it closes at 5 p.m. So a lot of people miss it This is where we want to be the theater of the stars Beauty and the Beast and the last showing is at 5 p.m So we're gonna have some time before that. Maybe we'll go check out Tower of Terror, but we don't want to miss it It is $18 to purchase the genie plus today, and I don't think anybody needs it look at smugglers run is 25 minutes Tower of Terror is only 20 minutes rock and roller coast rock and roller coaster is actually closed at the moment But yeah toy story mania's 45 minutes linky dog dashes 55 minutes. These are great. These are great wait times for today Wow take a look at that Tower of Terror a 20 minute wait at 4 30 in the afternoon on a Wednesday That is incredible. So I think we'll have time to ride I think we'll have I think we're just gonna make it. So this is perfect Just because it says 20 minutes doesn't always mean that it's 20 minutes and We're gonna time it right now. It is 4 35 So we have 25 minutes exact to get to the Beauty and the Beast musical so I wonder are we gonna make it I mean do we risk it? I feel like we should risk it risk it for Tower of Terror This is obviously a very good start right here Wow Did we luck out today or what? Usually there's always a queue all the way back there, and that's kind of cool to see a crow in the queue of the Tower of Terror This is this is really good Oh, oh, I'm starting to think we might have made a mistake I was literally just walking right through the queue until we got to this point right here And now we've been here for seven minutes seven minutes Hollywood 1939 Okay, we've made it all the way to the point where we're about to get in the elevator and it is 452 So we have eight minutes. I don't know if this is possible, but I'm willing to try Looks like we've got the front row to well row number two, but that's the front. That's my favorite I'm so excited that we're actually getting to ride this even if we don't get to beauty in the beast. Happy. I'm doing tower Make sure you know just what kind of vacancy you feel it or you may find yourself a perfect resident of the Twilight Zone Tower of Terror was amazing and that last drop really like came down I hit my butt and I felt it I felt it in my butt, but now we're gonna make our way to Beauty and the Beast Looks like we made it with one minute to spare look at that 501. Oh wait. No, we're late by a minute We're late Like the rest of us When I was the last I I ain't bored, as I make step reporting to help me get lords But that's that I'm from 95,008 So I'd probably just sign some For a series of strange circumstances She found herself held captive inside a dark, kind of full mooning castle only inhabited by a very odd collection of characters Master would be furious if he finds out what we're up to Well, we don't have to tell him, do we? Well, there is nothing to worry about No, nothing, just out in the entire future Oh, big push Oh, hello there Be our guest for dinner We'll keep it simple Why are you talking about? What's going on? Come on, mom I'm not scared Oh, here No need to worry We'll keep it simple Hi Stop, stop it, I said, do you hear me? If we're going to do this, then let's do it But of course, we must make her feel welcome And, madames and messieurs It is with deepest proud and greatest pleasure That we welcome you We invite you to relax Pull up a chair, as the dining room proudly presents Your dinner You must be needing exercise and champs to use our skills Have you ever seen me as anything but a monster? Try to understand, master The poor girl has lost her father and her friend I told you never to come here I just wanted to find out what was up with you It's none of your business Please stop You shouldn't have come to the West Wing And you should learn to control your temper I can't help it Well, how do you know if you don't even try? I am so happy that we are able to catch the Beauty and the Beast show It's such a good show It's such a great musical In fact, the first time I've ever seen Beauty and the Beast Like performed live or as a musical It was for my sister's play in school And she was actually a fork It's good to know that Bam Bam was a fork But I love it Did you guys notice Mrs. Potts and Chip? Aren't they so cute? The way they wobble Like they wobble across the stage It's really good You have to check it out if you can Easy breathing There's like around seven in the room What planet do you travel to? To speak out to them About two? Yes Okay Alright What is the name of the advertised venue? We can talk about the Hollywood Tower The tip top Yes! Let's see Before becoming the right centric name part We know today that this Hollywood studio is primarily used A studio? An animation studio? Yes, it was built as a working studio with a tour Yeah One more? I keep my knees right away We're away and this house is full of scale We have a lot of Hollywood people Oh, the film was Chinese theater Yeah, very nice Two tickets for one I need two tickets for one Oh, okay Let's see Daisy and Mickey Oh wait, no Pluto There you go There we go That's Pluto and Mickey I'm sorry, Daisy That's the way Thank you Have a great one, guys That was nice That's awesome This is the way That was really funny and spontaneous We were walking down Sunset And then they started doing trivia And they asked, hey, do you want to do some trivia? And they gave me four questions And I got nervous What if I get them wrong? But at the same time I was like, alright I know Hollywood studios And I ended up getting them all right I got two stickers I got a Pluto and a Mickey And great success Now I think it's time We're gonna head on over to the Hollywood Brown Derby And hang out on the lounge Maybe have a drink Get something to eat If you guys didn't notice Dustin is actually with me DTH He met up with me And I was just like, hey We're about to ride Tower of Terror Beauty and the Beast In 30 minutes you win And he was like, I'm on my way The outdoor lounge area Of the Brown Derby Is separate from the restaurant on the inside And you can actually walk up And just come sit out here And they serve the full menu And that's what we did We got a nice little table And we're gonna grab some drinks And then also I hear they have a new dessert So I'm gonna get the dessert And I looked at it And it's like a brulee Champagne Sevillon Saban Saban Yeah It sounds really fancy Minted strawberries And lemon pine And then also They also have a new corn bisque So I think I'm gonna get the corn bisque And the brulee champagne That's such a unique combination Oh boy Look at the soup Oh wow You wanted to go, right? Yes That was magical Wow This is such a strange bowl Look at this Look at that But it was really cool The presentation was pretty amazing And I can't wait to try it Look at this Oh wow This looks so good There's an extra spoon There's a soup spoon Oh, smooth soup Ah, a calanda Would you like a little bit of that? I thought you were picking up the spoon Because you were like I wanna bite No, no, no Get that big spoon Yeah That's how we're gonna do it So now we're gonna try it though I thought you wanted some You can have some though I appreciate it Yeah, have some soup No soup for you You wanna do a soup? Cheers Oh yeah, here we go Cheers I heard a little ting there too That's good dude Good soup That's good Nothing like a 90 degree day And some hot soup to go along with it Cheers I'm dropping my bisque Yeah It was good That's amazing soup That's amazing I'm splattering bisque everywhere This is definitely one of the best Corn bisque I've ever had I loved it so much And the corn fritter was fantastic It's a little hard eating out of this bowl though Because I feel like I'm just dripping it All over the side here And also on my pants But luckily I'm wearing Roosevelt So like even when you drip something on there That just literally you just wipe it away It literally just wipes away And I love that Sure too It's a trap Look at that I actually prefer I think sitting out here on the lounge Then inside at the restaurant The restaurant's nice But it's very loud Here it's very chill Very relaxed It's outdoors Beautiful umbrellas And you don't have to fight to get a reservation Alright Enough of the bisque business Here is the Bruleage Champagne And I don't even know if I'm saying it right The Sabiana Sabiana I don't know I feel like I'm seeing the villain from Shazam But it looks amazing Look at that You got the strawberries under there And then you also have It kind of looks like maybe Graham cracker right here I don't even know what that is Looks really good I can't wait to try it Like regardless This is new They just added to the menu They said along with the corn bisque So got to try all the new stuff The fancy stuff I am trying to figure out How I should eat this Because I don't know if I just scoop up The strawberries and eat it like that Or do I build like a little sandwich With this over here So I think that's what I'm going to do I'm going to take a little strawberry here And we're going to put it on the end of this Just like that Just kind of have a teetering there Hopefully it doesn't break Oh yeah That's the way This is actually working Here we go Going in for the first bite This is actually very refreshing When I say that as like a thing Like I feel refreshed when I eat it The minty strawberries is a nice little touch This is really good I feel like they probably Well they do Because it's in the name But brulee the top there But look at this Wow I can actually just eat it I can just eat it Like I can just literally eat these strawberries It is so good The signature dessert here Is always going to be the grapefruit cake Which that is such a unique taste It's kind of got like a tartness to it And this is the complete opposite So if you don't like the grapefruit cake When you come to the Brown Derby Might want to try this That you might like it a lot I do Well that was really fun Hanging out at the Hollywood Brown Derby It was also good catching up with DTH I haven't seen him since Disney in Paris actually So it was fun that we got to hang out Together a little bit And now we're going to keep moving along I enjoyed all of my items At the Brown Derby I enjoyed the corn bisque And my dessert And I want to see if we can Maybe get on another ride Maybe over to Mickey and Minnie's Runaway Railway It's right over here So we'll see what the wait time is like Earlier I was talking about How it's been slow in the parks And the wait times are super low today And Tower of Terror was only a 20 minute wait And let me tell you something That was a 20 minute wait And Rise of the Resistance And Rock and Roller Coaster Were both closed A 20 minute wait And both those attractions being closed That is unheard of And now we're going to check out Mickey and Minnie's Runaway Railway And from the looks of it There's no line back there Look at that There's nobody look at They're just walking right on in It says that it's a 40 minute wait But there's no way this is 40 minutes Like we're walking right on in I love this sign so much actually Here comes our Runaway train Testing, testing Testing, testing Testing all of them If you all hear me say thanks a lot You're welcome old folks You're very brave and relaxed And ride around the park Hey Mickey and Minnie Here you can go share a heart rate You want me to barely wait Or if it's possible we go wrong Here's the tracks waiting for you Waiting for you Holy moly We are lucking out with the waits today Like that was nothing That was like maybe a 10 maybe 15 minute wait Under 20 minutes of Tower of Terror These are the days that I like These are the good Disney days Well I guess you can say Every day in Disney is a good day But it's even better When you don't have to wait In hour plus long lines And I feel like that's something everyone can agree with Now I don't know what we should do Should we just keep moving along Maybe go get another ride in Check out some more food It's definitely a hot day today But at least it's cooling down as it gets later After carefully considering my options I think I'm just going to head home It's been a very hot day We got a lot accomplished in a short amount of time But I want to go home, I want to see Gracie And also maybe Stop and walk through some of the gift shops And see if there's any new merch You know usually I like to come get things At Hollywood Studios Because I feel like they have more Availability on some of the hotter items I think that sell out quick So you know just walk through there Gander and see if anything catches our fancy And then make our way Out of the park and Home to see Gracie girl As we were walking through The shops I noticed something That's kind of really awesome And that is a 30% off The legacy box, the lightsabers 30% off, look at that That's incredible, I don't know if you can stack Your discount on that, I think you can So if you have an annual pass or a cashmere discount There's a good chance you can stack your discount And that's a huge savings I even have, I thought that was The dark saber, is it the dark saber I can't tell, it looks like it That's really impressive if it is Wow, it is the dark saber 30% off Holy moldy Originally they're $249 That's incredible I wonder if that's included in that Or if it's just these regular ones Oh boy, I might have to find out A couple of other things that I'm excited about Is the Guardians of the Galaxy Volume 3 merchandise I loved Guardians of the Galaxy I thought it was such a great movie And they even have a Rocket pillow pet Look at this I love the pillow pets, that doesn't look like Rocket too much though I don't even know who that is I don't think that's Rocket They also have a Groot bubble blower down there It's kind of fun I'm still questioning Groot there though What are they trying to do here Look at that, is this Sad Eyes Groot If you guys have seen the movie I'm talking about, but that one right there Look at that, it's like Sad Eyes Groot This looks more like Groot than that one I don't even know what's going on there It kind of looks like a bulldog They don't even look the same I almost walked out of there with a lightsaber It's such a great deal And I asked and they can stack your Annual pass discount With that, so that's hard to pass up But I have a lot of the Legacy Lightsabers My next big one is I want to Build my own at Sabi's I've done it before, but I've never built my own I've only ever done it and then gave them away Or did it for a charity Or something like that So that's my next big one I want to build my own Saber One of these days I'm going to schedule doing it It's just timing at this point It's just timing One more spot I always like to check out Is Adrian and Edith's head to toe Costumes of the stars And they have a lot of the Errors Collection along with the Disney 100 And oh my Lord Is that a hoodie? Look at this beauty It's one of the Walt Disney's Disneyland And it's a hoodie, I've never seen this before It has Frontierland, Tomorrowland Adventureland and Fantasyland on there This is too cool $54.99 That's not a bad deal That's not a bad deal at all And they also have like a woman's cut Here or a shirt cut there I think Maybe they're all like that I don't know, I can't tell They also have the Tinkerbell Statue But these are really really cool I love all of this, I love the whole Errors Collection I think this is better than anything From the 50th anniversary And with that I think we are done here today Sorry the video is shorter than usual I have some things I have to do tonight To get ready for A very cool fun road trip I can't wait to actually I don't even know if you call it a road trip It's just a quick trip But I'm very excited to share it with you guys I'll be posting from some Familiar places with Hopefully some familiar faces And I'm very excited about it So I hope you enjoyed the video I enjoyed making it We'll see you next time Bye Of course we can't forget About our daily check in Girl, are you having a good day? Princess Gracie, you want a cookie? I've got some nice cookies for you Oh yeah Which one do you want? You've got this one Hold on now, you've got this one One's vanilla One's peanut butter And Carobo Which one do you want? You gonna pick and choose? How about if I set them down? Here, we'll set them right Here, which one? Oh boy, that's the one She's licking it Who licks the outside of a cookie? Gracie I mean, I guess but What about this one? Is that good? I think she likes it Alright, just take it I hope you guys enjoyed This snack time With Gracie


It's good to be mean to war propagandists. Sydney Morning Herald editor Bevan Shields has published an article titled, We are not above criticism but these attacks go too far. Tearfully rending his garments over criticisms, his paper's three-part war with China propaganda series Red Alert has received from former Prime Minister Paul Keating and from ABC's Media Watch. The whole article is Shields moaning about the way Keating raked Australian war at the National Press Club of Australia on Wednesday. Keating told Red Alert co-author Matthew Knot, you should hang your head in shame, and do the right thing and drum yourself out of Australian journalism, as well as mocking the intelligence of Sky News reporter Olivia Casey for seriously suggesting that China is a military threat to Australia, and calling Sydney Morning Herald editor Peter Harcher a psychopath and maniac. For years we have laughed along with Keating as he hurls his trademark barbs. But it's not funny anymore, weeps Shields. And you know what? Good.  They deserve a lot worse than a public tongue lashing from a former Prime Minister. To be clear, when I say people Keating ripped into at the National Press Club are propagandists, it's not just how I see them. That's actually how they see themselves. They may not use that label, but they plainly see themselves as responsible for promoting Pentagon friendly narratives, as evidenced by their behaviour at that very press conference. If you watch them line up to question Keating and listen to what they're saying, over and over again you hear them trying to insert narratives like a propagandist, rather than asking probing questions like an actual journalist. You hear ABC's Andrew Proben work to insert the narrative that China is a threat to Australia by citing things like sanctions on select Australian products in retaliation for Canberra's playing along with Washington's attack on Beijing over COVID, regurgitating the discredited claim of Chinese debt diplomacy and babbling about China's militarisation as though the US wasn't encircling China militarily and engaging in increasingly aggressive acts of brickmanship. You hear the aforementioned Olivia Casely work to insert the narrative that China is a military threat to Australia. You hear Bloomberg's Ben Westcott work to insert the narrative that Australia should work with the US to protect its trade from China, hilariously accidentally reenacting the famous utopia sketch by ignoring the fact that China is Australia's primary trading partner. You hear the Australians Jess Malcolm work to insert the narrative that China built up its own military in its own country and that that is somehow a provocation against Australia, which Keating immediately smacks down with appropriate disdain. And you hear the aforementioned Matthew Knot work to insert the narrative that Keating is a treasonous Xi Jinping puppet by sleazily insinuating that the former Prime Minister must say critical things about the Chinese Communist Party in order to prove his fealty.  Propagandists. Power-worshipping bootlickers for the most powerful empire that has ever existed.  That's the bare minimum level of contempt that they always should be treated with. Australians who don't want war with China are still unclear about how to respond to this deluge of mass media war propaganda our country is being smashed with. But Keating showed us exactly how to respond. He provided a solid model for us all. If anything, Keating was too kind to these ghouls. One really can't have enough disdain for those who peddle war propaganda professionally and pass it off as journalism to an unsuspecting public.  Bevan Shields melodramatically refers to the public exploration of his colleagues as Donald Trump-like abuse of journalists doing their jobs. But they're not journalists doing their jobs. They are propagandists. If you want to call yourself a journalist, you need to act like it. Be skeptical. Question your sources. Question their funding. And get the story right. That's the job. In this case, the lives of nearly 26 million people are relying on you to get it right.   These pentagon puppets deserve more than just shame. I cannot believe they can so blithely push our country into the front line of someone else's war. How very generous of them to offer up our sons and daughters in the name of the Almighty US of A. It should enrage all Australians that a war of unimaginable horror is being shoved down our throats by the US Empire. And it should enrage us that people who call themselves journalists are using the trust of the public to help manufacture consent for it. We need to start saying no to this. We need to whip up enough fire in our bellies and make sure that no comes out with enough force to generate fear in these bastards. Australians are not good at rage. But rage is what these actions should elicit, and our own actions need to start flowing from there. We can't just let them inflict this horror upon our world with a signature Australian, ah well whatever you reckon of anything mate.  This cannot stand. We've gotta get moving people. These prists are gonna get us killed if we don't.


Hello, welcome to SSUnitex within this site and this is continuation of PySpark tutorial. So in this video we are going to see about the sort and order by. So when we can use the sort and order by we will see in this video. So that today's azinda is first we will see about the sort and then we will see the order by clause. So either we can use the sort or the order by function so both are same. Either we can go with the sort or we can go with the order by. So we can sort any data frame by ascending or descending order. So let me quickly go inside the browser and we will try to see in practical. So here we have this data frame that is DF so it is reading the data from the csv file and it is having the sales information. Now let me try to sort this data frame from quantity. So use the DF dot then we have to use the sort and inside the bracket we have to specify the columns. So we just want to do the sorting on the quantity and let me put this in another data frame and let me check with the display command this data frame let me execute and we will see the output of this. We can see it has been sorted into ascending order the quantity 2 then we have 3 then 4 values like that. Now here this is the first way by which we can do the sorting the second way we can also use the order by. So let me try to use the order by instead of this sort. So let me execute and we will see the output of this that will be same as we can see the quantity has been in sorted order now. So either we can go with the sort or we can go with the order by the second way by which we can also sort this here if you want to sort this into any ascending or descending order then this will not work. So how you can specify the quantity you have to either go with the DF dot quantity then you can specify in descending order like this. So it will work let me execute and we will see the output. So if explicitly you are going to specify ascending or descending then you have to go either with the data frame and column name then the ascending or descending order or you have another way by which we can do the sorting that is if we don't want to specify data frame here then we have to make this column as call function. So we have to use the call function and making this quantity as a column but this call function directly will not be available. So what you have to do you have to import this call function. So pyspark dot sequel dot functions then import this call function and let me try to execute and we will see. So we should be getting the same output as it is in sorted order. So till now we are good. Next if we just want to do the sorting first based on the quantity and second based on the value then how you can do the sorting. So here we can use the first column as quantity and second column we can specify as an value. So we can go with the value dot here I am going to with the descending order you can also specify the ascending order maybe. So either way you can use it. Let me execute and we will see. So it should be going to sorted as we can see it has been sorted and we can see the value is in ascending order. So these are the different way by which you can do the sorting on the data frame. So I am especially using the last one which is the df dot column name dot ascending or descending order you can either use this one or you can go with the call function because call function we have to explicitly import here. So that's why I am not going to use this very often. I am going to use the last one. So I hope guys you have understood how you can use the order by and sort function inside the PySpark. So thank you so much for watching this video. If you like this video please subscribe our channel to get many more videos. See you in the next video.


Live from the Mendeley Bay Convention Center in Las Vegas. It's theCUBE, covering VMworld 2016. Brought to you by VMware and its ecosystem sponsors. Now, here are your hosts, John Furrier and Stu Miniman. Okay, welcome back everyone. We are live in Las Vegas for VMworld 2016. This is SiliconANGLE Media's theCUBE. It's our flagship program. We go out to the events and extract the civil noise. I'm John Furrier. And we are here live with Sunil Palti, who's the chief product and development of Nutanix and Pujon Kumar, who's the co-founder and CEO of Pernex Data, now part of Nutanix. Congratulations, Nutanix, purchased your company. Congratulations. Thank you. Thank you, John. Good to see you guys again. Keep alumni, both of you. So give us a scoop. Give us the news. You guys were acquired. What's the story? So, yeah, it's been around four and a half, five years since we started the company. And both these companies have been very complimentary in what they did. Software companies, one selling an appliance, one selling pure software. And so we figured that we'll align in both the missions together and really be part of something that's a big movement in re-platforming the data center. Sunil, what's the motivation behind the purchase? Obviously from a product standpoint, is it filled with white spaces as strategic? Obviously customers and the product. Give us some color on the acquisition. Why? How does it impact the platform for Nutanix? I'm happy to do so. I'm happy to do so. So I think if you look at Nutanix's ambition about what we unveiled at Dotnex about the enterprise cloud, rather than just focus on the convergence of storage, compute, virtualization, what we think is something that we pioneered in our first act for the last five years, our next act is about convergence of public and private clouds. And essentially it's the convergence of the consumption model and the delivery model, whether it's CAPEX or OPEX, essentially the right cloud for the right workload. And so for that, the heart of it are two things in our opinion as we build towards that. The first thing is to ensure that one can understand the right workload characteristics so that we can then determine the right infrastructure to deliver it. And to do that, you essentially need a transparent but a thoughtful way to analyze the workload working set, for example, and then prescribe the right architecture for deploying that workload. And so that was the first requirement. The second requirement is once you get that idea, the next step is to actually seamlessly and transparently migrate that workload from wherever it is today to the new architecture, whether the new architecture is from a traditional 3-tier to a traditional, you know, the next generation hyperconversion infrastructure or to a public cloud of your choice, right? So that if a workload is an elastic workload, then it makes sense to deliver it as an OPEX, as a public cloud architecture. If it's a predictable workload, it probably makes sense to actually use an architecture like Nutanix as on the web scale side. So the second thing is about enabling this transparent but seamless migration in one click. Think about it as a VMotion for the next error, right? So as they're underpinning for both those characteristics, which is to understand the characteristics of the workload so that you can then choose the right cloud for the right workload and then to enable that migration from your traditional infrastructure to that next generation infrastructure. Pernix data's technology is central to that particular capabilities. And, you know, our goal is to essentially leverage that capabilities overlaid into our portfolio to deliver that convergence of public and private class. All right, so, Sunil, maybe let's just step back for a second. Give us a little bit from kind of a Nutanix company update.  You've taken a little bit of a loan there. So, you know, when's the IPO happening? Why two acquisitions at this point? Yeah, yeah, I mean, I think there's a multitude of questions there. Let me just break that down. I think on the product slash market strategy, you know, the way we look at this is a three dimensional sort of view, which is one dimension is on the product feature side about elevating it from, you know, hyperconversions to include virtualization to include this convergence of clouds. And that's where the acquisitions fit in, both Pernix data and com.io. The other dimension is about delivering the capability on a multitude of platforms. So one of the new things that we announced recently is to extend beyond the Nutanix, NX family and the Dell and Lenovo families to also have Nutanix run on Cisco UCS. And a lot of that was actually because of customer demand from our joint customers asking for it. You know, we did a great launch at the Cisco sales conference with Weitzberg adoption between their sales team and the partners. And the last dimension is about the go-to market, which is about expanding beyond enterprise into service providers, the Robo segment, the SMB segment. And as we scale the company from when we talked about, you know, the enterprise cloud vision. You know, the IPO obviously is a chapter in the next step of our journey. We can't speak in too many details about it. The way we look at the evolution of the company going forward is we have a real opportunity now armed with some technologies, complimenting our core foundational capabilities to essentially increase the value proposition that we offer to our existing customers while enabling new customers to more seamlessly migrate from their traditional architecture to Nutanix. So, Sonia, I want to follow up. You mentioned this, the Cisco support. So, Nutanix has done the testing. Customers have been asking. I know you've got large Cisco channel partner that's supportive of this too. But I want you to comment because I look at Cisco's reaction and it reminds me a little bit about the Nutanix-VMware relationship. There's a little bit of friction. There's a little bit of, you know, tug back and forth. I mean, both, you know, Cisco and VMware sound like they're important for you from standpoint, but the engagement's not as clean as, you know, some might think. Yeah, I think, you know, the Cisco, I think the potential partnership there is a little, in my opinion, more of a fertile grounded adoption right now because I think there's genuinely a one plus one equals three value proposition there. I think in the initial stages, obviously, between Cisco's own portfolio of products versus, say, Nutanix products, there'll be some friction. But I think, look, at the end of the day, as large companies expand and emerging companies expand, there will be areas of conflict and areas of overlap. And our goal is to focus on the areas of overlap. And in the case of Cisco's particularly, you know, it started off with like a four or five flagship customers of Cisco asking us to do this. In fact, that's how Cisco allowed us to actually validate and test some of the stuff with many of the engineering folks actually supporting this effort. I think, you know, the feedback that we've seen with our joint channel partners, in fact, Cisco's largest channel partners are all over the solution. So our expectation is, look, in the next three to six months, let the market decide. And I'm sure that I think, you know, as partners looking at it long term, we'll come together. All right, so Pujon, you know, you've got a really interesting background. You've spent some time at Oracle. You've been at VMware. You did a startup and now, you know, Nutanix is trying to become a new platform in kind of the changing ecosystem. Give us your viewpoint with kind of, you know, looking back as to where we are, what's important to the users, you know, what, I guess did things change from when you started Pernex data and kind of the opportunity that brought you to Nutanix. Yeah, a lot of questions there. So I think I'll start off with, I think, you know, these two companies coming together and the goal would be to take that one plus one equal to three mindset. And Nutanix has this thing where even though they've been very successful in what they've done so far, you know, the ambition is big. And so when the ambition is that big, it's really about now, you know, getting all this, you know, inorganic, so to speak, forces within the company and really getting that founder's mentality, so to speak, back when, you know, when Dheeraj and other folks had started the company. And that's really what I'm excited about, which is, you know, how can we take the company from where it is and take it to the journey at 10x the size? And that will only happen if we can really execute on some of these visions that, you know, Sunil talked about, where we can just build that, you know, one click, you know, we motion of the next decade, where we can blur the lines between, you know, the private and public clouds and really deliver on the Nutanix Enterprise cloud vision. And those are the things that really excite me and some of the technologies that we have built are really going to, you know, be the fundamental building blocks behind delivering those visions. Okay, so it sounds like it's, can you unpack a little bit how some of those products fit in? Because I've heard some people say, is this in AquaHire? You guys have some great storage kernel expertise in the company, which will definitely help for kind of future development, but you know, what is kind of, you know, the important stuff for today and down the road and maybe you answer and Sunil can follow up. Yeah, so I'll take a stab at it.  It's also not completely closed yet. So it happens the next two weeks. So some of these things obviously we are figuring out, but bottom line, what I'll tell you is, don't only look at what is visible, you know, out there. Sure, we have the analytics product, which is really relevant for the non-HCI environments, and we had the performance product, so to speak, the FPP product, but really, you know, if you double click into it, there is a lot of capabilities that the company has built and those are the capabilities that are going to become the fundamental building blocks for the future that we're going to build together. So I'll leave it at that for now. I think, and I think just to add on to what Pujin said, the way we look at this is, I think there are some tactical opportunities always in helping accelerate traditional three tier architectures. Our focus isn't about that. Our focus is, if anything, to focus on, you know, we fundamentally think that workload inertia in terms of migration to the new architecture is about data. And if you can unlock workloads with the way to seamlessly unlock the data inertia portion, which is where a bunch of the technology from Pernix combined with our technology coming to bear, I think that's where our forces will be aligned to, is to really enable that workload mobility across old to new web scale architectures or old to net new public cloud architectures. So one of the things that Pat Gelsen was talking about as Kino here at VMworld is obviously inter-clouding or, you know, cross-cloud, actually what we call inter-clouding, but multiple clouds, as customers look to the future, they've always been focused on performance in the data center. You guys have done an amazing job there, simplifying everything, but performance in the cloud is a really big deal. Can you guys share your thoughts on that because that's kind of a working area for operators right now. We're in the ops side saying, okay, if we have, say, a multiple clouds, they have to decide architecture. They got to think about things like, okay, I might have a workload here or there, performance hits might be on the horizon, they're nervous, there's some fud out there. The thoughts on there, relative to cloud in general and performance, is it an issue or not? Yeah, I mean, look, I think you could, for everybody that complains about security, for example, over the last five years with cloud, you know, Amazon has shown that, you know, there's so many other secure apps that are running widely on it. I think, look, I think security just and performance are mostly temporal issues in my opinion over the next five, 10 years, right? Sure, are there going to be issues around performance for running Oracle Rack-like environments on an AWS environment? Sure, probably, but I think the, if anything, the higher order bit is about the texture of the workload, mapping to the cost and the financial economics while keeping the simplicity and the elasticity of just ability to start quickly, start small and then pay as you grow, right? And so the way we look at this is frankly that there are some workloads that performance-wise today may not be a right click for the public cloud, but from an economics, from an agility side, they are. Trade-off, basically. Yeah, and so it may be better for them to move internally to a high-performance architecture, but with a set of APIs that over a period of time they can elastically move into the public cloud because that's the ideal way to actually leverage that particular high-performance workload or what it's elasticity from a consumption model that's OPEX versus sticking to a traditional CAPEX plus OPEX. So performance is a situational issue for them relative to how they deploy or architect, not so much a pure hit for some. I think security and performance, if anything, are, like I said, temporary stumbling blocks. So maybe whatever even Nutanix does initially, taking a workload and landing on a Nutanix on premise to solve for performance issues is actually still the first step. The second step is actually to free the workload to say, look, if this is a truly elastic workload and I need to spin up 1,000 machines for 10 hours, then the right answer for that is to actually use the compute cycles from a public cloud, right? So. What are the top three conversations you guys are having with customers? You know, obviously you have your business, you're getting under the hood if you will, making things run great, but relative to kind of this economic and the trade-offs that go on is all these conversations that need to be happened. How would you boil them up in terms of top three customer conversations around this kind of multi-architectural or multi-environment situation? It's a pretty broad question. I would say, let me just, I don't know if I have three things, but let me just tell you the, you know, whatever number that we run into, which is, the first thing is about, I think IT, as in the VP of IT and the CTO, or CIO, are figuring out what is their role in the next five years. In terms of like when they convert to their business, they have a top-line driver and a bottom-line driver, pretty much every CIO, right? So what they're looking for is a strategy that will help them in both dimensions, not just in one of them. And so, in the bottom-line dimension, clearly there's a whole bunch of ROI, TCO around leveraging net new architectures, but also, if you can provide an ability for them to handle or at least get closer to their business counterparts in terms of delivering applications so that they can forego the mundaneness of traditional IT operations. To me, the way I summarize it is, every CIO should become a CEO, a chief Amazon officer, right? In that sense, whether it's a logical Amazon or a physical Amazon. I think if they put themselves in that mode of thinking, I think the choices that they're going to make in terms of vendors, in terms of architectures, in terms of apps, will automatically have a true north in which they have to orient themselves for the top-line and the bottom-line. I don't know, Pujan, if you had anything to add to it. Yeah, I think it really comes down to, and that's where I love the Nutanix vision around the invisible infrastructure, to your performance question, the understanding workloads, multi-tenant environment, what should I run in my private cloud? What should I run in my public cloud? Those are the kind of things that you don't need to make it invisible for the end-user. And that's the journey that we need to take the cut. That's a goal, that's a great goal. It should be invisible. Exactly, right. And so that's really, I think, combining all of these things and really working on that, if you can do that, that's where you kind of free the CIA or the VP of technology from the mundane task so that they can really focus on what's really valuable for the business. Yeah, the apps themselves. Exactly. And how does it impact personnel? Thoughts on this, we always talk about autonomous cars. Oh, jobs going to get automated away with AI and machine learning. But in IT, that is also a shift that's happening. The personnel roles are changing, thoughts. Look, I think as we embark on replatforming the data center or replatforming the enterprise, I think inevitably most of IT have to replatform themselves, right? I mean, I was just at the conference just looking at some sessions and there were a couple of customers at the background and the session that they picked was about, oh, how do I use PowerCLI and PowerShell, right? So for example, as a classic administrator, coveting development, coveting programming, right? So I think it's already obvious that most of our customers are trying to move up the stack themselves in terms of both scope as well as abilities. So I think that is how... Operationally, too. I mean, that's really where they're digging in. So I think that wave is already happening about in terms of rather than focus on operating the infrastructure, focus on programming it and delivering it. And frankly, it's an interesting value proposition for many of the traditional admins to actually move up the stack, right? Is there anything that you guys could share in terms of customers around what's hot out there that people may or may not be looking at? I mean, it's always a fear of missing a trend. There's a lot of stuff going on in IoT. The IT guys are under a lot of pressure to move up the stack. I totally agree. Invisible infrastructure dev ops and or cloud ops as it evolves. Is there things going on that you see from a trend standpoint that are like, hey, don't miss out on that? I'll talk about one thing that we're seeing and sort of orienting ourselves a little bit. And then Pujon, you can comment as well. So look, I think this whole concept of multi-clouds and all that stuff, I mean, we have to also be aware that we could be boiling the ocean with this. Yet another variant of spread to thin, not really diving into it. So for example, as you help really transform an enterprise infrastructure, just keep it simple into an Amazon-like experience for just a set of workloads, even providing an adjacent service without actually providing all the cloud services, if you just provide a DR with one click, but do it really well and do it with simple one-click delight. So someone could actually say, look, I actually just tested DR with one click in the middle of a day. People just don't do that today, right? So I think a couple of things. They're taking on too much in IT. You're saying if it's too thin, you're boiling over the ocean. And I think on a fabric, which is what we are calling web scale, you have to be focused in terms of building these killer apps, right? And they have to come one at a time because these are complicated, deep apps that you have to do the right job on. But I think that is, so I would say that is like one dimension of our viewpoint. The other dimension of our viewpoint is frankly, as we look at this full gamut of applications, I think there is going to be a trend that we will see in the next five years, which is look, Amazon slash Azure's value add, in addition to providing the IS landscape is a bunch of services on top to help re-architect the application. But most of the apps moving to public cloud from our perspective are what we call lift and shift. And after a certain period of time, they will be re-architected in addition to some new apps, right? I think there's an equal opportunity for enterprise apps when they lift and shift to an on-premises version of an Amazon to also be re-architected with a similar set of Amazon-like services, right? So you will see us, I think in general, I think people will ask for services on top of IS on the enterprise side to also come in as part of re-platforming that application. So Poojaan, I want to give you the final word. We always love to talk to kind of the entrepreneurs, your co-founder in the valley. We talk about softwares in the world. So what lessons learns do you have? I mean, I remember meeting, you said it was three people and a dog around the corner from Nutanix's headquarters kind of grew it and now joining Nutanix. So what lessons would you like to share with the audience? Yeah, so I think for us fundamentally, we were a bunch of insurgents, right? We built this platform, we got it to almost close to 1,000 customers and we want the distribution scale that Nutanix now brings to get it in front of a lot more people. But really that mindset with which we started the company is the same mindset I'm coming into Nutanix with. Because when I built Exadata for Oracle, at that time Oracle was making $10 billion on database. But that didn't stop us from building a yet another multi-billion dollar initiative within the company. And that's the mindset that at least I am mentally bringing in into Nutanix so that we can basically go from here to the next site. So culture fit is a huge issue. It's a huge thing for us. Ambition and culture fit was the biggest reason technology aside, everything aside. Ambition and culture fit was a big reason for us to come together. And so how much did you guys sell the company for? Can you tell us? I'm just close, I'm just, I always try to get some data on theCUBE. This one is good looks. Billions, he's got a boat now, a Ferrari, driving now one on one. No congratulations, great to see you guys. Have a great exit and I got a great team in Nutanix. Nutanix congratulations on success and tell D Raj we said hello. Yeah we will. Okay this is theCUBE live here with Nutanix here on the side of theCUBE VMworld 2016. I'm John Furrier with Stu Miniman. We'll be right back with more. Thank you for watching theCUBE.


I think it's time to get started. Welcome everyone. I'm Cliff Lynch. I'm the director of the Coalition for Networked Information, and it's my pleasure to welcome you to this breakout session from the spring 2020 virtual member meeting that CNI is conducting. We are approaching the middle of that meeting, which will run through the end of May. The topic today is untangling the confusion on federated identity access controls and privacy. This is a very important topic, particularly now that we are in such a distributed mode and relying so extensively on federated access to provide our user community. Our institutions would access to a whole collection of diverse resources. This is also a very fraught issue in the sense that people have expressed a lot of opinions on it. This is really on work like RA-21 that often is not particularly well grounded, I think, in the specifics about the technology. There's a lot of misunderstanding about what's dictated by technology, what's dictated by policy, and how the two fit together. I think of anyone more authoritative and well qualified to speak to this than Ken Klangenstein. Ken has been advancing these technologies tirelessly since the early days of CNI and Internet too, and it's been a great pleasure and a great honor to work together with him over the years on these topics. I am just absolutely delighted to be able to welcome Ken to this virtual meeting. We will take questions at the end. Beth Seacrest will moderate those. You can type in questions by using the Q&A tool at the bottom of your screen. And please feel free to queue up questions at any point as they occur to you, and we'll just sort them all out at the end. But it's fine to put them in as we go along. So with that, welcome all, and I'm going to disappear and turn it over to Ken. Thank you, Cliff. Just want to check that the sounds coming through. All good. Good. Okay. And the title slide is up on the screen. So with that, if I can do the advancing. I guess I better go here. Okay. I want to talk a little bit about what's driving all of the developments that as Cliff indicated are now bubbling up in the environment. You see as our target and the target hasn't changed since 2000 when these ideas first started percolating up. But I want to talk in detail what those look like. What's coming along in terms of the infrastructure. Many of the pieces are in place sliding into place. I'm going to talk a little bit about the work that's ahead because there are still gaps. I don't know that this is going to finish on my watch but I love for it to arrive ultimately intact on that far shore and have an environment that appreciates our traditional interests in privacy while providing new levels of personalization and access control. So I don't think I've received a proper attention. And so I'd love to make sure that we give give a give some focus on that. And then one of those gaps is can the users really manage their privacy and we'll talk a little bit about what Daniel so love calls the privacy paradox about users wanting to have a lot of privacy but then giving it away for rubber squeeze So with that. Let's talk about the drivers for change. Certainly federated identity has taken a strong root in the internet. Whether you're asked to log on with your institutional credits credentials or with your Google account or your earth link account since there may be some people in this crowd who still do earth link or whatever other identity provider. The pattern is increasingly that you use an authentication at a single spot and leverage it at many different locations across the internet. Another major driver for change is protection of IPR and content. There are websites that this community is well aware of things like Cy Hub, which have stolen a massive amount of content from journals and the journal publishers are rightfully concerned about keeping their business alive so they can publish these kinds of research work. And so they'd like to stop that kind of bulk downloading that enables those kinds of IPR violations and federated identity is a part of that answer. With privacy opportunities with personalization, I can make the world look exactly like what you need on the screen without knowing who you are. I can take your color blindness, your other physical disabilities and make adaptive changes to the screens and the presentations of content without knowing exactly who has those kinds of characteristics. Finally, I can post comments and dialogues and have privacy anonymity persistent anonymity. All of the techniques that the trolls use in Russia can be used positively in other ways in in those kinds of conversations. I think the requirement now around compliance and with international and state regulations. Wouldn't it be nice if I could say national regulations as well as state for the US but I can't. But I can talk about, and we will talk briefly about GDPR. We'll talk a little bit more about what's happening up north in Canada because what they're doing I think of as the state of the art in privacy protection. So there are these compliance requirements. We all have them no let no legislation comes along these days that doesn't seem to have a compliance aspect. Attribute release friction. At this beginning in 2000 we didn't expect there to be so much friction about releasing attributes because attributes are the currency of this ecosystem and they need to flow and whether they flow on an institutional decision or on a user decision, they need to flow. And we've made one attempt in the federated community with the research and scholarship bundle or attributes, but that hasn't gotten the traction we hoped, and there was certainly needs for attribute bundles beyond the R&S bundle. And we'll talk about those in a second there's some interesting work happening being led by Heather Flanagan and others in the RA 21 cloud. And then there's a mistake we made in 2000 that we're paying the price for and we need to fix which is selective release of values from a multi valued attribute. When we first started designing group memberships in those early years of this development. We decided we'll stick all your group memberships in one attribute. How many could there be, and this sucker will never fly anyway so we don't have to worry. Well the suckers in the air. There are people who have 1000 group memberships. And right now with today's technology for relying party says, I want group memberships of this person so I can do access control, they may get all 1000. There's supposed to be privacy preserving. I'll come back to that. And finally, there's a number of visionaries out there who believe that transparency and user control are guiding principles for our society, regardless of the technologies. What do we want them freedom of the shelves this is that old ability to climb into some musty building, I guess they're not so musty anymore, and walk down the shelves and and look at content and have privacy, and have the ability at the same time to check books out and to make notes and all of the other things that we believe a free society should have. So, in the federated version of that we have a global set of identity and attribute providers. We have access control techniques to limited license content so that we recognize the business models of the world and they should be places where content is protected by some kind of gated community. So, there's a lot of free privacy preserving. That's what we set out to do. And I think we're there. And then finally, the compliance with the national and international regulations I can't say we set out to be compliant with those because they weren't around at the time but they've come along. So, here's a little drill down on each of those four categories for the identity providers. We want a world with more than Google. We want to build in there and Facebook and Amazon, but we also want universities we want your business addresses we want the earth links. Maybe we even want linkages to the national identity efforts that are going on no longer in this country. In Europe, there are efforts, especially in the northern European countries to build national identities that can be used for tax purposes for voting purposes, and for participating in community interactions, and perhaps even for accessing the kinds of content we're talking about today. That whole bundle of stuff is talked about as the IDIS activities in Europe and my guess is they'll be going slower because everything's about to go slow. And then we'd like to see a global set of attribute and badge providers and identity decorators people who don't do identity but decorate identity with verified attributes and credentials. It may be your membership in a professional society. It may be your accreditation from some service. It may be government and private sectors decorating your identity with stuff that would be useful in voting environments, such as your precincts. There are some capabilities being provided by medical doctors so that those adaptive screen technologies that I talked about early on can be done with you concealing your privacy but recognizing your need for adaptive screen presentations. Scalable access controls were a big part of the vision. And we've moved somewhere along the way. It may be the traditional create, read, update, and delete mechanisms of CRUD, but we also have needs for much finer grain controls. My poster child for this is Wikis. We're often familiar with a Wiki. If you want to have different access controls for different parts of the Wiki, so group memberships, for example, could determine which parts of the Wiki you chose you were committed to visit. We would need then to provide that kind of fine grain control. That is one of the holy grails we're aiming for is that kind of control over Wiki. It turns out when I talk about signaling that we don't have that piece in place. We do have tools in the toolbox. We use your affiliations as a student, faculty, staff, etc. We look at entitlements. I mean, entitlements tend to be permissions that are granted by the enterprise based upon a sharing of business logic with a resource provider. That's very common in the library space. Who can get to these journals? The journal publisher will agree with the institution on a set of rules. And then the institution will compute eligibility based upon those sets of rules and the attributes that they have about the user. But the attributes never leave the institution just entitlement that whoever this user is, they're permitted to access this content. Group memberships give us a much finer and more subtle mechanism for doing access control. We can, again, use your groups to say you can get to this part of the Wiki or that part of the Wiki because you're a member of the group. And then finally, some of the major infrastructure as a service platforms that serve the research, the science research community like Globus and TAC give very sophisticated access control mechanisms. So we're largely there on this piece. More needs to be done. But at the beginning, I think one of the participants in all this said, you know, group membership is going to solve 80% of the access control issues. That turned out to be correct. And so just having the group tools have been excellent. Obviously preserving approaches now the water gets muddier, even though initially we thought this was going to be the most straightforward path. Identifiers turn out to be a very complex space. They can be opaque. They can be transparent and email addresses often transparent. A opaque identifier is a legion in other parts of the world. They can be session based. And you get a new identifier every time you log in or open a window, or they can be persistent and you can have a identifier, still anonymous, but is available every time you log in and go to a site. Identifiers to be reassignable versus permanent that turns out to be very important within the access control space because if you're going to grant permissions on the basis of identifiers and an institution changes who that identifier belongs to you might be giving access to someone you don't intend to. It, it turned out to be a thick space it still is and, and it's some of the stuff that the RA 21 crowd is nobly wrestling with attributes we've learned need to be well managed, otherwise they grow like weeds. So the entitlements versus the groups distinction I made earlier attributes are often scoped. If you're going to say somebody is a member of a certain affiliation with an institution, what light do you have to speak for that institution. In some cases if you're Harvard and you're the registrar at Harvard, sure you can speak for that. But when you get to the five colleges, the Claremont colleges in, in the LA area, what any one of those five colleges may make assertions about being a participant of a different college than the one making the assertion. And those need to be permitted where appropriate. So we have to scope them. And then we have to make them have meaning on the wire.  And then if we're going to exchange them with other people, we need to find a lingua franca on the wire. And that will make the other side do a correct interpretation of the information they're receiving. Many, many years ago in the early design of the Internet, there was a one of the chivalrous as aware was be careful in what you send, be liberal in what you accept. And that has played out in terms of on the wire attributes as well. Out of those identifiers and attributes we build persona. And you can visit a website unauthenticated, authenticated but anonymous, authenticated but pseudo anonymous which says you may not be easily identified by people looking at the identifier, but it's the same identifier for the same person in this thread. So every time that identifier is used it's the same person making the comment. And then you can have verified credentials as well and that's the coin of the realm and many of the places where you need to have tight security, etc. And then all of these persona can be decorated with attributes and that's much of the work up ahead. And then once you have those decorations, building attribute based gated communities. I have a variant we might get to in demos at the end called the scholarly garage named after other shared the community activities and then the scholarly garage. It's a gated community but within there I can have identity I can have privacy I can make comments in a rich number of fashions relative to my identity. And finally I want to make the point that even if you're going with a fully private mindset in all of this stuff. A strong act of authentication is very helpful. So strong identity needs are out there, even if you only are focused on privacy. We want to make sure that the account has not been prolonged that even if the rest of the world doesn't know who this user is. It's been a fair mapping compliance. National international and community. So, almost everybody on on this webinar is familiar with GDP are Canadian stuff I want to introduce because people are not quite as familiar and I think the Canadians have nailed it. And then, at one point, several years ago, I was giving presentations at NIST about some work we would sell presentations at CNI about some work we were doing for NIST. NIST has a few survivors huddled in its wonderful old building in Gaithersburg and Boulder still trying to maintain the torch of advancing identity in the US. And then some states have stepped forward. Those of you in California have the California Consumer Privacy Act CCPA as something to work with. The other side of the coin is codes of conduct where you don't want necessarily compliance from some external source but you want a community to create its own rules and adhere to them. These are often then self asserted in terms of compliance. One of the ones that we've been looking for in our in our world is the refeds code of conduct refeds is the International Federal Army Federation space. I'll talk about that code of conduct in a second. And then another code of conduct that we're trying to normalize is around baseline expectations of how enterprises both IDPs, SPs and federated operators do their jobs properly. And then increasingly there's compliance activities that we need to do. And some of us are getting agreement or I about a reporting infrastructure in the institution and enterprise where there's almost a policy layer on top of these technology layers that would allow all of the reports that need to be generated with compliance to be done in a normative fashion versus a hand managed spreadsheet. GDPR I'm going to move through fairly quickly. Again, people are familiar with it. It only it affects a lot of US institutions because we have students who land in Europe and they're suddenly subject to GDPR. We have European students on our campuses subject to GDPR. So, lots of sensitivity to this stuff. I want to highlight the basis for release and purpose of use as key issues, because we're not doing enough of this. Every time an institution and an enterprise releases information to another third party, it has to record the basis for release of that. There's a limited six, I believe, bases for release. And it's something that we as identity providers and institutions need to be doing. And then those things may get audited to see if we did the proper basis for release. We are heavily reliant at this point on contract as a basis for release as a tool. And it's legitimate, but it's limited. The purpose of use stuff is interesting as well. It's required by GDPR that a user be informed of the purpose for which their data is being used. You'll see those fields in the consent demo I do at the end of this talk. You want to normalize those things. You want to have users understand what those various purposes of use tend to mean. The purposes of use have been developed in the advertising space, and they've been developed in healthcare, and they haven't been developed in other verticals, and it would be helpful to have that. Finally, GDPR talks about when is consent to be used and not to be used. That said, I want to segue into the Canadian activities where legislation called PAPEDA was created maybe 15 years ago as a personal information protection act in Canada. And then the model the Canadians use to implement in infrastructure around that legislation is to create a system of private identity providers, typically banks. And those identity providers have come together to create the Pan-Canadian Trust framework and DIAC, and they have drafted an elegant set of rules for acting in the digital economy. I particularly like their stuff because they dive into consent and notice. And again, it was part of the original vision of federated identity, and the Canadians get it. And where the Europeans tend to say legitimate interest, consent is hard, but the power ratio balances, the Canadians say consent will normally be sought. It's going to be opt-in. It's at the time of transaction. And it can either be persistent or just for that one time. You should be able to withdraw the consent. But it applies to future transactions. That's the right interpretation. You're not going to get the data that you released last year back. It should be explicit and in language that will be easily understood. And wouldn't it be nice if you had a privacy console where you could manage your privacy preferences? You'll see, I hope, all of those features in the demo at the end. Putting together the answer then from the piece parts that are coming along. We have baseline expectations as the first element to level the trust fabric, to move from a best effort environment to a shared expectations environment. Dynamic metadata because we succeeded. And so the metadata bundles have gotten huge, and we need to not ship them around anymore, but provide them on demand. We need IDP discovery. It happens as a result of dynamic metadata. It's an essential first step in the process. And the RA-21 software that we'll look at is doing that. Institutional and attribute release is the next element to get those attributes flowing and reduce that friction. You'll see that software in action. But there's still gaps in the metadata and signaling as with Wikis that I alluded to earlier. And then finally, there's a variety of community standards. Whereas a community, we need to take a deep breath and wait into. Some of those are what I call informed content so that users can make informed consent decisions, purposes of use, privacy policies. We need community taxonomies so that we have shared understandings of what's happening. We need applications to be a lot more aware of attributes versus grab all the identity that it can take. We need to be able to translate data minimization from a nice concept into which specific attributes are minimal and which ones are optional. So these are the five pieces that we'll talk about. We'll move progressively through this. The first three are well in hand. The next, the bottom two still needs some work. If we get all this together, what do we deliver? A privacy experience that can be managed by both the institution and the user. Which gives the user informed choices, but not intrusively allows the institution to manage access controls. We want users to have choice, but we want users not to be able to suppress negative information which we want, which the institution wants to transmit, like this user is not permitted to have this kind of capability. We want to address the cognitive load of the user. You'll see that in the screen design. We're very careful to keep the white space and the thinking opportunities. We want meaningful choice and we want to be able to do compliance. It's got a scale and hopefully it can be slid into places. What this won't deliver all the other ways that privacy is a threat. And it won't deliver the fact that users still express high importance to their privacy, but then give it away for bright shiny objects. Baseline expectations is something that is happening widely now, at least in the US in common has raised the bar. And institutions are now doing a consistent set of approaches. They might vary a tad by their own situations, but security patching the software. Operations who has access to signing keys incident handling. There's a violation of either relying party and is trapped back trace back to something that went wrong at your identity provider. Do you agree to participate in a diagnostic effort to handle that incident. Keep your metadata fresh provide privacy policies provide updated contact people. This baseline expectations has sections that address IDPs, SPs and federated operators. It began as an in common activity. I think around 2018 we rolled out be one of the two is now under active discussion and the in common website has pointed us to that. And that was a solid enough idea that we're trying to help the international Federation community adopt a similar set of requirements. And so there is a global conversation now going on in refeds about a global baseline standard. Now that'd be interesting because the variation in federations between countries is significant. The metadata rolling out as we speak. It's needed because the fields within each entity within the metadata have increased. The number of entities in the metadata have increased as well as their fields getting bigger. This is what the internet went through in the mid 90s when DNS came along. And doing this is creating some it's leaving some problems that identity providers had as the metadata bundle got very big. There are two elements of this approach. There's a query protocol get me my get me the metadata on this relying party I need it now. And then there are places that aggregate metadata and register authoritatively the metadata for various enterprises. All these things are sliding into place pretty nicely and in common in other federations. And the future one unfortunate aspect of this is that many many service providers used to depend upon that massive static metadata file to populate an identity provider list so you could find your identity provider can't do that. How do we solve that. Well that came along has come already 21 to solve that IDP discovery problem. We can use it to their identity provider. Today we have inconsistent experiences across sites. It wouldn't be nice if users know to go to a certain part of the screen or look for a certain icon and be able to select the identity provider that way. Again we want to solve the problems that dynamic metadata has created. The next stage of the R21 process. It comes in several different flavors. You'll see in an action in the demo. It works well and the different flavors give you different integrations and it looks like it's beginning to get traction and some major content providers have started to use. Attribute release consent notification. So even if you don't believe in consent, it's probably valid to do motivation. Let's see in this section here I'm supposed to look at the chat at the same time. So I'm attribute release. It wasn't supposed to be expect it wasn't. Okay Lisa I'm sorry I just got to your question. I'll make a note of that and get back to that and thrilled to have you as a participant in the session. So attribute release is the biggest friction in the federated landscape. It's something we didn't anticipate. Obviously because we expected the users to be in control and the consent pieces lag, but partially because institutions have been much more attribute retentive than we expected them to be. So that we made one attempt. The RNS tag. It's, it's gotten a nice step up from researchers needing access to covert data, but it still has limited penetration within the community. We're going to continue to push that other tags are under discussion as well on consent is not widely deployed, but we have a software that we developed with an end stick grant and internet to and most particularly Duke University. And I'll be demonstrating that software and it's capstone in that it gives users exactly the information and control over their privacy that we wanted to achieve a while. I'll just mention these they're happening as part of the RA 21 or refeds community. For those of you who know has a flan again. It's sometimes hard to know which hatches wearing when she's doing her good work. We're doing an authentication only bundle, you know, anonymous authorization bundle, typically an anonymous identifier decorated with some attributes and then synonymous support. Right now these all of these attribute release bundles will be self asserted that is you will assert as a relying party. That's what you need. You will assert as an IDP that you are responsive to these needs. They may be need be need for registration down the road user. The use of this. Well, the IDP can use these bundles to configure attribute release policies. Users can get a second set of recommendations for consent based upon these profiles. We can maybe guide contracts between libraries and content providers so that they start to use normative language about access controls. That's some of our hope for this work. So when one tool for attribute release mechanisms is called car it's a consent informed attribute release was indicated Duke's been the lead developer for this. It stresses the informed aspects of this. It provides self service. It translates the hideous names that we use for these attributes internally and identity management into something that might be more friendly to a user like your relationship to the university versus an affiliation things like that. Gifts fine-gain controls it records the basis for release provides revocation and interestingly it provides user not present mechanisms. So one of the glitches in our privacy as an institution is that we can have a student be enabled as furper and then we will not pass information in an attribute release bundle in real time to a relying party. But we don't apply for controls by and large to batch feeds to third parties. That's just outside the can of the identity management system. We have mechanisms now so that your consent choices can be applied when you're not there. And that can be used in attribute release situations. I wanted to show you a typical car screen. Again at the end if we have time I'd love to do a real time demo and move all these buttons around and show you the consequences of that. But a few things to note. Off on the right we have the logo of the relying party that I'm about to release attributes to in this case R and SRS. We have the privacy policy of that relying party. On the left side we have the sets of attributes that are being released. This is for an undergraduate going to a research site. Notice clear permit and deny buttons. Notice fine-gain control. Notice that the value of the attribute is being displayed so that if there's a wrong value you can't correct it in the consent screen that would be inappropriate. But you can make a note and have those values cleaned up in the institutional systems. The clear markers for permit and deny and then near the bottom in the bottom. Don't show the screen the next time I log in.  We'll suppress the screen going forward. If you want it to be the policy, you'll release policy unless the value being released changes for some reason, at which point you want to re-consent, we can do that too. So there's the suppression stuff save and continue affirmative actions as required by the DDAC, DIAC legislation. This is what the screen looks like when I'm going to another site, content or I'm doing this as a faculty member. And what I wanted to illustrate here is limited license access controls. So if you look at those first two attributes for departmental fund codes, it indicates that you're a member of the institute of those departments. And so you're able to get to Lexis or ICSPR based upon those permissions. Notice you can get there without revealing any personal identity. In this configuration on the screen right now, I'm showing my academic affiliations but nothing personally identifiable. So I can browse the shelves freely at Lexis and ICSPR without my identity being known. Again, the suppression screen on the end. This is my self service console. Here's my attribute release policies as they've been stored. And there's a manage button for each of these. And I can go in and change what's been stored for my attribute release policies. The last area that we have to be working on is the community standards for behavior. Provisioning of informed content. Today, much of the metadata that you saw in the consent screens for CAR were gleaned from the in common metadata. And we'd love to continue to do that. But some are gleaned from well known private, well known URLs, and some are not well harvested at all. We need to work on some of that stuff. The codes of conduct that I alluded to, you want to know that the relying party has disposed of attributes properly when they're done processing them. How can I do that? Well, code of conduct covers that but the code of conduct doesn't apply to us be one. There's supposed to be a version two that would apply to us being developed in Europe, but that has gone very slow. Even when we have those kinds of kinds of codes of conduct will have lots of issues about fine tuning that lofty premises in the codes of conduct. We need to understand what's minimum for data minimization. If I don't release an attribute. Does that have to break the application for it to be a required attribute or not? Geolocation is often something that we share inappropriately. When is geolocation required versus option? And then finally, users need to understand some of these privacy tradeoffs. The more privacy you have, perhaps the less functionality you'll get at the website. So what's the work ahead? We have to apply. We have to get this stuff actually deployed. RA-21's gaining traction, dynamic metadata has arrived, baseline expectations needs internationalization, attribute release and consent needs adoption on campuses, codes of conduct need development. We have to figure out some of these gaps about how do I signal attribute needs along. And finally, we have to find good ways for users to understand some of these tradeoffs. My guess is users of because of the years of working in Facebook and Google have at least a better knowledge of how their privacy is being spindled and mutilated, and maybe this will be an easier thing for them to understand. Finally, a set of references and then I'm going to turn this back to you Cliff and catch up on any Q&A. There's a set of videos on YouTube that I've recorded, including one in particular from the librarian perspective that talks about how I can get access control while maintaining maximal privacy. The baseline expectations work is happening both in common in v2 and in baseline expectations for refeds at v1 and finally appointed to seamless access. So I'm going to stop the share, I think temporarily Cliff and give this back to you for the Q&A. Thank you very much, Ken, for your presentation and your efforts helping to build this essential infrastructure and we will open it up now to Q&A if you have a question. But as Ken mentioned, he does have some demos to show if we don't have questions. I know Lisa had a pending question. I wasn't sure if you had covered that or not, Ken. Yeah, let me, let me, I just pulled that up. So what's gone away from static metadata bundle with dynamic metadata. So if I was a, if I was Elsevier, well, let me take a simpler case. If I was a journal or a resource that was just in the US, and I wanted to provide identity providers for users to select from, I would download the in common metadata typically once a day. I'd use that to populate a pull down list, maybe of four or 500 Institute identity providers, and the user would use that for the discovery process. When you begin to add edge again, there's now 2000 identity providers or so in that list, the print gets really small, the user experience begins to suck. And then there is no more single bundle, because it's too big. So I now have to have a list of pre populated identity providers or favorite identity providers. Or some mechanism of fetching my own preferred identity providers and these are each flavors of what are a 21 can help us do in terms of populating an identity providers selection for the user to pick. Does that help. Okay. And just give it a little bit of time to see if there's any more questions and Lisa says thank you yes. Great. Roger Schoenfeld says thanks Ken for this great presentation. Can you say a little bit more about the benefits for risks of these kinds of federated approaches that are ultimately controlled by the academic institutions versus some of the efforts being made by Research Gate and others to serve as a comprehensive identity instance independent of academia. Roger always, Roger always has a good curveball what can I say. Let's see. The, I guess I've always been all my life I've been deployed by institutions. And so it, I don't think Roger I can escape that mindset of you know the institution provides me with shelter salary and identity and often content that it's purchased for its scholarly community. And so I don't you know I recognize that independent services can spring up and I'd be curious to know what your sense is going to be of that stuff but I'm a creature of the university sigh. But Beth, you want to address this too. Oh, okay. I got a prompt on the screen that I didn't I've not seen before but zoom has changed a lot in the last few weeks. Okay, let's see. And Roger responds that's really helpful thank you. And let's see if there's anything else. I think we have time for your demos, Ken. Okay, I'm going to slide right into that. Let me go back to this chair. Okay, let's just confirm that people can see a choose your institution on the screen confirming great. So this is RA 21 as you can see from the copyright notice on the bottom. We have set up an environment called slice bread fact probably if we're going to do this demo. Let me share go back to my slides. So, let's see are we seeing a slice bread environment. Good.  And each has an attribute store typically a directory. They could be running ship they could be running actor they could be running active directory they could be running oh IDC as as their tool for provisioning identities. We don't care car is protocol agnostic it is a, excuse me consent as a service. We call the slice bread because I won't get into it there was a pun there a while ago. It's lost to the ages on the bottom of those triangles are various content providers that will be going to as part of the demo. So, screen sharing is stopped because that close. Let me share the right screen then for. Okay, so I hope I'm hopefully back now inside slice bread. Looking at the RA 21 service, which is listening to identity providers I'm going to pick. Well, let's see first I'm going to go to a resource and have this come up so let me go to the research or us screen. Resource provider and research or us says you need to pick an identity provided so it throws me here to access research or us. I'm going to pick castle amber. I'm going to go back to my identity provider I'm going to pick an identity I'm going to pick an undergraduate identity. I can clear previous permissions I got the usual stuff for identities and the display screen you saw earlier. I want to show you how the buttons move back and forth. Here's the purpose of use field right there that I was describing. If I don't release enough attributes research or us will not let me in. And then, but will what it will do if it's properly configured to say you didn't release the right attributes for access.  In this case, I'm going to release enough attributes to be able to get into research or us I'm going to even release my name so I can get a very nicely custom screen. If I wanted to see their privacy policy for research or us. There's their privacy. Sometimes they lose information so goes go back to here. I'm going to save and continue and then I should get to the site and notice that here's the set of attributes that has been received by research or us. I didn't release affiliation. If I had released affiliation, it would have gotten that attribute notice often the upper right hand corner it says it's personalized by sign out any E. And so it got my display name as an attribute in the process. I am in fact going to sign out. And then I'm going to go to a different site. And I'm going to pick my identity provider via R a 21. I'm going to be a particular faculty member that I just shown you. And again, here's the attributes that I can release. And if I release these attributes without identity. Notice I can get to Lexis nexus. Notice I can get to ICS PR. I don't know who I am just as I know. That's a very attractive situation in my mind to be able to get access to license content without revealing anything more than my affiliation with some academic departments. Federated identity, if it works the way it's supposed to work is good should allow me to go to other sites and log in. So if I go to the institutional site for salary and stuff. Notice I didn't have to log in again because I didn't log out. So this is just federated identity saying without you, you've done your single sign on. Here's the attribute you want to release. And again, show you those controls. This is interesting in that I can show sensitive information. This is part of what GDPR requires is that if I have sensitive information and some of my group memberships might be. Then it shouldn't come up on the screen unless I do a special click. That's an example of that. I can save and continue. And notice it got some information but I didn't release enough information for the payroll system to do any processing for that. Let's see. No, I still will say logged in. As a professor girdle. And I'm going to go and look at my set of privacy policies. So here I can manage what I release to places. So if I'm not comfortable with what I'm releasing to scholarly garage, I can come to this management screen and say here are the attributes we have in landscape. Here's your choices. Here's what your IDP recommends amber recommends an additional settings and way down at the bottom you'll see the while I'm away stuff that I was talking about for batch feeds, etc. There's a lot of other features I can show you. I don't think I want to. I can run a muck on this demo and it would be quite late, but I can assign permissions to individual users. For example, the faculty want to see but not be able to edit release policies that the institution provides wants to understand what the further guidelines are the registrar wants to know that I can create them as an order to implement policy formation stuff. Etc. Etc.  That was or to you best that was the demos and we'll take it from there. Lisa Hinshleff does have another question. It's certainly great to see that kind of transparency but it seems like this isn't user control per se, as much as user notification that they are being compelled to release their PII what's to stop an SP for demanding all the PII that's available, or is the thought that libraries will be negotiating to limit what the minimal release level is. Thank you, Lisa. And the answer is we're counting on the libraries to with librarians have a keen knowledge of privacy and the subtleties, and we're counting on the librarians to do that the attribute release that I talked about earlier that the RA-21 work is doing is exactly for that purpose. And if we get into the contracts then you know the other side of the coin by the way Lisa is that increasingly SP realize that the more data they have the more potential for data breaches they have. And they're trying to minimize data to some degree as well. So I think their interests are beginning to converge with the interests of the institution and the librarians to towards minimal disclosure, but it's certainly an area where we have a lot of work to do. Okay, and we do have some thank yous for people who either had to leave or whatever but Clifford has a question. Let's just have a quick question, Ken. That demo was just fascinating. And it's wonderful to see the amount of progress that's happened, particularly around the attribute control fundamentally. I guess the place where I take a little bit of a deep breath here is on the user education side. I have a very powerful, very detailed tool here. The question I'm struggling with and I love your views on is how much explanation, how much education is an institution going to need to do to allow a student or a faculty member to really make sense of what's going on here. Great question. Cliff, a couple of comments. One is that at least in terms of the car interface. It went through almost 40 iterations at Duke, where the wonderful people at Duke set up in a coffee shop, gave you a free cup of coffee if you'd play with it. Generally, and then asked a couple of questions to understand the level of comprehension. And they did it across age groups. And the results were very encouraging that people seem to be getting it, especially if we managed the cognitive load. What we have for managing that cognitive load is the presets that come up when you go to a site. Stuff, those presets are typically set by the institution, but they're malleable and again triggered by some of the attribute release bundles. And so the presets, if a user just wants to get to the gooey marshmallow at the end of authentication and attribute release, and they hit save and continue, things should work right. So the presets are set for privacy but functionality. And again, those can be set by the institution, however, it sees fit. Third comment on on on levels of users to manage this. I think sadly, you and I cliff are of a generation that wasn't born digital. And I, my guess is that for those coming up it's just, you know, these screens are annoyances but they understand what's kind of on there enough to get by but we'll see I hope we see over the fullness of time. Thanks, that's, that's helpful and you know I got to agree that the, the interface there is very nicely designed and very smooth that it shows that level of refinement in the, in the trials. And the one that I was sort of worried about a little more was there's an underlying, a little bit of an underlying conceptual model here that people have to get that, you know, you have an identity and it has attributes and it's passed around. And I, I'm, I'm, I have no data at all about whether people get that or not. Right, nor do I. And frankly, Cliff, it may well be culturally related as well. And so it may be that in the US where we've not developed a keen sense of privacy and been seduced by many bright shiny objects. And the underlying model that works and societies that have more orientation around privacy may have a better awareness of the model. Again, I sure hope we can get to discover this. Thank you so much, Ken. And I do. I really think implicitly here you've got a challenge for education where it's needed in your comment and I hope people will step up to that when it is needed. Thank you again. And I will just say that Lisa Hinchliff is chiming in, she says as an educator of the current generation, I share Cliff's concern on the user end question. And I believe that brings us to time and what to thank you so much Ken for your presentation today and remind others that we have more presentations tomorrow. So I hope you can join us for that. And thank you again today. Thank you. Applause. Absolutely super. Yes. Thank you. Thank you.