Hey guys, welcome back to my YouTube channel, Daniel Rosel here in Jerusalem, lovely day getting into night time here, it's on a setting across my window and I wanted to record a video today on a subject that I think might be of interest to people living in Israel and if you are living in Israel and you buy stuff from the internet, whether you're buying from AliExpress or eBay in particular but also from Amazon, Amazon is generally more streamlined than AliExpress and eBay from a customs clearance perspective but nevertheless you do have to sort of like be careful. Now obviously I just want to clarify I'm not recording this video from the perspective of a customs broker or an expert in this area by any means. What I do want to just get across is that when you hear people saying that customs can seize your modem at the airport or if you try to buy it online they're actually correct it can totally happen. I know this first hand because I attempted to buy last year a wireless doorbell and it was a whole epic saga it ended up falling into the hands of this derelict customs clearance company and I've been invited to participate in literally a class action lawsuit because they're so bad they never asked for this issure permit from Misrata Tikshoret. Nevertheless this can happen even if you've got a good customs forwarding agent you just have to be aware of it and what's going on behind the scenes. So really interesting article up on heraritz.com from Meirav Arlasanorov Arlasarov Arlasarov as in Arlasarov and Tel Aviv and she basically explains that you know Israel does have a reputation for being super bureaucratic at times and I've generally found it not to be so bad but I can see that there are areas where that reputation maybe is you know a bit more deserved than in other places and it seems to me like this is one of those areas that technically to do things by the book if your wireless equipment isn't already certified by Misrata Tikshoret the communications ministry then either you or your customs clearance broker needs to go through the process of applying for an issure, a permit, a fresh and Israelis are obsessed with issureim and issureim in English translates as you know permit but Israelis like love these you practically need an issureim to like raise a ruler on your desk in Israel that's an exaggeration. But she points out in this article that basically did you buy your kid a remote-controlled car toy on your last trip abroad actually let me just read from the lead it might sound funny that the Bluetooth headphone you bought abroad is illegal but that arcane law also pushes the prices and keeps consumers behind technologically. Now the law to which he's referring is the telegraph law of 1972 or that's when this law was last amended you can see up on the Kinesit website and some of the legislation I didn't go digging through it in Hebrew but the point that I do want to make is that wireless equipment and telegraphs might sound like something from the last century but it's actually very very relevant to today because wireless is a pretty broad category of electronics whether we're talking about wireless microphones or modems or as she said a remote controlled kid anything that uses some kind of wireless technology and that's a pretty big spectrum of different radio frequencies to operate could fall file of this legislation. So I did a little bit of digging and that's what I wanted to show you guys in this screen share and I'm doing this as a screen share because it wouldn't really be effective to try to explain something when there's pages on the internet so what you can do if you want to see what's going on if you've ordered something wireless and whether an issuer is going to be needed or not is go on to the website of Misrada Tikshorat and you'll find a page there that says in Hebrew baka shal issuer siyud al-khutih which means a request for the issuer the authorization of siyud al-khutih at wireless equipment. Now I'm just going to also highlight a bit of this page that says here in Hebrew meshech et-tipur be baka shot li-ishur hit'em hadhad pa'ami hu'ad 14 yeme'avodah be avur baka shot li-ishur hit'em t'ekufa ti'ad esgrim yeme'avodah so what that means is if it's a one time request for importing a wireless device they're processing time they're you know SLA if you will service level agreement is 14 business days and this form I think is really intended for importers but just saying that if you are looking for a recurring permit or something longer then it's going to be 20 and it mentions this life law the telegram telegram law of 1972 telecommunications law so um worth knowing now there is a video here and they actually do a pretty good job explaining what the situation is and just like kind of cluing people into the fact that so um what confuses me I'm not sure if this is actually intended for consumers because you can use this form as a personal there is you can actually feel like this form both as a customs professional and on behalf of yourself so the fact that there is space for to do the DIY approach kind of suggests to me that this is dual use and this video certainly makes it seem what they're saying is like if you buy a drone on the internet you want to bring it to Israel and you don't want it to get stuck in meches which is customs which is this caricature a guy so this little graphic is just showing the different types of things that could inadvertently fall under the category and it's just saying that it's explaining the purpose of this regulatory structure that you know they're trying to keep frequency separate and that's why even though this regulation seems very bureaucratic and very red tapish there is a reason for it so they're showing you know for example wi-fi is kept on its spectrum radio navigation equipment is kept on its separate spectrum cellular and drones are kept on a separate spectrum and that's the point of all this it's not to make life difficult for consumers it's just to make sure that everything coming in is you know going to be coordinated that you're not going to have interference between some guy operating a custom modem he bought on the internet and emergency response it wouldn't really happen because those are different frequencies but that's the purpose of a regulatory structure such as this excuse me I'm some chewing gum okay so saying that there is a quick oops wrong screen this thing is a quick mechanism for checking what is already approved so that you don't need to like do double work and it's also explaining that if you don't have something approved you can go and complete this form which I just did to see if there's any way I can try get that damn wireless intercom that got stuck the last people I spoke to were actually me so glad to take sure and they said because the customs guy never presented the request for sure it got stuck in some kind of bureaucratic black hole this is the class action lawsuit I've been invited to participate in so I just did this just out of curiosity if it will work I didn't want to order something new only to find that the request would be denied and I would just wait for more money attempting to get a wireless intercom in any event the video is explaining now how the form works and it's a six page form I just filled it out so I can tell you what kind of stuff it asked for in English in case this is helpful to people you it's going to ask you for basically so know the manufacturer I'm going to just make myself a little bit bigger here this is my first time I think I mentioned I'm doing like a few takes so I tend to like lose track of what I said in previous takes if I didn't already mention this is the first time I'm cropping myself in the webcam side of things so basically what you're going to need if you do want to do this form yourself which is could speed things up instead of doing it for the importer is you need to know the make and the manufacturer so whether you're bringing in a modem or let's say the wireless doorbell thing so at a minimum you should know the name of the manufacturer the name of the device one other tip that I would give again not as a customs pro but just as somebody who orders electronic gadgets aligned to Israel is what I frequently find good on websites like AliExpress is if there's an option not to include the batteries do that the batteries are considered a hazmat a hazardous material and you just create another possible point where things will go wrong if they're not properly labeled as hazmat so if there is like an option to not include batteries and source them locally that's typically what it will go for even though it's typically more expensive as well and the other thing you might need is a spec sheet so the purpose of this someone at Mibisrada Techshore they're just evaluating what frequency is being used and they're just going to check the spec sheet to make sure that what use that the information you're providing is accurate now how to find a spec sheet so you know if you're buying higher end equipment whether that's a some kind of wireless gear you can usually find that by searching for PDF so the way to do this one of the ways to do this is just going to show you quickly can be seven the ill-fated wireless doorbell and what it just did is just do file type PDF so that'll limit your search rules to PDF the reason I do this is because let's just look for another one like the gimbal I just got which I think would also be full under this legislation because technically it's a bluetooth device Ronin SC that's a gimbal by DJI go ahead and refresh this see what we've caught up here so there's a compatibility list and you might just find have a look through the various PDFs you can get on the internet there is a requirement that the file size be limited to four megabytes you might need to compress whatever PDF that you do locate in any event that's generally how I do it but what you can also do is just you know I've exported the product description from AliExpress where it has that section that talks about the wireless frequencies and in the case of this wireless intercom it said it's working over 2.4 GHz sorry 2.4 Wifi 801.11 BNG Wifi which is 2.4 GHz on the radio spectrum so you just need to research these things and look up the product descriptions data sheets that kind of stuff is what it's called and you'll generally find get something preferably official looking from the manufacturer that says it'll let the person of customs know exactly what it is that you're importing and how it works from a radio perspective where were we the nope that's my youtube that's my youtube ah yes so yeah I'm also asked for your your receipt so let's say you bought a you know a wireless microphone on AliExpress what you can do is just go and it's not going to come for a while and so what you can do is just you know send them the pro forma invoice if there's a field for an airway bill if you're doing something a bit more fancy and just you can attach those forms after you tell them the particular which is again what are you buying what is it is it an intercom is it a drone is it a router then the data sheets then the frequencies and I think that's about it but it is a pretty thorough process so that is basically the video Spain's artwork let me just show you before before I conclude over here so two things to show on my screen for a moment this is fun dealing with Israeli bureaucracy huh so this is a form as I said it's a six page form and as it also says you have fields basically for if you want to do a DIY approach the first question is the request what are you I tend to get the verbalization horrible when I'm just reading Hebrew and they're unfamiliar complicated words like these I know what they mean also word like a trade trade so you're a reseller basically one time import and so on so I'm not going to go through the whole form one thing I would point out is that they're often they leave an email address visible in the URL of these forms so you could probably send this address an email to follow up on your equipment it's just an idea what else so that's that that's the form and one final thing I do want to show is a resource that they have so if you go to Misrad Hatik Shored's the communication ministry just follow the link here from that from the from the website and what you can do there is a section here says you will see which means import of import of communications equipment okay so what you can do is click on this and the same same video is the same video you can see so you can see the point they're trying to make here look wireless doesn't mean just walkie talkies it can also mean wireless mice and same video and I can mean wireless keyboard it's pretty broad and I think it doesn't work through wired means so there's a section to this page that says it means important links in Hebrew and what you can see here is two good ones to know about so I'm going to read them off here you can see the the soft that received the sure the permit for resell use that's you got the shackle emoji next to the box sorry I'm reading from here so this is the items for personal import that received a sure from and they have them online here as a CSV or as a Excel Excel CSV is a comma separated values Excel Excel Excel spreadsheet format and there is also here and with this is where the X is these guys are not successful so you can see the ones that did get the sure and you can see the ones that didn't get the sure and the spirit of positivity let's go let's just take a quick look at those that did so if I want to go into the you can download these and this is on a website called data dot gov dot ill which is where the government releases data basically so you can click on the view icon let's say for this one and I can go in and actually see the data and it's organized if I move myself somewhere that won't disrupt this process like here you can see that it's organized by equipment type by by Yatran here is a manufacturer and Degam here is model so you can go through it and it's logically organized so these are the ones that did receive the sure so and the intercom section where you have products by Motorola, Shenzhen, Yuenbran, Hawaii and Google so I'm guessing I don't see my guy here I don't see the Ekin H7 whatever it's called Ekin something earlier so I'm guessing my ill-fated intercom just didn't make this or something so you can do that you can also download you can also filter the data and what you can do here is you can download also the XLSX and you can just open it up as a spreadsheet and just go through and you can see mechoniot shelet control mechanisms these are I think those are walkie-talkies if I'm not mistaken let's just take a look so you can really get under the hood of the customs people here and see what they have already approved and what not so that's quite good sorry jumping around between tabs so that's that and then the same process essentially for the ones that didn't receive you can look up Karthitsa Reshet sorry we're still on Chiquiblu Karthitsa Reshet we have network cards I'm not sure exactly what the modal is but you can look any of these up and see exactly what they are monitor I'm not sure that's a camcorder monitor etc etc etc and then you can cross check with the list Shalokiblu and again go into your XLSX format download it or view it online and you can even it even gives you ways to connect to it as an API and you can see again the ill-fated intercoms that were not approved and I'm not sure what the reasons are for this but so you can at least know where you stand that I guess if you have something that is on the approved list you can just go ahead and order there's no fear it's going to be stopped in customs you're going to pay for those custom brokerage and storage fees and if it's not then I guess you know not to order it and if it's in the indeterminate category either you or your customs agent can fill out the form by knowledge how I think this whole thing works so hope this video was useful interesting systems they have in Israel regarding everything bureaucratic I have not to date received my wireless doorbell but I think it's good that they do as much as this system is bureaucratic I think it's good that they communicate the reason and I think it's good that they liberate this data for public consumption so you can just go ahead and look up yourself on the customs website data.gov.il the data website you can just see for yourself what they've already allowed and what they've already restricted and proceed accordingly hope this video was useful thank you guys for watching if you'd like more videos on topics such as this living in Israel Linux technology wireless doorbells video equipment feel free to subscribe thanks for watching guys


Alright, what's up everybody? This is allure hockey one-pack break Number three random team sold out at the end of this break. We will randomize the top 12 names will win a spot each in gold rush hockey break number two Just so everyone knows the 12 spots given away will be at the end of the break. This randomizer is just for the one-pack break of Allure So let's roll the dice and go seven times three and a four one two three four five six and seven Nick Olyse down to Scott 70 and seven times on the teams all 31 teams in One two three do they really four five? I've never seen the movie. I know Chris Pine isn't it right six? And seven Nicholas D Jets Jeremy blues Edwin lightning Eric Canadians rich flyers Joey wild Scott Canucks rich devils Todd Oilers Joey predators Tony avalanche Joey Islanders and sharks Mike flames Jack ducks Gotta fix my posture Joe stars Jonathan Leafs Joey Kings Richard Capitals Kevin Knights Nicholas Jackets blue Jackets Adam Sabres Nicholas Redwings Richard with the Panthers Kevin with coyotes Richard with the Hurricanes Nicholas with the penguins Richard with the Senators Kevin with the Bruins Jonathan with the Rangers and Scott with the Blackhawks So it's not gonna be any trade. So I'm gonna just go ahead and rip it since it's only a one-pack break Not sure if we've anything in this box of allure either. So who knows what? Plays upon us, but this break is really to give away 12 spots. Let's be honest. I should put trade buddy close just in case Yeah, random access memories is such a good album. I love the when they win the Grammy for best album Taylor Swiss reaction is pretty good Because they say Talk about later Matthew Barzol Mark Shifoli carry price. There's a relic auto Quinn Hughes. I think that's actually a pretty nice one. I Don't have a one-pack break it definitely Scott J with the Vancouver Canucks 36 out of 99 Nice one and then we got a Seth Jones So that was the one-pack break. Remember, let's randomize all All the customer names one more time and the top 12 will each win Spots in Gold rush hockey, which is coming up next reroll the dice three times Actually kind of like Taylor Swift. I Am in a paparazzi photo with her though, so maybe I'm a little biased top 12 one two and three It's in a variety of magazines, including maybe variety. I don't know There's a top 12 Congrats all these folks one spots Joey Jeremy rich got to Jack Joey for two rich Jonathan Scott rich and Kevin Congrats guys Thanks, everybody. Sorry to those who do not win spots, but one more gold rush hockey posted Check it out. Jasper's case breaks calm


Hello and welcome to the session. Let us understand the following question which says, find the absolute maximum and minimum values of the function f given by fx is equal to cos square x plus sin x double 0 and pi c drawn to the solution.


d like to say about the slide in particular and the evidence is anecdotal but it's expected to be a revenue producer because it is expected that it will attract people from outside the community in addition to our own community users thank you run we do have a lot of pictures of slide yeah a lot of different angles i know try to keep your packet fun it's my job other questions comments concerns and i'll just say too that certainly i would feel strongly as we've represented that body throughout that there will be i don't think this body is expressed any interesting getting into taking our pencils out and specifically engineering things that we will leave that to conversations and consultation for staff with the engineers and and with those vested community interested parties so you know we'll try not to make decisions like that where we take a public process apart and suddenly start taking authorship now removing stuff that's part of our job um okay can we go back to trailing through uh progress funding timelines and kind of walk through i think maybe what i i just think i mean the ultimate question is i mean i'm hearing some some ideas about coalescence around perhaps what is a base amount and then having a fundraising level is that a widely accepted concept that people would like to explore and additionally i think it's really hard for us to assume a number that right outside consultants weigh in on that one okay so i think that that's that critical piece of information i think expressing that to them that that's a conversation that's being had would be a feasibility fundraising feasibility number yeah i'm sorry yeah i think getting an understanding what they think their own capacity is and you know unfortunately i don't i'm just not a professional field i've operated in the rest of you but it's you know i think i think that's something that we'd have to be really thoughtful about in terms of how we set our number on hand in another one but well i think we've also talked about some blunders that have happened in other locations as well so i think my big point of concern is that even if we're told the number that people feel very confident about and we were a bond for a number based on what we're told and it comes in under then we all of a sudden don't have the money that we need to actually build the pool right um that's a big concern of mine so i don't well that's why it's i think it's important to figure out which pieces of this could be directly tied to fundraising and so i guess within that too um yeah i don't know if there are if we could get info from other municipalities that have done similar projects where there was private fundraising around and how they kind of picked and arrived or you know what how they landed on the numbers they decided to be an actual bond vote but that really depends on your local capacity and how many other campaigns are going on and all these factors so it's kind of hard to compare apples and apples yeah i guess i'm i'm with christine and saying that we can pair it down and say these are the things if they want to be in it then that's the fund rate private fundraising but this is going to be the cost of the pool assuming no fundraising for the pool we want to build and that's what's going to be on the bond vote yeah yeah like that yeah i'd like to recommend that when this comes back we have analysis of the community service department sort of strategy thinking about service provision over the next few years can you say a little more about that yep sure i think similar to spending a lot of money on one infrastructure project we need to understand the ripple effect or potential capacity that we have to invest further from an operation standpoint an infrastructure standpoint in the other community services yeah i just there's lots of conversations taking place that we don't hear about so i just want to point out that there's anything else that's kind of been in the hopper that's been a big topic at the community service commission standpoint that having those come forward now from a value perspective would be very helpful um so you know if the if we're going to have this vote and then six months later also have a proposal to open up a new portion of the department that requires two staff and this is why we think that's a really great idea i'm not asking for competing ideas to come out of nowhere i just it would be nice to hear what kind of strategic thinking or conversations have been going on from a expenditure potential standpoint sure we have an issue with that that's not a conversation we've explored at all in this process um we've kind of gone forward saying we've had a pool we're going to figure out how to replace it and it's something that we've gotten a lot of feedback from community members on i think that conversation warrants at least being surfaced other items people want back are we setting a timeline for when this is happening so i think the from a funding perspective you guys want to go ahead no no go ahead from a funding timeline perspective um you know we've got moved to a bond vote there's a couple natural opportunities that to be thought of any thinking so far behind the way that might stack up especially given the previous conversation we had this evening so the an option for you i think we talked about this briefly at our last meeting is um with your pass vote on main street that go no go decision will be coming back to you in august is our current one that we expect to get those funding packages wrapped up um that leaves on august primary date for potential bond vote if you wanted to marry up those two go no go decisions um there's obviously also an opportunity at the November election that would give if the if the council spent the next two or three months kind of coming to agreement with the fundraising committee about what those base rates were going to be in projections that would give a couple of more months to the fundraising committee to raise some of those funds in advance of a bond vote in november um and then of course there's always a time meeting day vote in march which would give more months for fundraising um i think the question becomes do you want to see demonstration of fundraising before you put it to bond or after um i think um i think what we understood from mark is with uh august vote um we could go through um engineering and bidding to start construction sometime during the following summer if we may wait beyond that we would be into the summer of 2021 i think it's totally reasonable to be able to move forward on august i do too i think that's a decent approach and i think you could yeah figure out talking to people about the political summer times of independence there's certainly a political advantage from a conversational standpoint you know i think with christine's idea too we don't need to wait to see fundraising coming in because of the way we're structuring that so we don't need to give additional months for the committee to do that and if the fundraising committee exceeds the features and raises revenue that could be you know we're bonding up to an amount we're not obligated to spend everything we i think that we can talk about i i want a little pressure put on them though i don't you know i'm from a just a logistic standpoint i think we need to make it clear that there's going to be some stuff locked off if there's not money because when people see a bond vote pass it's kind of like do we really need to do anything now um and the answer in the expectation is yes absolutely that's yeah so you want a slide goodbye we're sitting in a full of that meaning um yeah so i guess i would feel comfortable is um or would ask that we set that we would want to do so in august yeah and then the timeline for the other pieces we talked about tonight we'll just have to pan out between that one then do you guys anything else from us tonight on that set of direction move forward with i think we're coming i think there are some items that would be good to hear back on like next meeting if possible so we can't come back to you next meeting with this um brain's going to be out of town for a little while um so i think the soonest we could come back to you on some of these projections is may 7th um and i think at that time we should also we will also come back to you with a assuming an august ballot vote backing out from that deadline um necessity resolution votes etc etc etc yep so good thank you all thank you thanks for all the work in time and really i mean we don't say this is probably enough great job in following up and addressing the questions that were asked thanks for asking in a thoughtful way thank you thanks for all that time and work we appreciate it okay um item and approval fund loan fund balance okay loan fund balance allocation cloud exchange server solution so this is a conversation that has gone it's going back to last summer when we when you allocated fy 16 fund balance and we talked about the need to update some of our technology solutions so um since then we have done some work with um our existing it vendor and our leadership team to really identify the goals we were looking for um and put a recommendation into place so just for context or history we have two pretty outdated systems we have a server here at city hall that serves only non-public safety city hall files public safety because of their security requirements has a completely separate system um so we have one server here that's very aging that's aging and that we need to either replace or find another solution for and then as you all know we use the free gmail business accounts so we have two challenges in front of us one we need to do something with that server two we have maxed out our email accounts so we are making staffing decisions based on who needs email and who doesn't which is in modern day and age not a great way great way to function so with our it vendor we have identified a cloud solution so we would undo the onsite servers we would move all of our data storage to a cloud solution um this presents a huge opportunities actually for staff right now for example john rousher and ryan can't share files ryan sits at public works and john is here so they're emailing back and forth documents as opposed being able to work off the same documents um it also would allow us to be at our computers anywhere where we have internet access so if we were at a partner's office or it was a snow day and we were working from home we could function just as if we were in city hall so it solves that problem simquestor it vendor also hosts an exchange server in the cloud so we could move to an email exchange server and have unlimited emails as long as we are paying the user amount a month so we think this solution meets all of those leadership goals what we're asking for tonight is approval to use 28,849 of fy 17 fund balance to fund the one-time migration costs of migrating all of our data that's currently on the server to the cloud and migrating everything we currently have either in google docs or in our email account to the either our server or our email solution in the cloud we have budgeted into the fy 19 budget um the annual maintenance costs associated with this solution you will see in the memo presented that we are proposing a migrated solution in the future so what we have budgeted for fy 19 and are proposing now covers everybody who currently is on our system for fy 20 we're recommending using moving basically bringing in all of our part-time firefighters and then in fy 21 bringing in all of our public safety officers police and dispatch um assuming dispatch is still with us so that would be an increase in future years but we can cover current costs with what is budgeted so the 28,000 29,000 is really those one-time migration costs and if you decide to allocate those dollars tonight we'll still have a 367 thousand dollar balance in our fy 17 fund balance account um that we can decide over the next months how to use right this is one that um we've actually been talking about for about eight years um now in terms of something that's been sorely needed so um it's been a running conversation for a while and we've actually declined spending the money a couple times because of some tight budgets um fund balance is left over money from the previous year right we haven't had that discussion really other than here and so it's an opportunity a little lot of cases to spend on one-time expense things that doesn't build structural debt deficit into the budget for the next year so that's what jessie took care to address the ongoing operational expense i have a historic question so i'm all about moving to the cloud you should absolutely do that this migration fee looks fine to me were there competitive bids though against some quests because the monthly cost there seems high to me um we bid this service um go i'm looking for antelosh who's not here but this service in 2015 or 16 for some quest um and because we have the existing contract with them we look to them for us uh the the cloud solution as we rebid their work annually we will now then be rebidding a cloud solution okay does that make sense yeah it does other questions concerns comments helps you guys do your job is better makes us more in operation and gives you some expanded flexibility let's email addresses for staff yeah that makes sense is that needed today any questions from council any questions or concerns from the public so i will note just one final paragraph here um so if we move forward tonight we think we can some quests indicated they can do this before the end of the year we will have about a 36 hour window where they do the final um testing over a weekend so we will be down for a weekend any comments questions from council seeing here you now entertain a motion for approval of the allocation of fund balance for the cloud exchange service solution presented this evening so okay motion by eric second by the colonny for the discussion seeing here none all those in favor please say aye and those opposed motion carries thank you all discussion local emergency operations plan hi chief two minutes or so this is um i'm going to maybe steal john's thunder here um so we come to you every year for the approval of this it's required that you approve our local emergency operations plan what you have before you is a state required template there's actually this is the extended template that we think has more brings more assets with it there is a four page template we could have provided that would have been simpler but not given us the depth we need to really manage emergencies so it's on as a discussion item happy to answer questions about it once it's approved and submitted to the state we also do intend to do a series of tabletop exercises with our staff to make sure everyone's kind of trained up in how we manage emergency situations very well are there any changes this year over last year but i'm the form the format is much different last year was a five page document and this longer version allows us to create a workflow just more detail more detail operationally speaking are there changes i think the communications piece is a big change with firing a communications coordinator he's put into place some very prescribed processes to issue nixels press releases emergency notifications etc and so john took those policies and embedded them in this so lots of pieces floating out on the call i guess to kind of answer you know the changes are we're taking a lot of pieces and putting it into one workflow the only specific one that i had is i'm assuming we've added the translation services especially that's an issue that you know we've had discussions about previously against best practices for our region available resources yes and those have been developed with our partners at alv and vrp as well direct communication now just add in to is what you'll see every year is there's a larger regional hazard mitigation disaster response plan that we're also part of it's very comprehensive for the county because it's very rare that we're the only ones responding to any kind of emergency yeah so that's a five-year plan in the all hazard this is our local one that's annual yeah so this will as counselors change as staff changes this will constantly it's a live document any questions for john in regards to what you read it was really good reading right it means you did a great job and i think it's really clear thank you any questions comments concerns from the public okay so seeing and hearing none um thank you very much appreciate all your work on it i think that's important thing and of course again people rarely get excited about had our emergency response plans and things like that until they really need them to work and function so thank you for all your work there just make sure life's a lot easier i think i mean i think it's great that you move to a greater level of detail so that it's a actually useful tool for staff i agree thank you thanks thank you thank you all right up next is city council liaison assignments no we've all been waiting for more stuff to do um so as we've kind of described and talked through with this body a number of times each um year li liaisons are selected for are volunteered for most cases for um commissions and i'll say strategic vision areas is really the way we're trying to start really thinking about things um so we've got the community service commission public safety public works um available in terms of counselors planning commission um is mayor by charter um and then by default i've been at housing um i'm gonna recommend given the interest from this group here that that we think about having another counselor come to that um because i think it would be really helpful to see what those are um the thing i would warn against is it gets a little uncomfortable if there's more than um two counselors or me and a counselor in a room um it doesn't violate open meeting laws it's a real misnomer just because we're all at the same meeting if we're not directly engaged in policy but it becomes difficult to separate um and not ideal um so i would recommend that if somebody's really interested in that they express that this evening too um so i was the housing commission meet uh the mondays that we don't uh last monday of the month the last monday of the month yes fourth monday oh good fourth monday of the month good point you could have a you could have a five on that that's why i missed that one and then there's the administration liaison did you say that i i did not get there yet i was seeing though i missed that going on the next page you're right yes absolutely and then we've also beyond that we've got um the downtown onuski um by charter has a city council member liaison and the coalition for safe and peaceful community which is actually now uh as we heard from their update the partnership for change also in their charter partnership partnership for prevention i'm sorry about that what yeah what a fault um and uh mayor's coalition rpc we're going to have a conversation about the alternate out the rpc and we're not going to do that tonight um that's a common attraction so i'm gonna open it up and see if folks have had time to think about what their areas are you know what we've said in the past is it's really good for people to move around from time to time um and i don't know if existing well you've you've moved um want to speak to the value of that or anything either of you want to add from your experiences uh yeah so well before i became a counselor i was on the community services commission um and then i did two years i think um public safety and then one year uh as leads on to administration and um definitely find it to be um very useful in terms of better understanding the work of the department and the the um perspectives of community members on um specific issues within that department um i'm not sure how i feel about every year changing because i do think there's a learning curve associated with taking on a new department and some commissions i think do more than others um so uh just in terms of the meat of the engine have more active periods of time active periods um they all do the same so um so i just i think it's it is a useful um role that we played as a service liaison to those commissions and um i don't know that it necessarily has to be an area of interest um but uh that helps too and the only thing we try to clarify in this um what we're going to let's all do this the same way sit at the table feel free to engage in conversation discussion you're not voting um and just try to be respectful of the fact that this is their opportunity to help shape policy it's not our job to come in with the policy and say here's what we want you to here's the outcome we want you to reach um now make sure you get there um that's something that process works and the one exception to that will be i am still not going to sit with the planning commission because they have a different state authority so just add to that i do you know as leadership team was talking about these commissions and the new council and appointments i think one of the things that would be helpful for us moving forward is that the staff liaison each commission has a staff member appointed and the council liaison do work hand in hand in and ensuring that the policy extension arms the commissions are doing the work the council wants to see and that are not not necessarily are bringing back a specific policy but are bringing back recommendations and data for you all that you believe your body wants to see i think sometimes we as staff feel put in the position of having to um be your spokespeople and it would be which is fine and our job is to implement your vision but it would be helpful as the if the council liaisons can can help take that help carry that mantle of what the council is looking for from the commissions it's a good point it's a delicate balance delicate balance yeah i i think that that we could be more intentional on what the process by which we send things to commission um i think it would be helpful for us to think about that when we do our retreat i think we've made some improvements on that in the last year at the recommendation of the group last year i thought that was a really good feedback i think we've tried to be but have leaps and bounds yet to go so it's a really good point of things for our retreat all right so let's open it up who's interested in what well let's put on the table i i just uh haven't been elected came off of the community service commission so it just seems natural that i would continue as i've only been on for us in two years to be the liaison for that going once going twice i think i mean i think your voice is a really valuable asset there and i would agree that having not spent a ton of you know a long this is on there that you've got to start at being really effective and that makes a lot of sense raise cheering in the background we're gonna do staff is going to start you would have cheered with any one of these amazing people so then i would so the hard part few is uh nicole switched last year in your one-year into administration you came on last year um your one year into public safety um how do you feel about infrastructure and public works christine i'm actually interested in this that's our new communications person for the main street revitalization that's great i would like to go to housing commission i think i probably should given my interest um and that's uh monday's are workable for me for my scheduling that's always been a challenge also there's six thirty years aren't they are they six thirties or six there's six until eight yeah okay sorry generally doable i'd be interested in adding on being the liaison to downtown wedeski if nobody else is especially interested in it thank you very much any of anybody else clamoring for that one okay eric can have it so we'll have that conversation um doesn't have to be um this way in a lot of cases in the past the person who because of the focuses of what was formerly the wedeski college for a safe peaceful community is now the partnership for prevention there has tended to be a crossover with community services and a lot of cases the person who did that liaisonship would also be their board liaison makes sense is it with you are you comfortable with that i believe that they meet once a month or once every other month even it might be once every other month now it's it's actually an organized board though with um okay yeah which i wasn't in this case in the past i have to admit that the fourth monday this one time on vacation it's April vacation week so would i be contacted by them we'll take care of that okay good yeah yeah we'll take care of that that's great and then we'll come back to everybody um there is one item on here i want to point out that we've had some strategic conversations about number one i'm going to bring back regional planning commission alternate we need to grow another some folks on our planning commission and i think we've got a couple people who have expressed some interest in that so we've just got to work through that with i haven't talked to staff a lot about that we are having conversations on the green mountain transit board piece that board position has been a real for some odd reason the transportation entity in the state thinks it's a good idea to hold their meetings all over different locations and i'm voicing frustration publicly that i voice to them um at 10 a.m. in the morning um in the middle of people's work day so we have had a rotating cast of people volunteer and not be able to keep up with that because they have jobs and responsibilities um so and because of some of the operational nature of it we've had a discussion about appointing a staff member potentially for that and when everybody knows that could be a proposal that comes up i think it's fair if you want to say hey try to find a staff member who's also a resident that would be a good you know thing um from a user perspective to have and then have the alternate be a resident who we are keeping in in check and having that so if there is no concern with that we'll probably keep pursuing that conversation generally but there's some interviews coming up anybody have an issue with that it's an important board and one that we suffer when there's not a perspective on there questions concerns comments from the public so did i did i miss it that nicole you you're gonna stay with me and do the housing so she is but from a formal perspective because it's a planning commission commission i stay on so she's got like i don't know an informal secondary liaison or alternate to the housing commission about that and then we're gonna we're gonna bring on a planning commission alternate too so we'll have all kinds of alternates and liaisons that will be a well-guided group questions concerns comments or somebody would take the mayor's coalition and sound okay okay so we actually have uh a well it's it's on as a discussion uh if we could just put that listing formally into the consent engine next time that'd be great thank you so i will do that but in the meantime since there are meetings next week we will inform kind of the new liaisons before the appointment we'll do intros for you to calci and and everyone and brian and then we'll do intros to kate and everybody for you for for those subgroups okay awesome thank you all it's a great opportunity hope you enjoy if you've got questions the other thing that i usually ask is if you're not able to make a meeting it's important for our perspective to be there if you could please let me know um i'll generally try to sweep in so i've covered a couple in the last few months for example where counselors couldn't make it okay so i'll i'll pop in and nothing better to do okay uh item q city council f 35 potential action and consideration of a resolution um so i put together this document and shared with you the link to the past statements by the city council so um this is an item that we've talked about quite a bit so i think i'm just going to step right aside and see if there's a sense we've got you know a resolution that was passed in berlington it's going to be up for consideration on the 16th what we've had some residents express interest in seeing us do is putting forward a supportive resolution to that um and i think what i tried to put in here and one of the i guess it's option number two is what it's now being called out in the world um is there are some three points that you we could write up very easily um i would need a lot of guidance from you on putting the other language on that to bring a resolution back next monday that could be supportive of that um so you know what this document outlines is we could do nothing um we've said a lot about the issue and just rest on that um we could um form a request that brilliant south berlin another interest committee to submit a joint resolution there for us you know we could make that um i would want your consent to do it before really diving into those conversations because then it's going to be a negotiational language that you won't see until it gets churned out um and then the the other option is the supportive resolution um and i guess the fourth option that i thought i put on here but i apparently probably did at some point is um you know you could go you could go head in and reopen the whole issue and have research and study and legal work done and use bandwidth that we don't really have right now on staff so that's an option though um that you could consider so thoughts concerns i'd like to submit a supporting resolution along with berlington okay what do you think of those content points is there anything you would change or feel like needs to be so that would be the bullet two would that be the yeah i i support that thank you yeah i think we've said it well in the past and we can say it again with the content you've outlined i don't think anything i don't feel like my position has changed based on our previous discussions so the previous resolutions we passed i i think the only thing that's missing in the study bullet points is wouldn't we be making a statement to the effect of like you know berlington before this resolution with this language like we support that also we support they guard here's our past statements etc yeah i think it would be uh it i mean it'd be me too it'd be um berlington's asking you for something that we've actually previously asked you for yeah so as a community we were taking this opportunity to point back and say we've also asked you for that so we hope that you will consider a given there the the land you know just to be blunt south berlington's talking about the same thing tonight um and i i venture a guest will probably move something similar um you know we'll see but um yeah so it'll reference those yeah okay mm-hmm yeah thank you and um i think the concern is that the berlington resolution language is a little bit tempered so they didn't use the exact language that was on the ballot they request an alternate mission but they're not requesting a cancellation of the basing so what we would be hoping for from when you see would be a little bit just clear resolution that is really clear that we want to cancel the basing and we request instead um low level equipment um i know one of our group members has created his own resolution that i think we will work you tomorrow within our group and maybe pass along to some history or review and what you've created is quite long and just kind of reviews a lot of the concerns in the data and the history of what this council has already put forward um so it might be handy and i'll be laid out there for you or you might not want to just come up with your own language but i think just a really clear statement saying we don't think this is good for our community and we're really concerned about the health and safety effects of the planes and uh thank you thank you and i think there's uh just a couple items on it the resolution that was submitted you know with all due respect to the author has some um what i would say challenging to substanti items in there that we want to um that i i know i would trying to put it into a draft form on the timeline that Ron might be challenging but um we will ensure that everybody's had an opportunity to see that um in that language and be sure that it's shared i'd asked him to share i'm assuming it's Jimmy you're talking about but it it's and you know i'd asked him to go ahead and share that with the full council too as they have it i'll check with them to see if they haven't that they do have to see it yeah okay in the crux of our previous resolutions that we'd be pointing to the the final statements the their force have been we're requesting that the airport be removed from this round of basing um and our questions and concerns have not been addressed or answered substantially um so if we're doing the revert back to those items they say a number of other things and raise individual concerns but those are really the central their force so that would that would be what that language would would probably look like thank you thanks for your time and obviously on this show yeah i just have one question about because i think you have like that you would send a resolution to the airport and then but the third bullet point there is reiterated the congressional delegation and responsibility to ensure as many tools as possible are available in the so in the last resolution we passed we actually um singled them out and said um you have been supportive of this initiative and as such um we entrust that you've also signed yourself up for the responsibility of pursuing any kind of offsetting any impact offsetting measures that are available be that through the f a a or other means um and that was important because we didn't want to just limit the scope to saying well go to the f a a that there that there be a commitment there to take concrete steps which to my knowledge we have not we have not heard from them um so that's that's what was the previous kind of tone around that was yeah i just yeah because i think a whole other tactic would be an additional resolution to the congressional delegation i'm sure you've been mm-hmm that's what you talked about yeah i'm not necessarily regarding yeah thank you other questions or concerns so i'm hearing marching orders to come back with a resolution that hits those bullet points and reflects that okay that's you bet all right next up this evening we have um discussion of resolution opposing inclusion of citizenship question of the 2020 census um this was actually a resolution with language submitted by councilor clevy so i'm going to turn it over to him yeah i think the resolution is pretty self-explanatory and so i think what i'll do is rather than just belabor and drawn on like i usually do i'll just do what seth does when he has resolution and read it and then if folks have questions we can dive in that work please so whereas the u.s constitution requires the census every 10 years to count each and every persons in the country regardless of age race gender ethnicity or citizenship status whereas the vital data collected by the census is used to determine important functions of our democracy such as the drawing of legislative districts congressional seat assignments and electoral college makeup in addition to how federal funding allocation decisions are made and how local and state government makes important policy determinations whereas accurate population data is crucial in ensuring that these important decisions are made appropriately whereas when uski is the most diverse community in vermont home to many new american and immigrant community members whereas commerce secretary wilbur ross announced that he is directing the census bureau to ask all respondents to the 2020 census to report their citizenship status whereas a heightened fear caused by recent increases in civil immigration enforcement and deportation activities has created an environment of distrust and a decline in participation or interaction with government services for many whereas inclusion of a citizenship question on the 2020 census is likely to severely depress participation leading to inaccurate total population counts whereas when uski is the recipient of federal and state funding determined by population data and inaccurate population counts could have significant harmful impacts to when uski residents through potential threats to future funding whereas when uski and state of vermont policymakers and government employees are reliant on accurate population counts and census data to inform local and state policy decisions that have significant impacts on the lives of community members therefore be it resolved that the when uski city council requests that one commerce secretary wilbur ross and the commerce department modify their position and direct the census bureau not to include a citizenship question on the 2020 census two congress passed legislation to override the commerce department's decision to include a citizenship question on the 2020 census using its basic authority under the constitution three the president and administration officials commit publicly to uphold the census acts basic privacy and confidentiality protections including instructing federal agencies not to request from the census bureau or use personal information collected by the census bureau for their own operations questions concerns comments from council so who would this be submitted to i any folks named in the action items and i don't know the proper channels we can figure that out potas at us dot so i'll come what i'll say too is is and i'm not speaking out of school in regards to the specific the specific resolution in the past in a lot of cases we have not taken up resolutions like this um under practice it's a newly comprised body and i think it's important for people to have an opportunity to kind of figure that out as a group in a body i think this is an important issue personally um so it's it's i'm not reflecting on the issue in any way shape or form but just in case that was a road that you're interested in going down i think there's going to be time and space for that conversation especially when we get to the strategic body about what kinds of statements you guys want to see come forward on what issues and what i think that's something that we've got to figure out and fill out because i knew where the last council stood on it that wasn't confusing this is a new body and it's a new day and we want to be respectful and responsible about what various interests are especially in the beginning and then we'll all kind of hit a groove hopefully that makes sense yeah i mean i i my general bias is not to make political statements and um so some of this feels political by like calling out specific individuals and government actors um so but you know we've also got the zep 35 stuff that we've done and we've directed that to the air force so i guess we don't have a but that's not been tied to a specific administration that's been tied to multiple administrations have been working towards this this formal standing in a process that unfolded right that we're making continuous conversations on where the community has weighed in pretty i would argue that is clearly in terms of the the the direct impact on the community and its interest in making statements so um i guess i would not want to i understand and share your feelings about the developments um with respect to the census and the potential impact that that could have on the community um and at the same time i'm reluctant to get into a pattern of every time something outrageous happens in washington we pass a resolution i i definitely agree with that i do i don't feel like this is as grounded in making a political statement as it is a functional need and how negative of an impact when it comes to potential federal funding this would have on our community and so i guess to me it you know specific individuals have taken specific action and so that's why those specific individuals are called out but i don't i don't have any interest in nor do i think this body should make statements for the purpose of making them unless they have a significant impact on our community members which i feel really strongly that this does and a very harmful one too so what and i'm i apologize i'm not trying to shorten but let's have that sort of larger conversation about that temperature thing i think i i would like that to be on of our strategy session a little bit for at least uh a small portion of that time there's a lot of functional stuff on there let's have let's have an emotional chat too sounds too late to smile at us um specific to this resolution and content questions comments concerns i like the clarity of it and i think it's on point given our demographics and the severity that it will rain down on our community if it's carried forth and there's a number of other communities pushing back and i'd like to join that i was at one of the things that isn't in there but well i think what is so important it's not just about federal funding but like we are reliant on this data to do this role effectively like we were just talking about housing goals and so much of our data is built on census data so for us to be able to do that work in an intelligent and direct way i see all the value in that and worry about that too but for me i i question the actual um outcome that we could get out of this like will this actually do any good for us um and i also feel like it leans towards this political statement that maybe could alienate some of our community even towards no real end like we're is are we getting value out of putting this out there is what i question what political statements being made i feel like this has a anti-conservative slant to it i would disagree like i think that adding that question to the census is going to reduce participation and very critical data but i don't see the value in putting this out there if we're not going to get like doing these i guess this is back to like the broader strategy or the broader discussion like it feels to me like there's not making this effort doesn't get us anything so i also disagree there and i think to one of the points how is making there are a lot of communities that are standing up and i think our municipalities play an incredibly important role in shaping policy directions from the local level to the state level to the national level and our voice is really really important um in advocating for our interests as a community and so and so i you know it's we might be small it might not have a lot of individual impact but to lend our voice to a larger conversation that is going on i do think has value i've got a long opinion about the efficacy of things like this and i'm happy to share it i think that's a different strategy conversation i'd like to have kind of down the road a little bit and and try to wrap this specific resolution up and i'm again i'm not trying to just quell conversation if there's additional conversation debate on it that would just be my recommendation this evening because i think that's a really large sort of what do we want our body to work on what do we want our voice to be and what do we want to focus our time and energy on conversation and that's part of the strategy that's what we do strategy for so my preference would be to eliminate references to individuals and the president and just have a statement about the importance of a objective census process that does not include questions such as this one that are seemed to be designed to reduce so i think a lot of the whereases are are great i would i just want to deep personalize it a little bit and be more focused on the value that this data provides to the community and the importance that our residents feel safe completing i guess then that i would feel like we're further reducing efficacy because if we're not calling for a specific action then it's just a bunch of pretty words a lot of our resolutions are that okay so so recommendation has been made for amendment to generalize therefore statement is there interest in drafting something out like that on the original one or would you like to see action on it as presented well would people feel more comfortable so item three of the therefore's really it's asking for a public affirmation it's against the law for any federal department to use personal information collected by the census or even have access to it they can only have access to the aggregate depersonalized data so really in essence it's already against the law for item three to happen and if so if people are uncomfortable with item three i think items one and two are the important part in ensuring that the census question is not asked so i'd be fine with accepting a friendly amendment to strip out item three and move forward with the resolution with the items one and two is therefore counter offer you want to see generalized language is that what you're looking for that removes any request for that's just a point of view but i think it's the same as asking our congressional delegation regards to sound mitigation but you know they're the people with the power to make a specific decision point as our i understand i understand the the point is is this is why we don't and have not in the past taken up things like this is because it's asking it's asking all of us to adopt very specific language and makes it very challenging so again i want to go back is there a motion uh well i'll tell you what here's what we're going to do we're going to go one more round any comments questions concerns from council on the resolution any comments questions concerns from the public so seeing and hearing none i entertain a motion on the uh resolution i'm sorry oh it's on this discussion it's not even on it's okay so then i'll ask are there any final points of recommendation to the author for changes to be made for to come back for approval i'm here in generalized language so it sounds like that might be a path okay all right anything else okay we'll now move on to executive session we have on the agenda tonight executive session pursuant to one vsa 313 1b labor relation agreements with employees and specifically the fraternal order of the piece or f.o.p this is in regards to contract negotiations that conduct in public would put the city at a strategic disadvantage and is also a personnel matter and not fitting for public consumption as well council will not take any action in executive session it'll be discussion only and that concludes tonight's business the council's body will reconvene only to adjourn tonight's meeting thank you very much what's that oh could i i would entertain a motion to enter an executive session bringing with us jessie baker anybody else jessie motion by nicole second by christine for the discussion seeing here none all those in favor please say aye and those opposed motion carries


Good afternoon. Welcome to threat modeling in the cloud. I am Paige Cruz developer advocate over at Chronosphere and I want you to look at this vending machine and think about what threats you can come up with that are likely for a given vending machine. Maybe somebody hungry who forgot their pocket change and wants a free snack. Maybe a raccoon if this is outside at a public park, raccoons got those opposable thumbs. Maybe something more mysterious like credit cards giving. But what if that vending machine was in a hospital? What if your threat model would not be the same given a hospital? So we'll look at this hilarious memo which is zoomed in says warning do not use endoscopy equipment to steal chocolate from this vending machine and I am willing to bet you know maybe something small like five dollars that you did not have this on your threat model as your options for threats. And what is very important that took me a long time to come around with this idea of threat modeling is it's highly dependent on your environment whether you're in hospital or a park or at a school. Just because you have one vending machine somewhere doesn't mean that you could have a copy and paste threat model to take everywhere with you. So what exactly is threat modeling? It has one of those nice parallels to outside of computing we as humans threat model all the time if you look both ways before you cross the street you were probably worried you'd be flattened like pancake so you took some actions to mitigate that risk and to not bury the lead it is literally about assessing your situation and ranking and prioritizing threats by likelihood and impact. So a very official academic definition here is that it's a structured process to identify security requirements pinpoint threats and potential vulnerabilities quantify their impact and likelihood and prioritize remediation methods. It is not making a big long list of everything that could go wrong that stresses you out and keeps you up in the middle of the night and turning that into a to-do list. It is kind of taking that down what is likely and what is worth us going after. A more real world definition that I vibe with a little bit more is that threat modeling is a conversation similarly to when we talk about DevOps you know you can get into the tool chain you can get into the practices but if your first step isn't talking to somebody on a different team or in a different org you're doing it wrong so very similarly you want to be talking to as many people as possible. When you're starting a threat modeling conversation especially if you're not in security you wonder where to start and there are four guiding questions that come from the threat modeling manifesto. What are we working on? You would be shocked how many teams would come up with different definitions for the work they do or why their service is important to an org. So first things first what are we working on? What is it that we're doing here? My favorite especially for those of us that are nervous Nellie's what could go wrong? This is your fun time to list endoscopy equipment, raccoon stealing the Reese's from the snack machine list out all of the things and then take a look at what are we going to do about it.  How likely is that maybe we want to look at our our configuration on S3 that is a little bit more likely to cause a security incident for us than a meteor taking out an az. This question really helps you ground the discussion in reality and can avoid some of those rabbit holes that folks like to get into. And finally did we do a good enough job? This is really the crux of the sort of threat modeling feedback loop it's not a conversation you have once it's a conversation you have many times and good enough is subjective to your org your customers or end users your team. It does not imply perfection it is not do are we 100% secure that's as silly as saying we're going to have 100% uptime like that's not going to happen so defining what is good enough and what is enough risk to accept and enough risk that you can mitigate is sort of what puts a whole bow on this threat modeling conversation. And I will say I do recommend threat modeling manifesto.org it is not lost on me that they need to update their SSL cert and I that is very ironic but it is a very good resource aside from that. So who is invited to this discussion? You might think okay your security team you might think maybe the software engineers maybe we bring a manager or two in who's got contacts but you would be surprised at how wide you should go to have invitations. Your architect is going to have a really good high level view of the system not only the technical components and how they interact but as well as what teams work well together what areas of the org maybe have a little bit of a rougher history and would need to have some meetings before the meeting to make sure that this conversation is productive. Of course your software developers who are going to bring perspectives from their daily experience contributing to a particular feature or service or set of services. Customer support is one they are a group that gets often left out of design discussions and security discussions but there is no better person than somebody that works directly with customers to know not only how they're currently using the system but how they abuse the system or the things that are important to them whether it be different security implications for SOC1, SOC2 they're the ones who are on the front lines getting all of that information from customers so you definitely want to invite them. And of course if you've got QA quality assurance please bring them to the table they are holding on to all of the knowledge of the weak spots the untested the unexamined points they probably already have a list in their head of things that they would like to be addressed and fixed bring them to the table. And finally I don't know if you had tech writers on your list but they also are a group that you want to bring to the table because what good is a security fix feature or configuration if your users don't know about it and it's not documented this will come up later but the tech writer plays a very important role in the system. So threat modeling it is a conversation while there is artifacts that get produced as the result of that conversation sort of a report these are the risks we see this is how we think we want to mitigate them. The real important part of this is the conversation that happens the report is great to refer to afterwards to have action items but you really want to have the conversation. Great so it sounds pretty applicable right whether you're cloud or on-prem what would make threat modeling in the cloud different because running in the cloud does not mean that you get to offload all of your threat modeling to google or aws or whoever your hosting provider is there's this notion of a shared responsibility model so there's a line at which you need to worry about what's going on inside your vpc say and there's what google aws so on so forth have to worry about but there's that line in the middle where you both meet and it's very important to not just absolve yourself of security concerns because someone else the google sres can take care of it so this is a big long list we're not going to talk about all of these but if you take a look at these maybe take a second and pull out in your mind what you think the top three threats specifically to cloud-based environments are this is uh this comes from the cloud security alliance this is what they call the egregious 11 sort of like the aws top 10 for web app vulnerabilities all right we've got data breaches misconfiguration and inadequate change control and the one that gets me is the lack of cloud security architecture and strategy like that is in my mind that is sort of when somebody an organization says we're going to the cloud and they take a very much like a lift and shift approach we'll take what we have we'll put it in the cloud and everything will work don't need to change our processes nope that definitely does not work and we'll double click into each of these data breaches if you have been a human with an email address and use that email address as a login anywhere you are definitely in the crowd of people who have had their data breached their PII just it's hit medical providers it's hit educational institutions there's really almost nowhere that hackers haven't tried to get data in or out of and when I was prepping for this I discovered that last last pass is actually facing consequences for two data breaches that they had oftentimes as end users or consumers we kind of left out of companies facing the consequences for this kind of stuff so what happened is one of their competitors tried to capitalize said ah never been breached this is not going to age well I can already tell you that it's not as easy as saying we'll we'll just not get breached um again because it why are they facing a class action lawsuit why are consequences being wrought for last pass versus any one of the other providers you can find on have i been pwn.com well it was not just that they got hacked it was the way in which they responded to that so kind of a big a big long thing from the the lawsuit but it says is instead of waiting months if they had just disclosed the full extent of the breaches when they knew then the end users could have had time to one like switch password providers to change their passwords and really limit the scope of the impact there because they didn't do that there were months that their users were basically left out in the open and that it is sort of the mishandling of that security incident that is biting them because like we said earlier you're not going to be 100% hackproof you're not going to be 100% secure 100% reliable so we can't litigate every single case of that but we can litigate when people are not um taking responsibility and notifying people of risks when they know sort of similar to when folks who find bugs security researchers researchers find bugs and they say all right told this big company they haven't done anything haven't seen a patch haven't seen a release and you wait whatever period of time it is that is reasonable for them to have made those changes before you can release it to the world to say you know that all right top two cloud threat is misconfiguration this one I think about a lot because I I'm hoping somebody was going to build the rest of the gate but if not very much speaks to how many boxes we have in the cloud how many new features and products I can't even keep up with what AWS and GCP release in a given year let alone know how to securely configure them some popular issues include unsecured data storage which we'll talk about excessive permissions that's when someone's like hey um I want to spin this thing up in dev and you're like oh okay I don't want to play whack-a-mole with IAM permission so I'm just going to let you allow all star do whatever you want um or leaving default credentials as is oh my gosh please change defaults um and sort of the more extreme example is when you go in and actively disable your security controls so we're gonna talk about an example from 2018 where level one robotics which is a I learned is an engineering company that works with a lot of big car manufacturers like Volkswagen Chrysler Ford Toyota GM Tesla and the elevator people Tyson Krupp okay so they have a pretty impressive customer base what happened here is they had an rsync server that allowed unauthenticated data transfer to any rsync client it wasn't level ones data that was at risk of being taken it was their customers like what a breach of trust there that would be really hard for me to recover from that so wild like this stuff really happens all the time to very big names it is why we want to take security very seriously and our final threat is the lack just total lack of cloud security I whoever came up with the egregious 11 props on just transparent naming um does what it says on the tin so many of us most of the time I work in SRE and reliability work and they're sort of this idea of the big one until a company has that big incident that floats up to the top of the c-suite it's really hard to get buy in for reliability initiatives very similarly until you have a big breach or a big security risk or maybe a near miss it can be hard to get investments into security unless you're in a highly regulated industry but again I would say there's one year I got I think three medical providers how to send me the oopsie your your data got breached emails and so at this point I'm like what nothing secure who do we trust good questions to ask yourself so what's our example here well Accenture if you've heard of them in 2017 they confirmed that they had inadvertently left a massive store private data across four unsecured s3 buckets it exposed robot highly sensitive passwords secret encryption and decryption keys that could have inflicted tons of damage depending on had somebody if somebody was able to access it store it and make use of it the s3 buckets also contained hundreds of gigabytes of data for their enterprise cloud offering aka their customers data and supports most of the fortune 100 companies so at this point we're like okay basically all the car people got hacked of elevator people now we're talking about a bunch of fortune 100 like nobody is really immune from thinking about this stuff and the real like difficult part here was the data could be downloaded without a password by anyone who just knew the web server address so when you're thinking about this conversation about threat modeling and you're like what is possible what is likely what are things we should think about if we're in the cloud or moving to the cloud a very great place to start is that egregious 11 it will help you avoid some of the rabbit holes of the oh my god a meteor or our whole security team went on an offsite together you know you know single point of failure start with the egregious 11 work your way through those and then see how the conversation goes but what does a successful threat model report look like kind of been talking about the doom and gloom we will turn to a lovely cncf project called argo back in 2021 very proud of the cncf they tasked trail of bits to conduct a component based threat model for argo cd workflows rollouts events kind of the whole argo ecosystem and if you're unfamiliar with what they do it's it's really like ci cd progressive deployments all like kubernetes native for the cloud here's a snippet from that threat model that i found really interesting while argo services often support risk or threat prevention methods yay so like security is there security configurations are there they're frequently under documented and provided on an opt-in basis rather than the default that goes all the way back to including the tech writer into your conversations what good are all of these beautiful security features if people can't find the configuration docs if they don't know it exists it's unrealistic for us to expect for every project that you're using to keep up with the minutia of every single release so yay for tech writers but i get it i was a developer one day once upon a time writing documentation can be hard we can get writers block we don't know what level of information to provide are we trying to help a new person who's not on our team spin up our app are we is this just something internal only for the platform or sre team and you don't need to go into details of how to set up terraform like i get that it can be difficult and one of the findings from the argo threat model was this concept of minimal service documentation what is sort of the minimum amount so you don't need to get writers block you don't need to be frustrated what's just enough so that any one of those groups we talked about whether it's your tech writer whether it is your qa whether it's developer p.m whoever what is just enough info for them to understand the scope of what the service or feature does and be able to participate in the threat modeling combo we're not going to read all of this but what i want to point out is these last two sentences just very straightforward after a workflow is compete completed a copy of the workflow is made and stored in a sequel database produce artifacts are stored in services like s3 and minio simple it's to the point it's following the flow of data which is something that we are concerned about and it's not going off into rabbit holes beautiful something to aim for and at the end of this presentation there is a section for i think it's about five or six questions that you can answer that fulfills minimal service documentation so you can use that as a template and throw it in a read me so what about threat modeling and you this is strategies and it's sort of a roadmap for you to follow to conduct your own threat modeling conversation if it's a new practice for you maybe you don't have a security team yet or security engineer start small pick maybe the most important feature or workflow maybe pick one single service to start with it should be an important one then you want to schedule the meeting add in the agenda the four guiding questions if you are not using the agenda field in your meeting your meeting invites this is the time to start we want people to come to the table prepared understanding why they're there what they're there to talk about their responsibilities sort of what the end goal is so if you give people the four guiding questions up front gives them time to think about it in the background do some more research and come really well prepared then assuming that you also are bringing in your tech writers and your folks who don't typically think of themselves as security practitioners or professionals send them the threat modeling manifesto it is very short it is like maybe two scrolls on a web page um and just let them become familiar with what this process and this conversation is going to be because again the whole goal is a very fruitful discussion um which will not happen if people don't understand what they're doing and why it matters another great thing to have before the meeting is that minimal service documentation take a stab at answering those five or six questions that I'll throw up at the end um and as a visual learner a picture is worth a thousand words go ahead and make an architecture diagram go ahead and make that request workflow if you've got distributed tracing you get that for free go ahead and take a picture of that service chart now this is also this is just like good meeting habits that I don't see practiced often enough assign a scribe to capture notes that is very important so that person can clarify can slow the roll if a bunch of people start diving in or disagreeing or things get heated the scribe can say hey I'm trying to keep a record like let's slow down one at a time can you repeat that very important role and the second role that you want to have is a facilitator they keep time they make sure no rabbit holes are gone down and they're there to just steward everybody through this process and finally sharing is caring tell everybody your findings write them up and then go to the next feature the next service whatever it is maybe make this a monthly meeting a weekly meeting figure out a cadence that works for you until you've got kind of a good set and a good understanding of risks and how you want to mitigate them or if they're worth mitigating in the first place dow Jones big company has a big impact on the world what happened with dow Jones and security in 2019 they experienced a data exposure and what happened is an unauthorized third party vendor failed to password protect an aws hosted elastic search instance and because of that that database was available to anybody and was very easily found by any iot like search engines it was not even security through obscurity like people could find this and this misconfigured database was not even discovered by dow Jones it was discovered by security researcher who reported it props to them and if we wanted to take a look at how would we write this down in a threat model or how do we think about this type of situation most of us probably have hosted aws resources or cloud resources you don't always operate every single thing yourself or on bare metal so we would say all right an actor that's what we'll call our attacker they any actor would be able to with a very simple search access this database and get the data inside okay what is the impact there well depends on what data is in there we talked earlier about a data breach that involved passwords a data breach that involved encryption keys like that scope of impact is huge maybe it's an encryption key for something in your staging environment less of an impact than something in production still not great and you should still probably have the same sorts of security configurations all throughout your environments but that's sort of one way to think about it who is this actor who's attacking and the fun part about security it can be an external threat or it can be an internal threat lots of lots of scenarios to think through and so again the thing to take away is threat modeling is not a report it's not a checklist it's not this passive activity that regulators are forcing you to do it is a very real conversation between all of the different people who work on a system that are in charge of making it reliable available and secure if you have data that you care about you should be having these types of conversations so the slides are available I've everything that I've referenced here these are all links the manifesto I threw an oasps top 10 web apps because that's just good to have if you would like a very fun dive into security vulnerabilities hiding malware and docker desktop is one of my favorite reads I go back and read it like once a year and then the minor attack adversarial knowledge base they've got a one-on-one blog post on getting started but they also have a huge list of different specific attacks and scenario so if you're having trouble coming up with what you think they could be for your org or your system or you just want to ground the conversation in reality people have done this research it is available definitely make use of it and again here is that minimal service dog documentation and you want to think think back to those two sentences of that data workflow simple high-level run it by somebody before don't just call it good maybe run it by someone say that's too much too little a feedback framework I use is abcd what's awesome what's boring what's cool and what doesn't need to be there and again we definitely you're focusing on the data workflow because that's often what people are trying to get at the end of the day and again the egregious 11 this is them in order of egregiosity I suppose with our top three that we already talked about and let's chat I will be around the conference I generally wear exciting things and I will be staffing the CNCF booth g3 this Friday afternoon I'm on mastodon you can ping me at my work email if you would like or you can visit my blog post most of it's on security reliability stuff but I am delving more and more into security these days after hearing this stat that was something like I'm not going to get it wrong now because I'm thinking about it on the spot but it was like 80 percent of developers don't consider security to be a part of their job which like wow shame on us we need to do better and I'm hoping today you can also start to be that change and have a threat modeling conversation tomorrow when you get back to work with your family it's a it's a very good practice to get into and with that we've got some time for questions and if not thank you very much there we go hi awesome talk I learned a lot practically when I look at services oftentimes there's like there are just too many microservices what a mistake yeah so how how does one do threat modeling when they have hundreds and hundreds of microservices that they deployed without realizing that threat modeling was a thing and they should have done it yeah that in that case that's where I would go to the workflow approach so all of those microservices at the end of the day they're all work most of them are working together to fulfill a smaller subset of user needs so whether that's login whether that's checkout whether that's I'm going to upload my passport so that united can prebook me or whatever like very sensitive data definitely hope they're hopefully they're not on my breach list next year so I would think through maybe what are the top 10 workflows or what are the most critical if you work with big companies or small companies who do you need to protect what data and why and then maybe as far as the services go that's where you want to I think I keep hearing this thing called like the salsa framework like there's a lot of things you can do for the automated platform platformification of security scans and stuff I would throw that on sprinkle that on your microservices but save the conversations for those bigger workflows that traverse multiple then you'll be bringing multiple engineering teams to the table and it'll be a richer discussion yeah it's kind of the same thing with monitoring like so many microservices SLOs go to the workflow go to the the things that your users are actually doing with the system this is overwhelming any more question any tools to automate like the threat modeling to like just grab some of the information from these services to fill in some of the like instead of having a meeting with like each team and asking all these questions yeah so the question I think because I think the mic is a little low the question is how can we automate this what if we've got a bunch of teams or services what can we do to sort of speed this along or do this at a bigger scale yeah because it might change also like that changes all the yeah clouds are very dynamic especially if you've got lots of the microservices so in that case when I when I hear things like automation how do we do this that scale I think what is machine readable what's available if you have if you use get hub or get lab there are like PR templates make the minimal service documentation a template then from there you could write a parser whatever do your jq your yq pull out the data and then essentially what I didn't get into is the I don't know if I can pull it up but the argothreat model the reports that comes out is a big table it says these are the risks that we see in order this is the component it affects this is the the risk or the threat and then this is either we're going to patch it either we're going to redesign it or we're going to leave it alone because it's not a big deal so what you could automate is sort of the generation of that report and then at least have smaller discussions about what are you going to do about it because the computer computer can't tell us how to secure itself otherwise I wouldn't be here having this talk so you can automate the drudgery of that totally and then just scope the conversations really targeted to we're only going to talk about the top two on this list or you I mean you could have people submit a form I'm big on the conversations just as an sre we're left out a lot in the design and it's always better to just catch something early on yeah go seahawks love the hat all right excited to hear how all of your threat modeling conversations go we're going to secure the world no more breaches yes thank you thanks


Several times a year, toxic foam covers this river in India. Experts say the suds come from detergent dumped upstream by textile factories. They're one of many sources that pollute the river. Everywhere in the world, sacred rivers are in trouble. Now there's a global movement to protect them by treating them less like sewers and more like people. In New Zealand, the mighty Wanganee flows past active volcanoes in rugged hill country before it empties into the sea. And it was the first river in the world to have a legal right to do what rivers are supposed to do. The idea that rivers have a right to be healthy and to be renewed. A right to conservation has been recognized and in a growing number of places a right to flow. The idea that rivers have a right to flow with sufficient water to flow freely. For over 150 years, Mau reactivists fought to protect their sacred river. That fight ended in March 2017. That's when dozens of tribe members gathered in the country's parliament to celebrate the legal recognition of the river as a living being. There's a phrase that the Wanganee we use that says, I am the river and the river is me. Which basically acknowledges that they are indistinguishable from the river. And to protect the river's rights is to protect their own rights and vice versa. Just a few months later, the rights of nature movement had another win. The High Court of Uktarakant State ruled that the Ganges and the Yamuna rivers are living entities that deserve protection under the law. The court was catching up to what many Indians already believe. According to Professor David Haberman, Hindus consider the Ganges both as a deity and as a family member. One river worshiper who regards the Yamuna river as his mother said that it just gives him such anguish and looking at what has happened to his mother. But he also goes on to say that when your mother is sick, you don't kick her out of the house, but you try to help her. Other experts say that religious communities are key to the protection of sacred waters. It's time for religious leaders to act bold since saving the biosphere is a moral, ethical and spiritual-ish because without the ecosphere, we cannot survive. We need that level of mobilization. Religion has that power, that moral authority. The rights of nature movement is gaining steam. But using this legal concept to protect polluted waters faces a number of challenges. Most laws on the books appoint legal guardians to speak on behalf of the river. I would say overall hundreds of rivers have rights across the globe at this moment. Now the struggle is how to put teeth into these protections. How do we enforce it? What's the practicality? That's one of the big things that's coming next.