Wasn't too much like that because that particular accent although very regional was actually fading away There's a there's a It is as fast as you say you just sound you sound like you sell a good drug so like a drunk leprechaun You just insulted all of New England. I didn't know Maine was full of that They might be my rainbows in Maine was settled by drunk leprechauns now That is not a slur that the leprechauns came over on a whiskey ship. Yeah Okay, that's how Maine started that's a preview of a show Brian Ibbett and I are going to record called answers to everything Actually found I found an old document. I'd written up for another show I was gonna do like this like 10 years ago that I wrote this doc It's like it just tries to try to explain Common phrases and their origin and it's complete nonsense and I was like, what was I on when I was writing this? Because there's like six episodes written out and I'm just like I'm gonna record this at some points. Wow There's a show that actually does that I'm trying to remember it's on the history channel Or they they explain the history of specific phrases. You can't get there from here You can't that's the only I remember that from the SNL skit And they had it was like a jeopardy. You want the old Palma place All right, I'm going to start the show you guys ready The Daily Tech news show is brought to you by listeners like me to find out more of it's a Daily Tech news show comm Slash support. I am not starting the Daily Tech news show is brought to you by because I forgot to do this yesterday So there's this little thing in audio hijack called instant on Many of you may know it Don't hear audio. Okay, so I'm not getting any audio. Can you hear me? All right? Can you hear me now? Yes, I Could not I still can't hear Tom. I hear Tom. I see Tom's lips move Yeah, I saw and I waited for him to I saw my name go by and this can't hear anything What's nothing? I'm an audio hijack and then Gone he's still going so the chat room says they can hear us and I at our I as in myself, but not you Tom. Oh and W. Scott says it's coming through a GR But not on YouTube and TV is my girlfriend's Yeah, you guys can hear me on there. Oh, okay. I Think audio hijack probably did something weird To my audio thing is I could still see my levels in the hangout Not sure, but yeah, I saw you do the intro.  Any of you listening on the live stream probably knew that. All right Let's try this again. Shall we? Hey Apologies for the delay. Here we go. Well, I need control. Oh, yeah, sorry. I Will give you the control There you go. Okay three two The Daily Tech news show is brought to you by listeners like me to find out more of us the Daily Tech news show com slash support This is the Daily Tech news show for Tuesday August night 2016 I'm Tom Merritt joining me today senior associate editor at CNET and man about podcasting. I as actor That doesn't mean I'm the man about podcasting or I do not casting something like yours Just a little new in GFQ shows too, right? Yeah, I'm on gfqnetwork.com. I've got finite comedy calm I've got CNET calm. I'm on DTNS right now. I mean I got everything going. He's everywhere He's everywhere remember chicken man. Nobody does nobody remembers chicken man, but that was his phrase. He's everywhere He's everywhere. We're gonna talk about Facebook's new ad Policy one thing will make you happy and one thing will make you sad. It doesn't matter which side of the issue you're on It's like white rabbit Nintendo made archive.org take down its copies of the Nintendo power magazines. Sadly, but Hero archivist Jason Scott at archive.org has put up a new collection of Amiga software and Intel just bought an Andy Rubin backed company called Naravana and ERV not like the band that brings machine learning into the silicon here are some more top stories Okay, so an almost Undetectable malware platform that has apparently been active since 2011 has been discovered on 30 or so security targets for the first time in Separate reports researchers at Kaspersky lab call it project Sauron That's the name everyone's using by the way because it's the better name Symantec did lovely research. They called it REM sec just not catching on But both companies agree that it is likely a state-sponsored piece of malware It's just too sophisticated and would have cost a lot of money to develop It's it's kind of crazy. It resides in your memory not your memory in your computer's memory as That would have been really sophisticated It resides in memory as a binary large object making it hard for antivirus to detect. It also Has a unique profile every time it infects a target. It never reuses an IP address I never reuses a server a domain name It collects passwords crypto keys and more can also collect data from air gaps computers by using USB Drives with a virtual file system that windows can't see and otherwise appears to be an approved device It was found infecting organizations both governmental and non-governmental in Russia Iran Irwanda China Sweden Belgium and some Italian speaking countries Is this the malware hide-and-seek champion right now or is there something awesome forgetting? I think if we were to hold a an Olympics. Oh wait not gonna use that word No, if we were to hold a championship of malware, this would be the current reigning champion It is it is really hard to find even if you find it once. It's hard to create a signature to find it again it does some crazy things with air gapping and It just lies dormant So it's not only hard to detect but it doesn't do much the only reason they found it in the first place According to Kaspersky was a little bit of weird network activity That kind of looked like a password check which resides in memory and just make sure that a password is meeting certain Parameters of strength while it is created But it turned out it wasn't turned out it was this piece of malware projects are on that sounds really really interesting I want to read more about that let's talk about Twitter though Twitter's expanding its moments featured to selected influencers and other partners Moments shows a curated section of tweets around an event and will show up in a moments tab on the user's profile Twitter says the ability will eventually roll out to all users. So make your moments There do you do you ever look at moments? I do I was using it just the other day because I saw the story I might well access using the other day and then I saw the story I looked at it again It seems like you know much more magazine-y kind of way to show things I like the way it presents the information But I think it just adds to the Twitter confusion as to what are you trying to be Twitter because they still don't have that down I Think they're trying to be live They've said as much and moments Certainly leans into that. It's like hey these are things that are happening right now And you can follow along as they happen with all the tweets We have something called collections which all of us can do right now, but it's very timeline oriented This is much more visual.  I I It's a classic situation of this is not the thing that's going to save Twitter I always prefer things to be rolled out to everyone But I get why they want to build some momentum by working with partners on it and and kind of flush out any of the Quarks of it before they had handed over to everybody They have to do a lot more with moments to put it front and center for me Though before I really start to look at Twitter as a magazine and every other Moment-like service out there say flip board Has had its peak and then fade it away. I'm not sure it's the thing That we want from Twitter There's also the fact that when I looked at moments it reminded me of Facebook paper the other app that basically took a Facebook feed and made that Magazine like format with Facebook abandoned after a while because it wasn't having the same user interaction So it kind of pains me to see Twitter kind of following a and already dead method that Facebook tried and like to flip forward other magazine like or Presentations, I don't know if that's just the best thing for Twitter I feel like they should just be Doubling down on live just be like look here's Periscope put it in and let's just go Yeah, give me something right off the main page of Twitter that makes me want to pay attention Here's what's happening now and and it could be moments like Absolutely, I think they've they're on to something with the design of it But not segregated out and very much giving me the feeling of I'm tuning into something I'm I'm being exposed to something I didn't know was happening and that's what moments has tried to be up till now It was curated by an editorial team, but it was always in a tab and it's going to continue to be in a tab So I just I look at Twitter and I think you guys are the ones who do live best already You're just haven't figured out the right button to push to make that be something to propel you forward To two things while watching the Olympics make me think this one is NBC is putting in their lower-thirds for all of their presenters a Facebook ID not a Twitter ID So Facebook beat them on that partnership But when Michael Phelps yet last night had a glowering expression While a competing swimmer was sort of taunting him in the room before they headed out all the memes That showed him as the Emperor and were hilarious were on Twitter You could not find them very easily on Facebook. Everything was on Twitter They they just naturally have that advantage and they haven't figured out how to capitalize on it Yes, kind of one day they'll figure it out when they get bought by somebody else You think it's gonna take that it's gonna take an act. I honestly do somebody else to get I'm not being a doomsayer. I really don't know is best bet is that a being owned by somebody else Google is testing a new customization option for its virtual assistant Google now a new feature called Explorer interests gives a wide collection of visual options for the types of content a user would like Google now to track it starts with wide categories like people sports and TV And then you can drill down into that into lots of subcategories like actors Particular actors that you would like to follow or not follow this would be an extension of the existing toggle switches that you have now That are more limited in their selection Android police spotted the test in the wild and Google told tech crunch it is an experiment to test the look and feel but Google doesn't have anything to announce about availability and the Smarter Google now gets the better and that was one of my favorite features on the Google app and on Android in general Just to get that thing really powerful Yeah, looking at this. I was very much Jealous because I have tried to go into Google now and say no I know I live in Los Angeles I don't care to hear about what every little thing that happened with the Anaheim angels They don't follow that team and trying to find that selection was ugly certainly It wasn't hard per se But it this looks like a much more usable way that I'd want to go in and play with and really customize Google now for me When Google now would be close to what I wanted I would not say dismiss this. I'm like you're close Google. You're really close I'm gonna click the thing that's close to it and hopefully you'll figure out over time So I didn't want to discourage it which is a really weird way of feeling about now. Yeah They are striking the right balance of saying we're not getting rid of proactive alerts We're still gonna look at what we know about you and try to give you things We think you need to know but we're also gonna let you have a little control over the things We wouldn't have expected you want to know or the things we think you want to know and you don't want to know About and I like that and we haven't talked about Google in a while. Let's keep talking about Google Who are they they're this little company, but they rolled out a new update to its most popular You know it's the maps app in introducing a Wi-Fi only mode once the mode is enabled Maps will go offline when you're not on a Wi-Fi network limiting users to downloaded maps But saving on mobile data the update also lets users save maps to an SD card So you don't have to keep it on your main memory there Google also rolled out a new feature for users in Indonesia Integrating ride hailing services like uber grab and gojek along with price estimates and arrival times. This is huge Some people in the United States may not think this is such a big deal if you have really good data But it's gonna be huge in large parts of the world that have limited data coverage or or restrictive data caps Rural areas places like that if you need these maps Because it you already had the ability to download the maps for offline viewing which was a huge boost But they take up space and if you can't afford a huge data connection You might not be able to afford a phone that has a whole lot of space either But you may have an SD card that has a lot of space and I put the maps over there a big fan of this Yeah, I still don't understand and I mean I understand technically But I don't understand how we keep promoting SD cards is like hey you get all this extra memory Except you can't really use it for everything. It's not like a floppy drive, right and yeah It's I think that's just Google's figuring out. Okay. What do people understand? That's what the nexus line has no SD card slot I still think is a little strange. Yeah, because the idea is where do your apps reside? I think that was the thing that you just scare Google the most if you put an app and you moved it to an SD card Took the SD card out and you're like what happened to my app? I don't understand they want everything to be super easy But I think they need to do a bit of education as to what the SD card really is for and I think this is actually a Good way to do it Yeah, because I look at it and I think it should work like a USB drive, right? Because that's the way an SD card works on my my laptop. I could put whatever I want on it So yeah, it takes some education at DEF CON security researcher and electrical engineer Anthony Rose and researcher Ben Ramsey presented their findings of tests of 12 Bluetooth smart locks actually they tested 16 of them But 12 Bluetooth smart locks from quick lock I blue lock Plantrasco C. Oh mate Ella cycle V on's okey-dokey and mesh motion Failed basically. That's the short version of this story You may not recognize a lot of those names and you probably don't want to buy them four of the locks. They tested transmitted passwords in plain text Let me just let that sink in just put your passwords out there in plain text now granted if nobody's standing around you with The Bluetooth scanner you're likely not to have a problem with that because you're only going to use this when you're near your lock But that's not good practice at all to set the passwords twice Allowing it to be changed and thereby freezing out the owner One encrypted the password, but you could still in intercept the encrypted password send it to the lock and unlock the lock one entered an error state when the encryption key was fuzzed and Unlocked the lock so you just needed to confuse it and you could get in others required slightly more sophisticated approaches Involving man in the middle of tax etc. Researchers said they failed to hack four locks made by Kwikset and August those used properly Encrypted connections to factor authentication etc. Wait a Kwikset's been making locks for forever essentially in August They had I think they had a Kickstarter when it came out to their product and it's the scale isn't it? That's crazy and the test the August it's seen that like we love the August lock I've seen that so I'm really glad to see that but to see everything else that's scary I mean, it's a lock you want it secure right and and many of the I guess It was a little confusing They said they heard back from a couple of these but they also said they really only got a response from one So I'm not sure what they meant by that but but none of them said they have fixed these vulnerabilities and one even Specifically said they don't plan to fix the vulnerability one took their website away, which is not a good sign it's Basically, don't buy any of these locks until you hear that they are secure But but the positive side is Kwikset and August both got a vote of approval there I've I've used both of these the Kwikset app is not nearly as smooth as the August lock But it works fine the August lock system seems to work great. I've actually thought it was pretty good Okay, that's like by the US Office of Management and Budget They released the final mandate Monday that almost all code produced by government agencies must be made open source ish The federal source code policy requires internally developed source code to be shared with other federal agencies and a minimum 20% Must be released publicly the public open source code system will be tested in a two-year pilot program Code will be housed at code.gov which will launch in the next few months No particular license is required But the policy refers to the free software foundation definition as a guideline National security agencies will be exempt and operate under previous rules Now I don't I I'm tempted to be that guy who's like oh they didn't go far enough So so let me just say I think this is a good program. I think it's smart to Encourage agencies to share their source code with others I think it's smart to take a two-year pilot program to make sure they know how to do this, right? And and even the 20% is a good minimum to say like let's get people used to it before we raise this And make hope make make the majority of code open source It's it's it's leading people to get comfortable with the idea because open source is scary to people who aren't familiar with it I understand that it is usually more secure though because you have more eyes on it It is the federal government's paid by our tax dollars So we should get the benefit of things that they make And they obviously are exempting national security because there's entirely different considerations with that But why create your own website? I as white why not just use github? I don't know maybe they don't they think I do a better job or they can take it offline Maybe I don't know but what I can take anything off the internet what's on the internet I do like the idea even though this seems a little bit slow and moving the idea that federal agencies are talking with each other That's always been this weird thing. It's almost the the silos. We're like. Oh, you're this other agency I'm not gonna like give you anything of mine, which is moronic since we're all working for the same, you know Country so you might want to have a unified front on that like the center of having open source At least you'll have all of these agencies looking at the code and to go wait a minute We can improve this faster. It may not might not be the ideal solution, but it's better than it was Yeah, I agree. It is mostly good. It's 20% good at minimum Put it that way could be even better. We'll see how it goes though But and also we have a new administration coming in at the beginning of next year one way or another So it will be interesting to see if that new administration carries through on this program, which I hope it does Thanks to all those who participate in our subreddit submit stories and vote on them at daily tech news show dot reddit.com Big thanks to slam mess me Mack when you XIT Abituela Condolce another J. Martin is in there a lot PC guy 88 back again Good to see a flying spatula Darth Atheos and more get in there and submit and if you can't submit vote And if you can do both daily tech news show to reddit.com. That's a look at the top stories All right, so as I mentioned at the top of the show Facebook announced It's changing how it treats ads and ad blockers Company is going to analyze how ad blockers detect ads and then somehow change their code So that the ads are indistinguishable from general content Company also introducing a change to its ad preferences tool that you can find at facebook.com Slash ads slash preferences that gives you the ability to see what brands are targeting you and choose to prevent the targeting if you wish This does not affect the mobile version of Facebook I mean the mobile app of Facebook doesn't have the ability to do ad blocking anyway the mobile version On the web is not going to be affected by this Andrew Bosworth vice president of Facebook's ads and business platform told the New York Times ad blockers are a really bad solution to the problem They like we know ads are disruptive ad blockers don't work But that doesn't change the fact that page fare estimates 200 million worldwide users of ad blockers exist on the desktop 420 million use ad block on smartphones and Facebook says they have a solution now I as I want your opinion on this They say they're not paying or like we are not paying the ad blockers, which would be one way get get themselves whitelisted They're not doing that According to the New York Times step one is they take aim at the signifiers and digital ads that blockers use to detect Whether something is an ad step two make ad content indistinguishable from non advertising content somehow Step three profit. I made up step three, but the first two steps are in the New York Times article We have no details on how they say they're doing this yeah, so I'm trying to figure out this concept of making the content and ads the same and Usually most sites like you know, let's say a Google They'll add a little tag someone says this is an ad or your paint This is a paid for placement and that should be a signifier So to turn off that kind of I that that signal seems a little bit odd I don't know what how that's gonna work in practice my concerns really for the user when they're going through their news feeds if they see a bunch of stuff that they don't realize as ads or that this is Sponsored content so it might create this backlash towards Facebook where you're seeing this information that you really don't want to get And that's why they're saying oh, yes Your ad preferences will be powered up and you can actually see ads you want to see I'm not against ads Okay, the only reason I ever use an ad blocker really is because I have mobile data problems I'm like I do not want to be loading all of this crap on my phone Using up that data connection where I can actually you know see what I need to see like you know directions or something I just really think it's it could really backfire with Facebook if they don't do it the right way Yeah, and it is interesting to me that because the only way to really make your ads indistinguishable from other content is to Not set cookies not put those trackers in like you say which means that they would just be serving ads in General and all they would know is that they were served Maybe they'd be able to on the back end Look at a server log and correlate a served ad time with a request from a user With that you know with without ad blockers being able to know there There's some magic they could do back there But here's something I found in a separate story that might shed some light on this Procter and Gamble announced cutting down on Facebook Targeted ads now a lot of people are misreading this and thinking this means P and G is cutting back on the amount They're spending on Facebook. That's not what's happening. Park Procter and Gable is not cutting back their ad spending. They're cutting back Targeted ads chief marketing officer Mark Pritchard told the Wall Street Journal We targeted too much and we went too narrow and now we're looking at what is the best way to get the most reach But also the right precision they they tell a story about how a Campaign for Febreze Originally targeted households with big families and sales stagnated They didn't then change their Facebook campaign to just target everybody over the age of 18 and sales picked back up so what's happening and several aspects experts have said this is People are no longer Getting a lot out of targeted ads in fact pivotal research analyst Brian wiser told the Wall Street Journal The bigger your brand the more you need broad reach and less targeted media so what all this means then is that the big money is Not in targeted ads which gives Facebook a little room to say well We'll let people opt out of certain targets and We can serve some ads that can't tell exactly who they're being delivered to but we can prove they're delivered And that's gonna be good enough for Procter and Gable You know when you were talking about the whole eventually profiting on this I was thinking how does Facebook make money on on this idea if they can't really track you and I was thinking you know what they do have rivals with Google and and now Verizon's yahoo and AOL combination So maybe the fact that they actually can say literally hey, we know people saw this We know for a fact people have seen are these ads now whether or not they have the same reach and we can see what they're Doing later on not the same, but it actually could lead to them actually charging Potentially higher rates I don't know to see if they can make more money on ads that people see because yeah Who else to see I mean, I think that's a fair point. I thought about that with the targeting Once you deliver an ad through a system that allows the user to control whether they're targeted or not You should be able to therefore say this is a higher value target But some ad companies are skeptical of that They're like look if you go from a million impressions to 5,000 targeted impressions those 5,000 targeted impressions better give you a good return Because otherwise they're still not worth it So it's it's it's I there's a lot more There's a lot more than what's going on here than than meets the eye I think I was thinking about the alternatives as well when it comes to Facebook what else could they have done when it comes to this they could do nothing and lose money on ads They could notice ad blockers and go ahead Here's a giant takeover like wired has so they're like put us on the white list You can't use Facebook until you do this or they could offer a pay version of Facebook So this might be the least Intrusive I guess actually the second least intrusive so their alternatives are really slim when it comes to what do you do when you work? On an ad business, so we'll see what exactly the I Mean it's it's a billion dollar ad business to like it. It's just it's it's a crazy crazy ad business All right, we're having a little connection problem with IS but hopefully we'll get him back Let's get to our pick of the day Ryan the DJ has a pick of the day for people who love to be organized and who like Owen stone Don't like subscriptions the app is called pocket informant by fanatic software And it's available for Android iOS and is in early access release for Mac OS with a full 1.0 set to release soon It can sync multiple calendar sources task lists lists feature notes and contact management There's a focus view that gives you a summary There's an Apple Watch companion app and the company is planning to future future expansions with options for more enterprise level features And eventually a Windows version best part is the app is a one-time purchase. This address is Owens Frustration they offer their own sync service if you want it That's $50 a year, but you don't have to use it You can sync with Google Evernote to do iCal and iOS reminders. I forgot to do even was around but yeah is a It is a All-in-one solution. I again, this is a pick from a listener from Ryan. He loves it You can check it out on your own seems to get really good reviews on Google Play It doesn't have that many reviews on iTunes unfortunately pocket Informant comm is the place send your picks to feedback at Daily Tech news show comm and you can find more picks at Daily Tech news show comm slash picks All right, let's get to our message of the day Natron wrote in and said My bank says the credit card purchases that I have six months to submit a dispute for a defective product That should be covered under warranty that the manufacturer isn't honoring so a class action lawsuit might not be People's only recourse in my case. I was having trouble getting my Nexus 5x repaired by LG They returned it to me, but it still doesn't work and I'm gonna see how this plays out now This doesn't change the law For that we were talking about yesterday if you missed yesterday's show There is a law in the books in the United States that says you can't prevent people from Affecting their own repairs or hiring a third party to repair an item You can't but you can't basically void their warranty because of that The burden of proof is on the manufacturer in the US to show That their repair hurt something and voided the warranty But most manufacturers don't pay any attention to that and of course we had several people point out Yeah, Apple does this to Microsoft does this Google does this everybody does this But it is in fact violating the law and the reason it's it's carried on is that They know nobody's gonna come in and sue them So they just let it go what natron is pointing out is not a change in the law And and certainly an easier reaction than a class action lawsuit He's saying hey your credit card might have covered you This is a practical way to address it It's not it's not gonna fix the underlying problem But if you're in a position where you're like, I can't afford to sue the company and they're saying avoided my warranty Maybe you can at least go use your credit card to do that. Well, I'm gonna jump in here I heard and I'm gonna ask is it Unfortunately my camera seems to be a little laggy, but you'll hear my voice Is this time for something equivalent to you know, so when you buy an automobile you get what they call lemon laws Which will cover you to the point that if I think it's after five or six repairs The dealership or rather the the car company needs to buy it back from you at what you paid for because it is defective I mean would it make sense to to see some sort of legislation along that one? Oh a separate thing if you have a piece of Equipment that you get have to keep getting repaired But that doesn't solve the the underlying issue, which is I only had one thing wrong It was an HDMI connector with bad and because I had gone in and replaced the hard drive and didn't cause any damage when I did it The company can say oh you've voided your warranty by opening it up and and that is against the rules That is against the law. All right. We we seem to have aya's back Somehow what sort of I have no idea. I'm using my phone right now to come back I That's all right, we're just wrapping up the show Real quickly to bring you up to speed We were talking about the law that says it you can't void a warranty because someone affected a repair that didn't damage the object And Roger was like well do we need lemon laws for electronics because because along the same way You know it to me. It's too different. It's too different. They are two different things But honestly, I think they do overlap in such a way I mean for example if you take your car in For a regularly scheduled oil chains like you change the oil according to that's covered Even if the car is effective just because you changed the oil at a non Say you bought a Toyota at a non Toyota dealership right and that's what this this law We were talking about yesterday actually should apply to electronics and the electronics manufacturers are not respecting that law That's that's a tough. I mean electronic manufacturers these days What exactly are you getting when you buy something like are you getting a license to use it? Are you actually getting to use the hardware? So this one sounds murky to me right now. Yeah Well, that is it for this episode of Daily Tech News show. Thank you. I as act are for persevering I'm glad we got a really good discussion in before the internet gods started to mess with this By all means let folks know where they can find more what's going on with you go to see net calm We got stuff there. You can go to gfq network comma best up there I'm gonna go to my Facebook Facebook.com slash is dot actor. That's right. The Olympic people are doing it Oops, I didn't say a bad word. I'm doing it too. So I actually post a lot more to Facebook So if you want to follow me there, it's open Facebook comm slash I as dot act are a k h t a r If you want to support the show we would love to have you join the amazing people who are making the show Happens with without those people. There is no show go to daily tech news show comm slash support or patreon comm Slash dTns Reminder if you just need the headlines of the day some days That's all you got time for get them in less than 10 minutes at daily tech headlines daily tech headlines dot com Our email addresses feedback daily tech news show comm catch the show live Monday through Friday 4 30 p.m Eastern at alpha geek radio comm and diamond club dot TV our websites daily tech news show comm back tomorrow with Scott Johnson This Show is part of the frog pants network get more at frog pants dot com Diamond club hopes you have enjoyed this bro Boom Hey, so yeah, it was weird when you said I was crunchy I thought there was gonna be a problem with my connection and then when you dropped out I'm like, okay Can the video people still see me? But then Roger kept showing screenshots as I talked and I was like, okay Weird weird. Yeah, my my router says that like it says your internet service provider doesn't have a DHCP video properly. Oh wow.  Yeah, no, that's crazy. And when you when you back-channeled me and said, hey, your audio is crunchy And your audio was great right up until the point you disappeared your audio was fine Yeah, like you were at this weird kind of like this and then it would speed up Put it all together So your download is getting affected but your upload stayed good until your connection went away. Well from my perspective both of your audio were pretty Pretty good. I'm your video is a little shaky, but I mean in terms of audio quality. It was fine What's going on just very like I have to do a piece-by-piece Troubleshoot because this is down. This is gonna be a very unpleasant reality. Yeah No, that's why I have two internet providers now For that very reason because when frontier took over Verizon. I had a very crappy weekend long almost half a week there The Verizon Service is the building like to over. Yes. You told me that so and it's so depressing It's like can you just can I just put these in our table here like just to tell nobody that's what I said You should just run it like like a clothesline, you know to talk to somebody in that fancy building Yeah, right. I'll pay you 20 bucks a month just for this network course Yeah, just help me run it across the street here. No problem. It's gonna be fine Yeah, and I just need like I just want your upload speed. That's what I really want I'm gonna download speed pretty sure it's probably it seems like something the Devil of Hell's Kitchen would help you out with Yeah, except that I Don't know if he could though Well because he's good at parkour right so he could just he could grab the ethernet cable and jump across Other day's job. Yeah, he should really be a person who works for the cable company vigilante and a vigilante cable runner Yeah, well, that's what I that's what I'm saying is he shouldn't work for the cable company because they won't let him do this for you You need a vigilante to bring the ethernet without their knowledge Yeah It has a totally different meaning Fiber it just sounds like someone doling out bowls of metamucil Here's your fiber. You're doctors are like to you. You need more fiber. Yeah. Yeah, we need some titles titles I'm going I'm going to try to figure out what the heck's going on with this because oh, yeah No, of course go focus on fixing that. Thanks for thanks for being on Well, yeah, I was always fun to be on so I'll see you guys later. All right. Take care At the top we have it's all in your memory is Twitter's it is is it Twitter's moment? Not them up. This is not the Mal war Malware you're looking for really I like it's all in your memory, too That's very poetic You're out of lock get it I guess a good one thing Facebook ad in infinitum Uh-huh becomes more useful where 100% open-sourced Mouth the malware is in your memory. No really check your brain The ad block is hot I Don't know I have to say it's all in your memories pretty good Yeah, it's either that one or Facebook ad infinitum. Let's let some people vote for a minute while I because I'm still Exporting and importing and stuff It's all in your memory is my favorite but Facebook ad infinitum has the advantage of being about the main topic so vote Do they play that tune in every baseball game? Yes, I believe they do I like I've always wondered if it's like a regional thing like yeah, no, I grew up with that Charge Like for example, I never knew they they did the whole Oh What the heck is his name sweet sweet Caroline song at Yeah, and you'll die that that is a ballpark specific Or at least it used to be I think some ballparks have started to borrow it But that is a Red Sox thing through and through and I didn't realize a bunch of other parks use the Journey song don't stop believe I always thought it was like the Giants because yeah, that used to be just a Giants thing Perry was like a huge chance. I think when Glee came along that that brought that one out of the Woodward Or something out of the Woodward in Bernstein All right, we're getting towards the end I'm right in the 83 tags What Facebook ad infinitum? It's the people's choice people's choice awards Done. That was a really good show until his connection crapped out. Yeah, I mean it was still an okay show afterwards Thank you for jumping in by the way. Yeah, I wasn't sure if he I saw him come in so I was like, oh, I'll give it a minute No, no, you did exactly the right thing which is give him a chance to to jump in he by the way If you're wondering he restarted his modem and it's fine now At the same way Occasional overheat on the modem I bought it works pretty well and it saved me seven bucks a month for like Four years five years 10 years Maybe think about it. I think I don't know what they charge. I don't know what you can't buy fiber. Oh, maybe you can fiber modems my router with the open source firmware on it I think it's pretty solid too So I have to grow upgraded to the latest version of audacity and It has a bug where you can't drag the file into The timeline anymore. It's apparently fixed but It's annoying That's always a little obnoxious when that something happens like that where it's like, oh, yeah I thought I was supposed to do this. So I've just been choosing import from the menu. Which is fine It's not as nice, but apparently you can drag it down to the application icon and it'll work It just won't work if you drag it to the To the program timeline itself little tips I ran down a tip with quicken over the weekend That ended up actually helping people which was crazy I posted my I posted my solution on get satisfaction dot com and a bunch of people responded. In fact, one person even knew who I was Oh, that's kind of creepy I don't like that because I was at the soup. I remember when I was on Screen savers or as a call for help I was going a shop at a safe way and someone came up to me. It's okay. It's okay. What's up? Oh, you're a shame from the screen savers. Yeah, yeah Fine groceries. What apples look good I don't know. I still I'm still kind of weirded out by that Some people take it and that's not like I had a guy come up to me at the grocery store Like a year ago and recognize me from cord killers And he just said like, oh, I just wanted to say hi. I like the show. That was it like he didn't Like I've never implied I'm always like very like Gracious it's like, oh, you know, thanks for supporting the show. It's really important to have fans That really appreciate what we do. But it's it it's not that I'm uncomfortable. It's just a weird It's still a weird feeling for me For someone to know for someone to know who I am and me not having any inkling of who they are Do you a cop? Wait a minute. Were you there that night that that went down? You're trying to serve me papers And someone did that to me once and I did not know who it was and there was someone from my great from grade school Oh, really? Like I guess I physically didn't Because that person changed it like their hair was different. Oh, yeah You probably haven't seen them in forever too. Yeah Well, yeah, but people like that's the thing like I didn't recognize it But people like I either stick out or I really just physically you haven't changed a bit Roger Chang You're just a bigger version of the first and you kid you were back in 84 or 85 Bigger fatter version. That's my big difference. It was much better looking when I was young too Sad, you know, everyone says that I think I'm I've basically maintained That's why people recognize you there you go.  Yeah, big baby.  It's like you look the same like Bioca was like I said hi to Roger at night attack and made him uncomfortable Yeah, it's because we were over at that part of town. That's kind of I mean that part of town's kind of weird Although I have to say I didn't expect to see the condo across the street When I stepped on the dog or human poo or whatever is on the sidewalk That's why I think that place is just I was gonna I was gonna invent basically shoe Shoe covers because they have them from furniture movers or movers where they're basically booties that go over your shoe I would have like basically Like on like a lint roller you could like, you know rip off the heel You know, there would be like six more So if you stepped in something you could just rip it off You're not walking around with like soiled heels or something. Just watch where you step You know, that's right. Tom. I guess it's easy for someone like you just to look where they're walking To look where they're going What do you mean by that? What are you trying to say? It's a lot of poo in san francisco I know there's it's not like la is any different in certain areas down.  So I went downstairs And all I saw was a giant puddle of urine in my front door And I think someone was so drunk that they just leaned against my doorbell. Oh, I'm right. Yeah That's like And then I had to come down with a hot bucket of water and bleach. That's just It's annoying. Yeah I didn't move from san francisco. I didn't move to san francisco You didn't Yeah, I moved from us. Well, we are published Thank you all for watching or listening guys are the best audience in the world and we will be back with scott johnson tomorrow Watch where you step scott johnson


Hey guys, it's Jo. So I thought I would put out a quick video in conjunction with this message as I do a lot better talking to a camera than just writing. If you read the message, you'll know that in a few days on October 11th, which is Thursday, I am going to have a below the knee amputation on my right leg. I have had over 10 surgeries on my ankle. If you know me pretty well, you'll know that I'm generally kind of limping around. The backstory behind that is that I shattered it when I was 13. I have had countless surgeries. Like I said, I think it's been about 10. And I've been on narcotics for years for it to try to keep the pain under control. It hurts all of the time, even though I try to live normal life, I try to be active. I try to do stuff. And over the last year, it's gotten to the point where I cannot do anything. I can't walk around the block. I can't walk the dogs. I can't go to the gym. I can't do jiu-jitsu. I can't do anything. And it hurts significantly more like it emin a lot of pain all of the time, whether I'm walking or not. And that's just not going to work for me. There are some other options that could be tried. I tried everything under the sun. And the options that are left on the table are not good ones. After a lot of consideration and a lot of talking to people and consulting doctors and consulting other people who know what they're talking about, and a lot of thinking, I along with my surgeons have come to the conclusion that this is the best choice for my life and for what I want my life to look like, hopefully. Obviously, it comes with a lot of risks and no guarantees. So it's a kind of, not kind of, it's a very freaky process. And I am definitely terrified and nervous, but also really excited for what life could be and excited to embrace this new challenge and what life is going to look like. But I wanted to let you all know so that no one is particularly shocked if they see me in person in a month or two and I don't have a leg. It will probably still be sort of shocking for people, myself included. But I just wanted to sort of prepare people and also thank everybody so much for all of their caring concern as so many of you know what I have been going through. So thank you sincerely and thank you for everyone's continued support. I also wanted to say, I don't mean to sound like a jerk about this at all, but a lot of people have, as I've kind of been considering this, just like random people.  But like if you have strong opinions on whether or not this is a good option for my life, I would kindly request that you keep them to yourself because this is a very emotional decision for me. And I have made the decision and I know what's best for me. That being said, I would love to see you guys after surgery. If you're interested in stopping by, I would love to talk to you. Messaging is usually the best way to do that Facebook Messenger. I'll probably be out of things for a while. And then I would love to catch up with everybody and I can't wait to get back to seeing everybody at jujitsu and the gym and at work and everything. So I look back to being in the routine of things, hopefully as soon as possible and adjusting to a new way of life, ASAP and seeing what the heck that looks like because there's only so much preparation you can do beforehand. And then it's just sort of a, you know what, we'll just see how things look. So I'll probably be in the hospital for a day, maybe two, hopefully not any longer than that. And then I'll be back at home recovering with my fantastic family who is so supportive and my friends like you guys who are amazing. So thank you so much for your support. Like I said, just want to let you know guys, everyone know what's going on, moving forward. And I look forward to talking to you guys soon. Also just on a side note, like I said, if I don't respond to you, I promise it's not personal or anything like that. I'm kind of really overwhelmed. Probably will be for a little while and I will definitely get back to everybody as soon as I possibly can. Post-surgery, Brian will update everyone and let everyone know how things have gone. I'm sure it'll go really well. I love my surgeon. He's great. And I've seen his work. So love you all. Thank you very much for listening. I appreciate it. And I will talk to you soon. Bye guys.


Baseball season, my friend. Where's your hat? You don't love your team, do you? No, I just have hair. Because you're old. I'm ready. And you follow us on Instagram and Twitter from all Tuesday content. It's so juicy. And pay more attention. I'm trying to follow for sure, too. Can't wait to develop a better notification squad. We're coming to you and do a great run. Two days. We ranked into a video. No, I'm not. I'm just gonna sit here and stare at the center. We'll be in India soon. We will. Maybe. Who knows? Maybe we hard to come back. Who knows? Actually, it was just a big joke, guys. Funny roll pulls. Anyways. But this is called the right way to eat Indian food, I thought. We already know how you do that. Naan and rice. It's pretty clear. Exactly. Obviously, Rick's been to India. And we know we've heard and stuff, but this was suggested to us. It looks like she has a... I think it's called a thali, right? I don't know. I think when you have a bunch of different stuff, I don't know what that's called. I think it's called a thali. Um, but, uh, here we go. Stop eating it wrong. Okay, we'll see. Something goes. Yes. It's the right with the naan. They love it when you do that. New York. India, Mike. What is my experience eating Indian food? I've had Indian bhaji two three times before in my life. Mostly when I was a kid and I had to fall. I know that there's what naan. Is it paneer or something too? I remember the first time I had Indian food. The first thing I thought was, wow. This tastes like absolutely nothing I've ever consumed before. I usually ask for a broken knife. I don't...  The thali. Thali is a blend of spices and every single thing has different spices. Every region in India has different types of food. Basically, what we have over here is typically from... Rice. ...the best side of India. Oh, yes. I would not know how to eat that. Even the nuts, they look like the ones kind of that my soul will be in the street. But it's probably not that. They love onions and Indian food. This is a little spicy. Uh-huh. Yeah. More rice. More rice. I'm used to some of this. The onions. It's a tonic. But don't lower us. Come on. You got that. So you can bring in your green dipping sauce. You can put it in a plate. Dip, dip, dip, dip, dip. See that, Corbin Miles? I can dip. I've dipped things before. It's like a plantain, but I don't... Plantain? We're probably good. Put some of this tamarind stuff. It's not tamarind. It's mango pickle. And none of this has tamarind. Triangle, this pickle, this this. Yeah, it was drunk. Oh, this looks fine. You don't use one in this samosas, but that's a lot. What if I want to use a spoon? Put something in your plate and you use your hands. So just essentially... Yeah. And then you have it. There's people that eat pizza with a fork. You can't tell people how to eat. When this is over, I have a question about this. We don't want to combine two points of samosas. What you want to do is like have a bit of spicy first, or you can have sweet. Starts from here, it's a lentil soup. Next is key, the sweet peas, the choli, chickpeas with gravy, cauliflower, with green peas, blanching, finished with corn, that's what I don't like stuff. But I have to make a gravy. Stuff on your fingers. And next is mango pulp. And this is basically the routine. It's a meat bread, which is black. Papar is what comes in a complementary. So what we do is we just pull it, pull it. It's like a tortilla. Just push it. Very much. We're not closing it. I brought these to a tortilla. Now see, this is the stuff that I'm not sure what this is. This kind of, this has like the consistency of soup. Everything you get in big quantities, so everyone can have it in case if your friends are sitting by. This is basically the cutlery. The next way is the yogurt soup. This and this. Yogurt soup? Right. And then it's kind of the same thing. Then you put it in and just... You can mix it with your hand. Oh yeah, yeah, yeah. So there you go. You combine. Wow. You mix it. You can flatten it out. Yeah, yeah. Yeah. Yeah, yeah. Yeah, yeah. Yeah. So these are really, I mean, if you try with this, it's a thin, thin vapor. This is a complementary part. The main thing over here is... A complementary fork, is that what you said? This oil, I guess. So use this to dip into all of that. I can't hear him very well. Yeah, he needs a mic. Then he needs some coffee. Great, great, a pot of coffee. Sorry. That's the thinest, the coolest way I can think. Pinch. It's not the final one. A bigger one. Pinch bigger? Yeah. All right. Pinch bigger. Yeah. All right, you did it. There you go. All right, remember when I was... I think that was not a butter chicken flavor. And what is wrong with you? Use your utensils. All these years later, I'm using my hands again. That's interesting. What, you don't need other foods with your hands that exist? Okay, you see, here's the thing.  Do tell. Pizza, I've eaten plenty of stuff with my hands. Pizza, you eat with your hands, of course. Ham burgers, but hot dogs. You don't normally end up having goop on your hands. You do it if you eat it right. I don't think that's correct. Pizza, pizza can get messy. What about... I know you won't do this, but that's basically... What about when you're eating barbecue ribs? That's gonna get all over you. That should be a fricking... I don't like... Experience. I don't like barbecue ribs.  That's all over you. I don't like it. Oh, man, I slather that all over me. But it's essentially like... Obviously, if there's something in my hand, I'll wipe it off and that's fine.  And then I have oatmeal all over my hands. And I'm like, here, Rick, eat the oatmeal. That's what... It's not like I've never eaten a hot dog with my hands before. No, I understand what you're saying. And this falls back into... It's interesting because you have a texture thing, not just with your mouth, but with your hands. It's the whole... What it feels like on the tips of your fingers. Yeah. Because yeah, the food, chips, french fries, hot dogs, hamburgers, pizza, chicken wings, all of those pretty non-messy finger things that you can just hold. They have their self-contained versus eating things. Like you wouldn't take some... You wouldn't take a chip and some guacamole and eat the chip and then eat the guacamole. Yeah. So like what they're doing is like mixing rice with some form of curry, I'm assuming. And then like, they're eating it. I can't do that. It grosses. Now here's... They're seeing it on their hands disgusts me. Yeah. See, it doesn't bother me. And I actually... I actually... I don't think you should do it. Enjoy it. You're more than welcome to do it. Yeah. I actually enjoyed it. It was a really neat experience. I like feeling the textual rice with the sauces in it and eating it off the hands was for me quite enjoyable. My son likes that, but he's three months old. Yeah. Well, it's a very passionate human earthy... I just... I loved it. I have no doubt. But don't be alarmed when I break out the fork. Now here's my question. The right and the wrong thing. Is it a definitive faux pas? Well, I think so because they tell us in every single video that we eat stuff wrong. Well, there's a difference between somebody's personal opinion versus a collective cultural agreement. I think so. I think he's correct. Like, for example, New York Italians, I'm one of them, when we eat spaghetti, we eat it with a fork and a spoon because we're going to twirl it.  I'm just going to think to myself, too bad, you don't know how to eat it with a fork and a spoon because I think that's the most efficient way to eat it and that's what Italian New Yorkers do. You go to Italy and I've heard Italians in Italy don't use the fork and spoon. That's a definitively New York thing. Well, I think that's what... I don't think he's saying right and wrong. I think he's saying, if you want to be an authentic Indian, this is how we do it.  Because essentially what he's saying, not that this is the only way you can eat this. No, because for me, it's always a very... I'm a big thing on manners and what's appropriate and the right way to do something. So culturally, I wouldn't want to be at a place in any country, but especially in India, where the way I'm eating the food is not just considered wrong, but it's culturally inappropriate. For example, if people were going to a formal dinner, and I always gave this example to my kids growing up, of if you were having a dinner at the White House, would you know where to put... You're not supposed to put your elbows on the table. I would do everything wrong. What the... Right now. Ask me in four years. You know what I mean. Okay, if you were having a dinner, I'll use a different example. Please be... At Buckingham Palace. I don't... That's almost just bad.  Okay, is there any place of considered to be higher level... Your mom's house? No. Oh yeah, there's not a lot of respect in that house. High five! If you were invited over to Tom Hardy's house, and he had the table set up with a little spoon across the top, three forks of different size to the left, two different forks on the right, and two different glasses on the right, would you want to know exactly what everything was for and make sure you were doing it the right way? Well, one, I do. I waited for a long time. But two, at a place like that, with that kind of... But also, no, I wouldn't care. You wouldn't? Really? No, not at all. I know where you were. I don't... You wouldn't care if what you were doing was considered rude or polite. One, I think if I was doing something that would offend somebody, they would tell me. No. Two, not in the upper echelons of society, they would look down on you and never invite you back. Okay, that's fine. I care that little about what people think. The fact that I would be eating something with a wrong fork is dumb in and of itself that you have different forks for things? So no, that is not a scenario. And there's different scenarios. Like if you're in a different country and they're serving you something that I don't agree with, like if somebody served me shark fin soup, I would refuse shark fin soup even if it was offensive to do so. Because I will not eat that. Or if they're eating dog or if they're eating something like that, it would be culturally extremes that I just... I don't agree with. I would offend them, not be like, hey, you little... But I would be like, no, I'm okay. Thank you so much. No, I agree. I don't... But I don't necessarily compare using the right fork with eating shark fin soup. Sometimes. I find those to be grand extremes. Sometimes. It's like, I don't know if I'm going to use that straw or allow you to hit the baby seal over the head. Both are equal. Straw skill turtles. So you're all turtle murderers. Anyway. Raise your hands for it. That's different. Why is that different? Because they're my family now.  Not I want to know and get along with them, but I have to deal with them. Her parents, they're talking about her family. Grandparents, aunts, uncles. Gotcha. I'd never met before. Gotcha. So no, like, but I still would have done the exact same thing. I wouldn't have cared if I was having... One, they're Missouri.  They're Missouri. But no, but like, I'm not... That doesn't equate to me. So is it suffice it to say that when it comes to accepted cultural norms, it doesn't matter very much to you? I will not... If I know something in advance, I will not purposely offend. Right. But if I'm doing something wrong, I don't really care. So that's the Corbin take on that.


Hi everyone, welcome to Sistvi. I am your host Shivani and today I will tell you what the best way to remove metadata of your photos using photo effects editor. So before moving ahead, you should know the need of an exit editor. The exit editor is an excellent tool to edit or delete photo metadata to remove all the information that can lead to photographer's privacy getting compromised. Here is how to start using photo exit editor. Step 1. Drag your pictures. Simply drag the desired picture to the Photos Exif Editor. Windows and add it to the list for metadata editing on multiple images at once. Step 2. Choose to edit all metadata. Under Edit metadata option, the user can upload desired exit data in the selected pictures and can also alter Add IPTC and XMP metadata in pictures. Photos Exif Editor gives three editing options wherein you can choose only to modify edited fields and keep others as it is or modify edited fields and clear others and clean entire metadata info. The image properties modified will be reflected in the output image and the things that you didn't edit would be shown blank. Photos Exif Editor also shows camera and lens setting information, geolocation, coordinates and restore other metadata. If you want to edit or remove metadata from your pictures, Photo Exif Editor is the right tool to offer. This is all guys. Hope you liked our video. Go to the description below to get the download link to Photos Exif Editor. Also do not forget to like and subscribe our official YouTube channel.


Welcome to the common challenges of secure VMs. My name is Janusz Frank, I'm the KVM and KVM unit test S390 co-mantainer. I've implemented and tested large parts of the secure VM support on 390. A short disclaimer upfront, I've tried reading as many of the architecture document as possible, but there's just a limited amount of things I can take in and put into a presentation. So this is merely an overview and not a deep dive. With that out of the way, let's start with having a look at what secure VMs are, why they are needed and who introduced secure VM support to their platforms, then we'll continue with the challenges that we need to clear to protect and run a secure VM. Next, we'll have a short look at the current collaborative development efforts and lastly, we'll have a look at the future to determine what features might come up in the next few years. In the following slides you'll see patches like these. They indicate which vendor chose to implement the technique feature we're currently discussing. For AMD, there might be ES or S&P in there, which means that it was introduced in one of the extensions AMD introduced in the last few months and years. A secure VM is a VM whose sensitive state is not accessible from the operating system or hypervisor. Instead, a trusted entity manages the sensitive VM data. The hypervisor cooperates with the trusted entity to run the secure VM. Such a VM is protected against host to VM attacks and it is protected against VM to VM attack. And that protection allows users to confidently deploy sensitive workloads into a public cloud. What's a sensitive state? The biggest parts are certainly the memory contents, as they can contain disk encryption keys and large amounts of data on which the VM is currently working on. Registers are part of the sensitive state as they can contain sensitive data and key fragments. Also sensitive are the VM controls as they determine which and how instructions are executed. As interruption controls can change execution flow, they also count as a security sensitive entity. By protecting these things, we want to combat data leakage and manipulation, as well as manipulation of execution flow. There are three basic building blocks we can use to protect the sensitive state. Encrypting or hiding data, this will make an attacker read the encrypted state, which is useless without a key. We can use access control to restrict access to the sensitive VM state. And lastly, we have integrity verification, which ensures that the VM always accesses state that hasn't been altered by an untrusted entity. Often, only a combination will give you full protection. The last question that remains is who is in on it? Well, basically almost everyone. AMD were the first to introduce secure VM technology with SEV, secure encrypted VMs, and that has been introduced into the kernel in 4.15. Last year, they presented SEV extensions, the encrypted state, which provides register confidentiality and secure nested paging, which adds integrity protection. IBM introduced secure execution on Power on C, in kernel 5.4 and 5.7 respectively. They both use the same name, but the technology differs as the platforms are quite different. Intel recently announced TDX, and Sean will give a presentation about it on Friday. And I think some architectures might still be added to that list in the future. So, as a summary to the recap, secure VMs are protected against VMMs and other VMs accesses and managed by a trusted entity. Most major architectures have secure VM technology, and there are three basic building blocks that provide security. That means a lot of the challenges are shared between the architectures. Let's begin by having a look at how the runtime protection can be achieved and which challenges the chosen techniques cause. First of all, the runtime protection can be divided into the memory protection and the state protection which covers the CPU and interrupt state. To provide basic memory confidentiality, the VMs memory needs to be unreadable for everyone but the VM itself and the trusted entity. With write protection, we can additionally ensure that the integrity of the VMs data is not compromised as long as the memory is never swapped, for which the VMM will need read and write access of some kind. Once swapping is involved, we need extended integrity verification which handles swap out and swap in. These challenges correspond one to one to our basic building blocks. We can make memory unreadable via encryption, unwriteable via access protection and add a layer of additional integrity verification for swap and page table management. For best results, all techniques should be combined so we have read and write and integrity protection when running the VM, as well as encryption against cold boot and other hardware attacks. For encryption, the VM's memory is encrypted by the CPU's memory controller. Each VM has its own key, the key is kept in hardware and never leaves it. Read and write with the wrong key will just result in random data. The advantage is that the memory is always accessible to the VMM and IO devices. When untrusted entities read or write to and from the VM's memory, there are no memory protection exceptions that can interrupt IO transfers. The transferred data will simply be unreadable. Additionally, encrypting protects against cold boot attacks if the key is kept in hardware and not reusable on boot. But handling keys in hardware also means that only a limited amount of keys are supported due to space limitations, which limits the overall number of secure VMs. And although writes to the VM's memory are encrypted, the memory is still technically writeable and the VMM can corrupt guest memory. Moreover, the VMM still manages host to guest translation page tables and can remap pages. When using access protection, reads and writes from outside of a secure VM will result in an exception. This provides integrity protection if the secure memory never leaves the protected state. Also, rogue accesses can be traced and blocked via their exceptions. The main problem is that IO can be cancelled by access exceptions. Fixing access and re-rolling IO is very, very hard. As the CPU needs to know which page belongs to which secure guest to deny access to everyone else, some storage is needed to save that tracking and will be unavailable to the OS. Sometimes the tracking is even more granular, for example on a cache line basis, which will need even more data. Additionally, we don't have cold boot attack protection as the firmware can clear memory on reboot, but firmware doesn't know when memory will be physically removed to clear it beforehand. Integrity protection is needed in three scenarios. When the VMM can manipulate a secure VM page, when the VMM can manipulate the VM's memory mappings and when memory can be swapped. We can solve the first scenario with access protection. The other two can be achieved by making the trusted entity, safeguard, swap and page table management. The VMM will then need to cooperate with the trusted entity for those actions. On the VM state protection side of things, we need to make sure that registers are at least unreadable. At best, the VMM can only read or write a specific register if it is necessary for emulating an instruction. Therefore, the trusted entity hides or encrypts all those specific registers. This is mostly done by providing a dummy VM control block to the VMM and the trusted entity manages the real VM control block instead. If interrupts are injected at the wrong time, attackers could significantly alter the instruction flow to their liking. Therefore, the trusted entity needs to safeguard interrupt injection and only allow it if this vCPU is eligible for an interrupt. Once again, a dummy control block can be used to manage the VMM's interrupt requests and copy them over if they are valid. Booting secure VMs is another interesting scenario, as we need to make sure that only customer-approved executables are booted. There are two quite different approaches to that problem, remote attestation and encrypted boot data. When using attestation, a trusted entity authenticates its hardware and the VM software to a remote host. The advantage is that the customer can roll their own attestation environment and quickly change the authorization values for VMs, firmware configurations and machines. On the other hand, attestation is complex to implement on both sides of the equation and is therefore a great attack vector to secure VM or to the trusted entity. Also, the attestation requires a connection to a customer's attestation service which needs to be reachable from the VM host. With boot data encryption, the executable is fully encrypted or only sensitive parts are encrypted and others are measured. On secure execution, an executable header holds key slots for the machines the VM is allowed to run on. The key in the slot is used by the trusted entity to decrypt various things and ultimately the trusted entity decrypts the executable into protected memory. When encrypting, we have the advantage of not needing to connect to a remote machine which saves us some complexity in the trusted entity. Also, if the executable is fully encrypted, the VMM doesn't even know what's being run inside of the VM which makes attacking the VM a bit harder. The drawback of not having an attestation environment is that updating the executable is painful and needs to be done either by the customer or with help of the trusted entity. Additionally, bootloaders like grubs are sometimes run in the secure VM and can create complications. And lastly, we have the classic problem of distributing and verifying public-private key pairs. All of the solutions that I spoke about need extensive tooling. AMD has the SAV tool, IBM C has Ganttrod image, IBM Power will have a conversion preparation tool and I expect Intel to also release some tooling. It would be really great if we could combine our efforts for such tools if the differences between the vendors can be kept. Now that we have explored how we can securely run a VM, let's look at how we can achieve IO and swap while maintaining that protection. IO accesses on an encrypted or protected page will result in garbled data or access exceptions. Therefore, we need a way to unprotect some special IO pages. This has to be done via a guest request to be secure. The guest will then bounce buffer IO data to those pages. Of course, a special handling for IO means lower IO performance, but I'm sure we can work on reducing the performance impact significantly in the future. When doing swap out, the memory needs to be made readable in an encrypted form so it can be written to a device. On swap in, it gets protected, integrity checked and decrypted before the guest can access it again. The VMM request swap out and swap in from the trusted entity which will safeguard the whole process. As with the IO before, we take a performance hit when swapping, so we should consider not using secure VMs in a memory over committed hosting environment. Let's continue by having a look at the current development efforts. The QMU host trust limitation patches from David Gibson aim to unify the configuration of secure VM options to make configuring secure VMs easier. Unfortunately, it proved quite difficult to find a common solution as the already existing options as well as the architectures of the secure VM implementations differ quite a bit. Also, I'd guess that the developers and maintainers are currently occupied with secure VM extensions or in Intel's case implementing secure VM support at all. The second common focus for development are the VDIO IOMMU bounce buffer encryption or protection hooks, which allow the guest to do IO over unprotected guest pages. AMD SEV were the first to hook into that API, so the naming of the hooks has been rather SEV specific. I expect that we will see some changes in the code, especially regarding performance in the near future. Lastly, S390 already hooks into the memory management code of the kernel to pin IO pages. But I expect other platforms to need similar hooks for swap or other memory management related actions. But as common code might need changes, the resulting discussions could be lengthy and inclusion into the kernel will take some time. Recently, we pin Shama posted an RFC to add SEV address-based ID limiting to C-groups. The problem that needs to be addressed with this limit is the hardware resource limit problem described before. As the trusted entity can only run a limited amount of secure VMs due to hardware restrictions, a C-group limit is needed to manage the number of secure VMs. The other architectures quickly expressed interest in the patches, asking for a common approach to the problem. One of my main concerns lately has been testing. On platforms with boot data encryption, we need the public key of the host, the secure test should run on and then we can simply encrypt the tests. On platforms with attestation, we need an attestation environment to run secure tests, which complicates testing immensely. In general, testing is a very important topic for secure VMs as there are lots of changes to the kernel, KVM, QMU and LibVirt. There are new kernel compile options and start command line arguments, IOControls, new instructions and interfaces to the trusted entity, which need testing. And upcoming features will only increase the amount and complexity of new code. As a development community, we need to make sure to cover as much of the new code as possible to provide a stable base for the secure VMs to stand on. Lastly, let's try having a look at the future. Migration is one of the most interesting and complex things that will be added in the next few months and years. To maintain the security while migrating, the migration data needs to be encrypted and integrity checked. If the VM state is hidden, the trusted entity will need to make it accessible to the VMM in an encrypted form that can be read by the trusted entity of the destination. I expect backwards compatibility management to be one of the most challenging things that needs to be solved. A lot of the compatibility management needs to be handled by the trusted entity, which moves large parts of the migration logic complexity from the VMM into the trusted entity. Additionally, migration policies will be needed to determine which hosts a secure VM can be safely migrated to. That decision has to be based on the CPU hardware and firmware revisions as well as other criteria. Both the remote attestation and the header when using executable encryption will need new data fields to model those dependencies. This will increase the complexity of the trusted entity and of the support tools even more. AMD already presented their solution last year, but I expect the other vendors to follow suit, as you can't have VMs without also supporting migration. All in all, supporting migration for secure VMs will bring us even more new IO controls and interfaces to the trusted entity, which will mean a lot of work for developers and maintainers for the years to come. Also, I expect to see secure IO devices which will be bound to a specific secure VM and only answer to that VM's IO requests. Most likely, the devices will also need to authenticate themselves to the VM so the secure VM can be sure that it talks to a legitimate secure IO device that supports the kind of IO that the VM needs. When providing such devices, we will lose a lot of the mix and match flexibility we have with our virtual IO options. Maybe such devices can be divided into a number of separate virtual devices which are then bound to a VM to decrease the number of needed hardware devices. Modeling the VM-to-device relation for secure VMs in LibVirt and other VM managers can get increasingly interesting in the future. Let's see what the hardware vendors will come up with and how many standards for the VM binding and authentication we will get. After migration, the next big feature is certainly the ability to dump a VM from the outside. With Kdump, we can already save a dump to an encrypted disk, but Kdump will only work if codes can still be executed inside a VM and we can boot into Kdump. If we can't run dumping code inside a VM, we need to ask the trusted entity for help. It will need to provide the VMM with encrypted access to the VM memory and CPU state so the VMM can write the dump to disk. The dump needs to be encrypted in a way that only the creator of the VM is able to decrypt it. Most likely, we will need new IO controls over which QMU can request the dump data from KVM, which in turn will ask the trusted entity. In recent years, side-channel attacks have led to significant problems and we went through a lot of effort to introduce side-channel protections in our kernels. Of course, leaving such protections to the untrusted VMM is not an option for secure VMs. Things like enforcing SMT disabling, disabling or scrubbing, debug and performance counters, or registers as well as cache flushing will be enforced by the trusted entity in the future. The VMs requirements for such security features will likely be needed to be modeled in VM management software. And such protections will be enforced via remote attestation or options in the executable headers. In the last few slides, we have learned that the basic building blocks of secure VMs are similar and the differences are in the specific implementations. Secure VM technology is getting more important each day and its complexity will increase a lot with each extension that is released for an architecture. Fortunately, we still have some time to come together and discuss the collaboration possibilities. Now, as most of the architectures have introduced their idea and implementations of a secure VM, is the perfect moment for that. Thank you for listening. If you still have questions after the upcoming Q&A session, feel free to reach out to me via my email addresses or on the CKVM ISC channel.


Food is more global than ever before. Reduced trade barriers, advances in production, logistics and a rising demand for food have powered trade and global supply chains. These processes have unlocked millions of jobs supporting social and economic development around the world. As food crosses countries and oceans there can be harmful impacts along the way that can take place from farm to fork. Let's turn to Louisa and Dan. Louisa owns a major food store importing fresh and processed products from suppliers all over the world who rely on farmers in producing countries like Dan. Louisa is paying a fair price to her suppliers and is under the impression that the producers are treated fairly but this is not the case. The truth is Dan is not given an equal chance to succeed. His neighbour sells tomatoes to the same trader but has joined other producers in bribing local officials to expand their farms to conservation land and to use pesticides excessively to boost their yield. Dan is producing less and making less but knows that his farming practices aren't contributing to deforestation or biodiversity loss. There are other problems in Dan's community. In the tomato canning factory women are being paid much less than the men and they're working in unsafe conditions but the country's labour laws are weak and they fear losing their jobs if they complain. Other communities face other problems. Just across the border crops in high demand are taking over land once reserved for local staples affecting food security. Attending a talk by an NGO Louisa is shocked to discover that her business could be contributing to harmful impacts through her own supply chain. Louisa learns that the OECD FAO guidance for responsible agricultural supply chains can help businesses introduce risk-based due diligence to identify, mitigate and prevent social and environmental impacts in their supply chains. The OECD FAO guidance provides a five-step framework for risk-based due diligence, helping companies understand where risks can occur in business operations and how that can impact on development. Following these steps Louisa implements a due diligence framework and new company policies to help her business operate more responsibly. She's developing a code of conduct for her suppliers and knows which questions to ask to ensure they're doing their part to address risks to people and the planet. She is also engaging with stakeholders including NGOs, worker and employer organisations and many others. Dan also starts seeing changes in his community. The trader that Dan sells to has introduced signed visits to assess producers' farming practices, addressing issues such as overcropping and social protection for seasonal workers. A local NGO is also promoting awareness around environmental issues and there's even an anonymous hotline to report harmful practices. Women at the factory say working conditions have improved. As for Louisa, business has never been better. Ever since her suppliers began to consider risks more carefully, there have been fewer development impacts. She also sees greater confidence among her investors, increased customer loyalty and better understands how her business can help achieve the sustainable development goals. Responsible business conduct in agriculture can help build a better life for everyone, bringing more responsibly sourced food to all our tables. Learn more.